From 2cc501811282e1c2937fa870f0c53cbecff8e32c Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Wed, 16 Jul 2003 15:05:52 +0000 Subject: sync with 3.0 --- docs/Samba-Developers-Guide.pdf | 5258 +++--- docs/Samba-HOWTO-Collection.pdf | 21876 ++++++++++++------------- docs/docbook/configure | 2470 ++- docs/faq/FAQ-ClientApp.html | 11 +- docs/faq/FAQ-Install.html | 23 +- docs/faq/FAQ-errors.html | 21 +- docs/faq/FAQ-features.html | 39 +- docs/faq/FAQ-general.html | 21 +- docs/faq/samba-faq.html | 5 +- docs/htmldocs/AccessControls.html | 153 +- docs/htmldocs/AdvancedNetworkManagement.html | 37 +- docs/htmldocs/Appendixes.html | 9 +- docs/htmldocs/Backup.html | 5 +- docs/htmldocs/CUPS-printing.html | 401 +- docs/htmldocs/ClientConfig.html | 3 +- docs/htmldocs/DNSDHCP.html | 3 +- docs/htmldocs/FastStart.html | 3 +- docs/htmldocs/Further-Resources.html | 7 +- docs/htmldocs/InterdomainTrusts.html | 31 +- docs/htmldocs/IntroSMB.html | 15 +- docs/htmldocs/NT4Migration.html | 29 +- docs/htmldocs/NetworkBrowsing.html | 205 +- docs/htmldocs/Other-Clients.html | 33 +- docs/htmldocs/PolicyMgmt.html | 47 +- docs/htmldocs/Portability.html | 21 +- docs/htmldocs/ProfileMgmt.html | 129 +- docs/htmldocs/SWAT.html | 41 +- docs/htmldocs/Samba-Developers-Guide.html | 340 +- docs/htmldocs/Samba-HOWTO-Collection.html | 2691 +-- docs/htmldocs/SambaHA.html | 3 +- docs/htmldocs/ServerType.html | 71 +- docs/htmldocs/StandAloneServer.html | 33 +- docs/htmldocs/VFS.html | 47 +- docs/htmldocs/bugreport.html | 13 +- docs/htmldocs/compiling.html | 37 +- docs/htmldocs/diagnosis.html | 13 +- docs/htmldocs/domain-member.html | 122 +- docs/htmldocs/groupmapping.html | 71 +- docs/htmldocs/index.html | 73 +- docs/htmldocs/install.html | 45 +- docs/htmldocs/integrate-ms-networks.html | 71 +- docs/htmldocs/introduction.html | 9 +- docs/htmldocs/ix01.html | 3 +- docs/htmldocs/locking.html | 121 +- docs/htmldocs/migration.html | 3 +- docs/htmldocs/msdfs.html | 5 +- docs/htmldocs/net.8.html | 8 +- docs/htmldocs/optional.html | 51 +- docs/htmldocs/pam.html | 81 +- docs/htmldocs/passdb.html | 223 +- docs/htmldocs/pdbedit.8.html | 10 +- docs/htmldocs/printing.html | 199 +- docs/htmldocs/problems.html | 13 +- docs/htmldocs/samba-bdc.html | 31 +- docs/htmldocs/samba-pdc.html | 59 +- docs/htmldocs/securing-samba.html | 45 +- docs/htmldocs/smb.conf.5.html | 145 +- docs/htmldocs/smbcontrol.1.html | 4 +- docs/htmldocs/smbmount.8.html | 4 +- docs/htmldocs/smbsh.1.html | 4 +- docs/htmldocs/speed.html | 23 +- docs/htmldocs/troubleshooting.html | 3 +- docs/htmldocs/type.html | 11 +- docs/htmldocs/unicode.html | 11 +- docs/htmldocs/upgrading-to-3.0.html | 7 +- docs/htmldocs/winbind.html | 95 +- docs/htmldocs/winbindd.8.html | 29 +- docs/manpages/smb.conf.5 | 174 +- docs/manpages/smbcontrol.1 | 5 + docs/manpages/winbindd.8 | 6 +- source/libsmb/cliconnect.c | 2 +- source/libsmb/clientgen.c | 2 +- source/libsmb/clierror.c | 2 +- source/libsmb/ntlmssp_sign.c | 14 +- source/libsmb/smb_signing.c | 4 +- source/passdb/pdb_ldap.c | 7 +- 76 files changed, 18571 insertions(+), 17368 deletions(-) diff --git a/docs/Samba-Developers-Guide.pdf b/docs/Samba-Developers-Guide.pdf index a2aa5f1b84c..0ca86fa63e4 100644 --- a/docs/Samba-Developers-Guide.pdf +++ b/docs/Samba-Developers-Guide.pdf @@ -1389,11 +1389,11 @@ endobj << /S /GoTo /D [930 0 R /Fit ] >> endobj 932 0 obj << -/Length 250 +/Length 239 /Filter /FlateDecode >> stream -xڍJ1s2f2E-o2ϝ^A (!'RQ)T]Ţf{h$v֧sa>s`|?Y01߾U[gendstream +xڍJ19&3$9'sbZh|{'R AȠ>2C1) p > endobj 944 0 obj << -/Length 1050 +/Length 999 /Filter /FlateDecode >> stream -xڍVM6ϯq@$1T&7$ Mbۭa~ryȽ4KWB#wCH%o Jd\e  w(y{EUm'{UĊPt fi-08@"{[zIR+I_?-~H,^8aNmDv>Y3KiGʮitiꮥpǧb*ǓU~33sq45G&ki˱P߻϶J o4F?#n`hP|R\齕$İv mZ[[%,"RAO,5tri h9RĐXGiAM3!|[ƍy;|!%>V= L4 -Mc57BѸX+8c}ݍWs -i"1s{z9VsNp ,Q5VK΍6T 5-0 ٩Y-T^'mQ_8(ü3*n 6ȈV:[4I<  Cp ,t§֜(јfSϺpv'R4NI_e]ج”2d6>6soꊁ&V'LbpFu )׉bڱ UI&4 Iێmd:R|#A›d0a0,֞JerAr N è<&գ;QDoEp >(0X>bKMF]7_f?B>W5G/+8Aj5P ͌ӹ:v.,ZFo4" +U~47v>T"ȪoXN%}˛H{tNNЀ¹VhZ|鬳$0XsY,u)FKwLQ] +xJE\b1M` 4 W,x0oͻX:MeӌI [ 0ɹf϶JdJY"lly>҉*fJImJVH +epk{;Voli*1S%Z~M}|EAx2j5p QqO֢[K +reRkc4pSO37O%ˇaa"IU:5?:oX_계FjxUbޮ8GIlMTӓ> endobj 961 0 obj << -/Length 3113 +/Length 1930 /Filter /FlateDecode >> stream -xڵ[KsFWAA֖d;{9@L1C Rq_3`0/0S>vwOt7t?:9x5+eArNgE6[7^P#.3+⧟ȼ~U5^\p~sq{^NzUKVpR|v3"e|R\yN -QYE>Θ٬{i]7K.Y|⛻^}JYJBsrQ"i/C $eQs98aFйgsԱ]g4+G –jv5/>|eS,\52F=}ՠoͨحStZG[ś/nq/|hz{_oч -a/@4|fV9  AU*u2H!S^,]A#-9xeӂ9Fs "4Dm!xyV8(s:tkt]>* -),ϭYEg/.On ϋ4FfAW]`]z=6u۴QV$郿i))y_ςlL8y<ה@ұrv{PkBy٣YXU$B w `E2l1!qۥU YzLtFdj)kݲ]kU[֮c~Qȃ"]5ޅL.)3P7~65B "[qaN3 -5| Lm銣 mtJs?~RAD) -'B}5Rţ\`ɥ:7~ChpNqz^%SFL?J os%9M8F~=?f}PY?4?|`sp$-5 BEOkvtL2cЕ`k0 f5*^W[&K/XAx* D񤥓*/~{){ٷ+&W"] 9ՐA_p( 2q~hIz$p1X;9k8Ā0'ޓMB wca՜@ 8"3 -^'0HMF"<;GiiS#j;Pwڤ~DHrBBt?LЕ`k0D}Ie$(r" }F8&~*F\>K#uuWcZGo"Wɘv2op%%G%L'3E2eljT?cYs}S$.M<@!*l8epmG!}_)jv#=o?48v2C#i" I`O`&Wݲ0xwjgwq@ (8ctr J&NA=ثY9Vb!b qOF]賺<%'UB1TVaB-]q{̷ ^o1W7UBտA(hp`fP#O8=WMEB=q\L4]>v2;bЕЎ !2Z( ݱ]:Ҵk0J%ʼn7)U#DL;J kk‘5a}WWԄ5C&}7ÿعQ!A3Rezd9Tzs宿9><o+endstream +xZKsF WV>Xt:r$M&vXImESl(%:/%eEز=4%DbaC1zep1Z8S{~g z`o3vslUNVO1Q9bvG3uMY< +EM?p|W 'W$1n ) + џ׃ۗ +m3mxf)&7o"#%-R*F^MUge[)oo4CE<4o_$op[_q=+o:QկEW9\ ++S#d3sbNgAA $qho]{B]DGAX4@ {4kyd.OeI6*H׷DXd\7Ia)gRfv5eMQĶ lbhs{x`Eve:80Ϯ8t%z}o2s'Û"}gΌɌ})j@K +cr11{Fқ&p8&Od2AH_`Ÿ1?b Ci٦6$✤CI6[eYFW˺wdWf RZI5q9lm]x9(]d{f 3F.%JjOFվsSq@&"2,/5pgHEbl`3).4wYuC1% +GȜ O~\.]&l߃QP&b{$g`яě ;CIV5%`Y%wE-< TJ=(ywI輎idP3.Nv0,uj[/'j4`oޣ N֜&XQ+*mw'ÖL~&At*%iZ3cM>[HUPꚹ)l:oxI =>`ъAqg cɒ邅m ! 0}=,o\_\~y =uѱ|\FE)]-U1LK쮊ܻN07t3PLkUo7AmeHbq.տxuE$pW| > endobj 1025 0 obj << -/Length 2400 +/Length 1448 /Filter /FlateDecode >> stream -xrz -.*w 89JٲcddAԥJ"0r5N\>ekșF7 4G&lA#fz##<5g~<" -.-'XRz1V#p{~x@1 nPHPjp5uxgjOG~@)$m !`l=fkT6H*i"g!F데E6,2kgј ÄGdb>3b>͹wҽ޼^׋¼׋{F'sԽǓǙ{a2W}w{B2쳺3ہ;I/+ - tJDW:HyX:FP"뫓wFṡWmDH _bs6 'xVSGv\"}4Uf"X`5Y"8m lRdjʾh7+%'/#R}' -̾ f_ٛ=~]5/d**3B`5{[^` }ǥ,L_6923x,%W5|G[*\dCc"zxJciO?cf̗zəg@;#2H4X&MiKIV"EQ,f]iMOOg߱=/e5I^*O2p-zB+Ϛ=toX`Uziξop2Τ&\yGD ||vn}q& -LX" e0Κ׈~+C8ߌ!_le*!d/dVA -ּFX!G+Mۼ2ӗx2ϴ'"^y%!%ՀiYmE8N]z:RoKғqgbK ȷc w;LMr2P$1k^#h)Mk<24$&n0DGSOG1 >cl=x<2b)08 t#SFg;vD'$j$߈nsl^$4Ӈ5kuǮO2ֆa Y .q׆9֬T˧V6+풹zFۥXgV2IK|(-Bhil̢>D5_|sԬUz"+톲f!ݸNӻ]'w2C;u@I'ULo}ּT,P.:W@]=Nr5VP' +Ȼ5VGv]MoIz*x3ae0@he`6(ѓmfUn d[6w Yd۲5P?XCK J_ɬ9\cyeNeUR>U_7*5X/C_ɬ6[y`G':~&Yd/dVIMշyXFυ)g^tYn3L [R.]wnM}E5UfX`5+jRU9 gd{m_? -kn@OFuAvVkHf1к`X#=֍5H4ljendstream +xIs8| +*x:BЕmӗ>8`*b2`&oObt*Dc\EUUS\>UPu=W89c޺ >b2o >Z'W(TDP _ZӑW|'Qj;+؋0+rcro œ{JGETc,հ#ݘĵ:қ(iFۜ>$8d{tvh7g1(3?T<99TMjê+@p~{A-a1"Ļ4[w0])ϯ9BobJ?/Ty!;o^/CCCHrxFfI RR:.sPH[t( i0nE8}IIa}ŘYq814Ѿ1GIM(󼐫1<'):ړeo:l$S67fw3ѡwgq9Fc'dNF14& 3Y&"LQdl s Ak >e`σxðs}>r&5P)[lhߪ/ޅ%9 X\V5Z3YQ&,Pl}Я$z:@, ީҰHۤ&^L&i>y}FW{Fą?iw/GbD8,!8tv FˇӸ' ,-5: GMJ!÷3ΧZyMF]Et +h:x0.=X*0c^OkAHV#e^ed"ـ4t \;NEs1dj 0lIڃO\A>JU*45GJjBL;Eto1U%f0 H' J.%Ww◙|lmhtŮ,%ħT1<$]љ8U&'U _PǞDS# c3)|' U$]V|1:^<[L ߥlџ֏3CLoj֣^5{Mɴg1N}h A7+XٕuTDV:KHR?{!MfFp0.-`56(B[ـĶ ״AMYhhɛ +dJu @^Miǥ8i,̓<\mpI%)RfmڇjFS J=4l/lRX9*R!C{H{ U6%r +.̬׼!cYp&hbsvt싃׍[j`&6}KW#ݼjkB]c A{$/!ʇȿ?عendstream endobj 1024 0 obj << /Type /Page @@ -2020,24 +2017,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1070 0 obj << -/Length 3095 +/Length 1925 /Filter /FlateDecode >> stream -x[s;+Z;4@` 1{MűKEn.Eխuܫ?ܓU Y#NqorW/î&eVVSohGj9 ?7{/GD5TW?zSe› -FMӻc"Ψ;-ec=+J%͛y  Q̈́iG ctS/ԥl;`(8WU5 -|o)B."V볞>u&bukY1; Iۢe4#R!AU\RπJ]S?J,+d璮XrnB ȹ0VL$E/gي? *3w2 ns{btassQWQ=q?܀ :Ք!wPTLEFI:\aLRi`?:Q)l1kۯl -sƵj4ncbE+kqXo3j=3'3 :}O %l3gqoU;L; oc:M"Mt0vvE~DTQ:L}^SEx1ל,'C.ϷxɃ|Bb;a0ĒHnp-gk|V5+(V@8F#,i YdBvmL󕛰ן$]ûbS P(KZIkDw(=O}nm_yplunQ 8r@(i 9MM0>;UK_]mm^&[ 41x ]FäZ7Q*k _H&Z2K ;ܚcR_j>U5^LHb-"E[5 -IE߹i+!! ۍqz=UJ>ݮԻc%bpʥH ҢBji6v?֬E/g5!xWbHXG@Ik.P-}P8=>7K&Iv;p'qKZnf6syF8ϫ.w8r޺k BDDBi2hvh3ε.Q 8r(i AqAP طGvM0`:糮Q -Q p((b uQ \Kʝ}8WP3;Oue - -0}Igdt뿭_]3]W ywY H HqA0ZCOfu3 =..~<:7abZGDX;u -s~lqZw|!mt'ab6f;'¬v%bohoFm.zJ*ֆa>F*@ bVB~Ů.~5_Nޥ=WT>]-}O+}GTmv~rކ@9 2Rd#otn8-Σv:G{٩<;3K}eo/(1~]@׮+Ļ0܀뺨7\mF6=6N޿{ʓiRf}kx;OZv*Btz_N)ﶎ))"#7TZ$ 7nʾGsKWQ:q9w.i DX/ֳ|75{R?b‰a¹0ЧSF@>hmj^ߵff9'zz}Iu]Ucsb܉aܹ0֐#AX{n\Jv9f甮Xspsn5`$‚G̮~“Sf=i:Wt -p7ps`%X.4 դNg%T"+ yQsNcCT-*Y^Y0dUXI*!Z.VtjͣP5N7C}M2̮X\B -V\IAI-' 88d{N9я+]9G0sIkHPŻq[sҙS@\%ҵ+(V`xf,i ,NKgLg#FD+(VS-i TId;Aatx<ms R|ё0L; 2Q[w4୺<8z]Eę0`IG F-m;H]!}"Zz5L*-%a?V27$z)EƴNIiO 2 fuOucf`5"b1s2zDϗg51}Rb?a0Œ@QTKڢ({tz]j:{RfsmfN{>I60v\ӺŠbX`X07Sւ%SXҲKگ6-cy;S(an ϲogkCL+I\Dg'v)i `G\&^iސ)q}<״XV6Vn 5U KB^lxVFe{>4ؾ*SFt -XXr`,% ɺ[,6H$3^ϖ;}r>V}uE -gr`D%QPCE uukTckNHL}\nNdV -_{5xTJuW;Pvcu#'7V9*Iwa;Zp/ccƺv0+Tq(Y`<_-8urN% *E]"V8ɵaRRD$i{k3%m'Sv!b]&Db&^zBnmB!8qlj? -Tsq1Lw{q;&  9Κ/Pu*Ȕ)Fsp/D|b@MxKD(EQ{y]ϖendstream +x\KWH+M3dRdik?[Ew/"Dt NFSn% *v *2I}}*?뱠| +FAk^3ĎSo?I鹁4fHO-;E?y{cmw"mr*6~}} e߼m%A4`'Nsu<Ǜ_s|D>9-\VΝOa"N8]NTDysV[x{e-S0.]4hfMlCJ/iܻ,OB Z -e [mƘ_KH'LFO9.ǑO}ȑxjSjk]GNEs3E)9Wƙ"qFm$.Vy]ځ(]V/^`7$v$6?Q>3a:>=NK3 Bˬ4d({arɝ!jr95 +%h*O!5AI 4]"euU\Dur+%E,8O(};˸Akn\ , QF|qjãpg?l$׮ bю4sWJv RaxF=ʭU9@Hsgs Kƥ'9<`84C2o%uX<'m1'EjcGU!!Rp mj|{Uy/9VL10mijcwq2NoQ_:P&kk[ƛCV@; }Pkܲ$ ,/?N>:z_a}lFc%H 6A$v[>sڤM* Mmu&RrnC=~0̡Ekc`־mӾ$~uiJ3\'- ˚; 4I[-i.g5[+i`سU ,K<ͻIb"U2YѦ.䡂.ӿ˃ 8aDz0Q]E +՝lPnI3oݬ0` +q96AU:$, +@IḸ {t꩝tQ&DʳO +'|eRH$yoDQrtzeN[E@o&6E@5@{(Ór̲`̈́q(=Qܓ{mճ|>jMGKV,5&ϧ_<@]ZiA\k,߇(W~M\[m䅌rPyP͢tdK|en?wBvf#c~z(xgaw$V& _h|~3U;gn,G5Tu_~) I=<~ SVlt@u۟皁O%@ 7U:[>WTߩj<(-}gޠUiJhT?"X LAAtT9tȎv-k#AYrr dwU{~`H^dۉJA@!p^cm'+A6Q 70CaT;(3$WI\ +{dnsTBmR +D%jq6^_f0t4!F;/ATQ0/%0"8:|b>}qRm$܃%}kxOIqnh (\zHNEnY~:G3.)Vz?LGUNĽґU3r3r$Es=m.8g!vC=hO%{`v9\ci/dxh !vPoP+|jײO]qޙp:endstream endobj 1069 0 obj << /Type /Page @@ -2384,23 +2376,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1124 0 obj << -/Length 3444 +/Length 1932 /Filter /FlateDecode >> stream -x]KsFWH.'fptl%qʱI{HrJÊ$&$<9nE:J9cBtҘDKntK$뻳f\;yvWg_}Ӛ nr."vru~tt/Wߟ_EřiʹUO4g ᝞iBnrw&$'RpǨ]'5 -5͠2k՚()I+TsNftJlZ5}懲1m2晲U -BE9|s#bu ٜNwӘfin6%:!""$ #\0y)nv*(%|ЁVj$`1ph9^"Tc, -Ek)"5b՗&1'r?{zM.s9Z#s%16= -bZ`ĚԺQRY!F0SLQ5_k &j5ϔ FF=_//f3 $]z/[Oc>{IGU /YEԍv f5Ŝ-=W._\&87槏?-2ܰGBUKk0cAq" >40Fa KQ}@:Ӥlԅdlr4yf = L5C|Oh75dxhOݤkt:̹ 91W Mvd!Mgб InBa0P!!Z%Έ yȔ9?F9 ~'6ڽ~j(^~8=3ƦI!L~;ih'1&01B&EI~oX%EKuE}k)Hk{_za$;w^9r?i q+s[VdvN_ݗe޺S%R۵Q9j`q*TƬF*sNTSQ9*_>8&<7晪T|M`j=Päl6D~0!Q; X2m~/`?hG-.!eAìFN\ 'Y̔d6oib/*&mEPC՘CFrK"*$2/)|9zr(!Cp+Vȡ̭KCZ?젤3Z;>fe̹KN5UTܣ6D#>KR i}O$ -%Re#dL#&ͽ#7XbhTqj5ϔ ԨsΩp;Go  m&CvZjV ҶcMbYalk`l1[HU}}1s]+|cKb|Y ìFM$[_߉_3;|:Ea,I A61l,f5 X'HdlMq#LϼCG™ppԔVr8{x}+7z,I 1 h!k`1H_DUQo|Gv/7}T2ϲ`7!fŬ,|=E}IE7~,I 3 , g 'f5).|E7z,I 1 ( c #f5]uQtÛb]6<.g?ky~S1;$vʪoX8gXNjX@WU F)M: b2Tjت_5\#ҦZ qj&ÚuXjHM8ixT}A64~,I 3 , g 'f5);"4/|64z,I 1 ( c #f5[!I3ic ۵ŏSE쑅8!g+!ƬLp-r}e_BgC" Y;YxRM4%, ^8&1,00XzIl)-J﫵Yo6;+._A)Z&1,00Ր%/ƏD3I`faPb&5BX豯pR[S8Ak<[`k8Jϸ֏~ma -BY[> Qȡcc؟ Hhih.-AK"*?zendstream +x\[S8~ϯȣ3Qu +rXz})xz}9077C+cf[8 _-};n1vv;>-,WS?|6NN⟭0pE:Jt xl`6LI`ah0_0 z,-o͡Jq +pz Z{8p=ޫJ$d7'T +'+hp],*PwMaOpt7V2A-ٴ~_4"%N밀۴n8iɪ }c.YS3JñxIekl`8mjIC9Joudqq)-G+(rQxS*)ZP +&h5WW^$ŕQ&y/i +9Ns*b;: >nYpL+J8%+3? #ۉz*n ${*U`{[\_ve>>0i*\[i홙7̌quخmK]Di{ڹ>pa~!Ts5Y{AVp3 _wL-nҚEB]|a)r g8Z"l*J6eq9"䏤@݃pۈu+Mua@> \$TIic)6U4Sl" +dѠT`"$?A+PJލVzQ0> t3fԓzm^.k5{]G> sԌ0 Mg:Ä}fgx7%cک^N=DPn \+2l`]N`j7 @鎳ӛr#@plϣv#b +is:f'Gl k$P>'f^zMy,ttkM.v?[[DIIĎ'Y"GN8\6ܨ~58Ye3kVٮ`Xl*9F[YxL&vk~59~@*MqxÝ)-h|&4im"|ec8ǒ{&HKaO1ecҁO)SB+4RWdV_]S-4 sМ> I+NYE +wvٽdsZպ/8w!x1Gjy5ğ6{X5^HhV9k$W!A J2#nsRAA&_cԶ ,^`VFX5+,)q,׭p7L\"E&n>=r?*pE 5ii[ I$5@틾ad42.Ҧ*t +VhfBP[XĘ &oDHTeNpZƎe p0]PI>$)< Ơ˸he +@N5VOv2u_9E܊pPͫR!> endobj 1177 0 obj << -/Length 2719 +/Length 1586 /Filter /FlateDecode >> stream -x[s۶)vč;'ick˶Hr3 L8x<"),w )QcHKntK$ftmyqD}/2<|ېFx!kG'v>6?f?=g)~]~YC)[_Z ,qb^#Φ%硧[_Z -c,1b^C'T ؓnrۯ,jiW&pTT33j/HuO UkhRuD6:rm|-d̄q81g+I'wqx Ř011JfUt"A!= X/C-d$`1}rMt6O)ۺŒVˤ*D\FLt'Z_Z a -C,)b^J[XqVZȊ4=-\m?|e׳='PK!S0N9Ew7]`C1OKf5ц2ü\t0p?>e6>+ - U'99n=R83b"F@hAږgP*_3!83a%p81R;PZ -c,1b^c╊VǙ[2Yz!j&3m&2 Fy-T6C|-d̄q81'7[t-d`11a6%hK:1nzfB)~Iԧ9/w~|vluWRNfLo e0ekVNxט09oX _ٍ=|xNw Xt^Z -b^C&#v'ԱW` =8Qj S;4_uIMa& ɖ(FA'E$sߧ\+KiwppB7[ż*:BU)%\_Z ,qb^#N.ICϸҵ1Xcļ g4*.*79Y|g_]{q?`,.hwu13j0K{7RPfkR:5_Zj '9D yedqV -ôŠ3N^ jMfLioNN~cv5\nLfxxAJԙ:D'55֔LzY`R4{Ej'3q215tUDrӍ@_|3R~6.Ww2Cxgü`ޘئ ˰|j:s3o2CfBK -b^c4)fI4G<ٺ|=X,Z!Ȓx0; qxQ2Mwz`땽WB*X+3yCFddY7a`J0_Z` I+(qH˅! 3)l8l - TMFް2\$k юC9v^CR0)[HtBDe;"hʟYܔNv=<#x쇛jX2CX.y%",R;%EW14ᾲ{h}_ v9֖xkhuq=/\/WbtKZ(yzj&3l1L &ydE:$xܧZgȿ)NՁkU-d8`@+s}vqegv]Jصޛy :W5gOwަqĖ`j~z\d ȴL:d.,K7l0dOX7Ó׾9G~}-H8w#EΤ8EQSzQtsYڦ,ʂ`Ƽ0Av&A^%^?y2k3H~E|q_zF8c.k#G4}N!(ic .MYc]B7Ϧp' G،&{ڿVª>q< *)Lh +x y1|p99R㠿/U8FZ, +:z|g0,FfuɰU(F}1mrLq+SƆթaނïfL8#ld:Rǻ ~`\ ,H9XX1L{jB!.$` H۶* 2^&U>KSY˵N!ض&A֯ 7׸M ItMu=s {#VMjolX. b#訩waݏLJ]C]C8$ J&q҈G 04/m\$SLJYRfsP֡XHX-:kJR35%V^jx$/†+ѡ;/21nSw~A%1p_O@T0"|RT,5(h6 2=I>"pD·+$8Yt|,,2ke6MvLIA-C2*,LLj3Zrޠa5"}tKמ`zjC[&[}5JG֬ӆ!oޟTN&΃܅":ظQ z\,7#aMxwQaH 7dK(א"H^ta>M +Wd N6|TGĢ!t3qO ?r@b'8@40*.TKyaXB,$kCȓl{Β"ks"@Q$/k +R  e LHUF%21" 10{::*0!LfN!uPuBG"-t*9A > endobj 1232 0 obj << -/Length 3005 +/Length 1909 /Filter /FlateDecode >> stream -xo8WOˡWY4nvV]cc;g;~ӖD ҦIQ,~73$Tx *H5#F`<*s%ƶ8*/9-PUT{NU Vdz5*pטG/&kLj?GY f G"\,(#Qb/Ύ~m{t`ju=-*U Ƥ@R2 TG-GŸDWH=+.GC1Tˠ ѷH꼚U Jxn@>bU%Bm@Bӝαkk5~*x.vvb.% +z>aY iX^aa*a@aQ*w28jLI(+gj RGI]PR/ٵH]W71.fPv, LG.j -N[}(T8PD"mmq3۫O$"R8v|gnR_\J{.o|!Ho e(WISw8)w!VSE_Zn4ܶi^=\(\n;YjZ\Gت/P-8Rup[4\.lJ A*NwSGx7b@CK+ĒUO"l;5UK"C$lγQP>7N[o6~LtˡU.Wq^}ZAi`!e~ -i,X޼~nrAlsSoŒ&+AZsQC`]&&a45z -ځ99}G:iZ"ih ^Y]ج;Kyeq5HDGC Him^ WH0˳(en"nEsuz!j3CtNYQK.b>Z(XWKuu_)ȼw: S_-./zQT-F1It ^,Bxnht /2 2L#H3rX19]Ev:a ӇM -bB_Zka:!@kWo%Zw͔ٙR՞Io0~ȯ]3hչ!]toIԿ>oJxТ]j5t嘔1zHUbhȦ?Kӯyl`x9eP-UeH\!s P*8fwZ_;2vIA['IXJD:-M2z,ίvM|[DԜTimס:`g7˶uӒ$DUrSr@v!12Xendstream +x\[oH~J 3þUҺj4vڕ>`86x1n{\/EacIۅ?qipJimaU+6s\_֋#]'tvB^}^f :/ݤS?O_>Muh(Wp:$ Iz_EͱzWw07;u`ߡ>ܤ\W"p7EAdwX6Nz8[ݴsnW[>'"=R=˨SA \C0=eo'*1`6CJQ@fTDcd/5#)dT~ N48 MPLЄCx-Сk`Җ Sĭ!>`X-n. 4ё&^)-H$G#ܡf)@Pg|>o6&˞:UəL8F#La]Sz!{s_yx@9hO++:x"(PmA-Xd2MPY\XܷQ +vjKOm +9+_/1Dhwp@ @lյxMȎ !8&'~qn6ީ[b@6QQ{G +Gp[rJ5V铍#R[d3L x$mQυl]@o.NQ3ELMKfN#?|ԱY\Iw2})@@e_qv?PoiHͪHb#>(Ѷ2|a^5NT2LT>DF"qxr +gk?˺ܥzl ;\WiEahr|6et1&'Q}t˝fHjIK皨Fn|vTq#]$j18L/ +OÆ3h5g^$> endobj 1281 0 obj << -/Length 2931 +/Length 2886 /Filter /FlateDecode >> stream -xڍr8TEK̜l'VJ%U9eqC\S:l4F"YFqqϲ0b&:{(H8LGvu0J8r4IĹ3YWgJ0V,+0{&4wd?#4DC6iA1 pqO~ߵC S,ښQM56j(̦-h뭽% #;߼;΄,O,?*<&<~U0YB]|$lG011*ܽ_'-=*=Sع;*H,++hrӠۂĚ?~" -FoxrˑA=,額c 7Ib$(҇@r)t/Q\ zWhO<90 l'QDWC) ($`& ȑ$0qv%iTو%Y{&PJ:%lP[ۉ^||P;ŀg5 @0_2al-%/ՓA<)PAv4|{gJ覊$eBd6;/$l*vRP31S-l'?4 r-B=Qؼ[4̕fɪ:'HE[Z2ҧq+(Bq RCUʼnB_]Ы$qp' )6nS`QjJwSlD*Nȃ>l^zߒw؅  ׂs:@mA|.{ȓ`І3CxZW6Vb MJL[MB@DzgT^ll<8=_6܍ʂ_wѽ] -6Tm]嘞yz -^u`q6lRʎِqg2[wA -=."|׾vx* h ls-V ,0vN*1q:Os:_${л˱vdo. Vs}3w- m5)ߌuv""H7 _3QNSSkA; |Ug:ޯVEJca(ǩaWȉ#ՁlLe5fjc~8W{?}9p?h 66Y3QҧSpB)dYvČuU; 3,f*2Ԏ*.N Av>8zn8⟤o뮥вTsBC;<]l <tUk_4j\!Qsc' 졯Q@0"u7u%zlom|#΀z x,Yn"ʦ^9\-C|$ASΰ]bE=ݙVfT(N`j9bVD2g1eB^51|r%(#l#8TxK[-uLcxEj%eiOr-5 .on?<\zp6T:-X ֮9W%.`a*iP1ԿlK1 -EuNW ضP2N -ǯT`W؈!Zne+$Kp_{ 6˅sgCNd8/dJ*/xQ3[--xŃWdP_Dg#.0uVz^haJ튑ƞl]?J -@F= N]9ֶN5"Gfbv-^S_b`ؽP52WuP5%VLC<&zHܥȼQ5&4w;g ^*hCNx:Uo#kI@_VZX;8rk2/3*RŎ%8 xrD= 1 =Kq(b4,~[&endstream +xڝKs6_ᛩ&>d;Nǝ+̤=%Hw_ Fط³~$ďux6[ ΖP0XqخQz GJXE~{O}6]t G8whzaT늺uzĻ0>>CSw5LCoVjopSEfOy ޒxsXon;${Yi"|%;E;-Oc_gagEV(X^T-~$^=RHMaH穷1^Yw<߫Z +bc*܌T8V|goGʼ)o|y o;\A4uCČ8z4k$;ʫ+$?-)W_" 71L,A7@hy>ޏ&ګeuβ`bR%Ue++AdrcNa e<# @X0Lg(g`'y8D-$,. ] Gs(nJV>J4r)hy4<KfKxtYZ@lcpyC'wF|Fg:!D"KA.W1157Ƭq + M/<Gx$vq Hjo*_MP]''- <|sC^0HWD4op>}_ |1$D<: nUL[YCS)ăo#HPbpӲmSi:^VmB(%O90 j# DyW<)(#`$i ȑ$0ImrҨzLB!'3tJDY0xf8:jknRt߾e{Fbŕ/4猡Eb?C-h'`28Sm\@&n$v5Ovt  +~1ҙmI"9:$0LWEa/Ƕv[K@΋/KN=,o7Ar.B^YoJJC5Dzš(T +N4veBo(#<`dhTzJE*@kv!Srn-rv I/ +jL{,bj 9JpXYh.O{=QÙ!Yn+A+3G`^vh,xQnV\ pN֪&^l<9=_6܍ʂ_wѽ= We=9z9 ^ugqI= ԲcRdsju^K7&ȏOek[XG@`0 h zҦQ;'Q8I'9u{${ ˱vd. VEwfDrJ +m4{۶m.<@fcT*;5Flr' H5 S.HdcCbۘ7tz"H?W52@P + +:sؼ!rpܻY*cID8䶀:w.pӱfpP>Z_;u}^:ڡ=ffR(&yn6 4 Ɏ<4p*4ob4r^0$ Gk4D6\, <S2M@I)sW RPM_Xj-"~5($4%_j-jUŖ6WMnlQн<vu!zq3)//Law|Pzo'9|j8ӆ1yFBN8d2,h}wr,{C3,jh*9+2N x s.9jCE|MaP2Xjﺩ)̤HU1_!UBW8Pd/&?uwʯ?}Wn)0 +h參{7e!z^mVFz4;~_E#a F(fNR"sw9eX6iO3ƅ(} 0AUnW1SI$iM}M]6KN=:zDimJs[s=H6o%W̚oP/)[^R{x)Sy8cPJ%ιܭqW9䀊I^ea^*N|m!ßJjx2 +гBj(JS3l:< e{:ۮ^9s'̸҆ӻO^dh8idEN/x1[-${MdPK F\"`m4; +Ż# m>غ)lY +P^ \Y/p sVA6d"XJU{J7p6: tvTWblк(L;)J$&݊NXC1x2C/7|GA =/z,%]o,3HŎ9OP~fnl<(z:> endobj 1287 0 obj << -/Length 3130 +/Length 3049 /Filter /FlateDecode >> stream -xڭZmoF_ -h8u.9Wz@KDҺ$o%e-F3F,~͕R^Y{?^BfػDW,7ͼEՋ)o7)CL 8/[J+_e13ӱ+=WH+hbw!ur1#OJie/jXƪm%vl`k^Z&PeA@~>a"[;P!% W<~E'VX^1;4Nf> ?vBZدڽ #ˉث a\s*EDIRh,hQ{8śq`֗YB3 @╬&^/n.n;7?3 b|j/\L1F&늞Oӑ݆G-I ?q;b2@Qt^ Σh - yJ#g@7_u9@zMc|h HVGW{$NsēR$ 2 !1J(j-]۲Φ"PkeX& B"~M=uH9"vEaNW>c, r?1Kیي#$R o0Nl&ovCǛJ8u,1R8.a]ٙCC&$0kYZ&P.geIqWo6=ISGf3ކz48&'ZJΐc16,i&apIJ/){Ǐf*CGU؝h4Tqq*Wm(΃+[94kAJNڬ zY$< IkhOW\ -䒞U#bΩNbO\fj0;=.pkQqq7nT#g,TfxCQ&zE,'hbrC."Yj92ؘY!Y(QI0htovHvbjRe$ΏdjwBW!y1~^ [C"R`'O!-x5teHo3gU=,dK8pgH cʝ"k^_,9F̮Q,LD">/T„5; E ܉\Tպ{Iϩ3X͚Bx:f k.*8:VJl)=i(Rt#^Ce2צ\-K97hZH3?MIшPφ|5X S{kY'\t2]ʐ6W)&I>jqI3|*fƱdB#%u@B (BTDZ* ]' uHBWP 1J]T*tW*s6usCǾc:h^T3]SEHR7 )5JM.n 0JqS^p(pvX];%|̧;T0،k@Ü}V zw6Qh4䋷?^XЩտ -cQtJ]r7,t۲ 7&֥tjHZ ,~~v}1<@mL@Яm2Ȍ=TarrB߹~-fǩ,0$;f+%b4>r;ikJjJ|9mEk]`kZPepYD&63 ф%ʽm9X)60f|Ce`<}P Z'n6j}i 60\!ה!+ n{ӯA"4?QOq$^ B3T}žs@ -,*_ہsEIQr. BQz" ~0x.-GWSS/E]‰$m_ɗNJR~ٳ//72Yxj`LߊX7gA1pqW@,,j8?z)fqsvgFZ~EتXʏqrWI`XO+_b9fNVTj a>Ե nD<,lFp-2nhHqw Z`ꉯMQJzA?Vj6/Ceᾌǹ_t -Dfej'3oBendstream +xڵkoܸS@VE=ۢz>$4"( K]!Z'i㸿 )+ApYr8gƒ" ]O8PE~8;X1]n⹩.6[;o~\I).Wq8oz}YR WJ87~lnܼc[޶xɼ熷x XY AJ,DžWtv]h%>菳?{nۙ4Yn%=7I+@p˕;%ޫi\"r2\%|AY=&a?lP5"C|x $qZun_ÿJGռ9T ΐD_-3V&݌ԖzHʊ<#j=CooOD}N8 ,AʾhNCV> +0Dیbg]l ß>߷v gx5_54&l͓Sw` zK&x;%# "^+EՎѵsk4PhDF/ [97`nW + 2SQkC=v^dtc3jRyPGi {RpDV~I&,3k\ٕ@՚H bƬgjC+˕v|."{OBxDڔYLŚW|Z +! }U\z>d*EszcWLjg֪?<h:\&Wti@*,詑#LMii; 9@u9.?R؜ӱ'7W:ʻ1g/|s"<0In. d׎|7L˕\~C|CC͙l8n`_()'aR84 Nx[ meX6rewY3#cSA~l9Il%5"Qp5** + +q {ӷ0xcP`l5TR'-"$t똥I-[A(3%+mRs^ψex4V,klfcsbUcDCC$`hV{jb!E}$] gNT$;9A&:\}eDP|T)Ru1b:ȭMFpP^& TԸ$dÄ{N1&Tc / ̳̈́aE6oZF"j o6 Gn k.ˁN3V϶Nu볬a=iq ]Ui2xc'LI /jM'?3<煳;w0)V"\ONƊPwAYum@ap?uT\LL +p)IUyS[7x{ѻ@bc"ZaePrz{B܍3& `KAnޝj"p+"nb46;8w6x{_7_#d%i>5JӜq@΋s7׿ܞ(*ԩCA{H=><}mmέpgwoFxT'bN1Eʞį/)Ka~Mm3r:Ι`ۤ8֪㐌譐7ptzӎg̾XSZÖD~5BcFI<B]+38Zb`$E@x nuH)ASӨM +q}6jJ=l'@ݪz_&p: +Iፌ(x8pZK|zˋm-~m=%P{ bHOo0cJG\QJh\.mD5m D o-R>Q>V6lwz"i_13JXC=9m#7e6 t9H|`2,K8w F[H;I=!o4 #*Cendstream endobj 1286 0 obj << /Type /Page @@ -3580,20 +3561,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1292 0 obj << -/Length 3154 +/Length 2924 /Filter /FlateDecode >> stream -xڭnF-0bn>$da/Жh0%z|֫9#Ut_*0*/Pj{|V{C,I4In2FI~Fhl u#,ӫUPjId-PMF9FgYzPvjOzvErhQ:ԹZd50ʔjpXj388 QհўT@Z9a0/AS"@0q:4"??5`[ܡ$t-gZG{bN|\aM?g NZx'|S{עo*q#M[W\{5eSs:׷uD>ᵫ) u! } j$k|ׁ4- Pߏ~f 5* 37tz|.ôH/=2& -39N5Vvk_A 90vG|0h)iu1)TvlA/V;ҝUY%W:-(T8)tU"5Pگ~co)Q2̀WS+ -̰AI/t-V"x1P_ i»YI/^f%Q|H7FO/T 23H6F vSEAcolcm3":c/X2ț؀&l]X͔QIYϕQ|i:W:Sh+Z'4,ၫ>(TZ/9̗{ DŌ_Iu;*ÜCMX<E/[ LΥlYVc.$AޞHVTqh*F! NvVӝ9,5XGb֖qRjh83\eq5vm^2 F\(I6Ca !_#IaO*2nDz f\Q<4qTFԗ 3 պ_s8%*Pc|UsJpRu wjd7:Ϲ0? -88gsCd]BS?2q}#^}ߝ+eb=P3RYnC"T {F7nA2yIc,z&gU>0+!3C}ߣX~;cj;(:IKs"$mVr[YNF{]/)8H86 z -KggF**8.rG9rYv/095rpa']u3ͷ[{wY7}&BoFp~l7fWmmYRH>]58 - hO;j/0"o&ߛږVTךe%_`*KJŽTm<]B Ɓ=NX8{ޭyؽ_"Ai,\<7{I|}f#}!}e ɭ"hzхG|cvl{[d,{rQEֳ5=ı?>)OđpDFx3n ~'.%: Gb`l(n~%\0m+pK X9"[1@8Uہ/۴0if<{^bYFX3*q Z,V|e4Ti.n) whT [ -ly*%v淚gOG.nk2h7{+s' ]5;Q&oB-f4Ԥ =ߠ\+<'zD.CT*o$[1WC,lXq/.6 _V.>w/DTHc0&WW2u7ڕ|9+W95ԉ OQj 5W5i_8Κkj&nL:--NYs]fգVaz'͜2 - -7"r{36=2"$wuX2L;xǣ+m>b7VLu(yEڏ(&y lh~(#uHPR*竺0[]Pjy+@Jo5v|* m'S*=m^oԆ.EqvPsti/{ca(gdrQnQFTPB5rtft;F [xDS&_Z)Ƞ8cl'/iʨH iњSM/p`%d!f_{(\1yW 6tn? T8 !Iw͟`Tvj'528",}\gX9o - ~鹣\ӯ񠪂kMWFB &5KlYfG]_3I 0못vRdYQVC(ߠj!|I^ur]+'KB\wl6p*Ci~ه,$F~Q> +,_͋VixO٨Ce{mjwxN /؏K +ss'\~'{\^kzKBmHo`{ՃZ\ và7u8X] pS!2l_ja*^{UMݝjՖfLZЮ9(5q Q JF< İ6] D %1+|3hm>tq_2T{8]y_`A90c'Eޡ|'Vb,s~׫z +=:eV2)qfnΐ#K_}2jd{JFGPݵd܏21=H3-HO-x4[3~l]SG>n5h'1{a.C>ɍ +Wo^[:;ar|KeY:oJ*^ֻJTCm2r?̿P`dY\A TeŴV Wk9(Ϝq%()8_-^%߉٫y$(# O!rct_zjCWxϴ,=yј,]jjg O/B/-($ }Ak6 +:Y.gC6)o=Ow`eIF7㰱.:{'vU&gӊci|a8yK[`cGV`<"G&Jv=Xz2+~I5PRW Gml/RF)ݞۃut%ܥ(a":`p䥌Y%.o7wB׽#ϱ&i&Z,PLy063pL֫)Dp #RKNhVZ'p-aL+6ኂ6d%A 8։jA#+Yl]q q;Hhi0 Cuz,מZ\'YS0[hfW2 NYMQLMYh?G =,4Ku_"Pm/2D,"F6#0 <ǩ MW^ lh f`ߐOb))EBE?n CZ֡XZi?-/W%^Mng(38@"6͞-0ŕ^xȁ/|A&8f5hsl ,k%0ӸK<;IK\FZr%e{$6Gb¿ aoJP(G?woքPZ\  >zM"ƅ~4g5ףs :L GB1:rNق=<:8Kf:a_se%(BEk>lY +)\\l#}%AߞA? +_SBFP|nb s1S_I./>jV1QsXO^~ H>R=um 2k>~[u3BҟZ/Azӆ+h#if$0셏ó"ˏTw1N$B58Zp +F3l//j0[-Έ9e7w~8/ gb 9 +^-*V.Uo{|y}IqqV 7 ئ DMi\8O^J\䵉~clB?4w J<yx+W(YKp`lD%*i (qA~#/A?~ !7w1^}to*>~j0dq,)T +=g_ ,T+PfO"VziBak8L_gC7!olY 'IR^ɐ|k-%皏p0SPd2lsJ%{'0RiVqukhc02qYΟQ"K)_M!)ͼ-08([/endstream endobj 1291 0 obj << /Type /Page @@ -3658,27 +3644,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1307 0 obj << -/Length 3219 +/Length 3145 /Filter /FlateDecode >> stream -xڥr]_BU"ȋK^obm9ލ-ÐHX8(>}AR5 -.rb]-*,VWG_b`~ƋUϫ^/8"zwzWՇ/zX}2pW`Q?.3? -n$y{uo:$(AE ȏ~$!a0$R?KBdDžqtzmqEzt3Fm͸zIv,xz x+hNf$4ihuIns>d@(`D5a6%~ @IjF$4|ZcM}@#xbӀĩ( 5YW6<~,ͻFH1-2mߩGq戒HA`ki$1jS3-^fL}M'xѸП.<Iw:弈9{#Xoءw{p%pl8dTw5j2N #ʮ3ŵ6Ȥii +C4(:25Fcxn5gFal_{*Mˈhid41$STMAi=9[Efj|!)R"鷨B33F?+&//i5G,L9^CȮ@ ! #ֹK4Y:KH>ߠ1,,Ͻ[ID\7oHQl ]RkY~e*yQ^d7A'o5ԃ7}}. -IìO[ǘ"NF#^vpjX'iG0> K|E+v 1wH]?h|(9{uLRul!0Rd= -cV" }dW9J.^G\+As'J34`ۮ345*>ЙEˏy@1 -]!R奂IQX 'OT0EI{:ٓ'>T*n7 m;>F+'Ci;q<^Z#p1vAܡbiHd+7>WbU38nߜ\]l&i=rg#]E9[H(ͺоhS_s]DTt )1mCO]N7:?zt;IIQٺq`."(vR~!Ya}_%.b?nm90HqAmOdۦ.!M:-*!!%Rs#Wr' Y+lԌvNQFW8U}dlq>9b`ЩJN^GD=jۭYܼneP|yJuKGrӌc0׌R 0Ŋ_AZz8nOrlV^y572k 8N36)CHJu -SI(GR*>5#[A8ݜҘ qVJ*QӰMUWS -“}yf0G*,PQLb4 IaJdsg ДУ`bK4\%qk2AiThG'}ʨr!\^­ -FRuЖrH")N%u$Ω^0 >T .(pD -1PI#FvhiNf -3]Q\9 k3k 4ꮶ8VshxG-HGlYꭌCPzf[o5Yfei˨c;3G-985'&AmF'iG>Yَ[~sbBj6XO<}3*jA:ARii%k):Q%=%= ;u%IZPerI(&"W]HEǣ~2j$/SNQ wjGdzkl硍#E:\;nR:M DmnKR> -]aDKK/5\oPͦ Wɬ3ٚS -s-ԙBr(= -e2=2T-~ͭ7\=)[T3$U3wŌy|F4aYI~ƵtyQWo/ɥZ_O;yqD8#QY54waI17ԅ2P֥t,QSy;2JS ̎#nt?0<4Va|췽L*Ό,k2 nr;>NT) "s/:nz)~/j'K^QyL'-Z".k[~'B "^] q{endstream +xڥnF_aeh`}KLf7hyh1﷮>dɞ Ȩ꺫:*.8Lz_E;U,uFE[߬߂w~\fi7O7qp7$~X qW],̊/ߣ* +Ӻ~qu}_eyY*,ˮԅ'iVUv &NCq~E UUr9>H/>,VK(w\a(Tӛk`K}$ +e?1dЙVy p%a$%h@ +da$0L0YyS µł)`70 +sIkD$q늱 (rlxeC"kGiUl,<ABFý?@iQ@wz6OdD(`D5`f#N3t7[oG R`~OԴw->x'4'[CZ]0Lx. DzH߭:X5,z6i, 6\ȍdF9rq +2\j^Up(%&oRغ_h_K^0 n(9$uF18e ߧ{CBw*,/bG|Q"4 3xoޞ)(k6̐#̆粛acA4GmFdӍ[%[AgY]ґl# DO=(14Am0 .)H@M 9i+=ا;T-TI4s> (b QX:ԪxDgK {qCbp!A~V(LH/KuJF28?1S&%Aok8@.R8Pg90,gwLmH 1VB+NOnR=1#x9M+FcǣCCSŠ3s!8Wn}*=08еy繺Z?L2&{V>E,KM3)PYL{2Ŀ笻҅p/H"kKL6~ӏɏfNrú.~(~Ѱ鑨P:^(}O3YNC&% SAyB{ 8zA줏 =13 j3b8I;ɵ'/bфd-:,j b)~kɩkccS׬dD>H{JNzD;O7rܳ8wJ&˷Hh zreX^7ޛҒ|)^Id҅zO9c߷XE:\;R[:+D]\J[ƗNaDUJ5YJԆ/u>K ¬ R j*6Jr/|6M +l`ye`r/ iZ#h[_دҴ2=(e{3qQId?_/;gLW;nTŽ탼fDo8e(8 xEiY5ì,OX;mkWu-Vޟ̹'ƙk+c07Rg t=Sf]Zm5e@cE3qL= eۯӳ9j*,sTT"+B, 4o}ULoBuendstream endobj 1306 0 obj << /Type /Page @@ -3710,19 +3693,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1314 0 obj << -/Length 2207 +/Length 2053 /Filter /FlateDecode >> stream -xn_7K5;^@6:8(V) -8@KD]3 9(CB39sjBt'J$ 9Χ AhD0\e IU*LG-gZ(2L)-ҳ( D`js?7ej/&mV-aT W{V׶˫O7f#J$rF؜#b5P(B w3 r{}ywVSL(g\pHe:J'"ciB'naۥGc r&ø%5*ϒ-o'i97L.^>hķp4RȄ&8l24@ny?ך̖Q,#ݦӗ)/.!M~v`׼t׻W}u|fXU'&h,| =¬1GN)1JY -zaS;9w;g~.>/%wNxٍTc~yoLwD##Qǣh6w!Jmd8R,[Q"5C!| -%Fs냃  JQQxvY4rKH,/0/`npSA]3Bl#EI?@,mgVƦCŤHU?~*~fF'vÊfݴ NDO Bu+b!mMu@bh:4QWu("i3P<950 G~;۶Oe}xTن ;D(Nj4HDoht:QBI#4zӨG&R˩~0'ۑnav@JVΡ6C}xb 17l ͘jXq-?bW@~@_GENaS?G,5gUufcℊNok -ТuQmgV_U'u %-y) @n۱9bԺoCϾ9Zt-W#Dk;`J[=i[՜4'{>q=ŕc;Hi_Hew 2ju]5򌂫x,8Pgcx=aU.G -eduQ.u{9Rr'L~5ayV˨J"K)dArWw q 55'hsXKۚ{u(8-}Q:"9$iBa\ѽه7jp[U[$](Nʰ3/:)ߕǀUr(Eh=*gS?]=.T0B0œʋ/QKATh3D. "{L7j $RB0*J#:VSۋk.6v d fQ=y5z^QVtx1[:"0|NWQYr\ESsQU4Hy@FDvL8n7W#|۱D "uq><T}S4㮋fgw5? v u)^V'2nfC7G$; (}:O~W 3d>~˻n$6o~fa,jQBnYh oc]G?7 zGlsYi,'f}z<2oImX6OYSqd&%g+^2 -6:,mg`߆cEo4P hBd\''u8`9rk=#hE;c8,]c]2 2@|gs:;eW -Y¬EA Fȯgن1 tK_ -TJQ1`kuzl/8a*qIaiѫj+,K&2Ll^LHp`\/`2C:/My"esmF8'yE_bz F12\d҃rԜ&_szendstream +x]۸ݿo+k]I(Õ %&@rSI !y +W8QB'|[|+f1P0`>2pX/@xz˹/E`nv^,PzCX(ڴ\(aT^{5_wm.+7?֛;{t Mp>øbBqD#ƅ"'bgO}x:#ǧE>B%HSJRW.';Nxœi@#,eLN}^'5*ς -mo#4Yӌv|ޠU)|Il.{8"_4ByH0rr`v U頺rS݈hcWL`s5~{}dAoqsG`IޭzQ`3Z+*T+S٬+sxK  Gt L^ d}rcڤθ!蕧]v{gݽTuo%DVxYTc~ެ_$" eȈ@ Ft +%V1){aÒ> SBp,yI٥q34-ݍ#B +^p `#'܅jٲ:K?@v^{OMϪICĔ.lTqNM&31V4i3# \nM-Fnm(<(56zAm:,IuΩi7-zU>xSBoӢx^$wҟ3@a0tj0dޜQLjQ$j(yzRdT$t*?f'ޟ`2ݱJqqlX'"Fbj)hFN<2d&PGu$p1vN,Z(ܝȶzRB|:$n:M6{@GYڭ_e;rv﵆sLP2lR̪UBGUMh><~F;T i^bDuu;!),~2nؐ]G9HSVn篤)hS{k8z#<^aiTi9lJ]m+2(jd VXhU%c WWR=E(a=Z/@/\UDmQ&"ϊyծ@Idi,c8v +|; Doඦ.5Ś`Z? Ө|~8pmm€ދls"DDr7n1`;YH0敼aY$Mw47W"=TebM?g|觙)O0BA+gڤ@*ffMݏ)Q}= \gBDp[f"d(ӭmkFP\LyJ<Y9z 2wxYL6\Dޣ$WIDQLO3npSX o&r7#!p;.88Ug8O'Rb]t f 5 +9x54-%S6̩|G+ 7~x͟R;+7Ȭy= +xuy.Ham-~ä5͐+xH W7u[>>7ծ>6}7Cx +>ԗ,uQcڔ,yIəmwyZ俛{C\F:pk"FGXD ¶ȅ%hnKZf>h½'ـ$ud'N~m [}u5!-{`qPC<p@rK!aLyꭩX0n^X9T[K\ukIRC4,*8XF}H"DI䖸F*>?׾"0endstream endobj 1313 0 obj << /Type /Page @@ -3763,17 +3745,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1324 0 obj << -/Length 2026 +/Length 1998 /Filter /FlateDecode >> stream -xڭXYs6~ׯxc*c8HtƹL',A2kTx EɒEX,vA9'q 'ug.a@:#hN#X~"tA輪M/֞G$//xHzOqx.` _o8w94}=vt yA$»%, ڍ+^ k-X&~‡I?tg#TI(Pd8 7w4+ QbD+fVLD~"' !d]'|*]2b |^} g,c "oE2kZ|6Rw|iQ$Y~8܌Tيqp?ڔd-+b|`Px,] )Q+$aLb0],,VDcn2_H̀ l"j;+W1h RqpyƲI/-r^,c^9ZOt^kd'=^MFRO8\{ҖdsJGkx,^/E ]lL`x -S ^-x¢Hݰģj:5'ϺLzA 7UMѡ> ?~pÕ*A~t=#w~f*w:Ɇ()~ySye06QL2vډNfz*IzL½6қ, "Hf1d瘗8ufJQLCzpˢ@@0u.ȗVfMD7ޓ@@Ƅ' KE)iם%64.S~ȶϯx=U;?9ԡwii"F’~20JPjuň42U{7@^>Jܮ$:}SG5@@_Cθ.>yˬ`2 -CֳFyHzo.ĉ78q-}8w5aUmjŖS\fNSb:5R479@]]q?ƒid{ZHok7 lBSԇCƧbrLP:@H7fgP# -Hw5[B;9J3˞fa]co&M17ף2 y4(tvT)BJ -h A Jp!cQ|rǔ)4u+H8|EIk$c)D>|PEĨP\+aPPP 8HےGuCaS]`~) dx"YB -[n\(H0t{^xOmaN%G3*C)qrfKZgË^bgoq*vŝˊ+\EyD{s } H*ݔc'Ys8@rx}IfL\A+vŔaXY*}'c ̗%쁚cFӬ33<{iwf.*ɘof(q)Z޺8nLYTIa5۽|b W zӸaЅHrٹtCV Ff_źnH:RQJ[7e6`#fڻf!c'߶dec;f> l6xxOz]pˊھFLڢ݃TpnV:x@ -$9+G˦ U"ÌK{qs0Ifi ҫo1F7b%]!~̱|aQ'maA;v+Vk᫂.{eu^ɛ0c}JPO0I)h}_N /@N~ ď& jc}_Tendstream +xڭXYs~`*%p˄gɎ7\f+eaDID ű}R)U suT&tH$tv~hPWq[obXT~rC$GOo_my</g"ooxL{/߿z{}W3ׇ%}^4Y~xot 4Q~&{+_t? @= |jDyG1שh,|TB?1Q΁T&}IEjF;*wX)qh7 E^o5;A^CXPޞaVb53 Ob8֬<`f&\͗48`+dGU52d0:^KRR!Hހݢ +tq<;ܭne1wghxݪ,(5pY?0,O7mW,sh3-s{ H ۻAv@\;4rgk6 &IA''%\[վ\Y'ė!g'p~lϢlݰOiϸУDg4 #}cՍm[6)ιƭDSb~\ d9hr Ѐ^LoI$7@ՒFzs]9f]/FP}b\-|:~ԋH dP# +h5[k?3\PS ƹ @BݰܪQyʁZQҢ {Ad{쬘t\h a[];Lx۵@եP: `#½&EHiQYz 6诋.)0 |h'`tD:bOx))Sh'0 Gq  3$cCvQaعx)aP0P [(pϠ -ޑ`:~6 dypy&!7%  ƞc#T;oFLx82d +ls6 \_=\!d4>O!;;ˊȫ8›EWtͣw>s-Ͱ%m,fد-TW8Ls ͳٱS0݅(~ ]<Bt_6O]߶R;=E'~> endobj 1329 0 obj << -/Length 1795 +/Length 1720 /Filter /FlateDecode >> stream -xڵikH ,)FG -mv[RْYr%IX;FGluIkͼ'Ɓl@X2/aHh S=+vm+tݣ,W4dSJiHkb~`Ld0{\^_pS|]N[vZB@:D^>}1vd[2 w-۫0c)WlaG{c>5$za -uX=\Oq`׵zp,)lK.GZrb*eӛ|sq϶_geOg?`C -ճ_ˠYB9|boD1"NN KdWEAf%o'N`$(3zF'Xò,fΊƌ!jxQ:Иo]FdNQSuCi.+ah?#~,r~EٴB=Wh+Y,֛o -2" EdRkQR>&Դ}ItfH@u9F:d%(pY6rf8m$!xO̜!M MLQU@o>Bj]4L{j]5U1`:4ału4h:ǗƊ͆8D@-۰"1>V* zA82mفO@*qa!'_'"-iYH7?iϊnRVɼm7iVV3! 7ϵ=OP=3?Z`ZnK,M>ԀP!FQJrh# ۊSxdÅ2tetUƫp֦4^`>un@ °kY  -6[IA$N yG3 -8a ̓-eRsqk6R ȗPg\5^yT$7Dc#׺Xւ_Pq++um5B3e9~'-ȵe.۵,"jem3)% - r(^EUp9 ӖVgL󺷃g{M1f ڨRud!Х)N]MEMCD ) .77|v$_2B P#̥QAFVWx?Ŝdc~M-r3[UYM5OT+ԡb/{EWyדɇ\rv(8N;OA89G780NB*8Q{Q4JtFFr0<75yނ: dp-o*a&i*[f$ -*u;5U2AsS:ИNIhRŁ/3 0#>X5[US;&ahMHb'u5_z}/~ؖm0FY"]tachr}?ce<[3KOi8OǑyrr"s58W/Ğkytm+tA(&Ґ eLߜ3D߿x+8;勿_ +8EGt-חHW{{F%C5m0#דJFGv;S-)B+t!'@2s-}eHKNLϳUBLpb{6 Ѽ*we7[ +Vг󶘘nQ zSiRXz :[#2u]fk{hV!z(#A) 78(cӪoF89Ct604") ?߉1 DCj/Pah5D"K(V8 +m7"^2 Ѳh)2WCZ -70r$J~EH4@r4Zm76Dnx$|P\7'$dRRY0ii;8CG4-Q@t(װJVq h[ it/FfC"mQDy&TZ$+qhfJ۲!QHg<"hz8NiU75Kb]15:<F!,sw`# 㻊8p P:?w14>]/ )]E ,+YmrM +AO3u-N#H':3 +LHhPHjIƚrˤ)jFAxcY,k,:IL_X3"Q|Ft-ƭUBȑNM$s hzg Mы +u>D@pǔjPeVΣ2&.ryIќ[XVtYvKHY4{ݱ^Vzs6~Cv@'eVΐ;$}Ѫi^v /9+qtKt1s&p]4mx+ F+5Œ1`AaF 'j[cL/6$jԂEQmبRV^a~2=@xCK9G/: |ʨ<͢ +07\j-tǀ"1$$+RhZ^TdîM[!vmy@Qp/>fm,WTJ*tИN$ux)Y_@`{Nd`nm57/В8&0_D`SPf ]KO\5Oŕ1>p net=B[mJo_lO'䛡8R#q''!2AEc؏m]s%?\]e$!]ҬέVG&WF1%)ޤ~՜n8KeTLoO }1rv(Q¥Ɵitkk{_*AefsZ[ _\~t˗n=ߣMoOS7aendstream endobj 1328 0 obj << /Type /Page @@ -3842,18 +3823,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1336 0 obj << -/Length 2029 +/Length 1895 /Filter /FlateDecode >> stream -xڭXY6~ ZسәIɎ Ƀڒmu$9[%vhGX*RMSʼn)Yb~L0ab.$bSM")֙5LJ͍1g,ˣG4Sg}/8ŷ ΰl],N~=V $6E>}v+O@Y#䧁)i3h$s{F)>.]b(Gi6z"4ϕSLN1"v;Yn8[eyy:ѿfEe S )`\EO6%Hs,r9Yُ=^v^yǮ7(a v+ -ҋCx#w%.8ϗvf6IHtB~ݼ~D춎l^A$"g;8;XH#'+zn\Uqdg{\j23d40Cƙ߸[0$-8-bHB0icEK@`^nn6w.~_P,zfxXD8\uI}1S:S, 31IӺG)oHj80#͕B0 ` -蹥X!U>45/]]x^xDggFNӓ?,kkzg0׶2VEOٞIst^Ar5#'iBQ*:E=Zlp- ?|[@rεN5~ [u4 -gᜮZ^W`ZByAWm|`oDI݆{U`t" {J`P%gw%D=]GsPFH YPY 램fu\v. #lgSRĆB}#C@ 2joe\!a\Ea@)36RzbA K -=:>RǯoeC#< ~8 n`AXgt.%3>ʇ]Q:)`,YW:F(Hsu[=TT2ݲ]]`GkrrŒc[҇TKUB4~)]t5$Ak&8W{JX0 -"fbj웶%t|p. -<uݖ%Yԡ%:-v`@,r+p xض\L.W,%~XT~4êxƩ=WѰ` -څMB@sQ.(jԾbs.Iz^iSimnnꋈy ىhە?>=6[Uk:$.e]r^9*61$߳B>^BQ<׳M>a{+7\=\^$}mTDQQZXmypF'Ca: ÃeWm'.OP&`E 1zS!]&j٦:=#[y7<2}1Ech;$J"5t+bUpe"ADpz68zj 9A7#)LЗBx35n݌w5;f37Z CH$2W +ϨA+$&xP0|jǏn2JŽ 5k]O:ɮo0 )`^-/֟2cll>qgAgk;^ȹ/PN1"{^(gJW+Nn:jy>l槛=Z VhI%/) /ou>8:݄iæhipqC$7WC#?zo 贈UtN޾*ZF5Ya 4 e{Njwe]<yS0i"ͣBPJ{B Pbe:+wti&"VW +# +!Fw7nɌ͖Su =/bb缼%]޵zu$ e832 5FΆ|5F@eMq(X(EF!]~K¡.p"ㆃõf}̺n<~0  D[ +n:/W0WYۡP% kegUǓ2CvUwCWT/0$`T=:mֶ#$N4,}Kq*Bblt aT[GbT(.@7p Vu4q/=?ٗX4|seygVpϡr"q5 +A 2'1yK(ò#VR@ (*zWͳ`=I .lM ´q%M JCxePIY0*Ӫ <Njwȶs 5ף4\D@ynk^C ; +W (~K+o~vw"RP3*5 Pg06S $w/5#sw 5Z/a|J'`pyXBQ_QUѱHWendstream endobj 1335 0 obj << /Type /Page @@ -3900,19 +3885,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1346 0 obj << -/Length 3714 +/Length 3386 /Filter /FlateDecode >> stream -xڭk -x|?-RpA4(x"%1H_y-E^O켗ʂ*MˍWadnknl|= n&pL MhǦوޱVezܭl1]YgzzL6-Zo\HrAh5 !d %)Em_Nlr?p@~Dyu(T72qO8R֋mwzhBz~j -ٳ2͕- ZdIS<;lpjyRI} * #;e+&-vjAƦRh0G!9|~aC#@W-q r\M seM瑤i|^8@YIN~!!|7i@2DGܑJ(:ۤi:\iE d5_lLW8iGT6[V -04OG('緫,ˤQ1b#:"Y88Д^1|${-8lLŊsR$ӎ ~$wG`۾T} 38G'%uы@j c(YIFaLyONC! -*4W[$,JF=F%I(5תkV_/{+]y}C|44$KW*ѐeUBBmsBL]&(/Pscӏ5rujNS|/*XG3&ǫ 䇡+o5x "w`)q$/(JRQa_+WU.ozNT%('C%dh V<"Rj3TN:ȌhH)(2.݁@Wqd{҂ 29{ԔiXWaz^2A{oUhKRUKhO4UCn-T$]6"*1Oj/hƀRpg5cҌEjJ34j)7X+r&Q] 9&u2kۏ(L=|7ڱh?y+@Zܳ19tym(`H-$:f8#8q` }4Vhz/BYPnBY՞'{RΠX C޴*<ɥ'՘tB}Ȥļo29eSvGYT~r>w9un~HUr_qA,U2HwA~5j9 Ȏ7DvZD|u 0~vҳeԐUP!!.5\&SU>k$pl%2ˎaXgTb2_OVPiK/z2bJ՛S 0C}AE$g0K",RSQ˞OE_hWNoä0I]U %$_"~WAj@%\/)jSe;='=d IGfGDFA.j95귳GJj.Bi?AsǰDKaFJ8|;E -:$wOn5%)}/頄m/E _GcE[SW*+}Oڹo[w?PV?v-j61wyZ,F-Fp<-pendstream +xڽk!Ta~[RpA4(x$%H\Fk(@3 vg_Ysv:N\O|\oa+WfoA3k=< ssbzvЌW7s9vy_ju:v-4غ۲Wʵڦ_vի }D`;'q=!08$pq%V;p爝!VVRr!r~hж6 FXfR; QN~v=C6F:pe=(;U$UqWUJP1[vtbAFB$ ᥑU[^(^e ޏ tkl +C+AViO0JDO9 +O˂[+/fSkr&ѡgxKW ҙOs^hߒR6 {4e;!293fO҈x8=va(@+^憀|DY+:LY^j;WupUX@>T5 Gi_0?2'sJnϤ'= W㄂"Z;$ŧ>1>sil49'&m'-MatC-Öa$*1%>Up.}75L bBY՗Q#r'j%GNq9gg7G,wEӽI;!J?Ν. cS.S;ӈCZ[/裟:dnemp5$\0 p4=]Iԁ9hc!̯xfa$#eLJOQ"fO`0dcI%|sGFyClMըk63T"G{{ɹݳ.߁3ЕX{^`8{ BA4jcۖ}I%PUK-y+L`Rx81{'DIj9 UY;9Jl{a{࠴p.x8 gDc |Z8fj^K{:U>5DDMnzͰ]68ghK)فa 졷`cX|W#aXp$r.s,{P#Xͅ+ +04~(sc>rXCm{?=rv)g:v~Y0KݕO#IjGIt[gF;onήfxV;*xv&|ΤG5q7qQvܤE;l:qGVt(G,‰>}XUgB ͘'?-tㄳk[Y˼L͌WႶq^%`ںEֆ2\LNS+m%hSLLet}Qh i;IU A=V|Jp:#-r a]NL'֔9'PSW$u<Ѡe$9V- ΚBUus)#aɳAB-wY & ԤgT@Ӟs0i5`@DǢFnw4IJ Z*['/ˣ7\0Y^\8(b֗ ɚq ~kEjb)۠53gnO5TϸCVM ({U9qkiO,.߯\ nU9aKH(UCK&fzhu!1!b(ŗeˆ"J0&/7oc* *-@%kBF7~!m.I\ݻXt~ײ;_{SYq2* Ep9(8=IGYC(>;BA~nG2p~" ؑ~͹.O#+ܫnOޕ]p#E,`±CW*.cjUM2U>*ns`bgTJd1֘i̤['4dP|aS=NLK-&l/7 +'MxO$/8S + ,YC )M?9{6H/0]v/[ PS3ӊJ*0e؉?K E@!?О8G7 c\gvqzj'j?ᯫ^ >XF_`DĶ1/sn̜.e"cjC=Z ̜'-ߍ"m+ׅ}djAr|?Q]_st ⲣ|9Q]!Nr8/"$e@?ϱo/@r-Abڑ8KzQ)0' S_%$qJx1mY3_,ޜؚ~(8H~a>aۡ&{,~'T\ܕIg<~HٵGȤrG\yTz;a')Iϗ/FH-<ż% +<Ac;}%!ܠƒ"%wil^gm> endobj 1361 0 obj << -/Length 3686 +/Length 3230 /Filter /FlateDecode >> stream -xڭ]s6ݿBӗiD\'KIzgw%2'T߯I$tv2b/.?Ů40ݕȻ+_ 4`{{qQ.68wa:{L̹ww;?{~xWo4iH_~XWڞ -qw}u/ǢϚf$nB#,&a|?pC?^Ğ{\P@ =ݝF. T0w,>"i2r+^_/}U|Zy<`{=Ts~boxoEP{FvPnxuj7;,>_͇}o]EES% ǜ6Gк"Xj9"[meEsRc(˙`Di\ЄȢ Dj+9 C) * x]Vo{z~*<sl-JA, -_RySv &\ +n-Mƴ򦨕\\z*n@ȹ_Dxg/6%<(ee.$y^jh^B0 Vz vr &-J$7sSv(Fi7 uޙ{}b|T# +J!{%XGygx+> -Y|W0?`q]:sy,,p8SW R7œJCgݒmg8]{5kWkb` -n&MVkrGs&`!$9qF C rCSJN9&N[n]xIgLNGfɅva,+-'m#GZYtș8pia ;o %tVM{ K=b>VaHѳPdV 3 a(qNŎ{qfiM]5So /vLU~:aM%-t&v0 !SPxXUkR(Ȼv@I|gU)8/dQ&"mgFO'[Hz/(vO!tWmw=պdlq<#4_À9d%: V^p8`nHġhMT8`hy`4"|+:$At@^9;G@3! jrs`wpyg80s&䗣 {.V6AJw|[}<C?A}/wb8sB:k͛"sHJONN$w6}) -a.7ȭ[o"hu!G9}@aI4r (.7R.%۹I2fu&4bC7\6p- d2DSenu] qǰQ[gzPbH 57MOaT{ND^SO @N b8":= 䔃0ȍ"@ -ko?ha9ũ]TIۢ!Vf\@HEdg&S+DY 9٫SD5a6 <%,+@w8VzJ}|JN9J6,۷?N#Q2xH'CU ˯(U(>S\V -0#B_3u4-cVH4dSʚՇ:AˤVo4_RG^\W&hU-ߤWoT -=OPtqO`y?^h˘|…XާDw 7=}хFw S5F ǚG}f`hުYEXXI2oE#c RE_A_C#>c\S%쉋,>wGo;.tUJ Y֡o L\]ыy|h>f0)cgrad#ϓ3bBV"Trwj7VKui3ML 2tW5Q}X2o OnWYb%_JYXE2/z<%(EgAb'Dv2{fJNىA· 'knk1<(񗝕5B -s]n%éߔ]v~ A8,{^ -` ]mM {F!x*mQ|h(=F=`]?r-hix 3P4.lndxdźk{uWNR`gl$ñZ?с%oKGtb[$$ ( ӈfH0p~ϲyH| )]lJWg9:1 -K^k FЅݧA*CA[NmI$s9w:2Rx^@60+Z [oșRƌ%VP"v v>+akiم -mxM;9&9`2($'Q#q^]*Vď[jw]FP+1u/-Jgl;zWT#Fy|u&1$C?3CS}>zı&4J芗L` JdFJ=iZ ܧ❤>pROܐ -wʥ3'^p&V?x` 6J= -1lW 3r')۩$4_꽺 >=&AWnUz ^_%t%ϙX,iS>S8|!`˝NQsI5>E2Ah%A]PlwˬPrHi(>ucD!ATOztU0ur YnܙSc#D38H!d-|yz4z.P*endstream +xڽrPŐDŽ/idd$+9Dv ,ۺ4e.v~~?4 mOOĵ$9]O%̼;q9 l' +qۓG0ةmuOW>o,x̵>{wnvY`:9lt $}; |_ܜ`WMfx;vS0)ĉado,A>3+ϫl%U|ݔ +/f:x+dG@Go U>Kx+>g^ L31}y--tr8*[mv'lYY<]# 64WՒGQ"cM!`dFyiq(s~W̬ΫTq5rZ<ͷ +ā"R'{uU^#.Z}O6vz/5sR &O.#j=lPJ?N1y"mdbtvq#&54`w$K7H~)h'SVgmGhw,DJՁ,knjV|>I,EMDߕnQh'~vBIY+ A@.X7zq@TDc.|J/o%~-f犨U*-LӣlGs&rŠb'l5l8)S ,f ".s>ֽRSo +GbUJ%J:H@:z? 3ԋBaץ>XE!2m2vvf2oӕn9nT2gY$:.?gi*\fX?l#Y$RO.1sΈ-d|,{S"Dɗ\qǕiDd}YX*wHX֪R;h=wC<,dY1tw(\X{}x/8Rd}3vmЋMV\pO9-|Y0nL/-I=8*ZVm]ŌC@cFJzwE9!,U ˣ*{P2$3si,cwlԭn8U <_05:n<;x3u>k2 BsDýLgYו2g̋V-+.Rj, WdRw7JѶ>!dwuD&ԃp46jc>,ؙEwћ.t;eH#Br oC3ƨ@T\s-Q.ӑp0_z> HǍ dq}uqN Uxe*NIݖrdTODr)@'n6xA8h21}QJbB%C|k1!Kr}}{s[R߈ѝ``NUC!yN{B eM-b+v2LزNncPHq[F14<17ekؙ^+|s%M 3ޱ\h% dxcGI +  jE +O~'jvz׋j {gG~8=:l<̎M?GOendstream endobj 1360 0 obj << /Type /Page @@ -4060,20 +4038,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1381 0 obj << -/Length 3651 +/Length 3210 /Filter /FlateDecode >> stream -xڭnFrC6dwlID[H#Roٔ(1 XdjZir*6EXo|8'>Fk8$ЈrU*O:Y$2_(c"+ml]n~_(MjW"e>"|B+],z"Q!<#nB=,i&NC]-O)  W<U*e(_ p@KHRuA2-H(2 33b zGKxuˉ|~ ԏ24_5I&6.r$)Ic…Ir,A'ɀ$mYHC4֗L ; e84tE-RaƗʑ8t=32[͚:˜R/(fX)S<1B0 -厥 |^dv[~M_fXt^)m.)s@3~;nZ?CqyGAc" "$H \,G0҉]w5E5||Cj&m7i38OqmG1/ƇC:6,vJ aHWׇLK)CPE;l Fʪ^S]tuS x40SuЁgSj Nj`!kņZW s@ov@Ӓ7v50E;I(&n$:Mo0E0'@4{5͑sanSp씀L<簏GAӾNk琵Vk~ cZ㲻PYq ge9RaACoKiۆ2lPZ>/N퍅d&,_-L\i`{OM='A+1 fuW 0")@<A w7r7XP!yDW;تx^D)  h>t<"ɯ.Ď+T$Q_ACwrnI5˸O(9eu[`5<*g{Y9-%@p -;>cozxI/׀mN ƚwbd% ;fI^-p[Ži9&K9# C6tqDuWuX_REKOt6[|'~ٻs}]b¹b : w_|rt-O=uT02M6P!XY巹[&mZEy(?ū](4^ߺ\me9 *J]\6!\8r?>{O*3WOz:0pDžtsv-vڏ ;.i/woy[SQ|~:V!ʀ#".(%=JA/f : \ξQ+ -M7b)'Ԡ0P¤5Ϥ8>d26}D jU&}y!و3y judT/2MЏ"n劸bM˰2%7lbQ:>=Bi{tVУ܅ _pfS$eٷ5 -h5Y;uh|Aus@AW`ӡeӨ,. W<;͢Q~2s] -jWDψGH3c<YtZbq1HI5CėҘ/eccbŜVN53*U dy/jmHs|uȏJ/U+C~VMӖE8bh0= zK+S-fаomako릅\oq uO/fslTe[Oovh@9n%;PJZ3+Gj&)u}34V@c2Uǣup㪢es-r#srRܐ(ĥ2q2zE@&VoW~E>~q +T[kݍ̏4 en35BfK#;MR2MGCBށj[QSCc9 1~{+J VumZ]wM*#&yD$j^wJq:^^{_8Xr[#*$ >| o©[&Zvĺ.m_r٬C9#vdhxZ7 +7} ԠN0+7~uLm3N74= <-V#jI@kĖA,c]IJ=O4Ym}7<:<<^rM %5KKeAg^ȘP3ҵ"wia 1 Iԓ@gWlM"C4}lDtwo #;ExE?E~h{%_a䢖jWsdH䎝6Gl(#&14kr?C=5Th20^9cg+d c[O,?eۃd``QHDFSwLmɎ;a1{!Ƌ*r _]PR3~[ro+ZP"4M'{J~ARK6NE!s4+7IԢ!˙ :sBk[ZMndMhYS h.!h}ֱ2dRą-$:2bx"X!W`뻟>:Poe|aېJUdR'cvME[ +d&1_S.6WORln|j' byZ Ba9y,!(wL}#Tn<c&x7}?Q(Ҕf\)SqC=Ǟ]c㡛pu%*hS_h͇Y +G2&Dz_@*ΝW<63;S&-6)nEkS9xJ;{|a`u[7;$&b#&rf-- @3捌HýՏmdkni=6ɝ[|'Y>'1EWz  +.O( -aaN^jP%׺ }XsBr/rY8FR~r YaY匎f_ۻ9:kBَDj(*tcXRg&蛪es\&e{8:Ak} +c%F;N d`s0DяB#R)Q 7c@n]zO=XYٗcR1)0ч,HyWE{kbhh` }pʹ<2FE*! a2s72ݎV"K|drSPL`߷TjS33h9lYM2Β&wYʤkª5d!g#<1 +9R< @:y.~3\"t9a uz[_*B'Kz6W,.#My$\KQt['Z&{sɧ:D(eQRO +# X,^NLi.M&z"QyJ姉zye&V &+ic㈣0#8+olQ{JQn"u8oV>b.`La\uxy]|'d-|K>N D7zo`060 , rI09'aUqۧ-͌Uk*>Cuiu\e\kM^GWVXNv1+sڷ|8aZ"^P͜D񮝤(F˔ I栁@'ps+3֚/s"+m5 +Q!|" "07c=t8É߻٦Ǵ3*L)굜%&9v0nAEOH, ɻe493<V C1a;Myj.8B0y)QYXa5aP(R)2Y:n@="34C +>;+ Aq4ܹb +L_|lw 0?' S|KTG(|WOU$x/S#kUN\70>P71M5H_x8#vPI $y"*@s5 ks⛿#v_I[]Kƞ2-kn~k & kEHDyLsP+s 4 hU|k  hsPFО DC͝P Ɠ +.]Pݵ nw r[n ]1 ],܅˨eU' ]5\H +GEC̯H(T=pKF瘵O/s}:t\̥T%Ť}x^ٸ-޻g8]qy'ѪFQM{w,4NƉAq*d'wo?z<-8Xk ^endstream endobj 1380 0 obj << /Type /Page @@ -4132,19 +4115,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1396 0 obj << -/Length 2305 +/Length 2015 /Filter /FlateDecode >> stream -xڽYK6ϯPT/U g)`\h vS0uFת+aY>y-<@Zfru%L*!=^O /kTR&,?mq@o٭U=Y:Mh Khk^u-L30^$R 2t+T1 yWZn)kzt0tT* D ΝJ~b펿\X)jhSa.h#_VW$c"Φ[4^<1nǹ6}niH&is^ S -TGaWY&MڮqЮC-W4|-||xC[+:Ҹv2OKjJHhĂj]P1(y&@DlαEZHmF)K4 zMчpl|1غ:Bµ"٢v^Jr - _P=qC[r[c2X@FxƝ2x4t gwLʌ;SAB槹N ܧڙ@ɹw&lo|> N_NvpooMAi ,^SŮp^s<m8識' Ŵ=˄ *<s=\N3Xeoy8"r~ x;c&4q?IĽS6 -S*0/Ƙj6\l}ݬ!B -^'4~P(q/n_,.V-9 4KϝTz;; -k]w_ EnWe_zEW -GjMB0Ul~hf :$ڀg!H5=TDk{Q -ŌNx& -m:V AUP5* G|~mN"TUTݢ]f1\^|ITˮg5H nx8D2'&9XG g^1फ़ 3++Ч8Pj g }B)+X ]G_|9z>35 5go9\h{JvdFK3:cf̫35~4Ʊ94Gin M + jQ!vM,n&8[g= VڪnX֬QX'NS!M߉)*v}ڈYMV8'/v//T<=V9]Vp N) ) +nynVB|Rw^ER(wpX9sV!}Q}$P Duy/fi![ܺqgc)jT ҚA J>u'2|ziEh&`<]B(1{X.w-`)c/붬6VE6q_LVQt$N +Z|eiܩrת&6qa6]sn<)Ox +nUZ1#< @%Zg%|=я{d.{HW=iNtՃ$j<ſ5}eJnY+Ќ0:[ +!Ax`ndTn>'A>[EEVC:K&+Zds9w8y^c#2\ +^*z0r2(:E`PMݴT]Nh+ADXؙdm{ΠZOٗF$|qmGw{( +甚h-A(7W`-4 g)&& <^Kr+,O'XmL5Y<>̒*kvTaF1RqfTF7J$ǢehKn.'|Uج}O?dãg!!Dx[}lJ٫O-b\$Cel%L!dǁ$p|_= + wmt}nH g,ϥ]ӠŐ&G|'Nc:;bŸ18pel1RG'D#mB+A Bn_c4VMɦmZ)%N34=-R dCo\Ίm#δaYJn?y76Q-&0_03;IY7`5c#n$a@*=?.Q1:*b3}{[l!S`ü3 + G""nlLPn? v8a9aǏaA CIVcu'"|p}!c|&z5;T,Odq 7C%}=(񣐏:%aal3t)쪰+@ G'Gc2J.618_CwGy*(<@+<@[^r>}ʪ(Ў+/N{LP^هgkPK=80{ `~%}0؁kSg忶C7NR} uA|oC:QocԐendstream endobj 1395 0 obj << /Type /Page @@ -4224,23 +4208,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1412 0 obj << -/Length 2149 +/Length 1843 /Filter /FlateDecode >> stream -xڵYߓ۶~_ @}:g2{Ծ$O8+%}@s'd| `#1'*Y.00יKtޯg~o`4E\׻a-Rw?ܭ?X*"-,ˣBF7ߠ4n??tdjهuw*Sk<߂?b|XH>`gSej~)K<9RH/Q/}!e"L晎SrJIR8ZsQ#>X;t[>gdԜè y%̈́9萝bۙ,;Oҝ"NJ`T?- -H%6QЅY"XxN&τL32XYt,6:P/d.L -I=0.1B$E ߴ3ÈG1DuGi P=t5BQA\p[{pq.0H w+ -|5K aŨLdjT= $JdaE^2Ɋot,;F1I,86xЙ@NrBNō3 9Qq{V Ճ jb\%@ `w>'^!c K:K!N{ CXjgdQy +_"RC&-Og"BErjʮJN%؛*KCr?\$ǕU5Haj9pƔckӫ!ZLj;h ꇿѣ+WT@{:a \fzL&T6MN*-D]<{s8⫅^CCcIǒq%] ,eB62㷑 _#9Ԍ|Ƨ'w<):1l%8{״]J-mVzT;I[y jmrOBHP/YA톜l 3onmbn/-޺[D0D{KǦsm=eV=\7n,V]8ݭoWCX3Ι0f*jaڷc۽p{Mxz, 6ezoʶ<ٞx[vMPyG7jiDѡ -Jf)X"ZtR}46iv -n SsEiWZ!޳k˾(ݍnWJiaz+zL5VsⰀ_Ky -/}.yX W&(dq3 7T8by:+7鎦2J?9/ nF>RJG^?bg+|v^7M,o;Iܽ+$.;Baz y Q͛+!\+r߽nD]7Sto SU/`5An$NN,'3ܺZþITg,EAHyłE^U Т}\A7Uχ,+ym(P9K00˫9,Q1ujb{"C_&tݯ=:zUЅY⸙c{I;KE\zґ:?G燾Cθ%:&dz!GcTR-=hO?q.@Ha2u0 [)0QwBDt }Nrd(G7sOȸm!;OoPqͬ|(٢7(V3.5)/ 0h_c4X3>ZRǫlZxY)L6R݈hZT65SVXωFiic!ADp#86NP^g"V" + :} +y,Hd9A39<|Vh! NMFؔ(ؠw9 17] }W\0NmJIk$n;]DU %!'> Xy5'U^NQ|Oʜ- +3xq~]o0!^R\_0^D=۾ nn^D/0%Ӣ\jEdҘnsb\UpGmKRʩ)Vc jdddPҫtg }|2v7H mv_ KkC6`^b\e[cIAf5}Q;Kk S<{- +}# +]NVkazH<4h3C/[uɊOoufzCJKGԟ8y7p+!G:jxxJ9Í'=$z">JL7=DEx.r}l$SB%SPŨ8l6FilၥIX;?zP[L 3|,X6Ps+ޖeLϑY]ZLGOL-WL- VCo4 降ӝBm߻ !R诶wө2դTq0'L2!6'e.Y*C~:{]G]Xr%Rkٟa n;9_pOةW?mˉKe n<E@mc l.""7箑U Jāe[ae {~3kendstream endobj 1411 0 obj << /Type /Page @@ -4323,26 +4301,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1429 0 obj << -/Length 3696 +/Length 3338 /Filter /FlateDecode >> stream -xڭ[[o~0R -X.̛4h&yDR".Iq~}J.)JqCٝ\13izAv v{n_`7F(Bh|_bnu"7ۧ竿=|uNI:Vy ǏO_CÇOݭ -|2d~n 77d=8Q߻x,YS'<7MIc|70># ;a#7[%BiF/g5%;&-(^Q_a:9j'N?i˚{ۊۯBK\(!xʆچx%AfQtE=т`_5;"7ŭ[ 42 ;SۼYaɼ< <{y -a2+%v*En*O[ZMB%HƩqА`7Mv2iP%3mʖ`vWr.3ۉ(< HlB3r2->7}Ԣ}>Obׄ#M Mȵ$i[+# J!'/_:&8hAn:%v =P2/ ,TabݠrV?BA?p:6Un: -V:_WQ !,=ovDŽ?'?V?=I4|KpyĴ~9H}qۮ!X5سbyma1U5X^1>/#XD :&D(Vǖة-rS&v>}Hؑ8M[Q/8)'B[Bm;([[DYg~g )hl1oF[3!abBأX!+C!N|,نrIFF#VDjv#8]<R+.~q$1\qߖ*E%[:< NM9!x.HzlYؑbǥm62//?lmGN$F4߶g B\-W,7B7 e˵-WŃ9]d'M, b~@/ro(!Œ>, fґkG-#[bGM@F -fI" Au\jr -kbiP.k%0jR3-A9𜚕DI繃(eO6thqό袴/@SxTp̸RgTI&ù`Į5Jfrrͫ!\QÞhA h.NpōyN& q| 奄Oo%v~%8Yeq;=̈́3et) -}LeJt롂G.Eb)pq{^yg@-h>(b oĀenln|Cv'$w=l *z~UŧO )L6Hj05{"0hxK?b -\ ^тRbm*"7U -o ߴvCv0W4C;?Vg{Vg$6//eѽû_iܡ5 8b cy糪?/d"zKqJ2F`.9&9_޺V}J=83EѣsVtCP6[KG{FpЂg8#,)K;~yqh~DnO"y7 tn;f">wc׶η-3MhQcm8sIMaUՅuoF6 rtW]n[(A"B.C#`@#U.e 4(rM|"XJXk\d'kx,~4I_;IY `V甇v~ ϖ-+`SlL -E=QOMTZ"j8jo䓌)o9 Hn'Yv|le[B\|rOۊ,jL Rv]jݯ5jI H)Q~q. -Pd6ܩ6 &|G -b&UPxn2JFᨴe&A0֜-+ -yX%J"JpX>H,5+3_" %\No[Z,f)^^r@ڥq1Ӿc?ޏNF9Rz >$C$T fu9i",\:OAGn羂Q'5 HųE?OWSYtKbHAl]WH&ߎ=WgOcdh k2$>o?6s#f5Bl%xҶ`&b0yTUaOӖ j= gm2 +$P(;Ҋv|a:Qfg RL0e&z/?=&r~#y&5LR?iX\/ :HIe%$kH6{|4`唨8l*C?cAֽrÖfo3``>vmet8~PƟ.GeB ?40FSG-e XplH~\ gx‘J',k9=.ƴ1 +20ոL9_T#NFz-w?MnF#KqXJ%kn2@SnUɄ0% +Keq \U$˞ 9Ef޿YL32>lKTT4s89qӭ!"؛ńcls-!`k_'~dj!x I.rvZE2M6N,v g}Qa]ݼ&ro$^5=Nn40lŲe%=2=(_3MUnSv_Ph)'$qq⽹zķž`RlaWJ4'ҡkk#~s/x +卵Z<~/p`Lfz\ēPZ oI'2,JUb"Ncvh̀N,T:@n.2qw|M WbhŶ2qY٘8 .Jݺ`N'] %c|dSƑ`i7tieg +rZ4Tq +Ia5?d>~Zc"Jg;lЙ0\ +ʠ4z[ +__R= 2?Fd?l !`7V K$ro݈W\Sl&XTb%L$td=ۇ eek-)mHػd+Cs'34~!'`;y 8n [K,lW -"?K3bxOb. B?RB?#{^eiG&87w:&9A!SN7;x(A(678h"VA}L½!1mXMMX"5 ُ[ng)DŦN'^ V4ta"z}l?s+){:ʾP! MrD~AP.ve5*D Yƪd q'%l. +}2˙̓<Y*Xo dzD:DZs`endstream endobj 1428 0 obj << /Type /Page @@ -4404,12 +4384,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1447 0 obj << -/Length 1215 +/Length 987 /Filter /FlateDecode >> stream -xڥMo6:J(꣗I64h=AiG, ?4bDyf4CQ/$b唰<6EaՊPK‰vf#RDڍpp歶BƘIfY?_rxZh||>>,W*h&?,"Š{P>,zmXJ%֥8")bfRl`lBX" Jche<"=H75q;Zi\AUWKmZDB,dD  +72I"Pu9x-BLeOZk|-C9-R h‰BbNR(2#(yBNITs>z$Q^1M}_PnQ4jJeWmpz (r`" ,btN7q45Ԟ |OkS㦊Q .S-r|2LsRP0*fe3 nC*T v!@W`cR!~aG+ Gah΀t[fO>E+LGa0uzYjt3Pۄ#+9z2Bx(aa^8ˬ]v`5fRxij-Cs(_h~G "JJ#JPrk -^&.+J٫ 5nξS@aX'̟nnnlx4n^aN#sifS7^ƪ9ņ3W'k8l'`ܴ`7 ~&K7,VȊg0: Ɖf&k#?s-+Q&UuaskCÙteO%qkqK'Ų[W #9Gc%z/';.g9pdoӕendstream +xڽWMs6W\<θV$$PKu_]Dvf}|ۃoǂz,ا,lgyF~|ٜz˥ۻM^2DX|X^1"FQL,\5'w{u<唇 7ųs8{ˣ,Gh{O{gqKkXEq[Ϛ$S>ADɀ<1N *W\$ #mS "N3n%=ڦR!D0SWE;&!ɡqE.kF-Rs*VDzʁ7ɴ25~Y_(z`6p +lcVW:Ojj5+W"|UeN-BhҬ) 89YnJ @N2[rx3OQ/B=.Sh ʅيKE,mձj nR +EQvSM BIn@HUH`vRHH0$ +nիF@kDESYkL򲬑)aSvDB5<#y`<TUOzMDgxri*(S'Ǣ5Rb--Fׇt!2FPަEk-˥6)7E)fguyZϞMR'._HwoòlvE=R9E~& ?ZA#n8Au+k4xϟ`G2TG@o`83gLDQo5I5JxPXD7cB_]SṈ0(8o3^1E5λuH 뵄D4>' K~_qR1NAC0zTڬfuؗ4p!UR^ Ąe4f{w4d8/Dψbendstream endobj 1446 0 obj << /Type /Page @@ -4462,20 +4444,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1462 0 obj << -/Length 2569 +/Length 2272 /Filter /FlateDecode >> stream -xڕˎPCv`k#l;8GC"$W7I]wmBmDdyLo7'z D1o.*0BcE2q0Wntl7Q&-bxs3H$ j3i mq;tu%9& UYyYͨQǚ%h<؀мp߈o8]bg7 Y]0Eo3ZU5N!OԚ_+1¼ ȣB9ūZZRZQM1$FN9 xbYq|+v7)V%&H8e6! PmX0,!mM3P=fխv`wQL319Nmg[, @Uo.C "6̏}`=MČ2I={b8Tαz!NJnJ'Y$ad?n -f3U:6v}:gJ~y -(; hy,7{ɉ̩I^|ɣUd^+mf@7'{YxY̨~GƢ0ƺLWxD/|E1޸])U(5ɹY<N*`MWf08"3V{΅8oee F`cF{X*̌/FHtpew('+y{bkB@]l2ؾA^n{2 `\+|"S0&%iW@IԊK,"QIxY&1#P=Q{8Oœ9+NQh wڵ~jq0 ׬Ss*pD_'?73c70+K~-}62EM'4yyH9́♪U2@̕ Om=Tm45&}*a$֩ib-eE4XPS]7ef-jup*_ɮ3b?5/sjV< YZY ?m-]]fH+Q?ݻk6Nb_AL00ѲHV'S.칒T/@1B{7oі-*Ϟ%3G9 ~i&e&;W&nZgD3a̚ ?H^ͼ?Xd G '~`ta^|̀MyKD/91?59D=;*\?E=waPC|]cѮ+,'i\G Px~͍ΰk<=rUG7&1 `ew^KfQLg?z~me²N9^"~e3yg;^rԬͨ}<`:e,fh/gswEZZezפg}nqf诵g0뵶6̼?Pkpx/޴e -3/z!_L,`MT3fe%KH T -,DӸ>%׃,悹$N" ]+=ɟ[׺'\Z 1I -W. -1b"FȐBS=PpTRO PG5}8z]`1*!%s5}lӇE0.tmn߿EsE87WWKWg̾*Iٰ>Sy|^Xjn< ?:ipcnKY#f+9+ 'H:4nL]~{ϵ4ù Q$[ zrr 3=y}驾e65G~ns>;U_ӹ޲'@yBP9%NHya'K= .O^:?Y¸ik[ը.33 >%>d]B&LIRAFI|M/1rNendstream +xYK6Waeb%z8EM'r(rhzZYr%9w$%yeon hr8*^EDDjX<_gj+?<-NHbVTHgK422SPjJF"M(:L(+סJ߯fƁA6<&u]wף4UF%Llkt:Q,+|_F +fsRd梖bq#f* ӣJu/A<R[&I= FmV=?LPA ʞ[^n|ƁG]5vZnGٔ=;ǫ5ؠC[d-kj(9NϹ>Z0t'WvK>-*̈́U6swUCςujTDdNjp*d=sqlG俵;]#+Xj!8ZW_\7fAW:lp(4>mZߝ4q?*iɯ4Ԍ*=/|]TK['Emt.ι/'8&،nd + 1\+խN NaL\QBKɺ;hVvzWm"Ct1_cl;T3ծ?puЮyt~z +&B[ Z,r9&af40vG4S{`dkwJƱ7%ErxƗ]5zJ5;жuL- MSF*=)SKmQ四-uC,©hTEi)-%.!a_qVⴢ z2Z*ʗn{T)7HG@|8-4a$ÓqapDnۗsg /P)ȨNMp;IC*s<q7`)9WE4U$띫"_Zyv~SE޷(&+ks}VJ&N3QCGWxotiù9;OT%dgB!S+ߒÏkYi` >b˴t=2Lu^Yz n`W#;g +h݊dBHNo =!aWC܍ |KGQ4Y㩳!وK^݆&8Q ;,} >4{^ ,LaZۛ"fSW>d_'GA6\Vm@gG> endobj 1480 0 obj << -/Length 1463 +/Length 1436 /Filter /FlateDecode >> stream -xڵXYSF~_oHw逫bv9vK - XбOkb*vʅ5w A(e>sk8e& °,<>:"r zߖ' {|s„϶~}%^pʄӷOɲI=*svvW`仙#toa 4 f>>u̝)?= -/Q=瑧s{)*<1,i_lkJP>lnYZ˲hb7iY S LYH5_HDE3> tYҊUqe_~Uԛk_2Jd%{]eb3(תM(/)2\5N 1cu[2V:ցMvKAWŪe0B!*Hs95冉Ia \em`mk7sUnmL T5NBs < -Q$ڋR %_ 4݅?ebޅjݎ37!ƭݚhop=BB #zS }OHRy"Pc$莜G9Kzo -$ף5V6nXϸ G۾ 0oVCìɣW 8Z W(WAy#=Cb<1[O+ :N>HMv|{! pܼ}{0f'PZa\?3]G3]|Z[pt;p0a10W3l~۳YG|5 -IB0W*Q? E$+nWLsq98Y&QSGP[yq;k=ijGyq -kHh# Yv,֭h/agW:fjk#{f0 -LaVp"{Juœ;14p/|84@ 0GWiaNt񱩬9SG&/yN>N@^^ѨjVdbu:\]2jh: - Ӯ]s?]<_6Zendstream +xڵXYsF~_o\9tLUE }I?^yQc#i1N*=}MRT^˹x^9u/gˑ&(7_.gq4'dϋ|a̜o1ga<-t`6IWS&EʫYڦ5o$24mkwd'&YimfU)Ϥ?E _TmM%m@:5/vѓ拫$WTy^! k޴7H&PEN7u{i`D0[H QLY% tmIWNJʖx9G.-MmhFn::l,r9웙ڵՆ9I#r6Ϸݹ.m!]ڹ;fBp#)b5ႣrW(dU7"&6n dv0PVl@FcV^dP*R\qU!H<O}t\dݻy>3gNb҆e'9XdҲ{ WUQҽw'[viN:8LmpH|#.6zvKAFPwvbwvrF +UW>Tu)" L @2R8 {] zbtLyzy@^bs%+\Ox#}ERAcd!5 +\PF"Tz Gt% "[a11ҪY׉Hx;ݝC ɶ$ʒ|]uc*iivcՐ!$mkyk!ٓQ34CLѐ nqAX`pd S +|YVdrʂ={]wFʇ-ƽ&Xi)MVԋR |c +G]bz%Ե?<猣 Xh. :SMJn_Xtȡ?0/8u+;J- KqnwL:/u`lk-O v_sڑg[r¨-%ﭏ^߽c `?B~b6trQ<|-AqJNIJ +?x`(P+x+ZV`2_E a{&eb1sLqqܞ^gy]'''6x> endobj 1487 0 obj << -/Length 1351 +/Length 1247 /Filter /FlateDecode >> stream -xڥWs6 ~_ȽI-sz^nח4ĺR+Kӿ~AJ,+^#G̓Ŝ8vsAnjQY tֳ!H=x Hg]/\/n(-|stuN .Vj]xNA~yL&cqog4ryWodCȘ<< B((Xyu5_"p7{zzjF''p\ K7ըm iEX95,/1kWh9/ d?tc^i_g{n|Ǿ m -ʼnnQ%WUke{I.0Z^GY\,ف33.'}ƴ+ЕF>q60Эh3oj }uct)b~UH<o N\iNtNǹ|ȥ@miK{`HN-dBW+M@h0q)wIoŁ%5 i0@¢24@n֜OozPQC;eY#VGOmZ6/LQ ^$]>| _m#*CHkwr4QB(S,,o/g /PpGђjgy(tԳXUc{بuz;˘; &A3-kz;#79U y'V, 1y;k0ǩ%PWWQY3guYVřa$uWoD 䐽yzD?lK&}sqfs kD9B٧هQ +InMK!Y*b9KS9v֗PGAKU/x_j~6'ɒV9V |QFnT6PvUWMX܎#oC;=FD^uzV;//a]=nAR5=S>.LFDN,a|6KELھHDN LKܦ5x7ˮUwv/+j@hA;MGjw +Rr{GpSӖh -w$],-u~ C4*ǻ^$[X\q .q!:.s?QGv%ۺnow-Zz;Љ-R`>P/ #6c'|78(tPF>n\-4x2ʑzl(05qCxct2(Xsvw~&J7TlS)& OS(A˚x> r}!3@31nsP4ݣ"IS!s2mÈb˰)b̠U W3 l[=B)ߺs0z[nCW3E J)qmNHO{Sqq0e^~ ɀa4 ?> endobj 1496 0 obj << -/Length 3024 +/Length 2960 /Filter /FlateDecode >> stream -xڅZm۸_a,Pu(m9Cw|hAY$y7;o([C433/OmFgʏls8 6O0wJ8$8ݦzGjX!χw? -MimB?R&~śߞ&I*o6JW+ǜ6H/#Q5P>H1;-laG:|ST+?HCWL0 -wXϨأZ-x0j6kRo4L*٨LakIS5o81Eqo;HȔ 3p9=<W#丁,o!!::U2!_NRQ}*+hNd4R0j0O ץ2?.Tصޘ*Ql,|R|?3dx<07̋qq%DS9Yd_Y?wK_KOٹlB iGf6`B^iX=[3lHPW~d_!W%W9!ߔcYD%~YةᶣS[35^4树x\A PKSٍxaΒV $.t0˿>SAI&)|}E o Oɓ/; ح:Lo]~a}W[wFQx{ E>'mVW`?\:`( u$EB!e4.X.$bO_p@bzbaXLu*FMquUB͓ _RA &Ɔ`Jv9d_<ހ Vx2MYH52?w@Tf2uRo"񞢤+'[uxh,jхXloS`,F$5[&L86g+(7`)o0 0{&aD_H2 -rU4وŐ|ɽ@j_|g V,άåw"20\(BA2K >ؤ"#5[%g+3ףxtHiuǴ˵eHWviwF;g)qrR"N ٘$t}.ȲK .q/>PX";@x˩:@'I" `ARWc9^15T)1myǑ9 ŌdzCq8Z;*j|YHq? uԵ ct] O8\8FTu0$LC6d;!&'{|(`g@8q\˰NC dJo/8&i M`ʰ0VMŽbdFɸ:CIƉN I.us(1ǴX\8 ' S%?;o+NY<K ZPM"UI"z(01"xW@E65qXB[9X"2}HŎü2) `%0?{w4WyŻُ:6mS7wRdSd\հ NlS,%[J3g QIJ2f>-,wuΑin7h&SsN:8gJ~~DyD@߰mO`s[qR\hpH:3lt/2DCq27"UhP -̩ಙqK&'n%>jlNx(%uޭ=\-Ζnys;vLu1=w>DHV(a5(Xې%,& ~IIolԛ3endstream +xڵZ[o~_(ut =݃&}h r, "l}F}(XpHo.J|_|SaoTiYlGX8< ,B$2ē0Q*uD)n(,aOnQn/wPAs7+~|_ݥqߥQ0@/>>Lb {; S&|uYfL0f?f= `N[o(rOyK 7q\<}ʲfʲ 돆);-)Xww0< S%/;hY-l`*so5{0s])h^IGx$k+Gŏ{ *Fk[fZˣ+h**@(A'Y uz3W;Uo (Z0#WC} +m$d@PC[i4 F Nd[HbHb(72\W 3?1_XM +j&Z) bE6;h %}h .LCV?DףeW/eu<6q>`Eh"(@3Y@1֐mu4ON a V* U^ +OyXYO W5S[{L7?}-^"cσV^t'][+=qjՃ jwrq>m b/_Z=L3O jyX(we.>dGcz#ϖܚ+RWP#p_`lK%tL$n5((@̀Ej4D"t0%yB +6З ÜŠkT{͎'a?/ +tZG+~d[S!⹏SgCdÜ;F²N^MD%(Ga&U7&T5 }9Yэg`΍MFݙ;vfΪ^F{  lpQLt0a%I&h3L>ڠ-'I*¾x1l_ힹ`M SmmM2K`E[wv2`W[OQ[;!spd`EYv d]'|pq#Euj +'{ gu>jtHuWiWוO / 8'saE]SH%d ;,8ѿ[lg}cc!);u~h()5J9d`|h(A7۾XLp-Nn7Wog4 M@n+ȗ̳Ԟ\ygT^;.YH1?i^b5_}tU"֌ɄRDs^C"7ѦI2Kz zQ8X B|Գ[;P.ZZ]xһieA; ynmdz#: +nX(-x$/9^Áb<,WquuĢi,$8qIK-=d7*\yI,DƓ("mٟ2^ncEo J]84;kd40WQfo2I?3/y~a,X`Qa8vB0b9^zcL:{<"6ɶmpAނFHS6Ej)n3 qYR6'4tހCzᗳXO${*qq1>̩D G棽Ro1lR0%0B1U#(pB^"]YA}};f9r9y" +{fqXq0X-\q>JRr1X){`ޮR;`"86*.iN-8kUB!%W9:s*mN`fb Ɋ%WnX +ID>3]J.x$oA7#}\My`o.ȢX$ZrdQLdt7c}p9 6w6sPC /.߮uKvu'{, +Z Xy,)ryn u^R 7y-ծێF>D˳L'e.pa$Ʒ^`^n$BQBe-H2`+v +irި'QV8 +'\Ys_գ> y*E8̋ `,ͻr?âp4  wPyE+=JH+1`$ f3n] 'Ô)q<61$ef&CIjUH"39bYzR׻(pYsk "+& %"/ʯDAl7IDa]NG#hυZ»1# &A@#OTǡE$\bfO\bfvQҗR$.Qg s^Lf1 HUzZ9S7cuR UWˈ' m$aHFX6: L%O1Ҍ+b> endobj 1503 0 obj << -/Length 3333 +/Length 3295 /Filter /FlateDecode >> stream -xڥZrF}W0e1čsqvr$7"@0(Z>=Hjjes.==3=/9?eOgav4Lbv\Jq$w84eˑO<~|xirL'Iz'n1wsoy'A}䏇.?3ho. :Oi{jϦ>Mo.D8 -___˲\tU4Nc#\&l"2%ߘd3IymGwŮ#j `3mzX֔J5Q]bMf5*1a[Y]S- [jHv C^9ChdJ%ٸ1mޱV^Sͬ? U$&Q&:4/F02,>i4q2Nt$[?waF`7F>$+CcQWz 춪nJos۞[> ?09vZ 13$Fg}<شeE~(ˉϰa+~j~z A&Mm՞/CrGy}tNK N)뎏0Ya*? s}2x|Vgn}G"; - jwlƃ0U}6t٨q!~-GG ywЂ -չ^H+3V-c-蠏Ұ%}!8<2h=+XX< % h@TMV0eH;l/1+"13bbWqs ϊT ȹ۽h1r R"jqRG\i$d_ %WGu9J -doKm}V8|7`e ɈX,P{Q SGC*ra X `_B-f'GYZQ9 ~?E?Zm&{i!]aٯY-)GvOm1\EqNx(UagsE6qq NbP\D[QH-͌L`|&/+Ȍm%hh,Q<)5Jt@Wsщ?Uu5VzPc=(c𸟊FArF1ytcJH'fCbhl#űǀyCDP?aºM)vFg[,̭Oz)Wf>xn\m\ ,(E>t%DT<^.o\1;V4uSO8#f 2A&>Y ?c7H^oukZ`Fq)cARiPr ӺEcH$xX1!QBĘ@w<;*&k0 -m4q .3O\wtz|Z')TiJ84󚈥k>hCI3 Hc430ͦ~$+Y0Sq4L x1<C豲Ӕ'Xl([O; J&d*iy3sX})Ff@E'@5%Yչ M8Ѱ(`ϕ@s1`p1u f%Ȱ3t~Hi)Liqy5$Q_F4QUyBP}9p0xąA5TC[+ +B74&_ Qcg-8Joo3I`ҨF>DTU9fm jHk)k&6dMףcFYw&2? faf3DžShu6:P&\EE楃9a_m֒hVMYhMq:VȦ'Srd=R>:S%jt.żdU=Y`G^ڝ& $'|1Ad>cy(^2[ jJ-*:kS*yedDzBG[Ui&FID|RʷkT7Ϥdxx>wBtmA+$3ygWbWmƌ7NǰbkUVeU@V}ldVdwg'Vpj.džJ!*ƠiS&&*:Vy{4n)cg{oqv{X`k.4Mƥ, %lEQ p_,*N ްDR{$I~B~Rz䍹ۢsT$ƹJ(rҞ2-B~ZjCp]0WaÞȑT-PnOFkZbuG@SvkE6Eh9n;>`Up6 S{_)=M0;]d:O"= -H_ߟ endstream +xڥZYsF~ׯ`%`ʄq*eK^^Vɉ@@QkCTj+s'O|ffd&kǕ/$r$Ʈw󫷿$蹹O+9/YNNgi937=O?Xo s|y׫skYFI~ޤ=zaMP\?'۫(8 +^__}фG9, +7HznE~|漇N UN%4ESr߁xQE6=C[(wv:1u{~TW@&pbPfB~ /iLgf7}TM;|AgQ;=lMw/{VMU$͝9UˢB?ᨡ;EG{KGrUZ >t+4H}}b+=ih 6kZk8(o;,i)L#Ҳ wt:%:A\ڣ#m4}7UsyjB$*ҡ1@%E]85V4%LT 3OR}4r^bV1nv[Zc#m`Ǽ# ZAؚ#1U3K6{!UïQL +[D>:,r4H>NO%t0U5<"E#?ɈYȎ ݳ[IO+%BGZ#$^c=Mp}r=4A]ڮYy39Dm.*gY ^!e/<ghi}Au<"BpB%y7=7==!leſRO^׬!^2g(R5l{%Kc5ne CU -V=K[G\¢Q8*5?fTBKx'uK2@T'ҁ ܢHz2n[(=+63>}Z5yT+6ma%5ݗF]b1C*-FKJr43(HϜ(&oH%9Q62$c's1j쯐{ o|ݣA%@"^4k2Uݷ9ӓ|XՅlTX=D}Ck7pMڏ+mhlK+*CGȢ0$Yd#qXd$iC8]1T1CvT s 974@pЦ~f P,jƂKl#czKǻ"Ҍd#V8M7}y~swOr/b'F`;R\#1LX(A,˪<_WH|VAʭ^0Hqwd&P RqiKlFjprT%}\*3"kSI]oyx-hq}םdtC)F0P$,U"`r3nFF!y>Q?)Cendstream endobj 1502 0 obj << /Type /Page @@ -4720,21 +4717,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1509 0 obj << -/Length 3663 +/Length 3475 /Filter /FlateDecode >> stream -xڭZIoHW"b 7'( z@YE"mU,jqk竷|oYq~fg,8b.KΚa6 ?_s_%bo>/8R6O̻~? <>}幫k~Ƿ`Ky7(>}p9kɾ ޟ#A?+8_~gg@X׳?QO:vnΚ;J9J'}#k&Ȉjz8әRK"3NpTTK4gL -0lB͗{K*P)gL*|}פ MoKuA(7g͝Î(7!+Wgv/!ٜ2Q _o  -B&0O3O>\)`kv&7_%u"gv?Kx(`gaO65DƸ@AO7tE= `qf72;b0APlƷ* Yc @=G[(%g͝Î! - Lݪg; y58@C~ʧbcwxTí8E CiFPZnФR-m(VwI\.PO7:Sc;&;\0KP1C[V #JWb`˰XOehO[qח2]Vuoy+ই7^=q -Qa;UӒlV2Y4+!q'䰂x[w^:sۡy/noѨ+ulou[N9oζ/PX )\=&dm9lLh)[mm pm( :$nWO[彇`ǻH;*1 ? ?P "i7 P5XP˶{+w\bo3J%ûuA<-'}mGϽL?b̦x=MD5'P/3ΚU'Z "ݎ0잓+CӮoWD~čkN'[~ ^4db=kH 5vx4@D@A@I_VV_H^mOQX'.2'b#!>"<ה6fь f&k+9' :Y/eF`JхI7mx2JCvhX,NI2xIIr`I20^az$9&Q'׷[c"gQkMإBЅDxOp@_EGhd@"h9"gq)RTONʻxW5 ը3UUM4-T|%1qIn)2sk);{ RP\hI$WގU61t"V7At 85I&(7͞6n|#S*g W捸dMt0 SxpsGVp %=>6nHMf!QY^,qp?V,9,6tvN*O@舒a/M[,v~`ZV2ՠpȅ]G:9Cm8 #ɦjIGS >$GljJB5 ڔ S󫞧1g8Y}#AO{ԑ|\{fqBR֍4(h1E(a#Dd?ukCģL&. -|QzL.ؐF .>DPqtlCǗdȚFvdi4fi:5(q'vV`GV+A'L!TV@՘xM˰. c?dc-YIK؝.۬D[ v/X<j0L C.}x8 R9EI?)t*|ƒ&Ǘ4mykOr0|8_8kNgY5$RAhlǏwƌqu = -ƾ~|˃xS lk?p] P8۞RIu΍,/npPA򕮨\Hr-Y+ -VO$C*<6{NZ%(qCM|Qp}A 204]*0\D1%7ciޥ%DG/wbK"㰚ѕ7Ƣlԃ{Ek\&^D*<|;vbsuLi! V)r4\2x ?+v_AkSšVǑ-(?k[tj~1R_JhA~G>II&endstream +xڽZnV}Wz1ps//ؖ3Gff Id[OUM +$ }r??b 40No'izI]oNSB{R\-~s_f0 ԝ4s.|l;~E%ozy.E,ȜO_>~dyFI~yv@et}šG_O~/:Ŭלs?w >4&H i?-E0JId6c9/'b:[z΢d7͟=8 ~|+"A:2׏˹s[WeT7uʦG]񬊊:yo3-v[響vSK g íy",̹5q#h]ro,,>1* +s(I2#bO$uZPfJ읳 _wY~DFve3LyD^`T|w8Ris.G#IYC(_.۳8HFt7>\>ɄF,G4EB3&OsX):kOrrQ.XxNgeqA".V+O|0[ h U(Uaݘu2fKH(SNE'50Sl jV -CWY\_ {63[T_iщOU,m2Xɼ`ZD+K꥓] ܢ'6SjkHR J12Rt0 Zۉ)NdɄVx! Q˂Ur%_dA{.Nrs}Ã~☄x40ҴE1Y,4}] +Rɛ= +7\M_jwY dv^b0~B+ur/KM7}Qة ֺGjZB;f21[`h_]1Man{B07Dӕ4K'(5BLye |"N%a\Cи`ڽ.q!v;YO(lɷmo} rj9;VfwO{{rC0{rYNV"c%buڽerI9,3ȁfuuTeC\WGYdvi;@LQ` ٠$v3)(I\ȍ +0 2ք|8k$7B#F&a Q-Bh #>0p⇘@R6=6hu*zžVxz>z$㗬2 +*7b$R{(aQ@ahY4:wԈOVZ -S)qpbx4u̩V! M0^o8F|DF!Qx8~㯈 [C(a0E0Q%Ϻvyu137)t uƚhޭ0l2p/jIlg64Pvݬ@af"?!GQ$OEvky02.j>*%(A C]P?穚ܖn-Ǚ_=̷l_CNBnjʨ%BmMM:v2(dxen&4s%T?Xn7YwBPd`5f3[ǶgʓA_ Qqt h}Ehzy}-)VJe-epWze[oNNB;AqR̘D9go1X@L1yVW hL ÍF}E`Pzla[$cQ:ÍHTHxضĬja02+;Io4[#"`Nn$(GY̎48AKs4ܛk+4$Pq&P qc:8/^yR l#ӏ5+]S$H(h8iM Ҩ1\e Ήpe F:w`1v- eAV-]J/;u娵PTZeV`G(tbd<ȉlD?R@N;ljAOmJDݾmUƉn1m')aSm"i,c5wSH>PvZղ> endobj 1517 0 obj << -/Length 1931 +/Length 1921 /Filter /FlateDecode >> stream -xڥnF]_!12ꆿW\EΗy:>3~7\[4B|MsPsU:}&GeŸhʧ?S7Nñx`I칱t?_D~'ާhk0w_1C )*uO'+*^mp4۶(жA\NnU56!N CmYv[M,|ۊRٷ(vS 8Ǡ "It"gg⎁JxA7k(=plZ6&R}d8vuS3wtf|L%CH:EBF^4NVBVȨU{E)/Hf % -  6-/-/sccVl!Ȇ-~rNR|oz}&+SKGi4qI$к]AXbC7j=1~#g]R`SS;隙 NSУՀc֔ }}'JIWeA\E[-= 5~hu_2;MU0|J蚒%O.#%#~b{\zM%txcc -paG1ZS3"QXYƂ|p^"4G'XsfMetھsY+P*eU,F`g - ΅XmEiP%=I7eTX͆ -C)d80TS|5 V9%)* =+8H#VH*E^(T%|J<{4@2|g8lNxYpCZt8wcrUm Un! xFqg/hK{ V0HRR<3m)3*Cz7eѠNS`Fv 1Ta-Hp]՝u/ ߜeqoF5 bYn0p --2.h(q҃IBFv-*L3b0ciǂ~3/xmnc^;@ ztwO F&! .!hF'1&d@#ٓ&D&G4}h ХFl\A``| )A]P8aT#֗|]Ń T()e!iȠc<CRa;ߊro'F/E[vOH.ak,EGp>3xchlmU5bE U%X ~=FI\ܕLzZ__~8vCV/-S#/2%B~5w -v=^,ՔaCMsB6 ̵=2k?OW2p#DWGa4(g3řYX -Ip 8FKWtd`AsmmK -rP'2a=G㛼zgMoaWbS?mVK f*Jz$m5:  K -!سQczt>* RZcF0l'3<`Ei Lov0C&5p=|V8 3#2RG1W܏TO}Q]q$]wl8endstream +xڥXr+Tڄ)|r<85$nM,Z$e +I|}p4EKr4Ѝ.i-`=o$4&8x*NåL"\f"W<_A"v9s>? +A߇_0 +/s?q>&E W6iF{a.u2}i5 `A©rE诖~L]&I8׋X'v/B +:ocI^F$*W(uW2ڒIdvmÓ~ܝIQÒNM5W5F((nUu;"M\s{bj^;fe^u^D[;"SSb{!.62`ׅilZq& (r 鋦jŚ3,I1_78.8^;ZAQ);S-o'#ev*ݥ(8YSԜ4D(>5"e'd#}h-}r8[C˼#^ut +_-d4 Hh}1 ~䬭A,՜QJ ejگsOrmY󗂊\Ur\rQm5B7pfY;F vۧ=93&gG$B`'|gj仵V]"r!LjA@=lDPjJX13ڎ1evc%.:2kd2-Z)!q38ԝ5/I۽}Ukefy'=4K (`Dcnv 0yQZ>q9 p]d)eܛ-d`j۩AS*l+-/|JH!z=C’R]v^J\FiHThÌ*@C>Z9kUna~^WHRT'&-B2ݕ^Q[JVYp :5U6ڰع/Ҷ]/mt%ji|G'pWzM%oZhwCp \j_lWH"hJ{3$p\ ˢ*F#ܫXv +0^ڝ_%hͧ6F9'3,kg +hZ|ӣNx î@e\/4jK滼?ySz(rFz2 +9iXRz_Bj+`җ NyH@ݗU6[ K4t\Lto6RV@}?fi|_CRz 㿷)K?w^ NU ?|*77Fendstream endobj 1516 0 obj << /Type /Page @@ -4805,23 +4805,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1521 0 obj << -/Length 3228 +/Length 3207 /Filter /FlateDecode >> stream -xڽZێ}߯CV4@q֘A#q$z)Q )ߧNUuu)X`]}:uw,LuWqhn{mhwH3fiJ+K;̓0JseWIcW.<7wwq&N* S=eE㢊^8oKXTku޴XA)VuGn\oQf* -m~9oQXE Yfa~XDq鮛\iLʠљ~AL=~`K./~' r?]7Pfe'TD{uQ#[증vbd1=u]-(x8؄"O鹈 la`\~i>0U0mԼ'9bkN@MHqpԙX_ZGټtA֯*iky$6xN+F29 =NW!-Aw&-Tc}uia%v'#L*ikVowնİt?53MWs1ܧ߿`"Xt +P?*7~Sex%y|i€^e-qW5ARL*//EZcU[%ۍlQ[dyP1yq~ɾ(VWLKzp6OUk~FcwB4-k0)(]fK%›z,*d-:2܀M`e*׶CRj R`7O >Rb gJ9Af|(bF3H7 x\H}q@;S`̢G^V9GHP˂#?UU#z>lV1xK뇩~'7婧G߽<,EY;^p) #:9#9'$x2doȐ,ة`Ag -7/Y$%0h vmXGgOnh7_g\ -`͚| = sMKvWq -ulwθh:V_\^PU΄?>f$2!!tN(geYRV-˭$aRħnwvRMOG1 dHJZ+JLyeQa8xΤd=ش5tIFG2Q-y\|I`,ݯե­$"0lpx6 -Ab4Fvr,Zm .ɂwfYyj༛'xfPf4u`[k? -lJ^Jci>1gai'w#b/ 0q~@yQziY_(WqW%E+tS!sF%ҠROetqW='e&. Q*ĺ1[4Jî;ٓY0w/Dn6xc{IԠH~@O/ 67QD#. k s3IijQ:j+XUh0x G7A΄Q[`0 f&4iB ònh"ፒ,Cؤ{%O4?( -GVbXD쳻ꋋri_(XQ1^ILk`ebREgF7ʓjDE$ze"y3M$XO,7.S)ߪ6 l6{)4<'Gk!k@Xa`B|${m.Z 9iYt*J2}t~̯;ֵǿ`r]^;A:{='z:1ʨ�e؅y9~{>i;Ji=bI$cY(yYx/+NӰ2 "_<3nq E UDǵY&5Qqj,\&v/Z8L¶ȜCéE .Zu([ 鬊n9٢X ap7/&S uJ1yT4O5.}|x}Z(Ҹ`U ?!}/!J\5+Hd<=Wid5WN"e+IKJ4wh&껖7g}Fs҇ODBT5 %훧aZ-0=N~YK=Z0Nz8> +xڽZY~_1,hއ$1ٱ CđD<;>UU7[ O꫺꫃E/0J뻲ôVw݆F{,O<˨}epiGEFYymNRI-,#㻯>&]E=>j(x\q0UfL2͎zOF{#2HE2qǿ̣e Mӄ8q~GD}XfilnFpbTA3z/ҙz&./~'r#]7P0YOI2:/giXhteLϙE׽~/V=- /ОiLF)W:_q 1:+u+_(A7d\1BGbcw[n$tԽ +am9򸃙P-j:G˳$asJm'#L*ik@Jz[7@;ya-IYPqܚęeY+9Or0 rg:p{GہI)2sI 0V #os4[|̯E9uR7eeI핛+7+%|Rv' [{ŎbǙe%IʕJvfj@ArwPهىѥy~AaNpPa(j; r)/hg.%KA2WJn&0*k!TqD +,&asHO=x$L~nxуwp~1 q />bg5.HuX1rYf$ +/ +#$e'lܜ7ʷtvwyVJ6rzKsq`K0zYSg$YkrHXwh;۫QЪz'hoݺ(WNh~z+` $~?oGȶ!:Uz?`d} G۪*O Ws\E~/^R=a2Oiuw/*QjN\JB NňD4yhI;;^ /2$&恫5 vl-7sYB΋w6I9O5B 'p74oߛ/.fMp~ %)j<:g]P n ?.XK/r0|Ճ3yxiRYh7S9@;8Yї[I(ɌO"`K +.Eɳ)/0ʳ3l4ƥ;6 vyaR>L2=<ʣ%+8q Wet|C?t4Y N/;F!H2OW8Ek4> XUA_ %Zrk44OMw{$o NlaN64VFsjs&}vrg1,ь# $qPWrg5Z&A]$AH7Uቑ3` ,U2xr~/th;` +?s3&ĥ*5JbREgF7ʓ Z=K`2e֚|TS4S' ig*N^r3x + Zk#+=N)InlE > ; qM3N@Vc^\Noڽ4v2yvZ޺:Lºkr':S>Xg/uгt^WQO}@'F^#[d_: PV];'o]* )`JyD^"KĊ,bZęHĄńJ8qM-\*v/Z >I5?-4n=Xfo__{K/q͊@iU&Y,+aD%v%T44 +7gFs҇DB5 %[daVV0=N~YK=Z0Nz8> k 9 -B"u-ֲ@€D&7\{:^#-V~}x lԉ2 ?AU>Y - O9߃&j:*$3Viab|s JW.Jn4m;p4MUw5窰fv 4;yE&tS^ {34__ApE]Z.P4v2BHW)*d`2^n %IͿ;q3/ꄠ-4YA&>?/3eYP$endstream +B"u`.st_Te;#2 /e_DJ˶ډ/L0< ݊%M|[eOzZMtotyGF[;Q3*0٨ef-h~XbӀ.5<|仓tvZŇOeA]oaڃl+\hvDai"o[kuiiwD5L< >ｈtf54__ApE]Z.P4v2BHRW)ʷ*`2nv7Τ@#I4$Ӹ?&i|~H&wy8[ +endstream endobj 1520 0 obj << /Type /Page @@ -4844,13 +4846,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1529 0 obj << -/Length 1103 +/Length 1084 /Filter /FlateDecode >> stream -xڥVn8}WyJEɢv[E,XK%$\HNE8pf̈ Oz: By[mGw#i5|Af^~q?_b+~j/H/ŧw,\~*շe>#g<]y~0GwW0P0 " Xu=Z:bYK<$JV RF&a111D؏e"vuˉ8TÆeaWmz= /2>1BgI;}i8JQ۱ Jalz6%^0K$,#Йh*g0?ha'[Kc=;XtQ1ԪiQ)LP)*Rg يZUo%-[38"PK_$ AT)=+LcF"qnk@'W|wؘݎ44 4lM 5T5ibFQ}Yf,M i8y ݎҽQaYxDҞ(Lt Qj̀D;tq|Pz8 Xf -#b,8lRra/tѥ-Ek*(IŢ% z#51y2׬,E$>+#yTXΨ@XߪI3R2 dAR#|nu͚gm++kˋ9R ,=#;MWL9P LnR JՇ)i=i؜G:8 ORhm\fs\[ U:hv~%"Dݕ0 \a|]LBIyߗ<Χ|s66l+ʦ* :`.>/Ee `:NƷYPq\%—S~~ݚ %'2gr5ծ47pc=6;§V?a7MMɄz`(GQ[S5D*T?JSK1kJ>^%Q| `k;K1_z' -.?`o6ԫxeendstream +xڥV[kH~yC5ь xnKzY[PJ%be+1=IMi)\o9S^ ̽4S22o=H^MHIbr2@AkR)[1{^L0 E&~fX̦:S_wX*1{{5SDO,f9+LԐ{?#cS1zܰ`7A0 ȺkAo`5ؓ@E'N^[_7 )fLTku= f|kmqS!ȳBr8Yf<;70mT4㣱rJZ}Gԥc :TD +NdbJ[Gh[RukFG;^wsXY + c݈aH1"ܢ/*EoE˨C-.]pTuv줵֔0HLke6iR\(nؠX F U) R+rHr!ҽQcxx@Z{E{ ,1`=fD z(D1̀}_Fx%fYp8ƝRraX:ѕ-eykj yHԶeAC|1''^rRD'm7:Æ+jp2˗ar2BKi;.7 k>Uq"++sJ<}BOr.x7ݔxaKҰ5ΡOJhm\e\3AR; ?ֱЙN;wő,y⯏ )1Nc'|~=zC6ݕU[W%?X~=n>q:x[<{}VF 0a*+~]i:.x]ߏ|_cD\%?S3W}eJ*o~l9fOsyiE'bB=(0tNe> endobj 1533 0 obj << -/Length 850 +/Length 710 /Filter /FlateDecode >> stream -xڭVMw0+tqI>kW )] ؇$ 4J+QD@bCy!h 3_ X -Ia"t'5 1`.ΗkF#X) D)Ü2Bh=KIU=qǼzzȋj.->J[5guL)V95Y Y z{mA&{ ]0[uޤЛc1dtxy~!(t0@0&!Z;jmSL-u:CX 1;8 S51αn0ptal''4m i'O:$`u"hG< ;X#3q%m ꠂVj7cơ>S0a 8&3l] +gQ]%3:/d4 a $*pӪ0#՟-;@h@_!:?lh,/?o.L ;\un<ɉ\&Xu~C>a?o2endstream +xڽVMS0W(է-!R +Nrai줞:6(?BL0Ae7̥eV@qC@hNuh!%%{~gT}s ֈSSg5rJQrdQ1=_!Yl}@l{bIXh5n}Dc"Jn| /wQI7l1;81uNL'` Jy`ZIG1_V09T +zcM(1`F1f=JwkZ]T=e#7!HBOel3R`ilIٮOoJl3gXd1$mIfZ<>DI[sojh.yaNw>8SL6a5xH~>Prmy>*F ֪|Wu.oķ&^ZHQ2|99>D7wH l=unea{ +wሚfsJs壵bvA?~ydcpjhc@\CiЬ/{I q$[`i[yܐj`y/tBw"=ݭN8PxkUa#V?Mvt2 g%׫?N| gV0'Eu$*(z@} 86v3Bendstream endobj 1532 0 obj << /Type /Page @@ -4918,23 +4920,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1543 0 obj << -/Length 3491 +/Length 3256 /Filter /FlateDecode >> stream -xڕrF]_K*08rm9UV$ (`P^۷$Hy+sFOwO#gf,-[ų0r,Egy+<Ol."p- 'aEĖquɵgmgZqgAYfc_/|ߞX]/T^/yS];y'sջpMeT^9\f.A ͖Teu@=i6ł"Q# 386 -ÐZmH ōk{=VI_4(ؙ`mC8D`M Z -* Nku ^*}(Ҝ_;,>\?,qhdtD [x@ux~#Q|N"fS#ݾYuFr|]U!;DN)l$t̳- {k8rv<јY!}gxOPҋѿh+,L?1W hX6/~j+q,qBdgs (L(^@9]p'HuͭAOz&M:gDŽ$0tTVbFt4CtvLbg Fr1)z6~8xWAQT@>Si~Z4 -_7eKݛ7Vw__[oWEš}5˳+5/QjS{o,^գl=G,(3䄦îIVHpݣa j-xlLDPGR5?}Yzasٹ*CQI |>,-6'bsx,dy,*=:ĵbɥ}$=!'k.HЅkL0xQg~޼moV ]Ri7tS, }%{ȥ2fiؙT|/p>Y/Zr󦁾x'zI)X~ΌNY& ˋ##nH Xh`rCnW('S!J]7:;JSQqOQ'AɣB*3?ꩢ v=cf% r)6&t.&y;:wWzR;PBL1n~9{INC ,)šUuzғ+R3׋u,uʆhoaͪ+ЕPɬ5ѹ}˱p -z:B@ta;J?x#c[WP?naP3ridL=ˇ8owwSXGX<*45vi~a~,.M =#JƶJGkaC& d3l/c k."pYTRG*VBl8<0E5V87"Y-;\+7%rKN;a=nZ*t&CW' NN+I)]ba?>l5~ƋبA5k>'k|1eW 9[R}ams9ߑis ` ,6=tI:\_-ZȄOWD:swAL=q4QfFֹ_ -55pH{ofu|7shJ8S ʚ2n1!E>e5 >v˳zGɢY@Sɢo^0`W{<|їR?3;OضN - -L9hp=5*񀒥 +cTsO|m ~cTGH롚Uv;T.^jMÿB;hT26w|"u肷yendstream +xڵks6_*DIL&9N.MDR'|$d_>(7kX,ža܅$t\lj$93|+o< s:| )?vXI]x<[D8_ s:܋y\Dܛ7eà`Ogo+zI>]Xb'b̠8"tMn=],jYV۶Wh~@4$l9Y[/S}ʪEVF-|8:4ONl(V!tk +ō +W{'+YͶdFI ;'E8i /WXPC +OSÂqzBz'1:(qGt-e kCHŠs}^.g8-_!/kTldîJ=g$VF;]U0)7R=/wʎUp'@`x{;#r'goVt'溓}>&q*=z@n`l·~Mkܾy@t4 Wӑ;r](Q +@c41ld &H #ݾYʍHI#<=B^]U;Di7.OxÝg0a;kځ{n8‣7< K\ +hǶ"8)lھR)zTcTo7Ȓ;Iٶid_J.h!sF0je9IM h;c +dVڏ_{csܑ +̐- +GUyT&sF0NH{Ano!Fƍ@X7N:U^6,JA4?*ƞ& +rm=;xf@NΜ g$:MϺ{40n:mqY4%|Y;d"{lRCeHٓ?_Res:[b"WU1aYCLlcryAV=ڼjz`.04ۓEɞ7|mW賋cF&z5I0 nG1r5MŸd؍ +Q:1)zBZ1.jjwehQ&7>^~X,~~כMnEg'-s?C}apX>hL|}SVA1?u$=Ѹ1#NWpվ,GF'QvO躳@iUz^8mLJh+X:S((AWqวZ[񢐗NL,u`vJ j`ϘEf!W\>A23뗼ٱvR{MVzYvE)s#z/\odiHc,\z:'DfY0y'W(Zoӽ(4mBtMJJ+MqUwtDAΡ9Ǣ{9:WSaorPO6ݸ9 u<,ڦ4˘PvaLXgĔnEӅ1GSt*r\TmUQ€]0}D"o`3$NgA?AlJ;^>ܥYuvsmӊuof+6%d:٬zo]Ù'$Ew#TߧsL +!_noZS =T2z6j)4-N :A$^t8Mt>NօKԈK &MwGCM5=>c vhvy!xH=KSz#ɷ:Ǘ6aW@+0.7_P/Xbn5OgӑxJĨ8Рuh-!2 {:DmҾ5O)a ۦ#mW[te0t2*uB ䷵rzJ"=s;ƶR0dBoUڶyr/$BȤ9tJvYGۧ0hǹr;qD o*EkyH$0MDx;jXv+HR._k LCnQ,\'ΩG/KgsvcqZLPPŷG?珋%z\*"yZxv6a%Z pNqIvV *ۺ %￝vHnrGW]G5<q^ƃ2gK.X"9iܗйR9 ׶ <0S H06~4P"!=4ǽak5Vr2nf$bv9f뜄ZphC"&4$YP2jrp'K5~@;)SlE{qzZSy#s]9Spߏ-> endobj 1560 0 obj << -/Length 3211 +/Length 2921 /Filter /FlateDecode >> stream -xڵrF`bID)IZJaD$$@ק_3Ek*s0=~Mj,IlfXB B@=/K y~aW7]~q"IR'޾o~ݽkwŧl ~Aa -@Ս@ww[Z8c!C?vi8EDyUzP~a<3@}. -BWNjAFitBΕfYOxjMq-:M꠪5'y[rj|it#ze[nj5̤xL0qx+bQe$*x/ ]BK궨JAJ%oh:mw<H.dȀ O<e^6Ǫ׏]Unm^!5 ji2*U'@܇] .@kV /pE`OHU֨]>i;$GZgwLiNF ͐#p qHk("<:֤B>x^ Bw*{DZza6e CUjd¹Yug[:v_: -ME]^-ةCHk0c~?=A@!/-3}4b]ņaQ+O#hgy[uQ{!>O(@P w('(=W\\bn Ĩ$*sC$'$c>G(pf'Ws90Š셢!Y;2bWIk2+҆9{6R{ǯoyFfW CL^A LaPllQo%V%g;~S+'JcK@ڭ`)zν^/`bݥ}ap"H4it@#@`pÙf G/S/ط ,Rյ`nMm6D^W)rqڢ䕪4xrP }S]StRMKq B -7td,J,~Ѭ]^n-Hs>2g'W GE+d;48tzIȺP f{j :u\<(yWYjM\MnXMp zͰVq" ġza>M׶l֊'qgǒ$߳al% ]P4FN*9޿IT|$":D^; )$'[tj^)JSH65>.w=ɐ.rVt3t9`\av1\-u{"EtJTmYZE׵̇ӕ&>F۸p -w-VH kǥFg> cޘv7LwV(*SnRk4^wB&JIf''r xC!(i.%jLk8)^kdVwol{/dNafOmF؄SףּHdcnצjz}rQ -rgKiEUα1bzIɢ]FΑ3Ԉ4Mb0-ssI+F5ٕKAv mAV98`QpIMwagI[vP/➢Pf$L͜UqC J+D9jàFT!v`DT]| T|b - `ª͈*  |F䪴,[+l 6(Lf632,t3QcQ(/ut[܃gbis+JVS: p?;qpml@=a ^~Ns}sXzߨSvx~ւ'2Og ryGaAsl~ytj$vMmyQhڙg!a.ӫ.rʲȷ.; :Usv T7)|endstream +xrF`Ġ9K$c)5LJ hZV~ $ˉ^^w}$j%~y(&Y0YOgJ Ii[nc +fE 7wܼ|;EQt6g /x}yow,<8UOgqIɼ:> !ea~c0*pd̏39'c7Tyhx~3Ӭ[Meլ7:8yUkaqf tMt[nu| ++Ya$ྂsKJO!s"DWUwYV<3ڔM)Pɿ_Ȅ9܁*n6%,Rwg@ x9||/EM1BcoxUSgh8KT!Ll!)HOuϻ#8yڅDh ĺ^hkC[b +$=\)oV}zW \@"֯!ٛy_t}^$(IH9e(g] ;d tuW.Ҋmpڰip?%6 UČҝaӜ%^5Q}gk>:T= I؏졏|ԡ({hpmp'54v(͂A #?g|0%j1zLjZL@m^םğX2PM4x`w`OQ l' B?Q˹9X+TPBV . + N$&Ɩ_`U!P3DP@" xqShO +ÿ8˖A:O-^~QG +W, XuQ<]w˺h\lĀwmAL/]jՇĊ=`+폩uM:a7N^t +Vsorg@˖؂(J $o X "+\BvDf]D m]4Iu/G aS^ P|*;)y׋ Za{6EҒ' t`˰aȿ5o#JBߝgjx*5] +$WFo>7sf +F9EG_r%< v}]Aam5rj, {=u 7a=&iC}ӁHIF ˆE,mD>\n=#9bWP+DEteٯ7f̀_h#mw'=.)ɷH5fQ>fP!An> ȯh.$\֗Ӏ +ܿg]cѣJC%p eF<6yzPcqppJW12ڔQ>7 +kXvx&k=m2nΡSQ+>bw`]ކѱ@gJ,ߺ<@6ơk1*#l; bΎ5+-J 2m1̩JUSU$ H,eDeTk$VeϸЦiȁÀ "xkׅ /o |X}JH#Ʀ/|Uۨ^pl(~/yє"P+aZ{@*ݍ@{6oYJ}to_PLHt8y;|;_\974 +{{ɒŴ1߮{?~*uIe_ٮOTD}?{8eO2IDžҳ *47I>S`Zendstream endobj 1559 0 obj << /Type /Page @@ -5108,21 +5120,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1576 0 obj << -/Length 2312 +/Length 1683 /Filter /FlateDecode >> stream -xڽZMs8W -osKdSkkkH[HԎwv ~trH>un`؜?6"#"?“͘C,daޯf?~𔒜C;"Rj{\fvB$\,4KWƇW.ۛ-~}\5͈#tQ"l'%~ eɹ}kG)I/%Y&G1j P(*!/c5Y"soQH)Mrm-8ꧾm}Ԙ+S+9]RB@ 'o*H&BЂ"!pW!V8}@T|ET3)Cr DR=*oDԶ:mvp<0NXΉ'SS*߬ԶZ69)U X{sVUbp}t.Yt_0h<)"<B _,E@BdWbɒCRGŌ$gmDXCX=hv֮8a27׏'{]g`@Gd_?>!Q~w9TO]~H<X:pk1H FirsVe$iA=WSԧm3_&\mA_ hh9QiB]oSFfrpWݥp'mAw(# XI$RMR44f JYe$e" -\lOU WwSB;̀&9}a -VLO4(y m`WL\z1#̨=3WP=ٔ-(y -<̔~7vIß7a 򝧺c }aeNham./yV`s8$DB(0u JmD<ˍm1d-`C9YM| ֿP׎zT]7+ ~th>zEM `>D>Z̫xGx/V'יnq:c+L}sG>c"uIG5jIe0bt/0n7~;#"D Dق~AIT&q%Jendstream +xYv6++S"x@vqOCJHq@E6GC)m ܹ\lLᇍ"Tر6c//#Fб$4Qjg:z~@'% ΣW/OXIcc|ztF,L<:O3%šxY;I%"FgWwr %8#("L +{tvz2a8$#8Izcp??/y1.}7*Kek3311$kTO@?-:gzp8KO~lvr'D$ v".u%A"<酌kµXC''|+EJhItt2,J'o|_ˋI̢Eǻ`>DYpyCFyZ%XŅ/( t#Q3}lD:ǯ 4| .f0ȃBkeXmуuO8Q\~~Kk@ Q<զ7q{{Wye9/KbiAti{vb$@明k?Z^5ŧ+!]aUu劶.b#QMS 10ĴPCXuϙ_ aUm"3o5֞2/9u㺆Syb܊ )—ٳՅe,+X±I*7VaާHׇ{?Zqݒjk[,`o[pP45ϙ ʠl@&\Gs0m +x#[ -eH }l3h998+i!o +ul_n72 )#-x{(Ѭ-D|Ka#Ȋ:!M*7Ţ0?|r:51t(|O``=bJ OM)KMm/Sv̞?B7[IupMtZ Cz.Ctoì#Q1Xt&ԁZ`^~SoѶg;w:zwwΜ05:^ȁ(xf@LUgQV8H?w˦-pt.?ܝ>$lȈ_MŢꆌXᇳSw<|rhB'w401GJo0 7V Q +!=-ثӖgσDЊ]Z; x~ g-k z?>9ؗ7&0 +/JbNZ T؟mA3WţKG4^<"sSndӯi-l+so]*LXkj!@[yq̯g +yZè@̏T~|u{Ze)]'oӱ]֗YAq.fܽk~D!)$N$LJкKY[Ey6}.}C!7&Ŋ b%yʂ}|3ڸXfE2`2Wx;H\;FG{Xi "Y=#c߂.*RwXA:~W $s$?^pendstream endobj 1575 0 obj << /Type /Page @@ -5193,21 +5201,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1589 0 obj << -/Length 2628 +/Length 1906 /Filter /FlateDecode >> stream -xZ[s6~J;+^ONnIKYb,2JT dG3;ppn8 $2 g2I&`=FbnD̛?E4H'/8JNӷ/?-R)HqLopu =}zŻE[)q!a.&d|L]_ յF+1)KqFA,͕ -~5 - *8졅Ou6h:;PH_.nLۼ0fqw-\ppXXNjxA_܈!ơ11bd 52-\\(f<ۮj2TCfri2kd2|TB>[aDt`L NVӱF6 -!gPG@}jYkHУfQXˑ,JBTܰ]eWh$9Ngr+==@"~<>Vk3B>ab78>m$bQ'ΰ6B2-속ơ~[۾ V96R9V` I4P_Xj9 N%WRUP\D~w5eS^Ze`M࿛ -aXDB)V a*X0B %cB;g#tKЖֶ 8%2ҨwO}Y D'' -D/&v%_b2Z#7 K5+\P/"z-owWdaw\+5*ЩtCS V:@Nb7&2bOgpRKsztZ%&ۧ\ȼldDj<Ln=7(8v>ɴUn$b$L[HLjMP$! zБ'DĒ)ѼI-Ԥ E3KH$듽rJn3HhGO4qkUq:dh =F-S.dd+"U=WE4(JZў6;= jvdÒzg}aHTE Q y0BAd4p/85%~TBJPMH$i Ԅ8`K{6H=sce -^w 5D`%!񦶥L %FP&ղ͝wU~.< a*Ҕb_43+V eg{z$Z.sAEr}.&YL'Zv,5*ɲ/,g$˝읓G{ e*Pv!QQzn~,,#3:!逃[O^0SER;>Zt_:{f>HSj+DMmK|z7#T2[`dFonAs \uvB q55}LeFõd4p;pp݄MDj+(EˌMu -1mt0Gf WԳ/!WYmDj;huեdI_ N,C3EB>T",ѥendstream +xZ[wF~ׯ[l-ɉ9Zj_<  RQ;9f]fg )L'% ˁ9K00=CǃG< "4+㧗8úv>fūs|䧑vbtp9߃0x105ܛ +rJGHQϋhG +C~aXm7;0xaõ5Pl[#ݐēľpbs8x[ׇpR&9ٍ}>y%?G% cRi,SB}s +N:Wd@;*BDCpS@$!KEV E[7ıLxemי؏%?Vi\d^7T0$OЬw5*'ñgA9&Y>fEHWtD#R\-UF"'fqWTC6vbWh)|5q;x^qRjCEcqA5<]N9N?'͜nKɦO FDh|ôY%tOg˯ls<l)Yc".LP8~xހ89~־ >2FFgD/QiM Z*.U +FHQ,|n>rU8Z=k0 M_q%; $;SaOM00);2 )8w*9%˶m: =s "#*-J=Ngx%Uq(ZLfBԮ?~!c7&bdki/>LH=:JlTNwt熊<6\$a#jהhI2^Q<AfҌY2ƦX^}Ǵ^دςe2ʶ|kd@@aBmIF(ncoc\6iDeÃ'X2+XcgT@IFSG4Q]hU.S3Uy4}wO^{ hѷc1?MisDξIqS^݂>p冊lZuJ8,Sہ} +3H> endobj 1602 0 obj << -/Length 2957 +/Length 2155 /Filter /FlateDecode >> stream -x[M6ϯa,m,KG2){읙h,Dy>h@9rLx͇FID@L$d&wp 2w0?^¡ezw7L!Z5ȣREگC -S.*IHSARVjXHIT<H0[ԒPQL)Ti(:ԔKYG.yoL[#)sjAX6& -C`]b~tC]7tuU4PZ2a7׿8T~)}mkj`U`-L8 J}_1 yh8-,o奵ުM\$92x4#heZ:UI¸ GA Vբ.eBjG5:'|UHS!^  +q578SrbkM=-Lq H3.xAv˶{<K($'a`A2 m8WLaN%ݡ.l"L&Q".{kaMhiLր({Ԣ (]-R]BӡlT\oY~(Q@oPӛ"v;ӳmкaDkXy=  9QZld!8tئorT NҎ#5C>s[u[@#/ʼnP[$ێK)o=gB'q nGHGV1 EH }SYmuGz0(1t{9b>]A8Dd'@x+v;~a3Mxpaj,:Rtd '<==Dӈa]gJSggrfnl+")S֔DM%&;fp W1 o,(mE?]-´w- Y56oчp5oQ8\Kr /e -#N4G/3]v[kWR9p ^Dǫ<[!Gd:k䥵6mɥb]-zhc }y nՂFG-c*3LTVdp=eNK[ӚNhWL71"ͤV?U/QԁyY0h.y1ƒ+ -7ZX53B⌕losz$=]`)x_⮮iL/nc?iZmV T38B5_~~$bѐ_dB7u|&a0֖ϔ~kN۩N -*GcT_ a ?<6ے?62F.K G%mSZYmSe'& =!LSAdȾ֨^j8{W^bc{%X*b)toԈMb2MXtlS8,'PndдJF 6=\w70A[)JЊqYlQ7YfÂ~u?ă (9o<:PkwF6uZ.>;^AAsߡ *cXi8 R QW -p?u|!Xyj:sx1%C6>X|~\֘a <|ViB=#8)Gԩ1LrǝQ_ ~0찈_3oP&/[_{Iy\c<0_!يbadQ~QKd2oPhIg+9cJ;O!r nO>..v+¶8A[nF޴pے¡׽C:]awnHzW{NW9QN}qYK]렷GW2 {=>޵\& }m0l[R ϣY*4&4AnI! =Dii +R{MRC:Rs O:]nP0Q:ӿÎpkoW9ge~߉t6)^U(FI<)'f¬_̲UQ@7>S!(Z-jk>I /:sN!8y]Bigc[DYS*)*p!/\ڒ E`7 +SI3Z?U<񚁚d@$'t(RVR*'!Y mߒ?B>3$MǕ^Q#w? F#u0EE*\kq0iz%t[Up!m ؈KVƠA%]9z +֌G!dDp}2wku}!Z׭27K+&M@063xx@+raMtNah Rg5 Ȑqgw_yrt;K9(:%b̐qqh/E '>:zC6m6?/P-- cq3 `),;% +jObd:1ԡ"2+.1 FSӃ4mͰMY&GЊrC 72%apP:N,`/VpM[5PY`eap%akDy^ì#%vu"aǩ5t `1ܰ ZCYnguIʆ=[@a)ʙ4̠rw01!9Z)QM=x촨4bXH)[K˝t[ 254f}]L;9?лXe_ca6UB/ pJ4[kJC.PxZb5L ?hAD+Hr]،(r1/pCm_u_S{G8cM@ScAi2T JI UU7Vٰ]amw;k8ފ_t |[ +g)%|꣔Sjn$+ysZM]>.KB7k3w'I"sDbH¥raӺ/t& j"X#U~Y~'4U }e'˂zqiqۮdbEpQ^f=%;%DN 課/Ygߜ$d@&[Ra˼R du HCknkwyo~wݶ=Lei?qEZSB> endobj 1612 0 obj << -/Length 2719 +/Length 1948 /Filter /FlateDecode >> stream -xڵZrF}W-`*cnd\N$'L嬤RQ$$LZVO\!.Җ".sf{C'!D8'd9 'wpj39N޼nH0\6H"$\>?sr:$8N?~x7?o'gW5o"pHO -:IHxL8$noNH_uS(8%1I^ #!`2)X*ꂵGH#Jl!%ah0xt˶ZbHbJ|YNg, Vp 8IyD1cD֢HEqH0reW-,>0f:A/ dWTSsO +MF=Qf93*ӡ=zIJ.91coʜ†:hpśž{Y:R>pԡ -`?/y^a4~}thU ХfqPZ;Zu i1T)8ܽq*`g#'Id=LbJ^-Q 3[9Dk.\.`R:SĘt^CxM!'4WI}&% #(\jy^q;SE 4-͜(p]~ً(BWf&&<Ѵy45MG]\jSB̴@th{4ז 6IjH0ΆG̀G] ̡֢zҔpՀwfT80XC凴}_c}Jb6SjmiY cFitTb|&l8>8]=mH8!Q:|<vtTeN{߼ܬ[pv9?IJbWiik9\Wm-_91k=; JwL_ǺEJ8j> -upvq>N@b+}\3 6W2Hs>TUxGJGqƹE7ca)ykLOݠ+ t5C)(\qE}G1J+ 1=fD+56o+Nنٙ{p3؞ʧ0GkNUc ZRʑA7AуAx{~ɗX|QEsu-_^cI`%I )mwWr!4v7~endstream +xZ[sF~U}`0S&؊RKNݕoRඓxҶJ0l-=w-j{mA|%uJD~].Oc;zA:=S9{hǟ<9q>z kxq?Z_(FQ{)NZf1mmF5@$`qh#0 .k{;f0DH";vuڈ]ʆiE21Tq%L3:i?w=:[Y<ʼn ERD[Qeg+ ǮGTL3 ۵m9#Npj"  8Dp=X\OJ9yqu $~ElˉjdY]~'÷.#/}VJ9|grSovQ@iN4a +ZhYHz U03o:üKҩй9I1#3L:=uAc&37v,G=ꮮ_^*uF)v1뤪/T ]q.yH*TPVPӿt W9OJSq>.}155|"`Cje7¢Bou!A]S4kf{R /t`?SQBxZB_POZ݀ #]yZ# WNLeAnGE:1:gb'ɌP5ԀgXSg POPmDY`Y,k<* A<{,_^‰ovgGU6 (FɨEIq3}8Ҡvr4'aԣ%-0TA#jϮq"~ *X/nKW1\휁^;:  +3g=kwdE]$Zo+|3Í3ۙI>2H-ž]jaM$-6s6ט ;@1eRygRf)5*ϠVt@&s _ LRC)x}a}$U]K);.xLQKߩm?̀WV ڱX] +3ux +WhqTm< "oƳuc!+nM#ͲuXaCM[cEp^I${B)[;|GI,,+N'iⓋ¼^rėR7&⃂.:ƛj⠏_swv /ґۄ5U.U˗B8WZ;IrgBxbxٌIK*xR.{'a5af2Ocʟ[;\s/͆U2VDzj~X壁{9CsH9NOt*]h~N{C[lj6j4\{8!9}ۣfN4 $ Sr{8UO0[TB/^Lx1Δg{YwEj[BFNj_ 7 Yu֟UƁoY~ȹ'z"oK;t:|IQt;_rk +CEޜ3rQE$-xxnACе,ܥVTk$)F%o}o@1*D)q~l> endobj 1621 0 obj << -/Length 3050 +/Length 1802 /Filter /FlateDecode >> stream -xڵ\r7}W-;sٗTrK,e_?XbY"$Lsh %mR"98@'O*2YOʊ3YUY6O~9〘d0:υ~:'Wv˕\O_۫fs)T#g󲬦o^tڽ~Wjy5GmHwC6Yi;˘W:c\?;ӬLߞ]6PsY)d.3VUyóUB,oX\L<(a̧Wf|O*&T 5`\adRKי(ʈ-7a} ̃^`R e: +CQ 2KcbXD5YlHhӁm4^զGQ3Vrz33j9}r~{g,˔oJD c럯/~=7 ^ xe%}7{Y/6+3n}t,V.PQLf%q -^>oP!kaExu"lȁb?xؘc(8gtحD7rVJف94RNnKo=aJ>,j&:X"H(VoX1{oz+-r8܄B- )CN)V$B\!sxǤa:қl]cGak'yNF]oˆEZC\t;yu|=';^Lw qx:qDmOhxۚw޶dLf7=E qUzh킰rK]@ڝ n}ޮ#[z84<8l0uXTԼd" !*+V=Bf?Тu|8IJ؆!sb&mU%X'IyoP,َb{߯jĴEbO@6>_6̋TS}iU_ -J-xJDH RR=ްIikhy-YV$v̓Fzև>m0cѡ[Qw˚Daf,(fz膘!iNhvZAwVșaJy}?4{6ruqFk~񋧑{1rX]&vfD K(I>up ԠIujYb+D>hkE&m[=D2bo+azOj=MHMD umzPh_G}nX8sަ#>bUB˫w Zp{*Cf@z,sٓLJJ*B1)"TU(ViXDzID2I9+.4F.G rpQ ة#P\%IUU¤?]0QLl@c4H[zai"n}ꌓ%g\t@NE# HG贲3넓jzDq4:'%}Nڧ椘jsľd7vwQ9&NE$i$3Umg+&,rٱ,7N}Mbۻ: i;{ቍHZ.iZ!r1RRnja:;CY%6D( ccʫ&L -Lة-%LSǦ] -㥠̀;BԥvEJT5dj奄M_`.ͪX4Ԑg0 ZJVko!>W{0r F@2<^ juD ޴б1m`sJ=e!S观inS͕ʦ}R05F|΋?Mc6m)g5ׄYF~U>/_ zshv{Ğܺ=٣rve gҴYן=U<6tmm!Rnu5l$٪rmR|8ҸyRjy 07 d얼sOgY8˜qi<~?ȚJ$i.o|8Cs= -lKVҪb<,={@bz84PZ?&,t֌Rǫ}P@n.v3MZF[FD~O0桉*낕Uh{8Ayӕ-履s&4 5Oh y]Ϡ9iY:NsH.޾dxQ"qw'd ߪ,B}B:#%-j?]zENڡyqԻ 1ެwl}]=eI({Ш#BiG68Jk"4󠭄ee:lz'E;PA=yUk5H" -%Zڗh-T<5e:Z"1ΧO|Y;=w1bĽ~Pp>Mi=F{)MZ4l-v|]Ju"lxgi~0qT{E*U=Ck)^@F*O6-PPV/VxE:AZ d%Mܚh -Wܽ3]a)z*&{<ҙC6(R?vG]kc1d]SOX[\SYdԸ5 EiW`B貇jUj R[ K%b|5t_f/Yfw+z.V{)"2 ߳x?ѮD<*iDWl1R /*Yݝ7/endstream +x[wH~g+ [{i(QN\;7,RC]fPC]$Aλevgbe7`19 O< Aw|^O/g=B#ݞsg8> ٳ'#uFȿO; xAw١F_tFY_Y(AǬ#pNm0@bJ`޺y 2v' Per,'bM_>`ީ$Q^oe"#UNj *tZJjz3k[@a[ f66lC᛬MdL#Ӫ\QLW䅔rf ) +2H_mLHaUҁ] mO;fdFn 0B#x @ol)Uh/懺WJGβ=;`4>{oQh)nj[m-6!?>L.>>͛>BZJ?kW|QPBL%::{y\ɕ 7O6ݹ&n q\m-L[Q- +ZH,_Eb!9&vEm5'9QɔϺ"[>gRʞXcxXOM]2ڲYv,C5X)|#dЄ:qRDYGTEt-%#y}#S3#Tb0\20T'pt{X@o@kɟ?e {L ,xG +k["5dL33<{W?\@> endobj 1627 0 obj << -/Length 4279 +/Length 2566 /Filter /FlateDecode >> stream -xڭ\r}W L7?6IQ$%!1(ug/=+- ,K`1UsLtvdzDޏ~<ߎ'BB'Yg‹WW'ߧg?JEN~8R^I"{>.MV=zĄ 2Ɓ1NYBIB 1 ‹$IhxFy9Oe!z炤w=&T1)IEXѫ7!I ܜ7h6HII -,)+f]Lu+%mⅽ绥͝v30_)Am;r#GK ީOVKPΔ&$?Θ "c=f@H>8fB֞g7\',aP6sBEbܛt\"9#@ݑޑ@]H]F#qe¨ayOTe$">)C L(S;D=43e?NզiJ2FUBVY\?+[t:2Vd{@Ƚ;P{\^s~F&Η-ր2!q\np-b)v{B݁4 <'"M쁽+HaCn3rs"R5Z,,SCYH9KR yݾ?qhxJI" sՐ$ |n^9wJ06buew,WMdLѼE4_y<`pnQn^[懓*5򚇏iޏQtn:Ed 5'V7` }SIuOb-{RhT۝dǿ!kmfyg-}Y~?w}_WRrG:zDI< =@]1Fu1FvF&Fܻwuy5\PS$$a):$R絢ht:(c]AYyV}3^) kMR7JB5DcC!IFRH icR-bvfVSTfb>c}JG#YB@!V eXpzQz^ =F[=G%gn/ (cHCa<ȭoAij6wۇjVn^1)&}.IY0-&`c+J}D?[y|ŭRP+^Q;5{E~֣Vg*[CR>gVg/{j"F ?5>@"E3BT@WeXQpzQz^UW"3r"ބ, $]:kIbk-$ExNe׭M=be߰ov+u#+D$dugYL - -ȪGV<=8=˛<')+0 aY}לt;y|TY;\7f=v %,R DbXejPV^bU WJ %]yV:г9yL}qf|"p;]otZ.0CEFYDbE$V,1`GbCyzpve燶չ[eZJ;P,=N:wg^-<}P-lȊ$%W D{ejQV^UWVƯzgV zK8AΤ.|u$ Sygm}!3*.9ʂ(~+Y6;m>{Oui=t4AB"yP(+U<N@ɥ̈́5!ʓg -N a9 d{XLg-8I0 . $?[צ]\KfsWp!X"T $(XID@D~9vyK81*Y$EliNga;ˁ/gJ_[yTcjB@yWe XpzQz^ހYj20  -FJH q֨mJE+25X?(+~+޽|׬&ą=%i8 *M ᴻޘ~gw2o:4AY9qAV= pzN\A:60Bs0pfzҐYԻ&x&PxL_mgTRmM)F/ξelVү@("`飬>N>JKлy5%-[PpΓ,Cnڒ h5#8ACdG茠IXks]|h1z$BuN}(Ư!Jڭv \s˩\gJ# -$D4480J>*J}i020n>*n'Zg?iv$aMPjJMy-<$(0xHkmO$4pjӲ+iے0rE4_,zW=`G镺GyzW'YK(j0Ao 'Ґ f "'i8ndN&dW8e}38#2v!)@L NOO - WJϧ_ή\DKOPu;yHebk A&*Z2L^ihFI$DejpB|BV}b82!Pz>!Wg- *m_0FL6Mgs8"ګk~mfifaZf,LJm|qz.!x7]ߡ|ٝ_j[ELDX[տ[ -үy?<&rsDBKMrcesĹY9?U/tnҘ;d߻vj/)\@fR =huvqIFC(䏝Oim_ETm#ONgmS'j)PySDqjCCZ*F]N Wޭ7׆ %!O's|^}ˆQ)oX8l~q{^jej]_NT3T3xyvѝ$=TxT7Q215߱K%jd/*=DHDc@Dip;-|^$X4PJowN5jQ5aT +F&zWG% \lI kw| 5`s "Je`omr'2ܿpO3dB*-2n}?^€u? +nt 뛚DXg=70MJDY^OD{+4|XGwx9@+7E3wOa/ٴ4a)I3~ ȺC|73%d-0f28i´M3zފI|0ձDF 6뼯" 6 z?⼜e>6hO>SM'+㖃J\?f`  +x㑋$T|eTs~߬6BPb.P>!J&e2N$SPmE ߭@ ױRUcrMDmd)rr< 'pf[|KKma +Tdd@u-\돇td62=#,š$ ibmO4AY'rOzue|&\([AQa`6;+=p-: vY6襽DjƸOzɵ6uITm[;w_T L!, v//&J}p<5xI():(Z;뉀@iK|kV߱":7pw ZGp럦W΍>r[©f#}h̔zŁ.uHn GT  ܘ;&gfrqX57aǹl,ྕ#S*:dtک^ހ@ qBR εe骩пlz5*"E,,A Đ%" +6I׹BXW[$ ݉#M( Cz/颳9 Iv]QN0fqȉ䎺ٴ0[ʯmw'g-Z}z{9ʅKޝ +2a-7ot8SM8L:6s2 +>VNYxKݪ7S6jX_40WY)ݷ=nfKo~ѷYj;aa>--}&zwTɡTڨ-msM-րhq _LgFw`E +k*^ |xx\5Nä&|g̟ûCqUʯ7 +Viep 8Ê'hYW^38AWd:,VZMcV͇:A]^i.K`WsF;i#q$+>?y !n!!(SGO3Q\e:>'2ر~2%֍;7ÕO"?|Ī0qJB&@ 0@va; +Ź^B-gf,Uh/7 +v'8 |Q 'sB9 endstream endobj 1626 0 obj << /Type /Page @@ -5491,24 +5482,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1633 0 obj << -/Length 3204 +/Length 3146 /Filter /FlateDecode >> stream -x]s6ݿB׹f")uƝj'7IhyHbw?H7N&\Ė?bV8Jf{nˉKMth~Z:l} Tuq~bb|̀߿{yvˋ]->=yZ -z?`Z%{V@yyruoˊq;cpT$(#/ D{XAHWBHO 93D(bguHKkE.FR|f[u5渱'{$(6JIpvMQz4EZ"*Ϙ}Fow=+wy7e -$⧍ <D$ Z,П\,.apq -[hXyj"t Ŧ[KM( a.-'h0#wҍ<ݒyd<&91)nEHuh"2bJ=)Sx0 ^V,*R.YhUvj?ġyB'l1fZߡ\D;YiXP ,Z%a~ӑF'QBk(HB1q2tD CΡJBOǩBE|8x5DJ x D0 ;X WחBYq Bp)=&u6oeE~n(WCB7d1 -DO0!?Eok@h먥ğҘdۓвMfV$e4dױ.A",6ԘMOPW=z p&2 -sYPޥhDN 9 eukc׀56]-ѮUG.5"*v1<ޥMջ>rV{>/D ߃% z3@YcqYڥ ]. * 6qp@01G!yinc92^lrycKH T f&uT$s"G(`D8Ռnú ހ4C>lÎtEf#v -Q8床:#~Pj߶IQXҬ4ZOY6p^0, Ä> 8]A^pWF8iM`XVcKS$ ))Rٞg-O/~y8}Pl``<Xd *PdEem[0dD;a/(ԂF1Ou Y>9`9Е$/p1q$S(nɥ(P #? X0/)-B>9#4zըqnU dF0D0Ip7DxJ kSF:],T4vGLP#UK5Ԏu6٫W26b >̤?(Zz)w F)801Va*ʔ33>{-$Xq Քf8vN -GCdUn$o#t3<6ӲuT05um?>e.*+rL7q\(kg 'i7ڔG61@HkIKckFP ͽ)Ʀo~.V$%6D(s܈qM˨{rt; .)څ& -P&lVSUT~, 6 .@=o -)$O: -)/7^$iQG}jQXN^ J'YCܾ\o}Ci5Xؕ}y]WI=4Љ[,^򌛬?\"}_ޟ3K9e:iޚ0œ{ ׅQGlK*^"7y|$[HkUD2yEqyX{@ǖ!id)aFaO(%GQʿ((u|w;UkGڗK_MHVg@OU?!V%'8~0!I$uѴ7&e enicjۑ2(ITŰݠSgxU*ˌײQD#PŁ %`yݐ:KO>?endstream +xZs6_I3 WINӛ$HۼPBR~ )QJfz/N#`Zr&?9O,l9{XL1Ӟ\quKD2[*{?xzf}ˋe~z+\_ꗳWKM>(f3I<{d6g:@f^;kzߚRҋT0[‹c=x:j꺿_..$eu"&]?.*m.YTLjq';d(ָ+9҃y5E{DUǢ{Qۥ_ߙz`ۏL,o}-,#(-e0R<xJ#kPa8 h_,@o`p}^FKhHԼj#]w@J7x)x-^ǷS^:^}A @wiQ8bD\Yx} ]&] @k`)**-Muq\-RB{B?8zk6b&$>X +գ؁W5RZYu00,";28UE">Iks9paׯ/_MQF##utk?\v̀Pr؄6 𵝽2^8MKx^ߢEӔY$o Ê22+stP pwhrD&Qx'SA@  c)+ l|-h/+rGA0=ᷤJ.r9_Fh/PIn&@Ayfg߁Jјeۑ'жM̮T8d30(*˺͏#m`jݦg=H QT,)RB* ) &M8ax9p06W S? LW+:UWxMtcNAO^W9cx?cOĀ?u;9N0VƫW,RѦy|E ^(>'u5oo]3lIp挖fv!KGz(Ak.X1 $ _Ļh,. + +?N~@xy}Ƀi0hXxb1-ib0ɜaY_ +m ej1` PZ!ʲvF|˥wD?$^d^ +R0qׂuYLJyp(\)` +XϘ~=X .;,kP=,R:N,[YYU3s~Y.yyǁ j"[جaZaV0@k@KUxK{SbF>S԰4B$!nḅ&m2fsY[n*Vh{~4} +R鵀>,޳fɷAՐw}XmrIESg3J2؃Ϊ}Āp3x85X% r $uZbɹ5uleq?cZŰClka}_aHa +r„t!Xe3TƔh\ (^p.bC1 +>6ii}6 $}4o/d'pAZ 6އ0ێ;NqBIz|kk>a^pl#Q`ܹ{z wE$> endobj 1640 0 obj << -/Length 3098 +/Length 2654 /Filter /FlateDecode >> stream -xڽ[[s~ׯ;fXK[g&k+탓(6")-xbϘ`-"Td0"Ygt'8cbIV-o_jxJIFM"R}ro..WB(45+7~|굻~w_~8W=2_b pF\S v%J -wR\YcgTeB'E(QTSLE\;<÷/Y{DK 1*,S%Kv]\I*~XR2bzJ= \!fs( 8#Z_}^r9; ->S+SX1Tf)-W7`x9L ӟČIC)f]i' -hZ -cB$MElM{U4'=344+]ܔ -w3Ug>UAD% AN;'7Ys~ظ*RSZZJx JxJgI62uv#˒j+vK%8ddgA@y1eF(<Y r+IPV& Xww07@!.D p]&ٻE-JRDk`uqA>v5k [p _8zoo_ 5(%ryeٳdω(\ĶNZ{Yq):ZO-cW;4XƉMiE#Yh5mw<uy H?ǫ۫Qv_Z~m}tb-+oO;e -c P%0ppь]LCtcAFX2@Nqb9Mp7;T@!NI48cVxHk)NmBeY!(采Z٫;axFR -~bdT Q̌=skd |=Tm r ->7K1ht43fk~r.9>1CA5yQ4}H՘Xd&&]h@4 0 -Qf̀!tw|>tBc1͠EDUhOht3\YO3`*r<NBWߍ5ȣa8jkFE+CC{`u -\kX͸T!KQvb,8>=YBAbh8>:C}w%߸;C.7VQkR*h6zCp -m+P;XX",K]ں6KDŝD3ѰE`Re -|= b+=skUm6sEtT 3M 籛n~5) $E$&$ ` -9DAj1Et& DvQv\Xk6rit^! uBc  };F~mLe2js QBO e]ӻKc/1 -[({f^!Ϥ׶Sz.-1nSۖ,4-dW-~W"2E3-2ewerݑ|]8! w&E[7;)qM2ba~,jw >RI~*E+_NY_wvWֺaX r81oy0w|ծӰYEURQ9gciA 㲭N—)ʇoy.|yaq[2U/Rx=`%ӗ/);ly(o] cTK0vd&B2MyWip-TE3md\1BYxN3%L͔R͔60jeE4`)L0D5F'4r,Z;DdG3`9?w슲:1{&0Cx Q@Q><̀n8i@4.)]OB?4,3DxTlL||_`[KMlշŇm9i~͠LbOR'H}n:Aq]'o0նh&4%R(s\ܱz45]дQ  n'@??لG`B)f:9-{Rl?VCj(/fK+d/no=[NVe]8 SGBÁim60LEM .h6@i5 lqv.v!ݮ,3%y('dyJ{s[[ 5Dr xB ,U6=Yp*N, r54ndþk*7')X43LyI!M[̴szuJogeb1$ ~G&FґLx]-!|(z< ᇺ _+>MǀԚlLCi3zPPPC8G /6h)-}~ )lɏ+rb+9v4}Şf}=In4䪪/*L1þҭfc_n}֕o]Yoh8ѥuot4Sl)* - -KJ $EC/0endstream +xZs۸_>Չp&>tlis3ISiry%ZV#QH'ł%bˉ3A {)Oa\% gG7'84࣓ˣ^[,Iړ\>F<~yv("xı]ī=~Oc +|9Fpߏ8S}1g"Iz#m3Zӣ׻3ݣU-Whia8sNwRN?PEV"z'h)ͬkXIO?Qh^M@s}#mX0']XͻK%[xhŤuxRýx=m:K}2owO'0XddH7@$OrܩayʢPUĵIC3.7 +(WmB,6Vyi5.L3$348f1H9 zqbgF?WDT1m 4tdo%`h+o%Hpd[3 +),p}^4glHQQDg@]W6q!G\ЗE.+ Mm (jC9,Iǿ~9Tǧ2ldCf # +XvR lt^8;<8I٢%ӥ[?X huv'4CpS,4GZ {nZTp س0PQ{HlzÑ֍BX*ʛ0?Ҋ6?*wһ㙖]$Ќ†(IlG+ fQPܜK 4j2l0C"noϊ,/[6X"I0uF.xTHъHRxei#ߢMn֫WMXq'4.}2 cgq#ۄY)D*8c v8@ +Pa9I0 ٶ̴X8̠ DjӾT\ѓ˯kKUllZ-V6sx|(D4ZvLY7_:elpl_@kf|Jo/)GKaF# +#o١ -RୟSbhLPcVX: +3A# pE=l }x?_k Tyjq |T>Zz\K'+ Q^?+_ a(jAq]L-ګ\{&D<}~}^$8JAj  YO8w&Sucv^  +hhK9z!Nqzvԝdr'le4q!ՎmCR?|~S٭Yu+ةWw>RGv%:)gdk-a#Y9`QPn U _7BxAjI.oys̬ s9]mٗ2u;c@@yWYLhCZp(ے Mj/uN&-8O2϶?9c +->Qj-}{fV8UPEO—ǡ6XY_XSPSsT7QzM/t'ЬG{6Qڐ)9M&Kf*#gK TS> [20,0ۛelFw[+8F?,6f3UQ+a'ZP~[~d:ys|eHO7C Syg6,G_0g `N!/)\c,/0J',q&Ǎ7)t'zϤ\tB85T kqH"1ME'fAj|-mdP>Z2Fj +VJiV?Oendstream endobj 1639 0 obj << /Type /Page @@ -5605,20 +5597,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1649 0 obj << -/Length 3214 +/Length 2499 /Filter /FlateDecode >> stream -x[[۸~_alj5WEQ$iv$Mhl4fƈ-;CJhQtEƲQggY"Ҍ3e*8!Y:gLi(nqbb9[m͟Ջ7r2Mǫ_6o^?W/VvDЏWG (Ud>u8<_T+IwWoeե9*Y*RF,E G,TKp\0̂?4t^ >oK>?f[5x?y ϟ"g)2щ S!Yr)<!%(55Rj~5?j-X#4^ﶥyHG5pQ h< x.:P.Es*pwoVpgi -K[bh!pɎ(چYc5f)0[S(6Q /f@T568&|bwh+/ ?K;C b1.a/Tb< {=^}z.Xa)g1z};xS7qR6շȯ6y/AEiv4̶](S{UлpSv-o}\Kdaւ&`vWN,Hm*]u%Lti)IX -X}OD|~D7x6͑~8x8@8(q,#o<E]P\~?jzgfg_Z[&geՂ%xjPUI׿2N|M ZEԖN$b#\L1- ҩ@!ܺNYO_(gi&YѠQ ⭫VlrH7Db[IKr| @I)O G&J pQE%B vC#'LNZ Pf0tksnݟt{r!/p_ _< X>q`Z.yeR@1E}/ ENEnL qP3^ X-JtrwҾ(sOW?W׶YO޳I$Xu1Ƃ hܼ-`P/J&' 3z:m<6U65?t;, @ Sٜ12"ؔ#'MA$W)T6~nܳԍqtߛL: -.oDMHEvf|r«,fdɼ|[:%:轶Nx63p [Hn g+ݺX+U05:j-~΋K$L a]]L= -? -ؔRfqZvȸӎaIM07Ǖ`H`5%"HV97c-.ICD[]_I]Mym^iwwYXڙ}G?$Umm~犙uK.`vi[N8@4;@9^*XI2A*R#2l|~n'>5K1h߰>/"qQź1w.+CvK}>/gg.oѰtP\~_ EqC_QGlRF' 腅O<_5Tn2[٬~-E㎷{29 J18Tz(+~ -3{;7S-yF=SS3?#Qhk3QXO#bkgOLw"Y&Gx ^*P2Slxnrendstream +xZ[oF~ڇՔs㥋ɦUihH"R\f(Jd77bgF3ss?C9$V:ĉ:IY8Τ#COg_Ag(0ohx*xÑ:(b| n|gƭ=FFH&o^S8gi2xP4,ΌgWgnV13_22ZXH"IL+%rUZ8Ȯ HlRϊ৫g<%?ݥVX&"%M6wV}"LekUi{V-* @ibCp '(*`1&(o3Qnw|Yq?nP4]*FҦ$@^eEuc=+T'g2(wpnVrl.+TH(MB8C$-`7%pdmG#|:%Dr.a(lyHd:e,#y^w:BܲvwN&zdB nyN#9[̊aڅ.DL!3Y*~8$#}jTe*t-lf&+UƮ\#>z$4ENHV.*`rO;GBOg/,eF$@=#,XCTD@~qz"4SxlrίdW?G7<[AH"0)e0y$dw^@^3fÆbAwM9_1`̥CG6#Ԝ6RˤB6%,zqJH8Y_c~ʧ&+Pϡ ,S>y2I r1e@wٟI+.z0:CRUeѡ>Qz_:I7bu7C`x'?^xR)N]C>uSkN-f' ,xBxLkUvvÞ.M3gboI UM4%bߒQHQybxLʟ?,svS}Z5zX*%wu<ٟ<_k|.uO&ʘZMǤkR!#N}3RH>3\RbݘrʧL"gC>u:` cV.! OZe\#MVft# +i]J͝Irh`6yGaJPSWjKpU &t@ rpt-3k@Ǟ"["JZ^g׾CZ!TэFC辉#bT-]]Y7&Y1H QǕ6+?rn +>BmH w9)_Q:i[#dÁI62{%ޫ3C/oǃi_aryggbd_c gjsM;7zMp1aݸ _t-#TsP/g7l D٭KGCr#J>?ڥCi{B +>~g(kt>N5gGg92h*SOl;懿Gs"{eC/Nz+9( RDg%:}̫ ۪ZiCXED [`HUCEFAWechW^&endstream endobj 1648 0 obj << /Type /Page @@ -5671,22 +5661,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1659 0 obj << -/Length 3171 +/Length 2475 /Filter /FlateDecode >> stream -x[Yo8~h D=HsKGrxg$c.[vkm뷊Eh]^qSҧbbUṪ,̗,8Q4[] x,˃#>xb5(g2fw+J뫃/(zfVdwR7ɅdBY}}eFy-  }oI )=y?*GL19.ɤҽZ8Y,eKӹY&mnνK"O -./CCrR[|y.2wwgEh)k@XLE8 4Sl44/Hz$m^ػIA{%غՈ,fT 0y XȊZ4duM$b -8Pm" Gh~w4W" YTwuW0@٣u.cڹ,9ֲsy:24nZW9QD1R17X4*cbTѝ qŇ'tŏY$k7%BW=v9m{yA"6_'+dqcKdyArcl-;&)α".[f6ڻ݂BF[^߯6x{0v}VCmxEek@HHr +:O~_Q;C^w<,Aܻ8̢2͵s$$CdYr:w-hoiQv -VWX ƔsrZA-ND#pj5_8YJKM8v; p ?d ]=+̈9 z@Հ@+ -yNj?9#4գzѱ #;vf>r_햜ៀνÇ^ =VP>/(2b`A'xd`t4QA:q,A|x'9@тpr<jЈXW%s{;Z`H06"f1)6~^~u85h!,r] a7ƀt[$4jg]$&}mgH:1N^e{U:/j865# b2 -`e-z꟰$Nt X9TrX =H}C>RvVXMgr%R@iu d<aRyr$YfKJ'$+{R!dUE)*IטVVkņ}6(`ъ̧u= WҖxa!9W̒TKFdGx)jYۨbbT -ѳR"9]Rl~(J<аkoˏgorǂ$7ߪgd=5qP9MQ[U^|epiƢmM.ʤƜnmo PEZy7pѤ]:<0zV8/apE|wN@wB?mfts;l:8x7aV׍_[ȟ>-AX%w[oZи7IaD-z,wv.2R,)l?̡J+ZGmJ^?O:Npxƞ"]{,Ď47i s`3tjl\՗Ktb!-V?b1 !0c"?ڶ7ϙٙBb-<-s'm@^ҡ{9ҡpdAљsšqxIk/y;ˬGe@]%M²3?̐RaȂhTW,qA엊%d8B_ኆ\$}?,Yy8⻫m1e ւ̷Ilk4dT3Q"dZcR^Mz܄]Ggf7#7nq :3 _yPEw3sgmQ6pRD$61GV{p:^) -uZPȿ -a;q@WcFOܦ;BL<SAUk3!AS5A#\XPCLoP`V*uT{H=+,/lc0|Œ"j Sl A#Y9KW+ 5tٛ80h)CE4B87_ TĚ~r|erZ{THsT˿?7t  .jX. ?]jE)a:Zxkj/A#XPwۀ!c[L F@h4r %Z1c /qjLO u&2yy!aFkwbnNz?`wdp%e7uc_Tc1>tǪ]'+Ҧ}HܘEs`b LJ=/1>3#loaܐb:ݶg>4~'6,3}A"Gf &U9>:[nLfw8ҝEu|s\wGΜvuhA7n*Z֮FYLvXF ;a_DdR6Z,<Y ֘aXsJ\{FSU`萒%#׽ѩp̽/b - rc" -rcteOMVef.vA0Y813k܁ha_ wCvzVDE1i%| rJ95dਔWpendstream +xYSH_ᢦ*TܫVqT8SS53BX$-l EaZgßU)T-w3mIia{.N펶OmaotNKF?;I`?:#n ޜ}:ͽc֟۽1a* zwж Ֆvp2=Ձ@KW( -@78)>MlG{8p⠄n'ff=\'}*wl]%Wg4VU*'oإIecHтNUc^FWaR7BD!mPҷyVѨ'^gc +n02K} ftB~a|EkCepsi+i!Τ4!qQVL=dUtJ#<܆y8 8ən*$Y8I`V#0|m)!dru ; 3y΢L2i.x\ #z@4+yu5!2p'crC֝snUT %)׺6@W­f /%J$ר^qm>%'YeK=_i;ǍS]KBO8OF.G +9:]>-*6ϳN?רCVChߐ)_oj!#,p9dlQOt2V5,n^FV ɚ:-l^Bru" Փ٪GLnV 6BkD~w䃦eT`j&}kʶ +ݺEӄU??s.KdmV|҂mz=J{t0x{|i%?GW>\UB~!+<M'\,'C4slxLxŗI sy1M L_ҹ&gMS/j8 +%Lmm` Qr?܅$h2ˌr@o9%hV_N<^1'A5ϗ&͡iM3\ :5[$DZ74 X/f|Eri +q~.s$A]7e_wȾh/'a\ASa& 0w6̒S^j5ɔ_pVE@r,bV=xJ;8b')BKV .yeQ>WV95^ {9 ͒l>[q@[b5 1r$DEuTQ}͋q)V3`?;~ނΚ9׻è)FC+0CN6hy/yH<$j$[ph ^Vyz!4O|ds25Rko q)nyH񠋶40T֎Õ#|,8S5&:oL8Շ?(:ܠd;qgUz2k盤MNB>o\lv hV0A)0\O9ԟ 4ab9] Yߗn;o'|/ iIFY!O#`^bnͽ~K͋}Nƥ?xa沸ZPFvݍ1H ٌG8-\-BoCkb%dpiYY<}z觃nhn7 Nө u5c75_Sjwzr] xkB;zii,$SC52<gO9,(-<@j0AiBcr8-^Brctt,.8-R11(ͲdMdT_YEM=Wp׾J@)tro=E71?t*zcJoE{;PZIKzmyHo~i+͍UyJ]qixS s5TP9%#4`'eZ50> endobj 1666 0 obj << -/Length 1706 +/Length 1224 /Filter /FlateDecode >> stream -xڥY[6}ϯRӨ_xP2twaӾ1)r)0~ؖ[dұ#} 2@1F$ 20F??0f<{_#l<[?{t7{j2eeLw\Ʒ_=~v|dVV3F |>ˆ= m Ggy5c|1%*:Hd4ցc%0;!` $8{U#|<ɶ}\J&` Ns H R D k틶E $Ahr0$;bZ4`3F|֬g[Hvub hsBJDL8bMŢ*ۮCY"N]"kSk@֠]q*w^N$0'MAJ4yrXd׳wVA6lli4 ^a*e2BHe_9Gg?M}Bӌ1X&:QJ1҇[BfF&tf-ؑ*[D׻wx }(}9w+>ٵ-ԧt0]2ql3p)a) puiLel@mҮps^.QH^Կ6%uw'ČjA!sBݔBRS |+] A 83@s?V)XZH{WޏI LBzG/j;F:KiedܔW52?/pf,]a\.$ M&Ecg;ހ_7Oo[:i۶A?X՟aDi1WQ0$PZ\c[$99Uf>EoIȔ;]eEAej** lb@}sI踲km uxe0 (fK+'Jt8giH U|9r\䇼4mB闁5km0^ZRe+s=F aF#YͧڟlX<,!η!|9 -[U]*LB9_oK[KnYawEU|6р 5(C/DRE-ED;U+4DԠ@tmGhvvļ8H1b=(aZYC+$t̀ȫPl]p5}O#Sӟ)sW&o}@-6ۅ6X|w*$NrO8ּ0BE&,mCO`$b;2!a>E -.lmP8fB0C\uѬMbf;=YOp -si$`#[T#\ pE -Hbx;ňx/CJȨbB$=l1R-N1"bĨ19[ouy_v'p4%;8KŃ-m` N&jendstream +xYmo6_!ˤa*2dM4-UVHr`I9ȎY9=wDGy"Th/NIe_͠$4R8hhљ2_;‡ ?Y׽#>9~iazp0ZJ"#J.>Po x=DmJl J +ןNo1UPvF4\u1᱀Qjޅ$̏BH_u3lwq֩ik"R߬n8 m,Hi_# +nkU,P͖dc7{u<$svb[V;[3U&=@Q ď'$Kp #bfruz".p eӴFKmkDU`q ?&6tkuc;nNZ[no_^7Vb2 O.样}+#f @hU$f8D1`1,3AjǑ{hR#tSS;0GQ+V1`f8":65ߐIb=?=oon\K\13X()f/-s՚&LoÉsK륌ۿPBűƸ3 C&Э:@vxˤ-2'ĉ= +We)'%ʌձ*?^q9K1oamNvz'-N5rM29 +T* (J, <򎺧c=Tݓ=|XQ E 19Yۈv?B0ӻL]?PXG^b'l6PA ^lSò}Qw:n,g7ͤtl/}@)`MG&ӨjC2»=i=*|M5o+T_6B3w#˄RRJ +ll#bޘÌ>cL54cd39.]t1{ghپ'9/0¹܎("/p9=G"=4KlJ( LDݹG$rp;QɵWsP{Gendstream endobj 1665 0 obj << /Type /Page @@ -5806,18 +5791,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1680 0 obj << -/Length 2354 +/Length 1522 /Filter /FlateDecode >> stream -xZKs7Wra* ^Ird@St -H&mǧ)n)wc3Fn-wnh?ߗ3~peF0riVw(;P]@i6\ -O *%1BDKb `Xxu HIU<_dd0@4QEKEc$K!v"e IuM$X"-t.B4 -dxyˈQ$8q0W~?fb%ئl8E-.<'G-\Zsqm:,|n}EUI' 0 qmq2Z9J0F2F9RDd{PۚN$Z9okKx[G蠷29<띋fZ!m/a~m',bvkxa5A~!ҰEjG̓u -3Lp%E%I0/Fm'g6XrJ"keĀ sajwa_9Qئ[2>~;aS͛JJ*Cdv&XLthbG7#.坅&,"7zlwުJϱj䪙]jGc-H(2&i0(hW,g-@ \4-CZ]C;"D!qMۦB?hgqhO06#cz۪a M G9 'B9EϕAPV1@ъglҀ6 #ˋ/{bHztmyl2KN{׀tW0ah9)NV:PB4N):;b,u,UV>]j˲8x- R2Чy=ª%s)C[*_r6/wR\" -0=-S2f({)g.ƶζ?pf%5̞) >S\b~R0ѝr}U/!|!kE*2^qBUv}yq[_ < TiS: lpNG38iS |/2^A8Ew4R݀;ڃ ŌhM["qxZw$Gzp菧~Kё ?Jr:}`d@ZnIǮV驵9S| CB| &NV=!288kS{Py^J2, 'Sj 7SȶY~]Ŷ1ʙ$,0 ܪ,*">IoLyػ%ҝA:sEؠ@D P†4TMJծR5;:3L5ju*ҦZZk@ yxO}#z# WFXbXJ҃ƤfQZjPہI_1rn~ D,7èmLVazۧ`ȖȥEqMm܀/SCg s$XP=h|`IKGp` D,͔g,I~U` 'LvjB)LԔS fٙ-&\LCzן]~|R0Y LXxaJ.j1\inx47__ -7=DBTSϱc=&ajf:KL{-]Hj.O-sLJŃFϤ*}vEPt>}S>| -/̜P&4&)ѵM:maf3$ɯIoM̡bWJăFbSW?TEi:=h:Sbkuv37s,9}6>=Ȗ;~ -쎟)CSA L&UTaz;?n^E#~w{-=tQɋxJփzm~$mC')czۛS Eu;;X7_f|gF>Vk/̙qݯPU_>&Zq gտc KߦO|i/1Y3/kI(3}QåoBendstream +xZKs6Wpr))Q< k%3Zj/4Rw(ZdŲ㎇\b÷Y@F*l #˜`0OhÊ4&5*!%ڠw/G//XBskm³> +oNw_#D&MsyE!C&)aT()qdo5,%L #51հyX#NQq=ːR!Q:PG1 <?I0 |#_N9pdv!̀>\#ׄk=Ҕ+ƈUBX 0e)Ex얓/F@5.}aEymĜ0e0 "RI\vޝn/F I#Z|fXB-و@g bc:uXgEk߯z\"&$rrkT&y&w!C|_@scyvp1gg+)7 +K7 Irz!9\[~”YRpyRТj6{N* y|@c n,dI .aa,2UT2)N 8.B| 8g-aB[Yw&pDζ㦝hL}/r]+|Xݔ@YĢ!/uh6ܯ;q;21sX*"<Ӕ5Ƿmd?`hO'C2.d=OsɒG +C:킇.Q@wBUQ%aWwV:AeF]IY?xiQZ>K' ۢr[Tnʭ |[s#>ršyių8L}~+ jEPCtՀn[USɇjrU~e(>Gv/t%UxtEL3ʌ[ฐ\XՒp?z[/%'P%u-a>endstream endobj 1679 0 obj << /Type /Page @@ -5882,29 +5863,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1692 0 obj << -/Length 2925 +/Length 2348 /Filter /FlateDecode >> stream -xڽZmsF_uM徹IںML$[EGKQ$}N4&,XRNbON2+bOL -eI<O$#Nr`9Fc涙 -cf.zͫ:4M~x]_]zW7zFЏ'Ǔ(I,tM:O@FT4f&1=T"WvD - ZIjcac㈀Q-2!5=6%?2*v6JL2 -uQGq"2* B_͡VHPD?NL##VCGĊB7րXcГhE]L `X?^~HHqep%/}4KjWe/Qw}y,R-<ӈ:GήvDJrtdMi\.IK{p#5_qweqO?\-?~0,SK I6dI== ˁ%Lˠ~>}a5@M:sS~7CLz@!YEZas*{*?}@CJ X/^ݼ~f%if`Nw7\Eٖԗl^ޱ뺅t 0GVX\R9p5]qΜWkWM5oOvU+~x@QvtkPÙ޶(ˣ+M!!珘sa3[ A+Pm -<!C f.GL.E)zI7;>ī<mtyo=-: ~FHJPq -JTeHK+"ĥ«#32V@Dta_IرεPTzV3Sg -s$2VXSAP4U=vA<%s/\Rw0:Ye=f[ iR8lۻ IkSӫن;CDFf@3S([5ktbZ%uY5R|}o -#n;1W|䲇Yw:1ȫMZHk@ۡ: Cu ˖CyLGQTM{,!#A-20W<=Tc£*$ -blPI(f: Z^Z#U6  6-.k\ CiTc:MaC*^S)81 ΠA1^f8n=a:sXtu}HX߀gPz(Vt' -)8(Q1ο{9Fgr3`2aZŶai!MXs/t1`H C3Cc~j}eogIrD'.YLmfnȪ{.$ZW-ѹF!+ŭ~zC<͈w|p1 l#Kg,SjswzLa78X8E&&/<8|=#TʛY^H#v_:T࿒;f )OŞ͒t=ۍ M+\qz`ߵ`ϻ}XK8F~wdŠ&Ѥ5/mx? -dXDʼnt%k{E[qdgKo2юn/=8{KP_G: 8 )k rb/ίoU6@UBzqX,-qbyg-\. TkݗYw)C͘6C&Ff-ļl9z^3h (Mw;߲ f߲ftw6{@Qg߇/ڇs|]◂DG>r0_#Cc{j꺎1E{R^/I Va3/>^endstream +xZ[s6~t;j'B }smu^KL-ʤCRq\BJZf7|8rŸDpu<#)t һ#wp #?IC<>}?9:]`rC$;pv`x8 +ȹp n__O~>:1h\ѻ` +|| +GhB=mG㣿7zDYE> +jZI =Z #PÑuV=*MAGvz%K$(DQAݬ^GyDz"1^ TCge6loJ 7+Jgiy26ڞ)62$5XEhݴL# _a \a+78@PEVQxO,߶4xhN +9^l&J>##h>4VoC:\@{}$aM0bmX?4Vq'.r|(C]uTB`//p꧸bѱmf!+ +@i67R~m*٪!` +=}yEƐx;A @D!R +ٝqd |U,*4)/H4鹷\vCu׺.d\n8i%0ڙ"jȞ^z ^M\Hns t*N S~ cTI,K'IHHSмtrW.ƻ&ݦLT)RTMN>4ɿZ{vg=.3]ReevdX12|@M{ *F셔 VT-j[ ~eМ#{Va[ 51^qYANXN@ڱ%jIXǫ)!okתQiv/疙yn3EUYq(@|AMw,ļ5 I֐5^I3.m/y'Ecέ7%{FzUʖk cn/(2XQVcnfjzO aj~!reBѼz_ף㷦 + i7Q׮7fqVa&~gP*(sroM܁Dl-Sol804ILQeeܤ6νf*Vڶq:(1B$nϋb1Ѝm.h IV1m%(8߳xvcʃ^o$:A~PgNp(zo[d2ڜ6Z/24Ԗa `4,՝INɛ:Ýqt$[>aԚ_)_49BJ| ?hpb$b, I눳V0?}AHZI(}jМ׋{{~:_"%/WtcjI׋ nb" i{ [B3]t!Hj9"%_9t>ˇ^qYZwWG|kC|ww|_/.q[DUu4?.endstream endobj 1691 0 obj << /Type /Page @@ -5951,22 +5924,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1701 0 obj << -/Length 2490 +/Length 2092 /Filter /FlateDecode >> stream -xZK ϯ-T%e䵽o8#5(M)>4^;JUrF_4/f6Lbu{,n` )bO4?^]لeIh\\?FXJ26^ы<{?//Z-G.>~JkEd.`0ӷ i%_-+S Z5dž"˄׃LA,g֨\,NNS]%2:^_>m=;16PCAoŔ"ߪ.C 9Fiظ/GPOhiMq%7y ?z0(F@{Pۚ&~Mtrؔr܂O;by5|NʩP\mqۃLș[ $\XY7-\4cˆn*TzIW0b 8eJD&\75mwak[R[8뢣jo(orrwB|Pr;TmtXA/ D &u ^)0/7Tg̣K:ߖ7޲JpT7IXxl.e~,ܵ6Mh#Ѵ':ѴCM3=@t_F]1d,6x. +2u8 -Vsh0m<|KKm t7=?Dp!Jq=_4{\;.9r;lh8gO&ȔTYq.|El̾ v .m_B\!`Nq":-y֏ODq zΏ;^gOl@Xﴁd6zz^EXAٓpپ8@C{6hqAETc&SZє{ɠvP*d)/}Ԛ0o ʬvS9I3߱ -h;5J[D/ɓF%8sXǴ4(W?jC -tc5*`Y-tGAb -3-H_?Q]?TȂM H+WM)%q:D4K$Zj׬|M4ڗ -5LUS't*nH K/աE9L'_81ٱG_)/^+i ]0-7'8ǺiudqJw5}84Wqժ\n۞H潵cLYYiU^qv6iJ?wfa~}Ӭj%RL|iLg"˘O{>%22pRg`z"u  `?S@l* iRO]j ~]0ĥE4)dsL@ R}L;3D:o5ܬhO3}R W腢?5ew\ ٢QMWHsnW|A)XO9P -F:n@3= FkqcIz9нsˠ D3|ރgWAQU?nn+bPwH,K{%^Fh7Mwݭ@Nj`i]S*1Q-4 짌CTf*Ť= We޳74;6 -;| h8=/"m~v7}l%Vqk[+\VpB^vuH%S8IdNZDʝO``у+06yM&74hL\Y6oҩXg&Τ#TOK ~kpٙ F2i̢yL -6u4c7qHNE|\" EbT䬩_Τg5JDuhFlD $c#_. eB<܇N'!?8}endstream +xZw6mɷK lOnvӗ8{Js`HZ$3DRc7/}M 74ϴbgLh=KWl3?_pK$CS?\|S>xvskHn΋^yL^i^{{޿׵旋W73~g˅Dg[hlu!`J +_^\_߅VMuY) bA$dTq/usFPjNzJΛK1˶q=,uSIhp(g#wjBW9/wP:]8;Q lrk1ƾp]pq0 P'qYnk + H5c`G2,HPiho.66|`<)(vΩ3;rK|xvCX(2ɲ_}76FҰevsj7= +Z5@3R޲23]r#PzM`3p*59?4D1=| +&tA;sk +E\S7"" +|G]wvNVSY> >0}R@FӞ +PF;8 +Nrj%c<aykjp2Iu|[W.r"A +x$Haҭ =Po[,AxtRӥH-CwP5|; wJ^7EiW[N; +Vn(Xj$؛'ЏndB89#1€Oʙ0PL*9pI޼@(u1~RO$C=kE-quRVyC%g*cҗJ? I28% u! ׎7iR>De17-0cnʚ +FN-H{,\{bUM @Eϩ61J'8:yI}ٻTv7=̂ںMԽwUW5ꢦ_wa0@z>K v'qFl=<-o<&UsklL1A=v+;9F}m. k+p:+3_g" CU޴Mѕ-hJR2`۽)MAy>Il]}Y}nc189 GC`awqݯ A=F FzͲwea~9g{ m#m]۲r4떠icsIT6vB?/_]S{; qsp\.#,N<_cFSD#UUAUTDLVApNpWΩaW&@Z ,|ckRpuz ~ +1kM#M4Kۦ.c/W4߈_ ,Scy9f dŬҚb(-twg{yVu#}#(窏>ҥO)S:Yxgd?aDzw  ѤPǝq% +!o:۫?hFjh&5pQ,l&Y ) (#'[TĄI{sP}xm>F^"Go"ba=tk*j;csY@Y5 4) -dţ i%\Fr丱lh=e;ɲFRRIR(r* ͫL-Qtrm?a>|u` !"&C*0۲FN5SfQ((\%ǔL +1E~AQM& Xi:|L+Ԕ+W}kD,dܩ?+!OPaRs\G4{QESendstream endobj 1700 0 obj << /Type /Page @@ -6031,20 +6008,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1714 0 obj << -/Length 1986 +/Length 1755 /Filter /FlateDecode >> stream -xYmo_or\ 8>_,9_IMT"Zwfg)Q")9"A|i_fgfgY 90Sq<|;=Iؠf:m%<Nv| F M/nGR*QhmrLw~~?nn9<'>\8SI<cl |9 oYўҩ;HX"q;DHm vB2% HQh npyy]]`pե,DUdG,61+#8'B})\^B m%VX1æMFYP`> -E -i>qP 'i 4E[zR[ -Ŕ'#:b5O~{ߠNV69.Ӵ$.a  ޺|If,:#BjzPfuP)o)-fbC|VEVغdB2[f h -3 P85ax*"|^q U'MJ,_dY4\_Sz36chvO2bOsI7Rw5t}J4 -cwx(+,x2#lS=묂/|%M.gNbv3exR:T4nke/8Px@EZqšZUx 8/~Un kX?yN2LϦw{kמd!pX m,ADbJ") k\a{,\K%ڱ=WLG.QRNqQ0wy=22@>,AO . >5W-C Dd 9E -*Uh*ۑR ;3 +i#>3wRX|̈Q^-?M5,7!LYWPP̝ŚsvՌtP:j{c(K.>Di͎W[R2lr&MZV} l?T 'D&>ú \hu -Q7~kN'.jc=-JTqS1pru3`fT5^Вz|rf1EB78?i0Q8:,L5+rw,aqCKZB*wgN s׶DoWWrY"{ ΍'$V -͕!nO/hȲuT1ɟ9ikI0No.o'DVW7.]Lp0= 0)e?`y fm+eQ| V4O(=_4LznОөS–" K频 +$V.aE4f5LRE%Rt, 0Lqf'O_@ifY΋,0% B,`>AV d4ٔ7~B5@S婫  _2_o К6ؗMj Z8tꜼG 5t~M U:hJaK LE V?z,2q?T8r@ Ig|L 8?ݚp,,&>\ECfrEch|6yqI?TI2g<ъ.Ci(*W^y&M]ʲ,ZDhV^EkEYX s>OT)8Ċn{檬xTY}5'!g~Se`@Ŭ>D.&PJKx6Ƀe6[N6L4+\lz9^u{(/lz|4·'磳h wAW˄dԉm}RDG+X@4]}P<AQ0;u[ѱc*l\FI +Ks"8^I( ߍWStܱKSaH iZL24A^.oͩk!RLAi1%>X' dFf- +4Y/B,rKwm"T۠sfYtێ$a:Jt qpt{֧Q'/\b"e\@P4;]Lk73L"N~CLeMۃޑv\ADn7nV W3m.;(+;!G&hl- 쨆xIXՠφ~6@ 5,,3j 86>SaDP/u{&qɋ4HͿ0v%bR+I]g^^SB/ml(bExqd,*2X;j], yoc2*tgᝥnUlQrY{o)lj$۰BUL2d5QչȞd0q$ + UJ nWOiC1dY0b%6qLS2kp- Y3htO~5 Oqh7 \K.\:(bXf3FZNMfF[>3DG[.T_ht `ނF:H 'WVP3*msr=,*(Q[=*v @+Y@QgKzW1=Aїt1 +G]9Ms޳#;:V%LWN(0)ƸvN].(*NZX1Aam}dIo[z@Ý{ 4bebendstream endobj 1713 0 obj << /Type /Page @@ -6097,19 +6071,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1724 0 obj << -/Length 2341 +/Length 1509 /Filter /FlateDecode >> stream -xZr8+ U/>zIzf{[JgH-:tExA;T$<8H)B󼠄|0Kp3jK YzfOWSR|$Bj>y_Ky2ϋjeN+s|勛Ňo_W-o{G(|6K /78N 3`%Rpf&WbIKR2Q"2|(eS6eJd*pUM(irr6DZE:P BLEQ4#, LA*40 1BdEalT2RbbΨ3FR8?4MgX/;A4[k9x -N< SNxN#t D RAެ pB9#"8y#| 'w;u5zPlDzʒ,;3̈́d0=.b!X0VgXsSCkNaORR#@H4AmP˴G=rN*Utߨ}pڵܙm/-.NG@rtŠS+@B)<*S-Z+kHS -Z N2IBG;Q҂+QJJz})!޹]#$t= h 0){JiFZys¸Ȳ,yScV2ǃ0:.C rSTNH‘ ɒm-dJt'u~>|yHk /t -:ȽAQ^anOZtU8l~ l,}Ւ.Mn [\?pR'LS5]5ug84ZhuT7Vg7HYz?5ۃQqoJo|.ɛΐPΠt8=Tv.G@wz=kZM)Mo Ks*X\D@4] c@ã8Fu}/X.s*tU@ -(CΠ99)%3;X.;M]Rzֺ#s\Z{G9V$+"KQƂ+Q x[ -_I_7T$jdxns.%wo|,ytw)=>f*_bC+Hc1gaJ]f;o+ffL;K)ک z^x I@nI ƶqEd!͂&ntH\/mKbWBD-"W<PZvE -pƜ+),C> neIX;T;h:4amPkG]Kߢ Ё,hF[aA9 fϜQ: Ё,hg+3,9ilW>|nձ=9~jb#N_5VF@f\,k:A<'l820Zu5d,!Su>W^|uWyk[=ޑ^[I, XiAvN f-oo ovSt;",{݆'ŘLacQotI^ 7Qendstream +xZS8_3{pлSrO\LbC씶%B +ɐ2 3"vW+h;?VD\E WݻnEKEk-HK3G۟1tFDGݽ$Yާ9`8$ +q1O>9 t?wg"bnm}}C+"\#Bn_D +^N[YpL+PM4>pR75HҀvv"ʨwUJ@@A G!m5C7 htiȅH8DNg[E c^"<3qct/ICJB%)(C>idqf0u?‡^% G"A;6% <&*QD]B2JMsrXTB2clqڏiqv//hU7iVF3fM9 +WRrͻ`qN4dI6B&УhOؓ?k2!BM*;WƯX[΋і \G6ƶض`hVxi٦@JKK|ag9N/p[LwczѿO>N>vm"T,s.1g{3/$Dk2CF0h0.OR'{f#%ť'Kf(+x7sÛaGHm\ Q`-+xCɂ %u@3j*fl35>>;RVwf1Ab=&QLb1:Yz ,iqYbK?d1E + f[H;:-YqMk4m(Ӝ5#'3?m6-c8Tued,"Ey(ÿӌj"-!/yzd2T[,y2R{ָɟdRM-dpX sXo̞ML=w䎢=HwxP{G-!7GX(UX}I²(?"\,| i6k7/;21sLp5ҟTЄ܉ϻwfBj)ٺ:#I~w!MS$tFݲF"poOrv#E®Ak$lw\$4)&C rN|}B8rIAn!z*υeUtp:]1*jjqm.67iej52'T?O/5#1KQr1Y> endobj 1733 0 obj << -/Length 2317 +/Length 1655 /Filter /FlateDecode >> stream -xڽZMs8W - 粕I<O8YYK#іdiǙ_?/ PU[)h<$ $DfY6Y_b-LMe6@ʤA)ʫr7YRo+7НyZQu98|7qs (D@{f恚7؂Ttɍ^S4q{1!egd1=F.!.;3 @a!@8pSy0y (/bѬ ?}!^Dr;1*bRz`[~c3B3Q -GZk1^:4,Br./SV,0^8lLSU")v+sksTlS0ݙKmt]W"`g,b}eݼYouWA fD\iH̾ xXV5ظ/v'm_-(kcƖfo]qK̥"Z(3 \&_t̳U<+Jݭjnټ&:( "D<;ZLx&4ƺɋlKet%(#0x0д ESO~W sM<}s۝8ݚIj1Si1\W){XN@=(S ɂ]_,4bzNQ*wҎL”%ґH-H7 -XEdN^ mΕ悺Z"ygn4w< ?TA)Rme_N>h6S/S'k )|sӒ0PUα91YS%͟`W]'ho]'.Uy@s1"2SEaA'U[WV{p7%W˞e`!> -^oΜ8w2$aܯSI脔53t}]oTCCh׋y0%h~"GEۂÛj $ݎC GY!iJ!5z2f-pSL Ccg!e-%g]RCI2XazVeǟ7Kmvz_T&;4H9lڽP "IIs :}"n&# mjKfewzu&G}-ww}$UG" ,DmA.AGK6lUW2T"җ*1t \hlFRw8Z?*@V#FI(x:Q׮ǮYI X ZP$tuݾLy^.ܝIs.J:]Pҝt#iE$]*8JHu@Ķ$g.NJ:ܘ;7'ܬ%H9I'e%O*"bHcCtJ&rVNϬz;Z2iŜ ֽ=S_frI!ex`J̙#hmEݞYJnkiUY/ NF03:d5:QyWCT%b'34W9 #Q t~<[ <@d]4#cBJ{FO;Q"CR -1tNg/S~tpw;lH dEA= QHz pJ"U3(MlE14-g/WJ#:ÁN7j]g5p6( :i5uVnW|JI>\u_ISy~^![[FPЄ5"%Ab5T!:U:r"dAZ_?\ \jin,0f=Ӓ ܬn/Mޠ]Z:`zyB*2;9)ӹF1rYPf7kC#wl;-Y_ͬ:W2C 7ߺvk2EY7J$$\TyoZx oLendstream +xZKsH+S䲕8dTd%AA¨ +cöd8-MiX;R +#FDGm-fж$4P8bUhñ2L>x'v~G mwol䷁inH"B>|EQ+)aZg-QR֠j;&vUN54\5!ᡀQjcl9Qz;A }ͼEĞų4ϼ h3/ݽN%P;gD|u>2H}a^V$+l"KI< \gѹ-'vSlYVvxQ"tq.,SgDx{S>S5XL(F`e]O!`̺KtNu^@*Ϡ{ױJ4K#@zUq#Z4L 8Ol_5+G۾zInfIjŽ0y^[.a9?OrƋxNd^!әb*r$/˴(Ybseho 4़*flTfs'JA/MԂy@ՏdدSΈ@lMh j[m؂ G14 onP$fsPܼWw}pE~̊]cO=^klbΰ'2$c4̥Ldr +/pC=au2DCe^o#ĚWĺX>̳hf726~&Zpk@=iZ7U6{1@@ +y z> endobj 1744 0 obj << -/Length 2243 +/Length 2024 /Filter /FlateDecode >> stream -xڵYYo8~`[\2NJ'1"^ų0-It=&V^P1dJ(!.T(0>}%a|C7Q7P ؏Y6T=oo( oM}T11oGr\h!|wb> Q:q(|֬j>䱶Tf^\Э5Rhj"6k3 ^-T~*4=<±q퓙P;^uYF@韒tCs%S.ԡ -Tm>*QLXsX@{#s›6]ht5x@G`9͗ g ӝƠiz2 t0|p_*rE6C/qQ8,w(ٞ !]?a#@_krgv5ѱi IAaVŽLTi;/xwƭ'8ucwt؂ -Z˫XEU8ky^A5p\Quo!K[qEOiVr3e.i*㤬p5sfGm>Z<铅 -ƟU~}6ׯwAi(f[eD;PhXUISW4o&0>eG}hsCRm ˈn;CEF%^Uccv1(ߎf#--m'#Ӹn ~Uh3!҉Eĸ -P_tu / bo4z_ɽz]v_Ί Ṕ! -hL6ʙ,]5Ӌ䨖'5ha*<֥zDkR):vTO?']+𠾵~tT.JBv2^Ҹw{H=J2)Iɠ0k#< ˱:~ /lendstream +xڵYYoF~ׯC&#;W SæIQ"e͎6#ǁ+L;v`_#WcGS?.G)B3/i27]^-&3۶ |?0>.y_/~aj1s9N@_F`mS0oFk ױu?ݍR9g̻T5+f2|a6ݰڂ9G؎|"j2s]yŠ +f$N_KdIèHqa{p,r_+?lOxi\^;j#6#-&j69̑7%QiV78WΕ’Vk]Кئf4 Xɖg&4u}@;[>/l:mc (C oȇx"hs{ijJkl;l2># tVjxt+j[L l2 }%MIFj ֧cOu;҄`YMq_Gݠ)@A9n4&@ʉ)W>2ۤZ4Bfag쉷\vAzJ:B|yna-)ݎn#b`djڮydl6$>U51CE>V5Q+ ~2sRx{qe֌ĝn]n6w+ % +7Fh* @2 )yk1ӿ`m5՜߄/_]bF 0ގ)M|t履-4Aӑ:VZ'UGF M}0P8P݃87, }04қ[Bzd: жw9q,(Jn~vAoendstream endobj 1743 0 obj << /Type /Page @@ -6276,20 +6240,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1751 0 obj << -/Length 2622 +/Length 2319 /Filter /FlateDecode >> stream -xڥZ[s6~[6x^&vR&mHjȅ "􄭢EJp.XBj&Yh׏>"9oϗ6?/WJ) (  O\߽7_.~|GL^_.lpc[HX>\WJ/5wdT(P T~KH)<[xKR[<dz1-mϾOL}&O0|)qxXc,=ZV%:6bR*ᫀw}5G4ߞu?/1)Ǜ۴J&`^ wԛP{td@'µhhѐ8*EymG0p@,g[Wo)MZq ->`ICCH7ⲾN[-L^S.8ęTOCJxğYWNh+O$8.Np~>҇ *ڷ}W&s~£aF+f@cG9+s ).>2M'KaGR#-"9!ܚ fKWJF҃@N)M׵* eF%)p2E<@Q[UL4IH߉%%kq I ~yR>ir?Q-Ͻ{\!8z,UF>q#RSLjevY [pp)TcO14* !Gc:#/q9&PFOyomL1nu -a;`ٙn4}̔m|2UOc'IE3sakCb>FHNʟ -.+yE-6i^(lvB.pJXxN?pꗥMn7\1ܧ NXHھh@zg$Dt;عPb'>Dm!M3@ЍvwWresk;!]!Oh%rڻ>k<g Ag(YFJa0/rhZdCW+U`bQ -;|Q`-!X2#٘#2կ=H' -f!.ɿiCB]3}tB⧲8=i=(69,f;6F rR !:hF 8:-k*.? [W)(řT -KtR̨iιŚ |(Og>J\hYI8>dWyF# ьJ4n|uʳ-;_a(H "UpQ)N;a#k8NhH kJCei•UZ[RVU.Op])=wŷ4(3OU|fS3SVYoէX1 |X^^}s0Q ( % Sb_p5͌ q(%{ͻ>XlOtQ4mUA1K0<$ Omqk\Ι-?*.$GZU NWg4| #䍽Zi4۔DTJXQq>9W/4g]awZy- g(2ljG T)aȑ?KOA?0,O]+8Hx~m|&H Rp0CL_ZR؁IfF~1?#B:d){"y H8pG(#:p0/ )Y5ϴoTDQp>wHM?gyiE'I otW0㷣6XIA3Ƞc*7f!Hߚ"H $N$_64A%jGi%<]E +4NhG~ldHϵ~ΛbLӪ _fԤW*`ER"zҀFYm:7Gy=}dro|~ƃ(82w3t}6s> >bW<PtT7uQKMkP O1jN#dVHoM).iǬhLqn>,zcdՍG7+ʍtgM}Tq0&Ƿ$t@#@|Lo5@6[W]IkpɡpLM̔)h{YCeSVP[Ij@#IöH z#yٯo @Z_r=-pfG4)iUp1(z;kQe,͏-`6RvH)33> $v.IPOW 2WM# W'dr8ZhyDPPGj$9E_ڕR@Kt3PGplG +JIGgJo^ 驳*ļ2sGS^6T䛵Q/|GFG#[A?:**[hwuԀ }{[nr~>MyUiM=j jby˳&Kl:XO%t{.BBp_>Yd'E\S%RSwoUExcT F^Jar(S?y܎Tn5$e+^pC(o;?hdžNtz=oA'endstream endobj 1750 0 obj << /Type /Page @@ -6336,24 +6294,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1760 0 obj << -/Length 2454 +/Length 1632 /Filter /FlateDecode >> stream -x[r8}Wm;}rYVjvjv&QŖ2M$(Tblvn4D(e#XF#:WΎȼIؼ4M("M:>$BrcWSwޜn7*nb_#JDnG_ *QRGwG\krQ -F WLPbaT,BQ -B0Ɖ`|Ta%擌_'W~ `BmަrqLě$Wj (7g[z?a㏭Ȓ"۴"7SVو\,zSHR"){# |׳˼X+"6͌$RF:cٛ1PƵQ$coT,JC6ަto|lu&m`ԟmi%^6O(LkZwЌ7p|Yx G.!6WQM ydn KfzKf916a -K{"h mZa91 0lW| (7*QL 0Č߯gHOrF|}5vGHbx>M+&qU0oB*ERDl0*֫tӕ<30e0x} Mw(L:s;7{ cW6M}/A0d[fq?~w#Ξxp|&lqw<TܽJ_YcG!3ٮq$ B 4XhvyH>TlJ_lJF6Wo=-tf7fҠ蘯Bw񄍋js_&.q$NQ&l X{IIST`?g+Ή9EVMRgps6Htכ>>@imS Kޟ'Cy9{ #%l0>ı8j-ĸ+c#+}e%[F. MR'WPӀip -gBp8,Hy_ [*F?]x#ŸWJVP.O؂YVzboeL~: -ZIY?K'08 qp!+;{Uv#Dbļ&ʥaPT/:Ry{slV +Z:[kY9fkg͆]׻< iy_ ~-lT*0kn+֝.ZSiwW Fy""$FO#q -xJb$N"qXI_h T8e4f-Ai =KWiNp [[ PU*T7N!g/iG@RKFۑshm^$\4Cl3(QM$4'Ʋ(D~͆_ߵK&} @ݎ$F%} ]Q6YrsFH"'bo,^o4*F9bMbogoK}ߤA+ѰOYh)UBs V(,8sMTE덆Z(4X)`U p\gӮpg"8@|A7BtK)PtBtv7X -hМ`1U , - ,,7ûiKf}20n xs`o&=JsX~6u?S0}@w#T4" 4Yh -""KYY|'dPTǖ0+NCn‹ks4%"fQ˒EF== y,h $Bz 2;&I\Y`|< ;k9/XMVSXw0CpCЃ=;K@EO0R/HDߏrSax mG^9N(ݤ&o6蠔;L;F* ^*Fl,LCnϮMt g8b$sē[9L!q.uCĵ3X6Or]3@lsk0R%`1\ +O+[j6f~^QZ^](WiB\Ϟ"=)5 +Ssu=8j֟2WNqrVyeA#ppZ* P:eR5SnC2$qNI51p+Kp1٤ +^fP:|%o(f%>Z!ΰD_NrFp +Y*b$ہ| K`@vsJ,*u<$cSt>,lĞJ<4l+@-lAj:WKA#+Tc`u^ [![c+,auj˵Y"O'ܞB<rBvLy"1P3,abAW僝A|jSĪ=~Kw! w8:3k/ו $t]*iUY&B鉶ZjUŦ֒hwFۏpmٺ +Z!j_GstU=~<]c]P~"ZŽR+35eX,^a_Cvs˳^%-C(;P",MEv_ϸbO'ýRُy]fNy!/K%aR1_i) h)^{.Ղw*Hed@c?=-ť +K$o$LM$4>FȝZ;h ,`'Nak~K$kqTϽ.rendstream endobj 1759 0 obj << /Type /Page @@ -6394,24 +6346,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1769 0 obj << -/Length 3124 +/Length 2704 /Filter /FlateDecode >> stream -xڭZmF>ʗQݧlrL"% c<&pfGWo 8F#]OWUW E؎JQ*Yg"5+|FAa;@x@߬Nh2i{OC`:v$^lGQDw9@8@9ʋj˿- hT@[y>'dHX}+ꍬT{&@Hhh:D]+avU0%-[I⋧J!EiY8y<'*nwSoVk-njwKW?7>W\!aMA`lEh|4? $cYY䂾6|/(X4;PNc;6Nݦ Qￗ -X*Ǫ԰u>LTasɢзw4&=; ܡy# ]R.hݤ2YՑT]HFUڞײ\&o8.FGs(!"F~3U[sYHZj?;7D_zkŨ -VceDeʾ#/2LlY gQ8`:DyByfݹoN+YDA)8DD@8*vpWUxmxtWbÏTK Ls nIpzf6%+^y;k1Bd -d= fBt 91I ~5i`bx:\a+D3 -5j&45BׁCP8q] EhЧ@m婖E_swk&{SM2Ώm`%@RdBayb, iRG1 H%'D\]9YrgbYF]Ud8$ak=$amU(R++@ui137w?ԑ ]d>y>o' 9!v>s M/佾@PbSstΟiwEQ/ϼtm؎SaJ\r]- O]ƦR(ikI8#3ձ5؋{)Wʝx yRxd tk?[l߾)@}Eʞr^,/WYՉN^Nu:؈#@LJ н+C8T;k+ќk\Yeq>=ϸ -ImJV0j%N L?_D zb/OIG@7A?bmtY~& SCw L0$;W&<6)c4 -R)sbT壎\"٥ʒϧ?_@DD pO!d9n`|^W#@\ڧ.u}aBş[]"-5'+Xxᆉw1H&m *ϥ:>BbfoHߴ|ʻ|4* ~R{QW3{ ĜE.:oYyڠRVȵnm"Y_ّ x>},[Z'#SzANb =V\Q&5IE\p(0}$ +T?pa7˼37_576䵪SU}*, zYW~?^1z^vS?Ji5^G1ҿ^*J1;>l@Ŵ}#&7iF3 aOOfa)baD!(> έ:*rAaQgm-}␒LcC^ T/qQ@8ݮ| 祇?cX9NG)quCV AKIn Q駜DcP:HְԔ4S< <'|4Sg=NԾ%ؿ~`3P7ώUrJQh3X$B[Ϲ\;:@QcFpڮdR8[6d꘦5#\&SܓV'$84IR~,%l8CPYbgQEn{ėr2eF1D_?$N;, zT{jũ +m޿꼸9Q?Iw f_(@`dE\U7PBzӧ= Wb'*R;e`\rА5A(EqZX$Ab0Ah%E`j^ +}C#r F2^nؑ%8TMRӇ>1>7;GݵJ2++˯y2 +JF9n⽳aS8DS'a5m/8UJm {M0 +嶦URKL&qAn M 0l?M)d+#ntE/(O <+L M>Sg*Caϝ1_\ b{zI!' o{1\(\I\ [Rw꡼Tͥ/RI=? sG X0IGl>͟*1p93mќ)h vjJ GH3ŊnW-#~hR⸱QV=cZH̬?\*X'㨐0)VIv]W+}Q~|KG}w%3{ 2ɳ30&yb72}(E43h;\X4Nt$@,s^-`Q*cC}_g# +`n4tlR=z"O)ٞM;1endstream endobj 1768 0 obj << /Type /Page @@ -6452,27 +6400,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1776 0 obj << -/Length 2945 +/Length 2701 /Filter /FlateDecode >> stream -xڭioF/!9ëYWXh(D*"e7-3CR<"s7޼yȝ8N"vD< #Q4YlO-x*5`'O`ֱc'W>-}1/}f~v:BXkOgaYS:}yvzWәk]ao'sCAhc/9%ıEM.LoOۗB7''5[c"Ht-ƹ]/e,'ؾ#Y^Mg[3n<}MʭeZ.ٮ*/VKcج3)蜹xV6}0UpޢZ?75RuvE|昰:G<>e#m>a(?A{#蜮PlM_r]r_*Mzt;^~`yz,2Dm)nRL5UqKV2 -7#ʴja2\<\wUV{#a(yb=ϽCTܳfXZ1 5 ٝQBSn&3W0+p!BpNkrѣ]xE:"GWڒ=ۊW?]_|}q2KWv#/z70fh]#+e)|V$`bZ`W.;#U}@8yXTIʼn&Y^h«~u\nYv{ǝ4YAbtb+[WbHMjz:çƣn:B1[@K5x;%1CVを4W -/;›ݠ aӺI n$#zC!Q0>uo pqp8 l/fzYc3m! "[dkEuq/%@yXk$# ]nᳯ UZc`ӌ -gA;ATtTyڎ7c2:%U{(vIQ)i׬& ,tl躞O#iϕ#,89*cْ)k{K¶6ߐ mO{:14=DMnt)J`ɒ]P -Tz1lvqvLޠHQyD+83<0 qlLrkCW)/t[?c 7`W\ {Gp/ Ji;*!cS(6TǛ2TYr{CF-pc(%[{XX4^`XL mnsHF ulQZ.>l^.!rq@=ay2حpUm`pdZtx^|Oߎ]BHO؎#.H@o^f= 0QH" -Ǥy<ې'̓@I;@rRzz\alSpn -[0PM| 00;!J(:ym?[)͏`0/[` Vk4 -V - -+-ߠ<$Wp]Z] Q ׬YW- #RH2x"HIۊ^O rnqGͼt6"8qN)O[i4E֙q}(Hp\@2oHG) Ǧ4|;ఈMvmrƇ*(H>(%* -̿3pr ZnjRw` BNL[Ƚ -߭L"ȑPצLF#7× z|/lĊC/{%#u\8c]^dWvsc4l^S"?h -*:NufkԔײTm.Yf㨾wYFQb?d#|h`F0x*#4 ۨڮ0'փ˥^d>՞JϾ/} [CƏ$C$ڻJ(-!C۸xDYMD]`F6~5m( Q8xc}b6읩a<-",0t.N5<,`^ 4<lj7N3of^h :vD̗X<|3?};I)-!,B|*×G87{{j> Տo_86~p:o)[~:7g֞85[DdsipkT2Eb$Ms 9lnrUe=fzwP\I-,/o^wUR?vOYӪGK# +U}# bi_&.U-|HzU_C-'}YzTsvUbDh/MsR~l.@^=P2c~^_disUwWK.Fv>ݘUHnuأ6+dwڶOgǧ/_uy~\m%oD` ̍l%xE!%HWO)(ԍ7q +UXR+rvCxF|f-U_ݢ&J,NL0NGc~WG$[rgە<;yu>^K $\pKV& 쐛t + tçƣl;1@K7wK +c Eq/T n`;"Gg' G P Хk0)iwڍm@By>mm%Hˠ'o+:cdW +F[S> rh^ 5x:_2kk߻5l(y%9XN f'GO4!~z TnU#?hZu +M0f1J.Ӆ]}VZ㫩t I;dҋxq:S8ZK %dYeXk#F=@ [HPX*L\1K ,:m1REZh (pt鶯¿j=q?(ϧNG%tce¶[pCF6mU`gE{H1?)a]1 t#vaE3!9m;c1 \:^-otZ!oduT,$J6E =OKЋ=^7ڸh;Vv-I8ܒx@,$3#Dq( —>"w  c5Yl1?ˠ +GFփؠ0.yu'^ !D=?XE$m] dU8g uf+u~KAV!=nks:`nAI8:C*}c6rkv|i7󚂉F !dLe]͖W\膟yr͍E܆ҪR[Rz4e4ѩ_nsM]l*ʧ*G&k瓇nތIX {DUNVX-fJ ͊' +,Ig$6.??*M^)Ͳ6޸)GIC{t /#\2YP?ZW&jφ58G0*K)梆se>ړJOA+LIOP#}b/UO"Ǭ4vL7W)Q>s_".B|S(/ c83RS49I;SL0xo\G0,(x_=9>mc?I +Jѕ ۸ykgMa\~;6O5͝A(w&_H??dם`UhX4?2 (/~g9e581W#'/ ]dBq55?m Ȉy1BnE8첳 wB(H* ~@?Qdz s> endobj 1788 0 obj << -/Length 2961 +/Length 2737 /Filter /FlateDecode >> stream -xڥZm "_kEM7Mv]A 5^NIM˗i$KvChϐ== }r~Ӟtf7߾0zvՈ0k,Ӎ3-ӆb+߳5[7ᯆCTomtmg2-ӷ]3Lw<3L^1m0ղ=%`:y6O!l0hN, -&*IKpb]91-HqUDƵ"މ}=O eL/tT(p/eQi7c9g~؁Ut@p(.p{e,؜0>xysxUQ?\bISfL\lyrY9Nbꢍ:ϖ7ˆ+ҌLϫ)\\xhI(0(Q~Տl3pd\WHB!]tԋ)t}Lc^p^f_wL+IO3@C= >4Nyv/ -Ê;njJ+~[UZ%PZŒ,qe릒.x3==/u1>+AYķ$Rh`۹煸kN7qRIYB Bmgb"J -`F2Cz9?e㘒@>L>NoLJЁ5 -=f$$="xq~ *$ywrrPk%;~#nUC?!?DiI}X(G4+y]{.z\[<b~1RRqˀb;O%#F8эςX<% >`ydrزp_yK -oPham?C!i '1>Q/E] BRvnaי=Oio\&R F۽~¥ 7)ѽE.w!$ק8Kqu5Mo+:x=K9Lp-ZI<űsCE2.aB[*!sŏv/$|(@Ef uVB[\緻AryR 9@t"x ^Ĥb6>xI<G)ETB|r.G -d#~AnqVUsQ&?]_:SKuqAdu+n;V%1>J&ַ֒Z6\>Ei&CKnkcB7"tnD蟎Va#؉$pwiMi4T*`4Ǜ}n4éǏqcp BV7QU#](8{ -f4N|ܓ ~Wןye Bendstream +xZoBB]+OI< +$sȪ"(rW(RJw^˗)状@ ogfgVGGsߴ`4ۦ; kt#/lFiM}zx~5eV0Ze}0?X/ou 6Ǔln܍mŻ/+^/m\/_3//o/ލ?\\[N<ӛ溜QL7NжL;F wMs\]^Ǽn9SәAõܫմ5Oq'36 +;fY:IܨiRn{ō-jESJBbMHFHw7yl7ĦɺqF# r Ƽ/˷ݒ*d| H0I\7j,2OqZV'a.˹ql #̜O {<'z8_,SI$ul3lݧ} )zH'_hcgsG>laİ("aDS {P OQb3v2~hnC$%eݠA%6څ=J&ߵnSܲr'r=wx0}Nf(=MUڡlc%k8RQM{"<vS[ZX!Ef)CLfp!D?̡Ev,MY2$7Q\iĪ^̈وj$TV $vpbKhwC-;kO\/0Mf7tɁףNl8܁1tiuX axWyMgQ}:5OSHv̜호`Gu. l +js<D<>pfl}`tJ[$j\=f xV8;0-k?g\0lso OVƻ/g;?)cV7sS1C]ޞ= ڀ6=măraAkx##LzpvR +7'ecU>j1Pt1|@Ɇ3Y \ 8!E1~m2,'YBmwd'Q9BZDs r0JvR@JA&z/a0 &'NUԗav+93 JT& 8$:/$ye4:'>$9Dˆr{>~mȕ4 |п RבiHO,RK`:ƊzҤ<I=)("eD95.xD4#{LڏsiR)@>=DDH@:dX껔 Yںoԉ+e<a)CI^PIgEwL2&WnpLԡ[1μD+4 + _f```OMFZɾ7p~2(_+ nICV+:PӠ>@*L4.݂X^~f1ȯV}Y/vo\vǎ#}, N34EqX̣1+mXeCJW?A>u[G9Vh_q❼u#-(:w<=`Όorޮ1|%{.6(馧;a ^'&i8C&Yv)4+IhUԕ }~'T's'??dI;Ԋ:4mxք̿]bxd"P'-Q"Ip6\jX IOj꽎Iv4'N~bŒ=3s)؜5 88׽lj _@է!6xһ\̯` 񼜙/N}H߼{$r`]R>ܨ# +Fwl/?bC}I0endstream endobj 1787 0 obj << /Type /Page @@ -6556,26 +6501,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1794 0 obj << -/Length 3869 +/Length 3219 /Filter /FlateDecode >> stream -xڭks6{~3SzP~6v\37JV\IN%axv6HAYYDe{"ˋ^<g@de[}{mvX߷x|KbeNj+c0Z~>w~wjyo+go.>}>m놕?~^llˋ mˁ3`'4xL-xg^d7n/0q\sEۖo+W/׏)7^ݶxEr_y3Rk˛WznȭD^ fᄖ2V ,JZo{46Lw0Žsn<.tK4PE+%@>Q2癦l|Ner/W돗?xuy$uVm2 !DP"WC%Vΰ3&;Zɞ׉_w$o/#rC5nlžKIn0bܝѲhgUYA 8WQZM3qf+V5-ϺCWnN+b*i0.ٍ` 'lX-'8@\a1`W&N:Us?yppბyO':VVpp*+w?靄?k?"t{"=4Eʺy 6?,e`{k˷ϞږF4{Y -iW ?kA9WgOm-<_S޷Sf9/$uKd,tw#&,JT֑GM}%]VcmȲ}n8~5Wfs Kc9CGlZb54؊Q 7dӵ4 6Ƞ}iTӌA^d%Dy7{:8#fl'1= _9nh)_vj -^3e9) 1O2\ -w&4j XTӜv`Qጮ! / x _O+pyE8ZM踓@3^b1?a3Ͷͻ&ѣ[]rj^THRCOqp#␷TF6B Aف?hB!4)Z!}z -1I"m^E!rb:wy8 ww<"`I7i '-a7G5kN`JKkZ\v0;7Jqbj>waO.iv vUk÷?aLl:tc*5*A+҈YkHî\2jqM:@ÂyS\+H7'AIxӸysvxq!ٖp&f8SH&gXD DA_ ǣG ̄+g9O>AM;Q?kkrj64wZ< EZ(9˔|g':*u)I퍲0`NK-ЄhNOSF5ekTՉmNmJwBKdn IVl@ -МdjJ֠gJ9NہS!V:UwXRa]%]kcإ/:|?<p޴ 0-@`f `OlL1tyx*< - zmQZf ?tL1`kgKy -oeU![tʃ>Rc=IkCٞ@1H s@f@Ho'|oQ{8rb-hi++Nl+&v 3u] y.}˝a?ytC|&4aЌ뮡|TH'a:vz%S~%7P2Ʉ>ͣBl* u=`k.vqt77oj@lӿP5冠:Ƒz4\TpCǏ.Rc^-;/guY oqfS#/>r5 (ǃ yendstream +x[o6liSl\h ŖJr_"LK[, g~r Y[ȱ(vGl -9Baϔe>6Y}s@mv<[nde~ysDZa;ޜ`_™_|ϴ닓w?,JN;*癞BUWhCFR$ 6ͶVvu?\%{%e:%mV=XSW˽=|+oHߜ9~'t,0xRb+]1yj)F؍ G<@b Jgڎjy=S_s=Fϱ^7H A"BawauSFﰴ[ct%nPl9C@ d<s%rhBCn[A䃌=0#Li1(Jj,́W^<>K>VCNX +>xN& cpPlc{_=GU0ڔyrFy/Ai##- 1UhCo{_V򟷭_([Q6*v-R߭j|r㮑P}9Bw.={ad%GCcK2,JfMMG}SdX[!Nl[QQQ)~ڣJW AѲK3( .>)j +JIc ID6H +JlrKC찑tav +} Ǵ9HZh@m%qsk.߾aZftBYHkvfQz !ߺb<Ϟr͂=gB+韭e\bGBXD\JjazJ}Pz89GD udnknGX!ǝF.؍fж7~םqّJ5!! <6:d/Ϡo_gRaY`|۔OT)_:6bAxņTI"ў}| ,e( [ lLQ|w:}4|C(泻lԷL8trH\r}%(K@d,,!i RRF1@>~;g1۪Z _۳BKHg zƅBT&lr ^σF} ARROiH a/fM}z:=թ{fG:FEj@3Ho02R{R$ K\6mYVEEJ +7e'޼Hv+h[2hYT•Ԫ|R+@^M.0NV؂{s`!'T]HC1\RDhv:]_J3ItUVki Y +W5hACzHp5->\@uc[S#W^a* +56,5$(t7~T(@.^/Ê9Vx3pJE?ݑZXE7DFXD$6mtDGNg0d7oq`5҆X-n.Q?<PпTfKpzĤ"^\H}EzoHoZ C+ +WlޮWaty"CNmob%-I2m-/X螫FbX72'y#664PAd~:UڄoS5&ʃFN\aug4IX.'L6Ϗéxa3uQ +x.FE|BF7I#5(p~E(ЃpxPR~NPD?*JndQPn+ : u hwIi7+iC%qfAǛjءjL})4hFdA'Ѯ/_q^OΡJoT띨_;[;`v`jgO"ZwҏGO" e`endstream endobj 1793 0 obj << /Type /Page @@ -6592,13 +6536,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1798 0 obj << -/Length 724 +/Length 698 /Filter /FlateDecode >> stream -xڥUMs0+8JqtR7MuҘ0`Ԇp2ɯ'vsxlVoWo߮VX>Ҏ4*HrEvϥ%wqbӗ"Vv߳d~J)&%w0ґl|nauwHW%z~}[:ɵ5O&)SH?s|m ~[p BհZKDE>ߦ]*:RuK}PT1Di;ԂkS(#c[AuE'2 :mH`7-5}KH =R754P[; -ihOoa}By]ё/DCfM^["M+}0I0$_dԟ&7Gr"zB mʌݑLc]3V ,h9ͱTSuO`ft28-Sd OĈ-S=WKq%=;1tpr0 ?L/ALLXH2*KqB -9w"K̔u`U=jl)A)HZN-c4{rozӗd=3yNغ2t}kyc¤]}_i.xDV8/Xpfpa/!+Zfɘ#=#'J#@IO,'b܋O=|zN ⑊OϏBWЂ {+H_̌endstream +xڥTMs0+8J 8:ӺiLOiajC +8wW+arxޮ~=tcEQ,ynwϥ#mpC.By|<nLHZܲtqA0)GQVdosCv e]-/)΋ʻK8UZ?0N專!V2fp|č֎Gʂj(U I-J Z}`8A.:%W.۴6C?tfk[w&HLkL_rcSvF]+$q`QPQyW߃kh3MT@IȆR,t Q!ԯ]_G WZOm g\jػPxendstream endobj 1797 0 obj << /Type /Page @@ -6615,21 +6559,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1802 0 obj << -/Length 2123 +/Length 2095 /Filter /FlateDecode >> stream -xڵXߏ ~_aKhaK-M]C0kɶP[r$9?~,-Xϐ!HMIRi:Y_y q޿RF"7 -C0g;} Qcc -2o^qLR(C7 2(:"Y΂8v>/0JRzsVшGdn/'b -i]ڿ]WʹΔMQwշQW'JEso>O$Iث6'Y#Py9SHz?p5XFSf7'NŤEa7'd@9b=qV! --=9m%ڎ$Q("H47l%9 p - )nq /:Ə~_B.9^uU=s7wB(Y2u)-VA 뜃SpmQtP]U@hA 6R u>OaG x~H\륒/}ۇS"o‘'KC_?K!>r?rT a] 3 ocFDOveL׬ ?Z-ͨ[]8uVWz` -oW7f"(bOr#v B.@>Vi6(wE&S:BS$:,͞mYnB̰ͮz;9fƽ'M՜9N]GJY3?J.ޟlnEw9M8IYSai612ֲ`M9r~{KsPT#HwMyFsxk LcS=%ؓG Ú3g}&#\lj>MMmyfZSZ^7 -RZ0t%7ȵQmr: S_%8[] DY|I쉣DL#9ZvshE>a,{At E՜M TL -Rr9,R#es!bm&7.W2]nEA}B$s~1J֙L4|v+dVj $3bt ָa{ND4&iCRO|^{yD#K5EXz7U^hef\kNTa -YXQWqu]ԹA # _g:KGȪUR.T$Llppoљр^#ōOKuIsnۜ˚T n9#x1>Jn3HiKU$( - Iacy)aor_iDݜ)cc[x&aetmn68@9M4spo-fd>{'ursEh*˛V&+/2Y۸?уŧ`Vaɫc.`>9!Nq䝲w.02ۓ%LYt-Cf!Úu#bˆJwVڗl'sy g iG[%1??!wZּF;ּT)_ ^ې9Sցu\l^VoCg|H `d`Xȧ{dg ˳ %ZZ-G5E[XkvEtV2؍O=%;E|gh[*V'N#ߦǥ yI,L^eMG lq '))Sz2hD:0_jr9|uK [`7]w||< ,g cm8 L@{ʑ1,ص=d<qҫK/SHL3R\"4Gy+%2kniF|4skEV15 z'ڦTjrkGUe>d(O~Bc+%^HK}O 28s{QQ\7'dendstream +xڵXm _aY{h7wYkl %$g@|3@3$pg8R(O \QWhEOǝ%0,M؟,f0hdySx$7G=Di}aywUgJo__&.;,o*Q4M~ǾJx7Vxn.o( {T2Rl:ta6d0H^Әj^'vf#FzJpH^]MNLmjSby,f#(EI,pa7~İfʯdraR~q}յfW׃T^Iπ'}rIaN!5o"@fDƠv5/GgGl욚OJB +D.u_*7q=LY VA 4PugOe±T[vn_Tmk(s^CYSD@AJ}vi]-8}rnAm*\ڠX ""k ?V0g9 IUUf]h2|MNr} ;`7]w#JpP3,YXd=0x0ɗ5GDsJJ`ʷ< .XpBibouOBז^TB9*1,և=j\Z !X6pCaȭ1̳L"g9p@n0%Npg0M*je7pp^VWX %FA 5z%Pia +hyde@~=B}gZWI2}س!*/׿ǦHQ[fǟzendstream endobj 1801 0 obj << /Type /Page @@ -6658,30 +6595,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1808 0 obj << -/Length 3445 +/Length 3358 /Filter /FlateDecode >> stream -xڭ]s۸ݿBo3C|t\kikgڙ$ԑP@J}$X,{ -gY*fY*gU0_B'q  ;H#?Icap(Ej4 Wa4K؏U<{Xz$-*ͼ/{xު]^lx|Ico?_}xpiq8Ia0[DWz40'?¨p_]e#\5L^/ByS>#/Β:"6LfaAqBlYk# - ƖfS?0޵˚Cos{K`H*3epAdȃ:= µ O[J=\D\Bg}?b -ql*+ ޳@>;5z-scM˘c~ -'%<2k墁c:$,t:F o4šf%A(lӵK/|"%{+&&+] ҥ N#e=a@xc?.l!r\{0[G -\OϞ=â{ꟃDz#d>Kr!UrVl^PoATOޕu:IP0B s}=h֕kt0iAɄ} òwߪE P%)ǝޕ֢ovێvժ2g]o{Q-1y-Yu-#-(̊{6 I+k7<y4H9۟T:3"A?>|SHz{ܔv`oa -@}{xnnA=JةG~-Y~"~iќ˜NWc2PMnݾ{ Pۻ>a)81x.I9U$.:[dm#b -8z'F&[_3[G@t8!}< nѴ3o{vM4ѥMN=k#"GhIwKYeU5Rgی-ڡ{E[( -b*1:K@hmPȡ7o{ ~WoA. -UxwmyKT`>?WlF^ITR[:|."|]~9E -!m" -2ja{Tc@`9=;T -(_a|jTI!q(BxyTA8+i{63vQ_54O/>D4Zmp /57uBQT?d8WH9%0]`ru%lQ984b(+f'7D(˼9eu :]IyjdF{Gwq@a;z2 JtesӋc$֔{tt+(:K ds9[UAƖ.KGhrϖ?%Vq DbK Z0C -^ FrdlAtUDZSQEg촰qHQs+0a% ,^.,(H 3F ( -*H\0c1\8DryXJ)Z@hq=ݸ9 - /1{%(6O!M#Nklx+;˂&3̝\Yg*}L2LGhj9*T \Ôe 0kqF+9}0q2<ֶ5SS='6x(]秥$dDUF!.)\[:d"wf.ÎvVO-"r\+&f%M* '!PIkqORgR1Y%Z郐+©HFXS2x 5p(0o/1KA$SB=2u]뒛5+7+ƐU>Kqx16~86cu82`.*Q_>(L⋨U-\kDs|%$Ŧ9(RT^/H8[,AxTy+tY#7t 7w%tk<;#q RX^SFdR^SV0=u) kM^Șd/G"kl +>y s9oc- y8tွoP 5/iQ>_h`r6#?4AGfVֈVh=e 5Kj7#qQ`~[b^8šd%AԨl3{Ew(.'u0<=:"I"3R77B5 OOZM VgƁ}Jgvʢ?3ۻOp `ɨMe{ p`!7ws`Twh}{Y 'UxoU'ugTm9ڟ[p"Sٷ=:3xBo|wJAN=R3),21I9#M܏Vm ~ɤOkumdž^@U=p3oH<} #"&xz/ΠĒrOu`q@t.g*(uز4j)mIPSe_q7[#Fΰ&!LH3ۙ, _2{_Xl@"cS=%]uf1@5ejF!E!2W@K" ;@s#ď({pS-A (*8 s6q ow)>.z43Ǣ2V/QzΕ?)M#^'H<굝eA3,CY [jI}2LYg4rO"!Ѣ!,*s +:F,YYM3ZgA>ԥ-4*/xb ^ sq +/8+{f{ܪ=*SWZAQ"ȯۚs/yϝºNb\If-Ŏjm#ǧ8sGPcaUR0Z+R)\`25{TR>ekaJ ;뢉d& fE)=W#!2&ҁø"cրʅ+p91a"M݋X|` )?9 QY&%0ZQrJ$^X%^ ~rB.#t:ZjzTE kqZ.w AQ.DjD"(FB/ۺ ǜ&\9>@+,SpeS-)LTaZM΋Am7y+0r P\T،@,^TEs6# wT#a YnpUJv%`wbz6R2ˈ]ኮnB' Ta޽\MŰ`?p03e,YStNI ;fOU#.Gr!Y~rGߣo^2G֦IX|Kؕ+Gڷ&prIb5 4yT$[]NsgTeYhg+ rS*Tc$F?d_<+t&K/b?(j& +}fqitzH"?J0'endstream endobj 1807 0 obj << /Type /Page @@ -6710,25 +6636,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1813 0 obj << -/Length 3543 +/Length 3353 /Filter /FlateDecode >> stream -xڭZKs6W&jjĐڛ3$NeةV-RT<ʯ~,NUR@~uY*NWYv^k*,/ﯾ:σ~5}Wݷ7?ݿ8_(PEfno4w?Ȯ(W\ wW ځ -c仹ecg}2?~)?48дvP4ai|%4Rv (3몭zi>盏ȏ̮Aav(Lm'¥'^.U~ -WV-?ijT^і`OVg]X,ґZcUq -&ل+%TnZ!5zh@{֙b1op -&ȶHj;#St6,ƃ{:eFگ;VEWӘiRwsྡྷ-N$/VRdv?դ$(Ew%/L Hb{@bٵc-*k~_ 37|ׄ^w|s#'\v{EnAGXěeVFKIEY D)f:j>};_Ё?hqYz&`w䍈U 4vOp5ڄpvn>K{-!ϚbԨ\t$5(n~C 2S7ݎL!žDf-ʁۤժJF\-wj0Fs'JY ~4w C"BO/]m5չsw|ң8Znx# BFɻŀ*_t!e'KZػ} jT|},@[ݠ܋rO4]Q27niVf6&rJft2Ryf_l%58%bC FBܫzA7HMO!8b.Ĺо{˦^qT A^G~%Ep].HsgG0W ٳE$ytbvsW|@oi'YrxbܸvfU\c]ILx3Y轱BJ '5^H݆h lb!Llk4LzUDXj=Y臏^i?(. r9-UaZ8ΔOĮ8 %uR:;I#zE8,QϥB#zEL2p{2_J*x7/iEzߜMF{R԰T|\^Ie -qw⢷nGX&ƙal>'FJ\3z4xc]joMm QWl¶jYz\jޡR)ˀ$= # a唽nzz4skX`*rDmIKV܋Z\60p5HL^t+/࿏,QNV`.ncϰ4{R՗uѱ  +ƫ%GMZ5@yf@' +GHik\;TE첺Aw;lB2yD>dĜM=͗9gA +\ߟR &-AM ^јp` CϹA(vmV=wcᖞ#]{ܬy~+{k]eVY4>4Nse=ٞ^{|B h3u# YB~BDcY LO%l R̟M|]~25 6-9J +@MJV>Mi991H Zl9Oܕ|bf=;Bd/vsRсE9 Z,%#g;0:r! ]j=iOꬪF\rSPlȳN)b~ёIژ2Kx) +$*[۷:fgܜ ^@F 0+>]±C'p5#27Ă^/-d*X*/#A*6Y+۠8;0;f溈JdrUp'W rU*kǎ%D7`E iedK\d֊! +k5Bk+K=! VNn#辍\c_K75(-bsUƪYtci$c'cy]IJ0m!6 +47a;AIG"jH吁(X%)F06<@i[g H[`^Z1bqZ&N>`(e5yHt')ϴX^H];kDϢ 9"Il  & +V>8TSn֏\q@O8X8t|7t)>#ũSE *JފmFx`@vU\wFr8`A۴<ޚ(E_5w3Y _nƪ2/,$A N$w^YD;Bh(j*EHҮyoT XoDˍڝ8W(Ҙ*3 򡔱 +zF:7!*3v(Re\MIk'QE:q,elqF@8>]IuW%!aA +}N<̦@o-R> endobj 1822 0 obj << -/Length 3225 +/Length 3128 /Filter /FlateDecode >> stream -xڥZYs6~𛨩C7g$N3Xd+I(C1߾RlUU"hnyJwUo3Z;c%, 7볯sS/=_ߏㄮzW?/WJ)Wrlj)w˕|~{q# v}usJdS篳w g ʞCsuVR/ne6}νVo8V~A"Ց -w0D ~*?8C =M*h0`\~97 |=g;UF'gE R&hGΗ L@ i;usaMU-.Y/OEg_K=hj풦|^&y -q&,đ2 2< 0VVfY( hqSy+m'%2#/.sQ㬑ru/y(t6wU" "϶9؄|gYzQg75Ac/D@HXarS -Ӵ3I`Wpa*ՉSq\&жbj<%ɱѰc_xGsgPKlkSx&N:E׻3]iT ) J/{@ccrŧ*0/o3hOơ BkvMR|{L*;T;`)-+ lMzV;϶hI_ډ(TAō X)}ɃNcjG)Kmp4ɴ]S1Lad#Zv -tz'@1ʍ<*(Nx,^kWh -Qq TLǀ|,|4ғm߉Gn:qzz]/I|[dJ`+В+m[TveZM;^`9vS<78vafg {k ?`QlBmtwuu V Omadlb`FWǬg6v n_j#@0a :R|:h:f-T7A|e, -sa\PB#jEn˞VX$;rUF/Hl0)3.o7z#(|WIX, -mT*E:Ӎ?G'ϑT;f u?i +h`i|݁l4(|pS8`:ބ4x X)ڦ?A%3j2،qp)5qjy1,$$~5A'-1":={(!#^H92|a{kBX'rh0L.4^s;4H9hv vʨ9󀶧%Q)G&T$e_k2G6U6jZj :A $㾄ge^q?.罽("T^~SXG'҉GaXm)\L)I.H}a.1kysz37Lp< 醢6fn0nЫ -3TfV/Lx.K!=S@PVĤ1͡12hg_)>qkkKipW2:HxRwBM!an˜S%˷/ f\fPY>O;tnlmBi3JYņmN=jwӁEzr<M)Ep5)f7ѕ" Iku`JVr(脓*/(aWpI)1a?yq_<,=aABq8ؚ%\i\pܘg"V7JCT{N9rIӞ+/i:5XhC d. 'B#fOgh=~ttAh"1 -E0|Sa+i:rD.sڕ+XMn"Tu%-IV{le˸=WM+J#59EAʯՕLbB\{`] k0c LBgYnT걙pT MlLWp?r{ČQQKb7]# S%|һJa} L&6}#fs?I0zghe2mum:6#Ox5bOFΘKྤo+"5?㥫I$i{{M5L Y&+dδͨF ;-\ⰽez d 3`6šzwu"^CQ҅AF]˚[[kTD‘s3 ӝu3f[TY33HsoQ@㕓T4H!@a`FN)྽لK~aL%cNWjRs$B733ۮ8zxhm$Tޚp&|wEubHO,dXmkLLqQ`^M#^B]V&@}<1@iT )\ \eB7p̾JT5}3OߺlݣFԦ .Y^.H3j'l͛p-&^y&o!dA\/Ih[ ċȻi> ֣o/n}m̈́7(V'w^|Շuemuw})ޭѫ_Gxsw{})l ay%2ͩ'š{Wk!NUsJW٧s6 - d";w5^EͯRh r8йstMfZ:m vX,H7T&Xڊendstream +xڽZmo6_o $RoN^ C[]9E/7/$%{e; 9̐ D~f/x[ǟ姣p~\z1 ?^z_+! +J[|Ɣz +K(\W'\.9:[Of_I_&r$(EA98pgg/(k1,xD~1V`$_D*!92&nGTW[&CZ€Vl]jJ,tXVhɸ줇lbF9onhvsh[B Cy˄IZl,lPW֪k( B{G d6} HS^΄FC_^)Jsif)1vDӉGa(ZN)INHXmGv9tx `@/[9"}{PjèWS +#GqgޏʐKT o3ѩ͈%7v~H)5}:̭='뭛Gz# 8d n}>Y;b-KLXJ ok&Fj`un}ͭKmE_sј듷o/__^fFz~zyq}u~j@Pr Jd⋧놲"2\~@U)'1*>O/4sN$f[4 ? +_X w }F|O2+CF~"S^&[>7Zendstream endobj 1821 0 obj << /Type /Page @@ -6836,13 +6768,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1831 0 obj << -/Length 1819 +/Length 1784 /Filter /FlateDecode >> stream -xڽXmo6_"wK0M6]tlh X,y~Br E-w7=<[ixڦd7@y;TL{<śY88l\&Su 5',4w ^86`ps}ח5忖f5~?ZĝE.9>)~dnal6w#=W͋rG'iޘw yﻡsݠm;k;2w|C&W"Ia˷l$3˻xg Qf?9OMm4=RVŧU|VEYӬd-+6/XӬ,=OëUy֟_^݃W -^(ƣkV8#&Sgf$Bf gN(!)"S4cR#ZsmƋŅF"d^NN` Bꁟ 1b~7ΆMUj^=+IM<j Mc:`AerȺ8Hdԉ߁Zd܀#pZY`$t qې9hzo VEVKR@xq 9tJoSm$2>⏨38υ,S;5j8Uteq`bjk zlD@z(N`nxRf<0@Y7F9>ؒ0-DMX jMM[3 d%dD}PhHaTN)`c j-®}]I8X%4kRꐋ2ϙ>+v| -1Z0TSΈ9HF hp:{KI]R+!5=@yt fB@Z쉉DN @N')ru u)@g"嵪wF(i,xx hyxs߬h{\;&ur`gEjw,JMXBN`x֞T#y^&C#P`GqW Q[VSR[k0 ,b;FI#P $p<6D /rs"JHYP[;5F/=s]*tq KE9&Ot4(O.@4r!vs F2M%jHI`T, ץ;CU8ݞ"*,3)KI:g cE3ۃToٌ/O֏M UH=%`Lrce׃ۭE۪nxpD콨:KڂFW!'@p89c0@j9Y#2:D_4HN ԱLg檾4Ϳu!7ͫ"Wvvmu"w7$5 g?Ld# D| ߃VXZWSgl{䇫bSK!bθCPSۘsO֢9iW‰O-q(esP8Ƙ-jsYS8R ʢ*;|bvƣ3YYY*S&Vc +ׄ(38d, 7YtYM%oM%41>qbOLlotԵY"x cp +R$Wm9=߅v_r9-;rNX;ǵl\Nm3q+ϗYݱ+\`xm=Cщ.GN󴈇FDyW; QY/۶`X"WwF'Ixm^jX|A,cNUEmэ>zmbJ5ñu59fi@'r'(m⷇o77owsGL?5TX}։endstream endobj 1830 0 obj << /Type /Page @@ -6865,25 +6802,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1836 0 obj << -/Length 3169 +/Length 3133 /Filter /FlateDecode >> stream -xڅZK6WLbjM괵8YoNj=)gkq- -Iy<>u7@!h1M@MAɋЏf{|#C}T=FZ)YlpA!PMqZxXG0>b{nW2Zmx1B?V_Vi敇zWr]p69-Yܫ@cϺ^WK9gw)Ϣ}&?@]~?cׂÓoϢv+s}c cOnuM#O$ذv(w[ógJc#=-mV >b2smh'tPԨ{IFKc^FU -*ק=]: bV ٓ ]%4pb=7< -ޜ`[}f?4&(#8{S?"yE|IWW"bE猃;<(P O\U.F}i\noTAyB{b(|Whs{+uT|4dJ_>@M^-\hDwH(zH?[D'?;q?HĪ>SߖD5)HӀxHlnBR2!CLǷOj譏T^ߥ?KoG8?R⢰\:R>a6c=`8Rof1nٟ "uytxh8ha?qN*b[2A4{c g:@1<4@v -'̿jt S2'Ŷ6ԃJ18ꉳba:Hl)txE 0 -mm8X\} U|T<3y%C/B76jLxK)@ :p4ccAn,ȼ6>2 "C|^z! -{̂ɾ+hxn%6>ޙaMW!w%}^fI]nڮR}zsQE jE>G⽓iبecZb LQi6q/(KH*+ -x$k5fBxK{qϱ'N DJlrMrvy}[Sv_ID"e{H:R=oEEkCAmD3DžWNjAVV't]p+C&2.Sv7kFjf4fUSle/uP EpXf=τҀޕFeS6+-'vb!_%6>1@d3ԃCh&ivKdK7{;Qr\g3b=js x L9MNlsATXNJZ~0<ġ7/ -J2uqzl䈕l'AD SDx3jJ#2'OByo]tI}%"ξzp B+F9ub2G-"]D'' -9E;al L7ZxjYL@u!D*_Mo6K{yW,}8VCH-IUIM,7bG3jzKT嬨og  Xǻ_%W Z/yi r,&(|0 Fnlxa{>f -|ݵډdQA^ cS8 b'4×ni9kgEaaO/ wrqf*Xq>\}n*%nj'^>3Ę)A#-B(i.pJO\^U.nu[.;#xE6k%zPڰ4k.-ZEعܵg2+5>evbq$?řS_DR -.dIA7|BJ5N=Zb9v NGBOpr"diUZ 2%µ`cjN2SsMN{(3.bS$K& %PN a*:w"<iNJxjЃT .pd5θJ:T~@8[X5&NW\gee,)E*rf7?dV9e)ᬌ!8܈rH ’'鰛(]7>!.8(Z$uA\LЮY "&Q`iVqrj)ZB[dg5Ck+%R*&rp%UOUi%ZT5+HWK˱K> JBԦ[nm<⇀>af0^ӌf~ [K]v6M::Tɦ6w!Zs)0{zbM% c 3vG/ (^t%5]/-FحntCZp4r%i-.?NFVeO~ f^GW,Yz䝈'JV ł uU魙'&m^-cw{{Mv[݃&|NE.1'􍩏-z-PW߇C+u}[f6́j+-<9Z.-xj)WjJJuvQxV:r13p>rq%XOؤPw~eЭN[|{#Ga R:vVK%_u᥹=͇ϟspB 8),/MC٥xqY)z٧4IQOQ3ӀjM +&$:Zg?6$%0*tjW(t\QkExbn9^Ozͽk _* + :sJGvhc~_z62G6"C|m~c/p.%!򩸕 T7{ufy]20wT;AҺ<~Mq֑E‹ ޗ +-"Gr W˺sTCd4.ow I1$8 +Gq4qĶHl;ґ'$NiB"YXBtqʞ-[kXXno^M?ƐC"A+ᰀ\~Vk1 +lPiKCAm u0+X,߷Nh,ڜp C&2.SN7kFjf4ӁjCDla)zP(E8,epO|͖lľR(x#4&;C@ƶ?N+ f_n16wt VP2> !+XS aV.e2Q6UkkfdDI&vY +$/7Ѩmݕ9G8PkԐTRݽLMW.2,>UGq 8;)@vJW#uD[-"ʄG' 29EY>\95h9>K=0: nۑD;QAMHGFX.x= C'!Yr2ىvH_[RVT{ǀtk$ (Mɔ\2gLdՁ^jdЕt a6"\" +{_!KSuثqM݊O{')6KNC>Pëܓ԰V`N^.i;#fx +zq$vH] bߓ800ߝ^'tNrz#Ch`N+@.ݏt{\riG!bA(tSW]RCMj};rY9>'XZ`N~6nW𒹮Z}y Gf-BkL!㺃uQ(ew;=%L*iU*:=~R#PT)k!`BpGލ,"ekQ :z#rB;tGfiz*Ԫt.D{h3B:9.ֹ<׮ԍ 'egokR$ŒE:._̋"$7]g4;j,""_B].ǛQt:kendstream endobj 1835 0 obj << /Type /Page @@ -6918,23 +6855,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1842 0 obj << -/Length 3278 +/Length 3257 /Filter /FlateDecode >> stream xڭkoFQ -hrOPI K6(PJRq ߼\JT]ݝ?8]$w1uzO>Xfslljs{}ϙ\xogvL%Λwݫw8[{ys7== -TXvG|7su?As}ޞnhggWM%ԉ&*~hQ}uzeLNݬf@)h׏nR.|>Y[Tk'/M1cr8) 0#0 h OCs:v ,I+2?Vn/e(N\}B“ր*oX7}Er-`2㩮Ġ+.r+df-fs@8`8WKgQfwJJ2xdE% h?%-~,Z@^pFTQ90{#DI@X@O#"t[g5p )Rk`ҢZ)!lf%-aEMfl)GBvOzWHp҉âC:9ɻlTH h@a22il’N$fAKnwB%ADWu`ͻn -xk> -`B$;( ځtiTwy9%gQYM8,[y;L#EnЬDEwPa*<uA)Sm@T:S++: mL''p7ZO+T"FDkʢ1/Vh%]Uβ=\F 챩u'Ĉ(GrUF]&4p"VB(nZ#†}1[_#JL -L\D7Ӳܲ-!X+*N޲cclQ}j -knz"5#:xMoʰ#,Hq:2v!|j沴l`Sۑ ]NDS 摯c$:Ys#7ir Ôj[>v݆i swsяMpKLzYԐ&]mN58ɦ(xO8KgI8|¶¿l[76wdCn08 VPʉ{2A(>dD`pYT2)$EdhQEgM`fsPkY#1<ј_Dޜ-ʢ,v:N-Ƹ+O!s=yU*Wbu+@4cHH~^.YCy}0{|ɪu>mm7!^8\-ˎް$[>Aj)h{vUP^^4xS2T!c6h/uy4J# 1p1k01,s`t8U3<,)tIM~\ͳb!%oLPJU!*0Kțn78voogq<%öx:yaSex>;yssїBG+KdMjk1DvgvzҒBNzF4sYJ,1>: ȵ ,ӦAT`b)vʕT@Jh̳B:$ʪ+te' R{B -W5Z6]F`⛧zv!RLgVu"sa 'v2]DVB4r|W[Y*9kcJ 6 qYxkՈa%u5-iFT=ԄR_Hٓ -~3ʼv 4};t{8^:d(`eX<܃"F .=닯VHSԝ~^ aNH3A5ȐҴd# p[M{HꁨMi2yӉ>3yq<:We%EG]m߳U,RAJErEo ->s}=;YRP% - ,2R^c?=&hm?&֓ T,x!9㤲Ad%?%c SFZL "ǎ_2K.H{"  }SZڣEc11+-&}F1 2В'$*)0s߼( $B"'C;UyR$Nm4vWRK ;0y ώ_mH25z(Z8V$Qt'QZؘ}';i>P-H菿y-;1;;::O#?0y*ߤ|}/agJ ^ܟ]a0 ; GOWo|;c<i?'ʻ?0=LR]Noۗoq70wv||&K*gad(4ү5s94ԱhOp FɻqiX_x3ܩ/x`wBDW[Yu <wiٺozB[}owkzew5g2HmG+$VF7-q}򮬗=¥orB'p4C&Nu5@\+5F "?e7aRG&( +{[3b˂G~ TX'~} (_BrዢC2w)2ɜt_MNv=68G*X*Bydq%"KMT:H:ΈÒm%N\ky +8QP8&4~@Dak_9בcn!r|Ǩ=JFyEiDQ/lӮ9+> %@i +JRkrR0::qUrH/Eߖ<0 +RvUg^/Z|zm Z _1= +fk!yo朿́dX1 (4i¢ |(%JGn遉q`{†w]52V\$=hEHIwcG. (҅vMP/B-'r 1k=C#KKO$U`p+;fPBE?K{3$0ׂH!p`n=;o$I='R5` k:mʞ,%.&W=`܌g`>*3~Q/BbYmZ2hJD 9|E]'Ai]hfɞ}=BLhDw +AkA$ \5~pxEP'Rv_`s5vihu s{}|TMLz8ԐF݀m_ɷ8ʦ8MMC' 3_3 0-mk'lH-Ƈ! + +P9qx^&L58;8A9fe +ul GO=9ܾx['&ݻx`Ts+XGNZ9l"^|)5o,]|ɗEX"?XS8,uc1&a>3 pB*  =pEdB̘G047iYq*,pΥ@6!R\@d,N +Frml3*kiDۢC}ls4r֪h1л;{Ha#[ M-VZ4'rl8WXƭzRh~="K[r[..?|D#@|^i0O߫U^/i_/o i,-\$\=-1A#,h{Nz5\.>?i d_C<Ǥ.A>0h0%hE%!GDASk r(.`%OK$n(ҟXm@AQ_ǵ=',B\lF(sM-Kc4濯'I]Le,`muz\âF[A|mPu<3nqr/Z*(2Y-H#^>cQ /JF4+'H|: c y<(t2Uhɽ .AH`%v ʅXBKhR:)ݖ tǥ' R=PAjKL@KjӋu#ܭh#0-)&s-p+5Tm9( `.ؓ~\m'w@ԩΜ3)k}\}^e6Du`ށVT> +_Hbړ~5Q1n4~sCGjзD> $IAfw`asAcIKX9YW]8k6$MD *51ώGj*5kf*.NT /> endobj 1849 0 obj << -/Length 1308 +/Length 1294 /Filter /FlateDecode >> stream -xڥWKoFWH@N ٵER2QtI*}%+Z;>h'o2'I2il`י OTλc Yv"FY߮7sPͽ$I߯_ڽ^<+,b&uafM N@`h;xo0|E.ԥ,\T$ۺB_QzcX dz&_,F_Hi3R2_珛m" -xBcdkIٰb}T(P*F4:P%l#APxxC&fs];2 ^Wp昃=v%}abUr{aYuAaLmǖ:LCb 8bC\H7\$9 ]J0ϑSi%}F  sOj̘ RKGq"$2N1 -3m9/@RB jvWM/w_2y˷ O{iyIISo;δhUA֛} @eA歞HeU~v}/1jHzi%-XanT{/ +7˷>.珫ĩU66?ϏWg2Y`(enf#"kd=ԅVGġ0JS;&AG O{\?*D~B0Ut~֐ޭ;Yˮ0MUᐨ0VI`N0!eJ,00ʒL˼ڵ b35I֡}5-/N:bjJ i `]KϳY,6NIu#/DQzcX dz&_F_Hi3RѲ@7vM2גa]SlBhhJTGr>M戻9vd61u{j _UA U=#UOUU+'2I[2]s q# {?VІ s`THl&jv)EyH+3Jؗ\{W# g8[J-;(4S^(DZk膙GZ6$p1 gxlKM;kGL#wʫ^ OT-UA >_ۈUa i"Y)S6#=j('(rmF)=VoDw3>UuIdB.u(E&'E^p1C>y #6w)ΘV}lH^Vjzx`Bɻ]T4S`i@V.U s@}JN@^ 9rWј>Q  $>endstream endobj 1848 0 obj << /Type /Page @@ -6987,23 +6924,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1853 0 obj << -/Length 2521 +/Length 2265 /Filter /FlateDecode >> stream -xڭYm6hZEowR吢W{"-y-Ty!)i-9wI p8y!W"'VYF*_UvǛh#VB*ƍnF:klRJ V2 -D+!d\%ҫ@MGFEAqnw7ڭr7mfh*Tj\0J8dbV -6MzP7"X40yY ╈<',LӔ,?J-Up :l?w}yczjSn0:=)>$0'Am/w턯MW0B< Cg?,n0wUO4bstbs6op҃XơU1Y&11"p$F2O8I!+3B_5jY5ӄ]HDmqI{PB2~YasĄyv5*Pfc7Jjum§WBsv42?H_v\c/-S׀O:RAM$enꉇ(wM{>솼/i7>:v:xc8kUݡ!/Xj16\h'40s*DTTQoX-\!VRʨSuo(rA݌7V39$i6h$"{ř&j|V%h!Q7[cqR`ISʶ}ÿtv`w0-^̱}u8vcغi.rklgO#hXWQ%lBf/ȳAc3r\9'P_G2yE2)-CyCX!zNUe -0b!.;9 -нk|&U^;R:NB8K?v+,1k Y훙Ȅ3@5,Apjq_ßKi'z%_Bpztnڝ[:N0wmsG*"u- ɾz30Q1CyD9LX)do_3Cn9D,jΜE4GDbcs[B[<.">K}24p.~:W>!"v'bRiAn`0 @nefVvsWHC,An(c]b=9 ׌;{覵LX5Q[E)^ v>l?"L9YFtL> [B}w0kFp1;Wd!]igKֽ)"V58}xvSvL{CWE2PH/dCp3i۳->V Zݣ"2|+^dw뀶EfI漝{mfXgֲ=-Ti5a?òG'kfǝ$|P@ D_ߊϻ:] ¯V3“ -#$0ML#s"y^<**Ϲ?bɜ&;t ‘^I α&îiVHTqyBex0 hhE^K]c}Ȉ -+Ǣ/|cs9Q}_ͤ2d.TkXsm<|Y::x)%`PE(ϊWk3Rv2/ьR -E,t[΄G:12ՋߣǞ[>&`t}Y%LY}c.b]S"`߻0,y{ zEc5Í}`|W#J2R[Ъ f/ -%nƓdk%s'HS'TtpK5_h;!j='tRܐ^)4x52@y@D9GbJ ϵn'J_PNGm/DyvIΤ7 /׋UƙZ^O endstream +xYێ6}WI1[u>u; }Jmm!HtA=u!)ٖݳX!`DT.r?9O#lR4o33IFJDaɥ]ƁdJ'HD2E׫ݻc5_mIsh"Y,Ǫ?c5l8iJ$eLD +ƧɶtbUkH2K<ߺ[ +z!=z3VWpŞV[XTUe:bO(AKe,"5pTӱDEۦfV&FŠp?Abè`G5ބhHn 2y=g' C &m*@eS|^( \; [ї!f±-L⪫L(>>;J4RA>4T-zQuz-ZVzc.7͋P~b-}߰(=^s&ZiBKMlCnvM`cpVz eumTRpy⾩r8m~ɟpofPY:/$~_үj0D +*GΪ]q(, +^3G֓P2%dBdB7Y ^so98qCަ*H^+-Ce:{.d jߡFbwv.W\u /]O}X&*A2k=Vs~ѵ4 QXҎgD +`#W,Q Gy0=yԷQ@O[(V"hafN? lqzfkWw7g]zhc2pG{wӖdDT2`4k2rSị>9\v8Y;$`K 2QlL2enF;tP${#+%^yN' ,_ib_J-n~CWF=(<%jЙNt)*;=l:FqkO.zN0tdJ!Z5Wۊ}7DnYxrۓRdS\&sz167Շ}Ľ+(pAi\NW*: + +>!b00D)3paa63۾(Nƞ fv +ER.k͗f$vfz9ȄI#GcV)$Bm2AIܪؖOb7Q򙄼LR .Lh10{i,bNgpn"BŶD&LG0`kQۀdр&\">| ӱ?9 }Kv'M(I0b4]kCyWRN7&ZY7 L(&D`#kkCsK4!̛z ;{f:uc4JTҠؙF-I$p +> =~=#|x§SE) &QvɆ)p5EVEXE&Ur^œfʭyl C+q-{a e~+s| +KN`a?4# ׻0voz +0ΠZC+HGm8TQ> ^'89؆⢉BM3t,Z~;2} jFqrUO!7ӯќH,^u)uk.ouovLQo&8S2(>FlMӶb[&//>YY +@?4?r0xL??_|뿿 \t8y`?Keʎ|7^* ȧ盉*Ɉ>5v\"er{\Yq>7{tQҰ9]q" H :Dh|''~= п)1l/ xz|o]Nc%7c)@$ᯜ I:" : +b%'7M& +@Pjepi^?ITx0` R $gHQǁkޏ@Ar=endstream endobj 1852 0 obj << /Type /Page @@ -7050,21 +6988,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1861 0 obj << -/Length 2882 +/Length 2559 /Filter /FlateDecode >> stream -xڭr]_I k %#Nb5v2IȘT{ @H.Q?|jl4-6gvv {g^M^a7bY7͔iKǡ2$Iwc\}d˩GA ߢQp1/p1ۛ3@ôy}69eȼu)w"˄~3Kϸ]Ťq\1)P(XYmWu5yp `SÕn e{J*a Wם!i'bƵ .XrD!Tui֖ykn\Wl9RjX|ZlW5Mq2cx,2ZLMC@ eaֿK0rT]F̴f,`!@K >T4V^9 m9` [ǍP27 -{1Ch)VIqH@Z= ôHX{Zx:WJ]~ݖMFO< '}+@5_#/}*?{A4dZKFf8C2s@.!FD^s4+D`HĽyѐ>5ܭp9Ky7e re "ƜX@ "ʑ{JPJqH?MV6TRөQ_ܺDMI]'Eʄ{X54;& j_;̉+6Ū2"bF7?(VfJV Qfw( H́ZVc՟[Xaؑ9p&a3;ᷯQ29,q*TL]Y)2<7:5掆wSaV>7?9YgAUj([~WtCo4&f0==# ޣ[Xz)PC -_o/OāQ -8H+3:O=Hњ[TPo$haEh@Q6M,N~hV>|QBbĊ[axX6HcD$ö`N^p$L8Vݒ[<#I/W8[Z{97/짱(^U=;/-}!+& -{- K~ax7%9J&j1T[(Bqeuv:=TArͤlV()(PBhB,#H?$V'a@=X=$aCf2n621VCu"}ڮQn匱j˻~!{Y N:i<؉!Nt?/ ETp$ ?NNCr5T:Cz&`endstream +xZ[s6~дf, %lvwv4H[l$KRq<;{.IN6~$$\s9rEpU< +#)T#wt 3?i>Nz+b7nd}w~vxr/Ɠ0t|:mD (GR8#W8û+d6GW|Ghw9=UxXEhPx +`N 5fj<}XIʛX'ҹ))t޿Ğ0~O +?Zn@rEj<ѡG'W +n_yu52JCpˋeH zy;SV171'UY%[<~7+ ڀDt:ٌY$hCa?diّzCd}AK#3Er?defi],X ۧ\XH[}7s5֨?MCe*K:䵯Q4[3]V.~k>WHbJ(Y>K6HEZ?_72bY!QLO>hٖ7k f-XiLՔ ]\`Ûj-lNQJl2[sy7*180OO tv:B|]3ߔ)c7u[يb#^$ɖ LECta`\J0ޚmQI +2[07Vvhon*k!}!AD股}MgN\ 0ؗX $Lj`6MRL4ѵ ܞU jL?(YYi+hҖP{Ӑ\nO,As._MW LOlIkaTjP=ýp.#{ΊC;yaqbu$MeBz|\+ϙt1h0|d__f@B^EaLIE•έN`y|:*Hh~qee;+"Y~Ȋ r;%]|!8XP` g yB%[AJ# dA)GD?ӴmxN='Myզq yo(Q yC VNcC*8ξF$Amd enteݭ%U_(5 f~Va bnW]b'DK0(6{ﰀs{lP}OŅ(Ula@r{ [l4j ?֌4sV: P+j7a\‹v`6'[e]hq3!-F:Բ޶cBl_!*B}Bw1Zendstream endobj 1860 0 obj << /Type /Page @@ -7093,19 +7031,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1867 0 obj << -/Length 2512 +/Length 2151 /Filter /FlateDecode >> stream -xڭYm6N."zHM퇶d["[$onoCɔ-kfy'W80Yd^|w%6a<va$("eJ fq3Y~&dJYj-ֿ"z( -nʹٲq&DCe[|DG)gZP*b5 =b8 AB:«%pnۤ#/Lpt _&,c+)y(4Xd!h>8wskD962v3}nO8סAʃvCprɛ1tFęҗ{g`}\ݣvypm2O(<* -!>p)WH)*EsZKAZYkVDR`ɉ;4XfL3#[%εs8%g4YY-ؒ- -qJbOVCiBhSltUMf[A5'guv.h龮DnrlPvt]' 4r@)=rRґMEs6*R!ߣ)hsR4rkܣVmQ23őˑܹ,: 2@2?x3T*bkw1S4+4d&% 3RF!E6fP l*ۋ2HNLkU1雠bIA.ԚljG80ZYzRP-ڝ(wgyŭuk+Rp/1P3T¸Q;t#R)g:,2= xtBHRlzyKF;R8!=i7m){Gzۆ* -5u‡5?HSQK_,!||qs\pqc&_f4+-6LQ/qhgT,*OL{6rNuF5u#YSX&/״T %D{NjԼ Ž4Bpp&a? {K!tAS(^Cʶq[!~1w_I59jg0+!ߞ:#Og!;PGs&tŌ[ %\9FzzXO>5y>OsW_EfРt5w9ai l\ +ldFc:S 4UjFKx<g E9^πK݇[Dxv.N 6pEw 0^I`azel% -z$ѪѫRwQw\A7DsDBR? d<-ќ LAd ]^c^u&bZa2rZaeuD٠{Y)%:3'^FUƗ*ʢi}H\8(Oniؒ&orM}"ăg_z]/1XVf3GKNGܩgH4Ȟ{? A͙hJmEcOJ*1xMFBOhEc'KwC]]xa ):Sу]noK\(@$x bV.RH"8;^8%~;[B.fѴ;!vA,/jV+HΎ4NS*:0(&zx= ΉJ( =C 59' ϸRJ>@'F([ Q;m9%k Wَ'MLK:Զ$b%liF-bC:r˷7M K+ Hi0t@mWahC*8=Z^kAS'DMMqeXֈqG[?x#Eu:; rIvQgbSˑS5+S:'bvo%y0hfx4H2?۴tSp?g~ucAh#B(D,-@1ۈPr7zy aI0,gn]zS5_32LC#ga켘B'⅊YV=hA~ W#Ga̙HfD0?G7NĀ Ӱhvn<7GGhip9_gtD [kyIۥo< ִr`߸8oݢxCwkёB +nͼAzk.M`z (28xym,>P @/hh]159 ׀ "68b`I6<}A;}ODej yAnp TAm_>LKuWJA W= =X}c0]3mw)fbDfnˢNЏ8U~^x>(K$L67[׎ K.H26`GHRC5lKL/oȈD3syf t~ِ>ri$oH5`=>Nr\v. +:u{O8*wj̫k.?֩1漢ȡ`C +#ZȋtwRl OeݬɌ4_J9*\h0&q;sE[}~PAIn?7j;Χ,(۬".*DE* e.Yp_L| ҐI7RN=++ d#X!Xvv׎ i3nbGś7``WwX-wY,eۚРȄq(_X`so~*?<#ߎczÖ. ?]wb--uUOU(>LFr,aGaT\Ȣ!➠:hw Ѽ.ŝѰ)C!oҒͿ6%(f{ O>{KlYU3j:O!- 6c6IϦ;/EH{ݣGkryJ ح*>`\ +ڧ?BvL9Ç5l"&Trn C%yFߛ9ո +r$55$bZJ̽aq*)+V>Ti؂d%8 {A'hs##Gj&ϡ|F/v{e%w f7}B. hGMsxJ7iu&sz5T @as{H0q~}*'=B?RyMendstream endobj 1866 0 obj << /Type /Page @@ -7140,14 +7077,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1873 0 obj << -/Length 1221 +/Length 1146 /Filter /FlateDecode >> stream -xWݓ6_#:} $&Ӈ;I/wؓ>5pf Kdj?~ ?bI0 ,! bRZ [pӌ 3=n{aOL bQ:/VJ,B(bZ~!y*zoḜcb~9.Cr>^. ֺ-2}/>%`=2o9s  #jJqy@z#D}zQ y=[ -qfZu\&Jns0GyiPnX !uÍCҺK.K -Ai룭VzOɨ(?f?`+g@Za k7c -fvl9ȯ R*" 8% AܞC#EQ–4U#I!'e֥^PIga)]xQ SSnaWkºدձM=ʶ|b on}s{{?.lk+A ՅY YMcUzq5n~śFr>*o_>׷V'tO,7/8M҈ʌqQUDۘUV۴ʵ#̳7ajv։Ƽ -[Ɍno&EiHh[7oO8\]o9^,^Zv%yܔnBɧUk K5z(^ǵbl|&+b@UuRGD3p[UWǮ\a!ɧ"Z֡_Kswg7'0i89icGƙ(i<_b\endstream +xWKFWpev<˕K);ݍrKEX(loRkJLO?̠cF*BA`lv3j_fLk8 znOmS:'Rl5ZpjpJ #c7DF¶& +23.3KZ3Ș:}B3-`Tؐ?CQP !J ]-+ĨywEREdET) +Mr4'; +b@Caͣs q.պ[ɔ*GMVhZ#9};j r'XS̈́'go qidNcL}/O0T9qP@6x`SeV9Z'^R]s1hohm=*X/]i-ptѐ_B&]`9$D vѦmR7e{3Ibu`DfȶS.מ$QR=e;ge*^@y8C-/U>5Ax$u.b +BJw3BZc3]Hx/,O*UU4)% | ^i!0qM y-~ JfRvjrc%GVpZzn}s{{R]J3*.|H ՅYdYu jq5n~śFr>qOU^ϟ>_\/_Yo/^\/'q˕Y2֫Ⓣѫ~?Yn NpMg[:Xlk;`U\xkZVCEB=*78f~O-b/?%X~xqs +_wy/K8BqDnS} 5FNh䦃Z we<;A~uاPzh cݱ$gZbGM}גTew) ̯!=H/r0^ |_Op [}u0endstream endobj 1872 0 obj << /Type /Page @@ -7182,16 +7121,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1879 0 obj << -/Length 1005 +/Length 994 /Filter /FlateDecode >> stream -xW[oH~W „a.Tɉ]7}V Cc )DU <`u}XY68sfEP1P{>tYjYÔ.sksZ-X<8qɸz=}7!d@LL 4"|}XsV n.] `+~>}VV -|Լ;H>oHK%l.b}UBu[[\-U<1-lnjBdOuSݧ>6) YS;c&ۺ Y_CRLD2gPk5iH 0Ղ^EV&E*Aw5%CU' -Z:ͦtuX^Ր$#LoDhF=`NcKTi.mJ8ꮤ@IU ;`jnThOE؜ٮNYSb$4Qq1!馬ɱ}sX|pcn^c 3G[F=#[KHR횾wdzmVcB " $4l&)&o|:sk@Ўǁ1[e,,UE SB -D˦:sz5KCNp&XI&άw8ȡ幽6܄7&yZeCH7ɗZ2YmF/K&e+Ɣ#'ŸUv$8cٞژj5uE^uXF!Oy6E~5淛7qr#~ G\DanVyloG6";Gnܡ<(,xKW+. -굶vww}1{KYƾ_#AGA;1=]ϑ0l~ Wendstream +xW]o6}ׯP9RBN,ܸ+ McJJn?eJVV`kCѬn2>3JX'MDal un]4wg\rVΓ^֪(Coqa0U@.Ӭ«Va2ClCdUوIi2]]. Ns\T&=vD*]!U"]s!*6uGɇzT2)9R]aclS5^{pcn^c{%#rFUZԥ5ymՕcB7@F·ڊ{t឴XH/DNA)72B*4ْ_/>yJ\]Eq, \"R(Z9hͯF4b 8 + |$)=BqF?NNNxށ`pބ +r\KPj> +"dn7F*gYmd;O^P&+RD#H6KTv> endobj 1884 0 obj << -/Length 2351 +/Length 2286 /Filter /FlateDecode >> stream -xڥYoFBT`1|?P\'ur.۵BXD"U.%WwإHrt(Zyfvfc,Di lӍ|}e V#E2jѼ\eV<,||$p亮apϏCǟon'͡ ;8 7kt?_YG[ +8=W}W_V xW~j- m'6eG*~|k!7cˢ-EҔi,¶)pM#ꊾмx9?HU&yU֜QjA`ȣdЖFdĢ \Vh+͡\6L7BF8>P?~t}r)/O,5]48Ҏz&1Ow ։cjW<9aPube!r= - *Tj:yx7~Xo/BJjY麟$Ci_|(ʂٷ):6u4+$\$0@[QcvÀEgML~pBX?kJb cn 3h+ ZVeuB3v+6/MC=8cBgr_7gA -8!G _l]AՕʃz*mF -%AGWݠ,u4 }n$xңq řڑvj,{ViӅիM+<&Zt%ǞG.Qh$\zr:P65c:ϊV8Ou -LߍztB=\#]΁e(w IWYzpROCcF!~@ f(4a Yy mX '{<7LZ -y/6eypsM0*[.3< L-T)\eʧ8pkg>lZ|4 PVqts,Yv/7) -[m4'By^/KQ=׌ܸ? uzJ=Fs"nendstream +xڥkoFSbH.(.:9ZM!ĕD"U.%Wwޙ](G"y8ādŮx0__9%|r53m' p;qdA W?n&cr#{8ǡkǟW#C7~o "~rlă;$0;W_,jS=||'8cDZ0:w(Fv ixBR"W #/\"iP"EQm핪\OEuX.RGr[К#zFGw;߁- +1 ,YW(9Ce>ZL\~@!0bzEۼ6 0-67$Fy]SX|?} ܚ9HfƵ7vJr1S}u\FFY @[uk^߉0ڢ=zܪ+";R9z \ԫLw$f^vc}O*x11 ĶӱDDŽT*.#Lk!ӌ/͒(j.<˳:k) &s)kuf'K=)܌ mq!7-1# +|q%LGPpLdG.#`~F9bZ) 7[oknoX|^oyc'7uxʲj>jU z')ØY0!(& 1X!:cT5B%ґlբHΨӒhTUgs.ĩ*?r mKʧZEJr)*L\ϒC}Af? dZLETHdjL[gm0Jhi %F&8J'7s/:nVX"Z!A-#V~vLgpwPs}4_̌tvh)e$j,['Cu djjBb#V 'xJ BײUqcR7" bV)$r3 j}jaz㓂0vH޾+ԈR6bl/%(_1:J99UR3[9;GZ(shI5WF/-\d] <>#EDY\D^tl&@VK/::9yy?<>LG=ڐ׈@q[@Z&^ :\nA^7yOϘJ/B4> ژ] &G1__lsɄX\1> endobj 1891 0 obj << -/Length 2334 +/Length 1977 /Filter /FlateDecode >> stream -xڭZmo8_aKf7Qb?]綋&nC0R`[^Ii,odʖK$̐| -C$>*`9_a_gR,ȡy;;{}O"?|$f޻_׳p9"ÑRbH[yyedV ف%y?XvG>09D -ngg׬̘Ym `} e }"}QswRF8e[i=\!VH(P *_.F1K|*=ʴn N]-ԣxvCݱK B>VSVޕ#O~NK8ǐIl V\>|C0Gӓ3h;Utu -ս azΕE},nL88YI8ܗdBb7;H.QYzߣ3m -@ey腘uLC\_҄S􃕿 wY~0@<8,ji@x SP_ Ce9cfZ\쁭is*1!ў>tK~HϐX#- CQ;䕡i"ҥ唖fKlU3|G#!Р)UtےQmWzJ5lZDeyARp5p1oB5 XS#2L% IUtcLYUB}5rvy62^DJ¸hi!an:oP:r -Κ*h[9~A@lw}J[񤔾p>WW63yz$ru}8`t{|b*UFM8B -:{s2st9H={]ԛZRm AQq-êIx{_=)_o.nWXT|v,JLy_{tn#g7f2xՒJLNbjQ%6O*Ȋll|9䁼' -_۔k[v.2tԶK@?]~."]}p MҦxZVZ7+.d!۬kuO/O|kp_-,yV;o1_M-B^؃|B]ijG&@*-ġC -5W8'|F -) <{tX6y<K t_>Xۥv(0&fyC ˸O-SGh24-޷Z&cxL—xk&vT)'НyGg`ZGܷhNبKP_46YTT]Z^#YKu ^ܺ _qGs -Őf=wO:ݝou  kNAsoZ4nwyhU~ٲ8Vӓ{ t{iNgߖ|NzW" šăPpiY0޸{',<-0JnB㑾 hxJMW./2֋DR֟?buKע|ioAjup|VU4 r"nCaQïA]}JX]p'Go{E97K:]Ƈ5Fjli_~k%]XG >~2l]$[蛄z^{ѲlNlykz_pQsV[j8G┸nwIhlb8+k:MQ<nrWj7pMg(u}t0BIA(4V0(e*B¬a xTI*yK@TSpǒͅ?ˈ!q2?8*I1V@K@ 9o,U$]!! +4(S-:*.ޚ)R3XQW/Sȶ~gZĵaT9Qi;n$ϻUlfi\O3՟'j"c&UQhա2% +d)*UrFpaEJ=Ԗ]]QzXK\ack3p^6+T{pqUҿuiBЗ9R;9dui.I@V1?XEk@bg}4Q;VS5!U+m> 1f +2gr!пFRXd$*gFVջ"ťu[.d<;B4Oh:ҳ~6d#Etֈu;[t hm1W~V5veā LO-x*ZdECZmjUCn9OH_G1~&^ߓL>&s9i\ aKaM791LPXR̜_Lwlȡ[QSo'/V%6 "+lA&0qv y(u53D؋A4PJ 4,ژߩZ\C8ܬb07 go. GGr+&w(*Y6K:Yjx Rw3߱z't2h rv0OVf0p=(IJr@(# 7V)o!&82;w8fC`+Ne 8&Q_4t`83UNDc?|{uǁbIo ~"_ݨ‘' T.liSB-"檟3y?H[wyؐs<èB!H{PGәh< uݦx?P\"+"&AMm* !-Ʃ|@5#6OE2+m졿( %,r=m;^e!Fl[5dd >NZPc/t))mu`=Z+``W4{b; X~xsa/S^HAX_N~ش\s\o7׮b.endstream endobj 1890 0 obj << /Type /Page @@ -7298,21 +7223,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1896 0 obj << -/Length 2385 +/Length 2006 /Filter /FlateDecode >> stream -xZ{o6?mE%,uv[ME[:[NVj97ÇL=,"HDyq!<ɈE|=j(_W'C軽Z1J}_n'[Sw:煔!I1ceALV(j` fWsj`a}H@/<$qh!,/aֲP2 -Kh D)$ډbŤ$Ά?q?Vwխ@ %hF/2/r9VYaEh NS*(xχs/YLY/Rd(2NQpQLT0XE+ Cfaj5FILKƉF9Z$b+%Zl%wy- ,S -#! ܒDiN`D@"4$V^˸"Q=YDީXh*PMz?x"7Bņrąq$fqa,\! n9Iʊjk^)Co+;xD*MA6L;`cPIJ#eDCӐL选c0 fՠJ}c,,a2W^;xYRt/Cڏ 1,jxl|Ըmv(T(3PЩbyIWG2*hpB -ۑ&MiŖ2ðѱ!1a a+hVޚW˖xd| -\=.0DD1!V7dp _Asw+KdVNahHWsrQASZ8e ѱdzTše>7{_bpGssU.Ю}>]㡻ʦ鱘U*kNg yzx O'h dh:pgګ;۽LW@J(?Fj3j-y'㯒[(IOx$ 7Hq E2šë?_0 -dcr7?xZ+hܪ_q -8NҰao]˧7o]-+3fEtTy6..MݓGmk*%9&l;)xڎamk={xz=8`LЪ'fc X< 89ڊ8˵ 4IݨexmQ,NX.<"L;֐ -盨bpvy?lI{z1o%E.,-pܣm !c4-jtȟ"I$(hyuk0#Y\WCsF\8sO.|UݚkhyU]=:9* Ey\lq]jNgyyqXO*&\iظ^o8',n_-ES\!!G $FCpxSyendstream +xZ{oH?"p:Hfz⤴My(MIPK:'Rofw8 G{B}7hՀ?bpj;pǩz3/+T0&1,SGʳS  n?KOWͷy9QޟiϺ'鿩&1-'||bTěATomq~XUeTԜYUJhjq̲5Hd2YoFqQ +Tm,'V)r|[RW|~d0bmH}r< USrn& 9tH/6'c-7" +0Ƶ֣] =I`i},-pDJR* +F3_L"@[(ZI Tvi-KBN$ +G"f@O,h>0<S?V1j*E;+~ɺzmQeBě(\z"D[F#=#k;Z;VH> endobj 1900 0 obj << -/Length 1115 +/Length 1031 /Filter /FlateDecode >> stream -xX[6~`/dnldv6l _]cn;;^tw#4P18tك7s#bY]l ]͏85?~ӿabuĀa2'ГWVp|W+B]:چ!@{SJpQ_&#z@@ܶ5 F(iOaϓ0EO}Gao@ -E! (&|R/ƵBHwD//i/1@Urd[ fA."BYL&Hal  F4IpӲu$eeM7y-DT sYYQU{G4(/*YLKȢŕ(Wh}ҝxۡ\yZ[|.߃ѪtG\@,Jx8@ o:)FQr* ֏zU21ar԰}c·̀fxb,-F |H.Թ ) ZY D7Y%P,hro8Ds&y*ʙMA"*,"5&Ui&_6D-Cp!d -@mkZcGA6,Wשa1=/Ր|6TI=I5b(ʓ[^nt,nK>PsVb50wCj=86 1y-f|y.¬:̌xgٕrR.*͊okZ.~)و WST*8S:PJo$zR$eLe/oYQ^o%jD,;VCnA -!2׏@aP3 ÚmF[iDƯw%rw!%4;v8D ʴm>g{%;!};s i=oU}Z2c>={JwPt&Egn;:iܩ+P -wb_'o rzO'QoQXnonendstream +xXmsF_L'/Qb$eG$aDJT> 9r㑵w>s+A4x"@\WPf~ j@S/fJ˳|WZM(++Kp~(4`;Ҋ6B!T"# DNudLE ҉ꮙDžEuo{PӴHJ5Γl<&"I<\awAT?-|UL]9囬I I^0ZJ 19AMϝ8ޕ)X*7o :6ml \a,Qjf{UJ "W>C p .!ӝ}N$6\$IK&EB U˥DɒK)rd AV޲AcN7޲tVd w-B$* _Zڳ5G2߱.BJ+62ZΙJ.SL@?=)M F?a3:/s +ib28jghUQmxr|vX'q`'qf,(V:]F_ +%/wI`wXYqWX[l@/WrHHΖyG@U/{!;O: /ӺAzPit=Ro-R=S:I 7[{8~ +?+[.y2 Cu<~Ī=:xrj l: TFaendstream endobj 1899 0 obj << /Type /Page @@ -7354,21 +7274,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1904 0 obj << -/Length 2544 +/Length 1824 /Filter /FlateDecode >> stream -xZoB'J6~hK.i{HS+QJv]JŇ( Xrg7%ـXEpc& :'`q8N漹x^SJuف"RKo?zX0CcclC\~᝿zŻ=;P.|))axy""/./~۳ - P)X3GWFЌH-FT!51N(QTz+b8V&7y:nAyp̒uÛ,\G1`p.g( qnŤ!:((H]Ac #N\$Ds ʚd\NFAt3Fnwi[m"6) F~k.tSn1S%f-&ysZ I ?أl' Ӌ -V (UVw=Np^䥑(ldjZPFhA敨 -d 9\#j(W9hhTkwQ]P-]E]@t9f)a+OĜUɹ逌26 Ec@: Kl͖\{cWW%:ؿR$l\j,Y )[Ձ N-`[eߏ\P(]E^ NLRdAcɭw0fM%T *dgg¶H )endstream +xn6_aI6jW]0l@%ۊ6g&˱Q2INwIٲ-Q*)$s0Mᇵ}Eڞψv4m5bvmKB]Ks&) hsg}!<{yeΥ|7gulPBЗD1@%"۷0A{ڒJ%NZ?V56P|}=#TekY.Eui8̮Sun9s;Gl>.?<ͥ6tKaŽ[Dq +Bz}*rSG xT B&0iQ:ǽ s w͇ 4\$|MQLw˃j sLUX(#ۨ}"}eTD*uėC s3I&.ߜrخʪq#d &;#8apTY.!h gC Iytr)lɍaN\Cf*[3c+m}| r4'-\>J9 +_ijNB91^ S\ZD !㾵`lGGh +3Zh0E`:wuz%@ LbuZ97Z _a&BAc8NoY`SUhYx2wvd66+ 4NQEzF~E ҹ0ڬ+H ^_"ɚv!iǯJO9+FP:~?zn}.Dv;x"SIY8o| ֖8dST?;BQ Y e1Έrej9zwINeJ#a +؊F=O6D:dUĥd"NW{.E|HlM +HOMUF +3[OރDZ'9(@pkE3wpy3CpHހ(V +i/(?U/KbMf!rtq觢=jVB>JΖw]HcoZQCŸ>2Sό\e[ UVzG?m#|h9 ?Of4_؇c{BD cbbvaoq:@m'ٞ#+ȸz^e@(c \<$Uxp658R{hZ&JY|z>IG`=9h p})M'y]kP#6K .`+-FD8&xҧpmFendstream endobj 1903 0 obj << /Type /Page @@ -7412,15 +7331,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1915 0 obj << -/Length 1023 +/Length 958 /Filter /FlateDecode >> stream -xڭX[oH~We2V[M^٘TZB\T\gU{=PEI`΅ DC#lŴbV@GJ T$Nbd#ۊps8zip ocL%&ki_G}Ίū0wtlww}alK1" ^qެU!ӕª*@,-v!3 7i1XC܎oo u'ߋ7",Ј`ך,'ip*K/{2VCIzLֆѺe!5 EZkZLI -l|n}=2xv1Z[9h ܾ]Ÿm'q[SFBvo.ۇE~CzwݥwpB 0ВC -.~4yuuh =]ԇ/ Cq.WZ1ejb tfFOo7}!+"_̝^oi~Kȳs/d#8Ly1!m/O+4P^~%ިh7pGnSKՄ6+dpضY39tchzMƄBf ,8ﺜ zuI( z~y`/ͭ.~48s~,E)*vҶ6|"Ѕ05ϪU,lg;tYa^> endobj 1922 0 obj << -/Length 2719 +/Length 2271 /Filter /FlateDecode >> stream -xڽis۸/=!B\@Q(,(I9i:,p-DhAB71F,lG3bs//zq$R/Ώ֠55]} j2.282(=Jtt BGO(xPf6EݬNB-tP-/Ǜ⪬b3UD::rЛ_>q-_^/'v0^_- p#fN { 9Lr1(eakuYyR1.#[NO{5/&'" ~; rFODz$xʒMÆ$H(iB(-XxYQDlu -`cAQa/p" j xV5=\æ7=s+`EZ"kX<*YK^F+z0& 2%S&?[^# lMY9P_0,TN|CjgvI]W5!WH}@ԡ4~:; }Rڡ¤\m_1dDQ5PtfV; -Ӣ'(&xyrx☩BWb-H4)(kāɄĉƜ?%MV2N6JVeݍS2% >0p'AtCVkhƋojXXM-OsgC+5JA$)> o@ -\]H9[@Yv(+`/`+仢Gv7"Tm|JWk-ɥvOHN'%"dfQ!~C͒漮9 (ÉE$gb6nAy$SZ& Sƕ7'P&MSTj@HȔQ걿QEBM04r ?HW!,$z ;ؼD`ڱy 4/O6/Cǹe4ۼӐɏhۋ`38 Tj{=:wfy(@:H)l}YĻ_PTﬞBOQS܋ -YaeD\Ysm{>#z?`A_5_)Ry F'buu8endstream +xZ[o~ׯPR0΅ fm].J$v%Q%);3gHf€99͌І?6%|8 z aev uѶ;Nj$x?L!k$ ލoj ^`1W?nBg8l0)PU(u"hdFڣX H3SCT4*;d.̪a)=ş;I^d,Op {x qFB] ,ԗofek U[=57 #w 6bm +Ѽuܦ@py';f^X]=xu5t=d +W*P@e, 22?m[D0ݺ"v E 4#`9,3_S!*8OtQ:\b䏕[O?eqXRźTc7'*Uae95rmyϛm\JqlnKqt|<ZcXT PPJͦIHi$hI<+wxjhAYńriVylb{Wײ0V4T%nC͜3!¬˩Jp-+ks#_{҈,S&Ѱ-O5L$J6-k䋦P-RqfZ!f(,t C:كԐƣ_e_ 'b(P3#'ݣaQ:5}ַEJf,0aAXvFEsj~!L|sakW?GgGA cAjXjЉCrO\t[ ΈflOh=#E5QXͮb3+]*XH9^v )$UGD v؉CW t6\:tJ8͝ح@jOVQڑ7Sd(!QT)q^?1%RBSXuqQґg\P$Gy5Ԃs S>ldIc|(a.'$[ef!FZZ7>B~ vA!OxҘwjN p^aY2#?B;wU )-)P_RӻGc\;wBq#@(La-i,7p_Re@ ݌e{7XQ;>QﲠEbPȒr# =Tr\?0L8}\NPXM.V H$7;tGǠItZ5:4-k̵AZ9Z@ kv=35~Y;"rvDW\5i>0/$ֻ*>ھW{G1ti;{_+L5?|L&BUZXkjV<bgCT#Ej/q,boy犖/t %0r#Vp}ZtX:~dBnώPY-E%Tzr*5/j13 D]Wg nsLz{}| !}r Ǟ$Gv=S{ScH?wendstream endobj 1921 0 obj << /Type /Page @@ -7491,13 +7401,11 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1930 0 obj << -/Length 961 +/Length 946 /Filter /FlateDecode >> stream -xڵWmO0_!MkƍIAL*P) h(KM$-i}v6"6{ E|! +Q P4M,>S"Bg'2ps="mlЯ( ZfԄ)<q.Ff4SG _,:ݹ ed,H1 POsa*|TȤDlz Bj_U%.:VlI_>c/!{K|NF2+1,uU TO[~Q ,ComBӁ8d/2#*`ۨaԮ*JS%(0xYbs9ZpCMwܟOl[>o7K7ݬǗZb]/ wUȥ%rOg9vMPN2)p3gX7a !5̢3ć&6\^:* <М)LJ4JaY-3UF G0Lu G9ғ\զ<6ʼnݝzcGOv@$%?2bINΈO3Vz(D"ʎ0cLA;[y`ځN!"1xq&ћ -8ҞOu|JIʦ -/N. ,Kknܤtude@uL)]Ꚉ8p;eAendstream +xڵV}o@O,S#着`.-in6Kچ08*v˾Ci#wy?$BC(wEMG@uљ P|$'PTZل ${W;}3$r i.i^Qm6Fg7#~0/)tdpE "kP+E{*k)LWLlQh#dymܩ0ȵ[0aPԶZ;fpC?:Qs j0z;p"Wl'a2\j#\DJT{j>Wߜ(?ɒyaə +}ükΌs6rd!s|d%8h.#h^.r&#Y"R->R sB!enUo뤉3PjGm-ҾQ Y2)Te軹\aZkFZr_eT| TqoXk#Ue*ck(fj,>O,=:cLlޯTp]:eg{: W[0ު0=:K ozn5S,e[9wΆ - lICdt ;î۷|}p :> endobj 1934 0 obj << -/Length 1709 +/Length 1593 /Filter /FlateDecode >> stream -xڭXnFP ql-' l@PJR>P;,JI"H0p%¡p&`8[ ܼpMajEj28:b'FW 'ɛ'?L!}v`~`|8;^;}>VϓVZ!j{50bWP\G}2Q;gH\}"`n -^B :w-Z21&OLv ?G+&QoU7д}ftvtH|q6zۨGeDãJLK4^/l%E Ѿ7OkͲ45_j:+GJY\ʌč|?m)@.G{:~5r[#Ya^Dq"矸pRdqqzYgi;ZS}]{# -Uifw\ǩ\ʽ[gqZʼ -:} 2P|oۥUiyCik9m.tI[&_Y)dWhi(IY7B 6 Ӎ6W'fQR)=2)͖Kū釳j<OQ;9t8_//ߟjk63]i>Z91+4I׆ -dƒ6*d~72)=(2U, -nŔtNvvE=L컰yViE{,W*6{TV݌lD} egykR1;Sw% jܣ鰫.wW-49IS/~>pn3̇7+E>wS7%:N-P8+DOnrx/v`HFT<KqCz*өakXFy4 -x`7Mx@v*y(]1h jpc"(55*Pm<=ŝ9 wjPr-*LM $*b 7C ho8j`R—#7z X7 2ثԢ:0! zF%}k%!`sƇWD>~BڐREqEĝՙPI! i:6+ ڏk`H ^Dԙ\EZ3OLl:2 h3كYgPdB59!s. -:Rq=@sxd,;, ~ BAYDG%(]LǶTѕ:,/\B282h -ch%%)K$x .5Vj'2 Y hAݙ}V ks؆,oTuRUu7d;) -CY*8o4YKT(qoAf{802X5m6iil˳y/~aB^J -ڬ ch -btܵ/PyCͧvw߰4.?ZD]Ekէ~uzص՝duWG5\凢voP X9qaً }߃D#=̰8 z2u;߷}1vO7c&B,kd `-t@ @~*zfFok͊e_ul^þ:M-,hh4MjI.rӨ]BMQ_E/bv؇R7[awG-c 3' +k2l:8>b 2M/N~N~<`#3BtxDO_&ӎeo[x9--ƣh2=3LmAGUSR;`VDgGt/ӚVF-ezׂ6I\Ǵ::ntD#*VbVed~gy֓ZTX)3R#7"w5M~*n//4;4!c>UO԰f6/\{(")rcS&9q"/MDRe^G.Ҽef.Ad&FdC RUr! uLXyWؖBǛJ3s>IQ ~ +Pz%AIpE|6{s~={qruv1]O j;:3jso3WKߩCBjtvjr:WKb i([nAN gE%PݢYϣ^O_TE@:}ocUzQEy#V׭,MP9YŸ /Aܯ&If)Jӎ~Nuv\<9Cc4 T +S=u,h^0kۍ{(~# > m?IINV],tY."o;{ԅev C\ZL@ĥ2Z SENߦw zk:mH$e Rb> endobj 1940 0 obj << -/Length 1349 +/Length 1278 /Filter /FlateDecode >> stream -xڥWmo6_K!fIQˆ}H[k$m"Pl*QkK$' 'r2`(jwǻ^Ɉ!b*e4 Bd^@Xwd^/|rh8KZ=yJg/??&g t>3%:{?:0/_p8Q8oW0ɔ'~9>5 TXD,rA|Ǥcp0P)(hw -\8'pJ<*zpY@e. -)U,B -BQtV١?8\?@br2#~M6Rv:J~2:U*2~ގ]84}-h L!M"MZ_Ic Gd*C\?z/˼\ۤʪ̭/D;].uO -eJkmh?[BW"W'?g?N'oFcLf{CvtNMtc}b(%QM6)tdZc1YuVގR 8n3O@u}AN14'dOW8B! iP>` \?tpg[i7%P42p$Ĵ\ $SU P@+J5CȓΡY$ޠn -]Y񏍝~~Xۚ]Ýn=e*RcL0CA?A3u;zrq滢>$Eu3ILa@v ֔4^̚{#QU4Kʿj|J@Fq_M -J D("Qn0ۓH0enF]_;,qŢ+.;5*.5ƅVvـZ㸽<W=n;ua-$zmw&t]:^S Ds4cSXQnoŠLYxwJGI5m +,j\Jcr:[IZ,jӓ}Cs~OȾ"=rL)q+Ad&EJ KC̠lpkJ\$ /T,;ssUx4Q-Ț4Y}cDd7ƶZ;6 0ts`S} ~\XĒœ"}@ Ldqh Acj%OPZ!ֽA_g U=T}W+ʂ͒ \9܃&%*llgaI_;@e9 jTˆ pEɧ( GSpQ3UZ@ՆM"A㊅*:mvsTMRJ"ƅVTmc$EAU]}Τ2ٔUic5,`a{u4ȳuKI"[6MWށ@jZ57СdKhy4ϛn hL+RQQRquPkeWԌbFMA{Yh_M~uVf[s?44;f .&D3̩ES)5˺aN>(d,]1Uy.u~98/tFL-fx\ma6ܣ #\^u5i㍋+Z?M> endobj 1947 0 obj << -/Length 1066 +/Length 1030 /Filter /FlateDecode >> stream -xڅVnF +x|)(Т@i[-Ėt5R}ȱ;Eσ<"2)-z,A$; [c`C,W\NrɵaDsk|i&YU1Yލi&YL9;\ ֻs%sz?_~^FRp#oI4ׅt9- _,H$\dM6N+HN*|)@Tɋ@8ѽay HMpӧ*Y;7qOIA -y(B/1U["rC]< 3]B`wӰM9LUx!|O/4|HADR2ɴ2yI$'1* ƃv(2*N4ӹ?\,JEp C:Aӡ7淟x׹?X h9OOPek;2(HUF pFE;ߏ5q B/12Xl JT5x6l>" mEUoCQ.ټËS2;=:IQYlh,%nOXdh +"x =%*}?X>T kQ*.^B](:a%îX50TlȻzk@peT'3T$*zsFy˚-UӐ\<:Cj-։]CP,: âb 0ndr!UR65xbarJ%{[6NVг>dri$bD P~Hlvcb 0N 1ahOt=kodPaA ûw}-TK{WSa^7kZj[jAn{'|j:~%'?0TV}KLƉAժBoJYvĹxM8>##QOI%PGڷиDDƉG0ijn?:xu5ӛ7Eپ7H9K'01N:XpgĊM}7HwxZ3"CߏSl3`0s\lz[톮d㗪aﻲ ׮̟a~?o|P$tY 6ډF]2ȴ3iendstream endobj 1946 0 obj << /Type /Page @@ -7637,27 +7538,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1953 0 obj << -/Length 3214 +/Length 3047 /Filter /FlateDecode >> stream -xڝۮ۸=_#*un -)6(>ز-DCsr;7RNApHs&ڤli FN šdG%*Q0XoB_pg7lTEQ}h+_Cٜ;޾ggocr&8D6* %~4kmykU@ 5l“ |N]0~#\4v9bbhyd7^h+my_g / -}6; Ƿ =!ga;ކkǽ -#CT ,Gxpe]3Ή8Ep7{<_^ -b?M& 8 +$A%90{ (4CPl&| &K`"5EK׎HWv_\8qïHY22fS:NTy_{,(8яTlAb,awܪuwIRH co2AM,YޭƸw/ؒ' c2熌y@&0/@-8,z (|PE0vLzWx+Ed2@^4w-=D!'ify*ˇ`f8=4۰ LGfڙT@E,1ys 9X.cGǑ;qV(~GfvEN'Vg$朙`qԬ!.['My4Mm*IϯeUCGG(HN!$FR%;E#&z.ۀF6, 5'$JQp2eÃR'^ ),ϣ;cucĤ"QL㉜GNc:q6uİ׆R{3N +sePrY`cka7hMN!QU"GԞJՖ6y?cyA +՘iÞ M-XHy[}ݞN"2_D,w+?7.k0T!&%q}D#*ev0LYUc+> *3~=T[9Bފ˅nZ:$6uZVFuC>Zʎn -,E̲=90{b ۀlxZydux @m_Y=qz_"%r@"in1底j2I(+"9*<18L… HOҜzPFBV4xN~yLt"uA)>wW/+ը$:P(f11auYH*0fV剝+|ᡆUϓ̻#o(b^ 9e Y cVr2^m46ET0iF;Fd -'yk(S3rQg5$ĉ$`3|*|[1{$R^+K)ʬ8h Yz*P[hMWkD}^1uu^Vl۫9gyyL?MmR'Nfr.Bz>+zHdL_|6ƞz 1Q“T'0>(z70*.G9ܴ,K*p 6Q!qH#b_5ۤE7ĔwrB0 P+;XuFOpkmS0R~7`63~h ?w퇖C%Խ@GU8'8+zq$P7~zȊ=w["OyNrc텠(Lr05Sc]>{™ bhF ]&zo%fWЛ+m ea0RNѮC=w3z{3:c FEᩫY` !ԋHB~2]4=;sXR2U`_̺ +,l "AB(:Y>PjQ4xSc1c*tcVB(Fe'-$SCdpq +BDQkҌz垝frI%~:45حBs Xs[0bR=ڹ~vͳݦ#rƉTE,cěXK6&{ 7>c ɩGx`Eyn+P$Ⱦ&!2=Qf/:\TߑgOX!LfƤ>_6ʢŰrflfI[عwq e]B'OƹbKZ2*6+Zj_l&Hcьh:fvX +g|m_hGP٢ [W G[RRN6f;$Wcm -3Ζˬx,F:86?M&2UoTK+OD}$_jʼnh>_d,Au^ Kh[K?81\$DLmƑP)j_r^Uf>rd~W:,vtGWT󡨗&W"Ƚ[ X`sg;RκWEPz9uP[\: +Ojux;@7J^9^&^y80퇆BrH+ɨ9]7=qĩ"?0*nx\ت~A'68n$z!(@oT֠CJ.x:/+FU~ wܨ ,/S{n凓ɉ%7nH`|0X(gdjR Dɩ{:>`)-Vz!+Ƞ+y2ycaxrBPVLDz=qG*J?R0):޺}Цm/ۢ?ORtpbw(QE)aj-kHہNx> stream -xRiTW9(Z|1JHĐy!8@@)""[P P,` -(@i%PJ9V,RXә?sݹ4 @XK- O.ЀaXZzP@- p]]@9H&hV^)3@ -p$PBk#(@ 2H&Br -) Pa7eeK_!)Mi,@DK14H{7l)+ǰɔ˨"$(H$A@tI`o*0ll:*E A) N!郎oڅ׺6v"@q*Q?9+QuvoBR~Qc~~>x6.p04h2V/-[Ĝwʫc|ϝ,ܱgC+V>{Z}"̆|,&X}Bb^Cߎ˸&LCΪ%D -"F&dj96^L&Xk8cc1fRW,Gࢢ~9\XOfO޸t)w0霵8+MCxѠKҦ61j"BuSWe DsKmIdےmI>9!,?jO.(wgJc]wflh[z~Cd ؼH47 U|v1Xဍj)M((5Y1W>3^ + +r 87 J>B +*08.| Y2I(`͚ O)$QABJHpBB* <1 M0(d"D . 0p1\^lI9m +XOd$BX2@aL ߰ WQEJQ,/ +!)(H $&u |΋ޚ@ 1TaqWuT*!R"  19Cyߤ {Apgvj'B28铘!Dr&W|qxp9!I +ш6r#P l >`61A2&M`+^^rx8N\08.nU$!NMt*uo/:Yy3XGjj_]%k@FYFQwgjpN&{g6Jz;ۑ{kg|rrlx?zK7bWȈVɻ}0Ul.[ 7 vtVdJr~$۷Ƕ--T. xǤlZ v~zbzQP4F%~ Iyڗy}->1^;4/_8N!s.D}4wxkZ|d/&/Jl'S`G) 7:oI>kE9r>:e bhzޞLGMu4+KRqIgs$%@SUV.y5cak;1goõWΝ۱LtF|ulxi[RCȸ5izi ,+,klS[=0>T;MIrk,K?mO_ܗ2ﺖTlžQײNo~`)!%Ei$Ƞnz4齌+c]KTFYwl蔆WSxjC'a_o+Peyupl+ǖ=Ⱥw4s3X5ʠc֔jڽ _gJ6FWMK\̭F^ov]ix <]U兹)! j/]C;r }j2uTs[w<((As25,fG d-ZLשM/ջefN#?乮%ZL9NK 3^as1FNy{'YKjlCm4Tc~c.Q?79,;axcwKګRΛJwDM̺; [PH@ +f | ~YG,fe͝ TmƼOG7xpGXBG0O0($)B*$K?Zendstream endobj 1525 0 obj << /Type /Font @@ -7719,14 +7614,14 @@ endobj /FirstChar 62 /LastChar 62 /Widths 1959 0 R -/BaseFont /DFCUVK+CMMIB10 +/BaseFont /TNXAOT+CMMIB10 /FontDescriptor 1523 0 R >> endobj 1523 0 obj << /Ascent 694 /CapHeight 686 /Descent -194 -/FontName /DFCUVK+CMMIB10 +/FontName /TNXAOT+CMMIB10 /ItalicAngle -14 /StemV 113 /XHeight 444 @@ -7752,33 +7647,34 @@ endobj stream xe\[ݶq V@ -SJR\Jq-mR}ٛ}xY_c137[{ՠf0ܝ(nk TkP@sh -8r$go#lϔ 4|4DZ4ۺE(R tn.lkhbwM ]spaPs0?K0lqϬb&noi `G$q+CfV@ ['qA6odĥdTN*@` o|`d`7D"31i{399<@$=9{stn#Z@a5/jkk+Mgd jrxaЇr)/9yN$[V䰀:?F .V pB6_̃d !t^y5K<C򁐯 @H">{Bz} 4-@H=B !EH=B*>RA큐=Q j<R]ZT~ ο9_mD,!2 7 h -P7W\W\yz yB {3XN -92 Q3g l fd bn`34L(SMHth& "?h% -!ľ,D2 Q?="&?'_anJU#Y 8?i'O2.b&0MK_~*Lniɳ;d['3Y䆃J'~nn//D-"<"?GB]dV]w[<, ]H*ymH65Gr>XrS'c -עd{<"uΟ}vb;J+YSv6W=tHXb=5ptooW>31|"GR -WxXd?heXh'1ŦO+{i%LnK~Wǯ^E~~՜.Ă3 -y&1}5 -|/|]a~Mc(iiV#b⥧f#լ~#ś?z!B%Sbp(Fmg׷wJ&.f&  _yVDˢzU%|ک'LJe)r.4SRa޲OT/K7M:7wRy tsU=%]l5-5 6sK\̻Xxbr<)VCĔl#QNKXMã$q-ǿ,ee,FQƢo#_[2!jpꝱ9}ۧswS qUa@}봤d}ŗgQ./OY{|i WFT$~LߙmArVݘ& 3fԸ!MBp,?B^3Q.F`P=ϵE>T^IRZR]rGn_eP6c8y&I( 91꘲[8'?)qCw0= `Zz L@^7vjiH)ؐJΈXO}UŊUIh]DS h'zPH&2$ :}Z/VvIAWXSc]ʛCc"8瘒Q!5DnbŰڳ FB?73ѸD+Bm*V5>\5r2|=l7tWVǝz"h#Wb+pcgMNx&va)έbJ9C>Z6]_ Q -%={ul{xeĶڧ''4Xa?2o(ݞ*%ktڵ"<4'iri]^ӊae*eum Zuw'm~ >s&dVSMVzv+ȫ6Y{RPXpE/U@;Mٝٽ4M&,)xu]:ɖ.^.3}zx쌾5tA| 2%o$퐊VlP.%܊g3R0NtHU$ig=s'y_~TgZ1UšNNrzMc1|pj f6QԮ -n9#[(dG{)KOߩ%n;0J[O&j96o'9|ӻPz(l\Kۻ;}>LtzW5)^+G$vZ]j|Eσ^M})K4bd7P Б0(uNcE Bw=ZTX('`cm -ljykMbs%&%D}&ի:|Y]tFjj`9IKmF:Mx8M4%Fz37eqp6R24NJ1̵"`1|Jʒ ÌÝif:>u,yL&J4 -Rw#Ͻ֙SZei/Cu4q'sh5 8Sg9vH7^N=%n0l;C$ $}0cRw"u[`񉅩.v(^aN"_C `>$snorgڂ܈aCNܛu5C57Gc`1)TX.M6x6\/jHTtr[~Qȅ%[џ-_O!+ ǓET}[:b3q!s},I@{/3jn& \{-o^Q="}f}_;vebHGz~ (.U۔ PjnWp3[n*9;&UhG诶ϫc8#mG0WuTfY.C8ɪr%Xl.Ciאxb Іtu1I؟}L@ 7#v4diW^33lO;3,:_El':{ wN}~UC$Ӥ -S\lYb 9{:25  (;n NE+Jn_/̷Ih-7d7 Ev`ݪM{T %[X8$FmX[EJ:T 9%3=Bϯ9*2Z=%P'>6\ھYӋn b_|0d^ :bcY;.%WrL.DﳠԶ}bgKEwiTB_Cq"xbyD"%-O=ތ\dFgWB }:VV˺._"d҄A׻qJҡ?C2xv;Zz_ޡgE|4k~?tgF7ioᶁ# awD'K"_2TĩY %0a.|}ĒB֓Rz~c*ٰpfva>VNl<,8D~Lv[1/)/+&9vx8=Zl8?A{)Q:L Iʙc|j} %p&R^X+`5 '`?ڛ(f[5!ʣg\QB#eC[O'6[A }H%d3URZ5~r?yHXśd\;Yנ瞲Kèi,|2{2'u΢4)jfgt|)ԏ}1db_j{Q_}l%x-]ƅoc̓j1FTq.84}Ff"UG*Pz0W11k/[>'n:L*/򝳋`g!\աXQmQQnhҋuoh9Q3к u^4M8ѳj+|׀~N6z!ݭR0X<%dNfGJٺ~K}cvݱ+$BeI}1I,[44CB5M[rr(F(z(@携{ -IҬx=Y3FF[ ')NπaO ^-)l)$W|ש pZK1ے(2joL63Mn,f[~W WPDŽ\H6$];E^?5Et,V<غ + 7͜rae cjPaQ$Qi -iܱ*.J)bN$=OrAs9 ^6nQR+1#KNY򇈂0X)E`iTZB?s7Ǫ͛ kl(IC9|Iz Is|45;C.quT6Y;q4,w_5$?4va&sqte륛+t- WрPUV0pzQ*}Tr9 = s\`=QX[Pg%n"*2B:=kTN9s5>0kb K_#!GV5ҷ!uV4w,݀G;S1UÀVNi%rRLȊ{ --M:ims;( -a}-b܇͒M/ A1(=F2_2i_z _urM}D|iRz޴7[U'|*\t诳iE~}CRKlOM~ $~eAG_k_t;dw@cXRFN;Z![aJ+:sD*O ٽȻ t 1i F]>koI0:+ϸj2bt> -6i*0_syB*(#FY zC+ -rfPL_"^ݧ7zr -ME;2Z %#v, +@K7Jxo#jtWvQbQ~;7C?sCW]!tVkgƊГܟdt8tA//2.\E7}jۢWq 6[b|/ƼʨS&2 ^T*K 3&9w0D}w/IC4~tiߣaU)P*.('3SY(@ Ew?);-t8o\j;˺ @@=Md`_s:8st%"ٻK1rlhB7PjNdyװ}R'!=sZ䍫.!h8F1jZTMF!RF|e`MXϯ/HlUOfhiB4h}Cs?&9dBH-+兦y|6M7#g  ҍ0\} wF0;b߇:nM"/˔;MuIHF彣^EO$%$PUԣ(簞RĢ$i4xrj85}o !!Gm-L>GJo2=R n)-U |t (G .VUdG#0G0Pq" ?b ^ f@x@9 vC:`‘Kx-0_a5GH Ev&3l259<0Cjpׇ<'`rX@y^#r8!/A2lA:B%y.|B!<һ!}} iB)<R!/G)?RA +j!VぐTz !uExh;'r`9 Y_oGUyB''k jCrRȑ9``{_ 5'[@ v榡fBA֟jB +}sF0YhA-U!e!IX:q05=Rs UqO5Y25}]}Cތv"9_l +.- +ۜ|T{3ӷ>6Csx  +I`ͭWe9й^ +Sһ9qE@d{) .bmنnN;~q3inr]SawKK!+ݒ8 Ȫ'74G'/Pj>7Eps{ި!ja>Zjǥ'XR|}*aI\BLTnCA9ѻ_Jd)?HYQ`(:I}fh%3_v\e{QZ~zE:멁 {{)l>EOh;"gG+Ê@7=!O--6}J^iO},awsX8~]/Jۘ&s%Q5,U{).JkCILC/=5A|f))c,(p؈C#@7Zo;S6Iut13P^xxMvjKt$Zh*N%>9>,LYsj,M>O|Yd_do^Oչ):̓XX_wE[Gw$)!fnنf營^nbZIJ*'esrXnZ%Qώh9 e)+f52UTUGL=֗ Q+Wm>'.aLg8*>6`k.GLd=DSiUR ;%Xy;Pܾ|$vN"ͪ1%()s1"5ґ4 8 @q=NŲ竊]3;2]idb+A:Υ:ݪkiOJ%K!v”ֱQIVyrzRl>_Ypz[o:Q!Nv/|䨜 'Roic1ٕY 3òmY +/]%%K.?ry{2V;3}o^AY_1%jh.T=Vf4Tjrm;vm:*kOM9iԿ8bMF_% EtI36wh:2-`_|.0E\T#K'}&|`Ae6ty;45BɪNE!Z;I@" 8'8=Q]o'syXm_+/ݎq %U|cnҩ&JR`7g|813_AO ЭѡIgK+b&;xu +9_Hp_ЂwrEaZQQgM}}/6E/p5H}_dbx $OsL[`]w2Ya8:o^= S@ C Md= ט_t#@kͫy7z?A}>ѩ?4>Q8J˨S<Ӆ1ldUs^~*͈`AToZҁ` _) >0I5"d,go Ƭh0iigd6; i#~He-xu1B'oQDT}-rN9J@;rZXU.3ri]Ʃ3L@Af̉Q7Wǔ9QNdUMd +[` +ȰSN3DOPzuF$牅t'cHINN;@ut)>ex jE?X:YU|=x?- +<=vQɺ$^Hx( ^z$u*V^OBM JPxL@;ѻ RE0!iE0!7WE揶O +šR)ɷ$=ǔ}!w+u$֞1/5%*XqjsPհỘa0:A ++'\K;#o +t3Q Kqn6WZͰYʎ p,^ܘR(؃#`ۃ}+$>u>H>i] +1yCT.^ӮŤ9IK\VG/kUa/Pk=Բ\;u>i-m3!:jӷ[EE^Ͷړ? ł(w.zi8l2If)M1Mu1_rVicg(UK)Y}s'oT-eu)V~>Ybts@z~~&'H?[ xF( =^: + ~55dS.'ˬv2d>2`~AʿvQkᑺcm'Zw2F#p~b&U29PV+Ʒ+;+AwOsN^U,?-><_y~+r!l^̓(%CxQU.6fmVΛ(Xl+1I.QX5$JL/c 0^ b3 /T Wc9HR^rl3ii"(1қ(s~wy]YuReVbWlfL7ա.c'gx7WpDTʾ<yΜ|^/*#uǐxM|Sو>@Od@Y<˭ͱC½u)qk/e)"= `'1km1 S*KԆ@O,L]\<=uC +kwy\h׼&9xǕ$p{;F wڭެ + w}B|ìuaAkkpճy ۸pO1e.. 869?|gH'V @0?Y6"/%S(RyGH)ٓ-w)؇7ƛ R*z^ѠQ+o::Y>#ޜwǏcqbAU!  ?s ec~o7>XZr!MTĸ#͈7?=Dmw?.ݢנzof%ƞT?J"Aq &lC8 ‹n7iA3Cz?"D_mZ,* ~:Coz˻qgzR2ݣRh0=&p $ڢ%ueb / ś=^P̵ͪ[>ջl=8- `x^ɖͧpE +ؒy2TNky9h.QE޷,U(A"Cu\O2VtN"}t`Z1̶M9?XMrhX'jOB[BdZsuRҾD}y_l'HӨR ϧ;Q]NlN OZ+d&JTN)CMFH1U:Ԝ{@U*=|d i;2;tqzNV+Y:fszNsO6vWfΆ0cP\_U Yr +ea)E$ʷczM|I!Vx\ 4 DR30XAF仟86/&w}:91bp 3M djߟ0&GLTTm),8Au 0_?W i8,-ہ]hU>l+`"[G/ˍ".-P3BڪoH?N?3P2b : tMZ lFP`rvuR*H>fJ:Soph[i1d LsM|Hh|Ayɏ:ɀժ44SK(3B|Ś\I8s'F1۪aP=炍q,rz::>-< b,Gp(.q%9:審dK/i#G~*'ŏ-ͺ=]FlLcCٓ8sN1wW0#=Ә&COϬ~%;W>_ߋsd-,\'k2.$cT3卑7jsk7" 4P(1's4;T:~ [}D|]&,K+MI$\f:}үiڈvK@1DC2WHfɚi6229Iv2| xZhHh/g ^-fN!2N_Z8H$6ޖE@UvpxfɄxqlrc4SZS:&B!:՟) -fm(]Iml + +d8{W +p'NSpNUuvIVH w"}YxGSmoy@(ߔ][G?i4Mje:2BJ< ׶( +#fhaJ- .N!}{o1h9xf-Qg*|̯%Xcu3]Dfh} ]f%U x'URx̞95.ʷqJ^YԎ)fFƨ^uʒ?D J) Mb$18Vmތ6gP?Fq_ýgCL)[&L80lMLH]!y-'jtSjtڌ݉sfb$Q~XwK7ˎ+\/^#n9nbx`֋Pykަ/u)lHIpל粅>Ýr/:+!tsQ1&q\sp {E]k^Xr<}q9Z]& Ưrd<߹Ǟ*wO+9ÇjdvXFVSTXliIkS@ah k1oPTZ Jf kˈ _בCGHwQ8wU)Wʼn[kbKH ~R! >lTme~O5H7Aa;6QL[?_* mM^'%K!ڭ>KEVCM -lȄ}wDL^dSRmX'˄@. :Z͌1%5mÒ2tǽtߡ + CV^{'bUyE%oow[yHNx7"Y{KY1^~V.ywWIT{"TA1*c7/(T^Q3dRJ>7ѻSl*xߑ9Y_?j:)'.eє)a[0Tb)sBJ+F򇘬)*EzώwЁwiCf(`A~TLW)ė1S/WƟ)Q'{gdXv_JTQzF8F{Q++%۹!ɞ +T =Z;30V䅞<5ň͔ w$ *?`G~_xMq()$Sh[صx|0UFjt5O!qOiqy׽dTa\խ"o"3r9YCH.Q-]2ݏgD2Wu"ͻM: 9"o\u91GS/1UӢ(h2ti2+{OVh}~}Fnf5DKA+1!kDBlm])/4mi +?ԠaW>_8eunvY pZC\ 5‡ى>NG>Jut c$<;op.Q[OuI{k0ں(X1hi`,(ut;:hĂidQo_&|}q$. GP9ypy~t%e{mo^ s5ӢLト KKrÒ!,U8]Aޟ޵8e pcC4I0{&ź_Km,5[ИRv'<dŮv[Bp1*cb& BbĎ5?^32'60P; endstream endobj 1074 0 obj << /Type /Font @@ -7787,14 +7683,14 @@ endobj /FirstChar 36 /LastChar 116 /Widths 1961 0 R -/BaseFont /JGIADF+CMSL10 +/BaseFont /CRYLOL+CMSL10 /FontDescriptor 1072 0 R >> endobj 1072 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /JGIADF+CMSL10 +/FontName /CRYLOL+CMSL10 /ItalicAngle -9 /StemV 79 /XHeight 431 @@ -7814,17 +7710,15 @@ endobj /Filter /FlateDecode >> stream -xRiTS2j=,iF !2so-728PIUE,dª"PZbZ!U".XWW~sw.a, oe8Fxl(rPg.`Dp,PIb<* -+ <!T$kH$ D JZJ0\ $( -MH4H!6"8hIMrL[ҥKD% -MdJ$c@YS`JC2Qj'O9R?6UGPL`өQ[q -BtY9DKFa`sWő4PTiZS8AӕPMHc$2?v*D02ܐ -쩘gLD zesEƽuI/9i‹-U.'fD{Kwsfs׾0(5_#%~6+mڟ Zt#/\|}v_NJXoL{z Q%GbМrL/:.<{SE9C[b?_$CWIӏ³Xk ٮ5<{LTgUuuQB6=[lcR+ }Q&bζb6xb<3ݾGܽ[+XO ϋsl Kؽc%w~CD[׹DԷ^wc+ײL.^`?+N i2lR8~/ꌙSe$Uő<]cb,l4bƝcO^ 6nWƎVL:^)Bx7i:àU\rz/_66nGBYjڷ_wimϏFwY]N߈֍y)#|]HRik˘Ⱥv˲|C޸be'hQjeհnCͳea_G |ﺸPCB' -I{u'QgK -_ jzxɇtJnavMե{skֿdwvƶq2S˝5$ZVg@ؑ.Z80vAڒpѵ;/ fB!KI3oxz8^' -PXIVI 憒endstream +xRiTS2j=,)09`(,rͽxDPe]2RaUJ- +-DZEx!U".XWW~swNQnbeqE_*p9:s84ße$c2PB(@w43$?s$bL r2R r +p9Z(X;u#3a" X4.@44I0oaH.(2- (Z +;Ń(.SMvoy +A0pU !fR0U3R"r1YG2 E \ 24a oZ;>2<4^N'#dFFk3`=s)D9,K' ٨%{Q `*ʶwa ,or;./%3sNX#^v׉柣~frܦl46Os (>[jԜ򑤔Y+:?PqϸԔgw[6TGfݺI^אp-̚p?\| ?mMmWH-n_05.@Rc|04J4wJ=0I&mPS8WR['[tN^ÍT>BScd]zc7ϻѼ6ue;g?M~bzCĬ8WY.#N{7juq'q)wy g#v_4Wt-=I3a%GV|؟z6 5 -AA5Z}C~ |{ͷ'rb\rbqޗ^?Gx,ɳ޲(}AJoSݞ' ?.Xqܗ~.nJX8o1a#EeιD hp l%JcҦ$Eu*H=֎Ą.w|׽>GUKvl V[t&{w~@C[U;{ܧp#xhMp-2d@ժz`'Ks1:K:b֌A$5e> endobj 974 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /EBYAZF+CMMI10 +/FontName /XQNJXM+CMMI10 /ItalicAngle -14 /StemV 72 /XHeight 431 @@ -7866,10 +7760,10 @@ endobj stream xSU uLOJu+53Rp 44P03RUu.JM,sI,IR04Tp,MW04U002225RUp/,L(Qp)2WpM-LNSM,HZRQZZTeh\ǥrg^Z9D8&UZT tБ @'T*qJB7ܭ4'/1d<80s3s**s JKR|SRЕB盚Y.Y옗khg`l -,vˬHM ,IPHK)N楠;|`kC,WRY`P "P*ʬP6300*B+2׼̼t#S3ĢJ.` +,vˬHM ,IPHK)N楠;|`9iC,WRY`P "P*ʬP6300*B+2׼̼t#S3ĢJ.` L 2RR+R+./jQMBZ~(ZI? % qЩI9`aL99WTY*Z344S077EUYX`j```apriQQj^ 8aOwjjEj2k-Yӷs]|a>k_d?nvfJm@%>wX,iG /vRfǝ%ش9QDod;U? ^VNvK{~/t-798 mi"6=!y:I_K-,1{).o *[mF%s_-j(ls~gغ|K~#ﵾӷ&g]p_!GrnM`v^Dl>Z`,&7{طeY/-pp3LXc:s٧Oy1#u,U)MPPQSiމ_]7`tlx~FqFI8>yj&/E텏Z [%IZҼ/y-ɝ#ߘU))wpxk>Wõ-T2~U]gXZjEO-Z_Ȭ?֌J -vMO7J]8f풻v_ք7xht*̀B5j0 9'5$?7( eendstream +vMO7J]8f풻v_ք7xht*̀B5j0 9'5$?7( 䔫endstream endobj 969 0 obj << /Type /Font @@ -7878,14 +7772,14 @@ endobj /FirstChar 15 /LastChar 110 /Widths 1964 0 R -/BaseFont /EPVVDS+CMSY10 +/BaseFont /PUFCFN+CMSY10 /FontDescriptor 967 0 R >> endobj 967 0 obj << /Ascent 750 /CapHeight 683 /Descent -194 -/FontName /EPVVDS+CMSY10 +/FontName /PUFCFN+CMSY10 /ItalicAngle -14 /StemV 85 /XHeight 431 @@ -7908,43 +7802,39 @@ stream xeX[֨wbNq)w{Ipw.Ŋ;8šHqw-}{{&1cΕ'V`7d'6.v.!.'SNtC!R@'KP@d}xy8P;wQ$~-l N [X S @j 9mlP9\@fh\\3dq$16s &`[ 4Blf s4(l6qQUN8l?P[;g'@jrg_rPF h6X؀ -en 3U%h;q pPd={P8iS쿙7úvpK}?&B +^>;=0xr33`@``-CPn@:`CGyxv p:Zy(r8\rG7G6 0l"؂M6y|@ΰOVK7!~o͡`*lQs,7L!.N؍f_~+X'@k[ Z0'?&e¬l#r@@Y0 ?aN Li0 -6O͓0W# gjA y)ة_QSgo4أo6t d6? 5Ji ).(CdhU8oS~]tZznjuT0eW>V(,vg܄Gc[S_}wB\8$ nYgޭi,mSDֹ #rernSjyLd;z@vqz3-l32T85*(qb4I]Au"~T&j+؊X7~//Эf 画0(ǚ 82KJŭW*wsyyiOwThӝsl$cpᢹ#c.BmFT쌬mTK -tB=v}m -Z .(6Nu>ׇ:=Ermj+j Dgyt-4șZ>*zyr;3j./$EUR9Q|lgH9Cڂh^ -ioǏi?H $)OYPbI~KҮcp{mSi#Ͻ)hΨ6} -6]ԝ *РÐ"%t۽ ZנSVp]{N~j[UK{J^7!&Z`VmQ{dpjsېil#1 85ewŴ3 _.,>Q6$7'f7L]Z y(%v :kA+OĢ̵W>KX$fVF'(H<%ԙsX!xkxsiq}sP)S_uV+'e.Ԕ{:>b6AV9Ow̚m^(Gu@Sy?F >{Ыܬ=$+^-rWOT$JnGVuuH;WQZq4{~ՉoۚkgI̓Z)3kR_cR4ߨk|]7z0ŎjYlJr|+YxCVyrWXqz"+\#eIboi>(xle,78R -R"P05 gHNKD''cK߀Ńq*]ӊ_3^UB?]@Db+ՃZAwSXAաUҗRs~?3$fPJ઼nAkՃ׭g)EK69(mT?Eb3iSWЏO*:x[g7OH⥐+(y9ԾK,8u;,b(|'h2"ЈI76'|pBV^Ng11; FsvHebr ?so<ߪne&H) -y@C|dPlH;G^l eΓZݷv VӃB7mߏT&tYJյV(Іv0@\k䋛ܧ? UgR.i;dF]hj+wՔ݈bSQ$P 0#(w'0.q`o\|B AGL)TpOA2m -Lkq{k3I;]+Bٺ$qcZM栭oKE5: U7A؞!șZS6H7#0?Ѯ+N[l ԣUΗȡ*B$Xl,ZIoxDGogBF9:9/c(hP9))`}G iBʢ\pSp"WBy8)`:I3gIU%ب,:G%AEúazz}D!r3*slXgA@gy=B@RjmzE 3Pu*%B7\Fp3G1A%/nP@̼go$[/^F?̌$_xP<,õg/q]gXd\ 3lD\kXG6Tz)]9Au hxQOH1>jH>1TK/Qy]Daؗ<%S&-f[mu(v[0jaܜ`lFRGOi@Zkq|ghwY*zZgoEVV$w-)<2r=l.w+<šFϰ~aQnޞ$sPa~zSG+0fNnBַgP&vo)TB?Zb-CcnKE=h F>ɠk=u}}_t]JkIAa;u#`*vvbZNMnGg]/14 F@3*4dR_z/m۸Tm\29);Kg4SY-uN}oJ2MڸTz-džcX7)jO.Eb4&܁͵כOfQOT< eJ 'DtgLOvP}$1F7*H#[_@[vTrJ{bsLZR_T*vq5-*κ wlihÏC fnJRҡemfg6+٫@禧_/3/Fs|ټ -]ɵWo_t'>2#ndzsFKKDNX7bG!P{7QLGEf;E&cٗe_g;.~56QM!J}F[?u7Gr<:B@z4U~=__ z=]G1otv쩅W't*K(o_MN1b^4+>cBl^3pg=YpFm|ImȖ9j*ަRL// -Y8alE nU>FioX(hXݔOƥ -OO?LNAN 2Aux7fHʎ.$`.J{'9ICdɪwor˧[ gՙ.hGYGi6%vbsGk2gHU!s/_5mR3(>E$nFתl \y5ݦI8jϔ)2k -vI<9q޲ΩTNw*تz&UlŢz"&12}5(7i)h_(6mw֨I9fLT/R3GZ -qM|L>c;,q[|uC|zBja7˺[BbJyyN/tє_szoj&O8_. -[ օ򚑭ʞLg͉XJޝD r -u i*  ӕ`16JsEcdvM> 6#4U\>~ V U|+Pn+LRۢ$"F}!܅W΄ͩ-] 2/xO5,#R`L(Ҫc u -0W 4N$(s:SFaILW5psd,tQӎBrNWۉ=ek>bh8 ֗oʪԘg46"4 >Lu(JP~Lb|W :aCi([wcǩ1NqEc= -2u1yfrv:"N -`>U.E ^ֶVN⡍"U6\aa6˭ZWB~O!bk_C74f77@SX"R^ S-X\S"ƽr2In܆`+!V Al n*>[ eնZx.WBZDR}X Xϡ50AJ߂5rm.kxߗ:~ Y>$9fMx+?֩|Pk,jzt4_r7;}}3~(VS`i.zF~O/^bt>,7:ȶ44/['WdC!<&n6gIU'T4 gZpA\Ci*EN%_R$#Ȋ3gݶ k !u~C3F_Dȡ[O`<6$YD&rqc00koq_278)Kj, 7I ' -3! G96:sB)wxϿŜBa~3^bj`,uwH,c؁z؏v::b&mԵ.q -uuVdQe -u7}-HnuY>;dОuUðZc(ЅR"87z@{cCTsPWN}·pwM'rV/3:잴e+e:5<.[B޼Eh|LhVBf'[8 V1*Ջw3bg]^.I`䉹tzv Kkp_bN~Dh;h =À_^;NUx -fm|Y*6U:7r୩Aؽ{Of۞5͎Zo{;.{ c#8lM4;?yp﹚0w5; '$ B#8ag}yQ+H_yLiL/ Z-OՋ+Q-N) b5`NKܽb8X! D-b!DovX$ҧq -AJ]BL(ʞ=s[K[l>Sz-y$;~2\ezk)bNs)+!isg[ڸo%Iy%,HcNx$rXCxsөmB[Xb9-Qߕ_}n F ᝉ,2+֘[ FRZ #DW<쿥zyNanoDtKG`*|V.s,طBB֐A)U{+61%1T1pN)EI0){JeHQIX3tH0V|yvy0wxwZZ -C%pѵyFMY% IO5R]R}Η"`8VqӱuONf$Pۜj5K\ՕC:B&.~ufDF!t?fڷ"I:sos|uEԘO9bzX``rMćT2S)`UVԓ"zT6طdF{)DDIKLSZ]G]Ӟ¤vb]>M=s;dVxw"ّk!vJhz{(g꒙E*~4hsk^Ђ"^ӮQ}BBF.) -BL(/Hԗ,o7̾%7X:u iQ,>|ߌ΅sU],X>¿s!ɵ: ۔Ԫ)"a\2Ubȫ2,ToZL/ ->X0XT}h"OJ1ZZIkZND=Q#7 Z:>SL&Fѹ䩞L;:nYe9Sz7; s! -&>[rZ&&@=c{ -O[hU%_k5#s΋_|h<Š =3#}FV}){@eks -d^1glpVcOߔ?;n)t"mC^>jAE=\WVa0i#}Pͽ|'ULNu_K9h9x5W 1)o\-2٨vNL?6]ufɉ.>kk kg|,+w}ߥ|@%Қ #'QXumdI9XʭYSvQMcMɹMI̦99O6뎭'QcdOzV4xXbL^VO9x5a#|u&r hSNު,| plw^YתI?XMOX[|Cmϣ >fV%j5"e#;8fQ֠W~0*B1uohɢ}Mɍk4#dcҘ:˼@W>:.]mvm2S[#OH#/syP0^\_ !NN1yErɪFԨ -V#[Qt{a -*4(Z; !q{1tNvID8p^V1?ځڃ,V#U-=GNA}J3UF"$1OLIFYkt$?.%!rI;l~=׋٩w,(NN?[\cMٯg&i{YDL2WNV -GE >Uq 'ݥ?:Vkiڥ5Ek_]X +U|utpŻu. uQ,hL*d` ojN/ ^8~x gb1a ?QtpLendstream +en 3U%h;q ph+(Ϟ= +C4)Waq 8a%zICLf`/tG<` rsCN[x̡hm(hkO l<Kw;KwKCp8-G`<@Ay9Ny`l#av#֌rC pm?rlP<>d {g؁'%`R?LD7PMLH(v9 i`^'F?/? t@aVvR9  +¬@0 ?4\@o|oKB k+ؑ3 `{gqrv77a:2E +Y4HL!2KX4ŪuN}F)Rg^ս+OAܡr} shR9MyqyB{mGs8}q pi^a_I~*.5\K}WFLVhp-=7:N}iO+Nb@PfSh3]Jn£1ܭ)҇/¾;c.x vlfV46)s|"_cytsm2|ZOy)z +}H3F$!mmA4@/7seJ',_zG{~u\?%i18cڽw穴~4FfgTmkJF{|RWhDaHz:WkP)+׏GL8.=\Rs?*=%/xG}s+ƶ=V2 +8y5JwC9mA‘z썚zuzb/kzd(3wk&V<;|gvеj [㈕'btc+V %x,3ʊX+vj$jSTmL]9Sy5U̹8ʾ9T_}f)/:2j=TK ' qDf6w/H#jgҩ¼ߟN@LSp=U|nVLwRU/'Un%n]vr: +V$֝ (-ϸF~m~=ϷmᵳAa5r1)IioT5\=bGW~5Dj,6%I剬z=gb^hgg +h&o1}P.;G[&[읫Œ/r?V!Qf{_Ҳ~*PfJEdg!!,j%9B㡔Ht)md (z3$'?_"jzϓ?%oA~ttr iE|y`/*d. UL"}FY-䠻)РP*K BbqTMApU^S׀Ajֳ E^( tw/,J uٍ(C|`=#ԈW\~L@uD&y2cfo6")C+R'QPՁF譳Q\$QqQx jRȕORKj%v|1>ϓ@4GhDzL> +R!+/ cJ^};BHퟹ7pP*y!QG9kXךvaڨ Ӈ0 |E"zCh] Jv4B CҨ$ߥnC&1V!+3{)Zt# ğ-2F,Y&J_Z gq%DqQ6ާJvܨrAB_ 4WlȍP|';G:}+q=6l>C@՗fn ֙"ތ:Ţ;Wf* ZSkSeQn=)=@i?\'z)ٳ8KxoU^7q2B_|juՠ UM _* a6I&ܵXbl\1&\s7ťnS̢E^vƪWl9fS )~B^$t@bj}hו^-J*KnL T,w6Ϥ7{G<~#7 OuQ|AML14pKx#J`b!zeQe.Li8_)8+d996y3 b{eՎi )6^" t:ǎފOul! N⃛ .`yX"Y=+Btɲ>Ic{e ۣΠڗ|COS~7(Lwf37tMX{{-R/~y RkfFF Igg(øF.Y3W,l?j2KYL6".5DHSm*csᮜٺn짊inl5$(<.0{KO)i 3-vawh-MT0{Nn΁{v\xt#4Q M-\3mtQ=37"rh++h; 9HxaMgX]Fb t`po~zOO90Q?g)|pi3' u!3(K *-P1!1? Iۢ??#Ydе>>/Yʰqܺ0 ;;1n-&#RQm# ~ JUV2?/m\*6MӜ\3˩̬ DK +%~&muCcCވ]1,B e'}1wD~@b +e'h'*B|}òGŅ^"_rq'iaz>Kژc|FM-/-;*9}=o19cb-/*uXAFg]w鈻 ES4W!P^MS37%)в63_ѕUOPxsۯݗOFR9>v KdVl^.+YRJΑX 7@29%?"Bs1ϣY=՛("n3面dz1Kò戳 &Q>~h-Ɵ:ԛ#xec! =p_*Z/PSx=.z\7:; +Qh+:lkx7ѯ&EEEԿ1 +dflk!mb,8P[}ܶ$6JUd }x~o{q bvoS)hm֬{O0K7S,DQFTKBnʁ'eR'租u^ +vVEhN$eGC{TxW} O$i!zdUx7HS -M3Lvg#p4dAA953$ɪ9ʚpV`D~Y"a{ekU6~ Kn$Ska5p}g5|$ďxorxTV^ilF=Z*bQ]ј^s⛴Ǝb䶻Sakv3&*cz[ߦ`>&PpKsܺ!Alip{em=!e-DzS1dx%<<:hJu˯97V5uMw/bByVeq&D׳C,pTYz94ՆmJ0th%JTΎS]2FJttAn ?|I*SsEx&mQ S>xYw}«XgB~~TŇ._N{')0vQi1se k:HxT' F9`M GC)ku\#0$k9tviG{u]|DX\m51v47eUFU_j3^~o:pJo%(?F&?jNf+GvTrF á҈h-1f"e1`EՉ\X(Hy55=:+q6~Ea> G0V.[n|{U+{ޣM(P^,čZƣg';2΢7s;ۮ#DUO)sB6Dmg&[I揍?r0B:xe(TRȱ5˕\t%\[|ٻL&IJpvOڲ2x-y\o^"4Oq&Q4+P!z-W؅E AŻZy3./Z$0\Cnl:Y=}I;BW%zS58/x1 LPq" z4pa@/| Qb*vJjl6P,cf\Pb|*9 w^'mOsfs71r&p켨od|ܕcVAټZ&'EWycrnzQ_1PU'%X1M \e^,n~@и .j&JEeR ιɥ-6)7yYwikL +ҭb#o + +)xv"+awg{|Spj}'_077uAi%]#0>\9dg!{!VkɠǂWǘgg}S'MjPS =u%눂2(x$,:\m_w>p@<C;<;N-sN yTZD<#Ēؤ'FXeA@>a{KvFK0[+Xk'OYynv3s(md%.UJ!usH!kSC3"Vi3[$乷}>"@j 1=,r0k0&C*yh V^+IRm=fu*pk[2#cfDN%)`AiyawDήw xP@E +DP&a鞹JZ2G+;\ufs +;G4R x@HRu"E|cmkr{ 5/hA|C wciר>n!#fr`ܔǖ!GLb`K Ʒ{f_ ,:ZJFoYB.,[_@gZmJjR 0.*}1U k7X,E[,Rxc*>M4 '`--O$H\5Mygs-D'{gNOΨIEfp-@ +Q\)L&\MTO[d,fLN)f_޿JEYr^-vlNw랱Ww_-~E4\ *_ïuv9T/Nx~awWxQUF|Qm=5T /}6Y{}+'Ooޟ:!/5+0]xED>^THÓI&:/hɜ{OY} +H<ٚn+7.~mlTSq;m'& :Dhs ϵ5Y 俌y53A ;>\ +íE(6~,G) ޱ&\$f]bP霧]`du֊ʓ1^h=+|86;e`nn ,BkUyw,W&'UU6fQ R3+YPyMxDӝy(k+ O}!7_dQ>\&5{hia|Be^Y}I6[Ivk6ZFh``-ˑ'iOD _jb*#Npj&ʤg,5|:f~fBm6pG;^j'b-CeɱŦ׳ pwَ=,Z_G"&wX+_K+ptQ8RK54ҚtQXԮC?,*HI:8:f޺g(o4N&E 2075ZY]f?Ƅ3JWX0B(`j:8Amh endstream endobj 965 0 obj << /Type /Font @@ -7953,14 +7843,14 @@ endobj /FirstChar 38 /LastChar 121 /Widths 1965 0 R -/BaseFont /OGTSKT+CMBX10 +/BaseFont /NVMYNJ+CMBX10 /FontDescriptor 963 0 R >> endobj 963 0 obj << /Ascent 694 /CapHeight 686 /Descent -194 -/FontName /OGTSKT+CMBX10 +/FontName /NVMYNJ+CMBX10 /ItalicAngle 0 /StemV 114 /XHeight 444 @@ -7985,66 +7875,81 @@ endobj >> stream xUT\ݶpS-{ZCpw =; }}{nC暣1暫Z9Pɝ] `gac@m܁v~~ `g!Q$]|@6:I [ 3' <@wps@y-Ys?NNV -[z%O ,&=,iZ!8.ohe<T_9:gGw l 9:SZz8fN@ldlj6w_avW_j]T3urqapy@6p}%vpupp@ 3$7`d ¬,N[AHt -`OB\VWgwß 7[; X-@BV '`5sGw.0x3hWk0xfp/O$ gGG?zl|\l/q[?\൸9W 9 7sݽ\{ۀ+[9{7X`]7p`Y7_^`U'ۿEY_73Fy@?]=4llI#OnN`Q?C`A?C`3/HudXE%8gWC]8?ή5i..og7YaXܛ ?X|,Av@fD=._ !//`',T3/[9`+ @?_r V!/[yA_ V eqp,;uu/# go?f.3dqd ~'ǿ ?5?le ~'@ eg 0ֈ@钹*XH $dHIEW&ݧl?Ƚ^bO˜&e}GoUρ }1zW 74ґb5:)͟  <[rxxuer"Ûh8ߩcdVFqEnyal͆E"3n\:w{`= 6x!Q6k'Lȷe(egDh.c6ϭȮ]tZ_8h0MsL~MZUX@F 6T. ~h)1T4Tq&3Fk8~\6+A-+4}aʔn X7}Go8'.銏馸%ďP¶,h5ˠ~!|g+gxwhSDU&RVh؋Y[F -BzXح((!VW:g{wp #H& >P|,$3$C1YüL!~uplⓦrt!먂?֩!{vU!y>Gr;q`3TĎ3S][_CMjk$M^}~h4% E9g5n7u_%"%:s_ /_p;T+|Yv7CPIUv3FVCȜTL -G*|0T5(x* -RlFn(`#It,jǨVFe #54>WEKӒkR^ƽGUug#[Vl䄄bWwjNdsTQ#y",aArLp")= Lq1|X3R\kM=u{ =R gr3sup<\q\ȴz1Xy+=a P rT꿎QܯO+-!+ڮ/dU;/1}w:V64GwtpC{| #1i+1I໔)*RFԕVvLJr#{0%j}fT$J-_s'ns J68vY1?<3b•"e}99 Ϟo3鄰ǃ/>=ͧAQby-.0z,sMN^XhwYn DDZt2cݳQȬd )6{){l@DDk;==-s(ڹ*UB *GM~$w)gpm^@TPXy[-(rXYpc[Z;HޡlTY\W=K>G0N0TUv+ jP{vqݰ9aGMp#Qv1!Q{Fo 4(9J$`iX "σUqEwlG)zUH%B{D H3O4YZIw+n6-=%|%ՋA ZW{˵wL-lGlJ7'VtwU;>vX&-T]7>c0C(TB#9 -:[<~)h[+G$h/h;z7ML˳+$%X%!GD n/+=}6/A] `a:R"z{ e~ҳtb?Cz*Bڌp`QPdwBXtsx#E-}ճw490"/֢N j_<9UvB - -P#_F+(C~IMXE -`5Hہ zqlGgC((Y=_$$vL!JtضYҩay߈0p/k_s ^qtAxaF9$sA³c0J{Zv{059:ܹePi<ФyɩZmrhSh6G -cObƀs!Ϟ -漲7r(tlF-cEU3&Ld?/ -Y"m)E4?e9]1.q X̟E3LU)`G8ZA>Tpkp8O#&e'Tc)ܮ|('Lا*q+e#€,rmufߨG?4N,|ֱAo뚃C˥&s"6rS@ߚƧXO9j6eLeL-Ma6g8jF{yf֖f -M}GpE9:<-׳$@$2&F򯨥nm2z2rV A#2we4љXٳ)N7S 0}ܲQUEFLE&;LuCI#DGo;OB{]e-=!hUwdD6&1O#Rz;vrZb)!'9rGKt$EiFHV;UU!}X~\2\z4tz. &r[eETKR>{^Î(n?^:ưj2cp5$KB!dέݭJнͣbHiƎpq6D?ZmBb#ֈ2t#:a%ƩSV#dÜB~:\28PʋV._dGjKŘ ߜcpΑ?0$`Â,>@N Zcl;!iXQ.o"iwydtQ]U_Dc.M&}\VaDl1b O #Z'j]{M~j~{;^ KD(/=ʶL:VOkrK}x%鵧KRerUu *F}v -3nV$]*N:Q$:t\T9LׁJ -3lǃ/=GY:w%74x aPYבSR%QH&U1 ^G܇n_LG͔ +"jyL8*jn6rgJ$~=y {wOf:G?Pb*x5|)j!pMl/J+#oq -`[;8%Qg/F{$d*ʗ~b0&h9u17YM4P}9¸nדŴiet - ʴ"  M*Mla9dID rnݭ]Q6,2)qr3HpOEuHNwvx7I^~*.Mz|^E6]XǾZѬA,fxO$u]2Nh3pRK<ܓ9V|w)TpvdQ9rN)}־SJ g.PP`5h,K! 3TɴEq UaSk\띋$,DrGȏ<-C}A֚⇡v n -h3xP -?WH_*`$6K4|לC F1<@h&@< ꝅpα~NqPW.[NU1X1s= >ˎh -Ig.7x4S$}g ${@IA&lF>y{bэE (h1#ήTzQ<,↊jD&(V ?PCQM;Dc&N7 -,6%,Z24V\$ŷ@JC>~'/~̼5\ -"$~K72. -@3$;dtiC]I,YTr5rغRw (Zn -c!3 d0dTrW ChIIه0=4fvh.%^-Qro1FA>BRU\}2s. -q'rg~Fߨ{Ｊ_#$Z#DC -={%r^ռ7S ^; # NsSR!&*~dEqvO@R>0~="s\7':#vk89kP +NRױoDFB4dz!?9,\b,9d 6L]q):} g|N l=T7IJ:_V8tHK%,OEV.l(hߚ|HN<) z=}[Q.lHh0<<Q[8밿Zϸnj!F`ö<1 z]QZt.Y?ADN3'ŸQUG&g85vEMF瘣ŊYq9 ē)S1稈vx%D,œ)eևkNxIMT6;KRDZ;ܝ~U]T^\ݚUD߱'I8#G5w@1,ȱEĊ,nPA0By7ˑ;) . C4u*΁z}5>L0Q=D0OVKlsѪ# ɯ4͏z~SsiZjeeH"!25!p,Iu[xA~R;-Yxk< vʏю2'B,ɇ5v;A '\'e-_WU[m% mxH-D~pE~#}z 9>Fv;!un{i3#fy"{޿r[:>@پ)W [f Mxʧ5Ⳮ:V¿2dVHm4W^M9=J%6u -Gn"Go7^PsSZojlU5 R Gs#z+ fP~ q~1"ԒH8r'@\=*N=jny촄Uُx">̧K)ƒ 0E*3ϴzt-yZUfvwfBٌsO'2s\_Fώ -No 3 7o. rf"Lyf%zVw[6[E= ͶL(i6 ?BĎ<)ܛkI'5_ɶEVPd'BJ"Y8PbzBR;JbHܧ;u5e/"2'ӄ ?v.P #%vNxqg3߯WCBn)[kF.e)-Dkggu`iŮIs·_y 0V[Ou,d,"7zx,GR@aZ]y`ypxn6$Dʛ[rS1}nCY%wfoyclO{仂([A͛S6*&נǢ8G]q+SL}^pcH^ -&3U#iV5G7\k= vo9BTOwuٽz)F v$ .*(~Xd ¯6FԘ@Qy{e ,2ޢhሡrC6xjq3'1;nhv@9a֐;H'cң!sV%]$G@6 -?tpx܇ޒvAnŘQ:;jadP}'sr"򤜃.1x -lp K\YbIfMam>p'L2!\Yn!9_0vsBW@OIi`P` -){pBwcZ[ΟB<5ؐ ɵk&;勜(7*&vv"_H5seǶTj",\cvICFD sv.ATt;mWd;U5QFߎ2v+o(AzvE ɏY'z|b+lк"23|kW0X퇙2v>`˅2.lu=2~fFmƪP_ <YoFG^)ˏ~H8J[fm1_?VשAYU-:q>1J 3hKji]oiq/bKBܼ=fb|Lz *ϰC[5]6D47FPc=Q#1B೭ "[ǎ5a+D%qq!vĸA@;0G\,7+zFDdf?uJe$zLIOs_[XޮzAFtƮ'N~2:)#q>i)@H9WA -MCZjkw2mX6»g,ˋS:?vkTzDxԂt]?  QaadbT -;bZ; I`` l^8>ObaHoɝ{dHrzzcF>-2"O@x;tF@z?o<@0`#!u;ƁCgdwG0;NL*W }|dOx-7QΗ'VxH;&T$9G?[&5f:+AOw4Il/}4/\ޞǒ^ڄ.T ؜Nx;}vж!rN2qBG>z~Ϥe'g3鎨AoiJ G_nNOz_W4Q0`=W[b5~:dB ު=%82 -ɭr=/+/ORL"aqŒLIġbѶlYde`5>9~(P K.+:a]βrθ{N9$#BVCU]FM®4;~€k9֙ /u6F -q;",fbdDX~F'mZ|XWO78{q([$0YTkޠjq:kPzJEi0B/~ pAbyE5ʜoa)%[i J/3%"JMÜ-J)?9IMq{N~ů,3K=_O<ӎ<0Dn^<6':ku&HZ7/ -BfӶv8IIPt;~뤣o $*^TX23SWE8o@ѰQu9F-np# -YJݠ gMt|K/(!]OZGƐrQPJ[.bvz'A6 -6:ѝE>Rtk#@@i8d`hpDxwӸEio[~*Z..6M -yOV@ZRa{Uzsj2>Kak!tbO,?p7Vm2Ifkvgی3¹DZ0XMip.fo3Έ~a) $W|1"H dQ JllvE[A`*fpԱc͹)&Y[o{ 5MfyM5u (?q‹NbY;e7*r*h6(BlܕKXBLZUpfJdt+}`V{J>/C0(,}RC1vp΅@N>_آ2j5+{x@RF$ -c u]q핾}#X@6g\Zy{[( :q'g4F8°7PLK> CTLۄ ;\2(2fsYa(/ d&J`8~2G ݮP|w"Hxg(5ƾEjݹ -Hv$tʤɏ{2-ORBx\7mZڄ1>ϧB\/XUkYS85zNSZ;]V졫b:V BdvNI!#Gv޾e6όn٦Dnߝ/ ? q@HaWHaoM -B&`pOGTngV%ԺxPke@([h,ܕ*z0Hǣu䳖4T.;T)u$m"H&n; zYY5 X9(''|@Ks?An?vZ:;8x.@Oj(']?a.6f (G`nLf'^۟xIΎf"_ kqs0sr/ oۻ{ vVrS1n_#nn@Ͽ\fG!NfngGn6zi>G9,)l'f&^!K!pv?ήٕ8gW7񁳫!p]k!p4E]E]tEn2~ 79=?~$Y8{!ſ \˿-B_._ N!X/[9g*_r V.?/[lNE-<@_kNHkav%sU mI*=ȡɐ哊 MO9h?`{t9qMbݫec֥nHՅ/iz#jtR?7A x 8hE7pSrHKٚ Dhgܸtz*A(JmhC`mN82oPq+Έ\Jm[7]u7Mqbeќa)| :̱t[2tm\8'4\S c~i&mE L(gp^mV/BL5[ҩWR*'h +Ô)$:9o0g3qO\>_SsS?MqߑK١mYjAWB6W86ۧ 2M jAm ,[?P P<C|t&uZF@L>R}|YHf[I%d %cyB>ChuD'MGBQ"SCP7Bsr}1*vs=0f+Yg*.H'6ixK +\s kn +8K +_EJ t> 9(6^.>vVv+'so.~Ƈ"XB5"t'/gJ4E+؇9ZfJT?U4aꩊkqQT~u 8ٌVQ9)Gх&+;7$YՎQAFΟki +|1 +% ׼{?:=F + ՜ +`}FD_Yž, <DRzv-!bLhgz/&P +{z@>]8b?2 +frY yi9;bJW {争K_3<_uV[BV]_ >P>wpk]_DcR3tl>i +vqkk3$vG6Jyc~ӾW,kcݓw)STj+'%$>|G`K̨IӁKWZ\Olp9I!b~:xzgĄ+E#Nsr7==2gt a=C^|zOɃɣdf{Q/2 [\FaXݛ,pO^@ ^d"g?#YdARlR$Ή*wzR{ZX!6PsU8ëV9Tp(ʛ^'H^IpS-( /9ǟg +顰 ;:Z4?Q*=p뷴w"rOC1?27:^{!xVkuMr#QE6[_7 +v^vja\rX`K.m1ujdR'fhE#jXCQIb &3v|UsέěJ)!wQnsw#%/Y*D, |?3R(sȋ`]/b$ OU`n +(u{b~GHG&(@ j 6?oH_nuf~Gx+c_|Ok'-M6shqFj`',{|A}a`( mZd=z~OKK*PXk\w[^xٔjoNNi) `3Rv}jM/IZ7, L["n|`P(&Frul +yRwѶ4WH^иwn*gY+qe7VzgI>KJ KC^WzZm*6^z5tE"{g_ isk T3U^9<4=n(FZgSi r<`2D^̭E #*^6Hays8okc?6V708G>VQ@U[1/k0YEAPL=,|φPP=>zIH쨙-BmeSaG /òW9a #,Q_־~_3}zŒrH3:sґgO?/`$Aajts"tsOIOFry%ۡIˋShlƞXŌB֟=-|#ye%nQ،[4f 69fL~_ ^EʙSh~ԩˬ%rb]TY:?tg +,]Rpz‘}*l 0rpGLx)VEG$FGj{3C{[6QTbߠEQ%=>jSȞ0;~%yЅ򂋙j {U_+w bXV"2En6dHE,bϜ>z]_Zp&f*cO /T +V&FY(6k;Qя~IU8uHVugչrZѯg َ/_zȱ;³4 Tiu =KXoԃiV%4Vr#3MͥJlm瑔3MVc:0Ώ)W\+u~E$pUlJߋ:ƕH\mm{  +13vI/P$td0TjS. +,uCTMyِ-^V0F="r'vⷛqF+K,_^.H T/` +Mr(96*cnhI{fif?0:sqU7ݮ'i!ӪGiE86U1sȒܬe[kian9hmXd.G R2f@L =;oK_m?bU+\ ++l}QYYH\Idhgb%xt's8%dS~2r[^3?R(2}$G+:`]>/jxwY|Bpgi-ݝ*Xҹ +;)HJyY +>yy_b4LqI*F+NI議 ahzlF+I\Yf%'c匶33A@C} r:$M~`ZG ER1,k=`%d̕(tqOq4nX]?%cw(cY*> )aW'#a_i$XtS1=#lxz!'N@A7xGUekv20͟,V=6I$a%M5ytIU0,(цs:x@^+!0B͑;9xCl!l֝;h0 5kZڛ>*,P>Y)am}^:1'_F`^Y +i˫?G*(+РotI^ܲʈ>!_[{ٷ)W엾(#.pDIRk<?J_<3 {%VC +%`]}_Hk}kk=Ni^Ч-8~$# 8Zp 릸Ce3>HL.BBXۨ!q!by|k(raisjE;ª!0D[yZ;觱*~.%wh$3=Z;Fce8~VrXn2f]H}ۀ0q2b MzMFm*ӼKf|UlGCaӶKRyvC[)\kaGc =ɦoB/^5;E ) y4? T߫8K>I!,k$}T[A[5C .g`1~Ý@S&TMTlIli';9nA0c yx2MydE; c8⡬\bbhS ԝʵGʇD6(8/(c}JYdiHo|N^>0983,yk$ *N%`[ ++ +OU;R*FP4`lr : +C$"~xBv/KIM$n]ƒ$ s$/8?!Ae9⎠CS>qUbxvw[._}{me|Rg`e`c1@yuN+j! a{h):330\;0XK>o[2ѣ">cT}Xz6e\  NϸzQ<~yUFBIj;jG2n*L{JD2yo&;w@F#1$榤CLT8Ɋ0uI(|`TzDnoOR6%nuxGF98-pr l# Wc>y:\ǁm VKi̫n1ٝCކMaǕ3CmrR23.?׬[)~Op/:jO +\c]': -;5iaMsY~VsokbjQ6? 8o8KBXGZ*7 j]w*}$捄>i,Ȋ͙ydCVp"oӿ0x +dij糃;Rjex6rj_ eB'dJ{sohNp oB\hc.ILrDLnzMxHHAA24U^}B ~rSGYXr*mW ?=egS \ul3i~(z +oVeu7:ql[6Jw:KXx!݋xq-nD_=+oetE}˫HYt&q2 +t$KЬdZs +%~@(z tݰWѢRƅd`C.A҈22SܪRI\eu3ȇ6I*Ho&>Y::\viևU*b?ܠMY2}OpEt-fV3$HC,?]%KR0^y]9:~,Wu8ހW}h]45PV[5gW?/&xF=.?S$(% z+4"˷l)aE]8?`xxt-ep@a:>d)9qByam׃pS | ʣU;G8_i +ᩏd[aQ/ԭʐDBdjC*XhڃvZ dzx잕 eNX8kwl4!NNʪ[ QFJ*E0csQ/Z8ى.F$@r9}8=( X}2wB(~f6F̬ODڽu|س}Sq(`Q.O jkg[ue6ɬ>'ڊi"zt#u]ͽrjc{* Kl4D5d-Dc>n½صRتja@F6;V(̒bE%q>%N{Uz4-i oY +D|O4S]A`TfiiZ +03$Od/##7>g<ovQ];+DR%+>f>%rK~*lzrKmPl!~Գ#M=yR27B8Okhm+NDhp2N̅wѕĔ?ZyùOw&2j1^DeNЧ ~J]^[F%K%xG[ζg_7.6ݺSv<\>."SZ^]<(o&oaJ s\Y&Y\EoH5V5X<6¹ lH7b{1^ 2K 1X$&~9bw Q .H30 #7mTfMXAOS7Eqp**Wo :LgFӬjHc!o{_rh`\{R}HU]TPr/_m1Pa+ϩYdE0lCAq1>e%lf:,_o1%NcbSv1(Ysì!1/rwf=ޭfOd9GC8 +<6 +$m͚†|NdBBs쓿;Na}Ձ$m M|_ +)qjbA߸PTOyDq^B|#tQ]H28nat$TJ:4ۘ;ʊ#ZW-J3gA2e7#&tԮGh^z?Q:BƩ'vY< +H}GC\>Ab!H;ֆ.sqO勮x?;yNqޖuJ:\,mX4FP:m&>n`'N%gCLk%7^ևs7\xV֍6w}!rCv6>]^.i픕0E(CǜVDIb2-XF!_酲ɹE~5֤uz +(} bT87k,tE6pG`YL~HG, +W&gr|9ƩvĴvZLؼq|2 ޒ;0}U;ƌH}ZdD vz4Z`,y%e`FCv($`%!A*'aw+ԙ(U@fȞd[w[nx/OD wL) Iys~91TM -:*jnQ?tW w=[C= !i,דt^ i^=3% ]C9+"+J7&wmC$5j9e⮵|daINdW %gD+ Q ~011ʏ8#:\ h6Og)=%a|{[̡kuȄt 8U zKpd`[z^V^2+38l!4EX3)doQ㨅9;_Cm+ٲ)֖G;qVSEq +޶xU-\\(_m$hZV>:8d)|yA=wbxtqT3kaW:{]8?=rS N8jlUwc%C <fLOǠN'Q!z,_ІJ;>?]0< f_YX,ėChMy[6Z;$a&Xt]g6J]OI c& CJ毅TJyEMj˰ +N%d XF.5Edz沿H~}BIY%X,An.խZe^rG7+f=1s`eH[K9.]8f6-,R)@I c-\QGEl#9n_A@DTP9v7|mcǚsSMyK2G#kV9j8:9hP~3 v%1VԳvPo/NUIT|myTCnE(mÌ-^Ei[Oq3ByhNT_}+)ұ]uTQk'O㾔s}Qظ+6/l'm;6N6͔*V()p=<ߕ|^aPY8+:Їc.u t}Z EejVP(8~H`yD#\u GlA l+f3˧ n-Ǡ_kzr)NFcqoֲꔃnUn F"C)֌\0'z2Ig2^ID]5ħB"**E }+} +ĩGЧ&#| ;yFem5"DjQ?tONOh$%p*law#VWo(ət| — KEv|oM_9ePe +W>¨Q"_$Lqe ]|)sDP3Jk} "hO5 sd*Hb9In7>eZ.$΅ 3oژx 3cI}.OJ^ +&xjKWitJK=ϔoӾL,n*7±^7VAo5R K<2P:QTL^SD|n?pj8 ,󝦜wCWyt@$(CFGL՗}ldwM&< +;U_@3:_/yf+ݡbk^mTn=W`J^tdE7!^Y~r֤𓿭x@35}Y7v- ccX "ZmOl(8~R '^ViYS{&^K ɍy8^>YxhA/Æ,vQLפ3N:w}{>@6`~'E<1R B.2Ly`XO"J'`7yI +.JDM2N2f3 '[IiMP3;nw.vVXeLmjN~4{}*a3 ʢǒ+O&"9C %*;v} CVs!㦡ҏJuw?O$Ju^A.+y0pĺBd[ +iXī t&>)( +D|a@PnUwپɅZq S!} +BE +*;฼PsUMN#ǽ3w|;@X{/,۴_C࣡:i +|!*MiDZ_:b2dO ,f wgG3=dAendstream endobj 955 0 obj << /Type /Font @@ -8053,14 +7958,14 @@ endobj /FirstChar 33 /LastChar 126 /Widths 1967 0 R -/BaseFont /MASIZP+CMTT10 +/BaseFont /RLEQYF+CMTT10 /FontDescriptor 953 0 R >> endobj 953 0 obj << /Ascent 611 /CapHeight 611 /Descent -222 -/FontName /MASIZP+CMTT10 +/FontName /RLEQYF+CMTT10 /ItalicAngle 0 /StemV 69 /XHeight 431 @@ -8080,7 +7985,7 @@ endobj /Filter /FlateDecode >> stream -xڬeT\Ͷp{k!K\BpwwwMpw%8_?{s߿ߠUsU^Ċ*¦@ {;zff23I\ hbio'f0ss$Ơ/;; 9@@%JO'N- gbabdP7x2ml< P:܀ SK1%);3{ætrII IxLfـ ?66F B?F67:߮M-]mo T`fd Whg%@+/Fy I9Ee,\T=3?:N&2:K0rr2Dv@$`gzZ_? +xڬeT\Ͷp{k!K\BpwwwMpw%8_?{s߿ߠUsU^Ċ*¦@ {;zff23I\ hbio'f0ss$Ơ/;; 9@@%JO'N- gbabdP7x2ml< P:܀ SK1%);3{ætrII IxLfـ ?66F B?F67:߮M-]mo T`fd Whg%@+/Fmuq-,\T=3?:N&2:K0rr2Dv@$`gzZ_? sF, lt jmcd'j45hjk109 qN&@0قFOfؘ@9lfE':R6rgg?APf6LmmD@Xx:X/qK?l\m-D@x@I {? o '_=%{?+>Y :Aa3/WiaBT,'gg[rF ?tr LRC ?RC ?rqKL$h>!H!!! @.J@.*@.j@.@.Z!n;X]fO_ @@ -8159,7 +8064,7 @@ s/1+ oBVUo~uBK Z[{QmefA?p,IʼnG׎+ .[,jvV}c\g^:|iao/AV;6R= 7R~kvg^Ό>#EN9[ |ҬeAǹkWf}L+ĈC"h!%>ԃp~(\<%m۞ELt-G(NRku]tyS7re}^WbA=VMOeed095cZ~rdP sှ^YxwŨ?>uzrz^<LzleՃ ?vӤ8#d$/ӜJ[ǐzc'em.;(SNvv5N/WxeX;z)YW[*.A"֏ AJbs\%ԺrdM ߹ɋ "^?2c4G|g΂V*ݲwm yQs^^"ojI *Oncgh}]gbљIZŦeP7(cÝk 'KZ^-X59;):YyEyucnsW~9_eĄ̫r`C|.9<@ |/ǪMN5OK׽V>^|kb iwlMO/xA&^Au˫fn`46bM@ߛ\%mn,Lcbq- -liHn1t }p@NI 1g$Fdendstream +liHn1t }p@NI 1g$Fyendstream endobj 951 0 obj << /Type /Font @@ -8168,14 +8073,14 @@ endobj /FirstChar 11 /LastChar 124 /Widths 1968 0 R -/BaseFont /NFGMPR+CMR10 +/BaseFont /BZOVEY+CMR10 /FontDescriptor 949 0 R >> endobj 949 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /NFGMPR+CMR10 +/FontName /BZOVEY+CMR10 /ItalicAngle 0 /StemV 69 /XHeight 431 @@ -8199,7 +8104,7 @@ endobj /Filter /FlateDecode >> stream -xS|߶IǨضmض;VG۶mFV'Xokｺz/Ϲ:SUs7'&OtvΟ]9KOo!'ZAO72\M k} +xS|߶IǨضmض;VG۶mFV'Xokｺz/Ϲ:SUs7'&OtvΟ]9KOo!'ZAO72\M k} u1g{ sw7p461+H`o'OS2 gOY;?!vOӯɿӨ۟vc'O,\isSG٘?GOs^sJBs6SF}J?'!>,>e%ЧTC rSA>gɔЧ,>5Чv8?3 gџi/tjWӬ_i/ta~ڰw_i/a3O j+ӕ_/t~ߗ-e<2l>;SsK|*&E\?O~g>oaSfuΈ;2)W4 78h+!'7ʂc r0E9R҅t%)6V2} 0<en2љHPMf*}3ݖkx #{EXۭշUc$vDsq| ;U9 Tٲ ;0VY5 GtK @@ -8258,7 +8163,7 @@ v\ 0 h AhՇ E||?g).UQaG}K=¾if>z&Dss9 XYUCSA ^ v/C7b<.z~U<ǻ!R& N^2]]a13ވEq$Z[%) ݠ v˻ Y![DESq괊҆o]r{ޒ{/c˭X/O `dmblgchY0uendstream +LM`j=FS$kͦf@˽Rw xqO[MJ;o@@,I;5l-y$h Ʌk=DJ(dbW@i}نQT<1`wM" e8nn.^¬Q /@YsOCHv(UF}#X0aLʉ)X颞ݻ%ؗ|'k[.zRmY5xwX?R=R(lt~&"TYQ-rٽ(,z z߽=mnBbvT߽>R& N^2]]a13ވEq$Z[%) ݠ v˻ Y![DESq괊҆o]r{ޒ{/c˭X/O `dmblgch_uendstream endobj 948 0 obj << /Type /Font @@ -8267,14 +8172,14 @@ endobj /FirstChar 11 /LastChar 122 /Widths 1970 0 R -/BaseFont /KRNLRF+CMTI10 +/BaseFont /HXPLVA+CMTI10 /FontDescriptor 946 0 R >> endobj 946 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /KRNLRF+CMTI10 +/FontName /HXPLVA+CMTI10 /ItalicAngle -14 /StemV 68 /XHeight 431 @@ -8287,28 +8192,36 @@ endobj [613 562 588 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 514 818 0 0 0 307 409 409 0 767 307 358 307 511 511 511 511 0 511 511 511 0 0 0 307 307 0 0 0 511 0 743 704 716 755 678 653 774 0 386 0 0 627 897 743 767 678 767 729 562 716 743 743 0 743 743 0 0 0 0 0 0 0 511 460 460 511 460 307 460 511 307 0 460 256 818 562 511 511 460 422 409 332 537 460 664 464 486 409 ] endobj 939 0 obj << -/Length1 1013 -/Length2 3827 +/Length1 1030 +/Length2 4000 /Length3 532 -/Length 4518 +/Length 4701 /Filter /FlateDecode >> stream -xy~=Mr Yy_Q?goFȳ@"\@c#X(U7 ZTnՉ/I"ݥ@?4.Ƹ@p[j֣ᓘ:|０\cnћ7rjh{Udp77VrL4//ROkh"Fh-o ̙S} -b'$xDӼd;t4jϑ1,uBuExskj3$TaU!{pYЊC7 $>2mwE0ƫ6`KBfz&^;Ⱥ)0'8MB+<5-Jrc(Hcm59E%Tt -R^Ɂّ$ L'?3soc\Z݋ Kn #JCk.ц tޅBKJ⋶WKMȱ6mi1ְݲ)Mٺ˔t#i;~Fw^.Mߕ5T뚔0bJOӮ~W- ׿GXxt|t3GSe\%1o}>@Rg' ߂}ޢfV6du7Qm,}~MLFdmS˥nҶ /g)exSloUuua#s5)/ ZȖ;mwHjX ctclv;sCF*qwb7vX}K3{5Q5k1*UAGӕĪ7v4!>KչSV }.1eű,>)w3s,6>|B)j-q*Y}=a`yV)ݠIJ?nlIr}C05$SݳR[YU]t#~Pq+FQ}uZ.4S6P׉h4XglLVQ+|mJ9b"apC y%H١PG#2iϽU'k7Թ<*oنj8EF_"5f׮.z.kՙ J("gkp^ጏoj=uN4ߡ'!^?/,nX?uVPvaxRN8Wq3q8yi.P}tHPQI\c߿ #ʞ$ghʝ"6^c9jm}=&m]:,r A VLS;.-bY4m̹XZ(lnӾُu2lG->ݱmTR°<-7HZ/ g涸I-rxƴi]iZ!K.j /U#g؇) [Ȧ#ԉY -0wv9=J_5Ԅ}ol -aN;0DџIᘊ.1^M?5j4=sRS kDGiEa{P\/kKP`Pdca!U}zC$'Yc煵ݲk!V;0ʍ?̼c;$㨮Q{~k3\_u5/>$/kvrXw1D32nlآ%P -1()L o4i84vfJx,0j2O-c -+b˪:w$˃#{aᲭ>^/tm_vIu[ьjIf@*LOXQO0idmSbQN8g\M+B|-a0;H"&?^l]⵸&tdgCyu;enL=.h͔fŔ_Y`W#Ԥ**.:02}|_z~`~:ÏݗVC7eZ\Y$S ܸ{fQ绣UaWtA)va Բ3$5䧉x˘# 17aLd{Fų, Uzml.ҩ,!Kݪ ls]tX55Ez|‡]k^*>2Qщ)}bb 6ս,JYH:#ȗ DٯŧC8y >/i~3O_8<gQG=/rB{ku w25>$K8c#FwU=pkU1U/܇KZI o+}\xal"u_pdK$p -J^$EaD5hY>\I,Wu|$aH?a#m<6j;҄?QX/8/4endstream +xWTSQ@ J.T@!^w U@!Бޑ&R +;(]z"]&MQGާ;nߜַ1{j `Ab8ADPч!a/!1he!@!= " @$dDdAE;~?EЀ p"za(G"px!@^ +#\Xwlp`GA4v@򯲭[+1O y FŠQxabBo + sisHц9!Q`p,E`AMatsgWC! +h{tUEz lH\?C+XKY[MXՃh!O/atH\XHXBuRA1H4q!% ÃA$q  ѶA BcpKL|; 8Ť'Y 1ho";`S`;8VCX7I`?$ u~;`ogF Z!PC#9A1oHtv"Dg/3UTxx "1HKI>]gF!4Ua4KD\\eU|Ur ɯR-l໇PyZ.fL?fY&_ק)%.exzg-ɗ:%KU#;nM?ܱ W6\Hl^ќ$!ie\'zQ.Ņ&:s.1lf 1F`jưKplq9s]tØ. V[w_KALOI\gx+`z$'KPri6]f g>mWtFIޫYC5nR9}K KVXMPƦh0`.ϼ-?JnI^6;n^Ku"jF-[$:L/-z]e7wGíT^;Kǒx\=1=I %?ẅ́Ӄ4WYBc(rfJي}>i,%qN;hw]v?N'. =؍f<筦gN[DԅKJaJjKL*/~YpoMT՗x(8RKrrՆ&Xn4 U +ZcNϙ~|!,C!ZK!@m&w\#C:SIFBo{| +Uh}WC5zV;a'iUf^O#ݶҴ^Ed9c[};e.P\N՝Oo9 1V:eџ?7uIW.=WuEr5_3bJgzky/,N:.S9-,pͯsMX6\m LxN5M!L((ٚ<`;{(ZP^yC&W[K3gF%KWBaxK_.W(ǗJ;Y]7îβI +r1 +6|D)}tE h/^U ~Q=r +ڮ:_<=Ca̤V CR3KMgF-(;HVo@z ]V4(4ֻʬO|N~|kz"Is^͗Ϣazc%l#^`^u䎷F[jӏ:x7LGVeYU#ˤ93x{^ڛ1a ][M_:_+ /v#|.dΑͤ_^1ŶWGsg +<M9\t%~M,)>˚KHt=޽֐TӃH5TE`ҁ_FZEhiQM,/-,EQЎ}beߙnwܢ$!til( `ǾMy R!}]α4xek +|~|OZy uILEh#$Z?(yr\WN8c'بHk$n_O2Kdzq@YJPSyEFb쫻<`Ψu[,$rRJFH Q@f7Fd1c%|kcTPĞ㈞P|gkV/A;tȬހ*p԰)ns]/drb0Tӱi6m@Fzcw=d  H9"}"G[}²V ͶnxM8B8<(8ulБLĥ()L2= +|vFSYSŋL7)CtoZ;$Cm4j;{rO\qٕ}Tu(< zsɷ=,G ^v'L{ y,J-KMdx\ySm8qJvHtTxGÛt:waB9M$wCKX#%zb&o2Sz%.hIU_6ۡ}b3\J.㺳NT0sI/HfZZ]2ϟ7mZmoqim߃dU8Mߺ֮1|:'jFŇWOxHrQ+)CgG.vwTRuםAc7ٸYE7ip" +3wbٿ/+冾"LҕB6gg⮼ (c}.ht/ϗd f+mؗ6Q5<zBdL[㧀 +ςxRpd 1\9xȾ>{E =N=uhR-ݝO+s܈\|-)o ?f+2#;|'2W0u!Ԩ +97}6q|J(^ AMdreԯM 9_ ^L+")a+N[tIj@j49*-|ն"F2O +Binsc=XEhOql֬P{^'=2$<%MS ++իn~ o4m1ݳQsõ[}{`iyw*Ms[ǣ\UIHUrWwۜvEB;'QKX﫼 fsИ8\J#QW85aHP7iV}=QЎO=xuEE)', s3]U,҇~.oQrb 1b8_b|olY + +lKm3)Ֆ1R=VQ{1 +, zV l9gC>ڼ?- ܦxUdIݱ&);;1rTw%WgM՛'d矇*WblչvcBm5N(3*) +l%r-=6b~\GvfWUZ3} Ve @d'G0H@4~q%ak@AU?zÝ7(Epㄍ)db?³Ν7׳^}}Y֛Fחp8R\]N79.?U61t$.3ӑgw˒0v8YPzݹu&"[Ob,7G,jr93c`bEjgmPT/(7k8>^}M2Be< 6`1GSE0^^ :(E.RD)f&pżqT8.Bj܆XWesCƑS"n0WٛQ'FNì;+_<36C~GqA`VA__qA#h<=ZΦHl,cnKH&r8,MJҥ|-֦rۮ¨7E(}=#x1TOZJrCQʹNxG^{lU h8z(pr(L~IGx2N]8?Oi0rqUUs#ŭyҗjO8_e%5s,]=`Νɗi|j*Swuޡj^vkMS4M ]NKg9 4P>a )ݞN?fd"%]c\ԸwYsN`.?aq'_nendstream endobj 940 0 obj << /Type /Font @@ -8317,24 +8230,24 @@ endobj /FirstChar 48 /LastChar 121 /Widths 1971 0 R -/BaseFont /MMOZPF+CMR12 +/BaseFont /KDLGMV+CMR12 /FontDescriptor 938 0 R >> endobj 938 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /MMOZPF+CMR12 +/FontName /KDLGMV+CMR12 /ItalicAngle 0 /StemV 65 /XHeight 431 /FontBBox [-34 -251 988 750] /Flags 4 -/CharSet (/zero/one/two/three/A/B/J/M/S/T/a/e/l/m/s/t/u/y) +/CharSet (/zero/one/two/three/five/A/B/J/M/S/T/a/e/h/l/m/t/u/y) /FontFile 939 0 R >> endobj 1971 0 obj -[490 490 490 490 0 0 0 0 0 0 0 0 0 0 0 0 0 734 693 0 0 0 0 0 0 0 503 0 0 897 0 0 0 0 0 544 707 0 0 0 0 0 0 0 0 0 0 0 0 490 0 0 0 435 0 0 0 0 0 0 272 816 0 0 0 0 0 386 381 544 0 0 0 517 ] +[490 490 490 490 0 490 0 0 0 0 0 0 0 0 0 0 0 734 693 0 0 0 0 0 0 0 503 0 0 897 0 0 0 0 0 544 707 0 0 0 0 0 0 0 0 0 0 0 0 490 0 0 0 435 0 0 544 0 0 0 272 816 0 0 0 0 0 0 381 544 0 0 0 517 ] endobj 936 0 obj << /Length1 1972 @@ -8347,8 +8260,7 @@ stream xUX\]h; \w` ݃Hp <;wwS:ϡns=sɦ&WRe6%@NLXy",,HԢ@C' #+@ `eB,̝tL, mN@pcCk* lm P G 4 -00v,lq5#ll_C.@G,I+l&@S$f]@R3?Ok9; z" "i'Ck ca[3k ?Bn@% 'cs#_qT7_2 - ^ +Z:;?Ŭo @ +x"_}5X؂7' ; dXؚ@73[)S?K +00v,lq5#ll_C.@G,I+l&@S$f]@R3?Ok9; z" "i'Ck ca[3k ?Bn@% 'cs#_qT7_ ^ +Z:;?Ŭo @ +x"_}5X؂7' ; dXؚ@73[)S?K ^ufh`7sAN@#X|ϑ`0:mEY3?&mO G -v0E8v@۷)p"[hmh0{@op [࿙l6 v2w5v4`]GR@\ oZ-O֠7--F"o)Fbo[ Z5K^7KHR7ȾE.ovQx#⿉F`7E.jovQ#]>E.Z&l`hlto|1mƏ Fo`vX+2 %:,,B_ V6omB/[llB_r V.!lBǿ_"" 7O&eb`p{OTi1!gaVr|Z?@iaddR#^0^KH^4\ִC3Ң#XĔsAثS9x./CPWwN_MVٖ]#"K;l>+w>qL󥏕r v җVdjÑ$P_7ekej5cdDk[H_D6QpL_pB#?nKL%| n\4gBQM=n'u,̈nNL).C+1 B Ee8O&sIo^Rn3ee8??:i5ca'Zo׍QUˑˊi"rRGQ{0ɚS@ O*PPcژ8(?]3 ~w%lgHn Cvf ˷J03.(7/R44"Mam'B|cj$ ,U@N(DeNmnelrV& >)>e6a./n Cc89m]81Q\~02qC^&en}ZF魗.ڗU(K$gE0/V~v;׳8_h~7e-Afrc-I걡z`#=-ifգiC >C%Fcܗ_D=CvvN)"铮Pxq+>! T i%hf6*j;q|E9(obJp/9@ЄDlVaB=y ~X/uf}#k*?ADٯ̀r";2j2d @nSff/b -Yr%9y[sCbpz5+mdTI7c߅3zdtaTE*/f1{p8&E\X=yԦ_!Rf/F(ہRӉ'Vu#OwLM Nh59_^%"kYK gs~7^%ls.# # j-.)`!nй4i;@qc\`?MYo_@[sBbِVe,_+[ @6VHzendstream +Yr%9y[sCbpz5+mdTI7c߅3zdtaTE*/f1{p8&E\X=yԦ_!Rf/F(ہRӉ'Vu#OwLM Nh59_^%"kYK gs~7^%ls.# # j-.)`!nй4i;@qc\`?MYo_@[sBbِVe,_+[ @6VH_Cendstream endobj 937 0 obj << /Type /Font @@ -8406,14 +8318,14 @@ endobj /FirstChar 11 /LastChar 122 /Widths 1972 0 R -/BaseFont /MJCNOV+CMSSBX10 +/BaseFont /VCXQEM+CMSSBX10 /FontDescriptor 935 0 R >> endobj 935 0 obj << /Ascent 694 /CapHeight 694 /Descent -194 -/FontName /MJCNOV+CMSSBX10 +/FontName /VCXQEM+CMSSBX10 /ItalicAngle 0 /StemV 136 /XHeight 458 @@ -10218,7 +10130,7 @@ endobj /Count -3 >> endobj 1978 0 obj << -/Names [(CodingSuggestions) 1007 0 R (Doc-Start) 934 0 R (Item.1) 1295 0 R (Item.10) 1317 0 R (Item.100) 1554 0 R (Item.101) 1555 0 R (Item.102) 1556 0 R (Item.103) 1557 0 R (Item.104) 1562 0 R (Item.105) 1567 0 R (Item.106) 1568 0 R (Item.107) 1569 0 R (Item.108) 1570 0 R (Item.109) 1571 0 R (Item.11) 1318 0 R (Item.110) 1778 0 R (Item.111) 1779 0 R (Item.112) 1780 0 R (Item.113) 1781 0 R (Item.114) 1782 0 R (Item.115) 1783 0 R (Item.116) 1784 0 R (Item.117) 1785 0 R (Item.118) 1908 0 R (Item.119) 1909 0 R (Item.12) 1319 0 R (Item.120) 1910 0 R (Item.121) 1911 0 R (Item.122) 1912 0 R (Item.123) 1917 0 R (Item.124) 1918 0 R (Item.125) 1924 0 R (Item.126) 1925 0 R (Item.127) 1927 0 R (Item.128) 1936 0 R (Item.129) 1937 0 R (Item.13) 1320 0 R (Item.14) 1333 0 R (Item.15) 1338 0 R (Item.16) 1339 0 R (Item.17) 1350 0 R (Item.18) 1351 0 R (Item.19) 1352 0 R (Item.2) 1296 0 R (Item.20) 1353 0 R (Item.21) 1354 0 R (Item.22) 1355 0 R (Item.23) 1356 0 R (Item.24) 1357 0 R (Item.25) 1358 0 R (Item.26) 1363 0 R (Item.27) 1364 0 R (Item.28) 1365 0 R (Item.29) 1366 0 R (Item.3) 1297 0 R (Item.30) 1367 0 R (Item.31) 1368 0 R (Item.32) 1369 0 R (Item.33) 1370 0 R (Item.34) 1371 0 R (Item.35) 1372 0 R (Item.36) 1373 0 R (Item.37) 1374 0 R (Item.38) 1375 0 R (Item.39) 1376 0 R (Item.4) 1300 0 R (Item.40) 1377 0 R (Item.41) 1378 0 R (Item.42) 1385 0 R (Item.43) 1386 0 R (Item.44) 1387 0 R (Item.45) 1388 0 R (Item.46) 1389 0 R (Item.47) 1390 0 R (Item.48) 1391 0 R (Item.49) 1392 0 R (Item.5) 1301 0 R (Item.50) 1398 0 R (Item.51) 1399 0 R (Item.52) 1400 0 R (Item.53) 1423 0 R (Item.54) 1424 0 R (Item.55) 1425 0 R (Item.56) 1426 0 R (Item.57) 1431 0 R (Item.58) 1432 0 R (Item.59) 1433 0 R (Item.6) 1302 0 R (Item.60) 1434 0 R (Item.61) 1435 0 R (Item.62) 1436 0 R (Item.63) 1437 0 R (Item.64) 1438 0 R (Item.65) 1439 0 R (Item.66) 1440 0 R (Item.67) 1442 0 R (Item.68) 1443 0 R (Item.69) 1444 0 R (Item.7) 1303 0 R (Item.70) 1450 0 R (Item.71) 1451 0 R (Item.72) 1452 0 R (Item.73) 1453 0 R (Item.74) 1454 0 R (Item.75) 1455 0 R (Item.76) 1456 0 R (Item.77) 1457 0 R (Item.78) 1458 0 R (Item.79) 1459 0 R (Item.8) 1304 0 R (Item.80) 1465 0 R (Item.81) 1466 0 R (Item.82) 1467 0 R (Item.83) 1468 0 R (Item.84) 1469 0 R (Item.85) 1470 0 R (Item.86) 1471 0 R (Item.87) 1473 0 R (Item.88) 1474 0 R (Item.89) 1475 0 R (Item.9) 1309 0 R (Item.90) 1476 0 R (Item.91) 1489 0 R (Item.92) 1490 0 R (Item.93) 1491 0 R (Item.94) 1492 0 R (Item.95) 1536 0 R (Item.96) 1537 0 R (Item.97) 1538 0 R (Item.98) 1539 0 R (Item.99) 1540 0 R (Packaging) 1021 0 R (SMBPASSWDFILEFORMAT) 1845 0 R (architecture) 1005 0 R (chapter*.1) 1027 0 R (chapter.1) 6 0 R (chapter.10) 258 0 R (chapter.11) 726 0 R (chapter.12) 750 0 R (chapter.13) 758 0 R (chapter.14) 810 0 R (chapter.15) 826 0 R (chapter.16) 854 0 R (chapter.17) 866 0 R (chapter.18) 914 0 R (chapter.19) 926 0 R (chapter.2) 22 0 R (chapter.3) 46 0 R (chapter.4) 82 0 R (chapter.5) 86 0 R (chapter.6) 178 0 R (chapter.7) 206 0 R (chapter.8) 246 0 R (chapter.9) 250 0 R (contributing) 1022 0 R (debug) 1006 0 R (id2735718) 1316 0 R (id2735855) 1326 0 R (id2735907) 1294 0 R (id2736117) 1298 0 R (id2736155) 1299 0 R (id2736230) 1310 0 R (id2736297) 1311 0 R (id2739476) 1283 0 R (id2739563) 1284 0 R (id2739594) 1289 0 R (id2805869) 1383 0 R (id2805895) 1384 0 R (id2806295) 1331 0 R (id2806340) 1332 0 R (id2806446) 1340 0 R (id2806453) 1341 0 R (id2806472) 1342 0 R (id2806496) 1343 0 R (id2807146) 1401 0 R (id2807899) 1464 0 R (id2807992) 1472 0 R (id2808047) 1477 0 R (id2808071) 1402 0 R (id2808085) 1403 0 R (id2808098) 1404 0 R (id2808112) 1405 0 R (id2808128) 1406 0 R (id2808142) 1407 0 R (id2808156) 1408 0 R (id2808171) 1409 0 R (id2808185) 1414 0 R (id2808200) 1415 0 R (id2808214) 1416 0 R (id2808228) 1417 0 R (id2808243) 1418 0 R (id2808257) 1419 0 R (id2808272) 1420 0 R (id2808288) 1421 0 R (id2808324) 1422 0 R (id2808474) 1441 0 R (id2808560) 1449 0 R (id2809324) 1498 0 R (id2809349) 1499 0 R (id2809577) 1500 0 R (id2809614) 1505 0 R (id2809651) 1506 0 R (id2809707) 1482 0 R (id2809805) 1483 0 R (id2809876) 1493 0 R (id2810346) 1535 0 R (id2810590) 1511 0 R (id2810621) 1512 0 R (id2810646) 1513 0 R (id2810691) 1514 0 R (id2811313) 1545 0 R (id2812244) 1563 0 R (id2812278) 1564 0 R (id2812316) 1565 0 R (id2812324) 1566 0 R (id2812400) 1572 0 R (id2812408) 1573 0 R (id2812482) 1578 0 R (id2812613) 1579 0 R (id2812620) 1580 0 R (id2812632) 1581 0 R (id2812643) 1582 0 R (id2812656) 1583 0 R (id2812668) 1584 0 R (id2812763) 1585 0 R (id2812776) 1586 0 R (id2812833) 1591 0 R (id2812874) 1592 0 R (id2812902) 1593 0 R (id2812944) 1594 0 R (id2813030) 1595 0 R (id2813123) 1596 0 R (id2813150) 1597 0 R (id2813237) 1598 0 R (id2813306) 1604 0 R (id2813406) 1605 0 R (id2813484) 1606 0 R (id2813525) 1607 0 R (id2813607) 1608 0 R (id2813660) 1609 0 R (id2813830) 1614 0 R (id2813933) 1615 0 R (id2813972) 1616 0 R (id2814115) 1617 0 R (id2814228) 1618 0 R (id2814792) 1623 0 R (id2814886) 1624 0 R (id2814928) 1629 0 R (id2815097) 1630 0 R (id2815564) 1635 0 R (id2815576) 1636 0 R (id2815677) 1637 0 R (id2815868) 1642 0 R (id2816001) 1643 0 R (id2816028) 1644 0 R (id2816066) 1645 0 R (id2816207) 1651 0 R (id2816247) 1652 0 R (id2816397) 1653 0 R (id2816469) 1654 0 R (id2816549) 1655 0 R (id2816595) 1656 0 R (id2816775) 1661 0 R (id2816940) 1662 0 R (id2816953) 1663 0 R (id2817023) 1668 0 R (id2817066) 1669 0 R (id2817080) 1670 0 R (id2817119) 1671 0 R (id2817172) 1672 0 R (id2817180) 1673 0 R (id2817192) 1674 0 R (id2817263) 1675 0 R (id2817271) 1676 0 R (id2817283) 1677 0 R (id2817374) 1682 0 R (id2817381) 1683 0 R (id2817408) 1684 0 R (id2817439) 1685 0 R (id2817453) 1686 0 R (id2817552) 1687 0 R (id2817649) 1688 0 R (id2817663) 1689 0 R (id2817777) 1694 0 R (id2817874) 1695 0 R (id2818036) 1696 0 R (id2818068) 1697 0 R (id2818138) 1698 0 R (id2818170) 1703 0 R (id2818201) 1704 0 R (id2818270) 1705 0 R (id2818317) 1706 0 R (id2818357) 1707 0 R (id2818399) 1708 0 R (id2818433) 1709 0 R (id2818447) 1710 0 R (id2818474) 1716 0 R (id2818546) 1717 0 R (id2818561) 1718 0 R (id2818588) 1719 0 R (id2818637) 1720 0 R (id2818650) 1721 0 R (id2818670) 1726 0 R (id2818796) 1727 0 R (id2818917) 1728 0 R (id2818945) 1729 0 R (id2819129) 1730 0 R (id2819243) 1735 0 R (id2819288) 1736 0 R (id2819308) 1737 0 R (id2819434) 1738 0 R (id2819507) 1739 0 R (id2819521) 1740 0 R (id2819562) 1741 0 R (id2819623) 1746 0 R (id2819631) 1747 0 R (id2819794) 1748 0 R (id2819891) 1753 0 R (id2819940) 1754 0 R (id2819979) 1755 0 R (id2819987) 1756 0 R (id2820114) 1757 0 R (id2820295) 1762 0 R (id2820309) 1763 0 R (id2820357) 1764 0 R (id2820417) 1765 0 R (id2828738) 1810 0 R (id2828936) 1804 0 R (id2828976) 1771 0 R (id2828992) 1772 0 R (id2829247) 1773 0 R (id2829456) 1790 0 R (id2829469) 1791 0 R (id2830146) 1844 0 R (id2830264) 1815 0 R (id2830298) 1816 0 R (id2830366) 1817 0 R (id2830374) 1818 0 R (id2830390) 1819 0 R (id2830417) 1824 0 R (id2830439) 1825 0 R (id2830446) 1826 0 R (id2830464) 1827 0 R (id2830503) 1828 0 R (id2830593) 1833 0 R (id2831185) 1855 0 R (id2831234) 1838 0 R (id2831259) 1839 0 R (id2831852) 1869 0 R (id2831871) 1870 0 R (id2832085) 1856 0 R (id2832118) 1857 0 R (id2833060) 1858 0 R (id2833088) 1863 0 R (id2833149) 1864 0 R (id2833957) 1949 0 R (id2833990) 1950 0 R (id2834164) 1875 0 R (id2834172) 1876 0 R (id2834287) 1886 0 R (id2834358) 1887 0 R (id2834366) 1888 0 R (id2834558) 1893 0 R (id2834801) 1906 0 R (id2834809) 1907 0 R (id2835349) 1942 0 R (id2835356) 1943 0 R (id2835380) 1944 0 R (internals) 1008 0 R (modules) 1018 0 R (netbios) 1004 0 R (ntdomain) 1013 0 R (page.1) 933 0 R (page.10) 1288 0 R (page.11) 1293 0 R (page.12) 1308 0 R (page.13) 1315 0 R (page.14) 1325 0 R (page.15) 1330 0 R (page.16) 1337 0 R (page.17) 1347 0 R (page.18) 1362 0 R (page.19) 1382 0 R (page.2) 945 0 R (page.20) 1397 0 R (page.21) 1413 0 R (page.22) 1430 0 R (page.23) 1448 0 R (page.24) 1463 0 R (page.25) 1481 0 R (page.26) 1488 0 R (page.27) 1497 0 R (page.28) 1504 0 R (page.29) 1510 0 R (page.3) 962 0 R (page.30) 1518 0 R (page.31) 1522 0 R (page.32) 1530 0 R (page.33) 1534 0 R (page.34) 1544 0 R (page.35) 1561 0 R (page.36) 1577 0 R (page.37) 1590 0 R (page.38) 1603 0 R (page.39) 1613 0 R (page.4) 1026 0 R (page.40) 1622 0 R (page.41) 1628 0 R (page.42) 1634 0 R (page.43) 1641 0 R (page.44) 1650 0 R (page.45) 1660 0 R (page.46) 1667 0 R (page.47) 1681 0 R (page.48) 1693 0 R (page.49) 1702 0 R (page.5) 1071 0 R (page.50) 1715 0 R (page.51) 1725 0 R (page.52) 1734 0 R (page.53) 1745 0 R (page.54) 1752 0 R (page.55) 1761 0 R (page.56) 1770 0 R (page.57) 1777 0 R (page.58) 1789 0 R (page.59) 1795 0 R (page.6) 1125 0 R (page.60) 1799 0 R (page.61) 1803 0 R (page.62) 1809 0 R (page.63) 1814 0 R (page.64) 1823 0 R (page.65) 1832 0 R (page.66) 1837 0 R (page.67) 1843 0 R (page.68) 1850 0 R (page.69) 1854 0 R (page.7) 1178 0 R (page.70) 1862 0 R (page.71) 1868 0 R (page.72) 1874 0 R (page.73) 1880 0 R (page.74) 1885 0 R (page.75) 1892 0 R (page.76) 1897 0 R (page.77) 1901 0 R (page.78) 1905 0 R (page.79) 1916 0 R (page.8) 1233 0 R (page.80) 1923 0 R (page.81) 1931 0 R (page.82) 1935 0 R (page.83) 1941 0 R (page.84) 1948 0 R (page.85) 1954 0 R (page.9) 1282 0 R (parsing) 1009 0 R (printing) 1014 0 R (pwencrypt) 1017 0 R (rpc-plugin) 1019 0 R (sam) 1016 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.10.1) 262 0 R (section.10.2) 274 0 R (section.10.3) 418 0 R (section.10.4) 558 0 R (section.10.5) 622 0 R (section.10.6) 650 0 R (section.10.7) 678 0 R (section.10.8) 694 0 R (section.11.1) 730 0 R (section.11.2) 734 0 R (section.11.3) 738 0 R (section.11.4) 742 0 R (section.11.5) 746 0 R (section.12.1) 754 0 R (section.13.1) 762 0 R (section.13.2) 766 0 R (section.13.3) 770 0 R (section.13.4) 774 0 R (section.13.5) 790 0 R (section.13.6) 802 0 R (section.13.7) 806 0 R (section.14.1) 814 0 R (section.14.2) 818 0 R (section.14.3) 822 0 R (section.15.1) 830 0 R (section.15.2) 834 0 R (section.15.3) 846 0 R (section.16.1) 858 0 R (section.16.2) 862 0 R (section.17.1) 870 0 R (section.17.2) 882 0 R (section.17.3) 894 0 R (section.17.4) 902 0 R (section.18.1) 918 0 R (section.18.2) 922 0 R (section.2.1) 26 0 R (section.2.2) 30 0 R (section.2.3) 34 0 R (section.2.4) 38 0 R (section.2.5) 42 0 R (section.3.1) 50 0 R (section.3.2) 54 0 R (section.3.3) 58 0 R (section.3.4) 62 0 R (section.3.5) 66 0 R (section.5.1) 90 0 R (section.5.2) 94 0 R (section.5.3) 98 0 R (section.5.4) 162 0 R (section.5.5) 174 0 R (section.6.1) 182 0 R (section.6.2) 198 0 R (section.7.1) 210 0 R (section.7.2) 214 0 R (section.7.3) 218 0 R (section.7.4) 222 0 R (section.7.5) 226 0 R (section.7.6) 230 0 R (section.7.7) 234 0 R (section.7.8) 238 0 R (section.7.9) 242 0 R (section.9.1) 254 0 R (subsection.10.1.1) 266 0 R (subsection.10.1.2) 270 0 R (subsection.10.2.1) 278 0 R (subsection.10.2.2) 282 0 R (subsection.10.2.3) 294 0 R (subsection.10.3.1) 422 0 R (subsection.10.3.10) 522 0 R (subsection.10.3.11) 534 0 R (subsection.10.3.12) 546 0 R (subsection.10.3.2) 426 0 R (subsection.10.3.3) 462 0 R (subsection.10.3.4) 466 0 R (subsection.10.3.5) 470 0 R (subsection.10.3.6) 474 0 R (subsection.10.3.7) 486 0 R (subsection.10.3.8) 498 0 R (subsection.10.3.9) 510 0 R (subsection.10.4.1) 562 0 R (subsection.10.4.2) 574 0 R (subsection.10.4.3) 586 0 R (subsection.10.4.4) 598 0 R (subsection.10.4.5) 610 0 R (subsection.10.5.1) 626 0 R (subsection.10.5.2) 638 0 R (subsection.10.6.1) 654 0 R (subsection.10.6.2) 666 0 R (subsection.10.7.1) 682 0 R (subsection.10.7.2) 686 0 R (subsection.10.7.3) 690 0 R (subsection.10.8.1) 698 0 R (subsection.10.8.2) 710 0 R (subsection.13.4.1) 778 0 R (subsection.13.4.2) 782 0 R (subsection.13.4.3) 786 0 R (subsection.13.5.1) 794 0 R (subsection.13.5.2) 798 0 R (subsection.15.2.1) 838 0 R (subsection.15.2.2) 842 0 R (subsection.15.3.1) 850 0 R (subsection.17.1.1) 874 0 R (subsection.17.1.2) 878 0 R (subsection.17.2.1) 886 0 R (subsection.17.2.2) 890 0 R (subsection.17.3.1) 898 0 R (subsection.17.4.1) 906 0 R (subsection.17.4.2) 910 0 R (subsection.3.5.1) 70 0 R (subsection.3.5.2) 74 0 R (subsection.3.5.3) 78 0 R (subsection.5.3.1) 102 0 R (subsection.5.3.10) 138 0 R (subsection.5.3.11) 142 0 R (subsection.5.3.12) 146 0 R (subsection.5.3.13) 150 0 R (subsection.5.3.14) 154 0 R (subsection.5.3.15) 158 0 R (subsection.5.3.2) 106 0 R (subsection.5.3.3) 110 0 R (subsection.5.3.4) 114 0 R (subsection.5.3.5) 118 0 R (subsection.5.3.6) 122 0 R (subsection.5.3.7) 126 0 R (subsection.5.3.8) 130 0 R (subsection.5.3.9) 134 0 R (subsection.5.4.1) 166 0 R (subsection.5.4.2) 170 0 R (subsection.6.1.1) 186 0 R (subsection.6.1.2) 190 0 R (subsection.6.1.3) 194 0 R (subsection.6.2.1) 202 0 R (subsubsection.10.2.2.1) 286 0 R (subsubsection.10.2.2.2) 290 0 R (subsubsection.10.2.3.1) 298 0 R (subsubsection.10.2.3.10) 334 0 R (subsubsection.10.2.3.11) 338 0 R (subsubsection.10.2.3.12) 342 0 R (subsubsection.10.2.3.13) 346 0 R (subsubsection.10.2.3.14) 350 0 R (subsubsection.10.2.3.15) 354 0 R (subsubsection.10.2.3.16) 358 0 R (subsubsection.10.2.3.17) 362 0 R (subsubsection.10.2.3.18) 366 0 R (subsubsection.10.2.3.19) 370 0 R (subsubsection.10.2.3.2) 302 0 R (subsubsection.10.2.3.20) 374 0 R (subsubsection.10.2.3.21) 378 0 R (subsubsection.10.2.3.22) 382 0 R (subsubsection.10.2.3.23) 386 0 R (subsubsection.10.2.3.24) 390 0 R (subsubsection.10.2.3.25) 394 0 R (subsubsection.10.2.3.26) 398 0 R (subsubsection.10.2.3.27) 402 0 R (subsubsection.10.2.3.28) 406 0 R (subsubsection.10.2.3.29) 410 0 R (subsubsection.10.2.3.3) 306 0 R (subsubsection.10.2.3.30) 414 0 R (subsubsection.10.2.3.4) 310 0 R (subsubsection.10.2.3.5) 314 0 R (subsubsection.10.2.3.6) 318 0 R (subsubsection.10.2.3.7) 322 0 R (subsubsection.10.2.3.8) 326 0 R (subsubsection.10.2.3.9) 330 0 R (subsubsection.10.3.10.1) 526 0 R (subsubsection.10.3.10.2) 530 0 R (subsubsection.10.3.11.1) 538 0 R (subsubsection.10.3.11.2) 542 0 R (subsubsection.10.3.12.1) 550 0 R (subsubsection.10.3.12.2) 554 0 R (subsubsection.10.3.2.1) 430 0 R (subsubsection.10.3.2.2) 434 0 R (subsubsection.10.3.2.3) 438 0 R (subsubsection.10.3.2.4) 442 0 R (subsubsection.10.3.2.5) 446 0 R (subsubsection.10.3.2.6) 450 0 R (subsubsection.10.3.2.7) 454 0 R (subsubsection.10.3.2.8) 458 0 R (subsubsection.10.3.6.1) 478 0 R (subsubsection.10.3.6.2) 482 0 R (subsubsection.10.3.7.1) 490 0 R (subsubsection.10.3.7.2) 494 0 R (subsubsection.10.3.8.1) 502 0 R (subsubsection.10.3.8.2) 506 0 R (subsubsection.10.3.9.1) 514 0 R (subsubsection.10.3.9.2) 518 0 R (subsubsection.10.4.1.1) 566 0 R (subsubsection.10.4.1.2) 570 0 R (subsubsection.10.4.2.1) 578 0 R (subsubsection.10.4.2.2) 582 0 R (subsubsection.10.4.3.1) 590 0 R (subsubsection.10.4.3.2) 594 0 R (subsubsection.10.4.4.1) 602 0 R (subsubsection.10.4.4.2) 606 0 R (subsubsection.10.4.5.1) 614 0 R (subsubsection.10.4.5.2) 618 0 R (subsubsection.10.5.1.1) 630 0 R (subsubsection.10.5.1.2) 634 0 R (subsubsection.10.5.2.1) 642 0 R (subsubsection.10.5.2.2) 646 0 R (subsubsection.10.6.1.1) 658 0 R (subsubsection.10.6.1.2) 662 0 R (subsubsection.10.6.2.1) 670 0 R (subsubsection.10.6.2.2) 674 0 R (subsubsection.10.8.1.1) 702 0 R (subsubsection.10.8.1.2) 706 0 R (subsubsection.10.8.2.1) 714 0 R (subsubsection.10.8.2.2) 718 0 R (subsubsection.10.8.2.3) 722 0 R (tracing) 1011 0 R (unix-smb) 1010 0 R (vfs) 1020 0 R (windows-debug) 1012 0 R (wins) 1015 0 R] +/Names [(CodingSuggestions) 1007 0 R (Doc-Start) 934 0 R (Item.1) 1295 0 R (Item.10) 1317 0 R (Item.100) 1554 0 R (Item.101) 1555 0 R (Item.102) 1556 0 R (Item.103) 1557 0 R (Item.104) 1562 0 R (Item.105) 1567 0 R (Item.106) 1568 0 R (Item.107) 1569 0 R (Item.108) 1570 0 R (Item.109) 1571 0 R (Item.11) 1318 0 R (Item.110) 1778 0 R (Item.111) 1779 0 R (Item.112) 1780 0 R (Item.113) 1781 0 R (Item.114) 1782 0 R (Item.115) 1783 0 R (Item.116) 1784 0 R (Item.117) 1785 0 R (Item.118) 1908 0 R (Item.119) 1909 0 R (Item.12) 1319 0 R (Item.120) 1910 0 R (Item.121) 1911 0 R (Item.122) 1912 0 R (Item.123) 1917 0 R (Item.124) 1918 0 R (Item.125) 1924 0 R (Item.126) 1925 0 R (Item.127) 1927 0 R (Item.128) 1936 0 R (Item.129) 1937 0 R (Item.13) 1320 0 R (Item.14) 1333 0 R (Item.15) 1338 0 R (Item.16) 1339 0 R (Item.17) 1350 0 R (Item.18) 1351 0 R (Item.19) 1352 0 R (Item.2) 1296 0 R (Item.20) 1353 0 R (Item.21) 1354 0 R (Item.22) 1355 0 R (Item.23) 1356 0 R (Item.24) 1357 0 R (Item.25) 1358 0 R (Item.26) 1363 0 R (Item.27) 1364 0 R (Item.28) 1365 0 R (Item.29) 1366 0 R (Item.3) 1297 0 R (Item.30) 1367 0 R (Item.31) 1368 0 R (Item.32) 1369 0 R (Item.33) 1370 0 R (Item.34) 1371 0 R (Item.35) 1372 0 R (Item.36) 1373 0 R (Item.37) 1374 0 R (Item.38) 1375 0 R (Item.39) 1376 0 R (Item.4) 1300 0 R (Item.40) 1377 0 R (Item.41) 1378 0 R (Item.42) 1385 0 R (Item.43) 1386 0 R (Item.44) 1387 0 R (Item.45) 1388 0 R (Item.46) 1389 0 R (Item.47) 1390 0 R (Item.48) 1391 0 R (Item.49) 1392 0 R (Item.5) 1301 0 R (Item.50) 1398 0 R (Item.51) 1399 0 R (Item.52) 1400 0 R (Item.53) 1423 0 R (Item.54) 1424 0 R (Item.55) 1425 0 R (Item.56) 1426 0 R (Item.57) 1431 0 R (Item.58) 1432 0 R (Item.59) 1433 0 R (Item.6) 1302 0 R (Item.60) 1434 0 R (Item.61) 1435 0 R (Item.62) 1436 0 R (Item.63) 1437 0 R (Item.64) 1438 0 R (Item.65) 1439 0 R (Item.66) 1440 0 R (Item.67) 1442 0 R (Item.68) 1443 0 R (Item.69) 1444 0 R (Item.7) 1303 0 R (Item.70) 1450 0 R (Item.71) 1451 0 R (Item.72) 1452 0 R (Item.73) 1453 0 R (Item.74) 1454 0 R (Item.75) 1455 0 R (Item.76) 1456 0 R (Item.77) 1457 0 R (Item.78) 1458 0 R (Item.79) 1459 0 R (Item.8) 1304 0 R (Item.80) 1465 0 R (Item.81) 1466 0 R (Item.82) 1467 0 R (Item.83) 1468 0 R (Item.84) 1469 0 R (Item.85) 1470 0 R (Item.86) 1471 0 R (Item.87) 1473 0 R (Item.88) 1474 0 R (Item.89) 1475 0 R (Item.9) 1309 0 R (Item.90) 1476 0 R (Item.91) 1489 0 R (Item.92) 1490 0 R (Item.93) 1491 0 R (Item.94) 1492 0 R (Item.95) 1536 0 R (Item.96) 1537 0 R (Item.97) 1538 0 R (Item.98) 1539 0 R (Item.99) 1540 0 R (Packaging) 1021 0 R (SMBPASSWDFILEFORMAT) 1845 0 R (architecture) 1005 0 R (chapter*.1) 1027 0 R (chapter.1) 6 0 R (chapter.10) 258 0 R (chapter.11) 726 0 R (chapter.12) 750 0 R (chapter.13) 758 0 R (chapter.14) 810 0 R (chapter.15) 826 0 R (chapter.16) 854 0 R (chapter.17) 866 0 R (chapter.18) 914 0 R (chapter.19) 926 0 R (chapter.2) 22 0 R (chapter.3) 46 0 R (chapter.4) 82 0 R (chapter.5) 86 0 R (chapter.6) 178 0 R (chapter.7) 206 0 R (chapter.8) 246 0 R (chapter.9) 250 0 R (contributing) 1022 0 R (debug) 1006 0 R (id2738317) 1310 0 R (id2738368) 1311 0 R (id2738434) 1316 0 R (id2738557) 1326 0 R (id2738687) 1331 0 R (id2738732) 1332 0 R (id2739102) 1294 0 R (id2739152) 1298 0 R (id2739189) 1299 0 R (id2739211) 1283 0 R (id2739295) 1284 0 R (id2739325) 1289 0 R (id2804843) 1340 0 R (id2804850) 1341 0 R (id2804870) 1342 0 R (id2804893) 1343 0 R (id2805223) 1401 0 R (id2805236) 1402 0 R (id2805250) 1403 0 R (id2805264) 1404 0 R (id2805278) 1405 0 R (id2805293) 1406 0 R (id2805308) 1407 0 R (id2805322) 1408 0 R (id2805336) 1409 0 R (id2805351) 1414 0 R (id2805365) 1415 0 R (id2805380) 1416 0 R (id2805394) 1417 0 R (id2806096) 1418 0 R (id2806110) 1419 0 R (id2806125) 1420 0 R (id2806141) 1421 0 R (id2806176) 1422 0 R (id2806328) 1441 0 R (id2806433) 1383 0 R (id2806458) 1384 0 R (id2807011) 1449 0 R (id2807131) 1464 0 R (id2807216) 1472 0 R (id2807270) 1477 0 R (id2807334) 1482 0 R (id2807430) 1483 0 R (id2808283) 1493 0 R (id2808347) 1506 0 R (id2808409) 1511 0 R (id2808440) 1512 0 R (id2808465) 1513 0 R (id2808510) 1514 0 R (id2808961) 1498 0 R (id2808983) 1499 0 R (id2809048) 1500 0 R (id2809084) 1505 0 R (id2809522) 1545 0 R (id2809720) 1563 0 R (id2809754) 1564 0 R (id2810342) 1565 0 R (id2810349) 1566 0 R (id2810424) 1572 0 R (id2810431) 1573 0 R (id2810505) 1578 0 R (id2810637) 1579 0 R (id2810644) 1580 0 R (id2810655) 1581 0 R (id2810666) 1582 0 R (id2810680) 1583 0 R (id2810692) 1584 0 R (id2810787) 1535 0 R (id2811049) 1585 0 R (id2811063) 1586 0 R (id2811119) 1591 0 R (id2811161) 1592 0 R (id2811189) 1593 0 R (id2811231) 1594 0 R (id2811317) 1595 0 R (id2811410) 1596 0 R (id2811437) 1597 0 R (id2811524) 1598 0 R (id2811593) 1604 0 R (id2820210) 1605 0 R (id2820288) 1606 0 R (id2820329) 1607 0 R (id2820411) 1608 0 R (id2820464) 1609 0 R (id2820634) 1614 0 R (id2820737) 1615 0 R (id2820776) 1616 0 R (id2820919) 1617 0 R (id2821032) 1618 0 R (id2821596) 1623 0 R (id2821690) 1624 0 R (id2821732) 1629 0 R (id2821901) 1630 0 R (id2822368) 1635 0 R (id2822380) 1636 0 R (id2822482) 1637 0 R (id2822672) 1642 0 R (id2822805) 1643 0 R (id2822831) 1644 0 R (id2822870) 1645 0 R (id2823010) 1651 0 R (id2823050) 1652 0 R (id2823201) 1653 0 R (id2823273) 1654 0 R (id2823353) 1655 0 R (id2823399) 1656 0 R (id2823579) 1661 0 R (id2823744) 1662 0 R (id2823757) 1663 0 R (id2823827) 1668 0 R (id2823869) 1669 0 R (id2823883) 1670 0 R (id2823922) 1671 0 R (id2823975) 1672 0 R (id2823983) 1673 0 R (id2823995) 1674 0 R (id2824067) 1675 0 R (id2824074) 1676 0 R (id2824087) 1677 0 R (id2824176) 1682 0 R (id2824183) 1683 0 R (id2824210) 1684 0 R (id2824242) 1685 0 R (id2824256) 1686 0 R (id2824355) 1687 0 R (id2824452) 1688 0 R (id2824466) 1689 0 R (id2824579) 1694 0 R (id2824678) 1695 0 R (id2824838) 1696 0 R (id2824870) 1697 0 R (id2824940) 1698 0 R (id2824973) 1703 0 R (id2825004) 1704 0 R (id2825072) 1705 0 R (id2825120) 1706 0 R (id2825159) 1707 0 R (id2825201) 1708 0 R (id2825235) 1709 0 R (id2825250) 1710 0 R (id2825276) 1716 0 R (id2825338) 1717 0 R (id2825353) 1718 0 R (id2825380) 1719 0 R (id2825430) 1720 0 R (id2825447) 1721 0 R (id2825461) 1726 0 R (id2825587) 1727 0 R (id2825708) 1728 0 R (id2825736) 1729 0 R (id2825919) 1730 0 R (id2826034) 1735 0 R (id2826079) 1736 0 R (id2826100) 1737 0 R (id2826225) 1738 0 R (id2826298) 1739 0 R (id2826312) 1740 0 R (id2826352) 1741 0 R (id2826415) 1746 0 R (id2826422) 1747 0 R (id2826584) 1748 0 R (id2826664) 1753 0 R (id2826714) 1754 0 R (id2826754) 1755 0 R (id2826761) 1756 0 R (id2826887) 1757 0 R (id2827068) 1762 0 R (id2827083) 1763 0 R (id2827131) 1764 0 R (id2827190) 1765 0 R (id2827512) 1790 0 R (id2827525) 1791 0 R (id2827858) 1810 0 R (id2827986) 1815 0 R (id2828012) 1816 0 R (id2828081) 1817 0 R (id2828088) 1818 0 R (id2828104) 1819 0 R (id2828130) 1824 0 R (id2828152) 1825 0 R (id2828159) 1826 0 R (id2828181) 1804 0 R (id2828612) 1771 0 R (id2828628) 1772 0 R (id2828720) 1773 0 R (id2829402) 1827 0 R (id2829432) 1828 0 R (id2829518) 1833 0 R (id2830248) 1838 0 R (id2830273) 1839 0 R (id2830367) 1844 0 R (id2831014) 1893 0 R (id2831234) 1906 0 R (id2832151) 1855 0 R (id2832196) 1856 0 R (id2832226) 1857 0 R (id2832266) 1858 0 R (id2832295) 1863 0 R (id2832356) 1864 0 R (id2832513) 1869 0 R (id2832532) 1870 0 R (id2832836) 1907 0 R (id2833247) 1942 0 R (id2833254) 1943 0 R (id2833278) 1944 0 R (id2833342) 1949 0 R (id2833371) 1950 0 R (id2834775) 1875 0 R (id2834781) 1876 0 R (id2834882) 1886 0 R (id2834946) 1887 0 R (id2834954) 1888 0 R (internals) 1008 0 R (modules) 1018 0 R (netbios) 1004 0 R (ntdomain) 1013 0 R (page.1) 933 0 R (page.10) 1288 0 R (page.11) 1293 0 R (page.12) 1308 0 R (page.13) 1315 0 R (page.14) 1325 0 R (page.15) 1330 0 R (page.16) 1337 0 R (page.17) 1347 0 R (page.18) 1362 0 R (page.19) 1382 0 R (page.2) 945 0 R (page.20) 1397 0 R (page.21) 1413 0 R (page.22) 1430 0 R (page.23) 1448 0 R (page.24) 1463 0 R (page.25) 1481 0 R (page.26) 1488 0 R (page.27) 1497 0 R (page.28) 1504 0 R (page.29) 1510 0 R (page.3) 962 0 R (page.30) 1518 0 R (page.31) 1522 0 R (page.32) 1530 0 R (page.33) 1534 0 R (page.34) 1544 0 R (page.35) 1561 0 R (page.36) 1577 0 R (page.37) 1590 0 R (page.38) 1603 0 R (page.39) 1613 0 R (page.4) 1026 0 R (page.40) 1622 0 R (page.41) 1628 0 R (page.42) 1634 0 R (page.43) 1641 0 R (page.44) 1650 0 R (page.45) 1660 0 R (page.46) 1667 0 R (page.47) 1681 0 R (page.48) 1693 0 R (page.49) 1702 0 R (page.5) 1071 0 R (page.50) 1715 0 R (page.51) 1725 0 R (page.52) 1734 0 R (page.53) 1745 0 R (page.54) 1752 0 R (page.55) 1761 0 R (page.56) 1770 0 R (page.57) 1777 0 R (page.58) 1789 0 R (page.59) 1795 0 R (page.6) 1125 0 R (page.60) 1799 0 R (page.61) 1803 0 R (page.62) 1809 0 R (page.63) 1814 0 R (page.64) 1823 0 R (page.65) 1832 0 R (page.66) 1837 0 R (page.67) 1843 0 R (page.68) 1850 0 R (page.69) 1854 0 R (page.7) 1178 0 R (page.70) 1862 0 R (page.71) 1868 0 R (page.72) 1874 0 R (page.73) 1880 0 R (page.74) 1885 0 R (page.75) 1892 0 R (page.76) 1897 0 R (page.77) 1901 0 R (page.78) 1905 0 R (page.79) 1916 0 R (page.8) 1233 0 R (page.80) 1923 0 R (page.81) 1931 0 R (page.82) 1935 0 R (page.83) 1941 0 R (page.84) 1948 0 R (page.85) 1954 0 R (page.9) 1282 0 R (parsing) 1009 0 R (printing) 1014 0 R (pwencrypt) 1017 0 R (rpc-plugin) 1019 0 R (sam) 1016 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.10.1) 262 0 R (section.10.2) 274 0 R (section.10.3) 418 0 R (section.10.4) 558 0 R (section.10.5) 622 0 R (section.10.6) 650 0 R (section.10.7) 678 0 R (section.10.8) 694 0 R (section.11.1) 730 0 R (section.11.2) 734 0 R (section.11.3) 738 0 R (section.11.4) 742 0 R (section.11.5) 746 0 R (section.12.1) 754 0 R (section.13.1) 762 0 R (section.13.2) 766 0 R (section.13.3) 770 0 R (section.13.4) 774 0 R (section.13.5) 790 0 R (section.13.6) 802 0 R (section.13.7) 806 0 R (section.14.1) 814 0 R (section.14.2) 818 0 R (section.14.3) 822 0 R (section.15.1) 830 0 R (section.15.2) 834 0 R (section.15.3) 846 0 R (section.16.1) 858 0 R (section.16.2) 862 0 R (section.17.1) 870 0 R (section.17.2) 882 0 R (section.17.3) 894 0 R (section.17.4) 902 0 R (section.18.1) 918 0 R (section.18.2) 922 0 R (section.2.1) 26 0 R (section.2.2) 30 0 R (section.2.3) 34 0 R (section.2.4) 38 0 R (section.2.5) 42 0 R (section.3.1) 50 0 R (section.3.2) 54 0 R (section.3.3) 58 0 R (section.3.4) 62 0 R (section.3.5) 66 0 R (section.5.1) 90 0 R (section.5.2) 94 0 R (section.5.3) 98 0 R (section.5.4) 162 0 R (section.5.5) 174 0 R (section.6.1) 182 0 R (section.6.2) 198 0 R (section.7.1) 210 0 R (section.7.2) 214 0 R (section.7.3) 218 0 R (section.7.4) 222 0 R (section.7.5) 226 0 R (section.7.6) 230 0 R (section.7.7) 234 0 R (section.7.8) 238 0 R (section.7.9) 242 0 R (section.9.1) 254 0 R (subsection.10.1.1) 266 0 R (subsection.10.1.2) 270 0 R (subsection.10.2.1) 278 0 R (subsection.10.2.2) 282 0 R (subsection.10.2.3) 294 0 R (subsection.10.3.1) 422 0 R (subsection.10.3.10) 522 0 R (subsection.10.3.11) 534 0 R (subsection.10.3.12) 546 0 R (subsection.10.3.2) 426 0 R (subsection.10.3.3) 462 0 R (subsection.10.3.4) 466 0 R (subsection.10.3.5) 470 0 R (subsection.10.3.6) 474 0 R (subsection.10.3.7) 486 0 R (subsection.10.3.8) 498 0 R (subsection.10.3.9) 510 0 R (subsection.10.4.1) 562 0 R (subsection.10.4.2) 574 0 R (subsection.10.4.3) 586 0 R (subsection.10.4.4) 598 0 R (subsection.10.4.5) 610 0 R (subsection.10.5.1) 626 0 R (subsection.10.5.2) 638 0 R (subsection.10.6.1) 654 0 R (subsection.10.6.2) 666 0 R (subsection.10.7.1) 682 0 R (subsection.10.7.2) 686 0 R (subsection.10.7.3) 690 0 R (subsection.10.8.1) 698 0 R (subsection.10.8.2) 710 0 R (subsection.13.4.1) 778 0 R (subsection.13.4.2) 782 0 R (subsection.13.4.3) 786 0 R (subsection.13.5.1) 794 0 R (subsection.13.5.2) 798 0 R (subsection.15.2.1) 838 0 R (subsection.15.2.2) 842 0 R (subsection.15.3.1) 850 0 R (subsection.17.1.1) 874 0 R (subsection.17.1.2) 878 0 R (subsection.17.2.1) 886 0 R (subsection.17.2.2) 890 0 R (subsection.17.3.1) 898 0 R (subsection.17.4.1) 906 0 R (subsection.17.4.2) 910 0 R (subsection.3.5.1) 70 0 R (subsection.3.5.2) 74 0 R (subsection.3.5.3) 78 0 R (subsection.5.3.1) 102 0 R (subsection.5.3.10) 138 0 R (subsection.5.3.11) 142 0 R (subsection.5.3.12) 146 0 R (subsection.5.3.13) 150 0 R (subsection.5.3.14) 154 0 R (subsection.5.3.15) 158 0 R (subsection.5.3.2) 106 0 R (subsection.5.3.3) 110 0 R (subsection.5.3.4) 114 0 R (subsection.5.3.5) 118 0 R (subsection.5.3.6) 122 0 R (subsection.5.3.7) 126 0 R (subsection.5.3.8) 130 0 R (subsection.5.3.9) 134 0 R (subsection.5.4.1) 166 0 R (subsection.5.4.2) 170 0 R (subsection.6.1.1) 186 0 R (subsection.6.1.2) 190 0 R (subsection.6.1.3) 194 0 R (subsection.6.2.1) 202 0 R (subsubsection.10.2.2.1) 286 0 R (subsubsection.10.2.2.2) 290 0 R (subsubsection.10.2.3.1) 298 0 R (subsubsection.10.2.3.10) 334 0 R (subsubsection.10.2.3.11) 338 0 R (subsubsection.10.2.3.12) 342 0 R (subsubsection.10.2.3.13) 346 0 R (subsubsection.10.2.3.14) 350 0 R (subsubsection.10.2.3.15) 354 0 R (subsubsection.10.2.3.16) 358 0 R (subsubsection.10.2.3.17) 362 0 R (subsubsection.10.2.3.18) 366 0 R (subsubsection.10.2.3.19) 370 0 R (subsubsection.10.2.3.2) 302 0 R (subsubsection.10.2.3.20) 374 0 R (subsubsection.10.2.3.21) 378 0 R (subsubsection.10.2.3.22) 382 0 R (subsubsection.10.2.3.23) 386 0 R (subsubsection.10.2.3.24) 390 0 R (subsubsection.10.2.3.25) 394 0 R (subsubsection.10.2.3.26) 398 0 R (subsubsection.10.2.3.27) 402 0 R (subsubsection.10.2.3.28) 406 0 R (subsubsection.10.2.3.29) 410 0 R (subsubsection.10.2.3.3) 306 0 R (subsubsection.10.2.3.30) 414 0 R (subsubsection.10.2.3.4) 310 0 R (subsubsection.10.2.3.5) 314 0 R (subsubsection.10.2.3.6) 318 0 R (subsubsection.10.2.3.7) 322 0 R (subsubsection.10.2.3.8) 326 0 R (subsubsection.10.2.3.9) 330 0 R (subsubsection.10.3.10.1) 526 0 R (subsubsection.10.3.10.2) 530 0 R (subsubsection.10.3.11.1) 538 0 R (subsubsection.10.3.11.2) 542 0 R (subsubsection.10.3.12.1) 550 0 R (subsubsection.10.3.12.2) 554 0 R (subsubsection.10.3.2.1) 430 0 R (subsubsection.10.3.2.2) 434 0 R (subsubsection.10.3.2.3) 438 0 R (subsubsection.10.3.2.4) 442 0 R (subsubsection.10.3.2.5) 446 0 R (subsubsection.10.3.2.6) 450 0 R (subsubsection.10.3.2.7) 454 0 R (subsubsection.10.3.2.8) 458 0 R (subsubsection.10.3.6.1) 478 0 R (subsubsection.10.3.6.2) 482 0 R (subsubsection.10.3.7.1) 490 0 R (subsubsection.10.3.7.2) 494 0 R (subsubsection.10.3.8.1) 502 0 R (subsubsection.10.3.8.2) 506 0 R (subsubsection.10.3.9.1) 514 0 R (subsubsection.10.3.9.2) 518 0 R (subsubsection.10.4.1.1) 566 0 R (subsubsection.10.4.1.2) 570 0 R (subsubsection.10.4.2.1) 578 0 R (subsubsection.10.4.2.2) 582 0 R (subsubsection.10.4.3.1) 590 0 R (subsubsection.10.4.3.2) 594 0 R (subsubsection.10.4.4.1) 602 0 R (subsubsection.10.4.4.2) 606 0 R (subsubsection.10.4.5.1) 614 0 R (subsubsection.10.4.5.2) 618 0 R (subsubsection.10.5.1.1) 630 0 R (subsubsection.10.5.1.2) 634 0 R (subsubsection.10.5.2.1) 642 0 R (subsubsection.10.5.2.2) 646 0 R (subsubsection.10.6.1.1) 658 0 R (subsubsection.10.6.1.2) 662 0 R (subsubsection.10.6.2.1) 670 0 R (subsubsection.10.6.2.2) 674 0 R (subsubsection.10.8.1.1) 702 0 R (subsubsection.10.8.1.2) 706 0 R (subsubsection.10.8.2.1) 714 0 R (subsubsection.10.8.2.2) 718 0 R (subsubsection.10.8.2.3) 722 0 R (tracing) 1011 0 R (unix-smb) 1010 0 R (vfs) 1020 0 R (windows-debug) 1012 0 R (wins) 1015 0 R] /Limits [(CodingSuggestions) (wins)] >> endobj 1979 0 obj << @@ -10234,11 +10146,13 @@ endobj /Names 1980 0 R /PageMode /UseOutlines /URI<> /ViewerPreferences<<>> /OpenAction 929 0 R -/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10b) +/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10a) >> endobj 1982 0 obj << -/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10b)/Keywords() -/CreationDate (D:20030701232600) +/Producer (pdfTeX-1.10a) +/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10a)/Keywords() +/Creator (TeX) +/CreationDate (D:20030715231700) >> endobj xref 0 1983 @@ -10248,1983 +10162,1983 @@ xref 0000000004 00000 f 0000000000 00000 f 0000000009 00000 n -0000093861 00000 n -0000481071 00000 n +0000086708 00000 n +0000450715 00000 n 0000000054 00000 n 0000000130 00000 n -0000093984 00000 n -0000480999 00000 n +0000086831 00000 n +0000450643 00000 n 0000000177 00000 n 0000000207 00000 n -0000094108 00000 n -0000480913 00000 n +0000086955 00000 n +0000450557 00000 n 0000000255 00000 n 0000000295 00000 n -0000097715 00000 n -0000480840 00000 n +0000090481 00000 n +0000450484 00000 n 0000000343 00000 n 0000000378 00000 n -0000101373 00000 n -0000480715 00000 n +0000093909 00000 n +0000450359 00000 n 0000000424 00000 n 0000000463 00000 n -0000101497 00000 n -0000480641 00000 n +0000094033 00000 n +0000450285 00000 n 0000000511 00000 n 0000000546 00000 n -0000101809 00000 n -0000480554 00000 n +0000094345 00000 n +0000450198 00000 n 0000000594 00000 n 0000000641 00000 n -0000101932 00000 n -0000480467 00000 n +0000094468 00000 n +0000450111 00000 n 0000000689 00000 n 0000000726 00000 n -0000106004 00000 n -0000480380 00000 n +0000098466 00000 n +0000450024 00000 n 0000000774 00000 n 0000000811 00000 n -0000106127 00000 n -0000480306 00000 n +0000098589 00000 n +0000449950 00000 n 0000000859 00000 n 0000000893 00000 n -0000108825 00000 n -0000480180 00000 n +0000101133 00000 n +0000449824 00000 n 0000000939 00000 n 0000000982 00000 n -0000108949 00000 n -0000480106 00000 n +0000101257 00000 n +0000449750 00000 n 0000001030 00000 n 0000001070 00000 n -0000111717 00000 n -0000480019 00000 n +0000103997 00000 n +0000449663 00000 n 0000001118 00000 n 0000001160 00000 n -0000114029 00000 n -0000479932 00000 n +0000106234 00000 n +0000449576 00000 n 0000001208 00000 n 0000001253 00000 n -0000114153 00000 n -0000479845 00000 n +0000106358 00000 n +0000449489 00000 n 0000001301 00000 n 0000001346 00000 n -0000116874 00000 n -0000479734 00000 n +0000108945 00000 n +0000449378 00000 n 0000001394 00000 n 0000001430 00000 n -0000116997 00000 n -0000479660 00000 n +0000109068 00000 n +0000449304 00000 n 0000001483 00000 n 0000001519 00000 n -0000117121 00000 n -0000479573 00000 n +0000109192 00000 n +0000449217 00000 n 0000001572 00000 n 0000001607 00000 n -0000117244 00000 n -0000479499 00000 n +0000109315 00000 n +0000449143 00000 n 0000001660 00000 n 0000001712 00000 n -0000121870 00000 n -0000479410 00000 n +0000113613 00000 n +0000449054 00000 n 0000001758 00000 n 0000001797 00000 n -0000131620 00000 n -0000479282 00000 n +0000122466 00000 n +0000448926 00000 n 0000001843 00000 n 0000001879 00000 n -0000131744 00000 n -0000479208 00000 n +0000122590 00000 n +0000448852 00000 n 0000001927 00000 n 0000001968 00000 n -0000131867 00000 n -0000479121 00000 n +0000122713 00000 n +0000448765 00000 n 0000002016 00000 n 0000002056 00000 n -0000135341 00000 n -0000478992 00000 n +0000125897 00000 n +0000448636 00000 n 0000002104 00000 n 0000002149 00000 n -0000135464 00000 n -0000478914 00000 n +0000126020 00000 n +0000448558 00000 n 0000002203 00000 n 0000002244 00000 n -0000135588 00000 n -0000478822 00000 n +0000126144 00000 n +0000448466 00000 n 0000002298 00000 n 0000002339 00000 n -0000135713 00000 n -0000478730 00000 n +0000126269 00000 n +0000448374 00000 n 0000002393 00000 n 0000002439 00000 n -0000135837 00000 n -0000478638 00000 n +0000126393 00000 n +0000448282 00000 n 0000002493 00000 n 0000002534 00000 n -0000135962 00000 n -0000478546 00000 n +0000126518 00000 n +0000448190 00000 n 0000002588 00000 n 0000002629 00000 n -0000136087 00000 n -0000478454 00000 n +0000126643 00000 n +0000448098 00000 n 0000002683 00000 n 0000002725 00000 n -0000136212 00000 n -0000478362 00000 n +0000126768 00000 n +0000448006 00000 n 0000002779 00000 n 0000002821 00000 n -0000136336 00000 n -0000478270 00000 n +0000126892 00000 n +0000447914 00000 n 0000002875 00000 n 0000002921 00000 n -0000138977 00000 n -0000478178 00000 n +0000129227 00000 n +0000447822 00000 n 0000002975 00000 n 0000003021 00000 n -0000139101 00000 n -0000478086 00000 n +0000129351 00000 n +0000447730 00000 n 0000003076 00000 n 0000003124 00000 n -0000139226 00000 n -0000477994 00000 n +0000129476 00000 n +0000447638 00000 n 0000003179 00000 n 0000003227 00000 n -0000139351 00000 n -0000477902 00000 n +0000129601 00000 n +0000447546 00000 n 0000003282 00000 n 0000003325 00000 n -0000139474 00000 n -0000477810 00000 n +0000129724 00000 n +0000447454 00000 n 0000003380 00000 n 0000003423 00000 n -0000139599 00000 n -0000477718 00000 n +0000129849 00000 n +0000447362 00000 n 0000003478 00000 n 0000003526 00000 n -0000139724 00000 n -0000477640 00000 n +0000129974 00000 n +0000447284 00000 n 0000003581 00000 n 0000003629 00000 n -0000139848 00000 n -0000477510 00000 n +0000130098 00000 n +0000447154 00000 n 0000003678 00000 n 0000003723 00000 n -0000139973 00000 n -0000477431 00000 n +0000130223 00000 n +0000447075 00000 n 0000003777 00000 n 0000003813 00000 n -0000145052 00000 n -0000477352 00000 n +0000134944 00000 n +0000446996 00000 n 0000003867 00000 n 0000003905 00000 n -0000146948 00000 n -0000477274 00000 n +0000136612 00000 n +0000446918 00000 n 0000003954 00000 n 0000003998 00000 n -0000150637 00000 n -0000477142 00000 n +0000140004 00000 n +0000446786 00000 n 0000004045 00000 n 0000004084 00000 n -0000150762 00000 n -0000477024 00000 n +0000140129 00000 n +0000446668 00000 n 0000004133 00000 n 0000004173 00000 n -0000151328 00000 n -0000476945 00000 n +0000140695 00000 n +0000446589 00000 n 0000004227 00000 n 0000004275 00000 n -0000151704 00000 n -0000476852 00000 n +0000141071 00000 n +0000446496 00000 n 0000004329 00000 n 0000004384 00000 n -0000153670 00000 n -0000476773 00000 n +0000143010 00000 n +0000446417 00000 n 0000004438 00000 n 0000004488 00000 n -0000153795 00000 n -0000476655 00000 n +0000143135 00000 n +0000446299 00000 n 0000004537 00000 n 0000004567 00000 n -0000155916 00000 n -0000476590 00000 n +0000145152 00000 n +0000446234 00000 n 0000004621 00000 n 0000004661 00000 n -0000159458 00000 n -0000476457 00000 n +0000148630 00000 n +0000446101 00000 n 0000004708 00000 n 0000004753 00000 n -0000159583 00000 n -0000476378 00000 n +0000148755 00000 n +0000446022 00000 n 0000004802 00000 n 0000004838 00000 n -0000159708 00000 n -0000476285 00000 n +0000148880 00000 n +0000445929 00000 n 0000004887 00000 n 0000004920 00000 n -0000159833 00000 n -0000476192 00000 n +0000149005 00000 n +0000445836 00000 n 0000004969 00000 n 0000005007 00000 n -0000163657 00000 n -0000476099 00000 n +0000152791 00000 n +0000445743 00000 n 0000005056 00000 n 0000005089 00000 n -0000163782 00000 n -0000476006 00000 n +0000152916 00000 n +0000445650 00000 n 0000005138 00000 n 0000005169 00000 n -0000167936 00000 n -0000475913 00000 n +0000156882 00000 n +0000445557 00000 n 0000005218 00000 n 0000005252 00000 n -0000168061 00000 n -0000475820 00000 n +0000157007 00000 n +0000445464 00000 n 0000005301 00000 n 0000005338 00000 n -0000168186 00000 n -0000475727 00000 n +0000157132 00000 n +0000445371 00000 n 0000005387 00000 n 0000005423 00000 n -0000168311 00000 n -0000475648 00000 n +0000157257 00000 n +0000445292 00000 n 0000005472 00000 n 0000005515 00000 n -0000174329 00000 n -0000475554 00000 n +0000163244 00000 n +0000445198 00000 n 0000005562 00000 n 0000005610 00000 n -0000177167 00000 n -0000475421 00000 n +0000165923 00000 n +0000445065 00000 n 0000005657 00000 n 0000005716 00000 n -0000177292 00000 n -0000475356 00000 n +0000166048 00000 n +0000445000 00000 n 0000005765 00000 n 0000005814 00000 n -0000183266 00000 n -0000475223 00000 n +0000171787 00000 n +0000444867 00000 n 0000005862 00000 n 0000005900 00000 n -0000183391 00000 n -0000475105 00000 n +0000171912 00000 n +0000444749 00000 n 0000005950 00000 n 0000005987 00000 n -0000187432 00000 n -0000475026 00000 n +0000175663 00000 n +0000444670 00000 n 0000006042 00000 n 0000006076 00000 n -0000187557 00000 n -0000474947 00000 n +0000175788 00000 n +0000444591 00000 n 0000006131 00000 n 0000006165 00000 n -0000187682 00000 n -0000474815 00000 n +0000175913 00000 n +0000444459 00000 n 0000006215 00000 n 0000006260 00000 n -0000187807 00000 n -0000474736 00000 n +0000176038 00000 n +0000444380 00000 n 0000006315 00000 n 0000006347 00000 n -0000188245 00000 n -0000474604 00000 n +0000176476 00000 n +0000444248 00000 n 0000006402 00000 n 0000006441 00000 n -0000188368 00000 n -0000474525 00000 n +0000176599 00000 n +0000444169 00000 n 0000006501 00000 n 0000006547 00000 n -0000191169 00000 n -0000474446 00000 n +0000178771 00000 n +0000444090 00000 n 0000006607 00000 n 0000006653 00000 n -0000191294 00000 n -0000474327 00000 n +0000178896 00000 n +0000443971 00000 n 0000006708 00000 n 0000006745 00000 n -0000191417 00000 n -0000474248 00000 n +0000179019 00000 n +0000443892 00000 n 0000006805 00000 n 0000006840 00000 n -0000191542 00000 n -0000474155 00000 n +0000179144 00000 n +0000443799 00000 n 0000006900 00000 n 0000006933 00000 n -0000191667 00000 n -0000474062 00000 n +0000179269 00000 n +0000443706 00000 n 0000006993 00000 n 0000007027 00000 n -0000191792 00000 n -0000473969 00000 n +0000179394 00000 n +0000443613 00000 n 0000007087 00000 n 0000007122 00000 n -0000191917 00000 n -0000473876 00000 n +0000179519 00000 n +0000443520 00000 n 0000007182 00000 n 0000007246 00000 n -0000192040 00000 n -0000473783 00000 n +0000179642 00000 n +0000443427 00000 n 0000007306 00000 n 0000007349 00000 n -0000192164 00000 n -0000473690 00000 n +0000179766 00000 n +0000443334 00000 n 0000007409 00000 n 0000007470 00000 n -0000195297 00000 n -0000473597 00000 n +0000182177 00000 n +0000443241 00000 n 0000007530 00000 n 0000007612 00000 n -0000195422 00000 n -0000473504 00000 n +0000182302 00000 n +0000443148 00000 n 0000007672 00000 n 0000007726 00000 n -0000195547 00000 n -0000473411 00000 n +0000182427 00000 n +0000443055 00000 n 0000007787 00000 n 0000007857 00000 n -0000195672 00000 n -0000473318 00000 n +0000182552 00000 n +0000442962 00000 n 0000007918 00000 n 0000007982 00000 n -0000195796 00000 n -0000473225 00000 n +0000182676 00000 n +0000442869 00000 n 0000008043 00000 n 0000008106 00000 n -0000195921 00000 n -0000473132 00000 n +0000182801 00000 n +0000442776 00000 n 0000008167 00000 n 0000008229 00000 n -0000196046 00000 n -0000473039 00000 n +0000182926 00000 n +0000442683 00000 n 0000008290 00000 n 0000008380 00000 n -0000196171 00000 n -0000472946 00000 n +0000183051 00000 n +0000442590 00000 n 0000008441 00000 n 0000008506 00000 n -0000199633 00000 n -0000472853 00000 n +0000185711 00000 n +0000442497 00000 n 0000008567 00000 n 0000008646 00000 n -0000199758 00000 n -0000472760 00000 n +0000185836 00000 n +0000442404 00000 n 0000008707 00000 n 0000008783 00000 n -0000199882 00000 n -0000472667 00000 n +0000185960 00000 n +0000442311 00000 n 0000008844 00000 n 0000008908 00000 n -0000200007 00000 n -0000472574 00000 n +0000186085 00000 n +0000442218 00000 n 0000008969 00000 n 0000009061 00000 n -0000200132 00000 n -0000472481 00000 n +0000186210 00000 n +0000442125 00000 n 0000009122 00000 n 0000009222 00000 n -0000200257 00000 n -0000472388 00000 n +0000186335 00000 n +0000442032 00000 n 0000009283 00000 n 0000009364 00000 n -0000203493 00000 n -0000472295 00000 n +0000188800 00000 n +0000441939 00000 n 0000009425 00000 n 0000009505 00000 n -0000203618 00000 n -0000472202 00000 n +0000188925 00000 n +0000441846 00000 n 0000009566 00000 n 0000009617 00000 n -0000203743 00000 n -0000472109 00000 n +0000189050 00000 n +0000441753 00000 n 0000009678 00000 n 0000009744 00000 n -0000203868 00000 n -0000472016 00000 n +0000189175 00000 n +0000441660 00000 n 0000009805 00000 n 0000009893 00000 n -0000203993 00000 n -0000471923 00000 n +0000189300 00000 n +0000441567 00000 n 0000009954 00000 n 0000010016 00000 n -0000207561 00000 n -0000471830 00000 n +0000191620 00000 n +0000441474 00000 n 0000010077 00000 n 0000010172 00000 n -0000207686 00000 n -0000471737 00000 n +0000191745 00000 n +0000441381 00000 n 0000010233 00000 n 0000010316 00000 n -0000212469 00000 n -0000471644 00000 n +0000194815 00000 n +0000441288 00000 n 0000010377 00000 n 0000010432 00000 n -0000212594 00000 n -0000471565 00000 n +0000194940 00000 n +0000441209 00000 n 0000010493 00000 n 0000010544 00000 n -0000216316 00000 n -0000471432 00000 n +0000198604 00000 n +0000441076 00000 n 0000010594 00000 n 0000010649 00000 n -0000216441 00000 n -0000471353 00000 n +0000198729 00000 n +0000440997 00000 n 0000010704 00000 n 0000010742 00000 n -0000216566 00000 n -0000471221 00000 n +0000198854 00000 n +0000440865 00000 n 0000010797 00000 n 0000010830 00000 n -0000220195 00000 n -0000471142 00000 n +0000202039 00000 n +0000440786 00000 n 0000010890 00000 n 0000010985 00000 n -0000220320 00000 n -0000471049 00000 n +0000202164 00000 n +0000440693 00000 n 0000011045 00000 n 0000011098 00000 n -0000220445 00000 n -0000470956 00000 n +0000202289 00000 n +0000440600 00000 n 0000011158 00000 n 0000011202 00000 n -0000220570 00000 n -0000470863 00000 n +0000202414 00000 n +0000440507 00000 n 0000011262 00000 n 0000011308 00000 n -0000224302 00000 n -0000470770 00000 n +0000205431 00000 n +0000440414 00000 n 0000011368 00000 n 0000011414 00000 n -0000224427 00000 n -0000470677 00000 n +0000205556 00000 n +0000440321 00000 n 0000011474 00000 n 0000011520 00000 n -0000224552 00000 n -0000470584 00000 n +0000205681 00000 n +0000440228 00000 n 0000011580 00000 n 0000011626 00000 n -0000224677 00000 n -0000470505 00000 n +0000205806 00000 n +0000440149 00000 n 0000011686 00000 n 0000011732 00000 n -0000224802 00000 n -0000470412 00000 n +0000205931 00000 n +0000440056 00000 n 0000011787 00000 n 0000011818 00000 n -0000224927 00000 n -0000470319 00000 n +0000206056 00000 n +0000439963 00000 n 0000011873 00000 n 0000011919 00000 n -0000228615 00000 n -0000470226 00000 n +0000209048 00000 n +0000439870 00000 n 0000011974 00000 n 0000012026 00000 n -0000228739 00000 n -0000470094 00000 n +0000209172 00000 n +0000439738 00000 n 0000012081 00000 n 0000012123 00000 n -0000228864 00000 n -0000470015 00000 n +0000209297 00000 n +0000439659 00000 n 0000012183 00000 n 0000012219 00000 n -0000231088 00000 n -0000469936 00000 n +0000211039 00000 n +0000439580 00000 n 0000012279 00000 n 0000012316 00000 n -0000231213 00000 n -0000469804 00000 n +0000211164 00000 n +0000439448 00000 n 0000012371 00000 n 0000012419 00000 n -0000231338 00000 n -0000469725 00000 n +0000211289 00000 n +0000439369 00000 n 0000012479 00000 n 0000012515 00000 n -0000231463 00000 n -0000469646 00000 n +0000211414 00000 n +0000439290 00000 n 0000012575 00000 n 0000012612 00000 n -0000231588 00000 n -0000469514 00000 n +0000211539 00000 n +0000439158 00000 n 0000012667 00000 n 0000012723 00000 n -0000231713 00000 n -0000469435 00000 n +0000211664 00000 n +0000439079 00000 n 0000012783 00000 n 0000012819 00000 n -0000231838 00000 n -0000469356 00000 n +0000211789 00000 n +0000439000 00000 n 0000012879 00000 n 0000012916 00000 n -0000231963 00000 n -0000469224 00000 n +0000211914 00000 n +0000438868 00000 n 0000012971 00000 n 0000013013 00000 n -0000232088 00000 n -0000469145 00000 n +0000212039 00000 n +0000438789 00000 n 0000013073 00000 n 0000013109 00000 n -0000232213 00000 n -0000469066 00000 n +0000212164 00000 n +0000438710 00000 n 0000013169 00000 n 0000013206 00000 n -0000235085 00000 n -0000468934 00000 n +0000214204 00000 n +0000438578 00000 n 0000013262 00000 n 0000013299 00000 n -0000235210 00000 n -0000468855 00000 n +0000214329 00000 n +0000438499 00000 n 0000013360 00000 n 0000013397 00000 n -0000235334 00000 n -0000468776 00000 n +0000214453 00000 n +0000438420 00000 n 0000013458 00000 n 0000013496 00000 n -0000235459 00000 n -0000468644 00000 n +0000214578 00000 n +0000438288 00000 n 0000013552 00000 n 0000013595 00000 n -0000235584 00000 n -0000468565 00000 n +0000214703 00000 n +0000438209 00000 n 0000013656 00000 n 0000013693 00000 n -0000235709 00000 n -0000468486 00000 n +0000214828 00000 n +0000438130 00000 n 0000013754 00000 n 0000013792 00000 n -0000235834 00000 n -0000468368 00000 n +0000214953 00000 n +0000438012 00000 n 0000013848 00000 n 0000013892 00000 n -0000235958 00000 n -0000468289 00000 n +0000215077 00000 n +0000437933 00000 n 0000013953 00000 n 0000013990 00000 n -0000239388 00000 n -0000468210 00000 n +0000217930 00000 n +0000437854 00000 n 0000014051 00000 n 0000014089 00000 n -0000239513 00000 n -0000468078 00000 n +0000218055 00000 n +0000437722 00000 n 0000014139 00000 n 0000014196 00000 n -0000239638 00000 n -0000467960 00000 n +0000218180 00000 n +0000437604 00000 n 0000014251 00000 n 0000014299 00000 n -0000239763 00000 n -0000467881 00000 n +0000218305 00000 n +0000437525 00000 n 0000014359 00000 n 0000014395 00000 n -0000239888 00000 n -0000467802 00000 n +0000218430 00000 n +0000437446 00000 n 0000014455 00000 n 0000014492 00000 n -0000242894 00000 n -0000467670 00000 n +0000221038 00000 n +0000437314 00000 n 0000014547 00000 n 0000014592 00000 n -0000243019 00000 n -0000467591 00000 n +0000221163 00000 n +0000437235 00000 n 0000014652 00000 n 0000014688 00000 n -0000243144 00000 n -0000467512 00000 n +0000221288 00000 n +0000437156 00000 n 0000014748 00000 n 0000014785 00000 n -0000243269 00000 n -0000467380 00000 n +0000221413 00000 n +0000437024 00000 n 0000014840 00000 n 0000014890 00000 n -0000243394 00000 n -0000467301 00000 n +0000221538 00000 n +0000436945 00000 n 0000014950 00000 n 0000014986 00000 n -0000243519 00000 n -0000467222 00000 n +0000221663 00000 n +0000436866 00000 n 0000015046 00000 n 0000015083 00000 n -0000243644 00000 n -0000467090 00000 n +0000221788 00000 n +0000436734 00000 n 0000015138 00000 n 0000015178 00000 n -0000243769 00000 n -0000467011 00000 n +0000221913 00000 n +0000436655 00000 n 0000015238 00000 n 0000015274 00000 n -0000246259 00000 n -0000466932 00000 n +0000224172 00000 n +0000436576 00000 n 0000015334 00000 n 0000015371 00000 n -0000246384 00000 n -0000466814 00000 n +0000224297 00000 n +0000436458 00000 n 0000015426 00000 n 0000015467 00000 n -0000246509 00000 n -0000466735 00000 n +0000224422 00000 n +0000436379 00000 n 0000015527 00000 n 0000015563 00000 n -0000246632 00000 n -0000466656 00000 n +0000224545 00000 n +0000436300 00000 n 0000015623 00000 n 0000015660 00000 n -0000246756 00000 n -0000466524 00000 n +0000224669 00000 n +0000436168 00000 n 0000015710 00000 n 0000015769 00000 n -0000246881 00000 n -0000466406 00000 n +0000224794 00000 n +0000436050 00000 n 0000015824 00000 n 0000015864 00000 n -0000249766 00000 n -0000466327 00000 n +0000226847 00000 n +0000435971 00000 n 0000015924 00000 n 0000015960 00000 n -0000249891 00000 n -0000466248 00000 n +0000226972 00000 n +0000435892 00000 n 0000016020 00000 n 0000016057 00000 n -0000250016 00000 n -0000466130 00000 n +0000227097 00000 n +0000435774 00000 n 0000016112 00000 n 0000016148 00000 n -0000250141 00000 n -0000466051 00000 n +0000227222 00000 n +0000435695 00000 n 0000016208 00000 n 0000016244 00000 n -0000250266 00000 n -0000465972 00000 n +0000227347 00000 n +0000435616 00000 n 0000016304 00000 n 0000016341 00000 n -0000253101 00000 n -0000465840 00000 n +0000229520 00000 n +0000435484 00000 n 0000016391 00000 n 0000016442 00000 n -0000253226 00000 n -0000465722 00000 n +0000229645 00000 n +0000435366 00000 n 0000016497 00000 n 0000016538 00000 n -0000253349 00000 n -0000465643 00000 n +0000229768 00000 n +0000435287 00000 n 0000016598 00000 n 0000016634 00000 n -0000253474 00000 n -0000465564 00000 n +0000229893 00000 n +0000435208 00000 n 0000016694 00000 n 0000016731 00000 n -0000253599 00000 n -0000465446 00000 n +0000230018 00000 n +0000435090 00000 n 0000016786 00000 n 0000016832 00000 n -0000253724 00000 n -0000465367 00000 n +0000230143 00000 n +0000435011 00000 n 0000016892 00000 n 0000016928 00000 n -0000253848 00000 n -0000465288 00000 n +0000230267 00000 n +0000434932 00000 n 0000016988 00000 n 0000017025 00000 n -0000256596 00000 n -0000465156 00000 n +0000232796 00000 n +0000434800 00000 n 0000017075 00000 n 0000017146 00000 n -0000256721 00000 n -0000465077 00000 n +0000232921 00000 n +0000434721 00000 n 0000017201 00000 n 0000017239 00000 n -0000256846 00000 n -0000464984 00000 n +0000233046 00000 n +0000434628 00000 n 0000017294 00000 n 0000017329 00000 n -0000259973 00000 n -0000464905 00000 n +0000235870 00000 n +0000434549 00000 n 0000017384 00000 n 0000017419 00000 n -0000260098 00000 n -0000464787 00000 n +0000235995 00000 n +0000434431 00000 n 0000017469 00000 n 0000017507 00000 n -0000260223 00000 n -0000464669 00000 n +0000236120 00000 n +0000434313 00000 n 0000017562 00000 n 0000017604 00000 n -0000260348 00000 n -0000464590 00000 n +0000236245 00000 n +0000434234 00000 n 0000017664 00000 n 0000017718 00000 n -0000260473 00000 n -0000464511 00000 n +0000236370 00000 n +0000434155 00000 n 0000017778 00000 n 0000017825 00000 n -0000263431 00000 n -0000464393 00000 n +0000238506 00000 n +0000434037 00000 n 0000017880 00000 n 0000017922 00000 n -0000263556 00000 n -0000464314 00000 n +0000238631 00000 n +0000433958 00000 n 0000017982 00000 n 0000018031 00000 n -0000263681 00000 n -0000464221 00000 n +0000238756 00000 n +0000433865 00000 n 0000018091 00000 n 0000018141 00000 n -0000263806 00000 n -0000464142 00000 n +0000238881 00000 n +0000433786 00000 n 0000018201 00000 n 0000018252 00000 n -0000267434 00000 n -0000464009 00000 n +0000242089 00000 n +0000433653 00000 n 0000018300 00000 n 0000018347 00000 n -0000267559 00000 n -0000463930 00000 n +0000242214 00000 n +0000433574 00000 n 0000018397 00000 n 0000018430 00000 n -0000267684 00000 n -0000463837 00000 n +0000242339 00000 n +0000433481 00000 n 0000018480 00000 n 0000018544 00000 n -0000267809 00000 n -0000463744 00000 n +0000242464 00000 n +0000433388 00000 n 0000018594 00000 n 0000018636 00000 n -0000275101 00000 n -0000463651 00000 n +0000249288 00000 n +0000433295 00000 n 0000018686 00000 n 0000018761 00000 n -0000275226 00000 n -0000463572 00000 n +0000249413 00000 n +0000433216 00000 n 0000018811 00000 n 0000018871 00000 n -0000283207 00000 n -0000463439 00000 n +0000256690 00000 n +0000433083 00000 n 0000018919 00000 n 0000018962 00000 n -0000283332 00000 n -0000463374 00000 n +0000256815 00000 n +0000433018 00000 n 0000019012 00000 n 0000019050 00000 n -0000287268 00000 n -0000463241 00000 n +0000260664 00000 n +0000432885 00000 n 0000019098 00000 n 0000019144 00000 n -0000287393 00000 n -0000463162 00000 n +0000260789 00000 n +0000432806 00000 n 0000019194 00000 n 0000019244 00000 n -0000291427 00000 n -0000463069 00000 n +0000264633 00000 n +0000432713 00000 n 0000019294 00000 n 0000019339 00000 n -0000291551 00000 n -0000462976 00000 n +0000264757 00000 n +0000432620 00000 n 0000019389 00000 n 0000019446 00000 n -0000291675 00000 n -0000462844 00000 n +0000264881 00000 n +0000432488 00000 n 0000019496 00000 n 0000019527 00000 n -0000291799 00000 n -0000462765 00000 n +0000265005 00000 n +0000432409 00000 n 0000019582 00000 n 0000019620 00000 n -0000291923 00000 n -0000462672 00000 n +0000265129 00000 n +0000432316 00000 n 0000019675 00000 n 0000019715 00000 n -0000295653 00000 n -0000462593 00000 n +0000268762 00000 n +0000432237 00000 n 0000019770 00000 n 0000019808 00000 n -0000295778 00000 n -0000462461 00000 n +0000268887 00000 n +0000432105 00000 n 0000019858 00000 n 0000019894 00000 n -0000295903 00000 n -0000462382 00000 n +0000269012 00000 n +0000432026 00000 n 0000019949 00000 n 0000020005 00000 n -0000296028 00000 n -0000462303 00000 n +0000269137 00000 n +0000431947 00000 n 0000020060 00000 n 0000020097 00000 n -0000296152 00000 n -0000462210 00000 n +0000269261 00000 n +0000431854 00000 n 0000020147 00000 n 0000020189 00000 n -0000298476 00000 n -0000462131 00000 n +0000271550 00000 n +0000431775 00000 n 0000020239 00000 n 0000020271 00000 n -0000302163 00000 n -0000461998 00000 n +0000275201 00000 n +0000431642 00000 n 0000020319 00000 n 0000020375 00000 n -0000302288 00000 n -0000461919 00000 n +0000275326 00000 n +0000431563 00000 n 0000020425 00000 n 0000020462 00000 n -0000302413 00000 n -0000461826 00000 n +0000275451 00000 n +0000431470 00000 n 0000020512 00000 n 0000020554 00000 n -0000306181 00000 n -0000461747 00000 n +0000279198 00000 n +0000431391 00000 n 0000020604 00000 n 0000020647 00000 n -0000311008 00000 n -0000461614 00000 n +0000283755 00000 n +0000431258 00000 n 0000020695 00000 n 0000020725 00000 n -0000311133 00000 n -0000461535 00000 n +0000283880 00000 n +0000431179 00000 n 0000020775 00000 n 0000020810 00000 n -0000311258 00000 n -0000461403 00000 n +0000284005 00000 n +0000431047 00000 n 0000020860 00000 n 0000020900 00000 n -0000311383 00000 n -0000461324 00000 n +0000284130 00000 n +0000430968 00000 n 0000020955 00000 n 0000020996 00000 n -0000311508 00000 n -0000461245 00000 n +0000284255 00000 n +0000430889 00000 n 0000021051 00000 n 0000021092 00000 n -0000314881 00000 n -0000461127 00000 n +0000287305 00000 n +0000430771 00000 n 0000021142 00000 n 0000021182 00000 n -0000315006 00000 n -0000461062 00000 n +0000287430 00000 n +0000430706 00000 n 0000021237 00000 n 0000021303 00000 n -0000318036 00000 n -0000460929 00000 n +0000290099 00000 n +0000430573 00000 n 0000021351 00000 n 0000021395 00000 n -0000318161 00000 n -0000460850 00000 n +0000290224 00000 n +0000430494 00000 n 0000021445 00000 n 0000021475 00000 n -0000318286 00000 n -0000460771 00000 n +0000290349 00000 n +0000430415 00000 n 0000021525 00000 n 0000021566 00000 n -0000320024 00000 n -0000460638 00000 n +0000292012 00000 n +0000430282 00000 n 0000021614 00000 n 0000021648 00000 n -0000320149 00000 n -0000460520 00000 n +0000292137 00000 n +0000430164 00000 n 0000021698 00000 n 0000021752 00000 n -0000320274 00000 n -0000460441 00000 n +0000292262 00000 n +0000430085 00000 n 0000021807 00000 n 0000021855 00000 n -0000324501 00000 n -0000460362 00000 n +0000296413 00000 n +0000430006 00000 n 0000021910 00000 n 0000021966 00000 n -0000324626 00000 n -0000460230 00000 n +0000296538 00000 n +0000429874 00000 n 0000022016 00000 n 0000022104 00000 n -0000324751 00000 n -0000460151 00000 n +0000296663 00000 n +0000429795 00000 n 0000022159 00000 n 0000022217 00000 n -0000327603 00000 n -0000460072 00000 n +0000299158 00000 n +0000429716 00000 n 0000022272 00000 n 0000022341 00000 n -0000334925 00000 n -0000459940 00000 n +0000305297 00000 n +0000429584 00000 n 0000022391 00000 n 0000022450 00000 n -0000335050 00000 n -0000459875 00000 n +0000305422 00000 n +0000429519 00000 n 0000022505 00000 n 0000022573 00000 n -0000345749 00000 n -0000459757 00000 n +0000315406 00000 n +0000429401 00000 n 0000022623 00000 n 0000022658 00000 n -0000345874 00000 n -0000459678 00000 n +0000315531 00000 n +0000429322 00000 n 0000022713 00000 n 0000022771 00000 n -0000345999 00000 n -0000459599 00000 n +0000315656 00000 n +0000429243 00000 n 0000022826 00000 n 0000022879 00000 n -0000347570 00000 n -0000459466 00000 n +0000317191 00000 n +0000429110 00000 n 0000022927 00000 n 0000022968 00000 n -0000347695 00000 n -0000459387 00000 n +0000317316 00000 n +0000429031 00000 n 0000023018 00000 n 0000023053 00000 n -0000347820 00000 n -0000459308 00000 n +0000317441 00000 n +0000428952 00000 n 0000023103 00000 n 0000023135 00000 n -0000351912 00000 n -0000459228 00000 n +0000321366 00000 n +0000428872 00000 n 0000023183 00000 n 0000023223 00000 n -0000023605 00000 n -0000023846 00000 n +0000023594 00000 n +0000023835 00000 n 0000023275 00000 n -0000023724 00000 n -0000023785 00000 n -0000456020 00000 n -0000442781 00000 n -0000455854 00000 n -0000442335 00000 n -0000437533 00000 n -0000442172 00000 n -0000456893 00000 n -0000025979 00000 n -0000025061 00000 n -0000023931 00000 n -0000025918 00000 n -0000436712 00000 n -0000420508 00000 n -0000436548 00000 n -0000418572 00000 n -0000400220 00000 n -0000418409 00000 n -0000025224 00000 n -0000399239 00000 n -0000383095 00000 n -0000399075 00000 n -0000025395 00000 n -0000025565 00000 n -0000025736 00000 n -0000034833 00000 n -0000029270 00000 n -0000026077 00000 n -0000034772 00000 n -0000381459 00000 n -0000371814 00000 n -0000381295 00000 n -0000029661 00000 n -0000371382 00000 n -0000369862 00000 n -0000371218 00000 n -0000029811 00000 n -0000029966 00000 n -0000030114 00000 n -0000030274 00000 n -0000367962 00000 n -0000365952 00000 n -0000367799 00000 n -0000030426 00000 n -0000030612 00000 n -0000030761 00000 n -0000030912 00000 n -0000031062 00000 n -0000031218 00000 n -0000031388 00000 n -0000031555 00000 n -0000031705 00000 n -0000031880 00000 n -0000032056 00000 n -0000032225 00000 n -0000032375 00000 n -0000032522 00000 n -0000032667 00000 n -0000032819 00000 n -0000032988 00000 n -0000033138 00000 n -0000033309 00000 n -0000033462 00000 n -0000033635 00000 n -0000033806 00000 n -0000033952 00000 n -0000034119 00000 n -0000034292 00000 n -0000034444 00000 n -0000034600 00000 n -0000093921 00000 n -0000101434 00000 n -0000108886 00000 n -0000121931 00000 n -0000131681 00000 n -0000150699 00000 n -0000159520 00000 n -0000174391 00000 n -0000177229 00000 n -0000183328 00000 n -0000267496 00000 n -0000283269 00000 n -0000287330 00000 n -0000302225 00000 n -0000311070 00000 n -0000318098 00000 n -0000320086 00000 n -0000347632 00000 n -0000351974 00000 n -0000044328 00000 n -0000037438 00000 n -0000034957 00000 n -0000044202 00000 n -0000044265 00000 n -0000037932 00000 n -0000038085 00000 n -0000038239 00000 n -0000038393 00000 n -0000038548 00000 n -0000038701 00000 n -0000038856 00000 n -0000039011 00000 n -0000039166 00000 n -0000039321 00000 n -0000039475 00000 n -0000039628 00000 n -0000039783 00000 n -0000039937 00000 n -0000040092 00000 n -0000040247 00000 n -0000040402 00000 n -0000040562 00000 n -0000040722 00000 n -0000040882 00000 n -0000041035 00000 n -0000041188 00000 n -0000041343 00000 n -0000041497 00000 n -0000041652 00000 n -0000041812 00000 n -0000041972 00000 n -0000042132 00000 n -0000042292 00000 n -0000042452 00000 n -0000042612 00000 n -0000042772 00000 n -0000042931 00000 n -0000043091 00000 n -0000043252 00000 n -0000043412 00000 n -0000043571 00000 n -0000043731 00000 n -0000043890 00000 n -0000044049 00000 n -0000055715 00000 n -0000047590 00000 n -0000044414 00000 n -0000055652 00000 n -0000365367 00000 n -0000356177 00000 n -0000365201 00000 n -0000048147 00000 n -0000048307 00000 n -0000048467 00000 n -0000048622 00000 n -0000048775 00000 n -0000048930 00000 n -0000049090 00000 n -0000049250 00000 n -0000049409 00000 n -0000049564 00000 n -0000049724 00000 n -0000049877 00000 n -0000050032 00000 n -0000050187 00000 n -0000050342 00000 n -0000050497 00000 n -0000050652 00000 n -0000050807 00000 n -0000050962 00000 n -0000051116 00000 n -0000051271 00000 n -0000051423 00000 n -0000051575 00000 n -0000051730 00000 n -0000051884 00000 n -0000052040 00000 n -0000052201 00000 n -0000052362 00000 n -0000052516 00000 n -0000052677 00000 n -0000052838 00000 n -0000053004 00000 n -0000053169 00000 n -0000053330 00000 n -0000053496 00000 n -0000053662 00000 n -0000053828 00000 n -0000053994 00000 n -0000054160 00000 n -0000054326 00000 n -0000054491 00000 n -0000054656 00000 n -0000054822 00000 n -0000054989 00000 n -0000055155 00000 n -0000055322 00000 n -0000055487 00000 n -0000068050 00000 n -0000059340 00000 n -0000055815 00000 n -0000067987 00000 n -0000059915 00000 n -0000060082 00000 n -0000060249 00000 n -0000060416 00000 n -0000060583 00000 n -0000060750 00000 n -0000060917 00000 n -0000061083 00000 n -0000061250 00000 n -0000061417 00000 n -0000061583 00000 n -0000061750 00000 n -0000061917 00000 n -0000062084 00000 n -0000062251 00000 n -0000062418 00000 n -0000062585 00000 n -0000062741 00000 n -0000062902 00000 n -0000063062 00000 n -0000063228 00000 n -0000063394 00000 n -0000063559 00000 n -0000063725 00000 n -0000063891 00000 n -0000064057 00000 n -0000064223 00000 n -0000064389 00000 n -0000064550 00000 n -0000064711 00000 n -0000064872 00000 n -0000065032 00000 n -0000065198 00000 n -0000065364 00000 n -0000065524 00000 n -0000065690 00000 n -0000065856 00000 n -0000066017 00000 n -0000066183 00000 n -0000066349 00000 n -0000066510 00000 n -0000066676 00000 n -0000066842 00000 n -0000067003 00000 n -0000067170 00000 n -0000067337 00000 n -0000067498 00000 n -0000067662 00000 n -0000067827 00000 n -0000079694 00000 n -0000070937 00000 n -0000068137 00000 n -0000079631 00000 n -0000071522 00000 n -0000071689 00000 n -0000071856 00000 n -0000072012 00000 n -0000072173 00000 n -0000072339 00000 n -0000072505 00000 n -0000072666 00000 n -0000072832 00000 n -0000072997 00000 n -0000073158 00000 n -0000073324 00000 n -0000073489 00000 n -0000073650 00000 n -0000073816 00000 n -0000073982 00000 n -0000074143 00000 n -0000074309 00000 n -0000074475 00000 n -0000074631 00000 n -0000074792 00000 n -0000074957 00000 n -0000075123 00000 n -0000075284 00000 n -0000075450 00000 n -0000075615 00000 n -0000075771 00000 n -0000075932 00000 n -0000076098 00000 n -0000076264 00000 n -0000076425 00000 n -0000076591 00000 n -0000076757 00000 n -0000076913 00000 n -0000077073 00000 n -0000077234 00000 n -0000077395 00000 n -0000077550 00000 n -0000077711 00000 n -0000077877 00000 n -0000078043 00000 n -0000078204 00000 n -0000078370 00000 n -0000078536 00000 n -0000078702 00000 n -0000078856 00000 n -0000079012 00000 n -0000079168 00000 n -0000079323 00000 n -0000079477 00000 n -0000457014 00000 n -0000090563 00000 n -0000082893 00000 n -0000079807 00000 n -0000090500 00000 n -0000083433 00000 n -0000083587 00000 n -0000083743 00000 n -0000083897 00000 n -0000084053 00000 n -0000084209 00000 n -0000084365 00000 n -0000084521 00000 n -0000084681 00000 n -0000084842 00000 n -0000085003 00000 n -0000085158 00000 n -0000085319 00000 n -0000085480 00000 n -0000085636 00000 n -0000085792 00000 n -0000085946 00000 n -0000086102 00000 n -0000086258 00000 n -0000086413 00000 n -0000086567 00000 n -0000086722 00000 n -0000086877 00000 n -0000087038 00000 n -0000087199 00000 n -0000087355 00000 n -0000087516 00000 n -0000087670 00000 n -0000087826 00000 n -0000087981 00000 n -0000088135 00000 n -0000088291 00000 n -0000088451 00000 n -0000088612 00000 n -0000088768 00000 n -0000088929 00000 n -0000089090 00000 n -0000089246 00000 n -0000089407 00000 n -0000089563 00000 n -0000089723 00000 n -0000089883 00000 n -0000090037 00000 n -0000090192 00000 n -0000090348 00000 n -0000094232 00000 n -0000093675 00000 n -0000090663 00000 n -0000093798 00000 n -0000094045 00000 n -0000094169 00000 n -0000097839 00000 n -0000097529 00000 n -0000094318 00000 n -0000097652 00000 n -0000097776 00000 n -0000102369 00000 n -0000101187 00000 n -0000097952 00000 n -0000101310 00000 n -0000101558 00000 n -0000101621 00000 n -0000101683 00000 n -0000101746 00000 n -0000101870 00000 n -0000101993 00000 n -0000102056 00000 n -0000102119 00000 n -0000102181 00000 n -0000102244 00000 n -0000102307 00000 n -0000106251 00000 n -0000105755 00000 n -0000102455 00000 n -0000105878 00000 n -0000105941 00000 n -0000106065 00000 n -0000106188 00000 n -0000109325 00000 n -0000108639 00000 n -0000106351 00000 n -0000108762 00000 n -0000109010 00000 n -0000109073 00000 n -0000109136 00000 n -0000109199 00000 n -0000109262 00000 n -0000457139 00000 n -0000111841 00000 n -0000111531 00000 n -0000109424 00000 n -0000111654 00000 n -0000111778 00000 n -0000114339 00000 n -0000113843 00000 n -0000111967 00000 n -0000113966 00000 n -0000114090 00000 n -0000114214 00000 n -0000114277 00000 n -0000117368 00000 n -0000116562 00000 n -0000114452 00000 n -0000116685 00000 n -0000116748 00000 n -0000116811 00000 n -0000116934 00000 n -0000117058 00000 n -0000117181 00000 n -0000117305 00000 n -0000122559 00000 n -0000121263 00000 n -0000117468 00000 n -0000121807 00000 n -0000121416 00000 n -0000121617 00000 n -0000121994 00000 n -0000122057 00000 n -0000122120 00000 n -0000122183 00000 n -0000122245 00000 n -0000122308 00000 n -0000122371 00000 n -0000122434 00000 n -0000122497 00000 n -0000127615 00000 n -0000126425 00000 n -0000122658 00000 n -0000126548 00000 n -0000126611 00000 n -0000126674 00000 n -0000126737 00000 n -0000126800 00000 n -0000126863 00000 n -0000126926 00000 n -0000126989 00000 n -0000127052 00000 n -0000127115 00000 n -0000127178 00000 n -0000127240 00000 n -0000127303 00000 n -0000127366 00000 n -0000127427 00000 n -0000127490 00000 n -0000127553 00000 n -0000132494 00000 n -0000131434 00000 n -0000127702 00000 n -0000131557 00000 n -0000131805 00000 n -0000131928 00000 n -0000131991 00000 n -0000132054 00000 n -0000132117 00000 n -0000132179 00000 n -0000132242 00000 n -0000132305 00000 n -0000132368 00000 n -0000132431 00000 n -0000457264 00000 n -0000136461 00000 n -0000134966 00000 n -0000132580 00000 n -0000135089 00000 n -0000135152 00000 n -0000135215 00000 n -0000135278 00000 n -0000135401 00000 n -0000135526 00000 n -0000135650 00000 n -0000135774 00000 n -0000135899 00000 n -0000136024 00000 n -0000136149 00000 n -0000136273 00000 n -0000136398 00000 n -0000140346 00000 n -0000138791 00000 n -0000136561 00000 n -0000138914 00000 n -0000139039 00000 n -0000139163 00000 n -0000139288 00000 n -0000139413 00000 n -0000139536 00000 n -0000139661 00000 n -0000139786 00000 n -0000139910 00000 n -0000140035 00000 n -0000140098 00000 n -0000140161 00000 n -0000140223 00000 n -0000140285 00000 n -0000145366 00000 n -0000144236 00000 n -0000140459 00000 n -0000144359 00000 n -0000144422 00000 n -0000144485 00000 n -0000144548 00000 n -0000144611 00000 n -0000144674 00000 n -0000144737 00000 n -0000144800 00000 n -0000144863 00000 n -0000144926 00000 n -0000144989 00000 n -0000145114 00000 n -0000145177 00000 n -0000145240 00000 n -0000145303 00000 n -0000147701 00000 n -0000146762 00000 n -0000145466 00000 n -0000146885 00000 n -0000147010 00000 n -0000147073 00000 n -0000147136 00000 n -0000147199 00000 n -0000147262 00000 n -0000147325 00000 n -0000147387 00000 n -0000147450 00000 n -0000147513 00000 n -0000147576 00000 n -0000147639 00000 n -0000151828 00000 n -0000150451 00000 n -0000147801 00000 n -0000150574 00000 n -0000150824 00000 n -0000150887 00000 n -0000150950 00000 n -0000151013 00000 n -0000151076 00000 n -0000151139 00000 n -0000151202 00000 n -0000151265 00000 n -0000151390 00000 n -0000151452 00000 n -0000151515 00000 n -0000151578 00000 n -0000151641 00000 n -0000151766 00000 n -0000153920 00000 n -0000153484 00000 n -0000151940 00000 n -0000153607 00000 n -0000153732 00000 n -0000153857 00000 n -0000457389 00000 n -0000156041 00000 n -0000155478 00000 n -0000154046 00000 n -0000155601 00000 n -0000155664 00000 n -0000155727 00000 n -0000155790 00000 n -0000155853 00000 n -0000155978 00000 n -0000159958 00000 n -0000159272 00000 n -0000156167 00000 n -0000159395 00000 n -0000159645 00000 n +0000023713 00000 n +0000023774 00000 n +0000425664 00000 n +0000412425 00000 n +0000425498 00000 n +0000411972 00000 n +0000406987 00000 n +0000411809 00000 n +0000426537 00000 n +0000025917 00000 n +0000024999 00000 n +0000023920 00000 n +0000025856 00000 n +0000406166 00000 n +0000389962 00000 n +0000406002 00000 n +0000388026 00000 n +0000369674 00000 n +0000387863 00000 n +0000025162 00000 n +0000368693 00000 n +0000352549 00000 n +0000368529 00000 n +0000025333 00000 n +0000025503 00000 n +0000025674 00000 n +0000033588 00000 n +0000028025 00000 n +0000026015 00000 n +0000033527 00000 n +0000350913 00000 n +0000341268 00000 n +0000350749 00000 n +0000028416 00000 n +0000340836 00000 n +0000339316 00000 n +0000340672 00000 n +0000028566 00000 n +0000028721 00000 n +0000028869 00000 n +0000029029 00000 n +0000337416 00000 n +0000335406 00000 n +0000337253 00000 n +0000029181 00000 n +0000029367 00000 n +0000029516 00000 n +0000029667 00000 n +0000029817 00000 n +0000029973 00000 n +0000030143 00000 n +0000030310 00000 n +0000030460 00000 n +0000030635 00000 n +0000030811 00000 n +0000030980 00000 n +0000031130 00000 n +0000031277 00000 n +0000031422 00000 n +0000031574 00000 n +0000031743 00000 n +0000031893 00000 n +0000032064 00000 n +0000032217 00000 n +0000032390 00000 n +0000032561 00000 n +0000032707 00000 n +0000032874 00000 n +0000033047 00000 n +0000033199 00000 n +0000033355 00000 n +0000086768 00000 n +0000093970 00000 n +0000101194 00000 n +0000113674 00000 n +0000122527 00000 n +0000140066 00000 n +0000148692 00000 n +0000163306 00000 n +0000165985 00000 n +0000171849 00000 n +0000242151 00000 n +0000256752 00000 n +0000260726 00000 n +0000275263 00000 n +0000283817 00000 n +0000290161 00000 n +0000292074 00000 n +0000317253 00000 n +0000321428 00000 n +0000042131 00000 n +0000035241 00000 n +0000033712 00000 n +0000042005 00000 n +0000042068 00000 n +0000035735 00000 n +0000035888 00000 n +0000036042 00000 n +0000036196 00000 n +0000036351 00000 n +0000036504 00000 n +0000036659 00000 n +0000036814 00000 n +0000036969 00000 n +0000037124 00000 n +0000037278 00000 n +0000037431 00000 n +0000037586 00000 n +0000037740 00000 n +0000037895 00000 n +0000038050 00000 n +0000038205 00000 n +0000038365 00000 n +0000038525 00000 n +0000038685 00000 n +0000038838 00000 n +0000038991 00000 n +0000039146 00000 n +0000039300 00000 n +0000039455 00000 n +0000039615 00000 n +0000039775 00000 n +0000039935 00000 n +0000040095 00000 n +0000040255 00000 n +0000040415 00000 n +0000040575 00000 n +0000040734 00000 n +0000040894 00000 n +0000041055 00000 n +0000041215 00000 n +0000041374 00000 n +0000041534 00000 n +0000041693 00000 n +0000041852 00000 n +0000052348 00000 n +0000044223 00000 n +0000042217 00000 n +0000052285 00000 n +0000334821 00000 n +0000325631 00000 n +0000334655 00000 n +0000044780 00000 n +0000044940 00000 n +0000045100 00000 n +0000045255 00000 n +0000045408 00000 n +0000045563 00000 n +0000045723 00000 n +0000045883 00000 n +0000046042 00000 n +0000046197 00000 n +0000046357 00000 n +0000046510 00000 n +0000046665 00000 n +0000046820 00000 n +0000046975 00000 n +0000047130 00000 n +0000047285 00000 n +0000047440 00000 n +0000047595 00000 n +0000047749 00000 n +0000047904 00000 n +0000048056 00000 n +0000048208 00000 n +0000048363 00000 n +0000048517 00000 n +0000048673 00000 n +0000048834 00000 n +0000048995 00000 n +0000049149 00000 n +0000049310 00000 n +0000049471 00000 n +0000049637 00000 n +0000049802 00000 n +0000049963 00000 n +0000050129 00000 n +0000050295 00000 n +0000050461 00000 n +0000050627 00000 n +0000050793 00000 n +0000050959 00000 n +0000051124 00000 n +0000051289 00000 n +0000051455 00000 n +0000051622 00000 n +0000051788 00000 n +0000051955 00000 n +0000052120 00000 n +0000063171 00000 n +0000054461 00000 n +0000052448 00000 n +0000063108 00000 n +0000055036 00000 n +0000055203 00000 n +0000055370 00000 n +0000055537 00000 n +0000055704 00000 n +0000055871 00000 n +0000056038 00000 n +0000056204 00000 n +0000056371 00000 n +0000056538 00000 n +0000056704 00000 n +0000056871 00000 n +0000057038 00000 n +0000057205 00000 n +0000057372 00000 n +0000057539 00000 n +0000057706 00000 n +0000057862 00000 n +0000058023 00000 n +0000058183 00000 n +0000058349 00000 n +0000058515 00000 n +0000058680 00000 n +0000058846 00000 n +0000059012 00000 n +0000059178 00000 n +0000059344 00000 n +0000059510 00000 n +0000059671 00000 n +0000059832 00000 n +0000059993 00000 n +0000060153 00000 n +0000060319 00000 n +0000060485 00000 n +0000060645 00000 n +0000060811 00000 n +0000060977 00000 n +0000061138 00000 n +0000061304 00000 n +0000061470 00000 n +0000061631 00000 n +0000061797 00000 n +0000061963 00000 n +0000062124 00000 n +0000062291 00000 n +0000062458 00000 n +0000062619 00000 n +0000062783 00000 n +0000062948 00000 n +0000073682 00000 n +0000064925 00000 n +0000063258 00000 n +0000073619 00000 n +0000065510 00000 n +0000065677 00000 n +0000065844 00000 n +0000066000 00000 n +0000066161 00000 n +0000066327 00000 n +0000066493 00000 n +0000066654 00000 n +0000066820 00000 n +0000066985 00000 n +0000067146 00000 n +0000067312 00000 n +0000067477 00000 n +0000067638 00000 n +0000067804 00000 n +0000067970 00000 n +0000068131 00000 n +0000068297 00000 n +0000068463 00000 n +0000068619 00000 n +0000068780 00000 n +0000068945 00000 n +0000069111 00000 n +0000069272 00000 n +0000069438 00000 n +0000069603 00000 n +0000069759 00000 n +0000069920 00000 n +0000070086 00000 n +0000070252 00000 n +0000070413 00000 n +0000070579 00000 n +0000070745 00000 n +0000070901 00000 n +0000071061 00000 n +0000071222 00000 n +0000071383 00000 n +0000071538 00000 n +0000071699 00000 n +0000071865 00000 n +0000072031 00000 n +0000072192 00000 n +0000072358 00000 n +0000072524 00000 n +0000072690 00000 n +0000072844 00000 n +0000073000 00000 n +0000073156 00000 n +0000073311 00000 n +0000073465 00000 n +0000426658 00000 n +0000083455 00000 n +0000075785 00000 n +0000073795 00000 n +0000083392 00000 n +0000076325 00000 n +0000076479 00000 n +0000076635 00000 n +0000076789 00000 n +0000076945 00000 n +0000077101 00000 n +0000077257 00000 n +0000077413 00000 n +0000077573 00000 n +0000077734 00000 n +0000077895 00000 n +0000078050 00000 n +0000078211 00000 n +0000078372 00000 n +0000078528 00000 n +0000078684 00000 n +0000078838 00000 n +0000078994 00000 n +0000079150 00000 n +0000079305 00000 n +0000079459 00000 n +0000079614 00000 n +0000079769 00000 n +0000079930 00000 n +0000080091 00000 n +0000080247 00000 n +0000080408 00000 n +0000080562 00000 n +0000080718 00000 n +0000080873 00000 n +0000081027 00000 n +0000081183 00000 n +0000081343 00000 n +0000081504 00000 n +0000081660 00000 n +0000081821 00000 n +0000081982 00000 n +0000082138 00000 n +0000082299 00000 n +0000082455 00000 n +0000082615 00000 n +0000082775 00000 n +0000082929 00000 n +0000083084 00000 n +0000083240 00000 n +0000087079 00000 n +0000086522 00000 n +0000083555 00000 n +0000086645 00000 n +0000086892 00000 n +0000087016 00000 n +0000090605 00000 n +0000090295 00000 n +0000087165 00000 n +0000090418 00000 n +0000090542 00000 n +0000094905 00000 n +0000093723 00000 n +0000090718 00000 n +0000093846 00000 n +0000094094 00000 n +0000094157 00000 n +0000094219 00000 n +0000094282 00000 n +0000094406 00000 n +0000094529 00000 n +0000094592 00000 n +0000094655 00000 n +0000094717 00000 n +0000094780 00000 n +0000094843 00000 n +0000098713 00000 n +0000098217 00000 n +0000094991 00000 n +0000098340 00000 n +0000098403 00000 n +0000098527 00000 n +0000098650 00000 n +0000101633 00000 n +0000100947 00000 n +0000098813 00000 n +0000101070 00000 n +0000101318 00000 n +0000101381 00000 n +0000101444 00000 n +0000101507 00000 n +0000101570 00000 n +0000426783 00000 n +0000104121 00000 n +0000103811 00000 n +0000101732 00000 n +0000103934 00000 n +0000104058 00000 n +0000106544 00000 n +0000106048 00000 n +0000104247 00000 n +0000106171 00000 n +0000106295 00000 n +0000106419 00000 n +0000106482 00000 n +0000109439 00000 n +0000108633 00000 n +0000106657 00000 n +0000108756 00000 n +0000108819 00000 n +0000108882 00000 n +0000109005 00000 n +0000109129 00000 n +0000109252 00000 n +0000109376 00000 n +0000114302 00000 n +0000113006 00000 n +0000109539 00000 n +0000113550 00000 n +0000113159 00000 n +0000113360 00000 n +0000113737 00000 n +0000113800 00000 n +0000113863 00000 n +0000113926 00000 n +0000113988 00000 n +0000114051 00000 n +0000114114 00000 n +0000114177 00000 n +0000114240 00000 n +0000118902 00000 n +0000117712 00000 n +0000114401 00000 n +0000117835 00000 n +0000117898 00000 n +0000117961 00000 n +0000118024 00000 n +0000118087 00000 n +0000118150 00000 n +0000118213 00000 n +0000118276 00000 n +0000118339 00000 n +0000118402 00000 n +0000118465 00000 n +0000118527 00000 n +0000118590 00000 n +0000118653 00000 n +0000118714 00000 n +0000118777 00000 n +0000118840 00000 n +0000123340 00000 n +0000122280 00000 n +0000118989 00000 n +0000122403 00000 n +0000122651 00000 n +0000122774 00000 n +0000122837 00000 n +0000122900 00000 n +0000122963 00000 n +0000123025 00000 n +0000123088 00000 n +0000123151 00000 n +0000123214 00000 n +0000123277 00000 n +0000426908 00000 n +0000127017 00000 n +0000125522 00000 n +0000123426 00000 n +0000125645 00000 n +0000125708 00000 n +0000125771 00000 n +0000125834 00000 n +0000125957 00000 n +0000126082 00000 n +0000126206 00000 n +0000126330 00000 n +0000126455 00000 n +0000126580 00000 n +0000126705 00000 n +0000126829 00000 n +0000126954 00000 n +0000130596 00000 n +0000129041 00000 n +0000127117 00000 n +0000129164 00000 n +0000129289 00000 n +0000129413 00000 n +0000129538 00000 n +0000129663 00000 n +0000129786 00000 n +0000129911 00000 n +0000130036 00000 n +0000130160 00000 n +0000130285 00000 n +0000130348 00000 n +0000130411 00000 n +0000130473 00000 n +0000130535 00000 n +0000135258 00000 n +0000134128 00000 n +0000130709 00000 n +0000134251 00000 n +0000134314 00000 n +0000134377 00000 n +0000134440 00000 n +0000134503 00000 n +0000134566 00000 n +0000134629 00000 n +0000134692 00000 n +0000134755 00000 n +0000134818 00000 n +0000134881 00000 n +0000135006 00000 n +0000135069 00000 n +0000135132 00000 n +0000135195 00000 n +0000137365 00000 n +0000136426 00000 n +0000135358 00000 n +0000136549 00000 n +0000136674 00000 n +0000136737 00000 n +0000136800 00000 n +0000136863 00000 n +0000136926 00000 n +0000136989 00000 n +0000137051 00000 n +0000137114 00000 n +0000137177 00000 n +0000137240 00000 n +0000137303 00000 n +0000141195 00000 n +0000139818 00000 n +0000137465 00000 n +0000139941 00000 n +0000140191 00000 n +0000140254 00000 n +0000140317 00000 n +0000140380 00000 n +0000140443 00000 n +0000140506 00000 n +0000140569 00000 n +0000140632 00000 n +0000140757 00000 n +0000140819 00000 n +0000140882 00000 n +0000140945 00000 n +0000141008 00000 n +0000141133 00000 n +0000143260 00000 n +0000142824 00000 n +0000141307 00000 n +0000142947 00000 n +0000143072 00000 n +0000143197 00000 n +0000427033 00000 n +0000145277 00000 n +0000144714 00000 n +0000143386 00000 n +0000144837 00000 n +0000144900 00000 n +0000144963 00000 n +0000145026 00000 n +0000145089 00000 n +0000145214 00000 n +0000149130 00000 n +0000148444 00000 n +0000145403 00000 n +0000148567 00000 n +0000148817 00000 n +0000148942 00000 n +0000149067 00000 n +0000153040 00000 n +0000152605 00000 n +0000149229 00000 n +0000152728 00000 n +0000152853 00000 n +0000152978 00000 n +0000157382 00000 n +0000156696 00000 n +0000153140 00000 n +0000156819 00000 n +0000156944 00000 n +0000157069 00000 n +0000157194 00000 n +0000157319 00000 n +0000159683 00000 n +0000159497 00000 n +0000157495 00000 n +0000159620 00000 n +0000163369 00000 n +0000163058 00000 n 0000159770 00000 n -0000159895 00000 n -0000163906 00000 n -0000163471 00000 n -0000160057 00000 n -0000163594 00000 n -0000163719 00000 n -0000163844 00000 n -0000168436 00000 n -0000167750 00000 n -0000164006 00000 n -0000167873 00000 n -0000167998 00000 n -0000168123 00000 n -0000168248 00000 n -0000168373 00000 n -0000170747 00000 n -0000170561 00000 n -0000168549 00000 n -0000170684 00000 n -0000174454 00000 n -0000174143 00000 n -0000170834 00000 n -0000174266 00000 n -0000354995 00000 n -0000353119 00000 n -0000354829 00000 n -0000457514 00000 n -0000175950 00000 n -0000175764 00000 n -0000174580 00000 n -0000175887 00000 n -0000177731 00000 n -0000176981 00000 n -0000176050 00000 n -0000177104 00000 n -0000177354 00000 n -0000177417 00000 n -0000177480 00000 n -0000177543 00000 n -0000177606 00000 n -0000177669 00000 n -0000183766 00000 n -0000181402 00000 n -0000177830 00000 n -0000183203 00000 n -0000183453 00000 n -0000181609 00000 n -0000181802 00000 n -0000181996 00000 n -0000182219 00000 n -0000182442 00000 n -0000182631 00000 n -0000182807 00000 n -0000183015 00000 n -0000183516 00000 n -0000183579 00000 n -0000183641 00000 n -0000183704 00000 n -0000188490 00000 n -0000187183 00000 n -0000183891 00000 n -0000187306 00000 n -0000187369 00000 n -0000187494 00000 n -0000187619 00000 n -0000187744 00000 n -0000187869 00000 n -0000187931 00000 n -0000187993 00000 n -0000188056 00000 n -0000188119 00000 n -0000188182 00000 n -0000188307 00000 n -0000188428 00000 n -0000192289 00000 n -0000190983 00000 n -0000188590 00000 n -0000191106 00000 n -0000191231 00000 n -0000191354 00000 n -0000191479 00000 n -0000191604 00000 n -0000191729 00000 n -0000191854 00000 n -0000191979 00000 n -0000192101 00000 n -0000192226 00000 n -0000196296 00000 n -0000195111 00000 n -0000192402 00000 n -0000195234 00000 n -0000195359 00000 n -0000195484 00000 n -0000195609 00000 n -0000195734 00000 n -0000195858 00000 n -0000195983 00000 n -0000196108 00000 n -0000196233 00000 n -0000457639 00000 n -0000200381 00000 n -0000199447 00000 n -0000196409 00000 n -0000199570 00000 n -0000199695 00000 n -0000199819 00000 n -0000199944 00000 n -0000200069 00000 n -0000200194 00000 n -0000200319 00000 n -0000204118 00000 n -0000203307 00000 n -0000200507 00000 n -0000203430 00000 n -0000203555 00000 n -0000203680 00000 n -0000203805 00000 n -0000203930 00000 n -0000204055 00000 n -0000207810 00000 n -0000207375 00000 n -0000204244 00000 n -0000207498 00000 n -0000207623 00000 n -0000207748 00000 n -0000212719 00000 n -0000212283 00000 n -0000207923 00000 n -0000212406 00000 n -0000212531 00000 n -0000212656 00000 n -0000216691 00000 n -0000216130 00000 n -0000212845 00000 n -0000216253 00000 n -0000216378 00000 n -0000216503 00000 n -0000216628 00000 n -0000220695 00000 n -0000220009 00000 n -0000216830 00000 n -0000220132 00000 n -0000220257 00000 n -0000220382 00000 n -0000220507 00000 n -0000220632 00000 n -0000457764 00000 n -0000225051 00000 n -0000224116 00000 n -0000220821 00000 n -0000224239 00000 n -0000224364 00000 n -0000224489 00000 n -0000224614 00000 n -0000224739 00000 n -0000224864 00000 n -0000224988 00000 n -0000228989 00000 n -0000228429 00000 n -0000225177 00000 n -0000228552 00000 n -0000228676 00000 n -0000228801 00000 n -0000228926 00000 n -0000232338 00000 n -0000230902 00000 n -0000229115 00000 n -0000231025 00000 n -0000231150 00000 n -0000231275 00000 n -0000231400 00000 n -0000231525 00000 n -0000231650 00000 n -0000231775 00000 n -0000231900 00000 n -0000232025 00000 n -0000232150 00000 n -0000232275 00000 n -0000236083 00000 n -0000234899 00000 n -0000232464 00000 n -0000235022 00000 n -0000235147 00000 n -0000235272 00000 n -0000235396 00000 n -0000235521 00000 n -0000235646 00000 n -0000235771 00000 n -0000235895 00000 n -0000236020 00000 n -0000240011 00000 n -0000239202 00000 n -0000236196 00000 n -0000239325 00000 n -0000239450 00000 n -0000239575 00000 n -0000239700 00000 n -0000239825 00000 n -0000239950 00000 n -0000243893 00000 n -0000242708 00000 n -0000240137 00000 n -0000242831 00000 n -0000242956 00000 n -0000243081 00000 n -0000243206 00000 n -0000243331 00000 n -0000243456 00000 n -0000243581 00000 n -0000243706 00000 n -0000243831 00000 n -0000457889 00000 n -0000247006 00000 n -0000246073 00000 n -0000244006 00000 n -0000246196 00000 n -0000246321 00000 n -0000246446 00000 n -0000246569 00000 n -0000246693 00000 n -0000246818 00000 n -0000246943 00000 n -0000250391 00000 n -0000249580 00000 n -0000247158 00000 n -0000249703 00000 n -0000249828 00000 n -0000249953 00000 n -0000250078 00000 n -0000250203 00000 n -0000250328 00000 n -0000253973 00000 n -0000252915 00000 n -0000250517 00000 n -0000253038 00000 n -0000253163 00000 n -0000253286 00000 n -0000253411 00000 n -0000253536 00000 n -0000253661 00000 n -0000253785 00000 n -0000253910 00000 n -0000256971 00000 n -0000256410 00000 n -0000254086 00000 n -0000256533 00000 n -0000256658 00000 n -0000256783 00000 n -0000256908 00000 n -0000260597 00000 n -0000259787 00000 n -0000257084 00000 n -0000259910 00000 n -0000260035 00000 n -0000260160 00000 n -0000260285 00000 n -0000260410 00000 n -0000260535 00000 n -0000263930 00000 n -0000263245 00000 n -0000260710 00000 n -0000263368 00000 n -0000263493 00000 n -0000263618 00000 n -0000263743 00000 n -0000263868 00000 n -0000458014 00000 n -0000267934 00000 n -0000267248 00000 n -0000264043 00000 n -0000267371 00000 n -0000267621 00000 n -0000267746 00000 n -0000267871 00000 n -0000271760 00000 n -0000271072 00000 n -0000268046 00000 n -0000271195 00000 n -0000271258 00000 n -0000271321 00000 n -0000271384 00000 n -0000271447 00000 n -0000271510 00000 n -0000271573 00000 n -0000271635 00000 n -0000271698 00000 n -0000275351 00000 n -0000274915 00000 n -0000271873 00000 n -0000275038 00000 n -0000275163 00000 n -0000275288 00000 n -0000279613 00000 n -0000279427 00000 n -0000275477 00000 n -0000279550 00000 n -0000280717 00000 n -0000280531 00000 n -0000279726 00000 n -0000280654 00000 n -0000283457 00000 n -0000283021 00000 n -0000280817 00000 n -0000283144 00000 n -0000283394 00000 n -0000458139 00000 n -0000287518 00000 n -0000287082 00000 n -0000283556 00000 n -0000287205 00000 n -0000287455 00000 n -0000292048 00000 n -0000291241 00000 n -0000287617 00000 n -0000291364 00000 n -0000291489 00000 n -0000291613 00000 n -0000291737 00000 n -0000291860 00000 n -0000291985 00000 n -0000296277 00000 n -0000295467 00000 n -0000292161 00000 n -0000295590 00000 n -0000295715 00000 n -0000295840 00000 n -0000295965 00000 n -0000296090 00000 n -0000296214 00000 n -0000298601 00000 n -0000298290 00000 n -0000296390 00000 n -0000298413 00000 n -0000298538 00000 n -0000302537 00000 n -0000301977 00000 n -0000298727 00000 n -0000302100 00000 n -0000302350 00000 n -0000302474 00000 n -0000306367 00000 n -0000305995 00000 n -0000302636 00000 n -0000306118 00000 n -0000306243 00000 n -0000306305 00000 n -0000458264 00000 n -0000308094 00000 n -0000307908 00000 n -0000306519 00000 n -0000308031 00000 n -0000311633 00000 n -0000310822 00000 n -0000308220 00000 n -0000310945 00000 n -0000311195 00000 n -0000311320 00000 n -0000311445 00000 n -0000311570 00000 n -0000315131 00000 n -0000314695 00000 n -0000311732 00000 n -0000314818 00000 n -0000314943 00000 n -0000315068 00000 n -0000318411 00000 n -0000317850 00000 n -0000315257 00000 n -0000317973 00000 n -0000318223 00000 n -0000318348 00000 n -0000320399 00000 n -0000319838 00000 n -0000318536 00000 n -0000319961 00000 n -0000320211 00000 n -0000320336 00000 n -0000321770 00000 n -0000321584 00000 n -0000320498 00000 n -0000321707 00000 n -0000458389 00000 n -0000324876 00000 n -0000324315 00000 n -0000321883 00000 n -0000324438 00000 n -0000324563 00000 n -0000324688 00000 n -0000324813 00000 n -0000327728 00000 n -0000327417 00000 n -0000325002 00000 n -0000327540 00000 n -0000327665 00000 n -0000330506 00000 n -0000330320 00000 n -0000327854 00000 n -0000330443 00000 n -0000332014 00000 n -0000331828 00000 n -0000330632 00000 n -0000331951 00000 n -0000335490 00000 n -0000334739 00000 n -0000332114 00000 n -0000334862 00000 n -0000334987 00000 n -0000335112 00000 n -0000335175 00000 n -0000335238 00000 n -0000335301 00000 n -0000335364 00000 n -0000335427 00000 n -0000337031 00000 n -0000336720 00000 n -0000335616 00000 n -0000336843 00000 n -0000336906 00000 n -0000336969 00000 n -0000458514 00000 n -0000340490 00000 n -0000339944 00000 n -0000337144 00000 n -0000340239 00000 n -0000340302 00000 n -0000340365 00000 n -0000340088 00000 n -0000340428 00000 n -0000341831 00000 n -0000341645 00000 n -0000340603 00000 n -0000341768 00000 n -0000344033 00000 n -0000343721 00000 n -0000341931 00000 n -0000343844 00000 n -0000343907 00000 n -0000343970 00000 n -0000346124 00000 n -0000345563 00000 n -0000344133 00000 n -0000345686 00000 n -0000345811 00000 n -0000345936 00000 n -0000346061 00000 n -0000347945 00000 n -0000347384 00000 n -0000346237 00000 n -0000347507 00000 n -0000347757 00000 n -0000347882 00000 n -0000352037 00000 n -0000351339 00000 n -0000348044 00000 n -0000351849 00000 n -0000351492 00000 n -0000351668 00000 n -0000458639 00000 n -0000352123 00000 n -0000355205 00000 n -0000355230 00000 n -0000365690 00000 n -0000368173 00000 n -0000368204 00000 n -0000371597 00000 n -0000381801 00000 n -0000382076 00000 n -0000399833 00000 n -0000419130 00000 n -0000419559 00000 n -0000437152 00000 n -0000442576 00000 n -0000456493 00000 n -0000458719 00000 n -0000458844 00000 n -0000458970 00000 n -0000459069 00000 n -0000459151 00000 n -0000481181 00000 n -0000496580 00000 n -0000496621 00000 n -0000496661 00000 n -0000496892 00000 n +0000163181 00000 n +0000324449 00000 n +0000322573 00000 n +0000324283 00000 n +0000427158 00000 n +0000164846 00000 n +0000164660 00000 n +0000163495 00000 n +0000164783 00000 n +0000166487 00000 n +0000165737 00000 n +0000164946 00000 n +0000165860 00000 n +0000166110 00000 n +0000166173 00000 n +0000166236 00000 n +0000166299 00000 n +0000166362 00000 n +0000166425 00000 n +0000172287 00000 n +0000169923 00000 n +0000166586 00000 n +0000171724 00000 n +0000171974 00000 n +0000170130 00000 n +0000170323 00000 n +0000170517 00000 n +0000170740 00000 n +0000170963 00000 n +0000171152 00000 n +0000171328 00000 n +0000171536 00000 n +0000172037 00000 n +0000172100 00000 n +0000172162 00000 n +0000172225 00000 n +0000176721 00000 n +0000175414 00000 n +0000172412 00000 n +0000175537 00000 n +0000175600 00000 n +0000175725 00000 n +0000175850 00000 n +0000175975 00000 n +0000176100 00000 n +0000176162 00000 n +0000176224 00000 n +0000176287 00000 n +0000176350 00000 n +0000176413 00000 n +0000176538 00000 n +0000176659 00000 n +0000179891 00000 n +0000178585 00000 n +0000176821 00000 n +0000178708 00000 n +0000178833 00000 n +0000178956 00000 n +0000179081 00000 n +0000179206 00000 n +0000179331 00000 n +0000179456 00000 n +0000179581 00000 n +0000179703 00000 n +0000179828 00000 n +0000183176 00000 n +0000181991 00000 n +0000180004 00000 n +0000182114 00000 n +0000182239 00000 n +0000182364 00000 n +0000182489 00000 n +0000182614 00000 n +0000182738 00000 n +0000182863 00000 n +0000182988 00000 n +0000183113 00000 n +0000427283 00000 n +0000186459 00000 n +0000185525 00000 n +0000183289 00000 n +0000185648 00000 n +0000185773 00000 n +0000185897 00000 n +0000186022 00000 n +0000186147 00000 n +0000186272 00000 n +0000186397 00000 n +0000189425 00000 n +0000188614 00000 n +0000186585 00000 n +0000188737 00000 n +0000188862 00000 n +0000188987 00000 n +0000189112 00000 n +0000189237 00000 n +0000189362 00000 n +0000191869 00000 n +0000191434 00000 n +0000189551 00000 n +0000191557 00000 n +0000191682 00000 n +0000191807 00000 n +0000195065 00000 n +0000194629 00000 n +0000191982 00000 n +0000194752 00000 n +0000194877 00000 n +0000195002 00000 n +0000198979 00000 n +0000198418 00000 n +0000195191 00000 n +0000198541 00000 n +0000198666 00000 n +0000198791 00000 n +0000198916 00000 n +0000202539 00000 n +0000201853 00000 n +0000199118 00000 n +0000201976 00000 n +0000202101 00000 n +0000202226 00000 n +0000202351 00000 n +0000202476 00000 n +0000427408 00000 n +0000206180 00000 n +0000205245 00000 n +0000202665 00000 n +0000205368 00000 n +0000205493 00000 n +0000205618 00000 n +0000205743 00000 n +0000205868 00000 n +0000205993 00000 n +0000206117 00000 n +0000209422 00000 n +0000208862 00000 n +0000206306 00000 n +0000208985 00000 n +0000209109 00000 n +0000209234 00000 n +0000209359 00000 n +0000212289 00000 n +0000210853 00000 n +0000209548 00000 n +0000210976 00000 n +0000211101 00000 n +0000211226 00000 n +0000211351 00000 n +0000211476 00000 n +0000211601 00000 n +0000211726 00000 n +0000211851 00000 n +0000211976 00000 n +0000212101 00000 n +0000212226 00000 n +0000215202 00000 n +0000214018 00000 n +0000212415 00000 n +0000214141 00000 n +0000214266 00000 n +0000214391 00000 n +0000214515 00000 n +0000214640 00000 n +0000214765 00000 n +0000214890 00000 n +0000215014 00000 n +0000215139 00000 n +0000218553 00000 n +0000217744 00000 n +0000215315 00000 n +0000217867 00000 n +0000217992 00000 n +0000218117 00000 n +0000218242 00000 n +0000218367 00000 n +0000218492 00000 n +0000222037 00000 n +0000220852 00000 n +0000218679 00000 n +0000220975 00000 n +0000221100 00000 n +0000221225 00000 n +0000221350 00000 n +0000221475 00000 n +0000221600 00000 n +0000221725 00000 n +0000221850 00000 n +0000221975 00000 n +0000427533 00000 n +0000224919 00000 n +0000223986 00000 n +0000222150 00000 n +0000224109 00000 n +0000224234 00000 n +0000224359 00000 n +0000224482 00000 n +0000224606 00000 n +0000224731 00000 n +0000224856 00000 n +0000227472 00000 n +0000226661 00000 n +0000225071 00000 n +0000226784 00000 n +0000226909 00000 n +0000227034 00000 n +0000227159 00000 n +0000227284 00000 n +0000227409 00000 n +0000230392 00000 n +0000229334 00000 n +0000227598 00000 n +0000229457 00000 n +0000229582 00000 n +0000229705 00000 n +0000229830 00000 n +0000229955 00000 n +0000230080 00000 n +0000230204 00000 n +0000230329 00000 n +0000233171 00000 n +0000232610 00000 n +0000230505 00000 n +0000232733 00000 n +0000232858 00000 n +0000232983 00000 n +0000233108 00000 n +0000236494 00000 n +0000235684 00000 n +0000233284 00000 n +0000235807 00000 n +0000235932 00000 n +0000236057 00000 n +0000236182 00000 n +0000236307 00000 n +0000236432 00000 n +0000239005 00000 n +0000238320 00000 n +0000236607 00000 n +0000238443 00000 n +0000238568 00000 n +0000238693 00000 n +0000238818 00000 n +0000238943 00000 n +0000427658 00000 n +0000242589 00000 n +0000241903 00000 n +0000239118 00000 n +0000242026 00000 n +0000242276 00000 n +0000242401 00000 n +0000242526 00000 n +0000246171 00000 n +0000245483 00000 n +0000242701 00000 n +0000245606 00000 n +0000245669 00000 n +0000245732 00000 n +0000245795 00000 n +0000245858 00000 n +0000245921 00000 n +0000245984 00000 n +0000246046 00000 n +0000246109 00000 n +0000249538 00000 n +0000249102 00000 n +0000246284 00000 n +0000249225 00000 n +0000249350 00000 n +0000249475 00000 n +0000253150 00000 n +0000252964 00000 n +0000249664 00000 n +0000253087 00000 n +0000254228 00000 n +0000254042 00000 n +0000253263 00000 n +0000254165 00000 n +0000256940 00000 n +0000256504 00000 n +0000254328 00000 n +0000256627 00000 n +0000256877 00000 n +0000427783 00000 n +0000260914 00000 n +0000260478 00000 n +0000257039 00000 n +0000260601 00000 n +0000260851 00000 n +0000265254 00000 n +0000264447 00000 n +0000261013 00000 n +0000264570 00000 n +0000264695 00000 n +0000264819 00000 n +0000264943 00000 n +0000265066 00000 n +0000265191 00000 n +0000269386 00000 n +0000268576 00000 n +0000265367 00000 n +0000268699 00000 n +0000268824 00000 n +0000268949 00000 n +0000269074 00000 n +0000269199 00000 n +0000269323 00000 n +0000271675 00000 n +0000271364 00000 n +0000269499 00000 n +0000271487 00000 n +0000271612 00000 n +0000275575 00000 n +0000275015 00000 n +0000271801 00000 n +0000275138 00000 n +0000275388 00000 n +0000275512 00000 n +0000279384 00000 n +0000279012 00000 n +0000275674 00000 n +0000279135 00000 n +0000279260 00000 n +0000279322 00000 n +0000427908 00000 n +0000281097 00000 n +0000280911 00000 n +0000279536 00000 n +0000281034 00000 n +0000284380 00000 n +0000283569 00000 n +0000281223 00000 n +0000283692 00000 n +0000283942 00000 n +0000284067 00000 n +0000284192 00000 n +0000284317 00000 n +0000287555 00000 n +0000287119 00000 n +0000284479 00000 n +0000287242 00000 n +0000287367 00000 n +0000287492 00000 n +0000290474 00000 n +0000289913 00000 n +0000287681 00000 n +0000290036 00000 n +0000290286 00000 n +0000290411 00000 n +0000292387 00000 n +0000291826 00000 n +0000290599 00000 n +0000291949 00000 n +0000292199 00000 n +0000292324 00000 n +0000293747 00000 n +0000293561 00000 n +0000292486 00000 n +0000293684 00000 n +0000428033 00000 n +0000296788 00000 n +0000296227 00000 n +0000293860 00000 n +0000296350 00000 n +0000296475 00000 n +0000296600 00000 n +0000296725 00000 n +0000299283 00000 n +0000298972 00000 n +0000296914 00000 n +0000299095 00000 n +0000299220 00000 n +0000301682 00000 n +0000301496 00000 n +0000299409 00000 n +0000301619 00000 n +0000303106 00000 n +0000302920 00000 n +0000301808 00000 n +0000303043 00000 n +0000305862 00000 n +0000305111 00000 n +0000303206 00000 n +0000305234 00000 n +0000305359 00000 n +0000305484 00000 n +0000305547 00000 n +0000305610 00000 n +0000305673 00000 n +0000305736 00000 n +0000305799 00000 n +0000307338 00000 n +0000307027 00000 n +0000305988 00000 n +0000307150 00000 n +0000307213 00000 n +0000307276 00000 n +0000428158 00000 n +0000310349 00000 n +0000309803 00000 n +0000307451 00000 n +0000310098 00000 n +0000310161 00000 n +0000310224 00000 n +0000309947 00000 n +0000310287 00000 n +0000311675 00000 n +0000311489 00000 n +0000310462 00000 n +0000311612 00000 n +0000313761 00000 n +0000313449 00000 n +0000311775 00000 n +0000313572 00000 n +0000313635 00000 n +0000313698 00000 n +0000315781 00000 n +0000315220 00000 n +0000313861 00000 n +0000315343 00000 n +0000315468 00000 n +0000315593 00000 n +0000315718 00000 n +0000317566 00000 n +0000317005 00000 n +0000315894 00000 n +0000317128 00000 n +0000317378 00000 n +0000317503 00000 n +0000321491 00000 n +0000320793 00000 n +0000317665 00000 n +0000321303 00000 n +0000320946 00000 n +0000321122 00000 n +0000428283 00000 n +0000321577 00000 n +0000324659 00000 n +0000324684 00000 n +0000335144 00000 n +0000337627 00000 n +0000337658 00000 n +0000341051 00000 n +0000351255 00000 n +0000351530 00000 n +0000369287 00000 n +0000388584 00000 n +0000389013 00000 n +0000406606 00000 n +0000412218 00000 n +0000426137 00000 n +0000428363 00000 n +0000428488 00000 n +0000428614 00000 n +0000428713 00000 n +0000428795 00000 n +0000450825 00000 n +0000466224 00000 n +0000466265 00000 n +0000466305 00000 n +0000466536 00000 n trailer << /Size 1983 @@ -12232,5 +12146,5 @@ trailer /Info 1982 0 R >> startxref -497048 +466732 %%EOF diff --git a/docs/Samba-HOWTO-Collection.pdf b/docs/Samba-HOWTO-Collection.pdf index 5c604b70038..615d2831240 100644 --- a/docs/Samba-HOWTO-Collection.pdf +++ b/docs/Samba-HOWTO-Collection.pdf @@ -4281,12 +4281,11 @@ endobj << /S /GoTo /D [2858 0 R /Fit ] >> endobj 2860 0 obj << -/Length 233 +/Length 223 /Filter /FlateDecode >> stream -xڍOK1 )rM;] `oAfWQكޖ]G^^~4 Ðtb~A0x_iOeIC\4h['9=)XS׹vPU ?I탹_ݮ[fZQ5w[-w8]\j(L:Ǽi< gb -k "ajڒ?kfs| %2_endstream +xڍ?O1 sC'N:jAl-= ]=>W)dPydRLVhV> endobj 2872 0 obj << -/Length 1451 +/Length 1373 /Filter /FlateDecode >> stream -xڍWK60RHz3A.)=4=VV I)r Xp838/E?ȓ0"0bQV^ ǡ&J+Daj""Y(,b~Z4L,?zW˕̒`\Y`?T4OJY18,ڶd~\Wx8X%hڀ+'2.AOG<jpJR뷀J a@6';!FYώ|j["֜8g{ EʝxCoCe y8A;^#8@{Y5,9Zz+B"a>Fae^扃!? LN2݂i)5v7Z1X@LG{KڝΔ3ѺG>8_#r Et_K G -#eūz@ w(U$Iq8q:?'!Wv -y9 L%b'䬦GLB%wendstream +xڕWKs6Wh|)5$[N%!~ EIvgL`wY@lg2ΊM0&tq$i s1pQ4̏_d~ˮʿն %z2gAe[gyˢl#, ߷tN,M)ҚhQ_R knQzj[rK'(y%j?_$ivn;}1(IL##$5t=9M)rz^|;LJߔrU}SeypE@b5oН_!ڷm\Қhn8W8gbO9`BzȫbpvL]O˿ыOG!$tY44F$8_#5JXT&wY +Wpj0J}RƁK)n0ڍ^JY=W۾ww<NڷFGY|P~;úBp?\w+B1.ch##*eMQYaϘt/I \Dď#5g|gj_TRsдثlf7Sjpxjq֗ݕzoetTHUThKMx}u) +\~7:>)O͵@Yx_LUFK7=;LGi^p;^6w&}b s8ȱ\ N7=}}Rrҭ*[}̗ *e&}^4cŕnhqI2=mAdž6%BNت57y<Xh~@Bbq.cOLW; :0ݏ D^| Vf)\8 2l4<U?15XM(> endobj 2886 0 obj << -/Length 3961 +/Length 2140 /Filter /FlateDecode >> stream -xڵ\ms_Ly>Nrve73I>P$,1@$wea4&G E2c<&E,&ˇ >_."9gIUoW>Y݅9jpf D}\|woENzSy'(<,Scc`g^dn.^|哊Uy2#i*sIC -n͒0b|hVͶr\IyBbj =NR#=(0Aٛ]Q g)688 -l_ŧZ`ȯt A>?I};f%7e! 5bS^?_/]zwh7am9 4%y`3@ `ӡ+G4gj8GΆrې#&Wh$9#2#IK,Q7s_Q&+L, Am†K0>, [0K#)p-;L(4[d:IwxdQ &0xJ2QqH&7ߖz%o2u1Z.Fm}ۨ }?O_1~q9:*r݀c!gIQwv` 0r@sxƈtxA7M0֠B؏5,;e" WB9b:t)DsxD4yD~"bYrQ@/ -r t<3#oio*p̷1sGcu0A]P{]]ҩ*a𤲊PV\eF/:*z_᭗ͥۿDu]@Py:T+KHr tD/n0(N/߾~sy_7H'9:[Kf蒛"f_r+Y<>}W#Mn$Fvtw6gʬXm1EyT͖?],|[Z44.$q<ԋ -h0 rt -,i8&OEQ,K, -k 0&( a/ ӡK#l<G͡+Q?+0%oakq_iQ^7JM ڵKqYxD وVnj'(G7iIJ&a3"tᙲGa!6d=  -(ZBa0d9<D5ܺx*y63񈇪Ul\(ƍ,M;1o.ph?Ғendstream +xks6~>R3͍:%6vۛihD$ HE*dI8Hp , OǸ +D?xOzB3j|Gy 0o{9a؟\O1U~ڻ"c"{K/O\F hdZ|Q8-^T pLKkYb\ c" y6eH_:Q)xJP*;VXgFTDV_GGwww즼ay19pÀeRMSVYRhŸ/y(B>;ϩhS='^Me]|pAu&X@:o]RE\!I|0\G5"p|-F $,&GQ`s|,%JmT"FG-Ht ^o&N.j&\ԁR?cl]b"A S #&Rk&9'S;w UMє>yp5ɨ&mnȼM~פMHOF"3fjΔ4'o KMI)͘$9.׬<< ^bo\Žtf=2C9?k]t +-CG$v2z;sSC{Oa!"7@z +eD 6@΁[[Ycs| EHah5k}ktQQuUM_b} ELf( IGef0MoRfˤ C8s +tr#LEV(hZ . ~{(TtHtȁVltOYf~gX 6PG#jy!* CVR.aUob*,P,pv)sׁ<@.lNlԸ7[g^>#g-ekd5%ۿp& ϓ( 3pKnGmy{LigJ3>ǵ*y-DSWH4߽4ވs' Ey~ )߻bʁyJ//]$k;D(rp7Q +=&T[SHh7f\Ϭ{T> ӣv(l]vb)] (ZZY,B,&,$p=I1eehgɲZm;qER@.odwQ4/i668b;aFk$wNB0ԝ,<E:ma8o1(2$Ȯ]_"y'l1t&,șQJ\*OP^'_ 8_dv5R@^EQٰB,kИm->vIW@=Dh=Diu,݀mi;AS[9> endobj 2964 0 obj << -/Length 4158 -/Filter /FlateDecode ->> -stream -xڵ\Ys6~У`$xVmmٙ5Ύ!-2cIt$zm\$UJĖk4"E_<+3jV9h<[l. -"*"*w]G4[͛ '9"qU6iFIR⿃]:\a(!I?Јe괉iNḫ,#yZ0.6Ngr:{i򙲹[6=?\|s7x$Y9|0f9)f|ҲWU<_"p$IZSJZ|а+kw-\}L=Zn28'QMlls[&{H)ɫ$idp`-uA?8+Iɑ^n$n -O ab6>^&ռ"(Im7eccОtE$"u氌ZEJ';')FʆAa7e[٣y=ZAg{Y}mcZ-+H~uI :7!)) - JaH 蒂LRС`6%F)\R@3dO ipE -^ RB86m[?9Oz^O0L )QئKwnڝI 6ۣgAʈllsMG'H'oT6 ݾo+k|Ŏujc ޿R|-\7/̸\O_v2֛jtx*s5-̴$ɲyOcTN&$'͗_NV@,ɶ۳{1t-*R6H9-ddc:Ō[a7]JO5`%|@miToJibcѵ5uK+ω{v*kp0ax^~{.%1AwV-߾<&h4.]oLjduZin^jnOZSNXM@8}gHTR66$nhѼ1V:GYėkV jožU}yzy\eç}xZߋ\>eoeްg˺Wƒ`5޲L˧YQ0(n4_~XiYd\\ۊ&~?+! $;DE9ɁFЈ5 -t)J;`!AP&:B3k,\2"m  1<jpl84pxh3롵lqո-*ݮ]Z^-.|Kb&rI0sJB))'?]qy h~Uw҈ Rߝ&؝X;̀ެ5斍}ۤc|~2^V -\~|J_#("QMqu_'!0/'qI2heie,f@W/ko{5U|/gool#nggT|7_X g{6n;^nZQF2;E7ٶ6-JJ?%OK!)L?-5 -t⮚~[?)0Y&H2h+*NNy(F~H IÌ.hϽ3^.XpXű08Vqt ~))P 6A`] gg5a6۰cap )I,[+^3,?ۅ*񵇞-} -'yTl}#$]8 -KsyU%i ͥ1ڙD kx([l0=/mt˾W'Tbѽl=C2ֱN6ѢQvf"|Rلȯ -蠿<@ -l80+G-rPc4vfez}qD:PyjMP/Df@$g5, (I 6J/,%qvߚ'$ J7o뽨kuJ8}7GEt[#@M] !zҊ1oTT& 3KZ3)CVpx2vabp)CHR 6@O ipE -ป;@< ?H}xkIW/0%QKW\[}]=64@aML=dѓ?J}Shy;gu8ʺs/>g3Oá֧ȿq8 -|6N -ΧOin"(v%m}!2IP'DF4hg3?੻oG~G)S]y_ag]M̨בi*eCԃrèZ. A׃!=๫ pU7]QUcM8TGUcJ$.Xq5͓W"ʆAטvbD^L"')RD0(++meXiځ ijR6A팾]g4@ 'f1 -nÈbap ):`7'y _ӊ_~> =\ iMreYͽ,–v+7jl$;^¤lxdlj:ЌTl}!1T> +stream +x\[s~̌nTKvga<X" {_{$#aOXri\{z, (YL3ޙÝwgh;} W?~wÙx9ۉL`ió{fzf7}K&xcpe [ߏξy+LdtF3j1/Nч7Ι#-fZi9=M^0n +W<{} C.LJY<1)\G+鼸yQO:1|X7;pfHx6lWe8>$ s00H0,O$l96A8Y,zbC T_HhY3} Ưߔ㗼q$b1mӅu\e IE6'L٦xz5RP+= y?%Jf^02ЫŁw`\ᱶոL +{g9DAZ +;Fo0ʱ-)8sM> kݽB힤 p2+t2xUO2=6I~RͤC/{ӓ2Z 4:>0D{NQU2Ԯb]0.l7 ۀ, }x*l0ˤMΙ-yeT uqX;\-qbn҃44E \>GR3LzPeV6Tn cgT,ÙPHbgt%7 >D96O͟!\h4y~òp[~?Nd/P +C:/ٟaCFkFTlTjQ)55]ڑP[Σlya:'RBh UK1k b]/t{m'؉h>֞;JZ;\ b XăۉaMnz`fvԃ鈐АBhr`ݛrYL? +QSfjz $!bnǠ˔I}bI!GyFAө׸IF6 3pC4y$PȬM`NLLo(Y7Y|:Ɏۘb/<9Ҁ>\4!C @lՖ/Ω_I4_nw6h +/͗H^at|aZ blx1zXyIpgD1"_9e"onQIuI1}3)2H˽_/.5LU\kUҖ^А3lCWꄢAKZ3vndY-`ftQX4&AJpju| Ruϕ˴Fa`Eu, pt+Z!鵽FF{INGFmu90LT<~97AT1,{̭SiH`?aUe2v3c>@6|[UDt5\OMu~oȆ9&߼ EU_SD\+o@zքd ^-vo.)-g 93ˡFGYD)K̨>pE:1WXLB:,kz59>{t)#{TP+l9bf"Vjv:Ÿ,H\ԤdWmëyA%^@cP*^6sq$ powr Gg,NmY8S}g{yz}ojZfp1fTDrEKs$/j-%5CE8 TV>Uh43MjMί:%_¯C5xkЌtn NEtqߣ3+Epu7ؘP;n7Ι8I!Gj\^ӂGP<xgF_Yibe{=&<{t9]gt,)CnG_gGYkt8hf2XLKͿ'$=OTa>Nssk+? Ԙendstream endobj 2963 0 obj << /Type /Page @@ -4860,8 +4835,8 @@ endobj 2983 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[0 1 1] -/Rect [215.935 489.7 317.305 500.548] -/Subtype/Link/A<> +/Rect [215.935 489.7 288.302 500.548] +/Subtype/Link/A<> >> endobj 2984 0 obj << /Type /Annot @@ -5088,20 +5063,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3039 0 obj << -/Length 1737 +/Length 1067 /Filter /FlateDecode >> stream -xڵZr6}Wz AN\nqcO_<c)DWd] FkO&I..( ?I0S%dgw 10bJ|%`.'ɯ7FDl3)8C`~r=ҾVd}(7ͬQ0,JfsTB^L{CL!USFYY~DL?\N~N2b OȭDX _ϧT_1H>NID CDI[pRH)Q [;tR]N5GM^}Cz/vs14Y3JҌ~ H%+(*UQAf.!iPZW0V*4z{_[e~ R*NGOUN`F?JMTZ<;~5Eޞh5gF(Pj)D#$}7Y]Etߗ><%0>[N "jD!(UH*a7aH!VzSV7Sx%LOym\}{XJ/QI&(Hq0}Ck7@a}? Dsxir$TBՐ -B!"p- -0c -b% (NrBzCRݐT {8<RӞW*$W0+ᩇ\oG??t3M.JS(jjN&m>/BXQ"Q3݀S^k]!Vb݄>ؤp}7c Q \!78D 0yP).{i:x`F>QsW6O= i+Tb|˙85Dtkhk & ri{uzZ#ΣmP 'm`InȦ 6űsamvP5DLɂuI#J lňzL\ -dT ll!) ٞ$-gxd1/`?D==h0=^}jMfav7SEv.žO"AWKST)^rD!(UH*a7aH!VB7h7O‹v&N'l~jsW-y=# SU0>3G4vhYX"c23yfDJ#&haS% }X}3endstream +xYKsF+tLզq[rAXR=# Z;EU(Ạ<MH`$Qo==֌^30_;%,' J}~[^jSM_RN/c1BXNG."፾'tytiDyK*"Փ%U{8{> Bp43?E`{IL~-V5=7-T:|ϥ!C1)J6UHtNk+asr3A8pq)qvN{q_V{ᴭ&Y9Fx> endobj 3069 0 obj << -/Length 2716 +/Length 1876 /Filter /FlateDecode >> stream -xKsF\V 扽lY~dZ%H.`@lo<0C3&Q"YqULh7Q H Rz$A9'Pׂ F{É:)1Q'\slsxrU%N.FVj$F'/zڮWO~8xuҍBINkR05ӄ;[L(:O$捄Ble۠LoxBSQe3Ośvߴ7٢0Ga>dy9?~gia>JJ݀9# [&RDXn -[cUF(-]JAsH3;5ޓ8n5}u^ќYuy F4d uF gg ۢP+˩TPXVY.:lƕ*>\.a-nD(ZSQ6$z޹|IԭO`{j gKpsfty5kf`L>aNMCn4iY;9-)w fm~#xV wq -Qwz[9ь> NWCnHg5R8?>̇HG{4bn|+'2t!)}Ҥsv+Aj*iH3zs6ÿp 8 ][f D0K/@z fR% 83oFy)w>tˠ T2/@=$J%Ju>QZ :(FF4(k1feɦE>=z+ŵtk&}->O$Tl{$T7ѼJ8 ն(;+NJ Of-_{i+?1kIss~Wb8@mߴ:V-mZNb Y;$:>qzh ,cƆ*Żmhm"B46QzSĻ^ꓼ{qgM+Ȝ+Rɀ Z{yl7 SkdSf~BCnF1fY-~ rfwֵp-@bvWL*lZ_7H -7jCanXڒaf팮* Vt Kqĩ3jvX7|e:/?)o|n|f|YH)VW wMxx1o-wC);HU5mpu[M)J@;W_t wًӋSlWZ~+^Y.vA(69B2c)}s4KgTw}n& E>.4Qf6j— aLqǘw+0+njoڭqAC n. fBcPNG'zoŀ@hx~@E'Znh_/G %a}ߐꀑJ1w5?8>Ox?$2҄r2yWDGide ~Wn*}v?p5mmoؓZ@G^/0m߾>_mh&,7 H9aC>m%.зiZI'q _4hb톳v;lrM7?@olgҌƵ(|at4'ÿW6eV&8~/q} hQMɗ*T]u޹׸GS 8tU\ `u9n.vs1P5vElI4,_b0[Mގ2.-QqG-" {dgko1s"[\ \}}J Q H,uziԹYFB Q# -d=oGgv/xu eGN ՟+ a)^CInRXҤrvXBұ8]qҐc6Nu[n4r:OvVo:ۯ -J3zL$%]FQQf -qm|Ÿp`ĝvR ,|HɤSJ{TQ{c"%&1)mPpܾ -ے]Id#)leԟ= cyg %\N&BQg{9Dendstream +xZKsHW UayIl6bS9a+[J +!~{F;O'&Cx~|3֎ SBϛ#tvN=_hwO#vzos :Ϫ$Jkmk7z=ȥԞamdQa[:x-^Di]+bA|)0Nlŭ՝>,42z/Zߩo` Z&t f܌ lC[zn$YA3E`{#l[}$=7|8J9&}xЉۂw%xrI ^PAsT'hxnG (joФ)3"|l+$%i$"w Ր#VW`ܲrWΙ5>`34l#4wqÝWǾoްhi 0{4Bah"PE9|x? Ii1DW>5VFc/! o#d*!CIt =Qb fKbkȤD*oi9 5Бad&h9 @o)(%Vvφ'|&17FVp*ʫEͭw\Ƹ +۸ʆ#Mqnimjc6T'Vv`*H)oP,eh 詅#)߯fWQ.7x&Jfmt_  b ՜* ڿJ׮ u HccԽRaiw=ȋ,/6ixCs/¤ж0t:Zb9&q͌ɧM0 "Gkr#s< 9/&k~"Xۖ qKЍ6ju[Lfz^p>5*Xz13x::H=&.ռnUqd~`˹="3NtcPڎډ0`_xlc|Bl Iy/NI<3":(ǸJ E!_It|}gJ#{ίrE>c[.UM}=]QVQ9(A2Mފݺ(++̓nt-Ŋs~$V_dq}+tv}`;pnw@WW^cr SbGiw't5yQ]7韒8Sr" sqh!^Ks9 8}L,Y$6/lv,aVr|.޳Gug#G:wIb`~u;5j&y<^BLeL>|թ'[;1gB #py3=ݱyG UiZ4TS.hAsAnYFځz; !5|eBޯT6JȆFs* 檷ت=!kUc9nps/Ьvendstream endobj 3068 0 obj << /Type /Page @@ -5511,21 +5474,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3108 0 obj << -/Length 3504 +/Length 2452 /Filter /FlateDecode >> stream -xs6dnLO:^k:ڽMؼJt!Qk#b4U"luR/?pn&^|#ZGsZ.?6 }&^~wr~TM97_\7ồu=Zɉ'' r: +"+I7~NQ)%QA&J')||1dJdzmwoobL_o&S]0_)dܾغFjG.fVKo[<-G'S_!zo(t! )p{5r_~LU -RDgrkm@5_+*J5*# H:ZuUfe~-T蒫ۭkP%3@_CIE DgHLiu %.[g&[LR#vIen=;R~RHXi\i8\ti0<ݧHWJq*XMᡘEB[TZZfI[78쇅 +C+ZF*V=(jC Q_v`JQU.@Qųѽ AC *<É5HPZJ=JSX_\[sj^LBOeFDZ t/3H~z2UPxQ,/Q#^O*x4'foa iڸYxY.[ +hA߆ҊbZ -V8\( "I](zX:o }d;~%2R j ,"9m׎k\b ۅ7v}ac`hj7v>IEd,oP8Q,'U -߀^1єioRxe0BXLWF&4(<٬ROvflMM5et7uD1i,>a̅r$.AEܿo&pL5siuf4|1|R`8tnk[ )+;،g&,m3Z~ACG DՂc jTu{(JMBFnOGD)}@4CiF D8~pZMtizO&l[3!_9}e t1`c2M -7痫5L 8L(S0˛fut{1ͦkbbCf;9 IOj^_JRK -B\sOrkc_r5 E20 -,y8\)[Ryu܀`gT,61KdCF D8~pZk$3Lđ:c33V~աX^F^8\NT%k D ' %u(lT mR׋))Yۀbns4+P1࿟߾ݬ@|n-lrʇU~(?QG+?WkP*+{(QznJ߸DfN,Xu=&e$Z!QR6,Ĕl=Y|ɩ_PX4*UO:A2b6 sz'PpNhC -9~nK,#l|&)?SPQ,4.<i`&RF/|`.k|MliB4]Ӽ9, :ˏ:;_K7Ǘ5+)*c `#f/:G1'[w,fnf_^7zt]޹ߞə;zwjhdąf#lT7,fv,-iK]#Dv϶96U}v>7ƺbg9fyy 6kezu-7#7﮽@B(lWf:[\6pc]?H=8d{vt+IaT:8ߛѳĖ򾵛[2%䮞?ZT+pP\Q,+U -XրLkCVڶ3ukc6.ɄȼݹoPV7TpXu ]آy0y.dp?ۘGh%'=E0t+8X"p 1WkL0eMm sf3zii5Lro5tE,R|y>"H}ݐ|Ąb]˕\]M|T[埗E.J6owMƞQQ58ҐeFܔE(WE.2"'p@& ]}Zܙ/x[seͫ.Az9}qA ܍+7 ,- f3kB=W=xjCufas-GoZqMl^cpLZP'>MvdMT;o2MSu^޸\-A6uk4xVRʶV{ 4oke#,`Bod:{gw'oKJjOQ,cO |DNZvΈ,jw;?gç~V_Y!C<+8bUЉBbn%r8\aAzPzv k N6݋I\R+4R0j eg3D;O0M Y4S}*f( A$%W;&SZ-l| kCИDѿw%qsK%Q*R쨺hXcQc8\ "k*m:h((_bHpZ"ToGH4_xNjoZGi_;sC!>u>A"bdpdrzduI -Zb~puy7ks#*7LWԽ,kLځR=׎>WW}ʼnPUP=vq4F|L?<7;7.,w1)_;1Wex;&5š== QIZwd'f <~nD]>T? y>*VbTaZb8+lkX5Hq -TI?fendstream +x\[sH~PjPUDhSʷ$卝nFXb8n@$;vAC;ΑYQY/ÞxOH]i;O¥w?z;t%r6:̧}7>g28<ϽpzCE96޵:vlɞܖlt_SѬ%k@ԁcE ϳNιugV0+0n>?PÄݑΗnO +'L?2alfyjXaMn΅g{\!vbԣ?{Yx]9.~ɁYLFWuM:_)jdT e}Wn8`VӤ %-V*i[Qk0r."UFWq@-}8PzM2Tղ$lSt^O ju**QKNAܯRK0G5~C6H ![މ.↴cz2It@[ͩr\""FzTM8gY~(u{8Bth cE3R43:XgYR(yp:lM?b$ L|q7;1UDL砿e:ѱ>M/n9n&M$b2&*w̳ p% XX|OHg=_9*jyCxץ_%؝wu!.\v}3-H6~t&pcL9j8jtR=X-ŭ@jdi_ju%L\^|GIIJB5ep| JFs"' 0IaPQ3\ukL9{A.\׮j%00;ܯd:QbV.YLk]BЅDKٕk}BdH@+ڏFL}t҈4+/`s +_>o8\ 8ie8tE+*ōTpu8h ]9C,g$؅b7NEc~4O7 qn]S-7ʵrhبQY3+=K,.RoEI"3anHqxHudu+| PyEC4΀킆z^$.XSu%=.\W$@HxR6hH'o h>(+hK%b>IHߡ~\|܃Q5$fC7 +G\yX5L-谥%9NBYoaWߨ7LXq u +h%+Mo s4xYu +q*#״ +_ i guE *1vNf*iI0!sBje;˺vKoMNPʛE?'&YH]LYxIZ#!6PO7-7eE + TA95ӒHa'3P٪fՅ$udax +6sTBM13z &PoΝhSˎSn7V,5t]@86=hB|*#N!N[<.¬OgݹUdt%"ifec[F&u>zg2lM`jБaQ`]< _tTcۨPq;k-0J.O)S]y8*适fTNgHb< ئZ)%=җUPLoV̙} Jm-4.$ |M.de!ܠe- Q|5QBgO(Ho}Aon_6sf 7XoA= 0{Qn4F;?P]'\@lYSʨ&%= +C<}Z Oײ*aХ CZ;/ ͎K:ŏgZr2H*jUGSyYDp!!>Qi+g;na֯櫱<i&Cut'WX!k?" ‡IrI[[q΂endstream endobj 3107 0 obj << /Type /Page @@ -5858,26 +5821,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3161 0 obj << -/Length 3197 -/Filter /FlateDecode ->> -stream -xS9+\d,F#iHrU.Ucp6g濿n}3 $M}OݒZ=C]7%9LvyC]K2J}*[W7֔nU)`[FJZrBU -XqQb8x}ZNW 0.)^sswċVT5 QӰ!SW~@o$6"AH-iwkdk.<" hawI˵Yag# P΀4.H|FnX,/v/@|F Z1ti y;$xW&d)M&m{4՟ZV/݀qCc]b -1X놓"v[;  3,DMSݸ:HzBN!<YZ -V + 󛅱vTݩ1nO?am#.%Ck7 Tk&kQ`X1v[j}>[?ZX'2 -;lwoϸ©mK0f+Ld)E`yZmaZQ8ۚ̍f/yp*\aI-O_Ƕu 4f+MD+v@Khxz3z45'זDq'. - ]X9ZA%rF繶jc-TҀtmp]%XbTOs_1[a"=G<մf(ƾr^8%sj7 ϩTkD%ihH̢04עMxvB׏ȾE&#l7kF$Unaa)D4v&Y^\PécV^ew[lVFlnU nJŕPNb?"w;ɨ2\y]JڳưTe.k¥'vtf<7V;ӹr'c@zyZM=wL":/NAc@;@'"WAjAQ'GM_J8 ίBgEjV7݀|ͼ'ȓ򮤆24f+0Mgn@i`!11?\НB -\}G>iITRֹiǘǪ`ye:wӵ {cXk3\t2~fA߽I|O{[%ʏ/iAj-ʊ̒nn}=B멚Ij@#݀j*EF%ݚK=b|G.% F'AkP%6rQj~ vްOOZP42$swII%]J"8X? ֻ`5[KmKX/6m -vX4}yI.lKg?]mŬA}A,xD)[T*Jn $E~-RO d[@vHt4 "-k0UsxYԢd1+NJ}l h@{]6v1p;UFBȿK -c r( ȏRK)R}3s}w⍷4cC&{KOƷޗfV5O݀d+JdtWub7{ -z]AiΚ{;%Tk}0}/h 4?%ol[ЭGm`exk\6B=^^^HuVw?*UcO\ E(&wNOȻlp*yDl:Vϩ&W(`sƄn55i'sendstream +/Length 2114 +/Filter /FlateDecode +>> +stream +x\[sH~WP$$oRakI6ي Lyfb(b2{n!| y)W![j;#vU(PVؾ-f2#]'HY$a[߽n6p9;?+2Q=/ +w8$iK*()Mw9mToeO۾e=, +L",gÚAǏN`2"Kc>Ov}L1jFŸ4yNxx-kR $T*0-3oP,`ry: + f#< x9X~G /_;Cʰݩ}\do9ꊎ" +&x[Ai̾mdB.#Ǜ[OfWQ̼4'+ h.2sz4i#{Kߧ)!|JtB+qz 1jԥj0&Qf@~@=3^OTP%osW {o0E/ 3XI1_X&ЦYtHb#D!ʄSFD@2f}8)u5&|B=ï?_vR(q]Nu1FX~&rO@]NUeN2\'a~E߬ +{6_6aK@yi饽rɊЁkmjRZ5@ȳqjZ+# 7Uij҂(9Fcta6fdH + nHR$60Ez +B.ET d_&$srK踱9%9>%j?гI\V|.\Z"{["jP(3'5VÛIL ")nȒtHoX~.GQ6GzEaY@N"2K1h*nxMumSl5 9CL=KIS\+dp9 &7sE!RZk +U½^ X|k[nl=Afk&-]l9{E)R1{%Fz5/f趒xwU+Z E < wfW2uߜ̭ZNZ?lEJЕIm渜%_n1u- vt<_.8`>0W +ĔϢVv}!)#g\~>>hÆ=q0ZDJgfzMX@W 610ֈV}w8 4Qq\>$T@<&hJTvdX3V~\OrkjLΪآѐ0Ƭ/ЂVY ZebLyaRtⲃ+SfA{\Á<$O>Ha;lYK6#KD[F*a7Gϗo k nw bD7ތ6 _^XOzey-|\OMtXd9־~-*z:O@^Sң:Ag6aw}~rޣEuR z}/<|JYӶʪ~nPI<,L?xV=HG6% {/+[}Z! M4wY~0*8*tRQyW=xTQk7[^. _ -x:uĝ@57+Oendstream endobj 3160 0 obj << /Type /Page @@ -6217,31 +6178,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3211 0 obj << -/Length 3455 -/Filter /FlateDecode ->> -stream -xIs"u+RKr -E ;@4IEd"gFX DrTS5i@欞W~8eMpT&sToՓfJduX˟Ξ]g1;z&tV#^#q8x}vqK|&NjJ%X?ͤ r q4Q!Rj3Tۃ9Wݶ]t+]Ӌn'{'|0ҵ)~@DƱ=u'˛ܕ^j]ylJ{`}ֲT -ŭ>vã\*V#ߵs]\ ^xXohooIkKtkf*m<޷{t5}ycMl6z{k5w߮ڛe a -2JZ#,}6A=fXu}I%.X>N{I˱R kXƈE$fd#UpKi+T9wn3㞹ll?{wK(}րR -?ax=0Фl)b߬.C:nw>q kMsvx(Y(HL2w@Ef$$ff[ac_AL -=c+`*o5b55Mih5G#g@Uu?d c&0ؾ0ؒ0^"?.׻wq&:,"_VXI@>c/iM:#١XR>M}Ə¯M=luő|Mw,$VRr``IkHj9OК7ݮoM7mXUHaau¾cI&̧0ɾ0ɒ d;˩rn޵i:H|f Kع銩!lfyXgƲNb֙ץX YVE5ov>1Wz9@CG`kA@Z#F!^4tn`Z/o.?6AyM'`,$VW6վ0ՒHUpxFU3mvM*K}X=opXI4s.oK7QkWGHqe_&Uc- ?6[MGk3Gwypِꆹcf 7q=v$+_XU5)!V}`V%!"2+2DDO7Ƴ7!59caɷ4#.>7cմ.V/&Ygn=}A=[?tn^BuOmg&V}r׿P`*`^|ҟ/c*ӥܥΞٹ-)w׫t^2OX[쪭}*ۍ%\ --ɶjއT2w~w<,&Z$CBfbp 7kZK%A}(5"u.:ژhdnUUTw)Q6;[SUڭ>'l=֟<Z#20\Gb.CTWڿⲭmwZG#J{h,$V`yf7f^SωY[+wi)GB5y{z - #׃p=(iWeb}ǝ>!^} `^%WMPsk3|Ux)}LoaB^X/Ci,(U`9Ä -: ,"Г7f[tm   +iy6< X*? 0š[9^!]m7nh9z n" -TrЖ `*% zB ar }6ioЬ.סUrE -rІ `T%7GuڟZOϟ]΍*GXmCR 䞨 `%^otqabo~s>>Pc9%a00ڐuɒ[6ݺ]hۮغ_;vq4.&wT'ޑORsO CU8f#_iƿ;eD2]dxUendstream +/Length 2341 +/Filter /FlateDecode +>> +stream +x\[s6~W0}2uf7쭁>}0$Mml}ut$aIIB$a2$}~dn®`~@d7g$g{fwB"R? ;?p _;O珿D}Я'RtqRvgʈ(1Π .^:|!!νE#BdGW,j8'ިzeLI뇞M&jxRL+V݌Q)gow=x}NR(]<8{6"yKfX)i &/5~3k쬳vUſLLiQ+'e2K-}FXZ7er8SopA/`\ 3_Gz~ D}|D= cǕ9_R+.pgg~i3?4>Hzs_mI +y*˷%."t>I/WkiK,X"G;5&̬UQZxxac ^\"2(>!;w1;P(olrSc|uQvፋ/IoX+;d8[/d$cZ1`1`Þ ^:Pݘ/ͰTYz`c] kǯdVt&v6k%k& +$sm +`˔2KdTXbU-> C03t3 źr܆_]|$㲨*/F2EHt_ =0]THu?8vlFJW8&mZ4// +9wuX!ZblaYj!ق4NeW8T DEZy![ Pԓ *ys +뾨 8.zC>sz՗B W6Fa7.ˤvuVwM <q";5ݕa9J=2>fiix-ϪͅiCffk\') B L3N|A›ƚ4syBcmKu8)CO ;M" FMRh<.9Ю-D;2U%oq(%UOo#/_Hw.MA4~g)Q[em;䓞AI +b$~c+aLoqTUSֹfHeA2KyaYHS.h(dBI;^n^C7VOR>2;S^0\Xg뇺q5.thy_VUJ}l'YF[Cu +qA@Ft `K'rUyI#^Nuin,ճ0-6\`M;>çJU S+ID91V1**oëU)|'7)Zj6jW˨Obc*ђ>#{#\x+֋8e^S}#28r+B=-$5@+6aߺ6OҀʹy[Q?,WpPb&]_z8S%j ' v !3NMjcAi=fmcS5 !J4mA5Md9b9pE h2iZ91=BTpq!_Glf[dKH&> endobj 3266 0 obj << -/Length 3477 +/Length 2306 /Filter /FlateDecode >> stream -x[s۶+tޤ#3mNd؜ȒDɿ/n @"6&;Ncjb2deN$Q6T߼8{d=q.F4#UVߩ2"|tvj9a帝?ɟg=??f U_2«rt3Bjt}$$'Rpyqtz[;1R}$jPU%ɋ|THIrQzPJdBǂL/m,Սɔs1֗t6 awEF?tm+al5T#JJ*tً#4yRLY],ѴZy1*#Ǎ{T}W_OX1>W)}Qo@NUs(5+ ikIat -0%ƖvKLV%U^vg؃X{l*1SjJ5vz4PԜJuڽdgC8n p)D %{.Om6⧛(b#ݸUpvW13 ZLT`(JiԐҩ!xȔqc"m3<Ϛ|֚t|>H^ ~no=[6RsKX(*Dɚ5yzW&gβi])l1Qtf,3PA,A8650Sj25Uý;.um؀ vM$/+ `w( @G-0#̔B6GyՁ]k 29fWB>:2ҠUY/WXWl8W8Z+5 4CIs -a.4z9_{N09!9`P#1uET #%/)>^*xUVL9IgTwdwvG=;;p^ (!0+qrnơ緮C9ب SeJ-RgfY1uGFޚYou"pAuk>:o>:zcqu%%aΎXRj=o,,e٧G^%}\ -b ^p^Rj -¥O©Zs^˾jϰYHȦlWkk}SuǦ;s -,%ŖcZ~O p`)~ SL`K;{;705[8%~= M3{7<; K|( W4XFlF8ZO# c8f~zr*L=B/1>D;yCz [)-2'EhNEp7<\gʈz3:@w(ޞxj=ނ*#"퓫_p=mc@gV`vCr8n p`)32Y<+P~/ҠM1|C؎ [u)/9dyBeW$\" b dpdRj}YI"qN/,~Cy%!︪`tu1%01vKcLiIh3HZ⦁ Ym[]' WKƳ.6?E>EkMl79@!Y)taJC=,%<,&n q%WeB6 6 )(UO鄰B2+~[=j|4C[6 -^2t,LonɴWǾp>dAFޏzdJY(#R b* њG-\ -rl +mF*؏y T5z\oy.=rS?$oi yzsw*+\ [ K +~ 3(rS8K*04wְVLP%ZdJe#ܶ:hn2F{N¹ds#u|DC4 +|3I9hTй ~_yՑ2ۊӘ<3_t +p?$)A"[MvOf%|BUZ^v_O`hĴh촞L&vj~Ft7!L7Vpoz$IFS$6tB +-@ZH(q_]yWT;^ZH)"܀7d| h͒GwKAg6s2oOZTs4)gkS= 0W_Y?0к,Il>M6%;S>~eT  w(A3FCy!:6HJm#8E8*x'3v{E6NYaV%kPPFcɨ)S qtR(Ef&&E*uIޤ\4KvK t vm(Tgrdf˯Kk^R]sNXpYZC8sv\>$:EӁaWiחlxJZvO Rmo+P܁?BP dT]%o"핔}Sj}moCLĔIm/{t3u–D|>E I k.%pj-EKrA2v8c =mCgDddF Z/5yT)XV(T5:qոN)d||5"yB&9"Œ!>MFlPIõKRb a%;(ufpoV8+5uR'7ܫE9ZZsEuE4'_k$2dI}HB׬'6  MuU2 +KG1AjgL lOi>[5:1!q9hjʻ-XĆR qyݯkGZx^}E2 5Lҳd6絥=%)UuzB]_l6ejٓwR*dB{CM\T[L-r'l (w4u#Pe'{g2uAA2SD9_c_햵E{)ûj4Q]zȘo"OMgقQdU9-*~M <_g}grY.PRۑT,b"N}snv[;ׄ؄9 uX"@a%8,>8ޯ#)E²:E+_h26)Njno>L&Y~%|$kSzٍ3}.zYAvdؒ4cӿ?3ߚHKf񠎣!n3t_u̴L(OX6~ZYBLt@J$OוTOQ HB$%'Aj;ˠ|sSm +S v^19WYfldvN|Ow7_є<.Yn<2ACs#jUcv.Hzz#-ʈgiW5O+)t#d^AmODOs]2Xk 4Nkxsͅt#%YK33Zz҃d[nKSWx{hl)-UӤ]WSz=]iϸJR>wP5:*yi#NUVZ+?NT lL*7^-jp?"ݏho)uK4-7%ZBpd 8yU :̲EWеmK^H,#Pa?-fiDA[zY~Bendstream endobj 3265 0 obj << /Type /Page @@ -6971,18 +6916,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3319 0 obj << -/Length 3246 +/Length 2148 /Filter /FlateDecode >> stream -xs6WfN97t5mbg-)6'#߀D-\&qb2&2xR䨠Dq'br~vw-ώ~x**@oǛ)~?YxpSߣ~/&KՄ -DrA}.qFѿóolby \HH1#f fxJljQ)eMOյSq-fs<]]\-/O?TE1Uը**{6Q{1^%VRDlhgQ1R?Ђ!-{k^m*]X:̈~&vnsumHz R;ͬ Ḟ2pR+p-8D;VVopLU`3}G\ҊbZ`Zrj-uup^86K_ۙr\m¸$_wMq,2+F9jW+ R}JQ`W:oy떚YW3W{r, A5PD)%t-ϸP뒺HJ<77Yzu!AFP韯//툨VnDia#$b0ĐU8H('{*5]רՆpm7Hj..]Dg>o^O\&eؤF [ɩı* X067fȬYӸi`yi3~&]IQLeAv6eЦ6B;l6]r"xD8hմS!OJûIo?fŶ5ᆙUIHu{,(!J0ɜ@"ZSqtyqcw_q.X,;9ͱX\jBܰ0@sG~Y׫hܩJ~S>3cD P0a `>9a+R{>-'.ƬaKЩ ^Cd7MBBzr^,/bĮZ%#7XKMGKذ0Z񊢂H̯joF]׻~ܾ׆q鉳sL{}GL`f-Z̪ 4exQF<])bMac'zYM 9_3XQ,Cw a `9޻rQ]K s.M\mgy]{S0;2w!sjfN+BY8̏7fq}mIL=h,(c0iJx6}P<`j4!Q_Tm R] Ds0ސ*n -?Zط1Tǽ2^Еu ;ehX=l7- M9x[iF"R} -`U$XJh,ݼy.>vaw洐mZ|Ym7rV%b-hVmR->?fFsh+Dـ]BaM·;+2S0a `9()Qf -ylǜ,zl7?-L{?9~i܇=9\qsJm2;7jkw{,(AF9l2և $(}\ M6=w)bkwXcjP0ǜ*tIK0 X*~N-l*! RbyT*u0՜@W*Uo54c;=CtŃ:?gL Sx>3y!O AQ2塵>Y=v1v8eƆ[3ΩiEԆ9/3 uwuH tDz *:hVm*KTS8~=yOqfZ)ßcy Į0́zfF߹Pӟ05@TI2Sx 2S34@ `9:Ǩ:~bsXQ,=?}{Nm۴DDomOmYQC`:5•aٲ]lvp;5"e\̯=~jc1>2S{-1!iwo.:͸mS|SDErfi0+g5mov+w6gMo}q9K?XjQ,C-5Lm؂;qEHRvd&˳k]nb>U[rjeG.8I'Ne{'T<)*T%l,)4MSi94r%b!-=cVm/)<'i ڝl˦ [ݘN5> XQ,73woNm+$|QSuz:Bcٻ,m鮛Ϙpv]^}-ecPrj}B@/KɉJQwX -tXec | /Bd¢u=-vOU4o淉f"jګaX&Q,$5dINm`B fL$# caXBv9⏽3XVitKցO?cf,-uov, af7PW" -Ҝ:$*ŲFԸ ۰~:ב1ݎAxZ˪ div/~)XfQ,,5 frjĂ)v3=h,(ڟCh=6LU,b֖iQ$6>i1 QLn3 s .e [pKʧ0Hޖ7IiFWk]['͢tmo_׷6>G]FHnN'YK=B^gI9DX:fD`:+Q,3qS9|U!kdH'~_gD#G)yj|3T{?Lۧs-NgbvVԅLwS8&'endstream +x\s8~ffײ%K~i&5d1.0goW+ ^h3- cjզ?Uø+U䉐uYNʳ33.HG΃2ߋ; zy?P:_Ueɰqx]{wE/;ƪ}qw"s݅.}jóBãI8={h&6<4^1zp9}0vFǏyE:fg6+O)|.}ՃV׾6#/pG9g?B!ޒE^4_:AE!_jn>Cx~ { d>yMdcӌ9j3~GDZ 0/:EDZÙ(X`}ztlEd, N. vm^\xqUܥ34`\o_Ny*Pwep88kK,!N_/5\긪N4Uf} ]8%RYVGC'FbZN$|Sk+{gj;dQBD͍ .Y!ΰVhmY#n㈮KLsՉ|Aӝ!􋆜ɲS/X;8󘌯Cl#pzq=GyMzAR|P*ol܃WVγ@;"" BwKύ?6[ǔSbHkN`n4+#CL$&|"A/^|/:/yjśsߒXakgSDʐ.=1H8&<{ѹ!,^Ӓ&>A'FF*L* +NHN |xxdNBKS\T"f="CBҙucTʲ' ~={Lږ^/r!hĪ1۫#0+>[FZ'0L {U$*z8Fݕk5`.;$Pb~XF `Њ92q`ͥ)Β(Y{g7;/xjv<@` XlC@@k2 Vhb%IɓV3QH=}y.s؂Z#OF'wef>=2H0Stuhk6[jʬui6$s u9K:X?4'ղG(^&XjkarJNF}ru2(m3nK@$XWDEChNRE+p/t8f@_D6vD:rtKP)"]^8nFr1x6u->N?:]VymPW"Zv|1{Va));?d-ZpCWr.9 NM074M!AYLG}}X#*ך|4dPu 6y{a &eu4mi q-fV(*).e6? ˆK0+?*Ux_!$;~ 8-uޛL֫Ku/ϕٵ˿+*;rp꼺`X\]ib6Yq,tdm䪹'I +ڲSOYe'CNC\{6ߑZF/VԨ:(/2m+L5׵(iic-[XZ,ALŽn riЄs!> endobj 3369 0 obj << -/Length 3934 +/Length 2735 /Filter /FlateDecode >> stream -xݜs6W2 A[|\:4؜J7@I87IpH<xV0L.6'R^yvK{2OO9 Y9;Sf|vz3?m R[qɓsH4s# -?d(/ٍ<.愲1듳gktfJՂfU̖yރIಪ!N*ɢbLPݤ Xt~^y5E^,s/foꗘ nlZHsWqie\ܡ GD0HcQ@ -a[YP2ZKJO׋ ;iΫJGV^gcĖeI1,Zѯ?[nصACJs-”ZFņ61`ޚ˿<E>/D̯Ƹ&|ߵbFv2KgwЭBcЇSb$ yWWǪw {i `. -sS}G}9wnxX8Y˩L0g9F!X}0(HaD#N1Lh&JXWB/+K)U^UWm꽦Eߺ7ZMK%D À2#^y -Hd h쬼>qn6s -.v7]ȳ-!F`=G49&z~2wңJK7Vvs]훷 ^=]ctSхb t  5ѥzt\N#l͸vɳTNIqF5Kp sjsMu ¨{fs-kbNn[rѫ:ԙ5e2'dcV\aX~mr c2qjsL˿Ys.43SZi>8rڮȺtFF,Q׺]Wt.-вUJ+KЊjJHZ.~'Ǯڄ*Óv5: Eu7#M -^ޣ{*P,2)ʡ0ʔX߁f%󓺕.Ȏ:"k{KM`&&nTU{R"[fk8Z([0X9ʘOe2 qCN{V*vP !PgeYy^j;`T س$ @IeD,+@7ܝ_Y$oj<7IM떘ZLe%ƅ5zEL(gxql1p([PpJ?+`y3u8R"?㣫g2kgKeDq QRr90uTD%a=զvPh߸/C&Mm8n)*xht$:^T[b[꽌\#Xa *}ƁK~=U*t_}#%bwgs.ׂq9SkC۪a=@9;uw7;?N?G(ۆC `")Ypp$rބ"hկNcgXojԱ16~d9\( C `r)nEq;zU\ RQYx:5 7DKQtF5*sC9 @I#iAydkR?βmAgugn 쒝OO9!9+^vYddޘdJ èp[3CEBckÐSb=d4@9QijlKMpf-0~i7Y(@ێC  `d)HN27:n;Jg':?DꫪEvOWC؞0ơ0ƔXRa0~ڹ[#t=)i~xO%xƆs3%3D<ݜL -Umg$g0kuz[pW):x𥉉OS2ٙ,,wO|bk|)įf%|o6M^A08T>2S "+ڄ%+o-|XT,ѢMEC #-:%%3I!=nvn1OsUk/`*R_*A42- t 晐pbE.75J? -v}/q~}÷bno"Ge"̦o'h`DNR#r$q;%z]rp1_iף]4Kcޭ9 L% G4zDPoڼ1"{6՟\0,WؾkjMm7z6"/l\nee+7W(3k+%q2TWi_LOcǓL|h؝{ F4ѧzW Ѓk`.ￏsͩ_Vh*P,g,PQJgМF$޶devu]Zs8ͧw#{\PWߩCž-Ś `)a (5<~yhaYȿ^ǭLf}`V;󋯂k*P,g3(?*%֡*1\1Rt/w:/iu?nBUuі#3 *N1XAuH%1dIxq6Y# ^QMǛ: - %t:mB(^z|b{BKC2W(yWJ侳_3rS'+$/REV1 .26]/wo(oR -`Ɉ:."[y؛"endstream +x\[sJ~кNUЃ80 I֩M⍝<`- "'w{F'Nd+U 0o_4#GsGo;^< +=w48[qŁ+pFv=8yGcNx؞x}" <I̭bZriR'^Xgu^6yy {uZ,ĖkUc_l> _vDo_||os.WNr,v٠ gum΢]]s8V6Ζa=n%e +n\l %14cmosˇm +1|rYjՋbݏ(6&v1<+Yh@49))IVSWJմɅO|ȶ {\4d_ E0i{ j; TV6nv];.rǓ(p#ܵ0{=gr`$ztj4U:nW +I̳V"a*8?H=4=Glװ|j>W +-#KirU;R$nh,l$uڝu\I_!y~>y/+8WK1ܑ3bJItD; {)_soD>0FNFp38'x(0%S; [Isx5"(RTs(%+4Jf[$0 d;G䵜GMA1`|Qr:g]@ߑ+7hh? .}ϳ(Z*)|BtD9".B8SjtB,vF %'YT^8jnmVAµt{+N'~>pu3 `UTI^j"f愾HH Id1}R +_L<̐Ũ5[Uv8´-rIVoޗL ")c?bs |a64>P SE/x󤔙/SQ&W4m⩓=!&RTYϫUSޕ?ޗ6lʎ# $__-R`{wmWl<>@M͔[ɿOK +a[*YKsvr2/0'a+PKвr}A>R0ս9j:U+VJxߟǙ#f-Uy٨洤fhgp69JO0aەdYQwRVb#q+rQ~$Ծ +ԵY׋Ҿ0`co頯\ 7S+߈+j2 ^2!" +s;)Q&8r -2rs TpkKOWsnQfŽF^km$,=FdI# 8ZiF[ed@v}w0Q+Ȫ)2T2Șo9U ɴX/-iN+R2)bʼnPSRd0 wB3oxFF"Y: "0Ja\ߐ8aٶzI`uP\ըQCHC@~ @/&bbS)jM# +fĮQa*9qUhރ!mSl e+yTh}BF3vʓ(*یB5r 'U犪k*j.U\C2QG"V*<[RE=*| >UDWD$PE&d+UV\_IAbIAT`z`cEDQ| +ɪkrlG} 1xQOg{ y*q[ +nz%*s74V"ș`qDkNGG$0-f +HoC`D| @~}[:}9KLZg2[|h}@= NJendstream endobj 3368 0 obj << /Type /Page @@ -7700,26 +7644,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3422 0 obj << -/Length 3747 -/Filter /FlateDecode ->> -stream -xYs7+zaU㜣!eKK(C1IK\SfHE8v"%HӍp4 ȤjR9LGxr-y~DL)2 <:z,Qkw -#Q哫OI2/nwGO܍Մ1G?' iwG1"U5=!>E^L -!P UR -h:cy=~ iV)V錗"7Kv:#YOF}PAl7We6ϘVfӥʳzeN0t)8Ex ǠUXY o֭:4AduѴZBKR|ecTxvvmUs4L]LgZ;&dd`9܍rb Q} Sj $zMF 2mx+/*HtV vTᕾV$:FvqT9 ҤI?#"V_UQPY}ɣXjN*.fcz:-,% dazW ?Zwv\;`ApR#\p C=ʩ^˷kh3&ădj0K0 gڷ 4ֆNyQcJtxj4F;طoP îMg.˾o-w=L͝jv>7Z@3 ̋%H X߂8Z -уX…9i81WK~dk]2KP]q)2C.|} FUX ɺީETg1Nk}_/)-W7@ɆQKS,Xe8˾q)%kc[Y^IZ|8&Lb5 me^+<(p -R i/fߟ@|&*SXU賊P-JupJhT'A -:Tj'.;W ttoeJA9 czq} `Sjm**(&[p]wzM&Kd"hM 5;5FvOM4lL°8f1e}1K9oAoJË1*xo޵oW;auįxe,h/xt߂8Z;@%f֟:27)cЯ{V~n&ٵޑnI68Fv(٤Zۅy!_]M#+FcM~L -X-z.JMݟ@ ޣ]A뀱LXiǹ"ƴoAiJccDL| lܾ,w.A r&`6eZX^,(ƾq)#Q.rjkid[{I#3̋%u|ǐ-#Ku$c`Q`|x;mgi͓fә*Uk: ˬjKRb w1} Sj]ǔh(9ĬY # ];'-vlߨ^ -*LK9J;r[R8av yvJaEVѲԦ1sñ.x+r"K ׫츭ֿ Qb'm͆a4/$DzѸ[pǮn30jFbI䅒үXEOMbVf [ـVTk[+JT,9H9ӳwMChnv'W% -EBו1`=q^ W.^zVk߿گ>/ϖURDbԆyz=z1(Ki=QoTЬ>Ș>jB_g} G[ -BFSsVTㆱTXkQ} `SjYAPIim/1`翾;֫u@}F@ lzᏇl 2e*[OOzcyb,Kᴜl]pNTخW:3uYmuџ)\r7e^B*ZMKpn^]Ô^9†@"ZnvyښMJ}Kg=[7ΫeΜbi -}q-7ΔZ7$qU3ۅmDc0-86"WL ڍQ;{;`AXJFDx`6ӏLT& +8tL:Ou1c 8`AcRXr _lyiHQe\ii€} ~+w,+E_&-#Lu =BcG&HǞu 3_Y[,XeTcm,Lu,E,mTOxk pc:eZQ5z5gfa)2wUӽd^Ge5K -|FqXԀqT)YRzTyu9 4vjPg,DO鄙`XFžH25 ͋%ޣ8A;`AZJF+T敇VIJIm~Oםd .FNn\]BW1%DPۗ N$!,){DxvۑqK~]c@3w2zEt SXWq\)6 BTI{$?3yj ٪GSH=tpA J~Xڏi8k>`AgRZSJ? -4۹U܏wT(k Ջ%ޥ85`AjJÑreziN_VfP%m(AP낱TXj^c{(ĩ:D{{pR{Z/~cƲb ցY:L LgmWݾ1';Mxf,l/xnƀq)6%mSE{5׋%$r 7h4궶kXj;)ܩ>CɁ?X^,0%%Lq)…M;i]aS6qɺ2E0:H^*1phc_}bJXbTb=UZШQeFWゑ@Th\Jbi(ДN+]e)voѣg_15';f ߻!1ٿF=9Aw>ͤGO-UѿeR?D ֡ˌ>,3kg+Wed O3,7> +stream +x\[SH~WxyYj,7I]0% +lC&6FH2Ij9-l0!֥Ւ\ERFL4#t'Mԙ;Čz MQ;7c=HP֍?UOzcfjɢR[YZ*ȍ@b=~ćf!IZDť\?8 Iդ7޿l:3CVsNaE0fܽ+JS1c<8+\SF3E_?%WZX, 8IW^P Z D!uVW[:P$AIv=-B!Q a5V&,4c,8stk\cL&>?̲ۀ| 0o#$&^4VLP2P<# F tj$gkpYcfTI"+'/y^\S5'vl?+ď +ˀҏ\zK䳙B' Z~?@Ls +k}R9#=,4 E\ Z,4>Ϧ}W@p%S&xpBIDvcCO5uɭ;˫6E%L͠m&{wNķA -C'i? , +bldɪ:U2.ZMxJ}'ZECb+@dusDn`W>Ӏ)g4'c$ϊyu iҍ +A͒Q\<ڪRD43:w/l-:bRgEpFl-e'gyyjIȋ։'3̔\lNh%Xs'g&pP)|kB-(Q5zB3,\9Xn.S@wGkBJ7ќIVTi~Δ%rJ0JK8ZXΆ-Glɂ+ `S94ZӬY9\%&c@ #x/tAߚTŚyfZ-8V"H`2Mm$JR=5N熱s"G}hkghfSGN +P+n&SC..QE DV +ym'\V Rtm -UICP`Svħ6"3x!$Q"G}+Ne؜r:b_L Yoqh.$"pr7fok\7eASb*=fNv%g)Z 0@%A& JBHrکۮxrAO;j `ʰBg.tլR h_H#aӨl`.Qb-K@JmTS.lG>w:nnJVEpc#}{Es',yz972B-MaK<<ϲ+b;$Jǁ>߱w( 45m}Al%۴Wzf ꦂ1|(sv~!<䜚9s!K\.n*NdMmUȳ.=}vf0EUbᔱIS`;(Azat0ZedoaRl+к4PY8>?Rdٹι񶪡+7 +XT$Mqeݜ|n*̾vAևi9?nw{7򖏾=:ZdɁ.9iu\Eu.+T($oK<7waflQ.鱒QoA +]@_ NbcUlZ uŎ:Bx Ʃr/&2ֲ']~@blsc⼼Foc{e3C78y09ܤsnS'cJyt|:l*6{#~DtHmeZL=dݒ-j[2*v#66S.6?;S Txh&PlVm +dž U}Qu @'^GW5?tKyޯl1f▷uцL'Z1cxղdkx,tLo=Ax|( ot Ie `uWEn NA"@ij4[ѡz߷1ټnJ$ *Ib*5&' > endobj 3474 0 obj << -/Length 3914 +/Length 2732 /Filter /FlateDecode >> stream -xݜYs7+Xz" r${ƫrd4M$!,FoвNDI*{yru]31R}HyA҂wAS *'Q$-IJ(%~1rY=,'t,⥼PF16&i$Ee_hRRdnFsdU+5Eb]~7X 4ӂ.M}k\)I0W -f+q5)|C{`dn €cj`&(`>[| -S%n( "#-SuUOX]ֳ,f2pg/ӭzZفQ@A9ʌ~ShCi,c}aH!UPBRll۫٦Xp(4}¢U>ڬz-IXk//-r+F~(>PN*[<Ĥ>%ӒɊ\^M\Կ%/6`5erf6)/ډ[0&,ÿ +b9-öY 9;lTO q6UX6/aj=QR 7nVpQ)$Y1R؃eBt_d ˴Љdz1A &ց)2.v,t~~gO͍-$$\ZuY1YJüU.PN3Z5w40Ɗ t^,B1rvNwIl-§+^?em,S1>mK`6Fn$;t/Xvz3Sj`N5m`XD" ]s,4v-ޘZ^DYF;*{.ALQiccrIMoIvq 5$ӂ ZG$˸>'5+. UBLtq(5/mAZL])DN .+X/Ľ\U&8r+ޢXʟV[d+ܿI "5RmAbLziNdD!:rJ[WTbÿ'өX2XSaN1$d]K@Dfj(s3Y`38 n&.PT&yzU̡Zg tp(3/aamAYLc"3 θ6 ꮶq+vm^~/<=vx(C/aamAaLcH3RRPXح6rGa60PPKOF$s9_ NY]? rw} -.T/FG9|<:9 '<Bbin <4cjm *S7LTW֕Ɂ =Bt]vm M5Ls5@H,1`ӂ ӨZnx#U k|驡J3p[%nsx lqz)=AM3Ft3FrFiJ*ژZnԁ)MșBUmwj@$ZDAomLJrbȨQ:B1KS]ʔV3?HpO[OƳ3Sf`<0@`,Tӂ0Zǀ$c 10ujsaf {V}Ys@IwGX+ "`B`-u`#IXShzW|b捩_9Oમ*ͳVmrbȠJ|{ZS8&I@Mec^%t48Q8' -'K։){_ -1`Η;7tǢQBS$Gf`eoz{z-##OS}}SDnTB2lscs0 g-cg[TCZP"FjJ__b<1ѥ|j[/]T"_w6tK,yjYObjۙYPG9ysc~$t&aRܬ*SB4~-t GS"Dbdn҃)Tӂ`u)JM5M\e]ҩ%k8$&:<Ї=BQ-P^,YPYbO 0cjL!{^CB&@Bf0ڇ] %k3J̋E!1iAXL#r"g;&F59>FR'@8,랎ka6= -ӋE`"2:4iAfL),߃4VfN^a%̬$ v¬|LW2[KGVOdz4@BbL:U SkPX*pkO \j؜<>]oj{O_iۃp٪Ud`/tv(?/ x(;ӂ0Z/-(i=Ro9N6u[lCoV\M={m* 1ƋE Et[FSkOHI=O{U8vOvq[U&N~/*Pzae:;CdDVe)= ̙ϺZ|gF-^JyΥ .{obQdm^i_uۢyXQǗ9˼3O7:cгuз=:x\_:鸶{`ow;̱#' .!A>*S(z ]^fϿ~c(¶c(\O؞+Uhۡ/Bnukiٞ͘cµi/` OG=fWD'0%|}-phuxlDbU6N8|[ [/Ls]ݻ=2 -/ʳdKaSij O +=9䰀MF] mL\ պA['f9L3i3|ri6.`~VZ[4A{7.x`u_{l"Ktdp{~(ԅɰ8#0@L~u8(B XXY 23eo}N2}N0&ϖ݀,-9U Z0]ܡ]ױXyWc!qϑ*"_2r~cHUOR44 +}Żx!yaxD-H>Cj,imq3!aC;#/{/p}{Ã泏|,ϙʥh dIqK-c64o3x[, M-QV02񄾿蘴^s4rΈ!E-͕%/-u@2W!$=I92B0C`O9 +8{,N,2SHY?3.0x^M43vB=#V&~$#&kh]ר[?7%kRO}_0믂XN pU¬ +AP}`u\9G,r"#y:OE۶Q2EOe,5% k^Q)x7pv" ŬqENY(W9"v81cE[YaşRyX }#_lgxE_y/4Bm$aŭObs$y" c8,uoHڦ(k 8#+ +]dgu!.L%P#\]5Q5F-<)7DW ZZTO{GKIL 6ˤFMtL̬Oxri¡8;⎵PTJ-ge87/\2NUi]|ɤ2ݟa[V.<*گ0 ״w?]E׌_hwZՄFOEZYYU` ؈|ƹY|0|qUVc@<9pRV8SYݿmG`lJO>UHF0 z{zzn -n4S]g*-ed삔!ruuIwgHI,zimS V9KJMq#W +]ުR%'] ,5U/)T >? +Ln6Mٞ%RSK^#g Zo l*g }B&ꈣnG)w"ڂA5%ase0@kkr8*c5a&Jݖ\\C5`Ŵ ޴⛦ VP^XW*$ZdC`]+aKT}@V8* 'aIe2 I +sTyfWi?5PWa5>L5Ig%C*XPԽ02̂)8O*S>cmƸgOUЅ4DCWUu/ ʜYe f݉.Jᴖ#BoPr3.XIKlop֚|24(DZMe1P4w3 ޒg_5KZ9 uA*GML%|MdLZCAaM,ZlbA,7`|7v{wi㑚> kpy3)x42֦*b]J{^)÷i>] Mr2KtQsRUbN hk,iQaV&3J۫prp]]2$gTOTVzߧ#Zy+cU Zjz 1- ×M-LWt7Bzi닐y2c᷅0kJ9kj +I+TeMw37AZ固^K쨹eOT)[қy&1^niR*ʰYI< +3uЖUI5urKǒ}FrBVbcMMnXL}2>GYY4آ> endobj 3526 0 obj << -/Length 3701 -/Filter /FlateDecode ->> -stream -x\ms6_Lx#:ɵqN{3m?-*.EwٞNjrWZbc N#7K%QX0fnVEJU@.uvW+8 - -ڶ@_;~ ?ifξu;bEk8Rþ5\׋?^" ZɳwP8brgSLz=/Yz f 4fz*~Dui U6t) -XyGϷ1^tp/>A_E)$fx*8l#͵*µDTk9W('t2`z,cI>xPH2ŒJ/4h_Y1 -\fTwM[2rİ0 e0BFdV^ U,Q)G &l2-X%c[eJ%Hl̨=zqD11 5o>6y(lٍ!::V8I^J3 NJȤl}g*Ul0Oy{fZoLGjjoLkIvu4 %B,Қ2؂8Rj-xEQGt]jhns!*36h8v`n"člT|lqA%T C|*P -|rR)fiXXRXQ}Ɇsi"#ԉxFJnЫG^1O'"Bj5NjmlĩTk5 -5h.u6;+0}sj*ѼXhD['ZJ#-QYx5^Pc+*?l6Vs̭A8>L˖]oh41y.MdVSpeQp:K4Ҽ"1^-*J6(fsc_T2z;J9&o_r|vsRlL d."rg> $#ڻs "Z~|ЀmZU%"x 5 UцҽцڂPNIRoN*'!,P C}>T)*Q3 63M}粻?WY)8w+3PEqC5H KP cTXc :etp"pBuou=tG[2³Ws镭RewLvaNes4}=DUKT)`)֒HN'3̋%fqbNe>ri^}Nvg5ݠ2µKk`%.dG8ͳOӋ% slAΔZLL9bLMD h{~(y8m3o/;pT0X 8LuIEL]@#2]U)tvYf$#-5͇M'O8Шlx*^,bMŠc ڒ ɮbhQg7 -pթ6ʭvNJFUSb G&[/GOomgۣ,,:B_S?1nNք/(cXçbXNI`1 EJ"/'l 쉽\`|nv\sh뵁O?b#L0[,bF@}ͶIcPF nƴѲk^EηNt~ w~腸Xu~Rs~##" qqfgȎ[cTZg2u{jRIi'!lRߊ!i{*^,dRbo dJC>zodGPCn[~Tak7A./?D86/-_qRjl!$6XjkBk/mNm-.*:{ ]ܠe_G60u8VȢ4&fTPn+U4?8|#!&L#Mؖ RD"'PyǔG%P knbnX+5h@vJ?X3Lŋ%` elAZ D!BXȟK B/I{ eE ' -Kx+؂8H) F\"0b@x\vqvœ\2 -J ]LxlX}ׄN0]WS;m[ Ln8X&dg 4t.],BT0xzru:k>}R] - >Sb ?&[/+0Ԛ\ papTڛaSqʽ>޴s V~rhm -K%؂8)QEC8R}7.*A pßX{-M&@%x*0yӭɧu /|lA\'+{Aqr:rQhrqM.Ӌ]-|cmjp/\QZ,({#TXXv kJ>nTO [㈩z 9`A۔ZV K\/VP7lK(oU9y -Q C&B Nx 92@*ǏUeNL{xN-d~l՞qo~D=/XLՏb˩URDr~諁^C't_Pd%蛍BdcÙF4Lendstream +/Length 2606 +/Filter /FlateDecode +>> +stream +x\sHB03 7ǎMm6޳{U|@ cz$cc;N*t9YX/ǣ +WrvDafHzq@F^;>)^>S%S?yyd \p·^oofsytsYf;BrW +n]hLhՆgpGSa(frCe̕n99Gɨ?`~FQ,t+?= =R8!tw rzO47'ԬPC)SA7IK/^OWMsO_0)n>gp5@)y?"n4v+P^kŤG|nkpz-nEWGOӂbMOݟ9\pӻKOaf 4N0P P7M!#WF@C%_sbLYV8˨QӘFr A%/ȩr: tCh=/â|?LDjIꁁB,O@BHwFʼnQgӤ0r:0z=0)+Ay"U{w@\d{q_kF$$6SO5+J>N\DV4)hGLZ-I`,+WiY5x FOWnץWsl@`-nۖ6Y[ FgUvȮmPB"i_OhQigF/Wb`vιUpa\|)oecB<$ji~H߭c$Bj<)e6.=y<#l)\r/3 +`8z%D\yt n~7@>N.K5V|wܠ@'.x.1R^).v/%Z'%h2ti+JKqBRX*E"X^"IrWFQc cTE1jB t6ixTFyaP{#aƣ-8nMr|M|h"| Tc*~0i-_I2=;Ź9uG|Fa\S"KO6>!2H=6+jܪMu2OfOt_kػW_ +j*P [F ~f|[tF,2b*""4@['$VHCIJ٬ԏeB,U^\4ъ2! BC phfYӹdɰNjer4a +z#J!JskNEL6^s^a1iZuB| ;``.S=lxMfۗ(F%-ZF3[nɔ-d[vC13W^~Lݸ +\G6*l|mu!/jy>fht0qd' 8ʡ3FD"ۄ-f}D|IY7Q )Z xó Hޤ83ճ£>9Axh䣡>('W΋\t ;MYEeS\IP_jiZ<7geT@x>15%7SSmh(s-H㟈 j^b9t"Qew A+=SZאXw,~-)K_c\{LzL4F#Ɠ)E4؈kv`* R"f3U=O?.-JI-HrVN5 ˟+RHHg`ʡGOʩ VC-w&TD}3TjI1Xb*q= W6eqMEMy$#CGP*v*kl lJ[ߢ]PK@ n͑2qw4ʗ>5 蕒a<ɺI S8JK|X#@_ȜJ+EM&V>zwGT`ԿA8EHN(TjلGi/`,iN.6oxQb_j6kFTY>Y9ӆ: ]|;[/C3Ux/FFoYC &+㝑3Ĭ J"M-z +Kl)~;xvqa=Ms1]Da;Ȳְ:G2TX#a$0cȪuq-1 j02(0,ZB @\,EvX?Bdi_/[sOV]=Vtg2٥r 9AS-eBeb9)H;C nFewuÏ\ߓL#7c@ ͹2XLendstream endobj 3525 0 obj << /Type /Page @@ -8765,19 +8698,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3572 0 obj << -/Length 3396 +/Length 2234 /Filter /FlateDecode >> stream -xKsFy, ;N^KYmU6$)B!A;.;zlRHp3<)ԿxRrTj"K8œI1Vp]+2O|w~WMp_T╘/3RN~?pD5T~/&KeO'U9W jr{8EQ}urvp/XcOixIyXG -9#y\!,A3LflE^[vl^bfs^?oG|o)~@U UL/ {y"6ή &ptĂ!Y[46e*D"XjUV]):zS`vS7uAxK&%IcIF ĥ dN-&%RU9IfJWеD5S"|*ԺmD`mM[ݘ]N -m_ůoOg -!2*8pNQ, L - 6āc1zpՁoݕ{>+t.U?r\ٷiBVڊd0;gkBBc]`RضձX4_u^/u=jХu[~k"VجSlm0cʐyftzNՏFrϲ޾4!RWT,G< 7馞UK(' `:جX@{g2|Gg-V |+)fDuBgz8@;ozg2KNmL"Y'3c7[JTҍ63NA8ʩ1xBӥ2)^ 7kHR.:2Tf-T-R[~%uk=|C*v}Sx {(XeSKeNm@I -9OP{˕J݄ArכzumA}ܵKk fk5)c+ڟzX.tE_Kk:O͵&Gc ەn0JZQ,VhZGkNV^QTpD+z|h} O rHӅtm -&W#s$D &8b- M愩<ι(br)^LR2mN(֗+N^/ݪ}I̓DYy+hH:)D[@9sUf%_&%a6}璞+yjk辰)eSJ`KU3N6dL.stcϭ`aHTqSzؗ~:c@҃Wuw1<;_2SGsjζ nzgR)zAWB3y O}#Z#ϩ ȋF!o>C#',|r&SԔHD}'+;f'Vna_IiObb̩<ƜS*6pH}h0yP/ ۼ mXQ,<=|h<6@$c2MM\~g/v}7ufQlv6իIPYc%2Rrj=9R -$6G9;]݀hl+U6RgɖD<&?HLqϝ%(U(Jՙ_'uݖE8 _Tݻ+LcF Կ0֡0֜ڀWHԧꥀumZ>9M*5}Z}Wol'%@s,(AF7FS1 -^Ft~׭kNsn~E^tT5ۡpVebx,(a:$á0Üċ*2;[}LM8Ş{yETŻc,(!&<&S*D"t3!k|lz1 -[ q2<0i M| ft[pp!iQ+D %c 0zpF+J&{M^x%m2)BnI91ﹼ#jiY@f9s}ƞݺr;;We:7%2dSddsjqi;],"LnYYQn )INi!cD =00@cD0;B *jޚJx/9{U3F,=Tuޭ~\rq{+:² Si?V\wDCR7ѫFT"!FgLB6G,(6ac~Fԅ/gg>B3n}z -1xcE u00@L]BcT{֪W.?XbQ,C,u] 0ZOw~ڵl/k;Im.R2ۗ/ew[K)?|$(H}Atz%ELpЭ`.k<{7oyIU#D)IP=$3!阼j?1]#'yXwgwz) kublNTM'Ji{N2:=&.2\-9pF/bѿX}#Txd⫲q>SNNoDU Yp!لrĨ{}0K]Mendstream +x\rH+87@ jr-GGcʭDBB @IYYij6X&*lryUBz"*zכ@=fzx=z¦'{ȋz'Oc>Щ)|qt/*Íy l{.tO**)~7o}j=:kóD(ݐa(fjCe>9.I Fl^泲?􏌢Ɵm]vW`,`{MxŤG>oWj B:tu\TQ0D0AŠR3@?* +q2xg@"/@n^X} Y^QkЍӣ ytYLmdJ."ߏiMPWaŐP<#K2~Op|~zqX]bvgjt1m#TFTcLB7,.|Q7x%8GYtF/#W}҆w/I5k) E@<4 vSyOo%&WdqaXM6p L,4}ŝ|r*lxO>-Ɏ㪊Gx"1V|nn0+c +wV$Gr?@hk>(+Ol rlK$ܾs'ujf9ū.z{ZuNإ0IZY&F?^x T+ 'ަ'0_e_0'>P~iHSl3gZTp(78Xp&I«HmnDeФJRҕĆj˳?K*Fr?Fщ8 liYW tELD ߱0F7TXGpr)59RumTJ։:^_Zo 1nKn-@-ou̓b4V vZ!sϬjF1K;הCW30E5T.LxbQ58itH4]o ;ASYRU]-;~Q + SnI|u_J䰥.pER!?o|;[1!Y0 _$UafO.5|ϦjKo1#:ր-%v9 6?aw =Ag'~HVЈFϮ}|=4t*S# Աs@Fϩɞ1ܘZӘgsEa\f'z5>ޯt:x<@˙MY a~ a4Ж)1G\fd(HKJ-x3mw3(/T oզ<مrJ+ESKvrハtpOczoZ尊 g~.HPWSƱ+-a^VBރFuQGZFJU"E +WH\2w?\jWI[醨c?zxe"ߐb\R |O"jO5G-endstream endobj 3571 0 obj << /Type /Page @@ -9138,17 +9072,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3625 0 obj << -/Length 3151 +/Length 2015 /Filter /FlateDecode >> stream -x_S9~H=]aݽrU{q`BO%[&T*evZ-dr5m8%=<+c޲˚F|zR3/ɟx8RM(U_?ģ4=hGw=FDqF˽2H  tm xz=7EwRX־ծ $ X27j=rV!,;ExW}2R)'d^e#?! -Q) `ǞZ`mjFb|x8pȾMp5H%uV#{>l|8{?V㢛nPWO(M(Ի;sxz=wWuvy3@Rӟ8'jT5MHuϼ@8D]Inz9iٸS*:T3o?~_L|/g9W\|Y/W+&aR*#`|e֙Q 3X U`ҝp&?B^lWoD̟dBȑX򖷳,BzMd8:4A޼W7rpԷ\Q a<[RA `;96 RKdJͨ)b2lح]NJLIJȗ*U";YO/ŷ ?oγZ*mG) }GZGajOL TBW:Vn]. sAp'ORA {ZԂ<`H=Z#xbpfD?sU7*{Zzc޹)RUo5{v~rf5UnMc /hrR >>%Fx|rQ) `ǞZyKJ.ZDi)M6jg7=Uե][慚DorHgHT/4j(Pam2ȤOX_ F6>gɅp񖡦mG/1y0"|mԂ0 *M,x|"zn [ڕ)eNS3-.CZdV/vd_jAe97n#~.yJAQ+>Hy]hPgZt /eSȱL-ȳzL&,',zu2pG/KgZ -K"'%(U;wdHdk}=lCՏލrjtKJ'6W(vb bȧԂ3Z -r 6+?NJVFw?e2tNTo{8Zi@+r@+ O RS$s-Z!gW:&Y+.c?3r|Q, X%% RJ|cq%mWyv.['R d#<  dAnxdM`K7ϦW՛-[,I+#NvsәxԂp9kF8?`A+s+Ժ"zOy`滆G h]1#S !#g4G:j;J<ۧ2>cRA `9`Zg +av>tKw7[=-$?Ejv5d_Fr bȁԂ<7HvRA FyZ?$cKv[[92*'ޭST -;Nlhl}Q7x#?xS >oÊ E=0]udW9Σv+%ZɽGOؚL>CaٗR^=Gi%.\}_j0 -*ˇULQTaw`MN(2M\SJ;#S !nL=Δ^m$oSjg@*DždK5c4幦 -bmԂ<-HJ ᪮VꀢS3` DlmU) <J-ȃzPFP5CU?&>QD^T>20ۺR`A yܙ P]y`;^|pY=6>i6ӅV ʊCX .4`A j]W].tL,<*a:Tnofuk6MDNؤ@j]S\sr@q>lnȔ~bE2 b99&y&Z/LG'ٍ9r01&y oť1&1 R!2(ޅ2+}،Is ЩB'ysmq) @IIƀyZQDWy١#uv RA @@ZG u[D+SƳiLtk̿BRA Zuԅ@5%4!Wyqg&O=tm <ȗy,@H~r;w]NU s*Зjy`-xQ=&':kc\LI T>~M8O{l*8njmK{K?=?V%b fXBS7},F7?Z?QKRCTyzlE4Y?ر6S/U#YQ &|~7Efendstream +x\MsH+tb1-N쮽*2QW{f$,r ݯ_("Zc.-wmS7jk# jfKupe%$ҺVS._fCv{e&ma ]k|F>ҷnTJkaVųh}Q<4u*Q۵[m&>o8I#m)e.;,3Ƕ9̃&K|>}̖ߒ6g`g˅զ\ +W6jisqΛ[$qPvS'` 6)G_}u)Z4o[6cRrށv$h$Ո\*܉u Ӕ?)IR祳R;Ɉ4CBȈ#%*zx6+BJS 1zZaA%?OIе?(M{_eBI'!h@CdbZ*`F +D/#_A)~5#:g:H)+s"Cβ`@q~);Ñp!"@>ol,֧MKTQuf /hWLy$z RSpg]WJ(UD#NO?x_ +80+rc {^lcGH<1* +m_`<` +F^{*2mV4G=ec@|;TXpBkI,Ӧ[7FND˖Q2)0P>BOA&X==!j7  \.8rߕZ ZQ(}Q:X Q펛=֕l=];;ɯ(mOv\ o4(fdT?_R| o Y^"#?Qxo,mniq0jZ'1iW^`' 'b[kq_o:وhYLw` X78K`J[sEq<6A4v$mqR.9BcSEbӼd=-Ms튆hq-6jff\3Ӫ;3%-o[poU2:͍ϢZq\wzB3,!lyŃ!89;M/Pakn< ( ˋX \Yn*'7f9#CZI%hfOd ܃WO8t>2|"LnM)kfis,ya>ۖD<%jXBmR޴:ǯ+UβU`)kb@$T"ЕI`P^f+PGU80YW8p=d/mJ,L=pC8h%ҚrXs,Dz]vVjRפ9w]ZgGWnTVs'/L=Rt8O@; CPG<= MN~:wf,.#\{Y~YTa7(]JA$3j]c]i8Z^lM{Zފ%Jq澰";ls;J4~jm]mg 0VNS_?f/93?H*endstream endobj 3624 0 obj << /Type /Page @@ -9502,18 +9437,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3677 0 obj << -/Length 3303 +/Length 2160 /Filter /FlateDecode >> stream -x[w+!\w}ɱq[-9I(XKKdwpWYɉI.0feFcV*ik\9OL#왇G{?r(Tb=or1m_Ŋ3LS~NA_(]wJ֣=QR/rȕk-Q6 if(EjvpId<u]==O!WcVr̛zm.ّ [Q-Wpz3)h(j?_7?{X|RKe1|侼̌JMb]#m(UA1FC]xQ\ld'9x?vҷpm_/ڏ7W>f***jPe%ubSIh`.%t.W L\jed^Sm4{*`/XSՠFK3\\Nl,35}>k,kuq.L^z̕(VnT}Xk$m܄]VױWK#7%H5)c)'3dG|#!북K,9e z}:s >g]{ H/+VƗRG"@Tl$H"OC^pp1p gsΦ&*/778S1bfNbWErR 9°?}ZF8Q3B(~oXK;I79-֒9-91U5OlnKo*V UO~ҍyӍ mũ " >`F8њ߷d,Xih̥bHewjP91<<wvbPdz逛':IZ gnk1 mKNG9m|!RYIeʤr z4(BņXS1&Rarm4uz߹Y]:SE7wݝ@ m/CevFգA&6Z |)|We]c&.l%&=_oPT*A&6R]TU$S -lsGm!Qʭ{rjm(&n4k}e2cm}̕L+%IZru:] ʮ4rzMxiΟՔ.^:˘jj^Z=c(@ב]Xh@\7FvoҝIo >ylj^5oP&B%3¥A &6aH`ϩE^˕_S)\X٨O\wdw캆 MF%>uMzzZnm}͇vuV\knuJ=]tJI skl6-B+=C*p ".qjP怉 dAw9[9<5=ϗnf8]h@4Y2Fe4=Ѡb#zY%wiXu}$ҡ6]S4mPF3P*L%DiG2!Ll$TS©!$=Vǐ7nW#BX=gld[J@Cb2e ذ-%*.~Nz{ Ş!3#ػcbC* 6 {Xs -IHe>&m uMʺZrU\0Gܺ_/wO{b\ nݷXW[5-)|{Ckx{s;۬w|_bmƂ%޴ۯ}G |U¦v{lj۩YȞTԞp8~jYҚn}g?FcV9OhPQ|¡<^ǍSZEʩXufG+!L2r,0NFwė #2#%4۫c"lz;noIa~HͧHՂOث[g_Ө{_n64z(T Z]ՠ23ؚq l㶩/u߱pL]Nԙ] ʨ14xBwQx a'9Y.v7P632i%] l1-o@ؓDP84A0&69jKe,wC) (wڈJ7CffFv5(lRS,;ٔ!KM)ux3vۧatsa-N[kӔ)y]ϭs%ih !2 Q:УA&6"ok: -9хlyN<ղfer -QhPoU{b~~~xeo07kř!83"8qbb#NIV ΐ@vd8a~[MbN̙(DѠ1˚P&!'}եkMWCbޮe؈WpNxWK|`M] `1!%:Vougc)y21]eT?/}1{ J!gt+*m  -~׶_1= _7 NRe2r>(U} //~OӦ-m!7oI֍  iZ'lCVendstream +x\]wFWp K'vyc'is^  W_ߙ]aLleH +Yg>م5ǚQJfoASAp et{a.Y^ҡh}x]I[2x46_yϴnNR _Ia?Мlҷ\KD= w$7R=OPl5>ύ#?hU6EXQ3kE?9Ȉ042R<C%}]&f4L}.p$f̳{Ӆ*p&tY]$Cu2K͊4X7SSV;Wsx^\#E C~+B45'ђl*N?Su/50<~aA=JmGc :VyMhJt@D9ϔ:4 ҕ `/BUMZ﬊磁]OReÀQ]>VZU|+B*SGF=«/ڙ_L.VXŕ|܍ |){o/r9+/c#6V8:#[/0nG5!!-S*u6W(la`*"u^̕f7baѷ%ZUqRGBOshplVU1Iz2gε ?ČVۡD26EAxgpSy]OWq6!\)2ZJ˟t)`]ى<Y;۽Bc6-+ Cꔯϋxg:EE%[T.0Zm H_d_8S;={Qd\*=_"#kLmQԩՎdlT`%d.f~$pM?Ho +tYg0%.4g״%|q fI˃43^a\V;k%,L~'\̻۠9ߓ[PkBɅNm#Sڸ;$=:O륟{\dJ7dev*RvlXKTĭ=\O:択b nѵxV_|ȸڷh2B̈܊ߛ/!.)vmKˬJShXGZm0>#?oK;QlWqv v"; +I^A}oR U:aq< +m @Ocaߊ?lʺcӛ洷U`xQȧfl̪}O(ZPr,/Tdy=}UlD~?Q5Gu_"n*g蚥hHendstream endobj 3676 0 obj << /Type /Page @@ -9860,19 +9792,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3728 0 obj << -/Length 2687 +/Length 1706 /Filter /FlateDecode >> stream -xs6+tB/88N6޵=2#Df7 f2UL&#Jxxx ''I -@1,6d)e/ kb2%jSIJ.cO -?\s6 s9l.ŀl/n.Dz -sk90F@@QQ))ݣtSͧf~كp,ڝv9 GNkzТT|(Bx o נ3 -L P͉ k -~}Z j8>jOZynln+pM{Т$Yҷv(fsxӣ1qfmj#G[P->B">2A%L: `DDVB3*<1a{WJñf I^,-FiWV;by-B:5odh;q{[*b@%u鴾mjKҘ%}Sц*Bph"dDFqVRDif(s<,NN]lQFVB?]˩8s%,I+)wj]vҀ.66_-B B&ź^^`C׷4Zw2|\4[).۪+D@<7*<cj yTĩZBsc}q} Sb!3A>sIyV&&zUI< 9Olތa38ڏql)[b6dԭqMMNwz5a8Gyp|Jq8} pRb-)6p^5K̸Yrf|R1Ntagr$Zܞ  -.)ցcw-ÖF.׵j\uթd ^0)Ƃ`B 5Iu` 5\T({6rA|PK&n0Íj%hfꉏJȴA$rKãB&l`/[?jf]lb3EF;EcYZ ]icgiW}e:Z2U_ZζXÌL3z4yzWȡNusY]c#Kye|k3AƳvWK mG 6%֡=Z瓫 !%a]oK=K3qJޑ+f+4; OBy:EğJBJ7dr]ʣfsǜgfrrkQ%LD}\LF%V9~{Q: ?"?|ԃ51h~4OFu$qI:R_O- Jk2{ݡAԭ&Z ء ]VDZ3b$&ǹ+5\Ô|IS5XZih8Ӿq))a3uSexl1$P( Xu3ibzsJ@J?cj ~!ilӀq~)&dÆd?eG}1R|~Q 9cqj ]iՀq)'#8b# ƺV.d0@8AmJCDZOYq6Ua+`c}q} Sb-`$C6ЪH 1w:j: -> #ZqilN_|mJC]г-e߮W#Z<cj Tı:E r{KreC\;K%3^%pC+5Mup'\~&cK˳;c1@:AqJCDPuQU:SAmZ%xHNy@}вq} >UMcH{:%39ٶy]׻{ͳ&Bs8)ZƊe }q`G2:/`h,v_-=b/VP cq|/E JѿX`S@2l 37mendstream +xKw8,aaFO@9iҦ#3vE L6.t~+ Ĵqbdctu"0 +|ɩzCq+#|Hz6"%"Kg|-S>_n8kgȹ6Rά'$xbc~}AӽsӍІIWuZhEz' |)G4Cd'wci+UfM$ffIuf[M%=⍪UzR+p*Uy\m-}{ B`7jp!7$7k8gg`pԇhFOqᠵ΋|ff@Kkάia&Ga \VO,9ʊ4){3!NX'Z-ZnE:W )#,0U~GbWb?Egcb0Md:=HR !zX{>Wb9VAn2k<)jmf×AY. +?0'KUt^Fnb"I$/H,֕IrчODx۶Jj}lElp]6*]T@FI{#SxA/b4 +)J}=YRem_ mv)0wᣧ{{fӯ- ກ.lt#[v?z-&W @~ZFY][|vՆZtC8x}!]C+RAx л  ^^bOVÉ`|)1)Nd! aaOs\茧v&ecJB&ԕrxOP~avc +L{nf>fz ;,{5a,|UهRue`u0ʈ]\G#nͺUBۄjpڣ<n{ʋEӺ?*:Uw +?A8 ֡%XvK075ZzQ)MioW2܉ /ΰ>(Inst}yv`6"Yj^S,vmWm b%om;B"@M.oeNMsU1i:hW;A(Y֗@wxMZvnj`%pendstream endobj 3727 0 obj << /Type /Page @@ -10170,16 +10101,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3773 0 obj << -/Length 3090 +/Length 2049 /Filter /FlateDecode >> stream -x[s۶+(q#q6q'Isb'LZmM,ɡ\}S`3i]+dQX xxRqS1)q'^>9<æľ)yx\LuD(&ǧdV)_ǿt.T)˾|r*Ue/GTT8GXbq8ݵol˅ԵUZ -e!osT*Ƀ[Ř { M|teV/Ozu)O[8)Y;5I=W;ٸn1ިwh\R R0)B5JFP.Abi\Xx^/qVk0TfJ)˺,VfKU&|EEm !&xĆ6}_ 57E:3apK׶Uh$:UV}wVkX6TN$}V^eKh1Sz.`O6"]\@7B'#Aɏ,οoYXG" 'gop~qU7Ljqur&:*~Lz0Ki,f' `1؃uZEUS2g0RFtگ>.}" -0A;֚b$@,g(-D&utKٌ9t6Nr(R'Vl!C-ߩc,b/@ں1C iEPA FeU:/@`HRqjC0{={R+j1+}I.T&C Dm/]~瀭 uG**v=+4UsBP);7>.6ѐ(Ϥ0LaRc{BP8T~.aoɵ.540i'[vc;PG(`дu/UC nP k8ߢAZ_FbUAZ"`>q N 'SWQĬY4LmL3K= N;U]T aiK]w3^UYF{^`L6 X Bq/j0P%LL#0dԌ7iHpNl!!X -Z2̩5-Ȇ2ˆWlԕ4.VmhUhR %[ŨlS(b!JS9/UBv[B矴m/!;Q8x 2o ż5"fYq-V:ܼ`nH-uGzuILwμz|{Fڜ{QFvOX{<[4Rj1HVKHC#Hf(`=H+]v6ً%0< 9U\E̪A/k}a+͹X šE(d6ڥ̙n'5V Ud{tlZ@E!w hǒ M/@ͱyvOUƠ[2&ڸV+k<җ29)sqO_]z;9YslNX9QD}cAMVԂѪlmWF.[/oI~kԽX|#NARAQL_$Ł1ENF 8YIŃ9!,D=zu=8>潈|8BJ1ma+Q#vy&U99Hx=c=)Q'i sd;lÆlHx5? sSHۤ/2.'.q={C\Hn]C.dhtRxwĦm8pn}ʃxg*|rkAN[:LV_TQoccZ4P2'ΔV@лzb%ZKG] l>qEQs>6xli1e + VGUwqsE1tRↅSk=aJjJʹ91&yAAy[HX3-?+]A=oZ s*>)cD qB5|ļSK2XkF/5 )Go)`3RU8c#ZVmFy1P t;NCwQ[; ߽@n +0&}bO:z(t:bJ֍-lԤgaW_aPvjdVIu8Kw]ioZ/& \0*x"hDUN˨Ee/Fu%V(x kY:@LB]ZrV'5ί(v467F#bqޔ +1Sof'Mji3wSR#H߯3_ǝmB[Z\Ew%. +S96Jzcc}Q Iu# á4;]I[^י􎒑8?u -3If<|$dF_rk( +UU1X(V3T"V+XEx7M +4|쟩T$LX-$tᨡ<'ˣnq* l%o&[{?nd['xw 1mkx 3|'|[_OTorUo6ME}y*_yW[RE6 6 2=)'jRXUM"8#R3JDv(K ߉_BޛL_ Fa N! feAjJY l"+:$m[(m$ַlZV-0u =}޾q۶iVT5x%Ľ +ޭE6QW{y:6e;XF;b=x O@MGǒoJ{muJ D˅+U=Ɨj.(8I( R +kL]ͩj$+DJnWO^@)/;ϳK*>ۥW6CWlCLl0E|1F')r3endstream endobj 3772 0 obj << /Type /Page @@ -10505,19 +10440,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3821 0 obj << -/Length 2228 +/Length 1490 /Filter /FlateDecode >> stream -x[+\'s*6BA٥;f?~Kvo[+Oʛ=|K>/(.Ǿ(ڹ3Aь'E؋[Dl*әU Ttw#? ~H\A,*N>[M^j lU}j hr΂a WjC:4qN1^΁[k/_ZK2{{V.Yxdܮfnm~cry6!ڛʧI<.cbT -Ђ4ڀNbTc֣E8NZSZ( "cVGih{c$H, )g,HΪ +=`~|J|wXXԇ "x惇>B *R%c/)^^6F7$6UwNamxjzڳd6shHRnKSh߀"E{$˪6Mڵ۝GS=c3 ew{: Nu[дVH ISG5 ;{ΠW=t竱{ CЂ4ڀ@kw_ޘQݿv5~c_y(p.X& -b(ZZ0~}جz;Oߋej? ?uT= ;>TҠ;&kv<,@rOG%n?XXa4ái9!Y`H,Ë>}5k{betH\硱{ iC Y&(=8іqlƟ)ziW#sbϩ5z>/9b%TmڭȡAeGmee)w#9n8I+Hqp{FLZ/6Q%puW=Bi9x)2GK?g0~e|_BI‹uX(.Bn7(-CdUtz=S ڕFGP`1j\7|4_ЕQ/b]'3JL_WEo){FIqN5I/L34Kf<%`4CPvEѪ; +{L+?Gͷ j[hFy |yl]:rŽIZ xdBB5I+IhJ@q8lΰ V"Q(otC"%)NnY9JݐU-yl'F8QQ MP"hWCAO*W4LG1)s%&x7x0+[ +DäW.)|:*Edۦ/EQx#=YZjY}̚ Ev3^M- nkTa1*ƨcJlPEW ^YKW<Ԍ6O>]Esu}OPҶ1:ܬ{4A1I(d f?_̲ l 4k0M )†hLv+M2P s&[POlHWQ}cc].W)'e4DAY .W?92EypA gIz>~Lmmáӷ"W?jʹ л ;aHڵ48q"+u,fNk#Zhj>:q^s/ntz bbPm)193m>)>r[qW^; J)bQ;g[]axwJ|h;(PEOkK˂ LR] ^}cܶ<">uf%yʿc+pU/iA*s E鋸>_\4endstream endobj 3820 0 obj << /Type /Page @@ -10752,11 +10683,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3856 0 obj << -/Length 241 +/Length 226 /Filter /FlateDecode >> stream -xuPN1 +<&CLN"L  ZTR U28{=,@ʊ׆lZQ%_g,1'1d:*C=@ȄHPL<dFޜgXY2h:bʩ]*"_~<Vnh7[qZ9gz5aѰonPB< FNӳWdQX8=}׉]_27`endstream +xmP;O1 WdL?\*C6p!C*s@SGg2LRM. yм)G@ A+?@ eMD5HQ B %mg4$i{}NȎNg%eud=#@.;|P,nr87 +=Lp. \ײ쵊@(ndhbz MmYendstream endobj 3855 0 obj << /Type /Page @@ -10776,20 +10708,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3860 0 obj << -/Length 3458 -/Filter /FlateDecode ->> -stream -xڅZo EX+z?<6w.6`bl+[rG/_3c%bp8Gj3gYza~fb;[O|Ѝft<8 "7"乞} s$<=~~pl/wG8wjFciFsHKgx߳4: -F{ZxHK?>=7#-aI9o"*H-Y3 Rp9ydR^q1yOzjȦ1,ݡFwؠρ΋f.9(iGӞ ۾cR07 a=h"XtVLʬG6kaWK,H^5?3*ey#˸ ғmKg 1fIk.]"QLu=)YfU(~{4r5{͂HJ7y -]2q@W?.O82s) VPȼ@7Kߗ%4s6~+f^lU#Dc@CQLP$vhfc$8BɅ 4ZQ+6E_dfW&rJطQBBY\F!gfaaF%n(EsM]+cP!\?Wy;}0\0'+4!FxӍĎwωLw64:Z*Jz -t7qgkOEgxLV8<'ϵıslw{m6P>QH$ےSWm %9AvSLK,`j{pr=0SwpNV8΄PCO\bA#:0 |2 -H7 $om6ϏpsLï^=# ;ttIԎK\.t,*a _Ԑ MmR>S'>]yG'ʠ1?gtxS`N668yRލ/ߵ8gY\P pi>ؔ(RC׻@J)$!A˲5zUKp$Må,1e!'"HE$9Vd>לSEdҵ[l>!hx}PMsd#\?$dL g% -]{c9 yw=C=\j9aP-슖#-e?/H5֥$rЂM;E%coy)a[˜?"ID.7|1XmbB!^ {[)Y㟛S@)>1YPItz!GvrTJjbjt3bmԥ3KPtaAZDM-Euܷz(Y A=909MU}{3EpʹB 3]u/|7>|S&J[@T޼f`2]mI*U)FÓ-!tQ˻$-;˜*qpmUI[` VĴ.Kc{)…K1!p~Ew#U7(M%l΃2pH vNKkKO ?O`I5U9fAm)o4lD7Xh'+|6NtvmMPҸd%K<0ҁiEU#[$u]f+C0^۲6&bpA^)vwzx)ūUYr8-"p1beFDl8Zv,.4 {5-~$:K3J5m'dKuRӭ;ڎdJjFkQ-[MOƫ(:Ot< ۊ.9J17 &$PCJznE*C #N7=38w̎m?qV|ؐSlcA6q7&0^ Be8¢ˣw`zP-9W5IR/v2-Ow@}ʭ3Wo-` sl( WlJ6yn GD۱e%n'Fn=_/wΚ͑endstream +/Length 3343 +/Filter /FlateDecode +>> +stream +xko (!VuP&]-V#K>ޜ|EJNh@L Cp\̃4v0=L7wšG&fvMpL³qG; <7I³#a.9;DZGSk5N3ֺlj'G#,Ig;]e/ò;l}Ha⦁ogLGqB8 +Ns9 B:sf' W  aN FTEj^Gmg~+ZXоGv>RJ,@`8LBH8= UIhLp)0"P(B'|&*k 䌱qH%Arh9΁Os/^^#e-mA8wH-z~ vU>,ɗrOZ?ռ2L@ @aCXl=6]! IZHz+jRie恽BiY7b= GC׎eDsjК N;.]XLHfLt)@I=fBPСTFMp"c|fs\ <~a-+QFe41.(/@bD͂·y) \3cAmjVYş N@$>4OPgmj6*7H¨#!xJ\D Bq>7 Ws )˭*?3r4 [!Mąr +4uqp̏0JN#Ű(ufnM69sNoFNߍ!N~3L))qې M*ТD^6a8 A/7i*8_]WB1?cø?Խ9LZ-ЊT+JeC;TN̙.W 3X=*tת"/Z7u2`&ۀpKjr KZ'prv9}qn1'K6 U ǖz7CjHۓ{3 +mtVlN)MB+*)ÅPSTOwI9+ǃhWsērXrL 1RX^4^:LcԑbeB4p6 +J46 D򮎁d6MZFK1!tӅPyX?ݯ–`}DI0Ƙ2Z1t(H΂)\s|eG+瞃lpyh}LZ!-yF*.|  /6UM(%/! +-:7p eX;`7kcb2sntwmbiI3D\F+rx_r(DioiCo|#H(} +cX2WN]z +8x1s{^?!H*)zZFi-YUlힺ8[S3!9YxM-7oؽQ St$ &a(v^ǑH|dS3eJɔKԡ}DW40(SڢW=SzTH[T{fGֈ5bM^B~7!btvA.oWYT-I_luԴD7BҚʡRy:c-!ݖ_ ̚B(Zz ԞP3nE@xXxv[n]E[і>c̃_,$xfo)L-mr]HgjZ39y䳘(De{vuJ,xa#|@O_쫴PVVFT$y|AyTc"&1nmo#;Ŀ#7NX; +Cu Z ؖMR {?5%B(fwL8wr#cʑ&ξ"Z7'e[ieIJiLz O0gOnFmWvn^SqP+ׄO +\A2u֪;6s`iъ+f&y:8l7}6YipW^0zi{v@dEi+@l)ITV}[^:8|Nr&|kuy'$$$\%^D )I9)ϥr~K%NQ7ǡמ:WJFĴ.sj!Sad5]{dk\0lK+nҚ\7)E S$ͰP$ć#XVsS6TI%OCƩE!" t2.m'Тm.}ywe8 ͗kN-bjU%ԥ^M9c6YS/ĔΦG> endobj 3867 0 obj << -/Length 4019 -/Filter /FlateDecode ->> -stream -xڥRHp*IkHef l0yl+d;?-ɖMnQrtv'8L8Nf#gq* =eO\Nd2]up2a]דS'Q[W7ӯ'^l}t1:9u/'u@5wag?5Ԑ#U -q_dr*'/vl7I&#?Pv+GwG6k?{EP(zr=8 C?2b;‰qʇMzk"d]|AJ n/ޟz!묮J+%tv%KJ -F *cMfLpmPϾwx=D0_dfO5 DYV-/ -ǫ6Be랓W,޶%wIWqb%4³Rp7^h'?.x[䑲h\PW\ -iӒF}8PK0/ةȨ-ϚG -<#lVTOZHpQ7M5wR-sG -7Xa>t<5pcF -WKD5{wH/ fNɝ!>b^W>2ڌqJ"OtyS+I:pͮ;G[O@tcwU -nsqG.Yd&jdk[sdQTڴL1OYtj^VbRưg:; #Kl.rV6Sǁ={!|7F6p{" -0x˔Ё)?Կ))Q9_1p!$4LtxW4s{p I61$ ٔѨ-kv|iW8OW|~v[=~K"ϵouݜc$ qX!֙yG ^0& x,YfJR'Wr -E۱ -aHl4#Ic~w  4U>~r2vn% /O͙Z`j]i-p5\zs ̐ہ N47ZZQLS֋BFΝc' -ݵ!ڥ=ɹZdƐGbbghfKCR5(6W;`USХ Ӫd4O6Lsukq&uXT)=pw"JrњB>IJ$>,U%Vz:%W)]gE jq3 F4=HܷB?%,p׏1 c^@@!К@$bO2H*zNj8Sڦ~dHȳ؄aM*:]3u^wvhu^ ΋\SKPwpRj>2\npdB>< -]YEٌ]'٤roa@ OUlDp82#! -4]Itd R0|Ƶ%CЉ ҉s 6kH'w\q.Z8%Q xٺ@àf8@t6Dw%+ŜD 9@~$ -=!z#8PB|c!G7|7x\JCa[ -Yw& -@Evpھ w@NX:C o=o+T~C%6b\r,NNqw\^tfCFŤScbռ{a.׬F[޴/>-7U%/LŕS#ߎ08 -NK@G&ҵ^^^丼_rHčDn9LJrdLxʳ> +stream +xZWHWx/}ZVr +$2;6af–Yb$?nKFdsXjizaL'nG3ۏ\ocdw|6}MtdW_f?aQL`|ps:;? %5Fy˛4DA:CDR&ZGSNb.ϻzCq(lrY(kf7!/ac"#$q &gnt̶]`|C%!ŗ1@Dh V J H̡mW_,sEM3En@ˤ3z8 +GeP j-Dl7- uQmyvoTgy)tVN*|!@w4BD;^B\Oׄ[1%;-&Fu9 ̜dBٹtϫ IGÑOiF PhJ%ͪdlD NXИNlo68 vϪV'#gК +ـoݪV`=֝*lWeeA#"-W pm]Qt20Jؼ`Sը́ɅtnqnPMFXO!.OӐ! y;r#Wc u+mdx}☹FcE+:TYR3(',#+E[8dy!:R?3E.[dhbM) ˤ\ۺ '_mB:Xo:XVl"3kW9TIfk;W3%O"P/܅cF6r,*j^{q$mm &"h3,Ơr'bNƬ;7BVGh3.dF s4[w`ci|eeHK!#y(I(Xu'өx]o(G1S5> W̲sSIP۱h ֽz:_P*dlm +/-Exk0kP+9L3LX%)T{\@LBNڈ AVgJ,}K?ޜc\YUa KT ޭw#٪BRByi5 +j^-Xo;z1jMM^k_W/GX~^#!s+zZllD.p;$*IA [i9d|m:5PR wT*N4M? qϓ[ H#@N!e[KuQ2`(\"l'EH#&2y:FjB0SdPGl|_gPRݕw: +B[,r[@@jyyŠo]jh>s&,5"=l^sDcS?"ܿ8y'K(6.g=^OE0׎ GV'RX &na$w +ʿ\ri0mu.j) C9N)V^F'$ĩ ?4eZt9-,NRh +'ie4l9ӿ Ѿ(N.Oތiߍڔ_ alHSAV;okJa}J䌔c2EbiJN#gfKZV݌[dL|o+e^0PϤl,6np>g%]fW﬉f&g|D*rf:U6D=5MXˤԑ$$g +4:8ߡjՇFfd9#SMnZt՘ŹBb}_Eytb?5<sFf N}JD~͠QJ1u}]"`p#Eb8M wM4ږi0LHߺ XLt*odn@>I!3*ds: #u0%xS]u D}+%+Abz/ʍvCqe)C(>yp2߾BiBAPf9)Mz0:=ҋ|yF|S(;s0u&7R +^gR|p(j=MkCb 9B:gL'9^B#@pQ6g)C6RwaSV6pyDQn=RןCyq+SwS7IF3 +xOD0]ɐs>eq8Iϻw|pفƓ:0D4b2 ]!"BL*2P>D`bqy9nke1,mVOdx%՚,M6pa[7Tht).?GCȗ7oEc2m7g^jBu9=!jrv"u |b>5W|'0%`yŃ?b*BoI!\2j# n.+# 7c(/yi4N:9+Jѭ`nc [; ΒhqYPؙkh~{h6[FO,w΅9Γ0r)12w;%8Pc.F*"^#}NZ] +wx.ya8f5E؍n!_kbQ69€yjki}XYȮOؠz `L84ƆߓV&LjZ,^ЌzaunNZR@4†1\ш(b:}+LOi N1aj"}?޷vj",XU8OBdq[˳Q81\ָ/R괰uTYAfHg'0/hFD>xd^xjJL~;FB[AxyP4:o?"46"fczҿ~wn_B`kHqDWN\/?8Vr~!G 3Яs҃endstream endobj 3866 0 obj << /Type /Page @@ -10892,27 +10810,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3873 0 obj << -/Length 3971 -/Filter /FlateDecode ->> -stream -xڥZo8 Ԫ$fwY4iɢ8.jd+Mr߼HѶA`>p8Pă?FIn|}M_(fB2hߞ)'f^67devsϷLgJ)w$I/ u>t;sDsoί=OíabW -߽sUN~M'a(TRNnNnp£ԍRuy?6 IEn&3ލT+zGZpHHeOZ@sl5.-:cWM_62' }u( Mi>)=p/ԔaƪXTyB-7Yo NC3BG*TXlgrI‘% vVp,ؒҭX~q_K9؁ZN~y'8߂)6-H[:s4+fإEcd^\tÍԺjoWvUeOМH6Iw;aWݶ^Ȑ 2?MiPZH@"/Ȫ*u |0 ,'q*6.4"?tsXIiT1]Atp`ik0&&qz)M3FT1h"qUj@R-c}c W>-{4Ge1 q1x -_% m:UaLW$mwC@#p pp3`~nUS5cpQ2;;Qܦ)؜6'fsI@}X9eHI|/b!hb:|X(&[ȝˢ.j cBcڈ:43+çH*Fkw>0t.l1?r7"F$R3A+Y -"Ģ`FZt+;} -/şۢO3J| pxܥ@vs Н0E=:%rW`dir{ JBM2vq/FĢy O<$O;C;v@J G` l!@ءcu*18U":U|qAQŃT^0.{R6T|QNxD6~Cn&${!Cy%D5;EНDqN̐I÷nʦJYL|d͠gLqDk4M[h0ȭ3JU1 7BI)'Թ*m5/Uv@Ha0>lێ9džϜkJ&*!u <X0#ATR**X5W/_ІD [MB]-TUQ/_W2L~PDu&CBv .ldׁ{%rE.vܧpp:nX]7`$7^߲x%!v؋ tN,=@uPoN7`\1 ~×MEtDkWL >XoD h8GUv $+/xgxC3h#2>WBcP^*7cAF8H^ieXpBLD.%s*؆*u\0)^F%7r=a֚g?f&G en=8 -t0_-״7z&Yǒ) -]4u=ޱ8 h8l<[D7$s"A*K)=!W#X >Y Cgù#冠 2̑Op@4*HSLRj79 -YoځFsr2r&&Rt|/`MM9"}@p锄xh&g)BOd1G 1JCPbC e;k>sG=^f,/u${--3|$ѽ7'|(HC Lڣ(,3+ j)7G2/l?Q $@3rawE1%j[؎s[zOdb6]t]Pf@~ݴ` -Q^O'{IGSaޞ j|IgNX=8${&/FdLaǖa*?{yxZ=7 I6ԋKgylV~EL(K|6 +:h_p99>7O㊞FoU'>d8ޤW0(P -*]>Avtk 4ǝH)/ -a^,luSgL7䳉p7 (v%9 Jifk}Rr(D!Èn1CgmLŠ%jf%⊏Å =a{@soW2iѡ{ ->a>MFiT3Hl8bALjX[ٕRH,^rQ ?}+:@{BC!qfijrgfQ+A3ĵ;K!$8I*gB2? z'@@sPh3ҝJ-9-iu @m5TBNQAE;9DuQ[g$=i)2$}3eKԳvRe¼p|&`g6x*J**9>tAIw6t|vH mLf>|ʗA,1 -o:>]on5 !_a\m=*`'qxdDVU#;gYsej"qIhY)K@d~z|^1RI"KdPJ(0XW?v;Co̊:5t\a[=|3q hQ0N.ڮkɥ!}b+|eV۴_>>L}m!o˝'_Xy}$tPшY$'&S7K|'f ֟ro+!endstream +/Length 3761 +/Filter /FlateDecode +>> +stream +xZmoF_a"5iAb-PZZK)R%غ7o$:^2;;;;̬S~iN4v#'z?; ]/wqx{ne{"-~t.z~3{q2UJ9;&I\^>Nw>L|Bgoϯ O~;y;,= 0V'?.w'ʞg$J,N͠o<7MCU?OLC?pZ|u*tzв]QWPˢCIwj^nyQ`R&nLn1=TU'/Vs;H7I8+(slKF믱Es1kDa.%2hKsϷ bb-bak6&Amrʢ]u^Bw^%7vMq􂧙%^oʚ6ljx;4y˞ V07ŲBWK,NJ"4zNݭCZׇQ.,*$]o#|f<; ZU9^OIkm"%?kb6'K֞7R)qpIADA3vZݐM8]ߪ4Srӽb2XfpB#>Y/ NC״03CGɚk;*ES$h vVy:ؒx=V_~I9*o xj-b)wаBچ]FXw8/ R|^V|VE +I q6S[\uۘ!C.7~j:*rOE!U튼 $kp:t*T`9f)L"]PƤtEYj1s))_ٓfPE7̐ :6fRq%fɹ%AGB7G ƬੁÍp #x8)vES^=T`/V*M7_IEjJʞ\hWJ,&;`^u͈3 +)]DzLRr ${5<U>hdn pcu}è0 +#Fidhir{BgL%vq'Fty5<$O;yRp汆GpK{ZQCGƝY +"6Ͳ0L@D˺+N9vn$ &2BE%cDb5ĎdrT[-cj)Ցst@1E*ˑ8͇)߳ڕkv7|ךR10wunAZ:9*P,ukR( eop-83lc Թ*M37Nv@0aR0npm˜cÔ?冒#bD)D##S#'GX s+Wԗ/HhC"M|z܍ RȽDX3ldWEx%a# +\n- q~Õ5>=hbŖ$=lB2t+1ܣ {%&>/t܋ Ln(=@@P= X. Y#nPYHaQdm7<@i`.I/Bjf*t5ovpg|Lv\՝ T9bz~ 0p41513AfcsL +k"߂qйޖ%ӘcUs@6̇K-/eYA,MHw?-վW&)XRZs>_1GSEylyXI"fT/Kԃ!?!RyNj#%"GfEA4EyL%| Հn(HΟToq/6p\ + ;$}j.ywM0P +m&< W?Ѕ|1Cv<(SQ0T7Xv͎;Q4U*g5/M~oV0ɨ(oLXA *Ȕ#ZuG9bla2Kԏ$'=r3瑶X(bK Vl\XbWVj6|@ + ? $c${##;\a'yNqg +ڨ$}n(U/y/s询?21cS +BFv+JA|G)i` täyen)v}'|x+JcJ 'e8ބW6!PvjP8 BQvtk 4GjH)Pp`D,lMx8F73U"ϊb8~fzNdʜԱl")j-)M :ô#xn-q^ŵAhR8AT~\Y y}ϏiGǕLE?th^6U'?>@1Ć#t ΤPհR Ɩ 6a{Go,85 @9A(ll^ʝF`+G%$gmkwx%BrKpU΄9zYnh@~d 18h3ҝJ-9VՖ}ǂP[)K *L _!XGE ޜ>CǺ)ȭm3Io8r(2,&'?[:/?hPϚ>9Jw[0/E wrio:ك뭠!J0hgS60"y +jڳHy8TAw?es[]cbW,m &r1 y1par`־6Pߧ!c/ 桁۶yAeL +J,:@3=ӟpHs"A6xC15̼G*'ɜ(rmD>}cc2t~J& P%tYL0 T5 %HOp 3˚spͭ-HJ =5_b׾$3! /-p5W?Ìv{ABrhlAulq7l?ǽ|VJDy hQ0NMd?+Y g{gBkLo-wF ǂȟO))Ckh;>u!61`_uendstream endobj 3872 0 obj << /Type /Page @@ -10966,17 +10883,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3884 0 obj << -/Length 1474 +/Length 1430 /Filter /FlateDecode >> stream -xڥWYs6~ׯLDϾtr7NcNR"-!d[Kc ]a(4e9΋,He4^Gx WILHlt2KQa9]z0Hl| 9I|}kp( dYw,Q M۷.%c>u*TAZGQQ2yYSUMq ` farTm絞OR(54z ,ƉMW"cUmZ>}k3I!`DkR$BoY`QugU8s*D@V55x'4BJ -wnz8PFbR -:/kR4M.秌XP8'k-^lD4喕 -8)w]3,T0搰{LD:/VcF5;C4/qzϘZVR͑+߸v0$imt c0+Y\Y)b&LywQ[dԅKh kiC3iQŜ<2hA}jIXa(YyWyj޾mXkǧ-G`cbyTHkbt @I7=Q-FѰIX"}f|/"ĦYDP0UvmX9.xB+ofx4lɇ )G6Lh.>"/!r,r$x UPba!a7MCu̧ 0Mme)&Xprd*9cp|q,]X"J_SCS5=j`S(O(o\j1fsdg$DZYp7Xev;ڗK^6xS4HF 53ʇMA'8s~-gendstream +xڥn6_a%4P+H^6im5-0٢mJt\o?sd'q2s:Y2N4Hd4p WSCiT 0|8]ɴ$.~{~h,Q0O&x}503q}bz4(WHos>}@u|K0 d wp(χJd(f{/qj\'<8 dd]Vc 5ZY袪|Q[c04 {XI(j 1iJ\3YeR@U_L eyQ9FDO&QEO1#n!\70 +6n5k)h&rF +m/LC邊6NeJنu 0EՑu&!rDWS^Tc:]n~KU<~eJA?yC5_ZP$(Q͚SBPga[˘aj w`A=8 " +vqb3Ү=bԎ=c17hMf!ڢS5e .J=Nt⛗޲ +o{,τܼ{!̼]8PHGC.M06snԒ-S3%t]A3GVWO5])-1xmb"5)|TTO-C3ɟ>o5T|_Q`)7R%S-[2Uc顅d'~2k{ +-\|g`0+%kq־sn{Kň3. ~x.yks?h-X /I㲛sOJk Sbnny 3z;ebYC#7}'P>{,cL ΧCIzMO`JH,} T Uz(Hi-,qߺ><||OWy5Xn( _)f,W8 %][Sf5s1 ay_azlejRZO'3]a׺[TN JyǔX6/$;?KƷhpLmfbXegCVfYtkd:%Bz"L9]еnPWWhy ˃Rfa_uwN?p-{ +8fn +Au㎁U!8nڞsaVvEűnuLX55=:#J/izzprks )x̼_VzI\ң$xycsbvn/yD45v.L'g t|<߿ L<:a|Kendstream endobj 3883 0 obj << /Type /Page @@ -11006,18 +10924,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3890 0 obj << -/Length 2666 +/Length 2536 /Filter /FlateDecode >> stream -xڕYYF~%0^ Yo 3y?P!dMR 0lv:fYgiQM4OoP؄0pDM/Tfi=$1L)gIqןqnF/IҠ/T8 >컾*yدyqz~xы%R.ڄ&7OIx|*eCcɩ,O\6>Q}Q 8vr4 +v,. 4tTQ>91aE Vb5i<ؖ,+,9Ug(+Mm =pX!A}Ѻ\33akPH[+/(tZ~df *ںQ[-_5a7*Vh9DЍQɧ%檺X#> ZJjf Ip -ů#9ň\c<` ʼn* Oͮhz!#$Z*aݡkwt P )7z4,$HrIhltv-&,ᆣ$4/x0њP/Fv8Hv_}%QєhxE|{ZmOE#l,B䶸'|F4+q:_O&qQe~劐vYW];l3't碯6kח;fl_2/#*1ܗ -\ LZ{Qq_6Д86)Bp WqϦ`@7@f5dS8hn''&iD:cBEfG8Py֥ -] 4d_݃~='fWID5LhecͪeӺZ߸$a DGtyfImj+R: H;YW>+=c5] y- 3SAhq(X`t%XxQL \r8 Pb[jBZqQh1J/3.S)V6 -b+_Xkv"\ ̦Qh=MUاh NӺ'+kIڞ슻y+OoǗbQ֋\)3afӾgV 9Fg8A(\[88[ؐm7ģ(c_FsZi@*:-7c|2P#Ui@|# i Or{"WF%P&v9K mQN9fօtU#v:YLtOӯZV()Nj/Bh/Yv<[~\\TNR)*-}pFc´R:طQJ.\]I*_".L z!?Sg#ltUPtě2/R@e\-S?O魥O? c',H3uAC~'~(KX&R񆐻T= .//a['_oƜn,%d 5}QL4|jJ:\ó`v>q,.}"jZjIq^* k8"TwΞҶB7c Z RNUFɷ$41\ۭ||*o#t8vٗ p837?e)endstream +xڕYK6Wj!>jv*:Y2C( k(AER̿~$\e htu?u'ad,OĨMto&q 3s:Ouٹ=: ufn:v{xs^G7: +V./rypU~O"uW|X4Zޜ+qODʀOQ7)׼#Q,C(*W/\6Ny+WOЉhAʾ&d/]_m3-;9}YF\i/*F`''-)pϴe~rܣ G!;#cA+q3(4<*]} =/Xw<2M3Vi`- #+!d)pvF h@7B1 "Q~5p&akSKTA#FMigD¥݁}g)h O_Q0KalZvXpѹbhmPK0_%|jKƉ`qϠe!A6ሲUq}իJdO幜uW;xEy 8u:f=w c=C5vY6rhS/Ei iܰ+ZIl'01dUHYy&֤e:\*ڭ53K]Jǀ"Xg +ʵ Sv<%(xA#3h:!vJϐtx&N A|$ |Qv#b^-prIk[t`-9A#N)ËΟPWQJT(@)PJJ +awݓ%$4#; }]$:I 3 KL"%.McaS"h鍥\?j%Ka'143ew'ё)Lz(8;lqKR@ˈ=ew`||LReI'i.0ƺk20[)N3!s8cq%2Rm3_+7 +K۱inoW!y  q56]c8¥R :4ˆ%3癨J=˦wBO g>mZ{,(I/LJ>?d+̨௾`=]d9P?9٧ =cl{y_'+7!'Ubef zݿVmvR΢N6.,a[+bZ.i[懡OrNqإ헊jHPm'b G1$ +k/rLg^T󿶯T2hэɦ8o?iOIwyrg?ɽT}rs^;[! L&P+1ʨoI$(Ӝ舢QxHϸL1\l"`7V5lW$İ#IP ԯfQhR=ۺn)k'^I4جuI`xŸI4®R}vF8 Z|.ZFgjUOn<&}?c\l[.|9sO 'qTPjyjyhZR"걻 ;nKQU\* ZW}2E|۩IW'c Vs{LtsW£ޏ2Qw5&JM-nIz{rOo]{W<7`JWW܍)WŽ^0jWc+qH0ݳdw1 +F>CZQཐʩ8uژ Y<7 oq +"'ߤ +N)!+o<:rKݮې +K]OiR\xW#0n ymxrRI$ V$Wj2>QK$º,j[[>oA9X +rJ"v u :C;;s^ +]o%Ғ9?dHKW(vsۆpe9#K)ki)>;`̸;dBw?W`#9b'0Uh4/#Nc>endstream endobj 3889 0 obj << /Type /Page @@ -11085,21 +11011,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3901 0 obj << -/Length 3087 +/Length 2957 /Filter /FlateDecode >> stream -x]۶~ 5c@qqƱun:Ix%H|~%꒙db/ZZhH؏Z7b3Q7Y]o:6#/7?y\^/WIz߾[w27o+XRy@W~N(_o~%XlL Ɓ]nLh.on~hY9+e}Fϋ.8х0|E(:B_pDd 0ER{XlHʩel8Ć lh46NIazz$2Lq3Y7#nfsv<>#f}u](S# [> 9nO{2#x9R!e{YQf% B"#1["ZʩABemn/Uy'RH8Y"Xp?Ez\X:cg@YaOH+x@',>Jv/TT>`?ÙxhȖkD*iZ6Ȃz - S 5O$F O44HkϠ;FQ _=~7u4 ǀB4  :6<8%^]Tb+N}vMPElo+8G Aݻ}Ne㗷$ڕRM&-uVMeCXOx8+iQ½Ѧ~̏% kZNۀu.j/ z]?V:Ύ~0 %*U^*csoO߁!P;֠U_.Ft" -M7Jӥo޼+w8g돂ɪ)/2k\SfW\^=5 cջsPSЬ_4m,#}fB|0=oDO,%q9\Gb49S/ ěL\.g4pŃ &[O<^}`%$2>f-ʺL[`1 ~fH>ڴ3!(K6GO}L ^\[*ȱ. -vy0\͆VWҗf/#ʐC_M^"%%Ҙ> Svc *(71Aϖ'm2Qԃ@ƨMЎk#~xQj=98|8`VnvL#? KHj,,z[sz:uqha+"pxĐIA B Q(7K2,fZ4C~e>Y̧\pƜ#NPcSW_,QZ>5rȻ`Nõu4oϒױ\PTGnr.JDiu'e/΍!\B24p#Hh H ɐ1WcQAR d f;7B"P9'' P՜5FҫQ<=C_棻.rZa -(("Q1gzR`"K(TnS?jQ48'(GƆ1 -\ ^( aB;Cq4}n -\nJhtE -'V|XDnW(}A{;VBr7n)޶Z%af E[b - M eF<8h}e`- -}k!fHMBaW3ÙQQVenY J WkLbM~ۈtjuVZ.Kf 镀gs=J%⛹/" "$V"y,T'YNWݵشeĹ .~{Fuz]K"b=籀A"@dJ -.g7&}#Ti8YX3E+Bkl!\@Aylr?fDH𱾃 @Z^K}hK':0~ƃ}팙맃mJ11ak$ܪZ]qjxΊB1S: 9Ӿ>u RI1#0"?Uuǡi VNLyp3J#и%|Q^|I3h.3gg%ŲޡM'C0%Ou8&_Έwf&Q7W|m|xppЦ~l-%ԁ^C >lvqzR>wBF$oC)a1Bo0I|<zM0}?cS J^76CDt7Sf‡oӰA]?~ US2J]!N}lbT'̱HfHnˤ=IKkR81p -יO4|v(W:MһS >(5PKbr)U75tlq$q9'T?Ž(ÅH" n@jz^}'Wu`>Psp Ei.7q{pe4քy$a7AIӸBq ]6CkO5܇{_&U!sƊc%.+qgh_!atG9}# |eĹcKzTe#;I+3S46$p5$i1>{B@͐ijqK0/Th}koJWh"/+*>¬yP_oGIA ^vtJa3]<zzPRAh&}zݿ!TcZ,kZ(QK# kw~2ZJ}ԿB󓒕躡K)@_Ǩ:!+H6 g=r͵ݿrBtJ ozaRxPt=Tݵ7# F^vǼG4voRߦDPƉ陡3ԏR=endstream +xZݏ6߿w ZQMڦH4!̓l˶.Jr6wHQky7C73䪙,\/fIQf7BJ8Yzq]\\~3幙n6r|ջ ߝ/$u~|;S疉7o՛y8W_3 /r` -o~xycja~ћa?]xn;h{ʲ"7 +./~1R//4BenGS<~I(3zO%仠E"Ϲg>l.S;\\9}ύ̩ $J,)OS5t̜n'N\,'Pzѐ}nU~R@TԡA%g^nG IǏ#Ѣ5`܈u 3?iE"hHXoO ܛe Ak6=cNǜTJgpADxSŊwf OD-1Cql+NNK K4O#!6h3v{t$~U_0v$!ޚv=]]7wfcYw(~WVX E8>UŻij_0dz F(/q2 *l7 QfA30ǂt' +b6LDlKF! 49!\hCc3Lδ${4oRnfG +#D; +4"wUj͸xͦ|R|?D?)'gzUtc4\aǼ:| GgQ؉VqC&DRqW+bpi 0u&~g|3N~jVWz/QMʪձi4^\۵i E,}9=gOGCz^THB䂬LكapD䶄c_d8ǂwt+ҎPpaesks9 9ᡄ +P}vuz;\o@8JɅaDt c<;s\H m>'gΠ $ȍ= 5, ?vet(Ks~i:oLJJN8mӲVX]bpnBt"2~ ,3fkmFʈ =QK'J #|*R6~%ƎЏK?qڹ#|Q]~]pc{ԩĪ٢`NG6&cu9M9 Y Nh\nb}>xrh + |t뇕3xgLnu/C3Xęo$%,җς +]o~M'֓8~nQ^]#*szs69N22+;SRPGQ]޼x{{=!&\/Sc13Lۄne⠔#>EhT ҒC1*/Er6h'Be mdzI'Xwz5 sTvR]Sَ\/ߴСRƊ +Z'j xX%, +=^ &cΠV^47yKys.[Ywy8M7 +g;2zjH/lВ{VoG}$n%lv;Ǟ_^6i!,eE8pskn{y2Mh':\*j摳@&oฒ9S ikҏpԵ;aR 3mQUMͽ2j_qM7mTBzyV/iAO̺)w-U}Qꎫ\eo2ϰ.Ы? =0w y1?IQ%ԦB4fh05̵7O4" |/ZrUq{jiW;Dk1]WmyɽݮߍZ]6LOP]?0LMߩAhyLAZ-2endstream endobj 3900 0 obj << /Type /Page @@ -11173,23 +11101,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3914 0 obj << -/Length 2306 +/Length 2254 /Filter /FlateDecode >> stream -xڵko6{~/kE,pX5E]Ul--4d9b9MXNc$&JN 1Yʿ.dWߙt"E섛?t37ΔRQOgYf?L}doSdc:?_Np~s:E*|~b~rvcK&ۋTX*7iZ:]cj0f.UgLlUjԠLb%IulҌt(L.zWm qU&u5U"S*g;R,ٳd8M~:Kl}BV6 -P0[;{4K.4K$Q·oyPrΫpIvTɷ$r^fπ6Es_ZA.@-3ft$fʉd|JWmZNfHjohI#D9ٳћۼ| س ¸ "qmQ B(NdL;eInRmy#M], bf9p_^ C#}Z)q+ٕR [ӬctT+9jd&e_ƼO|lM[V: X2eM'7 -Qml%&zԅ#Yvf9~@vD],AK'{ҽ _.z`%GO_6X%55 -Suuɩ;8;m>[k@cK9ՉhnvMnCP$jb { WUWxYZ9 9q6<%vex`B l ڲuN>>:mUž ee ;4$j<IS[r6@EZ@^|,nO6R'7{bч)9}8h*yæJϗ_U&bG>9Hut f% -EgK]k38IpjCL`2]27ŷ_۫C+ orvՉT8ã'V1z~y|)&p!]]h.R8/"7i4$ܟ7 ܬPoQ;ԱԙL:C&Ԯe0k>N >P - -H'L8ZZZ,v*IyH(@tRǴu*H.8&!쥙;^G\?kĥxT'ĥӬ6yjVY2F;{P/ъlĭKq#: SdkE\fFxpi;~6YqgIvps2y=mŨzgN/I^vz(/KD'iN#Sq^-%'N?W-^O_:6o@woJF뛑g *L.<%x.^3p"A@}J[1tƠF ghz\qV%XN]h^tDd;zw%֚ͰPWh-CPȩETEV[l ]E,5|ħ+x '@ѮYشy։s amмa -9O?^]Ve -ÜEr72 DbM S5TQv*6FP}.yiRU)IFe 74*@yXJŽGk݁&G#{@uJSקb6aR rV -뻢 !5 -([lA(UK"tߧqn]i[JeG~"򩞎;Oax69uG@3OO#6/|ҙYy_̈M97\i1CWSt;X]cpYAhr rPan1 ;b3jdysK S X| G) ـ3 J!|m -{ć,) /pPw#=eX+kF8 endstream +xڵko6{~/kO*pX5E5F@ek gK$7ͿyP+N"@D3rl,t6I][-'݅a_2`EbqW%f"El2D(կѻ/oδ֑4uE8߫pymd~*#@ O0?\$dp!b=E,l0V0^^kf»Fu3řc8*UbN +LM2S05Y@]4z_Tnk: 9 +8YvGΔ3'Vٚأpᅼ\@EEC{־A 9zդ~ SE&MU-r^ Ep?_ZA/0$z)#5uN$ 9`uJ\)ĕ2O+dFnm*!@`ncr7q]hD@ۢ\~W&کX?C[hA cp`ȒRce 8b K_^ t%{o0X0׆fQJ>l,.Clo0lPZiDH(oxB6h|Ÿ'|nPhl]Ѷ$r\C$0͢beR? iy7md:=0ߑ|]rً+9 Ɛ`t7\lq +9 ִ3p(df8KpŨ+L?[l2AD\"kG)2 IyQ&*κ h$a\V}L=sj]稢$( @\#.+Jgτo{UK.?+"Erё sm)ڰ +$.jyU&uʺ=M˝i͑DӐªu2!4 ];ޒUϺHrKi4K:/yܡaR$ `\Âkx~1S5c¥UGZeLj,?} x<^x:8Z p]R.RzP" ]FA i 7Mpn D +R ,mjhY%aO^B(Ȭ`nS 5L$t2i(ǔR<$h@̤0b$ +8%!yL#nT>K"*3F$3̜3G)CY&џ2P։Qg8ؗ$H_N3(q %%ΩcZzAH9br#Λšfg+_{liս0ZߌgI_wۜ_u9?UpǡgՇ%/1'?(Jzo#0 |  g˟_k|O$)U` gt \Ṉ`@ƃH5mWF}x +,7L!ǫ@rԫ0azP@\$כ|e,q0W +̧[1+!"5v?z!C) ͇~"1cc*PxrYtEs-\aUh|q8ݎ{„dsMNu8`Af8w( 3(H?m{챠G{endstream endobj 3913 0 obj << /Type /Page @@ -11218,12 +11143,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3920 0 obj << -/Length 647 +/Length 606 /Filter /FlateDecode >> stream -xڭMS0.oaYRoBŝN&$2ݵ7@(j#D MA+NNqS zw7|a.n8vilhtDRIbc,;e߼1,NOat~{D`H0t W3yd'8n""  $ࠜ W D+Љ*Fqb;f^qYxm~j3~_ж\rHvq[Ghk(ZPB^E^MIQ}$1@,7M\Q;_5Ţʗ.|)e[;_g'tVE)ʼstȅ޸#.dS׏pK݀GY$HA@\OEU* -+*+Z7hU]mR7Ml)_81MvN*cS^w; ,h1 oR]9գۑki 5Z W`,h( qTendstream +xڥTKo0 WT>X6][0=xIvߏ H("?~"% f\Zi)tp2˗@xNF$ >Eg[xl-4fa$) pέ,L%]_;{PPp NP= +`SF"ᑓ_I5Ȝ k*PZ2/Iuqm<"a!8aq"XvS 6S5!CZsz +5++s%yAвޯ_HÌ U`6iN}!{'s8ɫ%0Uq" + ٽwn[O̚t- rhE^mQKf tܶ>`\w.i^׍Ownۖ/eחőW^.}1̻}0؝pIfwnYĹl^ W9 &W> .@ꑊ?خSTr@co}G4jmM-=#Jћ|/GhM_lZԘ " %*fFa|3-yv>|?;Aendstream endobj 3919 0 obj << /Type /Page @@ -11246,14 +11173,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3925 0 obj << -/Length 407 +/Length 384 /Filter /FlateDecode >> stream -x}R=s0 +8Pڻ$]-AHW[/Iq> " C H -y V -+Bu:_I6lcHb*Gu|oWdJ CT@ s]p# 1bC 7 K~9< }~zh?U=60bE@ڱNzj m/ʩj!O cKY-~v4 %.؉ ,0EoBy>tB^v -TEiTl3jq&ʺD E)3fV;E=ga&jx)Z@q1AJ"[]ŸQ(H"oO7B%> endobj 3931 0 obj << -/Length 252 +/Length 238 /Filter /FlateDecode >> stream -xuPN1+\[vm (N!D)HK% 9,\R@.&erˏݺ w M Q)A YdҩDĕ蛫ۀ. ]Li0B{-ZF?ڎ-`C?4bU@D^Qi5~ڎX%_/H<Άf=:E{W 1e-4e RGshjn.7xm,t dendstream +xmPN1+\- JTHSQ +~dk̎g !r d "w 0|{lh˒Ͳ52T没+ /k3Pv8f``]6s\~(^endstream endobj 3930 0 obj << /Type /Page @@ -11306,22 +11233,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3935 0 obj << -/Length 3140 +/Length 2940 /Filter /FlateDecode >> stream -xڍZݓ߿brOjMe7٫*>$y` `^/ AH-uu))@,c>m](:V~5gftD~YL#L#?~(D=Oa*ʏi]bǁ\vTI{;KǂV0Ɲ_ὁf0}Z[DdqrW0Wj$AUjcZ弴֫nǬ9a(L 9ՖĀٹPzX7Z3BH.5 aYc2'bz#SaƁq~B&ZCԤ5U!M&1]F`Q/b'?Ћ!YƉ F?Z9[+)Ull ""8!YW>t6hĿe'4qJeF7ds<E8JwK Xƈ#|paf"LT8©hG.s# 8DeA:{-C yt㴇-Mhw}HŘkI -?wU($~ˁ..14եoSdt0lN;95&yCӖLJ {qj#^Tsn(G),8x Ӕz\6 U*ߚ Lȼá`=g)J:I[CtR KP,ߜsJ#LDW'Q g,Yԋ1}wMav,nd쁦;GhzoV?D~UL$qθA gidk -M\N #|8&DJNw;SQ:Ȃ5aYvxRC^[L -Ի悯cvO'6̌3J)`<9,,gˀ":pACC -o9Z@QjOz#_Mo5%v ѡ$ -~6F$9pDJB"<>J}U& ׭"?0RbWf*4SaО\eQZ$Ea:"W~DIzrS+H2ˢ?b",qrNmōz{"_x#;hA weOFWV 0:!`d39hd)I")\ c8@u8{\,a]SqF71ZdEݩ!=JíGd|<)b{O|{BVզԍO5hAbB0?s6fwV*5c°n ~e^")?9!g|L7I)8泮/ݞyqNW{+/HO!Ѩg|Ճe?5,Y6e*qCrdđn5hbxxd~"xa d E$|p;^ Dr45iС6BnQh*s6[[nó{d4׬?}:|&L|&S$>rJAfb}2{_~B(&uU@΋vlF#SxrڮuZifpWP[Xכ ^(>4 w3-&"1]ɝȉ&) Dѱ}E bFFbti +Illc'u^ܗ wkwST8_*ͧ/F̗}V.LsE@*KX%qODlm-MygBq%+g9uxpqtPxFo +|qēw8p, P`tmM.*@y˳jJ[aI +,We- 'vSܲAbrSFR NY̌bFQ)_ۻEd3 }{!x+gJ7T-`zcyic})^{R0 9hkqq7}|A+/Cr В?4Hfi[!{gxӝ9N9 +!*:44dr* '\N8){{mʽtʪ!A]|⁐ƉWU|,lDq!~}y ]gH;B[8;GS!G12=|R XWjpvHF&=<4.8 ȗ!ɂCX$IR>eH hTP^4כ:! [9,V +na)Sbq}4Vszg@sj\+ԅ)"`u)+][g@k=* #*:6q϶yc\;NƼe{#MxHi B .D e1勓bpYAf!uޏ6NKpCq: KX58JېשBmpže8ϖyY1OhV(4 i^n). YONV;% Gx=]B=!A:b\f;)P :P˔lРpZ#yd`d(h4d-9mSC̼. 9(pY81$( XPWPHSKM,7jb3T0;?V^C=^r郴'o:6Lx exU@]F3B*:GZ'a^ҁ8U.lNҙD.P\`C9NesɅoK[uz)GWGWRߤf&ɿtlF Cڂ#q5=v߯DQE4$Q]ڃ[ 2p. +6'n:"r;+kxq;bJ=:J[_TfK,-kJ‚4 KݘڵZ\ +,s|FwnGH~!l]3GBVCXL +3dÏi# /,teۂX,3"֕m6fxcL7/qpSdIALRow.:cH)=g$R|{3O$^M`_ Uܣ{_G2p޷g^v )}92nOl]}FiJ5k4e,mc*Wx쮛'pZye!N)iH|s5#oK`4gVKbIКZyIJ:`mh\-ޏNu oVi|4[CF-].g#>)d_c$$ػ^2,_-aa>KWLC?_p +a1)p$.+ 7H0e y/'*nMӭ<|gf6pv6͝d*d" PbA3IRLeVEendstream endobj 3934 0 obj << /Type /Page @@ -11359,29 +11287,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3942 0 obj << -/Length 3740 -/Filter /FlateDecode ->> -stream -xڝZ[s۶~[&7t'v}`$f#*IͿ?{JĢBE"OTdE*1z^Dυ+! -h]\څT{OHw?/ջ+cҪ˫,˗z cZ寯-߼}8J/yw|KWw@m E5EL/9R( X#7{]9*`D*a$6AIRy$ЪNm`h[k'')QKLD<=oiuD۳7gy(l]6TpH D6L #&Q$zĽvCnO?$8Q=QkV~ǔgV%#&w26@a*IHw8b_Yzʉ31={3[T x$om9"ˎJ_;U m),W_ ؂E=.=ӾJ|=%rxtޣ Of?&"ffjOqGr=#ZU^+i0Z}9C*0uCZ/dm%۲f!F/+jLI}x)8O[ѭVku"JrHBäUƦ -IfTBk/ޗS]=\ROi7c  ^ -kp/.$ge"S6ٓGWf0gD LA^]wZХ0\nf p>N~ /8W;"ڥ$Ժ\i( "앍c2`\XrVvTnx}!,塝>J\lhD$?h##x k)l*tx3N0(YJSS35%'.ly! 9f2ʦ!.C -XY^2#=Q_ Sbė/Uj0Rk)KZApXȑ9KQB@H!u5ZY\ЋbMBİ"$ -M4,rVlfG3Qb]^8w[3A8ɣ/3 =e ? UX]w_g%9$wvdtcx`M'lyN[X"~pE3(Grid>x)yϧ*pBͦg*AjM=vd'bf8(pb -a-rrGNé(x}NAUD05^;t[s()#d +\T:G6%}2 W{.Wf3FwLh@|_Dfr87\fϓ%$fZpPj_:t789%y"Kq2X[E-E8Aܓ kJsZ,yU+鐖ĕ# x)?6]Eɏ -_gHd$&3ajF$)RP$m$2c6<1HQ䁎xƃf@[?p+XF3,p} - -7C}^Vk==I< -x]gII#jj.%9ƩIM[3ߟ1qa*Itszt # -Lv -׽t`tgʲl0M -{OڛzGw- Q}:e$:߃ hN8ck#Si<r|+Wo\'QQc~۔\_σ-ӏܸf42S uJBKL=:Ak)m.q0{M].Uh.SFj ŸmHGNAF\FfաnYyQQj` -$Y"I<}qkJHWEdx)X XdnsL`ܪ4KLd)Q͒08,99xQͤ!}-?1- u \> +stream +xZYsF~ׯ[*s G6NNRJ%yIHBL F߾f0 !&nJ"?bJ^w(2#ZX ^\}څT;rioo_\cV],_\%i߿g"|%?˕^~<曗<ۯ.^LA~hƿ)#GKp0Il^D|wkrj҂ʣP__ՖMȺ"N$_i^׹9u(ejl?\tFw%>M!+Odq);:M29JЁY.~D:Mջ/VpԚwk#A|{ۚ?M.-@?8w9tc]'N?jx8'D\zPy$+IIl~@Y>Hc3:WG$ɓ$ +IJ{'Gl)sD <<$Kaܮfop>N~ -HDRqj]Bs(# 10.,9#@;*\Ndcw;!g.6x4" @2y<$ZsY>/ +%3 HR +y6Y{ptf Qo$H19vc\<=:^ 5/)\q +h"h()0(5$9:*j+غ1igTs*($$XL +j.*BaZN3"gfvD[/Ĺk5< I6S-B{ +RCu6~™ ݺ +n ℍU> q N+K2TCbT +A8mm< ^#ioSe6f!v,Ajm=`N96C jqT2!a +a-rrGeNi(x~'NO&"mW@/=EqJ9JƔڄ.eX<9@F*OQy撾X+P=@Hd;U4r$"3G}P/3dL^*05QCKǗƃ["ZY˶p .u5Zͥ( d]) i}S]Km^w՚9KJ)*)?Τ7]E\5MI$2DKJ(L|v3(6A'1r ˨arOGp_&xyyAINqegQx+1bg 4}ܧlxd8t{z3uBAFfKLvṀ +׼ϣ^1>HT)9Pvi(d}L +>^j^Q7/&ԅtyþ$g43Mlf/T:L&O\ N8XE% ͷ$ax`ceCmϞ @\=;R-\I+03JZf,Rޭ"eEHh6ӮAE 3c/9EI`f*Ȩ})$@̕w;R];pvhJSݷ8( TS֒נOL _cY~lm0RXVp)Y@`ص"(ʀ]ӯcARSAck]uy&%)D0I)m|RkeRCǽ!A(U@ +kJY״yCCXGWUک)VO (^E듈-OyerU4uTdb%>XB +)3ҮumTO}-}8Vz1cٔ\_ͣ"qi52c>:gZtXq:@B1 [wXφFkf.RJkSbE8Y3+LPkJۃ TG~G@<lj3ۈ3{٬:-+0*JiqJ%ʳ߻8 UL>@󟛒 Z[~TP˫JußcVtV\Fc"Kl:29zuͤ@ }-?1- ɥPK~2m +v>RnX0]dqM>42*-i>ɭ RQx?6Z Ɏ0$w> endobj 3950 0 obj << -/Length 2940 +/Length 2852 /Filter /FlateDecode >> stream -x˒6>_#UaH#U>$T&Fu8b"'$}>$r[Vn4Fs*ߤ85jwW@06|{uC_~餾iwoo_cP7qxuZ޿_Øw-ζϯxŗM^q۞Uc?~_J?^ʤƾ -tu -Q642/Wi1,\9X(Kv$ z[0&ڼc~xqn(x| ەE^!y;pb#M -^r\;tʮx!Zwr.Zj^̿t-#1-\sR;eu:ݷ0W:JV3./Pu< 힧`B*{!EjN $Pg*́E~ % Ypm-JwcjB M(N 3ބb:AM]88ݴ hN褱 -:Zk淋q;5(i4R0`2E6:UjOō{?3Gl"c3~{`[lNlxgp1tDqZʮ6#OCnp]%ieɀ@'Z7@N7zlM5(~D"b<-1y&eV7P5JqNyހhBo!P}S aDsy¢3 K;/C0jZtL zn:yCp^Qzo:x,RDŹgP됏H.jVΔJ'g<5S/}.xt :o af; iGXD(Z){Ğ;.UVNO2]ѡq,M' q^|tܣ|pON88qš3}Mb_072$όDb\'̩ts}gYpڦ;ؽсGm { .1N=ty0xS]TXko9HسQv5y+iloo'a=I ϷSV:YE֓w¤ -Юs$4h d yBZ ; -3{tGNF$Z^ˌ˨l/usVoy0Y>WFrm|HOb1ADnU2k D+ 0 40V[; ى;<:~y[zfebtKzU¦4'=~F)V3V$*PvPQ|,3MDqul0P6Jf|1 -XqB)qȇ!c*v ñy5LK44RshciaG"+,-2{O -<@`KE)u=ߤoTpP0 --j,. :j: vM`'SO\|n?;f{*-,$*Lxɑ-\a2&]˕w^\jN.|g]5KߧoN-U*Iop[SUD߯X$}~UW:LhZ"_mrXJ5o˾kbɤ70}I 5;?ih$kD3{Ǿ_}%g\󖲐uQ/+Xɸc3Yad%.bHQ(tVB,Cظ`)I:rnBU9>~*⏼.`krE>3S.~ USygKjI 2%U\ mq(TO q7x -8mB]3]wR:`QR}rPڴr4F)LZElF -!`(=2'84&LGzx!"Ppb7&ӤXH۲o0"*4GGsy- ۤCXSK]FV'@iG(G '4Ӿ8ʀWݹ~.ߐ>d^>º^8\wߎ͓Ȳ`f?ep~1O\oR,"m]g3oY,)D6k՛R 4Os.iבs5cE7D-KN bOń֓8/K&Th_0|TYُ?Ho!<=f}:fycvPr_Z,endstream +xkoF>R@E@>Izns hE$$%Qvp{ .$U\,DAo" 4H;B{/_+g*o =X 5 l͇8[3w?_.W7x+s̈́M~3XWdt2VhWW Tfk+"_0Ё$fBhgp芶}=JQ6b2&UYqy[jXoO/* /GHe\-ۆ/}@ )qBٱn zd} +ѓCE~V^~` kqYpzr'B{)DBR1hFfBʬ: TԠ;ڇcB?eh+EB""WL%1(48=*e;;bRXw(n2/ZӉ 4Cλiiai o- +'|0vf+eb? [|ŕU{?j3G"qf;.j^eUGbSB#t4!]]Fx]BQVǾ64:OR6jo˖:ZZy?F" 1S3vO߀C95AЛwNJ%K.RQ2!ђ3"<.\׀Ԃ#c.` Fp􏛧wS"1ru7GtO7mP8EE,kp(L7=c%ndiW`"FF]c틬dXyk wt9EdۃTzz_0޲% 40ZSk^˲#4,`<-> +v2t4tiLuREbaV_7{A6*~J \H?o7r'%"Iжw$4hd yBQg;5 lDeѼXAj)[)_L< +Q ~˫-&@kJ+ã"&A>CgP'FK \D-~-GIGVA^w :3@R8Qv/E\~ usA2)AIUUT/(#oFpPWɳĥ =%0Q7k=hb̸)xǃca'fۖCSJ*>q%JLUIcBb-6cR>{ ~ +&Uhl勤IJ-%'!n'62 a΄xQxD $EG`c#(G{s]'%3PdHi4 `5$xHfd2 + Z +%4B"%v u$ xArR\祅AŴ 041V[{-x2-(1kĺ?JWj{APw(ibu7cIs^2vJ0* (r(( e2ΙmhBxw&> +|~S;A(vb(G$},ȮW}&l$oD`fyǣZ7hw;ĢZ +c8EFcĐ;z`86(?>bI2&f[icj, 3Ridc闄qld VP9dIYl(MJA&m-&56ɱ8ۢblѰR{)u`̨JYLSGYJ ˔<q Z&ha|ɛ]8j_bw},W㹢rJYfOzUMmR&]c쳽!0LL*?H;?i&m5w5N4wz g e.(OZ <AT%{*IOQ:Bjޯ:>\5oJ QgI= qqjN+ip]j +0B;)c)غ(Ih:r[nUB2SɎ>r{dLS1\wrۦ/G㒁Bqh 2_}=ʱ)[LWl&rWo +/1zg?"RāF!h*rC~hh=|Z$MUq~v7{~!{٦O%0ʏ) GxTendstream endobj 3949 0 obj << /Type /Page @@ -11481,25 +11406,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3960 0 obj << -/Length 3060 -/Filter /FlateDecode ->> -stream -xڥko8{~dbEz-p8u68WBDm$Aʔ%{W)r8{I@e$Ed9 &i |;0'/D" |ed{wS_)i1$҃9)70e?ů+> -'_O}];9ͼ#ԹT -rd W$*K'0̲DGJDZɿ;\'k+JE![TEF)3It(@liŮ.ۧYV/m]{?lMZ}?ޗ?Ip_i*Aīj`ᲨkU ڻHMo`oi*0 /`&/])l!L!ks˭%`>vI|s}aDWn0_zZGo\6aۂwfrULpP# $NP# ;@G=Q0;Lx/)A۞=Aq@i Ap_ cā -hxk4^T[i -.gޮ) 9誨Yqj^;= -d|Ě6EEJβ^ P/61:Bk\2zmhG寵=# =9xl#0yI|$yyjZbІi̔b?,ixl]UF|[X٠ToQ'K>ĿӳC~0D z:ID}ΞaߥT"2TG?K-\nz q8 4.`P``G?xQ, 䈰3%(_d-Zf>oH1P?zЋ֪}CbRAD w_H9TQz4&TB1<+<<<vRdx#LDI>nȐbxUQ(4(0|Ha1]`1xyYNz2^AjҨXd:D1g2.ȫV{OH{d'ƟG#(@;Y>Uts AbM/3*aӎs"i#ҍ/g4D Qr;Tt.VchI6 _~dӦ^{rzӆ/"t/BIW8%S̃M?Ͽ8b!9{g$38vQ.>(bL23c*WOtKr2>NH̔t8Q ~_4|+L~$-15.!~^. %~;q?V*+Ԓ Rj!JZ+l u$JbiH:W#ک3!°sW5$V87~`J~ L~%:6i{@8^ĉ<`MSz]VSץe*.ԄxHFwZ"fPO&DFN5iOBbn D&b%_҅2=uksWdk:ܔi,Kތ cYS#)aD] b 4T9.BwƙY# 3h53YSE0Wg53ϝ -Qǚ aT-cAJ$'a;"gK)޹;#'҉ noLΥײx4RIAwc""9CgZqȯ14զES}(A G3t~g -"ܱS'@w cCSVH H"8g%Xϱ|R[0,*ԚZk3kQI]^Pl; d>Ns~zEvB0Y8Ӵ%ѮuQRj\o]ʳ;Kh']O.j D E"K% -'CH!IYendstream +/Length 2908 +/Filter /FlateDecode +>> +stream +xڽZmoF_!pD.wVpPu[۹X h($:$m)J;uvvfv晑?=HBt' +'` 3?hY^LO@*tAK_?L_1UQ'P{0 +4m7ػ 7.qp-r{M?;82#+?f8 +++<(yM5vo)qěˢw !=l= wk+&|w#-61|v͜zwH&$Ð|>e-6" )޸yawd2(W+fQh#D'Q؄}l!h:}6!DD ïQ rQƂhY.Ki#̉=+7JêU3Nm]lr +U+2<-[m}/CyM8 %O6˪^6#-fUF&X1S3ގd> +bĆ~+6u:`_I@jSÕR<<\? w}j߳l76SNā[e$*2sxkT-z7#G;8H6>-3_{cbxF" L^A"in0 o~K;B +uSG{Q~mop2tHŦ*CwRVj\Y;{u#q'>۸ : +U[ o!0 QV+>1ntBeA23{R<U(4x(|h`.x~փI < :OA,:61]z傿ِ +T,OO9ZÃI Nryfg['r,: bб?ZۄS(ijO\[łNg q>kztmE׆_vmD7+Kgtχi(/*$SFBk֮rXJ#j>-qE*CGr/4vOIͩ'PR6mc3Kwh%GĦeJ7"F[B+(#M(G !R,1BI{mbP7pU3omq3!Kn掠Gq]`ETZ:ctIa>ڔ Bג shAO\ܗ &SӸ +`8qi]I.p3X/fYS 0`$43-WBrFA,q0㱺(U:^?HQ"gɡe[܃Guӆ4_i;Ih䅋I a]Nd'r9Loܺo^#sʅl˙NʒvΡc:XF2&TQOwEYXFR+V;bL%|WJ^K\ܩ.YWxAvL̆ ! xaUn7kykBp|QYs8lL~ѕL`9XDIKۯ!`̽5TvSzsɏQrFѷ1x 7@!'BG)d\bH"Չb;?b=6nJcH#\⫨VZ"Z==TLd阪/b m_t:D>f bEY3q q4Z+9ldJꅎQloU[yz" ߷O\((+tGvo*>QJ9Meb mRuZ+{l=%&:Ffld`endstream endobj 3959 0 obj << /Type /Page @@ -11589,21 +11513,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3978 0 obj << -/Length 2895 +/Length 2767 /Filter /FlateDecode >> stream -xڥZY8~_G7V$1g2v8#?ƉA-U-oI9u} sQ )v^F6:]%t!Q~Qp+bI;bQ tN*JC/JRbγ̅f3?K}ux^>}6ڞ5R`򽑩7-=Qಬ_ Y!#w8Juu>!7u_pEw$Khb]ഁGcr>깷u[@#OI/)x~XqC,G>Mu07A5Yo%bo8e{|B7>tXfDj < ȃ%0yZf9x& I$Zk :Y - -bE^YN,[nxdz"n贶,z61rNtHY"kTɮ]#tu?P2p]t6Bc/L8BWL@JIáH5%QD @{{n k|^l(8,Z֚Jϲ+f-o\CꢓxM&L5IbRl: 8LI3 5}w138ؕ% ![A*-Ϙ8m8s]Hɦ`ri%J`CX:aK/! Rp觬 -x Z;|& -\~^ -H0!a[sF~zaCz5_I& \lLB&'OJAH(>NB9R3u4/q`48>'nq@ֈ,hIʴg,rgزʁ@!"] xXʼcoz\i`M4մ&79#VJN -r6⻔(xz+y&20IˤLw15 ڂN -ژQiLj5#A9WFoM~˭g !m_egSu!kag=IfmϭgY=cx1L')h"wYG'F*E }wj2w+αuZ×BPMes0X<}qF"cNtLӛ f!pNF\3 8wYB‚.MEgR"74:XvPYI `/(WNX XM+cA=n9X,,ygpQ%E8W)t(LJ ;|;Iբq5c/[B-@G7Z3$Զ0SKzualY!p֜L0M@/B`$0hVę2˨뢢Lj.gO\_|9Mh -{%Aіo ?`a\lTr22aAf.T/NÃ~iSoRv$&>!=hoze¾Yœb$ ly7߻0olSڏfCi߂(4 "C6'ܥD]sǼz+,FnMC*/N3ўG}w3 (NdҝilRQGkP̬b9b+s$}hle5!5@o"/@M"q@&x1p& 1}oKԁ)MJ=JY%Lv5ܩ+-&΅0 MDA.mj̭I͡X_=le\xm9fexǛɠ+ْaZfDTY@Phӄ5\hk ! vvfb{(*旼|` Ԇ-v7YW?0-;fb$6u՟q:'$iwbOഁ#0깷u[@;ǮAXm;"CP1`oƣiii;a@saHmMN\ O3<߷gdXxPgmZ}2+ZOb5;R*uY)1ʆXQ4 +:V^GsL"6#F:*Kljb؋F̱+@ + - k7K  ]?7u9+ҤbOr KBDN6r]exFo[ ȝ0`C}-ѲRL/m֖EX%FJRci KYɮ{s2w䃗0ڀGb Aq_Q1)%9$)aZ"Md4-[|>^0 ,E4ȴ1Gk:9ʭ`]bP':~|*}r$7p +Ɓ擨FtL8mZ#\âQ')A8":ĖUTTؔr܈oūSd=3TwJk*)MLQzQhtc}Áo(3=16Mwt =xoϧ;0IڞِDhu>p%bXdS6)KR<8FPFF^<Լy)w5.L5p͵mUJ2#OG0j6;ZUϢz ψ`!Gpyh8ah= 1W8rB7ܩ!`iu%TYsC\l.~W8`C [Sqc QLӛp!33aF.JP]s0}|m1Fd+&N8W0@dty9c06`{A Oi%g.'G?dO$R~4 OR­ [Ã}ispm&WyīNEm>{:4 ;%x.xk).47gsen=ERԣ~^ QpltPu26]GbTԗ9\j+3J\( X&ٛf4zN[QPx@ƛ)ioBwPYF9\RRDI$Vt zQ\^<1 +,HLiS䃅rDұ+fUW/;։]K6'&&{b%~u;Xq/ӵ}%e`))뀮0'Z؃٣C:!^1 g҅ 'B7HOD K|=|!G@3d?Mendstream endobj 3977 0 obj << /Type /Page @@ -11647,23 +11572,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3988 0 obj << -/Length 3214 +/Length 3122 /Filter /FlateDecode >> stream -xڥk6 -#d VDQ!mlz]炠-Ŗm5Hr6_"%`Cr8fS4LV*maWJ0X^=1f* -7Nq̖_z/ڋ˜Ի+`J)?Oӑ3n+"|\/?2WK(Jkdկ5駫Y:~,Xqe\]^hƫ脀8#Lm*04ҡUE?P* -gD)?K2 !q,8edڣsZĀP3Qizftv,]*i?̄E~i=_DiB:?<*;l\e ͖AЇ0־2XBna7ED;mԻgzfѺ`l7J YXa6x/sh4MA@w9ߏxM?PK" Z=|y 9wyhirtr0I칺Ewwf¹ /{qTEj:kl=#-˂G1ljM -T -%u-Ġ -=39#4 1Pk{Pr5_PB3DuVޢʩ]SW+|?I+;HM Q/F`hY!Qne:HkFDyRn 5SyV^Вj 86 JW'6k)ڷZڻW4  F:!Kgqy -g9a(2~<`!Q=O2鎲lDܲHŊ.׺Irή0J=9[{Ulx}j_w h;xOŐ+vQ/ Cy~qԋ|탌b_F{?T lmm[i8:N)A3]Yo4R- s1fa-1lא#yzBX80'zc[Րw~'F(V^:9zu32KH0 MSU֒z@i, (z|\/WM83HTU Q째F~r? cHiGEX8'?nZ'hOn8Sz#3e>%l `Cqc"_.H%7&yWyǩFZbɹs -a )RdBnrdۉoosHDb[D3aQ2bc9tZ{0䪺g -e Km؁4r {]ȮP<{YSf\j^2eْn9HZ+{(@{SwF^J?0zI89e"ju9Qy ڲ\[oA?#OC ފ;#v=݈ PgPyoTBP& rJwҷ|( -BwU=)eAuZ%ߖa9/㬢ي"8ElS$ra]ۻf2y*=g`h3yYu< [ۡB ENT7U(ERrg-8~bSk8F~$dv ͕0"s#%k.Mb{d3V3^W GTJ+~ޏ솈f#/>CLGsI  y?h]1ww?uTK%!@. Vď W՜ P:NEι˒G*aJ. V$Ύjk0L5/*F[|Eܒ6ih xvP~V씏6/e{ad5S PqCt$lATbG4C E04C[q,Rj}F=|z^x;ɫ|"ʙѬ(=dQbH -"Wp쯡"@5;5iBZrۺ`$&& :`)RՒm>2จlL;[_tBCI9AC#^P\\|鸤'k;rRtf"b@߂8/Xw赣ʷ7o1STk9"ܣh*r~SRo'JNhͽ`%|0CR͹vҫ=u;:c_y4R|oQppWt|ptT(HbBDđY\xܲ\=9vj0K˵LSHn3ם]*Ѿvk{ejHrX8.pV{DOl:èfqr5C.RNZ (?E<3.xزiC`I]qGOayj!Z[TDrd|h*/ qIy8ŃS8?Cq9E2=Nswx*>ߖ'qAaMDP?`>$3őKϔr0u|q +,$ξ`7DijvYI u}8(A7 Y*Жi D&Kƣ6v#2p j0SXvniӭ޴OGo_0ZT)7VJeLl,A-WuE3%h7I6jWJt%(2$!^|~ + 9dL{܏i5m{b1 ܫx@RKs@d++Z7Wn*_G7g\TNS]uoti Fؼʺ ׸Irή0Je9[#*aH06UPqTZn4|ݒ== p\hxa@0}O!qCF0{aN L ]zSl(G~3FQWi^hR vgjQwmQmQۏd\Ixhv6fQØl[r(dHjrY FpV7ԭ%9}$$# M=\A'C7.:&@fA6lS%1<>m **)5qWu3pRq>b/Oabw ;G!BeKs +G* u]y$hKkEQםͱwϜ Y%TN +ƽ gyt\YsHnW*R;h_BZ]~J >EM"d=OrET΂4LCV.t(#pGx+Aqߋ%@b:s@Op&nIm Md-:3McVܓDT,/xZqT cez++MC~]kd& UI@ ([a]tTϵB).m5Z4 =N~Ӻɝ2[.( #:KX+ܡLb{dOҾF#gfzkE*5 +_# s3ɍuMQ |vKGsIv yV<]>x¦ΐAa⡊jĄrNx;DNw}N[ ee$aШhvrUS~yQ.{47-Ht@f-Giev*@ʱ:fZ`J3)qYB9/X#e R^Аm6+EZ.IAZz܎X)YO_7/2+f{ m7a1'Iue(|9"k-L]<v U,@Ok#Hah]'A!Ӿtt9W;-Ǽ*V $yCC$x9T Dg'.ZI)S@đ :6YY *+#0TKI%̌Dڈ;= Ty5:])OE#t'AY~rt5CNML]>1e'ćsco/ǒ&䆤jsAD7uuc!ߌ|}yQ_)5']ΓnaY+AY驏{jƧۆe8rEe/5wvYKٰ9w7WoS`042 +$K[1fA׏3GH/c =t76Ǯ__:uBQgL(b$ߊ(CiNa0Z ~׃xͱ{|B)%/KMJSV(yl7 VT|`'̓R\67w3*%!L0[qh\L}eVS[ˆ[K'k +MA+#zzĩl[^ 1y$1''| +߸c#TdPE Y`>0Q2oGP\Y 0HӋ'SO/qҐVX[Is`QA%?\ c=>z#ȏeqveI (/$fErtv'ޅHHYqp#I~qn@ ,p/eϼs_i5݌:!VQMzt'S?FriB[W$w )3Oendstream endobj 3987 0 obj << /Type /Page @@ -11693,24 +11614,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 3997 0 obj << -/Length 3339 +/Length 3326 /Filter /FlateDecode >> stream -xڥْ6}BTŐχԖƩ'<`$5Y~JrnFߘpp'~U~ն V{&lWw7?ƫ0X=uOtu{_n?7J)/כ,˽OX0&t+/߿'^oB﷏o`o_nn,QBw~ |Ug~X&NJ~7neb\YKRIT'K8b WaʒOO9u{x7ȣD׵PyHD]2 e?T]+ =Q z\o`NpEZeFU@huQ*@,V)w>⪣OXKBH3u~ue"n@#'|tjw_rPsi=rdњS}axj\ x8Y -xY+d8μ،akp2p<@Bή(χ%Fd`1H -c8Վrk*9s k۵mA@EܐAG I)Rv(1^Aa¹ۺ*Yxhņ a(j84;fM"86*sѳR^PޢP(肶Kωw{@o6U#|t|'! 힮&Q%cn[6Z5DY -_BlғLDod6ܒl;O=*Ĕv`H@Szwj`RYVgr_ c2L41½>U%!/7r}y꒡V7{=-19Z]Xg<>u/Hf$r\(]=Cr}iK -@韪-iw:y@ /N"&i"ӣ[ 0|H\z௽S Kn,O=ZċstL)h&i;Ũ p{[^$Nя'0'*0 - Dݵ^^ -ƲG @gsg"b\fH$1@ZN]*A'A3e2IZdMIo;oA6χ*Է8HюuSNt4F wlsX -0E󅡺5DLAFDqr:; -c޽bظ)cpj6dݮ^IM|=4jm$Tk6tuSswTx /\<3TB3}Qh凟oljj?sbeL2Hy#v,dݳ;,ߨoiVxȵ1`+) k\wF7J^/[-p_[%;?/GO9\SlhǑFwOE@}f8ќztmwc՜yd};&Ay}YP0FgkY` xm\3:CZ81/KB#QDZVB(.[3bM/`dQ.<^L@N-]y=MRMNë &}r8ZWNAR&4 -)n$W0Zu__"Y /!f(Ŧh 8W%MQA(GdJ;_T -ͪDLCeݞdO@>;GւRS棸`5j\vfj%%Y' 2ÂlU-L+pǩBS8E~}4נݱ_F(BH>ERRqFsJ:,e(b? "?`&KE )0&sU#B1m;Dh8|=d+Hbt`^S"ĝ)h3I0HxX e;!F\vmQʌ"/~ =P.,LYH>tm:+J +xڥk6 +ZՃz}(yl)M抶E$y7o^([N;!9Λb婟<=`y +ER~&zT/b'OO/~~Xo8dY}\0~1_{̓|ބol`7[U#W` WO0(V~b|ծ8Y gߨ( q繲B!#nwtr 4 <ƃyt1q`QW yDlumߦkxO=0y6n|.ie^fg͏< u,E"P;02뭲ܨF nk{dg'70kz$3Bx{r/FSDlDMK:Z9ݛv +#M~hv 8`jCr5'87=k\N&r8 E( H4`nֽ i[Uzzs7^2Qp:TAbodF w*;=+@`Y6ĥ܄*4 +KbgqqU%@C6.Șn +ЀHBLig"AYHp̶N(NJK>wVq* l-:ePH8Z )4W+):.\ fRqq)."WR= |mTD83]Q NX܏\@;5$eƴtU=dM3d\Rq$"k/c7 4 +QشGQY @0&C#ٵ9MCsgU83%=+Hbe݀^;΢9LM b8( di6Br(R=UGD<0ܡeH>tc:+J -I˹Lԭ"0r_9' 2訮;iM]*G-"p g\&@!ONNܟϲUV@z4ZrV M$=̲82hZB͝ذk'j]qJR٢|Q28]# -&m{"bbYu?/5`ES]萁a%H{Y4"಻iY"=lvXPLtȩ0n*~DmFhIڽgV$$:%0n%R19hcPn$lID׶(ͫrNm`%Ŵuc~04 1WL\E~ǡg}$ ]g۾;7ٙhD(>:9EbYfnaۑIQ :"/E/|Ȋ'i.?띉S #`2G0DP19PB&pfs I%KF·s#ZJ ٠:t0b#ԁCY\J*ܓO4V*M)YfqlUצEǐ0NbʯNt;5(RRWSSoЊ~gB|.}y䦓&'߶ͥk,h"ZE5~roZNRYk Nr5&ӭ{ZadjNU;YhI.riy'{DVx5g%R' M.N%8GiRiIIL]c`\lv4pJ{1.,=&S NUy &[Kp&;%!JR IE8Bp4~-O蛁١yB 0 I^O3SN48kj!k6wHqsIr6%],^塞R+A*@n֫B3!ܾj̟jrkOUg FS]myZ&?Y8t*3n'm3$3 ORz}qSn&`iF? Q6~j͟3ye\#S﮷Beh*cs=,ϑ9$Ѳ&Qwf*TqΰKtendstream +ɈjH˙OB<&{1r[YrNW1fze8Rx+G10Q*\/gY-P.n)ϦU3Km1RI# MwIr9W̊,Uc8)j(xj6w1M%$e0Zˤ8M]6P `*D.5uFTnuKA9o +b4U\ tfԋ+z.B1%Ґ2hŴʣ3auB9Zޖu伞ͷ]YM* i>3!92nRM4yM#v3- `Czn^sM$9l3Չ0~t 1)p~A0PY+! ;H8*uAޫx4,5D~B#)i+V`zcNa +ޛI3X"3Kk_A7yFw&N'/XIK/yHo +Lp4gs(@IE`|8w`RZy4 [,[;>Slk;2s]w,bƮztȝRĝq͓]O8ce[Tw[Gucat fQZUmGQ,m?)y"cG4P;& ]a_0{餴"5]Nt!ĉ+k(Nwh"޿ZE՛bCi:-%T?y:%=Bd4 h݀0+y[J@+*i]1wZNK{'fwXy"Y҆ _NrY)p-E.*Eꎦ aW& P8G9ֶm:%5) +&P:aY )G|CS'gy[SAYHz,5BF7{ǎ蹉V*2>q3:>vzAcZ~-6G oB'7^ccO2c$>R=XV/b?6m\'W P }u96bo=i5"⎊3GgfWH,SS3$M-2< }cm&]eB?A6XlZ6͋,2v] +'Bl:R +:|"M8Wie8endstream endobj 3996 0 obj << /Type /Page @@ -11739,17 +11664,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4003 0 obj << -/Length 1937 +/Length 1840 /Filter /FlateDecode >> stream -xڭXYoF~ׯ`Jі܃CjI $D[%!k)ʖ- 99q_dNE&,Qb3+Xy1b&$͓đʣ<_|H< Oӗ͟Ό1UYf4a.0e?÷s&~qt5ȓgo1 Hӗ(XJ'2y8RquF9k}=995CVq&S.3YX+ uN%6%t%*~,,[ ,|]f_xE%.ڰt6Sy~Ə~U_D_WL)󴅜x^lPv[h]q2RıJE~g}}SHHfevZM%e1>g@"F 7I^Gr".Jj.|ە~v'F\{4_jjanRNT`;7;XYHoA4BETtԀπ.iIBg9QV5O=6Y>:qRq'V:Id1*M`\ES_Uy1E8 ss;/>DzوE`P ul7oaz,kaK -K]IlVA$`Z4c\{:10|<tç !X *+9 nފ:<./H+&#V^D~jLmR}Rv8Y,zP3()Scή+CCbɤ`@$E]iۖ R(6:i1n3q|-, AK[A뵥 C uD1T1KU#Dzو>$D톴 7=^xx˜Zȱ04.(s|Z%E`iyAP2.QIftt%r8]jTO#̹\E2+ ыx|G\_rAm I% a.,:z;5$.%7=-X*܈x>٦1V,G2 pwG8rav]󚍘P%*ܞ*ߦJʺZEY=gt %% (~U ;輽ٶ4ɶf/b}ir]u+BSUzมȰ)3{i㛂 ee#,$f_x+~`On60n;PF"Wnڨѣ7a7ܷd+Tڋ뽕uhɢS)$#I!O I8.Quhk?!9 -I7$ pWCTr橂)Uk@;`1|:}{RX >siђrZw -}E 4KU֝,5jך]+A[ U @?ˌSSXK3}N*N.+dx_+endstream +xX[o6~&5'(Kފl+YJ%9^M;nF!y.߹Ѕ0ka7p%xrΦ~sU L7/?L_]Ǫ8 #g2y +ƴl80˫ Lx>{_oxyN ^M{BA >u U&[ʋz`}|kd&?SxyVJ00"NQ~#'~8WeDƩqhNq:l4֡Sg?* 5N|BKfXIQ8Ix 8^fy/=-YtBHXJ>nB(fjV)`8+ñi b4 z㌜̒5<j2aM7;1 +D"\T z3Sp5gQE}*uSWir ,p%kD6pi+bE 7#O ,u`,\x:ypYymzAU&{%HVցq-q2kMӓL֊Nm0dx* o.'?7}5!1! +,oC P+6bJW7@oxmKkd)Hst , Lz?eNtYq%|n 1%c2k5fOI8Eç<$&7$%t%\LJ~ 1h:M +İhmSaWb+nP + +$;[%(5I5OZJ[[0IǘB +&UR u]r}Z<L]XhkF[.-6wL~I$zUm$^̕5b,]v8Jf/!.@E$ t5C?|l2K_\ؑ~p>%G#LD&9wTd$=7nZH?RoQ2Fk4JK,D8%(?mh.,9IRyݫϒʹb3N8iv+u=sp׊a0MXequTm <}6GvĀ$y aq-سn{7u40κ$avr,:wxh_ ̏ 궫6%:edυ"N_̮< t (<)C W6 +61PW2뉏][jA@yoE꤅ô{5",aVPd8𼿾H a./f&%Qtnzw9nIDUIOuc1-)/LjCAh kY-z޶αKfEIgC~@$rӍTh_?ÙwΖ'l݃x_Eeӱendstream endobj 4002 0 obj << /Type /Page @@ -11792,29 +11721,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4011 0 obj << -/Length 3253 -/Filter /FlateDecode ->> -stream -xڥے۶_y -5I!Sq$zf7ㇶXХH޿$J$3".98o"o4tyYf{l`W@$$䭛T%,q$La>zAE7* -Lt{] -Sp;,TpFZ\<"*~q,'ˁF7ͭ_aI}luXO\6ZA>PQܱƲmMK[3|;5A4^6l3K<4lƣ 0:~r_Wt$R1)C3C x&M`9MOd~0@8jTȤ^Uexid[\{@*V$cm/LP)\%2~: ְxNt DAxn eyv -\_S ϋ$IOf4[ț -O{ _֘'/ -Pek[BP̄cp : FID_ g͈o(Jb%>FAF$ -MoI%I2M`x,SXp!7iPSQRu P"5i%QD!X,QY4 F`(6jD6>|EJYvxӘE3Եc#~8M$\deX\&Ⰸ 9Q0֐)8I )R?x$;>o>~SE,LTi_AOxwUc=XJ E+(3 b|h+w 'X29 -lnQ_$NüP"@3֕#J(zo}ڷN|gvo*x'ܷJaxۛ,qśT71rD<2k]UP`:6*,k+2.@յӠH(L@ h{1҄ygKVK R= u7լ%N 4㔛lA5n!2܅;s]\aIq|yg9Ǔ;DR2zX5 n,Qsw)5t" -poA"O Dq":?#GA^h#pŗjfnp;̪ Ol㕡GWpVU o WW\榒g=/G1MTtsQ\Q)Zĩ zôGGNJWݺZ჋f_xWTVOU\H$݉9Df+.r6-EZ,lsIX4?ݐ,&c)*W^egZ#ϑ5kXQgXy*ۙ Lu%Z9)mr]K##HxZ̻) bQHq1Aϋk:Bfn;D%OLuB,<endstream +/Length 3156 +/Filter /FlateDecode +>> +stream +x]o6}ETx%R_=޶q{`dE|l)RR`!9|]]2ԫ,Oëj#?#N2ch ^T-8QReZUHoׯ|P +i[\o~ :I}s0vZY^,N+m* +x\\4 ~=~GA MVAe_Jֶ}%%#/U<\5^oBmG!aҩƳx8'Pcۮ7pppgE&u"ND4U% ?&Fh$Ⱦ愧 g~=.Jpy0itJ*Ckѧ` deMN4mOx/ ˣ=pW: +ya8鉂%)z1&v͌#v .A_aNyVvHnD'65Ѿ(tT4+դ۲; Î0GӒZ$GIiZMw|gtA@0Jv'BC"d%y;o()O3 uptJ w }8Sꑎq@&qĆa\l3fkZvO]O858YCm? ,]/rǨ QԼg2-2O3K3&ַQGxn09 ?hFL7H I+3~Ջ|0p0;[J)|覊^l8oCg'GĮ4WU11uɺB>|G V^Vٱ@#,U +S3-uv#{FxX=g;-;W24/q|rdD˜#"S^r}m$U";ߡI Sj}Mx5|+z$.`6\TGvj :TfT~2Bv;oFcٔ( a^wR|W1 +[8©l|A31xXbR$\,w[vk 4Aٻwsr?[-Kqe7IX޷-4X#b[nRg_":3JGTVgv1 Tq_©__,/a(z^" "F*2ԧUSӤTPTVdT7 lqLi$%W4}6ЃyKFQ|5]4osBz/aO=ĦVrqѿ OqqR%8}+˛><Jor υS:ۆw nF y,HI? fcM#쎿x~ mz^JB_NQw8Ma*K+@fSd{rEʐG99jK]1N zƫJ.AsW +9$&ZP%Qz_2Ef@2c=NK̊vk01"L2,-.!5=+e艡԰ݤ>cƴ5+1UVt8b(^ y(լTp8 L2`sQfULcI&; ǃ'Ka.Xq 3I퓻'4dhb3sRoJ 2*QcjFzb5#g']d\33~5KQَNrݒV qػѢvfR]&>{㋕J *DČ+H] +ŊDnT>}Lg`z'S7hT9sH灡˚__zPrM@b-VCi$.Rp\ᙵ>臤 l$Ògs|(2GBRuZ=h3)\A)J Tw+W0**aPDU%jIߖuIR",;'-c^~ڋ/*ݑscd[p[tV; wPOr he~M6 Vm^xv 2J]ͭzf_`m@FBDصXuキ!W:aMbdOC<!`}Tn9^@al qw ]AkcEr̙m %}r|VN%:>> M-`t]2F=ÇT` +2"dt+E3 DZOW@&*}~{64JXѣZ +ͭpְݒkz_gI 㳚$PRGrR> endobj 4016 0 obj << -/Length 3702 -/Filter /FlateDecode ->> -stream -xڭv6_ΩhonI6q6M67/߹$J~ !5 e|fk5+Wgf~9SI4S?Γwͯo~/^iyʻzo l}ϛX"H fK y6{v<΢Xqߜ}>sьWM7 -?LYs:vlO(Zn]< B_pH^CΔ8kP*7m+\im@"nWPq H} C!Ū%Y*p8 g]u] }G5rhfndrݮy%91.~=f-cxDBbw+9{5 8CAY4 4VEPu%e XԜFƕ+*^lf%-.k$G_l%z,S ^'~hq"[ -ìX@pyHo30!l*_20 hWE߱,C^qDTSWʧOZ*?܎[^]WusˌOtHr$~Y QF%<H}`n%+\uSٞ"^WO ˭9 -q V F=aIc²`bD;,2 YG҃AΕ>!r ;}upM[F{I14OF<xrjCÓ&yw\%l ,~|vh| k=SPcikލuǂ, gc][N+ />F -q\SWt{jJbtCgw~ ׆ԵͷZC!!y Aa -i6Er+FץPZE-![RPN( .̹Tgj)^S ƫiyKj0@Jo@ kVp; rvá rxckh`|Kde |=1)B,s}đ)db {2d&G:Wz:B(~ -wŧ.6FAK!z6$<($ ml춷n8h. -1+F*h. ph-kqf\ޟ+BrA(9zy2F0DƝefnL1@5oRr< 506EQ𴚍0ǵL`^QSo6bfW+ N>Y)lv4ɼ/3X0aPѢGz.@հQ *D)4j&aHP=,S!ٲͤ uC B!Mqs@-ڍjq('1²xmfԜg$%oG$͒EЊ`on `@%( jloGȗu;zKx -u7?VDX/G9 -SQ: eitzE/On(yߔf}Fa&LK::mxoI{<ۋߴ7nkد s.G M34ܒ:5WsRXx gbn&xs8&)MBvD2LL),V:.41l`+?K]{ -~8}61D׉Mc`Rֺ^9jW)LU;m";1[KS:Xmw%^sTu_pr,pƐ VVJ/5%ԙyW醐vہW ǣ؇ pc/\ 1QS O[@N8#F?R>Sg5n _WyY,w 18۴98c7_xRj5[\;Vܱ;(3B) q/f.uII`20zI]A<IYkc(3ƸYU-(gVHo"u)h#?׫s_Y9*)P*&nk=c12HSag"X|8|XsI7kWr+ [XE#|QiH̝{[$X#ʂ㜼A"Z iԊ*ٗ2@!8-x Fzc…Ma`=U0\sVUg*[{ٗ7#? -LeApc}x_̍-",*uCXlq i2k~$;d|8@Q*I|62..Sqp*jE H-pXU?MXyNes -"k~*D̍'8^e3f|FWj1ӧc?6xTn \8LE> +stream +xZYsF~ׯۂU!țb9n%y4kq @LU񖪄9{zzz_d"7E=ә/#EzI]?ܞD ss/_ѐͯΫ/ݾ~\arsv;W7jle9o,dUFI}9wo~90OP\?۳(8 +^}8}тgjX,|08Ofs4=Ify@Kf> nVi}7odr,g$n#ŗzQ9)j88ZLQad5)OiN3;UQ@~G-?8a0m3-q.2#j p/[ho-W{JN`^`+];$xcR^w~xFL<$]?M6blDa펶#H?nRpEg`B˶Fb)6jתVrH^G> pnsyEغ!#+FFH"~U==ORds=`==9 +䮩>k!J*\ F]g8Bpі "0!^dIrzƫt}j\}1! JG~l H 8r +̃Kɛ@Qh' <qjN4s! cu,#xHX@.Y\mIw{z6R,\'ԁ_1!d +%Ihg߉.FF޾* Hc8b<΋]-j6<֚^o슗MBEԛ*3}9a _xY {g $ +( ]p%2ߗaAjG70NsLfIn87z/~]e\4Ta'eXKT`Ϳ?=r+b q݊7ɡЦ 1:絢XEwbb/r(K)71"bF_svm)(şqWM$혜miodSSD-/= lG*xqeaof7~s-뭚ܛ\ws׏'l(% p|uqȦ2I,-PHg ƌyw|ˋ"MTs#*"_DwleI1mP G}`̌/ҍ&#~B+ ]WqwAtK $w.Q`264*1Wٜ9:CpUjD_XZN}RiI:)3<xdq=MT5);ϢxǦ!Yn*yhĘ +d<:[$nf|v\2' \j +YeA'p$rÖ3fXq,ͤ ރw5đtwvYZj==j]T%M7I:\I##kw0 'V[5EnIth y̢BJ6q3 r/N]?Ks/:04zwO E2x%ބʠo|+7c X ɍJ$fpB5-?Zwa-L +0jhOW}|\ +n[`bݏ@VQrg5m9*nX7{1CkRW/%pS?1}B3>A@Qb%hi 3j͆ CZX=#{ЉJ"Y;yҘClӴ9(afIb({T,5S0"&`}Ggɇ2vyEsnǜyg09WʾdJ$c]V YES pOeO,[ J,sOq| +#Fxx~WG1{endstream endobj 4015 0 obj << /Type /Page @@ -11905,28 +11825,34 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4023 0 obj << -/Length 3625 -/Filter /FlateDecode ->> -stream -xڥZY8~_ᷕXx['=$M,fAmmMd#uQmٽ HK"dXAdzų̆giVdz&=B?nbX£yQG~=̓G͓?ouZ6/4 ~ۏ|߾Ut?1k yl& -u͞= -3QS5* U -/: -Lı -u@(ֆIľPbIJQ/66:_IK=6Guj 2"|r8jWx}Pt%7 I4gVV<%@da$GS˃gM߾]TjBCme dޢ(D91Tؾ:qʲ}|IǣY;"X)gx1R3&q2#rz;Ԑ55f/!8)(L9B0%_\`z#KmX+v"^NFn xg8Z8`UpaYcG/128wq.J4f%eJ9Zub\FE01yz'$ S/jЍc(K0CQ)sRV܀+aٟ804xﴁqc65YwM*>&anҙ.јW?c -|>`zn{@jvU;s)hlǥC 髢]:IA3Bq뚛F]SZIg9[qOTFה-,,T ]|Н l'{3D[(vLc?$uzi2Q+h$(n:2sqa(3 w IU'f$l99Xi1M#sS]۱e)/CiZ"cǮ)`a,x_Jn,]-R J+ -4Uf*2j* _A!}OěXc +u|A_-ܲDϴ:&HnucWĄIjG3X* HFKF,"oф|A>[n状Pu]\N!B^/)\^);W -A\ AgىB -EG{c(Fb+C^ǵ8Nכ{)JD"Ф\"D5\[ItIx}"g4K `PK[m]]6j{d\ "`٨ x]0Sy¾/we_SBfI4uF2Q. ]j@90Ѐk$|oeE>RQ쑥i]rSY[699CϔM9ܺj[S(KN.u:\.عΎ^į0?xOn-G[OsyXݸ~Ë@h_-/6;^߻Y_\,0#vWhyX(/p+b,^=P(Bٮi -dgb4Qeېeẩ|j}C޾s&Yp1J QG,HL894 (F;?P;PEsmZn!o[<ľϊ.Qs%ݒYS}l.] "%`ՎM\io18~W׷Vy*i̜5~b$=ŋS5\E kpjOY"A\+ưޯ1`&GM5r"m/SU_fAnf7.'nS)7%zEB)z/8">8{4~7MN47@Df)i{f٘ +cX ?WGwsNޮt_L١ҵB&ϊ[e)0ɭ?6 @`k}>^xب/PQn?;ŷHTn঒d=_eǘ,̳ aU{1A}0O Mendstream +/Length 3421 +/Filter /FlateDecode +>> +stream +xZKsFW` 1d+V(R[$(" %o=(BޭaR0p_8[&~lI`vO=_J̌ ]{jfaA>2?o4_q%|eKy}~Qw(}GK껻r 4z_k0K +8_aW&Z>_"}f&&v0QG_.M16NmA=DD>]h4۬ZǬh2"$V|g ly }ec;m!dyy_pa#TTq3%5Tubj,Q3&+mEI&W 0 +%I8=>J{JKgZ|I|x9]+̠vsj]tc uR:k,ˮql}g:V;RXL\o7+gG1{ ; +;ԩK&;:g:C]ק<=m>MT몕W[JxG> TW1.O# %F.4jiYL?,QBxH3?3 =Ná }g#8$s (2lȢ.Iw;wBʔN +POy2i#H[W5tt ֥rzhni,C(߼~].Z{u#ߊ~m)oSP|/独&~:(3AγUucKu7р40qz Hb"wۚթJL?ϗ@>똪y3Ad:f +6h>n98h +?\#WWjGSttfAU@?qdñ//@D~`?Nr?I%Q#%!Ϟ͓$w~5d, ]5|%3~rHdf#͎wTfNA>짱)hu8!Yc9!wΟ!|]j˃+wR8H٥Zh; 4nO5XЕTkjyBZ JӠ^76H8S)[J< o] +h<~l`'e3&:N,w02N*Ź3eL&FkK ENv,ao_\.EK}c{G}vFH <͢)7a}U$N3𞙠|(R,B'1E%Jkfl +?[x?8"]TdG9Q0Ftz$r6XN+>tAw%]X8]"ÁZ>h?)NJ+>TMp +-!J/A#n!0*QqtB.P Ź4r/,sw趒'Lݮn_S_hNV >Uj$YMSjt\n-uΥ4ad_:;"΅C4"- +?f0! 1GUq̣; +(h2 &#ӕJI0 +nҙ-wS9퇶wG/|$ɳ!/-lُY6R0 +ۍ8Gf[ +qCݳښVжZ쐁>Ms)u~5۱0{[l%{l_hyX]Rf*J9b+Tzy繀VܟO]1 O;9o6Z#?\kf9uyu-nuuGW͋c|#ȋBgr{^uI9 3"ck4ws%#? /-2ly˹]Իɋzi*=ݽՌ +t V6x}b"~x.mʽ#W)NL$bMD.baY|USy.[{p+'եk>2M +$J**K}.#3+m$H &>)q<_zm( +y#زs^ W=AcG5 *܎MC(VEݐ W33B%# x_/dxm9 (~gC]"IB/:GeյxFvՃn'"˯Qا_9#y!M?j4\@y}Ij$#<rAʐ/b8W2z:󷐫rNnL䧱;v/;Z&x u@endstream endobj 4022 0 obj << /Type /Page @@ -11964,26 +11890,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4031 0 obj << -/Length 3884 -/Filter /FlateDecode ->> -stream -xڭZs6_R3 {r޵&՞CHmN(R!8oBewn2@`,..#.4tyYju^D %K!Yz4/,TQXF´.7?_bp"P_>rbxq|m?;<&׋?.7QQr{:L-Xܖ\rB.XނC_&";Xva+!ku$ʂbP34jQIaL(- &@>-W,iv o -}GchT-|d\WfFEDMhF*~%Eܓ*زF _KN 3rZ%MnZ$\4 kҊn`epHA>?ȥ'.AT?M>-81iGPc_&4)RVUePc1ip味=Lw|z݅!u{dG@  oN*ݍ|_=åJi.:);b@ 8`ρAE q&| wd(0(ihѴ.{gN{ZR{l㕿- t| AmHf1HbdخvUwxޠ!0fIQl~[ &0j08R`;[$<ؾ _k(1zPK@03R9`h -Ԅu2wTe\'EpXYFQEGiOQK: ܎ڡγ5p΀#O0PéCn -zFjuٍ\y&(: m"8__|@  xj$oJEӂAy{f>_Q;d2 -|Sdl\\Q7@~-[>k qvt#%A:Tjrqvؑ 'an;8<%V):uRsTOEԓtw{uoK胶*YNMF+QY4!J%Zp8 ׮ j|⊦3$TM]qBe#9nv!d ixk™\<%X]ˤh - _*z+АXZ@A'7ҿ_wMrMlNX4$ ֑/83a'n}Odd?~[vOؙm?5&q:i7R/>Ɣ4 -^5/,`6ZuL #K< -9=]V2'%Y6B'4` #9+Ѯla8Qs8AgLޗ\wϴ| tsxp(ZG4M'τ$ 'UbLﾪAG66Du"Б/f+ M_x!X]Գi]Kh8맱U\Yqpkd:J:SOv.ôHncGZՁk=s/(;0q{KRw3zP'$8^1p`rƅzC2+dڄV8GKǛAa䓗qNj4-P9v TB:: AMDJkZA7/(o;?TFdN?6KF|CDG;$0:#Ud_$lʚa;8PxǥL8ea7  -+>07὞Ibf##G<U/PLe'WKR&u4߼zyݍtjxa,C*Ui<OzgmMl _w4r& - Hm=Ik)$,ϙvŠUޅdoI-FʙN;Z@i 2LvMfeMuqœLѽ#DrQ$qELA#TR.hIGq]-ll&?8s7ᩞN0j prp,s9_;/Kc\=iGE.l9fP[v$= "+Z75WsƚqxNgC<)I9xI҃%#a# XI D -= 7-zH3ȯbGbu;w 0]auG.8x0A}7Amʢ@*Lu'k4VpeܹԣdZH6ߚ޸T't4:{,QSS ]?,I=ab0NuL ?Y-NTu*a]yuiBe⣛TK ّ7ҋ,;>Rflp6Pvd/+nPŔ -`3BQ†2]BENFKg}QS T]k`z$fS/{'λ~&=]?CD /_m7ڧ j0 MßR_PYF17kn 1w.I)CLIe 3N!=KJ#|>;LL޹Ьk;`0&I0ISqF{ĉg)f[o Koa&qV|?8w$_:z*;,5wpbۡRLv!9ːq(X,gTߟpR3]"gED,\tj3MV /j+v`_Fc^vkK]f'4aH$2 ))i)3yXzW$.Z¾t; T#3̾5nGMl5eolbsQmJTstΖqOvOaI,yyeא$ §aendstream +/Length 3777 +/Filter /FlateDecode +>> +stream +xZKsFWJb+{%ƩF!aHB$xhY~5=dUĠuu?u~iqUp^)$1Vy?}?gbyt2"/4ͼ 彿}w K.⏧>M[j_'? Lʁq:_jfUK&~B! +,ny*YzSn0=,Z{x7Ah٩N*PY~bH+W&MҬ1΂2PO2L1nڔ‹S둽`h4{ul0RIz n@,q3 |}9Iza"@ Q, '9!i oJEӀAݎ`/v0Y>OShOlT\y~'k>64\Av+֓n$H'R ʐD&gKa:R1"KYU̾b3кe$ס`ZSإ\d-Շ{:VNm;NEz/P%RI!X +.aпr UkIrot{r!l!0g yX4al&.В$-b0+²)P uE JtFڷͼ9x,C?]W{"adX4$2Jڭǎ<;2KPÆݓDJ@IX605|ao,!+r020cYшggl#0פTy)ϥ"p8RL49zX&`ox6JxKI;̊ɐX gM^BI`*a^xXj DJɂk6>ƔZQN+4 +\Ut+ywHrڴViLt[É| +noOh۰eGa, +QlOxJ+> ?N5G-N/8t}}93avOEHqjᙐ +{WM/JՃD#&H:Y}ЅĦ+~IGIg*ďD.{;~c_S'}gCW"7v7dU0 zAi9%o*& +H}0Bmā3=?y1F4|c1끆 ^\25ï \aM]qޝ$5|=9ƒcwK Uv|V'mob`?f#n,/Ґ_`FW1<#5vG.\#Otwm]6=ʢ.*L%FGS4H)5~tЍJ_>;LQ3xqM@._ v,ص'2$%j-rC'S,E.a~ełYG̲l]=XYaĹ0d+c Mo rSJ7r?t0e endstream endobj 4030 0 obj << /Type /Page @@ -12006,23 +11936,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4036 0 obj << -/Length 3355 +/Length 3108 /Filter /FlateDecode >> stream -xrF]_˂U&L>(+eĔR& kʲ뷯At~-9zf{ȷO(}N3g\ Ȭ;d;yun~}?i-ߞ0O]-_NgCslOUduyBIWkD9̱uM^nOgm/sބW#Ovr'ہ7[*iYUsPh}΀ ;U6KzJH1p4Fr" ~z+st52SέUaL?㟪OxU{VE,EU`|mdd<Y@[әRZOy kH*/qA<@ -34jd#5ik(wlgL*敠JIJg@ߢ"UYWt)ӄ2xjn ](etEmiY>A䒄Fdbׄ~pX}IO# fL3 xuEf&eoao{p^h,~Xח(YdBQ.J2RAkk ]ssIʀ`D`&yH i`A#s򾳈@ȱyP`j &ؕ-BRƿ ds25T>&)D죔,X;U))@!aC, =pf)0#aV / {!PŠj *1Bosx.O` UXlyerWh]H.Q78X/E 7vZQ i%ڏb^%v`AFw wE;fؗbƾ0*h ]o :?"M4R!}F%oE\ЅHr|^Rd+}2[5 uFY &~+L&=1/ҋݦ@Kv56a/5vKv &x$M#٘o$2wSUv]cA1e*c9np8נU-W; Vxv6;#1"C;wdUHmŌ(mH*{oǜL>Ml/ 08Y -0 }g92Is+#PKrC1zpyO`=eJ7&8w]8_Â;nQ0 :'cELl!J:f% [{Qnai B 1l.'ǐc oZ"]z. i-O,( 0G_G2w`s 屯E T]K|jn>Cq0⮠%#0j5:m)r#ʪ=Y\-܎Wo2XKHUXeD3tȪr!<a1r.657K!{,i%՜W̐bu^ -K8Oj5C[yttpDD.Hdz  -jB(n2(3+.F<F (Cׁry`d5r -q,nݵFv8ue@{e*@8 ~D QUldNW2! ްd dr`J{30 >K`]OK#L~qjIίq6,';d]'s~z6\]sb18f:₰E&R{ -u(]]ɲ0E1Le_І"2 3&K9G^ial *WP‰ce&Yf9*ۋ9ڭ?QNvUlڈ'9J}y# sSNXPZgU ͥbKLDKk|WbN^^c>pzE㢄1i|z:!).q C8P=RhL尖Uu /$QmBM`ee)_uzT[66w#\0@9B# *E\^`J5ɍ'a7Y е -Q߷l`non_c5:MMiI (lHmIjzRYz1s )csd^=L&T%ݓBjHT׼ӭ?"=S%t?1! sr7k.$AhWWsC OwGh z(-u'J$X@)Y5 ]&w w2ցWĿ: 6~Ď $y'8MLX4R{Q5C>ODtN l/?QվQyojc\+C&_vj _c_!Sendstream +xko/۹8T[$i=ԑ_y-Mswvvwfv^;+{f= =rYڳ̚e0 kLpٖYlH(gnp]"B6\2r ݮu7wB_Wߟ]-|p,?L7 +gOжL;f3幦\ggV15Y\-홮eس nZ`!  վH #Nd8Ԧ cE@f`QM +e釪~sρ5w="W)EɾuwLI^"# +LGY d'0hu<_,[پ( @^6 +4"*E@Kr-Rp[ĈH&/{NAkDtd{h(Fk* Q@{#i{<́+敐ƉKkߺ"ʷUYg@c ҘR2fd`KmڈHc˳ J-3#7}>gY]#t*@3w{d&Udj (g\dq^9@oT؟$4ŁkxקJ(ydm ]d%%A#wmcc|fDp"0mj2C`ej#X$Ho|,B]_1yŃW BB:)2p[( i!u|A̘dhl|(BrHqHRf;-g%dp'К@ټ3<,{T7VUlЈ }~AEe04yĎDǺN0z*kdžڠwq@9 Bo1qKD p'<+I0kdBS޴0F>ЧH}^Rf1``GS&E?:#eOf0FbV W)ђUMx,00ϡ#l7$gSNYj: w,ퟸ^dz?y/#ӆ:4˂u!َoZ]۶ NN6-QoDi?7[{vUI* Ձ\ф7VN0ly\!3!/8ç~cu,LXrsIib*I؜]T"yZbTp#e4E xIQ [!Rf1xܡ |>n=%b/˃`]r|tJbѺ2\JUWF +]7]R8:6= Y~GEjJ~$WR ^.?( qJ'rI֜a4q(ty[bp{."%Z DweQ([>>ED])n4t|.]`y/g`| +ǚBcq$@K?-Qާc4 2066C;ds;LP%NtA +$/[].o v"-2qEU|v ܗẦ #hbz{}WK]UEsHK }E/ !e^8rp 1jcUžSLs鱿; #ĩ 77ug1Z5 k:oIoQdFO.οH`X `Cl6siB&CӷϪ;]Qe +{ʳu]:tK*cڰIwsc!R;񶋐0+Vp9 2(P ׹tF];OdTJIV1U'7q!|WFD=..z׸:CV em> # '|ΨÐ*rAR#DbF/甫e'pGZeL\\^$Z'sC߄}=7_rMG/ЫgnFjUP9=%:3I7h\2L$E~}]Rۣ E˩yJdxEtUp#e9Oئa- niW-ڎ~)@{)4gLs춍/k*= LoH9)v q#լu6iz!_Te> endobj 4044 0 obj << -/Length 3078 -/Filter /FlateDecode ->> -stream -xڥ]s6ݿBLE܃c'M:C%^(Q%);_H&ө,,֮&(6Y9f+X,8?5=7CO'\}s" CGEw\|f|;y;7?{߳0`Cdys$=s$mΔ]BWgwgi)yU` AqpߍSP/]^_WzfPay(gQNUA ]qC+@o 7f= nQ]{]fQ\ꄌ<^Ae::K"J ԬZ_iS D{S0G_gEd5-v !l=Hf1`Ɓ  MxTES%axM Ƚ-4I[sHZ*O ; hNNw}.hcۭ˖ -lojԜ5EWk#Hq;(2wqf4Td%:`TFf)۫K-0l=˄C X URlYnYcaXg(ea9jH2x$w]BEE+^}UqEBaB7FY+[ȔƦ*>RK1S*w_ޝ_~p3)袱KE^GFpk"SBE z@NΛꔆ}%WH;T.jRUkC.@^TIRe -=ΛzZ# zY:{掑棪9G,lf tjDwyfŭ0&T}5Z-l0h9 ˪0{!@ai gOW -P j2P??]v#TQ[f`x\u}T͎3"vDe8y=(编5%Id=.e(Y*o{2 c:%3hxDKTj^l"\yU_P.5L kA^b^:@+T@) =_Ae<ė:?2(Na%RUY|_c6EʣK et7;_IC9RVc,x(Ha`US| ']/H(? f E7Due= ^Q{Z SC,,-G*bX_;b$kqT˧rxȔ*aXͽS}R"M%/]jXTn rF$⃡|K1&r.*t뮱l%.H7;gC榊l]Ab ^b3ѹZ1"ÁvO* gw> +stream +xZIs۸WHUE4p;29@$-"zEJtrJn;s;Yv໳tsV0 +gl' pP\Ndv@$g}+(k}:µp[s/?οq~B*qo'8 Dı$=A۱$mNTہ_ܝsjƫ&Z(/cDZ\;vchN +"Uβ -*B(Kc;c{l +4WEA\P !ڵ9&izkM"P\q[;HIKy8xr O`1$Uoj;KvUj*O8q}7$>$~ ^nE "R>38Z\t4u;*DXw-ANnEZc;#겠-94ZDKQWi@w 4:}B>N&^`lP,ZuD]-ۉխ5vX 섏yr@a8N ɨSJ [7D?+k8WnA 809}BP_ǎHQr g880}c=2e8P~gk탭AU?o.ZX?ҝr|Dև\ZU bx#3TL{FVȳ_6x69P3n̄D#6\f)snI] "| Dϒ}B>oRw$t**Z1yHSaG9i ѱ᩻8/m?R%V+ ~RQ9HH.K0R 9-wޜ_G4mޘ#$( p&xa4~C/`[Rdv!7(>=3iP- MIFkbVYH4w4}^3@po'pȄM[q ؽc%l5Ä%O.y"O0Cya 3<7IK웛!re[b7 Rm'Q:Vϋ -2908O!([NFH!"M"qlCuFuvE6\}mXrW4vEF-|cسP0pΡHs^QnKSPO"D$ǮTc^ `U-UI?8tqn?;KC2䇝lrǮ9ʦ9*-S&}SQWsXjir^i˸R82x!$}Gb\{Vt8Μ;Nb?نcs4)qc b6?t|ء펏O1 +jb#0&b +0 *wsĉh+ )Ȗۑ<eaRl6Lsx6jק)tnlou{@攟pR|$abW)Ǫ%aQ-E1 hؑtP:/z"^Y& ,]cGFL Cb5rhn>/,pY ]?^Sǧ1iǻy0l {:F]lrqvCdG[SFVO1HE<@l(B)vT-Z^ߟ')Չ jr0_6pFѵ*!WuʏHmɝþhbum.?>'Ƞ1!,]o+ O +@4י񶌝I +wbb^;l+nH)}^ } +$,]s?lknd480r1<?˛eTb$C/!ؔ 5'p rĂ]o8 4cgGɏ'=Rin(М{*M  ETn`T`zG^ IgE-af s"U.vX}<̈́`F- +lNj8(sfOOѫ#u;oKv'Kj8dxpb&{9 ^U2#Kyn +En&caի#>Cn>ωlJq3RQw{ٝ잯'v#򀅗kUY/u+oz[b\JȲvnY-1dsszC⫳۫3C IFy(I뢒=RwFk^eS" u *\5l+Q|}ʤ_fz<}fYeKY##wq!CDv]JC՝|hd0`Y$uhMԎ˽@6Zy9> endobj 4052 0 obj << -/Length 799 +/Length 780 /Filter /FlateDecode >> stream -xڥVQo0~W2-11[WmmeJ@Il,~6 F"}gFvN\=;),`/i G8 Skep#v(t68:^C'8vS/onjt?çu9Bh TX'`\ZE]X>.փsW-ڪ/^C0D=4v}!wU)- 4F"z|Z6ȤS (Ic3\ !+dؘYz(J.Y;mӝXxMxtP0*LY UTփ2cDCSR8Ey\梅5I/F-~Պ2mLnN%Glp# Yep<1[LҧW,[=ݍ7T+a2JB^/-iRD_2˙fY -ZmSVW^cE d@/ TuF4MN̲QZ7a٪SywO#40bK~ K7#XTȞLN|&FlnR3Wݱ%ylytJyk3 H JhTlTxg#Kc]#zZHO6GDiD5ňKFU=n I+8!G?]ݲgwt͂ڬnW|jumނЍN5Hu -E?;uendstream +xڥVo0~eZ +[Wmiej@IЌڦY`$4EwaۄgA8kIn@s!%_ [k@p+12LFl^vh; +pp~=?NM峡etFC'\>ήY˝o*#4S ʀBs-Qd\=ƝsK%ʪ'*˕ۡ|C6:.y; @T * +Vn$8X 9J +M="# ^jVz߮I#v_z:~" ۬J*|MYq AbPunϚR4 ,:h~!]S8oX(b/=JGgsD57jKMW3b>xŲv=7Uzr8A U;Q%͵R*Hغbb×z9>iYN -Xcʲ  V@"BɈz3izFV(3 D˒Vh݄e2Ǹᳯ#C8[FhKwO(=IQ'UOZ$OKKqʖS%.[I(b%+Yygюy?c=mzf(%H ײGxpƻyFbueK?zE ܘSqBh~" jNwN koTf틀5 +/V@^D;˂瀉[f] x.Pjendstream endobj 4051 0 obj << /Type /Page @@ -12150,20 +12091,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4056 0 obj << -/Length 2698 +/Length 2543 /Filter /FlateDecode >> stream -xڥks۸91ăv67&tnrK EH>w =6q,}I'i*aWb,yz.yO< -<,V_]\4)84 ";Lg"@G2 >N.~zXJ!_}MVWQl (y>\XVv^]}@wW$) $8$"$ZthWtxL*!'8N4ӃR9" D& edۣzC:D'Ή#q1 0 -FW7b2oLw&fE0$Y("A.LIOg͓mH/¼c(% -牱0@UO:yȃwOtF8ufg9 *~TFH$ۧSK]Yb[q,aSq"L-q*aksQcCi8 -+4UǑlfTzbi(2,UDif2^SZl6jMؓ!>ڳ1]_؃bke%|xvB40LʾljT{ nL L皡%(}2!*~xA0zұc찣eB3gCly f[$SْO|u0=z)2$aِnUlϩ -(6!/Z)X=X(E8< ̃"cEo0dv;cd{&{rI1]8*,t 0Q1#+F)& 4(bD_>Q3[fyo.l{VәaG|F=5B ;&-UZRQ~HH,M3f;6M[hU:@0׆5%h ~DzDxCa#v*3H/+EJVFy'ԺO9^rUٽޣ0tnzso!S6ɗ=T_PCgu2=Nrw=t)[4iH_Fy>fM=]pTemǃ+^z4)V/uѻ}_mqۧ;."}t8<ZxسarIBcgi߷Cc~h_1˪,j%P4X@%[!ZSMȃCڤT(n@4ᠧis9-]ǰ;۷S"޴C7t$/] .tzYV^;4`4Ǐ*+Z#i\/eq Cg.Z0Q۹C*aUJ'|-Q&uF,PAg7^ϑPι3֭pi_s9Sڵ8p673捣ylj, ZL3{9mMO/MpN[P΢dlƜ|]8Me,L Wq6LHxxBQ -R㋹9_d$ӶFŶFZ Q]OU$nX  82ax8KL)`nZ<=kaƂt!]D6\q( p{ȓ0OV^cR .'I\f^i`l/ݸP>B5#~MIJhAS"7(ח-UXɻC59R${2-sqaytB =p[$;E0> %^PpD qPmz"j;  uL(QX[1TN؎+]K%_箱Xюؠ`zK:B0JŐpX? .~ [aeBƐjC,v -Ul6{S}%o ~9į5膸&8p쯼tiwUc~ƛyv2'v̠tvp0 ФuHendstream +xYKs8WTՈ!nXɬUԟ8Qs_չǞ&P!~N%faULfky,7<zgE>+oz-A l4&85ܨ9]+V ׭&FB&X^Փ~zgb x0@zUqX+9a$P49qT/θtZK:zc͚=ZE"5P^VPri|pG Mέul'9Z|qEÈ5}."rxHu],5n5$w j":y)>_)wUx'z8a0fSndlSkzǶ*KwfZt%M~Єҽ>CH;P뱕&C+McۨWpFv(B!71Z5pˬ"НfdAJ!u1!06LJGgl{ C=;r2=dik7 ڕBO(hSi Id#/|w=M+RZ6_ժܯnC6ر==א4ؿCјBˊGz20+x-PYsH, B7x13Vo4'Hs\95ZWu5uz6 +Nsۺw*^IMCs] \1F#yB uky8w;$0GT+ƴ=?MIa s)<O6H/X1DIq vbu)amEA(+,ɊX.&7~aej#'@T ȺS6\T>k!.4bD$ s'ƮXVfbza1C)//1o4]"KP+_RB~Gaɮ>g5yj.>.%o1œcg82p|a}-m' H@A?gu۾\3|;\jJFIi$ac\Yʢҩ J59Y;:Xe2iq=}G!&I*?ZNSMDc[yγ49*>w2DFKfc廉([m:+@QS]P|mc,s(>"7U[(P$!gjxD 6y7 <4GAm>Dq%_\ |7F-e^95{$ߌQAi8n䕇 +_zN!mk*܋WVE'D VsKL|$|0qlGX@Gٴeވ:NwHDk(l%3ӿQYsփԧ_ 2 +S-P +/y#ls> O,?ixN-<77x)=ҫdٔezc*AYevꪬMu{"7SY# +֞Oڳm??[bң,]R0f_6e}˯#zWsȤl8:}_ ?mԇ#W-Dְ|ϜAxrˣ0LOGNendstream endobj 4055 0 obj << /Type /Page @@ -12213,22 +12149,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4065 0 obj << -/Length 3051 +/Length 2988 /Filter /FlateDecode >> stream -xڥYs_3!VkF8$ @@+ݽ(n'ݽc8 _8?I$'U0YWR̔d6s3 ?~'_o_}a:K,M3͇iVQ}~wW7NaCWLV$wWƁd{eOLߎDV;og~ŧс(Mn&8Ŀʾn7`~;LlrOgIxm?5LrޕjY2˾7G,u]-b( \NwoX\vgvZSW<`yA~ՏF4(58&sE4EB?"'"< SnO+UQ2^])AhSE|vfJ :Qh߂iՕ7(IMIԏRwט90GЎH̬ZgIOB?0y hbm8yӐ#alĘ%e<%I'IaI}֔RI.&e[#ꀢ(zo -|хF.ٳ"a{S LƓU)5AA >:myh Sa{b'wdG13OGpGohES[`U!3Y=@LțIjT8\5heي3̩ gYUa|T윛: QtI#C9RN@>z9ǚA`H Q`0E&t2sg㘧(踎~9"vF[p  hJ޻=$Pd -rX hV|{M'8T(5$PiUbZחfz@+PSNF'͊=< |'_ciJVlG\I[$oMѫm*uJ$ǩ 6zd ܃(.:xjvGRS|kU+ox$hKZf:ϥ7vsbѢq󙊭?J4rQ&6Z}>ѱ=%Zh7V%tGdn*!oC2{<wZC"X,,j;Dm七lMmk*@^}yLYA3 4g=PcGz GPx\ҿXn6@BrT<`E1ږcj'vf6&EO9dihSƕ9 9rI3sɐs$@(d -zFjeX7ŊUP4E9Gnur% yV&qZ\٢Q_Hc An|bt'hVZYDž֨ojqbU-Z"oэ9e\9.y;kIt.R<(ERM3(TJ); V׊,0#ZZĚGU~.8lc!30$XJ_jcts|ˁ`)`ŸMΌu]}q"_Eu@WwxV˺r=!ue7B\Ԫc[0V{L -=#mϺ)YV+h7F$?JPdu}ʡ+/e/xp_e{j-QaJ(ģbk/mf5Ima^ (DrGإy%("wTr낧>a)Ÿ`QKl,vBm¹._*2[ -Y&4x 4g; 8uk6;4qpܝXB}|\GH#K蛾mo8"@;{-+:rm.;5Ýjx9>#%AJks -V$ #@ -*Vj[^r]";+>QMXT3|dsnӹjkrm-|]YhiHR}]o)&;g!auU)e(Nh{8iaF?~W(W6dE.pe3_B&Ж;^Oi``c]JzWtWVB~PR]/ɵGLGq(/JDWnxDHlޡ◷ČY{Q_ rr.Z1%~HiJl:WџQ&Gg%̈́C21]&~=,Cɢѓ2H {+ب'T$e7a,)_';%IZ3n7ԘVLYlʼn8AE۪)rym B]ɇ= &it٥ƅnc5k޽sM'~wOVp$Jyj0_ -l??3endstream +xڭYs_3!OhJcٍ3@" w{PNьpw{'4v0$܍Cܜyay+7\oh{ne;&->;o޾p{tY{uu-7әt} u4rhYF}=śt<7#=ϲ,C7Bg7g\MdՉ["/s4mza|ze_7fǝ&S,ͦYs]M{/\7eP-KfpCޞ7c4敫}_Ny|QGnC$nddud$D-dF +Xq&:$He9Q-xAkfOlMu§r0%ȋYEIR@0 9hwTG[[aD؄NۓC0cp{hE೸c-pG0˾#˄Iq-J0JbA?m=8u7Rn˞wdUM^jώ/cyEJdl#'p]/נ,}n<$AvCd2G oN[ +D͝LXI %0.y\ 쉅$yAE@{L:keġAFil14!F_-aI8T[`U/& 1lQ b-{ϱ _Qy*r+.__WNS VpͶCjCT<:B ^~*&$B]e E>őX䀪t\Da|G!PHsW`;,FF,& +fկ^ m]Q"mis+Sf&_E8\ 3@M1>sUwRoG 9`cVmK_ÔE(K}Cع' #;\~]-9 9"*`A.PAVpsqQ+|o.!U$rp"B>lX.!*̤/ Ay(NS8mQґq +e""QFԋ|xl'hvEZ:Ψ j~)$Fej$:YZ ߗr%D A"éb]> M?8W]+2njh V$e4>>*z/l``MC]ԬUdkV[Sqk\I"_)s@UO7xy-e]YT|8V2`!ejćɳV N[ښ]!BotoRf+Cɭ_LVqv $;.d]̡M⡙-PV j0I3 +B<~|S5 Qr.5QCsŁttV_|2_.n< ,jI4Vh82Xp8W65CFm ZZə2ho+Uvaf- >B9J8_S v~6[-kkm5PÁVˠhgo/seJǶ!7Ue#l83!9m'C-6(Zqe-T)3RWHeH(ԭ4:ڀi@A> +e jf4f|kSvmC)3*:"oV/T^O?ܲOh.rn;{ )eFv(qobH/5nG Tg##Ef[d@e6p~U6XԆOp^HABn\6"bS }ѫQkn%L4#Pif ߼ؓ@9ӉKw=;gUR%fzRTĭ>L1U)eV({8h8`7M`Ʌ4 Q{x0 l%EQDbi` 1-_f0zU4`ȂZ>8TT;)+k=^W£WLF~(FDWn(yxHI;<6ϛŔ Y/ILhlx|uU}9āZdhHl:џN׉A*bBQnV*_:`b4+~߲x`nL%9"i.Ą6j ՝Ii b MCFc  Y7gVHQd%@Eޛ)bymÅ`.k4…jc90\QKU=?xCendstream endobj 4064 0 obj << /Type /Page @@ -12258,25 +12190,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4072 0 obj << -/Length 4115 -/Filter /FlateDecode ->> -stream -xڥ[o6p2Hy.$~w]ɕqw^( C3yOf4?VjwA˷'P ɹCsqsDƎ~'7럽W߽pٹRʋ4ͼB;~uvzXKϢ{ٯ7ߟSp&*_5LWyvtwcZɿXܦOzcq΂0Uq':RhMRm VX(خ}S ٚ]_=wԱsyKiJW;LOUnWa]+Wy絛CSJz{+nҥoz.ط溂Iͮd^sۺA^ \7=W?Pm c9\Vc؊ -)p-M ƼkjZl09\< QHCX_$+<;l@' /As[Nz`]pPS聘h [ m3yDFM *J^2"NS7d;!Q2#BҀ%13T`ɫh5ZmksEwLKtd@қ t[$2R^tأ٘!T3z[*U et`tHc<zj -#|o's ź kn~Of7t@ϒ zg#1́!DgA*E?̜Ii#=ݰ \{XJ*o[(<-8e%m7 -ޣ:ulEGl1(FXgk;+^_hh,+;g O `3#Tw,u([3@/ b9]%ف/?tj3yӐ!e-+>[wrIԌ`7~͡`Č/B -4L !;qGs*, ,6qB~VzJ|Dv&?%YsFRc5R -i{<\#>0r7q"T2"(R<@L 8}g25'. gg :"?BVs܌8X~|=(;`>Hn/&P戭>o`LaŻ%%cE iVV Ofab! 57e˜_<8#̏C|gN(;9t]nzJ K%{b/Kޝ9Ϣv4ֲh嬍0p#**1S%Wmf3ɷ/{Ceͫ-^`o$3fr-fX.2{C6 3 #^nz0 ƻ2TϲM&q#Q!eUP30Q!ŋpQ܌*8q,XT¬i ^/ !6YrN{hi4qT3C_/shiUc}89MSRN^|Xtbr) :[f!ƒ L:D\xP1{ A6qcLj9UÒI -QV8\:a7I%d Gs>{Nc7в\fj?I9/O\ Bj-nώs_cIXՖi2G,4>2<"ܠd x8Mcxc4QSH0jIpb PJ2$rª0(h$KqL.bV\i8rV(XwM7m ~#&y?VCl0x&0Tr!P2p5ʞDs}Vbn šT!p$y_#J}f@@t:.B1v:r3pc&EM# -E(6"E*f96-H4hbH48X? -5ay<Vdkޗ@"č|N10g1{2k Üky2\KdI6E&nb\6'&I`CP&#|a1PBgGaC#ܷOg}ٷ,a!8aj_ʈYG -pfs괟@Gw[2sNN " {繗| -" R%'Vv+3)Of)CgUkL.(СU6y|.-,3km5+p=/GQ-/AHa5!^T8Sp gZU7q3~}z%߷ظȎz3=0Ar6d8qIB m"l*d?_\龒Bx@`e:/;>K_[_-.Vz9>is-neo-q.%[^O6fń re\W=ia Qrss/Fy gt4X@g05·?wLlP -AR]Ϭ̽Co\JV,3|)3 &Va_~' t zAL/< ogƈ? c([@~0Oa䊁^Q%7P҇a0a8yCr;@[5JV HhInY.XeLC - !6 ꜊p򘽼(7׭B{[qϤs*DvgX\Ա}QW>ޢ'5ЖSj_6 *'G䦙QiUÃ, T6T_V2 Pp*5 48J$f2 8Eendstream +/Length 3899 +/Filter /FlateDecode +>> +stream +xZYo~ׯ B+GJ:vmJYY8CDkIJM!Ğ꫎_x/lb=/B^a7b=7͚Hnn~8< +Љã$IC߹8>էGUo0H5ܑrUx(`JxnG({e큊B7R\p6^3:RA BMSeG3`%κjy1Pі벥~Pvo]9ɑrm-uq;v@6ʱ^IUxX9)bNA_<_b6+Bf]pP([ m3yā-:Uj##|YsK>A",i] q;Ξ曋LT,ylyG8Ҍ$:ω&a40K jNJ۔e*X8h*e>;&ŋ<{ u+V9pʋLD'=f:-wZ Pj/鴽`/RS߁лU97F|;1e y=א^PCk3~͍uֳK2i}FO@#ig`ʕcN}7!aBP ;Ŝ_R$t693h~E,1AX2Pګvq%X́cmJoN)Ŋ'$z ǻ5dž=#,u'(9%@/ ̈9$ف/qR՚0!@֛lmd53)~}! ƚϞYL.""z +UaN-DMm +X>";LNW!l`N\/X z4k?YMAXDY+;3Stwy;Nxi?NJ_#.=Ms|Yjq_Il}0$00XƸ-C 菢o)w(K`IҴbdzz%7BYNm9eiVmлa_XІhEa4b]2Vdx˃ޝ>vj2or#Z`+^̩ԩEg$Kq 9c,ϑF؋|Z`HY-zX.XzMZȥ=,5o*٧:EemNܨP|/ X^ +%c&D;%kmٟkUdDXH$}!g)? sNK&IIGs0IC'| +ny=H@Ƭ3jH/0a0lH$@i3[^E|(ԡbK OU&ÐD%H\G>sNb7в&q$`cQI+W@Ԗ9ӯ$IZjUߴχM^W8k;÷x~Ƣ 5'cƱWN16қ8@p2c (\1(z|ﮕ 64l(PCt+b,H [PV' G#Y!wΡ M>=Y*\9>wiGE~ʷPˏ7Uz~thzͱA!,%:>VC۬1{ *L$H{r ld54"H2fa2FDh`n)@( +n+ۗE+``b +X@8d dc.!Ag|pFXC +Pv)[Q +(ѲxzwLv5sġpֵ0,q技"`*!R[nqtk6J߻`4u,.W3& (LA +~1`Q+k n HJaT~S 24|$\UpzcIȉq@Ʀ).4QYY%OB7 Ԭb8J|)smQVͯp9gsf­z>SXdFĔ'X0t2jK'XiY."6?|8pNv2Xx1եXKmEr' +J kf& _sՇ-mz&a{{sz>˧`gA[ m);B PX28/7c}w93 +AzăHaP{?Ϭ$"Vc!)IqO9V8n8?:: sVG3_ogR' R;!m&HrBby1'uL+Vb,VEmny |0Sbt`]'qFW=kA~yÎ)UdB2N3.J8b>EY-;8 h'!@-ZR>UgJ3Xt"R"KfSZ{| Hs\PNEE. `#rkaC]P Ċ}+7OZ7GrV 罫v +/^i,0{lB*a0Pl{Z2f@`iiil{|H{`nxkNoXLR셰=MV|`ciJ$tC.@y˫DN~Rw%q#_؉pݟ1i\v;JQ- @N%6#@'(8KW5Æd&b 'ڏ z*s ̒4y) prdhe!ˡkc ?iK~Fʄ],XYJo|;v74g}ٵ,a!'7,Q2ق;``C3W3GClrch={$fNJ4AF$3vo +Ak1Ʉ}\#A\ Ѻrp\?]J48W<.FCϫ|l7߰զY"VÍL@N和 #LHaY&d*,s 纻߷F~&A6CכT2^CI|Isਲ਼ZUSTf IΟj6ۓ)y+V2yߥ<晢 aMh̊  r=W=i1 6羫{ N`xOo08ʫ%LСޚƝY)p\Z\JS<3|˙+&Va$_?;e3p! `^~A2Җ3<ύ{i>~k"~Wzu>ŗ, OhA\)|Qe.M5Iɠg"I3[a!vT:%eDZT1~aY9çA\2őyG峋K!\h)A 3dJ,3OQ ǃhr#ˆr3, TTr&"8@+y)S~9?^#wtɚaendstream endobj 4071 0 obj << /Type /Page @@ -12320,26 +12251,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4084 0 obj << -/Length 3362 +/Length 3300 /Filter /FlateDecode >> stream -xڥZsq1aKtRebٍt|8: 3=vۅ݅Eڎ.$C]d g/\X ʠ\. -cN< bb]ͻ+^8-_/WClÏ6?\ ,L qo"fpl?Mvl7M 0_]]{؋7;LS|Ev$m?.W^Z*[z {7< -n]AvI3ojq-R%vRϝi]_r.ɪ=meZR5wic ceg=,Vr +o2%ɿ]'W{GQd<iVobeMRǶyeG*!|Ӷsgӳ>/RU*pQN"k˦Vqԭ^äMӘPy'T&sB=6{a8\֚VV.#OӂN - -:&!.:!̙5O?,syS&zG:݃}|84 2C-MC:M -W&dxv|9tEMǷ@'o ]g=TUѢ9p^Ak]QѪyJ\p57$ -ѶYȶ`K -mQ#=|zA#4) B d8| dN`>PSA`:;M FU*Nz%f  5cz\4!C| hҧ~p yNl<80b|CBdKNol@d]U_3tDHݚ]qSޠ3r$0>SbrRz=샣Wxచ:1;hSι=X4i5ogD/!ctXtm\\Tx8MY,K^ G˚can"I\z0~t=wEo3`n4l߉s~׶ҧ`)gO9`Q, q\;‰bE~<[UgebǼ8KRHY`"X# byx>MK C%ykٗh!"d9Qj7Vtq$B`bĈO qգqzAUɺw hu>fGSk<Ďn_q⁏E'nМMّ.ɛƦm!o+e"؅BJ5H3mIYsFmdy@x( ];Mh)@⬌Nb_q9Ա*PK⸮)eRx8v?1=:kHä[|[_`jBu.\Qz|(&<}|K1XB Q"kD}7;"l"ѤTTOs^Flyj ?;>LPd*_# MwIQY:L-n/R[9zIyӲ Ry6FXTZYyhRCf-fH7Y$6RlEpW5g~F\!AnW‘рNP&!?rX|l^ -KĂiO3>nںacUi:>Ap gU-͇;J6a.~4B7}P-@.q47mVJ2alq ~_}댏bA -pq|e }^ٖ}i/4h+:t#s YTbTX OYضi<)E_52?o߾wy.a?L_h%v -, -ns:յ endstream +xڭZY~_A+N-!܇SNJuY+˔+eaIX @Dfz>nʝ9ם%,N";YrfǕ+3Y`;QC77EuIg5MY?[|q}+8N凹k{wµt֏s/>0uջq"~WgK_9&'h;Uvү5cW"pCۏw$ 7|[X}~[p:.Jj<5CzS/lpF[bw+O{VpPLVhshV.# j`87;@+{<_a/\^J7v:\EuinV7[mm ig)M۾ =D9t/gr#>ӳ>RU*p4xy ՗MV~?VwasXD%{޽æd_g2oqOal*ֳs&=+3ӴžB9wLy"k~X2S&zG:z݃}, $9qA[ZPl!]:M "q2<-](|._"xDrӱsfH`H5p㕛*Z44=. @ԽFNߓVř~'!%H(tGf#N|,aVMK[2K:ФOYpBFж軕њv-}:OQ~ A=}P3wJ+Yw8X`1ȯ<^=B@>G7lƃ1wLd-:yߺѢȺBQ_x[i J Ѳ5bHCޠ3'񻞓w)1^9}!-PL~{nz0[=2vۑ0#oC_v⭓Zf-B4߳@_ƻ%HI"'{.aXCڡ=H]ƚj +M1:`c'؂ψ^Cƞ:ec;|Ji@ RU5~O7l^?Ez=f]J}/k}Kl7F1bۋ}ډ ҃ȄIv;C[? ծVL~׶ܧ)gGȳoA2ٵS#]\%8;f!Qy1@Z x{m `ƅ .;/ک2ֵQglrb5OHg#Fc,3пg@Y7k]{o9F7{uO9ϝ0yvr|>OOd;n2G8.~^Mdb(S!D Oee0%՞U磩Q~7OpXDA?(KG?xÒ- qsF0u=Q%hzrCt=h舌Nd[2td_+?=pfShAW;݈Op5lZ%K\5L݉.poX\pxF p?Aimɇ\왤`w1 ^+}R-I8' @fs@y+3y>Gv ~{pS;q"&&x#ñqx>q=Hxk7Vtq$ګ@%Cň9 xW~k҈d+ XUbKJ9YJʆTų5bĆ_]id^=4l + <}C( +HS5M ~&L K!m8YrRmdy@pv,ހ7B_Fc\BTc^#K/0B!6-|0QXf=o4 +\Qvy՘qSћWb -diP7Ѝq[GO|Љ90Ϫة罨! |_#AD˪Y|8&Z=7+ö1V@*490-Z"$ߐmYtBЫWĀx6/J3X Yrɲ(Ld=U+t[Μۯ5|v23}9NV 5$\4ЅTq3D wT8C@ZqffUqb 3nm̕$38Ѝ9 KnW<P }6-c/ys2."c[_B x"DJȼ?׻BЀ ?Ɖ$ Fx#c8SSht^(Rh S:R~t UpE]UAGgC"zfƣaG.F4a|h*qO+cj6<4bO~Dj.=YO/H~R畡s`CKʺFL^(HT/+01\T +^ٲ>? qȆ({vb ͻ1޴f.جK]-! c^QuF(N\v 4~te0XpM0$:rX< RhdAOҲp`(c4K +ɯ~,,SH"` E ,oJ+,"hPܭi[)9ȀŞcE;Yg@7Ѫ!)kU^hVtN۝1XF]9au++.ns΅p J=G̜5Cg0`imE9{M5eN)ǣ,9Ve_ny|T55^yPJw3ep\:R6B  {s) 8)_mOG¦&SUWLwחTځ@dO#?E^QN/hoYendstream endobj 4083 0 obj << /Type /Page @@ -12380,23 +12302,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4092 0 obj << -/Length 2060 +/Length 1982 /Filter /FlateDecode >> stream -xڥَF]_!$,G7Nvc'~H)k -IYߧb0`wUuuu%?Ookkg8jGV2Z''&_I lh۹S~Eg [g" Rwku <6!1s޴EZS_NI.Bq: bϵ-{D$~ϺHB|?ɭ/E#Al"Y10CVCX  N$ET"BwqMru- -t)c‹BE&U)7XCF3YPa46WY;( / -mj3n -)k rR8H*I -$)\% KR>dc[Exns }P&4OId}@#xz)'N&1Ń 7lAx]ߢZRr7ERvugEv7A|^ZNˁm#M@uL -A/XrA; RL&w#iܦBN ;l_}60pyʤOk 3 - >P#m%$0,4ke]JXĐ3‡u(БC!k-9:J:_۔ؘUd \S™mq-Z:~7eq6RxcHz{!4}T.. -^T.$F/4Qb&%FpgQ0~kLO*4ӡ#u8f=q3=tB(j3BW3xl*c-&'ի.&;iApR-jEĤi\c;a9 -Y%Ir#gYmۅ@VȀ89' +a3ЩUlupn5ѱg9HhcG%QïI!;Nad@"=÷9_QQ3tt)D#PcqْJNg*#'jly4L{#hpfYQ'!cݕgc>9D/(=>+K2x}۔I"҇|6E)݄jwc~M#i#wAC 64⒬b705۱h mXR縔H^xP7G 4OdA;RF8@ ->ܕMU}Ϭ:GEMitQ0'[ZHendstream +xڵَ6_aVbRM6m7m4 IhK^ꈳ߹(^{-@r8c><Ӯ,ruW/#_0rHֳH}ϝ{bM(׫7o'0 Nq^-pv̜׿O>-^^,M{7N# btj:ݎ r&f^OpOWECESYWieg'^z7RoWq@Xn+Uek'iUqCf\qfA' +i)#p: aL$;Br]Ֆ^Z]+j tD{mt5%>GJ (QfL+A͎q@Q^-pNW%*Xs*p+` g[WL^8tЬK endstream endobj 4091 0 obj << /Type /Page @@ -12431,19 +12348,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4099 0 obj << -/Length 3322 +/Length 3226 /Filter /FlateDecode >> stream -xڥZK6ϯ0rY5[f4fv -K"EroZY$z|Ur /?P&ۧ~Mqzl0wPĉ8ΌlFeQi޽(Tm7a*6iImy%IyzySi}B;A[/];@5?a ?Idq&!d~ )!nЌTnMku>ܛzKh푉0g@cMG 3n%o4s"'= 5,P ]Ӊ_i{@{zsOA^?v'.lമi^&̼n hqoTg~c(I6ia@CqÍj,;Z.Dy>%GI ]ͅC0r[~m10U.B?'b!i{**=N}5Y޵%7N -fn'Ls[2I{2&4#>!8u-2M7E΋ NF -'Q^Ŏt:y8>g h2Ǒ2[jmr8TO-nhНhMӇ6QӾpGaQXINYkvZx'=lJR1Hyv ŨǚCN=ުU(7t@|R8|κ-ԕOuH\%! ,8$v鵵wG1"8hDסVH}eiXhQ7+hٖ1LuyWԋ >BW෇_܃g2P~+[41475>ƪ}b94$ -;G-ӳJBd|dZ'L൮8*߃$8LLo|@&¶}X/dRov=xp{ m!L6Z4, 2h(U^jz삤ؠ䮧 {+a"F&h|H>m))xxU -q,YY{J~]y21@ѹM8w&Z\( x>hQ(\`cwu\S ȏ-h=~_w L)@[ lTELƑ}$6ƞ:ꏩ&\ {]ʓeQ(' dQ(A͡ڳI -Qv&YN`jМ+BstD>~F3c+\D6 1 t.z0wrlBR|"5`S(A XT-K}B0-e&zRY[KoR(vDKvF .5NGEI}5"jT '^pǟO&;ugIUat^2s^K`QO]͢~6є¥u!Q$ xw+ꇿ._oax]q+eʬ./V,?4 I#u:O\[D\s2"%-w{BW<րWDH|bz0}QS)}a#`5TJ~g3w r(D]xF-7_kendstream +xZK6W rY5%RVn3:q9lnizQKm=2"Ec^TU*4MMF7YfwxX$TismLQ_Qyr}VIXD$qwݨ(2}s@忂,\4 +iqY_;-C׎f_~˾4 UUP +_ +_oat&&|kqTL"҃SvXӶ~FcdуyW͜@Ȫ5ьBG",CfTxxuWYЎqN G' zdb<tE8~'ǂӺz8ovsDoAǜ%J] A{`BEp7<ϯ\umO_o(M8.6aQlXu[ڭ`s>j&L 7NM|wP'ҝbt>tTfj`mKu^8\S(kT{wm\][Sf!ay(L=AZKeY$t<Á<] $ITqw >%N3,??ghEVz7A K=:x@\;, 8 +X)$ZgAgVhW̒iZnCe]qiDi(,ŀ$m<p:caJ,ίz$3w)w|]k!1L6Z'<´~)^,=qLbr) a>4I(@l +>ȼDMxJ%%,W3b$F|_ +ӓ2ޥHAp`-!XaIIN"*{\?s;#S4CfIO8q|Y|FA;w8~w,:g~`-;`37?@ ʹsIt*vy Nb)3Y |db2ig; #}AiDIؙlWa& HU\*1kڠdcϳ)ӻPH}tdio/ap,e don"}3(I V^<%4uvPLYg{@ʅЄ/@Il]RNx8޺2%*ڙla6~^gs\?)@.E?|OP>8HR T1mk-b Ey^p8KɭFU<"%|W +t<Nj\J޾\JE lvpvpQhgt.(&"<IXa]. / \)9!Q`.B-IB Yˋ +0,ڦQ/e!*_ρJԉ*~C&ũFC|Ϸ6c\&Qs(bsuÐt烑곗~|^)+nE|䶿, 'HԿK*,lF6 =(Jkԫo+g(Zf?= LVAdx`?iZ|%*LSK3z>d\nU7Aɂykv0S?Yo$%I`iW>#+^sˢ51" XnN'k^n 1UF2y\4E F`J(e 71DW;`Hu+4}QVܑtCP T&5:ei֣a.C A`A"2\vN2bI"ѷO>IውՖcwNH!Idz2k d$;>L^4zwW?0&wm9s{^[_$m|vcO"D{8zgR)Eh, M6Z*U"# +M iݬ> endobj 4106 0 obj << -/Length 3558 -/Filter /FlateDecode ->> -stream -xڥْ۸}Bo<4Ih˩DiH-Iy<}%JvRF7<U̲<Ζ`_q- ˟x~)?)b7~_+ԟ_gYG柿~nw~~zͧ_Q}??_[XrC?~#_ ځlw'Ob%۫Y\<x( *< Wa J?3ˠeP~3=*\ 2z*$OFG~|>tԈfm\/7<x6{hleA`a+xiԞjhpȀf_xb^GJ Jes~p#-4CS%pm`e;>~9-uT5M,еiA7x}n*ڝqJSLMPDi`& О也D[ +)D "4,%v[܍NJO͏)Ҙͺ9\X3˧/KmM#XK^(aV сqJ Ny]]Q)AV˶5<> 9 -o-Н!*Q  xr:82x¡ `Ͼ"Ҵ~**|!ۓQ\R9"R,mE<U+\PԂ35֛3ϧEۖldcMFH e[$ -Xq@"~}ٙmCa.M waQb*lr04i=A|Q}!'*k-WL)ʼn`BQ !Hv,' ݴ+"4{y2wܒ01# J`MܲmHAms^FEeh9rq$^٩F=c fx@h;|H k/((W%?&4+G}Znx$>e#8Ι:OU%'lPl ޖ;n(ZIğU$6 FV𲇝SS" UE#ݼEY4jjf C:v E2+ZsXc࿎ gÄоB[u#KcHt=8 "UxcLY#ѥaɾm[q>@ػ'6ߖۃM -/[EʸH -c붷ɧFA1q@c)e nک̊@E"&u;2vjOt >k5O@ auk:a8#LDmnƟ$H*fI@lM%U}ÈiRT *u2nC3pE3$PrK`2}5f##oi -*IX"ba#CFL8|yzxefFeNĔmiq!$2L59jafdhb"4Ci ӈXLj\d%1;][0[87z/+\*N3fA\ȊiS@..3Mhc7lm'ܺUՎW:l1*BZLu=0K`] i-"ƸXC lwy;_Q cV\S`^=F{w7>é[#CԓMme]cFͩja&dy&mDIyEgd|נ@87@AOJ,rNExaXWO2%P+SEK)L84/lC҃Hrd6FS t즆QxRbah‘ -dQ-ͽF>Bj[Qnibgӗ *\2o.Nm0bUܿu c@ p$m>|9Cd ~MY@S\O4G16ELZV;;ԓ;'Q (7%\\۹_g,v%37e]zk+16le{*^{_󈽮Ptx.l_x}+#w\E00K3x*SkIɲ_W7 - by/z( 1$>&8AO Gendstream +/Length 3469 +/Filter /FlateDecode +>> +stream +xZK-` зd'JK} YP鯻ص\\<`gCϟeY%nʛhWbxCoVWHKo9[meyO/0twHys=2?~$wos~zy:io_}^DnX_~fbW.#=_.g(8 +gOEƢ̚" +7HznES8~↴s?~|:(bfRc_N`^flS+jѰ/Xx^1iyj,̕dp]n#Zǽ,yD۵By:u|EhevJCKe]"g'̔BOG*k}9 $8׻ڎ6d<;%.H5f|{o K-q@Ď;\*|Iȫ VvLndc=V7֕Z%s;VTWzҕ&IJ ~1>1b56w2 Sd^.>-∌FR$ؼ^KړʳJk=I/eCuN6T~YݙiYm eQYf}$ R0D E0}ơsڗ2jT(#kCM)tN^ l8 _T1agŎa﹨.7Y:pW>!0lhd`Itڠ}gnNͦBvڪIޚ'X|ųBe2X33Mf"1b79K3A!"$L4?ua+v@c\K) P~B,;X;y#@]CնSY%fߍ%z +]<$,n~[Ah7ϔI$89_3Z,{֥VfzkɴN9D"nI)nr YyMnec^ݰ7w` Ijs#v HHEţ`kԛrlzs!kS7NQ vd=•5e:?]yg'%[qbj+IJn_k1H:bV+|]SΧgU#ac{{oH٬[~J`?ǧ4Dq'h|/h0?8^ - ^R&;[ +Cy%D*Cњ"W!,}7xxao9i ;h (MK|s؜4|JaaV$ºꃬ2XP 㞅@Lk7-.aˎwf>6d'&pV  +$5 SM2:aߢHec$FR2rV$͔;N%gIxiԾ}ӳDEwo䈌$M2r$IHyHSՙUd%:,6f9@8Ko;rkY?lΚ# pŸ V_h c]qM +S YB]6"#=uu +2*BDC b &B*Yi`yN ~/'MFIAP>V+:VZCP|e#r2G2Z>} r +MJX gH٦aLBC~k΢\̙l#ܛrm-:! ̇Ʊʍd BM%5$cZ^ju 0oH0\MFa#L%Rf="A`ԻX՝4DNM55N'K,Iہ9h hdt8N-Nae?I#ཾy%u#b}j8Ҁ}{πpyJ]hѫ\`-`ڲM^eBj#. +z,SSB)S#Y;×k^*bo SCNT&LYkohyRH4梨- QbFP *W6bցx&AY,#hP BйC"Bխ`8=DZ),[st+YzǽΑOֳQ \8g*B&ipuchG.^s'T,e+h}Oio\u'!$qlscbemT3(aNS+ ፮MyYzb9F"D -ڔ]OV|ye"S[0w Ect}jlKhӠi4G%Jf*`yU'Ⱥ. `nгϺM)\",%5ޛO05māk]<},؈ [TlB˃Cٵ$F>r(P[ +^(\ 4Ĝ2:`j3O?$Л$CJ2h*{4cH})$5:E-slEGg +qKCR,c %f_'X^kaTcŠFTl^c5}Ap4ϓ.hDJ_Nhk3r=xg )WiI!L٤ +}Bm+Vȗ٨cTg”ydݠ`{ֵbnfCZ$o@’R %cZtsN>sno\A[F-#m>,.sY"?d&r1b(-$NPFo&hSuˊ$HKD"OmW`N}#3$ rTl0s4T ΩB#YØ4/iK +Jr`#vSX:Z占ٌ"p+BaB W 0t^pbؤ)] KWyujYt:mٝ;[+8k$Hh(,Q~62>m }绉?S~&jjB"ݩ 2S$M=PUM;;`C%VWckee~ލ|͕+ua Oۼv3wEU4Xѕ/ H:+B~{. +f> endobj 4112 0 obj << -/Length 3567 -/Filter /FlateDecode ->> -stream -xڥn_! /4lAMfq -&d-Kٔ(oGuwUuݭp_?P"S?Qb -[U(KY:0JEEP,Vv""]6_ݧ_3ʢ *|5Xl_ځb'Ob%v/j8J( -@q$a}@]'4a+0MTNذl'K︽D\σk$c_f| t;s;oTA@,e3SʦveQ\145_Ҭ(yЉE:KE5#_vX]K^w6@rglX`\Axl s"0!2ظŕX f v-$jQrgN䣐ROeh61w߫5t7׺p)+/\MJflf-ґ:~}@%ոvS&GHWR!64mSrnJ -UQj-yH 8hKzyɹȓ#|nGT=v~50Y:A@)e!"C*KO$ -3>X֏I&+{aIVsKtc-={'*=t#`/ՃTX;wm];):Nu ٟ` @30S62+wv^ y@Rb+6Du`"5l?+>[w왫\O&Vq o׹*FHWhJB?ĸ=.wr3*ؾ`m0!; -/ 3S5Hfɑk#_J\Ɨ^G 7lGs]AMrʷԦlcD67A] x4:NE>Wԝ%Uwu%z4 &}CVb * U,K P<izzgꪖ*Uz?]1ne=y7R454X6T=EΫRBdQ9ڽ h})q\zaɍ/ۺ}"f]tIԐ+)fʕ(&_\]qbbE2FH[SlhϜ Ü_0^ Tv-MIx)7sFa YZD[tB߉GA:vn;-?lR^h`_v-_pu`,L"tghjy)ʹ~{!fe:t!x5:d4"$%_8!3q$%Yڱy-jIѴ4,\6lesKFs3:vz:'#Ll5z)F{)qyOF}/7zʔsЏEu n|2ҁ>w4';N*kC JIQtmDNAD.QXQ B@kdS70Hf=TcTM R \wL&:fxd800OEX4+QKᑿI -0FA45'a+ 7 I -"|%{T 5 -b[Y=|5&47ACt%pm -e(d X1r\eG)~&;#=kw,j)d3\VNa=e -*1ra[+&f&8¼^S=y'҂ʚAF/N'aS?% UߣzyI bx Fȏ{#{R!Fa&87 ׳{0ϟf"a)=*- MWG/?VN_?+&_$4 2H~*\`_չendstream +/Length 3491 +/Filter /FlateDecode +>> +stream +xڥko~Gr,\ǍU@kPBRq;]p0`.wgggfM EI[la _ EzqKW닟~Å﹙-֏|v[\)]$u.A\w<w.-WsSnA|.x +0Vx_sU.`~-a(T^]_bpf8\A i8Ǯ=+N 䔉 #x1h' _L9QX;| أ(dWTte_z7js Tnd[;'jyOi2Yz#ӍLl`uB?LYBdN}I3.  83uV%6uY +tlv?|o77yߡ9싚:,mAG8K.H#5C]7m*9J ͅ -2'rI+M׼P+iD`HR5$\WeGȻtG{;% 0G$` 0c}-;]oE(H2NW>TF#Pe rDʽad##f-4;%ҖdNF^?A gBkHrd + gf }XsgRu;J;zs\GsOrXi6Rf@?X1s]~yWx12ҲIo@VbV`)WʪRi.IVP׫4pvqEl f&֧)y; ]sWM*-{b-씞f kɅI4(H;[,ˈ4n+SKTOT%c IEblG.ۂУfvb wC^8-Z^KgvYSemG}dWjR*f>I/l}z +eORi|}hI7ŕC+nH0d88-L- 5u MK@9!mST P\m@$m}\{ +u 0+j~XZNjlO?Bn$77 ;/̎ħT{)ꡅcsm(tnX҄=7KaPb6 {ܹ-#̶Ȣ2 p9S~8_ R){I~x02Je5.wSOmlڜhv1+T L\Kpɲ6t1V=1iY"Q~ E O\N؀'' ;5 +@QQsɆ`C`sG38FYPFn/XaA:ndGe20 QǾ12B6#7obC'PYv$q'r2*9=edC +6#_vi,Y.q˙wͷޮ}F]UpwDZ⠓+M$5CPL %r8RjL8T(*2{S %A-K8Nq׊i2VrC`bˋd)J{ +5x("q|n O,~N+x #{AP͏+X,a +GY?h@&I + $sJA9~Se㕽bi$-sdº[/Q\j!qA ޴+fKc\:j mTc$jp㐑m"ck K87+$]1mCAJDxP +`9ݔ)rlg{.D7-u72j-u 8hzz{Iɓ\GvZLa漅@tPq>MERjF95p zy̛HO/}:0[SszԐHc%q.GYEE$f|n$?I4xj~LzT>|(0 QiXz1AschK9PmG}52;[}?ǯCp[mJ'Nsor8Rš2icHS %t1qgq--_bab$,$mw"SYl1`:˾е M?߆i5<"퇵QN0Q<5T wcZv\+>5׻4/<}ѳKfa'KpߎaR疧YG 7v_uto\r>dfGؘj|j?-\OlE/]h~~ ۹} 14Zv5`Bjh*qnzG桊jO{)?ngϪ$PަG'?̔Ac:appzϧwżc%vl?5=ȗTJ)7دUhoU݌S:Ɵh endstream endobj 4111 0 obj << /Type /Page @@ -12594,28 +12516,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4121 0 obj << -/Length 3439 -/Filter /FlateDecode ->> -stream -xڵZmb| tuHE}6mR ɒOw7RZ(b<G^_x~4KXEp^"q%"Ww ?'8O._w׏?ήR^Ϯ4ngQG~z{gQ}fͿx;8 -J2.~-\_ʳh~ +?J닧۹xL_[S{UǙ:|;WatƱv@X-6t 0)y5 -ή,K,jiWav:KG;hr_u+]/򊩷o*x^xO;K4?*DK崳k<a0FCAٿkY,߄)ODD>1;kTN#`LPv' -'rFle_i摣swJb+q-֖} ҕ -c?YuV=A=uētnv/n;S_L{OٵuL^ HFRլyHy\Mx89.Xw -{N;jY Uۀ*Vb?1(#kyٌ]mwu5gPU>,ݻ; jJe^H„-?/Ncb!>KVS,di\8?̿Ñh1g&iG*#$~B];SZ%)9<5+AwÑg -*f:c5u6Л3<=z\[#qj٭2"C E[-o>cPLt#Q);@^s)HBYmx F$EP -r}䷟;q{^N ;O(G B3H= TKa.@)Ju+C9͐8em>˔ײ/7DaiUx(n{քeRNnYdm6kfxZ [\pcf;xN3A&!3!0x,!0{;2wʹ=t̡ޛC)(^@>/+ -` ;1lj &CK fb^Js+Y \W+0)#cN\#`Q*A-wpXOӱt#R !%*=(suAIJЉF1&'#Lţe1~vUnɤFb$43`hE~~A9^^*Kx|_3q8ȱkXH6(n uqH078bwzt`(P#NӨH"9 &f@I"1 6osU[;s` y;`PaF*8CĶD~% 'NR,tfa?& EW[HE&ރ\~HL|a[&c14m"^nK+g('>_)[0 X-Dw@<ZȚf5ppHÂE,3t>JB@ڄmp؉=*JG6W0||WDD14pׂ0"=]F甪(Ҕ/D! =b!<%&0y&Ym^X$M%תƒWwqNش{)8J::1㣂`,&N4IǜԕOc=~07FS bvxL]OLi -E(?Sr?04N3Ѽk(@,Ʃ(0;qi3B_ -7qzs֩SS}!cU ²?J[&t4L}^A:7Em Q9z2::]2SeH|ˊGYvהA1Eʸ#fmFj¿۟6dL_[ȏt2+a4<:꣕l,(K/)4Ŗڦo.&z[J,ւ#1#{ <~!x=*Gsl1fMgS,m' 8g4.A,6^%](z-SE2GJ"*8ޛe T!7yN >lKlxA"43GN>^D~gɊP:7H(ߛq92Rk?!>[לr%",3mymRSvf&_L*.|\(E -@#Ǹ0k!MȊ?L5zTײ`~PsEզV>',Gt2B_IXguTr׻n 4e ^PL!>':n33aϙȳғ yf"w|lSzvp- -[ļ>"`P;$fc=GSFql&=-jg>,oZ4kÙLRɧ)_iUy2M"'+8~&F\LLUFFgbI *AWPS!.3wQ jpͤ,Lɷ'lb_#ӟٓЙg'N"RH(''6vendstream +/Length 3300 +/Filter /FlateDecode +>> +stream +xZYoF~5,vcld$DKPM; fu|Up]$"N";p,v癫#E`;QȬٛo`:vꤋՃ Ym]ܭ~<}ߊy'KpK׺Y-HWnW/@={-}Aڟ~Yli{ߞ9&Gj;Yv/^[3'<bj$AT79꺡v|V]ss;J<'lxdVbHEGYDj.wM+z +7.cTʧvo͇aĜevY8&#$S)M%A*+w=3ؑ鐿LzvدXt{wc$A^$=7>D_t1dgnv<{M׬Z ++s &wlI{z`kT,>dEmzE%ڬksC+qS+ÔM]ɳ=[7ZE] VPdSAJ,3lw BW㙝]m&늺-oOKg FIl!bMf3vq8LX]uevT4fv|p8tr|!3fz^:xtjkF S1h^y0#"]_O-BN_G)\oQt4{7ϵS>&ɣڴ-^ԏb1ǥEfh;VvܠڢٵfF/LHYKsK?^:9ɠ4|=\В^ZQŽǺ]hq>OzmCjK|. Bg~oátM~%&]`[# Ld HNsO_8OD2[1FL&k_'aMwE:^1vDB Ť2o0L롎4==~QWx +) 7r,G'i@O&->kipQyOP +S>FTN7( jJ>e6\ARlHVb+6렲␒+tlH)#rde[5FQtE>B=mvStSn!XA# ;|?!wڦ6 p3I?R26ȮطzȜv8Yj*$#@퓹K6 :^ 'h0j#so;.vbѩQەdj5s+# +c P+uR.'| v~MHR̆1W "_ڮgA޵C/\ "8~V80L8-ULr +>Ǐ`lr.'iO AsGBEp7amܐӆӆ!*'Tz(0X U  ?Waڮ $B%?rtQj0.uw7omƠ&J +WJ]dS]]ӡop Ն=< m-*Gjh +beɳo ndjhok +'mFGQW48^<śpow۵B}aђ!UQ94 v;а.5FߣLK5KԾ&+%Cɇۤ3g|NjA~&Z'T:H؈ӻK18u*5Ә]E%o!U-Q vi @0N&<}hz/y[g%ˌkr5mGhPEBDI8=\;.CEEc¥ OFCއYpBfUxYțSRum7$1Gu}E I7:4 Մ^ ah;1N1*>5Bm l.[xKk*ZUj0W|N+"?+ ubgNwoguȷعGnu"O(T |0ü:r0y|&B)m;b͆C͹InÞٲqCv~!S^=8xl!O :>dq ,>YfC}Δ#7|ij̦CGt&5GťX |䥘 'rlOX&mbꍮ>>է^”CcJ|7o`plץ`DlLE0IZȞu4 o3;T:xwS ;~) +I<{k|I#: v[Z wyGNŋN R-鈷K|N/w׼ (C] zN٨+HM;˷:xH Y<_uc Tfi_&sJZӸ?D@ %? (jEܔwiG/@#?Zz$Il PL8\2"Jt,萵$H @N&cm6<pq2o3LY9P7$Ut(H)X')r-@Lz (tXI4|HYy;ui?endstream endobj 4120 0 obj << /Type /Page @@ -12650,29 +12567,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4128 0 obj << -/Length 3338 -/Filter /FlateDecode ->> -stream -xڥZoFB}D,Kr -I[jC( JRy풔)@ <~;ZO-t0iZ-E.Pd5y$ZςlsdgbͻfJk%reL꽻\woxʻ^>}\ f~Zڱ3bXiqbp:KO|e"GZۋx.Z9cq_ -*(& -vB韚m*ck4"+gDkʻh' k}Sw5EVY]%~h@AʜμFx >b-PL 蔩B"+`3jon8e ;<ϽaGі -8Wp+a3ioxĶ/AxJ{:+"K ʌDnjMm#!sZr[+kGi4W* HC 7-]$Xg(pl3i"DH[tg1ׁckP('Ǣw;'Mh ;vuE֑רϞW Om+SLh/t2Q7z5-Gijpo1\giok͙Ϟɜuzol]T>;};5-lA, 6XT70X3A0Qb -Ifmfa y2oe<=[-H(2s-S@,%@;Q czYS9A1X4 K7YҤD̏ bcQTg)>lUB_poď ة*#]bm,5@wUvb"" -nEtoΆ֎׶$qqq#S -ɭ/7qxΫ65&\<-%`xyKk;r,y?ҞŁpiޏ=OL@b Q#w0nPH'tBǁyfghxr*t3)48~`|Vltms{$TAlAoy6 Co^s|sN@e@2L^3 ή!\ kࡨ'8=<&ـ謼8*)bH *rl6jl1qXcm.Zͮǩx="Nsk!c~ŧ]ٝyNe=pA~#s/b(QNMрwy?R0AAiK$7Vp꡿"SWNTC%󙉓*ǸHr[|b1 - jM|*ѼsREG1pƎoOƊW#Om;mUq -4ۧhq=wF+1}fLB SCLG ָT 90lyRq2,v}ʾ)Q֬Zwet3ʝ3BcC%]pWZB7} ʘ WRɏA2C"kr8rCBaR?i4# mVL[&8l@ң]flL 8G?lL/l %=os :tPAtsjھn|3MȷEP( D,S $hCun+7ܥhZ)ҧ[}]^q߅Vܫѽ3L)#]ߓ"J8$}>D2 -cFf#2Maj]N -oEBrft/yt#x1hDsic -b&m^O(rj0(\,)7pkučW _#`Po Zo>Н +34$|˭_ZGt&}1rfPD9iqh?\;㩇1k)xAl(h/HwHRUƾG,0(T\q T*Ёq L{x} %!]vnd]<ƀJv{)K.9zMFGXK&lNm3(:[k1e@|5Z,1L,E)Gqh xiSfy@Tqؗ$s#lD:8*|#愤]ߴ}234HץbE=XkܷE7yvKw5X*` ,\y> ;m:uo ܫڛŢ,B*eEaY[C O,!@UMXp7`FnhWgr5}P# -CzZ> @!h1roY Lc\ro,Xyr+vޒd1X҈=] ?BJƕ1lW`Fb; B-l%nsĪB1,ZOŸ ضF!k6s`Be\3~5h΃ &`B -OwͤbQKл^I\fPwv358m3g*n 5ǹ&PƊ!3{ԁ[?ɿLrL)Țk;X 6jpza ̣RH`DA*TґnCƹeC~t_0 ' ʏ,.R5W;ǰ)#Eht.LJFP8j+E@H49  gc4=. ^iqHWsm; `VҰNH=.]ҍS,!DP}FvSu/mbk@ǒqDž{T -X`U\i)܁7Xg  OAɼ #6m=MҤRMnK -m\o1Ip5\Yl7 -w8ꥄiK3rzS4;7f B~##"l83I"|_a4yh4MʀR`&_Ό@=- c}f2h ;٘gHS?N>c38-C~tbh%(4+1e%)^rs -endstream +/Length 3256 +/Filter /FlateDecode +>> +stream +xڵZoB@?.Ϣi]q*"͇D[ER!:;]2; (8cvwfv7CE"@4KXŶ0 %"$Ʃw닯M +<;"Y~YyZ{\i潻\wÿnxʻ^>}\ SmŇUGƳ`|gGhEuڏ#-?.<-xՌ( ˡiD񌨏Mp6r5^ȴs5)kLdY|f͡onpWߪ1{SXDh#ҹ hDـUPlʦfnXDL"+`UUw3āThOÓ_[; +SHǹ_ FH{0$'JlԍgjM%-5؅X!XZPf&"f(e/j;Gf g< _?_Y_RNNDDUABjylE$cT1HgV:Ji Sщ8xbg2f5ERM֠PNǢw;'Mh L"05}S +@I)m N&FO&^մ;M-"0-"Y~]uƹxXp4a>{$sY轱0(3;};5-lA, 6s,L笙 (G^1 $O؁63{EfOe<-^Þy3 _~E\ce*1hQ}' +V{!v T/kEK1wKʴOb,l@kO"4p.) +]D a.-#( +9JRC6K w=cA^;;l5M/ұ 5Nm׶(`ԸeGhGUv'F':{\c@3q)oxsj;ry?ОőqGp,4~vk:bōtKkĬ!񫆤,L'̐К  UlUms{$'aX [| Hko^*u*SD52@ +"@,=Xx<s p#[R8P+0K2]Ǹ08\~PDd+ƶ9}G\WcCd$g<>5x Sme -I0\r,(33O+Nٝy O]?s/[>J4y\p4 ~G +FrR06&Dzcz$:u%Dx;$X2[WyA sma/ +RxU mREG(FŽ(ߞ,[ ,F۲w"9yo9IknКLztB3 y2L q9` Εc0M+ +FcS ֬Zwet3ʝ3p vtS)Gfc:0ʘ 93hܓ!ia@,.2hHPP{vfwf1T䡍{6Ulxqف x_zvLձ)f'b-w yC$ܜi;6E, ?BDvƮE{Ƈ9҄|[m$C+Da(8;C#8I9Yy6rc.-j޲w'kHJ:ݢwؙZqzGΉsN~!̀d8z?"2M!D5.#[nЁHy,|)RqlHye^(2nMEuBhN~d'I4,rNvHx)_'S_ʞVCqgA"·ܪ9]8b?Р؇ׂ֐g(jOV% JgCT=7tHRUp &U*kq[%z +T,mސO<pCF|W-qX}%H5,`ݞ":"t?j4:-*X?}8Mmضv6QS>~kwr-Ev&kޢ6L>0 fbh#>MP2'LuIG`$Sٛt}Ӛ9Zs𯆠7uiūXC{vRn.]SsɫVqZ+^>َ.|}FÓtȷt+ӽ.q҇k.R37.S#d2)r([Cy\@ix,{ O-N}alH*52$u?;z1Vӷ .0f|}C/bl(59"05nzwʽ`;%νb"\ICv5_B81wh ?b;6܃6f[j%^/Ebh==`n;.`}{ |Q%]wͤR'V%0UzKcWf?T;6cM-ɓZ8RXb쪢J/Ȼy0Iٹo +eld y<*tJiǹ[Y O,/p'17K=L}/5oϊD`h| F"HEA&8~CV P:n]Vb?ş ,&r'lz!Bغ׺ lh5HRFU'UC J{d4\rp…k& "+ɔ|;w:*&aɏz\Sn@m ;wֺ-ai[B^[:8.V`e~XpSCGn` ž5N$i,%oHŞSk36 + +h +d "I}WrLw> endobj 4136 0 obj << -/Length 988 +/Length 961 /Filter /FlateDecode >> stream -xڥVKs6WVpD ԑeMn:iٜKBw r'^pwo#~DT):*+)uH{# .ɑy"D봎N|f_78RIYV|g[ /?Ƃ-ʼn`WZ]_5d`i/.9?_h_\UtsE]G"W\nq}E<[+YqU:/2ɳLDRK~9IVlO$@{TmfsbѐR6\{Kx -9`>.u+Jaڀg5B"G퉒PD`=k_v#7eUY-IwEYa=aε=]Wbx8wCE%kzKsY1- ~q{YI^ -Q#LN CcfYWy {j`3jP~,e`uY!([=R~EƥȢ9 RX`Plcava2Ѡ1E"% f,o~)X MY2M`㔒G5Xn<`@S+%oLp~1̓7$̆Ts2Il@9iZKB(kR f)u {,.F~27|Z$+ٮ5Gb1p0)!ludU7Z:mme;fF:{z5t Gv#iQH + jiJgHJ} +-G{pACVc('a fiBs%4ԟ VOImw$]ح-vK)> 7Ty0`yfwX`4kִ'"$^yO VhH_ ЭuM物 eHV.M׷v%Z &%}m9"<2<徧;HeTI2ɵJ)Ց`ߜ̼l^˿QEendstream endobj 4135 0 obj << /Type /Page @@ -12743,25 +12658,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4141 0 obj << -/Length 3066 -/Filter /FlateDecode ->> -stream -xڅَ8=_ј'uP׼,:fh{fmm%dHr'en)*]oM~7Ûf +x -Jb?Q - kN#?P"XgUQp~77aqݤE'YvXej$=zzj:|^ѢiIzH -0&~DtDY}*:(Gz RG$޷j.*}fz/hQwĕy38/48q섈ːX"i/ߣ`Po*&pih T!\?̯ =-t/+g٥Fĵ8[N"8pT0xq́9[U7%/S/؄| x'0nC#QgEe$ A݊`O#JH#t,uiO|Ş.z3Am$.jas{ڗ mZxԐ8V7^al͖5Mh^}n;t#ïSo#}"RХqƤ q mgYe!/C1$,dhdQ$3h]ѡz)E%DŽZ/Ab*2W!N[N@xDa|% -K?z9F]Xx Z -Sg@ G lSBxٮ4 y;˼;#p@)P3Ơd2zH[^֤,ԝ@˩(\#ر!K٩«~ ۭQq$>j[O/"5y -ǻZ.xh%! fKF ^?B6\o/*4(ر suhE6{G9|7 ~q+PWG.:Wt4NRs!)Q&qa:/endstream +/Length 2887 +/Filter /FlateDecode +>> +stream +xKo<_|'H"m@E#)Z[2$9m7/R-tQ"9Cr8' +_x~Wiq^7 } +#? :]Qj{\O0{Zqݶ{SBY$>V{<$և/#!dDe##˧dpJc#\֡_ iX?0JG#תkxFm+4:w=);hw예KX"q'ta` +9](m0)Cf@Oy5YCv(ཊV[Ζ%+d:^^Xu 80fCch`iJ'&OӋ s>qJ7j<R( "H@N#JH#t @w:Co.#?&^;l!5qP[ 8lnrAM HQEzxOF޺s=taS`oΎ;H1)[4&r0ؾ5c\eś,o(yz%CHǐ%b5RЃHf0$:z.^VR|9Jm^xѽa BL*2W#8!xt<עQUdj.G B⺖ n>v]xt6$zA7 J1J5J&'= g< 2ؐ6[:t#dFֱeCHs ݹWA;:s`GJ\49ϑ$HEҢŃ[\w'ep93F^'Iz@@a?1|X:Rru .M*xM|ץAQaj4D@_[A4$nOQ#׋a9l`!3]ܖx´GoO<߷Y֮*7h[{ĩvz3@<"|w;)vKZ|ws08_jB5MBG:'W!ν+ԕ]sŢ۪ZTIO(VgXd. |b.v D%U'G!& 0l`24C0e@L(LPȬ{ܥMGkU*cޔ2i%Zxwx:R8ߡSZtLB-r{>If73a Ƴ@y?S4uD (Y8c[rmAr` .S.?p=8bb[w<[EQx4\c&%ߣj8$ Ňv4qtn3od 3l$Ě➇gQqM diq1u#*_ZFv҄IϽNK%}&,| +Ϲn]AZ>[MEWq8vj\K<2r҇[$gi!io[*{(H\7c(X Hy#䋱N֩"~{gk%kc8 +w kV8V\ 'MU.Z~Et &~d+~bfuꌆқzOaTqV)G6>T3sO9R)v(͜iNt5&̬K 0v5{gm1lGwzRkK Y=~> endobj 4147 0 obj << -/Length 3915 -/Filter /FlateDecode ->> -stream -xڭZYs6~ׯʜ"[oV%y 3䄜@l@_7/|F5c'% w,Ķu[e^\} |+b*?VPnJes_\:ny+9W>U;hqnW !ͶqTU:GׇfWmЖH` &i`kD,7moGsS<ߺ0'y.f<)>R*E&dȼq}'2T -uCPsma|Wןh{źŹ/㎦.*wz2y~oN[šKдjks0,}e p/({7K@ T -Kܒ0h*~%(ŜdDnBXPo+6qYV*_–+J4䨾8욻⛫s!A#_b^! -AJD -~sn!^y#_*}@8!XMrxtE -p-ad4\aRPOwhDSKV:lGJ XR+i;[yr%L3YX`p; -f-iw%)V!ͱ|k,hLz$W,COeYԖaެeC}wAƚR.~Éq|;R@Um' :ְ֤LU MTxv,gF8:cLj: v<3r-t>IK*$}k~ {F`_)&ʒe+WflWi<,W{]J Pi2~`+thbk#M$?E:GIY6M(o#Ur|Yg%VvかsWrk >pЋbz5^$ -Blldjq׭ ]yHz̷*]/z뎞4IAfhq60sbMJ\>b8v^([PYH8({lif,Z"eXBEf;.Q8 -v՘ s;lNRŰ{āN/<=0$<$$ASX=K,Y5gS?$4| ?Nz5Vz쬥b\()- W*#K|K@3MMHݴ - HKBg(y} DX^yRnlJȰF\G1ayܛMr럏mȯAF.CD_(%1%`5&T]^I]m.9ЙS^t$ֽ]!Z/VqQ/Fv;!88@Emkg2`[:֋ iE I MQF ?4O &I?[Vd33 0 6lZGtad",? B&aBϵ& -~D@ D|/+/{m ъ֚7H2}9qi}V25J)7T:_F<~ǯ='AƍGeYlCMsL.^ZY]|*1+|.Kjw|uOaI:tOc#x XpY~xL:},5$aL>LsGn&H/|%LB?7XeGK`޿{&á&tTGxw5z[mȇBIIsby| |6tRgDʩ>R1?uL|tO 9ѱ|"$fysn]vE:ث,BPl[`EzdvVq]>vwxtj^_#е8 533]r.endstream +/Length 3738 +/Filter /FlateDecode +>> +stream +xZYoF~ׯhh(yͶF2@jp=CNH%o]ָNccЌ|uILhҒ6 FIrU(82b_voV:t/y݇k&+MkqÁԍ% wm@[X "1T+Tv<70wsǍƓ眃p x`;)_# $9 q/NXT]zZc}` SQn/3tƤ-2etejF;d!,RU. +O0;Jn: onpc#7+1pc +V>2AW493P-U_T=_)8 !}JrmYw~. +9;R{\ +xWKWܣ_.eMoF9ڦZY?iST.P n/^@;nKޖ0 T2Kf*nNO0P980A ⲬTl@-mW$DⰫ.Dt`OCBd b-5O%|3n!ЂVC\:ʹQ+Z# I/0k@B`3 ϋq4{%Smuz[|Diذb +EKڀbfL (cKBۍé!ut7o朆rc;fKެ {RwlF͢\35}ztV)'@JE&$/|G&o5I.AOl;q@@oerG]kyޮϟ($I: :!,Zr`v5w]\=h,-i(ȌKsp яZr~ˠ'WQfrMnDz0C渔aS WO%#$ʇC3֌>M_-y%3Yy:eZ3SºYGZ(JU]Tg ύ/T "u8t9R8 6TY{9U_?pd$F%9p\Q ymruij (Z\YIt1t^ (6 +fԑ9]fGIRY 4&> J: 61h-av9@d,(mN&ԒN\Y[a๝YSZ ,T$4-гUK{%zL7_2 1`̮bu8#EڀGjõ xwu6#f:P!9fV.iM |M~( rs0Z~wUp3zPrtJB%;,A^B`,ӈX˹EdXKn.9`T] ^R螥n\Os6 >Z|+OQyM +/@EGˌ#/&nc2q',XZbZM>8"8~`Z^+dʩxv0PFP 鍉r\;VQ}HmXEaL/tek%?㠗txmqƴ 3)ub[.Q*AHj;͝î)V: @d*p+Mk B't8I`+$O4{򇍳9v'UJ~ :EVz+b|!- R<*HRgXQ %"wZ+0g*Lia)RGc B ޳}ǎ^AU2Z=J'>11mt>m*]^ڇb|&'(<Θb3BULŜ4MBj6wz:u~l斤w/tWVwu)J:γ˹n't\>+#@@r* +;c=ߐ%_s%p=u屉?Cof.f)>j|j7|ٝuD?{%v o÷/EeR}֥VA +&z#{FLRNҮѬmr6{%Ho +;Vs*6ĵ5NQaktp?y]u^ `?mlZ*p2B1/H]#SV> endobj 4153 0 obj << -/Length 3486 -/Filter /FlateDecode ->> -stream -xڥks~fLoqٮ餙D@$"P@z<w{{{,j~4K8T,`gJ p`^\I -Y_=uTnmSlgepo6ί*5BΣEANv:y8{M:&@nԗy:Z8Ȉ1#u N=o8"QEqW@aE/Kff&3Վ ;Du^C(n`x_[nꊰµگ|(vDy7[1\RD>b~={Z`GWCd (I}ڙ%D" ĞH"aEW\Ăv #P-ؽYyPZ%CE  ?LD75&1(*X1ܷptJ/e_T$p%%*ˆ jo%_{3WV%n8'F dقwFJ7,;JRkx^D -{Qn^nZ*ns1Jw<*vAW8w#}KƍLO70~˹ƻ -q2pjv]EmSW SS?N]pfKz 06,qlW%|U(`\rYYclf= 9Jdyׅ>yx1f԰}\`Ih|)j#ʷl ˥I Í4aJ;t"fwWvtfە#<p̉5//Cv}Z&P@LQxDžn%@o898q>Nn;q C&< - ?j(J!;#h/00d|xC\Khlec !1nmg&%]|M,uQsO`XC #ĤSP呟Clj_/ -⤆92e7OQ 8 @H0-T-"HBf%dQ$2=G2T|`6@wb*KP( QD9]Rg:x2RIcb&9#S,$>vG|_(hr2QSΘO@,ӜCˡ g{cVAOX (𛍙WoA3IP $>f9i\\q;&WKSfۭjb66(M _q/!C8Ҕ,ͧRrKGom(Y9医 R͒ϭwS$b~6֖z^!PL FźH)% B w -O^W/yܐ+f_VC1XUx<7xyB0MVF$V0|\Q6&X^xGPd]%ӡt͡hr`7~ꈅ{ۂ14 -&al<9,1cE'`0w &o'Q 6M!?7o-\VE*{KQ=Y*2Vt K9T$F"Q-m1ALo#e9.䬺8Z6эv5fsq#Yyw% K9=SǮy)6J֗IiB &_)O7Vӽ_f"a,Ð:Ec4I{_0D/E';0?>efZ9h~qOR%O5"L=JIړ*6A! H>5Q&nxA)zw9 0@-ͦ*:A1C/??^riypXo̡HK>WMqsZ,*p[`rn%MQHX=1|-ʓ+YLp 5 Tؚٚ+$W ,Ltk.VaQK 6*Hן)HW֏z\Yc_~4] gVV ϴ ݧ6A) e./`7P Ի:Uv~L lzd fQSm!M>{W=iƙ[dX-&:Y8ˮ Gq 7V5$HhsHlz8c y|'E[UEjAVH;Yƈ/T85rk+^DGV?5}`pRT ༨\09ڧ !nW:͞ԏJaNRjY -(||ڷ5oj'Cߘkƅ;[@e$Z{sL}!]Aro ] pxۘ^l`y #!3'۪q& hXLxau؋ -#_c/BΚţޠNNٺògb^? yI ;z1.B$ʢ \NpQp}3\d - -?(L?~Yh[e~|?i9P0! Wendstream +/Length 3269 +/Filter /FlateDecode +>> +stream +xڽr]_)8BdNDk*u:i~}m hl,vϞsă?h IDbsM/$tHWQ8=7-\9/~8{stY'\]\Kx>Kpf'/B7<ϓ~&9\ dct9 u0 5B,TbqA` qyݾ3i?dUY]mgyqZg7euzI;}hxĄf:SSOJ;V:pέJ`UU)4,r+jy%+*箂QA!pD4 +_|I +L{~ɋ DJ&א8 +[XVS9$p lt Wϳ3C&Mf* LQR>b.~v㎖҆qix_ xWy uz ]W!( fgV;d͒0" /So٭dD.e%W{!CӕNu G-9N8G `!X\@Fd]Zl`ּD_^ f.G`8@v-H]n#<2  K<tQ2_MX== Ə|O0h@Uru8 +U8 ݺK*ySF.:/цDͺ"o#X68 R!V@ܬ.9ɠG&3bFMe̗$Z-1<|zvW\*;2[3f czIx, 6k[:nrv:Mk$- J^E]["Q8DnwnFqY +/h/)4^ıiy@N9^;d̼U*++)4U88,9@S_JQ7$_g<7ƄO/ +pxLM\)pznW\T)jwYN&WEG#GX ]5k +K J1-Vpo gBK 2Mjo<O3=@ѠJ^)[@u 'A:u5ʈDڍ }< Ъ$Zh^XsF is8a1q ( iyHF1dU ˏ)ٛ \Hk~M^l:'I!GՓs?1 uiQ@tz))M)CHiڍ&hpvz@ʸnUSze;xv?w= +)~&BpJhq+)A^NArcHBzsHd6Ix^4EP,lY4Rs^ d!>lʍ2``*/J%ā8`ͤ1yl <*{-axs(PZ0&;e%'[HJgC8n226M_LT2MxeXb#b:OG`0Qȉ7_WEY8rY&(T%Ó?ُ X|hxRR +b=J˱\mF6uSUx ~3\HYqPV+7hylbkd +cqז>dN2B +EsaxJga,e9/Ma@oiJ=eE97*Ic8] +KlBXNMb pG4KK:KW*IFJ[_ccorO>?)͔Xl la7*LǴҒ,ٵ\]<,`I~9咂:š]BERƬp}!N$8^i +LB@>`N*Oc%m/ +ᗬS6Mt23UragqTR]J2j oB&S9R6†;[gbQS#DvH#'u HI#o2+`ZdusmW64U D +2'X8Fql"ߢۿ &wkI`VU8Ug2)@cq׺bՉj1_1[.޷Pʽ~id@hsx̙p"YM,q^˭D{R'=Z#P>Ɲ.x>Y,7gpRT)༨Tyo0`猼]>ױ* [=YǬ; +$=k\P߅Mdk$q}c40PyC1r#6 +:K]HΕr83LsBE՘Iu-M8jL.yݎN4 Xc?j%.TTZ +Խў_SD͹MXhyƝΖDV'>)3źOHZlLYHO),žEo5U. Ø[*> endobj 4166 0 obj << -/Length 3224 +/Length 3109 /Filter /FlateDecode >> stream -xڥko8{~dV$cn]\v{M=$ؖW߼(QpRp8Λ IF"X?.BX ʁmagAdoxqS|^͛˕RK*IRoлzWzs?-W:~~旋77=R>H"U.a-(h%ߛxN/xi-*,29~=G" HF -EbXT c u{(<LUS]U]7,CgD,u}uG*R8C\zDFo ڒ(w~ -MFz%@) -yi%^RҲip|`9G#La;t\ksQhkGwJۜ?!kxPly\!PCPAvI=C{W}{ -D,{LqWe&׈%ڻ[ B<&E' -5HWYyr/!{ag@$UYwUyz7 Z{{|.dJ+Ckj"0Y-8ADs/cW9IzXL$q(*f~jOB@)<<] -q<ޣm!㍔UH[.) lkciT%Sb2:8tc--Uh;GDSW~$,/U=20x o;7ùx+#|kq^j2W Ы9D1|ilXNd޾I{,q8uG -mث5|%AD& -ZѨǁ]H,(D h䗥nr?Uh~620C@Ħ -<ܔNb>{SL/'7c,R ]#EA?}$we۲ 7sˆg)`eLO80`(pHQ%Ƃ[ff&%tm-Xc)#['OƄn*LIEG'wyKBrM.$Oq>+*ڔ,0Z=3*%ı AR~)J,uL$80jW^ -R".Wt,ԢtR6Af,p$kpԊ=3 - %'͘>)g g(G)_4%\,5~,ª -3H7ww9,ڸIjT -4wدuW~QhP4%,(\ fmQ0- (+xѝEMVy DgRH}C`:1hh G \YA4-ք BV{8lOj < -f1ȬJAs\TL'SBȃvdseG9WgCYm p\}k0}eǎ,y;{k0v=%W{) KQ"(mL`bۧMTAY|Է{wU'm롨 Kq -!crҠi?݄DvN2$~Ʈ""+}U[w _tՙz t6T{XÏ{^Z9yf}(3+A+4>L'4N0ڌsADk0sl播__: eG;cI= ڞc4{o*[%Uю73u<ZVh(w晪9,YFwxʨycOQ!WUy::'AX#kFUlT6Dp `Ol&2VjPhŠTlIX *I*~ʠ|CdnX毢3II3?R)f>TAօh~e)e(~鋣~`K!n= ué(f˃ݐW>[Vz\%=*y?PcqdۇUr{ y^S3Ⱥs geE_Qԍ£Xe`7Uٳ2 -㲠/iܷ<[D띴v(א p iqd-jxcvȾ(23 tpD C`C% Y*ׁc)\R؜\+k5)V>lMq-1x8:aJڨ &endstream +xڵko6{~2f hlnѴ{~P,VcK$o6EZCəpf`_0Kl2Q0[n/ +F~ßi~|Yf7wrS|^ͫwEE^$I_| +/t]n-qy?+/|e +l&RFG򽹸[gM SYhpDI!1CUK0n}2Y/co]b5v7y'ދ/U]< v{q}w,9TQd*#Y#~u%m~\"B"`<0/Z:Qo͗8m  -}{^$_2uwyQ+ij;}Ce @ o6 0_@{=r]ql[1E9nm/x. Zႇem)!D7 Ɗ-gC"ɠh9MQ4(:1ĸ=%,ZX[kD5*ns,-8q|9<ƌ ?jˎ:"T5+w]}{ \E 2 vJ\&ڻ=ȭB Ze5HgytNB9,wUY|k*WNh zk@"XȐeb+1-8-D%:f߂v%~|™E+[&=BmbrV;Gf" oUbdY܌6M._GCtBȜn{@Tw7ZVEgBpdu vnz588'鱚\G.M.,}PʼnFl>(gt nH˂Gx-,p.dsmd3k`D7p)f/$[)j┝GӄH4# G .xPJ%:Ȣl.omٗm80;Rڛ?:ssSnBˢtY7@'x촸Ӑ!4*1$z,{2jT +BWu\]s̱ <8~Z@ Z_Qa6/9 ɝyd:%"-`Lgc(ABLf&J2o6dKZ8tGm~>IXВ ~O +*94ABHL<ڲc) 6%ҧOsVk Bf*cRa=iIA~Hy=ܦ)8= PSu-X-Hf[nIF@]u|sUޯAI*Y$Ƣ/[Puf̙h|3cйg''L =f맂T =d.)VqUFN1f+D?Ur$#hӘ]#DfWW +Ջ,NgD^Vu0'5^y +fc8C?D]r6!'YVس­ZH2k +H=mZd tN5d^@v:VKre<ՙL[BRj&zZ)g`y}6q5f9ußo}6vo1~dyoN$skjʁ4̜'٥ws$B +R˸Xv4_ + KG$RZA4>,]ZB{rPNj҂un3B?nFd/q*엗C1XđK*H6X8R:ߖ,b.D#g#>zB·񡿕Ele(Cؑ(Ēb`X߯]lARU'6\4MTݮ\&0uRd9f6)Ɩyoxzs(<*(i%d 01$ZP0P +n?Y!Hx}ʴk*UTTvW09c'OWwS\ :;Pa@<>~xj5ƣ )d悗 C}/gWA`%#Eٗ ppL`›%e'T~ٹj:axiM,3/0 {w=2M[W4wORX=S7C`I϶BCY/GTgɒ waD&:9s2΂uĘ{ȜQX?*`" +d6Ee]4Hhtb,"[س=镤A?P轡1/$%?VΧPOHa)RT+o3 :Hi|t:8} 4JZ8rVG93`&AzSf 8/H:ŚAiY*h{.B;c M 8TcqY='l{)q.xa J b+Dn`ƞ?eQpڤ:/; UCVgpUGD!|t($#slLFiiMXLpHFGW"ا+$g*ҒB>}r_L3q$…Ip$~L9Iܺ=]ʌ ŕZٹ (ݖtO 6E 8=_[% ޮ"KHQ, +cؑ!ֶ`09IYa)Ț@+s +20vOK1)_f+BJBC~eYIȺmrM,)=pJJFBU*)uG Wce vmG A1v Gz\)=*49w/Xx:BF~W^\m\> endobj 4178 0 obj << -/Length 3139 +/Length 2895 /Filter /FlateDecode >> stream -xr]_7) `fp*Zq{+$ !e}ܤXrAs4z>/<q=,8tUס^xbsI<$b޹zrr"wY_-}'_| >|dzRxg-v@3UIxI؟i\̋xO/9n-O$0%n腭Dծ!JW"2 uD"\r0:qr#%2L+޺ɪ_h:&9$ Q뛞Zj!j7y 'ٗU;$ m {D*=h^F!JhMǽTNK@9Y~04Qod~b1}:-I%+ ƫ5}Bf){᯶4ٯ (V' -m[% n>U(]9CJ-pV< yCAZ'e9+o US!Wdb5ezxGrMI*Z} -Y%8 J@ -GG NCI -,Žu@ M0&dr{^9(öʉVps4.]3x7T6YGShP:5ܹtu <:iU1 r#4=qvw[魾{>[P6PsRѮ -i5j.^_~/>7GqwOVc ik킫>5/x>rz*G70S&g骭/|JPuਅo -@\#A$c'teY?Pn ߷1O0ǺFnx&5OKx GjxZ$&[w[B: '5Z఺jːqm(x4LpE?8m5btp++L\!ANVʈ 2lhq@=&pP8)JnE[Aϔ#~rpACW=1Ƥ Ոq-0xE.ti(jE?,|-oEH|lVYj)de5 @lu6vrCp*Iք\z~AHI ?G(7q -NsB#&BOys_Et764#n[Zyi6=#DcޥRmC&A2 ~͙a2h`2VDҊAoњ JC%om,Yф^ThFi1iÉ샴(LMY#c[ -dG3^A2 AuiՉ'ZJk2xLCOLжKlm-Ҵ? nyR_+x;-e Tza>LX!ܛ:s%[c3 C6*#r}R+uY -!8_6 - CXP_}} A:[vs4zbQhFBo]/qρ ύx4_|޹nxrBw< șގs}_]x"W0x;ūy簉vu\V@Л Uq4z8.\_+3/fhW$ *Պ\F%k+u{ ZԱB3O-tzeU'4aaN$;$9Lr1$@A^#'Z%=%bCD_Cr3`t~x>dDt I~Y'Y +T;c ǠJ1m:һƲmVE1ZYN]owt O"n)r3_6vIW>ۧ,r>CYrF7nR5nhW*[X]Q|lG9Φ[E0lx=HJߍѓ7PGCF '8Oplš,,^$H:=_ l؋\M@$q[yoMHd2 +?#5c.X8qAЏx;PXx0m բ-xoZ$ܱ&wN5܄lR:^j4_("Rd/H<Q/9oY` _ЁCs͓z =DkS>nLԹ`"]%p6FiơQN'DƱ:Gjt!I~0T\*šQ ]|ӱ<Q:.& ϪcpXў2@ZA)Xվ)ֵ;CCyG%p(_J&Z};c/)2#C ?3#$_ j Ft%en 7si=(ie?*_Qw凜fw+V bC)~JD߹j)Na~,_ 闉63 q{rz% yɭ ;AE$V8YXXb)V&09T5LNp  liU2ps]P_:vc A>rkZ{0jH*+q Sfbr wB^vZˤ4Ӌ ߸a8*nYS*x}eQ+fc :=JЉI/5t,Mq11W'+J >@T4LNmJYLtLmjq_d~PcGoIS' ,lcZ\)GO \d&ij +a+[9my87@zUAC< (dI{o_j +Ieu4xt^B&"i"~#E2bb_53~IYg;:9p,|!Ӯ1ݜt|NM9GendyCfxD]mcS}QZG<Rk̈́[Ҵ͟w y 7Vݜnl>=#vP1>]aRAfE8mZcFE>IqTowrdlZ)ЄF+'%Þlp7WL%c@=|Iz"73ˤHLJv=e͌/s_zQxu$脭bۆCI763ǚB3y!YN/{ Iτ-y/Ow=ok`}yt%,?9괲rLYendstream endobj 4177 0 obj << /Type /Page @@ -13091,30 +12992,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4190 0 obj << -/Length 3631 -/Filter /FlateDecode ->> -stream -xڥZ~x|? -v3z-|#))E^Hg.(A<~3Ko["Ic' -Er[-onÅ:-7fu,^<?/_p:eI.w=<Z{˷݇կ>, WwQ\' ]˲*' -yapo6 -R'Jz]I9q~wUZQ~a;jWk?]ܯ] ѥ P,DC˃i"/rl +^'کe RVb-{]{(`nܙ-ˊvK3t܅[ZU |ܡ (~njP$#4^5_[׍*)mkϫuG˦Ûm:5_U߿,hqmm4B8ghh]">Y|0UEٰZߴұ>ph^ƖM7ɾeू'mm>e+e%Nta'p$~>ofvFNi:u,,t˗3m3 --fNH4CsC!y!;=$'X|E[6Fi6Kj.6@jޠY'LJltYqg0gŎG1Lt⯀i* ֯_ ,*<6s}c'˼f+rLg)~ޱ~ -}s"aR=%ުYVlE`7\#ȸ#*F]N`RՐ[`1nsU3d0̻r蝡x miMpD}tb@ΤЋD - D@a-l<͒$ƞv8^ Ms혰2j -སp[LN6?t9LH1 -/=^I+\c"ʔ^dEI )}<СdNiQeeOA -%Rq~w؝!0w=,ޒƶߓ2 k)c+~; DxP!kzmXɜ'NX*g\D!Olsq֎R'c̀ Da>& k}=`sm/bKaBj+(w')4oF޾lDB$o,+l^iEQUK7p͓Z/ Y\u{%v!d$c+ˋ:zk?ኈ#b:b S _zgAk||͔V-ьLF /%ZL״=:3|83Cy)`,g%ӎ`RM"ˆ%< MKj? - Jtϐuk(%,ȂpC?Ϯ٬EÉg:D?G lQHd"<" 4W9L~JH`*Viaiqj(W1AJovZߒZw3vJf idŅ$$W\ܟ2K3jʙL.s_}҇7lIGca.rT*'ܐ=_A[)yX -87@%T* /(eu](e(|{芀 j(i\b"BgNi1{4:$,h1sm{":G["@W~}$"s6=N|0&v8\2SNt)?=l6|YJFSYP&Rae|?s҈qm2oRO5b$t=Сt_dT_7=l;qZ)t d&dzfbZ k"OꩡQQ8vgêȺNa4٠\K[YѡI|tzRWT0qXR3y}iJj6^Hq9a0[DtGS S'K/\F~Đ -3(8> +stream +xڥZmEQXkEz+KzHkɶRYHQlyQ噡‡Z"Ic/ +b[B ОG8w^(lq!^r2.WI.xo>p[xr޿xw,ҞC\90,]] ox]M"[}Agڙeស9r)+t +{(s7@wdˢ -wkC~ݴw(|[ fP~joڼHl04c9)kڙ?ӺQL}Tո+ 5͊O9C0}![Clu=oFz757H +{x?bg /;+`ț=nG-xjB +5ȶRqf75WA4ʹMrѲ.znFbkuϷ?~|F~z˺MGuO( ZpbPM#+S&@C1ģO"/щPvaPY7ұ-pQ[^ƖMۣ/ɾe੄km7 BsK llpҖ7\a_:MFrQEHks"K$+3k2LgfcQ` [&:WRfC([A?юJd}|8N.%q4we^&>kA$S!~HKV?Uj/̨8t0[ /HB Q^ +ƔgG,5D̂ /Fh17ˢg-lÚ[ @̝\8鞄RxA9 z4B 3qT3gO@ +UA1(M~ ;P'8fBDHYjkD8 Θ# x2Cɝ! KJM@>⍩-g6DZrL lӭb1-eSi`1$#lb@jI)J%[?:|A/ ft -VW}C]ft1tʼ ҙj"Q@> ܱ ]֣$yeH0u<f R-N 0ђSo]/+ v) |6$4biOe}] -^'ZW<ӮSFM v0%H҄trҶ ayq-ޗ ja7 ~L*8؇(Sg9'1VadNyiUbIe\gg 37&uON?%dڑU@I6ؒ$&wҾkZƋZZy +UM"Qdy. i &LJ~t"sG'+cWF%+~p/npzD2{sJE$@O |VfG~\FN=T{Ԃc <J7E@䒔 q"1g=⺩b-1#4 +8[l,nO8gJ*p#hV5Qt8&O8Ar(׫L9o/|.Hao1e  -1ɏUC"s /LFq" pvgLs[צ0Րy" x%I !mpɟZ@v;Y d+dzݩ}06jy-D>*'9Q9',UJgEs h W9 5\l<$9>D$rHvKpmZiO= #l&IPX*B?8$fIn_endstream endobj 4189 0 obj << /Type /Page @@ -13157,24 +13057,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4198 0 obj << -/Length 2129 +/Length 2021 /Filter /FlateDecode >> stream -xڭXYoH~R@ĞOI"d@KL"]:uژ C}TWWUW}UEIS^i/CMgқοΔ;ϡLO"E旋wW1ƏhE~w|suף`p;ݯgWw1x׳O7Q=$c)Tx3X=/޳:m`bf_] UmD^3TJʖMZQlW )Sy)/DB.iYf;ݸ_wjo#׼ǑrN.o+Goi9VhT[B1T 3E,,ڭTZV0+QP%md:[n -(c0O!8mk&gm/;b!|cRMn)P@lCbҧGzjY6) -32@6#J+@PM#lу|^WrQ 6GcYQ搆+%nh)Q e|l >[pw 68ʆI`#Ge4e(L H"  -@0##LB7SԑkWO i0`LoԢ.+-!ZH%BD(j#cvkK{;@ v rRwF T>^7nstxXo.Z#{VR$F+B[QmE-GW?J[0ۓ'"ޒg;g +pK -{@sŞ"2uԧE剢]VCLדsXcӂ(8ۺE-2TH*?߹,)ʢ }r$!ĉP_9D:Ke,t!C[o'g?Hd󷷗7S}7S/bTWyϧr/ap3oc^ >O>|m"#PI& |;/&[x/pԈL^Cxq)3"y@ TA EƁ a:Gv%/%h2^h*-ˬo6Yec<ܚM0UTNui;7meydB$$ڊJQ(dC1\uZەY*J7pf%2 +m^LSg띒4Pewlʀw)6+m$ˬ6̤4/#Pmj4 Kt_:m6sdg:%K (i Ƞ0_>U= 6咽ܬe3&ac*kIF4z[Pv8&& G ގa=0GCᑥ޿.vP$.DQJ$ uN24QBI`L|J9pu@<7s aeO܍8*]R~8gB7=5eJ\yP +y XX<}ŀ4)1 N ߄SHjp{tQq]HcFQ,2*-Qz_-#k +ʒx0U9^_} +l$tdK1Kv(IzjPHP#:IҸZy:[a0`<<냬s) ˱ 5SB_b&А7º#S]&o[ +%Qa/$XN^fe,+O@̨iCeEp,qxG-(ja-佗//pW{E&2cNݞ%cr`ң Å8jGOz)WβvfN!MͳCNQksO;i3r } -مqZoS[* +6co3a^D~ i_WUPO8w&ORsr2h[Pލ!n._]ԭ&o=tVeu4Uh̚+)4҃ PiȢ妶-ϧfp2C{nXe2]eҮi9-ݽHLG%/-J O;alKpUdר¼ +uu|*)E^{}9cGY* F$͎؏"{Z TB d{iC% VQ0 +@aժXt +" $c^La /#pP7YROD~ԃr=B*ib:R7A>-&辖QCPunv$O>%ƬPҸ+TmyKE4!闌GmU҂}k/jycG$«e|;"^Hh8a.W_>ozxCʹu +ؙwQ6_K(V|qɄDqmE^w8o-Ob-kϴ-izmۛex`փD~ӐA +fZJD2@;'.M  +('PjWUjIU;hovoHmTw)S )@[ތZ>"O7E|$oXo~//o_޼ Fu+?]÷:j8%cE7hA0> endobj 4206 0 obj << -/Length 3111 +/Length 2748 /Filter /FlateDecode >> stream -xڭZsNdq8ERF__^O/~#`@=&'J,43ٿ:\NF'I! U@Mbc(ߛYy^<,Hն٢*UHlӂ򧷳0d -50pB;k%t챠^--Թ\>$k!26WN6fo`XR4[,oZ18,c:0WO`yo>ڤc˦^W$>1tehGZ{qtjDjb/JrB`T3VQLAaj-^xr&Q:!VENKI`u>U@]ja -mZAA6P։̀4 VdTV2ϭ1arʪ0Ryy!;huM;LEx֢Oj}޶̈,dsQ˼pZ80V!T+"t]d޹@щ71D_ʙ>fb&P&fKH zx/$H{biꌩꐫ%+b}*S}-{d ?u# k]`rFx.>@uO)t:4MN@;*aq:9R,bo?RFpţ6fbR+׎L^OLGnArQ)PX-͙OgXnF\EqUne\0%"_Ey." U d7ym%86km_gﻖJLΙ 7Kt*4[5FPi־..R&K2N>YvIofeuqU).q%/YItR!TPhEyxtb?hS$Q} i^˨'™ BMwꯦblⴜtq3`1/",S[N_%XOlq({ؐ,h|!c -W.07Qa%tQh7c "2PYHͭ G^bh/qF,+%(*A)Fr[>5xb5lSSQ"d@%!:j/Rj& -:~ոo Kr9lW;unN* ?@\}m]uu~ʹ>'>ZMQ6č j}hs٥u -[[6Xf:B3Y=V']r3q4n4Riqu@fh3f7\]+26sUZ'u0j-bw{A*K j3ɻqnxYoB 4>$zسVOv8 _zhoxW]%*>O&?ۦ-3.v: @G?h*ȚTV؆+%\ hzyQܾdeF`U-;|ᇦmk#~~^Z éNŪȻtܜ`πeXm[ce9<#-F53@q_ \RV{Gbzm:ǧ@+1`ཪm+:F 1K29?)# z~0#[;x\Yh|WҖ9Z呐hGD&_2g /MqfG}_R_Hmendstream +xY[o~R.)Rⵝd];($l+f%.s!)͌-Px=2Ѷ:R#~18N?W2ZLN #?թU Ƞ9 ;KKGGza%YYo7Ly~DYƗK~8y2iB̢ŧ +Lu"͗ͣ#[:Byeeܪ+ɐ yoA C9 4Pxbp@,tЮrBq.ʞb7?Tu I{i wnq@*YqfìО > IZţE r&r^4aV}}ŗzt! oH+Bo%/7j +2 p ЦDvO pD<‴ծݣ;qˇ@+U8\;;\lyF#PaHNZřȔU/^5]MJQەeM'|ƺ 1 #ԐVfW#UY&| #D02PanWsa#Hlۍ|I@ߚѬβ[$ȃ}Qe xc;p el1qh'kvMٶMJv S \՟ Y'^H08#At`-ۻ Dcg|vj3u[k҂5Ҽ_Um$[jc[}[ 'I +fs xao??w 46;avdrzZcŠ?̏e&MTKC/?k6jaL mG$? *C"5 >wo\; յLJ2R?-!HS"I| >$K碘s-r@3i)FI21u q+Lv3N UzɶqpP83Ʈ=RlS46QuNu\'SW|$C +ɉ2F9-9$G4qIjsh,=K6PܩМ?V& )cqf|h(x*r'>*1t]a0t_oa%G@OBd^C$V|7q#=+6۩F=Eh& rOvq*m'/א#)iO[ D|8o;=^I!LɅV\ f*V6_gZ17i,e*5VVc1)sɬ [t4U߬2vWq">ʼn.9uY;G&j"I(BO!+ѷ-5XlKRrb.ví%KPxyػ +0CXHt.˕ZSŽ; rŪZfI,.v=vKe'o2V y`z1筮m+ [$ UR\힢*:TtBMd(Pp4IcڠpMC#v(S@8TKg8T"C] +( ;C-šQf^6o;WĊ4~fsT-t,2g% ~)ezgPg U>m} + }m(ÝŸ0@˺M.~j?\ +eaMYX5#~!Lrfm#M!_a9k[Ɍͩ:xKfibu7[D*դQt9ĝeyT 23[z;.!„Sj,aoKpޕ9x>vv$<=[ph{$i7|q+wiV!#dn7Ih`އ?^SO)I%ٳ||Wendstream endobj 4205 0 obj << /Type /Page @@ -13248,28 +13154,28 @@ endobj 4208 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [489.95 414.026 512.306 425.715] +/Rect [489.95 370.389 512.306 382.079] /Subtype /Link /A << /S /GoTo /D (ads-test-smbclient) >> >> endobj 4209 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [111.316 400.477 183.828 412.166] +/Rect [111.316 356.84 183.828 368.53] /Subtype /Link /A << /S /GoTo /D (ads-test-smbclient) >> >> endobj 4210 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [214.276 400.477 356.796 412.166] +/Rect [214.276 356.84 356.796 368.53] /Subtype /Link /A << /S /GoTo /D (ads-create-machine-account) >> >> endobj 4211 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [380.57 400.477 476.48 412.166] +/Rect [380.57 356.84 476.48 368.53] /Subtype /Link /A << /S /GoTo /D (ads-test-server) >> >> endobj @@ -13277,49 +13183,47 @@ endobj /D [4205 0 R /XYZ 85.039 786.531 null] >> endobj 386 0 obj << -/D [4205 0 R /XYZ 85.039 372.659 null] +/D [4205 0 R /XYZ 85.039 329.022 null] >> endobj 4212 0 obj << -/D [4205 0 R /XYZ 85.039 351.462 null] +/D [4205 0 R /XYZ 85.039 307.826 null] >> endobj 390 0 obj << -/D [4205 0 R /XYZ 85.039 270.776 null] +/D [4205 0 R /XYZ 85.039 227.139 null] >> endobj 4213 0 obj << -/D [4205 0 R /XYZ 85.039 250.181 null] +/D [4205 0 R /XYZ 85.039 206.545 null] >> endobj 394 0 obj << -/D [4205 0 R /XYZ 85.039 150.632 null] +/D [4205 0 R /XYZ 85.039 106.995 null] >> endobj 4214 0 obj << -/D [4205 0 R /XYZ 85.039 127.314 null] +/D [4205 0 R /XYZ 85.039 83.678 null] >> endobj 4204 0 obj << -/Font << /F64 3112 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R >> +/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R >> /XObject << /Im1 3957 0 R >> /ProcSet [ /PDF /Text ] >> endobj 4218 0 obj << -/Length 3383 -/Filter /FlateDecode ->> -stream -xڭkoF/%w±[8.r^E"}$KJ11;;;;HB"N"7b90_ V=},|Mtq{o69rvbw9<|uqw˕\@/?o=H{ǟ"R=\&h{Ij7 [\<,xiCaq}_W8 (e\(t^*q-wq/8 -@#e΍,m:H+LL7Qwdm3E|g+ MD0^XCQ]=y&jj^Oϊ0fⷢ3GEX']Sd!{@< uSa}tq:֧HCӋ6Aa9"~j.M30Yy8\7e]Z8dp֣$]F .mp:=+sY'#5fgLIYw}VUoQX5Iή3~N ̥#lKv[ÄHcChLɿ)hx3B F]Y0{iO>A}b AymE^bYv0 rW&F03)P4d%:#G"g|ܸVO0yR>?Cg1$;Kxь?ױN2cp b;<? -QJJC4(g2PȁAOX𢄤| Bm6D@X&dbǒYPˡK@'/f;լ@EVMPKbŇDs"͍P򟦔ytjSٷNc1!ct(lĉқD@0Flc)Df'͌ m䇸@Zmv2r90U)gk9v5٤/T  BB>MɲG u`qO-ϓ _XBB - 8ʿJa0{ k/) E zੌS>.,)[!A -&ơ+VޛY񹄀\#D.#O7ɀcLI(5kBmW1WYf!f$&0,`L\Ӵ7b8. ʹ1+sԲXPJLUY?i/\ -b*sO#îVia8vJ\-8U[Ǹ$`#/T?t9#u93+pa91+鎜RlƟ9 -bs;5ŗ`sE`ǸdL [}LPrC6Δs.4:Q  ~v ΖɠEDSz"Hns箛~& =War3{)Ec=q*.pj\I6!@É#i<.2ǩWN ]i2z1\`9Q&bYO2dd&l$'dGnKzGz -lv*/I0AȊܫM;gb˚sGV@9o:4ϻ -`Q|Ak.k|H0%\QWU^tAⳗXMG{P -_+Q ^[yь}mrzmdi̢8W5X(Z-/dD!M6Ƀ3TJ&yaUbäk)4Â*4 %J\P}G6lGwcf;>ZC8@.Rw G3Bu`Xux|p)=nIFA{[E~2rd׏> +stream +xڽr]_) `׾dIjd+RNjUD\O_3Uk'=Пx'Iz*Iʟgd 3=›h׋Bz{HO|Mtr 7әRʉ,wnί Ngsw?_N~gvup?~ݛ@/gdmt>ӡrC_ݝb9=U#J&I, tM'ز:űtwk_4A? _Ņ؏P-2{}uK6[}]$wBD Sudbd# PSz:o$>S7iJi'E&.RR|hgHlH 4(qbK0i[LIP@<'t8'˺pxxY=F&oC {V|NFkLIYw}VUQ81~ͅrEݢY$DoWǧRkd]9b=UcL5r#=^KH̆3ii`߶Mw$ZQ}+9klL7|X$) +I6Ggh7Ho'W haSm̶U +7X]c琴Guߠmg{| _lШPet7\"aNh1C7=]}IN1eXN\m3UʀNa\Vڶ\"[08oqyGk{k(kfXfBκx". 7[v `B%t{`l#A:̡LR kl mތ%8+zki~Stk2%sI +r-cb@~hY8ܡcA!w/(|A?tM>PD_]ؖ ++!@c4h@:LxH v*QWPZl:jB`_Fk \$dgT[ yw]&`Ml\*6`$ф֖JmkϘ͵N9ع}4;B"lnQ.#wgA +\pM%1^]u#a]T}-SI\dv#=ѳ>sndsاJ%(<|/я!zhi߶(| +~)}sʭ(t<> endobj 398 0 obj << -/D [4217 0 R /XYZ 85.039 726.833 null] +/D [4217 0 R /XYZ 85.039 686.185 null] >> endobj 4215 0 obj << -/D [4217 0 R /XYZ 85.039 703.515 null] +/D [4217 0 R /XYZ 85.039 662.868 null] >> endobj 402 0 obj << -/D [4217 0 R /XYZ 85.039 649.927 null] +/D [4217 0 R /XYZ 85.039 609.28 null] >> endobj 4220 0 obj << -/D [4217 0 R /XYZ 85.039 628.934 null] +/D [4217 0 R /XYZ 85.039 588.286 null] >> endobj 406 0 obj << -/D [4217 0 R /XYZ 85.039 556.177 null] +/D [4217 0 R /XYZ 85.039 515.529 null] >> endobj 4221 0 obj << -/D [4217 0 R /XYZ 85.039 529.562 null] +/D [4217 0 R /XYZ 85.039 488.915 null] >> endobj 410 0 obj << -/D [4217 0 R /XYZ 85.039 405.903 null] +/D [4217 0 R /XYZ 85.039 365.256 null] >> endobj 4222 0 obj << -/D [4217 0 R /XYZ 85.039 384.91 null] +/D [4217 0 R /XYZ 85.039 344.263 null] >> endobj 414 0 obj << -/D [4217 0 R /XYZ 85.039 247.702 null] +/D [4217 0 R /XYZ 85.039 207.055 null] >> endobj 4223 0 obj << -/D [4217 0 R /XYZ 85.039 224.385 null] +/D [4217 0 R /XYZ 85.039 183.737 null] >> endobj 4216 0 obj << -/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F35 2880 0 R /F14 2895 0 R >> +/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F66 3242 0 R /F35 2880 0 R >> /ProcSet [ /PDF /Text ] >> endobj 4227 0 obj << -/Length 820 +/Length 1063 /Filter /FlateDecode >> stream -xڥUMS0Wh"O܀3‰rPC<8vj; Jr֮v>,&𣡖$YjE$a f#&2agɥ!MHde'KT8?EWgw}M˪qc>R5'\z8k# -I$sirSU`<`-fxԭ[+;G qⰥ&4DCQ@ ->H}e=Q^vl !]h D əf$Kh%o5z<mf%ɤDZ B"DEp$aA7Sz+[G:Wn0hW95y_> -xJg.w\qkɭ%G;K" ⿮])4l;,{A dҟ KcΏ0 $oendstream +xVKs6WHT0@|N̨Mc HUֿ.$`񌵋}]PxheIĴ^V/ipO1i^/nF<_:ywa}1XJ)8N_Ww+_Kn}l$F{ rH3&hDzBiɴ?G/$SYԴTaY91 p1W_\ėEh3t"}S\o`F]zbs [ iH&@H\AT Õ;gsF7L_8~N 36ې[!]Ll-!fKYKRGA_֗Lh0׆}o6EXhA2> ycj'uICj"O A`:D5KǝA KM X+4ￂ%hU*H31x'}Y=ˑЧ +)nH5y> LN(L +G +qJN C\wD KkP(pwܹ'w:<'ob@UT3+{̣Mc"A&!K d!} fAӡ>˽ dž/ $+E&_-}(W 7f_$΅ADZm_S!r9n@6dΩ5 ZtE^Q> endobj 4225 0 obj << -/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R >> +/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F56 2890 0 R >> /ProcSet [ /PDF /Text ] >> endobj 4231 0 obj << -/Length 3070 -/Filter /FlateDecode ->> -stream -xڅZKsFWHUyh{{[I)f-55Ԓ C1C*t/4@77Yza~fMqzh|Ѝ+;;K׋Uce||xs$Ӎn7Iqky;oC)paBKlJ~V>ݰDooƳD$t|N$JKPUEI>~>M V55lJQ=)P8txTugѮh֞BY>[]qes]~ǀ;1În qqE^ՠdk@-0:Rmqo6Xh>V:b2VZbYeW)ZNtw>u#cjؾp358? ^;{[m#m1׆'>DikF{h-H C{1/ة<]ʦЉ٪$v~iw@V4\i/V#`M4fYkq:ҙ ^P–*0)^B;=Þ!T[;0HFWxR SuKӥ,XSĢ#r9rFrjFdx_#X“Xݩo5[_1ڶѰ۷/<]g>gzj8[ (#pM3"|"jij 8vc?cRx |z hՌ9 OYTqB<4:zWW5JP?g<$Ddo3e.b0NA ry9'JұzĂ(0Y$cY|d@$7۪Z]~ÑڞGBA^ۢ'a`8rfs3:췾`#A,e9tutDn_A!-v-]UXbƵ$l#՞;;C>E)P1 "X")YQyMs=[ HR_CܽoB4X#"5cJ"&ÓgHb>uİ!N54lo,P:]Un(O~6}|`\$h4>YQk~%OR7MemvaA/"Go_ |ܟ=>ƏiCkZ8| Z#ӥ%J7h0y+(7635}/a<8x $h_>Z0@M;~hu6ìV( Ebz]%kc %1n=Iendstream +/Length 3017 +/Filter /FlateDecode +>> +stream +xڝZKsWVޏ䵝8v\+m!( et׃ ʕy놼+4ڹAv. +ƽ_xF. +Cj n6wnO2W8ݽWA8:n"׹LSlo)7 [{͇ A|o܋<76c&oN}1liE3';~H{`Cӈ9`ښӝZeK,є?ohesX3Ŷ ( &Y|E{ݹ}(tx"~nÑM>TU>T߈}ߵ'LyݲKv=7 <J8$r@ ZnΜU6hVEGCS`O |,0̌Ն\CT^x(?Ve\~)fk+{ʹ߰cDC.nshu<wU^֩UyUʱgk$%$enaz.W]KbqNicWQ ʦdII +"va56ɮxiYXϙ`S0VU>7KQ5WG;WGwxtJlꂇ.Ԝ ; +y@ HrT쟪A@o1[at&^=8ɣl4Rl5RlǔNg_ +Q4?K/phD5}|FLêi}(jL^Bw&Wm#%1C|moEa҉b=??8O5uvZVJ7`6 TcEj +M]6! 9J)Ǵ {4=yz3 1s3n=i 1"}<5{D}ZACgԃ,aPveDn5 +(/s2Q,bQ_arX\aO#h0Nkfp>`bdO??Y2dO3+}gDqBErKWq(~I +Hy1g!/)y+6 +c2C1yWmltq=plDBA%& i}-ϭE*>jUVADV((1&KD˄$eSJ qؑhvyѷHq\k:V\p#T\H+..G~(dn4*"Ptò$so7}Ŗ^&d'~Kc~[m./@Ɩ|Qh3,^H\G`X"V%/-z,;k>F +;@^69 +I/RTBiVĖ0J%v/X/J,*{.,&3dY<Ы)NAfnԘICvx9Z {Ka"q( nOƴD]vjJY ο"utEMXbeں F2v>Qʾ*lUy՗l8}\_HmIYUvB#=-+[g (IsX2`P̌Vy{Vғ_:>vM4vm? M^ouDnD4.q +.J]1a]:t%z(d IU9G@s܁L 07@00Fl N'Z*]]"bA o6pkj&_̦)I.t- / #=i +{5nQI3:췾JOoV yn_#AubjPT0j k W$r 󈽷pΐo[av1T8tĵ&(`JVT^ӜDj;U/"Af$sG)z=zz +!޳Q{gj 0+e O=,jSY/}׈`C[s`wL7 J>ST?Es{wU<~-tA*ꈜ>c,ӤkYXd$j v~-EM>-qz~L$wϑ +pbAR*KK\ܢ_W S~CooP~mfnk) ~C}aP;vA:h/>^sVV.&,:?q+d4W*VMbUn^_ +sendstream endobj 4230 0 obj << /Type /Page @@ -13434,21 +13349,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4237 0 obj << -/Length 2744 +/Length 2599 /Filter /FlateDecode >> stream -xڥr۶_i_ -&^;s|ii'i E*$eGL),K|4fIHr}VLj;0?x3fO(gg\)|$ww.Ty_/a\Jy}{w{KCT -Iv?+|t c_,H(Tz^ݝpƧ86s,NK%EV*B1JE@(̒(qXR@QyKAxWm/նˇ*jcFiFMF΋YڔAm@JC[#ayxUoHwkm`T=E^1/8.x(Z5eʫ~S9}r@npB|ջxVxlǸCiIs%h.}3b]= ʫ OHBYj[ve>TO>Z˛x/~AX;tHFeHFj0x֪ȹ"bgӷ펩(iJ"ϵ(l%>8\1Yz VȢU8 EKOGw[>],"a{lt]=G(W$u9nqVp!b-N"1^ A -)hD1o|1mRr|'RGxr'=~"_IF_iIzm?xIFFON7%ڀw-wzDVC{шݲD4>|᧜ 17uko._bJ? m>v_W]0Oon?|cQ=59*sWw9{_.]5^^O܁Z,f/sm фC2 S!s# >y$,TbW? wQ~߀[e^ľ|>VJQ(1HS/7 iU̗Hnl*9 Ah{@XNw1AK9a|x2٧7)#jh\p<֣F+qs`QMc75;^#Hڀ4<Kb+)~t)0Aɛal - -RCcݿڏO5TMxKk{ʻ~ӶEd-E|avPaq`'?nNõźh`w# X:h;*Cnq: '.uw7@MtќN -ަ%wv1XmjIn0܊ _~:Nr}<ԕů?nE^đzi)#ɚK~f0ˉY:{,mN(p0䷞ +ka1*s3?OW x @(̜f[z*\/Sb/esʍX=č& rsiܚ +Y1s?qkhd+|\maUa7= ^*-׵.pg7pʺݖ#Q &ϗ혎cc{nugQ=6H;w}:\# ]sjtޕ?x/5Ff"ψAHbX }Nz.w%p\6GԚ|syBBa')`Jn~| +=zQ\[z%䅵v]w]S3Z7 y:FYKp)ft >l^,L6+_zz;,?P.Cd鼖VT+"L=02Ğ;aנeL) XҼK6Huڀ3߷ GTB!pPƂQmD43lɷ@Fy|s0N1 UsP$jX2iHa !+l;|5MlH83 )3si3HB $8YBf+E4Ao 214(3Z|6}㺽 T(+˿==R8e/qAfPx9Ou:mP0A.,2) k+7[JAblK%" 뭈V +AH ཐł"yQ߼ؔquNW>^?B.#Ueym $0?i>2>zreiZFstѹ/ޝ_ϱ[5e?~}vu1qX22_}XF;vZC*]r]Xe@[#ew5vH_qn=4!A +D\W +t<5- 8H,D ~d=m6bћƏP]^U4}p-lؔ_ЮmLaGI~ʉr#ޣ"ޔz'G*ɟh/לRn"1l@;v8(HץMg$@̮Xy"'|02ɟk;rFNbelfH*t@}ޜ[c6,ABk|Dt gj/)^ n)ntA q\8@+lE6z!QJi:׃\GqX> endobj 4249 0 obj << -/Length 1504 +/Length 1435 /Filter /FlateDecode >> stream -xڥWo6_!t{1EkmWtm8B,ѕG)RdÆ 摼oGqǃ?DDqM9-켞p1,ϯU(KM'X*v_\-әtE{5j ow/hj)X^MNΉ\tdۉD;G=Ɠ)'2,wɟ.ړIE,cq,Gy8>%X(.-,Be¼|x8>.$t$s{AߞHX{|:^~ -H{ 4FwKf4Mqz?VS_at, !q5pP2 UqICA.Êܽ"=uj$o1V:3G * ǝ搢 ̉H#u7W,'+9U7;*=E凰@bN >uFwUZ]h@>T q4څpq7:H ن:uJ+xh^`EoɨB;GL9xFy1YB٧uIYc{a[{^PeNLIk*n@G CL:IIY9]eФ_!k9E-Ca- N_.=:R1X|o$y7sFr -8; h~czZg Z;7z}{DQ5ށm ax[lp閦 )v;GYFt#RW+ (ﲢ&r~fnޤ:'UNJH MW2`?G%$,TVZC334'׃lzk<ǎ`zH Uׅ0M'wZ^}Z&O73bX&u˫l =/BZǚ O|Øqmnm2LPEy|2]y/v.hDp!B Ec}E5P5b@s>ZK[ޢX77KXV% -}]cy^=a!>J&dhzl>tL"f}0U!hEzYwxFZZԦ_ ]KTwH+eaPw\lFDe"4u6;;Zmi>ui ۂƮP4}oZMeAߟMMi FhM`{J`@Ɲ\Vi4=jKH{F'AL7Z -}v%cxAPHa$[g0p bxHendstream +xWo6_!t{1Ek.mWtm8B$ѓG2}w wIIو]өhi1صՖF0F 5vp7pT̹-+UxI̗]-s]c6eafGax_d"CAae +[jR8[ܺ堡Ͳ+U.۴ڤ~ wX `ϿU"OQ?c1y  TN<y3͛l`Ώ5` }u7Kf w^]X 6O#W flC擎enĺ=xո->aYSiԱyV=C&"/X"D?8|8ƒ3@)9b@UHM怟TܩI=eKCO$>_Rc9TA;?GpUU+/! +W[&xJqh~O8xiRA87vvȾǧq Pl+~{>9?~8eZUtѕJJU@Uƫ\wVi L78=KH/<J8o/k>́sG-ϨQAendstream endobj 4248 0 obj << /Type /Page @@ -13534,13 +13445,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4254 0 obj << -/Length 439 +/Length 414 /Filter /FlateDecode >> stream -x}RM0Whb<W@b/D&D&UP -mU)ϛV* NZ(LJ(1_5HSTټJ:2-4s!H=koȊ2i߼oPVpHڔDw-ph܅H+@2t\2Px`WA* #yOB|h\쓒c;ލL"[K*X$tq^Nquk j1.תîM,S_(sBu sW&V#כ~CvSA놭؀R=;xSM Uп_JdM6(==Q}J+K'-{ܮ{"zs(1-s9KȠrƗju]+tYΙUsσoEAQ $6 +TtD <_ǥAy:؏]$Iˤׇi[D;g,uAe@}DN]CmIrxQw* iTU%][j>; "IsJo]?ЁqŎ +v/y!{5KnS'),"v3Վßx+Ov,qMOCJE%]h d1ʋ/z\O$4H?CZ.$zendstream endobj 4253 0 obj << /Type /Page @@ -13569,11 +13480,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4259 0 obj << -/Length 248 +/Length 235 /Filter /FlateDecode >> stream -xuPN1+^v~AEqPDQpcÑ%gvbȆ$Rh°~xf j/A2͋ě&,s5t (0BH ,DL0Ov^}=踳exQRL95%_2T`fV?WS٭MM0Lۏ_*jw3# 4&,1,j'-Uʩ 6PD3|"}.OB_p`cendstream +xmP=O@ +n 1L ـ!jJ@*Uߏ/VIg9R\Qȭ>tCe(C|hǢP.H4' hJ雫{Fg3_s+Vm')G xC?d͵+ +S@If{ڎʚ5`)ljm7? NU֎ +ٴ g%@(.8;`< +l7/\endstream endobj 4258 0 obj << /Type /Page @@ -13593,21 +13507,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4264 0 obj << -/Length 3000 +/Length 2940 /Filter /FlateDecode >> stream -xڥY[s~ϯy<+_lt&=Cږmd )9vr:Ḥ?Ů4K8gʛh+_ψЍft=iQa$q; `q{|ǞTwVjԹ=V6v|;=P39Ё4mA^{0f'<~XN~{zit5axF^~yi4ZDCz-Y $GF̃TVzl|ԯFLl_j(ieNUuJU٪^7tjOFXnd;z`w_sQYu-h/=Y^ھvojRl׍NmA޸ `{u-X4//M[[ᗙ|#h :#?eW|,2b2PIw]n}[A290[>-&}Y;#glzU -:'˜+OtZ^2" ]>#>2O,T(H0-Iq,INDZC+g( (a3@=C3ibLٯ-I:;V.&)Ɖ{ {ϞP -8E~I=ڕ:W8 -΃-5u K:;a!,r&8ux!sIכ;:BhKARPʨ],UUJ? 'l!vO=@WfH| |#( lsm41Lbm1?7'tLY bzM٫ :J Js2l^eXP}[t9raR_C)'z65ZK}m({y|. h_hiBmߡ|~-- pxYxΣ`VđGImDêOħG3D=qdI_ryܑi {} RHL+ޢ'`g tuZ v4fyayh ڏ\ʻydGF&\%ʝȁ 5D֌;ESt"u95l?o2<7Lr7 m] 4MGRʀm1"Ƿ9{=|VTh/v3$QfC'p O| !fy*Cmdhd(뢿&sa ȨB%!Jt&3Gơ ] ϋR4}LdԧkĢ ȃSPga{Wԁ➮9ΜroS@% /qGcMP+F)Ld,4?Hљ"(H{D$,5.4OFmj]RDfqyldb?|Z1XxEaZݩ>ۢLx)" W' 4 -.dC]*\Ϙ P^a3r 3/-Di[JPHz[U^Gp P*; Ć`3vJ(hNIC5+If& J,&.؋)Z c5ms< yRF -]H>ʦNä4|-T󞁤ra ̮|Uz_zٟO'>qԲA@-; -(=x/ځh5CR%C(ve -8jR2h R<_T~e HU$O\5l/"Vx\t>®1O+Xz'ּAʁ1ߺ8cdz ndʫ2x>Ii<vw펐X; hy.wʐSQN`鈎 hJq;E(U+ GeVdz?>:-Ō_kM²dMSF/@٩Pav ng{endstream +xڥYn+tWCcvq2x;,ffђ(|($eTu7)K,gUW>g,v0Yơ?[WlG-_GnETи0$p('H g rs{>^|YIq{|ǞTwVjԹ=RV6v|;=P28A4ZC6Z"e9~XJ~{dnD?S6 h*3R-򩲏bT5MK([N ˍuV/U ca5h5|GlfΪk!{Q{)Ƭ1&FQIU ;ϠvOŔ-ˋ=3rָ>Z|b9Hv8OY}!&o|1PIuUQn}[agr`hi}([t v%vǙW+f)?)a)}˹&u<^Ҏy.[d- xrȪ*=uT Vw".~ytjΫʄ +btag$`Nm'elmTI?f?<7̳ =Y}ƹ牮WW˫N9 ߝGy4Lyb7f>!?`nSxhh\(fg>3j:)NA,٧4wn@G]#Xg +(n1"?tdJABs$+/WAthw슍ԹdHg|rr_/pn:\5}g! %<^E(uNT`oF6KǨF+ 8*ు'gDEvELB6޸?"46Z&m6?7Tg:MO@o^A]`\Wi deVl*Ľ܁T

%Hy_EhPj^Y=s|Ⳉxrg3kR IDbKBGIVrFtC][!AwK%˾c֍`g|.5E`q1_mwl=qYe^ PugTkA]E8 w:He^sdyA5~ m - {NemY7 4LA @0)`sW7ֹ EfgLObcތYvsJęut+Q"c쌿rs ڝy:m5kuxVGd ͍l !l5X=ܑz-l!ƀ,#S5-vK6N\x}`穛`im]f5Y$stwCD[[ @e~ /7_`%9 (͹ ƠRx v"ilՉ< )I=éOy;!BmT-w[I)!džrKA{l?xݭ%|xz( -PIGakV g)*),)yai L:K @`fnY0I3X΂=sY++T+KMF|:Sn8>]+=c4g.TXTp_7!ڝ7{xtZTmg/Ij&f}R5\ Q8SRاʟW*_yR Q6A~zX67`4u._; --2 _+01ޱFu* -Ɣ~x<? p*j: z"w5£Mt? V\xN v{qȣf@|_s55Hm,= Q r\:uƚ4Rp=)sL ts ̥/O+ryN<5Gd]h'cA~޽5uqkQdvi8'1z>Ucbɵ%?]<=--]6;]ow|+LB=OOTr_[+ѷ;fjQEZluRV~gsQ~xep;: LkhϴP'~:i,:Iqq,JZc..D&sCْ,b!&=KoØJ|q3OV)ʮ|~b'ӶC6 -rFѫuy')IEDvaRO} G>oHSW*Vɲ2{|t\"!`&Ǘ3QY̖6]kQP b"#\qzd dg2h*,m~?# J뛎>h-]~ k,:+ -1,8 HM_\^PMtĆ+o402#p_t'ۦҡWLвnAٽvsWh$]TɇBROiE޹Z'A^l3'.S:HH]]hsơ$6(7endstream +xڵَ}b4cGȂvw\N>u5ٜC +}TWW]5RU)VYQ.Z=_@ĉ 8͍ݤ:BFaĻ:Z(LS>-Pq$I*hzc4(FO~nmy ;`Ouc_38WI4H'UR>[(({0Ke_:+xal(# pxÜ٬*9 +~0"ВND92܇{+|ڑ$j >oRC+A`|J+ +?mceEV r OFivӯ4ga"4tD|zbtM&}9 tZ13XwdYxA@vm [}.@Ixl#RߵګMFU>?)GO]8EfFn|pSLQϤ2oN/Zb+7OaɟiK cPp ieFyP+[ؖx,Uk>{vʁ١+ԻRTiVy:{V@9E b@ndS !A9꣱U54,C%92`,Ld{I|~TbxZNbvߧaĨ$8L|b/!Goh\ +; f8F5ٴI%@20F^2!t$Ξp/kThb'wh;. 8'xxe[Mqf+>Z& /cy}ΏӬDxj+AC@.'S +A;k8eBf_Ȁ-\=J"5 a_1$LJQ]ӠF ;^弗_Z6~3o, +I"t/.#;TS'ܯ8LoD +Qbu3I&E*gOY~  z% MJ g.=2R*,vl4гI1>Eax!ZxA뀢L)Bb+9NI%;y&ӈjMe?Z|}(:o.P 6DBFLEW^=wkRfIeS3+؈xW0L=Or6J5[unQ=cJ4BMƈ+^ 6UyC)1 +m,Ͳr4.C&\äs-4>-Λ\~ֹSoZK貕8Uqo~wh]('<W3K#qV 3fm|6zX/¾+QoD)?އ $^jO8w &0_o F8ZYNΞLG#ّ Õb!*=7IF| ]dgwzh]BlJ^Ϛs2:xrN+HFB6IKpz4s H;t:yr{!ufuLok]T,HhIx b{n1 +h_҅S^J# $ܜ<`G Ugv=lxiNg0F7S.޾tqԤTyOIz2̢ bG%ǾheǞ7- 쟴jtkpIruf?c`GZH]H+YZ ;ۺ-)܏B'S.$@U edv:DHߓendstream endobj 4686 0 obj << /Type /Page @@ -16509,23 +16375,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4693 0 obj << -/Length 4261 -/Filter /FlateDecode ->> -stream -xڵ;]sܸSy UmC=JGqjMqwkfƊn <ahX4U pDvtU,g*O':|ĎB[CVoYnui_F#-I$&F%,IU@_oWMa=_-$E` HaND4DH]j]iJYxgٛclΣsu)*[rSCRGnEįg O['bC"ʹ*=SaȿNܙ]w_t#lE8YxY(x4[kU|@ .E|ƽprdr@ӽwAY@L(! ʤV : ?P֝kAf~ynzn$B8&`G\9Ɍ~hV_{lJ!hHȉ?I/I$acQfhsw=!8w? --S'_ -؋$;V\fQ5vDz9yjW a{(d;sɿ\;IQ! |:Nf$}|T5)/:&oo}|||& W+@H..-B6^[Xy{8 L&3s]B0i˧kSq.IXť yeoA q_8w~J<5Wn[]SZE8@€\xp0S1i ʀ+Ǟ"Iz:62ekLrm<̳Ү㛵[El a_8Zdf: x{{\Ů\$R |\L98DO1,*p ޤ* s͙XIS7't ;C'%;\|?٠7{S?ۅ J"Uy]e4 ͉֝$a4N 52v^`kݦFy8 g؟1|'MvrqnˠS{Sqú_a/*Ւ)oQ,)2ArZLks6PpvcMTcIQ ?֣uH0:.27sBP1߄sOh<\T.Y9'wGx$;কp?Ae٤LbG0j C8y 1딲ģr&\e;p5'Y ")g`s-GAu6[DNW]0F^\Xp -H4ɽ9+)k9ǔi5K6@;d @(,b+ccvn FG"pjv-|o: u Ikm(&x}KV&Si->+K0G -qRSohc @@:2HŔ쀶WxVd]Zu䋦:r? ܭ F?' $\L232zY1cd{qrϤ50NubyނQ"`h0;wiJj)'k;wBiMò\qFx<`?(i,O#4QȣLJ,"8 hpY(uNZJK!-8:eЙ[疻!Q~eN!+ Bk2xkFNEtW=Br$I$lR~[ 7+O(營\Ew`>1M57c9~xHǧr,s5wA1+ykCn06 76aq޻P -"zw jZ.`&à EgAXe$~թsjyr@.8Sq02q F7I=ކ,==vGwbcGh4\_Yw%3ΏU]T觔(<%:AyjxZ7Ӷ#en A 덴TS,|9>Y=eKT9 P.pCh][rG~-Q:W6`;~@tdG3?L\z,TXZ @= hF@]3xܳo -[=k/ٰ(\X -8tuCpkdM{xlXщ6v#y%xkZL\JZ^adH_, ~wg7q=TpQJ& tv &@+޺H<[ C*x֞FS}vGX]il`6ϙޠej}7buJOCwOY}%_嬉w+vq:َIQD(Xٝ%'`뾟4C=VcUJpIy͂)70?dͩ9_QV&w6uy ׬vkQLۺ)xk˝|a8SST뭹XSlbN5ИT g>P4*) Qן/;`躏pFgq:S-RP1`-e ߌ#-6GLQYO[Hyt@``.l(Blqsxr5Q+Y WsNuN_pNArT_$8sfNu:H2Y@97_F`:DژaKCUP:qAq]^̾1]z󎗞rR!ׅYz݊yi,`i[O̓kcfsdJ3'n8T I還 -$ɛ-p"&˵*%gA"\eC LT垜hQ<܀;/t ㎃6,n~*YPǥG"7'z&T\+7+vްkaoy`6 ڗ1v٪ոJ擼ݻG'i}.ީu?V6ezvB8E^|wp#=iOTtW^|lfzU&R>' bf3^ c)o3ff12G]qƤsl)!/}罌K -džEn  |FC; _ !Gp~xFR:s6>ϰqsf\LD42OxɁZ]ɔjR/^x^\&<#瞍4gKsX:?i6tEX$!*)6$L4endstream +/Length 4068 +/Filter /FlateDecode +>> +stream +xnF +p3dr8q$9Pݔ1l+y[KA<9 /o_Jy?y,cog-|{ʈ<$ƮgWg_J0 ?!W_=廋 #b"^_lBKQӷ/y^Bs캄;i}soW 6%/;8gʁ,GZU/:Y+DaDotgYdo+7~?j;p0 +ڟa9oAç yRa]{z-ߕItԫۋ!z=/~ )ymWr{{ur,daR瑱4[ +Eᆶ1 (@qv(&x {d8=pt ќbK^L#\%T(#7iS1▛2B`7y0 F ⽹g]sNP.ӊjgk'N|,P:J5K`e42}ZhE|iWG[,Eޮ2@x t %V~?X?Hu4[N@u p=EVIs˛cL˺ +ږ9+,TiP1peGi&^Ȳnoμ6f$&# rk=8)^. zV(U#RX0-/si|"wڥOJv֟+ CS@ .9"؋h;pC*aw1OZp#8Dy=pm/-{TA'-y&ilWE{@$2UK].GErkNg uhލfpo F tdGFcK6/TG{ `6DDQWs\R +*,g(5OyQ\ߋ EB>rpڵ$3(۟nL'p4Cp>h?ɪ3#=Ek.˷/WMc\NG.+?RoO___ûWk(Сf Z''giWwx ԁ1c?O2W &3QT&Kp*j6{&\Wdue1ͻ*& ?Mbs¯?[BC讬\%U'ˉ$^\?E$K$0 (}%k1*ĞAA_HdW>`>$*.섷wwl4`:o.ĥOe*'7RV.M$]oFO*vzJƹ&an<l?C*,v)4%[ }`_FXz32u.ؗ;Y] ' J꟪ ֊`nZv93P,+%+HHN"=E%0[ +:v͸ T`O))k%nھh0zs㙽ž)62dĸ(v׃o3@5?qaS.)Wҫ)׎h)Yo 6\jKYpN\BǾcL;h~GA*x@0SK,v.v"lkg~LQa>OMeeRDr0 r `DqDlǸyܸ7 ƍʘ!ةz.p mA +*-V)P0H@u.*?u侎?g7ٟh",N~d!8NYt`ywӂD+ۀ ZBdő-lKddeSy PSpZZO- +<8̯8ne -b"y^W9a)ޠ} + p5MHD@k$o3yJ %LD71M>6 #`-XOb$=䋦Q$3<c|@638ĉ1Cĵ^n'p cqiǠA[P9&6FM6^,P-"U~{{$3EW'bafK6L7Qm$a+-R8t#;Y%>A\`%NFs@R*~̦"{maBhɯ(LT@1_OZ`ol8KH O\Iݎ)] +3ҶbSeXj6eN|TdcJa]np,^ [ qWߘOF^@p4@b +(6ݍq81gHcEHupJ`?NnZc +ЭBG%}{rMIiZ${R4GʹU(X#&`yvQy@RmƐhm +ҕ3y Uۮ%o@"ҀzW <ٔZ2щ=+Hحb0'/P#\<9Pm4wGt 1J+Xb%eQ{6j0>Gj8"e IEck8jB<Rēim+]A`t*ܶN(G10mu`zq+ukcynMfbI1['d ALPܶTYT{ 'pkjXKzOh_d%Čq{G )Ki-&{͖m~is~Hkj+N>Yzz#'%=fDW-ϴD:" h/XZ()btx^0nS6vqk^:+E.zTV0O8Sn'@ǟݏ(eN`uE@uۏ7n HJ/wMuB@4u،N:=n{Jo#φYFW{WEUCEX.b;Kędގ gRI"Ǡ'a/"ebwOfZ۰"Չ]86\ݹ<Ī1k +ϙ3tkPIv}0t: ͥFߵN* 6LteM*cq 2;E0§S3>W83*wrsۆs9Wk`v'" W5NЪӢxVcTkJ'f`-hӉӕ/Kn]*00ϕhdF1Ӳ4jČ%D>E]endstream endobj 4692 0 obj << /Type /Page @@ -16548,29 +16421,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4698 0 obj << -/Length 3939 -/Filter /FlateDecode ->> -stream -xڥnF_a,d;dg !CK$<g뷮>(QIa]]]wU3/ϓYn(ߵwF~ b- kw}H~q7&)W?:"/7uއU=ց=?/= áOYz?~z履~\+ ?~ݿ/EqIIHݗx,YK$H| RAm0ϒdJ32NnSH{A. a&`=¼8n:jaG쩎u{jf^50l`ЭWj:Q!ī{>ʜ G"w`$@VV[vz -8➟fװUn0T @jj ԭC5ƺf+gڭ 9`#H&!8~=4rf k5CK[۲ O7#3 -;DAف/oC= T߶&pk!?nh>! >gіS|TU\^I! GnDm7r;#~M'^$->' $s5=,Ǚ!`a3uly1@ oٟG@E5O[X 7?@(IXVPB}>,X0 R3e6jo5Ʃד!EBeZ - T#Df6/A IeHgLYilH"Ӽ#Vsl)E'YQcߍh M(ZQcW - ß[:XBu|iİke1u"-7KY390->TeK'Y/QդcnbOPF@Ieac;'3Ȏd!aE %^ax$>9S ),}|?9IpǖԽp2G!T\S7W6 52zgdEuk֎gGCKm #M=?wV@?0]?)JDcbEќEiAF -jpqx؎ʲ0>v1JR2߅",(\*'Ciy^"?SIY'~cۢXF4  =keeTtPeR^֥"T3@pX؆ e;5c}$F#r 59ydsG./Jβ!ý3ӋbxwZu7֍4pډfQ(4Xs 5"q}em6L`#wծ޿P`n.` ˮ D.ec5A*o`Ȟ. }BL vK@488p62aYNEiTy? \uOePUnK Sbc'vA61rQĹ ޳*`o@d0޳ -DKm[%)3WUs$d V0d_9V>啬Dߵr4zfԬ!n(ʔj®o0|!#ꮂjQ2p ѹd#-Rt >^{e #x8Q{F[j0;'kjwxߨ67uiA!zZH}C5]o@83ooc{j4$#D4:˵~N`Ы^W ,< ؟'hN2gIQ 6OpM(A# lؓL2t:&:ΖBOBAq[}v]sMOHD/ьim$e4oh3X~&4 C xvXwV!ށ9C%#yP ˴ad3 !%m*+ -DE̺dgJ,/!~F@2qz`=V6p\+>Y#AQsy!2,;Vë)ZOf̝$8JZL~ڍy9AEGdz:bw^cd%y١%y̳5F!YEhWE!=6-ID@fUp%6\:d}#*"8qq0wLJ,L0m7M$YU Jw.}68(6V%Ѓ#)ӄˬ+CVzhNY1Ex&1*?YȋLIKY>*βy)|?,vbL%8.xG|1dHW!H@3j餛)mҒDpH/$b/ -N7,J 3 C\̪ ] 8N7Pĩ-Ȉ0+z"bFnN@J2 .5KgD&JPQWmvф -8C1Uؼhؙdb;GAwd/ Wȕ!s%]tG>GKw"xd˝a uN#<Me_yUd pE6HO>F{K~tc rܛb9X T<0ӤK,ң ̭xN+^q?G#ZpИrD!Hǹ".'ڗuH]HY+cYf#B;y9Vb_&mè(o?ɂ弙ԓ@ 17 'Ӆ,ՅS q7#X"ҥBo0\#v0Ĥi6%kcK )^DM-|.x+ E`'*jc8GG9AL4njN -~gV{ :c׬ZQ]N1@ -x/Yeх?O#I -%ZK:¿NЬM_dt/tR1c )9E"q4>x""\nzrdo;$A̪ԁ\k -27.2yQy]N|g649`Ӛuh 6\n=#c充BġXx= qwq`4+eNze -c,:0R9 /V\nx/1]x/ŝ0T͍od'ӗ9?|0"ͷҳ0܄AD%kmendstream +/Length 3929 +/Filter /FlateDecode +>> +stream +xڥَF}B' +)Ǭcgg׈yH) 1<뷮>(QIQwWUwU3X/X֏U$ +V_] *i<}!W-bt W?&"/Mއu=7=BB~F}~w2ӻ?ݽrNqwU)uo"_AEj$&q$* WBk^sw8R/o~;3Pғ\=n|DY`AGuFf l#-4k01S' Cg˲ F~lY3A IeHgLYilH"Ӽ#VsDl)E,ԨFml M(ZQ/Pn= ձUG5 +hKˉawdb2DZz}=*fr5qG1a Z|W-ݤfDVak]>ɳCA%ޞ+`=8 ;뛍P&V ?c(a% Lu;2XKhYr{d(a B&DU\S7W6 52zgd͵8VkU#ץ6V@?~R }y@0͂fq:]|Fs UY޽?(89*B؅ 3؎Gٕe-O>&b&tl߅c.QFg.!<~ N,֢XF4  =kͲ2*:]c2a/R pى@߳ ԇ,Mc#1cQt$\#;r ~QrH ݟ^ǻӪnN4Bǚȏvxo#DO N +cAL| G@58:t1xaX Nr҆= ^}upU5g[ -1ưtCO%ml&brs#*x'UC߀`g6fڶP ^ԍl\5'96, +&K2Ǫw㻼VHoڌ5d-EWRU8;1t`IġڭFnԁ;g"Bt.H\C:y%q9E.YRD7rN]?#s`8O=U\+MZr y|(Y#AQsy!2,;Vë)ZOf̽$<J7ZL~ڍy=AEGdzCuTɽhKC%Kgk4C@SsjЯHC{l[֧뛈Fͪ;JlX0#u$qFѥU$Dq$c`X2Yzan.@YI, +@mn(\VdZqBp6O.|U2[):e|#QWdJk,b &T baƐ +#\t"E)^ͨɢFn$IKqõB^8+If_foxYf@1kAC\̪ .r$:M."qjcA42" +~ȸ"tEN-]Ӎ5/$)ro^!(T-̿W1`IFYG̭xվN+>8^G#ZpИ>2ĉB BsE]N/,nyVX5MD K3êyJ-?hg.`=õ9pY³D<8*1Kk{h)YsnK z ^$$U'*E2&fZIyʗ~,5:̢NQ i,&㮒_)`s*R2I(O~FS(cI{LN&30խәR0bԳ`"*mS2abW^ ׉7ul"BqӟΟ3A2Д +$^#_EhBQ`ɪ*&idL]mg&jvB毩?[ .u=䛎(|Nc~Ĉn +]-IKY5u*/(K\2S +6 ׋46 +& B!oM"<>p$Ohlo (yai1GXMk|ʅw/.%u a#XD>IY.&1F $D6>Z$ sFrI@i# BI*Vٲ@ hGv0k~e+d6PaUܷdr $XDH ggA©b8r"ҥB 1-5Ggg˗<譝U/1xx]<'zo"nsy XI(Ezrѥr_I-ռά7TA!GT_֞kMKWv9)Tdl3o0 G >~F&K4DufC'b%Lu[&6$RA<JmƌI"/$^E +x㉜OpohkK Ñ4Usik6<(%e\d2"X#ZXmhir9]k֡3/r8\n="h푊XZ! r,> endobj 4703 0 obj << -/Length 3279 +/Length 3179 /Filter /FlateDecode >> stream -xڭْ6}BTՈ}<:c;O*I #"'$@P"[[X h47YzaIčCSVb' ; 뇻'7Oqlߝ߽/]]f|Ώp%p|;XzKaχ=,0DOoS?yng{]n}kцw-@C̓6Mİ),6~~IM \8ʝw_&ȋ -_#I)j>6aaMHܦ{!x 4=owAt= sHXð -6MG06H'h0OF.T2bpTGpdԣ -J!I-j5tPcPQzI6Y )3+y|UL\ e#BQE!A(=X1,i*)(A^l^YoA1X]5e5,G6t8qTsF6@#N(/+ 1x,ȔŪ*4kф"G콄P.X#+ pL9K4OLSzOĻ+D"%jm:N b}u8-|:t,uznf]Xl?y&3#LwI,Echln,pIk6F6fΓ"ʠu?hz4xiMT&cN" (7N0s#@O.51$q>t8¸ITvE$L0RSI4(yS=\'<̲'U72G%u3q $,Ph%ODn麶DI^[7sZRxK茒AJτ:tOi@HT|ʇo 5VmƣRZЍ98զO e -6bc78>G%c5GKRJ(X`5 E\"k@^/B[-{<]x8ksƱ" "B,9~$U:H(Il>bH<ϸvw|tݟDaVžin9dPђHqPM :'gLǷ?|a2tFcS=%Q!~oO f= 2M, ,׶r?ăT(E&OUkrk, JX)F -`7+!.+Aέd 6Vd@qc[j-}KNWqC⾾]:2W5Pw#?-b%A, (~mMEM=NM M&8 s_| -K4y+^GYVJmը5wL5)7noHY +EYV'82E|>U=xŒ~gOjBܖxXiUرM1>.X&*HI ;.xK~JVMݳL 3cPkJL pቮ̥`Z'oH;,N6e`#$&n!\w3HQBAb=^!zO|Χ7̤z p|)%m 3l@I= ʲL\Y(9P!T7S5s.:댸z35,\ep0%[v+{FӆOŬFg |C 90837ÝPendstream +xڵZKs6Wȩ0|?c&v֖ˇ$ IͰ!cY/ &*4Fw_{Ͽb 4K8w|#KbIt{n׷wDr[|W60 ?r74͜yϯp$p^ ġ ?~qի[mFI,yu \ta]?Bs<>^EqQ(ǫUx,Y jy/!P$db\8 8ʝW_:Nx +I(j>&i\$[H,ԏ8}\(;3}DA䨢z(?q[1h*nX0(AM\^2OAψb'Wxŋig>ecٟ*QNG5'Sotb@lCeQV0Q^%>&/yx͉nW"Xz5]} ._QP'=ǁAI5bNJT,#>M#I?zG<6YĢ\Q7Dy4m܁N+ǎ$d;4Z:>4~ZwG2]Ƌ¦co +>YcdYc܋)Zn6&;'6h\/R^b0P? aߍ[E SC'{fRmm8I%'ot5Yx;(4Ct-x"9hlt\ZH\]2?'}.xMjl}sjLwn.]yl4jb4鸠ҍ[t"}hʽ#*N_ ^Ի^#bg3Ʌg%_b:NF 4ЉZz`?Ff6CFadaˁiQcy'6> ՞.V'T}3Jcc.AKnYQ2I_iw]Ν dޏ>LNO1q0QcOaPn\7Z rΦw<"g +C3bP綞/%cc2KRcF6'=Pqcս {E<(ܹe̗86ɡ }Shj+2@cB(?`Jym;"F CGNw:Da)@i߃6dSWMm'ra$7b+IidY>n)ԁqW.~D&ҵ\G:gxțnm[g5mk<"4zhO#bz蘈y$|'!CLY#P!ץjgvTIG]f)wzWc7}sGZ֊ |-ՄGVI0y *nbZ3#U[t'Uo.c8qz~*LNan㗕Q BOcFKTHe'{Aq l6~*eڷF9%!oUcdw6M4Ėɀ"*݇=fk;-pc#_2Ryg!S[P8=!DޔnaW! ?5gq\I~=RO8CKOnHoG=rc\96ݗlg\T#yR)"x /w)YD|=h9S֥c/HǟnDĔۥZ*xscMt>i&YB~WI"a腋:)ITTXL(uzUA`'$ө(onB?Bh ΰZ"i93{eR4,։r4zY<, ^B5zx8{yKe_d9.B^.eT?.+L]?/"F&<(vendstream endobj 4702 0 obj << /Type /Page @@ -16650,25 +16514,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4712 0 obj << -/Length 3601 -/Filter /FlateDecode ->> -stream -xڥ]s6ݿB'j&bI}sl'v/}rDKJYEj٢brfc6rIJ%B4k XM˳$2o'5yj;/LgEKC]ˀ}h2ol=FĎ[r~(Q6+71X!Cl@eÃG5 yf vfG8${9WI`G2OrI'=iu.iN ڠNχPّbGnBp'(;T!L1zh/X)^SKnb2gMbXCD[.:w0s}e? WHl+P4(q_߻40eL\TJ2'"Z&L@.,]f:o\ܒg z7!GlNi2L1 -9T6Txlj߸9nEv -ttDcr}')||8ǮsBEiNdVl;Qk.+w -FAbKY)vu;d/ߏÊ+)NzE&+kYrX\Sdgt?p"#L(z6$ZZH0Z@tZ3NH. -.9uPUlGa25ά߼rPBor P`91ʇaj|˴J>w/= Zg~b7FUm0𠠂JT+ ׋pL{d njuA2 tH't#Ho)ԆZ;D$oKzgpIA$pz J OwU{8 -{vwUc)+ΉK0w11o -ph(2g=TӏgUؑzCx9BBo}jtT`'x*tCaק(^=wpLPw0jԆ-H;ꔄNj0lKeE?PS_*i-re?{s.UjCI)bw"-O -+s$HM$3x; cϚf{UZ7h'˒cMzVimk%;F lA#C_އN!*<`6+gőuQO!@w{!t[W\7/.A E/IyFJӼotGah81BWnIsݾ!MdƇiS@y^^=CJw68 A=Ed5&hO;b\MY#*C&. ܔ8u2PץKۚN`PahXu٣oH.{7 -W `A:+[W!GSg;\ -;xݜ!8y`=ZbOz w_9 / 酊|/`~Dݝײ\PK6y@k4`Ospvc1ŴԏC=_GOC{8 D967MH>.j_jKf[y+if$9 8aGMT5uqQ/#{V1D~]JYvz@aH -ڬԻ MTs>xWVV60YXh,q}z] .Y}EQ7p;tNkzRSᤌMunz.*ݯy2[K0[Q"'2xOZT-t1cYשd[]O辶B9! l$@ES9#JyםaT(u<['[ZoެQ[t g,|~L')rAkd sZftTNz%W\"8Y2A[FN>OuıR=~M^(| F޻h&Ly ..2L=q889?))>~.0|S6uډvr75B~Bv @4FM.x_uC#o!3A\?\;"Vgbaξ(+Mf FVKyz,S ~\h)?Hw2> +stream +xZs6_5$~ͱƽen>"-L*IHI{ v.?,z?MBSiDn;]_8SzQEKOIJsߟ..?J)lljn;Wz9v>^I7(ޜ_N.# ՑB<4)9\&\?MO7':Tn|W'w'0M EcnSemtK\rSzp7{Y73ӡCRL?ɻ }‡ +I1u˶5 WNo4&'Y;fUI=K TФ x'VpdЦmдޡo`Z:%Ag@Z+X/F h3cfjҒڳ &嫾:HKQ/v<(6q.yX/YT#;}3_']^9rpA0X̑vxvpGY@H + _KoꙭxJȪA}2 hFHؠLC+$A>*yqU]m u&c +#j[9[ +W3KI/ UeyN*oP.&EK;:E>c(Mre}lh7z2+4ȖkLi& 8Ő!Z q%oT&E˜Q28g>&'UӎaAuO||B( f'The}\5}IV*JVX1܀'\L%}8m)R,u\T妬ZCK#=@ÿ6#ad DF}=`G#An/ p>=X#spP݌հsəN$#5pxpަ1եJ=n>r-:Ple1Y %Ad 6w %м a9S +GJF-tpXfڒO"y&%8a5.X؋_ xiiNE^^:2. +DHFk%]Va=b%d22(Z2% +c,̠hi˨WvvX +̖ !z2k|ƛ`hSund5bʞN: $oNh_ಅ1ȰR} J37m̝/ +R 399|-dQRƎY,vs@֯~sBcbRy6(gaLM&ӈdJViX dFlU[M%NߔyԱj3ev<= KMRt+$D%-0_{9(򌛂)!O8`# "Mm]\,Fn\z 6XFɉWUWfX|秉h7UTF#g9O՘yCWz& )9r26JUc *ķ+n$cEWgk6ʌw{qj~BUe/{M]7=YA[3B7"RÐ5X=^V?e0 *2lMۈ3lGE%w|]6Ga[ 6_U 껁ցT.mYۆ|{/[GP3CEk2x>y`Z!N%MzY/`Q! Eq]}[HBC{x WRaR5tMJJ\d|+8dʂQ8 0<#Nxqnۆ1* +qˬ3@`[wmHB!@sV_ˍQrPL \Xid{-nhMXycUn#b+zHQœɀWd\.@–oAy3ʲ8LD"fCb,(!q|?VwX0-bWt\)G;AVδA_eVtpxp2Brh9/ ػ.V|8{OCe3s67?;|Pt+~1?o>g?` R zvI[H⽌;7$4`P>^\?5q o"ԊwDĩdү%qT>X"%m ޗ5 MVR%xtxM2BFى1[~S^_H t\^VzWL` ڬN7|ٝpf8zըDC.T]i2*-qF r +/fVstp9 CknA0K +Ҍn ⨚fJpq/}43JP'%eT5Qr€[zYF7~va.dl9N+F1T#;"ll(R_r&$\fgB%!l"Y߯ބ[&*]TH7OWohe2g[vwy[[-6?.45I;_?鸆|2UfMl;c_yd`Heq~ˍ쉲Uq& KOr1\a$A1 ,3ytvGĆ$~Jkθ{ThD=p8>Hx.[ ҫol[LEs͹ P3rs}6kH/{,Ltƽd_B_cH,[ñӵV P@aeÿȸ%Ԕ"J/ASN88l)X\~R!rpo.rb:xmyU)'וDʞ'Ov?Q0}r[#H [ ml_  A?9{Wᡠ㪞/\endstream endobj 4711 0 obj << /Type /Page @@ -16709,27 +16571,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4720 0 obj << -/Length 3962 -/Filter /FlateDecode ->> -stream -xڥrF]_K-08kUXYK)oUIpY AU[.gE/}/,Y*X+ǫh['q,7yo/o?\( Z^ߤi潻{#`#>78t{w?\GCCw?_<[jcݵQ$Q&T4k Žu_I2G< +Vr s&5LЖܢ5qtLgwG Zʞx{ېfꂏڕwx+BHuPcЗ K#Jʁ1#8oßK#ও@Kr\\\"bzZJ/ۉצ}Qϗ$J_B*J(F -¥ -EKv {(JwV)RxG8T"d1ɫ![4[?oEŒ/U - #f&;J%{4: @XiqH86wp|<ҁ|$ Y(GY݈ES|wmYGc>ݎ!S@%BY1 -rH*8v]ndF nG-hYN4aM=!˼ -sB7!XYY{d<3+98 -Ma}L9@lk#7HJ!-t=GYl5pn4~B /Go(@! c]lHp˺2V,2ߗ6sHAfj 8J eR%ˌSKU#v{w v6<'pDE NVS5 S1I* %g*9d0؇Ffٖ>f%f ws6 -qAX ۾2HZi|Q EA0r I{߳K/u\z,7=@pxfRS|93:؝2m׾>sᠵhvN)1E[&$/?+sgq;6[ -Y6 -RjAӑ{t(BIKJ -l)I%EAzȴ:Iʶzj%N$jT`K ,._ڊR[ʘ$;7IUG4o`{p| !?MVu+BvՅ6DmDcٜUMs֌)~;bZں+6<:R^ioe$_[IDƄzIT<b1tQ:jc-TJ1h3L$ 90֒naVJI"KMx -tpdf?ig, ;t+iʹ~Xti\ A 0MKWL3wkνՃH,Tsz1S'O/1v8{5 u;byÅ5.>@ ZZ]<-;g R`Ng,/4 _v5ʆҔ @$yf9(1Wtyf&)\5MJ_ tou\N[O|V}3$.| IM ||oj -IZ`+cZXKVSy/;3[RI9~c}>ojCt˘o8-S~>K{B? !7+O7o]kuOK{- j6ƯKO3<й> +stream +xڥrF]_K-}>%^;DRު$ X0뷯9@T%_x/|fbx=p \/qǛh{nZ"7JB$ox-Pyxyhn8t(~}p/9*c7L*,xķ;96xÔjA<50kq0rŀY/WAʋVp%[gaKYY[ծZ2[w8\u`8y*yvx;iO[5XɑW>-3+xW0d@ƁS [WOTA;qHcU]3v)S72h#pF#0͗a,qRlv!$zMCЮxo~T|e# #'ǃSTi`-O{ ȷ;p0DWT!$w)z(Ef3'\)#=?ZDF xlLU,/MdF gnA􄵋(Dq7JRgSWwE`tMhL/=9 FrL{{V,+If,#2kU'EZ"Z U'$VG;RymX˵r>)Ay39 '#э[VhD)Tǒ%ZHl%FX5P7qUmI^?sl-蛎Q]mK E&a R8B(H>嬹M׶ZDIgL0JrNSѪ 6}5;X y Vq  gՓMj,u#&-}CK'{hMpN([}enmHږwx[#BH2 Qcؗ K#Jʁ1#n]pMa5axKR܇rFZx.1k-̗DYڥn_s<=~乱EFAi 0JGFP4k +R0D8E +$Owll!+8"1p,ߍ9ݣ8b?#]C8ae/H[2D <&|"OJ"=Ϲ@0krZ·y;(K'D +vGm+-6tK\$y?)D &@¢ shn L_ $Mt5(1ۖzyp,wņN<%ԗC}DpY [l '#`BXل#Gғ-)~GfJ)ZWhB%=n(ZҲV9[BڦK0 }8( %ꊖ&Şe+!d# + +*]+ՙDEdkd^(t{$hJ)r1mڌ69))f#!-xtw ̃rx0Vl UA%A+TF +lF4!Xi6}`.Oml9^c%7Oy Nh~3S0&$e@{epK\+ L7W+29U7X UwRov?V@͏  B:,twIb$s0@q|z0y$DFm aMs m#G~RH銪c&!~RUnP rbTlWD/y^m`Έ2ˠo#A( V^usJ_GYe?I];^YyZkuwVFcsS,ҝdD: +zK0c<0-#ƚ55/1N9;_q,"OWyExN6s=7$m5Cp@ = ?(0^O|UXpcŬ-N0PDv8<; \'/ xQIEݽVߦQBܗj"Wl3 #zE<6FmkCt򥤀MZ%\4T*lu 73v݃Xl;-о5q)$i()kiaM,YM z-DXB_|;KCTƖ-𘡊=Eȧ />Z_JJ,}C j&޵ 3!43yBLK̝,5Lx;8j8\ԵL>_%R`6ΪoK0GҲr~oT09'O0ʒEN@aendstream endobj 4719 0 obj << /Type /Page @@ -16752,19 +16609,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4725 0 obj << -/Length 2660 +/Length 2607 /Filter /FlateDecode >> stream -xڵr۸_ٗJ!!gMi'%RG%(@"ݙ~̅?5YNzӕ,-WW/ކLN&MO:A/~ys;e 5], B78oAw0(^W7U_|ugxI<;uTW~9{yo^ gjJ;AeKJ{j jm^;a2ߤ붒q[s.:u^|[2^p7j/=5# +Vp#bVzgl)/ -1!5"}Wpt#LJ(@M[{ssȑ@`|sǚFv-NV e]hPEW|9!26'۴iʜm "ӲxDˎw.YR -=!UNdJ;ҳ0Ico @9zt$ D?vX8~c(b'Qx{0nm4r곚)>C. @4R4-\djE~J*vج8f $uU6@5ϊ:8J*cd x>F!HbG~n<=3h}">C,i"]# ,]pZvYEs y0af?x^l=qcVmW *rTh t0?ަe3L[^jyvݙ#o@=#FDzioJ4OŸsN7%ښt0=c }D<i|vIlk |Z|ec4|sVogs4)dũ !1 [uKo<e>t -~f y[;ֽ-@| 䭳ql xXWP(7rF<GslU*qѥ?BXMs}fO -HҎeQ&݈SJ֥b#ƣ(ą,>1I|(*¹|xYӿށGIQx||8s8('֬wD @Hj $&.Љ(<0`r򁼥vP5pqU `K pblVr?kρ(qEϩ-i9`HqDrJ"LZŊN(zCL0VC&@‡ 'Wuwcyq' 4'jb_7jZe6ڈ)rwmn&_" "BVV+^(AI2 p^,8*2Pr~=6ҚeO&uQ;Alx適j|gbJ[C2 ;XCؙp*Ãu.CkҔ#6%7_)R(=6 ]+_R4 -5nWVD eѳ.L)l1$#˽2<_QP~ٹrl_@4Wg})]6Bȿ=1:S Eu@eZ- -Ӛ4ti1.%tLwK", 0\O[ATezb0t)n[mx1mǶ [R} c۳Z\ cVn]HF wG/ky3[^JDoyRFijp>zA2}qbK9/@ 8Ul 5w skOl eJ~4]ꩮ</;uLR7E7>tX{Oy.&nvϻW_kI P֎V1tgEc52endstream +xڵn_!K"b8@rq٤qiF"eD-Iq6n!@93sZxS$t ]I䆁Zl ?](A//Bynꥋ-\g_W}ˏUrljf˕r_"w^|x|+]̾z퇟_PҮ$׋/_ET|A,`*M ny//>]ۅazf]iA/V&8V /U hRgk6m%` v+?M^|[ e0SoaIȖjxJfHDE Cy+ 1+v *`W +ӧP[v8<䆎ڬ(a@ז|C^+dO]N{#wiʜ "MY7<}Gˎxpy$J4XuΙ~M3D`Mphm g*ҫg}7ed@6mD#}7)hm ~ M*)‹c. -R/Vnh48pt*C/xcf.(ugB^EaȖ>`h7ei}SqT>6J40 t>#`={& @*݉-X$kOørB4PL2 b$ *'T 2r\>;aG#(ۼ&ZB,v1Awl`- `Δ6֣1S]q0$  +Q}" ͫT%8nTك(|o'Tx(lVTkP(YۺlGdP?.O%w~yi{l7w"2W(qaOsqeѹ%S!ְG:7{J.?-o0!C74,䆒m3@5QB(,M:G 4(R$begmuݞhҸ ?8dQjaW j_)h:Z#o%q)e>D0Ы<(*9{cĆQ]M 0o?rw֥@@%J3JdH( !IXQ8RrD™i0EZ3B70\c zo^`<u]%(NnDUf)Y}. +tE4T4aa7]fm xya`( B*RISu& @ڍëeS5^p/"d8md%d ܴۖE}- g~tGU0=厬myZ!vcJ)} t}&dR3&*fOLq@aб@hYBXxH"oj ;wwJPR9E>tWXثOyǛ9YHAAᖍ~?)tD=zP|0?endstream endobj 4724 0 obj << /Type /Page @@ -16799,22 +16656,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4732 0 obj << -/Length 2833 +/Length 2789 /Filter /FlateDecode >> stream -xڵYms۸_'D)%KlV.e:DY)RGRq_}v\:m'X,ž<ܑCQ؎Ga4厖3gtO#\1,OS:vģ]'v Ośv}vF+3Vq4zcq<ڞ_~~vwv-G2kH R:PAGn00M9^`\>H{i-Ϳ"٦ٞ`7_sy4;r mâMRgf2<.g`_ޘ;m|nNc;qN8p-ZThc5jm*K=9)f$BX{ -|;#Yo,KNCͷK*3±&> Ii%nf#H"s++^d/`j%]XɍM3Is z{xʱ*Y޵vȟtlZZ`9BAvv)U>.u%x4yUN/^] \(W/d,beMY A;Ϊw\~O*] }^.< ARީ+c|)r.XuQsjZH*z"j]0YTihIhqNUNyCMwc)s1{Jp2&;O&- Mc~%mQR.D,`}AD4j$6CzUO2xʳyS&owJq!$u4Pd3ZR, P Zm4E>1 0{0Kqɸ9Yů hg0C -&TX:44/DtAdD"T\`'3_G] 8֝T.,K1h Jn(M|cm, ݋zy\2xO47/;1s%zI5wQ6-: { -tt 5mXb3a-28C( dq*-Hrkq 2QJ*lbIЄnUF&Rum0DjXzet[F`M{:TȎ-C+9sy --`w;1*/EYW͋c? 0ڵ3UwXiu (zé-pT}2o~@ӫBHrܧB\1\iu7DL.mx]LrF ܇6ʧ6˫kY7&H6*w&:Id)\'6׫|62 IOPыER悍7E$,6MnX?Zp3v/s_vݔdZC,Gږd:<:b1wsQK몄tf\%K]&Z\_ AN\4zXg'Zeu{n+yfY'SJYxf Bv~84j -Hk,xkg.ˊÝxt`sotOO(qp'Y[(~ -\wyەFu_Zdٷ|_7ubtüڃ1&Z# kEb:Z&AJүv(~՜Կ ~*%F֍c:+"1] -y֒>K1I?+#N xv3x$к:oq%qo*n .D5?',IS s'.S.`+U?U|SAkԋ#F7e|߫k|'+Ni^o\A7'/&~m&Ȏ#o]" z؛z{]q@:S`n1y&&".#rkQ6'Ҫm"K]UVgx^Dsaiȏ g]"_,vFoKSoFIXZZzWٹތqiCdn؋-ud(JT=Ӟ4gכZ]kG?H~at;c/hgkC)_IUS,sg,[l<'ɫJvzFxoB~{qz{OO#vnrм5>^_wo~F~wOг717w4c~x^y(t}֥ʌjRYˎ 'cWEeIix,(lZ qV5t{jJb3HAÙ 0{1qxsҳ o `)? 2Ka&6X:44/DdBd"X\`f1 +{;\Y߇c 1c; 6x:1clo~(c<yP9SkaE!ʌalCrXZ>rMv*m`rP0\S]j[cr2 +MV5eRQ( ,{ºi4')άEvc١ +{f]3Z7x/&ѤوpP0KńLMFjFAtZndOjQz}(և{$WŘn y9'TKaFq^D} tк Mt &ȪÞ䥳zH^{Vw3$(/PRW1g)$lޔDfa+͙A;RD Yl gPؔjD.uKwFqJ+,fg#'z2,+98ι4vOB/Z|# Ƚ 4ap VM!AfH1ʦ꺮vZ܄ȔOP]/Y QE )+t(/MIY˲I-6'C$Y~L2i]"_y"ȏaƷn[d*E$B +,B4ڽzc0'Xv"7BSyqyTTf˶1͗|}lZO aa'5j$y*EMM)I!BlAʨ˼-i1=Luu2}Pun(,fܘO"͛Qx69XN"Lrsxwl&q\>*[q[{4r=T[6l{/q(*#⭝,J.w&p پХ^<oCD'so rEM)1~> endobj 4737 0 obj << -/Length 1974 -/Filter /FlateDecode ->> -stream -xڵXmo6_20"~͖&]b ֡P,9"K$7߽]vQx<>QO:q <8Q@KgxH#13"ϋɋסHO$^,VA:Otv/(SMg=r_]bw0tCи2']e2_V ZM&9:'h{B&{91Y\X~ | JI' -9aq>T,ݿaku]%z2`33ܴX^IVLB#A^zLw=x v0pa;BP`W:1p; ]"|soe8b:HrSFqlйyt -Ɗ==ZnuwI}ޟ0@h:Uiv}*Fw{$xɼ1>#V5QͲ;}^PSYȷ|`> +stream +xXYoF~ׯ#T 3o$N}7H)5E:$eCsRLis90lFY -O +c- Eaen:y细ȎHs|v9H)MZI滱0Oap1Ώq3ؚ .oټĵ\_ +?F_FZ~ٖBƶ%X\OZ+<]~ok0E',;DV퍅7p*\= +3ɾBx +iP`Ŗm`]>ʂEe۬-u’r G%JoQ yՖqa5v}TQҖ|1QW4_DwO1 +3QNo="¿W*偲M> l<5O7,eAi\}\\!x#Gو$AM'tGwqFbKe\52 ϛs5 FL}2ҒW>!!QJ_vwq%e5"A8K'1 GDIo1"]MoHIYf&wۢgk`329Ä"DđP m3K,\"y)ڮo69%}AǓ(Ζ$w,ʔr@gW9rLf(f0fEmiH~ 4'k ?ٙA@fg8#)p3ߎ@L"grc8{a DW{:M152f-1đ{P" ɍ Hs䦢KzVMA-Ofa6U]= FK)2_*poW߽:y{v1 n-NH8O>4M^u'u5uyw4 b~w[&]]޴B -  C{ -aaY ӛKLSb4_{95X^2UPG\'Pn.O"WF>~b\c .U_ZKя\nrWIX8L%x􌜡Q%XS{H"[݆2]sIXCu-t=@N^kpN)7bG?&lk0ԍ%#Y3 Ѝr~cGi hA*,b w9*hmQx||4:Dw!Mݽ ^h܌,&A|{? Mb:d@~;* -L 5f#fm -0ajcjn2햟Fڒ^Af5^eS87P::$t"(|b I~m22KvziS刬phGOln05]1;iMm1f7BPB9jYnXp Fda>A'_%"NycO;0 mn3Mg}nЋt8 -acFoG%fiز/|?<~c0uB@)@bɾ/p#50|0endstream ++E:K|]CͼAЬ_k t CA?`]+8?W\[.z[;qmGc=XH9A6 ֘0@ >7II oF*z*2gW"\%іM?'ny+GV)|{׊0Һ>U(^_i2@#u߳=^komca߀$ +Zendstream endobj 4736 0 obj << /Type /Page @@ -16867,19 +16735,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4742 0 obj << -/Length 2566 +/Length 2307 /Filter /FlateDecode >> stream -xZoFBߎ*ߏާqRN܋}m$"L.IKRz8o;pHBEDv軋Y<ʇ W(VBѼ(X::vF/o~\o\qb_rZ7WYo>A`}K\gӇo?^\zr2~ob x~,^`n.Aa{qqww -B? {:p== =OY;P?NAMZS i2 ?Oz#[k=֪\z - vN`A9I9Jl -ùktqL6k~1kG4cV!:g9ڬN_ c;E+#QSCc~'kpvAmU-OKm&_b'RߡvnZXyN$eZM-HӊmHӉLfL:ر}G4c{!:g9Nھo" QQퟋ+hq앉@=J߄Gl{ZRihzߓJf,d6ntLь蜙j3;i{<{8#Xʆsi}"} V]SG;+ -JV qg e"/vX&|aBŖ2S -q_KʑufV/#N3 443dsx$;f<:T|^q/Jmڃ_tjp IەݾY4V-IL||k__roAQ[/:&t)Yig.=91H9w*=~K7*S VYL%XM&92nn4ph7*~ru9Df1 7$*%ʍ#T)q͝BBG= N6͐zQ&z-i.BZyq/x6e[pES)-Y'i5QUΗg3ĞW@-jybO`]ժF׿*5[YWzxV v<ߖaηͦg6EC:XJ_~=ѧ blGCkLh n:Wn`6uaaX_>ՇOWUU$YjYHV6bI(G>?Wu{(77) |/؏wq8 ԡhևr |rWN$kJF.:vf<[gۜzӶutPHm1UtQbiՠB2QXdR:v5_VӝsCOQaǽw\R` O]|Vd *nT$lT Ut})TuQ:Uf:N`'0x'!Tcr|γ"v4~03SA*պ/՛E?,͝xA<8}ӛupJt4SoԈ <^dM?%4îý89n@$Tc ek5zExuIEAԐX k<9pR+cZÝrU)^!}%jKg'2ōZZ5X*ڛ19-G?=ifG#ڡȨcKV$ԩf$yyO:<cyI-|[RL\6U=ۼ(tÞ ~Ozupb̢gVTMRQ kJ&)Z[%衪;\lMz󔃩Rggv~~A7%ruv~tU¾0/SS+Q;M&~ =\# RXb" endstream +xYmoF_oG;{I*q/V"XIE"UK-!rgyffGj(Ic7 +hF0B7 +]/pWq8RyhvO"՛_gǓ IΫrnLqw.߽F輿+{^r׳&nϋFKdڞl@ˋUx,NBA&ih5V g4pďBn96#g:SbkF{L+ES%`pXukik 4q̍SY"pv~Us:a3N@X8^|9v?၃4Р%. #&m5ڱo8jDyIA>_t2H=(Ɉ ְ_2@$i ~1ΥO1i93էJ~ݼZ}vxt oq lkY٦*HYo8 k= ѽ`ҬcdTX%VKbU])ɢLL,E1aY|:?T{8{xu|RJ9'U]'ψ.:5ufxcxhSL~l9Ør3S='U.|Js><2lb'PbDkL,C'E¾tUߟWOo/ܼ޻7zYTծi򪻪auyw4h=FWz`篺ћ˛V*{xT\6nU\z.0;QQ9_z e}ES^'#A ])f:҄pV,tgF*qW9 11&_Tp% v E 2*R a9D))= ΰA|Us h+N+ʮP~H![m* %tiߠj,~ ;!Rxk^71 M\_e2=:t$M)'*OlVYRu%2wp!ߒ:6ܻ& suV؆o<ʊH{Oh>WlO,=$ndi}mP;,Z=X=՞W_rQWY(=NcuRK;0QЈ8 8QǡbIɰrmRCܬWXS2ljM3\ j]OմֳUSV]eNYTEEw|?Qm.kE]-7͏SM8ؠIv/)4@a {FS[CRB sL9vs_7x!Y,1FqKW&pmӍ Fr%qXɑ5J q~1. O? B[;l6 endstream endobj 4741 0 obj << /Type /Page @@ -16908,25 +16772,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4748 0 obj << -/Length 3318 -/Filter /FlateDecode ->> -stream -xڭZYs8~RUCM$9X-X,y($~]ڭT" fYYAT̲<(`3BX¡yz>gaA1[n>E'E:[w(0,˽л/Bw8?^c#>8u O2۟n>~rF?*"=A;â5WqII݋:'$$Ne% BUqϲXBEjZ?Ւ,{~[ "Q7v \uz'-hrӥ~,R_etAѪ|2\߃0QpmɍFʽ}#3USyp k$ɽMsC3a yl "<@bz7{ma[GjL9- }`8H+BB"LHOE-+ݨg]W !'&y} ݮŜ{R@'_w" -|'6-Ad-XQ?Tsu𷻺[=KYWU u1/0JzEaz376kʜJd/i_Y|fMjPЈM\K2h_@B&_c p)YN(T3x!? مloCޯH$dc̻F I{!eO~/T2 q|`\cp2qn5pٲʽTU]t,~ 8xz~` -55[;-=mxZͭU8a%wtvXlP[BCƱƎice?O39(i:h )%`wktB`Le[? -wtRg\yaσ‘ j - p/ݸ3dpg]~AS%ɍ+.68v0a%g|ģ=rN2b-7لy=\hu ->lLp Y7r`e.M\CRs8u%6ਣ-7cL8bԣd4L7^ -G 67 2㜲IۃE }I^ܷ hg(C6W-$KbM%*`Dvty]ACkjrę>U# -j,4nHo]ZDkh}`B^Xqܷ7"E?̦Zzr:z07_DJ2M@I)$:z[b̅ -+ۑ˅ǖ`Gr2[&J&$t!Vg.!Gn@;{? ]Y x 6 $~ %x\4Q4 Iм`C1K?͋L4J侊` P("o Χqe1I`6FTt54Q9G-2ԅ<&qMl!xCy{6*xI`R^:M9 ~%n},,Uf-΅H$ ݾ7'%Φ;Svg\IF&qIFײ_;jb8glyC)ê$KpMlYscq9 -7!q% }fLBr`h8Vl}6  B[8RQQG.,AE,|98D!` N; ˍS6l-I"{.& AK&X?ޘX{a52CL^G@\CbYSn'~ )̼ 9`HbR:z3t!dSQh)kdЇ-9Q.?NF8D+)L*I TAƪJvO dDí3EQ_/g"zx诌wxipD-ՁJHkptK[V?j-nHqxm${2>LuSQgʁ=0T+&o4Dpٰ̽PؑzQs:!"ltNL3LFc9/ r/K6rPmq^CȼTU3RT8&3zX"p-E5dsJ̣mGsL|Gxh*9{Sn,L1Hq ~xX">.yckmPK.4mż}uk?d/0 5)kPُS51UDyMU\xφ )72/߿A8t`sp"u3S -4m$0f͍֌+&•.ZN25+TNƈnKIP]]&~?7"[syG(2cNYf"endstream +/Length 3224 +/Filter /FlateDecode +>> +stream +xZY8~_ᷕXA]yKI&3lڻbf`[r[h$~"M_]<  g=#-D-„t1mT4DgYq􃄸SnFTsH=:T0, :DP#=O  -RAdTS?00<:mӯ^ ~)Ƕv'qvǢ&8s{g恤ߺq?tpSSɂ̶=˜|0ì鎇`~jrOEݶ_$Ex_I +st|ǓGHwɘʜl1qSΆF#Cŭ/@YW-JDy R>iXшM\M2o@џ13QelaadwsʏUnIF઼_sɕC̻F[ ɨ{#@-91 |()%<\0| fǝ G*Y`BD|lq| Ki奍`ZVg+Z<|;4p[~p(l1wMբU 8M'nij%R.,hiIVr +\ָ#n^B̐Kl*~ABq\QDaσ‘I^ pz2tr*FAa8ftZM3>ADjD7Uy=^{.IuwT܆$Q̲Cblϭ<5XJgvƒdԷ6"#Cmctkԥ{HF272FI +֧CAx #GEꍕ! lڕ_Hjsuzr GUzIƒ-@1pKp 4Lpj*uSr4ᘁL8\w5M ET5.nd'~_ ]A,n4TUdqDTX(H}P^tBLO΄#,꓀,mߨ0}0~bIF +uvKp䊙B!W˝,Ti,y`k-v/r7X>tE|p" ++nIez$;}:U7\jym4\ybҾ[ĉ]:pg\8eg +Xqud,&ipX^`1g-Tf\62UFvI.r2ff$c*`@t _GM`ݨM7Nendstream endobj 4747 0 obj << /Type /Page @@ -16955,19 +16819,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4754 0 obj << -/Length 2373 +/Length 2219 /Filter /FlateDecode >> stream -xڥYo۶'iԳ6i%M$@1lCA[-Ė|%I_σe[N2 A"<< s>I#(<#,5 noÿ~?xJՑ[j2ϿA~ -GB`uZ˓ۓ-/^CHcc gQ?W02uq5tL?~ UH@:g&S^hhad$|ti0V:=PjSJ PҚp) -exVfC-/A v˂"1G'힒ϨMY[6OSJ9"|-E^ @EM{^윢@ILd\r5FH[ -EnF>8jEL@±,3MƇ!_*~fJfUV gӲ=-,}lB-oc'˦a㋲FYUCRmAS+Mnam?粛*tCH·eYn$"WA) _"zۃ^pe7)]D$6IM^ a<6QX?(C٤&Cz`S\q[NyoGz'J5VWUU[ĴXM4Ni3DV(A{-Lޗ݇#]ʾH.QrC-Im -h!HwsҖ"{~k _X17Z~ـ; JWffKې>ΟT/8ȟt)ߣH_b[Dۣ*nU698]@}@ XpzSxԡ>z 5*>t2D[fY#Y-~j<2 -1@zЌ:DP焂5"!p7r{\I8 NUq_@JoN]d@\@p,?r]AI|8r6hsSED 7W"rK}"*HǎAv =IK! "k P4V@ri߿J+W˛/1 (zGjm7>w,Ys8X2pnk"h<]ҏ]yJ_()Mzh*j>oC=wg|mW'""z"^ -BcBC3wSޞOֽ_5W5i@GG _)hS[áhendstream +xڵY[oF~Do)‰ԍc'`H$¼hI* )JcEk8g\s!#Fг7o{gʇaN8#e;w' ǎht#wֻN?ߝߌ'ZBI.a]#EZWgP9!7fNj~?9i0Q]T'bvpkQ4Oڞrsvr{45[N`ߎ6q; Ug,֠2 јnbEl},C+iGd+eET +<ŋ3x“Hd0f0xVX%ni4+t:z{@&@,"{םrF~oͫD7f5C%蔆ʂWhGt:C.Si9 ]VCJʗ/N2ơB_)ϱ>{vB}hd!EϥLFwJqo3G}V|(M6Iѝ1lZ+t,{bʜ|Yu(^lͫ.3v0)G 5GgZq96]wCGq€[eYQX7Avc]꥔u۔k~_^Eb)[[s*Aͨ LH7bQ!gc g;htS8LOhhycjv!KwS-,Su1f9V-uXHE=M|xxk\!"9j2\p7,K$s[8#x͚@S\Ȝ5F]=PSZ3K#_+V"ȌԯhO2|:<uu<l: +wp+=eiOY2SŞO)TP  4n|M=`{( r61V ]/T pxӦL4/$fmff076o;O*rad?\3]'sfe``ni[JvIpS<BߺW;*updW+޿JsHSyvQ^WbjfË߷{eܞ &B]%A|t-UD΅υ> +aَ + y!7g_xε_+8R@!Ao?BVЋr^Srс\ģJt\w;&{ġfl?$\&Ceܯ͇#i"qamѰe>͠AY&&,7-uSVoӽkz}]Z0iuGO]"w T+@f: 0[~φ)]"HH2W }a.j=f).LVB'ˊ6*hBH)v? L_;-86Hջ#Ԓ0HH> endobj 4767 0 obj << -/Length 2964 -/Filter /FlateDecode ->> -stream -xڍYmoF_bk%iӦ -ćz(H\yffe >36W *[_U\m;ZQ,qe_.8gi2@*M⢰W7WƤ5UQq^W7E&WyDqV&W&[]ۢ>7uͯ~ ]Ey7ujc[Y-46Udd͊V*NԳjlVGz7ĢǍE>fW&>ڸ6nvݴN$e4(aVQ+sfюHZt*r8]@ƗqW93m3p9ݐP#t^~&q`4wJ4=j!T/ͣ?7RLT$Vْn48,` - `];g}i~hȰ'xaZ w|H؀6w}GU-d܃!uVDxo-m:za v]{+?;VeϠn%0(ZTeK^>0e6 %yyV4^*X|2#dI݀46g>O߇3\C'X_`(,`ֹ_ N -?c-0ed-) 1zUѣW6NƸڔn%c qӁ}H}jG|NX#C(ʻSݮqou)2?k+؞h $?9UϪR+" !_qvo͙Igcq ӳy k r8NBa`t<ӏ:7UUJF H:{ )/] [p[Ѷ - ¼hG#%adp %~aip:>^(vt~-5(^ôAcغI&ҹB͓:Nɂrj<>tqemq}۷,}9] P +J<nzlu$z+%g|SL  )طL`~E΃H^='5V0ݭ\;Elƌ@byKA4L =-T 07` GYgYj\eI !%7Z׎ݲ"( Kc6)rG&;/G)]h=rHO2 Ff_@>ΉrۋHf)KQ:?fy6xa{Xװd 43qy'['a_9O>gܕT)2cdU\ǭ'rxxz&6*- NB_ 0iJJ?N"['6♅w[*A9$dZCI}$gw}yM } 7Q"HŠ(|ְ::*s%(ǻ~*x'#x!g-r'ΎKcQqB5b"fın#$| `|Ц8 ߔ&IS0' }2V&Y;;]H<ۗt=9i'tnn -Dzn ]}y;(ǹ qn) ̞@8FâoHrT&/z hJqԡlYՀtxC2}Z4rʙ~'< 7IP_zqm-=Ԙ8뗟<\.oMUT[xG} ]ɨ깍E"w` -~[SҏS{V@-/=67(!-Lg1=ঔס3;f?2}֨ -JpesK,o\ Rnc;P +(UUmI+)A3 ۦGLsM] ]lsa$lea;'mCXYjhNX/s4 99ivga0ڀ'I4ߑ.6zMJtL;xOO 'rCpP9 -lH r9VyxV5.o*\Z-efFe ^2H|f_+a_H=o63{b-a&=7KZ86>3UWK ]endstream +/Length 2890 +/Filter /FlateDecode +>> +stream +xڵYێ }mXkt +ߣzCaaYz;'1YO/ydz%>4 s iVYs5$C>QȠ n?fUFz+M3<=IiBw{Xc`*."o߱L90R^m@:m7}O^,eU{eM|amU*0ӃcHᰄ~wǬqr'ee~ ãyi-^0{n҃h7_tl .Zm=,ёuR_;@OµI79uyюJdzk{ +)f[V=t̾*%BiVs]g'Don;0/: 影 ;%;Yjj)pV BjiM n_owrPC'fÛV]](FH ύ_q0aL#(DMݝmB~"b|K I!S-=ezXD{w_HcM/+$~?`ƦXRH)f!)%Hx2M!(L?9.܋ ]se ,'EDɱL(V:*sI'Noq~gC_NCq'w#:C +2_}h?;64GEt;vO ոBjl̙u܇5XId}xSx:_I*)\ sg{HYkɤ@Gd&<0EnFjдw̨AN>U?4X$S`_oYlC:P>h弓%}%WH$Dri +$w 3i&+A|_Lg\:)R}NΫԵ0!2%eY>bĥ8`RŊ{u'Ki3J|WLvVUeI@/Al.uDj=i2Xmi} + ;Έ;0&ae-{y2 g2V_ 8˗iL+iXsTLO i7c +մAu(ѳZ^mj7ǜ[Ý xxx;,\hԗ +kbb]5j<.vF0UhaUvbݨ=+T7U6ӧ]e땿8-R8uqߍܿibu`!{ _olaE=ֺ۔T12@w_YeɇQʜdzeR뮮`siO\K$;;.О?'yoQXqXߟ\! z2(cesƀ1JTn\+jeSOs}|z:uYzzDfd',endstream endobj 4766 0 obj << /Type /Page @@ -17102,24 +16967,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4775 0 obj << -/Length 2867 -/Filter /FlateDecode ->> -stream -xڥ]o8=o*L-p^b˱67_X8p8|,?5qtIk5|c)(KO0Htut0d~K\bZ+||fuuwǖ՗l r:GJ:?;Zffk솱AlU]Q(*8H̊XI8ZDv^a\ +y(|X._TܒMQ V%"Zoqؕ#=T lySL&EX[5`j^b2#Hy -_/~(6qkNׇ QkSB)w=ʼ"߄c,=1 ՜8ɦ?Beu@% d/ n}aa7C0f9WM+X[l -ψ]\:!iPRĶVa<ɐ@}CD -̀6`S;FI(txvGp0ENx6 ҩRϞ3 /;az\Щ۲N6I[#;wLȽhRx"NV<, yî^D:I!rj/\Wׅ|܁ `[r iX"Yn9O|wZ[e b)%>AQEZo{^n|d'FO YEF)LneȂcV#|DY -m^/V]_":Hg$ Tey8Dڧ q -lidV)B}YE I04W:unYa8&68IRWA8m@Z/KH1"DE}p9߲E6x&:U0Fz( >7G C>:3&ZssGV}Dwzz d0˞vir+{g/w2C󕏗,U<( XT[DA: B?-Fxںĝ_}?}?c%rm>Uɶ{\!3j8+(pk>W-ȥD΁uI/nz+͋;˝jT F T*w~̥>q:L! @|;?}&C}ݟdQwuw< eGGg ʮRPRhO* ] U6ՅE$Hſ'a:bViG NǥHX,r ,ĵk5+mq ;𚱸Xd?H -qsrݍqe\;W\}Y#RK]X ؤx ]űd<#K.f5\a\wr2v4{GFb^W\]ÖG/M*stM[WgpZ igIX^t㸖j{@3/Rp{e,5ތ&q$N$\PyG &l2t.MۄS! -瞊T'0>1?Ŧ$FbËtIcM]?mȁ2=}j/$Ϊ5/-PB*XT2AE`=HCᝮqT2aK>`n{/b -n:X:N}l$ѵ[3^| ,ytHH|VJ^&o+cSĿu|9\0ڞSkZAp__ؙL(g.1{n4~ -'}*V -AqœāSǁѣg}7hQcb19v/Y/gendstream +/Length 2790 +/Filter /FlateDecode +>> +stream +xڵY_o6ϧ[Z+,8m/mk8r]IN6%ʖڃLCr8HMBI&4 b&E8y/pIC. +,&wkb[}݇_gsTlXۙ~x۫f_~p-07I4/d" tN*&  6ZۋۋwRxLx9&Jh ijx@vӗYN:q67G˪)uD5})EݔVBuYc Er`G`*xJѶ +m ͳA&BDʈ6`i53ldA:>A=-+,D'\ȶrfԑ +p8_4ébC5呈^bb޺vl^9[lvlu 6Ifѥx+J5L wt6xw#z&Нv-G1>sEn*I(FfHL;}zIz6y`wl_pyS{as 32v)'C.zΏxHOEdWtT\ zٱ`wɲ~ 3ZKh-`:Lh{i 7NGi'sw ^ӭ2,RV/+[LH0`GxKn3~|-QM +Y+ -W!:>6HxeZozQX|NZi#ރ3<%#>v鶊dCYܩ> y׽ȋsx>pSF[T%9 `l Ync(` +p +T1ѱ `L؇4P6O n"Ap8_iLe#9({K]яf2t=&ouJGK< C)k^qKܖ+&ٓHMMY =tY[/~i֎mwy)1]{ac^qgHa _$7oak Fn/@Q `5WIIpU=ERV-{a*߸6~_VߎCv;̥^曳(R,NEdDB3+Y5=h,dR +o " - 'BU5m^˛KB +fsp1SsQP[H:W,ǐ٭2U's5TFƝdy~10@fr{:`'0?ߡeQurx2(b\ ץ(nWܒ}zfx271/7ϥBqƙi-2M9$0L)qjԜ  +QN1͋eh8W5SP5;NǬAÈ.!HqxR'Ás4ބ"T8Px+:Qθ 9[ w);oEZYǟto1J<`(3L | +M>=AbW*U"#Jac{|J&g-c^It@t40.=&B>ZH%᙮Rrنף>cm9W*z.y"A]PCsHO=ț.̵!!kA9E+ *{ϙ:y yt>> endobj 4782 0 obj << -/Length 2273 +/Length 2182 /Filter /FlateDecode >> stream -xڭYmo۶_a ", ؇,tIo76([ɢ'y,;rEC>0QQNG$#FY0z_ΔpLeq~vslF* W9iGi%,u`*MG3i?2Z,^3#5 c?@~!PJ`8_ibȏʹzR:$9&4ǟ>9.-7a|L] ێ|KWw:i.`yQcrmKKf6$ˆ_îTj!\Pn3J@En斂-'e=6$<xRլ\6v 4Cocbi>j؍o+`&a+emGDjZ$Nŕ&""WRZ -va<7sefMCF8'~b9Q`ڃm\CeWе6AHT<"RZz*(,kߟ4c%&s]zPV?E8 Iܨ)ŕzC5\p`~EOaVR1/XEY `<p%2 PDSXZn*9 myuecC9 㱒&{F͸^ëk(.G -&QX7pSc i۵Hഗ62EJ"G)C8klu҇vwG[ 7c)9Jq !f9tji$3Dz<_DԐD_Wox0r@ۻ0yQ3v "c*uMy+jۥT|5+DI( 1 >:];Ԡj?ۛן6?g;]:Z@ږ%"pxd)7a[0CQ3μ| *n) ܯN3˱{9#1`VO82t +ބ7xz+={uq4] MBT/sN^ރ 4aAib7߉u %oR,Js-̳` +4֚ +or#$[dE֫ݧ ԰gt)K>qs{X\.EHfj֮R7|O;YIPfH {VXT:\,Q$\KHnk:'b[6A{mN]V8\B(LZ>w3 ldi [I03 '48r_^c`1:<%HAҞw11d~! ʢ 0A؋XqS%WK%SRI@C3JQD>vFjuSNٰHn\:fզ)ˋoDJ#rCaj.Q"jwS*ܧ yr o '<݆G j* bk fu"3bu6v+ we%؃A81i(;Ͷ#'STM˴mAr`[ǥW8~a Wz[ t5)`#Q}hvhUW:Cw]}}w)Tz|qsپ9m9[wyM<ځh_=Vg rpr\tŸy3!w"; +u7jHL}x9&o;o(be.h`t!"[ъ?-/e^v-/ zP:GOkͻR)PG?V\Q7مtNH%fE'e;ŵ)hEZ> endobj 4789 0 obj << -/Length 3186 -/Filter /FlateDecode ->> -stream -xڥZܶ~Ca%Q#@P88hwF -$[vUkHQ((r8jE"~E%Vb &on^-aA{|y+wo/WJ)/rw 7~xwx#>rմM|hZ39mKiuggV%"x&*y6"$E`bt8n#lgI @F$X=ЯI V*d<hT9rǞb8 ѳT<4oAXVaʑOSS2jR,9b8h:?wk7[slO$oq@z ˱8tDMP6%{zby%9TyZf -:IS:/5yP'o~4 >EIȳ-n\d/Hgu %fNYE8bB&ۊ!z5B1+LޣzbYq?}4t1r|-bcA.7D7fQ-Ҋ l$(2pk6k̻?& -A|l݈2ƀwF)Iʹz"0c q@TϲYrh,~ Z: Q^Hvw瓷npU;2NS?-* Ί-,Ij`ªF[Kq%rR<˪(! ,x>vhcC?N2R!3'o nNn -mđzP|OC#蠐K"tw~t7"a;rdF̲z(T/56CR##t =Hc"OjEkM ɚ3$0tr/($EY`(Vit}oK\$`r6/bT>5 @Pnsw'tlOTA -ez|w8+V ;$HSO'k]9w$ g=E˛! ub_lw=Z TlWz8[w@nf7%ǝOjEpnی`O,D&!o)0ROФ>FH{GW8<JPܴ1fYCsc(<e.!} l.da|$-T&#r] S>p뵝B)N410:2%PKR)w+y+s~Z\P42?{zPC)O)Z!=+^ LJY>y)Μ1)bIi(G9% T6x -GKArq pT{wR,lVl+MM.e9J:V/5 -N%K\#ث0# -NNa:%w cزtAS -/GPU0 -: >.OvUzȴswW\ޭ Z)f0{S=T ANcr -^걮`_\;~0Lm=>'Zc"M͚0],ȼؿvCmzJf{8Ď3af u>^H1+! -Ad_E!'ЁNp1M?R2x 3 y ԛFima%G0!Fkt9){yUSJLn=k=5Z}ĶіUZn2p*?ACSrUX?HI979@KTl6;FW",E\$_rWa9O_ɚU47+ujh3ܙx@HljSK?Jg9p;hdMQᒭ{¢xb\ DQ 1ALW!4#^wpnC|8rEmK{Od0<]ײk᱕ZueOZj0xMiWND;b -nĥ6kД@nrHMXRR - Y0'WC{wk< q0p2/!6Fs-vC\gWfq,G؜D -ȸu!Z8H{nVr f;41i -0ȕ a`\5jyQ&wQC!gc Di`],rb񜎻s+S0kR5]u52 FI&.BHl81< B"Req[rb/7~t|"tRkZ/z{0Iyۏ^Ye*".Oe -@$_.(qr[|ʰO[h[Bty-Qz$ -NσI.I=} dؙ5V*;S^SWva-Vxgch8g_ny`Qd{w9NnL{$VdKPW,(Ä+,B'00L%_1!cr.VKij>?5yt7.l1,̈́nW>]:p>}Li?柮?g-!|ȏB+ ݲɩZe gOuendstream +/Length 3094 +/Filter /FlateDecode +>> +stream +xڽZ~0eX4| +pp@('HNw;].8(P̞4r %iF?[mf~e7 ]/pf7Ż ?r$I~?^u"t8^} ++ tvY6^QFa ?  g bgnskT$`̅nƶʠezFa|ح/|5('u].M1FlΘ] xpOjg:_xFu89ms,bL![Y8app{TmS(4Z߶ z PQ>=k7/88m7 b`z,P,0r!>FF6+ն}=~ t~_X~k2:}I'uI'8fH/p l`7|ft|f%eS +Л6-%/-aY0j(sjZjݾn̗U}#Yuw{&mRWy!fG&$fMH$}u<𜮿ޣY GE7pR8N燔]>Tl9})FD-3}á.Ixo: "LBX0pJbũZ2.x <^RZ[嘘R9aqet.p]{zEىv8| {e](3 ceד@ + |3r+!@|O@p@!M]]ޏ٘(k6<.rr/]©[::xD18liU?@]ϳMun &Euy'e1 .șv#ΤݞW.0}LЇ0E R*0Gv/ i(Hn HPD ;>"e9%9ΪFf`< \2f~U) *QրASsX=J[yqQsUzTS>7K3 +%%o}2ҦV!T{ +/r9t=L +!_Qd)msw9W̞q# %<6`v_LL Cw2)|W?KGۼS<L´y`\Pt9.1Xi1Z*sN@TG(6N }8qM.bZI \h;VUwZ' i:mGf-C@,{s-﹌|{zcMjڝ#(8?=B`H"V Ⱦ.n)Z*Nwp`%jR1=);m7SgL*9幠QvM/PVI[.|MSN t[-cN\+W~LS^ZHdQ⑍} ܠA~'_T(0^E` 3A<#"ةs+C|*U<lyEg.k&ē+QRzl&hUpOSYt{gMXIq%hy0kbDD`J!r`菡k+q\z¡$ZA\`{.Fvp]<ϓX7H1Wai#0eA>3Ť:rؔ q0Ӱ{U0;8 d"tut61-򳱙uKQ,qO +@ǽu5ЭS"`QWl- +IVzmʼnRVSƖJVm_c0/i;F\D82ɡ#U|.A}0Bh[NrN\”-οx%~ ĆuՌ?"?"맊,c"'5<,byrV- }r{39w^; bBʥR**q: GOXꐳ?Q&}\+=?֪?^egۥ !z{F0u$uۼс`\ҿ=iHe''?OBq8endstream endobj 4788 0 obj << /Type /Page @@ -17264,18 +17127,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4798 0 obj << -/Length 3208 +/Length 3179 /Filter /FlateDecode >> stream -xڍY͒H)6(G;ڞwb7|hzo?efgC2_M@&K7,ޔ7͎0? "N1k]ěE=cb?bмxcD& #߄M~?+ـeu%S\Cۭz¼(+1Aha{Z=Oɭ.U߬{H(O-{;c w];3 Wl bOsWv;bR!aJԒg " XR}%еlZ4F!{ΰszel2oD|v&N/I١>Ǖ!$'9_aR=}Ta̺xCDsG'|tR08 #;sNu tLzhㆂƣޣOoM~f;SXA#QDd: [l>NOVXvqG,wv_fBh9&2 (-J|=ŗNi0l4I"~$KQ cWq~b켈}14ؤgvi1\h!V+hJ#)V&o^j=oFݹ\Xtfͷ[/\o)#]1Ex AXޭ`i7a@*?rN `?DG[lz%#R+k,ػsV"'Z`|dq`[qYP%`;d%BdBCwA_pj f{D3Ѹ3pؖ k/j}1IQpjui@% $:6z$['a~lw??Q3nָW&ML?JX6NB+Lbg\Jŋ q@ǩU(g+#И?8V+cHEu|tn)!`3x1bhp~ھ}djZNzk)]Џ+1h'$"?\i@ٔ#q]v4`1LnMN!d2?H%aD"?Q6E*MJ@b屛9U+d^ux[ua/cpgrⵞ!셫)cYǵ`%( Rm68r2L3Z+) )J`)nj/ (wj&"gR؝KU;AqFdW v\3^tQ ;h9I.i{[f_dHUf $XOH=o##̅!fxhA0# E4kPȴKŕ -LY^%춪sgq$8 K3t|Ϥ--\H"φzFԞ1 za}ީ1r%I]n5L^`"{^̩@xS ^B&<ᬑtdzh}Ք21Lffa>EP 1WrtZ٩VxzLB4 -/3PD>dzoh f,e=delt5qn?,@+#'A6kUOڰ##X3MW1FY"ug<{ !KJgx#G';%_VݭU#>p™vUs0 )i|H;˩g-?6'}őhѸ@$3?8/VvҞendstream +xڕZKHWmPxv=ݱwb7|hz~$!{7df2|ۛ,(dDMyxP%$8qשx$c6D7ky_`i?^uU5Cխ֡mUfҍwʍnjcOATu1Xn~oS32xg܄Q>dCh$z-z|+V^J>dr,zh-G" +kr2zg!(*4Ͼ'bJÞ'ɽ(Nq9@3<׵#I1<ÖAZy +/>вՋxMx*冝 gn Q>VAwZ1 +oa3&|$FY0%g³ضOjgaU5 [;V9݋d&Ǽ-]jK+Q-g%6UU# v 4JwY yI_r7{0iN46;|]+-2t~ps¸˭[.гtQsp8>BbOs6iSYd$IF:llh@3H/7[b]_?|pHy0lrZŒd3HH;_aGfaGqzӡ*"c$^T1]Ta6x(1a({*r&^OlAٯVF1Db[Jd/)mEOr# *ᵏxGCձ׈x +Y|/2S|Iv,04n4mGQ>eRܔ& t_{A)HpFXl]ҥ&lP)\kʻ UE];:_DbJ2z2" j%:QQD>4m[p\"NLƗe oKgo.kC9Yُ|ga o4S5e>Tl] ?Y%:!WwjMIρ60p5-Ō'7T UpLJHb屛G6̪_^ux[A ߰ïǨ[uE'hL]rK/P`_yIB6k|σ)ш s2T ;(Uކ)KywRn <@@کW̯b;Q;aqFldW vEgSA}25ڜ M4ɽ-o_tHQ26 'u$lk78B.OU.sf*n!05XHK-<[t[TB2԰E¥jDz-޺:E 36*F 4QF N=+','u1fKE"s7Z33꾍+dIǂ%=('U0IK/. $)YW@cc,JH [3;o\W~ +gG'/B5jS@C {\lzUqLh2iu=`n}0wQ}zNA{rLB6"϶]{tI[,cIw p@ ;W l'k<^ik PhVlc30C3cAF9Ԡ׿tb[utM6IM8^6C{3.R171>v e0m/7z/؅8وQXeߨZUka=j`Q͎h @Ye`]o\(BՎYyRIuP)|HYjR1&+J%]D~QY:|F,R{W׌ qqwM~' xX@yDAYnZG^bNn: TEhkSB): ++;4ޘ͟dukyP| Ȥh`Ӿ3 TJw4V\(V{MthN)ZhhrLQF;&:˙ac*=M8XaBN} }'D)YDKX?N2kJ/_\_"͋EP5\ĝ~F $4"wjrXnc1ص:+ѷa3v.VU8Hho?Q:V:U6Ro4#b]c3T)E=jŎ{[$D<A!w߿.SՒQ;L2ꊻ,Tuo_ >޿bw!p >s}iE4t>"V^)6i|DӎAw,!kC2\?N0\~dC "&<9/~u`endstream endobj 4797 0 obj << /Type /Page @@ -17310,25 +17178,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4804 0 obj << -/Length 3457 -/Filter /FlateDecode ->> -stream -xڥZKs6Wj%>挝S;άhCZ )QJnMyGht7?4..tHďu쮂 *F4?S-σ|~br_4e}rzKy= ~>?.\ruxFsb {*u-ޠa/vWQ8Reh̏3}*0! CHOѕu1TmqP+&ހhHg"\^̀ *^%dMjκ*2;e'\+c&גphL#v[T -hr-="*$ljϤZG^ѕ\(6(4Z 8q;0Հ"(o'vDc7[ހ`#>`zs -K7BٗeU$w؀v6MD]X~Fn7F ѪɡڼHl*=vdʅa ܖnP?*kZESk&D-ތͭ2YETYk]aSYeFFH4YLnbŶc7w[nE\^H,',x]q`/$`3[ -H<#–ܲe{F착Ua( Fs" Xe*8 `5è5`4 -%b8h-(aIjLbyBk_i$$E 뒊`@Œ"斌Yw|k-7LmΕ̂9Ju4GgC -VDV8c K$(wܛ2d}R):@$wUoW4D~tcgN<\v-4/Twς"|PT:Ja3okb x$vXkmE|+I\ $6l?0z9͞xZ˻r4@ehSkb -94{;? w[nu2$@· w&iT%4;mR`I dISsכB|j#dZ)#]tB,d`0:}o#9uYOPQ1CSv| ш(瀍a@1zT"fp%I.yu )ycY<űaG/(7qfQV}冶ߥk!,,M%1Lf @IJ3:*%'"лx0Ct.%kIy,%L0u|<9 .v;3 f01?8Bf˖9t%Y:Th~Q4u[)!lÌHb> -FXiG0rA|fStSWtV火2g_TD~Vyxe -:H2Xpf -EZhhB>183f  -,!@ {jr,oRH(9:fu(<=4!Uzb'%Jv,qI:~'<F01dG.4dpG0wާ^\T1Lp09,T&XDH6SaR+8r?rr6< |TS (Sv> p \) %37 -asQdڿR.e(#6jVQ[IIjrRz{8c0Pybj~Fm-H,JpJ-<@/:)~јeQ4<,#Lv2'sN] c(ceLHbZN;G0$!晸rzVΡbx trn4pֽBF:}G*{r4ttGaBrUxLOY%}Q.rS#pAؕ[z׳_Hr.)_B`"ZT痾%ӕפGcc-J!lpT:HҘSc^5:k -娧.Y|6>*1R<($mM`~Ӱk9Bk9a~i#I䂷Y|J"Z? 3ut 0F2֍LJlc{o8|jYx -Gxp.P/68P(^|( A˝7_Fx&鮫\ p"||N2h|'y-r[N䂌r$L>< G o~_|gt>U$F2D> +stream +xڭZIsW6`=7Ěk.f-10hY>o@T*r_/=_enw =ew^a~Ks3/\=ѐUbb$s{m׿-|wK߹__)tv?~~Xf5ba OJ K/_~]n/(p0zupO +m\yT,x9"1Mw"GO0_Qߣh#(!IbL|yDm_8( .aȬ5eÎG )t߭B*BmJVA=ϜxZ<.Hp PD}- `B@L`.X!ʆJ}8T&@~8Ž>|~ b1 b=1]멓(7IsP18WhO&(^ yt(2E HBx%k*5>g k--Lh 97:+FMU2f;>2Eb췡RHb#{`^ 5ČK"vp`;&Â],37" Q1"t}ql<l|Jչ>*R'b-#3^kiN,h735h0P|"Uli #4FNqMw]ʂO,h x#La 嶬 (.!3`e?٧}'e}?,yŝL* *sXf|Gj 3Zmao'pHz +{غFi Ff w ymb + Ayc+W9#9"!.vO"z0" ҿ~ `# P;CO]1 cFY%F("7"[k>j w9t3 +XxS*ZA~n( ~+˺t1?f&G%y`oDP"Ou?\M ~%E h.RfN=k]~*pUdvN<7Jt*s(.oƯfW)4-B3Ꮸtzp[s5ώ\1)E-$h抱lt{B{M/eĜ0v0{h^W\vuXa0;|6Ɛ +R!jWҩ:ḕU)nF8w0\D8^On>rNZ:0)ngۖ AY(CIJX *"2%t)%y p$;Aɯ#j%]eU +{I ؃kkr)@@_To`_2H1wY 0/ 0^ E?:\ĸvgaB4֠nQmqÙ @ +S --@kRzq.ь42XXN3(#yչN-8w~$Gc p0!]6pFc. ^3N&iv~z51=9bFS[(kDk1+.e_.f|{ q8jYCk5o@DFp E,D`e-9ZZMM*񍫍4KoDDzZ43d +28*2Tp8 +(CArCL> +Px8\LJL# @[]pKoN>~% U|7zrbZjw$Ia$teTr!0㐚e jU>zR"zgG=悸m v$rb$98Wd1ؠo~j`~nK `F^䌷Yvl~ں*hDKyO}~bsA/-aoˠbÂxCx%/U!^N%Qsa 痲ێǘ,<Smen^]5P]BC w$|=pdN 0|+)gn2A9soK&˻tνW-ӭ ٩ $-+QGfNiM܄M@dMִ|\>2ȣ>l~lvt> a`-!%41s "rE%wJQ !-+H\U8?LOBqD!endstream endobj 4803 0 obj << /Type /Page @@ -17375,17 +17240,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4813 0 obj << -/Length 3468 +/Length 3395 /Filter /FlateDecode >> stream -xڭZs6B陈%HoN҇{uz@F](wd[=QSb̏X*vTG*q':%Ak@ѿlPoY찠=t(4FԱq8ջ')Qj 8K7mUndz^Ey%ӔͶw\.KixS< @(s2i A>μ֛J 7.nF-֊%θfX@[?f&uz8Xo:HQh1AFbkOd4Ӯ`UF,A?kG2ا EJcf ^HlڒC:st/ F9LX+7G~ZVӱB]<}~>~s=_ImʟHeC4^鹕f[l oZ9,_o%OY.L>lI  hvNP߀`=ɱjA[[vSoaOtѿ9caʇ]@`v% -[I49ۙ-=\F܈wzt(cmYX]u)GQ.]A5;560Ol ^QDE_S2AB2czJYꇁ,2ޟxX@&@<f T$]"$?0HߓH =sX$99#GQlbDmhk}!ʜ1t5M To(j<2~vb1bd]~2dD+YfC&vg'8QZf78اleNfAadhz+%DrwlZw$(6Q=pŶg!$cg\/OjK ]YYЌGR&VAhB.(kt0FXV%lA\RuGaK-~UNܶ3GE=9'r`Qabn EZEӐQMBH3ۅ,áeC\}.7?|⾹>/~&? -oDoDx.? fyk=#- O?f9j.xP?^p@WPFƯl4O0ȧE,&M& djLWt/1g~hhNF1qqc!cOiIfi|%1]pvN6잠C[FPb+LO690 ["*&C(";zAVG& -Y6Ik<?JFmƉC0#'S tF'\O#e"[αM`?{!)O¿iv+~ hg4Чs@i^7w M'foI3 _?7yN8 PYf(}C/Yz.endstream +xڽZYsF~ׯf]%B00ț|$Q6&UT6I@+ A{wSR\=}|#u?un#?ybc?|9 ΗݙAa׫\~Gbx~?JkؿJݥ]rJy.CLK ]7w3`go]\/9ש=v4=ߜH>98 c?LZӝZEnW۬} Haom=4x悿i/cv8}7OOo59QD rdv殻Z^Ey9&+ 쩐yS:%W-4-Mc'lx5w?DͪXV';DlvY +jFU&%CFWl8:m\wASUu K}㞢!!-(o`|{ƚ>2`{(g9ۺ#=\NLD.#C-ʘBF:b4JڹU^QF}2Kꡫqށ( `J=qhVX6v0C~ɈA^}j3Mi~ Wl_\`.җL'ygj6% Bdeށת ^@H.  +;_^r%)fCpzzpr\\kʼb l Ka? 8Pb *Cx0[vO O;uFږ_DO\~^G9qJ{_lf{,O@E@]KQf+eӱuj^R1~1"Hw݃~1eD+iCk>QEV;b$8Qt{ipqLwAeA0%H !$GSaDuH$(6̟U=rżg!rs'QKMs./:襇ЌGRM&Bi\ YpFxV% .)#R@@_Fk3zs? ^FơdZXPw*tLsPRodہ7 }{Ryqc|u&R j&΃m9 (>_^JHu姲-7Bv~x"ȍe/w%RzռpeGsPJuM9E%pfhՃTlez`oۑ2`h.% _/ +CVi]B`M>5_H?0`W_$Cp &fr\_hp1T'@m5Q]mO&.2fy`8t=3$&s5 +lS +[(bp2>xPy e.ILGaCTO#quS`ŏ#L8 }{q<`_ωwQfX@ιn yS s釕u%e&˹ƸR):K5 ^Ɋ ${ reD+cmL`cTIƋ۹9i]( 2<*U0re^|EJȿi"5(x*GQו,PDhyb |8uFfX==2h.3oyCd|k-K4c_ b62Ism_ݏw߁n6 +( ; w۰x.`H7+Dq:A;,X_,[ODDNbzKݕnlUH%khnF75JF ոt:AmQA8 ,8p攚lʁгPWw&hoa:4hWn32&>m)]2 8 %`Ж}/E1z>LAVG&~ebE!)xĎjXP#:2;F+*D߃h ͊hDM&_Zk> endobj 4818 0 obj << -/Length 1910 +/Length 1851 /Filter /FlateDecode >> stream -xڥXKo8W("EI[]'Cm)P=\IN e%NE#r8 pR2s4ΦV>΄ 7s5;G,Ȝ(' |*t~{RJWK],vq5_%/poa~]1<?-o?VgQBJۏϳY<8E9,RW4jv;{kû^rC~ ?'UFx'iR؏Ak%n;}bD)Һ><0w u2rr0C$Mɨ=nvRM}$Y MW ?k}8ciY" -yģD -'(D؋,q<ܖ^!$|fћ)-V#_(8Qb"AIRPT m'2N/_)9V̛yO"h 3? Cg QfMa^sV -e}EW9o^^n@= E -Ԛb@5v?MBSGh!Z+:'!=-L@Q b{Ao PdV-%XҠh{U#S5*|I]3zDbe쌉%D9*Gûr"RSeK#k+ S*{d S "| X[#)Lf _uSTAJ!by}lyx~H(="M6z&)KCֺxI߼.5bh(1/{"F6p[Fή# -< +wLo[# P>Bȋ P0"M"k;Ɉy$/2+ʈh\ zۚLhZNLU{ qK5<҃:ेhm!6.z&gwmWSZwǢGpB4!tGz˩HCwmp(uoTE Rpx_V͠n!d0þƜ|"f]{ؚk,V;Ӎ\{c"y6æQ(7Xr -is.*Ev;\k$6ǂs Ty~fDqeY7uq46l Us8}r9(C܋ȡ1ڝ#?u72M2GfA6o,f!ףgBJݏen~Njk.0(c |4p12a+m%ƾil&m -15G=n]￐:l癳xCO9M`D͊J} fg&*<;y/pH=@g}T7\㞠{Āp1Ԥ/<5$|7`jЪh׀47"͖2/)A&﬈"'L?G5>pRQ^zNP0sπUYQ;̃a)Ay{ 603vjmem`\MS\kz@Nq> |儀L79$굹fBӫg=֯gwذ+.ȮmGj~;e}l\`in-9pӦo )U:e.ѼtYR?7u_V6J9dUn]5V2U*_P_2_endstream +xڥXKo8W(5#6it{h{-+ wl'Nw"@H7YzI/D2/Ic)Im`DZ"#s9xkO" 2oyO,te,$IhW7Su9_r:4L/wK&^5YH:VƏ'PY=<2˼z#%"캚Mԙt0I].zgkF/F[>2Kwa\B j gg=d3-b-4ǁEr"kyk9eh)!@;eMk/3[r +,~ړR .6 j`B66=/siKۮA'EDB3ngfHCemP,ߜr'nF%$  vڷյM3!bv1fVrݵ}{ox6DEE`gjB#4pb"x GPʈc!G) ;b9#9OWVʮ\pŗYwTֻqeSYx\!+pj>:gN*ģ=@?X9K^A`"Ĭ#_g!gCJ3C,7WT"/c|)br1L1O.cu҃ОYg^ֆ9 9غZIh.:|]YD)6 t`Ht=@{| +̚S Ώ 8(-,:_|8js{]MYUy魈]bg'~΂NDcl?pQQf=6Mlw u3ͫu_[ S{D6l/6 Sx7f5|LMgIo =qBf6%m0Xˆ1 Nlr:!JgxCYbB5pr"zUme~u~~[sG͑vi1ߍzʏ]'956ӼtםC<{ Y8bTc]seqpB 'cdYp`{H&BQV%H%>gY72 ++ +]WGendstream endobj 4817 0 obj << /Type /Page @@ -17449,17 +17316,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4824 0 obj << -/Length 2511 +/Length 2412 /Filter /FlateDecode >> stream -xڕYY~PE< $8#pLX(kH5B|jP3cQ]]]W-5 %t:ȷZ`)0VhOL." -ē4"o4-`~vTk΢4m7y* k특|uSOE c]3_ VO6 NG޽? SDù)E3ۺч\ewxQ gzJu~zF(z*Ȥp0xy=59ݲYa?U%P2^hHFeg*#& mՒ 6WOh(4 w_rnuOFM=ZtQs%/dW{$A~̚C)СzWޝI h҈y#/q.PxR]wuSv{1`n6,lM*'=Q)gǐCzuugyyT"!L{MNjY84L`E0Pq+)#7 I0G]t36*p]*HAg두%Bش`lO8>Xa56tmhjMN#yG<1t0 %iDz|ARt$\vuȆiά5~vq ſ{Lt(lvK8NQ+4HǡRWv>,ӉtW:FuC|Cz1̺]n(OF,<h-`uykK &ShƪGy]לP<=V2fqV2:bqȡ<)S:yLxV p)<+!Fvlщf b"Dև"bLƨSO-Y{ мY+l G d^^e+>|Xe %̄u- Mb0G]I -9q89 } a9b%s(0T:F#\ gyXCBJ%RJHkxlU‡Ip4'd5X\1<|1p*8;BM͈a -\+1LA=G.[jUń^r- j,(0{GƏu46`0W9'iz.P~1l.J+6F#|bH@.Mɝq:Vmϼ+@=r::4TӸ*\j= qf Bd4%6$˟YGJ'HE#5ə - [vMgE FD Z#/$ՀB+gⓛmAj_%8 f0njVtd]uJhƑљG5 (RM$(h iU6g(/+,NѨr˷. =%S>AS.D*`,v}qu_#U}`F8Rs9I,e ? 8J5Wr:cS.gF.TAR~$05yj'jr+L%f9L 2W%U -k/U/:E}YIFSA|!ggŖƟU_y7@ߞ2xty3_$-.ضNZKAc`,C[;x$gh\+e x,1mA[q,DCGBGaώ~ܱzO 5M+endstream +xڕYo@?"K朻+j>PJY$,６"e*i`<~;VwA%iHݭ7f>QBM=19w8Lф&<~70 ? Q>Tޏu3U</'*VM֛G>-ul3Z;l5NރO?#&q綳%S2 km]c^.s\懧ˮ-~MȏkQ)3~+(`/Qټ;6Tkn([[pOd^K`ḷC}@?$N@P{r d%?&nxxE0hYz_[k! +y$䕌Fi`yw Rw;*;+Ռv'bGq<[+ԅfW]#@ 5XF[tS2Ȥ0pIaF9;3?owE]^^o PGy5٬]X+CUNn!(!y:^@LSplޡ;+ +\/=Rt4޲IђZ_v"lZpD/r&p얯Itۑ|b(?0K5m) C7`I| _@!xǷiڮQF*9Sq +ſ?~%3?Hy(fM.0)wi0q" +;ܻt:IJT== ҋW`bM|ũ@Ol6E44=-Wq y{`Uxr-N'I^6rlCvClVB z8;9#2ao 3Gyn bTjcn&op'"z/x S@Ҕ%I5j:-/@%.u3w0yyʗc>~z?_,m n ! x.$W\n`vN֮78]:F ~\& K{tS,0zeÁSU^ aJQWBʈ8ir0Jmu rJpWn5B bu$U~h q'AjWS+$OFǑdmP i]Muy*>PO4a&aחQW#ɕ&2K,KP䤱o'$OAM j"%r; ԌCN]VZRv:с_Rƺ[fj+ǕLf9L rWUUkO4ozEy]O%f`ŗ8xYeK8OQs^Ubo2\OյCYĘo20"~bUp^V@ݔ]L5y?1Y~+H %*~-]*F>c۔S0|+qռDgaC=P_tގI:t4hBvܻBgn]_^#K.]qኳpk 2   2|s(c:X\)/JyO+WR:aQEn}.x- ݘrC 1,\H{rf!I(?udK.@-{)N@ep Z5">Rdߺ)3s%΍}endstream endobj 4823 0 obj << /Type /Page @@ -17507,17 +17377,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4833 0 obj << -/Length 1457 +/Length 1375 /Filter /FlateDecode >> stream -xڥWKoFWV -X.vAHr%&,y$>ܙy7#xN8<،|8FJ$&"2\G_G|/Sg3_p>_9ލ'ZkWxljv'f\_z3(n$ sf~lH#c_g6~n* 4mkB(0%gh^ {4ww Sя_ }N}O{3 - ղ_f:U ltDfY^ -<'6Ƌ˜Bh$0a^_ΔY}=*Lj,D+Jw5|(YdQؽ\#CG1ܴ@V .W8JwY [׾qϼ5w?QU`B~yNg^=rmq~t'"Dfsѽ#-_1oYrMw"gvQ&t||X*V%P7ר`By *esuĹGZ@2?&"lЫNOSe[ -u2+ XPԤ(K8(bZ ҾGU5x \A87R{Dҩcn(+B!j7>^[dG͞¨321Da/ȅEƕAC6b] UAqm'/5m,,_4띜d:s;b3W:|Z*heV`dzg:x^o>n=jpCOQFQqB-;TWfqQNj<㏨'1\CM0q$ -/KqPAEqBO_.)zJ;=]YAy/s`odC<HJ:[N]ܴŊ׌L6) T[bRtcQIxL)ꁷg-sƦkH̢Xșlj8}@Bo"ܺ;&558%.n^W>y. -c4r[XyEsPz`v 8ƮݳwI)os4Eד nxg$ԌQDC۴yXZ0J<KVS} U-s;̵߱8[˜4y޲&WvllzƮIc[0mwE>{N?s٢)OOT+^b#m.ԮVL$20?8"x?na*ɡ7x82!4a.9KC/8Oи_ buf<^a5M9|(;]΍ <;1a lGT M&8x̯endstream +xWKsHW趨* 8R&޵Hmm%9`@6e K~ +e/T +%\kƷq޾v絷jMU9sS;t,(]$V|PjEw`3:W:-+0A2m{Q*ҎT%Txn8tZxpiuۡWYKcv/p +) >k0~sUt~p +6 W:]C2ޥc߄mWXmÍ녫 !L\55k|^(1PS5LډcȎ``$QfQE\vs켰Y(/T}bTݫBԧsHR]'_ C:=c%SхJn>UCQڵ 9emB{< % ۂMCm3t+֛2 ]X],[X-bkFG0Pf1FM%Z{"/ :|py1]U?wָA*x(D4Pzj uzA,cP /c3h9`sU2 409N6 G&D& ݂T=Tg/PrP\(ͅ9z {8醶42I>"G +#|Na |D~J{7*QMendstream endobj 4832 0 obj << /Type /Page @@ -17540,24 +17413,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4838 0 obj << -/Length 3264 -/Filter /FlateDecode ->> -stream -xڥr6P2T<6IefeN`H I٣ݟ~,ڗDht7"?b?"͔l] B Fk?"L* JgqdUr_G -q^S,O_(Z$HGwOerǁvWkS/W:I@3,Wʣwsav ?ݰ:~$Hr,V%q$ "09VDR^iCW"= d%xS6pn)ȡC!UP a+ja N**dPe^{Xnxcx8m+h zZf&4F<֨ sWh, /{"AApluM9# -F_zk4*m TO/t.(ct{OZCo'yܧBͦ5ywfϠ=_,a!w%#ogHw -π"Dƭ<8$BM޵fSdPHTd;{@ -`|4" -: >Vl7.*@aƪW$&GQཆ䶝l駑36D:(^vW3d6[A,nniyIA)*xW&^c/JY[J)8ζQ"iY:RNo!MD#rv"MPnopa[CH5NoK6^vD#b[:}<|Et 1)3ɮ & U{ {Z]I?!% pūP7ݳ! , ܴWaj*Coh/~~'y[x~!#u NA!dQ <@ -HC @:-")ŞASV㍡N}/ C$ 3HdۺY -Y<0(XMݚ!w-d#t`Zҳ]x(",=k9?caYǶovU]yFb|f.a"r^8ыAX$>Ap_89*󘢠3D{r; 28`I`ob/Ɍz*.14-[R$<-1" t5S8DCl)Ks>vsN/X\+EU94LLaX<HѵBap,ܵf `f@aL=Z ܵh\V,$Z=fsmzЅf⳦ ZNp|M\ؕS nRIt?3)Gi֬3+xlp?O<;Bjz#4ΐ3J"N JBnBR "{wF"P;~raFh+mG.x4 -aęC+PW~;T#hB:gny:1Cg* -`_썗\')x=1 rZU0<$(-nTƱǁOg$`7S - Clk9Wn175'+gU6&I@ #*swJ>SȖ(+1kXt]o<;…(D.ȹ3pD.qb?cx/tʝcx0)g6fsn{G~|T9^Ɍ^EcDyCÍr˂Yc/UG7Dek]IV<zvcrی޻OA1ۘ%y"#_QTر4 l>j(Y^)#$i SS?+N 㗉jpj -m6%Ӷi&ܒlSJJ|np  \tPBXڒ})i&ldUϫ ?.]sj'|]s=^Љh 1.+9\Avpہ(~!GmF!{#mikŦȈޖ6faXǴv>֞.wYAu#8dXV+%Oww3'~P@㯗`0Һ`}>oeG9+OrrҶ΂YStMuS0X^g9O_J>ɘWmX -}Zd$؍hAXO?0"ǙNNd?l0+HNB"U5O=ɑG4;IbIj.#{ea/QcU*'*AVJSk@?F7:Sbrp\jynKI)<;3+]t gHFh[(RHo@>[-TsNl"`'|r_߶&,I{ O8rA˳#y2#($1^ 9n?>u'lvA[OBKrX?0֙gȓendstream +/Length 3204 +/Filter /FlateDecode +>> +stream +xڵZsF_K(^zMΥ3m"-H?쒲ssb,_T8 /R?Y +xwlC3#Ic?M\2$;e~ųEyn/1 +fQ/1o_pixWE\z]Ef/BG3(9?_vҲAxǀpb%@yN?N!B{?+p^4M!WeS 64r_a@ͧ\wG+op +3?k 8࢑#0!bk^kC.}%}1IMGwGU6ZP#a y&Wv hs[V1<Є$UD'/{&(@kI f8„BPƅKE +"u'0X ,7 e!m;E&ϒ{3صaD3"#OȐl2f}$ Sx9Y{QB!Pn&+f^,BɑiZk:kCB)MR:$>ZA8X/n__.{0OI Um&rtpDĒ1-z]1Ddo +D^bvv|E3| #i`0)&F U{ {Z] Ae.3adپPJScy:`ӽpeM+pD#2f9Pw\(N:{5Jxzq z +y?- P; P>I+>Y>ԽL27_,[{`L ? @7k~ZT_@2g~ڻ劼Ůmp vKz|}优;~1+Jヒ  ri=) +1ѓ%3LNHeqˢI`o0~eK/uKdg \Qiނo]s>C5Dyu8bXSKz!*0|7t /4{sh=NXyhZ]0m;~ZiB3 +2DbO6MLVupk2cWN5\rBJbt覓ٝN=JYCf$ `(ag17< D C̖ZL֞oӔ/Wи3)`E˅3B;'(Wڎ/]̼ifCO҇2Y)|8G(`Bq.tn+  C'a6z|F^p*ӣ?O *rZU02՜%(ZnM1I`&uњoLx)™̖IqY2`=哌*pwtI~qam㔔LUK޽# "#\W7?HM.>${r[&.wR s J٢?-2li vlz)~$oL5h-^錞^Jpxajɹ}`KTr8OPQnY%e앣^O` Bw a$j\Sy#]ΗNJ)8둌*SNhĬ~ +̴vY/촔EaDpQ څTש$J^VǍcNšQ2_1A:Mv%g^BR{EDPrO\CG?o1 DKt>_{0+.#?"Ns?͗^_\kJ'"txU@tddя~"Ir,"l?}Z945gBa,J\bq{ g?l*v?\=pu 9${ ئz('kk&o̓.ҋa[|( +$cBR#_+sRNB3zݵ6{? e&ຘ|ܖH0 /s3gZר干[7YԤ(z:FAp[Sou;=(*{f9j4؜<͚1z\:-cUtFAjX6L̄?V1oVhX|0Ox&\ُ],<\ QpSI4xm^| OspP2Xqטp,Љ +=J-htl > endobj 4844 0 obj << -/Length 3294 +/Length 2833 /Filter /FlateDecode >> stream -xڥZ[s6~%Lx[6fd3NZetRs Iti 8|8WPʇU)_g$ Np*l^}ClV2?[DDzu{W7Xo^&IRWׁwdxpv oi> ֩n׿޾g"d(竟W;핯tW,@(-ǫ[Y[cD:UQ/1" U* =eޱQma=䏰uz_ hd7 \6]^V>]q`~'hDe?0PCy(SQ瘩LoC/ tib&UYM$*UE@#Lx:]*,#53hsƤǠM|{}Ы Dhwl̖*3*2&bR mtxOmѴ8(߁٤qeǻ#t04[50'Yr\dh:5^ܡ C\%<2MpȻ׶֎+͒3`]omBFLK4 KV|-k`0BH l~}4!6D80dP  -h1F4gRf@ᡵhwL[;'!+ \ť׉*hV[f:DIR1 vKd SB=:&,~[j8ƷH3|)"՘b<@~2 'ob ySTT.+rڮwox{(%9 1fLeʼL{ f&o|_Me$* 3#C4rab;Q_f.mT17::#-^?pHKt3d7hlYu5SCI@4$s,,wۤX>1 -ث6K CO5 f"_O5΂5͂pD ,Yc#/tlY(M vܑ xZu;fI|_µnҧRQڏ)4VIC4}9e'9M6NU'^e0b |Im z&eceX9Ac%'3Ŵ36np/m՛Tb -Mר=I/R >ݵجXR?MՁ7]ipa  -O;{ܳy;n?jKNG ĭu&@}t)7|S:\w WPd9vYn^dӻ}pnk(]N?';[(n)‰(RPv3w(r5TÄMC3B3 -&*&]:|(拝tAhWGʵ0jlW k7hOOu 5h%fP.bDU<LNw1 -fwO$(H;qE`acFۓs75xEoe˄n${9zc$8n"`|зjav\Pf"G_.Wg[I(y9AѲ[ Ki#ױR&饴Q5W-/}'ι4[1>F> [}WG*SܓG%x1rO囑TAp|33~&>:-?P DZa|ރw>sҺ1ۻ]qOmsl0t:Dhw=PnJ"*+=@Bi+5f$1RY#hC8 YiHmqH{xkRw1 yDGAff;WTgq΂T,(VTu.f~"JL2x`( -[tx_C1/=ALxFP݈@i~ŶưOc l -۾л gSOrsE|;A nrMc;;0eUvN%v{å%z']3-%{}n=Hs"FjN(nj֡C TH[k[f(ǝkLJOm1% N-:0e?RI$ۃ#64@#šF.IwKǚކh_=|! I\ʛI彴|Q^:V:2߶ Ţj롏W~ <2e"LJ-§gBL]2}np,yDn d| --5xWt\ck] {^TڜWU#]Ir^Ӕ'[6P?Ӛ4KzO ״{9-$w_/},C/7v_w;*ZӆOny>] @1%PPh 9s~8[ib)Â9;Zhfa%dfY`Θ20-e~Sr I,^d EPcha97ÏKp }5Jvq(,\:D3xs -FpUu.>1?'%,Xc1LC!4 Hq Ι0>;4ߢ;ᮤG$ 1 4Ӑ$ssfc86dwd':_9>IOJ$i$f9n91$fnݲоqmC7?yX)T iqٟ1e}AݐoNJdLRܕ.FB/*xtU' -( Ai+ uz9zBHendstream +xZ[sH~ϯ\I}dC,$l1<(hF$~ϥ[jc0BQs?9"/Z2$i$dNp'JFϏl$ +Ef%m9_ ^O3)eb:K4xq4 +ޜx~K*8'Χ(8yuq/6Mep>}sHѻdd< +5Ced}ZI\9W tb#2iz#=rwAS4O$ʷniO lhpm/^(xnM6D=Ÿ٠@Iƣ8NRƑSUު4^ԯ%LafrIrsK5$Nj +OqSBocOljZw9ڒ- +u XT3D*.>e^p|o)W՘[W^[{'1dk/dWA}܅.<:IxhC1*:^aEk8>@l|,Db;B4Pd(O߉t#Bð|l[ݬx.P9͓ml(7j׸ +VJMmQ;RLLv?9z!(Ӕ|wjpD<S=f8e,a9񋠎$WljN-Ok77V=1 q5c=Zrڢ[:h%YXp?]D4yeY7G#vlRk!92Pz@bP9f#u~3"X$q]aN2[05O'8.+-:@wI912Hf='RamyG_,%zUw3 +x@_T~,gۅڞp]k IQ08.4PD3ODSFB7[#򻟡a,9HJ +J@ ^@`A ^YDrnĈS&b 3)l4Ibq +j0hTqBQ<׷ǁړdIhږS3nFZ,\jG(B=@ơ}OBﴮJLK + ;dfĩp? L; +[#)vKקZڊ?Zi{(S2d+gj>E5l%)$n3(Y,h &Ь^cfڪK +bAxa(\jq.}A&CsYzvUg5S~ٷ1'凱&}okxפê-#F?~@Xm@QؕͲUúpFr2IcΜ@53M.~vOmZX.v ֛}j[dW@(E|6ꠙ_}uendstream endobj 4843 0 obj << /Type /Page @@ -17664,21 +17543,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4858 0 obj << -/Length 3035 +/Length 2384 /Filter /FlateDecode >> stream -xڭZߏ6~߿·/H,p"MS$dA]]dˑ ?f8D2IA5783!,|,҈"[$iD.6 q w^]JbDV̋g?"YgX__߼|\ ! eU՛7x+n{+G߯no~xy35 -GQ^Ld> bQ(u}ë^(yx 4 ge3p)YOSS'B !QA2^ BS@9ŋL<(k~SBOhj#topo"bEQ‰rqbԜLf91hah-uOys U3H%]o6$^WCqXƉ9e_OgKA(d^ jxxwM+{ AG |8vF$(64El 9̼#2$1KRqq`ALf9jDv%76^{Qg"A(daC j>xxȊ'gY2ɂ1Œ)w1 -YPB."l),4fq?pQBrbԴLfi1sx#1,<(!6@ooQL[-es< ?|(dB j.x\x;H\t|Sk(,>uty2 +"o X}SD c\d5SY2 <|YVy`xΑOOt(NFLdB,&k7KgUX>(dpl+%reqC z㩋QBraDLf0L"5]߸^2>.War' K3,t)!]6@Mo..udQ긨d,̐ e6K6Jnzc}\5=SY~ oۻ29ߓw: -OdGIݽQ"+]J =b-Knw;zKn)v|*kN[Xm,B2wWr+.bo'm'ՅH-֒Q)]+s[Ր+."o~;H QP͋P}]ukI&rBKqma( TzFB/馴W475Vd$kz U/BgKY|z~ёAHx,K l܁,_MUmRUGƄۦF4ܠ COmv\1)u+R|Lxg -t7ړ+C*zq!4|z)@ J}hϔl0¥ {o>=5=St}%)P{R(P~fb75@ onq&*ۗqBs --vwyOtIBQA1!%69氾P Ov|͗a_1Ǘ&V -N?/-0!tfѵ -m0Ă!Mz fG ht54- 9ZWYɭԂ+GUzrT2XB(CmTW`8mbXJs+S]`f/eޗ:a hP$]N2doB[X5HG[lP>T͠3ӥV%Uu]8=訓ehuMqPb4dfeHzᰒɷkzoTO#DҭAfD/e[e+rz(Td2H3[2M]\Mtq;zk`d?r(ҜWʞci`|%fi!"ȎK}uZ-1T,L&ccY NhK=$hM>̋ph\Pc(ذ*\}CV5 ǞΠJD?#`UvrՋ(Îڣվu|[ h9Y ˗r_V@ͭ`&i+'眮O?3hhp\5GSY 睮s9ב4q:oQ|6:ӏHd|MI2)-h[ 짔#7y>C,gt) <=107A pi_©$_%‡pNq/~f`(ZEGT_(B#q~Yendstream +xZ[OH~W2ni\UFڇeF z4ZePv7nc!H\lC@vBusN}Ṽ?S,N|dx 99o/ +(HtXӐE9퇹rD8Nws~zvT?s 1}D9/o#@B|2 O4]C~6AD(S/ѯ}gMp22DScH(׋ßǟe"Ah&]Ě]I5E5q˿^,?;wpe ,0ҧ͙UYc)%G4|ѣb9Z57T mq7$upbűSb-Q<hly7{%iIn;5zsLj `:7chod,|Z|[-AhA`UWБ ?v }aLo3Ithxzzz楱_;m9_X֞=@l`8C9U>rYD~d̛^=q{nJo'yiWg: fnslϠ_B|A_v6B ȞrMB 1ߗYNI/8e +now*@%qjr >58fq8ᯩzMk$Vw9ϚYٮ&4k"{1r s,*{h܇cbޕ*r6f\ҙX[_:&H8N7@JETĉ71lO؇0zZ;1 _G4 [l8xw{ȝ3bKn-PމlgY2jX .7;h3Ig͉R8%LG*Cb=咛pӎ :0!key҄tbx†u]npF1_Q@ZbY&7]F= p̍%?#q|"w 0_CD="`k<<7z<'k6L[EQt8^(7Yro[5N_cTOi6 ݥxp s*cԂުqU$Fn2j 3ێ-C._a;߰h`h]L) |S.\|xPZUXxت)Fpx x-pTcJ/2RjoA(<)> *_"WD}zГfb O@|M7Le'(S%wQp`q-#E+V7P"R}vQ-bIOF̝"]5}'( "DiGt((髢x5X!yF[ {IW㤵b4pqyzI Õ9@DJD`CK1a2G:lXA{G"37e2 +bp`.5ҹ3:ª()wn&19LxjW<{4cC&#N4D|Pxlɥ_¡$Ql+Mk8ꊇAG<6JơmڇzP<#μP83/_,HqL6Q!ߎnb2a36y7*7"0 l Q(, \$qj^WQyc +`ı,F|H>z)&%bTG{i +HS͸R>. W5.3Qe;;3G-h.> +7\+sCO.W hpEusV5iFLUQ4QQ\2L"r#GPLtpĀx⺡x)m= +^Ѳ^3f! +[5WP~Λ|* ڌ{m\;&! w~ƘljWX! Ԯ%]}L<Q +=*y!oA:MhdJ< ܲ9 X\Х& O* qXUP.Y e8*Zt[4Dl1Vcӓ*0hj.D ͂^B Ev,M-_M) |j?.z,Y4veb۽<,/D<$jBOs8w*~2\a펎oF}endstream endobj 4857 0 obj << /Type /Page @@ -17707,17 +17585,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4864 0 obj << -/Length 2747 +/Length 2718 /Filter /FlateDecode >> stream -xڥYYoH~j"1>xdA&k8yh-䐔m[WE{XUu|]qgqgIh;~:d_8-t -BH#./>FuIg'П-{.[nb_.8tןq)na͗µnHv^@!E2 dߎqqqw35eCpS;·v(deM%̯!! ëˇkC4'svƸ_9ZMjOs0J=E\8j/$f >-nlFe2I#+BptW)R띴| ssuN~Tw&MOۉ - =\# !0z)o's D8&Mendstream +xڥYoFBPh/Hi+q%B,#k)ʢ>fwgfg~3;',v0Y6Yn/f~›D8${d"yqp};, CYfۏwsw#NE-t4ͧi~.Й_~|n>`aQ"]&y6yy>^DqQ(?.<MxՈ3K1s71 u4 +PAJ `.r(*&(wA$uL 2nJs-gϏP}\W7qnrcmu 5 if 4w$+[`334y 2G#G vmTi7r€" __Zn 0-;Lu@ {T='˱vQ]hK>rNBެ@Yzϝem(@ @]1o-6~J>yvz\/<+k TQL@#lfCbU[kPF[VC bJ͔Si-lpqMZв:S%w=ZnR-m(缿!K7B_A:e)u5/q }Ap.wkUndfj1aW!7 +iՃjLSՕXqZ>G8/*>U}e$LN='g#`I6,)AIs+&7Th@e7˰1=|Y3x#Ӱ/-!Љz$Q/M "؆{ )@R Ae /6 xZ U:¹B x [bD^?d2ƚYC? +a:H:nk|d`!d{)`J6D툝CF MTR5AsG Md譯y 2(X=[ã T%bA<ȃQݲRnKY0[ArvA EȜN<€J"r ͦ&5{s$Gd`nfFEGZqD%gl$3VYOGa 2MY %t{)g͸@u;i9?APΓñc+Jy +!e%uxs! rC Uݯx6 67 wm-7!;;&S 5trD1">B2#16U!`\ Ѩ07 +ƍ~$ '|,m[ AYsM* W @[52Ě t֒=^U~,)sP 'j,סt!0kk#Q gI!( xѻ>JVl~ _]!\f8{O9}TOzu{ڽ/J4[$􊠤00E4wS$wᘖ#bA1,Z6.hK\*璙F-vDsL;_*>nVO|7 ?:0?.ClfLUl}iG%8aw++h(/WT2^^yK ZO&OFⷒ'ݭ:9H5 pYo7e&^ 1 u# l,U ;zt;]8ޱ"x6{n +y ˖E2EnJ #П4GGvY\ȇVphV7cKp|J(zֹVL4EU57x0phH/(h<qۙ<聛7>m\1)YfB8OM:B.'"+;0pï,za 2Mdib8XS՗q粣`TI'INqh9u-LAUǏ `endstream endobj 4863 0 obj << /Type /Page @@ -17746,18 +17625,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4870 0 obj << -/Length 1848 +/Length 1806 /Filter /FlateDecode >> stream -xڥَ6_(V*.),Ї4M-tu4p$y9([+A"r83{VIB!uĉ:Iu9N̔,7z96 -%E*Sgy{ r}UXxq~xyPի?Q^竷˅ܫoq~vgG)qt6 3)t8Bq9Dh/f7,pjNDsp`&Bi'e@67yխ~~Vx.n}y :O4)o֬ -KhUV}tu]6=?$tِYwTYuٿiw=u10fۯY;n}>4]O]ztٔy)gDӛݬ^C{KI)\KyaSޡO ^ޞۦ|sqYi 1>L2ڛCøY{()(Vzzȳà )?/xˬ}3O Jjݸܙjekʕ9t4V kZzd_ׇ]c6o2ڴy0ɡ8pw ?vw"NAHɶE Ԃ5@3`j#Ӯ\vlû[1nLw\|nEn*MZ+X ;>@Es̍Ԡ  - uA -n]jOppҗ k:[<}Lh)TV5j6V\w'`W F)g[.khO QK!G+ |GP~]ZhKc(K$"W{e|J>+Rh*Q -vG8$5_v(BGG f?iE˫R9 3z'$JFSG$ v$'I;ݶLsBAHCsMTz)|-FV]2/|@,\B717w #õvݜ%_x6|50v5~o5@#z}ʷjkͺ;*^jBnH]H: (ck uMTC*0wzcq,ކ.CFh&m:RIxNŏ-|ðbn R'&&V`+c}țW/a!O/GeJC+uZ\-ץE6NV~jO6n"1Wihivp~yח?̏3QJ -@8.َϏ6 aBwPIx%/ibm |G TY W1AVTW`Pa_5 XQ oم b KG#ڎs^A^ƕ9Ӡwޢ68*suS lG{u˥7ޱR%*Yd4-#Q=BOѝS ,*sycf//) ~Nb4Besk),sY)> S )4< wmk[xQ ^?EЍ#ByN"_RUۚ{>xqn~/ F 8o˻,nM]ttcIu=%wqz=8g6.S!-PX2Xw~ᅉrXuÛ6]Y=n lK(ط-l"H-#vSpH Ђeȴ,W./rޭ؊qkk{T=Ū<6j`P`J(lazs_b("j 4O[F"< B[2edkXwx"WK#"MCNEirlݐZĨBA fњ< HRv( + w>P]50)SBADQ iEsჼCjoVw̹GL@> endobj 4876 0 obj << -/Length 2308 +/Length 2228 /Filter /FlateDecode >> stream -xڥYs8_VQ>^vziqfFfl]%ѕ䤹J|l;-) ̇bŞ.fi&0fyu0H0$$ [z{QΖ/λ^,4w0tD4͜wN/¹<{w">?/p=|s,tߏ~]7#,Lߏ|g+8G.-}Otu(_=+fjJqyq>At ,}/#R܍6EݩC(ob #u#8/ _}-2s)*.j@k6=USj\5LiJK],["h..̹ޕ+J@Vuy q|@e/P҈p%n Y`]en qSɷ *žE!ʶ+ʒWxի|GGkhprI̩R~Qc{FFH꓌d"B9VwuNѤF*(P$qteGsk5#GlyZsjbXwO?d{r oFFodFm -?tcrS0qі5Wdȑ q5BwMsxwo;śhwJ -R`qxjl*ވE-9x=5jc}h^K4Jzo,tkAD6"R R?%qvٖYhH{543?|"f-u(5"0·.(uݲ/_2Œ״] >#npANE,T!EHhib 49!b>!6Z6t^6 tޣJ#)} zBLҟ*pI*BD(kWX,qҡ!̮MC*lhby`>E .%Xo 8'i,;P\l9O4%L#= -&^OX%X%h%MV75L3hsBb[t3f+MaDDf"#t"۬d"Ira(bz0R* -=V4uq=ʼ%0*MgޠtTt+vZf8$TڄP,(an ȸXӎ! [lCK|lCоsjCd Ek\*peok!IƇ|eVR1^e& / l4A%Bٸ8Pذ006*w۩1lV0po[IJ -46peF+!iHnMMOD@C&$ ҶdjQ4$kB]҇I-76 R\a; -=m'&6*ۄ՜SA#?ulk<*Qq$'!IwRveu13yo1׮nJ5G&>OX7}EkwiaȈH{AB"нI$H-sAǮuCd#/ *#Z_C$4bQL2~rs4Dd+F-۞b _O 'Uz[#&ztQ8ldM^ބTIP½SE4*Yx~4*KmE؂L)9HE}6E0?,Db$lk"#| aq E8$,yRLm?=L>@G_zw09}~n.WMqn{iEsնFKHx}"%R̩) 㟟/ԻRyU)=L$1m4/=W IWmF?,<GN=z:0/2mLO3{-Շ>H΢jh= ;&rb[0E{bB/|@{.8@س("kxpsendstream +xYs6_J̈́4ENڦ\M'LR/$Iɴ3}=cb]vf.z$r`9[$$,NfޞxBBǍ#z:9%g,l&Uzv8s{H7ίuuNxq۞uqӇqnjeϫ w1;q`n:r9N(p0= gjBR;H\:I"фȥV܎5EM_?r{ޢgxvR,G~JP/TLj'VQMQ]XUJu]QԆDRd2AҎv7L@Bz_f8 2-Pę-*xIB])Zm?uG_ßh8 w *žѥaʶ+ʒ 3s1N,ҳVUꬭTkj9qK=Y#GZm !ns0ge09ػUr:;xLwMsxƹwo\6Z&Jv.nd#ѲծD8S |_Qz>Q^s%PB\ &QWD&g'6g#RʉpZP˜zfg/C]VG<J]W05mhg P̒48'N^>ySnq=) T49J/%L!ӣFԄ>b)S0fwc;z@+L"o/NX @KvjZtFwJݱʺ61>t&]Sɷt"IF-~js( BHz|SСJ ncU`B,2tf /#ŖWfKHvS;mx'`xݍ+(i9c`6t3pc* kИϏёN8sB.ܓ mmM;h[Lj"_x:kIM +0ذdcﳉs_8[s:δqʼe=\Ago.\8nV2$εp4Cky4 +<`; +|$l-&ұM(]뜌CT K\9| pƇ|eFt/2ct·%ov6 +؏]\gp`PQ2.#?C +Fsä;s]^0o{JzpokI6peF i$\ +~`DC7s8VOv}P"x? qEIЀ32֔0bw{ԵN5BL䒖b6|HP]X%4ݘAIYfvGRgn N:4#.O1Ӵ4ZUgLHlf[9aY CE0}ӺϚ&owC9 q`&mۿ"{HN'L_//.߾bQ"%?jŽ|| +u/)LYzDas9+et+ةG;qNw:>|*ZGED*oNFfz)kQ͢>47v3> endobj 4881 0 obj << -/Length 2439 +/Length 2381 /Filter /FlateDecode >> stream -xڥkoFC -XE*""%CȾ_%eI.p>ffg=pp~< }e}LְU(3`,~)ѓ0 ,Vױ,׷w3t6wлy{w O7Y|4Ubeջc,d׫_Ir*K'~0Zɼ#{zXDԏSu*dƩ<8$ʦ/vY޲k<gBd!#nxvDP>}~/3.|W~صٞ9:&cL^e.&!ۚeqXp<`wGa%s_Z6#.pʡO{^m>G -S5dsYXҙg9B cyS864i'*! -%Lh9{;i\SWa4C ~|U-l!O *R?'r 7~489(, G<>~:^2Xң2!4/῞W:9_GZ]e! V(%6n:FFQqUJ/* D_wV 5EU ˞MDH[ܒZGJNѢ[&~Qa+Ȳ D,o(`&l%w?ɤiaH+tT!;S#ʽ)?CIQ^ X Ɖg=[#݁7J)WdҦX,D{I3oKiXF̻u1YowSGq(@eKy5&GO <:xAzD/MHzs(}?}#f**T -9^JY"r8bO"?ldzIѴdseSJ*՛jƉ ̇fy@v9S -lN`AL'a+TB$7<}^A/^GJo Ա+L>~XFH]tD!ELD%ň.@tAd4C*xo^(!yݬ(X[S@1}YqN(O'^,}jk[dj(pb 4'*鸘#2lL0:.Z\7h(Z!!s]۹CIܫb^6dtQWJhȽ)zߕ'MbQ yKVAݻ6/+WϽmoMIG0rЉDuƶ*mUR%O'CW-'΅`t'TkMvc | J4%擇tuhy.>o? -@W00|P uؘF,cݽuz%1&zѕ_:PGEg_?o2V~.QGs=Js㎷endstream +xkoFC +X|Ǘ6.ԍUE."eCȾ_%%Qr}{Ṽ?YJ٪f/L^֛?Ez{nꥳ@'B);_qܼ{L?~XsgG~Žy򗫷 H!_>}f9˕4`~+*7Jo +cMt(xnh{eN\9//|j:kr@}<6%nx7O&]jl;qtHGdy]6n#Ƽ) ;B=o +P%вy<| מT}Hdawߋ {-b_FD.pmTduqYN6WUY U},\/H|2!o1~6P HE$xqv5w ZEa$h{} \)agӟEz~-Dq+Ӝr"oH;N2ּ=t`I*,~ *@&!+,mx= HXd(LA/վ*I)WIpK[R@+H܉l[QKˤx J$P%(0Q :.Q[q*F/E!-c Qmg5ItŬI[>9EBw=/`0!5ϭᄬJ0{NGlR:- 9.eH`w1εpxMY:w T#/^x㑷i}^g0]0(_q )3>9FǏߊʅT*F/&9 qQ|d2hZ2)%jA곲Ɖ!}Sls ^+>O 4te ´W"1cGnxҕb% \ "cIyڊb 7+%ҥ,QH}Q5wwV/cm%G^@^W)m +¾X'Gˤ@lb:ڔ/:JA:. K9'SCdId"P`}!똨T1i[<1)vG'9bczpڙ(F@jmR +|7䷩˝;"DhiUj ]Nhmgk %),RIpTzLH^"r>:&_ +Qb_,_kaD:aN 6KV41O@Q̲&N+DPtI& fx~PSFτ=miendstream endobj 4880 0 obj << /Type /Page @@ -17848,19 +17725,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4886 0 obj << -/Length 1898 +/Length 1857 /Filter /FlateDecode >> stream -xڥXo6B&#J,붮Efb节[,zM݃XY Akxw݃䝤Ÿb%\?X -?tp <[HgjqKXX%[˫o҉~z)O/_R`_W#篞1?quזoW/?FX!AL޻V_,\'u+$,J7rq}TkRs.Px LƄh.Z'YsKe0ἜZ3a6͚v0W5 ;CH W=FFei}f2L5inus뺼hF9Y760nzzp<,cd#UyX<y6:&@0)HWipES]n_ikApctGRIlauۙSr+ofXWͺyd ]xP#Iߔlr!45-SBDžLΩFDIix3~ Mtſgۗ捏⡐’B - SEzwTmSc'܈pHi:7) N\iZ(h(x݊nyor -wjy֦+ڷcWE6 v?`+7pٍN=ul&P7-NPWsiuQC#ԕwb<W5\0RrT[9alm|keFYlut;lL͍.VvK.$Aa:cرg'8o4V}eGx8mRMfຘBdn caBej2tU(b~fzEQDNY[7YML%_3P5=j+ gv3'Q''%pŌn?cUE*n3c2TLDN,ɡk䠻&gAݐ³e#os+^N5Xxܥ^2A m"9 ^L*?_endstream +xڥnF]_R@\i M\[EP$"i ;R":q0wڹvgFrOZ[a$EVRk 3i(Nrv{[["Y_,]2EFWWsi_xz +Q}_~H#^?,_Ξ-G*,|ic˙#8vvc̾]Kao1ׄ q@i\!r@c9 +cI/:!t-) 2 +2Nx.-'K +Ǐc5ix`"ًҷ~A렍 NW~WGF9/uϛ&)4;G%$@@i^^fvMeLwY>%]PkW w=4LQ0#冶Zo3s2Xx;:&@mO0he@SvIFz~2I]uxOnY#U_- j Mpd]6DXkF~UFnHlU=B0v2<tq|_/<2ydTr>M~?zod ۽Z]eAҬ:NoV2pr}"p+/<oxT5 +y-!7A8(&Jars@h+fu-LQs ;󺂆SKjn4^ه =4BZ*]Gm(g:Dؕff† ~78&[PV5C[2ʌ> +}Ȇq=e N36;ᱧS 0tM4T'}}@0tcxC|!j{hh.sEO(5ªt⨃.7M6B#|l7fd9č{rFcWtry!T4}"svC!h4L/1 +5 ) ? U3͌ ( , (Y}ֽ6۱|AUp"V@Δ7X' +h) 6 ^ |NJdlFAtS0)1؜!)'W'5F{) LU+H;mct'>L(> endobj 4894 0 obj << -/Length 3910 -/Filter /FlateDecode ->> -stream -xڥZo6bkP-+z?7R7v9Nޕm5Zi#i}gGRԮ%Cr83/|k l@mixsBDq~}ruY -cX1̓q6%%aS@F 7E{nE'bML̉y<(cX΋?5xC-~R=C̴?(uS?z`#̏-ǁ2e9UsV=^fz&q巒G(8M0B]AYwCl1^x&cyۼH {,s>MU%yH|gD,Oh0AjW5 w٠ӊR4k*q Ɍ2g>K˳( - =! Z`zE'nؔmCVK¸bb^qx5>z?L+XPB.b9sV,qnymL!Et{gIcྐྵr&F)k#קCESi'"Weֻ@!";u,[,煢/ruj}>(}4jdFT˒-k#Šgz:vy6(4OgO[T# Xte/zƄtQ0dʀvph -bִC|J6G,u_buU A1mv0L˖h_qB,ڕ"+b(פcL mA8!XYhI2jXD[x1t"f,!i8ȝ+:/fx:Wǣ{ j2tN{BOվr%\+d(o{G|Cnl}֓i3 ɸ_-C92+cM>)ܘGiR84Mky2!Iė,:;$#%m&iT5c)xvxͦU{[UqCgݢ%:a;?2Ϲ +Xtr=o_"=ø9Z ^sۧ/+C1k_{ԍ"wʾdE ħ[Pj1,9byk}isc%9q84+E I!Y7;\R/Labv{3`WO7`1*/߫.߽W -WBy'62a;/e7Dx% -"r#ODD beWF1*H]we7#ީSCl׵5죽 s7Enm)Ur/L,e&Q]GfyZ}Ι.ͬ4(Rў>#waYi]|4 -ݖsӋMx f0lvflAOAAХ!0He*6c{mw8emh7VvR::e)z]Ku%lB$ I=$oV\5 ׳"֢锞#F܍4N4PIlʳOf_G+M9#Sh2[ F (VӴ -f -F+ܭ)8N wBg!j೹XC(^-a XIꗗ׿-A90Q1uCC<,[!MoAYw7ǃ>rbN ]~}]R2X@{ٸ]瀮I1#V+U -nh72`BM@i kbW'BԬByiJrǒ -B2r+)Њ!Eiry "ʐVMr0{^+fiL*;0zEkmz9fa*v9 \s$SGNRqhu?Fvγo:mȤ6 -1sq $rgCMG잠1I&,oф#oܫr 'un{9p`ɸ5=bXIfj%ƒSZM*̸1V'k{8YiQHţ0q8gB%IeVLU&kp~mLב%+sG=s1ċ]5 V83}[`}*G!* `VZftO(q$&^SQ2Z5RΕGjq@״WOoe!5'endstream +/Length 3798 +/Filter /FlateDecode +>> +stream +xڭZoFB5(D ~9R7v9h E*$of~+R =vg_Y3YfI*Mg7GB׋#Wq8=7L\}tN<9|nPJ9~I:oN.sqvzB眺^s5?ǜeB! +4 ";wfbwifm`D0w$ r[͢i@;f1`^۱5u.,̾U`Ր--s}kҸ\W>qe@4YaˆUjxIf![W3mc:i($vPK?F@/oN'(&2{`@EGz;Y%NC揾#aiPnsS'X"m 4:둀Gr/(&m 1E+I 9 + 'R̢ [mx1t"a!i)ȝ\~jiAUxN;4azʠ٣sQxA< o)4,A -j}aD1QRS =pZj: x\wÓ {s ΝtrkVY[X#$$]瀰iДjBy|7u.r7Z[1j3ΒB!K6rR^BwX6lZ~"fH޽b8Ÿ'Z]/[92o_h?5l-:8ȵ>&ZZqb9~+FC#f#qdfnZc:pN%xLX4`7ڄ|5fz-sn*)0kCuB۶Ǚ[l8m*폘Cdko+1{9Q'2߷e +An0G +u9T(3hm"aX\Yd=.Sy"%:ί;'|ϣ KPER0+‚A+KQ,"9幉 $wHmO^ +Dž5]o, AʟG8S=q R<5[] #"7BO +0#؇w Z,8$K," C:G~u^Xs5T~;Z&#:mmcwU:rY*cbQ,sH!W*""Ep16eUlEԘ^ǁv3ERIg0}an/o>Cf#׻_Yh敘;UnZc#~-F_#g+[ɣB:_(l;cPN q䦁AoAw`\k <M D<  Y}VW`}WkkN % `g |DFUȔ<1pj"8wWap2+E1Mn}6sa;yqVz1*w!}vQ' +ͺߥ(8mߕ6 "PZvxp$ Ӵ[7hAdA4U?11.ᥓxGVkȫiAv2d/aKs;tڢ߶@}4.OԒ+f? +RNK9<&)c 6zdSKrN\/7鳒ǖ_Vq ?&/< +MLTҘD[Uگ(-M'Yly/J9SA:m6ej j,a vЕ7ª8P(:)A<.[6j\KJc4" y*A*xmuK$ϗ:?DE8cJA<̧+ L5%ם"RIc@bWXQ5_endstream endobj 4893 0 obj << /Type /Page @@ -18000,30 +17875,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4900 0 obj << -/Length 4366 -/Filter /FlateDecode ->> -stream -xڥko6/',zޡ@sE{Ms惼wjWIkEz!9{u?u~4Sβ*̿@ -ȭZ~:}Vk̿Mo7{ݟ߼Uޛbxݻp&ﯾh qtcp]_γgh Ǒ~s?v)5:L/ibJ_qADDvp瓚M{ 3o`m3? ]ōW Ҩ8Bϖ5Qf=Gw0x ks: qi(WAgqvxh"K4Zv%x=ѪΔ^Q}?5عa q StB0$LD=VG\$ tv~מ-WK=xhuhV V -99'J a D -C cǔC<n+X!xpEyE^WGVcS@W_H{0jU>S{h*{`h(yGAG2?Ȼe"5$R{few"ӑB/;ױ%86|E'7g"LJ3d)d7Z]э;5"[52͉\ؓd 27԰ 3$m.8gt(YyA%yuOfRB ڍ6/7~/zLj,V@Ga6 >Ձ]UG\ڢ\Q Ud e.Mֺ#<݉or,s]fz< _oXu#vˮ~2]||Xf@l|0 7Cj^8Wk(M`C`!32f -CjY[U8Iƈjqp#aLM$h{X"kZn7" p,N~Iܱ~ sACDJRHW^vD P0Uci -p0UEdǮm1|le2ʔ㻗B TNx`HXs$FYCW"!In=7נUۢ+卜FX -Vh7!kڜ#AkasBBpEMSbI2 Hucn' %;/ -fhgi.HӘxAj!5*|b`5E̪\3+T(a^!{kMeg2Zѵ;LTeӀ|o!!Hi5aS*'k,/lQ8:l2%W(EaIB'vH#L TIIOoaə*$&ܔ_$3m];8p#﹫ʅ P72,I'}ג}`@rIRwI;N=W&3)ҷv1309bSF67}e*ty*I8 fG-5OQ.!?LS ES,edAL끙y[S׆#R9P&z@_)[BTsDtb% -8r(.A iAέXzs! -b[hI>~ۡ{?ŧ88D+Jb.<23XrBU8hboN/( /jENsLs*ѐ_ n=U(j`^E@4sUB(8D]-VXM:~c̥KƁ9˧R03̬l @N#XH - 0lS&}6vz>`7O1,U:9lQ=A7!8" 5:+շ*j ϞD3{}[>Y,~N>6鳕:WIZL̙vM=U}2>Uo\5*ꎍ^`ȵ/l3Onm ǪI6$qy@4_` ΊN0TvK]1ddol~_ː^dVUsP)Wӈ[4ͫ6.!>Uzis|Y ?cVBendstream +/Length 4261 +/Filter /FlateDecode +>> +stream +xڭ[mo6_@WDޡ@sAsѦE{HA^ɻBFZI;R$E +gt~f|;S,N0 e*S^taz +[b?=Z`R+78&OR(wȷ=?}?-ϱc'4Z*~5#Fw+e'+JG ty\5D& nxfm <WK=ykt%n x"i%0ƑWKlh'~8t}I膺`+K7,BGqo27OSzzܫqHʞxO1F9a }hysǰꁟŮBVu--<^ "Of/H s6&rց+ +rٕŷ> 4Z30&Zޡo Q}"y8<{tdmHW[)& +~a;52$KY,jν+l{<.<kamQ=Y?X|QvY(+DאJ#Ulx$wGPc~}p[cWtrrvwxyv-RF p-KMVLcO#ӾFYOHh|GWCk-zbtK̊<<ϦqWsh=?oYϏL^;t'JbvgoC#zE(u￞[= սHIGp‰ sNw2ݛPǷnh.[_AU2>\k$4Ivoj* yUg]kl3mC=b,hX<APuڝ`':'Ӽq}G!nw+XchƾdwJtw_"2Dq;}\]vvyLM1p~tEH?!-g[o{S*,p'XcAqh[I~ {5c۹g~f J~Vxa MWAN[OU2E ;w{^y: F(52&y-Mɿ 㣫 ^v#1ҾƱk䭑0 y2vLa4L0`?_<ʳ_?ŮkXY(T!Z=u$u.,{.19Q  +3?$T &*D:@&Zo%s_|e վ#GKb$:Ui9qϏ5X">fz УQh9ډ.u}o[-9=[VO 4f'KD%۷[I#GLmMcszvպ.aZiL/nb{P1~N9x {j #(ߕg$& e&>jq=~L.M$%̏5  ێe 0-Q<$؈]AC  Qr`cvS0`>C4v9)l "Ra׶!μoe2'Yh7@)dr٤FNsMEJx!z6&੫6EW:=퍶 +%ZMK03wj@=nd άmk m #2"eN5 w<`G0rW@?;z SJEC-49;{¼-(lN.8Xpk$zˏw*w8H y4/GDn89DӐ'1P ш(N`]nowr[6 KϨ$JX܍uY[ƒ=̊D:FxM:Lơqm%ڭX1\N!phK1_rֹr\>аa$XtDF +9EԔQ9Zs0#CR@O#3K+o?c|aJ(PWNcBŃhR +ܤtp8L*I@rcl>%0Xowwۖ[*0U`J(aF.)cj 1dSL'2Ƙ3+@86)pDRlֱ._DFP6"U*͘x9L =>k2 +$g9,G6$ TI(8rV=w}BBĝ2U%ZO4E_7m%=*ps]vdUm*U ә` z)Aƅ8#ePI62RI$B5d@NRXAj +C"m[r7.>2{rg*r8T Rmo+hmmTBLդʧ CS &>X)~!s%_nz(^\b72{b^vW~\&6Uj :vaDr0TsA ~JJĄަ'+顎 jC?G3I]&*α<O1[0GiJ)n`'\s O( 2CR\ +H{r۬!)$C(RI*A RY=+ nq[jSlOPZrLI ׎ 05A \06k0O&+Ttڭs`D靋f kաDG"l=-zOKc=Iզc4R21 /7,wdEZd@"`/R>SɴΒQN{ʳ3;L (O84b"Lm uu#ƩZWyҵmMs女{Q4 d : :W,=_66)vz`:j=JB?\WSzeh0#L #7ΈT842Å8hu3Z*HH+hAȻS|i`7r(&9/ + +>X4CEX1"1ל[?Sݷh43)R̲"yvsz'Q|8A?OUf|Er4ZiSU|YL!sℏG5.`RGX yJ)'gR]Agx$t{&` +^y$pSæ+Xz'ƛs" {jSɺ +q:Bԁ{ +<,OH:keˢ 3'o"E91U?ؙ6>P3H9;D4N /ܼطw,!\^y s:`@ c]RG; +Yo6=^xIC "5߷3NFU9DXd /p=g-`'!XDdgWor UvRT6?g%j]HO5da{S#nQ6i`Vz]{R|]ppd=NCs]IVÊU &iw^$xnK'ס( |ɥ9\xoH|CrSue $9Wv())?N{!:0_ˀFޅ޷I8 _'_endstream endobj 4899 0 obj << /Type /Page @@ -18046,26 +17921,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4905 0 obj << -/Length 4346 -/Filter /FlateDecode ->> -stream -xڭ[mo6_K`DR/=mї-z۽na) %W7y#Eɲs@9"3C:/M:Pjw]?AwWP ɝGoS}Gac?&F]߯?_7?)8o,͇87?bow1=6W?\}sr _5U"~rмBo>\umZVq%NEaE8J '&NNI)Pɵ%BA&Y%>x3&F9eEhNX:< se& o>G tlmn<8t -k%?YE6h.sݬ*ڹɫ|:T_aM.ĕq dWtq:P7CөL<|GF<զ`6q+2T[z& 5 rH(CC>q[I˦p M50jlbR+^õX׫MOsYH9;)ꯟ\8HmnŸ{LBp7 o(jI`:XnaEJnzRМyDt -z\m|xn9┅@.\X{qS26)֑'o˚&G%e{u(V_ -{`zP)4 ;yG+H[lQ.1 󇕂gW6b m0|q2Θ[DO\ I[joG6Uo2 fbN([Ӵ4ؓX\CP2G'>Qװbj`k'%֯_) :fk:lbW8 o.XQVÁ(֎­rB(OܚxT'a_v#y*4bYۆxQEfdElnFNQɁX%VU tY!y'&$aw[vKS-$5 7),hǎ}}vtZ۶Ŏ7L<Пjkυ:*o/G !;:W3#wۏ -熛Oyn2rA8@}.B6Y{4)MXGD,"*.*'0Jgb!"T:S#'2 -qAz/Sp`)iD. 7k/N%'c+͵nti?lVk \ h-5A\z0*}{DM%"+YLNg< /$4'<,TF}c#O"rgcʵu  یGBAOڄIq1 cLi|$v߿@K>پN9N  {L lN%/ |,T _Y3늞luiҮkg̠K9M%[%s%y5 e`Cwz8 vLa6|t:P|v[ ^Cs@h('F55nGv A"YR7y]~xr[_AtXq vt;Z)oq] Ѧ` -3fY*XCǞ@OuI _fS\k~F s -+_$?; Ol#5fc$X{)ixBq('XQcX7F,ʋq%,>~VԽ|X1䥕'R@1c/F* `QaM;F+@UKGǂb$ 6&{̼bJAϸRJSl؄E ڊ"1/N8Wqԇ),z]EHbdH)d>b3Ml\qiCA;'qCX/5vn-n F >pXYD{α>llB"NO+g@a< p.(o[3&n2XpϠ]*F߬VUTQqy*d*G^L2uM"WIvWY-ςc gD.DJ҅ T`zcZ';ErP.' :<DNQ:L0Uib28ZJ9Ք3+e3=q;OFB/X&Љs> i"A*HOObFx{߆Q)Q<#itdjiNX4s5hIyМoX'y -X~gxYaQ, z@|tJۖ 6q(,@jhf7 (vzc㽪A]K9dpoBݽQ9rnsɥ{A_Wx6{z Au|5'={)]ۍ`HI_DhN8!*3)\H6(S*UL,;=vJ/dIoMIGs?6`tr(9 *wj"c##X)f<LD[Ȟk>N4#9K.f Meo\ -K|/f[UK{j|3C z^Mx9I^0SW3{(a&g_z9g]ʄ2IJ[Ѥ+͖gx0;ܥ1sG|}ɥa: /e嚥kO԰x x⡾Dpڣ̦/]*Af9Fd:1gFtKPWt -l6 n!8 *hZ\aWtm38$M2U,x._vfctN~DĞ I1>lC>ǞrE޷xG{zF ʵ#NF:Q|eAD(r­@HwK}{)5| $`! -?qKVˊoo;,M -l=K-2UeO72/, - ϵ<9svq㳹{rg%PvğQxiLIݚ$ B> +stream +x[[6~_1h K`LѦf" [c %G﹑lM&twR\sHLAYYv؜+,Dcw7gOHyyQO_|U^Wiy/~y2^_x V)|~*_?^ .ػ|{7| ,<;C>9镊C?UYh_iR# +ffKR&w7=!g$r& df˫(7iHC 2ʼÆڎ3ԕت}3NحqPOj%OzB +v'`IUSrdWu}V*Țc()T5f;-&h.&L?ܬlЪsSX@D*ruw( LD޿u1&a3l,4ʽ˒Ŋ[O Mi.bY-;p6Ȃ{nΌE2ؘuѕ{ {Bf-EU/='5.) +hD5iXdtȕKnbybs 'z[HA3^#BH .ƴ_8Ǿd<SrunPUM[׈9VrͶ.*5--۝4ZVal+T}ܞf+3cwRzΕ|)G'"IٙT3P2/T{IAE»+0> F8/璄hex[n鮦m=4kS%u_L4EN@O-j0|E +Fg5̢~% :\cye3{گnemajKǵ.d#`>AMdž*~ -e&63i4fɔLiXLQ0-d"֑pir)Je<o5L찋 CL  +Bzs?M&'a;$r}@*^tsiL2z|,iB q@ijӪY Tpr*+cmmsէkaR2z+@$'\4x mXNNhbcoUCYSd BBY2Luczkw˕e0D&Y|72>6BOe+owL%²UmGXM{uښd-㪮65SʻxI%}VZuܱm1 ΐ*3AylW($S|wQ(=7 +x4or?ÇMh3ekF4EWT3N|B'P5'J(E ,J&4ڸX4*_{ވR~9ϝV2vb?Wz1O/juRO[rA r"Ig]Ep0'$ 4\jIثKī-_E1Jh(Ȑv.Tf+V+p2)sՐ$x8uAV djV̨wduH -X[[al. L6?&O{afwh6b]/W% c{I-nbcXXe2:b=SUP ͺhvFP&ȸ`H q"Goǣ Gނ CH0>Ѣ!%b"V'lWcsYLNˏUoJp1:p?xsXF>]^'*< `n0$VYVT2Ss^ -yl +lPWш6v}( A/>gĠɔvPp`^\^^C.**'r=CXιU6 ^qjK#mo8p/٥kϋ2 T{tbp\婟EZ@Rf@1߁kj1=_,DS@+_ƈ211'1ް85`)ƌb +qhO(~(<1_Ki_ln㥄q3LrIZ)#IZu x݄erWAEU@4r"5BhbN2FʽO xؚˉk^I?@W8+΄`ƒόT8 )nLP[GR]nkN0 FlFrJ2ڔi؈`^ + A3G|:OU/OFVeX21%a׉;s6uuB? NJHAX7N4ӆpQZ?Qcg.g~(M}V{qWTpB˺%}U-WX'ڲ/q 9{;kh>^ +TEa|Ԯ%{.H+ayԀ1 at\1"־58*vA80U_>zΑY`SkzO :Q<FԎZucfyhf`RUɥ+d/8<Lsz+3Zx:$68RsMNc :B W2uLы~o/RBhrɢ%G폡YI +>Nd58vS{ +NLXAU_K#ӧj%pp蝧Y3|Yvm(7Fh]zvz򒒮4{\2n*f` Gv ivr D;3ݐ f@9F[pq^ ]sb+‹?;34,Njr4`6Zp;]7Z"*-KZ_p9 kWӰ$3Cs5?PK4ʢȾ7}KI9^ +q.sY3 *_>37pi g'~7#,>endstream endobj 4904 0 obj << /Type /Page @@ -18094,23 +17973,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4912 0 obj << -/Length 4031 +/Length 3638 /Filter /FlateDecode >> stream -x\YoF~ׯ0<$ye9,#67H@Pmpߜ좟'R&҇g߽/OϾhT͒$x(^53t$UYNҔ!*C2g)BD -(?(o|ۡ8#"a\G'QBHlQ7v6 _b ]|lTvm$b+>5Gб)|cUӂ렪*yO0gP0>7־bVg+*.<')mCSW\<'.j!3-`nGNǚT}9 όW"3 m!Vj vUQU˶jyU!뭺y.+W1c쪸a Nc,Vf+Q):s1(\baSYÄsۊƙf."б6aQB+hru *th@\5܆f|!\J׺ epeUq\psbOnoסuYU\Bsޢ5u{T./-J;*tSu'.ep@%RM6<:Tqh,D0e3FJ|QI4rdJMYs3P5g1T]EG$GPLAY4؂[ BG$wBa@(7>ϵ@kFyP5j~=!~ز34:-&V8rp(QuNOdNM¿leNL+#d605WxԷ7@9NA]ѾT~Q3 ( -fOY&.;4{pSY{|iZM 8>*; ~ t^-vi֬Wc_.dM" h4L}XQ$!d -cba;;@j.5w9 5 '3ڨ z'3:Ua'Sg>iE)I|̖.U'4*L ,]GC:p*~@kzB>,*-w>D8I(ىI}LgXxGYt:9sC{000j^T5]v#hnnIt>4TFO7jjSg<_=esu^,X~_zߤG!Z:r\'ެqoܯj,:VYO;7%לBb`s~TJu_~0pI| IX}̎T,yȑca&bSg8=_7p `E$P}ޏ|!lYL9lgUX.6p7@;,a $ ޓ' YBEKӼǘX]=K4i$]0 Tp4&<9AGpܯ؏.؞]r0x0N(c?,~utV:hqhЙ 3 vzUQD(ߎRr;ǟ+࢐/6S6*9lP9(6ܚ(sF1tO)/e917;Vlۦ*ش߶$gm!{̧I.$c :5̯`Ы㟠\[:o-uYHe^v$V*YHuL5Aĺ YX:FN_{Η<b:\c$qzΉ )iŊM.6[:USR1}SGL27@mcE36|zþ)/s5 5W#qH4򪔯RҘ|a8?Ls[.Ʒ B>"ŌMӦfU>/Paس?L9 -8 9sΏ\`ηŪQzK JZH778t=j_AfW.Q5a=D#k!l~˟JiWT$i[;uk"RVoĔ#G ;-f [Q^Bfn.* ݞXbMMDQcLϘl/_WJ]+t l+k0qJ=e*@P\>[) -k/ i<[a,AݼO#N^AN'&~v|rW\A; dq}؟X$j߭$6kRN]劵vr+A쬸#V8k4WRɝs]y݌,VIyCmѴ>٢~uU-]bIw*&݄+J&zBE+ }@0o%tESݑ ec>)Fé6 --;{'G_cEendstream +xko8{~/@q2P$Q]lm;Vl5'@~K4e+I EP &Cr8 #8صUg4\pF6}}zB:v$sB9fz}tr/Rrc{@\JVn8GBh0](+\i:s`ө SIAcvEZ9z +V9 lLӶyFh5(5y9VqZ/ӱBTh7Wz4ʀoiTߺ^VrcX)JAVA3y@0V/;,/*X/QqY )I;TۚZތuE3W<kD y)Du&t)XJO͛dU&imeؖE"zuZ-KSuESbrQFQCgQ!eKy0v(mp̴-Hr9@Vlah|5g0}VkU7, + zf4ǪI~wb9A5Ϙ-K>[ (RNyWVZt}P aK8Ү.~oFzϵ#t1 |*GyvuHCh!Hl(Y|4f`H~I?9YZPt4I8A =6#'suX![BMp}dzH}ǵߗg :Fڴ [Mp S~-csCפqB(,! eM$4-R>*L'>^k cZloϙK 7`v5nxl\`d vBpP @/N^Ƽf&'Rw$MmBp'+tY/R35b8 >l79#V1]߅S?l~SapQB[Ep#;t@wL#&Q+gd=ɷIeM<;fQ$Rl*6 P%U] \jbQ&SLP„ LnI"&$I=/*s϶=RXκLI6kRuU܏u +H h`v? hF Ťg|b%zQ*Dؾ %G:Q}]_,̶WOCH3KD O^U~lk}N. cX;dTTIAWwj 4-fU@Ha_R +aZ$Dl#`HRO;[SkG0x@eyzQD(<O|j/%gE!Zv*,FqAZ·vg[>UDj"k#!&ɛ1a ͣ>ȬS-xjOx𸎲.$%u0_~e1^}'x+Z/R#4fvC*ᗬk?c*)I2-E(YbBXEdm!6;6 + z:z _Z IEK^ϷgݜuƏ4-cLm(뀯.BI(oBMʉ)2+)i!QL1ۡ>i[:YVtTlCL9IFeVaDYo 8ޛ͐vLkd+7t6_pۣ5u-P:/hH/gn Pcɶ@$"q,]r4Bbu^3Aсu9@K6xӔ>s`VHr\H|Zz!>wv]i: ] hQZbxVʙ@tS%YZ0OfH\H<߶ in-tjèT=1v9&1+892Ӵ%FEпg 2d`[R"eMʊ76Q4ȓzJ13樠b36(%n{rM=3]SۆPy"aʳ6_B=%7mC v$lM`W(u{~s@jYf_.d=%~zG 88:".B5nhZO!3gɵ Eq͝>\ұ%O# Ģ`RVeFCX$ZSÍACY:(g tALdlD;1šC|(f\] 3u '؊t&[ =;z⬝ž'(3rt%<۳hKwQ8,r0*{dff5nCQm`Fz%C%^hd`JмE9fO) "Wh|Cr҉[2'әcS&&"X.9FƤ): };/KD2B·D"zqd݋yډ~4ۊC~2:/5ض{QIOIX9ij' +)ҩՅV#HEpt:g7dVtnr;>Z4\*kPb wAP-s~Egź?$2 +'IɮnWŚ"S6!cs-챘IZf$1+KvE깾qr_tMiv˵n˻zPB;CduN[&@C^thk=!.u1C~Nɉ]M]KQp=/yAE0w 7d?endstream endobj 4911 0 obj << /Type /Page @@ -18136,23 +18016,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4918 0 obj << -/Length 3757 -/Filter /FlateDecode ->> -stream -xڥko{qpbX4&5v}XḮ"u$e?yr)Qr>fwvg= /^e~Epy3]OeEP\ލ$Jͯ޻~2c/2rݏoows8bzcxÇ".Dzů ځ'*~}qs/ϩK^5G$$i& 00̒OEDzX,$N;n[n`lδ@DOd *<agQ=wڎi|/a7h\\s@GrW[ nԫz5G/ 3} W"JZ}]]f0`6O5BxGN4ֆr]v -[ߎHuLzwv\>@y(tzPl)ہ]Y?s `r"U=,+r춯?%0Aaq^GfCHB,t'>`NAཛrΖf~ǿϋ8^e|/Iw @-"r`Nj- pHU(dW!XV~=7qa4y{D yN"ON⁧Ě;+BZ03Y -0QAmTz>❤q+K@Y6I:/ /䅓GPh֨hrk^`"A13ҏz+c0(Ri U>Pԕ!7v=mk!`, ZKnвG]f ~{Z({u'WNOn:ީ2YF{+EPq_%J.fIC[NMG8 ##֮e4sDnm  -b"!Ĉ<(Uysv|Bp4HZ~z:9pk00_p5=Ag;~f;ړŧ4(f57 cc95ڭ#ǑfqfaWE4{[q٠lDSe ^{ԲlT:$J2kR&Ĥ.w5^ViŽo;tNVFȲqv@ypzQYy @"'{vPlkS1,d`Id]OvsY5^e?f^ך%%QƏ+ɸo,z%< MyI=#aiߟFb -7Ҳؾ{(p#T5"FE0$<Va3ƒc2Q[D}Vz%*F -,u#@\P데G ;x UZsnNCNhCͰ+Pےu_ımx؟b#\2D@.3讜Tb"AL~^9p(B"az.?&r? 1Ifk9r AC[oFחY)x[IPW`ѠyC􍓄d_F$Qp9zc5ic< =G9&Oa+ M|yRebm&Β)K=B<܅ &#)#ETL,KLȄM]ڰ(ウqr'Hhs.nVZA@3\|2J~G+\TYL9&0AM A~}݋)1g4U$s6]dd%Yw׭$Ʉ8 (GЊoM&8LlMANaUA Y6]X^،imR9bi|#GoH)TKН)F=2&T*` 9֍,'$rI4XM [SUV+<}rvZW~~ <_5jRW&ȃ~lmMg^Trg+ؙ~mWev&4fƾcGd;V/OٛWhc4RJ5LmPC8~BmT\͕f(`S@inRۙof?YO$(4gOڣD0endstream +/Length 3622 +/Filter /FlateDecode +>> +stream +xk6 +_pAd V^-@E/=]Jno^([ +ܗ+M2ʽGU z5!k:LBGgU}<;DVtkSk"G/ Sio93 -0rM5SʮHi VGw{PX> Cɍ']rό-KXuwZv2=@妹(kPl 2P5U%VXv(nzS %y2'# M{|P&?GDR9F2 IOqvb{phrI,Lj _5;\Z uewM|kh%t?n[Jynia,fm q cgCQ燧 dqhsǹ `Ex(%sKk>WN%G?hkg*xl.%"_L:\>p\!q&75?%s&Ax`̘^P;jJNɮCZC>\BnhŢâq eFD9)+5+tf\ʆ `dy65pW[ <:Iָ;p$fM%~87FYUs%Ŵ8Ͻ3C +CZpW꒫ }]W63)h;evh"DFTX}F-Sc|ɄUE7o:%0茩.SR.5l%E$'2LrݓGk8+MXMIDL׭IO(q|׋u,k-&d+ My?b><: 2Ëɝ)'R IhsyԆ]\b[/񥪃\ȤlՕM"'ck˪ڌVNJsЦ(U0p64LCGsA2*n6e5kZF6)ԍ;-㞔5aE2{0]ͳM;J$\e )§B%"LFQ‘MWjCqZ.W 5qTFÄ|ijڻEza ;% %-&)N㔣&Йր]M Qٵ3c^Iy߽ nizk)(N"DaߛOkb'!Dom  ѸVR]O{CiT31J-y$|T;RrX!Tͪt7zp#0 )8ma! *дyiH%(!=G {W-3oJ4=;D[i^T:XRMe^~2n)E=O9o9eo@oUVx4=[ɔz:U5O4`vhJL@CVζq !5~qʰwqB8=[!Un}a^qDŋ+ŁI j6q;zs ﱢRwG)){j&SɑU|*d48Ö%`R$V 2K= [c$S d`bjPlL%-CդC'Jf^dxy72L8t'q 7@ŢRB35K+?._1U u?k4<[.Ǔ}^a`j gfq +|aN+]̞~'JVkN 1S3)yf<4U=0g,iHp#Ex622Rߙ X2}gxY-iQBB;Oyhu…=̖^ ឨY3[0]hB@ldkn)ڭ.><za; mj[v +ɐy#kW\ITes R"| 0Ho 9Ykli6bɏD +XD w-1&46S;% +t4#?ٲ;8rKtKfa j֌endstream endobj 4917 0 obj << /Type /Page @@ -18175,35 +18059,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4923 0 obj << -/Length 4132 -/Filter /FlateDecode ->> -stream -xڥks6/s7n*$W:I[wf~%f+*IHP7X Y*?OWYvܜ0Y(s[0n.~HyyޏľW훏R 36O̻z{y3 ˷8|~~;a~Y,>,S۟h  -9ٯ+WyvaxsHV>9s"A2?! آAF -48Desmz 2o '*bSbw_y']~ -b;G)7k[U'55%7:+ ĽpiDe"讠m`Emx ;mZ%e=G9!R+5fa%_xe]2qB%.q񃲉i~g8zL9.v]{n+6w]U_lҬnV[vGD'I?K2o#վ҉$yH\US#Sī_IB"%7#?:ya|9.~"6fMl$-U G~-|fpлf2N%u8F`҈c#[9 ?د$,U{H~jS7(Qf4a $ȗ~' .vwE͐BOP H %ZFMH=V& -MA7`H2#MK7x&X|٬O -}"<#a:⊀-;˚[=#B3H4^ZN=8X,_rtٚe3 I`#3Ą .asZ*rn M~s(QdAD>I  g=V(@/Qp墮:"DGNqi'4v]B|FI++ǍnW.Mv"q`;סQA{ YY· Pʻ*@8c΁PvUeQF6Wp1G -|8D4dPXmC@yj0Y8>q AaB*5KZq_ct` Ҷdx߈DMơ=iA^Q|i(%r!+KB)ZW=.چDsB; ``|u 8R^/׻!h^;.pbAty.3uفf 0=\[No M$OœnU%_l놘ź`< L#váAKv ~ E]p|Aɫ+*mNR3.J -]h*5D mqD78(,-]$qN='.64ⲿS\~٢Yi}[.y - Wm5 $3懮< ,DFƎ^-&&'놴<'oAzdAZ~'䩘FE1fP!*ɢ*slSTFl"ǜ(my_}Gp}C@ -Q0s PD$I {ˋ ߖٵK+(q:TMqVsUHE~ I+zF!On( -yK!; lba<ڮD%,4:N+{oz*%j_XPFZ{ou(Ƞovig= Xo=P+P =(F :0}F)GJ)@) RTJk4qNf?[F0μ+b@$\\đ#(voț߈Έ<ԅ# G?.{JI3|NQ s|gd71HC&Ъ{ukg& ALJv6!0ǶGzMA+-M*JNtv[,LkdQTgfҐoc,l~h_ s`QV1mҊ[Uҁ~.$R0V -`<b -NCYp7uܗhg -nM'=&εH6-a;z/r( .ZOՋH|J|[Lp. L8,RiT*(&b෨M1ч~>*{5Jְ 2g/ 9I*`E$d -#\1uPQ.Vgx2r \`k^wB|0#DQBh&Ԁ,[6-njUH}}T5Fcbu)JMNj -Ie{Lȃ}'}«T0ğw|A4D~a nݽ`;8\%bO|ݶYK-|[&ԥ2F{ w+zܚm'# 6{IGII @,u(7༇`q2wp; %xED|QxWuWA(y[+c\oj,oa_yk["ry-XaY6V?!e'W:V ͼ~wEݽtIv2}MV)0U`LW+6A[ؖx}piH aȒkKɞY 7&U:yH#0f( 09S95䓍*&p K֕;}Mi+ӶaB2*bhF_-uNo2(6O'hIx:5 -Z`NІs]׹ k#`mE+7(}=dXیilq)p P9|3=;Q,FiFQƋF+t˓T-7/OzF%`۹nE3`m.#7Z+W~Xm$.lq8Z1$鹏DO|J01l?~2O8\9_DLc\Nצ9RN`` iD©JӌD<`|$3ubHO"Go5SȏCwW7+`<$gbH dbLb%;8'xH&uT8AYm\X[,W: -ݔZu ɿxD#u:r|( I!/ !PŔL>Rf)ұYQyT"5%#-h8 -UkTpl:4 Sl -i-5/Iċ߭_bE -6. d<%Eb hXY_1©$Q!|sԖX(qCL~tDB:(ɡ ~qpO*wC` HDD Sj==?'TMScMKFwP޻?@hG>Ci%Vkְۓ5c`ļu>R@ -VVu?zl>Dd*wN(4P$G -o5endstream +/Length 3955 +/Filter /FlateDecode +>> +stream +xZ[o6~ϯvQyQ+Hݦ(̴M1,AX[Yr%9_F]l:}؇-ICIz*UIr]x0/3KzQCWEK/4eٹz|q6WJ9~q87ofsw{sǏܾ㜟86KrD\:RH?]n/kA;bIȹod JtY璔ϼR,N܅H{K\}ƌ +8^Ӣ{ D1[:UYvjUTW/VnNJy(mB63MEv"EK綪Ǭ+ +EN"b;H+ EιYb7Nh |7du kP=Єi RX0+$6V#~u4Z,YFaJt{SO˺,rC:!krv5*g*W0ieHv wY3' ȗ{E[S䱜lRGjlHX(I`Xxr#J.# +>5/#M6wA}*ˡEfOeb)N1Ye[>`d[QEvDʸ*b_ +'qǷy\>ٗtI+`Eb8$$-G`hf +΂(vTqKF(|rrH7$ Pq)qIQ3lK-Rȿ v3QXVMMPBJZWk+$*ٴxP@l)C]J{΃/%z򂧏nttϭ\@"oK] 4A^.{z,Ͷ}dHO^E28D*K 88E51iw6'MNc 'wV]Rs6Xu|L`>;;TvX1C86g:ۗemٚ읰GEgS%>mVꍰ]Yהl8I3s^rk^ {]ﱲ}isce4NJ0T 疟 ` q<㾦gVJm%ftH1eڧ }Wo|<! -m`?<Ӥd^͵\ueVxkxJnjr}tޫ/[Y}b4w>aE'nŧ,J#} Ru< ]h=%^]lDh :_˭a>k`LcXRp@/pCw_ǧ} h8xP + ]K苆׋O'G\a}TJJ~σ\o +[2\x<_r};\^Qq 9:3q|2OC9)wۋp-n3'~ݖ,/m&VSf3|B"o]D;a~Y! +7:<_$)zHB 6LٕmqG< \K;E^[d)N;7lV/ +]_˟ޕ̵wsXt'IkQ +I8kM}Ϧg +D)ET5[uJXdൿrjv23p'qI3_>e@گV![^AoЙd :J rW`fY!)F,ְ!F3X5 OysV$/J誉H%> endobj 4931 0 obj << -/Length 3742 -/Filter /FlateDecode ->> -stream -xڥZmoܸ_*"~Ms׻r{vn>+Vow'i7RJkm D9yyfjZd"͔fb= w0?]s-TA~{ۋ~]0T/Wiy>\*p(.+##ͧ2 嗫~˲r\g_E ,<[|C?;dw;tEC} 9[ڃGC 5cKUZiI@g*D/ @3"n{cR礚Q`l]VVZGن~oh"{mhX9v/I|_8=K1Kgl&=a2{p3ᇱaeg64e5sGzpKd s 3P{ȖB7k ^CGnٛ߿f~Kp񫣸UL?OQD1=7BBkuޮe})6 yD޴;&-s_lL'tye/!mG=Š`';Ex#x#*oVMY hhS͹]N= Ae(H(VM._{kP:OVdL ~Dq a?YOgE9CYl) k4 ;j 'e`:c&4ue<(=Щi='~1RR暙nAQ;*w|5)M2" ]Wl9)PӤSLULD|ʳ DzC l]¡haT9z!'!jsrhI5(A fwE'JIBl);jM^x[̓(G7 +*<0gw8dö;F ѽ8Ï{Hҫ -LPСg&4 k0'@CsC'6[57EYqƈ*`5}da ?%Ul%$>rIJԸ-f #KQD8u#;2:@"R1>瞩RbkdPlFB.C2Զ*J -Dc\g\ X3x8vt^x8}]p\-D.Ɣaĉ֨πu>і65Zar 0Jxx(Ao>o!'.Q# NLBPL/pS+r(&!)׮> u/< lu_t㒐*)6|ڪC8 "Cg CnV5_h+Q$x|!AE;sɰR --JيƧnL5Aȍv}тu ۂ.6c7 -+еiHv\C2.S#ŒS4SB2?Dñ5!MW)dh=@; w(4)CЗu0gfNRze ©&/* PDHhfM:yo9x?ۛ^8 !36H% #`nfD- /RxsYҐj Ӗ+h$#CN9KXL{WFlA<n.czs( D)y4 ^i5# S.!rS$9 [4m\·'#qn F=R09/DŽG)f)v=X?B? -ǘ3&ft1xW}nj6)ؠqجI^>(F;N%||b{ -ĴN?=eqY(RIʆ Z āZ(P;}㈄~@Or4NCDPDE8vuW7/ A,rCAP̓p"Zvn],BOiJF1%8berE b:aG>Śp vbM`-Z5~_{&D FZjIHI})#! -a7<4.Y<8J8,గjfwy7Vp?zX7Mq.z {AIoxu9Ghd 2dvL c.et3aGAIf)3NIy|} YGebSVN&X&҄NMMi";LѸă9 -}ok`:$bCs:Md,t;`K - 2~$)7c9cL$%p5;'xT~GkXx;,9? UFnR @Мi*R6C[G^IEqhZdF˝%Gs*L.ͼ{}?@, -#!1U{)JK\OVƴ\& hrIHLq-;z[lVj -v(Qrԣ9BJ؏R쥆RRToi$p#3nMUULFQ{HY* *ޚaKCFEkz2FE&<.jf=WDE^I6hGLaSrh=d7ܛh\0,_E TNU %*|NXds?:wS8!~shyxi2C)<4JP"KM  RC(}A:wuE{Cι[0)T8|[XJ(0FچenSW;1QcM9~Hc%RO!2۠f0-Rw4 i -N(mPg`Fh)S) NB%&՜ouowpWm_WQm}bvlIl'3#?G> +stream +xZm ~ba8-@K8pk\pAީ]m$흯Cr%-hC 9!g݅C" mOq~,6 gqG#^J,ۉB `:vꤋ-^_~r&rljuҵn\~߼]\ͻo4ﯯe[O_|s;X*~Y/O#M"}; |}]\"cBfH +bj$A'Έ\X&# 8U8.Cת-wB=bR+-i#PX95a%VQpyXzV$F?_|׬.^+CG +!VTK/k_ahe( 톋TiydAދeviƐ5Z FF5$476\1(S,,d! 1|v^q}e +|P +rHl$3-7}:8NoRsV ԉL1yΙi}lL|j|`5d0c$czf1W|~ky*mkd`+ SzOI!R2F:r6pK%~ĪI.uٽl\JW?|f}o_\O\^IQG1 ITfOTG:UN;rڞ `=ߣ0V6\踑^:KyboS(5 %ODc ٓ0QB7W4ʦ$t 4]1ԧHg! @" \֩ mYza@;O2Ɛalf`ì &tgʚ y t4Sa/ F6cƒ@HC)L iܟKϰ+68 F󷡶㑱[UPAPgd+7ΰ9d9;jo;5JԋgzF[0 +>kuy35 'Ɯ(y}֞u}TQnVK=k WqCW?Ce-(KzNgxjd>+Cv4rs8Hdf#r,kwǎ% +IhPxh&GL0;yLXwр` +|s+BZ]ÞIVDpCxq=sޡєG6}ȣݲ F1RI߱Yq5g4tSl8Kd1\gjV]E[`(No%si2vDHF3#҇]Iа>W1 ,Ռ|Z AM I,/=*ue#7vlO,/U:A]3+ƳS!R? .7e{ 834焵TZu~b|N ~[xY]=adp%N }GW?%XY[(q"F8 %< tR +!,DV@$Woqʀ> endobj 4937 0 obj << -/Length 3292 +/Length 3178 /Filter /FlateDecode >> stream -xڥZ6(PI -h-ziElkm]dq+ɻ~lhpH 3?Όt6Ki:[Fq -BX#n~, ,f:o"=_Zk/L"IR/ww/8d"nűy~_"d(_W>5U,=C?C]P~d<6eM70SxsGnX%~e8}ewHE޷ܼwۦ|lMӲdǼN)M͚kZ6-eULs̛}ъK"sSv"GUS|WwzW֯n~ gP :4U}/Ty+TlJw ^^xKLᙸ5/kM{]~fAh^@{tn;FqG:{wF;[lSQu xl Zπ5Hl- [hJ9 9٧h`_b ?=&6}GL1 1P1@7#ݚrh,# EωݨXqNd$#]Ov20BJ@Id `+o:ER jFY+wcw2 ,{2 ݐ8 !xl:Uj` !LztZ|Dϗ|.өp+Yps".~cz D^':)L@ s-ňu O=K -y4 w#xb8Ӝp 6vL}78[)uLF^ā~{~(D:ˆȜ5wڮ$L#z50#KM]s8u6"8S8a ec Kƹ6 t[;o T'B7ܲ1k稍& :I3GiI_:+8뷿1a)z|$p!:rXP@#}/˙'B1dfr>pɼ`>E|lS4pRht(FTGp U\Ja -ۋω8 ;(H& +GN[9ZI((\Z1L ;FNB4y 8ۻ&?9c+z_2, E) -rL)ItJy>Ɯrg%+JI=dR'I^rLgлwP9P:Yg&qml| T3⨿ZZ}PIu0;H**P8U) ͆kLu>0 ‘.EL8[m₇ht P\e}~r0 \VmqcR0[M'(V}=Q403ɗK _OPp^Zft -,c{b$j\1b= tYNcB>Vc!Q4k2<>m`nnwIgcaehat oJ%6)^0r|`FjRGH֓4aS'xA5lXXw4&%9 ={g˘ϔ8vWL[a8I\Lwj5*.%W``,yy -~bZhO;V..x@7UjF)O$ܤ -{kwyY!.m\Ȅ o4L9jt^zJE 1*\ސPb-(n|.0Q#nuĀ Z*1pB?mHSsZ? L\*<_-Boz_uL|S$4^́ /UJe\9c -ʡ79C100wVsR1Uٱ AK 5 (~# (ZYS?s@?©i.YIɥ@1. ԃ(,H`(%=E}I"pˆgکaSxG&L*8"^Zax%mǣ<=I[ }{3'D*W,o O-h$!l6(lJ0Zcc8B}QxQE3Y[P9hxљ se~L! \tE_m8R_q0 m0xtW g G_ٸ%g&U3eR6~&/Er%]zUE $[ (3U/],đˆ6\64.(5}W36wjhmAl^ԱK:-[FXREV@C_$jeA̸` -O⩴q%)c||/ {6ǟ|7Cg䜧]?mvsӵUO!87%jyz#rC0{7j@somOl!RW鱼8' B+endstream +xڥZmo8_a TjE(Z`EmR ۊ,捲d+ۢ&5RÙQYÙ f Șj{60Y(LAOg$z~db^^Qy45/wuk;x|zo~e~y[Ȼ $B>} gefl=q:*H* Gß_}nMx%&IY;pkb#bչVfR? ~34`|p?A+[nsnHwhwU #gW≩8b ѡ.;[Y~G^֭I;RFMQ~'^.bJgw9Nwho%"&=.8poAG3kTN;ō#}#rGdh9SG^?q,Ќк~﵁^6WgFWvCk8Ha s,i4H:inΝ׶[$9imϸхX2L@-A tp%~ 3hEFy NH-KmM4*{+`8ص;6=,zĐWF:9dd)D0!dNJLKΫֲ5ϣ;F$ $snH,DbG)x̱_4nzdG0bSR*!\O;_fk% ^ܡ50e(NHOU4' ܕЭT; ÌBq< *<ʛNsBd6\nu%pƇ-.7LCv5IQ7adzzK:J) +RKaX%XCgΒ>(X&Dzw^mПR%\p߃U震 {VMlnD|R`cHb? h{7&iB&V\$~~(ĻQ]\kip =2/},-Z/ ?z=3lDbx[#.h@]{GxZ= +挨y[JF9Z7͚Z6Pp/& 7J}mCA6GFi +;2MWo>36r /m-VTrϕ @8[h>1* YΙGN`_#^'m\2k7 [}M"( ${DHc?TSh_&h$yĎ]J5$d|tŰ#w 0.xΝm}yܑ%hXa!NLQe#<`IA# +n)f>VQH? HL|8I +#l{eݝ? +! k )>i:K"2J&Z DHOGgk%#ꭋ;q؁dQPqyMAU7\!Xc 3 ϐ)VR(z D}-'-j +Ok6 1N1fLU 5cˢ;b_ +p >m_+!Y'8$C ltETď+4+uh؏,"JDjra9 〖}~,AD="6 V +^o${2u-' N(r|`rM=E3bHף `cǷx4OX4*!ֹ=;g/;vWL~)vS'e8 cQ<ë\ᢙV(ȞQzC~P+XZ+e8gRl-[7Ѷw*H:,aAFj=$}N O$0 +{eyY!m\E)o444k:Pnl=&qCI 1*\͐a|B}qVtv|.0i{B^jZrn86ݔeC1Vp/=\ֽ/s:&\>)Zy}/d*i\6/ !3Bn?0y#iB*Uٱ AVx<}(H-o cendstream endobj 4936 0 obj << /Type /Page @@ -18328,17 +18211,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4942 0 obj << -/Length 2940 +/Length 2863 /Filter /FlateDecode >> stream -xڭYoBp F4g?]5Vp)|AAKED"cofvKgv<$t=wuotO;?bb@&N^EKGO7/O'xljsz;חo8S'syt{D;듟fY݅DB ->|F 4=s}^Qnh3_\C%{HNA7L p _sC/`!dN9<[%1sƧ2U,V9^ɬ\ Hmc`\M/l׹2";^hRU<`=XlEksh ~"K@ҘV_|ORN[_;R f+loeӚ5z< LO翤 pܿeT.l7;>wVN0Ot:D`9v*窪$G~IV&iBFPI6[GlmntW-]UWCB &(IDAf0a޶bQG2OYr죘* z-ː<Y QbZ6>Ym[S00`hͤ yf7c:agiAv$ `a3+'&uLWAObd:&_!e^>Y1 q\-dC-96;I깁[WխOlm3rQo/b:Gs"wwxͪ@to ZVoUlw;p5%Jm@[ul-#f3֞Se׏O1ca8˄3^kh֩ƙZT0FB>6` ?5HB%m/ф5ge ;7ߋ6{ hD xgb1GQW+؍R= •&л3| 5'Θyv!UDž3h4 c;/]NJ#x'R&b74G ^ ^o_# r#B' q7dqY5x62HIEnm;u D1Qv8<0y8cMwL&>1Nܘ, ;jMW gּ!_+HI%HK*khkxke\Rur52ȍ/L.q!Fk}; ?:tIR<ўF{g4jn41. pyY#.dvAi -6 ցof_,s5nu\vrwaZ=7( G"~!h]r~G^*85P\_!,BߢMSxC-^ra#s!>5ctiESg6Mx&x `v/X<ջHx@jT7"D9۽,ʜ_rc Φe7њ ]Z۫3 >!T%*vA <3F 4خڃVnH61HQ%S -݇?_ KO.dJ!z%-@tT~*vPv5Lυݐ jfؾg0Z2TrCYHhiQ5[E &E{kuSm7l ?L}S~`T՟63E܀(7mNCNb͕b6QE|߹bA),+I_ L CQ"6w#*oAƴ]A+(7G=,:6g:ŅZtA4zԲ߷Xlyj͔wDy,yn&L(K+cRSs7nXeZJ i?1MmsL^*Jb'.ϗ4xf_~Ş8i-lŃwxViD*,/0h 9NZ4E<*+ n`#ˬ|Zi#@=B #iOV]2 =~zX1卌cy na9T$Z_:t^Q^%endstream +xYYoH~ is88Xd D[D(R!8o}U$uسB죺Kĥ7IBU$Nq'!IQO^EsM';/o_gMm%Ԏĺxs~=ˋ7 +M]^ͧg]^,y?4Q|q;pH'7ɒ|}:*M&4v/M' TN(=/OOc`"pjӺҞ\'Ie/b'*kh%[.o~wCONfՒAjmk`Y]Uʈ̸,iROz-A{0؊@/ jD 2 ˿2+pM5}߷_eu+!{F\ɂ\NE+ ˮ\> +f ^fXBd_2r@om7eF|̓3=GXc"0Ϛ 9L}n$G~IV&iBFPI6;o]UַdKazHM_.*嘥9"i6 +`@Q(he z9̻N<ȺX pit 1K.}SAe'"u!J,X>}ض1U L툻Zd=~3SQ@36:Ȏd]7Y,ĺ30Ŵ?Xo&߄t $VG&bz+ʫg?+!XRYjoѵ~khQڹ徬o֦)zsяW.LXZLƮ8ifU) Kwc#nx;;p5_^+-oU9R<@y+ + +v&%ޱǎ+s?O{^!,5?[ۂ,VغxyiIY7r>m4I%;v"7z>] _CYgUa/3Drmb!F(+c]C^\_ȻLK*q +24߸~-Ix[r|H,ܼ@e +u"[#a*N,E"_hmB%y8nY(`hrXlX +Ly!;HkH4XC.P8tEX~QL =] X2M&΃}_9dmY_¶i$͐ ,Eޠ|iӥm=F,꤮mv. ecSQNWQSMAf/B}*_\ˍ32%<Spi٧:7̄tɧ|/ɵ̐7f3\ehЖ}!CSr߁mtpB f:-&^O?(oDJ=y[{|w#{8q);&~jq M4=(6&ofm+ua:Y7Fnp%K}5Z9 {rLo g'}ɡ'8Z|jLt?#>]^9T1RtH*)b!h{uŪ+i1Y2vbc憱D:$ȸ_*;`MPD%俸Ƚ%_3紩E +_z&#w l9\A/ j׌iԖ5*z@Iv(k;/_3:%:=IoՍ32c3 g9n`#eްMSyrWD"h M4$E⻾Hq;n ʺQ??V7z.Q1yG95v'JuA|܏SF08^bO8m8nmYE>lendstream endobj 4941 0 obj << /Type /Page @@ -18362,25 +18251,31 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4948 0 obj << -/Length 4128 -/Filter /FlateDecode ->> -stream -xڥZmo6_ -TjUPI%AzHA^im5+W:gfHISKCr8|8odxп4OY&OWۓZJq$.O9O/r=qbN/ޓ_.\>ㅹve۳{K4ū˳{Ѓݛ7v'.[nBbO|V'o3? 1'ۓ->^K"aQЏSQk80MfI'Ar"d$$.~(7MCv5#M(wK}Z2홡z4rᛏ,N"_HëfUD&?إvvǙwSEw?5j -߯V`_=so˪pSKˇێF‚)Q#S#Ů* ܞEwߠKYs^;5C,Clyk[?0]94 -4_%s?́Wa Âz2C8&KS -f*t/EaOJX20qI"Lm2QQ)z!s ԽtnBR%90$| 0n!#ZMMZ 񸓡2m]ie'C4v^~yaDIM|+dJsd޻tvlGH$\eh212v&}}#,s/mU{kٍb~pŚӴ|b:m!\10)\7a*]!0H{L\dM堠1$ƛ8bRap^?Q;RXZBS46vS~B=ƨՋ ر,?GmZ^T7n O=DϤ%WcD/`iCTb'?y:*~Cou~.8Ks>!?5ai53;Ą'fv~'=˒bNf(Ͻn fl dz<,"Tw2芬7ClI~!&#,ڽ{QQI\ƂXXlbWPV -w`LȵϮZ6 -(Fwsz(]kd;Ջߥg>'^H'+K }$zJ5?6E|Hױ91hw6^70ٳ~qD٠ ͢^%!涃hbSH.0ZU&ӽF .f* XqTá ~χmGyǫOFDvEC/#OxXtNSoS<*DτM9䖽+hlQc zvAvgT2U][) gZW L?DSyΑ`<D8*$ky+:b81kTD7v)u2DA<>Kj&6n݂ -\bh8vJE,6X#Ϩߗ {)F܈CDbW$W)qtۉX*vARzgmu% :8#%ئyt;*mtnϹR"){)ƢdC _CAL9jYkt(gI'u.%]O?޽|) "5bڎKz'&iv7mw]WgKyijHԲ*7 &-P4C|9fh h٠v35uf BA 6GxZ`zs+*w? j;ضFB<#Q!*PßdԨ A:*dQʏ8σ#*ƞ%cWq~ʆBmn; ۹d2IdcTNËfbZE30sOJYЋ sy@*T4&mw'…33a?7yuSDA/*!%J KIm0,&,GkSmlmDA~Ԩ'/ϼ$;+2*_|ǎ"=&HT$֭jR~Zfj/飲ܗ|4%㱀',dR$@Ar(feFsԦPÑK`TBa8Ȧt;qzI0 7+li[POfnib 0Tʹ Tn4yΣtđ$ݩS01ԪA#i<"u1LKO? c[_=pX(pXIMS%ivAuшMzgwB)k%;NsJa2\Ўb&+}f4S}a;IyA-\ -ԇ(x0: MH= );X({% r]U4}>4kY;n6CQnZx`nÉwnaw_,8"X&u}ŪJ51/W~oΙ}79tM8HxMl\^qT, X*[ -~,Y^t8MA=VCLvոX5o!tLRR #;yc^T\(dDr WA'*mvPE/T[.'zI:PF ׹ra~+:@~O1[Z} 汮 $1>M\*ve ki1ivL}[]PN7|R/,]y{r·c?C;L1%h+G{zq;%O5=?a~ML3lr02H3÷7diB:M/d"0A6IЁL %gts`FEendstream +/Length 4012 +/Filter /FlateDecode +>> +stream +xZoܸ_Nb$Pk.E\ރj+W:qofHIq@_A9$=C Lqo|; oiYyiϾK_AO]KceW/BW1{\_\ޫ7/0޽{x^ +8ӯyEh,MvEq;'*2ˬ^Z˰(Y2? A %7q:' +!#J$qcۆq[:|z/Pssf?vheާ C=&ХEϳ?13LVO0;\\qݕQ=O }`m jt`J8ww%zue9& j_ ]Dwߡ9H[K^'52AxBm0}9&A&Y⽤ +s@4S{1@#^ҋU9#5 +P{&`B#̌/H\{Rt!E~ʧJņD$ùzi &Au]1aBA=H%̮{n0"A'3te(f6۲% 3mx<x=2~]ۓ@xEh۩&v}{'LA+lMwo؝bk'&|bz]Xy5񈊂dj`ޯ!a2B""qQfg*Gb̴^K~# +8QXZa`4ZrQ}~E:L/Q5M0Ȃ㔊q;*cXJX>L}D8Ie?NtJkD!;>%g +GA`4Wكpơ?>WbWgS97G'<%$|obr^Q1rT#BgnQ(F;_GYOخ= +F/alj_)ڝO?l!R)z84pfNƺ+݈&0%1mK;%O4d;p҄$)MpI཯Ǒuʋ`tmY >-4*:E1Z@ϙ~ޗN +M(~9>m +X4TNJC?51>[FGi:I:ӹſSK&Lf N/͚I m;]AE)~%pgN^~,rI)}o9ⶁnLF#rJR'l u}/c"֪8(@YJ?۽u |5#G]ޖϐ0D`i梖K`QVƢA#ȟWi#P$bLu45qhV\p7 +@ N;hhSҡ"L箉w9gc+vgH@eDBL$壔Mۦ#@dvk/1+0eC)/pvd@r.}Z$dmBCSsLK|lk{6RFieh*;^͆Fr +$@ 0bܷZj(7qdD0) ԦAr#iSLZԭgF=e!o-yp*SӇxq,%`8tePU[ UJ5W~*!\/Q 꾆"œ:ظc#șE%S!f~")p? +qj69LLcSz~|T>ϒWTD1r^eT#m8@u{lNh4|%rnуV"pͼn!Ш{ǁT$2eeh*Bǧp䯛vo=Gʜ;5D4tvR-7h~d \-gtҷGPB{; +ЅhȡUda[n\h@E-ck9p?KUj+VmJ`?Qr͕$)i\`8C?bdiJAofPfp4}8j[MW-~A9y 1.lT݈w(-OEQa巨Lf.Iԉ98 N#(IdQeyu.IrOoEo@>|%=z/\l:JQ-(>X8B 3W608 QT;{` Muw+? +,QhԐ}-l7pyC +4V߹  y`:-y‰I5)گ +:2:ɤI&c;J:9J#7kvܨun\|)8Z9||,R?l5On>aYfoW%yv9XBX {]yAR?{4R lė2z<*tDOx1Iؒ+ m65w"ٳ(OEyi2c3"4$} %9RO҃vFR^&Z`ЖkQ^u 76,Z|5Vrlm.)uňj>rGu2-:šcTBEf3c?!vRGӱ\- @P_+cu8 fS2J]F_0[KWH8tiHBe W̱8I@MJTRL3w $իţbY\4[p̞(|ko}G!E|u{Zlqtf1"?" endstream endobj 4947 0 obj << /Type /Page @@ -18409,30 +18304,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4954 0 obj << -/Length 4108 -/Filter /FlateDecode ->> -stream -xڭZ{>!ma*h-Թ:kDIQBR~cwIJ;;;;R\_\&2Nr.0sC2|{{e/EAzy }{on{=+xݭc-,ӯ?KNjWiryρ/{{LV潼xsw7K5%K1"H91I~(&!Mr>S0]WTkC{WM)oZ~Y3%_ -gIo}m@(q@SՉ/{ڣ(Sn=n`Q^k [W˒g2񲙌Gn蠯ģ=]Vܵkplۖ HnQL~81pђd:Ɗj <>`3 ld V$Ը,MIh9 LKqf-疲/5V # HE_:aw[ #pAS6~Kذ>{VS>7ŠfcY=%b6䒐W24KCeEntŬjQls׫gyێ^w3u1-4YXUalý:k5r6'`s B}6h\jpXRɁNe^u$#xb)79K 9NKBΧ3P? 5P a(ch7xqĈ ۇ -;8Z8!)4&y􆰶 8=aFU芺 ;6X 03/~S,}c"3"ٰc؄a!0UN#t苖ld1dl_E0xNB!މy\gI>5 @37Uy[20 U r-x@M49r3(xHbAFGKC-rbEb]#"VS{E n3>F#"TPGnqC.#y@0d [uyŏ-3iPv %Ko֡{]ҥSg::'ۓ#VaF.m bymY!w'n S욺,j -Ɇ8mƊnbCG[Q!'qd؅pADfWY幁Y YE -Lc𥮐q|[HQE(zZ]A2rN:h|cnqFcyߌGc]j0g>sb_T#5- S WzMrQja{8w C+uRYu|AZ yL_]n$c6PpᅽG148ZRExXvLWyPRF5ž?v3ѭ8TT Vtz90ֵsCF7s 3l-%q!$)]8 %/Ar[3;5}¦._ 2W#⻃grcJGG H!S9y~,m4 S)W)A#OhIAUlc|6I+ -[Cg'-QAM馩9͛۩RaUԨBO]&={FϮ!B̘JLJ>_o_ Y_ZW39GFD|)e5 9r` CdQ,R.˔<⢭*\3 {oJpY<RF8HԗyNS*@c'%6QR`=Ee-\eg0}pfzп{uǿӗ܇~E{\s+ӵ0ӝKxG_򷝛He)ª}H YBa{;5*1kykK6'6tC׫[FaN$I б; HC0Q4:/95pN";cty gm0T">E`8%<8dVypm̈"BC|D*P|iޅ= -(m>6 12A~sJ>yv*S~ZGAa?k*[X.ԁ*gz -P m 9aTFP~XY)A$qq,b\l!-+^M؅m(Cw/r?U})r?U -('I۹ѵ8s 0Y|,; - *ʪ^(*Iy O(,7/@{,2W!m-S63$fFqZ}#`Ge(R8EwWIUp N%gNO -B8E'QeHmT!ZHu[ԆعɎXV4jC[ X,n?]AO^"j17+ "en >1QB=O}@CZc`§%N`va}?%lc_s&HW*܂+3M5! .1u%wkO.YIe$ڡPR`.5 -/ M!c0i4P2Ys7B .Ƽn.>쩲ov<-lp>:4G"#e,]jf-2e%H#=]L8y2_wed31$c+7VmcK=ʖÁPDxR7<89yjїj]u'DdtIV)T vT3w@=_)<U_(AHq̧P >78k[Hؼ'6`7VX3Y{sx[O:5AW"c/Wrs ֳh --]ꭡt]+_mzL)8DxWP*2a 8>~#1ܘ+yojS5(g?!}@f}-/q R6;7&-{ -Z -du%1/.'WYu=1m }b2*W?2/?͚uB bA Ka+~+ w|o]2_ɂ=A߁FȉX[߇$0kk\֠!Dx}, ˩SndN| N~\Nݧ$Z:HC) 2/K, U⇉:fj#endstream +/Length 3974 +/Filter /FlateDecode +>> +stream +xڵZ{o_BH[hr-Xq uT[SFA3ɳ~cw8JvD}7DAlj$9_ς-p&L\A"u.? u^eH2O^.铟IyWb)?pl[$wx{WQ4?{68_?~&P|3C_мg/f6uΣfv="Sؗq=:uL&F|}ؔvhx/+-l:7-lE(_ +g^5EչERsVuUZuS--?nSBϜVI쵸Xߺ\}-d}j,&mCE#`\XG[vW͝ G-Wf*ZbEg(Yx'˃a#/+f 0QĊH{ ++S4K.gWZaPUk(iG9ȊR# AGfSRҚ)@Af gKN՜dva4 +O'M|h6RJO͸Sk2P2+l*Aq6#؍zIδ5W+[J6b*̋p%匸ls~`0}!JS$ aYȑ9qc)X(B MڨاeYɝPc#;ha_C`x]9~N**;Gybt4` +( B{ªGX/Č'"rsh3UE tA) )tGݥsWKʌJ87: ]Au}L&R*/,8 /Dd"-(ɘ7%P(BGaRi>UchA^7j0yTH?vg'u%dYapdGiz(Q@$R#(DMsFw;7qy9a ޱ3zźʮ~g V&"agMd-@%z 3" fzG#frCn3t(}BO``O` SЧ1;T<8bCH 6 p*f +M3?v 9 RP i üDc𥮐b,D\XBIj(TWNOcl]4N[,-xk:5durl/g6uIot|8VeI0#oӹc Z㧋r;dӹ\n}2"lOLF.7&`Yֱ-AZ>tWި1Nlj#=ѝ5剌ie;a/RkTx;25S9sVY/Ä*c{<t&U*z&`HPFw`ruP_(1V1gP:&W7;seZR| @ű5pBo L)`M5 (?Na:bh +'(XJW4 +ձt;z `-Ń!XBNmr5ݝB}]b,#`alr{93ՏZF$L6o"oBGG"ыL@*i +E?aJPp] .Kw+| Agw,/K8RC#'^ {!,پwPAٕ`Dј"=O +pkڀsX;:}rKK+e. }^2%bF:B dq:>7a,2:MR+j!ld:':(zM`kLjf:"`UB?+<=^:ҟ=ը]pp+!0!UҡxGg@? zT9+H +IBD:!^sԘYipb?chz~m H#$L2kCE3:;3IAUs +nzou/X~3z'Poݮi|thƲ{oi5{ PwyPpbDۙy"HCSץǀ"~jwآu@eq"őN<)))8Fi{ܯPvNORkH<-|rഴz8yY=u8sJ*0""D&/".+^VAf]JemSd3C_ W/eGa SaX>IHҳd`K4ybSuO]C̏ ȖzcBI:Ȑ kL!lr !(A+2(SF63]2~Lc# YQ^f<e;r'Nv9TvZ0̿׷PXSflܔ41hlr`EO^a}J:J#E v7?#AB u|WtX:{P춙erI*CPH_NlɠɼCBHZ҆"A.%0 lGf;PܰvƱ2v`+k+3M5 F.u4Zhj]aJ? /r-XFn ik8Ejd.>m PV']#14"=*.ƴǁEtܡ=SekhZw1X֥r67F,#et]EfbJ,N)#ńL8go)A k2~ 2 n%zG$EnC>u)[A nxzws59 $#?їJ֜ݏ'ѽaj +B)<,WsFs9sՑoB/#M(A}B](b5jؙ[+H(&65Osg632[X˷pZ 'rs j +m{ˢXL)0+_mFܩEGxP)2y4xHLx/:eH0}ymr8Ixm:'i{nfbE>JiztK6y5vV{w}rWÝƥĉ& +um^BǯW.&=2u+~>2abfŶgmg;B\BwW\ )~k~$1 {k{`wIvFjfU5%Agq4d(,s|Hv==#>$_nc_ɑ?ŔPa_\Wrtendstream endobj 4953 0 obj << /Type /Page @@ -18473,19 +18366,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4964 0 obj << -/Length 2325 +/Length 2290 /Filter /FlateDecode >> stream -xYoXŠFZ,ń5߲I:4qU[6*p{c:DU}{^<~`1ppVA0v~;bdHFONxz ;ttUi::^Rn(5niǓp$7Gpo(k:ڍ6@}B:QI$QlxI(}?L8VuRպ(2\*GH.&;G'uܨi yq -Ō@Jd ?WI9o[ҷ*iN8kZx~*ds?Sۛ4-s~ ',8PcY&JEs<P,6,xJaaRJ4RNڡyj) z98L$և9B9aŻ=W˗L([|1цKf{Zc+!QiJsOtCIT \{JM ެI{ՆaOR@Mg1*nLM!mX+PgΠ?7YLצHDflY_v%zDOMg\848s&Vt(wwW=ܼ} [CֿpP_sqw@K?d"I^|F!$Hz?8bږ&:1Ϩj$m @wI_vUZPjQ +po* <4|a3&vx%h:S:IYtP)[j*N)1!95|S`?W|RDX#bC 'ڠTڕcR$nm2Qs%KE -DKyL@U{teOfH|/_xujq|%DLjhsހW ꟧b[V/o z|ySPݣnF%Xc O5 if"leRkhжI `B:WiwE5}SRp4G:8iLX!^DLðy07g b@c (Ȁ . %9g1pqހa/s \61)d(Ľ iżyR 9{ -Ć`EAѾ](-NcM5?]еAje*u--=+hj˗l~ceB -endstream +xko8{~,p23H[.I7&nq/{hbɶPYr%9̓X;!9EZl +~ +ludۑ4@ sqӣ7H[v8 eίn#%1~`_ u7>?%mx25 eM]N;"ОB}lb#[0<l Ցvp2_-^գHyaH"tr{T>+g˴NfL~\ǵ>ާy\(_eT?5'ȳͳofLgezSi]yj+AphQ]?ҞPЇhe)6Ñvk  /t z8Z59˴A\(}:`STedֿnpNx!9nݬ#SY (leژ _C'f[pF8sdK 'cZ$hx'۵dґ +gޞe gyҁ\#!U$HSZƀw$]H*ʷ2"T6Ϫ2Iڢ9͝.Ac a+SZ[olBufgڑ1:Z,Ռ!G8\fTN7W^R( 5!PCygKCZSrY +ۢi+5.=vַ-IRmC)6Ͳ4[bfQp896DHb&NGlkߠ')0fJ<ױҼ4Ge\۶DblfTf$e&EUkrrxi\Ej@^U'砳#YD5E٬^rz\5g&t a!Rdח`iBp8T7coi} f] +1"3 VLDg1;mq{fY+L!^%p"2dP) + +VᏘʴ5/qf/* f"iTG"y{|BKU`eY:jĤ1ȰOC+`ikB%|`,xIaR1 Nj Fi:N@d*(9߱o}3@&DVs8} ϔ+Qeh8 ROk2jMx 7ɃDsOI@8D}7kWZ'N)szec7sh Ԍ mH)ܐg=7YDצВ2GDfY_b3QE=\ݧ6i9=M1@wwW=Լ +6- +5w' TC"N@}G+|/x8r}\urC:EtW Iv@!F_q#}})!&4/LPh~|5W;0ID\ `' +Ab,ۈ%嗦tMQؤ8mY~)0\t+ϵ1"`Hf8`{G":֪6'% +1|S6a<[]iХ_I瘺OiR =1wȐ7fAj9SQOV\)7(}2oYQ3#tȰ\E.yK>j{BK2IBĠpBy$uo549s1Kqޓ 6\:^"=KOHj Q}(|s|A t}FM*hGEhw^ZP#Z_ؑ.endstream endobj 4963 0 obj << /Type /Page @@ -18503,27 +18404,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4968 0 obj << -/Length 3219 -/Filter /FlateDecode ->> -stream -xڥZms6_td:N4%/v.I=ZmN$Q%8o )ri2A`v.}P6ݏl{ b"$ͳ(׾Jt ''ZO'pljOơ;w'흜H-&ֻ8yEnAB{mӥM;hJb6||_+ y֘D*5b -"ۉ1imf?} D+8Qdϡ^{[p.5_Du]-yw|(yuhwmxiuh}.<6y5$*eӐ,t8& r:4 1v%cGᵇr !Iy aJC_|I,7Iԑ}1v>W~D<9PHp rpy(p{r Ra7FKfqńE^`mǖn@.ڙGaF]dyvt;=o7:KP>Qo]U -lX9^Ϧ+̿h|Cs䇾tttb6D8ăY΍|LaA>^?5/ԓIgnbo'0y/hd:~L@&y!|E} -\=BVϝW3~<\dQZUMB$BZa.Uld+|p/Cz6s\-rx͋ӋK{;Be輨!?6/K>:ƛly-3ZjΪksn;qxXY2-D\b܇[xݦ |}(n0Gx%CixԙõHfk-2 nP|bp0J`XVnb$\AmMH]]eMJT@rj -٬ffcA,bQNB҅sTCޙJ(MP1#52|-:CiEܾӼ=xtdlP-^8HEJ&@wNN`9E!@@Inκ_qV8g7~(!İm$dpI a\VAF HQO&9N4y4gx6rvȦ\Rr(\Pb,DU"Ci8M3 wb BZAIGI1wwv Xnb  َ[c HtO+zEagR]dCئpܜ-|h!$הm}*CqB N=ǐccR$ IQ7󮶻7CP%WuI9$ 5 R0] -Iނn/zˀfw R0P{R{:&у[)dڻ -tA7jRjA?DZl}{&Rad?lOdDE) -afWAR7 -ME>q׭9Caqxv\3H*s%TY5HBfhzzkbs{˭Vr ?zį[xbLak6^\gRO*bCRD͛[` 7245o4/4k^MI v($GH􁴟s=R #+1B?ZR⹵cQl0bfhP:·$)f}^;2N[õ F `1ST\hg&[\eӜ@3p˜8 ; 1sQn -uQb$R}Fm=t &E+v}k" o7:&0heN IFzGD~J[ЙFdJ` ĆtoE؟Kf7@,%0G-GG,0])MdL Ї2Y7ɖ=pc#ƄEH;&DUDv r׽儌\fJ7&^κzXm!DT-$*d3_94D[tgʁ35Eì&H3MXr:◼% -@_I3fDW y!\1,tdi˒XB=RF]FirSb -\A9 WwW#y. U862zq& x;30v\ u.l;@`'4%Ba Batl&k̦tp,>&(cvL$SsĭPJx7yv4y|gA5݃ɹ?fh@!n栂Z;9#vN{lfsL;9=oޔKkuYnyxcc L: KV%6!+^(Bx`7Φ`endstream +/Length 3141 +/Filter /FlateDecode +>> +stream +xZmsH_*r +RV 쒽r89Ԗb) +[2Lݟ~Iv~9(LOkξ W(ڟ9);qwl \/^]׵HaY/O#ǚ<:):w'gcsy~Fk].~{uS^}S{rhh[9q|W+˽?Z)<󪁓 ؉U!**V)P +!Tp(4(be\@6kbBYdLW׬bלj~RHˑXǚ^#]ְ9k[U^4?]"ufjiӇ* +?pr#ܡk FHq @; g񸎅X +# + '񖤵Wf49r-@m<7 ŗyAPdk"{:81;Ӹ5x]a~`Gϖ˧( y>v)5tC~"8Rj 7 ֣DOª~[ZqڈFg劓5์7P pvM.:Gdx̀&ױ%b%aj+,a "&wc_H&g+g()+,yl|Aufp-r51Y|% Fno5zD+mFdiޓ +s rN61kÍ\QA|mZTgƲI ] bfU>fYIhq#3b4&WCĄ`=e +''y_6x4dlP/ $iqĪld=ar`[A'uE%f@D@Iaƻ]~w4"9C"}=&M UYH9r[c&Yr !2>NOf?i+44P#glRl01m_L[=$~pAIDk>VY!$&ySrMӷޱU%<.jC % C'[U۳æ2 P6<ĞSz[dAHӛpܜɞb=NW}ʳ} Bc/-ڇPc7CR( +IQ\ٮ-B|ˬ- +]n͔$x".4tk$Jt) .Z$m\PvX,pa+cR7+͠*ڱK6Vsm.]'VH^OW>BxB1T|ĉ4H"ᜇiW7sxTt"Of[)]#~MaGEVG|9J$z;]|΃ Y0H؍hCft/^e I3hx@^1yl-DT?94 Vr\SmM!\UL&TCA +r^YXH %>-VNRj eztc 4Zhhs3iLmӇ}zPC]_v=}\wK-;9;yH߼ :Mn`qCډlW=+ⷷ<'tw7#fϒendstream endobj 4967 0 obj << /Type /Page @@ -18552,20 +18449,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4974 0 obj << -/Length 2224 +/Length 2208 /Filter /FlateDecode >> stream -xY[OH~Wd{gՎ)+ff#1 :3C@:emRsΥ. pWSA0.z> +1"̏Og!ۧq\]5·GGJ)Gl8pv4 -g| s _O/&ÑpN/><\]^}@9O{' fB"?A L` et/sxf(Uśr[ڐ\UÑ+]s/B1 QkgH[KΝ߅Ҹr12|y,9|Q$wc.V,ϡWz|`ٸh.&'e 6pDqĤfURFV@_|l/^{ŬR=Ѻ z }6' l˺.QC} -9g[=8 5[UɐWؿӬ/τ 2TgN[.vn#jj/uWd#KoA+$X`l#J~/B-/F;/ ^8F5[o;6D}| yS~%՛=R؃7$ : {{ůk=ύ$m -]ϻbDo`.b  ZkZ ?S0bi=o6mg~S2`=r^V8"GѤ(- ]DyRl`[DBP瑮Kvm"OA tܙg5)v)uN^Viˊ4b#C+ h`IIKJRp¹>([NkL c#ͫM[9h4RagbRd w*50IӡD@$֕ +x nRj -1RTZiۼ11\3@2%^yfA+\0MeT5ۘ:p^%ZK[2o;2Ȅ4M2 U΅AiaF)ZyV6@fUt|jceqRZؾ2on?dHqH ت(j[%{ra"}]"αK4gh6ijB|lEGˢ΁q_pa#]W^7=gzꩴzm/yn$\O+95=o2wU籇΍ӫ6X^8-VX̹|թgendstream +xYnH}Wh}cET>KK'9 +Y$=If)ȋ:iW@0NWdUo0b*?xJ.&oE?YuG*[-b;rAo;Nс\$yˋ3<~ȿ8nէq%,J>w/n7r>vOÃo`Kڄ3pj{@:Eܥ//^]FHf5ʲqxOKDZiz}Ѷ'6`}ƻv.QGE +9g9ۊ:naU2f!ﳳaǮJ|iReupoGcDhCpm#Њh'>VưE>X8@ۊ߆˭P?n}ᶢy! +>O17zwY<Ds| ߃#%y&={cǽ=Bh'GV`.U"]qVlߺB&bFE ^$7 \$3̪X uU-,5 +- *)4T-fՊ0ۚqwc|U-M!8掮K%%(|.2Pq )v)cØrU\4"u2d f+"<[%+ u"8av)-!6 ΍pOe$/OIj+zP.Z5\9j. KiQ|A +Q"U6uS k.#{-@B-Ѥ [uE@& +Jiʜ2!ӻCZªD/08l_(Ҵ)#D'08^QϐtJ #oK:SbKK Bi-s!bld n^۴Uh^(L:Fp 69fJ,%`c׹[k~G4DbS8Rn/x^4`"URBWʊc?fZ.(#6!no(l׬im0F$yi%S"+x1,9hcZ43: njeuj]7|ɽB*dlx?;cE iH),}$̺ +e{04ݏv^b*ԭV\]SȜPBb#87'/t=2ʈHlol%xb,4_(x=˦_30(TܺMhPK +Y3rSuYnS<󆻢n{7I!k}Ĭjb&CQ[]QpWJ╴[e6q7jnBf%'F%#W69M$X5>܁J-GM]{!0G#kʂ%e{;p=0 Om1LMl:UmR>ݚ$BO+9&\2wU#Ţbi?Ԫn{ " +ÔP|endstream endobj 4973 0 obj << /Type /Page @@ -18588,18 +18487,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4979 0 obj << -/Length 2180 +/Length 2161 /Filter /FlateDecode >> stream -xioFT!s8i&6EbB*IY}oސ(=b؜ͻg>`22#6[qd~kO 8sC[LjTDC*fxƅjPnʹ^t7\x4aH$C^3״e[𖳳oR4R_5uc>\]}c2KRjo+L4r@G*< -VmugA[rtXQgkW;b[z,k)i7.[-Jc2 9ʺ8n-c KnpdDƽ씮0ؖ\ML)p_Ezf/q.,{:f"bc=;}}g6rlh7r*BO&ӤG#}K8~akzڑa=q:^_q4Sݨl?{۞u{7βQGף4ݯc"QkxD^ _,{=VɟsW]ᡢ?$7:(2<|sBb.;-gk -endstream +xkoFT!"pd;i&.EbB*IYYR11;\&A+,v~< |NG?Հ37d`~c@t6n8R:\qhrȝR /1w/~$x~|iyr/ߎ>|b鈹2ԃ ppwJ:K qCL. ,&8-E]4M-\*9}{2^.q*Ӽ~RG8G%(l8V ǬO~:."4$/'/gudJ*Z:Qݧ#-f OtJIl,fЗMb/ׄg*-F>aD?"!q8 =_8.Ɇ ŤfZiF"B5&4zRB,:Oz=YndI,[K(DQoC|1J=mbiҸX&w4Buc BT'歂+x3l6pgZW"ō26M=xOT& ETښ8go\ h놵 &.CR8=#z2\sqrv^MCꫦpsCl0 *JW=ƴڹ6%JR)jzo+Lq@#l Vmug~[rtXQgka@7EۃML1 y{e]n%qZ~8ho#^vJRl [l.}&̴Dֆ(г\-6t|{|vaAm1~0~ gۮɶ`ʹ>ZK^gb_>\\w^wȎ ckhz}Q9uGO3kˍz]v۷inPm~p,u~15j^ȿJ:&bێGUȋw1˾pC~czp|\CyLAwЫ B~o@Vo \Ux}FtIPͱo/endstream endobj 4978 0 obj << /Type /Page @@ -18622,17 +18518,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4985 0 obj << -/Length 2244 +/Length 2204 /Filter /FlateDecode >> stream -xڽYmSHίUx2z!=ljKHk%,C_#Y6rI4ӯOq/za\E La/5' :<'{o|EGHXͽòxUO%8ظv!qY6[^|߸,|R\Ddk,iBoCՒhw@yH YQ]3&xmD2`*?{P2 -o$*VL+g Y%`PFk<N.۶)3/b[#+iθ]/>G;7@o"߬ʊ1l~u9lm$@"&f%^RZlbŊ+WK[Ww`h=婃7ϯ}QiM7ɺ$`ͺf&%KE(4>(/+Z%tX[RVdiu^suR̛1^fDpK'Eb1煍ʒVb 8֩۵[amlb1ep;<0yAO#Qu @!hr2ܶkSwqٞe:8͗D<>ǽNݾ0:C'ʶl Ԃn1%K?ӬZ)q-Ԓ k|Y&i=`Z4b2GkeCn)Ə8=+``"`%7`C0}%@CE Ƿ/,+h:ǠZaÕuBna# Cbð0qJAҐ<-vxWS=5#~E"nټ!Vq[S|Ȼݧp=vrR ezVNCAq&Zvf[ o׍gZ6'?ް(iu/Kz ⤆"сOvVNvpe%Z;G RS""]ɭny6%bA#qWңa;lPyjFWL?, Cm) iZI]Vpi콁ˬU`{f48A q^w(5MwG79*H wG$~ ζ!_UݫtdEM7oÏP0vxz -z֣H6PeV՚-) *&o [gzt#ǟÑU!sq@IyMB\؁Y+@?qYFUV5Y`KՒh@yHYQSoB*!/'+" U_Qi-[|1'x +]_]ޏ'W{1u]yLn.i6pͱCڒ=q̤܆u`Ȩ+{,jtES\z(vڗ1ՙm[ M%?m!oYK4+nŠf_Pz]cJвv 2*\ج^ K5}2 je0IUb8-J%$pSkH*L \$}d'%/` ~~$t pW>H&):heĕuPKn],UX}FS e+&ajT8RU pKii.!.^B hw? !?}_ ,عRbb}Nk, K1+%p裓^0 b閐JH(lx=Ɵs[rfPk>2tLi(q0deJއxmm!n/TօK=Z?bw[j>:td#t#zm`XVt֦u7%G~[&$iI &ҷ%$n/.K5f̈vt%6s!05"fQ#qW2o~o 5\|3p,^ܣF.j84HDөL;csJZs< @(Zƺ'H3a'Ǭ9Rx%2Dz|'"ρnURWU7_lhxϑ7 |&W'*h[C%˖Iіˀp,s?]_D"J^ɲXB9Ow`d|Qu\!A>>Z?WeO&wMsxWdQiӏѪX9%e)K:oմ~_$4l6_LdWSs iZ$mplT]mRD .^^O8ÿ!TO~E_ޟl[* +;h`PR@ |)H&mKu"*ګ/+$}c#m]"_u|+萩Po/,hWendstream endobj 4984 0 obj << /Type /Page @@ -18655,28 +18550,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4990 0 obj << -/Length 3884 -/Filter /FlateDecode ->> -stream -xZYoF~0 -,M6/,:: :b?4S~eApx =( ܡy{upmUA~xu3:Vy>^\}y6S?ir˳w?`.li/.~¾YyWW|۲ rӟ}W?ʳ'(lʏu$?Tܧy (,A;5G +UՈJ&%I W)^)m HF}) %~niYV+^Bvr7WVkhRɁ^y%Lc7RB#O9' $%w3D)e&{HefJ#V^ *1= Bم -N (N,j氂m_橋nABrFY\Zn,rra>b-@Jˣ9}-7bx4‘[(tDri_':X -:V!Q#k _V\u( _@W(r׳P( -Alр2D.>: c{nřԺ]].М9f퍓DzaVdęe 7LWP'"w/RT9.+ ˂29g,Fm(KMNteяօ> l,3e],F**ÖCHAغ h%IH3N ev8𯛀8b1lӭ66b0Q{IYbX|oƌ6 t(~7O];:b2$I<=@l6~ /|@Մ[9Kψ;6ժKR!Z!-O~.XY%[%AN%hTW[pAȝ4n)ri?Nef#RKR 53*KRHmRusUaqaBP `\IFr -~{ͥ -@-(34JX4!y3I%xNrDz~dW]lN -F;<&L'^pвl;E+EtdBR[q.(an,хq}afdώ%v<\̺`.:MbHyNp˗p&-?կ́e)42_[M0bSYlHk/\!ӷyqd؈dHaSX$І&Q(@Yx`,ڪ0N,OW$v([iJ01O܅S7!klE)44uHfJ{_=?WnSYkYm0SVA/T$foGZFKm 0MkӠ~Zbo(8?!{n1 -+䶵}u)%mI+)3)!+1R7 1LC6Pfs|!Ia -xD\'`Vdӯey=pMRmOšbs|X{f9>8@m,|F^W˒[)/e'Q2|'Me&9?NrFe*#3Ϳe-;QzA]57X <pߎk>(o51Pb6`Ly˂v)jW&.vSKZ2VnJR&EMon;:3MX-KjӜmnjN%7l~73-#bK儴657Ȕ0~T%7\`a'M`"*4 1YE, Tm،6AejhFvuEz5q;z|5R)gӹC=afba׬R9倭3I0Dᖩ -J',ZJQ$sR֚_iU[o_u/1"78:#?hQAZ8O]!YA1oo_<}5} B )!KP -:(ք8l t/5_m&c2endstream +/Length 3781 +/Filter /FlateDecode +>> +stream +xZYoF~0L&_#k0 A@IMX"緮n$ ؼ10ꮾ8?u~i(ˎZ;R#8~jvtmUA~<.w׳?MQy*'4ͼ/n&ʻ|}w ՟.f.6"o64T:p)8^6? +(ώ*ϏG:XGR_mGt3O2m#G~&P~_p"w1*qe t\%$NO. * v!mM0\czs$ Lx)ećUm֖E{%P}=F\G 0MƔ$L%dahU$ FT AB!LrKߔo oZsG{$b߶\4w5o$ +n!X#݆ +:4^ieeXXeRb3n/ٮL0Pe\{2| h !@ӚIy[PB2$=@{1;U)P|r5;D%*ȇjJdž#I+ WA{/e?bemߢ3Gu璗ݸgSzíL$wx!qd_c{ +,OeO+N#d^T#/Dx,5%dń</{s +ДoPGix[|Dc.1G~Բď\! g?mXOM;bE70@!GɚqŪ*Y̹anW ,^c Zh«i0N'[ܠEQ}#J=9uVիdǼXs($4l*Ӄ-r\v#~yݠ-\M*Izޘe?V\lm+d{r~*6Oƴ>\* 5Z XLf Y'tѻlB'(Wb5t,@ +c^Mf#zQ.rsS ll`FAڃ,JբMhF;ndejK"RӚdckYX'!\sϖ)r(&_HQkmNKY8gh[ܩo Ŷqj5%qppD/H ¶{g/wUbW2 +Ą19qǍ5 ~Al[X2?)p=Ȅ,Ci/kw Zպŵ?rJ!TVde6DbFJh)']]bZp2Ee构*|UT>1: B-م +N}s'5sXty.#/Ъ\rQV,8ˆQKNn-27C%,iy70'e"FkJ-hBv\󈥠cYԷmJ]fg&g?_}.ƀ\76Q b< ,#1(pluQttD "!$:t]!$6$Bhń,W$$\7S7*bxc0TEWIz̒P,دXjjo$e=ѓJQұRj1* ୤C2>]plSL'MTr5'k0(Z?qkC~/"+%Ǵ}譁%+ĴLabAt+=.E驛|!Av0{!PXa \Rc{E`A+ +WSql83tdEv87>_SETJK<*i _4ӔpVTea߈? 6QZSQ5im,[F?UoE-*{jzYlIQ4wqޢYm׵$-1&!hS6/C3sЄբ09&4_}4i{3s2΅HD[HkSaa~L cGJ&2 {>$ga8LДA2>!m>ԟcՌji0RwsЇ"=afba߬<ƗmX3ϸj,Hb +NDCtľҊC'm)doF6t߬6LƶoM/W:>䣨I.[VjʭQSf_ha :KI(~WzuI& ?Br~Mu|_-a$8')>-$ ~L(_D_F΃3L Aya ;yuPG~t/yVdyiIP;7MMS,l,(F?aS_˧,~*6SYS/wD{Ij%M5*OMh`SY1^JȎN%t uw+ ٵ ~VdCȵ{N?`?% T?+i1rS>/ʿJQ75/t%0endstream endobj 4989 0 obj << /Type /Page @@ -18705,16 +18599,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4996 0 obj << -/Length 1970 +/Length 1948 /Filter /FlateDecode >> stream -xڵXOH"]S=O=q$:UebCvj;<vȾ ?;TAPߟ= =9Fe9~{}i G؎Op2/#ÓP$LϏO'Ñ4O2?\]Q9TPo~B~Ʀ@N{pl޸W#ivwuQp|il mWS8MFM#r0" >$Yߖ+-:uHɢE3$#mıAw"w[>i Rh7?:8Б Wm -I4w<&(1,G;8³.[4{3o::Q Bڰ$+p>#FӐ#oa3hl{y6:k2Ǒg\AS#Ix.(jg^,gi|A4Goh5ؘ@Q;6ՙmtFLީu"Ol%E-wZE[b'0Zxmrׅthp -}#-VGh: rt-,H".!&Хa+ײN,. bUF2PX3"D1P%H  AKgX0>`mHzbKm-j~-}V_`WN%dr=m<~d7,c`4hIU8bWP4ᆭqc͓x릮o-0E_7-dqW -P|t " IUuMg]ҔHjNGEE;کV2D q Y8z 9'  F;МvΡ*h )%* z?M}-44{\"++I6I],'|FRi;N~@BUX`TY_?j޿Ju4w/QZvWD HN6W tlΟ,ZiTTYPhY \r]0h^ZK&;`u|KsT+Ɲmɡ(=8 7 Im-`l_?k*j[z Dz%k]=PA~endstream +xڵXOH"nSY'~Z +]ʲ$ZUebCvj;?8[̼7c}~ewK|?M{f +(zR00]I{oݗ̠?-蓱{:y{6) |cxw|^nOtubvr'v?h4|LQX˕7:VOeob]ފh>ndrfd[naow~:&#rpmXOӈΟ9K;8³.[4xy7~/gxBABY0vidU7-Ww)r:r9JU8Ǒ{~;[2E;|/#`VM qCԈy^=rދkHT0OICG(JwwQէ/eY-K\`E̶hK< yrlx%]5 JkfX`qZ24i+%gcnfxl:fLMoZ],*jw +erL*غFњʫC-E]-D 4XhL|e9WRWl$R%*,1i:_)nKCB!Z#R ^dQ#|͇qJmظ D2`g20PQiJvˆec|e|ZP0/Xfir_+1vl w +е1yB<ы{%g()j*/>*;1k<.@;/EU-W(Gm+ot/: rt-,H".pC1LlbM!N,S} ؛yp7E:Q TI9҂pCP@* X➧(x5\C(ہvP,M&mMk /1-ԐCw ydh0m7ΖYh dӘM$Q$˸ + l5k,!-iO5Jʮ~ڋsƔ`Mŕ,n[J@qom"!w*Yt0M&o|UTJ2.S&HXI)U^O GyBbSbz.9TUe>u Dϙ)c FuKצG pd0 ߑT:(ӼS>Kz1y07`E{9'o5K?ǂG)lƒ${Fܭ + iigS̽Q{Fx/ɋMOjby쭥2rCn>̹ܶx0 |@R]fiBB$J뢇A:_3LԪ[❣0lK]܁]^g> endobj 5001 0 obj << -/Length 3811 -/Filter /FlateDecode ->> -stream -xڥZoFB0D ]r'ikR_^QigTIʎkEA}ggIz*ʼn$-7'l=ߜBňɛzv'tuf/gJ)O"\]}]ڹꗋ\|o(zN>\[B<~˿Yw*MfP\7'j%v*35%DnC!@ -S7Layipɐ"ұОL7 C<ߏ( f1܀\{xT -^Ck: SE6WV<C1}ÀxR~ʒvܺ]&kd U _K M~m;]R.hp]87+XdY12C#wApJx߶t{h46-epݖ[B)7rv +*r_I -'{l3M S4f.AhLqynz V˙1YZd,ĺCLf)eM2 ɮڡdTSϩ8uQWȹH? ,Bo_=_]ϕBS0xf - 4Rj7@-|tHe >Aٲjɣun@U15ZjQ$4fjӰjraͼf@=2)@ВG ʷYX~EIws~ B*c($R -R9z tH AtftSD) vܒCkB*ǶW=7ֆB&X!J3'u㚪bwöa1cxG:;O;X8fC6 i:h I3 -f,9f! }o+uwzabxP6' #S\%\`cؤhzJp 7Mx>茈8`{~Qٙp۠J_INaȵ'^gU,W]yRq;Qh b (Y?+J*^@tDB(-hDtIQ{׎̂I鞓Rn$3$c <]oR2& p "Ѷ˶g;N1}D˾SHF0oDG+D/ ؂FOכho1 -ɸ{\t-UIgPqrpC*9yĤ/l :"2!zId4"{ޤF] T&V?guɭ#׋¢YOlk>_7?$sgR47h=>ѥ;)el58 Rન>\8|Uho}!_)GJc%&t&Tʳ)od Ą|Dqӧ8o¿l+蒵x.@ΐe$2+D?3;tDDvDTEQNYg2^~č=CTfm,QaplpEw9du1%8puIGf &{zSt \Q$؛SC:*$ȉRPyʩqS6.Q8V&8ݻ[+ J㖒@ 6@Ҫz dXyNٻybT`rǃU/zY376ʪS!n$XKA 8$}#7CB(#sdP -%G8hN.zOxv )5\4ggRUvS4HyS瞥G -k|(l~? ˻%kï:4D#A)=L.P'1ؼ?ڜo?ʨqRrffxO6Sc¶bZs@IZBGCC=xD)CwĞwYNif+( /7)0d%IO RP^J$ڣTEr)D+Nl PPCGFuK|}#/-j0Rk sG)DPM/[VJ~sWFS%g~QXHjn^wq_pU )nendstream +/Length 3642 +/Filter /FlateDecode +>> +stream +xZYoF~Fܲp1 בqF@8_‡$أh qٯ1gGmtXD/ηM,#x~ fo`4~!~Ֆ ѱ3Klxm^( zM KD'2DTyym {"lۺA}Iq׋d ֮jx .Q4 +3&ޯQMD S,dWZpw0tmZ[d򊇐K#sYkzr{ "N,X눨Ç|tpk_GE 7eܒ#b.pw_+W w` /C0P$-R0T9xZ &- V )i8AlѾy+Qz(+4|ޖ +<w + :]fp֒E=a) +5/ M}1%ѱ<%7pmi2-'IƻS]zv<๪keqSF^@S/iX/W!C 7Ʊo" +H|]# =rWcNkMJmZn7{i0TK }0x{{GxRzM +gEcp5L 1k +Ww8OMeߟ m"C@[teR޶͑^![zw},rYZ!( 4ȢC48 + B/DH ~ +Bv=w +&w06VۑĖ%( {ݱ͢6uXtzPs: q 40:f=Eލ5"_}o׼d1[rdY koɦ[W)0BB'Q" ߿oA==&1c(x손ZسkB!T, ~ú8p,Db̙jniCr#ۧUxxkn%Rng4yc&͌CiF xU`"-!O#-ccayd)88ko% Q;ZzO!bމ`n +˦v[and!te߳$|ZwcCW!쐥\]ϧumbS`6<c@f }ߎ u˶W(mCoGKi`G`zez|`%]T:5\˳' +9A Cy6guQ]AbKn8n8{xϝ mJZ ֆv סqvX*>tVE q|3kym_+_/L/i}(6)!a1xl +Rle^݄!/,BKw-Ij$X]B +nNBuˉoR&+aDsι-P4߆Oߎ"z Id|e#֪0@%koɓxa ++X[T>\=Z[KIU;i뗛#m%VN=T +zʾ$HdE[րg@ ޡJ䟋)5 yMr7՗XvV%ck˪$``2DڡbxqYTY&Daf9}rmiXWfp_D_KM? 6u6#=;i+k:=pr=VHa *q\/lA)G*"&BWTf)4`?Ua*2`0߉$eRt+85b 0'ױ# e@ (A]d1qA*e꧘4Mle(r._O$D8l70m֛ռ.F6m:f5`6)h>է0(1|QO` *.r@E@EcT6Rb(U>ೕ d5%B I"n$,+=4dh$:&>/j{WOH6_.ȫS!̯CER; $}#7C.ɲ9<H{WX/\~/ 95S + i(C1[S iq޻jg?%q9vOY]l%a7:$,%t?cN0Pn }~:[<]~URR\IX5yISC'Hx\SAg\aM\ +DaZ7vDŽlt,Cieon jo B >s$a ntƖÏFv)Ik9ⷒl<y8H $endstream endobj 5000 0 obj << /Type /Page @@ -18787,25 +18688,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5007 0 obj << -/Length 4267 -/Filter /FlateDecode ->> -stream -xڥ[Y6~_1;UT0$38n%yEJbY"xo_AR@h4n4`ڃ4r=]'4^5^H-~ks3/^q"7yŏoRI:/>t;޼|B>?y7_3=nS,n\rˆez˕,~м(Tt/3kN,Ϋ)0VFMnE&\I乑@5 @CQ9om;ߣZıį_a]SPKdMmuȅN)7L]?OwefAU07(D9M[-Wr}  uzM7>Hd8=е-};rJR"~}h/ ݿbJ*zaG.} ۞kH֪ -֊M`VÚ"bR7Nb3'*t}u!LTenF#~ЏQU"bJ0ã.Z+^ ~%w1#7.{Ro#(E)PbѶ\BN-EgEI * kYE{t)atix6$հ(9xEB=7ЮPa@^n>euI&Ax3V'DCmufǎU0Cߓ3y9No+hS} <-N\5vݖ㚿ڶ@d4 -byIЭ D6 -iC ߉ӑ=lqUi䁃_Qh툐CHZ)BZ|usl|e;b"}cm9le B -熪{qB1 T ȚфڂUAH _h aS`q6#hɰѩJ]@'0@ *zKH0-PPg=Œmv\v;%п =RE \|ExPryX/< -ǰD)YAD? YlS3@uKrXb/&Z^r `U3GG8(츽-ɿ62 Php S.E'p(_b"P3>z|"%$,gI]BZk ~ӱFo!D A=A 2Y -Oa<'H5}AMM-9Ld`_YΦ`IAK,Zs 8P53G͡c| xˆ[zij,{];b>Mj!W8 Aj$TC\kkQ7Q$АwJ"\҂t+V q=\ҏpIs#e9Tcvu+S;AkItSo _߾4 ൑2M+rlYz9JMˉ  i.)20p~xi}i8 'B{@ZzmbB$0>bܷ%0:W#]b|64pn18p׵AW8%7.t7=P<˼uEs8Č(^`j' - 0yl] -C9{Iz;Wa(aI(gR-kG08 |nY1iusXV#uĉCK9vLBd\Qצ9f B\/ D[!vx>V4#J#810x,"!࠺[6,#Po+Xn3ϣty'WLzTؐNٸ}eY:,^ (BqJ#D'o˻a'Nh g==Ek8YDJO k6Z" ~TnYo>cn.ߓ/ -~zA -%czoV*PPFO$HWyXDu.,CɄߜNl~FH@;%<,=fUǮT6oe7waJ(XYD酻̂0ͥ8M/\*3mvp[X{ɕ$,hGa)Ş\@́ޘpz;b6G{AGF7O!"ߚN&Rm2)M}7sh- _oV]&JmNAe0"?^^YAS'@tc߬XXgZT֨{ =XHn nz-^Yh"SXTvdʥ?sLL9ߪ4 N{Pێ \gDNn! _tV yO'梶 ;G,pK`,{T]أgۣ6׍20sD_>/xp9fl3p̗.|sH=8p ';ɅJR7K 5Y(!P:7PVB|sWz:W~-.վyaOo]3Ƭ}huDg-D}V1YuEއM9 i!I]n% Tfo|8Myt3m\5=%PŜ|[H'f:$md ȍ\.%5l4ui[ZCvz. G*]mǬUӯEt蒁c ߬YJߒ~&Uf_GFQ1=@KZggn_ `M0IR2lZ0j+Ҥ[:|EF {zW%6aK$C˛.(=7V}´QHb;;m?o]^faT 2REc8̇tb:YA`qhp {4[pg}zBτIa.+.7Bywcڣ%~;ȒnF> +stream +x[YoF~ׯ + $}d+>Ejș!!'ddߺٜ$ 0iQ]]]m܃y^Yvܞykh̗yzIM/g_}D^~XQEꇛŷ.0t̽Nyw_yMs^[\^ws{lBgqdzo ב%!/y%yve|{šG|7gg0T-:Q3+=̓xOABACMl ǞoX\se I +K5bzeU_)en]mmąnUn' ׬Ϗg65ΚyNחUU'|gu{d}TmGA~gnCq5Pj*=(I }i`j_wcpyԊ)lr?(*۟v\G 9s,!oC2(66͹D~<^ƱSXXCl܂-/c$Fu]Vk=H񈆀md[L+vZ< ?;j5E[r4CPqf_j}@7KW%Bnk$Teȅn5\Y&^"{9 +: S<3Z἖a0I^5kY2L73Ư> $5FkVw-7c\ թ@-S.QD`82]$h \-icG#dtS1 1 xT9Uo7U;O>(ȏF +lT%ئǣv ÈB@bꫢ4hnCx$i;"O*S42KI!DXU6dnj^TXсrG*CYuHJWiiM!M +a+Ni":%a.1s N,fӠCY0Cx>͐m$j,ؒ b^+ [uLr@/GY(Ҕb`=?^ !!, ^v|us/W3$71&U`OK#1-MKj?0=YfZhS(Q|ϐkb|cBH#MW4@8zz#12L?1f@EEx<{ Qj˥z] sPq˶x@).eo<xL4Ǹ}S$ؑ#I|bS^[ +["GfT~q5n#*KhT5??w;&}ESH +=qa 3E!2TQAxRCJL"Ʉojv?]2Bݎbm62D7."x " ȁZ#{YcT%sxsЦbSJR? 2R7K9RS%:i7hY08KbyI FH n?uÔ S[?N9Cp,]o6et턇zR AбU~tZ)@qS +}JVnݣw]UC7Ji_L+9d2-n X+`Vq1`.þ-{,th .kO9x?ЉH߱Q统޼԰ k##-+ +dwl^V]OT$ TQ8ߡ[jO30bZ 1-dfc*<{c1nLfo'zw ǑRX"&VUi )! ֺCu3W}$P.+9-eDGJ_ tO 1َ>Y۳kKÿ\Pj.u"@K4 2SbON*ζcEXjL <뚢d7HB$_(>t>=+2[(gwrfwfyAIXb&ѻH$Dh{1ƅ&6y +K,ځ౺N19 XowSZ# +֕t3N(0 +p3C9S ſ'$$ҿvVeFbΒ~)X"kÃ[&]Vn'd?37?+$)t;O3(Nd;!j??]%7כZ@M%<%'JL:Cel\~?tb] ̓aFu 8(p %}.76?py zψ2ai!YŁ mP݊iIFgOrWEc7Nt +!DRb]DRIPD? [FV'@@"#2hC,5#]=S9:;rzy$\6suƫm:&`/ї[t3>ឮ6 O(+Qp!,6Dy6%:ͭ9@ mfevifap2T砊с>,+aciDQ}` J.9zfzUEA/LQ-ֻ`q3?)X ʁyysPf;:7߼W?^\ݼ\EQ_4^^*[t?^YwG>27?hqo YGyxv+ޝR~#gg[^9QYtJ;4P*#.8@U_5wp=x}"&IQGʺ][/+pq Yj?fUW5C 7L@\m Tݔ]kWmey&\p!m{qh`+t :I#Gqv.V*  ͦXچ{\%Gyw,C= -40a}^3PeOW%\}6'$Z. -%C$C#tÆ i'gDkw/k]+@a\i7f> ܶʦ -C8s%& [{@s.Ef#]RI%͝cp {6vHުQ4ɫiƳIL,\}hȵ;L&7l#AL(Q(LxvlM@E'hCTL^^ͦFa@ 8~k:|%,:ԋO!S;=|:xSNd[ -%떗RJ6%º[ص7#ufݑ<]Z["Yx4~+7TVQ*${ - -ŗr.R?NO"uP#Lvc(Mq:fMGd1L]EǽZn5# -B(a܈UcVpEm>̅inG3Mbعb`8 󍵑  'N5s?b8v6a: ^+gSnΞwHoZW`]]r?-KԔnlV ;-.gOr 2k{¢91.˂?-=dE>QB穯HZ9(?[dfxJz l\:23kNt4If\(p u,;ަjjSb>1!?k4Z-/s>B0DL?E!|" IĊ@~lp -J*!7$$J6DWڛ)+)BIʐz(0sPSIp7r`B]FW:Zҏ $x; P8:JR"KDzae!C' dHlONPMF*|9٘t¢+Q(ʝDeYu9j(б N9U:h} CX!von,?d+Ϗ+81O-q@!1Z"RZ&!4O"@$Bb7Sg  ӌ ;)֏@Py\9poʆ☫ :6zSX-^BG8;#' ` FƎ` zAfI].i_]Kbd5GXs8V:,HY30+}P`}HLmzrb}0_=ANϛy1y} k\>eW6 -, M9Y"uČ ϭ̊);8Z%/:C8`4D XPxTf+%rtǁD ď7DdзDk9>oVDFMзo+Tő#y:=saप  ѡE ]ki7L9[!6`n=ܗ1(q ܄ U9lZQ܍BS=TЬ I$ׅ$c>ua!0EԾbԏ Nqec/siJW `*UvpTë-Ec& MqXXM†R%*}]Ro,WRܛ2-p}МדZ==Snd)c ߒ~U;s!(I`  2J =\:$WJE:8)ttB3{장~j_ߵ> sPggngSMT,&<'{vgVkR|ϏTܻQ$x@l/g ,ܐߟ?)5ؗ< -Sls D%XF也FF0(Gqvix֫ ht -s%3aZ)Oۑy؅RS,Ο9*фi'7z,4/IQٝJF`ņ7n'L7u[lmf|Z8~9B?zxNZT.c&9$窭q> ~ - ~všP}L#hV67i6zu#b`xGlWYP=YlNIJܕTIDI`j?L,:;Ͳå,^ ۰cfK%0KLl BfDn|>ҴWfl,d?J,gp~ .\">΂Nendstream +/Length 3667 +/Filter /FlateDecode +>> +stream +xYoݿBX0X yhGNpN"-Rz_P7so>Fƒ?Ff$0Mݙ|^ܞ}]f^mUU˷7K߹zys ݏWo+߹z=#̏pn^ZWX)W!_g- +gfڞgbwЍT(ofS ^5J$=7MAُfPkĢ_5a[N($Lee.#Y/qq Z(7TzuW5C 7 + 0eM[ ë.WAܫ6|e:ئMC!{N^`D:ชc;𲋕Fgtͦm=s;,1 +4*n}^3PeO]} +X%Z,$$C#t; i'g2KO3^ ϻ|W:S +Jsgp4ywLmZl.ׄc[XG,@$ؘ$q^uw,2ti\#Km&(QNV]=|N5lnJr@G P [nMI8S +nKoDIJG AzKw2gIh\YU-­XoHKEu2g8z>N42@w"£"?cJ:D9"IAF]4 @zw]~12v7j`N -jv# g)S"nZ]%ҳSh(&B ĞҲbh<)vWZ@S&έLJX؏!Uq n$o y@gNy`|C0YqjKXƉ }i!~>hBQ&YO} s,/}@T +6-5*eUCFGcDTA)7u_L EkPYQhQ3Bc'u 'Oc7* nw& GWHQok;,DN/l" ̲Jh/wgxdXj*)ZБShmcGC(wm}Ҩ2m<./Zz $ZiM9uUkcD +dqjU :ަj(y}>W".`J3٢2 6KS˴۟^!\!X!HNޡ5Eqz/; +uG$CT&q͐#0sPp7C,A)M_B7S/(.!C.g`#'N]?f8ˮ8)6vAtE%|dDN`Cu} af (˂L + $!8ͦm +f`jf'f%BVCύ_8Oۼ+/w81^O q:,$CG-[p H +cu q3@NV/AG4cBNJw#:X;pۘ5X@q@EK}Yox +C*Trq^[(vfNcٛV46;·F1N*rF)Vs_J)"T8tc=1~>Sf9c zͽmODjFSHԤpE6,C檘GP "N +_s r=`?UQ^Wֹ?ZƗ\Ӥ2B7DJ(is+2H!2'aF9?i:B߼GP)GzUs |Ur;I%Ms*=CcC&qۆn44`tXtղ㒴v;lK\o,ɤߞw{҅mSɛ-ų*"sm&P)EC)D# [璎^蓴YЩ16N/{]Oz7T:>38@~o oKW~r.'`*[ZU.{Kᨮ #G3ul̃"lj6bP%뒪ic:y>pox>QgJ慫BNOZ: +N9nkL0|ǙLAd1f^Mzz=1K5s4`jz4&0*)pR)fT2_ O~8̞8HZ],{zK <6 +or esțU՟Vo(EvAbuq8B+Ã,cBwJnX=Zm4RrCwa-"4yp*7?_a +v>0=qV~ʂRa7eiU'*D piʡmSo|wc1{gRuVpv.l~zm:}^C"B&B~̦SnI&zNz8\n^+|wi&>v*a=g?cΩ0vX郰R'֤ y`ާ͔n>窟ojߏ{< +.Nd"BR œ +y3BJaZEZQxE'=d R,sPK?d(R .5e2Hl{y/Oj:#p_ +PXF{8&Hl lW۲L'+t1eྔ%DwMhTi'Ix' 4 )yqs8 oF|+/SY +`$K.G$i!v7#=vE<~#Ȥ!π!r3Bg(XQ1Wj'sp}endstream endobj 5011 0 obj << /Type /Page @@ -18880,33 +18789,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5019 0 obj << -/Length 4263 -/Filter /FlateDecode ->> -stream -x]s6ݿK% ~$m6Ӹoڛ3GKF"]_A{4voY|Yt.w'; b! ɗ$iOoubz?/^Efޛ囋)#?>L{]{%"r鏓_~OW@'yvm_ywD8ߞ|:.ߢS5r<@El -kt T:OW590'r#ߔ-0!IwMݱ 0DL;gf !Odv# a⭰YݟWPC6Sj]_l -Ewث:nKT<-4wBes8"媩@$z/Z$X&V5,}L nD7 :}94b?]qbpxw0T -yqbVQdS ~f:C-PPm+5eŤeh -)ji;Y;e[rǦYDvtK[̈́dD}̋b̺`E+-_0 a> ;,2rX/H$äN>pT72nWw}ĜQ҇%: ǁLݣP# @3H?x 8ty k"Q?GvE]Kn1:2-ž(! ӑHd{lX#e%3QYQFhߵRN뵌Bhu[`k}t]Բ##g:O"+4XS8,Ī#F>ݞJG 2"@\Z-(H;tظ+< - Hi -6-7¥FQ5;|`#1EĴ"8(D/iKf_GX'K潘c]jr4KX%R/@ާYE'[&;1+Lߡx9׾'.odkYmkly|~q-ܾ&2ts]ϭnJFbfW7ƂCvt4b"6f-3zݙf"N6j)V2 vUMYH,-yh.^̣-E9c^6-Qؒup=em*! ?[`o!~`k(wLـ ;lKL -rA ?т_U(`V; ˥``,+Z+z/]#^Б!aFB">etq]U8^QgK(N>R_eq.d92SuPؤ NG3*LLS ͭ *tQQvՊ=l{Ԟ #>Q0(]S:bsh;rȑG\5AT+AaN=>܉0\'EOq#| <ʹQZu}k VʒK "נ}cqP0mcfm7J/y -"y Ҵ_YS|ſW4G:6u}4s84|,dG@t@`?O!MggAts+x2,;}r Cea4}a: 4ڇ4u̔*99lẠ3+EW|q`|_sJfY'1 -,:#'O4Gws,g>:&DZ0Km Z -c~-z[?CBDqW鑫@: -{NԿhykR(K1 1FucBXټ8@%ͺYtFrщ85JـGɬv+k>zp(3WX=WQ?h|Cg8A7G۾![Ti?X$Qsiaf0HT|3,;pn.yu`)H6yw\=3!Lx*84ͬdzS h -rXܓ<^& bX+gcd:B ܱf `fqpvrTbfYEgAX(9wssQԥD -}{.-_M@lw{XiN#ݎ 0)-@K#GkS{GB~޵|k,rų?qK.j2BHVndƦDuW -b\2ck~-C|u_@k$HKV($q3@q,:#wD\t+toɳSG4uq&ܠ}#??,Vqv l8β{auzg|Y 󄎀N\󵉌[i;< @fprK37F͢3 L$LhGz(~Ɇ KKNg,[9މS>tgU|&@lʂ>A|"HT9}Kw{G5I/wK[OcFROA(O$`3kMZVDtqo/׺/h7Be単<蔳g oJGoFV2&kY煝qȅHߨ@3 S 9Xv uSo'&^u{ذqґ+[.5 z@Od]~#þ}U]^򧁻/A$Osx嶒tTXGe# ~ވ|:;/$ʝG^=ntPX_d;R'Nٷ:Cg4U"Zۆރ u;1~7Ó۬\š) _LFh?)T '׈U5s`ha6Z.{OU>Vm1|u -l /'YP(}[Vퟨ|`:љDeOj`$$?sendstream +/Length 3923 +/Filter /FlateDecode +>> +stream +xn6_%2a%%/۠q/E[`yF͌Jޯs#%y䤗`FgV:?NH,;^5MN0]F3''2Īfoۢƒ:K./q9q + +w\XY EOpwx8V&L]q7sX+i)pF:Rz-@Pl+l5ܳbвc4)j);Y2wXo-1Lm(][6}٭f2Lt3UY̨t[VTR8м-G BY[AG-W/(@rH6O}#sNvq$?,Ѝ*  Fd:\(З08@!БAǦ\/h^8IŸQ-.%p{BH)e\^aO'܊Cm  d,XCx_"wČPi˥" +-mMଖF 5xDf+B1i=O{wj-6{Xu~ m,! 7ޠdظ\ (V.pSx$y(4-?7Wҏ W; a Zl-[ܢG iKb<DExx2Rq<іO{- BiuL50?Gr&%g6"PLXޠ~9a ږ/ +϶$~kY]Ļ}P/b?` d}B$2b]ϥnJ'(`̮Zo*SJEb,ٸɿkVss,NzعnNaiY4*Ahd)̹_ †9A0#`@3e߲ΖdxW3AR-Ĭ24>q;-̍(QP) Xb*d0gE91|:jDYҿV!L(.twTz씍@j'n"rY1;D$EBI8c$kb۬JAETho *s +;o7e%2[/Q@0ۊ왷nR'K嶺I/fK1ZQ~X|d] B۾*;gJY8(TY, <_kƦ=ۋ8ZʉpQۆi-/l;B@jhgB@9C:Acc{å ABH#VAhZq8}{MӚm8Ggug FljHƭvQyQws[vi٬BpP8y]7\DiUn+k2iߞw` +S6W\&YEO#t7MtWNU +2#Į[q֩Y*RM;Jh$ud؀:WZeHGYt&ZBUGy*/%D](${P'ewr#e2gc}$[yw@m=t#OM..o +Sz~s#fiOIL5<$kt(εD\L.3t@nCRr.4͍vxWbٴtsZpo9)愝޻B ЋX&^6n(#h(8 y `(22#F"D![aQqtbj.J&WzpZj(^v;6 I@;؜ -)m\P3|O!pLٯ81Zhz-qg+,Z ;׍r5 B44t!|V`Z8JeDZr 9(o$)$1 Oad+$އߣ>k#Ft})(hGohpqՉ$oWBW`=|pM+ߍuGhL`c2n9I Tq6Ys%TR$ߒˤEX>1;$,SYpS8ʞ9;'*k"J2 +vf.Ŏd U9h,ekBE*9N /rCZ0 ЧI淚Z2K4Z#.yJvL!$6YKyL K'7))#bl]t3:PGNp1Iuwzqv$(gGB9ۚKb_-%0A$b,z~]vPE2K"8<[Cvl bF +:d' tڎ^ n|6>O0ޯ/o})BwjA3.3Eu̩+\iԱVZ1+s5ŪW10syXRC!xatHHT4% j(>]+y +*G'LyL0ˌx=~`^p2[:~X3ʃ}lBvg&QA3(5Js{:ESI'P.HL3G`F/Jar°m+WY:oSG({i3 AH^\Vj41rwHc`Щ1;ptbV5iendstream endobj 5018 0 obj << /Type /Page @@ -18980,24 +18884,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5040 0 obj << -/Length 3056 +/Length 3016 /Filter /FlateDecode >> stream -xڽks~cpƄ3 [vk+D@"j>Ӥȸ޾w fi ͒4eV#1 Uf3͖7;<"9[?X/^EދקW:qw7"-S-?\Z@B4}>Q -#,Xlo(?RR룫,*S3>uL(<"A2gI$H(bB۔|B kxKT L=ˇMV_aΕ0Tw=_ 8vu3d4AUx!/sx*eD!xwe 1 -8a?b{^ }Zu}uKԷ Y yHr$Y'svMhy*O*ȕ{0lEx  ==)R~Ue'q T2:vVc Fa]tU? -zmy6*/fy 3<An^!7Hw2}fȈ^4[Ԏ8Q^S --y9,;w|P+\kح5>>>0EaBz3br8%~c44@%SW#R;cT]WY\[ C8ס/u'sË鱚tnNhJdVt8fQ+ĎP>8JCEJ\ࡣ1NZ{@ _H5f 4 -v ]% ē;17jfELu$7PP w{ k=Y~@Zn_s 9a>N}hAo ;&K/T`Ό e2 =z >/d0!-rFo ^teaT:׋@!F&\$oc-NrXͲ!Q?Tt46'2Fڋ!&8VKu1 -)Ff}"[Ű \lojچ==4hoӪX;46c<&ILG6adҒXs%g\ ( HCY2TෂPR%~(,HjDSqNJ", ㌉݃h|fg-P8xbR7pdAD!ɦG=#dB\?:U傣+N! -1`'LV1n/MK; -ҢxڒsS.$qEm8[ΘV5!LqQ2Y9Ǜa|~zWeC~O8g] yQMc> !1Av]7 Y2a]?˒i_@ ixHdu)Hive~jYvBHKPvT6:[V6HsH -A2c -ӺomZ)B!gC;uOOuOd{Z_Ne&$a̴}wPE8~L#bycU6uD"udS+]W5 NL&7Oqqr5{I*|^ AQZھAU1/0Lz+x}II}96>EWل+\79f*Nf'̆4"LA[6$YE֕U?L0uXՔyصCP v@+^k%!Am8W~$)h&ѮgW` {׸s'`8\qؕ[|?d2 350h<d)tcaxmҕiZ&@NQj -%Ⱦm(2&HQ/)øϣL4” -2=#B঍ꪥ|}\ <@iEa;wY~W\?DQh4xnZ2hj4g5'X=J|`o SOڱִ8. t-Ov_N牻%/Rvm;|?t(@i":Ż+/i08׾\u_Tl pHF'JlS0=T2𾂤NJ ~>bysM6(T4 3~@.wY$?xMWa١2?-&`1Cz{F8endstream +xڽksܶ~EiǼ3 [vk+9NHX35:*NNG3X,}-2YD8^lvGbq +?yC,+N^j 7b}C(뗗˕bwyj9W/N_r.`xyf\yq]\ŵe,ǣ +P">| H2w KH 'KԂwt#pX+{̕*oE98N]Qh@M .JcgؗBz#97n)iϹgmti;`x OKx*_ }2Ե(r2J7z!b=#5q_2fBH1I%Ly--i$^)&7jpaX N;Bl]5)bz. 1O^񫇞+PhY~%0sN|tf{7_9' +' :φw[E#oA8KJ!j{S@9UNBʴd$O'T7XKKX-5=Z>C *ﺢ";#>Di1*2m;H=38vJQI s+NE+~2><.Yw,2 [>2|Þዑ8 x*5\3r(@a9ڷḆ3$*D,K3vAH'1^WjaypEMunp'דP<_?,Ld)޷<"Ǯ֔f#a5N~Fn䌺3݁P-=Q:3f҇Iwv_.0ktǤm'CL8I&[N &qPM\$i/FO 5ade8EZ Q{`bh'[ 5zePm؃31JSЎw0n c;Fv aJ0ܳ7w3yWۙ ʓp63:,ODҡ]0dЧt!S NdE .˧z|_Vddg'ad\?fG 2Wp?\ e(hV aH@xo> c歍MW9M%y 3' F@WDad "g|NbIVd 4f9`P'^Ϊ)'/ It15QiZЛVZ1 "_HrN[ɁޅWS5{ΔKgФփe">ǔ1P>L7&oG($21RHV=廡+5>-'^&Gl'|;\ds5 CPiFa9hK͑VI̧6xg)C3LI>go';^}=浚moPW Q8|Kߏ:+xç!J{˾rg0rL…x՛=/=E6Ps +M6{xvdv?82oah0惮Xc{t\RTQ؍7ت%-/`"Rb쁨 ~>v(PKȑ@{YO<]WD&j#J)4geM,QRWP@qMNuvh͜Gl/>VM/Xju䟸:^TY!Ĝ#'ēA8稠z:SkIZpFe)*^gJKQB +%W9VT!O\}6:[yֺ5muJբi1 mA +kcM25ij+,, +G>/e"mʂ +P;ם!(B2jgL]ʡ{.79yM~OfLЭaȓ##l%mr[ݴBjnI[Md|E>{>46uC`x@rxk$+#{:>1I9 + ma0w3ĥp{g Ei?`9M;C~8A +g P~fBi}mm-c:-o[ ')c |d<7zvq DDR?Cg75n2M{42+ǝ 8Ѕid 8M$R&IQc&Kn5#Bi_ݾԻ((A5aR31b@qKw2 lgA?8⧯{%osK)/]\xN5"0'yГC63l|7Ɵr$a ȝM7k~Έ&Ս=Jw Wo =cC{;JtAos- +_Dk4K+Cnw͗rpg}?\( WK /BW[endstream endobj 5039 0 obj << /Type /Page @@ -19021,15 +18921,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5045 0 obj << -/Length 828 +/Length 817 /Filter /FlateDecode >> stream -xW[o0~ϯ:MMƵ8H{]:ڇ41)u! %6U@cw>HTJĎjS0+PpGFibliRt>0iݳ`xrc QMEՑ _^C@ZQ kCfx +XUB+vzeW -u*Yj` -ś`RK ZKtD{1kKqtHSȘ߈"U!!Q aY8YJ^9#^ ጅnY6)Æ0*5$p-g'  :.iMEHn{#?۴U 6K❌|? -YRȥ|1WWҌ{ϙs%x& |8qMP|d-pDP]#l=tѺWr? gE&lKg4ǬAqyQLXK&OsUMxF7v껛"5$F{ϙԽǶȎO;8><UtE9u8)y0> ;2hlk ->K䭼ؚ(}۳rxgZ5UC<bO7mm!v&՘$iixR-&1?$`bb!]kB*ek,/c^U8I$ 2p%:65 BZ5ɃVOSp'bAja-WΉ4]O2[IuCGS]9ַ4VXDZn/xendstream +xWO0_1M$1vl'N=u){)<-%XϮ T|mBR5>~wSHtFĞ20czjP +G P':TFCt=}4Y;G16t}~=,b ?2J^ʜ _$dc`Ԁ`@,1|Pc 1Z SP (>|ڊ]iDj<0F!c~iQ EO]EIW n!e + ̰jeiS*+ +u+e$ !8%/xAv!u)^!6BR ͩ眦UUA=fSڮ( .EWbI̳Jm置;jobB}ÂׂVmә +^:5b +HIPKS<4_ͫj-gٞՒNy-y5 +R%F[ԭǖO;ܗ[ +!/&ʅ>1۬ڬW%V>lm)}۽{s,Q25ai`ڮ׸4-\q"nEkC9L/.7rBظWVuU9em+ dmk: 6eQS7Ll@$*;p=)rSp-QJw/!* H}.#_ꦁn@&ߏvendstream endobj 5044 0 obj << /Type /Page @@ -19046,27 +18949,33 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5049 0 obj << -/Length 3504 -/Filter /FlateDecode ->> -stream -xڥr6_5cAN4&YLF,n)R!)_\)yg:G,b*?,I/t^BhFY88]\G3Y:ʏݭ~BJԟ/$ri.O7oȻǛwnSݝ=ᙾ^G0[|'_Hvuv)fN 9L9׷E hsc?l)?@ANb7&V*A4U'*ue(Cq ŚV‰\-5(_o HFim' {@Ouӎ~iɾCBF<'8ְ$$/}om6N1v_;<)!؄q<6šPUY\7,5_%s^sT?m(qb)uޛb˗ @X|f fAzg7Ԍ7xw=2jr͋8j%hAQ -W v*;'6=`xmun14Ve]Np6*FAktXwÜ{2U]mڃLOB'TXs:c&}ޚI9aР8kw)Zm/iV0^?PHFA@ĥ_#~L j B{ /w@<_s1kbϴ=5+$ -pC\  ;EUL5!{ޖ;v[=S) 5n^:Nn_rzbWhZaJaӝ-q>՟ N{!֥:|IR9+Faix,[T@,1: -eO3uM\9Ę.2RBc?җ}7ߦLė;Q\Hn@f{Hp?@ -l{[Kop_ SJ{lyb-LMз -510kUb[EޓmM0ubuY6A8 ]3kK-B`SۘzYuMaq̫epz7w^ae-z=~ niduNgW CK҅-C~ui&[æOt测m)%?]?_" -R$T(0CaZkGendstream +/Length 3313 +/Filter /FlateDecode +>> +stream +xZ[6~_a c(nv&@Ŗʒ#s_BR[, 0:")\?ZL"T&T2M'E4/&*]-/~HDDaeX_W],_ΤHl>OW?/OEgR ~DpGG77oo`9}륷 +U"q .~=a?]DQ(lPZZI^]ԄGt$@(LS,Ȗ_wыL)amYO4苖~T5},O8Dw[{TZCz =͡Zs6G&ˉc?NgBjfʮ5+P(HG8fΟ>/0ҐUa;UfV  +/HBFX ҙxyN +VN<F;]ѯ+8~*BP';A]^tf39?RwX +#F/$.a: + +i?1R'.IKp8-4c-|$+5Ym~#Ey5 BV>͆UlM̴|.l`b[T{76EIʹ**9Ry"k`K'L\Nf: 5 +,a8C3 e!PRu,4̃x`X@ܒLTFa0#Cn$w$bT=Ps/Gоㆼ{K1F-?]]:8ICe]} WMS{jiʚg57D &p[pdn+ "9}y]xj[TWp85ta uK8qo%@G !`sLܜ!l-v <%$,nn6AvY_mC׾y9edBEa`cLe~:6O'.9faNM㘣KSA͚C q,1 +~fulې#UOY<#/@*Ʒ`d}} Bx/4 Sesa=Oi-۩K2G}!(&h;k-dq_V#n aFTв4֎= ,]YZi,.#QJ }"\gQÔe?GԡBy%#K0=p\!Gd'4R9.#?|~߿qD:$.W#$R* ꢇdSe;`YIUI*bSh D \R8`3 H},mtx,"8;p9 +9^r|AF8=v#W<+SOB$Ӫ4(C};^sV tP >XuZRդƐ\"~y_*>DP)X[p]8-GHc(f|J\SRc\BJ@G1U3XvgJl\ՠ*0l'ONIW& tp\þ 1zv}1`2#?2 +*|z9ɗN+s;}; n%7r/&$xmc,Av,#A2Zn =*nߺ?3z~Gx)NT0mlQUwɖ{psx&9:Me0s +3|> endobj 5055 0 obj << -/Length 3652 +/Length 3600 /Filter /FlateDecode >> stream -xڥks6N&&iI}&F$)RGRQ_dqž::y+Wb{杯a3%s`;>4s/9[xny7Q;GQ%6F`zw~ -Rp~8Ŭ<02[QfR\ +md_ce4c:8>H"_=NJTr xK軬z6}iug)WJ|/|Wp΢*lUD[31y\MZgKYSE~C?<lܐp"Q_y>̀8G @́y(Ct"i y#\w<Ǽ7_̀,N;5 h@K>NKc[uwFAx0z<X/ăn(dx0%>l-RKFݵ<2j] Wc9L&u,y.iF(v=hVn_"[|5]?'L61 #[2q$Y8 ڌU<&3" *Q)}ߖdN0혺4)_VUkzμ m0GqejV - 0 /yZOb(.mo +B*5J+7mq4&%BBRN ri1crL0d'D Dw߇nٓo+ ՟_BfTv4;5ʌ, R,6: -8x +xrF]_n` a0N$vgL$J @o_le%c0{{=trq|؞ykXL wn\/ pۻBs<7-9{f6Z;*vg(?_Δs{g\2 ~}7+ 0kX;ww?07 5w%$>?sUoLhy/na5s_Mp:7~ ƱQA^'5%?<3&R0Ld UJ H Bgl4-')$իoPQۗoSQE=kl6.E5 2fL%]?+0 ߩZF3~= +uq4e |DT{| U*B']VU=lc4:3S|%[m+8gQehlx<&%묩"ce!F6nHf8Bɨ͋ϼ\f@CZ؅jD@ޢA1,Y &@i;du8A`@E986ے 2 |Sw\|s ˪*-b_ϙ70-FeȾP-*CPf%O p1 eA:٥M-D}AOyv!1`R""r4˥4E'I'L`RR]1A&`#* GBfTys4;5ʌ, ,6:t8Hw -&!$q-:0BuPA+L*F>mE<8QƺþV4v3hU{A2iTKq#+ _ra@QTmDS8sNb!PbFRE&Hp- (E~S(?kX BP $|̌3&0SIL[DIԎD}'Q_dk6.8@M1Lc,NnGK+c' O -A˞0CW#x1$H% -AX9yTGr[5<9pHAd,\#8U䥌0.O\@Qr'$mZ Z q䣼$W۪VgOP[mیxs$Lqk4M54hoLCPY~![ºdxC֜}$Ѡ눨y:BE= E#mG+ !a]"TlYSԱ9)f+κu($9,bvڣ3ҦNė^ݧ`.f5U_ԙ syv ; $DWss*7(jD88Ln=`(P -46ڣ?d@tPyE9a51,C=Dh2`-GADp?wq=S -܂]W2tRk )VtX%'&h8ȂǚET7a;""E ]au Yۋ|" BsaxD切p +kQ7 . +B֣ct5 #lo__z91Vnfq \#`¿`Y],Ug~:u0,6?fX<|HIsާabN?'aBl8 -bޖfj>ƔQ@0-S"x?2ݑLN'l6SITEԸxl|=O !Pk~F*]$]O=r,rS@3qrzC &t}O$<+xjuܐ&/da+_gv,1%?ZѠnӺ~l֒&uEi8ƿ F\x$TѤǴ3pevЗLw< U8? -Γ bD} -x1eÖWBf_By 뛂.lq:h;aaG߷__ۉ6'XV2 /z@ <&pc}-]US ;/!YRL-/aa@ :bGqbUݷ 8XƗ]]Qgp&vi'\"$@h2y -big܋@ |L. t,lOys1اns+=lO; -(NmO,p݅i_/jmǁIjۊ1py46?{kO[pu:[51`H;C -G[`fWSyŴ.Pbqā*ٓpgUzA&Y㴴WSc@F,#L]&Iv ] du)`WMǧY8sTeFs~-OA&8%TlތȦFT[| -sSg{luM00PK2N/Mj/ 0Tw}u|UScT`=4KO\C[ -`_tS2îxH.Y2 y+8W%1;~BC ,78<Nb0@ڼ1'n}DܤƢSi9+W8G[^ˢ4mU^d/rCv?SW*_}?fow7#C|?j~}75dNt1}--J t>%-Bendstream +&!$q-:0BuPA+<+F>mE<ǙƺV4v3hU{AniTK+ _ra@QTmDS8sNb!PbFRE&Hp- (E~S(?kX BP |̌3&0GSyL[ۼGԎD}'Q,%_q!iYg`?pr7[o }bsŧu(,ΚBI6[q5C&a밃6dpz >hs9e-5K`˳;`!U$S&t0u3vcIaa8"L$JfhTYɦ= IV+? s#Gy2Ȳ7"A WH҉!&}d{d؁uh+9( Sޭs J<;pȂBĚeT7a;""EqkYa ً|"  saxD(P&`яJʖ G.x oI$|_" J 1IW +r<~w9K(wBsEG\ą$!W?Y먻X0ثO1^uZaU%>nTrd0fK!̹NI 6'qxHQL/lӇ *]xI"{[S OG]~DlH"x?2ဟLN'lRIREԸx}L}=O !Pk~F*eGĮZb9 Oک +ɱ +}c'JFU<ڼ#緮2'U[C_Y XhR~r`ڱǔHCĆ%sjRG +LVKPԕshqG:RPbC~ra= Sa{Λ>v- +XQa;a(JNUmO,pň}ONK 5Ѷ$UmWdI I^]Nͻfk;F[<Ɩi'cj1AIhsl7j*EJN8Z5{nu @/h$cFj* HEy$c>Ѯe(CN`n>>M|Զ™zJ4%K) +())qg{6o0F6-ДؤP P$*?+`k|`m\ꐉmZg^nR{`fwF +nKd 1^w~FyEN;L>]A>?j81%г\|TvA*d+|9$ƹqڂ`_Tw~3̷|!m5Fd1\@+ +N]ׂ1'nآ]Ë}R7Hq<&jD޼j&GS+h.}1% k~Z_W6(>oܯ$[fsLf|~.Ż> endobj 5060 0 obj << -/Length 942 +/Length 932 /Filter /FlateDecode >> stream -xڽX[s8~W0}3 7;vg<0 ;N^ms$s]!)R;YʖK tާֻg#"??>|bŵ'釫Kq37 /r֋xTMb\,VZ_|M?Uی'ݤPR }/elY=2Kkmut<[[M'vH~ V3Q0mxc߹i|* JF?4PQ>*EYިLHZ.RWD- k҉`Qd-; h"7HVsPd@C50fM+q@F>W#q&*e~C@dM\͛w,7.@0bd/>ԳZf^_usnC]L+ۗ >~Gq4^S' -Ʉp/[)>1Wn0x -r'XjB*W(T#aCbݤ~20Z&I\U:k穽K)vvTھh[-\msn d {2MUu~k hv0}"}hC>:ݓo両$:^<\>S endstream +xڽXKo8W=C*7WiSW Ȕ*IKr:a0b 9o ?dS@!EPj{ [ɹ mWcFvEƉ?͓%8ԉ 9E<_*$yX39եW2_ośQ⤳\p=Dݺv!ݼ % "{oy>GvihgkH]z āDp_3X2Ɔ fP4SUAb5! +eW&1zcqm~/(SaڗMv(;ygݏD|@jD-w#JS>*eM+qDlFǙ!t;525oXG3_(v Vȓ$v1Sq]r:]~,-x)q%6|.O_l8Zm/*=K,?Ո"odu|Vgu|V7wI]'\Llٖ ]#M],J}(tg:lyk ]/4o|ȓɄ|$Oþݭ"KCδ$e/>.2U鎂K1604{&m0Q˄r`'WrվΔ[L!tВC)/]ce۞4VS5WQ\OI%@4U-fI pHI B@Wbi_V!!!* :@O#endstream endobj 5059 0 obj << /Type /Page @@ -19165,15 +19073,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5065 0 obj << -/Length 1317 +/Length 1305 /Filter /FlateDecode >> stream -xڭWmF_ᦩ Eս󩕒| HRwfg`ZלegyÇ P.p+F.As1] Nߏ!gnnw=_gka2_)ŕk;㱲[7U5ja;ܚ]]1EVR0_0?+5|grP{!Yk/+ywzHF Q^ɥgTǙ;(;^+j>nb 櫐t?=ך@zH9{0Qd(cνkhhǐ + rNH@@M:Ef6AA[l\8S|Y Lh֣@>IH졦Sm ]uHgSadmeVkVhe3c8,Gm 3 zM{@?Пxn0TM +#nf2^msTms`u3|a oEvVVFbޠxM~% }P c/a,7yV"?vwnb@#I~‡Y?VYendstream endobj 5064 0 obj << /Type /Page @@ -19190,20 +19098,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5069 0 obj << -/Length 3589 +/Length 3442 /Filter /FlateDecode >> stream -xڥko/G'P8Nr!ɹ;HIsB;Aܵն/[y*isھ;,QG@ A K:fsUy<4P: 2gHWX[ï̛|w ^UޗG!d_\/Xkag 04 Aw0&`'oi 3Q|>9ZKcYW:P8`5\݃nbAqddͯEoE\"~ T)j$zΙ c9l0ۡXhrAȨT4* -H27bXGJqtQԥE2 O2dz=r#KZfOeB}8|crcC>YK)zHPkX 2We1POgW{1H%;Jv'"Rg.Ŕd TÃ6= ߖ@FHl  @B-#Xz'ȩzJ6%jy\u-pO\2/y>9d8GSWWg>[ q'/VcUgSs:?!֊.sGt윱ZA LmAW죗oZfOhiƄ,|H}⑉ꈄ8a9<&FEVe'0:qѢDsr02v GA 6D cȶy0Ly-+)Bjw2'+خ.+6ZrH:n99kYPȧ8ߎW<ফm'0|d5jqbs -}vȋ3]R*΃ړZrc> ԢI])$)#֢ dJ (p<`|969$E??U]W3qLMGjA"s@GN6#AG9 g$s~p% '3zN:Ng48#nc.A,Fl6̂ k~eE~L)u(W -Kpހ fa'̬$C.՘7Yk1,)NX -KnUMnW5+{W"*+ؐ8Cg,@jT5Sծ1:{k3,dz޴Zqv4ˆ0K\ȋa@9]܅I *0I)X&>vhiJB K8' -N H)aLyD0g3Ϝ;yCC]pC?OV(b'E4@#rBrR)3y[s ⢃\j#Pf\93biZb#YNrKnePy1ݯT_08i~ tU ~bҌ:Y`WGԶ'2:1Ed0.S^ yLw4X` b?Dlc? زcƼ3>`(=}97".NƮe#VT*ųKQ:4ZBo/ɾ,HEt}S͐nn"F'ɵ~"/rqV-g1\,a522Gw[V1:,т)N%~>pN7c0/͘/k*`7'i-z@j=Vnd\lT(l 5:^'Y ~+9Qo(ZenF{ٵGmCx,”j`` GE]quSſKSA*LS8Yt5"ۂ`G=.eTzQHg+H `ߨ`jXJpDFZ5n Gi Z$:=cx[N=)+/;28g$8ԙݴ6Ӱٸ2pUOu.:߽Pf~;J=fN)1^fJ /rٹxc=5)\=i xmE}mwe{%ꌒBjhCAcǗއ4gA7#mҙVR/\'Kd:M;QrT<# L+TpCx98Cz#c9endstream +xZYs~ׯPbʄp !%\keM Z\EkCҺ◤AOcax/<ϕy~YpB?Hv}wwv:M/nE,w/ޫ]~6 s6ϲ{vzׯ`Wwwy]7cnOg?9K'~ƸOg̟?.Gh~X۳DžJbyonnG䜿p/"5e~"PJ}!P+CæRRw [NSOJldMWYz,n菅0*Ƴ +Y}wE|wwA/ ˚E70:Ư|{$l/ZxHo6W 9l'% hDe Enh>P[B<ǂv;{Yr*oHcekWWiDfono@Qq*L_O*Ȍ~%4,Qqꇢ^5 ||6@ԍ!Lx,GrĮTԪ +~ +p`U(WG*Z'FkV]rP(V ("6K/<= -룏3oR.yu7('g(G/`ȨtU[+g{W{L;(NȽ3:3c2nU`(O<27}OG, + 杬7Z',֒p-ڲ2ӠD5?x˒@c$>ҝ6X!@n), 'O2pսg] ?1ך)}+ڶfvVwD~)ML/Կ4u7|yb,ޢ`PrDDzFAu/𛎅fUSߓ|Z?pvXԻm=!q%LVt8GP[=ԭD˦-'6ьr4Ge|"(%I$u ;C왲knL))3Nqpj\F});i.0J.#1!J;ʫcRmrw-/ͪPM G 6 ) ,s5ƽ$l`e*JqqCq|MN+60~]vxL)nYִ8 FZ1>`8w˟8c2!7z`{]<͚,3?N#(@ܪb 98fyGgŋH#-% p)l{&6zlE}e%h~|xwnI +yTNܬ¹LhXUY.L&d {=|t /SJ7fP!)%\\ZU2#;zQ`\}=>98 8v蔱[ TS 7ݗ56(,+H וSeϢp%aryETn*T[( =m<xX6҉މym|.1,Mu*@"6da?t5#zM ]AFLEq7E @hwTh3kFP)5.h}SF5-%%+Y6.`Aa**uNy8GB0@U#S|kkء( C0V9Q sA,AlvHB1Cx?4$ZHCd%J-=mCiƉE>si}BN)UػBjӊRky%\\Q~{;˴ifUd31{eSVe31w \ISeNecVi#(]PQ9ӉbHp@S{M!TZmڇϕ'V0mi?HDdMza6}z9zdbJZ>0^LZ#mXF4m.sr ,|HXɾX> endobj 5079 0 obj << -/Length 3465 +/Length 3252 /Filter /FlateDecode >> stream -xڥZYs6~ׯPSaxU[ckqyy9&9R_}[[.yp4ЍFC$?rp.+k!Y4\S\:~'пYn7o>־[nbqXVuws}n>lVk׺G[%YF)ߝ±4|cн0^]]KO}%SXzy5EDV!u=w8t HO#,c]E֗h"۶JlJjGU]m[R< j@ͮXԷ {@9 -ugmIj^Xqywh}tԞh^H!ۮcFXbRW3jj!瑽#Q5w(̖zeC͂.Z+?N=E ś=!2fv-=eU'Jd(vsSt??pd{W,1i^v=+З~x߈|- nZ$hY"]щn״k(0bXvܘSl-}L>bcb1_8D-h3H)g-Ͷa튩>A{- 2熛?qɁgedjj2 -^]>Z.P>sBYw= %J!ڴsŮA쯢ȱQW+rq|͞o#~N0c/8/@"? )©abc'2)x[UܖqϾfLJGwY%>Sؠ]v,{ˌ 4c|Jm6Q9Bt -Y]v{v. S!M)375j?H0,}uLɠw3KDV3=Z!|=p -d97\a'A^э/ c1DGA:1S:X%F#hCF͏H*ἝYӮR@ߒ:=ر4k:T`w,P!cCY4SBSWjF'2 EVe"dH"LO?(}MTqh1<֪TЏ:M<Whzt^ǔtX ,lD3UGv/p :B!E*7 ~EގPқ?q`kF[PqM\k#wN}uX[cQ7 ]Q3eG$=8a \UvpD-a RdcN,uG"T^GQFt\aEN3u-TN:D* O GO=WB'Y@/  ncn:anFmL֬(^-%yNiJF o.<3k%q=B3l444iiVDBڥ?81_LVu0gC|ꤖ 977\Ž: }'28C2XWϣ@G;)[( $[-bʪQ~2L=q$N؋殺KYmǴLLJl{\HʥNe'N2}yݞ`Ugq:ea DtV5X֛$H~m  )\i -if&6#Ӻy93C HrH #m5 lgzggg84z]Xdxgl/ĭ o`AׯrE  2 (&Vkw: jܗ)T!x ЗIX gn94`jsy|`l22n$u}zZ&tXH\x,`a3ccMj/0IKc{B&O܁o'! UP0uN{.\{oendstream +xZs6BO\/7>7Mܦ/V'7D-N)R!()'wN;1Xb E^/w,[lz^]B-"Kboh{n?9W/o//Wa:~.Wi9Wo.os{}u"߮+߹~ǛwطBgyUFI<|go60P\?(8 +^]^}тGte(V~Ac&5%5m> 6~dӚG)'83{ؘ9 ,*&7)Q: ttW/ixUE dbF;{~T%/ʴEX/p[. 9PW#rU m(luQY@ef +e;!:KwC[ s8={}7 /4M&2hx@xBL-KCQO0a IDd2 kU=q&4;S.Ώv98lV~:mNj=QEIM|^ߠ^d{#pKC;n]h34堄OT&% ƆLZѺZb9+oUuݑn07mɀ3x.@T㗯 A0 +"(1S:`.Kj [n~@Z^uDjfϏr^yCℂU0 f#i;ݓtC+eGиe ָ6 ++233ΦIȫvlY9]ދJ㶨NK7*,^ө#E

q Í18,=x.ӭ^~FRA(2 :ENPOn!4ؚI$#ς׬>0npQ\,D)C`L^MMV#r Euɜ2Bj8vicѼcWA'cm,'ixd#yd0P3D;.qQ^!r +Ki2Ƒۢz!Jiy5JLFZ!\ED&%( &mlImA7]QD-v$1CԘ¾pm9s$\L&6E!k>qEwAs aF&4 ]c=Z?28H ~5}B2-ڀi;TeWo ;Gy{Qb[2Ӟw3%ۑ?qޙeo9Y+F}ʸ_CQ6|(pEGq<e-b 1J7f"m0j^dh篚\cDZs.7uC]E6,%:rZ1I>4XG7+z&f{ry$+QF1Cq39ƕ%jklM>V 47 y5S&N'e銳Q/5*%dE< Dp`j/%m8S&fVGg C'5lsأ26#:ɱq}I]fUBj92DŽ}8H$: `Ѧ:n= ~Q[&lzhy# ޖppm'wdz.ay<HbUiw1KLк_vubQ o$n ԯYTza=R%ƺyv_jGNBiZX?ض%')  *Ċ362ZmջУ7eVZ&8.SIbI9~|+Irt#I8Xex8(73cDq_\6`8)U5&jQMuw"6k|~ǹjl9ye5BlȄ$`.yOGLP^*l5|z G?9JýwQt+Lu3y$8A@%cLe:>idf:KW ?3Kd~qlۢ9onf< [24 /RbNBlo/뇲m}QϽ؃ɢO/I2/lIb@(P!̫xJ0J_~l:10 BC?F*ĄN[Hxy'2^ e|Di[M.oy:kn +!{< +{h D,81 +$˽l1]X 0Cc6[ XD.SC~ Aӛ#Wz]=tP *)b%]~Bј|P5Ogc7ڷbgQH@Ҝqh!gԢ(TNawr5:oCv\Ɨg0U蹋4tc2 mE?BuOŲ7 ,ޮgX#%hu7}Í#>Y> endobj 5089 0 obj << -/Length 3839 -/Filter /FlateDecode ->> -stream -xڥkoF/GPiqK}ޡZ-"TkD)}{S$t=.D:I텷x.@d5QPzq'tP/ߜooeZ;*q8Noʹy}ܼ_sG?2/dY@B4}o?^xN3=Wr@K݊cXM<"la6pu!]Ezn'`R0HkdBy_jyVN'o۲A:z[Y{F @[Tٺ/aL׾<b -Gb%RB{)+?ǦK/kh>?𫜟jKȟhv:ie-\aqf7zO摿] /;FX - y.&^0&C󪰌EJə<[,j껯p1(Xt2G%n{IJx{ Epj$E%ƟKaY-~"VvvsAWyl.er:p8ޡ0tcP,Ep}_FgW#p9==w_]]uݮi{w[ۦk{wl1Wut2z\VITY)" GjHŤF*A87=ɬMbo9ز2~$x0[Eh ڧ*#]!n|äȋ6.*5ۨ~hYkvXk4LЃ(0 4_41gd[k' e9Ձ;ۢ4dCrP3'5jX[ 3]U# 30~ԩo`AdXgf'FDyfxP帬Dvڇilۆ@zf0FJ`yvDSE.5߲\r2 GL;:P:; ͜EUi-񮳇`EKIPX/1 Hm:_ڑDwXL}KTzAHC:J;W78 WHKxj_x73̺FRɹ\1ѻH %~LGE?U#Qr0`΁4;pm@Y r^\d̈́9I/> -F#*[H|ζjDNɑH BcGbY{4uqYm4?\9p#t,qHrg~f(F.?IFݻ<^tܐ -s<μ0h&`f8-SAq'` e>O쑏kFv|~Iwy)\ θퟞxKyl -(qd ]g22ܖOe1 4fg,gjCnW$^1I>o22CҜr80x-T)[,+ 5YlX|=)'b;l کtpSImqχ1Kt@1,āQZPC@ȎㄪA-q$#kXvu v4Zhhi&U^KC+_m~ABhqXnng$OQD _|`]ƛϡuUi|)|J~"76A6G?^&aT9la@V6%gD!:,AaClSԍh-/Vf`5>&5Iq\eSX3ab#d~ZE& 8cdѩHQp}:D^i=:}pD'O,>sC|gA\f')ā}I)F@g8 @ārg -DG<|i S[-YE3  b1Gy|s_rvXUNl^pfȲkN僐CAWa&[4qmTSRʐrIRIC? YɬS;MVhb)wbEb-9~rg+Tܜ3fAʘsu7Vqpx"3*8)&@'MmR֎ dX%Fȭ9GQBy_F?#>Ff;#ysGgq.$^SPd5=%18kZ>#[ lՐP$%Ms/0F$W*b< |,v zYoCEB,+̑}jN L7hizO9A!*K -Y'ȻR o1L=ͳl A3GTgJBj|x\> <9Ql_sʜ gL૚ItarŌNs#|s.fϺQgHgmJ1?CM),Ph~8xiW_N>ϼ61i>B@sJN!lIXqķ7ʷ`M \ - ?%$f:0Gk%({OI !YyDq cN =_p ÅNɿ6+1?:2nmg_ 4&`sjPģy@R 6EIH) 0%\0'?MZ9~ˏR)̅/獁v4S^߷.c -VBA6/x }>?2SGԹ]ࠌ>]^+t`=0$8"zBi^Ja%_%Fz=:YiM\6p.MO_lqÍaNHNxt:Qf -}~ʴoxSuK@t5endstream +/Length 3649 +/Filter /FlateDecode +>> +stream +xYoFݿR@Ds8"%HfHJt&@8㻏::OBy(W'jwo`3%yzQSܝ]# +Ε^z~&W˫,ZkG%bljB9/^T@R9ׯgxy{s3--~컻D߽Ù494=ߝv@K:=݅s^5@,U~8Ǯk%shLR@0H+8(r^csfӾɛEG +l{QPVs0z!Nn5V} [QxibO`o1W8mO}gTzÅy|CkMI+kr62p#otđ5f'[^|`) Gs {} /W%GJB|){ǭUU5Ns\ ZȤ8bl:I\^-B8A5^J;,KS,6ssONkeGlbw]E\FeqTo^KV@i0Ϩx= m_^vi{wWڦkֽjvyUfݪ^.AT*/<C7Ls&L= RzA\lʲ3~Y2~"<0A7eY#"F Dz}p^dtpQѯPE PFEKN1@a.̐?4FB# x0`6i(= S-Vً"Q`^gN6hBw?wH=>NXc5ώie+v7ؼ!^$!3 xG|#. ,r:H_.%CbB߂Ƽ64"۱Ԟ &[|`,>*~!"@J́l$3'^gG^x jh.xJ8jhv[k~0G +\a+ρ#J'9@Y r݆=.fI/> +F~@#WUv=:1 pLL5XX8+…ݣG^e-ѬSw T+3t3} PDvsy8%{ 涹gydЎ`f8-SA8h͆pVaqŇc/ױ|45wf[r`m\W@᳈s&28KؐƐ1lGeDg0PO9 tE>ݾ"SIc$}feCҜrv8<2x-T)[,+AjذbzS1bY6 T:uh8$v}̘P$@:1,ā=Yg#;vF'YEK^Ѯs6סNF m05dki7}:;>-鋕 Y~F%ϼ \ ~jcGxY9* 傯U):Lfu1tfBr,8t @nā!IA$a@9Z%=SȘh$$/c'&j5ń>D\)`}7N)!WH+}G_#$(Q4䱟I?Ǥq=iY_蔧dy>\qӄݑ>QJY  y64.RC1eF:t#7 090Z2YlL6NØ_˔MnzjO(.+L$?ڟCb\1nEφRIedF 9X>H2`%ۍrВ>6֒J2r%$z+IrIV;%Po) +zd7O>y[9m K $[V{*dI| =Ĩ*/jߩfP1v[sy x?X,hv@;o>2 s%#CD:Mur[u͡9I#/T^axRgⴥY54 +öԏ +ZC J$7 +Nm$C Ǥ $"Fѕf %pkF#C;'W\v1$|?}b΋ĭTq#, B5 gwca'9U+x ^scĈ,xxh[A//f5ȣH H)[[uTr9<(d8sM [I1};~ũ>tl"XTx,_ϟ!<#Ip=plh +dBOٍ9n3ёHA#rg'ht-Հm(J$V&:Z6m>{@ l5ɔt0z0X]27 =Jd>GXL=yExxbS)Hd\^AFIdgȃX/ ĹhOW%pk +0X)FiMG + 6b# ADoٗ0$,U>:nusġ"k!{je E9 ΢,17ѧ[⩿Q~j S!y[h|s?byX~ +myT$Qi,8'{CxrG[[k:!W0k&>3yU3~|zc$/1-͟!Ş )X\ț}268Ckp F"I J+$}fO!. qVh7I?};>[r`f^{8ni_#&y(7u,u.$;&J+"Bita՝3J? &Fz[=ADD9Dz9 ٖ‰_]س"7lj/=NKhvTو!E LaY=I֦1AďV2bT\KO;Qȣ endstream endobj 5088 0 obj << /Type /Page @@ -19369,20 +19274,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5095 0 obj << -/Length 3827 +/Length 3669 /Filter /FlateDecode >> stream -xڥZmo6_ Z۽hnöKqt-W7ɿyflIC"䐜g=ϳ<|7̲;_QgR,d1wIt{n7w8Myo\a{Hy۟9˅\^A/hBϾl 5oΈ)7B}_}8Jڢs5qqNG{y{nE v^S)ۚ>[nw uePM,$͝v0՟{"۪$2?s -yإ-x@E/m&?uMX)]_B0;vksHZn }%'=F\7E h3lǺ .ڲED˶Hbw³ /m eY2b #aG^XRs.ʼlv s?ZBH{G[%tY1usDO3 8Vޙ->H$0diHUYA,=%_jz4Ģ_w: j֌dȪquXmХ1)xd"}+uHmހ<7sVTvRCh/[l9γ-MTr8]5N哞j'ϱl3U^}ɦXˠrV}ݩhcf|H,FD27I;lNf #_PHx?j`+X(qv{!6DQ'],JF#ɆꬰYۯuzsQ`ա}!!_Vnz,#{)wܓGGO/_9腣S׎ 7{tptA>QMh+UFjdu򧺉N[WoțWT %bb&kj+IM Z8΃PGx`w! 8$%@NҗyhNQqY0Dӽ.NFiNCTAv8~4|Ih _B-[8u[L:F_w_(6CxTFj 3ՓX,.:[V/VAKh rDS3l~FdBj -!8H-Y-nfj5((C݉OBu=CT -:b;(dq4cp\qThZ&Pt{m;~SOuz5sS3c텶lʪqHS9֫~`d;yfW7_k5jVʪgsܐP2M3l˂R]}p{uXnҡGtTJݔ@¡ @9TGz/ls!q1o'[ .SbD"Lr 04 {{l^Ь[65:h,o;鬒8KP uxY잻M8uKlu߿{f?(ogqDǬ5TxdYgYa ˆ`3ɌU@RCdaMm[uI&017 1"^S'*ZKVRET{"T%DG ^O$F;JJjE3GϡA;Lc }Zk(?fX|G0 &k(0#lFQa8CŊ8 hrfOGQÞ!Mu;AK3h=N6J >l:l,s()?K -ҎAIB#mPYVcydEQ&' o>wTv9\:aKq"BD+!tǎB7kT0,<=g t!_Kɏs7): a/#ԮvQC*rzNXgM"۴#Hb;^3˜uUt btS؉>;`Jt1a bs`j~H#0~E#2â (wr۫b;6 1Jy:$vVŪho}| շK6x/ںIo=qd=S$kGDdjv2\v<= 0#kkVT>K {R;43qb. '5J0kk?s&w1y:a|O 8Dϙ_THTLɗ. # φ%ck 娝 pOYםE*[d18)\Oo~T2qs&abǑ>-@ZLTkI!U^?[ݬAy;.-P1Na T9t-GBu s[C3餻/9P?gS0,x4&cT2$jQfTZ0@ZОGݩŐ`6E2M|fn,¹<8|;aPܯSendstream +xZo6"PzPaGv;lAG]r%y̐me[p@"r8$yy@yA\gyy~ܜ+,TA`苛_< "(oz͗?^.8ܿ\dY{sw25uz}s_ >p~cy\rٗ77i ~;{Kp^ߞ~\(7g&_9[E̹̚9DeԈ?ύ;rݎe{5 ^5pcv"ʼGC= J{'_\-ZLu~JIkEnݖҕi@vLQ O( =!b,b?!V=6]]Z{|P0)d}=_ N0{Y& ϱDBoP:wdO{n +v79C CO"ee|$?Ivɲ$ڡVo(ǒ+>^`W-z[L iP7rh>ʴ'LbEmn!$RLN? hr ;+K2ڌXYj3SndE {5#ᨋYpЋ+]h:ʳ#I l`.jmd^5gQn?,| J _zzl+`EW{] W~J{4kF2ye8˺/6l.(Ew/>Hr ͓7Ru|vϺ9]Z@>DQ 'A["LTrxzj(*'}#Ncn+K#tT9t{bbSErUaN@}ӫ'ќ S?&>gox(s~ +zmRoG# *'pYt'9 O 09e_}=榨Hɺ!ڦKvC$Q J)x*)':z1N (BD R jD`+nh_+7NW GqJS/=ZR W"n7؜*JC'6:@{Ep>|O|8?rL&F=`0 UXɪ]Y#WCV-L{>27AkF\hk3GYD9eV>н”To83A˂OLaZ1`X~Rc3 U/ph+2-l1` !*h22 uM&yʁQD'J+2ǫ-mDRMe jRĉ4Xp!629AK,0ql ㎇Ȁm+}?ẘi9b-w7x\3h2*GBn!Bp('v T L n;0wW$MXE^VsF0 u51㓏VIh +Oi +.cPaiFqfyցY^|(IYPaWI:qV( + B8Qђiib7p^n~XIC@ړ 4a!9J0*>*Ƞ]uzQ<hۭFIo'pd++4 e DC;Ba`VÎ뷲ԝx<Y*5Uiˌ9QcJ2LNFٿ5؁oVz%SFr6S87oz;9 z1^ȡCVN "`kcJXęlZ˨v<*r'|jӼi[3s2M!a)dn˒Rb 9G+TOܘC2K*֗SBNiTcxLqoVۉ2V&(<u0o*WE'i9`گ5Ī2ov,dJB.~J'=CLbH"u?|sjbb׻{;cM[8τvnZ@%NzgLV"tGr? +%춬)̖q'XΖ7͹{TU >* 1"A['jP̴V86YǻQ3RHGuUW#V; +P8ģZb?O+ۑ{Qp$?Gb GoGJԏe\Zr/930**jعyl m"J +x}u`67.F%1-V & .{lxNr'$fB01ņf58Ol*ء8ITݍonoX]vM;[ވC +\|*-Μ}g"l̛=eIAq Iq↙3Ql§A]؟[F|%cNx6b!J%V+;=\XWϿOM{MW1Z5'PWq24D0etOɌI[{%ԯ(zX.sJDi=H1xr,CiGO$g(S+_ke k"51|j+ ú&w?95E>̚\`#߇<o0L}/"')~#M1!"VI52fƾSj/]\A=ɽ_ps59՟Щ"4WuʃؑFQBiez e#Y ގ$t?T;eLlfR;Otz0:k suZT?> endobj 5101 0 obj << -/Length 2373 +/Length 2241 /Filter /FlateDecode >> stream -xڥY_FOs*bAKy7GJ6Yy/g8]{ډ_@ʿ!)$x䶫_6fJj/M?D -%:^=V[dӞҴ@VAdjBR߄פY<;$>xCiebg#˛gX?ڻv"'EElNjV~j9c|p(0[: ]**PqNp -Χ% )S.p%amuOcIpw@ {]S/v#Md0]^;3wXu;|H[>UNZ>ɉ#|ohH0 -Ak<lqlG -O74RN>2:Pl " [ܚv|nQϷ .{^}yU&ZDrʸTO. aL0(!b߻3kEH^6y zo=hF{"("!'ќ+K-#Em %rl.a)J~ι1::P@=? Qcm$@=(b0ᤢ@]b̆><' ɉ㆒_/Qj2MRSxАUn~ Jm~3(E-T)}NPc9Ue%BOPS|Sk5)6 ˕2 jn*^Q"͛!A am/ rmdI®r۰Ez|2$o8&^hBW5vɯRL PЋxz9 {9B0롄<.Wr#%3߉uA&"f|홉5x;3nBI)X1 d.G4P/b씬 J)}JqYUu0R.uc|2 Dť?D _ӴJ߄욳&؇+ݷM;`ab&o|;FudlP^?⮶WGy3ې$˦tv"=ib@0/>۟m&=Dh;~{0yC!aByEyT$4]Dnp8\P'qNsz.bufefj3!wl%ۭ}e?I5W9[qUCwoʃfz\r83'%ٹs;0x}g H0iQS)=gKG6{ؠu@>k9nP,`/ qƳ4EW(on`, rtc"agA6^ en_/o?MB/Lt6K׷л\@iq9;Gϋ/[N.]XJ_&y}k0΁͟F/t|uY6F2~,ލnG:* c>5 TF`!?MN48uC-gO}O"(ӌhU&(^ *PE]%B4B:;$J=e [T|Yݶŗ=2_ySoUk}t-щcG^ 4yBh2nUHMh5, Y1E0q@~H5q3(D)eee#ʫ;XϑG\b0ar##m"6d4 gCP( gkx̅ JO7r0Ʋ@uFU %ݘĬ}͔o3TWo. J@d~":C*IUU+ओ49%Q AuWϋ5#?brI$gH]ya|}rfτ|䏫CLlRzwhW65oQ +Kvڳ^;9aAQ\,cz!Rd0@9i/@Q %x2x$[cK^% +tb1ŠT(%"l_ir8hc[o]yyX.O +1 jW[uXBqM8pاwmb(ڶ]ꪬ!ů +¯Ea*BIrSElAU]D}Tt+\^4)u(} cfOiՆ%`I/zv:`gWlO1g`V,hi"? (00r&}g{6'@5{R-!AIsJjp5xm()`0Q\0荭-KDމeLs .^D":.R ci +eO=+3 sΜD.{Cz۴ݎz H~/WZPfoYm۲U5[2,ms+*g_B`}E=G\#p#&"#pm3@ep8 $ F*$lk%IQ7s -$fh]ǎ + jBveG)V^3nĜ 6hMqx ]x{*>p?t&/_q|צ0 ZZ,/)_v7*븽gR|[<[ߐ+. 26mγq[pck3y|+`$3W|M'W-L!Qjt_řcrMXacMAwXI8Uzky PiE`UysI3nuCezD8cmeSR<XCV;ObK0jnSU#A`߼¬H42 M$8oҤG+"V 6B%aqظټWJ( š#< +wLZ:~2D/ &:bj77l SpÎ˧a LXs?TSĂ~2HRiIWSiѣ7ķB#5QgI?䡸hUX_f3(IsåR p-Sfd{ \endstream endobj 5100 0 obj << /Type /Page @@ -19469,28 +19378,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5111 0 obj << -/Length 3503 -/Filter /FlateDecode ->> -stream -xڅZYsF~%P\ڇرJֱ++}H0hY~AJʜo(_x'~Yq_5*T~b Ol^4;c2̛W߿(4ȏ"-obsq[#$ W8ͼO4鮮Cnwk>4 -;ݵ[~p_^T*"Mx:8_2M3s;]pIb q2nvC -a5z4ai(]E,r6z{qe~CW,Գ;q B38;^$vbX,bAlYTL!!aeG,0dwހϴb y)QQ1])FVg\8s6q2oY|y7c|oHV^5̫X.v+ -,;YgQ>aq/0%Nwlk 1E'!D*/"uw0̿e<~Ş,Z6UaXV4N<(BSS?w[Q{s-o|ҋe+i -30}{bGw+`/!!Lz,ym$_˿;#v% s2$ĴpqY$ dcmiS!FNg+穪<4)qS GA\v݀G"?J!2}H1j iUx9rAw>cKܝ*o9IEG*C?M= `(!"qy=ytj-WJ]\hĴuJNMsP.M@e%V^#3+Ǧgq4CD#+& -m?`9Wx[޲%^qU4s,pŧ[1ANxe).7ygYm=T%v,8jPu~%}糂X)Fb~Q`< C4*Gm0)^xTXt2f)(#$ᾠAØr8q7N3ؤ~F/?f05DɢYiJf_ɺϐ^$e9ߊp\M?I`%9Ke %M= )"Y۩:D!avpVJ .4  - bq吨SW\0ݼsmX8dy>1BtZ{r-BcϨ0{ϳ%P@Q](R/1: g4ۓ NHH9sJ)#%&ԷMmۡ#AsH6KhhqZbqX޹9 H z6 -NN9@$0;hp-")ں^M݂@:`Y[}l:ԩ 8!-KT.JZz݉AxPy [Sxlx[?@/~>pƛ[ nJ4>LXx皣4;Y8@J6 -lcLWw=Z5Ml٦;i@/ϊoz~G~9'ThAw3ycLS\jZ͎irAd]`})]bi?k -Tf{}|8%#c)j]XUzހUUkr0hcOGG.1)x+IL5*BK -FĿ+KU{*\+ -v Kѫ(acp+^A[ؒhOz*B-|/nl\H ڻ@ -\߰K[mUm7i:Sc}@Va*v$ADxBi*'JN)qnphMg%$c&K00#[{ȕ"<ʐނ,'jh^}ۋkt3Gtu z^u^&ccX$cU%>*jQiS/{B -7Z窯ja^x&_0hP71[+:'nާƟ$;NGFx |VP3a5 /,(Z(f_tZWp 2ORͷOv"1O?̌Ʀ~I_}ȀcA=N E?¶E y8!~O{x{KPi{{-@`ڃ~7\qk4'_z -SC:`uiN"Zc5 ae|Y q_188W;%5ɗ]^d.hM%~:} .!9DϽځ+Ϊ=,t%9D㧪1˓#1*]`ևif.#;cm1h_CErƧs "9&r$!4&q'y|aendstream +/Length 3418 +/Filter /FlateDecode +>> +stream +xڵZKsFWhu Te!x ^CY%ەf# Mow=x9lʜ7^/?,8/VņV~|~b ,^4e~ב@v۷Qp~ֲS//,$ Wǫ8ͼ4鮮Cnw?{^{EuNW햶Zb?^4(3~%==Ӟg +c9_c>+dL솮jSdOP~)E&_PERz +-U=K-%&x\߃ _"{ԁO +3RFb#nS n;ɇ'(@>3C 9y0"wd2ү?>CkVG?Y4&]wUL݊|8^vCC0ř="֑xka`V+ʺWC4Y0k {+Yl_B;چ0QҲTO{(,@|C}wP,rF vݴ`iqP"4go]]6v;E)ι OgkyM.]W:j]u%+7RNٞ(xK<-siYI n+aRZiu#{S 0# wVwճuސ%%>%>ݬ|8#vuҍ>\ 5jDdv4171Fs?1U> Z BM&(FM]筥Tr +ڭ&2r ʱ2[5U,Z>e֛jFxEߞty#OgG1=."DE|!UPUc`vZĤ4Gd4PYxM-H䳼eՊ`+,f8x>2aŕYЉ"S|,VdlI ׮nY.T%k\ 4zS ,ɢ`q;yIvnG^S ͤMJ4:8/折{׺1 C4*Gmmj)9ru#]l̳YIglu0M\꦳;i "2~F=eѳMϣkD$y>~k2W DC )W'kfڲ5DQϳX,  N9i#e>7z]m X'Xtw@'s%o9*۩@!davpJ .1x!IA(%.  +*VwDŵEF:. "L7o(MwXV%zR^E[q 00(9'jS0͟i7XkѶfwUe~6r +EW?Nhяt/%wF>9S]Rӌʥ옵\[uzzt' sqzGRS?GT\UіK,#<~%X +Й)Wݒ9EZU^騊&'~&Nw)z + LGSSmBΉ}rSWnH*\9s8[+)p'3V;8|Oۍc>B{vX[ԩ30N.&R˧:J)O",.!lKZ[L/Y=( C<*ޓȖnH51Z I-mͫ{ Q;nJu)>f$7}=Ƹ8VՎ +GDkZG83f3DT]wm'. +?Og˟OZG:U+U4'nvqXח==>x +$N W +Z\2xDXR('ZI3Ws #~IԘ0Ȁ}ANmK6?cU!GW'c +/=#-cX'd ('s3<ܴ,ÇT_ghNSҏ|rʵwGZu< RhS1<GΔc֐^~gk2M%~/Ҝ4ic =-*SHZpwk/Je#sOo_LY|Z?w'k{hEZʩw +57|xOgaN> endobj 5121 0 obj << -/Length 3127 -/Filter /FlateDecode ->> -stream -xڥZoFB}8 -(.R i6E=(%(T7â}hCEEb8QIŶ7F4.֯p? 5'^~reT/WqxaKͻ7ǧ&\~q޼_},?_xU/i/H>E4Y8,W oC#_{V.9X61fQvdo^6m]M\)/@햫0^vAUYqX7 NLxɯ\ O!}-CZZ^Bш ǬncD;a,YWԇ VX)4RJJ U2c#Оq&$JDYq J߯^&W7X巰 -m4e~VLul3jFLQ5hxRG,&"N3S#f~ TX <ʻ#{!_Ag@N =ȱ&>-Q_j%-6 oHLО#59[tozЀL :g$ȆFi!^Hk7Rrx;O^8@aP#YVtlaI\NDޔMO1u"Tf4 9 -iZ><jH%>96`C>wyVBsMb ;0߰CLk J`>5䒍#6Sdx&d$6YDc+y8ʨz5"jfwz]۬m<2j*?t|L -I;&wUPpeZDQ -f5")8#+Byhh3 O1j*`DA>H ohPLSj_tjc*I8sWoHkߒ?(VO1<^5#>D=.![m0gqY(sr"+yGDj>sB&Z)DYD -.C8 `Fۚ"o5ȴ2h~ WJ8 tduc zo!x!V ]V".; YlSrÜV٦p iJywH\hf_gJƇr8%GCF>ձmI: /RaO%Lvqh#~'Nmo4=(c67R8GC1Q6N20E CpqSB[=!=ܞSJF-4]_rr“XwCL0op -UܵXإʹzZ*p$'y*!'Sǃsn -e2 UL(?NЁmSuo\`F w'Yn.xuly;~CDҺ9T ӕH]&~IVŬf1ٟ{xF:'KIFĒWtĔ%+gHeCE0rQ+]1HMYSAnF> jc5~AaC?1Q>V|xȧ|VN*`J XO: p]OAt|"iv0M ӌ$MT$\Ldcn$b#2pJ}*^mb6ke(*ϔ|~ByclpV}@:FZh2i&đS 8.Qr5CHNpF]Q<˙ _qp,<268y}!i}nwPw!y6#$0+Y 5@H+8C`3t1AO~RbMߣX -c9̡1`'ol9߂V!ӇVhC6ٰBS/irN- &.i;h -.wOSIYt ]obYLQ ]4bÞ܇n$X$oO_BxaTzC,OՓԬ판tGH߷f+m?I>yK+i#94q_ܖy9o}+ŪNW48 _~'~ 4@444/1q㛡LDmDQtuĒЇGJG 4U}-} q)Z!@I@hckq= .si{+'.YN[8\NN q*\10p&,?[:ѻ ٦tWKmnŖs z 򧮾!j}>ݔ&+??rpӳ߈?-B4 Qbd;}>™T2endstream +/Length 3039 +/Filter /FlateDecode +>> +stream +xڥk +P +V\"$NıS +PĆu$Z>N5mli^$ML,vՕo@ (ĭ.R?]lnd6__1Nrljڻw_y78xzð<3_~|wfD*$bw+&{J颺Q52/c=S3̯l U^ +:®ɗ+ePOremeGD^ez沶ŅM:S{2YUR'0bUw:vS sNDN&^ 'LY:[y ,yc υP4gN6Y=Zh`4L` t"=^_q.~ X ,gb>EvWiDU~uFs+aGiNen};W#OawψCWY8T{/VhBIXBp{⁡{R =R?@ЉߓJ&oRV[S_Gh%-{L#,P&x~d@Ah6:P +<Ή0'-,w6XCqE6pFF|;1u1Qzo@y #7o,I#8dC8ٲ w-Y zC9m9?D\GbWM+&CQbеz'T]qITbt%W.{^P +rF+._s8zƋ[""k|U3Ec|ka'0vRoG*Q褹>Mi :ic|[UPxI$b|lL|.#5ݧ}=RgQ!x"GOG(pqH'p13'\`-.~>¹ X xkj4{L(WD + n[/۹;; F4(͘p*;ݐ<Ռc\T[^(q({tkxЬK"l겷UdK~xLL '墾sfhk[HM:{A!=φ\&N:x$^#ܒ &NQ.v.r^ș/1ɉ+i}xw +Q^Lփ~gB['f\R@nkQ7f +4<nȃplgNfnp$#r͘D0xW|S.+Jg}z$a{oc[A|}|RU>/oN_14hm[BQp/w}n5@g<]p?p,`K=} GB< +0|O +|UD'41o?Jvgje"dMzt$9/fpj#tD=Ԩ-b/ǁ/ e! 7嶃C'UEK[XQ>z9-) psc[Ƀ8vJR) Cy]C!zK͙#:$V%`&8݅Jrwo)g;m !YfeB&/tBp.sPCcBMT仐IR#iS>\#*J +KfTw |wGcp8D ו]|U)*xRrʹ0%AX:5eab4\( )=k{ځQQ +/b$M[\8z]9 Y\ULf" v†avEYp_/'<8RX +Il:~.0{)a=o͐.b+J.֔ `;}k<ʉ`DL혾ugיK݂}6r½;JI KP:Rg#ǏlaV!xMvKj䒑n`^?ٶmoFh[}=ʚw-P]V] Чe.:B|}d/)2`:t6_\ ý϶Apmر|5U-T=ݖ6+?|ic,->Rd*[VLd9[rVendstream endobj 5120 0 obj << /Type /Page @@ -19609,15 +19520,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5132 0 obj << -/Length 1841 +/Length 1821 /Filter /FlateDecode >> stream -xX[o6~02IaҮMSY8膮hJt %˶uЗ!D~Ccq؎HQ"NjbWr9r ԰L{ډ5̻bqj"a -;p|K^t2 YUG<S.Hhfu<˻f*eE-O"UQRȹsܴj @z}ϛMU,r`ϼvvYy̷ڪƠWgo}'YdZd 2qq15 ";vv("<[gE"J+;8xxUmq[lY<(b@̉Xo(],a̻LiMgWĨ6,Cf lL65 7r:Nbf2#ߒ儔 Lq}tb "ZJ]8 LQYy3Gd ֥0V8!C⩁-pBZ^륚g2RamNЉꓧ4J׬N7g")^0Ơ)5Dzz 2MPb`Bs -%yr! i.uVgqu&bi -|C"@ 3G_SRtG"c.2%7)GȣPXE] *cSF?B1sLM+s42P̻!̝RDF}ZoZ07P#.K2q0"13L1KiJt;U8!dDiDPmuaz sf@^.sYR{TŃ(ԒGM{#WH\.<[đH - y޿7HN@U x|26IŪ,xKfó9DY?ԧܤ=rW%I^%D$xeZ> uRF0emH;HcܺҼwe`2A Cä'z_X1 (Rʴc(;ܯ>zb* CDˢ*Uݍ6?]Rmk: s2FnF5б֮ĎSU; G8'ʊZJFr=t#4A4&V=7葯;" -ټʫL}o9ab'<@]O/F-2i3wLj8pӅ#3h!'08 Tp7)\3@yXj 6/D$endstream +xX[o6~02IanMSY8膮hH'uw.";jn^?<<;WiȦI"MjMװr>-7 ]/pbr:f^6]"zsvz6B8~I:nfsԫ9B .|=K`˧w/x&\oqvbja,֟iNGAl6iy=Uf vHXz}m?˻[fe>+$ԇ+]U6zʒW#P~iպ_n[q}YE-/2ݝh0qarZp7Pn$%86uN-,q#6** uq GTWm}i^f\AUJ.Q sqwd)Wͭđ҄(: + y><HλDw + xb:5-窬XnɒlO'biu]%BdHNh'H5˙EV68ecI{(c +Y}[L0$F]?uEfs86ALnO.r~=~̳FBIf$gaڿHX "XD<睞 O[jO+/wMG'c(vV,J-*2'| @~[P(nϵlG/N7}Y| ԏ]8ra803bendstream endobj 5131 0 obj << /Type /Page @@ -19640,31 +19555,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5137 0 obj << -/Length 3112 -/Filter /FlateDecode ->> -stream -xڥYmoF_a0BCrڢť6Mиڹ|hZZK)R%);ʯyv)ʒ}w83;3̬Ӏy8Wy~:[ ysZex>yc_nďuz={ӫ~LR^Xiл׷o/WLpӿ:ɕw W/?ߝp=t8cuTzwOh!MN~+]\cX -s)Y%Q,*%L'i~bu[}Y/&$Jom{ևwoz? YZz'gf>~sݛ?,p[Vg|~_nunkjXNS~Jˑ9h4J[պyvaOO5|l+g9-.isS#K-6=C?eo􍻹K>`ݚ)^ӂEWe'tiz{sSoD_=/y7MIR~q$N〮"_Ex,iXbԕYꖀW9<ʼ~iZ;yK|M Մr,W(a5 70oJuaL -mU漢0`~A;' ՠcKFG=(xo@= -L=`}Є(B:HfuW9彫EQ:Oԣs^ԍ=OsI?n{w=qzGA@$# F@mkϠ,Y2W5E[r8 -NmW-~e)c{ 'D\ y LJF`@_ KI*ƒ6]InwhWUم7+QR@Z99/\]&a0=vk;L^gXN»A$u80X-5o'`iϬJ{L132j T0]BqaA)BaEfмc$ -sՁ B5+Q Èſ7]YN&B |e+'DRs-C.WTqH+j*a-xH> MEwA /Q1w;V),E4K π%_5"^O嵩g7ɉD5x{;л1on3ҚIPI.:pl:Po {#y -i2(o\+Yɜ -.J -hIK-.6 P -JN"A OұD;v;i.{;-? q&:W =3E@&673ɤّ,ǀQ!@4*_Ll-LϜZM -頻,Rzff3)G0.=ɱ/Ag7BƚS-s}SIKY@fs;"E< 8ni#أ5k]3 ٣V^BH&ٳW" -/nCFMv(7CjY@Jea{5__D]k?tL -mۄ%E/ 5WN3n$VꍕC9.5|27(u:rq?Z\kߓǯR@b3)y]'G賋i;1vX# "KWK>Z]wsD}{@igW{dZoF9$*^ -\yM;gW=^/?~x”8۫"W}˫W:ŅP ϳ'TDxg+޴EZ=!]xGvN"dSmy/ov3?NFP=a88( '> +stream +xڥYmoF_a0BCrڢť6Mкڹ|hZZI)R%);ʯyv)ʖݙٗٝyff4C_l}.$ii¬oO^~ƧaAqz^]^dŸL,^~{{1C%e+Bo/W?} +=߯ߝ|w=4T#owsM,HtgdM =_m{WMۜzw0$QaiiUaIGN\f}8iUƊx*iX}BL1~]rV%1+<'Վ[ׯLk kZ'41OKnyQ CbRxo{2E,O(wՠ WV8kN̓{P>J7[߀- +cC7*%%t=^֭^\dXVEi;̨G^3ľ-kǪ?tQq{q6di̠,Y:4ֈz/ڒQ w 5/h,W\J5g51]oAMlF`@_ Ш+KںzPL\Ȉ]tE;µgt\xA;h1Jr+'k\=#`k þhB$j Si;*6: aurb.%&TvҎufɢvKseA⣤;8XLy*F}*uӮ' +$ʦX=14\-[8',!f-)GԾ/{z)[6zi$%HH*$cXeNj12naG7=ՊV.jo;MZWc;#B"kϾ+`$wPiڷ&6K=PֈrRcQDQ*46F#Sv8+`7O=2pm 2/ad~DQ2e>syJs!ѱݳ'$:xWrizBiQnK"Ơ@CCL=od(hl;y_5l@݃!cʾO/F^LR . a'F1}]~BY)N&hA(OtIrзb `Q%ĚGbd2 [!@%\N18^vv%cx7N{=8D,ÙUv4H,Q/8`8VǞHYM6  v0Y+Yp+0\H&隶PoqP! 4`+n-=tAe/GWx"dH Nပ,%k6keؾ ʲSZ= 1 h[}3`H1"pWq,Cd*ؘ#[[Ng%.SRQ ng)XEVG%RpϜnw0lyߞ pų$, )6aPaendstream endobj 5136 0 obj << /Type /Page @@ -19699,23 +19607,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5144 0 obj << -/Length 2974 +/Length 2840 /Filter /FlateDecode >> stream -xڥZYsF~ׯ%da0yoVXty<@HĆ$V~$H*s>nHfi:%uVۋ`v3?^(м[^\=63Y͖w=7-_fZU/$I, |^^]=j?}^zd~wo`T_~ f\駋Y:{v+^9ho.\csfƫԏR}, ĢB퇡%QG!|[x& 櫅nU7"LqwicwA(i[\xs֨ym6o%V8)abks̕rvmyNok̓z -:/Wٖo`Xx&x:※m wgTTͿvzG]mȶOk=F9 tF&?, ؋;~'k; -:GX>ZuiRvpZ!: `%7 0#pqwXphGm|xγ2~@h6.z$6(9l8`XmB$0:Lߺ'i%tAM fK)S6PB@$?/0>r$.cB E5p(H)Ɗus -a'gУ'㖜!捭980C@t"H#›5'@Ű2x@N|WngWtSYu7iqD/ t2~x^=7:lB@4 {̆Cc`0)b)}Z!+@C!*٦ءnz P/a`l%&B%Kn0$TrPv Ы{rHlKx_0  - >Z?Odу n3|Zgi8֢Cc$^eOq=⭽/ձL Z\ |=?rVظy?LT(0~9y}8 bq`Uc>U6IHdڮX3Gh1vρfۃZЇSd,tМ& KG<>tkкqYK2Ew8?@hOrw`'p%Uk[ikovJbTFOsBL#3WXY8їQCD֧Ц, c0`eh <;6TS Pÿ rDW),ZB V'-%{,`OBL O;k]V*sۙ+䮒SꆸQ~5U6߂L8l[r lӻAyb$9?sH:ENq. @< jLn t9LzXl0ڋ WU]wj9%!qG -G./J{(k)f,9,{4м&p)p6Ҷ$dGK!Kl`I1O bhΈi^Ùݜ6Cy1H\}Q\}WS]ThۼxKG -! +]|>Zks LX/lV<(tqiHzx qw*bPjȠ ?^0REk7`8m E5zF}~`=(4h1 uD\H 4 T6HF2ؔKa5=RL88>hZ@0@ 7|8rEʉ3dZ81q8+R٩k4Xs7T!}8+|Zkà`"0DsT}9Sa21sq0CX+4d\^dYGϒ?s"& ' ~lhQlEᕻl^t1pP%~ӐCuJLs,gMi&hjf?TpCՊb?gf(|QrnF+zO:ޑO \jX'؏Q$:bʎOu_:bz}8>4q=$ -RVȁ;z2_*upD>ăhd4d3|P}~2i:CQ`8endstream +xZKsFWp} YeBlśUZ.oUDDlHB@i_ Hqm.r9ϞOͲ8u>K3,wgf?S" Lbz:;{bf* 0niɪy~׫K\bB?˫30柮qE+^ty5L~5t.~]pvq4I4Ͽ8, t*g3 6Z۳g/D,3TM$ +-5`#ӫ:HšAne BM4PҾ~oɈ gi 1_J+AD.})!L1,0La P oW%34>Q,JmoE{!o5ѲD4`4R,5t-L~s /lǍɥ.1ٹ`I ՌzpOw{hn:币&_6tؚ g1Z98`-u1tvD$3V8~>AG(n(QRȱx[cǏt;N{PjBĉd΋طyY87oT UTvnHܠ,fy !X`{.ZC4 *qe(J}1*An2*4h9uB:AF_ ǁ'nkNqs2םmbgNiɗ E +4Ch{ >L.xQ +R2P)aK;#*] EH(&V`*9Sdb$z8߄}6E :7YR+r9&%FozVG sDnZDîv/|"Y '<)(CV' 21`v;ۇä.bAl~]7 PY-w$?Cp%7fJk)R}2_VTun;p|W18RuzIjk)3MŽA0(k"M-P Ž>Z*66){!M7C}aMo+HShgqFΡxSq$wZn8/^N%CQIglU8/FO>$@RvD)ʂ0 a[I @+j2Kr(oyb.e&NLi逶>LK )bhN]Dftbþ eSQ2|M>G},iN|Cy/Ｒ{" 0W|UqX 42<nJl$AGh"y]N}%Eog&5zmsD;5f!UACD &Doˊ(N\K ]'MPBIrB8vhaywO(4k;q2JYգ(=Jj,G<r}7O/ioϧFOBj)%^ dDEQyv,@?(v fYendstream endobj 5143 0 obj << /Type /Page @@ -19745,20 +19646,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5150 0 obj << -/Length 3834 +/Length 3628 /Filter /FlateDecode >> stream -xڥ]oFݿ(D %)$i8XF -}EZbM*Iq|r%Qr |/KIz*'r.W0,w?﹩^.u"7"yۛ3t6'2 ;w78i#]}^{=z?]|0;5{]?/~ݻH?]xJ'h{Û اJſR<^1D*qD%-rGy!]y\ͮ#kR +G!.sgә5b`gӴ:BYi83d|?FݶSZ `fጾp_g5oY^xSg!G.` Qq!ucÇ3xvYU5e1te@/`F ^7/4Ф0}m}3d}fH⩽^@L_.;P0źkst ¡"]Ge_L8ZeȤz9y4wE]Qyۢ&BALaQ#Yd{i ؒ1 ۑtb³2uF!55 a}l:n1p4㟪l f|ׅl2CQěBgrW?B8rױrPIpn4dǡz)ۦۛ .~},"!񫉯gJn[72g~&f,qO Y('|ϴiD  I@r tA`PVၱe -Xh%MQÐakĒϸϋy=ʸdme`e.(CAǰTb 21fPnQ2X:cp~[<\[BLE[<OKȧB2/T1h۩B[덇}{hbN&X,$^'qc0 W0?BW 21=R7J=z6>]sS{r>?.9(\3ɇB7} *Mخtl:Gqt(L `0/ {q"Ke3j Jngl BW{lHiXA S39s.K5ٻ~|"U<_5c!Do;UM=[7He?k5o|gAAp -8Du޲7I"H42S>WIPff:=pNEux -8RP=޾I0fEAE9#rђPl5AἈ|;|gW& cʪ`ʎ^9NӺf*TFx^' \iNrW ʎ1'r6;n9ցH@UTDp$: **y9Ve q"DZ53%gpⓔC/E1~c*JYc,l3r^K - (鹤O s:t"s$p8$67XĮ1G m#-8~5o'b҇t}ž=XAu+7)zȹ֦F =lUt`RVƁ)a Cqv퇔6[ XƭHjNA p!뷈~`'/=XYKʔqrg/LޙWcY 22~ |2YUYg HC#1Ou2l}87E\oć⤏ MpuQQLޜJ=7-%>IAC&D=* -7^8O?=z5endstream +xZ[oF~JCr}M]So,#>EZ"Us!e, 3gg;g gi*Wi:ςZޝ#i?Hblz>{CgagA6[Ruח?,J)/rJחлbﰦzחE5w:?4xk:~=R:Q?~=_eʁflcZI::GM~WI4[OS'\xc6 yw۶99na<꘤~ǖgח( b oz?-Qͱ-SRa{glCɀ֏:{;S&zaɛTrl"2xS0"/Ǯ8ܳ™{r^ܚcE{Lc SЁ6WL2 +&h}3AЫd7xڴp$:89 /q +ॊ=| :ֻ^c-Nq6vYdpGh32Ȥzg]QpgTin{Upr\V{S,2OA{kL81 ۑtbf}gK9vNV9 i}:.1j u!4("X&"ͯ뻚X=Y $^o[wP p"dlBU_C?X'EY<,b823bQ6˦~`q4h50'Mf})];]DN <*NCڨ3o8:~a]屦-zLyox`@P*sRFCXhJԬ<8}cޡdjQkh8G>c a0[6sܴ + [qp}aꎋU}899YLhckԶ!n~Ek{|`n2]''],Tj qwcL;:U'֦ȹ9 5MGgOl&ErGbpZ4CeU|>T^ح Ya1: N&^yuj;rW[S5KݢjX \@9Մ3܈mb8 ]FN{9y8 )F1)jF>p#ʂ#E [#:8naorf#JNc+.۠]t=o^S)' C90ᣘG={  +\Z#X=BĐVȣ9ʊͨ%@QoZB +{{l <0e +mSXZ"H$@ˁxcTC@j5n~%3G퀙!XP>ý`׻JKfd]U.nQ. { +)UcrH޵"ō5-z4Om*x'؞e[@aG +_l!8HqX@"}[q4@ +IDea';i֑ncͣh>z ~Zpm=~o;?xajr:GK{ͱc5c NH2\b_o>'8)Av@QP>D5]%܍ٙޖxޏęm.+\jCzAa _<ҍP46c) 7$I|S/GŜQ[hrL2KzoG(0J_N2fr)jPߑ DR:3ngn{Kr~ךR)"Y + +Óp1ܗ2$ bᏋ'Uҙ0xmq[nBa *)6>ȧ42 +1hooXǽHڏ8چ EghRic_22>g=皰H''ygdW>R :RHj"}-ظd9:fB$ZUx!Hx!'.Z6:#hG0{DqF13vGJKoʊ;R$OdI{KyGNt"kX},\jG ҊϤ6 qƉǣE9Ԕtih:zQQ0l+܏h0/Lz˲ns8/F&ԩhatk_ \Iҙwݹ'9e7&,P\s'z`G )X`¿CRκ:RLEY(à~ǥK\MHhߵK|hE_bj+Qti Xܸ4JWe޻cJ4>Y뛎`*j"EXB:L=l.vuuO#@x8^͙:ւɸQ#\TvDԝ ,Uw5N,a]86TQ$ch Ѻz65Usp |*@\,@`ָ7j|fiDÉV|_zYpN(c&{g&rD'syg5< p> endobj 5158 0 obj << -/Length 3814 -/Filter /FlateDecode ->> -stream -xڥZo8藓X+=mf#I+vcɎJr7/RR-[p7C"\/I MݙBF4/n~x 幙-n7 `q_ UKpWn]b-F|.ewC/s-pZ@ r"%rA. -wg ԫZV.xܮDAFip-*m"<7Bڗ[SB6갘9k]װȦ瞻O ^/Ĺ_ؗJ< -!Z8{l(k$fE58H0?*]j}k!-V#+ۚ6D^A7jB3Ŏj,swD #$[US!ۮz]о@o[;w8}<yÔ{ ->] _}ZpdpŲ8লX7Q%>-GVЩlPb):n+\X7nK %kh2kvF%xqʰԳ͓6M>w|q7Tp88ĵLBBY"ތ[5r]kG@ruԫ -Wju=vܺ;ktXʞOt,gikP`%nTg*sgF KǑ UѐW/廁1CB +4\^0WxZ1m x &^xydpoo-~3a -"Evɕ 43٬,aV`Aٜbb{ߦVL7!5U=Y(hjS+K¯f%E o'mЫQڐ9tHo z-|G+}#T$1V(o"a ̷o+P٘4qhy/h]*s1' OҊe\5X1ͭDNnbE&%fN`_[:XkƢXMhl2S$A?jXZek,ֽcB"cBu8=e }0{[!Ts<8[΂ >Xڴ(Uw4; -N6̌<ڮD%}f5 -~UnXG}H"_R@kngmd/: xd;hvfM'Sk⾝h(ug3Dl*f@EA_\4 @{_xlW|4.Z/X(t̗{t ^/@0x[o+xu6e** *{>7)p͌~apZzLPZ%=4/lyINag,W (O6>v?z3ܕ 2W~͘*n6[=UHC? ˬhPWTN!*W -ǛŠDbH `͕6JB2n"Mz -D `$ɩO>~:! -6 ʍ *Y֫92 h9>CpfT^G%0Y'QZEBc>:-$B­S8f2֣WhN&"DjfH 6ٞ)a2xPKL!_Y[aA)£9/a0%G7-VD Ȯ)> ~+y fQքyX+>vJCBFr XkpjA[ zm̺T?$2૚r!wANE5s4]Չc:Fל*;1v~f4|c@[!0 p -!'x?3F l mR7Ӑ:91yYyM7XO!xg`enų^D.)j $58=' dHRk ܚ.UȁBPfY42-`X5pS$]Lec*1ҋ Fnġ2 )C}KD$J/ |&:'h~LoXގA90R&A08%o8Kb/I -lze$۲6Vs\̘`J^V\_aGnnyFc 2) -}U% PV%] ҜN"CLx@<2ga$ٍ`)+?^U'gOTTq2IRވĹ [_eS-ZXwCX +݉$L2,ٽ$R,X/(x͓B"4QI!Z`O%/sr{pbYՇ<>Th:ߴfl1sppH4gA -HM(9b -P@ݞ@G&MTjYa4 +)ˉDPfS n9|k~ I@M XCsҵ4Di:ʒP S'p~^Mˈm9MX@w˖N_s$l<ƠfV3(KL87wIG>n""GSK/]AY^z:7iD3{FJqsI2|H9uG􋡹L )ǿ-#4 v.xnq º(M? W,cr͓b@yNUz -03vflX#(&w,Ȓq2 'Qș°kM^Gv<\?3[~8$7 yg)# NtHrRendstream +/Length 3750 +/Filter /FlateDecode +>> +stream +xڥZ[o6~e5GD]XN.rEzHIǻ~ύ䑽,yH~;/<iz*[$4]w'b 5'V9M.|ͼlq&7ΫϮn^\)?s$IWsͥW?_| +}Vy*]޽C98%P'+M + n4 :h1FUAZRwY}_ |0k6|XEC0H-j~ *׺'{0RKyZF5oVMS?qb?`Nyhue׷o GX"#䭱 T2 | APC[DtwGQ2'E+912kjڀǐ*Bn[Em$qdPT 0=? jMh|dLlf  2K_Zekپ8rqCu8=p@n%x9 ΂ gm +*{˻4ɮ +N6.ڮDjEMģ4հ3H}- )WQZv֢Fp[َ3 Vn' +kEuhǧaL/C +] +tE5 +|w%GX{J4.Zl,oQH߼뉞8sW NNgh?E2}2 *po}=Yʏc zvFz0/aEhѳp?^D:%=/RFjq3'^# _t=on,te!|.<ӻ@T)zഘsȜv iNu Е[y^tF}Ce=@nX| Ms]\_C}%);%n!ޒɜ;D:/چL$A夁s6/Q<Ŗ+Y ?pİ: 5bH5b'eϺi -Nc%8XG5[xhϵ!%墋MSf`' zFc9b{ޖ_O^x‡I6߽yZR7 K^Iy9^SSw0}lfn-V jțod?qq'qtHڂf Iff}|]hњ=OV0ebK^&{ 4R_I0D^v ML}+5]]eXu%Oiq>\K;/kohWLxH=uBu۳T2T܊Zx;k62z)jBygFО4Hb{@!z@\0ǮZ"KLS}v%'oj.m˞R+ !# %sObzP/ν)xp*tHs3!u3c_ b4hYASϨO7^;+)oÌ`^˞lሲcBlEVa`0-)&G,9b\S5M |^Bo&?USՅr񦰢'769X;R:Xs&HS](B~61h4~[ +مf)5.uCNH}Ne "іKo!+HXy;jyLw;enųv8nc=9`Nq"WpeI0:orX=ZSze^e+GitC]y-T0 +]?]tqR@!BR l%=z gLe;Ucz}t aV qlJ0‚rNqzxđ7?MOL1i܁#$f0,V)-z͂g'"6\;4hd̖=_9e蜠# 3B_ۇν.A}ͬoHM6mY$L'AC.Ub +oq@ Dn:t|(U'`NiLvJs߇(6yQ D0Aox-HPPd'":pWMh3_il@⣄H^\wOGP?I&A-;olmķ"bX5Y_J2bo"w>sgtR!tBdiMb*2p&ԇ ReY|W1uhź#aNx7( !j|Ya4eMݕFSk6\DQmtq# > endobj 5165 0 obj << -/Length 2373 +/Length 2333 /Filter /FlateDecode >> stream -xڭX[s~ׯ 1Hl7vIŦ'$yX -. mьس{߹JJ#W*I=7HU~QP>xrb+G3ow7Snn?0 -V7Ax&Irϼ{| -as!O4pv|D~7jwVShZ`7 tkz@>݀n\|ŲbZ[K^1'r߿d .Wj${ g+u̩mnΫ?W&Iv<@Hڂb_x@Tc8qc*v}]EJ?2N^ ђYWɕ3 ^EWs_bR =(:݊}W<ݥ~\eKN3Wڽs Z540=X9p-5?'Nz%z8/WҔ0]?߭IA>6r=oh@@4 -?Ey@ qU*V&Ω⪨~W^둟GEKoUGtNzDP29#zإ -4~7SA8 -9|T'dj`(>6ȏ!7HWq -~bah{I;S 4I_ݶDsX@*+Ozŗ_Y{&jv!RtSB8i[dZZ;1b)3^@̹5 G=4]FgrtċtK F@ `%lX!*XW5x/e2ƒg5+ -CGG#V0u.o8.x!" ,8ᙾƾ}4+뽰jӚܰ%bӥ#m=!B{l[3[l$Ɋ$p_j"E͛3HGI8y 'sO(T2CcOE9n1x'IR#Zqli sCB]զL0{p:үr)E26ʛ }Oӆ ! ։D缯:B/mh!ȋ= ;g]∭7PUgާ*vG}T+m)3u qĞ+4`Ӻ}~Uc0EhM.sǼ)Ѓ -蛊Rcp THtkktd|7jM1 RTV|lmt}{ix8Oc>׋@/RA5!j60E0ggOQ ]"o / ޔR$S]/E^͍} >zhnҴCdhbaZA'& )uU$H\*&52R7>9c y,bBX `sn -C*W&w1+(Czx\Qœ:z3N7P&3 -ሑkTռ q8hq;aND x;ذTbN>!S5T- S$Oh̵pAϚ-p4K CvihV~_d`pmqюc־FF62ڴsP^*JTjp*b0SmbGJ`8Dii(\[D `)rʘ]vI - a^0+X0 fN8-; /ސhxiHhZIWQI7)n q4<$Z@0GlzNHL%^ujYCc5 qQ(eM˱^Oq/jʣWC"_F, -z֯V+cx؞WyR%O0KDP6GޱS#4o-HZzf̼)'oaf!g#uϿ^} ;Cw!ƓDl`TE|Ih{!,UdՎ:H.'::h=[rIço&9@؇E/wHz| _C?AN#0R $%+a6+ _i-|= zWW_ u4V_endstream +xڥrF`V0erأtSI-"1hH|J)U ^}cM^ow,+osȇ+_0MzIh{n_w|ssnnw>ͧ돇p|AϟvY ~7 ]oǫ %!կ{$s<`#$˟=an!ndq89푣Rw Wm`Nj$R4? ¹aAn멸 AJ,._R 9w\oSyA؁YNh +m֨^NhQ"9G -̜{(4RrHԈ0)TY Uu^q;'n +}BI~0h39?݀1Nwǁ,c6,F_nžs\ q\^!df5ǖ _ywZtݵlEM!^e׌rdUhI0_Fε kEe4yx5 QlI$0K{ +P=ȁeb)=ņQ ۺ[O|A4˝mOqDY7!oYWbI(Qb$.#J^;`JuVAgF=ԅ^'HRSڒ,ʄ4t-*@sﱓYn"BOdoQ}dEOZT[>,VO1КA9$i2xR]Yo:tYB>"Zs#84m.T܏K]cRu_Gr9?uwt `q 4j'7(J7PtL@ A{/^defpH3o2RS-F}xaRs'B4B57NpTlfwmؔQ j M=Ӧ߿ԣ02=JMA%CUw\eH;o󰃸V$_7|% +eme)t7ԕv-4n|9!Z P kTwq2$w"B ܯ)o5T($ ,cțJZ RPqvU٤'o@-neI0C1fxA6yHk;BR4ى1.U{Qԡ89#RO[ƻEO~rᆚy/u[aEKKE~fU~?2I-&1O!OF_ S>WA3@Hń-: nHD:$%s0dB 9"8w; IcS#{, %T>4)vA{Cg<:L5!CNihQ1 Ϫ2Ը촡hX,d*UMkP/.뒨E KMlH HΞEx2V·:m5vO2P'Вx1Kf`a(\ ·T@\PJC7|9@Kuj?J";ҼЙTV1ŝ:#N?'XB͊EMCz@LB羱fY5?2R(|Ti2^KƣAY|1.aSH\aX/F fѶV'ucvPcR} *x^%Ÿ;?|FlQΝ-͏3):]vPf&C6o{3`>vmta_}cy&6ҩA skyuzYF3*& h `#h8t'sY,0B)H*^B'za O1gMFK]oIlU6A\xfC;cIu.(bdj";o*?rK \(-f.ٮVjGcMo-G#vUb:?-86t^ƺw!ʂe 7 +o.wyJF\яg7uy@\V`wԼ%nO}??S_]<&W +endstream endobj 5164 0 obj << /Type /Page @@ -19967,24 +19868,21 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5177 0 obj << -/Length 2213 +/Length 2119 /Filter /FlateDecode >> stream -xڭ˒6`| Ue"@LL*jg!Ɂ#QcJIcU~>Hjnmj~? KR)tz,y;#(rqPda-7#"7_//31${KwwW@tnk"iʐ͏5,:KGXBx?>fy|jJ+#2eX(ֽ@ȌAIKL(Lf$@\~v6(aR1?" g#ZkdEVUSgD5 - -$ڝ)zReQd_x)!Wg>A10EjT㩼u]q)&P'[nTtΰ -| -Un3vb^" n]4`hZ-]A& 6 -iW M#cD)bZ-O@$HhTio`r?WYu%ެ 9h[h];]X wcl04u!%|a ~Q!HwNixϺv8*T$XP@KN*d%`Ui(N7H xzP=jr=*m -Vy#geǜcɆaYMYY7jriSZxm]K>RNu}p ! /ծB,2\ZQ5EcK\c4zTv (nU4~X_[})e_1=L͛CœJIY:t*:btNข,E'Q]Z" xO2HTfJ.Z0t},ӌ3Z`^z75p]0tanqv7Ȣ3& -lSE9U0{l :ڳh|2kл"}ڝ{ƶ{ns8BJ J(\-ρCm r:42@r&/.B!]$tɅJ(!57 )tWmUшXke[hOu2]SWx:3]׎WSnEx Sص -U$gv bn:X.b -!kwh@^rfZBZoQS5]/fj}ڕ_jۣ; gs -`cFlbх{hW^&}!c3qĪr ~a"-# _M=TN8o%r=5FƤj" 1L̷6iOeH|3oA>Ǣ! /2`7 I -kb \7=Y[) E(W ԕq@2Rb(8WWfiR/$PUjNZ8LOTJH*JPZ<{&".L2C=Q;Kxb=ϫ+vP` vG8W]׋tM}QcܤIQ*/({(6A7(("-yLRZO{~qÊO`i[s0u 9/$C>"Z ÞLhA%C(I\M7sRݕCs3?JPV`0 |^ 5y@ o3U1Coo~~ڵIj~-*9cϼVqMUG#-R̃QJ(xA)!=hP.+tendstream +xڥے]_KP03 ΓMu%+W<8FB*? iq|T%7 '=kDS/Rhk~z[IzcWٷ?Ƒ'CrO/ڗIb-ҿ-jHo_^7-_7#HDF>+ Y(tjGXBEF i^gTy|jARepT"Tb^O +`vXO@%p7 \KjU][ma͋;4+@ XΕ" YxI3ab:{@hI/D}|b׌ Z>5R3抏#Ӻp@lF}n]:98 p"0Va^gh;d";/`E6'cA& 6 +ie恵ܱN"N=Y6Sx! ѨqGd@;Yv!r'?PlYx2;ltE: }(m'S iM,5ː?$xa*Jܠ:Zj22힙G1I>o_! +"+!m;&]C>'-@""2q.Um"w:%VHaLOl-D) t6):GW~s(w\]##>ّ ]u*CK ZoGqGD μX`L|9B2 .@FX3*87) .eI:;(ȔoNz*d%`U(np={[U{T$6 +0Fv9>ۓ /l&.g5m,r4oTluS8xMU >m)'s]:gLFg]̅ϔJOR+I|!S%273~(nPT483$z]lb^u_R]4쿐N$gЩͫ'RIDb J.WJHS}#|#hMh۽n*Ґ{ X/;x-P4댪)eǀޡ3htQ]mъپa-CМߌ*285 օ + I|P@mN l*Xِ K8<((Xa0M?vJ֚EfA¹ḧ#3$rxp|CD07ك "=S=1Mb ʵҟNں*tBgJ:Yhǃ׃m^*%Ïjݱ]>V;FB<˾u{?0xÂ2*D;h=(0c7]IjWS$^2?U<-V LHC^uG˂J0$DE=ZDKwS]35껑b듨7`4=΢heP NZF +[-d|]R /x '$KWd-ZIȹ>VaXe0KlH/*6<V }@jf<+R/F[l|p*\>t:uIM5CI: +Py^]rpQ/yg'wKD,it +:F/UX,` nOEendstream endobj 5176 0 obj << /Type /Page @@ -20071,14 +19969,19 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5187 0 obj << -/Length 1390 +/Length 1328 /Filter /FlateDecode >> stream -xڥWKs6WVjD $Mgb+$ZlNdR!(KrPX.oaHSAiJ4 V3bDE̛{JLfr?'qbe%|bzcBy\wחW˫ bT&\՞72Bο-?-GKG 1Mq&R(`?Nӛx‵NE%1HRsL¢F%R$2,ѷfFNÞwzS#>F/ [9(մ,"Ũ]p]*\!d'<ٵL}FvZ} c~[OH0`9HNpp\gl.::Xa,U$)ʟՊwX c Z63N(Ni2Pl{f &CUh;6,3\RVsZzN)'>H7{`Q=:lx r->׋ ޤuTQ?rpRLLؽ={1 L%2fcc7k$zAq)yqӬ9#~׆ח ^䷬S7u@ѡzG #ms1p)8yV -C&%ƅ&|ۉMhJR;Vw%V+¢ P?XnٻЌ 4D0iZt KD8†?vTk^cKJn׈;PQTZ m ֡F*XB"Rʂ7wO$Hbe^嗎A;ȥ2K-BV\@R2VrYy\:.>T֕T^YYg?y9t1 YAF;Zk9o iz'޼u@oU!Qs0"S0ޠ霠J5{73{"wșבd;,}H ' -syl'!!), -!l|A5؉G`DZ0(\&cܦQz/a=A2~ ȝx9H̳W9zg3PRkx) J)(ڂ:ENӎ1}u6`W ^s%A*25:atDYT)#/Ls[G :DHA#fvT)͉-?ʚSe;I<η!5*:9 *gT#?(Ξsv:ձg"T4abgQS4.HKw3&ljB3hip&I^yendstream +xڥWIsHWpT5M37'8Nx4|JrYT$P??oidR[_7*S4i8%sr;p.'K z`@I4XHd}/LgƘPb:KOUx˫%R,no΄ >/z{rui~1jtW&u#K4N؈82Ln' Vu&Y ),LI=EFB(va+tkә +PDK_3gRu(Yk% +V~BCaLd; vrueރE0g9J)@ + +~q8Xl$ +3&gѶeGhJ^(9y[Ծrаظ#`#L +dѻl>"6([\jIUͼv_vٽCՔJNC hY=lxJ8[l׋SˬIUTaP-K. +]alL0Ktnz v, <%Rt0X(bh8%BwG(^uSG˦{X\eU#afs{u*M;}1p-_uԓA:$ƥ#{(r^)H6*n[H6{ éI +7ȥrݠ[,kzO`>#)d{8EwZ|$\ŕT^^-?[dL"*!Zf^kM0!M/ċtH@Ey`h5{@]YSfr;4> " gx2 +y<"W3ʿ7БбG]ZWM7$`OoP~i~ j>D0dsөL +@C$ H4C_Fq +^(_̳9jad"MYHpTH#Ub8 |H0qm~Np8-Ă=Z8p" !1WGG)27 b73O3@|Sk:=3l> endobj 5196 0 obj << -/Length 3471 +/Length 3420 /Filter /FlateDecode >> stream -xڵrF]_K* Jٖ,˥h~H |5P캶\2{&S$t=?ĉr$,'d 3'J f2=CL^:]nOo矧3Y'T97<:|y}{y}s7~&s@߽z_n?ZL-Uh~/d $}:\?M&\ _ɿV<LxW:q~a6qzA>ʃ}e)]_i@/]OEb=QM/K؍R=MU@u[ӀE^>6}4f&{hm09l1!D0r Z !ySr O-7fSlx΢Ngf@-yh8iA,}NQv3/*Ts̱P,ʑ -PrRBi־Mv-.Z4l }6j`&m @/W Q!DaZ -w\e iDO^Gڙg}#?:P4Ci^]4Ro ħZxYT|y#LCdVT!!yQ!G)~u7fpsW 422H9+쩠̑˩r-b2I㡑SdbyJkE pYpĭ@[e2^cIao&I -]h}&'&H>-vCu8+$ lZP{̌;9̳KL֢e!!$_KTʛ,HN#bCIci{+zeXW-=A`꽋\'0%;EUt[9ޑCcOFz,`8}a~ujE?Ԏ &%<0M~0rwƘ0q.ysw }1F2pSCf0F,~@p )x7cRf^;,E Ksq} Bհ8jhi{d=IY9YR]Vr'h+Gql {S}⹜1 w{.ɠklY[hثբȇnfԦj3̹9t8[|-e-^mf>CDfC6dc{/,*e9H#H -:!`A~!2odaRݪ+.Ċx 6Xxώjwx9=r&[N6i -Tgy>pD A|A;߼^1:4o'\+GȹI(`os,8+!Gȶ@=UĞg-puƽ#.;|8T,D3z9 N Vd%K4_ca|-tLE^4>a}=֚e\I6Y/E`WI`u^M&9ơ4UgB}"t9vh00(jM-ouD1(ؾKU0_Sq1 /%A+)A3et1,):>uCV҈.s߉(50q#Z/gTd - :)R;,~RY<E&ұ;K.Jm`_^ ٗ mcc<3Syk蛕mͭ*ZQK̅as 00/q]dsօ6^YN<"^d` /*[]؝=5A5j6K12Em窂V}& tar:gә"ڥrnMʍX& -LD4(A!ژ%] r#wER`ix#S[1RRDt5Vja_j9(ԉJ8|Q@grXV'Iڱ^gpߵ"3~>@/DH# -d߶\$чmP2֢튲4>ٺ~[o -1/J}ew?/,ZZs5^{s^~↉/@z)endstream +xڵZYsF~ׯ`%``nmlKR\KZ?$yHD JV~5Pٸ\e3$ ]O'q\?I&7Yʼn +o^Իۓ?DDyn꥓.r|;=<ԝ8qͧʹ 09N4[&-|כrv,pG~?o?x&Gh{J$}7 |'7'\0U#:ru 4:ai4z0cf`n}Bx<7a]b=QMp.nDrO]?pAXW`rV/MñJhˏJFͧ Stxai[n6EΔ*ZXW3b/p7^E=ձp?~Yr~fH_T0RtcXo+G+Kt"%v:q=l{ڹmErK!;D28|oĻf.ײEx`4xEO^Gڙg糑 =,>G@cWu*z|煹`xF-TK/V9opDx/8zhH|^ztӃtu7fpsPV 5 +2H9aTP(T99h)]<%CcD4 +"Ee,^9jVGV ӭ2GF)1dF^0Y +^7NoG$N܌ +!]h}&'!x}ZVL;x(qWI ش`v-X9wsng-589E +$ËВ|/EST(oYZlFNCIci{$zeDW+#W0|Ŏd?q^;EUtLHա'm#<+4N~_rZ##D1 #gHj\skc7h:8dclTW$8zMydhhF,5,Q*UhBթ({r%fsj,OtKТ=p-Mr2_4텸MNt]`22GXcW"nxɛQL[f"9ss(p@YZڒ|"4+ ͆0+UǤ/? e9h#h +:! ~ldaZ۪+.Īx 6D|ώ j7B?r.RAzך0id<$"CG" 8jP-F7oOj|̸  0r.!to24ߜa6? h#׶P=^2H< ; _'FprG>a!)C7'3=ˌ AꦜQЯ$_lj>)#7Z"}\ Sg939[s>|~DU !a\t<5*v#/곚p$<,C'aCB܉sL|Cp qxU7<^T)?ӪGb$ 8+=߃;h5m,&߂(ǣBG]4ӶS),R3pGk]#>ui4!W؍l ȇ\n&r!fY,\R p?/|/} я^H6|3 ƣVU K:.rXDq9UYZ9Vf2`bSdRTX>pT;b!;ںqm.~M+k 7s)M%{lAՕ- +_::r ϐ~l1}KqrȦMl傘+ʄ$ o¾|; ƤJj~ب{SPjϔ+$j'>/},ڮ(K|Z__/`'۰S/]ȏ]Yeb%"׏aO endstream endobj 5195 0 obj << /Type /Page @@ -20204,25 +20106,34 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5201 0 obj << -/Length 3170 -/Filter /FlateDecode ->> -stream -xZݓ۶BLG?'v\gՖv<%G -I| $eIL.o Y,*0,I2i:[B ?~quCt -:VE}vxnc<$\{yW؋`P{nwx &z}3~~qϨ`ǫӁ*C6`~ - -T62ү_}XE3uN+ɲ>X(6BUf-jNP(D:X3R nJ6A'2q -l^^UX֫fn0$ kwy+)%} -cOJ8ҐNlc0xF["(vy"6=^A)K -_zCAIx6&^w@}U¿N\fp#[;^򰆡vlV^7,-*k4 Wj- 3`[U=8(K I,%rrPMɌbw\TUmL;] $'ΑruznH7p[˦x*os@R^iKdDVhʚwǟwbac -j|j笷][0#my`_uQ=ro- -%|;6 Ab6Ӽ7EO:T5ۦZkk7ogif -ܡoC01,7Y^n6VLg!# #*ȭȄD\cfYtC71W78aٖvGؿ]ϭpۜ?+H8PC:,l7_8JTC16S6φTc(סY-G~m 'QIT&RAgh:l*m)t~iDYff&Gh.h?Y#F:6VY SZs:xŧ](;2dV@ ,:dX#Q -B>d F8 -!:)dv#)Pr҅ٗk;FfHs}𠖇}vs]߯~{r&*ðU6>?!:=2i4Ę0`kb@}KW<ֿ!D,q^jG²ˢCbhCwYݾ1TH́A!fהղ}-`)D}' t#@G4G@˾O4l_1tU&[fz4VhB})L8 S04D -]wOG; 0|\1|%fDƒ(L}K6e,+t|c 8T.jFh{ns {:DV%"9!0@M>,^T'Ǘ*Ykvy`f(11pz~`K(0S2ΐqUqPxw6XnJ\gr5RtyyJX!< 4(4>G O.enFP? ->Ήt*(*1ʣ t=Y2*UGLPK2tM+{DpFͿlҀW/389P+p~r"Џs"DIzpB MLLZy-&np̎xeNhg9(O݀s!Oar̎ 4&xINޛg7<ͥh% ҙr~_=%GNe <<B0EDA'%j#b|xT|B$Cnش Xrj/ܟx;:gBLнg )Ib &Q GpU5(*bُKS(\Ͳ!C 3D*4])Gĺ82QS:;H!Hj>i|K ]QA'RdiFaѰ)b.>$  @O$@(LF;QB h rՆGK'Ѐ@ bFi~G˨ a" ȟ{һ$)*gH) |q8LŎCl~BdOX1qSy cl./y4'=}p B05˞_؏O[^QIA8NB;B?xR&)\2IQWf~;@PcױA#k=[aݨ^9=ԃv!1_Tqf߂8zƑ]ԉIt&S۬^U7;rdm 2ρo%<_W"Rs!MaHϏ j? Z*S ~eVendstream +/Length 3029 +/Filter /FlateDecode +>> +stream +xZ[۸~_V*;O:t&Nbw4l#K^]f2QǚI,P !yH}Q " ׋8Q$l. w8n⧟o`\Gzސ:zK}KigiqbZ*#>\]b-Fe}ZoYz5qxheN.r u( 0^]|8 + kf񶑰aQ db$`WB=}Q ;P[YZsa +,DVZU\\yuA'{uji9'"rj{y>uB}M}6ZO @M[B~YűAwzwy/ikH*p.yrGrm!R4Ѿҥzr<- +KjMl֡'gG!Lx.(o6ӭ5Ug m\ '57} +;^k; yn$ʞ:w/CYCzDI>unķ zFGEip6[-/Ο]~d<0cLɆC4/pȝl'}|!4vUDM*UqkM'4p #Kd]?p@P VBUq[^v*eF͹3t=  z`jcfJċpPet.N8;Hˁ? J2b +lǍ{ Qfxz\GŴvV|}h;ʌ0c( fL96ZQ7K+qЖv" +4dhUpSI+i*%,5t&Y!7Ƶ}NQ_PWW피QH9v:AڈJŏw'k$r"oYHPH(|A>/A,+tb/:RA2-?A'St׊ +]…[NA%b|(hA. ;`=뀵PnQ$3D"?M"PF2Nħڣ '=1w,zNmGfdгISPˠynXwFz0 PX6A։ v ܀yqgxs2/Ҝiuw{ڬWsW擻h=N!=jδ$2 <&dTn:Nw)? +_WN7pB%56 i5tBGͿE۲&S +ʊes(,h:+ +'Y1{.l(Ѫ3C] +CxغF~\D5N}p˯nŝq.7uQϼ~rӧ +[cwFz⚛w$ t, ~1Ĕ±k)Gn ŌXaX5p}lZry DoWA&QϨRh[={"ķ<k vV)mعt/&v +|&8=6t߶g0bot| k+d1RL9lא #tbNlcAadH&=q}-X1&R2'ɤ~~YZ sOY$%yΧx +kfs}r'CYR~\K&WT,FO_8Mf4l/{3r.N}z"1sQvM'+@}< ";l}k| l7р6؍ +|G{1'rxl#O7y."_{c3hit{`Sx"ּ*끛kD\NRcI\6O(ָOEG鳦Ygf(+{-0y?c:&FOz|7~^ Dp`:ln O@1 ϳb ')endstream endobj 5200 0 obj << /Type /Page @@ -20271,29 +20182,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5211 0 obj << -/Length 3775 -/Filter /FlateDecode ->> -stream -xڥkoF@q!bK.@KRMKOm?0%HIqq?˥D;A} ggfVS ry~_D[y}b) KۋREa _ޮ ~weǁ*27 ՛woo߾Y*pۿ[qp@oo8tQh -$?].0.{G$ſ*K.98MEO,J0V23Qh2#pa`bRR¤A`zDz :"oK4pX8CPd0M|wQ P5vXn` ;XH%0UIϿ1&Zs54 V6<Aϛøi&pYQ=k ~觷kk͟j 5;+ث`_oWYhV/[ -JTF .tI룣Yd+{R ԙO  ?*1&q ->mB/h З7}yVt06k;9h 08+j5]W~%q:#xmՀ[/ [f4 ;,Z"мTiCʏrY)bmE#EEdI)l8 ߡp0r_#v;Ţe;2u@[ zoXHȟyL -$c-P w[鶫<򨟉)*ʠ&sȘ(\6O )U{͡'_?OU3\hʏ;I]A;`O5h '3JE"ߑڸJwer_Ln Zqjr3b "N.MCq}Rp)sY,ҾkL$eޤ7Sph.F"@@v[%xj4K%a%xbUWf+ +kE2Jy.* XMV`1o?`~ -̨X%[NkdX^L mgtߏ1>nt[x7<ǫ} Dݪa^O_gdJi/sVN(v`Ī򤡶뜽`솃sW8.Z@{2ؚvXBk3hP2x<*xYS7^% 㟹 (.ö2 4fλèD@{n VfTf*)(w 7\aY8GV=\cmoE ;zTPFڊx^|Xy1s nuaF<>$UN8H"5a$^-2T;"je(vfi+ ]nP7ՔKD{8Os@z&'6 -"QH ' {i1th?E - 9œPo\}_-Lokbe8 ;x=Q|50HW`!'+pљnYXw*/J2Ǝ(+i0L.UIOpBǣ$i0'L?scػbKґB{٪ _ܔr#jS(zVcOۤPq8:mhDu͸mCtGg夲'ML\Wq -\f4w&du#XA6qR#Lrdk)gseGn>uMaڗxf0,a7ȭzR1_˔ 6M|4HY !rL{}3W?!xޔGF+g }e 5@Jk*A -k2${<н0$|a,aI!Jaf54Vc?@E=_g%T Jɲ鱣A՚Z:}bS+^5Z:g>8ԩmӥ!ov c"p -nKHrJGE[E1EU \{Iy 鴢rz{gZ  MIv9޶ng쒺Ipsҹ᥶7F moV<V $BhkD|9_u`g)er2|֬ C:h/StV 2zVHdmit"suva7iRb񇬫:<sǾo;CFߗ@l/ M'S#1 \!W]yIԛqFE &#mz$ Sea5scZRJm,`lxyy, -.@RFodTòa+V*Z7,<9c5IĉۙS0m(J0C> +stream +xێ}b@PhΐKpR v)-QZ{n3Jmz3>Ren(..\q_f^_(Y]&a4TQXD톖ܮweǁ*27 ћwoo߾^*p?[qpˋߎ/|{q-~孇2 4Fq0" +"v_$&MKw +%kePgЈ0ef0l`bPRyyaҠkz z +J 7װKؚ`x8, !&XX,($G(HUZ="/zUv<ĻAV{v،/)Jjba]R&9,? G]@^)NcV]G1dj\_Y D mP kJb" + +a:]}4hĢ&`FƨB+9I^Ԛmf4grwA8meɻO\K n4yyz pH-=9Pqf'D̔AS(2Vp#=ްbw$!R'BGꨂgXB8FSS4-LՒTjt'FY?59'⬋RU:&4iW^O=f ّB4z:t=Si|/ޗrK;5(]t` \q"5Mi}W <0GIS66N_W#\rV$qw2z8׋X Zڜ ޱ(bu(Hד'Qtg+`K{9шu0_EFW{z_aYMnʤc \4F49/ W%8.䨿<@i Wal(*TN^Z\IɅ((#FBS 8t&UǼiEIoe#nJuR&6T|G8A8:]&)sp(.}S0Hd"'5w X,2fA70()9rZa(С^}>w8^Q|+w-\'XAUR\9ѻ"LO +3S~96 ^eb*y]C]6 3- eN]7喫ZS? }e eI ,VVvGSk|r2> < cI nL<v!G`B--ZW7{E8s/`ͼXǐMjdThr_UzQRz3F)CZކ9^: ./]P +lՈr0Jۗ1[d+1d+d F9o]*LiN@y>yTl)v.M]"T d^j h 7-LHv%XYn _W蜁7r2D9PuaH_> endobj 5219 0 obj << -/Length 2562 +/Length 2504 /Filter /FlateDecode >> stream -xڥY[w6~CYj d;vӸD>}%D"~PL$`.9t6JR)th_nΤKy?;f$#Eh lkpt8Z20In:WNLng n2Nu0cLhهYih{4ZI"t Ƒy}zh7_}=W'QVHU8qfFБ:)VE GPN(ZQLxXI)8Ò26SD)ankpo;ePճ[i9c$EdL3OoL #d-GW5h::P=L{%ch-CΖcH <-g&8TIP\U˟0+E5wimӎU|hZTԓQ.r]rny?@)KLϨL8(¡Y#4uAJ `p| 7re]ArC'M"M[V)C $S(&:H"_dJB l\߳E@_^^0qUY9ΞS59E[VU0.{|(b#ST0 ^s̩ yB` ;aUӕ=fB'hJiv!M6m8Hu <WC! .[ qKڸ\'IbrXG<t֕զc92!8p}h"K8<ϐ{ .`m~)a( -t}cc0ss-AC_*W3Ҋ:8ؒ.[[5}*[cȀcnL24mi"[ze U;> DPCkyjEGYڰE\CR:^0kN~&[T9b&$RzvC(.{;7I25IT -5B^G&*2jo+:45&q)D4h|WiOihj,媮(}aI5+%B꺤+>f=dF7^d[䋆yW0!ǁ!9-]lT|H.2 w:G`{QXѬ=`JDfÑ\'Bս] *ݎ/Firgn:8wZZrB]8Iw}`^C1ҷ.e޽j) -C -hj~ e*N{Ws KFUFŶ2C'w-a-W: 4S f2[v{*/^;;ītꀩlJNs^M%~t܄7?AMirMŎv,oID[ܕHE< Jd]2Fh|$GQfDQIl4_DG:#"J }]&HF"Xf_O_ǡ:iwӱ n::MnQwS8&7?pOhɧYO0qQ?N~=-@/'y6H<ObNnOXdLʮpۣ˘0HOܒ*2MiR/ +-2{$AA[yh,heeB-4"mWV tܡdd)D8ͽlq-;J=yE@7G_^تHSm5EB!e=9KX\ +i$]XOO%w NSխ{lpa4vҴVz$"Q؈1 051q9I 6n@[ 5[$6,ucb]5Pm:f#Ӈq14Hi}_B;4%%O sliq/6( (L_R[ҥs붺VUg1 hq6VP,ߍɑ_¡ޛk6&P$"b~_ RQKKwb'q A&JzxȄ0o8B[u9fBءʅ*t50 zvA, XBV<-&E*8Dd~e,!_ۚ^?F*5'@Q1י+5zszh`I,v+[|Y(!u]JqP_S^|ۿ*^֒n:[ yp7VBێȈ++9mreJwEe*_LT%SqCuL>`ȍ0vmvnt<ݛy LzH(wFI@\ӘtoK.n?lcc;w]AStO"lc|탮jَpF;8yBtQ3jSSFtq+C8Klb2}jp+&"؋}mXC)sHn ݄ᘽ_gIt(VaV+ ):?ou*$w XCߜy-_­!226 +B++4O + FLz9HZ@m>R,Ty"bxo+h}*{*/4wF~BqDQ&~=lgV|$hrU}JP 8̖Fcu{ˣ5-Ak{{cl+SvI;w܄W?A3E> endobj 5224 0 obj << -/Length 2599 +/Length 2413 /Filter /FlateDecode >> stream -xڥYYs8~ -i1odڌ7Qy%D"ElhBK,B' B.D*IY?΄-?uuv> i.V7>&F-V޻oVZJ)Oҏ{j)ۊWMbTDâ!Ʉ 5bEU^T6olǹx/M  -"y37.e=,eU<[«j˒8 6a#!HG˷ۥ/#iF3iu][S -DzmضվAn/ݔƩ6+JeŸEVwpi"^\(18ivvu (^1p*wMk?[`h+fY^U o(y0#9%/p~+e(0$9 ,Є+5j@Z~(`D6/X)|ahXMGRDzm[R^d6W,I_;G批ejVVŰBGq]8-(# i%,EAޥB{~2/qcs"߇sju1{1 ]W6ŦO}i='Et&L_Ȟ 1`- -H? c۰D.JL:3MEt9b:64 01u) -ZFX)Pj COooRnꀎ.2_{3a2 ¢H`S ΢~QT•DbRD/Ĩ:!Du"_G本.<7&׶csjt#-J fy)lJD3ZW,Sg0ϙ!ynںӯ xфUOmaԬ(36pSe]$6NYO -(^@'A9ϘN:J쳻ba3el-rf1y `3;'d]]]DDQtJpQeO4%z sL;81ss5":gg)Dj<88W0F&#۪#nKJD8YѷYx0e^kmWг:Ͱ<$0g?'fxT˄*خ\eJ?J"d5vf I,w%'{BBg =gDڶ8E -Ik3T=A[wNrߺ: PX4]L_W9.p Ϩˏ T%ݽ5Q!X {:{y =B_Ge,/M?eFimKWut--9]#-ehg-A$>Ӵ]Aԕ-Iqqhm"#R"EK6hvZ\Dd:՛R6/:k]u y%2k+7y_P\//Ɩ;a3oxr2?>clGZC2V##e qa\^gCendstream +xYIs6WĮ2),\ss8Vh!fKH?oHR\S< rF"IetN +(H;C,@~^ÅA&jKSVޛw/V~XZkOfO{b)lES>]Q~Nu^sImiG`>Vw +]"BL]kf#>C ðYAI$K^s߻Aܵ D.4b/?B3aj)xI@ ~;I"n'EãQ5]MXGABvlIqF( ge}XJ%# HHq{Ehm pK6Tl@\-r> endobj 5232 0 obj << -/Length 1694 +/Length 1634 /Filter /FlateDecode >> stream -xڵXK8W8Uc$Kax60a/$&q`Cv^UDjZݭ[G B&.r%< `Dyث:g N`~cI0_~_\OEq$r","ްtnf>}g*|?EyYif|!O󗓧ʡ_&>` !H<c),'ৰ&fv0k&]cYI.lEك(UY)4ǻBP&* -ذjdm,,Qijs۪[}t;Vn<7%[nwn 4m`~So OoIc - -ɽ4j^6>Xa;/7QldW#6;عiYh۔G̪+ k\m @*G^z" ACfvaM[^z̛< ,,x\-kQ*S7k\\O閦~s34|B_ c¢|+#Ymȷ3deiŐakP~mFmpHzP0 -dDV",5560nvѠWLEfGi(zpћ$PFrA~@],V 2\C%]&z9ZLo]Uo8_ATeroKغ,xF]n /[.>P#.k$%c`@p*'jV|ɢXJo{ʶmWo[Pvj>Ш0ZJ#m('w,DDZA%8ɝۇouӡoTq8EX7kj*.1تTr)'vYӣcCFCBc8SM: %i -h~ dY~I ra.^JC􌜒 md-P9~PAUx|z;Ł:K V8SL<@C}%?^uh./#A[zL&H>:: }'?|23nyBePK̔jTrb~*O)ᚚk0сU"PY>-}77޼-<yZa3n}(%xD ++PGuF8k|=9X5˧V9a2FC}+MRJxd]li><ަޒE{Yռk-tCᶩˆy&> \ae]Sj',ÞcA.Jr<.:V92D{7 ;%5C$-z.XF`޴5U% AKa3](n*rnzÓ)4lu0t2={#@_A@WepF;8¢U*+_gbC+R"SsAmyM=!(Qhm]HHj8 Ě^r8]hP +OFN2NLY}NnO|ݲcH_c+tjA&ҖsD0F ɓ[[j`pesձ`4? +.%ilfA`8QUhˎşnAyLXAsluM0F x 8d3P}5 dQU05ew- + +9(TMPM%^f;AGn^C&xɕG(uӡo"ExEX7**1تLbUxd­M @!TOdrGP7UX+GSЭd'Qa:eMpfRڬƳI;eHHV\1Sբ v:]o +^+Πv/1]3?:g渆&;Hvk2j$O\J>FVkt9IM!T NC{{rcxy{0zh VXZ^+Z yi_)ac-O%zdAF>('.FIp +D 0E$2PUk% wpo޴lG8 嵗3xŜEbF:A$mݯС%um(/ϯ#bOrFglDz[U5;pL2"sMtwkL̞Vjendstream endobj 5231 0 obj << /Type /Page @@ -20543,18 +20455,16 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5242 0 obj << -/Length 1495 +/Length 1364 /Filter /FlateDecode >> stream -xڭWKs8 Whrg*O=L۴qOm-;ڵ-W ؊3E |B"'0 ISi,wl`D8ȉDMYƳ`1L,V_×_,^FJPdl%Ir3-|X?7 "r?OS.Hh_~w׋*C3L~ -\z7Lei9h޷ɧ(ZCŨT"!$SBpmq)S-xS+= Zմ˺6a~_Դ -Npk8E0ds#9HRD!r[?rIP"9Ө4B9fB%k[b_kY -wUu߸aƧhphW4uG0ܡ&#ua5>Z|˩L{ --5ǧdp92RA[p3 -r -yFA~NdWr/Yd-:@"NǠ?O4QF$"BO V:ZPi۾e\&CVp[m0–mwngs_]],CJa4c`{_л-Ub&t!K+ -h[G¼>6h딥x^BЯ}Ih-#%M V0ֆ0B LEϒ7Rԭ㑹ŗJumk("a.5U@ rᤛg3gxhfXXκ!zp_\i_hpERlFL|_.}m d: П"}[-x̸#9 C`XTAfM UH}ْ^{~PRy' jl`FoId z )yʺzma bpyuaUsRWA5-9skXx&pX}N_D߶% Młll m`&Ka|N+5?l~+Ӫ+.·Yv*8,L}HѽC3[e[.mQMDḚ %Gt-v0&WNƶ9ED(ƿ7p(3z7R2轝-g_c#endstream +xWMo8W9@E")JS.4۸Ŗږ*YdpHYvvBCrf޼EOf\fIi,wl@~"(W]YƳ`[//oo?M#)e(26Iןo"՛O=~)X4MeM%}IƧ&o"T"Ѭ/x?L8Y sDҒi%vr;d*S#G*NXl`"9KSգ  +~aWdxw7(vٔ5,wW.Զ`E2bqdƹ)ܔO29aC䅁@ HY-V਀&C/;7Mi̴If0[=F I~O11:h<:ڻrsh0HF-gNbynF$N|$D" 1MP.Fm=&J؂XzhyTVxW{n0g*c@H3!Ƴ?QLHcl@I/[rF)ɷ[Xy9av_4$7nph6kYW$C"*X4̑5 r\DB}GNJ%Ԝ_4VC9Zkmq:K0`W} y7nZqao^EKwb+X&$V^NcSl+N/D۳Zp>:uޜ8/%[Zu4yA1K#!^P̄_Y Q9J.jLa&:>XCC< DFb,;,i 2>Tq@)n *&,;0p؟lN"\2GoU"jWh*󂢶>6;σZ[VJ@,A4? Yݹƒ8R4L+s Iuck}{`-:,dc .(x]K[CGG.'q_umҗD> endobj 5252 0 obj << -/Length 1713 +/Length 1659 /Filter /FlateDecode >> stream -xڭXI8WSEeY^0&}"Vx z"/Yz0STump|'DyL8Lg]|g 뙰 +ȼ\^BG^j3Q^>Z^RJW|lj~9G.nnW7׸ (%']Ⱦzw_VogWUn~};v{2M=r~z*v_>> :u)+J&JyZE"pb{)//y|$~b&vo -@ uo5ZʁUJkoaQ[SFL ޭ[N)EY7KYL_Jl̬{_ud( }MBOPRm - RnkY(Ց0Ϲuz+j[G-L,t|M.({ -!Z;=՛A8o8msʓg͉.e@7YRM*j^3ೇqAq@PİIT~qS -Qg·sR ){+΂bC("^@'}k#NS'>P@F1D=_u5mÛ|{h BRA~?5/}soEN};:ӕ% ޤ}wH{W 6v]B p&}?d|F*RЬox-͡1k5ؽ!7vk>dh&d*3FlaWlF -L h@4Lc^aX- de2^$ &RCk{Ӳ`=Zq0RLQpjťI5F8*.Xo4Oy6-Z b@$.^b*C13KqGH7WWL$!)ZLg Ɍb~Mu}hz u0|G'a!QÂٽcV2,߶q[ՇdR5hq iLW7=7xTux- -FEwb oƎw8SWun$I+1mpۙ.Y ^KM$#sHҮ\}e̗e6.;A\[Caf(Vi;t. L`0OpDJM -øaq=ïe""סdм.ys}{ooy|BR@«M1V(zIDKN#h" ^H7I'n(g'ހ>օo1{AzjZ^Ȃ*IRRXzu}q<ǙoP2..Gg,=xaxW*( 4U,=.W72J~~O[$Nlf1eE߱AO*^Rt:}8f\ӭmkJp7[Al\M[q̃i-.0ccgv3j; GkJB /ܡ[W#H 4P ,q'O ,bAV44a4Q"/.*!Ci$h6OSC$ xG /yL)KsX0iqivՒZ'lZD?T8_#Qt ZD/+u +ЁRdVhQH#8i@D܎t(U6$ҵAab @,z(;q ;ݗn-y'M $(CxNn$Dd3\:CY1@xpkpuAѠ[`4%)sUh'cs-O %[ҩzytYQ0eY,-[A5BE-=膼@4#?H1m?p;gsq>,2?;gswamSQc !w5~zCzSԟe0`#" P6C:e45k9$.7tlQّ( +^X6Siߑ8"͜(pӋFO]Lx,""~yAaKGJ(rR>8G 0tVw]!fz)P}J'ޠ X"C&guA 8}<p Řs;'7n0O˯)"r!aRԐb$M&/)hG!krz2#8d8~ z?:ћxFDIϿW]~gL`CB^ē'"d8endstream endobj 5251 0 obj << /Type /Page @@ -20813,17 +20718,18 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5262 0 obj << -/Length 1786 +/Length 1717 /Filter /FlateDecode >> stream -xڭWI6WT"YI-z,8@'Kj,KS-bYK$|V=_&V OƱ*fۙ0Qq:/u,{Xˇގr~vJ)mxEg^Y.nLnQK{J^|+Iw-,H 1ͷ֐$~i%|7<ؙbxTUZ 7(EIdɑ;yη\1)OAe³pZ-WK4lz>GE 8Z*IȬHW0B(~ -DPlM0[0jba̯!~[x~5Ap<08n_sމ%j[D> qdFk>pEqoUk1qJ -O>|$T' Zb*y@ozIMMWPp ~QBҕN7ϼٖXr˱j`5 -];e_h9;9V[0Ql󚗷i(mG0Kt&l ?Ŵ6ْEfn),y'".qZxY#@ j(E$gUݔy -C'2T-AbOq8OyO.3mۙ!AaJwΘ䄄xɦؓ5^ù̩S4n #ZoTcE;wJY'RbP5HV#H"DѺAYmBݢ4CVfg"NܰFR -`䮂t-l[èR9xS P263UIo3<ݗfе(Nz vzpP{}W14F -d/C2HTnCV>=P*ܣs99ڧ-{S #;ݯyЋܣBRP{˷! P8Jdj#ko2@ȄLl>63~ 'y#h?mj4#﵀L *`w0¼oe5o]11E Gkx2D@q)97 7ؿ߼@BP'as\B'L&c"y}o]_Kc2jd/>\&7P};tȼ,Pј7萕"c-?@QRoTZ#JQ?BCMx{ -@OtذeCHx~].%Xhlm_8nɚ2EVa2#?{y7\=ҕLD_U+;uW%q )r<hGR>{< $_,/D%X&]Ƃ5D0Wӱ<_ uendstream +xڥXK6WT"Z$E=y;@7K֖m5Xr-;Jm@`Er7БNԉ)t8r8kH8"u:2i:̗on>xڕ8N7t?͇|vg!,J?xv4>~~3-|0ַɧ/M@4uIh0 +Bw\4|X4qiNR +2 ctZ6H |sa4a-NgT +q.D G`ܖrl8 I ?<J^& :B%&b} ) T#%H?;w#JDNlA/= Gmg$ָVyJ cCS<|u6,:Eݞ-"%e Ld)kW/sWP%ɱGUg B3sE08-s ^}Bp^3K$T{IM`ܿro + BW +g$vS4@lHw #H$t䬻aTn =la=vrn]*vJӵ{Y/=?F zV0j@P*Z{[ce%}QsfP! (E`!Q 1trOꦭY%=!jT ^뇽y{ov[P NHCS u32tHeZۙPJ+8OhQD5(H(aX$A)qg8_AнP!s>(ZVGP6_[th"HSׂw6,#Lz_ ka@y\Hk { u ]mKêR8 C"S&.*4)jE\8b?> Cf>ǼV4pug9QRn5zU æi, mb趭jL\nɃӁew,yԹw+yщ dF=lL$Cs>'z +'Hy0'y!44a%TԮpRqB{TY`i胱Rn ZatѢqZ'> +~+zր!w _S/Nhs#Y>$ڣHlL:v=1T1r[Ȭ`6WY㤇1ު/K~W}Os(l_cɒ5IY55e;[;ؿ[?{b)LVcIJaSM$̈'hX /0W:w4Q=N]c,bl(`+ZlUig\Ìw{%C%eű-O:6L~7tP`l0e7FpJ i_fxt[MM,5 PP\> endobj 5273 0 obj << -/Length 4410 -/Filter /FlateDecode ->> -stream -x[[oƒ~0D›ݙd8'xZG)Qߺ5<,c_WUweeI/D&I.3pb)$Tc'mh.71SXq}v;.x/?B}_?.3/m|,~ŇFF*E1yOo_ACk仸Kn5$~ZTQR7J_a%TY}ʫSXRy78밤ueCqFM>a$m3P<ĭ^SYa+J56ïO1k.6;pi __q@#K -Kiuf&+I Մ^V JiTYQ8 Vye5}3V*efͲ^0(vO2Dhr91#֣N\yiW8t%̙ZoY5" OnBġw̠m[!UmqҢ6uWǪ$-Cu-yG[a9n %#QVOP T;֭z墢#6*ˆ~1k`>90T?\|+T1[1MOְ#fbywq$ȴ6 },]v.@1QAQ Ô -S/CFݽ5.*lLU#B#s3 B&Ob1XN姏ưMF&~+0=$$\]\eUY Dg"DlI>A$Q}WQS^g`{ -6spxWO!A6t0 ff<Еe MʌA.$˹|Gp -#_%Z -`DNw?dϛS* fexDCQ- 1؜\hF -{3tjϙ$s&I|nS]v74ָfZUмp.)N6;ؓ.UGN/Hژu8d -l\F(f: Hh 3 @WKt]BD8_h\dNfͥ>){2lf--tQX.†vw7V ұp3,Y+Zn!VWjb:cm߀XKtbB]a؏|B3uȷ߫xx"P9mg`jU -c3BpN-}N~L/5@qp _p6V#a_ B&g꙰@a;cNlHulƖ 'jwو"b?b=Gҹ6Nb|3S~ JA+s} ?7PA; l9ߡЌ:Tý^.ӓ"عh]vs{/@Ts0KbFV(vE0 ǧ: d(|pDcw:TPu$'Ptq3&(a)/5>/SG A &: -}Xj,,2#վr zYP;aYخsIa_.qpn] :2j D&nei@4BB0ͦ >t hxªO̟ײll9 (izs쐉בLx';7 Qx ;swAXkl l{,ChA8"=ҍ|} -ͨϑק$'*@9u5و+]{W9L=|t))xDÔ7K2lߡ@MN Dݼ=il1c㐌`^`*A Fn9[:F:_;w3`R!cV0߆3qN ΋;Q -TQtb9KH[Cޡmlt Ȕ|Ð6n9lЂVW!>(BȸAxQ #42X]WQBtoD^܇,ȍ\ V&씱Q4w{`\Mv]=Pb -Ƙ2wA+'b!N.\2 -~I%MU`ΖBY.}UgYr%bAh*Jľʛ4]:1aw i0nY hcղZ)qiجSU䇆npB&7_bZ vHC9.[5eE!|*n~۴~HPO0F1ce!f)9*w"^bdN@d$V4 !)+nsl~"E4"xT~؞,E,"X%W^׊3(_)QPANa&≛0 ]ŸHegqc·aXdz3 pjL1v~>ǜrJ2'"7EAi_Js;v| Om_7 6\^gM&sʑ~<Yi*~VOp @oR|J;wGEUsendstream +/Length 4078 +/Filter /FlateDecode +>> +stream +x[oƱB}Ck["fZᘜV}nޒ 4uݥ<y@q2I׻#P9 M\AluOn}wK)bljEpn~Tއk$~H]В7%`vVT$.糿-8ʿ; |&P0MwgJK_+i˳w0Ms/|CA~(DžPOpΚc^R$^,>|{55lXmP-R/o 3BC. hv*%q3U5'xm_9Ki lϤyjݠJW/u񈢽6M`PK6 Qzw'njs{"+i,+3N`j,U-NvX5 !m"*ky1:~vYޜ {5=k}&#X l#׏\|Khxs e| o8]i>8( K ++ϗ:#5um0p[)SK{AiAŦuDbm~X!Y -BNvȎWZJ +Ct&EDP-X䰑¦1c.HvDj'£Nq-#W|4Vl'-6*_b Twγ㶁Rf=D{^ }o_5wڴ-z2ܞFtwr7DpJj%k.;J ۩3Jvq+2:Q*nM妝G~&T(V@ ti~cB vSPQX7|ͼRl|O9WscwX1) ,#Pڻh0e6>Bv+iwÚo]6L0KxXYF\*Cq%b [F*K6vGt2wKkͨF(p^Ba@Y&dž bB~!(3rUNvc%MS㠌j6oxl{zjO|"ODW.,s[NXdlm|#Jn13OvYsnvObǣ0,p_2c EH4>a{JT$H5n=mK;ܐH#~e98 !s[̚~1 6ATDZ ȟ.G[J+h.J1eùEs!F #?Q3~A+;c8("(wb#8i4dB>#1UT[:uj _BPhpD~=hH&yi{4tҽ6!~ RBӕh? VėДJmT*hWF'arD~ʈO\~N9@thE'Y;SzXͿNCK^@!3,AC%/,dEqO[m|=G*PDvod:k7bz4TH'^si`%z2rC~֧%<#Udžf7y /T{sхHi>J/ԮĤP.n)n8>evpf'Klͨ6kflFnahb%83T]%lTe$u&*зoYMAK&^u7rfN'i t0I%=R5sz8wEO25I](h(oXlͩbm*N{-8ET$:txֿDJO5.IL/W(hI9hIO[Z{q{(ۻsM}Zc'>۹L wmmYqMcmFdᤩftΈ@#a]lmq'ԹX+`O6`[]V?32,geu~z?10̏YGS[I-)a+ ,uMˇ3|@)<;`X2'5Fc2MdOo)WgJtcHWr"#rendstream endobj 5272 0 obj << /Type /Page @@ -21000,26 +20898,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5278 0 obj << -/Length 3109 +/Length 3095 /Filter /FlateDecode >> stream -xڥYK6ϯ갡,߹l==Jm%9P"%1C!QfoR#NryGh_ 38/Ek{qz, -Pi7 Sɐs+uuvj: +6h -)ӱk*6w ok+hv0e/Рę+Y9CO\CYK!Š+p?_ڿډ hq_9Kq)Nزxn8,hp -Vt!ا'n=i#A%ƚ\"aī(K Fh[Ơ# `k6(a$*s)pgGu3HIMi (|s[MeGrajm/ơ|:_X6<boׇ0+Fj9wċ*Z,~I%ZkðUq]hӌpn CBWmsW?[>avZzxqdG鸲ku6~:5צ̻CC!!* Mp#Nts*kM1̵#9M"tqLPoyƭ NxȨp ,&\̖孎' 3/*2oZں>H8q)]I{5.M%.Ca}#C59Lć5QtǾ1cK2mVV(ZdBRPauqPP`;}3fĸw:玕V14ȿx4QUzRMM&=ݴ{ 7)̳kB3wܲKL Vvt 岨 -LPAI0=n4Y,*m" WYz*F* -KX[ -DFmVm9Oi@D|7{TBVpsB x -;C(6/y|ƬKr0_0g#M~ǍZϗRIxVw"F~Є #"0 bPø9O05rX\_OO! Q}cF1qLy׶{ @r;f~ĸ s'CeuБҝH 魚?\]t%׺v2sA*D^0a$˸.YuBIveơX @ h![CJ  iS,MiKȍ;ďkhP_QipN#Zu](VlV_JЂу! `%ˏ RO_Y=I"&J[n L9P:_P@aDS^`QICAJ|]!ZPPS7 hVRUz-IG ic::Vk#`=-;8F?x_nO%i50 q*}$2QaxeyU2F@ۜScFS&YO#/GZ93 -ݲrϯ^AWմ^uC\aw*Yb@g1U4Rx}tST ?äKgVL ZYh{ -#%~y|0$2>K5؏eZ$kH^7@hˆ:1 --7+/AW>RL+w\`܌Nq褈Gx:~QhPnױωriyy箑ۀ<#aD9,C02٤{M羨epsN@1/;ڜݠzD$LŐġ<(3 8?pAc}G Qkʓr.L xfG#I}T3zlj 1P έ',lO]޺UX8 ` ʞkdHF i:y5# RG ?+-/h>qc@ytJQ(^1WN# ܽ)Vw?T你?n)aXD|XsEw3 y+.aeiC$$VJ,zn>+^{Wʶ@߂IS `#Uܱ*f[OT&tJ]N{ ;~dfwTc+BF,y6x-XJ&h<[}镉iaeKh!PvЌL' o/'N&*E1<(Q?sڑoq7;&p Em᠄}@G:[|G-d29ijB/{\VpsBw]?pA1R[<2xń^2×eTqF8;wC\gA053`VX Z4z b~̆_jR`|yg[DL iT3umM񺞃zf oh_1T!Q◗Nj#'2 (cQITEB"izQ]6g|S踁<=H1'VR>㈩my(yrȵ(wuNh zD@#W \FOh9 +6y*N=/6* +$`& wk:wU+tNy٘>y<Ȕו͓ "'d(mT<=, %u@74bI%Du .p]C8ud2XVލK'۠fܚO %[ +hJ-#Gdj'D +{>{yЁݠp0@IlTĮ]#~駅 +r8߲5T2юʥM}--!O0wH;9ЕOS^9nD́ꃵ' R$#pH q=L' &1Jg0@%8wB2t9{7ŋzv<47X9{tR#K RG >+g4:' +LS~pÅ}1п_A?/JY`0OwHOIJ.Ǐ> endobj 5283 0 obj << -/Length 3225 -/Filter /FlateDecode ->> -stream -xڥr6_R3M/}IsiiyhTHȮ{n%dΨE"7a,Wa"ZJ0ւ|sq> ET,nF:&&Yl ݧ:I@jeyJ07W?3 @||ZIpHW?˯?~gI~pft*ͯ-pQQ`y|F'2/~@wX͊ؼ,T:MŰRqx(4&Muk6& -nv%\;͂7PJp]mܱ+Bʊq;e&:p 8 -VqG"x\Y`U\]˿=p - 0ŽO=T3(d^R#q -z^CT Ody|W>bW֕svpC^Ak" &;Y8^kmX/ GXwQ Nu Qyx9>i 'hGEQ \}2KL g`txhw:c/(O5@sl0Wf)|ceI6or%\56)Kl $p<#!zW6~u3C)L -QуRpIH\s[ -:&*sL5;<̼ @*kTpFZG_zMKJІz pJ --޸{(; #ki>f!pQe9/b 8~jY+d@wG1>!jF}_ "HL2ugPעH1`x[Xey*N_DTN`Y]9`Ţ:9[O="PtOjxqݸ|q"rg>\g -b1qWģ0Bp/5NC/Y^q< -rGђtE+Hüx19_y%-_Q;ߠӠϠ5~dP`b?dH~WQ$N%"[)h@0жi_ڦa%GR&M^8Egs&h*j,痩 #w9]g [ڞUcv/`~ˉ 1Cj䛣4nYLmwDq𹟅CnJ""Ӏ_E2YΟ1d{jzlD7M荜vAQհWJiMLj -44?UxVQO -$йP -ߡCGXUw(p,הFcN**O:UK̖Qr6ힽoyDZѭu4'~sdaP ,p R!V|%ށ<cIJwYe'GB-<@J)bZ@Pبyj ,@rSvDh}Ϳ}j }R./!TK)]0:;xG<#]'QAk;\RN-[F[6k,!Ii۰IŋPpr-i◡uCZ'8mP6҆O˃{[u#cK.IVp8] *q S0Dvl -8RC|-NuOncǾae]ZY1t`kn-7J -eEAY"UŤ$Ϥ:BeL(k/q:"X64F;dJ] SԂ=k0IpcZlHi9v},'u y8Vw:4C QQ;H+7y7+Cg0dYq\?SڷX<吖]Yc\C_8Hۣ%^ݸ31ײ,Jl!L2 ~5N -,l;_{c|m4ԚO\_=1l9!Dwl6Evvg7\I#,*FK5q+-&C'/Dendstream +/Length 3135 +/Filter /FlateDecode +>> +stream +xڵZYs6~ׯTy(7HZgġ4\s12xXJjUVSR= n%i5#&؜'HNbaCqmd>vHC%#v<-G쮢y2CeLz@0X4T31i0 +`) +fV3kdW<-7ek+_TN;$ Gp"c좮9 Z@mGJr"рB!א `.gyˑ$ W\A5L"p+C~;=S0+$+Z4Q)kHܝ6όXL..倱uJ2DǎC4ħQ%r}X+l$M @2vyҡ4MJ:Mk.jO9 $sc8(Ø,$M5֦FկX}0rg7@|U!q! vo//]:F0>3oMTd5|y +ӹ=]s\ֻa#;ifodfKڎ'3LgVIZ6YyQZz%@ 2,TQZ9Ih9=viNcU񠄰R%YRЋ a)QX̀PfWZM- |1tndSND؎yN lʃ-s'FV„#!sIl$%-pEӻ-Вz ^@4oG~$M}4&L D5k#XTC۷~sy L8 +/vC2/%$/yj)GSkEk.l6lfv +8ԺJzz5!7WZ+ZK)۩v೼-Uv-J̈́;۩m]rG\y[ j‱%˱ d94G\>ccY /= rS7P|u{}mmx -\H;/xfT&! 682I=nؾ)ϞM&y "/>y[(qlYHGx -kex ۤrEĴ"b`@4ю=HA]Ӊ=Tpݦ fiipiP+Xat+%k!nan\E3FM!g 0^eH덚2(wMEd-esǘB%K-͠,7@s49H9A]-0gphGM< ?Y]i7u|"6;`,Z|Ar' -`⫤,yCMZԝoF p]d˄DX,&#5ؐ%o{A٧T_6DK2/p[ :F&,>i.2x@?EK$hR1>9RT"$W+@)/|h"9_7PLwW$Okd,j>O-XzCO1?Iq"rT n+~)^:`uڝ賫̟6&3+,;fKuBx}vxi|^12yR9); -nS.L c\T]vB{| 'Qԏ vȈLxk%97EG"Ks+\ g'ǤR y}o*Vm~zZP' +ߢ4* +UfOЎBeÕUke/W^ͯLBBCE1zg0A|X88B4w=Lzx=owx-oW2 z.dV](| 0,"L5N, 9 +}}-hykEљ >e@_:ԡ]w%fe?dX?Q؎5|a*S8%&*%ݾ6] CϢmn G糎`aZ|v|܀Sd-ĹHEBZlЧ[֟BMk[cT5;mqXWxJA$@T$zXdVV8^pt= ;p5̪y֏3(D†gF$0q5jKqcR(ŞL5P\c}eG_~c-Sj5cjXZ79FvXJ\9+i-C9bpHX7oYq==|F'|G9UC"R@Aź2MGS)k¤5L] |k)%9>a{>Y !s1-r"ؕ HQO Е9i 4if .Z̻Mm|#JC`|1BKM׏+ytVԚC5\N1?@v݂UF|fhFW&jOiΣMOr͔-*tłЮ 鞏w'B:Pq`Ŏt|) "jScF" yyC;]५a)rqOuw;>'D]MKoQ +`"(p` 3Uup2Ҿnmkc q#.Ñ}sJfƘFNC`s;p$Իe? vMf'$d +0ݜ@u2Uquj1StȭIfc "qDiأox{3Bi|Rm35ĔC(>U,ѻҒ෰cw.,zBa/:ɐmAn[:vWXܕs +ƉLVӬҊCzʒCq($`{DfڄGMWWڳ׺ y"v;`ߙ ٨@r 1'@a$ J.{I2Ic.']&pS@L8b%U1vƪ,1g2VFFҢpf )1$ $#M%xcaNdApx#R޼}!kL&=Eq}sZh1)p&63tI̵ HŎ\^S\012V9* E}B,h#V&= g*z RCܓuE9) ]p*u..'aH"(І?\sS?!"vc֮2R\ /B#!N$^r5F8{tL0 +q2o| v]{x퉁Ϲ7|6]XqǡJn1.NgT 3쟙IdZ *A/(NMiͶ4];[BB#V~\/ +~Iʺ:bEHi\dggeHӟhu2:ztBL{ vo՝No EE{-Bq0GO#fSk2eCyMq?~VYR%g UaCNffS*;*HT'Lf鼤.1W0fڞ#G5iT„:dz7֜t:a)'i,6 ߖ3;2'y;{cA?[%jBJ$낱7d!.s]%UqثWº>9 wʑ $B4z,Gm薻mZ0e}/T> HV)L%O;~(SnѶ4~Ax$4'ܷ9GW[*gί]NozJxzЅ(wkBNR;3c *`ȨEu:=+QZ6/Z4J;>aRB?|U"a#DxK|jc gAԙjBad0T87e $D$?M?s5~¤H.kNUendstream endobj 5290 0 obj << /Type /Page @@ -21141,23 +21020,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5296 0 obj << -/Length 3466 -/Filter /FlateDecode ->> -stream -xZs6_}S1$C8;M݇DKL(R!)_Ejڛ8vb؅pQ"][bphy{ -RH/ބuI8jqzWK&2b/Wuǵo߼_>T/U{&y7|KRsO Ub~wg)t*Pvlw JvCq^PKYȅ퇪C΃VNs]V1 p+ZUޭ|ad!Pҵr(-^g Bk[,Uem9]o_c[%qB>2HYHD;aY#;p@$P앩K - P|iK?\ʋ e3nޑi -W>QǡnkzDja]5P/ I +11-4.#tQx$f J,uӒ`yV9c‡:֪RL)J6Gn6Bٶی o?oNym">hOՃWdɂM XT8Hlme.vUrb- i p:O75WW}UAG*ǎgo|IQq^3CT+P5$5.i:-鐧uvb\T ܙEOkԁ[Ў R -bǪޥ- zSq#(k,Z2B!仼HWmk}^Q ؑPEoþyzՠ`ڼ*_а:6KHM^r0)طotlAil;/Ȋp -@P}w|:i/[&-4]igHxrXNk]⼂pnաXsՃ6 Ht=uiȠ P3u ׁ,FBVaGٓLf;A=1X:6d!hXkgxV(:}f[j9>6Vak;h3s.WJH14@euMbZ.vr [)HVjX_H+}@iw7O'DJR%jET~d*%'gB4-$R]Bh@ڡƣva_>/lOrACn/>=袐'^g@$iZ^ [aw*.ٍ KSؠ7~oBXd'@/VƦ3]!%m6~}~vWQ!%GZuh{P5i&8Ŏ.S-7[X) n:^q?m7*:,(v\ -iTm_FiBkaW,53|:CHH.Y?`=;$t-\w]0}}M- ơd#-@HU#X<lۧbVjnkJ>lu}`i)Q6h @L Fk[ZrIֹsq xGT\' ^<;R4K 3b*AYggGl/-VX0"4#Y(C/R룻Ər IAgt% X7lUgf1Y|FhF }̌_ݱb;Ϡ͠+D]eR)uumyB3~CɽHzFv8^ k -4Qh!B}S18wЌC{}>Ɲ;k[w <kO4uz4ϸqW^l;nxמhW!"9eΞQCy f$$@I"g>)\\QQ,{ = B4@VkId#@hF!4#:{%:C! = BDvUtkPϘE GM܁cw隢{ߞ^UEUQ>Ӹxqd0 Nflyb$fz) _OwdW3.{O30tmV3ڳ0sh퀡4X{/P ;c {Ԙ@͛-ffx 1#"=ji~ -; - *Syz]]|$@A{\c{2HЉiyQvw;'`dnvǽ3IcgIч *s0B"Lvo C"^u TӼ`DUl?u,t|9P7śU` Je(D0eO<\ f (JoXBy9]02z }~RDZ1mTRzIJzX* |y!f)G@gF. %>{:'-TL;Y W-#]6A.d(jƭofC/t6QR->uj*3҃NhAē4߁Z.j"$,{4|U do57ywF #C$poj-#OrhMpc}C@j\՝OTe<n}Y$l99';br=gּYr931;=lU@hbiqA>tMD6+iX.] jQ@:O}&a{)C}\EH4LTtdfb@*_B0ܗ%VGurxKݫ - $`lO{/qrJ4N:c6<ãjmZ,:{ FL#tr'=?"9A(校uZw5+-_Т (-*9tϨr1x~'<{¢&Ίp',#5endstream +/Length 3178 +/Filter /FlateDecode +>> +stream +xZIs8W|" ejII<0Z%ɯ,\S3* އă?Ff$0M'Ց7Y@˻#_zxzqM?]&W7j'0 ?sOI:8K|;RP;^`'i\qC?Nʢj\Hף&s# trel:RQF*,ܦ&֙ r/!4R/Q;[fLeIY.QTX ~39ĽjY#"AxA)# 9ngPN56ӂ~Ȃ1-xN;{TґLAax 4,7l9Q/ ͤ)z^7](pg)9;BWag7;r7` +c2@qÒs9F̌tnzS͹wOvׇeLzCmy9(Kd1r$ +݇k3β&D̎qt|z +apul8fҰrB>@)Y1ƜW]jMcwlfUG{?D8 00ܑ`,FK4J:>#]N +ɎP -ZjfH-d٘0(2 +E[0qD+G=Re²f+͉kHI. ݶࣸ n:v]o| |[is +$" + \aN/e!sr$/30X6`PၲX#W|@8F9I0Nٟ~DL۾J\.saft%''vŴv@n`0\!)$-À 8J(H_B)ѡ8It {evYchPl@c;e8@,0BhJ f +6i)9 p-WyH:Gm]8 +: ~!3|]S" o&sr z %ց풞 SWYQ6NRD9톮rĩo6")v&_IS4dA`TiG<*xÇm _J5 BOA+fMWLŠ<_xJi\;{RF ƀJ %u-XF%#PN^w;'m6O♜2tK#/U(}_-al+?v3QZ)~[6Ft1qLz [ an2fQL>_@M[M ifc}]i + ]HF HEOAMj"iE"s2Kx)x̓)[l. |GV)(X;[O[JD&l<8C^Ⴟ0%7wyhM=t_J:ؾ"PVv6%LuCYز3Es} 4]C&) 4cw DhS;8}ӱW{? uc Z—=#廧fHbdmF3B.oJ2Suc4vc왆'J8HX7fKjгG(Eа`J/МYR9,N"/E Κ7LrhO)2l=r1L\?f"ص<2endstream endobj 5295 0 obj << /Type /Page @@ -21186,29 +21069,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5303 0 obj << -/Length 3771 -/Filter /FlateDecode ->> -stream -xnF_!ei =H4MM-R7Tf8("933gQ_bE^e_aU ۇh^狇ոOEqx(s7 C'Ƚ7M3ݯw7sϣw?~z" _p7Y<0O߾^7zXW_p|/̳}/Q(f+j*qyq%-* -i{]~E*E;:nna޸*sJȜaCpYy2< |pa߷b+X7n0t;y#,}/ Cp(nTb{uHoܩI`wf3k_YpwYJheNa[jhkq5hAWIRV` rhryjwF`Vx*2;kNn͛>Q]o5.ē4Z 摟Dϖhh' m ӓb1B?D .)q6U6ö9[Ͻ,Nf՛!\ T@$+DuԲZi O2$BѴDzOҼCb'm!+HXiv,HBhLMa@Pݺfj* q`Ms@IE`aw:8XR䅏(3&BL+cK5gˢL LbN;\y hBKkZRoT0h}j2a+4XS^L|]V+n6{[4`%nq$l]KW'wUD& -ƜGHFw8E< -Ew KJ|rfdL{.ڂ".*׺ΫWM_E7[qtm)k$~Q%q"#Y3jQr,B a'o77QlV`9JL*%&D$ uQp fӸ;,C'Vy!hB6VZ) -X?qЦ0BvW4<zh;~ g$yI;.ؒԪ)=[aLLv]׆27lPœL0XZZFa`֭ RExzi}DִI)b7#k -jES¨9;D|7)Nb$9HR'K*(! ]tXLśPz3-)A/V~2 Xh -i]ԶN,$?W-ɩBGhuгj4qWZHА$y֣]q܇dGowX3RQGkطL^6Y8e+&^=j(l`Bp7qV[<2kmiSO═S˶&.#5*/d_ -%Rk؝Aæeqa2m.VL~ѱBgk]qDؔMw!u!{@44f -5m#aMG\otbʙ!"AoI,۲OZ#u*fO<횂y}jZ84 fjT&þ{y6@vvաHJ@V%2uk9^qSCox[<Q~0C+YVqq-fGΛ]WcMf]odB (]=$~ĠK@جMA{,wS`1V#hYC=4ϲdfR BTC> !K2m`n`)/%TxŦ9C3hUrjN2I ډ2͎)gc|!>Y8 <gɭng -䟭ClL5 -6b؂ja' b R`^{L!]K, ->$530)CwW`m2#LeW#+/ c,JrI_`>JaK֒d'cy؉!ۓ2# -\.l Rk#H1pf^rm+_ozSIL-"( lr$Z)|$`Z*uxȶ0 -w,Wkfd\2!p+~V=q,̮'3 ,=7C7SRV'Ȁ$;e,UlY -KvZ -; ^&AvX *UB Z@"41;QOONd&ZmyB_iv,0%!u)S=NRL!Fp)aX "GH0Mۍ_'Gbb\nJ)yL-6eڏ[%^_:PY^[e]!ZJa|D+$nH$a4MVV2;*x9U\$$)x\p*$/:W _/(|=9oyJM"PLы˜<$ {<=OI ~N F{Id?<` Tچ#<ν3cDw0=mБS>?q[X@0-Cu V_E\\MATMa$WpjCa(\)yjRsWa*Wp4DYHRWəbY[6=.Gzt|ެY*G'~n+39U!6hߟ**!{95ʁ(Fl,D!Fd;1RZD$LcWt `LQ?Hy=4(蓹$\W[yj6.)txZ Ș!EqgϽYl8Ѷl@@~,ct)ή^\x8T}qۋtLPK͠K:4h**l۴~J2LωLr/KDYnbu q*=Æmg)b<`X Fv鋭NHfvs|E3beۍř~߷O~fП-{{&E;EH39~G -ɗ2),47! FyJD ,|phB{Ǟ,Ï/BG/0ʮ*YK \?[HB/MFp9ox4LJ@>.>MV?_P٪{Yx&㍕TqK ;Wendstream +/Length 3607 +/Filter /FlateDecode +>> +stream +xˎF>_!e9Iqqf=SG$%Q!)'_fS/`؏zWE"O0.Yq/pW@ iSEEX,Wr_7~^T7~oo"Go?{[ioq7y3л_^7pׁNcD_~ `UExvDE]$K{uwO $S0sm%3Tih׀s^x;na**ȽaCp5 kl)yɶow,`A{?s&E* 8oFeM=Rv >)bĽ)m8Ob8g_%I$o9PӮt"{vh(C EwĜI ׹,!TA\̀Y- ;\4i'Z=2ZZ mEccאQS]7&ƶN7U]>&;ݡ!=UƆ^C .'`c]tprÎXi2-m $8,"6-( ֏MJZ3,ǺcjMk +cD9xh jt xG^yfHP'&yٔ[ xފc'$o{N @\#J 15?]Mǘ_gBvX'! 8BF02T a G(jK|]ǭ<ȉ@gq/:b`}B$}۴@khLoÔFZ4Z%3>Nc`KfXP~6lC13KuMN{!B] kj(őci Y=*N3?4KwR~C$b-O%v3ҽ`|g.;nXnA"H|׭cW*!@fþY7f܁,8dx~JL¯ & 5h.ޕQ>$ϙD×Iq1u;d '}y=YRA q\rot*]2Id#HY4փh~)+sq6SS :d\}$O( +ɮ%F h-Pα0!I84Uͭ+ɎDZg*x ڰYbQmqgLf΁80Ptn~?Gxe&',7H# ZKe㦙-1gmM$jKGt]kT ,Vˮ?"*D<L;K#Ǿre3Q\"dI)a G' +=olӾ +8@"clJfE=YO3E2:' ICCXl P30̰鈐 @)/W 9-+h[;U {j)m-)3%yF`6JQȰ%8}o<2/6 pܮ; BIT&I\mR+.f\OP+dz`PWZI(ǰk@IR0@#QA· pX"iʍMS:иaEss" 2͞)c}!>Y8 <$2(pr35 N!6xR)Rb$K\YSeb"EMsQPUN2X aKXC2ifd`"S@7e: +?A5˯htZp6H l2=+DlcWMsk,qhWZ݀dZ@/̬2^ܮl!fl䜹Qcv!A_W4lbg\8[ĠRO|lL$łi> endobj 5310 0 obj << -/Length 3752 +/Length 3434 /Filter /FlateDecode >> stream -xڥko8{~E/k5#.p@n8`w?(h+[$ ߼(Q,_q(RS3 @9^rZyq|X9L L@f̫۳w8}O;]1yNtETOnxvä|iMnSK~3-- @Ud~;/| GQ^`( ˫3S'ٿۭx?緆⻡r#xcFkWy -eYXQxnw::?|skC r/y -⠇yf?YLgzR60[d8n2"7xT/5zƓg{OKla)|i3OfjYhpBdM/;I6+qL=YGZ9."/TIk4"W:%1Fj3ru]V=6YݗUk%ι -f[7 r˰ɀt<X$єz@^B(#?~0@n4yd$Yp,H~)[T97Huأ" - &C @n?*cY75M3'< m0e:|ǣhK(A!%R䙺ɋB%C^J&}ȐM;)!: C 捾MHEr.}65ǜ=!U[?cOPBQ #?޴y36'(3PSd) -:%vnn?RK>zjs@ϋ&Kh}q@uLL4=` -'w=8|ڤ Y.)gyhXmglۅ~\?)L 0T>JF1r'DžCάekx:S3>AJ9zɡ +qh[ 2}wEujB{CbM[ϥִlXT2=7hjeD )Ф R./;*絀KhՁ#Jʪ)՚4w5VE7#5ľy@CE1YvZD0 !zV#_Þ-E,N!}6&n m#ycTJJ34A0~yd'Wao?b2}yi>g_fK)|#M?/gq}壾 8[BGWㅓ7ܾl#&Y?xd2TRShVLԈ!)[7PrTjDÝ&o,e:ؗZ;eLEiLnO8.XI:~ZǬ0P[Y񄼽 H*N -`ĕ:<wtB\g3c^RμͷDz@K>7NhĽ )>P|ו=Ap!'t[H&> -DpQձ# -Z" -ik336UlhJ2ΚバľSЈ )%>gxA%ӥE uMP]_)nGA>0JIw1fM%^_S|!`hxM!p"Q9 8C'Q8P7 -HǤ J< ߔ(Hޯ~ğeP&+9pO~2Bw ỷ:B* GɖZIGϧ+HG^ l5=\\<]NL==uT -U#ծL ׸0<&O75)wҋUc'.r~`{9hcI?OҐH0+t#4Yr֏  T5zFYj@F|bX8njI{,T hێ{fsϟ"5Lq."wdOaK-3tyAxm!+G劭*b|vvky6ȅ19e`b[Gי=%e#dtd6B3c$DEቯ,SVyϚ>UviQE -jm -T:>֊[L -JaM 彁?hDﭘNg,6u'p1'[frO9rFށUØ_{ 445tѰȞ%+٪d=\|Rϒ; ~*_]+M[3=%ٵGB6 jI5참l9DE (w -wEbEWֆd<$^ _:endstream +xZ[oܶ~XZ ~I긭=탬j?sDe'E€")rH|Ṕ?wYOY9qfrzJg(' +M\GN:.W_o/^۾[nv'˹k]rٻw@k}Xby[Ws~3꧓WTvG>3[?8Oʎrt9 B_/Q-[/R^ QILq#æ8S;NjUʋǃbShN٭a +ޣߜk՛V]Wo_,[mK;u5׎0ۮʮ܆B7JPKzvUCH]knxњcW9㝴ɟ.h}Wc.n𱥭:>ێ{fr3 2nLe];~"Qdq-[#? :Z(SS" C%_˂@ +'0C!Ρkx=~Zbkja"/FݪۮvMlN.N2 N7 rRiT+iqRwm۔zV}F@hC{^7-ʿͪ]},GEA򝢗YHY"1^Ov-a4v>$LGJ*}~;xh4w$@V B 5Ůep4g!] +u-71=y>r+K:eB"QB0C+M&>2#."}j l~L,FԷT̹{'|X|e~ìV(nn^ +3T+cu6oD:D?skS:21K_))"N ˺7ehDBXI qžr}F,8<Z2yCB}7[>j-Q_Cˮhh$m VUBpk(ܕ>h}E:#sJ9CMY -}ڑ$x|sl)b*IbVb I -OT6TjƬqHl(1h?*0 )k8imJVsS*X6L 7yOoiUS~-ڇ]ǥUDmL™ t@sAwx6wO&% +E5:p]Jx}Q<k (% xd I؃@XXfDbMde e?UrfY!;Rd>qm,o퉕Lp4 {dW!I*mdj*)ȏ PVZޟ>1pHK!a& p7-,]S{GpP  3 wpz1 +l+tD6Ek*z*[%ro5;KC9:>N} +oֵC#\hAI :*\? o]\UH͉إk3=o4Pӄm^EFY8f~ؖ_[ y)^'5Ԉ{| ؈UxQ)#>Z#]KUX p-2rwf`cUϺvܩXB^ +oN"1q+.'^.&4㚛Bq8V9yd5ᭁsa; +%ާ%0 .iT8@9&&ɎzuT59o -i>M0+)K>D$M'BdP1KR aũ:Ȉ8\|I:Htw|c[dMu2z/M~lYSi`zZjV1$Q:qyGːՄ!/+TYXΌԿGQ,j02+6G.,@;{2|T +bN】8 ,o45%~L1D 9B.1380lRso9 Uc]5FM7K 0\ǽŗou%'3M@VLIRTgPX"ds /7JQ1wʢfvze$$QtlI5Ba5 EMA91@?i;#1}U4-ًsBi4ā΁^5!n6 4xgm:ƥ;=\\.<.,+&}zۯғ*v EV# #4Kez|9Mt(_tr3Y =|r{G˳.9xawt(:>OY8lUCjizaTӂ*|eB@>CJb>Z0UQfG鎧S $kKi=/?%b\Yed+႟(iM^7YWbFaRK)^" tLǹ 1ybXB.LUM +FꞲy 9,(8=~"&*7̋,;fu +%T/_ W> G!cQuyY6ZX.tK05=H@T@N{IgX=7V <^{endstream endobj 5309 0 obj << /Type /Page @@ -21329,28 +21196,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5322 0 obj << -/Length 3267 +/Length 3108 /Filter /FlateDecode >> stream -xڥks6LEGSWI_\Z,PD93^ELOLR2$eN`r+΄ŘY8ςl2_(?Rr2/~zt&DOgIzo^Ow/W˫8(׸4ޜ.v˯5ϤL<{79y2d,eNag"iٿzRMxثDa B 'U,=.WNiiSdxd̄}),NUN3PTB$~$JLD$+ k3ᕇڣ/iNODY&g0&w"ZLjt,ӝ "PE$ (VJWSs&M׹a,L=0i'»GH-5/f>BmLML! -)PU&#e[6~`dVv< aE[z+ު+iKuN,8/;>a{SZݐOElZGo]v$kC+@-ECY2V( -bAz{FGg೔AK&Q5d'4B݈ﱂ'ecv/J,jc*B?qq8ކ- @uG֐xv!I!6m g{Aw3h|'DWNϙRnߣbPLhG*:Gr0Pv!oX/M0+;2[_hg3!ͬY|{'T =4l6G'KՌ.ː;D|Ҟ|:ޟKAu.?7Xؽ79*ٷi oktI`#uYO !XkQ*@v t[_)!~rc2( N8'nHU+#Ra%(ެ iTш̦Jx=gR sٿU+{ /pb8_W}mg_*l2 -P.ޫxe#2}? 2ColxŘr92?ј6ԛX*Py 7xo^ܗ n"WVbՅKHf -rGшE@VVr*N|p? ^jͶ2,6if -3PX)6XEǧiq2BE﬎MkbWȚ׺s6y7Pҭl8!3m˳ݳq،^n(A, ܵqWh|X)בv9.cd6?  .o-v -:+uXy#r~ږ-ќXh7_eI+DI#ġa?6(w,5o3 J:i. -;e;R=Gq@/2f*n OQ5wV׳^'{B/k ++o&'/Olt\RBN@)" -*N_u"2ʮ/b,\+3S uT`vŶ@Cʀ|IR,,o-钋P}#(vxS7/pNzR(?8r\Uݐt JsBJ8+7Ha -^krwX2+zbzs*Ȍ25X wyՒ$6ZP-c;0 pLZqNN`cL.۾clצ$'cxice' -0*a!{i u_+T3 -L),iS'az -?llƕ>+|N+:!$W_(#H_>Qۓ'nlj9)a9*18#.xEirF ^2Do JckxoxOpwR<zF'?T>za5s*԰Y -^ lD^8ŋZ8:oL/u;١آ4,v.y̙忀v(?ڪە"8z|TEIr8]40QO<ΦÈѼ=KǚҖ2+s6Î$+ؠ#5x 淐&#WI~.$ɉC^*.g2f5h;[m~QTQL98åOppy!{*AhToa 6Z/@DaC<Ű=Ew8Cgpاv닼ob% -@KPRw -g,7!Rem$Ϲyx3Z (NX-W+ i$J6cvg}K,3ɘfZlWk~k&'͛ӝ.lD{ԩ羏 J4*/tpz1z^&Q(VFď#.S1qj vcAӘ:ԑ\bA>XЄNmQAVHQtZQ][б羽!`p 7kZG utctKS/1@\޺+)ί(X>7S[mϿJL?Y+v@(_`&]r-Gnҷ<@X#`ךßqiIl,S|C?=j$Tf^UA - J% = GJ1zendstream +xko6{~WI$fѦz[HV7ɿ']zy21D:lϔNGc+L'te#G *ok{]\]G(l=B@k^Wc;}ژ tǛ:B{KQ2pStEc' <> Ffl0J^AP͡-{GDjaʉkF*@8TV?+qv5G?7\WqBmVofl۲o`Fy%a6e4++|L(R:Osz$Ph-%xю{/As ΄OFD'aT^_\* :]Ye1)zD x  rLwdin]T:W`)IaS7es~^4EWoWRҚt*tE^[)N;m+սن]1eB +F[ xn:`h; aBFx\𕭪̼C;fRÑ+)ʚN%_w½E$§@z1Jt^BiH=^að~n y dZըqlN/FwudPl0qǵH9+ʲs7JLPYҨ( L$M{Β%LeY +}a;:6QGF9|_kd]IkJeI2 x&B9)U 9Kg*gdg2@5p;<pM]2@C}yIҫڞ'%9/ +O Oo (Ďȉ*9N(_Nr; vC'*:Yqx}iu%Ѩ/B{iP帱 +I; xνw2=:aKJYqz߸Av}V}K,*TGZdWV9ʖ]7gB:߼: ?Jj%1MNSS}l&'?3<.ns58 Q͆G6XKTR +S[hzTR6pD6@uUAX#DNmѐ2(y.XזArWpvý eR fY9/,ŶH{duY{^RL\2WU%nяQWٵ t :b3'k#꒲UO|r2m6\8 F]y6H&7GqCyGE'Ec8MDendstream endobj 5321 0 obj << /Type /Page @@ -21405,23 +21268,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5334 0 obj << -/Length 3540 +/Length 3412 /Filter /FlateDecode >> stream -xڥnF_aaKpxYi.4;<mqC -I%1{nC%J.b̙s?g..S:LR4\m/B R@̏WR~d>Ə]^˷SX&Ixf}럱޽?.R2q?>_/^8Vr W"u^~v+^ [\tɫbtTE,JVebѥna[Pe^X*& `Mˍw5N]H0KJfKo3P#EY^vlYWrUErC.ɖ -),1 U9NLGϫ/cޠ*y11P?%켜 &3gIm@c Opy'ojߗ{`<ŸW:sZ4UƷk% v9 Qqb2D /kkQDzwY5OˉUE+p@(R#v\ٓۼ 0s;`IA-j~ T7m$'&↍#{3s5w.Öo]c?8 =\o՛k6"{̍GHcվ'bz/ahedNv (.hlV)">u)Jk@|3[޵Қ( ~FIG8/s&|[Y^ah]铕#~kْ.<-?md/yf^(X{D205kMFCۏ¶;PNH4N ęf[ab\x_GQ dڭsi ]S1%سuhH`J,e-!$̪}-f 7>Ү`? 0;o5EbЛDQj=SBy^ @-i˺/a 2EbabU_^_&G?ߡ(9A(Xs0dnUB[ l#SN D^. FWtё ,xTìA8ҡRB0%.qEvذTj`!ڕ~ߎ} -v_75Dh5C.f;*%qfHˬ )E(p*矬"kX c枿y,3GfDz+@9NBxdž.0RED; 0p ӳƉBO<~v}R?e`]ѳB`aKA4 0N$G'P r|DtL.Y&aچDh)8yN6r9>#fəݒBH_y;@n G͑=oOQ1I"2 gTQ~L5X2D_J@6낦5o%H]"%Fo#J>D(mul 0o<9B$m/kr<|X!lp={4kRrcɉKq6rB-ȨۼOn[q8E^U 3K۳!~jsPL-nx|*TY ){WekyWNFa< -q Ga"!]Κp)Q6 .aЭӴWHUԪ:r8ƒ})桧{gEr+f.7ZN k 4#IA!޼I ˉL$pN -P5H;]^QQy'ݗ 3: =s͚,H4A2p'89E S thpx,\:ݔH hd!5N1+8m>D"FWaW%K"(Θ([JN#I7V%|ucт܇ d9U^5ՖB0u?`p]4Іr݆5[{SH~Jy5yl>i)RڲH7,H㤒43JOF[^&:=V*w#lʁ9]SFqLJt蜂U4" ksGQlacZx1G }{Z0r/~=r⚠K:>) .h:LTwK|{hQ[s@bݲyLDPV<sUߴ|蜮'Wj; 0_\ESY5sl/ITp*T5֪!/ /řk:-:pn7t+tmleVVhݔ:nVOǍY-tZxf@ZzA_ueYu'4zODLzaF3yvYY:RWl B]k1}Q8bbON`0MgGsᘉ$M$aX҅s0*+(iXƕGtBs0 kaY`ȷ q+'<10H+ ;fd=rfF(+ArMV,4hIWW~! (kmuӱHKqy&ȍuصc -/WՒxX0pϰNJ9fhjSt:"-An"ց@aGt5KwK-ќ1Ѷ cKd͖^2{v] bB1aDx+|B[$X NBdJhM.&,! 4*彁KV%_k`{Ш+a!+  -6ܓ0`I0@7m]Cь}ხ'$M\O`AzbVz6[.'Ŀ˦" #"VcOK%:ſϯMs1Sg4x{ZY];~-2VZ$sL8(h!u"$NVPmW| +~`G +KPs9X %ASR .*z m +ʬc2S: + t2e\R"XY P}+_#Mus|X[S9#w,jVA$h8dF@#SN՞21c{8@$c. ߐ7NH?JP)L…>3ؙ|Ve-a>RL :W2R y‰I]k aXM>WWDcGic)NF$ŭ@._ <2i nRmQZ@ +bC˫ۙq5;/tYk>,R@w0 +89DW۲ʃ30rl֚`}37LYE 5KUkKJɣMV&gC>n29TH7w>*# m6OB 1/CrNJgG_u"M+8gF{"{A.9$oa #5ʻh;UiyE&y+=nͷ(v;f{"aD <;W^yZ՚/sVcu}fnBJ(FQyp(f2+{ wJfm7sp/#ߨ< +!~C~P +RWC^FY$C 7S5 lrBݲ\D,N x< +Zs9K!>.I0k}($gr*&$j° |'4h /Kn8K<bC&H\cSؼmSJqLIcrL.u>XZXhszgOԂ֢`OϛDu6 U/?%(GxzP֘aBJ=(ISnC'G I~нtDÔYV\ho5Pi8rW2SW]G}40jT֜p|/4Ioy"̜_y>gUjg˥)䩵 +z.*FF( +mϧFY 0uڰ-'Y}C"t/e۽ܓStLBA[;WuzRiىo ?#&qyoAcendstream endobj 5333 0 obj << /Type /Page @@ -21462,26 +21325,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5342 0 obj << -/Length 3794 -/Filter /FlateDecode ->> -stream -xڭr6_R;M&Oidm]mL3hTI*g~ $QNfv'sY:LYv^kyw -\@wo2 B;C^~i.eWMq%֙g-a% CuƁoy蕳J#o+]-bō=(䍶m^[W [c'bYrFێW|(3Xq/ ׸/_wf -:r /̘ȫiz]lլ0lyTdvI ݊p  @>0G[* a@l%!(@H&5f-jښbu4$std6vk|'H/&MTb`bsN8CDF+w矱IeK /5^IKePLp({ %a2$I7Y`8"L=]}Kq?kv3K6e3:zA!@3RCdސ0 i3"8'o U3gsS$AAHHe Ax,HR[8#5vDȪR-` U 4߱Quh=+̑Pj5/Oଊ@{[4 ߣ+*+]ٽUdR_? <  -1x՜Cf!C| -91ϵ< $OtoiLOyS߰lz4hUخkzO*ݱoJ{>0_pw_c{AW2n34XvY(^v5E9=(1x#Y,sEWrrb"jd,vvE՘ 8.Y{o;P+APȣ@J,ڐGSҖC-M:Gt=d::E.ܲ#.trA w߈VEݮ{k&x麆W_QgN1d?AFZor -*Z+@ݙU'9ޘ6\5 3*CڠƨT(\)Z+FTľ 0Fdk -^YjxkISlБx;nW0+I-Wb}*<|j_`XUfVaN+4=#-%[Xf8?'p]TqcQzgЊ$Mei/})Fݷ(#/ 1&߁b0.{(ӳB>O&ۛOxViXx7eӞEZ؄Lm3yɢfyB.54P ,aCBw ٚ0ȣe`JؗY&Xܟ@ًr)b9(MZjȲy4jz2<<906 99c-D;o衸qY!s -ٴܔ:J #r@z#8$$ -(rSsuY 07 bkbP{6I"9w;-׋uS`cR$ј-Ld[ $7, ˿XO2[9Y1 %![N$`AbPLI֪Gn3*Φ{X-ͥd*aLj -[=QhH Nt6\9!՟@mRMQc9r2ʹRKԪ?8Hbp48#ɥMq%z7 \8BdB#erxE$ȇ04ݪŇb©%[T†%E)3Ym7C-XUJЩmm;nA :n:Ŕ(2b e ŃS1 iB8y!y뫅{QĉEP͵9նBE{+ bo Gk.:K8лpQ) lKn',Pw۪P>Ƹ I~0CY=<@yz#cunsk+bb؊2,̈ w,ppwکX,((ՠQ"Epj1 ^+9 7Q}Kŕd`d"b w[FL~lmvcat0a>uXy RFG2[aYi0!w؎)q)F0g-=&O`xmāI)`8Itc]}&s!Ss>U J-={` %@>C|'wO)ImJha/Wcڗ]Tb,*6dfxMr1Ԯqk0PpjvIOp Nȥ6K),ՂpSXD4$%LzM ".]^;z9ARv$G݋u_EjӔ3!%ރҌ}2U'sFR{:3_8˙(.JEOi6`M &oNv%< ܸ5/rkߩph+΂Yo= mo ͈4*z~{yNFT0eD`"#ϝ&2r|ؔ8o&^; / 2#gD{lm$ڝgo {ӭ0d;B+Bh]@OGB;`ׄdV8z'svJ4v+z@Z-&IҖ'CHG$3Iwtr?LQk:of1~%Fr,"4#U\1dyW6|3c WB ⯔:_^3endstream +/Length 3684 +/Filter /FlateDecode +>> +stream +xZ[oF~0Ԣə-}J6nj-hTI*~mD' /3 +/ /tv]ysʈAa7w2 ,.hW?^}Xj0$IWW{ǭ7w7of1ޯT{wq[a30]0<i'^8:65cz>t L 2] łt0IbSZh[$}U'J}*#v? ֹȑhq떙hknGž e]~ +q-XoC6y wSUnʇdoqzPq +& 8-.o3~@o]} : UdВAɹmEH*Ԉaء`*a. X2p[Ũb52~í&Q=kj{h`DG:5ӜJ/mIDv{vM C3CvsSŖ' +XWMƋ.؛gBnLk1?$^qv=#D/J.Dp32Fbũ/ukKݒu qؑ)lC +GP$G +dCv.gKYx"C<|Q26.'n/nSeG5=\`s BA@D7"7T^.o-Tg_QeILZm]C']\-r`D÷{$g[$n֡R{l?b[3푋Y(*^Mb•imFС h8 <,oT + ^5%U:7>CE`16nw\fWZT-b}.|n\Y 2sMirݕ5$sҍ#)Nrp- %P&pmrW-jprFЏa#{P<ITS9<8 t)@d%SQx + yJh4ppTYtcL09?À[Ɵs_/3@ &}uX g0v +"WS6V*|O1Ų98oJjWҁ8gAA[дqY8埢NTDz{({F'rc-$Hl.Z|-f:X1w +)sB5 yb'h:I=Y6]ae8AQU/ M^c8⤡IåR.eYu)#r<`#7P4I3+$+.řެ9a ] a(2ѣq )AO#~7(JS>NyO)Owa!Mn2tw\ `]IDj35皶sAۂt\$:o| e\(ӴAIS@`wqy\B@s g9)w8 +"_w,_=zAllX.V +a֚Sz!SY6>8-}'[)PwUM3NpEЈ #?C30yrᆣOL}-le Ɋg w̝pd: $PwgSX4IAl$aa lpT ך{ MB/4,Xǁa|NTԎͫqD$Z4zI @3+0b-ˈLK$&ۺl$E0d?$``ĕ5{w}̔ L/APc/†13**L1&`W6WVM*ft`\L4\*ڮU-1yf,mJ*p%fJ콞t0,& t{wy L%e`Ebj4}y8^[.M1;<۰aD>}QǮ/ɝKSYQLV|'N=~M,X]#m0۾GaͩN:6OUC&F̼>bWٴx hJVf|8mIッ`'ޣp[ͧQ͎b7Zc#<}xn;I)@jiRlÓۜىUJ=ub|;w@="-JȯEp>}lYx@˗+L` RwQj+pO/{No7uTka;Ə%y<፮B9_1fʲJ[hJ:{lTv%Vl6$q"G;ZKEգ캊#ph*rwfQ泿"ӾoȰ'l +0F49ʟɸ+'*ѷ?}bfIPOOuD\ x4j>z Op?m9ŀ?ұ~-Vr{WrC# J lG}_8'U6o<ϡr_jtMSzp(ߒF+f_ endstream endobj 5341 0 obj << /Type /Page @@ -21523,23 +21389,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5350 0 obj << -/Length 3607 +/Length 3476 /Filter /FlateDecode >> stream -xڥZYsF~ׯPJ{!%DIh-$p0(Y~-9?4\/Nw4=]5'#p BHͻ?f^v|։0 -N/o:_A{Hywny0;opOi,z{\e_'N<7h{ Fa ?f) O9*vUs4}EyoW'&B tZLr^Q|l[pY/|U\e83aZu"e g͹a]G^qg0D)M, >(BF}B$xYwEYDD1jWƵJÀ57f{<穁VU[tc8}jrȹ7nE'OT Qi^&@Y4 -fC7cz8QnŴ1%%'R  <πax^m?Eyw[xLLpYoi ӉfƾNC/\9n7mrɜA^ J>UJ/*("<7PhX_ HX2AA& h+w0ĉ[gCҾ;N|ӖeaDpfi-nam[  L/XфiHW?)0uꯃoY+D{ @|[~hX s \,gt:Ϣ.a7Hج>{TI^ܦ3V% TVX3v{x -^B!|]!81QXEc0w(-/JRW1#Ds$(Ň} Nm[v-ό8m) 6|&N9˒o Dowc%@Т9>QȂ>Ȑ8}⩠{FG-G&dN7Li ?0&ʒ) ?akM  lWA=%EG{\s| 00c,ڌ!+DNƊ_Csӎzj i_0v[OzL- mKu=iC~ ķ4 ?7ةl}^"V'`4 ~Oot]_u #ՠ,ל o{|,^6 ݼgw'7 EjRu-E 0:tVK)5_(-Blˠ`ʰn;F$r"0,/YUGI hR{')!}XB(>tTwL=!~NCTV!@I !MNcpVgV{9A+X=rR88HD@Za^m :O1jҼJg:Is(;[Nv&_7ܹ,{(`]A 6uhh}V}7@H8q-e?L0)4&Qguut謩Wі;_I@و"|eWLd כgo|O#ZuĬԃdYXR0JYh2\5 HJ$lVh|ueEHJ׉]pSAjecq|%̸W~^ #L1@'LT&5) dz 6Ӑy8@8ΪS>W:#9 -A,1p~ƾQᢒӾSս }@n1"~>gyߠc*i#Jc@˷EsS$rrI gSΐGLɮLMvF[}w$p}/~߉Px TH -sDs[/x -# l>]6i0Rpm=LK,|PCI+?@3v3ˆXE„:@8%jfCWrqc.OW70|T; _jK8#=2ۡ.?r-w^Sζ(/%E(w| 3}@(~_J|],33PNF>+t1 Xw*Z#KId\y}@Q(!yY\HJMDaeX.^&'zVjs=1l)ӹXcxT|tq殊[mQXᴞ75'gK˺N8 i:"/pߔ-,]8M䛦dV{W@IZuuwg0u)fzk)K1۫MC;yT2']U] ^o}g1 3/c; 3)RWtLn߅ ƟËxC+lᡷo@fjtu4`)#@`:=%{k’P+sc 6 z87(JwqxSz$/dp]\;Ɩ#e1UE1c~H7U HT"\k^l -ԍ!endstream +xڵZYoF~%`qyC&Nb;<Ŷ11o]ݤ$ ] <جh34v0%i:[W'f=›EqZF3s3/dz" C"IRNjշ؋`w>]Oi謘j>|wν濭?f5j2D~?7oߟxngh{e$C7B'7'\4&6$=7M) JȟЯn"vX^<\ĚVw%HJ/|V=2xo0MSQGfzYftw~}zI߬b =N҇3Obp͔MˍJ8" ugU,ʥr0Ô;53RyK#gǷc)ly&h'mM'Oo+U˳w+y"lj!R=ZnXAcD±1[3e NAǚޚĠgԠ=&6|rTE/zӉ7;T%*Yڂ=N]B FYb #(HZor6u&pP#$Q8*'Na:51f3$$y+ەư^݆݅``da408}]wQ g5[o`u `R)ն`uv^rK?}e{(H=tb@2zFE X96!=aw"|gH-IډzPd] ~7s^Ʒ$jt?R1|5kk.8ьn4"=E#tQʇv4<f# #+(zj[Z$JmZv%\!Պ Z%+YMc*ܰ|{A]1SW(-c=2 ۑ/``y3 u^\_&W \;+J & hx)0D38ag!+5y2 Y,E˥ay2韭k_Y~j5M !endstream endobj 5349 0 obj << /Type /Page @@ -21586,22 +21445,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5360 0 obj << -/Length 3205 +/Length 3082 /Filter /FlateDecode >> stream -xڥZo_a,3ErqK㪱Ҥ偒hTI*>|r%QCa\~of/=/Tvr. _82x~_%/}ͼr0a.{WR3w2Myi6;>B Χv$UΜݯ>ߔMx37;5{]e\.W o ڞCFf* /yԘV"QGZ|?p\&F^Hz -&0ȜsY_Xy[p㪩V fw/Q -1i$N./]^L^<4mq (pLjH3HjC'zss`_M\ -hPy9)1A>y Lۀe͍Ӻ\5vQ)X(N#I;yY91i+C| ifV$[v̅.\*]^qGk[ ^VD,dy6f.vJS/a{vy 30U6jí SU& `D)V #1rҹYQg=?Y$뢔qq|EnGD]9)nDT&H+R8kSl"4c xSrx(_cU- W4[m0 fs‘+f^YhLJ#m!E3ҧ1 ,,!$BOt"_Uv}^lJ(d\ ]f%6hCܐF ->Yi*biq4YxuȾi_a6(BfHÞv1I+fr^N@=C3ڱ#6goIei/QF8"0AL9R )g=zCNl,tw 9 LA -) -YՏ8qv[~JHcX-W N!x&_!|7<+8Eq*SJx>r0MtFC0EI(뀰ژzv]zdKö-x ɂRJ'8h)H |<_;]XTtzD1afqOz)W̹lAuYK9%<Ѧc(w[}c{Qb,5I jWM[!DA8![Y],2/Sg%QG&4Ϊr!;ƞ61ɈAT0կ)LG?sfZf8 r `sו5+gatS#?3y_*`'7w8 N%Upƞ喤ǎ0K8<ݵx n18 w(nU%e&`XC}b1?hG|>%C -2 <10#@5\4kVQ -:|kR(+E7vϲcqi|Ax k~u>ɴC/a $ls܃qA!©' pF|eQ1GN }NZG Mco:螧uIKV-lDSN'c*aMWco 3  0; T:# eH:zoaRHX 4tT&5-_1U,Z[+Eqj (e=X٢`hLI/t Cbc>v9b O$QV%UtY.(>%tDzK[x5Zg<&$߰QFb7>%n//x=P `4`1\EHۆ-%xg O%ܻ PjuӏOPs,Bhfj%Z*d;;\B]",0/v,t@LD|9&uq ~af_aIk QlЫ U2<  n/xcEMvfzCP҆~JrK^dC p -$v2Ŷ5>_ɿnfvfm.("Iw#c# t`>0pLϴ7|zQ1 20t$y1znMR`^LhWط4DFiVQrRu.3|G5!͜3fmw|_`K yH{iv2Lpo(d Mr]TJ>~ǘ@>Y -t>%'*&<$@2| $m+wHmVOiolM]1Oe%Zj)Q 8:nOu^Ą4_4Q<}Ꭱ6[.ܢl!#LT=H&K1&,Rξ3H#Upa.؀ɸʋ 6lfX^ŚL z1~%PU)[blI/8!%[[<6~3oBH5 M^Y7r7/bg*soQ½Tjq)*hNAW0iˑ -Va -X?V"rRT"o3_YI\OB|<5 e zK'wl6|8h$٘?ff:Bq |(mPhendstream +xZKsWTZJAky^ +cӱSZ$$b  Zk *$r͠=_4Oqoi,m?|k +]ouT38c7Y0K'\?& nB./>^ݮcj³F v:禩Z-\S9=s9 Pus. aW/Qi!2q$Vk-3u_% +n#^kprJ)|~Z E$y_ +4u[w |.I["2t*Ϯ斶{@> tzE7MKΰ%VRi,FeD̔ш Y$j/ܚi-3uQ!bؘ5JjQu%r.ڪh_H4qދyss;`_MX {Qy[9)9@>yLǀEŝEX U|-ck-}Ŏ.JmnFqȖv_VFjIұg\;uQH*UI\waJ|d;vʩ\H+TRv}nG+j# +MF5bdp+|1E$ hYz(_᠍Lp ;cMf{™kfYh#Sc!yk3j]ۘ,!$B-:,!/u)2#.:JެH^toj4>n]o#>tl4d1ٴ8e LGFK/sۗE äG<@^F &k8@_ q8? ?BGPV +kGpSB v⍵=ΈV!S a7幑3%rS?Lc&3A3ɝyGz3ʼnq+a4!HM!7L^oh*k>{MCqw>)ڸ*MLBF}@妩2s"_@m~R>oڐTLPJ*~%LvM"H's) c&3+(9V(t(k[Qogg`(\:kq6ؘ+\r6y.K\Uȫ<Z٘t|J2v+jA\`p8 Ì$KmƗ0'fC4 3py}tn>2y:8{#IxbRHIPgo0x 6MP:i53`+H%Qoj0Gu hzV1 ;"]8RWؑ# \y}7 |`Qu%a&WB#c1:Dg. ԳN}(Pi5teuJK0 u3݁ch(R|q2\b,uW@֢'7JAgf~ +vkjm.#::RC8b82@TB2Ѫ +,'w'g1ȥc`9MnH+wTZ؈61/bcR0,^|yi'QW6QZ c?;ei`Uq-$`$ʓ ; dxD􃺑ÄkeCo7rb)d\(Rc 1V(BD=˔(v==,P`Q6$*@; T#90>* zSHO92_ V|ÎGTf]޽2M0-8HtRf‡8,@`3^l" +JS٭r+aRtɁZ81QPC%Pi~zIP3LJ^憄ߛ\OxC\r|. t# d #˵e"U6xc}O2љLΨ7XlIoMJf”{3ga_U+ 00{ NlM$-;yͮesHBw }6l 5Ǐ&.CP'KQǢ&*cǿ<KppQY$5Ve!w,"ƓYmG:("<_1Ǻ$7S zT{"%שe~Gsa)R:B*[N5Ⱥ:(\O5aMai'qa~f[!tUj-P4RX7ˑfa̓c$cb{(.eC2 +\{vYI+^iXWzA&Ϛmc9 endstream endobj 5359 0 obj << /Type /Page @@ -21636,18 +21496,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5367 0 obj << -/Length 1666 +/Length 1621 /Filter /FlateDecode >> stream -xڥXnF}WnȠ\qwy Ї\⪶H@Kk0E*$%,ias/3Ù33g?܊Ċbd[ijVakDܞdG[cX';i͗wϯWJi9nkZ]]\/.?̇Enp+'..|zfyJo_=k !}xL&u8lo&' |izwg|P d̂X",<,"+ -<xe6k D`N>,innS ^r!:UyUz#͢nlq$`V;U7_ޟA/PɊMjem4 R*U.FM=ݡʚʊSA(}Ye|V D%)xn ckJPpJ$K\ pGy9(& p7o>M} r0wPXBnU -9;yN c(:47Ō8u.ޭ`_v0w4 #cax#ˊI =G9zBxm~()?l!NBt'$W#w#n5d~hG$ggFetvyzB8q|ܹ%zvug8nD83R>,/Y+O2 tߏ|&dxW# +Jav +1dqgI"(pus >mLu]6[ek]R,Gz+FoQL 8t~!A.%MjEkwVvKihԨQ+Uv]S蟌)sՓPz-VEukmvy2d O^3?_ng{^0#yobARfin=Ch뗓ncͺeuebv^)zU,Naeser;E_|5D5V$4#hH!c&`Prk-:.I?\finri v2$d"UaQx;3ξ)h +*WceܹK=_:1n] +~kSz[~ 1x5NC)<>$E.a BTJ&CY)Q`ES+]#d1 0 XLg 2;{ |\C6ƛlBL%$5u+eIFm1AVC~y#ڗc,{s4~OXbx19U]x/tU{~F +ѕ|+⼿MWe-ihȪ{R<{7kKJ? -@G=ͩ$?:A5endstream endobj 5366 0 obj << /Type /Page @@ -21683,22 +21543,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5374 0 obj << -/Length 2137 +/Length 2090 /Filter /FlateDecode >> stream -xڥXs6_=5Bϼq]Vڛis5HK;x2t|N -_NHYm.|V>_Hob) -OQN(P;w3OkT̼8N_ngҽg3 J-.z7K`L mŠh^|;9Ӆ/t8{Baͼmkûy%ԉ}"Z*'}3/T+ݶlDYw}VUh#c!x*>[ -V}Ǔ[H+V֏,k}=fRͳ~}(Gۢݔ]W6uw~ݮ}ۦ=/QVf prS3 UkIEB@H$h}R.l-IfUNf9p۝ݧܞej7Z[>T-ۗn+PBǴFa`'׮X()>u[ýЕs8h9U+ȒiaroS;Dv G}*dzJyA4C -%8E1?f@uF~'= FiIe@'chW\63јz#LƑF" b' )`%d#@7ß]μԆpUiG-aCeᶐ%/"/Jy7I.Ǻ R$Ij :H(.((pR`S'U8`)ܜ<9Sd`+@SRM+׬0WIn b 4uFYo$%|2%gi 9T*4p \m \ Vs+06qp<4d@E6T`{byɤ[!Q%#бkPqrUgHRs1y˛&D _}BG PMcm: P{69w-+s WX [ -x< 0tBz _P0JR I<Vxƞq-3KR(jV$_AZD&%?zrPbJ+iʮY\E#$ZH?1JY˄A^x"x"ɒ~.3 Thd///Q&` YmBjd+>d'oCifv/$>Ƚ y4v#( #ؑ=L_a> M۱[&XWP9QזK}T2p_7 Fw8}tͮ]Y_Hܐ,>ak C7γ{#EQ}bdp̋2Y`ChplLoj~cbs 38F!&Oo/*iNЄ0| "3nqF$Q^24t A2ŒA#ˢbX gLΖձwٖEGo_V)4APF>WK'"$ }X55't4M(x\>Ѥ$TR ^2's93_^$i$>/;^EZSg[+Mkz+MS 9QM#: i2 o©%65f+$i<`Y̕ݎ`* wgP R7 -fo,śa54"KEn1Y_Gx%лNB6Pg,S+reb>J -|2dlYR ˸Q\"Ch@,űiLeJ3A'.N.~͍9jx |në{zUiwh\R",/C -l;5b]} -xȦi<u{&iK[4lf%o˕JZ]r' -Yendstream +xڥX[s۶~<j& oyK$u[g&%ɒ5^Jsj?X,o//'q |LX +ǓŸ< i9~wL/?,e}}vn:Z{2Y޻OS3fqugt?Mc-<Ÿ~Yp~qjTϋ_Ip ē}!d0v^^_2H53]# +@"`X?YOWۦuf,Qd"y峀/ +WN@+VT,]}ldi?>eΣ&o7EuՍoVհ~%ʪl*f#\W_tþv?ccР,E#XJ)Ko GuY1G+dNK\bu׳Le@k}ip[:r 9kjEB!HkB.gpPvk82P' +T.u =A CDe AQU99E8حpdO޶+p YCrmnxNS|0(8oQ4 i`7{$P(Z;"ӫ_٘\L6Qs仠FKQ0o\w쬙pR&/hVԞ,`kʄCaLa뿲c:A-9\!P 6h+ʒ0rtY*MS=-/R>Bʅ%fΌ=fItP%9 N2jw +3_&f 9 `y>;8/ݏo&ln%*=s h8{ԭ]蝴Wu9d+&V48$'=,f +' XWX\ Bf1Ww{La|aG=Gȟ@~Vsf(SlqmӀarܿ&1'ڤ؇}jEf?\W[{C.r|Yt ےv]4L!b3?t9lfΙz I-O?2Oendstream endobj 5373 0 obj << /Type /Page @@ -21722,18 +21578,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5379 0 obj << -/Length 2819 +/Length 2736 /Filter /FlateDecode >> stream -xڥn8=_a Ԍ(56I'&&v>(l %ג{.űY(LɁ5W R(k?X30Fey;=@"t1B5?{~OWÑRʓz>N{dnzsw8Uޔn1_]M[N[v?HBv/$πOar-)>uJ+FYa:V2=P kAd|a|Mz_^M-JFWG-._?LdžN/'Ӈ@L&'.߼pV\~ptx{מV(:@ϟb^ƻE[&Ŝ86Elm_wtB8+lvw)d00&Z"Iςnd- :b|zR"F'H1$YJz8^z,*(* @ -_DZbޚ#Z.Ktp,`Þۃc Bl֛n!W+pj2sXeBt~K9_^h ^|ȫ??;ކ^ UJDWj -% 0>p!iE,!KVJB6d:PY,yK- S1RƵM)0G;pԙ!a -}c>Qs;8,> B3ףbCh| T%HJy1n7«$Tg-l]`[ww5A(]bw(SP\CRPU(9 AEl/n037,,(6ɎuI̥vTtGL2:PA/qHlv\z*6.qd ]$]7))#y"iқAGz 3ckA}u ~ L<;ZmrVOW)b!(A!|6DQ҈Xm~1%`펓Um_6MsŦP )f'#tA]]`]1J Qe"wdZ8KR n55bzmJrGJ6EJbᗴrN+#\g,G'cB">+*:G-`HL@txstŗ "R3rQ'# Zmn1Z# ]heo<7>]x6fB6pǨ)c>-БL$wbόYEYct';V ͧUwcgP|1 RJwH!Q>PZK M76ku.neP_XA#]1N:ۜmUb(ݥ>d{ - rU" ->Yfև^sCD[橋#ۂ$e-rg eUʘ%:1gYQ"[r_XH/97 1nZvNP .gx6C%7E+v`ßVmG}]q(_r[1k( eK;bSL='B>/ET=ƚ_>qݔGt(:p^j?Rʵ`z:t+|C0pK|:irw72mQ/tNT4Mѡ/l v0]?& asq Q%j7#;M!#Voˇ>UPហFN%q#V9?:XbszќSUzZ8oop(SD?<ך3}]Lx +{uռ#H (` vf 7 XB`{+r>=85S=ʏ\_ `a P\c|&P^R>\\MgJ\>=]&qLJOӧtvpFJ@ F/Ipm?±m,lɋO yQwb~+S_*aToiПm u@>o?v WB^[`oS6hB?h<Rhsspj8V|Ha0tY!orpHV*7ܮ}u؈/uз+PYCp+6 Y&KXH ɏ`RᡔIdYHSmb^@ޘOrYCu;#WևN+m+GUA/x4=;H B͎%[fYbT,9Ԁ8$iʫTdw@"g\`Is!1@{>C%$r  +|1X9 >s5Q#A!UTh?-2ŤR l]QZ[9LTb??I>AHITta؏m ja0b"MOJްFj0;ÓڒYeQ&kGFC:ys[2E)?+| S1ޘW.jDhWEXR~q B%Q(XIɿl/d|=-Ӝ CE9'uUipx[)&x٣ޤ\Ô+$[K,MHEqS'Y Z贸Ra]g 5BQnS\p.PMPJ6Ok7[F6qͳ(#2:/V}Cqbۂ$e%yi@'A˲BK 9?C%%nb-I1bɺ֏G"nV=;0ߘ_R2018Po1n$GqA>@B/#/zDKǃ{HKMџh- qU4Q\<4~}fs@>Tm24Y0ƻCFB+;yGzG; +hyGh +ieI/"XǛw>mjx|8L/A,?&bSm7:-v;Io{77A^pdKZ;˃+ Aݏti"$,SSC`3,6tJ,H>Vt2?P aIqN&BNdqaT7g_C:¶d +-l y97Jd-Ob'TA!vDE1DDMkl@Y"fN3C՗vkvxA5(q7z IA+3wlwMrI?GT<ֽm_N{iG<`Ǫv%1Ǖ-R<L u?X/yMTF ֓2U} |}n;hEn̼Ii!P?]Qqns"$GjxSQiwHM i{pA? N%|`md4#9jnUn{K쑕t_*1-!Ɉ-US˳>T@ޢ}{<^unicX=GQZ@@]ZΈ؉R`+MVwBLS jPϯ;7DDq+v>GDyGFhpt+k>c5-6HЧ{6xendstream endobj 5378 0 obj << /Type /Page @@ -21770,22 +21624,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5386 0 obj << -/Length 1554 +/Length 1505 /Filter /FlateDecode >> stream -xڥWnF}WArlrqcNiD*d,)Ғs/3g\$2H : Dr$r3켝H/zp b>Q OEoz gW֚ɔO8NˏWSɮi-"Xn0M4q_/Ls1:7y=-mR4Wһ:MDד߽*ڋ:uN"Re~ 1ؑNX^wBD:ZmSg@.{"\"h)VfɐIUYwh:UmēGzΪhc|QSIXy^nO]$1&{ T` ?:f(xUHSQJk,O8BR TV-:fZ* -ʜfPh8nj͵ )JԺ -f'^K^j1;b"6b7S:-{dYW\4)%JH m|Ek+;u_s,خjj:.MtXj{w-V*/qKxam&o! -(tF[ֵ垼ӈ9a|SwF|qM3˦6EEOIPJ -J_y(P+ -XTnW,-JGJ0BTw|2ݺ ]E -WgCVQPl&vSV3RV{US|r+W$Ep'&C x'8A_>J(c}jWD@K2҈JIswGNkB@kRVj\$ktZ8wO$=;<Cr,0{Ys -,i#?2" -f@L}}r]u9_5ZpM#O"E':= wS*yl 7>5?qFendstream +xڥWmo6_!F3wIۧ/fthAX-#Q"@D2'r(N$I-#H .EֳhʙH +4zY=DkdǓ8NWcɮzrvqw}BD ]\O>{J;ȫit:M=iGjnzWx&SO: *;$bb yR@y- Ő"k{ٶ8c1G6 DVe^4E8JpQځ{|W*NX%&a wى` *nLJZTV\z(-> +2I9} ) + >r1@qZ;w۴|ڐIJL}Ҭ:Dcёzsk%]LeS;͛hqc[b"$kX/"ٲ$c1z3_4E֥Op'E +JW?mx +2"-4#>T_\oIM٦wRixebz0Rبp&ڦlQSYT R0;1&g3/_ޜsG&^pF #XyZvn67YEΪ,|I!~OoXF',]"~N"pꁨTd +r%<#xߞY@ƌ7jmO'$Nm!.Â,GZk灧1O\m49?S0!)VT&mAFrY:;.8pcH z:Hăj;BN#OZz'^9r +$PkihA]$_]_ʍɇ(aQr0fG6nk\ra`~qLe,vR䨲  +nl9P1M?Qڱn#_y:aRwN|*|Nw˦ECLI' D*rXqS A&p;= +%x%Cg?Av|;ݪ ]E +U(M;I̭6'wQ);oKAB+?ժiiu*Ěk;?~pЄ~'LAxjz8T~K2() NA@ o@Z{JY-nOd{_i"gy):{ˆ$>Ku=)R:xEŪ,a 5 `ˤ3[2sq,OBE䱟X#ҿ㷂[endstream endobj 5385 0 obj << /Type /Page @@ -21809,20 +21660,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5391 0 obj << -/Length 3617 -/Filter /FlateDecode ->> -stream -xڥioj h+(xAEDʤ1F% syoFjdq|f*4Y6?D;D L@f듳(̣|r}66//4cYf/*˟.]_{U%Ni.m|y=F߮?ys=P:TH槓_~& 8'Qhl(T0pt5_\s@sv«Ƹbu`}~;a'E/O8VЪpˁo)C4P0VfV'JyJ$דԦa,I]3|u6OCsiaM.uN6Ěc'an3P=qQz*,5q@x"4I&2j݇ldps\S[coӏSMew: Z(Uϭƫa;m"phT&ڛi W}& fh -V o3 V;t%6mDh_';G0ҼG-t>r5;囯¯p6 bnv ?oѱXUONUB+IPeUA -: $DT9<(KQ/k7Ba"r9QryJBpP|;Nq&Z8-cfu-޺Hd%4 Ԡ@$uc>8wQz^ͦb,/;7F{#4jp ]L:hnZ~ `Ht"5Ӎ;Q\y܍L<%¦fܻ-*^gA%v=f`+fN )<@dM2'AS$Sc:ocJ8epٺam!"rYrv{*3noUUݗ xH'l,ŅLL[a%w)<pj;¹Aq\xF[1 >qv޶cr6tHP=&|%NA [3酐NPdq8̺ѵ.qDYȚPHxSpM졜K#>{SNvܹMR91Jv `"$z:(l`y %Ysr< 9Png0ux[fD\P(weꐅ@2T7ϔP!%` ut?WBߏK(92$o@esz)0^I1$ EaWDj7gT&N-xD]I =?l`ECb %czSu?kb(@ ɤF<7hOf A:3j;Tw&IZ(${ܮ|v.$.+<1p`*=jLJ}@e9>օ%9Sɯ"F1YqNQlͿ9j:e;3TR:S8CciY)r#\S ԑ0S]9ׄu?v4oʍ1xݪ&+{%Ū3tٜozAy1YHfx-߈TAyxwoJ PCRT>ԛfdXOJ0yȌBG_AJ=#>eK*^칱Aoxlzx۶y˃ff9qlCDZ 8v߆;Ѷ>B?撐K?*s%{>./_Ku yErqd3Lr՚St9q*nS,7WC##ˢ(<+%/e4j<^}H+tߒ,ȝ*aW Hu=?rÌCNp+ܽ]&}BVrdJ(ݾO= UBʬD ,Dyh: -$$ S-M]F m5ݞH4)6o+~{ ' &fu(zZj)|OGKfdv<嚺2xه۩*G (HhwʛYe V]߬Þm8>ۤHLG!F4rڰxS |\n!T`Oo"llA)]MiHZ`* ~^ 7* |+jSz~JE;ntTtV*}uWmsC=xIV59g5K?(3s ZZ9ZO:ߥ73O@tendstream +/Length 3441 +/Filter /FlateDecode +>> +stream +xZYoF~B#} +xA2LKKM EjHjc%ўl@죺&$ 8QIb}L3%Ab󛳋בOtr"ދo.7~Ό1J,ŏu՛7_cB~cn;\3~0ͷgnRͬo#b}8d {&M&;(J̆zyv}Ϟ Y14hLaNBQ>4*>\r|B8Mo՟K'JiM MgGvPYL>L45=(QpqV54ًeR_Z%NvS9*%6 y1з'9+K)%Ncrrn>թKcsϹG_seNz}Wu)D~G`9V)5NUf:`0Cczv9P/% h(KnrHjn: hkvLM*vW__0MEP)Pz }Ck?-L`zl&֏*?]`^m[1*+ $k`}E Ƞ C{$шlox4̗ϰ:DIUYʑZ7fʎaS+*VfhDF(r#őC`?܎Bik`[ieDH ibɥcW| yK3<M(8wZA?c{ lPBzZHt/2gy.=nnð߹7pBaBxzlNE:S!л U:Ħ#w|@ȕ{x;<t>@K#g{pBRd۩۶ЁF"wq NOFQvQ=ü}~3uՑM̑<]V<1LG8D4{YwhA5c17">4ؔD?"uqrY_*ȂDႮxy3Խ0"cY#\AݽSZw\@)cZ\yբ+kFbX|v@"lJr"\LKQ8HD`ҧ&Xٱ&Nk1yUJ﹕|Ƿ)6~p˃HQu#wJ)xT>Axg)V>,B!S1X?ևZIXpY9RC߻8/ܹPɛuϭ[w!#:Ll8߄`[vFs!7Xs/}R ؒQ>86Ie\#1 :7zp$ȁ. r4XuR\a\ '4 .*ڮJxG +Azh,R=)s"mb_9jA"^PD|[mնkBAG%"4d/ +5{m2*Bt`=wUL|EV1u>`jޱ8Ruc;Gqa-ZeM펱^& zg7H0Bm@p +f5.(s[Ԍw7o4qѣ:,LK ҥ + fG$$$,1x4ſ99c";o#ӧH08B9³qd]nc)`?QJ٠y'xU7vP1fWx[%NNQ:qأ|Ϊ%E#phI:|ݘJ!2Ʌ]x>(]qN^S fkapE VDb9scx| Dʻ#ȓod|d2 `L|] op\{ ǒA#!/bɰAYHrv#?5S[b? +}` +GSϭ0;Л!T7lxk)`rFDW_-PpV𥇞yPAݗ7oA4gCr}(^`kJFqː]ޣDn y%PX}9|vru <._!X\3T+ + "ުWum2=pk{ 6$hx!{ +<4$H`-e]CG_Pg +ȿ|ܰ0֬-Ŷ [KFD;*`5|sw\س WrsmbCerm+l܅ mN<)/mM>fBQ9PpSNX=QK&C66[b!w\![Adϊ4[qoe03[Rl +c6=k\ж %sDO@ y[1ᴚ!8u7F.^iNzzSKP\Hh >f|gt54P2+e.:~P{5 (~0TeFosT_n0Q2ʖR$A4&g4L3궫g76w|J `#X% ʀjr{È3o< [3lkwSR6mWo0Sš8H>=FԲ0 {S,2|.4&Ey`zrllIW .1t%P¿$rC<+=dMY,*E_b3 )h$-=cqn+9{- Jp[d_+鱜endstream endobj 5390 0 obj << /Type /Page @@ -21858,30 +21715,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5401 0 obj << -/Length 3637 -/Filter /FlateDecode ->> -stream -xڵZmoܸ_p D[de;_;iPpWZYH_y#ݕ"ECr8gF..tHYܟ-p -JHV7g'" <7:zqS|^Jk텹\iz kzwAg轿-30qś/MOgo*G6?}, -8Ogla H{}v}wE 5'Xg~SD,΁*^qADrorR ~+7'\yͭa #_B'Ay?jg*bw_;Vj =oj7R_Lgϑ{̀;a[9YꙺoqJ%x -Q9-SC @O3_E dZ~cb6,}7kܴ3,Nl#Wr-N]pOM>[=M"ĝ}cָPANGӵ=TÓ>iku4O+|V͚f:nfM$7ERlAh.j+Qjv͂_RzA\W֌yE< -7a}v;)d!Y.vo3iRYp?x + d2kh9l$ -m /e3ϓpVb225 at)R!ꊄPR a* P;Rݤ6\5O>CϹ_Oj6eKnEh)?pceQ DyDOxO!|jC?u -l:E>@!UI:uC#pV|Hn" -t,=\w@ -@sI)kGgGɹ0?a -F7cƩPW91Ow cjS l'(2~LW~wsJ=a|1 -BqQ$8MGT"ypكv۔s~62 ԆMc=ftԡdNC@ѧEnI$oB=`^T…llZmeB^)^cɡgd㉠eWvC#! ~9$ЌIT†mC1&#$&S ,8 KF'qSWp >} Coo.Ja*:y^$qh]V"B[v ӢAu-Yqd[VBpq+:gy+_2$1֕`{^]IA- ?], -SN7 ѐ?N:9d!%ǁnO^4*/@=¡9$ Oyšε>b$ ͌X؏C.ݐO mϨw*B~4ۦԷsS]]9(PJՔR4W 1z?rK8 1 -W -\hAK@FEJ5VZ}OAA@OF\Ier& -N [eT7d尡/]q192A"$5X}Srm-ө׸b⋰=|i$ 66-uDjxSONXi6rc=~ 7X!(yv59?s/^ &=ވ =5IF:F9Xf&9_<&*bI -e[~5HFLk$&8=f?#җ c -qx]1 x1(.oyc랠v wAUO3kN#i9wбtHsnU.G XlKO¦` [w@~V V#+ӄ,t'ass }WiMݕ- ? ;Sy=??Of8">ɷ'm(sfs~LD^&>X@\ xIw3n *,GO4~ڸ02Y||7/Aۮ_? _w%77g}Ǚߕq3% cy/owҡNlgGSY, Aƪe{=ܭNpxRO.U$v_*PU\ -] +=-> l<8vc;\BSKȀP.:)sջB[¬7FO6S}h?D'(#hpKM_ / V㡃/g k gFRYR2"Tm@eA !!s A&3-aydP8N88 _ƿkJ ɾ%iL, J6N?A> +stream +xZ[o~&9nч$MwEn` dbD2TH*fHJLvZ 0`z\s(J#S*I}W*_x| o^󻋫Vw4x7R3wIyf;{-Ny{?YʹIׯg?7zw?^P 0VHNjwUx*KW\?V0Rn*y/n/awpū.~74 -h +כn:e^{0.(sjx,DՇC](pz;Ck[l5Wл)cCF0{UϘ퇉T*gES'u0 A}(^n8[m hmSAhrV%7z'-#qy{lAiv܏k'1WtwUx0_ѭ=TWP1*\F +#11 j -ʦP$ ʷPIT?A + +p""+.6RC]u$jvhC +6BaO=<-Kp^ܸ%/Qłf !4aD3|NGA,A檂1&-Bn-ʃu5|^ n!pN6m{jilc狷8i'&ktōJf9z~yB5| 1֗|Zi+b0e) W%]p'L3qh$2Ke (&`! i:M69=xc;hnw&~~#H~) +s5q,A/E7`}qsMT>t`A,:Pg2*c5<0nDNѬ ar&.8/8h̑{:Jz$j}+%d)!dq2#hcW*_DϩU4, C;v}dh=*6xNC<.YlXj OXEP.!Y2qy2B*VTijjGWiELda +CJƨ ?I+gOp;ʐQA:\B1)<K<^}$C.W!m-&aUQ +A]H`$SOeóa~5z[2hq0U'(S`bx3`+wbM,W,cXrp#!煋U;sWl\ۗ}JI>@NQdd+T8*H.MfF€9e3a)B2K"i2j*H |T;~qP_1aՕsuUZ<2v TG|"A^]gh*EPj6IqMR&Mkٱ6<=2kєSuMzc5+VMDFag #s ߺ +i%=AX#@;z¾RF}&fHX~悶9*<͑`5PP'{'KHUU9+ ĥ}`(;Jo^uK#?݆ȞIok[$w L]:(e=4WQ&I9Hhy7m;-懴wqj'xl` {77vX~/A0,4F1d T/48r#[b*]LHza->)C>DɌwM \<BG uZ|.b`#o#BOMp^qrq=S5x׵``"|}Hxn!3KG۹h-@GYvň%0iтB߹%bBM=A tԝGrJam!$:{] +HTr“`0 s`[7~Q c6`Է7ak}gW +u!Gh~jvz]OS0/t-N1M?.}Њ};[phdL8޸&yo4?vS.ysn+wCM,Mgۓ̻rx~a7帺ߞtZq4~tӽd7^[ɨrI}!?O#yFKGQ:$2g+B};p_׷$ |ԕ2=->5l86}W-$PGwsT@ 7&T#d (Hf9@= 1u ڇJe M&ٗh}ҿp\uќe +I64bRUyo`O a\r?'Wٔ&ҵReƬGFyaٛ׷TDeSB,Kۘ`b0I[7Yǣq EWc +I&eQ,&G&PA çVN%`QӯX_Yui)_ISendstream endobj 5400 0 obj << /Type /Page @@ -21904,13 +21754,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5406 0 obj << -/Length 1921 +/Length 1873 /Filter /FlateDecode >> stream -xXmo6_WDjZ$Exy֋vc{tȖ%$'Ϳ Gefspp̐67,ㆧ%}8gLg{q3J]:G6|7Ʒ+l%qxmz4]RJv]<9"!78=lyR>8>dVٸ̯{_,#J,&}x8LNlYo5敥FB93ۑr+\0Ʌ*)֮Lp-϶RyH67ya1>NN (sOڏQ ,3+"R,.=]uR+MF8ԤO" 5lLI[mlA')~$)3jpnF}PFC߼Fw4gg^%}i?R;И`uJ[oy5,c6'bhq NBf1ןx3t9tlIOF~)hq6V5 $NK{1k(JH}16Z*ńtfZ)4ݮ '(В`l1W'kQ,|af$qmFFy^RL)`pi%aq{&œQ@y p,jFAg8򨻙QLpʒT>S,~ы,v6PKʵWaW&9>XnC=Ms T%jřs6Xi$Vܴӛ 4s5 5ro#SٺH ' ꊂ]tt@cM*ij,C4@o+AS6@t}4(:"J+q@[IdY]iGi9\ڟhGp˓pJ!+N|뗌r`xB~#vMCL,\=؃fջjA~=n+0r|)M轓AwNwЬ޷Tbנ kᇃ-x V zmŸٶ -dkv-'wd/mA7Ucʓ/ 1G6endstream +xڽXms8ί*W!oT\ 7wJWMۭe;W zO% tŵ=qu]W VM_:iS'Nm*<9gZK|ְg2h7M /qU1UǴ8L.IgwBsBZ6= V0^O ~Prٳ,MZ@ҶՃnOWu^aX@e~1*,I!*p4feDɡWoc4\hkrړ3MW}i?ϊ$UF-ZT[!`8Ի,NatGYQuXR-e@m1JTN>5EG:'=Q^5ܗ2\|qW-*ۦJb$CGR#4¸BZȊUm4C:h +`>R?@fptD O_*gk12ZQt5|z-JgقZ$N=ћq hTiTKR1p +r¥-*M M u^D=udM8)U!(6*Җ8XFE4h)96v,n-9֝a" `'= pvRpvuHEIx;&VKkEB ,ec`hKCw[)JqP.8ι-rLES +B_Hđ +PSQ0> [TeQ)Z)E!JPfc UkdB(J͆ b,rCFb+*!e1ػ˨jcȻ4"&ҍQSN so1uY2*{;(NxA:ۭi:jX xN5Ea'$05tjq/ǬIY]"K S~~J!3ŗѠeOxK$[4I߯9Fo:7! 6QPDpO0puƒWn׵?a9`1̏ u- _V 9pHW~ydA3,[qzt/iO:iT)_`Qfzz;>r~:_ߞ/.Xʿ#b3 +x!\b<MU,DB3RrgQ+4K32~ 2}\+}'Mkв%zΔϕF? ڏѳ YeL5U3035n[(^ U@۸pQZ.r^.5[ȃ-wbG8 Gь]A3͠`6닋>{wWvr)Vɣ}?C11{eͮ5yLsZZ}`Z$y蔕$Q6N|_Hԇpdjt_A d29D/?~xC}fSvMCL,#dgW5~Vz1i+o~vyr52Mbx..^L گ)r< k OoA'<%-^{)wc +ln5\Z~wݚ?\7T!Lfc)5endstream endobj 5405 0 obj << /Type /Page @@ -21934,24 +21788,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5411 0 obj << -/Length 2520 +/Length 2357 /Filter /FlateDecode >> stream -xڵko8{~/Cd %RIwS$/q t"ɍPYJr7Jr{-Tp8XY -o hqd>GiQhε)3k:5OgwÑRʰ1yo}-㞡ӻj3lZo2ft5Y/߼9嬕 -Pߏ>~21*06ˋ#S8-)^kU WfQN,Ts1mrUiy8rc,kXeQdhb9VI?e fxt-W21^u1yq\ͤhgF*5g-^:ygwz -{ -˄ՋXTwٽywӧ - -(ׇMzn~\ T}s9u!rq||۴r=}UEm ;hNiW]9+pDsqq}ݧ -9N`W;QI7l sf{XK|wzC- }VX,<>Y,MYSQh'eQL {1[<.1la)juρʕ?,gJu}MϺκt[/ݝؠ}MKxy :i7SO;}|ξ1:^7'bF em=8Sf۵ZCL1E`]R(*^,E#!Kł^c ʭ ul:>Mj&{vcDG.Ǒ>~gu;PGib8re̞DV-ʊh d]LMtJo#dT E 3XFuQMb5P s]䯾0kE`AL%z+n\q J?}b YQ)xγ"d8,< fIz~M m!yV4a6v!b[^4m$Df55Czy -/|N¢PZR(KG&Q 2X(Cý~B<: -e~q2_m4)Ј!>O@%E(d `cMSGV39oeÎ D Q̙)(~hȧ=A8+wBEF:H{ )B w" -Danpv ܠa~Hz2"/PGfjIsSm-}&Oo>vjFĆC*r$b'plTuj84T0tJex5N5&|vAVVd* kmԐł(CvH">:m#b.~39bT%nC nLOX>O! %/Q"|Jhw -7$dz}Ϩq>'[>xD5:A[=+*5Յj>,򄋳,8)[b'@zC@M}!p!i1d{U̩v.1.6(֮M_Gq5)j|]~#P)Ѥ\Yq覞iH1(, oF2Ғ8!# jsb'OWe(Ȭ>m~CW&_|}!O?|රll쯘3zɷjٹfS;&nL=&e -Ka_w/[ __Y,3*-o;0 endstream +xڽko6{~/!2C"qع-]I%W7Ϳ eNYp3Yς٦%1Sx^/\XϰVOc`Α=ffs2>翜Nf`gM̘tr;Fq&Ȍ .=ai4^/^LV@?Y8`zO0LŁiK׆ +!@2iz ezl ZX*>6y4~ atZ,"9@{Ђ3!?&<Y9\u˶~Xf +EoPF_1[/q|֬;voUxAxQx65] [qGf͑o:o%d*͋mG ۞;] IK⍥jt  LHovvbfߌFg>:(p\] +fd[Ȝ9t2x:~!wM J]eY#V/AЬXaYE4!/t0߻"ϫqXՑ= +4BIOZPfv]S8|CrT'5d|wuuwuA ۴d۞y@h#هGddpuu*jl[I;oVvc㿥j:EU.Z +k3GrqYWi\Uqdp(\ :BnDSWыҴ!کvvnӎ>ZUN}'*߱v:,k%k3GsLxsW*!]#ï-O8JS"%e9.}3$FրhVY$PO}<Q"Z{(cTH%y\z gqHJ Gҷb#szq QF 8!i^$Vț,-i[ig[k 2ȪjФ4{"T6.j*k"&Ū↌v/MF>m_8A߹ o`zW] }T܀[O4 7g/;ʐ@m\ ?MG7c$t +]橉833c?#0((G WrإU6`q4K1[;M>8!6,@ {4n%yeGMف@M,yJkTy`,Y3ȄWF4NkV ,-;gX"ԃ-&aGm]'BLsC$TRBeOV2'5aRl%X7OMu`QWU8 +,Mp# %N*S%7PUcVƇ9 /X1 𷉮λ:=Ug U.P+iL.αcgYR* ӦL2U' /CZ?SoG +]["no*10|#)j$+Ha^Eu-ty%nZ M[J{]+w` )@2YE2 ªNvMn8$ѡ uy-)q^ctB55o)BMIM( n㲪[R' I3mBDJHKt71.w0,Rċ\գJEhjϢ hJ/z +6CWAp0 n% !I\InLh%9pGpƵP]`M녆Lm>m_endstream endobj 5410 0 obj << /Type /Page @@ -21989,25 +21840,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5421 0 obj << -/Length 2757 -/Filter /FlateDecode ->> -stream -xYYsF~ׯ:Jm9>beˊ֒Nl?HPĚ$hV)JO[. s|}R$S -iQ*at4Y r})\)L- )ld|qryn+FjH*֤¦XE)-ңJaeDr4(7p wcn5Y gnqx0 -MA4!W-n`p/ڗnˮiËthŻV5#ڬQ/aÐ3n@}AfEQKE0Wجk7ko [_:n?41.*VM^2?tIDأGCaVھS %+7HPyš*7Ϝ7;`7&rț|ʳ5nPhLmP5a+;Z:6=k -Q-uT;{c2C9sO2@X[%Wi%!Ac(xB!?ڶAԻVDJ: -_GRE -Wd@$\MFM*ABfX"ߛ%P]Je&y-M=U$Ӭ}pj-T {DVQD* g"i;R&fwN`=WLBr7b&[|=4\wFou{m䮬y!FsF=_XdWuYݦb@PZȫlk*JlQ4c3O?1iw@_~`tt^4U AF -RDG H!x{ CwZA۶2c;{g^[ vOT@xGx߻^A`h{G RVo?G@ }ӌ>@2 ^l8 -B8pKt4Ax{ wfOng;'l|Z\~_xN/8|eC ~d] hȗ(m_^;GgÇ.n.)k!9'8F? \_Lxj(mq[&SzQC;l \;Ϡ RPB:U>=\EiQ0b@ 46]N C8T`vvJt|B"9O,nw>MQc1%+岀| -j$p_ &'n)517wSZ^wMd8s 6F~^:W1ӈc8xW9:b|Zl!sx9o#|<#Y@MXs'~'X]ܼhj,V7*zPA:`v#H ςAׇH)m|-O@;3ox@%"΀s 6.tELnY㞣o#,3LkkR^hY7m>)XdQ22T퉉3Ć\_KuqMK:^ AmAR*wCƙ^Lx,)|@UQo~uѓ (^8TV28VBDS"ă2q^g%Bkk.0I:e7<3+tTaM49J4N^B3+0j/m s{M*}qNȡ.ڽrt -Nnq FnBj~4F$50B*o&tendstream +/Length 2615 +/Filter /FlateDecode +>> +stream +xY[o~PӇ!gx (lEn M0((*)f`(s9sw$ +Ih?Lɢ8RKH _E~D+?Ud"ӳ7YN,۳yg34 9)B_M?9z1H53BчOj9R~&kh+_826 9:?GῡW~fbhO߂#p3 lAhei{n; R5%\fәA9[i8Mg%x2m&^>\5sp¼5Ս̈hᱚx(WzX`yO:SCޑb# @rߏʪf kY SUˆ6JvEYwSxk1S; u)duWLx=V>w.wZӦsjqnQʗ7b8p瀙uY7p >~e8)Mu:BrYܟ/puV]!~hb_p0~]oں"bp UA:=I  A`Uޫr*P昵U(/w3+nn-bɚlɳ5x h,^ +0**/@/] (סPa>h^TG6׈"?7ph޺ӄN}fT5-hMgFapO@BZ&/mM\ݝ))"|4>*m ZZhBl{C&ff~:5lC^mzǮEsBY0]f5O^֍fGOF vп1 (ڿ4Mbym78`xZ כ +抻/jU6Y+; wp6cG"Dߒ1ʲD5`Prv7|| ^ C'X#ZÔR3&O*c$a>p`pK"ZM`JPe +©ԐQiqpcMMGqp 7@s3UcoƀAX#.e.`ɩQTX&6@CFAѫm"ǁcImIY2cO/4 sR|b`FɊ A1!LN;0Lt~ E޳A{@sx -Ϡ\s7.UwHxrU6@HD,bG5ݢqw=MP )TL|KB "rDxk|M閨/-!.ݻ+iruEITKNq3Y䕅c­RV}T\ݤl7nf1T:91EޫʘqWe|&19l Ӎ9Yr?S4Ю>45ۑWYSh=b)F w8-6FJ z%A"BZB}ȅFI6FӒ/n$jɗ D/&MCI"8>)y M9a6cޡ$#_\[N[Cp]Nk)aIO%Y]n0ݶE $Yʡ$NtJrUJ$bEe dblUv1X'?pvikz}ҡEDOAnDc7ǀJT$+oA WS f3CB[>ӓӧ_|ԡU'6yQ =?8j(Ri$8{ O1ٿS + Mizjy'#!`~ULڎ*}  GRv`ı)!C@ =Zn0AtrbFabSy6[,ujd₣'{JlX &]?n_4MwSi2ABecA Ρx +N3K2q(3JR|bfqQg$-mXF|HYgev!%h/O/m1ơ&`6_ ;C @+endstream endobj 5420 0 obj << /Type /Page @@ -22052,22 +21896,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5431 0 obj << -/Length 3698 +/Length 3484 /Filter /FlateDecode >> stream -xڥZYsF~ׯ`PUc.ΓbPj-s%[I Mj13Hrm*s0stO_HL"OLRF*$UNh#? K1$wgoDDaee Q_.gw?\LR‹iϳ rg)3tsˏ?\ -?~=ΟԟN1g4YKE3P ~)5&G12iNK.QfƠ䄐r(4& ZW1QpU4'AXpcvDP7|[nZ--syJú1I4Ivx7qvlp8`@O=Zf}!GU0zYYm؈Dr!ӠmpEzkͶbcK-] |U.6vߝ;hAV(JTz0neeb?-a5~욖6d8ޮ ς(\ljm;- T8Jf&ޠ n' sT@!" G8\ԸsÆ;?xS0 Ca[!g%׼~_siDXwM4د`GCNo$ lEeI`)OE]=~W _]YԆ~}X 픜y9 -ʩj Mbp>$~hڲK@H+NH&S:7*~KZ29Lh WZs^[uȺ/툵2\QdE?G08L #k0KcK񾮪Qh<0zp}΁qt$vfep?0ڰPB^۱H"DXӯQHW&gqHgnW -nrƮH'l &S4;eiЁQRIW5]⅑x Tëp]lp^A\֨nb'8">.7-sdp${.1cZ}3q#UvꃽpXH -`L}< +9{]~[l `qd Wp"lK[Bop_XPhvl}R"L#1#7d X0ukM{z?@wDޥ !Ř1mXo&AN-Л.Φw"肤H!.-"vUv9!pYt^BhO -suI\~ /,sRB'#b]q3B!YAT3nzɅ5= -a_T(qWGX&s[UL[79ұ06#7bII[D2Ƃe㱙#p`d Y40VʡPP-u aQ+Ma:4+uף%o"z0hG}ɐU&א'G1::\1MM tQ۫|ᤓayioav6i_M )h(ђ vl/0D'fV/؂X9 wKOB_ri n@?ëB#9Eb$}ksPd25ao0VS ۆ=j]urm=ְ[tuJpqdXz\j=Pz Ĝ7@♢-iVayf7'^XvL%>GM4Y -{R`._Y=~yGp(}Wu?}Fmo1Qvt><… ftfQALE!~a`;H,j>-qt c*u6vi3itxMzk.cTvv{N" qѭ -ݾoӉ&pE]*L.k@ILIB`qZ΃ڴ7o07sc-\MA·0{jÀ LHZ1d\􇡖=`>7lJPU𗎩 O8EDp/>0lȷTN*Hqs5Ŗh0uCꂰn-$|AsrNڥ[:gƢ9.+ ӱԶT0Y}N >J򘊋X) ulk|hUM#ʭޮȥrUvtPpoL_Ra<YŸO/x_kd$qȻF -Bk[6[Հ]iG~+x6],6E6E' a /<6pivpy{Ey-;Oˈ*h}zH ]͂rɔ]̆hxa?OU8#H aM*hYt^ zS9GA&/[nӢ;%مҞkTiNF$1<6"a,R#@@.zY:b[; )]=9sTY)$w1i- wni{0zGϮEnci{w" _zD_+B'7B -|i>1@ܬbCXq.P,!!doh]׾C-m`vp,d M::1.b S[QKR 1Gc/Yaߥ>mrӱ!_:(d޶}*]b2r|-TrQwH\W5Q,T3W^;ki^SYlLs{}pNCCipU- -V7B;ן]uhXvF#{bR7jq*TlsbL(jRߠWzz):]z :ei^ѮSYlLz75CjU ?)OH`s̘;^lyPR `h8}v7؆VIA^0,ٻbw5WcGU%.P,+C?%Oί $άq#A>@pc]b3gcȽ 9voƎJ`XCO7U:[qSV̾ՑS7 ; *^T? Xendstream +xZYs6~PeCɓ3éGk;J@ EjH^>8Gmjka?H"N&b; 0=Hc7g/B~-u^pz +\qy ׮/n//yﮗIr˫7ϾIRBٯ$,4Y$Bۅ/h`-֤^' +xlfВys=ulY~z:Ж* DX25_YxGa4"C`P9T-W <x9oFY۽VBhҾ \=EqJHLu&np-wc[Ki@6XsG"y=}G1¨_ xWngc = b͵xBtWPt}_uVLJ +VUs1G~30F͛~FE$0.~I^ !F?ّ$Vg 4,hXj\~~>}DHu['f 59l<'wH5ycdd#:HŌZL9`EO͓vU)4j2Cn"Ixk^A^c&HK\jb^W*ssa +XWO<ӶAuˋw >4vX-)KTOT}s[lgk.صF +wM*CCt`.)Z$y ?pFE(KH*XKDP˘i(;=6NW7Ǹ%RKL< Ci4Ih1|O*B#}D rGg8c6@BW!HN^ ߌ@7\aW3@(f?PE\DK2 97c~ar*dȨe!u]#.8j4&zDAF hJu*0EשͺJM)p>Ud֩:7F6c3XCm 9]q$CαQ n`(lUvWYF%0^gJ::F/*S8hNXJKt X D^c9^5* X},|e!7$0*^^M-Fj@dE 8\TJA:EU)L%\l^l78}Aså9‡4KQȳQ?v2`{;X/f,o 4_Θk$1+L[Qr]߬[a5e=bXL+rGK[UWB Й< %)jic +UԹَoxF&\aM[@t?d㣮Jb%pVw<&__p18T5QJ}[? ޚ$cXߞu˽ȗ1;0'{ٷ S}lat s*`8d +gBi=ZiT8Lܚ[ئk=czx_X([AVW"벐9O\tX< XU] %c,T^o"T.#{v| WușO]/J\Nl20iRbDs]+`J҄]%@ zb7OÖ{CIҔYחkl{mÿ8"7j_5qf'9ŒHٰs&_|T;Z=DhEq?=e6w˸h8$ 9-pNMf'vO8)41*}@h+[%eUE8fup`JtPk3Z-H^q4 ]a 77z926em-zU3t?QdV\HHp6J|uBk'y -eZ>>?_Ǧ IyKc>qS=NXPk958ټBO'C7˥O NwKM`1FK ,4w-ܳD0UealN1DZYCL80U=s56'3Dc$Ys璂,M"l +門hTDV8Hŀ 3$yBo$Nv+YgT@m L<. yeHL9] +FxDؔv©'࠾qQ9gz%|R27/-Le5|i+z}6룣$GLr= tÕ; +%QKąC7-PVcY +"8z4x )b9IBM^<<=MυO9UQgvXAh뱱sw2#kGI+GW N:.~zg=J%+Tɱ„댗Ѩ~ok4Y}7V5JMmGJifW[ؑb3'"3ί4^d Or/HP"NRp*9u1%K31s㣦]/³EIIR2bl'I_yz648C!^ވؽ7NbC` b*m<# R(0"oϰ}5QyH!7_PP7~Z%XgwY17ջ݈L[+PƉbF _,QD$W-ܜhtxh4 @Yތ6R,I=_wӨ:~B>aAK\{c=\`;ijh|C)>r-+FUpdBFfcjW> endobj 5437 0 obj << -/Length 3335 +/Length 3146 /Filter /FlateDecode >> stream -xڭZmoF_!*5w(:ilCHID(R%7oK,Np;3;;/ sgq`;*Ek8vl3?]BAw?uIfa5~].J)M"bܵxtyOàk鏷XYLf%)ۙq^^*A1g~plijGxvlw Jˋ[?UcZ Tl:UjqUT, -;p|rVvwÙ:>曦3y溞\oN`T$M0X$\/(wB~w脣mWM3dS~*0]m#[X!yYryi?q@zzS?VZºI i=+my]ִߊy~8^u"]7׆+nu1^A}#[Bҹe*/Mb-ġH Q r`_u\+OH#Od|q,ő'<'үpvVNj 'ڱ6+%q{ >,KwȪ) -VN4@yD/8$Cq~cdwyWHxg^`ܙ[ù^b%&+ɍ![#?/c,H(v[9 ^Y}CWX;9Q< x7"Bb8r K~b'+ u[MJ9Vv93ao1-'xނfiވ0^+m -n9#NC$;vn H|jaLcM2;#ZY߂mNVO3YLcMp~٨[ $ʝؐV3B .z$98 ݈):i1\FA;w4`m9t* - |1, -f -!9 iӃYV~ 炱,جUۥKp + n!3Q&EH89oxǢDÅ:@`|hQՆ,KD1m@~%E^uĎi`L :MDj&ىjjLnTW gPC'?B1Vs(x; Yơ%L# J6>ʥRDE1!iaQk{)`n0͟D+Dx`N;M_rmeYG,B;Pm|5L eE+Q(A p[v}JH腣9@e垂j4w:Hw%&yQM>=Jغః~B?/faɱ"iaAǨwphI :xy3V{Dźrvdvٞ vP= voNBWތ5CoOU=R/Ć$&RbM:2șW.<Ӷ؄ayP^%w<1 \~ Uifg{$QQHRZwyãE˿%a/xMex]o@:\߷UJQP -#0!r|;]Xa }b(Mڥ_CUWb5+kH'cPOd; s %9l -hqkwh/u;ƍ#.~4+CI]+=rtBr1\U!MPL|.;AI֥#QSZ%1䢹"ŰSxcGO"K>*-}oȃe0 >rs#2M\O7pKxMas8)IQҁ?KoCf#IGVV*bHc*NZ/':Xhm>VF>_%(l}⏖0$+~hp듟 (E'-^N_\'J)/HxEwn:+^~}4 ޻)NʻE/vӧo~=7%O^\hClq?翟B%}$h}F+^\szĻH`n|Ǻ t,cjګYo@z^_p&?&8d"#!#5K2E +NG?xHLDgjA Ev*4oS>lZ(_PF#QGx̲9?ήrx |%q 3tMټ7 ZOoQ w:GnȪ}jU MOR{x+2') +B}o9yEܦ47}Ɋ!sFLLk21ЌT1ՂYԤ"[[n ` BLVg+D$Q`woPE;jWi"m3>OxYg/y7K Sg&rMK4b; )Ab_$ chl>cE6oz8**6׵n}gG>A^!i:>1؂UG^CD+PĠ"vӺ۵>6nYH~ltǧ1M||oS9K.<䆱C(5sDaڏ!ȡ:J) @c +Y.Ury 5]qH-G fI`1\Uו?ct$(C+PQ څ..+*F%?y"U(!ЄanZqQSձ0s$O!ЎÂ;mDvҳTz<첷(Xۮ3-Αyڢq!A5KP)J #Zk5VS8ړ)ZDeSO5<-.b΄8nƕJG(.:_3فPHvE{ {E{Qn|U6̅7< وݯyx=E-M F2R`uDD/B] `W#$ UhjxVT7 áemfyS-{FM좢pؘʮ@k€>bqDW4t.\>(}J#eF>yڦ߳*{vʊ?>7U#$ǯEvB]m著]a3|-mXo{kzZ;-{lz]gK\{;|C9׶V5CFo~Ż'b@tm15/Ul#L4W-ϖYGO!6!z6/`2y+ +hn8 MZEwjt^YXF|,XYZ{- r@reHedg=p xp 9.ɱQka&$M]VjbdcN]uLƗn1,^% d +-&D:bbdkOQ|Y +*dvտF*A9+sh3cendstream endobj 5436 0 obj << /Type /Page @@ -22150,27 +21997,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5451 0 obj << -/Length 3169 -/Filter /FlateDecode ->> -stream -xڥZmo_a(LkP9%A⸶ܴ-S.IJAp_fyf؃?qNwu#F~9Eb."ϋF﹩/{=x9wv͵֎y'wn/@^Y >|Of->],J`U)._󎗰Gxmax}t@suts7ǂc5u*N0/վ:C SSNʮM#嶄?f*qwdt=S;;RmIJ%pfs.fEKVmiV5vAWjIҼ4SZBi8Үy¾*xVV(0ۢ[FK\343 }ׇyBua,- hm uQ w' I -"R\/V+ MF~D⛹|R -ąI7Ewe6S <^_Q*y9^-5B|!3mΖYg ]Xc[2[y 2؏⠔%kg[ʈnHyM-8N7t((c/-w8M -]%"uÆzON̛[Y|ǥO8MR֌ǫTCWAqstۣʷ-ACY@e}C]b=4 `rset *XǞ$lyS@0|pdyI#In+]H"Z3>W+0z 0X.[p) fEq}58Qϧ=,Ve3S8oYM85B2ܚnozЊ:%sl˃wO"*ܚhxH0u.ROh͎2uc(^"DV -K7@'-F{:M52&oy`& y q]F~~<{is ×!QlL;_fI`^fE)G}?x JesDyf-ǖ%82SDR1zB2~BN牵[=?T%U FGѡfņo~[a6 -svِ݈>{͛M -z]Z.>d/C:'g|UvE }u@ cWjۓMRu5Λ|滢P*Ǭ~؁]Fl,65>c_pp2ŻIh_Ȕ ¯X$ AT !@xMWHwf~y^k\؆J0JduCꯞu7Ch&x(f1xHX ~9=rGoVT=Mrٌ4( !pf0t&48tud.6QJ* ^QS%MchcC0/gHeu1AI=;a&CJM8qQ:%aOr`LcO7G&g,~OClY`mw^ d4DT k`DdWh{apğK ) -Lq]<X H;,nPϞ;2_qBXA*H]1x#D <ܘ`&Z@aF >O6N> S -""pKw*"h+~"Wfk L7^B㌛ؙYM{ P<e&,&68h)矪! -{;oPt?B~;-ߨlgx&XM"IOH7 y#cvm xE)qJ-qxv}5`ysM@N@&EF `P(e-!6hO4D -5x5mH`&Rl4% -%K%<3 z! 3y'nQD"%fpQykeQc`輳sPY!7q $KƇ}-jilV}&*v'TfΎ*()[@Lu=3Ty|jh =|-2i0k|O;3|n2+$8y_pbM&J'i^h*4т+*R2Ȑe \ O5sp8|:cH$Z{Uѯu8;{n5]7ga(+8Flw倊 c{Pm rCr -JQYkGr<";1DdS">#GCB^k?DR66~sU:}u_["(\Fi koւ{Q:z^^,?9=Vvendstream +/Length 3135 +/Filter /FlateDecode +>> +stream +xڵZmo_!(L5(Z8sI8-7-.aMkԑ)ۮHNEh;;ܗgƟyǟlto|䋄7 ]/p觷q8=7D_N/gR3wHy}}1+||3>;8r*gBç^rGg +/zÑ,~6Ga(T\]jpƳ&6 h(MОM§u}nnMCϪ-ay:|;2;{RCbz> ~(k;IWЬH| +іf}#jW{-V$K)<5t!{2k/J6 +%zŃsprW+h+}|=L3#37߶p0/Zo uq*_'œJU9j%링}3כz ԅIWEa6S <^_qA(fs6^-.X$|3mVW.F[鍱XNh4`^*=8(eZl2[Rk^4F&-SqSpy޴V(+6ivѩys'kC︴ *PWxUz*H3nn{6Yy4jȜ:7%vB&77`PAS]- `˛-sH*7>`jR7N)7Ab!>13 :mcyup<8F ^Rr{XѺ5:%haxQaP XRgU 4L"q_"ıސYiA&WOf<~#N䁵[s=?Tw#uãQa;$ZW B-yœ]oHPО;Y뽁o5w*Cv7 +"e_-﫯Br6|W֞|Cޖ4uo;j+-5ұ-}0rag-^~]s9dXv/dpb% =8GCև𴛾nm~y^gJ<.ޔh) Gu_=?ؚ&#&eFanL8z&9+Y!2DM7i K, 4C6Hq; xfExstn7 +: q +aH>J9qQF֍66XP/A/arHa#`-ֲt O8gM*(n;MD9F{OϜ[ehM0v-ksT#33#:w.5"Ce ;h .@'ۚ ?|OFf/8~3LrPb@?As54{䎲_]Pȏ䲚48$Qpf0t&4x\ -Z >QS)h@Z#0/g[Su1>I;;Y&aCJ=$uQ:%Ԅ0'em0эQ 1dħg;G&g(O;lzO  /HKi2o !0_arwցѨD{N^N|7œw p` N6($A={ܯ|M +]`Q  9q7BD p 㾎͍ylrJ 0Dt 琖 uixR8;tN"45?+넙'B ЮC9&vjk{cv=It~ 1mbR#k&rܹE#/d. svgr4 T}ÞQ:4KvkBדR" G;d?-( "<𑁜D&CF `FIVk " +S)TqFp-e|IU=whPY& ]qC$L6E7c PĂ,pqupc|0bC lwHR+-D*ilV{*qgOO和-zd UPz;d`,-w}:{˸t_659xq򾔍vEM&'YF^|TUWT8/$<$Cƹ  +0kaD_VFH%긹_u(0n8+vr(BF:6M+v*C{dJz[<'CLȌ/Z<>Ymy5Nl :iRmRɶ3'oAW*HN?PQTc]=a&+ יMSW_l~*Gz Qg-(8h=|b'P $ͤݎAl\jCvG%^Fn]Glѧ#bN~.{0;Օ̭e2*by}|oval@A$&N=Q +Be sdL Rq)}g +WO\ +t6D +q뫳Og8 /0xο'bη8ءN&ˤqX@#JMf]E_C=VXr qĨ#9| 2"B:#s}NHq$8/* k.n*~P?va,8Aendstream endobj 5450 0 obj << /Type /Page @@ -22199,26 +22045,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5457 0 obj << -/Length 2911 -/Filter /FlateDecode ->> -stream -xks6NS3C|>vܸu%'7-Q6'TâtNK`]ڃ5-6e kp + -cP-_oN=g`[fh㚎+qh:w1K) ;4Gc6f ^Mg_q6.bHcHgf/G<5vn^KZR(淃kk#v`2 0L :RӃkR xWV\n w"ݖZl[ߵLrH/]fH8x:<m*D"D`Tᾱ$w3d4)+E%`$ bRCvR&g-5DQ4>M1…FEC<+ -cRX{?ߦ :ǯo4G&A`bH -vXB>iB._'G0XG䂆 -?h>C`(v]1B:3@0SMe5[*Vze&cE- uQ/ɖ2m'ЈHir- zk -ѐ Gm_=B \yo>DIhX|pj!' -4pLts|m"M -4 ΠK.``Ta+{F - E-WvS?ƠC}ힴSrL^^%Ii5m[C# -٬pWBʷzնRUOd '4}OGb)A'X])H2"}IGðzXPFRJ :n:䎱)͠78 qH+X%ԜhG#YTQ1"ټd4PD_[dI8Xsت€ o=nA=NIE)*N ă Z-V'iE PI D 0pS*$Yņ,H()-p*l]B׍.˞#om7tL7.BC!#)lhoDihaU4ːg23Y\Ce [}۴#pd`)HP}mRXw@Ċ*!nƪC1~o9Sղ-{K<}toa8^Mi;cr?CFI2{W bu~V*B)c!Oil@ -Ynꥆ9V#-pg,i&qXD|Yrp |kIi߬5$L>(-hi}3i*gL2cf}m1lǓfF&@qVWm|UDS~,Ɨ&IǴ ]{(q8)'kt;k󚟹@UB !@w2lhcL2_B+X7v'nj~G9я.gu I'!;I6q/VqQzsp[G}4ˊq-.~pQ; dدWSZԃ;1#mendstream +/Length 2764 +/Filter /FlateDecode +>> +stream +xnH_fa ++}3dhP#g~hRdauuuuuݲ9pVA0Zm-z 3Ҷ8ũG±C'-7D\_YǯWR=~`_'Z0v~q6[~ő.8b(kDgћ_xlgrղ#TS(ǃkg;pl{[h{]eZqz8w˅W ~gKA[-(w@ L]ZnJ8x8<<?>{/_x#m\S\0f|r4l/"<~U<IVŘG5rm_Ӆ$jfmG-o;!t>}%?uC˰c@(%Ӯ]\Id+9A, yWU]Quװ8~PlD`PVVI]\,PBD2__͗ࡣ*$ic6;],/nyIn~xK{zO]!qDzrP?;cY|gIY'n:îOTt3T;<*|ocA`C6UJX}kMOgtiRV E5P$ bRC)iYSgcWwf4Lq| b~ Z1KDB.4IASs䮚QN!a+:ǯoL@bXH +B/ p:ӄ]>?OrmF䂆 + JmB*N'ug`!j*T; Uu&cEuSdÊGYc'ЊHi<:HA1O$Cjs}cHȰkI.T5VO4v>ISh||pԿeˆ>VjiHݎ9aByX"c_-,uR1pE]q@6QۆdDY%)g3]!*7j/VJ_=jb#.r臔xDQgߠ*6Dy]ԕnbXjڪޕr{3mg(#O}rJvML&1 `ZQESRp*z~WtؒrNM @»@XyD[g X(E + DovH֤B[C(fňbGu$T-Tl]"ɷ{]GGGfrnm)"C!O%loD>e*-CݎokHF9U|&9g +mN?kSlA3/J(-)\IsnjN4zk/MLކZ (u |΃BJ^V1&kCh"+4{Mw'>J4){aMCɳ6C)_ )_l +xV4RJM)CapPB趐+}"%ϳmh;De\|jspFAܽoʳ%tuf}G9N.P3xMV 2;") &bo3PĥrV^P¶qN&y %6*V俜V&w,ioFwBG$PƮQٶm6+b~8t0tV*FU}`TB1qcexxm_kvqрMVT$Mp_qPc&pycc61R{ ƺ~g8 >I{anh΁E]MW~9{7&fŘ`lrHУڎB%aϗ@Q RxH(+ +f-^~N( =!<*`<̴ uI`CE0l2df|rnn@XE(lCt ,kzL;aD7uOUevopk€]3;S^|BLН:6 +˶3?t /n/ -mNC4l搮M\0LDtX7Vbd;mzqxȎj{?FiGo+9*=e{%L xo5ZD\rB{q4X4CH \ekz+W9>m$loBDgǺʆ-oh8dmfn_,ci?dW1.gWc?7( +O@ܜUm1}TAR +B{?PЮ]~YR=n7/&endstream endobj 5456 0 obj << /Type /Page @@ -22241,18 +22081,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5462 0 obj << -/Length 2498 +/Length 2439 /Filter /FlateDecode >> stream -xYYoH~X4orzmc`(%qkH*㷎n  fꪯāb#I [F$-Ϝ -f> -1"/7;dmϗy`]z{;7I)-YF۩yGy0(8i$9 |Nܓ3}>{?,lb4Gg>93[tyvھ'u8?Ǡ u+l?n-B OB߱}#4-l$nd݄w -Z,PIEәS_+?Yv66j*]kS6mN-0vvFnW2'ڟ}&37m~ iL J9mt -DJ'VQ >rf&גIi'gra~K׬hiei67,Y־Pdu%6;2c)DM{TG[gy%т-KU*gƌ 2F떇Q< -[V'j ܻSWjd%xmQI.c Obw )fji0,Xq?:qahnVm_^=>EJ~.<ǣC\b 퇐S}0cWDܑ A Ž-µp'AN( kRm>5(ZTeE^zɟоAo^wGYWЇer^ԳOkTzx|Iǵ9~/ EzA[Qg$BW3\[z&᯿8Qd{Apr'#ډ<ξڑƯoM7ؙ5,_rw}ӚIW[a )b8Z~r]iiR4£[pځ 9% -&i|س-p cJJʂ1+A`QV5z߼2(t_ZW7t$%^{Q;'lNf3.dHWXy ZD49`> F.LVUi -KC˛[P!U5-&/%&P,yAأe$u/hlRs$M</4y2MF2ރ:]m}_3|ɏ-v56=){uVȂ|oc2.CV7Pcxԫ*CeS. I xeHD$%|w "mE^'׶=󍪸:MuwÏU4ͮ}Pˆ[wEdβHVՃ#rqC,z&25[}Vx<6o0Fş.PϮ^˽B#腐kE]9"T  -0D B=q乪F;X8}l }6.qXauF>3UbfyNLSa] r2U81mWW*sCL2)6 -;C)% "D3v*s#ۗV56^l*$ A̴tb[=ŅJ߷%W^ccj2sY֗Wvt 9A"Li #硣-#ƟtE2%* g0LM4\HӡIE^rSdF"+#e 0VKnb"aY% ,Pg/xI0 OC9|CtȒz\3Bo@HqhX|Xsv*^,O^b2e `1v4r:*phva@el?TW{Ka΃]yU123{m?RsI5YɝA͍B!>g=~7SR5ݹƥ]@.hăbptOu}ȃIi}L#ך3՗_y#W'#f=@'ph}[8' +s8=׼ :p̋f- ZhZ;NdC;l뾂zC+ {mRht&dD +rF82eRuMٴ9@7\! DFzOYLg i'e`g,@_#̉}!A3jioV[InT +EDơUs5O耜x}IrRZj>g"tأb53Ź"'z:e"zs SpF8Y]fEfLEIRL$%~ʙ%JW?A|l'aO5i <E~FRF鞤"8К+MV7SO[谴vdqajjRm_mפ$pnX(DyJ B] B +9>^WWWF<@퉬1j[;8ug/ 8>FE`Kvjm8lK `.KYcGG /.0ft~OH7 AVAQ[tD*ٛўv1um[!)8!?O2AI"WUk[~H}*.QSEw2S] kX^tvq W>/_S\d8tGy4rSd}", FլNC ibXǧv߬ (G|}ad#CQ| H|eB7~<*"uCo?!=dJ8^qŒqi%&_֝(c[#0)BnhUh a@blo!Tב{Ka̓Umm@JϓO!͎KJ mn:ScFgN:Yy]t.dlm8XUnc_WWU8'?"rW'aNQ>DQ9eQ yX4a0R4F5we9X9LS4s\(}1I6扯VoLys^e8SG3CE9]~vmqFA D|O*[8gs詜2nH?Uiendstream endobj 5461 0 obj << /Type /Page @@ -22293,22 +22136,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5470 0 obj << -/Length 2016 +/Length 1980 /Filter /FlateDecode >> stream -xڭX[s6~ׯxcjWmJ3N&C E* ~HVeQcej@l^,rLENb8U2فX7ǘL]`cjQesWTɫr\Kyql"Ju/yI$fEuYaW7bjZ's֖rT 53€7y(N@ -  IKD}LJE^u]cg|5kU{/e /?]ٞ] -saR^MZ*;sNtl>?cE\t _vJ7ʸE_p3h$tQWe -oYHa2ܨIl/>aX,@KgaħBJ6;6Xcq1×D5Y)2ߤF|m$P~2b+[Sx O=k5kK \b_l. rK$T| F7boQ&񚥉?|AC$F@ %8.3r]뀕ȼT*N̮ۡ# -#2eA€,lS!4m)3L)9^XvG8}9Ux@ukL5RyB#K9ȷD!k8T` 8:d`mJ3l"aE |Ox>`e59<8e5֟yFbnz@YoN?i^W@DYͤ}'F"y94HRhR㕼͌{'Mʲa3ۨ? -GX>w,֦ ^OFu.T"ytAUM+tfj3LW1œ5C*4VIg;/G) 'Z_0ŞLm{>s"endstream +xڭis۶~mLIO$^]V8 %'<=@i;iXb_1Ǖ4#x*'v~N} q1 pM;BYdO_-^_l)%gfGQlj&^]_\...ƕ@a߯gtq>s^Iǝ_:yheJT;@_'#x$?NK.&7?z.Ojx[ƮX0q8{/` ҟRݾ3e/Yכhj.PjB$W34,r6FWc,u3x +3`Yn&-b0Dd: _ei ^Q6q.ű`留Wij}v+1N,E 'l7UvlG]w_xc0V!xyXՕ] CfHjRl 3S%Y[HA{m9I [F>u^1eU Y1y=zJCFbC_F!U3p Ì|0^./ +ƆЩD$ diQ)PV +NkNl9IpR-OXhB췹fyF=aP^5mZ*;qA5H`p,kC"B89sGr6+@L<Y7&\S~[Wۖ)VbF|i#M^tKvE]3N2=5HT3ݷӣ$#|IKw|9 oN+ҷO#XN"Ã*3Qzp!{bۧ`n;TfdAv`(y;WW +36zNEs9hh͝ "O1~33Y ?0k;bgӑcXY *;oMהAŝA] \R6lT4Z +N Ūn2 S'ng~D}2(# +P6՗`'ƝXЉedW5Z}>?aF[_Ѡ/jJʨE5'{s3$pU +hj9Ha<ܪqxËuX Y¤BH6rhmq}rc8/-C9D 5nY)FT}Z-G.!_>ǕXs_tXָЇ}afNy bH1QB`-=V#8_LÅ5g|k[aj_ wBHKw0L,+ƼTK{GŎ:Ձj.S&V0ym5vd K8?v_cNw)>8 +@Hղ[b;k8v95"0Ky8> endobj 5476 0 obj << -/Length 1928 +/Length 1871 /Filter /FlateDecode >> stream -xڭkoFm L)}.ŖeHLXs~IGiGx$%6ǁdq<Ζ#|#f9\xF'B9fx6 <,txz1{v -!x7b s5By_Nb̈|C>)A'W7*A3]^\z3=;XrvzFF&$/* %<8y2}?c_ЁN<7B[ ]yz9tN\'9EB ,s% S֋Tw- ¤;^4mU*~?E ١CElxLXD/,>bLX]YeYU5q7J"2zF[~sut>}>鲘#}stq|b ֫6on/]^Vڻxc{4jzoO?C|`+Bڐ\.$D)Erє\1K´,+v”uӪ*r78yņgx,pu"hHq0ᱣ AYZ@U ֋U饑P9g8囧%fa3KԺ- [dmMnvƘFŚ&[e}7ܾ^t:;~ B\a2\q3WGߛ6KHxv5㬳#Χ@^];\AZendstream +xko6m T(}JKf^S$*D1Gr$ݖKҊw' l˓a30[0LSCqQ/÷?dp:S$zdtds-8#;bdĬ3NNO'pYDr:5% #q]NL{Vپcpqsuxo`:,Iˁp'WCm(lp*}4^x +Jtq=q)9\OV.0dl?N  +(+ąEfK\D-4- #Z޼n뢡E- n9r7Vyc}' .<@(UUeQ'Xy#~4 h:7-N_y.10WCwUJ 7QeU7׍Wxy.d+WML&?Nú.#.E0>=`S bDV J=;1 U]J$4e-{a{IveEUuGneZUE÷b;!!U0KBBs[b.KB#b5_j([ZP+g tWD{QXW$T-QyZ$ժRc k,1j{GV.i.$#&dnJs3a#*F_;xCdLAl}r"f3mBp`Gxe!y%a֎x{]_ )aV&Es7}u7D4{\[gIM:F1Y~ "%\@YB0t//42J,%;QxJ:vm2G:4 7R:jT1^9:G:+[Bn6%fc>1H7QB"qJ +Z`m50[72CȂ@@\z8T(&h +L, {0 Q}NݣWTfbA5w#WJ cs|LiewJ4:5=!_Ty y2,EI%G1G "JOTvEBfpC4-U.jK)/sm涱Ɔ̵<ű !,kKu5()>zcOF=M,L+4Hha _{:qb`+m.]V;ôHx5jTSbesN3?^~mzi,{xbP̠^fX#"f*=<ښa#WiHgQH5 pw۳&kIҪ;Jy|ܙu_nBOUaJBH3@RM&THop+zWbWޔE +Jbzpcˁw4F- -g0 fy kjd؛W?z?sꬶc^G^U//Lhc MV~! rO<|۶,2n:>> endobj 5483 0 obj << -/Length 1570 +/Length 1530 /Filter /FlateDecode >> stream -xX[o6~ E`iӮ)KvEcaUwIL,[aXD㹐az0rXװi[ϋk_X̡YNGǭe"//6眰 w9#8?=[3DF-pyR1햏zqf:٫ӭUn~.+-9Gu c2X.g'bv1eJ KIMz!߇{, )V9s$u^dGss=ȸ̾nS78mڼ8rWyוW}7mEKD\z)j_?H24ݐӴ(Ɋh篙ͅڂS+γHs7 Ws~KJ =L#&L€$X%~ -)}rffY׭XK=!5I#*tEjCZhZMLe"zF"lkL/pO!q LZ;I-7X;\ - FzEc$J\LZL)L XZDd)=(G+#Sua.̵|@0 T(8Q'9C7WɅd DC.YQŸqMhF+!"U Tm'hf|MGs8Ah. Gp3Q|4^S)i$) AߵuiBϺL{F js"u% (RCd]NIZ}39QAm}w+GRK;v r"֎ WU CS* -$7y'iQtLԾ @Xc[Xx@~ ?`?gs6:^ -g]]Q2a\ *gM^"@Enp,8FdFNgyjJTבj- a/qŢi{Gj]a2 'i6"b}^WOL7  bp%C&2'p0-JG*Uc #:Ii%0x^pp* S2 EⱯKǂGKsy ay^1UF5F  YD,"Z~l>خH]${ "(SUGǁa }"tر';׍O%,pG13vheu+Gw_ݎO&S}AmF N3W'uMq<~"΃.Xp_b[gu>SGۼ}$J\t>UZvlCj[ 3 O Z_ȸ9A,PK6t*(5M6y%neɾL<7O&N>Gy]|¼PpF_p׮{s/GKHendstream +xXYo6~_!-*@8ڛ +v\wv)Ec"ù8 in1VR&B8A`ŌYװj $eKϖ/=iqFCZ˵bY&+b|n !<srӳ+I rn?Al|ٱ 7ˑUh֧Y Xfƨƌ0tu0|v1e+EIKpF@n ܉(D]hnKV$T5N&+qA8UܵUvuSFO9Z@W:~>IOcM^+O_ql!ЖN*}H㓫 GM&Ob\?Q nڰFӺ XF͝T$1[*Ef[ KMJvʋZE6!} u"Jsꄏ+`1x"Hpi#Q%NVaMm~oL1PXy _trtBS^8 Ⰹz6PR 9CA 5IkJfyn*¡On7Yl,0CXi^QT38[3/Mז9Zf"m롻ՇLVs-sMHi6.:O/wKs6yGivMɺ4fo5wu7?!c +#|oj?{_ +S endstream endobj 5482 0 obj << /Type /Page @@ -22416,25 +22263,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5490 0 obj << -/Length 2424 -/Filter /FlateDecode ->> -stream -xڭkoFWpH.P+|)J"̇JX>dQNўgwޙ8ONBvT4 Bi0$ř3Y×Τ 5~qܛHǎhXt|d|W?^-?,= WfR3\y~,TbH7˟䕲Og׋ӎ*B6;{L Ogp sǖ8>mSfݟ#߼ ӊBձZ?P]s$wU~ <-wŶJ9*M՘a][xԍ%Ѳ1${$OztS2m:*b/)imhRK7,7e肆&@t+q[XnDr0o*dWejXntڞd>7.2A\ۗѫCyuyN)E. -)_JXi@pq_ \s灸טp 2LE`)!9ya$(DT9JmذxGb2F]"!f"uM=ؘ~ɒ)ߥ{qH_ W@l̘:& .Z:u Px!9$ȫj^G BAy14-|qS2&q7m(-ÔJ,nctK%f$TU\dy׼⼆_I%K\oR:+)B"Ԛ!uJ,gf$J,;LnS=rf =jW!,Ty5w68': q=rBHñn D$@UHjC -OgVhh/(Aї_s:mn)YӤm -")B xXO<0PLP~u łt -ۢfС\/P伈sRk 2#wDy6(d;=d?Dg$,liCw[",ykLw=kp3csb'[؅ -Z - Mkp^bSLL bgL3X)C’`,|N?QOg7+vL/@Jj|qKr]U|[(,I-j ..3өu`|Ea;%)NhU#(; -yz7]:֣ QK}ҲA2Q -݆2qS)V*mrc}vvuD2,>9(:@P*eziyAG Mqendstream +/Length 2370 +/Filter /FlateDecode +>> +stream +xioF݅GɐY8 + 'hC1vcxHӠ ͛w;s;ۑ,][,ΜN~8s 3m' ٫w?s;qrM սx’R +7V͇ۅ+x\xE,Œo˟䕴ŧOgWUoD~;V@Og-xsvdV_uyvw 35%vc;^2ϵ*tݨ_/ 'ut_USA_:{Hoi$ӝ,, 첬,rk/ldmhODᬟ3nmG4 +$S'>&G{ZoK2d%u`68=Q bݣs^*RJgI*ʷ}+O8Og'O@jkc@MpH1%5( +S;xF~[ sXe]#!7̮1v +P!`@I`SeqzeS!hVj@F\ oתEQ/[>O0R_ӥ |uO{2f_6E{Sf0@/]ELEdQ>vJDTȨ[Q9nHz}r%G43~ 9Bqȱ)%M3K):1%4s*sfjY+G+$eIpMͬO~aFpѡCt15)c 6L@@(RA?:k9) +B^jde84pŏ/dXaZ {d$A)KO+3Da<쟷l 5¸`+$vTT_`#-.,QA簨 +ϽJh]׼rrLy :1>7b=jiˊ1>udz9uV;"ӫܫ&;nכB*p +2bƣhyx=UYJU`_ذuqWJ7eycשif] ȡ?6zmC9&/%> endobj 5497 0 obj << -/Length 2087 +/Length 2032 /Filter /FlateDecode >> stream -xڵXo60DjVÒEkbCcѶZYrg`AJm(D=~wOC_nB)0=zp ˰s9x;g_x۟v0t]ג w7iMzs{=]O~ÙDiеft=/_~y3W؃OYihz~ Wz߳-m!ay=f?[Qy1n(=4;f+G^]f+ Zlz`(OLS%k9i݃&`VV &s<21Ae9 -V&3\Q#Z-UYPy"ZX+VrvQa80qm qu0#[>cw-J? -B!C=) Aہk[y]TU(/۷ =k ->1PKIkMlZˊE \ ԧ.@xӗ ~ |d@og-n95j倎_!qLnY>Ci]pͷŠw8kxΒo#A;r7%UcƼf"Ul[3&;UYPڌAK+*W' -i|+V(mRijtK0PjaU -1~\Zx)ooCZL[ K H=ِ7nWՎiY^ gza¢O&u0vNdaz;OfC4!Bw~?#/1Y*pK -ɎT€Ⱥʾ]0.@`F0X SJ;Az>% `e!P 4rW$gLfJ3&zU"͗/J~P8!>q/BCF^AY vm_B.0[P -^>eRJC}li<bMUrULhW Z<"F|@&y+0!fZc=d򺑕MՍꦀ@~>vo(0bSCJR!0HD*nEI ht~g F7P*400x3H_icJPR >B>>BΣ#Ԣ[<Р猬3E7.ns`QEU,_`ˑ΁ -lXpO[ q -m)5|UI6Ó-߆˙{T]ϡ䫹)583 GiU^# ]XMA[U`2<]&ӻj:}{᧼v3_r,9i3MgOѨ#|Pn*4`XqJ# պG΁v  !>τ[;vh ɴr-,n$Eoǔi.sF5{TM| \Czy2;"slAZ4Y9aMb|g|Ϧĭd(ilv70=]kMpv^daF8@5`H:`xRj \/0.0_y]#g skB?49yzۏtf>O -k])'{w^yk煮 qs 7p`Y@B߁,P>Na?{ftd\<;7L+€_X 0}.lCE'5gj[clKcϥ6ݾq~vmDǚiO?[rWnt#G8x6?(/endstream +xڵn]_(L"4Rյ PKt\41nc?pvvvv3+w;xFQ4^Fx;?\C}Lܺ\^ck"Y&vbK)-7; #kvw3qconϸZw7$֒\^J +gantIeŸJ3N@w#G8v|ih1{O (on SFXnu>}_Z۴f~9|rbFӝFl֡k݃Ws!'^da~;%n!ԲV揤`ٱm]4HLTxe` ]؁.~e$'ᐍPx]{Qgb01p}2z3U4eɠyOCkQ=C8SUۡh$u_HB~5qW5H OlDEϪh>IoAR`' +zg}A9<Z=IHZG a#E +,2DH>^¹{,ïBD23Um9OQ,T. ;K«#aBvwM'IaF&P#E֞3ڈf;Z*ˌl)F +[oZ%(Zs ]5]Pf6{ 5¦_^ݞ惇-Jud\^ |Xt.MXD H´Wf "<hRZ'XWzϋ /ێ)R4uBeΔDޡeL"PBLt$ڡ%pg bBw-HrUVR1>匁ydّ1i^At" +4cP~A[}oj)jI:ҵΘ{*W[2 7u<Mc #}daܧ)ll{}ϤgO܌22 cl>?P 桭3<}u#Ԑ%F\8/&C׳˯uBN}{ +5@endstream endobj 5496 0 obj << /Type /Page @@ -22519,29 +22367,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5504 0 obj << -/Length 3238 -/Filter /FlateDecode ->> -stream -xڭZms6_˗R&${8I_ؙܻ&L!8Ix߾iQd `X,v]JL+&I2ĉeLY0YAϏgŽ!ޘg?h5n'U$'wދ.o=I)=Y'ދ7S0ի۫W?\cnyի}//Mgvv2T)ٻd [,eL3ӏuOMx֘V"Q""ZDBN(@Zr:yf5u7Xh&P&m̪]9 χ!)o޽Rῶ6eSdf;ќe,|Uyr}~9*ly|;xn,U6/_^X^ ʛIE͙yF!` -h0 K-Ӕk2l^ Y}Oq )G=oؒ^L< x,{FyBG2-yDx /D-Gh3Rލ)67jԴ(LUq)r4uWv# O(l#=pJi# /;v[k%GxďCD^noU*NPƓHk?QɗC2sf=fA%cխ]WN)once&cEAivey -1'hZ|0ex8ZE1 -X`PAT}Z0P.G{7CpA!ZF-N6 )a0!$L.ݹgK -0 v٨'&m3h-{@k -B'K J6[w,QzsVIВVLvqGb^ڵ%cgU1PbgVIHCc(d5*)s($& !B  -~!!IVv6AGCD^E-6s#P@LZQR"!|LXVF_^?q!"= =zc#%辴E))=K3š@E@D?1#9'~ ~ C BA@jFu>d0&#+R{ A]šA -][{r"{u6VEÖJ -[JsId(e<@c(, xGa"E! -aD -t!ǫS"FlWt'|> U5 /kdh%O]sx9=ðCh xh/I> +stream +xڭZoF—/ +>(/V]DD$Uc?إ(ݢ .1;;3;yyJD*IYpτk?Bz9;." =єY{۷R?qzw3-޼~3~=i޻$Qތ'] _ߔL~xlT:Rg~ 3dzWir~iz^PV}}v{ +s^5rJfA#DRPe6226MQuyE%wJ f~!緑))>*]c;/LvoQHk]4Ŧ+ x}zlE]y}y'hOgM^ jx_Tof_PbS9ʏTDۼ{=&2-M/6Fu0{8" *1x_o[fq7»nr;l \ij;^zܳ)>!yӒ,C{u`qV!D≩9j؏\LcE) TVtJRS1Gɞ +˼m2?*~Ɇ*ڿ.8Yev2CrN ޢɻ'%G.%ޯ "#~`gc/8o v( Tv~5{oJc@pP>,ᧈBƭ0J`r0kX u!Aq YHW1؇K qv#Ap@Ȼ7Pif0 vt]9JXXlt^*ih.) La4Hk]}Ԕ7G4dL(jn&YTvok>^@|Y􄛇h:^Bk:I1;< +%7(H;0nTHSBЄ&,Ln46s\[sQ Jp8C}:9 S'Lv:aDziv*,aI44t؛c2B:*_jSQ_[^U_t"Z@_[I+6 B|->Ɗw no$@R`y|5qB^N|1~}h:}`mȌZW3§n+b0AN +; QS~9A'ZL$ +z& +,*3QU,@'u%Ó$5ct"!YƦŎግ!"ݛ_?~Yk:t)9~E/0tR4ɡފ1DWZ?Q8Ey.X Pyr@O?ܙ'4 pM1DRlˉB +hu;XMl.1TVJ1, hz>RCiKzqOQ)M' mk6qD$soeu{XAE6)e\!܉;Hb|J`3i-!Ń RC T7(ګIo)|$X %sSsqNA  а2%ܳ;҂.jʄ;/&6z EўBDG" n ` -KI? ] ٤lp 9w7d0LnxXle 8 +9mcQȲys;a?(Xu +$NVrlC)b }ዖ9i+"6eZ܂NZ%^NB%#&qQ%C?Nߨ/~*SktM~tk @twBj&&a;W `nny-҃Owņgr6 !8!(dCWYHjx?p.Pf!h× m f$v7|,CO-129G+\F fh<ݯ +n9\s{z>WNd gOl-XD S614 9 ywk^6"٥kʅ} ;}Gd%D;0(BFcq|P~F ñ@r rL4.N4$/v2[%ec@"˟=ʕwS WeÓ箨ow.rQyAG ǨnoՇaT+> endobj 5512 0 obj << -/Length 2305 +/Length 2248 /Filter /FlateDecode >> stream -xڽX[6~_a/rђ`@ڦd4qXA![IRxPL -lsG34fI u}Ͷo9\Nx~\^-~ÙfQN$HΖW秷oo>])gb&Iv;z8 ;_nqttÏy&7|wfyh͛`һ+O,a +SDoQx%.X˞}V}Ez!`D\2 -(/Lf ljU<Ou:N~4A c9Ar njODX¼1W -R<q$#3wHY#nߩj")&=wAtkx7j!;q N60s0J}}rͿ٢5 -R _ٝ=: -GCԁZJhw/8GXP~L~ D);D$'ryiU}OiZ !>F)HUbLp~NPg!(Kσ|*;IyF#,$@Ļ,k7l6_[15q0Uܲ>%jpLy'݋<^K(7 m sc0yy1{&0m5f?iXg l!w˔bj!kMSs% }D`^ߕtơ S3;pl#vQFEz!H%<4jMigEBL&"~MMt{ڝCZgN^jrֶ֍&h!|Uv(jZÎv#%AI]}>7 _P:S~Twf6zDUBabe G݀ ×:rHiqMB!xM$I!C -*g3(H1ect漢 \z6ҏ{&=tg9Xpϼhבy|wrYcsL xxmk-&0VWj д[f~2걛>VI 1͎0t߈ 5 O`Eeة U >k -:ncM{߽{jm:mN>la,{ϹɫJU׋B/֖֧D.+YqQ!M1m_V:Na-.>5ߏbh|wg"E )>O Kn3lu% G^Qv1tiyDN hzlpzғg+n|D2C9*t̼ -8He ɐ0sCgt;/C- U"x-^E"O}]Ր@a]z^=AsrŸ&r-ES^q,p eI% C.WZF' v^/3ɂL4E0Dm'(x͌j]StK4im}05t:fzw(FH6_,l ^ :Μyϱ=9"/EkyaF@;TFCo{w,g3kUE؏ ;ѕ_`<3M iKHOw}vEE0hslAX-5&9 ,z~8c[a;w <sLJBٶ/ Ues ^s~P7mb_ ,9P@K8=G-@*դ5͇OTkXN0k' ~htjK7_{'EaR 9[鳔9zB Gb{&M,t%wG^I*ך}((;vڪ7(=p0 ?s7IOo󉩷o>n>ƞ|_?Ηb|ɽPx󯫷WV#\)dX^}r't9;@~Ϊ+"W~;crƳ&.* ) Ah%Jz +`J4'AEQ9['No." )= +GU`3 vhEbX@3WT푣(q$#3H N߫rzWL6z(n*pOojʌ$~l;U4Ѯwv=R$:fLv9C_±)Ijs0ә4X=_NH*tne +#>'5[B%vfƐP+e<`gfvR)D EQ"bϏ߃ѹ"׽tۯǶ*%`%pb2-^ C0IV.h-=hyM3j)#xemx:+2&6Ƃ[֧[ )vg5~"Ϩ-7ژ`ܟ07X)2zEfk7L[#*gڿf5;pwyZMmNF~'0% CDu`rS6[p5nQVQza!H&T]jC~g ю6U;e]cgzh`AcSU3ON_m'rwhӹ؂ wq(Fr宋zqnh +S;0@;n)Imxa oXZD?L9g[I47eKcgVZړ /=alODgDPƗ$ؐ)3gqܢA~6C(:,[+xGhJ0!Uj=ceQ_Dq),jZj(Twdyp,Qf2Ul~{볙R׋\/ƺ~DUnJ?t\6i#v(ʒ[f_4J1ߏbHn3 EQż[EWgS͒B0bm0Ǭ@z"l96v?-jtkKpRGGŰƞG(H?IB +[YP^l] ),x#,a4>?*FCY.1l^<b2:7EE[Fً&#,:8{΂ 7/QAU6T6D1%@)8šxV@O+jc/@?[F̨6EV2E7t 5v'IcsyLo䒷 +D,.Mǃ<ӊnxӔn'EcoGW<~wCeU!)e;?ܬ҄ _عٲŽIթ=Ѓ. k +ђؗQXthl'%koXJPLs;qlm5(-6vTx(gU\ħ1-s(Ӭ@6bPeLkR4/<\t9y]&S>rx A4SauDAbna17r=.(;?`3^kj6#&̠HYvۼ/0Xo7 sfliTA{/TQ./ EA[eg =I@@5Q[t^HH4܆dW"sR CH}x{aNwL,%U)G:*[MTwL@RxU<}FDžc.ƧM{x*_S]K""ҊPۇ(>:4Ww0Bazea\QR!K( _l 2ԏEhendstream endobj 5511 0 obj << /Type /Page @@ -22630,32 +22472,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5519 0 obj << -/Length 3894 +/Length 3703 /Filter /FlateDecode >> stream -xڥkoF* -(i|ҤIK_ @K I.lPI$OP,,`Y$שDaPd~=I|/gRʋ`gY|9O x~~ iFKq+oHTzrjy -d%׳0PE>qD0>>D+yo>˒9=U43$AOo"Hvď -~ - Eqx': <œ( -$ˊ,HxqoȀP=4$ -B]q1`8/8eCrG$ -M"f|Ix0k}`Mtۮ˾^Lyb,q3!*wr5lnk`T.h95!*QB,o;1#X悗I{k` 3%a 6/_^20%%bMT H ڠ,`n<ͻf cq|]4(rlcf'>7<-Dq]xzS-̽E(Tn3M wo HƯg$lGHHW2ƒ[^ᣣ]ڊ NR^yZqt|wڠU]EF~B.xA|4Za6:ir*<jcMdiJk0Sбͳ"\Vny6r:45d-]/H cpmÙC% n_6cBh"tμ"U7 yT~ X=oPD2;û1B\mit|g꣸3ﾩxͰqi$rʛEa552LOt!8xAJtElŃn`"UFzL7Ì'RqxZ0?h/ dRvu3pӦr >f蜂EC5i#}_75] -Y7-+)YfUh@xŶH;c)tAmaz -"V66p䝳(:qlaFp]2@phN*xA& $I:$q88Lǩ(Q-{lBtg,e/EtGbޝ" xЪ"K~׽&ʶbaM7U/?,kǯxz`D >I Ih[`OsxUw5. V*.09ɠ\V2OZPE=ټȬXe?^n!4+tK~R.3O}NwMz1`7 [-!n_S}1"܉u~8MnRГs,{ 6u_GqWT~g$eʄ,moκ5KkqR͕ -,x(UiC۶v`w}D 91;*PgP˱ހ!JS;qD4"Gu徳 U9Ӧ:Ж^V|J]9<|9DE",tY鸏u4/DߞQTw07鱲,yGBdKIOmc9pe-an@&:OP;q䐦!q ә$ #>@Cq2[F 8g j: *+]-ģB KQ6x[2=ƹfu:a[iGd(H2]2ct'sIa •8Mᮍ(,A;ɴB6J-y)1~78#{a`IO@̫i7䥁_$J|C50,TlA?iDF#8Aec~,fnzQ@qb:{8rplwT)ԣbO^Z\MÃ^s:`2St@Hb>xpeQaG\xT $ݸs!a`3[vUҵ)tW-\)sTH~n(3gQ{Q1)=4EzOwz_cbLmSTՙw! uSkDH>Fn'Ed]5b(T$#Nԧwb{nBٯ\tq-)KmPdc q4J -3i -:r\p!B/?_~~aznlHBwt#8< h>Dgw2 -UZZq[N!B/)@4)&v~֟,X׹ł\^:Y۝ -8nzu8-}wz>$v.Z6#} mL{=VLuw#9Pn6}-a.hPmz5#Uv[C*#mqPm[:$eIM$#h(id;QZg5:aP+]<e61wN^7rBC۞6w(_ZZKNI -Ea?.IðKVq %K=,G`]/sKE d4Ƈce8MDy8U4$Y$dp ;NX˶WTâ@*D$ؾ~iS`r?f)# -4k~J@ a>f~<ȲdܜK-`a~s<Qbw ҜtN]:77$a0<)h\A*?]24QyЗ- NëTaACqBtm&ld]mO-)a!2i@ڨWZ9ͽ%;ɷN5^^\,_R07b:|$sϊ̖umz>'g^9;7P!KR?j y q9ߒM -_f<@H|1GS&1fKKzl~REɷkks#8{.Ґa,$d9{+IZSX๬TeZ=drԛh}c(ֶ}hӓ̮4cB -NÜ$t|I YX|(~͓ :d29Ȑ>=e)`Z?u2S4 WE02㧉yp:ܲDpWWKN(y fsG$e~—>2Q~`LsMpzQW54ҙ p{TzD]3hEwz^!>$oEZɻr9e]]DŽVQ]mGzF >xĊ_⣥]߷0A}Sh2VlQ=?=SZU5+kn֧)Weuy1~[h1; 78e/0_8c A2.'6Jd0*ЈNEE[N3knJU; |7 ϻtm' KCJE!o +/[P;gtIm"RV1tyB,A͇;סbTmkBgwk28dPot<47Gq']U~JQAX7aDzJdr1/hxAJtIlōvdZ#Pf LA̡c5 wp08x~N.B.b7)H3HQ}N.< 9eIW-%ﻲ*P2jk(&:fU)р>m +C+R [Ov!UF.҉Z^}Џ؈D}A)@78'}N3~vލ\mAYx#<gaB"L48r +hh$^uW8~+v?"8}0W)<{4v,h p#$k5tiDʔĬhV1 v@BBڞzHls/s.<oi~ɮ_Um M{IsHC5;JRGc$j]шeW񚌓rXb)pM>Oձlyipc r uxꆸA""Y{X@$.A>iQ=ɤѣi ]syqp^3DwőV%}1̉l}$Qz"1~\_XW\WC _2;DCB nKHMД/Ӭx\Ur~.)Ӏ鮇?SYP@LCOW<2+۝ŇJ3] b/vP4"Bk +&L/(ñP/VI@Ԗ^S:.M}\&EI^ ^[ ),aɅǎknFjHd^%>آ%Wd S?Z&'FN86`c(NSׁwr Sx1W1xnj]b@G=%doFy? &JB wxPd*7-"a!9}|[?0HA(A SnYu%2.X7JXZ>ĭ2I@r#XXৄӻ>Yw4yLפK$S)T;%ib+[o|6OppѲ3Ml= Ӗ^^A׮cc(22fhf!TAh6 0®CRD$I}@G3npTrnTF)l>e([&Z9B}˞3(wW;+=* +Pcl%e9aI4E BDF}eO v9E( Z)o)<({u5oZ~E%A}>9.?|+p8㇒ 'd+"Uʞ Pހ8f#UR`g|v}})/D4pR: | +rD{/̀ +i`wpI 7pn {^ PU }Z;HTg9A9fq]7}Oٯ/ZÏtaNU a<./ \?e,{0"(͆\$+]!m~?e%Y_|)mY"a~ 7QC\Qe%|߳11LH 1Gl,M0t"d#z\/E~e"D4;4qflN9`MKcib!/vym UFh[Re0~BOF:tڳRXLrN2m9Üふ8Mdf~ #8 /?`V9>cLQ6VI4K@d;%M?Hf)5T>̠"*pa!1Iz7fC=FVJ>?SBpq>4d=b!4FG/\1COf@J$BQW؇ogN|c5 Xľ8Vendstream endobj 5518 0 obj << /Type /Page @@ -22734,35 +22566,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5533 0 obj << -/Length 4219 -/Filter /FlateDecode ->> -stream -xڥks6G_JX,7{nҦM&8δ@ %:$w|M&XžK4r LRiz_xB FP6η7_s3/0 -.oߝ^>z2wIZ9zۛWo_W@|߭aWogo}_CʐO]/<7/\ Ӎ@/QK\ԍ`YlQw_&F^H|6m {Hr?qCyXc4w7Л:l>_#4xȥGLy_AVfGHS.09 ePp- (W2XhӜ9%Qȿ[,]q0) #1(W |7-K -Z«niOE{iv%cpBM@%8$[[*TW ȼ0! - ۯ9'𣜾eFޗ {S${i '&W (qڇ{@#7GFI>a:d0 w*o[uWȋ6x*! -Z?} , ?˜/Hi;ŶԚcuX#'^6z9ŽS0Ҿ<ڏ,m{AnaZK>$nl -EFw86Dnz`C+QRީwa_|/f'bnE޽HZ MtG۴*pR#~+?z ǐeeY4Ȩ vnvbcpW2ewDm{kZ4X~D< -c]6Nh :;*ր/hcE%b"B:.ʐXp-)rƢʵbal7t6 6-E1:Bf?" !{T#уNJP# -~j;TFФ>G?rR(Q3BC>Dk>7+ k ]~VDԒюscFc$zt4g,\ Ibs&[f< '?L[}D &z*#8} -4,]@ WA~G 'SpծP@&p`6,\^0xއ` b|d[6nG6nz#[{y9҉%RefjkqU4*h:UDdGi]0^C$K)UE%0t_6WGYF^QL,N&%g{l)2.,CU%q/m뗜BDG4nEV7{YB8Ui =t>yTG[9<%stZr\P$7[oIrz$9Sy! NQԍDh 'GO -E5ȗV - |0;1CLD,Ao~$g)±kz+ $Ϊ'gXT1NGyMFR/1!W7Ԏ6͡փZ7/ -]Wgo@zB=VzgGv|(0lF>fͅ܂c DLYCQ<2:^xՋABcoBDQL.5x* RRE鬡3]itرNBxc.KJiLRLJQk -̰@U9=Ϫ-N-tNJ+yN)H٘4Ιu'3ẨNXl>:@G L;v- BlerJqRBB9,ǿڈ<>0 c{}/AD "Dz3w`Ga_SHgK)TlDپ@p{HRrr$EX1PJݖnT۾]L/DapLOշmRM#&gg J(TH#VX[T~?'M7\ޓjd@O޾D^8hwiB8uL(e#14D*HrTq] WÊCdyDWoPRGF*/pQΠ`-C,C7R 䍅7\.jc]jJd2QI -UpPEF#R(~= W[,m3{_X` W\}+Sÿ]I.tC#Y[KOxznU*\77'sy i~837S٘d3+Of•7̳{/on]^2#.~& -ʙU^2Z`%9lŗC,Vعcå$+@{hI6c<"zm$ZFL+fӧzeKJKCvF,p w}ubbA 2_1\In(E>Jӂ/"3endstream +/Length 3903 +/Filter /FlateDecode +>> +stream +xZ[s6~ԎŒ݇i]I&δ3mhD[_:Xܾs@܃yΓwUg=\ᝇGٗ﹙MOo}\)?s$Io^_/}S_^zqO!}5vr*熙^ O-kU cz{y+sU?@s,;ߞrPs}g3 ˕엫 q][c4w7Л:l5_#4xwx& ̎B]bsWnfr\˄z](vdX}Ksd|+-D xdYjq68) &bP9MίϟqG[)-V- hO8ͦy&J;a)V9jw 1 qf]`x^arQna/7';}gw_2E-O2p x"S7Lunqe6r й;@{zwxn,,.J́rl/2(om˼EK=_y +-JuwϏy3JN0Iعوaﾐ)h +N[ӢLh`ZӲWVPCqͮ55;Xyd3+%g- SÎ;nT_UDH I/0끅B.FM."#rNQZRǻ}6h*q3E(sZN ݗ9JYS3Ί)W퐿aЕzROp6#|"<4o .7`V8x#dM HKE}>tH|낟H| NƓP Wh͓EUϽ9_jyMg6\`$if]W3ٟ:f6?vdRV8d:oI+Wc1BkW"nzև@IQ,>l ]B'd>@4qn[yU' +E!Moa*a4&q=Ȭy '6N=S7г",.TaBdJo2y`̀Yo0  KbCs[9Y쁃$qE%4qQ7I%\BE_Q^cX;~vnvyc ZƽχSȢkH)A+2+nA1!(2Q;%#!Uΰnvm#bgDY0JMC0V;Ȋ;ЉeQa~:shL0hcD=-87ʇWQ<7:GzB)kt21A;7RfGk TO +$j"R;`ġ"EO9.qTi:q7M`Fi=4[a/W\qC +R5mZ4$7aRlw.NLARChJccrQ2(;h\l̤&x"Kk0Jlf˙08ʍC]7 +L [R?s 9:yF:ygq*\! 8'w5E{fh`ZRg1ϨZřQGV>2ll,G$i'u-N +G}+ECvrZr\}9B7GOWRK#e,\@'\Th!nήN|TTok'8di!eۓ#4" l?\ \9Wt R6St\oWR#3Coj` +0䖩SC"s9P y FH,L9v,9eω~H""CO;=/oijL͔62wNJ Iz`}m5E"驺:l34|͏әSұLÊKRN.%s>K,`/p‚,g'  ^hcKdž(i\*eIsw|mz=o +΢FU`Z;QS.fq'n#L!L)J>hJ30NǏ>"hG;Z#F]OHV9煮T_M<+ڥi}akcĸ`v0{U86"\?\?O27 >Xzu!MtW Zmg\*cԱCd ./NaI+~6s`..HdKc:'~~-M|doS.pKJmR! Y9tZ"4 1#!uQR] %|p?g ]$ꅁ܊`Q~dk Ԫ[ puhy﹠ѓY\ +8j>"-7;wE7g\\o$ek(cuĞII&UFLS6+NJtISel|;W&'?>OE'8ŷJ\?iGM^X<endstream endobj 5532 0 obj << /Type /Page @@ -22858,30 +22679,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5551 0 obj << -/Length 3972 -/Filter /FlateDecode ->> -stream -xڥ]s]L'PDŽ>';v'Z!D@lд?Ád: ݽ> EI*MͅXͅ/K!YZ4/o. s3/[܍DnM/n^\*?s/I:k^}x7w>^!rn\.^N Ul~woQ~\=<{Ff*ƅ 5'MeAt^r2 9ñ-adfưO&J`& &X^0O&-{fnj 4y+dkKL*QNH1Lușzɶ"տx4Nlmq5 xˇcI6أg} -kv!)0؊(QuIN#[2-G^rdUbf=" NE'YwLVTZUd޸E8gKdaŷ其8n/Ol[B[ &SjVJRbEdW;,$q%>ROy j@OܰiWtF<J#CU뀂rE(lKkjCqrr2%ϒTD2|6vƲ9K~Q-J {_klqtWR=An` UR.QXMoCd:J[?=ZNhmp&H8=Pa{)4f$;/ԋ)Hj$yH='Ɍ^Hn%ϞA2y?BŮ,sDM$Kf dd&urVH(L󣱯4-d7Pl0cDrϹxc_sYn%,CE>nIA̲Wv"i|SXv*ϵU*#Ie/8F/Z Da"h C.7ej,ZaO+[u!f8*uTQ14{ʋ2h! nzn@ ZQ8K Wx}Hl3ۨt[s%HҬՏ͡ <*ovzgջX3iJ8/,R8X['~`]IŝLs__ =dl>:%IXeWg|w :JO2qj;R'4eQS -E#g 5G *APqP299J GXuvcrN—{'TT4U9D$GpG3KV_BD(ZHtR BX;ӭ#$39F -M2"̇Hf&!atA,.+}EE{u.x*ցGC@Zk UbdgڒqV2j#VJm7ֺvaM -3=Sg2 )߈1ܳ$;*7BrIDpU"b\}M< 6oūhZuө%e^6mW P fT󚠬U8H#-|ɽ།ZZ=yX@8,x#ot/0(66&`ՇJ٫Ս7nby}$Ϋ+W{ -{*SƐB/i,ӗ4X~$ ʤOdKM8a`Qeըkv%:kc)>@UY{GZaS"]gyS7ow9j1a/OVq:BN(y陈z G`հmmrڞ8$ܕ='/D@t5ȇeNZBdyA~ H\gzUaŰJ8$x]FΊduDJ/>$)(Xgx6vp -K|,@SkΥa -؅En?4`0v.{gr݊UԵp7!҇d%t/o&C\Am)ڱk !`O3i*i6.xN+ })"8t@yBIϼb?f }ٗ3\>? Bfj>DhEĞ7\,t8lq!qnA"_eN9jMSqn="ydsPMV]h@Q_ztvQG`eV}w sgo5tG@+ߕ}3b$)|׏ioe%N> eeB ^֭ -l9\? iLF߆o9Ӑk9(oͷUQ+] -;RgۍGݷ|媜/;N 9@Wrs"3cg00BjfG z$:cBA^!WmqlulSCNЍ3l.2@ل )8q6pZrq+>L'ەd4u ǭ2J 6+,$ޛ_Ldu/jj#h|en3WX5ԊAUd)>%xՍg#d98.%u`ϝQ&up{K4}HU/*oJE0{ 1D@&GcȗI],6PCk;coӏXu!x>e>^۴a - [xAOTq -ɉn㤦C@ӟzc,sv3Wf#"/R 6%+zT+6 -0ifB)Ӭս, f603Ruv_bH51]Mendstream +/Length 3801 +/Filter /FlateDecode +>> +stream +xMs۸_ft'bHJO&Ͷɺ3=i E*$I7}y<@i*Η|˳P(sI7g~HyyM/n^X(0/iyk^ͻKiއ+D"S y7_}{.~B:Q_~ KWyvvy~>ӱcߜ]8}Σf60 Ts4QG +883ʇͅ~ K};NR/ڒ bAW,KU8?<0]j0{s_`zEp"J+9rwxq)\9"pq8; ҁf>#,Hb&Kҁ]P˾\HYJl[ qH*Q, \u΋s>.AȔ-Y@Tʅ hPԻ#dốt𿽐Pbux($yD=8ѳh@N򶄗4Y" ewbfFOB-hb({uש"Srh#^m0 +Yڑ&HԼRtYd2Y`o[1<w'e6Z}wEcE-F[">5aMd [jJV 6rUh,ySÖ̅V d6ssdUjgSS +`1κg6"(V>^NT&h+Q/ +!]h%7@@xпa\nƋnr-a5vMw?!`b5v~xKN8*t3hF0Ab[i5E1+C!")N2R lCﻑ#( %X섭0H*bzw z kN[(+kȖG8& ڇM@,A[N4 @pngwt8wO== a)Ac2 =hΘ7U~F%18@7)>JmJk uOg1F +{kYS !2׮; "qJ:o1_ykbeyn0[o^O`A)ߴjPUnshC?yDLEY},s =ƎɌ3^y#PlO1K#L}T +YKj! b?؜X] oЖ8 k&ycpU8m`nl4`sܴE)"lGC5Fg`xwU2v^B\QXVMYE,[6LP車uA.P)gx\xX/^1jgI3Y蹌O' LZCA;l|ydh15pdץ(2\%>+Jd#'k)q +I2C>oTl˘Qa#2&PrC%V N]OwL9IF8Ucܰ駴9ɽ +\O2B=aN5E(OE{_q# ?QQRT9ҩFpxP䝑$E߀meg ieCplg Ad4&#Jcjg3DU8,v̞K+p ҄_sٮY.= ^9IH̄Xn™6do9Ne Z>0dOyRnt.5"pJrLMZ{'g~-lsֶc#Htwx䔑X' D +2cI*}I< s Sԡѩӭ2hgꈮWjʺdX8t^siO ;s/9HNKxׇC`S +fMR?Pw.(構D.^q #AU+6B#"(|שz<| +Ik%# lɌZ&@7oq_h@ZVe L\ӮqPr mY9Fr;C))qE7oVt!yޭ9e`"~PSu*.$8{:#dfQ8pM:z\Yp$Ɋ.%< qUډ}y jl?2/F`,b /^$Nr)hj!?!̽tE!|x 'w-Se +('s;47!+Ε6D"Td0 HOܣ7D_nԅSտx)v)}%PpQ}43/FBps_ )Vg^ Ͻ!ƾ2b>h%~h_If- +`(:Z]ww]K/Q!vg_{-w31ƾ&HRO_wˬXzw\ Щ9z`OuS tMs]^|Yĭi +!suhm:`)krR*|\X{70=Ǐr5&@N#ͮ,_}2 k6@u:w029\$ghQdV̹T0Aģ_aUǫ7?]}Q UIՃ=qVѾ4nC*{M>OWLi_1 _\S ?t$y\iji ?R{~=np\I y$jƩ!ti&!x?<l4yKo5შZ묶їbI΍ゼJD~@?].+7^;\? T* % c ЊSPrЇ p_c˷ \ [.bNpuԨH v߁`^|j@[$ؖ//ĭf 9eOa5Ά~O\Ju30oyuUp8ݽs4}F~CCCˡ($"A`pnLE*|ɋ2 cm3(+M!? Y2Sqr#X6(fl$FYt@pNڧ*Lih׃~ AQ6FK)ޘ7!,gjKeV~yE:;Եņ (endstream endobj 5550 0 obj << /Type /Page @@ -22959,28 +22773,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5565 0 obj << -/Length 4092 -/Filter /FlateDecode ->> -stream -xڥrF]_K-08XZKuUڂHB V緯$H0GOOOOCo?oYxJ|}V0[@̏g`N꦳e'tPnX/߾}VJY^\qX/\_x ^~7 `г\n~Ň_pO9o?5ә4:LπN' ˳T<xW4 'K4" "e8y(ϟšn@r༞ ^_(ת/g5gm0>^Du#4VU\-E - 14ezKn[a4yp+e-^J@zDi_TO!zkQ.7~$U+n໺}8 0̆{#GV=ux7 ubA͹,75nŃr\0T|2 a$#}="q6w!<|\e2:늺1E -3Jf;Dσ~q"^MW7 Da:aO04;ǁhZxBj4UWT,%4Vߒng8 0k5,]Xf8tbAqA$C7q${{xpOVi(qہ 1MߑV:H:5/Cu~2v%Je5ݞL}D9̢$u4=?>N$.96 -4 f;eǶҵgxeoL1iP`-#ʥuEkЈĊK\̛*Ϻ{, -70`N ŀL&׮k4S$_d}&B{GebL0Lm8n5BHҕsXuCVbGY- - gP oP'H1FcJЁ`o٠CV^E|Fw\`lnͫ 6߉k}x۬1/ʘyj0U~G|ǩU6(xaZB-I#ƮmḋI -0ċëYĴicjJ' K{>g8BxqtB v h2ȉ(Zn iE'R&Dd((^MK_c\r;Ca^1H!dQ'dd-K^zfFs͆Zvla=-x=\K1fpTaF3f2uS3`/Q  styL$1O I7'z}5veDmm|g%a*9!@Ҡ^ziɸc_mt]FI*&p W푢JI{BNszKH'Pzγ1SZ0Hvd#xݟ&Mcb| CȟD}.MrIl?䏘bxs,^_aQ TW Ja:T,MfHuE@_?bQ&NaA DƔ7GZp0e9|I,3,x@ /μc*Lȟp/~Jd{M ׃dD%pkxгU*_v|FR!^^ˑF Bf!`Ac{ -r)=MSĮ~A ,pϹl)+\C ׺so! 8sP(Djq*ЕSI&'lH:YTVT3bqM9p[f+cdyfXbl-(s^jfb -y`>G^mE9eYA3HfnXP f;-j J1(ZY<R J$RӘgt 6C+3 >xQ4KTR_ؒ} 23+uîh+ hƺݴ7H:I!5ZɐziQB<t!.tG-E_DW_hC -j-u')Β(ɠC -M啎/8np|9-AIU|h-:Մ(B(>.MY-,փ[~ `!m*).Z&\qId-?YnKz. $zy aёj)^it=qa_q衚{7Y+ł2Ϝ2/oCCگrYhn5ХwUL?,q,M|]}hӜ8\ѠM!(jw -m~{oӰgA:L8"@7T݁Od*Ӊ+|rG!Kۗw9? ;"3I ώ?3D 27?}xuP+LR'q7%|x5m9掭<:w(o[0q//[~ȁ%cc!~ <[XE{*SmArXBwPLCiP#7]y~y휒zR(u?%3_q$uSQAW GMey$*= zLA4)%@[endstream +/Length 3882 +/Filter /FlateDecode +>> +stream +xڥZYsF~ׯ`%Ж9fpͱ|%>$ 4o_3EvR8G1f>4RfI(ȟQ ,T~a׏Gp*5\.|r~:'I=p~xzWo_`-pޟƻdWo'o~|5.:zv9 +#H:88RPhttbeOڟ TL{~b|91מo<3l +|i/O278C[B_^ٮԸ'7Aåk7uoÞ .侼ƶ%^r>@dtE ~/omx3|WQ6H]MpuYª_6zۨWiwu2p`xw{e'7x.7u1t}aHleVlpѝntɼ-O=q4BXi^㤰[l'y|P^2:˦69=Atv+x+|}Ӗ N}gXPisÓ7rJL2iwvws+vaOYZbOQhWi#|?[I ("ޭAL N^H'\ + +/ӱ<4ЎeqqrM@`] %H}ޗf e,KǛ|xKyre(jNzSx>2t|D%`Uӿ. 0 GQk__(*Ki[zw[;0! +a)_2L 㻉X]7eBAF-~K&b̙&G"G mccﻭM"c7-a >/ylZnڵ9ξ!ڢdƶيnbuxA h 3)eɚ풴2'[,ST 4h.,L°.k>q +V܅(m:&Eײ+]keYQCs ŢM)Øș  v 9?q캡Ms˼EnerOD4w8~n5ڠh'[ܢ c=˭; t s'CqC˒$у% = I49"=֮[D~,XozWep^<;aM}&^=I{=hV(}g95gN2-mQ4ZF4.}#2IT0 =/@8UCLC7-^FA[yV.¾cTeLAF*bI99Hd`rOWE]9{_P=?? +tJB%91n1 Pv܋*KCp mmI|j5S55 7_a?DrCa%omSG!U`?P $DGvfGhok4<Ls 3yйM*$:#105PAφ0ƒA52%*Ze$|$6KnEaHgkGdL%kk%[SX^z%!òD_r39=,:APN9B2?8_zalM$hD%Dgi/p\3=i<4L$򂄊7[MC {2]g-$8fDA6%(C@ɅIσsL9-IIU4TF{%v(eh!.M&#VrgY$GQȯ,hb\\89A=jۊBnrx联'^&}kژzIfA +SHߛڱڦk9y'ysOqe/rhwc- +n7PU"}@S9TFyĢ|]ߒZhNs\S,Bx=ORd$]*}t!ϗ[q_!w nxbiĸRJ/4I(/_Nw0bi\B\H'v*[NU5(+JwI;b!;>zݑ^}Ao$ǫ &Ra~A`'wL4`;Ak/sx ↽'|לUP("_q'r5 `haZLDOZ<EyHjAgb{`tFUV}/gzdq!ieN~k${D82dSyJk0G+ß:;C֋_o0:̑!ҵCSWEWxS)3oRz%VqBCpx[ 4@ދ)1X~wEZ6BȳsLy5gj2R;zņQ N(ECvSh[ d:#HJ%[7|K͢-Y/ܝ[[$ ˝k|K['\v  +sLz΀3aÙS`,LkDiZlv/+$cK_A[=9/㏫!VFI=t6n]dxm$ޠb;)hdsJA:A VIO;a]ѷ㠧qU%_L~ǧNUR@bU|JtW=a +^J&w zHI;?[sendstream endobj 5564 0 obj << /Type /Page @@ -23059,28 +22870,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5579 0 obj << -/Length 4353 -/Filter /FlateDecode ->> -stream -xڭ;ko䶵+ZL\lv{7|("gdTyQcEpM??"?'x@PGHW-eoH}~ɾ{{|)(nW* k`m2/yZNx/uk$/YY036,/!C LwYqǍmo /VW; -/jt8!U$Derv@ K\Bh97IN _Qg8(%:H~GD%:md?QZ'C6tO+f%+B3]O$}P KfkNcYm-!AszFp0Us^f)h)I"XЦ+ vaQ> -L< -"p- ww ?0rubN b&#HB<ƞx-y6@xx> 6MMk2-x'~\\#=XDZYsǶ&(m@hз55_ckX;5|M `w൰oow@|!X?gڴx QA R`.qZ< MYXy!ݔwH+]4 4ռtr ka0ll`2cG mRԴX[2!_j!%^"9kD-CE4^>J= ӲS ar7< -f [) -TC瑇gT6F1=r9Z.7~b#:mV*>a }ou\@w:~K p$KX'.^|j|~bqKCe -:b<`gsM$A`Y&Xy AC<k*; iż"zx t\s1uafcoLCcp7uM_Zh p (VRR7/aReŎƍCGIMbk{!x7c˚4/l U>V+'Ve=PF3~bT.tL&嗗l>& tYl-/҇sBk>QzVIb7XVм0@"BQ#|SJX#؄b)^ Y㖥#G'n{lK[LKpXzeJ,Ӵni}HyZ'tOK= MޓĬgsXT,QI -)zs8OxLd쨙gYω{h+qA 5k +׻lP(6 -Th"7`@ ᚋ|Sߕ[oEwC먿aQ`Fqp%6\{ybA% 2k&ECL$}2&ie*jU1,@X@&vҀ?ݽFT I?QO@?Z%JʁషJ3hJל4 & f]v$нDhd-m_KFF;Mұtށ {I&mנBdzf+.8$IÎ3k0Q,Y7W%z ^ ^W'fcMd3jbחŲTuK֤W6! 6֋!/OG{5/*]^eۦq#OI?"70`&JM3q a_@z.~$=tsYD(ߔb3ioR+$D\σg%R﹝ tր =̑|evUioӼߎj*\GD M1`}pț|; -R YŹT0n0AGӌ_^=XR.e<_M򥅯KM:=gu-gB{)?x1 -`@fǬJuVCw;h{6/Eʘnp:3U#Wyn'< -.}VixU{9aSV -lH@'򼙨qUEcXē k.0,ÎM1jGl֑|4?KOtfINXLҿ;`3!Sb|g2L=&QSDͤTٲH*=֧}9`ڀ(%. ̄>g-6)cF$T%iuuYx/܋)=dA`:?5FlHS`]a}asLc\NrZq%0'ə$sz.}Kw[~oIO9;38HZ;\hA\/!4r=7)V6{I\v%l9<, PRFOmiƣC; <:~o.(J^J.;}o+4smZ ێ4Vo~iS ,Y|9w+ċ8$FJʼn,tAdMIsVpG3$ _ӭ R$MBܢoK+ɞ;Վ#yv|5g0SU.CkǛ"z@wϿ3X2b -[\\Am.@.qBC|\`g=[b{Au H(Z˞ƣz.lzƅ(8ik\7xoNiݬ&X5w#ppP"W>Lp":E8KL[an. |0Fې?Ǣp Q滖Ҳ\EshϮoIQs{G+hfz%@WW]iZ1-]_+Y+)JQDL}V僋 -0c0PLQҝ'M}GJw=kn6OY8`r֭pfȾn̄ؽ-u}5+nsEqy3.B"mX)o 7:8Y?s cLPzlǺƉo(e}|ScTld܁ؘ;bIC In%@"xg6HO<  Ֆ1ڛH+y||fB4o  P,ߔ}JtHܴȏKN[jA)$n:ֽO ?ֵ^4Kj*&Ln}LDh* _ȧ|Y ۱~v& )mMy{x٘ri7aVC,>XEouVgzS:Mjl<5gʼn4*?h}bkќL“9ꮹtХp7&(߿s]ʨP="nOd j6d*D)Fĕ/J\kaRm6S5@6Y!g[iU\5CS1ج\ݞ'ajGy9O>]UgK ? ?lendstream +/Length 3690 +/Filter /FlateDecode +>> +stream +x[[oF~0PS@EsEȥHS7vm"-D~mxh{IQsf;ձqێ(:)k |zqut@+ǎꆆ\X/~qA7Ivu9ARna'׍#+?QJ*F>!e-d,^CDm;dH k22QWw`MY29#)pOPLR#M. wyaH_nk wJEBFܻ +t/@ V+^b "8hƏUݙM1KU4}E9~qϱhOʊtOI-*?^CsCpF4ŶԮw@6rT=CE#[+jYw_Qr^5)j`vB~߮L;V6ɪn"`Id4nE,&fp=T_L+eCrBy$~Y3T+@Q7cmA3<\ [ɎUrH}pS$f󸥲Q7*'ۙv9n^JG + R8ei>A(?,K.e + +VMvf*l)]e@Rgj.-gsv%Jgvi}Z6A72%mE|U$[`8]ʱ QmVl5+g(X'CsކkkW? Kq'DEghWMhrl7>ʉ~F46 T +];A>a`]x|i@#|@w{hW\etąozq.w7r9ൿsu"FkjP|ȳC<"ؿGO:;*F8u%b[1Uc@wdJ0OBBj;2>Jq:3+y2+UTWHJ#.琕Vz rxqZei &VcsGMfaH 3V9(9dYCqH~yl&gvnITu F~Y3iz8[ʘ6!6U5Tɺ$m dz)0CÌYaF0wӅi^<ȹuF7J(~)^ivֺ,pq F@$I~H֩?eb0#ߦT*vaq*cDF_ ى S¥Fb98y/SJ۪KJ*xPM^gg<)18.P f̖}ln\9&*PHnӦ ǀF@JYŒK^wźҸ ~d9۶a) ֋W`*zT>3^s4JX.1׆9=XMd +N68c2qvn!RCV)h`Tag«f9޷i֫rz>rp;E#nϑHX 8gn.2aDV",k&\ +0"8FBgd81he|E7#| Ep*kuT[EF#3߼0cd2WKk%gbA_BI(Ò N+8v'RelVxCg랋cN7|~k 1<#v_RacU*&_s#⾪3T]b "p*5SYU B-!P/7P\ ȋ<zo1=|ǶiF+O.F[Y6nfn6MS ]'*A'酬-obF%n_=yH7bSд̊ 7sРYEɃk9(ת5 ŀvd,w54|zT%OW%؈ӱwc s][Nov3VEauSA_ZfBy}_0;xOOm}ⱀ(^& 5P4 E>on<#R_;Ql~endstream endobj 5578 0 obj << /Type /Page @@ -23236,20 +23039,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5606 0 obj << -/Length 3715 -/Filter /FlateDecode ->> -stream -xڥZy? 5(ޤ8E\bL4+~k#P xsssgIh;z''lqfO, ooVGu쵳?v^ݿXok{绅k}ֻoݿ}k4w"{&zn~o^qͷo?޼;{]qo~͙epo_'ۅ _Ǜ멸/)~b?flq5P/efbX^h-k-6o~ϻ.Vo6iYUY#ݯNuUWv˺)]uu=wY8ZOM, ":k޸%vGz&<گV//$Xi"+}JXZ/+kz*Td2tvv /Kj$*$VKbD2w>6Pv<'؁?jhlXedWHt́3É^|g$2C`[a v9.g?t. GݛE=s\{0]2.!^4&!ӎ&7M[XvRdMQϹv/O1%̹ "h'E4Ǣy:'n~up8eDA{Z=VgϦc/ }P׫:*SǢX8o6?HId?#yŁ.^`/ػ"BtMKzlwOR"PD(("$U4w]K,bO4M-!2%s-^:OiV<1N8 vm]s,<YG<Ӏ'];w #<'# j:8F, xp [`輴b" vHc]38,1>=(À4jYy {L}IeFVƒ"R/}{tO:qy2It{ ?Q -<zHe6{.~ƃg$I7I&m`{#2Yζ jWt>h: :uqAQtynwd gDnbDە̇lZĪoUY<6}ݮ@rk&%I3fA \e?K6oGk&=`ß/zE܄HOW2kwPʹҠ2[Zr=^ZOt|'-Po/hL]>^fY\5!,5 OU9"Av'Z }a4ck|)i^XQ~u' %Ƹ=l:WB肰 -5a&X-7Xi$kZNx?#6?2td's3M^Rpx"FC1 dso(8^J-~ˎoXe&A_* `T[nF9dPp <;C_,oVV !ݶ ρ{DJЭ+(x(sV v, $]LZts%a7&pifùIZ&w-DDj1>md2$\nRГr d:mܳͤtO֥%{X*K9 CD |ddRCBrlGhCpT{+n0iV1ÎiUmqÖY{OY -" m3,X1J[r<62ViOm]i:Ձ>zbHG\o<>CߐKAşԗRl6xDz0>HYB3Iș-,hQ"3KF7h\hڲ[c?䎞L6-W؁u^rC)CI2+E>G DMJ --Fmԃ88 -"ŬG@@H3+yDžEbc-OhSvcHؽ d>Wc+!)4XJ ([7lX0Cm$LVd}u\d -G9$8CZ>+Nޒ@K;<D!@zS4; ;ۉ;g7e `@fDG/G;/0P|Av*\(DH .Ռځy 8c"`H9:[&>02:B<˿|:lR쫊U_vRB<#@ܨB,#sR]8lAiͧvB`% s+8.\҂ -MXrlΐa>p)#p JW)\ȃ4J(( _Ɲk&|)u+2: N(~_ICc[:Ov z" xkvݵ %Þ0uG17|$qt[qEI. R164Uo32DRVӌ=!뜀 t&ra`+$Tq8 i8);P[.0ElR={9JLZoB ~GAxP8q$Su7z1kzJ̒ﶷ*9@HԼ7i&4+vNE|-ҋ:YM:39m6i7<,^wuvendstream +/Length 3437 +/Filter /FlateDecode +>> +stream +xZ 5(AP8㠵E(WJ)ae!%q.X|ｑp]ā"]ۏp,v +gl' ۫wZ8Hnqs}M:boV[o޾z}K)htoU[L_o;_nvU>\`?\9ċ#MJ(_ջYO-xn'з";=s ~0s efZ/ ˴_^5IG6ie^>dM8|o4YnڢnF^d{ۡ͝ mSsq[2|R +sWk t a zNnR*?"W^l=YVjV}HbF2o%oZx_`^b 5b%zKk$]( aVQj,>LC{[g zp +O +<]ӥ!-qrµר}u7 逌"*rzb][+R\X\=,#[mL- 3]hG#&OZYߘ <*#/:}E'cCPi[q@Cpý4=d?E`,}EoۀlRkd%9>»⻱ityA^ZMEwDۗ{>SL7Ldk7eqMg pr7 YCA`f[ta[ol6p 62d$z3"hi=%Aecz@hQnpk]}b;RZBy>1MRa`rx XH҃!@LwGd%ѧ@k? +} 3Ћzҝ(؞k1l&׃(> +b5Smz2w*>%!]sָ l W{f7$>8rdc 2زg`k4/g$#܃f#J. j ~Rwx=$Yxc UY! =" +BweΔ#g{)8u= 7ItC# +7W\X㝣wZOGO$FʡqLxSiC륜It'VC.@"&=)WZ0\LǪ*'X|ڜgXS#9cg/OospwڦUפ&P2'@Ttt-Gs>z`(F4aVJ_A 骶@7T.Rb v18 *4ǒKF7[hڳ1o -&+@;,B !`AOG ԡe Fejs+Z G+FY[l:@Ggx2DžEj|`-O-RKn؎|^x sqr~6&#%SQNP +JU-Mpa'YAja%Ҿ B:#FU>0P +pl'tuPS3XsuSF}j5J6f#S1:I2G& mѺNqaGk0!>gumWGӄ4>A촧ˁ驃fϗh7kvIMp(N#b$(Rj) KhV{Ŏs`}dPo42@jd0ڑn.ȌPkOjr#÷iecx(00 p8s;N2*84fuhRHHh84<9?٩%lGv0@ϙy dNef S&By6K 6 >"3Q5p)9 N-ֱo~x",Xl%ƱI80x757_Qy)EHкHpKn˧ NnR';xTPZsz|ҽ*g&Oǎ>&UAW.ba];奕+xa:F fh24\U4QC  (-au1Rc" 2(X0ć;rg}m 3&2+Y1 o8f rX;X[0p3d$9 )D+*nlO  ӄmkDm +ɽkEH5\M*\BNE EOD̑ vqc-#,ӜݻS|7sjendstream endobj 5605 0 obj << /Type /Page @@ -23303,27 +23111,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5616 0 obj << -/Length 3359 -/Filter /FlateDecode ->> -stream -xڥZ~U_J&|?N^|gE<'1H|גDJ -#>fgggfg~;x*߁*Z]uEK9-\ ɥE{tC hao_Y~-ʜ;zM6pz#MWwicޗ@% ZwIjMQ-ubğGz!+[b-6JYk(VhA>|-Vh%麼*7X7E;Pp7p -wiEX-Mi?f]u]}b[t)Wt.Kz`{\Ehdzh-0x ܸGJJ˛gjAHc7"{j+GP>[^^Ӫ䏯egg~siS,)AM.r'j o#n6Kq;R'%ev뼀q[RͪkAyeIqDm{$=ǟ AK<D!o84j$t̿Z}E7jFw\WSA8Hw'/#fH=e8"0G+4+Ɛ漬Rg2UҘF^; -A4b -vmWCTmE^LDڸ<-E\Pǿ͢s쌬n:."ȃP 0] ,F`W*KѴ>_=>.;|t[{Al -p/czA`Dhokyp­?0Q=ItSDY״MּfK0G"+HIpwW/\{[NCs-P>1Ym CU4ўpY ŧ27 ]۽yzzrʢ -$n7tw o)g."]t(34'cN Gf,r\eO o1H~C;"\6PۦJ;Pc痢ʨdTZoJUcg؉. ]%?qJ03]ThFZԣn7)n@'gá3o$B{]kZF!ؔ^?| O~r/ zOY;-GpAANu7QCUĉxɬɸGy`bgj@!kz\NH.G<3zH8"bH0ڣtQsRMt;;!wK/epMɓڔ!/t'KB.܆FMbc&zTb&5i` -K,^^YB\Fɤ1aG_*P-Wၢk -Kp\Ovn=׻`݄mhvߤFXS81I=ِ7T TGO}ڥzc8d#pO !5Rc@ٌ>LFőyÌ c.b 3RmGASlrpJy;t/<ku\.,֖ZdCm -y}m˖dȢJ3]Qem_8e`{i;&ǣRN?<qFT*MD8hiAZE}ZG%\O8PjߜgjHA[T~RI[Q@`D3_sP}pbN%*pT0pF؆=bv*]`:~W˾8r\˔dz.@U@XO/ )yp O<_,t4)d&c:rbNRZ>5/2I$Jn=԰(&K#H"| 9nB7 ngtd!J_3yy&=l꼣>cHQq \:pA 0a?\8ǛMx{\udq Px@h@,YPncyS :aendstream +/Length 3091 +/Filter /FlateDecode +>> +stream +xZoB՗R@Dsqubiqw(hxHIEqkD% +cvwvvYM<&qz~2Yxܜy̼>SBM׋Bz~{v* +&s/msۗfsb;gʹwWoo޾^yx7}疉?>z_oߜp5 ~՛d3x$l΂w~yvs݅ PRh (@*abaNH8.@Da97y +-ݖ?.m<7i +'1|-#*yuar~9l˜;\9fVzΞM=M3;*Yyǝ0L'L7~Q'v0P)g"BUPH ].Z,͌w]XnS:VS='Zcv g6TtBTMὃ8tnR_e'Y )@`tG0pvtRZ\ra褍hojTNTvC­0ݵIdn)KEbtz,k:lk^!FҪ#RᕼXB$ʎ8|y$+=~F:f܁B*rP+'7]Ent$noIgRҲ;l)~6XhרEC/- gbt-wRN7O M|]6S!­չd.!rX.g'@k dsA7bV_0E3bKpQVP닦D;bCQeEeIѽxt?'-`=cFʙ+E80^-^ldoT5=RơykGH.nHGPǷSKq %vPil+XDN9c,)"s.HPd!#BB8rkN xu%p^/]vP ZA{G[́Fƿ-wA(de ^+OZ=˘s:~ฅ́Qڀ+d]oYH'L`ƥf+FȰlz}b&T/<=AYK7GEd3̠^:P;ظS^Kj\PLo14qS␱1WRB6P`]+${wjҝWc%Qj̠=i۵#Iejⰽ| 98Y9Va )2DyU(D,\$,:\B< DH qHǗ<0oX 9?](OqE(Z`TQ( Xl8CƼ9a$>q.tww@OTp/fJ;5UcX7PKHЃE n[@ѵc5@r~ I&F "qd>RLj HQ$aȆ94WPu`']s2cfIӖwag'0:7?s{9 0q 2'7°!LC(i֡ME.s9,a$U3|@WTz9kc+\1 rO6ͲJ| B0.Q *S-G.%7SP{eZEe8-˃ZL +uHZ*BT +)#"0*xo~ȗYy Z20<[yڍ&A8> endobj 5625 0 obj << -/Length 3106 +/Length 2679 /Filter /FlateDecode >> stream -xZ[6~_a`cE$uE4hv6b`!۲ĶIt IѶ..rC~ʣ$ =_8JrO60sM2wh~xy& -&R?<}B/qa/zw;WJD8íчwoۻDm;^qOy_o~z'gSx/7>\Si2y 90Pyw^ՅJ #OP$A'SBt~`.tB&^GCzBPgkLr/t crͨ+8dB -PLZzqo0!;^sgk@y"L,GAaTx ASj( -N5И)#ȟQX>k,` !FXb ")̭OEQw;D$H.|җ_)DG'7|Q^ⷬn*%QdQWU@.*?gź|fsdef%#]Kt9A)gy` -M_`;dKӑC)?HtE1SXGF$v[J,!#JrcOEKJ%@T6I !k_N|HNh$'ds+~]9&js0ڀ![Fg/Q(&F2Acx17t7ڍfacEސ-[r'dBcVzOԇ!ꗝ! C-+~]s!Aٮh' u{Q05$u8X 6I -im$]dhɪvl~iyzl\<0/'zeNً .X -RKw ny<zdh[KHA!W C4@ ]R ߡs%yn~ -7k/@Vj.[ehVxup2fABl*gu9[*r݀2J0Rwdd9_,~&քVGp3M7O3qz[$h{Ovq{vb)yOA3loLD1*e>‹D2"h@hLC /uJX5 Je46`c^2@?Lb5kz9C͡y*hs4]p\6- lHJ~`st|49SUOuh\=So /γVL Q859JVC̏k-$,J`=/Z4l"U7X(g#p}!= {\~\A 뷴} ƈSmJO ݳI*N}aeڔI퓖-_/jgG4FYKT 诧U6vjоza\)w}w%vnܤ&];nɯXpxno4n\8n*U ?B9Rft,GYCc9:-gdm!ݵ2)|ݗU~Vvb\B,U^iFѺdÌ\p -AQG_:Aٕ~uװgI}45R|eM<剣qQ -?Q{D[~i q"d%"ٕ.48L;ET-cm.o|7*=Y=Y,Kv('9 *CuyP%>-endstream +xZ[6~_aBm^iӴSd}Hm˶r$9{.$%{4bf0!EwFNIB4ʲrw!&BZ +1ѡHbDOsOnDrzˋ뛟J@lY37Wo^= 2f^/~T(fo~fpuX.޽ Y9o[Eq\@[mI{oЮ=WK\Q*Vv";_ڕQNI;X.C[)|*+R4QeOggטeR8 -EGi=q<yG3W$1W3$T> _v4ﱅvn 5LY`^Ftʮ kh/qWjxT 0Qg]wWo#ycqK ɍwQšyLUR\F٥V<7!xmKmgۙcё ,6a E7'xGQ([ܔ+\JKuۺDGQ2TNroW4͕&+sʘeK%BrwQ\)m !#yrj@?Yv[a}l}Cz]0QHt?dd&p&IKOrA52p]tU>?;>XdIOP@z{\5V{Ukk4Fb|C 6=Qw "{-"(&[`۽|hfd8 %\V5«k'0`FggRE9 &3CdABp/b#2{@7Ÿ/7(d0_9JTixaʣ< TcC6fQ'9YzQjY )d P%IkPjje0ZB/+ 5Y<$pZ @ٖ tDXAt[F[0v[v tcݙwHV#GE8f fUMuF:0dozAݽ1s EֽvͣbKV8ڔښوm~1G(;:NZ*;vY 0<^mCѳ xaDlc~Gla1Vfh4ʻàO37ІQTÃ2=޹ My[W[}9F j 7N Յc+IUeBVi|\D?#uZdloE CmiIM.v]D'IWsSE[{ly&OGJi̠2D k ^ ?B:!4\ӞzO]%sf(u7?pӶd۱&12WWLlŒHeîw>|*]?+ +gJqyǁmÇ|\9:ލ핻C3LY|fGo4U?C֫ ˑ/q9 +Siq?gY?WLiyӅ/f\xܯ 2OLTy˦8e WdGe6-F~yT0sCɹ +SM̲;'ɞ/gP(i÷8MCNLOC"|`ܹvSïa᪫R?3qbiE0я,TzUJa8⤮8482߿I9c+tBz*ʈhmk,@qaD gIq+KhjXR:I|{m~^[.}KV=a@+_ݦL}|T/"> endobj 5632 0 obj << -/Length 2824 +/Length 2789 /Filter /FlateDecode >> stream -xڥYYF~_R.}m˕$-#"e_\â$[.@whrgsgIh;~:d=\9̼rb)$Oի(:l}Ao][,}߷^,8~tp= 1놃kRfo8^b -ڪ|osKZ=[=\#6AYo]~\,aM}I У@~#P( Џ;퇨 Q,+T -4KX3~euGkIH]#cuh>`FxcFbjۑ /|j񈶦'tB˷ewBv%PlJnAM%>6xXn[dTVO #OYll s+ҍu{Xþ {V9Mg؃ :ՒM}y>W-!GߔyNl< ӧgΈàщKPSJ 0o5qGӥ~|A $Y, X)al=T]%hAN-2MnJl5h^8 H 8Hd|:){C!B)du-]KN(a RŅ,tw3r/&1"Ny^VxS}gwT*2/_t{M#[|3&A=9&c/d{:'" ,J3q @Cd=f!Qx[9Gl5-bc.%#LI1i}xz H3k0g"+ٲAjLh5oHjs - Φa,F1&DO G`JHMi |(Nx=? í$aƒc˖W[fhNs lu"|mbEh:ЅҜcc%Y12Ubv Ry.taw(_C].s9DBl\RCxUauP|l$YIࣚ?a'"2ˁ DS M{R]:)I`\q2RFyV(јK.-Chѧ+3N0X1h3t%r|&|ajA{x) -ДIl3ЍabD^JchO@o=9> -Sޓs^3,dBs{Uq\xSoxC,(PJ8B,z}CK(I˳2Ԕ5ENsRb:!e\Q P~)n/7Q7\p8 \UWjGS+ա8~:rMzҒ"WQ2 Tbc T -=8g9yh1NT<R_{&=jjz7g):2 -Hrଡ Usyﳷr:RT{'ih}(XmOQT 1G~<{5t[ؑviV ,@Ɩ|B!{?ɈШG|Vl nFb۷c%7yDt6=tYd0J =,#_2'a5%3M<.QrL};MSݑuSNM('%5ɺ895,e %%P VwPQjɬxϬO|18J1i9kvF]74q'6 $u$5\̑2FSC`rk2EيdҶc+D4F~*34\6>yǯ1 F$ɿNTtCԿ>=fw"͓L]oXӧn\ @b'~z7{ @Ga- R"|=gS/`^b'yRƵ&uhy)<HQKsXleJ tAEsbS6=r)Pvqy Mro| bo~!ohiӋ ?IM\wg-0Ŀ#by^PI^|o'vyendstream +xڥYIsW0t 7vxQdrCH@_5gR{{5ݙ, mOgq~̶ gwpfD!NXةַdfbbljµէէw `е^E[k^t%|Y~f=jA#Y.~Ùe@ dvmvtvB_ŗu\0]/͊%0z/؇ 0 #PNp\ " +Ck pv[*]T;G ԵjhO4{vԹ^b +ڪ|OKVq?k^Ύ0Ȯ P&?.0Y!~ 0~Ah'7p`AT!6HK< ++UL?*<s8?"ŃCҼD*\8*Ǿ`Fx}ĀE\?3W.tc;r}C_mMwo2 F!9PP%wܠFA[cG =(%6X[$TQt#GYlmù^tcA@ְ/xÞUN@AGQ-qԧݞ'nsOM.gMgyS7>|D}HgDF\zA12ѝ| pҲAb=ê;2hRXfE'.j d )alݑT\I=S[`<|~q'2-!{Y)dw-S{N(! Rņlzs5R.&1aّo` |F暖\1r%#LN1m}xzt H3k0g?pZ`1Pv)FjgSv"w["'#g0Ϧᬄ=_Jr<( s>dڲ]e(*!kkk}"ۦ@]cXjsGǤF7B\s`l$ #B]ަJpR;}dzz^ʺ0;Ft/,vuQZtawC)R"q!6v)q!xY706O9br IC vkCBoݾnX\nkxQ%)y칕@W(`5d""!`Kt;Rz;jz6Dǹ\' sbrV׍oA{ѐBGj2;=;-+m݇%U.qnyXH[^oy h jerwT$pB3.Y Qyht͒.#,@Ø"LWhodb\Y< +-DIy){Rb#8:QeMP9Ϟs{9.b(4{zbEY%vzd%!nA!EJqq5ebAuXNp&WcE*8իvKQMjꐯr~:֏GKֻ+(!wRr̆t{*zJB=^vF*gam0RdGjjw(2ĸC˜><NUx'r!wO@1;BME|ĩ4;9ĜݫȤDR_R.Ƥ|晚<, Cc('C%~8򞟆W. nF-5u i[;Lo^h]W(33:~ +0ό|l`<oqҰ%{ijOjB 81YNօ31p9,se( u/jºvK3}u{b(\93zrRV.eC=a!#1?g?JgL:[u0.+.r~0N4 JkT>MZx3K*ta&]ie07Ү?J>r'>?:^2 'RvHW +mM=yKך١lv G-A~QH Ы+,[ +ٚ_0#`sNgL@ Mq>4I}z1E0Ȋq|J-j'CwK74vճ?Ec'i8)vBZ^<%ԍl? +?&endstream endobj 5631 0 obj << /Type /Page @@ -23457,27 +23256,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5638 0 obj << -/Length 3694 -/Filter /FlateDecode ->> -stream -xڭk6 Z8Ҵi4^v\lkjeɕlw$E۲SAVp4MLʯL*ˮW۫fcaPWW7ZDa#Z]߯ -^~R*y8_ip;Co߿~wݷPnqL8W/M7W;NUly/* -U]?8 -LoPʼWwWqx.毦ULEiO,BaשTa%$bU1TmsY_~W] h+td_o|k?yCܼ>+$)0Q)q#JR)ȸ,eSW % ^%I \pI-$M4o -U'hai-GRZHVD@d':L0fh}1@'|v(=3$蜎f-* |3s$3عF ~E]hYt=ns%  B$cbN]O_^zZ3!+uae(hFuY&-"3f.s5D"F -׮̗ -3k5v`nitw`t(*"nž} ("~< <,wUVv}P'UA[]ERL>4jjm1Y |(XˮcseHnr AKWK D|܈bK+ID̈́N@JT41E]fiOSyO%)R&@ܲ%F( )7Nn8V7,T|U4 -C,yG)/^ՃyfPF1*T' go_eᗁVY"h%?N<8A %jBw"$X @FӘ%P6$.Ќxib U%f]56cS#3H( QMIMOS-S풰' !jo%g-M$J L4eA6̵WzQ+UCۼ.UoU=v`hy>%5E, S-:M3$vG ?s,m]})tAAWz5b@V#mRR><);P#.T2g+|Mfy"WSg*d\x*M5ʊ_z8RpG }T+dwc03E$7}ME$ ,Fx(M6~ _}k~N -<BM:21s| gts ljK=uPP;lF!724ad.=&, 3V98'Z{-L,uƬwA_is4gkK79XMw6`:9[v59}J58i}Q`Ru0K@Z~਌ߊkj"kg<[A -w[C,(tA r?{[|2shvCy08'<f!;YfGfN 1pxexcJ]:) ;2KXf -jbxg4\a*\GT)\}VrwZMyn^rmS! hH0@v UP\qm1C*l8v嵘l8әjV}d8n'c_ 'va2pk5<ĎӤ8:mѐIZSfz.?uQ8xr+ԕ[hHY0pҏĔ`5l2\|K4ic|,b: 왺 jM $"MW6Il#>P!ZeRJmK [3jRϱvkл̬`: +Э{un6ƚ3V*mpב"Ve4e$d:);c<ȒC9_ -)C- -l[Ԑ{6Kwv&-) -P[4dʣbx;B/MInQms[tEYxH,.IGҧ'+8 -₌rmLMY$={m֌)JA] L_J(Ǣj0 !֬sx --妤PC',ͭ;s(/5fSi1,/s gj昏:eo1Se<c> +stream +xZ[oF~Pќ@Ҵi47v-EKIc-E*$6CJ{A Μ9\h5 e,͔flf0݅,$Ʃo/._$L~;Zr{o,az*4ͼoʻa׷Wç{{?Ydwˋ^^}B?XrWȏzw/l0f0|E~\]\sьߚ2 +r?2NeoxX)I2:E)UUwQZ*bB?I`rɄA8,N٨QS~" e~ БحusD+>`-*'"Y+<\w[}Gz65`8Wp̷ {+]$!ءx?';~x }N2o[5@F|8% +m[+ r ,u_V_!\VٓMGg~XQ {$peszL,(;`U)$Xc:!9\ĶԻC3658'PsXւpaT3P֭Lagñ+:]] _{ T7\!8[vx6j`ݡz$·k\:)sK\t'Fi7k(-7f_~7ڨb[Ўlw恟[튺wAd:8`-uZ9Akvq=Sw1_nus/JٞMl&4H5مq @ܔt…IŚٴhVp |a;D Y:ma\e[5d})=O!'پ)!@BG5e Hr. TE<ޓKa"v:rvE;@x-G17'JSBL!3=iўcIzLy dSmT +"T\q2΂T E{.f C6R LY@nV I$Ӿ ;` Y?l[ *~ZA5ԙjμt*8G=ΰ03Ũo:ζ)/rg24}s0+jdĔ܇dð2fK]N69䦏nH(l!a)eͿDiGPyi~c"b++|_M5+v+Z=M.4ki'A*,!u2H8xtb!yvCaۭuSM~Ĵ;liy(9P?Ol!|Ӣr-*޾ƩSFG;Xr”Cc5;k/yGs},ǘ)oǿ5nH(#eD18q$Ѫ,hP +BF {sBOZ9҉Gz!t&b^h$ Oc,K> ut X{< Gc Myhަ6,ܘ u|CfI!ȥvο4;q% g:9+%s`v k/_'C0PCX7O!DU3aap2HMt}o^u/;;RE>J}JIGOj +;^@|R!giczȌd + ]H>*7V@2ri m0T+ts@p̚+\6#rG0D9/QrqN3X "#JR)W<2xxrneeDGWʪ@WIDGe~`T|˻ۖM=ea7,,6J6=*wH87q9u9ٞO]鸟1wsTe(YI[.V/z_ V?/q}i~/a  c';7ZA3Q+\I;Ls)ց22Rτa0G '}o@Z6.e+F@ 4q8~‘-2ؙIb?k%btYkȅ,^7sY(?Iס} 6qm4 $Z}a줿04ak`߇2Aaڶb7`>p\8Y¶@V`l{8SuĖ;h?? 3cc|:braAc'ZD"4nv{( A暧[߰)kYnZDx#u1C~އk,bδREIx9Ҍ?q;. +J2k<Ďd81ْ!tȘ'' qNLΰ55X,K{Nq ;vh4\+VhHE)H&[TܬM $?1p_6q&՝ga3`b +a[j1+<PPˣHg=v0;o-`Դo;) !G%v^FQc#_)  S3 3-d#˵! >Qf|_Esֶ9cD|R825`}? +ۨ#hsu\skr_.0G/tQd +ڟؑ Geˆ}|f3//5$=4pռ*yQ7)[C&e>8n~s]J(31oIorvA4W47"G\9BRMx +o[Â0?jb͟h%ͺ ׎ĚWIɦk%;Q#-5~{Bo3>p9Aޅ㳊tZfendstream endobj 5637 0 obj << /Type /Page @@ -23512,17 +23307,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5645 0 obj << -/Length 1956 +/Length 1825 /Filter /FlateDecode >> stream -xڥX6 6fl>Ͱ]8/1۩#EuMvCqDSǏT?Deg2u1 |y-gYϓVYf0Hgu|||zI)]wg\) rk".Ϗ}Vw_fϗUj~};)\闙d9w0 dv֋oʡ]Ǭf"I"}8,|ϴ']>ȡY>q.T,wV(Y,CcB0o]U`vq7{h׎]똅FWq,e472˂;*PԙJbAQGf -k^ ODnAvI9hR۬i`OD@fs_\"rkVylHg]A%m=n7V3!Ip^01*;QĈ)1+JzG1Lڭ"ۛ|t:&kVPTC(9Τe7e5"e;>Hs=YK(ne[lQmF 0h<8tםvg63<%*iGT(~Wn Q!g(G#R8t};x"0 0kw>? +id5H _!H>BG͡NLdk_0 <&zA$Y̩\@J7aGBd$|n+S; Ed=DlS${/)}a4shc?NUM}Ur]ӪDAJc - q 8=&o YA-AGiۼ(.h+9 -#R*4i@^5@ڎG  팏t k$Q2(pQvDX2b"PgzgbRIXcVϺNR-M0q`&o4]%]A{s>pΧt8bx|E|g; -_O*09mP% c55S΂ E,ܺ2eqY1N;嬺{ɘ9 -L"MDW#a_W+XLID,n%&U աE:tdu3e@bJ,#:ȫ<+,e:Üٞ!ġ5LU5}ɗȸ)K}@cC.QTP"n2ƤC4@P}xr`%w"޻iuUЗh8#f MRX}='iM)љ P7Y3&Ubf)˟C&pvik.f *wE\ٷ7 |Wau:a)]t1g:6]bE~mT10'eŎQ/OaCA*zwJ9nả-=јtmK?MaQ>3 7]B̏*.=m j3EV(_7yU6DlC 斷1 ɰy.OM+Gv8/?MSW#`}4]j-Β4A dþ SiSK(b*p ׄ]X&{}ѧXQ17 tszn&~:rGy/d"d!~>(]r|nΦ>!L1msm'_!gxN]!$}J/#1gaM%^VM-!4zAKzךG#vƧۍް{pj6ya2۝4aZO d@g">v>Q.=TH/;] -"g &kVpChg Y2|hyY Hpَys3: Z/=]o8*pWTtخIuT\alUxPޱl~,'RA qh9=|;f8P*0r|Fu q'r x@BkJ tzޛ',w=GhGF0n`/b9n+S3`ق_AJ@*z<4Xa%] L+ 5xW@3YoPF:.tLeѳDtwW%9pQv/VFyB{nFL^lE廙 F.4y`Eh` 7PPM''<>}}v3 B;ܦnEmiǘKX5>,x "LA%(A^m@ )HX|ECirԴD]-"̺#mI/(݃71ܤރDpAL$_v4=C"3TM_5)V&N3?2)MImwS` WEVI.|x?q?e†z!K`GX C_Cw~ }k }Py-W7B,4i}?jl>h];s[v bendstream endobj 5644 0 obj << /Type /Page @@ -23576,23 +23372,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5655 0 obj << -/Length 2594 +/Length 2560 /Filter /FlateDecode >> stream xڽk -!`QP]'q;WA%Q{pʇ΋^Q`^OI2^Yo?^8xRd_~S4a| ˻ m ߺxNxטVZHiEڷQi6~$*K3IaM=W{=HɪM|~Lzc(`V -f6TOp X,jO#ǡkdlW}[ՎG?'Mߟ wicx4rxM^7oM'P=G$TÔ$nX*bH+ܪـ 9q -Ӡ\UIAܽIM5p//+y%7(=ǸI"?cYe([FȘ(9p#*|jbO&W:7>Sy=zS -u= |ț;l'.2(U˶VɤmmA̶<'uA|9T=^\ROVmHĊ$L>S1p/#l'MBY ;fSPt*LXN;Dpʼ=?b|ثjՠ[/6 [7t\A]ir9.4|VT\j &0`qܼ6bJV|XICHbܗS @A:Tka:N΄X3v,KZِ%c(#cV'KĤH%UQ@"M0Qv, C}܍ޟ ^LC ˕Y=P’UL>C9^J1dt!f ];^- 9f݆%Aq:#FGVԃ# ZCGb,@(PCW.Hy-mĝàh(66^Uz$bK>erңx'U#1FQ|=.,dª;n%w'-"υaF/5@ꉌC7?&[) _5XHe :ζ}w#m1a0Ws=?@+]WPyQ - JY_C&z +//J 9kpQEaPΌ2BtU"ݐr dJ::*mf/>- ߞ-d2=EB*(ټݯE -H/˔g3:GyL6Jد+E/aclwuBT6s(9b0 =[I!z'Ґx{n #Yǩ6_!qy6T} [s&}OJ{tFΐ#F珂Ig{e' sN}&^Wa.71qcN%EF -O-9'krأ?!s\S -~"#O#ɘ(ys{cXƊ:RQ+I.jYXXPVˤpŝs7F%Q -)Wy+909+ƃAo p!wɰHs R8U]>/.oW^kY6^AHumѸ bR DM vB;+ǎW0mه҂X\h2~ [iMAX罹X v%sdмbRf{LN!k{e^h{_AZ0ZcѪ&]-.(jcL=",z+{N=Ft&J!Q]3]!s8$ }&CN~`3] S&Y(yUNјC!hISd܈#"}CV[LPӝ,KV3爎3#lƩ]H{ȇiûvx"W.n[%2PzsK=Y&+60LY &d_#'D;fSPX)ݤxd'b$5XNVU`GLplf@Y zmͼe2[ls0Ma!xAeܕ&s);b +mB6Z'!x;`#FlW4$}II d@ئr &5'X] C1bD8J +:a3v,KZِ%c(QFƌJB#I?3pKD`28.Yȇk6LģH,rFbE0dl{'P}R Y5]ʪxr׎C^ - 9'f݆%Iq:#FhϞG^CFʏ#%ZuXվ D;u(s{لDJ`+4zi\b&01[Oጀ@ tO8<$yΆ~)SKW=8$1ګIͮX8x$텃D'><E}b1_n`O6 g':0^Rb+Oc0>I :^zt!57àh866*]P>ǵLPw[jD3(ۓ}UmGtauxMDndeAC`p2qY=c;t3)`yhѸ"-nA[tU}\PA]W0x%$PU`x )2௼W +>^J 9q1S iu2+E,߻!16ihɈ:*mf/>- О- ["?!MټݯE0˔Lͷ&U,.kL6JIlWHZ _}IZ$TAe3w# ҳ5|YnRw!Ot[Bň(ry6U+$ 7&_C|ɭSxn:f~30+Eq\ Ü"_%zpɾ]sO.7|ܖ' + o|z`%?ѓ59fҟɐ9`x?cy12VԱŒZ]OrQxǺZ&mm.Xa5*zVLoW=#.ћZ{~wڪj`:^W{DcAq zF3=Dem HU >09+ƃAo p!wɰgI7 5YA ! +k>ӲPg8ZM0M71܉Ȱ9c˂ĉΫzuJFC +. AO"Ɯc3)BqSSZ-@+OQPC{Q?T? +D8['#?W> endobj 5661 0 obj << -/Length 2118 +/Length 2096 /Filter /FlateDecode >> stream -xڵX[s۶~ׯPfJ xrj;v֖TKi>"-H߽YrOfI2b7|:WǾpT4 RxV \no(9p2źz1_^ߏl%#1pl]}`~2]NpQZ<dɴ[eih c0釁#T4>S2lԊ5oȻNyWcձ[sP#|#Uo|Ll+FzҪ);&HWMnuHeyU,] 9P'%Bl z??R*rfB"GhIpjoҊ'b55>GnTqvcd#w}+x s4'Ŀdvq1^^Nf6LrM̶9t9-kwc% vc@UY!c[0=NKKkU3 ۂ%ԆiIk#c~Xך;Z5''8"Ann =N2[7%OD_t7b{olb@Wc_%<0i[~.N6|t=3}ZIOY 2T\c΁m1_Z#kMuW39&?Y8߳Jw5І2&M2R9x>Tr -^|yGzE$\{Kzd8CaҴzƴ-?geJfJA'F=.@n |f( 0t^4"q?ь`^!m<ܒƍDɬstaIhF C̆q|w4}R"&&+vÄl=u7B- -4@wnT(,|SJl`Mm0Ow[AWw*X!_nxg?}4G-|(ￚ/Ͼci9>;ow;1 t `ssViS -pE#n/ YZ1xO'gk^2^2p 'z_I2(_@ XRMOaڤ5Tz:7,[!UWT:6,EFZkA^hi Ky45S̛h&FPKOk&!gy+n4mU6mo╷#/z+dIŽr<^OWxȟ78ˉ#c~fL|L; -BwWu)g}3X #nrwmK* ֪wgEZP]͙2 œ'8 `:d~ O#K8lkK0Gu>mFi;[ʛ ;cm +kQ^|L4)&xҨ+G^&lH +ftӼUFP4GuR2XwgUxG<-Hl +G-q"NީaK+lT8}c#\&%A{Ѕ6恿/i~(Ӝ#3tq|Y^Gf9jj$WD_[wzPnZ-Kw"0!~ѶEȠ=;i40|Й:m Ȱd45 6LHOI֤G_UYͅk88)4M>&B/6'$Ό +֒Ca!72=LX_3pY[1w+q^ ?pNibpD A[F#\#No|$Әu[I ^h,#Nt1M"ܢIdh\#*&J4`6UT=2GXZȳϼR[bTs&J&iTW,r; mcU2R +29v3 o*O_ՐEʋ$'˲8"ƅECTgtKrs7t/?Z@p[;չ7)V3dUd6ӱKҘKE1n]M964@J]H '>:9&&`Mo%rہxiƪhy": WT_{@pqPURovfgOș}hw- n j?b?w-]~NiǦH,$1 K+tt6#n%ca`D3FxiRuFw;FV<1WKYR<6-^EKyY#]{b<9XM?c`RoOy^Ob#2!]|nU:`ޤ9B*0Qf8x]Ή T7h5:hQc }C)ywf8(cm%)UCu\kĦ=^Dvp ڞUM۶ Ǩ_ icE#V3P2d۔):w +"b6'>͓Gy\ wLתrBA@Y[|wW"~Y,y +'iJڼY#-p-PI>U`zrwZ՗cCy(S +NmpW8y^PS⭥7w5@C^ +4[Y]GLiX!GBl΁l?šV޷Gj-Vz6WPP}w^iTR:Ÿ9ÿj6/┳VLۛ *}(,{ N4endstream endobj 5660 0 obj << /Type /Page @@ -23654,14 +23457,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5666 0 obj << -/Length 958 +/Length 947 /Filter /FlateDecode >> stream -xڵW[s8~W0 ]T,:)Ʀam= !S;6%;߹a٠H#<30"!;X0PړyIӉ5dj};hBm(sdz6c`P1V\6lg Lb,7c(W9{#H>H' - l`+}[0郤!b°J J*6ٮ!V(15CZт&-/L5g>թRTu^Ucm({VQ\ᖽ:b# l!ܲM|++lpU]qQ T:;į,!ÒAD,01$)I;r=BI*D,'*a-dIV~oof"c ΀a;ògݍu3R$?z33s!gu\߼h?*BU' _eO$)YAlYR6Q55q:&{-|MUѡbA4՞5$l6qmv|MM.kZTAMjfh͂惚ue}Bcc4{/y7ɷQWNתȄ;qQ:LJ:h@4HӀ&EgƑv` g*1buL ;zYE=eb46ZY}gzuz zf5y Y2.uE4NAAy*Iv f0̝Lw̉ :N~ +2ܹS3Vɏ?b[;},lY:KB.1?x\\iwB3Eya?خYT^ZrA.ă#}tQUuLOe:RS0ND-prHDsiM]Ѫlm+g bDbK4>ȑ0s=j@G]{P}Hc=}FyϺc 囥^77s)R+!Zs?k&j䅿Ni5(Mv{|}d VT!4 L:a(D]UrKgiGЁEl=X&v_Q]wWݡ]΅勒SPK4ӂ(+ A%?+ډ3Ux"W4(!aa/'endstream endobj 5665 0 obj << /Type /Page @@ -23678,13 +23479,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5671 0 obj << -/Length 1039 +/Length 1029 /Filter /FlateDecode >> stream -xڵW[w8~W/e`rB\p|bl-Jٓ%MK7qNffF)UU:&4*K6sWCRHp m]A*]YP7x_ &M1n.lNlMԘQ{bkt{:D/6O&n8B{z| irԾ~SB5-kuᄆe?Mk UbNWĪ2V lB`4t sj 4dhFco@% n{$55[W*!Um$nJIB4Ze sLW7GTzDK$gf#@/9n4'~Lŀ+QrB%bLAZ&;l$,gz_˰.V¹Yi-qlu%룈Ѥendstream +xڵW[w8~W/d9J!qO.y`>1ɏ_ɒ 6-itF`{8\}Nۀ=m mܚQ{jk|{ĭ/6L]r5~:5pX4~Cǐj Hz]e^O44@]#6fϥ1)bU@S Av2 +D .Q Tzk!ocGޑWQRHR7~J,tD6EKLGۀ#j +=w?mjw{wƁ˓{3- b8}dt>&JLp4W4[-q` `ff?׫藧n.Xu.j(ۡ@" +VF}SJ4b04XH=^&YE#I.PveIJ.Rkٷ;kwɸ03dSۑV2 +E={R?@]mXs0rCqge_C b(E">q,/ݟ;d4*b*c -OeY\k *}Ml7ͫY+;1!V^YxA/h +l7zJ@b[oBT0ㄅK[=VFE=?a8G4 [΋`%QMZ0eWu`?N/xSλ (8]ge )M;nyo&pM7aV[Lᵬ`9'hŜݢIRnJ`W@ = MqRf2;a>rzHK]@jNjG ||YzPhmtZETYhȬ&orgg> endobj 5675 0 obj << -/Length 903 +/Length 892 /Filter /FlateDecode >> stream -xڵWQ0~W04!D3`-^)z/m8 -Mgw!]q,~ɮT%1a:6)f[k\*Tj tʫP)T TI"ƘF-PŪ.V83170~@ :fTWǜ`NCt<* F('Qs1D (0J1wegyP'x#L\3bfC5"-UķKh;t<{m0YtI'<$gpiޡjxmZ +#}۾}ךOӾSDj~MVzzEY +e^lydF*vJc026Yy/l0 36E08ae8)Vu oG-;ӽ .;k`6|3 +&;/li-=[J`De C*ӺN=dUHYn<7GG#s +`,Z~pE(\-E_Ou!?n)Ic?Ȳ>_Z| 2V2/agE`SuOtEGI鶁 ڮ ^^%N{S [f 봕%"ee47jClԞW=3ne $_,endstream endobj 5674 0 obj << /Type /Page @@ -23727,17 +23531,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5679 0 obj << -/Length 808 +/Length 799 /Filter /FlateDecode >> stream -xڵVQS0~x/9I9ob: -=}|@@V_ҴZ@,.clE"7Pjacgyp]M[~S/( J)i/:0 TLV ] -Jiwp:X֡(ؙ'“NaޡFi4Wyœh)I _Њ0$78z,Sz*9KZaQ^ =AU2~zT.fVi2eM (>HrTp7jTMݛ|UXylסųP&,NK}\x"g6z!Y"xh^ӽtYm5P$S'.;tiͮW -Fm~D[(r,YW_'?UF m/e5Y(ٌ^6->PtVey{(WZ2lOVHܰڴ[N@ -XGHOyL!/m7ZkLӯ9̵g2nXSB=gfMXYr1H Ke*ܮ: h8u I3pλlęwx \a9xHendstream +xڵV_O0ϧdƎIm^-4m$PMώ(]RV)w;χU>DSC` qN,%jBd[uDmAy*DZk z: h؃:pWk]F:bAza2kgw{K4*+ۿ8Ŋ@3% MpX3AĞN"2\OXELUjp MkDX Q˰{S*8V(hao`nr0J @dUU!?x͆w:4 += */X46t48ӓd(OfXkϊt:r1%Dɤ b!$R>iѱ +?my/YHDy*V$33Xd/2q2D⛥h7jԺMm|M:,6Ќӹ$ݥ_.Ob!F9$JmL_1[ހ*4+vqA?ÖOng?4nˆRp7b{.C#Ցu3ӇhYVqZ O23yBCNoe\77O15,]BjǬ"*$]6f6S=֡4UQY>biv7km0m}a=i{?>ѵ5E`g!0O3.irxzH`8#*p  l6wā}]7dbvEMeendstream endobj 5678 0 obj << /Type /Page @@ -23754,13 +23554,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5683 0 obj << -/Length 1211 +/Length 1201 /Filter /FlateDecode >> stream -xڵX[s8~Wx؇%X, ;J/8yE\ːa&?~eK B'u=w.56l? j)zmuujakc47ڹ4tBGu .~йw.`g!zdN坰sóu\1i2wq%Ge0~3edg^7ë .hSc]MjbB` !-Ȫ 4eBta-Lg轨2XT78eƢY]Z3FשB:aM=TSc,Zc),׷:㐲)I2 fR Y|^8 8pEcIW8=sO)4!52KU&N/ފ1|yGIQYHEmH>:ar]7Ǡ: -my'0^Ii" p/VftH<>]rsj{}TJId-{XD|/|QB\?8ʷ$lw[v5?dm1QFWM>fx/\qx,OW\smBrw;Q`!}~zHI-I/Uy Ca<wƩ 4ba)>2vC\@⃬U~yq7#49|LV|`^D!HODi;^m[DeD仜GZ)ͤe-84Ht3S {dw}=TVQ9ؒ)jUWYdas0Bp8_T^ĪoݍOӱ~;2y91 -=q1fe#s+k\~vƫR b=[A yुغ H'VQd&?~;q'-~;߹Hteh g8*)ld M1f[wqm6Ru5 >]oul47cނ@;}M* KX?z_iJȐi#5FʦgZX&SkcWu PáY(QRHj`&Hq .nQF1IxCgqR9%E{HNiN2(R1X k0i4|t~+fw$^AO5H;P46fG3AIx"_ 8~ąУF6ӈKZCG5dؚd%jMUQw2B\(|/^joZLOz=2^,oށ-m|d{̰EU񘓔:E}V2{]r3ʻ.~z?h Q]TS_|[wLsǍ44m\VT%X5t/[-d8ZڤSj4hUmpQGfs+Z[NT7U-:<[Bo yg!ߺ"*'6>gW|KH-"PySNOzoOp}d%0?z17е_Tچ $V =U: ~ to{6CR&ֻĆ 66{t\ 7endstream endobj 5682 0 obj << /Type /Page @@ -23777,22 +23577,33 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5687 0 obj << -/Length 3363 -/Filter /FlateDecode ->> -stream -xڭko6\.iI|m7V-|%&":b~||HܢupY(cQieh\8;y}b& W7Ҏx4_x|f4_~xtfXMgaM^| ^z7z{ k~aɜ޵?}r?_\Jgg#|(G=azst*3__\AsވW q7#swآvG(/hߙ2&pox:Ӹil\+N˺MZgt}vja&r|]L,ӊj -p7SXiMxz(1Dݲ6BxN7)P!!šrr~J~Tx{8FQIKǶ!~}1ޞS<WLs+y*l"gcbى$O!Tr`]vwZ !O(<0G<ZXn+I#Ev9j1kbM#$50aat9ྴэB̸ݒrcy+G) :Q#aJ(>j &x78Lr,q؟!GbqEB7M%H^69o":?Jr<%EtQpxfuY@Ƽ(M$D yfbS!%:{|j}M iIUJA+SH$g oʪdM9̇ܖV6)v4V=lm+KA]7C~%;D -3GbnY?pɛ2-CǛ\/vcGEƜӾ ;JEmڍvzZ\_d8:mݳY.șº_U%wC99\;O5/t*;RZE` (vxrP8lvE&PY -9jQ/7fPL)kݤ8^h|eRucë:;tשO(̖\:;!8y»NؗY&ቄM>}>aN, - ~7OU>UGkp?K9'!caQAE]kџջjHrB{th tCݒ[{ Xc_LNl8aN)br_tϟa*#1}KeO+=RmE8tP/g`kO# 3.@tyȗiBD#/% 2' /Oq}T|99:cʀv>+{: vP4+4 Ya E5ҋ"Eऻ1ujBRj ڷQ5Dy*eLSt l("1a|⽉ޚˆ7~g]?O580ֿ-P*T5 IiYcocK"сG {0UϨȜ(\miAAw\eo(/2endstream +/Length 3231 +/Filter /FlateDecode +>> +stream +xZ[~_8BZwmR, 0K"z + +(=7>!E|7o^]_gﮞ^7חO_=3[{-G]c[tN/bl@pjx:kzèuQzQіk3W@C&7G_\s+m׻[([B+Vd$J>|I` Im)X F 3RV[aB; $]k$+JPDQ +Uv+lmOoq[1 [9+8< CVcg~2ߌ? XGr%[ -[LQ z{Dr-D:8ݜN} ?\0W@?\ 춀8X,/A|&p[܂{`)E(p%hͺp'cڛWs#au +B̎%3oLl`?]1slĮ!-Vhv?#9<v%91 w"??&p~xbxdrCZ-{7m^cT9Jc'|:Y2f<`D it5'4fz Z|8Wfm)}6@ G%=&`.*BeBקB.S!?c|"[d@ϏfЁvѼ7P%Ubifi4Ǭ:C=:H/s( ,7.~y=< ɯV769>$,:Iݕaԛ@i<8O>%B-UK` +r6.XN1lβ*W xٙnK)#Ԍ s27&SI; +X8.[f'Wx=){$vmIi弢-Z$^E,PJ 'H!rx8}?,>޵$Qb4yᧆ%%Ax0257t&mz3+~,$j}$$lvrm<rz8H5G +VLsgYPx1ZWoulZv5In_/Cn +^a?( ~YR@4~ϖ]h@h0=k%54|$*D<*f8 !4ŚnƟ^@Ϙc SO |Xsxi8.+Yihy!'\`Ǡ>ZC cm(QPnihc2D ZN-;/vD¶٨/5!TgȲ&JSỳ~wa>k >>V jV"H; plM8!5&#ծjOK`m;Khn/::~i3;+8 ɪ1BwZ(7xi;[b6:ϘևpL2 +X ޑ7nهP1<7/+bzi* +C1Hg4GNHwk<7U@=VQG?2N9؂ǚ6}~G\RcvNVpaCDWX !L{&qJq&qu$%NEÿӋ ޕ>Y AWNrDGQd.+ 2pnAm),y]bADK)(*0 P?hFk./Bw "W]1(.T]TpNTM0Eeb²O#{Pߣe4!N2 +0=t%4Ҽp,R'R5 0F(a܊']QnԵT~,JQ!a!*&@νK`{v %}WU.ps[d/d<5hT +-D$r*M UWOR}sbtz` +8#`"TpEe. Pr(gTݚ2)=TjMvhg8@@S o(s*wdZ措.i"Fw–8U}znDՙS4rb/jtuR Ypl?1p[個J0S)^?W4kc3w  1fLA憇$$4<.kn zBif`܊=XËރ-WEW"Dط +AZD'HH AOEgEZ4z{ZP\v:?jHQy{o`ILN @d{6j~"^zX6!{[C5jcEXy_'5w9j oʙC% ZPc$=1x]S#GO i@<֫>RVv}9lײuZүal)g)O"~UKi2pD2' + +Hɿlye; +xrPl)=R.e ѼUM +6,'b~Fvzm\ bBRWnl[$_ڭBVJIi6+F.rW&v|wY\(?PʁmOug~Eℒ+~ YQxZ˿ExS5DZӴm!,T}EGՈ\)p7/F"yCb$K :aҞendstream endobj 5686 0 obj << /Type /Page @@ -23815,36 +23626,34 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5692 0 obj << -/Length 4718 -/Filter /FlateDecode ->> -stream -xڥ[sȑBJ]`/oݥqv-+\$ "Of5јGO?~3R.tvizڽ.6 %K!Yh~{]l.TgAvq0&wyo˥SL{RyzfQyoT{wLz~\~p?x{Vp?5l/_g#_Aӏz_Pg.9D:TEE#(UtDri{ܖ0,vA:x†oxms .ĻŢ2TZ -++b@Y]UgI -\.uw}:0`iɗ -9G}ok / -;Lkl꺀` -Sqw=b+d}ŶX`|˦U;0ަ`ܜX^q{c~dLW\YFv9T}r屄9OW@ZVP Co.2!LW Ĺ%% ܍;kIBPųd/ѷO(yL|nXc1 .EFA y'pmK}%5H*z9WDAWPClh-C5 C'c. -`x[>QL[(%VGFoxD/@q8|,/g$ȣiy}G<л#T(Xx=jJ-7BX7U{E~[cf`iRDī\`iUeƘX$Hyb) z7́llA NŷyI?1XN_qGt-bUO7eڮ1a?(i,uRa|&ck*d"_0POSMAX[FGw3#NThG0 b9G~,"`R_¢W-L5s B?(t{38nƏjAhG}DP$89;=Y$B+kSYhR$(3] hW¤}S@Ӣ¿䏝`/xL٩B&$r $l_k[!;L1. -3H5==6E_F -n*?TJJtЦ4(F(/¨oyx@؏d¤T;(NpMe3J,U1&W[&~=-rDDP: &L -}` ~),8q`O8n2q2{P-n+mKrimSo܀xF'mҜlv"(f C5EF(e)"̆xcH,7p/myB$B-usOgXq=f,F#{F/@VO k/q[cD'`'`5b1d؀CɆ,} `=>wI>ws4k`L(<p7+g΅ NC-vj @n@&%|^ξד79֬n2 ǯxUec%rȱup 19D:kPꀌΜ --tuyӏmJOMޡNLhR`9 -Ja_g̟{gSP+)kx1' Hxtw/ß^z#滢TE BjKMvp3&22Ҝ0f'ɴ|$JK(`KU'hb8=Y L-e3;V%x -nѬd5mV˦A3%2$D$KǕC:!TJāTU ҂ĸo_6A@0x͔ pl5"|fq[-I>Ҭ{m_w,1K(Sjw7Nxx؎yHgDJ;":7uJrJlĿ 7¾#ϲ8˙x~Ζn $՛lb_=[=OQ,&{B3IP\ S=S &?{.İȘXgW)6e/az7ԣs4'(iFO6~esoIgg wrGG[$Uns[0AH Iy|1"1 -P;>_=< L,ǩ2e&mtPr&< -f]44?@PC,n]~i~왝 3+N ΀V^[idO@M˾FPc  ~r<@b)^D5w 4I"Qݎsۑ$u5Jm k5Ȱ!|- -+㐛? =EVrŴ/O8XGf7'5E Dh<"O֘"cm( pWmr43G',2z?daฏ5e=E ;K 4ȵ_#_x6ϲetC PFC :mV YG<Kr-2 -585RӁ\"Yn6 iMJv@bF;6&ZTY)F)rfdH!$,{Wnj0bвʞdG`RP^YIR+ <VF&PH>V$T%\Ug -̚Ճƃ"E~;MjzA@%%bZo^Zr4Hu:ӭ>M)pB{ˠg8iFuKxw1~z'UVqe-欓MZZ/zO>  -,:"r柉 o{Ѝ$Np *֊:.>^0ȯdI8-=3!;ro -/ 2V>S$o8c@?f:򺕋9m.ޣ4;p-%Q)$c$_uEPW76>gl23Ҍ7x'F"/P6i(}(1ցzvdGy%dP9&d^0İ140 z Lc+ -& Ydn`6`(ԜF7VqKz PkgLO>?}W"JŸ͢˜q66?ru?֗YT>2o)|~}C934lɏ(O," ѳEm^JM׀dIkaZPl84thfz'fӰ 㑢r(ڤ*Sz2$6[Y&hW[8 -MysEGؒbCe ^M%,P/~ 6\rhσ]pWы#9!<2QRǶn0yGR9zKo&,Gަ5 u; ]r6$h躗2!ɑI\QMog^ӋcD!G6M*g2\e\+y!V>u2tfIIyzW6D]~dpc'&T8<9Yי|U2o->z K=>ō@/B@5m\IbdiJ.}-ۋטAKy)Դl.ݛ)zD3%|M1QsOs.\SIׁ b-_6M3RGK6asUv:(PTh%½<},w/.& w<(aN/ TtA&!m:<>+JZ w]5i݆$_dGgpu‰_?K2Ceׂ 䥈%ɂ Bendstream +/Length 4598 +/Filter /FlateDecode +>> +stream +xڭ[is_bbb1ZWp{J[N*HdAU5.'r.uH]zLB 8Qn$݅wo/.E!V}sm/^zyHM9xu{rRwyv;.p}s}-4*-VL] Wﾹ\zhV+(ixx9O=WB@şm/\/ůMnxnh *م.˕K tT-EF/W2=P'(ر-!h#eD +5(q2 `\9N\mU Dq۲F(I5{[J}s5cz5#(p^ f.@ˏ>3v#i 0H`a~8ՁIDE O'PV(xf|?9I^F +0NKE΍B٣ٴ:Dln|-c+ۤ ANu`ҋ-9!IX?[k[R#M11 +Ӌc><5'f7E>,CnJ?a*0V|&)O(oyxY@ȍxI?̩vbTTTp2xTAd$r\ٺw]4"Pt@3Û}o7_}nʜE oD;Ҋ4O=-v6 kD2cmSo\׀)'M)?`9g$ Z!h4E @HO99aV:e`6ڂxAM:=\,!F9k,u!Q3=F swxX@ɗV(A\XѵbY0u!>ҩhL|?YUv\(:"_5k[K֌剜S%љAX$mUǡS>r Q>qH)-X +>̻/F͏ Hxi LEV8%#ގsW9ܣ1yݿ{[A㊢ u/-7{/ܸ]wL@*HCW]I}[ZAnb"US\AO΢'r0X:n," +E{Y_# +vѨ`T|E~Q5tRA"%q@.HޓiI4KԔⲰSUSBn_6@ +yt#\m_xheYQm_WBX,1r AHؿn,nLt4xDeL\˕HǿXYU$H5mL; 9{``_vf"X}y 1Y-W݈W' L%?@f"2H/Fх|0~]ąl{0HLܩ3QaH T-فƈ˞]l- 2O/L >_q"א ,zFUty19-Z64ֻ =QgѰ΅`t5<<8h_c;]ud^#+fzI1r$`<2IAu6""*و 'IZ$\Ů +`"%`X{vkN?'O`>GًϧΊQuX +/1_|?S+e,4 kk>TL,9>j)؏1 Pک>_=>YT\ncx7,p͜S GFSІެGҎ.;]Άj vjm͡൰(%<52vsP 8 Pmacp!OβO%XUEUg,C,^3.;ӓ{|FK[uah8sטy03vtc_zyӺ?kʟJ?, =3]̚yٜlD=9ףlЕ/:ᮤؼ3SoR#%|7eK#>!`}@%8z\*ZvR/0Od{Y "xB-ڄ!%Vt"Sg1;lB$Db\t\@?s-N0 SbpP'ȩaɄzHvdϓںe}e"R <DadL`rkE;yi4@vFБg +qz̚LP&H<;1NR=%[U3y$5e@J'DkAb}rM`Ā>aa(-qaܗm[vNu$@^D +R7T_5!詎8ޟ 8״iKR#.}Ga.K܀ (jti%Pp+%_VKځg.u=uQ$Le[!I>ϊ6oMI7e0 LNÅ=r 'FRp[߬$5GFN>$qv…:'\4!Ɓ +b$)ց&د +^}-,ٞRY#bu˪ʑ(2 Ny8 e e9j&%rƟM=0ht_FJSKNSH(= ZR{}s6 9rQ5GL4glN_p=;lb*7L?!yӱHroW3ry B7s,`п\Mv7M_>>=&n!(.|M,c%ZBoE +< +O #`,#q_n>@ᆀK*uﾚVE. Ji&*d Gޔ/ƗG17^@Iy+|[N&ί'F'fCن;.)'4:Z-e_rk]znwGGQCF |as.+<6!yޘSm(4 ?azE׷嚹NdÑ##W AVaP)L4љg弸8d ;r|GTt(O`oE}q%wE[8RgEQm#z=As`Ks@KMý[D\ulSkH*Q’z`ȑIXYT'WPe~Wbrƞ*=C/cݾg⭃470v+Cgʤhxe94uQ!/?s[I0z3"Ac/f"s,8MHW +M ? bW%?e'H֍&_DUuendstream endobj 5691 0 obj << /Type /Page @@ -23861,38 +23670,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5697 0 obj << -/Length 4731 -/Filter /FlateDecode ->> -stream -x[o8_ae4-R'dwfs d.V_}jy%*U*R̃, gq$g+Z~|b%$W?DTg}? -B6u+:UU'w_zqO?x#P/\c_2ǫ緗|+o_^}$u2T)_r_^yOG+S/իWs]q[poMi%Mx=$$" .TNuNk|m,# 2l/E /:0VU^gJK_/r'+]]K[4QVpX4si;߱0H=֘iCmQ&JFP/Mx\Y2>( L1*J|P;]Jo5Tv-WAzz/Iھ|%?B{/[7|hbrն\ѽQ6EåboE6ڂF썆5$w'!bOIO-SD ,>bB2.8D:D4W*@f-!e2`]y%b$ɄYG&˪b3k)ЄR@;!tcYNl -#,dR0lKP4XvP9׻$wց0IbJyWƷ{L+7ȣdK(v`WrbJpZi%8̷4eKsՐ% 7놧mq55(_o 2`*n>4itĜES+e;r6ֽPe[KŽZ~~~$9EDa'zZFY &!Ǒ GD$/0K|Ff}رU:HPybd]c-5hTk yѨ*ѧ٩'Q!_sJsܬ -gY}.6W\|E& $!E -ȅÏW(K0NEa:ކ -iG^wΆoWx2m־nb U?c\)bm<q -d~ֵ^$gS!ȪJB%yrȠS3 Xl)f-jj:;7M\ڑ:|Ϩ8pE_%m7r~)etQT%@seWU,RiOD -lw&aJ@r9u֢fG>YD19A!f@ ND(/tzN)q&hAr#7ۺuܭ=tv Tc]Ki8f| -fcp+' tpQKݮ,T -H gbi2i-Gjyo-,@y&#E>aJɐOD]k1!H3&УuoDnN6$Zx^6*uܕcYhXZF ol]:F -s.2! 5vؙⱗHQ0xɉ)dv]g-u -RDA(69:ܺ~8[^8 Lc!r8!FHQ<0QkGRzJӅ=BI-)ǮyQ"s/lG V-x`3uTUxRme`3j4 + ]o+VL?#n}͑T7,""DZӖd})X -v+B+~m?À4e50v qAt$C-*7||IN YpDHqr)B]NUb|/-KF#y"]XVRTcٕ 3GVUQIШw h1@KLЭ3V)BU5OZv* t(ϹPcbɸ ZHo48% X+]~jB\ BOړs &$`G/I?\iaGݖwM(jxo8 wq?q/+t“vgysM&]QE,sfWJg=^>uS2=I-Dh/sd6TˣC_UQ>l*Ph(P!YR8^2^#A'2rH =8uEePiS;G+,Ĥ-#yF'%A3DSk=UR;⺬AY9?BE 6ҒM9:<7e%×~BV FRËqW*N,Z'$d܉&00O09ٝ!#PsBc_j@tBX"'HlXE-qz*\Jx-k.}]Wm.1k~Q}uC7ow2 #Հtcit~(M0*h_jz)TcQl\.MNF -dv.|isru.:ume\KĒ#0X6> ۩.ߖag"YOzq.zd[!ȮݏaJMoAC;諞7Si"H!$Q?xC0'kxhI~Oh~݈ߤ[9NSR*o&(p{Q1D -VQ."Yؑ1k#PInhS+xŖ3w[:7N`18v_$I`]Wc 6HpQޙӿ}(9!lȥBcV:E D=_`/tendstream +/Length 4288 +/Filter /FlateDecode +>> +stream +x[mo_!K]( +NbZ2"HX ɳ. +l'h"]3#u87e'"y/oCkQ!Waó v(x+ ѝ.)`t Im 'G3E)bc.Dz> y,uxY,ڗyAK| 4d!ɁҊL0)JguKχ;E( LY"-ݾwЬšYIg B@ =6~ -:TyJ +"t1O 6p=D\bI(Bd ;N3)Ap1&j&kx,R@)_Ί-CYu$ mǝbYt|3~f*O Fp|5wYN:VG] UٕI;4gc VH:+wÝOzmᜂ8|ڝNz*Un#zj«X447^LɝXkix6)f)RI{{mxÆtȡB!rQWΥARʸ`Qvރ־~6;fvCZ=0%MYrӔ6( @@^T tlQpo;Vk~Ay=z2JG^G2?9>" <>u6ڀ|6QQEI:5V詷.c@B*R.x7Y <2nЉg.Z{V܂ ~)*~źn٦]r?w%{- +Θ0 ؋kCUF\ Ï+l[px%j"NG?¨N##vߊ@ʦ%V\QhP10/HREQ D+ ' {qL,_>, ,6e(iɝKs 0 ?LTMOZ,w<:gG1=G΍4w/=7&l& h6E0BAc4}=q%A7g#Knb4V]ҀS߃>K`Ɍ u48Cm80z( p oC94+I8P^kI @vOq"\)5AD$jO  21`a,pGr Ƥi]Kf}LZ[;pƤTQaefj!h:YE'"Ubμcc(؋&z~q4a w % X!W&ljP4J(htͫFۑ4yB) mh+Թ!z)6l6MvG+n\Ó! BޮpN2DfpȨfH9 d!afQB2abnup b*Z|3@+~C) ڻ +hj]W"ײ ]Tm9H^Ųxc*V1_ҷ){{ +~vLZܼb#USq8*=3Z4T&?01%9#ߤDp~uU‡7;G%; .fA +XRJa}KWyٲNb @NCyj2Xlb.\Rc0qsMB5[ȼ$Kf0v0)gЧ[)W<(Gj 0$fۖ^pEk80fRxڞ_ί> endobj 5717 0 obj << -/Length 3357 -/Filter /FlateDecode ->> -stream -xڥZst&`;͇VvDZVcyN H@@j )5g noooo]ʟyϟt2bq<[.fb!$뻋7a0=7Ǹѳ'wWwo/֎EΛs?\]|_ [~<] W^_v/w_%e~f I<{wazwr&]^|Gϊ:cT- PYdkA{h蔾sO[PvTh<^Qd9sr6vlj.rk0\,-6%H;n6rsAL}Lf*)7un W8L/8(D5[TʐC\$(7p%N!̺ L&k '̡kO*> Y, -\^E|M @XH"vCoXqLSƒmĶu]2%Dnsß1?V:6ThcESeq -5~E6d8{2c-h.i:݃EW{6Br %E])^F]#Q%B|W#yQ%n!ݭR8y7cU!4'O"`"tDLʗ`,>X u$BHfoBgq< ReY_.y1" #Ϟz ? -Ѱ8@8O#Ss0?珔ea.ro{P2$I0кZfvtA=ݩs5 v@aG|xrLx\T~%=eI(;E ,9;l X, 7 i5OJ]NHT!MȜ&PۊW2J @0>:3#V@"xE')P)%"˒&f)Ǻ@D Lz Ʈ|#>@yc%Vdcn+.Kp|<% I}.hO>LdQ <Ę իH)G~K)|! Mny~3h4@^[tz*@lxvI_ uYC%ZJ딨vb`pp.ov0y9o[ -T>:":Q{)^C# -~ˌ#X3RUNʁ ]Cm!)ۆvǐh)eQHJ\_ԣ9QP J\h[Fj#˼bha[é>NojRTA*Vȓ!~l1|ޡ/8(7X{.nQ 2niI;W`tK031'שlCY_ث0G Բlj;]J7n9,4"'j ǖ+1--{( (=JF |_ƶ U%)+OOaF2$W#ևf\ svh$ޯ'pئKΡ#T Z !حxY +./˾٣!Jz4bl)w%MQPg藍{O֖ m!3mCR{2+^`~D{d|gNw}S -%&9?j3EtyFJ4qX$s-PInmHLvIVIVA<,*~^!\,v'Yľm,~2Ly4P5 $Vر*csg戗Iˀ՚e/߽5vJ[[h#z&w}_~!=- ͛lJdG+5&r&[̾u}X75Ń`g`.{TC$OE\~OXmenuyR -cZ֞yQ/D/n,;!^@k0n%Ƣ#6``zRȤ+LrB<P c"g|ĈH7181# BbuFU?󶋏 !o ܬFϝqP.G?*·&b.yׅґ%4fhc.չ`Qg=HS{NG'"Џ,mr<͎oA/c7jTZTnr؜' 29qo9~ w?^z -T贕4r g@{őD,~O[FGEXᯐ[04OTz~3gڍ=c`R.QdʜaƝVwesA̼oPxcD'MuI1I'.͆X=^US6 R& ->| 酑HgC(kOԵA!yfVtQHLX?SLg\wv?a2&endstream +/Length 3287 +/Filter /FlateDecode +>> +stream +xڥZst&`Ƅ͇VvDZVcyN A@j 4M3pݽ}v)?k }7f-0/+rH"=7-~p^}s}w* COʘyn;xۯK＿-йE7o/^ߏZ)WE!?y 8s$^/cj +{z(wzV`ay%;*oOծz: +\mCb,d5vlf<[dQYV+*O+8?k|:0́V8g[ +̀J)rTGB㩠8oqc=1sqȠ!R` c$1+J$aA.%q'YBs^u7PLyA $@|ZN!L!J&kN 'LkO>Xb `E`%-deB]te5Ū/Ab!3#;4a9q2=x^N +]궻y- 4-ڋgX3PCL|FL}..|k>lFqdP\fWgp l*f +!][#U@4pn? < y0L xשy)~l+9d,BH X$t4ڮFhtiЈuy\UYoZ+ap\%1PW ݏzkTƐ/GhLf#8.l.w>`,'{s)?PH.K3 3!Bצ}ٿt!ŝUƚB7 +0yFb* +[ٞ+ُW$x|78?@#A Kٶr&I)b bN+Dh&p4q8f&SRT,K!X#xxr,0H C)%)"ɒ&Ze.Ǻ "^n(z?Ƞ!߈(E"uaH+0%Z/.|nj=e>5k슜 8Hd *#ZJc c]qc0 +j"KR>PH/s&czyId +ںB՜tl@`b،V܎m}\ +t<$'ޱ/.^q.i]qxot7tCZ +'-ޱb.Hf3 dxZ>a;u)_:^sJâejϩ.yYk% +"?7Cu EP>b6ֆGԫaNfxTD_%՛עƎ[s3rVg%v#?;x&NvyVԌNZkОwVil kGۤLy(IK3sm:^^ `y@v#Ҍ``HQ)]t24<W맩>VZ , +=c`Wd`ТUh+r{|Fs7Ef0NxVlSiXso?bhD0>3Q=JaRDJɕqȖ6B 7|5pIquh5*}t G_lΓ`o)~Uޕ7'bHocHpHTLf+?$u7 +85Y64 GW>K s@^o|F*ʢ#KAx~PY"|B-Dwm3Ƽ~L#J*]ϟm<O +M0 O\QX$]WROܔ ;+>^{'YDge C5EMNQJW =@A(PEǿ "sv0RQTendstream endobj 5716 0 obj << /Type /Page @@ -23996,12 +23798,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5722 0 obj << -/Length 513 +/Length 470 /Filter /FlateDecode >> stream -xڥSMo0 Whnit.,MSCЦAzAllc lS|$'NӌK!Spؓ:"?ALfK9CLi C<_W,RY[:.7Ū,VRt:n2'2UGK2=7U2m9+h'3ΐUB@m Ofڈ{yo̱ȏR%߰/FNRv4 +ݳ̀o_͊w\@MQRѮO80Ο` w2+zi6:pIcjb9l~fʥm|qأP +,Y<+ Q0W)yO~Rd}?(| +99X7endstream endobj 5721 0 obj << /Type /Page @@ -24167,12 +23975,14 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5730 0 obj << -/Length 515 +/Length 473 /Filter /FlateDecode >> stream -xڥSMo0 Wḧ>wK?ҥ4qOmAeM3;] -H>RO($(IA8@ދ.║kF^S3E&V dKǀ6$x^\/R ~aN鬘nN!_dҢ"Mg-zPlW.=hzU50~!7q5F)PIlϐHg'endstream +xڥTMo0 Wḧ[5] +,i`Y4(Ca('ɨ<MBD|i*mmVw [X^!W7$2_ߏ ̧x2UmYY~o"R^5A73]Ee =ZzS( Q[ WhQI %Fosp*{GL^xލ 1e!)o 7 iy=ĉ7@w hcO2|5Id^oj44ܮ[nX,L̷*M|J̼1:mX%h}?:Em/ciW1' +l90m^- +Q ^@9)_endstream endobj 5729 0 obj << /Type /Page @@ -24315,13 +24125,11 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5738 0 obj << -/Length 524 +/Length 478 /Filter /FlateDecode >> stream -xڥTMo@W>xُHR"" R(b[DHhyk(oɁ1ݿ#!XoŨ5m${BȱzP\fALΑd:~h|Be3Dm1R,w0SN;n<e[J2e{C`߯Sv8kt3ndDyxጳ -o: HeYd YcO֯ -Xުh: x]ץ%ˣ^ri1?f[kendstream +xڥTMo@W>찳4D*99DAH$Pڿ.pC;; (P BUĂ+;0mJu19#PATQϩ~//? լDTbJz˻imNgI=\7$wӦeV*4taTPW+i8jhJ<1B Y(V>Q_ߦV˶C:19~G'ptǤ>$Y|>(iMūTfJ5M+ ;̴TVMY_x*$@1ILؾGhtz<4Z.vxH¤`Ĥ^@Gᔇg>~ hF7߽l׫_y]IeϽ79=gRXn˟gSr]ˇ愇Mn Y#8EY ]~J^mJh!߹l#ݬkƣh%endstream endobj 5737 0 obj << /Type /Page @@ -24519,16 +24327,14 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5746 0 obj << -/Length 510 +/Length 470 /Filter /FlateDecode >> stream -xڥSMO@W>xB 4HMM0'PAJ#Qh;k;v^%{E!A H -y^K@o FSc?'U۪iQWm向 <Or&McPJ(8sI"-D kq88UyTlpO[앙o4 -pFpQ:h2 -?ށ:,nl|8{^ayz߭Y3!V\&sfڕY*Ɖ'}*ʏߤ}@XŎ5yɔOvv&vT>w^̞7aoMoxB &PA +(yq@ηF!A H +y^/3)9ra!iM `l@ AQnR|t1YQQ9nfi=GK* +Oy&mxd,Y՗YêԠ-EZo2@-CLj%ŴHU=/}1 ţ<:c!PR<trGB ĿGendstream endobj 5745 0 obj << /Type /Page @@ -24651,13 +24457,13 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5755 0 obj << -/Length 511 +/Length 468 /Filter /FlateDecode >> stream -xڥSKO@W>x}Ajj9)ԀB۟YN( -A!sqH̑یMrNd0@ ^zQh(46=:/uQZޔ[jVNLoULZ|Knx. g ]M6?Miendstream +xڥTn0+xs829S:)͡H@ ;]EGΣPiyP X@!UՓD23@;CgM6J֬]Jx((G>uM鬙ήU:?ϋ@y]xl,]7eǪrifwZ= +LqPe*,f7ٗmT|(10hvx}GGxt'izYOlJ l;Utb #zh‹v(Igf;foUvn_(M"-𢧁-l]wD4Y> y4&Œ&hr]ö/pWB;[Q0!_']Kqy܋?/ɻwvѦ +7/Yeaq6F}a'Kw<`mOxsr^H~5Scendstream endobj 5754 0 obj << /Type /Page @@ -24776,14 +24582,12 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5763 0 obj << -/Length 514 +/Length 470 /Filter /FlateDecode >> stream -xڥSMs0WhhАR84PNH,ca}B!Ϥز*6lCʓ:̭(! o}ڐهiU_r P|vWߦjX֋U4_b~WEU)Sbٻ/"C}]ӎ -Sv #tI>K@v3 FSknTiƦr(Qq#p.pt' s1$x|i?Ud0T)Z]Q캨;IքԏpV_+MD%&t*,o|2'ӫl9YnݟUn&ӽ{bZzvjO^* m]"$ٰYOm`"o Tgߣz{FBHf0F>l]»S e<>F7ۊ?*_2`j5^QHϋMeCEE+%.s +r?$gE4C@%tg~ɛS} tv`H~-GbPendstream endobj 5762 0 obj << /Type /Page @@ -24909,12 +24713,13 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5771 0 obj << -/Length 496 +/Length 456 /Filter /FlateDecode >> stream -xڥMS0{h-|!pHJ; lsb^(E| `K,lJʃ*̜RUgEcu~uNWE9E,JC~|,(g/RddeJ_./ѴUq[gUK2ULlno=%4Ii-N^uh ~F$;mғɃ+ Zx "\<:GqoeZ_Tb خFw'eײ'WM/Ow◰7 2 fhE%5|F'GP;NNڼ}^ob碤|W>5 Bԭ,%^fihl'A-֤Ͻd*kPjliXn#Z~Z1M]t -endstream +xڥTMO1W=x@ RpHQn|-VzCY#L}Pr 0|yddߐr`Z1 L` +ӑF,81F%aƛ9 mhhw<5BW`#[!~>蘲ݭ`[}/JZU6 baQ٨9noc'= _0mY+9)ijXO^zқ\WFwPįNL;Gendstream endobj 5770 0 obj << /Type /Page @@ -24941,14 +24746,14 @@ endobj /ProcSet [ /PDF /Text /ImageC /ImageI ] >> endobj 5778 0 obj << -/Length 495 +/Length 451 /Filter /FlateDecode >> stream -xڥMo0 :3(Znit)MSðfAClNmc€!C|H2*-*Ϡ)({humDކg1U2[V~0X&U==_eur"J1@;MazXrU-Wqgň馌u)wϿ^̛H; -%yxIZI4PMP܇D8-_}rjrȍg̸ -Gr4*ULSss-C"FW sA*9ؑ8[HO+(l@`k |Ӭ E -LvqmYN!B9Vk%"GBpƒl]'|{$p TߕMy93>#߾F߾ P4;H2*g@jChDPMK,0=n6h|zpL^fBm?u - 0endstream +xڥTMo0 WhĈ>wKM^Ꜻ6 ,-l/ +DR|OQj~PF b+=ZZeY-#o%jH:yR?Wê +LPbq>J,k5O2,U};-#u4Ûa#C}-.Vʂi-@)^kJXG,mŝlN\^htB +[8:FH`CRAr>G7G ucBru0^a_ܓhϹ8]m/> endobj 5786 0 obj << -/Length 1844 +/Length 1786 /Filter /FlateDecode >> stream -xڭXK6W(V$E=Р EChI^+#}AZZ 9o+V>X{JVQ,<ǫz寞`+a9<^\Pz~-;֑H<y}(0T~%0 @mɁ]wlz~sp̮tkF /~}'ssl}n;)auO_P_T$_!Uph@+ytAC*:؊yE{]/x!^ Kd(HM>S* 7a*WFWkG=-Lcn8]iZXXh'M5J{ Bdbd؜]a+vL͙;\0ӓ#AbggR:s)@5*9VC -0KISbѢa-q;2FIh0􆍲1hPue __ҙ#ֱ9[<"H̱0P:p7Lf)KA47;t0x$1YSYR]%Z&ې2#GG!H%kɎc-_ }PF$~1ut:ZSSĞ&Xe>·=bM -8U1#q@quƬi4puؠ1OfȊ -^,x4R;?(@ /t@54a[F?dhv_sLk!Rp9-0Ԃvfggs]ۜ}.9^•B-@(⊬2Srӡm>[k\wH`ٿ 2cazL=`$I(7!qb$qWx+~0mX-d #gJX 3b% ݄8WA>bJlp&=| @3ey^3JF}yFߝy<_=-F©ZmRSc;GȃZ%y4l_h0M w&P?zc:> u]\Kvl% v]1*D6YҨ+'f2w;gX:O4Uy(6wE}r\{ -w䴼[ay~n'nA.6\<bFgl$)4ʿaBquXd< |GP/:({Ew^n5ù~8o_oW^(/*tendstream +xڵXK6W(,%AAHr%yDW:%˶6Ebj8CU*~U _*^'yBXP+_!6qH?%2R+O~ V27s}pzZco/ٕprSyȋ\O81t/l/{`[*RXD~\a*(,P0q\(7Ђ23^c BTwμz%g2WO)8+UT<\=-&蘽vt=;M ˞H{j =)Yϰg`&lG_aYVQ3[)й0֨lZ9+,}ÿ&M{VċFư}%H(n6dAo#+k77UW rx.E O8c?rat nY2",eD\߹?,dNg9\KN7K6%5%LX!m=#e.G@)CJ_/x[{ 65Z7OG~GB̗.C[#N w#&N1eqpuƼhzJ1)-0Cƀ DGJAoL&'8 V2e8$a>;[+ +,P:،Y6%vgS%71qm1$[NG$_[x`8" +(  aS0HшGxP`gHh۱zXs6@*r{9_wemLQw=/`+𕫔;bjLhj+ӴLR(hL{G%uS*Gg8MTǩ_b e  l艛yyoo?<!}tLn?mNc]ӂ +:^q5+3dEj? # +Z:3eV.}gCf9Ǵ iY?≠ݵͩ{&=rɑb:hB1pWdmGQfnՎ,pZx<̳veCD+0}{I&QCŦI\ZH|!*݂ga ++'t +E>CBZcվ<3wgD!\"ŕGFl0[<4U}<F{BFPl"* mk0aݙ5&7k1Nn~h> endobj 5792 0 obj << -/Length 2737 +/Length 2302 /Filter /FlateDecode >> stream -xڵZIsFWBǞq&){lff P& Zy[)W׍-6bGWZҔ0WU]QO$۫뷒hLLlVA`_}ؾ0Ƣ$&R:vYjzCԫqG0ɍ~/0Ͽozm5aX*&#cBax?>]9ʭ5%@D,KJR%k$*'K a4Y)s+*nw=QeRF~i?R+՜0bevJ= ʫaED}^ϡ43kĂPa,W @" PNq+603W`, OŔ{"QvNUc}w>;GrC53Z;+m[X- X<`4\EZɪj,PX2s^ygRҒJXNI=DS )P eM}B!`.B -W#9(Aci/DfWNٮUjqI YpLe'B{ң*PϨ`Xĩeu-/h=_ϼ"ݿ'BN73egZ3>ra;^91q/|3OKK2dImmS=z7#.F!F 1hN4GM`hK9g^7MZ;a׊ʺV kjb::OjG5[$d,]H'yعٓE=DG6E3Ӂu.((whdÄэ -ճ K[zD fk)p';"7^0|u{۰Ylgm)+rH@5'O(p}^`E*i&vd -kw>$Ⱥ[^ܮz1M8v:Ҽ=єGP=$h -.! `J:1Na7[}V`WP'w-X&Є{Q 6;&6+qs -xpg4}WV:YEj"{PeldzEb`QuF)0PlhzdILj#pT=5浑hNhAHH0P&Ga[N׽yu-USOHߝ60BNg`]Œ8DN|[:cq#O=!zr 33S (؊kIb_5rwbd%D_5 QE `p?EsEl_ڑߓC6 {|?[tLHp^q -֦n a@ rX*%\tpj]ki ̩%xauC~?lZDŽ~Ak+W:{ W.og_ة+< RlW),wӍƊ^B6"njVx%\upVsq^Spkۙ[7[$EZt{~_†&STP%{m*5M,8[tΚj0H`;Yy3ɉ$7ZDhPw^Afkz5wXo8cm=k7mzgA5dty hm\:s"L-7g";uUs۾E鶜]R:_NU~{? sejEK3 T}Ou91gDt?R4bW,;\nғD禱f?ܝ>]jJ"ZwFwrx`ck:vlЗW:_ Z3_uZ#Z;Awl -%OEY^D,_ c OC~!6OMf!jsd8{̾[0B}TT9 v<5Sx<OCfY`ӝɎZx|匯ٔIrNIe;.-qv8F8<Ǡ$ptushuO4`Yyw?ΞQ"YFiFLki"Xfs8tK'0}L*t>n=i [  csF8o8Dέ?0Kп-4#Nt2PK./p-p$Aua\*gxw#P=X) Ĝĉ\Nt!A -chA!h<_rd1 #$Ќ U)C2|(cpTm P[m1Hf$! Xl>ToIh6,jendstream +xZs6_GA4A|}s]MNrzLZ-N(%ؾvEĪ;w ~E(l0f$͖gF?c"0RQbĢDf4%ӫ \`Y/ kpޕ|l$?(He3(H"Vn4ݍwYA|yv R|kJK[5 +̀"#cU„%ꗡzxVV٬95٩\Ѓ`h% #Z{sΫlIl?D]ﰊ>-EYSy!R?;_GO@l8pyO0)@ И@8>gb3cQ%a,z69n03 gL(4;akM9P[PC'P>?7fMdĴpZ͂\_ًIڕg#:qD=&7gMvx&R"(Ņ繣`8a pD{@h7z% +g\YeCYQ/FLD nʡ[;q:Ay䩟E%ǝ[@nz:܍Y4sս ԋ0Hbo i3cww%\w&[2:p iiԙZ9Z7?`yd~R';! +Qw- ㄦ3./gWQv ?ikvݧwj`eO_Ka6aD |D#aI[U[EYY7 F0}pF;p;0#:$yꙟ!XW5%-̞w]l=cM +x KD1$D=jF)alNKn~V%Q"a ‚K'ɫGqKګ޼J)Fw ^Rjc^;}$rO-1)3$>P]64_wQ(yb=UjjٯКVX1Ui(4A)p65 SItI +}@/}=][tEkAvorOhGm?;D2 ZiDRp\6LgM^)kW^揰&mj/jca.;ArIӐ( 䫺mv07 @ ^vjul`\lN^Uvo01+~zHZvw_0zc^ܳ D3*-PMzCK9:/8'j:>Z%I*h> endobj 5804 0 obj << -/Length 2666 +/Length 2477 /Filter /FlateDecode >> stream -xڥY[s~ׯ`RpF\Xm4x:"@50f{n Iv4~̆?gl:Jlgˍ# !Y h>}cȎfO~_y=%XzBkm/z;< wc}Co適|Gna=}yxuga~o,+|ڶr`zwi779oƫ.qP,HES@wraQ#UqgKV;Z}`V6q_n,Kbiap# GSoW py" ߳- R9!q;i\#]].h7 hcXu@euKIKO!!@ ltxZhH{F4 vMkTOZ;4amJnS*sF=z9TFRA)7p/uTмg #~w^;k_,|Tidņ{(O{d>Oߗx\VSV_[&'NWdz ρ;n#kZ:` -8HwP_طqj=8>.ȅcIGwjUkan(tݕ1s(B I@b.Eʒ;e xb@{R<&WB"e7)lu!&ymCm 7+q#xBDj\f>=?A7Ǖ\$r2WB3\"M\dp.? m+!Ǣ+U骁 -&1}Oj!W<v>=p-Jj&YZ?;BJF9lX#YuEFS/0lb>u&IE()LWa>WN$km %$) KHeUu=\LjZ@P1Ғzlc0:"` %Cq!Nx \t!v\}#P沭 .SHʢ4nv|^!QL?d̓bj9s |NluG:؉Lk|No\QD5MʃO֘AW --)$Kz+i^g6,,(M lq3Y0лu˯vHU 4jGL G*\}ؖ<|-i( 62`,"A@bu4M@ 9j9N('tF+ Kbi`mʗZl$x@>$>-@>mjsw -Jۡp T %zI/^jRs f%Oi|(aYi,(Zj+Ԇ79LR'#N$x} E[g|%BijZ&iԞ^(dzp_'> 2w]owk̈́qPL,yz|Wa+!hbV}ejYCfVanC)@|1n gYVT`C -TKQnznAJ+4)n؎^TG(V>h|jT](GL4^͗Gwn7)؍#\L{8L;|yL͏mݣimJ }8F0_j(RJ' RɾyfTe*eV.c`)^_g9a -=endstream +xY[۶~_˻Hx:4wLIyQreP.L?t<pp.ggi,0-R_i:[VWl #\F›EKbzpu.f'2/=H!y>0 swH<йfwu[X;? ׇWw#-HDIjv,M_y"ڞlV]Eq((4߆Ux,3ug" s2B$ +q6%1z]`8ZufQ a8;88vFh {ФThk#@PwvEF9 ,ݸ4 4Iwjh,q\4-ypq(Ϗz(Hvmsh1Y5m>B$f2͟q!:VVU/rM[P]c~7΃5s$Zu/R?=XDP>/:V"G%].@|#]Q -OX+h& 3ZV)kFcX]-p#R'!mc,*mB3 c |H]ojeWܐuc7!ŋ=%Y +_~:T5ЭAFUtYS=1Q~W& [k_1qTNZn.k&l脂Cy]T"}qV(Z/W\I02;l7}E8^T[ʓQ83Q3[5lK q +-|(H#hW 꾻j\NHA1[ص]Zṵ6]}ysRk}ٴPy/͢RMGZMQn +Ae?:Xa6f ;]k8$8X|>"9R򢜟"% -DuCْ$)" [Y0MA| +2fR1CF’%V?G TY]n+44[^JH<~|8eX 1x += +9%9hLOdF ro*Y^0TdkD̝k_,D  qGv܃;`h0EՄ&QD䁧y3p\nQ4lr)nMH9@0uc +.#9f'j%4{U W.[ ?+n/X*$:Nendstream endobj 5803 0 obj << /Type /Page @@ -25476,21 +25292,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5816 0 obj << -/Length 2888 +/Length 2765 /Filter /FlateDecode >> stream -xڅɎD!Lq=@flsQHmmU$%RFZ^[7$t=nwul9? ;"~G_NyQ7O+Wj`|w Cyf(v;P;ο`= Ͼ\g;s@NnEts" Ot:)@7X/ոX8{v| yEG e]SfA !Pv- -##h!<&\g_dyzq -[=()d1qiPT -^ո"g  3K7)p@9Bp7@RMS_Pv*Dp$TE >iJA"#Х/0M 8*3y@mbppߟƃ<킦~&~hHN"}jNK-"'A)@3Fň '˯oZnl$Vlμ:093&OQevL8>…5֝u39->C=S=ŎX+^+3Pguƌy:K|3!U(^G:IYGKD[p&oRwCrh{e@Sx7ˁ7'4坓}Ks9e{FŰn4/{ KРa.~+Kk=xT* ƹ z, (#]["!1¬ T[U<$Uڰdlh; cZ[Ι`4J7 dDYdhG/;,v_TrgS8 5A[3|;g%YŁԪ5xX!І88Z T@D0M`CL -/c2LdY>R 84|DDwБ"ry L.pM2[8V~8y@,K{6t6_2dF]UZIC160&.$xÉʥ( *,wM<6^KB8s uHyVB' -4)x`Ar "<8Q3`lIjnTA|"p^ќinL.5V:AZdEiԈ4 {➈4kMPE9I&]vG%3ޱ 5K|1Ui%RbˤtjN}f^--1ѓܡai>x z'C7i=ss?b:Z -arCF֐}>kޡ6zg$? {Zsm\_gMv,/Lkڌl{2PrzO{mfymj (%5PHij[>W7+=cyF`է5O`K@`S'[ZRF+1f(,Pc&5,6y z $z ԴZm?^_AYw(v -o6=ķ\qsߖYG*T*1T6S DdƉyqUmҴ5b8aEq<> =l{H#wdIA>͛ÞvS0 +( i6w7a'k?t@w߸q<<qW:6cWkrZq}bt<҈VO@GމPHX^|іaq"xo%nsb X!7̜w`x孒sٖxP7wooCesd޷+?uXw;|/g=Så{JV"׽N!P&`)8t]\`HUkk1j,PZl7 ^9CLqX + !'p @_M)(^.ݟ#F\|[bTA<4DĂ艹vK+,G%13Hr3w9b?u6 ){+[>iD'rH\0lyүhH@JMĽѾ`PzD^Ņ2#RroX" ⑐mg( ,R(/00Ҝ#AMb`w+֭YXw泃-Yz=+3Dx +h_3*[(Stk纾\zX6'a6 &=jFoLV25<')-N &" U^-#pn5⹕,G")^lՠ˂6T4\M4t> endobj 5823 0 obj << -/Length 3465 -/Filter /FlateDecode ->> -stream -xڥZo8_ܓ lM{..iqvAGlee_3R-w8pH/^<8/WrM#.BŸR+ŏ̒0\-Y{0O>{@/gA ?}~]1/vv77oځvIߖƒK̚O~ǧ -SAaq]OD8TNDgM\XVu٢궳(k ** -Oi^h0#6aЫ0%>t tj ͽyB@Ȅ/rO&-W!sS~U[gd(y@mpϬE0 ,c" )%kbvC߃4(7o[nr<~h.NϹ^gǬK=p8!57͒m@N͕dI uG!,s+,c_u=Q*rk./kWee)IN׻x rW6jF7+ގGOVhIJuw~8ĉ^ݾ%b<5+^ ݡKLc Oluu9zѩ5QC꬟!_ی_IM$wsD\{S1G 55Zo KSAHEId0~}u԰SręwPf/-7wSm E - ȈJ ࣯X ]7O:2 AIǵ^"jý톮M͠Xf -[q,RƞE/s)˖;$l?aϣY#IZD_I%h6I5iGoLf?~])p^|O#1c&R8]Al#b$_7H?cPIRxi!"$jYL8HD -q%dyco&nS/"v #^%R Ș2ٹ/b@SF<ۃwY&z$Y4 Q1$1m(hd=;?0˭^zL}M l*y7ym_^hs%]GL/^L0sQ8rr 'yoȑհ.݇^8洮.cCXuΛjŲi_m(1&g0:Wɐk(CQ1ac+R߈@udƱVD,mS8\o;Aft֚pA CLh<B PgYe*N0OMc6K7wtQÁ&tѭng Uy^*r -Mەֳ$@אZ/ۿA ]+b"+P;[wQt@mLȠOD rcM6KA#tUĭ3>-\v#)`u #Ȉ楲w+@!O'TQD0> \SUL,FPبg1f_f"Xbs[.VTqf wO󺕕$;Υ'RhFEg ESuʥH}M@]kc8pMbH|EjpOOu3jPjn'~Ei[qAq -4K-<岤? )/[y*$[Sws؍tpum ۂW3Kʼn (7ҫL'?%NWڡwll>sɔA0rGo%dQGFƼendstream +/Length 3424 +/Filter /FlateDecode +>> +stream +xڥZo8_ ld1]\\ l)rf7d[nw7^^f< 8.WrM#.B.  ?Ń,߽_o?ͮ8П]v,>]ϲ[}~|3=5? Syvŀ7?^]we|Ƽ.~3, ^~g/0/7&o./`\bLќqgq ~z?I*nәh,ʼkBl*>g7{hSg̼jňAh0z%f.H8-i5^& ]!f Ax'};3;dFr/J{K`4-S( ٵ> eLdA1@vM xю ~eHG_kE/y{ mJ'597pu_p~S/ +WFhqTĮ*^JR{DbFiX,Uyn*q^'J@}Wl]poX<[Ǚ,8& D4&I2oȊO) ˇ/ +U(#o+߮jAgHnEX9ٳљO +`3ayNK׺U`^P\Fs_-u6O,uokXg9uNU!ob,Gm{˝7?\ej>>LB?4zb^883O<h=ʥa@VuqxNAV*2duK#sEѣ~.TOP+*'C0KV7(-tb`DW JT zӐe@ôJ ?0.q^oW7@FXxGtP,I09/0?pE;F= s"ʳ~r|32C?'E7mbRk b\bvjk0_k:GNσ( L +d0~}u԰SbnԻf}\F. <Ysa +c.)XV.B8[~7ʠuT&~b'9~M6j1) &+5ts,FŭTlnK ÔzB7:RR!Jօ4ЋmdēNEglBPaHpxDSS.Vi3xL DںAm)k"9e-fUrgwʺbd'33~,Yo2ا=|8uŖ:s; ?on"s)E.CSd + D +7R >G,Dߵ$gv F.>@[>0}Մ'qv%#ǽ5z##a+`Dn5)"O: *EMpBTlE3qL-bN UOSJ;CWGp(nxGD^jWY^lIʬ+\E q[.,A;2/\ +sV=G1 7FbL/7v]sRNXVk(ʉCv11ac'RwDl ,D2&$V].DKL-ԁ SiB ! MCj(/ƬE㐗'K1`@@6VFhYaA^;v@kE\#Joru}=]QGKYDfCƁ› YPllA%HGr vaH^F aFu:z2QOw7R*wyd˲&>tEF]׽ꊓ.xӡ0cD؍#@!FP"wSџxCt}X9Ъٗ62~۴ T7/lFhR+W8vUAO(".ڰQjx0>~ĽΦyf>0wW3w ,8hqjc˕endstream endobj 5822 0 obj << /Type /Page @@ -25584,26 +25395,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5830 0 obj << -/Length 3646 -/Filter /FlateDecode ->> -stream -xڥ]s6ݿӗR3C웛5/v'7,R2'TtHJ;N!X,~Au,_Y,^m -c)(ΏWJ0 ~Xtb?C7w>/ZkObE}Yd{x@oy ?ܾ)_>X"⷇^{p<;n߂6ϫyv}v08үHXtͳc1a*~YIGv2T0y P:TiqAnV 8tVm5Đͪ~[o:g% JQ~V0NwIZQi2#pA=[!jSKy*WetfP-276ڕ'2\UP,jYޗYQVy%Bcq"ԉ_ j@Xxڼ9D3;tnM"g ɔ ^{߷M ⣩WEc\IJ>D |;n5JBRmf6[dU( Q}4$[EQ%Pw -@;NI㇭c*ɽ";,7m{Db8"fH~fxT2bdCl0B J}ު~49(\_e0>I 9HjXQڕ7Kw@'ۦ-Eo&0 i45XL{UYmu' *o '3_E3¹l>(b6H'/KKk9"Fu kmnE2[(ykf@SF͸$ȉ+F~x:F'ιq&?4J,عTԹ:/8UY"790Z -3JZ05b8K_pr4dz8)Fi9]tXy;K6Va뼊$1N^SŽg;BO%9]9e)Q7m9\sE,b;R Cz<>Fi[W~GnmmߓbSa) a$VvOU]7Y -k.R/-Kl렷it"% -r4zw'i+TWw2l 5~2/F<ƋoN=9VJfX XIY ]>xâęm*" 8ǟe1yBuI.FHy -3Of#OfaEEfvGeR*< b0x;,ůh@9T1'jQy.aD.PnE$sآqWe0s̎*#ͦ~G/L#y*gGtXϽ:iA~恓>BwYx*yG(xvR+'Ο3 mPr%tGL=9U=vGoˢh$DEFpp^%hVҚ r]Hnj`Oe[CmZ.rŢ^p-'IOf0Eؒ⪝a!V (ꩺbF2Qfܴ=Uk8ƞŠK'^zx0J5-EзV$4ƤF -}LP׫BCB:Cv[ԙ䄥}υ {ӑ}qg=ltn" vhwԌLj|z29_S@"gb|Z^ȣf)8 Ւ,endstream +/Length 3547 +/Filter /FlateDecode +>> +stream +xڵrF]_K*08؎WXZLyy 2H08U~@BJR)9zzzzzH#S"I}Wb;y ]/pp{ne@/Λ\߭}ZRNU|^Y{?}|Fo:xg}K>~\ޭGB7/z,]~-Wa(Tүe\U3lXY$ + ?Qf9#јcЅ#(%t6M'+~[6Ŧs'oZn`a5+CP?8%؏f Moou@!5/ecSw:{KT97n vMG +# C&쿈%z`t F`@ >͟t 6UɄwu_!cwaB҆ :KQ'A_Q|yX|OBG֋)Et0)j~1 .,sJ#$ojܲ>wTl|7 ?[UxO:)Sm{s,zYIjȐțGԂ&йG}ʖ綅F0c .3r/Z 俹WW3T>&Zw;7ij횿 +c}-yAZnԅWs?M#x爅rSFpr6Dx ;١Mx/OUH)JQL!Z0(gH _@ Ԏ.?SK$N^`.c2OSUpLFψ8^0Oy,WMSG|>G.KDgZ'x@$i4bߜm7i_-ibjT<Ɔlj;W=^~(7OEy}h[\bK&)Z`<6`%I`p@!͟/d"'r Rm`QyOe|iw`Сޭ̚<~yd>rCBle%AN8$a4 !c-N=.0MY@㛣uzړA̫'1 M9.}TGΰlx5ʂ@-_cKA Ӎlh/(:XSNP푙)2hǒ`;#U~s2$'aQ RY_Z?P)%nFpq2_gS2c:j.CLvzaHW (lFcV3~,Y\*݌V$rlP7Da&-L'kPos.{~jdZc$"Ԣf8bW)r Pq$ b+MAtB.ȋ>Zrg![y! wqȍ @jT=>'MhdeS_ШgO&75=0%pȥaocK zy)5c|ԕu?N*N$v1s*-]O `9%XS`Q +4t4Npc7䛳MJ[1 _{7}Yk@c5J sH$&)胪*Қ*HٔEYq81/I9Ōy6F((R). 0_Pj[wvuOxA ^ ZX{Va,@$ o3m-CvՕPwX3{6ȕϩo:`f(?=UqLs)M3(}QʡL C9wTfPG(d3'8\ N +X_0N1+Ch& m"E4 MIqSq)t5mH@aVciD8ϜDb +|7nVJU+̀b<[rhx"꣈xL\HUȾ R9PC`{hQ%aq߿✚ɳB u)ZXFdVEl!YUjz 0ٸ+橫J5C RLn&4&YLcͩt|[%J LQ@%s~dTh +bTuFNwlI<` +c춎qz/37__ݩ'(H 8endstream endobj 5829 0 obj << /Type /Page @@ -25638,28 +25445,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5837 0 obj << -/Length 3600 -/Filter /FlateDecode ->> -stream -xڥZY6~_"Iێ=3uVe9c -Iy2>}%JNՖkL uCƒ"\OI*M[/+!YY4o67ܵ^ly"7bݧJ)\%I<|ؼ{OwT9wGh~?~"2n>!>Y~Ǜwó[#as?xZ({ pFzuT.xD*uTY Dy!Yk >/Wa:ǾMXa=c';By0&u*[̆mxl5ٮiY߿,i4t~ƃ]d+bMBLN 3 @T{>[V{'Ȭ/뇇rC5Yٗ22`ű|v;n֛l SlAN[;($kd;hR*fa.T㥖M!D\A87W΋WvYd1dOUao)};({c#羭3do[^kfPNU^l3/KmNƍ+;&:tT() -i/cd8W$(fn!05,4 J6+*lnNWnD%ï'&ÄDgTJ*cA'-p;*g'\ˇOQ -̣ApFÚGRmhamݔk]Nna{{j7eډ%S -LvlbJ&Rhm-zL ~-f@LD4+~X1jY~hL=ŸјaF^颓LC^p +il?ơ[0e(E01B[OdWp0hrhOd䠜U4Q6<\Ejr Bkk'ʜ(w6C;E'twHh>~)Y/4fswVoiJ> 3fm,}찪BkxIVPig8΀l+ll`RC/&-JScM ;EA4pJ؞ @ьM -čSmiD&n,bТ|&*7T,H\T+k.S#>b R6p¹ rRn 5kb~.0ԗ!̉}cUtcWs:U.Wa$?G3bR>A]Q_xؑu"<)iZ_Dg Eh"@='b.=4\+vw\K*e ^ A(8 T+XuvJ! m [un -8Ma^ȀFiL|KA`kkIHJRXVPmØ6ע+Xnܢzyჱ7c+w{zej&<%@˾$>3wx`j 6=Þ >di >r [(sI(_`0` XZZu&5NUͅ}E\T -Y=&%4__Jc{ Cu -EB\0/>ּ(NeV^3MQ1fm -vTJ@Rxw,5!L{:!8Ē' -@A;V$jsDK &Z/I.hAtp ?ooJ;A 4cβ(FY{[dՓd3;]"%UJ1׷_QSŧ-x&/2uCqʐ9YPD'i%1kKiܙc(K9vәg4%s&BC!}Q_Mo#pm )+ل?KP#T}Xnm7\daÔ%0K}s9m/N(}yބ-̆Muf%b%1&w$X#/UsX:y dDrqdXr|eqlrV7FYբanwnΟǢAߋ`UaD7#;,$ޕbrrCOP]q07 M"0/R/bP*sc6MdRQ"7ඞG4Ća dunW\$ GH^u }'M5NiҙD¤&R44bMFHYjBg`fu"2/)M \֜ruSW1 ?t:NՠOBmRwrJ=]ߴ>)=;꜁ߋR:%Hot8ߛUhZj;2Ll`Uln} D1t^x;X4Є -c; P~c --G^'0ϪVnWYh.? \6KK/Ֆ?{z~ -a :eZe]lvBb\FsOfD(Zl~]2t@Tv=Hh.Gni&2sK܆/l5[ISW%moVDwQ&dqN ?*6>F4' ^2z<=p:U?#> +stream +xڥZ[o~ۑeyq4u9HKl$R%g%%N€;{ݝ7 +f>,h9Kl]5?3h[#w/~O(a].4~2̢iQ?fP׏'&_AN|x{?oa.Kd/ j {jhyYȪ:?Z;@8a[>]>1x~rFi>2Y*y2=%idӫ"*mHI[]asU+ +BAH;+:7Փk^H}EVPdZ1aR;L*|`zB-LL787Ҭq-OUH,}+! +HAy,7ftz,p;GC{ \-Z'2Ԯ]jJY$ =VLLD.fGRZm!#,r,SZ63w{埬m)sSP DyԏS k;'/:M4`螥d" a)a"=lT莑ho9Fk_Keo'֙ɁmUiTlx {.ٱK~Oy7aNT&a Bo::!_tZae5-9PٱDŒ޶Z,5{Bv'%MlEwP:l;0΁*[-ŀ?C +}7i0RJԥ14D4j+uEh&A%4dN1a/1lc,oc3Q2 h +=U5gW0g+jJwjBNo&O 'oj[=\uVq"/#e7RFEC"Ֆa*}&y$dD6TjشB (Bma܊R|v2CVZzœ{:Vǁ=Dm;a*IH8I5eaSٰE+?3(CX-v>KoF@K%` Vmu\`jPoOO p.M$7l)e]i' + i?#q q:{4FEu/PKg7Jr_pk"DN_dA:rݎHrCmIE<,XȗGv(V 瓪Uj;qGzef9DB)+7kUy_ਲ਼DLiPY Ĝ6ք_S /v %B:9,f}jTiAz)n@v%ib4|ÔF\5O1NRiw9thD^Ks gﴶ)f'7D\. !> +EQm;*iɨ3p +:̂%D;$'FA90 O +-2@gb±镦xqiu)10bSr<+߾VJKsP=om4p`qWsyD|@7n/.T}UyM FBE|>I=HYPmwby>e vTi>iRft& fC.ÓH&NA3,y/@" l_O%a V}6*RQ hibs peWo^ +"ɱxRA]aVk%np2 +GjBZ&΢o/f + X7"E93Jr(!BO-O1j9dXˏa4t=k[nCBBзд0́:0ےYbuO{6D40jl3gQCHbʹ|vF읓@G,nϷ .F(՟"T'z|(5#`wIf٨dcO1і'QCq[\pS8TIL`5ΦTY\BI@SA"|g4P˿X/f"5:35D4i!EĹRO!M 3N9ZkWQvFByBs@gsFt"LKJM.yFjJL6:_ G c|F}:C kAawr/wm}u'dG!Bn)lښa<GfjE̎"񫋻(~{dCȋh&L#b/ #4c$'hrtʷukU$so$F8=']M1{khV9iOR$*08UQ ңu} vM޽=jvwuFXު9KtqONЌKKhоnp:xvX7!qBIplݩ|Vx|)TOZwƤR|"RCDuo0cS<=`~dgy$v![(>/M- g0+1 $=- a 'Kן%quK\([6rg:wuhQ*MЦ~"*ĵnZb~~#ϟBᇁE?| SS!_~R$_8/(` pA4H%imף2xD|_Ő +-?")Hh ?N +(,-`G~&lzfֲ(sW>D%J":dV,Uu;J1o&JUh sYxs,\endstream endobj 5836 0 obj << /Type /Page @@ -25707,25 +25512,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5846 0 obj << -/Length 3787 -/Filter /FlateDecode ->> -stream -xڥZKs8WxO"ߵɎM4(XH IJ3U[~|ݔ?:\/Ȯw4쯼-|b)$KՇ8=7øNQp*~w~z}zu QX&I|Y𝯯i޿~l7x~%2 ?|)o,nꗫ+óː?~û.p\yn׏> ﯀c7 -iW߮cg' -R7Js% Wn$ IBmXWp?B%cya# xܲa]]{"ʛ?yqYը/܋B}G# \ Uw/xBO6޿Dy>& {~4 /SqT׿y1ÜK̉mW -Bꖛ\׋%N]1p!WP6Lv}/ŧ|Xn\i~xhlh_qg?!M{Fw\t2ЊE}STUk=mznHϱč]k6qndE7$;!$nHuI"PMc}K]>L燨3σ -@ZB=~D[Фöx4kS5N27Y4K J8Jx8\rc~Lr_h%Nk5Z]P~7V*EU%{匊Mvߋ;$hI='{GϹci 0KY F)Aųt❦N#ĞB m-;~oaw BgX,.«pdʜЦ=zcznbݍu -~bH#3$D?36Ԇt߼!YZȐ@8bKE. ޻E:ju[_P@w.c4uwQoN4%-Td{=AlFo ˌ;u-oP"AK㦇(lXX;~,x{+<*s# }&>rv@H44fZ@l?[-vE`@I$MĨ^jBa׸K3/ 3FWz>HW-nQ%h!B 11;y5anKiOq@Jp&,l۵ h1޽ZD*v6ahȻ( E>1$E.\Yy#ّA5 x \IM2d)NIH\k+|k^눊du+gN(MX}.,<^V{^P N;q:7qsE"/sLSIE[]m~;wTcHy~%e $<Ղ U{ֽB55 VѩRK;QwD5#COqӶtʼ"PDsvS>2"wU&á?T@9, "8e3Rٶl]uBK܍ i1(9ؘ$37ƮyB'zi#5Ȝp#[57(ݞ1Ɓ ~s l4ϳ鄭aʒke'Q/ 4LYš$-1*#L.u-͈Qzԋ r!'ZhN[RabT ) [erM2,(qsZEL"À@^5Ih|]` \\g"`l-䨽TiC/ZuDNk_4Q 1Upv8a%u`]ސ#A -mX'B(98t)B*SHTH]v%QGV<,0kͺ+"Q E }U1r0 ́{X6t9[ nsUR糐]a;!6aUUCpk}lƄ<)T3g-\ycLS Hv#(dT"E$?0B3N -0>yb{#اj=&Jbw13p`x D($P˼gpU8x/AKn怕r,R<ڡ'!,Lay~tU{փv%.fՇRn3|ò{/oZSI6=+Ltor(10H<Uoɬ(5HN .Ald:_P>eڢ\hE ]g βZdJ &. V]j ҵ ci.^Y {7q])A};F7Hq|- `;̚-sݧ5 -O -!1<6)ݱ -3?A;o&vRCȴ?24ÏFj -7u) d -!O*fu>Z!-Ks d~'m*CJ<;͠TjGR!"ο$DfL{ U ü䉓9;﵋ @ UUx?pנ#ߠҙ$:h%+0bS[ p0tG mt%^ Sw_i?vɈ4<8jz1CSĝԇ#:CtLc]\0_o{Jͩa]5/#xNF 9QqWE2kn1R){}̬ADiFez^X`L>M-D_}a`$z'2$9& F)h71 ]ټ{V6Z4 -L2'>ظ7[o~s. -6xf 5z|A29F1J\Jp ?~?g:o`ZـFfЀ*]is:+='4!ERc ӍӚLYq$/p$̸Ďσ)vNujd=TsBu_q!66_8 94  SV'I!a]9Uφ7VVfTVejMg w~VL {W✒K}Fw~?it5 4U5_| YXgyTAendstream +/Length 3706 +/Filter /FlateDecode +>> +stream +xZK6ϯОLUY4 Y{+̬(#L +Iy2~IrryH M $t=.wu,o7Pxެo^ sS/]dJk(]8q>ޮXD;xw[^wx׏o+xm*pH# ?xN#{Mj7 /7V`fİ +T^&I0gдU}k Ǩs,UG\*!A>/o^0s"lĥnL7N]p!}_L怍}/>Yո~OӨa/Xw'о(_9]~Bč +Ϲ9O \#쑦 ) +'/-7{ݛwB"-a w7l}.oIBHܐDN۾lǺ._P-fT͜x{b)Iهm +AiZ~33"XsVG=2|Q +5hfͯ{!8PBa=n|u.!ACA׉A>ZQ懲.ۄ;-'~Caӈ`T-f|'Hv(؃f<=tY{ԍܳr 5f T ASmN#F7̚\= VM+Z~9wBgX .«q`ʌʶ9:cz.b݇vN/VQAfbdpV2d2TY^ֻf-oph{:,ɏUcҠ#vh ]T]]1 ƞzn`&iGg +||eƸKa\Ǫ8Xшͨ+ p;W*"mQW!*)(DD(k6?ݞzr^#πlI>wqc&b$c=rx`|mr} t喁E=bɿDKC(W@`ximqE2~&2]'gHq>i _&8onh{Zc96<:4Hiּ͆Ldcfosa:!6PPgݷ=,-VZy|MT<8cGIJf-|.~?!k-T'U,k1({چ i/`,ʹB@mSN B_ mp1<4*oۊwsWJ)9ؕ +@㚟Bq+@(' [{Uir,'j1\t!ro?Rn V7t #?{RB&rCWE}un>M36y9Ƭ-%OgWwsJR&KHF4=mcWdnUk!)㤆6& IG>~~=[yC}vV50d'`HD܋$+5:MhLl\$L'ttz9dߌIl=SE3 (@mM% |8jY`"3 %Ҡu$#02^ȃ'ӹ񈍌{.ylÞc:HBHWT䇈oLT!`xz)$UU + 'Dֻ\ FA#Bk;Qw #COqӦ-wtʬĎ"CsS>2ؐp;Uf2moh 0N+ )c580 ԥJ#x3pv [ +w#Tw^ 2cV ]Ai S6ELifp$x=wgiumQl itkX'Uc|@=B%Lxnh<1'Mry_ ~JR)=L|rȱ1ұ$Ȟ:#NH>xvpꋋ E.X7ܠswH7{냨OZm@wh(ϏO^ UQ`# vUÐ ;FE֐jmC3"0})rVi6>+#C6HV.\:Zqpt*?Vq kkuM:U)+{Rqoj +,Akad9 )d'5 қ*(JuWKf/EZ"%9A`-4ԅ7 mIPXR36i=,]r(`&WrB "peɣ촺Nd!"ˋEiȸ-kUhyB'Bv0y4HZADKAdLf:\Pb2F;럭BfFM[HVMZ)!om$->Ѻ#9!,FF!MxfYU5@Q1F78=T ;0'a8Fn[e5_S $%Tn4:yS,W)8A** r ۤ0ue=k) ;7QN\Hw{Nw29" b N܈N!Q!-0K9Sxr?`>}ɐ^ Ss& # 㿔炷WPZs'oOh ىC]faxȍm%NZ^]!g:-׌k } F ,/}nn- dDN!9 }7'N?3+*zW#,zq/J ^b<`! FB/⭑Ծ,gibun|yo'X+w{Xg[O ʨM]A 'HCpS}quРυ=$btrJkO$1L/6 +NYJӠq]}t8/)8 [_ ?o~@co?*u5endstream endobj 5845 0 obj << /Type /Page @@ -25767,20 +25572,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5855 0 obj << -/Length 2273 +/Length 2183 /Filter /FlateDecode >> stream -xYY~_! E<ȃ{d {v# F@QD E*$ ])Jf'q:s'Q'a*EtwL6 -[H]O\GNL;OSX($/{"?h+ 9 暆4 <D+Axz 6B3E(; glK<PZwKlv*vUBlo4&#a>H')}jċ9ϼZQ4p=KqNo^Y1͚P٬sx BORH/C[f ٚ[JQ[^)[I'Q% I0%2F -l y"{U"OLAWE\{ ;d/J~n:c}yAE 3gL0T - |d^4XZ&o,̆A xP9РvLTRH4Bs"/ߠcͤV/qNs --{H7Fea| %|tDQR$6 -Ɂn.+8&?LVBh@q~tɌmrlIY&u ͔JP1VId}6낶W WwopC}}]mDjy-W!cKO=HBt<wvG9ݟD.kendstream +xYYF~ׯKQd4 QIhD E*$,ǧ.RDgaVu|ǙϙFu< #G(&=#Svd.𦎭b;.$LOr5ad-߾9֧Y7<`{u͟>~?|"1 oo^8f@@O~͞p&q4}8&iɏ.YzQT)٭̈Ᵽ؁!=2>Jcg[ںȼ!(Ra=V Z J@|ċͫCܱ5>Du VB8k-ET|6Yh2\Vw|){jEht=tJ蹔3drh g5\,rMg:jd#=Lp,%{֪KHIH$_qZ`_mǃ KNm6٢(%-u-nE;U 4^jm /cl"鷾 +SCBjW9M"^og оZa+:D1K4N졔n# +{eEj]U@EW_DcoyӣWOr$U5OGbsknI=YuNJԸ wC͢u-Z@@_`/82. Q1U]l_j{l|]IOޮ.8f~^f{]XGb{HsES&y)P逡.RR|]uQ8n<k BG <:xZiž|¬z v#'oe8 s /:]p]ֽF {uxUgh|RR-V~iʏRybNCIC4SgD& s*!SO]Sht#K +xR*03`$%k7&LdK% N-lچ[]^- + ?p H Ďu\%Ê> =G7WX n8xl 3EE\"6  +OL+W\h陇 E[ $T}bG%݌|llD;B2̮G 3*ut?ݹd$Ϗx5- Fž6f1 \o Ȯc5͠?^0 +UTr +WoHpsMm?ʣ&Kࢧr]uu\_:^h%A#G*9qn]| SBendstream endobj 5854 0 obj << /Type /Page @@ -25809,23 +25613,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5861 0 obj << -/Length 2891 -/Filter /FlateDecode ->> -stream -xko -(. N9='i -i9RTy-EJ>&H8;;;3;$Lˉ&AL' '̚`z8g}w,3~O3]ϙ,/ƛ_.>.>Mg2 Se|_?q~x3_[~~z:ÉŻEs !Ͼ|& 2(Lplz#)^s'kL?^+z -R^h*gxY.)6Y3'nuPϪOa˴€H, (f -t7١ 04 LvȘ噡,Hp@+ޫd ,7pMk΋7#YT-̭ڊ[B^Qw|Sr&܋qa(̳t&auαPλ`&劉V =Év9+#|(&%52ޔvhoɈJ9u6D[߳M?PqZ Ƨ^lس:A;Ik_=H_bmLE a~dF@e`{̎"-ql1oR^-j0. -r@Dzk&VGZ|@T=4ά4siQY.Q -y|yWU'|S%!l3~&dGDWa`ڶOƞЏpHY<}ssC=^d)V޶WH\bSHZ[CFW} kpАuMBܷy\CJ+߂&{8tm -7({Ex!V陠t0P`*<4c}. 5}'xȭkT>l)W U,D a<c">Kjr,LQn .&(D2-0QBҥN(8b.\9PJt }=)nFX)^-b&>AnyV)D1pX`JumpWk|Xq0 $b?x!^Bx`?erچp QYr,)}_9mr;p#RC+nDnŬ ;4hXY%4οr=Y ƭH;C6MVKux,bR6hڐh8=%Cy^~~r\2MZNG=^l{"@Ȼ* D?ǯקDF,)z' SfLi>W>WUn[O1nڂRi)gb+lh ̍5?!>v9ϴb~OHŸ*ŜDvNs1Q?Fp&!XԤ&mru#6o]i as|y4c^wq>4{4pN!6f1(De'e; -ǔ $p{K7B ՏN/ W5 Q`46'\>&nt]c8ܹǦ~v3Go24L;dV #/}QG Yyz0,qE/|nݵ s:`Z,洀 z@^\otT² p9 _ 9HCKndctoΦ;]ȕƠN~ }]C m#pM_@Xs1ƽWe<h$m;̯68q -s1co%ezշ>8^Z@K|X-sUWgJbSbGutQ kǕ6^፯8ߧ.8S_0Hus]P -Z OlFq|2'5}nͽD8lk&+~5ÓX~ZFFJ2$GwC6٢;RB\j4@.!ɏ9oA0,.w,ۺ91 X1]6t3tlٶi+ e;W0~endstream +/Length 2799 +/Filter /FlateDecode +>> +stream +xڵis~+OpvEnd= paV{=$!iR{l{jd_5 +=rQ* Ѳ8F+X:S{z~6wG2#+h`8. +B7v7u*b6P& +Y- 3Ugd P6R2FFXE lubQs1>F)Z`\F-XR-$T^U"^˧tڬI@$Ɠ 2zIsc06DjO7P@ +A ү޳Xn@Lj9΋7#Yd-̭ڊ[B^R _="CA!5ʔh9_+M"MI2/Wf;eFcEٶkܔxG'ēw2;Q1+X)'X#kQd!3#@'Ƅg-^36>]IXcql4KI75wń+{D|t팕7|(&&52ޔ6hɸrؓ۶k*Q`^x>W 7똮@4g~Վ 5Ȍu(bGثhc)%ʱ,Q &,'ez*hA  <\ !q3D>_h+eAT56ﻬAZ)qWzW%7s]\H(Dw=svil +ok֚lhKOTYCa^8Qd_'* 2];o[@&tAA +ϣ|ߨpwB6'4y\oSU 3HEjIMpNݡ 1}s㾚%Qդg2TFai:R0uT!,Td4v/2v@*rAdM7&4(O +7_bh U/u*IHn\1`&&%=Gi W˳BO_P<#C?F(+s +!(4 <ȸ+Bxa e"CsdKԒ=Fz<+#RAvhay8&,Kɯdt"~bi?g\}jK!i!. ozfvEw4-2ZnGUD/=h Kʂ!ek-G"CN5[&i:Wl{t:0}L_AEtcruKe o^W"V4m݈wzTJwU=78_U環 +j9uJ>BcP ג!tbKkT4wQ~yq)C5髗E%6Teh_~8uyFe‚F=Ozl:8kjd,Yj>^/wщN|Ÿ8D #c j,?.f` rʂ9zh_i[Й*KzO]p^Ͻl*p[KDN_jöf #/R7m,L|0~=qksP(}>-#E&TTRbMڴg)9BtxNgnH;m<p? +b +O +h17=;{endstream endobj 5860 0 obj << /Type /Page @@ -25879,18 +25688,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5871 0 obj << -/Length 2297 +/Length 2263 /Filter /FlateDecode >> stream -xڵYoF_!L%E.rHlun(z}DJY$U~Tp)RqLrvvgvv73kkj?kiS? ;lbN700Cn1eN:teqa۶)˘hO}x; lmq?=?< #~zyɟS~}|z7ӑp7c~i01lljia0=iX0M@culM>N~1gʳځ,g Rmk:d2p|asq]ަSR`z<|xpUu4Svh±V)ZD/B\GUox2EC)}`2ą.aRD;yC:qdghs)J{#oP=m -Ϗeh~5Y%oFʴ G-EQmD - D9$n^E h/0!qKR#@MysK*MQȇ\1y˗"բ\^hȞ0wk,SOZ-|{%A"a&8 *{cƈJD"pB7egˆm/l*R۴"LE;}xc4MH[>93/IdS\6{bDW6 3iwܙ*W;ķ2M4SPKP<O=r`QV^Jq!3@ո_D(tt="P&M\fQ#Z25@"*MOʊ)#*K'"Z^wBKĚ|C BOKVem2k]Z '2 s~IJtPEx;Q.}[d5~wzK>Gg+Z=Q lv;͸ycm?6L)P,2Nzn7$`(2Z.͵1'*)G|O ۃdAW5Fmms; WQ -J_zڹnJ -1'AhC(:;֫wo -ALg2tBs|NN9ɋ+gDw>oa-}S-^a 4Ku֏mE߰{ }"}|`/tu˄=? I\S[Sbw͙~0'2V7L]I1j9Xg๤Un[DFyh}$czSq= UDc8AxDW%,m/5;*Ix-Kw@Aa#gfJ|RW(9$I:rgXZ|+nvt8D'=tO]ȷs VObAb\IMImѢ|LLF0NKI|N|Fn/1t9p.O}BNAZ5c|s0HWst/X+*ˢ݅(s.rIbL`#3(_̜Ǘ6455W+:pw+S^ V`83Vsfq?a D7ղo[R(\R$hm7QiV"%IG)QIH |363ǁv8S`LGx #w#S8Ckx"yAdj۶fdv0ڛ7<#Pho ~!Ꭷx5"fF?>n#Ï#C`a8NGkcK;z;]ǜ10ԱY'\e&VKaBU"E:*RexyFht $Rm̤V[i!8\ +]V'^]{AIbM*5i/M-mV{'rguYpe&IUY 1[af}FG@^TpicB=ȇ\2y4 +q!3@U_D tt="Pc&' +M\JruՓȾJdJ3҉O7ח|AX_'9[%ɹPK3*&nf֜ $H+&)tPEx3Q./}kdՙzw:?l-q/K~p6-kYf!6} ^>~2J L)P,":n;xW`TS]{.yyA]7z&y]nh{{F1{(Itdi'Fy+P $tg8>cl7PIS>d^WMmq: P//jKޚv.BLo6Ύ/oY|0@|`p@d@)!z'>r#g2;} y0^鮮Nu/fU{Y y2&NWiW$a_d؉6YD"f>>8:kh+*|nӯ\jK)7 B-cS'Zȩ(20e4*Beu$29u"dVuU»8V$0)YA?諒wp&=,5v[gf+tC\ +-q'۶mRrSe*nx+Iq#ǘYp.&GDkf].a4kcNQ`3 lnh4Ұ&ܑ2?,pٺXkOKR6t%L' ;}cC׆wyq/ ')()0"!4~#3]6Gcs_VQͲ`  = +H *R̃Ǻw2<YvIGE!tEbdVB5a:V~#xnj?UC>;$ΐ<,W* jPu Im53_h^i[.~ӡ+MJ\eOe-N~ّh|X7gזp1j?S2]oC@6%sջPl>x45"m7.\rE@(\ѿ y3.O2ȣk0MEؼw]us%w/zZ/cŴw ۙښf}~ \^% ۮ;9/w|6MXwS[3Rendstream endobj 5870 0 obj << /Type /Page @@ -25919,16 +25726,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5878 0 obj << -/Length 926 +/Length 918 /Filter /FlateDecode >> stream -xWn@}WX[›xPKC 4J%VNC;;4nL(EBUz>gv2?baO}3"$Vq6tCkٵ\09^; -Ƕ(Ay5CX{Ϭppñ$Zqpt$?Hpt&}ۑ4|m ulD~LqrD{m`\3FDqi:7&+&XuՇ3qmB#p*T7Q|N]BAO|!2vtzw=A~xVSAo"}gMKs8iuiȖ;+y=u8u4FiV4юEFp8M:<{o=x!SYo~-n駬v $ -߉Nl5+:ÇLrCrkE<ӥT)bZ_ղA*R -h[ppƼQ<urH\"qԳJYˍB.3etWwukPZE h7="cf=%L}dCjyxUP U -Hy%3)%tKY|y$4AV 0rmFoKYuuş)߱N7;[4׃7)]FyUk]mi;?)vk1gHw]fqQَ'M7,慛aDdG.)2`RD*8ٷE6endstream +xWms@ί`2Œ\86C0%iKKZ8N>{]t*@|FBW!טҠCn_ Q@OJ/_C6#y1};ύpwr8~<8'R ?x״goar3vtLD`xQ__3%,渜WtMW^PhQ˱ q~UvԣnB]*>̴\5C"[ R7}ۓDs|gWE9봺~;+E?qDM۹52R\Dz9/knOLzk;{fY`e܎O_8P'#AmtҴ}\"B"ON0lJTK!)6bf3yJȔNQ$`S*B8PITH ~o_0H)~Qh=B{4Yzk`ܼJ.I\g+^$Js**϶e}Wwv źU_ +vSPrI 0=A։ j8 Ȋ˪Jk,_ʡTJS]" Z}= DhPҭTf Hhb(mUiQYut*jQ?Sw:mϳwloR,Ϫ2V]mi[vFSlCc=!w!>6vBy8ٲeykuˣ2"(g +=کk~mDـpۄIX,Sendstream endobj 5877 0 obj << /Type /Page @@ -25945,13 +25749,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5882 0 obj << -/Length 1329 +/Length 1283 /Filter /FlateDecode >> stream -xڥWmsF_ALq |pju&][i>IHb@UOC t< x 0&ˎmaõFOj:Gkpvhf~vl&f@9%(L=hr* r2קH`y YWBv"­{'oT#xr7[}C],i>R*_\5k]6 gyqMDIN5U\eO~dF%_R㝠u 9hd#ML!)9aqlQ4<$]uuU92m8Mm U$5 +|]TH jFe󃽶ʅ|C ű|E.`'$կh /׎p>դu/MllZz(5ǚ }yK=|xq/E7d?mhx6nL}b#4QW-R[ ,5{5}և׳:ї0z8 Ɠ(^ً@۽hxڍqnLsbfb]zcN1E-X g`p1y+{endstream endobj 5881 0 obj << /Type /Page @@ -25982,19 +25786,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5890 0 obj << -/Length 2650 +/Length 2568 /Filter /FlateDecode >> stream -xڭk6 -E>DHz(ImlP⠵nm˕wov`#r8 IE"1""NIX/V\H[b: -2i.o{:FF/_Z{Jljw՛/]z?{oqz`{1#/߾-?_}r;;n߂Ep&B8&vp 5a=U6I0  B_ D22ZKiXoodkv*e+Uo2}QӴY?Ry߯`t7a&[GB DĄ|g|=-?-UU'<,UrJ!NVP8P^&͑R#je@R U| Xp(ԫ]vMyX=:"gxe.PXQǖ`ںtLDl_?Nfq=R*Z0}Ԭ;DFџQB -Υ['a3a!Bi,΄%8*F,\iAԛ&N <&*[agW`R!~wז[p𜩃i+;xLT22}uhN/-HV)c#)Rk[v|Nw4Ԡ `9[vk74$g+k<ͫ}F}1l5W cedϝʵφ 0;HVg[nHa|8CJhT{haFv P+G=,D_m?48MsXO"t3sծY50_f.(R(c)LCFĒhf04p&Rxu8$8wD>Nm٪zA`Ax.>->AE^1"tEr}䋑֝WQJa`X҈ $hb ђ -H85m=9_#/*M 4O o#%K5_Aπ^ ^GYb Pij#Qoԓ -G'Ep8Z։}(lUy:6ɤf䗛9!^ilе |d_!65:Nktf)r,лdqOzm;x*m)=Zq vl7E/jEmdF"T0E?6[ߑ)k(WBhnO& z]sQRq9 -Ik ag X +*cc[NhwF;LP HoXQ~Qelkz\GpQ,_IaL['|;w\%l dvg+WI>+r/mk$>nuS{vhͤx~=]qu]d;μ-䤰bq"pXȰ$ܙHu푆sJAg:`K4LiDa<m>=DZ>ҽtH B&@5 {WSaRQV;x`,+y׳>"8hs>[,I$rO"Q Enӽ ƃ"#r~G%’-q2w#hߕ nYL݅]DNN>:<}قQ6sB4P-՗hnFf^ZG͖ !Z HaJ:^i9IuWN&>endstream +xڭYoFBhPh]rIn4h8ŁigJTInл"EZc\o^+=OD If?[ț3-3YЋ˳(i_9.iew_/ VE'Woڻx>OKݛw@}͏w4~ / /^~r"Ta ?@|dvm_if۳ʆ˳gwpƫ&԰}$ }jtcXqGjSXMο2oWbW*[6*UM^5M떛(՞[NG}5C>,Ѥ+[C2q@bIL3b/粒I2cJY@|ma 5x\I-Ndp  HꮿG.@I%&V>5 +<4Viɚ_^]O=#ڂ1n !jþ +XEn{ݠ`&Nl7_=NgxqV.{7C?P7@r7#[)9X~tv@G -Ume8 >"vzfgBN/ZJ"e=]RҶ5LK[^CBӡǝglmV.GxT.Pp! X ᜜-ӻv# Td B:aVݬڦchofѺu665 \'8NRBزIZ:q1xg(َ*4IIC + T! np}ٛ,(~b3k;=Ŏяr0?o$&Gbgb]D6ͤU<G$^5XAxUHyNg,Xp)cᒴ.ګF|sT 93$D #c=`66eVh 8r@Ӕy&aIB Ñ31'^cvBg2bE}@3<ӌzJK2]j]AL⍂# #d"x||{{lA9K6|`C/g &E=kS+л9HiFͽ +-֤0R %U:5ƣ..L[]}w%xZJISHLQ}Gy +OLn Ub'LG]cKyFPw LZ(vL.Ѣ50@0f:ļ!+ 8pQB# YYI!mzMF,Բhivf[@%QK%4}bu>Sn>ys$GEߢM רmԘզSB61Eԇ J@Dٟ5* ]/ENF%WM5 𒜺,(&RYcj_2 W6+m}畒Ip~B>GLԖ6)Jb+N( Av( %AByXNe^.T*W +sR9}{5!hWJɐA2IS USwDYW6L܍m" \ ۍ1A0UyPz<{\W~ +cR+.{^~( }rQjtuC@BNmtRUu#?1RcblJW`9,YL:ұzԲ+[$wIQhCQމhR~JdgƂ5 oU~=k" CKo$k~IAӱ8[UTVam!CYXKkJ`hMb~*P}]QXhwY,-!#Q>hцDŽF(r 8 +W؏N%R@M}R Ѓ9`'t BHA"v/vyMq^32? !Uڔ0(,<ؔǗ9/xHAy'49M[V-<>GD{DC2q"HG8FIa:m'#vLȲKhM:zOGAfw[j 97%gW v4 T*A_Z5=\QpX=cĝ$8quendstream endobj 5889 0 obj << /Type /Page @@ -26029,21 +25835,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5900 0 obj << -/Length 2208 +/Length 2165 /Filter /FlateDecode >> stream -xYYoF~ׯ/@bw U>bOXāA![asyv}VWUW}UՒ E -_8B'"ߝ-̼8n-YM>9{ OH'AWǿ}frU'ūK~ho)0 -{y2/^-xrO:yxRd_Ӊ/t,n ӻXv) kN?NDcp R"֑HÐ4T6e].W -sܕ9{.WP1}'1}LϴU+oznmc#n*-һh8mhkC;~mxfWuͭmJ\pOS^YuW@U>OɋG)}%ABnu$E cM*@u`?ۅep -̍ےm`V4LZ)IA^;7H=AO!yܖ5۲5p4g(::kw7aGG '3l˦lAA +TAe,cv2f;dnGPnR`e/{ù|_D3# NYujNX D6׼&[og])?Q9Ol;iBp -}[uw(هݦXa9:%wm(;:Q֊tIg-׸VvpmMWe,xo˪)c.˯];w"BUY>QH%}KK䶥x cGp 9U0 0@-P!wy頃G@Nh G®wQ -s^S^(zP铃Y)`I݄q'5ֹ\&sb\ )/kp\CPQc|Q9pz\5CBaEH(* 5ˀ0Һ..3c򂾎A{Dho!*«R=-zө҅D:V"Z4h;EǪ1Ę'"l0_<7E__G~)(93ysUi}?" =QPy:HlӡcsZJ@ߍu!à)lΜE|΁#7ƁwTny0h.8ݛYs1Ai;nVܿF EU<ׯYM(Y(dL-5:]S- N[9AXvRi<" >j{ -VT} $t[# - @XGzt -,דB$%o2RPGCC-&.!Қ  mO7=hascGzKrPݚ"#ͷ3=Nveݔ`hj&[qQY\}叏eyawEJV%|vYQb9oZ&ӷ Й]cGvx'ykSrr_}ϯɫ=08`T\]4,&29RsۺE39)mdC8}ƙgTĕBkNĩj4c 9&kUOfnIUU7߽C % yR5O0=ˋoΎю][m\J'x"w!F+IO}ÍUNhrt@j!"gz?uZ$:Gve j@}~ 1kendstream +xYoFBhPEq|0pm8ͣH&)0UT|X>$qR_w0 sv33c1wO#vd<#a(̙oaLܳǩ׳ ǎxВu߽Y?{XJ)-W؋eFի anIk)k}=z_޼oiW^_^}Xg#cwg ?[ڎ-x^<_ھ'MS9oλ&`XzNl;Q 8NOu/[9Y_= vC9_J",,^Z@q[ͧ"#¯n[u;h6 +8mhJ9 @ۍ,7VRj\n9mθǧV^7@M>O΋d'-)})p +6O^KR2`lgJh^37fKR6IF0y< g0I=O̐k{0M8 XJ)J,t)(ڼDk_fy}!=\[%ah= +|Es ]zi`m. >7@IzKoK}ЀÒ=M^O~w"et<^#j:׺?x=NP҉ T[,' zz7葃<[]U<(9 lT2( +кj ΉRdJV/PP]?ߛv"EaUmſz/qS4Kw"ː-_xߩ&3v-t0 |Uݙ(=ܽ%IuN &DJHBwV Ƥ{W:$F!ۨ>߹E{M9 s(l01\= +5$a~z>Q!m1#5a$d0Ҙ.?1ǾԳ]=z-D^qAK#餄 \[xw@Cx2c @'p%FoRh +69"׎p!*w!Qz!bKGu% v :?,hc9qQCܴ@8,<Jʝ R5J/MZq{D< vc*p\ Ywk@^qpWMaC0:1>?2e[9ղkTU29 [C1*M-E JHc >N /;{]ɵ+8go,QR_\;Fi3t 4wPx@> endobj 5906 0 obj << -/Length 788 +/Length 780 /Filter /FlateDecode >> stream -xXߓ0~`FB ^Zgk7jHzAc:췻_vP:զ,՛+:#34QMmՙq001RQwڃZ!ͦu{NSڠUo{KLm(,eiD~v{7zq[{rS\X#S']swm/(犰`2TP٘fRe`dlm LTXX7 ]Z+ ƀLg1؟oBQvع\YR5<M4anLh$U$QLLt7w#wEtJ,M0asBXFH x #kcG/$MJau~[K$"0`^Gx?[m8?,^<ζՑn<I@Tq$ ITg) h¿#k3VyF1|pL D^٪eF1\"N\]ϔG}%GrKFNbe|MKEcŏ7.{N@(Y.)+rJ l0Z?ڨ/ Ib4`M=4vhtv&]dyvA;J h> endobj 5910 0 obj << -/Length 2299 +/Length 2187 /Filter /FlateDecode >> stream -xڵYmoF_!"h `MQT$J2Ep_fgggyvVqgqgq`;*Ek83[ W$"|3ױ'=j~[J)s"bvy?wy[0Ğo=@x.Ϸ x;mͪK/~͙ep/[%ڎtyہxW:@vT0r%(pC?T& AX:MnXվ-rkmxiW?n.~ 즲]tسpdɛT]i:d[|y*pw؋"prl@fVu -9۪D j~jd`<"Bix%<_o9-lu′^pjF%jEghEDHZ'rDi75hᾨAmRnt{(6FI! 8o9Q6?a0O0nrݳ B`ҷI͛nl{ 7GwXk]Wt5)8 dY) @?#a|8lH$pS+i)xvDEIP#!l,5ATzy wHcEQޭWKк[y;=LTZ Y'o0#E~O Tg}0i[݈vۆBtyo%`.;YD }Nc^ gkSrs>ClqQp3ecZx.E3.h3Tb@%3?8?/#!)Bfũ塂X, Ї~R -%謤3l .?!MҪȨm!*vkQßyD9=KyFp>Sxx%A4N`(6SQtPY7u]H)kDYstCx7/z=腜7 5],fqI6 -afOTB E; CF.#SZmd.f1Dj.-q_wř,{,.^rU)03 q:,; -DY8dA)a~&;Mo" x`M tF|E]L{Лfb_&`|C)W^FK׼q5s{Gb$=i$H_5 ] /~ۂ(G˷|+SH8ր:X@TSK_q\H ͗o#Uz6c>s7ԡ~L`Hc|w17RR\;&FQ笌"k 1A -X*i -I>|j?$>~b#!hHG}5f"c;.p ЗQ|뢾]M1Hi D 18h)"&>ӄfhm%%) % EA)}кp68RknrŁlKnSD}u(GBBg7w(q.hxohR)U*KVdbFh#Uf rEU].K5}9UPgvu &49BQVg#éb3n%B.Nw䎅ftTNaMF4E=i7nU^A`ж V`(I:XHp0d8P0(7#LL9xmmVE|b$OD:BoL=!5>,JNy%3.B Mtw=\v!&>WNTjSVDf<.g<_s z\i@OԮ/a0vQeuqܥv_x4X[ww(.ҡGsl3:믱|][ޅ~2gNfCXR'~|y(Ab$w-?EHT&[${v?/B3JIѩrlEʎՉ_ϳ=B^? F3 endstream +xXmoF_!"S(>[A +`MRTe\7RE; +ٙg;wϝǁdŮxV3g3Wf8sv~.ޅuI~uy],Rڋej~pE[ ]cϷi,=/ZXOȾoB3 ?[%ڎ&ɼ_I=h1Ϋ&ܰvdTL XDӴf E6eqix⠫/_nk)]09Wm **ݶui44/EӚ/x= m/R]f cfbkd rHʼnY4JN` [\l#Öȶ\d9Sy5HKUsb18Qp3%\Zox,C3.H7b@-#?֫_!+{4Fq2,*"mz2a]*QW$pC*:cB"$[Jb5?*bp)܈zO~)c*zD";QwI$H00^(i?O(uBADy ^.3/hC*+1Os) 2zqNQd?+80'1N踌L1<˜\b4\|y`sU~XQAFYWWr ^g:G(ySɩ +2ƟjP,3a8IY"ѦC6qׁ 7QSKv.9|t4; > XhP:* l=&b+2(FuwGMKXPv qV~LopI> 싻7Q)q?qBw+ +徊<*.)v& )f> endobj 5916 0 obj << -/Length 2735 -/Filter /FlateDecode ->> -stream -xڭYYoH~ϯЛ) ,2g68"gf}EJ"LIu5Iɒv0Xp7:fYIgq|$M0/oP?3pHX -i~zxsQ3QdfR7JϢC?_ad ޗ{(}:vQ?zs0p#Di[u ™ -4H c?T}ؖ|aUuA} 45|ou\^OkboSG-oUiPȪ~<5klCoj7_6"dI0M DDO(?B;t,ߕ61)S#=S HW0y.H'^t4Jd:[5|^T@=rcӋٔn֋čޡcE"~˖rxo si'w;حlU#3@I䱯dYʢ/R~z<8S,1qF`ٝB˳C;pEr[w,=\wG5'4m-S}]&0K`mQdntmDI7QиS -JTAa,,nYTTJhm*3M~F/4*CIN3 | !)hY b'N<Ҿp_$~cDx:)l;zũ{9z0Tv8HpMEJ`+^h Hh $R끆G31C/N7K5-1\ݩI:S26=:gb\ޕ>䮋3ѷIe\׌Kl'&l믰)D$::/p{'qcikYp :Md *WbeC{?A+J[SD2@crsU!0᫊S1CpLb&LNv˭[cjvKT㭤*cCO_~~; Pg,&DgS_gqG(xȡcKp8"p[j8@=wkF?dewZá7ZEdgԥ4hSPCeEL%3V*3i.fgBncnmԑU:N/#?)ۯ_~>؆i rhC>j`ȭJ #͙0C=G\(rq>xLz4\R`vI -nNwsIwh+׆9@ orNwPQ8ڴ8\mc:RڬޜHa҈Ծ- -4ul;VMc]P]0!GU[jqtOa_(S> +stream +xYY8~ϯ跖X-:L:, wfDBK!ߺ(0L,bWG77iz*IRUizS4|x E)7 +C蟙y^ 7H<#_ݽsX<. w6"y[~Bfs^̔t<0Wz6>t;W8 G`$q]yNg +6-f6R6U; 2g5ġl3}5/aںjY5'NYb9VL7-lDɒ0M ^fDD(1܇yT.L vȲ HA;0`F:G3yk/kHg^iMWȂ/xy5oal+:۞E_ +T:z{y[rNɟ`a+٪G7g΁ P2*ݹ57r(~~o\~0>2.+̜hI:$v$t~ҭN%XveB!ϕB;2DFzm͞Nxqr"O{ +KBA3fUΗ*i)rĊԷ(!$$E !@Dĉ'TEpp8ޓ(Hr,xB:Ʃ{9x(sLvnHqHOjB g'ǫLg@h $RfiJYetcvow27K41b {*g# +OHo;V&(f +f_yXد/r 3H?CE|C=va:doH?>>6`KÅu6 +TM 9`]У3Pթ +;i;ZO%/x  mReJJ"Ra"bꜷ%6hq \qҠX7B,]B8G\F|qf`iXx#͗>=-_rmuAZECGw|'%[h=;v$ (VEY避o#=LurCX^ kh!M DDL/LPn\vF>EtI(Eؾ.;`"Om;(N_yNfo~A܏3O1JC?gȩ=A.!#·L-;y]Sbec[&Y.k5伖O>d(xN%bw=߱0D{Cޖsu|mFnW?xhAJu턻0zςC~Jsfam1vURV\WV5ЊLZp8R5R.p[vKVw5ӊEa0 L6 ȕM)u5]G1KPӦg&Z<)3 ^ +b D$A|-`w|/hVbɝegdhyȋuPG݈k~ +!*!> Ge!.y@/Z>ՓR)Op5ErN ϐEMM(&j$sCsOS0 *TGBXtB:,.|I,/ԃx +rrB5F@83M5\.)SBŒŜ☡X' aʏT{x^kohŋ/ Hl,;|r;HJ&{R~ S/z=Fiߟr*/+\^z` DFُ S' +j +endstream endobj 5915 0 obj << /Type /Page @@ -26212,24 +26024,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5928 0 obj << -/Length 3553 +/Length 3481 /Filter /FlateDecode >> stream -xڥks~/fDoL3e'JbՕX$ Dbw_wpX7M\Mq$I='Hɢ:s'KX0=]É:sw>yxDN?>A0}b$O\x7{› H8g\O<qw8xwpÏg,h fq$x:2l]':0 x29dqK @PfWGD!RҞK5Ib> AF:3@mӠTeă ^^aZ; V7}|c-w)Rmq&;v͍0n= Ў{9.d" -^ s%C)K0 0VD­9d[n1cjX -]:IDbS }?dS-#m%{=v,HX,WlDT v'Ho`kქYy vS'kVK 4Dӟ0{})]1_7], ^C2TT10$.cJo.1%琤/P_wHܺ#xGn;TSp+]Pǘ%-A,-tXFG"g_))}cqD>H< j< -GH5,b Ø _Dx4eAr p7j(p8;^eۅnĖq%kKYgs?I2=LC-GG-Z>i9k;e&3q$nʚ@.2X<(N:O3S=-C/85,1R^9 <[}0<କ#pA2%;ٓDؠ⋽%[FB/Tj^ |>=_M߬(GaR {آc56Ή>EYB>xWp:J0_H 1\V}@9ϢD{IAR"G:d!8 , x]˃[ta.% 5c9_ s Z溽0-4ip݉!ou ``q2c('`Δo[:p>9c4co:a^cǏ s, l~|,%9YA\i~)!4ږ儐4<l|%f]? -%,WCW`~>.hܰ''ț/d)}ib֥ o8佫l/_84+҇D{/ILvA~`$QXdRF2ߖ"ztR>E!#6(3\/~qCJC3t=xġ|i_TJGT0-oO{$"M&`XFOYJVk~TIqEf-O,J&~pLyUK;LyҞ=A?զ9tk^ŜJ&ڬIV(6!ӂ2 t~?s銒؆@Zn -L4=@m-) /P|TMf-$:d&Inj CnSrEԑtC Txs#[ JYs%Q_n{jzɯ|qhnc@f= 6Ny~Il ^rp\:^Qn̝(8#o䳘=_PYgk\V@rsI*?WB72nj6omeOIX:? k1˸R`~ߑ;ghAvp^1Lendstream +xڥko/&ŧRss>7q-%$W!)kkvvvvޔ?ϟInEuMo^gWp{ܛO !y ̽&I\\R 7o/|AB乏us> nHgMr Ùt: @X,Nxב;OYqA`/DG.i4[nV٫^V׹j7%ˢ|jI[ռͦz)[n?ݼγnFkmu"5>^k>NoGm /Bgk.Kt'j_:"[gOEYtZۭnHF4bWx"܋5zYcrSXˆ,Xu#s ZJN5l,u,>5{Xj]l){GoW+qu(TEC4'q~.C~yJюTd^4UfS͛Kʵ!izgo)2duU=PY.OQ*FG|MgX`cn ݟks[PR_֪)TP:d^7jQdyo"OzMziB^m2,5XFkCְ-yY,q^\o`>;o %؟ {Ń;1#\+-ju Q=3@[3m6kԷ#H3`hQ2g+R@ʯnMH;իvP_SGnfбcL}/pck(0;E,7)uA&p&<5zGlv<ݴS0 Y>pV >T֭.\Ç鮟z[]Lh%W,{Yi.SLݬ#g\+ G7İt@Hv3a. ,$C_Q +vC$B=13Z|@FuoQA+ +VaZ; F2كY@k >j-3ݱn q)`/v@$9UJ,-MY +r&n!8z Euce*t$uMXDq +))\zP+ ^3 Q bR["㭴&\<lǁP^nj$J&5zV]~ch%,:S{R  A +`7}4ɧmxZy*LP[wC&xLՂ]5vL\scGrfkNDow!>Xʑ 0h7BfE+DZx'HcL9[X`ltr >,1 q>,=-TmSrYd" %U8~g ͭKG~tCU{ + e EG8ȸz[RD2ڲ ys ]|ڈB?D$g%Wf⾱8"@$P5oh Du#$Xx1za +SX"AAJX*noP.(l(B Y N1'ثς~Ѝp` $̹xc]ؠ -æ]C2l8Əµձ%~vqc ֙gZ8))vɰYU?g`vJkE}%' k' v嗹冟45Ƹ/_juExWDC$Av;2$4btۢFP=S6tq79y qI⦬ dm./b5}4)Qyd>53uNLQS,i h'7?QEnGc]hH3!Re!$8(ic8+oz#{)r +&ah%AFL; #N՛0$BΌAUPx>>~*)!TږSEIHa qx6C.Cl+!Mً֌Cmt ?fbu_ dn˒?k:/#'pWgKOy֑u}zHeץD\>ƖF '< PqNY_#t_# 'gpX$ˈJ$"H4 8S69'', P 5*~00lQQf(c=g_1ㆤtghz"`6ZTe_8pa~23P@k-E-t2 3ޣ,[ezf.cjM #Y aZǑb/ yhCaLٗ#NRߠw,q9{- T΋a `ZUa՘<:aDhAz, )8Q^!XoS'}+J I\C5h{#9e[[5`+y=)K#P|TtMf-D:#Inj CnS9ԑtC Txs#[ JVs%FrL6wF,c5ݰxXY*S 9M9QDd#cRh_Z䑛vA038lW,|41FJ>Q_?n{j~3($)``9Lύ~d}B:NK_tapFFIIզqգ;1e+c6'褬'dYKt&lA)ʞ::=`xspn$%O*H\Yqfl9|sC:Eqendstream endobj 5927 0 obj << /Type /Page @@ -26265,29 +26072,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5935 0 obj << -/Length 2778 -/Filter /FlateDecode ->> -stream -xڥkoFE -\>y8/V~%Jb7%)-x3UȆ(NGaEy~fVsqb" ̿fg?HjjOGeWf_^~O\׵G'aYތi^]~;+~y^[x{5>pv2ؒfgnpgrҰ{\nݢ=oħ9rB"oFkGmKL; -`dPd:ܿv=Q!A9SG_@ah5ڂ8Y̵'ڊ7 |Ӽb7?^M>;q0Po2ƉS9#+UVy\̉ ؍"kS]|CAgS2:#t\:NL)Fgu֣qZj)߆0zJ єfA0U==m=Viʓ* Yel0JVk(bSZ 6qķ{AQ c4|-XebHuK̶XW \)iךS`j lQLZdMboBOVRoT)l2f_7h:Ƞ.„ys85;cxJziգ Yx=/ Yj)-ˊ'yY$G},zwN4OowzO1Qz8iE$7WPNiXw[K/;ƚ8 I׷q#f֑2YdW{inB4)&~ibp@ҫ{V55~Ų{(p۰  ވ 7 ɹ -Vumiȅ(Qr -Ƒ5X$-9﫴]Lz*%Δs&7%C O.QcۛqQo򤍎0ODF{1@$'KJgAB/<٘`A >6f̃v xԚ$]TXcuY(Au;??̏ F;Y`|ڰLL>$FURvXʂ-AȹJtxMPO2r>Y1d<#:LyY($q/S - >fZġlm [&ʏM]p)L_*F)B`'v!Jt1g3t68nj(l8冻,Y9.dE(':pCKt&q ŵ8b5Un1!}:1\ 2):WBg\/A\|K9Rci e8ZE:驌;< θ̧ 0ŀ1 ~<(2L -2yeY$TBad.z:~9ive9F{l AtOBP_Epɞ~SH)"{v!|%;+^xO) SjRnN2C O,'ʖfr}9SXQdB luYVqt1sh%H@oqu9.>/s -8B6iݼ~.&֤yKL0LtNbKj%aQ8 -Eo*(ŢEݤ8/f{TW sWPsO'N*:> +stream +xioFE +(ouJE4EIPQl#~5%SE ̛7>Fj?5f(Vǣ5wCۍ`9vC0*= F 7GELCq8/~E8V9v#k KqM++Oly7?^xZLp.7$7ċs9c+kU7eRt3؍ckMrCq@5*TY&ΚC)FgXM +5=޲/)lɕ{`]NH-+k EwOQ U:3P9Jgs Ѹ Z,$8pCT#,ɂJkFI$(LIp`r7'pئ zx|e`$ׂ*#Š\$b|= nV}xZ`15v3DQe49}};K>,1ߺ:jcc~}|B0u#+Jj6ZH dR8 ^xF6)b<kYvgl5 gWs/ڸ'OGQR`V9`&p*thl |2ydb> +BRV/DN抷\Bl%2VVjZY7d}nf=,L ?3ԔaL'ͽ,`<E Q5uÓ];Fhύ|6rtrȪ"g@P^xy>Vငp^^_G_͸S/5v/iv EFӬ N$O&7vkJdqې p C+ϔ\@H +.bh +x|P,Ұ5u$$  +XLʉ8tKRޡ'稱8)һW<..tAe N +z)V&(qfjJv]Gžo{pЄІY{ +sOI? zE3A7?߃ǫR;=FR)/vV;a+ :!с>!_Psu:a` 0Leݚn"Y!6W^rI|DpC-o#Y׭jK̞+2WNwqY ćGF73Gܦ4c_DZDwOs'CHE4IDVLr[\$78¹!&xHdȕ#.B@1w =0\ R\ UW&s*Az\<|9ʖRKDEf}g^8't-Ii2 St)86KB5JؠQU.nIh`H'lUn<ȴ\zR) 7PDžC[ENs2;+5(fY{Gu ۱N_0nB 9ԌE#J!m-/_J;lqWCpFn;(P.]+Ҋ$ǯ4qK} F g0C[sV'"^8%A_=RjqSw*TaHb +C*/ 1O1މ#:ߦ۶t5? M78$nsWxZ hh]%/` Dc-ERN3_=NyU +!{%S11My^mDYP;*<[2VgaQ +E_PRKD/oVzk=1BfayMO=85@pրLD/n@Cɺ6Z4~kcN"ph"IWRE w_W;b[CWPA?i7Y/Wu> endobj 5942 0 obj << -/Length 1121 +/Length 1112 /Filter /FlateDecode >> stream -xWmS8_!eĆ!I7CJֱ\[ WdS ݇XZI>()J͔aHHs:rZb,ȅ9صf%A)ٳ=:hd{ضiuU 6^C57 a3Z X)lxtue 6dXC1kMS0&Cv;U$zr^Sf=m+ezK6}UWk m M/U̖+_#]%JP,'rrk Ǽᢘ8~( -M Y."r/~HJ6P-%<B58,IѕK?<_UL -6ȡTIK]'B'%s8B"!o{\;q3f,&vp^\P 7S8N3\(51suzsL3ws65sZ6,=E8A901!N,Qb<7Cy0,y9}+p -()JՔaHHs:rZb"i@l:hT=KM7ISVUnqm4Foطq̦h!khreM6dXCyk,FրQ[E(TӐi[4eMUkiCi_Uⳬ)&P SU;%ڔ0D.Ub9|_g8 ÇE `3!k-u, Dv(斒 ӁB}Y~܃/*M_LP}*ؤ~%.\o` DL£A!޽ky+qwNRM;8wLMJGa[)V +SS.恘՛^(;9x9TprVjԘ'(DCpƂč> endobj 5946 0 obj << -/Length 1399 +/Length 1296 /Filter /FlateDecode >> stream -xڵWێ6}WQjZ钠H6Em<0l +Dzm(ə!9sH  2IbiF ϲhgqso2?q5[$`~G!y*?Y-?DsyiWo"F245W:Pv*z7[&gsɻYLxDŽ{D -i+[u)gDf<Te2NA*c"caӱꡂ<<ö γh'߃h4ű#/êQ_9$ -bYB@Ovk]^CQÃ#y8'œq}SbރrN1SXju몮 ̶r]fM0 6ΡNY^* $ /!BAGuT;ŷy>ӝ0*L xZG6SEr -)y)$׺m-=/kqqxnwV9z3?F,ϣح/Kb/tJ|栎1.ǔW#UN#NkLNߜ 4;l̀R ;7E2 Ud"ڭv1Sƥ lR:_"+W1qϺMFnj&w7yLŇ|4n֌1)} <]Oendstream +xڽWKs6WHΔ@|$IDMN4QCBR$U.(ZVdЙZ.}}aq^s/+`y$BӏDzzC.w ؏"iW( U W"k:Pz:~XO %I|Y|Ľ~,32g"Ͻv!U̔u}>٤v]9B80,䜼P_PAyaWwיoӏPӷ(>_5sBvRÊ I߀ls=1K>םz"jr [Ρ<]P"۪C'^__x/bqL ߧIr +c[ O%U :`=Zj[iDg!2DKt:'"vc} 7xvv9 "ye6D5g}YDUsǮl8F +h0 T߽C_Vua2uDv"NKCŤ2`>ԑ<3#X)&, ]l[,sчM͑[/dfZwRJ2&#҃d_|3i'^G,R=DBiac;j&]Tw۩2gf"= vSd߃Ƌ'kbӛ3Lm%m,b|Gx"w ;!tpwbr_g}SO&&45z7{aɫ+rxpr7qu =oE  uD-@%nFzoӍ468n(6Oȱ +3z3F\co&07 Hjfv=ђYR%.qd 8<`xˇ(r|endstream endobj 5945 0 obj << /Type /Page @@ -26405,27 +26210,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5956 0 obj << -/Length 3338 -/Filter /FlateDecode ->> -stream -xڍZYo~_K(`!+ 6#v0uuufWuW_&_|UaWyIQ\o5|}N0g:w0YYcee>ܽyEEW* -,{c&JD_UT.i/"zbdY` - y~ĕE}ۀ~}mEvQ7f*2*6a'ٻM3&"*6fG[mĭ}c"54* Mm0B$SLfYzyA-HG"[մJI'}- Ks=}gZ `h3K#getکYdXМH~๭uͭ8bᾭi趺5f4v?&pIU8 +Դˆ_MM߱(;.Lj8JxFI?Lܲ1#`-tQ:D%" b#YTr(8SS qpÙ -KNa3NIQk 6tq zx67}3wΞNlZ>ӲH= 7*eb&FeeDAm=[x9ꮆd)PNg(Enl읣%*-CFlKow`FAL^^4Oc<\6٬` -sߴd(b"K9IUI uq;\(ZЀ#7[̄&bi鉬y&t}_T3Ԍ}7?jT(o&)Ɇ Њ;4BܣJ[B# Qz,nˏ/DSo<Ë'oxJc[s kſdYnm -aߣ4ep,'YȰ'l+-p6,|3W-ҁ BSη;y9XkPa5k+~W,xZ F&%;+ܐZ@O"% 6QԸcJr9`%#Cl/-bðNd@d6=W8 T;;2)KQdW4t2W:.-A{WK$OV ?iO$D1,>w{,=aK9ZUKt5ITd#UqZ6qȁ#*H+dXa٣Y&e%-5s\J֜j UqN9r6TbVZp -b3|=ԡ+AnD? 8]wE -NK/UpA8s]Y R1XWgW5-l)3{|uS -~=&d.LB(+?'bkәM!a A>QK*0ӯ`]eeuRQ)Ѩ s7ɑ2|Ʒsuo5C+/a,b -`= @K?2A * -j6ULpA!ɳ*s=>f!S0\9-] ;Ⰹ ,A* n\%1֬f'3ʂo|߿q'mD =a7!"y c&h踨*ΦUv]gq0Oea*V{>TX{@jź6dLƠhi b@r -g VL n䉡A7$3ֵ1Fl)ZBE^Fes XCr)RbJKİ~8f@,M|"&ՄF@؍tasW˟k.: -ٟ$SZˆ;~!/yw:aYh$o-9Y~][N#.%wajh?Ax+8S}0"9BX&SaYZv7[:ƅ~J_`"ԜBI?Pga "0;++p> +h3)]Q4㥨Kx@_±w1ȟtPmqZʍ?J@8npY3s3m$3?H%S7\I9ؚu3[|G*d e'U$"AT3(0_$0Gn}pS9ޝNEǩR;&Q*JY&ʎrIõG}~x@{1gZj{=IHĦdSuYEDJYxs?ڐ+Q~4D-&(# $a@fKmŦϕ}7آ*^X٭*O 3a(v,Y2DaTڽ̜H؆L7Cv<_*W|тmFY)DE%0 S e29Lrh,{ >gjq+wG dX|-V)u !31Nuœ.lv͊0WȆrHqkqG">q!h -jA2 -tf]pz1}{Y*cDrEYz\p,2fMfZ5$fuyLMiW+y/'@J?~%C !v%ad~`aZ$WF qendstream +/Length 3285 +/Filter /FlateDecode +>> +stream +xڅZYs~P%` >JVEJ!@ $(9znڿŮWia]7U =_"šG:׺wK2Aix"7Hw_*$ 7$y_ BwcϹ{W3UV0IՕXHE+w颩{~ޠ^=r=l/2+߃aY/pU:[M6f+0Qn+:ӶEtnd$SLjXpcb=<j +ȖRIc7Bc +Tw6F1>\hL&2T挲'u۪+nLjvj8qhaM$#CyqAViO')PLM߱(:RәX =-I&4fPtҽ꭮2lff߽> ڐXt{ƹ{ (~Qr(>BJ;_VTj: ; | +:"!O-V'h8Pwz!%?B͝a{ÐAWæЗEIBq,;gޚ{VPMKօ/z6A5 v=tϵ[L%?wB5 +as-3Sf|ءZ +7;ig컹я# +Pe`t3FHd~Zz'H+ګTiES/w~p%2߱B4?Xg?*r0c+.av,|t=\/,{ ԫGF`.5{LxI5J?SX|[QЌti7p~mz. G&e΢8

>Zw 9-W%!b:F=XI 7_f:բGݗ8c"W!> endobj 5962 0 obj << -/Length 4283 -/Filter /FlateDecode ->> -stream -xڥrF]_C)fpg-k+&yHDhI}` rR)9zwτ ϳt~f|? η0,,ϖo< <ϯ7>z_Xh=EfKqJ*^5DGˋE{ ^rbf X~38_ γ[h~3ˏ#-V<SuǙ~| aC*_<?":UHD"@9Z޺Q!@ Dے<Y o%8yW+V8*鳲w <ձ.dE=Po8RvwvO&` "C̉[bT:ODhvM[=%{Ja1m"dZPa'^sץlc΁`[PQeݢYмo;[C]a' wg:-^V(=fxFv ~C|ɍdpЏ p <ʢcEa<3;V -C^ekxjC'34oFL*nH]=830k4f͂H4"e"/B>vC'_=w.+F!)VFDHema ͺC>4&I gV >9@/YCMvOBY(]r`R[)`%iFn{FLJ`=K] G\.o[?oUK(/Zִ|ZQo@EC_%+!W$,rS־J]448U%v~EdD>&$a *x)dކnkL?`3UEg+pr+ģ#[0=ߧ4=P8XΡY12f9(: Iơ TQr$\f [Pb|Ю7&\(vد(,1_T!r#5 GkosXqh^ G~-ʽM[Jq`4 f3 whbފLJfXIl/V kk^ѴS%D7mgy_Tl=H@JPp0`{: -LJlbcg<DZg`ɔȁ!`6sT,ĩ -7C8KE^g'&-/$q -q!)\<%Ӹ0MX~"zšx1 Y_beU_yƽWXwϳ]!%Zduf7XLDP1zኜ#{MoUCSsn+[eurUJ>A@z\X_{-@v7%sh!Xve},m]WO6rWcG޻T(Fα؎ DZākX%PigUG,̗]7ŪĔ~8c^+ @0VmL \+}& (=i|Ygxh;rSavt&IѾ<\ADy5?ðk^2/V YWF`Af?VQ*y? ̊% d&~"R@HbU:fgdjYP+Ukf8c#u$](_i=UA?6h%+r=C"rЉ4lM?~x?CEy q -)y;X B~ #x*B2b?՟<1~Qx65$BK3^ Fn{F' -s[j-7Z/[^juڟ ɶU/9ϱS"# -őƞ{Ha1 7r٭՛#(D}B wy]ʌ~[C' - -BZ#o_ڑ8"J/.$iVEynpZl#oԦLb¦s܍LSlSGB3n~Ў\`ga0ow -T'' (v:͜-M -=_cNJУ(cXݴkZnCV -induÁa14&D"!=k{[j2W8IqlƨW9i%s" 9d%+kE\<}=S7U}RWZ=MsRE4C4I1q׽:|x.ÊSPĹ-C'(?[Yr`ug߰6vH8q';AD v˻rL5Ls+*THsXq.F ^]G<^ph7 -4;ƾ]Wk~kD 8ɹi2hk9Ā$63]1T+sTÎ,vcn$wR1jR1"aTԡc9eK$ ZL~A0 Z̘ta&X#.b1Z4y!mxuư@y{KGZܤMаeG)˵\c(uuej HZ+00>T\*cͱ_9pd?d8 ,A?;3v46?M_gV?Fr5Lūl.vz1x7;ǦЩm(!t'A:S.Y(ح[6 --ɲu@ n6ȻjMJC.,‘3AQ֑\L<ZS=;h( fp߀m qxN3 sl-[#hth^G b^“ >;pX1V1+,JE}g}z*FQ{kSv Yn.Ւ{E^嗄*gA0r?')WCɚᇓ#?ɔ|/K%95*Maj60T) 4hlNF)]K\ƩC"b~\@a, qvB9s3d|&lޛ*$*B~|13LE[:r4:'ޑh0&?^۪ALx+Be<y|bendstream +/Length 4229 +/Filter /FlateDecode +>> +stream +xڥrF]_)fpͱ#k^K)W6D$J @KkNT%螾{??OByN;Ȼ3_fxE!rsx^z~)7?_}2k<z;_\\2iT~鷫g׳|쯛_.nX74?Wgڞ,Z.< b灊\CC{nj?z-\n6WZ9;ݶnZj'ԍȪl +OBV.[G;usc9}Vp[Z<4L??s.!$oC=p ڹA<4}<X84\ ڶK\y)yNA1, Y|Br^mQ+n42m9ܚ >)e3<`Tp7V4Q,ݾW;e}\ D;7ȋ^(={ Bvt-~l_B|͍-g~OxYGjw`d<2; d%Q̚K"Bxղ+jNV"4H|w@@6˸irYBse2˜QET4nqWTUBSDO6v<ͿUn2Fi-y>hm'_>~]˂H~Z{2lQN#&e$C830j4fłH4"eCD|>}*`zǝ¨Hq!D 'R|C*6JC6j6234r>752 4R>bJZOZѾo~ gd=ngٮ ww]քUl1ԋbuhIFU$*_f9 + +u\CPDY?FYYɒǽ[5plSmVxQ)8U%Oޓ K p::E9Jrbjaaz̹!] ۻ[@dvEe*:^=Eb$9 U (QʆCK᪅"/a +*ܙ/_gˢ8ӄm^I҅wkx 1AA; +*O0IQM±'; ; x9phsgG^sؕ"\,`!\2]֕,K#ZklكZҬ Kܫ ƂH Oe#7bK $T^vyյr+7,Ȼ"@ i>cHg1 } M + u%z c')H^պظ?}"L3N[ +T0-C(n_kt/%[r&֤x3]W7?_ jY3}9ּ$ ^v,֕$(enKּ 3}yzKcŧ}A6fdr;l)y(21Xѐ:>QK9fF)(l%΀J0mKhFZ2.# %Q4%V)#ISW'-Y8F](M„H#kLSlR-( +8%a6B6'4G@q2T]vg>N6sn^-JT Cݗ횚ېz2s85" Cܺ81fp2fRt ;JWuDmHazP٢G0aaZ%и(/3?ANY +ǚ3D3f_RJ'= g5c"PS42 d)%!iIjRC.Sg\_)CW&dRUeĈ).̡=󰂂ELEIca46  `V%9rki?`/enhDa{G:/ *R8&YLdOE@(HIĵu@\k5C7(xb A? Ց.U' B7tx7z $dgܕ 偙Bo{K\(tnm>'*{bs43&n $@[T čU< :A7} \Rm22:= +͚T` !HY);S_n \s6pLUSzNZ=Vqaa!t[ +{+5 +vVueq=4VDb"=i[`2W+QIl®sDw +1J?VQbp)ár2ȠEl}FYwP=,Ϙ:,Od;]=ն8fZK-9|7zi,~BCCa%G5VBƷ!x . `Q +HX贯e5HrnOЁq~s-Xl@GEyˊ\ 仺 tmF{0h<d:DVW~ <Nm]< 4[KNےlGsz!JBZJBZDdr`9ʴN1_ 6 gZ8D0}XE53vL2~H3([Kn!0%4li{[{rlWdCDnn3 {E)$j񾮘ɯ8-qs3K.OFz:*?`Ƒ )7M!|9e]OZֻ`N`S3S"XN@v[?C6O:5r:"si7Gc7\- =bK\ +d1K/#^<Ct1ӹd:,heCɗ}2ȴߛk507mgȞsK!R֘}l & nM\r~ +GW}>FQ#Yv)hm2ڔhK8T2rI8U(+\ė%_Lbo +" N2F%,l> endobj 5969 0 obj << -/Length 3942 -/Filter /FlateDecode ->> -stream -xڭr]_UK,0hye"! -Z}凤T*3w??O# $ M׻3| 3g@,diuuoqx{ne竧a |չ~ubwLyX/$J˻ޮp tw>_Aa꧳̜ Xdgo -?yn\wgx.Bق0m ȾB {rF8?:"6^8Fi_:dUZGlls6Za;*X@EZ, -b~RHx`bXضؽUdEȦEr_In7V |%j>5szYW]Ê]Xw# -;SF"LƼ,BkM>5Η0ZoC~ 3dxhg"f8S4,3Gj0V|ljÞg`^A!k2Fka΂vs -a9ص%@u#E`Z7=HN^lm@ndUÿ떭b/MЂa5 -Ro( -+(;li9!Q%Sdr5I7gpAٵ™͔#q``^h6hI ]ۊ"d$s؛Uޱ6^jLdn}l;q*\XD9#"Ǐ`Z$v{0F1cUL8TA@:%tI{+ %!vΚMD2 FLx3Dc(M!}z0#@/-XZk;f U3[\ҎL5ZӢ ?3t̠|Wơ"09*|>o,l\ -yۮR -Ahq̶ +MBv|ϲ^WaqaLl a'j% l ҄3A.MO+~ɣUM,:LqS6y=l#3ZmKZ*PؾǠ Mdv`R\>}$>qo=X%B9"\Rf -tCOP=ϱa185CzI2c3aW?yhS0qrp@C:y bHdGlP@ˊW2Æ/ׇZ35O=!fXڒf'#f$RKtF*ENF{ҡ&|&98A*^GSx|ђSF=83M3-z*.&r(7Ti CcnMIţTZ|AxUIHZtn̹Z}[vʃx3 Y*hZoTd -2;Jܱ?V{Ⓦxm -$J/3g+6nDD v }}vV S)L)gߚ:q fⒶ7ѱ,R5w1rv'; -s - Pdb5ZS=\TCB*ZVrocDn(/:kXGRXVBk5 K;J4Oc8,e1%=~RlwVwQ<.o#+$N;~~֓<gĶVd#$ԉ ~Z Zp!j! 58w%cv R#a 6͍J(rKɰNӑ$Y-VOBOuT -Rm? %K<Q5l?/\M uT4(%8r%t=ٷ/u|'1GNl?@}(m깰@ۼlu! --*1PHɲ#ȫD+ ?bZڛg8!=ad6![g{T GATW!4CP^UA#KHi"~w5)ǁ!V>m 92~4C鍁?aް(]r.ޭB"mZ V3:k,O֮FJ6`/F;9A.|_ȐkM] lYvjuC82g늝Nb.Q[IiTJfRF8/4dN=s:n$;C,'qlm8#Nsn|0y"&@Û~Ͽ챕MN -K afԞ R,ߚ tlٌʊ=z/ 9~i܎Be9vL5;&9)OS7Q̵/$H8U.ގv,z?I*Uc \s׎.=j{qeRMAvlv;S)оRmM"l"L!Hu ☴d?V2lg(#?$`nL> +stream +xڥr-`|S4Չ/ީr8©N>#Vf^vjs2 C'2IR~;ޯ.y4A\\fʹϟ.Kt N.W-Uq?  ڞgDEP?.$RKXv0[Wxs4eex> +w/*Qb~4s/e<-$(t=R*xN `Nõ{/<`h|8MUdS^#`B:V<=fefg=㙼5[N#֐Y|$cFOfKUW_EQgÓL%NP>tnQ5}Y듊; 戼-_"|Y4?3Y]45n?0\G*[`2{4* Pky\[&k%J;, Mx+ǟ/=,sSWyn+$fNULw; /+;菟n.#y;noː/$5j"7/tT߈L+A[2;.qxDe3I)2K#,_a=)\;%X?#S+׹,x+pig^Y69h,f6ټcd".vUzz &,edHքb~IS̅.p:KwK k  }f V}Km Nт  ``݋<¦}@AkħրE+ n\SÐ; X@ ZY,:`n"XXDFQ86(\/eUoȘE_H:76q+>?x͜^Uװvy!wUtrRJƼ,r ךMN/ΗB`gݶ!i7{6Q4aǘ"lceY(ZY:~PͲњ]N47Mc3eH|b4n$`â v[Q2Cn† fwsZAp[#+&|s_D<ׂjAwۣ GX3V>`&* zX(犄ס;1hy_mv֬o"RWN3e q0"gPBv8><*#@O-ևڎD#svQJkZ['fݢ5^ o1X9A2JB;g^џ9U߁ŭ9Z ;RhRcOoX= l@ܑevbN&qi1J gn8a.+~ @6l.+1aM ڴNesa{LGfd3ږ!ʵLY0{;OǠMu`R|>}$>qo,גAFji3t}OP=ϱa185C$1vq0 Ep|)˿ʼw˟%z#xi(eE+aٗCEQm~H`9ZLC +T{Qd. .Q3/4Lh*sWrQ^fFwLe壋ɢa,˶78VXdž0+K WiY%#M K ˜۫[_p<^7C^FeL@!|/c;x:9d^je'NɈ:aHX@MLs2NDf/uhW t~&oƦ`s^]YDDQNo6Bvrv]}$[i|7\¤ +0I }k)D= . 3eA7k?ޣ QWCza҈J*VU#KPi";@trMk*iw6;bBγl`abO7,*Xkߣ ﵣh?ZQLRmZ V>u XN]HXlQt|5NFhh틋⛄}!#Ct4u%'e#*NT>k0ʢV+vbK89$4KM15>ave&s==SF1ֆ34IDL~켕bMLC+%dBd'zCb:y10b<+3s( $*?76ܳWL.0Z'ER,vrJ=0E 5'D1DK>C ͨ3/,zi1q;&Er \#y8)vL:Ӌ^y&G' ;U sjj;ׇ=b^j!L#u'Gu)b#+ӑ% ;J&Z>5=%F3 Lh_\j̛qΝgO%ܭ*z'묱i`;(7a1S:Kk4G4%”Aӛ|8/1U R }7˾ Yh2;',n? 'n<`XѩTN,_+I|bOuӔu^M:~=˜ٵk8s*ݪb\ThӞɎng*ځ_ ]9DI4NmAJ"`䇡`]n|L> endobj 5976 0 obj << -/Length 3874 -/Filter /FlateDecode ->> -stream -xڥ]s6ݿBof*$q]7^bjrDIl(Q%&HI3sC`XII'i*&U0YțP0f2|7!ѓ0 W=ױ̗xy4)HYf4~~߽gҘFw{~=ûY载Wws3&"mqod G*UM>C;C^X+WWOWvxLOxtQ - YGq0UXVQ':X$U.Td@|9Fj*,>ZM=E*:{ hriz[F GnC NqE:3Ut3F j|Ǧ^7fێщC?NB'ܕpжkLb?YU+K  X d''8y-+?ExU~V0UU,G:\Yt%U%} Ld >๊o :.JHp -+R#"傄{.JkY)u5+՞ <'?<-CfmJʿf3h)qDdd5>%F6SA"&aVd6t eX%bX!xY{b02ዚ+mHLY{^ن>s& QFςpe&Gk(" AIyM :Eetr^8}H'|,pŮ.*y݆1/򡧹cZIAGNND6/Y1 # CUbC3&a߉ t-q2A$qBLْÜ\ݺ0U1rPhR|?8.X20@k sl!v9{P6G+C#S{HT\- &S`\=Ey )1N+ ;YĹ*@oYCG"*ót5a*199ih_JTz $z{2 -pG)YJXҾea2D H&$iVh6 -<%=]F@#Ns JқL$Olnj2 q*esmgNZՕ*##- -1zm&]~E_@y2Z9@ knYc:}Orn?`{S 9$uwK<>*$I: t`~ 'װfl@clK DڏB梑Iѕ%A)ڶ[g2SIp؝)/#aҜap.>ߵx\ -D8#!J!Y&v6&lu%3-A{#qKG(!(;tšh-](~G[VSS7A'q:4ά-o\"P:#ltbhI3i6`d̺ZB% p 2| -ci5'FNfv%v"_hj?U"ļXj3ks0`#K#`}-4v}̙Ґ<ŠW7 0O'3WM ׏RrjYA^^`}i76fF1܀̺ܭx7E}uZ -vT죖ʱB7$av`83rNC*!ßVj$ Vz`LH K!JB.5 0CDqe1 hmS-.+<+.C1qX]wdXKu,>r;̠24plHe dw,*8j0D,y~| )m3Y?tR1= -s[tАk9'CKpruGT@dJN1({ I6-Ss#0}Popx8#>҅ig;9>9N,SwmXYZDII]ߢ%zq*RQ Ki ?$ꓸ@Xvx d]USu¶?1dU/'[N  4ӫ(0[ՇJRS2.Y_ 9IlJ½w"G7-ۗӱ-9P0tnǰV[i/y6洗]p?D;pp`-pc"D{}Vo!&/[;K|,zh-Aqn>YKq QzT*k -_+ )s4 "yIBOv3pd#ٷc!#y)Mn4py2"%(BŲzyT|}FL0֒#lZh;nKW1bPkjH-Ra r5ȁ=ZO*(x,lv ?JI:H@-{Y.]Yl[.қLe,MA"gم:+Ϟg?<.pD**\*6}Gq_ K-t(H2x*Bzp f02:z_.9)ESGێa gy^ bՖ%}o ʭ87]_n$w(_D]VCsgSc??G-qhsտ]Fu_l|ZQ)P6*E{J({lgҢ@\Y)0>ZKF-ZMe)3øV f shUˤ2~E$9>%Pj?4ǘcPj*`l;KZ&1  |BBBhEHY끈~pT~$sY4> +stream +xڵr6_PUMU3kv6(JTH*3ޯ߾l(W@}C,p~Yʲj̶0*` q7l!{7WJ)/R|81kị̻D"޼?^-Xh_' +?5Wl ځlcZIzczƳ&QG)4Tg {HOp$Ϗ:i$c_oQ|]ʽ~w:>@<=RS(Q|5}q;8ra*eU5݂Qpe~oqٷStЏߠz_J8h5C/ȇDyy,ꪕT6[( +949k^QYu,ݮƻw jb=בͪ+q*I˦Xe"{U4-x[и0pGO48{h "02^x槒.o'۠)tMBT nyCʰJB +#CIUīM= `dW5aW|2et Sc8~FyD2BR >2,Z_˕F}{#*6VUܭQb КPE*K%V(h Cd~g23Os8uR3Z(BDBZ *lu٘488ٞEH,aiۤ_7WJO<ƲQR@U%)LGNnr5hp/MǙuXȰnBDd "L%'^eGIrU/C U5vˈAHF^S B+YRZ@Z z{8XKBgb<&LgmO`TϜɧ0Chԛ}*Q 6XȑG.)dpCPbm-XGrW„9GQi\ N0=߬< zqh `J'mcDoi~BPg ɉ>54F a$1 +C1_т +x@ׂ;6ʑ,hZj%ARaϬbʖ'<א9$yUS"ػF^{ n8r'bɞ_l7<uCBP6# “@١=OpQ`lXI*rR0̑\BY.yQ>9/ +[o$@@B &CRf8m0zvפU]22"۲3GyUypi7~'i7y/ҡYEӉ}H̹4l?G)yU`!g@ﴊO"ZdJh+[kGũ%,y>CY/t8qS ++ +0{gf[XJb>--8I-%c(m-FJ|%R%AER!5\RO+凕UI+!0&%EEǐVV!!"iEXL;6C!r(co.r-JV)3 vyW.Ƕ/VL62;\P0-8 S'3w4DzZUsꖫ -<#(~Ơ$L΍H@ጱܹ .vv|6eI;X2,$?wAqK'8DOa-?lI&qG=DeCUSq_1U_ΦCj:7(0[էJ).UY_ +9¯lJ"G7-s=? Q0.Tn0WNtLsJgrny~8808Ι-r"'0o/Yj7l]d@n9I=AĀ ˸P7Z 0󚄞3pd2=1a[}7ݦ񉆪.Z|ys_$Y7.]vEhaG yY?  :/i2r%pl/=Yigde7Ġ=LtV}’V8a\^`I|;;hņ=)E;X~%p4C6h9~afmcfJdYY *kE*ؓ4[˄/z_һ4ZD]cuM/ʐ*R!CĪʔl5eOմΥ;h'tj}R#-׭cN|諜ژiD\ڰm*k +po~ +vq܀Ү6gbv}- IoeKJDFÒ}}Ih[R$U.4Į1F(Kwy?GGpʏ#hFZztQ lZsjΖN[+XXA;ZsO7X `K-Zn#w jBup衟ŗΩ%8Ihxc1뵫-|v>Le+H"PXF!P=:&1O,Q9>2*ľ<ewQ>|lm.TQ}SΚ /[bљ" e#aA_4'on" +dȕ8.Aھi@D]93 ٰ ȫa0L{T%P1M*#QdSp3Y3 +WDZF/avd..*5T4STE5!aB˅(2GjZD짓sc ˢ-YdKhF.2RZ2]!Sjwr*g <ߨ<ԏ~?endstream endobj 5975 0 obj << /Type /Page @@ -26633,24 +26436,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 5986 0 obj << -/Length 3253 -/Filter /FlateDecode ->> -stream -xڥZYsF~ׯ` 2aoZJqdEw+H@ do_$J zfggBϴhlf[x,z4Z]W32#+}~X~^goXD2(=2mxLO__݊ߩ҂熦jl1]ۙez"=괚/74v(K\,6-Nd4L'B),v)=N7i)N`<8+ֱosyi=|H{0Y -6*'"abX:yO^; ς3laSJkm*864YYNMɫּ#O{ (,̂[)KfzWxcnGpW逨>O cd&?$~wꪭ_Xfh0>U׭p>7CPTRУ1ȅ[?Λ&BPqMzqY% QV v'XմeM -=͒bڰ7sBDHRg"aY/ ^vxL]n膐`l7 ޹g},i9ϗys GKحQP/]0?gGnH^]t`أ!6xkOy0Lh6-ϳx'7->ja0_Q,3uYho9:8_qTZ t[isn.< -,(-[5?{~`/2#SP[ 2ʦSDžDGNj| eQh%&֣Gv’9.Z1mpr-LwyhM@ - (7s!v1]s;,GD%h-Zp儨gx6< A{bRHͅN* Qa } FdT@[:E  }Ljb%ܻ`7RLȸA/@3)w7 q ct',?={A$DB4c;% -:n&G1ZٶYT m0CJu{e|)TnT'k'(p -Zq#LrьJܳ8}Hp1Gh<^-1:tTe^C/E 8MwC,&0:A{[*ly+'>FF_( K>uc٥uC<$)W29[A8Rz#Jۦef`-_1pɚ~ u6 }mas -l rqc =- 2N8e.&X8@Ԉ9Gay2[V8C3p|i̩^w i_Ly ˔9>XqT?y{4mQv}T Ԝ~7ܥ -baϓ|DqOwU)O,O8~J Y4{4u}v0Ðuχ,fi8_ :GR|dqru ,ljKrR0o W5,3V 2alKJ }݇Y0^m|)ypWpNIogstѾkAQf4р!j"T}vm<Qf iʡ J @HfCEWtۋeJa.f-fxTux7_ݹPN⭲YnP8eEOTּ᧴H`2`wxvvCT!x7xI0;A ks+#0w{[GS|zbe%;T`YG44jJIV>M.Em8険B`1j͝(\]mXPOF/} |݋I3B~ۘ wD"TUqZiNdE\8t.-!wJ?7ֱZhT2oWi>d,GJ&,D(7㴒'OJ}R⪅J6b.ö㧹7'_#7u -mI/_r)m 9Ԃm#ƦD2vDv"<qڮiNDVv[wRiKo:Ĩ⧗5"=S0$D~nM)zLT0-DShW -ޑ6aqZ1Ro8FD(긁:N6nI޴ P9j˗c0<48h.L{zT\`w tRߜ )!GS!I>i0$.9nS-SjcZd1A]Vq|\BS&nj~WYi;kwZP' Iџu{\3tGsӱ5/A-_~g 3endstream +/Length 2930 +/Filter /FlateDecode +>> +stream +xZrF}WV0.ߴ8%Z*o*H@ doIVb9)WsӧGGgZn4 +BtpXX%\2)=폾ٖYhvOCfɯӛu]q$BvlίL +c'4w3lP p~:s܎|r>I1Q]㏓_F HeQ8zeQ4Z(5=J=?=w +8D9Pp-3 U{j8NqCcH/S,bDFCtCh.N[ +MVRS9ȍs<,‚)SzU]k',U"/yI<*w*VYӤ"NHh:/ 6fOV``t)X`YNdɤb +(d">h_ fyeI-4-ι&OW"-.踛1UD/;LH]EϏٖYT4 ͣeXҤq3"y"IeZ*-aZ64ٖ6<:EC&)6uV,^W=(Dkh_kUBq)2u`8jJM4EP2v&%ic7v~ +ʓcfD"]W-"kBL5^v:p,PFJez)-qbHo=ϔ}"lbi +w9븒.ZF4#Sa(-ZN3D{*!,N)grӳBTqRJҵ}f*P ڡy/o1[Vo{ + 3+.o2\4pcDZvlubv)O +ǟ,Ϳ~o_6կ:,Mtg1Gab⦝wp4O%wvŶmERs'AI?y %KHǵt!HM[7hePJ9^j/RNK0g?o̸y sV]g=UyB| n2_p\*mh_ދI?8tH~8,>zF`ћ4:r(< ^f%)%?gvQkǏc?)>ݧ'SXHvwSw(؂:dZZ>:I3?djl#~&tхXߋ=5{' Bf+?i}*qxYήoھBendstream endobj 5985 0 obj << /Type /Page @@ -26709,16 +26516,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6000 0 obj << -/Length 2003 +/Length 1900 /Filter /FlateDecode >> stream -xڥXKsFWTUad3-8X)o*-23%IqlJ9lM4ZjZ:&Vr; kL;ɇh? wNj/ ?'faqY/n`Z-D=>}͕&׋^^&HIL~#p&S;}8Hf0g%{TNYb1|k1e`8v^+ +7A[QU 5vDdF Ҿ7Eӊݪgްr&g:_QyPj $ mr-E#2ic%"i ,-ʉIY u)B_pO7F,?Y(y/OGd/T1kɆ)a[me^h/s7Mdi]merly&V6:gUafG cecoB2X쵴zرE^BFA^:#"ٓ^:'Yi>U몄b5ŮmdMFz_rmz+0*>ҹ2'J }G}7@y&.fN{|iS8WR$ntIS 1;uщ58W`mxqKRॠ^厡+[&Fs(ëD)ߥǠ*Yfsա"j$27-#zYF7m/#dQ9 -_rŞW|2bS`@t::"2Iz*Ίs)p^K4 : Vt6 2)BG=h[H3Vhڎ }]܉* aq̚0l$z-{"/[Uی1Oǁ(mIPaJ+Yf}DNFCe_z{<"h)Na{2@"c|NV.F0!R8VsvʱX'~ n@b75ˊP.4!#k4:>Y}4#1)ʲ:mD&k{aCz&+Rz襝A=uLWGW+m%_J"[RGdXmU;[!aV1xFՉ< Zt9bWuaFAqmU6m ceT -ըXzpsͩ4q|6~JZ 1уpTcV]8$.7߹G&?5-92jiD磩 I]l'm~DzaEc.t?odGorybL1HF9JDb"4^% -P2qъpi -3'̑qx^ P~vL6i^Rx%BMB|$&CƛsrY-))[; q[cj?_侖-;bIy#%%?{i4HlKt-sb+C^G–4`qHSVvNt*o7zZI;{~Av7XNT`a*wýG86 极ۡE/;d0Py87rx'(GI]5p{њ<-u  -_ٓUWfZ;3 -1kXA_Ax|XbxGΕ~ VD41Ė *Nn+H]zI4ڍ4xZ7z!̅:fgʾGkr$Mɷ}kh̟F.QSrzxQ }tyȼ4.CO*H,o#tXe0DZ6T3ăi:tVFe]?Yuk?_U4Ҿ' C?T.tsm"Sendstream +xڭXmS6~7%rt(B )4~ھ瀡3M,iWjѳSU44R(cbN 9HNpE.'o=h#e9zwxB2DJZ~>Waa\D +Wt5|h|}+"gIY↏QSnYӲw;Wj:MZkgQ榆W迴MVY5- o nSVv{).AoO1B5Kh4'%rFli# ]K"`ʳUF ϸN\m,Mݺ*sjp>)KY۪nfFK[ ]:ߤkPhnI݆ɦ>wj]p8ͪ;Zi#`ޖёHq4K +߱7 Gf6]/gF"Adu#wBsV6`^ it|Oqj^6,k`},I|bh_iնX4r>< +3D]dS`}qR34 %' oEkb>j]c ~cK3U] E6|ĕ_FvEGt = DkHO%Mkd3,(&R +iOa_3v; L%p<y?r)NFكK*pr(b1KT?@Ҵvݼ}H(=gYSgr ;>.c~c{k우dBweh:+D:Ox~[ȶahFgiMoúsv7ʫ"Ҍh}7RמU:VLuݒQq;\,2.G*EQGRoLnu߆HZ[w6Uuϸ<~}c@HܴDͧAǔ_K~%A.D㿚{gsrSC/*x)endstream endobj 5999 0 obj << /Type /Page @@ -26756,21 +26566,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6009 0 obj << -/Length 2369 +/Length 2279 /Filter /FlateDecode >> stream -xڥXY8~_Ed`Iff`d'H.2_"熮OQf38$½}şk4^ -+&E!Õ0H.e(޲@[w=^)H%ށ*`UEj!V#]Nř;h-ÌQp<|#-~"ܐ'ǎD9v/bʟ-Zw5FC<)ttܵ^3rDPMH%1xjQh)!A-[=V8*6mD&[XGF\,ivN-񂙐 `+e߃hlCǕ=a|-h"TVΚ0pOVIy.إlftɀpt - G|+gE -[DtK0$?LX 3RG[ohCuOGDn}`(bviq0OGi* -<_{R; QR2~'0lNbtwv%u@lA -Ǎn?Y&Vpi׸O?=;2͟<ڹ -qm?lٺF§`jsǴ78ƦSP ;h;]Epe"F4C빰dE*YxţΌd2nh3t{ Ǜ7h1\6Pg6 `Bi] U:hIr%tEZBvx!$+,y$_(3rSG,Fe7nõ\R\eCb`-Kv_TF(& JVQe%j,؁V0 -ҕzíQ9(AuR$QDhM#:7XH|cy,*5RJȆ%|dd>K1˞8- p`ԏL͝;gm[]m WSpm[ߞ8E 02n(`/s]W9T R@"R9{Rendstream +xڥYY6~K(R>4mhqi6m Hr7d[ P,vc8+~<աP|P|S|3/gQZ:=1$ +EVaRe ݋H#&wD~fZ?B]}\,U +6Bƅk3VA(c +9)*yD^L걼2U\+Q8 ^,NmYHSmV_,D-qS:ufcaMW2D4t-[GEЦU(KXcԈ 9v118@֋Sb9L R.+lnf6tX3?pn ׂ&Ge5 # N`e0Qm.IhJ xgHAwXp7F+*2LDsN3Ny8Q?.M|I#{:H#%IXed +W4(MNW+LRFmoT|Yth-;HaFqe*8k'RsYy2ßvƻ -mk>`Fk05ȹP qcی GOnƦr\hG࢚"p N̙ёTxL  u`)q3q!w>zo-[>e3ɡnywlb.*>M"U +,zL'I  C݄ (\eIP)>>|-P:E(l^ΔB%_~TqdCᖣ>AYHR栐 )!6Al38V4;n"{UFjk>H0D-Flp?%K'1x{ɐNc@;r"'M$@ jYQ2;W^v-wDW[ΆYw_[$a% _e}N*!Z=9jԊe p  o9Aa;tA1 ]1@ڎ2 8 -, ]HK۽|mǝ zt!6'[`q\=qX.N0(pPuEzc$ DsM)C{ˌ +5Mڔ6Ae `xmS5%{ph~s", h@3@[/:&R yMt{ݽc8Ą)CYǘC ē殔QU3<=p+¿ڭS7AG!Q8m:۽_o~t0@7v`,v@ۡ_ 8KP*rϸ7C'͹l}.vz Ci@.&h*_FpR(82L 0^#2 ="I9[A >LP\ep6T~T4|*/C$=wQks*G>>A3БYvT7)ޡWCr_qo=8. G䦻]D(POx֙I\u0 [n{q"J(n^*wx^/<1Hb{Tʹ_;*zEHͳ`Z~ +N>ilphEzS c;dtBUjh!.8 +[ob=6.? IKJ &Io"MNx6>+R\Pi9%?> endobj 6017 0 obj << -/Length 2860 +/Length 2755 /Filter /FlateDecode >> stream -xڭZoFB!( D4!$ -CDD$R!8;]>$5ܝo~$6~I _d9 &70ˉSK2< -D~$٪c|mdwS':{Tx׿Txoq$WNe}u%w\<|] w9;4嬕]$IP/'?%lדWI(_FdxM{(O Vڴ+)ܶzjTA" -EGCϤس# 'kadK͋#)RFS$Y /L<09fEseF[ jO=a^bt`(ӮÛmzq e% 8i]r3eq]R9k=tWB嗨1y6V -)#Y4sQ=E[ھ˧H-]^{!"{}BJȉI"?I|6 P 6qx M - :ڷl' BZv$1$&A ɦuY2@8ب% (<'_&4@46m:7bI'aǘ0XИk h@!/b]b oCz;(KZ,&_j,ʆ[51*ѢlRNYnŴ 3&S!">S~O;uNQx wb6T!8|+g>y!Z˷3n09ĥ '0d0z mP._,c6"wlnSTmёh8ٮ&&N3wH#sB8;=e&>xCecH_`5d³-}PF}5 #;Dž74l~w!: v@2.=Z'ͫwx[Қ  (=y1bl`@Ԑ֮w9 6Ckb6:DkZGsZV<FeޥFts#m.I>6If-zʺlp¸T -Jir/)na0VTeb΄LدD -Vf0M *95Yek(HW{܂> h3ʝ 3&U $8 uSBG!g*M4(w^dvo[QZRZب6Qdiz;0MgcX݄|0OL_ԏne5\jplREWCCd8#fU׌!k:ݢ9jĚu9rM/V ]Zc㫶b~WGNsྫwVz:{[z>-LDc[^DmxCV!kw [Aq^VYM0qv6L#Ra:|\;<}>u$U ~@¡QqG!V@5{Ekȹ -!R nl2ZCpd|s^~臷~ ? .ۂ*.:OáoVG;Sp7"wn 5t]ܸqHsxgVPۿ٢R/!@k:lPwKWc?$H2G|-|-2!c0A+w2#hɴu.~".iO{D;R6%$e -b‡wDq̟uk}u ^E*Ba&? -Y㾠6o,kA3&)]Svinښ`hހ_w3@wm)}), }y? rendstream +xڭYoFB!(D4|p(KҸ_ WJIMD"Z>$1"7+5ādq?9}K&5W~v9n:Z;q(/ʹ ̧3弅%\ٛ~&+I<$lOLhyߜ\kf_xa7N:9.,g67<?P'oeUMVwJYδq5o=׋#b{UHΓ7l*NZԛj*yKB^[k|*W`;#g#3QUEZx2Ɥ徯s8K:r^Z2 SUNv0,+^5/;$QӬξo0NE$#ʈ)\1Qrر8H=c#&Vjndk㻁 +:.R0W3pǝo}(P*guWAj74uWBʍ=h\<Ϩ; b26×8xBv(r rV1 m_;Y`@˘22Zԟx9 3|Y#Q[+abykHu#zLP,SY}pn]5*XeqvP6P c]?V5V(iŁ虄]9BX +G90h*ɺ\lŴyql)x~d}O*^`*Q[0V zVzek:UF/BOi:q8ilpe s}mrnb ) %ۯPctGmDQ* G|T.{ӳ(AI/‰'A?(Zv~yG9b~: u2Җ霼穙C0YKJiJH^ +*lɅ?M`rև` tȡϔ62t}NĦU 9g a!q+Wm{&Nйx; ǸA+x9&敉3&g(^|bƨbqqKT[-xF"2#̺Ik-!Z(4 3#Cq2PTdgYc +$7K{Fq7c}4~H,h%9-|g\ 5\\ fWq> %NG+Kq @h mãr{rK @<JHIhg_ =;pUm33ܥ7h@ ĩ;N~(Hˢ+gYSs 뒟 I&d~*ntK'>V[@?FR}J @X>IaUj.vHݽEp(Xdž| Z$ d + 2=3#L-xndmL0=7mv P3nB4}i> uAN > endobj 6024 0 obj << -/Length 3177 +/Length 3052 /Filter /FlateDecode >> stream -xڭَF}BoKV} -&>Nxa=[^~|E7s= >A?U}|^pK?̛;(kV@Y}:P:lQRKa"2b&Epym=U5c2=+^+~dMWĔstA(P1FS5K9nynuhԇdOx QqjxVUjB6޲΂.v/ y"^UQD W'JIH#.u\oWi:HDU!xxxx*`}(v:RpD$0D@{dD$PqjT jj8g$$ 3w;9{]w1@$ƾ f$" -8UZ:?Y Gɭ% q&NjB v˓IA"r‡{<9Br= EQWx2xî@/|~2#<#k$aהՊҹW:gt(kY&n"Mj)z9yJk2ެH` c.eUq0{MGC_~I駌R郥Jq$:9$#ZM$-<8 Ar-fOr1RvN5^%Au3pӒx.kN~i$Wr* G}S&IBTF(4 -b.^(Q*1g\X0^]ρލ!k<.f-sdC 5 |㹵Z(*(GIn0MQ//xe> l^}w;biﱈ:dkB >ai_58ω+=p]]VJ -4'ՕCzV 4jAe2FΦNwSg:8^bR'(wՇV[aqt )CPWmUunJJ$;j4YGׯ M1>F%΀rl 4@ÓOɱ6ʶb -~}@CX9@2G-&e h8sk\ǡw(Bl6 L! kH A% ] YΫZNqfu fh"T2sm}a -ö2'uSTXXcW|>ýR]qzCbe#C%B[Hc -0=j!O -6T)uۥ9K%_ȕ ![0HL] q*:A XX6Is5+t7py׼,j] c\ лRSc1+&Gdߥ" }^I8iKElbk6'@ʀfl$geH;#*۸㛄}LKϋ -ϛ~q%U]sR"{/ tԚ ~CbcF<.m)MEoѠxFH`PQ'Z\Ziѡ$"A8ȵ$HZ?Hz ")JyE=h?X߆_=:VxXԾPtlu//;|UтO@tNoc~יendstream +xڥZYoH~RŰ^ĉ"䁖hѿ:yHH0@쮮҈Y仞ga$\EUq60L^oˋo={l@$g忮no #;_az=;g9_# nv.#㛷_Շ+h^_IՁBQ]| hv8W/.q5=]^h%P(S4}`)EzJy[ ^Q`Q(wWUpzS?}zt~88ZG_ W-(8v p@UWCV׆o[Mےr̓y3",2vچrzP=fq?gjݿBrMWQ.ʉ7mL6iAYIeU6Unlv( glŏn2DK h[aO欕sij*fBҥ'ڱfn)ؒS훔2#&<3 +QDXd0ztqs&WվSv +fw@i5]:ߴ-{ocYeC#2OjfhJIr)"($W/boӚn<[JӍi,!omW"+!eZMλ;6mZLO _WY>`"ׁ&ʚcmXG]AT=psqgNeUތXmrcuUt$d:{ޥw4 CJDD"f0vOoSms܇<o/obzh‹vox*H'*pܴIP9E?p#b "Ui=?|>@F˫]-R `H8j0ڷLs2'ڀ+^JRj+Yx%tdlonHIcUQʞ=!1h܉`ؕ2z"RXRdEbq>>>8rv8@xb il#`m& bıċ@Y/RWRY"KCpjxޖ'*/uȬ-$LHoȘ Ww}ۆ޺m<ދܢ* 9ȏ̱% +wU~W~Ohn0"GG9י=rD{Ӻ1nds ^Hه. K`⦐Amҕ3B T JZ8\۔7R=.Tλ yĐ_wp W{YP}|m팂#!pU&JC +0F%XBυj⟋M% 鹡 O:dzxv Jٜ4*_"~~pO+ly|`m *e8xw7WI={[ f +6RB$"-:6 ZRA-^7}lϻN('E(쟶kT{gW<1nh"ylׁogAA;=.MZ|u5 4F]I2510Ӥ>;RvNG3(,|6_j7FC%2٨I15b`鰅xIB:isa$WQ\apN󫶪3QrV׮M( +,v{N&N%$h'iA4 OcL:-W\P:oxCFCO=G\)L'rll ,Yc$H?`#壧 $@0pipNҾ-;k4H8Di%-n<f8:zB%Y" Oʟ +f};MexW0]۶궮0`RKQa.'RB?H[t0b@@f +Ʊ%ד=T}cLIB{ 3sY* -8#q#Q ;Bx8p%̌ʘ}3.)n{\'FNE=MwhLYB䆑E MY5t3WKP*L +PeTVٯ;;g~?NFۛ8?~{06ډbxC J.ӵyޟ1Tء;?}UHZ@•Lendstream endobj 6023 0 obj << /Type /Page @@ -26919,28 +26720,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6031 0 obj << -/Length 4226 -/Filter /FlateDecode ->> -stream -xڵr6_K&ևI;L'F%%Q%8=7D;tpV!γ8u~f*Yv>[ L T@wwgW'\Aw=80>ݛ_/ZIdifo./TMAAnɻz;_޼Į5λtٛ;;.$ǭqSx>c|: -g 6ZWgP9Yc0QD)4tdQ* -\qġqRG.Abs )m=L13xiw I,:iz8 E1n7`U;FF|Ε𷾗dj8SM0Y" e 倥SI3b)>"tWBLժF{ȟݒg5ً-:YoS~FNj@p5.:Fф-Z @Ch -Ȇy CeVe]EVrxi֚a,:+Hge1}\AQԯ!kQbOm0^Z!7V"6<\%AKY[n{. Zі|-?cKO+$?PR:nNz7eey`l|lA=-K`#;x+1\(xLbI'/>[INDtC^b06JPbxVFr㽸8iڬXx:Y ̔ -CYDZM@]0ʭ#5^O_2h%SqB0>瞖Jҋ}bEq4J26\DI>e]I@/>0IC2! 2Җ^H -*D<+cY |Y*>,qC ThCV@_5)sL6_Ǭ؁cAv0Ÿ) >++v젹'.˪%狖dۄ`S C,Cy3&D<̈l<#C=iVm6pw -WJ(kh{$eHEˤ\ fE':v9YCv7qohRpY_Fd.:e- @ mYiZ ZCxPE?D|#]osgbҠk##I>F'6PU#N##P[|u_-0c, 'my:uQA,50^/|53ؔcG'^c6~@3*Q6[(~s`g]MZn&햭̚4yMq=ۢ[r #b̖<=`gh4)&.:*T&JuI,+]A+?C`VwE#*{]nv}0ϡmEST@flj!( 1^-z>) -*}o^6-oKEs7ۆχB8 bw+)ٖꙋM !SY0+ҮLkl *6AsjbRl$gL]&sfQ{3IB!a*i}.9Wvp][:3 ՠ^Z[|QEj##'5%a -EXѨaôn!klZ.2ސo|+k2d3W+r WǮO.'WW+rZ_fuO݆ӏ=}':_n^F5 haU;bOEs -CA Q2Fr2 p:I:r'WVkv Oq2֔r^ALf| -b+qH1FT0qߎd`Z_~@#XWe<z{y22ʐ$AR"]Ͽ{M_5JSY\[X"J#wAvl;ɰ"4zĶ{7 V RLZiyr=^ 7D-A7߱2y70%96FYmt.d]<| -ox1?{L 4#drzd Ǹ맜jE*v2PW!/PKzpԪ2^J?|*ݣ6e\:3^ܹ+^m3 :;/:&^ػs > +stream +xr6_K&ևIt{on-גT@PLdNCN8u~f*Yv:[ aw7''TA7wr3?yWM֓g4&/_۟TM@A9ɛ|;._=Ǯ̫Kwus槓W7N&0ƭ~Cx:t:N*O'&Al|Nޞa1sʳF<5QD)4tdQ:p8x*Q,0LG&?le-Klgw|l>C'˒ȉb^VTb9 dQ 7~}z{Py2tM\S4YSPǖUA2vÙYט %z>nXr! &SE]͚E +ۑ+2vMyW6fV-A(-W_g6ްuw{Y ձYo\(Q>xiw I,:ij8TZ#~ǸM U}Σ:WNƮc:T:LC*BִH4Hb+o~Ca*ɂ$V1` NH%m&jU=xnV۳zv +ͬ)o"Xg_B"0CZE#hm^84O̪lh9 b^Z3;EgI@P?q#wr2/>E +E..V#nًHxnqU+j% vhi`~j,-e7=AhKxppLcK:O*$?PR:nNz7eey`wl|lA]-K`p! \ұ:\xJI'ޑWANDdC]4d06iJPhbx֚Dr㽴8iڬXxJ63埂nq;뢠CHihkVdu 6|sdnsi $W,Ye%P[k-$.$N#p!YiKQ"vTp"p]>qϬfuIweUS!+ ϏZ9:J&cVYQMHin;_}dh yZ;Ivbo Zi6!kiތ "43"<1y P[TvV2kZ!,"߹p2}\ m )2(xfWЂK1լD?xƺ[tFrb9nր}6GGrV?*bYˢF|/$C<v[l+1,ulxt~x+ؙ2h>QP9-y cwdV< bb` K}dd} ;ME[=fh +(x}`B"Aef3$Ml-&@G 6Q gAF{/q#@t@GQ$LgL+-%lOQn)fel/ZBL1J"M^ĢE@K$A;9F4Ɠ_SFP/b= JgBP1Ea`venY1LQF{7/7ȤТ"[n6V< +a0ؿj=+~KJD[f$G)&4JH'y9yIN۱?%G=ʩxso|v{T1n!4Àh;`t> YkVmͭi-ڠ'w=MxKP˻8\78@eYQvl+ˈfQ,;0R2%[01$vϲ#$\"CXku!(q':P'hG 4D<ݮ[`UUz$$px֣J2[1=l\(;8Z75z:ƹWk_{%K r2rn,)I heU6|r>1{ 0)ʺdeC]G4eEjir7Bx +FېMɱV82KWULxb.fcmJ nѩ':770ۇ m :}]V5V +Umd}#} n)U(JF&7w\Zpau|ϣ&\FÆ =ЧS${nsW<4‹,-vN&~׫~mI`M+jg^idƸlg&M(F#rI.$^BS.yOcHWaY TR]]|;2ڷ?}:D0'Jt`.}981~-e~?^#Ն5H8kCX^욦t_\՛d3S_UjњF:xĦ.zREaxoo-s9 /b,osAT$KBCOgpfwfhJQ~d%wazVƾQ};M"d[?fFhmCی! ޳\A .=}ʂ0H۾i420ߨ<@x˗Fuendstream endobj 6030 0 obj << /Type /Page @@ -26975,29 +26775,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6042 0 obj << -/Length 3667 +/Length 3380 /Filter /FlateDecode >> stream -xڭ]SF_K*h7HdaW{WIFneˑk-UXyfIz:ʼnruVo3?(X‚ݏQ0SzlAg_gOwĹ+/nO?^}볛3 `.qreG](I?N~ݛ1~>\&gx\ -߻x.!N:qDB+]Yznċ/|8}fX$8-sf;_ycmrܡ?q >'Q,w0DKOU`: _(MJgi2 -'8kGyJ#Ef}4␽8cjSdF+B)J0zC{ IK\((nd2pX+f?4|^;q@j -˛6kj3F (A~QY d/ A]%hON!ۊ'e@Hs`2h88-S!emk;*^^^4iE֚c#q %^:[`Y8+ iZ&/_v8r6|d>\L -ܽv .21Hɕm:Hf .E -N5OK"bcNɊ2 x@eQsL8@ji  V =Fܬv=uҾ/ 0lGg;^z*m )|1;ͽ; _L# D -2xEXieS;HI Ddh(~؝˱pj5楮q ޣIrBqiJa`ź ;۬IqYF" 흾ܻ(gFu\4(i^QJH;n¤?:Y 4t#DJVHc샃֐f[ ؍Dțmx*;:%(7yTUcۼK$wmVj^ov|`Obq{䶮l I8  ő4|wMǛ>.u(Nox:g (\/꘻v/Ζ41.Ἠ< -FtH[جpUd{88\6{ڋ58դdOz$rWk~dr)s+_y-c_%uEMEUNLr6*u0t.^Hy輒\ -_=W -[ӌKbdɳ}ebO!ȗd6KKs3ԵFFH{N9^_*!DmyDPPl'0S=nIq`q}UwrP Og -`N^(vWR\ćWvnRIĤcR G*eO]^Ij^RK*slg4D`".fl/)37bv:.4{ME4A*x0=MT Sbb'P5 DU,F1SAO=P<">j llѩDZg|@2 VDe>caبG& #߷=:OFiK2ڡ*7oт@22 ɖ3 Oe7T-w0E3yi3I`L9RP,,9a"*ebuJ.$:yN_ۇQ$E Jc1 a(;UIR?L5L&.@dϣLBg>0i0]AI:{%mk _*ek9:"֮Юm+r*Mbs2 fF˵׌: -z I "ףBg$5HvNIX4SY1"\0 A2>Ur`~WbUhQN3lfjauetp#2>ydt+N5^tlsuT -~0zC=Є Y -b -$6# ۄ~JuOc7{?9s_S,G秩x4,q c$:a46a-'}71-Q֘߷ԖFN/><}E㜞P_z=~*-g~m.Xu`Az0}M0yC=Є\QǣrBg:fDFb@%8R9[ʲ^JHp3.'m2Om&b)‚>}S|A>cQ/un̪O󒯮%R3{)UI'Q;D @3|2 C'>xvrZ5@ֲVQS|)j}4n޵?|%0oC<؆VдP -X)!_@n*ypSqGwNW jsL^ag"? ZElZe߅1`b L@=UuUj UB qv_&TXu`pPs%5tTTHgzFx%zʪ. 6&kp]8W8~,|/~58.ѓb4늉o?V7\U^(Xw&C+2A #Kg>ux n},Lw۠E翑' uL!Gxb4On4~]u{Vr!b݇PHz|wOdgҝ`46}#&#@ȮtT8Sp&X`$]ȏ }c]!Fw&teշ<}h0ʼd`oYE4x:D]'oS '[nOEҦuH.u 'ca61ɠfPΦZuB -4墲!lH[_EewD|9#Q O|W?,&AG·`U --_*zXauQ↾1yKYPWttt,-Cʽ?}7!#TWjSy!c#Z7endstream +xڽZYSH~WtePQJ3c0kzû13r#@Zɫtt zTgfVGɛL S1jϝ@O{pgZQ]X}Mfk9zx84?ıqOs [<#<\Os8ߝ~8ᆳCl Ɯ{'%Z(@Rwwv 1{xv$՞@ދ˽vp )?Us/༪>=+d2 [yuusg-upFv ^eWxohos^b? ox~hpJVI{h'-P(Rő/ hN[~iE:p\/#2iĦ NsNZd%RBʬ_&j[38( c#ݡXcceK/6ʃ-X:['<}УӘJެf;o IҁZVZbh)+1\1q*$ϖ.d mb&f<=O%?:ɕr[U =Z/)V>tԏܑ:Ђ·U>nQ&r[fe$Q3[0:X)v( G7 /lMGh<&rmm[Mc!*^+s:kܰ(x&77t1FㅇTŃcFK]%w“G`@lA<ƺ|Gcs V9>BN9]5QvíH{PU[Q}CdIXaê7$.SH{ꄗ30S~%̈́;}š`z]6 9Nt%\Y0V6=ZCF oi3Q}#g]['vծrOO\cY9۪zjIe-:#Kfbc@!uuSfP.P VzKC%o9~)= GM0KNnj3"JE ku|9Ĥiƥ9iN/TKpoۺ'\p' XxŐ"Kfic-\mx>t.759wvu#ϥ8Nbr7a4;R (AA,<_>v$[qQ%AmsL^əl}-Hh=&fgɞ Cۖ( L}=5ڴ6IWu)[Zrndu^ K +ʇ۫ z*s%B1 IwBR!,|/$2 m.ُ̮y{#~rN`HDrvxZ)2K1;)hIK 9wj:`F,ho"+7L`H|mUlS Tɉ`h~ՅQ(HDE6\ p/Aj.O5s.#d!lR5'xd`S~5񔉓٩x U$@yi.x@绮p ෯0 2M,2y>} M2@\p&q+>u%FYm5ej*zʫi9@j-K')oQtgVAt}ègQJ4KJVPXT3$މ$kv#v~ +#=e#iq7 yւO唾YwqBT/BF2 iŧGj޴lmʋZlD~a4zK09Q{]G$fbN5wyx5TXbt;ѩl(!t ` sR +]H W"֕J8mFb%m[-rzڵ[LVI^EQk-]Lb AגCpZj8H[y0,m^/U}.z{^٦1p|$p7ttw*_00c}MFJfpa>pUro9+2Fvce pk?2$qv:+Q&,T5٩ajP.9ج+dIYA#@3'<=HtD*j۩ $$%Y嶯n[~-ThNU̔ɕ&RX9oM|j>`?}h& ?pkPfE*| $N r+yžEfXa$3O+ov\Edx!|#c#-Z'IJMhbRz+ Mh NHxߺ&uttL|mP(Hsvz| O}\`.-~w@3-OҬ⠪Ғ|YV$[y}΃jv&PQ`wS6 >g4I>N껁Re"K٫y_K9=M >{QEk>n+ +Or Ѻ;[| F'J@vq0S6}h\ȡH;0&`7o|g +<)yfJ"[_*mmendstream endobj 6041 0 obj << /Type /Page @@ -27057,14 +26848,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6058 0 obj << -/Length 575 +/Length 540 /Filter /FlateDecode >> stream -xڥTMS0Wh,cZD9+ɤә2${OO+ 3+|v+ =̇299+4\u FM?~LM+Ry[a -,ILn2볋Ø J#f8"޸dXv}щ'kO`2\y~b,8*Aoh>/i򥓊kEֱJhYpi1)D3wHebԢߪ+,/R=V2X^xɬ܃o;jB}X.$W&{b^EL/ - :eoFݼ'̂{mٯk4[81.1s"(C 6]"g knXDļ&&B}2qєGo=2idO5Hَxc4ȴ 2z$z0Xom@/2-pO$ =xr]\Zq -[kn8v-+߽Ndd)ϔ2vZ XL7Na)endstream +xڥTMs0+td>: IԎS58_ δݕ ,VOIVH+@`e"\$CHf--}ynHg<@4Tmi2"͜+Y^J37L"drߜ_~.cb4)urDqWWIY(Ɍ0&)ݽd Jо`?1gX-ѻE2MWkEVρ3r +1;m>Ec Y&$waN ' b[{8[n}©ph@H㽎qй'r l^B& |]}aCǤ@]ScnW ";f7eMY]d#bR.B'SFєDj_z@ҎwV܃=E9o-1#0xl#A`bi'<6~|6vE<>#lph\OrZFfXF43eA_v?N}hFcF-q!lP(endstream endobj 6057 0 obj << /Type /Page @@ -27082,26 +26871,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6062 0 obj << -/Length 2861 +/Length 2443 /Filter /FlateDecode >> stream -xڥZKs8WT&>s$v63kk+ٚ-)+mV* hPN|''I(|ND -$ğCi(fd֣e~rzO'nP̗xuv5?δ֞ -tlj|*|:(\1T%ޗOs3l4q|דy+]$IQO˟,aBe_Hޜl" OnNN}G !H +xZS8H9Ua}ּ\;0p}0!.;;d?!f2PsEUVSBBĊP^H7[p =E3",v4<8=: XH -hTpS ;22GQ>%&O^3R -t,R" C )cjH]ViېՒZ4!d'O4L+Q駍|@I'N -U -GMHaX"Ȥo22D)^"NDET#@(|tf@]=PiXX"P-H6:.a簰sKíuE266U9i-Vh#pYUQ: FqG+JCp07{5/ R uXV !w="_P: (KX{(ubM4a{.R[28 5h4[Гrm5kͺ]"jьSBу{>P,JD`Zh<\D( לlZ<q8P*FlCݰ[0E<(-%fŵ̴v>x&2XvnQFԍvG3Azk3 #tDK V`C&Bk\SŸf`Wc/G7JC q,]Z0 =v)x'6;d7u \c݆ ׮ϬmjQ Mc9@0D/ůπcwf2!bW]cY<;vN`a,8h~l<8hVLzfI! 95DxPP'?h۴`w#9fΖK'T#(nl;+J12?Nc!cޱY"d17?ޱ>vmBX㎔B(Qu 8I#r`ePt++'?U[jO־PG1ߐL;5FHzk(珃b؂dh@QGu$ ,"9;X>ݞZr͙{mJq&e(HD#ra񫄓aA!P=AWx+ٚ)P3 ]5YA t:`-B[3%#oU~O1H8~2DH߆`RfOSVF4!L3*&e*Ӏ:HQvTWS Dx$kc?|ppKڠE}W__HaaQ5n@?&ϱۊZN05+W'. -L98zP%}K*~ŨBVwV(]|R*"#aey4np!N"uCbWQEdL^[CSm5_j3V k}_ s8|0M^~sX,k^.[IUjà]UsKo}X1Y49IY[Ls~Rm+hs޺qA"TnB%+}@9xN?/j*pa -hÆ_D~-'wIendstream +h?NXuNBGJ i'ШpɓG|,O/ +p.^EzR +gm{/J@F)_=)BVD݌ә/AF,턂Ok,Hht(eMI,{ +crNT?*.jר{LC88[a識8z|s:`YJs\c 9!mYL.Ff:~3g><"9p +#nꞧM7H5Q?\Gb`1!^O1Soqr9|NiN3A^3l/P/ȉvvx nnCYOmtVP56͗uaZ1  U{7ryY0[6z6p-:Eh<ˋf41~P٬6BG +P!,v΋EyO;eD}_⋲hMweY5SlQMް*[{uY-yirRNKl,E"/(-@c` ^MHӧcnZ%p=!۲cf]L(B'$ Ƅ*arpDUD[a0I鴅FH R?k[D8lkA Y:e&yP) ᎵYp\Iͽz9CB;eCr +.WO F?8]kd& :b쭖K$p*!yE뤱w܂l= czCP +:@Q)8O#}Fq2QIdJգs,0,2aTF'q+ŋ0,ψ)k𢍷VM`gƔuE)C4A +te:JGn(]Fm`{U9$y󷑷x^eS՘̽5ɫ'_}5~Y=Ś0`hRX: +d}%ڨqb"(mJ#!Qb| L(L|߂A {.MSXM;)ECrN{./Ck> o75\>Pn:]>`Eic~.zJL,R/ף2)g9*kPBm4Н8}p;ʊBp7&`Wz0ީ`o~^ӨxYO{~laO$X8CCs狖*:xmZOG v-~W@3m]ހyFbrZF8rΕ9@|޽1J4jXneq}k H7gs=;raYr*+٘RIznV{5|\pC@/PW!6?v;ah[o :ec"G7Sendstream endobj 6061 0 obj << /Type /Page @@ -27176,25 +26962,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6084 0 obj << -/Length 3250 -/Filter /FlateDecode ->> -stream -xڥn_!%2I.}KcMS;>-RTH*NmɕD){;ϝŁrt2bW8 g/\X‚iyq.g'-z<=[Bk=|ux~}s> w rҋ߽nܽ-/^zqJ$_;5녣tϞa( Myqp3>5$@*(zJ, -8>b]!#w -9/<ZҶk "E)ΓҠC5L:`{j^G%DUb30e#@q$fhw\Xm&zKϐz5l: (K=)Ew+sՠ˵, !'ɷ5?E'(s,o㐩͞5q?z:mʒ$ -}FFt3aq3GW@@>AT;nϹ -7!k#(tN^@Ћ;r6$۪-jN08>"ƷzOECoNWU]3Zc>~|T<:J){wڎ^(A@Hfd<^韟qZ2y%ёE b Z\U1˰Yk'uݰW(Ͷ$̸Iݸkd>b I=zۼÌM DwυilXuI+z5:x]f4s9Jq x DlcEE)=C&I^R{PeM8PJ%ߞy?r3\ݧߕAS^ѺEqȃqt2@(t=,Lqh6mohy\C&.b&h:ٶd }H=$MHTjTSNf$j~w|f Ry՝'2O {+ݜsGOm~[K}plH^KqY纁rc@H .FYy4axǴUPX@$@xg0NSuͨuۉ6}jȮ(W)6m!3uTk9NkpޣJfؗږV18 LʷIߠ -xLǜXݙ5:vY;dcGuQؗQ*D}v)iIjʧ%64鷺7J`{.UqR=>k &k.aBԪZ$u=xK!LĒ f?5d{eP#=_ #[XiaR`sBu8mob[~` dQ/2r)j pVjF{lЫ {LŴ'Tj:rGB /<.00UCw~1AJCwc[Bɟ~E9)3~_qPgJ6&>VjZ\6?O˱&L?EЌ 39BW?O,*ɰz*6=.Xendstream +/Length 3030 +/Filter /FlateDecode +>> +stream +xڵZYoH~$W[&vf(o?o$N;oqKnd.yK\^㾛'M'^?%Q:7 +ʼ_Cib}Q_:akz_}5iYq;¥40m] ޼s?scrzA#r76A($^QE- +a$;my&tG>\~6tAJq +Ogخ 3p@{ir VL#'QjxUFIPe1T艬`gZr*ͥ6h)dL@1Sf( AqIϐ+ѐ'\oYu&zKϐz5ۮ&4(Ku)Essՠȱ, h!'uopO\ F J"5m7; Ai,r}Wxږ +PIU[^kPԐ(tK[MFyfxCEJ(ɀu]f5'|Nq9E^ocN:s/1f'.%KGţZ:֏\'NB`sr wsOŲ3B 6nGsb?yGnY?`Px~V7$5gQx(_!s?xŇ9=^p;p,b0t1\QQ +d>qH!w/%@9G|~,_Dz|׉xL5, ͣJha(Gԡ n4|pauIyL q _04oZ8 F88)̞`*F}j$A"]E< +̋ܢer]GAI 0JG?j6o"w,p?*WePJ+R!-Ρb58X7#"bbX⢨[[#y┘[[lƣeͩ$OG޴&zcT/<iߗdNJFIkE1so!ϗ$' ˾, +ng| 9"i/O4P=S?g)s^~i_($oh2֨ +D5 /g/ 䨴I0EujW%^#9_ԋendstream endobj 6083 0 obj << /Type /Page @@ -27251,25 +27034,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6098 0 obj << -/Length 3252 +/Length 3151 /Filter /FlateDecode >> stream -xڭ]s6ݿBӗP3MW|_\hTH*}$(QNzӉ.bQ$\O'(]Ǔě`͉/3AY8^f{n%CO'pM'_n3;EQ_L}-Ograbջ \ݜ! \\㺛o'n_$A־7Y1~;\ēo0\7'-듻wxLx՘$Z -^V&ԝgI}5 V@Q -|I?Զ!z׷k(WEMUQ`@t8f-Ewnݎٻˬ)Clv}׫ osa-dG w/> ߡ^uʺ|hF>} h(/"OVay?-|3R6&ę5*Xb;!i?}$<NJS!Ƽ^3Эw0`p8m&K>s-V#00g( \U%M":m^r}H0EΟ^)0xB(2Z&1Q\#,zxoƜk0AIľ8b&53 ҥq`/iBgIkR !fҖa|ND9{]ț8~5@mC8{ג(F CWE{DRno6YQW5 ~/A-GShw2MEqei52;cbcL6)k-^W<KƼ\/Z8]ō *k !Hז>א's(o5{brgOL*uabd <x;2l5S BǴiGR>HqrFٖ9y?g@ZzO^5oڭ=C\jw׬p3@oPJ Pߚ]T@yÿTzKtR޷' UvY3$}v5Jħ3.0*ysO?rh_Ao8 "Xz'HfR|x%|3벆 -ܫr!d1?̓km, Z+r|CG}Zzt0~w:Uk´9ל|Q(!VVH}w"ͨXHTnx!E♝"k@_čq2)`]p9"z_WK`G D#?[^2<JBxLȍt9CHH}MPJ #7LD'8tv7% -ࠂn!Ҝ|gD35&cjOKt2`,csC)[!q,I+zlp$`ȫnCޤB-:y.5( gg<0nPKNbrGF `;dN١n619Jt!>dVgi//*Q|mn{HW~9Xej34h  3eL3:{}3(y{z5rSk-[0gWshD< &uX) Big7Gn)|'~BF8J'S N<o:Hu"P" ZWZ5vrX˳QTICEWȱ3_d ,v*}#b -9 uNؼk'OX—U3>̃MqGUk^ɞ M7];Lq'G@Kz. ou% bqd -~S9R/=EU6~MٮS -j?Ng1c`@x?V* "?+n&uWCI"0ʚ^jBtzSP؉Oon{4Ϝ0I/jt,2Hjti4mWY|̢eS:֟ae,{BȞ:e[zMPv3J0y~U6m$Pr}JE{}?kh7xf(* -y>Ҏ *݃v +m@<|( :m\zz?ZZpO݈A2$%j!\@ s|M 4^H1A(` 3_n(GT *&0 C9V/%LfÀ;m[`[눞9G!B'0j0% +:eZf{a:i90$!!j2cI1i/l֐` +ϙS`,`PdV܏ؗa.sqBr5E#n93opt/6ZǍQ8BrͲ/I5ø.B`7a>e Am۔M)p!ݜ&0CWn$ ,R[ȅ/ ۈNi1# 5o=f**5NH1EShv2uI1n?#ǢM~Ʋzg?\d1+5X\2׀;W`!D/5-C;Lˠ0^ZT PƠڱ(nQ1{b |5OT๹T{9S;0!2ZlK1 !:+c\5%>r侽 O-#ߙ6VsАf֜w鎴j#v wA5+vXcI)W Y&շvCZO['\`q",|XKv +m3p)!hT"NLe#1 +557E2Eٮ6=_"puTrZFd~JdؾVsL(qtuyOlpMݐ0}57q{xR0e  gF^K^s/_\+@eBY#єq5+l!+yՖ0(.3(kNJ(tsEw>Cv TMGGCGyAQũ֐_o% O'x9{QrgMNɅ5"uj{ Aa'W/ZSmB+2r؏é +(d4L9a [lG}ںm jL&N,0SƷ6SN36}v.Oƚ6Dc`O\OdTAPuka pjR}iZц!82"^Q/P>wK6+?hʉ+% > h>˂.GHӊ^7;dRSHVu?ËQu"i$ccHvו>yCYQ8G;F6 )vE}U)Zc|CHD)$>UϮaer $oc5OqA236v$JJ{ $\:6X1 El e 16pOQHI7ۑ !i6x$Dn?!xU^܏X0Q5XrkM/#<?q Bh-. sȦmmY'v30QLbO8OόYC.s /;܏GGRL!R+r`E6Cs(LY1׫|P{W^HN50I+GB\[A廄Q^RXKw~lU'(լ2܎c,mu<<4P#>Tq;.<+ͶITs̎}>}HuͯA7NQT` o#wE^Idư6*<%2S602U!ik +ۡN)hR"?]m?dIO~a]\q9h3B0ӚES='y JK?_KS$$M!FCA?z5eQc߮endstream endobj 6097 0 obj << /Type /Page @@ -27311,21 +27096,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6106 0 obj << -/Length 3490 -/Filter /FlateDecode ->> -stream -xڵ]s6ݿb3deQ%w&n6v|sWD+ܵ}AJVddR$ E"U~ "I/tq; [DY90_G :Ћ̀G/gWo+)Fr$|)w?˕@A.{ë>Z^=O20) J>x"!@"Ђ D1NEmVy|t,>"xfmN -g@TfM0ByP8ɾw!x7L 1\Uw&֏?mG';C9~h7* &/lx5j - #21. ڲ&uXCclHʧ:pό#X5~k78x -$OQ>Μ'\?P/$Iw71iL8GT:ki %yԐ ICKaHuK 53n5sq;`[Wvd+&{/ثbW4!2sr`ʻ- ֶV(-a,[H5TС?;#CFXrmsͩ@|:^u`z?D"-}-㧅'UC18`pz,?GhczJR0C9fI`|qah5C%KÎڴ<B0q];Νrsa<" D44=PEFq{/^Ȃdg\;&:c;֏+ڳ,ny) A7E_mIXB[?49wWAI쉸c\q H>^9፬| `{N Jڻ22!ºw{\+p$Lf{)icMh҈qQ1CT?H!!bcVBo06>.9}1 Ysϗ)*ğ6p3< ?k0iyN='^ I)xrR]KG#1gJ0e QJ΁(cYdC'gO1j6dy;LЍ#->284s\̬)NxC^i/%x*.NqC>=RESǑTH!ՆT}3CFjnɆ(u3`Fiўt.*LSwEq7] ,0p\Gb*2pm8͞ɕ_OLT,ڞ, 9+Mc3Q>/ FcpkCI;E/dbvz -IZ G?GRGk k}Dd~Y")i!I4iBH_ F]=ܜb4q'zjF6<wh^[ƷF -hie-/${^6 ` -OR/DM@8xOU@}~c No2oP`]C@tYɑtyo>-~$ɵ&~ f73jɵo,&>28äy44v` 4aZOvaj,/ysΡ@rusTAj]RjsX fP@)uwO>80|E TCqLK5A9%ogSSФ!_O_'84׏J%/vyQA'yhE5Z9=&'5:Y_{(LW܊]Yq \7MD -H}@y}U 4zq.fSkzNI\0m,7q/^IkvfTKo4JD1kltD66zW`Vp+@0CDD0S -~ĸ<' A煹1g70KytK!W+|9>+d0́' x"+poQCz~Vl)79dTZax̕XnBmROrםSJ7|Q&)whL4# wIHMMCR1SvD2.҉94z5h D/8|p0xQ JxڡB3= 6# =̂://*YɵdMVSW9t!f 5-Y(Ks@mPU; F+#k2fQ#r-GؤSuCƯ>+ 8=~Be9,*(un6o -j+Dߌj x:q:ꤧW˓5u+AzXzFDέSKc\,0xRNF4/ʉ E?:0_t".똤tC! ?Z!<@YRD,Z'\ +@5yxL c |+Gq56G_3\[~X,OzogQ ($¹o2j,A/˥+h=JW-μSO>inWP䁗/^/aN#egl'ËSa҂J!*)? $Rendstream +/Length 3361 +/Filter /FlateDecode +>> +stream +xko6Ţ@qZ +"`?M&mrv-D+ܵ}AJV+L3ys"?H#?z—iޝ-x" DP~G8Zׁ^\mjJJ_$/gw\ 5t.2L?xygpG9u]tr~`R%/5`IK.|bw"GJ?]xN-x +~`'0q2~449 - +`."qIQ^īX!9AZ֒g>9,;xVF)NA@,Z"s43&%{652^SUHQ& w7f׻6oxhp7G3Em;ga +f]m̐i)BRqw+H{7Ykg¼i*34-x!9\ +c$bX& :iʎEY9lh6-ʥBi" +fÇ`#¡CفmKOO%H +Gqr:_%H&U_dpZa|e359K +,*m2swLPƉ >Z^䳝2<-`"pЭhF..AS<dy]f՚_aVa_2BnVϬP[̭ 0$%m=Pl|>58&֬" WwɳEƉPvtksZNJؗzkDMQA:c?Bch$bBL*]Y!|]q `[1VWDce'Ɯ,5~k8x -O8|(P'^Iu#o3doc/q|u<,K<!ၢIKanuK 53f4sO8+;dx_bg{mW슖٢}h&'J:`4I5{ 2k D]}4'Almҕ)7}$^IgW0d9XIcjٰ-"ѫfY#(LTiX{:"C_ +mI:O1h$ pK;sD}1k!K&7~xn" fYOݲ_"d?k3lfh~(̞/I^@QJ)w'53(j*]Lb?Jn0!{ + Ͷ$Eqo%\ +iF1tv%OK!q͢w.)6jgN9>V+Teֹ)A`ŕJg5OaF\ HܸiC͙ 6#5CG>j@LE֣%RC4~0 },X.zwݕ`wc8܊1 醵 v5r_R:x2PqH$5>tK B=8NI*Z?gO@'VZRJΧfr|P>͍i\1脩ݾn>~./5Rc} jb= 1U PQS%D3 +m_P-{8֬%Ƶsͻ D7(ɉf3ϻuX:@}1p[ޙO'Oh J칌iZ\k mXQJOۊ}} C-L9[ARMX瑸΃bpȬM˪uIlZe#;D"+hOyD Di<ѿwc0*!6w6(S-H-mVXl@srz&)ꌝŘ6 pT(yE@JqCݗ*&8nAH _o/o' ֛n5>3 Eq-l6QA>!ʇiW"d8Ϥæ(E!%D +Wq`a #JnO&k6xfT\4皅 1kX4 _lk`l!p-0CX=0c `jJaV&Ű|\ `'A Nrk^k6s)gɱ/$M%Qև}= +9d~LmOú,ɇdLrss 0+faLJmqS切ǕboNC/&Թ0IA|c~Cpt4DRؓQ/̍vw!OJ hl +ő$ezģpuM0R 4q3)brrF"=g@E={zc|>IGP |O|QY{ +#a=%aX%p ACGTbg/d5qOY9m*lz20в9‰SyZ?ț-VQ 0!շMBw#D+4ġ jZ$5ijɠw7jQ^ #d<>a0^3nΧ7WATҩx=s f ,-YxJstmPU'#K35Q 8b; raM:5eA93gBP€#ϡ~ZHRN> endobj 6115 0 obj << -/Length 3968 -/Filter /FlateDecode ->> -stream -xkoFP D,|y+(HKQqo^\J^AErwvvvv޻VQGie(@#%x0}*1#y80M翌_9y?=/U h"] m -hz\&Љ4I$I48e+1~$uYIQ"^ lQM|De/f51I (K[X%t ,1eԍEESZt%BǬ^B'ۛeDY~̻[(S - @ -(Öq'6!UCw}DY8 R 7Acԯ^V)0IA|)͍.a^"P6.RTn&kZk3տ,JTÜ8,Z`nLN'dt*%"zd-j"k՚ɄA"5ˠae ]aV{nC1-ֲ/ M+Zg&DtܐVI>Bq:NNph;4urgNΛ M =f^ =`eBNq5ܴeC]07li(=<[J [TZKFźQD>(ъ"2Y -6:#P z*~hekp=~I8DZgS{$?y*U@kuXW=jpjOWN'zx6U6 -'N5D{.ƏF"- Tӥ3PpO %<ՠ#}dZ'@!E20 [$~4Ab^]W7wgJVфTmlToUԦqo}V 3_z-^qpª!+G<|dX TJrArsHAso~erGTToL..b)Q*39j_u2>\'wuʏve.')+2C7cT - Q~?{o^ -Wsz{~^4F=ƪ^l\.5lW+2>}\myɻݖc~_7!rļ !d~-ӽ s8QM}Q{V߉/La}UXWe~t>lhӜ^Dn{c -Z5=A?͇:{g!kw(Ql2fy6(Ԁ%5p˚l3pT`U;Ipn`#R{w:' ֹoƞO'>g+,O> -ܵQ<3a-_ַulm/awXݔtFyLz -/G\ҝ7=s=i#+ DWOfR %Y)4$ݒkӚ$:N"Q$a2BOE:S.zhAuZY' ;!9B{ U: hӫu;cժ<\Sonnw6>9lNdbG7F&axи2:r-hOYV9Rʿy 9*T3yo%G` kzтPL꘣1Vesjz9K˱eoo0t30@+ 9spK[r˩>^So"6v6*M xTJ n' xҡ[txo0]Pf*a%V&!3D`wTP2Au&|ʼߗr䯅_6f0zɿWX}0,~x?,#wnU@tZȘ_ݖ+E ӿѵ84q۳S{0Q"i:3Wݝ4Tt{@%a4Sbx2e*nM rp7R}Cy{ER^GяA߈A-#eige3C^]%endstream +/Length 3779 +/Filter /FlateDecode +>> +stream +xkoFQ D,|DINV(ڢ`$&*.Iy-)m}:u8QN?GJ cQC}*2R?=dqwTk= w2drv&WTMB< Wofq~zq]fv.'?Ͽ=͝Lg"[ǟ%#ir|mSiz92B{}tu c5r "/}/IL{rv |IsEf,*;hA-f X@&dkhB;.H>L؎ҔHO~kxe +B+YT">]nmQO(CSM 2hzp:E]}WP#WntGFLx*=?L{#ћ2ł.;&nvh2ع{t9&o&kx8rnAPfBXTe- 'trID|95dYb︄Xyq>D\{@&HHDTɴA 6h]+~妨\D^s֊?hvv.IN^s7_V6[<\:i%o^Ty.p Z[)4l;l${ %m˖% ++,N&] m2>^6 [F@E-2Gx& @LЮMMu)~xrDz@tUYm@Ew7[~;C#ܒ?0]YZ/աg}iTښd K/E;Щk JzkS[xc "LCṛ ?>9w5J[#MRBа)}eſh$u}V .}7Ls75e+wpm* @ɛ+D %K&-QNY F+BbQdU|R394FYϥi_R^&^^oe*_{I`Db\݃j\eD\L` ]Uu^1yjvyqz>{2 BPPO#H"d$lECI 12Tl-!!/ntl ǼY.Ee`SЎU Iףf+5^b7[nPQ~8I8RM+!峺j͸kO_̊aN>XASy*x#F=ع,;B0 fOEzE + +o #(IP](ZrG!X i1fXc,8:/U/=L u?pRD8,z"qJ &C0øґ\pL"݃ŕWL7b&H:X7L2$V7 i1ծ=ߋr*wo>jc}h6/"g8.+CMp.z!#ZDql>{VӀQ#vXJ>(K p=RŅ[zҪ_X2EkZ i %X;{qb~SaJz%:_\)9eB(ruQB->qR H57:{R~9Q0EK0kҸ] :|x^Y;cd7o}ڋZ%Z1j&ڧ|3g1T jxzϣ,(U{_-?&:U-ٰHyqja +f%)5C)ekE(zr./+WcԺ.ۈ II`(SL6^6 + 4l_Kr 5H5EӶ{ġbMP/N~9?}͛OJsj ,HA~,/Kb /bWUw^pSsWlIc{ċeΛEɿ򮬖}OWGtm,I)?5~*"*%$FhߋVt ~aZ[Ei_P9D: uO5G{Y"4G(k]skH]P؄[5{V\ \"e+!T ZDHJ"P#ju~\F?݀–ڲhV{Ƹr@Q\?FR{±&l5Dl[ӻ-q#[n.)# 鋉v_=dk2tF2|,2nt)~%}$\w'ìؑe=bŞ"Zh/y`%mBpgyaGLwa9D _'pĠul_ٗ DkXsGNhZ?e7 1b.;@UK3&dl/Ŀ#ccuS4i:#z?!뀏`sX>Gnv SDA,)/0}&^^ v4DmGm) c Dj4'vt*KP{+^[ߘtWQkJ|"Z&fVQpXt^Xcw]tH KZ;C4XcAeCx. A{ex>endstream endobj 6114 0 obj << /Type /Page @@ -27414,22 +27202,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6123 0 obj << -/Length 3060 +/Length 2506 /Filter /FlateDecode >> stream -x[s8_35O}-צmk(?$ږUҙDD q0Q hX޼<uz}1;z"#Y첡c6j4mdK&0O&b|3MbgDFw/^9oOKs;Mtt2Nbdϣ OG8}6g^7fr?kRN6IT=P8tép|4j) -Y$ 5k",LC#-RիjM`<6|d%PO^}mϞkB` ~!?nOIpJ^L+ ,#:DxWDLq? U$)_)PCxYC!tj !v͔1άQ 5# >~k y #d -!d5 EP5:n$/{kH>kx#|m\]iB@ceHk!҇ʀiPqf"{o㨅Je'CJ:3b($Qx=O6oN4DL5f<ӁMK#x}K% iva[c!i9 lɰJ}߅%׻ I`\O&D;vf<^>* 7 Nأ'E,oHiB~%δ - -j -X &of2((+9UB,5|K]tS^͝Yaf?A:%T㌶q~;H`pWHP TCzn)E;~ɿ"4ZI82"fQO V^xUGJ~'a8` U'ͻgoX cئ Ěu kb\?{T95Ue^>?i7?Lm(M~Ymܑ"y=E.I BZgwuI%t>l.8;vpNEn#E]-~ֵn`=tԷVH>ӎ|wvmUp󩐎;w;aߩ9D -aq׫}Avw;O;舅&xxp}=GifTcEsllRֹ/EzbP\m8<`"Y%X5 >ָ-ց+r.qLo0M*ķ"m}E5?=0Uu/ӏu8[' -[1R}/5= .qb<ִGq(*]i6Dia%TFklv3 C ->G͏H?V]_V(PY̛T[FU&Vhp @c5 dj =sJLO~t^qVкE1|Q$LLtn`2Rw]TBjd,G$+Osu^N}JhY;ϋvR}'KԨmʹU((:b ~W 8H)bxtAN3qoq^i]m`8ws@PO[bCx׹{rmN#2]sЫtMW;etR (`91 Kz˜Zu ˧'QJ7D7s}fS9&[.]^m7Բ`#TuL'H:eACzlOKF=0}-!W)R`@pM0)uT‡ȕ <]/Y^XiHBIݾô}o\w@x/wF:.s[oU ySjN`Yj^Ak:Yiد)Q9ղB*]{5 ݜ$M=s.Z\06\xqFPR[ -Hd}Il,\F0-M,{X|it,FYYpw8DpxCvL;|?.0B} @L!NHxU [TnN Ƹa z,ط 6tr9C׏xm1ؓV3갚/Wֵ$ zNՑ"CZ?ܗZB8DNi)0-"UREJN3&, `= dwK}7Y)ړrlq=i +zk"M>_Z뾲`y~x W?ÿ`(P`ˁ'osVSw65ixdh {e&O{Ё߻%df{ck]X*KxJONkR4 Ov~4~>AF J/Qt'ip\]`lBj .h֕1Y)"0g]n$ᷓ%1T4.+?ʣ~ +")蟁KLUk]I[xV'tom’ apP +-3Y8֤pdm|E!RᯈJYsQX_ +}%*wq-] p/}5=`PBxq2>`h AhT>C^) i_-Qj(6F|k\n>6,tu6c~Mro{X[DXMpw+:rH:6?poQtng]oNWQ:x!ӹv̨7#=mDyKKwbsd9#2X¨)Rl9(WiǗP#<}$ӋQCCXwsbCϛAB +MIFe(Xw&^ g|C1u?kP3"]WC|iE焏?-i'2NK^]U>} LؾrUÃk<B+~O_9;22 `.WL̮dXQ|RqxC)NIK&&43=8A8&^Hh}̸9L;>um%͢1}j%LqaEGqB&㒕 -(71r gݦΈADgq:by`ˮp) #|j0w +C^1GPvdA40;BS|"z gaUNifJ&NOh*TE!b'YZA!ⴑ: g<SfĈMυ2<4cu„h(VBx_r[&LG516ARyV3 x3V`{)&"wAP-i9Ծ8/(Eۙj 0}&B'mNA廛"7@m#n>w͹՗% 3]L +m)yo`Y8F@ސ3M(;~+&\$a P qCH*5Ao!Gx1`?Dcʇu1`lQ*8jzh)X𭮭L>Cf_f 23 -)/pfğHU"r.Q7a:X^*o5gltҘ,oHZCZMʜB*ƫt> v8i"pRr} NUI̗e0gtشyN f`V鸞1ݲ|_zDn$D6~ |i\[8l(mK5`9-(Yxh٫xkNx@5=Z^MS 0endstream endobj 6122 0 obj << /Type /Page @@ -27465,22 +27251,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6132 0 obj << -/Length 3695 +/Length 3545 /Filter /FlateDecode >> stream -xڭZ[s۶~t&Si&b-'QҴJӞD[PKRu^(ۓf2p],|OLe:$'zޝ=b̝1YxO'NPN?zu\\Ri=&;( Jzyru_KԄgD(/LQ9 -H/$}/ŧ p+؛WU>ﰿh]۬1]*n.&qu]o3"|w0):~Wu.=ǖtU0h^3nIOz[sg^utƦjkic nO_9Mi1]A)Tk`A).Wq.LCWe3qW%x{Ytᢚ ͉c_3܎WV&;}a2g #P\ߝa{4m7Ys7-uέN$Z2*V7?8&o@OBL%lD$5xg,5-sylJMZ^p]ga3W_xp:V̠4:g%B/#tB o+ 6o4pȘz| -4WZήXW9iZnjt+(5LaiUj,zRtD 5J.Ca(ꪗ ;+9)^9G!pnW}hBSNHfvf^iZQ!xf=]z*+K`e8p3M}]ȑ~&b(8jJj-R*}jü`Y|b?cS7 A Wj#* EymdEb6PmcKN1|^H4nȗ QtkvIl5/8u4|8=?Y}涫TE,wB|mX՚P;B\1odv-F!m<`閕!=&9-FL*=n"oƪh-b+i؂5V<##J%M5+K -i]kqD3 Qnj,?ϨkH3m9! =^(?F0I*ILDqRn4zHz;}5e\6㰉F*>ynzQk(Qk}x c/x,^8\nj2ƀlXa@~(nh]7C2˒! zaHCmPŕuZWnP}Ã]!xo>ߑd9הci'ty'WDF~sk(ߖ*w-''d$uC/Ni8y2RJ$s:F?=*7[JHNS&wnI4x֬K$S@Sȝ;=ySg) d李RټW@Y?4ˏ"7 -gP sQr mJr:X*G%?@T%"H{~̂䱼&5i -}/ǐ}\>}TPN{pI=a%.gGyPiP*9-VMB 8H}7i({t[6kc~͛D"|`d^(rHÇKC98oi=\ زݟw({jf_f{y`;U=KҦ,!-&ar׸u2k'A ni֭;K 1l qbUak e e"qP,oPg/̠9s6"poJ0܊m"(o>'3Xl}а99Qb>Uu a.&Svu`tWr1Vki;v.n>xrB} w3 %Yw8+D4M8bq?=eOVV%e2? -{.2X&Ѥ:D^`%TErYu`Kg9vu>j'%t8) 9:dNYpQ'Y:wiGL@(6d-c_5z:\s+6 - oj3,=̃/ c1)7Fi?= {+e73#2DrGRoQd9pWz8ս׼++Ѯ4 ʶiLv{Ltj$yqrhbAԋCyG>cib/JzLsax0Hk>`̕&endstream +xZ[s6~t&Sy&b-(i˶}`$"]Dٞfp.9'&I2ĉdLVr=NOG!vkym&R?,irw.әr(tTL?LL/pC.Ndz97:M` /O_~2_:;)OEɯ5ߓi24lOT(PI]/O'TOMx3%BOFd&}/I\#^pzߟj ]5ru-Gf Uqu9(4z+yM!{+u9ӬAkMItu2ӬGJ Mtc nqoP%4 )sŪskPa Oq;pa*wwEYr˚iO7.w19qvf#Ud/LF|nd +绋sl&kr.AFeιuO%buc"T_B潑HKMDRwR.oͦۤE +$q>\3ՏgCu[)@{Ak$]PU/vV>r"SH)~9rB<>9֫6}l!M.jp𩧔Y`G27,Cٌe}lıxpURzm;tc[F^Q/ hnKThT}" ,$OKw 5tk̅^1TrS}aG~S2X]zdS-Q 7= H7d[*J46٭9%صq (0Kh,CAzDثo8PI)".R*ea]-Q^$x= 3%]nXB6  +Z]dz`sWj?RGy<*<pBv|C!L:(Y6$` AizoV#onϼ܁w&JC؅cU@lnArg.g'/`;mo# F8|n-EuRcA{[Ҧ#dh \<41I&-x+L.-,{aɍd/S_ub!OO-f^bFkNO9p2xF$[ttS'އΙ7ˏ"?&p1̜P8Z +`̱~6b_DZ{JG;J&G K&A7tcuwYj +`1f1([6k?M!N=Odn嶄Dx ["I=3>ʻ V5y?ؒIP2aLynKܷ  .v1;v`d2_K-E@ֺTo۷{nљK*nnM?T6[ +; 2,`<7xsvh5Hyijn H^ڈFFx?rU %AE~t8za7+9~ jB80Drmt/3l􁓦CE6s=ANptB,M:ۺu!lyK'A\4GBde2 YkE I XϭїC`h7uV 6Ync }XAW9`3?&i\ bai<#^AX9%56w\|h wk%9NwX8+DM8FG>M=JYˌ}?̏!4c Su,ahn}'"*":0¤Cںq3ʴ:͉4<Ρڭ&0|5'1H!6 ExxTc&GPDڑ:K_Gg18 pK-ѝE~+6 +cbl.6͓<Ǯ)4"g?= {+e74Ǒ{)grd#)'(;pWz_8սGh`Lm6.L,D6-( e7y9ecTM3qP!m[32 'äwPW ^u$`>s$5yk?dˋ q {M]9p4*;:] EU` V&h\5Lsi@㱾0ߊ4ō/AGrP7T26Vv?U7NZ,Ru񺺑To&~o_+I^)p8 %endstream endobj 6131 0 obj << /Type /Page @@ -27498,27 +27282,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6136 0 obj << -/Length 3472 -/Filter /FlateDecode ->> -stream -x\YoF~+Q}XxǞ$cw$$y-ZF3~͖xؙЉ"GGfLFQ̙Q0Z@WGܶ&SͿgGǯC5Kd4h?_9}LcdElWdᒚ\~xwgTp~rqE_Asw16ʒ(\{uTx}MQm7ۡS!Nt Z_İǷnW%o7YAOESͨ,,"Xn#u}OLE:n\c =# Aoc0!ş.b kɘN'zJm jWR™HČKmtgBQM٪h%yN>c5HMjkǰ/V0 -T 人u"2"ڊDq[%ZGW:L2mhT8ܨ,C8>~<_M( `YOssaā0G*\_k3M%֫!*՟^jY@V;5!x<_)#4DvCx J~"3qҲ{#=ca!8 !3 mW}1F%X5ƅdBXb+y+;Z7Kxcrwص ʎ{I;ﶉIHm@F - w pK^wi?[1&lh Bdz\/Z*4ؒM`)'4"NxD+P\ -9*wGWS]6r'X+oXPQyg) -@G. -'l'`./Ir7g?[Wh$ o*a;R+ZS.cF4y](a:5K b.wX;?yY[l +^p5;;o"! scZd푺s;/o|vc8F?A;VY}0^d*>1/_oG&չ mվ7$= G_y{_S*_C;3O;}3b:>D1& Bc`$w %)XZ%W=:F'gEOd0.6]X2mZG@܌bZ}4Zy0~=K#w^)+L~]xm[x.L 6hNlѼK",JD6NRD'0-rO|Q:1J{$UA0 am' SS&cYPDr[{Pmnۍon#bǖqQۇͿ*5 jݦ"-}o@&pN -I`c' ЛmR]`rCeN-. 9mHL:VZJH?ZUƎb1}Euc.隟̯A>WD4^  k&Ɖ13w~Js[~^TW֜Cji<3TڥeY?9:[蘿sU ;2Z+2g;0IO m\/c#=/7)|NX6`aMO|JU=&[EDá,L+s'z -1> +stream +x\oFB(PTk.g;uqcZe^(R!s<%R\l#yfvvY30U|)F7nalaVkxpҵ{7d88>;Re|/gH-<\rw}7޾| Ώ.'hsz.? la +Ix_fo |` +;x6 vplߓ_QqeOOVSh)@u9·4~u>_!_JqwbRؠf]$ ,P|ݰ}"C7ΓE,4}#:Ö(TSs }J|92-kƎPs +>OPX~d0[/ ++)pcZt,4e[43L$N܇lW`Sl_fh +'a~ +DwhP\~ p/}5B(giI< +8KY?`وOg 3Y5) QoyzتGԏ7YBjtr +# 5-ac`Rt`)XB];Uh3΀=Wi +(4*%ITC"6-ffu<g? =ۗ>RfwQxf{°ß}߆ 5f-\?,t#gqQf)oҌ0B wo62K:zv_9$E-~{0|(1w8YTD<"l\a+/K +-$<O[(ř. +L), /lW.%fw`#x"̸3u=׻1\O^d)@~D[[&uf1|¿X@qPQIN=T\Þ3;Ful cmH+.}*JtW{:]*0dyl=הylMMyDXIt +SOi7X +.*ox;KtPuMb6wЗ` d~j+ASkT]5RSGoZ4BY6w}Ϗ^]v9.}Ԫ^~5<=EBj(nʻ0h 1Rs2H{@ p֎tї;Fdq>[ߝDITF&6]_rfu4H!mH Ek79i䥫ב5zg +sqx%zZ{\5JZ lp OYVmNԁrnӜ,[v`g)BRzig}eywCRP gSVgyn%(6և%ƴ88g8/cZlѐqwe0:BPRb0 k,$")UIC8#ܱƠUuaMt5 :8N)pݬ@g tg^4$ݢ;!v`{갢t{Ll>;,5lb$2LwѠ-&`U#cvh,{8Vqe-tFCi DHTvfbu3±T3I*ss){)ܮBW%S)cI?-&{TJ<|Չ"6@9n~/WdE]NM/l/1*재Y%Id#-a\-8#VXgzchC"#Đ@0i_z1 IBL(R~J[VNJWs)rD;б%4 8+쐈ɚ(mӈ"yVZ,`>;ԙo*WѝCvoYZX8v4 hl'N aw^Y9rь%qc?Ռ fͺ(OߊV4+ͯ0D6`ixlNnP9~J&88 endstream endobj 6135 0 obj << /Type /Page @@ -27553,20 +27338,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6144 0 obj << -/Length 3332 +/Length 3152 /Filter /FlateDecode >> stream -xڥrF]_}2XfpvbX[l*IU "(_} f)9zfz3$t=wU̖ o@,d1y}H|Mtv:T/Λ0_(@E'ws/|w ra$W/y+z 0׸~;{.`"j.~͛?\xJh{ ~y_v+3^u: $ѧ`MJJzRUI83@HWLuSw ]ShR8_k#Y3ϴz+abGVmjsYW7<]+Zjs:{(p?aHWWd T Rpx&(rnH|;6Ƈ:tQtSFy{l3{1|# -E/~P;d'HWײ;vW[(wc4t8'~A&1G8*g}%2+@!kbܲ8xy(8v,c2 ,VF nWw K±5RW3&P|/r0E6fR` k,!j&وzC\[E`p+qpAHAD&6AӚuvdSyC3NJRE:^@Na_#+ YՋU^6]fh＿}=qz׏Yt:MdyV@gX-@ڡV@|$(!8,JaQP :aB>>LS7 yxZfBٽlܳ*#`YP+K8&ӯ?s4'Dh9`4t뉚>Ra>0+ܜg<=2#$Ɂc@gú 6| De6o8.AnA3``ر J8 h`1@k\ -8 A$` q k4tSlcl]SryJB&F -,iLZ [vs -diEp Y `gkH #=$ !utsΘ2  ֽރԤL -A>b5K fqfD_0v&,v# y0*|+RZJY4vtOc}V10g=:m'*[^+kjJ6h m|:2~y}r  }26}*j]^GMa۪<5 )IྔxAwn3O} %l?鲠2hHzOJ$w:d./K-%'|0ECbCINmsf!]RDT?Ɖ??播HRB@A)ƑAmLU0#F f/LQc|Qp ǤAsΒ|ё٫TNi//_h "kH{2ُ4M8F(y݂?pċ35j<1V *9:3/̓4p jO!VQ2Oաei1ވ{xa_jdf/ڦlz,1pm$ ~A }<"%le/v})`B$AmetK{k ZMm3x-&`E'u7Щ_/Fv)bV9SWS) -*M*5pY/u-!~Zl.Ǭ=1GY53xdjgĀUKXb -q|LAo^q=Qugk1>֋l waNW'|\Y[׵7:@iu'~h+gуLDze~"/A)*$ܗs}/QO! mrX0ӿ=?Yj!!Z5˨SZhb/fZ(/wym*qhI2u#ŕ3ex}ޜ|[g4c |lw -ݱ`Cbg2{eRP(3rk,Җ55r #$SK{fJs'EoVr5!!]\OY#?~endstream +xZYoV~<*7'u2neu2A[`(8H⨿gD%F``r,Wȁ?w'(vm?G3ZBϛ3WF8#e;a]/g_j:v$ .~^vz~<}=DQl|1votgr~ng*@R/>ˬ}jij.pmsm=s(л-HDh~F8֫uMr1Jdm t r[&9qst\}=6k{9YHŪDliY4pɻQd7㖶aVtYQ.cy`l;bVZ7\,`tit +/TƱo˔RϖDJ, 9^K%WTmDxǍ87†]qEjAY/:7,Rl5Kn})lۍW+Wԫ2rԬ֤T?CyVSY+;_i"6h }Yn*Bݿ'%9 |p:{q i +>)S=C8ҬwxA3Zm$`0#a,r8{&-I5IE˼i 7׺UB%tjKbaJnBNhcm\Zro\1G9f=nHFa\U4+;ѕv{ݰ|)y(h)Bg0dEZN 3y3kSe䞜*&sGjFdZPd"Mf$CiLS0nYZxބ?ų=zYXt) Zc3va$+15'AO&N#Au/#[G :{vˆsa0 %'8'{v}샞^-'}Z?H>@oO/&K1wm=fş)jLduOiu{ c$㋓"r?Dd10R:51'tdl%$5Pp~NfL9A79 D,#uBX#"೨w8[mKqkV[O-dKｅSv%&z ڱ<3 +%V)Jm1;p{ eI/i@bAjy>6840ɣE?X6ؗz/ѽ]6=Tq@Y"uKs;3.wx,I MDh#|Y̤zu~K[K\Zc(LقucAA J!=+f~ϢD%s#_#~dm#|4wF"8?@aky**cu:te@Zd?H} > ADHy⒬ud-;m!54$7< MGv).sJT+^. |3T^qr 0tC?Z _.U 916k|dp8S;†Rd-1r?*+3Oi~37g<^kߢZsWEȵ -W/|@n|6`FBendstream endobj 6143 0 obj << /Type /Page @@ -27595,21 +27383,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6150 0 obj << -/Length 1583 +/Length 1551 /Filter /FlateDecode >> stream -xڥWYoF~ׯK -7\ -4q&($HI)CR_9viVaqvfY',ʽ4BeBo;ogR$={hO"so +oY~_{X^|J)?bi濾KWY_`$(޼x ^^ĥ@s .ohݨ,Ѵ/Bc|Bwq($lf`fv=m{csU&L=v'Q.tT%"cE_uwU7(_gkx/izD9QIjNT߯a+og -撄i4n@1m"ϪGgo A"Bf)Y4}I#qmUa(K ib7@|y-:K1m1zmuQaX]UwCfXـ=(~3gc]VyHs(t(ay@s;c -'f%=2zE[$(i[wPQ/Vt5Shzsb2z@MGrDx53ԫiXaP״5.m`_ÊJY=(baQCB=m'f=Y`wюQN Zk6l$UۍoxFRFBK (oR/lHr.60Jh8]N+ "Nc yhP -pҲ!.t <-k*I\E8dyGq1p?ϣ@" 5nm؈Q(>7vfx 8{< 0PT0&1"?!)0=!&BRq"E8ԵS_j#T&;2N: mRQJ@Vd;DSL0kz `= 3Ð}/UA2)a9<)ueucϰ e0s*y7lŒFIIɉ(IJ4(c4Þg DUx*/SwDEEXzF#U@:2|eu@#ՖO!!tz56PN{ +["Xrk㢔n4x< F%[Lr2lie7Any!M+yIk4O"b%T( M<,BrAP~{ 3LP7蒧 g%g>3<^-G‹|sI"6 ۽R (_Xv(h+f _X q{Ԅp2.06r[|o}҇nȍ/bq(̐~^AtPSB !S"e-uJɧX55 Z3S7bE,@nyldqߔ)2^XQ,R|t뉾RzB Tx쌭 !.|5LA+?==5rG/~ꪨ좾zuai>po{# +eÀ΋uvwg w8J +gϾ۩^ 58+GcaϦh֞cߔ +. +vJ RF{3oendstream endobj 6149 0 obj << /Type /Page @@ -27627,22 +27411,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6155 0 obj << -/Length 3086 +/Length 2907 /Filter /FlateDecode >> stream -xڭɒ6_#Ue |'q3TIl-L_?o IT5"oԋ"UhEiel_-J ͕]% -m: #wR+c5¼~(TIb7w #etHroA*27+$mї|LwU?ta?n~VUy7aljAA< _f$RhL\Q"  DUreuQ쐔xyeA{,`PoxiWAKIքmxÂ!D<`)s,:!w[6eA9]Ͱ:F(}7:^'5Ȋf RAF3h|A8īd3CxxYG6T཮{VIʲibIUDpU*QQj䭾|/ <4VifQ=5$=(@쇥yC&|XƱԃ).7CΓY\ePhIODhP4EkrT%9P6ʟ["d -IN*.4Xyn{&'h^/޵@Xƻ3C1gPa$E #$yomE=1'Nʰ+(.ЋWIh Q4W5LNیp])6MttlP mEj@w,'@37wN3P!`/}gySLH:)Z|:O+< -**2BGL+P& b8t(i6B -z C"}1La KXw./MOX`0A8,!?@4~&fpCVOE 8saX@ϼ"=wٟWX;U]}_~eqwVw79VڠQ$\m԰pe%e‹zd\I~;Gl%3-9jPQnW H!DUo)l%T޺K*ǻBpOcX9؆Tʹ6J') j=x+gSDJg,(d Sۃ`R|ѣK` 'Q^zk;^HL1^O0" -._7GՒ,g.}<$R9S3 K -fjl^ґ'|'EҒrlߋy-^nb{wrvYB=**)ysy f@5.RPk!(ॖIBq;Ah<$ey=]a|Y{9ι)"-PE'cT^ۊ2ȬäMe 51߈h4sT Q+l)7Z1k3VWi䬩倝|Dیv!n, C2Wz2ԡa|Itw]xᲫ>bO37,U4W*n8CGN xECOƛBlf77b]/\ym0K ~'Q.3*0WÁ:1s]^vL­S -< + h˔HЁ DO85K~تMRW 9xu|oc%o YM+ר_2?RyH%E-g~ 08ucx$)'K;o3ƣ2SnLBE E^0sGǬo&myd܀r߳CI *)]踲@i{2ŚjF}5!Z& !/@U8ŵp[P2%7<7M <sb(TFx<bF&(4b:+ G]%J,vS;]]7YQO cs a]>Ʉb!|KYy@♹G1/{*_,*sAPzr%Z$4Ger9vN8IjӰ>=pSH@Z㍦܆}Pdκ~I6%š70p%D ĐP\i˃Yk!;W"dbzRN -:4p`A[v^&L<#տD*p=u,U6͎H4)hw<8YB9i5s}F.#ie' uKdBr`ƁYDzaI۳A ՗{9N&ֿWb6UQR%yjiXj5 :݇~hwp}K^٦ hVys1K!5/w}JR $`]2 ?̑ab5Ee} \ - sPEor&F%C"3Qxza ;endstream +xڵZ[F~_G +knݚ7(,IHeRyH5 +Y$y.=9ݒlkj) +tLob?ffl_-tZ(~E4\U J`TT/V*M..ߪ`?I!6y*8KW+$u SMmy}i៫ܛW~ +]Qzz9OK55/u5~W5uxtL1ڕr[/Um_T0ɼqRj#Kx}# 8uKȣܗ5fנ]y4-o. +([a"?,H^Q@EC?j|D}z~E']zIZk! +QUr>eΕ5:#Io#nfoV X~Q{{k;Jo}^/ ;jGSSA0E?_#7 +2:2i +mTB'`O^@״=GpyD \^!KGlH-3I(r}YAB3ɫi`gNO`y-]쿗;iHհiTkӍA{Dc6]e{1@m|2'8[2 uS@ZZg>_h]wX!m/S}[ڹ)x&mdK\úkL8Pv"){KJ .x Fo$4qfk9B4rFsZVQbۭ͠iq`Jkak&$m[^aV9 ]qDm`>I !}>IgH`Zo+rybEͻ~#Gvh &z \tr#+d=SY/$:2+{-km&oJ!vE$ej'y]iFå;63lr-JKex5@w04MikAY%d+z˫hk cQE`!j Xn;KvLSMf[kJ8;s7dvEϪ|cRs@a#R2vx3BR $LeVD C^.)uT]R.O;fDm'6f뾛텬t`\! oxa/vOjvE[=r*FfbariW˔_'p\o-R, &x''jW q$,۹*}T;\zoxLF.n nfRԨ0𦚤1lPhlI ̠`&]]vhq~D*BhaX~SUIAK*l:]3ǁ)s#St +7ɱ%?;i nd3лKIlW#ڼ{4qe֌ 9Y*OچK$zI'3imk BaRm_5tp_žGw%NLU6o%U$hbq5sݲ|۲fKP%ڈJ^\> as5d2e_2=*s%7N62c)tV{9ֶC؇Uإ%:ڞ_[uY(؞7v= 'eATYoޗNFF^&k'}L-w?R\lq/Mnlhm$][jXgaB)Lw7C j ş8v'8oB*|?R2XʍR?3ʖCvY5XFvEk1f6wlE B9h-kXNs֓"$'sfC5 '(3ErH6*pg-/fh(?WQ DZF~Wdꖧ?!}OwW2iT筽˳SbYq~{]rS\@) +HNZ+yNZ(*NM|_;Ռ&endstream endobj 6154 0 obj << /Type /Page @@ -27680,17 +27465,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6161 0 obj << -/Length 3645 +/Length 3378 /Filter /FlateDecode >> stream -xڭZo6_a*YY''N)./ mj%UJ7_v{9P܃< ]OD~3zyb%$Qp<7't?_8o~Yt}ѡ{ĹH=}{k| G9.Vʹ'z|y.t|^BVk"#>\Jne)Sϳ_~ Xg3<{톁/ٿ-+ y.~↉?&I)Pq蹡>@W6]sjz9HՖHMTzwJ;x6uY@gp_I~aCr7^Үgf际f6t#C~dJ7a w/k=]/kZ-ȞnvF.nװ[/ᳺnP#;|:K~F\h;;p4ru]OZH[}>?66}C[;$o9!zʺW.FQC O%u\:p4[l6_x̰ -a2H?]}XX2MVv6\7Ѡ'z eIFwnQ7kaSz9& tUL[^W-`wIش2=V^=U(J]}ƈ0D(#=rt~;+X8$;*M]B LIj/h"(q#Is'0tow&i5Zv%gCvP&AT!auR*x,S䁽̻AĻA}(ɁUUCi~/ 0ܲcq`4݅/G8jJw2 47M+O7W75GM Sz=ٕ] k{߆,knL(B3eiF~0E)]hjMyY@']0P$A9c8hz:X^*~ߤk5bTq9bfFs˨yyMFm ,Z56FJ Qw^lDKQgPE&O ?Z J#4FVY- pd(d|P6\i 'DB?j?!b*q1DP+gs(@FIfxrL/68 &N#l!iޔ8|cҲy%#^FR@pi z*8 >$lC_cܴ=AƆy˿_c6!$дPpgm+5R|= !֦@0Z#2Vo3`ۃ!|PwY -/F[zk(À(_WƛxʊZE㿰E N =ͣ d1Г lMDڍx23$~Z->c& "8P!D74Z-tR;# -\1[ERt/nyq2hdͦ( [~uGk+c/ -^m6}fi؎'"u]h\?τ?6?,-uU3q ֋Cѝ@1MnFCrI?́}ˤ6- U>jA>mq\ڧkLvnC}r^!9tk1pczjs8 o?zF|DeH[|X6-M/ruq;@|̓ՐJ{=#[N{LSs}@5Q԰bPR=8xΊm]GH9]|1IRfQK.z25 \X άMDyD'7c0]n*Ce(BfC:xiI*0s[ޤS Yvb-kb2B*2IUa/"㝩5RangX|3 R=*ʎ-Wj/X:zp\58/T BQ+0MCn߰:/sBfAQJ /(;TRX(`B*0@a›Zn[q|@ۿMjC}ʑ"0 6Y{ ]_bİvW7֖ n{h=0͛XV~=>`9f#O1ྖ*p2ő#$SѥT{'/EcDSUD7EaF+sa(o: ,@G#`UJV g -!IWIBA6*eR2 K}YatAPB]a[7I)<V9ECh(" 3)7ga%%h * ۊ̽.pE G=JzkwȶZ~(FPrFZYϭpd;qvq$AB87~%CyRP҈ȎͪݨP$JLjd3;0sկę~pn%h1l[]«@TxǗK/qV9?8|Z˲d4LS~th,lN败4֕(`T‘+QBr\oD-\1,Q#LIQG4ǝ)$y'\6vHXѼd¦_c5G Mۖy?Niwk-<ߗE$=L Go=W:rzM[XPO10fSF3`iSF7 ~$1*èyO:dJoCy<|N5C2Ʌp41uU!TMnyV;Ø^W\9zh,+gPIH4 /sL}`|4l8$\H$S䔾`㬈-@E[Vm!3IQ W#eM&d8B ~ȏ'd:rV`{m9+m)1ܮq.~iOFyX5dnb0(8h\'d@@<K8pNZ/eT1+E5'0"^-rĺdor+epCaH <z%cU GM#@X SF\DCy73 hendstream +xZ[o6~0,ONnSlo mj$V#J=7RH6I7!!y.9u?u8QN|w@ߏ׋Bzyutc+MꚆ\8~:zdv=q\$s[_]>Q9~P(F9P@՗^?q>^՛Wwh{䷫^_MnidGTRGu%ˇ{QzI |gۺ,SA=<؏7 + t6hq~a͋5`5S8$^&WOeEUoYŞ[f>-Tӝ=K癬 <۷Jk2o Yrx~2H68삻}qy$4WI> # WG|$!qrHKLyNO 4haˮmjh|9.ȱ~uW6yCGRv5ܭ7{Lʚ+Ф^!Kd^s:~ rv3!2󎮗ǖU<+S2]װ=8X,R`{ hz_h{v=2D:!\h <,Dn=c 7Պ 573M?dAlvv~camfB栈ݖdc*φmphⴿzJ,kc"F:}z]ȵR+Ad"(ǯNjځw5m Q|>J:D˽ۗ,$}eKZP׻xѝ|z* JG|+w'`{2q=H+1:[G?0w dN̳]6 @ zf縇+,"\T+.FW ãǒ],Ղ;h>Kf\xtqN3HEVqm/zE#,E򓯗KpYrL^gRi,lDxaSpo7x$VPB4:nAg56K.?*[M9A[A5OY g5ɴcLCE-2݊Rh1:4nq-@UE5 q',й{ʲY^w)JQER[-\KwDT|Qio0*9HȄss%U6@)(X!#ga5!, @T 5Niw+:ѮCm━, Nh)!(42 (gw|J5G4=!jH3qAs>o'ij~P՜'A[v;D&?A5IT +PES x|N&P?aOF=$[Ɇ1 i'0yE*dǽkNcKkp[wrMߍAgHUx@ŧ%Ld f +vȺlbɠԒps1C<8V^Ѝ<)`7a ۨM BO>6\x ls<=<)naJ8 B ]~rEC{` +#U +R 4-ƚA}9d\J ڟ k6cf"Ab86hwit]HMx8P= %f\E]/ҡolNde")K`liuZ KW Ab}EEC*f1Zȟ1 71l^ QL{% EJ4_Ma`H|̔< E#ڬy g*40T:΂ȽNlOxo\:XDI)(qrk_~zg +ٲW2sRVU(~wOjNep>sj +wM{ ɕ?dVC5z$O~uEefW2] Nڄ:':r`c}ʡ7Ѯ>F5dO$Ǹe[?ud*4O?qn fZendstream endobj 6160 0 obj << /Type /Page @@ -27719,22 +27508,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6167 0 obj << -/Length 3589 +/Length 3429 /Filter /FlateDecode >> stream -xڥZے6}ЛE~ک];k+OIHTx}^$oՖCh &r=.f;y#,ۻ8\zb{lj0Rw秷~>|\RNUl_y/n}w~Ƨ.nOpH>¯mO -ڒx/w[ LQ~[ayJ7g\wJOwmpoR6nQm#k@A/s#/}zwXh㴰aR%NqW-θj=t'CC^cGo/~T?dAnk$Z6OHC!8;^J|byRJ?vF&~n*c/v={H97W3^oR t*uP1qhx@%Ra50 -p\&uu~gu%!8_(°օ۪mG&*ekbA:b ys?/pxEtM2Iӳs5PּF8 u`2é󿻢`Egf}Οc\aܦ1q5 BE (nR 3pauYemuFc8qyC=?mh^ysMiI|[g#2eZe?q7)A9>s.sĎnJv=#;!Y"WJFZmANRWg7}-C%dT{hA @˷k@vR QGF7 ƪFqhsU5Ub=?59#TU -cBVQ$>Z'Wc6<^/kԥ>K|\_px6;4"#l0\8Ҋmյyty ]ECb|u6Xu]2X_81vP=뻪:v.VoDLxk^d1.w`aO"/=¡B  }A S!CZUQ9 Ejm]VSv -1SKVX6ҧ9_i JC?uoSƆ}>p79%d;_=41+kD6/Ԫ=?#R-1%}{&gFA1U%yxDQ -(w2{xk"Df8k@8Uss {ԭfV6*r>"wⰷj: %rIa eV悦ŞI,9 -FpPguW}/v7#؇p⪖YYBי@ -aaCKK:D-? -+޽0x v -w?1W<|y@#G Ġ'"%+v4C3ٷBӄפF{oe0b_&X1C蹜tI%^kP(/rhEKEI"BKa_t/(ݢFڔv* ·, AE|x R̴rdus-Ch爰=Ʌ&pbsg@t n,1脐H0}a, b[,||̈́nhמ'WyIxGŬYte#?pTf.8`=Xq=! |@&Vhe%Op3@?V݅o9꟱7Ǻy*8D YQh[&L^4gKl;e#H3*A 2teh'LS`NU o,I˚/yi=>1d&`Z!Ԁ̉u6JMLZ54B*Ɩu4B?@ -Ec{> Whv!J9T@jqbU7J⾫?cARcz?>2܁􆨐1j:zx軜7D& YN;As"SWIPv|.dlcTcTĪ``P{=|`O #I=U9@RߗFL{1#t}dZe*iOt؃0I~ ҹu*HWOVl 0p/7J=Q⊚xr㏐o&iLu/5zվO+Ӧz Tx3 ]$Qznzh#2?[ ֌&k&oCHh|wPqEm !?>oT\Ie :ʐ;*r/CODuwp8_U)wDeX>bGonÁvRUޝ"0PDn:]7s꯰ܭ}{| +;o7t<:Hw|}/p {3ޮxsH 0V(7 +ɏ7tgtFʍB%Ǜ7p_Y ؄~8XmihG Zy_o(uz{Љ"Q聻jn_庯Nf GGKdί^c }?i۪u|,aMU#^K ^Az6>( ^jǖ&h?# ŷn.sVv#i|^.2 5gv6{!ݹJnn|WEg0|ɷ_oS ft$ +|(jL(*}F{b)[8mWC[_x̢0(6օOE;M-o>2>l~PwUQEfrlY9L7|V"p3`Ѡy=IRيZ`/)H$O2i?- y6wf{֧߻(k.Sp,\I H QF o >K M8ٖ}"}cѠJL#D&_K)i+5?ip vpFߴ'WrB68ްNyD[Н؂ _6'^j4p'C$ʜL@Yw AVH%+?McV!H2=3Wԕ?'$$Ĝ=Ȁ?=zľ-?ֶ6yt3n@g7 ԡ](BrHLRK-Z X >#`]sr(]:'Ĝd <=oj@b70X#tG^z'(Cgz{8\(#qY8OW7,`ƱɽU`J%wĺl?Uy5ŏa0_ΦDa>qZt{b>% ]|73|i-l#!a͠Gͨ9M ܴf3 AYV~gdN(y&G~ܴG\L6 ~_̥ Bcjj6ݚ'f"O), K]y`PgXsFKf"rltpwܜXOc:U1<f&sN }O\wNtx&cu<)<s9)ٗ{#bp)PFIX۠!\-"`g,uL\zxk{Oxh(w'DCb!]r4󉅅'LOY-i>I(ұ&p/N%96E4No8?P44*35h>(Ft>D}4mRrj"Թxj$920d˝3'8rqyU󥛑vRm]O8V>]=THi)JˑxBpqb0>D X.v$F2RN?B{$} x@6 58?f+mn(B/P"yõ}l.lT {ӕă&"Ĕl;J1Cm%[ Eg^OtIbR:9҉Pٛ8vr/5з^fvދ+ Jmݎܬ:M;K0d7$ 3qU҉ ЇZ bj.2|hۉOetMIvAĄ /&ްpDR {_ٲ02.4TL.G5xaM Jy2Ȇ@yNmæ3*[&ÉPQ-h<ş^ra F ;WZ%6o LU՚aB!J\۬t\$<|3tq\ [*qd ~'B j㜪v0,i"xx(I}W۰RfǀUTQpęZ&Tf +!KRs4r ,tY*1|JЖ_ph5<6Ùo9$~4Ƕ{8~\0 ęf(SnԈd[ʋMPJDO,>m$) i8-E:NR +ykmŞȴ FiXC:̤d7-5C/a,ąPK ``dz!8W;)Ɍ8悇*;9}TVb APA%E3x)QVtC H݀d\X[K𩒅u34kX?I^(qp8%QWⵠc'pNSL#Y`PyfQ@C@ +{qcOl(*@Z58. !' ӅD`b8DS.wKz3fL.-Ne-z?3 lOR=-t2-r-CG po +:L^%rn0}m5FBaI[/d>ϻ(4h +c+|9Ec99"CpW2坝/(ESь /2u3}ʭwƴp\w`g8tR?r 0PD<S? PZaT:uA5S^~6 :e$q[7u$<…f*?sjNxέɻ^T6B-D[y ~4 +]?K-=cTFlkE#M*4}|kTDdBUl ـ8K@Kig9]ԮIHEԏ0h &ȾiB BSYI&QxQ|[RrE +mc vhN]-*`:400KX톿:O䅢|L͑gy?嘯l`>\= *J8 +jWHDC${)?aŸ.)Qy}7]A wFDQ{Y1-޻!MS6!:[*t5~];W=de7F, t> +VXJsqrYk3WM%7?ɫ @~?m)endstream endobj 6166 0 obj << /Type /Page @@ -27764,26 +27555,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6173 0 obj << -/Length 4515 -/Filter /FlateDecode ->> -stream -xڭ[Yܶ~_oVyh/ 'rTb'qU3fɑ>}MES.kHl4}|ƷI6Px>A_nb!o78 -$IO?_6Z@%&w [뻻83w8u<ʃ¾HꞆ _t_o;OelvKM" QCp?)3՚IbOL.`Tr%QDNe\_ۘXmiw;t>o G(oRz[iphiabDFm#ǡ"- DV@ Mb*hY۶ ]{;|:SP7vP`K}ĕeA ̖X>緩A M:?5*7+kjXF$q* vb Sԟ㲓& Ҟa-wYi ڎ?,%Zt,~@iXzyAV¾>؉fgYX~Hkqʹ*w:7$^lu7IEڝd< - -;@Pז4}/Z" 3OvձIT;-դ— 80MLQ@z!WЁApJB8:7/t$jZ.`Bi=Xdk\&eLYG1v=S -YZkZ̑v [@:Uv'dܗ@7&x`v*=SY6x7D[2Ml;2.i ~!.Wt ?<6VP2Ž=?9z ˴+ܿ0 Vpi" u=Zu܅A3axLS "fѶSBy&4+RAxȨ35g>JSXƕr s〾 l)ێѩkJU.1c5OdF 8|׬Es ju~4K-&N蟶(=;4,Ԁ|78M[|<'*LQ3&y|S=sYUR8ެCYܹ 1lM8ŎP22HH ݵnN zf~96\n!jʌ2a/BuY?~+iJ4/k AKi,|ͥ=?Ë_AEĴ5ybS<[QACW1g6vbdRS>ȶ\k$ALpKEH&z>:څg<8肑ˠ׌҄g79:y\X#?\Zu#*,<=Iu`zy:IʞZt831E-%S]/΂w֏G(gGqPƀ*bSK5t/> 39RBےt*q }.lp툒xZNE" Ѻ>9#JJ%2hV>uˈ" r,"R~De=U`] S^sd+ʠ 0.88mZ9to䱯#Sѝ5v%T%*x?$}35ká:o,WI z_5RB%R`%#b`p9LXJ-ba' { kV)H#.~OSGilRJ۬ӀN.8x ]UuP /Ƈ%%n~ s,1;=cln|κ|Mbوl"4+t>"ADJDϷzpp+! Izsm-8B@%iytnNN[\*rYc/&ʊ| 9 T I@GO`4l}߉kҫv(wv V0wژS~|$ռ1֞H o -ycmEq- l-YbIh__TiRXG&/l%P$~/'iH|b6p#| !WJ-rME

ߪ;kQz%.j^&ğ23XݡI.>=q]dѡˬ@@XvԸTtN=_bӞ쯫 JerHTۆQ6EH܉O+MA>_C8ID-u+GUk}GnObyCܙ~U?ҹQ⠒ǶJ_?歛'g9Ś4k -̖nmƶecHZNot&XSˇ1CglT F &+6ng,O]܊Bw'|8fJ>Tg#vo`slQFLTN`]F9q.L21{Jg'nEB]X$f-ë;9ZO/:C| wT [[)gF`'c?Jc {3MVLR1}(3Z.ƫjAv= *BJP'jU~1fcim|_[p# Σ<6->3+*C،v;;!B*] Ø mBS1LOH#"18 MI0 __ MXq6@?%/z@Do6<V{Xps[$'vo@ Ez6[ Xl=jRo8 4*oeimF-XgӒ(Ng< ,K@TC~nH"eaSHmFZ+֙*@oV#yQDW`ҒȤR><q]\c>ҩ -B2J&^Qe\nz -,kqZ+E(:-B9)]fPjXcnVT|YR41ф 'CiS9`*¥eaìi1eĈ!aO5ޯ\Lj3Z\Ҋ4y)`R(VUX."AmT^O: -{B2{^߳PJD`X.-7ݹB\X4< -<:OECV#u&e& H33eYy:=N*Ͷ>|Y.ue0D!i -S@|g1pr`Qs1]qK"Zt1.Q7*|a=Pkp+.rk"ZCu:b dz,B}u毭5[B~bF74uD)Cץk`{,)endstream +/Length 4036 +/Filter /FlateDecode +>> +stream +x[Y6~_1oҲDQ}p'vuI) nM`4cϿߺHQYl %Hu|UԄ :B?ʲ*>@WP>^=*aA~#g/߾fEbfM_&7 ?fz?z/ʼ_ݾ^T["FuիF:W?\a'\~g9<>]8c{}տ,ܧyԊ06з?˴JHݍJwrѡ~ lieo ǒ){mqgz4VZK;^5<QvUIAczm#TPv$-"+ hni[ ][o~ ?J/⤃>T 3q|ʺ +T'Y@uCD)@6#(](c{V U4UYPf6 +win =.9.:i" h{J|5woBj;~WT5ϧ%Z\SuT,5b ڟ}f +sQg{v_|8;&sRB -' r MӾ؃?xr=p' :]9ݣ[i =J +;@Rxfj/j~|#_U2|IW-ib/%)ypxFvGfȊ/-H{R0KwgY;+* +GiaMb ȵP /?P4VIߌ_R dq)m$K@]nGdMxl;Y7~:vUA^;y!0e$@oFj_tYy_ (ʗQGJ6AxI+M -"])4K +}J7N[UxYHu# +NY"o'$_AĴd'y@RZ@EЕ `Ǔp;1TS>F˧I#3HЀ b0gjӿ&=aan쵮:$Snqp鷉v)Fsy:HdՐE*u#B9NTg9hLТ'r9@6eyMz垂^B. OR% +sjS1>P>{j7 *F6ŪL{,zĸYRSLpjhɪ +Ys2JN$UkaRPY^MR=weH;]wT +8p?yRNҶ_e5JRvP-8ϕ2*K&Rɼp62Y h\ I сKsk-:٢먭Ӧ ΂L>\[ç{y!lo4uל㿗gnQr>h5I|BMe`! Mx\U;0qeV9EJ%STtdn)1Lr&,q;2`N]5e`hT(D+ZH`2ّ1 ?dn0<.lѧ\Zo:XaqES?8:V"Q}sߋm~%Z5Ygp'qo5d +D&l#Eq +xkkR?Nƪ/nG g.g/A·kzNY(ߎ}LL'&;we^+ * 5ƩM5?P%g BA +v!~68\ b"6gvG2YTrS(īX8D +:@ ykM,VwNR|N Hqć2x8I&`J-R +Lh,$؏buɵiF"_럌`rڇ o~n̍&U~BHgxۀ 𩬋[I*g4d=hC+*AW'w:\kaJU <8|}Zg`d WЕ*5 6t kI*"Q\!pjZhR=MʞH-a"j gc8k8/ S} }k++YB": ޒ%>uZG8w+"{\DWzlqkOtLrxW|R:_.^ ȅ4#u9D,!Et5's@[=R[ vfn&W_^Ϳń"L'"-`"p_WЇendstream endobj 6172 0 obj << /Type /Page @@ -27800,21 +27593,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6177 0 obj << -/Length 4278 -/Filter /FlateDecode ->> -stream -x[Ys~RU xnjf7d1dBKĘ$(*C" 48>hmoL:n7v5QBC͛%ѭ -mQ{D@ >ƎtHV!, `֥(ipX%(+PDioV\~ΊS8+?*9$迣4rًuBkT]ڥM%d5l1bvq5> ߑA`iя<#!"ijgʘ0vvʽ=%TA)6ː"?+ #D @fo2i1 -WY:"mCgغ^zW' 3k7hX(iX &h]X]!Oh(aH|~Qr9|"b6/[g*R5=j0Wdzwbr\32:G:cIn;t^GbK//H&eD>M1f'WYn*Bh4f1]2%`r>)̳5C/~G֦L0(^ ӏ_Д|^8r -\(~J:|M ip)h -p 1<ЩCӗw'3? #7Q=:~/DJP&Zj.j༷T6!);^e 4|y1*jp9ȓh;ūyk'NG= ]C+F"(dv΂֟GSY@'Z6eaEb4[]_Wlzf"0fkZhK%yiy!,φȳq^6!oԅɹEH"o;m1woD$ &/ө8,q?I:Ѥq.3QZc(?Ơb`4|koDP4>O o9>"OTzO͢gP/2tv.W='j"@NY{QC*'{I1hP-TNˆk}dEeԅlMm Dm%rQ -.nN9ʱ3?nK Հ0Ђʧ+8%!N9XK;ŵiz.Xe2U:dk@\WH( R4']$08ߵ 3vmbH!&(CG}̽n8='XX5Mv=8nf@So]~ŧ!w66ryVeY;Dd_`*=3M]hθ*˝(QǹՂ6hm2i oّKl@}z#@@Q7t-\<Ҥ!c_6Rc- $0kW<mLSg$҈#޴f%FxHMlAL^H>V&(?Tjwy3Emg{YfM?JRٷ܉aCzXp9[ ө}%| B5c>OO|4a8 ;!P2<1Ct0^s٥=}m6 +KEQ:>^@9V[hq(T rD0N FT;3qH6LǮ0y9Fh9YM}u.Z*˘\Õc+L[~n_X]ŢD\;h0%<5r4'EkАT?ޙbϡ$|&v<XRb炌B=5|i [E)S0CuƘ5;T=:!Ǎ":4H.+0AVsLafZ~?t?E? Q8 Pl.eendstream +/Length 3904 +/Filter /FlateDecode +>> +stream +xkoF,\ZCmk\C.%LIyr)>Es( }kgF2?u'aY8/Wr =_(.M v}s}\(,zC ^r2@'bey"7˟^/T- |TfT;(\Jo~~-\sɣfeynVT2REn;PqQMy#5<`%ncG +2kXDvjo0m/ ]5;O$ [ng8*eW}ځ ԫzhyQpbepjwL6BLE:b@smYVky?-FOv XQ/spόiq3_-I{:^{5iMhnJۮ6eAg'w ܕCKǓ4"\qжꮠnU.y([f<({(x`8JGꍣ,#F*8ZdUkZDA*v F"$?HbM 8ψKu]xMz,g8ਇ;wU4 wd4Fo {34"+n-Cb_~ʁf`n)?*_/ovK|{P\D

  • lIռmT}p/Ke2Ŏ`AEΈWb=Lc E` Y8*S&ݐCARI8 +¦rs|a\,G0KTΒiB"Fh%#cq۽3wI8k)Uv 竁[H=UVZ ʧ;|xJ+:u/'lmv\l&HKbd#۹WblUHq|lؚ5Ϩ4p+,3h1s+HGb'=g.wߵӋ51)noW.'0&ao-\"lF2p}0\vg4q¦|ۭ{47\ (\A.++yQ?koqyT;j& *z(9XL=Y?|MD#) +')X'`r}<B=FE[Y7{  +ˢ/Jaۧ(,(jh؟S=A,h04i0 fch4Jȋ jQ=j ƣ"G}30ɵ/:Y@13B# ++JJOƊ6PEN۷}^8Pl+MENXȮgxw<=V +!zZ~&Ϙ <ϙ +kOaQ6|/Ni: +;L?K +떿fP`?r>H1VB(1z;xrO\l黩ύqd;Ǒ%9*y{б4佊~ v9NXr$mZ(q:I]B|"RyGP:FQV#8p/TK(Ġ4;`Ύoح=L{PviXDjmґ:bSbmN r,+7PBl(#a0e-&pf|чw{qNtd:q'If83^@l<@t,>V$Lml]K]X8^OaZ[D|q-MfٔӋ[:i +g ?8 u @bʋe͈݆~d wU,<nڗ1[S{GN{@3mYyK[cD*.>%Mz$ZñeKF ybr큫ӈIb ena\@ԥ|L0_s}rɟ0;*Sgp?*L|@VQ;K @-7&`9):'s2gwV"I.U!xL[pBđ}NrIC2k(zbK[I"u0 F#V@̊y 9f"^T[͇-"T1dg?P'q# 3M鉷ӽendstream endobj 6176 0 obj << /Type /Page @@ -27831,21 +27633,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6181 0 obj << -/Length 2259 +/Length 2199 /Filter /FlateDecode >> stream -xڥXmo8_a` Q-imh7xq %:Wy!9ӽ=E9><3x#&r=OH2&iyMa_gȞl zqvnL^g , ȹ>ЧѡQD Ix rGg+c(\'%ue(%WljMm((h@pUBnH̏L t8ɢ-7v`|C~~PcN< qVbp%cOFq$x@J> -7šP+? B3ԏ Re#:йݷh$"4|AHh\]sw?Ɍvc .xު.jg}ڟG&&*԰):cJR]zE]cpȧ&حie/4Ӄ" IFBGE:p`>wT$ ׺,mЁCS3cxBet$ꀎ@wr>zY]2 -D0A+Dv/@m0N/_2=yQ\CZ - xcb·_1Ĭ 3G'phF?̱-{*pØCW7WfF'b+`r"~ -5Q兽[aFg}!4#{[nKIF oTU]7?Mjlь*Ȁ g{e'dz2S/`Iz[uFmsXV./ qMkD-=0˗\MokuȗWz , " ->Vƚ!̻v2,լkGڮ1kp͊| xSM"H㎪łoG endstream +xڥXo8^aX+")Y9 m.n>A*Kt,TWz<(Eoo}yfh1qpVA0 g+Ùpp\2z}4+,ٳ,pL}}}w3[\Xw0X~?7oz&75Zarܵ݅B5]?8nۅc0`" ')sgw;]#Ƙam;*Dz?Å\J/V8ujlؔM Xq!kah$+Fy ,u Ysܤ 8>QN,q&|O &2Jk.51[4+ As%`K 0{"xÔ%ij6*a^1'B)ۗ9R7%'vr H0{ǝ pH4FxjӃv +( aoG9 hWn1S4/֊ZXھE-K/]&C_!VXV@qde"ZFjdNNQ74]_o_4c4i7/αA,D:UⒺ>$4Hiu1cmikY!ɯcd3?F_>Ц]Oi.Qtu /NnDFba/`Ҙ%Д}m-&> endobj 6189 0 obj << -/Length 2296 +/Length 2180 /Filter /FlateDecode >> stream -xY[o~Pˣ:mVڢĵEUff)Qs|PA^ffgX@&(LlU^Y\߆jlqLi9[dzpaq˵/f~އXy7mk}_ -~4Pwv͵nZnjA+~} LP쿮~=ep&xv8 W 7Jʎ]5%-ccy&j\0,Ӂ"=mU>5'>nK]Jț>/ qaohI!X$iꬫ>Q ]_ylɛfgi^Aak2oinAcVڴ GpWiAUi>gfmfɟcxz"a{ʪi#͔m4cP?ժ=ژ"Bx-$5v -z3>A5ijom˗ k<ܵП9|nyJmϬzmlmkXV=iij-ҕi+0jl{7r DO*8&d4IT>,)NaSP`! vH04dE_Fg(F9}+w'+c/Cex{Zƞ;S,58Xh]ǫf meڸeM(^I:]ͭN$nڿ&"?>iiVƗfIJxDp:b"Nɯ} 4juӠNг+ /[GP@K8l -' -_e`Z&UoHfv`)@tޯѮbibdWjLܡ p^i孪 ~)mZhu(&e+l BzRH2R(K`>;uPkN! PsN ȑƮ,cIi tJ-ZCD)ϥ sE4 BDNĝna?ngS\_ЫdڗSȍ MY&?9_}snyl.pJ0%&vR̘U#ƘKg^pY*BX翮x!KW*@yWݖEs \ҪޤF.OQ/b$(bEQ'|˫,;],V=T'B$t5-]PuS> u8Rƙ5D":0+ruYc.v:˪m}t]?gIl) '/亀2NҦL:U5 5^F>Ό$SEMn@lxCҥ5PHT*-V5;00 ˝[3u3K$|nגoޡeŶs3TCu_!Qm +7BY*>K!BexK"Oq0L +Jp$6@}E}opmWL +6C'A;i9GOyCNJҚTs3?xEn :^ŕ]3@و=0|Bq̑ZiMj'SEX<q*H8%шj>dc.Lyr k縜1ј)<ЉB{Dxdܾw{Ѓx.UTʩ$| ouYTŦXKHC5C3x@]H8A`.Ĩ{T kU%]@̍ 1Y hr8[Tq2}k48<,я~S(p:=BExБ䳝Yr{o((QN\zbmO TD +)_Wz d$R[1+b6qN9;_q⻔d'n?@=jIEI}1?nL?+ !xANRWr cфp%>apK(GuYBV`=15 ' bv+Mmx|@A v %(ф- +!9c\/|믮0ܭ ilqhaKPµƈ`+.&u_ ggmS :LpE;ǡ8#ZV5967cwu@0B ZMA:b&.H'n0a"nm>P, +fT5pr@Mk6%r*rU<iaʯtRjr96۷۹1p_hA9̤5ڕ;lĔ_9sG/2w&ib0tuQf1]uؑڧRޤT (z_$:O#.}me[?CU-T5O y3p)Þ] 'X$xm2Le7a(6?Mh#?p"y2myvr|hm';{E71͛A=LNS{ Ppf)^~Ȕ7P3&QRbt`CO 6&)=TFn߀ѴD sB"Fw2B^ /G׏ 6O@ y]{Pk^}LÉ1O/i&;l~X6|`5SrTf..UWN;13զKA `B2?2 Хٶ.]]:RPQڴ`(.@%p"J}( IG'ꔵ%C.8mtQ^)v^܂##Wvӕ#@.Y)ɉ!<"ǟH +˜stbM3bgHQ ,)|Ž^_.0kov|, 2Ml*3endstream endobj 6188 0 obj << /Type /Page @@ -27908,23 +27707,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6193 0 obj << -/Length 3626 +/Length 3475 /Filter /FlateDecode >> stream -xڥZIϯ-dh4|f[Xq4T`RMAhn\&TޯkLi*MA7d7z}$^b}7XźmW}\yJeU/_̭_ݾ[˷X.߯py G*~ZEw`+\jM3>Xtn(w49?EG&U-!ton_J?R/x%.i:SlRz¦0|FTbnc3( eW~9V]Y@5`:<oWs,M[yc ^$d_}6rL? u/-78l-@m{Yۗo_F[OeYKyrQ^p(8RWסY%;|g$s:P -ŚI'ڏ"tr@,Ϗõ$5_yx̤LF /(]̈uDlMuP'~$(ɈXJ4p Un{$ l -U9+<- h+;L[P5qʞC84U"UB.RӀ^˖jS8 vmzʥu{3TLKl7{G>V=pmdM\ZqD ]{%L~_1v:pɪV5v48o~0f:x3g5Q]yWv ZhqJ+rIYN@B$)-\yr{IC=f2be*O?垵-JjJB8ю7(Zb+ -NjV;^Ϧ*eMTjN (^b$` GBxѳ8L)gQ0Cc{)fE>DwҠ=I> -,7g;puC^vaЗ]zD\{H:!ܣ -JGOmDv{:w;qr;GdEH q]2bj+a>%s D) NB"3a8A=KpD|$ * a&/ۓ5e"t̗l#>ƒOEp{cFIhc't% !n*Cpr $4# 4`&Wc=>tDC&B'a"^v2kpRrxsj,bSrJ9(0; x?Ck9^֋â;w8,8 -o+_M[pr;F#8bp|'l(>'c'5h,߼+ 0x3BcOA M߯$gy< ܈\Q[!_4a  Bq\/{9(Bjl:rė;a-W,l7Ҧ](yPӱZw+񩩾rdU@Aebd2dr k\=ʉ$E&\:>JM ß];w U1#+IhR i67(O$2æQI -q~{;{6>Ppuhؑ>{Ɗd|A nnC5⟸+0`[k-SG`0VW,. $ssRQJkJ'ƖF#EyHE*]VWcAК{ 7;F-z'][]Y UyF5҄ӑzb#],pTˁŜ4('PGrLPtcxF]gf( 00hS|p1pᠹA)(N70M53emUX=*5O0cY`! L0FSh%CA^r71)~6~ ScNBd=MQoFfN)Fejb' ξ^A)-ͳ5kHkX]?)֣BwQwC N㹅]E5e{V{shu7i7*ν8Ofy~E,>]'A_y lT}i/17 i=\9sOnex~犻Ge:0= i1K^ۃ&~d3bj,A"P ]U Cu`YÀ>C{ʜS‹^)z܂҆SD ǩ6ݡh{˷=3r \͜ˆ;J6E㒩ovA/mMm/Pk6zǕl'<]9smsBmW_{<[Lm'J3Xzv2 g1;8Ֆe1:l,gq*V@2awb>=1(p)D#ԎMT<>pK\R(Y( * F{ޠb|(tGw8<⿭LoJYc:rW7LW@{6Y݀3Qwj_fw􉄵almȤ)d* G (b^%zm&ҋC0/1_AEQ,+8D QbXE t!dN  UYݲ XH(F{d[22K5t[|"cDZ:\Ys@R8)6i>0| Fβ+=C]t!]tDžnS}ZQi*ۯ LRb >"Z[Lgqa.: !vN)YS$uX=Dw-ʯQr9A(O`9)r +q <6HDX"q+RdǍt9X>4LY&M|{{{7ޓsh؉q8{)Ɗne|ky n3j&%>y곣[̙kKăNQzk!W@D9ٖ C)2 4agnJ%ZrDD1Ql+k2keLOlAmYi AiIXLP2\I((ډ͚m|4>Vz1ZJ80HXJ=XeDɠ~/7ֆ=8251c{ |NrNK5=emUX40c`E΋Bv|`,F$Pq@b{?6a`Ɂ!k9ACc1#Fmeٔbn fgN =@(oga 铑V_lYk(˒S钅n[yǠF SQzbO^BJ"QvV'?ΤB6}D2o *-l^뒺ܶ5/ oB!9eFZ=nRUPzGF??2.TKTBd8KXaԬZ]^uƔ,b[J0jhs Ғ4[S ier7y i>)d Klt2yט4]er-%[\FH؉bN<EYsYGsldhK)KGaqk2!Ŗ1h]mۉY [U>Y,O".I/C,<.֑̈́'\*H|ZO*L/A$f endstream endobj 6192 0 obj << /Type /Page @@ -27967,27 +27764,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6201 0 obj << -/Length 3747 -/Filter /FlateDecode ->> -stream -x[Ks6W*1$,߼ v>,wv'Wosp \7[\ij({+UR,)n3'%%bWŢ+&_+`)U$9z -fNyϔ+XkinW{:U'wP(k9*X`YczbOlS*-4;DÄ>#!o r2MAS XF H7OyBwN 8pZGUnpJ&vz^|AddWv SdGq!HuT]ZpDpJ^qA\M \ܼ*i^8+y9Hm]ʺ_^snkf&:p,+dZd3Ӽ2n~}ë9JF*亻j>+ 0QkH36 ܳȎ8Ԅ5qW.-wʽt&0rc_>(J\yw pI>0<-0z(~I puC-H l/p$B³?`*/_LhF_%;;.ZmB7, 7bxu9SdJ@s*?4Zk~Bp,ėb "[`QRk7D|Cpk@5WДE95LkȐ4x7tޢi -X5I]˸lَp4t+}DAz$C+IbEvc6Km8f15hE}j{fhꛂP.v=ˬfI޷È!xbXW"rԢu2_"#dֲt9>( Ow2 ֖R"rEȶ 0/pA0`h5T=̅jvsXUYiS`{P1~iYQ0-b݉<RKep@O1cن/d#:ʝ՝Z3(u"ey $@>Ozn#j|6W1劸YG2η;uĔq 㰎phVq0k1pyKJj 51ol0l>=2^(gGӧ AΘ3"$_nsB ) -!#W!pQr=9Cl;G ]a%ܗv:7lB23=07X1&#tA 00=Gs@=k6;czPsę/֜ r5zǃF'>$%P"7 {'iRV_ܵ: -Ϫ$j jR -v6-)rf5E_! GaƜ H +Lcu3EowN. dýK% 6wOtMk"HU/"p<])V3!A$O$>$H,c׉.lҶ˼ZXŜ3GM E(8q̕bW2ƕ\+gL9h2\lZkA8y֙lbO,Nq'tWbRY<{T ^#$RؼOdI2o-@w))`MZĆQBDWQ(=WQ3ˮ11Y#j1`(T}R(xYZ!36]!r5'xyiđKr -K~Ŵ)ze^dP Ia|1[ 0G/h/NȜӶ4":B'}3}@URTU :r~z#^|*H^ؤǡ\S:6>X¶s^x}}1/`DN"}ROig:E]QiZO -Oj5vhDp2J -ϸa)鐆Xgm+hIws7ӷ*bô>PL׃tfwt;DΟ)貝N59£Q6rd{xIUMs5Wܝ av'ɤ$M (V $6M,2O)x\VQsQhή.L{/5 i5bM|~ndzdp'.4Ԧp9cY]0̵ / -5(ԣEG9O9,6ϑ>?Tk!n&_),0ڐ9W7ĺ)=7SSA݄D'|9}eCi=/#Ylq\!J߬Ka|ywBtIT?U/z?qw~+# nu7» FaT/~j.'Mެ]!`}Z;v%,dO0hg|0,p7$hPuf1 DL8-27RZ<UQ_l9Fg*]gaXn]۽0aU_ -*Ofsr" NɝZ mendstream +/Length 3267 +/Filter /FlateDecode +>> +stream +x[s6_KN=8Mޥf>"%qL*IEqoAIvdn<#] XN\'a$bsNVP iZ-Ǫ'D"v|IMO7/._ϟ0)YFiW\T:0#әt 1O̟?ƗS/r_QLs°LEՋօKU\5"!fzb9&h@|QWM43].ܐ{2,y j$ZmgB*ue\|v9}Ueˤ6fS{( .%z+)MŠ;nYf-.`;3]YGd+1 +'FA`(d fa pʴ>:57R(h8UȢ|O a&ɱh Mˍ7yVY2 HB Z4bfszrLJe3]egӘy_0'X?8 KٯNԜJptBʶhMd< ΛU: ,KH3s5uNqY`ws^^| )7CfE, +ZCۍ˳Y +u)wHjK:ʧƅd}h*N-(%LF!5bjNM2iZVol[3~/ܱ֜%tOrdy:5VP2k9-M7"?Z"Ҋ EgIH1G!՘` 0WkPR ?&Km( d;bXy8]8*eEra tnź7XkIFz1"G5qb - W ` 0E +㠌~<7b)@o8sÂA? 64DS6lJSB.7@%FEZs>XKX ARNUzQdO )kۆ PB B&+7jmNlP6l7pS N"Q~"eS{`es[2BUa-1Xc6mpBnX-F3z^8j\l@/ [CiA=meD /9tuk,lGR:z ޔy/k[ 8& @ +B9t71x}-&X޿ez[m)g(mVNM:|5 S4!ˮ=a4MRٷ_Q^s`)z)=u֘dqPn}TyolaLqPP[wxW%'lfƪ;> 5fDwj@dPmU 9WXt)71|4=BصKu~ށ;ʎ.Ipk6A1?Ѻend"c7\6܀VkK?[L!\o[i 79YmMyIѥAK[%* NãJ3 +[粗di)oMUnGQzYS<37h) 6!l~mLy) ww1MN 8QOoKntd5gуw8n|]AQIPW9̾ .2_u)OɈTg a$<vjel-X!mȑq38J$.N8•m=;> -L!4{Trf5Z^tufc̊xI`*kJ 'WXjЋ8ƣ}W`Y G_M +uolY=R=\ɏ&sOLQE(tMvv:@D._>>3~aY(=@P[3/,Ȉ_kø2s@%h4Q{{4^o_Fp#le&KE[&prk[s#;iJbu :s '6P5nݗXwlE;k)?QRpnΔ2PROOy-9Aٸ D18ÑБ:J]NW49ʇif㱣ʠi+r0oV^`șՍ]џh8{5DE_U/[rnN10{:ܳ1o*ǜ;՟^z⇶Rw[#p0NPwp?KI?N/D*UsRp0GPI~ zjךBz]'!,G7Mw{{ofZgUcޡDcE_/XoAp#}oZw|Kٝ?zվyaBc +j]~fϸ2^;3DwY<]2{w?Ŵ O{02!o?f{}$py+4mVŚm;Iv; IO,RG"y;\ z8|4`u'tDÅ_cPJv8}#A,۟_u?endstream endobj 6200 0 obj << /Type /Page @@ -28017,16 +27808,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6208 0 obj << -/Length 2299 -/Filter /FlateDecode ->> -stream -xڵYo۶@qqmbDRv֡mO(bF<=俿Aʲ#鲢hM;dą?r$Q4Igd +?ICg@f~v.&Ow;>|=/~ZO/fNFӏț^\웋˙_#0˟b/߿ŵ d5'f=21+tM0v-|O=+^&kJfLRi+|#;WI 7lex|(*6/L9*fhj 84Jh&DcZ()"pd %f R`̰;e .^g[&pWjd 9-c'cOR*Ayҿ62Գ|%y^q"csBud]QĜ=W_]r1Ce8ՙi cG+-Mښr|$B~6״Iۙ1)֋҆gY!&qd9N?\_< &hx|Yw׳(s8"8 zJ7 zj5G2t9`..: -[ 㘗3`6q+=ˌ"\l~HZ[<E{N=eX."~0xhHr{7-vwr p5oBhmqiTD>ڕch/6O9$E@}ŏn^p, |a·[K _ E-\iw̮YB%~`kxGHI$/vЦMu}0WA? o&߿c7֥i-풝jgVoz^Wxb+<ÔߩW1ںB-C^u=d{ZDdJ %,V?`_endstream +/Length 2148 +/Filter /FlateDecode +>> +stream +xڽYYo~ׯ\T1>(Xyj &)5Kde([Inp̜|g؄8p)ñXB8.Fx +oG0ǎ0=^Go?ל10X=6)bVoXeʵJyq%SORԺZENWa%++K8Q/ǷOh7+N7 gNQz H{"}֧O}*=n8Ak2 eh%lW0NyORn0YQAv AU U;[>kflb)iUP +ikBv*3.Ox "RS~_E 4p#,(^j nyhVG.aIkX)2ghfh2Jĩyl⠉C)>Kt <̚8cJNܟ-ѻCw/6+cF Q!m{7jMIqGhX NG*+%y)G&rqR?zU:Nĸ +epَJ#|9}?ڷ>A9D:O"H#V{d39bI3tbԂCOW<-vaj#pֺ4GMB,ƒJ +ց԰c}@@o ` + ,@/MP' 7e }6%"jJ%5X[\_v5ɯe[O=a*T?JI%[RioTY:Rhtv98jmv}{" +QH^Qp8-v;-끝(/3ڨ6 "F);EsJD˘6*o + +qщلfެdg{esT'#ۛ|b_.9̮ K`}vӛN^ E]BeMd[r[Vy}&"{m=ľ8Ulʊj n :Rm_9 iI$j"qy5-y.io)cS!Qϸ3Z~M4g{ i@E'ᠿZf9hv-{ {L>`1/o+`%\%bC“Ed)F1 +O@XrE{BY[苺*4:m/sOSW? +W,Њ4[ 3܀`."&J*{Mִ]i1&IWz:;s!~t;탔c HgA_̼@?Xn)=2S 5n5J=o9诈^i +[u$!au٪Q%4) Vvs ]˗<@`R+7٦O]=wr~MxGY+}4-:4"*ggcOd7sl+8MF|dOvcFKFh‘N!~ T_0w{+|x(w?Z 䟃/&Ocã'OH1&endstream endobj 6207 0 obj << /Type /Page @@ -28074,17 +27874,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6217 0 obj << -/Length 1634 +/Length 1547 /Filter /FlateDecode >> stream -xڭXYo8~0P,*+Ft,7M6SdIp%9nΐ,ےSԓ(7 =''r>x)orG!t}1.̮WLsn0ILu=1G_nLjž5ޚ5n1/?ϯ^ilSM-R7y,$Py?3k,`tT63* MA-$Sخ.qӪhS":NG[I(j0OwASi-Vsm!WI.Tfo\FCJ/C5Ñ.#1{R5MP~_TPkU0BC <ƟQ{]Ot`E׼_/`\e׳%;ϠTzR%e#w6Jm*m6/.IUJvɓ#°uc懖1Bai@*/e\/q>PzU *ER76U|{=nIYշjϋa?*[PgQU(x:`'%8bK#z-~+]@نnUވ1-xC -]`D8RTPszn$F!wNǸtct6 C:@!t]FBEPua0]ZPTl+ 60("l9$sabZ]VOqxqA; V] -{Ix:r=B*Ը||ȮU[G-Q @P` Tϫʅo?7 Eӽ~urIАLk*HU~1 }ǫ:v0SA$>GA:<0 /aZXi18KjXuZMP9l6팘M)wa?i`2;kLGbp.oI}o\Yđ|&HQsҟ80̨gvcg=k?]>j GV 8 - Jx'%gd-#]AߋEoi.ո5wܪ`HVCWh$C-Lwwq|I#[ 4t??D/E -JM>'{EE %‹Ӳ]vBa)p1om/tHME<9>%9Ɍ>u9j`Qvy"MnO.lT+$A[hE2/b'SD^2 dXUhes)+O]yOq걪Rjl/-)v7 *6駺 N<2ac>WrH#-^endstream +xڽXY6~0P+%ȃ4nS,dIH:;3Kc8-񡫘%r&\wkYcS/Wc9,o84l\No>#!a+f5nMWzKIp94k|0}ssT5%afH29/0H,&˓|g/X[DxJzo'AΪw-mb.<$ P^*|\K?7J7et=qQVїŰP5|dzmQYƄS oUH1]nM.ma>`~.;z u-!xX.endstream endobj 6216 0 obj << /Type /Page @@ -28125,13 +27923,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6225 0 obj << -/Length 1180 +/Length 1146 /Filter /FlateDecode >> stream -xڥVo8 ~_ae6nV,ɲ![lW\i:vf; )dCQH2"V,K5gRkXN"Np:@2L3ޏb^6߼}ʮajScv/gW*!oAȾXkvg Uf}~r"Q >IĤq8^N nbvybΡfJS:s$^"~v TB]m]u[Maڗźt/퇼xf}K}ٽTEGr Q^[I -e"K~J 8|#]H?q6}[A -vwy=܃pw_n8w!7XہvCHwʦY5 {$JFW@8Vͫ-PCW!(s`cLn\UQMaGVP\^^-Fl ߸Z.*BHb>ԣ%n \ʸQW{wbpmTMQw\E@11&^b$pTa$v G_3 GF0*w $c"/e cr| r,6LS$c-n&-!KP-Kagi) 8X_IgS\uU b3a4Utr+6G8:N5KR,Zh]$ OשDZB0 ϤUsuWR@Br(p':O3irG:E8-M劉=m ӑZI%,R(E-"GEY[ZN|6[4Qҷz*;EkLn.T~"N*M$Bmvyu^g A -1Aeە6UWݴ}YljM~ȋ'ѷ*]?+? XZdW4 #S"P ̡n qKnMeu6}[,ݢ{qPCW~~wjtЦ܁S(oK0BatʶY@+vHIȋ5eW@0ܛW[2}Bqqs$]QMA/jz..VP*DȬ`v1nJhw ˮǸ+ْQPW/>7Jwhbr TmRv K [}9$[?J2!V:{d\c6cg,xƿXrnk*NZ=@' *Djg~# Q &UÇYDaI(6W[*,ZWE>$cGֽMgwe񱋖{qn!Z@uf78 rDd +#aWWMs˶cL6Q#iX,RAac=`cvpD>”nk=܈L`M@,w0t52R%k@0 k0?-'7hONXhxaLendstream endobj 6224 0 obj << /Type /Page @@ -28148,22 +27946,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6230 0 obj << -/Length 2408 +/Length 2301 /Filter /FlateDecode >> stream -xYKo8W20VK"qYxN"rb+[XrO}U]a *dty B{i*˼"_FFkOt]^IEqKrhW?Nܘ_"ʧlEW4$?xUnf*_[xT係ϝglg/!0^n#s6.$Lё o42^:dJYME*('Š򪫚ZkҶmo ._n^8˫_ibǓ k -,޻Z,ʶMMHÈA΂ ḿWݵf3Wb j,&l_U/K; #t}f̈́ϕȌh1f|X"cCzeehbl & r:N F'}Vs8Q~ '3 Ґڈ| WA;".?-N ;N':ʿn*Ygjnl[hkt_"Nqhҡ'ўJ=|rͪPr"/6)eb8& -#C%0vK[HH+-{6vMѝDrYb+"j#Y -5eWH^Fι p^D*Dya7+xlރNjհLVU;1B1#`?\:C5B8@(OK(HAPҗ$MޭtP] HRPd\W5r3j*`+qY% - B{sӾ sSTjǑ炏hJ8`m9&\I|\tkny=!xRJ 10A ᢭V22.G(d]琁Ym_Hf>4QHZ|x?\W,T.=˰'2IQ|hM\=5^َ}mhj8g]]ERTH }-%؁ֻ`(O׎ % !jX;\БÕVUY:rvWVKuO҅34aU:ץ({$s7Dؘ䯰@uxD'+Vȧ4NQ ##ΛGp d7gx -=U P  h^ aI%T }咍msD[F&W,p ? #DLgn+DӾ9aQ?ʳաCSS3M(Ws9NĆ|"zW帍 -SvfŧmhcXb -pbp//b.$j/O>;w{u:TM*HSD`S*è,0yޮ'uendstream +xYKo8W20VKMgA ;afBd)#ɝUl+eQX$X=˥?JBU'g<- ΅]D;~87ه}]'ybWۏ" ]{9|YW/T۟} ^QrȮ wsٯsgL/jEw1fܙ{{S޼\9e। vE] cG +RjVywF=p6_?, +]4ّ'FWdXhטZ,擁.Ol"ĮG 'c4^Ny?z}U3ڱ~$xjF/kr!V_6Z~s`Mf +|ejH)`xfkb'ъ0κBЋNjwE&Q>w8\aԀ7fuQtb^N.\/DRb“*[OPF) GVoX¸Ur:w.FP,B^HlLxwrM ѷX!:St IeiuӉ4nudI߷ y3:?@s)r/o=5Zaml|1scG+R0DV/nSOɇ2FI6x$;G$E w޼'t,%:)o8}S /'99 wu'~W/:H`導,5Q3}M>.M绮+`J=ꪃ9ȵTk +Q.nN#ow,УK&l)C5qF.;8Z P*=MEWWa옋X#`Wlt}Bę@* +qph$ޏH4[YRrAEp8vEx'ZO$no<ԧ#(]x5uޖƕT*f]ux Pe)J4|)@D\O KרbaxJ()n9!%SO ' Sp`V3y +D(5L3%fRy)'1d΢0IVg+(/lgAJib'(r$Jx$v҇0 +^~g3kyP[1Zͷb"hH+JwP~BEڦ  v~xX(':>ER68SpmgY1FN6{1tkNv Zy)إġ!IF 鷀n[-goW嗗4o^T^'hHË?Lendstream endobj 6229 0 obj << /Type /Page @@ -28199,23 +27994,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6236 0 obj << -/Length 3283 +/Length 3170 /Filter /FlateDecode >> stream -xڥZs6_Q31C|ON\n%T_)R:si `wjjF~g$UNr{L0ӅK!м_16`6?Dd{Rk텱?LԻiiOLpĿoo>N,z>>Qݻ_.>ώo ydrzNB; o/c?2ZˋxLx֘~"QT0T$ -(0-^*aػϻwF?Dpn0f⭊6[vw>}y7]!+D -[늬3:?)/jFY +Y+h9bјĆvWO/aWɐWٓdeWh]ݼ2S|AI[7O@- -x 5Ѡpʶ} A-5#ƕl 7S߼#2Y=ղɷS[WSoiUVVuM~|tJާv:tPN{֐Qڪ3` 5 ss㕬 HL6+Dv*dCˁfPZM]EδLu\U;솱1aed'[Jv`LrӲAL{w˷ )9g&9/贜;rPXyfad9cs> hNH%~`FL2a;F~K) Bc.`Ю+C@ǚ<%Jt)ۦ -o+eVnFӧ֪&8p,U -yb8%o2E&^{axd!![%Nf~#`XqCn06l8jᩭd 9h @@ \ny:79Wٵ6j9Zmj&q}oqh*seh`+`(Ki2#KHCk8Dcdʅ~PC|8z T뵵ЉPbM$#XTP7k)Y`Aө29x<2nC0V+wbAmMCDwHmrnX!]/ 5r&L:cxﮑޟ&zbO#i T1FcGʃ:*PCs|3,S>JO ^zemGgN+-x#"|8*97͗^"Cr|A0Vb`؅,t}/0yfO\okT⸶+TH*$&꽓2؎tVDAB8Q@I0y تOѝ˛[2=_ÅZf/1!7ώ,e]cga4 -+^iskD Y+޺फ1ݱ 9~mlAz\*^uELѰ9-CmWe``?$X{Zo0ndFm\8qA'u{+3^x*D.jSqT@ Fy0w'/&hw.xnƇV+rOmie9@(zvf|she#!e:b,(]#kc[3Eb-g+-ɋ;Ad)_J;9^?\^e0yёhuP8Z1'*,*0&D >bL00xXJmq*-fU_ pGCCh Wo"9,LWV> uN;ҟ4 #\e"g*;O4w_Sv.-Rѳ8F7XPMNzV o -Z0$. @&[P; &u V+"R^{* -BvFvރXJhj0O! (JC w@/M})dUݎKʴ/ע,mL]S5ZuGɌ I4E"![1D;]iYas- 9tRôbI@ή#1'aS})4 _pXr ⨏:B[?E#2d+ٖuf# U.V!ۋ?YD,$M[BJ2=@NJoxᓆ}5";#R R .dFy6e|37=b0Sk(L^φA{7,#~b*m!5Pi_0Щ}$&4&X!UᗫLn2%M6"A>T uֹ\ѾV8Ydžv8M+xrN% fьq䓲24)# ymBLާ. -`dwC6[7XCڇh =l훕 'Jc8(RKQc,VG -p/>!?=/__LXzv1of|kTϳ&+ïg+_홉-ٿ3~k 3"_d?MFiɧ3Uz{7y=?Ը/X.ܾq8LUfN##F+DRN\νJ8*#n;.+ghLv6Sh9m:ԮPj,d?`Lo;ƶ Tmwt(%CgC`ˮh]<3}|A, +..F + 5~Ѡpʶ(nkZZm_fjT|% >T7KC!VmD^j[{̩[yw*kGkenT?9hc;P Y:27խ}L2xɄ܀~PsAr$dDwwԠ*eSˁeh=ڱ˲șn> +BLU!>#ۄ5Y_CLJ!y,<&dG~ N!_x >k8P!m+` _t!;0S#o}ozƤS4\mȪ H0A Xꙓ;[Ez4D t]fWX |pdG2HѐJ~kcyLFC8 d1sʻ 䱈|j7_|6U>IMךfbr3~d@혜]%IF'1F'aΉG5խq?mt*yTf8F 4LF a4S8gqG& gqR->wv0[ #("BnBju#R-zVv흮^Y +tM."^܉FR|hM΃Ed?BoQ T4L/k4y}oo[LޜQqcҍS#'uȢ!%-`  wěw}]Ջ/#*H+.9-U@xP&00e;"eV@/V[HBjQ9oΕj3hɅ'n=~*/l\`RٟLʿ臝Avsw@ +3|5"Sl9Mft%rlN^M-s|L7{ټ?;2`PuՎ ;9Og̖5 IP58"K +=c8@k 9e@& 8" |-*ί +c!v̷a=""$'l}4Da,TdGTjKH#TcC2G>Q!IhiZ~ 81vbr2jv[M@- m וh@80qj/9]EIh{0Hy6`uC eiH5`_گj]Byw(Km(TN +&;>}-I,$QcNnqpQX{-, aE$Q`eliAgW1'aSݕ}}Qp\2MqgދC5^# /91QAae٦j6 _Uh(qUZ$B&A*tmK@IB bRkL S781Td붐r.nDT^Qd C Ha#M&Vx2&b c oHx:oB.Yh*BlcGjfm8; $1K4̢(&eeFe :[S ?p ڂ觳mK\~l6Y]R v >A"b?e#_~8Z2 %caPYyF>=ABr5{15q=)3ǽ!юljT%L(KWݞK&L;J3ضŁh'[@PL] +JlFY4::M> endobj 6242 0 obj << -/Length 2106 +/Length 1973 /Filter /FlateDecode >> stream -xڥX[s~ׯPU^P7'l*Iƀ,(O߸IHNUj t|};w;hpf V>\X -rzvʟ9|hjNabXAhݯXEf?? BHO~t7?ޯ;;k {_<8sl#; ˻Xlk_w>4kwMUhP@lsvlz7߫!+A6ܤM|-fΑ̕k*?pj~nT9/5į&'o ٗ?^Y/n ؠ/#otˈ5{e$Yَxrf$CLoGDNW־B$:e -{L@8LKهn3  =I<}AKƜ ?́JPcLS&96~(PH N7eNzur)m R D87 Ð,FR\a0e@B6YnࡺkGR[g+כV!\٠փ"($edʷw x&hk#ϓ2Ja IX;l/:8fH0T;=QgrPGjy&>?j -V$FCY0T4,=ҷ -"]6f;rg2 mb[;# -JGJ4VT_ l/ހg05-&a#X=U*vje2O)TC@ZGWʅV19"̶.ap\v}HSZG+E +t] -LLے+1`^Z1Oå2.j3(%YT>"2݇WPr)j?C5E5lvLbR[AU{z2HMEAHC>P+ϗ!Z9Qxe2gn<7"x?/ 5ME84XJW&Ct b0( !f W MG"H `:!;Fa?jp {«YFYݎQ<\CDP,U^FBPVPϓkpR2ɽ7!B@_fw}l#57J6/I@QA:qqS84Y1U2vN@|p]l/PCͨBixIY V"B??Ǵ0(ɓ ]0tf[4kꠋL/$@{KfB)mCE3_*$9/M -* -г\.v$$ÒX@w3) 87ȿn]synP0\o4A>[!q (}iه)KهM65:`'9 \ٚ\扄)gR$_*ɸdn0iw'gcր#$~,n?HЖ`$m2zǿ@tz:;zo.sќۼI4!iHjK)]$+7}{ |Y&T; 2*-הAIQgy" ] bk lh\xZuVג6zGHin[u*Ncb-[;?*2 -`l|{GߖΧ9.Bvl/VڻJ+;Tt!מg{nk *ةOgl 3endstream +xrF]_iYIi㸱:yHdQ#PY@HFq:i;ggRcqێƳP: joH 3l'|t*ʱ#'2O>Y/ޜ]?LZk t6 뉲>MBm/._3»k^?^\|?qC.{A?aɗ'Գ@_G8tx;rl-[Ex5|m|t=gޘo a)ց;jC1_(+?u];}A9IdYM͘{te+ +gGy9&+ռ.TndekG ?!v{V}7O擩^\W P H)%(xy(4_D@\2hk$V"+>fSH1"$Xc ؑs 7OXDt%4#Aۉ;ꎁHυ#m[5ԄH .YX̬5^Vz"׬aLȒ-—e\vTB.IwuiY'Dg&?#2 S=CRT[W'-ijoA5r')Ccbjк{600S {d\94ec#[FB`tQV'YF$06{!`@0xИ2@~mܠa>,xS*APrg;ӠCw֕*ΔGw + %-}׎F'ZIأ='fO:pd)cmg`n0M1@PD } >@!Y|xH>cTj~֙ )W&m1q.3=\Z+`{P95%?VrJRV?;Sh/\1،>'2"<"\nA5P4pɠBNM;:0r,T{nO. JucrJ.2)XhȤa`K>:ã-oK.Q1お/1iR)ϺUwzVJhv+1]G4Sѵ;!ثhƫV%1A2ʡUǒ)6{ N@s'KcE ƬL~D(鱔fvNMqYo1hsFM;@~?)Grգi2(t惤4aP=U4{Z))`ifn}An`‹T iR%FF0yJɜ-N2UL!lI&<4tz:2 *۶[e)egP ǃ]F%HޤGLt yޮ7u5\#5g7Jt7B67Zn +zOU&+jJ6pY: (wlP x3]-ԇ=ߢXM*Y7s+uh6|`*DdRTDJkㆶV߯;ڎJ/}Th{+`N; wo^,eexTiSʑD:`Ing*aiDŽ$Fy'y)3ΐYLJF +Poic u6ku]lF/~"{$nRE&yG4 bƒMZ^IMĶEDB K➄JORLlĬy͊úȚK's3kHڄ<.詽9nDϧj(۾EuVӒ6v3Eڀs4Ś[:Ѻ*2 +Aj?M]3.Tc?ó*f ̡W+wsendstream endobj 6241 0 obj << /Type /Page @@ -28296,28 +28083,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6249 0 obj << -/Length 3257 -/Filter /FlateDecode ->> -stream -xڥnF_!e)`DllX[<"-qM~&),}TWw]W۝9ϝŁdŮx95̜П8l l?Pe|О/(/us:<o0 C,h۫z|ʈ,%ו![-Qg$9ժإ,gH D&ʜ -+F4XJx6/hH^U[Tdυ]ƌD7$9oڢx=@/)꠮Ğ{AE|O;0$C{WaG,]Sc82+v=>sk Hva;l>'QiUV[3,l$T;|ib]-C?^2ꎝV']JnFݞ:΄6)g;ZvF*^`]u~3< Go~OX}.&hӢ ldCV5Lya[4I03$K $KZKf&@Z JwR\[?lƣ[ܥegrO~Q{IbIO➁F4.TN<YAjN"@EaV(vVbQcI}li-jrS]^v#3STQ<IޭNPn!x넠Z 3Q @9kp$ZUe$ee#&K -a|gtk%dCs! ()hs`BJ98tlM_-w.' -L(+D8Trb줂Lbal DG5& Vl6yNqPDP|&VNtUw\h9to@*9:K+\[ Mw/'Ȣc10%;llC̓YV~H*zrYHP4B>V#=9̷ym -:"iٸVs"CqpG/T65:N!np`x;uǃi - :q㱈ia`׃wrhp tf/>s%C -bC;lН$Ρ"kqR~A0~8~" 5P#HƖ`^#bCX%n:V=:sLߑ``)49C0F9u]@P% l6njShg6}̋0 >p!M bXI+qN[83d $;%cN[r.]"qaQ!*F~*J)WR 5&^*ZZlGy m Sba Nd.g 1 -P̉+*eqA -YiVcR'`ÔKʈԼe+vk[sͿ+W|R/z@-n)_Me?&"+iP` 7 F;]!1[z$]=tA_aq1 -cԹǴL-Orv^2Q Ѿ2iGY4Lph{{縖.LC/x8wvhZ>X}L -ΐȬMX('00{ӳ L@RB}Pf0.b -SciWڃxaO5)ƩRL/Rd:IjҎr2,m9Uf/Q`KW47jyJg`8VvI>meP өy8*wM? '8Yi~:Z@;9 qTʟab?^'0&_D*f xAR5 ;}J@#^1b&-rc+Kp^2U̍g( !Vt3> +stream +xڥnF|ͥ52nQ/c+!Ɂi&VmE XŪWK== =rIڦ̚akLpjqv&eFV4Y"q:s]p|s: И-ox9 ]c1a'}}:,wxƩ_[`SVMq0,c|7..<^[ b{YhLҽyFšS],G}v,KD5cYuEľO^ ƛW9sC1#Q4 IN:+ pLDŽuXėeS:+co#e~L/ AI :#FH9\m/}Ȑ|Ap.^*>ًJ+5aG('qfͳv }H`Ԫ;~\FP..ğ;O7ȝmr~i?< 7ϸK+5'cnj3s@Iz[(a : +2B>dհXcpȔW|BA+}5 b-<Li)/;k%͒#dͦGosqL۵_Z3K Y!F8'SlX.뚡Lfc^0V\89!KXSJfwB2ʜ+|,3=ŅΑH}Wo9=ԭ3r6M5P [PIs,3pqQɛ3]̇l*D*$ib#ʮ5񓕸q'Plz,jUR &-ߦ芤UZRuHqёrZ/`|EvGlr]q~D8i 1ZRdi()gr+]iB#J}8B#:B[q.B/k򶂋ɉ ptu85񊒰](B,e=t炔^hfVSy..ZIYĔxX#qD;`#}Tt٠y ij9%yRnc2sބEIبRȴm'JʶNPsM3,2bMb0f 4{DP9%l.6a#i+EOA(\񒲥FP(3(@W׼Wjf_slNdqθ{"Åͩpp]gi +@!x(7͜6긚l䝠d4'pt`ALlk]R}UwC7JlhdN@ +cfJkN5Dc XNUvlHsZPDE5ܓ]>@L~`ڡ=姟ww?X֏p^_ ؇I^}Q{(G`p#on"S&^m(!DӔ}ᔒc -.nz|?9B u.՜H +[+ + MEaE.;+|pM˴^`_Mh*Ey.©?%9nIvwŕQ ؎V;n8<5ϹtNB=ABC~+PWt=׸qT6Nԋa.;  ۏ&T݅*l5k1aYpvR`RA"``UPC(ږ ?إI.6RH4Ja䔘xkYi}9DS[JAHH|3޷(r83W RбΛŏI@ԡ̰4 Tgx=4m*$z< @>m&|ې0)l_q}vGO]||Ѫi 2,0*#+h& Szi PW7h4?3 j/n_2l=abWcOt :3n{aF.j~\uޝ.GÏg`@/˻]9K!AK4X1b?-y]v?G8q1knuھ endstream endobj 6248 0 obj << /Type /Page @@ -28340,20 +28120,31 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6254 0 obj << -/Length 3659 -/Filter /FlateDecode ->> -stream -xڥks~vBGYQmJLN'" ﻯ;HPNq7{?b 403|3| -y;?It{nǞNFqx>_\4L0tĝL4sf7w߹d3ݼc;~n~8 2^7W=G{]\>jnx692߽%3 ƞ 8v(? )y՘|0s,<[ <=7"ϑ84Hb2X7۲ -SG1֦&ў`vco^}R o->Z-u`3' -Fue]\Q E-pŚ83x% fU iUvF4XZpbБO7GU0(e_ B7(Gq\0GzEPruQe񋜺ZDDǐ'4B7ςp/H0*QS"@*MgߚKR]&p6p e'JD-s-!-*uIJ) rV#{a17Ϗ~/θ# -- iYPpHwI; FDE2y]3HEn0]E/R $l~KawwX4"h(7Վw'avZҎrZlA:(@-h|؈+Ndk0kk5; :>?ʔH7Q3s{ρ-\6lY -tΘš(DSS˄)| :;y84 8`SAW9GڵͰs;>\O^_fzG i|NK~f~Z񞽘 z^ԦyKqǛ!PCοyg41z 1 є*1d+s*G,"|)E#ށucL`,="bWif0Mf`$Or+J|yn0EZ^pmq9u5D=|hia$0w<{S?9 }~+Ŧg ) ֍+Fr8R#CUSQD>lS?E\4(=D#WSp)4[*.;y2oYzoZF5av8W-jh~U|:VqY;3oF,h4&YMV[`-ֈr.x]#FEp,YJ!t[#1pRHxz"(~VB1vrm ?n.#6;Gƌ-ʭQʳhTj_] e5 Nm5;$M>kDtS<`rNl 嶠nm̃d2 s G){7yi\7Ҭ>>6Yo恡tLr`Gz%VIؠ#7;KٛYLj†_PgU Ay9;psNBH4GAov%j3𠙉+BE*ak">6jl;Q%7%K<|Wn|[n⫂E7gx}pUL~ü? )ۓ^FPo(=tm7Q<+Լ%`M/aR)VaD$wT0p6d8l(w47 _O-ӹsg?HQ&94VnNRes:s 2O8o_aX NhQkG@fs2"xJt=U7ʴ\( F1# rL$?I?w0p韤_Wwcd<[T(=6QU\UYQK sEE ?i4@",PNX -n>3j!~u7&h 7Oݖ傻S\JȂˆ#)jgv;q:t$`?D= 5$OT4'Kw؛zҔuǯg\p_> +stream +xڵkoB#( +8>7]줶R܇DKBg6~W^adΝ/{v7;ݞ_9>rf7( /gp_<7̳=,C7By_ݞsшW afYd+<#ՉO)izu)+,q:uckBfw[b+j 2쾩^8<g򠨐 mhTW^3PWbC@ȱۭ`VuLJኯ`HS,˶3V+&0Aq?M +-̍X t/`P(sh]/5ˮhV.**~SWL4u ~$O/t,cZ> Or8x[i +&l#NOf= $P;5k#h}zXCG.jE)X-cdY^tϞ!-=WC8iFB`á +MS綸UMY.JWKF!Y4_KmO|AͰ2=2cyyeS1/XlbQoY ^c,D=ό6-vF!ƕ9z@9Sx|gx +uFYH.2dUJ\YAr4(]z"ɖ5a8fv%IMىn gp*#uZha?rZUm +Wqa90XajaMF\ @[F5VcDG4y/prdBBcg{ATK'b}/V|Ð=[4OQ2&*~A9w"`CΑ +̐BgwƤ# 8`D1(O "/]&%O =:py*L<m>| ;y848qM˽`CW9Gڶ~v> +޿},Q-yІ2 ͓؈ >|.|vB9jKLe,y rmO90D\uu.ӔQOy@oH0TǷ>K䷩hRyErb"JZu[aIqǛ!P@οxw41r 6є*1dKs+#Ef(_J4u`|m]h-+AwR&Xa(zHUY3ƥ7OCDtSmcr஝řC,Ј6zʈVN:1 a'(!3 +C:mAn#ӡ~YBh~(Qx4\IR'l4E}nWlι~g<*M^lBO^G*lX^J v!I +6@),Q̺$5#J BSݘS Opݼn: +"`D"-BlwTot s7_( +/7:v09$O\H$#endstream endobj 6253 0 obj << /Type /Page @@ -28382,17 +28173,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6260 0 obj << -/Length 1746 +/Length 1739 /Filter /FlateDecode >> stream -xڥXmo:ί@åR+L$Ҏݖj2fqR8ĐlմU1_kkfi|ixGGu\ as;ߜڗGivs9?'k?N~{>dfi2?Ot O㟦s֚.F̿4s٠|C G?n3}i?4wv>o|6fTٷ^3u>}~@^wyun/i}w ^ `3>(Xg1}k0k/p|8kq=z&f)aؑvMtU ,r[WmH̱`#ZCkKۭ[؆&)F8BقԻH@ p뤥aUۂ}0THbcl]( -S`{0~ j3Q oyV=%U0~#;D\};V:jˇwt"(lGfyJgKc&>|q\ǐoaM_r蟎4q1L݂pOGZ/u=N6",Cؐ=f(NMԹ.{lѦC2 NbU59 F># -;F債V%Jh|/D ijm]W3,8@δؠZ$тKPF -7z`#k⤥%we{ Y ~l)-8 Kbg DZ_Nhi|M _HykQPA^Hę~;*id, &ohN:`WE=5a؂@v *I:U*x9+iبk ;Gʄպd2j24v15fPB0Ro YѽVU8P%&x-Ts[ :횥TVTʮ@PdiG5!Fys|KQ_2)ǝi֕Q(OO++oٹD27\KȤ*ਦX8}= mtKlvk45oBWm@/Lv`k6hm &ђҹj$y&/CSf6Dtswm& JVEE_fV6>Zi[ĠF*4tn3 TXxƕ%昰I ㊟Z0hI i>} Q@UeSE7$pdq! 98N?* boy&`Y-_ Љ̤kJ -|boe25%O -'8~ZFN3PdHlH JxO+,l6ſP?$6|@&x"lt}+kޜ L $}%,p0J脩AϸF%afW#z wIL+kiPϊLg8+ZJfչ[2~j7_PT wDy8|UPrv3秝{c`y)}G!cozxo -DC!{"`Iu-`YFt̉^eRG\Jn}ݷ_귮uͭvwz;~t=Emj2endstream +xڥXmo:ί@åRɒ&I--LvueV⤔qb;ĐlմN1_kk~3\7|jx +?]n.:wМ-.[a6z<>pN;^=FNgɧ4>'z1Aٓ|u5û?/l_'p _ی`_-] Fnߴ1mefɿ|3twAN{#89tϻnםr|?dhXȃ +Wk̒x7Ŋ4s?&[OED)oJvi<>J8~PDQ^zCQ#XL,  ,4] N)Q]1Xcԯ֛44c/F,p_ +A1JlHmb$# H4NZ + +[-3#JThX ϟf_߽5"c](ACѝ#.GƓ ӓhrK{~2VЉqĄ%EL7':7e ;#tHB 40\ݩAU*Cg тBAu38(\Jw!@)MΊ!m\m jy(6™0^v6Z_|ވP_ywR.m!!xHо@V_1_J=ɂBqlC(a~cF(_jSj +r f/$LJx42Jj7 'gWE=5a؂@v *I:U*x9/iبk [Gʄ媼d2j241fPB0Ro iѝVU8PC&xݫn/g+,H[#4APu<5K9RZ92*)C"ׄ!*/UD}\u(wRҲZWF?=Tej]B&U5 +im0nb \Zg6ͅykOս|zabf[@kK֩Tؔ.T#"13y)J,3!R+&S**ܬJs"EthoMRJ=@Ǒm\Rb k$`0ء#Vx ;3ޕ% T_6N$x-[a +gMSʩM[#Qg5բMt@/Gܔ!vV+HZN^tϯZ=ˆ= 16٦:(-cn) u/  4 /8[Zr7gd9BIu -sE:aj3zIm)Ո^G]gf Z6"SY΋RYauA4ŖLU=ހ\;" ro*(sϡ3iB*X*Wvb8|f'f(W{/V,n,͚; ZoX&syΥ4nv `޹{fns&Uw{6P/h܎'endstream endobj 6259 0 obj << /Type /Page @@ -28409,25 +28201,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6265 0 obj << -/Length 2628 +/Length 2568 /Filter /FlateDecode >> stream -xڥY[sH~ -.-Sv&8kȺ&S[IɿsMj*}w}:.:Q3<'r{v`Å'}!\/.9PuF3_ -|Gǫ^8|uzQНOӌ]Ϗ21~T<]}9b<-7B]Yp^N0:/0v U _jODN - -#yQ#4>ጔA{} cF@RRϺ@JCP82N(ð:zWu<6rX-J7v4x{=0az5C};|3/^πnH%n7yY?ˬ$YӛMIvx?PT;xvYoj2Ϫ8Ja%;Lr2LT;!' L<1F:cϮi;a~8r/_'c'"BK mV4ꪻ|;n(hxQS9lT~/+ 8IE&ke6+m0 Mna#wqQ8 $ٓ!(\ˍh#Ͽw^QUjae#_7i&&Y݋^4]aco Hn8[5X6B;IDzNJFO GW:T B+}u-'PIUCɠvpbIJe ._wR8L?Et%?-!7xR6rfuf{Oa8`saT2F죢z؟rŠ1@I DkҒߪ!f:w -u-18śa0(4J6^@&q!Bp6* @ VG-p3=1sIqqWݢF>R|4Ӆ bxPq\"fwenXK8^Ts&G$yOO1;Lʖk|=#Bǯ x񈦽vFH {%d:3c>R+Pz=W]Ԧ|b!qr,5rp5'mڰu|N5'-<.?'&r3Q&@3{=%0w D iH^ -+&b}߫].rjeps"( W=5]) 9T8 j/r 5OSW:^?~<| (5_n;g N_,QGendstream +xڥkoF|&|rK:R(@I+TINk13^9ŁŮ⸷X_8Xy +m' pjvq﹎8Io"w݇lt(,/(d6zwa?Vl_틫|oExقDznˬz̊rMBsgGL哀[OfSkӁ{ ^EfE-`YWV1L2Q)k +;QBbOH 3:C>FJgSL!1I'/!{_e&bNΞio[YٞHlESy_tD'QWYJCo)tk+26:͑6ϏtOgI@V<\BXuxk Gzrm*qFi&YgEފɞ<כͽbqhCf@ؤ(.qO "M˗c*ӭ YI l}>?$]ˋl/R$-uy FخuAmh +x8ևOkMg؍~O K= v5<#`)k zը]Z +R6S3eƳx =s=jL~3|x!P唉ۡ +_dt6>~`nJ>w]lq }%:}jb/D`eW{ fx>Eرe+@*-MfXfчy4c,jq#*R90.Dм%7Z4˚ Ti +2ǰn2,JҺp7U/Bp30'ü入ހn1עh#@Zΐɻ[@\OZ&=e茲X ٍ(im3kDhA +A&_Bt_щ)A7?jS?j֏ -KsMF':лY\cQ؇ qfPq3&UAב*:^U}XCj}&K\s`:JC9[S$$ˮBh2@ȗy) J%-yM{ڛ,"փFyQI1bKXRF bL +&o"[ǮƟL9)r ~ߴP0-@t7@A:scUSAt$]X0ZB(HẙJC: Rbҵ9UtHk& /ND2m& w$ۉo- Z[btS=r"αYJ2IOv +7斻s;rKS,K]D tzE!~1|BhRCMB.d>|jhRֽ@v.o'_ɏ{ s_R#KF:.r\|Hɰ3m0#"A_3+>x؀:\\(FG4l(OkR9oh+xIqO㒋D31ɉ?37xy`.aZya&@ƶ>,mu=S/O{&@&17?8 jF_ӌ*l$w51/0qqҖ +|j?0cZ-4_M̌@΍L?&{i㸗ȽZҮZĆeW![slr.?%ҟK:, LF>ĻnJ:g]h7 jKs[.i Kfw1 U;*q +M8C1!?Fx˳1H|YR(11,r񐱩L0٬wSjAvƥ\ʦǶjO9DKch!rXa!ibSld|5;J $q̋y^qhi +-k5kGtAX۞o> .'{fb?wp$~lj#~MY77u\*/> endobj 2354 0 obj << -/D [6264 0 R /XYZ 85.039 229.148 null] +/D [6264 0 R /XYZ 85.039 240.576 null] >> endobj 6269 0 obj << -/D [6264 0 R /XYZ 85.039 205.83 null] +/D [6264 0 R /XYZ 85.039 219.38 null] >> endobj 6263 0 obj << /Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R >> /ProcSet [ /PDF /Text ] >> endobj 6272 0 obj << -/Length 2697 +/Length 2425 /Filter /FlateDecode >> stream -xڥZ[s6~e!^3q'ui>mq,*Is/)NIw8;q;|$\[Gd9q&0:4'o>u؉'v|=/92:i-YFԵM#m/>2~^^Ⱥ b/vs'/F>/gz:&. oNc'7'7K7YC:H@m/& ,3_Ve͍c3Ywxyy;?8,UjvSZq)bY/4M'Z J/pGe `{C# VD[~G=" (e`W0 vWUĠ>h#@j pWTZeYLc?A~Z'>3?#oA`,65  vJYsV| -4hNDZ#>0s8uhƭC;y;<DI9UXem钉 T8塑*ɖ2K!FWom3TLA_yJuHQ&'o--,-j^.yQ12 4 _((Y4t抦sXr2Nos8'bL< -!&{ #oA8 -qp/~֐ԍڊ3p&!Cm~`08 JAJ8D,av"%}s| 4\nϤLЉr=Yz" z\37iBM{nW$P4F_ʏuA>lD0IMN暆9Tw|f*WSz*a.? >C0 4Ŧ EUľ==e"SEАhRCp=y:o7nϫLܿX!L#D}wϽ`_N!a G8n8"gF<0Ǻx@ '}a`AӲ4@φdюB?XvhƣhՔDb.IƩ5i&t=s@F-vJq ϋts,4\7ZPtl6w3Zs*;9`, :"5,9C3U,Ь% vՇ7dz8.~ouR6[^J.YKd {onQ v~?|/d4rs Bt Cw_d0*mkxn% -9Wmx0(.Ya\V84 "eĶwDR䀜䘔Ʒ224(f3) erujlӔ:i^mbGcC -DD DDŽphC#oLWifx}1 7%kW -g\^da\;E>$@_%Fˈn߸It.jקolo v;zh/\: N7[|E90 _#R* ->T^͓;8 e)3M#!U] X!okP֛OgGTDZ(Wq>`]/g# c?DhGz$JS1Ѵw5X9endstream +xY[s~ׯ`RpFMGeG%9S=yHHn @r3mI=8D$FdQ8;pd3l'q}McN<ҒgOә뺖, #b~aȵgx.]Nud])_Uuu|xyg{_cq4yc8ھJ??:; a9D14:p<|[z]-wΟ ++5ޒ֏i=l,uNfTF|*SDγWڊ_:AY!\J}d 5 e5 OWf=R6?0Zqi szAi6 PNB봮XuC\v|]H=+JΆ6oR#g'>5i}m()Kw̧{ذY 8h,۩'+4jX7e9~q{Zeb!eմEW;V:p 1Wἡ;ʑybƟC %} !`Ah=uE:>@, +`y vE!Q茮rFz zЋb5ݝT%%d󛺮6ѷk+orU7&ͧ r`ɫތZ +uG$q!7t6KA\c}`ܧTyE#6lݪ 1؁Fnr^W) +.IEH]XA*,5U.e/~؁zL +iQ@:,3ۥuШT؋(17!0qy.{Mꮤ4~ !kYpjNa`RuM +2}u6)Pm'8w1qmuMQ1pBb#p=|][&<1jw\Q%.~qWú^1,ǾL=S< 1{FuB,90ˉqWGwH:1+wUľǬ^:k^?Ӹb..]rT14.@#&i::)zKԮ^ fk^wdWhRCgPZn7u%4VfXXHEzʙ)TXԦʏĞ`@wٺࢬlT噒ך"LRu cW9% T1r9mݵ;FB2c7V 9/.0'LKA1}Z%a@덤 '0gl]努gW _vIUr.a-G P{j\Y ѤfCV7T\ˏ!o(kbo˛/J:cEb%sby>VT_b :l͓hky9p, {~#2{q9M맋:t>wX$f<ڱec~_]|}ߔ7-oٷsendstream endobj 6271 0 obj << /Type /Page @@ -28518,13 +28309,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6280 0 obj << -/Length 927 +/Length 923 /Filter /FlateDecode >> stream -xڥV[S:~}.Dž+XqϏey9>$+F^Xg8$lf UU4]3.w6R4s}+݀,P+;rΗivP%Tpr-VEK`ŗB_zR]eoWsHJ$~vS|$ƒEzBeHezAS|yBPwf O#<tQ58~j~(1t@ϏHh۬U ъYX(*Dq?R+&,c'h㹲w"nwUCC]6*#.c]:͗pR2 c.4! +k1BM2sp*DS-l@~UXyD;X= Q6Op\ s1 {l\CA;,- }e4T4XǐrBFFt(xYXzD +؎P'!A"h ,ѰH4kd/:q'XX$EG*NA⬧|sPj@s=H3YuK 1(eSn/+~;[ک-jiXnAG]e{[ƂV4@kK/Zvi??ƛ5pܗ`7>u^WEw4PrL4?sendstream endobj 6279 0 obj << /Type /Page @@ -28541,24 +28333,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6284 0 obj << -/Length 3210 +/Length 3107 /Filter /FlateDecode >> stream -xڅZ[6~ϯ[EH$ubQEMm)ZBdi q﹑lyc<$aUUʼnVEƺ,WdޤBa2g@{apG7S,"bmRw*Y$szxZuVyebaGxɲ$uFzF54zhws]47~|C`@*Vyb(BgqYSS'g@RUySTчhĿA:=He0s#u0|Zs5[_L(YO`-KpÚVj#;bΓh'vg;9sCGQZ&< aZ#Oxzɒ^O׺Yf*Dp>8:i~OtX!.3Jzt=j/G|vi3nhiWDej"hX&{ˠC CZbf 7^w :'ajڮdƵG< SO#25I -IRZ{{s_^}62MD{KOnc:x+@ld~팭y%ǁ%m[v݅`{d -KώPZo"zr?04+(X$Uyڸ]ON8ݮ3ٹg{x,,N$PIY! J<jqǺu;2dwj^&_6HoGJ<ŀ5`{{i(6߁4,c7kBsvB&Wv)]8rD)D~}܇fƔq16!R '9&dlRl =2SBf'LP2 v$B~>2m{i$TяƹJ4ףE"ܸEB׀އ;{.:6g [5r:3v.HN/qJВ %ޮ` ))Aeţ[tc60yΧapx0(S{ < hnsxD=3xud]ꭠ,=?E' +8d)^|kDfܡ"iךhX6 -[1IW1 -4ģ;U?'|,Befe);w) -Y}I煄rQDIDVxwB_#=a$(0+!7yliƚBBe34IP S9=CȆsj˭pBX^b4t݅赬/ˮ 94KSٞ Ht%W"pԂ}~pbr⢟ /Bnx nBRxā~/z3!kR/1" [@R15@UYB:_WoaUWy93FbeݱH%P2R4Tڕd"SU>.A3j' c|\"wb vFrB<.U&Km.UP8 N -oxe&JֳGvekЋkx?g5ikGZQ*Q[uȂ0/TQp,`g=@i`RIQ"6 38,t/8 %=/T,S/m{N^G:w9)cJpazDapb#wcu}gLz>R(b](M/m&n<t <_xݠAp1% uH/._3Bŋp! <sfSnwce<;nlZyaՈּBM7p&jf|>OkiJ"KjI3 x;o?w*OiabW+64c`WT~G;+(x}GJګl]hRUƕoPi(J7sq#DY1}4:AK,BSa;J㧹 B}hbǷFP% 䙏paʅTrZieVoYTLS&֟DIEݰPXU, s*,SXx8Ed< iC85-N/zyoFS AXPzw2 -utF-ܞ| W:UNȤϋgc 9Hgn/Dĥ"^ } 0b#$^ݱ. F~!dn[1SNشG^就g-3Uc'0 TU񋈶 ],d&N5TzcmeZ0fh'v+xRYQ;Ԍg5 |UiJ(1j+YWȋXyxZP:n -j/FZ&2J}D>endstream +xڵZ[6~ϯʋX#-EM6-))ZBdi q﹑lyb"sx4MM*o"UQl/{ NUj ]gI|&$W7DeDݽ}D7If{ ʻЮiY㠂Ʀ]Ul޾=6JAۡ_uËFܞigSШP3Ig3c*q#Ϻ ޮIkcg{`8lmQF_JL2UR{]2?=mAK,v0uRzI<>sKǮcC㧙~N}Pm#|mC=|6h<~f'[:O$V2ᑶoI}ujxN?mcg} Rio;$Joc/e{xDICE*x?V:M} *(b"4aF.3V^bouxHC 4zݢ]s +f\iwY >0.0 !S$C@*2 "7Gc = HTX[W5dϡ}Z砺=ByxkUtBSʙYq_W9:f_`jk$0+[5BX3IQ7<>;r?04+(X> +0[dmM204tJA {y,jJ&uO/L="Qm3P5v+Qf@#Р4 wu{O@DQcn+3J#fNUfd+YGOes010![3xb`$1ڧ+!y I4[ b+&Jp`3lds@m5|3őn'${6"p)_<0 +)b.bx:w +&Taq ѬqlNu1d*W?\+J:Xhi*i LAI+xccP8B<,U&CJ/^zV+ůe#뙃urimo98:1Ykz٘UcH=RT\:adAʕHJ8-X40)0k|"cja7WR׎37L*6tl6'%cAu .RȱD: J2];T\['Onn.%|Zͧ:Py—<9sݵJGb2}[3;|xCQex!{]f..ً ~$ =sڋq^z`O +d[nlJ[ 9@wNs*L^W?KKjIxv#RW>^}tBhqJR}}>ý9w~8ߢ|M loУE {>%Pu #lE7)Y!.#+̪"\RhRPdqr?qdAEV+YӶxB(m.ԗ:CRQ Ѕ|JDrWZe^.[ +,|͢ 4pDv+#4sLQO\:~k߹kO|w`aiøȗf.ຐ]hbg3 dlzYӲGS>'#4t|ItXg;A5endstream endobj 6283 0 obj << /Type /Page @@ -28606,22 +28397,17 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6292 0 obj << -/Length 2415 +/Length 2229 /Filter /FlateDecode >> stream -xڥY[o6~ϯf D^T(L'Im +r,'@|υe[v -,Cyx".AWƃ0tya3)lMbwh~|8} p؍-Jf_wWBghad}z|j(~ܲ!1J7w0 o\G`c<~ղ5pBO l:Q7p"'(o=O9RxC5!"Jת7Wha~9@a~"|/̳YSO^h- -fjhGuĕ '% -b@bGF2g0``ĝ3W#v~=XmRacܐޫ3N)/ÑEAdKrSzJz7t`"ŲkqJz OiKsS8{< ,MҴ..`Pҟp:ϲjiC,Mky@}+Aѵ>ސTqbkE:Ō<_Yb4iawA^VfzNaJ4x#$Sä5лv7@돂;DÃI4΅iLr(o'\ -:Ԯ v0_py%>IEI(\cԋ~ mNMS#Nu:m9vEB'/Z/\O*O"ٌUZy./d9/`%s KVaƞAPS뎕x׊(  -6]Y K }8Ǵtmf O_t{̸Fm-# 2(#MVhh_^ouesa:6 y{l~ !h!Y5: -8Z+n# 8v@y# }Gxͷw$ 0jL/?]K~umCUM# tuLᑡ7] -HG/aaNaR[3I$^ -U9T2Ch'Z\hR!?ONx+u{O{NLn1c}HybǍJ-щDo)&&wGޑnqy0+R/-+Җ^Vl?hK~|y?Ghnߣ^J\}z*-?ƜDi -#W10ܪ L![,O!K+ͻC߅,=9 B)>c;? ƻrk@гѫx#3LV 2Uc+ @-ľo0py t=# UiJߊ˄fyl@>=!Y`mP29xDY9ȝNB35YhYǂ2Ƭ9Q-=]pp&_n?~9oHܙ|9@Vl+Ε0;Ӝpޱ*M75غ&rP¿.]Wø={hd֒Й^uaHZa#%J;bB`Rur7$79x*B& }lO-Pș]JQ#f|rsc v.__)g9u`/W¨gLnΘ;༐Axഴ~[IϲUyz 7~ts5>lR6K˃uC\+ߐ * Q@pJJyf?SQG}Ps⡦͡vMg&Lg3vE}B/cx4Aǘ!IL١ cQGݼ&UMyk4a {pRhj3qe%cKJ3!.` T22Xq]'rNiS" +VƣSl1U^܊ˤ)ԽȾfpt1p.?{GPRmVFFrg gEF.42׫PL*V/8T eXͦKLSE/v_&K% Cjnm*4@LqE*;ϔt«|X342=7e#2Vdv̟y4T +{iNM\/-Ec )_ (n0^kf݇Ul&U)6T +fm) Ę(H57V|Hc(z8M:hO(о^;Jtp=za_1 [tyuJR{YkN[}}ukªzB..l_&["Kuߢ!u"Ǽ=y&fǸ,IP!\l[PD7đ=h8fws}VhjGM%+=Pm IQ.?Nlijwϐ3TQ{E-{N ݺJ8XD`74`9/q6|0kde*$[~,Lɉ(.BqS"`9"ESRJfL ͳ#$i7gԯ1 Zhp3~mQ}۲xۉ^}Zy!~݌QC%{p_fi}Wdٸ׳XO,V:;Ke'NKOp%S0-=B}9bi=>״cendstream endobj 6291 0 obj << /Type /Page @@ -28663,15 +28449,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6300 0 obj << -/Length 881 +/Length 838 /Filter /FlateDecode >> stream -x}Un0+tm"=R-@tZT-5"ˍm`7ǂ<(,gTyP ,󐉠}ykr좏eB2y\?81MSc -ƃT -6/4$&>ddHyTn*,8euOz_W_>ҮrZTAyfN.;ggs˂| #FQ_E,1YqqVjfYfʯz#^d yN*ՍNzOɦ؏CYڡևdli gucb)8ymj5 -+m]cJu`֍HuXG_,DR@$( {G|Vg/0 -yF86To+$ӛ-S}rFkrV5+}Yaf<1!0&o{c#nh cŝ5)[Ӡ6TʇkX,4GW^oKpXJf;}²V+c*bzΞGUĂ'C@B &"I.Wendstream +xڵVn@+X2x~REj*Hf1!v1{aLdUeasYlF4,Ii:w,󐑠~8yi(k><<94 nijk`dUqPt<}Z$ vBT2A3M{e +a2#_9#uouX ʲʦVEs%$xJ +Ʋ-~ɦؗCXڡ}-H_S_@$UyxRpmjT ++]}J5`֕HuXG HªԚ2 : n$8=nedBzL? h{Y8Ӌ-S^mlzkb%+0}Yaj:yd !lyxhvy{ m~>vhѺ}^ܖBLyI0~1!ѪZYQ)UϐIj=HY$`pОY=ƀ#L;gk}k tT=Qk{VɶVFw# tKXNp(SfPSMpdF6^h:\dgƑ,B9Xj#=f9i҇UgObj;)[)Q8Gs`-{:8i}9^j? u9K3~rLwnl>; +.Qm]Y]6 l]|رK_ɽ [m79pRװįYӴ>a^^ok"b~Te)2+R.Gنendstream endobj 6299 0 obj << /Type /Page @@ -28706,12 +28492,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6307 0 obj << -/Length 410 +/Length 387 /Filter /FlateDecode >> stream -x}RMo0 W(̉lmw. ;SKQ ߏvْ€GH5h -A<6Zl߲)u״w03=5DMLIU&zL}{Lܰ.+yNnUV PnQ(ӴR kn?mOŽ-y+o3TDP9|/Qڒy921O \=I#ɾ8;p 8-&2p>CyE?άŲD_šԁ3%΀endstream +xڅSN0+|1N#H8mDIԺH=c'H2oY,OkG2+9XK kgdMRŅaTU$Q;7N OS *"+UAuHSzI?I󸄟g gdu[4&fͅ<+M 8 Xtz[砷%5Q\H+VsUcr]0eiUQmO^)xSx9nrwW0EߖM ZiP'T-GU7Hգy?oȒV#k"Pmhļb oM І=8 YY +iqC.7>%QnNʴ~xendstream endobj 6306 0 obj << /Type /Page @@ -28740,13 +28526,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6312 0 obj << -/Length 243 +/Length 228 /Filter /FlateDecode >> stream -xuAK1 +rlMtҫ x,1ux/KB` -*~t&Sn:ZY%gwĊ5$'4Y.:EHKa -* {L9.| e[{ TE-+*:ck9Z9/<.Esjj_%xwhP;pT3E-82Kہ$vkQs [bendstream +xmPN0 !&pV$@ !1P݊ r1*'GpTTfbVY!Ju@fI(uNOJJӳ~0z4d,o 'cQyw] sn2[8Y#oM2Ztqz)1f>\h?kG%C, 1*tP\Bn)@˟ +\endstream endobj 6311 0 obj << /Type /Page @@ -28766,18 +28551,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6316 0 obj << -/Length 1661 +/Length 1503 /Filter /FlateDecode >> stream -xڥXY6~У Dx(Ї*hl$%-pHIJJE,E|^hԋdx"[ %Jxd1pA$XQ{FIQz"dQ$ǹ` /JSRyw'_lh?-oaP 0,@F#>dG_FB8U-ܽPP, #sXeY:{LQ~Pd2G*b\\ѕ"aBg;GUeKu 4m`ZHzkFz$, 2PaR$&~p+Y{pmpc֏ _펔4Vمz]Vg붨ݶ]Q6#^Kg;9kb;8^;GgMY!u.W}h\G` v%ۢa\ 'U(ENsq_HÅvGz"Rn]#iz4x?' ħ] !y{(Ry@-3!G~d*Ռ+PF6CsSl"dp|6d2`]6t£Wաh Qr=[qr*LYUubQixh /sS0r+* g*  g5k*즺8Gu93=ʄ,DRAhwtB -efΙdNuX![qN+@]fUR -5qTAiH>œJbFO>͓iBv;f|hQڊybh?k1+Q${n6FYq!ڪv<b[s,i@~,Ӊesc]U&b+? -;zPo+<dq? -!ľ}2͍;]'ԹT^5ɵi wZ~˭Zmg"3-0,&*?<lL)2L5*6*/ -?:+~SwOjg2ӽJP$$ a{?$2] Yc {nx5T򾡩ri;9v;C<Ef -NU8UfBk߉՛J Qa&5hC צmmh:Y߷mLonL~yɵ ܫK[$"|l^ߓ= rJ}kg0m)x\xY9Z50FC,ԽD4\M Eį'iIٍPVpx X-ͦ0uoLr+ QQzvZĢfWƜ>nhIF[)hj`?Ips\9Kt#G uͻWA -(TD=j? d#d ^g% 8ѯqsAR-5m8e+cRo/΂& } 24.0OS︐Pz:,>,+ p84m bdJy64C\*ú5]%"ᔙڪ5X9}endstream +xXIo8W(5+nZtӤAۃ, jKQHYv8s||VO#ǧf̦IʙLiD%pGdZ)X,,RHHt&"Kz򝈦"bq, Ky]~ d™Q%.` ye g2NEliuoanIfí&~ +|&E,BI'c!;$=`.OX&\T VYz2 +ZjUyg,ԢG`G6Oʠه3v\"Ej^.*$I/f[Cu"&񰷐O!%6/VUM,y݆" 쵗wkb912kV)ᜋ+Z5F կYuG[%e`pP$hڎrC;*iφc[H@;EV>WЭHaj"ϣ&&m)->_Н, +~Gh$c<A&Y,c:_iQE +c*/D<>9|ȃ<' +9 +u}.CN{ H^WUI~6ͬUYZE#ox]MKQ_R`~?O,I̝qcN1Lʶڙ4v6 J\Uu;zWUGKKwk,pa f=|AGMeJ."A<  a"LFyߌG9RyMx kzj_UG.;8W*~|E?Vo|!wVչP3R*ߣi 5<ϲv"h\M> endobj 6325 0 obj << -/Length 2776 -/Filter /FlateDecode ->> -stream -xڥYKo8me`EJnbilag-ۚȒ!OHIid H֋_UjeIlPgls|0 -01&nvadiRBmϟhGanTjҕ 6"IfbخBi/TG}޽2qOvV WQJ[.4S|I3-<*LXK%3AX:S9Ppp2'y7<"0]ۢ`8EN["= E.[w I+iF4hPzіN - "QH(&Xϑg<72 "МYYʀC$ ,qEeVV;ÎkwW*[%WLNF1U;O9s Z7%J@7BEz岉Okq3X%m'4e[JxɛdO!>lgR2zLgWDp&]3j&4* ڈ;]}H@-[r(?b5*pA:!fAOWQml^X©8r{A|Ø)Yf!ؠ - -`+Koof0tN,;[!Oe':6oxC~mѝ-]W-ၻC91ܩQb1wdi_@U+@3$ = -x4` cAVG[x$'r| `5K$.Mh2yYgrq&8r &~xD0]l -͇A?q_zТNdR":ٰcz/LóLS!Ǥ*Lu4>p"m*aQin׿3 -B>Of^&b:xZnn@ ܩ\{ -&8C5qZNQ{[-"a0`Wp#!v{3:${؁ :mk܏.HW71E[t) -+Zgy|ƶ=Y:$rd&@j>(4rPL{lȃ-$+j}@+183 q0yS&epny3XA@@I[5A(Sc\c_'~^VvE.`(pw$aQd6e#=Z 0yV=p- n88>3aNdwax%[gL4"vy&*hRhA*M*m}eqL``צp^NyH.rDCN0qn9?Tm\KP^kam[Wz;c.Q7=[16~iڡ1ɇNquO_:Nj83v;|A!hˎsz@GIlױ/HbqV8bŒ6 0 -[ L0Cp(-*ssօ{l/3]1pEĠ{]7|-yum{zxݭB*Ȝ`ja=n[_"x A |'ޕ icF&x,w_6b~SBk03"Xq(:WZ~e2F)ԜxqP^r$:Z&yB)K(MhfoAa] -tkIT\@W>jLθF! ]mƥ%* -&YeOJPi_!ѫ0?%d@ VNfJv]\'Y.W$!1*ں^PjKRpʖ7Dz*?1W"up7?`UTj5mNʕDW \f >Sd+%.>r˻Xl94Њ9Lh HI` -G<LʹURt`ׅ#6J 4|8M €W/dqEL@NA 8[DO{n;PMu4EM޺][8KMVh߇5uj?wh͡O~yt'TJ.ȿs*( S(7X? я+'zRMJ({{0Os/4g73FV{Ą5F&(ӣҹ{fҨ-N<3MI)p˧rATTӊ1?:I&t/AhP_trVes ?yHi">>`Vl&XA^M k>~nO/%󬨚֯0UÓo:)v/f@H@Gz?Tendstream +/Length 2578 +/Filter /FlateDecode +>> +stream +xZIFWm( bȪ"E%cÃH aCI($՝y[q@W۾^M›$Y$fS n2& +i?2&nv+?0K4j᫅+/Tp?jG=y,]^Wco7^SqOv`K>3ms_޿C7] LĉR='atf9d[8+6k lͷ)ímF'-+)oHQeŁW(;x@ ?`tK69눶p QKbN刄"Km [&ٺ}=׿.L/I=\K_~ȂRتEVb-7>$֎&Qwر3 v/W/^ +(y|B(u{DOd~BMWV +FȜ[T6i-.z3K턦(xib]d*uhp 6#od=I0 m&"&D vCGޡ@s@W& YX +J\ +g^(lYecqC/Z$ !e]WʲG-K"w9^68̳ylPEڄeSYh T#t8A8da~~O0h?HeR| +HmG3D6Y ]4-myu6/&fc)݇GĊwOW8s`ABaߥOJ< Oܻx_DYCvҎ szf%]#ďb Dœ8K4KG2y.*y |B@jN+y.w;DXbovBbl,k|l r@uAoiFgtFS{ga<`mk܏|` 8|."=oB&.4)iSIU6`]22 ΰb~" ͓|; +Z{MVqh@X"80#m]$ר0i|vJAr>K9CV6!Mϻ`w`|(.1FPYpamR±ػO +K'1mN 8 ukASA L*^,Gը!Ÿ юMTLY(Hs[40qlb4K-0\kۺDDqRں@ mEe =MӎI+ll@z5Kqd-ƉǼU. 2Jc@L ~̏aIInBG0'lq3S4!jQAC 9~a1-mm,0PRT84W6z8Q16 M XK$*2[fMq +&D*i:8/8̕Q~Nn2J$: dxXYe1?>|}f\"ca 6i"CL|HPoyhS@Ä gs:/<_MD?w]1$e=TGFSA[8M ;RM7 .2f)[ RKKRn5r[L'.1^QC$η5[-)<€> %f c,f:=]&:oΒy:6t& wxlI0w( oRvpI[ap[F?߭/"h,9$a[u+_Hk'Zg1"Vus(Nc(T| ZʅULW͇EIE+w#g$v껡> c\`Ӷ.SnqbIaUYKhဧj0c质![5/J38{n*rNƃEsK4Y^Z)(tJP%c#+9E +=ߎ/h29OppTmO'B$SA0 6FSSɆq +rT2Ekjjގ^iv j{C|njmu\i['fS>K{Z_)f!P'9Jub?&S>L>G|%N>(7%^8e=6h&"?X{Zg.߻ қ);OF +4Gn@?1{ vvu9XjQTc<4%"fqz_F'}܈endstream endobj 6324 0 obj << /Type /Page @@ -28882,30 +28669,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6331 0 obj << -/Length 3618 -/Filter /FlateDecode ->> -stream -xڥrF2&[v[v쵔!aH$ eoAPR83ӯA8 /Y^~\&maP0pp<>Kfa/acI$g~yxu؋C4?/<<ʽ0<p b;>3ӛE@A7 &rdu}=B;C~onocdƳƤƅS~< 4HHN -SoS+3p@ ܹWyTx+E;NG*eMu(yp"b>1`5_@G&yipÖq)2%[̹4rJ3&KK3*jL2{9v3 ~VA@nP,AddFqUdZz+8u⇶i -ht -V=nУ4hTGh_X=.qj,s1q<̟FB2oWTHMذ-!jgN?8qSaH(lS$嵎:d  ;YҨ,,ՠ`uD$@ZWN60 NY شh -!։qׇӞu[?kj0"o,S$vG iyCt̓vj0y&A@SvQ6HNgO1[}()#tI:f_H~ϓXi^mL\N`Dj)=ɼZmsG99G޺=p*]UB~ą+ͯ4\Ԕ8NB@_É'apRmVڽ2~B9:1$r -:qF֊t X F9'4q!L7bFAMYyt4r1 9sӀ-SiTܴMdx@u[GaO0 -_2< mIw7vӚoN s^OT)<0y!אN vq>L?2RSif8yd0, --ΈH$68phbCܜ3yPqlԲȪ7&m>j^@|`$ҵ+hY,ZJHa'Fа3R0y%(L =A?P1kZňֳH9oP>G,K*ٷ YGY$O1,4v/-/(lpSPym>d:(Ⱦ&pZ:CN )0UdfR<}-y1ָBi 4a%7PJI])nK J=^M3Z\{AdWM%jͧ֕:&[M㞯dOUIg - _Ҿ5pij}V2%\ tJa7ŷ!}cSõ$r ?- -;{+;e*_I59eզ#Wz ^ ^Ga-/o;H"Jª -&*ɃZK4TK!BUƢ+]H8jIYTr=TѓzTRqbe*I(t$XQde -\3QMkgqފT;4Rv ɂ'X8'|.+6ؔ+p-˦ OqaEuI(k_R8JfWט|jnXhգ3vd qx2BuoOTz|R)'u}9{ \TB0\Ö;^ȪH%vu븄W_m/~Jz:Q6)1Q#J0Rٚ,Mއz8鬓łP G3Eղ`Pō|#b ힻzbtR؋fVG[urpeoHuNbڸ~$sNbe %6Nsa|eGjU4'?j?1Jg pt0;/JENdҲܻ), ve)(s ;0OR]OX_.-QE|u}qOPt0ܝܢ0J1op[uPw̐f>usR]W&fրXqx tp'L%RfPCLFxwd#W +H4Bd']Q! XXMKV#e-b剰_ 'uoˌ-~b\?+N ~H!v_0 .Q͑RX6SW]$>^Ù8?L8wGڗ/O -S0]Qi!Hv#|endstream +/Length 3456 +/Filter /FlateDecode +>> +stream +xZY6~_GbxyYoybgRyH2< )QMe]SS"@h|}?w㧋8qm?IYWz8v^?6 +cNxR7|Z|߷|^8Oķ}~ZzrZ|>=>]LER'1y{b% \V7C'%[W ,%<3 4ܽN`Nk'n3m!7]ߏg4\Dk:7R~xۣfz>![lh%KC;ežDZ͢;=VsDqciei=4=]:~W}6ug/X Qd[x-~6,ٶ WNn#<љճZԌ<$9q{6uSvQ9AK]|^?3XǯLN%+:B$^U6:P}*M=5w`EgbqC14fG6mqj}Va)͉ -LwUF^I"}ƓzM+}eVvŭj+Uoe@[@Ф.M|-|PtwI\{JA,L \ꜞ"RޖWPbBb?P4OxyE;(~vb8 )]1/Baw1u{L3m_`SOϟ{횜0tQTT'l(~9B,vzeNzDi+ +RFotX5 ~qo thpG +q4Wl4BB3#^T1a x5)ܪ.(2=VLx.2= yo,rYk:'GČw$ʌ 7$I`3 A]z:m64zZ +Ke4w|_:Kx4L./EO4Q>h05ڪMߴQtiv3Ȼ?~/H k< bu`()wkHk Gջ{i+e|əq_uT 6*FNai~G/c"5D$>2#e3jpp㉄`1ùj!8 :rH1Ynj Md䌀x#q H 粡&np}__Tl[31 u(%{xK  )vw)SsڎmL:IJٿ4sԪ[znm;Ѻ^k&=ܝRSB2B|,PF.ބB 0*np`Wnn/:}2#q#8Nfxx,#DwaL{HXFX#Ȑp@s[ nQ0(kvl>5kkާKDx!@tBkxW|.ob&L\N5m$icƨb$(uHE.;g2迥HŴRonVOhRau3O$p|pY X`H>~\"dj_]M( +s]D@7M%Kiā+])n .=\ 3guHH\ՆwtL7Zw<#y$Y[1CDG$\.ǨLj;Xy5Ǣ_[ 4GWp-p@vը ӫ6}.cAu^!+mȕvȓ0}aRr1=׉C= `0x[8{{L~ݏoa8|PV\;0QI\n&Fj!P!|y#g}1t)#^Kb22KJ}M;x:>;6BL: %PLp3YA<6PUrP@5p3p\NڪP<pW3|(e)2^L@•Rom+1OM:szx` 沶o*]RD[,Ou ICjDN^ُ j +!EU;W}ɥh#:X-W^Yu=ԷIa0pN~+L%bTu|*MHfbWGtZj1a{a/щ +ayF{L,9n/%JmGǍ/ɗq!rGI2G73@Rr?>d [#G_; Yo'4mOӟ %4#?|fB'G X[{V("˽NDtORC'"~}k"H x[khx(gG.)ʚ +c* J2YsR#g\сTlv]) GdC.c +k*1agQ&rXMςQ<6xĬWiUv׎. e>%C\r"ƕbxaT4#Yl F\p;Sϳt"b`GAyuV:m%*W)vb +F%}ڸ^tfw!C+"gT/EȺǷD4RhfK){^k%ͱ "L\*Cc\C7>cM.u 9So'W}> endobj 6337 0 obj << -/Length 3679 +/Length 3622 /Filter /FlateDecode >> stream -xڥ]o8=ؗZDI-m6iqq8b)6/;_([pcH{g,ϖY,wWl3BXyz>gaA>[= $~٪{/J)O|\f<>~z=ϔGK3j;_`[l3]߼^(?V\[?Y W*U͞!Lo?뫻ڭx.)*%*L)L2(-OVE'nQ>2<7zRHaF[;: givFa#ٛ~Uv 7yzZ;Z Kf "D"tm38Ƚ] -^/]Mŝ5Bk}UːɊ-o. $G9PeQ]"AmsD>u׌q#nEO a zy,!s6]$oĐrn+\ȁh>g]׼feB׊Fx '|_:rNm+*}%bH\iXRX# %!;K<,A2d ! ;c啤F(u-gcdY 2-0v2d=/^dkDPq晔GΔloJ&[6#_>]G[=բb0:fJweCȗuXJ"&;h5t{lݡ6푃=> *AGM%g1xƚڂ֧$B -n.vv:ߒ[{JdJBe&>J5a 3^ܶ)NWrC"'H߁m߸kؗ諮5Ayb[=Yak_׭XEX\mbM:mEV!"Ac*q^˗di;6R: -4$, eùM!DAH$Y0(t-EHfGGE@S3Q|{k9N{"X_.:W8#J#-_ka!faԵ#D hdpXtJ4F8rAIbhiuMڋ6{ 9qXC#@j:T `Et d}s@k_/ =(ee0|nX,zh,>l}_hvlNZ n -b#jPHV+(Pu׷ n3F@$gn2i}-7eCThIWC/ Adүsq.Ӭ-[;rl_"SsGYءB o)ze4H*xBtPd$<0]V]P ) -RVF+%e|+|8ƀ i(w%J EM5ݓ S޳ه!+k -Q8R9 ;^#6Oڒp0H 7V,ŢEfeX4a>%Qfl~&O}g@&EcM[Cre/9~]AnHŠ`o?A1+BxNp'rW1i!̊E򵼄6$cD^m lRWE+?[@\-;Dnc4tmTYSaJ)S!ŮDVrFDzΔ@ Hd-0AaِL +g9u.I*Xx#Uo\&u"I`Y.E:~,Z=MMTde⧙aɁ2Je0U4# -B_!glH?ҥw&U<;Khh 0V4% !=@zD#~r#pgD )|B_t>ڬ -I,.9Ga\mE> 灢 " -9X&xjS)^שͰ`+ إ9Q6J©#L1 L+xn*C(A_kՔx<Zώ63(itjFV/6\ Qޜh IzS0[-%c Nm " mސ9Β~t%,KZk3 PB/ٚ8䓶c!-EtxˏaBJ,>u0pTnLl -r6Zڥ(˦ n*Z33މ68Lʄ: u⸲R6n_ջ)X]p,*ݲ> b-[F@F8Iӟ1#`rB~Dpէ>2sĹ'q`~/G4k`9Gm@>)qRa/_35kRLbЎMRKfzO] rcT"I cZwNN.o\AOԇ4gD(Ek#!<uaiR0O -\!4Ho)߂?!--Nd pJ d` "ϷjS*>rk/m21:q9k^m)@%a -޸apzm6tT-`MuOQX/0 DIUA{ 6_f9g[+lR! nM*M4B."$w|C"ļ3?tr8|g/C[T{P{dd7w=U~ e,:U'|76jL]&zAI&1RyE ջ! n.U:-;KLC?{š-wQy]rtCFӒFf&4Ic9bhY7f!1g MnWssZt%Ud -nŒGK?\`= &. wΆGC:R eO<7P)&c1Nm3&)1q\Ћ߼v>ի˅Asە"T!]g0+&^ʳ#?"NJ?.<x1q*f Y[UVjEl##~c7 %f蹵CZaC-|f'hd6"Weǀ}3;G<{q[XYuq 2`;/B[N6sq{=qPE +q2 TY#VW%U qB.j@bjZ/4HX96zNnQw'o0i_VD<40P͑Gp2gnӵ:ArF@ *¥:|u; lIZ*~hk޹p.*W@ ܶW"Fz.u5)Xɾâ$C`;FίZ^IjRwܲ|>'`LN/2cG.C#2AFNUgIqL&dh3[e|$\?P-j-v S+Ql$ygY;|]֏E8$bVCgj#`9TxTyx1g-h}B!D bh7-9[%!gDL$4PVlRH;_3T3>8mKt 7$!rtA}ɍx')`Y_+Ճ)J/xx݊],֤SVdur,@*qI?2~|I&~a#㫠=LC2(`P6۴POlBiK Iْ]tavttP+Xn 45ø>7 +w'O~Y +~Di<xk >< `=lvc(tp  AڝX ܞhG.h:iPL-`_^I{2X†/b{!'SkzZz5PM[lnzHz뉡l33# +`%SwmVW'u- ێܩX UAlD +9b +K +V-bar*XKBN˲ybvSne2?̢`YNO-`qILNT> +fC:.5߁XНbΉd~A S!4LD%W 4wFR(ց$ڊE(Mn&˒#xT %O\WĶ!`8@}((P#6E[pClBS4ȶ@8CbAuS!# +PDڔrgs8vHv )ήG9A:}&z͜٨Oneil]㋲mS0}[-Ġ%J ڨm " mސ9ƒ~t%+0Yk &:TȄv)_|56qmUuC -B[j#)VÄʻWm}GpᨪLٌS8KQT}'eM܈ƑUu fBg9g6 F8bh!'wNU捳dqL賅jAZ}2-$!$)4ld`$1$3Z;/)DyI$p2܏X@^K?͗#4hcƜcNZ8 2 0Ě61h&m/e m?u-@>Q$ jmG89i mKs!>&JR2a8~lٻ3HÞ+tօMn<+8[ ] +| lⶌ;%/;%Aqf,@*~qN#. q % ;)SL85P'5+l,b)u6ˤݹωϖp00NOR{EJW&s{V| Qq4OBue?YΉՊ:8%h⫐Il*s -H$?3:$#nL }XO6$s*z`M]2&yy Y X^TB܁+ ^Sķ5%Gy/Idc|9VcBgo$, Rq> endobj 6345 0 obj << -/Length 3267 +/Length 2575 /Filter /FlateDecode >> stream -x]o6="P@jH8ǭ(m[IԳԖ73RmZlP8 3yX,,Lb}?̇3n dz&^Lr/oiljȢɔG =opDz7z}1:ݼ ,~5>_8,gnj f*yu6;O%,Ĕ*ɔ$'rV(\0ybD&*Gz,^0~"Ǎ60Ѣ۝OIxV)a4\9:Q. -z+QHk"H]4 jw r)nAדnŶ,Z 2Deؠ@d:y IA|}q}"FA՛o$%,/xX %Y1K -b4*FhTE8b>UK&#|(LIBg)͊vP+RHV6t~-7bD zQ-aZDhA8DJ;sm[h=ggUaoZW*:Rȋtgijж+u$UP -d/P@A 2Jy4*h([@{y::C]Sjk\Y(ksf@wSoE,-"J`m^&Y&Y&;R| HS#`B -/B,,lT֥)Gux D V$#)04j !@8N9>L]a\x[i|E11=А`Cw+ZWU>2AtVXJd=PH[@ < @MeoY5|،~[[e+hҀoRkY;#:}4ۗw]TY;@1&ArW0m4I}F%J^bTF%yr͊bsLʘh, v::Vc,N -w+[RN=Sp~c`9O40'D9^^x"6f:6>x$u h)a(D6 ,K?wťw2>\s(+-`^T1%q.Y~?}X ܲ۩ɗԹLWZDHC^5 j؁@JEnĦ>=К~o'ך8jM ȏip_)U4-र鵾Ac=<՛Ccӗl 8}P^X&גd=ƳiWKjs_TwwB9^G'j/S&KPJDW3%^S$'~@B&nQGmü7FI_DkZѧˮmWw#)]ԥIhfJS8LgZ]wLmlA3r糙 یuK!™?OVd#WčgNz| fK辙HbQ|%. .D__'`Rd)vq>&YfMb|Bdj(m+F=EK6K3iTQϝjFhNg~lEޟKґ_sk`F܆z1rlV[jUځGd_mZױt<+t,]Tf)k[~l%Cdw;dHۖ&rCЌ#LV~ws?SN(U>t突jmC!B޸V>vDr ȳy6|.B8!"t-MM t:~_a~^a.D3e]v7iK*)o5wq TEi=1􋷡ׁ1݊!(˱[y<0ɴf5aٛr \w\aHqpb®8#zUc=jċ0IRt-DwԬ4 /Ymm㦆tHC#أUhMt#'n*lqx`ר~SnQglPkH mTwv*YΉUPsX07lfWϪT^| aKؠτyMχJ? {};0,F4fOK͜52s0L]XTE7- +U{zAwC57z#c78A?&9yuʍ4om8rs?G2B;Ǚh4%ynPSva88z=|薵r*!}ԃz:1"Ӟ +ݠ&E'Fax{nq'"u7IE#,piYuaVceE֩IO9Lφa,h@@EGZՏ/HM5-mj?LDg hߡk鈴#OŋDX':AΞXq$~]SUb *FϘ񃁺{@H81sPE귣F5QǧU.;r{N&N)AHit4n2wiQVZFYlS(F;W_gT +יM0י$˖+d^6jӲ&7\LedM +JXy{e=`W;Ȗ#d@9z +ߑ_:S_&T2DxO8*NsKȳ%FnqJk|)_DIw&{&z|&Ye)MD{(#{ ;-:a 1@2ˤen4a.ks%+`]긭v00E?,DXh᫂j$ yf.F* m2&|2 h^mRe͵,It9ʱp;,*9(򠨈wX;[JQž'PPan]MLQVp='C*p @:B}r.L`B$Skz͌U:B9W +CryHj=;x mrnSG^%}تn9)5?V3ECB==z-zu +߅FvSb>6 'L8[a˲YW frF=zP׼s]?Zu{"t?0t@`>S1ގwiRo+>5솧TvUCNϪh4&@vk8 rt_|΀s$=$zfhq})j?pfHvKCX/A20iOZ)Ϛ|Db >Pyk͋HT¢=ز\kӫM[M"~*ŏHHLc㾃_S^Hi.*}ITG <H'KC|sl']D@|3G,LCA?EeF?lP?5OKkLIaXf.I&!<>ņNndT7 qPQ'z ]$SEJendstream endobj 6344 0 obj << /Type /Page @@ -29096,17 +28878,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6373 0 obj << -/Length 2568 +/Length 2203 /Filter /FlateDecode >> stream -xڭZ[o۸~ϯ UQn}9HnOMӸ؇#ɶKJrXS`H3\I-g;ڝ_/Wj೰֟ݻWoW֭L eb}_"rlgxvlm{-+&)<^01slx9p/Ar4iwQO ]ũI1?E= EفEGt -M64P7 Eo1;{5TZz P[L27y &fb (3_yde%.AWW63hEZjG̠Sh2&=0Ouq3 ` 2@[r0 -,.}b:ϷX̡WFy9X?X6KiF9DO6hJ'r,T,F$jSʌopU:@@]wJ&\ޱ]q[9a]6YB6 `lv;m19PEY{vAX-;+%䀔I! Uۄb~;NTB w rH׾~%ILcSgb.EkK6opm]d8SV?M&\5_+HZ7gд۴]^)J9ȎCaaλzxW3, eaН$з6)Tr"}VSN/O'ES*Yog9{<#:A\T+ľ@PH{V!}nәq Yd4AK -+˕9*܎K2|D[CV> 2r/sх!cփj&dd!ߗ Z~HkGhwm>^<׎|uU(*C{į78gzEo'c3h(+w!o6:^p47L<  &a& lL.!A%pu9x1턶뉟 OO0313Ͱ2w,(R*+gyڻgvʥ>lZzUm(m(.w\kG7u :B\@jGT .2!ޡ} ❭ @zD|vEi{Q8/G:k&?pCEhHd>7"00?繞G9=I= ~ϊ H. h ~8?ԨNieb$\ohd:Ӯ$TǦ\UL V-S*as\טJ㦬^FL}xոQ[P7/t:<Ⱥ~N~Ѵc-s='Ѝ}~?qZ׊2å6}&(c~ѩE⡇=gCLR7i>NfߊL{!SM+h)i<5I(LmvdŴ|`UqCax&z`&eHA2\w4!#NF_[uY5-gqf@B+Ej򝏠@ h>$Yc-3Nlb^yn̫k4t>8fu}٪RL -vl7JZ 5op2P!θs1e$?f>endstream +xZYoH~# +/ d=l`f6ْǐTI]d Zo?o8 I&YyNV0+܉p(ĩ7W?GbNꦓŒ,߬>.}AXL8N۩gݼ4&?Mغ[&-g |k|i훙0Q/cջpD ^;A_\'H,c*Crz,Q[Ke{jpQQ%y}lqMbzU^||xPo<>3M6Y3E(+HjV-u";~j(g_ȓ|(IVEM! 4bd1f>$j-2P]uW9lI!Am|zQ+;YĢJܴOA@sO5nyzu\5+tDFIN5Nc ' +9i 'EX0WbȨ4$șB>sd04-'D-j ~ 4Kn@Y"IxI> +d FWwM ^%Nz?(C'ɁDJL'bi`U+I!S;Պ RK`9@>dޮXU'?R;[C<0~P6UA"@YGP֪i"O]@.padA߁VV숝N$UqYKp|T_$KQY!rL1 zA[JeS[D%1[lO/t-qFN"Vsκ|5 zd:0fwy}օQ+m]2eXmQk]xPTDW~wC7X/3^ ppX-eF…Xy} #@70c" t=I][R 9-&ǡU7JvT]sR Vg&@TvZ+s $D/k ,#N1uOd%WBȺU${n-|1y0E7SiYZ×ԁ)J@vcP1'2Cl + 1c_7^lYK}1a 0ݶc ]K4qxq3[ zV~|]Ec@wLpo @nAjݑ5T.QvGJ΢|@AG) Xz, y֜+^rٗ)p$/\_Gjv#gS#Ty:]^m_Y hGoxw-3pGo!EnO5z_@si+uOOzmR6lvsӍߚѳLu/D >EwXfd5a2>}6˝?2i 'ͯYRF V;zSdŠ$p!:Ȣ#D AfP%Fs./\|!xU^. ~\MF8f{5YM%9> ό`BA endstream endobj 6372 0 obj << /Type /Page @@ -29135,14 +28914,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6380 0 obj << -/Length 1050 +/Length 1040 /Filter /FlateDecode >> stream -xڭV[s6~m@A yc$ַdڙ> ;E^WXssv2I|&ǰceИHmȑT1:ӝg8ڡ.v|?Eub&tgM0_VKq:q?[e<1'k?{eo&Z|L 6—15&2a}b)wȶ@G.ۖÏmlM3_ Ч 73mwijG|b?fJ'rE!!-LI7yd/uw%zPi%tj3T{0d//,g$<[zGm^flo/7Jk|圕Lgj9kԲC:{*l63ӻwtґ_e[ 6%$sIsXo) 8Q%9Fdh`3\ԶUI -UB)!(:k(~`EE)n=h9JXaV,֗~֗dk ]h-YW!!8, +xRzeX0YVp 9 Kg>{y&S檷YBiP#W[]sZqZDi2 U˺6ص_Rf8 -SZTRuي2:/2JubתH5LQscNJ"(U.fNJbxm͞h!χ?_nV]3ٞLpwf%L \`QUKܞ{L yw5uZ|J׬JR 61dmSsaa-'kepY˾:ڠPC7~l`TI5˷d޴Mg}g4ٻ$pJfGoo+O1C[+\L\ŸWF}_*2EO[Ɨ -ؖ=?JVBtONu-QXj2vk_ވ Dendstream +xڭVK6Wp[j`Ǝg&1SIf2Ղ"#Àq|M_dl,Է-8o^kW]}װH|>nב8б9_^Ñ z%_Gp`L{͆;l.?#)j4]˝8o_pO> qk`A`ds,u>lh-5W=d.,]͊IaE627d9rG![%ZTA1L+N*"ʉF>bfq*5>BCЩ%~v>c=0~XEo ,ήL{j0S BtATBKiR3ӻZ,V'Z|՚:+ÒKAXf05)ʩ7/09~) 8QJdh`S\ձ\4(AI"OA*PAz?t覄Xʬ"!̮}h^F͓JpVPyߌQAXhbоZGO=V{>T/fFbT+fdXSc& .1LX$.l|MfaR +LCd_o{[C3ur2iU[IR˪6ح_Q%8 +SRTRUي2ngX*Rs*D9g0~];-*1D;)E3v{S'}A- ,ZLpv]OKrr1`UK= &ɅoMVA-EGQF|Xݤkֈ#%eV2϶9E͹аQv Mq6ì_]mQ|,!qk +?0T[*8yLԞe2vJZ 3㯝Cg4ٻ%$ +fGooO1c[K_u3?o^21M[ʷ +]im1ƶdǨS9c^vK] /endstream endobj 6379 0 obj << /Type /Page @@ -29159,24 +28940,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6384 0 obj << -/Length 2619 -/Filter /FlateDecode ->> -stream -xڥYK 0 ՒJϽbw]$`s۲Iׇɒ@4bU,ϲ_lktR?xW02nX\U^=V&[f]~?XY&\reYy_`|^)˯Ͽ t3/f~7uٔK.ʶQ&;m_GU8(H= G ߣͳ㦤(Cw #f#@XF;:sm AWnc6;XK{ڱjdGF/`.aSTVt%t$8ϮUkpFSfN`mA✦1Ɋqn -3: -ʡ#7W  t 8@`O -a9ˮz}de{ [imW25ʡ CU%ldP6RD3w SYPWrG 0y? _F4AD -קAB25lr  XK{s덬]JY,[ ]*@Đco*@QXq[I@5𖯊GTaJhBT$q)rbLjsM.N" I#/aes܌>*pS գQCY]쐑upBas~"MS4j`'$,Hre'䢉pGTezR[98[ñ0 ~.Iq¹BJAϓSyLTn 9)k%qy%NW߭3s^NDč+1 ֑[F=\j 6cPv^reR\\J@8Ƌ.sLM1. {^'8i4.u1P4q7l1aiqEql5Bުf6LJQKk J]ɋ̋(+_E\$P %ƱSbP4bwbHӾhz"1 -\g -D3b!u/VS|<.d :> =W1BD1J&렛ChUoE9bs]JwJlyTdɋmH9J%87CNr`%>2)ڦq77bz)iXݿ~-+N)Qiuy_;WQzq8mK\1Mn0?U[m -  rׇ=[ܓtC &̍)dCֿP^ :_h xT L?`mo5gB/M2M{ =O]*u> +stream +xڥَ}@^(`aym {I`zZCJbF#}jfb`GUuuRI#יi<?(#Ea;k{0AvAe>AyxN{q͎ 7WjEyGYuklL58+vu+b1˦\):3m#Dn c=`8~J:TWR|W;d]'2M +R3&AྫྷJT,Dz+f͞W N=a`T5|"sێ`sPH;B5xV +UBL6PtsM;Bfb~ K4bHnPtQ堔u> +t]%3xQe.xs:FBZl +K.A): ӓ䜜W!Ț} +`yxoF,B"/UpѠILf([]ϻ DkQm]! +[8*.Psd܀{n:VHgQD6@nOVI*vX73i~̘4EphtyykЧ+t\EuepiQEq&l%p$E3BJ@KY+uZR#ѩ`u -kg pl +,ѮcȦ.K+  +X[F:GO2&s/P8[^ˁ= G"&f&ELY$pT bD +/!q#bi=ID=/1$@¢@,ð$"b0J9M}qjP"G3FQA64D )y9:uEvhvvzX6 d,B1OJ&J:xqyY3q +DN0[Gc?au?zJГn= Gye{r8gF4ǡIys偣Ho&^uNy5TR#$OERL Tja7$jxKғy4pxVco!qm +6b啱OA|1&*uٮHCŁk*K5e-L8>|{4m. +0…r\)pkW ̛Mk@R__aNwhOmQ2@Y;B5/vQ -MI݈fGĩ:禨$GjHpsu|(m!qCPs~,^X/w^#LRp-%+Eb (iC Ҋ JioK88ioI04`0{' …IHanz霸wYL!԰ t(XFS`EE +|>(d&8MdSOD4<YC S 3^ےvUU٦VhE9vTAȅ;yArLyad͜NrT%WИe+yR&G~Zߑ'^a\+ sk)-^< +.yq9wKϼX 29%Ɓ؁ڋmca6m{G(x Q>iϦy޵?ߖ{}dY=#J[MEU# [$rj۞Id~-)Oi%/vX`v{;ڋE©|7H_*_jfendstream endobj 6383 0 obj << /Type /Page @@ -29212,20 +28995,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6390 0 obj << -/Length 2748 -/Filter /FlateDecode ->> -stream -xڭYmo8_a`?Qk^^^bɶ[Jr]pTdYqrHŗp8yf8#QW%(Bh>sG L!thLtE&O @g.>N/o<1DQ܎s7R:X9Sw.T\%tp{\' -ɦ7f?߇/_.yZIA/(z -ģ]!az}Luv{#^5@"ձTQ'( -\>i$'YUlBybʭoTOys"[%7Z7?fIKn!'ϕX9"NlyVf^oW߭E{^e>3Y62#++e_yMWEcYuWzWl].f] o<`<;fPC|m ΐMq.\+fCҳtQ:CC|XnВo꼾/'ҋ:O --YU~p}^夫u>pguI(M#"{:|7Ghȱ8)9z7όE6@ql c4[~<$OvDQ%]n%/[V{d9Ԉ"Ox?Kx(:@\[/w=*ᎍG,r`sw4hX1tb"dQ{ Q{ 8~1kcՊ[xbx2t)/n+f(G\2jJÙyhԼXӆgpo Rhg3y,ҡ4KO2ꢜcZ/7A$mASTjg)t]5K6$7YpMzmwjtG}Vi6l6|FE![2CO E=˕ U " ͟YCf nWc:#ΐ"6&,ۺ(iJ0bϭ ݓHֻ`(: Ǿa6N1zhQRl[rpeX*H\@`cC}Gn2+3v?\qqD:XπL28X> p9B? -$'T`y'm*|R$DuJz`#.)OHRa--m+NJEc~<,+],Su2ȵӲ>ҐUElך(GE͈8A} gO4B6_Ԍm* MFAoÔv53`}mi[QG`ac CBãxMUԍoGXDC)fWq˫g("8(-g?e蘜W60b 2$>%P"NlW\;Ns2k_J1x.IDϒv$oX&\Sro(aL:D[Nx^yRB13/݊>}7yY+S;ƤgnbY7zPgpQW7PGgty}^7۲W+fd}BpIɛMnȓ|<‹XŧCY" -sO팱[w7niWTj+q{Nh4?B"vDxqNh'5vj;Yuv8Eܲ=5cd7/جPw&Owj/?j09ޔ[=iE&.zFF!ac^XG`:UUr|c$2GbTiz=G@ERD+^>&]>NT Cq1K=~牚X6ͦ~}~Pa]I q'I -O'NL(I.chMUȭ+rT&1&>+()$jqa톊OdޮXA'<<񤕅7/endstream +/Length 2633 +/Filter /FlateDecode +>> +stream +xڭYmo8_a`?Qk^mm7v/uBd[,z%q~B*m p8<3 b+I Gd9s'+yu&4;7 pПId2_<`ŻԖRZsvl*۩ºҚߚ>R]yq÷}틗os5o `9 4o翞]{۾Gw~=sē=]G$ds | ^5"wǍ-]'NW2OS;+˛E]lBUydv{1V]z*ܥܼqmsJ٧-G͠:%1rD2pV1BUb'7y9+wfK<' {UBgتZ$ƾhCqgUsoqW}v hSXr*hLD ׵ )F-S{F^ti<݌اŀsNWUyՆI4eiVQ:cRc|FnБ+(TOLLM~?z9*+̏pZC'}CNj$GDBun @c;R0/ԋO_3@ZL481 ?tg'{xahnS2@pJ2u`sԧU\ ^/ҖF3-SP|+>Rw##]}Ocj}!+]+`"+Z$Vz YD]C]0"x]D}Q{h=UX AO,HƜے7dXХHX5Xkq-˨ Z3ж?7T[Ӗgpo Rkhf3y,ҡKO2jZbޤ/7A#mA/ST^9Ɣ +ص +w,"ܻ4#͡aBbz6XBrS P![:COE U L' ͟9Bf )gHE? ӓ]ST+n4h% ;6 oHcɄwhZ N{z1px,nf~f +xxRGaly1"S*4ijُQ~G'^ Wl-Pީ+y`.)|IDs`)-|-_jNDEQsi׵ڭzzvR wtNUQH-qANi$數kћ| -"ۖ)# +^zZ3Rz..=0Hov ɆPhZI_RRLz9PCqPZNe3щ 707*,d;0MJl8UвU^s4k~WVwyM:WQJmKbj.KEq: +.m8b 9*N5vX/ ȋLMOhA#^ȉ_>ÏʫR%oyhd +n&ţg|8,>Ol3=^.iMb߫^jWMSe'7 +\nfAeBzMFo:FL-ηiwU,mP\pmүN,/ۑ?v U!(Ы=(j43J#yU٣ +6GaS?M@[I ~5N .{ׯ7u5IEx]bu!bٚtXkr`RV:ϣta0Advzz{}v=̦Ⱦȉ|Jp^iW`nm|s_\WrgA_7g\33rqkyѝufrJ c:L~M҅~z* e89~Ǐ@ZHpwsendstream endobj 6389 0 obj << /Type /Page @@ -29267,22 +29055,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6400 0 obj << -/Length 3389 +/Length 3204 /Filter /FlateDecode >> stream -xڭrF``Uc^x&N!"!eP@H~5 @nJ83nH"f #͒T&MgU4{`,e1yzClg* -(-:3[ n_|q0FE ->ϕR<5cw3^$ C=F2"3Q eED*z^aiG"Ǟ~'\]D W-Gښ0{<9;[r< -u/bF &"B,G q?y1>G'"e|ի~ -'bzjyGIvQtLQ˄w`k"z90. ]O&IBp=vEp< -aK(H8ڣ8z`F]W7{\,$(*sg[2e11=8igov6"] f#Bm2s#N">}`=0IkBG[O,Rb'bK|F#67ҢX%e7.ebt͎F?D_G $:ɶ-8':iO503NaǾ6͓j5$\yz) dmYi8zsC A¨PBDAkJzkcFTQFF9Ej`;bf 6&Ahx@*.S;I Q5񚤟f:sOh|tsq9;X^ZVMQc*=eKyaņؿ~Z83xĖ~.ۦ;qӠXP[e?}-|xZs`!xKUM Ե*XGrM!P'Gȼs>mF**ԗxB$\ʹHo8{@YAz.=oNӐLT"f[lslXP"ϙi< ,}.֔Hjkn4:]8ŻC;zP-ɏ-}!t@eAg M^鼠= xIA{[<%NHAxsc/ݯXINv,R Yzd6q.8]Brka -*2EFLi0c_gK^1$Ce0-g`Y(9ʥ3[a{8LF={uQt7i:("K[j&|1%}55SwNBzdH0/ֻO2%Wxg]`y1fPav*N񧔤j2s#}Ґe񨲻&6SVo< k 9G\Ν\J/bE%to<OOg; Ib v u=}H΂]oevh51y_lz.#lH #>BE.nY<ĜMᔆ7FTԿ/K$>׀RX$/4MB /*s')۴T,~p|.=Ʀ'c*+:׎_r-+zzhG5 FS K QoՆGdT( S0ۉbzNJd-Ov%mbW{=Ȇi^cZba\E> _C7U@5c|R6(wѓ _ɂAs30PԿ@l ka^ (gpqKNl"Aq;:rw`s;،R+AІD?`^$V>٠(JMDFLo(ޖTK (gfT -yGԎ7:r)!?| -6a`I$hn{%&?ZQ4>PGlt.Y|ejkUԁeQ;4!ɞ"Mb!}/72jJd')ШdkCK|']=$NZdqo8I)t dڙ(#.wMfI$? T$3~Pa͈=GS>ٍ?ӟ-UkRsV.)i -;>4+|=Hj&ǹV Yn@*1r'gIO -W'XS/O qh>E@|@3+ 0qpOtٌ{wdS>l@H&5Ɵdbd5o 0mMl 戍9]n:ѥ5o١=nԜS*qO+O fN>gԜ4<^}endstream +xZIsFWr* 4dٱJ) "QE ʞS3{oރ̃?5,lfy}d7 \/48by0)Md%͛ߖ;v(s|+y;K^O,߼>5|ܾ~+ty-c4| _.zо ~ӛ}?_yij#=W%lw5/?Sx. -슅JD5:ru +I:njS0b*^67sP =oCZ |lW57t˶4t/rPt;g?po Znb#n DeYR(x׽itH@dz Hz#+޿~""l-gώ#0j(mΊ<%Fi0L]=u~b$ I\宁9^t9ܲ@XmxDGJYaM13 NTm"Detz@IMT@h:? ui"<'哘zҘG8V~. V<%+\L3578!LxKPV-@ɳ%O%$cUaE,bhĐф#~dC^W% j#!c.-K D - uQݑemkA|iLĂyh@'b[t-A@pLd&Oy`ܒbN; O H{m-M\d*RyY@@|z#r"TvCF:@K^$b=֮f2*$PNV7'b^MIZ +a!OW @Na8q拴pz$!FXgŏ$*?J#ХC 8%>WREp@H ͍00=lfsL)Z56=K#$.NfkQ0$Y%6w(i+0BeGq b_o0!+(zBXF'I%dKGѡNęxVWԒ<3@]ǜ2o+Db#DԬf #\$2v5sP@.4&v! +v[a~)CT +BR_!:fHȗRrNd}rJ%]̇)1v(CD;>$'*P#|I,[ hcJfh3JD"actEqNF &=MLPѶYHcv ,O|l˺Q.?`.ϸFn'i#rmXvvF瘃ϹS'a1`A2ߓrMtVqҌ)!X_ScPu\6GfF|`Zev,`FkZ.LPؚ }.#b#)yac[oDJ".Gn[k%OAWQᑕb:CŨsBk1-E!cpѓWdThf(W̫j LaD,D} HET5 +k Z &$FM?O,휱vDϑGtϰo 2vIJ}XsR;Ҍ-V+)!o׺BUDtr@%}ŭ%0=4bϨ]꾞`d0n,a~ RqfA"yZ>xz g&Wdl'6`E2`1dS9h<2l5x >(m[M\LB# K4tJ +0JXmuPy2Ɯ}fg,l(3endstream endobj 6399 0 obj << /Type /Page @@ -29325,28 +29112,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6409 0 obj << -/Length 3335 -/Filter /FlateDecode ->> -stream -xڥZY6~_1T%6vMR񱙩l8"Gb"HPUJh}|h?uF~`$UI.?Pdм}ۏqx? ׉O䇑*~o13_$W{^)Uj'^O=H?[n?:?3=m`i ~~>闻O%;Pd9vplV:;On0=ve$ĭ{sq0. }nEJ'I(_`8 PAw y%hYd&'d~Nw@+&,:=^>So Ʋw%= -}:>9 ϒDdh65xîRW\۞$h3HZnk&$vanQBV9ya%H7F5SXG"a?Thz]6Sa-Xl!dYi -`Choӕt)O8W֖@Yaay/7wq^LvbW66iZ{TM$N'L,N1E.x)2#RJ4TW*$"R`Ć &NMl7`x`A너 4tc<FffN|Dg5Il5Kfvk>ntZloi͡YN10PԛH}yi@#"h#! svH}rOk'2]w&L^y~4~Dp'p(AWp<`hWlb0t-X!.~i$[Ŷ_iɭ-z+5/~8AldKBK(D7Oհ9s{#7_0m7Xkwu4CQ -- -c|s94xO5}%)5r*IXBiM7TC-;Wc{aU?BőIJG_aѤ۩ʝG.G -)Xʿ.PDslUq VNNeɭ=E5NcwYrp/bj1%T[2q:?N$EJ - |}>LEV{,ѩ+ qpfӮcpwt=KAHʮ Xc'놡Gpk,|Ahӵ+H~ЉC. ǿt(EQyLWˡMo9|!hFxfzmFW@[(mDNSN]:k[_,PC"',1ݎ Qe%8NÁ.M! -M[9:C,QB9xl\Y^!ʕ#Q$1@H۸"yr?>rrXf[ɁGK+уJ`/>M;F~u5-LlH -Hީ 6Λ V6jo 7"@wJ5ȁ+N79[Ob`iЁ *ûv/NHa-^v%|"СYƒpQ^"~Y8J]8th28o:(|.xG{W#@3Ŵ|HA,Dj%b \;&oqu[8 >Jt饅y,u8 2:`ۆLY p~ {?q`J6{qb`w0X H8ix#i/{qm8KՅf-%j -u:s95 (v=G`*$ghv-" A -)qr-^.yFO36 H$?>0<n|86&ש㩡w&X7dgѲqz2Vr2WSྼs7PNܷ/2 ªNK]b.`̝Ab/+f{. Ɂ3smZE7B4+K(bDpE^>=z|Ȕdjj v60-*$fԉ)J^kcQt &(Quqn|GsG,08(A0 >,i2J&@ z U![<ƍ^Qnȹ5{ōNB_%Cu <—+Uno's~ǚhD -fp츉K -pn?i$%6VN9g"12`zć ~%ˇf&tЙ)(40G*DZvE0P'+.5.>tX}-B=dn-ݾz9o :.C&KE( ?J|w?]n2MuhI09\7i{[̻VvJ߮:4˞O#&L^;Ҁ@ c\ߜ8Bf9X$lSD˧)tULgj55Y9( Vϩ8 2N'И{bHjr5:_!ԉT>^.&oǨ*r+gգl:?k)[Oc?>6pp8BE~ՀIwۭZj8E^IKf݉m6.Xhy,v[YZ߃|օPZ/9UC6%򤱥pl]2тGNA)/ RVyO{_T,d,9,mд;U6\ SgRd??Ngo*kcUԮ}=j,U5s1& -fa'2_Nc[1Ͷ&'qH^e'/R;m0sz3~Yy﫜򖟚:gLG<!lendstream +/Length 3231 +/Filter /FlateDecode +>> +stream +xڽZK#X%" l9˲V0K`I@@ʯOf0X+T%{{m" #]Eꢸo-&mFY]onMQXF3 y~ w?Z@p"_*nU߾:{A-~V8;3a1NGYÇV>|;: LB]'(Ga\$ah77wp_r˳.hmG2,UziCkKKM}16Aqe4j݄fYp_cu k +gNU;T^~V +?XIZGn`j?q`B=PWx "6, +fpf>rw$prrG~$#8M<1V'\jںCx%,{@_ \s~ (GXH %XY&M +iq}$ +T-Fi'T!F\ QBuZ:bU> k~jƝLIk'BTMÂ`ϒnSh4 UfiWsD P h38.W"m&QvK3ZQ䕕"h8+.!u3Kƌ{LU&EzrpȖPl! < 5- t (+1qDŝ,9p5O8XDž4iZG0 )fiLfDJIxE@Er Q  +v˽܀5 D?X t?{ bsjQB:Ϭf)8]Gj+0^c:,ˢk.BT.ʘ +<62+Mw.vXk'Reк$@6(BI8KgwȬ̬;T\nq$A4D 7'[#cӄ֏m]mkv^љ?^ 74 K6GWN%=^oL;iGhqm%K&kLVoΕ`J(ۣ7G3=n/ٞ!rK1I|lm?q'!akwoЄGn/Ҝ1Pr%ΐ:8v>6wbs. J80bÐ!c&^sa2Ram}W#N袱/Hq~йCP+Ͽrt4Z@h`!q5ViM&/gˡhW0|![hFz+ iy6NepNk9:YSk3/`yD +2}h$_0B|;H3'!-&D9l!\622d6Ttn4OM8>fWgXUG=T|!sY2^ VO%"+ㇹLZDEg1.9w?sirXfCºa  k3I-Zu[$* ːћ|x )vΛ D:[sGW ׹PT;,,!I*Ҽe,e7Q,#RP/#It`oڟ"m~)W\F@| ]`a2 9 Z .S]͓%LkxfR/SLE$^?x:DQ>^3b{`=r=ZppLP%;g#}gB+g;cFyauD(XT9gĻ|;Z_UgBw/_xs6GP3UZ Yza)m{Ў$g5D _;8!rlLPvgtN*M)Iu~|H= 4Y^bǖJn )&ao\W!%9(~j.Zjf,ֱy$7߶=(8f14{~DM`nG$-p/܅dO+Cy؊{ajOu%İ1a\2G?^dnᤅ6kvś/xׂKaD11Pa%iؘ=䥄n/22@&OEΩ$<{(`}1J)AIY&ʭhC8wAěs鏖` w2fbigK*A"mf*۽BV2W5a(5M ;[' re EV܊ BxJlj H?)͊ [-`XpfX(=w1= Ծk%(̊ڰC/ucCg;hQ$nٯ%QO@6߰966yE g,e<~"I{y߳=w3e_d - ?uY|ϰdOt_t<(0(M>!Fgendstream endobj 6408 0 obj << /Type /Page @@ -29393,12 +29172,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6418 0 obj << -/Length 232 +/Length 220 /Filter /FlateDecode >> stream -xu;O1 )"Ə8$@h`xe%NDC{JsH}@5rّT@SRՄ8/kM.#,8.)h? B\ ~uMPjFfQiPI~F{h3 hvJ8̖Z-^VnKSE ۄ+(M> endobj 6422 0 obj << -/Length 2419 +/Length 2363 /Filter /FlateDecode >> stream -xڥko/h} .zjzh 9W%yZ/Bы4RIMŦ -J ո -]rGX%:Sia}u &TqlBk68sYXo?֪*`P,W6Nۼ^nA8< -e/Wop9{zp2Vļ{hfʻvpx;Cl]#. nk[llKLW8:ZPea6ä*IcY$j" -nPI!/a?UYlxu F~5F.=2ɕCUϼDR C[k -Ss-Sˊ`t< | 0D-jb[tr¨viaq: ~_.=9^d41:0M;%+$[Q^~uGF@, ֔xrQ%eU0t(# Ig9,0mw-78F!<=5;~ 3KzY޵]EWp9$TRn -J!Kސ7/- ct`%**leO " -Ө +c=3myo+#t`kv[ЩMB4IQ5[PA *1&.}Yb4F ^^VB/G'y7]`@.o7Wn/z$kp-ꮭ62CNHK,urlώF3>QPSF8IqmGɮ-;ݜ2:é1 BϵP|4U&EKrP)IdznzEP8SW *ȹTi@ 4^}lr -IQ  BB]^Uvi'_ -v.٭(; @Ip-e{l|Z~&>Y%[5`7o?Ż?5ߑ~WY#w; ĕ$N\jԅ%G_ew|(W2XZ/xtr;օ6I-nB>=sV#`3v|=FבǂQhϨ#Rߝ!lgUl4nX޴u]4`Ց3*3XL]9gF\Nv<'}&eԾqsB*T6KO0FX?;5IE2)2<"lji#Xש&XVF,&3`ha,et gƆ8\NYfg2&"M?b,]MsK/U撅δrFKĝ5|屉9&V80l܋A ̱ɴw^S  -l$n?5+\Q*G@ZJܴҥҽwI)tT['eK@M YgࣸZ}-@&S̍J6h .%$(6H&2G} "1K+>0B}DB]A({ -@0TtvA-?\G -h;4o&/ɬ&@?V]b&RS][d T8'N'XPAxx {qPJ ~ՉQkF=PYܧXj"bM"ęb\^JYDQbb66&gO_<{B)0|\x?] i5>eB![֛o#2ܬdR[/~p{OZ@Iqq-H7PQb SvB0sڗ. _3 ZJM_"~izjxV|lˆDH(_]Z?y=~v?;xR%.4W1had!Qʄkңحk">ְLtb:;xwQLAX.$O&Je-D!yxng>Y*ߦ8&l]Gy{# +"2K<&V& Tw?3";[msY0./l{Y5| )E7wQ$> [ec:VSAulQ u6 6u_4_hg}MW;8Ƒ8|swꁍMYe)Voysz{́h~ªM[1{<=bY|D.[dC][9L*cge>H] IQb<2; = ?yr[aG١&T +ςaQ+o!%}Tȕ ^xsiYENMyh#ki ՆQ &`ֹc= +S<{&OE G9)>9oIJ! @nyd;{k Cl6hM}'бyx2gA q"Ё|Kpd p'䪡WR;|Ȳdm ڲSyvjDfPRXv}ǠïdPm'c.ۦY0+osn ďٔ|XS g>N[KӉ.K +T4@Q?ʜ'FTy)bIm= lxkJw"^ jҹyMA8MF4&PC +9ĘT>+bpF: ,^V^4(@=!!|5N{ȞyC0"n< M9Ɉ4Z^+u$ǘrl1oHޮ;Qphˌb{2ùbIŘNjǚZ] *'T6_8F -=T{8͍WqVa (ɯm4vqѨ 1+g;'Ȇ'f99OEclVR&p+K|{5*K-`߳|ا ߿[޽_1{]g߉wcKng%ߒh?x_K> X]Qen`Hh?I<ij.Q1.-ѺQ[F)h(:OxcH Jh*#6Z*rݢd$s\rZ+f/Ev֤@<Ժxj"|C &]HG2Kq&zgR #سq<`\F!Þ7;H` nF8Xύ'J'/ -8*11}}"YCHuSUy ?}^6k_-ʼp}e23b`9%o,֘ɟm |+&ghJ鬺a4~ys:8 Man9Y%T6E!Rk +vUYi&7TD*^4f4IZIqnЀDQ(*kJ.G5^ +K c ~rqBYʌu5` wڻG|'5ȉ G u#$O~Z?\ +-!LWXw @*$\@ QBu !1dx[C̓4rcbUe!O='R 9%`|(o[^8*^ o(oE6IһK["tL'0IO)Le\<5L~ B;\yb".?0WPϕsF@ ԊѨTGZʴY{yB =~  !ф +0DJdZ%*5&j#M ;&t2аTʛ{$CT/M 0C/)_%B5TO\P͉_WAb==ZL6n25''ȞuWD_zO +|yCp`A_s [eLBKsZN$Q"a4Y$_N9,p[>"I&6 +".:pˇI3S.ʏr{ʣ8ix8-Py1)*U+&v‡o(Ke4xWgհNaq>ar 2endstream endobj 6421 0 obj << /Type /Page @@ -29474,21 +29252,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6429 0 obj << -/Length 3440 -/Filter /FlateDecode ->> -stream -xڭr8_JUM}9L6vkv(YDIo_ AS3)8FoHMBS&I*l`+%s{0of ccvϯ>ݾ=ީU(RĆ ͣ( ~R๶и_f"g=LmU˜,C jà 儮աƅ{i'[l1q{(q?@f_w(M$̀x6/{Z"LlaYǓg/JIlFip=dt BM -οdն8 dHCz2`ae|'\'q`h2W(%#c9{ۂ[D!uoynIy2dC#e[mlXW(;;zYpm^d1E3 '?wB[GFʜ>@Dq=O,Iat iXe6\OΙn,;n۲7Hl@@WT`"-r}hm̷M[y=rJ8E̊l)s̫mS<}Am$X!WvK;2@048F:;tOUcL2 RdUeaU; -2Bgiѕ*Gy\ pЉn=RĈz+^nJdF01bf~=rP8SnsnI.]Xw9y\._teȚ.3{J9RHjm*>Hh{[H@uQ -'(0j \wʖoN ZpѲ,4dXrs38# C Y_&fe G RQ (°NUc$!.$.MI40@B ?#ޖ p&P:͂*ME}LfqȍQ`Xeq IU'J_ގAMgn7`LwKLr@VNMfBxYy-ڹ}:և=oqneGh_ MSXC`Ye@ZlG!/Btߚz:s c`]HSW̷]g&-pF}IK" 2lCXSF'6 FEߛ äf:""[43jPh<)AϢE!@I@\(݄(wrV$v `0 qN 4Ykhf&o+t+xbVW@j6xs1_>9@gT+Jobs'0EV$NPo@a+cn9L., x銑@~1QI̺8}J Ny+29.sA?5FFe?cbe?【59?a:g.&z@vOCHv9F8y|켾 O>ϔRSה0*,S*[U+7n}xyÎ<4o1":oQU S .ڣ^AdY8Gjo%7B?F o>]|INפ7.lF} bWֵnRb|(AO%{[t;v˭ÆFQJCaL#9^[pC 9ɋNDSji'hz#ckXntIprSK"`ozV0|W5PIOFGE:(?G7 }\Ep־Hy$r Gi7H|3V@< 7U")d=܋"Efz#J̉EYaեKFe9'C9uB]HEyaoY] Ϯ9Ve4Sz^…dnMsä02 -=Hl4$f*N)R HU1q `?ϪKF//7=+ҼC@aĩT;1* !'(uJcQsKz%hM8$呺`%nyꐔIb-$i+ BH.76thHfVRLh=[Pht+g\ї\C.l\$7q|ݥGZ#N̐/l -)Y*žrt}(IT>,&%);hT֏/_8 .:/0$l22.f0Tf7b ip3 d*H GZBK'͇o[ XdLTђC I&h] -әޏw1Բń?4$E$VێڎvM!2/*.sɊ'^J#r\E`x.UT.n%mEyJSeE$S -r[S?w$jd 5"HM?ZlpUl{0X=aO9i\"b#rPre•mں+[M1~B7Aׇ_JخB-%vP—RA|G^G=EA)?÷#܏ +kng.1?w]!>~`ƀ9xxQݜZ/F/ p𴨭B}'Vה{>1`*_ as$x'AcM/ȵlQd&"&-%x?-Mޑly]P#Yl9Lf@cŒs?auh'F^7PU`Egϔg|utrNr3tlgۏ&\XؤC3R=[ٔ -̀af.k3lwZ;aŠHB,sZyd|&|EG#:bbq&uv'Öds+N_B5Sw,+/b,Y~K9@d+#]r(92SxbKE[v &M1ܛ( 9O~׽qNu6( -"hfWendstream +/Length 3306 +/Filter /FlateDecode +>> +stream +xZK۸ϯPA_:=JjDI,K,Ix}>$z7ijh4k(EgքgCmlf", `׋7i20͚ܬ~@k=:\Yf7?斏x~+%05_.xw構7E$LRv˯lt:(GaEbth-NjuT/񬉽IlBYڤdl&6y.Լl[]p>.D#ڊ{QU-}2 ) 7+Nn[kx!m`g;l](;2.O#J\O(7&lHYf6mMʤ ~ vr(:8P0K3N#ƼQt8 s?mРĨW9i*I? ][pcKx܎U;юĀLtllk +p۵&%P +`7)I_dזwlH-꽰p I!J/`:P^)6ahк!yXi&Z9\bo,;inL 2 fq(-G|yl]to彫'<شI,@&D \ +*#sxc5֞+{ģ.d Σ>޶;\5lnQhb&e<̔2L6, ㇺ*<7@hqps*ȃ^}9(>e)jDF7% +c##J +?H?f.zbI㒡1 +Zp6'XNՇG Ad]qK͡FX@,`!DrM7Bp;ToVa,[`)(n]EX +u-Wct$BTlU5\)τ0E17D8ĚNpX~R*t\ ;MrgχDPozhVLF)TRqyY]ڀn=?G>T{#j=T4d&쫲M}E 2f⡝ +턷ۭ֖D&fh6v`{{gt>a~;z|ٲAnݝ,{2kω6rs]ۗKAn43CD:Ag!SBt3>i$U%CQ;Ѩ[8 |&ihm(`OLY visqXA ߒ=~ڪlʢe?Rj[K7rc}{IzqKHINB`JMݸavo"~ï㏏NIKu`=7OB&UEcYT%\_I +ߥ7c0t9ąVa[lA/^V,GG>B #ϷCQhgQzzƝ`W!S."[ ++5za\|0WjbyN慄 $8P`6:r"||0XedGf‰plj±Oz\t"MUR'P=6Epty])a#4SWY DLgW.;~*?SUTݽ@yarǝȀar[)xؒi +Xu7l$OyO2MQ=v(DF`P,9:>6h+@#c9$3(9?d˦1uqMFgSxCE'fDF +4z$cB=rg~ C~$$zew%m"09s4_&Pu}\6%~wv@-wt iNNm!xZ' I@orKvJma)-`0w_izl8H2\Q.On5|t'֤<+dendstream endobj 6428 0 obj << /Type /Page @@ -29521,20 +29304,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6437 0 obj << -/Length 3553 -/Filter /FlateDecode ->> -stream -xڭr]_1Τ<qpUc9fWI5CiX2ɱ4>P--FhƈE "3QEHeb?03a1e༾:;6 Gy/nuLZ\mZջORjTZiC>ӀoVkKZ|ٻ+O6͑_~9^lHq$`xdDF+ۯ>/cz p%[%H)%q~xq%*yv:ruBb$qȋT.rcB(O"i M•x{uIn"騋_"u+ t`8܋(]uD\Hs/Wk-Md?b,z㑎Pw3!ϿqQ$@nX5e A -+faǺXڛARyKa$,ID.eκ+7whq%e{谧[ ]ms@vWm7 -ڵZ8tﰣ{$ ikk5r3v%4:TC]xDSKd=fjK7NCGaWlo#+.$lu0OKHeǸۢ[*z0:~J:(.X7FL DF3"XD'Q+;q疮{NTIt_G= -,5.[ì-QW1D!l ܊Nf/NU3O"Stvk'fy-ؾ*wnW3 8$TK-6$뇕UrʩH(H,"0^Ҳ 2Fiu+Xgh۳dE}-0oSB}i$CQs^רsLݬ6[0)_z5T2I -\k@uF2(|[#[gOs#6$ٻels(]lUr2KH"&c0,&xY2=̑9?0E]v,025x;lg{֎1V]1%(:'<|"g|GTmcYBIPeecZ"^ TiuplrSWA9 ط_}KfZn<0Xeo],L 'wmKJ ZH[3 [y.KSr4/2_]ffuF`p K,O)`$x7\*ۇɌ(;?gBF{q]m)?UElzK1ԋnGZ˄Tkqk6v6نہv##q7 8X8sB ЫX(v7ot zzV ޓN+P -Kxٕܠ8E09CmW=(# ZXb6p'nDǮhnKZC . ;sh"4~)'8-#BP@m5i`ऌDB罅u5@|XªR91Њ+ C\)УMhGFO"bXN|c>2R&l:X L%׈qε1 i]iF'Mc8xQ͆MCos9I䞝v3mM&Jd2 kjxcm$#slRjyNhzV>XF9"Ps IҬ!{A3yVUMwSdgËѠhV@Vߞ&Z>%o6H֛m!(h-z~P*kx?ztƮـ#iBZ/vrb(N%9dǀU%xsP[s)5##wR',>A)lrV|]g 9b*&W$[@j 7\HdbѦ֙Zx"ᦳqaS(]Ylz!B[+;%KvgcnnUϐF4WJh>a/bL>O/dQ\X^Dɹ 86f>tGwDlo.& 6#>Mpr$8TpwRHClj1ptc X -d/M΄bNzꬕe0taq tA:sٯK*L&d. taNLjՓ0aKƪ5Ub☶e8"banNRm0FX j6m׍wNX?cNӒ: -|޼j0vxκ|${>k37$>: o\;p`1 l5RUv#<Õٰ1?gMb~\gUaK,D)LREi"ẽd3r!d\kCY83ek QN:>LHb`Or63DyR;Ep-%wTIkD|8}wdO+QӣTGFY~a rn` <Me"JGI.Po')RBO'LZBZOe#6X'wl{{hܖ `rp.lYLN9cckpl,Lc/C|c3*tluǯ5j&}U2.8Wߪ|ÁQmmg<*/>"֑V| qiu3YzLp! `Pr{=Vd*)X?V.I4k20&dӸA\ = S4_tQ{Ɯ4*TJYz( }j_U4cUa+@ EbS- Q+{CcXQo \0¦<1ňGySkq>=n0c4> - Ѷ)׾رϩvmS7!ӫBDI ȁ)b -v-΁^ߠ{1>"-gu/m|9'VjgěrH`Up=#8w D|݇++ T맞NV,rá"Nr+xW|茖{Vllt69hoVc`olȿf;ݦhWT/3.J6LC9IE3 -عmY=)[1.ox-N-OϴmU~|NpIV7~hhR [@2O8Hp,Bgjdv.,g4|&b/8OőT~w{ZE@T))Fe`)Geendstream +/Length 3464 +/Filter /FlateDecode +>> +stream +xڭr6_H[M}ILfcVy%b"<$[} )ўIfkjLF}7BR2%i4vgf~8,D8SAkz}sv}fQda6/n}\,s)2I͏xz/~y}=f?Ĺ7?lT%, dQvgJ@+iٿ<S3^5q%-8aY<*ql7y*[3؈ +,X+KLQItM#-C HN{a[a3Bso'k ,u#cKS3Ć ~] ˩]٥x>v[GKMi+Sw"G6~ h^bN]W؈crt{+^>GxY~ToFbVht$u<ƈRJ;aG.VU +a;0>3da@)!xg,fG4ba*f#_k;OU拴% V^[.ʊl5%m8oIA (,.޿?hS0~8Lme fvEhjL0sz"t|K> 6{DL<5frʮ&r{.݈}ɺ) N$RD8l(v7o zzMab:cJ%{C.30ۂ',hns$pΛ?tE3诛mc ` "4ce)F 8mchj*Otl@uEaWvfJGBYW_~[B1~krqtS;@ѤP!B!rQ$fAj㠖LmҢz s"FB" új }>G]nU/)nyЊ+4e5RGr^Ir<#+e V^ˎ8õ65CgrZW4)@Q̉ jŦ}yI\"|rNAމC"V&vI0pC+UzrrF@Hgj#M[c !Xve܄ +^2Am`Ζ(YqTlR=46N h*A)/`Zc%oFɒޖweG+ +`( &؋>'Y' M䰾\G^LDəqlxY4J8ؓTQ 9RC>Jѱe Sٱ^D6A$srBTg.(ce S8(kϥ>cc[Gj4`&'۵wdd kq%S6*y<oyK՘8mGY16b*IuWQ\l:;H..iN UŸ,ΞLǩ aԛn 9(]>ް.₏tywskto-_|tXt[Md}A`ݸ p6l;AkCmxznPq!J>H{>%H + I]$\ݮD=Q"p^BkDBNiȋju; Tj@Ə{r6CǼ:WR{*1¢%fؾ"?0ߔ"O6UۗAFWgvq|i|9?9GsW'}e|Wt6`+PR! dG Ρ;~<c\pgMU=~WV=*Pi!!]S%'!T֬pR"al"$ +UdE }:2n4qm3%TލD Ѹ$VQ Oǡ1qE:ՐgL0M|ыrEl$TMcCPLS20sŵg^ +bw8N-?B`^6ͨ7B\ GqbWU/y/U}nC`; 󬩋/Dvkʇmn[ Tn zx!mj$N7䍤igqӔ)+!R79V꯻Xw~mꪪ)II G)+\~KZl_ >.EG4\ZnA?}w:.d36(L ϡ[jYYUeQ;ilN3LW'lUf|AEb=!oUq[ӶY)t-FٟwU%v]?ʣ:u/zw +q[imdpI97~f0JahTG4 O2`&Y%2 _fx>+VpxLdxvo7_vtFq # ?eҲ +endstream endobj 6436 0 obj << /Type /Page @@ -29558,31 +29345,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6443 0 obj << -/Length 3989 -/Filter /FlateDecode ->> -stream -xڥk -"J$ -%ٴIwn"-ٖ#{yQlY8,LCp8oYYfI:Mg]0ȷw@,dYYY͖~7-?{o݇BkiIzqy}Û;~;_c/-;B:4C*~` |w@-w13Yc6*U ijFaP:T(t #33 ͅ9+]c̏h8_yZ@; -:J}5_ī>Oܿq^5ʆ ehg>n-!\ɂ7-'#;MYOeuF*9>K*sG\׫ieb%57CoXq&Gq=5QN6 ae# (Aǫ jGl<g{n#sGe#EYU'oVj߅vԀt2|譿vWf; FƏ'u9ε©@*9NQ'*Չ -\Xh52CQ&k4GU7#LJ,p$z_pwdnTѱC'BY<$_Yb<^‰_@zGp -Wl7 :V~`88μHBc|(6d5;n#.dz\AVB "1BxA9|A_L0 - ȃi[;GP -xsƕa2ӰժG"ko8Rp`+HZ>UI%شj}Th(Pl@bF廏K t!!dbكhV"(1_ѳBB[$:IbYC(va3裲vC2tw[02o?baw? p_(Ȏ'Ď.`D(>7$sxQ^k ob -o u.ڗK -aᗃPW,yjS);x@o՘Q$095?l]!~H[< j1T:ӝ\tHc+ې-r̾CH+K&8 0XP=t(4/?L -ap_v&_@v89j_=?.ln=Ǹ#ZEAWʼ\Tۀ*4'U" K„$ -젟a,?#J'\ 8٧7!>5gBL3&]Q!}]3XYw,f0u x8茓BNi}](j$-|ͳ@[p"P5|OؖcL'۬Da|+N|+ojہ}oP\o聨ʶ"E C,cYȺY'Ui$#`#A\Xtŭ?!p 84HtK٬R&sX}/]m{ O ky $3BR⇩$MC8 BA̩%Uslxj泛|?1UVTƔH`!|k7z)$ !ʖ5\i<@5CFBpQ+m!s~Bl7Y5UA]9D7aJ*S#Q0꙲ 82}-K(g`'rjl$߱[NVGu#Fn%bp2J1: / t'mX# JV-8EM%Q_!ס0?7D?7hU,`#"+R{-֔Ԗ=ڟvHO Sn}S0̼ =И`$~n%*M F+`8>,q?MuCzSc$?+."apG۫l~tQ2*u/3^"~ -)@^['@K06C_O0t:*r[:|j30w.ӱƜe.ő{,A[>/JW.ƅ#[ormŎXw7{8@3E1{{UѲ<ŸnQ4%.T@GO#Hܴ -UjO]ieRh8/Trjas\C?G[s}7⣭7ٰφښoЕ.I꓏z'0W\O -G\.\h{}6b%a49)ՃcQ 62*'f>H2BO,SLƊBz3Qbi+1D|9s7%e巘/GTh32Aw}GZ`÷0'Z)]?,Il6VnĕX]&x}j**-e%avrz©–Ӓθ:Il"%6L:iuQf"@9`&gG/e'\<*et] I" ߍ» >R K%)trVlкSP|3t C6V!ޛ -qf\|jtZ=#~o0*RW% S_?rPyendstream +/Length 3729 +/Filter /FlateDecode +>> +stream +xZY~_!2<@xk{(HIHLR36@jvW_u|UjO͒L:$Wl-_^)f^.nL~ŚHޫ>{xv~mqx^s\y}3@_ͯ׿bb׋ַY`¾ +|&G(Jʆ߻Qθޮ|C~)e|X4T8?BD6 5a~mm[P0Vȴj97sx]5ֱWݟ\-zhemq)g o=:Bvn6P:*,$мYJCq-q*WYJJ\T +ifŞPC.9۠Lz 1O^xRe;nū77o#>?s+Z'jƝhu\U^ҎW^ | +7قUƟ P\Xe +C}4z:C0`Q⑻HA~ٱVע,] +IboW6-yk;1UEKRoS07Yh\a[>`!KSQ?qOyhP[]Cihumr|+!oN82_CBP?:{ [j-EtduFQ?Ks#-= 奡3CCu(:bX !Ktݱi(aXLB`8.EdK6-=Q] W0- GP1XkH\&6zig6$AKˤ77/ox\)ۛ7>ta&;pnX@\jlA.k]!R i1c[D@sD-QO4Nb4!_(=?cK+Ӽg tV~]Lí'VhYKy?NE yճO,+a $Ht>D@A@]wy}e@ǿ;88Qp9x7=&䌲<5cZ@% 6V=4?U/p_|&I|!rHWs9s.`L'-6i1Qvڣc4.O6%!Er% ;|| }L=N;/*h">tΔ|E#2ᣖQ>8к7=:s]G,ߡ(d&J{Ū>ghymnө#˹q,>Ģjĵ]yOMIAN8ЂSh7 fχM%zWK=1Kh8cU#4bX6UB.(?5.CLӎiTJR2@ t]*,JBku˩#2?z*c8K0.P^*c02Ϸd-ei.#YvNM-fcr3\MkJESB!"5$P;')Q&"Di?رNcBZQ Q vMPL$MN|I07"IRLVs7uW7Xس ''Ivz)}:Xԅv:^`żWԎxgsD0z]܋ʹqLcZz,SEwI8)1bwzrX'wEbDĩ[weBwb5pE5#We#=a<38Cjnd|/Fݞx7Œ!Uw}G='}(G(CVG^6y#QG3\m)6a鱂:8VC?N.sҡrS{KOsP0iW +̩D~89 %ϳЎnLh "^墤ط\dbNw)$n?ȡ(HGypH9ƥB/iGA0 urw)dgLoT{z FDVi\D`Eo{_"A1Ѝ*CH/%5pjKtE@YȈ=V`X*7-ꚺ*,u0NR <v?M C+JyJGn=jwPwM9W/soͩ> {)T9\h1IգzՇ(ھdA@s7A:ul?mϓFGC^\9E>VHZ?P s + 4JW`8-/w{ӂ_W!;;'zoߨtϬnēGSUxj9R]f,2)o;7xg$*x U/1e{X a{'Gp"' +W&j+HYA +% üR (DF.dL9R;@{wlιUnN]I:-Ĺ{t +.rs㷛؄k`Behx) 0ؖN<6x3#DgP?aendstream endobj 6442 0 obj << /Type /Page @@ -29636,19 +29417,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6460 0 obj << -/Length 3438 +/Length 3332 /Filter /FlateDecode >> stream -xڭZmo_!Q@ro"z^ib4(h5EHʎ}m+3CE"OH,Wz-0 %+!Yy4?\]|cj* -X\L$Ij[Zցreyp{T?Ş\\/_9A `Z\{؀?_D.=P\|ۊ̂W)Z-ViP jm-G%pIDVeCZ8^NάG[1ȝlh+р!!5&zQ(=MXu'}ѮƁ)U|"xT=x1vY>BV ]P<֋t%AgrF=hDΙq$;r&VnQPAUn&Ao|p,\/Ukt4fri:ن_[K4aW] k"Cx-g".^2`ivYﭬw$VaKJɏ_ʚlo-5< YC756xMhmaZfaP~(R(6X:CX6M7W0թ5m4@dѰÍ]7q=uua1RS*sҬ<'ajRjVg ~MӑkdCmOx ^sqQ2qBmg.[J~gş -'`-S+>!D>|B|fOaG6ш>Q)?#$q%'.y< Lqnq; ݱW3oEepoI'zIihp\a96]g.!3aٍ'+X"$}#F<:c-CH󃁏tnbX_{F!!yETp '0ܟJop(pՍl7{kbcR#ftLNсIİHb߿ e έcDvTQA,1v΀hw:]nf(I|DVf8ApQcUJpNg,hj JwrlK 䖾ydzp.BvYdl2Bbx&k| -6Wb6꓃1y3 - @(Τ6^ZY;y4Z(Ԛr8m~f$sĉ=ؙAvlDHxO+RA: Gͨc2á7t{)TgDSpCzi#mcrVlՆ\"eak Tq L|u0w8c;N[YǛ΀M8^P۾D(e/G۝M]"臎[\× ~x.eݩ3` hɣCk\W:!:=l"D+"RM -OPIakjM4L uӱg=xkdd۞[M^6E-!CSM?RQpN™]BgMB \ѣF]68g{G*=RL.:N0Q-fiP56>v2+lXJiܔTuw|452]?磸@;u @Б18#ʕS _P^ǀ?(F-jjEZX4&Rf^yy/[J1ؤgqD%pf]\n5۝F\,8Orz*:|HE|ꉖ'>Zәdo_^)'W`og]:. VpmN%C/* -: ԂL,2j(%T cُH:S#GtDDSY~ة-m)Gt=)"ذ/{JbʭGOtէhVϾ*q;)zȞ ycOO~5<( u|GS{znj= -Q$c}+Hs}RQU촭>zu͝+ri,_4 x'C/RGa\?;s`4xb^$o, i?yڙendstream +xڵZoF_!\!ͥۦ%^hxHKKʢ33Z-"S< #],\:E %3 4AwW~"*W74j[~Xցreyp[Tw߽ƞofRϿ\"jOo&LhRqbtЎBUIt-?.L3 ^5# +h+yn*ϲaAwζB9un$Aـxm5e]+0&z&\3,ΰF8r`EvmONw ?JW-xn\iBi Cl Ll{`Z}_dQeEt .YQ;\QQ8.[@Zz}lJ%/}yK]^IzrS :$~PA+xii:4siuUԖ׸]`_#J +/[r(!^7{EvDg=_Gnƨ;7>V"!!1: #Sz"n[;CɄ*u;GxXmcHC m9āYGr ۭ{ҹiYk.MVnw-ܹ2EvC7Hn㉗/t_qu7@g\: kkaG h+A3/NLDǒAGw.Dnt=ƠM &tV$8mtGn>tFΈIdu8[W7H'^Tw?z;H# wK| u\E{ڃ"۰2q>;k7pvR9 ;uP<^Ma_qWí^L-k4Mͮ"ӽUJvq˝1D;!5S{ i+g3חWP9ݜs1GkHHHذln6aS8i8AӸF$9aA 0ָuxM^cx9gXc2P]g +T>;M.o gy=#E=^"9q2_DSTLƪvR3#BK{p U-gvtb"{.d^kvMб;FvM8,91eFk8gIaqر.ufC[4,g_eu f'>%1J^W30F%֦slKv#=8jFNpk˭/`pX=W> ᥟ} @Ϯt9|c4'A;:<ᏑqeDlK$䗾xd|p.BvqtUYxAyqbP4@) a[7(o&Yzs"i^=TN,|sbD6c39k4L ɟ7"p$Y݃VcvĜ itLWM%= ^ʤp|~*3#Sx!=qmcrVlՆ\"Ua,!|x¸՞8ɝr7A^t0l_lt݁Jp%"*e@å;n zB&ZвUǪv?L#03'Hrk8e|0J|Ѧxy@I@Gx.]s"bUAknyZwPD#kH-:;% +FpndD<+0xo`şqRW2AF4Hi9m:~S띬oۓxD%vPgo&x 7 GUN/XcsٻNDqU7_ ̂LtM(@s2ϧ1\@$H/\KC}8ݘl@Gi㜋)$P4;5rޡ<}jU]'$\le^ڑ3D5'4ǧ2θ_1*}æ F((C& ) hkBRpU$ h8c$?{D=H+7 i/Vww#>J46p_H_0%7Ma|F>VqqX9*¹\\.)>=^FRYcϧ>m^ԔN?BI>|F0',DӯRى(E.1y2`d|ƃ)VvKP[wWSy]GG_sfC+%'ڍďI\$aU)KP~= x=v5.S:P̤FBWTxs>Q*K&K!:_֒W?Hebyc[}qXt6CϠ 2#cTZr"(9l-GO#= 0˿OsLJ`@>Ilaj¨Pli> endobj 6469 0 obj << -/Length 2909 -/Filter /FlateDecode ->> -stream -xڍێ۸=_#Fuݷd[lδAl˶]\$h=7R-{$!yJ-S,/L:U䏯`D( pe$(ő;V})yC,Ox- -}EG~*M[K}v\$vRޖ'CЯLfE.x -#?:ԁwkP D|ّ,'I.O# - -%|({WGW@{ 0fw^S4mr`nǰ -CxZ9OA:U]T a(n8==tu55cxBPъrXSCrrS1J{N2Oρ 'R"F_*:|աhpZȩ( HΦ >BP0g?C.Zqg#:bj˶li2pc:ƁD.i|!<֐^,q uB[&SS+['T{gI(m7fk@8DP8薻8)?4K)= -g&+Itd ~!9\R5~_u{!5bX |i tXcmŜlb pbr`?~SO -l4c; OPWE",la-Њx+uG>7Վ^‶-'(茵\gjt -D /O$'AM$9-2nDЄ~${.mp'akԑ;b6(o0u5]/As%kS2sƨZu6/-wY<8 Ă; -C )-3w"H33@&8H".5n;]A޴%_C4 -Hsu3 =e3ֱ7/3`6xO7 tĥja/ c .! |y(W4x`;I{ƣ)ܸsgc#d:D.Y -;cIx$H dUuW|H!^džk.x4-΄C&ųpfb*lf -p] NqBnlaAPv ]>/;p %LCdTxuh|qknN˕-) Gn -%fWCKR]Os&SbRecщ٥`M0{.\o2#h*8]QKTlÅi;/`HQ<ȋCɭG"t&!7뤕ث u/{y& -@ff~x||yyRԽ-'?^f^ڂrs:)>uy12+ڭCGI -_Rµ -r@h#0LB<;@OEaS~Pb@+튍+]%] B -oOC; ;yw-LkG. s/DPyqHL(T&gR.~)zvL,)I8~pkL3r(#a4/B84)è ˳1!WpZwPӻɓJ9pGy`!cU7&я5l8pDoTSHw`7['0yS :uQ) J(^ތ1Lfmzө"a#ԽQ1V…-7~uN7ѺTEIE`R_m,+'_IJ9,Q rco"]lN7~4\+f& +4="ˌ'nB?3šq'ҵT\FiZ`H|d%Lqs%/n~ltlBl`%e? *I@ƶjhv`Dse]-N1-IQS(J-[R-T-qԴ܈igׅkezvk@rQN*w]Jڠdžw R$ ?>N"0RRPF(=~|NDK>y> +stream +xڭێ۸=_1Fb(oI&Yl;nٖm5A﹑mbsHVw,ߥuݭ7 ?Qڏs 'D%0Txx) O}bOGlǁ-^:I͕!SoY,_t7xD|\8*3?[|Ύ*SS>tzaz dctUh7FUʁxY "b ZnCyf'w < oq{~“?V +uCE+_w3:4$L`)La:gY$cx x"k #;Yfg L_l:>l +O+D0 +[#: /{p3< Tko[eJ'Lxց4 rwH3᱆F~緌T~T(9q6E˽G{km0 Ou}g&1cK6)6 +g$3*I8tq*2au{p>^i +6HDՑ'eby 7,Gà0Zn{' y!=ȍm].,Q\j-(yQ /O Q%AM$92nDЄ'.mp'a[ԑwj2nmTQކa"k^!:.`eQյb#:jZ2yrRA/7jS-s +D.Ňfpg0nUL$p +AE\(jz(Y;b:]qL@8xXuND:WWC)ͮyx n +[ڽǂ[b2Qo>eP$QIHtk+v'WXunQ:,kctnW\J֏XE]s>WSp:1 ;(;u;FRZ챬0@S(].{ZH8"[D͋/0"M e_' +6 ,Gۈ5ÈR1y;N'xS|{3V]ZKYM5.>X1LL_ϋe]ʹGjj(S0[<#:ĀrTp OUN J!+`C0^R=M1b4CMNI-G\v ́P:~#|5Y-SI$=&oG,SNQqko/eW_1z$TLV'KAdAo5sR9 !-YU]U%RȅA=#3(΄ +[\Kw;.[{:&p/!z +|Gr.טbB.c]r%Jc!B)-u VcUꙔ$kg%:O' rd^)r{ 6"=W{фD*T2:qXV +T6 x(˕ʋ'C698 qRIf4pH!,%~})/?C%|d,W5K}xG[e Wd&gr.E"v)M "^,iH8+k^p & 9|e6 9T(Q'q1ek 56yvŁBJHy x}$I #[qm!z$QZ5<~HW3j +i06}xe'p>YI +t +9&.R:Ɇh:^ [\OXE:[o˩hh~O-3!_a+_'I +8+ϣ[Q egco"=T w.ѕ1OE2eE6=Џ 5>7t-UmQ05 FDO3z5a"#kxq]c`KL0'6#*I@~6Sv_ +V]j"i +]E^ŖVd H5`XFORp}ꭌ;R HljWK T8PʇVkEWA]:_7d0 2LwϋlSȗ^OuI +\n6P +YP{/Tg=ιS賎|"O +C7endstream endobj 6468 0 obj << /Type /Page @@ -29762,29 +29545,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6477 0 obj << -/Length 3882 +/Length 3469 /Filter /FlateDecode >> stream -x]oFݿ/E"w4ɥ'HmQ}-Z&B*IɿZrIQPr;=kҁ8/bnw\na+KY0߯/^؉\u7??_~\,=ϳ<^,(]]ľͻ1N)][Z9vYQ -DȺI{ -ߨ |/Zz8J8;q Z38#% <؁ 9p ߝ5h4)C| 7A2ЦiiIt6 F>PЦv"rwh-9!=_ȄIXW0N -(~ a2~P"{"kMϾ,z= s!)fjoDM)Vkd;O%vu=Oi*!s|+#/vcX.$f9C.J>oIdRy=;9ċ-(2Ĭ(F}!jF8Nz}=0; Nc%<3(Oڳ~xgKP }YuDA2\zLD&fA~/+FQ[;ƻ>iLQ:ɨ -*jChob?RETQPo~LK>u!ymł.;UWл}q*r&E -O;gc G'ZŵO-tc1+\;g|@31kĬ|c1*U`˛I 22Qimc>,Ag;FKXM_B*@vȱ$Ir٨,;dCGirf=h4)C|6Ìmgq Ê! Huy{^|_JC;5f-$ ~{TtqC -IU H! p^B~aIu4mCo.24~t'9lLR){eAhm8(=p+ ">%g!Wh_03=]OwA/GvAY$ʷkL,o,_aX[dbiߛV\{3'Od%;7 ::+n΄c芧Z5+|n4ϘfuQ] ,5~1WD9~)~F ~>k{8 ->₩`/ 5㝀L&Ws}6G6} |Z{.I(THڔY{A&3Mp9(zL_{J[=]Yeg ! !@ @s0Pߨ)@+)7^?'6k)) |p[_=,a=JcI?< gn[O7/P77 qbZ]-8ē_#@5< 1-x01ڲc3}I #H]^yؿ ->.qF/6g*.Yi`61!12ѝر ]mք|vb4"Rr76۸0(QՁQ`9?a/Smcor{ M"Ti2\csKj4?7am{PljZ'۱ iendstream +x[YsF~ׯK`ʄ0ʛ^g-k2I<@H 4Z߾fб-g*stt3RSIzAz' zs❮ʼnީv(Ħ'g#}<7劺,ߜ]>{7Aڝ8q_%u n;,޼)mbϱPz7c ||?+3\Xxl9X\: +pN~;a?xn&*MO7': PRN'TM 6̵~ &P?eOar-Fڹ,Wq-W^oyvYW2c v70஻ĹF6m M-gW%6rSVY-+$ _ +.NQt8iŪm[lz&͸/l>bm-lFuNeUL]\5Q)%Ny͋iim5%$-6[%ƃ- +٭lU$/ \).DmmHXqieNVrJL­RwأP` qD\vPGd$*ҵbJZGqV3rH*5-%F-iFEsS"𷜉,AqN_iS!ա <$M-xQs4D,lxNq?q8 J1إ*hvNǒ]S~F1tf[TTcT_@]O-6t0yޛu1R_PDFU([UqMݼZ![]V,%gكF8[y,nKǪpk=y`0)WFDo>9yF_Jx00{ Em(0G2f?S3og~Jg?kS`=1 +j!7S>\EEzƜ0HتGlʖ ;d-۠l BꪐYۋOe+dJ9KHaXo..߽yFk((qckڧ-v&'-OTдBEV#HbBH9 +EFΒ `qz"J1KIF8(kUQUO'֬X˚!=K[?u#m, [Zzf Vm!ՁëWO,}5zVu?,ܮMeb1͑muMޥi=j#0Cpd`[¬c +mkn L~_h)7XpZT-Tv pm g 瓩cЁ+ _Y<&<;&]P¿_aW 0^$gB_QŇ3 ~:mvk"6z08<.B|rM^1c>kB@Av7\ ' ~GI||IH^? +G#)(UR1nx vڲh8P 98G?a;ڙ>y^e?4q#O0rr.e;r a7& [ 9 Niav"+㔹*Д2-"c&=\ 4\ĮI&la+"WB&£pGusĿ Is4q:'=X,Čo; +sPR6&28 +N867NOhw/&NO :9Y)޾>w5&F>wض›$q7ES03JaR?M;^Bmfq /݂3NJ7LC[Ngu|gՃIf9A7na8^hQ-Zn:{ӻd' WWKSo1=w=>F1uPLNt09BlP䐏`Y)1W~z2 5IY(( ?OmWz z!t`~O9! }hH9nmAP"eH ~Up Xi֬;ܔ$]aMw/ {wggʿGىv/s@U6ct҆fn1-d`UXt{#uPvU&"W x_d|Oe[vE2٬]`s]w S!&hտ.-܍y,^כjU0:Cݬ.^>_ 0V<͡V;*4Czh4/ vssK0t`d*Y\UTsߍ^sܐ_sqdPC5!+Q̞:hOr.lr%> /$h [FrSWL0$LmܺYN`Gar}T0~/!Cp/=IMIvjG7a +JX4(p[P|vS, +y{Nxtz423VWNU6j԰!@U$6}ϥ$Q8dpjdhsjP6{Z39Z4OmϸeIi-]jȝ} ўTep. [5SiHT͐o{U#RU!Z"iEX8lDؿԭ? SCm׏JGD fNb)ԈHZ_Gl3-Qv;ӗb{dfx߸. q16*VWѣ="hƭꪲeno):h?VUA=(1L(3Ɓ*cͼV3L~asG1Mjo/hڧ㼁E3őoC.s +UrD KHg Fx˫`,y%{.䵲+M^YmɄ=8+7&o6'YG@P 9-:yb_ U?1wSK^oꦸj`hTPl\k 2g |6L)m.$Y|"VV!LOrR\&>FU˹+?Ca! +(%ق!Hj.4YM Oel=N_wn tٮ`W:ȺnEkNv`zC!U}$Ձ!loo@};Vv $n9zN$Kٳ&@ΧSo0 QXCXŏ|\¼dꃙs8ٿm!IQpS y+Cάa6g)  3w ,#Pendstream endobj 6476 0 obj << /Type /Page @@ -29844,14 +29621,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6488 0 obj << -/Length 2519 +/Length 2327 /Filter /FlateDecode >> stream -xڥYY6~_}2 X)M( l@?c=QauDo۟n΢("OgIz_n?MSz_?MR޿n?Şm&WhΔ=>OxC/s/ ȗG0Y~ (K'O|7:~ys~+^5v?:0FiGi -Hp&MKTKTaIҔ;9y Rļeգ(p Pnƺ)bՕ ř֒dPgb9IƤ) wxC )f+-[_LeщpձgizkXxPfD)vz87Lѧthbݣx)Vp nNeFxM@y~< cd|G/ѕ)D/k ]<7#~EI+85k.=+#lt[x5]LzGZk]Z)ƞzg|q,ir,|/-1X1diYǞ[^Baj":=gp7Sa+CK))*X8@>DŽs$ 9E:ѳhCt ؘ^vU@2ίǻzAK"9MsfN:01Uͫ> lKP,ߘ34Ƽ|FJ@ Rk! \*&K]oEU?H]/de)vHqبORz㔔k#TY$122hD./a8s^*c$wLRsA LE;]11!zĮ1t&voz33r#BJtY(V hd9ɺAzsBSĊ r,j]8L@*X @ˠKڣDxiDz.Y]S,K}jbq(MlV RK]?LBf&FR7}7eV<|UgaJ9jBo*Gy{v'HNֻ"0lϲ9ꁜEYK9:EDF,S%BJ\c:K, y (pXڮ# y:Ѿ ϓrfEXpӌ̀ZAv':4B9aQ3G،&AsitR*j/pϭwrm2Fhc"IEKLԀ)[ Ϗh?mdH҉L !#)y )K $~!HAz(l?O]j@[I&/H8Ѭ@Gz6 ?WT2A:L?~=,S4^ס:ĀuNwB(H-G][U+saOvtG-=[;Շf ʏ( y3(2>De@@lN5Q -::Lendstream +xYIs6WhNMMEl\t:ՋT* c. +I 8KS2<<<fYALQ͊*m`͕` q'z?ݚHV?x/{iȋ?_i]~7ϴox+n~|7WJynʻ~{ڻާyzbP޻z;۫wI|Olg*<=@;U+G~#WWW jX0QgD?%]cYx)ϻyy#.ԞiVܨQm~fő{vx퇲mx9rXvҮnU3Eo+|]= eX`hS|FQn +So 8κx"ro:G^l&E[*rT󑤳fŭZޫyi{nDC]q6EKHᶧ ! \׋Ez~QUz옪U?W{%Y ֺc?EG遟r𷨮 +H_4%d#ޢkd0޶re6aW6[\t-~l0brYV+Z64=mh)jSV%(sS.7ȿ07xEf~:pھnN1,AY}Zo{^e@]my&.`{I %a1YUr+'Ѯ<(bC]p[aY +|G'WʫI6 G92/ہ)L4 Nħy9e3\zL;XVDsX秙saN`)Ki_}Jwr +gӣ(p EPmgGʧ!!FjbZiL,#>9e:Z7RCCU:7n-`"/N$U'>6IxB*1hSTK.-=FK{(hZLy窘>Ԏ X>2B5$O?yeQqI#.xުJEg΀ϓ <1JS1~ړV톹Kѩ{y#ge{);i|0Ӱ:\X:{膑BT6 Dt0Qƒ..ͱ ,'ò; pM@,od\e"kQخ;sVN*'Klro(Η#G@(fXA iE%X@Xpۍ.5X^Ԍ5:S,-LV;ў4) ;GI;21=48iD0kO]$1Sa#pQ`UѪ:]!BzMF&Ӿ3p =.0YݛpPR5%ƈ!p~I7B2dJ9Q2wV~g˕ 5mSGǁB.v.#pXĀ2=8R"r"rܩX&~#4sNqy/𾡋Rnu0yHu-Kw( i]endstream endobj 6487 0 obj << /Type /Page @@ -29887,26 +29666,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6495 0 obj << -/Length 2917 -/Filter /FlateDecode ->> -stream -xڍk -s"Z#[nG>r ۲FwvSdyU -7,o,Um͇`s>cZxesgvwI:];viJ_`~ihJoTowqxlCnw*-뷻+Xmqt$>h2l<[$|lvUޥ?IRxjxQ2F?܎}G8cյ`0ބ(4%:Q#9?JiGvF#.(o6TyI^ -чY ~Pjw{R8 H=iEuqGIyd)~Bi;_bxc2`bH}{cEr퍗j`߂PS'x n 0jB ybSf]*~ x`wb`b#z}LJyցWQF# ƍT؋\ysOzFG|p їa+Di0gB -ۯ[>4~s NŷxZ [pl``&x-` E㡳XIV)CS$"poL|)Ed"!K^xQ_*+ȓ"4lUZkQngP$ -_pW y/js( ߤ&!C pPFiWu'em/0Ѽ =_/pcBJg FeE&jfWqEyJ0iEF7B -?&]b{W`|qK?^(Һsr h4Fƒpژ6T(MF۝&v֩ "{'A/fi JP|,OuyiR;*IظE/Tt ]WVb i6y@4n?/cޕ=o -n}5Htmh#3o+`+VrT Co#J^ۍ<`?P!A-H@c9J7I+_Q;cVBcI&;8U0GجJ0BT8sG8jU-&c$ -e/8n|3_];ػўgȌ#;+M$ eQkg\mQ5 2a=lT0 {QNn0x "+8@$#tg6(;K-Lv߂8`ˉ -3J28>ݍ3{Ve/G석)fPѐ|e+ѽ,o؍G6< $$LF@?0w`&nw۹e$0v-6[x0n?YDy϶>\k61s#0߸y o3UL* 2#{UcͲ`IOA$A_2?LI5JHd̑l`:9XZ jD%jjc$^U0KXZ9d3CgX!keY+˽kq WNmiŔ cg"(f;&z^1`ōv$m -&&+sCTxλE1]f%DY'hN`(~0$Ha$KY?jcGIz>y" Nkr04$p[gZs`UfP9Lr 0nn\ -M "O%Ҽd pB6Iljo0 IErY:\Pq T'%6Wf WBu@ΤtPb .*^Uܙ\ -w*(N(&FDq !{Wl@(*g4Àױ'(L@iYG\5TW آ5Skj}QAGiܙz:= * c5Ha* ˇ3U(YQ}vi#"œLV2~I@^m14{˒L7ֿPE4Q E(, )!2|KiãxF%7Y=߯.QԐ]EŨ+ -9; SZYSv eâen~žqͥ|qϪ,3Yߧur(L8녲$ȗJ#Y|!Tp3mȈYjo,SӯZ y~̱_YKmEZɘf'zZ6w~Ý>(IAKC^O@ae!S/(J$Y^ Yendstream +/Length 2797 +/Filter /FlateDecode +>> +stream +xڵَ}@X%QԱ@`,6<ȶl+Ð|}")r!hEbn#U>Exv@>#*i +BYFiaueD><9(2'̧?Z(yiVq0߸Zǁi` Y|n}ó3#L=1T٭qp>v!2/2{D+S[W3g5]~.iL #lLP!=a"13XV05EÆܞUS&R8"ڀErL=S҆6WުX+> a4i.;TvB )`'_?B:<\BB"BS˵d3BX'YAyT$gaB6 +ʔ%QK!U#E OcZrLET$ +1wV@8hnFډgÞp"WxgfCF`Յ]]DLJ~gv5r-(N &VP8HIWUq~>{4膱Ƀl8KH@0V-/V7l߄`o5+#{0eHzD3#A') >"-.§9yI(dKzo%2Ca8Lvvy3ݮ~qgO56݂JX>b?8S0.p2o}5U~0<`w?Q!@EH篗 +L"x 6lR q['`6< dC+)nǚvV`E5[ahZkˠm&#. kӊi D55L8/ ]0g;˾: 1dj $x_~ TKvF(U@nEi}z5B@š.õ#ndGÙ  "@筋y{cGM`k#$h+0A.0c(x`.֣ 3#Us-rё|+4OI,w:d56͎B9tyN$@RTT́QZᙧt|8{"ۍwn8Er"3,1B +%WL*~6u(i)X!VfAJ<  |fQKEјSmp"K߭-u⛵e"g6zZ.}~?ˏ_97]c _y"|2"c0b0sƠz)˳IׁMϛg bɷS!hh&e.q4dD*Y2:$f\% jux^K'4R6g dp4mNhwC7vlu6V],\qeӘ sz;5I=nr.'v|.yq1ܘ5X#_Qds wT?LM)Ua0Ո/wt΀*q(eb Y(IE(l*g6h66!K3P3lrA9Æ +x1wUAr\+gż(lK΃np f +߻Pel[V[SF=ݯ\ܣ3[Pڹֈbp<ƥǏJv:kRߌ8J"'8\kd9G/u{ךw"OLyPSHNI!q]$]:<h"D@Eݻ$2K`f8Vλ[B49/Ҙ\2/L̐[ .=.N&5.fuNϠ?JkebUǹb[io2 g~c$oq~qK b9q,OUFA_4#RhB5+гW^A+N*g%AcaS DfP {s:!' Ն xp?JqrՖ-Csw1mv{A4 ϲ% :$ɢmruҮ%Vn@‰!+ʵ7E\'ŝ̡NFʽY @YW%B [u6!{FPĦ,f%a1/ 1`?Clh@-yrݟ)aTeņv2RAp2ñys47$$A]iF y$)HQLJ)i-/N %M¦nγ'4amQXC_D|p2 JvxvVm!]@y(X2Wg nT\5hlq@/}QEDg ^oIHd>,U'Y\8],NFRG.35k3/= CJ,HRo6ѳ}/ c}C4[YU~'h&dXqːʲCq~ )endstream endobj 6494 0 obj << /Type /Page @@ -29967,23 +29740,29 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6505 0 obj << -/Length 3381 -/Filter /FlateDecode ->> -stream -xڥZY~_1X,lyۍw1fg#R3)v}fS(vWWUQ,0O ~{0] !84D~~։(_WۻO7a[o4[}VeE&X=|I>,ю -sgTŽ -/w`%"x?h6HͲh_=Uh[ ;jQXO>9U#{'5LP7=;ˠQM)3/Mˮ߶ >$` --HEeHD Q XIT~<<Ci 1ާ`x%TF-?U-+v -nk~վAk̊PʖK[J ǿ6â|FiQ\"yXEf>]n\žGkOY;\D:dԦI acA6rCٱ=3O`TQX+oJz bVn2#{cA+HMFcc3p pb\C7E҄Tݕ{I_OE3٪@41/9x>yбA+yjImHs(9?P嫇f(F#Gu诺3ʛL4!Pa"Kj[:YJ&$A-xӻs×/Ah|1KSL -T.Ř0ݸsmv膟5r qHN/g2ZNZ56@qz %fчβ*m㰗e'Ez-Yt}l'<^ ѳ1!T 2Lʞ(ƃ~=#6>pj?aOqro,:LNxq}ȝq !^lW%aA)h$TE@`Q,dٹE -g5wN_Qx8f]J lWk0D/V d pJ۵ $?ƕPp\Ll.3xlȞ*v-ub NdI HVJ7zٰ -'APdz'G'yi}g ߚNfX4e/1{ݕRZ2˛)/oFhΜc]{:AɷmA1?>:1m{UY`uWr;^;U<xTST+5C.hBu QҺx.'H)YD;(r ?89F~zs#Yt49\"0 $宪~ ^dtCfۡp^4)(2?G6:eJrtCQ#ogIyĀx$qM, 'f 'SqɈ c:bS 0kHNlǨֶPhNbٿuCR/ ^),Rb &37 ,ʲ'Si8[CTsFjp@!dHfćC˔QyP8`GM",+6(n"d ("=ה&`{C@I=ExqE!ږݩs锒J"ľ4Ҁ~ {gS^|j'b&^BN;Ŧh^HN$DMۋ9 J..BNݎCCԪ#(t#!w䫗Ɖt8Wpls@> 'w"!ǂL`]A ]I0/i'I!R(Fфʐ ag} UFˁ"n=S:b'ogT#Ib{yKZdJۥ5@ rw2r IQrxYPAV11 S -^9يR(fXp d, ^4gN(}"2tflnwAK^ 4VTjEQ FDuȵdv`Fxo#/8 Rɧ!hC2(~ldld L,gǛŲ@NBΤe2vS^ʵTpv 88EuܟW'p1WjlbʮQTBΕatQA_4pq&QGzO.YM?)UC*pۺ+8r@&6|t[Ԣo=vIDś%Nz%3.(1"xo/Y#B/ eT`x!w"]1_"> +stream +xڵZo" + \tHRv9M>0l+KHQh#r8oFnCn$U~ɢ@exaM$47߽Omy>e?N)RIlwh/י^=Lymt*77a 0x$ZIy[-p;A +,`Qpuބ3vLoa( W;8atG +戭.iCG7uwБƞp $IW +:=ӘG_7ug?|`3५% +!B$s5 +x5Whx(c <8DQbJXy-^3L6=Qgrmۦ lqCйr=J>OmvL6STDb"םFW CUOylc;H%7N3ǒ%PaOj_Ve + C&Y6+*mka#_Wm#jīvǓlpȞITͫf2DS + |ӛˮ߶ w +}IOZT5Ev ʐfiNЁg ̣/oP H}Mk>:I]H%onM3bx\ղbWnۮG_vmWDY\ڊof/0Epk3,'%tmOCPy\~W.LaO#˵']I"AW2ajʤq{ _kXl͂%YEZP$GQ~dw +ϼ+"c/:~[Ɍ܍LhYHpV+U[48AX…Dg-Bpzw(b6eKZ5V7%1?K1x}ɱǣk)a iKB`Gy#I ."txHP}3]c}vZ2#rwPJIHt!8cqP7޻ϟx=#06b𗦰#!N_҈j`F~h6};QLٱ8T*$A nnVAԵIYVM|vhٌcX8yK{!@6DfIٹqPyP_$NK\$,v i;N;m$"BБφ .ow3.s5K)Q Fm %ɫ'UAG:E Y`wnp &ĉ3;'}2(Eps5N!JljD/X :A+ ,GkCQH~|ˍ+ ~ڹ+-^&g +!=)Z&-@@F'(ɒy`}?@ȃ9Pœ'G/?i}gߚLvX4e/1{gݕRZ2 (М9CmkǺ!H0;oDb8sg#|tbcֈgel_bob DOsGcq1zv{hEZ'`%s0Pv|{[$pȁdSDG5sGhsA*̂ 宪~ %A|sCfۡpO4)' 0 G6:%JrJ`?Q#JagIyĀ)jA&/'-4{LIO%#{M^C. `;F=XBb9af MKUt?,hC ,Sm߃d/e-T=Kyk2rN A B^8Ƥssh""jLIS˜M`3{Kcw!;9\g͙UlHnz[9 ڑdeKt& 2f)"vyR%_x ;FnA,zi44)wO2!dn[.J ,+>Wl1֮`XHJ:L['m{-4l.g\BJYV8sdg=r%||OǎVܲ.%d[j_F&\r6*͎S86 ܳALh]|a@gIX+mb: pɦy`*,I,.l~Uw*UM+o(TQ`dWyc֦bWHo\^S'*P>0!XM*q$zSÀf@W@&g'?|-{N 'mӎ*ӹ%$ &Wa4عbIm5WinJ$"K(+pBޅ:DUx+( x <;=.%\TS +cU0'(ͯ*!% Cp!L[vi,WY2sb?StY IӫP2$ =y +KGdn#>،Wi"p)?Ѷļ]Ap-oC0N H>B-K2ObR9W;^jK݊Ԗ3.xmDq?L +3ӗ>+C"1]!K] iHAH%|Z++?*1P 0R\5昙iwnc`sXI)6J QZ޲cnkc)#:{ǷN%mG`sVg@RZHib*ɭvƒ8ҝ+˦ǯVSi3\8pqQ'1@y>7~,Sfot! > endobj 6513 0 obj << -/Length 221 +/Length 210 /Filter /FlateDecode >> stream -xu=O1 sCclj3 L  b@  -qա,?vITK(f6r5ّUPsbjCD͌uy. KU@968 -1JLJ~sLfVd*, -Ovs8x$~RE_f\u¨Gw3!,a6  N_OM`9 X&endstream +xm=O1 sĉ3R""Āh*`w|N}^)? +RC11 oW;& +hJ_:Դ8̠dȪuk%݄CS/?Ar7?X3'`$pp ~z~ ^b2zȴ i &m%A- RUendstream endobj 6512 0 obj << /Type /Page @@ -30044,20 +29823,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6517 0 obj << -/Length 3034 +/Length 2803 /Filter /FlateDecode >> stream -xڕZKW|Xb1tDS+]IsA /Il 7ӯ@=XO-L$Y7b3?QaCxbrfWOX -y~|xsQ QdۅR7J/ߞ* ji\(Jy#/Ry<:d( |E*\OB0$"[&ƫN{z9J‡5fGS^CNu6 BʫsR?_ͨW&DDσS:Հ}|5 -w¾; Ў$J;R]RuX{ĒAKgL=$G(bcCڂ_#Vǿx8A9]: 6_*0i͘;\=?T5=X7ܿe:#v|OY°Ot|O{ M^4 ݽbk.s_[ǐ'~3i^Q)dhpF)_P/ǧ囿![qV6@_H:+Q:F/MlBbK?5 SP jo6Nl|j -| {~CuOuK|"0<+`)IYA`qGڻu&䔰) TCN6'x*?0J:nkfM&|6ޱx5.Gh6`%]m&N{^e%mh`PL>`! ( I - g% q+Wq;`p@W.PN)l^JACYd1{8>#4 -u=kZItr)hʒf펉ՖyEk6H\Mk0&I-B8NDbǽ0!0\ylwwwVkrև1]~nW+^4cN2z>sq _~(q|X \8SXS"XEnB_ϣqr":>x1ySIC"z&C#B5LIWr}Y5$2:W}Uղj֣ bkF 'YN4gW]G' y<[&xkHtɺ36y͡ -r/'Iy p2qm{Y##CT&qa`v5#m$w넯)8B7JYj[F߀ˑT^e;kĢ)6`Xo+{ڳKpuŗŗM(i,V^r02UNVm%|7@ҕ{r<7P8a̭Ù {KbEHny2JZF4w(8R96bF}~ @ N6a"ِ37"wzuON]K`fƜk1i_!&c1N@ߨl<ّ|5O<"4È=0IJ;>ߺ($l5]!ϸY[!$r}i9_ZA@֘xj>xey@AyYN";J~<} @+(_@.ߘV -#H`&2($]a1=V)}[<ˠk.<`P5#{e2vV~ٸVIz}SjHHkY ';v 3%"}DD ):}/B./W/3Y^dJ\]uMP\IK/, Cy74S۵*qGF&:c&?m]BK.MxT$#_^˧D_˪癨 𳠍:(u2{1V&`_M͐5@D,R3gtny5X_95|>ܶ,L@-5E mn.2~ynߜ%77`ϧC^K?2pv%9>?21u[ d$)xKakk繭m -mn%l/w/*3@__rqBUo 1]T/dhn:Ήi7M C67eendstream +xڽZKsWb*˧xػ[Vʒ }5h{IA`=_Tx_xF~$ }WEpw/Ba"G@{si{̍Q}T*RvC#ot/Qx? zoX,CvZ^]rz_^mˮi )D* `tS-R{X/ȼ7Үp; +JU> 4*6e*0~<}xwa=?VJ +֡ב:W2:nˁsSI5imn@CA٠d}i?Le&A7nmSj=a] tX(~l6_jYaC _ڎ- )3#A&dfaa8'{;(`El7bU!_+X~ٚ]Z^U_<>v? i?# + @O*%_d_7mrLQE^U1(ko˓`6. Na7;j;A' o`߃(x6ž묯gP'[ &cW6zhn%LbZC.qg{xx&<=.es8'Fp.|) ƚ \h#`]gN{XDwU+njhq|R<G|icϡbQMKdkv3@!l%@gmEQ+V<] M"t?3}7:kɍEÜAwht,l7׳^GZN^O F? O90<_嬔8 ,m!š]}>*M4~5G~B`HX]_Ju{qB cODCoAWe%~G~5u<9>(Gਜh{E':jU˺zW[hN ;|4aIz#vPȪR|ϹIU +MxMIrU\KuQbϼ_[/*=McٹL"/\ ɛ5oPbHg ە/>jhZ$ {P~\eQLOW_vdN0O{wm?ϳ|~Fӕ3wwL +knX1,a1r?c0.1$1)´,D.#Avqd(ahґKA[=8q5gnPul.Oa-y]3iHG-]Ҩ]QfO 'aj$@Buu@_)CYng ]T+$:^i[b{0KW*`݌XEF4aQ,m?=L8>&^ +l7J2pBL hل![9lC<ȅN1"y'm(r?ˉ>,$}W~~6VK U5$tR=SpQi0JkAO}h eduf;6qgd3x_Ft;"|qtubn(@[|B^sٵ͉hOvm͹Kyq9[-Vz!y +.}OłNԨklM=f &Zbyʸy0ǜ3#ISvZq|%3y +Rݾ8 Q~NXP0`xK0HDž%/Q)jMJa*AjaY ^Zdy'ŀhչP~!<>LbW.Hrn +%V8_X; |xb@0a݂p!X,<~`?ڙ&q}OE]>LU~˯Y%#I)s0?Y^G=-?$;KJ66'k ~3o;s@ EC&}eN]\8@V)4~tTY^fyS]:4ޯ TǗey6?XwQq*dx cJ?gٰ,9o2j{(J=nR>+j7 J"׽RU6~.|O\^khT$M]9:J'lsWW qs!,b3#'(ruÝ-oWiÒK(OR&W׍lI'xowsD`?Al_2ss?&Z$S#qymA0RH.P(o!U oZZifӰ#é^UcB)k(DM_ k?emו|r^*by0Eǁ_MgnC9td(h3IQͽa{eF Rx@)LS붉dٟݯ~&/Z2F9/czpqZ WL⯧%WиJIE(jR쯆3t>߹Ͽp@1֏ulG 28FXvI5i.ЏHI"2?;e,qSؿ8;m,:)5P1tendstream endobj 6516 0 obj << /Type /Page @@ -30159,22 +29938,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6536 0 obj << -/Length 3098 +/Length 2923 /Filter /FlateDecode >> stream -xڭZێF}BKƉvvx3!G$’'oj%Q`waKuuuu]N5Os?񻛷 i)~Wo 0&\7$G777Y\4Uc Rje(nsc/5ǖf v("&r燑vB'gn?vS:tЙt;ŎiexoiA|u}i:OKu奾Ӡ?e y-,"(U+XTfEtt#9;oJ#jyEȘ̻9lʅd]QJfF DKÞϽ(/*tGey[kmҗ 'q$>P)R.ts,fRN9*+l%ߓS_K>R'[ݒ隒io>=CdBDG6.]6Z4!y3l x˟.j;Y~v+ûȷm9Y#$>Ee%d{/xgP"VBö -v,2^&6qNL!Za}2. EL$YLdշp60Ot 3~͝ipn}F|N[uD&0b" R,Ci4p4`'v^K=F^OL=i7FI25JzDG |uv^`43bh%ȈdYSÙųM!ldiwSR<%3ݾ5q; _"DSVY6?l0X`7&x}#7LS7%ObJfɟ'ߐxVe kxAf aIY,S5-HiB)Su+gs)H_MCaܻQKGE·T\ےm[K-/6?u}EgKXWҘͪzf ? <{+ji0:`\:З$:Tɻ]5pxf"cNGW ,[^cܩYCCg$saQNd- <1``]; ۡZFtC-mE)[j*O4BsU}矄di)\ɇ !;rjB7" hl'.)ͬӽy!7a~! ,tVYe-ۧ턽#oUKkByzqE;MG,|{ -S'k;l;i+mRq V0ZY /. u=>R%hK1}E)KssJ_ ݷ#~s#,yw.ofnKBs;endstream +xڵZێF}BKƉc;A#QaITHcNU5ْ8 a/u9U??b Ineʛh͕$r$ԫh{n%/~qy{OYNYfA,?7?~;Zw?v{kYFI]7o}aM~OWQqjsuwEY5rY$nR#,h C GW(e,c78tM|ӭK4Bg^oә;bse /"- u +fusK}A:#ʺZX%DPܯVf#p7%#jyEȘ̻9lʅd +]QJfFb5T={Q +ů^Un\lyhtՊ]H_Hpb7u8d I8$Hy ͱԔrQYi){:jԻŰ:\z`Qcff_)nIatMɴ7d%2gCDG:.]6R4!y3lpR?[o.(C[Vw#_&FHNƇUj<z~㝡@he *ذHf/[TƠ:;<2G[jskeˌ<0dcg%Qfz!/߶o/DgƯy iF1#P`.;u)QϞbjOMwꙍsSݣ |5v^`43hCɈdYÝţM!li7S%3;5~8u_ESZY6?t0X`7&Ba}#Q43O' #|9b'O߾'b8ugg!fG'ˑ>G-w ߤyH}@'K%s  +S0Am?(' c Cb\+4A;fGAc+~jAcq1Gx:C4VMq<av/DWacl4/T# @`>99ܐf@I @˶bP*"D0|[hT鍩ݴG5ԸFۏh2pK|7N/䥳rq$u$$k^YAK)h!4j_04ȬB\)VU*-$괝r`k3^iL!L؍$HҩވL1oY2eY_ׇ#{qY<Ń$ A0$ubW/8nC+C.<{qw?8́ 0܄l  iL\Ҟ%"[yGVΐW)>RqxwX͋9yX&<ը$ennB,/onE7lglֺn`ٮ'OH}VmݔҪvKq8I^1=Bs#/uޯh~ .ui+~STE=@58z0*ZG:՚k?'(]-jn.BdWIUHhdi)r8 +:VcrZDIj2WHo\ҋV|ezGˣAg%*FtOoKb7(/ ?u0|6G?LCP?؋=qUҙ vC[Ђ[ 0ELhpqv>/aq~ǟ;Ztc `|1FDbkžCv2g +fq誩D1ajgOZNW \H]IDܨZfVdAKkv[urX:ݫ9ekO׍v +}}`: KR߫;> endobj 6549 0 obj << -/Length 2316 +/Length 2150 /Filter /FlateDecode >> stream -xڽYBM>"%E2@?}NωsχAHI(R!)_a$q>fwgf񛕚;OCvt4Be0o3g͔P,d٣y8{ʛ+ǎhmGǗ+{ к_/}7oz%ݼy~ǖ84B.~3OfpmV0}iw[7UcB:P_Jնy;x$vU͗oU ^Hd?۔ſԻsݧ ΗBThDkzTV+46e>-`'+tk'SoK>॔g7R\T:O<ϳqlc2 .c0djZhI:.TOOY.Rm4nD ^&^*KII"=B5_.'ޢ@yA(8z,O޹N`{Y@ OY YF\5QӁ; ETG;{Sk",1Lāp -O FlFH7 NM<5 'Z *YYF&\gŘ/A6' q1i/7haLr3b3Zڤ{h9U jC:]|\|:f,a9Z-(夑PA%gĦ\ 2U 2 Zb LTLl%'}sSE|$唧 V̟/o/J[)j694 ag')aoPCm%ޝ!|gz^D<_w%s͸J&LoC'^6%G̟$iO`{nth0Q;WKBl8TQ uO f9Y*1bui)o*jǪ>2XJi ] - .͎l" 6@#̀PD =>j4P+F]1!5v15yLs歘K/JO:%l (~h(V5<#Yl }8.!XdH$AܥK-Au"#2 S-xU?TPJBXʙIҮ;RQ(\IT]op$)/fjHAU4}mKyKA nj`Uk~%`4ؼa0+69If;{?"P{7.-R(_(@{?cF,v(Á9%.>P՞A&ߌڱ$f]ߺ|BoѳZ}U, Z:b%x86^.sͰ.N6/JY9jQ9w 7  'I|}F"=1Y Oc^9]܍(vK<.e!ݪ_̻=`e_p=^8"d@"@tTTF biOSQs -a%9n -M׬c!G3 Q]?bP"K1'/`*:IXᣢ`@>@#Wy^fOd gaNF -*;Thdruot6Dk gP9_L縰Ǵ1KQXt4W|bF;gp?`ReSeB;UI{4>=?CܙfuO+缋bâ 4f'tSu'Zo @GwlB7SlM}qU,&e[ҭ"ea p Q*yjW>Mna/̠J.71E 4('O`'RFFf$V779=\U -wr&ؿ><>~ezH-:>M8 ߘRSߙɠf"ա] -q OD]LN`o)wQxb!:sumW^(g~`9\endstream +xYBM>"">gE%$B||ÉSp<~r(OȵUMׇ3&P8SvN=_N}cN<]nd~oy|0+,g0Y=_ܿy;sW_r͛7L^.{}_(ado_w)PT@cw([՛r;~=u̖7PG 濶yId^8XuՋ%=!82mpgc/%TďG$[-J"~ZGBXʙiڮ +6Rœ6κ̝-ۚ1* +xDx."GlZPq%tPGۃTe3x\I +" 5be/B`VSd[{7"P ox.4ry=~ [9y@}Ҫo`W88d +|<;._ߢg6#yR1+w(brŅ}!sͰ/N6R/JY9Iq9' P }g+[49>#־1Yr/XXS^nGpzbGy%AYҭ< +\πC "RwF H6`?2 hE$3ZR QHʸJ]s/ϚQQz; GQaK;`!?<6{8>ZXZ. \du–֘L +jATR@ϴtv;\c+`lSq 2''%/m󇥗|gD ,{G16_QN-r*P^0#B4Q2ϗ`Ə؄ >hS-ޙmfb ӻ (GfD*nNPn'P,#~SF`ԬUxM0?\>endstream endobj 6548 0 obj << /Type /Page @@ -30286,19 +30067,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6556 0 obj << -/Length 2557 +/Length 2444 /Filter /FlateDecode >> stream -xڭY[oF~>-F /6EdE(H:$6$eK[Ϲo,?=K -M6KRLVE8]hY%ɚo.vCj3ufv-W<_c"I( ~ѫO:|_W?^K3o5PEL* 5]|p:ƴ_Й"w^0V66`"uf -I@f>0h$7:Hu my$QW0N&*<"\F£XiS4{8 j% $J"/T&[;x'kz!%JNΪ%RvaB윯|4]q N۲ѡIإ ^M:q䄣#r2ܸ++&5KI{@~'ns\0x`+ &N!agXX]3p[5g" GCPz)aVo&}8`}d!HD7MFR%q`1 -@FˡF(lM#kXvyu/zUk9 [OTgl}Psxmp[-=ȳ*FK!APk6GC_ k[^%% @!Hأ/<|tcqI. OI8J e0F灇)e~mËMP(D<࿏fAq 믵O(NȡT7P?h|d/*N00!qxFgLzX_穕<վ%գ(@?3F&`y^X ι ch'ĵy8cW17s/>FCt\hKўc1ؐ{~=wG)=V4=tLz%.*v*f;Vd|+&\d)O IO9 9q& Qw#|XaqBBt2FHOzw ,;Zr-W\c*I( ~O:|W~/\O.]Yec~p~ClQ]XgF]V~Jg*ܚ(QQb`0A Yel<pwgϗ& ھo8 }دn-4 +2YyJ"d(rq4P݌~]&hpS2J#-W:ypf  M 7I'-og,\dּ6/N#;m*h +B9$x?{Ffc>NbMLkh)aNG7yͣ˙Q ^or8BEe][i/=QIvd{+G~BR +{ݤB4DډSQhXl( M}팅c X\Az"P9O:ae3"`ZEeɇqmSbFDpQ@4~n7lÌ +6br0 |oT$AsoiM#;Ov0 ֆv p*`7tځ%RruU{*ktN %ʀ4Tȍ}[䭬Ao[[l Y8tʢ#z{"F!g[lA^rHyK?K:5T?rmC'BX =ClD (= Aʑ1lק%5'W~[:iuis@z7=d%,-YpȨX x;h3Dq/;dj|䁇pVg{7xjڂ[?,s8,!!.{rsw,tjǁ^=ru Y|U'@bpO4%A=Rb]ײwB<1FA^kL@,T $S=6p d)"UAbI4#w G Ft*->. +mq /+xE(nH,kbAph|E%<}#jPE8j18c'KJu"-o_coyj۲ĸN/,NEU~= AX0{"c@b۲Ȭ9JX xGi<qlf+Z`aG`d"h'wa.=%J&gB&[{x'kU!1%e8S(cSl0HNͷ[ig)`#ңeѡ *` ݔM:q䄣9Zw%!Ar=A[d}D$}ʳӎuo[^<:cu5Cga!3_@AjX&FHyN1;IcFǩ $+A&%Pv B2`AxΘHV6Z5!G`mi]G˫|}S뮺Iz,ze߇ڣWVr_Ef³%s!`Q`gkv3Rab0ԯ +س-IyوPsA!́8Kr`x +/)Wz*k6 #yߗ u{, ^4VFu*3V=N,.j`&5%]Iy'6> endobj 6562 0 obj << -/Length 2051 +/Length 1970 /Filter /FlateDecode >> stream -xڥXY~@* V!f#/)y-["Eؕr\Ēp187.$3=҉uD:m=V³"Db}88Qz{KOkP,(7*v;޾{~)ݻ^so_-[x Mů,q #}!a\* ^5w@BE0"VND$w<`U55ܲZ<)R9^0zpD)Eb :BHr"DOQ7m'ݼ_l&`ۀ;IߤMgFR9`sf0&bO#M( r$d۴<<- oyq>nq*;vTԴlC?=ӒuY3hd 8?) W;=r)`ȐE^$p(^U"t*ϫۉm]=mp$L Cw yc,~REn}Ncl}*v(tӱԩ͸AGm8O-=֌t" P00tc$M؟JKt4(j$1;g'!:OmcgMl;t7u֙:quQ!Tfv_0 8헓L"yQVcN+JI'TRH!ӥ ^2n]pzdP5hB'npm; cgى?o~ ػClā| xwEf7З6NE5<+DM!`/e -[e*nBLQi\IexIy2 Eq%s@G$0XLqnl7JSW8Oڇ`96vp4+f'efX6[/c$!,3 -F,ap4g -|x}c 9f?RXkdkލB\KCD@&?D$|!2Q|!C-|Fc0XccPи!NQr/\^-?AKŭ1].a -fCƣ`y$V΄Ym,"kW&NǙr+nٽ5'){OMse`Ugtk>PaxvtFs֞A~Vl'_Yl+|iJ'"F%Sa]ᴈQ1^Na ܑ{UIY,^7MMW{ռh(sRPTI1g'W;]Hnfuy̹X9 Uy. p(BNdM[*mrj2'ϫ0*H|o\dm1~3iʴc6冶>u( yF@'.Z֗yrxdmn>ՉO{| -4y k_3@hWW7cy8QMHrޞG$e"{`^vlBfIUh+-PX*җ  !;Sendstream +xڥXo6B~V(zܗ6vSt{_Wh[u+ɛyP;JZ4!9 O8:q"|$ζ\V[8"K_o#OYz{KOJ_zqo-w~R7?_Z~z=S$g}|&=_S.V΋)56O8~&~ԩh:ZchSrNI:CG?zBĮi'ܼP"<DNBMdLŽ)CrFd BJA6᭩KO=8-vKٱeMMvL ݣA@5@7%ep"tH>Gt:.K W; +I"xCR$2z0J*vL:@@]釼$H? c>$F_2]uuj3uU |bZS3Ӌ@n|!n}ڊscuOc2Tڳ +cP< Ɨ$I>>ɏ=hzg۱΄(rK6HL  _'ZaPj$5.' Ջ"#}a2N(k[hy7 э-76M4]1; + .HbM^ÌS۬zkUkʍarJ7uOuBp/Bu&WwsP;8WnsB%ԙ .݁/"B?]=ٗ+{5#ǜI نPs.}33S|bV-HEUc^h*ROـ4Tz!ʺdYƁ`"apg #%s+S^x‘*p)#'nbtOJ0@gJl|qřjiag:܅K;뾈/MAJSn'd"盆ˁap?OڎraP`CqNx4ŶQ`"T!fUGω! +fMy,v~jG>}:Δ`{ok}WlȚǓ@({K얼`Ň%9Wy3uJ|.N_Oc!QD@:9+zE?iVkl%uXnZ(x:7W] 0c,EJ a nVuy̹5FƓL['bg/5Z[6euAWLcd%!q$6Z#8':Pᷛǁ9րS`\Db {6SQ0C> endobj 6569 0 obj << -/Length 2878 -/Filter /FlateDecode ->> -stream -xڭYoFݿB@BÙԍEd6h,(PI*}kHJZ!h',u|A>J0"PN/~Yp`8RmZ;lvE}FЃċB~8w+pծG,R72əА}$U!,MѼ ㉣bڰx'.6){dW:U#7L!ο:Qh- FOEn$1; -$!׆k}qicϋV m|_:H֘*zP}Ճ%ͩ`"1`9tʀh/".Ƌ{JEue eV^]{2 -'h v/"rˌpͼyu !jzP$nsB+Bvx$+Ě8N,&cT|#J?~ry9ؔxQK>tNC-E0ͧѩ%!8ZkUfd3L26P -޴ov˱zHZKdaz@X}a۬ܤqM.;6ziocCPNm91Š/x%I9Q'^[c&(NUk+\HaAA;$nşp0\I)h&J䱤5omʌĽ ̼@r"F`SUjn-ʥ`c<(*. - x*[.!cEEE %Ի:%`?lٵ*6 ΍5uY3 oلwH1 A:?!כ5+cmGdZr0s,[6olofcs[HFNʙtZ8˺;7mѻ_\z(ӵx,qK -3 - -a;X$Tڹ?#Ы މooQVcCR=A(‚E"t ,ߠqvd 3C]ߴ"~l AB-Cq6 -lz3/mv3>OGp~Wʍ]#~w{ hO=sjx QF'ғr.EInLlF>9>5mBvCIb[_  -3Χgεmgԉđ@G"rwkpK|ҲM v> +stream +xڵ]6}>D %R_wOll& .hdKȒ+|QmmK, 6,N|ed]V^^aCBkX\E(m) VAlfTƿYU0|{;7/|/[s߫O?7{#%E:Lt؁?f1wn$2ù{A~;^S7BZk-Y)xYwg>Mc0:|TeE +/+YU+ ^CNp2/a %xu3a'C +e(hvG/ddMoKf) -ec/E)DiGުCv>xF -q U=ʦUClkʊFcA$ЍW:vLӊ(LY~?koљ6^!owTŠL|Y_}Ƭ&J#$b1aȕbG,jaӒ0VA&/:36[Сf[8Нrzx)׶Ft#|QqjV "6@?BĆ^ +CիfW?Ezl3"||W>9j6eԉS?E+oa4lq뽻'WA I@zB1e+j8GB#7J`Co;!xD طoM_ ^Rp>8hxfLjz@KhCٹc'iR|Z[B`͔f*oׅTi$"xRcg@K!'ZtgG#$kzOD^K{A6ʆLVjȯ>ڹ( +ZbD +皹-کwADXp''J!21)EHre LFb(MRJԂܡz +sJ޽WR~oZm +69,!SO+U% +|ky@G_|F< npʏ:C ;ێ3^ȃ@5ոq#M9 Q{#:`uqvԗ tt0!K?&:d81&b,*l䤸&>n!/H{C^D +?.c1$ZI3>[`t@\^~d8?3;T= 4;sf^HYEC*KIV0Y@+\kbY"u[!s!NU$j @7S[ITná$ÌLvDH)e<]I :΍~0Gݽ*'-o +')QeGj3fjQ[nʟH=A)})-\a1&8&r+~'GWrPn5Tn"BQje=ۊ&-|ܢ]Eoϊ,0f'".V_*ћ M];wָiϳ'em㳆Js(cLK)vogaCu] "uLl*J' !MJ'g,$C=@5?0l| $Ӈs˺IG*zi +Oʽ~kn± P_vendstream endobj 6568 0 obj << /Type /Page @@ -30437,17 +30217,14 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6577 0 obj << -/Length 1158 +/Length 1138 /Filter /FlateDecode >> stream -xڵWo6~_!$y!ER YEvZEAKE\In~R$[*C}wd8GNDȉ7@DŽX ߪMOGSg|v).q{urv3M98`N>; {7N# o&p$y>yٚ22]Cr!c)xHxuLjc=?O)9OrlD9mtr.9v%rH.Nrŋ8 lkvw,RD=ErJDq^6prD> u|P$M.k N\Tvu@,s#C}:ӄ yZv%*eÙ@2+w V74\}92+zJ-U&L$1B*f峙@)#HM/:X jtC+oOɉJ`ay^DaMzNb#$ӡt¯A^-)Es\9 C_~?g$ endstream +xڵWo8~߿%y)861T^J^ڪ6luR[Ebx7c8qi숈 ENRΰfj`!rt +C0q,VZe~t|).wqzu|~5_|>/.|XH _g?c'of8rAƈıS3jnwoŬ1çFFQz(pe_=pcrZA%꘸)> endobj 6582 0 obj << -/Length 2076 +/Length 2005 /Filter /FlateDecode >> stream -xڥXYD~\9t9!k -ٖmUdi#kH>TAmj>>r.O(:' tׇ`4!G4/oùA&r;0ꇻ7I$>,E%{埋w7Kwcdx٧bDt~$lfpe̫WNJ9` J2i($A$BRq/;/—^~:{aRo3U/,7<]|POY~_0 -ɫ3%)-`X 4Ll V9m,s(K`Fo]e/]X@~ mA5{S 20;+ry'մHݼAi-فnB3/$lZtgYq0x\Hfk2DBy={zeO8ުmPiҢbXm( 궅cjw% "άK/ Ǟ8ZGp";.(JEUjL㄀1m0 ѷOltFZnxg [:h(ksym_v* H9qi|&PP:)OHhq,Lq!E wvx 1%9wCAJB?/]$ՙt<Di8L"F»/GA9N{'*󼐎F28q._wm|= Q@a CYQ(2qAk -\0)b ̑b=\f)q|67OW/!C/Y!DP( [Giu FkA 6x Z*_h[ÜϨG- c)Ծ7RP8'u%_hAwA!LP}"j\#pRRðx* T,J8t|a}wNeI@>˷k6Fo@ok. K|./-5p_A 8jgDCMM=l۲CЕR $>% W\r@L^PsF'\;MσnW -#e"Zm)vm1۽ -cFeC̜ۂ= Apm[HDM]+lsrhi>|孾}Us}f祜?6dzo{^$7nxomN< 7&tml]^7Lg7f4;}X{mP% A:8ص .';B D6m9~dȊUe&ce`(dx==܂esNsB;VDx)Ȥq%08w" ܷՇ^/̄Of$l ׺KugL@AkGm7Lv=C͜<ᾋ2^}s` Ց:NR&GXl*6d=J1?qi=:WJߐ_NH:H@\0G ~g!uqqE$wǹjh'~EƕHG`Z z/)"J*/;,Tˌ.G#R)}ݶhC=J"e ﶪ #$$;C뙴4sx6B1ڠ]ߖMmXmͤW;_{P,9o}1ff{bSwEɪ^-lƯ]t5Vê̓_j&l1?+#5.); -w f,άp,댗jp- _\RɵX%97T9 ce;:C9{d"ܱmʭi~k{BN:ESgNU ~16<pK.V0MUh#3e*Zq ."P祱a"#mEJJZY80KyWJyendstream +xڽXYoF~ׯ#=x͹ZI*"%QatHʊ}إJs99Vj,OPHD $f$+q,BF!n"x$򧫛XL8N~0I7W/]O|.Do2Y ۑ&M;Kta`ݎ~^0Sg +oHWHgICo>mAG9-GměeL- =Ogp,OtB])GݭsV;yr3y, v-&'!QڲeZ[}FKIB;([ Qnh<]>o`iܡf+@fDSoU4H5H'%<5_{ZD)PKS lʴ)H8R,s<RǼg\mJx?T mأ*c#AC2Flz%C(@'/1YW)O{#S +E_g}/ DQ,yÀA:&-ސ5M,ĮoC[{mfm+I綮I?r֥&{qb]W@ɹɫp ~([S%Y۞#UYQ5PaL7]"LI痖 ]J)bR' 8ާT6UA ߠ>*Rj- tAu ; w:bm'W[0UC~u[@Tɑ/CMt'܆x{JC6ZJs&eֶ5uYh{+0%*AAk-޴fXP @Pendstream endobj 6581 0 obj << /Type /Page @@ -30526,19 +30302,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6590 0 obj << -/Length 3165 -/Filter /FlateDecode ->> -stream -xڝYo=B)`Es/Eƭ1bznQ5EjIjNEsofRăj8Qn$lΛ<)aZ"t|Fޘ*uݻ+ߛEaʟDvu'w;ANga9f5ULgA;Z򆇗sΔs Uk?wxIPzCXp<7- U@X=-N6cɬ O zU+eE|3zJlƠEㇺYq i+AFm~^ -ESɈD[>$vC=_ra1.i89p-*n.n4us'iH= M ႅy#fqjᅵɈ_ίneԫ/凨# XMY]z(t(NZӔމy?UJ9?C" >T SA|_MBD˂_.xT7ṭ)*xl+G)Frf{2%H6kФw^%X1d OL6lH_`ʠXH;~}):BHa#A\Q -#w4^֕0Egk=ׯ*n5.M!w2/9EY  H_<4O/#A6q☁p &[MA QI[tzӀ"rH-(ŅJm~gXL ,cC3!W^,>*˗?*Z\< L7A֋*+7KXъp!ka } ^jgU ֱO hM.j]+Ԝ+ kdIw@ 7pҾ3@3Ee{Ծ _9?] g#8T!}k_F>~ -D5Wd]٨7CfVԤ(Mֵ0}%Vnʮ>U͆c~ȵ ;/lX g pNRw5obom,K!r:/E'U_D;il7k6ƺA$R E/y~I>5T\5'4 hu:s4|#Z|?މ;әy$v!Sz~:`7ܾ@r7I֧!7JY@F3I \O !IwS6yA\?qR" D v yJUgԧF.b# %( =b>=$e$iN±og'\xB)fL~e 02%8-o|5Y8^A<]QNL׶϶VcJS7Ew(N:TJu/.^^^t ,ͷ RTS*b?uS41v;zk ުM ?UsD. -!mK*tKKA%%9U͠adRQ'bEXQK}qg%T3Oa|HuzdaɢڗqGЗ*AiicyĉGUg#Νd;l83M]/%sČB!^S|C58xA2 tZYeE%A"=e9& IbO4: %3Hq?̿HWNKW21>|iS -EniwU u-eRn&I_tUz7G[ Cحk<[ * #ﶘs_kt٦zXLT#L0mGWa(R29&0)13M nyE{:f)-0"' vZ:ڎ~ȞVseH Pz6Vz\bA|H'){ʃjna@KDg{;e[:UU([qc>(*˼oپ$V/ӰWs bl0[ -]{M5&l+u7qjY*SXjǤQȶ4r% M`ʾbJvJt~`E#ItG?#gnݏY -h4sʭ*x7+ -bsvɹ1c;܊L`/>? ߳!2j5eǰ~hh}?W^KbÛB?XW%yb[ 6L.N~qp;HC O,_nf夤X@DD0#1#^OXhq Lf=Q(]ƶt!qfCSTY+2{vs֌.A|MU?p #:-i;-U>nx\.+A)=]k qQQSdNav"ˉء$X#~2+j$- MZ AmhxXBÏ4HQֽڬ,??CR1&x . Qv?@)s3cIK'U 7`ܥefEvR+DA[Ԣc@Vֲeៀ遒Ĥ[8f|;*%vCG7W朗Xhlj3I'8k$b1|q)Dr/zo1x1u5ũv:K*s?< -xBܽ|{xAH㡘?Fendstream +/Length 2975 +/Filter /FlateDecode +>> +stream +xڵ]o~SKKsϩ;qvM(ZbL +Iג:OšY+7t;[o`0pCa|`qlWttǏ\? +ƾv0=3s'0tsjIr΃]f5p3+'-rdefyS*dxH &n⫎D)N$>,. '4k%U9c5HK3$n=j,q4ঌ0~i +Uu9*tc9\'GHV[50\2w8+Ł^ YI!7g#?q^wO7 8^:~MY5/K#7<˨S_2=rC2u$+ȏ#FJ){&G*X'_3T=}4-rYGxs6 +mapEKQ#,5h%s75` !OxfZp5/8앉RAC'⛮DtHFک;/u x3ҊzG9E_=x8+saiPA렊6sʜ#Hi271B慙D1H_<ՖO.#G2豣#p & Ku3A ^?Iz'hE _@BOg]xyl3F*2~ |gQ̴ȕWFcL[ri@ ,)˴-cqVC5 Y 8x7s,P;c"tihoXR>LVպV.Rs*`b/|ɂad3/>ᠡug 3ysԾ_9?NƑ Z׾/n=^ɜ^ bT4c=dXcvtűIۆw V4pX T9$p~vpú,Զ-(^y["Fw>jOl^ 9KJcYAV5:8ߝٜk-ُmPɷ▶"VV\7vƐ~cZӚyX\Ry k T0~ }Ww{iS8-hqIIHVdE +49`jrqfl\X5 iUWh18 2CDH뀴eR\ :"=X"OǞMyB:%N*.\YypqΌ̻}uE +'UQttcNKEZXd6mF4}py6d^rJwC_˗73m˼,rWp䥻lWŞzcj%ZtzW_OT\]KB7'E;MZ&:"M j.iajx#2%:yUb Xl(<=~)yĭfڭ2K[qfTfop"!T3*7XMw5;RrSEdkqJ?^a? tp +1b|Z%p4e2,p zR0}JO AS2HFjacVaˮO&P^sQ  +| bp(smȉ^\M'|P6uqowr,A_Gv$}8~Ȫ){=m + / +X)CW +u/mns.x]MJ߭ѩ_L[>* r',]]N$vJ'ym#O_=JrwO.*;s{0=%wvoL`1<-H +.1'\t"Z0Ob;,@&]3gwyX,WЂW }kt|XiE}j +=Q9< +>^ߘ9'^F"N0E%0s)äwrb?W 3LNmm`hS+yRpRIcB'boU4\jʙKgӾ$GtHmG$/fU8qӸ=o`**[qa>bϪevZsykZ3Ζ|V͚ KxKhSk@{河k†D2k&*m3 9 fmqI[l$/ĕh9е4ZS˥;{-SKC.uA+!Y%޴ȥv5g(FN:|)0}} +V9~d?h>p3hy9]o._QåOt< ]sa~[p'a}rB$ MIH3 q֎Z^9hqNLL:=aE0 +Gd!]ڦ}8>˴LB0\z;uz7àK7^ 8@0N BOT_@R3Tcrbf¨/_S!^ܯKdk2kу'~nj:~ʳM.l!_+{ĕfM@ q߼Ac1ѣ K{ $e< oͪkCys.Qn|qz{??Su6:R6+ iIϯ8n >#]K/Wd*UQ-^N=Aݡms<W9q2 {l!1i kEE"M-ɼ3s&ȣQ#B} djg ?X6$B,Y<.%L.h{ﳡ=˸16 į;Cu T ~KuC׊ ۚMendstream endobj 6589 0 obj << /Type /Page @@ -30616,25 +30400,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6603 0 obj << -/Length 3455 -/Filter /FlateDecode ->> -stream -xڭZo8"NjZ$\8i^osr,y%n~ ew;gÙP./\:3fv& ԐL{4g\"v 凋TkHLa9\|zwÞsq`枇/~˛dzy+TD{?Bڮ0>iѲ9WRLe,b6R H -f}$Zwzd%097}PN@@;Ƶa C͕Jyf{-p|ã~s}˲(ESa$؎R؋HlT΍U!Y?%=v:6mGC~ZJ_ā"5Sn'S$Bs*-S@YDΧlbUhwZP"E7Y'i}%ԂI.,-&*%̎Vz6^'gCqRC=i'if3m#٢*rՈEC[}gΡc!X-z݃ʀ|fށ[ӚsBMy4p=o<"+B'd^K=푏OοـEƋ*s -kQDhr2jŅY /,`|_!BpОm-i5NXz.1(/ty4F% -1a)y>+|FJ‡KgŴG$yMcg[SDYt+s"A\on%s -aY"icjN7Ax:# o/kV.6Z#2eQjJ 6HQFDr(ZC xNo $ȵp\iiK@bxu|'W}Dhnh}[v#i/GXaHW8fQG)-v~5`elʙե#ewD rt1Bi>L,8t4,K4_^4Hjv*vis"Q2#^"!' B\x054ʜY70œ`Ys=(0S[3:c65Ze:sCϯb¶j$fbCFcVƙ/ia,,$Cb:{ J%@Ç -Ci؅(k4@HXطJj-gOʂ]=24s[aT[$6nDUc:6H"Q}2⩨s3Q ( -dݫC JNG&nmio˄/`}B>IͿNy^~p}Sp?z= ydY9Pߐtwhn\gӈ?|n]cj/L79\ͮ?bXrھvwk_(𒠖VUemN&(ٟ6X^UBIT[#]yawɡkʭڼp<[QQFk(a(]G/kg1.oقr8kn]U//kçFwM0 AKû$f,DQF S)cV,L)CúB#R+ƤvG>Bh -}u%QX4֦*_~Ƹw5ګ -BSKdUcJDwZxͦ|;/zN]rk>sAz>dM1X 4? teL:AƥItw|]Bs Ҥzp $|H>fKb$M=DZOy>o Fu|"l]RK_Y$i&cBb6tSd2döVwj'X}Ʋ"=kQSFrgVtXLSeFp"7*nYc%f}o-cˋyIXi)L7ۤUl(gS-fbmfծ> ;㏎y |Z?,d@k[hl=K떀iSLeܦnC%K^]U >Rد׷wonF(DZ!}34۫a$a?\jd -;"ZaITc2$oern~EF?Z?_\^Ÿ' 08fxJ%}㞕 lELj8 '{ H0 YGsH-Rr -'P 6-{WcɪI $u{6‹xN)"i:@Joc#asM4٣ф(enW{OeoL2].oH\{oQ^s ՈϘ1<`|/i!w lq;O/)x1K(]rϩNVm -mw1F̵&./%xANjis!^ʹwX1?鵫FC^<_[#M N*%vu t ՄYf$ؕCi%׾a.G?kiWx1zOՆOCG_)\|GPc&:endstream +/Length 3291 +/Filter /FlateDecode +>> +stream +xڵn_R@4"9 +n:ki@̆"Y~{e$Zna@ss[I +S? I0'R+̉#Lũ3Ld%ga:R2әrj_c\.>5<K^_W.Wfp<_IH~0 ڦpp\)\G~~{ sW̬P;KX pÎ%6Y0Y\ ?35THG7nT0d)rnsq*-#Ÿ+tMB@ʖǮʢH7 +5@|;Y(qXG)fnڦpC(?4tfp h@ڶm쀄RԐ&Tu>gSFVӆW<{ퟧ:ڤ5maǼ*bj&ZuG2ңu=fȱMz~' m/.s +M9R6u=#>ONħ;ܸ*Ł p^(yH)ؖxm7e^s4`-y>+f_[p?fM9^?IƮ!Z Is~ @6$1n +?(yNl{]@; C4GZ1d v\@ +;FnʠJQmWE1ɵE&&BHyd}cp,"f,(!}IT;Q +&qHI2rHtL |B65iD=]9Li +bK3\|K=}bPL-IӷH;D.۷5x̨9GySA.:FR"۝$"w˄[```kE LvӪ%qDjO[VŅ!?2q~m6/S@7}c^~юC!^GWrL&*BV:zN %=BXWKMi4b N*u†N ap%ՖdXc1Wy2hه;?1lȔMŗ pG8vЫ Ro"A8 1i\H: G%Xoʔ/ѥ9Y tHD I$߇c +WGt^v:NO* d^U;WSm)_^b|aTѫKTY,T3Rt{L'n56ԅٚ$C~ VagF\z$FkYu=j25,k3`#ߤKc07׌\<g@'ZpmkShAҁhPq'>T`"G'vd96խ_*x۾GuiXy:Ê HWBӠ\*$zJ>iTk +}Oa.))?HtFTOxFUyOנh k9u'<([e1Aׅt>JBٽ2dԣög3×th4^c:\`@ to!+g$-TYBmcM֪=:fMv|l{2#j%IKA6ȊPv* +ҬMѾW8wy\}3Z=\^]?8<1a;RX._Ջ EF# +ђ^@-Z =S %_9|`UQ&a ƢuHfPU9*68@Y2Ѣ>Bd8JjfQ4<qLG랸0тJ9=ǧI9XE rPD8. w)x|o8Useqףؽz(WSoygn;>v]ճ]/ƃ~]sA5)ku)W !UԖOM]Eϼ9Q~oE?Ih1' Fendstream endobj 6602 0 obj << /Type /Page @@ -30700,21 +30487,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6615 0 obj << -/Length 3336 +/Length 3159 /Filter /FlateDecode >> stream -xڥZYs6~PUCT$zRIhXDƞ}fkjLh tSNq|$,a3%#!uh~})2iƳvƗÑӉ?q= Ǐm7<~;Fzuy3~9aH~3LN_ X<{8O:t޿e;7B퇡6m` -fQu&^i~-.Y/]l7e @\aʯ"4ާ9ϯG[_\/dvCd'9˥f Ҽg2e0K)ɔNA*Zs͒,f ۃagMpόU.i{^O1Ûbt$9_rOUƏW褛7v".{ wHV ms9!)ٲP0>R ʖt2Q֒N*Dge>l -FyFo+KԈo"XϏ JDqCs b7'`ȑ0MZ_QtU9OPL0]IdeԋKoS'up bMg嬷^J;/AOkQ7& M;^j>Qj6.? AY$W܅nS^ EWF?^\_ݜ½~B5+z)6?062,w2V}vќf@OBc\ =|PR-I,%%?bGP@)$]dU6)ǾMƗdҳ H7"]1TFcAi0hHck.+؁Ww \(|Nfv)1=YUҝAfߤۡ9fR+!VE߁y|kn{ںV֫f,m3xY9!`R3׺Qݙ EJFz^W/iBvm@ # "p]8o ['GrbEt}h!b\h U(vOyK)# /x)n=uJN&^N[zD,@+uͩع |Ǖ\dl]Ij(s|far\b& TKs~@ (;426QPFiQnRLpX;Cj1 E64S qOdڝ-Mt%g[ (a|2lƨ|0tܴ8?IB!lR0p&W7X8eF*&\!rsZYw^dRYH()YkV헤Qdb7;U,RZ#jC)V妜lLL&K=sǦ\{WI! "$lŒlY%blU2Sf^A OW7Á^WsI@:Q`AX>QXy>SJJ)8S&mWG~@/C7>]X|ywV|;B5*`wO0}9ΰ0 v ;rr9 Gۋkh8:1+d@a9|; @ bD=;=n(hi =Xþm]bֻ~-˒/|2țU"l-e$!d# m&t^H;w@* ]rW\ƵF2.7?H4n"YhιoF)SE#'$$ȡjtB~^zpLKM-($|bgX8xÔ$0F% Y9θzzn|zq~_.WN8D<o?xn3=ODEPޫYO#(?r8MBZ ё _,Ɠ @;_zz[Ю٭]: wW8Cί*Òo]'8gN`mK'Jp8O7c-C>|XǁTCG8:=ǵ>L?uRأ;[ Anz~ 7覸":=*J\?T!wDӔl{*yí,ϥ!Ҩl-T]̸A +45%y$jx v pl`,?j'v l>1 \t`$y983|gSxpGuŴFо{3 Tv8!yf+z|y{gFfsjEfZnĞ3/ͷfB|DL$p'1mJ6cL!j0[/M" 2~^| +aMz<p M~S V]1kDXHTeS d-(30` %$@ZبFmrqz4g'7- }'7h/x qG˝sD X m٘ivbM0|^ߏ<pbbёbG8vv4"Z׌Xk [g]Yo;&tM#bOSQ*HUdl eEK/|]lyNjL@9'.3yd ;c&| 3p` # 9"V8#$ `hM7 2% +}G<鸃\\މ)n;4OeMdckgi}e _zvЭEc'G"҂r[[B?A2H!A:E'm +5>,Џ̾X[Jz,AJ'{ |r0<.=r@# mmm2p_[R&BQQ\H)2 V%wJxpwXL(r6gtn'F_ŮWuGʑJy[-+ep*o^)85̔|?dggVo_v$7*.5ÙNoǫ)0rҙF)tۏ׻ҽ8ǐ2AH,0LRX .Ɔ $V_ ʸJ 1CYu091~BeͻN +LE g 7@a+h'Iņ_')cإ80p]W(a8:+L&ڑxNՄFQ–&ND]g G _&0 8 ʚe/se-ǡV ;P88u:`'+Ymڀ}#€k"!/8P*melI\k,5*oŦmm,`/9+AŮ,(BSmLCqp45bl[֚<늖L mtz_ +0<3U\"4<.m^d*a@SxJG\]Ϧ +{`̖(tI6@H>L :K>*a>`kHF۶! a Y+7-oQ +[H[y0i04PpJBJXie_aGaʔ51MxLX&J_)CiO +x1K[l^٨9̄DA+Tc52UNXYq,sЈ5!E$(MqvN-P4rbjxh^*17Q碱!Wb=l|Ϙ/7g.?M_IFoE|0Jѕ۬v{s:U)b1^x=EޢnSt$oIJ-=Q<+v}s`۳[] cE(|]Sw8],wQzU;~^coW՜?2}agivp'/!^ /S9 Ҟ4$Bxf3#p 4J4-xm~Q^-<5f)i %ޘb6:'|ұ % BR~ o8^)^J[_ 舺ʎ 3@(t:dE1kW6X: ].ҠxݺlaYZ-S-q\ƶOJ-zp|3Hx4I N7R&M(&>b;A]|endstream endobj 6614 0 obj << /Type /Page @@ -30768,29 +30554,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6626 0 obj << -/Length 2862 -/Filter /FlateDecode ->> -stream -xڥko8{~_Nj[i^MVfs%J~[p8[fLH $QAN =Y?/`e6yx.'FLg@'RaL/OY^,IRnjo.z7׼q-|bï~YM.~xpL、 9W=Y\hd ZX\K* -Ww9RNx)3̏^RlTNH>E -_Ɵ$VIJ P 'w(V'^ k@tf<qݝK*d/3:&ciߵ C?G*|oX44Z! Эg&1*HUٕ-[}`#>Jv9`)hg[rb^* -㴖i~`M3Pa<8 -ޘ"0>ʢ<7cZYrY7A:ǯ"yP4!ei7y% WP[*GFLִB%@]}|C:m ),@mMla 5˛vlWzQ*x] 2`n@C36t hێwS0i8i2t$ ~&bȲD%)4^B;84 fAqK-]o{;AD} %94 (FWD -sCصs*6lOeUhw8b5]3񽲓ڲGÓDAaxY #`ETE maB*i=bj&8>&wGyۃpwl:šs{}W<Z ,YLSU!)נI,"3V(Ahe%"XXG\za|€`핋[țhF_˞`+*0 -]br: -'=˪[:ql;Q-UN9u< *b`i,!exܮv>1*QN!ԼR-WQJiIvK2t+~uUL^=.7 -QZgXFBo0:gLK\C`S| H$}e f-Fqg#2вժ3^>#CTf}eV|13:4 "lЍmq)%[>$GJ0 Rj-awCh 9%TvYGhy=sJB@f'orMN1Ws+|xt7a\: -/6D"0єVQ89VK_Q\tqȽmUc@W m{%z%KH>\cMY]CY_D'9f^?ϭmײ#QUb9yz[%3 -q<`q˜T{b0, ל5{37oLP"шv;`͠obշߖێ><>5Љ$24Ɯrڌ * { -V۰9]sƋňST]N׊'XǑleGH3 KE㶚I2'} >god$G=唭V -}}UUGm'Q?7;J*D 6?6=yu=f\D0$}?CƃZ -cnT `AFȝ6i_̲TS7X!'^zNN r@ +qYHbJVGs팾W49Vd  wE|K\QIQap} 1&w`590,UQq^؍ -<WCNTHHO56@JQaֲm4) ccDӻiZbWiOrwK}F(`RQkA#C4aTf=OD'*΀siJ׻;[A$'L dY0hL"L-0:\{5J04T&<ÜuG<\< -@ -l@t}/܍IT}=~~u}|{= T* %:v7|sQ됿VlFr:*PSr:r -Vcqk7L+qf!E֫WN(5=+8$/#Wt$}?al>!}+чcĦU}ݥNÃC?S&AwmQ^ɹUqN~4ܷ#l O48f7{endstream +/Length 2764 +/Filter /FlateDecode +>> +stream +xڵ]oFݿBK) Z/<8ӨW;nC<-H~}KJ];3;;;r'I(mId=ӓ5`~>sBO|QogBjdx$snqq:38&VYu.n^ w.na0|9w_׷/g׋3_A!FP<%ߠU'|=ٖm)GN?`5` sRJFؿĸ6: +&R13׃l7QϯMRuno\N 0I |#no{aV V@W6gL񕊆,:⣵yA7sQ4Wgg'gl(t.M!fN)'2)yėmSM.(xQ]ZDuomj?֝D,=0Q畐0}9U+OI\ tώ`" | ڒ9|:Iv|쿸0C95Z8">?x̋3s)7vcdO9Uu{. AEm9$!l@6*7; +]k5øPC bBw#lvQ jY+7T-`bū}*o$;Nɇ!8=F2J(C8> ^&9PyE˯Si+m(z2o0g}'Np>9q |N/Ԟ%c1lgLE+ie7+p,dǔAQ/pjT*JŚΙh~#/H?r@\y,TQ5lax`='$Ɔ'a0fs~c;66>&M+ׅʶ F'U֥^40w(uTwx(EQ{Gē0P黇7w8%4u(#?'.2I cc_D֝\UѤg$ʃ]O} *&LCbHcS0`/l|BZ(.>YCN8 +mW.咲MʶGp{ ŗ!]I,_c=A *iPQmKgl4Ը UqCcM&-6;=I `_6E׷[?lQ1H%6D)U#5Y;TTR/ܜv{*(KAm:[;7> endobj 6635 0 obj << -/Length 2878 +/Length 2795 /Filter /FlateDecode >> stream -xڝr]_Gʄ1ce'RIÈID$@j>} rUJU==}OwS"S< #]̲\:gM4Χ%&ab /l."daEP0n~YigRqU" -ٶ{ j0Ere-wP w F` 㶻/lGgL /c:U9/iq#τ5> $Tq4KqL6\(4ʊLV&Y4lvSČ wF#^5: -$PwV/H9 E5owU3E%[8XZMg!oQC"*M ``LAigNYp+PC,;`uoYXeG!Y唿  .cP 0-/=%/R@AҮKΡTΚ* Vd8Sb%|h+ ۪s:U+j< r[*lɮǴұ4~ҲgdhZdɒvU׋w9'͚Χ+: VldBmvd0}$E{^d˗3dڡtߓަ>\ZB̽, Ƙ6D9h4ޅ9BZE;Q(%dL!bgٓd 7wU-GL]= `G=1"(DP/ 153B F~#(䥖\clLh]^b8ϵc$5P  Y~ԫ$ 5{CAUELDOq,U|t$]70{t~-p8gRCDmy! jFqn&g|.NpU񯽉`CcQQ(ì:MkEV (u~)?t9iN4m[. ɒ`.% n_XnQOINtzRAzX5.ډ1`h͌-! s~xh(E>;8 -UQ7q-F_:Juw9ZY'I{`h7 LL< No?v8Bf7zaXpcW -!;0;u+icS (:22Eh}=:d# -oVTfmZ]8Tod$Hfߕ$*]Mj)$%!%9piQH^{fRǂm "+/aGmΩc۰bz w)1Ow;·RƟ+omu|Noo۱X4Ev U Mye

    kdK}Rc?\HK%>@P0!?50`0/bvܞyzB?;;%H'MJZh"_yAplPS;Cґıй톊NϝGJ}sDS'?/;Uj -doeO~0^||Ù@Tom&o6dnSrJzRTyQ..wo| :ҌFQB!Dlhb9& 1|ǁ{Xf"~Ue+M5ȸvUyo|!qޑQi\^(~LG*3WڏtrF{lwh-mSۛD,^$T7Ȍ(pƼR"c$LZ>3ndhgv%`^z>['7wb,G\l<1Zq,k)Cj\FMрVM{@ϭ*m09O[~y^Dv2iWD&|wmnP8eXe!A#J/FJA, YLf'q2J⛐l`5PAhLmWE+ U8AZyqUneu alh/)LS.#g3O[4B ;Bh%}q2#1{'aq֛('>ȋ[L#D,>2KpNl@>:$TUqHfGN] +䤲2yIa[c"fk3$P czlƷPy!$yr>@࿑?j JwCoi1Y^g"cy& +f391>1y6ͼԹ` # XbecRdw2y6B"L[\ݶl--{IT:w9(#5rRS"k>4\mȹ(Q׭b +Sy9 rHZ*lHǴ1ĥeΐfã}ɒ9+ʮg¹79;CI'7(+fًTW P +':Tu\5|y _-~HJ)8c4O!~f_ogrWldma:5LLb,IGg^EW0W*obf<uNhČ8 B,6H6!DϙȢE6]g65͖TeTY09ۏXqT +5w*3'dJ @]517au)X=SۅlՕtX a.xk0Rj!kRÍ^jVE1Q᷻J?O$q68-ά=.C EM#i N(w=i8OXq& +(XN:'F&]G,t-4ur0mTI"RAj$tͮzɢ83TYR t3xsz\d[ z ȣaF@&ź5"m+D upo>l`Z_05N ĕ$Y邦m=p2Yr̵ϩu*r5^I+5j5QvK|}~ٻjZWE? +b!B04u>]GYzq+ۻb'ϪdxIaF޿.g䫋"rLju~}]H +r4S0%٥,XɴAG-mI5`K\ёGE q|M( +8SJ!C) k>%I2Tdr]+,fRǔ Yv6wM. +Jy_& nKQ;;cG}&Oa 8YṔ۷b2E:S& ~޽>Z/A@ %exc$R8՜LmT9qtb#㜒rRT3]]Xqkiߝ|4 +FALC!,8[c"z6lz5`2#dED+p9h^:k|ݽQk"/\%T_ Q/ #gVHendstream endobj 6634 0 obj << /Type /Page @@ -30897,21 +30672,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6642 0 obj << -/Length 2794 -/Filter /FlateDecode ->> -stream -xZI6mŐrSN&qwjj*-%tHݚ_?oHJ|T*-,[:\_b?P*B_ej[=x -FH6wwUy}b_jo}xiQJy*כ4ͼu-kW:ʼ_>}߯70ƫ~>|q΂sd篻 V;`Wyzv0]?~xNxյ*L]^?'#GQJM8zE׮dU\Ÿf/8v0d#^KhÃNL^2iHH 'B[D64]YYoPMd`s_Q, \KOl r8 U44G*jlR7 -ނ +v@,lx#80ᾳۛxl8FZ"s\\H@O0 -/83Ցg5a2ڙ[q.t.T:UP Lύlj%2. c%Q̊F<3$ -ǴB:s ;%|ώĻj -r^b<*Dd[xBUsԝ7fx(I? =ʼn(SNkP6 4si1%1i8V 6ЖpB]ݱ;&~)"g7G#6Uҽ4)܂͕wl+ǭpdԗi+>I4Df~P`VJ'WaJtQCyd6^SRD.=wp݁9@'MRwMQ/Ɨ2X?i_q kFǴ(cحs76 d< 1,c3|NܞE1*,HN[[N/]< HPLWe\N+G Ͳө, 8ݧj`&#Ͳߩ8תI -Ŏd*:Z5~vE_BVJjGYbjK76līY lH;0:qF*bX%1}8 Ɛ<'HsddNF(3>*^l݅f1|4v5yG)ʐRg'VJۘʺAlc Rڧ1".sk<"F]Z{/"\V#aU-2D8iGijS^*)_Rj>M~Fix7rBsq4:̄():<xwZp*J6h -2a}a:1=][H/b<ӭZFX)~wrr`q-anMuX%X@yk)!RF@L -&v ,a4J> +stream +xZKsW-X0%9rE#ҕJ> w]ͯOfJRzzfz5pp~Eʲź +[*` qշ?m~wo?-WJ)Orw onw(~>~\WxnrJ:QxW,6 Wl |Q_XV\]^sz\rWIX2ngn{+*R]Ÿx\ꩄ?͖qH 2~R{eaϻO '&dy)L0i7Dxָ`͒Ȇ+x6+2XV!2'E ^Pa +߂P`=0DJEް+x Rh +T6TrpX EǴagqy;8IpO*8;Zj2?+TT{EF53^z{X\(ed-kQǫlߙO9wH3ƏTXRG1 +@+iuA~v:JNZ +r^b<*L[xBU1%4fD(M? lq N 1og :0d60O*a@ރ$N m ']a璮 # +vgI![3Xz~iSU-{-AÑB-o\yz\D+|fvp|? f\VR?JYN9͂$RS؜, qzPCSTb<*pGNm#4\%lΙiMmOLK\S4}m] +VNFjr6)fUɛȪ^:LG%9$MW7,`cDxa5#.?q ?.'IԐy |Wq@[C,' &H8M5{*@cŃ#?_*'_*Y<>|` -aP*TUL4UcCHGn)(ugެ¨53eˈ9Ys|| 舘N;䡎vp܁!jMmw My-_| +Og H`л41mX8 5_3 c2$ v SH}ǴFD-S3w@ޙ18iJ\9܄9e3Rr9aڳAiEiju.*]k'ܱd:jd˅ ,NpLYWJK+pcQcrRNrֻY?VcDY̭uٻ tUY=QoqNE.CER #jUa/B@+U8\+ +} l3oW6S,@HGX] Oj2<=#3 x7vFhK᜿`EI'h.Ew Rr/Jl3cպ-μ::8 +y)t JT!r%?֪6dx oɕ7@ ~1[ۗIBT/un".d C#P.RoX10!{VU%M'-`bI׻"T߀ܫ3WZc9ć8/*endstream endobj 6641 0 obj << /Type /Page @@ -30958,22 +30737,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6651 0 obj << -/Length 2647 +/Length 2566 /Filter /FlateDecode >> stream -xڥYKs8WhNf"=l9<<؉V&X%)RKRQ~%a*el4FOML6IR4'd -oOhDe6yu{r&'* D~w̟Β$n; š^_ԻMȸo_o;y}[ghN| & 07Y:{+h^=~.OnN>Cq[8^V4f*3=Xalzih }!o$QGAH._0WOtA Wl-<7-̢PC{sZ"â)o[uR/ﺼan?򋸸AUśמcB|ϧ3mR>[_D˫+NN\mŞm -Z`˲nz>se~QsK(.Ey6~FDow -,l&h -ް켏&$c= mgj?88U2 p -99S;c%i$WM{WZ4c+K3] 1L7?QW -<=Kc]" *d[ e3kL.yR& -3ұk޵ZI{9'(OZ@wED\3CAlڂ{5M}l9XYQw@ B3o˽t0ۑˇZJ{gW?M6ceQ|go {-aVz -%j{C=|5ճcB}P:7J$3uqg} -W1.A7TYjZ9+, CyQ(a-Y sOc6Lc_'ɳLosÆIgʝ{l77TuqIuqpVLG^)% /2q9>Wv#y0UEB?{ rZEѓ`d;Jj۰)i>z~ `y2T E}lg%jL/m< (9Nܓa w)-:ڄmZ|L,H -MpGp 2vB p}<4zܼ¯ģv -h5Ǽ@/GD4$P9]xUvN"pf_ʬ*P0!-9 h*.^[Gg.Vs~aHTGu&p~@Ɖ=ڊWRx%w=죋nv7U78}ly, C&XP_ ~2XBV a7Q)Q5!&k(Y8| /?ҝ%ܣ$+*w[ƚ`ѱfKQgc徑wϗG""%nWcl̹ ?}yB#O3Ew6W{́ ~\ts+D뼮X<NYCKB{dTOp;li;taP'=hٙZqOZgaZAC(([Xȵݷ`#C7ǎ?i,鍧p0j1Yip -\e 㖵5? GQ܌ 5} K|].x˜Sk{ҝF HbEK 50' !rUG6T=cɍ]C5H<>OG |b6IS־V©ylodR?JS׏tendstream +xڵYKs8WhNf" =lٞTb'<[ H IY(ʒԔDƣX ߿֎N(nOg(P{w~''l@Z__]_v7(pH| NL;{: u.-l3v]QV^vd8}m r֠grsSI4(ZA9v5|UB5.%Sϙ`ݱ-mm&*m%߹tyVI`O{=GC.OMzKjgrUlUr84#z3Li+a0bVWkZ50&ߙޠPZ +5K9뒬M'qj3Ķ5vUR̨xY$p.d<tIWBWUrbK a9i W)y)y7ճn/_;^͐Usfo~gA|}|~D 0RWCjY9~as1]8Wq5|b@p'SK(rkiM9!ꩶ@.5H~ u_ѲYdR`Q) +;-[cf,3 +D~rvIFM ǐ .}71&߹8hxBƾ:Ls:j``jkk&uCGB%9M |2Hv> +(QH1u֬{ X@m0%*9ﯽ`?s2k;{?hmr +hKYzG}k1a,h/{̚+d 3FhL"+l9˰Vb, +òZלyEW٠vV|%#!yvlv[\31oD^ )JBA=Q'楱>]#89vo̡;.*ΤZ]&0H,;ZS 2yf9L4*v>U&5Mmaag9[rgn`ү-S=vvJb6 +݀]a dD gA)9K7+[HvR3(+;A}<>dE*tV2uQ}Ix3}&f"!_V W,m7E킊oYqLsZv<)քt]͖lݿIn"6{CB-G^*ċa4^hOdgXmWGg]eVpWjQ5]_]HŖO0[wA"yӛݴۯ42¨oFN6ٸ:s95۲j͔Ÿ[uX::Z"t* "oKm8JY7KQp,>QԘưؘW(qoYD(H (ZpsYKSpncW{AJWC7Q骲-/+{霎2w\Wl&sD;wnVBn*# # DM%=喈=c\I l5/#I|A_/$-A8)zImUv>]4b|""[25Z& =.>S__^7dWEt`ۣ(ACE‡# WF v<JK_|r/QwqkjwQ +6{e̹@ B\(luMiIنfk 9c3U*avr;UEZY$un4~o,n ~ѽʲьˆy9 !e1$'izo; 'M|w߯\X $:݃ x5@ec1jj~0}>̈́?Hèmʋ4|wjiO1)hv1fNvi?4L*k?I +%= -=v{ .)+KI#sx̔2V,KB ~tFnwH+y׫-ݭi&yƛTX)f\A$_WuMz4r}Y3KLs$G Tqlt}g^8ofIŒ`|܆ de-1V q䱱)ZSfcQ [p _,x΃)C !# +. .+>dKQ\Xu40mVNmN2qJ $ f(i_6v_wjjqx O/~NtOl̦I 9=J8%Zw9r~)(';z7-j0u\s~Q?rQ_'FǮJ=1^#WG/2fendstream endobj 6650 0 obj << /Type /Page @@ -31016,14 +30792,11 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6659 0 obj << -/Length 411 +/Length 389 /Filter /FlateDecode >> stream -x}R=s0 +8P6Ivj$GؒϑIJiA< -_ G ~So0#$(BX5]dabL'`-j+ a!Y*Rۇ d=4*P|K7S#?ԏ?M~U_7wի jQrk]{A왗84a Um]7L@ A3z97W] -|Tˮ>L -eӽM,A%u x_?'xD}e%Xv?i2c&#LKuՉeh3v".Sb{;V"sfc {'@&ce}A;p?7 4/R^45k$CfIQyEr}' p1h->AKM0rm¯QHˍ c>D9] gendstream endobj 6658 0 obj << /Type /Page @@ -31052,30 +30825,16 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 6664 0 obj << -/Length 2760 -/Filter /FlateDecode ->> -stream -xڵZ[oH~ϯhRC]}%NN&&n6t<_ԥtj-ZE8>wnu(H]d$<_%<}AH!bƊD^89Ⴂ̫\d_|]PlrA?#A22.F[4ڔ2*4*͡]n>xss|}SA,b O$dR(6Lzl@Y k"n<ʻ=!ڛ=(XJX'bԤ xr>Jaѡ3Rp -uekOݧ%S X -Ϲ|l"jtO`,9$iUg2^"2` -ueb03CqV|J}Ӷ\] ik4"|HΡ_QaBTR1BbZcS[Duܸˋ⡆@!ؔm!~:2<P^\F| PV@Vi/QXsf\o% )t ذT{X -FLؔuba疝D4` -uel)^~/;#4.(&i713X)O!)dNr`o˜1=9af !/#+lXf}} CCP^@Ⱥ-Mh-N84I )F8T3>5͐ -1ϯ/CK"Nk12HN[y }VܛxWPjS캲E(rkMqb^jjHLdﵞ"~ЋԨ -e;z=W!D[M8搝<$<0sB!{]s?@5 Rf;A 57w:$u dU+0 ݴv,0>fid?-(vbf\::Щ4Sv 9S@[G`EF҂ OU^ 8~'MҳfX{D`bek#H^@$,9rm)ǶlpХ;T)Icǃ}F,P-CԧpRP:a p+%~L HuemOiAmceī]iθ\S̵Oi  -5#T~PBIvVrW.wNo zɘьs}[BQ -5#T~PiKwfyfZ^ q pӘB:-8q*+p3\PB!c{oۍXMx V+BL'yN Lk* n/o1qÊblL]jcj.ڞ}tG09ofG7{=!ܣUw>QSOI MT -?k\ߗnDe'Nf NSB3- -Yy-Lba0b#i~,fc][ky÷E )=Jl8Vwovb31s%$47,Д8@ t 1*o QљzSԺ0zt{*Uzws4uhY -ܸUb)6e G+?s%[P48C Pm -ά?;-U[ckSÁ` ^ (yfa`"hdPڽ[{ꉵO[Xhw׼W_u^={q9z˕Mt:NWVK2+\%Q^^\pGēB;%(hD&`cዣ 'endstream +/Length 2108 +/Filter /FlateDecode +>> +stream +xZ]o8}02戤(J2hIw2-`gd[ڒWX +DIs%+'؈@'Kx2߼ &KF„!H }mT" 7?_`Ezr@-B)1wkƟJoUTGֻ定gOo>= ;V"p~2:G3 ׁjS@Md$t@p"09*VaAt57y( +xqW{gRn6eXW.ՙo7U9о]·K5Yv^횼x¹*Rn䙯b {{YΠY޼=^ 0Q'"D%j}^ŒAkVM73H/Q>=`Ђ[4/ӴKny}=v C!t$!t͏]gh0E_]XaU~_#^M[B?/ LlЯuV& f,ViW7( \p<3c d7Vi[8LVj(Z) .c>+Ţ$7u~UO> $ǏQF.P0eXg8H X'JƂ2%#yWw`S|;B$d6F-'wmA+.Og 3̷lw'(*0C&m5f~~%`xڵhBߗ 1+m|Xzw.+w3n-!'qKgX?_?w.ƞtdU/DEmPQiWe˜7iAG8j7;XOh4NRGpP߱UaWaS.T!?/K\jU X0[mg+KnNyq&N)J(L!CqrH^:dM5$%=$7˔|dӧ(HzO xiS.qۿabƹYURZXzOhRģ(w }U˾Zr>.)lw 鳛EU4Y{~J"-2Rt`($f<'TNP&\շ oLe+HzT`Xjè1TYjQ6($7U^3a6acN_dv<,;CuMkmQ$r_fe:֥~Oso`:TR"xkU +x>\{o"+f/y܏UF;[tOrA^PDI2d}ycV'l9>fߣفAM*t4R|+CnҊ&Su1Qm"dSO%B2z4*s|հV>'alS(V:sDC"GD4sU{HgWrr_Ƿ Ԑe$%=^ycҳtbQIP95\?kꚚu"]aE0 Fywc +_DK>ԟ@h[8bfӄHˬMYvLz'obLg'/QW/ޕx^ /-.[ 4GƩF0bˇf~Yp@J bC~Ph?p(YP-@Y^)SYbIn)Aw#Y{F>Mp7n-?`_1.8;7]9xp=-Y{Z_[m9qݨ|iLӼo+q$#{1μptulw!x&Z=!endstream endobj 6663 0 obj << /Type /Page @@ -31290,12 +31049,12 @@ endobj /Filter /FlateDecode >> stream -xRkTT# PALyĒa P /%ށ 3w0S@DP4 E:X(: hJQJAueUzϟs$3`?&㰀@04@@t!r1`;YL#)p𧮋܁"51aB&2iW,OX0D0BHB_70ICr髭 ÆM* MB*,ad7߰zq\,'ߌ @3%$R9 `}] oo &bD&at1\7yDE0 e>6\B:zڍR0~o`Ϙ G Ac0\^ -1A8.ȤCD"6f`%e:  " ŰLn,@O^=2uͻalg&8d+ .<"r88. V(q%6!d0Ы04~zUvGʋ6{c"TiBh ǭыFzMQ/T xڞ-ߏK?.=,l~jD'yiG4F ۩JJ\*ਙGeV}6Y_Zu=NIpLqnT``EܿGO5'J/fs]XՃ e,;"Ti\m3qI -:ٍNw'q@-Q))_vQeOoMެ07h%#L&*14zRc3GbC,Щlxoomx'ԒO-t }BUǔ{o4 9.S">4*/vLp7om?N"v{aőjۆY nSeToj;4ԗC"gm! I1Yb-jlU -x3zGŻC˗GutG$i --^^g6Kdsz}1]&o6K_,:X-$x;<5r;#駬pUd/A3m9̩֑;*->rr0 -ZO[ecqgwmOWcfQScKxMdLCIWpC1],‰zE.J2xt+Aʔqb? OaN`F'endstream +xRkTT# PALyĒa P^ށ 3w0S@DP4 E:X(: hJQJAueUzϟs$3`?&㰀@04@@t!r1`;YL#)p𧮋܁"51aB&2iW,OX0D0BHB_70ICr髭 ÆM* MB*,bd7߰zq\,+ߌ @3%$R9 `}] oo &bD&at1\7yDE0 e>6\}8zڍR0~o`Ϙ G Ac0\^ +1A8.ȤCD"6f`%e:  " ŰLn,@O^=2uͻalg&8d+ .<"r88. V(q%6!d0Ы04~zUvGʋ6{c"TiBh ǭыFzMQ/T xڞ-ߏK?.=,l~jD'yiG4F ۩JJ\*ਙGeV}6Y_Zu=NIpLqnT``EܿGO5'J/fs]dm.fe7M #ƕ[57g{w,|`#yY?KC,/$4vW`یz\fv~T@[7u; ZȲɿ +hLA$M̑ t*[:[z[j&I=Sz +C_}bPq1([+ nN~b=k>O M޸.K1}͛{z6ykXq$bkڶpjvyTfھ;Mz%Y[HjRiL־XZg6Kdsz}1]&o6K_,:X-$x;<5r;#駬pUd/A3m9̩֑;*->rr0 +ZO[ecqgwmOWcfQScKxMdLCIWpC1],‰zE.J2xt+Aʔqb? OaN`F'> endobj 5445 0 obj << /Ascent 694 /CapHeight 686 /Descent -194 -/FontName /BGBJGH+CMMIB10 +/FontName /ALBQED+CMMIB10 /ItalicAngle -14 /StemV 113 /XHeight 444 @@ -31331,18 +31090,16 @@ endobj /Length1 800 /Length2 1394 /Length3 532 -/Length 1980 +/Length 1979 /Filter /FlateDecode >> stream -xR{ -3 |ɟ<"B`!mVxΚ CBeڠ|P DD<7D _0۬NΞΫf9KA*v):;[UHMP4~mf=x_9BHB^1@4 (p$הbb#0T`*0ʇ3J[W_)4[w׭"M,`b Pɠ{vAR,Y&'gHKxҁq-c?PHf]d[m5RdMΡF%ER5~~/Dѡ]Z&hFU=K]$ -}>0\UCft#wOڹ^4wYLO)#`tGDhA=vWŪÖLKʭ6s^s^[ ]8|;@f!Ex G-rv .ƕ՞)WUgQGR`Vϟ~՛jS\!M3d{ߒi,;td ySn@"n&<~uIJ@^o٣EZJ-  -=KtmQ GN[rL;hU -̌j/oT@x#PU0.h]8 6%UY)R͟%}Y cۗ>ߨsSVY!l*v`]G55z}lZ~>(8Y3QI{H]入H~hm~Ж[Vk7XNwo ܷo,j/unN<mXee^he[뛓T-8xV - _ES5PMS;~;ri7q*8[H%KKX}-#h̞,Q0B68A ~ 0HW* +pS7ip< K"c,w0S$O Da!pxuŚC"ÿeڡ|P@ y a <9 >.Nn&sۜ< {J흫ilH RTވ_|3b<ů@B!$! 8kNA11~ă LH]J*0@BAY J0>shYęŶ-AF/J2Ys(7RO/<ʯu10Z'fW%p{*YE/B0 | y:F59Eɖ[^MBNt:UI|~nUo]F'K-EvW`ʳS.[]RM3VV%"BV0qiIF!nS_DoӇ!! hv7)^z֋sh}7? ̜HbY4f|ZpnF^jِ^^0na2pfygbkѠziqۢ)xi)MOѕj,M֝GWH(* eN2_ƹǭM̬/b=6E]V%u39FrBs' +iNVU{ ^2j=ӳiT2xϚr5=Fb<[P³Ӛ~OdUj{unC@~Z͒紜<՛+ē2~M(z瘁j^~l6wkFXFya#i!kNp%u 5w}*|p\fT3#{s9J.ݝ; v'_niרMߌZ| +3}sUt~MhK勨Užԕ]/4S¶'=VM/v9]]3' +SVyMџ%Uɔ823y)7V2 {ڍ^%߾zpbh\՟NYh\9`WVo+w/־rcz-(:V Ei{v=6jf(y1ߟuL 3 Wt6_ݮH7cStu'&1lACPA)p'߷WqKZ פSNeՄZi^[BIU^@nk<~&fCF#OXJ{,+m=_a]e[=Od9&i?L0iZ|pzswagW goI{FsV/v*^ DYsF&ae쌠Nȏ-;܋lT[GYP>&5훟Heʙ!M{jvc|KVTZ;٪Az]rX ?|aH(!aendstream endobj 5171 0 obj << /Type /Font @@ -31351,14 +31108,14 @@ endobj /FirstChar 40 /LastChar 97 /Widths 6700 0 R -/BaseFont /GJKXIK+CMR9 +/BaseFont /XJFPME+CMR9 /FontDescriptor 5169 0 R >> endobj 5169 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /GJKXIK+CMR9 +/FontName /XJFPME+CMR9 /ItalicAngle 0 /StemV 74 /XHeight 431 @@ -31378,31 +31135,30 @@ endobj /Length1 966 /Length2 3059 /Length3 532 -/Length 3719 -/Filter /FlateDecode ->> -stream -xw<H]2"9̈=2C8 9䠌P{"")dDTd;~|^uߟ -Hp\138&!C@#H  U -v'IUE{  ґ!RhD3 @"05 IdV?2&Q68@Hvqlp.x@Wϒ@&E!( O Mua961౞$40ãR{/wfh{ՈH-+  0_qQ a4j~ڀ[XZ3ןG!{oOfj/`pupH< -ĹrJ@@٨'J?q(/:Bpx5v -'RD uPo: @ -E0EpHFj?"HOahk}d%%@IE@/o.U~FGyc]@@}H>A^vKfMʠ(QjVkhX?w+tn5۹ tm-̈͜#eVF|~+ dogGс})($OLv#13|@asi+=8RU"h.7Cc qcOSIK &R28#2MWLo^f.$Y%1CKfGPy9? ռa^bEΗ<*2:t%}4½3S2|^J$ fitfPN }\h(ے3_RQ+kS%dQ -X"s:oK~x-?bC^Dݳnս.kaZ G#Cs(0ԍҵIN>m,&|XezUyR̊#/= XeC2μ6y[9׵; Ӷ*]u=,#w{$bu1l(o]S j\C yƷ mݟ+Ҙ"F Kj$}Zx0KΩ{j'<{C[W0hϒFnš^כk -KlgwVyަ.FlޭҬWCxA#:sA0i{n79<WD)uugߐgɃU:D?=1&_zQg[JQ4n\Q+ ?7&eW"7<蹭vG162&Ȓ <@*ZwI3ugta'rxR۵\퍧IB\K$%M:>p4W+}7, B!R !e}&ZȰGRY3/uv12 uתDw+ z"OQfluͦ qij7rX -7!HMx'M:6zj/rv+&dp}msLJ[2֢3dF2r}[LF67,<F-oڇVrr#f US",9}X>} IЇVu{jj>;YXm'zQt _#0)Ҋ$6[vr&;<2לL"MD7U3}?'O7RXQ$C5Ğ+ -6) -[Qwt]A٤L -NֈRI|kVmt Lo-X;45]G4wN.`jB܉%lx)1Kǐ[ g-?51Og^OT]Dz_N92\!6Kޑ]%1:іQD0M5LB472/t=a>P%uaOc8'*Z*>zMe#/P$]On) o<ּ=vYKs\w*cׄD$mo2[6"hg *7bGW\uq|. =ނy2aA=1h eܦN*R̻1 3C[YA:J6v;x]4fK -cgUrCD[BaJ7PLwY ?W2/Wgi\гq$>)_<[8~ck,ߖV3ڮuɰ:ZRƀ)-&ɥt8ýloŃ_>ud(YxxJȆRNI69NJAβ>M /޽yErdfkgUa2Ml5lDAz>" -"ܫK^ 7>c+LpOL -xr1o#܎w -K>$+-7c`HOWW_o77b,'4Hѐx%eʤx~dʀVVHwEYՊ+vMJM< Us4kVMFdk2XQiz8..@{LnHfrh}Ly\5{ vu5~dg1S{ΤaH ˃~kGAZ'eQH ‰VGqYcI1SyG!y=Y5|VP-%=n#Kшx{+/|M+Qh8ش]b -׳ O*<i#%U]U/:/uz:8xKh/!`y@FO]'+@O>([LR/{so Wfd]x2*1o:օ~2|ӕRJ#·c>L>JqbA$M؍{ª_akay! ĵ]ƙﱤ:DgDV] *|Ϯ -73,WMuߞ --:.]^|yE6p`wHo Ә#]"PL?[dyƤ*FEu mxy!֎Ҕy_)P~V.Pao%G_GPη5:> +stream +xy_9uݟs]-%ne#» 8<Wt͍mm0qHI2!huqt\]&t +ts'2?D6M` H#A41G FD4 +(I\n Ò1 + ,$)@fRYDq +Br@-4'.nX ?jXC/ K&9&:3G@o߫dDj0h@)$HwLF qкTDXN\B8-`?i]"3 iB׹v!((("A᠝ )~pġоڗ +ɴ֙++cJ*@ #+ +@It&57a0*P?Aq -r 2HOa}h5@EM@/o TU~FD"Gyhc]A@}H^hE\ KxLK(WQ*m?hho lN < YM،Cr#> >Usn2}߻|3hdT"ǹ'f hYC|uU~n!,s:PH`QҘ{l2bIdVtxEFaWXl +_f.8I-1CP,&lmP0U?<Ӕ?NlS8\[.r#3\c%$\}60%!&ONw*9 Ҽº\̷+F"፾; kc`+7j[փ,Lă:u=P'*27vm5ƤpHyv5Vȡ|2_c7LbΊ@ lT? X^:L):ӏ6;GK/a72EHB47*8F.rn9֯Rs:M_=4Y7%,n`$su°?&g1DٚғY7YK||Kv*CMۊnM>,OY˱kwG﷋&ݭcH l;u9}wvȽ\uQ.K$acX5Ó >Tu>GJa*=z;x^KWP64 3Yoag?]׼o' +*~~枢VG-&!QAKфΆٯ1Zd!=4*bk%VIufzaoyf|d9aWV^fʟY;e=$[2P7*8)Ds?7? +ŢK_sJ#ZO>"wJ iWJGQ.B* 72|BYNo4RnohFR_9pҲxU v[ۣ"Zjyf,R[?2e;R R*{ߘ- >xrSHoi wܶKɐ.Xzd7仄sH/l(vU$K}z}:Gû@wRU&.fQg-_ 0ӞyA .JqsV7$#ER"TOt +DeXf82|M ?juHVp + >_D$ Xѓ_s|endstream endobj 5128 0 obj << /Type /Font @@ -31411,14 +31167,14 @@ endobj /FirstChar 46 /LastChar 116 /Widths 6702 0 R -/BaseFont /JOTPRW+CMITT10 +/BaseFont /DJAIEU+CMITT10 /FontDescriptor 5126 0 R >> endobj 5126 0 obj << /Ascent 611 /CapHeight 611 /Descent -222 -/FontName /JOTPRW+CMITT10 +/FontName /DJAIEU+CMITT10 /ItalicAngle -14 /StemV 69 /XHeight 431 @@ -31438,20 +31194,19 @@ endobj /Length1 779 /Length2 1014 /Length3 532 -/Length 1585 +/Length 1584 /Filter /FlateDecode >> stream -x{XLiki0y% CJͥ4SS)mMsޙN9ΜQ )%\JXPrkشq.n5VYTiO_9}s˶ uCE-ώ<܃g2l)=t<|0| lA$HTK+"pCq'b!c R7 Kv(RJ1y< -@39L޸i$)a - -X P4#B - P0HT7J0|G(KB(H?$4~s'/xSb 2 [cUxJ$HŘ!|B7 w[j3t1S1SLDJ]BZE}6m.!XŤ9d@q*T;-v&H 9p<#+0"vo e-_lts{{>p;] G'pr'`VDP,Eiw!TB =B2Wƒ576tgU5\6Noa%Zkτ+k6ݨU-/z.1+I߾rE,^S%LI4xpIdnt eD&bYMI[L{˥ĒMWvf|'}M\ -Gĥ$wE##aP}ezf&ەZ|+gRTJy݂1,}XGo}eTe'p,-֜+^`l-L 0B=EȐg՘>?XƘ|3^";^7d -f,:t2u3}BFnj}jJeN,؄qOOĹ*(d{z/LYrV~ic7LhIP -<(g[f -lt/ȺKޙq`X5so錬c91O l|6+Ws Ԛs+jJel+DbÎFǾ*>Iw<|.m+*`rV/b=Y!a_=&+>ff]\`u[}_|S$]i5!/{73+dʞ]eygD?֧goPx CVi:"+;ߛI~b|F[͟LDKynse&QylfCIT*A +TBBJ<0 ,ߡ!J) (32>OTPr&2&'Aߠ'%B Q/ HL `i8HI`_$*<'AU B)iI0%C B7 ^,}:فjũPu"9]"Q.h!~ZEHHRfwA +8UhdNP@;d?WʼnHD_c~7*Ş/B'#.\I8s\  +M&IS׈vS,Ciw!TA)mB:[U o55WfVԴ\qw1v(Vw2]OM~⽥r>/$e2<]鞕g-#^ P'N0;wkf]S鎥v^dV+#mS| gdú֎VYyI6<\ڑmzƪ êtۗcZC lwn{՜՜ Mn8xwvw_ xߤi{*M6wyBq%\ +}z Kv0X ēC#ZLjA~Tó~츊LV-C;Mo6v[s^ܿ1>89lZgʼ-2 GWϩs^stvpo_v>ػ^Lwqx> endobj 4584 0 obj << /Ascent 750 /CapHeight 686 /Descent -194 -/FontName /WWMNAR+CMBSY10 +/FontName /PJDRZZ+CMBSY10 /ItalicAngle -14 /StemV 85 /XHeight 444 @@ -31483,30 +31238,33 @@ endobj /Length1 1354 /Length2 5076 /Length3 532 -/Length 5901 -/Filter /FlateDecode ->> -stream -xg<[%F(eA0wNa(=轛! ZD -N$Q"™wxxΧ;|yu]Zk  e WE!B !) P$RCRK$% -^@a8DJDTJ*|=h M+aEuhG+n; e}A@?އ{=0@HCءpÒ rk3,PH_ npZp S\E5@].nAy@ g _t0?G5PWᩊh;G=g.?M CH(O͸<>@ Aj*H;  1q  $ ,AH K cSq#"@ -ܟU}%q ׆.A`Oq\E7Iʿ '7A`$&\$M"@߄!`[3_R. w0߄3hpv Nv qRKG'p Eq]B\K\\B ߈;G`%@]B K8]KE_B\^gl`~0N֋ (\b)!bhD{5b1v^p$Ͽ!_l]N8nDIG8e,RWzdEkؐ- ڞh`gzu'D%UƮV5f/B!pz9-oqɾ+ה137Wݚg9ۉio -AJwc ˧&} rZ!˂qe, [ I;j(,jI?CןFȳ% -uLd˜ -9S[ ކp5⡒ta&Kdڲ*=y?"]agM>8x}"qZ7`^e~Hb"!#q3ȷgܹ`{];5êx6PmiYM~b[^Pȕ佐/knTbޫ5HtqSnKrI udzaUe#&qOILwQc2f~S<|ؕ,d RaGK` =*؎HR|'e]9[ZqE?Go3^o eaoSO>gx%8X6D|D)'l?I&tk2rZy٫GWqmmE4gCUY 2TM|n̺Y 9^JN6lb-*Q60Y.I/LxK]/sPr"1未{H ÊLmɫ6 .MGm'(#y!S<#s B8sfsJ+EgJ/C|vB>]j! kgqfQLB&BVeEw#oTq])i\݁X:Иӟ/Y8ѾɤC!AF\?x'[j;S|0HDD"AzsmaqҿV7άYvZɖW<7ӀE# a3[!zZcbu4S+p$/i.M5Gώ/LċjK=գ0ɷ"6YEVJZ/G1FW\M\x|NG&T8Xb2QO}8/cl==Hh,uJhs ̷F%l9CkEDIh8γ.|":;);~ _ybl2!/{LXKR 7"x>QyWv!ɺ]:'XNa(lŸ?bAw ϭ)U@չtrBS@,xϱ1T{(%K-b&Bvj=\Rܒf-kq;U͜Sk^MIs;׊jtլOŤ.+7֫2aiř7j*qo',[|_`7% - Muol|g[YC>|-.݋EV&o_Uql|NIkYLv#tY'NfZGAA#θ!sR^t4Gs3J Y}ؾv:e 1n.rq</*Ku}{:}|e?{9VwOk %cC\Eu>KLo|{g0 F]u +ae[_\xn3KEv+v>WK&1N +(PHb%/B2V#1ٛ%7"bD1~4bk(K:}Q> -a^MfHXO& P^Ϊfv9)y3$2(rAAFމlŬ+znmYU*{mfyRY2G6IU2¯1.H:a?H1}Dc,ϟ/RMy3K}1_)[ uu]bߙnlšڿQr,Z>({UvӜ:ͤc*Mo*\1aU LbǦzP=59JXq#iDr5$0.k4X>Uӷ߮U s:A5v'C]tSq9h^XlJwICbk*vWS9]P/W+h*K>Xr%SDCc 439U.,>Ȅ1\e's - ĪO}-D3KCFcRv -Jad>]=D8qӘwX2znJ{S.RUfX }9` 9Saj9]xk߽ԃY>N\I>"*%!~chuKmQR|t鱊 al^wk}+9 -]Ϊ+Wr'c@#GiXu=qRŎ 74C w5#R^NX'&\= {z]1C(#xa{ ڎ=۬8ڵ ȑKZ~F =7ln- Ynz MN;U'~}& Ze[)/YT^Y5}:Ƈu>+R&p&H|n1sÿ; _6"yOK"U%,igqm_8L{ͫJ/ -H#'Lj@-5U#! aaN9 Gh;#bWQay> jP5`+hŭ׈H!h=&`#*>IM/͝o =}ZhWx> -&I~DdV9Fqzi@USGaN1۠:eSEF N .3##>o|[~yXv5O& -6$ђ!ڶ7fy%Fىobo\ bP-)ɴ --n: -=̠>6ȇ1Zd* rZ}cWf%Ƭ˺Hezez!ۄn/*:~I{fٮa6_:{7#+9WMq.>3 ϵgs+钙J"\\ Mpe^Dd3bT,SÜ\ErdV -W&u@\΀endstream +/Length 5900 +/Filter /FlateDecode +>> +stream +xW\Sۺ) @BEz( KGzDA(" +D ҫHGzSRn>go9>twe9spP6p/*j +ANNEw8@!h$PPBB(iC$E$!N"ar+ʻP$Pv氅:Q8wv>  0-hG ?,#P@ȿ0O׿8S@nI " tv +90U{|!i,+Yҧe~:{u*x6f;VHGmqvd]/3Ѧ{>'w3bXW.DWe=}:F7vU^x[vs5ǧ|Vۇi[ toOgx_W\~P*ŗ야H zynj6bf`L(OSniԚv ^ӊş)LOM9|fϘL^_E9Jmb Đ^K \!thdWinJv%wHaeS il({XZ_M>I}>@g.^I36{n?3QC?PtV}R꩕f#GGioم+ +9&/_ =u[+yT ϊTl ᡙ~V.(wFXqr-F@({>sd5R@_FqbPWi4C킂/S_'\n\<:Yadgてd>YC :H"Q~OΡ"؊16W}'Uda~h<\&Јw%XBt]I;sFfVn+<3CY=a=S}dI_{8!^ږh0MeZ0 VdդFzFD4uF$_bݽɏo2W~-\cѕ#&8=wJ[TE\LrNK&X$Hb8cZ'/h&̫H\j@T78ΐph=]F,ڙ$NɴG#Ѫ&k[`ZQ? +Qr[ZO8W=WR A=pTWGk`?,e>j_^/H' `ki񕼷fbj8߳%|Q4_X,!u0Ͼj~[bq`Lr(BnuJ#C! r1Տ)\Ab;A?G&0:ruކx2B" !?E7hʯ$?ߋ;w;оodTQ uh7֛F)lAJvmߚHmO }{+M¾%bA*b,r +b[Rm +}Wg*$Q%(.Rz'9:@.9)G;{IDNFIb7$TQح5]8!GƖ۹_Jo*եRv^ԿS)A0KQ#k斑?R=t3osoYį X=)ÅH2)kCɓdJyk`Ԙ{#PSI!UHYm,ֺ!yyIt5ەM!Q9f4FuҘѪ/zk!#>"MՐI$!Nt0U/oQ+M2_])eJp|̫߯>µNS|4]"ҤxL6}Rnʰ7Y1j79W?M҉ zd +Ed+sB!OTHb:مwOgw]@P5EL771A N^Lox<~H {#Xe\ARisQT0&7].6$a9b{O-s0M364h N'O%k~^^qS(]d 3DfG+k@QU1DsqH\MEoClT0ˑRo|@>qx{rc|-/_.P{y1IY@]ٸoɔ߉ڮGm@kVcQͻT5]%{ +d r^f7NѦR&7IP.JWvEMt1D&;j^3$4/QTjRyH202 0`XT߫uҩgQl&h+t%':nEG:XG#Qws{2H ƊE0u/b('z!S,3TYě/)V>wOsO2hzٛNOdgŷ)_'&K_e!Qu kŪۍ/@7I~B Ec{Ff +nh6UGث~ˈg@legģ2x<[׺+ +fߎ߳=5(Im,VWeEUE,\gQPh-pſs \mװe(Os8D>t%P4Í {|yj#L[%_=}xS `r3Rf <4gH3tZ+`"o {ڙnr_֘^zMɮ+{c>I::Epf3J`S߮|c j2l,f=,瘝 lȱGNM,:_%3]~18Iڈr +sj$R/ J6pp/.$2OWCXj@'ﾱ+$giN]sr)=xWA^;WD +>._!X#dt縈 N~E2S ,moBq%tyK7EneM=:5(XUmyX8iCMSOrt7uW y9Ѹ^bĕqt)wjtif 'D1Pc؝\>{S +(㋵r:yec͌}BkXPUJ9NҶ3H]tv6C?b.H;fh8P{q_D3 +fB[X*8cſ5:?^/<ħ!j43E;PZ #]'$Ձ}f'@ue%>3~Av E1g3)h[^|`~> |ҧz}kU,,@4vZ[ܱ%h;%U$g"pQf`FJm+V=i@+M:|-sGFt~jgO?_1dhGhZ~[ 1{%+3C1ldi檟˙M[@K]jݜgof%|ܘy]\^>w$WJH{1ǽ} d?FաȲ>ǥOnUqhcL۬JgYߤ=gD\%[VSkM.OyZsm~a!.Ő{t'A#93R(߷>T˃((gbSěvxS_H!Nfθ'&uC(endstream endobj 3992 0 obj << /Type /Font @@ -31515,14 +31273,14 @@ endobj /FirstChar 12 /LastChar 123 /Widths 6705 0 R -/BaseFont /YTUKRU+CMSSI10 +/BaseFont /GEHPXX+CMSSI10 /FontDescriptor 3990 0 R >> endobj 3990 0 obj << /Ascent 694 /CapHeight 694 /Descent -194 -/FontName /YTUKRU+CMSSI10 +/FontName /GEHPXX+CMSSI10 /ItalicAngle -12 /StemV 80 /XHeight 444 @@ -31542,7 +31300,7 @@ endobj /Filter /FlateDecode >> stream -xUX\˶=5XC7 Hpw@4;-8ދ}}m^5fVP`9]ؘJl6fVT** b`/ tbv8??'*@beaC̀%%:`fvd_ P;!n`3*de0[X٣67w+ ruϐ B%PE'6GeQvCMoHҮ@Jkhge ;GW0C;U/9%0G\Vfb`BVV`%h +tR`QWSRg5 +xUX\˶=5XC7 Hpw@4;-8ދ}}m^5fVP`9]ؘJl6fVT** b`/ tbv8??'*@beaC̀%%:`fvd_ P;!n`3*de0[X٣67w+ ruϐ B%PE'6GeQvCMoHҮ@Jkhge ;GW0C;U/9%0G\Vfb`BVV`%h +tR`QPc5 wt{1CbxM7sYC7=QgJ\l+{0;@/@`A=g1+/dr@ 9'? s@sB'W0_7`k B|`]3Ⴔ+&ɧ$yF )#QWʪ?ٴ$JcG1-O6H:9'}yU>+9h|3SD!`!~٥4uLa랺iB Pd{ژ7ߘF[uQ80d^u|{GLd8= P5ըbuhPu`~XYD 2T't+ﲅ0W$FbNUx)@{S'6F܍׬?6KȄY{TWIor>$&Y!=j_D!1ڏpt$$g>=qR9[X+Q ']󝉭Z':ff˱BBsIZWЧBnRՍǐ$rZy7mE#0*\.iF##i~]ĎԜ1'jW}d }7}·՝7Veo6%Z̺?pƛ1eOȏ/hk`gh򰒊wqVp{X6g{1 J\&kI<9(fNVxbˀNJ?<>FvmBE ٟ5 rx&&#:",\MOk"fhϒʚ'm}YыZ\ܠ$!ޤͪPxDC[)r9Q,Z`-,:LΉ?)I~H0Q*^?.΅hP?C[<ǖi*e]`9Sz,[\̳\xK>`["1~ ȰGu30[#M!|(6ЙE4ַ->5 OLWoҰ'aiZq>gE~giGg|\r""k}"Ш<o 3u/4?kbF_6I}{`hMnܗR=zCRqQ#%IY։9`Kj-4t"RJZf-we9{XxύK8Mڅs(Z}r.Y_[fcZ0E:Hمort}0^{ }DЪ~.&gdN$3`hI ۫P1QR®Vv%#iw?;1#a/.XdUCj!m$cgdw8Y'+zvE 8ү`ؗjɥ`^G7r,_v^"^E"FIxP *2J el~L_3md cx3_TtP@PP|iOU4qY!"RKDa˥d7K:&Ci(U&^5MPaDͧS&*ԉ II=m&[ i!bl/wn& AZZrUOX9R&$w] mQI~$j?Na8kn"*r٠d - m!Oh_J7,BT{a=k^/KzȲS:n9+97(e7av-Ql1.ŋD+K|<̇?ep+V؞Ǥ0ܼ2s -xF/_(hSI{DQO瘐1QW1 PeXOD"nϸV!-& 5aB/f5[v#gGoeࢇb$Wh$wo/9t~/E]7(QhIQ58vEpoXW@S/[s}=iIFQK΀ [ l@b?W4dendstream + m!Oh_J7,BT{a=k^/KzȲS:n9+97(e7av-Ql1.ŋD+K|<̇?ep+V؞Ǥ0ܼ2s -xF/_(hSI{DQO瘐1QW1 PeXOD"nϸV!-& 5aB/f5[v#gGoeࢇb$Wh$wo/9t~/E]7(QhIQ58vEpoXW@S/[s}=iIFQK΀ [ l@b?y4uendstream endobj 3969 0 obj << /Type /Font @@ -31591,14 +31349,14 @@ endobj /FirstChar 11 /LastChar 123 /Widths 6706 0 R -/BaseFont /RLWAMR+CMSS10 +/BaseFont /KISPVY+CMSS10 /FontDescriptor 3967 0 R >> endobj 3967 0 obj << /Ascent 694 /CapHeight 694 /Descent -194 -/FontName /RLWAMR+CMSS10 +/FontName /KISPVY+CMSS10 /ItalicAngle 0 /StemV 78 /XHeight 444 @@ -31618,48 +31376,45 @@ endobj /Length1 1393 /Length2 8137 /Length3 532 -/Length 8965 -/Filter /FlateDecode ->> -stream -xeX)ZZ R,R @ܽK)Rܽ{owg?yϜΙPBP['VAP `p ' $ ,;8|ܼh4 @d; nv0@N`& k: -=v;MY88&Nc-Jr(_aSgaRz$h -v!hlPX-0/.lm {KXX5;w6_vJ`S gsY[ۚY -Y8J[MU,L#8%`GMA3gTdanuN9~3CnD߿>W5)[rpnx [SSfc:`]@h)' uv;?j ;Gxyl⿉&l+lR!>vo&.o&X`aT~lcj VA7*h&؎~vm@ V78aM@}a>f LuIX0 ?aai@@Ӱa LY90+?f9aVn ߟf|pl3ݣGz:R3d#5%g $cneRtJUa9:C= -8e6,^vP$sz҅b;#;c!_^#.Ή}$37 7Il혚QWn*<*aLz+8oei 5Yz 3J!zU?oٿL -a?Ȓdj}jڶ9:}e\YUhC]Bp$5ͩYPv \mł%jBSY0-*/# Z>kB8lRk -Ŭ{QdzUDc%hiZXiɓKG0eD-[ -YwҹR |3l}Sk|wT1c |mØ#0y3j$N2Qm[,3ޜ74EĶ_f$o_>:Wɑ1nd;x= -?b; FҒe t,u"g":]'rnEWNi[~>5ﾕ d]_~^VE}\נEMj^KB#pGP_B/c#q5f|:꽧3ӴD)(I" +2QI/x˂3ŏ,/5B5u++(u -2d>\KxaRJ#,62gcR|2> xDnf.h6[Z&QvGfE'h\("yvЛr3y ՓD'Ys|H!p5Ov,v E:qO͎1Ua"xgXF|eJnKHpGƼ EŖq}b )YˇdJGH7T3MnyLRApXҏOnOlx)At"oxq>Drh5 IяfO45 n2>mނڿ|(+#Xj˾Ѻe{QHE/Ay 9.[xOo2_8b&M;nʉ:}BP0?D(uxh:fykߘdCAj&lYG-׽--mq m.ZHqae׃{¬ ,eHڻpUM-biXʟd l E/C;j^,Ѷmd"1院RJE[kܿkЙ>yj/:*S'#a]JK^"t-wmr@B+/Pe8.qK7}ōv*B<ڶU47iDtZTNk* SF8;eXW־f+B`pa7C+KIU)t;}*0x;+6+ٵKQ|(i{hX@[9,௶ݡt:D:.B -_F2kLza5UXvHL|ܭ8CRJ8!fqbX m낁as SWDNKtȲ̴~hcM?d1P4ܵQWE2 4q.K4pERm(Qzs0{3 x(VZ q,Mr𠍆 M!Wԯ&t -0>oW -qp|| w܀"s+·pG֢2LVG\D[5m'gb5%l//Zz.a2.urȗ N-k)я3 x~GJ"`L=d)1)BTxHG|Y{6aN_pfob8&%#wM?@XQ9IA=N_l$MhR@Y8Lnݬ4E܋7"L۫xh o5OS -$227<a {&?rW*zUPr|Zp.\Jaidx\lh}az8 \n+[ljfIW.ک'`ݥ q1j*{X_`C}Y?T޵q^+QG͟+t7ihd1"6%!,5i&&IJε~}y=F$N| $B34Wh x޼ :2PR|CjsJ"#=TH+og?wbF203iOR4Jд)x-x暎!%>zqv)+IVWu=> ̶P?Ը"k77"b K(OMݹypϴ)u/$SЍQJS w.cHfslz(؝aju\;D)-S&9N"~լzz4+x@cTޫ휅BU@DuJ刊LX}yw/x/ %kCkz_HBQN&"aIrN_0=ZZ3P /!V$Y…XFjL!g(K[G% -gZxeFuSXAyۆ 2ed`xS%F}q0cEY]-1 &a9Ѻtkrɨe)QUU-{:QKzZŬ];R'puws 7@B콓|LISe1m*]zSg1Mb\uDz-Ѥ(jFXBM\X W e X3CQ;*:>OEYq3bqzG6DH٭.)5[ #Nc+: bQI-*!xum̔Aku(|%Ҡ ./ߪ>enuž -Ah{!8X'jUUq*_KR}cNE'pVE|>'=.(w ~YE`ZطQ{nN]W1pMIo߉n;`zg/V/VkeS/,U_*8 WJ5%\sx0#V|x꤈ί '$zE G(}a]m?f -SIg_ڨʣrg!3sPa> ~d'US<98=bkF]P8\K뒦!rL[^fK/^~U2؃*Y*rRψU" )rrd#AgȘtk$2]>Rxzh11sD)䬡,O,%kӉ1; d= OŭPJe mZD Z"Bw*n%Z//,*rEM*U4֧8n,𽯷霡|ˡ$ȫpMy^|6kF<\aOyߒT&;p -4wYh)]?Iʠk7Ѫb$~d3&;k#%G$}VY#Ih?Mbrue}dV8l0P/ڻ-> ExL^ϴQ4 D+Nq+#6tinRej3^:Egv}]HT,s.x+b6E3t;.:35y8 _{^)N>9OSsWGPm䒇IʑJÄP(ζ;Df~XZza y䬬 -wZEl*87,[+ v(Nݲ~O,`b 98Am@Vh/dendstream +/Length 8964 +/Filter /FlateDecode +>> +stream +xeX)ZZxZ,]JqݵýݟO3gsf&4j,&P#4ƑCT9h44@{0j# r 88N~ 7  u775sN[͍A6%1 +56;ĭp`V4#ljn  +WC`{&)@m&`{(fCvz{KY[#5w_vJ`s'sYۘZ +;HM8%`GMNR[CFgϨ2Q?sfX]Y9`}jR6PsS'/dorC<86&`WjuM@>RNdw_~1 +v/M7؀ 6W7 ؤC|6`M\^&noUPM +‡?omL7*&Xۑo-7&Xu;!  0 ?fa4#잱0 Ӱav Li8>90+?f¬\~#'YӑzLX8y;Ӱ1sIxaD6[^b{`+mqj,`\T-;Q@Z0X*z&jƾa\L~ka^tPfAT/C-p;&CNʉ>@v7uf"Ŗmպs;R>W0 oK)&Ih[{1G2\b^E)Tl%wP\!?Gbƫ0;{H#~ +p?'+q:26 gG+5n&Ο>d'#Jl_J?,;JfMCFSAM&"fJ6-'n[RDLbhh݄^1o}F؀}WRG=r:иlmn8\sk~O]wˋ9] vM>__u{0Iݞ2!n?8!mch،_cqd hTx{Z2by`:&f%\E P\Xt0 ʳ^iʹuq3|׮涆Job-EN?5I['R%l0$#I-Wcl f>!.ΉNWԚ'4ON)z5aZxz&WIWh$hNJ4 +0{/C=TG Ccwt ʟn_'0dI v2Bez?b5n[q{-WT'o-NIu#pV"T@MQd*-QSXB|8nA{MGj\j Q.1;KEdGYT +1`:ٖ.ѵYkܐD#R/W,N,/s Ha9Z`JM4ML BA}{ȳ\wۯrn h 1-pwtcNN' 8xM>XS7!5MIbB]1tF %cQ)WZiL%$vT<38{DJr{l'E/ zN?ȬOS~{OFPYYA%S!/zd* ;b1l>z.{4@HI$/Na&&ă?2"5]);fFbCYɱͲ"FXGߔQTBͪ,d= :ʚFph'6bN\ƈ{:ovd0-.:jFC1z-*Qzt<^7&=Ex΀>gX7}E),P9h5[?E~q`M4X>d W?Bit] +ae"~|r0`~b{M /NU-1<4z^icM5[PO߾~bKirw7\u=#6|.YTGK.|˻5A1kQs flrK3qʩdSN5!LxcFaU+5=]CB7%ek4=d\JO~kajN+zkImi絘EgΫA3oY.3ߓBR߅I _ XIbcƲ| ׎Dq+"g$R/Z)쟢)D2yoL#zXrrc=Г%,}Xe>&r3J.O_VK:#Y:5i}D NkG +XTputGY{-Vgp̹fxa`U5N>?a- +gݏѵ'M]'PGl&r#3&eS7j*.ܥ n_*3BA|ƺoA_`ޥz] 鉶{k}LjF#0~d7G٧_kI]dE/}3O'+]D ƛ|_r[T1,ۤnp^]uVocy-`K~pyÉ1 i %PAuqĒf|Ǖr,40=qk_0$ /$A67T{= 㥕Vo&K <`n@S2Ͷ\\,4?k5Wpg2؊yhJT)(<`k(e4Ax-XEW|_ϥyr߉Xfc}+u73!q0PkKEɖY߁\菊.u2; ˒IQJHoS&o" δx_,ClmBjatM9|ԎN@a.(ۭoԆZI/ #YJSȽx#rHĴB Ϭmu̕/q1D4 O#Jes8 ;vag D$ _4؂ݎ4oNrqLF;R,}VU>ӠbmYrL\q=e|{&C^A& 5a1m%Mu$09us4ѷK:ntIB"8j +(_/Dx=KrwMˀ  +30:$=|G׷B4;Ŭ 4hٟAV$yOYMĞwP 1jgᐥVѿ\콭+,kK,v% aUl3ՇKL263}jR9.pބb38M7L#?!.H {ﺻݐ(cu,\&=hrGcSEt;T}FTiQ/C7)ph*gբOu)$_)ty^mg/p%:+ߟ̤MM~u7w$ѽ_2V Y8 .jd 'ui6 +c?ؽݞTM| +#7%Īv˵yY 4U) ~ i8 ő _a hU2JKW6/tca/Ofݫe8&9A ,;Zςrm.j1[?Ş%?5Z.tXPh*”PRGJrc rW47%M|%E+W7']9tnHqΆ'#P^c yέA:ƇօUl`讕kZ$}NDED%RX^dX޷K.zM(wS 59f}p6=р^iTh.:!KX`;"nƊ|HCV"5;< aF1c8:{R~C s4>5D[`%^tb8| qwdeesQXIfz,_+zr]+d9"z$_;;4QDZ}mjJt^~L[lee@}4.LBڵV

    xna}(ts׻tP 'y"UĸfPa0eHp{v'§TDHY-%Eu[ Î+Nb]~%qxuΘVvqf*@=ژEbu_I` i}oU*qt۪~aϒ g ,8e·9\i).!`ͼU]8D,[h?satq3 +d?(L +f }af-]k57&ͫR*(ٻHծ?pSPGeȄӬ{IL~{`Ke&94CDu>4s]eHON _OM2)j' Wy" \9md?ES=Du"&;ӣ'#l4b2-hO9 2CeBe0W] WtA`#hW=I."WƼ-xv쀚]4L'-RX,[wxL r +GTwR +'3'[]6/?T+&zXM6&[$ ֚Em.U@ /#_W&+IrTVm&T𓒟}Js0U'n @e.q?KQX:^Ė>Ʈo7<jEhk}) ;?IITOUL%WmGj~91n +F~fa߬1~=Z<MblZ:őd1>軣e0dlihu]EQh|~o|%!\cTq?e}VB;^B7jV^YbQłN.CnÂ]NL5&]^\Bx%SrCeD/N5%+7[D^9FbO f*]fuќyu9Bij"Fțy}+kD'.5r3 Ca\k# #rN:qD(&= CT;2>g"pC=Ãf^ᓞXR(uAzP4//r:Ksb,Wi"V![Yj--NV“y͸ o}z$ L!\"HÚ/ jwA}Y"$299w_[nL + 90سv<։H}|ɥҡY4G^•LkτMDtvŐEao;Q_2@GST8*??OD⫪Ѐ`)-G5R7MX_BSQ)ŜxTb ̵[,TŜiO煝t,iNli~v< +@,jƎ1D )PU9._b}  o97]TMFQf+t/G&۷Xثho{jl; + H hچlFT{ח#fEŚliQSo.1?#?ګC@'uAS|X>|qDǺ涰K2)D\CjLn~ԅD ͌^mP~`k<\ 3TY%{9+sJc%x,cA`[Ohb8,OE^7w.N]tmҐIm +v-wb{>+I}lA3å`r K~@Veem/8hpAxzyy2B~!˪k6E ]fޡz{Yj7UwPs>u+u2[jyzMN۲53e4`sp#e@R*M؇݇p9u.SUNx3?0]2'D ią3 +ҹ_;51vS"҅<;!KQ;Pv{#^q%k6+N*{`pdPa L%9ٷlzq̖Pwzwn3͘QD L@VU3幤`,G̀3ŶsuxԜ".vsx- +/MEs<8I~e*i?b3c!KYN$ܽis/R:wRFH&KB&%M:+vŢVkvҒ!\6沢F-%ui"ʝ2\e]vNXjK̦⭟ԍ4l"LW8w6Bp-)0m{/=yUޗTʊVY|Ah?tټeH6#?<@Ƥ[tpyO*})Wov +CkR?.!'UR +dǒP:3ONi'~naѕ [,^զ[D3ݦf)#ulw#ު#"naŇ"EHW%Jf1{nj{{vK +Q =۫ f_ߔE< `sxqb$%i=Qk1#`tNC|sZ!wfwx.YrGcBcq9HrXR{U,\+hWgta)UZ) PdGow\9q2E~fN{&(^ӹ^QʆZz3aSc۹H2xEv!A[.o)<*vӝ8FxŰufvLuflo+s_kOqRRd)Wur8ϛp]~BcC +k -C6[+aCEه8}PbEckOP +?23iͶ(|2߆,kr+7X 4-9yA ?d[3tendstream endobj 3966 0 obj << /Type /Font @@ -31668,14 +31423,14 @@ endobj /FirstChar 52 /LastChar 121 /Widths 6708 0 R -/BaseFont /KSCKLQ+CMCSC10 +/BaseFont /IDXUGX+CMCSC10 /FontDescriptor 3964 0 R >> endobj 3964 0 obj << /Ascent 514 /CapHeight 683 /Descent 0 -/FontName /KSCKLQ+CMCSC10 +/FontName /IDXUGX+CMCSC10 /ItalicAngle 0 /StemV 72 /XHeight 431 @@ -31701,7 +31456,7 @@ endobj stream xڬeX\ͶpC x-8];k܂kp]wsv>?z̪9jV(Hl b6 aYeIf&3PZD `b @?@_n6vnfv JIA+5@VhZPdchtpeZZ=@hs1 03 @3k$m6r!'=H -@/MjH`4F`e\--Y_,]w kcj9Z%@?q3{13)X8M@:ͬ]m?T$;3̠dֆ6Ff&6v+ 06. cFk_xm9W3+?B?ZRO4廣#F[!'Q +@/MjH`4F`e\--Y_,]w kcj9Z%@?q3{13)X8M@,ͬ]m?T$;3̠dֆ6Ff&6v+ 06. cFk_xm9W3+?B?ZRO4廣#F[!'Q Q]?`e-oeMş HJO hjk b!VH hg'r@@vfS[G? ]{йAf%Hﴜv@b@+tAܿ#):&'*CX8@CT?CK!!!'E+!Pv?ʮ@U(eWC]ʮ@07:Ǖ^jPdsw@ (' /_JhvnW`/9Y )˿d90_ AV?7/Y +dB_rɁ\B_r yF V/$dN zY@]bϙ*fMR(8Y85t52eA9@ h8gc`TT%;Q MmO\0Xpƃ1c0 $BD77+AK<.c42fwWb \@GƢNQ=7<օFJ_$ޱm=_"]wj9d=U4?ze=ӈl7A'E&z=t"nk?r۽:e) 9Db9jA%^YJ04' QP794&G 0l`r3ΐLi cm\1TnfN{0$ӧQ(ƒ!F*5,O3~3ĺ&~Y oLZطu#Ұg0 B*Pb?z8គT9rxqT+.3$"uqN ɧrN}Lw;sDL^" m3BXU&ҕ}| 7nx6&fEEpt~8q6!k^t9Dc`L[,Y@aQQ/UQ&h1Rɘl6YBY `G1Ąi P>B֢9$a[ZzJ.ۙ2cL8._mtGp^^'F#o#nvN@VilZ'A[v!ւZ;Ά:EIy|e9u*2Ω+<{VG|OZdNp!{P;>Smφoj\m{X]|׵I& &t5SKv`'3# sƳiCb{mPz^],ǝxqET_<>jze8Mj 929g~YUMEЙKr)Q~˗B|?H^J.:tǠvע~7<ٷ 3u:]fޜzKDF3m}n?(#;-84y$Fq7^#2 vf$&E|w0q??fP6A,5`b`UO@^2y$0Z! @Z6%lT3Y8ݯ ]srcs$j:zCzs G4c*Ɗr^E&O,~G6 $1 [kK$] K6?R_ cC VzgNSſz&l~me.G߳=Fi]dUIhy|hhٟh=Ё$c{ޮN7$]ryRzFreH,)6d9i{sȚ̲@Zύq(I?P)ER{ET@tZ~8yRZuAp-317HWVr[QGh{jg$o1iqi0m3e#C,XEt^_8% dwL<!xw8b[߱I+a{£r!1G [t84"ΘmIxŸ@ܶ9PJr,R!@YQl'^cgV4^1R1h; zk~IifdaڪR>BޓRP뉼67 X_;No $TЌ k95#QADԗ(hڠxv1 -x Bek\JwP9m_'V݁FyN&R;p{\?r94֗Ґ|3  "bɪ32%s`s7AUendstream +x Bek\JwP9m_'V݁FyN&R;p{\?r94֗Ґ|3  "bɪ32%s`s7endstream endobj 3242 0 obj << /Type /Font @@ -31773,14 +31528,14 @@ endobj /FirstChar 11 /LastChar 123 /Widths 6710 0 R -/BaseFont /CETICX+CMTI10 +/BaseFont /FXDGPM+CMTI10 /FontDescriptor 3240 0 R >> endobj 3240 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /CETICX+CMTI10 +/FontName /FXDGPM+CMTI10 /ItalicAngle -14 /StemV 68 /XHeight 431 @@ -31800,39 +31555,45 @@ endobj /Filter /FlateDecode >> stream -xU\ڲq&hCh{pw;C஁0ǙMKj[j5=)X!RP`pcK9A.{4,HZ8ay^AnvANX@ bix#W@1AJ +l3-@ vdHZ P;ls l br$+l)73 $#fj 0[`aZ`ssYW[[e_ݥAl=P7;AT/sJ`sf]@3 -*0Y6WY,@`5o@y }yտ E `9#'V/ٛC@=`c k/ KmmANqsfvvh`>``7jomAV~ d3;ေ;.X -]gX0`x5 wf -^"g-|&X3$L`Ǒ}&a v;3 L0ug+?L]SW}&34 2gk=L]`:S}&޿6r².ϗ$)i `儍 '_{ -M;;Q3W''0?0+o56X7 -NZAp23EzihWHcS&?RrP4Y',3 ?MȘzbv`h0߃k@|H{օ\W@zT>?xol}3͜v;(]1k-nPξ~xaՋ? =+mrgE=,6082mt[g閑fF/RslXZYWK-j${RPu^2|| 9m#ۇCXKGiSs"Iݚfm pNgaSR%ޖЭ$6Ψw~kQpXϿ 5G$ha| !aa;?[P?He;J~AwUzinr*^vVRU`[.PS L) -Ooݴk=S c]]6C*>;T,,(Lo59})gG<$.:Ȭ>(I5zoF)@5Bkn>6^X:J;/qAp.|kӎpp{l_{z'ܮ7DO|䚪&஼Lߧd^ɹȯ7,pjJ*4  nBx@/!V{CivҺ}9V!79*_2ڳ f/a[!|}Ћ)^v'*md) -JǴ"d+j0If"w 7L67YArxYp8Uh,\J? }/f1mhaFjt@_[Yce2?dϽ[&yYoOE(^p}Y)ڻbIbIn~ p uĩn"b:Lڌ<y˳~+r.']t䆊~F(xóV|}#'tR@Qg#nJ_#V0jkMK%]6!5*QNk'wvC 0*|44H:-t^ -u%9z6q^˴˯.OX$16L oL|!8uc.T+{ MOhOe=KB6,%Fӏ1ACCGxQݥXZn8Y#N?L˒i{J@XDT>Amxye?"2\$' ԰e(!zkQ` :=uV́*Zs~A(Ã1 މzPs ->d^D WS b7w:>*] "ٶm @q[PoI"(7!.h"`>ͼ>PTRYL+j.HnӛA[kM#*%Yod8T~RX Im*KW0FYr ADbVMDQ9;n3lG/E:Ԗ<| MnTKoZkY>L5 -#`)ТK -\hg}hI׍.$H1#'uJX^y d{ViQѣz6UҸ-?R|.JB<0uP QQ75IZp1JPgN,uftqV8Bx䁄n٪z MKy"*NmQ[2qn9+N>,SSQ|$RY82~]_(EkwMݗ-ACnMfV.p/93f`"5u@O„mH&VwpGhɸbZ“JBی<.kf&>QXG,+,4Zux`\W&ȏ^N}EM ƾn pz}!QWH{6gW[wNjF3w Kt*vaUW-Vp^o+)O;e,Jw9bNޓ"nxϏ=Tc1%; Qv|U$pK m:κYe?uRD5iO9bl&k=z$ٓPIv<7nϼMmt+hqLۤuԲJ"J{hGՙDu4+-4aիOXT7:Yߢ]ƕZP -*4p~x`)L'zS(J$cZ={U9۽ ]`Y7! f#6Y"R0v 3+dp xIas\]3;<84`bCF)xRP5] `R<%6}>H`er=ˡ"E.hZ$ޗP M08| -˙%E)gaGPOIY3%aIy$\RX>J'(?UIoFc7Ҹ(;EBva;d=7*~Km͔fU z*a3U(&B_ڂTH^'w Iv->9m)/?&XM"-Im?z8Mܲ^ ^-KU!؛!g* dnҟ0?ǟY3Qx?ldy*>Z[Vƾy!lEP+~I7q>z~߫1Pƺs6(HҜci^4&T%[zoAGE7DkEչuk>~.C0^jz뺠-o.l>Z,8ש2D^52,[6R$v6Џ.K}6xͱHv -1l -t8&r ճI 6kW1G]&"jQ(Pm;)v9_We!.iՕCJQuX$E LO|_\I~$r {DZݹ F -B. -v-ih}r#27gG+,#OZ&>qQsdv*Mp0kH}Y_^>5aNL&z+fFhQa Uu4%30*}!ȉƒ1G{#%21^'bZ-LC޿56|tCTy5}3{Z\ssÏإ -/:^R_pϻ\Y"v$_D7~TKiVR!-( k[A%:w5qB}ZHP0Y1z_WfQ.#X^~>fRr K fv:]["A9{9ϓ^4F@,\M]t hZ -eºByCb2m]M&>בhOɑqܻnWw"IN}bٕqn}sTPqya-ƂbrolA0T Q )O{}] Ox6?*vH7 ? _í`X)0c6C<==`Cp˔1n5&A<~,j/% -Tk1S|Oxց3WTW%y3XA&t6r`/қ ڊ( %lc1,CG,TQWk\DZ % X}DkCpV+[|)x]F CjZ>wܚ^Ei\L]'1h:wxCԧ]M,Z'6p'yiMa5R0~?e7B:2R_!HT-j-Ar(㆟CPZ|MJNLq >2D-[OD&2ΨC͗0:}o4b΃ӱf)=i_mUq%p)l^('VMVϛ|bcD;[*{0Ma M9;B/E㾬*xܴfOT6Eu0uT܃xd 6L^.k)Rio:ȢXv!"Qlt~gZդ>U/.Ng_N{c ܮ q-@t^6w-<&<47ttYƖUsWdWRKDfѯ0RU|ECC?I¯Hu9t:!BuAp=#DxrSu0)kbvKxrKvjPV=8{_"ڿQRM- lm)v8| ,; -K JṫKb.s袾ھ[)'pi̦L)Vnxuc8]Ffq2'q2TK(jSϤ}G|SO3</֝i^ )1AVlP m_#nzRW!?]WӛBB'1*-?^l1X/P|7*ܵ7,rl_N՞$Xn -kbwLrg|SvGMn*3.8HN [E'nkՕצ '/Vԧצir -FYY x_D3Lo D|Ŋ3>H_)90h`ƐXԪMc0W|7~ݢMT)1dFk:'Zk{Pxvpf"'1~/ --̙-.lZ-#n9ЕO^TvAz!|}*S ]CB37bBhVHӘl5~ZmKwGA[`9}.it(eAm-1yg.j#+1(MR{26HӨ7ԎpRAS9/ t!MteRlzW,=8lIw27 0  -1dtπ&Gt=1yBQJYI5,#Bcaf|fq":-6N#}E8 V3sEDӲϸ}< a,)δlRW$wv)w>'m-覫IR:p`gc}O-z}4q*yA)?kW`MⲴxdլ%L "¡L_- -~DɅǸ~t;9֍_mPM)Js1; U]i~2 3{7y (Vmfa u("V= lCeh[`=G(7MtO7*J5RlG`.o  a -`u 6!# -S}"$'BsrXDh0Mj۔tt((pq\ ʴدu>噲s7( uoc|槤h -}9)Az>ee173}i\ 4$m&Gc.pI{-`.DD*sZWo .6kclĒ.S4Ob`rE6>k5g)͈Od,Ybi[\Dzi^cbIrc/bCC(}sUц#Hir/2y`b6p3Y{!OIErGXNSu6;E٣j gPBU9/99^teJQKekѫ58Z:>ywzgkO}Ver{>.r_I׶W?gCZ79oϜCs齓H8=RưmPvWXFQH_spIYݛk9/ߏ"\oڌ6okĜ\''d*Mh5qyg=W({sʙ=vuğ̂Hٙ;@c +?&]rkPIOo[~nDM{ N% +ɮi[nKSvc~L 7ܵlO L7Pfٔ,d1|ZDJz`c %(C$x/A4k8`{䊣%js<Fw?'60\@N6 _'endstream +xU\ڲq&hCh{pw;C஁0ǙMKj[j5=)X!RP`pcK9A.{4,HZ8ay^AnvANX@ bix#W@1AJ +l3-@ vdHZ P;ls l br$+l)73 $#fj 0[`aZ`ssYW[[e_ݥAl=P7;AT/sJ`sf]@3 -*0Y6WY,@`5o@շ:*Zu'UA\7s<3GN;;;_F!&57@ac 99<1`#75{0@6 l __ ڂ@ + }9n9:ۂ#9 Cfv9c+'?*8@ {gw<\0ΰfafn +k _*#E[ LbgI`7#L= o v +g+<L]`JSW~&ʿL0=gi<eSz&3u L0ul< ;e]?&/IRÛ N.X}B-(,/ (vv>fNN``Wlk0l0go&l9L'dFgѮt!U! M09~5/H +hnNYg[1?Ca0.;bwjˡdjͭ Fq(|~⃍f9v +Qnb2XZ}BKÌH{V,c D*!Φ<3zXlapdP-&1Π-#'/̌"J_ܥ~9үD[3HN|eFs0QG$7zM n((ӦDX5̀@^SƝI7nq/K*-[IB1?;RmBQ:&0֢LE?*]=s=khl."IlVCL~wXt~ vT@B'U|:>k),\]ɖSܕreSiEGV64,a=En$mnzp4X^#ōc=*Ì8C>;?տd~Ȟ{=M[(ߞ"P,,&J_S[wŒ ťӓO؛ASaDTk qyYp֐PPPܣ#$K_# 8%N A~Aʓ>="MsjCDOGP" +{l  %. +Ygxv>hr[lb=ow-i@hG]2Y?~#[LQbu8@ +V[xD6,F< 2?FZ4 U_z|uygTW\N =QKNʛ`.>UigitZnE{#@CKrtvm⼴Ǘiw_] I7cl14 t!@BqB]V"О0zؗlY@-{Kӷ]Gc:IT KLJKpFHG?X%sHTs'2!˩}-G-~Dd6An>m;~)s/tP}xU)Dm㠷ԡ2ޓDQQoC\&CUќ%E9|y}ʡ50V]P/ˑ[3+7QNF& SU8Kpc%rɓ*UЗi3.{aލ-Ĭ2ěsv03f|M^0nu-y=#Tp+)J *T -6#;(S1}j7#!=$FS +EZD0Ѱ6]R}?IDבb&FNF7[4ҭ Ң@Gmq[~ĥm\xka) +^ojc(xGbէϜ+XdcpD)! ݲUIBC D@U*/ڢd2I/%>rj WTzo/}P;YՙH:^]p.eQ '"/7[D[]_rf4Ex k+MTEQu 4 S MX \eux:1/qŴxI^6F`?E+ZOhQ~Dn$wqco{Qv.Z:wxzn8cU)Qͬ$Tô{gQ8L俴=NG$13Z|sR^-~L<#E[tf6~jqe2O?[ +Q&<B7;BT?a?:g~dU|Ƶ8}4CًVTo|; ?zF!׿Wcu4mP9<߽.iL4۩J3-߂nv9W-P׎s{}@]Xaý`VYuA[&8\'}"Y~;a-< qS߉eTj0eX5lI*l[e]ٳ!l2c7b03pfM+/gk?z@lʯ@c1xM (#4=CZ5U jEf弲X4["ޠw +w`~vy@lwG{ mp A^3(`VjѼ3g:@b@R'elz 'Rw]4΂D.=29!̲5>WƓS7DnCυo&@cJLǻOO_ \S +p~ǥmr)J2Ǻߎ^槤.{~F= qTq]5jgxa6י{']j[>1O +VWuxQ`֦eM_ayz{婲~e㗱G +KP/˧uX_sҊXQLsi8s84q_2ɷ "kCT% df|[t#jTjR7^\'`n' 8y\㐅xEH~)y {h\nٯ2bF?)c}=HCcbrsD`a"ě"%߀$Q_+=Q*뛐_3YQdz|}P7%L:k-OEأ$Q> 60vR6rp B]+MI1>nJH6+k3@`c?s|a7\(2[b( &` -tGŧd +k;=(nx?WXSG.YM|`)f2e0Ua֐'|kœ MV̌ТhK8!gʏa7UC%cP00("F,EJ+0eb](OĴZ)+jpmb,#`kfU#ա+T W7ɱKw;^puҿD pwt?DHпn(+55Xv9>+6BZ!Qֶ@Ku0j<šabN4ׯ鿮̢\G:(}9bA5$Q+)3uVu!1E^Cr$}r^}'ٽhZ3Y. ]EG&6д˄u5;d̝~ $EMRO} +χ#ўI#iw;~iI=<ܮ%XGE*j7=je :+-RHsȡZ,2^W`SAꁣ\A+S^al&l~xUj2$ oh~@[R`B"mLw3yzzB=)cgґ/jz_#L>xX^K1Jg%ϝpͩb 9gZ5>/iJ +M5"ha׀3Vh>RN@z}5ӸNɏct~O\MX +F9OmN +ҚtTk9aho ?n+~!'nJ1;tlud;L˵6ӯB|l[ [ +P +I ?>&蕜X |d#V[8*Mfe(ҝQ퇚/aY%bu*U#ߖhŜ+cOjSD{tJRټPN 7}u6ƈ vU`A(w382sv^}YUp9i!;m#̞lda머dl>˻ $\8R>.78uEngC:D2+( /44II}_\KhE D65]ⲯ[с $%l:[9xM6ypAi^-n]$dz- %Xɢ'hvͪ_a69kVwݫ(~R_52s&8Qu06Cp•8{F2v)(UaTSx++"5 ܡz﫭{:q"DҷoU%,.Z8 Rq,|X׵w5֕ZQxت~q¤ +p܎"s&ykp@Z3Yf}ѹ w%Jy7;WCXvZۨbq?/xXFè>}\h-E}}RN@s'M_S|x +dž5p>(7:dN6d $|Qxآ4=HtW42 sB-wkѩ,KIP*2^WL.FOC|8|IZGq7;fy*_;!ҼW?RNc`=ƒ4b٠-z 6G۾JG.GodYC~&g7_7NbTb^.#5/ѡ nxƘTe15̀ z*׼!Ve_/wjǾ٘Nv+G4G84,E/~ӯ'u6yTeMatU_Js}>TGܢ rƯ+(E/<ѕB%J U>fn6&Y Y֑1jx!FTTt.#0~s\(hQ˨ |[6dc ^1]$pGzWb/nQ4ڥelQMo>'ंϧ r L_Y($C8iʤ.Yzp0ْVdnNacȾ M{Bc򄢔!y*SSܳצ3؎ fnVt\#{KVD#*/rT .d=#"~UDE:5ѮлX0vD<]íDGZo%ΞBy=Ozأ6~ c\ļU)_35;"˸%Byb{< Ң!Mf7=2ul& +eZ.7%@SZ +IRamj=BrK4-{JQMt)lӾuW8Wԝ}_Hu›nWSᛱBG1==nZ d9EVDNhL<osHvZ~*rmD%c 0IwMuG]9m#04~-J[ƢFï*Cm$G^"^.CWvr ^qPӉI8J/I!gpX{3:`}\͓j}m)YF2qǂ̲~:E +*!9uZ?pqmoaѝTGpAX( +g抈4e'qx? YRi٤InﾫzS|NZMWbu "1v?N[B3hU>dc ?!R~$L3eitɪY][KE9CZ qJwrg۠S`+>+cJw2 ~?21egn P.F꼙QE{@#ِc/Ѷ,[{.PnbnTUjT؎=\ަLlCFGU}+*D.&HZ/NQbhyp`lZ1 +ն)o"%,oPP㢹?XZi_ y|3<3ejoPߒ:OIPgs6;uuSȇH|ʞbn 6; g!*"iNIL3Y~]W"#u[6P!]$2U涵3$޼;]Zm'%]xI5h +\䈋l>}$. nŒ.CH_ĆP"ZM 3Gl- _d'x`&7Xq@k1rA':n"ZW~mH(.t2dzKo͡a6j BR̗s)Gժ@s89ScJf$[p$ 4Ge ĊFk;kcPwޞD> D2|khw ;@QԴ u7Ti-`Zm=ʢ!S8KW]o5yk)!_FHfo_B>45!#3qi?[ۘXo=DiM1łb HlV3Ȧ~0zh`'< k#+h|4Ei>1ߴҶw͕j *>t6|lf!QCrK厪ɱjAmv`]#GΠʗr^rrT$ʔ82עWkpu}3O-:Jמ|||\$ T儿mφ$Z /nrޞ9{'{9q;{'ƍaFX:cU#5<qcj/(B67 sE_E޴l0d׈9m+LOOȘUЊk(?zQ&@o4Ͳ)Y`ߛcɏưJPz= +kI%_ph:pFGK4x>2~0Ol`f 9ہl0#endstream endobj 3112 0 obj << /Type /Font @@ -31841,14 +31602,14 @@ endobj /FirstChar 36 /LastChar 116 /Widths 6711 0 R -/BaseFont /WISZIO+CMSL10 +/BaseFont /PHNWOU+CMSL10 /FontDescriptor 3110 0 R >> endobj 3110 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /WISZIO+CMSL10 +/FontName /PHNWOU+CMSL10 /ItalicAngle -9 /StemV 79 /XHeight 431 @@ -31864,17 +31625,19 @@ endobj /Length1 793 /Length2 1151 /Length3 532 -/Length 1729 +/Length 1728 /Filter /FlateDecode >> stream -xRiTS2j=,i !D E(rKr/^n ),bKFQQ**u@%VHX>R*Nuu|[?g;{;.ga|c$ bC" I!.\. XDD -=*<W {MV-9I!P2FT BEH5vFX!D:i`TI H28 -0K}JG4JpH4#*' !ŃtMB;Y~ʩZTckSu$B#6'C`T - cl88%jRhҐ)J(tpQaa|T2\bd!?S1gLDzesES´fL( x|O F A&P FS9l '+r&p6\ ii[8ɓG7i>,j]|n_QH%OJA 95TmbJ9 zDI3ĕ[?wz{M53mNý׉Ɵ#~fzܮd$OLrζ{b|Cp|emhg^<gw[׭ *#3kn|$'eSGkuPvf^$wN<ƫps96[tܶ5 - dV7>/pzU :S*\%^y=,>q167~=eDK#GpP,W-u-Z_b`MxBzCe^܇\/L. -WH_H6O~Yc2#tfh\c:oL{%z a%GRxכt6چ U3LMAAUKf=]|zϵF.n},"σ/~.45\c=eA.^YM2tz՞48o>8"f_КZc᜽DŽ sOM?ʈ"PrfcǤ]Q$6w#鼳{'=PuMZhzȦg@HO|^fhO^g3l9w^Rz݅\٫"2X \ubNnfg{SgԜZ=d~u$3س zRɗJOk[̸3sI3bk!]u>w&tWF -:~=!S&We2JؕXn[|%Ӆ-ap;KuWClЖhhLGXҺ1;/eD~o\*)ymU7nY'rhT6XYlI&(SNܲjXVpb:kn~;7xYuyQ}~sw]\&CE$=!Y~~:ptɓƂ3^+[{]=5 ;~Etgw{q;c8}uܩNG-3`H hw5Nl^+)oOUEr|fVt5c$- z]SҜa&n<p_R(*ڿendstream +xRiTS2j=,y11 +Q7^@R*ʲ.EEXWCVE]ҟzog|g"d mC0`p!J%6 l6F a9`h#xUZ5z6_8"G}" # +9 +rBk +0z&` ΀LbR8! +lSš$A࿃!mT&gǔL: EBVRXk0LjoȚ^y߼ؒg2/֯~WQGf޾i^~אP)%}p?_xUc+Kz["XO6&x( n]1)wu w3@8_7zoM{:+AeӁj8M JK9uJ]`™I搐%ͳn }:-Q@|GWPu>lj71P+ߡJMM#Gm]0jyϯ6R]>uL?[aDO;Q^C"︠1Ǧ"3Qr{o~Np P*kmCqrr<;{nobdvnztyoj fq~q,o_HQV{YLР*M r\ z]MR%\QSKaGA;Tui +һzJʖJΨ[͸;si90~cn(Ne {|#E*odR+yYe *tA mgfꌡi<|$Zձ{ gk@}q,ܢUT&԰~Lw>l Mcxں: BbkGTɍ7Aeԉs8,Ybͬ\Eqk/G#w_XbXÛg,+HA5n. OPa9N`9F7?endstream endobj 2898 0 obj << /Type /Font @@ -31883,14 +31646,14 @@ endobj /FirstChar 60 /LastChar 62 /Widths 6712 0 R -/BaseFont /SVNYNC+CMMI10 +/BaseFont /QDQOEA+CMMI10 /FontDescriptor 2896 0 R >> endobj 2896 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /SVNYNC+CMMI10 +/FontName /QDQOEA+CMMI10 /ItalicAngle -14 /StemV 72 /XHeight 431 @@ -31910,12 +31673,15 @@ endobj /Length1 842 /Length2 1048 /Length3 532 -/Length 1656 +/Length 1655 /Filter /FlateDecode >> stream -xRkXgu*5*G1$3Rp1r ĔZvH&a dI-T*  DxDĥrYƻ\e(]s>3yw3}Y"C tٰ'`lb (Bb'=<`U 'i, jLO 9xP5&EpҐ"J &J[s'4 ՠdTƦ0aRġ - q q9 L5)2 (2W 8!uJ9_Z,U*C՜|J?#*L TIZU`Bt\0*ô]!(17P ̆6ӡ2FJQjyePD|S`8K'| TS)1SD}{e~apyQ= ⁽0praIT4@Nisc։GEsq)LHQ%*wxKxa©?!D?LJuz7w >D ѢB_ h w!VFqr~_rP)PXuwv2崹aEKdyGid.رfC 9ۜN`Te/(J]N#¶=}fxóY}ǍifQٰOɦg}=V+]?qyӎ[nqW=nH+% vꐿm7L~C-Op nHY#{zݘ7B\{mxcW,GsJjIki{-'/=>h;kHPߦ5C =aI|{{I9G6U0c[w oe`mdAC|(9=LUKG}X:a{T9 RmM*˳aת4ɛaA7$Uv :ymIV;=MHsZd˻bcr¾0)O/5Ciג"ɒbC K~K==2,lH#KgǬj#6ׂg{ykVH"t]#t?qsѕ1։٢kZvvʷ9#hɺgjUҜݻ}ew\ra^f~^D ?ЋC8 %L-U>ʈٽVogs 6u\{gi\JJܫ- ]ˈ+)e g]c;I3~r:0+#ϟ`yRI.)0i}knx#7qzNc ?ύϝjm29ޚE<즢҇?ԏV% z3DBz{}u*TI#d<4 )zQ*A G5:h0 dqi9GB\N,&j%j e +lLʢz C4vA݅RN JeOg}D)/*IKjLP5. FeV+$%&JÛY&B0*a4Q\ +߼6?:0l\"]$@?kJI@ Ă "R﫯݋.ǥ ZiQP@uc6 'HIrBM+N8*Z CajD*QÛ^ N;&j&~yn;{zP`x$Jpl.A[8 Hj5{HEcxPTJi=̄S+-U{-Z" Ř,U= M#%umĎ5;o|w.xiGfWb߼psy3^8mpJ3[ Flzc57ywkㆴ Asm dnyrG[ؐOk@C6Rl{d?SPKZomyMAk7؛B +~6-jx찅 SHgSLIeE=25Y4ۺ{y,C/k& sGٌo7_`Zbmwi9ۓhokŽU^KWͦIN !yZe௓׶1ٟdC4پE+6&'ȱ 3^\3v-), 6tֹ|{ݡ[]bD 89t}&M\+[B>JcF፛fN캯}j\P\y* &1eWHs :.ziɆ-{yǾ T&B/a6D0Dӷ|W4;#fZ}zAr흥q))r'\*v!/#t>Ycrzt-|'{;Ff\ywC2,H]gvUK'u7MG.WxpkV1smkv+NHuN|n0~s "! U$T:Ovendstream endobj 2895 0 obj << /Type /Font @@ -31924,14 +31690,14 @@ endobj /FirstChar 15 /LastChar 110 /Widths 6714 0 R -/BaseFont /MHCEBZ+CMSY10 +/BaseFont /CZKQJI+CMSY10 /FontDescriptor 2893 0 R >> endobj 2893 0 obj << /Ascent 750 /CapHeight 683 /Descent -194 -/FontName /MHCEBZ+CMSY10 +/FontName /CZKQJI+CMSY10 /ItalicAngle -14 /StemV 85 /XHeight 431 @@ -31953,7 +31719,7 @@ endobj stream xUX̶kKpwwwwh݃{p' kp஻֚\Qj5$Jf&@ {Wzff3IBhj`/f 0ss$&?v6& -+Z$N oj ajl Pu0z1mm*p]@3ff+hae'i{s2MȤ hRa.fk`lnlgevn@gj˜%#jlke*loa 0WEhdjj 07u+7@FQ-OjT2wUrd0:V]&PyAM̬-,cggc/;`eo=A\A]YPf?B6ŬFPo[c?!P+V-F3[[c?!N#hW٘@@{[_QdmcpuusY5u3a0Zz9Z8eOO tvMofwj +J; ;?w+dfY_^AKB[m9:Չa32trGXY?͟ ȃ! !T?J!!)!⿉ @z*@5WC u?RC u?R7qilljt_n>WA&4A? 4C k!Ȇ___7Ț_dL Wf%h\9 W?/r !ȕ_r\ W/ AB fqgUtAl~no:Kbt69n2g ++Z$N oj ajl Pu0z1mm*p]@3ff+hae'i{s2MȤ hRa.fk`lnlgevn@gj˜%#jlke*loa 0WEhdjj 07u+7@F1 UeOjT2wUrd0:V]&PyAM̬-,cggc/;`eo=A\A]YPf?B6ŬFPo[c?!P+V-F3[[c?!N#hW٘@@{[_QdmcpuusY5u3a0Zz9Z8eOO tvMofwj +J; ;?w+dfY_^AKB[m9:Չa32trGXY?͟ ȃ! !T?J!!)!⿉ @z*@5WC u?RC u?R7qilljt_n>WA&4A? 4C k!Ȇ___7Ț_dL Wf%h\9 W?/r !ȕ_r\ W/ AB fqgUtAl~no:Kbt69n2g @S_ !iaeSд"- ]K #NZO(/.QNoFmZW^{'s73eڅ?O`WI7~ ԒȴUd%QAKw*` _@KNZ krTfh @@ -32008,7 +31774,8 @@ zu; fo=cP\IUs# ':aSmU=&0SkQ72m>KzNيNK`Y+cg9bã[ss&U~1X!k(g|oǎPY+~vG"⧡m6:Lau 5jNM`zV\ ]]5`.AcP[\G>\vT-QwCg+b8x^ﹳkc[I0k}7s"׆X) ^yq#-PK &$qo٢QdSN}1g*CFVqFu71-4R9B6#Jf\|iug?Jggf@Bp $Y[NPy5"K3d?,j1DR jSALjAjdUMIZgn[(@8DQvT*,e(O`)GKAT9pAw& Pms^׃q|J Y2:(ԧ wH1g9ЫH~$rQ+=:ߞYҢ~k{-'gLq޳ [:բ~%"a(s$uD2 ]gcR?Prdo7GiԔ|zU3ڭ'p$3~Vw@n2O?NT99C|o/٤/#%5C?>8!h/}}|$x93:Ϊ8xdQXÉ %2@Uў6s.,lˋ7x3~i,gIizh(B8"'RB=V[IծF3"`w.o* ǑʈJUvDlÆ]8v%k$! dL&<ZK0v l# -0K.KlH;\Fix1XRw44Sp*O~ĝ*LosuIIs)ܦuT^d׳6Q]ElYQ"3`oŠޟ =g&eb8Lݭ&g(/Gn 'aMV[Eh7+zZ=<,E>([9ch&o|W TWS4$䷥| bS[ =Iendstream +0K.KlH;\Fix1XRw44Sp*O~ĝ*LosuIIs)ܦuT^d׳6Q]ElYQ"3`oŠޟ =g&eb8Lݭ&g(/Gn 'aMV[Eh7+zZ=<,E>([9ch&o|W TWS4$䷥| bS[  +Kendstream endobj 2890 0 obj << /Type /Font @@ -32017,14 +31784,14 @@ endobj /FirstChar 12 /LastChar 124 /Widths 6715 0 R -/BaseFont /BCXZJZ+CMBX10 +/BaseFont /DFZSQU+CMBX10 /FontDescriptor 2888 0 R >> endobj 2888 0 obj << /Ascent 694 /CapHeight 686 /Descent -194 -/FontName /BCXZJZ+CMBX10 +/FontName /DFZSQU+CMBX10 /ItalicAngle 0 /StemV 114 /XHeight 444 @@ -32048,7 +31815,7 @@ endobj /Filter /FlateDecode >> stream -xS|ohϤm463m7llۍnضw>ڿ`^\ 92P֙ "`f`bF 'q:[ي:y,!{G @p03wPP :Z ́6> v@g5@'J@'+Є`ba 0Y"0$ekj4@RiR@&v)m@ZsqkkyCH_6agc tٙmw:&.6UX`;DWhk@#/FEM 55*Z:x4<m&2AIL 0tt4@-&@w$`k z#?3 +xS|ohϤm463m7llۍnضw>ڿ`^\ 92P֙ "`f`bF 'q:[ي:y,!{G @p03wPP :Z ́6> v@g5@'J@'+Є`ba 0Y"0$ekj4@RiR@&v)m@ZsqkkyCH_6agc tٙmw:&.6UX`;DWhk@#/F59IM)i5*Z:x4<m&2AIL 0tt4@-&@w$`k z#?3 `5[hbd'`u1gl9&vֆBF{1O hh:FQ~ 1:0tZM2w%zv '?APQ.Nll D@{؛/q ?lZ D@x@E {g? ogsG_ eS;?#5p+3H +h1 U[E? akӟ\ L>쟓G:s: 8qY|EHVDM A?C 3?rC ?rC ?rC ?rQ7q\(!!!h!濉@.FV@7eO̠˟C:L,2nNP 7?*/gldm\B_R ANV!H/Y)tX3 +deB_ AV!/Y +?r AV!/ϙafag9yA_1k!8[Xה߷=t?p2Z )Q򯨱#$w ?ljl@w1Ҽ1oeJShXt94 Ys|}l'bbP9.3qћ]T98L7\ʨL\fPcRҙV^eא;a-7zź:4$r=m @@ -32105,7 +31872,7 @@ T4 Ex"Qu2s4ݥģUM#v ދgX5 yq s^zs3Q9$Ҥl[ 5VTDeIqkj;";e]T>[d׾)QWxlGo"/0XxoZnv2^(D:R~glFpn1`'M XMcxH/5Ng6nl?X6glkh˿a*@5&t%oUF0s8;цA߬6On%0?Y"ѷ{YPk!\foξC'aGl_YZ3˞jʇ%\x]c:ޫsA-Wv;N<PjMo3]#eyKκvK*16@H=5ܸ ΰ/>Es$6+TvI7+N]EձB)Iy'{*8#s]0Pmr>3%-#C1?KAKJTB5,߽rZϣseҌn~uhT- QKtPr$NZ7J#B6/va='Jm[ty$\ֻ9.k }F*3fu\T\'4iImń( 0N,"ؓFyxm~!׉K/gaBs3gd[_īfeL?с5 -^endstream +| Xendstream endobj 2880 0 obj << /Type /Font @@ -32114,14 +31881,14 @@ endobj /FirstChar 33 /LastChar 126 /Widths 6717 0 R -/BaseFont /CTPYGV+CMTT10 +/BaseFont /VMHYIJ+CMTT10 /FontDescriptor 2878 0 R >> endobj 2878 0 obj << /Ascent 611 /CapHeight 611 /Descent -222 -/FontName /CTPYGV+CMTT10 +/FontName /VMHYIJ+CMTT10 /ItalicAngle 0 /StemV 69 /XHeight 431 @@ -32141,7 +31908,7 @@ endobj /Filter /FlateDecode >> stream -xڬeT]Mpk;%w  n]tI7`0\UUk} 'VR6s0H8ػ330ʫ031301:]Ō]|J.?ML #Ѣ&eLىNۊ9I +Lm7bU]j)ML7q6?aH8{|AC$<\1Xa/m)Z_QBKLeaۯ;2A*0>G)αƀ] #\'p|-;^V`5 lDi}}'|7E0H7}Fp'nM)6?0KIJiN{ru%-fЄD;ֳmȔJ&Mi5],հ5j6\8IjBiǩ "~=7]P>>sH!mDM sSaMhl\y´F>kFO+?+ KQ]-]#X nj|5# څ976d{"z٧ݞ,qHe^GAfORᵨy % i;gBBZyHﳷ`#%lZV^Li@7ZV`ퟙݕָpڂއ. 3μ-9Ľ) zNR7>_i^HQqQ,i reϾ1Y.']IvdP5/DD5_1Q ݶr20"@vu}SĤZNŽg~$1o՜SY‚6eƀ&kAԩ6OPKD KojAK R-+[~[ٗ]`ʣF><keǑ 2\'qnPxtC"#{w_"3{k'&IvA%uZ[o.ۮMw(6َˢP-ϝrxrXpL%żTm䷩Axz$9<њE]59; |T^p.3>҃wC.MI]QRK++uu'b-8 7b!]w`LߐJc6?@BŔxc!gY8?ڈ .0f(%#.(8[YcM: ? G4SuZԪ!?@k}w0̲>N]| 3rxg/BleOk\g,UiQXBbGH!A}z|טd]Nլqz͢W ->X` N[5|1^˿|ǠחPפV;_k, wȓOOyU+#S۲'ڻ:\v@uFS26u`}D$*{6rOdeRוlEUm2güu5]L1Ż:/bJ$z=kY>Li6[Gzm}ȽVwgI$MbHYTd+^DXQ_Wuv4&"BҨo \2!a _f}8c,-X&ė&"CUqV{1'!rUw3І`6X] 2-72endstream +>X` N[5|1^˿|ǠחPפV;_k, wȓOOyU+#S۲'ڻ:\v@uFS26u`}D$*{6rOdeRוlEUm2güu5]L1Ż:/bJ$z=kY>Li6[Gzm}ȽVwgI$MbHYTd+^DXQ_Wuv4&"BҨo \2!a _f}8c,-X&ė&"CUqV{1'!rUw3І`6X] 2-7qendstream endobj 2876 0 obj << /Type /Font @@ -32215,14 +31982,14 @@ endobj /FirstChar 11 /LastChar 126 /Widths 6718 0 R -/BaseFont /AQQDUI+CMR10 +/BaseFont /VXQJPH+CMR10 /FontDescriptor 2874 0 R >> endobj 2874 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /AQQDUI+CMR10 +/FontName /VXQJPH+CMR10 /ItalicAngle 0 /StemV 69 /XHeight 431 @@ -32235,25 +32002,26 @@ endobj [583 556 556 833 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 278 500 833 500 833 778 278 389 389 500 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 778 750 708 722 764 681 653 785 750 361 514 778 625 917 750 778 681 778 736 556 722 750 750 1028 750 750 611 278 0 278 500 0 278 500 556 444 556 444 306 500 556 278 306 528 278 833 556 500 556 528 392 394 389 556 528 722 528 528 444 500 1000 0 500 ] endobj 2867 0 obj << -/Length1 899 -/Length2 2415 +/Length1 916 +/Length2 2588 /Length3 532 -/Length 3046 +/Length 3227 /Filter /FlateDecode >> stream -xSWXSk\R(Ԑ QBIQ HBPTzS PDA""MEuqi9嬵^ -K< 58[587&h -H0AS@= P> k!t`ZyJREco"$ -I8 X)`D B  $QA,X}p@o"Ac(QA -PT8D>u",Ws`<ېVF) &bAW1G6k jAAql v8 -Fw$` .(c*?f(~3.pAa08Gyr,S8BK@HPfpp,!Pi83$ȷuja AD'ւꔓ?Zp%?HM@Oq?!\ P'jszO1>P##bHBPdZ9pA '5 bI$@~9{8`1g.VG>)S6I{wm_T8 >.CNh4{:(-oc5V'y-@. &Yh*ccԀwbW } . \H͠wί<ַWc=X]VD^Vg7M6^?u!Cvخ-4s4=nQԎ*N_lɖ f@+D˷_llF͈)a[*@8#1xNv^ю|3%s Av"Vh&Uf{5@sHˮ73u|]J|j߲zmsԼg/D6L"@kc>̛Hn緶 fNpC:eq@mM{{\o_zWa'ęҝX(BSIŵwTP:SrrmzwkbWEᴙ:K.ߺ7R|ynK}Wc34-rc~%װh`Y98HGT=]!!>S x)A:{B9&ΐ@[_IuճC/yc3dh ׳:io[^;?1 vmx ؈ѥEFYI8gcZLlil0m*;ܧ;2ng%j{Se|q͈v9PD 3YnޛCRir Yxqm?4MEѫQZӳ}o]{: w%uW>id/єjVɧ}Ws%mJire¡>AD]%w2U} 2Ro b|4:ĎVԬnܚ#;'f u%-W>4DUeV TE -xdKEFR.-v }RnYk4UoQ#cf@cL>)"'>MBHv5z}GVMfm 33g樵"Nol.Wmy?%sf[A٧l $G_P.MkkkZ\G3WRZ6>I{c,VLݘrϻ(Ra틃+GNIVT.%6Ds9l֭vHh 97 ,~RE\ -˫¼M=q=1;n^:Pc[嚋DJݛUA.ێYP!as=O6EC-66=7IrK)ux0'vђg˓^-% EБ>h{xTJer&Fץw6!=Kړx´nVԝ#ynj ЋOڡ̛ rwAU'T0jn"rŇMH% ZpG~gGT$|!v|kWR1Ŋ6:'dIf?H'E+=um{-$=~',mN.!O>4=3k@9$% %dPihoW@ +T55pI@I!b]1d@FOH X$!ЃD )@  $( H2b_@IP =,@"q9 ^ =#ԏ89![Q) xxzA"`F@Dҋlf +c՘a:xW@QX!DYbH FHWģ~ AffM kœ/PJ0l|r(U"#Kn~8'.3MwWt!p%+!}xs_+liF +]யX3Z Lw8>_ȳѿ0:yOUs֯j8ۈ +)<^E*S<)ILSAnl'>ywl6> ğ=Ōx0*b1ԸںݝlE>tЙdc7BU9ACaM} ҤC3pg>k f76_a,SxO.c5jlAbԚDoUG̤ 8Ӎy S[SNGK3nU@/%-Tugyb84^d9p0PTy8OG^1hm”wՈ?RPk&谟O-:۫uѤԻ'".{Z َ֫T]p󻲑Im^ʪm뽼~6-0+4+~{Cfщvorؼ+u$xH ;}Rs|ڍ%HwtuVM۵heJryVPY=7*,yA9b#SjczGCO@FWEz% +yn=p3FtN);>Zce/0sŲmڸqWZ/T+"y1Z3tbHӭ+cCM;f|j>4Yg-ʁz/u,gvo*:W 2?k{xHLo"VQVY3X^K-X~ur#@~+Otn0Hfˬޡ#&;<"#ݘ(>Sݱ|et Lu>W6n:5^rA5wX=/H,W[xQno R;?L_}LyBͰ~}M)R/}PNj9H04|'E9?VqZ^iy. Y(tUPn˫㹅ǟFqi\ ˍ>@*FY~y_y1\NGQd89LZOGcUZ`p,;w cTcHYٽ ifNCQ"CF9Lͩca\(,y w,%\o#n+v j֋8x8G2L llmm.WgeKh<ii^̎2DgՇ$kBusL"ѧ.5KmCbzj1LZ3-Y8<&nh]2_\dob'T!porw#y8*\X*p[`-"eV72`+0{>_ ^SՐ7(GU@͑*9R Y'+ԗ7V2W{s(UXI^ L Ի{ Hu?.mɺYnV6ÍڹJ>e1L>nNWyyH?U|nPٰqxG@[!jE8 +>|I;wX>z$iv0HI\Nk4ןff>$";H% Ck?rwCqne|,ļ-˛8,詭C]$s,f<9|: RfubsZaT`5.W$c׈F6,WY{zh+1w7?ht,}g@NT#Hz59:9VǶ.zխՔ`L~'4p"{xR<֨g$lc\TI앃ηf'P^{3u}C4d 껹.Ϛ)[l{Lh&Ρ#!v@apCё1i<>kX6.vf,?|8o?aā" s|nendstream endobj 2868 0 obj << /Type /Font @@ -32262,24 +32030,24 @@ endobj /FirstChar 48 /LastChar 121 /Widths 6719 0 R -/BaseFont /YAJWSM+CMR12 +/BaseFont /MPMHLE+CMR12 /FontDescriptor 2866 0 R >> endobj 2866 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /YAJWSM+CMR12 +/FontName /MPMHLE+CMR12 /ItalicAngle 0 /StemV 65 /XHeight 431 /FontBBox [-34 -251 988 750] /Flags 4 -/CharSet (/zero/one/two/three/J/l/s/t/u/y) +/CharSet (/zero/one/two/three/five/J/h/l/t/u/y) /FontFile 2867 0 R >> endobj 6719 0 obj -[490 490 490 490 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 503 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 272 0 0 0 0 0 0 386 381 544 0 0 0 517 ] +[490 490 490 490 0 490 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 503 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 544 0 0 0 272 0 0 0 0 0 0 0 381 544 0 0 0 517 ] endobj 2864 0 obj << /Length1 2124 @@ -32289,67 +32057,67 @@ endobj /Filter /FlateDecode >> stream -xUX\Ͷw XpwܝwwoY<\ N w(E@.rQ{';\4 oh?y(@ݕ}s&2z'D' 4_f ٪!hB!Lg ANV!H/YwfPwd AVv!/g +ǿB_r AVn5C_ AV?zRsyzPU =|3Q:"T.>0ha3 djnj 4ogdR+7Y -MDZ#>d}焊)Z0% t&^2c" &uns=%]dU2G̜?"J_}6RLf$nĎ>- b.M["rEfBΥ=1Z{! w{gUٖdcoEb.bn璂+&) - -FiBPٔX[tVSPVfC-(GG\Dj3ܸzcQf04_P~?'gQ@9:j8 lPe (׶Q%$}{lwY\Hfe, ya4{2)_*Q1:GxSŏ0 #b%4eC%?*w qa!1~* yQg,|ErCvuW%5hxxxZ3Os*{;{xK4[k[%LX~~ϿR~h2~ǭlJHUAaqҨsj@>k)gsi/錥FQNDNx6ѯ$4:=hFNP0Fr~_~k!0'(%FO[~!?Kzh^0#Up/J pW!N -/gW]!;pRO -.Jg޶b4med;ȥ.ǽQDN;OCĖD%\qW L ?y^V%pnoKaj: ;U -xkTNd:B{VݒXaNv&dZѥP+(z~nO{qgf"mm̈*RIfIk7T=,áSqr9;uw06y<z{uO - _ԟ~Bs_OqQ+%Њ q8gbW6mL j=%V=9!Al N:#.J=TAP$jr?OrMHo]qk}lxmkRā@u٧MզAQ%)ruJaDžjsL `?ǥi&"xԘs`e1k 6kJ{'ڡ:zth= ;o̜RF,ӕHA=6{>?nY[RTKҞ0΁AUy8ݘ[7]g3ɱX/WL}Q\Ai?2GQF aM9imN~ =aNP÷kT*qT7r{~hBY\hHym'DJ/  -|Nsh|TSصnQO"p]Ut _ȻjyS3޴.U՞'-,9'\]V`TRkS0WR(y.%N~k;+*Fa~D.%w iTTi*sB0y /9\'gJ/Z -A}9Iֺ53mmf0,?%r;Kn9}wm2-D7H2!ɳz~.'*8F* 50Us?|`\L(I_ UvՑcuO6sgS)=71z˙ʔ8GEڋi I/DLsGbT{Q=X)ėvȎg"QlcP:0þ^؃>T>%] 9atv7ckC)/4GZ9Z',ýZx̆ޣ1L![ zzm [>RC&')ʈ0+h5rʳ(̏ih&{Y?hҤ}a0Ffs칾kLJf*pȍX/Phdt,LN`A 6R~:P߁eh8M/tSA1VʵDEF&xAͦiR-QσVͷ4x Vl|dl$ ]Eqd8&U9K>$ H']:-%iKhd“>._{BkByxMݲ2BHtG|TYJ22&_o[W*j_|V;Ӈ3٫!|fOF(&,ZvMr~٘ȟk^J^^Q52N+.#aaF=98ApDr$[u HYh= $ed|DEgO&K#`[Aupv?SSPlv˻Did$Qר&&= J3}f7ɡO&aʘ]7#VmQG:2ϴvf8c/RH'ujj4A^V]vW;8+-}OQ3 -OoЍ†hvJ1$ -ts=K2"d:0BV?i iJ9nrǑ,.ckrXԇ5X[)FVej~b"kMvΰ@5LMA&% Ug%u¦gkV"򄣜/$EuZ/%ۘȹVz{-rH ], -1#Da3s]9%irV/p36$6Mck.AW*?aI-zh+g+OCGrڜ'd貃źD03WOĢBBk6M4շEѣ7O}tצW4Cl":Of=lO3xϋzpEϑE^كn4G/38,&Z.&҉_ $x1pyU?fnI>o!jG+UxqiԂXGui􂭒guZZ;Lnk!b[ѓ -h0?~:}!(cb(NDPrv7.{ΐ7ALaV!N.ϱF'/Ng5g P#6Q#T 4(Ľ(mF6Qno؂uƈb]C9"` W~Z燎6~h`VASʱ:@; Ŝa6{-X&?#\5}ܢ 097IUC0NH$V;[bQ6Af]5E#Ɖ '͙vcW~v8DI1ozUL"ok6iG{0#Wsgy枑~C:/r `DJ\!y6[rC?~Lȃ˨c[0%F Cpԑ.e"D.b'~?) }KpD 5a:,7{4Yʉh7ܻO¤{ -U23k^88JfNK^IOa`+s@?ksj1.s|F~#0*H:ydʙXq4c>}e5[e'fڲ(4z[ -~s<^]J\,5˦iBCwu;)_p`Buo -Qpid#[^րJ%_ a)I@-9H7){(NԆQF;iե4%ԈY!Kx '鬠K?j\]\(>2S.B6yA֘+ %KSchBpt*|ؘE&f>BnB௴p("mHg8;N]VOx|=;a5h>l֮ׄw=Q׾-N ̈ieȌfnDxc,*dT<̵@-m=x!n}}{B,ʋCN5YGd;c6Kg '8jz*DMķ -ad{!^e|Z>4)dym'Y`-C0V5<} kݒn@h4a -?XG-m[N{md=xIpIzH/El4[L8'LQ߆Ȯn%W6.ApzeK;Z`Ż?St`ĥכ -4{8M-\,P*‡nu|OohD˜,=vC {g ogsG_ h Y'_eG!A|癭al,3:+?tռANq #N wyA *;L T&w9IHF@.ry';\ "o rQx';\ N wE@.rx'濉 N #GCc+ .P+VMdNO4h&UBЄf!BУ+@nB_z"̠hB_v AV?g/Y9 +dj +d< $dE,h{2g$J +gPI8à)M-@' h 4ogdR+7Y +MDZ#>d} + +-Ң t)&^2c" &uns=%]dU2G̜?"J_}6RLf$7bGO +ptn1^z֦VR"e!RWKнtȽvDlK17"W1[sIݕbsY4U(JYcpll,-:ɦ(+\F! +Uh룣~?"bn\󱨌m rg /(`3(m5EK6cDC,ʵmClI[]*qK0h*}؁&MLx +c8tBqLT#>aDqĖơlAe.:.:$&18Ox!/* `WT?-?dGkQGxUQ2Q5;4s[<)H@3U/-q4e9(U뇖/(w@D ++FS˕Y0N)>LxIg,O~0r"58wӭϵ~%`!;7> +JWD|ϸ"r:܏y|"d$ 0,i+WDͯZdj@w"/s_~]: Siީj\h F^K7t"'7בVǰSꖬP w3a %;4ג.=(\As~ +ދK>3lkcFVя-N2'@4LZ EȐb!hO2j0E7!.sȽ^wG csI͡,YWWMn@ HIyY귩/4GQa؏u+\pX{s+vencbQ,Q47 g[tvQ> +"/Py|hEzڄ[쳭 ec\l_S]\/,ϔ2&>o6 *HkWvr槆Y?.Lj HWaJfY?.M 68 [XclpyjwN{ðIa[#l<]cs78 %E$ hT%a3ٍuӵ{;;?ݮrɄާxsZ(Ӣu(ʨ3>4i/@'!\jvM?*Až1>nf@nϯY-^0 )McXe٘Uaij-jIUAˡ,wZy<5#M˚iPZyr^BEPmUFe 1-{0s'RBw2mfGR_|g +??FU+KE;:/H2 <*s ,ҙur¯%`a)ZܗDlKZ3f: BhS |-^ ѝهxW/-`!ANՓ.@íu cJT▱N0lNyPOagibUmr'Gu* &eUQmhny`)7룺U_j=ؚ { +VW7 7N ɌDQ4Bq8M!a<u?8GXN2*q\>bZ.il}#zϴPa)EC2ؙs4(DQhYw##bEIvqz[H=ZA/ѰV~ -2F/Ⴉzm}4΋]Xlɍʌ$\փD%[kk Cp'}Ԑ0h3ਯˣ]"sT&(kM0utK+]A;!΅'#hrX̱{_=T(jZ3lvEP:sKW(Y^ FAV!v9MUE1R Ŭݟeץi;bBI2bخ,L_g+}ZN1ޞD8|J06[Tǡ?*^LgMu~!f8jڋ+'%OL!CvC${;Lè'8'hVq+.)r7 ͸'ydi$3l+6Sӑ~gj*nyݓ#-Chب#|6fr;XͨRxHh%S7Le 7,R; P~G +wrdD=7Sx\79=7$p6r8;\K;=2GnG0&㇤q8Avb֑|MXΣpKE۸=J=N $BE\2UF_#KMW1rl !.TďK }s,U'bK4O>+JYyC0gŚX@9` QRЅ*uÝc-5=2%jyL+esGM8-=MkM$I :GB%.Sk kjhnmXdpS5{#,5 d:YVFVz"Z/ad4Y +xY"F8G-ŻgdX. UbCU-,+07sSHo˛r|h-о'E(I5| sOLE dr6ӲI2f Uxԑ3/ΘoċR4aUן`UN'Ғ| >r@BĨ'Ո7&`<|`A![Zkཬ-' aVcFEry/)D@H-νin_R L >>0ly^Ӿ!3dbEh/r7ph*(g"16_Pb^ +ʹD,,3meP67rIyl3 0c+$HiJ;+o^s_wqT\ч쒌NSeh +e/wOԋkrnxd8m(<&X8՜@y4`}ANΦA!UFi3:Fgհr|+7 c:FD9Wg"8??tYC2= Rվt.\hnl_݂eŇu+Ҵ&o[Ԕ`4`&pp +ȋ8H)X1{Zk;d˝8n +8+Tx;VlVY~P6xdxѺdsqo2mvq8 Ii2xB`)bz8#{$ ㉮ +NO :oԴ<ՌԈ0Dpqö|@ͧђZ9A]Go wv[#&_(/I:- vgvHuk ^fں,J//Rnkx<8Y.F6 ߖ>Ɨ+D-=;sxg l&j3κG`0r79S=.+X:NLs!x_ NZ[kM/FGuKNOd[+`NۣSmM; ?FzNjCfaZ"[΀(N|+87ӂěj(a$#!Km:q5 {]lT7|p%v<wK7hpɫ[ +r0YTf/T]hD˜,ttda臆~ I#B/>ѻXQ $JኌNX_.(uEM7aQ,@K>$j ^,-myyDƸޅwBCYuPDNWqh T7ёkWh5"+*ONjcH KvȇOaOF-w k(T$X1Wh+MFGuP+޿U#&8%/ť;}8\#}[ ʱFMWw%XSm EūnlNJ=V,G?i1JL<w[+H Z'đˬ3 C&cpb(0r`97EgJaf!nzW]p})nB'"1^e:is/rTW]spZE[ {,(!㫭6[Gh(`4ﺻC^!LT+Tí]UK>"md,$\rN$oϓ&lpf_m;=UM>b8xآ9V͛U=+";ryz^NRȈ(30Ppd+;)ec/rξk@>$4d6~oT]ঐO$c@'WWun 6@vhLm;h ?NCJW+㲰]A8 OkQs-NwjhLȢWXA߂ -?lu<=İ$2y/ېnrBʸ؝<:dZ\nd!a=`Pq>a^ۦ3-vXt~F4Cd F/Fle[. |O1ZA\G{ YpٵBtW)RN͈k$GM Ƙ'du@/-u@RW,qhu;BB夅&<3-T\^A6V郍@YB[^H -T/7r6$K!u'Z| _>KRdؚ~ -gܸu|a7p]~1H8.PwhËxp~XmJWNCMyeyd,JI,4{Lqxp?vxxIjdPĆF‹֐ Y!!a߬{;\ ?"28 b$h88&!blﵻ ۄ]1 -Znt5D'>灾Teni3p.ijRri*MxsPn11VF-vְEdז&nkW+F#YyU~r6[5 sb{v/f(ɁRI0*wKcnO$QetL-&jXnM }<ǿnc.)͎!G8l^nn;zugmzk` 0Z$e"Ү4jwv)]8Fkǁzw6کS l ~%`a9tM[;zYQFլ+T;ތnju91{34UD) nc7Voܧ:H6Z8㧗$jNW5h|MS9> -ag-#+?SEfg] e<^(S5 $l&DK>myS]m,Rg r]Wgc0(urf<$IRIَ 7D}G PP>@kg9(pP-zɇ'|$ځ`j ϡRwf5 dǝN.>$gF~00c<{t ^Svk >{:>PSE!ԕY0^fn&,nx"dJڐs47d( -^}쵾BC@%eHL^$qħ*L10. +eRs9Q^P%(y0pL̚8!v&Ljڧ$jekz8,@w1R#iC|wFqvB650[mD7?2߯"} ue'b2_eݑѲ'╟= -]ǷV .‘%0;_6)w 4:zB!Ӊ/}!G,F8L@V1ռuh,Eɔ x|6obQ$z'šdRT虴֖~ٌ(/V^`MS~Fgk?ǟc87(y]ڣn%<{I*Q*EvP/@󱼾ӟerJ }\NuDksJ>f$z*en8ʚci/16g];KS;>ڱt}eBقI$pU^f"x ܸmGU75Ac {tyh)5*kptR{Oz7T""|Z EAa'v>1}1C_H;(xls {;~4heCa 7,4  IZ~ #*׉EO хrhC^8 lEg6!?-(đ\q@ 3!F,@TBlSvMx5jOJvհk87*!?OLH(Sجi޶G#0#X;OuD q5/!3 -SHc.|#9a0p=JH J}IW"u\5{yd ,oO(;Hb^OCl* -yԭ**zX! &IXc2LS ~_\yjt7K\&fJd[>ƘoСQL3qKI͞|bme]B/v͜蒂Uk3Pk CJnESdWOfC{90&+ؔ?ӥ`Oے6l3jĄmuN^bB"ڄт -yA VJs\ywԬZ8<%lVHLoƘ&<8fiէ\m, #~86z_qVȬ)$} nXh괮NcL0iVGQ`ǎX2mf7?ƪC5p}I -&\S(rcIN4"l=t?ZSp/]%mKw>⛅Yh1lguYk9__E65Ol=.|ߞo!zhpEvNKo͖e,xˌPV/:rʉOGwc hĕ/,?3NyܣXF[| MKvdbH79|WLa M=CD=Z<8 r״F7 3(Sa\'_vm( -6LK7sfaH֝YTJ59aCA7,PX0&M0?ߏoH!]<^'y`Ur RxEIS7a^$P(mYKi0O }S#Tupn@TK8nʠPՓq;9%( I4Eie9* b R4&A_{~u|{0񉑤w+*vn] H܉ 0G`pw>)!sYxp o#zqϩpÿM3ftiM Ü)Ol`f0$6d*`LbXyuhZTlj[ f)1tW‡RՖ4ws-8n(GO>0$Z+B7y춐Ca^vԱVR:|dH{<_I~E؍ݳme+,OJٖ6qU@rPhɹ J-Se$^N9>.Y⮻)]eAd&sC@GxW0;iu]ICZn͊|x¿_WSҰc+ZFf3 $?,oME .$g(U_\Y&!RT - n lVqMK=nD ^c߹v/~`w'cJk! dfh=N{\1h2S2. ɾ&:3D ژ3F!QԤyG)$yw+KDWE -]WH -pG ޺B -S9LL-8 d`YOZaR#ZVoʔSLW3yϵ"Mk3?Ĺ%Aδ0tXSm Ө,[nU58\o-j2jZhB9n&{IWSO\[^>y)*yqŎx6RHmwbB[S׫HjfQtG*bxIJݘBW?h.To7xmD`,6!Ί^yFl(LW0 Y5;J\êo3s- WLKs -L$#']98f4d#:.uXߠiCdԮ-DC-\c/_tҽxZe& dE;vYLU|Ptr8kUҒ*~ayu5 @X3:9ׯ-_\`*ԇGex7:h~{,JVKZ'0 ]F@32 چx MqsQ|Ҋs:!O15:@藵i?Q2L%{29xfP]Cһ6u]U0v|5sW,d8R?{iA#t#ȁyg|uw"<+pɊS :".|x=Pc|7~6Gq[IM.hI -cБiJyϋngLX%kRC$1A!y21b@Xs lv(QKgtKx"#tDQwam?0Փvr `%Gfm[ƬN?MѺ,=Ž8Bv9#ޱ8iAUj[:::Zʂ&Eendstream +ˉxT<0n)NKx$0dhuL mw.ekpoo4 l)Qt*KJ?OCWI: 68 ;Kwzec(K ?R,1%0MI۹{vԲNP e3SN8 ӴDhȫI?UQܶX[\Fװ"ٟ8<_ŊD[4,\mysbӤZO60-U},.\&ZP5jlb+jwO,(^EpcsT걊g9IQgq甸s%5ZiGBXxJ?!\f:Ou80+UFQ˹)OICfCFn +tHp9+9ncz!VG)vHje\a:(ݠI}3zM"cY _؀Ni#Y ++[P"?~? V9DY">BZqpmYCQPɰ)qMQh !q!r2RėoH*%N^[z_HqVلt׿k9RJ3}(VsQ \AGAkwr!`X&O{JQt<']`tb!%^ip#6c<I!FNQÆ`3)Y8U/|K>gI"_w [3ҏW~Y?/\@>eʠNmxΏ>Mis)﷌>oyI8I9?s4ǎ 3D&*$5$BVzHHj7+,N7 ~0X; 'zX{.6!OꞿM1ʢyJċeZ`T^?q.σ`<ƴ[5GM.щy/Uٸ[xL0clKgځ$è/܃|F`JS& #T'xLQ5,j3ٵ%#Ioa8HV^߳#BMœ؞ݲGKy$?~r}oE:TuҘs21~IA!h/f{:d3ӹf`︛m,%鱲0]"Ӂ+cޭ~]B9.sl4-"@ov Uc +ag-#+?SEfg] e<^(S5 $l&DK>myS]mRg r]Wfc0(urf<$IRIَ 7D}G PP>@ UDyX8yÓrzH>pH@p0Pw;St2vH'3 K}P#?S1=Gۆg + Zކ;h2(34KˢTQ"6B̈́e7 OڛLi[y΁ᆌEWYW}t iT)U 771]NKlt]-z'šdRT虴֖~ٌ(/V^`MS~Fgk?ǟc87(y]ڣn%<{I*Q*EvP/@󱼾ӟerJ }\NuDksJ>f$z*en8ʚci/16g];KS;>ڱt}eBقI$pU^f"0 ܸmGU75Ac {<58}:=]'BbO>Р;khLJᡯ{g9\FK?!ⰅxФ +-?d酑^r⢧B9L!krV6r3^ŸICHHM gUc r*Z]R)L %;]jصfli tCfɛBUJUm?OLH(SجiֶG#0#X;OuD q5/!3 +SHc.|#9a0p=JMI J}IW"u\5{yd ,oO(;HbVOCl* +yԭ**zX! &IXc2L9}?a<`5ΌwknPgM`.`trW3v%\vmY-acL7P qM)&~㸥I$fOJ>.`fNtIX +U*Bk CJnESdWOfC{90&+TٟReAmI65b6TNޜ:' +X!ZcmhAtvE,ލ%9WX$~;qίcujo :57at.I;ڑ!r#<_11 Kt&b7/ ɶjFka̝ʙ^ӲXd0LˣLN Jrv[dGK|i<`(h2-!6rΩ!Y[wjԂ>og-oR)Z ްrBOoĂ1hv~|C + xɟx恭FWVR)؏6 K%MބypCM8mgd/,%@& +L\dZP՝U:0YɁpݔA.'vrJQx{E>&I MH5Kԛh}gpx'F +ޭڹOvaO?'`"p'J&)B,e#q'=Og? f.]E:Ӛ9S>f̾a0I>lF@U&˙AŰx+8в:h*,Rc]'Յ5Q'-7)hZqF(GO>0$Z+B7y춐CaVvԱVR:|dH{<_I~E؍ݳ ̲PE%lKG*\9t(m4g J-Se$^N9>.Y⮻)]eAd&sC@GxW0;!c`eO4Mpm ޱ3ýM7nm#F? O56`eѱ#{7fE>y)*yqŎx6RHmwbB[S׫HjfQtG*bxIJݘBW?h.To7xmD`,6!Ί^yFl(LW0 Y5;J\êo3s- WLK3 +L$#']98f4d#:.uXߠiCLdԮDC\c/_tҽxZe& dE;vYπ*yW(`i:uQjٵ*iIxAn]Ѱ}W|a\TDі/.0FPãmq7:hv{,JVKZ'0 ]F@32 چx MqsQ|Ҋs:!O15:@藵i?Q2L%{29xP]Cһ6u]U0v|5sWd8R?{iA#t#ȁyg|uw@pMiyVitD]zB>nRyw%mZB!ZP4\>;#Ӕ󤉓9,\3f_ֱ:m[K\׌=؇HbfCdb,Āy.`!Qh)nҋxmAMVD:F37`x.^ܬcޒ$Ha|6`F +S ͝$(kWBqP=%BSl'7-Q1A<JiY~uY{{qzlr@Gc9q҂<?'0:::Z&Zendstream endobj 2865 0 obj << /Type /Font @@ -32358,14 +32126,14 @@ endobj /FirstChar 11 /LastChar 123 /Widths 6720 0 R -/BaseFont /TPEVBU+CMSSBX10 +/BaseFont /GYYQTM+CMSSBX10 /FontDescriptor 2863 0 R >> endobj 2863 0 obj << /Ascent 694 /CapHeight 694 /Descent -194 -/FontName /TPEVBU+CMSSBX10 +/FontName /GYYQTM+CMSSBX10 /ItalicAngle 0 /StemV 136 /XHeight 458 @@ -38024,7 +37792,7 @@ endobj /Count -3 >> endobj 6736 0 obj << -/Names [(AccessControls) 2959 0 R (AdvancedNetworkManagement) 3024 0 R (Appendixes) 6519 0 R (Backup) 3030 0 R (CUPS-printing) 3021 0 R (ClientConfig) 2955 0 R (DNSDHCP) 3065 0 R (Doc-Start) 2862 0 R (FastStart) 2949 0 R (Further-Resources) 3066 0 R (InterdomainTrusts) 3018 0 R (IntroSMB) 2947 0 R (Item.1) 3946 0 R (Item.10) 4079 0 R (Item.100) 5705 0 R (Item.101) 5706 0 R (Item.102) 5707 0 R (Item.103) 5708 0 R (Item.104) 5709 0 R (Item.105) 5710 0 R (Item.106) 5711 0 R (Item.107) 5712 0 R (Item.108) 5713 0 R (Item.109) 5978 0 R (Item.11) 4080 0 R (Item.110) 5979 0 R (Item.111) 5980 0 R (Item.112) 5981 0 R (Item.113) 5992 0 R (Item.114) 5993 0 R (Item.115) 5994 0 R (Item.116) 5995 0 R (Item.117) 5996 0 R (Item.118) 5997 0 R (Item.119) 6002 0 R (Item.12) 4157 0 R (Item.120) 6003 0 R (Item.121) 6004 0 R (Item.122) 6028 0 R (Item.123) 6033 0 R (Item.124) 6034 0 R (Item.125) 6035 0 R (Item.126) 6036 0 R (Item.127) 6037 0 R (Item.128) 6038 0 R (Item.129) 6046 0 R (Item.13) 4158 0 R (Item.130) 6047 0 R (Item.131) 6048 0 R (Item.132) 6049 0 R (Item.133) 6050 0 R (Item.134) 6051 0 R (Item.135) 6052 0 R (Item.136) 6053 0 R (Item.137) 6054 0 R (Item.138) 6055 0 R (Item.139) 6064 0 R (Item.14) 4159 0 R (Item.140) 6065 0 R (Item.141) 6066 0 R (Item.142) 6067 0 R (Item.143) 6068 0 R (Item.144) 6069 0 R (Item.145) 6070 0 R (Item.146) 6071 0 R (Item.147) 6072 0 R (Item.148) 6073 0 R (Item.149) 6074 0 R (Item.15) 4160 0 R (Item.150) 6075 0 R (Item.151) 6076 0 R (Item.152) 6077 0 R (Item.153) 6078 0 R (Item.154) 6079 0 R (Item.155) 6080 0 R (Item.156) 6088 0 R (Item.157) 6089 0 R (Item.158) 6090 0 R (Item.159) 6091 0 R (Item.16) 4161 0 R (Item.160) 6092 0 R (Item.161) 6093 0 R (Item.162) 6094 0 R (Item.163) 6117 0 R (Item.164) 6118 0 R (Item.165) 6119 0 R (Item.166) 6120 0 R (Item.167) 6348 0 R (Item.168) 6349 0 R (Item.169) 6350 0 R (Item.17) 4162 0 R (Item.170) 6351 0 R (Item.171) 6352 0 R (Item.172) 6353 0 R (Item.173) 6354 0 R (Item.174) 6355 0 R (Item.175) 6356 0 R (Item.176) 6357 0 R (Item.177) 6358 0 R (Item.178) 6359 0 R (Item.179) 6360 0 R (Item.18) 4242 0 R (Item.180) 6361 0 R (Item.181) 6362 0 R (Item.182) 6363 0 R (Item.183) 6364 0 R (Item.184) 6365 0 R (Item.185) 6366 0 R (Item.186) 6393 0 R (Item.187) 6394 0 R (Item.188) 6395 0 R (Item.189) 6396 0 R (Item.19) 4243 0 R (Item.190) 6432 0 R (Item.191) 6433 0 R (Item.192) 6434 0 R (Item.193) 6439 0 R (Item.194) 6440 0 R (Item.195) 6445 0 R (Item.196) 6446 0 R (Item.197) 6447 0 R (Item.198) 6448 0 R (Item.199) 6449 0 R (Item.2) 3947 0 R (Item.20) 4245 0 R (Item.200) 6450 0 R (Item.201) 6451 0 R (Item.202) 6452 0 R (Item.203) 6453 0 R (Item.204) 6454 0 R (Item.205) 6455 0 R (Item.206) 6456 0 R (Item.207) 6462 0 R (Item.208) 6463 0 R (Item.209) 6464 0 R (Item.21) 4246 0 R (Item.210) 6531 0 R (Item.211) 6532 0 R (Item.212) 6533 0 R (Item.213) 6538 0 R (Item.214) 6539 0 R (Item.22) 4284 0 R (Item.23) 4285 0 R (Item.24) 4286 0 R (Item.25) 4287 0 R (Item.26) 4288 0 R (Item.27) 4289 0 R (Item.28) 4314 0 R (Item.29) 4315 0 R (Item.3) 3962 0 R (Item.30) 4316 0 R (Item.31) 4317 0 R (Item.32) 4380 0 R (Item.33) 4381 0 R (Item.34) 4382 0 R (Item.35) 4548 0 R (Item.36) 4549 0 R (Item.37) 4550 0 R (Item.38) 4627 0 R (Item.39) 4628 0 R (Item.4) 3963 0 R (Item.40) 4634 0 R (Item.41) 4635 0 R (Item.42) 4636 0 R (Item.43) 4670 0 R (Item.44) 4671 0 R (Item.45) 4676 0 R (Item.46) 4677 0 R (Item.47) 4678 0 R (Item.48) 4679 0 R (Item.49) 4847 0 R (Item.5) 4074 0 R (Item.50) 4848 0 R (Item.51) 4849 0 R (Item.52) 4850 0 R (Item.53) 4851 0 R (Item.54) 4852 0 R (Item.55) 4853 0 R (Item.56) 4957 0 R (Item.57) 4958 0 R (Item.58) 4959 0 R (Item.59) 4960 0 R (Item.6) 4075 0 R (Item.60) 5023 0 R (Item.61) 5024 0 R (Item.62) 5025 0 R (Item.63) 5026 0 R (Item.64) 5027 0 R (Item.65) 5028 0 R (Item.66) 5029 0 R (Item.67) 5030 0 R (Item.68) 5031 0 R (Item.69) 5032 0 R (Item.7) 4076 0 R (Item.70) 5033 0 R (Item.71) 5034 0 R (Item.72) 5035 0 R (Item.73) 5036 0 R (Item.74) 5037 0 R (Item.75) 5084 0 R (Item.76) 5085 0 R (Item.77) 5086 0 R (Item.78) 5393 0 R (Item.79) 5394 0 R (Item.8) 4077 0 R (Item.80) 5395 0 R (Item.81) 5396 0 R (Item.82) 5414 0 R (Item.83) 5415 0 R (Item.84) 5416 0 R (Item.85) 5417 0 R (Item.86) 5418 0 R (Item.87) 5424 0 R (Item.88) 5425 0 R (Item.89) 5426 0 R (Item.9) 4078 0 R (Item.90) 5440 0 R (Item.91) 5441 0 R (Item.92) 5442 0 R (Item.93) 5443 0 R (Item.94) 5699 0 R (Item.95) 5700 0 R (Item.96) 5701 0 R (Item.97) 5702 0 R (Item.98) 5703 0 R (Item.99) 5704 0 R (NT4Migration) 3033 0 R (NetworkBrowsing) 2956 0 R (Other-Clients) 3063 0 R (PolicyMgmt) 3025 0 R (Portability) 3062 0 R (ProfileMgmt) 3026 0 R (SWAT) 3034 0 R (SambaHA) 3031 0 R (ServerType) 2950 0 R (StandAloneServer) 2954 0 R (VFS) 3022 0 R (XMLpassdb) 4427 0 R (ads-create-machine-account) 4212 0 R (ads-member) 3985 0 R (ads-test-server) 4214 0 R (ads-test-smbclient) 4215 0 R (browse-force-master) 4308 0 R (bugreport) 3060 0 R (chapter*.1) 3071 0 R (chapter.1) 10 0 R (chapter.10) 458 0 R (chapter.11) 582 0 R (chapter.12) 722 0 R (chapter.13) 762 0 R (chapter.14) 870 0 R (chapter.15) 966 0 R (chapter.16) 1022 0 R (chapter.17) 1066 0 R (chapter.18) 1078 0 R (chapter.19) 1326 0 R (chapter.2) 38 0 R (chapter.20) 1870 0 R (chapter.21) 1922 0 R (chapter.22) 2026 0 R (chapter.23) 2058 0 R (chapter.24) 2118 0 R (chapter.25) 2234 0 R (chapter.26) 2302 0 R (chapter.27) 2374 0 R (chapter.28) 2398 0 R (chapter.29) 2410 0 R (chapter.3) 90 0 R (chapter.30) 2422 0 R (chapter.31) 2438 0 R (chapter.32) 2486 0 R (chapter.33) 2538 0 R (chapter.34) 2558 0 R (chapter.35) 2582 0 R (chapter.36) 2614 0 R (chapter.37) 2678 0 R (chapter.38) 2718 0 R (chapter.39) 2786 0 R (chapter.4) 102 0 R (chapter.40) 2834 0 R (chapter.41) 2842 0 R (chapter.5) 182 0 R (chapter.6) 262 0 R (chapter.7) 322 0 R (chapter.8) 418 0 R (chapter.9) 446 0 R (compiling) 3061 0 R (diagnosis) 3035 0 R (domain-member) 2953 0 R (domain-member-server) 4175 0 R (example.12.3.1) 4558 0 R (example.13.2.1) 4599 0 R (figure.19.1) 5172 0 R (figure.19.10) 5742 0 R (figure.19.11) 5750 0 R (figure.19.12) 5759 0 R (figure.19.13) 5767 0 R (figure.19.14) 5775 0 R (figure.19.15) 5782 0 R (figure.19.2) 5182 0 R (figure.19.3) 5192 0 R (figure.19.4) 5236 0 R (figure.19.5) 5246 0 R (figure.19.6) 5256 0 R (figure.19.7) 5266 0 R (figure.19.8) 5726 0 R (figure.19.9) 5734 0 R (groupmapping) 2958 0 R (id2807070) 3863 0 R (id2807281) 3864 0 R (id2807435) 3870 0 R (id2807504) 3877 0 R (id2807592) 3880 0 R (id2807665) 3887 0 R (id2808200) 3927 0 R (id2808325) 3892 0 R (id2808366) 3895 0 R (id2808403) 3896 0 R (id2808498) 3898 0 R (id2808553) 3903 0 R (id2808597) 3906 0 R (id2808647) 3907 0 R (id2808748) 3908 0 R (id2808811) 3909 0 R (id2808845) 3916 0 R (id2808858) 3917 0 R (id2809073) 3922 0 R (id2810224) 3938 0 R (id2810319) 3939 0 R (id2810403) 3944 0 R (id2810518) 3945 0 R (id2810612) 3952 0 R (id2810652) 3953 0 R (id2810731) 3954 0 R (id2810773) 3955 0 R (id2810795) 3956 0 R (id2811025) 3972 0 R (id2811055) 3980 0 R (id2811112) 3983 0 R (id2811268) 3993 0 R (id2811336) 3994 0 R (id2811513) 3999 0 R (id2811541) 4000 0 R (id2811574) 4005 0 R (id2811602) 4006 0 R (id2811636) 4008 0 R (id2813443) 4013 0 R (id2813747) 4026 0 R (id2813762) 4027 0 R (id2813974) 4033 0 R (id2814294) 4049 0 R (id2814593) 4059 0 R (id2814615) 4060 0 R (id2814630) 4061 0 R (id2814663) 4062 0 R (id2814683) 4067 0 R (id2814718) 4068 0 R (id2814956) 4081 0 R (id2815064) 4086 0 R (id2815072) 4087 0 R (id2815110) 4088 0 R (id2815159) 4089 0 R (id2815230) 4094 0 R (id2815293) 4095 0 R (id2815320) 4096 0 R (id2817486) 4102 0 R (id2817659) 4108 0 R (id2817687) 4109 0 R (id2817836) 4114 0 R (id2817908) 4116 0 R (id2817929) 4117 0 R (id2817955) 4123 0 R (id2818000) 4124 0 R (id2818102) 4125 0 R (id2818163) 4130 0 R (id2818177) 4131 0 R (id2818208) 4132 0 R (id2818241) 4133 0 R (id2818285) 4138 0 R (id2819355) 4143 0 R (id2819470) 4144 0 R (id2819646) 4149 0 R (id2819898) 4156 0 R (id2820094) 4168 0 R (id2820157) 4170 0 R (id2820170) 4171 0 R (id2820236) 4172 0 R (id2820277) 4173 0 R (id2820359) 4181 0 R (id2820370) 4182 0 R (id2820741) 4193 0 R (id2820883) 4202 0 R (id2820966) 4203 0 R (id2821176) 4213 0 R (id2821329) 4220 0 R (id2821351) 4221 0 R (id2821376) 4222 0 R (id2821408) 4223 0 R (id2823423) 4256 0 R (id2823762) 4233 0 R (id2823959) 4234 0 R (id2824031) 4239 0 R (id2824046) 4240 0 R (id2824096) 4241 0 R (id2824309) 4251 0 R (id2825015) 4267 0 R (id2825095) 4272 0 R (id2825205) 4277 0 R (id2825221) 4278 0 R (id2825384) 4279 0 R (id2825515) 4290 0 R (id2825651) 4291 0 R (id2825777) 4296 0 R (id2825999) 4301 0 R (id2826268) 4313 0 R (id2826424) 4318 0 R (id2826442) 4319 0 R (id2826470) 4320 0 R (id2826580) 4325 0 R (id2826640) 4326 0 R (id2826799) 4332 0 R (id2826998) 4337 0 R (id2827023) 4338 0 R (id2827107) 4339 0 R (id2827121) 4344 0 R (id2827188) 4345 0 R (id2827325) 4351 0 R (id2827372) 4352 0 R (id2827479) 4357 0 R (id2827558) 4358 0 R (id2827608) 4363 0 R (id2827725) 4368 0 R (id2827840) 4370 0 R (id2827939) 4376 0 R (id2828039) 4378 0 R (id2828178) 4387 0 R (id2828193) 4388 0 R (id2828222) 4389 0 R (id2831766) 4395 0 R (id2832094) 4400 0 R (id2832158) 4405 0 R (id2832321) 4410 0 R (id2832376) 4411 0 R (id2832412) 4412 0 R (id2832467) 4417 0 R (id2832499) 4418 0 R (id2832764) 4419 0 R (id2832916) 4425 0 R (id2832952) 4432 0 R (id2832992) 4433 0 R (id2833098) 4435 0 R (id2833126) 4436 0 R (id2833278) 4448 0 R (id2833304) 4450 0 R (id2833411) 4456 0 R (id2833599) 4461 0 R (id2833728) 4466 0 R (id2833926) 4481 0 R (id2833962) 4487 0 R (id2834099) 4489 0 R (id2834117) 4523 0 R (id2834466) 4495 0 R (id2834528) 4496 0 R (id2834642) 4502 0 R (id2834662) 4503 0 R (id2834726) 4504 0 R (id2834803) 4530 0 R (id2834928) 4536 0 R (id2835308) 4509 0 R (id2835338) 4510 0 R (id2835447) 4511 0 R (id2835454) 4512 0 R (id2835469) 4513 0 R (id2835530) 4518 0 R (id2841728) 4573 0 R (id2841765) 4578 0 R (id2841784) 4579 0 R (id2842040) 4587 0 R (id2842061) 4588 0 R (id2842136) 4590 0 R (id2842274) 4600 0 R (id2842352) 4601 0 R (id2842907) 4542 0 R (id2843008) 4543 0 R (id2843199) 4551 0 R (id2843264) 4556 0 R (id2843278) 4557 0 R (id2843301) 4559 0 R (id2843346) 4560 0 R (id2843438) 4565 0 R (id2843454) 4566 0 R (id2843515) 4567 0 R (id2843532) 4602 0 R (id2843592) 4608 0 R (id2843803) 4603 0 R (id2843824) 4617 0 R (id2844048) 4610 0 R (id2844072) 4624 0 R (id2844264) 4611 0 R (id2844336) 4619 0 R (id2844350) 4626 0 R (id2844432) 4629 0 R (id2844635) 4637 0 R (id2844643) 4638 0 R (id2844681) 4643 0 R (id2844760) 4644 0 R (id2844882) 4645 0 R (id2844974) 4650 0 R (id2845065) 4651 0 R (id2845110) 4652 0 R (id2845262) 4657 0 R (id2845592) 4667 0 R (id2845668) 4668 0 R (id2845682) 4669 0 R (id2846062) 4684 0 R (id2849674) 4689 0 R (id2849729) 4690 0 R (id2849861) 4695 0 R (id2850152) 4705 0 R (id2850177) 4706 0 R (id2850206) 4707 0 R (id2850232) 4708 0 R (id2850266) 4709 0 R (id2850287) 4714 0 R (id2850328) 4715 0 R (id2850406) 4716 0 R (id2850449) 4717 0 R (id2850507) 4722 0 R (id2850616) 4727 0 R (id2850630) 4728 0 R (id2850693) 4729 0 R (id2850877) 4734 0 R (id2851107) 4744 0 R (id2851134) 4745 0 R (id2851214) 4750 0 R (id2851244) 4751 0 R (id2851318) 4756 0 R (id2851348) 4757 0 R (id2853401) 4769 0 R (id2853434) 4770 0 R (id2853508) 4771 0 R (id2853528) 4772 0 R (id2853598) 4777 0 R (id2853650) 4778 0 R (id2853702) 4779 0 R (id2853758) 4784 0 R (id2853820) 4785 0 R (id2853860) 4791 0 R (id2853885) 4793 0 R (id2853903) 4794 0 R (id2853928) 4795 0 R (id2854737) 4826 0 R (id2854834) 4800 0 R (id2854863) 4801 0 R (id2854947) 4806 0 R (id2854959) 4807 0 R (id2855044) 4808 0 R (id2855080) 4809 0 R (id2855108) 4810 0 R (id2855248) 4815 0 R (id2855381) 4820 0 R (id2855395) 4821 0 R (id2855980) 4840 0 R (id2856048) 4841 0 R (id2856085) 4846 0 R (id2856156) 4854 0 R (id2856389) 4835 0 R (id2857074) 4855 0 R (id2857404) 4860 0 R (id2857512) 4861 0 R (id2857605) 4866 0 R (id2857674) 4867 0 R (id2857763) 4872 0 R (id2858070) 4883 0 R (id2858173) 4896 0 R (id2858187) 4897 0 R (id2858569) 4902 0 R (id2858898) 4907 0 R (id2859119) 4908 0 R (id2859169) 4914 0 R (id2859220) 4915 0 R (id2859695) 4920 0 R (id2859974) 4925 0 R (id2860139) 4928 0 R (id2860291) 4933 0 R (id2860404) 4934 0 R (id2860475) 4939 0 R (id2860706) 4944 0 R (id2860866) 4950 0 R (id2860961) 4951 0 R (id2861145) 4956 0 R (id2861254) 4961 0 R (id2861582) 4970 0 R (id2861734) 4971 0 R (id2861970) 4976 0 R (id2862131) 4981 0 R (id2862231) 4987 0 R (id2862399) 4992 0 R (id2862603) 4993 0 R (id2862714) 4998 0 R (id2862866) 5003 0 R (id2862886) 5004 0 R (id2863084) 5009 0 R (id2863374) 5014 0 R (id2863469) 5015 0 R (id2863610) 5021 0 R (id2863644) 5022 0 R (id2864080) 5042 0 R (id2864383) 5051 0 R (id2864626) 5052 0 R (id2864725) 5057 0 R (id2865070) 5071 0 R (id2865141) 5072 0 R (id2865163) 5073 0 R (id2865209) 5076 0 R (id2865250) 5081 0 R (id2865269) 5082 0 R (id2865293) 5083 0 R (id2865446) 5091 0 R (id2865775) 5097 0 R (id2865820) 5098 0 R (id2865990) 5104 0 R (id2866004) 5105 0 R (id2866017) 5106 0 R (id2866050) 5107 0 R (id2875244) 5113 0 R (id2875251) 5114 0 R (id2875304) 5116 0 R (id2875358) 5118 0 R (id2875438) 5125 0 R (id2875581) 5129 0 R (id2875663) 5134 0 R (id2875781) 5139 0 R (id2875802) 5140 0 R (id2875828) 5141 0 R (id2875865) 5146 0 R (id2875924) 5147 0 R (id2876084) 5152 0 R (id2876178) 5153 0 R (id2876253) 5160 0 R (id2876298) 5161 0 R (id2876363) 5167 0 R (id2876398) 5162 0 R (id2876486) 5179 0 R (id2876534) 5180 0 R (id2876584) 5189 0 R (id2876614) 5190 0 R (id2876696) 5198 0 R (id2876766) 5203 0 R (id2876856) 5206 0 R (id2876878) 5207 0 R (id2877018) 5216 0 R (id2877205) 5221 0 R (id2877322) 5226 0 R (id2877492) 5227 0 R (id2877542) 5234 0 R (id2877578) 5237 0 R (id2877607) 5244 0 R (id2877680) 5247 0 R (id2877710) 5254 0 R (id2877763) 5264 0 R (id2877837) 5267 0 R (id2877857) 5724 0 R (id2877893) 5268 0 R (id2877942) 5732 0 R (id2877977) 5275 0 R (id2878289) 5280 0 R (id2878402) 5285 0 R (id2878417) 5286 0 R (id2878470) 5287 0 R (id2878524) 5288 0 R (id2878740) 5298 0 R (id2878968) 5299 0 R (id2879019) 5740 0 R (id2879124) 5307 0 R (id2879355) 5312 0 R (id2879483) 5324 0 R (id2879559) 5327 0 R (id2879574) 5328 0 R (id2879613) 5329 0 R (id2879649) 5748 0 R (id2879685) 5336 0 R (id2879707) 5757 0 R (id2879747) 5337 0 R (id2879768) 5338 0 R (id2879897) 5765 0 R (id2879932) 5339 0 R (id2880008) 5344 0 R (id2880063) 5346 0 R (id2880104) 5347 0 R (id2880170) 5352 0 R (id2880187) 5353 0 R (id2880221) 5354 0 R (id2880243) 5355 0 R (id2880269) 5356 0 R (id2880323) 5362 0 R (id2880342) 5363 0 R (id2880433) 5364 0 R (id2880480) 5369 0 R (id2880678) 5376 0 R (id2880736) 5381 0 R (id2880768) 5382 0 R (id2880818) 5388 0 R (id2881040) 5397 0 R (id2881221) 5403 0 R (id2881323) 5408 0 R (id2881549) 5413 0 R (id2881644) 5423 0 R (id2881731) 5427 0 R (id2881766) 5428 0 R (id2881784) 5773 0 R (id2881819) 5433 0 R (id2881931) 5434 0 R (id2882066) 5439 0 R (id2882181) 5444 0 R (id2882294) 5453 0 R (id2882383) 5454 0 R (id2882473) 5459 0 R (id2882635) 5464 0 R (id2882652) 5465 0 R (id2882683) 5466 0 R (id2882745) 5467 0 R (id2882784) 5472 0 R (id2882835) 5473 0 R (id2882873) 5478 0 R (id2882928) 5479 0 R (id2882962) 5480 0 R (id2882995) 5485 0 R (id2883045) 5486 0 R (id2883124) 5492 0 R (id2883189) 5493 0 R (id2883222) 5494 0 R (id2883249) 5499 0 R (id2883267) 5500 0 R (id2883288) 5501 0 R (id2883388) 5506 0 R (id2883491) 5507 0 R (id2883562) 5508 0 R (id2883624) 5509 0 R (id2883682) 5514 0 R (id2883749) 5515 0 R (id2883857) 5523 0 R (id2883912) 5527 0 R (id2883936) 5528 0 R (id2883982) 5535 0 R (id2884048) 5536 0 R (id2884183) 5553 0 R (id2884269) 5559 0 R (id2884351) 5567 0 R (id2884420) 5572 0 R (id2884486) 5575 0 R (id2884947) 5613 0 R (id2884978) 5618 0 R (id2885010) 5619 0 R (id2885051) 5621 0 R (id2885123) 5622 0 R (id2885224) 5627 0 R (id2885295) 5628 0 R (id2885344) 5634 0 R (id2885358) 5635 0 R (id2885552) 5640 0 R (id2885598) 5641 0 R (id2885680) 5642 0 R (id2885741) 5647 0 R (id2885759) 5648 0 R (id2885776) 5649 0 R (id2885811) 5650 0 R (id2885824) 5651 0 R (id2885836) 5652 0 R (id2885850) 5657 0 R (id2885858) 5658 0 R (id2886072) 5663 0 R (id2886378) 5689 0 R (id2887500) 5719 0 R (id2887511) 5780 0 R (id2899670) 5788 0 R (id2899688) 5789 0 R (id2899780) 5794 0 R (id2899786) 5795 0 R (id2899825) 5796 0 R (id2899866) 5797 0 R (id2899948) 5799 0 R (id2899967) 5800 0 R (id2900105) 5806 0 R (id2900149) 5807 0 R (id2900171) 5808 0 R (id2900226) 5811 0 R (id2900257) 5813 0 R (id2901154) 5818 0 R (id2901183) 5819 0 R (id2901255) 5820 0 R (id2901315) 5825 0 R (id2901346) 5826 0 R (id2901373) 5827 0 R (id2901408) 5832 0 R (id2901431) 5833 0 R (id2901567) 5834 0 R (id2901639) 5839 0 R (id2901673) 5840 0 R (id2901701) 5841 0 R (id2901730) 5843 0 R (id2901805) 5848 0 R (id2901898) 5850 0 R (id2901960) 5851 0 R (id2902072) 5857 0 R (id2902280) 5858 0 R (id2902359) 5866 0 R (id2902476) 5867 0 R (id2902530) 5868 0 R (id2902771) 5873 0 R (id2902779) 5875 0 R (id2902941) 5885 0 R (id2903059) 5893 0 R (id2903096) 5894 0 R (id2903202) 5896 0 R (id2903426) 5903 0 R (id2903517) 5912 0 R (id2903536) 5913 0 R (id2905838) 5958 0 R (id2905893) 5959 0 R (id2906029) 5918 0 R (id2906218) 5919 0 R (id2906317) 5924 0 R (id2906335) 5925 0 R (id2906546) 5937 0 R (id2906742) 5951 0 R (id2906776) 5953 0 R (id2907676) 5965 0 R (id2907771) 5966 0 R (id2907880) 5971 0 R (id2907904) 5972 0 R (id2908004) 5973 0 R (id2908156) 5982 0 R (id2908257) 5988 0 R (id2908277) 5989 0 R (id2908298) 5990 0 R (id2908342) 5991 0 R (id2908489) 6005 0 R (id2908503) 6006 0 R (id2909710) 6011 0 R (id2909744) 6012 0 R (id2909785) 6013 0 R (id2909798) 6014 0 R (id2909891) 6019 0 R (id2910000) 6020 0 R (id2910039) 6021 0 R (id2910190) 6026 0 R (id2910198) 6027 0 R (id2910692) 6044 0 R (id2910850) 6045 0 R (id2911361) 6081 0 R (id2911426) 6086 0 R (id2911443) 6087 0 R (id2911612) 6095 0 R (id2911634) 6100 0 R (id2911650) 6101 0 R (id2911691) 6102 0 R (id2911749) 6103 0 R (id2911795) 6108 0 R (id2911815) 6109 0 R (id2911913) 6110 0 R (id2911963) 6111 0 R (id2912313) 6125 0 R (id2912457) 6127 0 R (id2912517) 6129 0 R (id2912712) 6138 0 R (id2913021) 6140 0 R (id2913034) 6141 0 R (id2913097) 6146 0 R (id2913318) 6147 0 R (id2917263) 6158 0 R (id2917531) 6163 0 R (id2917548) 6164 0 R (id2917605) 6169 0 R (id2918219) 6183 0 R (id2918250) 6184 0 R (id2918276) 6185 0 R (id2918521) 6195 0 R (id2918579) 6198 0 R (id2918662) 6203 0 R (id2918695) 6204 0 R (id2918895) 6213 0 R (id2918928) 6214 0 R (id2918963) 6219 0 R (id2918995) 6220 0 R (id2919029) 6221 0 R (id2919043) 6222 0 R (id2921165) 6232 0 R (id2921190) 6233 0 R (id2921235) 6238 0 R (id2921291) 6239 0 R (id2921415) 6244 0 R (id2921460) 6245 0 R (id2921502) 6246 0 R (id2921590) 6251 0 R (id2921738) 6256 0 R (id2921783) 6257 0 R (id2922026) 6267 0 R (id2922059) 6268 0 R (id2922084) 6269 0 R (id2922154) 6274 0 R (id2922170) 6275 0 R (id2922202) 6276 0 R (id2922254) 6277 0 R (id2922798) 6327 0 R (id2922827) 6328 0 R (id2922992) 6302 0 R (id2923017) 6303 0 R (id2923143) 6319 0 R (id2923168) 6321 0 R (id2923372) 6286 0 R (id2923574) 6287 0 R (id2923644) 6289 0 R (id2923744) 6294 0 R (id2923789) 6295 0 R (id2924342) 6333 0 R (id2924395) 6334 0 R (id2924456) 6339 0 R (id2924514) 6340 0 R (id2924559) 6309 0 R (id2924779) 6322 0 R (id2925388) 6386 0 R (id2925422) 6387 0 R (id2925477) 6341 0 R (id2925503) 6347 0 R (id2925840) 6367 0 R (id2925858) 6368 0 R (id2925922) 6370 0 R (id2925995) 6375 0 R (id2926164) 6377 0 R (id2927531) 6425 0 R (id2927781) 6392 0 R (id2927895) 6402 0 R (id2927959) 6404 0 R (id2928064) 6405 0 R (id2928128) 6411 0 R (id2928193) 6412 0 R (id2928241) 6413 0 R (id2928293) 6414 0 R (id2928316) 6415 0 R (id2929391) 6426 0 R (id2929568) 6431 0 R (id2930743) 6465 0 R (id2932367) 6471 0 R (id2932509) 6474 0 R (id2932793) 6479 0 R (id2932838) 6483 0 R (id2932990) 6490 0 R (id2933605) 6521 0 R (id2933612) 6522 0 R (id2933642) 6525 0 R (id2933658) 6526 0 R (id2933729) 6497 0 R (id2933951) 6500 0 R (id2933988) 6502 0 R (id2934130) 6507 0 R (id2934238) 6508 0 R (id2934285) 6509 0 R (id2934938) 6571 0 R (id2934971) 6528 0 R (id2935161) 6540 0 R (id2935210) 6545 0 R (id2935346) 6546 0 R (id2935483) 6551 0 R (id2935563) 6552 0 R (id2935596) 6553 0 R (id2935648) 6558 0 R (id2935740) 6559 0 R (id2935944) 6564 0 R (id2936039) 6565 0 R (id2937123) 6592 0 R (id2937469) 6572 0 R (id2937499) 6574 0 R (id2937670) 6579 0 R (id2937714) 6584 0 R (id2937721) 6585 0 R (id2937746) 6586 0 R (id2937754) 6587 0 R (id2938476) 6598 0 R (id2938483) 6599 0 R (id2938562) 6605 0 R (id2938624) 6609 0 R (id2938720) 6610 0 R (id2938728) 6611 0 R (id2938817) 6612 0 R (id2938848) 6617 0 R (id2938893) 6618 0 R (id2938924) 6620 0 R (id2938941) 6621 0 R (id2938988) 6622 0 R (id2939061) 6628 0 R (id2939085) 6629 0 R (id2939196) 6631 0 R (id2940065) 6661 0 R (id2940225) 6666 0 R (id2940228) 6637 0 R (id2940272) 6638 0 R (id2940347) 6639 0 R (id2940391) 6644 0 R (id2940444) 6645 0 R (id2940467) 6646 0 R (id2940524) 6647 0 R (id2940566) 6648 0 R (id2940587) 6653 0 R (id2940612) 6655 0 R (id2940646) 6656 0 R (id2941876) 6691 0 R (id2941944) 6695 0 R (install) 2948 0 R (integrate-ms-networks) 3028 0 R (introduction) 3862 0 R (locking) 2960 0 R (migration) 6318 0 R (msdfs) 3019 0 R (optional) 4266 0 R (page.1) 2861 0 R (page.10) 3267 0 R (page.100) 4455 0 R (page.101) 4460 0 R (page.102) 4465 0 R (page.103) 4480 0 R (page.104) 4486 0 R (page.105) 4494 0 R (page.106) 4500 0 R (page.107) 4508 0 R (page.108) 4517 0 R (page.109) 4522 0 R (page.11) 3320 0 R (page.110) 4529 0 R (page.111) 4535 0 R (page.112) 4541 0 R (page.113) 4547 0 R (page.114) 4555 0 R (page.115) 4564 0 R (page.116) 4572 0 R (page.117) 4577 0 R (page.118) 4583 0 R (page.119) 4594 0 R (page.12) 3370 0 R (page.120) 4598 0 R (page.121) 4607 0 R (page.122) 4616 0 R (page.123) 4623 0 R (page.124) 4633 0 R (page.125) 4642 0 R (page.126) 4649 0 R (page.127) 4656 0 R (page.128) 4666 0 R (page.129) 4675 0 R (page.13) 3423 0 R (page.130) 4683 0 R (page.131) 4688 0 R (page.132) 4694 0 R (page.133) 4699 0 R (page.134) 4704 0 R (page.135) 4713 0 R (page.136) 4721 0 R (page.137) 4726 0 R (page.138) 4733 0 R (page.139) 4738 0 R (page.14) 3475 0 R (page.140) 4743 0 R (page.141) 4749 0 R (page.142) 4755 0 R (page.143) 4768 0 R (page.144) 4776 0 R (page.145) 4783 0 R (page.146) 4790 0 R (page.147) 4799 0 R (page.148) 4805 0 R (page.149) 4814 0 R (page.15) 3527 0 R (page.150) 4819 0 R (page.151) 4825 0 R (page.152) 4834 0 R (page.153) 4839 0 R (page.154) 4845 0 R (page.155) 4859 0 R (page.156) 4865 0 R (page.157) 4871 0 R (page.158) 4877 0 R (page.159) 4882 0 R (page.16) 3573 0 R (page.160) 4887 0 R (page.161) 4895 0 R (page.162) 4901 0 R (page.163) 4906 0 R (page.164) 4913 0 R (page.165) 4919 0 R (page.166) 4924 0 R (page.167) 4932 0 R (page.168) 4938 0 R (page.169) 4943 0 R (page.17) 3626 0 R (page.170) 4949 0 R (page.171) 4955 0 R (page.172) 4965 0 R (page.173) 4969 0 R (page.174) 4975 0 R (page.175) 4980 0 R (page.176) 4986 0 R (page.177) 4991 0 R (page.178) 4997 0 R (page.179) 5002 0 R (page.18) 3678 0 R (page.180) 5008 0 R (page.181) 5013 0 R (page.182) 5020 0 R (page.183) 5041 0 R (page.184) 5046 0 R (page.185) 5050 0 R (page.186) 5056 0 R (page.187) 5061 0 R (page.188) 5066 0 R (page.189) 5070 0 R (page.19) 3729 0 R (page.190) 5080 0 R (page.191) 5090 0 R (page.192) 5096 0 R (page.193) 5102 0 R (page.194) 5112 0 R (page.195) 5122 0 R (page.196) 5133 0 R (page.197) 5138 0 R (page.198) 5145 0 R (page.199) 5151 0 R (page.2) 2873 0 R (page.20) 3774 0 R (page.200) 5159 0 R (page.201) 5166 0 R (page.202) 5178 0 R (page.203) 5188 0 R (page.204) 5197 0 R (page.205) 5202 0 R (page.206) 5212 0 R (page.207) 5220 0 R (page.208) 5225 0 R (page.209) 5233 0 R (page.21) 3822 0 R (page.210) 5243 0 R (page.211) 5253 0 R (page.212) 5263 0 R (page.213) 5274 0 R (page.214) 5279 0 R (page.215) 5284 0 R (page.216) 5292 0 R (page.217) 5297 0 R (page.218) 5304 0 R (page.219) 5311 0 R (page.22) 3857 0 R (page.220) 5323 0 R (page.221) 5335 0 R (page.222) 5343 0 R (page.223) 5351 0 R (page.224) 5361 0 R (page.225) 5368 0 R (page.226) 5375 0 R (page.227) 5380 0 R (page.228) 5387 0 R (page.229) 5392 0 R (page.23) 3861 0 R (page.230) 5402 0 R (page.231) 5407 0 R (page.232) 5412 0 R (page.233) 5422 0 R (page.234) 5432 0 R (page.235) 5438 0 R (page.236) 5452 0 R (page.237) 5458 0 R (page.238) 5463 0 R (page.239) 5471 0 R (page.24) 3868 0 R (page.240) 5477 0 R (page.241) 5484 0 R (page.242) 5491 0 R (page.243) 5498 0 R (page.244) 5505 0 R (page.245) 5513 0 R (page.246) 5520 0 R (page.247) 5534 0 R (page.248) 5552 0 R (page.249) 5566 0 R (page.25) 3874 0 R (page.250) 5580 0 R (page.251) 5607 0 R (page.252) 5617 0 R (page.253) 5626 0 R (page.254) 5633 0 R (page.255) 5639 0 R (page.256) 5646 0 R (page.257) 5656 0 R (page.258) 5662 0 R (page.259) 5667 0 R (page.26) 3885 0 R (page.260) 5672 0 R (page.261) 5676 0 R (page.262) 5680 0 R (page.263) 5684 0 R (page.264) 5688 0 R (page.265) 5693 0 R (page.266) 5698 0 R (page.267) 5718 0 R (page.268) 5723 0 R (page.269) 5731 0 R (page.27) 3891 0 R (page.270) 5739 0 R (page.271) 5747 0 R (page.272) 5756 0 R (page.273) 5764 0 R (page.274) 5772 0 R (page.275) 5779 0 R (page.276) 5787 0 R (page.277) 5793 0 R (page.278) 5805 0 R (page.279) 5817 0 R (page.28) 3902 0 R (page.280) 5824 0 R (page.281) 5831 0 R (page.282) 5838 0 R (page.283) 5847 0 R (page.284) 5856 0 R (page.285) 5862 0 R (page.286) 5872 0 R (page.287) 5879 0 R (page.288) 5883 0 R (page.289) 5891 0 R (page.29) 3915 0 R (page.290) 5901 0 R (page.291) 5907 0 R (page.292) 5911 0 R (page.293) 5917 0 R (page.294) 5929 0 R (page.295) 5936 0 R (page.296) 5943 0 R (page.297) 5947 0 R (page.298) 5957 0 R (page.299) 5963 0 R (page.3) 2887 0 R (page.30) 3921 0 R (page.300) 5970 0 R (page.301) 5977 0 R (page.302) 5987 0 R (page.303) 6001 0 R (page.304) 6010 0 R (page.305) 6018 0 R (page.306) 6025 0 R (page.307) 6032 0 R (page.308) 6043 0 R (page.309) 6059 0 R (page.31) 3926 0 R (page.310) 6063 0 R (page.311) 6085 0 R (page.312) 6099 0 R (page.313) 6107 0 R (page.314) 6116 0 R (page.315) 6124 0 R (page.316) 6133 0 R (page.317) 6137 0 R (page.318) 6145 0 R (page.319) 6151 0 R (page.32) 3932 0 R (page.320) 6156 0 R (page.321) 6162 0 R (page.322) 6168 0 R (page.323) 6174 0 R (page.324) 6178 0 R (page.325) 6182 0 R (page.326) 6190 0 R (page.327) 6194 0 R (page.328) 6202 0 R (page.329) 6209 0 R (page.33) 3936 0 R (page.330) 6218 0 R (page.331) 6226 0 R (page.332) 6231 0 R (page.333) 6237 0 R (page.334) 6243 0 R (page.335) 6250 0 R (page.336) 6255 0 R (page.337) 6261 0 R (page.338) 6266 0 R (page.339) 6273 0 R (page.34) 3943 0 R (page.340) 6281 0 R (page.341) 6285 0 R (page.342) 6293 0 R (page.343) 6301 0 R (page.344) 6308 0 R (page.345) 6313 0 R (page.346) 6317 0 R (page.347) 6326 0 R (page.348) 6332 0 R (page.349) 6338 0 R (page.35) 3951 0 R (page.350) 6346 0 R (page.351) 6374 0 R (page.352) 6381 0 R (page.353) 6385 0 R (page.354) 6391 0 R (page.355) 6401 0 R (page.356) 6410 0 R (page.357) 6419 0 R (page.358) 6423 0 R (page.359) 6430 0 R (page.36) 3961 0 R (page.360) 6438 0 R (page.361) 6444 0 R (page.362) 6461 0 R (page.363) 6470 0 R (page.364) 6478 0 R (page.365) 6489 0 R (page.366) 6496 0 R (page.367) 6506 0 R (page.368) 6514 0 R (page.369) 6518 0 R (page.37) 3979 0 R (page.370) 6537 0 R (page.371) 6550 0 R (page.372) 6557 0 R (page.373) 6563 0 R (page.374) 6570 0 R (page.375) 6578 0 R (page.376) 6583 0 R (page.377) 6591 0 R (page.378) 6604 0 R (page.379) 6616 0 R (page.38) 3989 0 R (page.380) 6627 0 R (page.381) 6636 0 R (page.382) 6643 0 R (page.383) 6652 0 R (page.384) 6660 0 R (page.385) 6665 0 R (page.39) 3998 0 R (page.4) 2965 0 R (page.40) 4004 0 R (page.41) 4012 0 R (page.42) 4017 0 R (page.43) 4024 0 R (page.44) 4032 0 R (page.45) 4037 0 R (page.46) 4045 0 R (page.47) 4053 0 R (page.48) 4057 0 R (page.49) 4066 0 R (page.5) 3040 0 R (page.50) 4073 0 R (page.51) 4085 0 R (page.52) 4093 0 R (page.53) 4100 0 R (page.54) 4107 0 R (page.55) 4113 0 R (page.56) 4122 0 R (page.57) 4129 0 R (page.58) 4137 0 R (page.59) 4142 0 R (page.6) 3070 0 R (page.60) 4148 0 R (page.61) 4154 0 R (page.62) 4167 0 R (page.63) 4179 0 R (page.64) 4191 0 R (page.65) 4199 0 R (page.66) 4207 0 R (page.67) 4219 0 R (page.68) 4228 0 R (page.69) 4232 0 R (page.7) 3109 0 R (page.70) 4238 0 R (page.71) 4250 0 R (page.72) 4255 0 R (page.73) 4260 0 R (page.74) 4265 0 R (page.75) 4271 0 R (page.76) 4276 0 R (page.77) 4283 0 R (page.78) 4295 0 R (page.79) 4300 0 R (page.8) 3162 0 R (page.80) 4306 0 R (page.81) 4312 0 R (page.82) 4324 0 R (page.83) 4331 0 R (page.84) 4336 0 R (page.85) 4343 0 R (page.86) 4350 0 R (page.87) 4356 0 R (page.88) 4362 0 R (page.89) 4367 0 R (page.9) 3212 0 R (page.90) 4375 0 R (page.91) 4386 0 R (page.92) 4394 0 R (page.93) 4399 0 R (page.94) 4404 0 R (page.95) 4409 0 R (page.96) 4416 0 R (page.97) 4423 0 R (page.98) 4431 0 R (page.99) 4440 0 R (pam) 3027 0 R (part.1) 6 0 R (part.2) 98 0 R (part.3) 454 0 R (part.4) 2418 0 R (part.5) 2534 0 R (part.6) 2610 0 R (passdb) 2957 0 R (printing) 3020 0 R (problems) 3036 0 R (samba-bdc) 2952 0 R (samba-pdc) 2951 0 R (section*.2) 5874 0 R (section*.3) 5884 0 R (section*.4) 5892 0 R (section*.5) 5895 0 R (section*.6) 5902 0 R (section.1.1) 14 0 R (section.1.2) 18 0 R (section.1.3) 22 0 R (section.1.4) 26 0 R (section.1.5) 30 0 R (section.1.6) 34 0 R (section.10.1) 462 0 R (section.10.2) 466 0 R (section.10.3) 470 0 R (section.10.4) 486 0 R (section.10.5) 522 0 R (section.10.6) 538 0 R (section.10.7) 550 0 R (section.10.8) 570 0 R (section.11.1) 586 0 R (section.11.2) 590 0 R (section.11.3) 610 0 R (section.11.4) 622 0 R (section.11.5) 706 0 R (section.12.1) 726 0 R (section.12.2) 730 0 R (section.12.3) 738 0 R (section.12.4) 750 0 R (section.13.1) 766 0 R (section.13.2) 770 0 R (section.13.3) 786 0 R (section.13.4) 802 0 R (section.13.5) 818 0 R (section.13.6) 858 0 R (section.14.1) 874 0 R (section.14.2) 878 0 R (section.14.3) 922 0 R (section.14.4) 938 0 R (section.14.5) 950 0 R (section.14.6) 954 0 R (section.14.7) 962 0 R (section.15.1) 970 0 R (section.15.2) 974 0 R (section.15.3) 978 0 R (section.15.4) 1006 0 R (section.15.5) 1010 0 R (section.16.1) 1026 0 R (section.16.2) 1030 0 R (section.16.3) 1034 0 R (section.16.4) 1046 0 R (section.16.5) 1058 0 R (section.17.1) 1070 0 R (section.17.2) 1074 0 R (section.18.1) 1082 0 R (section.18.10) 1278 0 R (section.18.11) 1298 0 R (section.18.12) 1302 0 R (section.18.13) 1306 0 R (section.18.14) 1310 0 R (section.18.15) 1314 0 R (section.18.2) 1086 0 R (section.18.3) 1110 0 R (section.18.4) 1122 0 R (section.18.5) 1126 0 R (section.18.6) 1154 0 R (section.18.7) 1178 0 R (section.18.8) 1226 0 R (section.18.9) 1246 0 R (section.19.1) 1330 0 R (section.19.10) 1558 0 R (section.19.11) 1626 0 R (section.19.12) 1714 0 R (section.19.13) 1734 0 R (section.19.14) 1778 0 R (section.19.15) 1810 0 R (section.19.16) 1814 0 R (section.19.17) 1830 0 R (section.19.18) 1834 0 R (section.19.19) 1850 0 R (section.19.2) 1342 0 R (section.19.3) 1358 0 R (section.19.4) 1382 0 R (section.19.5) 1418 0 R (section.19.6) 1498 0 R (section.19.7) 1514 0 R (section.19.8) 1526 0 R (section.19.9) 1538 0 R (section.2.1) 42 0 R (section.2.2) 46 0 R (section.2.3) 62 0 R (section.2.4) 66 0 R (section.2.5) 70 0 R (section.2.6) 74 0 R (section.2.7) 78 0 R (section.20.1) 1874 0 R (section.20.2) 1878 0 R (section.20.3) 1882 0 R (section.20.4) 1906 0 R (section.20.5) 1918 0 R (section.21.1) 1926 0 R (section.21.2) 1930 0 R (section.21.3) 1934 0 R (section.21.4) 1942 0 R (section.21.5) 1970 0 R (section.21.6) 2018 0 R (section.21.7) 2022 0 R (section.22.1) 2030 0 R (section.22.2) 2034 0 R (section.22.3) 2038 0 R (section.22.4) 2046 0 R (section.22.5) 2054 0 R (section.23.1) 2062 0 R (section.23.2) 2066 0 R (section.23.3) 2090 0 R (section.23.4) 2106 0 R (section.23.5) 2110 0 R (section.24.1) 2122 0 R (section.24.2) 2126 0 R (section.24.3) 2190 0 R (section.24.4) 2194 0 R (section.24.5) 2198 0 R (section.24.6) 2218 0 R (section.25.1) 2238 0 R (section.25.2) 2242 0 R (section.25.3) 2294 0 R (section.26.1) 2306 0 R (section.26.2) 2310 0 R (section.26.3) 2314 0 R (section.26.4) 2334 0 R (section.26.5) 2358 0 R (section.27.1) 2378 0 R (section.27.2) 2382 0 R (section.27.3) 2386 0 R (section.27.4) 2390 0 R (section.27.5) 2394 0 R (section.28.1) 2402 0 R (section.28.2) 2406 0 R (section.29.1) 2414 0 R (section.3.1) 94 0 R (section.30.1) 2426 0 R (section.30.2) 2430 0 R (section.30.3) 2434 0 R (section.31.1) 2442 0 R (section.31.2) 2474 0 R (section.32.1) 2490 0 R (section.33.1) 2542 0 R (section.33.2) 2546 0 R (section.33.3) 2550 0 R (section.33.4) 2554 0 R (section.34.1) 2562 0 R (section.34.2) 2566 0 R (section.34.3) 2570 0 R (section.34.4) 2574 0 R (section.34.5) 2578 0 R (section.35.1) 2586 0 R (section.35.2) 2590 0 R (section.35.3) 2594 0 R (section.35.4) 2598 0 R (section.35.5) 2602 0 R (section.35.6) 2606 0 R (section.36.1) 2618 0 R (section.36.2) 2638 0 R (section.36.3) 2642 0 R (section.36.4) 2646 0 R (section.36.5) 2662 0 R (section.36.6) 2674 0 R (section.37.1) 2682 0 R (section.37.2) 2686 0 R (section.37.3) 2690 0 R (section.37.4) 2694 0 R (section.37.5) 2698 0 R (section.37.6) 2706 0 R (section.38.1) 2722 0 R (section.38.2) 2726 0 R (section.38.3) 2742 0 R (section.38.4) 2770 0 R (section.38.5) 2778 0 R (section.38.6) 2782 0 R (section.39.1) 2790 0 R (section.39.10) 2826 0 R (section.39.11) 2830 0 R (section.39.2) 2794 0 R (section.39.3) 2798 0 R (section.39.4) 2802 0 R (section.39.5) 2806 0 R (section.39.6) 2810 0 R (section.39.7) 2814 0 R (section.39.8) 2818 0 R (section.39.9) 2822 0 R (section.4.1) 106 0 R (section.4.2) 110 0 R (section.4.3) 114 0 R (section.4.4) 158 0 R (section.4.5) 162 0 R (section.40.1) 2838 0 R (section.41.1) 2846 0 R (section.41.2) 2850 0 R (section.41.3) 2854 0 R (section.5.1) 186 0 R (section.5.2) 190 0 R (section.5.3) 202 0 R (section.5.4) 206 0 R (section.5.5) 210 0 R (section.5.6) 234 0 R (section.6.1) 266 0 R (section.6.2) 270 0 R (section.6.3) 294 0 R (section.6.4) 302 0 R (section.7.1) 326 0 R (section.7.2) 330 0 R (section.7.3) 362 0 R (section.7.4) 374 0 R (section.7.5) 406 0 R (section.8.1) 422 0 R (section.8.2) 426 0 R (section.8.3) 430 0 R (section.8.4) 442 0 R (section.9.1) 450 0 R (securing-samba) 2961 0 R (speed) 3064 0 R (subfigure.19.1.1) 5168 0 R (subfigure.19.10.1) 5741 0 R (subfigure.19.11.1) 5749 0 R (subfigure.19.12.1) 5758 0 R (subfigure.19.13.1) 5766 0 R (subfigure.19.14.1) 5774 0 R (subfigure.19.15.1) 5781 0 R (subfigure.19.2.1) 5181 0 R (subfigure.19.3.1) 5191 0 R (subfigure.19.4.1) 5235 0 R (subfigure.19.5.1) 5245 0 R (subfigure.19.6.1) 5255 0 R (subfigure.19.7.1) 5265 0 R (subfigure.19.8.1) 5725 0 R (subfigure.19.9.1) 5733 0 R (subsection.10.3.1) 474 0 R (subsection.10.3.2) 478 0 R (subsection.10.3.3) 482 0 R (subsection.10.4.1) 490 0 R (subsection.10.4.2) 494 0 R (subsection.10.4.3) 498 0 R (subsection.10.4.4) 502 0 R (subsection.10.4.5) 506 0 R (subsection.10.4.6) 510 0 R (subsection.10.4.7) 514 0 R (subsection.10.4.8) 518 0 R (subsection.10.5.1) 526 0 R (subsection.10.5.2) 530 0 R (subsection.10.5.3) 534 0 R (subsection.10.6.1) 542 0 R (subsection.10.6.2) 546 0 R (subsection.10.7.1) 554 0 R (subsection.10.7.2) 558 0 R (subsection.10.7.3) 562 0 R (subsection.10.8.1) 574 0 R (subsection.10.8.2) 578 0 R (subsection.11.2.1) 594 0 R (subsection.11.2.2) 606 0 R (subsection.11.3.1) 614 0 R (subsection.11.3.2) 618 0 R (subsection.11.4.1) 626 0 R (subsection.11.4.2) 630 0 R (subsection.11.4.3) 634 0 R (subsection.11.4.4) 638 0 R (subsection.11.4.5) 682 0 R (subsection.11.4.6) 702 0 R (subsection.11.5.1) 710 0 R (subsection.11.5.2) 714 0 R (subsection.11.5.3) 718 0 R (subsection.12.2.1) 734 0 R (subsection.12.3.1) 742 0 R (subsection.12.3.2) 746 0 R (subsection.12.4.1) 754 0 R (subsection.12.4.2) 758 0 R (subsection.13.2.1) 774 0 R (subsection.13.2.2) 778 0 R (subsection.13.2.3) 782 0 R (subsection.13.3.1) 790 0 R (subsection.13.3.2) 794 0 R (subsection.13.3.3) 798 0 R (subsection.13.4.1) 806 0 R (subsection.13.5.1) 822 0 R (subsection.13.5.2) 826 0 R (subsection.13.5.3) 830 0 R (subsection.13.5.4) 834 0 R (subsection.13.5.5) 846 0 R (subsection.13.5.6) 850 0 R (subsection.13.5.7) 854 0 R (subsection.13.6.1) 862 0 R (subsection.13.6.2) 866 0 R (subsection.14.2.1) 882 0 R (subsection.14.3.1) 926 0 R (subsection.14.4.1) 942 0 R (subsection.14.4.2) 946 0 R (subsection.14.6.1) 958 0 R (subsection.15.3.1) 982 0 R (subsection.15.3.2) 986 0 R (subsection.15.3.3) 990 0 R (subsection.15.3.4) 994 0 R (subsection.15.3.5) 998 0 R (subsection.15.3.6) 1002 0 R (subsection.15.5.1) 1014 0 R (subsection.15.5.2) 1018 0 R (subsection.16.3.1) 1038 0 R (subsection.16.3.2) 1042 0 R (subsection.16.4.1) 1050 0 R (subsection.16.4.2) 1054 0 R (subsection.16.5.1) 1062 0 R (subsection.18.10.1) 1282 0 R (subsection.18.10.2) 1286 0 R (subsection.18.10.3) 1290 0 R (subsection.18.10.4) 1294 0 R (subsection.18.15.1) 1318 0 R (subsection.18.15.2) 1322 0 R (subsection.18.2.1) 1090 0 R (subsection.18.2.2) 1094 0 R (subsection.18.2.3) 1098 0 R (subsection.18.2.4) 1102 0 R (subsection.18.2.5) 1106 0 R (subsection.18.3.1) 1114 0 R (subsection.18.3.2) 1118 0 R (subsection.18.5.1) 1130 0 R (subsection.18.5.2) 1134 0 R (subsection.18.5.3) 1138 0 R (subsection.18.5.4) 1142 0 R (subsection.18.5.5) 1146 0 R (subsection.18.5.6) 1150 0 R (subsection.18.6.1) 1158 0 R (subsection.18.6.2) 1162 0 R (subsection.18.6.3) 1166 0 R (subsection.18.6.4) 1170 0 R (subsection.18.6.5) 1174 0 R (subsection.18.7.1) 1182 0 R (subsection.18.7.2) 1186 0 R (subsection.18.8.1) 1230 0 R (subsection.18.8.2) 1234 0 R (subsection.18.8.3) 1238 0 R (subsection.18.8.4) 1242 0 R (subsection.18.9.1) 1250 0 R (subsection.18.9.2) 1254 0 R (subsection.18.9.3) 1258 0 R (subsection.18.9.4) 1262 0 R (subsection.18.9.5) 1266 0 R (subsection.18.9.6) 1270 0 R (subsection.18.9.7) 1274 0 R (subsection.19.1.1) 1334 0 R (subsection.19.1.2) 1338 0 R (subsection.19.10.1) 1562 0 R (subsection.19.10.10) 1598 0 R (subsection.19.10.11) 1602 0 R (subsection.19.10.12) 1606 0 R (subsection.19.10.13) 1610 0 R (subsection.19.10.14) 1614 0 R (subsection.19.10.15) 1618 0 R (subsection.19.10.16) 1622 0 R (subsection.19.10.2) 1566 0 R (subsection.19.10.3) 1570 0 R (subsection.19.10.4) 1574 0 R (subsection.19.10.5) 1578 0 R (subsection.19.10.6) 1582 0 R (subsection.19.10.7) 1586 0 R (subsection.19.10.8) 1590 0 R (subsection.19.10.9) 1594 0 R (subsection.19.11.1) 1630 0 R (subsection.19.11.2) 1634 0 R (subsection.19.11.3) 1638 0 R (subsection.19.11.4) 1642 0 R (subsection.19.11.5) 1646 0 R (subsection.19.11.6) 1710 0 R (subsection.19.12.1) 1718 0 R (subsection.19.12.2) 1722 0 R (subsection.19.12.3) 1726 0 R (subsection.19.12.4) 1730 0 R (subsection.19.13.1) 1738 0 R (subsection.19.13.2) 1774 0 R (subsection.19.14.1) 1782 0 R (subsection.19.14.2) 1786 0 R (subsection.19.14.3) 1790 0 R (subsection.19.14.4) 1794 0 R (subsection.19.14.5) 1798 0 R (subsection.19.14.6) 1802 0 R (subsection.19.14.7) 1806 0 R (subsection.19.16.1) 1818 0 R (subsection.19.16.2) 1822 0 R (subsection.19.16.3) 1826 0 R (subsection.19.18.1) 1838 0 R (subsection.19.18.2) 1842 0 R (subsection.19.18.3) 1846 0 R (subsection.19.19.1) 1854 0 R (subsection.19.19.2) 1858 0 R (subsection.19.19.3) 1862 0 R (subsection.19.19.4) 1866 0 R (subsection.19.2.1) 1346 0 R (subsection.19.2.2) 1350 0 R (subsection.19.2.3) 1354 0 R (subsection.19.3.1) 1362 0 R (subsection.19.3.2) 1366 0 R (subsection.19.3.3) 1370 0 R (subsection.19.3.4) 1374 0 R (subsection.19.3.5) 1378 0 R (subsection.19.4.1) 1386 0 R (subsection.19.4.2) 1390 0 R (subsection.19.4.3) 1394 0 R (subsection.19.4.4) 1398 0 R (subsection.19.4.5) 1402 0 R (subsection.19.4.6) 1406 0 R (subsection.19.4.7) 1410 0 R (subsection.19.4.8) 1414 0 R (subsection.19.5.1) 1422 0 R (subsection.19.5.10) 1458 0 R (subsection.19.5.11) 1462 0 R (subsection.19.5.12) 1466 0 R (subsection.19.5.13) 1470 0 R (subsection.19.5.14) 1474 0 R (subsection.19.5.15) 1478 0 R (subsection.19.5.16) 1482 0 R (subsection.19.5.17) 1486 0 R (subsection.19.5.18) 1490 0 R (subsection.19.5.19) 1494 0 R (subsection.19.5.2) 1426 0 R (subsection.19.5.3) 1430 0 R (subsection.19.5.4) 1434 0 R (subsection.19.5.5) 1438 0 R (subsection.19.5.6) 1442 0 R (subsection.19.5.7) 1446 0 R (subsection.19.5.8) 1450 0 R (subsection.19.5.9) 1454 0 R (subsection.19.6.1) 1502 0 R (subsection.19.6.2) 1506 0 R (subsection.19.6.3) 1510 0 R (subsection.19.7.1) 1518 0 R (subsection.19.7.2) 1522 0 R (subsection.19.8.1) 1530 0 R (subsection.19.8.2) 1534 0 R (subsection.19.9.1) 1542 0 R (subsection.19.9.2) 1546 0 R (subsection.19.9.3) 1550 0 R (subsection.19.9.4) 1554 0 R (subsection.2.2.1) 50 0 R (subsection.2.2.2) 58 0 R (subsection.2.7.1) 82 0 R (subsection.2.7.2) 86 0 R (subsection.20.3.1) 1886 0 R (subsection.20.3.2) 1890 0 R (subsection.20.3.3) 1894 0 R (subsection.20.3.4) 1898 0 R (subsection.20.3.5) 1902 0 R (subsection.20.4.1) 1910 0 R (subsection.20.4.2) 1914 0 R (subsection.21.3.1) 1938 0 R (subsection.21.4.1) 1946 0 R (subsection.21.4.2) 1950 0 R (subsection.21.4.3) 1954 0 R (subsection.21.4.4) 1958 0 R (subsection.21.4.5) 1962 0 R (subsection.21.4.6) 1966 0 R (subsection.21.5.1) 1974 0 R (subsection.21.5.2) 1978 0 R (subsection.21.5.3) 1982 0 R (subsection.22.3.1) 2042 0 R (subsection.22.4.1) 2050 0 R (subsection.23.2.1) 2070 0 R (subsection.23.2.2) 2074 0 R (subsection.23.2.3) 2082 0 R (subsection.23.3.1) 2094 0 R (subsection.23.3.2) 2098 0 R (subsection.23.3.3) 2102 0 R (subsection.23.5.1) 2114 0 R (subsection.24.2.1) 2130 0 R (subsection.24.2.2) 2150 0 R (subsection.24.2.3) 2166 0 R (subsection.24.2.4) 2170 0 R (subsection.24.5.1) 2202 0 R (subsection.24.5.2) 2210 0 R (subsection.24.5.3) 2214 0 R (subsection.24.6.1) 2222 0 R (subsection.24.6.2) 2226 0 R (subsection.24.6.3) 2230 0 R (subsection.25.2.1) 2246 0 R (subsection.25.2.2) 2254 0 R (subsection.25.2.3) 2266 0 R (subsection.25.2.4) 2270 0 R (subsection.25.2.5) 2274 0 R (subsection.25.3.1) 2298 0 R (subsection.26.3.1) 2318 0 R (subsection.26.3.2) 2322 0 R (subsection.26.3.3) 2326 0 R (subsection.26.3.4) 2330 0 R (subsection.26.4.1) 2338 0 R (subsection.26.4.2) 2342 0 R (subsection.26.4.3) 2346 0 R (subsection.26.4.4) 2350 0 R (subsection.26.4.5) 2354 0 R (subsection.26.5.1) 2362 0 R (subsection.26.5.2) 2366 0 R (subsection.26.5.3) 2370 0 R (subsection.31.1.1) 2446 0 R (subsection.31.1.2) 2470 0 R (subsection.31.2.1) 2478 0 R (subsection.31.2.2) 2482 0 R (subsection.32.1.1) 2494 0 R (subsection.32.1.10) 2530 0 R (subsection.32.1.2) 2498 0 R (subsection.32.1.3) 2502 0 R (subsection.32.1.4) 2506 0 R (subsection.32.1.5) 2510 0 R (subsection.32.1.6) 2514 0 R (subsection.32.1.7) 2518 0 R (subsection.32.1.8) 2522 0 R (subsection.32.1.9) 2526 0 R (subsection.36.1.1) 2622 0 R (subsection.36.1.2) 2626 0 R (subsection.36.4.1) 2650 0 R (subsection.36.5.1) 2666 0 R (subsection.36.5.2) 2670 0 R (subsection.37.5.1) 2702 0 R (subsection.37.6.1) 2710 0 R (subsection.37.6.2) 2714 0 R (subsection.38.2.1) 2730 0 R (subsection.38.2.2) 2734 0 R (subsection.38.2.3) 2738 0 R (subsection.38.3.1) 2746 0 R (subsection.38.3.2) 2750 0 R (subsection.38.3.3) 2754 0 R (subsection.38.3.4) 2758 0 R (subsection.38.3.5) 2762 0 R (subsection.38.3.6) 2766 0 R (subsection.38.4.1) 2774 0 R (subsection.4.3.1) 118 0 R (subsection.4.3.2) 126 0 R (subsection.4.3.3) 134 0 R (subsection.4.3.4) 142 0 R (subsection.4.3.5) 150 0 R (subsection.4.5.1) 166 0 R (subsection.4.5.2) 170 0 R (subsection.4.5.3) 174 0 R (subsection.4.5.4) 178 0 R (subsection.5.2.1) 194 0 R (subsection.5.2.2) 198 0 R (subsection.5.5.1) 214 0 R (subsection.5.5.2) 230 0 R (subsection.5.6.1) 238 0 R (subsection.5.6.2) 242 0 R (subsection.5.6.3) 246 0 R (subsection.5.6.4) 250 0 R (subsection.5.6.5) 254 0 R (subsection.5.6.6) 258 0 R (subsection.6.2.1) 274 0 R (subsection.6.2.2) 282 0 R (subsection.6.2.3) 286 0 R (subsection.6.2.4) 290 0 R (subsection.6.3.1) 298 0 R (subsection.6.4.1) 306 0 R (subsection.6.4.2) 310 0 R (subsection.6.4.3) 314 0 R (subsection.6.4.4) 318 0 R (subsection.7.2.1) 334 0 R (subsection.7.2.2) 338 0 R (subsection.7.2.3) 342 0 R (subsection.7.2.4) 346 0 R (subsection.7.3.1) 366 0 R (subsection.7.3.2) 370 0 R (subsection.7.4.1) 378 0 R (subsection.7.4.2) 382 0 R (subsection.7.4.3) 386 0 R (subsection.7.4.4) 394 0 R (subsection.7.4.5) 398 0 R (subsection.7.4.6) 402 0 R (subsection.7.5.1) 410 0 R (subsection.7.5.2) 414 0 R (subsection.8.3.1) 434 0 R (subsection.8.3.2) 438 0 R (subsubsection.10.7.3.1) 566 0 R (subsubsection.11.2.1.1) 598 0 R (subsubsection.11.2.1.2) 602 0 R (subsubsection.11.4.4.1) 642 0 R (subsubsection.11.4.4.10) 678 0 R (subsubsection.11.4.4.2) 646 0 R (subsubsection.11.4.4.3) 650 0 R (subsubsection.11.4.4.4) 654 0 R (subsubsection.11.4.4.5) 658 0 R (subsubsection.11.4.4.6) 662 0 R (subsubsection.11.4.4.7) 666 0 R (subsubsection.11.4.4.8) 670 0 R (subsubsection.11.4.4.9) 674 0 R (subsubsection.11.4.5.1) 686 0 R (subsubsection.11.4.5.2) 690 0 R (subsubsection.11.4.5.3) 694 0 R (subsubsection.11.4.5.4) 698 0 R (subsubsection.13.4.1.1) 810 0 R (subsubsection.13.4.1.2) 814 0 R (subsubsection.13.5.4.1) 838 0 R (subsubsection.13.5.4.2) 842 0 R (subsubsection.14.2.1.1) 886 0 R (subsubsection.14.2.1.2) 890 0 R (subsubsection.14.2.1.3) 894 0 R (subsubsection.14.2.1.4) 898 0 R (subsubsection.14.2.1.5) 902 0 R (subsubsection.14.2.1.6) 906 0 R (subsubsection.14.2.1.7) 910 0 R (subsubsection.14.2.1.8) 914 0 R (subsubsection.14.2.1.9) 918 0 R (subsubsection.14.3.1.1) 930 0 R (subsubsection.14.3.1.2) 934 0 R (subsubsection.18.7.2.1) 1190 0 R (subsubsection.18.7.2.2) 1194 0 R (subsubsection.18.7.2.3) 1198 0 R (subsubsection.18.7.2.4) 1202 0 R (subsubsection.18.7.2.5) 1206 0 R (subsubsection.18.7.2.6) 1210 0 R (subsubsection.18.7.2.7) 1214 0 R (subsubsection.18.7.2.8) 1218 0 R (subsubsection.18.7.2.9) 1222 0 R (subsubsection.19.11.5.1) 1650 0 R (subsubsection.19.11.5.10) 1686 0 R (subsubsection.19.11.5.11) 1690 0 R (subsubsection.19.11.5.12) 1694 0 R (subsubsection.19.11.5.13) 1698 0 R (subsubsection.19.11.5.14) 1702 0 R (subsubsection.19.11.5.15) 1706 0 R (subsubsection.19.11.5.2) 1654 0 R (subsubsection.19.11.5.3) 1658 0 R (subsubsection.19.11.5.4) 1662 0 R (subsubsection.19.11.5.5) 1666 0 R (subsubsection.19.11.5.6) 1670 0 R (subsubsection.19.11.5.7) 1674 0 R (subsubsection.19.11.5.8) 1678 0 R (subsubsection.19.11.5.9) 1682 0 R (subsubsection.19.13.1.1) 1742 0 R (subsubsection.19.13.1.2) 1746 0 R (subsubsection.19.13.1.3) 1750 0 R (subsubsection.19.13.1.4) 1754 0 R (subsubsection.19.13.1.5) 1758 0 R (subsubsection.19.13.1.6) 1762 0 R (subsubsection.19.13.1.7) 1766 0 R (subsubsection.19.13.1.8) 1770 0 R (subsubsection.2.2.1.1) 54 0 R (subsubsection.21.5.3.1) 1986 0 R (subsubsection.21.5.3.2) 1990 0 R (subsubsection.21.5.3.3) 1994 0 R (subsubsection.21.5.3.4) 1998 0 R (subsubsection.21.5.3.5) 2002 0 R (subsubsection.21.5.3.6) 2006 0 R (subsubsection.21.5.3.7) 2010 0 R (subsubsection.21.5.3.8) 2014 0 R (subsubsection.23.2.2.1) 2078 0 R (subsubsection.23.2.3.1) 2086 0 R (subsubsection.24.2.1.1) 2134 0 R (subsubsection.24.2.1.2) 2138 0 R (subsubsection.24.2.1.3) 2142 0 R (subsubsection.24.2.1.4) 2146 0 R (subsubsection.24.2.2.1) 2154 0 R (subsubsection.24.2.2.2) 2158 0 R (subsubsection.24.2.2.3) 2162 0 R (subsubsection.24.2.4.1) 2174 0 R (subsubsection.24.2.4.2) 2178 0 R (subsubsection.24.2.4.3) 2182 0 R (subsubsection.24.2.4.4) 2186 0 R (subsubsection.24.5.1.1) 2206 0 R (subsubsection.25.2.1.1) 2250 0 R (subsubsection.25.2.2.1) 2258 0 R (subsubsection.25.2.2.2) 2262 0 R (subsubsection.25.2.5.1) 2278 0 R (subsubsection.25.2.5.2) 2282 0 R (subsubsection.25.2.5.3) 2286 0 R (subsubsection.25.2.5.4) 2290 0 R (subsubsection.31.1.1.1) 2450 0 R (subsubsection.31.1.1.2) 2454 0 R (subsubsection.31.1.1.3) 2458 0 R (subsubsection.31.1.1.4) 2462 0 R (subsubsection.31.1.1.5) 2466 0 R (subsubsection.36.1.2.1) 2630 0 R (subsubsection.36.1.2.2) 2634 0 R (subsubsection.36.4.1.1) 2654 0 R (subsubsection.36.4.1.2) 2658 0 R (subsubsection.4.3.1.1) 122 0 R (subsubsection.4.3.2.1) 130 0 R (subsubsection.4.3.3.1) 138 0 R (subsubsection.4.3.4.1) 146 0 R (subsubsection.4.3.5.1) 154 0 R (subsubsection.5.5.1.1) 218 0 R (subsubsection.5.5.1.2) 222 0 R (subsubsection.5.5.1.3) 226 0 R (subsubsection.6.2.1.1) 278 0 R (subsubsection.7.2.4.1) 350 0 R (subsubsection.7.2.4.2) 354 0 R (subsubsection.7.2.4.3) 358 0 R (subsubsection.7.4.3.1) 390 0 R (table.10.1) 4369 0 R (table.10.2) 4371 0 R (table.10.3) 4377 0 R (table.10.4) 4379 0 R (table.11.1) 4524 0 R (table.11.2) 4531 0 R (table.11.3) 4537 0 R (table.13.1) 4589 0 R (table.13.2) 4609 0 R (table.13.3) 4618 0 R (table.13.4) 4625 0 R (table.20.1) 5798 0 R (table.24.1) 6126 0 R (table.24.2) 6128 0 R (table.24.3) 6139 0 R (table.25.1) 6205 0 R (table.31.1) 6369 0 R (table.31.2) 6376 0 R (table.7.1) 4183 0 R (troubleshooting) 6424 0 R (type) 3937 0 R (unicode) 3029 0 R (upgrading-to-3.0) 3032 0 R (winbind) 3023 0 R (winbind-solaris9) 5887 0 R] +/Names [(AccessControls) 2959 0 R (AdvancedNetworkManagement) 3024 0 R (Appendixes) 6519 0 R (Backup) 3030 0 R (CUPS-printing) 3021 0 R (ClientConfig) 2955 0 R (DNSDHCP) 3065 0 R (Doc-Start) 2862 0 R (FastStart) 2949 0 R (Further-Resources) 3066 0 R (InterdomainTrusts) 3018 0 R (IntroSMB) 2947 0 R (Item.1) 3946 0 R (Item.10) 4079 0 R (Item.100) 5705 0 R (Item.101) 5706 0 R (Item.102) 5707 0 R (Item.103) 5708 0 R (Item.104) 5709 0 R (Item.105) 5710 0 R (Item.106) 5711 0 R (Item.107) 5712 0 R (Item.108) 5713 0 R (Item.109) 5978 0 R (Item.11) 4080 0 R (Item.110) 5979 0 R (Item.111) 5980 0 R (Item.112) 5981 0 R (Item.113) 5992 0 R (Item.114) 5993 0 R (Item.115) 5994 0 R (Item.116) 5995 0 R (Item.117) 5996 0 R (Item.118) 5997 0 R (Item.119) 6002 0 R (Item.12) 4157 0 R (Item.120) 6003 0 R (Item.121) 6004 0 R (Item.122) 6028 0 R (Item.123) 6033 0 R (Item.124) 6034 0 R (Item.125) 6035 0 R (Item.126) 6036 0 R (Item.127) 6037 0 R (Item.128) 6038 0 R (Item.129) 6046 0 R (Item.13) 4158 0 R (Item.130) 6047 0 R (Item.131) 6048 0 R (Item.132) 6049 0 R (Item.133) 6050 0 R (Item.134) 6051 0 R (Item.135) 6052 0 R (Item.136) 6053 0 R (Item.137) 6054 0 R (Item.138) 6055 0 R (Item.139) 6064 0 R (Item.14) 4159 0 R (Item.140) 6065 0 R (Item.141) 6066 0 R (Item.142) 6067 0 R (Item.143) 6068 0 R (Item.144) 6069 0 R (Item.145) 6070 0 R (Item.146) 6071 0 R (Item.147) 6072 0 R (Item.148) 6073 0 R (Item.149) 6074 0 R (Item.15) 4160 0 R (Item.150) 6075 0 R (Item.151) 6076 0 R (Item.152) 6077 0 R (Item.153) 6078 0 R (Item.154) 6079 0 R (Item.155) 6080 0 R (Item.156) 6088 0 R (Item.157) 6089 0 R (Item.158) 6090 0 R (Item.159) 6091 0 R (Item.16) 4161 0 R (Item.160) 6092 0 R (Item.161) 6093 0 R (Item.162) 6094 0 R (Item.163) 6117 0 R (Item.164) 6118 0 R (Item.165) 6119 0 R (Item.166) 6120 0 R (Item.167) 6348 0 R (Item.168) 6349 0 R (Item.169) 6350 0 R (Item.17) 4162 0 R (Item.170) 6351 0 R (Item.171) 6352 0 R (Item.172) 6353 0 R (Item.173) 6354 0 R (Item.174) 6355 0 R (Item.175) 6356 0 R (Item.176) 6357 0 R (Item.177) 6358 0 R (Item.178) 6359 0 R (Item.179) 6360 0 R (Item.18) 4242 0 R (Item.180) 6361 0 R (Item.181) 6362 0 R (Item.182) 6363 0 R (Item.183) 6364 0 R (Item.184) 6365 0 R (Item.185) 6366 0 R (Item.186) 6393 0 R (Item.187) 6394 0 R (Item.188) 6395 0 R (Item.189) 6396 0 R (Item.19) 4243 0 R (Item.190) 6432 0 R (Item.191) 6433 0 R (Item.192) 6434 0 R (Item.193) 6439 0 R (Item.194) 6440 0 R (Item.195) 6445 0 R (Item.196) 6446 0 R (Item.197) 6447 0 R (Item.198) 6448 0 R (Item.199) 6449 0 R (Item.2) 3947 0 R (Item.20) 4245 0 R (Item.200) 6450 0 R (Item.201) 6451 0 R (Item.202) 6452 0 R (Item.203) 6453 0 R (Item.204) 6454 0 R (Item.205) 6455 0 R (Item.206) 6456 0 R (Item.207) 6462 0 R (Item.208) 6463 0 R (Item.209) 6464 0 R (Item.21) 4246 0 R (Item.210) 6531 0 R (Item.211) 6532 0 R (Item.212) 6533 0 R (Item.213) 6538 0 R (Item.214) 6539 0 R (Item.22) 4284 0 R (Item.23) 4285 0 R (Item.24) 4286 0 R (Item.25) 4287 0 R (Item.26) 4288 0 R (Item.27) 4289 0 R (Item.28) 4314 0 R (Item.29) 4315 0 R (Item.3) 3962 0 R (Item.30) 4316 0 R (Item.31) 4317 0 R (Item.32) 4380 0 R (Item.33) 4381 0 R (Item.34) 4382 0 R (Item.35) 4548 0 R (Item.36) 4549 0 R (Item.37) 4550 0 R (Item.38) 4627 0 R (Item.39) 4628 0 R (Item.4) 3963 0 R (Item.40) 4634 0 R (Item.41) 4635 0 R (Item.42) 4636 0 R (Item.43) 4670 0 R (Item.44) 4671 0 R (Item.45) 4676 0 R (Item.46) 4677 0 R (Item.47) 4678 0 R (Item.48) 4679 0 R (Item.49) 4847 0 R (Item.5) 4074 0 R (Item.50) 4848 0 R (Item.51) 4849 0 R (Item.52) 4850 0 R (Item.53) 4851 0 R (Item.54) 4852 0 R (Item.55) 4853 0 R (Item.56) 4957 0 R (Item.57) 4958 0 R (Item.58) 4959 0 R (Item.59) 4960 0 R (Item.6) 4075 0 R (Item.60) 5023 0 R (Item.61) 5024 0 R (Item.62) 5025 0 R (Item.63) 5026 0 R (Item.64) 5027 0 R (Item.65) 5028 0 R (Item.66) 5029 0 R (Item.67) 5030 0 R (Item.68) 5031 0 R (Item.69) 5032 0 R (Item.7) 4076 0 R (Item.70) 5033 0 R (Item.71) 5034 0 R (Item.72) 5035 0 R (Item.73) 5036 0 R (Item.74) 5037 0 R (Item.75) 5084 0 R (Item.76) 5085 0 R (Item.77) 5086 0 R (Item.78) 5393 0 R (Item.79) 5394 0 R (Item.8) 4077 0 R (Item.80) 5395 0 R (Item.81) 5396 0 R (Item.82) 5414 0 R (Item.83) 5415 0 R (Item.84) 5416 0 R (Item.85) 5417 0 R (Item.86) 5418 0 R (Item.87) 5424 0 R (Item.88) 5425 0 R (Item.89) 5426 0 R (Item.9) 4078 0 R (Item.90) 5440 0 R (Item.91) 5441 0 R (Item.92) 5442 0 R (Item.93) 5443 0 R (Item.94) 5699 0 R (Item.95) 5700 0 R (Item.96) 5701 0 R (Item.97) 5702 0 R (Item.98) 5703 0 R (Item.99) 5704 0 R (NT4Migration) 3033 0 R (NetworkBrowsing) 2956 0 R (Other-Clients) 3063 0 R (PolicyMgmt) 3025 0 R (Portability) 3062 0 R (ProfileMgmt) 3026 0 R (SWAT) 3034 0 R (SambaHA) 3031 0 R (ServerType) 2950 0 R (StandAloneServer) 2954 0 R (VFS) 3022 0 R (XMLpassdb) 4427 0 R (ads-create-machine-account) 4212 0 R (ads-member) 3985 0 R (ads-test-server) 4214 0 R (ads-test-smbclient) 4215 0 R (browse-force-master) 4308 0 R (bugreport) 3060 0 R (chapter*.1) 3071 0 R (chapter.1) 10 0 R (chapter.10) 458 0 R (chapter.11) 582 0 R (chapter.12) 722 0 R (chapter.13) 762 0 R (chapter.14) 870 0 R (chapter.15) 966 0 R (chapter.16) 1022 0 R (chapter.17) 1066 0 R (chapter.18) 1078 0 R (chapter.19) 1326 0 R (chapter.2) 38 0 R (chapter.20) 1870 0 R (chapter.21) 1922 0 R (chapter.22) 2026 0 R (chapter.23) 2058 0 R (chapter.24) 2118 0 R (chapter.25) 2234 0 R (chapter.26) 2302 0 R (chapter.27) 2374 0 R (chapter.28) 2398 0 R (chapter.29) 2410 0 R (chapter.3) 90 0 R (chapter.30) 2422 0 R (chapter.31) 2438 0 R (chapter.32) 2486 0 R (chapter.33) 2538 0 R (chapter.34) 2558 0 R (chapter.35) 2582 0 R (chapter.36) 2614 0 R (chapter.37) 2678 0 R (chapter.38) 2718 0 R (chapter.39) 2786 0 R (chapter.4) 102 0 R (chapter.40) 2834 0 R (chapter.41) 2842 0 R (chapter.5) 182 0 R (chapter.6) 262 0 R (chapter.7) 322 0 R (chapter.8) 418 0 R (chapter.9) 446 0 R (compiling) 3061 0 R (diagnosis) 3035 0 R (domain-member) 2953 0 R (domain-member-server) 4175 0 R (example.12.3.1) 4558 0 R (example.13.2.1) 4599 0 R (figure.19.1) 5172 0 R (figure.19.10) 5742 0 R (figure.19.11) 5750 0 R (figure.19.12) 5759 0 R (figure.19.13) 5767 0 R (figure.19.14) 5775 0 R (figure.19.15) 5782 0 R (figure.19.2) 5182 0 R (figure.19.3) 5192 0 R (figure.19.4) 5236 0 R (figure.19.5) 5246 0 R (figure.19.6) 5256 0 R (figure.19.7) 5266 0 R (figure.19.8) 5726 0 R (figure.19.9) 5734 0 R (groupmapping) 2958 0 R (id2805466) 3870 0 R (id2805534) 3877 0 R (id2805621) 3880 0 R (id2805695) 3887 0 R (id2805770) 3907 0 R (id2805872) 3908 0 R (id2805933) 3909 0 R (id2805962) 3916 0 R (id2805975) 3917 0 R (id2806076) 3896 0 R (id2806167) 3898 0 R (id2806220) 3903 0 R (id2806264) 3906 0 R (id2806461) 3892 0 R (id2806503) 3895 0 R (id2806689) 3863 0 R (id2806743) 3864 0 R (id2807354) 3922 0 R (id2807478) 3945 0 R (id2807572) 3952 0 R (id2807611) 3953 0 R (id2807691) 3954 0 R (id2807803) 3927 0 R (id2808680) 3955 0 R (id2808702) 3956 0 R (id2808922) 3972 0 R (id2808952) 3980 0 R (id2809005) 3983 0 R (id2809163) 3993 0 R (id2809231) 3994 0 R (id2809408) 3999 0 R (id2809436) 4000 0 R (id2809468) 4005 0 R (id2809497) 4006 0 R (id2810876) 3938 0 R (id2810967) 3939 0 R (id2811049) 3944 0 R (id2811409) 4008 0 R (id2811638) 4026 0 R (id2811653) 4027 0 R (id2811853) 4033 0 R (id2812167) 4049 0 R (id2812463) 4059 0 R (id2812486) 4060 0 R (id2812501) 4061 0 R (id2812534) 4062 0 R (id2812553) 4067 0 R (id2812588) 4068 0 R (id2814040) 4013 0 R (id2815227) 4081 0 R (id2815332) 4086 0 R (id2815339) 4087 0 R (id2815377) 4088 0 R (id2815427) 4089 0 R (id2815498) 4094 0 R (id2815561) 4095 0 R (id2815588) 4096 0 R (id2815715) 4114 0 R (id2815785) 4116 0 R (id2815806) 4117 0 R (id2815829) 4123 0 R (id2815855) 4124 0 R (id2815956) 4125 0 R (id2816006) 4130 0 R (id2816020) 4131 0 R (id2816052) 4132 0 R (id2816085) 4133 0 R (id2816130) 4138 0 R (id2816226) 4144 0 R (id2816386) 4149 0 R (id2816655) 4143 0 R (id2817633) 4102 0 R (id2817797) 4108 0 R (id2817825) 4109 0 R (id2818170) 4156 0 R (id2818367) 4168 0 R (id2818422) 4170 0 R (id2818435) 4171 0 R (id2818503) 4172 0 R (id2818544) 4173 0 R (id2818619) 4181 0 R (id2818629) 4182 0 R (id2821295) 4193 0 R (id2821434) 4202 0 R (id2821517) 4203 0 R (id2821714) 4213 0 R (id2821865) 4220 0 R (id2821887) 4221 0 R (id2821914) 4222 0 R (id2821946) 4223 0 R (id2822096) 4240 0 R (id2822144) 4241 0 R (id2822356) 4251 0 R (id2822409) 4290 0 R (id2822542) 4291 0 R (id2822668) 4296 0 R (id2822724) 4256 0 R (id2823077) 4267 0 R (id2823156) 4272 0 R (id2823388) 4233 0 R (id2823426) 4234 0 R (id2823494) 4239 0 R (id2824054) 4301 0 R (id2824319) 4313 0 R (id2824475) 4318 0 R (id2824493) 4319 0 R (id2827261) 4277 0 R (id2827277) 4278 0 R (id2827439) 4279 0 R (id2827994) 4320 0 R (id2828102) 4325 0 R (id2828163) 4326 0 R (id2828322) 4332 0 R (id2828516) 4337 0 R (id2828542) 4338 0 R (id2828626) 4339 0 R (id2828639) 4344 0 R (id2828706) 4345 0 R (id2828844) 4351 0 R (id2828890) 4352 0 R (id2828997) 4357 0 R (id2829077) 4358 0 R (id2829126) 4363 0 R (id2829241) 4368 0 R (id2829351) 4370 0 R (id2829450) 4376 0 R (id2829550) 4378 0 R (id2829692) 4387 0 R (id2829707) 4388 0 R (id2829736) 4389 0 R (id2830003) 4400 0 R (id2830066) 4405 0 R (id2830219) 4410 0 R (id2830273) 4411 0 R (id2830310) 4412 0 R (id2830366) 4417 0 R (id2830397) 4418 0 R (id2830663) 4419 0 R (id2830797) 4425 0 R (id2830832) 4432 0 R (id2830872) 4433 0 R (id2833113) 4395 0 R (id2835315) 4435 0 R (id2835343) 4436 0 R (id2835492) 4448 0 R (id2835517) 4450 0 R (id2835626) 4456 0 R (id2835814) 4461 0 R (id2835943) 4466 0 R (id2836121) 4481 0 R (id2836158) 4487 0 R (id2836293) 4489 0 R (id2836309) 4523 0 R (id2836656) 4495 0 R (id2836718) 4496 0 R (id2836831) 4502 0 R (id2836852) 4503 0 R (id2836916) 4504 0 R (id2836992) 4530 0 R (id2837117) 4536 0 R (id2837498) 4509 0 R (id2837529) 4510 0 R (id2837637) 4511 0 R (id2837644) 4512 0 R (id2837659) 4513 0 R (id2837719) 4518 0 R (id2837891) 4542 0 R (id2837992) 4543 0 R (id2838180) 4551 0 R (id2838246) 4556 0 R (id2838260) 4557 0 R (id2838282) 4559 0 R (id2838327) 4560 0 R (id2838401) 4565 0 R (id2838417) 4566 0 R (id2838477) 4567 0 R (id2838722) 4587 0 R (id2838740) 4588 0 R (id2838818) 4590 0 R (id2839145) 4600 0 R (id2839224) 4601 0 R (id2839252) 4602 0 R (id2839310) 4608 0 R (id2839524) 4603 0 R (id2839543) 4617 0 R (id2839770) 4610 0 R (id2839791) 4624 0 R (id2841663) 4573 0 R (id2841788) 4578 0 R (id2841806) 4579 0 R (id2844354) 4611 0 R (id2844426) 4619 0 R (id2844439) 4626 0 R (id2844522) 4629 0 R (id2844725) 4637 0 R (id2844733) 4638 0 R (id2844771) 4643 0 R (id2844850) 4644 0 R (id2844972) 4645 0 R (id2845063) 4650 0 R (id2845155) 4651 0 R (id2845200) 4652 0 R (id2845352) 4657 0 R (id2845682) 4667 0 R (id2845757) 4668 0 R (id2845771) 4669 0 R (id2846150) 4684 0 R (id2846491) 4705 0 R (id2846516) 4706 0 R (id2846545) 4707 0 R (id2846571) 4708 0 R (id2846604) 4709 0 R (id2846626) 4714 0 R (id2846653) 4715 0 R (id2846730) 4716 0 R (id2846773) 4717 0 R (id2846832) 4722 0 R (id2846941) 4727 0 R (id2846954) 4728 0 R (id2847016) 4729 0 R (id2847200) 4734 0 R (id2848271) 4689 0 R (id2848326) 4690 0 R (id2848457) 4695 0 R (id2849637) 4744 0 R (id2849664) 4745 0 R (id2849743) 4750 0 R (id2849774) 4751 0 R (id2849847) 4756 0 R (id2849877) 4757 0 R (id2849995) 4771 0 R (id2850013) 4772 0 R (id2850082) 4777 0 R (id2850133) 4778 0 R (id2850183) 4779 0 R (id2850240) 4784 0 R (id2850305) 4785 0 R (id2850344) 4791 0 R (id2850367) 4793 0 R (id2850386) 4794 0 R (id2850411) 4795 0 R (id2850597) 4820 0 R (id2850612) 4821 0 R (id2850710) 4826 0 R (id2850929) 4800 0 R (id2850957) 4801 0 R (id2851041) 4806 0 R (id2851053) 4807 0 R (id2851302) 4769 0 R (id2851335) 4770 0 R (id2852120) 4835 0 R (id2852282) 4860 0 R (id2852390) 4861 0 R (id2852483) 4866 0 R (id2853028) 4808 0 R (id2853065) 4809 0 R (id2853092) 4810 0 R (id2853219) 4815 0 R (id2853641) 4840 0 R (id2853706) 4841 0 R (id2853742) 4846 0 R (id2853812) 4854 0 R (id2854489) 4867 0 R (id2854572) 4872 0 R (id2854879) 4883 0 R (id2854971) 4896 0 R (id2854984) 4897 0 R (id2856922) 4855 0 R (id2864445) 4902 0 R (id2864774) 4907 0 R (id2864994) 4908 0 R (id2865046) 4914 0 R (id2865094) 4915 0 R (id2865571) 4920 0 R (id2865848) 4925 0 R (id2866003) 4928 0 R (id2866154) 4933 0 R (id2866267) 4934 0 R (id2866338) 4939 0 R (id2866558) 4944 0 R (id2866720) 4950 0 R (id2866814) 4951 0 R (id2866998) 4956 0 R (id2867106) 4961 0 R (id2867434) 4970 0 R (id2867587) 4971 0 R (id2867790) 4976 0 R (id2867906) 4981 0 R (id2868005) 4987 0 R (id2868129) 4992 0 R (id2868333) 4993 0 R (id2868444) 4998 0 R (id2868596) 5003 0 R (id2868617) 5004 0 R (id2868814) 5009 0 R (id2869104) 5014 0 R (id2869199) 5015 0 R (id2869341) 5021 0 R (id2869374) 5022 0 R (id2869808) 5042 0 R (id2870110) 5051 0 R (id2870354) 5052 0 R (id2870452) 5057 0 R (id2870723) 5071 0 R (id2870793) 5072 0 R (id2870816) 5073 0 R (id2870861) 5076 0 R (id2870902) 5081 0 R (id2870921) 5082 0 R (id2870946) 5083 0 R (id2871098) 5091 0 R (id2871427) 5097 0 R (id2871472) 5098 0 R (id2871641) 5104 0 R (id2871655) 5105 0 R (id2871668) 5106 0 R (id2871702) 5107 0 R (id2871820) 5129 0 R (id2871881) 5134 0 R (id2871980) 5139 0 R (id2871999) 5140 0 R (id2872026) 5141 0 R (id2872063) 5146 0 R (id2872121) 5147 0 R (id2872282) 5152 0 R (id2872376) 5153 0 R (id2872451) 5160 0 R (id2872495) 5161 0 R (id2872560) 5167 0 R (id2872594) 5162 0 R (id2872665) 5179 0 R (id2872712) 5180 0 R (id2872762) 5189 0 R (id2872792) 5190 0 R (id2872858) 5198 0 R (id2878722) 5113 0 R (id2878729) 5114 0 R (id2878777) 5116 0 R (id2878829) 5118 0 R (id2878908) 5125 0 R (id2885674) 5203 0 R (id2885764) 5206 0 R (id2885786) 5207 0 R (id2885924) 5216 0 R (id2886112) 5221 0 R (id2886228) 5226 0 R (id2886398) 5227 0 R (id2886448) 5234 0 R (id2886482) 5237 0 R (id2886513) 5244 0 R (id2886585) 5247 0 R (id2886615) 5254 0 R (id2886667) 5264 0 R (id2886741) 5267 0 R (id2886762) 5724 0 R (id2886796) 5268 0 R (id2886847) 5732 0 R (id2886881) 5275 0 R (id2887195) 5280 0 R (id2887298) 5285 0 R (id2887313) 5286 0 R (id2887366) 5287 0 R (id2887421) 5288 0 R (id2887636) 5298 0 R (id2887863) 5299 0 R (id2887914) 5740 0 R (id2888020) 5307 0 R (id2888249) 5312 0 R (id2888374) 5324 0 R (id2888436) 5327 0 R (id2888452) 5328 0 R (id2888491) 5329 0 R (id2888516) 5748 0 R (id2888550) 5336 0 R (id2888572) 5757 0 R (id2888613) 5337 0 R (id2888634) 5338 0 R (id2888760) 5765 0 R (id2888794) 5339 0 R (id2888872) 5344 0 R (id2888927) 5346 0 R (id2888968) 5347 0 R (id2889034) 5352 0 R (id2889051) 5353 0 R (id2889085) 5354 0 R (id2889106) 5355 0 R (id2889133) 5356 0 R (id2889167) 5362 0 R (id2889186) 5363 0 R (id2889278) 5364 0 R (id2889324) 5369 0 R (id2889521) 5376 0 R (id2889579) 5381 0 R (id2889612) 5382 0 R (id2889662) 5388 0 R (id2889883) 5397 0 R (id2890064) 5403 0 R (id2890165) 5408 0 R (id2890308) 5413 0 R (id2890402) 5423 0 R (id2890490) 5427 0 R (id2890524) 5428 0 R (id2890541) 5773 0 R (id2890575) 5433 0 R (id2890690) 5434 0 R (id2890824) 5439 0 R (id2890939) 5444 0 R (id2891051) 5453 0 R (id2891130) 5454 0 R (id2891220) 5459 0 R (id2891382) 5464 0 R (id2891399) 5465 0 R (id2891429) 5466 0 R (id2891492) 5467 0 R (id2891530) 5472 0 R (id2891582) 5473 0 R (id2891619) 5478 0 R (id2891674) 5479 0 R (id2891707) 5480 0 R (id2891740) 5485 0 R (id2891791) 5486 0 R (id2891847) 5492 0 R (id2891908) 5493 0 R (id2891939) 5494 0 R (id2891964) 5499 0 R (id2891982) 5500 0 R (id2892002) 5501 0 R (id2892104) 5506 0 R (id2892207) 5507 0 R (id2892278) 5508 0 R (id2892340) 5509 0 R (id2892398) 5514 0 R (id2892460) 5515 0 R (id2892566) 5523 0 R (id2892621) 5527 0 R (id2892646) 5528 0 R (id2892691) 5535 0 R (id2892758) 5536 0 R (id2892890) 5553 0 R (id2892978) 5559 0 R (id2893056) 5567 0 R (id2893129) 5572 0 R (id2893194) 5575 0 R (id2893652) 5613 0 R (id2893683) 5618 0 R (id2893714) 5619 0 R (id2893755) 5621 0 R (id2893827) 5622 0 R (id2893929) 5627 0 R (id2894000) 5628 0 R (id2894048) 5634 0 R (id2894063) 5635 0 R (id2894257) 5640 0 R (id2894302) 5641 0 R (id2894384) 5642 0 R (id2894445) 5647 0 R (id2894463) 5648 0 R (id2894481) 5649 0 R (id2894516) 5650 0 R (id2894528) 5651 0 R (id2894541) 5652 0 R (id2894555) 5657 0 R (id2894562) 5658 0 R (id2894756) 5663 0 R (id2895010) 5689 0 R (id2896116) 5719 0 R (id2896127) 5780 0 R (id2896229) 5794 0 R (id2896236) 5795 0 R (id2896275) 5796 0 R (id2896314) 5797 0 R (id2896396) 5799 0 R (id2896416) 5800 0 R (id2896554) 5806 0 R (id2896600) 5807 0 R (id2896622) 5808 0 R (id2896677) 5811 0 R (id2896706) 5813 0 R (id2896747) 5834 0 R (id2896818) 5839 0 R (id2896853) 5840 0 R (id2896881) 5841 0 R (id2896909) 5843 0 R (id2896984) 5848 0 R (id2897201) 5818 0 R (id2897229) 5819 0 R (id2897535) 5788 0 R (id2897553) 5789 0 R (id2898260) 5850 0 R (id2898322) 5851 0 R (id2898434) 5857 0 R (id2898641) 5858 0 R (id2898713) 5866 0 R (id2898826) 5867 0 R (id2899263) 5820 0 R (id2899322) 5825 0 R (id2899353) 5826 0 R (id2899381) 5827 0 R (id2899414) 5832 0 R (id2899437) 5833 0 R (id2901722) 5868 0 R (id2901963) 5873 0 R (id2901970) 5875 0 R (id2902116) 5885 0 R (id2902204) 5893 0 R (id2902241) 5894 0 R (id2902347) 5896 0 R (id2902570) 5903 0 R (id2902662) 5912 0 R (id2902681) 5913 0 R (id2902769) 5924 0 R (id2902785) 5925 0 R (id2902985) 5937 0 R (id2903180) 5951 0 R (id2903212) 5953 0 R (id2903321) 5966 0 R (id2903430) 5971 0 R (id2903454) 5972 0 R (id2903555) 5973 0 R (id2903610) 5958 0 R (id2903662) 5959 0 R (id2903773) 5965 0 R (id2904055) 5918 0 R (id2904086) 5919 0 R (id2904897) 5982 0 R (id2904998) 5988 0 R (id2905018) 5989 0 R (id2905039) 5990 0 R (id2905084) 5991 0 R (id2905230) 6005 0 R (id2905244) 6006 0 R (id2905347) 6011 0 R (id2905381) 6012 0 R (id2905421) 6013 0 R (id2905434) 6014 0 R (id2905524) 6019 0 R (id2906992) 6044 0 R (id2907150) 6045 0 R (id2910597) 6020 0 R (id2910633) 6021 0 R (id2910783) 6026 0 R (id2910790) 6027 0 R (id2911720) 6081 0 R (id2911784) 6086 0 R (id2911801) 6087 0 R (id2911965) 6095 0 R (id2911986) 6100 0 R (id2912003) 6101 0 R (id2912044) 6102 0 R (id2912102) 6103 0 R (id2912148) 6108 0 R (id2912168) 6109 0 R (id2912265) 6110 0 R (id2912316) 6111 0 R (id2912663) 6125 0 R (id2912808) 6127 0 R (id2912869) 6129 0 R (id2913062) 6138 0 R (id2913374) 6140 0 R (id2913386) 6141 0 R (id2913449) 6146 0 R (id2913668) 6147 0 R (id2913980) 6163 0 R (id2913996) 6164 0 R (id2914052) 6169 0 R (id2914662) 6183 0 R (id2914692) 6184 0 R (id2914719) 6185 0 R (id2915125) 6158 0 R (id2917094) 6195 0 R (id2917151) 6198 0 R (id2917235) 6203 0 R (id2917266) 6204 0 R (id2917467) 6213 0 R (id2917500) 6214 0 R (id2917536) 6219 0 R (id2917567) 6220 0 R (id2917602) 6221 0 R (id2917615) 6222 0 R (id2917754) 6245 0 R (id2917796) 6246 0 R (id2917885) 6251 0 R (id2918010) 6256 0 R (id2918055) 6257 0 R (id2918169) 6267 0 R (id2918201) 6268 0 R (id2918226) 6269 0 R (id2918297) 6274 0 R (id2918312) 6275 0 R (id2918344) 6276 0 R (id2918395) 6277 0 R (id2918550) 6286 0 R (id2918592) 6287 0 R (id2918660) 6289 0 R (id2918761) 6294 0 R (id2918807) 6295 0 R (id2919359) 6232 0 R (id2919384) 6233 0 R (id2919428) 6238 0 R (id2919480) 6239 0 R (id2919604) 6244 0 R (id2920614) 6333 0 R (id2920668) 6334 0 R (id2920729) 6339 0 R (id2920786) 6340 0 R (id2920815) 6341 0 R (id2920840) 6347 0 R (id2921233) 6309 0 R (id2921402) 6302 0 R (id2921422) 6303 0 R (id2921888) 6327 0 R (id2921912) 6328 0 R (id2922568) 6319 0 R (id2922591) 6321 0 R (id2922644) 6322 0 R (id2923057) 6367 0 R (id2923072) 6368 0 R (id2923138) 6370 0 R (id2923209) 6375 0 R (id2923380) 6377 0 R (id2923536) 6387 0 R (id2923686) 6386 0 R (id2924426) 6392 0 R (id2924538) 6402 0 R (id2924602) 6404 0 R (id2924707) 6405 0 R (id2924772) 6411 0 R (id2924837) 6412 0 R (id2924884) 6413 0 R (id2924936) 6414 0 R (id2924959) 6415 0 R (id2925080) 6425 0 R (id2925114) 6426 0 R (id2925287) 6431 0 R (id2928839) 6465 0 R (id2928958) 6474 0 R (id2929241) 6479 0 R (id2929285) 6483 0 R (id2929438) 6490 0 R (id2929553) 6509 0 R (id2929670) 6521 0 R (id2929677) 6522 0 R (id2929706) 6525 0 R (id2929721) 6526 0 R (id2929752) 6528 0 R (id2929943) 6507 0 R (id2930051) 6508 0 R (id2930232) 6471 0 R (id2931174) 6540 0 R (id2931222) 6545 0 R (id2931358) 6546 0 R (id2931495) 6551 0 R (id2931751) 6497 0 R (id2931811) 6500 0 R (id2931847) 6502 0 R (id2932304) 6552 0 R (id2932337) 6553 0 R (id2932390) 6558 0 R (id2932482) 6559 0 R (id2932686) 6564 0 R (id2932780) 6565 0 R (id2934060) 6571 0 R (id2934145) 6572 0 R (id2934173) 6574 0 R (id2934342) 6579 0 R (id2934386) 6584 0 R (id2934393) 6585 0 R (id2934419) 6586 0 R (id2934426) 6587 0 R (id2934515) 6611 0 R (id2934605) 6612 0 R (id2934636) 6617 0 R (id2934681) 6618 0 R (id2934711) 6620 0 R (id2934729) 6621 0 R (id2934775) 6622 0 R (id2934897) 6605 0 R (id2934956) 6609 0 R (id2935054) 6610 0 R (id2935202) 6592 0 R (id2935274) 6598 0 R (id2935281) 6599 0 R (id2935805) 6628 0 R (id2935829) 6629 0 R (id2935939) 6631 0 R (id2935991) 6638 0 R (id2936061) 6639 0 R (id2936105) 6644 0 R (id2936158) 6645 0 R (id2936181) 6646 0 R (id2936237) 6647 0 R (id2936279) 6648 0 R (id2937187) 6653 0 R (id2937210) 6655 0 R (id2937243) 6656 0 R (id2937381) 6666 0 R (id2937764) 6691 0 R (id2937832) 6695 0 R (id2937961) 6661 0 R (id2938151) 6637 0 R (install) 2948 0 R (integrate-ms-networks) 3028 0 R (introduction) 3862 0 R (locking) 2960 0 R (migration) 6318 0 R (msdfs) 3019 0 R (optional) 4266 0 R (page.1) 2861 0 R (page.10) 3267 0 R (page.100) 4455 0 R (page.101) 4460 0 R (page.102) 4465 0 R (page.103) 4480 0 R (page.104) 4486 0 R (page.105) 4494 0 R (page.106) 4500 0 R (page.107) 4508 0 R (page.108) 4517 0 R (page.109) 4522 0 R (page.11) 3320 0 R (page.110) 4529 0 R (page.111) 4535 0 R (page.112) 4541 0 R (page.113) 4547 0 R (page.114) 4555 0 R (page.115) 4564 0 R (page.116) 4572 0 R (page.117) 4577 0 R (page.118) 4583 0 R (page.119) 4594 0 R (page.12) 3370 0 R (page.120) 4598 0 R (page.121) 4607 0 R (page.122) 4616 0 R (page.123) 4623 0 R (page.124) 4633 0 R (page.125) 4642 0 R (page.126) 4649 0 R (page.127) 4656 0 R (page.128) 4666 0 R (page.129) 4675 0 R (page.13) 3423 0 R (page.130) 4683 0 R (page.131) 4688 0 R (page.132) 4694 0 R (page.133) 4699 0 R (page.134) 4704 0 R (page.135) 4713 0 R (page.136) 4721 0 R (page.137) 4726 0 R (page.138) 4733 0 R (page.139) 4738 0 R (page.14) 3475 0 R (page.140) 4743 0 R (page.141) 4749 0 R (page.142) 4755 0 R (page.143) 4768 0 R (page.144) 4776 0 R (page.145) 4783 0 R (page.146) 4790 0 R (page.147) 4799 0 R (page.148) 4805 0 R (page.149) 4814 0 R (page.15) 3527 0 R (page.150) 4819 0 R (page.151) 4825 0 R (page.152) 4834 0 R (page.153) 4839 0 R (page.154) 4845 0 R (page.155) 4859 0 R (page.156) 4865 0 R (page.157) 4871 0 R (page.158) 4877 0 R (page.159) 4882 0 R (page.16) 3573 0 R (page.160) 4887 0 R (page.161) 4895 0 R (page.162) 4901 0 R (page.163) 4906 0 R (page.164) 4913 0 R (page.165) 4919 0 R (page.166) 4924 0 R (page.167) 4932 0 R (page.168) 4938 0 R (page.169) 4943 0 R (page.17) 3626 0 R (page.170) 4949 0 R (page.171) 4955 0 R (page.172) 4965 0 R (page.173) 4969 0 R (page.174) 4975 0 R (page.175) 4980 0 R (page.176) 4986 0 R (page.177) 4991 0 R (page.178) 4997 0 R (page.179) 5002 0 R (page.18) 3678 0 R (page.180) 5008 0 R (page.181) 5013 0 R (page.182) 5020 0 R (page.183) 5041 0 R (page.184) 5046 0 R (page.185) 5050 0 R (page.186) 5056 0 R (page.187) 5061 0 R (page.188) 5066 0 R (page.189) 5070 0 R (page.19) 3729 0 R (page.190) 5080 0 R (page.191) 5090 0 R (page.192) 5096 0 R (page.193) 5102 0 R (page.194) 5112 0 R (page.195) 5122 0 R (page.196) 5133 0 R (page.197) 5138 0 R (page.198) 5145 0 R (page.199) 5151 0 R (page.2) 2873 0 R (page.20) 3774 0 R (page.200) 5159 0 R (page.201) 5166 0 R (page.202) 5178 0 R (page.203) 5188 0 R (page.204) 5197 0 R (page.205) 5202 0 R (page.206) 5212 0 R (page.207) 5220 0 R (page.208) 5225 0 R (page.209) 5233 0 R (page.21) 3822 0 R (page.210) 5243 0 R (page.211) 5253 0 R (page.212) 5263 0 R (page.213) 5274 0 R (page.214) 5279 0 R (page.215) 5284 0 R (page.216) 5292 0 R (page.217) 5297 0 R (page.218) 5304 0 R (page.219) 5311 0 R (page.22) 3857 0 R (page.220) 5323 0 R (page.221) 5335 0 R (page.222) 5343 0 R (page.223) 5351 0 R (page.224) 5361 0 R (page.225) 5368 0 R (page.226) 5375 0 R (page.227) 5380 0 R (page.228) 5387 0 R (page.229) 5392 0 R (page.23) 3861 0 R (page.230) 5402 0 R (page.231) 5407 0 R (page.232) 5412 0 R (page.233) 5422 0 R (page.234) 5432 0 R (page.235) 5438 0 R (page.236) 5452 0 R (page.237) 5458 0 R (page.238) 5463 0 R (page.239) 5471 0 R (page.24) 3868 0 R (page.240) 5477 0 R (page.241) 5484 0 R (page.242) 5491 0 R (page.243) 5498 0 R (page.244) 5505 0 R (page.245) 5513 0 R (page.246) 5520 0 R (page.247) 5534 0 R (page.248) 5552 0 R (page.249) 5566 0 R (page.25) 3874 0 R (page.250) 5580 0 R (page.251) 5607 0 R (page.252) 5617 0 R (page.253) 5626 0 R (page.254) 5633 0 R (page.255) 5639 0 R (page.256) 5646 0 R (page.257) 5656 0 R (page.258) 5662 0 R (page.259) 5667 0 R (page.26) 3885 0 R (page.260) 5672 0 R (page.261) 5676 0 R (page.262) 5680 0 R (page.263) 5684 0 R (page.264) 5688 0 R (page.265) 5693 0 R (page.266) 5698 0 R (page.267) 5718 0 R (page.268) 5723 0 R (page.269) 5731 0 R (page.27) 3891 0 R (page.270) 5739 0 R (page.271) 5747 0 R (page.272) 5756 0 R (page.273) 5764 0 R (page.274) 5772 0 R (page.275) 5779 0 R (page.276) 5787 0 R (page.277) 5793 0 R (page.278) 5805 0 R (page.279) 5817 0 R (page.28) 3902 0 R (page.280) 5824 0 R (page.281) 5831 0 R (page.282) 5838 0 R (page.283) 5847 0 R (page.284) 5856 0 R (page.285) 5862 0 R (page.286) 5872 0 R (page.287) 5879 0 R (page.288) 5883 0 R (page.289) 5891 0 R (page.29) 3915 0 R (page.290) 5901 0 R (page.291) 5907 0 R (page.292) 5911 0 R (page.293) 5917 0 R (page.294) 5929 0 R (page.295) 5936 0 R (page.296) 5943 0 R (page.297) 5947 0 R (page.298) 5957 0 R (page.299) 5963 0 R (page.3) 2887 0 R (page.30) 3921 0 R (page.300) 5970 0 R (page.301) 5977 0 R (page.302) 5987 0 R (page.303) 6001 0 R (page.304) 6010 0 R (page.305) 6018 0 R (page.306) 6025 0 R (page.307) 6032 0 R (page.308) 6043 0 R (page.309) 6059 0 R (page.31) 3926 0 R (page.310) 6063 0 R (page.311) 6085 0 R (page.312) 6099 0 R (page.313) 6107 0 R (page.314) 6116 0 R (page.315) 6124 0 R (page.316) 6133 0 R (page.317) 6137 0 R (page.318) 6145 0 R (page.319) 6151 0 R (page.32) 3932 0 R (page.320) 6156 0 R (page.321) 6162 0 R (page.322) 6168 0 R (page.323) 6174 0 R (page.324) 6178 0 R (page.325) 6182 0 R (page.326) 6190 0 R (page.327) 6194 0 R (page.328) 6202 0 R (page.329) 6209 0 R (page.33) 3936 0 R (page.330) 6218 0 R (page.331) 6226 0 R (page.332) 6231 0 R (page.333) 6237 0 R (page.334) 6243 0 R (page.335) 6250 0 R (page.336) 6255 0 R (page.337) 6261 0 R (page.338) 6266 0 R (page.339) 6273 0 R (page.34) 3943 0 R (page.340) 6281 0 R (page.341) 6285 0 R (page.342) 6293 0 R (page.343) 6301 0 R (page.344) 6308 0 R (page.345) 6313 0 R (page.346) 6317 0 R (page.347) 6326 0 R (page.348) 6332 0 R (page.349) 6338 0 R (page.35) 3951 0 R (page.350) 6346 0 R (page.351) 6374 0 R (page.352) 6381 0 R (page.353) 6385 0 R (page.354) 6391 0 R (page.355) 6401 0 R (page.356) 6410 0 R (page.357) 6419 0 R (page.358) 6423 0 R (page.359) 6430 0 R (page.36) 3961 0 R (page.360) 6438 0 R (page.361) 6444 0 R (page.362) 6461 0 R (page.363) 6470 0 R (page.364) 6478 0 R (page.365) 6489 0 R (page.366) 6496 0 R (page.367) 6506 0 R (page.368) 6514 0 R (page.369) 6518 0 R (page.37) 3979 0 R (page.370) 6537 0 R (page.371) 6550 0 R (page.372) 6557 0 R (page.373) 6563 0 R (page.374) 6570 0 R (page.375) 6578 0 R (page.376) 6583 0 R (page.377) 6591 0 R (page.378) 6604 0 R (page.379) 6616 0 R (page.38) 3989 0 R (page.380) 6627 0 R (page.381) 6636 0 R (page.382) 6643 0 R (page.383) 6652 0 R (page.384) 6660 0 R (page.385) 6665 0 R (page.39) 3998 0 R (page.4) 2965 0 R (page.40) 4004 0 R (page.41) 4012 0 R (page.42) 4017 0 R (page.43) 4024 0 R (page.44) 4032 0 R (page.45) 4037 0 R (page.46) 4045 0 R (page.47) 4053 0 R (page.48) 4057 0 R (page.49) 4066 0 R (page.5) 3040 0 R (page.50) 4073 0 R (page.51) 4085 0 R (page.52) 4093 0 R (page.53) 4100 0 R (page.54) 4107 0 R (page.55) 4113 0 R (page.56) 4122 0 R (page.57) 4129 0 R (page.58) 4137 0 R (page.59) 4142 0 R (page.6) 3070 0 R (page.60) 4148 0 R (page.61) 4154 0 R (page.62) 4167 0 R (page.63) 4179 0 R (page.64) 4191 0 R (page.65) 4199 0 R (page.66) 4207 0 R (page.67) 4219 0 R (page.68) 4228 0 R (page.69) 4232 0 R (page.7) 3109 0 R (page.70) 4238 0 R (page.71) 4250 0 R (page.72) 4255 0 R (page.73) 4260 0 R (page.74) 4265 0 R (page.75) 4271 0 R (page.76) 4276 0 R (page.77) 4283 0 R (page.78) 4295 0 R (page.79) 4300 0 R (page.8) 3162 0 R (page.80) 4306 0 R (page.81) 4312 0 R (page.82) 4324 0 R (page.83) 4331 0 R (page.84) 4336 0 R (page.85) 4343 0 R (page.86) 4350 0 R (page.87) 4356 0 R (page.88) 4362 0 R (page.89) 4367 0 R (page.9) 3212 0 R (page.90) 4375 0 R (page.91) 4386 0 R (page.92) 4394 0 R (page.93) 4399 0 R (page.94) 4404 0 R (page.95) 4409 0 R (page.96) 4416 0 R (page.97) 4423 0 R (page.98) 4431 0 R (page.99) 4440 0 R (pam) 3027 0 R (part.1) 6 0 R (part.2) 98 0 R (part.3) 454 0 R (part.4) 2418 0 R (part.5) 2534 0 R (part.6) 2610 0 R (passdb) 2957 0 R (printing) 3020 0 R (problems) 3036 0 R (samba-bdc) 2952 0 R (samba-pdc) 2951 0 R (section*.2) 5874 0 R (section*.3) 5884 0 R (section*.4) 5892 0 R (section*.5) 5895 0 R (section*.6) 5902 0 R (section.1.1) 14 0 R (section.1.2) 18 0 R (section.1.3) 22 0 R (section.1.4) 26 0 R (section.1.5) 30 0 R (section.1.6) 34 0 R (section.10.1) 462 0 R (section.10.2) 466 0 R (section.10.3) 470 0 R (section.10.4) 486 0 R (section.10.5) 522 0 R (section.10.6) 538 0 R (section.10.7) 550 0 R (section.10.8) 570 0 R (section.11.1) 586 0 R (section.11.2) 590 0 R (section.11.3) 610 0 R (section.11.4) 622 0 R (section.11.5) 706 0 R (section.12.1) 726 0 R (section.12.2) 730 0 R (section.12.3) 738 0 R (section.12.4) 750 0 R (section.13.1) 766 0 R (section.13.2) 770 0 R (section.13.3) 786 0 R (section.13.4) 802 0 R (section.13.5) 818 0 R (section.13.6) 858 0 R (section.14.1) 874 0 R (section.14.2) 878 0 R (section.14.3) 922 0 R (section.14.4) 938 0 R (section.14.5) 950 0 R (section.14.6) 954 0 R (section.14.7) 962 0 R (section.15.1) 970 0 R (section.15.2) 974 0 R (section.15.3) 978 0 R (section.15.4) 1006 0 R (section.15.5) 1010 0 R (section.16.1) 1026 0 R (section.16.2) 1030 0 R (section.16.3) 1034 0 R (section.16.4) 1046 0 R (section.16.5) 1058 0 R (section.17.1) 1070 0 R (section.17.2) 1074 0 R (section.18.1) 1082 0 R (section.18.10) 1278 0 R (section.18.11) 1298 0 R (section.18.12) 1302 0 R (section.18.13) 1306 0 R (section.18.14) 1310 0 R (section.18.15) 1314 0 R (section.18.2) 1086 0 R (section.18.3) 1110 0 R (section.18.4) 1122 0 R (section.18.5) 1126 0 R (section.18.6) 1154 0 R (section.18.7) 1178 0 R (section.18.8) 1226 0 R (section.18.9) 1246 0 R (section.19.1) 1330 0 R (section.19.10) 1558 0 R (section.19.11) 1626 0 R (section.19.12) 1714 0 R (section.19.13) 1734 0 R (section.19.14) 1778 0 R (section.19.15) 1810 0 R (section.19.16) 1814 0 R (section.19.17) 1830 0 R (section.19.18) 1834 0 R (section.19.19) 1850 0 R (section.19.2) 1342 0 R (section.19.3) 1358 0 R (section.19.4) 1382 0 R (section.19.5) 1418 0 R (section.19.6) 1498 0 R (section.19.7) 1514 0 R (section.19.8) 1526 0 R (section.19.9) 1538 0 R (section.2.1) 42 0 R (section.2.2) 46 0 R (section.2.3) 62 0 R (section.2.4) 66 0 R (section.2.5) 70 0 R (section.2.6) 74 0 R (section.2.7) 78 0 R (section.20.1) 1874 0 R (section.20.2) 1878 0 R (section.20.3) 1882 0 R (section.20.4) 1906 0 R (section.20.5) 1918 0 R (section.21.1) 1926 0 R (section.21.2) 1930 0 R (section.21.3) 1934 0 R (section.21.4) 1942 0 R (section.21.5) 1970 0 R (section.21.6) 2018 0 R (section.21.7) 2022 0 R (section.22.1) 2030 0 R (section.22.2) 2034 0 R (section.22.3) 2038 0 R (section.22.4) 2046 0 R (section.22.5) 2054 0 R (section.23.1) 2062 0 R (section.23.2) 2066 0 R (section.23.3) 2090 0 R (section.23.4) 2106 0 R (section.23.5) 2110 0 R (section.24.1) 2122 0 R (section.24.2) 2126 0 R (section.24.3) 2190 0 R (section.24.4) 2194 0 R (section.24.5) 2198 0 R (section.24.6) 2218 0 R (section.25.1) 2238 0 R (section.25.2) 2242 0 R (section.25.3) 2294 0 R (section.26.1) 2306 0 R (section.26.2) 2310 0 R (section.26.3) 2314 0 R (section.26.4) 2334 0 R (section.26.5) 2358 0 R (section.27.1) 2378 0 R (section.27.2) 2382 0 R (section.27.3) 2386 0 R (section.27.4) 2390 0 R (section.27.5) 2394 0 R (section.28.1) 2402 0 R (section.28.2) 2406 0 R (section.29.1) 2414 0 R (section.3.1) 94 0 R (section.30.1) 2426 0 R (section.30.2) 2430 0 R (section.30.3) 2434 0 R (section.31.1) 2442 0 R (section.31.2) 2474 0 R (section.32.1) 2490 0 R (section.33.1) 2542 0 R (section.33.2) 2546 0 R (section.33.3) 2550 0 R (section.33.4) 2554 0 R (section.34.1) 2562 0 R (section.34.2) 2566 0 R (section.34.3) 2570 0 R (section.34.4) 2574 0 R (section.34.5) 2578 0 R (section.35.1) 2586 0 R (section.35.2) 2590 0 R (section.35.3) 2594 0 R (section.35.4) 2598 0 R (section.35.5) 2602 0 R (section.35.6) 2606 0 R (section.36.1) 2618 0 R (section.36.2) 2638 0 R (section.36.3) 2642 0 R (section.36.4) 2646 0 R (section.36.5) 2662 0 R (section.36.6) 2674 0 R (section.37.1) 2682 0 R (section.37.2) 2686 0 R (section.37.3) 2690 0 R (section.37.4) 2694 0 R (section.37.5) 2698 0 R (section.37.6) 2706 0 R (section.38.1) 2722 0 R (section.38.2) 2726 0 R (section.38.3) 2742 0 R (section.38.4) 2770 0 R (section.38.5) 2778 0 R (section.38.6) 2782 0 R (section.39.1) 2790 0 R (section.39.10) 2826 0 R (section.39.11) 2830 0 R (section.39.2) 2794 0 R (section.39.3) 2798 0 R (section.39.4) 2802 0 R (section.39.5) 2806 0 R (section.39.6) 2810 0 R (section.39.7) 2814 0 R (section.39.8) 2818 0 R (section.39.9) 2822 0 R (section.4.1) 106 0 R (section.4.2) 110 0 R (section.4.3) 114 0 R (section.4.4) 158 0 R (section.4.5) 162 0 R (section.40.1) 2838 0 R (section.41.1) 2846 0 R (section.41.2) 2850 0 R (section.41.3) 2854 0 R (section.5.1) 186 0 R (section.5.2) 190 0 R (section.5.3) 202 0 R (section.5.4) 206 0 R (section.5.5) 210 0 R (section.5.6) 234 0 R (section.6.1) 266 0 R (section.6.2) 270 0 R (section.6.3) 294 0 R (section.6.4) 302 0 R (section.7.1) 326 0 R (section.7.2) 330 0 R (section.7.3) 362 0 R (section.7.4) 374 0 R (section.7.5) 406 0 R (section.8.1) 422 0 R (section.8.2) 426 0 R (section.8.3) 430 0 R (section.8.4) 442 0 R (section.9.1) 450 0 R (securing-samba) 2961 0 R (speed) 3064 0 R (subfigure.19.1.1) 5168 0 R (subfigure.19.10.1) 5741 0 R (subfigure.19.11.1) 5749 0 R (subfigure.19.12.1) 5758 0 R (subfigure.19.13.1) 5766 0 R (subfigure.19.14.1) 5774 0 R (subfigure.19.15.1) 5781 0 R (subfigure.19.2.1) 5181 0 R (subfigure.19.3.1) 5191 0 R (subfigure.19.4.1) 5235 0 R (subfigure.19.5.1) 5245 0 R (subfigure.19.6.1) 5255 0 R (subfigure.19.7.1) 5265 0 R (subfigure.19.8.1) 5725 0 R (subfigure.19.9.1) 5733 0 R (subsection.10.3.1) 474 0 R (subsection.10.3.2) 478 0 R (subsection.10.3.3) 482 0 R (subsection.10.4.1) 490 0 R (subsection.10.4.2) 494 0 R (subsection.10.4.3) 498 0 R (subsection.10.4.4) 502 0 R (subsection.10.4.5) 506 0 R (subsection.10.4.6) 510 0 R (subsection.10.4.7) 514 0 R (subsection.10.4.8) 518 0 R (subsection.10.5.1) 526 0 R (subsection.10.5.2) 530 0 R (subsection.10.5.3) 534 0 R (subsection.10.6.1) 542 0 R (subsection.10.6.2) 546 0 R (subsection.10.7.1) 554 0 R (subsection.10.7.2) 558 0 R (subsection.10.7.3) 562 0 R (subsection.10.8.1) 574 0 R (subsection.10.8.2) 578 0 R (subsection.11.2.1) 594 0 R (subsection.11.2.2) 606 0 R (subsection.11.3.1) 614 0 R (subsection.11.3.2) 618 0 R (subsection.11.4.1) 626 0 R (subsection.11.4.2) 630 0 R (subsection.11.4.3) 634 0 R (subsection.11.4.4) 638 0 R (subsection.11.4.5) 682 0 R (subsection.11.4.6) 702 0 R (subsection.11.5.1) 710 0 R (subsection.11.5.2) 714 0 R (subsection.11.5.3) 718 0 R (subsection.12.2.1) 734 0 R (subsection.12.3.1) 742 0 R (subsection.12.3.2) 746 0 R (subsection.12.4.1) 754 0 R (subsection.12.4.2) 758 0 R (subsection.13.2.1) 774 0 R (subsection.13.2.2) 778 0 R (subsection.13.2.3) 782 0 R (subsection.13.3.1) 790 0 R (subsection.13.3.2) 794 0 R (subsection.13.3.3) 798 0 R (subsection.13.4.1) 806 0 R (subsection.13.5.1) 822 0 R (subsection.13.5.2) 826 0 R (subsection.13.5.3) 830 0 R (subsection.13.5.4) 834 0 R (subsection.13.5.5) 846 0 R (subsection.13.5.6) 850 0 R (subsection.13.5.7) 854 0 R (subsection.13.6.1) 862 0 R (subsection.13.6.2) 866 0 R (subsection.14.2.1) 882 0 R (subsection.14.3.1) 926 0 R (subsection.14.4.1) 942 0 R (subsection.14.4.2) 946 0 R (subsection.14.6.1) 958 0 R (subsection.15.3.1) 982 0 R (subsection.15.3.2) 986 0 R (subsection.15.3.3) 990 0 R (subsection.15.3.4) 994 0 R (subsection.15.3.5) 998 0 R (subsection.15.3.6) 1002 0 R (subsection.15.5.1) 1014 0 R (subsection.15.5.2) 1018 0 R (subsection.16.3.1) 1038 0 R (subsection.16.3.2) 1042 0 R (subsection.16.4.1) 1050 0 R (subsection.16.4.2) 1054 0 R (subsection.16.5.1) 1062 0 R (subsection.18.10.1) 1282 0 R (subsection.18.10.2) 1286 0 R (subsection.18.10.3) 1290 0 R (subsection.18.10.4) 1294 0 R (subsection.18.15.1) 1318 0 R (subsection.18.15.2) 1322 0 R (subsection.18.2.1) 1090 0 R (subsection.18.2.2) 1094 0 R (subsection.18.2.3) 1098 0 R (subsection.18.2.4) 1102 0 R (subsection.18.2.5) 1106 0 R (subsection.18.3.1) 1114 0 R (subsection.18.3.2) 1118 0 R (subsection.18.5.1) 1130 0 R (subsection.18.5.2) 1134 0 R (subsection.18.5.3) 1138 0 R (subsection.18.5.4) 1142 0 R (subsection.18.5.5) 1146 0 R (subsection.18.5.6) 1150 0 R (subsection.18.6.1) 1158 0 R (subsection.18.6.2) 1162 0 R (subsection.18.6.3) 1166 0 R (subsection.18.6.4) 1170 0 R (subsection.18.6.5) 1174 0 R (subsection.18.7.1) 1182 0 R (subsection.18.7.2) 1186 0 R (subsection.18.8.1) 1230 0 R (subsection.18.8.2) 1234 0 R (subsection.18.8.3) 1238 0 R (subsection.18.8.4) 1242 0 R (subsection.18.9.1) 1250 0 R (subsection.18.9.2) 1254 0 R (subsection.18.9.3) 1258 0 R (subsection.18.9.4) 1262 0 R (subsection.18.9.5) 1266 0 R (subsection.18.9.6) 1270 0 R (subsection.18.9.7) 1274 0 R (subsection.19.1.1) 1334 0 R (subsection.19.1.2) 1338 0 R (subsection.19.10.1) 1562 0 R (subsection.19.10.10) 1598 0 R (subsection.19.10.11) 1602 0 R (subsection.19.10.12) 1606 0 R (subsection.19.10.13) 1610 0 R (subsection.19.10.14) 1614 0 R (subsection.19.10.15) 1618 0 R (subsection.19.10.16) 1622 0 R (subsection.19.10.2) 1566 0 R (subsection.19.10.3) 1570 0 R (subsection.19.10.4) 1574 0 R (subsection.19.10.5) 1578 0 R (subsection.19.10.6) 1582 0 R (subsection.19.10.7) 1586 0 R (subsection.19.10.8) 1590 0 R (subsection.19.10.9) 1594 0 R (subsection.19.11.1) 1630 0 R (subsection.19.11.2) 1634 0 R (subsection.19.11.3) 1638 0 R (subsection.19.11.4) 1642 0 R (subsection.19.11.5) 1646 0 R (subsection.19.11.6) 1710 0 R (subsection.19.12.1) 1718 0 R (subsection.19.12.2) 1722 0 R (subsection.19.12.3) 1726 0 R (subsection.19.12.4) 1730 0 R (subsection.19.13.1) 1738 0 R (subsection.19.13.2) 1774 0 R (subsection.19.14.1) 1782 0 R (subsection.19.14.2) 1786 0 R (subsection.19.14.3) 1790 0 R (subsection.19.14.4) 1794 0 R (subsection.19.14.5) 1798 0 R (subsection.19.14.6) 1802 0 R (subsection.19.14.7) 1806 0 R (subsection.19.16.1) 1818 0 R (subsection.19.16.2) 1822 0 R (subsection.19.16.3) 1826 0 R (subsection.19.18.1) 1838 0 R (subsection.19.18.2) 1842 0 R (subsection.19.18.3) 1846 0 R (subsection.19.19.1) 1854 0 R (subsection.19.19.2) 1858 0 R (subsection.19.19.3) 1862 0 R (subsection.19.19.4) 1866 0 R (subsection.19.2.1) 1346 0 R (subsection.19.2.2) 1350 0 R (subsection.19.2.3) 1354 0 R (subsection.19.3.1) 1362 0 R (subsection.19.3.2) 1366 0 R (subsection.19.3.3) 1370 0 R (subsection.19.3.4) 1374 0 R (subsection.19.3.5) 1378 0 R (subsection.19.4.1) 1386 0 R (subsection.19.4.2) 1390 0 R (subsection.19.4.3) 1394 0 R (subsection.19.4.4) 1398 0 R (subsection.19.4.5) 1402 0 R (subsection.19.4.6) 1406 0 R (subsection.19.4.7) 1410 0 R (subsection.19.4.8) 1414 0 R (subsection.19.5.1) 1422 0 R (subsection.19.5.10) 1458 0 R (subsection.19.5.11) 1462 0 R (subsection.19.5.12) 1466 0 R (subsection.19.5.13) 1470 0 R (subsection.19.5.14) 1474 0 R (subsection.19.5.15) 1478 0 R (subsection.19.5.16) 1482 0 R (subsection.19.5.17) 1486 0 R (subsection.19.5.18) 1490 0 R (subsection.19.5.19) 1494 0 R (subsection.19.5.2) 1426 0 R (subsection.19.5.3) 1430 0 R (subsection.19.5.4) 1434 0 R (subsection.19.5.5) 1438 0 R (subsection.19.5.6) 1442 0 R (subsection.19.5.7) 1446 0 R (subsection.19.5.8) 1450 0 R (subsection.19.5.9) 1454 0 R (subsection.19.6.1) 1502 0 R (subsection.19.6.2) 1506 0 R (subsection.19.6.3) 1510 0 R (subsection.19.7.1) 1518 0 R (subsection.19.7.2) 1522 0 R (subsection.19.8.1) 1530 0 R (subsection.19.8.2) 1534 0 R (subsection.19.9.1) 1542 0 R (subsection.19.9.2) 1546 0 R (subsection.19.9.3) 1550 0 R (subsection.19.9.4) 1554 0 R (subsection.2.2.1) 50 0 R (subsection.2.2.2) 58 0 R (subsection.2.7.1) 82 0 R (subsection.2.7.2) 86 0 R (subsection.20.3.1) 1886 0 R (subsection.20.3.2) 1890 0 R (subsection.20.3.3) 1894 0 R (subsection.20.3.4) 1898 0 R (subsection.20.3.5) 1902 0 R (subsection.20.4.1) 1910 0 R (subsection.20.4.2) 1914 0 R (subsection.21.3.1) 1938 0 R (subsection.21.4.1) 1946 0 R (subsection.21.4.2) 1950 0 R (subsection.21.4.3) 1954 0 R (subsection.21.4.4) 1958 0 R (subsection.21.4.5) 1962 0 R (subsection.21.4.6) 1966 0 R (subsection.21.5.1) 1974 0 R (subsection.21.5.2) 1978 0 R (subsection.21.5.3) 1982 0 R (subsection.22.3.1) 2042 0 R (subsection.22.4.1) 2050 0 R (subsection.23.2.1) 2070 0 R (subsection.23.2.2) 2074 0 R (subsection.23.2.3) 2082 0 R (subsection.23.3.1) 2094 0 R (subsection.23.3.2) 2098 0 R (subsection.23.3.3) 2102 0 R (subsection.23.5.1) 2114 0 R (subsection.24.2.1) 2130 0 R (subsection.24.2.2) 2150 0 R (subsection.24.2.3) 2166 0 R (subsection.24.2.4) 2170 0 R (subsection.24.5.1) 2202 0 R (subsection.24.5.2) 2210 0 R (subsection.24.5.3) 2214 0 R (subsection.24.6.1) 2222 0 R (subsection.24.6.2) 2226 0 R (subsection.24.6.3) 2230 0 R (subsection.25.2.1) 2246 0 R (subsection.25.2.2) 2254 0 R (subsection.25.2.3) 2266 0 R (subsection.25.2.4) 2270 0 R (subsection.25.2.5) 2274 0 R (subsection.25.3.1) 2298 0 R (subsection.26.3.1) 2318 0 R (subsection.26.3.2) 2322 0 R (subsection.26.3.3) 2326 0 R (subsection.26.3.4) 2330 0 R (subsection.26.4.1) 2338 0 R (subsection.26.4.2) 2342 0 R (subsection.26.4.3) 2346 0 R (subsection.26.4.4) 2350 0 R (subsection.26.4.5) 2354 0 R (subsection.26.5.1) 2362 0 R (subsection.26.5.2) 2366 0 R (subsection.26.5.3) 2370 0 R (subsection.31.1.1) 2446 0 R (subsection.31.1.2) 2470 0 R (subsection.31.2.1) 2478 0 R (subsection.31.2.2) 2482 0 R (subsection.32.1.1) 2494 0 R (subsection.32.1.10) 2530 0 R (subsection.32.1.2) 2498 0 R (subsection.32.1.3) 2502 0 R (subsection.32.1.4) 2506 0 R (subsection.32.1.5) 2510 0 R (subsection.32.1.6) 2514 0 R (subsection.32.1.7) 2518 0 R (subsection.32.1.8) 2522 0 R (subsection.32.1.9) 2526 0 R (subsection.36.1.1) 2622 0 R (subsection.36.1.2) 2626 0 R (subsection.36.4.1) 2650 0 R (subsection.36.5.1) 2666 0 R (subsection.36.5.2) 2670 0 R (subsection.37.5.1) 2702 0 R (subsection.37.6.1) 2710 0 R (subsection.37.6.2) 2714 0 R (subsection.38.2.1) 2730 0 R (subsection.38.2.2) 2734 0 R (subsection.38.2.3) 2738 0 R (subsection.38.3.1) 2746 0 R (subsection.38.3.2) 2750 0 R (subsection.38.3.3) 2754 0 R (subsection.38.3.4) 2758 0 R (subsection.38.3.5) 2762 0 R (subsection.38.3.6) 2766 0 R (subsection.38.4.1) 2774 0 R (subsection.4.3.1) 118 0 R (subsection.4.3.2) 126 0 R (subsection.4.3.3) 134 0 R (subsection.4.3.4) 142 0 R (subsection.4.3.5) 150 0 R (subsection.4.5.1) 166 0 R (subsection.4.5.2) 170 0 R (subsection.4.5.3) 174 0 R (subsection.4.5.4) 178 0 R (subsection.5.2.1) 194 0 R (subsection.5.2.2) 198 0 R (subsection.5.5.1) 214 0 R (subsection.5.5.2) 230 0 R (subsection.5.6.1) 238 0 R (subsection.5.6.2) 242 0 R (subsection.5.6.3) 246 0 R (subsection.5.6.4) 250 0 R (subsection.5.6.5) 254 0 R (subsection.5.6.6) 258 0 R (subsection.6.2.1) 274 0 R (subsection.6.2.2) 282 0 R (subsection.6.2.3) 286 0 R (subsection.6.2.4) 290 0 R (subsection.6.3.1) 298 0 R (subsection.6.4.1) 306 0 R (subsection.6.4.2) 310 0 R (subsection.6.4.3) 314 0 R (subsection.6.4.4) 318 0 R (subsection.7.2.1) 334 0 R (subsection.7.2.2) 338 0 R (subsection.7.2.3) 342 0 R (subsection.7.2.4) 346 0 R (subsection.7.3.1) 366 0 R (subsection.7.3.2) 370 0 R (subsection.7.4.1) 378 0 R (subsection.7.4.2) 382 0 R (subsection.7.4.3) 386 0 R (subsection.7.4.4) 394 0 R (subsection.7.4.5) 398 0 R (subsection.7.4.6) 402 0 R (subsection.7.5.1) 410 0 R (subsection.7.5.2) 414 0 R (subsection.8.3.1) 434 0 R (subsection.8.3.2) 438 0 R (subsubsection.10.7.3.1) 566 0 R (subsubsection.11.2.1.1) 598 0 R (subsubsection.11.2.1.2) 602 0 R (subsubsection.11.4.4.1) 642 0 R (subsubsection.11.4.4.10) 678 0 R (subsubsection.11.4.4.2) 646 0 R (subsubsection.11.4.4.3) 650 0 R (subsubsection.11.4.4.4) 654 0 R (subsubsection.11.4.4.5) 658 0 R (subsubsection.11.4.4.6) 662 0 R (subsubsection.11.4.4.7) 666 0 R (subsubsection.11.4.4.8) 670 0 R (subsubsection.11.4.4.9) 674 0 R (subsubsection.11.4.5.1) 686 0 R (subsubsection.11.4.5.2) 690 0 R (subsubsection.11.4.5.3) 694 0 R (subsubsection.11.4.5.4) 698 0 R (subsubsection.13.4.1.1) 810 0 R (subsubsection.13.4.1.2) 814 0 R (subsubsection.13.5.4.1) 838 0 R (subsubsection.13.5.4.2) 842 0 R (subsubsection.14.2.1.1) 886 0 R (subsubsection.14.2.1.2) 890 0 R (subsubsection.14.2.1.3) 894 0 R (subsubsection.14.2.1.4) 898 0 R (subsubsection.14.2.1.5) 902 0 R (subsubsection.14.2.1.6) 906 0 R (subsubsection.14.2.1.7) 910 0 R (subsubsection.14.2.1.8) 914 0 R (subsubsection.14.2.1.9) 918 0 R (subsubsection.14.3.1.1) 930 0 R (subsubsection.14.3.1.2) 934 0 R (subsubsection.18.7.2.1) 1190 0 R (subsubsection.18.7.2.2) 1194 0 R (subsubsection.18.7.2.3) 1198 0 R (subsubsection.18.7.2.4) 1202 0 R (subsubsection.18.7.2.5) 1206 0 R (subsubsection.18.7.2.6) 1210 0 R (subsubsection.18.7.2.7) 1214 0 R (subsubsection.18.7.2.8) 1218 0 R (subsubsection.18.7.2.9) 1222 0 R (subsubsection.19.11.5.1) 1650 0 R (subsubsection.19.11.5.10) 1686 0 R (subsubsection.19.11.5.11) 1690 0 R (subsubsection.19.11.5.12) 1694 0 R (subsubsection.19.11.5.13) 1698 0 R (subsubsection.19.11.5.14) 1702 0 R (subsubsection.19.11.5.15) 1706 0 R (subsubsection.19.11.5.2) 1654 0 R (subsubsection.19.11.5.3) 1658 0 R (subsubsection.19.11.5.4) 1662 0 R (subsubsection.19.11.5.5) 1666 0 R (subsubsection.19.11.5.6) 1670 0 R (subsubsection.19.11.5.7) 1674 0 R (subsubsection.19.11.5.8) 1678 0 R (subsubsection.19.11.5.9) 1682 0 R (subsubsection.19.13.1.1) 1742 0 R (subsubsection.19.13.1.2) 1746 0 R (subsubsection.19.13.1.3) 1750 0 R (subsubsection.19.13.1.4) 1754 0 R (subsubsection.19.13.1.5) 1758 0 R (subsubsection.19.13.1.6) 1762 0 R (subsubsection.19.13.1.7) 1766 0 R (subsubsection.19.13.1.8) 1770 0 R (subsubsection.2.2.1.1) 54 0 R (subsubsection.21.5.3.1) 1986 0 R (subsubsection.21.5.3.2) 1990 0 R (subsubsection.21.5.3.3) 1994 0 R (subsubsection.21.5.3.4) 1998 0 R (subsubsection.21.5.3.5) 2002 0 R (subsubsection.21.5.3.6) 2006 0 R (subsubsection.21.5.3.7) 2010 0 R (subsubsection.21.5.3.8) 2014 0 R (subsubsection.23.2.2.1) 2078 0 R (subsubsection.23.2.3.1) 2086 0 R (subsubsection.24.2.1.1) 2134 0 R (subsubsection.24.2.1.2) 2138 0 R (subsubsection.24.2.1.3) 2142 0 R (subsubsection.24.2.1.4) 2146 0 R (subsubsection.24.2.2.1) 2154 0 R (subsubsection.24.2.2.2) 2158 0 R (subsubsection.24.2.2.3) 2162 0 R (subsubsection.24.2.4.1) 2174 0 R (subsubsection.24.2.4.2) 2178 0 R (subsubsection.24.2.4.3) 2182 0 R (subsubsection.24.2.4.4) 2186 0 R (subsubsection.24.5.1.1) 2206 0 R (subsubsection.25.2.1.1) 2250 0 R (subsubsection.25.2.2.1) 2258 0 R (subsubsection.25.2.2.2) 2262 0 R (subsubsection.25.2.5.1) 2278 0 R (subsubsection.25.2.5.2) 2282 0 R (subsubsection.25.2.5.3) 2286 0 R (subsubsection.25.2.5.4) 2290 0 R (subsubsection.31.1.1.1) 2450 0 R (subsubsection.31.1.1.2) 2454 0 R (subsubsection.31.1.1.3) 2458 0 R (subsubsection.31.1.1.4) 2462 0 R (subsubsection.31.1.1.5) 2466 0 R (subsubsection.36.1.2.1) 2630 0 R (subsubsection.36.1.2.2) 2634 0 R (subsubsection.36.4.1.1) 2654 0 R (subsubsection.36.4.1.2) 2658 0 R (subsubsection.4.3.1.1) 122 0 R (subsubsection.4.3.2.1) 130 0 R (subsubsection.4.3.3.1) 138 0 R (subsubsection.4.3.4.1) 146 0 R (subsubsection.4.3.5.1) 154 0 R (subsubsection.5.5.1.1) 218 0 R (subsubsection.5.5.1.2) 222 0 R (subsubsection.5.5.1.3) 226 0 R (subsubsection.6.2.1.1) 278 0 R (subsubsection.7.2.4.1) 350 0 R (subsubsection.7.2.4.2) 354 0 R (subsubsection.7.2.4.3) 358 0 R (subsubsection.7.4.3.1) 390 0 R (table.10.1) 4369 0 R (table.10.2) 4371 0 R (table.10.3) 4377 0 R (table.10.4) 4379 0 R (table.11.1) 4524 0 R (table.11.2) 4531 0 R (table.11.3) 4537 0 R (table.13.1) 4589 0 R (table.13.2) 4609 0 R (table.13.3) 4618 0 R (table.13.4) 4625 0 R (table.20.1) 5798 0 R (table.24.1) 6126 0 R (table.24.2) 6128 0 R (table.24.3) 6139 0 R (table.25.1) 6205 0 R (table.31.1) 6369 0 R (table.31.2) 6376 0 R (table.7.1) 4183 0 R (troubleshooting) 6424 0 R (type) 3937 0 R (unicode) 3029 0 R (upgrading-to-3.0) 3032 0 R (winbind) 3023 0 R (winbind-solaris9) 5887 0 R] /Limits [(AccessControls) (winbind-solaris9)] >> endobj 6737 0 obj << @@ -38040,11 +37808,13 @@ endobj /Names 6738 0 R /PageMode /UseOutlines /URI<> /ViewerPreferences<<>> /OpenAction 2857 0 R -/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10b) +/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10a) >> endobj 6740 0 obj << -/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10b)/Keywords() -/CreationDate (D:20030701232500) +/Producer (pdfTeX-1.10a) +/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10a)/Keywords() +/Creator (TeX) +/CreationDate (D:20030715231600) >> endobj xref 0 6741 @@ -38054,6741 +37824,6741 @@ xref 0000000004 00000 f 0000000000 00000 f 0000000009 00000 n -0000294422 00000 n -0002263819 00000 n +0000272800 00000 n +0002193172 00000 n 0000000051 00000 n 0000000091 00000 n -0000298358 00000 n -0002263710 00000 n +0000276621 00000 n +0002193063 00000 n 0000000136 00000 n 0000000178 00000 n -0000298482 00000 n -0002263636 00000 n +0000276745 00000 n +0002192989 00000 n 0000000226 00000 n 0000000259 00000 n -0000298604 00000 n -0002263549 00000 n +0000276867 00000 n +0002192902 00000 n 0000000307 00000 n 0000000341 00000 n -0000303319 00000 n -0002263462 00000 n +0000281348 00000 n +0002192815 00000 n 0000000389 00000 n 0000000428 00000 n -0000308603 00000 n -0002263375 00000 n +0000286422 00000 n +0002192728 00000 n 0000000476 00000 n 0000000514 00000 n -0000308727 00000 n -0002263288 00000 n +0000286546 00000 n +0002192641 00000 n 0000000562 00000 n 0000000593 00000 n -0000310915 00000 n -0002263214 00000 n +0000288690 00000 n +0002192567 00000 n 0000000641 00000 n 0000000677 00000 n -0000314590 00000 n -0002263091 00000 n +0000292235 00000 n +0002192444 00000 n 0000000723 00000 n 0000000773 00000 n -0000314714 00000 n -0002263017 00000 n +0000292359 00000 n +0002192370 00000 n 0000000821 00000 n 0000000874 00000 n -0000314837 00000 n -0002262893 00000 n +0000292482 00000 n +0002192246 00000 n 0000000922 00000 n 0000000975 00000 n -0000314961 00000 n -0002262782 00000 n +0000292606 00000 n +0002192135 00000 n 0000001028 00000 n 0000001074 00000 n -0000315085 00000 n -0002262721 00000 n +0000292730 00000 n +0002192074 00000 n 0000001132 00000 n 0000001194 00000 n -0000319356 00000 n -0002262647 00000 n +0000296871 00000 n +0002192000 00000 n 0000001247 00000 n 0000001276 00000 n -0000319480 00000 n -0002262560 00000 n +0000296995 00000 n +0002191913 00000 n 0000001324 00000 n 0000001394 00000 n -0000319603 00000 n -0002262473 00000 n +0000297118 00000 n +0002191826 00000 n 0000001442 00000 n 0000001500 00000 n -0000319727 00000 n -0002262386 00000 n +0000297242 00000 n +0002191739 00000 n 0000001548 00000 n 0000001644 00000 n -0000319851 00000 n -0002262299 00000 n +0000297366 00000 n +0002191652 00000 n 0000001692 00000 n 0000001741 00000 n -0000322705 00000 n -0002262188 00000 n +0000300168 00000 n +0002191541 00000 n 0000001789 00000 n 0000001825 00000 n -0000322829 00000 n -0002262114 00000 n +0000300292 00000 n +0002191467 00000 n 0000001878 00000 n 0000001948 00000 n -0000323996 00000 n -0002262040 00000 n +0000301418 00000 n +0002191393 00000 n 0000002001 00000 n 0000002160 00000 n -0000324896 00000 n -0002261930 00000 n +0000302295 00000 n +0002191283 00000 n 0000002206 00000 n 0000002255 00000 n -0000325020 00000 n -0002261869 00000 n +0000302419 00000 n +0002191222 00000 n 0000002303 00000 n 0000002330 00000 n -0000325751 00000 n -0002261740 00000 n +0000303136 00000 n +0002191093 00000 n 0000002373 00000 n 0000002423 00000 n -0000329370 00000 n -0002261623 00000 n +0000306555 00000 n +0002190976 00000 n 0000002470 00000 n 0000002523 00000 n -0000329495 00000 n -0002261544 00000 n +0000306680 00000 n +0002190897 00000 n 0000002572 00000 n 0000002617 00000 n -0000329620 00000 n -0002261451 00000 n +0000306805 00000 n +0002190804 00000 n 0000002666 00000 n 0000002702 00000 n -0000333853 00000 n -0002261319 00000 n +0000310863 00000 n +0002190672 00000 n 0000002751 00000 n 0000002795 00000 n -0000333977 00000 n -0002261201 00000 n +0000310987 00000 n +0002190554 00000 n 0000002849 00000 n 0000002894 00000 n -0000337565 00000 n -0002261136 00000 n +0000314487 00000 n +0002190489 00000 n 0000002953 00000 n 0000003002 00000 n -0000337690 00000 n -0002261004 00000 n +0000314612 00000 n +0002190357 00000 n 0000003056 00000 n 0000003102 00000 n -0000337815 00000 n -0002260939 00000 n +0000314737 00000 n +0002190292 00000 n 0000003161 00000 n 0000003210 00000 n -0000337940 00000 n -0002260807 00000 n +0000314862 00000 n +0002190160 00000 n 0000003264 00000 n 0000003334 00000 n -0000338065 00000 n -0002260742 00000 n +0000314987 00000 n +0002190095 00000 n 0000003393 00000 n 0000003442 00000 n -0000343638 00000 n -0002260610 00000 n +0000320408 00000 n +0002189963 00000 n 0000003496 00000 n 0000003563 00000 n -0000347436 00000 n -0002260545 00000 n +0000324078 00000 n +0002189898 00000 n 0000003622 00000 n 0000003671 00000 n -0000347561 00000 n -0002260427 00000 n +0000324203 00000 n +0002189780 00000 n 0000003725 00000 n 0000003790 00000 n -0000351297 00000 n -0002260362 00000 n +0000327847 00000 n +0002189715 00000 n 0000003849 00000 n 0000003898 00000 n -0000351422 00000 n -0002260269 00000 n +0000327972 00000 n +0002189622 00000 n 0000003947 00000 n 0000004007 00000 n -0000355368 00000 n -0002260151 00000 n +0000331905 00000 n +0002189504 00000 n 0000004056 00000 n 0000004093 00000 n -0000355493 00000 n -0002260072 00000 n +0000332030 00000 n +0002189425 00000 n 0000004147 00000 n 0000004199 00000 n -0000358128 00000 n -0002259979 00000 n +0000334568 00000 n +0002189332 00000 n 0000004253 00000 n 0000004316 00000 n -0000358252 00000 n -0002259886 00000 n +0000334692 00000 n +0002189239 00000 n 0000004370 00000 n 0000004429 00000 n -0000358377 00000 n -0002259807 00000 n +0000334817 00000 n +0002189160 00000 n 0000004483 00000 n 0000004557 00000 n -0000362152 00000 n -0002259676 00000 n +0000338495 00000 n +0002189029 00000 n 0000004604 00000 n 0000004640 00000 n -0000362277 00000 n -0002259597 00000 n +0000338620 00000 n +0002188950 00000 n 0000004689 00000 n 0000004734 00000 n -0000371231 00000 n -0002259465 00000 n +0000347147 00000 n +0002188818 00000 n 0000004783 00000 n 0000004831 00000 n -0000371356 00000 n -0002259386 00000 n +0000347272 00000 n +0002188739 00000 n 0000004885 00000 n 0000004934 00000 n -0000375833 00000 n -0002259307 00000 n +0000351642 00000 n +0002188660 00000 n 0000004988 00000 n 0000005042 00000 n -0000384401 00000 n -0002259214 00000 n +0000359798 00000 n +0002188567 00000 n 0000005091 00000 n 0000005153 00000 n -0000389029 00000 n -0002259121 00000 n +0000364252 00000 n +0002188474 00000 n 0000005202 00000 n 0000005250 00000 n -0000389152 00000 n -0002258989 00000 n +0000364375 00000 n +0002188342 00000 n 0000005299 00000 n 0000005361 00000 n -0000389277 00000 n -0002258871 00000 n +0000364500 00000 n +0002188224 00000 n 0000005415 00000 n 0000005469 00000 n -0000389402 00000 n -0002258792 00000 n +0000364625 00000 n +0002188145 00000 n 0000005528 00000 n 0000005577 00000 n -0000393046 00000 n -0002258699 00000 n +0000368206 00000 n +0002188052 00000 n 0000005636 00000 n 0000005710 00000 n -0000393171 00000 n -0002258620 00000 n +0000368331 00000 n +0002187973 00000 n 0000005769 00000 n 0000005832 00000 n -0000398292 00000 n -0002258541 00000 n +0000373236 00000 n +0002187894 00000 n 0000005886 00000 n 0000005945 00000 n -0000402204 00000 n -0002258423 00000 n +0000377086 00000 n +0002187776 00000 n 0000005994 00000 n 0000006044 00000 n -0000402328 00000 n -0002258344 00000 n +0000377210 00000 n +0002187697 00000 n 0000006098 00000 n 0000006167 00000 n -0000402453 00000 n -0002258251 00000 n +0000377335 00000 n +0002187604 00000 n 0000006221 00000 n 0000006428 00000 n -0000402578 00000 n -0002258158 00000 n +0000377460 00000 n +0002187511 00000 n 0000006482 00000 n 0000006554 00000 n -0000405160 00000 n -0002258065 00000 n +0000379964 00000 n +0002187418 00000 n 0000006608 00000 n 0000006721 00000 n -0000405285 00000 n -0002257972 00000 n +0000380089 00000 n +0002187325 00000 n 0000006775 00000 n 0000006919 00000 n -0000405410 00000 n -0002257893 00000 n +0000380214 00000 n +0002187246 00000 n 0000006973 00000 n 0000007097 00000 n -0000409591 00000 n -0002257762 00000 n +0000384299 00000 n +0002187115 00000 n 0000007144 00000 n 0000007187 00000 n -0000409716 00000 n -0002257683 00000 n +0000384424 00000 n +0002187036 00000 n 0000007236 00000 n 0000007281 00000 n -0000413782 00000 n -0002257551 00000 n +0000388401 00000 n +0002186904 00000 n 0000007330 00000 n 0000007386 00000 n -0000413907 00000 n -0002257433 00000 n +0000388526 00000 n +0002186786 00000 n 0000007440 00000 n 0000007501 00000 n -0000418168 00000 n -0002257368 00000 n +0000392711 00000 n +0002186721 00000 n 0000007560 00000 n 0000007613 00000 n -0000418293 00000 n -0002257275 00000 n +0000392836 00000 n +0002186628 00000 n 0000007667 00000 n 0000007724 00000 n -0000418418 00000 n -0002257182 00000 n +0000392961 00000 n +0002186535 00000 n 0000007778 00000 n 0000007854 00000 n -0000422406 00000 n -0002257103 00000 n +0000396810 00000 n +0002186456 00000 n 0000007908 00000 n 0000007984 00000 n -0000422531 00000 n -0002256971 00000 n +0000396935 00000 n +0002186324 00000 n 0000008033 00000 n 0000008095 00000 n -0000422656 00000 n -0002256906 00000 n +0000397060 00000 n +0002186259 00000 n 0000008149 00000 n 0000008196 00000 n -0000426529 00000 n -0002256788 00000 n +0000400851 00000 n +0002186141 00000 n 0000008245 00000 n 0000008282 00000 n -0000426654 00000 n -0002256709 00000 n +0000400976 00000 n +0002186062 00000 n 0000008336 00000 n 0000008408 00000 n -0000426778 00000 n -0002256616 00000 n +0000401100 00000 n +0002185969 00000 n 0000008462 00000 n 0000008542 00000 n -0000426903 00000 n -0002256523 00000 n +0000401225 00000 n +0002185876 00000 n 0000008596 00000 n 0000008660 00000 n -0000428427 00000 n -0002256444 00000 n +0000402722 00000 n +0002185797 00000 n 0000008714 00000 n 0000008768 00000 n -0000432001 00000 n -0002256313 00000 n +0000406117 00000 n +0002185666 00000 n 0000008815 00000 n 0000008854 00000 n -0000432126 00000 n -0002256234 00000 n +0000406242 00000 n +0002185587 00000 n 0000008903 00000 n 0000008948 00000 n -0000432251 00000 n -0002256102 00000 n +0000406367 00000 n +0002185455 00000 n 0000008997 00000 n 0000009073 00000 n -0000436687 00000 n -0002256023 00000 n +0000410626 00000 n +0002185376 00000 n 0000009127 00000 n 0000009194 00000 n -0000441726 00000 n -0002255930 00000 n +0000415448 00000 n +0002185283 00000 n 0000009248 00000 n 0000009336 00000 n -0000446282 00000 n -0002255837 00000 n +0000419889 00000 n +0002185190 00000 n 0000009390 00000 n 0000009463 00000 n -0000446407 00000 n -0002255719 00000 n +0000420014 00000 n +0002185072 00000 n 0000009517 00000 n 0000009601 00000 n -0000446532 00000 n -0002255640 00000 n +0000420139 00000 n +0002184993 00000 n 0000009660 00000 n 0000009716 00000 n -0000446657 00000 n -0002255547 00000 n +0000420264 00000 n +0002184900 00000 n 0000009775 00000 n 0000009814 00000 n -0000446782 00000 n -0002255468 00000 n +0000420389 00000 n +0002184821 00000 n 0000009873 00000 n 0000009906 00000 n -0000451374 00000 n -0002255336 00000 n +0000424737 00000 n +0002184689 00000 n 0000009955 00000 n 0000009999 00000 n -0000451499 00000 n -0002255257 00000 n +0000424862 00000 n +0002184610 00000 n 0000010053 00000 n 0000010118 00000 n -0000456336 00000 n -0002255178 00000 n +0000429618 00000 n +0002184531 00000 n 0000010172 00000 n 0000010240 00000 n -0000459404 00000 n -0002255046 00000 n +0000432578 00000 n +0002184399 00000 n 0000010289 00000 n 0000010340 00000 n -0000459529 00000 n -0002254967 00000 n +0000432703 00000 n +0002184320 00000 n 0000010394 00000 n 0000010439 00000 n -0000459654 00000 n -0002254874 00000 n +0000432828 00000 n +0002184227 00000 n 0000010493 00000 n 0000010544 00000 n -0000464042 00000 n -0002254742 00000 n +0000436847 00000 n +0002184095 00000 n 0000010598 00000 n 0000010651 00000 n -0000464167 00000 n -0002254677 00000 n +0000436972 00000 n +0002184030 00000 n 0000010710 00000 n 0000010753 00000 n -0000464292 00000 n -0002254584 00000 n +0000437097 00000 n +0002183937 00000 n 0000010807 00000 n 0000010855 00000 n -0000468254 00000 n -0002254491 00000 n +0000440786 00000 n +0002183844 00000 n 0000010909 00000 n 0000010957 00000 n -0000468379 00000 n -0002254412 00000 n +0000440911 00000 n +0002183765 00000 n 0000011011 00000 n 0000011042 00000 n -0000468504 00000 n -0002254294 00000 n +0000441035 00000 n +0002183647 00000 n 0000011091 00000 n 0000011128 00000 n -0000468629 00000 n -0002254215 00000 n +0000441160 00000 n +0002183568 00000 n 0000011182 00000 n 0000011242 00000 n -0000468753 00000 n -0002254136 00000 n +0000441285 00000 n +0002183489 00000 n 0000011296 00000 n 0000011352 00000 n -0000473590 00000 n -0002254005 00000 n +0000446312 00000 n +0002183358 00000 n 0000011399 00000 n 0000011440 00000 n -0000473715 00000 n -0002253926 00000 n +0000446437 00000 n +0002183279 00000 n 0000011489 00000 n 0000011534 00000 n -0000473840 00000 n -0002253833 00000 n +0000446562 00000 n +0002183186 00000 n 0000011583 00000 n 0000011617 00000 n -0000477269 00000 n -0002253701 00000 n +0000449846 00000 n +0002183054 00000 n 0000011666 00000 n 0000011711 00000 n -0000477394 00000 n -0002253622 00000 n +0000449971 00000 n +0002182975 00000 n 0000011765 00000 n 0000011821 00000 n -0000477518 00000 n -0002253543 00000 n +0000450095 00000 n +0002182896 00000 n 0000011875 00000 n 0000011922 00000 n -0000479796 00000 n -0002253464 00000 n +0000452304 00000 n +0002182817 00000 n 0000011971 00000 n 0000012008 00000 n -0000480771 00000 n -0002253347 00000 n +0000453254 00000 n +0002182700 00000 n 0000012055 00000 n 0000012115 00000 n -0000480896 00000 n -0002253282 00000 n +0000453379 00000 n +0002182635 00000 n 0000012164 00000 n 0000012192 00000 n -0000481624 00000 n -0002253147 00000 n +0000454094 00000 n +0002182500 00000 n 0000012236 00000 n 0000012282 00000 n -0000485104 00000 n -0002253029 00000 n +0000457514 00000 n +0002182382 00000 n 0000012330 00000 n 0000012394 00000 n -0000485229 00000 n -0002252950 00000 n +0000457639 00000 n +0002182303 00000 n 0000012444 00000 n 0000012490 00000 n -0000488090 00000 n -0002252857 00000 n +0000460408 00000 n +0002182210 00000 n 0000012540 00000 n 0000012582 00000 n -0000492290 00000 n -0002252725 00000 n +0000464530 00000 n +0002182078 00000 n 0000012632 00000 n 0000012667 00000 n -0000492415 00000 n -0002252646 00000 n +0000464655 00000 n +0002181999 00000 n 0000012722 00000 n 0000012768 00000 n -0000492538 00000 n -0002252553 00000 n +0000464778 00000 n +0002181906 00000 n 0000012823 00000 n 0000012874 00000 n -0000497088 00000 n -0002252474 00000 n +0000468950 00000 n +0002181827 00000 n 0000012929 00000 n 0000012980 00000 n -0000497212 00000 n -0002252342 00000 n +0000469074 00000 n +0002181695 00000 n 0000013030 00000 n 0000013077 00000 n -0000501595 00000 n -0002252263 00000 n +0000473430 00000 n +0002181616 00000 n 0000013132 00000 n 0000013188 00000 n -0000504535 00000 n -0002252170 00000 n +0000476347 00000 n +0002181523 00000 n 0000013243 00000 n 0000013296 00000 n -0000508324 00000 n -0002252077 00000 n +0000480091 00000 n +0002181430 00000 n 0000013351 00000 n 0000013408 00000 n -0000512065 00000 n -0002251984 00000 n +0000483685 00000 n +0002181337 00000 n 0000013463 00000 n 0000013520 00000 n -0000512442 00000 n -0002251891 00000 n +0000484062 00000 n +0002181244 00000 n 0000013575 00000 n 0000013632 00000 n -0000512566 00000 n -0002251798 00000 n +0000484186 00000 n +0002181151 00000 n 0000013687 00000 n 0000013733 00000 n -0000512691 00000 n -0002251705 00000 n +0000484311 00000 n +0002181058 00000 n 0000013788 00000 n 0000013851 00000 n -0000516723 00000 n -0002251626 00000 n +0000488226 00000 n +0002180979 00000 n 0000013906 00000 n 0000013972 00000 n -0000516847 00000 n -0002251494 00000 n +0000488350 00000 n +0002180847 00000 n 0000014022 00000 n 0000014093 00000 n -0000521532 00000 n -0002251415 00000 n +0000492976 00000 n +0002180768 00000 n 0000014148 00000 n 0000014199 00000 n -0000525010 00000 n -0002251322 00000 n +0000496392 00000 n +0002180675 00000 n 0000014254 00000 n 0000014297 00000 n -0000525133 00000 n -0002251243 00000 n +0000496515 00000 n +0002180596 00000 n 0000014352 00000 n 0000014398 00000 n -0000525258 00000 n -0002251111 00000 n +0000496640 00000 n +0002180464 00000 n 0000014448 00000 n 0000014486 00000 n -0000528959 00000 n -0002251032 00000 n +0000500201 00000 n +0002180385 00000 n 0000014541 00000 n 0000014596 00000 n -0000529084 00000 n -0002250953 00000 n +0000500326 00000 n +0002180306 00000 n 0000014651 00000 n 0000014699 00000 n -0000532489 00000 n -0002250821 00000 n +0000503699 00000 n +0002180174 00000 n 0000014749 00000 n 0000014804 00000 n -0000532613 00000 n -0002250742 00000 n +0000503823 00000 n +0002180095 00000 n 0000014859 00000 n 0000014911 00000 n -0000536851 00000 n -0002250649 00000 n +0000507990 00000 n +0002180002 00000 n 0000014966 00000 n 0000015011 00000 n -0000536976 00000 n -0002250531 00000 n +0000508115 00000 n +0002179884 00000 n 0000015066 00000 n 0000015116 00000 n -0000540837 00000 n -0002250466 00000 n +0000511873 00000 n +0002179819 00000 n 0000015176 00000 n 0000015242 00000 n -0000552546 00000 n -0002250348 00000 n +0000521308 00000 n +0002179701 00000 n 0000015292 00000 n 0000015330 00000 n -0000552671 00000 n -0002250269 00000 n +0000521433 00000 n +0002179622 00000 n 0000015385 00000 n 0000015484 00000 n -0000552795 00000 n -0002250190 00000 n +0000521557 00000 n +0002179543 00000 n 0000015539 00000 n 0000015640 00000 n -0000556406 00000 n -0002250058 00000 n +0000525084 00000 n +0002179411 00000 n 0000015688 00000 n 0000015740 00000 n -0000556531 00000 n -0002249979 00000 n +0000525209 00000 n +0002179332 00000 n 0000015790 00000 n 0000015836 00000 n -0000560960 00000 n -0002249847 00000 n +0000529520 00000 n +0002179200 00000 n 0000015886 00000 n 0000015932 00000 n -0000564967 00000 n -0002249729 00000 n +0000533418 00000 n +0002179082 00000 n 0000015987 00000 n 0000016044 00000 n -0000569068 00000 n -0002249650 00000 n +0000537224 00000 n +0002179003 00000 n 0000016104 00000 n 0000016166 00000 n -0000569193 00000 n -0002249571 00000 n +0000537349 00000 n +0002178924 00000 n 0000016226 00000 n 0000016292 00000 n -0000569318 00000 n -0002249492 00000 n +0000537474 00000 n +0002178845 00000 n 0000016347 00000 n 0000016426 00000 n -0000572796 00000 n -0002249360 00000 n +0000540836 00000 n +0002178713 00000 n 0000016476 00000 n 0000016525 00000 n -0000572921 00000 n -0002249281 00000 n +0000540961 00000 n +0002178634 00000 n 0000016580 00000 n 0000016628 00000 n -0000573046 00000 n -0002249202 00000 n +0000541086 00000 n +0002178555 00000 n 0000016683 00000 n 0000016729 00000 n -0000575869 00000 n -0002249070 00000 n +0000543840 00000 n +0002178423 00000 n 0000016779 00000 n 0000016821 00000 n -0000580268 00000 n -0002248991 00000 n +0000548050 00000 n +0002178344 00000 n 0000016876 00000 n 0000016913 00000 n -0000580393 00000 n -0002248898 00000 n +0000548175 00000 n +0002178251 00000 n 0000016968 00000 n 0000017034 00000 n -0000580518 00000 n -0002248805 00000 n +0000548300 00000 n +0002178158 00000 n 0000017089 00000 n 0000017122 00000 n -0000580642 00000 n -0002248672 00000 n +0000548424 00000 n +0002178025 00000 n 0000017177 00000 n 0000017211 00000 n -0000586482 00000 n -0002248593 00000 n +0000553983 00000 n +0002177946 00000 n 0000017271 00000 n 0000017322 00000 n -0000586607 00000 n -0002248500 00000 n +0000554108 00000 n +0002177853 00000 n 0000017382 00000 n 0000017463 00000 n -0000589758 00000 n -0002248407 00000 n +0000557237 00000 n +0002177760 00000 n 0000017523 00000 n 0000017574 00000 n -0000591589 00000 n -0002248314 00000 n +0000559054 00000 n +0002177667 00000 n 0000017634 00000 n 0000017691 00000 n -0000596265 00000 n -0002248221 00000 n +0000563433 00000 n +0002177574 00000 n 0000017751 00000 n 0000017797 00000 n -0000598797 00000 n -0002248128 00000 n +0000565947 00000 n +0002177481 00000 n 0000017857 00000 n 0000017916 00000 n -0000603112 00000 n -0002248035 00000 n +0000570093 00000 n +0002177388 00000 n 0000017976 00000 n 0000018033 00000 n -0000603237 00000 n -0002247942 00000 n +0000570218 00000 n +0002177295 00000 n 0000018093 00000 n 0000018166 00000 n -0000605221 00000 n -0002247849 00000 n +0000572147 00000 n +0002177202 00000 n 0000018226 00000 n 0000018297 00000 n -0000605346 00000 n -0002247770 00000 n +0000572272 00000 n +0002177123 00000 n 0000018358 00000 n 0000018412 00000 n -0000609512 00000 n -0002247638 00000 n +0000576224 00000 n +0002176991 00000 n 0000018467 00000 n 0000018499 00000 n -0000609636 00000 n -0002247559 00000 n +0000576348 00000 n +0002176912 00000 n 0000018559 00000 n 0000018609 00000 n -0000609760 00000 n -0002247466 00000 n +0000576472 00000 n +0002176819 00000 n 0000018669 00000 n 0000018709 00000 n -0000612768 00000 n -0002247373 00000 n +0000579346 00000 n +0002176726 00000 n 0000018769 00000 n 0000018845 00000 n -0000612893 00000 n -0002247294 00000 n +0000579471 00000 n +0002176647 00000 n 0000018905 00000 n 0000018972 00000 n -0000613018 00000 n -0002247215 00000 n +0000579596 00000 n +0002176568 00000 n 0000019027 00000 n 0000019057 00000 n -0000613143 00000 n -0002247097 00000 n +0000579721 00000 n +0002176450 00000 n 0000019107 00000 n 0000019145 00000 n -0000613268 00000 n -0002247018 00000 n +0000579846 00000 n +0002176371 00000 n 0000019200 00000 n 0000019271 00000 n -0000613393 00000 n -0002246925 00000 n +0000579971 00000 n +0002176278 00000 n 0000019326 00000 n 0000019404 00000 n -0000614646 00000 n -0002246846 00000 n +0000581194 00000 n +0002176199 00000 n 0000019459 00000 n 0000019512 00000 n -0000626517 00000 n -0002246714 00000 n +0000591333 00000 n +0002176067 00000 n 0000019560 00000 n 0000019617 00000 n -0000626642 00000 n -0002246635 00000 n +0000591458 00000 n +0002175988 00000 n 0000019667 00000 n 0000019713 00000 n -0000626767 00000 n -0002246503 00000 n +0000591583 00000 n +0002175856 00000 n 0000019763 00000 n 0000019798 00000 n -0000630257 00000 n -0002246438 00000 n +0000594993 00000 n +0002175791 00000 n 0000019853 00000 n 0000019901 00000 n -0000632490 00000 n -0002246306 00000 n +0000597139 00000 n +0002175659 00000 n 0000019951 00000 n 0000019997 00000 n -0000632615 00000 n -0002246227 00000 n +0000597264 00000 n +0002175580 00000 n 0000020052 00000 n 0000020111 00000 n -0000632867 00000 n -0002246148 00000 n +0000597516 00000 n +0002175501 00000 n 0000020166 00000 n 0000020226 00000 n -0000635391 00000 n -0002246030 00000 n +0000599976 00000 n +0002175383 00000 n 0000020276 00000 n 0000020314 00000 n -0000635516 00000 n -0002245951 00000 n +0000600101 00000 n +0002175304 00000 n 0000020369 00000 n 0000020415 00000 n -0000635640 00000 n -0002245872 00000 n +0000600225 00000 n +0002175225 00000 n 0000020470 00000 n 0000020548 00000 n -0000639278 00000 n -0002245740 00000 n +0000603815 00000 n +0002175093 00000 n 0000020596 00000 n 0000020660 00000 n -0000639403 00000 n -0002245661 00000 n +0000603940 00000 n +0002175014 00000 n 0000020710 00000 n 0000020756 00000 n -0000643795 00000 n -0002245529 00000 n +0000608214 00000 n +0002174882 00000 n 0000020806 00000 n 0000020858 00000 n -0000643920 00000 n -0002245450 00000 n +0000608339 00000 n +0002174803 00000 n 0000020913 00000 n 0000020989 00000 n -0000648549 00000 n -0002245357 00000 n +0000612711 00000 n +0002174710 00000 n 0000021044 00000 n 0000021091 00000 n -0000648801 00000 n -0002245278 00000 n +0000612963 00000 n +0002174631 00000 n 0000021146 00000 n 0000021206 00000 n -0000655110 00000 n -0002245146 00000 n +0000619178 00000 n +0002174499 00000 n 0000021256 00000 n 0000021313 00000 n -0000655235 00000 n -0002245067 00000 n +0000619303 00000 n +0002174420 00000 n 0000021368 00000 n 0000021424 00000 n -0000655360 00000 n -0002244974 00000 n +0000619428 00000 n +0002174327 00000 n 0000021479 00000 n 0000021551 00000 n -0000659177 00000 n -0002244895 00000 n +0000622979 00000 n +0002174248 00000 n 0000021606 00000 n 0000021655 00000 n -0000659301 00000 n -0002244763 00000 n +0000623103 00000 n +0002174116 00000 n 0000021705 00000 n 0000021755 00000 n -0000663208 00000 n -0002244659 00000 n +0000626677 00000 n +0002174012 00000 n 0000021810 00000 n 0000021865 00000 n -0000667274 00000 n -0002244580 00000 n +0000630442 00000 n +0002173933 00000 n 0000021925 00000 n 0000021984 00000 n -0000667525 00000 n -0002244501 00000 n +0000630693 00000 n +0002173854 00000 n 0000022044 00000 n 0000022088 00000 n -0000671349 00000 n -0002244369 00000 n +0000634410 00000 n +0002173722 00000 n 0000022138 00000 n 0000022220 00000 n -0000671474 00000 n -0002244290 00000 n +0000634535 00000 n +0002173643 00000 n 0000022275 00000 n 0000022353 00000 n -0000675803 00000 n -0002244197 00000 n +0000638763 00000 n +0002173550 00000 n 0000022408 00000 n 0000022473 00000 n -0000675928 00000 n -0002244104 00000 n +0000638888 00000 n +0002173457 00000 n 0000022528 00000 n 0000022577 00000 n -0000676052 00000 n -0002243972 00000 n +0000639012 00000 n +0002173325 00000 n 0000022632 00000 n 0000022696 00000 n -0000680405 00000 n -0002243893 00000 n +0000643316 00000 n +0002173246 00000 n 0000022756 00000 n 0000022801 00000 n -0000680530 00000 n -0002243814 00000 n +0000643441 00000 n +0002173167 00000 n 0000022861 00000 n 0000022911 00000 n -0000680654 00000 n -0002243721 00000 n +0000643565 00000 n +0002173074 00000 n 0000022966 00000 n 0000023032 00000 n -0000685675 00000 n -0002243628 00000 n +0000648430 00000 n +0002172981 00000 n 0000023087 00000 n 0000023172 00000 n -0000689491 00000 n -0002243549 00000 n +0000652109 00000 n +0002172902 00000 n 0000023227 00000 n 0000023312 00000 n -0000689616 00000 n -0002243431 00000 n +0000652234 00000 n +0002172784 00000 n 0000023362 00000 n 0000023400 00000 n -0000689741 00000 n -0002243352 00000 n +0000652359 00000 n +0002172705 00000 n 0000023455 00000 n 0000023519 00000 n -0000693651 00000 n -0002243273 00000 n +0000656091 00000 n +0002172626 00000 n 0000023574 00000 n 0000023685 00000 n -0000697225 00000 n -0002243141 00000 n +0000659592 00000 n +0002172494 00000 n 0000023733 00000 n 0000023779 00000 n -0000697350 00000 n -0002243062 00000 n +0000659717 00000 n +0002172415 00000 n 0000023829 00000 n 0000023875 00000 n -0000697475 00000 n -0002242930 00000 n +0000659842 00000 n +0002172283 00000 n 0000023925 00000 n 0000023960 00000 n -0000702287 00000 n -0002242826 00000 n +0000664461 00000 n +0002172179 00000 n 0000024015 00000 n 0000024072 00000 n -0000710410 00000 n -0002242747 00000 n +0000672474 00000 n +0002172100 00000 n 0000024132 00000 n 0000024188 00000 n -0000710535 00000 n -0002242654 00000 n +0000672599 00000 n +0002172007 00000 n 0000024248 00000 n 0000024310 00000 n -0000710659 00000 n -0002242561 00000 n +0000672723 00000 n +0002171914 00000 n 0000024370 00000 n 0000024432 00000 n -0000710784 00000 n -0002242468 00000 n +0000672848 00000 n +0002171821 00000 n 0000024492 00000 n 0000024552 00000 n -0000710909 00000 n -0002242375 00000 n +0000672973 00000 n +0002171728 00000 n 0000024612 00000 n 0000024661 00000 n -0000715004 00000 n -0002242282 00000 n +0000676943 00000 n +0002171635 00000 n 0000024721 00000 n 0000024765 00000 n -0000715129 00000 n -0002242189 00000 n +0000677068 00000 n +0002171542 00000 n 0000024825 00000 n 0000024874 00000 n -0000715253 00000 n -0002242096 00000 n +0000677192 00000 n +0002171449 00000 n 0000024934 00000 n 0000025010 00000 n -0000715377 00000 n -0002242017 00000 n +0000677316 00000 n +0002171370 00000 n 0000025070 00000 n 0000025133 00000 n -0000719861 00000 n -0002241885 00000 n +0000681778 00000 n +0002171238 00000 n 0000025183 00000 n 0000025243 00000 n -0000723028 00000 n -0002241781 00000 n +0000684892 00000 n +0002171134 00000 n 0000025298 00000 n 0000025346 00000 n -0000723153 00000 n -0002241702 00000 n +0000685017 00000 n +0002171055 00000 n 0000025406 00000 n 0000025452 00000 n -0000723277 00000 n -0002241623 00000 n +0000685141 00000 n +0002170976 00000 n 0000025512 00000 n 0000025565 00000 n -0000726618 00000 n -0002241491 00000 n +0000688438 00000 n +0002170844 00000 n 0000025615 00000 n 0000025693 00000 n -0000732106 00000 n -0002241412 00000 n +0000693589 00000 n +0002170765 00000 n 0000025748 00000 n 0000025802 00000 n -0000732231 00000 n -0002241333 00000 n +0000693714 00000 n +0002170686 00000 n 0000025857 00000 n 0000025906 00000 n -0000736071 00000 n -0002241240 00000 n +0000697460 00000 n +0002170593 00000 n 0000025956 00000 n 0000026007 00000 n -0000736195 00000 n -0002241108 00000 n +0000697584 00000 n +0002170461 00000 n 0000026057 00000 n 0000026095 00000 n -0000740647 00000 n -0002241043 00000 n +0000701882 00000 n +0002170396 00000 n 0000026150 00000 n 0000026203 00000 n -0000740772 00000 n -0002240964 00000 n +0000702007 00000 n +0002170317 00000 n 0000026253 00000 n 0000026296 00000 n -0000744256 00000 n -0002240830 00000 n +0000705417 00000 n +0002170183 00000 n 0000026344 00000 n 0000026381 00000 n -0000744381 00000 n -0002240751 00000 n +0000705542 00000 n +0002170104 00000 n 0000026431 00000 n 0000026468 00000 n -0000744506 00000 n -0002240658 00000 n +0000705667 00000 n +0002170011 00000 n 0000026518 00000 n 0000026564 00000 n -0000744631 00000 n -0002240524 00000 n +0000705792 00000 n +0002169877 00000 n 0000026614 00000 n 0000026693 00000 n -0000744756 00000 n -0002240445 00000 n +0000705917 00000 n +0002169798 00000 n 0000026748 00000 n 0000026802 00000 n -0000748116 00000 n -0002240352 00000 n +0000709200 00000 n +0002169705 00000 n 0000026857 00000 n 0000026905 00000 n -0000748241 00000 n -0002240259 00000 n +0000709325 00000 n +0002169612 00000 n 0000026960 00000 n 0000027013 00000 n -0000748366 00000 n -0002240166 00000 n +0000709450 00000 n +0002169519 00000 n 0000027068 00000 n 0000027111 00000 n -0000751161 00000 n -0002240071 00000 n +0000712154 00000 n +0002169424 00000 n 0000027166 00000 n 0000027220 00000 n -0000751285 00000 n -0002239989 00000 n +0000712278 00000 n +0002169342 00000 n 0000027276 00000 n 0000027319 00000 n -0000755169 00000 n -0002239892 00000 n +0000716070 00000 n +0002169245 00000 n 0000027370 00000 n 0000027411 00000 n -0000755295 00000 n -0002239768 00000 n +0000716196 00000 n +0002169121 00000 n 0000027462 00000 n 0000027501 00000 n -0000755421 00000 n -0002239684 00000 n +0000716322 00000 n +0002169037 00000 n 0000027557 00000 n 0000027638 00000 n -0000755547 00000 n -0002239600 00000 n +0000716448 00000 n +0002168953 00000 n 0000027694 00000 n 0000027775 00000 n -0000759264 00000 n -0002239462 00000 n +0000720136 00000 n +0002168815 00000 n 0000027824 00000 n 0000027879 00000 n -0000759390 00000 n -0002239378 00000 n +0000720262 00000 n +0002168731 00000 n 0000027930 00000 n 0000027977 00000 n -0000759515 00000 n -0002239279 00000 n +0000720387 00000 n +0002168632 00000 n 0000028028 00000 n 0000028083 00000 n -0000763467 00000 n -0002239139 00000 n +0000724260 00000 n +0002168492 00000 n 0000028134 00000 n 0000028202 00000 n -0000763591 00000 n -0002239055 00000 n +0000724384 00000 n +0002168408 00000 n 0000028258 00000 n 0000028349 00000 n -0000763717 00000 n -0002238971 00000 n +0000724510 00000 n +0002168324 00000 n 0000028405 00000 n 0000028502 00000 n -0000763842 00000 n -0002238831 00000 n +0000724635 00000 n +0002168184 00000 n 0000028553 00000 n 0000028619 00000 n -0000763968 00000 n -0002238747 00000 n +0000724761 00000 n +0002168100 00000 n 0000028675 00000 n 0000028733 00000 n -0000767929 00000 n -0002238663 00000 n +0000728649 00000 n +0002168016 00000 n 0000028789 00000 n 0000028846 00000 n -0000770347 00000 n -0002238538 00000 n +0000731008 00000 n +0002167891 00000 n 0000028897 00000 n 0000028936 00000 n -0000770473 00000 n -0002238469 00000 n +0000731134 00000 n +0002167822 00000 n 0000028992 00000 n 0000029065 00000 n -0000774183 00000 n -0002238330 00000 n +0000734745 00000 n +0002167683 00000 n 0000029114 00000 n 0000029195 00000 n -0000774309 00000 n -0002238246 00000 n +0000734871 00000 n +0002167599 00000 n 0000029246 00000 n 0000029293 00000 n -0000776289 00000 n -0002238162 00000 n +0000736769 00000 n +0002167515 00000 n 0000029344 00000 n 0000029383 00000 n -0000780062 00000 n -0002238022 00000 n +0000740482 00000 n +0002167375 00000 n 0000029432 00000 n 0000029482 00000 n -0000780188 00000 n -0002237938 00000 n +0000740608 00000 n +0002167291 00000 n 0000029533 00000 n 0000029580 00000 n -0000780314 00000 n -0002237798 00000 n +0000740734 00000 n +0002167151 00000 n 0000029631 00000 n 0000029679 00000 n -0000784146 00000 n -0002237714 00000 n +0000744105 00000 n +0002167067 00000 n 0000029735 00000 n 0000029807 00000 n -0000784712 00000 n -0002237615 00000 n +0000744671 00000 n +0002166968 00000 n 0000029863 00000 n 0000029932 00000 n -0000784838 00000 n -0002237516 00000 n +0000744797 00000 n +0002166869 00000 n 0000029988 00000 n 0000030046 00000 n -0000788481 00000 n -0002237417 00000 n +0000747789 00000 n +0002166770 00000 n 0000030102 00000 n 0000030168 00000 n -0000788606 00000 n -0002237333 00000 n +0000747914 00000 n +0002166686 00000 n 0000030224 00000 n 0000030279 00000 n -0000791918 00000 n -0002237193 00000 n +0000751197 00000 n +0002166546 00000 n 0000030330 00000 n 0000030400 00000 n -0000792044 00000 n -0002237109 00000 n +0000751323 00000 n +0002166462 00000 n 0000030456 00000 n 0000030531 00000 n -0000794414 00000 n -0002237025 00000 n +0000753651 00000 n +0002166378 00000 n 0000030587 00000 n 0000030646 00000 n -0000800151 00000 n -0002236926 00000 n +0000759250 00000 n +0002166279 00000 n 0000030697 00000 n 0000030774 00000 n -0000811177 00000 n -0002236786 00000 n +0000770123 00000 n +0002166139 00000 n 0000030825 00000 n 0000030897 00000 n -0000811303 00000 n -0002236702 00000 n +0000770249 00000 n +0002166055 00000 n 0000030953 00000 n 0000031001 00000 n -0000816263 00000 n -0002236603 00000 n +0000775104 00000 n +0002165956 00000 n 0000031057 00000 n 0000031107 00000 n -0000821145 00000 n -0002236504 00000 n +0000779737 00000 n +0002165857 00000 n 0000031163 00000 n 0000031226 00000 n -0000821271 00000 n -0002236405 00000 n +0000779863 00000 n +0002165758 00000 n 0000031282 00000 n 0000031324 00000 n -0000825810 00000 n -0002236306 00000 n +0000784009 00000 n +0002165659 00000 n 0000031380 00000 n 0000031464 00000 n -0000830167 00000 n -0002236222 00000 n +0000788231 00000 n +0002165575 00000 n 0000031520 00000 n 0000031582 00000 n -0000835221 00000 n -0002236082 00000 n +0000793108 00000 n +0002165435 00000 n 0000031633 00000 n 0000031698 00000 n -0000835347 00000 n -0002235998 00000 n +0000793234 00000 n +0002165351 00000 n 0000031754 00000 n 0000031830 00000 n -0000839626 00000 n -0002235899 00000 n +0000797384 00000 n +0002165252 00000 n 0000031886 00000 n 0000031963 00000 n -0000839751 00000 n -0002235800 00000 n +0000797509 00000 n +0002165153 00000 n 0000032019 00000 n 0000032077 00000 n -0000843594 00000 n -0002235701 00000 n +0000801238 00000 n +0002165054 00000 n 0000032133 00000 n 0000032198 00000 n -0000847128 00000 n -0002235617 00000 n +0000804695 00000 n +0002164970 00000 n 0000032254 00000 n 0000032319 00000 n -0000851850 00000 n -0002235477 00000 n +0000809301 00000 n +0002164830 00000 n 0000032370 00000 n 0000032431 00000 n -0000851976 00000 n -0002235393 00000 n +0000809427 00000 n +0002164746 00000 n 0000032487 00000 n 0000032570 00000 n -0000856634 00000 n -0002235268 00000 n +0000813951 00000 n +0002164621 00000 n 0000032626 00000 n 0000032706 00000 n -0000857011 00000 n -0002235184 00000 n +0000814328 00000 n +0002164537 00000 n 0000032767 00000 n 0000032825 00000 n -0000863560 00000 n -0002235085 00000 n +0000820764 00000 n +0002164438 00000 n 0000032886 00000 n 0000032983 00000 n -0000863686 00000 n -0002234986 00000 n +0000820890 00000 n +0002164339 00000 n 0000033044 00000 n 0000033118 00000 n -0000866461 00000 n -0002234887 00000 n +0000823649 00000 n +0002164240 00000 n 0000033179 00000 n 0000033263 00000 n -0000869178 00000 n -0002234788 00000 n +0000826347 00000 n +0002164141 00000 n 0000033324 00000 n 0000033386 00000 n -0000871959 00000 n -0002234689 00000 n +0000829088 00000 n +0002164042 00000 n 0000033447 00000 n 0000033540 00000 n -0000876366 00000 n -0002234590 00000 n +0000833392 00000 n +0002163943 00000 n 0000033601 00000 n 0000033673 00000 n -0000876492 00000 n -0002234491 00000 n +0000833518 00000 n +0002163844 00000 n 0000033734 00000 n 0000033819 00000 n -0000879013 00000 n -0002234407 00000 n +0000836017 00000 n +0002163760 00000 n 0000033880 00000 n 0000033960 00000 n -0000883361 00000 n -0002234267 00000 n +0000840196 00000 n +0002163620 00000 n 0000034011 00000 n 0000034118 00000 n -0000883487 00000 n -0002234183 00000 n +0000840322 00000 n +0002163536 00000 n 0000034174 00000 n 0000034238 00000 n -0000888348 00000 n -0002234084 00000 n +0000844877 00000 n +0002163437 00000 n 0000034294 00000 n 0000034369 00000 n -0000892647 00000 n -0002233985 00000 n +0000849081 00000 n +0002163338 00000 n 0000034425 00000 n 0000034493 00000 n -0000892773 00000 n -0002233901 00000 n +0000849207 00000 n +0002163254 00000 n 0000034549 00000 n 0000034639 00000 n -0000897559 00000 n -0002233761 00000 n +0000853653 00000 n +0002163114 00000 n 0000034690 00000 n 0000034729 00000 n -0000897685 00000 n -0002233677 00000 n +0000853779 00000 n +0002163030 00000 n 0000034785 00000 n 0000034865 00000 n -0000902206 00000 n -0002233578 00000 n +0000858260 00000 n +0002162931 00000 n 0000034921 00000 n 0000034985 00000 n -0000907515 00000 n -0002233479 00000 n +0000863367 00000 n +0002162832 00000 n 0000035041 00000 n 0000035112 00000 n -0000907641 00000 n -0002233380 00000 n +0000863493 00000 n +0002162733 00000 n 0000035168 00000 n 0000035253 00000 n -0000911900 00000 n -0002233281 00000 n +0000867700 00000 n +0002162634 00000 n 0000035309 00000 n 0000035376 00000 n -0000919443 00000 n -0002233182 00000 n +0000875074 00000 n +0002162535 00000 n 0000035432 00000 n 0000035483 00000 n -0000919569 00000 n -0002233098 00000 n +0000875200 00000 n +0002162451 00000 n 0000035539 00000 n 0000035630 00000 n -0000919695 00000 n -0002232958 00000 n +0000875326 00000 n +0002162311 00000 n 0000035682 00000 n 0000035729 00000 n -0000919821 00000 n -0002232874 00000 n +0000875452 00000 n +0002162227 00000 n 0000035786 00000 n 0000035832 00000 n -0000923822 00000 n -0002232775 00000 n +0000879240 00000 n +0002162128 00000 n 0000035889 00000 n 0000035950 00000 n -0000923948 00000 n -0002232676 00000 n +0000879366 00000 n +0002162029 00000 n 0000036007 00000 n 0000036055 00000 n -0000924074 00000 n -0002232592 00000 n +0000879492 00000 n +0002161945 00000 n 0000036112 00000 n 0000036164 00000 n -0000928870 00000 n -0002232493 00000 n +0000884098 00000 n +0002161846 00000 n 0000036216 00000 n 0000036297 00000 n -0000933248 00000 n -0002232394 00000 n +0000888318 00000 n +0002161747 00000 n 0000036349 00000 n 0000036398 00000 n -0000933374 00000 n -0002232295 00000 n +0000888444 00000 n +0002161648 00000 n 0000036450 00000 n 0000036521 00000 n -0000936499 00000 n -0002232196 00000 n +0000891437 00000 n +0002161549 00000 n 0000036573 00000 n 0000036658 00000 n -0000936625 00000 n -0002232071 00000 n +0000891563 00000 n +0002161424 00000 n 0000036710 00000 n 0000036763 00000 n -0000936751 00000 n -0002231987 00000 n +0000891689 00000 n +0002161340 00000 n 0000036820 00000 n 0000036895 00000 n -0000936877 00000 n -0002231903 00000 n +0000891815 00000 n +0002161256 00000 n 0000036952 00000 n 0000037052 00000 n -0000941301 00000 n -0002231763 00000 n +0000896154 00000 n +0002161116 00000 n 0000037101 00000 n 0000037159 00000 n -0000941427 00000 n -0002231638 00000 n +0000896280 00000 n +0002160991 00000 n 0000037210 00000 n 0000037248 00000 n -0000941553 00000 n -0002231554 00000 n +0000896406 00000 n +0002160907 00000 n 0000037304 00000 n 0000037353 00000 n -0000941679 00000 n -0002231470 00000 n +0000896532 00000 n +0002160823 00000 n 0000037409 00000 n 0000037445 00000 n -0000941804 00000 n -0002231330 00000 n +0000896657 00000 n +0002160683 00000 n 0000037496 00000 n 0000037557 00000 n -0000945844 00000 n -0002231246 00000 n +0000900609 00000 n +0002160599 00000 n 0000037613 00000 n 0000037672 00000 n -0000945970 00000 n -0002231147 00000 n +0000900735 00000 n +0002160500 00000 n 0000037728 00000 n 0000037789 00000 n -0000948433 00000 n -0002231063 00000 n +0000903178 00000 n +0002160416 00000 n 0000037845 00000 n 0000037912 00000 n -0000952054 00000 n -0002230923 00000 n +0000906749 00000 n +0002160276 00000 n 0000037963 00000 n 0000038011 00000 n -0000952180 00000 n -0002230839 00000 n +0000906875 00000 n +0002160192 00000 n 0000038067 00000 n 0000038139 00000 n -0000952306 00000 n -0002230740 00000 n +0000907001 00000 n +0002160093 00000 n 0000038195 00000 n 0000038322 00000 n -0000955803 00000 n -0002230641 00000 n +0000910364 00000 n +0002159994 00000 n 0000038378 00000 n 0000038452 00000 n -0000955928 00000 n -0002230542 00000 n +0000910489 00000 n +0002159895 00000 n 0000038508 00000 n 0000038598 00000 n -0000960370 00000 n -0002230458 00000 n +0000914725 00000 n +0002159811 00000 n 0000038654 00000 n 0000038737 00000 n -0000960496 00000 n -0002230318 00000 n +0000914851 00000 n +0002159671 00000 n 0000038788 00000 n 0000038905 00000 n -0000964847 00000 n -0002230234 00000 n +0000919138 00000 n +0002159587 00000 n 0000038961 00000 n 0000039025 00000 n -0000964973 00000 n -0002230135 00000 n +0000919264 00000 n +0002159488 00000 n 0000039081 00000 n 0000039137 00000 n -0000965099 00000 n -0002230036 00000 n +0000919390 00000 n +0002159389 00000 n 0000039193 00000 n 0000039261 00000 n -0000998311 00000 n -0002229937 00000 n +0000952468 00000 n +0002159290 00000 n 0000039317 00000 n 0000039371 00000 n -0001012636 00000 n -0002229838 00000 n +0000966731 00000 n +0002159191 00000 n 0000039427 00000 n 0000039514 00000 n -0001016878 00000 n -0002229739 00000 n +0000970922 00000 n +0002159092 00000 n 0000039570 00000 n 0000039650 00000 n -0001021018 00000 n -0002229640 00000 n +0000974921 00000 n +0002158993 00000 n 0000039706 00000 n 0000039780 00000 n -0001021144 00000 n -0002229556 00000 n +0000975047 00000 n +0002158909 00000 n 0000039836 00000 n 0000039911 00000 n -0001021270 00000 n -0002229415 00000 n +0000975173 00000 n +0002158768 00000 n 0000039962 00000 n 0000040019 00000 n -0001026242 00000 n -0002229331 00000 n +0000980028 00000 n +0002158684 00000 n 0000040075 00000 n 0000040130 00000 n -0001029369 00000 n -0002229232 00000 n +0000983097 00000 n +0002158585 00000 n 0000040186 00000 n 0000040240 00000 n -0001032576 00000 n -0002229133 00000 n +0000986118 00000 n +0002158486 00000 n 0000040296 00000 n 0000040343 00000 n -0001032702 00000 n -0002229034 00000 n +0000986244 00000 n +0002158387 00000 n 0000040399 00000 n 0000040437 00000 n -0001052711 00000 n -0002228935 00000 n +0001006193 00000 n +0002158288 00000 n 0000040493 00000 n 0000040527 00000 n -0001077201 00000 n -0002228836 00000 n +0001030552 00000 n +0002158189 00000 n 0000040583 00000 n 0000040621 00000 n -0001133098 00000 n -0002228737 00000 n +0001086326 00000 n +0002158090 00000 n 0000040677 00000 n 0000040732 00000 n -0001133224 00000 n -0002228638 00000 n +0001086452 00000 n +0002157991 00000 n 0000040788 00000 n 0000040844 00000 n -0001138202 00000 n -0002228539 00000 n +0001091098 00000 n +0002157892 00000 n 0000040900 00000 n 0000040941 00000 n -0001141848 00000 n -0002228440 00000 n +0001094730 00000 n +0002157793 00000 n 0000040998 00000 n 0000041083 00000 n -0001145596 00000 n -0002228341 00000 n +0001098388 00000 n +0002157694 00000 n 0000041140 00000 n 0000041189 00000 n -0001145722 00000 n -0002228242 00000 n +0001098514 00000 n +0002157595 00000 n 0000041246 00000 n 0000041285 00000 n -0001145848 00000 n -0002228143 00000 n +0001098640 00000 n +0002157496 00000 n 0000041342 00000 n 0000041385 00000 n -0001145973 00000 n -0002228044 00000 n +0001098765 00000 n +0002157397 00000 n 0000041442 00000 n 0000041506 00000 n -0001153147 00000 n -0002227945 00000 n +0001105575 00000 n +0002157298 00000 n 0000041563 00000 n 0000041652 00000 n -0001153272 00000 n -0002227846 00000 n +0001105700 00000 n +0002157199 00000 n 0000041709 00000 n 0000041805 00000 n -0001157962 00000 n -0002227747 00000 n +0001110226 00000 n +0002157100 00000 n 0000041862 00000 n 0000041920 00000 n -0001163425 00000 n -0002227648 00000 n +0001115371 00000 n +0002157001 00000 n 0000041977 00000 n 0000042036 00000 n -0001167682 00000 n -0002227564 00000 n +0001119469 00000 n +0002156917 00000 n 0000042093 00000 n 0000042153 00000 n -0001167808 00000 n -0002227424 00000 n +0001119595 00000 n +0002156777 00000 n 0000042204 00000 n 0000042265 00000 n -0001167934 00000 n -0002227340 00000 n +0001119721 00000 n +0002156693 00000 n 0000042321 00000 n 0000042391 00000 n -0001168059 00000 n -0002227241 00000 n +0001119846 00000 n +0002156594 00000 n 0000042447 00000 n 0000042505 00000 n -0001172193 00000 n -0002227157 00000 n +0001123852 00000 n +0002156510 00000 n 0000042561 00000 n 0000042619 00000 n -0001172318 00000 n -0002227017 00000 n +0001123977 00000 n +0002156370 00000 n 0000042670 00000 n 0000042760 00000 n -0001172444 00000 n -0002226933 00000 n +0001124103 00000 n +0002156286 00000 n 0000042816 00000 n 0000042893 00000 n -0001172570 00000 n -0002226849 00000 n +0001124229 00000 n +0002156202 00000 n 0000042949 00000 n 0000043026 00000 n -0001177101 00000 n -0002226709 00000 n +0001128650 00000 n +0002156062 00000 n 0000043077 00000 n 0000043197 00000 n -0001177227 00000 n -0002226625 00000 n +0001128776 00000 n +0002155978 00000 n 0000043253 00000 n 0000043313 00000 n -0001177353 00000 n -0002226541 00000 n +0001128902 00000 n +0002155894 00000 n 0000043369 00000 n 0000043432 00000 n -0001181511 00000 n -0002226401 00000 n +0001132929 00000 n +0002155754 00000 n 0000043483 00000 n 0000043557 00000 n -0001181637 00000 n -0002226317 00000 n +0001133055 00000 n +0002155670 00000 n 0000043613 00000 n 0000043701 00000 n -0001181763 00000 n -0002226218 00000 n +0001133181 00000 n +0002155571 00000 n 0000043757 00000 n 0000043821 00000 n -0001181888 00000 n -0002226119 00000 n +0001133306 00000 n +0002155472 00000 n 0000043877 00000 n 0000043929 00000 n -0001182013 00000 n -0002226035 00000 n +0001133431 00000 n +0002155388 00000 n 0000043985 00000 n 0000044077 00000 n -0001185726 00000 n -0002225894 00000 n +0001137021 00000 n +0002155247 00000 n 0000044129 00000 n 0000044191 00000 n -0001185852 00000 n -0002225810 00000 n +0001137147 00000 n +0002155163 00000 n 0000044248 00000 n 0000044308 00000 n -0001185978 00000 n -0002225711 00000 n +0001137273 00000 n +0002155064 00000 n 0000044365 00000 n 0000044430 00000 n -0001188573 00000 n -0002225612 00000 n +0001139823 00000 n +0002154965 00000 n 0000044487 00000 n 0000044567 00000 n -0001191233 00000 n -0002225513 00000 n +0001142436 00000 n +0002154866 00000 n 0000044624 00000 n 0000044689 00000 n -0001194835 00000 n -0002225414 00000 n +0001145955 00000 n +0002154767 00000 n 0000044746 00000 n 0000044807 00000 n -0001194961 00000 n -0002225315 00000 n +0001146081 00000 n +0002154668 00000 n 0000044864 00000 n 0000044953 00000 n -0001197095 00000 n -0002225216 00000 n +0001148166 00000 n +0002154569 00000 n 0000045010 00000 n 0000045063 00000 n -0001201576 00000 n -0002225117 00000 n +0001152471 00000 n +0002154470 00000 n 0000045120 00000 n 0000045262 00000 n -0001205835 00000 n -0002225018 00000 n +0001156584 00000 n +0002154371 00000 n 0000045319 00000 n 0000045379 00000 n -0001208307 00000 n -0002224919 00000 n +0001159008 00000 n +0002154272 00000 n 0000045437 00000 n 0000045503 00000 n -0001211407 00000 n -0002224820 00000 n +0001161945 00000 n +0002154173 00000 n 0000045561 00000 n 0000045615 00000 n -0001214986 00000 n -0002224721 00000 n +0001165382 00000 n +0002154074 00000 n 0000045673 00000 n 0000045755 00000 n -0001215301 00000 n -0002224622 00000 n +0001165697 00000 n +0002153975 00000 n 0000045813 00000 n 0000045870 00000 n -0001215426 00000 n -0002224523 00000 n +0001165822 00000 n +0002153876 00000 n 0000045928 00000 n 0000045978 00000 n -0001219703 00000 n -0002224424 00000 n +0001169885 00000 n +0002153777 00000 n 0000046036 00000 n 0000046110 00000 n -0001219829 00000 n -0002224340 00000 n +0001170011 00000 n +0002153693 00000 n 0000046168 00000 n 0000046256 00000 n -0001223758 00000 n -0002224200 00000 n +0001173751 00000 n +0002153553 00000 n 0000046308 00000 n 0000046398 00000 n -0001224135 00000 n -0002224116 00000 n +0001174128 00000 n +0002153469 00000 n 0000046455 00000 n 0000046517 00000 n -0001227869 00000 n -0002224017 00000 n +0001177828 00000 n +0002153370 00000 n 0000046574 00000 n 0000046639 00000 n -0001227995 00000 n -0002223918 00000 n +0001177954 00000 n +0002153271 00000 n 0000046696 00000 n 0000046771 00000 n -0001231484 00000 n -0002223819 00000 n +0001181296 00000 n +0002153172 00000 n 0000046828 00000 n 0000046912 00000 n -0001234547 00000 n -0002223678 00000 n +0001184300 00000 n +0002153031 00000 n 0000046969 00000 n 0000047055 00000 n -0001234673 00000 n -0002223594 00000 n +0001184426 00000 n +0002152947 00000 n 0000047117 00000 n 0000047187 00000 n -0001234798 00000 n -0002223495 00000 n +0001184551 00000 n +0002152848 00000 n 0000047249 00000 n 0000047349 00000 n -0001234924 00000 n -0002223396 00000 n +0001184677 00000 n +0002152749 00000 n 0000047411 00000 n 0000047512 00000 n -0001237477 00000 n -0002223297 00000 n +0001187194 00000 n +0002152650 00000 n 0000047574 00000 n 0000047672 00000 n -0001237603 00000 n -0002223198 00000 n +0001187320 00000 n +0002152551 00000 n 0000047734 00000 n 0000047814 00000 n -0001240068 00000 n -0002223099 00000 n +0001189728 00000 n +0002152452 00000 n 0000047876 00000 n 0000047971 00000 n -0001240194 00000 n -0002223000 00000 n +0001189854 00000 n +0002152353 00000 n 0000048033 00000 n 0000048115 00000 n -0001240320 00000 n -0002222901 00000 n +0001189980 00000 n +0002152254 00000 n 0000048177 00000 n 0000048275 00000 n -0001242399 00000 n -0002222802 00000 n +0001192019 00000 n +0002152155 00000 n 0000048337 00000 n 0000048448 00000 n -0001242525 00000 n -0002222703 00000 n +0001192145 00000 n +0002152056 00000 n 0000048511 00000 n 0000048615 00000 n -0001245472 00000 n -0002222604 00000 n +0001195038 00000 n +0002151957 00000 n 0000048678 00000 n 0000048782 00000 n -0001245598 00000 n -0002222505 00000 n +0001195164 00000 n +0002151858 00000 n 0000048845 00000 n 0000048942 00000 n -0001245722 00000 n -0002222406 00000 n +0001195288 00000 n +0002151759 00000 n 0000049005 00000 n 0000049084 00000 n -0001248358 00000 n -0002222307 00000 n +0001197869 00000 n +0002151660 00000 n 0000049147 00000 n 0000049231 00000 n -0001248482 00000 n -0002222223 00000 n +0001197993 00000 n +0002151576 00000 n 0000049294 00000 n 0000049392 00000 n -0001248608 00000 n -0002222139 00000 n +0001198119 00000 n +0002151492 00000 n 0000049449 00000 n 0000049503 00000 n -0001252383 00000 n -0002221999 00000 n +0001201827 00000 n +0002151352 00000 n 0000049555 00000 n 0000049606 00000 n -0001252509 00000 n -0002221915 00000 n +0001201953 00000 n +0002151268 00000 n 0000049663 00000 n 0000049714 00000 n -0001252635 00000 n -0002221816 00000 n +0001202079 00000 n +0002151169 00000 n 0000049771 00000 n 0000049813 00000 n -0001252761 00000 n -0002221717 00000 n +0001202205 00000 n +0002151070 00000 n 0000049870 00000 n 0000049917 00000 n -0001255816 00000 n -0002221633 00000 n +0001205203 00000 n +0002150986 00000 n 0000049974 00000 n 0000050018 00000 n -0001255942 00000 n -0002221493 00000 n +0001205329 00000 n +0002150846 00000 n 0000050070 00000 n 0000050138 00000 n -0001261775 00000 n -0002221368 00000 n +0001210971 00000 n +0002150721 00000 n 0000050195 00000 n 0000050259 00000 n -0001261901 00000 n -0002221284 00000 n +0001211097 00000 n +0002150637 00000 n 0000050321 00000 n 0000050374 00000 n -0001262027 00000 n -0002221185 00000 n +0001211223 00000 n +0002150538 00000 n 0000050436 00000 n 0000050506 00000 n -0001269044 00000 n -0002221086 00000 n +0001217924 00000 n +0002150439 00000 n 0000050568 00000 n 0000050622 00000 n -0001269170 00000 n -0002220987 00000 n +0001218050 00000 n +0002150340 00000 n 0000050684 00000 n 0000050761 00000 n -0001275539 00000 n -0002220888 00000 n +0001224248 00000 n +0002150241 00000 n 0000050823 00000 n 0000050896 00000 n -0001275665 00000 n -0002220789 00000 n +0001224374 00000 n +0002150142 00000 n 0000050958 00000 n 0000051015 00000 n -0001281729 00000 n -0002220690 00000 n +0001230228 00000 n +0002150043 00000 n 0000051077 00000 n 0000051185 00000 n -0001281855 00000 n -0002220606 00000 n +0001230354 00000 n +0002149959 00000 n 0000051247 00000 n 0000051310 00000 n -0001281980 00000 n -0002220522 00000 n +0001230479 00000 n +0002149875 00000 n 0000051367 00000 n 0000051451 00000 n -0001297295 00000 n -0002220382 00000 n +0001244853 00000 n +0002149735 00000 n 0000051503 00000 n 0000051555 00000 n -0001301420 00000 n -0002220298 00000 n +0001248710 00000 n +0002149651 00000 n 0000051612 00000 n 0000051658 00000 n -0001301546 00000 n -0002220199 00000 n +0001248836 00000 n +0002149552 00000 n 0000051715 00000 n 0000051776 00000 n -0001301672 00000 n -0002220100 00000 n +0001248962 00000 n +0002149453 00000 n 0000051833 00000 n 0000051915 00000 n -0001301798 00000 n -0002220001 00000 n +0001249088 00000 n +0002149354 00000 n 0000051972 00000 n 0000052028 00000 n -0001305441 00000 n -0002219902 00000 n +0001252304 00000 n +0002149255 00000 n 0000052085 00000 n 0000052135 00000 n -0001305566 00000 n -0002219803 00000 n +0001252429 00000 n +0002149156 00000 n 0000052192 00000 n 0000052240 00000 n -0001308927 00000 n -0002219719 00000 n +0001255755 00000 n +0002149072 00000 n 0000052297 00000 n 0000052348 00000 n -0001309053 00000 n -0002219620 00000 n +0001255881 00000 n +0002148973 00000 n 0000052400 00000 n 0000052446 00000 n -0001313270 00000 n -0002219480 00000 n +0001259919 00000 n +0002148833 00000 n 0000052498 00000 n 0000052574 00000 n -0001313396 00000 n -0002219396 00000 n +0001260045 00000 n +0002148749 00000 n 0000052631 00000 n 0000052697 00000 n -0001313522 00000 n -0002219297 00000 n +0001260171 00000 n +0002148650 00000 n 0000052754 00000 n 0000052797 00000 n -0001316015 00000 n -0002219213 00000 n +0001262533 00000 n +0002148566 00000 n 0000052854 00000 n 0000052903 00000 n -0001316141 00000 n -0002219114 00000 n +0001262659 00000 n +0002148467 00000 n 0000052955 00000 n 0000053020 00000 n -0001316266 00000 n -0002218974 00000 n +0001262784 00000 n +0002148327 00000 n 0000053072 00000 n 0000053122 00000 n -0001316392 00000 n -0002218890 00000 n +0001262910 00000 n +0002148243 00000 n 0000053179 00000 n 0000053235 00000 n -0001316517 00000 n -0002218791 00000 n +0001263035 00000 n +0002148144 00000 n 0000053292 00000 n 0000053340 00000 n -0001316643 00000 n -0002218707 00000 n +0001263161 00000 n +0002148060 00000 n 0000053397 00000 n 0000053444 00000 n -0001319801 00000 n -0002218582 00000 n +0001266285 00000 n +0002147935 00000 n 0000053496 00000 n 0000053531 00000 n -0001319927 00000 n -0002218498 00000 n +0001266411 00000 n +0002147851 00000 n 0000053588 00000 n 0000053664 00000 n -0001322582 00000 n -0002218399 00000 n +0001269044 00000 n +0002147752 00000 n 0000053721 00000 n 0000053776 00000 n -0001333246 00000 n -0002218300 00000 n +0001279525 00000 n +0002147653 00000 n 0000053833 00000 n 0000053928 00000 n -0001348424 00000 n -0002218216 00000 n +0001294070 00000 n +0002147569 00000 n 0000053985 00000 n 0000054056 00000 n -0001626808 00000 n -0002218077 00000 n +0001572054 00000 n +0002147430 00000 n 0000054105 00000 n 0000054150 00000 n -0001626934 00000 n -0002217993 00000 n +0001572180 00000 n +0002147346 00000 n 0000054201 00000 n 0000054248 00000 n -0001627060 00000 n -0002217894 00000 n +0001572306 00000 n +0002147247 00000 n 0000054299 00000 n 0000054335 00000 n -0001630319 00000 n -0002217754 00000 n +0001575130 00000 n +0002147107 00000 n 0000054386 00000 n 0000054428 00000 n -0001630445 00000 n -0002217670 00000 n +0001575256 00000 n +0002147023 00000 n 0000054484 00000 n 0000054517 00000 n -0001630571 00000 n -0002217571 00000 n +0001575382 00000 n +0002146924 00000 n 0000054573 00000 n 0000054614 00000 n -0001630823 00000 n -0002217472 00000 n +0001575634 00000 n +0002146825 00000 n 0000054670 00000 n 0000054711 00000 n -0001630949 00000 n -0002217373 00000 n +0001575760 00000 n +0002146726 00000 n 0000054767 00000 n 0000054802 00000 n -0001634755 00000 n -0002217289 00000 n +0001579377 00000 n +0002146642 00000 n 0000054858 00000 n 0000054894 00000 n -0001634881 00000 n -0002217149 00000 n +0001579503 00000 n +0002146502 00000 n 0000054945 00000 n 0000055002 00000 n -0001635007 00000 n -0002217065 00000 n +0001579629 00000 n +0002146418 00000 n 0000055058 00000 n 0000055096 00000 n -0001635133 00000 n -0002216981 00000 n +0001579755 00000 n +0002146334 00000 n 0000055152 00000 n 0000055185 00000 n -0001635259 00000 n -0002216897 00000 n +0001579881 00000 n +0002146250 00000 n 0000055236 00000 n 0000055275 00000 n -0001638656 00000 n -0002216758 00000 n +0001583155 00000 n +0002146111 00000 n 0000055324 00000 n 0000055386 00000 n -0001638780 00000 n -0002216674 00000 n +0001583279 00000 n +0002146027 00000 n 0000055437 00000 n 0000055484 00000 n -0001638904 00000 n -0002216575 00000 n +0001583403 00000 n +0002145928 00000 n 0000055535 00000 n 0000055573 00000 n -0001639030 00000 n -0002216435 00000 n +0001583529 00000 n +0002145788 00000 n 0000055624 00000 n 0000055671 00000 n -0001643004 00000 n -0002216366 00000 n +0001587462 00000 n +0002145719 00000 n 0000055727 00000 n 0000055766 00000 n -0001643130 00000 n -0002216226 00000 n +0001587588 00000 n +0002145579 00000 n 0000055817 00000 n 0000055860 00000 n -0001643256 00000 n -0002216142 00000 n +0001587714 00000 n +0002145495 00000 n 0000055916 00000 n 0000055976 00000 n -0001647425 00000 n -0002216043 00000 n +0001591784 00000 n +0002145396 00000 n 0000056032 00000 n 0000056095 00000 n -0001647551 00000 n -0002215944 00000 n +0001591910 00000 n +0002145297 00000 n 0000056151 00000 n 0000056198 00000 n -0001647677 00000 n -0002215845 00000 n +0001592036 00000 n +0002145198 00000 n 0000056254 00000 n 0000056314 00000 n -0001651985 00000 n -0002215746 00000 n +0001596256 00000 n +0002145099 00000 n 0000056370 00000 n 0000056426 00000 n -0001652111 00000 n -0002215662 00000 n +0001596382 00000 n +0002145015 00000 n 0000056482 00000 n 0000056524 00000 n -0001652237 00000 n -0002215522 00000 n +0001596508 00000 n +0002144875 00000 n 0000056575 00000 n 0000056631 00000 n -0001652363 00000 n -0002215438 00000 n +0001596634 00000 n +0002144791 00000 n 0000056687 00000 n 0000056727 00000 n -0001656845 00000 n -0002215339 00000 n +0001601035 00000 n +0002144692 00000 n 0000056783 00000 n 0000056823 00000 n -0001656971 00000 n -0002215214 00000 n +0001601161 00000 n +0002144567 00000 n 0000056879 00000 n 0000056925 00000 n -0001657095 00000 n -0002215130 00000 n +0001601285 00000 n +0002144483 00000 n 0000056986 00000 n 0000057043 00000 n -0001659917 00000 n -0002215031 00000 n +0001604017 00000 n +0002144384 00000 n 0000057104 00000 n 0000057204 00000 n -0001660043 00000 n -0002214932 00000 n +0001604143 00000 n +0002144285 00000 n 0000057265 00000 n 0000057313 00000 n -0001664210 00000 n -0002214833 00000 n +0001608218 00000 n +0002144186 00000 n 0000057374 00000 n 0000057422 00000 n -0001664336 00000 n -0002214734 00000 n +0001608344 00000 n +0002144087 00000 n 0000057483 00000 n 0000057552 00000 n -0001664461 00000 n -0002214635 00000 n +0001608469 00000 n +0002143988 00000 n 0000057613 00000 n 0000057684 00000 n -0001667267 00000 n -0002214536 00000 n +0001611241 00000 n +0002143889 00000 n 0000057745 00000 n 0000057805 00000 n -0001673992 00000 n -0002214452 00000 n +0001617830 00000 n +0002143805 00000 n 0000057866 00000 n 0000057921 00000 n -0001680814 00000 n -0002214353 00000 n +0001624489 00000 n +0002143706 00000 n 0000057972 00000 n 0000058008 00000 n -0001680939 00000 n -0002214269 00000 n +0001624614 00000 n +0002143622 00000 n 0000058059 00000 n 0000058098 00000 n -0001685044 00000 n -0002214130 00000 n +0001628554 00000 n +0002143483 00000 n 0000058147 00000 n 0000058198 00000 n -0001685170 00000 n -0002214046 00000 n +0001628680 00000 n +0002143399 00000 n 0000058249 00000 n 0000058296 00000 n -0001685296 00000 n -0002213947 00000 n +0001628806 00000 n +0002143300 00000 n 0000058347 00000 n 0000058401 00000 n -0001685421 00000 n -0002213807 00000 n +0001628931 00000 n +0002143160 00000 n 0000058452 00000 n 0000058503 00000 n -0001685547 00000 n -0002213738 00000 n +0001629057 00000 n +0002143091 00000 n 0000058559 00000 n 0000058624 00000 n -0001693534 00000 n -0002213598 00000 n +0001636765 00000 n +0002142951 00000 n 0000058675 00000 n 0000058727 00000 n -0001697773 00000 n -0002213529 00000 n +0001640892 00000 n +0002142882 00000 n 0000058783 00000 n 0000058852 00000 n -0001697899 00000 n -0002213445 00000 n +0001641018 00000 n +0002142798 00000 n 0000058903 00000 n 0000058942 00000 n -0001701745 00000 n -0002213306 00000 n +0001644811 00000 n +0002142659 00000 n 0000058991 00000 n 0000059042 00000 n -0001701871 00000 n -0002213222 00000 n +0001644937 00000 n +0002142575 00000 n 0000059093 00000 n 0000059140 00000 n -0001701996 00000 n -0002213082 00000 n +0001645062 00000 n +0002142435 00000 n 0000059191 00000 n 0000059254 00000 n -0001707068 00000 n -0002212998 00000 n +0001650080 00000 n +0002142351 00000 n 0000059310 00000 n 0000059360 00000 n -0001707194 00000 n -0002212858 00000 n +0001650206 00000 n +0002142211 00000 n 0000059416 00000 n 0000059474 00000 n -0001711687 00000 n -0002212789 00000 n +0001654651 00000 n +0002142142 00000 n 0000059535 00000 n 0000059582 00000 n -0001711813 00000 n -0002212664 00000 n +0001654777 00000 n +0002142017 00000 n 0000059638 00000 n 0000059708 00000 n -0001711939 00000 n -0002212595 00000 n +0001654903 00000 n +0002141948 00000 n 0000059769 00000 n 0000059836 00000 n -0001716601 00000 n -0002212455 00000 n +0001659422 00000 n +0002141808 00000 n 0000059887 00000 n 0000059943 00000 n -0001720434 00000 n -0002212371 00000 n +0001662932 00000 n +0002141724 00000 n 0000059999 00000 n 0000060048 00000 n -0001720560 00000 n -0002212272 00000 n +0001663058 00000 n +0002141625 00000 n 0000060104 00000 n 0000060148 00000 n -0001720686 00000 n -0002212188 00000 n +0001663184 00000 n +0002141541 00000 n 0000060204 00000 n 0000060241 00000 n -0001720812 00000 n -0002212089 00000 n +0001663310 00000 n +0002141442 00000 n 0000060292 00000 n 0000060362 00000 n -0001723889 00000 n -0002211964 00000 n +0001666284 00000 n +0002141317 00000 n 0000060413 00000 n 0000060452 00000 n -0001724015 00000 n -0002211895 00000 n +0001666410 00000 n +0002141248 00000 n 0000060508 00000 n 0000060556 00000 n -0001726903 00000 n -0002211756 00000 n +0001669208 00000 n +0002141109 00000 n 0000060605 00000 n 0000060655 00000 n -0001727029 00000 n -0002211672 00000 n +0001669334 00000 n +0002141025 00000 n 0000060706 00000 n 0000060753 00000 n -0001727155 00000 n -0002211532 00000 n +0001669460 00000 n +0002140885 00000 n 0000060804 00000 n 0000060846 00000 n -0001727281 00000 n -0002211407 00000 n +0001669586 00000 n +0002140760 00000 n 0000060902 00000 n 0000060970 00000 n -0001727407 00000 n -0002211323 00000 n +0001669712 00000 n +0002140676 00000 n 0000061031 00000 n 0000061083 00000 n -0001730819 00000 n -0002211224 00000 n +0001673019 00000 n +0002140577 00000 n 0000061144 00000 n 0000061203 00000 n -0001730945 00000 n -0002211125 00000 n +0001673145 00000 n +0002140478 00000 n 0000061264 00000 n 0000061350 00000 n -0001731071 00000 n -0002211041 00000 n +0001673271 00000 n +0002140394 00000 n 0000061411 00000 n 0000061474 00000 n -0001734842 00000 n -0002210901 00000 n +0001676917 00000 n +0002140254 00000 n 0000061530 00000 n 0000061606 00000 n -0001734968 00000 n -0002210817 00000 n +0001677043 00000 n +0002140170 00000 n 0000061667 00000 n 0000061726 00000 n -0001744319 00000 n -0002210718 00000 n +0001685965 00000 n +0002140071 00000 n 0000061787 00000 n 0000061840 00000 n -0001744445 00000 n -0002210634 00000 n +0001686091 00000 n +0002139987 00000 n 0000061901 00000 n 0000061959 00000 n -0001750614 00000 n -0002210535 00000 n +0001691807 00000 n +0002139888 00000 n 0000062015 00000 n 0000062103 00000 n -0001754443 00000 n -0002210410 00000 n +0001695416 00000 n +0002139763 00000 n 0000062159 00000 n 0000062242 00000 n -0001754569 00000 n -0002210326 00000 n +0001695542 00000 n +0002139679 00000 n 0000062303 00000 n 0000062369 00000 n -0001755135 00000 n -0002210227 00000 n +0001696108 00000 n +0002139580 00000 n 0000062430 00000 n 0000062474 00000 n -0001758967 00000 n -0002210128 00000 n +0001699839 00000 n +0002139481 00000 n 0000062535 00000 n 0000062577 00000 n -0001759093 00000 n -0002210044 00000 n +0001699965 00000 n +0002139397 00000 n 0000062638 00000 n 0000062675 00000 n -0001759219 00000 n -0002209945 00000 n +0001700091 00000 n +0002139298 00000 n 0000062726 00000 n 0000062770 00000 n -0001759345 00000 n -0002209846 00000 n +0001700217 00000 n +0002139199 00000 n 0000062821 00000 n 0000062879 00000 n -0001763429 00000 n -0002209706 00000 n +0001704172 00000 n +0002139059 00000 n 0000062930 00000 n 0000062989 00000 n -0001763555 00000 n -0002209581 00000 n +0001704298 00000 n +0002138934 00000 n 0000063045 00000 n 0000063089 00000 n -0001763681 00000 n -0002209512 00000 n +0001704424 00000 n +0002138865 00000 n 0000063150 00000 n 0000063229 00000 n -0001763807 00000 n -0002209413 00000 n +0001704550 00000 n +0002138766 00000 n 0000063285 00000 n 0000063339 00000 n -0001772341 00000 n -0002209329 00000 n +0001712341 00000 n +0002138682 00000 n 0000063395 00000 n 0000063441 00000 n -0001780665 00000 n -0002209204 00000 n +0001719911 00000 n +0002138557 00000 n 0000063492 00000 n 0000063531 00000 n -0001780791 00000 n -0002209120 00000 n +0001720037 00000 n +0002138473 00000 n 0000063587 00000 n 0000063696 00000 n -0001784674 00000 n -0002209021 00000 n +0001723740 00000 n +0002138374 00000 n 0000063752 00000 n 0000063808 00000 n -0001784800 00000 n -0002208937 00000 n +0001723866 00000 n +0002138290 00000 n 0000063864 00000 n 0000063920 00000 n -0001790575 00000 n -0002208798 00000 n +0001729430 00000 n +0002138151 00000 n 0000063969 00000 n 0000064029 00000 n -0001790701 00000 n -0002208714 00000 n +0001729556 00000 n +0002138067 00000 n 0000064080 00000 n 0000064127 00000 n -0001794912 00000 n -0002208574 00000 n +0001733500 00000 n +0002137927 00000 n 0000064178 00000 n 0000064224 00000 n -0001795037 00000 n -0002208449 00000 n +0001733625 00000 n +0002137802 00000 n 0000064280 00000 n 0000064332 00000 n -0001799359 00000 n -0002208380 00000 n +0001737787 00000 n +0002137733 00000 n 0000064393 00000 n 0000064452 00000 n -0001811756 00000 n -0002208240 00000 n +0001749271 00000 n +0002137593 00000 n 0000064508 00000 n 0000064565 00000 n -0001811880 00000 n -0002208156 00000 n +0001749395 00000 n +0002137509 00000 n 0000064626 00000 n 0000064682 00000 n -0001812006 00000 n -0002208072 00000 n +0001749521 00000 n +0002137425 00000 n 0000064743 00000 n 0000064804 00000 n -0001819237 00000 n -0002207973 00000 n +0001756485 00000 n +0002137326 00000 n 0000064860 00000 n 0000064914 00000 n -0001819363 00000 n -0002207874 00000 n +0001756611 00000 n +0002137227 00000 n 0000064970 00000 n 0000065042 00000 n -0001823690 00000 n -0002207749 00000 n +0001760458 00000 n +0002137102 00000 n 0000065098 00000 n 0000065174 00000 n -0001827255 00000 n -0002207665 00000 n +0001763872 00000 n +0002137018 00000 n 0000065235 00000 n 0000065303 00000 n -0001827381 00000 n -0002207566 00000 n +0001763998 00000 n +0002136919 00000 n 0000065364 00000 n 0000065426 00000 n -0001829523 00000 n -0002207467 00000 n +0001766053 00000 n +0002136820 00000 n 0000065487 00000 n 0000065546 00000 n -0001829649 00000 n -0002207383 00000 n +0001766179 00000 n +0002136736 00000 n 0000065607 00000 n 0000065680 00000 n -0001829775 00000 n -0002207258 00000 n +0001766305 00000 n +0002136611 00000 n 0000065731 00000 n 0000065770 00000 n -0001829900 00000 n -0002207189 00000 n +0001766430 00000 n +0002136542 00000 n 0000065826 00000 n 0000065876 00000 n -0001834366 00000 n -0002207050 00000 n +0001770755 00000 n +0002136403 00000 n 0000065925 00000 n 0000065991 00000 n -0001834491 00000 n -0002206966 00000 n +0001770880 00000 n +0002136319 00000 n 0000066042 00000 n 0000066089 00000 n -0001834616 00000 n -0002206867 00000 n +0001771005 00000 n +0002136220 00000 n 0000066140 00000 n 0000066188 00000 n -0001838437 00000 n -0002206727 00000 n +0001774713 00000 n +0002136080 00000 n 0000066239 00000 n 0000066307 00000 n -0001838563 00000 n -0002206643 00000 n +0001774839 00000 n +0002135996 00000 n 0000066363 00000 n 0000066401 00000 n -0001841192 00000 n -0002206544 00000 n +0001777335 00000 n +0002135897 00000 n 0000066457 00000 n 0000066501 00000 n -0001841318 00000 n -0002206445 00000 n +0001777461 00000 n +0002135798 00000 n 0000066557 00000 n 0000066599 00000 n -0001841442 00000 n -0002206361 00000 n +0001777585 00000 n +0002135714 00000 n 0000066655 00000 n 0000066701 00000 n -0001845221 00000 n -0002206221 00000 n +0001781339 00000 n +0002135574 00000 n 0000066752 00000 n 0000066830 00000 n -0001849389 00000 n -0002206137 00000 n +0001785469 00000 n +0002135490 00000 n 0000066886 00000 n 0000066936 00000 n -0001849514 00000 n -0002206038 00000 n +0001785594 00000 n +0002135391 00000 n 0000066992 00000 n 0000067036 00000 n -0001854808 00000 n -0002205939 00000 n +0001790821 00000 n +0002135292 00000 n 0000067092 00000 n 0000067130 00000 n -0001854933 00000 n -0002205840 00000 n +0001790946 00000 n +0002135193 00000 n 0000067186 00000 n 0000067224 00000 n -0001855058 00000 n -0002205756 00000 n +0001791071 00000 n +0002135109 00000 n 0000067280 00000 n 0000067319 00000 n -0001858277 00000 n -0002205631 00000 n +0001794018 00000 n +0002134984 00000 n 0000067370 00000 n 0000067409 00000 n -0001858403 00000 n -0002205547 00000 n +0001794144 00000 n +0002134900 00000 n 0000067465 00000 n 0000067521 00000 n -0001858529 00000 n -0002205448 00000 n +0001794270 00000 n +0002134801 00000 n 0000067577 00000 n 0000067634 00000 n -0001858655 00000 n -0002205364 00000 n +0001794396 00000 n +0002134717 00000 n 0000067690 00000 n 0000067750 00000 n -0001863877 00000 n -0002205225 00000 n +0001799511 00000 n +0002134578 00000 n 0000067799 00000 n 0000067839 00000 n -0001864003 00000 n -0002205141 00000 n +0001799637 00000 n +0002134494 00000 n 0000067890 00000 n 0000067937 00000 n -0001864129 00000 n -0002205042 00000 n +0001799763 00000 n +0002134395 00000 n 0000067988 00000 n 0000068044 00000 n -0001864255 00000 n -0002204943 00000 n +0001799889 00000 n +0002134296 00000 n 0000068095 00000 n 0000068139 00000 n -0001867639 00000 n -0002204844 00000 n +0001803087 00000 n +0002134197 00000 n 0000068190 00000 n 0000068241 00000 n -0001867765 00000 n -0002204760 00000 n +0001803213 00000 n +0002134113 00000 n 0000068292 00000 n 0000068335 00000 n -0001869182 00000 n -0002204621 00000 n +0001804587 00000 n +0002133974 00000 n 0000068384 00000 n 0000068431 00000 n -0001869308 00000 n -0002204537 00000 n +0001804713 00000 n +0002133890 00000 n 0000068482 00000 n 0000068512 00000 n -0001869434 00000 n -0002204453 00000 n +0001804839 00000 n +0002133806 00000 n 0000068563 00000 n 0000068610 00000 n -0001870325 00000 n -0002204329 00000 n +0001805707 00000 n +0002133682 00000 n 0000068659 00000 n 0000068708 00000 n -0001870451 00000 n -0002204260 00000 n +0001805833 00000 n +0002133613 00000 n 0000068759 00000 n 0000068789 00000 n -0001871175 00000 n -0002204121 00000 n +0001806542 00000 n +0002133474 00000 n 0000068834 00000 n 0000068880 00000 n -0001873487 00000 n -0002203996 00000 n +0001808696 00000 n +0002133349 00000 n 0000068929 00000 n 0000068992 00000 n -0001873613 00000 n -0002203912 00000 n +0001808822 00000 n +0002133265 00000 n 0000069043 00000 n 0000069077 00000 n -0001873739 00000 n -0002203813 00000 n +0001808948 00000 n +0002133166 00000 n 0000069128 00000 n 0000069184 00000 n -0001873865 00000 n -0002203729 00000 n +0001809074 00000 n +0002133082 00000 n 0000069235 00000 n 0000069277 00000 n -0001877135 00000 n -0002203589 00000 n +0001812146 00000 n +0002132942 00000 n 0000069326 00000 n 0000069387 00000 n -0001877261 00000 n -0002203464 00000 n +0001812272 00000 n +0002132817 00000 n 0000069438 00000 n 0000069492 00000 n -0001877387 00000 n -0002203339 00000 n +0001812398 00000 n +0002132692 00000 n 0000069548 00000 n 0000069586 00000 n -0001881500 00000 n -0002203255 00000 n +0001816349 00000 n +0002132608 00000 n 0000069647 00000 n 0000069690 00000 n -0001881626 00000 n -0002203156 00000 n +0001816475 00000 n +0002132509 00000 n 0000069751 00000 n 0000069814 00000 n -0001885799 00000 n -0002203057 00000 n +0001820591 00000 n +0002132410 00000 n 0000069875 00000 n 0000069918 00000 n -0001885925 00000 n -0002202958 00000 n +0001820717 00000 n +0002132311 00000 n 0000069979 00000 n 0000070035 00000 n -0001886051 00000 n -0002202874 00000 n +0001820843 00000 n +0002132227 00000 n 0000070096 00000 n 0000070149 00000 n -0001889855 00000 n -0002202790 00000 n +0001823955 00000 n +0002132143 00000 n 0000070205 00000 n 0000070259 00000 n -0001891177 00000 n -0002202665 00000 n +0001825277 00000 n +0002132018 00000 n 0000070310 00000 n 0000070353 00000 n -0001891430 00000 n -0002202581 00000 n +0001825530 00000 n +0002131934 00000 n 0000070409 00000 n 0000070457 00000 n -0001894676 00000 n -0002202497 00000 n +0001828411 00000 n +0002131850 00000 n 0000070513 00000 n 0000070569 00000 n -0001899251 00000 n -0002202372 00000 n +0001832900 00000 n +0002131725 00000 n 0000070618 00000 n 0000070682 00000 n -0001899377 00000 n -0002202261 00000 n +0001833026 00000 n +0002131614 00000 n 0000070733 00000 n 0000070780 00000 n -0001899502 00000 n -0002202177 00000 n +0001833151 00000 n +0002131530 00000 n 0000070836 00000 n 0000070885 00000 n -0001903003 00000 n -0002202078 00000 n +0001836537 00000 n +0002131431 00000 n 0000070941 00000 n 0000070994 00000 n -0001907374 00000 n -0002201979 00000 n +0001840723 00000 n +0002131332 00000 n 0000071050 00000 n 0000071096 00000 n -0001907500 00000 n -0002201880 00000 n +0001840849 00000 n +0002131233 00000 n 0000071152 00000 n 0000071195 00000 n -0001907626 00000 n -0002201781 00000 n +0001840975 00000 n +0002131134 00000 n 0000071251 00000 n 0000071293 00000 n -0001911597 00000 n -0002201682 00000 n +0001844842 00000 n +0002131035 00000 n 0000071349 00000 n 0000071394 00000 n -0001911723 00000 n -0002201583 00000 n +0001844968 00000 n +0002130936 00000 n 0000071450 00000 n 0000071493 00000 n -0001911849 00000 n -0002201484 00000 n +0001845094 00000 n +0002130837 00000 n 0000071549 00000 n 0000071592 00000 n -0001911975 00000 n -0002201385 00000 n +0001845220 00000 n +0002130738 00000 n 0000071648 00000 n 0000071689 00000 n -0001912101 00000 n -0002201301 00000 n +0001845346 00000 n +0002130654 00000 n 0000071746 00000 n 0000071799 00000 n -0001912856 00000 n -0002201161 00000 n +0001846089 00000 n +0002130514 00000 n 0000071844 00000 n 0000071882 00000 n -0001915755 00000 n -0002201036 00000 n +0001848932 00000 n +0002130389 00000 n 0000071931 00000 n 0000071974 00000 n -0001915881 00000 n -0002200952 00000 n +0001849058 00000 n +0002130305 00000 n 0000072025 00000 n 0000072063 00000 n -0001916007 00000 n -0002200853 00000 n +0001849184 00000 n +0002130206 00000 n 0000072114 00000 n 0000072151 00000 n -0001920013 00000 n -0002200754 00000 n +0001853056 00000 n +0002130107 00000 n 0000072202 00000 n 0000072237 00000 n -0001933950 00000 n -0002200670 00000 n +0001866538 00000 n +0002130023 00000 n 0000072288 00000 n 0000072336 00000 n -0001937777 00000 n -0002200530 00000 n +0001870280 00000 n +0002129883 00000 n 0000072385 00000 n 0000072445 00000 n -0001937903 00000 n -0002200446 00000 n +0001870406 00000 n +0002129799 00000 n 0000072496 00000 n 0000072539 00000 n -0001938029 00000 n -0002200347 00000 n +0001870532 00000 n +0002129700 00000 n 0000072590 00000 n 0000072685 00000 n -0001943371 00000 n -0002200248 00000 n +0001875461 00000 n +0002129601 00000 n 0000072736 00000 n 0000072773 00000 n -0001943497 00000 n -0002200149 00000 n +0001875587 00000 n +0002129502 00000 n 0000072824 00000 n 0000072885 00000 n -0001946951 00000 n -0002200065 00000 n +0001878849 00000 n +0002129418 00000 n 0000072936 00000 n 0000072994 00000 n -0001950944 00000 n -0002199940 00000 n +0001882722 00000 n +0002129293 00000 n 0000073043 00000 n 0000073081 00000 n -0001951070 00000 n -0002199856 00000 n +0001882848 00000 n +0002129209 00000 n 0000073132 00000 n 0000073170 00000 n -0001951196 00000 n -0002199757 00000 n +0001882974 00000 n +0002129110 00000 n 0000073221 00000 n 0000073259 00000 n -0001951322 00000 n -0002199658 00000 n +0001883100 00000 n +0002129011 00000 n 0000073310 00000 n 0000073348 00000 n -0001955198 00000 n -0002199559 00000 n +0001886922 00000 n +0002128912 00000 n 0000073399 00000 n 0000073440 00000 n -0001955323 00000 n -0002199460 00000 n +0001887047 00000 n +0002128813 00000 n 0000073491 00000 n 0000073547 00000 n -0001955449 00000 n -0002199376 00000 n +0001887173 00000 n +0002128729 00000 n 0000073598 00000 n 0000073631 00000 n -0001956193 00000 n -0002199251 00000 n +0001887906 00000 n +0002128604 00000 n 0000073676 00000 n 0000073710 00000 n -0001960819 00000 n -0002199126 00000 n +0001892301 00000 n +0002128479 00000 n 0000073759 00000 n 0000073803 00000 n -0001960945 00000 n -0002199001 00000 n +0001892427 00000 n +0002128354 00000 n 0000073854 00000 n 0000073912 00000 n -0001961071 00000 n -0002198917 00000 n +0001892553 00000 n +0002128270 00000 n 0000073968 00000 n 0000074008 00000 n -0001961197 00000 n -0002198792 00000 n +0001892679 00000 n +0002128145 00000 n 0000074064 00000 n 0000074115 00000 n -0001961323 00000 n -0002198708 00000 n +0001892805 00000 n +0002128061 00000 n 0000074176 00000 n 0000074223 00000 n -0001961449 00000 n -0002198624 00000 n +0001892931 00000 n +0002127977 00000 n 0000074284 00000 n 0000074328 00000 n -0001966144 00000 n -0002198525 00000 n +0001897451 00000 n +0002127878 00000 n 0000074379 00000 n 0000074450 00000 n -0001966270 00000 n -0002198426 00000 n +0001897577 00000 n +0002127779 00000 n 0000074501 00000 n 0000074558 00000 n -0001966396 00000 n -0002198286 00000 n +0001897703 00000 n +0002127639 00000 n 0000074609 00000 n 0000074656 00000 n -0001969220 00000 n -0002198176 00000 n +0001900361 00000 n +0002127529 00000 n 0000074712 00000 n 0000074785 00000 n -0001969346 00000 n -0002198092 00000 n +0001900487 00000 n +0002127445 00000 n 0000074846 00000 n 0000074919 00000 n -0001969472 00000 n -0002198008 00000 n +0001900613 00000 n +0002127361 00000 n 0000074980 00000 n 0000075053 00000 n -0001972552 00000 n -0002197868 00000 n +0001903580 00000 n +0002127221 00000 n 0000075104 00000 n 0000075156 00000 n -0001972678 00000 n -0002197784 00000 n +0001903706 00000 n +0002127137 00000 n 0000075212 00000 n 0000075264 00000 n -0001975295 00000 n -0002197700 00000 n +0001906242 00000 n +0002127053 00000 n 0000075320 00000 n 0000075384 00000 n -0001975420 00000 n -0002197616 00000 n +0001906367 00000 n +0002126969 00000 n 0000075435 00000 n 0000075474 00000 n -0001979080 00000 n -0002197476 00000 n +0001909911 00000 n +0002126829 00000 n 0000075523 00000 n 0000075558 00000 n -0001979206 00000 n -0002197392 00000 n +0001910037 00000 n +0002126745 00000 n 0000075609 00000 n 0000075639 00000 n -0001979332 00000 n -0002197293 00000 n +0001910163 00000 n +0002126646 00000 n 0000075690 00000 n 0000075724 00000 n -0001979458 00000 n -0002197194 00000 n +0001910289 00000 n +0002126547 00000 n 0000075775 00000 n 0000075805 00000 n -0001981111 00000 n -0002197095 00000 n +0001911922 00000 n +0002126448 00000 n 0000075856 00000 n 0000075907 00000 n -0001983696 00000 n -0002196955 00000 n +0001914436 00000 n +0002126308 00000 n 0000075958 00000 n 0000075987 00000 n -0001983822 00000 n -0002196886 00000 n +0001914562 00000 n +0002126239 00000 n 0000076043 00000 n 0000076092 00000 n -0001983948 00000 n -0002196761 00000 n +0001914688 00000 n +0002126114 00000 n 0000076143 00000 n 0000076176 00000 n -0001984073 00000 n -0002196677 00000 n +0001914813 00000 n +0002126030 00000 n 0000076232 00000 n 0000076280 00000 n -0001984199 00000 n -0002196593 00000 n +0001914939 00000 n +0002125946 00000 n 0000076336 00000 n 0000076384 00000 n -0001989046 00000 n -0002196453 00000 n +0001919596 00000 n +0002125806 00000 n 0000076433 00000 n 0000076485 00000 n -0001989172 00000 n -0002196369 00000 n +0001919722 00000 n +0002125722 00000 n 0000076536 00000 n 0000076580 00000 n -0001989298 00000 n -0002196229 00000 n +0001919848 00000 n +0002125582 00000 n 0000076631 00000 n 0000076667 00000 n -0001989424 00000 n -0002196145 00000 n +0001919974 00000 n +0002125498 00000 n 0000076723 00000 n 0000076826 00000 n -0001993992 00000 n -0002196046 00000 n +0001924378 00000 n +0002125399 00000 n 0000076882 00000 n 0000076990 00000 n -0001994118 00000 n -0002195962 00000 n +0001924504 00000 n +0002125315 00000 n 0000077046 00000 n 0000077136 00000 n -0001994244 00000 n -0002195822 00000 n +0001924630 00000 n +0002125175 00000 n 0000077187 00000 n 0000077235 00000 n -0001994370 00000 n -0002195738 00000 n +0001924756 00000 n +0002125091 00000 n 0000077291 00000 n 0000077357 00000 n -0001994496 00000 n -0002195639 00000 n +0001924882 00000 n +0002124992 00000 n 0000077413 00000 n 0000077480 00000 n -0001998545 00000 n -0002195540 00000 n +0001928754 00000 n +0002124893 00000 n 0000077536 00000 n 0000077595 00000 n -0001998671 00000 n -0002195441 00000 n +0001928880 00000 n +0002124794 00000 n 0000077651 00000 n 0000077705 00000 n -0001998797 00000 n -0002195342 00000 n +0001929006 00000 n +0002124695 00000 n 0000077761 00000 n 0000077819 00000 n -0001998922 00000 n -0002195258 00000 n +0001929131 00000 n +0002124611 00000 n 0000077875 00000 n 0000077920 00000 n -0001999048 00000 n -0002195118 00000 n +0001929257 00000 n +0002124471 00000 n 0000077971 00000 n 0000078012 00000 n -0002002854 00000 n -0002195049 00000 n +0001932965 00000 n +0002124402 00000 n 0000078068 00000 n 0000078113 00000 n -0002002980 00000 n -0002194950 00000 n +0001933091 00000 n +0002124303 00000 n 0000078164 00000 n 0000078217 00000 n -0002003105 00000 n -0002194866 00000 n +0001933216 00000 n +0002124219 00000 n 0000078268 00000 n 0000078308 00000 n -0002006605 00000 n -0002194725 00000 n +0001936633 00000 n +0002124078 00000 n 0000078357 00000 n 0000078405 00000 n -0002006731 00000 n -0002194641 00000 n +0001936759 00000 n +0002123994 00000 n 0000078456 00000 n 0000078493 00000 n -0002006857 00000 n -0002194542 00000 n +0001936885 00000 n +0002123895 00000 n 0000078544 00000 n 0000078584 00000 n -0002006983 00000 n -0002194443 00000 n +0001937011 00000 n +0002123796 00000 n 0000078635 00000 n 0000078670 00000 n -0002010270 00000 n -0002194344 00000 n +0001940198 00000 n +0002123697 00000 n 0000078721 00000 n 0000078755 00000 n -0002010396 00000 n -0002194245 00000 n +0001940324 00000 n +0002123598 00000 n 0000078806 00000 n 0000078841 00000 n -0002010521 00000 n -0002194146 00000 n +0001940449 00000 n +0002123499 00000 n 0000078892 00000 n 0000078926 00000 n -0002010647 00000 n -0002194047 00000 n +0001940575 00000 n +0002123400 00000 n 0000078977 00000 n 0000079012 00000 n -0002010773 00000 n -0002193948 00000 n +0001940701 00000 n +0002123301 00000 n 0000079063 00000 n 0000079100 00000 n -0002014107 00000 n -0002193849 00000 n +0001943954 00000 n +0002123202 00000 n 0000079151 00000 n 0000079190 00000 n -0002014233 00000 n -0002193750 00000 n +0001944080 00000 n +0002123103 00000 n 0000079242 00000 n 0000079314 00000 n -0002014359 00000 n -0002193666 00000 n +0001944206 00000 n +0002123019 00000 n 0000079366 00000 n 0000079410 00000 n -0002015279 00000 n -0002193526 00000 n +0001945104 00000 n +0002122879 00000 n 0000079459 00000 n 0000079515 00000 n -0002015405 00000 n -0002193457 00000 n +0001945230 00000 n +0002122810 00000 n 0000079566 00000 n 0000079596 00000 n -0002024181 00000 n -0002193332 00000 n +0001953354 00000 n +0002122685 00000 n 0000079645 00000 n 0000079686 00000 n -0002024307 00000 n -0002193248 00000 n +0001953480 00000 n +0002122601 00000 n 0000079737 00000 n 0000079771 00000 n -0002024433 00000 n -0002193149 00000 n +0001953606 00000 n +0002122502 00000 n 0000079822 00000 n 0000079878 00000 n -0002024559 00000 n -0002193065 00000 n +0001953732 00000 n +0002122418 00000 n 0000079929 00000 n 0000079960 00000 n -0000080328 00000 n -0000080577 00000 n +0000080318 00000 n +0000080567 00000 n 0000080014 00000 n -0000080451 00000 n -0000080514 00000 n -0002182264 00000 n -0002167812 00000 n -0002182096 00000 n -0002167396 00000 n -0002164064 00000 n -0002167231 00000 n -0002183212 00000 n +0000080441 00000 n +0000080504 00000 n +0002111617 00000 n +0002097165 00000 n +0002111449 00000 n +0002096742 00000 n +0002093229 00000 n +0002096577 00000 n +0002112565 00000 n +0000083023 00000 n +0000082109 00000 n +0000080655 00000 n +0000082960 00000 n +0002092184 00000 n +0002073369 00000 n +0002092019 00000 n +0000082280 00000 n +0002072347 00000 n +0002055554 00000 n +0002072181 00000 n +0000082449 00000 n +0000082621 00000 n +0000082789 00000 n +0000094252 00000 n +0000085332 00000 n 0000083111 00000 n -0000082197 00000 n -0000080665 00000 n -0000083048 00000 n -0002163019 00000 n -0002144204 00000 n -0002162854 00000 n -0000082368 00000 n -0002143182 00000 n -0002126389 00000 n -0002143016 00000 n -0000082537 00000 n -0000082709 00000 n -0000082877 00000 n -0000096161 00000 n -0000087241 00000 n -0000083199 00000 n -0000096098 00000 n -0002124428 00000 n -0002108588 00000 n -0002124262 00000 n -0000087826 00000 n -0000088010 00000 n -0002108129 00000 n -0002106186 00000 n -0002107963 00000 n -0002104284 00000 n -0002102269 00000 n -0002104119 00000 n -0000088160 00000 n -0000088332 00000 n -0000088482 00000 n -0000088650 00000 n -0000088821 00000 n -0000088990 00000 n -0000089143 00000 n -0000089312 00000 n -0000089464 00000 n -0000089632 00000 n -0000089804 00000 n -0000089973 00000 n -0000090126 00000 n -0000090295 00000 n -0000090466 00000 n -0000090639 00000 n -0000090792 00000 n -0000090960 00000 n -0000091139 00000 n -0000091296 00000 n -0000091465 00000 n -0000091633 00000 n -0000091804 00000 n -0000091971 00000 n -0000092143 00000 n -0000092303 00000 n -0000092472 00000 n -0000092628 00000 n -0000092797 00000 n -0000092956 00000 n -0000093125 00000 n -0000093275 00000 n -0000093447 00000 n -0000093618 00000 n -0000093787 00000 n -0000093955 00000 n -0000094126 00000 n -0000094282 00000 n -0000094452 00000 n -0000094621 00000 n -0000094779 00000 n -0000094948 00000 n -0000095117 00000 n -0000095267 00000 n -0000095436 00000 n -0000095606 00000 n -0000095773 00000 n -0000095944 00000 n -0000298419 00000 n -0000314651 00000 n -0000324957 00000 n -0000329432 00000 n -0000362214 00000 n -0000409653 00000 n -0000432063 00000 n -0000473652 00000 n -0000480833 00000 n -0000485166 00000 n -0000556468 00000 n -0000626579 00000 n -0000639340 00000 n -0000697287 00000 n -0000744318 00000 n -0000109751 00000 n -0000100544 00000 n -0000096305 00000 n -0000109688 00000 n -0000101147 00000 n -0000101315 00000 n -0000101484 00000 n -0000101645 00000 n -0000101814 00000 n -0000101985 00000 n -0000102134 00000 n -0000102305 00000 n -0000102457 00000 n -0000102630 00000 n -0000102800 00000 n -0000102956 00000 n -0000103129 00000 n -0000103302 00000 n -0000103448 00000 n -0000103620 00000 n -0000103789 00000 n -0000103938 00000 n -0000104113 00000 n -0000104281 00000 n -0000104456 00000 n -0000104628 00000 n -0000104797 00000 n -0000104966 00000 n -0000105135 00000 n -0000105289 00000 n -0000105458 00000 n -0000105612 00000 n -0000105781 00000 n -0000105927 00000 n -0000106096 00000 n -0000106273 00000 n -0000106437 00000 n -0000106605 00000 n -0000106755 00000 n -0000106927 00000 n -0000107100 00000 n -0000107248 00000 n -0000107417 00000 n -0000107568 00000 n -0000107737 00000 n -0000107897 00000 n -0000108069 00000 n -0000108224 00000 n -0000108392 00000 n -0000108540 00000 n -0000108709 00000 n -0000108862 00000 n -0000109030 00000 n -0000109200 00000 n -0000109350 00000 n -0000109519 00000 n -0000759327 00000 n -0000774246 00000 n -0000780125 00000 n -0000941364 00000 n -0001626871 00000 n -0001638719 00000 n -0001685107 00000 n -0001701808 00000 n -0001726966 00000 n -0001790638 00000 n -0001834429 00000 n -0001863940 00000 n -0001869245 00000 n -0001870388 00000 n -0001873550 00000 n -0001877198 00000 n -0001899314 00000 n -0001915818 00000 n -0001937840 00000 n -0000115193 00000 n -0000111685 00000 n -0000109867 00000 n -0000115130 00000 n -0000111991 00000 n -0000112164 00000 n -0000112317 00000 n -0000112489 00000 n -0000112642 00000 n -0000112814 00000 n -0000112969 00000 n -0000113141 00000 n -0000113298 00000 n -0000113467 00000 n -0000113639 00000 n -0000113788 00000 n -0000113965 00000 n -0000114137 00000 n -0000114306 00000 n -0000114456 00000 n -0000114625 00000 n -0000114786 00000 n -0000114958 00000 n -0001951007 00000 n -0001960882 00000 n -0001979143 00000 n -0001989109 00000 n -0002006668 00000 n -0002015342 00000 n -0002024244 00000 n -0000123985 00000 n -0000118106 00000 n -0000115309 00000 n -0000123859 00000 n -0000123922 00000 n -0000118547 00000 n -0000118697 00000 n -0000118850 00000 n -0000119005 00000 n -0000119159 00000 n -0000119314 00000 n -0000119469 00000 n -0000119623 00000 n -0000119777 00000 n -0000119929 00000 n -0000120084 00000 n -0000120239 00000 n -0000120399 00000 n -0000120564 00000 n -0000120724 00000 n -0000120878 00000 n -0000121033 00000 n -0000121188 00000 n -0000121342 00000 n -0000121497 00000 n -0000121657 00000 n -0000121817 00000 n -0000121970 00000 n -0000122125 00000 n -0000122275 00000 n -0000122428 00000 n -0000122583 00000 n -0000122737 00000 n -0000122891 00000 n -0000123051 00000 n -0000123216 00000 n -0000123375 00000 n -0000123538 00000 n -0000123696 00000 n -0000135403 00000 n -0000127658 00000 n -0000124073 00000 n -0000135340 00000 n -0002101661 00000 n -0002091870 00000 n -0002101495 00000 n -0000128198 00000 n -0000128358 00000 n -0000128523 00000 n -0000128683 00000 n -0000128848 00000 n -0000129003 00000 n -0000129158 00000 n -0000129318 00000 n -0000129478 00000 n -0000129637 00000 n -0000129797 00000 n -0000129949 00000 n -0000130104 00000 n -0000130259 00000 n -0000130419 00000 n -0000130579 00000 n -0000130734 00000 n -0000130889 00000 n -0000131044 00000 n -0000131204 00000 n -0000131368 00000 n -0000131533 00000 n -0000131698 00000 n -0000131857 00000 n -0000132011 00000 n -0000132171 00000 n -0000132331 00000 n -0000132491 00000 n -0000132651 00000 n -0000132810 00000 n -0000132970 00000 n -0000133123 00000 n -0000133278 00000 n -0000133433 00000 n -0000133593 00000 n -0000133758 00000 n -0000133918 00000 n -0000134078 00000 n -0000134238 00000 n -0000134392 00000 n -0000134552 00000 n -0000134707 00000 n -0000134866 00000 n -0000135024 00000 n -0000135182 00000 n -0002183337 00000 n -0000146664 00000 n -0000138783 00000 n -0000135505 00000 n -0000146601 00000 n -0000139332 00000 n -0000139485 00000 n -0000139640 00000 n -0000139795 00000 n -0000139955 00000 n -0000140115 00000 n -0000140275 00000 n -0000140434 00000 n -0000140599 00000 n -0000140764 00000 n -0000140928 00000 n -0000141083 00000 n -0000141243 00000 n -0000141403 00000 n -0000141558 00000 n -0000141718 00000 n -0000141878 00000 n -0000142038 00000 n -0000142203 00000 n -0000142362 00000 n -0000142522 00000 n -0000142682 00000 n -0000142837 00000 n +0000094189 00000 n +0002053593 00000 n +0002037753 00000 n +0002053427 00000 n +0000085917 00000 n +0000086101 00000 n +0002037294 00000 n +0002035352 00000 n +0002037128 00000 n +0002033450 00000 n +0002031436 00000 n +0002033285 00000 n +0000086251 00000 n +0000086423 00000 n +0000086573 00000 n +0000086741 00000 n +0000086912 00000 n +0000087081 00000 n +0000087234 00000 n +0000087403 00000 n +0000087555 00000 n +0000087723 00000 n +0000087895 00000 n +0000088064 00000 n +0000088217 00000 n +0000088386 00000 n +0000088557 00000 n +0000088730 00000 n +0000088883 00000 n +0000089051 00000 n +0000089230 00000 n +0000089387 00000 n +0000089556 00000 n +0000089724 00000 n +0000089895 00000 n +0000090062 00000 n +0000090234 00000 n +0000090394 00000 n +0000090563 00000 n +0000090719 00000 n +0000090888 00000 n +0000091047 00000 n +0000091216 00000 n +0000091366 00000 n +0000091538 00000 n +0000091709 00000 n +0000091878 00000 n +0000092046 00000 n +0000092217 00000 n +0000092373 00000 n +0000092543 00000 n +0000092712 00000 n +0000092870 00000 n +0000093039 00000 n +0000093208 00000 n +0000093358 00000 n +0000093527 00000 n +0000093697 00000 n +0000093864 00000 n +0000094035 00000 n +0000276682 00000 n +0000292296 00000 n +0000302356 00000 n +0000306617 00000 n +0000338557 00000 n +0000384361 00000 n +0000406179 00000 n +0000446374 00000 n +0000453316 00000 n +0000457576 00000 n +0000525146 00000 n +0000591395 00000 n +0000603877 00000 n +0000659654 00000 n +0000705479 00000 n +0000105993 00000 n +0000096793 00000 n +0000094396 00000 n +0000105930 00000 n +0000097396 00000 n +0000097564 00000 n +0000097733 00000 n +0000097894 00000 n +0000098063 00000 n +0000098234 00000 n +0000098383 00000 n +0000098554 00000 n +0000098706 00000 n +0000098879 00000 n +0000099049 00000 n +0000099205 00000 n +0000099378 00000 n +0000099551 00000 n +0000099697 00000 n +0000099869 00000 n +0000100038 00000 n +0000100187 00000 n +0000100355 00000 n +0000100523 00000 n +0000100698 00000 n +0000100870 00000 n +0000101039 00000 n +0000101208 00000 n +0000101377 00000 n +0000101531 00000 n +0000101700 00000 n +0000101854 00000 n +0000102023 00000 n +0000102169 00000 n +0000102338 00000 n +0000102515 00000 n +0000102679 00000 n +0000102847 00000 n +0000102997 00000 n +0000103169 00000 n +0000103342 00000 n +0000103490 00000 n +0000103659 00000 n +0000103810 00000 n +0000103979 00000 n +0000104139 00000 n +0000104311 00000 n +0000104466 00000 n +0000104634 00000 n +0000104782 00000 n +0000104951 00000 n +0000105104 00000 n +0000105272 00000 n +0000105442 00000 n +0000105592 00000 n +0000105761 00000 n +0000720199 00000 n +0000734808 00000 n +0000740545 00000 n +0000896217 00000 n +0001572117 00000 n +0001583218 00000 n +0001628617 00000 n +0001644874 00000 n +0001669271 00000 n +0001729493 00000 n +0001770818 00000 n +0001799574 00000 n +0001804650 00000 n +0001805770 00000 n +0001808759 00000 n +0001812209 00000 n +0001832963 00000 n +0001848995 00000 n +0001870343 00000 n +0000110765 00000 n +0000107257 00000 n +0000106109 00000 n +0000110702 00000 n +0000107563 00000 n +0000107736 00000 n +0000107889 00000 n +0000108061 00000 n +0000108214 00000 n +0000108386 00000 n +0000108541 00000 n +0000108713 00000 n +0000108870 00000 n +0000109039 00000 n +0000109211 00000 n +0000109360 00000 n +0000109537 00000 n +0000109709 00000 n +0000109878 00000 n +0000110028 00000 n +0000110197 00000 n +0000110358 00000 n +0000110530 00000 n +0001882785 00000 n +0001892364 00000 n +0001909974 00000 n +0001919659 00000 n +0001936696 00000 n +0001945167 00000 n +0001953417 00000 n +0000118717 00000 n +0000112838 00000 n +0000110881 00000 n +0000118591 00000 n +0000118654 00000 n +0000113279 00000 n +0000113429 00000 n +0000113582 00000 n +0000113737 00000 n +0000113891 00000 n +0000114046 00000 n +0000114201 00000 n +0000114355 00000 n +0000114509 00000 n +0000114661 00000 n +0000114816 00000 n +0000114971 00000 n +0000115131 00000 n +0000115296 00000 n +0000115456 00000 n +0000115610 00000 n +0000115765 00000 n +0000115920 00000 n +0000116074 00000 n +0000116229 00000 n +0000116389 00000 n +0000116549 00000 n +0000116702 00000 n +0000116857 00000 n +0000117007 00000 n +0000117160 00000 n +0000117315 00000 n +0000117469 00000 n +0000117623 00000 n +0000117783 00000 n +0000117948 00000 n +0000118107 00000 n +0000118270 00000 n +0000118428 00000 n +0000129083 00000 n +0000121338 00000 n +0000118805 00000 n +0000129020 00000 n +0002030828 00000 n +0002021037 00000 n +0002030662 00000 n +0000121878 00000 n +0000122038 00000 n +0000122203 00000 n +0000122363 00000 n +0000122528 00000 n +0000122683 00000 n +0000122838 00000 n +0000122998 00000 n +0000123158 00000 n +0000123317 00000 n +0000123477 00000 n +0000123629 00000 n +0000123784 00000 n +0000123939 00000 n +0000124099 00000 n +0000124259 00000 n +0000124414 00000 n +0000124569 00000 n +0000124724 00000 n +0000124884 00000 n +0000125048 00000 n +0000125213 00000 n +0000125378 00000 n +0000125537 00000 n +0000125691 00000 n +0000125851 00000 n +0000126011 00000 n +0000126171 00000 n +0000126331 00000 n +0000126490 00000 n +0000126650 00000 n +0000126803 00000 n +0000126958 00000 n +0000127113 00000 n +0000127273 00000 n +0000127438 00000 n +0000127598 00000 n +0000127758 00000 n +0000127918 00000 n +0000128072 00000 n +0000128232 00000 n +0000128387 00000 n +0000128546 00000 n +0000128704 00000 n +0000128862 00000 n +0002112690 00000 n +0000139261 00000 n +0000131380 00000 n +0000129185 00000 n +0000139198 00000 n +0000131929 00000 n +0000132082 00000 n +0000132237 00000 n +0000132392 00000 n +0000132552 00000 n +0000132712 00000 n +0000132872 00000 n +0000133031 00000 n +0000133196 00000 n +0000133361 00000 n +0000133525 00000 n +0000133680 00000 n +0000133840 00000 n +0000134000 00000 n +0000134155 00000 n +0000134315 00000 n +0000134475 00000 n +0000134635 00000 n +0000134800 00000 n +0000134959 00000 n +0000135119 00000 n +0000135279 00000 n +0000135434 00000 n +0000135593 00000 n +0000135753 00000 n +0000135906 00000 n +0000136061 00000 n +0000136216 00000 n +0000136371 00000 n +0000136531 00000 n +0000136690 00000 n +0000136844 00000 n +0000136997 00000 n +0000137151 00000 n +0000137301 00000 n +0000137455 00000 n +0000137611 00000 n +0000137766 00000 n +0000137922 00000 n +0000138083 00000 n +0000138244 00000 n +0000138405 00000 n +0000138561 00000 n +0000138722 00000 n +0000138881 00000 n +0000139040 00000 n +0000150148 00000 n +0000141785 00000 n +0000139363 00000 n +0000150085 00000 n +0000142352 00000 n +0000142513 00000 n +0000142674 00000 n +0000142835 00000 n 0000142996 00000 n -0000143156 00000 n -0000143309 00000 n -0000143464 00000 n -0000143619 00000 n -0000143774 00000 n -0000143934 00000 n -0000144093 00000 n -0000144247 00000 n -0000144400 00000 n -0000144554 00000 n -0000144704 00000 n -0000144858 00000 n -0000145014 00000 n -0000145169 00000 n -0000145325 00000 n -0000145486 00000 n -0000145647 00000 n -0000145808 00000 n -0000145964 00000 n -0000146125 00000 n -0000146284 00000 n -0000146443 00000 n -0000158665 00000 n -0000150302 00000 n -0000146766 00000 n -0000158602 00000 n -0000150869 00000 n -0000151030 00000 n -0000151191 00000 n -0000151352 00000 n -0000151513 00000 n -0000151669 00000 n -0000151830 00000 n -0000151991 00000 n -0000152152 00000 n -0000152307 00000 n -0000152468 00000 n -0000152629 00000 n -0000152784 00000 n -0000152945 00000 n -0000153106 00000 n -0000153267 00000 n -0000153433 00000 n -0000153589 00000 n -0000153750 00000 n -0000153910 00000 n -0000154064 00000 n -0000154219 00000 n -0000154374 00000 n -0000154535 00000 n -0000154701 00000 n -0000154867 00000 n -0000155028 00000 n -0002090933 00000 n -0002071722 00000 n -0002090767 00000 n -0000155184 00000 n -0000155345 00000 n -0000155506 00000 n -0000155661 00000 n -0000155821 00000 n -0000155982 00000 n -0000156143 00000 n -0000156303 00000 n -0000156469 00000 n -0000156635 00000 n -0000156800 00000 n -0000156965 00000 n -0000157130 00000 n -0000157295 00000 n -0000157460 00000 n -0000157623 00000 n -0000157788 00000 n -0000157954 00000 n -0000158113 00000 n -0000158276 00000 n -0000158439 00000 n -0000170752 00000 n -0000162339 00000 n -0000158781 00000 n -0000170689 00000 n -0000162915 00000 n -0000163080 00000 n -0000163240 00000 n -0000163395 00000 n -0000163555 00000 n -0000163715 00000 n -0000163875 00000 n -0000164029 00000 n -0000164183 00000 n -0000164338 00000 n -0000164498 00000 n -0000164652 00000 n -0000164812 00000 n -0000164972 00000 n -0000165127 00000 n -0000165287 00000 n -0000165447 00000 n -0000165601 00000 n -0000165756 00000 n -0000165910 00000 n -0000166070 00000 n -0000166230 00000 n -0000166388 00000 n -0000166542 00000 n -0000166702 00000 n -0000166862 00000 n -0000167022 00000 n -0000167177 00000 n -0000167337 00000 n -0000167502 00000 n -0000167667 00000 n -0000167821 00000 n -0000167980 00000 n -0000168140 00000 n -0000168300 00000 n -0000168459 00000 n -0000168624 00000 n -0000168789 00000 n -0000168949 00000 n -0000169109 00000 n -0000169269 00000 n -0000169424 00000 n -0000169584 00000 n -0000169743 00000 n -0000169897 00000 n -0000170051 00000 n -0000170205 00000 n -0000170363 00000 n -0000170526 00000 n -0000182099 00000 n -0000174195 00000 n -0000170868 00000 n -0000182036 00000 n -0000174744 00000 n -0000174909 00000 n -0000175074 00000 n -0000175239 00000 n -0000175404 00000 n -0000175569 00000 n -0000175734 00000 n -0000175899 00000 n -0000176054 00000 n -0000176213 00000 n -0000176378 00000 n -0000176543 00000 n -0000176697 00000 n -0000176857 00000 n -0000177017 00000 n -0000177172 00000 n -0000177327 00000 n -0000177487 00000 n -0000177642 00000 n -0000177796 00000 n -0000177950 00000 n -0000178105 00000 n -0000178260 00000 n -0000178419 00000 n -0000178578 00000 n -0000178738 00000 n -0000178898 00000 n -0000179058 00000 n -0000179218 00000 n -0000179373 00000 n -0000179528 00000 n -0000179688 00000 n -0000179847 00000 n -0000180001 00000 n -0000180156 00000 n -0000180310 00000 n -0000180465 00000 n -0000180625 00000 n -0000180785 00000 n -0000180940 00000 n -0000181100 00000 n -0000181260 00000 n -0000181415 00000 n -0000181574 00000 n -0000181728 00000 n -0000181882 00000 n -0000194674 00000 n -0000186216 00000 n -0000182201 00000 n -0000194611 00000 n -0000186792 00000 n -0000186946 00000 n -0000187101 00000 n -0000187256 00000 n -0000187416 00000 n -0000187576 00000 n -0000187736 00000 n -0000187896 00000 n -0000188056 00000 n -0000188210 00000 n -0000188370 00000 n -0000188530 00000 n -0000188684 00000 n -0000188839 00000 n -0000188999 00000 n -0000189159 00000 n -0000189319 00000 n -0000189479 00000 n -0000189639 00000 n -0000189799 00000 n -0000189954 00000 n -0000190113 00000 n -0000190273 00000 n -0000190433 00000 n -0000190593 00000 n -0000190752 00000 n -0000190907 00000 n -0000191067 00000 n -0000191227 00000 n -0000191392 00000 n -0000191557 00000 n -0000191722 00000 n -0000191887 00000 n -0000192051 00000 n -0000192216 00000 n -0000192380 00000 n -0000192545 00000 n -0000192710 00000 n -0000192865 00000 n -0000193025 00000 n +0000143152 00000 n +0000143313 00000 n +0000143474 00000 n +0000143635 00000 n +0000143790 00000 n +0000143951 00000 n +0000144112 00000 n +0000144267 00000 n +0000144428 00000 n +0000144589 00000 n +0000144750 00000 n +0000144916 00000 n +0000145072 00000 n +0000145233 00000 n +0000145393 00000 n +0000145547 00000 n +0000145702 00000 n +0000145857 00000 n +0000146018 00000 n +0000146184 00000 n +0000146350 00000 n +0000146511 00000 n +0002020100 00000 n +0002000889 00000 n +0002019934 00000 n +0000146667 00000 n +0000146828 00000 n +0000146989 00000 n +0000147144 00000 n +0000147304 00000 n +0000147465 00000 n +0000147626 00000 n +0000147786 00000 n +0000147952 00000 n +0000148118 00000 n +0000148283 00000 n +0000148448 00000 n +0000148613 00000 n +0000148778 00000 n +0000148943 00000 n +0000149106 00000 n +0000149271 00000 n +0000149437 00000 n +0000149596 00000 n +0000149759 00000 n +0000149922 00000 n +0000161064 00000 n +0000152651 00000 n +0000150264 00000 n +0000161001 00000 n +0000153227 00000 n +0000153392 00000 n +0000153552 00000 n +0000153707 00000 n +0000153867 00000 n +0000154027 00000 n +0000154187 00000 n +0000154341 00000 n +0000154495 00000 n +0000154650 00000 n +0000154810 00000 n +0000154964 00000 n +0000155124 00000 n +0000155284 00000 n +0000155439 00000 n +0000155599 00000 n +0000155759 00000 n +0000155913 00000 n +0000156068 00000 n +0000156222 00000 n +0000156382 00000 n +0000156542 00000 n +0000156700 00000 n +0000156854 00000 n +0000157014 00000 n +0000157174 00000 n +0000157334 00000 n +0000157489 00000 n +0000157649 00000 n +0000157814 00000 n +0000157979 00000 n +0000158133 00000 n +0000158292 00000 n +0000158452 00000 n +0000158612 00000 n +0000158771 00000 n +0000158936 00000 n +0000159101 00000 n +0000159261 00000 n +0000159421 00000 n +0000159581 00000 n +0000159736 00000 n +0000159896 00000 n +0000160055 00000 n +0000160209 00000 n +0000160363 00000 n +0000160517 00000 n +0000160675 00000 n +0000160838 00000 n +0000171313 00000 n +0000163409 00000 n +0000161180 00000 n +0000171250 00000 n +0000163958 00000 n +0000164123 00000 n +0000164288 00000 n +0000164453 00000 n +0000164618 00000 n +0000164783 00000 n +0000164948 00000 n +0000165113 00000 n +0000165268 00000 n +0000165427 00000 n +0000165592 00000 n +0000165757 00000 n +0000165911 00000 n +0000166071 00000 n +0000166231 00000 n +0000166386 00000 n +0000166541 00000 n +0000166701 00000 n +0000166856 00000 n +0000167010 00000 n +0000167164 00000 n +0000167319 00000 n +0000167474 00000 n +0000167633 00000 n +0000167792 00000 n +0000167952 00000 n +0000168112 00000 n +0000168272 00000 n +0000168432 00000 n +0000168587 00000 n +0000168742 00000 n +0000168902 00000 n +0000169061 00000 n +0000169215 00000 n +0000169370 00000 n +0000169524 00000 n +0000169679 00000 n +0000169839 00000 n +0000169999 00000 n +0000170154 00000 n +0000170314 00000 n +0000170474 00000 n +0000170629 00000 n +0000170788 00000 n +0000170942 00000 n +0000171096 00000 n +0000182689 00000 n +0000174231 00000 n +0000171415 00000 n +0000182626 00000 n +0000174807 00000 n +0000174961 00000 n +0000175116 00000 n +0000175271 00000 n +0000175431 00000 n +0000175591 00000 n +0000175751 00000 n +0000175911 00000 n +0000176071 00000 n +0000176225 00000 n +0000176385 00000 n +0000176545 00000 n +0000176699 00000 n +0000176854 00000 n +0000177014 00000 n +0000177174 00000 n +0000177334 00000 n +0000177494 00000 n +0000177654 00000 n +0000177814 00000 n +0000177969 00000 n +0000178128 00000 n +0000178288 00000 n +0000178448 00000 n +0000178608 00000 n +0000178767 00000 n +0000178922 00000 n +0000179082 00000 n +0000179242 00000 n +0000179407 00000 n +0000179572 00000 n +0000179737 00000 n +0000179902 00000 n +0000180066 00000 n +0000180231 00000 n +0000180395 00000 n +0000180560 00000 n +0000180725 00000 n +0000180880 00000 n +0000181040 00000 n +0000181200 00000 n +0000181360 00000 n +0000181520 00000 n +0000181674 00000 n +0000181834 00000 n +0000181994 00000 n +0000182153 00000 n +0000182310 00000 n +0000182468 00000 n +0000193565 00000 n +0000185489 00000 n +0000182805 00000 n +0000193502 00000 n +0000186047 00000 n +0000186207 00000 n +0000186363 00000 n +0000186524 00000 n +0000186685 00000 n +0000186846 00000 n +0000187007 00000 n +0000187163 00000 n +0000187318 00000 n +0000187474 00000 n +0000187630 00000 n +0000187785 00000 n +0000187946 00000 n +0000188107 00000 n +0000188261 00000 n +0000188416 00000 n +0000188576 00000 n +0000188736 00000 n +0000188890 00000 n +0000189050 00000 n +0000189210 00000 n +0000189369 00000 n +0000189523 00000 n +0000189683 00000 n +0000189843 00000 n +0000190003 00000 n +0000190163 00000 n +0000190323 00000 n +0000190477 00000 n +0000190636 00000 n +0000190796 00000 n +0000190956 00000 n +0000191115 00000 n +0000191275 00000 n +0000191435 00000 n +0000191595 00000 n +0000191755 00000 n +0000191910 00000 n +0000192070 00000 n +0000192230 00000 n +0000192390 00000 n +0000192548 00000 n +0000192708 00000 n +0000192868 00000 n +0000193027 00000 n 0000193185 00000 n -0000193345 00000 n -0000193505 00000 n -0000193659 00000 n -0000193819 00000 n -0000193979 00000 n -0000194138 00000 n -0000194295 00000 n -0000194453 00000 n -0000206694 00000 n -0000198618 00000 n -0000194790 00000 n -0000206631 00000 n -0000199176 00000 n -0000199336 00000 n -0000199492 00000 n -0000199653 00000 n -0000199814 00000 n -0000199975 00000 n -0000200136 00000 n -0000200292 00000 n -0000200447 00000 n -0000200603 00000 n -0000200759 00000 n -0000200914 00000 n -0000201075 00000 n -0000201236 00000 n -0000201390 00000 n -0000201545 00000 n -0000201705 00000 n -0000201865 00000 n -0000202019 00000 n -0000202179 00000 n -0000202339 00000 n -0000202498 00000 n -0000202652 00000 n -0000202812 00000 n -0000202972 00000 n -0000203132 00000 n -0000203292 00000 n -0000203452 00000 n -0000203606 00000 n -0000203765 00000 n -0000203925 00000 n -0000204085 00000 n -0000204244 00000 n -0000204404 00000 n -0000204564 00000 n -0000204724 00000 n -0000204884 00000 n -0000205039 00000 n -0000205199 00000 n -0000205359 00000 n -0000205519 00000 n -0000205677 00000 n -0000205837 00000 n -0000205997 00000 n -0000206156 00000 n -0000206314 00000 n -0000206472 00000 n -0002183462 00000 n -0000219115 00000 n -0000210805 00000 n -0000206810 00000 n -0000219052 00000 n -0000211372 00000 n -0000211533 00000 n -0000211694 00000 n -0000211855 00000 n -0000212016 00000 n -0000212177 00000 n -0000212338 00000 n -0000212499 00000 n -0000212659 00000 n -0000212820 00000 n -0000212975 00000 n -0000213134 00000 n -0000213294 00000 n -0000213454 00000 n -0000213609 00000 n -0000213769 00000 n -0000213929 00000 n -0000214084 00000 n -0000214244 00000 n -0000214403 00000 n -0000214558 00000 n -0000214718 00000 n -0000214878 00000 n -0000215037 00000 n -0000215197 00000 n -0000215353 00000 n -0000215514 00000 n -0000215675 00000 n -0000215836 00000 n -0000215997 00000 n -0000216158 00000 n -0000216318 00000 n -0000216479 00000 n -0000216639 00000 n -0000216800 00000 n -0000216962 00000 n -0000217124 00000 n -0000217286 00000 n -0000217448 00000 n -0000217610 00000 n -0000217772 00000 n -0000217934 00000 n -0000218089 00000 n -0000218250 00000 n -0000218411 00000 n -0000218571 00000 n -0000218729 00000 n -0000218888 00000 n -0000230412 00000 n -0000222999 00000 n -0000219217 00000 n -0000230349 00000 n -0000223512 00000 n -0000223678 00000 n -0000223844 00000 n -0000224010 00000 n -0000224176 00000 n -0000224341 00000 n -0000224507 00000 n -0000224672 00000 n -0000224838 00000 n -0000225005 00000 n -0000225172 00000 n -0000225338 00000 n -0000225505 00000 n -0000225671 00000 n -0000225838 00000 n -0000225999 00000 n -0000226154 00000 n -0000226315 00000 n -0000226476 00000 n -0000226637 00000 n -0000226798 00000 n -0000226954 00000 n -0000227115 00000 n -0000227281 00000 n -0000227447 00000 n -0000227612 00000 n -0000227778 00000 n -0000227944 00000 n -0000228109 00000 n -0000228275 00000 n -0000228441 00000 n -0000228602 00000 n -0000228758 00000 n -0000228919 00000 n -0000229080 00000 n -0000229241 00000 n -0000229401 00000 n -0000229562 00000 n -0000229723 00000 n -0000229883 00000 n -0000230036 00000 n -0000230190 00000 n -0000242428 00000 n -0000233991 00000 n -0000230514 00000 n -0000242365 00000 n -0000234567 00000 n -0000234728 00000 n -0000234889 00000 n -0000235045 00000 n -0000235201 00000 n -0000235362 00000 n -0000235523 00000 n -0000235684 00000 n -0000235840 00000 n -0000236000 00000 n -0000236161 00000 n -0000236321 00000 n -0000236482 00000 n -0000236636 00000 n -0000236791 00000 n -0000236946 00000 n -0000237101 00000 n -0000237261 00000 n -0000237421 00000 n -0000237580 00000 n -0000237740 00000 n -0000237900 00000 n -0000238054 00000 n -0000238213 00000 n -0000238373 00000 n -0000238528 00000 n -0000238682 00000 n -0000238837 00000 n -0000238992 00000 n -0000239147 00000 n -0000239306 00000 n -0000239460 00000 n -0000239620 00000 n -0000239780 00000 n -0000239939 00000 n -0000240099 00000 n -0000240259 00000 n -0000240419 00000 n -0000240574 00000 n -0000240734 00000 n -0000240894 00000 n -0000241054 00000 n -0000241219 00000 n -0000241384 00000 n -0000241549 00000 n -0000241713 00000 n -0000241876 00000 n -0000242039 00000 n -0000242202 00000 n -0000254036 00000 n -0000245776 00000 n -0000242544 00000 n -0000253973 00000 n -0000246343 00000 n -0000246498 00000 n -0000246653 00000 n -0000246807 00000 n -0000246962 00000 n -0000247117 00000 n -0000247272 00000 n -0000247432 00000 n -0000247586 00000 n -0000247746 00000 n -0000247901 00000 n -0000248055 00000 n -0000248210 00000 n -0000248365 00000 n -0000248525 00000 n -0000248685 00000 n -0000248850 00000 n -0000249010 00000 n -0000249175 00000 n -0000249329 00000 n -0000249489 00000 n -0000249649 00000 n -0000249807 00000 n -0000249961 00000 n -0000250116 00000 n -0000250276 00000 n -0000250430 00000 n -0000250585 00000 n -0000250740 00000 n -0000250900 00000 n -0000251064 00000 n -0000251229 00000 n -0000251394 00000 n -0000251557 00000 n -0000251717 00000 n -0000251882 00000 n -0000252047 00000 n -0000252212 00000 n -0000252372 00000 n -0000252532 00000 n -0000252697 00000 n -0000252861 00000 n -0000253026 00000 n -0000253191 00000 n -0000253345 00000 n -0000253499 00000 n -0000253652 00000 n -0000253810 00000 n -0000265598 00000 n -0000257522 00000 n -0000254138 00000 n -0000265535 00000 n -0000258080 00000 n -0000258240 00000 n -0000258400 00000 n -0000258555 00000 n -0000258715 00000 n -0000258875 00000 n -0000259035 00000 n -0000259189 00000 n -0000259344 00000 n -0000259499 00000 n -0000259658 00000 n -0000259823 00000 n -0000259983 00000 n -0000260148 00000 n -0000260313 00000 n -0000260473 00000 n -0000260633 00000 n -0000260793 00000 n -0000260958 00000 n -0000261122 00000 n -0000261287 00000 n -0000261452 00000 n -0000261606 00000 n -0000261765 00000 n -0000261918 00000 n -0000262073 00000 n -0000262228 00000 n -0000262383 00000 n -0000262543 00000 n -0000262703 00000 n -0000262862 00000 n -0000263021 00000 n -0000263176 00000 n -0000263336 00000 n -0000263495 00000 n -0000263655 00000 n -0000263815 00000 n -0000263975 00000 n -0000264130 00000 n -0000264290 00000 n -0000264450 00000 n -0000264610 00000 n -0000264764 00000 n -0000264919 00000 n -0000265074 00000 n -0000265228 00000 n -0000265382 00000 n -0000275327 00000 n -0000268468 00000 n -0000265700 00000 n -0000275264 00000 n -0000268963 00000 n -0000269117 00000 n -0000269272 00000 n -0000269427 00000 n -0000269581 00000 n -0000269736 00000 n -0000269886 00000 n -0000270040 00000 n -0000270195 00000 n -0000270350 00000 n -0000270505 00000 n -0000270659 00000 n -0000270814 00000 n -0000270974 00000 n -0000271138 00000 n -0000271303 00000 n -0000271468 00000 n -0000271633 00000 n -0000271798 00000 n -0000271958 00000 n -0000272113 00000 n -0000272273 00000 n -0000272433 00000 n -0000272587 00000 n -0000272742 00000 n -0000272901 00000 n -0000273061 00000 n -0000273221 00000 n -0000273381 00000 n -0000273541 00000 n -0000273701 00000 n -0000273861 00000 n -0000274021 00000 n -0000274181 00000 n -0000274341 00000 n -0000274491 00000 n -0000274645 00000 n -0000274800 00000 n -0000274954 00000 n -0000275109 00000 n -0002183587 00000 n -0000286081 00000 n -0000278600 00000 n -0000275429 00000 n -0000286018 00000 n -0000279131 00000 n -0000279285 00000 n -0000279440 00000 n -0000279595 00000 n -0000279750 00000 n -0000279905 00000 n -0000280060 00000 n -0000280214 00000 n -0000280369 00000 n -0000280524 00000 n -0000280678 00000 n -0000280833 00000 n -0000280988 00000 n -0000281143 00000 n -0000281293 00000 n -0000281447 00000 n -0000281602 00000 n -0000281762 00000 n -0000281922 00000 n -0000282087 00000 n -0000282252 00000 n -0000282407 00000 n -0000282562 00000 n -0000282716 00000 n -0000282876 00000 n -0000283041 00000 n -0000283205 00000 n -0000283359 00000 n -0000283519 00000 n -0000283679 00000 n -0000283834 00000 n -0000283988 00000 n -0000284143 00000 n -0000284298 00000 n -0000284452 00000 n -0000284607 00000 n -0000284762 00000 n -0000284922 00000 n -0000285076 00000 n -0000285236 00000 n -0000285396 00000 n -0000285550 00000 n -0000285705 00000 n -0000285860 00000 n -0000293812 00000 n -0000288492 00000 n -0000286183 00000 n -0000293749 00000 n -0000288906 00000 n -0000289066 00000 n -0000289226 00000 n -0000289381 00000 n -0000289541 00000 n -0000289701 00000 n -0000289861 00000 n -0000290021 00000 n -0000290180 00000 n -0000290340 00000 n -0000290495 00000 n -0000290654 00000 n -0000290809 00000 n -0000290964 00000 n -0000291118 00000 n -0000291273 00000 n -0000291428 00000 n -0000291583 00000 n -0000291738 00000 n -0000291892 00000 n -0000292047 00000 n -0000292202 00000 n -0000292356 00000 n -0000292510 00000 n -0000292666 00000 n -0000292822 00000 n -0000292976 00000 n -0000293131 00000 n -0000293285 00000 n -0000293439 00000 n -0000293594 00000 n -0000294482 00000 n -0000294236 00000 n -0000293914 00000 n -0000294359 00000 n -0000298727 00000 n -0000298109 00000 n -0000294570 00000 n -0000298232 00000 n -0000298295 00000 n -0000298541 00000 n -0000298665 00000 n -0000303442 00000 n -0000302943 00000 n -0000298843 00000 n -0000303256 00000 n -0000303087 00000 n -0000303379 00000 n -0000308850 00000 n -0000307610 00000 n -0000303558 00000 n -0000308540 00000 n -0000307781 00000 n -0000307952 00000 n -0000308664 00000 n -0000308124 00000 n -0000308332 00000 n -0000308787 00000 n -0002183712 00000 n -0000311039 00000 n -0000310521 00000 n -0000308966 00000 n -0000310852 00000 n -0000310665 00000 n -0000310976 00000 n -0000315209 00000 n -0000313888 00000 n -0000311141 00000 n -0000314527 00000 n -0000314775 00000 n -0000314050 00000 n -0000314216 00000 n -0000314898 00000 n -0000315022 00000 n -0000314369 00000 n -0000315146 00000 n -0000319974 00000 n -0000318479 00000 n -0000315311 00000 n -0000319293 00000 n -0000319417 00000 n -0000318650 00000 n -0000318820 00000 n -0000319540 00000 n -0000319664 00000 n -0000319788 00000 n -0000319911 00000 n -0000318990 00000 n -0000319142 00000 n -0000322952 00000 n -0000322519 00000 n -0000320132 00000 n -0000322642 00000 n -0000322766 00000 n -0000322889 00000 n -0000324120 00000 n -0000323810 00000 n -0000323082 00000 n -0000323933 00000 n -0000324057 00000 n -0000325144 00000 n -0000324710 00000 n -0000324222 00000 n -0000324833 00000 n -0000325081 00000 n -0002183837 00000 n -0000325812 00000 n -0000325565 00000 n -0000325232 00000 n -0000325688 00000 n -0000329744 00000 n -0000329121 00000 n -0000325900 00000 n -0000329244 00000 n -0000329307 00000 n -0000329557 00000 n -0000329682 00000 n -0000334228 00000 n -0000333667 00000 n -0000329846 00000 n -0000333790 00000 n -0000333914 00000 n -0000334039 00000 n -0000334102 00000 n -0000334165 00000 n -0000338189 00000 n -0000337379 00000 n -0000334358 00000 n -0000337502 00000 n -0000337627 00000 n -0000337752 00000 n -0000337877 00000 n -0000338002 00000 n -0000338127 00000 n -0000341613 00000 n -0000343762 00000 n -0000341460 00000 n -0000338319 00000 n -0000343449 00000 n -0000343512 00000 n -0000343575 00000 n -0002070233 00000 n -0002060979 00000 n -0002070066 00000 n -0002059022 00000 n -0002047684 00000 n -0002058856 00000 n -0000343143 00000 n -0000343293 00000 n -0000343699 00000 n -0000342972 00000 n -0000343030 00000 n -0000343120 00000 n -0000347686 00000 n -0000346911 00000 n -0000343935 00000 n -0000347373 00000 n -0000347498 00000 n -0000347064 00000 n -0000347220 00000 n -0000347623 00000 n -0002183962 00000 n -0000459466 00000 n -0000351547 00000 n -0000351111 00000 n -0000347816 00000 n -0000351234 00000 n -0002047036 00000 n -0002040846 00000 n -0002046869 00000 n -0000351359 00000 n -0000351484 00000 n -0000355616 00000 n -0000355182 00000 n -0000351762 00000 n -0000355305 00000 n -0000355430 00000 n -0000355555 00000 n -0000358502 00000 n -0000357764 00000 n -0000355746 00000 n -0000358065 00000 n -0000358190 00000 n -0000358314 00000 n -0000357908 00000 n -0000358439 00000 n -0000362402 00000 n -0000361966 00000 n -0000358632 00000 n -0000362089 00000 n -0000362339 00000 n -0000366995 00000 n -0000366301 00000 n -0000362518 00000 n -0000366932 00000 n -0000366463 00000 n -0000366620 00000 n -0000366776 00000 n -0000371481 00000 n -0000370874 00000 n -0000367168 00000 n -0000371168 00000 n -0000371018 00000 n -0000371293 00000 n -0000371418 00000 n -0002184087 00000 n -0000375958 00000 n -0000375647 00000 n -0000371682 00000 n -0000375770 00000 n -0000375895 00000 n -0000380394 00000 n -0000379524 00000 n -0000376088 00000 n -0000380331 00000 n -0000379695 00000 n -0000379852 00000 n -0000380009 00000 n -0000380167 00000 n -0000384525 00000 n -0000383712 00000 n -0000380553 00000 n -0000384338 00000 n -0000383874 00000 n -0000384029 00000 n -0000384184 00000 n -0000384462 00000 n -0000385792 00000 n -0000385606 00000 n -0000384726 00000 n -0000385729 00000 n -0000389527 00000 n -0000388673 00000 n -0000385894 00000 n -0000388966 00000 n -0000388817 00000 n -0000389091 00000 n -0000389214 00000 n -0000389339 00000 n -0000389464 00000 n -0000393296 00000 n -0000392860 00000 n -0000389728 00000 n -0000392983 00000 n -0000393108 00000 n -0000393233 00000 n -0002184212 00000 n -0000398417 00000 n -0000397665 00000 n -0000393469 00000 n -0000397788 00000 n -0000397851 00000 n -0000397914 00000 n -0000397977 00000 n -0000398040 00000 n -0000398103 00000 n -0000398166 00000 n -0000398229 00000 n -0000398354 00000 n -0000402703 00000 n -0000402018 00000 n -0000398575 00000 n -0000402141 00000 n -0000402265 00000 n -0000402390 00000 n -0000402515 00000 n -0000402640 00000 n -0000405535 00000 n -0000404974 00000 n -0000402833 00000 n -0000405097 00000 n -0000405222 00000 n -0000405347 00000 n -0000405472 00000 n -0000409841 00000 n -0000409054 00000 n -0000405651 00000 n -0000409528 00000 n -0000409207 00000 n -0000409778 00000 n -0000409360 00000 n -0000414030 00000 n -0000413596 00000 n -0000409957 00000 n -0000413719 00000 n -0000413844 00000 n -0000413967 00000 n -0000418542 00000 n -0000417808 00000 n -0000414160 00000 n -0000418105 00000 n -0000418230 00000 n -0000417952 00000 n -0000418355 00000 n -0000418480 00000 n -0002184337 00000 n -0000422780 00000 n -0000422220 00000 n -0000418700 00000 n -0000422343 00000 n -0000422468 00000 n -0000422593 00000 n -0000422718 00000 n -0000427028 00000 n -0000426343 00000 n -0000422924 00000 n -0000426466 00000 n -0000426591 00000 n -0000426716 00000 n -0000426840 00000 n -0000426965 00000 n -0000428552 00000 n -0000428241 00000 n -0000427172 00000 n -0000428364 00000 n -0000428489 00000 n -0000432375 00000 n -0000431815 00000 n -0000428668 00000 n -0000431938 00000 n -0000432188 00000 n -0000432313 00000 n -0000436811 00000 n -0000436501 00000 n -0000432505 00000 n -0000436624 00000 n -0000436748 00000 n -0000440680 00000 n -0000442228 00000 n -0000440536 00000 n -0000436969 00000 n -0000441663 00000 n -0000441493 00000 n -0000441788 00000 n -0000441851 00000 n -0000441914 00000 n -0000441977 00000 n -0000442040 00000 n -0000442103 00000 n -0000442166 00000 n -0002184462 00000 n -0000446906 00000 n -0000445720 00000 n -0000442415 00000 n -0000446219 00000 n -0000446344 00000 n -0000445873 00000 n -0000446469 00000 n -0000446594 00000 n -0000446719 00000 n -0000446844 00000 n -0000446059 00000 n -0000451436 00000 n -0000451751 00000 n -0000450256 00000 n -0000447036 00000 n -0000451311 00000 n -0000450436 00000 n -0000451561 00000 n -0000451624 00000 n -0000451687 00000 n -0000450589 00000 n -0000450766 00000 n -0000450944 00000 n -0000451129 00000 n -0000456461 00000 n -0000455607 00000 n -0000451895 00000 n -0000456273 00000 n -0000455769 00000 n -0000456398 00000 n -0000455932 00000 n -0000456122 00000 n -0000459779 00000 n -0000458801 00000 n -0000456591 00000 n -0000459341 00000 n -0000458954 00000 n -0000459128 00000 n -0000459591 00000 n -0000459716 00000 n -0000464417 00000 n -0000463158 00000 n -0000459966 00000 n -0000463979 00000 n -0000463329 00000 n -0000463490 00000 n -0000463652 00000 n -0000463822 00000 n -0000464104 00000 n -0000464229 00000 n -0000464354 00000 n -0000468316 00000 n -0000468878 00000 n -0000468068 00000 n -0000464604 00000 n -0000468191 00000 n -0000468441 00000 n -0000468566 00000 n -0000468691 00000 n -0000468815 00000 n -0002184587 00000 n -0000470109 00000 n -0000469923 00000 n -0000469022 00000 n -0000470046 00000 n -0000473965 00000 n -0000473404 00000 n -0000470253 00000 n -0000473527 00000 n -0000473777 00000 n -0000473902 00000 n -0000477895 00000 n -0000476906 00000 n -0000474081 00000 n -0000477206 00000 n -0000477331 00000 n -0000477455 00000 n -0000477580 00000 n -0000477643 00000 n -0000477706 00000 n -0000477050 00000 n -0000477769 00000 n -0000477832 00000 n -0000479921 00000 n -0000479610 00000 n -0000478025 00000 n -0000479733 00000 n -0000479858 00000 n -0000481021 00000 n -0000480585 00000 n -0000480065 00000 n -0000480708 00000 n -0000480958 00000 n -0000481686 00000 n -0000481438 00000 n -0000481109 00000 n -0000481561 00000 n -0002184712 00000 n -0000485354 00000 n -0000484855 00000 n -0000481774 00000 n -0000484978 00000 n -0000485041 00000 n -0000485291 00000 n -0000488215 00000 n -0000487904 00000 n -0000485513 00000 n -0000488027 00000 n -0000488152 00000 n -0000492662 00000 n -0000492104 00000 n -0000488331 00000 n -0000492227 00000 n -0000492352 00000 n -0000492477 00000 n -0000492600 00000 n -0000497337 00000 n -0000496525 00000 n -0000492792 00000 n -0000496648 00000 n -0000496711 00000 n -0000496774 00000 n -0000496837 00000 n -0000496899 00000 n -0000496962 00000 n -0000497025 00000 n -0000497150 00000 n -0000497274 00000 n -0000501720 00000 n -0000501409 00000 n -0000497495 00000 n -0000501532 00000 n -0000501657 00000 n -0000504659 00000 n -0000504349 00000 n -0000501850 00000 n -0000504472 00000 n -0000504596 00000 n -0002184837 00000 n -0000508449 00000 n -0000507954 00000 n -0000504803 00000 n -0000508261 00000 n -0000508098 00000 n -0000508386 00000 n -0000512816 00000 n -0000511879 00000 n -0000508565 00000 n -0000512002 00000 n -0000512127 00000 n -0000512190 00000 n -0000512253 00000 n -0000512316 00000 n -0000512379 00000 n -0000512504 00000 n -0000512628 00000 n -0000512753 00000 n -0000516971 00000 n -0000516537 00000 n -0000512960 00000 n -0000516660 00000 n -0000516785 00000 n -0000516909 00000 n -0000520654 00000 n -0000521657 00000 n -0000520531 00000 n -0000517101 00000 n -0000521469 00000 n -0000521594 00000 n -0000525382 00000 n -0000524824 00000 n -0000521844 00000 n -0000524947 00000 n -0000525072 00000 n -0000525195 00000 n -0000525320 00000 n -0000529209 00000 n -0000528773 00000 n -0000525512 00000 n -0000528896 00000 n -0000529021 00000 n -0000529146 00000 n -0002184962 00000 n -0000532738 00000 n -0000532303 00000 n -0000529396 00000 n -0000532426 00000 n -0000532550 00000 n -0000532675 00000 n -0000537101 00000 n -0000536665 00000 n -0000532854 00000 n -0000536788 00000 n -0000536913 00000 n +0000193343 00000 n +0002112815 00000 n +0000204804 00000 n +0000196494 00000 n +0000193681 00000 n +0000204741 00000 n +0000197061 00000 n +0000197222 00000 n +0000197383 00000 n +0000197544 00000 n +0000197705 00000 n +0000197866 00000 n +0000198027 00000 n +0000198188 00000 n +0000198348 00000 n +0000198509 00000 n +0000198664 00000 n +0000198823 00000 n +0000198983 00000 n +0000199143 00000 n +0000199298 00000 n +0000199458 00000 n +0000199618 00000 n +0000199773 00000 n +0000199933 00000 n +0000200092 00000 n +0000200247 00000 n +0000200407 00000 n +0000200567 00000 n +0000200726 00000 n +0000200886 00000 n +0000201042 00000 n +0000201203 00000 n +0000201364 00000 n +0000201525 00000 n +0000201686 00000 n +0000201847 00000 n +0000202007 00000 n +0000202168 00000 n +0000202328 00000 n +0000202489 00000 n +0000202651 00000 n +0000202813 00000 n +0000202975 00000 n +0000203137 00000 n +0000203299 00000 n +0000203461 00000 n +0000203623 00000 n +0000203778 00000 n +0000203939 00000 n +0000204100 00000 n +0000204260 00000 n +0000204418 00000 n +0000204577 00000 n +0000215006 00000 n +0000207593 00000 n +0000204906 00000 n +0000214943 00000 n +0000208106 00000 n +0000208272 00000 n +0000208438 00000 n +0000208604 00000 n +0000208770 00000 n +0000208935 00000 n +0000209101 00000 n +0000209266 00000 n +0000209432 00000 n +0000209599 00000 n +0000209766 00000 n +0000209932 00000 n +0000210099 00000 n +0000210265 00000 n +0000210432 00000 n +0000210593 00000 n +0000210748 00000 n +0000210909 00000 n +0000211070 00000 n +0000211231 00000 n +0000211392 00000 n +0000211548 00000 n +0000211709 00000 n +0000211875 00000 n +0000212041 00000 n +0000212206 00000 n +0000212372 00000 n +0000212538 00000 n +0000212703 00000 n +0000212869 00000 n +0000213035 00000 n +0000213196 00000 n +0000213352 00000 n +0000213513 00000 n +0000213674 00000 n +0000213835 00000 n +0000213995 00000 n +0000214156 00000 n +0000214317 00000 n +0000214477 00000 n +0000214630 00000 n +0000214784 00000 n +0000225860 00000 n +0000217423 00000 n +0000215108 00000 n +0000225797 00000 n +0000217999 00000 n +0000218160 00000 n +0000218321 00000 n +0000218477 00000 n +0000218633 00000 n +0000218794 00000 n +0000218955 00000 n +0000219116 00000 n +0000219272 00000 n +0000219432 00000 n +0000219593 00000 n +0000219753 00000 n +0000219914 00000 n +0000220068 00000 n +0000220223 00000 n +0000220378 00000 n +0000220533 00000 n +0000220693 00000 n +0000220853 00000 n +0000221012 00000 n +0000221172 00000 n +0000221332 00000 n +0000221486 00000 n +0000221645 00000 n +0000221805 00000 n +0000221960 00000 n +0000222114 00000 n +0000222269 00000 n +0000222424 00000 n +0000222579 00000 n +0000222738 00000 n +0000222892 00000 n +0000223052 00000 n +0000223212 00000 n +0000223371 00000 n +0000223531 00000 n +0000223691 00000 n +0000223851 00000 n +0000224006 00000 n +0000224166 00000 n +0000224326 00000 n +0000224486 00000 n +0000224651 00000 n +0000224816 00000 n +0000224981 00000 n +0000225145 00000 n +0000225308 00000 n +0000225471 00000 n +0000225634 00000 n +0000236332 00000 n +0000228072 00000 n +0000225976 00000 n +0000236269 00000 n +0000228639 00000 n +0000228794 00000 n +0000228949 00000 n +0000229103 00000 n +0000229258 00000 n +0000229413 00000 n +0000229568 00000 n +0000229728 00000 n +0000229882 00000 n +0000230042 00000 n +0000230197 00000 n +0000230351 00000 n +0000230506 00000 n +0000230661 00000 n +0000230821 00000 n +0000230981 00000 n +0000231146 00000 n +0000231306 00000 n +0000231471 00000 n +0000231625 00000 n +0000231785 00000 n +0000231945 00000 n +0000232103 00000 n +0000232257 00000 n +0000232412 00000 n +0000232572 00000 n +0000232726 00000 n +0000232881 00000 n +0000233036 00000 n +0000233196 00000 n +0000233360 00000 n +0000233525 00000 n +0000233690 00000 n +0000233853 00000 n +0000234013 00000 n +0000234178 00000 n +0000234343 00000 n +0000234508 00000 n +0000234668 00000 n +0000234828 00000 n +0000234993 00000 n +0000235157 00000 n +0000235322 00000 n +0000235487 00000 n +0000235641 00000 n +0000235795 00000 n +0000235948 00000 n +0000236106 00000 n +0000246751 00000 n +0000238675 00000 n +0000236434 00000 n +0000246688 00000 n +0000239233 00000 n +0000239393 00000 n +0000239553 00000 n +0000239708 00000 n +0000239868 00000 n +0000240028 00000 n +0000240188 00000 n +0000240342 00000 n +0000240497 00000 n +0000240652 00000 n +0000240811 00000 n +0000240976 00000 n +0000241136 00000 n +0000241301 00000 n +0000241466 00000 n +0000241626 00000 n +0000241786 00000 n +0000241946 00000 n +0000242111 00000 n +0000242275 00000 n +0000242440 00000 n +0000242605 00000 n +0000242759 00000 n +0000242918 00000 n +0000243071 00000 n +0000243226 00000 n +0000243381 00000 n +0000243536 00000 n +0000243696 00000 n +0000243856 00000 n +0000244015 00000 n +0000244174 00000 n +0000244329 00000 n +0000244489 00000 n +0000244648 00000 n +0000244808 00000 n +0000244968 00000 n +0000245128 00000 n +0000245283 00000 n +0000245443 00000 n +0000245603 00000 n +0000245763 00000 n +0000245917 00000 n +0000246072 00000 n +0000246227 00000 n +0000246381 00000 n +0000246535 00000 n +0000255499 00000 n +0000248640 00000 n +0000246853 00000 n +0000255436 00000 n +0000249135 00000 n +0000249289 00000 n +0000249444 00000 n +0000249599 00000 n +0000249753 00000 n +0000249908 00000 n +0000250058 00000 n +0000250212 00000 n +0000250367 00000 n +0000250522 00000 n +0000250677 00000 n +0000250831 00000 n +0000250986 00000 n +0000251146 00000 n +0000251310 00000 n +0000251475 00000 n +0000251640 00000 n +0000251805 00000 n +0000251970 00000 n +0000252130 00000 n +0000252285 00000 n +0000252445 00000 n +0000252605 00000 n +0000252759 00000 n +0000252914 00000 n +0000253073 00000 n +0000253233 00000 n +0000253393 00000 n +0000253553 00000 n +0000253713 00000 n +0000253873 00000 n +0000254033 00000 n +0000254193 00000 n +0000254353 00000 n +0000254513 00000 n +0000254663 00000 n +0000254817 00000 n +0000254972 00000 n +0000255126 00000 n +0000255281 00000 n +0002112940 00000 n +0000265212 00000 n +0000257731 00000 n +0000255601 00000 n +0000265149 00000 n +0000258262 00000 n +0000258416 00000 n +0000258571 00000 n +0000258726 00000 n +0000258881 00000 n +0000259036 00000 n +0000259191 00000 n +0000259345 00000 n +0000259500 00000 n +0000259655 00000 n +0000259809 00000 n +0000259964 00000 n +0000260119 00000 n +0000260274 00000 n +0000260424 00000 n +0000260578 00000 n +0000260733 00000 n +0000260893 00000 n +0000261053 00000 n +0000261218 00000 n +0000261383 00000 n +0000261538 00000 n +0000261693 00000 n +0000261847 00000 n +0000262007 00000 n +0000262172 00000 n +0000262336 00000 n +0000262490 00000 n +0000262650 00000 n +0000262810 00000 n +0000262965 00000 n +0000263119 00000 n +0000263274 00000 n +0000263429 00000 n +0000263583 00000 n +0000263738 00000 n +0000263893 00000 n +0000264053 00000 n +0000264207 00000 n +0000264367 00000 n +0000264527 00000 n +0000264681 00000 n +0000264836 00000 n +0000264991 00000 n +0000272205 00000 n +0000266885 00000 n +0000265314 00000 n +0000272142 00000 n +0000267299 00000 n +0000267459 00000 n +0000267619 00000 n +0000267774 00000 n +0000267934 00000 n +0000268094 00000 n +0000268254 00000 n +0000268414 00000 n +0000268573 00000 n +0000268733 00000 n +0000268888 00000 n +0000269047 00000 n +0000269202 00000 n +0000269357 00000 n +0000269511 00000 n +0000269666 00000 n +0000269821 00000 n +0000269976 00000 n +0000270131 00000 n +0000270285 00000 n +0000270440 00000 n +0000270595 00000 n +0000270749 00000 n +0000270903 00000 n +0000271059 00000 n +0000271215 00000 n +0000271369 00000 n +0000271524 00000 n +0000271678 00000 n +0000271832 00000 n +0000271987 00000 n +0000272860 00000 n +0000272614 00000 n +0000272307 00000 n +0000272737 00000 n +0000276990 00000 n +0000276372 00000 n +0000272948 00000 n +0000276495 00000 n +0000276558 00000 n +0000276804 00000 n +0000276928 00000 n +0000281471 00000 n +0000280972 00000 n +0000277106 00000 n +0000281285 00000 n +0000281116 00000 n +0000281408 00000 n +0000286669 00000 n +0000285429 00000 n +0000281587 00000 n +0000286359 00000 n +0000285600 00000 n +0000285771 00000 n +0000286483 00000 n +0000285943 00000 n +0000286151 00000 n +0000286606 00000 n +0002113065 00000 n +0000288814 00000 n +0000288296 00000 n +0000286785 00000 n +0000288627 00000 n +0000288440 00000 n +0000288751 00000 n +0000292854 00000 n +0000291533 00000 n +0000288916 00000 n +0000292172 00000 n +0000292420 00000 n +0000291695 00000 n +0000291861 00000 n +0000292543 00000 n +0000292667 00000 n +0000292014 00000 n +0000292791 00000 n +0000297489 00000 n +0000295994 00000 n +0000292956 00000 n +0000296808 00000 n +0000296932 00000 n +0000296165 00000 n +0000296335 00000 n +0000297055 00000 n +0000297179 00000 n +0000297303 00000 n +0000297426 00000 n +0000296505 00000 n +0000296657 00000 n +0000300415 00000 n +0000299982 00000 n +0000297647 00000 n +0000300105 00000 n +0000300229 00000 n +0000300352 00000 n +0000301542 00000 n +0000301232 00000 n +0000300545 00000 n +0000301355 00000 n +0000301479 00000 n +0000302543 00000 n +0000302109 00000 n +0000301644 00000 n +0000302232 00000 n +0000302480 00000 n +0002113190 00000 n +0000303197 00000 n +0000302950 00000 n +0000302631 00000 n +0000303073 00000 n +0000306929 00000 n +0000306306 00000 n +0000303285 00000 n +0000306429 00000 n +0000306492 00000 n +0000306742 00000 n +0000306867 00000 n +0000311238 00000 n +0000310677 00000 n +0000307031 00000 n +0000310800 00000 n +0000310924 00000 n +0000311049 00000 n +0000311112 00000 n +0000311175 00000 n +0000315111 00000 n +0000314301 00000 n +0000311368 00000 n +0000314424 00000 n +0000314549 00000 n +0000314674 00000 n +0000314799 00000 n +0000314924 00000 n +0000315049 00000 n +0000318383 00000 n +0000320532 00000 n +0000318230 00000 n +0000315241 00000 n +0000320219 00000 n +0000320282 00000 n +0000320345 00000 n +0001999400 00000 n +0001990147 00000 n +0001999233 00000 n +0001988190 00000 n +0001976852 00000 n +0001988024 00000 n +0000319913 00000 n +0000320063 00000 n +0000320469 00000 n +0000319742 00000 n +0000319800 00000 n +0000319890 00000 n +0000324328 00000 n +0000323553 00000 n +0000320705 00000 n +0000324015 00000 n +0000324140 00000 n +0000323706 00000 n +0000323862 00000 n +0000324265 00000 n +0002113315 00000 n +0000432640 00000 n +0000328097 00000 n +0000327661 00000 n +0000324458 00000 n +0000327784 00000 n +0001976204 00000 n +0001970015 00000 n +0001976037 00000 n +0000327909 00000 n +0000328034 00000 n +0000332153 00000 n +0000331719 00000 n +0000328312 00000 n +0000331842 00000 n +0000331967 00000 n +0000332092 00000 n +0000334942 00000 n +0000334204 00000 n +0000332283 00000 n +0000334505 00000 n +0000334630 00000 n +0000334754 00000 n +0000334348 00000 n +0000334879 00000 n +0000338745 00000 n +0000338309 00000 n +0000335072 00000 n +0000338432 00000 n +0000338682 00000 n +0000343115 00000 n +0000342421 00000 n +0000338861 00000 n +0000343052 00000 n +0000342583 00000 n +0000342740 00000 n +0000342896 00000 n +0000347397 00000 n +0000346790 00000 n +0000343288 00000 n +0000347084 00000 n +0000346934 00000 n +0000347209 00000 n +0000347334 00000 n +0002113440 00000 n +0000351767 00000 n +0000351456 00000 n +0000347598 00000 n +0000351579 00000 n +0000351704 00000 n +0000355956 00000 n +0000355086 00000 n +0000351897 00000 n +0000355893 00000 n +0000355257 00000 n +0000355414 00000 n +0000355571 00000 n +0000355729 00000 n +0000359922 00000 n +0000359109 00000 n +0000356115 00000 n +0000359735 00000 n +0000359271 00000 n +0000359426 00000 n +0000359581 00000 n +0000359859 00000 n +0000361170 00000 n +0000360984 00000 n +0000360123 00000 n +0000361107 00000 n +0000364750 00000 n +0000363896 00000 n +0000361272 00000 n +0000364189 00000 n +0000364040 00000 n +0000364314 00000 n +0000364437 00000 n +0000364562 00000 n +0000364687 00000 n +0000368456 00000 n +0000368020 00000 n +0000364951 00000 n +0000368143 00000 n +0000368268 00000 n +0000368393 00000 n +0002113565 00000 n +0000373361 00000 n +0000372609 00000 n +0000368629 00000 n +0000372732 00000 n +0000372795 00000 n +0000372858 00000 n +0000372921 00000 n +0000372984 00000 n +0000373047 00000 n +0000373110 00000 n +0000373173 00000 n +0000373298 00000 n +0000377585 00000 n +0000376900 00000 n +0000373519 00000 n +0000377023 00000 n +0000377147 00000 n +0000377272 00000 n +0000377397 00000 n +0000377522 00000 n +0000380339 00000 n +0000379778 00000 n +0000377715 00000 n +0000379901 00000 n +0000380026 00000 n +0000380151 00000 n +0000380276 00000 n +0000384549 00000 n +0000383762 00000 n +0000380455 00000 n +0000384236 00000 n +0000383915 00000 n +0000384486 00000 n +0000384068 00000 n +0000388649 00000 n +0000388215 00000 n +0000384665 00000 n +0000388338 00000 n +0000388463 00000 n +0000388586 00000 n +0000393085 00000 n +0000392351 00000 n +0000388779 00000 n +0000392648 00000 n +0000392773 00000 n +0000392495 00000 n +0000392898 00000 n +0000393023 00000 n +0002113690 00000 n +0000397184 00000 n +0000396624 00000 n +0000393243 00000 n +0000396747 00000 n +0000396872 00000 n +0000396997 00000 n +0000397122 00000 n +0000401350 00000 n +0000400665 00000 n +0000397328 00000 n +0000400788 00000 n +0000400913 00000 n +0000401038 00000 n +0000401162 00000 n +0000401287 00000 n +0000402847 00000 n +0000402536 00000 n +0000401494 00000 n +0000402659 00000 n +0000402784 00000 n +0000406491 00000 n +0000405931 00000 n +0000402963 00000 n +0000406054 00000 n +0000406304 00000 n +0000406429 00000 n +0000410750 00000 n +0000410440 00000 n +0000406621 00000 n +0000410563 00000 n +0000410687 00000 n +0000414402 00000 n +0000415950 00000 n +0000414258 00000 n +0000410908 00000 n +0000415385 00000 n +0000415215 00000 n +0000415510 00000 n +0000415573 00000 n +0000415636 00000 n +0000415699 00000 n +0000415762 00000 n +0000415825 00000 n +0000415888 00000 n +0002113815 00000 n +0000420513 00000 n +0000419327 00000 n +0000416137 00000 n +0000419826 00000 n +0000419951 00000 n +0000419480 00000 n +0000420076 00000 n +0000420201 00000 n +0000420326 00000 n +0000420451 00000 n +0000419666 00000 n +0000424799 00000 n +0000425114 00000 n +0000423619 00000 n +0000420643 00000 n +0000424674 00000 n +0000423799 00000 n +0000424924 00000 n +0000424987 00000 n +0000425050 00000 n +0000423952 00000 n +0000424129 00000 n +0000424307 00000 n +0000424492 00000 n +0000429743 00000 n +0000428889 00000 n +0000425258 00000 n +0000429555 00000 n +0000429051 00000 n +0000429680 00000 n +0000429214 00000 n +0000429404 00000 n +0000432953 00000 n +0000431975 00000 n +0000429873 00000 n +0000432515 00000 n +0000432128 00000 n +0000432302 00000 n +0000432765 00000 n +0000432890 00000 n +0000437221 00000 n +0000435969 00000 n +0000433140 00000 n +0000436784 00000 n +0000436140 00000 n +0000436301 00000 n +0000436461 00000 n +0000436629 00000 n +0000436909 00000 n +0000437034 00000 n +0000437159 00000 n +0000440848 00000 n +0000441410 00000 n +0000440600 00000 n +0000437394 00000 n +0000440723 00000 n +0000440972 00000 n +0000441097 00000 n +0000441222 00000 n +0000441347 00000 n +0002113940 00000 n +0000442884 00000 n +0000442698 00000 n +0000441554 00000 n +0000442821 00000 n +0000446687 00000 n +0000446126 00000 n +0000443028 00000 n +0000446249 00000 n +0000446499 00000 n +0000446624 00000 n +0000450472 00000 n +0000449483 00000 n +0000446803 00000 n +0000449783 00000 n +0000449908 00000 n +0000450032 00000 n +0000450157 00000 n +0000450220 00000 n +0000450283 00000 n +0000449627 00000 n +0000450346 00000 n +0000450409 00000 n +0000452429 00000 n +0000452118 00000 n +0000450602 00000 n +0000452241 00000 n +0000452366 00000 n +0000453504 00000 n +0000453068 00000 n +0000452573 00000 n +0000453191 00000 n +0000453441 00000 n +0000454156 00000 n +0000453908 00000 n +0000453592 00000 n +0000454031 00000 n +0002114065 00000 n +0000457764 00000 n +0000457265 00000 n +0000454244 00000 n +0000457388 00000 n +0000457451 00000 n +0000457701 00000 n +0000460533 00000 n +0000460222 00000 n +0000457923 00000 n +0000460345 00000 n +0000460470 00000 n +0000464902 00000 n +0000464344 00000 n +0000460649 00000 n +0000464467 00000 n +0000464592 00000 n +0000464717 00000 n +0000464840 00000 n +0000469199 00000 n +0000468387 00000 n +0000465032 00000 n +0000468510 00000 n +0000468573 00000 n +0000468636 00000 n +0000468699 00000 n +0000468761 00000 n +0000468824 00000 n +0000468887 00000 n +0000469012 00000 n +0000469136 00000 n +0000473555 00000 n +0000473244 00000 n +0000469357 00000 n +0000473367 00000 n +0000473492 00000 n +0000476471 00000 n +0000476161 00000 n +0000473685 00000 n +0000476284 00000 n +0000476408 00000 n +0002114190 00000 n +0000480216 00000 n +0000479721 00000 n +0000476615 00000 n +0000480028 00000 n +0000479865 00000 n +0000480153 00000 n +0000484436 00000 n +0000483499 00000 n +0000480332 00000 n +0000483622 00000 n +0000483747 00000 n +0000483810 00000 n +0000483873 00000 n +0000483936 00000 n +0000483999 00000 n +0000484124 00000 n +0000484248 00000 n +0000484373 00000 n +0000488474 00000 n +0000488040 00000 n +0000484580 00000 n +0000488163 00000 n +0000488288 00000 n +0000488412 00000 n +0000492098 00000 n +0000493101 00000 n +0000491975 00000 n +0000488604 00000 n +0000492913 00000 n +0000493038 00000 n +0000496764 00000 n +0000496206 00000 n +0000493288 00000 n +0000496329 00000 n +0000496454 00000 n +0000496577 00000 n +0000496702 00000 n +0000500451 00000 n +0000500015 00000 n +0000496894 00000 n +0000500138 00000 n +0000500263 00000 n +0000500388 00000 n +0002114315 00000 n +0000503948 00000 n +0000503513 00000 n +0000500638 00000 n +0000503636 00000 n +0000503760 00000 n +0000503885 00000 n +0000508240 00000 n +0000507804 00000 n +0000504064 00000 n +0000507927 00000 n +0000508052 00000 n +0000508177 00000 n +0000511997 00000 n +0000511687 00000 n +0000508441 00000 n +0000511810 00000 n +0000511935 00000 n +0000515863 00000 n +0000515423 00000 n +0000512113 00000 n +0000515546 00000 n +0000515609 00000 n +0000515672 00000 n +0000515736 00000 n +0000515799 00000 n +0000519128 00000 n +0000518500 00000 n +0000515979 00000 n +0000518623 00000 n +0000518686 00000 n +0000518749 00000 n +0000518812 00000 n +0000518875 00000 n +0000518939 00000 n +0000519002 00000 n +0000519065 00000 n +0000521682 00000 n +0000521122 00000 n +0000519230 00000 n +0000521245 00000 n +0000521370 00000 n +0000521494 00000 n +0000521619 00000 n +0002114440 00000 n +0000525334 00000 n +0000524898 00000 n +0000521798 00000 n +0000525021 00000 n +0000525271 00000 n +0000529644 00000 n +0000529334 00000 n +0000525507 00000 n +0000529457 00000 n +0000529582 00000 n +0000533543 00000 n +0000533232 00000 n +0000529802 00000 n +0000533355 00000 n +0000533480 00000 n +0000537599 00000 n 0000537038 00000 n -0000540961 00000 n -0000540651 00000 n -0000537302 00000 n -0000540774 00000 n -0000540899 00000 n -0000545726 00000 n -0000545286 00000 n -0000541077 00000 n -0000545409 00000 n -0000545472 00000 n -0000545535 00000 n -0000545599 00000 n -0000545662 00000 n -0000550307 00000 n -0000549679 00000 n -0000545842 00000 n -0000549802 00000 n -0000549865 00000 n -0000549928 00000 n -0000549991 00000 n -0000550054 00000 n -0000550118 00000 n -0000550181 00000 n -0000550244 00000 n -0000552920 00000 n -0000552360 00000 n -0000550409 00000 n -0000552483 00000 n -0000552608 00000 n -0000552732 00000 n -0000552857 00000 n -0002185087 00000 n -0000556656 00000 n -0000556220 00000 n -0000553036 00000 n -0000556343 00000 n -0000556593 00000 n -0000561084 00000 n -0000560774 00000 n -0000556829 00000 n -0000560897 00000 n -0000561022 00000 n -0000565092 00000 n -0000564781 00000 n -0000561242 00000 n -0000564904 00000 n -0000565029 00000 n -0000569443 00000 n -0000568882 00000 n -0000565265 00000 n -0000569005 00000 n -0000569130 00000 n -0000569255 00000 n -0000569380 00000 n -0000573170 00000 n -0000572610 00000 n -0000569587 00000 n -0000572733 00000 n -0000572858 00000 n -0000572983 00000 n -0000573108 00000 n -0000575994 00000 n -0000575510 00000 n -0000573314 00000 n -0000575806 00000 n -0000575654 00000 n -0000575931 00000 n -0002185212 00000 n -0000613080 00000 n -0000580766 00000 n -0000579876 00000 n -0000576124 00000 n -0000580205 00000 n -0000580330 00000 n -0000580455 00000 n -0000580020 00000 n -0000580580 00000 n -0000580703 00000 n -0000586732 00000 n -0000584620 00000 n -0000580910 00000 n -0000586419 00000 n -0000584836 00000 n -0000585005 00000 n -0000585174 00000 n -0000585368 00000 n -0000585540 00000 n -0000585725 00000 n -0000585927 00000 n -0000586544 00000 n -0000586097 00000 n -0000586669 00000 n -0000586250 00000 n -0000589882 00000 n -0000589572 00000 n -0000586919 00000 n -0000589695 00000 n -0000589819 00000 n -0000591713 00000 n -0000591403 00000 n -0000589998 00000 n -0000591526 00000 n -0000591651 00000 n -0000596390 00000 n -0000594161 00000 n -0000591829 00000 n -0000596202 00000 n -0000596327 00000 n -0000594386 00000 n -0000594569 00000 n -0000594745 00000 n -0000594926 00000 n -0000595106 00000 n -0000595286 00000 n -0000595472 00000 n -0000595656 00000 n -0000595837 00000 n -0000596020 00000 n -0000598922 00000 n -0000598611 00000 n -0000596591 00000 n -0000598734 00000 n -0000598859 00000 n -0002185337 00000 n -0000603362 00000 n -0000602594 00000 n -0000599038 00000 n -0000603049 00000 n -0000603174 00000 n -0000602747 00000 n -0000603299 00000 n -0000602896 00000 n -0000605471 00000 n -0000605035 00000 n -0000603506 00000 n -0000605158 00000 n -0000605283 00000 n -0000605408 00000 n -0000609885 00000 n -0000609123 00000 n -0000605587 00000 n -0000609449 00000 n -0000609267 00000 n -0000609574 00000 n -0000609698 00000 n -0000609822 00000 n -0000613518 00000 n -0000612582 00000 n -0000610058 00000 n -0000612705 00000 n -0000612830 00000 n -0000612955 00000 n -0000613205 00000 n -0000613330 00000 n -0000613455 00000 n -0000614771 00000 n -0000614460 00000 n -0000613662 00000 n -0000614583 00000 n -0000614708 00000 n -0000618607 00000 n -0000618294 00000 n -0000614887 00000 n -0000618417 00000 n -0000618480 00000 n -0000618543 00000 n -0002185462 00000 n -0000620088 00000 n -0000619776 00000 n -0000618737 00000 n -0000619899 00000 n -0000619962 00000 n -0000620024 00000 n -0000623280 00000 n -0000622967 00000 n -0000620190 00000 n -0000623090 00000 n -0000623153 00000 n -0000623216 00000 n -0000626892 00000 n -0000626331 00000 n -0000623382 00000 n -0000626454 00000 n -0000626704 00000 n -0000626829 00000 n -0000630382 00000 n -0000629883 00000 n -0000627065 00000 n -0000630006 00000 n -0000630069 00000 n -0000630132 00000 n -0000630194 00000 n -0000630319 00000 n -0000632990 00000 n -0000632304 00000 n -0000630512 00000 n -0000632427 00000 n -0000632552 00000 n -0000632677 00000 n -0000632740 00000 n -0000632804 00000 n -0000632929 00000 n -0000635764 00000 n -0000635205 00000 n -0000633120 00000 n -0000635328 00000 n -0000635453 00000 n -0000635577 00000 n -0000635701 00000 n -0002185587 00000 n -0000639528 00000 n -0000639092 00000 n -0000635894 00000 n -0000639215 00000 n -0000639465 00000 n -0000644045 00000 n -0000643609 00000 n -0000639658 00000 n -0000643732 00000 n -0000643857 00000 n -0000643982 00000 n -0000648925 00000 n -0000648363 00000 n -0000644203 00000 n -0000648486 00000 n -0002040610 00000 n -0002038736 00000 n -0002040442 00000 n -0000648611 00000 n -0000648674 00000 n -0000648737 00000 n -0000648862 00000 n -0000651116 00000 n -0000650930 00000 n -0000649083 00000 n -0000651053 00000 n -0000655484 00000 n -0000654798 00000 n -0000651218 00000 n -0000654921 00000 n -0000654984 00000 n -0000655047 00000 n -0000655172 00000 n -0000655297 00000 n -0000655422 00000 n -0000659425 00000 n -0000658865 00000 n -0000655600 00000 n -0000658988 00000 n -0000659051 00000 n -0000659114 00000 n -0000659238 00000 n -0000659362 00000 n -0002185712 00000 n -0000663332 00000 n -0000662896 00000 n -0000659555 00000 n -0000663019 00000 n -0000663082 00000 n -0000663145 00000 n -0000663270 00000 n -0000667647 00000 n -0000666962 00000 n -0000663462 00000 n -0000667085 00000 n -0000667148 00000 n -0000667211 00000 n -0000667336 00000 n -0000667399 00000 n -0000667462 00000 n -0000667586 00000 n -0000671599 00000 n -0000670974 00000 n -0000667777 00000 n -0000671097 00000 n -0000671160 00000 n -0000671223 00000 n -0000671286 00000 n -0000671411 00000 n -0000671536 00000 n -0000676176 00000 n -0000675617 00000 n -0000671814 00000 n -0000675740 00000 n -0000675865 00000 n -0000675990 00000 n -0000676114 00000 n -0000680778 00000 n -0000680219 00000 n -0000676391 00000 n -0000680342 00000 n -0000680467 00000 n -0000680591 00000 n -0000680715 00000 n -0000685799 00000 n -0000684707 00000 n -0000680908 00000 n -0000685612 00000 n -0000685737 00000 n -0000684878 00000 n -0000685060 00000 n -0000685240 00000 n -0000685427 00000 n -0002185837 00000 n -0000689992 00000 n -0000689305 00000 n -0000685943 00000 n -0000689428 00000 n -0000689553 00000 n -0000689678 00000 n -0000689803 00000 n -0000689866 00000 n -0000689929 00000 n -0000692080 00000 n -0000691643 00000 n -0000690122 00000 n -0000691766 00000 n -0000691829 00000 n -0000691891 00000 n -0000691954 00000 n -0000692017 00000 n -0000693774 00000 n -0000693465 00000 n -0000692239 00000 n -0000693588 00000 n -0000693712 00000 n -0000697600 00000 n -0000697039 00000 n -0000693975 00000 n -0000697162 00000 n -0000697412 00000 n -0000697537 00000 n -0000702412 00000 n -0000702101 00000 n -0000697759 00000 n -0000702224 00000 n -0000702349 00000 n -0000706762 00000 n -0000706576 00000 n -0000702556 00000 n -0000706699 00000 n -0002185962 00000 n -0000711034 00000 n -0000710224 00000 n -0000706864 00000 n -0000710347 00000 n -0000710472 00000 n -0000710596 00000 n -0000710721 00000 n -0000710846 00000 n -0000710971 00000 n -0000715502 00000 n -0000714818 00000 n -0000711136 00000 n -0000714941 00000 n -0000715066 00000 n -0000715191 00000 n -0000715315 00000 n -0000715439 00000 n -0000719985 00000 n -0000719675 00000 n -0000715632 00000 n -0000719798 00000 n -0000719923 00000 n -0000723402 00000 n -0000722842 00000 n -0000720101 00000 n -0000722965 00000 n -0000723090 00000 n -0000723215 00000 n -0000723339 00000 n -0000726743 00000 n -0000726432 00000 n -0000723518 00000 n -0000726555 00000 n -0000726680 00000 n -0000729114 00000 n -0000728928 00000 n -0000726873 00000 n -0000729051 00000 n -0002186087 00000 n -0000732356 00000 n -0000731920 00000 n -0000729273 00000 n -0000732043 00000 n -0000732168 00000 n -0000732293 00000 n -0000736320 00000 n -0000735885 00000 n -0000732486 00000 n -0000736008 00000 n -0000736132 00000 n -0000736257 00000 n -0000740895 00000 n -0000738904 00000 n -0000736450 00000 n -0000740584 00000 n -0000740709 00000 n -0000740832 00000 n -0000739102 00000 n -0000739313 00000 n -0000739525 00000 n -0000739737 00000 n -0000739949 00000 n -0000740161 00000 n -0000740372 00000 n -0000744880 00000 n -0000744070 00000 n -0000741025 00000 n -0000744193 00000 n -0000744443 00000 n -0000744568 00000 n -0000744693 00000 n -0000744818 00000 n -0000748491 00000 n -0000747930 00000 n -0000744982 00000 n -0000748053 00000 n -0000748178 00000 n -0000748303 00000 n -0000748428 00000 n -0000751410 00000 n -0000750975 00000 n -0000748621 00000 n -0000751098 00000 n -0000751223 00000 n -0000751348 00000 n -0002186212 00000 n -0000755673 00000 n -0000754793 00000 n -0000751526 00000 n -0000755106 00000 n -0000755232 00000 n -0000754937 00000 n -0000755358 00000 n -0000755484 00000 n -0000755610 00000 n -0000759641 00000 n -0000759078 00000 n -0000755789 00000 n -0000759201 00000 n -0000759452 00000 n -0000759578 00000 n -0000764092 00000 n -0000763281 00000 n -0000759743 00000 n -0000763404 00000 n -0000763530 00000 n -0000763654 00000 n -0000763779 00000 n -0000763905 00000 n -0000764030 00000 n -0000768054 00000 n -0000767743 00000 n -0000764194 00000 n -0000767866 00000 n -0000767991 00000 n -0000770599 00000 n -0000770161 00000 n -0000768170 00000 n -0000770284 00000 n -0000770410 00000 n -0000770536 00000 n -0000774435 00000 n -0000773364 00000 n -0000770772 00000 n -0000774120 00000 n -0000774372 00000 n -0000773526 00000 n -0000773762 00000 n -0000773941 00000 n -0002186337 00000 n -0000776415 00000 n -0000776103 00000 n -0000774565 00000 n -0000776226 00000 n -0000776352 00000 n -0000780440 00000 n -0000779876 00000 n -0000776531 00000 n -0000779999 00000 n -0000780251 00000 n -0000780377 00000 n -0000784964 00000 n -0000783960 00000 n -0000780585 00000 n -0000784083 00000 n -0000784209 00000 n -0000784272 00000 n -0000784335 00000 n -0000784398 00000 n -0000784461 00000 n -0000784524 00000 n -0000784587 00000 n -0000784650 00000 n -0000784775 00000 n -0000784901 00000 n -0000788732 00000 n -0000788295 00000 n -0000785179 00000 n -0000788418 00000 n -0000788543 00000 n -0000788669 00000 n -0000792169 00000 n -0000791732 00000 n -0000788904 00000 n -0000791855 00000 n -0000791981 00000 n -0000792106 00000 n -0000794539 00000 n -0000794228 00000 n -0000792299 00000 n -0000794351 00000 n -0000794477 00000 n -0002186462 00000 n -0000797301 00000 n -0000797115 00000 n -0000794726 00000 n -0000797238 00000 n -0000802523 00000 n -0000800277 00000 n -0000799965 00000 n -0000797445 00000 n -0000800088 00000 n -0000800214 00000 n -0000806000 00000 n -0000802400 00000 n -0000800421 00000 n -0000805937 00000 n -0000805766 00000 n -0000805824 00000 n -0000805914 00000 n -0000810301 00000 n -0000811429 00000 n -0000810178 00000 n -0000806187 00000 n -0000811114 00000 n -0000811240 00000 n -0000811366 00000 n -0000816388 00000 n -0000816077 00000 n -0000811630 00000 n -0000816200 00000 n -0000816326 00000 n -0000821396 00000 n -0000820959 00000 n -0000816532 00000 n -0000821082 00000 n -0000821208 00000 n -0000821334 00000 n -0002186587 00000 n -0000825999 00000 n -0000825624 00000 n -0000821512 00000 n -0000825747 00000 n -0000825873 00000 n -0000825936 00000 n -0000830293 00000 n -0000829981 00000 n -0000826143 00000 n -0000830104 00000 n -0000830230 00000 n -0000835473 00000 n -0000834650 00000 n -0000830437 00000 n -0000835158 00000 n -0000835284 00000 n -0000834803 00000 n -0000834983 00000 n -0000835410 00000 n -0000839877 00000 n -0000839440 00000 n -0000835617 00000 n -0000839563 00000 n -0000839689 00000 n -0000839814 00000 n -0000843720 00000 n -0000843408 00000 n -0000840035 00000 n -0000843531 00000 n -0000843657 00000 n -0000847254 00000 n -0000846942 00000 n -0000843921 00000 n -0000847065 00000 n -0000847191 00000 n -0002186712 00000 n -0000852101 00000 n -0000851664 00000 n -0000847455 00000 n -0000851787 00000 n -0000851913 00000 n -0000852039 00000 n -0000857137 00000 n -0000856448 00000 n -0000852259 00000 n -0000856571 00000 n -0000856697 00000 n -0000856760 00000 n -0000856823 00000 n -0000856886 00000 n -0000856948 00000 n -0000857074 00000 n -0000859887 00000 n -0000859701 00000 n -0000857295 00000 n -0000859824 00000 n -0000863812 00000 n -0000863374 00000 n -0000860074 00000 n -0000863497 00000 n -0000863623 00000 n -0000863749 00000 n -0000866587 00000 n -0000866275 00000 n -0000863970 00000 n -0000866398 00000 n -0000866524 00000 n -0000869304 00000 n -0000868992 00000 n -0000866731 00000 n -0000869115 00000 n -0000869241 00000 n -0002186837 00000 n -0000872085 00000 n -0000871773 00000 n -0000869448 00000 n -0000871896 00000 n -0000872022 00000 n -0000876618 00000 n -0000876180 00000 n -0000872215 00000 n -0000876303 00000 n -0000876429 00000 n -0000876555 00000 n -0000879139 00000 n -0000878827 00000 n -0000876776 00000 n -0000878950 00000 n -0000879076 00000 n -0000883613 00000 n -0000883175 00000 n -0000879283 00000 n -0000883298 00000 n -0000883424 00000 n -0000883550 00000 n -0000888474 00000 n -0000888162 00000 n -0000883814 00000 n -0000888285 00000 n -0000888411 00000 n -0000892899 00000 n -0000892461 00000 n -0000888618 00000 n -0000892584 00000 n -0000892710 00000 n -0000892836 00000 n -0002186962 00000 n -0000898753 00000 n -0000897373 00000 n -0000893029 00000 n -0000897496 00000 n -0000897622 00000 n -0000897748 00000 n -0000897811 00000 n -0000897874 00000 n -0000897935 00000 n -0000897997 00000 n -0000898060 00000 n -0000898123 00000 n -0000898186 00000 n -0000898249 00000 n -0000898312 00000 n -0000898375 00000 n -0000898438 00000 n -0000898501 00000 n -0000898564 00000 n -0000898627 00000 n -0000898690 00000 n -0000902332 00000 n -0000902020 00000 n -0000898883 00000 n -0000902143 00000 n -0000902269 00000 n -0000903628 00000 n -0000903442 00000 n -0000902533 00000 n -0000903565 00000 n -0000907766 00000 n -0000907329 00000 n -0000903744 00000 n -0000907452 00000 n -0000907578 00000 n -0000907704 00000 n -0000912026 00000 n -0000911714 00000 n -0000907981 00000 n -0000911837 00000 n -0000911963 00000 n -0000913407 00000 n -0000913221 00000 n -0000912198 00000 n -0000913344 00000 n -0002187087 00000 n -0000915093 00000 n -0000914907 00000 n -0000913509 00000 n -0000915030 00000 n -0000919946 00000 n -0000918865 00000 n -0000915195 00000 n -0000919380 00000 n -0000919506 00000 n -0000919632 00000 n -0000919758 00000 n -0000919018 00000 n -0000919199 00000 n -0000919884 00000 n -0000924388 00000 n -0000923636 00000 n -0000920090 00000 n -0000923759 00000 n -0000923885 00000 n -0000924011 00000 n -0000924137 00000 n -0000924199 00000 n -0000924262 00000 n -0000924325 00000 n -0000928996 00000 n -0000928452 00000 n -0000924532 00000 n -0000928807 00000 n -0000928933 00000 n -0000928596 00000 n -0000933499 00000 n -0000933062 00000 n -0000929154 00000 n -0000933185 00000 n -0000933311 00000 n -0000933436 00000 n -0000937002 00000 n -0000936111 00000 n -0000933657 00000 n -0000936436 00000 n -0000936255 00000 n -0000936562 00000 n -0000936688 00000 n -0000936814 00000 n -0000936939 00000 n -0002187212 00000 n -0000941929 00000 n -0000940744 00000 n -0000937160 00000 n -0000941238 00000 n -0000941490 00000 n -0000941616 00000 n -0000940897 00000 n -0000941742 00000 n -0000941065 00000 n -0000941866 00000 n -0000946096 00000 n -0000945253 00000 n -0000942045 00000 n -0000945781 00000 n -0000945406 00000 n -0000945593 00000 n -0000945907 00000 n -0002036645 00000 n -0002032638 00000 n -0002036478 00000 n -0000946033 00000 n -0000948559 00000 n -0000948247 00000 n -0000946325 00000 n -0000948370 00000 n -0000948496 00000 n -0000952432 00000 n -0000951868 00000 n -0000948675 00000 n -0000951991 00000 n -0000952117 00000 n -0000952243 00000 n -0000952369 00000 n -0000956054 00000 n -0000955617 00000 n -0000952562 00000 n -0000955740 00000 n -0000955865 00000 n -0000955991 00000 n -0000960622 00000 n -0000960184 00000 n -0000956269 00000 n -0000960307 00000 n -0000960433 00000 n -0000960559 00000 n -0002187337 00000 n -0000967989 00000 n -0000965225 00000 n -0000964661 00000 n -0000960766 00000 n -0000964784 00000 n -0000964910 00000 n -0000965036 00000 n -0000965162 00000 n -0000984281 00000 n -0000967866 00000 n -0000965412 00000 n -0000984028 00000 n -0000984091 00000 n -0000984154 00000 n -0002031255 00000 n -0002028991 00000 n -0002031092 00000 n -0000984217 00000 n -0000983840 00000 n -0000986873 00000 n -0000998627 00000 n -0000986750 00000 n -0000984456 00000 n -0000998248 00000 n -0000998374 00000 n -0000998437 00000 n -0000998500 00000 n -0000998563 00000 n -0000998063 00000 n -0001000452 00000 n -0001012951 00000 n -0001000329 00000 n -0000998858 00000 n -0001012573 00000 n -0001012698 00000 n -0001012761 00000 n -0001012824 00000 n -0001012887 00000 n -0001012387 00000 n -0001017004 00000 n -0001016692 00000 n -0001013140 00000 n -0001016815 00000 n -0001016941 00000 n -0001021395 00000 n -0001020442 00000 n -0001017191 00000 n -0001020955 00000 n -0001021081 00000 n -0001020595 00000 n -0001020775 00000 n -0001021207 00000 n -0001021333 00000 n -0002187462 00000 n -0001026368 00000 n -0001025480 00000 n -0001021624 00000 n -0001026179 00000 n -0001025642 00000 n -0001025824 00000 n -0001026001 00000 n -0001026305 00000 n -0001029495 00000 n -0001029183 00000 n -0001026540 00000 n -0001029306 00000 n -0001029432 00000 n -0001032827 00000 n -0001032390 00000 n -0001029710 00000 n -0001032513 00000 n -0001032639 00000 n -0001032765 00000 n -0001034926 00000 n -0001054724 00000 n -0001052836 00000 n -0001034803 00000 n -0001033028 00000 n -0001052459 00000 n -0001052522 00000 n -0001052585 00000 n -0001052648 00000 n -0001052774 00000 n -0001052273 00000 n -0001079461 00000 n -0001077326 00000 n -0001054601 00000 n -0001053025 00000 n -0001076948 00000 n -0001077011 00000 n -0001077074 00000 n -0001077137 00000 n -0001077264 00000 n -0001076760 00000 n -0001108502 00000 n -0001106336 00000 n -0001079338 00000 n -0001077544 00000 n -0001106083 00000 n -0001106146 00000 n -0001106209 00000 n -0001106272 00000 n -0002187587 00000 n -0001105895 00000 n -0001349411 00000 n -0001133349 00000 n -0001108379 00000 n -0001106512 00000 n -0001132845 00000 n -0001132908 00000 n -0001132971 00000 n -0001133034 00000 n -0001133161 00000 n -0001133287 00000 n -0001132657 00000 n -0001387184 00000 n -0001138328 00000 n -0001138016 00000 n -0001133525 00000 n -0001138139 00000 n -0001138265 00000 n -0001141974 00000 n -0001141662 00000 n -0001138472 00000 n -0001141785 00000 n -0001141911 00000 n -0001146099 00000 n -0001145410 00000 n -0001142104 00000 n -0001145533 00000 n -0001145659 00000 n -0001145785 00000 n -0001145911 00000 n -0001146036 00000 n -0001149199 00000 n -0001149013 00000 n -0001146300 00000 n -0001149136 00000 n -0001413617 00000 n -0001153398 00000 n -0001152961 00000 n -0001149414 00000 n -0001153084 00000 n -0001153210 00000 n -0001153335 00000 n -0002187712 00000 n -0001158088 00000 n -0001157380 00000 n -0001153528 00000 n -0001157899 00000 n -0001157533 00000 n -0001157716 00000 n -0001158025 00000 n -0001163551 00000 n -0001162065 00000 n -0001158232 00000 n -0001163362 00000 n -0001163488 00000 n -0001162254 00000 n -0001162435 00000 n -0001162618 00000 n -0001162793 00000 n -0001163004 00000 n -0001163185 00000 n -0001453313 00000 n -0001168185 00000 n -0001167043 00000 n -0001163695 00000 n -0001167619 00000 n -0001167745 00000 n -0001167196 00000 n -0001167408 00000 n -0001167871 00000 n -0001167997 00000 n -0001168122 00000 n -0001476940 00000 n -0001502068 00000 n -0001172696 00000 n -0001172007 00000 n -0001168386 00000 n -0001172130 00000 n -0001172255 00000 n -0001172381 00000 n -0001172507 00000 n -0001172633 00000 n -0001177479 00000 n -0001176715 00000 n -0001172840 00000 n -0001177038 00000 n -0001177164 00000 n -0001176859 00000 n -0001177290 00000 n -0001177416 00000 n -0001182138 00000 n -0001181325 00000 n -0001177637 00000 n -0001181448 00000 n -0001181574 00000 n -0001181700 00000 n -0001181825 00000 n -0001181951 00000 n -0001182076 00000 n -0002187837 00000 n -0001186104 00000 n -0001185540 00000 n -0001182254 00000 n -0001185663 00000 n -0001185789 00000 n -0001185915 00000 n -0001186041 00000 n -0001188699 00000 n -0001187995 00000 n -0001186248 00000 n -0001188510 00000 n -0001188636 00000 n -0001188148 00000 n -0001188328 00000 n -0001191357 00000 n -0001191047 00000 n -0001188829 00000 n -0001191170 00000 n -0001191296 00000 n -0001195087 00000 n -0001194444 00000 n -0001191544 00000 n -0001194772 00000 n -0001194898 00000 n -0001195024 00000 n -0001194588 00000 n -0001197221 00000 n -0001196909 00000 n -0001195274 00000 n -0001197032 00000 n -0001197158 00000 n -0001201702 00000 n -0001201134 00000 n -0001197436 00000 n -0001201257 00000 n -0001201320 00000 n -0001201384 00000 n -0001201448 00000 n -0001201512 00000 n -0001201639 00000 n -0002187962 00000 n -0001205961 00000 n -0001205649 00000 n -0001201931 00000 n -0001205772 00000 n -0001205898 00000 n -0001208433 00000 n -0001208121 00000 n -0001206119 00000 n -0001208244 00000 n -0001208370 00000 n -0001211846 00000 n -0001211221 00000 n -0001208620 00000 n -0001211344 00000 n -0001211469 00000 n -0001211531 00000 n -0001211594 00000 n -0001211657 00000 n -0001211720 00000 n -0001211783 00000 n -0001215551 00000 n -0001214800 00000 n -0001211962 00000 n -0001214923 00000 n -0001215049 00000 n -0001215112 00000 n -0001215175 00000 n -0001215238 00000 n -0001215364 00000 n -0001215489 00000 n -0001219955 00000 n -0001219517 00000 n -0001215738 00000 n -0001219640 00000 n -0001219766 00000 n -0001219892 00000 n -0001224261 00000 n -0001223572 00000 n -0001220156 00000 n -0001223695 00000 n -0001223821 00000 n -0001223884 00000 n -0001223947 00000 n -0001224009 00000 n -0001224072 00000 n -0001224198 00000 n -0002027798 00000 n -0002025797 00000 n -0002027632 00000 n -0002188087 00000 n -0001228120 00000 n -0001227683 00000 n -0001224433 00000 n -0001227806 00000 n -0001227932 00000 n -0001228057 00000 n -0001231610 00000 n -0001231298 00000 n -0001228306 00000 n -0001231421 00000 n -0001231547 00000 n -0001235050 00000 n -0001234361 00000 n -0001231782 00000 n -0001234484 00000 n -0001234610 00000 n -0001234736 00000 n -0001234861 00000 n -0001234987 00000 n -0001237729 00000 n -0001237291 00000 n -0001235194 00000 n -0001237414 00000 n -0001237540 00000 n -0001237666 00000 n -0001240446 00000 n -0001239882 00000 n -0001237873 00000 n -0001240005 00000 n -0001240131 00000 n -0001240257 00000 n -0001240383 00000 n -0001242651 00000 n -0001242213 00000 n -0001240562 00000 n -0001242336 00000 n -0001242462 00000 n -0001242588 00000 n -0002188212 00000 n -0001245846 00000 n -0001245286 00000 n -0001242781 00000 n -0001245409 00000 n -0001245535 00000 n -0001245660 00000 n -0001245784 00000 n -0001248734 00000 n -0001248172 00000 n -0001246004 00000 n -0001248295 00000 n -0001248421 00000 n -0001248545 00000 n -0001248671 00000 n -0001252887 00000 n -0001252197 00000 n -0001248878 00000 n -0001252320 00000 n -0001252446 00000 n -0001252572 00000 n -0001252698 00000 n -0001252824 00000 n -0001256068 00000 n -0001255417 00000 n -0001253031 00000 n -0001255753 00000 n -0001255879 00000 n -0001256005 00000 n -0001255561 00000 n -0001262153 00000 n -0001260159 00000 n -0001256184 00000 n -0001261712 00000 n -0001260357 00000 n -0001260550 00000 n -0001261838 00000 n -0001260743 00000 n -0001260949 00000 n -0001261139 00000 n -0001261964 00000 n -0001262090 00000 n -0001261332 00000 n -0001261517 00000 n -0001269296 00000 n -0001266640 00000 n -0001262340 00000 n +0000533716 00000 n +0000537161 00000 n +0000537286 00000 n +0000537411 00000 n +0000537536 00000 n +0000541210 00000 n +0000540650 00000 n +0000537743 00000 n +0000540773 00000 n +0000540898 00000 n +0000541023 00000 n +0000541148 00000 n +0000543965 00000 n +0000543481 00000 n +0000541354 00000 n +0000543777 00000 n +0000543625 00000 n +0000543902 00000 n +0002114565 00000 n +0000579658 00000 n +0000548548 00000 n +0000547658 00000 n +0000544095 00000 n +0000547987 00000 n +0000548112 00000 n +0000548237 00000 n +0000547802 00000 n +0000548362 00000 n +0000548485 00000 n +0000554233 00000 n +0000552121 00000 n +0000548692 00000 n +0000553920 00000 n +0000552337 00000 n +0000552506 00000 n +0000552675 00000 n +0000552869 00000 n +0000553041 00000 n +0000553226 00000 n +0000553428 00000 n +0000554045 00000 n +0000553598 00000 n +0000554170 00000 n +0000553751 00000 n +0000557361 00000 n +0000557051 00000 n +0000554420 00000 n +0000557174 00000 n +0000557298 00000 n +0000559178 00000 n +0000558868 00000 n +0000557477 00000 n +0000558991 00000 n +0000559116 00000 n +0000563558 00000 n +0000561329 00000 n +0000559294 00000 n +0000563370 00000 n +0000563495 00000 n +0000561554 00000 n +0000561737 00000 n +0000561913 00000 n +0000562094 00000 n +0000562274 00000 n +0000562454 00000 n +0000562640 00000 n +0000562824 00000 n +0000563005 00000 n +0000563188 00000 n +0000566072 00000 n +0000565761 00000 n +0000563759 00000 n +0000565884 00000 n +0000566009 00000 n +0002114690 00000 n +0000570343 00000 n +0000569575 00000 n +0000566188 00000 n +0000570030 00000 n +0000570155 00000 n +0000569728 00000 n +0000570280 00000 n +0000569877 00000 n +0000572397 00000 n +0000571961 00000 n +0000570487 00000 n +0000572084 00000 n +0000572209 00000 n +0000572334 00000 n +0000576597 00000 n +0000575835 00000 n +0000572513 00000 n +0000576161 00000 n +0000575979 00000 n +0000576286 00000 n +0000576410 00000 n +0000576534 00000 n +0000580096 00000 n +0000579160 00000 n +0000576770 00000 n +0000579283 00000 n +0000579408 00000 n +0000579533 00000 n +0000579783 00000 n +0000579908 00000 n +0000580033 00000 n +0000581319 00000 n +0000581008 00000 n +0000580240 00000 n +0000581131 00000 n +0000581256 00000 n +0000584734 00000 n +0000584421 00000 n +0000581435 00000 n +0000584544 00000 n +0000584607 00000 n +0000584670 00000 n +0002114815 00000 n +0000586017 00000 n +0000585705 00000 n +0000584864 00000 n +0000585828 00000 n +0000585891 00000 n +0000585953 00000 n +0000588173 00000 n +0000587860 00000 n +0000586119 00000 n +0000587983 00000 n +0000588046 00000 n +0000588109 00000 n +0000591708 00000 n +0000591147 00000 n +0000588275 00000 n +0000591270 00000 n +0000591520 00000 n +0000591645 00000 n +0000595118 00000 n +0000594619 00000 n +0000591881 00000 n +0000594742 00000 n +0000594805 00000 n +0000594868 00000 n +0000594930 00000 n +0000595055 00000 n +0000597639 00000 n +0000596953 00000 n +0000595248 00000 n +0000597076 00000 n +0000597201 00000 n +0000597326 00000 n +0000597389 00000 n +0000597453 00000 n +0000597578 00000 n +0000600349 00000 n +0000599790 00000 n +0000597769 00000 n +0000599913 00000 n +0000600038 00000 n +0000600162 00000 n +0000600286 00000 n +0002114940 00000 n +0000604065 00000 n +0000603629 00000 n +0000600479 00000 n +0000603752 00000 n +0000604002 00000 n +0000608464 00000 n +0000608028 00000 n +0000604195 00000 n +0000608151 00000 n +0000608276 00000 n +0000608401 00000 n +0000613087 00000 n +0000612525 00000 n +0000608622 00000 n +0000612648 00000 n +0001969779 00000 n +0001967906 00000 n +0001969611 00000 n +0000612773 00000 n +0000612836 00000 n +0000612899 00000 n +0000613024 00000 n +0000615260 00000 n +0000615074 00000 n +0000613245 00000 n +0000615197 00000 n +0000619552 00000 n +0000618866 00000 n +0000615362 00000 n +0000618989 00000 n +0000619052 00000 n +0000619115 00000 n +0000619240 00000 n +0000619365 00000 n +0000619490 00000 n +0000623227 00000 n +0000622667 00000 n +0000619668 00000 n +0000622790 00000 n +0000622853 00000 n +0000622916 00000 n +0000623040 00000 n +0000623164 00000 n +0002115065 00000 n +0000626801 00000 n +0000626365 00000 n +0000623357 00000 n +0000626488 00000 n +0000626551 00000 n +0000626614 00000 n +0000626739 00000 n +0000630815 00000 n +0000630130 00000 n +0000626931 00000 n +0000630253 00000 n +0000630316 00000 n +0000630379 00000 n +0000630504 00000 n +0000630567 00000 n +0000630630 00000 n +0000630754 00000 n +0000634660 00000 n +0000634035 00000 n +0000630945 00000 n +0000634158 00000 n +0000634221 00000 n +0000634284 00000 n +0000634347 00000 n +0000634472 00000 n +0000634597 00000 n +0000639136 00000 n +0000638577 00000 n +0000634875 00000 n +0000638700 00000 n +0000638825 00000 n +0000638950 00000 n +0000639074 00000 n +0000643689 00000 n +0000643130 00000 n +0000639351 00000 n +0000643253 00000 n +0000643378 00000 n +0000643502 00000 n +0000643626 00000 n +0000648554 00000 n +0000647462 00000 n +0000643819 00000 n +0000648367 00000 n +0000648492 00000 n +0000647633 00000 n +0000647815 00000 n +0000647995 00000 n +0000648182 00000 n +0002115190 00000 n +0000652610 00000 n +0000651923 00000 n +0000648698 00000 n +0000652046 00000 n +0000652171 00000 n +0000652296 00000 n +0000652421 00000 n +0000652484 00000 n +0000652547 00000 n +0000654569 00000 n +0000654132 00000 n +0000652740 00000 n +0000654255 00000 n +0000654318 00000 n +0000654380 00000 n +0000654443 00000 n +0000654506 00000 n +0000656214 00000 n +0000655905 00000 n +0000654728 00000 n +0000656028 00000 n +0000656152 00000 n +0000659967 00000 n +0000659406 00000 n +0000656415 00000 n +0000659529 00000 n +0000659779 00000 n +0000659904 00000 n +0000664586 00000 n +0000664275 00000 n +0000660126 00000 n +0000664398 00000 n +0000664523 00000 n +0000668926 00000 n +0000668740 00000 n +0000664730 00000 n +0000668863 00000 n +0002115315 00000 n +0000673098 00000 n +0000672288 00000 n +0000669028 00000 n +0000672411 00000 n +0000672536 00000 n +0000672660 00000 n +0000672785 00000 n +0000672910 00000 n +0000673035 00000 n +0000677441 00000 n +0000676757 00000 n +0000673200 00000 n +0000676880 00000 n +0000677005 00000 n +0000677130 00000 n +0000677254 00000 n +0000677378 00000 n +0000681902 00000 n +0000681592 00000 n +0000677571 00000 n +0000681715 00000 n +0000681840 00000 n +0000685266 00000 n +0000684706 00000 n +0000682018 00000 n +0000684829 00000 n +0000684954 00000 n +0000685079 00000 n +0000685203 00000 n +0000688563 00000 n +0000688252 00000 n +0000685382 00000 n +0000688375 00000 n +0000688500 00000 n +0000690856 00000 n +0000690670 00000 n +0000688693 00000 n +0000690793 00000 n +0002115440 00000 n +0000693839 00000 n +0000693403 00000 n +0000691015 00000 n +0000693526 00000 n +0000693651 00000 n +0000693776 00000 n +0000697709 00000 n +0000697274 00000 n +0000693969 00000 n +0000697397 00000 n +0000697521 00000 n +0000697646 00000 n +0000702130 00000 n +0000700139 00000 n +0000697839 00000 n +0000701819 00000 n +0000701944 00000 n +0000702067 00000 n +0000700337 00000 n +0000700548 00000 n +0000700760 00000 n +0000700972 00000 n +0000701184 00000 n +0000701396 00000 n +0000701607 00000 n +0000706041 00000 n +0000705231 00000 n +0000702260 00000 n +0000705354 00000 n +0000705604 00000 n +0000705729 00000 n +0000705854 00000 n +0000705979 00000 n +0000709575 00000 n +0000709014 00000 n +0000706143 00000 n +0000709137 00000 n +0000709262 00000 n +0000709387 00000 n +0000709512 00000 n +0000712403 00000 n +0000711968 00000 n +0000709705 00000 n +0000712091 00000 n +0000712216 00000 n +0000712341 00000 n +0002115565 00000 n +0000716574 00000 n +0000715694 00000 n +0000712519 00000 n +0000716007 00000 n +0000716133 00000 n +0000715838 00000 n +0000716259 00000 n +0000716385 00000 n +0000716511 00000 n +0000720513 00000 n +0000719950 00000 n +0000716690 00000 n +0000720073 00000 n +0000720324 00000 n +0000720450 00000 n +0000724885 00000 n +0000724074 00000 n +0000720615 00000 n +0000724197 00000 n +0000724323 00000 n +0000724447 00000 n +0000724572 00000 n +0000724698 00000 n +0000724823 00000 n +0000728774 00000 n +0000728463 00000 n +0000724987 00000 n +0000728586 00000 n +0000728711 00000 n +0000731260 00000 n +0000730822 00000 n +0000728890 00000 n +0000730945 00000 n +0000731071 00000 n +0000731197 00000 n +0000734997 00000 n +0000733926 00000 n +0000731433 00000 n +0000734682 00000 n +0000734934 00000 n +0000734088 00000 n +0000734324 00000 n +0000734503 00000 n +0002115690 00000 n +0000736895 00000 n +0000736583 00000 n +0000735127 00000 n +0000736706 00000 n +0000736832 00000 n +0000740860 00000 n +0000740296 00000 n +0000737011 00000 n +0000740419 00000 n +0000740671 00000 n +0000740797 00000 n +0000744923 00000 n +0000743919 00000 n +0000741005 00000 n +0000744042 00000 n +0000744168 00000 n +0000744231 00000 n +0000744294 00000 n +0000744357 00000 n +0000744420 00000 n +0000744483 00000 n +0000744546 00000 n +0000744609 00000 n +0000744734 00000 n +0000744860 00000 n +0000748040 00000 n +0000747603 00000 n +0000745138 00000 n +0000747726 00000 n +0000747851 00000 n +0000747977 00000 n +0000751448 00000 n +0000751011 00000 n +0000748212 00000 n +0000751134 00000 n +0000751260 00000 n +0000751385 00000 n +0000753776 00000 n +0000753465 00000 n +0000751578 00000 n +0000753588 00000 n +0000753714 00000 n +0002115815 00000 n +0000756458 00000 n +0000756272 00000 n +0000753963 00000 n +0000756395 00000 n +0000761581 00000 n +0000759376 00000 n +0000759064 00000 n +0000756602 00000 n +0000759187 00000 n +0000759313 00000 n +0000765058 00000 n +0000761458 00000 n +0000759520 00000 n +0000764995 00000 n +0000764824 00000 n +0000764882 00000 n +0000764972 00000 n +0000769247 00000 n +0000770375 00000 n +0000769124 00000 n +0000765245 00000 n +0000770060 00000 n +0000770186 00000 n +0000770312 00000 n +0000775229 00000 n +0000774918 00000 n +0000770576 00000 n +0000775041 00000 n +0000775167 00000 n +0000779988 00000 n +0000779551 00000 n +0000775373 00000 n +0000779674 00000 n +0000779800 00000 n +0000779926 00000 n +0002115940 00000 n +0000784198 00000 n +0000783823 00000 n +0000780104 00000 n +0000783946 00000 n +0000784072 00000 n +0000784135 00000 n +0000788357 00000 n +0000788045 00000 n +0000784342 00000 n +0000788168 00000 n +0000788294 00000 n +0000793360 00000 n +0000792537 00000 n +0000788501 00000 n +0000793045 00000 n +0000793171 00000 n +0000792690 00000 n +0000792870 00000 n +0000793297 00000 n +0000797635 00000 n +0000797198 00000 n +0000793504 00000 n +0000797321 00000 n +0000797447 00000 n +0000797572 00000 n +0000801364 00000 n +0000801052 00000 n +0000797793 00000 n +0000801175 00000 n +0000801301 00000 n +0000804821 00000 n +0000804509 00000 n +0000801565 00000 n +0000804632 00000 n +0000804758 00000 n +0002116065 00000 n +0000809552 00000 n +0000809115 00000 n +0000805022 00000 n +0000809238 00000 n +0000809364 00000 n +0000809490 00000 n +0000814454 00000 n +0000813765 00000 n +0000809710 00000 n +0000813888 00000 n +0000814014 00000 n +0000814077 00000 n +0000814140 00000 n +0000814203 00000 n +0000814265 00000 n +0000814391 00000 n +0000817169 00000 n +0000816983 00000 n +0000814612 00000 n +0000817106 00000 n +0000821016 00000 n +0000820578 00000 n +0000817356 00000 n +0000820701 00000 n +0000820827 00000 n +0000820953 00000 n +0000823775 00000 n +0000823463 00000 n +0000821174 00000 n +0000823586 00000 n +0000823712 00000 n +0000826473 00000 n +0000826161 00000 n +0000823919 00000 n +0000826284 00000 n +0000826410 00000 n +0002116190 00000 n +0000829214 00000 n +0000828902 00000 n +0000826617 00000 n +0000829025 00000 n +0000829151 00000 n +0000833644 00000 n +0000833206 00000 n +0000829344 00000 n +0000833329 00000 n +0000833455 00000 n +0000833581 00000 n +0000836143 00000 n +0000835831 00000 n +0000833802 00000 n +0000835954 00000 n +0000836080 00000 n +0000840448 00000 n +0000840010 00000 n +0000836287 00000 n +0000840133 00000 n +0000840259 00000 n +0000840385 00000 n +0000845003 00000 n +0000844691 00000 n +0000840649 00000 n +0000844814 00000 n +0000844940 00000 n +0000849333 00000 n +0000848895 00000 n +0000845147 00000 n +0000849018 00000 n +0000849144 00000 n +0000849270 00000 n +0002116315 00000 n +0000854847 00000 n +0000853467 00000 n +0000849463 00000 n +0000853590 00000 n +0000853716 00000 n +0000853842 00000 n +0000853905 00000 n +0000853968 00000 n +0000854029 00000 n +0000854091 00000 n +0000854154 00000 n +0000854217 00000 n +0000854280 00000 n +0000854343 00000 n +0000854406 00000 n +0000854469 00000 n +0000854532 00000 n +0000854595 00000 n +0000854658 00000 n +0000854721 00000 n +0000854784 00000 n +0000858386 00000 n +0000858074 00000 n +0000854977 00000 n +0000858197 00000 n +0000858323 00000 n +0000859671 00000 n +0000859485 00000 n +0000858587 00000 n +0000859608 00000 n +0000863618 00000 n +0000863181 00000 n +0000859787 00000 n +0000863304 00000 n +0000863430 00000 n +0000863556 00000 n +0000867826 00000 n +0000867514 00000 n +0000863833 00000 n +0000867637 00000 n +0000867763 00000 n +0000869197 00000 n +0000869011 00000 n +0000867998 00000 n +0000869134 00000 n +0002116440 00000 n +0000870871 00000 n +0000870685 00000 n +0000869299 00000 n +0000870808 00000 n +0000875577 00000 n +0000874496 00000 n +0000870973 00000 n +0000875011 00000 n +0000875137 00000 n +0000875263 00000 n +0000875389 00000 n +0000874649 00000 n +0000874830 00000 n +0000875515 00000 n +0000879806 00000 n +0000879054 00000 n +0000875721 00000 n +0000879177 00000 n +0000879303 00000 n +0000879429 00000 n +0000879555 00000 n +0000879617 00000 n +0000879680 00000 n +0000879743 00000 n +0000884224 00000 n +0000883680 00000 n +0000879950 00000 n +0000884035 00000 n +0000884161 00000 n +0000883824 00000 n +0000888569 00000 n +0000888132 00000 n +0000884382 00000 n +0000888255 00000 n +0000888381 00000 n +0000888506 00000 n +0000891940 00000 n +0000891049 00000 n +0000888727 00000 n +0000891374 00000 n +0000891193 00000 n +0000891500 00000 n +0000891626 00000 n +0000891752 00000 n +0000891877 00000 n +0002116565 00000 n +0000896782 00000 n +0000895597 00000 n +0000892098 00000 n +0000896091 00000 n +0000896343 00000 n +0000896469 00000 n +0000895750 00000 n +0000896595 00000 n +0000895918 00000 n +0000896719 00000 n +0000900861 00000 n +0000900018 00000 n +0000896898 00000 n +0000900546 00000 n +0000900171 00000 n +0000900358 00000 n +0000900672 00000 n +0001965815 00000 n +0001961810 00000 n +0001965648 00000 n +0000900798 00000 n +0000903304 00000 n +0000902992 00000 n +0000901090 00000 n +0000903115 00000 n +0000903241 00000 n +0000907127 00000 n +0000906563 00000 n +0000903420 00000 n +0000906686 00000 n +0000906812 00000 n +0000906938 00000 n +0000907064 00000 n +0000910615 00000 n +0000910178 00000 n +0000907257 00000 n +0000910301 00000 n +0000910426 00000 n +0000910552 00000 n +0000914977 00000 n +0000914539 00000 n +0000910830 00000 n +0000914662 00000 n +0000914788 00000 n +0000914914 00000 n +0002116690 00000 n +0000922240 00000 n +0000919516 00000 n +0000918952 00000 n +0000915121 00000 n +0000919075 00000 n +0000919201 00000 n +0000919327 00000 n +0000919453 00000 n +0000938532 00000 n +0000922117 00000 n +0000919703 00000 n +0000938279 00000 n +0000938342 00000 n +0000938405 00000 n +0001960427 00000 n +0001958164 00000 n +0001960264 00000 n +0000938468 00000 n +0000938091 00000 n +0000941030 00000 n +0000952784 00000 n +0000940907 00000 n +0000938707 00000 n +0000952405 00000 n +0000952531 00000 n +0000952594 00000 n +0000952657 00000 n +0000952720 00000 n +0000952220 00000 n +0000954547 00000 n +0000967046 00000 n +0000954424 00000 n +0000953015 00000 n +0000966668 00000 n +0000966793 00000 n +0000966856 00000 n +0000966919 00000 n +0000966982 00000 n +0000966482 00000 n +0000971048 00000 n +0000970736 00000 n +0000967235 00000 n +0000970859 00000 n +0000970985 00000 n +0000975298 00000 n +0000974345 00000 n +0000971235 00000 n +0000974858 00000 n +0000974984 00000 n +0000974498 00000 n +0000974678 00000 n +0000975110 00000 n +0000975236 00000 n +0002116815 00000 n +0000980154 00000 n +0000979266 00000 n +0000975527 00000 n +0000979965 00000 n +0000979428 00000 n +0000979610 00000 n +0000979787 00000 n +0000980091 00000 n +0000983223 00000 n +0000982911 00000 n +0000980326 00000 n +0000983034 00000 n +0000983160 00000 n +0000986369 00000 n +0000985932 00000 n +0000983438 00000 n +0000986055 00000 n +0000986181 00000 n +0000986307 00000 n +0000988408 00000 n +0001008075 00000 n +0001006318 00000 n +0000988285 00000 n +0000986570 00000 n +0001005941 00000 n +0001006004 00000 n +0001006067 00000 n +0001006130 00000 n +0001006256 00000 n +0001005755 00000 n +0001032758 00000 n +0001030677 00000 n +0001007952 00000 n +0001006507 00000 n +0001030299 00000 n +0001030362 00000 n +0001030425 00000 n +0001030488 00000 n +0001030615 00000 n +0001030111 00000 n +0001061730 00000 n +0001059633 00000 n +0001032635 00000 n +0001030895 00000 n +0001059380 00000 n +0001059443 00000 n +0001059506 00000 n +0001059569 00000 n +0002116940 00000 n +0001059192 00000 n +0001295014 00000 n +0001086577 00000 n +0001061607 00000 n +0001059809 00000 n +0001086073 00000 n +0001086136 00000 n +0001086199 00000 n +0001086262 00000 n +0001086389 00000 n +0001086515 00000 n +0001085885 00000 n +0001332745 00000 n +0001091224 00000 n +0001090912 00000 n +0001086753 00000 n +0001091035 00000 n +0001091161 00000 n +0001094856 00000 n +0001094544 00000 n +0001091368 00000 n +0001094667 00000 n +0001094793 00000 n +0001098891 00000 n +0001098202 00000 n +0001094986 00000 n +0001098325 00000 n +0001098451 00000 n +0001098577 00000 n +0001098703 00000 n +0001098828 00000 n +0001101915 00000 n +0001101729 00000 n +0001099092 00000 n +0001101852 00000 n +0001359132 00000 n +0001105826 00000 n +0001105389 00000 n +0001102130 00000 n +0001105512 00000 n +0001105638 00000 n +0001105763 00000 n +0002117065 00000 n +0001110352 00000 n +0001109644 00000 n +0001105956 00000 n +0001110163 00000 n +0001109797 00000 n +0001109980 00000 n +0001110289 00000 n +0001115497 00000 n +0001114011 00000 n +0001110496 00000 n +0001115308 00000 n +0001115434 00000 n +0001114200 00000 n +0001114381 00000 n +0001114564 00000 n +0001114739 00000 n +0001114950 00000 n +0001115131 00000 n +0001398788 00000 n +0001119972 00000 n +0001118830 00000 n +0001115641 00000 n +0001119406 00000 n +0001119532 00000 n +0001118983 00000 n +0001119195 00000 n +0001119658 00000 n +0001119784 00000 n +0001119909 00000 n +0001422372 00000 n +0001447456 00000 n +0001124355 00000 n +0001123666 00000 n +0001120173 00000 n +0001123789 00000 n +0001123914 00000 n +0001124040 00000 n +0001124166 00000 n +0001124292 00000 n +0001129028 00000 n +0001128264 00000 n +0001124499 00000 n +0001128587 00000 n +0001128713 00000 n +0001128408 00000 n +0001128839 00000 n +0001128965 00000 n +0001133556 00000 n +0001132743 00000 n +0001129186 00000 n +0001132866 00000 n +0001132992 00000 n +0001133118 00000 n +0001133243 00000 n +0001133369 00000 n +0001133494 00000 n +0002117190 00000 n +0001137399 00000 n +0001136835 00000 n +0001133672 00000 n +0001136958 00000 n +0001137084 00000 n +0001137210 00000 n +0001137336 00000 n +0001139949 00000 n +0001139245 00000 n +0001137543 00000 n +0001139760 00000 n +0001139886 00000 n +0001139398 00000 n +0001139578 00000 n +0001142560 00000 n +0001142250 00000 n +0001140079 00000 n +0001142373 00000 n +0001142499 00000 n +0001146207 00000 n +0001145564 00000 n +0001142747 00000 n +0001145892 00000 n +0001146018 00000 n +0001146144 00000 n +0001145708 00000 n +0001148292 00000 n +0001147980 00000 n +0001146394 00000 n +0001148103 00000 n +0001148229 00000 n +0001152597 00000 n +0001152029 00000 n +0001148507 00000 n +0001152152 00000 n +0001152215 00000 n +0001152279 00000 n +0001152343 00000 n +0001152407 00000 n +0001152534 00000 n +0002117315 00000 n +0001156710 00000 n +0001156398 00000 n +0001152826 00000 n +0001156521 00000 n +0001156647 00000 n +0001159134 00000 n +0001158822 00000 n +0001156868 00000 n +0001158945 00000 n +0001159071 00000 n +0001162384 00000 n +0001161759 00000 n +0001159321 00000 n +0001161882 00000 n +0001162007 00000 n +0001162069 00000 n +0001162132 00000 n +0001162195 00000 n +0001162258 00000 n +0001162321 00000 n +0001165947 00000 n +0001165196 00000 n +0001162500 00000 n +0001165319 00000 n +0001165445 00000 n +0001165508 00000 n +0001165571 00000 n +0001165634 00000 n +0001165760 00000 n +0001165885 00000 n +0001170137 00000 n +0001169699 00000 n +0001166134 00000 n +0001169822 00000 n +0001169948 00000 n +0001170074 00000 n +0001174254 00000 n +0001173565 00000 n +0001170338 00000 n +0001173688 00000 n +0001173814 00000 n +0001173877 00000 n +0001173940 00000 n +0001174002 00000 n +0001174065 00000 n +0001174191 00000 n +0001956971 00000 n +0001954970 00000 n +0001956805 00000 n +0002117440 00000 n +0001178079 00000 n +0001177642 00000 n +0001174426 00000 n +0001177765 00000 n +0001177891 00000 n +0001178016 00000 n +0001181422 00000 n +0001181110 00000 n +0001178265 00000 n +0001181233 00000 n +0001181359 00000 n +0001184803 00000 n +0001184114 00000 n +0001181594 00000 n +0001184237 00000 n +0001184363 00000 n +0001184489 00000 n +0001184614 00000 n +0001184740 00000 n +0001187446 00000 n +0001187008 00000 n +0001184947 00000 n +0001187131 00000 n +0001187257 00000 n +0001187383 00000 n +0001190106 00000 n +0001189542 00000 n +0001187590 00000 n +0001189665 00000 n +0001189791 00000 n +0001189917 00000 n +0001190043 00000 n +0001192271 00000 n +0001191833 00000 n +0001190222 00000 n +0001191956 00000 n +0001192082 00000 n +0001192208 00000 n +0002117565 00000 n +0001195412 00000 n +0001194852 00000 n +0001192401 00000 n +0001194975 00000 n +0001195101 00000 n +0001195226 00000 n +0001195350 00000 n +0001198245 00000 n +0001197683 00000 n +0001195570 00000 n +0001197806 00000 n +0001197932 00000 n +0001198056 00000 n +0001198182 00000 n +0001202331 00000 n +0001201641 00000 n +0001198389 00000 n +0001201764 00000 n +0001201890 00000 n +0001202016 00000 n +0001202142 00000 n +0001202268 00000 n +0001205455 00000 n +0001204804 00000 n +0001202475 00000 n +0001205140 00000 n +0001205266 00000 n +0001205392 00000 n +0001204948 00000 n +0001211349 00000 n +0001209355 00000 n +0001205571 00000 n +0001210908 00000 n +0001209553 00000 n +0001209746 00000 n +0001211034 00000 n +0001209939 00000 n +0001210145 00000 n +0001210335 00000 n +0001211160 00000 n +0001211286 00000 n +0001210528 00000 n +0001210713 00000 n +0001218176 00000 n +0001215520 00000 n +0001211536 00000 n +0001217861 00000 n +0001217987 00000 n +0001218113 00000 n +0001215754 00000 n +0001215972 00000 n +0001216189 00000 n +0001216406 00000 n +0001216587 00000 n +0001216764 00000 n +0001216931 00000 n +0001217110 00000 n +0001217286 00000 n +0001217471 00000 n +0001217641 00000 n +0002117690 00000 n +0001224500 00000 n +0001222188 00000 n +0001218306 00000 n +0001224185 00000 n +0001224311 00000 n +0001222395 00000 n +0001222627 00000 n +0001222859 00000 n +0001223091 00000 n +0001223360 00000 n +0001224437 00000 n +0001223629 00000 n +0001223839 00000 n +0001224011 00000 n +0001230605 00000 n +0001228579 00000 n +0001224616 00000 n +0001230165 00000 n +0001230291 00000 n +0001228777 00000 n +0001228992 00000 n +0001229181 00000 n +0001229365 00000 n +0001230416 00000 n +0001229599 00000 n +0001229795 00000 n +0001230542 00000 n +0001229973 00000 n +0001239808 00000 n +0001234577 00000 n +0001230806 00000 n +0001239745 00000 n +0001234919 00000 n +0001235125 00000 n +0001235331 00000 n +0001235551 00000 n +0001235771 00000 n +0001235977 00000 n +0001236183 00000 n +0001236372 00000 n +0001236562 00000 n +0001236752 00000 n +0001236941 00000 n +0001237131 00000 n +0001237321 00000 n +0001237511 00000 n +0001237704 00000 n +0001237896 00000 n +0001238135 00000 n +0001238375 00000 n +0001238615 00000 n +0001238853 00000 n +0001239093 00000 n +0001239333 00000 n +0001239539 00000 n +0001244979 00000 n +0001243456 00000 n +0001239938 00000 n +0001244790 00000 n +0001243636 00000 n +0001243866 00000 n +0001244097 00000 n +0001244328 00000 n +0001244559 00000 n +0001244916 00000 n +0001249214 00000 n +0001248309 00000 n +0001245137 00000 n +0001248647 00000 n +0001248773 00000 n +0001248899 00000 n +0001248453 00000 n +0001249025 00000 n +0001249151 00000 n +0001252555 00000 n +0001252118 00000 n +0001249358 00000 n +0001252241 00000 n +0001252367 00000 n +0001252492 00000 n +0002117815 00000 n +0001256007 00000 n +0001255569 00000 n +0001252699 00000 n +0001255692 00000 n +0001255818 00000 n +0001255944 00000 n +0001260297 00000 n +0001259733 00000 n +0001256137 00000 n +0001259856 00000 n +0001259982 00000 n +0001260108 00000 n +0001260234 00000 n +0001263285 00000 n +0001262347 00000 n +0001260441 00000 n +0001262470 00000 n +0001262596 00000 n +0001262722 00000 n +0001262847 00000 n +0001262973 00000 n +0001263098 00000 n +0001263224 00000 n +0001266537 00000 n +0001266099 00000 n +0001263458 00000 n +0001266222 00000 n +0001266348 00000 n +0001266474 00000 n +0001269170 00000 n +0001268858 00000 n +0001266681 00000 n 0001268981 00000 n 0001269107 00000 n -0001269233 00000 n -0001266874 00000 n -0001267092 00000 n -0001267309 00000 n -0001267526 00000 n -0001267707 00000 n -0001267884 00000 n -0001268051 00000 n -0001268230 00000 n -0001268406 00000 n -0001268591 00000 n -0001268761 00000 n -0002188337 00000 n -0001275791 00000 n -0001273479 00000 n -0001269426 00000 n -0001275476 00000 n -0001275602 00000 n -0001273686 00000 n -0001273918 00000 n -0001274150 00000 n -0001274382 00000 n -0001274651 00000 n -0001275728 00000 n -0001274920 00000 n -0001275130 00000 n -0001275302 00000 n -0001282106 00000 n -0001280080 00000 n -0001275907 00000 n -0001281666 00000 n -0001281792 00000 n -0001280278 00000 n -0001280493 00000 n -0001280682 00000 n -0001280866 00000 n -0001281917 00000 n -0001281100 00000 n -0001281296 00000 n -0001282043 00000 n -0001281474 00000 n -0001291972 00000 n -0001286741 00000 n -0001282307 00000 n -0001291909 00000 n -0001287083 00000 n -0001287289 00000 n -0001287495 00000 n -0001287715 00000 n -0001287935 00000 n -0001288141 00000 n -0001288347 00000 n -0001288536 00000 n -0001288726 00000 n -0001288916 00000 n -0001289105 00000 n -0001289295 00000 n -0001289485 00000 n -0001289675 00000 n +0001270528 00000 n +0001270342 00000 n +0001269314 00000 n +0001270465 00000 n +0002117940 00000 n +0001271926 00000 n +0001271740 00000 n +0001270630 00000 n +0001271863 00000 n +0001273187 00000 n +0001273001 00000 n +0001272028 00000 n +0001273124 00000 n +0001274355 00000 n +0001274169 00000 n +0001273289 00000 n +0001274292 00000 n +0001275925 00000 n +0001275739 00000 n +0001274457 00000 n +0001275862 00000 n +0001279650 00000 n +0001279339 00000 n +0001276027 00000 n +0001279462 00000 n +0001279587 00000 n +0001284687 00000 n +0001284501 00000 n +0001279822 00000 n +0001284624 00000 n +0002118065 00000 n +0001290372 00000 n +0001289242 00000 n +0001284873 00000 n +0001289365 00000 n +0001289428 00000 n +0001289491 00000 n +0001289554 00000 n +0001289616 00000 n +0001289679 00000 n +0001289742 00000 n +0001289805 00000 n 0001289868 00000 n -0001290060 00000 n -0001290299 00000 n -0001290539 00000 n -0001290779 00000 n -0001291017 00000 n -0001291257 00000 n -0001291497 00000 n -0001291703 00000 n -0001297421 00000 n -0001295898 00000 n -0001292102 00000 n -0001297232 00000 n -0001296078 00000 n -0001296308 00000 n -0001296539 00000 n -0001296770 00000 n -0001297001 00000 n -0001297358 00000 n -0001301924 00000 n -0001301019 00000 n -0001297579 00000 n -0001301357 00000 n -0001301483 00000 n -0001301609 00000 n -0001301163 00000 n -0001301735 00000 n -0001301861 00000 n -0001305692 00000 n -0001305255 00000 n -0001302068 00000 n -0001305378 00000 n -0001305504 00000 n -0001305629 00000 n -0002188462 00000 n -0001309179 00000 n -0001308741 00000 n -0001305836 00000 n -0001308864 00000 n -0001308990 00000 n -0001309116 00000 n -0001313648 00000 n -0001313084 00000 n -0001309309 00000 n -0001313207 00000 n -0001313333 00000 n -0001313459 00000 n -0001313585 00000 n -0001316767 00000 n -0001315829 00000 n -0001313792 00000 n -0001315952 00000 n -0001316078 00000 n -0001316204 00000 n -0001316329 00000 n -0001316455 00000 n -0001316580 00000 n -0001316706 00000 n -0001320053 00000 n -0001319615 00000 n -0001316940 00000 n -0001319738 00000 n -0001319864 00000 n -0001319990 00000 n -0001322708 00000 n -0001322396 00000 n -0001320197 00000 n -0001322519 00000 n -0001322645 00000 n -0001324077 00000 n -0001323891 00000 n -0001322852 00000 n -0001324014 00000 n -0002188587 00000 n -0001325485 00000 n -0001325299 00000 n -0001324179 00000 n -0001325422 00000 n -0001326757 00000 n -0001326571 00000 n -0001325587 00000 n -0001326694 00000 n -0001327934 00000 n -0001327748 00000 n -0001326859 00000 n -0001327871 00000 n -0001329514 00000 n -0001329328 00000 n -0001328036 00000 n -0001329451 00000 n -0001333371 00000 n -0001333060 00000 n -0001329616 00000 n -0001333183 00000 n -0001333308 00000 n -0001338528 00000 n -0001338342 00000 n -0001333543 00000 n -0001338465 00000 n -0002188712 00000 n -0001344656 00000 n -0001343526 00000 n -0001338714 00000 n -0001343649 00000 n -0001343712 00000 n -0001343775 00000 n -0001343838 00000 n -0001343900 00000 n -0001343963 00000 n -0001344026 00000 n -0001344089 00000 n -0001344152 00000 n -0001344215 00000 n -0001344278 00000 n -0001344341 00000 n -0001344404 00000 n -0001344467 00000 n -0001344530 00000 n -0001344593 00000 n -0001528554 00000 n -0001348550 00000 n -0001348238 00000 n -0001344800 00000 n -0001348361 00000 n -0001348487 00000 n -0001386303 00000 n -0001349288 00000 n -0001348694 00000 n -0001386051 00000 n -0001386114 00000 n -0001386177 00000 n -0001386240 00000 n -0001385863 00000 n -0001412727 00000 n -0001387061 00000 n -0001386465 00000 n -0001412475 00000 n -0001412538 00000 n -0001412601 00000 n -0001412664 00000 n -0001412287 00000 n -0001452437 00000 n -0001413494 00000 n -0001412889 00000 n -0001452185 00000 n -0001452248 00000 n -0001452311 00000 n -0001452374 00000 n -0001451997 00000 n -0001476063 00000 n -0001453190 00000 n -0001452599 00000 n -0001475810 00000 n -0001475873 00000 n -0001475936 00000 n -0001475999 00000 n -0002188837 00000 n -0001475624 00000 n -0001501188 00000 n -0001476817 00000 n -0001476225 00000 n -0001500935 00000 n -0001500998 00000 n -0001501061 00000 n -0001501124 00000 n -0001500747 00000 n -0001526580 00000 n -0001501945 00000 n -0001501350 00000 n -0001526328 00000 n -0001526391 00000 n -0001526454 00000 n -0001526517 00000 n -0001526140 00000 n -0001527694 00000 n -0001527319 00000 n -0001526742 00000 n -0001527442 00000 n -0001527505 00000 n -0001527568 00000 n -0001527631 00000 n -0001624535 00000 n -0001528431 00000 n -0001527855 00000 n -0001624281 00000 n -0001624344 00000 n -0001624407 00000 n -0001624470 00000 n -0001624093 00000 n -0001627185 00000 n -0001626622 00000 n -0001624697 00000 n -0001626745 00000 n -0001626997 00000 n -0001627122 00000 n -0001631075 00000 n -0001630133 00000 n -0001627315 00000 n -0001630256 00000 n -0001630382 00000 n -0001630508 00000 n -0001630633 00000 n -0001630696 00000 n -0001630759 00000 n -0001630886 00000 n -0001631012 00000 n -0002188962 00000 n -0001635385 00000 n -0001633966 00000 n -0001631219 00000 n -0001634692 00000 n -0001634818 00000 n -0001634944 00000 n -0001635070 00000 n -0001634128 00000 n -0001634334 00000 n -0001635196 00000 n -0001634514 00000 n -0001635322 00000 n -0001639156 00000 n -0001638470 00000 n -0001635501 00000 n -0001638593 00000 n -0001638841 00000 n -0001638967 00000 n -0001639093 00000 n -0001643382 00000 n -0001642818 00000 n -0001639272 00000 n -0001642941 00000 n -0001643067 00000 n -0001643193 00000 n -0001643319 00000 n -0001647802 00000 n -0001647239 00000 n -0001643512 00000 n -0001647362 00000 n -0001647488 00000 n -0001647614 00000 n -0001647740 00000 n -0001652488 00000 n -0001651599 00000 n -0001647918 00000 n -0001651922 00000 n -0001652048 00000 n -0001652174 00000 n -0001652300 00000 n -0001651743 00000 n -0001652426 00000 n -0001657219 00000 n -0001656472 00000 n -0001652604 00000 n -0001656782 00000 n -0001656908 00000 n -0001656616 00000 n -0001657034 00000 n -0001657158 00000 n -0002189087 00000 n -0001660169 00000 n -0001659731 00000 n -0001657377 00000 n -0001659854 00000 n -0001659980 00000 n -0001660106 00000 n -0001664587 00000 n -0001663271 00000 n -0001660299 00000 n -0001664147 00000 n -0001663433 00000 n -0001663672 00000 n -0001663911 00000 n -0001664273 00000 n -0001664399 00000 n -0001664524 00000 n -0001667519 00000 n -0001667081 00000 n -0001664703 00000 n -0001667204 00000 n -0001667330 00000 n -0001667393 00000 n -0001667456 00000 n -0001668828 00000 n -0001668642 00000 n -0001667635 00000 n -0001668765 00000 n -0001670833 00000 n -0001670340 00000 n -0001668930 00000 n -0001670644 00000 n -0001670707 00000 n -0001670770 00000 n -0001670484 00000 n -0001984262 00000 n -0001674244 00000 n -0001673680 00000 n -0001670949 00000 n -0001673803 00000 n -0001673866 00000 n -0001673929 00000 n -0001674055 00000 n -0001674118 00000 n -0001674181 00000 n -0002189212 00000 n -0001676961 00000 n -0001676649 00000 n -0001674360 00000 n -0001676772 00000 n -0001676835 00000 n -0001676898 00000 n -0001678146 00000 n -0001677960 00000 n -0001677091 00000 n -0001678083 00000 n -0001681064 00000 n -0001680628 00000 n -0001678248 00000 n -0001680751 00000 n -0001680876 00000 n -0001681001 00000 n -0001685673 00000 n -0001684010 00000 n -0001681194 00000 n -0001684981 00000 n -0001685233 00000 n -0001685359 00000 n -0001684181 00000 n -0001684379 00000 n -0001684578 00000 n -0001684780 00000 n -0001685484 00000 n -0001685610 00000 n -0001690183 00000 n -0001689423 00000 n -0001685789 00000 n -0001690120 00000 n -0001689585 00000 n -0001689759 00000 n -0001689933 00000 n -0001693660 00000 n -0001693158 00000 n -0001690299 00000 n -0001693471 00000 n -0001693597 00000 n -0001693302 00000 n -0002189337 00000 n -0001695178 00000 n -0001694992 00000 n -0001693790 00000 n -0001695115 00000 n -0001698024 00000 n -0001696760 00000 n -0001695280 00000 n -0001697710 00000 n -0001696931 00000 n -0001697122 00000 n -0001697291 00000 n -0001697836 00000 n -0001697500 00000 n -0001697962 00000 n -0001702121 00000 n -0001701559 00000 n -0001698140 00000 n -0001701682 00000 n -0001701934 00000 n -0001702059 00000 n -0001707320 00000 n -0001706629 00000 n -0001702265 00000 n -0001707005 00000 n -0001706773 00000 n -0001707131 00000 n -0001707257 00000 n -0001712064 00000 n -0001711501 00000 n -0001707478 00000 n -0001711624 00000 n -0001711750 00000 n -0001711876 00000 n -0001712002 00000 n -0001716727 00000 n -0001716163 00000 n -0001712208 00000 n -0001716286 00000 n -0001716349 00000 n -0001716412 00000 n -0001716475 00000 n -0001716538 00000 n -0001716664 00000 n -0002189462 00000 n -0001721315 00000 n -0001720248 00000 n -0001716914 00000 n -0001720371 00000 n -0001720497 00000 n -0001720623 00000 n -0001720749 00000 n -0001720875 00000 n -0001720937 00000 n -0001721000 00000 n -0001721063 00000 n -0001721126 00000 n -0001721189 00000 n -0001721252 00000 n -0001724137 00000 n -0001723515 00000 n -0001721431 00000 n -0001723638 00000 n -0001723701 00000 n -0001723764 00000 n -0001723827 00000 n -0001723952 00000 n -0001724074 00000 n -0001727533 00000 n -0001726717 00000 n -0001724267 00000 n -0001726840 00000 n -0001727092 00000 n -0001727218 00000 n -0001727344 00000 n -0001727470 00000 n -0001731197 00000 n -0001730633 00000 n -0001727692 00000 n -0001730756 00000 n -0001730882 00000 n -0001731008 00000 n -0001731134 00000 n -0001735156 00000 n -0001734656 00000 n -0001731398 00000 n -0001734779 00000 n -0001734905 00000 n -0001735031 00000 n -0001735094 00000 n -0001740227 00000 n -0001739664 00000 n -0001735357 00000 n -0001739787 00000 n -0001739850 00000 n -0001739913 00000 n -0001739976 00000 n -0001740039 00000 n -0001740102 00000 n -0001740164 00000 n -0002189587 00000 n -0001745201 00000 n -0001744133 00000 n -0001740385 00000 n -0001744256 00000 n -0001744382 00000 n -0001744508 00000 n -0001744571 00000 n -0001744634 00000 n -0001744697 00000 n -0001744760 00000 n -0001744823 00000 n -0001744886 00000 n -0001744949 00000 n -0001745012 00000 n -0001745075 00000 n -0001745138 00000 n -0001746258 00000 n -0001746072 00000 n -0001745416 00000 n -0001746195 00000 n -0001750739 00000 n -0001749345 00000 n -0001746403 00000 n -0001749468 00000 n -0001749531 00000 n -0001749595 00000 n -0001749658 00000 n -0001749722 00000 n -0001749786 00000 n -0001749850 00000 n -0001749914 00000 n -0001749978 00000 n -0001750042 00000 n -0001750105 00000 n -0001750169 00000 n -0001750233 00000 n -0001750295 00000 n -0001750359 00000 n -0001750423 00000 n -0001750486 00000 n -0001750550 00000 n -0001750677 00000 n -0001755261 00000 n -0001754257 00000 n -0001750926 00000 n -0001754380 00000 n -0001754506 00000 n -0001754631 00000 n -0001754694 00000 n -0001754757 00000 n -0001754820 00000 n -0001754883 00000 n -0001754946 00000 n -0001755009 00000 n -0001755072 00000 n -0001755198 00000 n -0001759471 00000 n -0001758781 00000 n -0001755448 00000 n -0001758904 00000 n -0001759030 00000 n -0001759156 00000 n -0001759282 00000 n -0001759408 00000 n -0001763932 00000 n -0001763243 00000 n -0001759672 00000 n -0001763366 00000 n -0001763492 00000 n -0001763618 00000 n -0001763744 00000 n -0001763870 00000 n -0002189712 00000 n -0001768634 00000 n -0001768196 00000 n -0001764147 00000 n -0001768319 00000 n -0001768382 00000 n -0001768445 00000 n -0001768508 00000 n -0001768571 00000 n -0001772467 00000 n -0001771905 00000 n -0001768764 00000 n -0001772028 00000 n -0001772091 00000 n -0001772154 00000 n -0001772214 00000 n -0001772277 00000 n -0001772404 00000 n -0001776630 00000 n -0001776444 00000 n -0001772668 00000 n -0001776567 00000 n -0001780917 00000 n -0001780356 00000 n -0001776803 00000 n -0001780479 00000 n -0001780542 00000 n -0001780605 00000 n -0001780728 00000 n -0001780854 00000 n -0001784925 00000 n -0001784488 00000 n -0001781075 00000 n -0001784611 00000 n -0001784737 00000 n -0001784862 00000 n -0001786877 00000 n -0001786691 00000 n -0001785027 00000 n -0001786814 00000 n -0002189837 00000 n -0001790827 00000 n -0001790217 00000 n -0001787050 00000 n -0001790512 00000 n -0001790361 00000 n -0001790764 00000 n -0001795163 00000 n -0001794726 00000 n -0001791000 00000 n -0001794849 00000 n -0001794974 00000 n -0001795100 00000 n -0001799485 00000 n -0001798963 00000 n -0001795293 00000 n -0001799296 00000 n -0001799422 00000 n -0001799107 00000 n -0001804411 00000 n -0001804225 00000 n -0001799629 00000 n -0001804348 00000 n -0001809086 00000 n -0001808900 00000 n -0001804541 00000 n -0001809023 00000 n -0001812131 00000 n -0001811570 00000 n -0001809230 00000 n -0001811693 00000 n -0001811818 00000 n -0001811943 00000 n -0001812069 00000 n -0002189962 00000 n -0001814824 00000 n -0001814638 00000 n -0001812261 00000 n -0001814761 00000 n -0001819489 00000 n -0001818647 00000 n -0001814940 00000 n -0001819174 00000 n -0001819300 00000 n -0001818800 00000 n -0001818988 00000 n -0001819426 00000 n -0001823943 00000 n -0001823504 00000 n -0001819676 00000 n -0001823627 00000 n -0001823753 00000 n -0001823816 00000 n -0001823879 00000 n -0001827506 00000 n -0001826510 00000 n -0001824130 00000 n -0001827192 00000 n -0001826672 00000 n -0001826848 00000 n -0001827019 00000 n -0001827318 00000 n -0001827443 00000 n -0001830026 00000 n -0001829337 00000 n -0001827622 00000 n -0001829460 00000 n -0001829586 00000 n -0001829712 00000 n -0001829838 00000 n -0001829963 00000 n -0001831589 00000 n -0001831403 00000 n -0001830142 00000 n -0001831526 00000 n -0002190087 00000 n -0001834742 00000 n -0001834180 00000 n -0001831691 00000 n -0001834303 00000 n -0001834554 00000 n -0001834679 00000 n -0001838689 00000 n -0001838251 00000 n -0001834887 00000 n -0001838374 00000 n -0001838500 00000 n -0001838626 00000 n -0001841567 00000 n -0001841006 00000 n -0001838819 00000 n -0001841129 00000 n -0001841255 00000 n -0001841380 00000 n -0001841504 00000 n -0001845347 00000 n -0001845035 00000 n -0001841697 00000 n -0001845158 00000 n -0001845284 00000 n -0001849640 00000 n -0001849203 00000 n -0001845463 00000 n -0001849326 00000 n -0001849451 00000 n -0001849577 00000 n -0001851811 00000 n -0001851625 00000 n -0001849798 00000 n -0001851748 00000 n -0002190212 00000 n -0001855183 00000 n -0001854622 00000 n -0001851913 00000 n -0001854745 00000 n -0001854871 00000 n -0001854995 00000 n -0001855121 00000 n -0001858781 00000 n -0001858091 00000 n -0001855313 00000 n -0001858214 00000 n -0001858340 00000 n -0001858466 00000 n -0001858592 00000 n -0001858718 00000 n -0001860105 00000 n -0001859919 00000 n -0001858911 00000 n -0001860042 00000 n -0001864379 00000 n -0001863498 00000 n -0001860207 00000 n -0001863814 00000 n -0001864066 00000 n -0001864192 00000 n -0001863642 00000 n -0001864318 00000 n -0001867890 00000 n -0001867005 00000 n -0001864509 00000 n -0001867576 00000 n -0001867702 00000 n -0001867827 00000 n -0001867158 00000 n -0001867367 00000 n -0001869560 00000 n -0001868996 00000 n -0001868034 00000 n -0001869119 00000 n -0001869371 00000 n -0001869497 00000 n -0002190337 00000 n -0001870577 00000 n -0001870139 00000 n -0001869648 00000 n -0001870262 00000 n -0001870514 00000 n -0001871237 00000 n -0001870989 00000 n -0001870665 00000 n -0001871112 00000 n -0001873990 00000 n -0001873067 00000 n -0001871325 00000 n -0001873361 00000 n -0001873424 00000 n -0001873676 00000 n -0001873211 00000 n -0001873802 00000 n -0001873928 00000 n -0001877513 00000 n -0001876949 00000 n -0001874092 00000 n -0001877072 00000 n -0001877324 00000 n -0001877450 00000 n -0001881751 00000 n -0001881314 00000 n -0001877615 00000 n -0001881437 00000 n -0001881563 00000 n -0001881689 00000 n -0001886177 00000 n -0001885613 00000 n -0001881853 00000 n -0001885736 00000 n -0001885862 00000 n -0001885988 00000 n -0001886114 00000 n -0002190462 00000 n -0001891556 00000 n -0001889669 00000 n -0001886321 00000 n -0001889792 00000 n -0001889918 00000 n -0001889981 00000 n -0001890044 00000 n -0001890107 00000 n -0001890170 00000 n -0001890233 00000 n -0001890296 00000 n -0001890359 00000 n -0001890422 00000 n -0001890485 00000 n -0001890547 00000 n -0001890610 00000 n -0001890673 00000 n -0001890736 00000 n -0001890799 00000 n -0001890862 00000 n -0001890925 00000 n -0001890988 00000 n -0001891051 00000 n -0001891114 00000 n -0001891240 00000 n -0001891303 00000 n -0001891366 00000 n -0001891493 00000 n -0001894802 00000 n -0001894363 00000 n -0001891714 00000 n -0001894486 00000 n -0001894549 00000 n -0001894612 00000 n -0001894739 00000 n -0001896263 00000 n -0001896077 00000 n -0001894946 00000 n -0001896200 00000 n -0001899628 00000 n -0001899065 00000 n -0001896365 00000 n -0001899188 00000 n -0001899439 00000 n -0001899565 00000 n -0001903381 00000 n -0001902630 00000 n -0001899801 00000 n -0001902940 00000 n -0001903066 00000 n -0001903129 00000 n -0001903192 00000 n -0001903255 00000 n -0001903318 00000 n -0001902774 00000 n -0001907752 00000 n -0001906995 00000 n -0001903525 00000 n -0001907311 00000 n -0001907437 00000 n -0001907139 00000 n -0001907563 00000 n -0001907689 00000 n -0002190587 00000 n -0001912227 00000 n -0001911411 00000 n -0001907995 00000 n -0001911534 00000 n -0001911660 00000 n -0001911786 00000 n -0001911912 00000 n -0001912038 00000 n +0001289931 00000 n +0001289994 00000 n +0001290057 00000 n +0001290120 00000 n +0001290183 00000 n +0001290246 00000 n +0001290309 00000 n +0001473858 00000 n +0001294196 00000 n +0001293884 00000 n +0001290516 00000 n +0001294007 00000 n +0001294133 00000 n +0001331906 00000 n +0001294891 00000 n +0001294340 00000 n +0001331654 00000 n +0001331717 00000 n +0001331780 00000 n +0001331843 00000 n +0001331466 00000 n +0001358288 00000 n +0001332622 00000 n +0001332068 00000 n +0001358036 00000 n +0001358099 00000 n +0001358162 00000 n +0001358225 00000 n +0001357848 00000 n +0001397952 00000 n +0001359009 00000 n +0001358450 00000 n +0001397700 00000 n +0001397763 00000 n +0001397826 00000 n +0001397889 00000 n +0001397512 00000 n +0001421538 00000 n +0001398665 00000 n +0001398114 00000 n +0001421285 00000 n +0001421348 00000 n +0001421411 00000 n +0001421474 00000 n +0002118190 00000 n +0001421099 00000 n +0001446620 00000 n +0001422249 00000 n +0001421700 00000 n +0001446367 00000 n +0001446430 00000 n +0001446493 00000 n +0001446556 00000 n +0001446179 00000 n +0001471968 00000 n +0001447333 00000 n +0001446782 00000 n +0001471716 00000 n +0001471779 00000 n +0001471842 00000 n +0001471905 00000 n +0001471528 00000 n +0001473042 00000 n +0001472667 00000 n +0001472130 00000 n +0001472790 00000 n +0001472853 00000 n +0001472916 00000 n +0001472979 00000 n +0001569839 00000 n +0001473735 00000 n +0001473203 00000 n +0001569585 00000 n +0001569648 00000 n +0001569711 00000 n +0001569774 00000 n +0001569397 00000 n +0001572431 00000 n +0001571868 00000 n +0001570001 00000 n +0001571991 00000 n +0001572243 00000 n +0001572368 00000 n +0001575886 00000 n +0001574944 00000 n +0001572561 00000 n +0001575067 00000 n +0001575193 00000 n +0001575319 00000 n +0001575444 00000 n +0001575507 00000 n +0001575570 00000 n +0001575697 00000 n +0001575823 00000 n +0002118315 00000 n +0001580007 00000 n +0001578588 00000 n +0001576030 00000 n +0001579314 00000 n +0001579440 00000 n +0001579566 00000 n +0001579692 00000 n +0001578750 00000 n +0001578956 00000 n +0001579818 00000 n +0001579136 00000 n +0001579944 00000 n +0001583655 00000 n +0001582969 00000 n +0001580123 00000 n +0001583092 00000 n +0001583340 00000 n +0001583466 00000 n +0001583592 00000 n +0001587840 00000 n +0001587276 00000 n +0001583771 00000 n +0001587399 00000 n +0001587525 00000 n +0001587651 00000 n +0001587777 00000 n +0001592161 00000 n +0001591598 00000 n +0001587970 00000 n +0001591721 00000 n +0001591847 00000 n +0001591973 00000 n +0001592099 00000 n +0001596759 00000 n +0001595870 00000 n +0001592277 00000 n +0001596193 00000 n +0001596319 00000 n +0001596445 00000 n +0001596571 00000 n +0001596014 00000 n +0001596697 00000 n +0001601409 00000 n +0001600662 00000 n +0001596875 00000 n +0001600972 00000 n +0001601098 00000 n +0001600806 00000 n +0001601224 00000 n +0001601348 00000 n +0002118440 00000 n +0001604269 00000 n +0001603831 00000 n +0001601567 00000 n +0001603954 00000 n +0001604080 00000 n +0001604206 00000 n +0001608595 00000 n +0001607279 00000 n +0001604399 00000 n +0001608155 00000 n +0001607441 00000 n +0001607680 00000 n +0001607919 00000 n +0001608281 00000 n +0001608407 00000 n +0001608532 00000 n +0001611493 00000 n +0001611055 00000 n +0001608711 00000 n +0001611178 00000 n +0001611304 00000 n +0001611367 00000 n +0001611430 00000 n +0001612794 00000 n +0001612608 00000 n +0001611609 00000 n +0001612731 00000 n +0001614753 00000 n +0001614260 00000 n +0001612896 00000 n +0001614564 00000 n +0001614627 00000 n +0001614690 00000 n +0001614404 00000 n +0001915002 00000 n +0001618082 00000 n +0001617518 00000 n +0001614869 00000 n +0001617641 00000 n +0001617704 00000 n +0001617767 00000 n +0001617893 00000 n +0001617956 00000 n +0001618019 00000 n +0002118565 00000 n +0001620756 00000 n +0001620444 00000 n +0001618198 00000 n +0001620567 00000 n +0001620630 00000 n +0001620693 00000 n +0001621933 00000 n +0001621747 00000 n +0001620886 00000 n +0001621870 00000 n +0001624739 00000 n +0001624303 00000 n +0001622035 00000 n +0001624426 00000 n +0001624551 00000 n +0001624676 00000 n +0001629183 00000 n +0001627520 00000 n +0001624869 00000 n +0001628491 00000 n +0001628743 00000 n +0001628869 00000 n +0001627691 00000 n +0001627889 00000 n +0001628088 00000 n +0001628290 00000 n +0001628994 00000 n +0001629120 00000 n +0001633621 00000 n +0001632861 00000 n +0001629299 00000 n +0001633558 00000 n +0001633023 00000 n +0001633197 00000 n +0001633371 00000 n +0001636891 00000 n +0001636389 00000 n +0001633737 00000 n +0001636702 00000 n +0001636828 00000 n +0001636533 00000 n +0002118690 00000 n +0001638400 00000 n +0001638214 00000 n +0001637021 00000 n +0001638337 00000 n +0001641143 00000 n +0001639879 00000 n +0001638502 00000 n +0001640829 00000 n +0001640050 00000 n +0001640241 00000 n +0001640410 00000 n +0001640955 00000 n +0001640619 00000 n +0001641081 00000 n +0001645187 00000 n +0001644625 00000 n +0001641259 00000 n +0001644748 00000 n +0001645000 00000 n +0001645125 00000 n +0001650332 00000 n +0001649641 00000 n +0001645331 00000 n +0001650017 00000 n +0001649785 00000 n +0001650143 00000 n +0001650269 00000 n +0001655028 00000 n +0001654465 00000 n +0001650490 00000 n +0001654588 00000 n +0001654714 00000 n +0001654840 00000 n +0001654966 00000 n +0001659548 00000 n +0001658984 00000 n +0001655172 00000 n +0001659107 00000 n +0001659170 00000 n +0001659233 00000 n +0001659296 00000 n +0001659359 00000 n +0001659485 00000 n +0002118815 00000 n +0001663813 00000 n +0001662746 00000 n +0001659735 00000 n +0001662869 00000 n +0001662995 00000 n +0001663121 00000 n +0001663247 00000 n +0001663373 00000 n +0001663435 00000 n +0001663498 00000 n +0001663561 00000 n +0001663624 00000 n +0001663687 00000 n +0001663750 00000 n +0001666532 00000 n +0001665910 00000 n +0001663929 00000 n +0001666033 00000 n +0001666096 00000 n +0001666159 00000 n +0001666222 00000 n +0001666347 00000 n +0001666469 00000 n +0001669838 00000 n +0001669022 00000 n +0001666662 00000 n +0001669145 00000 n +0001669397 00000 n +0001669523 00000 n +0001669649 00000 n +0001669775 00000 n +0001673397 00000 n +0001672833 00000 n +0001669997 00000 n +0001672956 00000 n +0001673082 00000 n +0001673208 00000 n +0001673334 00000 n +0001677231 00000 n +0001676731 00000 n +0001673598 00000 n +0001676854 00000 n +0001676980 00000 n +0001677106 00000 n +0001677169 00000 n +0001682160 00000 n +0001681597 00000 n +0001677432 00000 n +0001681720 00000 n +0001681783 00000 n +0001681846 00000 n +0001681909 00000 n +0001681972 00000 n +0001682035 00000 n +0001682097 00000 n +0002118940 00000 n +0001686847 00000 n +0001685779 00000 n +0001682318 00000 n +0001685902 00000 n +0001686028 00000 n +0001686154 00000 n +0001686217 00000 n +0001686280 00000 n +0001686343 00000 n +0001686406 00000 n +0001686469 00000 n +0001686532 00000 n +0001686595 00000 n +0001686658 00000 n +0001686721 00000 n +0001686784 00000 n +0001687869 00000 n +0001687683 00000 n +0001687062 00000 n +0001687806 00000 n +0001691932 00000 n +0001690538 00000 n +0001688014 00000 n +0001690661 00000 n +0001690724 00000 n +0001690788 00000 n +0001690851 00000 n +0001690915 00000 n +0001690979 00000 n +0001691043 00000 n +0001691107 00000 n +0001691171 00000 n +0001691235 00000 n +0001691298 00000 n +0001691362 00000 n +0001691426 00000 n +0001691488 00000 n +0001691552 00000 n +0001691616 00000 n +0001691679 00000 n +0001691743 00000 n +0001691870 00000 n +0001696234 00000 n +0001695230 00000 n +0001692119 00000 n +0001695353 00000 n +0001695479 00000 n +0001695604 00000 n +0001695667 00000 n +0001695730 00000 n +0001695793 00000 n +0001695856 00000 n +0001695919 00000 n +0001695982 00000 n +0001696045 00000 n +0001696171 00000 n +0001700343 00000 n +0001699653 00000 n +0001696421 00000 n +0001699776 00000 n +0001699902 00000 n +0001700028 00000 n +0001700154 00000 n +0001700280 00000 n +0001704675 00000 n +0001703986 00000 n +0001700544 00000 n +0001704109 00000 n +0001704235 00000 n +0001704361 00000 n +0001704487 00000 n +0001704613 00000 n +0002119065 00000 n +0001709188 00000 n +0001708750 00000 n +0001704890 00000 n +0001708873 00000 n +0001708936 00000 n +0001708999 00000 n +0001709062 00000 n +0001709125 00000 n +0001712467 00000 n +0001711905 00000 n +0001709318 00000 n +0001712028 00000 n +0001712091 00000 n +0001712154 00000 n +0001712214 00000 n +0001712277 00000 n +0001712404 00000 n +0001716480 00000 n +0001716294 00000 n +0001712668 00000 n +0001716417 00000 n +0001720163 00000 n +0001719602 00000 n +0001716653 00000 n +0001719725 00000 n +0001719788 00000 n +0001719851 00000 n +0001719974 00000 n +0001720100 00000 n +0001723991 00000 n +0001723554 00000 n +0001720321 00000 n +0001723677 00000 n +0001723803 00000 n +0001723928 00000 n +0001725911 00000 n +0001725725 00000 n +0001724093 00000 n +0001725848 00000 n +0002119190 00000 n +0001729682 00000 n +0001729072 00000 n +0001726084 00000 n +0001729367 00000 n +0001729216 00000 n +0001729619 00000 n +0001733751 00000 n +0001733314 00000 n +0001729855 00000 n +0001733437 00000 n +0001733562 00000 n +0001733688 00000 n +0001737913 00000 n +0001737391 00000 n +0001733881 00000 n +0001737724 00000 n +0001737850 00000 n +0001737535 00000 n +0001742360 00000 n +0001742174 00000 n +0001738057 00000 n +0001742297 00000 n +0001746661 00000 n +0001746475 00000 n +0001742490 00000 n +0001746598 00000 n +0001749646 00000 n +0001749085 00000 n +0001746805 00000 n +0001749208 00000 n +0001749333 00000 n +0001749458 00000 n +0001749584 00000 n +0002119315 00000 n +0001752223 00000 n +0001752037 00000 n +0001749776 00000 n +0001752160 00000 n +0001756737 00000 n +0001755895 00000 n +0001752339 00000 n +0001756422 00000 n +0001756548 00000 n +0001756048 00000 n +0001756236 00000 n +0001756674 00000 n +0001760711 00000 n +0001760272 00000 n +0001756924 00000 n +0001760395 00000 n +0001760521 00000 n +0001760584 00000 n +0001760647 00000 n +0001764123 00000 n +0001763127 00000 n +0001760898 00000 n +0001763809 00000 n +0001763289 00000 n +0001763465 00000 n +0001763636 00000 n +0001763935 00000 n +0001764060 00000 n +0001766556 00000 n +0001765867 00000 n +0001764239 00000 n +0001765990 00000 n +0001766116 00000 n +0001766242 00000 n +0001766368 00000 n +0001766493 00000 n +0001768085 00000 n +0001767899 00000 n +0001766672 00000 n +0001768022 00000 n +0002119440 00000 n +0001771131 00000 n +0001770569 00000 n +0001768187 00000 n +0001770692 00000 n +0001770943 00000 n +0001771068 00000 n +0001774965 00000 n +0001774527 00000 n +0001771276 00000 n +0001774650 00000 n +0001774776 00000 n +0001774902 00000 n +0001777710 00000 n +0001777149 00000 n +0001775095 00000 n +0001777272 00000 n +0001777398 00000 n +0001777523 00000 n +0001777647 00000 n +0001781465 00000 n +0001781153 00000 n +0001777840 00000 n +0001781276 00000 n +0001781402 00000 n +0001785720 00000 n +0001785283 00000 n +0001781581 00000 n +0001785406 00000 n +0001785531 00000 n +0001785657 00000 n +0001787884 00000 n +0001787698 00000 n +0001785878 00000 n +0001787821 00000 n +0002119565 00000 n +0001791196 00000 n +0001790635 00000 n +0001787986 00000 n +0001790758 00000 n +0001790884 00000 n +0001791008 00000 n +0001791134 00000 n +0001794522 00000 n +0001793832 00000 n +0001791326 00000 n +0001793955 00000 n +0001794081 00000 n +0001794207 00000 n +0001794333 00000 n +0001794459 00000 n +0001795842 00000 n +0001795656 00000 n +0001794652 00000 n +0001795779 00000 n +0001800013 00000 n +0001799132 00000 n +0001795944 00000 n +0001799448 00000 n +0001799700 00000 n +0001799826 00000 n +0001799276 00000 n +0001799952 00000 n +0001803338 00000 n +0001802453 00000 n +0001800143 00000 n +0001803024 00000 n +0001803150 00000 n +0001803275 00000 n +0001802606 00000 n +0001802815 00000 n +0001804965 00000 n +0001804401 00000 n +0001803482 00000 n +0001804524 00000 n +0001804776 00000 n +0001804902 00000 n +0002119690 00000 n +0001805959 00000 n +0001805521 00000 n +0001805053 00000 n +0001805644 00000 n +0001805896 00000 n +0001806604 00000 n +0001806356 00000 n +0001806047 00000 n +0001806479 00000 n +0001809199 00000 n +0001808276 00000 n +0001806692 00000 n +0001808570 00000 n +0001808633 00000 n +0001808885 00000 n +0001808420 00000 n +0001809011 00000 n +0001809137 00000 n +0001812524 00000 n +0001811960 00000 n +0001809301 00000 n +0001812083 00000 n +0001812335 00000 n +0001812461 00000 n +0001816600 00000 n +0001816163 00000 n +0001812626 00000 n +0001816286 00000 n +0001816412 00000 n +0001816538 00000 n +0001820969 00000 n +0001820405 00000 n +0001816702 00000 n +0001820528 00000 n +0001820654 00000 n +0001820780 00000 n +0001820906 00000 n +0002119815 00000 n +0001825656 00000 n +0001823769 00000 n +0001821113 00000 n +0001823892 00000 n +0001824018 00000 n +0001824081 00000 n +0001824144 00000 n +0001824207 00000 n +0001824270 00000 n +0001824333 00000 n +0001824396 00000 n +0001824459 00000 n +0001824522 00000 n +0001824585 00000 n +0001824647 00000 n +0001824710 00000 n +0001824773 00000 n +0001824836 00000 n +0001824899 00000 n +0001824962 00000 n +0001825025 00000 n +0001825088 00000 n +0001825151 00000 n +0001825214 00000 n +0001825340 00000 n +0001825403 00000 n +0001825466 00000 n +0001825593 00000 n +0001828537 00000 n +0001828098 00000 n +0001825814 00000 n +0001828221 00000 n +0001828284 00000 n +0001828347 00000 n +0001828474 00000 n +0001829988 00000 n +0001829802 00000 n +0001828681 00000 n +0001829925 00000 n +0001833277 00000 n +0001832714 00000 n +0001830090 00000 n +0001832837 00000 n +0001833088 00000 n +0001833214 00000 n +0001836915 00000 n +0001836164 00000 n +0001833450 00000 n +0001836474 00000 n +0001836600 00000 n +0001836663 00000 n +0001836726 00000 n +0001836789 00000 n +0001836852 00000 n +0001836308 00000 n +0001841101 00000 n +0001840344 00000 n +0001837059 00000 n +0001840660 00000 n +0001840786 00000 n +0001840488 00000 n +0001840912 00000 n +0001841038 00000 n +0002119940 00000 n +0001845472 00000 n +0001844656 00000 n +0001841344 00000 n +0001844779 00000 n +0001844905 00000 n +0001845031 00000 n +0001845157 00000 n +0001845283 00000 n +0001845409 00000 n +0001846151 00000 n +0001845903 00000 n +0001845602 00000 n +0001846026 00000 n +0001849310 00000 n +0001848683 00000 n +0001846239 00000 n +0001848806 00000 n +0001848869 00000 n +0001849121 00000 n +0001849247 00000 n +0001853371 00000 n +0001852870 00000 n +0001849483 00000 n +0001852993 00000 n +0001853119 00000 n +0001853182 00000 n +0001853245 00000 n +0001853308 00000 n +0001857415 00000 n +0001857103 00000 n +0001853558 00000 n +0001857226 00000 n +0001857289 00000 n +0001857352 00000 n +0001862365 00000 n +0001861426 00000 n +0001857616 00000 n +0001861549 00000 n +0001861612 00000 n +0001861675 00000 n +0001861738 00000 n +0001861800 00000 n +0001861863 00000 n +0001861926 00000 n +0001861989 00000 n +0001862052 00000 n +0001862115 00000 n +0001862178 00000 n +0001862241 00000 n +0001862303 00000 n +0002120065 00000 n +0001866664 00000 n +0001865993 00000 n +0001862580 00000 n +0001866287 00000 n +0001866350 00000 n +0001866413 00000 n +0001866475 00000 n +0001866601 00000 n +0001866137 00000 n +0001870656 00000 n +0001869727 00000 n +0001866822 00000 n +0001870217 00000 n +0001870469 00000 n +0001869880 00000 n +0001870048 00000 n +0001870594 00000 n +0001875712 00000 n +0001874308 00000 n +0001870758 00000 n +0001875398 00000 n +0001875524 00000 n +0001874488 00000 n +0001874679 00000 n +0001874870 00000 n +0001875649 00000 n +0001875060 00000 n +0001875225 00000 n +0001878975 00000 n +0001878264 00000 n +0001875856 00000 n +0001878786 00000 n +0001878912 00000 n +0001878417 00000 n +0001878588 00000 n +0001883226 00000 n +0001881997 00000 n +0001879119 00000 n +0001882659 00000 n +0001882911 00000 n +0001882159 00000 n +0001882335 00000 n +0001883037 00000 n +0001882506 00000 n +0001883163 00000 n +0001887299 00000 n +0001886736 00000 n +0001883328 00000 n +0001886859 00000 n +0001886984 00000 n +0001887110 00000 n +0001887236 00000 n +0002120190 00000 n +0001887968 00000 n +0001887720 00000 n +0001887429 00000 n +0001887843 00000 n +0001893244 00000 n +0001890940 00000 n +0001888056 00000 n +0001892175 00000 n +0001892238 00000 n +0001891129 00000 n +0001892490 00000 n +0001892616 00000 n +0001891295 00000 n +0001891474 00000 n +0001892742 00000 n +0001892868 00000 n +0001891654 00000 n +0001892994 00000 n +0001891833 00000 n +0001892004 00000 n +0001893057 00000 n +0001893120 00000 n +0001893182 00000 n +0001897828 00000 n +0001896364 00000 n +0001893360 00000 n +0001897262 00000 n +0001897325 00000 n +0001897388 00000 n +0001897514 00000 n +0001896535 00000 n +0001896720 00000 n +0001896907 00000 n +0001897095 00000 n +0001897640 00000 n +0001897766 00000 n +0001900739 00000 n +0001900175 00000 n +0001897944 00000 n +0001900298 00000 n +0001900424 00000 n +0001900550 00000 n +0001900676 00000 n +0001903832 00000 n +0001903394 00000 n +0001900869 00000 n +0001903517 00000 n +0001903643 00000 n +0001903769 00000 n +0001906493 00000 n +0001906056 00000 n +0001904005 00000 n +0001906179 00000 n +0001906304 00000 n +0001906430 00000 n +0002120315 00000 n +0001910415 00000 n +0001909537 00000 n +0001906694 00000 n +0001909848 00000 n +0001910100 00000 n +0001910226 00000 n +0001909681 00000 n +0001910352 00000 n +0001912048 00000 n +0001911736 00000 n +0001910517 00000 n +0001911859 00000 n +0001911985 00000 n +0001915065 00000 n +0001914250 00000 n 0001912164 00000 n -0001912918 00000 n -0001912670 00000 n -0001912357 00000 n -0001912793 00000 n -0001916133 00000 n -0001915506 00000 n -0001913006 00000 n -0001915629 00000 n -0001915692 00000 n -0001915944 00000 n -0001916070 00000 n -0001920328 00000 n -0001919827 00000 n -0001916306 00000 n -0001919950 00000 n -0001920076 00000 n -0001920139 00000 n +0001914373 00000 n +0001914499 00000 n +0001914625 00000 n +0001914750 00000 n +0001914876 00000 n +0001920100 00000 n +0001918223 00000 n +0001915167 00000 n +0001919533 00000 n +0001919785 00000 n +0001918412 00000 n +0001918584 00000 n +0001918774 00000 n +0001918959 00000 n +0001919151 00000 n +0001919911 00000 n +0001920037 00000 n +0001919338 00000 n +0001925008 00000 n +0001923574 00000 n 0001920202 00000 n -0001920265 00000 n -0001924461 00000 n -0001924149 00000 n -0001920515 00000 n -0001924272 00000 n -0001924335 00000 n -0001924398 00000 n -0001929671 00000 n -0001928732 00000 n -0001924662 00000 n -0001928855 00000 n -0001928918 00000 n -0001928981 00000 n -0001929044 00000 n -0001929106 00000 n -0001929169 00000 n -0001929232 00000 n -0001929295 00000 n -0001929358 00000 n -0001929421 00000 n -0001929484 00000 n -0001929547 00000 n -0001929609 00000 n -0002190712 00000 n -0001934076 00000 n -0001933405 00000 n -0001929886 00000 n -0001933699 00000 n -0001933762 00000 n -0001933825 00000 n -0001933887 00000 n -0001934013 00000 n -0001933549 00000 n -0001938153 00000 n -0001937224 00000 n -0001934234 00000 n -0001937714 00000 n -0001937966 00000 n -0001937377 00000 n -0001937545 00000 n -0001938091 00000 n -0001943622 00000 n -0001942218 00000 n -0001938255 00000 n -0001943308 00000 n -0001943434 00000 n -0001942398 00000 n -0001942589 00000 n -0001942780 00000 n -0001943559 00000 n -0001942970 00000 n -0001943135 00000 n -0001947077 00000 n -0001946366 00000 n -0001943766 00000 n -0001946888 00000 n -0001947014 00000 n -0001946519 00000 n -0001946690 00000 n -0001951448 00000 n -0001950219 00000 n -0001947221 00000 n -0001950881 00000 n -0001951133 00000 n -0001950381 00000 n -0001950557 00000 n -0001951259 00000 n -0001950728 00000 n -0001951385 00000 n -0001955575 00000 n -0001955012 00000 n -0001951550 00000 n -0001955135 00000 n -0001955260 00000 n -0001955386 00000 n -0001955512 00000 n -0002190837 00000 n -0001956255 00000 n -0001956007 00000 n -0001955705 00000 n -0001956130 00000 n -0001961762 00000 n -0001959458 00000 n -0001956343 00000 n -0001960693 00000 n -0001960756 00000 n -0001959647 00000 n -0001961008 00000 n -0001961134 00000 n -0001959813 00000 n -0001959992 00000 n -0001961260 00000 n -0001961386 00000 n -0001960172 00000 n -0001961512 00000 n -0001960351 00000 n -0001960522 00000 n -0001961575 00000 n -0001961638 00000 n -0001961700 00000 n -0001966521 00000 n -0001965057 00000 n -0001961878 00000 n -0001965955 00000 n -0001966018 00000 n -0001966081 00000 n -0001966207 00000 n -0001965228 00000 n -0001965413 00000 n -0001965600 00000 n -0001965788 00000 n -0001966333 00000 n -0001966459 00000 n -0001969598 00000 n -0001969034 00000 n -0001966637 00000 n -0001969157 00000 n -0001969283 00000 n -0001969409 00000 n -0001969535 00000 n -0001972804 00000 n -0001972366 00000 n -0001969728 00000 n -0001972489 00000 n -0001972615 00000 n -0001972741 00000 n -0001975546 00000 n -0001975109 00000 n -0001972977 00000 n -0001975232 00000 n -0001975357 00000 n -0001975483 00000 n -0002190962 00000 n -0001979584 00000 n -0001978706 00000 n -0001975747 00000 n -0001979017 00000 n -0001979269 00000 n -0001979395 00000 n -0001978850 00000 n -0001979521 00000 n -0001981237 00000 n -0001980925 00000 n -0001979686 00000 n -0001981048 00000 n -0001981174 00000 n -0001984325 00000 n -0001983510 00000 n -0001981353 00000 n -0001983633 00000 n -0001983759 00000 n -0001983885 00000 n -0001984010 00000 n -0001984136 00000 n -0001989550 00000 n -0001987673 00000 n -0001984427 00000 n -0001988983 00000 n -0001989235 00000 n -0001987862 00000 n -0001988034 00000 n -0001988224 00000 n -0001988409 00000 n -0001988601 00000 n -0001989361 00000 n -0001989487 00000 n -0001988788 00000 n -0001994622 00000 n -0001993188 00000 n -0001989652 00000 n -0001993929 00000 n -0001994055 00000 n -0001993350 00000 n -0001993548 00000 n -0001993740 00000 n -0001994181 00000 n -0001994307 00000 n -0001994433 00000 n -0001994559 00000 n -0001999174 00000 n -0001998169 00000 n -0001994752 00000 n -0001998482 00000 n -0001998608 00000 n -0001998734 00000 n -0001998313 00000 n -0001998859 00000 n -0001998985 00000 n -0001999111 00000 n -0002191087 00000 n -0002003231 00000 n -0002002261 00000 n -0001999318 00000 n -0002002791 00000 n -0002002917 00000 n -0002003042 00000 n -0002002414 00000 n -0002003168 00000 n -0002002582 00000 n -0002007107 00000 n -0002006419 00000 n -0002003460 00000 n -0002006542 00000 n -0002006794 00000 n -0002006920 00000 n -0002007046 00000 n -0002010899 00000 n -0002010084 00000 n -0002007209 00000 n -0002010207 00000 n -0002010333 00000 n -0002010458 00000 n -0002010584 00000 n -0002010710 00000 n -0002010836 00000 n -0002014485 00000 n -0002013743 00000 n -0002011015 00000 n -0002014044 00000 n -0002014170 00000 n -0002013887 00000 n -0002014296 00000 n -0002014422 00000 n -0002015531 00000 n -0002015093 00000 n -0002014601 00000 n -0002015216 00000 n -0002015468 00000 n -0002024685 00000 n -0002018460 00000 n -0002015619 00000 n -0002024118 00000 n -0002024370 00000 n -0002018838 00000 n -0002019025 00000 n -0002019216 00000 n -0002019386 00000 n -0002019585 00000 n -0002019780 00000 n -0002019969 00000 n -0002020161 00000 n -0002020356 00000 n -0002020541 00000 n -0002020734 00000 n -0002020929 00000 n -0002021128 00000 n -0002021327 00000 n -0002021511 00000 n -0002021720 00000 n -0002021913 00000 n -0002022106 00000 n -0002022301 00000 n -0002022490 00000 n -0002022699 00000 n -0002022891 00000 n -0002023066 00000 n -0002023276 00000 n -0002024496 00000 n -0002023486 00000 n -0002023696 00000 n -0002023907 00000 n -0002024622 00000 n -0002191212 00000 n -0002024801 00000 n -0002028013 00000 n -0002028044 00000 n -0002031474 00000 n -0002031617 00000 n -0002036881 00000 n -0002037072 00000 n -0002040821 00000 n -0002047363 00000 n -0002059554 00000 n -0002059969 00000 n -0002070523 00000 n -0002070773 00000 n -0002091459 00000 n -0002101999 00000 n -0002104497 00000 n -0002104528 00000 n -0002108367 00000 n -0002124960 00000 n -0002125370 00000 n -0002143807 00000 n -0002163621 00000 n -0002167623 00000 n -0002182794 00000 n -0002191292 00000 n -0002191418 00000 n -0002191544 00000 n -0002191670 00000 n -0002191796 00000 n -0002191922 00000 n -0002192048 00000 n -0002192174 00000 n -0002192300 00000 n -0002192426 00000 n -0002192552 00000 n -0002192669 00000 n -0002192796 00000 n -0002192914 00000 n -0002192988 00000 n -0002263929 00000 n -0002312718 00000 n -0002312759 00000 n -0002312799 00000 n -0002313031 00000 n +0001924315 00000 n +0001924441 00000 n +0001923736 00000 n +0001923934 00000 n +0001924126 00000 n +0001924567 00000 n +0001924693 00000 n +0001924819 00000 n +0001924945 00000 n +0001929383 00000 n +0001928378 00000 n +0001925138 00000 n +0001928691 00000 n +0001928817 00000 n +0001928943 00000 n +0001928522 00000 n +0001929068 00000 n +0001929194 00000 n +0001929320 00000 n +0002120440 00000 n +0001933342 00000 n +0001932372 00000 n +0001929527 00000 n +0001932902 00000 n +0001933028 00000 n +0001933153 00000 n +0001932525 00000 n +0001933279 00000 n +0001932693 00000 n +0001937135 00000 n +0001936447 00000 n +0001933571 00000 n +0001936570 00000 n +0001936822 00000 n +0001936948 00000 n +0001937074 00000 n +0001940827 00000 n +0001940012 00000 n +0001937237 00000 n +0001940135 00000 n +0001940261 00000 n +0001940386 00000 n +0001940512 00000 n +0001940638 00000 n +0001940764 00000 n +0001944332 00000 n +0001943590 00000 n +0001940943 00000 n +0001943891 00000 n +0001944017 00000 n +0001943734 00000 n +0001944143 00000 n +0001944269 00000 n +0001945356 00000 n +0001944918 00000 n +0001944448 00000 n +0001945041 00000 n +0001945293 00000 n +0001953858 00000 n +0001947633 00000 n +0001945444 00000 n +0001953291 00000 n +0001953543 00000 n +0001948011 00000 n +0001948198 00000 n +0001948389 00000 n +0001948559 00000 n +0001948758 00000 n +0001948953 00000 n +0001949142 00000 n +0001949334 00000 n +0001949529 00000 n +0001949714 00000 n +0001949907 00000 n +0001950102 00000 n +0001950301 00000 n +0001950500 00000 n +0001950684 00000 n +0001950893 00000 n +0001951086 00000 n +0001951279 00000 n +0001951474 00000 n +0001951663 00000 n +0001951872 00000 n +0001952064 00000 n +0001952239 00000 n +0001952449 00000 n +0001953669 00000 n +0001952659 00000 n +0001952869 00000 n +0001953080 00000 n +0001953795 00000 n +0002120565 00000 n +0001953974 00000 n +0001957186 00000 n +0001957217 00000 n +0001960646 00000 n +0001960789 00000 n +0001966051 00000 n +0001966242 00000 n +0001969990 00000 n +0001976531 00000 n +0001988722 00000 n +0001989137 00000 n +0001999690 00000 n +0001999940 00000 n +0002020626 00000 n +0002031166 00000 n +0002033663 00000 n +0002033694 00000 n +0002037532 00000 n +0002054125 00000 n +0002054535 00000 n +0002072972 00000 n +0002092786 00000 n +0002096974 00000 n +0002112147 00000 n +0002120645 00000 n +0002120771 00000 n +0002120897 00000 n +0002121023 00000 n +0002121149 00000 n +0002121275 00000 n +0002121401 00000 n +0002121527 00000 n +0002121653 00000 n +0002121779 00000 n +0002121905 00000 n +0002122022 00000 n +0002122149 00000 n +0002122267 00000 n +0002122341 00000 n +0002193282 00000 n +0002242071 00000 n +0002242112 00000 n +0002242152 00000 n +0002242384 00000 n trailer << /Size 6741 @@ -44796,5 +44566,5 @@ trailer /Info 6740 0 R >> startxref -2313187 +2242580 %%EOF diff --git a/docs/docbook/configure b/docs/docbook/configure index 303ea97f573..1fbfb02115d 100755 --- a/docs/docbook/configure +++ b/docs/docbook/configure @@ -1,26 +1,287 @@ #! /bin/sh - # Guess values for system-dependent variables and create Makefiles. -# Generated automatically using autoconf version 2.13 -# Copyright (C) 1992, 93, 94, 95, 96 Free Software Foundation, Inc. +# Generated by GNU Autoconf 2.57. # +# Copyright 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001, 2002 +# Free Software Foundation, Inc. # This configure script is free software; the Free Software Foundation # gives unlimited permission to copy, distribute and modify it. +## --------------------- ## +## M4sh Initialization. ## +## --------------------- ## + +# Be Bourne compatible +if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then + emulate sh + NULLCMD=: + # Zsh 3.x and 4.x performs word splitting on ${1+"$@"}, which + # is contrary to our usage. Disable this feature. + alias -g '${1+"$@"}'='"$@"' +elif test -n "${BASH_VERSION+set}" && (set -o posix) >/dev/null 2>&1; then + set -o posix +fi + +# Support unset when possible. +if (FOO=FOO; unset FOO) >/dev/null 2>&1; then + as_unset=unset +else + as_unset=false +fi + + +# Work around bugs in pre-3.0 UWIN ksh. +$as_unset ENV MAIL MAILPATH +PS1='$ ' +PS2='> ' +PS4='+ ' + +# NLS nuisances. +for as_var in \ + LANG LANGUAGE LC_ADDRESS LC_ALL LC_COLLATE LC_CTYPE LC_IDENTIFICATION \ + LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER \ + LC_TELEPHONE LC_TIME +do + if (set +x; test -n "`(eval $as_var=C; export $as_var) 2>&1`"); then + eval $as_var=C; export $as_var + else + $as_unset $as_var + fi +done + +# Required to use basename. +if expr a : '\(a\)' >/dev/null 2>&1; then + as_expr=expr +else + as_expr=false +fi + +if (basename /) >/dev/null 2>&1 && test "X`basename / 2>&1`" = "X/"; then + as_basename=basename +else + as_basename=false +fi + + +# Name of the executable. +as_me=`$as_basename "$0" || +$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ + X"$0" : 'X\(//\)$' \| \ + X"$0" : 'X\(/\)$' \| \ + . : '\(.\)' 2>/dev/null || +echo X/"$0" | + sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/; q; } + /^X\/\(\/\/\)$/{ s//\1/; q; } + /^X\/\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` + + +# PATH needs CR, and LINENO needs CR and PATH. +# Avoid depending upon Character Ranges. +as_cr_letters='abcdefghijklmnopqrstuvwxyz' +as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' +as_cr_Letters=$as_cr_letters$as_cr_LETTERS +as_cr_digits='0123456789' +as_cr_alnum=$as_cr_Letters$as_cr_digits + +# The user is always right. +if test "${PATH_SEPARATOR+set}" != set; then + echo "#! /bin/sh" >conf$$.sh + echo "exit 0" >>conf$$.sh + chmod +x conf$$.sh + if (PATH="/nonexistent;."; conf$$.sh) >/dev/null 2>&1; then + PATH_SEPARATOR=';' + else + PATH_SEPARATOR=: + fi + rm -f conf$$.sh +fi + + + as_lineno_1=$LINENO + as_lineno_2=$LINENO + as_lineno_3=`(expr $as_lineno_1 + 1) 2>/dev/null` + test "x$as_lineno_1" != "x$as_lineno_2" && + test "x$as_lineno_3" = "x$as_lineno_2" || { + # Find who we are. Look in the path if we contain no path at all + # relative or not. + case $0 in + *[\\/]* ) as_myself=$0 ;; + *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break +done + + ;; + esac + # We did not find ourselves, most probably we were run as `sh COMMAND' + # in which case we are not to be found in the path. + if test "x$as_myself" = x; then + as_myself=$0 + fi + if test ! -f "$as_myself"; then + { echo "$as_me: error: cannot find myself; rerun with an absolute path" >&2 + { (exit 1); exit 1; }; } + fi + case $CONFIG_SHELL in + '') + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for as_base in sh bash ksh sh5; do + case $as_dir in + /*) + if ("$as_dir/$as_base" -c ' + as_lineno_1=$LINENO + as_lineno_2=$LINENO + as_lineno_3=`(expr $as_lineno_1 + 1) 2>/dev/null` + test "x$as_lineno_1" != "x$as_lineno_2" && + test "x$as_lineno_3" = "x$as_lineno_2" ') 2>/dev/null; then + $as_unset BASH_ENV || test "${BASH_ENV+set}" != set || { BASH_ENV=; export BASH_ENV; } + $as_unset ENV || test "${ENV+set}" != set || { ENV=; export ENV; } + CONFIG_SHELL=$as_dir/$as_base + export CONFIG_SHELL + exec "$CONFIG_SHELL" "$0" ${1+"$@"} + fi;; + esac + done +done +;; + esac + + # Create $as_me.lineno as a copy of $as_myself, but with $LINENO + # uniformly replaced by the line number. The first 'sed' inserts a + # line-number line before each line; the second 'sed' does the real + # work. The second script uses 'N' to pair each line-number line + # with the numbered line, and appends trailing '-' during + # substitution so that $LINENO is not a special case at line end. + # (Raja R Harinath suggested sed '=', and Paul Eggert wrote the + # second 'sed' script. Blame Lee E. McMahon for sed's syntax. :-) + sed '=' <$as_myself | + sed ' + N + s,$,-, + : loop + s,^\(['$as_cr_digits']*\)\(.*\)[$]LINENO\([^'$as_cr_alnum'_]\),\1\2\1\3, + t loop + s,-$,, + s,^['$as_cr_digits']*\n,, + ' >$as_me.lineno && + chmod +x $as_me.lineno || + { echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2 + { (exit 1); exit 1; }; } + + # Don't try to exec as it changes $[0], causing all sort of problems + # (the dirname of $[0] is not the place where we might find the + # original and so on. Autoconf is especially sensible to this). + . ./$as_me.lineno + # Exit status is that of the last command. + exit +} + + +case `echo "testing\c"; echo 1,2,3`,`echo -n testing; echo 1,2,3` in + *c*,-n*) ECHO_N= ECHO_C=' +' ECHO_T=' ' ;; + *c*,* ) ECHO_N=-n ECHO_C= ECHO_T= ;; + *) ECHO_N= ECHO_C='\c' ECHO_T= ;; +esac + +if expr a : '\(a\)' >/dev/null 2>&1; then + as_expr=expr +else + as_expr=false +fi + +rm -f conf$$ conf$$.exe conf$$.file +echo >conf$$.file +if ln -s conf$$.file conf$$ 2>/dev/null; then + # We could just check for DJGPP; but this test a) works b) is more generic + # and c) will remain valid once DJGPP supports symlinks (DJGPP 2.04). + if test -f conf$$.exe; then + # Don't use ln at all; we don't have any links + as_ln_s='cp -p' + else + as_ln_s='ln -s' + fi +elif ln conf$$.file conf$$ 2>/dev/null; then + as_ln_s=ln +else + as_ln_s='cp -p' +fi +rm -f conf$$ conf$$.exe conf$$.file + +if mkdir -p . 2>/dev/null; then + as_mkdir_p=: +else + as_mkdir_p=false +fi + +as_executable_p="test -f" + +# Sed expression to map a string onto a valid CPP name. +as_tr_cpp="sed y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g" + +# Sed expression to map a string onto a valid variable name. +as_tr_sh="sed y%*+%pp%;s%[^_$as_cr_alnum]%_%g" + -# Defaults: -ac_help= +# IFS +# We need space, tab and new line, in precisely that order. +as_nl=' +' +IFS=" $as_nl" + +# CDPATH. +$as_unset CDPATH + + +# Name of the host. +# hostname on some systems (SVR3.2, Linux) returns a bogus exit status, +# so uname gets run too. +ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q` + +exec 6>&1 + +# +# Initializations. +# ac_default_prefix=/usr/local -# Any additions from configure.in: +ac_config_libobj_dir=. +cross_compiling=no +subdirs= +MFLAGS= +MAKEFLAGS= +SHELL=${CONFIG_SHELL-/bin/sh} + +# Maximum number of lines to put in a shell here document. +# This variable seems obsolete. It should probably be removed, and +# only ac_max_sed_lines should be used. +: ${ac_max_here_lines=38} + +# Identity of this package. +PACKAGE_NAME= +PACKAGE_TARNAME= +PACKAGE_VERSION= +PACKAGE_STRING= +PACKAGE_BUGREPORT= + +ac_unique_file="global.ent" +ac_subst_vars='SHELL PATH_SEPARATOR PACKAGE_NAME PACKAGE_TARNAME PACKAGE_VERSION PACKAGE_STRING PACKAGE_BUGREPORT exec_prefix prefix program_transform_name bindir sbindir libexecdir datadir sysconfdir sharedstatedir localstatedir libdir includedir oldincludedir infodir mandir build_alias host_alias target_alias DEFS ECHO_C ECHO_N ECHO_T LIBS XSLTPROC PDFLATEX XMLTO LATEX DVIPS PNGTOPNM PNMTOPS DOC_BUILD_DATE LIBOBJS LTLIBOBJS' +ac_subst_files='' # Initialize some variables set by options. +ac_init_help= +ac_init_version=false # The variables have the same names as the options, with # dashes changed to underlines. -build=NONE -cache_file=./config.cache +cache_file=/dev/null exec_prefix=NONE -host=NONE no_create= -nonopt=NONE no_recursion= prefix=NONE program_prefix=NONE @@ -29,10 +290,15 @@ program_transform_name=s,x,x, silent= site= srcdir= -target=NONE verbose= x_includes=NONE x_libraries=NONE + +# Installation directory options. +# These are left unexpanded so users can "make install exec_prefix=/foo" +# and all the variables that are supposed to be based on exec_prefix +# by default will actually change. +# Use braces instead of parens because sh, perl, etc. also accept them. bindir='${exec_prefix}/bin' sbindir='${exec_prefix}/sbin' libexecdir='${exec_prefix}/libexec' @@ -46,17 +312,9 @@ oldincludedir='/usr/include' infodir='${prefix}/info' mandir='${prefix}/man' -# Initialize some other variables. -subdirs= -MFLAGS= MAKEFLAGS= -SHELL=${CONFIG_SHELL-/bin/sh} -# Maximum number of lines to put in a shell here document. -ac_max_here_lines=12 - ac_prev= for ac_option do - # If the previous option needs an argument, assign it. if test -n "$ac_prev"; then eval "$ac_prev=\$ac_option" @@ -64,59 +322,59 @@ do continue fi - case "$ac_option" in - -*=*) ac_optarg=`echo "$ac_option" | sed 's/[-_a-zA-Z0-9]*=//'` ;; - *) ac_optarg= ;; - esac + ac_optarg=`expr "x$ac_option" : 'x[^=]*=\(.*\)'` # Accept the important Cygnus configure options, so we can diagnose typos. - case "$ac_option" in + case $ac_option in -bindir | --bindir | --bindi | --bind | --bin | --bi) ac_prev=bindir ;; -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*) - bindir="$ac_optarg" ;; + bindir=$ac_optarg ;; -build | --build | --buil | --bui | --bu) - ac_prev=build ;; + ac_prev=build_alias ;; -build=* | --build=* | --buil=* | --bui=* | --bu=*) - build="$ac_optarg" ;; + build_alias=$ac_optarg ;; -cache-file | --cache-file | --cache-fil | --cache-fi \ | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c) ac_prev=cache_file ;; -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \ | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*) - cache_file="$ac_optarg" ;; + cache_file=$ac_optarg ;; + + --config-cache | -C) + cache_file=config.cache ;; -datadir | --datadir | --datadi | --datad | --data | --dat | --da) ac_prev=datadir ;; -datadir=* | --datadir=* | --datadi=* | --datad=* | --data=* | --dat=* \ | --da=*) - datadir="$ac_optarg" ;; + datadir=$ac_optarg ;; -disable-* | --disable-*) - ac_feature=`echo $ac_option|sed -e 's/-*disable-//'` + ac_feature=`expr "x$ac_option" : 'x-*disable-\(.*\)'` # Reject names that are not valid shell variable names. - if test -n "`echo $ac_feature| sed 's/[-a-zA-Z0-9_]//g'`"; then - { echo "configure: error: $ac_feature: invalid feature name" 1>&2; exit 1; } - fi - ac_feature=`echo $ac_feature| sed 's/-/_/g'` - eval "enable_${ac_feature}=no" ;; + expr "x$ac_feature" : ".*[^-_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid feature name: $ac_feature" >&2 + { (exit 1); exit 1; }; } + ac_feature=`echo $ac_feature | sed 's/-/_/g'` + eval "enable_$ac_feature=no" ;; -enable-* | --enable-*) - ac_feature=`echo $ac_option|sed -e 's/-*enable-//' -e 's/=.*//'` + ac_feature=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'` # Reject names that are not valid shell variable names. - if test -n "`echo $ac_feature| sed 's/[-_a-zA-Z0-9]//g'`"; then - { echo "configure: error: $ac_feature: invalid feature name" 1>&2; exit 1; } - fi - ac_feature=`echo $ac_feature| sed 's/-/_/g'` - case "$ac_option" in - *=*) ;; + expr "x$ac_feature" : ".*[^-_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid feature name: $ac_feature" >&2 + { (exit 1); exit 1; }; } + ac_feature=`echo $ac_feature | sed 's/-/_/g'` + case $ac_option in + *=*) ac_optarg=`echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"`;; *) ac_optarg=yes ;; esac - eval "enable_${ac_feature}='$ac_optarg'" ;; + eval "enable_$ac_feature='$ac_optarg'" ;; -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \ | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \ @@ -125,95 +383,47 @@ do -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \ | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \ | --exec=* | --exe=* | --ex=*) - exec_prefix="$ac_optarg" ;; + exec_prefix=$ac_optarg ;; -gas | --gas | --ga | --g) # Obsolete; use --with-gas. with_gas=yes ;; - -help | --help | --hel | --he) - # Omit some internal or obsolete options to make the list less imposing. - # This message is too long to be a string in the A/UX 3.1 sh. - cat << EOF -Usage: configure [options] [host] -Options: [defaults in brackets after descriptions] -Configuration: - --cache-file=FILE cache test results in FILE - --help print this message - --no-create do not create output files - --quiet, --silent do not print \`checking...' messages - --version print the version of autoconf that created configure -Directory and file names: - --prefix=PREFIX install architecture-independent files in PREFIX - [$ac_default_prefix] - --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX - [same as prefix] - --bindir=DIR user executables in DIR [EPREFIX/bin] - --sbindir=DIR system admin executables in DIR [EPREFIX/sbin] - --libexecdir=DIR program executables in DIR [EPREFIX/libexec] - --datadir=DIR read-only architecture-independent data in DIR - [PREFIX/share] - --sysconfdir=DIR read-only single-machine data in DIR [PREFIX/etc] - --sharedstatedir=DIR modifiable architecture-independent data in DIR - [PREFIX/com] - --localstatedir=DIR modifiable single-machine data in DIR [PREFIX/var] - --libdir=DIR object code libraries in DIR [EPREFIX/lib] - --includedir=DIR C header files in DIR [PREFIX/include] - --oldincludedir=DIR C header files for non-gcc in DIR [/usr/include] - --infodir=DIR info documentation in DIR [PREFIX/info] - --mandir=DIR man documentation in DIR [PREFIX/man] - --srcdir=DIR find the sources in DIR [configure dir or ..] - --program-prefix=PREFIX prepend PREFIX to installed program names - --program-suffix=SUFFIX append SUFFIX to installed program names - --program-transform-name=PROGRAM - run sed PROGRAM on installed program names -EOF - cat << EOF -Host type: - --build=BUILD configure for building on BUILD [BUILD=HOST] - --host=HOST configure for HOST [guessed] - --target=TARGET configure for TARGET [TARGET=HOST] -Features and packages: - --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no) - --enable-FEATURE[=ARG] include FEATURE [ARG=yes] - --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] - --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) - --x-includes=DIR X include files are in DIR - --x-libraries=DIR X library files are in DIR -EOF - if test -n "$ac_help"; then - echo "--enable and --with options recognized:$ac_help" - fi - exit 0 ;; + -help | --help | --hel | --he | -h) + ac_init_help=long ;; + -help=r* | --help=r* | --hel=r* | --he=r* | -hr*) + ac_init_help=recursive ;; + -help=s* | --help=s* | --hel=s* | --he=s* | -hs*) + ac_init_help=short ;; -host | --host | --hos | --ho) - ac_prev=host ;; + ac_prev=host_alias ;; -host=* | --host=* | --hos=* | --ho=*) - host="$ac_optarg" ;; + host_alias=$ac_optarg ;; -includedir | --includedir | --includedi | --included | --include \ | --includ | --inclu | --incl | --inc) ac_prev=includedir ;; -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \ | --includ=* | --inclu=* | --incl=* | --inc=*) - includedir="$ac_optarg" ;; + includedir=$ac_optarg ;; -infodir | --infodir | --infodi | --infod | --info | --inf) ac_prev=infodir ;; -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*) - infodir="$ac_optarg" ;; + infodir=$ac_optarg ;; -libdir | --libdir | --libdi | --libd) ac_prev=libdir ;; -libdir=* | --libdir=* | --libdi=* | --libd=*) - libdir="$ac_optarg" ;; + libdir=$ac_optarg ;; -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \ | --libexe | --libex | --libe) ac_prev=libexecdir ;; -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \ | --libexe=* | --libex=* | --libe=*) - libexecdir="$ac_optarg" ;; + libexecdir=$ac_optarg ;; -localstatedir | --localstatedir | --localstatedi | --localstated \ | --localstate | --localstat | --localsta | --localst \ @@ -222,19 +432,19 @@ EOF -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \ | --localstate=* | --localstat=* | --localsta=* | --localst=* \ | --locals=* | --local=* | --loca=* | --loc=* | --lo=*) - localstatedir="$ac_optarg" ;; + localstatedir=$ac_optarg ;; -mandir | --mandir | --mandi | --mand | --man | --ma | --m) ac_prev=mandir ;; -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*) - mandir="$ac_optarg" ;; + mandir=$ac_optarg ;; -nfp | --nfp | --nf) # Obsolete; use --without-fp. with_fp=no ;; -no-create | --no-create | --no-creat | --no-crea | --no-cre \ - | --no-cr | --no-c) + | --no-cr | --no-c | -n) no_create=yes ;; -no-recursion | --no-recursion | --no-recursio | --no-recursi \ @@ -248,26 +458,26 @@ EOF -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \ | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \ | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*) - oldincludedir="$ac_optarg" ;; + oldincludedir=$ac_optarg ;; -prefix | --prefix | --prefi | --pref | --pre | --pr | --p) ac_prev=prefix ;; -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*) - prefix="$ac_optarg" ;; + prefix=$ac_optarg ;; -program-prefix | --program-prefix | --program-prefi | --program-pref \ | --program-pre | --program-pr | --program-p) ac_prev=program_prefix ;; -program-prefix=* | --program-prefix=* | --program-prefi=* \ | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*) - program_prefix="$ac_optarg" ;; + program_prefix=$ac_optarg ;; -program-suffix | --program-suffix | --program-suffi | --program-suff \ | --program-suf | --program-su | --program-s) ac_prev=program_suffix ;; -program-suffix=* | --program-suffix=* | --program-suffi=* \ | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*) - program_suffix="$ac_optarg" ;; + program_suffix=$ac_optarg ;; -program-transform-name | --program-transform-name \ | --program-transform-nam | --program-transform-na \ @@ -284,7 +494,7 @@ EOF | --program-transfo=* | --program-transf=* \ | --program-trans=* | --program-tran=* \ | --progr-tra=* | --program-tr=* | --program-t=*) - program_transform_name="$ac_optarg" ;; + program_transform_name=$ac_optarg ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil) @@ -294,7 +504,7 @@ EOF ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ | --sbi=* | --sb=*) - sbindir="$ac_optarg" ;; + sbindir=$ac_optarg ;; -sharedstatedir | --sharedstatedir | --sharedstatedi \ | --sharedstated | --sharedstate | --sharedstat | --sharedsta \ @@ -305,58 +515,57 @@ EOF | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \ | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \ | --sha=* | --sh=*) - sharedstatedir="$ac_optarg" ;; + sharedstatedir=$ac_optarg ;; -site | --site | --sit) ac_prev=site ;; -site=* | --site=* | --sit=*) - site="$ac_optarg" ;; + site=$ac_optarg ;; -srcdir | --srcdir | --srcdi | --srcd | --src | --sr) ac_prev=srcdir ;; -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*) - srcdir="$ac_optarg" ;; + srcdir=$ac_optarg ;; -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \ | --syscon | --sysco | --sysc | --sys | --sy) ac_prev=sysconfdir ;; -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \ | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*) - sysconfdir="$ac_optarg" ;; + sysconfdir=$ac_optarg ;; -target | --target | --targe | --targ | --tar | --ta | --t) - ac_prev=target ;; + ac_prev=target_alias ;; -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*) - target="$ac_optarg" ;; + target_alias=$ac_optarg ;; -v | -verbose | --verbose | --verbos | --verbo | --verb) verbose=yes ;; - -version | --version | --versio | --versi | --vers) - echo "configure generated by autoconf version 2.13" - exit 0 ;; + -version | --version | --versio | --versi | --vers | -V) + ac_init_version=: ;; -with-* | --with-*) - ac_package=`echo $ac_option|sed -e 's/-*with-//' -e 's/=.*//'` + ac_package=`expr "x$ac_option" : 'x-*with-\([^=]*\)'` # Reject names that are not valid shell variable names. - if test -n "`echo $ac_package| sed 's/[-_a-zA-Z0-9]//g'`"; then - { echo "configure: error: $ac_package: invalid package name" 1>&2; exit 1; } - fi + expr "x$ac_package" : ".*[^-_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid package name: $ac_package" >&2 + { (exit 1); exit 1; }; } ac_package=`echo $ac_package| sed 's/-/_/g'` - case "$ac_option" in - *=*) ;; + case $ac_option in + *=*) ac_optarg=`echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"`;; *) ac_optarg=yes ;; esac - eval "with_${ac_package}='$ac_optarg'" ;; + eval "with_$ac_package='$ac_optarg'" ;; -without-* | --without-*) - ac_package=`echo $ac_option|sed -e 's/-*without-//'` + ac_package=`expr "x$ac_option" : 'x-*without-\(.*\)'` # Reject names that are not valid shell variable names. - if test -n "`echo $ac_package| sed 's/[-a-zA-Z0-9_]//g'`"; then - { echo "configure: error: $ac_package: invalid package name" 1>&2; exit 1; } - fi - ac_package=`echo $ac_package| sed 's/-/_/g'` - eval "with_${ac_package}=no" ;; + expr "x$ac_package" : ".*[^-_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid package name: $ac_package" >&2 + { (exit 1); exit 1; }; } + ac_package=`echo $ac_package | sed 's/-/_/g'` + eval "with_$ac_package=no" ;; --x) # Obsolete; use --with-x. @@ -367,99 +576,110 @@ EOF ac_prev=x_includes ;; -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \ | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*) - x_includes="$ac_optarg" ;; + x_includes=$ac_optarg ;; -x-libraries | --x-libraries | --x-librarie | --x-librari \ | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l) ac_prev=x_libraries ;; -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \ | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*) - x_libraries="$ac_optarg" ;; + x_libraries=$ac_optarg ;; - -*) { echo "configure: error: $ac_option: invalid option; use --help to show usage" 1>&2; exit 1; } + -*) { echo "$as_me: error: unrecognized option: $ac_option +Try \`$0 --help' for more information." >&2 + { (exit 1); exit 1; }; } ;; + *=*) + ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='` + # Reject names that are not valid shell variable names. + expr "x$ac_envvar" : ".*[^_$as_cr_alnum]" >/dev/null && + { echo "$as_me: error: invalid variable name: $ac_envvar" >&2 + { (exit 1); exit 1; }; } + ac_optarg=`echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` + eval "$ac_envvar='$ac_optarg'" + export $ac_envvar ;; + *) - if test -n "`echo $ac_option| sed 's/[-a-z0-9.]//g'`"; then - echo "configure: warning: $ac_option: invalid host type" 1>&2 - fi - if test "x$nonopt" != xNONE; then - { echo "configure: error: can only configure for one host and one target at a time" 1>&2; exit 1; } - fi - nonopt="$ac_option" + # FIXME: should be removed in autoconf 3.0. + echo "$as_me: WARNING: you should use --build, --host, --target" >&2 + expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null && + echo "$as_me: WARNING: invalid host type: $ac_option" >&2 + : ${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option} ;; esac done if test -n "$ac_prev"; then - { echo "configure: error: missing argument to --`echo $ac_prev | sed 's/_/-/g'`" 1>&2; exit 1; } -fi - -trap 'rm -fr conftest* confdefs* core core.* *.core $ac_clean_files; exit 1' 1 2 15 - -# File descriptor usage: -# 0 standard input -# 1 file creation -# 2 errors and warnings -# 3 some systems may open it to /dev/tty -# 4 used on the Kubota Titan -# 6 checking for... messages and results -# 5 compiler messages saved in config.log -if test "$silent" = yes; then - exec 6>/dev/null -else - exec 6>&1 + ac_option=--`echo $ac_prev | sed 's/_/-/g'` + { echo "$as_me: error: missing argument to $ac_option" >&2 + { (exit 1); exit 1; }; } fi -exec 5>./config.log -echo "\ -This file contains any messages produced by compilers while -running configure, to aid debugging if configure makes a mistake. -" 1>&5 +# Be sure to have absolute paths. +for ac_var in exec_prefix prefix +do + eval ac_val=$`echo $ac_var` + case $ac_val in + [\\/$]* | ?:[\\/]* | NONE | '' ) ;; + *) { echo "$as_me: error: expected an absolute directory name for --$ac_var: $ac_val" >&2 + { (exit 1); exit 1; }; };; + esac +done -# Strip out --no-create and --no-recursion so they do not pile up. -# Also quote any args containing shell metacharacters. -ac_configure_args= -for ac_arg +# Be sure to have absolute paths. +for ac_var in bindir sbindir libexecdir datadir sysconfdir sharedstatedir \ + localstatedir libdir includedir oldincludedir infodir mandir do - case "$ac_arg" in - -no-create | --no-create | --no-creat | --no-crea | --no-cre \ - | --no-cr | --no-c) ;; - -no-recursion | --no-recursion | --no-recursio | --no-recursi \ - | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r) ;; - *" "*|*" "*|*[\[\]\~\#\$\^\&\*\(\)\{\}\\\|\;\<\>\?]*) - ac_configure_args="$ac_configure_args '$ac_arg'" ;; - *) ac_configure_args="$ac_configure_args $ac_arg" ;; + eval ac_val=$`echo $ac_var` + case $ac_val in + [\\/$]* | ?:[\\/]* ) ;; + *) { echo "$as_me: error: expected an absolute directory name for --$ac_var: $ac_val" >&2 + { (exit 1); exit 1; }; };; esac done -# NLS nuisances. -# Only set these to C if already set. These must not be set unconditionally -# because not all systems understand e.g. LANG=C (notably SCO). -# Fixing LC_MESSAGES prevents Solaris sh from translating var values in `set'! -# Non-C LC_CTYPE values break the ctype check. -if test "${LANG+set}" = set; then LANG=C; export LANG; fi -if test "${LC_ALL+set}" = set; then LC_ALL=C; export LC_ALL; fi -if test "${LC_MESSAGES+set}" = set; then LC_MESSAGES=C; export LC_MESSAGES; fi -if test "${LC_CTYPE+set}" = set; then LC_CTYPE=C; export LC_CTYPE; fi +# There might be people who depend on the old broken behavior: `$host' +# used to hold the argument of --host etc. +# FIXME: To remove some day. +build=$build_alias +host=$host_alias +target=$target_alias + +# FIXME: To remove some day. +if test "x$host_alias" != x; then + if test "x$build_alias" = x; then + cross_compiling=maybe + echo "$as_me: WARNING: If you wanted to set the --build type, don't use --host. + If a cross compiler is detected then cross compile mode will be used." >&2 + elif test "x$build_alias" != "x$host_alias"; then + cross_compiling=yes + fi +fi -# confdefs.h avoids OS command line length limits that DEFS can exceed. -rm -rf conftest* confdefs.h -# AIX cpp loses on an empty file, so make sure it contains at least a newline. -echo > confdefs.h +ac_tool_prefix= +test -n "$host_alias" && ac_tool_prefix=$host_alias- + +test "$silent" = yes && exec 6>/dev/null -# A filename unique to this package, relative to the directory that -# configure is in, which we can look for to find out if srcdir is correct. -ac_unique_file=global.ent # Find the source files, if location was not specified. if test -z "$srcdir"; then ac_srcdir_defaulted=yes # Try the directory containing this script, then its parent. - ac_prog=$0 - ac_confdir=`echo $ac_prog|sed 's%/[^/][^/]*$%%'` - test "x$ac_confdir" = "x$ac_prog" && ac_confdir=. + ac_confdir=`(dirname "$0") 2>/dev/null || +$as_expr X"$0" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ + X"$0" : 'X\(//\)[^/]' \| \ + X"$0" : 'X\(//\)$' \| \ + X"$0" : 'X\(/\)' \| \ + . : '\(.\)' 2>/dev/null || +echo X"$0" | + sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/; q; } + /^X\(\/\/\)[^/].*/{ s//\1/; q; } + /^X\(\/\/\)$/{ s//\1/; q; } + /^X\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` srcdir=$ac_confdir if test ! -r $srcdir/$ac_unique_file; then srcdir=.. @@ -469,13 +689,390 @@ else fi if test ! -r $srcdir/$ac_unique_file; then if test "$ac_srcdir_defaulted" = yes; then - { echo "configure: error: can not find sources in $ac_confdir or .." 1>&2; exit 1; } + { echo "$as_me: error: cannot find sources ($ac_unique_file) in $ac_confdir or .." >&2 + { (exit 1); exit 1; }; } else - { echo "configure: error: can not find sources in $srcdir" 1>&2; exit 1; } + { echo "$as_me: error: cannot find sources ($ac_unique_file) in $srcdir" >&2 + { (exit 1); exit 1; }; } fi fi -srcdir=`echo "${srcdir}" | sed 's%\([^/]\)/*$%\1%'` +(cd $srcdir && test -r ./$ac_unique_file) 2>/dev/null || + { echo "$as_me: error: sources are in $srcdir, but \`cd $srcdir' does not work" >&2 + { (exit 1); exit 1; }; } +srcdir=`echo "$srcdir" | sed 's%\([^\\/]\)[\\/]*$%\1%'` +ac_env_build_alias_set=${build_alias+set} +ac_env_build_alias_value=$build_alias +ac_cv_env_build_alias_set=${build_alias+set} +ac_cv_env_build_alias_value=$build_alias +ac_env_host_alias_set=${host_alias+set} +ac_env_host_alias_value=$host_alias +ac_cv_env_host_alias_set=${host_alias+set} +ac_cv_env_host_alias_value=$host_alias +ac_env_target_alias_set=${target_alias+set} +ac_env_target_alias_value=$target_alias +ac_cv_env_target_alias_set=${target_alias+set} +ac_cv_env_target_alias_value=$target_alias + +# +# Report the --help message. +# +if test "$ac_init_help" = "long"; then + # Omit some internal or obsolete options to make the list less imposing. + # This message is too long to be a string in the A/UX 3.1 sh. + cat <<_ACEOF +\`configure' configures this package to adapt to many kinds of systems. + +Usage: $0 [OPTION]... [VAR=VALUE]... + +To assign environment variables (e.g., CC, CFLAGS...), specify them as +VAR=VALUE. See below for descriptions of some of the useful variables. + +Defaults for the options are specified in brackets. + +Configuration: + -h, --help display this help and exit + --help=short display options specific to this package + --help=recursive display the short help of all the included packages + -V, --version display version information and exit + -q, --quiet, --silent do not print \`checking...' messages + --cache-file=FILE cache test results in FILE [disabled] + -C, --config-cache alias for \`--cache-file=config.cache' + -n, --no-create do not create output files + --srcdir=DIR find the sources in DIR [configure dir or \`..'] + +_ACEOF + + cat <<_ACEOF +Installation directories: + --prefix=PREFIX install architecture-independent files in PREFIX + [$ac_default_prefix] + --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX + [PREFIX] + +By default, \`make install' will install all the files in +\`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc. You can specify +an installation prefix other than \`$ac_default_prefix' using \`--prefix', +for instance \`--prefix=\$HOME'. + +For better control, use the options below. + +Fine tuning of the installation directories: + --bindir=DIR user executables [EPREFIX/bin] + --sbindir=DIR system admin executables [EPREFIX/sbin] + --libexecdir=DIR program executables [EPREFIX/libexec] + --datadir=DIR read-only architecture-independent data [PREFIX/share] + --sysconfdir=DIR read-only single-machine data [PREFIX/etc] + --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com] + --localstatedir=DIR modifiable single-machine data [PREFIX/var] + --libdir=DIR object code libraries [EPREFIX/lib] + --includedir=DIR C header files [PREFIX/include] + --oldincludedir=DIR C header files for non-gcc [/usr/include] + --infodir=DIR info documentation [PREFIX/info] + --mandir=DIR man documentation [PREFIX/man] +_ACEOF + + cat <<\_ACEOF +_ACEOF +fi + +if test -n "$ac_init_help"; then + + cat <<\_ACEOF + +_ACEOF +fi + +if test "$ac_init_help" = "recursive"; then + # If there are subdirs, report their specific --help. + ac_popdir=`pwd` + for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue + test -d $ac_dir || continue + ac_builddir=. + +if test "$ac_dir" != .; then + ac_dir_suffix=/`echo "$ac_dir" | sed 's,^\.[\\/],,'` + # A "../" for each directory in $ac_dir_suffix. + ac_top_builddir=`echo "$ac_dir_suffix" | sed 's,/[^\\/]*,../,g'` +else + ac_dir_suffix= ac_top_builddir= +fi + +case $srcdir in + .) # No --srcdir option. We are building in place. + ac_srcdir=. + if test -z "$ac_top_builddir"; then + ac_top_srcdir=. + else + ac_top_srcdir=`echo $ac_top_builddir | sed 's,/$,,'` + fi ;; + [\\/]* | ?:[\\/]* ) # Absolute path. + ac_srcdir=$srcdir$ac_dir_suffix; + ac_top_srcdir=$srcdir ;; + *) # Relative path. + ac_srcdir=$ac_top_builddir$srcdir$ac_dir_suffix + ac_top_srcdir=$ac_top_builddir$srcdir ;; +esac +# Don't blindly perform a `cd "$ac_dir"/$ac_foo && pwd` since $ac_foo can be +# absolute. +ac_abs_builddir=`cd "$ac_dir" && cd $ac_builddir && pwd` +ac_abs_top_builddir=`cd "$ac_dir" && cd ${ac_top_builddir}. && pwd` +ac_abs_srcdir=`cd "$ac_dir" && cd $ac_srcdir && pwd` +ac_abs_top_srcdir=`cd "$ac_dir" && cd $ac_top_srcdir && pwd` + + cd $ac_dir + # Check for guested configure; otherwise get Cygnus style configure. + if test -f $ac_srcdir/configure.gnu; then + echo + $SHELL $ac_srcdir/configure.gnu --help=recursive + elif test -f $ac_srcdir/configure; then + echo + $SHELL $ac_srcdir/configure --help=recursive + elif test -f $ac_srcdir/configure.ac || + test -f $ac_srcdir/configure.in; then + echo + $ac_configure --help + else + echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2 + fi + cd $ac_popdir + done +fi + +test -n "$ac_init_help" && exit 0 +if $ac_init_version; then + cat <<\_ACEOF + +Copyright 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001, 2002 +Free Software Foundation, Inc. +This configure script is free software; the Free Software Foundation +gives unlimited permission to copy, distribute and modify it. +_ACEOF + exit 0 +fi +exec 5>config.log +cat >&5 <<_ACEOF +This file contains any messages produced by compilers while +running configure, to aid debugging if configure makes a mistake. + +It was created by $as_me, which was +generated by GNU Autoconf 2.57. Invocation command line was + + $ $0 $@ + +_ACEOF +{ +cat <<_ASUNAME +## --------- ## +## Platform. ## +## --------- ## + +hostname = `(hostname || uname -n) 2>/dev/null | sed 1q` +uname -m = `(uname -m) 2>/dev/null || echo unknown` +uname -r = `(uname -r) 2>/dev/null || echo unknown` +uname -s = `(uname -s) 2>/dev/null || echo unknown` +uname -v = `(uname -v) 2>/dev/null || echo unknown` + +/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown` +/bin/uname -X = `(/bin/uname -X) 2>/dev/null || echo unknown` + +/bin/arch = `(/bin/arch) 2>/dev/null || echo unknown` +/usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null || echo unknown` +/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown` +hostinfo = `(hostinfo) 2>/dev/null || echo unknown` +/bin/machine = `(/bin/machine) 2>/dev/null || echo unknown` +/usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null || echo unknown` +/bin/universe = `(/bin/universe) 2>/dev/null || echo unknown` + +_ASUNAME + +as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + echo "PATH: $as_dir" +done + +} >&5 + +cat >&5 <<_ACEOF + + +## ----------- ## +## Core tests. ## +## ----------- ## + +_ACEOF + +# Keep a trace of the command line. +# Strip out --no-create and --no-recursion so they do not pile up. +# Strip out --silent because we don't want to record it for future runs. +# Also quote any args containing shell meta-characters. +# Make two passes to allow for proper duplicate-argument suppression. +ac_configure_args= +ac_configure_args0= +ac_configure_args1= +ac_sep= +ac_must_keep_next=false +for ac_pass in 1 2 +do + for ac_arg + do + case $ac_arg in + -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;; + -q | -quiet | --quiet | --quie | --qui | --qu | --q \ + | -silent | --silent | --silen | --sile | --sil) + continue ;; + *" "*|*" "*|*[\[\]\~\#\$\^\&\*\(\)\{\}\\\|\;\<\>\?\"\']*) + ac_arg=`echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;; + esac + case $ac_pass in + 1) ac_configure_args0="$ac_configure_args0 '$ac_arg'" ;; + 2) + ac_configure_args1="$ac_configure_args1 '$ac_arg'" + if test $ac_must_keep_next = true; then + ac_must_keep_next=false # Got value, back to normal. + else + case $ac_arg in + *=* | --config-cache | -C | -disable-* | --disable-* \ + | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \ + | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \ + | -with-* | --with-* | -without-* | --without-* | --x) + case "$ac_configure_args0 " in + "$ac_configure_args1"*" '$ac_arg' "* ) continue ;; + esac + ;; + -* ) ac_must_keep_next=true ;; + esac + fi + ac_configure_args="$ac_configure_args$ac_sep'$ac_arg'" + # Get rid of the leading space. + ac_sep=" " + ;; + esac + done +done +$as_unset ac_configure_args0 || test "${ac_configure_args0+set}" != set || { ac_configure_args0=; export ac_configure_args0; } +$as_unset ac_configure_args1 || test "${ac_configure_args1+set}" != set || { ac_configure_args1=; export ac_configure_args1; } + +# When interrupted or exit'd, cleanup temporary files, and complete +# config.log. We remove comments because anyway the quotes in there +# would cause problems or look ugly. +# WARNING: Be sure not to use single quotes in there, as some shells, +# such as our DU 5.0 friend, will then `close' the trap. +trap 'exit_status=$? + # Save into config.log some information that might help in debugging. + { + echo + + cat <<\_ASBOX +## ---------------- ## +## Cache variables. ## +## ---------------- ## +_ASBOX + echo + # The following way of writing the cache mishandles newlines in values, +{ + (set) 2>&1 | + case `(ac_space='"'"' '"'"'; set | grep ac_space) 2>&1` in + *ac_space=\ *) + sed -n \ + "s/'"'"'/'"'"'\\\\'"'"''"'"'/g; + s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='"'"'\\2'"'"'/p" + ;; + *) + sed -n \ + "s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1=\\2/p" + ;; + esac; +} + echo + + cat <<\_ASBOX +## ----------------- ## +## Output variables. ## +## ----------------- ## +_ASBOX + echo + for ac_var in $ac_subst_vars + do + eval ac_val=$`echo $ac_var` + echo "$ac_var='"'"'$ac_val'"'"'" + done | sort + echo + + if test -n "$ac_subst_files"; then + cat <<\_ASBOX +## ------------- ## +## Output files. ## +## ------------- ## +_ASBOX + echo + for ac_var in $ac_subst_files + do + eval ac_val=$`echo $ac_var` + echo "$ac_var='"'"'$ac_val'"'"'" + done | sort + echo + fi + + if test -s confdefs.h; then + cat <<\_ASBOX +## ----------- ## +## confdefs.h. ## +## ----------- ## +_ASBOX + echo + sed "/^$/d" confdefs.h | sort + echo + fi + test "$ac_signal" != 0 && + echo "$as_me: caught signal $ac_signal" + echo "$as_me: exit $exit_status" + } >&5 + rm -f core core.* *.core && + rm -rf conftest* confdefs* conf$$* $ac_clean_files && + exit $exit_status + ' 0 +for ac_signal in 1 2 13 15; do + trap 'ac_signal='$ac_signal'; { (exit 1); exit 1; }' $ac_signal +done +ac_signal=0 + +# confdefs.h avoids OS command line length limits that DEFS can exceed. +rm -rf conftest* confdefs.h +# AIX cpp loses on an empty file, so make sure it contains at least a newline. +echo >confdefs.h + +# Predefined preprocessor variables. + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_NAME "$PACKAGE_NAME" +_ACEOF + + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_TARNAME "$PACKAGE_TARNAME" +_ACEOF + + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_VERSION "$PACKAGE_VERSION" +_ACEOF + + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_STRING "$PACKAGE_STRING" +_ACEOF + + +cat >>confdefs.h <<_ACEOF +#define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT" +_ACEOF + + +# Let the site file select an alternate cache file if it wants to. # Prefer explicitly selected file to automatically selected ones. if test -z "$CONFIG_SITE"; then if test "x$prefix" != xNONE; then @@ -486,554 +1083,1265 @@ if test -z "$CONFIG_SITE"; then fi for ac_site_file in $CONFIG_SITE; do if test -r "$ac_site_file"; then - echo "loading site script $ac_site_file" + { echo "$as_me:$LINENO: loading site script $ac_site_file" >&5 +echo "$as_me: loading site script $ac_site_file" >&6;} + sed 's/^/| /' "$ac_site_file" >&5 . "$ac_site_file" fi done if test -r "$cache_file"; then - echo "loading cache $cache_file" - . $cache_file + # Some versions of bash will fail to source /dev/null (special + # files actually), so we avoid doing that. + if test -f "$cache_file"; then + { echo "$as_me:$LINENO: loading cache $cache_file" >&5 +echo "$as_me: loading cache $cache_file" >&6;} + case $cache_file in + [\\/]* | ?:[\\/]* ) . $cache_file;; + *) . ./$cache_file;; + esac + fi else - echo "creating cache $cache_file" - > $cache_file + { echo "$as_me:$LINENO: creating cache $cache_file" >&5 +echo "$as_me: creating cache $cache_file" >&6;} + >$cache_file fi -ac_ext=c -# CFLAGS is not in ac_cpp because -g, -O, etc. are not valid cpp options. -ac_cpp='$CPP $CPPFLAGS' -ac_compile='${CC-cc} -c $CFLAGS $CPPFLAGS conftest.$ac_ext 1>&5' -ac_link='${CC-cc} -o conftest${ac_exeext} $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS 1>&5' -cross_compiling=$ac_cv_prog_cc_cross - -ac_exeext= -ac_objext=o -if (echo "testing\c"; echo 1,2,3) | grep c >/dev/null; then - # Stardent Vistra SVR4 grep lacks -e, says ghazi@caip.rutgers.edu. - if (echo -n testing; echo 1,2,3) | sed s/-n/xn/ | grep xn >/dev/null; then - ac_n= ac_c=' -' ac_t=' ' - else - ac_n=-n ac_c= ac_t= +# Check that the precious variables saved in the cache have kept the same +# value. +ac_cache_corrupted=false +for ac_var in `(set) 2>&1 | + sed -n 's/^ac_env_\([a-zA-Z_0-9]*\)_set=.*/\1/p'`; do + eval ac_old_set=\$ac_cv_env_${ac_var}_set + eval ac_new_set=\$ac_env_${ac_var}_set + eval ac_old_val="\$ac_cv_env_${ac_var}_value" + eval ac_new_val="\$ac_env_${ac_var}_value" + case $ac_old_set,$ac_new_set in + set,) + { echo "$as_me:$LINENO: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5 +echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;} + ac_cache_corrupted=: ;; + ,set) + { echo "$as_me:$LINENO: error: \`$ac_var' was not set in the previous run" >&5 +echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;} + ac_cache_corrupted=: ;; + ,);; + *) + if test "x$ac_old_val" != "x$ac_new_val"; then + { echo "$as_me:$LINENO: error: \`$ac_var' has changed since the previous run:" >&5 +echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;} + { echo "$as_me:$LINENO: former value: $ac_old_val" >&5 +echo "$as_me: former value: $ac_old_val" >&2;} + { echo "$as_me:$LINENO: current value: $ac_new_val" >&5 +echo "$as_me: current value: $ac_new_val" >&2;} + ac_cache_corrupted=: + fi;; + esac + # Pass precious variables to config.status. + if test "$ac_new_set" = set; then + case $ac_new_val in + *" "*|*" "*|*[\[\]\~\#\$\^\&\*\(\)\{\}\\\|\;\<\>\?\"\']*) + ac_arg=$ac_var=`echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;; + *) ac_arg=$ac_var=$ac_new_val ;; + esac + case " $ac_configure_args " in + *" '$ac_arg' "*) ;; # Avoid dups. Use of quotes ensures accuracy. + *) ac_configure_args="$ac_configure_args '$ac_arg'" ;; + esac fi -else - ac_n= ac_c='\c' ac_t= +done +if $ac_cache_corrupted; then + { echo "$as_me:$LINENO: error: changes in the environment can compromise the build" >&5 +echo "$as_me: error: changes in the environment can compromise the build" >&2;} + { { echo "$as_me:$LINENO: error: run \`make distclean' and/or \`rm $cache_file' and start over" >&5 +echo "$as_me: error: run \`make distclean' and/or \`rm $cache_file' and start over" >&2;} + { (exit 1); exit 1; }; } fi +ac_ext=c +ac_cpp='$CPP $CPPFLAGS' +ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' +ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' +ac_compiler_gnu=$ac_cv_c_compiler_gnu + + + + + + + + + + + + + + + + + + # Extract the first word of "xsltproc", so it can be a program name with args. set dummy xsltproc; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:529: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_XSLTPROC'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_XSLTPROC+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$XSLTPROC" in - /*) + case $XSLTPROC in + [\\/]* | ?:[\\/]*) ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_XSLTPROC="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_XSLTPROC="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -XSLTPROC="$ac_cv_path_XSLTPROC" +XSLTPROC=$ac_cv_path_XSLTPROC + if test -n "$XSLTPROC"; then - echo "$ac_t""$XSLTPROC" 1>&6 + echo "$as_me:$LINENO: result: $XSLTPROC" >&5 +echo "${ECHO_T}$XSLTPROC" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi if test "x$XSLTPROC" = x; then - { echo "configure: error: "xsltproc is required"" 1>&2; exit 1; } + { { echo "$as_me:$LINENO: error: \"xsltproc is required\"" >&5 +echo "$as_me: error: \"xsltproc is required\"" >&2;} + { (exit 1); exit 1; }; } fi # Extract the first word of "pdflatex", so it can be a program name with args. set dummy pdflatex; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:567: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_PDFLATEX'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_PDFLATEX+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$PDFLATEX" in - /*) + case $PDFLATEX in + [\\/]* | ?:[\\/]*) ac_cv_path_PDFLATEX="$PDFLATEX" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_PDFLATEX="$PDFLATEX" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_PDFLATEX="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_PDFLATEX="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -PDFLATEX="$ac_cv_path_PDFLATEX" +PDFLATEX=$ac_cv_path_PDFLATEX + if test -n "$PDFLATEX"; then - echo "$ac_t""$PDFLATEX" 1>&6 + echo "$as_me:$LINENO: result: $PDFLATEX" >&5 +echo "${ECHO_T}$PDFLATEX" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi if test "x$PDFLATEX" = x; then - { echo "configure: error: "pdflatex is required"" 1>&2; exit 1; } + { { echo "$as_me:$LINENO: error: \"pdflatex is required\"" >&5 +echo "$as_me: error: \"pdflatex is required\"" >&2;} + { (exit 1); exit 1; }; } fi # Extract the first word of "xmlto", so it can be a program name with args. set dummy xmlto; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:606: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_XMLTO'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_XMLTO+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$XMLTO" in - /*) + case $XMLTO in + [\\/]* | ?:[\\/]*) ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_XMLTO="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_XMLTO="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -XMLTO="$ac_cv_path_XMLTO" +XMLTO=$ac_cv_path_XMLTO + if test -n "$XMLTO"; then - echo "$ac_t""$XMLTO" 1>&6 + echo "$as_me:$LINENO: result: $XMLTO" >&5 +echo "${ECHO_T}$XMLTO" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi # Extract the first word of "latex", so it can be a program name with args. set dummy latex; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:641: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_LATEX'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_LATEX+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$LATEX" in - /*) + case $LATEX in + [\\/]* | ?:[\\/]*) ac_cv_path_LATEX="$LATEX" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_LATEX="$LATEX" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_LATEX="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_LATEX="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -LATEX="$ac_cv_path_LATEX" +LATEX=$ac_cv_path_LATEX + if test -n "$LATEX"; then - echo "$ac_t""$LATEX" 1>&6 + echo "$as_me:$LINENO: result: $LATEX" >&5 +echo "${ECHO_T}$LATEX" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi # Extract the first word of "dvips", so it can be a program name with args. set dummy dvips; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:676: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_DVIPS'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_DVIPS+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$DVIPS" in - /*) + case $DVIPS in + [\\/]* | ?:[\\/]*) ac_cv_path_DVIPS="$DVIPS" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_DVIPS="$DVIPS" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_DVIPS="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_DVIPS="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -DVIPS="$ac_cv_path_DVIPS" +DVIPS=$ac_cv_path_DVIPS + if test -n "$DVIPS"; then - echo "$ac_t""$DVIPS" 1>&6 + echo "$as_me:$LINENO: result: $DVIPS" >&5 +echo "${ECHO_T}$DVIPS" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi # Extract the first word of "pngtopnm", so it can be a program name with args. set dummy pngtopnm; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:711: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_PNGTOPNM'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_PNGTOPNM+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$PNGTOPNM" in - /*) + case $PNGTOPNM in + [\\/]* | ?:[\\/]*) ac_cv_path_PNGTOPNM="$PNGTOPNM" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_PNGTOPNM="$PNGTOPNM" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_PNGTOPNM="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_PNGTOPNM="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -PNGTOPNM="$ac_cv_path_PNGTOPNM" +PNGTOPNM=$ac_cv_path_PNGTOPNM + if test -n "$PNGTOPNM"; then - echo "$ac_t""$PNGTOPNM" 1>&6 + echo "$as_me:$LINENO: result: $PNGTOPNM" >&5 +echo "${ECHO_T}$PNGTOPNM" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi # Extract the first word of "pnmtops", so it can be a program name with args. set dummy pnmtops; ac_word=$2 -echo $ac_n "checking for $ac_word""... $ac_c" 1>&6 -echo "configure:746: checking for $ac_word" >&5 -if eval "test \"`echo '$''{'ac_cv_path_PNMTOPS'+set}'`\" = set"; then - echo $ac_n "(cached) $ac_c" 1>&6 +echo "$as_me:$LINENO: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_PNMTOPS+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 else - case "$PNMTOPS" in - /*) + case $PNMTOPS in + [\\/]* | ?:[\\/]*) ac_cv_path_PNMTOPS="$PNMTOPS" # Let the user override the test with a path. ;; - ?:/*) - ac_cv_path_PNMTOPS="$PNMTOPS" # Let the user override the test with a dos path. - ;; *) - IFS="${IFS= }"; ac_save_ifs="$IFS"; IFS=":" - ac_dummy="$PATH" - for ac_dir in $ac_dummy; do - test -z "$ac_dir" && ac_dir=. - if test -f $ac_dir/$ac_word; then - ac_cv_path_PNMTOPS="$ac_dir/$ac_word" - break - fi - done - IFS="$ac_save_ifs" + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for ac_exec_ext in '' $ac_executable_extensions; do + if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then + ac_cv_path_PNMTOPS="$as_dir/$ac_word$ac_exec_ext" + echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext" >&5 + break 2 + fi +done +done + ;; esac fi -PNMTOPS="$ac_cv_path_PNMTOPS" +PNMTOPS=$ac_cv_path_PNMTOPS + if test -n "$PNMTOPS"; then - echo "$ac_t""$PNMTOPS" 1>&6 + echo "$as_me:$LINENO: result: $PNMTOPS" >&5 +echo "${ECHO_T}$PNMTOPS" >&6 else - echo "$ac_t""no" 1>&6 + echo "$as_me:$LINENO: result: no" >&5 +echo "${ECHO_T}no" >&6 fi DOC_BUILD_DATE=`date '+%d-%m-%Y'` -trap '' 1 2 15 -cat > confcache <<\EOF + ac_config_files="$ac_config_files Makefile" +cat >confcache <<\_ACEOF # This file is a shell script that caches the results of configure # tests run on this system so they can be shared between configure -# scripts and configure runs. It is not useful on other systems. -# If it contains results you don't want to keep, you may remove or edit it. +# scripts and configure runs, see configure's option --config-cache. +# It is not useful on other systems. If it contains results you don't +# want to keep, you may remove or edit it. # -# By default, configure uses ./config.cache as the cache file, -# creating it if it does not exist already. You can give configure -# the --cache-file=FILE option to use a different cache file; that is -# what configure does when it calls configure scripts in -# subdirectories, so they share the cache. -# Giving --cache-file=/dev/null disables caching, for debugging configure. -# config.status only pays attention to the cache file if you give it the -# --recheck option to rerun configure. +# config.status only pays attention to the cache file if you give it +# the --recheck option to rerun configure. # -EOF +# `ac_cv_env_foo' variables (set or unset) will be overridden when +# loading this file, other *unset* `ac_cv_foo' will be assigned the +# following values. + +_ACEOF + # The following way of writing the cache mishandles newlines in values, # but we know of no workaround that is simple, portable, and efficient. # So, don't put newlines in cache variables' values. # Ultrix sh set writes to stderr and can't be redirected directly, # and sets the high bit in the cache file unless we assign to the vars. -(set) 2>&1 | - case `(ac_space=' '; set | grep ac_space) 2>&1` in - *ac_space=\ *) - # `set' does not quote correctly, so add quotes (double-quote substitution - # turns \\\\ into \\, and sed turns \\ into \). - sed -n \ - -e "s/'/'\\\\''/g" \ - -e "s/^\\([a-zA-Z0-9_]*_cv_[a-zA-Z0-9_]*\\)=\\(.*\\)/\\1=\${\\1='\\2'}/p" - ;; - *) - # `set' quotes correctly as required by POSIX, so do not add quotes. - sed -n -e 's/^\([a-zA-Z0-9_]*_cv_[a-zA-Z0-9_]*\)=\(.*\)/\1=${\1=\2}/p' - ;; - esac >> confcache -if cmp -s $cache_file confcache; then - : -else +{ + (set) 2>&1 | + case `(ac_space=' '; set | grep ac_space) 2>&1` in + *ac_space=\ *) + # `set' does not quote correctly, so add quotes (double-quote + # substitution turns \\\\ into \\, and sed turns \\ into \). + sed -n \ + "s/'/'\\\\''/g; + s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" + ;; + *) + # `set' quotes correctly as required by POSIX, so do not add quotes. + sed -n \ + "s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1=\\2/p" + ;; + esac; +} | + sed ' + t clear + : clear + s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/ + t end + /^ac_cv_env/!s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/ + : end' >>confcache +if diff $cache_file confcache >/dev/null 2>&1; then :; else if test -w $cache_file; then - echo "updating cache $cache_file" - cat confcache > $cache_file + test "x$cache_file" != "x/dev/null" && echo "updating cache $cache_file" + cat confcache >$cache_file else echo "not updating unwritable cache $cache_file" fi fi rm -f confcache -trap 'rm -fr conftest* confdefs* core core.* *.core $ac_clean_files; exit 1' 1 2 15 - test "x$prefix" = xNONE && prefix=$ac_default_prefix # Let make expand exec_prefix. test "x$exec_prefix" = xNONE && exec_prefix='${prefix}' -# Any assignment to VPATH causes Sun make to only execute -# the first set of double-colon rules, so remove it if not needed. -# If there is a colon in the path, we need to keep it. +# VPATH may cause trouble with some makes, so we remove $(srcdir), +# ${srcdir} and @srcdir@ from VPATH if srcdir is ".", strip leading and +# trailing colons and then remove the whole line if VPATH becomes empty +# (actually we leave an empty line to preserve line numbers). if test "x$srcdir" = x.; then - ac_vpsub='/^[ ]*VPATH[ ]*=[^:]*$/d' + ac_vpsub='/^[ ]*VPATH[ ]*=/{ +s/:*\$(srcdir):*/:/; +s/:*\${srcdir}:*/:/; +s/:*@srcdir@:*/:/; +s/^\([^=]*=[ ]*\):*/\1/; +s/:*$//; +s/^[^=]*=[ ]*$//; +}' fi -trap 'rm -f $CONFIG_STATUS conftest*; exit 1' 1 2 15 - # Transform confdefs.h into DEFS. # Protect against shell expansion while executing Makefile rules. # Protect against Makefile macro expansion. -cat > conftest.defs <<\EOF -s%#define \([A-Za-z_][A-Za-z0-9_]*\) *\(.*\)%-D\1=\2%g -s%[ `~#$^&*(){}\\|;'"<>?]%\\&%g -s%\[%\\&%g -s%\]%\\&%g -s%\$%$$%g -EOF -DEFS=`sed -f conftest.defs confdefs.h | tr '\012' ' '` -rm -f conftest.defs - - -# Without the "./", some shells look in PATH for config.status. -: ${CONFIG_STATUS=./config.status} +# +# If the first sed substitution is executed (which looks for macros that +# take arguments), then we branch to the quote section. Otherwise, +# look for a macro that doesn't take arguments. +cat >confdef2opt.sed <<\_ACEOF +t clear +: clear +s,^[ ]*#[ ]*define[ ][ ]*\([^ (][^ (]*([^)]*)\)[ ]*\(.*\),-D\1=\2,g +t quote +s,^[ ]*#[ ]*define[ ][ ]*\([^ ][^ ]*\)[ ]*\(.*\),-D\1=\2,g +t quote +d +: quote +s,[ `~#$^&*(){}\\|;'"<>?],\\&,g +s,\[,\\&,g +s,\],\\&,g +s,\$,$$,g +p +_ACEOF +# We use echo to avoid assuming a particular line-breaking character. +# The extra dot is to prevent the shell from consuming trailing +# line-breaks from the sub-command output. A line-break within +# single-quotes doesn't work because, if this script is created in a +# platform that uses two characters for line-breaks (e.g., DOS), tr +# would break. +ac_LF_and_DOT=`echo; echo .` +DEFS=`sed -n -f confdef2opt.sed confdefs.h | tr "$ac_LF_and_DOT" ' .'` +rm -f confdef2opt.sed + + +ac_libobjs= +ac_ltlibobjs= +for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue + # 1. Remove the extension, and $U if already installed. + ac_i=`echo "$ac_i" | + sed 's/\$U\././;s/\.o$//;s/\.obj$//'` + # 2. Add them. + ac_libobjs="$ac_libobjs $ac_i\$U.$ac_objext" + ac_ltlibobjs="$ac_ltlibobjs $ac_i"'$U.lo' +done +LIBOBJS=$ac_libobjs -echo creating $CONFIG_STATUS -rm -f $CONFIG_STATUS -cat > $CONFIG_STATUS <&5 +echo "$as_me: creating $CONFIG_STATUS" >&6;} +cat >$CONFIG_STATUS <<_ACEOF +#! $SHELL +# Generated by $as_me. # Run this file to recreate the current configuration. -# This directory was configured as follows, -# on host `(hostname || uname -n) 2>/dev/null | sed 1q`: -# -# $0 $ac_configure_args -# # Compiler output produced by configure, useful for debugging -# configure, is in ./config.log if it exists. +# configure, is in config.log if it exists. + +debug=false +ac_cs_recheck=false +ac_cs_silent=false +SHELL=\${CONFIG_SHELL-$SHELL} +_ACEOF + +cat >>$CONFIG_STATUS <<\_ACEOF +## --------------------- ## +## M4sh Initialization. ## +## --------------------- ## + +# Be Bourne compatible +if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then + emulate sh + NULLCMD=: + # Zsh 3.x and 4.x performs word splitting on ${1+"$@"}, which + # is contrary to our usage. Disable this feature. + alias -g '${1+"$@"}'='"$@"' +elif test -n "${BASH_VERSION+set}" && (set -o posix) >/dev/null 2>&1; then + set -o posix +fi -ac_cs_usage="Usage: $CONFIG_STATUS [--recheck] [--version] [--help]" -for ac_option +# Support unset when possible. +if (FOO=FOO; unset FOO) >/dev/null 2>&1; then + as_unset=unset +else + as_unset=false +fi + + +# Work around bugs in pre-3.0 UWIN ksh. +$as_unset ENV MAIL MAILPATH +PS1='$ ' +PS2='> ' +PS4='+ ' + +# NLS nuisances. +for as_var in \ + LANG LANGUAGE LC_ADDRESS LC_ALL LC_COLLATE LC_CTYPE LC_IDENTIFICATION \ + LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER \ + LC_TELEPHONE LC_TIME do - case "\$ac_option" in - -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) - echo "running \${CONFIG_SHELL-/bin/sh} $0 $ac_configure_args --no-create --no-recursion" - exec \${CONFIG_SHELL-/bin/sh} $0 $ac_configure_args --no-create --no-recursion ;; - -version | --version | --versio | --versi | --vers | --ver | --ve | --v) - echo "$CONFIG_STATUS generated by autoconf version 2.13" - exit 0 ;; - -help | --help | --hel | --he | --h) - echo "\$ac_cs_usage"; exit 0 ;; - *) echo "\$ac_cs_usage"; exit 1 ;; - esac + if (set +x; test -n "`(eval $as_var=C; export $as_var) 2>&1`"); then + eval $as_var=C; export $as_var + else + $as_unset $as_var + fi done -ac_given_srcdir=$srcdir +# Required to use basename. +if expr a : '\(a\)' >/dev/null 2>&1; then + as_expr=expr +else + as_expr=false +fi -trap 'rm -fr `echo "Makefile " | sed "s/:[^ ]*//g"` conftest*; exit 1' 1 2 15 -EOF -cat >> $CONFIG_STATUS </dev/null 2>&1 && test "X`basename / 2>&1`" = "X/"; then + as_basename=basename +else + as_basename=false +fi -# Protect against being on the right side of a sed subst in config.status. -sed 's/%@/@@/; s/@%/@@/; s/%g\$/@g/; /@g\$/s/[\\\\&%]/\\\\&/g; - s/@@/%@/; s/@@/@%/; s/@g\$/%g/' > conftest.subs <<\\CEOF -$ac_vpsub -$extrasub -s%@SHELL@%$SHELL%g -s%@CFLAGS@%$CFLAGS%g -s%@CPPFLAGS@%$CPPFLAGS%g -s%@CXXFLAGS@%$CXXFLAGS%g -s%@FFLAGS@%$FFLAGS%g -s%@DEFS@%$DEFS%g -s%@LDFLAGS@%$LDFLAGS%g -s%@LIBS@%$LIBS%g -s%@exec_prefix@%$exec_prefix%g -s%@prefix@%$prefix%g -s%@program_transform_name@%$program_transform_name%g -s%@bindir@%$bindir%g -s%@sbindir@%$sbindir%g -s%@libexecdir@%$libexecdir%g -s%@datadir@%$datadir%g -s%@sysconfdir@%$sysconfdir%g -s%@sharedstatedir@%$sharedstatedir%g -s%@localstatedir@%$localstatedir%g -s%@libdir@%$libdir%g -s%@includedir@%$includedir%g -s%@oldincludedir@%$oldincludedir%g -s%@infodir@%$infodir%g -s%@mandir@%$mandir%g -s%@XSLTPROC@%$XSLTPROC%g -s%@PDFLATEX@%$PDFLATEX%g -s%@XMLTO@%$XMLTO%g -s%@LATEX@%$LATEX%g -s%@DVIPS@%$DVIPS%g -s%@PNGTOPNM@%$PNGTOPNM%g -s%@PNMTOPS@%$PNMTOPS%g -s%@DOC_BUILD_DATE@%$DOC_BUILD_DATE%g -CEOF -EOF - -cat >> $CONFIG_STATUS <<\EOF - -# Split the substitutions into bite-sized pieces for seds with -# small command number limits, like on Digital OSF/1 and HP-UX. -ac_max_sed_cmds=90 # Maximum number of lines to put in a sed script. -ac_file=1 # Number of current file. -ac_beg=1 # First line for current file. -ac_end=$ac_max_sed_cmds # Line after last line for current file. -ac_more_lines=: -ac_sed_cmds="" -while $ac_more_lines; do - if test $ac_beg -gt 1; then - sed "1,${ac_beg}d; ${ac_end}q" conftest.subs > conftest.s$ac_file +# Name of the executable. +as_me=`$as_basename "$0" || +$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ + X"$0" : 'X\(//\)$' \| \ + X"$0" : 'X\(/\)$' \| \ + . : '\(.\)' 2>/dev/null || +echo X/"$0" | + sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/; q; } + /^X\/\(\/\/\)$/{ s//\1/; q; } + /^X\/\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` + + +# PATH needs CR, and LINENO needs CR and PATH. +# Avoid depending upon Character Ranges. +as_cr_letters='abcdefghijklmnopqrstuvwxyz' +as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' +as_cr_Letters=$as_cr_letters$as_cr_LETTERS +as_cr_digits='0123456789' +as_cr_alnum=$as_cr_Letters$as_cr_digits + +# The user is always right. +if test "${PATH_SEPARATOR+set}" != set; then + echo "#! /bin/sh" >conf$$.sh + echo "exit 0" >>conf$$.sh + chmod +x conf$$.sh + if (PATH="/nonexistent;."; conf$$.sh) >/dev/null 2>&1; then + PATH_SEPARATOR=';' else - sed "${ac_end}q" conftest.subs > conftest.s$ac_file + PATH_SEPARATOR=: fi - if test ! -s conftest.s$ac_file; then - ac_more_lines=false - rm -f conftest.s$ac_file + rm -f conf$$.sh +fi + + + as_lineno_1=$LINENO + as_lineno_2=$LINENO + as_lineno_3=`(expr $as_lineno_1 + 1) 2>/dev/null` + test "x$as_lineno_1" != "x$as_lineno_2" && + test "x$as_lineno_3" = "x$as_lineno_2" || { + # Find who we are. Look in the path if we contain no path at all + # relative or not. + case $0 in + *[\\/]* ) as_myself=$0 ;; + *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in $PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break +done + + ;; + esac + # We did not find ourselves, most probably we were run as `sh COMMAND' + # in which case we are not to be found in the path. + if test "x$as_myself" = x; then + as_myself=$0 + fi + if test ! -f "$as_myself"; then + { { echo "$as_me:$LINENO: error: cannot find myself; rerun with an absolute path" >&5 +echo "$as_me: error: cannot find myself; rerun with an absolute path" >&2;} + { (exit 1); exit 1; }; } + fi + case $CONFIG_SHELL in + '') + as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH +do + IFS=$as_save_IFS + test -z "$as_dir" && as_dir=. + for as_base in sh bash ksh sh5; do + case $as_dir in + /*) + if ("$as_dir/$as_base" -c ' + as_lineno_1=$LINENO + as_lineno_2=$LINENO + as_lineno_3=`(expr $as_lineno_1 + 1) 2>/dev/null` + test "x$as_lineno_1" != "x$as_lineno_2" && + test "x$as_lineno_3" = "x$as_lineno_2" ') 2>/dev/null; then + $as_unset BASH_ENV || test "${BASH_ENV+set}" != set || { BASH_ENV=; export BASH_ENV; } + $as_unset ENV || test "${ENV+set}" != set || { ENV=; export ENV; } + CONFIG_SHELL=$as_dir/$as_base + export CONFIG_SHELL + exec "$CONFIG_SHELL" "$0" ${1+"$@"} + fi;; + esac + done +done +;; + esac + + # Create $as_me.lineno as a copy of $as_myself, but with $LINENO + # uniformly replaced by the line number. The first 'sed' inserts a + # line-number line before each line; the second 'sed' does the real + # work. The second script uses 'N' to pair each line-number line + # with the numbered line, and appends trailing '-' during + # substitution so that $LINENO is not a special case at line end. + # (Raja R Harinath suggested sed '=', and Paul Eggert wrote the + # second 'sed' script. Blame Lee E. McMahon for sed's syntax. :-) + sed '=' <$as_myself | + sed ' + N + s,$,-, + : loop + s,^\(['$as_cr_digits']*\)\(.*\)[$]LINENO\([^'$as_cr_alnum'_]\),\1\2\1\3, + t loop + s,-$,, + s,^['$as_cr_digits']*\n,, + ' >$as_me.lineno && + chmod +x $as_me.lineno || + { { echo "$as_me:$LINENO: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&5 +echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2;} + { (exit 1); exit 1; }; } + + # Don't try to exec as it changes $[0], causing all sort of problems + # (the dirname of $[0] is not the place where we might find the + # original and so on. Autoconf is especially sensible to this). + . ./$as_me.lineno + # Exit status is that of the last command. + exit +} + + +case `echo "testing\c"; echo 1,2,3`,`echo -n testing; echo 1,2,3` in + *c*,-n*) ECHO_N= ECHO_C=' +' ECHO_T=' ' ;; + *c*,* ) ECHO_N=-n ECHO_C= ECHO_T= ;; + *) ECHO_N= ECHO_C='\c' ECHO_T= ;; +esac + +if expr a : '\(a\)' >/dev/null 2>&1; then + as_expr=expr +else + as_expr=false +fi + +rm -f conf$$ conf$$.exe conf$$.file +echo >conf$$.file +if ln -s conf$$.file conf$$ 2>/dev/null; then + # We could just check for DJGPP; but this test a) works b) is more generic + # and c) will remain valid once DJGPP supports symlinks (DJGPP 2.04). + if test -f conf$$.exe; then + # Don't use ln at all; we don't have any links + as_ln_s='cp -p' else - if test -z "$ac_sed_cmds"; then - ac_sed_cmds="sed -f conftest.s$ac_file" - else - ac_sed_cmds="$ac_sed_cmds | sed -f conftest.s$ac_file" - fi - ac_file=`expr $ac_file + 1` - ac_beg=$ac_end - ac_end=`expr $ac_end + $ac_max_sed_cmds` + as_ln_s='ln -s' fi +elif ln conf$$.file conf$$ 2>/dev/null; then + as_ln_s=ln +else + as_ln_s='cp -p' +fi +rm -f conf$$ conf$$.exe conf$$.file + +if mkdir -p . 2>/dev/null; then + as_mkdir_p=: +else + as_mkdir_p=false +fi + +as_executable_p="test -f" + +# Sed expression to map a string onto a valid CPP name. +as_tr_cpp="sed y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g" + +# Sed expression to map a string onto a valid variable name. +as_tr_sh="sed y%*+%pp%;s%[^_$as_cr_alnum]%_%g" + + +# IFS +# We need space, tab and new line, in precisely that order. +as_nl=' +' +IFS=" $as_nl" + +# CDPATH. +$as_unset CDPATH + +exec 6>&1 + +# Open the log real soon, to keep \$[0] and so on meaningful, and to +# report actual input values of CONFIG_FILES etc. instead of their +# values after options handling. Logging --version etc. is OK. +exec 5>>config.log +{ + echo + sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX +## Running $as_me. ## +_ASBOX +} >&5 +cat >&5 <<_CSEOF + +This file was extended by $as_me, which was +generated by GNU Autoconf 2.57. Invocation command line was + + CONFIG_FILES = $CONFIG_FILES + CONFIG_HEADERS = $CONFIG_HEADERS + CONFIG_LINKS = $CONFIG_LINKS + CONFIG_COMMANDS = $CONFIG_COMMANDS + $ $0 $@ + +_CSEOF +echo "on `(hostname || uname -n) 2>/dev/null | sed 1q`" >&5 +echo >&5 +_ACEOF + +# Files that config.status was made for. +if test -n "$ac_config_files"; then + echo "config_files=\"$ac_config_files\"" >>$CONFIG_STATUS +fi + +if test -n "$ac_config_headers"; then + echo "config_headers=\"$ac_config_headers\"" >>$CONFIG_STATUS +fi + +if test -n "$ac_config_links"; then + echo "config_links=\"$ac_config_links\"" >>$CONFIG_STATUS +fi + +if test -n "$ac_config_commands"; then + echo "config_commands=\"$ac_config_commands\"" >>$CONFIG_STATUS +fi + +cat >>$CONFIG_STATUS <<\_ACEOF + +ac_cs_usage="\ +\`$as_me' instantiates files from templates according to the +current configuration. + +Usage: $0 [OPTIONS] [FILE]... + + -h, --help print this help, then exit + -V, --version print version number, then exit + -q, --quiet do not print progress messages + -d, --debug don't remove temporary files + --recheck update $as_me by reconfiguring in the same conditions + --file=FILE[:TEMPLATE] + instantiate the configuration file FILE + +Configuration files: +$config_files + +Report bugs to ." +_ACEOF + +cat >>$CONFIG_STATUS <<_ACEOF +ac_cs_version="\\ +config.status +configured by $0, generated by GNU Autoconf 2.57, + with options \\"`echo "$ac_configure_args" | sed 's/[\\""\`\$]/\\\\&/g'`\\" + +Copyright 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001 +Free Software Foundation, Inc. +This config.status script is free software; the Free Software Foundation +gives unlimited permission to copy, distribute and modify it." +srcdir=$srcdir +_ACEOF + +cat >>$CONFIG_STATUS <<\_ACEOF +# If no file are specified by the user, then we need to provide default +# value. By we need to know if files were specified by the user. +ac_need_defaults=: +while test $# != 0 +do + case $1 in + --*=*) + ac_option=`expr "x$1" : 'x\([^=]*\)='` + ac_optarg=`expr "x$1" : 'x[^=]*=\(.*\)'` + ac_shift=: + ;; + -*) + ac_option=$1 + ac_optarg=$2 + ac_shift=shift + ;; + *) # This is not an option, so the user has probably given explicit + # arguments. + ac_option=$1 + ac_need_defaults=false;; + esac + + case $ac_option in + # Handling of the options. +_ACEOF +cat >>$CONFIG_STATUS <<\_ACEOF + -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) + ac_cs_recheck=: ;; + --version | --vers* | -V ) + echo "$ac_cs_version"; exit 0 ;; + --he | --h) + # Conflict between --help and --header + { { echo "$as_me:$LINENO: error: ambiguous option: $1 +Try \`$0 --help' for more information." >&5 +echo "$as_me: error: ambiguous option: $1 +Try \`$0 --help' for more information." >&2;} + { (exit 1); exit 1; }; };; + --help | --hel | -h ) + echo "$ac_cs_usage"; exit 0 ;; + --debug | --d* | -d ) + debug=: ;; + --file | --fil | --fi | --f ) + $ac_shift + CONFIG_FILES="$CONFIG_FILES $ac_optarg" + ac_need_defaults=false;; + --header | --heade | --head | --hea ) + $ac_shift + CONFIG_HEADERS="$CONFIG_HEADERS $ac_optarg" + ac_need_defaults=false;; + -q | -quiet | --quiet | --quie | --qui | --qu | --q \ + | -silent | --silent | --silen | --sile | --sil | --si | --s) + ac_cs_silent=: ;; + + # This is an error. + -*) { { echo "$as_me:$LINENO: error: unrecognized option: $1 +Try \`$0 --help' for more information." >&5 +echo "$as_me: error: unrecognized option: $1 +Try \`$0 --help' for more information." >&2;} + { (exit 1); exit 1; }; } ;; + + *) ac_config_targets="$ac_config_targets $1" ;; + + esac + shift done -if test -z "$ac_sed_cmds"; then - ac_sed_cmds=cat + +ac_configure_extra_args= + +if $ac_cs_silent; then + exec 6>/dev/null + ac_configure_extra_args="$ac_configure_extra_args --silent" fi -EOF -cat >> $CONFIG_STATUS <>$CONFIG_STATUS <<_ACEOF +if \$ac_cs_recheck; then + echo "running $SHELL $0 " $ac_configure_args \$ac_configure_extra_args " --no-create --no-recursion" >&6 + exec $SHELL $0 $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion +fi -CONFIG_FILES=\${CONFIG_FILES-"Makefile "} -EOF -cat >> $CONFIG_STATUS <<\EOF -for ac_file in .. $CONFIG_FILES; do if test "x$ac_file" != x..; then - # Support "outfile[:infile[:infile...]]", defaulting infile="outfile.in". - case "$ac_file" in - *:*) ac_file_in=`echo "$ac_file"|sed 's%[^:]*:%%'` - ac_file=`echo "$ac_file"|sed 's%:.*%%'` ;; - *) ac_file_in="${ac_file}.in" ;; +_ACEOF + + + + + +cat >>$CONFIG_STATUS <<\_ACEOF +for ac_config_target in $ac_config_targets +do + case "$ac_config_target" in + # Handling of arguments. + "Makefile" ) CONFIG_FILES="$CONFIG_FILES Makefile" ;; + *) { { echo "$as_me:$LINENO: error: invalid argument: $ac_config_target" >&5 +echo "$as_me: error: invalid argument: $ac_config_target" >&2;} + { (exit 1); exit 1; }; };; esac +done - # Adjust a relative srcdir, top_srcdir, and INSTALL for subdirectories. +# If the user did not use the arguments to specify the items to instantiate, +# then the envvar interface is used. Set only those that are not. +# We use the long form for the default assignment because of an extremely +# bizarre bug on SunOS 4.1.3. +if $ac_need_defaults; then + test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files +fi - # Remove last slash and all that follows it. Not all systems have dirname. - ac_dir=`echo $ac_file|sed 's%/[^/][^/]*$%%'` - if test "$ac_dir" != "$ac_file" && test "$ac_dir" != .; then - # The file is in a subdirectory. - test ! -d "$ac_dir" && mkdir "$ac_dir" - ac_dir_suffix="/`echo $ac_dir|sed 's%^\./%%'`" - # A "../" for each directory in $ac_dir_suffix. - ac_dots=`echo $ac_dir_suffix|sed 's%/[^/]*%../%g'` - else - ac_dir_suffix= ac_dots= +# Have a temporary directory for convenience. Make it in the build tree +# simply because there is no reason to put it here, and in addition, +# creating and moving files from /tmp can sometimes cause problems. +# Create a temporary directory, and hook for its removal unless debugging. +$debug || +{ + trap 'exit_status=$?; rm -rf $tmp && exit $exit_status' 0 + trap '{ (exit 1); exit 1; }' 1 2 13 15 +} + +# Create a (secure) tmp directory for tmp files. + +{ + tmp=`(umask 077 && mktemp -d -q "./confstatXXXXXX") 2>/dev/null` && + test -n "$tmp" && test -d "$tmp" +} || +{ + tmp=./confstat$$-$RANDOM + (umask 077 && mkdir $tmp) +} || +{ + echo "$me: cannot create a temporary directory in ." >&2 + { (exit 1); exit 1; } +} + +_ACEOF + +cat >>$CONFIG_STATUS <<_ACEOF + +# +# CONFIG_FILES section. +# + +# No need to generate the scripts if there are no CONFIG_FILES. +# This happens for instance when ./config.status config.h +if test -n "\$CONFIG_FILES"; then + # Protect against being on the right side of a sed subst in config.status. + sed 's/,@/@@/; s/@,/@@/; s/,;t t\$/@;t t/; /@;t t\$/s/[\\\\&,]/\\\\&/g; + s/@@/,@/; s/@@/@,/; s/@;t t\$/,;t t/' >\$tmp/subs.sed <<\\CEOF +s,@SHELL@,$SHELL,;t t +s,@PATH_SEPARATOR@,$PATH_SEPARATOR,;t t +s,@PACKAGE_NAME@,$PACKAGE_NAME,;t t +s,@PACKAGE_TARNAME@,$PACKAGE_TARNAME,;t t +s,@PACKAGE_VERSION@,$PACKAGE_VERSION,;t t +s,@PACKAGE_STRING@,$PACKAGE_STRING,;t t +s,@PACKAGE_BUGREPORT@,$PACKAGE_BUGREPORT,;t t +s,@exec_prefix@,$exec_prefix,;t t +s,@prefix@,$prefix,;t t +s,@program_transform_name@,$program_transform_name,;t t +s,@bindir@,$bindir,;t t +s,@sbindir@,$sbindir,;t t +s,@libexecdir@,$libexecdir,;t t +s,@datadir@,$datadir,;t t +s,@sysconfdir@,$sysconfdir,;t t +s,@sharedstatedir@,$sharedstatedir,;t t +s,@localstatedir@,$localstatedir,;t t +s,@libdir@,$libdir,;t t +s,@includedir@,$includedir,;t t +s,@oldincludedir@,$oldincludedir,;t t +s,@infodir@,$infodir,;t t +s,@mandir@,$mandir,;t t +s,@build_alias@,$build_alias,;t t +s,@host_alias@,$host_alias,;t t +s,@target_alias@,$target_alias,;t t +s,@DEFS@,$DEFS,;t t +s,@ECHO_C@,$ECHO_C,;t t +s,@ECHO_N@,$ECHO_N,;t t +s,@ECHO_T@,$ECHO_T,;t t +s,@LIBS@,$LIBS,;t t +s,@XSLTPROC@,$XSLTPROC,;t t +s,@PDFLATEX@,$PDFLATEX,;t t +s,@XMLTO@,$XMLTO,;t t +s,@LATEX@,$LATEX,;t t +s,@DVIPS@,$DVIPS,;t t +s,@PNGTOPNM@,$PNGTOPNM,;t t +s,@PNMTOPS@,$PNMTOPS,;t t +s,@DOC_BUILD_DATE@,$DOC_BUILD_DATE,;t t +s,@LIBOBJS@,$LIBOBJS,;t t +s,@LTLIBOBJS@,$LTLIBOBJS,;t t +CEOF + +_ACEOF + + cat >>$CONFIG_STATUS <<\_ACEOF + # Split the substitutions into bite-sized pieces for seds with + # small command number limits, like on Digital OSF/1 and HP-UX. + ac_max_sed_lines=48 + ac_sed_frag=1 # Number of current file. + ac_beg=1 # First line for current file. + ac_end=$ac_max_sed_lines # Line after last line for current file. + ac_more_lines=: + ac_sed_cmds= + while $ac_more_lines; do + if test $ac_beg -gt 1; then + sed "1,${ac_beg}d; ${ac_end}q" $tmp/subs.sed >$tmp/subs.frag + else + sed "${ac_end}q" $tmp/subs.sed >$tmp/subs.frag + fi + if test ! -s $tmp/subs.frag; then + ac_more_lines=false + else + # The purpose of the label and of the branching condition is to + # speed up the sed processing (if there are no `@' at all, there + # is no need to browse any of the substitutions). + # These are the two extra sed commands mentioned above. + (echo ':t + /@[a-zA-Z_][a-zA-Z_0-9]*@/!b' && cat $tmp/subs.frag) >$tmp/subs-$ac_sed_frag.sed + if test -z "$ac_sed_cmds"; then + ac_sed_cmds="sed -f $tmp/subs-$ac_sed_frag.sed" + else + ac_sed_cmds="$ac_sed_cmds | sed -f $tmp/subs-$ac_sed_frag.sed" + fi + ac_sed_frag=`expr $ac_sed_frag + 1` + ac_beg=$ac_end + ac_end=`expr $ac_end + $ac_max_sed_lines` + fi + done + if test -z "$ac_sed_cmds"; then + ac_sed_cmds=cat fi +fi # test -n "$CONFIG_FILES" - case "$ac_given_srcdir" in - .) srcdir=. - if test -z "$ac_dots"; then top_srcdir=. - else top_srcdir=`echo $ac_dots|sed 's%/$%%'`; fi ;; - /*) srcdir="$ac_given_srcdir$ac_dir_suffix"; top_srcdir="$ac_given_srcdir" ;; - *) # Relative path. - srcdir="$ac_dots$ac_given_srcdir$ac_dir_suffix" - top_srcdir="$ac_dots$ac_given_srcdir" ;; +_ACEOF +cat >>$CONFIG_STATUS <<\_ACEOF +for ac_file in : $CONFIG_FILES; do test "x$ac_file" = x: && continue + # Support "outfile[:infile[:infile...]]", defaulting infile="outfile.in". + case $ac_file in + - | *:- | *:-:* ) # input from stdin + cat >$tmp/stdin + ac_file_in=`echo "$ac_file" | sed 's,[^:]*:,,'` + ac_file=`echo "$ac_file" | sed 's,:.*,,'` ;; + *:* ) ac_file_in=`echo "$ac_file" | sed 's,[^:]*:,,'` + ac_file=`echo "$ac_file" | sed 's,:.*,,'` ;; + * ) ac_file_in=$ac_file.in ;; esac + # Compute @srcdir@, @top_srcdir@, and @INSTALL@ for subdirectories. + ac_dir=`(dirname "$ac_file") 2>/dev/null || +$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ + X"$ac_file" : 'X\(//\)[^/]' \| \ + X"$ac_file" : 'X\(//\)$' \| \ + X"$ac_file" : 'X\(/\)' \| \ + . : '\(.\)' 2>/dev/null || +echo X"$ac_file" | + sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/; q; } + /^X\(\/\/\)[^/].*/{ s//\1/; q; } + /^X\(\/\/\)$/{ s//\1/; q; } + /^X\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` + { if $as_mkdir_p; then + mkdir -p "$ac_dir" + else + as_dir="$ac_dir" + as_dirs= + while test ! -d "$as_dir"; do + as_dirs="$as_dir $as_dirs" + as_dir=`(dirname "$as_dir") 2>/dev/null || +$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ + X"$as_dir" : 'X\(//\)[^/]' \| \ + X"$as_dir" : 'X\(//\)$' \| \ + X"$as_dir" : 'X\(/\)' \| \ + . : '\(.\)' 2>/dev/null || +echo X"$as_dir" | + sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/; q; } + /^X\(\/\/\)[^/].*/{ s//\1/; q; } + /^X\(\/\/\)$/{ s//\1/; q; } + /^X\(\/\).*/{ s//\1/; q; } + s/.*/./; q'` + done + test ! -n "$as_dirs" || mkdir $as_dirs + fi || { { echo "$as_me:$LINENO: error: cannot create directory \"$ac_dir\"" >&5 +echo "$as_me: error: cannot create directory \"$ac_dir\"" >&2;} + { (exit 1); exit 1; }; }; } + + ac_builddir=. + +if test "$ac_dir" != .; then + ac_dir_suffix=/`echo "$ac_dir" | sed 's,^\.[\\/],,'` + # A "../" for each directory in $ac_dir_suffix. + ac_top_builddir=`echo "$ac_dir_suffix" | sed 's,/[^\\/]*,../,g'` +else + ac_dir_suffix= ac_top_builddir= +fi + +case $srcdir in + .) # No --srcdir option. We are building in place. + ac_srcdir=. + if test -z "$ac_top_builddir"; then + ac_top_srcdir=. + else + ac_top_srcdir=`echo $ac_top_builddir | sed 's,/$,,'` + fi ;; + [\\/]* | ?:[\\/]* ) # Absolute path. + ac_srcdir=$srcdir$ac_dir_suffix; + ac_top_srcdir=$srcdir ;; + *) # Relative path. + ac_srcdir=$ac_top_builddir$srcdir$ac_dir_suffix + ac_top_srcdir=$ac_top_builddir$srcdir ;; +esac +# Don't blindly perform a `cd "$ac_dir"/$ac_foo && pwd` since $ac_foo can be +# absolute. +ac_abs_builddir=`cd "$ac_dir" && cd $ac_builddir && pwd` +ac_abs_top_builddir=`cd "$ac_dir" && cd ${ac_top_builddir}. && pwd` +ac_abs_srcdir=`cd "$ac_dir" && cd $ac_srcdir && pwd` +ac_abs_top_srcdir=`cd "$ac_dir" && cd $ac_top_srcdir && pwd` - echo creating "$ac_file" - rm -f "$ac_file" - configure_input="Generated automatically from `echo $ac_file_in|sed 's%.*/%%'` by configure." - case "$ac_file" in - *Makefile*) ac_comsub="1i\\ -# $configure_input" ;; - *) ac_comsub= ;; - esac - ac_file_inputs=`echo $ac_file_in|sed -e "s%^%$ac_given_srcdir/%" -e "s%:% $ac_given_srcdir/%g"` - sed -e "$ac_comsub -s%@configure_input@%$configure_input%g -s%@srcdir@%$srcdir%g -s%@top_srcdir@%$top_srcdir%g -" $ac_file_inputs | (eval "$ac_sed_cmds") > $ac_file -fi; done -rm -f conftest.s* -EOF -cat >> $CONFIG_STATUS <&5 +echo "$as_me: creating $ac_file" >&6;} + rm -f "$ac_file" + fi + # Let's still pretend it is `configure' which instantiates (i.e., don't + # use $as_me), people would be surprised to read: + # /* config.h. Generated by config.status. */ + if test x"$ac_file" = x-; then + configure_input= + else + configure_input="$ac_file. " + fi + configure_input=$configure_input"Generated from `echo $ac_file_in | + sed 's,.*/,,'` by configure." + + # First look for the input files in the build tree, otherwise in the + # src tree. + ac_file_inputs=`IFS=: + for f in $ac_file_in; do + case $f in + -) echo $tmp/stdin ;; + [\\/$]*) + # Absolute (can't be DOS-style, as IFS=:) + test -f "$f" || { { echo "$as_me:$LINENO: error: cannot find input file: $f" >&5 +echo "$as_me: error: cannot find input file: $f" >&2;} + { (exit 1); exit 1; }; } + echo $f;; + *) # Relative + if test -f "$f"; then + # Build tree + echo $f + elif test -f "$srcdir/$f"; then + # Source tree + echo $srcdir/$f + else + # /dev/null tree + { { echo "$as_me:$LINENO: error: cannot find input file: $f" >&5 +echo "$as_me: error: cannot find input file: $f" >&2;} + { (exit 1); exit 1; }; } + fi;; + esac + done` || { (exit 1); exit 1; } +_ACEOF +cat >>$CONFIG_STATUS <<_ACEOF + sed "$ac_vpsub +$extrasub +_ACEOF +cat >>$CONFIG_STATUS <<\_ACEOF +:t +/@[a-zA-Z_][a-zA-Z_0-9]*@/!b +s,@configure_input@,$configure_input,;t t +s,@srcdir@,$ac_srcdir,;t t +s,@abs_srcdir@,$ac_abs_srcdir,;t t +s,@top_srcdir@,$ac_top_srcdir,;t t +s,@abs_top_srcdir@,$ac_abs_top_srcdir,;t t +s,@builddir@,$ac_builddir,;t t +s,@abs_builddir@,$ac_abs_builddir,;t t +s,@top_builddir@,$ac_top_builddir,;t t +s,@abs_top_builddir@,$ac_abs_top_builddir,;t t +" $ac_file_inputs | (eval "$ac_sed_cmds") >$tmp/out + rm -f $tmp/stdin + if test x"$ac_file" != x-; then + mv $tmp/out $ac_file + else + cat $tmp/out + rm -f $tmp/out + fi + +done +_ACEOF -EOF -cat >> $CONFIG_STATUS <<\EOF +cat >>$CONFIG_STATUS <<\_ACEOF -exit 0 -EOF +{ (exit 0); exit 0; } +_ACEOF chmod +x $CONFIG_STATUS -rm -fr confdefs* $ac_clean_files -test "$no_create" = yes || ${CONFIG_SHELL-/bin/sh} $CONFIG_STATUS || exit 1 +ac_clean_files=$ac_clean_files_save + + +# configure is writing to config.log, and then calls config.status. +# config.status does its own redirection, appending to config.log. +# Unfortunately, on DOS this fails, as config.log is still kept open +# by configure, so config.status won't be able to write to it; its +# output is simply discarded. So we exec the FD to /dev/null, +# effectively closing config.log, so it can be properly (re)opened and +# appended to by config.status. When coming back to configure, we +# need to make the FD available again. +if test "$no_create" != yes; then + ac_cs_success=: + ac_config_status_args= + test "$silent" = yes && + ac_config_status_args="$ac_config_status_args --quiet" + exec 5>/dev/null + $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false + exec 5>>config.log + # Use ||, not &&, to avoid exiting from the if with $? = 1, which + # would make configure fail if this is the last instruction. + $ac_cs_success || { (exit 1); exit 1; } +fi diff --git a/docs/faq/FAQ-ClientApp.html b/docs/faq/FAQ-ClientApp.html index 6e37fbcba59..351e88acfab 100644 --- a/docs/faq/FAQ-ClientApp.html +++ b/docs/faq/FAQ-ClientApp.html @@ -1,4 +1,5 @@ -Chapter3.Specific client application problems

    Chapter3.Specific client application problems
    PrevNext

    Chapter3.Specific client application problems

    Table of Contents

    MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"
    How to use a Samba share as an administrative share for MS Office, etc.
    Microsoft Access database opening errors

    MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"

    + +Chapter3.Specific client application problems

    Chapter3.Specific client application problems
    PrevNext

    Chapter3.Specific client application problems

    Table of Contents

    MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"
    How to use a Samba share as an administrative share for MS Office, etc.
    Microsoft Access database opening errors

    MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"

    When installing MS Office on a Samba drive for which you have admin user permissions, ie. admin users = username, you will find the setup program unable to complete the installation. @@ -10,7 +11,7 @@ rdonly by trying to open it for writing. Admin users can always open a file for writing, as they run as root. You just have to install as a non-admin user and then use "chown -R" to fix the owner. -

    How to use a Samba share as an administrative share for MS Office, etc.

    +

    How to use a Samba share as an administrative share for MS Office, etc.

    Microsoft Office products can be installed as an administrative installation from which the application can either be run off the administratively installed product that resides on a shared resource, or from which that product can be @@ -45,7 +46,7 @@ set the following parameters on the share containing it: public = yes

  • Now you are ready to run the setup program from the Microsoft Windows workstation as follows: \\"Server_Name"\MSOP95\msoffice\setup -

    • Microsoft Access database opening errors

    +

    Microsoft Access database opening errors

    Here are some notes on running MS-Access on a Samba drive from Stefan Kjellberg -

    Opening a database in 'exclusive' mode does NOT work. Samba ignores r/w/share modes on file open.
    Make sure that you open the database as 'shared' and to 'lock modified records'
    Of course locking must be enabled for the particular share (smb.conf)

    -

    PrevUpNext
    Chapter2.Compiling and installing Samba on a Unix hostHomeChapter4.Common errors
    +

    Opening a database in 'exclusive' mode does NOT work. Samba ignores r/w/share modes on file open.
    Make sure that you open the database as 'shared' and to 'lock modified records'
    Of course locking must be enabled for the particular share (smb.conf)
    +
    PrevUpNext
    Chapter2.Compiling and installing Samba on a Unix hostHomeChapter4.Common errors
    diff --git a/docs/faq/FAQ-Install.html b/docs/faq/FAQ-Install.html index 0bb21ed5431..94a80b39539 100644 --- a/docs/faq/FAQ-Install.html +++ b/docs/faq/FAQ-Install.html @@ -1,4 +1,5 @@ -Chapter2.Compiling and installing Samba on a Unix host
    Chapter2.Compiling and installing Samba on a Unix host
    PrevNext

    Chapter2.Compiling and installing Samba on a Unix host

    Table of Contents

    My client reports "cannot locate specified share name" or similar
    Why are my file's timestamps off by an hour, or by a few hours?

    My client reports "cannot locate specified share name" or similar

    + +Chapter2.Compiling and installing Samba on a Unix host

    Chapter2.Compiling and installing Samba on a Unix host
    PrevNext

    Chapter2.Compiling and installing Samba on a Unix host

    Table of Contents

    My client reports "cannot locate specified share name" or similar
    Why are my file's timestamps off by an hour, or by a few hours?

    My client reports "cannot locate specified share name" or similar

    This message indicates that your client CAN locate the specified server, which is a good start, but that it cannot find a service of the name you gave. @@ -7,7 +8,7 @@ The first step is to check the exact name of the service you are trying to connect to (consult your system administrator). Assuming it exists and you specified it correctly (read your client's docs on how to specify a service name correctly), read on: -

    Many clients cannot accept or use service names longer than eight characters.
    Many clients cannot accept or use service names containing spaces.
    Some servers (not Samba though) are case sensitive with service names.
    Some clients force service names into upper case.

    Why are my file's timestamps off by an hour, or by a few hours?

    +

    Many clients cannot accept or use service names longer than eight characters.
    Many clients cannot accept or use service names containing spaces.
    Some servers (not Samba though) are case sensitive with service names.
    Some clients force service names into upper case.

    Why are my file's timestamps off by an hour, or by a few hours?

    This is from Paul Eggert eggert@twinsun.com.

    Most likely it's a problem with your time zone settings. @@ -15,12 +16,12 @@ Most likely it's a problem with your time zone settings. Internally, Samba maintains time in traditional Unix format, namely, the number of seconds since 1970-01-01 00:00:00 Universal Time (or ``GMT''), not counting leap seconds. -

    +

    On the server side, Samba uses the Unix TZ variable to convert internal timestamps to and from local time. So on the server side, there are two things to get right. -

    The Unix system clock must have the correct Universal time. Use the shell command "sh -c 'TZ=UTC0 date'" to check this.
    The TZ environment variable must be set on the server before Samba is invoked. The details of this depend on the server OS, but typically you must edit a file whose name is /etc/TIMEZONE or /etc/default/init, or run the command `zic -l'.

    -

    TZ must have the correct value.

    +
    The Unix system clock must have the correct Universal time. Use the shell command "sh -c 'TZ=UTC0 date'" to check this.
    The TZ environment variable must be set on the server before Samba is invoked. The details of this depend on the server OS, but typically you must edit a file whose name is /etc/TIMEZONE or /etc/default/init, or run the command `zic -l'.
    +

    TZ must have the correct value.

    If possible, use geographical time zone settings (e.g. TZ='America/Los_Angeles' or perhaps TZ=':US/Pacific'). These are supported by most @@ -29,16 +30,16 @@ more accurate for historical timestamps. If your operating system has out-of-date tables, you should be able to update them from the public domain time zone tables at ftp://elsie.nci.nih.gov/pub/. -

    If your system does not support geographical timezone +

    If your system does not support geographical timezone settings, you must use a Posix-style TZ strings, e.g. TZ='PST8PDT,M4.1.0/2,M10.5.0/2' for US Pacific time. Posix TZ strings can take the following form (with optional items in brackets): -

    +
     	StdOffset[Dst[Offset],Date/Time,Date/Time]
-
    
+
    where: -

    `Std' is the standard time designation (e.g. `PST').
    `Offset' is the number of hours behind UTC (e.g. `8'). +
    `Std' is the standard time designation (e.g. `PST').
    `Offset' is the number of hours behind UTC (e.g. `8'). Prepend a `-' if you are ahead of UTC, and append `:30' if you are at a half-hour offset. Omit all the remaining items if you do not use @@ -52,8 +53,8 @@ time starts and ends. The format for a date is of the nth week of the mth month, where week 5 means the last such day in the month. The format for a time is [h]h[:mm[:ss]], using a 24-hour clock. -

    -

    +

    +

    Other Posix string formats are allowed but you don't want to know about them.

    On the client side, you must make sure that your client's clock and diff --git a/docs/faq/FAQ-errors.html b/docs/faq/FAQ-errors.html index f0c4b9aa0ce..5f9a5f54b4e 100644 --- a/docs/faq/FAQ-errors.html +++ b/docs/faq/FAQ-errors.html @@ -1,9 +1,10 @@ -Chapter4.Common errors

    Chapter4.Common errors
    PrevNext

    Chapter4.Common errors

    Table of Contents

    Not listening for calling name
    System Error 1240
    smbclient ignores -N !
    The data on the CD-Drive I've shared seems to be corrupted!

    Not listening for calling name

    -

    +
+Chapter4.Common errors
    Chapter4.Common errors
    PrevNext
    Chapter4.Common errors
    Table of Contents
    Not listening for calling name
    System Error 1240
    smbclient ignores -N !
    The data on the CD-Drive I've shared seems to be corrupted!
    Not listening for calling name
    
+
     Session request failed (131,129) with myname=HOBBES destname=CALVIN
 Not listening for calling name
-
    
-
    
+
    +

    If you get this when talking to a Samba box then it means that your global "hosts allow" or "hosts deny" settings are causing the Samba server to refuse the connection. @@ -14,17 +15,17 @@ global section of smb.conf. It can also be a problem with reverse DNS lookups not functioning correctly, leading to the remote host identity not being able to be confirmed, but that is less likely. -

    System Error 1240

    +

    System Error 1240

    System error 1240 means that the client is refusing to talk to a non-encrypting server. Microsoft changed WinNT in service pack 3 to refuse to connect to servers that do not support SMB password encryption. -

    There are two main solutions: -

    enable SMB password encryption in Samba. See the encryption part of +

    There are two main solutions: +
    enable SMB password encryption in Samba. See the encryption part of the samba HOWTO Collection
    disable this behaviour in NT. See the section about Windows NT in the chapter "Portability" of the samba HOWTO collection -

    -

    smbclient ignores -N !

    +

    +

    smbclient ignores -N !

    “When getting the list of shares available on a host using the command smbclient -N -L the program always prompts for the password if the server is a Samba server. @@ -42,7 +43,7 @@ This will set both the username and password to null, which is an anonymous login for SMB. Using -N would only set the password to null, and this is not accepted as an anonymous login for most SMB servers. -

    The data on the CD-Drive I've shared seems to be corrupted!

    +

    The data on the CD-Drive I've shared seems to be corrupted!

    Some OSes (notably Linux) default to auto detection of file type on cdroms and do cr/lf translation. This is a very bad idea when use with Samba. It causes all sorts of stuff ups. diff --git a/docs/faq/FAQ-features.html b/docs/faq/FAQ-features.html index 75faf8d9bce..29e2b1d2a3d 100644 --- a/docs/faq/FAQ-features.html +++ b/docs/faq/FAQ-features.html @@ -1,21 +1,22 @@ -Chapter5.Features

    Chapter5.Features
    Prev

    Chapter5.Features

    Table of Contents

    How can I use samba as a fax server?
    Tools for printing faxes
    Making the fax-server
    Installing the client drivers
    Example smb.conf
    Samba doesn't work well together with DHCP!
    How can I assign NetBIOS names to clients with DHCP?
    How do I convert between unix and dos text formats?
    Does samba have wins replication support?

    How can I use samba as a fax server?

    Contributor: Gerhard Zuber

    Requirements: -

    UNIX box (Linux preferred) with SAMBA and a faxmodem
    ghostscript package
    mgetty+sendfax package
    pbm package (portable bitmap tools)

    -

    First, install and configure the required packages. Be sure to read the mgetty+sendfax -manual carefully.

    Tools for printing faxes

    Your incomed faxes are in: + +Chapter5.Features

    Chapter5.Features
    Prev

    Chapter5.Features

    Table of Contents

    How can I use samba as a fax server?
    Tools for printing faxes
    Making the fax-server
    Installing the client drivers
    Example smb.conf
    Samba doesn't work well together with DHCP!
    How can I assign NetBIOS names to clients with DHCP?
    How do I convert between unix and dos text formats?
    Does samba have wins replication support?

    How can I use samba as a fax server?

    Contributor: Gerhard Zuber

    Requirements: +
    UNIX box (Linux preferred) with SAMBA and a faxmodem
    ghostscript package
    mgetty+sendfax package
    pbm package (portable bitmap tools)
    +

    First, install and configure the required packages. Be sure to read the mgetty+sendfax +manual carefully.

    Tools for printing faxes

    Your incomed faxes are in: /var/spool/fax/incoming. Print it with:

     for i in *
 do
 g3cat $i | g3tolj | lpr -P hp
 done
-

    -

    + +

    g3cat is in the tools-section, g3tolj is in the contrib-section for printing to HP lasers.

    If you want to produce files for displaying and printing with Windows, use some tools from the pbm-package like the following command: g3cat $i | g3topbm - | ppmtopcx - >$i.pcx and view it with your favourite Windows tool (maybe paintbrush) -

    Making the fax-server

    fetch the file mgetty+sendfax/frontends/winword/faxfilter and place it in /usr/local/etc/mgetty+sendfax/(replace /usr/local/ with whatever place you installed mgetty+sendfax)

    prepare your faxspool file as mentioned in this file +

    Making the fax-server

    fetch the file mgetty+sendfax/frontends/winword/faxfilter and place it in /usr/local/etc/mgetty+sendfax/(replace /usr/local/ with whatever place you installed mgetty+sendfax)

    prepare your faxspool file as mentioned in this file edit fax/faxspool.in and reinstall or change the final /usr/local/bin/faxspool too. 

    @@ -24,16 +25,16 @@ if [ "$user" = "root" -o "$user" = "fax"

    find the first line and change it to the second.

    make sure you have pbmtext (from the pbm-package). This is needed for creating the small header line on each page. -

    Prepare your faxheader /usr/local/etc/mgetty+sendfax/faxheader

    +

    Prepare your faxheader /usr/local/etc/mgetty+sendfax/faxheader

    Edit your /etc/printcap file: -

    +
     # FAX 
 lp3|fax:\
         :lp=/dev/null:\
         :sd=/usr/spool/lp3:\
         :if=/usr/local/etc/mgetty+sendfax/faxfilter:sh:sf:mx#0:\
         :lf=/usr/spool/lp3/fax-log:
-
    Now, edit your smb.conf so you have a smb based printer named "fax"

    Installing the client drivers

    +

    Now, edit your smb.conf so you have a smb based printer named "fax"

    Installing the client drivers

    Now you have a printer called "fax" which can be used via TCP/IP-printing (lpd-system) or via SAMBA (windows printing).

    @@ -54,17 +55,17 @@ your address, your phone/fax-number.

    It carries also the recipient, his address and his *** fax number ***. Now here is the trick: -

    +

    Use the text: -

    +
     Fax-Nr: 123456789
-
    
+
    as the recipients fax-number. Make sure this text does not occur in regular text ! Make sure this text is not broken by formatting information, e.g. format it as a single entity. (Windows Write and Win95 Wordpad are functional, maybe newer versions of Winword are breaking formatting information). -

    +

    The trick is that postscript output is human readable and the faxfilter program scans the text for this pattern and uses the found number as the fax-destination-number. @@ -72,7 +73,7 @@ uses the found number as the fax-destination-number. Now print your fax through the fax-printer and it will be queued for later transmission. Use faxrunq for sending the queue out. -

    Example smb.conf

    +

    Example smb.conf

     [global]
  printcap name = /etc/printcap
  print command = /usr/bin/lpr -r -P %p %s
@@ -88,7 +89,7 @@ queue out.
     create mode = 0700
     browseable = yes
     guest ok = no
-

    Samba doesn't work well together with DHCP!

    +

    Samba doesn't work well together with DHCP!

    We wish to help those folks who wish to use the ISC DHCP Server and provide sample configuration settings. Most operating systems today come ship with the ISC DHCP Server. ISC DHCP is available from: @@ -148,7 +149,7 @@ Server provides only a sub-set of rfc1533 functionality this is hardly an issue in those sites that already have a large investment and commitment to Unix systems and technologies. The current state of the art of the DHCP Server specification in covered in rfc2132. -

    How can I assign NetBIOS names to clients with DHCP?

    +

    How can I assign NetBIOS names to clients with DHCP?

    SMB network clients need to be configured so that all standard TCP/IP name to address resolution works correctly. Once this has been achieved the SMB environment provides additional tools and services that act as helper agents in @@ -163,13 +164,13 @@ This can be done, but needs a few NT registry hacks and you need to be able to speak UNICODE, which is of course no problem for a True Wizzard(tm) :) Instructions on how to do this (including a small util for less capable Wizzards) can be found at -

    http://www.unixtools.org/~nneul/sw/nt/dhcp-netbios-hostname.html

    How do I convert between unix and dos text formats?

    +

    http://www.unixtools.org/~nneul/sw/nt/dhcp-netbios-hostname.html

    How do I convert between unix and dos text formats?

    Jim barry has written an excellent drag-and-drop cr/lf converter for windows. Just drag your file onto the icon and it converts the file.

    The utilities unix2dos and dos2unix(in the mtools package) should do the job under unix. -

    Does samba have wins replication support?

    +

    Does samba have wins replication support?

    At the time of writing there is currently being worked on a wins replication implementation(wrepld).

    PrevUp
    Chapter4.Common errorsHome
    diff --git a/docs/faq/FAQ-general.html b/docs/faq/FAQ-general.html index 4019fb52c60..a0b477eabbb 100644 --- a/docs/faq/FAQ-general.html +++ b/docs/faq/FAQ-general.html @@ -1,4 +1,5 @@ -Chapter1.General Information
    Chapter1.General Information
    PrevNext

    Chapter1.General Information

    Table of Contents

    What do the version numbers mean?
    What platforms are supported?
    How do I subscribe to the Samba Mailing Lists?

    What do the version numbers mean?

    + +Chapter1.General Information

    Chapter1.General Information
    PrevNext

    Chapter1.General Information

    Table of Contents

    What do the version numbers mean?
    What platforms are supported?
    How do I subscribe to the Samba Mailing Lists?

    What do the version numbers mean?

    It is not recommended that you run a version of Samba with the word "alpha" in its name unless you know what you are doing and are willing to do some debugging. Many, many people just get the latest @@ -7,9 +8,9 @@ all means take the plunge and help with the testing and development - but don't install it on your departmental server. Samba is typically very stable and safe, and this is mostly due to the policy of many public releases. -

    +

    How the scheme works: -

    When major changes are made the version number is increased. For +
    When major changes are made the version number is increased. For example, the transition from 1.9.15 to 1.9.16. However, this version number will not appear immediately and people should continue to use 1.9.15 for production systems (see next point.)
    Just after major changes are made the software is considered @@ -19,11 +20,11 @@ doing. The "alpha" in the filename will hopefully scare off those who are just looking for the latest version to install.
    When the release manager, currently Jerry, thinks that the alphas have stabilised to the point where he would recommend new users install it, he renames it to the same version number without the alpha, for example 1.9.16.
    Inevitably bugs are found in the "stable" releases and minor patch -levels are released which give us the pXX series, for example 1.9.16p2.

    -

    +levels are released which give us the pXX series, for example 1.9.16p2.

    + So the progression goes: -

    +
     1.9.15p7	(production)
 1.9.15p8	(production)
 1.9.16alpha1	(test sites only)
@@ -31,17 +32,17 @@ So the progression goes:
 1.9.16alpha20	(test sites only)
 1.9.16		(production)
 1.9.16p1	(production)
-
    
-
    
+
    +

    The above system means that whenever someone looks at the samba ftp site they will be able to grab the highest numbered release without an alpha in the name and be sure of getting the current recommended version. -

    What platforms are supported?

    +

    What platforms are supported?

    Many different platforms have run Samba successfully. The platforms most widely used and thus best tested are Linux and SunOS.

    At time of writing, there is support (or has been support for in earlier versions): -

    A/UX 3.0
    AIX
    Altos Series 386/1000
    Amiga
    Apollo Domain/OS sr10.3
    BSDI
    B.O.S. (Bull Operating System)
    Cray, Unicos 8.0
    Convex
    DGUX.
    DNIX.
    FreeBSD
    HP-UX
    Intergraph.
    Linux with/without shadow passwords and quota
    LYNX 2.3.0
    MachTen (a unix like system for Macintoshes)
    Motorola 88xxx/9xx range of machines
    NetBSD
    NEXTSTEP Release 2.X, 3.0 and greater (including OPENSTEP for Mach).
    OS/2 using EMX 0.9b
    OSF1
    QNX 4.22
    RiscIX.
    RISCOs 5.0B
    SEQUENT.
    SCO (including: 3.2v2, European dist., OpenServer 5)
    SGI.
    SMP_DC.OSx v1.1-94c079 on Pyramid S series
    SONY NEWS, NEWS-OS (4.2.x and 6.1.x)
    SUNOS 4
    SUNOS 5.2, 5.3, and 5.4 (Solaris 2.2, 2.3, and '2.4 and later')
    Sunsoft ISC SVR3V4
    SVR4
    System V with some berkely extensions (Motorola 88k R32V3.2).
    ULTRIX.
    UNIXWARE
    UXP/DS

    How do I subscribe to the Samba Mailing Lists?

    +

    A/UX 3.0
    AIX
    Altos Series 386/1000
    Amiga
    Apollo Domain/OS sr10.3
    BSDI
    B.O.S. (Bull Operating System)
    Cray, Unicos 8.0
    Convex
    DGUX.
    DNIX.
    FreeBSD
    HP-UX
    Intergraph.
    Linux with/without shadow passwords and quota
    LYNX 2.3.0
    MachTen (a unix like system for Macintoshes)
    Motorola 88xxx/9xx range of machines
    NetBSD
    NEXTSTEP Release 2.X, 3.0 and greater (including OPENSTEP for Mach).
    OS/2 using EMX 0.9b
    OSF1
    QNX 4.22
    RiscIX.
    RISCOs 5.0B
    SEQUENT.
    SCO (including: 3.2v2, European dist., OpenServer 5)
    SGI.
    SMP_DC.OSx v1.1-94c079 on Pyramid S series
    SONY NEWS, NEWS-OS (4.2.x and 6.1.x)
    SUNOS 4
    SUNOS 5.2, 5.3, and 5.4 (Solaris 2.2, 2.3, and '2.4 and later')
    Sunsoft ISC SVR3V4
    SVR4
    System V with some berkely extensions (Motorola 88k R32V3.2).
    ULTRIX.
    UNIXWARE
    UXP/DS

    How do I subscribe to the Samba Mailing Lists?

    Look at the samba mailing list page

    PrevUpNext
    Samba FAQHomeChapter2.Compiling and installing Samba on a Unix host
    diff --git a/docs/faq/samba-faq.html b/docs/faq/samba-faq.html index 368b4b6e416..df6205c1389 100644 --- a/docs/faq/samba-faq.html +++ b/docs/faq/samba-faq.html @@ -1,4 +1,5 @@ -Samba FAQ
    Samba FAQ
    Next

    Samba FAQ

    Samba Team

    October 2002

    Dedication

    + +Samba FAQ

    Samba FAQ
    Next

    Samba FAQ

    Samba Team

    October 2002

    Dedication

    This is the Frequently Asked Questions (FAQ) document for Samba, the free and very popular SMB server product. An SMB server allows file and printer connections from clients such as Windows, @@ -7,4 +8,4 @@ corrections to the samba documentation mailinglist at samba-doc@samba.org. This FAQ was based on the old Samba FAQ by Dan Shearer and Paul Blackman, and the old samba text documents which were mostly written by John Terpstra. -

    Table of Contents

    1. General Information
    What do the version numbers mean?
    What platforms are supported?
    How do I subscribe to the Samba Mailing Lists?
    2. Compiling and installing Samba on a Unix host
    My client reports "cannot locate specified share name" or similar
    Why are my file's timestamps off by an hour, or by a few hours?
    3. Specific client application problems
    MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"
    How to use a Samba share as an administrative share for MS Office, etc.
    Microsoft Access database opening errors
    4. Common errors
    Not listening for calling name
    System Error 1240
    smbclient ignores -N !
    The data on the CD-Drive I've shared seems to be corrupted!
    5. Features
    How can I use samba as a fax server?
    Tools for printing faxes
    Making the fax-server
    Installing the client drivers
    Example smb.conf
    Samba doesn't work well together with DHCP!
    How can I assign NetBIOS names to clients with DHCP?
    How do I convert between unix and dos text formats?
    Does samba have wins replication support?
    Next
    Chapter1.General Information
    +

    Table of Contents

    1. General Information
    What do the version numbers mean?
    What platforms are supported?
    How do I subscribe to the Samba Mailing Lists?
    2. Compiling and installing Samba on a Unix host
    My client reports "cannot locate specified share name" or similar
    Why are my file's timestamps off by an hour, or by a few hours?
    3. Specific client application problems
    MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"
    How to use a Samba share as an administrative share for MS Office, etc.
    Microsoft Access database opening errors
    4. Common errors
    Not listening for calling name
    System Error 1240
    smbclient ignores -N !
    The data on the CD-Drive I've shared seems to be corrupted!
    5. Features
    How can I use samba as a fax server?
    Tools for printing faxes
    Making the fax-server
    Installing the client drivers
    Example smb.conf
    Samba doesn't work well together with DHCP!
    How can I assign NetBIOS names to clients with DHCP?
    How do I convert between unix and dos text formats?
    Does samba have wins replication support?
    Next
    Chapter1.General Information
    diff --git a/docs/htmldocs/AccessControls.html b/docs/htmldocs/AccessControls.html index 044d3471075..3b89cb22d05 100644 --- a/docs/htmldocs/AccessControls.html +++ b/docs/htmldocs/AccessControls.html @@ -1,6 +1,7 @@ -Chapter13.File, Directory and Share Access Controls
    Chapter13.File, Directory and Share Access Controls
    PrevPartIII.Advanced ConfigurationNext

    Chapter13.File, Directory and Share Access Controls

    John H. Terpstra

    Samba Team

    Jeremy Allison

    Samba Team

    May 10, 2003

    Table of Contents

    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask - parameters
    Interaction with the standard Samba file attribute - mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files + +Chapter13.File, Directory and Share Access Controls
    Chapter13.File, Directory and Share Access Controls
    PrevPartIII.Advanced ConfigurationNext

    Chapter13.File, Directory and Share Access Controls

    John H. Terpstra

    Samba Team

    Jeremy Allison

    Samba Team

    May 10, 2003

    Table of Contents

    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask + parameters
    Interaction with the standard Samba file attribute + mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files I touch!

    Advanced MS Windows users are frequently perplexed when file, directory and share manipulation of resources shared via Samba do not behave in the manner they might expect. MS Windows network @@ -32,7 +33,7 @@ that are quite different. It was never the intent to make Unix/Linux like MS Win the purpose was an is to provide a sufficient level of exchange of data between the two environments. What is available today extends well beyond early plans and expectations, yet the gap continues to shrink. -

    Features and Benefits

    +

    Features and Benefits

    Samba offers a lot of flexibility in file system access management. These are the key access control facilities present in Samba today:

    Samba Access Control Facilities

    • @@ -72,12 +73,12 @@ shrink. this also. Sadly, few Linux platforms ship today with native ACLs and Extended Attributes enabled. This chapter has pertinent information for users of platforms that support them. -

    File System Access Controls

    +

    File System Access Controls

    Perhaps the most important recognition to be made is the simple fact that MS Windows NT4 / 200x / XP implement a totally divergent file system technology from what is provided in the Unix operating system environment. Firstly we should consider what the most significant differences are, then we shall look at how Samba helps to bridge the differences. -

    MS Windows NTFS Comparison with Unix File Systems

    +

    MS Windows NTFS Comparison with Unix File Systems

    Samba operates on top of the Unix file system. This means it is subject to Unix file system conventions and permissions. It also means that if the MS Windows networking environment requires file system behaviour that differs from unix file system behaviour then somehow Samba is responsible for emulating @@ -141,19 +142,19 @@ at how Samba helps to bridge the differences. There are many other subtle differences that may cause the MS Windows administrator some temporary discomfort in the process of becoming familiar with Unix/Linux. These are best left for a text that is dedicated to the purpose of Unix/Linux training/education. -

    Managing Directories

    +

    Managing Directories

    There are three basic operations for managing directories, create, delete, rename. -

    Table13.1.Managing directories with unix and windows

    ActionMS Windows CommandUnix Command
    createmd foldermkdir folder
    deleterd folderrmdir folder
    renamerename oldname newnamemv oldname newname

    -

    File and Directory Access Control

    +

    Table13.1.Managing directories with unix and windows

    ActionMS Windows CommandUnix Command
    createmd foldermkdir folder
    deleterd folderrmdir folder
    renamerename oldname newnamemv oldname newname
    +

    File and Directory Access Control

    The network administrator is strongly advised to read foundational training manuals and reference materials regarding file and directory permissions maintenance. Much can be achieved with the basic Unix permissions without having to resort to more complex facilities like POSIX Access Control Lists (ACLs) or Extended Attributes (EAs). -

    +

    Unix/Linux file and directory access permissions involves setting three (3) primary sets of data and one (1) control set. A Unix file listing looks as follows:- - 

    +	
     	jht@frodo:~/stuff> ls -la
 	total 632
 	drwxr-xr-x   13 jht   users      816 2003-05-12 22:56 .
@@ -176,13 +177,13 @@ at how Samba helps to bridge the differences.
 	-rw-rw-rw-    1 jht   users    41105 2003-05-12 22:32 mydata06.lst
 	-rwxrwxrwx    1 jht   users    19312 2003-05-12 22:32 mydata07.lst
 	jht@frodo:~/stuff>
-	
    
-	
    
+
    +

    The columns above represent (from left to right): permissions, no blocks used, owner, group, size (bytes), access date, access time, file name. -

    +

    The permissions field is made up of: - 

    +	
     	 JRV: Put this into a diagram of some sort
 	[ type  ] [ users ] [ group ] [ others ]   [File, Directory Permissions]
 	[ d | l ] [ r w x ] [ r w x ] [ r w x  ]
@@ -198,17 +199,17 @@ at how Samba helps to bridge the differences.
 	  |   |     |-----------------------------> Can Read,    Read files
 	  |   |-----------------------------------> Is a symbolic Link
 	  |---------------------------------------> Is a directory
-	
    
-	
    
+
    + Any bit flag may be unset. An unset bit flag is the equivalent of 'Can NOT' and is represented as a '-' character. -

    Example13.1.Example File

    +	
    Example13.1.Example File
     		-rwxr-x---   Means: The owner (user) can read, write, execute
 		                    the group can read and execute
 		                    everyone else can NOT do anything with it
-		
    
+
    -

    +

    Additional possibilities in the [type] field are: c = character device, b = block device, p = pipe device, s = Unix Domain Socket.

    The letters `rwxXst' set permissions for the user, group and others as: read (r), write (w), execute (or access for directories) (x), @@ -228,10 +229,10 @@ at how Samba helps to bridge the differences. the (x) execute flags are not set files can not be listed (seen) in the directory by anyone. The group can read files in the directory but can NOT create new files. NOTE: If files in the directory are set to be readable and writable for the group, then group members will be able to write to (or delete) them. -

    Share Definition Access Controls

    +

    Share Definition Access Controls

    The following parameters in the smb.conf file sections that define a share control or affect access controls. Before using any of the following options please refer to the man page for smb.conf. -

    User and Group Based Controls

    +

    User and Group Based Controls

    User and group based controls can prove very useful. In some situations it is distinctly desirable to affect all file system operations as if a single user is doing this, the use of the force user and force group behaviour will achieve this. In other situations it may be necessary to affect a @@ -243,7 +244,7 @@ Before using any of the following options please refer to the man page for

    Table13.2.User and Group Based Controls

    Control ParameterDescription - Action - Notes
    admin users

    +

    Table13.2.User and Group Based Controls

    Control ParameterDescription - Action - Notes
    admin users

    List of users who will be granted administrative privileges on the share. They will do all file operations as the super-user (root). Any user in this list will be able to do anything they like on the share, @@ -270,12 +271,12 @@ Before using any of the following options please refer to the man page for

    write list

    List of users that are given read-write access to a service. -

    File and Directory Permissions Based Controls

    +

    File and Directory Permissions Based Controls

    The following file and directory permission based controls, if misused, can result in considerable difficulty to diagnose the cause of mis-configuration. Use them sparingly and carefully. By gradually introducing each one by one undesirable side-effects may be detected. In the event of a problem, always comment all of them out and then gradually re-introduce them in a controlled fashion. -

    Table13.3.File and Directory Permission Based Controls

    Control ParameterDescription - Action - Notes
    create mask

    +

    Table13.3.File and Directory Permission Based Controls

    Control ParameterDescription - Action - Notes
    create mask

    Refer to the smb.conf man page.

    directory mask

    The octal modes used when converting DOS modes to UNIX modes when creating UNIX directories. @@ -298,10 +299,10 @@ Before using any of the following options please refer to the man page for

    security mask

    Controls UNIX permission bits modified when a Windows NT client is manipulating the UNIX permissions on a file. -

    Miscellaneous Controls

    +

    Miscellaneous Controls

    The following are documented because of the prevalence of administrators creating inadvertant barriers to file access by not understanding the full implications of smb.conf file settings. -

    Table13.4.Other Controls

    Control ParameterDescription - Action - Notes
    case sensitive, default case, short preserve case

    +

    Table13.4.Other Controls

    Control ParameterDescription - Action - Notes
    case sensitive, default case, short preserve case

    This means that all file name lookup will be done in a case sensitive manner. Files will be created with the precise filename Samba received from the MS Windows client.

    csc policy

    @@ -322,7 +323,7 @@ Before using any of the following options please refer to the man page for

    veto files

    List of files and directories that are neither visible nor accessible. -

    Access Controls on Shares

    +

    Access Controls on Shares

    This section deals with how to configure Samba per share access control restrictions. By default, Samba sets no restrictions on the share itself. Restrictions on the share itself can be set on MS Windows NT4/200x/XP shares. This can be a very effective way to limit who can @@ -339,9 +340,9 @@ Before using any of the following options please refer to the man page for /usr/local/samba/var. If the tdbdump utility has been compiled and installed on your system, then you can examine the contents of this file by: tdbdump share_info.tdb. -

    Share Permissions Management

    +

    Share Permissions Management

    The best tool for the task is platform dependant. Choose the best tool for your environment. -

    Windows NT4 Workstation/Server

    +

    Windows NT4 Workstation/Server

    The tool you need to use to manage share permissions on a Samba server is the NT Server Manager. Server Manager is shipped with Windows NT4 Server products but not with Windows NT4 Workstation. You can obtain the NT Server Manager for MS Windows NT4 Workstation from Microsoft - see details below. @@ -351,7 +352,7 @@ Before using any of the following options please refer to the man page for

  • Now click on the share that you wish to manage, then click on the Properties tab, next click on the Permissions tab. Now you can add or change access control settings as you wish. -

    • Windows 200x/XP

    +

    Windows 200x/XP

    On MS Windows NT4/200x/XP system access control lists on the share itself are set using native tools, usually from filemanager. For example, in Windows 200x: right click on the shared folder, then select Sharing, then click on Permissions. The default @@ -380,7 +381,7 @@ Before using any of the following options please refer to the man page for no access means that MaryK who is part of the group Everyone will have no access even if this user is given explicit full control access. -

    MS Windows Access Control Lists and Unix Interoperability

    Managing UNIX permissions Using NT Security Dialogs

    Windows NT clients can use their native security settings +

    MS Windows Access Control Lists and Unix Interoperability

    Managing UNIX permissions Using NT Security Dialogs

    Windows NT clients can use their native security settings dialog box to view and modify the underlying UNIX permissions.

    Note that this ability is careful not to compromise the security of the UNIX host Samba is running on, and still obeys all the file permission rules that a Samba @@ -391,7 +392,7 @@ Before using any of the following options please refer to the man page for

    Viewing File Security on a Samba Share

    From an NT4/2000/XP client, single-click with the right +

    Viewing File Security on a Samba Share

    From an NT4/2000/XP client, single-click with the right mouse button on any file or directory in a Samba mounted drive letter or UNC path. When the menu pops-up, click on the Properties entry at the bottom of @@ -407,7 +408,7 @@ Before using any of the following options please refer to the man page for Add button will not currently - allow a list of users to be seen.

    Viewing file ownership

    Clicking on the Ownership button + allow a list of users to be seen.

    Viewing file ownership

    Clicking on the Ownership button brings up a dialog box telling you who owns the given file. The owner name will be of the form :

    "SERVER\user (Long name)"

    Where SERVER is the NetBIOS name of the Samba server, user is the user name of @@ -430,7 +431,7 @@ Before using any of the following options please refer to the man page for Seclib NT security library written by Jeremy Allison of - the Samba Team, available from the main Samba ftp site.

    Viewing File or Directory Permissions

    The third button is the Permissions + the Samba Team, available from the main Samba ftp site.

    Viewing File or Directory Permissions

    The third button is the Permissions button. Clicking on this brings up a dialog box that shows both the permissions and the UNIX owner of the file or directory. The owner is displayed in the form :

    "SERVER\ @@ -444,7 +445,7 @@ Before using any of the following options please refer to the man page for "Everyone" and the permissions will be shown as NT "Full Control".

    The permissions field is displayed differently for files and directories, so I'll describe the way file permissions - are displayed first.

    File Permissions

    The standard UNIX user/group/world triplet and + are displayed first.

    File Permissions

    The standard UNIX user/group/world triplet and the corresponding "read", "write", "execute" permissions triplets are mapped by Samba into a three element NT ACL with the 'r', 'w', and 'x' bits mapped into the corresponding @@ -466,7 +467,7 @@ Before using any of the following options please refer to the man page for "O" bit set. This was chosen of course to make it look like a zero, meaning zero permissions. More details on the decision behind this will - be given below.

    Directory Permissions

    Directories on an NT NTFS file system have two + be given below.

    Directory Permissions

    Directories on an NT NTFS file system have two different sets of permissions. The first set of permissions is the ACL set on the directory itself, this is usually displayed in the first set of parentheses in the normal "RW" @@ -477,7 +478,7 @@ Before using any of the following options please refer to the man page for permissions that any file created within this directory would inherit.

    Samba synthesises these inherited permissions for NT by returning as an NT ACL the UNIX permission mode that a new file - created by Samba on this share would receive.

    Modifying file or directory permissions

    Modifying file and directory permissions is as simple + created by Samba on this share would receive.

    Modifying file or directory permissions

    Modifying file and directory permissions is as simple as changing the displayed permissions in the dialog box, and clicking the OK button. However, there are limitations that a user needs to be aware of, and also interactions @@ -511,14 +512,14 @@ Before using any of the following options please refer to the man page for Remove button, or set the component to only have the special Take Ownership permission (displayed as "O" - ) highlighted.

    Interaction with the standard Samba create mask - parameters

    There are four parameters + ) highlighted.

    Interaction with the standard Samba create mask + parameters

    There are four parameters to control interaction with the standard Samba create mask parameters. These are : -

    security mask
    force security mode
    directory security mask
    force directory security mode

    +
    security mask
    force security mode
    directory security mask
    force directory security mode
    -

    Once a user clicks OK to apply the +

    Once a user clicks OK to apply the permissions Samba maps the given permissions into a user/group/world r/w/x triplet set, and then will check the changed permissions for a file against the bits set in the @@ -558,7 +559,7 @@ Before using any of the following options please refer to the man page for smb.conf file in that share specific section : -

    security mask = 0777
    force security mode = 0
    directory security mask = 0777
    force directory security mode = 0

    Interaction with the standard Samba file attribute +

    security mask = 0777
    force security mode = 0
    directory security mask = 0777
    force directory security mode = 0

    Interaction with the standard Samba file attribute mapping

    Samba maps some of the DOS attribute bits (such as "read only") into the UNIX permissions of a file. This means there can be a conflict between the permission bits set via the security @@ -575,10 +576,10 @@ Before using any of the following options please refer to the man page for OK to get back to the attributes dialog you should always hit Cancel rather than OK to ensure that your changes - are not overridden.

    Common Errors

    + are not overridden.

    Common Errors

    File, Directory and Share access problems are very common on the mailing list. The following are examples taken from the mailing list in recent times. -

    Users can not write to a public share

    +

    Users can not write to a public share

    “ We are facing some troubles with file / directory permissions. I can log on the domain as admin user(root), and there's a public share, on which everyone needs to have permission to create / modify files, but only @@ -589,71 +590,71 @@ are examples taken from the mailing list in recent times. There are many ways to solve this problem, here are a few hints:

    Procedure13.3.Example Solution:

    1. Go to the top of the directory that is shared -

    2. +

    3. Set the ownership to what ever public owner and group you want - 

      +			
       			find 'directory_name' -type d -exec chown user.group {}\;
 			find 'directory_name' -type d -exec chmod 6775 'directory_name'
 			find 'directory_name' -type f -exec chmod 0775 {} \;
 			find 'directory_name' -type f -exec chown user.group {}\;
-			
      
-			
      Note
      
+
      +

      Note

      The above will set the 'sticky bit' on all directories. Read your Unix/Linux man page on what that does. It causes the OS to assign to all files created in the directories the ownership of the directory. -

    4. +

  • Directory is: /foodbar - 

    +			
     				$ chown jack.engr /foodbar
-			
    
-			
    Note
    
-				
    This is the same as doing:
    
-				
    +			
    
+			
    Note
    
+				
    This is the same as doing:
    
+				
     					$ chown jack /foodbar
 					$ chgrp engr /foodbar
-				
    
-

  • Now do: + +

  • Now do: - 

    +			
     				$ chmod 6775 /foodbar
 				$ ls -al /foodbar/..
-			
    
+
    -

    You should see: - 

    +			You should see:
+			
     				drwsrwsr-x  2 jack  engr    48 2003-02-04 09:55 foodbar
-			
    
-

  • Now do: - 

    +
    +
  • Now do: + 
     				$ su - jill
 				$ cd /foodbar
 				$ touch Afile
 				$ ls -al
-

    -

    + + You should see that the file Afile created by Jill will have ownership and permissions of Jack, as follows: - 

    +		
     		-rw-r--r--  1 jack  engr     0 2003-02-04 09:57 Afile
-		
    
-

  • + +

  • Now in your smb.conf for the share add: - 

    +		
     		force create mode = 0775
 		force directory mode = 6775
-		
    
-		
    Note
    
+
    +

    Note

    The above are only needed if your users are not members of the group you have used. ie: Within the OS do not have write permission on the directory. -

    +

    • An alternative is to set in the smb.conf entry for the share: - 

    +		
     		force user = jack
 		force group = engr
-		
    
-

    I have set force user and Samba still makes root the owner of all the files + +

    I have set force user and Samba still makes root the owner of all the files I touch!

    When you have a user in 'admin users', Samba will always do file operations for this user as root, even if force user has been set. diff --git a/docs/htmldocs/AdvancedNetworkManagement.html b/docs/htmldocs/AdvancedNetworkManagement.html index 296c684e240..7cddecd38c1 100644 --- a/docs/htmldocs/AdvancedNetworkManagement.html +++ b/docs/htmldocs/AdvancedNetworkManagement.html @@ -1,8 +1,9 @@ -Chapter22.Advanced Network Management

    Chapter22.Advanced Network Management
    PrevPartIII.Advanced ConfigurationNext

    Chapter22.Advanced Network Management

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors

    + +Chapter22.Advanced Network Management

    Chapter22.Advanced Network Management
    PrevPartIII.Advanced ConfigurationNext

    Chapter22.Advanced Network Management

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors

    This section documents peripheral issues that are of great importance to network administrators who want to improve network resource access control, to automate the user environment, and to make their lives a little easier. -

    Features and Benefits

    +

    Features and Benefits

    Often the difference between a working network environment and a well appreciated one can best be measured by the little things that makes everything work more harmoniously. A key part of every network environment solution is the ability to remotely @@ -12,7 +13,7 @@ network operations.

    This chapter presents information on each of these area. They are placed here, and not in other chapters, for ease of reference. -

    Remote Server Administration

    +

    Remote Server Administration

    How do I get 'User Manager' and 'Server Manager'?

    Since I don't need to buy an NT4 Server, how do I get the 'User Manager for Domains', @@ -26,17 +27,17 @@ Click here to download the archived file Windows NT 4.0 version of the 'User Manager for Domains' and 'Server Manager' are available from Microsoft via ftp from ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE -

    Remote Desktop Management

    +

    Remote Desktop Management

    There are a number of possible remote desktop management solutions that range from free through costly. Do not let that put you off. Sometimes the most costly solutions is the most cost effective. In any case, you will need to draw your own conclusions as to which is the best tool in your network environment. -

    Remote Management from NoMachines.Com

    +

    Remote Management from NoMachines.Com

    The following information was posted to the Samba mailing list at Apr 3 23:33:50 GMT 2003. It is presented in slightly edited form (with author details omitted for privacy reasons). The entire answer is reproduced below with some comments removed. -

    -

    +	
    
+
     > I have a wonderful linux/samba server running as PDC for a network.
 > Now I would like to add remote desktop capabilities so that
 > users outside could login to the system and get their desktop up from
@@ -48,8 +49,8 @@ is the best tool in your network environment.
 > even if the computer is in a domain?
 >
 > Any ideas/experience would be appreciated :)
-
    
-
    
+
    +

    Answer provided: Check out the new offer from NoMachine, "NX" software: http://www.nomachine.com/.

    @@ -119,7 +120,7 @@ is the best tool in your network environment. NoMachine are encouraging and offering help to OSS/Free Software implementations for such a frontend too, even if it means competition to them (they have written to this effect even to the LTSP, KDE and GNOME developer mailing lists) -

    Network Logon Script Magic

    +

    Network Logon Script Magic

    This section needs work. Volunteer contributions most welcome. Please send your patches or updates to John Terpstra.

    @@ -131,10 +132,10 @@ See examples directory genlogonntlogon subdirectories.

    The following listings are from the genlogon directory. -

    +

    This is the genlogon.pl file: -

    +
     	#!/usr/bin/perl
 	#
 	# genlogon.pl
@@ -206,18 +207,18 @@ This is the genlogon.pl file:
 
 	# All done! Close the output file.
 	close LOGON;
-
    
-
    
+
    +

    Those wishing to use more elaborate or capable logon processing system should check out the following sites: -

    http://www.craigelachie.org/rhacer/ntlogon
    http://www.kixtart.org
    http://support.microsoft.com/default.asp?scid=kb;en-us;189105

    Adding printers without user intervention

    +

    http://www.craigelachie.org/rhacer/ntlogon
    http://www.kixtart.org
    http://support.microsoft.com/default.asp?scid=kb;en-us;189105

    Adding printers without user intervention

    Printers may be added automatically during logon script processing through the use of: -

    +
     	rundll32 printui.dll,PrintUIEntry /?
-
    
+
    See the documentation in the Microsoft knowledgebase article no: 189105. -

    Common Errors

    +

    Common Errors

    The information provided in this chapter has been reproduced from postings on the samba@samba.org mailing list. No implied endorsement or recommendation is offered. Administrators should conduct their own evaluation of alternatives and are encouraged to draw their own conclusions. diff --git a/docs/htmldocs/Appendixes.html b/docs/htmldocs/Appendixes.html index 854437acded..ab96964c134 100644 --- a/docs/htmldocs/Appendixes.html +++ b/docs/htmldocs/Appendixes.html @@ -1,4 +1,5 @@ -PartVI.Appendixes

    PartVI.Appendixes
    PrevNext

    Appendixes

    Table of Contents

    36. How to compile SAMBA
    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors
    37. Portability
    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9
    38. Samba and other CIFS clients
    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working - for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1
    39. Samba Performance Tuning
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    40. DNS and DHCP Configuration Guide
    Note
    41. Further Resources
    Websites
    Related updates from Microsoft
    Books
    PrevUpNext
    Chapter35.Reporting BugsHomeChapter36.How to compile SAMBA
    + +PartVI.Appendixes
    PartVI.Appendixes
    PrevNext

    Appendixes

    Table of Contents

    36. How to compile SAMBA
    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors
    37. Portability
    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9
    38. Samba and other CIFS clients
    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working + for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1
    39. Samba Performance Tuning
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    40. DNS and DHCP Configuration Guide
    Note
    41. Further Resources
    Websites
    Related updates from Microsoft
    Books
    PrevUpNext
    Chapter35.Reporting BugsHomeChapter36.How to compile SAMBA
    diff --git a/docs/htmldocs/Backup.html b/docs/htmldocs/Backup.html index 9fac4520233..392e14c6451 100644 --- a/docs/htmldocs/Backup.html +++ b/docs/htmldocs/Backup.html @@ -1,9 +1,10 @@ -Chapter28.Samba Backup Techniques
    Chapter28.Samba Backup Techniques
    PrevPartIII.Advanced ConfigurationNext

    Chapter28.Samba Backup Techniques

    John H. Terpstra

    Samba Team

    Table of Contents

    Note
    Features and Benefits

    Note

    + +Chapter28.Samba Backup Techniques

    Chapter28.Samba Backup Techniques
    PrevPartIII.Advanced ConfigurationNext

    Chapter28.Samba Backup Techniques

    John H. Terpstra

    Samba Team

    Table of Contents

    Note
    Features and Benefits

    Note

    This chapter did not make it into this release. It is planned for the published release of this document. If you have something to contribute for this section please email it to jht@samba.org/ -

    Features and Benefits

    +

    Features and Benefits

    We need feedback from people who are backing up samba servers. We would like to know what software tools you are using to backup your samba server/s. diff --git a/docs/htmldocs/CUPS-printing.html b/docs/htmldocs/CUPS-printing.html index 46ca8e15f7f..dff70b17265 100644 --- a/docs/htmldocs/CUPS-printing.html +++ b/docs/htmldocs/CUPS-printing.html @@ -1,21 +1,22 @@ -Chapter19.CUPS Printing Support in Samba 3.0

    Chapter19.CUPS Printing Support in Samba 3.0
    PrevPartIII.Advanced ConfigurationNext

    Chapter19.CUPS Printing Support in Samba 3.0

    Kurt Pfeifle

    Danka Deutschland GmbH

    Ciprian Vizitiu

    drawings

    (3 June 2003)

    Table of Contents

    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for -CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for -application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and -native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print -Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many -Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel -Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for -cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the -Client
    Installing PostScript Driver Files manually (using -rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to -CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached -Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing -Problems
    An Overview of the CUPS Printing Processes

    Introduction

    Features and Benefits

    + +Chapter19.CUPS Printing Support in Samba 3.0

    Chapter19.CUPS Printing Support in Samba 3.0
    PrevPartIII.Advanced ConfigurationNext

    Chapter19.CUPS Printing Support in Samba 3.0

    Kurt Pfeifle

    Danka Deutschland GmbH

    Ciprian Vizitiu

    drawings

    (3 June 2003)

    Table of Contents

    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for +CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for +application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and +native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print +Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many +Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel +Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for +cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the +Client
    Installing PostScript Driver Files manually (using +rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to +CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached +Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing +Problems
    An Overview of the CUPS Printing Processes

    Introduction

    Features and Benefits

    The Common Unix Print System (CUPS) has become very popular. All big Linux distributions now ship it as their default printing system. But to many it is still a very mystical tool. Normally it @@ -40,7 +41,7 @@ Problems

    An Overview of the C contained. But lets start with the most basic things first. Maybe this is all you need for now. Then you can skip most of the other paragraphs. -

    Overview

    +

    Overview

    CUPS is more than just a print spooling system. It is a complete printer management system that complies with the new IPP (Internet Printing Protocol). IPP is an industry @@ -60,7 +61,7 @@ Problems

    An Overview of the C argue that CUPS is better! In any case, let us now move on to explore how one may configure CUPS for interfacing with MS Windows print clients via Samba. -

    Basic Configuration of CUPS support

    +

    Basic Configuration of CUPS support

    Printing with CUPS in the most basic smb.conf setup in Samba 3.0 (as was true for 2.2.x) only needs two settings: printing = cups and printcap @@ -76,7 +77,7 @@ Problems

    An Overview of the C details see man cupsd.conf and other CUPS-related documentation, like the wealth of documents on your CUPS server itself: http://localhost:631/documentation.html. -

    Linking of smbd with libcups.so

    +

    Linking of smbd with libcups.so

    Samba has a very special relationship to CUPS. The reason is: Samba can be compiled with CUPS library support. Most recent installations have this support enabled, and per default CUPS linking is compiled @@ -113,7 +114,7 @@ Problems

    An Overview of the C print command; other commands are lppause command, lpresume command, lpq command, lprm command, queuepause command and queue resume - command).

    Simple smb.conf Settings for CUPS

    + command).

    Simple smb.conf Settings for CUPS

    To summarize, here is the simplest printing-related setup for smb.conf to enable basic CUPS support: 

    @@ -148,7 +149,7 @@ Problems
    An Overview of the C
 			printer is not a PostScript device, the print data stream is "binary",
 			sensible only for the target printer. Read on to learn which problem
 			this may cause and how to avoid it.
-

    More complex smb.conf Settings for +

    More complex smb.conf Settings for CUPS

    Here is a slightly more complex printing-related setup for smb.conf. It enables general CUPS printing @@ -199,13 +200,13 @@ allowing access from three hosts. To prevent CUPS kicking in and taking over the print jobs for that share, we need to set printing = sysv and printcap = lpstat. -

    Advanced Configuration

    +

    Advanced Configuration

    Before we dive into all the configuration options, let's clarify a few points. Network printing needs to be organized and setup correctly. Often this is not done correctly. Legacy systems or small LANs in business environments often lack a clear design and good housekeeping. -

    Central spooling vs. "Peer-to-Peer" printing

    +

    Central spooling vs. "Peer-to-Peer" printing

    Many small office or home networks, as well as badly organized larger environments, allow each client a direct access to available network printers. Generally, this is a bad idea. It often blocks one client's @@ -217,7 +218,7 @@ is the usage of a "print server": it routes all jobs through one central system, which responds immediately, takes jobs from multiple concurrent clients at the same time and in turn transfers them to the printer(s) in the correct order. -

    CUPS/Samba as a "spooling-only" Print Server; "raw" printing +

    CUPS/Samba as a "spooling-only" Print Server; "raw" printing with Vendor Drivers on Windows Clients

    Most traditionally configured Unix print servers acting on behalf of Samba's Windows clients represented a really simple setup. Their only @@ -236,7 +237,7 @@ sent in a format that is suitable for direct delivery to the printer. Clients need to run the vendor-provided drivers to do this. In this case CUPS will NOT do any print file format conversion work. -

    Driver Installation Methods on Windows Clients

    +

    Driver Installation Methods on Windows Clients

    The printer drivers on the Windows clients may be installed in two functionally different ways:

    • manually install the drivers locally on each client, @@ -249,7 +250,7 @@ first time they access the printer; with this method NT/2K/XP clients use the SPOOLSS/MS-RPC type printing calls.

    The second method is recommended for use over the first. -

    Explicitly enable "raw" printing for +

    Explicitly enable "raw" printing for application/octet-stream!

    If you use the first option (drivers are installed on the client side), there is one setting to take care of: CUPS needs to be told @@ -298,7 +299,7 @@ This is all you need to know to get the CUPS/Samba combo printing locally installed. If you are not interested in background information about more advanced CUPS/Samba printing, simply skip the remaining sections of this chapter. -

    Three familiar Methods for driver upload plus a new one

    +

    Three familiar Methods for driver upload plus a new one

    If you want to use the MS-RPC type printing, you must upload the drivers onto the Samba server first ([print$] share). For a discussion on how to deposit printer drivers on the @@ -320,7 +321,7 @@ utility.

    cupsaddsmb is discussed in much detail further below. But we will first explore the CUPS filtering system and compare the Windows and UNIX printing architectures. -

    Using CUPS/Samba in an advanced Way -- intelligent printing +

    Using CUPS/Samba in an advanced Way -- intelligent printing with PostScript Driver Download

    Still reading on? Good. Let's go into more detail then. We now know how to set up a "dump" printserver, that is, a server which is spooling @@ -345,7 +346,7 @@ how CUPS works and how you can enable its features. What follows is the comparison of some fundamental concepts for Windows and Unix printing; then is the time for a description of the CUPS filtering system, how it works and how you can tweak it. -

    GDI on Windows -- PostScript on Unix

    +

    GDI on Windows -- PostScript on Unix

    Network printing is one of the most complicated and error-prone day-to-day tasks any user or an administrator may encounter. This is true for all OS platforms. And there are reasons for this. @@ -361,7 +362,7 @@ into semi-official "standards", by being the most widely used PDLs many manufacturers who "roll their own" (their reasons may be unacceptable license fees for using printer-embedded PostScript interpreters, etc.). -

    Windows Drivers, GDI and EMF

    +

    Windows Drivers, GDI and EMF

    In Windows OS, the format conversion job is done by the printer drivers. On MS Windows OS platforms all application programmers have at their disposal a built-in API, the GDI (Graphical Device @@ -383,10 +384,10 @@ put paper and screen output on a common foundation for their (BSD-Unix-based, did you know??) Mac OS X and Darwin Operating Systems.Their Core Graphic Engine uses a PDF derivate for all display work. -

    +

    -

    Figure19.1.Windows Printing to a local Printer

    Windows Printing to a local Printer

    -

    Unix Printfile Conversion and GUI Basics

    +

    Figure19.1.Windows Printing to a local Printer

    Windows Printing to a local Printer
    +

    Unix Printfile Conversion and GUI Basics

    In Unix and Linux, there is no comparable layer built into the OS kernel(s) or the X (screen display) server. Every application is responsible for itself to create its print output. Fortunately, most @@ -422,7 +423,7 @@ form and you will be reading its PostScript code, the language instructions which need to be interpreted by a rasterizer. Rasterizers produce pixel images, which may be displayed on screen by a viewer program or on paper by a printer. -

    PostScript and Ghostscript

    +

    PostScript and Ghostscript

    So, Unix is lacking a common ground for printing on paper and displaying on screen. Despite this unfavorable legacy for Unix, basic printing is fairly easy: if you have PostScript printers at your @@ -441,9 +442,9 @@ options a printer supports: duplexing, stapling, punching... Therefore Unix users for a long time couldn't choose many of the supported device and job options, unlike Windows or Apple users. But now there is CUPS.... ;-) -

    -

    Figure19.2.Printing to a Postscript Printer

    Printing to a Postscript Printer

    -

    +

    +

    Figure19.2.Printing to a Postscript Printer

    Printing to a Postscript Printer
    +

    However, there are other types of printers out there. These don't know how to print PostScript. They use their own Page Description Language (PDL, often proprietary). To print to them is much @@ -451,7 +452,7 @@ more demanding. Since your Unix applications mostly produce PostScript, and since these devices don't understand PostScript, you need to convert the printfiles to a format suitable for your printer on the host, before you can send it away. -

    Ghostscript -- the Software RIP for non-PostScript Printers

    +

    Ghostscript -- the Software RIP for non-PostScript Printers

    Here is where Ghostscript kicks in. Ghostscript is the traditional (and quite powerful) PostScript interpreter used on Unix platforms. It is a RIP in software, capable to do a @@ -459,9 +460,9 @@ Unix platforms. It is a RIP in software, capable to do a spectrum of hardware devices as well as software file formats. Ghostscript technology and drivers is what enables PostScript printing to non-PostScript hardware. -

    -

    Figure19.3.Ghostscript as a RIP for non-postscript printers

    Ghostscript as a RIP for non-postscript printers

    -

    Tip

    +

    +

    Figure19.3.Ghostscript as a RIP for non-postscript printers

    Ghostscript as a RIP for non-postscript printers
    +

    Tip

    Use the "gs -h" command to check for all built-in "devices" of your Ghostscript version. If you specify e.g. a parameter of -sDEVICE=png256 on your Ghostscript command @@ -478,7 +479,7 @@ enhancement over GNU Ghostscript, with lots of bug-fixes, additional devices and improvements. It is jointly maintained by developers from CUPS, Gimp-Print, MandrakeSoft, SuSE, RedHat and Debian. It includes the "cups" device (essential to print to non-PS printers from CUPS). -

    PostScript Printer Description (PPD) Specification

    +

    PostScript Printer Description (PPD) Specification

    While PostScript in essence is a Page Description Language (PDL) to represent the page layout in a device independent way, real world print jobs are @@ -509,7 +510,7 @@ for achieving a certain print job output (e.g. duplexed, stapled and punched) on a specific target machine, may not print as expected, or may not be printable at all on other models; it also may not be fit for further processing by software (e.g. by a PDF distilling program). -

    CUPS can use all Windows-formatted Vendor PPDs

    +

    CUPS can use all Windows-formatted Vendor PPDs

    CUPS can handle all spec-compliant PPDs as supplied by the manufacturers for their PostScript models. Even if a Unix/Linux-illiterate vendor might not have mentioned our favorite @@ -536,7 +537,7 @@ your LAN has the PostScript driver installed, just use access the Windows directory where all printer driver files are stored. First look in the W32X86/2 subdir for the PPD you are seeking. -

    CUPS also uses PPDs for non-PostScript Printers

    +

    CUPS also uses PPDs for non-PostScript Printers

    CUPS also uses specially crafted PPDs to handle non-PostScript printers. These PPDs are usually not available from the vendors (and no, you can't just take the PPD of a Postscript printer with the same @@ -544,7 +545,7 @@ model name and hope it works for the non-PostScript version too). To understand how these PPDs work for non-PS printers we first need to dive deeply into the CUPS filtering and file format conversion architecture. Stay tuned. -

    The CUPS Filtering Architecture

    +

    The CUPS Filtering Architecture

    The core of the CUPS filtering system is based on Ghostscript. In addition to Ghostscript, CUPS uses some other filters of its own. You (or your OS vendor) may have @@ -586,7 +587,7 @@ others. However, even for Foomatic/cupsomatic usage, best results and broadest printer model support is provided by ESP Ghostscript (more about cupsomatic/Foomatic, particularly the new version called now foomatic-rip, follows below). -

    MIME types and CUPS Filters

    +

    MIME types and CUPS Filters

    CUPS reads the file /etc/cups/mime.types (and all other files carrying a *.types suffix in the same directory) upon startup. These files contain the MIME @@ -639,7 +640,7 @@ CUPS can handle ASCII text, HP-GL, PDF, PostScript, DVI and a lot of image formats (GIF. PNG, TIFF, JPEG, Photo-CD, SUN-Raster, PNM, PBM, SGI-RGB and some more) and their associated MIME types with its filters. -

    MIME type Conversion Rules

    +

    MIME type Conversion Rules

    CUPS reads the file /etc/cups/mime.convs (and all other files named with a *.convs suffix in the same directory) upon startup. These files contain @@ -680,7 +681,7 @@ The last two examples name the texttops f to work on "text/plain" as well as on "application/x-shell". (Hint: this differentiation is needed for the syntax highlighting feature of "texttops"). -

    Filter Requirements

    +

    Filter Requirements

    There are many more combinations named in mime.convs. However, you are not limited to use the ones pre-defined there. You can plug in any filter you like into the CUPS framework. It must meet, or must be made @@ -701,7 +702,7 @@ attribute

    Printer

    The string fr attribute

    Printer

    The job options

    Printer

    (Optionally) The print request file (if missing, filters expected data fed through stdin). In most cases it is very easy to write a simple wrapper script around existing -filters to make them work with CUPS.

    Prefilters

    +filters to make them work with CUPS.

    Prefilters

    As was said, PostScript is the central file format to any Unix based printing system. From PostScript, CUPS generates raster data to feed non-PostScript printers. @@ -718,18 +719,18 @@ the imagetops filter. Its outcome is alwa MIME type application/vnd.cups-postscript (not application/postscript), meaning it has the print options already embedded into the file. -

    -

    Figure19.4.Prefiltering in CUPS to form Postscript

    Prefiltering in CUPS to form Postscript

    -

    pstops

    +

    +

    Figure19.4.Prefiltering in CUPS to form Postscript

    Prefiltering in CUPS to form Postscript
    +

    pstops

    pstopsis the filter to convert application/postscript to application/vnd.cups-postscript. It was said above that this filter inserts all device-specific print options (commands to the printer to ask for the duplexing of output, or stapling an punching it, etc.) into the PostScript file. -

    -

    Figure19.5.Adding Device-specific Print Options

    Adding Device-specific Print Options

    -

    +

    +

    Figure19.5.Adding Device-specific Print Options

    Adding Device-specific Print Options
    +

    This is not all: other tasks performed by it are:

    • selecting the range of pages to be printed (if you choose to @@ -740,7 +741,7 @@ putting 2 or more logical pages on one sheet of paper (the so-called "number-up" function)

    • counting the pages of the job to insert the accounting information into the /var/log/cups/page_log -

    pstoraster

    +

    pstoraster

    pstoraster is at the core of the CUPS filtering system. It is responsible for the first stage of the rasterization process. Its input is of MIME type application/vnd.cups-postscript; @@ -748,9 +749,9 @@ its output is application/vnd.cups-raster. This output format is not yet meant to be printable. Its aim is to serve as a general purpose input format for more specialized raster drivers, that are able to generate device-specific printer data. -

    -

    Figure19.6.Postscript to intermediate Raster format

    Postscript to intermediate Raster format

    -

    +

    +

    Figure19.6.Postscript to intermediate Raster format

    Postscript to intermediate Raster format
    +

    CUPS raster is a generic raster format with powerful features. It is able to include per-page information, color profiles and more to be used by the following downstream raster drivers. Its MIME type is @@ -761,9 +762,9 @@ printer models, should they choose to do so. CUPS always takes care for the first stage of rasterization so these vendors don't need to care about Ghostscript complications (in fact, there is currently more than one vendor financing the development of CUPS raster drivers). -

    -

    Figure19.7.CUPS-raster production using Ghostscript

    CUPS-raster production using Ghostscript

    -

    +

    +

    Figure19.7.CUPS-raster production using Ghostscript

    CUPS-raster production using Ghostscript
    +

    CUPS versions before version 1.1.15 were shipping a binary (or source code) standalone filter, named "pstoraster". pstoraster was derived from GNU Ghostscript 5.50, and could be installed besides and in @@ -776,16 +777,16 @@ integrated back into Ghostscript (now based on GNU Ghostscript version parameter. If your Ghostscript doesn't show a success on asking for gs -h |grep cups, you might not be able to print. Update your Ghostscript then! -

    imagetops and imagetoraster

    +

    imagetops and imagetoraster

    Above in the section about prefilters, we mentioned the prefilter that generates PostScript from image formats. The imagetoraster filter is used to convert directly from image to raster, without the intermediate PostScript stage. It is used more often than the above mentioned prefilters. Here is a summarizing flowchart of image file filtering: -

    -

    Figure19.8.Image format to CUPS-raster format conversion

    Image format to CUPS-raster format conversion

    -

    rasterto [printers specific]

    +

    +

    Figure19.8.Image format to CUPS-raster format conversion

    Image format to CUPS-raster format conversion
    +

    rasterto [printers specific]

    CUPS ships with quite some different raster drivers processing CUPS raster. On my system I find in /usr/lib/cups/filter/ these: rastertoalps, rastertobj, rastertoepson, rastertoescp, @@ -797,9 +798,9 @@ than this; some of these are installed by commercial add-ons to CUPS rastertoprinter) by 3rd party driver development projects (such as Gimp-Print) wanting to cooperate as closely as possible with CUPS. -

    -

    Figure19.9.Raster to Printer Specific formats

    Raster to Printer Specific formats

    -

    CUPS Backends

    +

    +

    Figure19.9.Raster to Printer Specific formats

    Raster to Printer Specific formats
    +

    CUPS Backends

    The last part of any CUPS filtering chain is a "backend". Backends are special programs that send the print-ready file to the final device. There is a separate backend program for any transfer @@ -886,7 +887,7 @@ all available backends: lpinfo -v -

    cupsomatic/Foomatic -- how do they fit into the Picture?

    +

    cupsomatic/Foomatic -- how do they fit into the Picture?

    "cupsomatic" filters may be the most widely used on CUPS installations. You must be clear about the fact that these were not developed by the CUPS people. They are a "Third Party" add-on to @@ -936,11 +937,11 @@ print-options from page to page, in the middle of a job. And the best thing is: the new foomatic-rip now works seamlessly with all legacy spoolers too (like LPRng, BSD-LPD, PDQ, PPR etc.), providing for them access to use PPDs for their printing! -

    The Complete Picture

    +

    The Complete Picture

    If you want to see an overview over all the filters and how they relate to each other, the complete picture of the puzzle is at the end of this document. -

    mime.convs

    +

    mime.convs

    CUPS auto-constructs all possible filtering chain paths for any given MIME type, and every printer installed. But how does it decide in favor or against a specific alternative? (There may often be cases, @@ -957,7 +958,7 @@ cost. This is a very efficient way to limit the load of any CUPS server by setting an appropriate "FilterLimit" value. A FilterLimit of 200 allows roughly 1 job at a time, while a FilterLimit of 1000 allows approximately 5 jobs maximum at a time. -

    "Raw" printing

    +

    "Raw" printing

    You can tell CUPS to print (nearly) any file "raw". "Raw" means it will not be filtered. CUPS will send the file to the printer "as is" without bothering if the printer is able to digest it. Users need to @@ -980,7 +981,7 @@ CUPS will automatically treat each job sent to a queue as a "raw" one, if it can't find a PPD associated with the queue. However, CUPS will only send known MIME types (as defined in its own mime.types file) and refuse others. -

    "application/octet-stream" printing

    +

    "application/octet-stream" printing

    Any MIME type with no rule in the /etc/cups/mime.types file is regarded as unknown or application/octet-stream and will not be @@ -1038,7 +1039,7 @@ be one that is known to CUPS and an allowed one. The file recognizes MIME types. The file /etc/cups/mime.convs decides which file conversion filter(s) may be applied to which MIME types. -

    PostScript Printer Descriptions (PPDs) for non-PS Printers

    +

    PostScript Printer Descriptions (PPDs) for non-PS Printers

    Originally PPDs were meant to be used for PostScript printers only. Here, they help to send device-specific commands and settings to the RIP which processes the jobfile. CUPS has extended this @@ -1083,7 +1084,7 @@ specific model supports):

    stphoto2.ppd

    newer Epson Stylus Photo printers

    laserjet.ppd

    all PCL printers. Further below is a discussion of several other driver/PPD-packages suitable fur use with CUPS. -

    Difference between cupsomatic/foomatic-rip and +

    Difference between cupsomatic/foomatic-rip and native CUPS printing

    Native CUPS rasterization works in two steps.

    • @@ -1096,9 +1097,9 @@ quality filters for this step, some are Free Software, some are Shareware/Non-Free, some are proprietary.

    Often this produces better quality (and has several more advantages) than other methods. -

    -

    Figure19.10.cupsomatic/foomatic processing versus Native CUPS

    cupsomatic/foomatic processing versus Native CUPS

    -

    +

    +

    Figure19.10.cupsomatic/foomatic processing versus Native CUPS

    cupsomatic/foomatic processing versus Native CUPS
    +

    One other method is the cupsomatic/foomatic-rip way. Note that cupsomatic is not made by the CUPS developers. It is an independent contribution to printing development, @@ -1132,7 +1133,7 @@ installation: Therefore the printfile bypasses the "pstoraster" filter cupsomatic hands the rendered file directly to the CUPS backend. The flowchart above illustrates the difference between native CUPS rendering and the Foomatic/cupsomatic method. -

    Examples for filtering Chains

    +

    Examples for filtering Chains

    Here are a few examples of commonly occurring filtering chains to illustrate the workings of CUPS.

    @@ -1182,7 +1183,7 @@ which transfers the job to the printers.

    The resulting filter chain therefore is: 

     pdftops --> pstops --> pstoraster --> rastertoepson --> usb
-

    Sources of CUPS drivers / PPDs

    +

    Sources of CUPS drivers / PPDs

    On the internet you can find now many thousand CUPS-PPD files (with their companion filters), in many national languages, supporting more than 1000 non-PostScript models. @@ -1217,7 +1218,7 @@ HPIJS).

    Printing with Interface Scripts

    +

    Printing with Interface Scripts

    CUPS also supports the usage of "interface scripts" as known from System V AT&T printing systems. These are often used for PCL printers, from applications that generate PCL print jobs. Interface @@ -1239,12 +1240,12 @@ with CUPS they provide the most easy way to plug in your own custom-written filtering script or program into one specific print queue (some information about the traditional usage of interface scripts is to be found at http://playground.sun.com/printing/documentation/interface.html). -

    Network printing (purely Windows)

    +

    Network printing (purely Windows)

    Network printing covers a lot of ground. To understand what exactly goes on with Samba when it is printing on behalf of its Windows clients, let's first look at a "purely Windows" setup: Windows clients with a Windows NT print server. -

    From Windows Clients to an NT Print Server

    +

    From Windows Clients to an NT Print Server

    Windows clients printing to an NT-based print server have two options. They may

    • execute the driver locally and render the GDI output @@ -1253,7 +1254,7 @@ or

    • send the GDI output (EMF) to the server, where the driver is executed to render the printer specific output.

    Both print paths are shown in the flowcharts below. -

    Driver Execution on the Client

    +

    Driver Execution on the Client

    In the first case the print server must spool the file as "raw", meaning it shouldn't touch the jobfile and try to convert it in any way. This is what traditional Unix-based print server can do too; and @@ -1263,9 +1264,9 @@ advantage of this setup is that this "spooling-only" print server may be used even if no driver(s) for Unix are available it is sufficient to have the Windows client drivers available and installed on the clients. -

    -

    Figure19.11.Print Driver execution on the Client

    Print Driver execution on the Client

    -

    Driver Execution on the Server

    +

    +

    Figure19.11.Print Driver execution on the Client

    Print Driver execution on the Client
    +

    Driver Execution on the Server

    The other path executes the printer driver on the server. The clients transfers print files in EMF format to the server. The server uses the PostScript, PCL, ESC/P or other driver to convert the EMF file into @@ -1273,18 +1274,18 @@ the printer-specific language. It is not possible for Unix to do the same. Currently there is no program or method to convert a Windows client's GDI output on a Unix server into something a printer could understand. -

    -

    Figure19.12.Print Driver execution on the Server

    Print Driver execution on the Server

    -

    +

    +

    Figure19.12.Print Driver execution on the Server

    Print Driver execution on the Server
    +

    However, there is something similar possible with CUPS. Read on... -

    Network Printing (Windows clients -- UNIX/Samba Print +

    Network Printing (Windows clients -- UNIX/Samba Print Servers)

    Since UNIX print servers cannot execute the Win32 program code on their platform, the picture is somewhat different. However, this doesn't limit your options all that much. In the contrary, you may have a way here to implement printing features which are not possible otherwise. -

    From Windows Clients to a CUPS/Samba Print Server

    +

    From Windows Clients to a CUPS/Samba Print Server

    Here is a simple recipe showing how you can take advantage of CUPS powerful features for the benefit of your Windows network printing clients: @@ -1311,9 +1312,9 @@ other print commands are set up, then printing will use the option automatically passing through (if you want your own defined print commands to work with a Samba that has CUPS support compiled in, simply use printing = sysv). -

    -

    Figure19.13.Printing via CUPS/samba server

    Printing via CUPS/samba server

    -

    Samba receiving Jobfiles and passing them to CUPS

    +

    +

    Figure19.13.Printing via CUPS/samba server

    Printing via CUPS/samba server
    +

    Samba receiving Jobfiles and passing them to CUPS

    Samba must use its own spool directory (it is set by a line similar to path = /var/spool/samba, in the [printers] or @@ -1331,7 +1332,7 @@ A Windows user authenticates only to Samba (by whatever means is configured). If Samba runs on the same host as CUPS, you only need to allow "localhost" to print. If they run on different machines, you need to make sure the Samba host gets access to printing on CUPS. -

    Network PostScript RIP: CUPS Filters on Server -- clients use +

    Network PostScript RIP: CUPS Filters on Server -- clients use PostScript Driver with CUPS-PPDs

    PPDs can control all print device options. They are usually provided by the manufacturer; if you own a PostScript printer, that is. PPD @@ -1351,7 +1352,7 @@ or see if you have lphelp on your system). There are also some different GUI frontends on Linux/UNIX, which can present PPD options to users. PPD options are normally meant to be evaluated by the PostScript RIP on the real PostScript printer. -

    PPDs for non-PS Printers on UNIX

    +

    PPDs for non-PS Printers on UNIX

    CUPS doesn't limit itself to "real" PostScript printers in its usage of PPDs. The CUPS developers have extended the scope of the PPD concept, to also describe available device and driver options for @@ -1368,7 +1369,7 @@ the supplied PostScript. Thus CUPS lets all its printers appear as PostScript devices to its clients, because it can act as a PostScript RIP for those printers, processing the received PostScript code into a proper raster print format. -

    PPDs for non-PS Printers on Windows

    +

    PPDs for non-PS Printers on Windows

    CUPS-PPDs can also be used on Windows-Clients, on top of a "core" PostScript driver (now recommended is the "CUPS PostScript Driver for WindowsNT/2K/XP"; you can also use the Adobe one, with @@ -1384,13 +1385,13 @@ which always remain unfiltered per definition;

  • enable clients to driver, even for many different target printers.

    • Using CUPS PPDs on Windows clients enables these to control all print job settings just as a UNIX client can do too. -

    Windows Terminal Servers (WTS) as CUPS Clients

    +

    Windows Terminal Servers (WTS) as CUPS Clients

    This setup may be of special interest to people experiencing major problems in WTS environments. WTS need often a multitude of non-PostScript drivers installed to run their clients' variety of different printer models. This often imposes the price of much increased instability. -

    Printer Drivers running in "Kernel Mode" cause many +

    Printer Drivers running in "Kernel Mode" cause many Problems

    The reason is that in Win NT printer drivers run in "Kernel Mode", this introduces a high risk for the stability of the system @@ -1407,7 +1408,7 @@ might be because there have so far only been 2 different PostScript drivers the ones from Adobe and the one from Microsoft. Both are very well tested and are as stable as you ever can imagine on Windows. The CUPS driver is derived from the Microsoft one. -

    Workarounds impose Heavy Limitations

    +

    Workarounds impose Heavy Limitations

    In many cases, in an attempt to work around this problem, site administrators have resorted to restrict the allowed drivers installed on their WTS to one generic PCL- and one PostScript driver. This @@ -1415,7 +1416,7 @@ however restricts the clients in the amount of printer options available for them; often they can't get out more than simplex prints from one standard paper tray, while their devices could do much better, if driven by a different driver! ) -

    CUPS: a "Magical Stone"?

    +

    CUPS: a "Magical Stone"?

    Using a PostScript driver, enabled with a CUPS-PPD, seems to be a very elegant way to overcome all these shortcomings. There are, depending on the version of Windows OS you use, up to 3 different PostScript @@ -1427,7 +1428,7 @@ is a certain price for this too: a CUPS server acting as a PostScript RIP for its clients requires more CPU and RAM than when just acting as a "raw spooling" device. Plus, this setup is not yet widely tested, although the first feedbacks look very promising. -

    PostScript Drivers with no major problems -- even in Kernel +

    PostScript Drivers with no major problems -- even in Kernel Mode

    More recent printer drivers on W2K and XP don't run in Kernel mode (unlike Win NT) any more. However, both operating systems can still @@ -1444,14 +1445,14 @@ development efforts. This is what the CUPS people have done. The license doesn't allow them to publish the whole of the source code. However, they have released the "diff" under the GPL, and if you are owner of an "MS DDK for Win NT", you can check the driver yourself. -

    Setting up CUPS for driver Download

    +

    Setting up CUPS for driver Download

    As we have said before: all previously known methods to prepare client printer drivers on the Samba server for download and "Point'n'Print" convenience of Windows workstations are working with CUPS too. These methods were described in the previous chapter. In reality, this is a pure Samba business, and only relates to the Samba/Win client relationship. -

    cupsaddsmb: the unknown Utility

    +

    cupsaddsmb: the unknown Utility

    The cupsaddsmb utility (shipped with all current CUPS versions) is an alternative method to transfer printer drivers into the Samba [print$] share. Remember, this share is where @@ -1476,7 +1477,7 @@ job-billing)

    However, currently only Windows NT, 2000, and XP are supported by the CUPS drivers. You will need to get the respective part of Adobe driver too if you need to support Windows 95, 98, and ME clients. -

    Prepare your smb.conf for +

    Prepare your smb.conf for cupsaddsmb

    Prior to running cupsaddsmb, you need the following settings in smb.conf: @@ -1505,7 +1506,7 @@ Prior to running cupsaddsmb, you need the following settings in read only = yes write list = root -

    CUPS Package of "PostScript Driver for WinNT/2k/XP"

    +

    CUPS Package of "PostScript Driver for WinNT/2k/XP"

    CUPS users may get the exactly same packages fromhttp://www.cups.org/software.html. It is a separate package from the CUPS base software files, tagged as CUPS 1.1.x Windows NT/2k/XP Printer Driver for SAMBA @@ -1576,7 +1577,7 @@ Studio 6. Driver developers are not allowed to distribute the whole of the source code as Free Software. However, CUPS developers released the "diff" in source code under the GPL, so anybody with a license of Visual Studio and a DDK will be able to compile for him/herself. -

    Recognize the different Driver Files

    +

    Recognize the different Driver Files

    The CUPS drivers don't support the "older" Windows 95/98/ME, but only the Windows NT/2000/XP client: 

    @@ -1611,7 +1612,7 @@ support of WinNT/2k/XP are present in , the Adobe ones will be ignored
 and the CUPS ones will be used. If you prefer -- for whatever reason
 -- to use Adobe-only drivers, move away the 3 CUPS driver files. The
 Win95/98/ME clients use the Adobe drivers in any case.
-

    Acquiring the Adobe Driver Files

    +

    Acquiring the Adobe Driver Files

    Acquiring the Adobe driver files seems to be unexpectedly difficult for many users. They are not available on the Adobe website as single files and the self-extracting and/or self-installing Windows-exe is @@ -1624,7 +1625,7 @@ Generic PostScript printer. After this, the client's where you can get them with smbclient from the CUPS host. A more detailed description about this is in the next (the CUPS printing) chapter. -

    ESP Print Pro Package of "PostScript Driver for +

    ESP Print Pro Package of "PostScript Driver for WinNT/2k/XP"

    Users of the ESP Print Pro software are able to install their "Samba Drivers" package for this purpose with no problem. Retrieve the driver @@ -1640,7 +1641,7 @@ driver files; i.e. mainly setup the [print$] share, etc. The ESP Print Pro package includes the CUPS driver files as well as a (licensed) set of Adobe drivers for the Windows 95/98/ME client family. -

    Caveats to be considered

    +

    Caveats to be considered

    Once you have run the install script (and possibly manually moved the cups.hlp file to /usr/share/cups/drivers/), the driver is @@ -1660,8 +1661,8 @@ working in an environment where everything is configured for Once the driver files are in the [print$] share and are initialized, they are ready to be downloaded and installed by the Win NT/2k/XP clients. -

    Note

    -

    1. +

      Note

      +

      1. Win 9x/ME clients won't work with the CUPS PostScript driver. For these you'd still need to use the ADOBE*.* drivers as previously. @@ -1696,8 +1697,8 @@ as described elsewhere in the "Samba HOWTO Collection": either change a driver for an existing printer by running the "Printer Properties" dialog, or use rpcclient with the setdriver sub-command. -

      -

    What are the Benefits of using the "CUPS PostScript Driver for +

    +

    What are the Benefits of using the "CUPS PostScript Driver for Windows NT/2k/XP" as compared to the Adobe Driver?

    You are interested in a comparison between the CUPS and the Adobe PostScript drivers? For our purposes these are the most important @@ -1743,7 +1744,7 @@ not disturb any other applications as they will regard it as a comment and simply ignore it).

  • the CUPS PostScript driver will be the heart of the fully fledged CUPS IPP client for Windows NT/2K/XP to be released soon (probably alongside the first Beta release for CUPS -1.2).

    • Run "cupsaddsmb" (quiet Mode)

    +1.2).

    Run "cupsaddsmb" (quiet Mode)

    The cupsaddsmb command copies the needed files into your [print$] share. Additionally, the PPD associated with this printer is copied from @@ -1773,7 +1774,7 @@ To share all printers and drivers, use th -a parameter instead of a printer name. Since cupsaddsmb "exports" the printer drivers to Samba, it should be obvious that it only works for queues with a CUPS driver associated. -

    Run "cupsaddsmb" with verbose Output

    +

    Run "cupsaddsmb" with verbose Output

    Probably you want to see what's going on. Use the -v parameter to get a more verbose output. The output below was edited for better readability: all "\" at the end of @@ -1858,7 +1859,7 @@ you'll discover error messages like NT_STATUS_OBJECT_NAME_COLLISION in between. They occur, because the directories WIN40 and W32X86 already existed in the [print$] driver download share (from a previous driver installation). They are harmless here. -

    Understanding cupsaddsmb

    +

    Understanding cupsaddsmb

    What has happened? What did cupsaddsmb do? There are five stages of the procedure

    1. call the CUPS server via IPP and request the @@ -1881,7 +1882,7 @@ same host): # cupsaddsmb -H sambaserver -h cupsserver -v printername -

    How to recognize if cupsaddsm completed successfully

    +

    How to recognize if cupsaddsm completed successfully

    You must always check if the utility completed successfully in all fields. You need as a minimum these 3 messages amongst the output: @@ -1902,7 +1903,7 @@ It is impossible to see any diagnostic output if you don't run cupsaddsmb in verbose mode. Therefore we strongly recommend to not use the default quiet mode. It will hide any problems from you which might occur. -

    cupsaddsmb with a Samba PDC

    +

    cupsaddsmb with a Samba PDC

    You can't get the standard cupsaddsmb command to run on a Samba PDC? You are asked for the password credential all over again and again and the command just will not take off at all? Try one of these @@ -1916,13 +1917,13 @@ variations:

    (Note the two backslashes: the first one is required to "escape" the second one). -

    cupsaddsmb Flowchart

    +

    cupsaddsmb Flowchart

    Here is a chart about the procedures, commandflows and dataflows of the "cupaddsmb" command. Note again: cupsaddsmb is not intended to, and does not work with, "raw" queues! -

    -

    Figure19.14.cupsaddsmb flowchart

    cupsaddsmb flowchart

    -

    Installing the PostScript Driver on a Client

    +

    +

    Figure19.14.cupsaddsmb flowchart

    cupsaddsmb flowchart
    +

    Installing the PostScript Driver on a Client

    After cupsaddsmb completed, your driver is prepared for the clients to use. Here are the steps you must perform to download and install it via "Point'n'Print". From a Windows client, browse to the CUPS/Samba @@ -1958,7 +1959,7 @@ functions. (Note that user "ntadmin" needs to be a valid Samba user with the required privileges to access the printershare) This would set up the printer connection in the traditional LanMan way (not using MS-RPC). -

    Avoiding critical PostScript Driver Settings on the +

    Avoiding critical PostScript Driver Settings on the Client

    Soooo: printing works, but there are still problems. Most jobs print well, some don't print at all. Some jobs have problems with fonts, @@ -1984,7 +1985,7 @@ get a printout at all) (Adobe)

  • Sometimes you can choose : in case of problems try 2 instead of 3 (the latest ESP Ghostscript package handles Level 3 PostScript very well) (Adobe).

  • Say Yes to PostScript -Error Handler (Adobe)

    • Installing PostScript Driver Files manually (using +Error Handler (Adobe)

    Installing PostScript Driver Files manually (using rpcclient)

    Of course you can run all the commands which are embedded into the cupsaddsmb convenience utility yourself, one by one, and hereby upload @@ -2005,7 +2006,7 @@ the MS-RPC protocol. You can use it to query (and command) a Win NT (or 2K/XP) PC too. MS-RPC is used by Windows clients, amongst other things, to benefit from the "Point'n'Print" features. Samba can now mimic this too. -

    A Check of the rpcclient man Page

    +

    A Check of the rpcclient man Page

    First let's have a little check of the rpcclient man page. Here are two relevant passages:

    @@ -2038,7 +2039,7 @@ printer driver associated with an installed printer. The printer driver must already be correctly installed on the print server.

    See also the enumprinters and enumdrivers commands for obtaining a list of installed printers and drivers. -

    Understanding the rpcclient man Page

    +

    Understanding the rpcclient man Page

    The exact format isn't made too clear by the man page, since you have to deal with some parameters containing spaces. Here is a better description for it. We have line-broken the @@ -2074,7 +2075,7 @@ box now, and access it from a UNIX workstation. We will query it with rpcclient to see what it tells us and try to understand the man page more clearly which we've read just now. -

    Producing an Example by querying a Windows Box

    +

    Producing an Example by querying a Windows Box

    We could run rpcclient with a getdriver or a getprinter subcommand (in level 3 verbosity) against it. Just sit down at UNIX or @@ -2119,7 +2120,7 @@ Some printer drivers list additional files under the label ListOfFiles,Comma-separated. For the CUPS PostScript drivers we don't need any (nor would we for the Adobe PostScript driver): therefore the field will get a "NULL" entry. -

    What is required for adddriver and setdriver to succeed

    +

    What is required for adddriver and setdriver to succeed

    From the manpage (and from the quoted output of cupsaddsmb, above) it becomes clear that you need to have certain conditions in order to make the manual uploading @@ -2150,12 +2151,12 @@ rpcclient. A long-standing bug prevented a proper update of the printer list until every smbd process had received a SIGHUP or was restarted. Remember this in case you've created the CUPS printer just shortly ago and encounter problems: try restarting -Samba.

    Manual Commandline Driver Installation in 15 little Steps

    +Samba.

    Manual Commandline Driver Installation in 15 little Steps

    We are going to install a printer driver now by manually executing all required commands. As this may seem a rather complicated process at first, we go through the procedure step by step, explaining every single action item as it comes up. -

    First Step: Install the Printer on CUPS

    +
    First Step: Install the Printer on CUPS
     
 # lpadmin -p mysmbtstprn -v socket://10.160.51.131:9100 -E -P /home/kurt/canonIR85.ppd
 
@@ -2164,7 +2165,7 @@ This installs printer with the name mysmbtstprn<
 to the CUPS system. The printer is accessed via a socket
 (a.k.a. JetDirect or Direct TCP/IP) connection. You need to be root
 for this step
-
    Second Step (optional): Check if the Printer is recognized by
+
    Second Step (optional): Check if the Printer is recognized by
 Samba
     
  # rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep -C2 mysmbtstprn
@@ -2185,7 +2186,7 @@ already. You need to know root's Samba password (as set by the
 following steps. Alternatively you can authenticate as one of the
 users from the "write list" as defined in smb.conf for
 [print$].
-
    Third Step (optional): Check if Samba knows a Driver for the
+
    Third Step (optional): Check if Samba knows a Driver for the
 Printer
     
 #  rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver
@@ -2211,7 +2212,7 @@ This step was done for the purpose of demonstrating this condition. An
 attempt to connect to the printer at this stage will prompt the
 message along the lines: "The server has not the required printer
 driver installed".
-
    Fourth Step: Put all required Driver Files into Samba's
+
    Fourth Step: Put all required Driver Files into Samba's
 [print$]
     
 #  smbclient //localhost/print\$ -U 'root%xxxx'                        \ 
@@ -2230,7 +2231,7 @@ present in the [print$] share. However, client
 would still not be able to install them, because Samba does not yet
 treat them as driver files. A client asking for the driver would still
 be presented with a "not installed here" message.
-
    Fifth Step: Verify where the Driver Files are now
    +
    Fifth Step: Verify where the Driver Files are now
     
 #  ls -l /etc/samba/drivers/W32X86/
  total 669
@@ -2244,7 +2245,7 @@ be presented with a "not installed here" message.
 
    
 The driver files now are in the W32X86 architecture "root" of
 [print$].
-
    Sixth Step: Tell Samba that these are
+
    Sixth Step: Tell Samba that these are
 Driver Files
 (adddriver)
     
@@ -2265,7 +2266,7 @@ driver. It is normally a good idea to use the same name as is used for
 the printername; however, in big installations you may use this driver
 for a number of printers which have obviously different names. So the
 name of the driver is not fixed.
-
    Seventh Step: Verify where the Driver Files are now
    +
    Seventh Step: Verify where the Driver Files are now
     
 #  ls -l /etc/samba/drivers/W32X86/
  total 1
@@ -2284,7 +2285,7 @@ name of the driver is not fixed.
 
    
 Notice how step 6 did also move the driver files to the appropriate
 subdirectory. Compare with the situation after step 5.
-
    Eighth Step (optional): Verify if Samba now recognizes the
+
    Eighth Step (optional): Verify if Samba now recognizes the
 Driver
     
 #  rpcclient -Uroot%xxxx -c 'enumdrivers 3' localhost | grep -B2 -A5 mydrivername
@@ -2301,7 +2302,7 @@ Driver

    Remember, this command greps for the name you did choose for the driver in step Six. This command must succeed before you can proceed. -

    Ninth Step: Tell Samba which Printer should use these Driver +

    Ninth Step: Tell Samba which Printer should use these Driver Files (setdriver)

     
 #  rpcclient -Uroot%xxxx -c 'setdriver mysmbtstprn mydrivername' localhost
@@ -2315,7 +2316,7 @@ driver. You don't need to repeat all the previous steps for the
 setdriver command to succeed. The only pre-conditions are:
 enumdrivers must find the driver and
 enumprinters must find the printer.
-

    Tenth Step (optional): Verify if Samba has this Association +

    Tenth Step (optional): Verify if Samba has this Association recognized

     
 #  rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver
@@ -2357,7 +2358,7 @@ Compare these results with the ones from steps 2 and 3. Note that
 every single of these commands show the driver is installed.  Even
 the enumprinters command now lists the driver
 on the "description" line.
-

    Eleventh Step (optional): Tickle the Driver into a correct +

    Eleventh Step (optional): Tickle the Driver into a correct Device Mode

    You certainly know how to install the driver on the client. In case you are not particularly familiar with Windows, here is a short @@ -2382,7 +2383,7 @@ into the "DOS box" (type root's smbpassword when prompted): Change any printer setting once (like "portrait" --> "landscape"), click "Apply"; change the setting back. -

    Twelfth Step: Install the Printer on a Client +

    Twelfth Step: Install the Printer on a Client ("Point'n'Print")

     
  C:\> rundll32 printui.dll,PrintUIEntry /in /n "\\sambacupsserver\mysmbtstprn"
@@ -2390,24 +2391,24 @@ back.

    If it doesn't work it could be a permission problem with the [print$] share. -

    Thirteenth Step (optional): Print a Test Page

    +

    Thirteenth Step (optional): Print a Test Page

     
  C:\> rundll32 printui.dll,PrintUIEntry /p /n "\\sambacupsserver\mysmbtstprn"

    Then hit [TAB] 5 times, [ENTER] twice, [TAB] once and [ENTER] again and march to the printer. -

    Fourteenth Step (recommended): Study the Test Page

    +

    Fourteenth Step (recommended): Study the Test Page

    Hmmm.... just kidding! By now you know everything about printer installations and you don't need to read a word. Just put it in a frame and bolt it to the wall with the heading "MY FIRST RPCCLIENT-INSTALLED PRINTER" - why not just throw it away! -

    Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your +

    Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your Success

     
 # echo "Cheeeeerioooooo! Success..." >> /var/log/samba/log.smbd     
 
-

    Troubleshooting revisited

    +

    Troubleshooting revisited

    The setdriver command will fail, if in Samba's mind the queue is not already there. You had promising messages about the: 

    @@ -2450,7 +2451,7 @@ An alternative command could be this:

    BTW, you can use these commands, plus a few more, of course, to install drivers on remote Windows NT print servers too! -

    The printing *.tdb Files

    +

    The printing *.tdb Files

    Some mystery is associated with the series of files with a tdb-suffix appearing in every Samba installation. They are connections.tdb, @@ -2465,7 +2466,7 @@ tdb-suffix appearing in every Samba installation. They are ntprinters.tdb, sessionid.tdb and secrets.tdb. What is their purpose? -

    Trivial DataBase Files

    +

    Trivial DataBase Files

    A Windows NT (Print) Server keeps track of all information needed to serve its duty toward its clients by storing entries in the Windows "Registry". Client queries are answered by reading from the registry, @@ -2478,7 +2479,7 @@ or /var/lock/samba/ . The printing related files are ntprinters.tdb, printing.tdb,ntforms.tdb and ntdrivers.tdb. -

    Binary Format

    +

    Binary Format

    *.tdb files are not human readable. They are written in a binary format. "Why not ASCII?", you may ask. "After all, ASCII configuration files are a good and proofed tradition on UNIX." @@ -2491,7 +2492,7 @@ same time. The file format of Samba's *.tdb files allows for this provision. Many smbd processes may write to the same *.tdb file at the same time. This wouldn't be possible with pure ASCII files. -

    Losing *.tdb Files

    +

    Losing *.tdb Files

    It is very important that all *.tdb files remain consistent over all write and read accesses. However, it may happen that these files do get corrupted. (A @@ -2501,7 +2502,7 @@ etc.). In cases of trouble, a deletion of the old printing-related *.tdb files may be the only option. You need to re-create all print related setup after that. Or you have made a backup of the *.tdb files in time. -

    Using tdbbackup

    +

    Using tdbbackup

    Samba ships with a little utility which helps the root user of your system to back up your *.tdb files. If you run it with no argument, it prints a little usage message: @@ -2531,7 +2532,7 @@ Here is how I backed up my printing.tdb file: -rw------- 1 root root 40960 May 2 03:44 printing.tdb -rw------- 1 root root 40960 May 2 03:44 printing.tdb.bak -

    CUPS Print Drivers from Linuxprinting.org

    +

    CUPS Print Drivers from Linuxprinting.org

    CUPS ships with good support for HP LaserJet type printers. You can install the generic driver as follows: 

    @@ -2565,7 +2566,7 @@ not work with PPDs generated for the old cupsomatic. The new-style
 PPDs are 100% compliant to the Adobe PPD specification. They are
 intended to be used by Samba and the cupsaddsmb utility also, to
 provide the driver files for the Windows clients also!
-

    foomatic-rip and Foomatic explained

    +

    foomatic-rip and Foomatic explained

    Nowadays most Linux distros rely on the utilities of Linuxprinting.org to create their printing related software (which, BTW, works on all UNIXes and on Mac OS X or Darwin too). It is not known as well as it @@ -2582,7 +2583,7 @@ its Foomatic< database. Currently there are 245 drivers in the database: many drivers support various models, and many models may be driven by different drivers; it's your choice! -

    690 "perfect" Printers

    +

    690 "perfect" Printers

    At present there are 690 devices dubbed as working "perfectly", 181 "mostly", 96 "partially" and 46 are "Paperweights". Keeping in mind that most of these are non-PostScript models (PostScript printers are @@ -2593,7 +2594,7 @@ doesn't also scan and copy and fax under GNU/Linux: then this is a truly astonishing achievement. Three years ago the number was not more than 500, and Linux or UNIX "printing" at the time wasn't anywhere near the quality it is today! -

    How the "Printing HOWTO" started it all

    +

    How the "Printing HOWTO" started it all

    A few years ago Grant Taylor started it all. The roots of today's Linuxprinting.org are in the first Linux Printing @@ -2607,7 +2608,7 @@ hardware and driver zoo that made up Linux printing of the time. This database became the core component of today's Foomatic collection of tools and data. In the meantime it has moved to an XML representation of the data. -

    Foomatic's strange Name

    +

    Foomatic's strange Name

    "Why the funny name?", you ask. When it really took off, around spring 2000, CUPS was far less popular than today, and most systems used LPD, LPRng or even PDQ to print. CUPS shipped with a few generic "drivers" @@ -2630,7 +2631,7 @@ developments available for CUPS;

  • It made available a lot of addit to CUPS users (because often the "traditional" Ghostscript way of printing was the only one available);

  • It gave all the advanced CUPS options (web interface, GUI driver configurations) to users wanting (or needing) to use -Ghostscript filters.

    • cupsomatic, pdqomatic, lpdomatic, directomatic

    +Ghostscript filters.

    cupsomatic, pdqomatic, lpdomatic, directomatic

    CUPS worked through a quickly-hacked up filter script named cupsomatic. cupsomatic ran the printfile through Ghostscript, constructing automatically the rather complicated command line needed. It just @@ -2664,7 +2665,7 @@ Foomatic up to versions 2.0.x required (ugly) Perl data structures attached the Linuxprinting.org PPDs for CUPS. It had a different "*omatic" script for every spooler, as well as different printer configuration files.. -

    7.13.1.5.The Grand Unification +

    7.13.1.5.The Grand Unification achieved...

    This all has changed in Foomatic versions 2.9 (Beta) and released as "stable" 3.0. This has now achieved the convergence of all *omatic @@ -2700,7 +2701,7 @@ sizes for many printers; and it will support printing on media drawn from different paper trays within the same job (in both cases: even where there is no support for this from Windows-based vendor printer drivers). -

    Driver Development outside

    +

    Driver Development outside

    Most driver development itself does not happen within Linuxprinting.org. Drivers are written by independent maintainers. Linuxprinting.org just pools all the information, and stores it in its @@ -2723,7 +2724,7 @@ effort, started by Michael Sweet (also lead developer for CUPS), now directed by Robert Krawitz, which has achieved an amazing level of photo print quality (many Epson users swear that its quality is better than the vendor drivers provided by Epson for the Microsoft -platforms). This currently supports 522 models.

    Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and +platforms). This currently supports 522 models.

    Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and commercial Unix

    Linuxprinting.org today is the one-stop "shop" to download printer drivers. Look for printer information and tutorials @@ -2744,7 +2745,7 @@ of the Foomatic project. Till Kamppeter from MandrakeSoft is doing an excellent job in his spare time to maintain Linuxprinting.org and Foomatic. So if you use it often, please send him a note showing your appreciation. -

    Foomatic Database generated PPDs

    +

    Foomatic Database generated PPDs

    The Foomatic database is an amazing piece of ingenuity in itself. Not only does it keep the printer and driver information, but it is organized in a way that it can generate "PPD" files "on the fly" from @@ -2769,7 +2770,7 @@ GUI tools (like KDE's marvellous "gtklp", "xpp" and the CUPS web interface) read the PPD too and use this information to present the available settings to the user as an intuitive menu selection. -

    foomatic-rip and Foomatic-PPD Download and Installation

    +

    foomatic-rip and Foomatic-PPD Download and Installation

    Here are the steps to install a foomatic-rip driven "LaserJet 4 Plus" compatible printer in CUPS (note that recent distributions of SuSE, UnitedLinux and Mandrake may ship with a complete package of @@ -2868,7 +2869,7 @@ the driver/model) contain support for a certain "device", representing the selected "driver" for your model (as shown by "gs -h")

  • foomatic-rip needs a new version of PPDs (PPD versions produced for cupsomatic don't work with -foomatic-rip).

    • Page Accounting with CUPS

    +foomatic-rip).

    Page Accounting with CUPS

    Often there are questions regarding "print quotas" wherein Samba users (that is, Windows clients) should not be able to print beyond a certain amount of pages or data volume per day, week or month. This @@ -2881,7 +2882,7 @@ Of course one could "hack" things with one's own scripts. But then there is CUPS. CUPS supports "quotas" which can be based on sizes of jobs or on the number of pages or both, and are spanning any time period you want. -

    Setting up Quotas

    +

    Setting up Quotas

    This is an example command how root would set a print quota in CUPS, assuming an existing printer named "quotaprinter": 

    @@ -2892,7 +2893,7 @@ assuming an existing printer named "quotaprinter":
 This would limit every single user to print 100 pages or 1024 KB of
 data (whichever comes first) within the last 604,800 seconds ( = 1
 week).
-

    Correct and incorrect Accounting

    +

    Correct and incorrect Accounting

    For CUPS to count correctly, the printfile needs to pass the CUPS "pstops" filter, otherwise it uses a "dummy" count of "1". Some printfiles don't pass it (eg: image files) but then those are mostly 1 @@ -2907,7 +2908,7 @@ printer is a non-PostScript model, you need to let CUPS do the job to convert the file to a print-ready format for the target printer. This will be working for currently about 1,000 different printer models, see http://www.linuxprinting.org/printer_list.cgi). -

    Adobe and CUPS PostScript Drivers for Windows Clients

    +

    Adobe and CUPS PostScript Drivers for Windows Clients

    Before CUPS-1.1.16 your only option was to use the Adobe PostScript Driver on the Windows clients. The output of this driver was not always passed through the "pstops" filter on the CUPS/Samba side, and @@ -2927,7 +2928,7 @@ printfile

    You can read more about the setup of this combination in the manpage for "cupsaddsmb" (which is only present with CUPS installed, and only current from CUPS 1.1.16). -

    The page_log File Syntax

    +

    The page_log File Syntax

    These are the items CUPS logs in the "page_log" for every single page of a job:

    • Printer name

    • User name

    • Job ID

    • Time of printing

    • the page number

    • the number of copies

    • a billing information string @@ -2949,7 +2950,7 @@ This was job ID "401", printed on "infotec_IS2027" by user & from IP address 10.160.50.13. The next job had ID "402", was sent by user "boss" from IP address 10.160.51.33,printed from one page 440 copies and is set to be billed to "finance-dep". -

    Possible Shortcomings

    +

    Possible Shortcomings

    What flaws or shortcomings are there with this quota system?

    • the ones named above (wrongly logged job in case of printer hardware failure, etc.)

    • in reality, CUPS counts the job pages that are being @@ -2963,7 +2964,7 @@ groups

    • no means to read out the current balance or the "used-up" number of current quota

    • a user having used up 99 sheets of 100 quota will still be able to send and print a 1,000 sheet job

    • a user being denied a job because of a filled-up quota doesn't get a meaningful error message from CUPS other than -"client-error-not-possible".

    Future Developments

    +"client-error-not-possible".

    Future Developments

    This is the best system currently available, and there are huge improvements under development for CUPS 1.2:

    • page counting will go into the "backends" (these talk @@ -2971,9 +2972,9 @@ directly to the printer and will increase the count in sync with the actual printing process: thus a jam at the 5th sheet will lead to a stop in the counting)

    • quotas will be handled more flexibly

    • probably there will be support for users to inquire their "accounts" in advance

    • probably there will be support for some other tools -around this topic

    Other Accounting Tools

    +around this topic

    Other Accounting Tools

    PrintAnalyzer, pyKota, printbill, LogReport. -

    Additional Material

    +

    Additional Material

    A printer queue with no PPD associated to it is a "raw" printer and all files will go directly there as received by the spooler. The exceptions are file types "application/octet-stream" @@ -3051,7 +3052,7 @@ the jobs of hundreds of users on some big machine, where no user is allowed to have direct access (such as when the operators often need to load the proper paper type before running the 10,000 page job requested by marketing for the mailing, etc.). -

    Auto-Deletion or Preservation of CUPS Spool Files

    +

    Auto-Deletion or Preservation of CUPS Spool Files

    Samba print files pass through two "spool" directories. One is the incoming directory managed by Samba, (set in the path = /var/spool/samba directive in the @@ -3060,7 +3061,7 @@ incoming directory managed by Samba, (set in the path your UNIX print subsystem. For CUPS it is normally /var/spool/cups/, as set by the cupsd.conf directive RequestRoot /var/spool/cups. -

    CUPS Configuration Settings explained

    +

    CUPS Configuration Settings explained

    Some important parameter settings in the CUPS configuration file cupsd.conf are:

    PreserveJobHistory Yes

    @@ -3084,7 +3085,7 @@ maximum to 0 disables this functionality. The default setting is

    (There are also additional settings for "MaxJobsPerUser" and "MaxJobsPerPrinter"...) -

    Pre-conditions

    +

    Pre-conditions

    For everything to work as announced, you need to have three things:

    • a Samba-smbd which is compiled against "libcups" (Check @@ -3095,15 +3096,15 @@ In this case all other manually set printing-related commands (like "print command", "lpq command", "lprm command", "lppause command" or "lpresume command") are ignored and they should normally have no influence what-so-ever on your printing. -

    Manual Configuration

    +

    Manual Configuration

    If you want to do things manually, replace the "printing = cups" by "printing = bsd". Then your manually set commands may work (haven't tested this), and a "print command = lp -d %P %s; rm %s" may do what you need. -

    When not to use Samba to print to +

    When not to use Samba to print to CUPS

    [TO BE DONE] -

    In Case of Trouble.....

    +

    In Case of Trouble.....

    If you have more problems, post the output of these commands to the CUPS or Samba mailing lists (choose the one which seems more relevant to your problem): @@ -3119,13 +3120,13 @@ compact way. Don't forget to name the CUPS and Samba versions you are using! This saves bandwidth and makes for easier readability for experts (and you are expecting experts to read them, right? ;-) -

    Where to find Documentation

    +

    Where to find Documentation

    [TO BE DONE] -

    How to ask for Help

    +

    How to ask for Help

    [TO BE DONE] -

    Where to find Help

    +

    Where to find Help

    [TO BE DONE] -

    Appendix

    Printing from CUPS to Windows attached +

    Appendix

    Printing from CUPS to Windows attached Printers

    From time to time the question arises, how you can print to a Windows attached printer @@ -3213,7 +3214,7 @@ doesn't require a password! Printing will only work if you have a working netbios name resolution up and running. Note that this is a feature of CUPS and you don't necessarily need to have smbd running (but who wants that? :-). -

    More CUPS filtering Chains

    +

    More CUPS filtering Chains

    The following diagrams reveal how CUPS handles print jobs. 

     #########################################################################
@@ -3504,7 +3505,7 @@ The following diagrams reveal how CUPS handles print jobs.
 #       CUPS and ESP PrintPro plug-in where rastertosomething is noted.
 #
 ##########################################################################
-

    Trouble Shooting Guidelines to fix typical Samba printing +

    Trouble Shooting Guidelines to fix typical Samba printing Problems

    This is a short description of how to debug printing problems with Samba. This describes how to debug problems with printing from @@ -3617,35 +3618,35 @@ three dialogs look the same. Only one of does what you intend. You need to be Administrator or Print Administrator to do this for all users. Here is how I do in on XP: -

    1. The first "wrong" way: +

      1. The first "wrong" way: -

        1. Open the Printers +

          1. Open the Printers folder.

          2. Right-click on the printer (remoteprinter on cupshost) and select in context menu Printing Preferences...

          3. Look at this dialog closely and remember what it looks -like.

          -

        2. The second "wrong" way: +like.

        +
      2. The second "wrong" way: -

        1. Open the Printers +

          1. Open the Printers folder.

          2. Right-click on the printer (remoteprinter on cupshost) and select in the context menu Properties

          3. Click on the General tab

          4. Click on the button Printing Preferences...

          5. A new dialog opens. Keep this dialog open and go back -to the parent dialog.

          -

        2. The third, the "correct" way: (should you do +to the parent dialog.

        +
      3. The third, the "correct" way: (should you do this from the beginning, just carry out steps 1. and 2. from second "way" above) -

        1. Click on the Advanced +

          1. Click on the Advanced tab. (Hmmm... if everything is "Grayed Out", then you are not logged in as a user with enough privileges).

          2. Click on the Printing Defaults... button.

          3. On any of the two new tabs, click on the Advanced... button.

          4. A new dialog opens. Compare this one to the other, -identical looking one from "B.5" or A.3".

          -

        +identical looking one from "B.5" or A.3".

      +

    Do you see any difference? I don't either... However, only the last one, which you arrived at with steps "C.1.-6." will save any settings permanently and be the defaults for new users. If you want all clients @@ -3728,6 +3729,6 @@ Windows box with a shared PostScript printer: smbclient W32X86/2 subdir to mget ADOBE* and other files or to WIN40/0 to do the same. -- Another option is to download the *.exe packaged -files from the Adobe website.

    An Overview of the CUPS Printing Processes

    -

    Figure19.15.CUPS Printing Overview

    CUPS Printing Overview

    -

    PrevUpNext
    Chapter18.Classical Printing SupportHomeChapter20.Stackable VFS modules
    +files from the Adobe website.

    An Overview of the CUPS Printing Processes

    +

    Figure19.15.CUPS Printing Overview

    CUPS Printing Overview
    +
    PrevUpNext
    Chapter18.Classical Printing SupportHomeChapter20.Stackable VFS modules
    diff --git a/docs/htmldocs/ClientConfig.html b/docs/htmldocs/ClientConfig.html index 395be923458..2f7002efbf1 100644 --- a/docs/htmldocs/ClientConfig.html +++ b/docs/htmldocs/ClientConfig.html @@ -1,4 +1,5 @@ -Chapter9.MS Windows Network Configuration Guide
    Chapter9.MS Windows Network Configuration Guide
    PrevPartII.Server Configuration BasicsNext

    Chapter9.MS Windows Network Configuration Guide

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    + +Chapter9.MS Windows Network Configuration Guide

    Chapter9.MS Windows Network Configuration Guide
    PrevPartII.Server Configuration BasicsNext

    Chapter9.MS Windows Network Configuration Guide

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    This chapter did not make it into this release. It is planned for the published release of this document.

    PrevUpNext
    Chapter8.Stand-Alone ServersHomePartIII.Advanced Configuration
    diff --git a/docs/htmldocs/DNSDHCP.html b/docs/htmldocs/DNSDHCP.html index dadf6b989ab..7e09c782150 100644 --- a/docs/htmldocs/DNSDHCP.html +++ b/docs/htmldocs/DNSDHCP.html @@ -1,4 +1,5 @@ -Chapter40.DNS and DHCP Configuration Guide
    Chapter40.DNS and DHCP Configuration Guide
    PrevPartVI.AppendixesNext

    Chapter40.DNS and DHCP Configuration Guide

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    + +Chapter40.DNS and DHCP Configuration Guide

    Chapter40.DNS and DHCP Configuration Guide
    PrevPartVI.AppendixesNext

    Chapter40.DNS and DHCP Configuration Guide

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    This chapter did not make it into this release. It is planned for the published release of this document.

    PrevUpNext
    Chapter39.Samba Performance TuningHomeChapter41.Further Resources
    diff --git a/docs/htmldocs/FastStart.html b/docs/htmldocs/FastStart.html index dbb85dea6e5..2d474566c5c 100644 --- a/docs/htmldocs/FastStart.html +++ b/docs/htmldocs/FastStart.html @@ -1,4 +1,5 @@ -Chapter3.Fast Start for the Impatient
    Chapter3.Fast Start for the Impatient
    PrevPartI.General InstallationNext

    Chapter3.Fast Start for the Impatient

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    + +Chapter3.Fast Start for the Impatient

    Chapter3.Fast Start for the Impatient
    PrevPartI.General InstallationNext

    Chapter3.Fast Start for the Impatient

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    This chapter did not make it into this release. It is planned for the published release of this document.

    PrevUpNext
    Chapter2.How to Install and Test SAMBAHomePartII.Server Configuration Basics
    diff --git a/docs/htmldocs/Further-Resources.html b/docs/htmldocs/Further-Resources.html index 8030190ed45..ba734c1e135 100644 --- a/docs/htmldocs/Further-Resources.html +++ b/docs/htmldocs/Further-Resources.html @@ -1,4 +1,5 @@ -Chapter41.Further Resources
    Chapter41.Further Resources
    PrevPartVI.AppendixesNext

    Chapter41.Further Resources

    Jelmer R. Vernooij

    The Samba Team

    David Lechnyr

    Unofficial HOWTO

    May 1, 2003

    Table of Contents

    Websites
    Related updates from Microsoft
    Books

    Websites

    Books

    PrevUpNext
    Chapter40.DNS and DHCP Configuration GuideHomeIndex
    diff --git a/docs/htmldocs/InterdomainTrusts.html b/docs/htmldocs/InterdomainTrusts.html index 8938b84c42a..44d925ced50 100644 --- a/docs/htmldocs/InterdomainTrusts.html +++ b/docs/htmldocs/InterdomainTrusts.html @@ -1,10 +1,11 @@ -Chapter16.Interdomain Trust Relationships
    Chapter16.Interdomain Trust Relationships
    PrevPartIII.Advanced ConfigurationNext

    Chapter16.Interdomain Trust Relationships

    John H. Terpstra

    Samba Team

    Rafal Szczesniak

    Samba Team

    April 3, 2003

    Table of Contents

    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba

    + +Chapter16.Interdomain Trust Relationships

    Chapter16.Interdomain Trust Relationships
    PrevPartIII.Advanced ConfigurationNext

    Chapter16.Interdomain Trust Relationships

    John H. Terpstra

    Samba Team

    Rafal Szczesniak

    Samba Team

    April 3, 2003

    Table of Contents

    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba

    Samba-3 supports NT4 style domain trust relationships. This is feature that many sites will want to use if they migrate to Samba-3 from and NT4 style domain and do NOT want to adopt Active Directory or an LDAP based authentication back end. This section explains some background information regarding trust relationships and how to create them. It is now possible for Samba-3 to NT4 trust (and vice versa), as well as Samba3 to Samba3 trusts. -

    Features and Benefits

    +

    Features and Benefits

    Samba-3 can participate in Samba-to-Samba as well as in Samba-to-MS Windows NT4 style trust relationships. This imparts to Samba similar scalability as is possible with MS Windows NT4. @@ -14,7 +15,7 @@ database such as LDAP, and given it's ability to run in Primary as well as Backu modes, the administrator would be well advised to consider alternatives to the use of Interdomain trusts simply because by the very nature of how this works it is fragile. That was, after all, a key reason for the development and adoption of Microsoft Active Directory. -

    Trust Relationship Background

    +

    Trust Relationship Background

    MS Windows NT3.x/4.0 type security domains employ a non-hierarchical security structure. The limitations of this architecture as it affects the scalability of MS Windows networking in large organisations is well known. Additionally, the flat-name space that results from @@ -49,9 +50,9 @@ domains above, with Windows 2000 and ADS the RED and BLUE domains CAN trust each an inherent feature of ADS domains. Samba-3 implements MS Windows NT4 style Interdomain trusts and interoperates with MS Windows 200x ADS security domains in similar manner to MS Windows NT4 style domains. -

    Native MS Windows NT4 Trusts Configuration

    +

    Native MS Windows NT4 Trusts Configuration

    There are two steps to creating an interdomain trust relationship. -

    NT4 as the Trusting Domain (ie. creating the trusted account)

    +

    NT4 as the Trusting Domain (ie. creating the trusted account)

    For MS Windows NT4, all domain trust relationships are configured using the Domain User Manager. To affect a two way trust relationship it is necessary for each domain administrator to make available (for use by an external domain) it's @@ -63,14 +64,14 @@ button will open a panel in which needs to be entered the remote domain that wil user rights to your domain. In addition it is necessary to enter a password that is specific to this trust relationship. The password needs to be typed twice (for standard confirmation). -

    NT4 as the Trusted Domain (ie. creating trusted account's password)

    +

    NT4 as the Trusted Domain (ie. creating trusted account's password)

    A trust relationship will work only when the other (trusting) domain makes the appropriate connections with the trusted domain. To consummate the trust relationship the administrator will launch the Domain User Manager, from the menu select Policies, then select Trust Relationships, then click on the Add button that is next to the box that is labelled Trusted Domains. A panel will open in which must be entered the name of the remote domain as well as the password assigned to that trust. -

    Configuring Samba NT-style Domain Trusts

    +

    Configuring Samba NT-style Domain Trusts

    This description is meant to be a fairly short introduction about how to set up a Samba server so that it could participate in interdomain trust relationships. Trust relationship support in Samba is in its early stage, so lot of things don't work yet. @@ -79,25 +80,25 @@ Each of the procedures described below is treated as they were performed with Wi one end. The remote end could just as well be another Samba-3 domain. It can be clearly seen, after reading this document, that combining Samba-specific parts of what's written below leads to trust between domains in purely Samba environment. -

    Samba-3 as the Trusting Domain

    +

    Samba-3 as the Trusting Domain

    In order to set the Samba PDC to be the trusted party of the relationship first you need to create special account for the domain that will be the trusting party. To do that, you can use the 'smbpasswd' utility. Creating the trusted domain account is very similar to creating a trusted machine account. Suppose, your domain is called SAMBA, and the remote domain is called RUMBA. The first step will be to issue this command from your favourite shell: -

    -

    +
    
+
     root#  smbpasswd -a -i rumba
 	New SMB password: XXXXXXXX
 	Retype SMB password: XXXXXXXX
 	Added user rumba$
-
    
+
    where -a means to add a new account into the passdb database and -i means: ''create this account with the InterDomain trust flag'' -

    +

    The account name will be 'rumba$' (the name of the remote domain)

    After issuing this command you'll be asked to enter the password for @@ -117,7 +118,7 @@ your domain name, and the password used at the time of account creation. Press OK and, if everything went without incident, you will see Trusted domain relationship successfully established message. -

    Samba-3 as the Trusted Domain

    +

    Samba-3 as the Trusted Domain

    This time activities are somewhat reversed. Again, we'll assume that your domain controlled by the Samba PDC is called SAMBA and NT-controlled domain is called RUMBA.

    @@ -148,11 +149,11 @@ Congratulations! Your trust relationship has just been established.

    Note

    Note that you have to run this command as root because you must have write access to the secrets.tdb file. -

    Common Errors

    +

    Common Errors

    Interdomain trust relationships should NOT be attempted on networks that are unstable or that suffer regular outages. Network stability and integrity are key concerns with distributed trusted domains. -

    Tell me about Trust Relationships using Samba

    +

    Tell me about Trust Relationships using Samba

    Like many, I administer multiple LANs connected together using NT trust relationships. This was implemented about 4 years ago. I now have the occasion to consider performing this same task again, but this time, I diff --git a/docs/htmldocs/IntroSMB.html b/docs/htmldocs/IntroSMB.html index f9c25391129..6d267d5b723 100644 --- a/docs/htmldocs/IntroSMB.html +++ b/docs/htmldocs/IntroSMB.html @@ -1,4 +1,5 @@ -Chapter1.Introduction to Samba

    Chapter1.Introduction to Samba
    PrevPartI.General InstallationNext

    Chapter1.Introduction to Samba

    David Lechnyr

    Unofficial HOWTO

    April 14, 2003

    Table of Contents

    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous

    “ + +Chapter1.Introduction to Samba

    Chapter1.Introduction to Samba
    PrevPartI.General InstallationNext

    Chapter1.Introduction to Samba

    David Lechnyr

    Unofficial HOWTO

    April 14, 2003

    Table of Contents

    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous

    “ "If you understand what you're doing, you're not learning anything." -- Anonymous ”

    @@ -7,7 +8,7 @@ transport protocol. In fact, it can support any SMB/CIFS-enabled client. One of strengths is that you can use it to blend your mix of Windows and Linux machines together without requiring a separate Windows NT/2000/2003 Server. Samba is actively being developed by a global team of about 30 active programmers and was originally developed by Andrew Tridgell. -

    Background

    +

    Background

    Once long ago, there was a buzzword referred to as DCE/RPC. This stood for Distributed Computing Environment/Remote Procedure Calls and conceptually was a good idea. It was originally developed by Apollo/HP as NCA 1.0 (Network Computing Architecture) and only @@ -33,7 +34,7 @@ been dutifully waded through during the information-gathering stages of this pro are *still* many missing pieces... While often tedious, at least the way has been generously littered with occurrences of clapping hand to forehead and muttering 'crikey, what are they thinking? -

    Terminology

    • +

    Terminology

    • SMB: Acronym for "Server Message Block". This is Microsoft's file and printer sharing protocol.

    • CIFS: Acronym for "Common Internet File System". Around 1996, Microsoft apparently @@ -83,7 +84,7 @@ thinking? W3K: Acronym for Windows 2003 Server

    If you plan on getting help, make sure to subscribe to the Samba Mailing List (available at http://www.samba.org). -

    Related Projects

    +

    Related Projects

    There are currently two network filesystem client projects for Linux that are directly related to Samba: SMBFS and CIFS VFS. These are both available in the Linux kernel itself.

    • @@ -105,7 +106,7 @@ nothing to do with acting as a file and print server for SMB/CIFS clients. There are other Open Source CIFS client implementations, such as the jCIFS project which provides an SMB client toolkit written in Java. -

    SMB Methodology

    +

    SMB Methodology

    Traditionally, SMB uses UDP port 137 (NetBIOS name service, or netbios-ns), UDP port 138 (NetBIOS datagram service, or netbios-dgm), and TCP port 139 (NetBIOS session service, or netbios-ssn). Anyone looking at their network with a good @@ -137,7 +138,7 @@ up a single file. In general, SMB sessions are established in the following orde A good way to examine this process in depth is to try out SecurityFriday's SWB program. It allows you to walk through the establishment of a SMB/CIFS session step by step. -

    Epilogue

    “ +

    Epilogue

    “ What's fundamentally wrong is that nobody ever had any taste when they did it. Microsoft has been very much into making the user interface look good, but internally it's just a complete mess. And even people who program for Microsoft @@ -166,7 +167,7 @@ not the completely clueless user who probably sits there shivering thinking That's what's really irritating to me." ”

    -- Linus Torvalds, from an interview with BOOT Magazine, Sept 1998 -

    Miscellaneous

    +

    Miscellaneous

    This chapter is Copyright 2003 David Lechnyr (david at lechnyr dot com). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free diff --git a/docs/htmldocs/NT4Migration.html b/docs/htmldocs/NT4Migration.html index 72c6269f0e1..0d7dbce2ed3 100644 --- a/docs/htmldocs/NT4Migration.html +++ b/docs/htmldocs/NT4Migration.html @@ -1,7 +1,8 @@ -Chapter31.Migration from NT4 PDC to Samba-3 PDC

    Chapter31.Migration from NT4 PDC to Samba-3 PDC
    PrevPartIV.Migration and UpdatingNext

    Chapter31.Migration from NT4 PDC to Samba-3 PDC

    John H. Terpstra

    Samba Team

    April 3, 2003

    Table of Contents

    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices

    + +Chapter31.Migration from NT4 PDC to Samba-3 PDC

    Chapter31.Migration from NT4 PDC to Samba-3 PDC
    PrevPartIV.Migration and UpdatingNext

    Chapter31.Migration from NT4 PDC to Samba-3 PDC

    John H. Terpstra

    Samba Team

    April 3, 2003

    Table of Contents

    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices

    This is a rough guide to assist those wishing to migrate from NT4 domain control to Samba-3 based domain control. -

    Planning and Getting Started

    +

    Planning and Getting Started

    In the IT world there is often a saying that all problems are encountered because of poor planning. The corollary to this saying is that not all problems can be anticipated and planned for. Then again, good planning will anticipate most show stopper type situations. @@ -9,7 +10,7 @@ and planned for. Then again, good planning will anticipate most show stopper typ Those wishing to migrate from MS Windows NT4 domain control to a Samba-3 domain control environment would do well to develop a detailed migration plan. So here are a few pointers to help migration get under way. -

    Objectives

    +

    Objectives

    The key objective for most organisations will be to make the migration from MS Windows NT4 to Samba-3 domain control as painless as possible. One of the challenges you may experience in your migration process may well be one of convincing management that the new environment @@ -36,7 +37,7 @@ Before migrating a network from MS Windows NT4 to Samba-3 it is vital that all n considered. Users should be educated about changes they may experience so that the change will be a welcome one and not become an obstacle to the work they need to do. The following are some of the factors that will go into a successful migration: -

    Domain Layout

    +

    Domain Layout

    Samba-3 can be configured as a domain controller, a back-up domain controller (probably best called a secondary controller), a domain member, or as a stand-alone server. The Windows network security domain context should be sized and scoped before implementation. Particular attention needs to be @@ -57,7 +58,7 @@ designed to serve multiple routed network segments may result in severe performa response time (eg: ping timing) between the remote segment and the PDC is more than 100 ms. In situations where the delay is too long it is highly recommended to locate a backup controller (BDC) to serve as the local authentication and access control server. -

    Server Share and Directory Layout

    +

    Server Share and Directory Layout

    There are few cardinal rules to effective network design that can be broken with impunity. The most important rule of effective network management is that simplicity is king in every well controlled network. Every part of the infrastructure must be managed, the more complex @@ -82,7 +83,7 @@ complex mess that has been inherited. Remember, apparent job security through co and implementation may ultimately cause loss of operations and downtime to users as the new administrator learns to untangle your web. Keep access controls simple and effective and make sure that users will never be interrupted by the stupidity of complexity. -

    Logon Scripts

    +

    Logon Scripts

    Please refer to the section of this document on Advanced Network Administration for information regarding the network logon script options for Samba-3. Logon scripts can help to ensure that all users gain share and printer connections they need. @@ -96,20 +97,20 @@ Some sites prefer to use a tool such as kixstart to estab user environment. In any case you may wish to do a google search for logon script process controls. In particular, you may wish to explore the use of the Microsoft knowledgebase article KB189105 that deals with how to add printers without user intervention via the logon script process. -

    Profile Migration/Creation

    +

    Profile Migration/Creation

    User and Group Profiles may be migrated using the tools described in the section titled Desktop Profile Management.

    Profiles may also be managed using the Samba-3 tool profiles. This tool allows the MS Windows NT style security identifiers (SIDs) that are stored inside the profile NTuser.DAT file to be changed to the SID of the Samba-3 domain. -

    User and Group Accounts

    +

    User and Group Accounts

    It is possible to migrate all account settings from an MS Windows NT4 domain to Samba-3. Before attempting to migrate user and group accounts it is STRONGLY advised to create in Samba-3 the groups that are present on the MS Windows NT4 domain AND to connect these to suitable Unix/Linux groups. Following this simple advice will mean that all user and group attributes should migrate painlessly. -

    Steps In Migration Process

    +

    Steps In Migration Process

    The approximate migration process is described below.

    • You will have an NT4 PDC that has the users, groups, policies and profiles to be migrated @@ -118,11 +119,11 @@ Samba-3 set up as a DC with netlogon share, profile share, etc.

    Procedure31.1.The Account Migration Process

    1. Create a BDC account for the samba server using NT Server Manager

      1. Samba must NOT be running

    2. rpcclient NT4PDC -U Administrator%passwd

      1. lsaquery

      2. Note the SID returned

    3. net getsid -S NT4PDC -w DOMNAME -U Administrator%passwd

      1. Note the SID

    4. net getlocalsid

      1. Note the SID, now check that all three SIDS reported are the same!

    5. net rpc join -S NT4PDC -w DOMNAME -U Administrator%passwd

    6. net rpc vampire -S NT4PDC -U administrator%passwd

    7. pdbedit -L

      1. Note - did the users migrate?

    8. initGrps.sh DOMNAME

    9. net groupmap list

      1. Now check that all groups are recognised

    10. net rpc vampire -S NT4PDC -U administrator%passwd

    11. pdbedit -Lv

      1. Note - check that all group membership has been migrated

    Now it is time to migrate all the profiles, then migrate all policy files. More later. -

    Migration Options

    +

    Migration Options

    Based on feedback from many sites as well as from actual installation and maintenance experience sites that wish to migrate from MS Windows NT4 Domain Control to a Samba based solution fit into three basic categories. -

    Table31.1.The 3 Major Site Types

    Number of UsersDescription
    < 50

    Want simple conversion with NO pain

    50 - 250

    Want new features, can manage some in-house complexity

    > 250

    Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas

    Planning for Success

    +

    Table31.1.The 3 Major Site Types

    Number of UsersDescription
    < 50

    Want simple conversion with NO pain

    50 - 250

    Want new features, can manage some in-house complexity

    > 250

    Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas

    Planning for Success

    There are three basic choices for sites that intend to migrate from MS Windows NT4 to Samba-3.

    • @@ -141,7 +142,7 @@ No matter what choice you make, the following rules will minimise down-stream pr Test ALL assumptions

    • Test full roll-out program, including workstation deployment -

    Table31.2.Nature of the Conversion Choices

    SimpleUpgradedRedesign

    Make use of minimal OS specific features

    Translate NT4 features to new host OS features

    Decide:

    Suck all accounts from NT4 into Samba-3

    Copy and improve:

    Authentication Regime (database location and access)

    Make least number of operational changes

    Make progressive improvements

    Desktop Management Methods

    Take least amount of time to migrate

    Minimise user impact

    Better Control of Desktops / Users

    Live versus Isolated Conversion

    Maximise functionality

    Identify Needs for: Manageability, Scalability, Security, Availability

    Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)

    Take advantage of lower maintenance opportunity

    Samba Implementation Choices

    +

    Table31.2.Nature of the Conversion Choices

    SimpleUpgradedRedesign

    Make use of minimal OS specific features

    Translate NT4 features to new host OS features

    Decide:

    Suck all accounts from NT4 into Samba-3

    Copy and improve:

    Authentication Regime (database location and access)

    Make least number of operational changes

    Make progressive improvements

    Desktop Management Methods

    Take least amount of time to migrate

    Minimise user impact

    Better Control of Desktops / Users

    Live versus Isolated Conversion

    Maximise functionality

    Identify Needs for: Manageability, Scalability, Security, Availability

    Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)

    Take advantage of lower maintenance opportunity

    Samba Implementation Choices

     Authentication database back end
 	Winbind (external Samba or NT4/200x server)
 	Can use pam_mkhomedir.so to auto-create home dirs
@@ -198,5 +199,5 @@ Migration Tools
 
 Authentication
 	New SAM back end (smbpasswd, tdbsam, ldapsam, mysqlsam)
-

    -

    PrevUpNext
    Chapter30.Upgrading from Samba-2.x to Samba-3.0.0HomeChapter32.SWAT - The Samba Web Administration Tool
    + +
    PrevUpNext
    Chapter30.Upgrading from Samba-2.x to Samba-3.0.0HomeChapter32.SWAT - The Samba Web Administration Tool
    diff --git a/docs/htmldocs/NetworkBrowsing.html b/docs/htmldocs/NetworkBrowsing.html index eb4d9858cae..34d48cacc35 100644 --- a/docs/htmldocs/NetworkBrowsing.html +++ b/docs/htmldocs/NetworkBrowsing.html @@ -1,4 +1,5 @@ -Chapter10.Samba / MS Windows Network Browsing Guide
    Chapter10.Samba / MS Windows Network Browsing Guide
    PrevPartIII.Advanced ConfigurationNext

    Chapter10.Samba / MS Windows Network Browsing Guide

    John H. Terpstra

    Samba Team

    July 5, 1998

    Updated: April 21, 2003

    Table of Contents

    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"

    + +Chapter10.Samba / MS Windows Network Browsing Guide

    Chapter10.Samba / MS Windows Network Browsing Guide
    PrevPartIII.Advanced ConfigurationNext

    Chapter10.Samba / MS Windows Network Browsing Guide

    John H. Terpstra

    Samba Team

    July 5, 1998

    Updated: April 21, 2003

    Table of Contents

    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"

    This document contains detailed information as well as a fast track guide to implementing browsing across subnets and / or across workgroups (or domains). WINS is the best tool for resolution of NetBIOS names to IP addresses. WINS is @@ -9,7 +10,7 @@ over TCP/IP. Samba-3 and later also supports this mode of operation. When the use of NetBIOS over TCP/IP has been disabled then the primary means for resolution of MS Windows machine names is via DNS and Active Directory. The following information assumes that your site is running NetBIOS over TCP/IP. -

    Features and Benefits

    +

    Features and Benefits

    Someone once referred to the past in terms of: They were the worst of times, they were the best of times. The more we look back, them more we long for what was and hope it never returns!. @@ -42,7 +43,7 @@ support for NetBIOS, in which case WINS is of no relevance. Samba-3 supports thi

    For those networks on which NetBIOS has been disabled (ie: WINS is NOT required) the use of DNS is necessary for host name resolution. -

    What is Browsing?

    +

    What is Browsing?

    To most people browsing means that they can see the MS Windows and Samba servers in the Network Neighborhood, and when the computer icon for a particular server is clicked, it opens up and shows the shares and printers available on the target server. @@ -80,12 +81,12 @@ called nmbd. The configuration parameters involved in For Samba, the WINS Server and WINS Support are mutually exclusive options. Those marked with an '*' are the only options that commonly MAY need to be modified. Even if not one of these parameters is set nmbd will still do it's job. -

    Discussion

    +

    Discussion

    Firstly, all MS Windows networking uses SMB (Server Message Block) based messaging. SMB messaging may be implemented with or without NetBIOS. MS Windows 200x supports NetBIOS over TCP/IP for backwards compatibility. Microsoft is intent on phasing out NetBIOS support. -

    NetBIOS over TCP/IP

    +

    NetBIOS over TCP/IP

    Samba implements NetBIOS, as does MS Windows NT / 200x / XP, by encapsulating it over TCP/IP. MS Windows products can do likewise. NetBIOS based networking uses broadcast messaging to affect browse list management. When running NetBIOS over TCP/IP, this uses UDP based messaging. @@ -129,7 +130,7 @@ Lastly, take note that browse lists are a collection of unreliable broadcast messages that are repeated at intervals of not more than 15 minutes. This means that it will take time to establish a browse list and it can take up to 45 minutes to stabilise, particularly across network segments. -

    TCP/IP - without NetBIOS

    +

    TCP/IP - without NetBIOS

    All TCP/IP using systems use various forms of host name resolution. The primary methods for TCP/IP hostname resolutions involves either a static file (/etc/hosts ) or DNS (the Domain Name System). DNS is the technology that makes @@ -165,7 +166,7 @@ consequently network services will be severely impaired. The use of Dynamic DNS is highly recommended with Active Directory, in which case the use of BIND9 is preferred for it's ability to adequately support the SRV (service) records that are needed for Active Directory. -

    DNS and Active Directory

    +

    DNS and Active Directory

    Occasionally we hear from Unix network administrators who want to use a Unix based Dynamic DNS server in place of the Microsoft DNS server. While this might be desirable to some, the MS Windows 200x DNS server is auto-configured to work with Active Directory. It is possible @@ -187,7 +188,7 @@ The following are some of the default service records that Active Directory requ

  • _ldap._tcp.Site.gc.ms-dcs.DomainTree

    Used by MS Windows clients to locate site configuration dependent Global Catalog server. -

    • How Browsing Functions

    +

    How Browsing Functions

    MS Windows machines register their NetBIOS names (ie: the machine name for each service type in operation) on start up. The exact method by which this name registration @@ -242,7 +243,7 @@ words, for cross subnet browsing to function correctly it is essential that a name to address resolution mechanism be provided. This mechanism could be via DNS, /etc/hosts, and so on. -

    Setting up WORKGROUP Browsing

    +

    Setting up WORKGROUP Browsing

    To set up cross subnet browsing on a network containing machines in up to be in a WORKGROUP, not an NT Domain you need to set up one Samba server to be the Domain Master Browser (note that this is *NOT* @@ -260,22 +261,22 @@ Samba server, and there must only be one domain master browser per workgroup name. To set up a Samba server as a domain master browser, set the following option in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = yes
-
    
-
    
+
    +

    The domain master browser should also preferrably be the local master browser for its own subnet. In order to achieve this set the following options in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = yes
 	local master = yes
 	preferred master = yes
 	os level = 65
-
    
-
    
+
    +

    The domain master browser may be the same machine as the WINS server, if you require.

    @@ -287,14 +288,14 @@ tend to get rebooted more often, so it's not such a good idea to use these). To make a Samba server a local master browser set the following options in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = no
 	local master = yes
 	preferred master = yes
 	os level = 65
-
    
-
    
+
    +

    Do not do this for more than one Samba server on each subnet, or they will war with each other over which is to be the local master browser. @@ -309,14 +310,14 @@ be the local master browser then you can disable Samba from becoming a local master browser by setting the following options in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = no
 	local master = no
 	preferred master = no
 	os level = 0
-
    
-

    Setting up DOMAIN Browsing

    + +

    Setting up DOMAIN Browsing

    If you are adding Samba servers to a Windows NT Domain then you must not set up a Samba server as a domain master browser. By default, a Windows NT Primary Domain Controller for a domain @@ -330,14 +331,14 @@ you may set up Samba servers as local master browsers as described. To make a Samba server a local master browser set the following options in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = no
 	local master = yes
 	preferred master = yes
 	os level = 65
-
    
-
    
+
    +

    If you wish to have a Samba server fight the election with machines on the same subnet you may set the os level parameter to lower levels. By doing this you can tune the order of machines that @@ -352,14 +353,14 @@ you can disable Samba from taking part in browser elections and ever becoming a local master browser by setting following options in the [global] section of the smb.conf file : -

    -

    +
    
+
             domain master = no
         local master = no
         preferred master = no
         os level = 0
-
    
-

    Forcing Samba to be the master

    + +

    Forcing Samba to be the master

    Who becomes the master browser is determined by an election process using broadcasts. Each election packet contains a number of parameters which determine what precedence (bias) a host should have in the @@ -396,7 +397,7 @@ attempt to become the domain master browser every 5 minutes. They will find that another Samba server is already the domain master browser and will fail. This provides automatic redundancy, should the current domain master browser fail. -

    Making Samba the domain master

    +

    Making Samba the domain master

    The domain master is responsible for collating the browse lists of multiple subnets so that browsing can occur between subnets. You can make Samba act as the domain master by setting domain master = yes @@ -438,30 +439,30 @@ If, however, both Samba and your clients are using a WINS server, then: resolve the NetBIOS name of that host. as long as that host has registered its NetBIOS name with the same WINS server, the user will be able to see that host. -

    Note about broadcast addresses

    +

    Note about broadcast addresses

    If your network uses a "0" based broadcast address (for example if it ends in a 0) then you will strike problems. Windows for Workgroups does not seem to support a 0's broadcast and you will probably find that browsing and name lookups won't work. -

    Multiple interfaces

    +

    Multiple interfaces

    Samba now supports machines with multiple network interfaces. If you have multiple interfaces then you will need to use the interfaces option in smb.conf to configure them. -

    Use of the Remote Announce parameter

    +

    Use of the Remote Announce parameter

    The remote announce parameter of smb.conf can be used to forcibly ensure that all the NetBIOS names on a network get announced to a remote network. The syntax of the remote announce parameter is: -

    +
     	remote announce = a.b.c.d [e.f.g.h] ...
-
    
+
    or -

    +
     	remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ...
-
    
+
    where: -

    a.b.c.d and +
    a.b.c.d and e.f.g.h

    is either the LMB (Local Master Browser) IP address or the broadcast address of the remote network. ie: the LMB is at 192.168.1.10, or the address @@ -477,23 +478,23 @@ workgroup name of the remote network then our NetBIOS machine names will end up looking like they belong to that workgroup, this may cause name resolution problems and should be avoided. -

    -

    Use of the Remote Browse Sync parameter

    +

    +

    Use of the Remote Browse Sync parameter

    The remote browse sync parameter of smb.conf is used to announce to another LMB that it must synchronise its NetBIOS name list with our Samba LMB. It works ONLY if the Samba server that has this option is simultaneously the LMB on its network segment. -

    +

    The syntax of the remote browse sync parameter is: -

    +
     remote browse sync = a.b.c.d
-
    
+
    where a.b.c.d is either the IP address of the remote LMB or else is the network broadcast address of the remote segment. -

    WINS - The Windows Internetworking Name Server

    +

    WINS - The Windows Internetworking Name Server

    Use of WINS (either Samba WINS or MS Windows NT Server WINS) is highly recommended. Every NetBIOS machine registers its name together with a name_type value for each of several types of service it has available. @@ -544,16 +545,16 @@ Never use both wins support = yes together with wins server = a.b.c.d particularly not using it's own IP address. Specifying both will cause nmbd to refuse to start! -

    Setting up a WINS server

    +

    Setting up a WINS server

    Either a Samba machine or a Windows NT Server machine may be set up as a WINS server. To set a Samba machine to be a WINS server you must add the following option to the smb.conf file on the selected machine : in the [globals] section add the line -

    -

    +
    
+
     	wins support = yes
-
    
-
    
+
    +

    Versions of Samba prior to 1.9.17 had this parameter default to yes. If you have any older versions of Samba on your network it is strongly suggested you upgrade to a recent version, or at the very @@ -585,11 +586,11 @@ the Control Panel->Network->Protocols->TCP->W in Windows 95 or Windows NT. To tell a Samba server the IP address of the WINS server add the following line to the [global] section of all smb.conf files : -

    -

    +
    
+
     	wins server = <name or IP address>
-
    
-
    
+
    +

    where <name or IP address> is either the DNS name of the WINS server machine or its IP address.

    @@ -604,45 +605,45 @@ The first details setting up cross subnet browsing on a network containing Windows 95, Samba and Windows NT machines that are not configured as part of a Windows NT Domain. The second details setting up cross subnet browsing on networks that contain NT Domains. -

    WINS Replication

    +

    WINS Replication

    Samba-3 permits WINS replication through the use of the wrepld utility. This tool is not currently capable of being used as it is still in active development. As soon as this tool becomes moderately functional we will prepare man pages and enhance this section of the documentation to provide usage and technical details. -

    Static WINS Entries

    +

    Static WINS Entries

    Adding static entries to your Samba-3 WINS server is actually fairly easy. All you have to do is add a line to wins.dat, typically located in /usr/local/samba/var/locks. -

    +

    Entries in wins.dat take the form of -

    +
     "NAME#TYPE" TTL ADDRESS+ FLAGS
-
    
+
    where NAME is the NetBIOS name, TYPE is the NetBIOS type, TTL is the time-to-live as an absolute time in seconds, ADDRESS+ is one or more addresses corresponding to the registration and FLAGS are the NetBIOS flags for the registration. -

    + A typical dynamic entry looks like: -

    +
     "MADMAN#03" 1055298378 192.168.1.2 66R
-
    
+
    To make it static, all that has to be done is set the TTL to 0: -

    +
     "MADMAN#03" 0 192.168.1.2 66R
-
    
-
    
+
    +

    Though this method works with early Samba-3 versions, there's a possibility that it may change in future versions if WINS replication is added. -

    Helpful Hints

    +

    Helpful Hints

    The following hints should be carefully considered as they are stumbling points for many new network administrators. -

    Windows Networking Protocols

    Warning

    +

    Windows Networking Protocols

    Warning

    Do NOT use more than one (1) protocol on MS Windows machines

    A very common cause of browsing problems results from installing more than @@ -672,32 +673,32 @@ differently from MS Windows NT4. Generally, where a server does NOT support the newer or extended protocol, these will fall back to the NT4 protocols.

    The safest rule of all to follow it this - USE ONLY ONE PROTOCOL! -

    Name Resolution Order

    +

    Name Resolution Order

    Resolution of NetBIOS names to IP addresses can take place using a number of methods. The only ones that can provide NetBIOS name_type information are:

    WINS: the best tool!
    LMHOSTS: is static and hard to maintain.
    Broadcast: uses UDP and can not resolve names across remote segments.

    Alternative means of name resolution includes: -

    /etc/hosts: is static, hard to maintain, and lacks name_type info
    DNS: is a good choice but lacks essential name_type info.

    +

    /etc/hosts: is static, hard to maintain, and lacks name_type info
    DNS: is a good choice but lacks essential name_type info.
    Many sites want to restrict DNS lookups and want to avoid broadcast name resolution traffic. The name resolve order parameter is of great help here. The syntax of the name resolve order parameter is: -

    +
     name resolve order = wins lmhosts bcast host
-
    
+
    or -

    +
     name resolve order = wins lmhosts  	(eliminates bcast and host)
-
    
+
    The default is: -

    +
     name resolve order = host lmhost wins bcast
-
    
+
    where "host" refers the the native methods used by the Unix system to implement the gethostbyname() function call. This is normally controlled by /etc/host.conf, /etc/nsswitch.conf and /etc/resolv.conf. -

    Technical Overview of browsing

    +

    Technical Overview of browsing

    SMB networking provides a mechanism by which clients can access a list of machines in a network, a so-called browse list. This list contains machines that are ready to offer file and/or print services @@ -717,7 +718,7 @@ Where NetBIOS over TCP/IP is enabled use of a WINS server is highly recommended to aid the resolution of NetBIOS (SMB) names to IP addresses. WINS allows remote segment clients to obtain NetBIOS name_type information that can NOT be provided by any other means of name resolution. -

    Browsing support in Samba

    +

    Browsing support in Samba

    Samba facilitates browsing. The browsing is supported by nmbd and is also controlled by options in the smb.conf file. Samba can act as a local browse master for a workgroup and the ability @@ -752,7 +753,7 @@ browsing on another subnet. It is recommended that this option is only used for 'unusual' purposes: announcements over the internet, for example. See remote announce in the smb.conf man page. -

    Problem resolution

    +

    Problem resolution

    If something doesn't work then hopefully the log.nmbd file will help you track down the problem. Try a debug level of 2 or 3 for finding problems. Also note that the current browse list usually gets stored @@ -777,7 +778,7 @@ server resources. The other big problem people have is that their broadcast address, netmask or IP address is wrong (specified with the "interfaces" option in smb.conf) -

    Browsing across subnets

    +

    Browsing across subnets

    Since the release of Samba 1.9.17(alpha1), Samba has supported the replication of browse lists across subnet boundaries. This section describes how to set this feature up in different settings. @@ -798,16 +799,16 @@ be they Windows 95, Windows NT, or Samba servers must have the IP address of a WINS server given to them by a DHCP server, or by manual configuration (for Win95 and WinNT, this is in the TCP/IP Properties, under Network settings) for Samba this is in the smb.conf file. -

    How does cross subnet browsing work ?

    +

    How does cross subnet browsing work ?

    Cross subnet browsing is a complicated dance, containing multiple moving parts. It has taken Microsoft several years to get the code that achieves this correct, and Samba lags behind in some areas. Samba is capable of cross subnet browsing when configured correctly.

    Consider a network set up as follows : -

    +

    -

    +
                                        (DMB)
              N1_A      N1_B        N1_C       N1_D        N1_E
               |          |           |          |           |
@@ -822,8 +823,8 @@ Consider a network set up as follows :
   |     |     |      |               |        |         |           |
  N2_A  N2_B  N2_C   N2_D           N3_A     N3_B      N3_C        N3_D 
                     (WINS)
-
    
-
    
+
    +

    Consisting of 3 subnets (1, 2, 3) connected by two routers (R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume @@ -864,9 +865,9 @@ called 'non-authoritative'. At this point the browse lists look as follows (these are the machines you would see in your network neighborhood if you looked in it on a particular network right now). -

    -

    Table10.1.Browse subnet example 1

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D

    -

    +

    +

    Table10.1.Browse subnet example 1

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D
    +

    Note that at this point all the subnets are separate, no machine is seen across any of the subnets.

    @@ -886,11 +887,11 @@ names it knows about. Once the domain master browser receives the MasterAnnouncement packet it schedules a synchronization request to the sender of that packet. After both synchronizations are done the browse lists look like : -

    -

    Table10.2.Browse subnet example 2

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D

    +

    +

    Table10.2.Browse subnet example 2

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D
    Servers with a (*) after them are non-authoritative names. -

    +

    At this point users looking in their network neighborhood on subnets 1 or 2 will see all the servers on both, users on subnet 3 will still only see the servers on their own subnet. @@ -901,11 +902,11 @@ synchronizes browse lists with the domain master browser (N1_A) it gets both the server entries on subnet 1, and those on subnet 2. After N3_D has synchronized with N1_C and vica-versa the browse lists look like. -

    -

    Table10.3.Browse subnet example 3

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)

    +

    +

    Table10.3.Browse subnet example 3

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)
    Servers with a (*) after them are non-authoritative names. -

    +

    At this point users looking in their network neighborhood on subnets 1 or 3 will see all the servers on all subnets, users on subnet 2 will still only see the servers on subnets 1 and 2, but not 3. @@ -914,11 +915,11 @@ Finally, the local master browser for subnet 2 (N2_B) will sync again with the domain master browser (N1_C) and will receive the missing server entries. Finally - and as a steady state (if no machines are removed or shut off) the browse lists will look like : -

    -

    Table10.4.Browse subnet example 4

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)

    +

    +

    Table10.4.Browse subnet example 4

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)
    Servers with a (*) after them are non-authoritative names. -

    +

    Synchronizations between the domain master browser and local master browsers will continue to occur, but this should be a steady state situation. @@ -936,11 +937,11 @@ If either router R1 or R2 fails the following will occur: be able to access servers on its local subnet, by using subnet-isolated broadcast NetBIOS name resolution. The effects are similar to that of losing access to a DNS server. -

    Common Errors

    +

    Common Errors

    Many questions are asked on the mailing lists regarding browsing. The majority of browsing problems originate out of incorrect configuration of NetBIOS name resolution. Some are of particular note. -

    How can one flush the Samba NetBIOS name cache without restarting Samba?

    +

    How can one flush the Samba NetBIOS name cache without restarting Samba?

    Samba's nmbd process controls all browse list handling. Under normal circumstances it is safe to restart nmbd. This will effectively flush the Samba NetBIOS name cache and cause it to be rebuilt. Note that this does NOT make certain that a rogue machine name will not re-appear @@ -950,7 +951,7 @@ want to clear a rogue machine from the list then every machine on the network wi shut down and restarted at after all machines are down. Failing a complete restart, the only other thing you can do is wait until the entry times out and is then flushed from the list. This may take a long time on some networks (months). -

    My client reports "This server is not configured to list shared resources"

    +

    My client reports "This server is not configured to list shared resources"

    Your guest account is probably invalid for some reason. Samba uses the guest account for browsing in smbd. Check that your guest account is valid. diff --git a/docs/htmldocs/Other-Clients.html b/docs/htmldocs/Other-Clients.html index a5e7740cf0d..b9d03873934 100644 --- a/docs/htmldocs/Other-Clients.html +++ b/docs/htmldocs/Other-Clients.html @@ -1,7 +1,8 @@ -Chapter38.Samba and other CIFS clients

    Chapter38.Samba and other CIFS clients
    PrevPartVI.AppendixesNext

    Chapter38.Samba and other CIFS clients

    Jim McDonough

    IBM

    Jelmer R. Vernooij

    The Samba Team

    5 Mar 2001

    Table of Contents

    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working - for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1

    This chapter contains client-specific information.

    Macintosh clients?

    + +Chapter38.Samba and other CIFS clients

    Chapter38.Samba and other CIFS clients
    PrevPartVI.AppendixesNext

    Chapter38.Samba and other CIFS clients

    Jim McDonough

    IBM

    Jelmer R. Vernooij

    The Samba Team

    5 Mar 2001

    Table of Contents

    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working + for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1

    This chapter contains client-specific information.

    Macintosh clients?

    Yes. Thursby now has a CIFS Client / Server called DAVE

    They test it against Windows 95, Windows NT and samba for @@ -21,7 +22,7 @@ What Samba offers MS Windows users, these packages offer to Macs. For more info on these packages, Samba, and Linux (and other UNIX-based systems) see http://www.eats.com/linux_mac_win.html -

    OS2 Client

    How can I configure OS/2 Warp Connect or +

    OS2 Client

    How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?

    A more complete answer to this question can be found on http://carol.wins.uva.nl/~leeuw/samba/warp.html.

    Basically, you need three components:

    The File and Print Client ('IBM Peer')
    TCP/IP ('Internet support')
    The "NetBIOS over TCP/IP" driver ('TCPBEUI')

    Installing the first two together with the base operating @@ -39,7 +40,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see to the "Names List", or specify a WINS server ('NetBIOS Nameserver' in IBM and RFC terminology). For Warp Connect you may need to download an update for 'IBM Peer' to bring it on - the same level as Warp 4. See the webpage mentioned above.

    How can I configure OS/2 Warp 3 (not Connect), + the same level as Warp 4. See the webpage mentioned above.

    How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?

    You can use the free Microsoft LAN Manager 2.2c Client for OS/2 from @@ -57,7 +58,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see or NS2000 driver from ftp://ftp.cdrom.com/pub/os2/network/ndis/ instead. -

    How do I get printer driver download working +

    How do I get printer driver download working for OS/2 clients?

    First, create a share called [PRINTDRV] that is world-readable. Copy your OS/2 driver files there. Note that the .EA_ files must still be separate, so you will need @@ -74,7 +75,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see you the driver is not available. On the second attempt, it will work. This is fixed simply by adding the device name to the mapping, after which it will work on the first attempt. -

    Windows for Workgroups

    Use latest TCP/IP stack from Microsoft

    Use the latest TCP/IP stack from Microsoft if you use Windows +

    Windows for Workgroups

    Use latest TCP/IP stack from Microsoft

    Use the latest TCP/IP stack from Microsoft if you use Windows for Workgroups.

    The early TCP/IP stacks had lots of bugs.

    Microsoft has released an incremental upgrade to their TCP/IP 32-Bit @@ -89,7 +90,7 @@ fixed. New files include WINSOCK.DLL, TRACERT.EXE, NETSTAT.EXE, and NBTSTAT.EXE. -

    Delete .pwl files after password change

    +

    Delete .pwl files after password change

    WfWg does a lousy job with passwords. I find that if I change my password on either the unix box or the PC the safest thing to do is to delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password. @@ -98,7 +99,7 @@ If you don't do this you may find that WfWg remembers and uses the old password, even if you told it a new one.

    Often WfWg will totally ignore a password you give it in a dialog box. -

    Configure WfW password handling

    +

    Configure WfW password handling

    There is a program call admincfg.exe on the last disk (disk 8) of the WFW 3.11 disk set. To install it type EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE. @@ -106,11 +107,11 @@ Then add an icon for it via the Program Manager New Menu. This program allows you to control how WFW handles passwords. ie disable Password Caching etc for use with security = user -

    Case handling of passwords

    Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the smb.conf(5) information on password level to specify what characters samba should try to uppercase when checking.

    Use TCP/IP as default protocol

    To support print queue reporting you may find +

    Case handling of passwords

    Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the smb.conf(5) information on password level to specify what characters samba should try to uppercase when checking.

    Use TCP/IP as default protocol

    To support print queue reporting you may find that you have to use TCP/IP as the default protocol under WfWg. For some reason if you leave NetBEUI as the default it may break the print queue reporting on some systems. -It is presumably a WfWg bug.

    Speed improvement

    +It is presumably a WfWg bug.

    Speed improvement

    Note that some people have found that setting DefaultRcvWindow in the [MSTCP] section of the SYSTEM.INI file under WfWg to 3072 gives a @@ -121,7 +122,7 @@ performance with a large value (16384 or larger). Other people have reported that anything over 3072 slows things down enormously. One person even reported a speed drop of a factor of 30 when he went from 3072 to 8192. I don't know why. -

    Windows '95/'98

    +

    Windows '95/'98

    When using Windows 95 OEM SR2 the following updates are recommended where Samba is being used. Please NOTE that the above change will affect you once these updates have been installed. @@ -135,11 +136,11 @@ install the OLEUPD.EXE fix. This fix may stop your machine from hanging for an extended period when exiting Outlook and you may also notice a significant speedup when accessing network neighborhood services. -

    Speed improvement

    +

    Speed improvement

    Configure the win95 TCPIP registry settings to give better performance. I use a program called MTUSPEED.exe which I got off the net. There are various other utilities of this type freely available. -

    Windows 2000 Service Pack 2

    +

    Windows 2000 Service Pack 2

    There are several annoyances with Windows 2000 SP2. One of which only appears when using a Samba server to host user profiles to Windows 2000 SP2 clients in a Windows domain. This assumes @@ -180,7 +181,7 @@ the Win2k client a response to the QuerySecurityDescriptor trans2 call which causes the client to set a default ACL for the profile. This default ACL includes

    DOMAIN\user "Full Control">

    Note

    This bug does not occur when using winbind to -create accounts on the Samba host for Domain users.

    Windows NT 3.1

    If you have problems communicating across routers with Windows +create accounts on the Samba host for Domain users.

    Windows NT 3.1

    If you have problems communicating across routers with Windows NT 3.1 workstations, read this Microsoft Knowledge Base article.

    PrevUpNext
    Chapter37.PortabilityHomeChapter39.Samba Performance Tuning
    diff --git a/docs/htmldocs/PolicyMgmt.html b/docs/htmldocs/PolicyMgmt.html index 775cd6cc169..3b3e2b3d1a6 100644 --- a/docs/htmldocs/PolicyMgmt.html +++ b/docs/htmldocs/PolicyMgmt.html @@ -1,10 +1,11 @@ -Chapter23.System and Account Policies
    Chapter23.System and Account Policies
    PrevPartIII.Advanced ConfigurationNext

    Chapter23.System and Account Policies

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work

    + +Chapter23.System and Account Policies

    Chapter23.System and Account Policies
    PrevPartIII.Advanced ConfigurationNext

    Chapter23.System and Account Policies

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work

    This chapter summarises the current state of knowledge derived from personal practice and knowledge from samba mailing list subscribers. Before reproduction of posted information effort has been made to validate the information provided. Where additional information was uncovered through this validation it is provided also. -

    Features and Benefits

    +

    Features and Benefits

    When MS Windows NT3.5 was introduced the hot new topic was the ability to implement Group Policies for users and group. Then along came MS Windows NT4 and a few sites started to adopt this capability. How do we know that? By way of the number of "booboos" @@ -25,7 +26,7 @@ network client workstations.

    A tool new to Samba-3 may become an important part of the future Samba Administrators' arsenal. The editreg tool is described in this document. -

    Creating and Managing System Policies

    +

    Creating and Managing System Policies

    Under MS Windows platforms, particularly those following the release of MS Windows NT4 and MS Windows 95) it is possible to create a type of file that would be placed in the NETLOGON share of a domain controller. As the client logs onto the network @@ -60,7 +61,7 @@ be read and understood. Try searching on the Microsoft web site for "Group

    What follows is a very brief discussion with some helpful notes. The information provided here is incomplete - you are warned. -

    Windows 9x/Me Policies

    +

    Windows 9x/Me Policies

    You need the Win98 Group Policy Editor to set Group Profiles up under Windows 9x/Me. It can be found on the Original full product Win98 installation CD under tools/reskit/netadmin/poledit. Install this using the @@ -86,7 +87,7 @@ here is incomplete - you are warned. grouppol.inf. Log off and on again a couple of times and see if Win98 picks up group policies. Unfortunately this needs to be done on every Win9x/Me machine that uses group policies. -

    Windows NT4 Style Policy Files

    +

    Windows NT4 Style Policy Files

    To create or edit ntconfig.pol you must use the NT Server Policy Editor, poledit.exe which is included with NT4 Server but not NT Workstation. There is a Policy Editor on a NT4 @@ -107,14 +108,14 @@ here is incomplete - you are warned. be extracted as well. It is also possible to downloaded the policy template files for Office97 and get a copy of the policy editor. Another possible location is with the Zero Administration Kit available for download from Microsoft. -

    Registry Spoiling

    +

    Registry Spoiling

    With NT4 style registry based policy changes, a large number of settings are not automatically reversed as the user logs off. Since the settings that were in the NTConfig.POL file were applied to the client machine registry and that apply to the hive key HKEY_LOCAL_MACHINE are permanent until explicitly reversed. This is known as tattooing. It can have serious consequences down-stream and the administrator must be extremely careful not to lock out the ability to manage the machine at a later date. -

    MS Windows 200x / XP Professional Policies

    +

    MS Windows 200x / XP Professional Policies

    Windows NT4 System policies allows setting of registry parameters specific to users, groups and computers (client workstations) that are members of the NT4 style domain. Such policy file will work with MS Windows 2000 / XP clients also. @@ -151,7 +152,7 @@ here is incomplete - you are warned. to any number of concurrently applicable (and applied) policy sets (GPOs). Active Directory allows the administrator to also set filters over the policy settings. No such equivalent capability exists with NT4 style policy files. -

    Administration of Win2K / XP Policies

    +

    Administration of Win2K / XP Policies

    Instead of using the tool called The System Policy Editor, commonly called Poledit (from the executable name poledit.exe), GPOs are created and managed using a Microsoft Management Console (MMC) snap-in as follows:

    1. @@ -177,7 +178,7 @@ here is incomplete - you are warned. The MS Windows 2000 Resource Kit contains a tool called gpolmig.exe. This tool can be used to migrate an NT4 NTConfig.POL file into a Windows 200x style GPO. Be VERY careful how you use this powerful tool. Please refer to the resource kit manuals for specific usage information. -

    Managing Account/User Policies

    +

    Managing Account/User Policies

    Policies can define a specific user's settings or the settings for a group of users. The resulting policy file contains the registry settings for all users, groups, and computers that will be using the policy file. Separate policy files for each user, group, or computer are not not necessary. @@ -202,42 +203,42 @@ In addition to user access controls that may be imposed or applied via system an in a manner that works in conjunction with user profiles, the user management environment under MS Windows NT4/200x/XP allows per domain as well as per user account restrictions to be applied. Common restrictions that are frequently used includes: -

    -

    Logon Hours
    Password Aging
    Permitted Logon from certain machines only
    Account type (Local or Global)
    User Rights

    -

    Samba Editreg Toolset

    +

    +
    Logon Hours
    Password Aging
    Permitted Logon from certain machines only
    Account type (Local or Global)
    User Rights
    +

    Samba Editreg Toolset

    Describe in detail the benefits of editreg and how to use it. -

    Windows NT4/200x

    +

    Windows NT4/200x

    The tools that may be used to configure these types of controls from the MS Windows environment are: The NT4 User Manager for domains, the NT4 System and Group Policy Editor, the registry editor (regedt32.exe). Under MS Windows 200x/XP this is done using the Microsoft Management Console (MMC) with appropriate "snap-ins", the registry editor, and potentially also the NT4 System and Group Policy Editor. -

    Samba PDC

    +

    Samba PDC

    With a Samba Domain Controller, the new tools for managing of user account and policy information includes: smbpasswd, pdbedit, net, rpcclient. The administrator should read the man pages for these tools and become familiar with their use. -

    System Startup and Logon Processing Overview

    +

    System Startup and Logon Processing Overview

    The following attempts to document the order of processing of system and user policies following a system reboot and as part of the user logon:

    1. Network starts, then Remote Procedure Call System Service (RPCSS) and Multiple Universal Naming Convention Provider (MUP) start -

    2. +

    3. Where Active Directory is involved, an ordered list of Group Policy Objects (GPOs) is downloaded and applied. The list may include GPOs that: -

      Apply to the location of machines in a Directory
      Apply only when settings have changed
      Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.

      +
      Apply to the location of machines in a Directory
      Apply only when settings have changed
      Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.
      No desktop user interface is presented until the above have been processed. -

    4. +

    5. Execution of start-up scripts (hidden and synchronous by default).

    6. A keyboard action to affect start of logon (Ctrl-Alt-Del).

    7. User credentials are validated, User profile is loaded (depends on policy settings). -

    8. +

    9. An ordered list of User GPOs is obtained. The list contents depends on what is configured in respect of: -

      Is user a domain member, thus subject to particular policies
      Loopback enablement, and the state of the loopback policy (Merge or Replace)
      Location of the Active Directory itself
      Has the list of GPOs changed. No processing is needed if not changed.

      -

    10. +
      Is user a domain member, thus subject to particular policies
      Loopback enablement, and the state of the loopback policy (Merge or Replace)
      Location of the Active Directory itself
      Has the list of GPOs changed. No processing is needed if not changed.
      +

    11. User Policies are applied from Active Directory. Note: There are several types.

    12. Logon scripts are run. New to Win2K and Active Directory, logon scripts may be obtained based on Group @@ -246,10 +247,10 @@ reboot and as part of the user logon:

    13. The User Interface as determined from the GPOs is presented. Note: In a Samba domain (like and NT4 Domain) machine (system) policies are applied at start-up, User policies are applied at logon. -

    Common Errors

    +

    Common Errors

    Policy related problems can be very difficult to diagnose and even more difficult to rectify. The following collection demonstrates only basic issues. -

    Policy Does Not Work

    +

    Policy Does Not Work

    Question: We have created the config.pol file and put it in the NETLOGON share. It has made no difference to our Win XP Pro machines, they just don't see it. IT worked fine with Win 98 but does not work any longer since we upgraded to Win XP Pro. Any hints? diff --git a/docs/htmldocs/Portability.html b/docs/htmldocs/Portability.html index bb2c20ac9f3..f40d0dcd11f 100644 --- a/docs/htmldocs/Portability.html +++ b/docs/htmldocs/Portability.html @@ -1,6 +1,7 @@ -Chapter37.Portability

    Chapter37.Portability
    PrevPartVI.AppendixesNext

    Chapter37.Portability

    Jelmer R. Vernooij

    The Samba Team

    Table of Contents

    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9

    Samba works on a wide range of platforms but the interface all the + +Chapter37.Portability

    Chapter37.Portability
    PrevPartVI.AppendixesNext

    Chapter37.Portability

    Jelmer R. Vernooij

    The Samba Team

    Table of Contents

    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9

    Samba works on a wide range of platforms but the interface all the platforms provide is not always compatible. This chapter contains -platform-specific information about compiling and using samba.

    HPUX

    +platform-specific information about compiling and using samba.

    HPUX

    HP's implementation of supplementary groups is, er, non-standard (for hysterical reasons). There are two group files, /etc/group and /etc/logingroup; the system maps UIDs to numbers using the former, but @@ -20,7 +21,7 @@ allowed range. On HPUX you must use gcc or the HP ANSI compiler. The free compiler that comes with HP-UX is not ANSI compliant and cannot compile Samba. -

    SCO Unix

    +

    SCO Unix

    If you run an old version of SCO Unix then you may need to get important TCP/IP patches for Samba to work correctly. Without the patch, you may encounter corrupt data transfers using samba. @@ -28,7 +29,7 @@ encounter corrupt data transfers using samba. The patch you need is UOD385 Connection Drivers SLS. It is available from SCO (ftp.sco.com, directory SLS, files uod385a.Z and uod385a.ltr.Z). -

    DNIX

    +

    DNIX

    DNIX has a problem with seteuid() and setegid(). These routines are needed for Samba to work correctly, but they were left out of the DNIX C library for some reason. @@ -87,13 +88,13 @@ LIBSM = setegid.o seteuid.o -ln You should then remove the line: 

     #define NO_EID
-

    from the DNIX section of includes.h

    RedHat Linux Rembrandt-II

    +

    from the DNIX section of includes.h

    RedHat Linux Rembrandt-II

    By default RedHat Rembrandt-II during installation adds an entry to /etc/hosts as follows: -

    +
     	127.0.0.1 loopback "hostname"."domainname"
-
    
-
    
+
    +

    This causes Samba to loop back onto the loopback interface. The result is that Samba fails to communicate correctly with the world and therefor may fail to correctly negotiate who @@ -101,10 +102,10 @@ is the master browse list holder and who is the master browser.

    Corrective Action: Delete the entry after the word loopback in the line starting 127.0.0.1 -

    AIX

    Sequential Read Ahead

    +

    AIX

    Sequential Read Ahead

    Disabling Sequential Read Ahead using vmtune -r 0 improves Samba performance significantly. -

    Solaris

    Locking improvements

    Some people have been experiencing problems with F_SETLKW64/fcntl +

    Solaris

    Locking improvements

    Some people have been experiencing problems with F_SETLKW64/fcntl when running Samba on Solaris. The built in file locking mechanism was not scalable. Performance would degrade to the point where processes would get into loops of trying to lock a file. It would try a lock, then fail, diff --git a/docs/htmldocs/ProfileMgmt.html b/docs/htmldocs/ProfileMgmt.html index 0b9a40df62d..0a2f609bd66 100644 --- a/docs/htmldocs/ProfileMgmt.html +++ b/docs/htmldocs/ProfileMgmt.html @@ -1,4 +1,5 @@ -Chapter24.Desktop Profile Management

    Chapter24.Desktop Profile Management
    PrevPartIII.Advanced ConfigurationNext

    Chapter24.Desktop Profile Management

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile

    Features and Benefits

    + +Chapter24.Desktop Profile Management

    Chapter24.Desktop Profile Management
    PrevPartIII.Advanced ConfigurationNext

    Chapter24.Desktop Profile Management

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile

    Features and Benefits

    Roaming Profiles are feared by some, hated by a few, loved by many, and a Godsend for some administrators.

    @@ -11,7 +12,7 @@ problem to others. In particular, users of mobile computing tools, where often t be a sustained network connection, are often better served by purely Local Profiles. This chapter provides information to help the Samba administrator to deal with those situations also. -

    Roaming Profiles

    Warning

    +

    Roaming Profiles

    Warning

    Roaming profiles support is different for Win9x / Me and Windows NT4/200x.

    Before discussing how to configure roaming profiles, it is useful to see how @@ -24,23 +25,23 @@ profiles are restricted to being stored in the user's home directory.

    Windows NT4/200x clients send a NetSAMLogon RPC request, which contains many fields, including a separate field for the location of the user's profiles. -

    Samba Configuration for Profile Handling

    +

    Samba Configuration for Profile Handling

    This section documents how to configure Samba for MS Windows client profile support. -

    NT4/200x User Profiles

    +

    NT4/200x User Profiles

    To support Windows NT4/200x clients, in the [global] section of smb.conf set the following (for example): -

    -

    +
    
+
     	logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath
-
    
+
    This is typically implemented like: -

    +
     		logon path = \\%L\Profiles\%u
-
    
+
    where %L translates to the name of the Samba server and %u translates to the user name -

    +

    The default for this option is \\%N\%U\profile, namely \\sambaserver\username\profile. The \\N%\%U service is created automatically by the [homes] service. If you are using @@ -51,7 +52,7 @@ semantics of %L and %N, as well as %U and %u. MS Windows NT/2K clients at times do not disconnect a connection to a server between logons. It is recommended to NOT use the homes meta-service name as part of the profile share path. -

    Windows 9x / Me User Profiles

    +

    Windows 9x / Me User Profiles

    To support Windows 9x / Me clients, you must use the logon home parameter. Samba has now been fixed so that net use /home now works as well, and it, too, relies on the logon home parameter. @@ -69,28 +70,28 @@ Not only that, but net use /home will also wor Windows 9x / Me. It removes any directory stuff off the end of the home directory area and only uses the server and share portion. That is, it looks like you specified \\%L\%U for logon home. -

    Mixed Windows 9x / Me and Windows NT4/200x User Profiles

    +

    Mixed Windows 9x / Me and Windows NT4/200x User Profiles

    You can support profiles for both Win9X and WinNT clients by setting both the logon home and logon path parameters. For example: 

     	logon home = \\%L\%u\.profiles
 	logon path = \\%L\profiles\%u
-

    Disabling Roaming Profile Support

    +

    Disabling Roaming Profile Support

    A question often asked is “How may I enforce use of local profiles?” or “How do I disable Roaming Profiles?”

    There are three ways of doing this: -

    In smb.conf

    +

    In smb.conf
    Affect the following settings and ALL clients will be forced to use a local profile: - 

    +		
     			logon home =
 			logon path =
-		
    
-
    MS Windows Registry:

    + +

    MS Windows Registry:
    By using the Microsoft Management Console gpedit.msc to instruct your MS Windows XP machine to use only a local profile. This of course modifies registry settings. The full path to the option is: - 

    +	
     	Local Computer Policy\
 		Computer Configuration\
 			Administrative Templates\
@@ -99,8 +100,8 @@ There are three ways of doing this:
 
 	Disable:	Only Allow Local User Profiles
 	Disable:	Prevent Roaming Profile Change from Propagating to the Server
-	
    
-
    Change of Profile Type:

    + +

    Change of Profile Type:

    From the start menu right click on the My Computer icon, select Properties, click on the User Profiles tab, select the profile you wish to change from Roaming type to Local, click Change Type. @@ -112,7 +113,7 @@ profiles. The specifics of how to convert a local profile to a roaming profile, or a roaming profile to a local one vary according to the version of MS Windows you are running. Consult the Microsoft MS Windows Resource Kit for your version of Windows for specific information. -

    Windows Client Profile Configuration Information

    Windows 9x / Me Profile Setup

    +

    Windows Client Profile Configuration Information

    Windows 9x / Me Profile Setup

    When a user first logs in on Windows 9X, the file user.DAT is created, as are folders Start Menu, Desktop, Programs and Nethood. @@ -218,7 +219,7 @@ If you have access to an Windows NT4/200x server, then first set up roaming prof and / or netlogons on the Windows NT4/200x server. Make a packet trace, or examine the example packet traces provided with Windows NT4/200x server, and see what the differences are with the equivalent samba trace. -

    Windows NT4 Workstation

    +

    Windows NT4 Workstation

    When a user first logs in to a Windows NT Workstation, the profile NTuser.DAT is created. The profile location can be now specified through the logon path parameter. @@ -247,7 +248,7 @@ turns a profile into a mandatory one.

    The case of the profile is significant. The file must be called NTuser.DAT or, for a mandatory profile, NTuser.MAN. -

    Windows 2000/XP Professional

    +

    Windows 2000/XP Professional

    You must first convert the profile from a local profile to a domain profile on the MS Windows workstation as follows:

    1. @@ -297,7 +298,7 @@ On the XP workstation log in with an Administrator account.

    2. Click: Start, Run

    3. Type: mmc

    4. Click: OK

    5. A Microsoft Management Console should appear.

    6. Click: File, Add/Remove Snap-in..., Add

    7. Double-Click: Group Policy

    8. Click: Finish, Close

    9. Click: OK

    10. In the "Console Root" window:

    11. Expand: Local Computer Policy, Computer Configuration, Administrative Templates, System, User Profiles

    12. Double-Click: Do not check for user ownership of Roaming Profile Folders

    13. Select: Enabled

    14. Click: OK

    15. Close the whole console. You do not need to save the settings (this refers to the console settings rather than the policies you have - changed).

    16. Reboot

    Sharing Profiles between W9x/Me and NT4/200x/XP workstations

    + changed).

  • Reboot

    • Sharing Profiles between W9x/Me and NT4/200x/XP workstations

    Sharing of desktop profiles between Windows versions is NOT recommended. Desktop profiles are an evolving phenomenon and profiles for later versions of MS Windows clients add features that may interfere with earlier versions @@ -314,12 +315,12 @@ that need to be common are logon path and

    If you have this set up correctly, you will find separate user.DAT and NTuser.DAT files in the same profile directory. -

    Profile Migration from Windows NT4/200x Server to Samba

    +

    Profile Migration from Windows NT4/200x Server to Samba

    There is nothing to stop you specifying any path that you like for the location of users' profiles. Therefore, you could specify that the profile be stored on a samba server, or any other SMB server, as long as that SMB server supports encrypted passwords. -

    Windows NT4 Profile Management Tools

    +

    Windows NT4 Profile Management Tools

    Unfortunately, the Resource Kit information is specific to the version of MS Windows NT4/200x. The correct resource kit is required for each platform.

    @@ -336,17 +337,17 @@ domain is not a member of a trust relationship with your NT4 PDC.

    c:\temp\foobar

  • Click on the button Change in the Permitted to use box.

  • Click on the group 'Everyone' and then click OK. This closes the 'choose user' box.

  • Now click OK.

    • Follow the above for every profile you need to migrate. -

    Side bar Notes

    +

    Side bar Notes

    You should obtain the SID of your NT4 domain. You can use smbpasswd to do this. Read the man page.

    With Samba-3.0.0 alpha code you can import all you NT4 domain accounts using the net samsync method. This way you can retain your profile settings as well as all your users. -

    moveuser.exe

    +

    moveuser.exe

    The W2K professional resource kit has moveuser.exe. moveuser.exe changes the security of a profile from one user to another. This allows the account domain to change, and/or the user name to change. -

    Get SID

    +

    Get SID

    You can identify the SID by using GetSID.exe from the Windows NT Server 4.0 Resource Kit.

    @@ -359,7 +360,7 @@ users who have logged on to this computer. (To find the profile information for the user whose locally cached profile you want to move, find the SID for the user with the GetSID.exe utility.) Inside of the appropriate user's subkey, you will see a string value named ProfileImagePath. -

    Mandatory profiles

    +

    Mandatory profiles

    A Mandatory Profile is a profile that the user does NOT have the ability to overwrite. During the user's session it may be possible to change the desktop environment, but as the user logs out all changes made will be lost. If it is desired to NOT allow the @@ -375,7 +376,7 @@ file in the copied profile and rename it to NTUser.MAN.

    For MS Windows 9x / Me it is the User.DAT file that must be renamed to User.MAN to affect a mandatory profile. -

    Creating/Managing Group Profiles

    +

    Creating/Managing Group Profiles

    Most organisations are arranged into departments. There is a nice benefit in this fact since usually most users in a department will require the same desktop applications and the same desktop layout. MS Windows NT4/200x/XP will allow the @@ -390,14 +391,14 @@ the now modified profile.

    Note

    Be careful with group profiles, if the user who is a member of a group also has a personal profile, then the result will be a fusion (merge) of the two. -

    Default Profile for Windows Users

    +

    Default Profile for Windows Users

    MS Windows 9x / Me and NT4/200x/XP will use a default profile for any user for whom a profile does not already exist. Armed with a knowledge of where the default profile is located on the Windows workstation, and knowing which registry keys affect the path from which the default profile is created, it is possible to modify the default profile to one that has been optimised for the site. This has significant administrative advantages. -

    MS Windows 9x/Me

    +

    MS Windows 9x/Me

    To enable default per use profiles in Windows 9x / Me you can either use the Windows 98 System Policy Editor or change the registry directly.

    @@ -409,7 +410,7 @@ select User Profiles, click on the enable box. Do To modify the registry directly, launch the Registry Editor (regedit.exe), select the hive HKEY_LOCAL_MACHINE\Network\Logon. Now add a DWORD type key with the name "User Profiles", to enable user profiles set the value to 1, to disable user profiles set it to 0. -

    How User Profiles Are Handled in Windows 9x / Me?

    +

    How User Profiles Are Handled in Windows 9x / Me?

    When a user logs on to a Windows 9x / Me machine, the local profile path, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProfileList, is checked for an existing entry for that user: @@ -425,7 +426,7 @@ If a User Profile is not found in either location, the Default User Profile from machine is used and is copied to a newly created folder for the logged on user. At log off, any changes that the user made are written to the user's local profile. If the user has a roaming profile, the changes are written to the user's profile on the server. -

    MS Windows NT4 Workstation

    +

    MS Windows NT4 Workstation

    On MS Windows NT4 the default user profile is obtained from the location %SystemRoot%\Profiles which in a default installation will translate to C:\WinNT\Profiles. Under this directory on a clean install there will be @@ -466,15 +467,15 @@ the following steps are followed in respect of profile handling: MS Windows NT4 profiles may be Local or Roaming. A Local profile will stored in the %SystemRoot%\Profiles\%USERNAME% location. A roaming profile will also remain stored in the same way, unless the following registry key is created: -

    -

    +
    
+
     	HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\
 	"DeleteRoamingCache"=dword:00000001
-
    
+
    In which case, the local copy (in %SystemRoot%\Profiles\%USERNAME%) will be deleted on logout. -

    +

    Under MS Windows NT4 default locations for common resources (like My Documents may be redirected to a network share by modifying the following registry keys. These changes may be affected via use of the System Policy Editor (to do so may require that you create your owns template extension @@ -487,17 +488,17 @@ are controlled by entries on Windows NT4 is: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\

    The above hive key contains a list of automatically managed folders. The default entries are: -

    -

    Table24.1.User Shell Folder registry keys default values

    NameDefault Value
    AppData%USERPROFILE%\Application Data
    Desktop%USERPROFILE%\Desktop
    Favorites%USERPROFILE%\Favorites
    NetHood%USERPROFILE%\NetHood
    PrintHood%USERPROFILE%\PrintHood
    Programs%USERPROFILE%\Start Menu\Programs
    Recent%USERPROFILE%\Recent
    SendTo%USERPROFILE%\SendTo
    Start Menu %USERPROFILE%\Start Menu
    Startup%USERPROFILE%\Start Menu\Programs\Startup

    -

    +

    +

    Table24.1.User Shell Folder registry keys default values

    NameDefault Value
    AppData%USERPROFILE%\Application Data
    Desktop%USERPROFILE%\Desktop
    Favorites%USERPROFILE%\Favorites
    NetHood%USERPROFILE%\NetHood
    PrintHood%USERPROFILE%\PrintHood
    Programs%USERPROFILE%\Start Menu\Programs
    Recent%USERPROFILE%\Recent
    SendTo%USERPROFILE%\SendTo
    Start Menu %USERPROFILE%\Start Menu
    Startup%USERPROFILE%\Start Menu\Programs\Startup
    +

    The registry key that contains the location of the default profile settings is:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders -

    +

    The default entries are: -

    Table24.2.Defaults of profile settings registry keys

    Common Desktop%SystemRoot%\Profiles\All Users\Desktop
    Common Programs%SystemRoot%\Profiles\All Users\Programs
    Common Start Menu%SystemRoot%\Profiles\All Users\Start Menu
    Common Startup%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup

    -

    MS Windows 200x/XP

    Note

    +

    Table24.2.Defaults of profile settings registry keys

    Common Desktop%SystemRoot%\Profiles\All Users\Desktop
    Common Programs%SystemRoot%\Profiles\All Users\Programs
    Common Start Menu%SystemRoot%\Profiles\All Users\Start Menu
    Common Startup%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup
    +

    MS Windows 200x/XP

    Note

    MS Windows XP Home Edition does use default per user profiles, but can not participate in domain security, can not log onto an NT/ADS style domain, and thus can obtain the profile only from itself. While there are benefits in doing this the beauty of those MS Windows @@ -545,9 +546,9 @@ are controlled by entries on Windows 200x/XP is: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\

    The above hive key contains a list of automatically managed folders. The default entries are: -

    -

    Table24.3.Defaults of default user profile paths registry keys

    NameDefault Value
    AppData%USERPROFILE%\Application Data
    Cache%USERPROFILE%\Local Settings\Temporary Internet Files
    Cookies%USERPROFILE%\Cookies
    Desktop%USERPROFILE%\Desktop
    Favorites%USERPROFILE%\Favorites
    History%USERPROFILE%\Local Settings\History
    Local AppData%USERPROFILE%\Local Settings\Application Data
    Local Settings%USERPROFILE%\Local Settings
    My Pictures%USERPROFILE%\My Documents\My Pictures
    NetHood%USERPROFILE%\NetHood
    Personal%USERPROFILE%\My Documents
    PrintHood%USERPROFILE%\PrintHood
    Programs%USERPROFILE%\Start Menu\Programs
    Recent%USERPROFILE%\Recent
    SendTo%USERPROFILE%\SendTo
    Start Menu%USERPROFILE%\Start Menu
    Startup%USERPROFILE%\Start Menu\Programs\Startup
    Templates%USERPROFILE%\Templates

    -

    +

    +

    Table24.3.Defaults of default user profile paths registry keys

    NameDefault Value
    AppData%USERPROFILE%\Application Data
    Cache%USERPROFILE%\Local Settings\Temporary Internet Files
    Cookies%USERPROFILE%\Cookies
    Desktop%USERPROFILE%\Desktop
    Favorites%USERPROFILE%\Favorites
    History%USERPROFILE%\Local Settings\History
    Local AppData%USERPROFILE%\Local Settings\Application Data
    Local Settings%USERPROFILE%\Local Settings
    My Pictures%USERPROFILE%\My Documents\My Pictures
    NetHood%USERPROFILE%\NetHood
    Personal%USERPROFILE%\My Documents
    PrintHood%USERPROFILE%\PrintHood
    Programs%USERPROFILE%\Start Menu\Programs
    Recent%USERPROFILE%\Recent
    SendTo%USERPROFILE%\SendTo
    Start Menu%USERPROFILE%\Start Menu
    Startup%USERPROFILE%\Start Menu\Programs\Startup
    Templates%USERPROFILE%\Templates
    +

    There is also an entry called "Default" that has no value set. The default entry is of type REG_SZ, all the others are of type REG_EXPAND_SZ.

    @@ -571,9 +572,9 @@ MS Windows 200x/XP profiles may be Local A roaming profile will be cached locally unless the following registry key is created:

    HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\"DeleteRoamingCache"=dword:00000001

    In which case, the local cache copy will be deleted on logout. -

    Common Errors

    +

    Common Errors

    The following are some typical errors/problems/questions that have been asked. -

    How does one set up roaming profiles for just one (or a few) user/s or group/s?

    +

    How does one set up roaming profiles for just one (or a few) user/s or group/s?

    With samba-2.2.x the choice you have is to enable or disable roaming profiles support. It is a global only setting. The default is to have roaming profiles and the default path will locate them in the user's home @@ -591,25 +592,25 @@ using the Domain User Manager (as with MS Windows NT4/ Win 2Kx).

    In any case, you can configure only one profile per user. That profile can be either: -

    A profile unique to that user
    A mandatory profile (one the user can not change)
    A group profile (really should be mandatory ie:unchangable)

    Can NOT use Roaming Profiles

    +

    A profile unique to that user
    A mandatory profile (one the user can not change)
    A group profile (really should be mandatory ie:unchangable)

    Can NOT use Roaming Profiles

    “ I dont want Roaming profile to be implemented, I just want to give users local profiles only. ... Please help me I am totally lost with this error from past two days I tried everything and googled around quite a bit but of no help. Please help me. -”

    +”

    Your choices are: -

    Local profiles

    +

    Local profiles

    I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out -

    Roaming profiles

    -

    can use auto-delete on logout option
    requires a registry key change on workstation

    +

    Roaming profiles
    +
    can use auto-delete on logout option
    requires a registry key change on workstation
    Your choices are: -

    Personal Roaming profiles

    +

    Personal Roaming profiles

    - should be preserved on a central server - workstations 'cache' (store) a local copy - used in case the profile can not be downloaded @@ -617,10 +618,10 @@ Your choices are:

    Group profiles

    - loaded from a central place

    Mandatory profiles

    - can be personal or group - can NOT be changed (except by an administrator -

    -

    +

    +
    -

    +

    A WinNT4/2K/XP profile can vary in size from 130KB to off the scale. Outlook PST files are most often part of the profile and can be many GB in size. On average (in a well controlled environment) roaming profile size of @@ -635,19 +636,19 @@ a problem free site.

    Microsoft's answer to the PST problem is to store all email in an MS Exchange Server back-end. But this is another story ...! -

    +

    So, having LOCAL profiles means: -

    If lots of users user each machine - lot's of local disk storage needed for local profiles
    Every workstation the user logs into has it's own profile - can be very different from machine to machine

    +
    If lots of users user each machine - lot's of local disk storage needed for local profiles
    Every workstation the user logs into has it's own profile - can be very different from machine to machine
    On the other hand, having roaming profiles means: -

    The network administrator can control EVERY aspect of user profiles
    With the use of mandatory profiles - a drastic reduction in network management overheads
    User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably

    +
    The network administrator can control EVERY aspect of user profiles
    With the use of mandatory profiles - a drastic reduction in network management overheads
    User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably
    -

    +

    I have managed and installed MANY NT/2K networks and have NEVER found one where users who move from machine to machine are happy with local profiles. In the long run local profiles bite them. -

    Changing the default profile

    “ +

    Changing the default profile

    “ When the client tries to logon to the PDC it looks for a profile to download where do I put this default profile. ”

    diff --git a/docs/htmldocs/SWAT.html b/docs/htmldocs/SWAT.html index b4067d75d89..f7605ceb4db 100644 --- a/docs/htmldocs/SWAT.html +++ b/docs/htmldocs/SWAT.html @@ -1,4 +1,5 @@ -Chapter32.SWAT - The Samba Web Administration Tool

    Chapter32.SWAT - The Samba Web Administration Tool
    PrevPartIV.Migration and UpdatingNext

    Chapter32.SWAT - The Samba Web Administration Tool

    John H. Terpstra

    Samba Team

    April 21, 2003

    Table of Contents

    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page

    + +Chapter32.SWAT - The Samba Web Administration Tool

    Chapter32.SWAT - The Samba Web Administration Tool
    PrevPartIV.Migration and UpdatingNext

    Chapter32.SWAT - The Samba Web Administration Tool

    John H. Terpstra

    Samba Team

    April 21, 2003

    Table of Contents

    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page

    There are many and varied opinions regarding the usefulness or otherwise of SWAT. No matter how hard one tries to produce the perfect configuration tool it remains an object of personal taste. SWAT is a tool that will allow web based configuration @@ -6,7 +7,7 @@ of samba. It has a wizard that may help to get samba configured quickly, it has sensitive help on each smb.conf parameter, it provides for monitoring of current state of connection information, and it allows network wide MS Windows network password management. -

    Features and Benefits

    +

    Features and Benefits

    There are network administrators who believe that it is a good idea to write systems documentation inside configuration files, for them SWAT will aways be a nasty tool. SWAT does not store the configuration file in any intermediate form, rather, it stores only the @@ -18,7 +19,7 @@ internal ordering. So before using SWAT please be warned - SWAT will completely replace your smb.conf with a fully optimised file that has been stripped of all comments you might have placed there and only non-default settings will be written to the file. -

    Enabling SWAT for use

    +

    Enabling SWAT for use

    SWAT should be installed to run via the network super daemon. Depending on which system your Unix/Linux system has you will have either an inetd or xinetd based system. @@ -34,8 +35,8 @@ The control entry for the older style file might be: swat stream tcp nowait.400 root /usr/sbin/swat swat

    A control file for the newer style xinetd could be: -

    -

    +
    
+
     	# default: off
 	# description: SWAT is the Samba Web Admin Tool. Use swat \
 	#              to configure your Samba server. To use SWAT, \
@@ -51,9 +52,9 @@ A control file for the newer style xinetd could be:
 		log_on_failure  += USERID
 		disable = yes
 	}
-
    
+
    -

    +

    Both the above examples assume that the swat binary has been located in the /usr/sbin directory. In addition to the above SWAT will use a directory access point from which it will load it's help files @@ -72,32 +73,32 @@ So long as you log onto SWAT as the user rootHOME, GLOBALS, SHARES, PRINTERS, WIZARD, STATUS, VIEW, PASSWORD. -

    Securing SWAT through SSL

    +

    Securing SWAT through SSL

    Lots of people have asked about how to setup SWAT with SSL to allow for secure remote administration of Samba. Here is a method that works, courtesy of Markus Krieger

    Modifications to the swat setup are as following:

    1. install OpenSSL -

    2. +

    3. generate certificate and private key - 

      +	
       root# /usr/bin/openssl req -new -x509 -days 365 -nodes -config \
  	/usr/share/doc/packages/stunnel/stunnel.cnf \
 	-out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem

    4. remove swat-entry from [x]inetd -

    5. +

    6. start stunnel - 

      +	
       root# stunnel -p /etc/stunnel/stunnel.pem -d 901 \
 	 -l /usr/local/samba/bin/swat swat

    afterwords simply contact to swat by using the URL https://myhost:901, accept the certificate and the SSL connection is up. -

    The SWAT Home Page

    +

    The SWAT Home Page

    The SWAT title page provides access to the latest Samba documentation. The manual page for each samba component is accessible from this page as are the Samba-HOWTO-Collection (this document) as well as the O'Reilly book "Using Samba". @@ -113,7 +114,7 @@ as it runs SWAT without authentication and with full administrative ability. ie: changes to smb.conf as well as general operation with root privileges. The option that creates this ability is the -a flag to swat. Do not use this in any production environment. -

    Global Settings

    +

    Global Settings

    The Globals button will expose a page that allows configuration of the global parameters in smb.conf. There are three levels of exposure of the parameters:

    • @@ -135,7 +136,7 @@ your changes will be immediately lost.

      Note

      SWAT has context sensitive help. To find out what each parameter is for simply click the Help link to the left of the configuration parameter. -

    Share Settings

    +

    Share Settings

    To affect a currently configured share, simply click on the pull down button between the Choose Share and the Delete Share buttons, select the share you wish to operate on, then to edit the settings click on the @@ -145,7 +146,7 @@ select the share you wish to operate on, then to edit the settings click on the To create a new share, next to the button labelled Create Share enter into the text field the name of the share to be created, then click on the Create Share button. -

    Printers Settings

    +

    Printers Settings

    To affect a currently configured printer, simply click on the pull down button between the Choose Printer and the Delete Printer buttons, select the printer you wish to operate on, then to edit the settings click on the @@ -155,7 +156,7 @@ select the printer you wish to operate on, then to edit the settings click on th To create a new printer, next to the button labelled Create Printer enter into the text field the name of the share to be created, then click on the Create Printer button. -

    The SWAT Wizard

    +

    The SWAT Wizard

    The purpose if the SWAT Wizard is to help the Microsoft knowledgeable network administrator to configure Samba with a minimum of effort.

    @@ -171,7 +172,7 @@ Finally, there are a limited set of options that will determine what type of ser will be configured for, whether it will be a WINS server, participate as a WINS client, or operate with no WINS support. By clicking on one button you can elect to expose (or not) user home directories. -

    The Status Page

    +

    The Status Page

    The status page serves a limited purpose. Firstly, it allows control of the samba daemons. The key daemons that create the samba server environment are: smbd, nmbd, winbindd.

    @@ -182,11 +183,11 @@ conditions with minimal effort.

    Lastly, the Status page may be used to terminate specific smbd client connections in order to free files that may be locked. -

    The View Page

    +

    The View Page

    This page allows the administrator to view the optimised smb.conf file and, if you are particularly masochistic, will permit you also to see all possible global configuration parameters and their settings. -

    The Password Change Page

    +

    The Password Change Page

    The Password Change page is a popular tool. This tool allows the creation, deletion, deactivation and reactivation of MS Windows networking users on the local machine. Alternatively, you can use this tool to change a local password for a user account. diff --git a/docs/htmldocs/Samba-Developers-Guide.html b/docs/htmldocs/Samba-Developers-Guide.html index 603c87d5745..2edd2b50421 100644 --- a/docs/htmldocs/Samba-Developers-Guide.html +++ b/docs/htmldocs/Samba-Developers-Guide.html @@ -12,10 +12,10 @@ Please send updates to Jelmer Vernooij. This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt -">

    SAMBA Developers Guide

    SAMBA Team

    Attributions. -

    Definition of NetBIOS Protocol and Name Resolution Modes

    • Luke Leighton

    Samba Architecture

    • Dan Shearer

    The samba DEBUG system

    • Chris Hertel

    Coding Suggestions

    • Steve French

    • Simo Sorce

    • Andrew Bartlett

    • Tim Potter

    • Martin Pool

    Samba Internals
    The smb.conf file

    • Chris Hertel

    NetBIOS in a Unix World

    • Andrew Tridgell

    Tracing samba system calls

    • Andrew Tridgell

    Finding useful information on windows
    NT Domain RPC's
    Samba Printing Internals

    • Gerald Carter

    Samba WINS Internals

    • Gerald Carter

    The Upcoming SAM System

    • Andrew Bartlett

    LanMan and NT Password Encryption
    Modules
    RPC Pluggable Modules
    VFS Modules
    Notes to packagers

    • Jelmer Vernooij

    Contributing code

    +">

    SAMBA Developers Guide

    SAMBA Team

    Attributions. +
    Definition of NetBIOS Protocol and Name Resolution Modes

    • Luke Leighton

    Samba Architecture

    • Dan Shearer

    The samba DEBUG system

    • Chris Hertel

    Coding Suggestions

    • Steve French

    • Simo Sorce

    • Andrew Bartlett

    • Tim Potter

    • Martin Pool

    Samba Internals
    The smb.conf file

    • Chris Hertel

    NetBIOS in a Unix World

    • Andrew Tridgell

    Tracing samba system calls

    • Andrew Tridgell

    Finding useful information on windows
    NT Domain RPC's
    Samba Printing Internals

    • Gerald Carter

    Samba WINS Internals

    • Gerald Carter

    The Upcoming SAM System

    • Andrew Bartlett

    LanMan and NT Password Encryption
    Modules
    RPC Pluggable Modules
    VFS Modules
    Notes to packagers

    • Jelmer Vernooij

    Contributing code
    -

    Abstract

    +

    Abstract

    Last Update : Fri Jun 6 00:45:54 CEST 2003

    This book is a collection of documents that might be useful for @@ -29,15 +29,15 @@ Please send updates to Jelmer Ve This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt -

    Table of Contents

    1. Definition of NetBIOS Protocol and Name Resolution Modes
    NETBIOS
    BROADCAST NetBIOS
    NBNS NetBIOS
    2. Samba Architecture
    Introduction
    Multithreading and Samba
    Threading smbd
    Threading nmbd
    nbmd Design
    3. The samba DEBUG system
    New Output Syntax
    The DEBUG() Macro
    The DEBUGADD() Macro
    The DEBUGLVL() Macro
    New Functions
    dbgtext()
    dbghdr()
    format_debug_text()
    4. Coding Suggestions
    5. Samba Internals
    Character Handling
    The new functions
    Macros in byteorder.h
    CVAL(buf,pos)
    PVAL(buf,pos)
    SCVAL(buf,pos,val)
    SVAL(buf,pos)
    IVAL(buf,pos)
    SVALS(buf,pos)
    IVALS(buf,pos)
    SSVAL(buf,pos,val)
    SIVAL(buf,pos,val)
    SSVALS(buf,pos,val)
    SIVALS(buf,pos,val)
    RSVAL(buf,pos)
    RIVAL(buf,pos)
    RSSVAL(buf,pos,val)
    RSIVAL(buf,pos,val)
    LAN Manager Samba API
    Parameters
    Return value
    Code character table
    6. The smb.conf file
    Lexical Analysis
    Handling of Whitespace
    Handling of Line Continuation
    Line Continuation Quirks
    Syntax
    About params.c
    7. NetBIOS in a Unix World
    Introduction
    Usernames
    File Ownership
    Passwords
    Locking
    Deny Modes
    Trapdoor UIDs
    Port numbers
    Protocol Complexity
    8. Tracing samba system calls
    9. Finding useful information on windows
    Netlogon debugging output
    10. NT Domain RPC's
    Introduction
    Sources
    Credits
    Notes and Structures
    Notes
    Enumerations
    Structures
    MSRPC over Transact Named Pipe
    MSRPC Pipes
    Header
    Tail
    RPC Bind / Bind Ack
    NTLSA Transact Named Pipe
    LSA Open Policy
    LSA Query Info Policy
    LSA Enumerate Trusted Domains
    LSA Open Secret
    LSA Close
    LSA Lookup SIDS
    LSA Lookup Names
    NETLOGON rpc Transact Named Pipe
    LSA Request Challenge
    LSA Authenticate 2
    LSA Server Password Set
    LSA SAM Logon
    LSA SAM Logoff
    \\MAILSLOT\NET\NTLOGON
    Query for PDC
    SAM Logon
    SRVSVC Transact Named Pipe
    Net Share Enum
    Net Server Get Info
    Cryptographic side of NT Domain Authentication
    Definitions
    Protocol
    Comments
    SIDs and RIDs
    Well-known SIDs
    Well-known RIDS
    11. Samba Printing Internals
    Abstract
    +

    Table of Contents

    1. Definition of NetBIOS Protocol and Name Resolution Modes
    NETBIOS
    BROADCAST NetBIOS
    NBNS NetBIOS
    2. Samba Architecture
    Introduction
    Multithreading and Samba
    Threading smbd
    Threading nmbd
    nbmd Design
    3. The samba DEBUG system
    New Output Syntax
    The DEBUG() Macro
    The DEBUGADD() Macro
    The DEBUGLVL() Macro
    New Functions
    dbgtext()
    dbghdr()
    format_debug_text()
    4. Coding Suggestions
    5. Samba Internals
    Character Handling
    The new functions
    Macros in byteorder.h
    CVAL(buf,pos)
    PVAL(buf,pos)
    SCVAL(buf,pos,val)
    SVAL(buf,pos)
    IVAL(buf,pos)
    SVALS(buf,pos)
    IVALS(buf,pos)
    SSVAL(buf,pos,val)
    SIVAL(buf,pos,val)
    SSVALS(buf,pos,val)
    SIVALS(buf,pos,val)
    RSVAL(buf,pos)
    RIVAL(buf,pos)
    RSSVAL(buf,pos,val)
    RSIVAL(buf,pos,val)
    LAN Manager Samba API
    Parameters
    Return value
    Code character table
    6. The smb.conf file
    Lexical Analysis
    Handling of Whitespace
    Handling of Line Continuation
    Line Continuation Quirks
    Syntax
    About params.c
    7. NetBIOS in a Unix World
    Introduction
    Usernames
    File Ownership
    Passwords
    Locking
    Deny Modes
    Trapdoor UIDs
    Port numbers
    Protocol Complexity
    8. Tracing samba system calls
    9. Finding useful information on windows
    Netlogon debugging output
    10. NT Domain RPC's
    Introduction
    Sources
    Credits
    Notes and Structures
    Notes
    Enumerations
    Structures
    MSRPC over Transact Named Pipe
    MSRPC Pipes
    Header
    Tail
    RPC Bind / Bind Ack
    NTLSA Transact Named Pipe
    LSA Open Policy
    LSA Query Info Policy
    LSA Enumerate Trusted Domains
    LSA Open Secret
    LSA Close
    LSA Lookup SIDS
    LSA Lookup Names
    NETLOGON rpc Transact Named Pipe
    LSA Request Challenge
    LSA Authenticate 2
    LSA Server Password Set
    LSA SAM Logon
    LSA SAM Logoff
    \\MAILSLOT\NET\NTLOGON
    Query for PDC
    SAM Logon
    SRVSVC Transact Named Pipe
    Net Share Enum
    Net Server Get Info
    Cryptographic side of NT Domain Authentication
    Definitions
    Protocol
    Comments
    SIDs and RIDs
    Well-known SIDs
    Well-known RIDS
    11. Samba Printing Internals
    Abstract
    Printing Interface to Various Back ends -
    +
    Print Queue TDB's -
    +
    ChangeID and Client Caching of Printer Information -
    +
    Windows NT/2K Printer Change Notify -
    12. Samba WINS Internals
    WINS Failover
    13. The Upcoming SAM System
    Security in the 'new SAM'
    Standalone from UNIX
    Handles and Races in the new SAM
    Layers
    Application
    SAM Interface
    SAM Modules
    SAM Modules
    Special Module: sam_passdb
    sam_ads
    Memory Management
    Testing
    14. LanMan and NT Password Encryption
    Introduction
    How does it work?
    The smbpasswd file
    15. Modules
    Advantages
    Loading modules
    Static modules
    Shared modules
    Writing modules
    Static/Shared selection in configure.in
    16. RPC Pluggable Modules
    About
    General Overview
    17. VFS Modules
    The Samba (Posix) VFS layer
    The general interface
    Possible VFS operation layers
    The Interaction between the Samba VFS subsystem and the modules
    Initialization and registration
    How the Modules handle per connection data
    Upgrading to the New VFS Interface
    Upgrading from 2.2.* and 3.0aplha modules
    Some Notes
    Implement TRANSPARENT functions
    Implement OPAQUE functions
    18. Notes to packagers
    Versioning
    Modules
    19. Contributing code

    Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes

    Luke Leighton

    12 June 1997

    Table of Contents

    NETBIOS
    BROADCAST NetBIOS
    NBNS NetBIOS

    NETBIOS

    +

    12. Samba WINS Internals
    WINS Failover
    13. The Upcoming SAM System
    Security in the 'new SAM'
    Standalone from UNIX
    Handles and Races in the new SAM
    Layers
    Application
    SAM Interface
    SAM Modules
    SAM Modules
    Special Module: sam_passdb
    sam_ads
    Memory Management
    Testing
    14. LanMan and NT Password Encryption
    Introduction
    How does it work?
    The smbpasswd file
    15. Modules
    Advantages
    Loading modules
    Static modules
    Shared modules
    Writing modules
    Static/Shared selection in configure.in
    16. RPC Pluggable Modules
    About
    General Overview
    17. VFS Modules
    The Samba (Posix) VFS layer
    The general interface
    Possible VFS operation layers
    The Interaction between the Samba VFS subsystem and the modules
    Initialization and registration
    How the Modules handle per connection data
    Upgrading to the New VFS Interface
    Upgrading from 2.2.* and 3.0aplha modules
    Some Notes
    Implement TRANSPARENT functions
    Implement OPAQUE functions
    18. Notes to packagers
    Versioning
    Modules
    19. Contributing code

    Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes

    Luke Leighton

    12 June 1997

    Table of Contents

    NETBIOS
    BROADCAST NetBIOS
    NBNS NetBIOS

    NETBIOS

    NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX. Samba only uses NetBIOS over TCP/IP. For details on the TCP/IP NetBIOS Session Service NetBIOS Datagram Service, and NetBIOS Names, see @@ -78,7 +78,7 @@ NetBIOS names are either UNIQUE or GROUP. Only one application can claim a UNIQUE NetBIOS name on a network.

    There are two kinds of NetBIOS Name resolution: Broadcast and Point-to-Point. -

    BROADCAST NetBIOS

    +

    BROADCAST NetBIOS

    Clients can claim names, and therefore offer services on successfully claimed names, on their broadcast-isolated subnet. One way to get NetBIOS services (such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and @@ -90,7 +90,7 @@ find that some of your hosts spend 95 percent of their time dealing with broadcast traffic. [If you have IPX/SPX on your LAN or WAN, you will find that this is already happening: a packet analyzer will show, roughly every twelve minutes, great swathes of broadcast traffic!]. -

    NBNS NetBIOS

    +

    NBNS NetBIOS

    rfc1001.txt describes, amongst other things, the implementation and use of, a 'NetBIOS Name Service'. NT/AS offers 'Windows Internet Name Service' which is fully rfc1001/2 compliant, but has had to take specific action @@ -131,7 +131,7 @@ WINS Clients therefore claim names from the WINS server. If the WINS server allows them to register a name, the client's NetBIOS session service can then offer services on this name. Other WINS clients will then contact the WINS server to resolve a NetBIOS name. -

    Chapter2.Samba Architecture

    Dan Shearer

    November 1997

    Table of Contents

    Introduction
    Multithreading and Samba
    Threading smbd
    Threading nmbd
    nbmd Design

    Introduction

    +

    Chapter2.Samba Architecture

    Dan Shearer

    November 1997

    Table of Contents

    Introduction
    Multithreading and Samba
    Threading smbd
    Threading nmbd
    nbmd Design

    Introduction

    This document gives a general overview of how Samba works internally. The Samba Team has tried to come up with a model which is the best possible compromise between elegance, portability, security @@ -142,7 +142,7 @@ It also tries to answer some of the frequently asked questions such as:

    1. Is Samba secure when running on Unix? The xyz platform? What about the root priveliges issue? -

    2. Pros and cons of multithreading in various parts of Samba

    3. Why not have a separate process for name resolution, WINS, and browsing?

    Multithreading and Samba

    +

  • Pros and cons of multithreading in various parts of Samba

  • Why not have a separate process for name resolution, WINS, and browsing?

    • Multithreading and Samba

    People sometimes tout threads as a uniformly good thing. They are very nice in their place but are quite inappropriate for smbd. nmbd is another matter, and multi-threading it would be very nice. @@ -159,7 +159,7 @@ smbd multi-threaded. Multi-threading would actually make Samba much slower, less scalable, less portable and much less robust. The fact that we use a separate process for each connection is one of Samba's biggest advantages. -

    Threading smbd

    +

    Threading smbd

    A few problems that would arise from a threaded smbd are:

    1. It's not only to create threads instead of processes, but you @@ -184,7 +184,7 @@ A few problems that would arise from a threaded smbd are:

    2. we couldn't use the system locking calls as the locking context of fcntl() is a process, not a thread. -

    Threading nmbd

    +

    Threading nmbd

    This would be ideal, but gets sunk by portability requirements.

    Andrew tried to write a test threads library for nmbd that used only @@ -211,7 +211,7 @@ packet that arrives. Having a pool of processes is possible but is nasty to program cleanly due to the enormous amount of shared data (in complex structures) between the processes. We can't rely on each platform having a shared memory system. -

    nbmd Design

    +

    nbmd Design

    Originally Andrew used recursion to simulate a multi-threaded environment, which use the stack enormously and made for really confusing debugging sessions. Luke Leighton rewrote it to use a @@ -232,7 +232,7 @@ keeps the idea of a distinct packet. See "struct packet_struct" in nameserv.h. It has all the detail but none of the on-the-wire mess. This makes it ideal for using in disk or memory-based databases for browsing and WINS support. -

    Chapter3.The samba DEBUG system

    Chris Hertel

    July 1998

    Table of Contents

    New Output Syntax
    The DEBUG() Macro
    The DEBUGADD() Macro
    The DEBUGLVL() Macro
    New Functions
    dbgtext()
    dbghdr()
    format_debug_text()

    New Output Syntax

    +

    Chapter3.The samba DEBUG system

    Chris Hertel

    July 1998

    Table of Contents

    New Output Syntax
    The DEBUG() Macro
    The DEBUGADD() Macro
    The DEBUGLVL() Macro
    New Functions
    dbgtext()
    dbghdr()
    format_debug_text()

    New Output Syntax

    The syntax of a debugging log file is represented as: 

       >debugfile< :== { >debugmsg< }
@@ -285,7 +285,7 @@ by a newline.
 Note that in the above example the function names are not listed on
 the header line. That's because the example above was generated on an
 SGI Indy, and the SGI compiler doesn't support the __FUNCTION__ macro.
-

    The DEBUG() Macro

    +

    The DEBUG() Macro

    Use of the DEBUG() macro is unchanged. DEBUG() takes two parameters. The first is the message level, the second is the body of a function call to the Debug1() function. @@ -336,7 +336,7 @@ would look like this: [1998/07/30 16:00:51, 0] file.c:function(261) .

    Which isn't much use. The format buffer kludge fixes this problem. -

    The DEBUGADD() Macro

    +

    The DEBUGADD() Macro

    In addition to the kludgey solution to the broken line problem described above, there is a clean solution. The DEBUGADD() macro never generates a header. It will append new text to the current debug @@ -350,7 +350,7 @@ DEBUGADD() macro is the same as that of the DEBUG() macro. This is the first line. This is the second line. This is the third line. -

    The DEBUGLVL() Macro

    +

    The DEBUGLVL() Macro

    One of the problems with the DEBUG() macro was that DEBUG() lines tended to get a bit long. Consider this example from nmbd_sendannounce.c: @@ -385,7 +385,7 @@ within the DEBUGLVL() block.

  • Processing that is only relevant to debug output can be contained within the DEBUGLVL() block. -

    • New Functions

    dbgtext()

    +

    New Functions

    dbgtext()

    This function prints debug message text to the debug file (and possibly to syslog) via the format buffer. The function uses a variable argument list just like printf() or Debug1(). The @@ -394,7 +394,7 @@ and then passed to format_debug_text(). If you use DEBUGLVL() you will probably print the body of the message using dbgtext(). -

    dbghdr()

    +

    dbghdr()

    This is the function that writes a debug message header. Headers are not processed via the format buffer. Also note that if the format buffer is not empty, a call to dbghdr() will not @@ -402,7 +402,7 @@ produce any output. See the comments in dbghdr() for more info.

    It is not likely that this function will be called directly. It is used by DEBUG() and DEBUGADD(). -

    format_debug_text()

    +

    format_debug_text()

    This is a static function in debug.c. It stores the output text for the body of the message in a buffer until it encounters a newline. When the newline character is found, the buffer is @@ -553,7 +553,7 @@ The suggestions above are simply that, suggestions, but the information may help in reducing the routine rework done on new code. The preceeding list is expected to change routinely as new support routines and macros are added. -

    Chapter5.Samba Internals

    8 May 1996

    Table of Contents

    Character Handling
    The new functions
    Macros in byteorder.h
    CVAL(buf,pos)
    PVAL(buf,pos)
    SCVAL(buf,pos,val)
    SVAL(buf,pos)
    IVAL(buf,pos)
    SVALS(buf,pos)
    IVALS(buf,pos)
    SSVAL(buf,pos,val)
    SIVAL(buf,pos,val)
    SSVALS(buf,pos,val)
    SIVALS(buf,pos,val)
    RSVAL(buf,pos)
    RIVAL(buf,pos)
    RSSVAL(buf,pos,val)
    RSIVAL(buf,pos,val)
    LAN Manager Samba API
    Parameters
    Return value
    Code character table

    Character Handling

    +

    Chapter5.Samba Internals

    8 May 1996

    Table of Contents

    Character Handling
    The new functions
    Macros in byteorder.h
    CVAL(buf,pos)
    PVAL(buf,pos)
    SCVAL(buf,pos,val)
    SVAL(buf,pos)
    IVAL(buf,pos)
    SVALS(buf,pos)
    IVALS(buf,pos)
    SSVAL(buf,pos,val)
    SIVAL(buf,pos,val)
    SSVALS(buf,pos,val)
    SIVALS(buf,pos,val)
    RSVAL(buf,pos)
    RIVAL(buf,pos)
    RSSVAL(buf,pos,val)
    RSIVAL(buf,pos,val)
    LAN Manager Samba API
    Parameters
    Return value
    Code character table

    Character Handling

    This section describes character set handling in Samba, as implemented in Samba 3.0 and above

    @@ -563,7 +563,7 @@ strings to/from DOS codepages. The problem is that there was no way of telling if a particular char* is in dos codepage or unix codepage. This led to a nightmare of code that tried to cope with particular cases without handlingt the general case. -

    The new functions

    +

    The new functions

    The new system works like this:

    1. all char* strings inside Samba are "unix" strings. These are @@ -625,41 +625,41 @@ The new system works like this: parameters is gone.

    2. all vfs functions take unix strings. Don't convert when passing to them -

    Macros in byteorder.h

    +

    Macros in byteorder.h

    This section describes the macros defined in byteorder.h. These macros are used extensively in the Samba code. -

    CVAL(buf,pos)

    +

    CVAL(buf,pos)

    returns the byte at offset pos within buffer buf as an unsigned character. -

    PVAL(buf,pos)

    returns the value of CVAL(buf,pos) cast to type unsigned integer.

    SCVAL(buf,pos,val)

    sets the byte at offset pos within buffer buf to value val.

    SVAL(buf,pos)

    +

    PVAL(buf,pos)

    returns the value of CVAL(buf,pos) cast to type unsigned integer.

    SCVAL(buf,pos,val)

    sets the byte at offset pos within buffer buf to value val.

    SVAL(buf,pos)

    returns the value of the unsigned short (16 bit) little-endian integer at offset pos within buffer buf. An integer of this type is sometimes refered to as "USHORT". -

    IVAL(buf,pos)

    returns the value of the unsigned 32 bit little-endian integer at offset -pos within buffer buf.

    SVALS(buf,pos)

    returns the value of the signed short (16 bit) little-endian integer at -offset pos within buffer buf.

    IVALS(buf,pos)

    returns the value of the signed 32 bit little-endian integer at offset pos -within buffer buf.

    SSVAL(buf,pos,val)

    sets the unsigned short (16 bit) little-endian integer at offset pos within -buffer buf to value val.

    SIVAL(buf,pos,val)

    sets the unsigned 32 bit little-endian integer at offset pos within buffer -buf to the value val.

    SSVALS(buf,pos,val)

    sets the short (16 bit) signed little-endian integer at offset pos within -buffer buf to the value val.

    SIVALS(buf,pos,val)

    sets the signed 32 bit little-endian integer at offset pos withing buffer -buf to the value val.

    RSVAL(buf,pos)

    returns the value of the unsigned short (16 bit) big-endian integer at -offset pos within buffer buf.

    RIVAL(buf,pos)

    returns the value of the unsigned 32 bit big-endian integer at offset -pos within buffer buf.

    RSSVAL(buf,pos,val)

    sets the value of the unsigned short (16 bit) big-endian integer at +

    IVAL(buf,pos)

    returns the value of the unsigned 32 bit little-endian integer at offset +pos within buffer buf.

    SVALS(buf,pos)

    returns the value of the signed short (16 bit) little-endian integer at +offset pos within buffer buf.

    IVALS(buf,pos)

    returns the value of the signed 32 bit little-endian integer at offset pos +within buffer buf.

    SSVAL(buf,pos,val)

    sets the unsigned short (16 bit) little-endian integer at offset pos within +buffer buf to value val.

    SIVAL(buf,pos,val)

    sets the unsigned 32 bit little-endian integer at offset pos within buffer +buf to the value val.

    SSVALS(buf,pos,val)

    sets the short (16 bit) signed little-endian integer at offset pos within +buffer buf to the value val.

    SIVALS(buf,pos,val)

    sets the signed 32 bit little-endian integer at offset pos withing buffer +buf to the value val.

    RSVAL(buf,pos)

    returns the value of the unsigned short (16 bit) big-endian integer at +offset pos within buffer buf.

    RIVAL(buf,pos)

    returns the value of the unsigned 32 bit big-endian integer at offset +pos within buffer buf.

    RSSVAL(buf,pos,val)

    sets the value of the unsigned short (16 bit) big-endian integer at offset pos within buffer buf to value val. -refered to as "USHORT".

    RSIVAL(buf,pos,val)

    sets the value of the unsigned 32 bit big-endian integer at offset -pos within buffer buf to value val.

    LAN Manager Samba API

    +refered to as "USHORT".

    RSIVAL(buf,pos,val)

    sets the value of the unsigned 32 bit big-endian integer at offset +pos within buffer buf to value val.

    LAN Manager Samba API

    This section describes the functions need to make a LAN Manager RPC call. This information had been obtained by examining the Samba code and the LAN Manager 2.0 API documentation. It should not be considered entirely reliable. -

    -

    +
    
+
     call_api(int prcnt, int drcnt, int mprcnt, int mdrcnt, 
 	char *param, char *data, char **rparam, char **rdata);
-
    
-
    
+
    +

    This function is defined in client.c. It uses an SMB transaction to call a remote api. -

    Parameters

    The parameters are as follows:

    1. +

      Parameters

      The parameters are as follows:

      1. prcnt: the number of bytes of parameters begin sent.

      2. drcnt: the number of bytes of data begin sent. @@ -704,7 +704,7 @@ substructures apply, this string is of zero length.

      The code in client.c always calls call_api() with no data. It is unclear when a non-zero length data buffer would be sent. -

      Return value

      +

      Return value

      The returned parameters (pointed to by rparam), in their order of appearance are:

      1. An unsigned 16 bit integer which contains the API function's return code. @@ -735,7 +735,7 @@ fix_char_ptr() in client.c can be used for this purpose. The third parameter (which may be read as "SVAL(rparam,4)") has something to do with indicating the amount of data returned or possibly the amount of data which can be returned if enough buffer space is allowed. -

      Code character table

      +

    Code character table

    Certain data structures are described by means of ASCIIz strings containing code characters. These are the code characters:

    1. @@ -758,7 +758,7 @@ r pointer to returned data buffer??? L length in bytes of returned data buffer???

    2. h number of bytes of information available??? -

    Chapter6.The smb.conf file

    Chris Hertel

    November 1997

    Table of Contents

    Lexical Analysis
    Handling of Whitespace
    Handling of Line Continuation
    Line Continuation Quirks
    Syntax
    About params.c

    Lexical Analysis

    +

    Chapter6.The smb.conf file

    Chris Hertel

    November 1997

    Table of Contents

    Lexical Analysis
    Handling of Whitespace
    Handling of Line Continuation
    Line Continuation Quirks
    Syntax
    About params.c

    Lexical Analysis

    Basically, the file is processed on a line by line basis. There are four types of lines that are recognized by the lexical analyzer (params.c): @@ -785,7 +785,7 @@ ignores them. The latter two line types are scanned for These are the only tokens passed to the parameter loader (loadparm.c). Parameter names and values are divided from one another by an equal sign: '='. -

    Handling of Whitespace

    +

    Handling of Whitespace

    Whitespace is defined as all characters recognized by the isspace() function (see ctype(3C)) except for the newline character ('\n') The newline is excluded because it identifies the end of the line. @@ -800,7 +800,7 @@ the exception of carriage return characters ('\r'), all of which are removed.

  • Leading and trailing whitespace is removed from names and values. -

    • Handling of Line Continuation

    +

    Handling of Line Continuation

    Long section header and parameter lines may be extended across multiple lines by use of the backslash character ('\\'). Line continuation is ignored for blank and comment lines. @@ -823,7 +823,7 @@ line, plus the four preceeding the word 'with' in the second line. Line continuation characters are ignored on blank lines and at the end of comments. They are *only* recognized within section and parameter lines. -

    Line Continuation Quirks

    Note the following example:

    +

    Line Continuation Quirks

    Note the following example:

     	param name = parameter value string \
     \
     with line continuation.
@@ -847,7 +847,7 @@ terminating character, and the rest of the line is ignored.  The lines

    are read as

     	[section name]
     param name = value
-

    Syntax

    The syntax of the smb.conf file is as follows:

    +

    Syntax

    The syntax of the smb.conf file is as follows:

       <file>            :==  { <section> } EOF
   <section>         :==  <section header> { <parameter line> }
   <section header>  :==  '[' NAME ']'
@@ -866,12 +866,12 @@ terminating character, and the rest of the line is ignored.  The lines
 	A parameter line is divided into a NAME and a VALUE.  The *first*
 	equal sign on the line separates the NAME from the VALUE.  The
 	VALUE is terminated by a newline character (NL = '\n').
-

    About params.c

    +

    About params.c

    The parsing of the config file is a bit unusual if you are used to lex, yacc, bison, etc. Both lexical analysis (scanning) and parsing are performed by params.c. Values are loaded via callbacks to loadparm.c. -

    Chapter7.NetBIOS in a Unix World

    Andrew Tridgell

    April 1995

    Table of Contents

    Introduction
    Usernames
    File Ownership
    Passwords
    Locking
    Deny Modes
    Trapdoor UIDs
    Port numbers
    Protocol Complexity

    Introduction

    +

    Chapter7.NetBIOS in a Unix World

    Andrew Tridgell

    April 1995

    Table of Contents

    Introduction
    Usernames
    File Ownership
    Passwords
    Locking
    Deny Modes
    Trapdoor UIDs
    Port numbers
    Protocol Complexity

    Introduction

    This is a short document that describes some of the issues that confront a SMB implementation on unix, and how Samba copes with them. They may help people who are looking at unix<->PC @@ -879,7 +879,7 @@ interoperability.

    It was written to help out a person who was writing a paper on unix to PC connectivity. -

    Usernames

    +

    Usernames

    The SMB protocol has only a loose username concept. Early SMB protocols (such as CORE and COREPLUS) have no username concept at all. Even in later protocols clients often attempt operations @@ -916,7 +916,7 @@ in the vast majority of cases. The methods include username maps, the service%user syntax, the saving of session setup usernames for later validation and the derivation of the username from the service name (either directly or via the user= option). -

    File Ownership

    +

    File Ownership

    The commonly used SMB protocols have no way of saying "you can't do that because you don't own the file". They have, in fact, no concept of file ownership at all. @@ -934,7 +934,7 @@ file time comparisons right. There are several possible solutions to this problem, including username mapping, and forcing a specific username for particular shares. -

    Passwords

    +

    Passwords

    Many SMB clients uppercase passwords before sending them. I have no idea why they do this. Interestingly WfWg uppercases the password only if the server is running a protocol greater than COREPLUS, so @@ -956,7 +956,7 @@ This means that it is *VERY* important to ensure that the Samba smbpasswd file containing these password hashes is only readable by the root user. See the documentation ENCRYPTION.txt for more details. -

    Locking

    +

    Locking

    Since samba 2.2, samba supports other types of locking as well. This section is outdated.

    @@ -987,7 +987,7 @@ asking the server to notify it if anyone else tries to do something on the same file, at which time the client will say if it is willing to give up its lock. Unix has no simple way of implementing opportunistic locking, and currently Samba has no support for it. -

    Deny Modes

    +

    Deny Modes

    When a SMB client opens a file it asks for a particular "deny mode" to be placed on the file. These modes (DENY_NONE, DENY_READ, DENY_WRITE, DENY_ALL, DENY_FCB and DENY_DOS) specify what actions should be @@ -1001,7 +1001,7 @@ directory or a shared memory implementation. The lock file method is clumsy and consumes processing and file resources, the shared memory implementation is vastly prefered and is turned on by default for those systems that support it. -

    Trapdoor UIDs

    +

    Trapdoor UIDs

    A SMB session can run with several uids on the one socket. This happens when a user connects to two shares with different usernames. To cope with this the unix server needs to switch uids @@ -1011,7 +1011,7 @@ a single uid.

    Note that you can also get the "trapdoor uid" message for other reasons. Please see the FAQ for details. -

    Port numbers

    +

    Port numbers

    There is a convention that clients on sockets use high "unprivilaged" port numbers (>1000) and connect to servers on low "privilaged" port numbers. This is enforced in Unix as non-root users can't open a @@ -1034,7 +1034,7 @@ to any of these OSes unless they are running as root. The answer comes back, but it goes to port 137 which the unix user can't listen on. Interestingly WinNT3.1 got this right - it sends node status responses back to the source port in the request. -

    Protocol Complexity

    +

    Protocol Complexity

    There are many "protocol levels" in the SMB protocol. It seems that each time new functionality was added to a Microsoft operating system, they added the equivalent functions in a new protocol level of the SMB @@ -1148,7 +1148,7 @@ causes printing to fail with Samba: The process is trying to first open /dev/null read-write then read-only. Both fail. This means /dev/null has incorrect permissions. -

    Chapter9.Finding useful information on windows

    Jelmer R. Vernooij

    The Samba Team

    Andrew Tridgell

    Samba Team

    Table of Contents

    Netlogon debugging output

    Netlogon debugging output

    1. stop netlogon service on PDC

    2. rename original netlogon.dll to netlogon.dll.original

    3. copy checked version of netlogon.dll to system32 directory

    4. set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\DBFlag to 0x20000004

    5. start netlogon service on PDC

    Chapter10.NT Domain RPC's

    Luke Leighton

    Duncan Stansfield

    01 November 97(version 0.0.24)

    Table of Contents

    Introduction
    Sources
    Credits
    Notes and Structures
    Notes
    Enumerations
    Structures
    MSRPC over Transact Named Pipe
    MSRPC Pipes
    Header
    Tail
    RPC Bind / Bind Ack
    NTLSA Transact Named Pipe
    LSA Open Policy
    LSA Query Info Policy
    LSA Enumerate Trusted Domains
    LSA Open Secret
    LSA Close
    LSA Lookup SIDS
    LSA Lookup Names
    NETLOGON rpc Transact Named Pipe
    LSA Request Challenge
    LSA Authenticate 2
    LSA Server Password Set
    LSA SAM Logon
    LSA SAM Logoff
    \\MAILSLOT\NET\NTLOGON
    Query for PDC
    SAM Logon
    SRVSVC Transact Named Pipe
    Net Share Enum
    Net Server Get Info
    Cryptographic side of NT Domain Authentication
    Definitions
    Protocol
    Comments
    SIDs and RIDs
    Well-known SIDs
    Well-known RIDS

    Introduction

    +

    Chapter9.Finding useful information on windows

    Jelmer R. Vernooij

    The Samba Team

    Andrew Tridgell

    Samba Team

    Table of Contents

    Netlogon debugging output

    Netlogon debugging output

    1. stop netlogon service on PDC

    2. rename original netlogon.dll to netlogon.dll.original

    3. copy checked version of netlogon.dll to system32 directory

    4. set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\DBFlag to 0x20000004

    5. start netlogon service on PDC

    Chapter10.NT Domain RPC's

    Luke Leighton

    Duncan Stansfield

    01 November 97(version 0.0.24)

    Table of Contents

    Introduction
    Sources
    Credits
    Notes and Structures
    Notes
    Enumerations
    Structures
    MSRPC over Transact Named Pipe
    MSRPC Pipes
    Header
    Tail
    RPC Bind / Bind Ack
    NTLSA Transact Named Pipe
    LSA Open Policy
    LSA Query Info Policy
    LSA Enumerate Trusted Domains
    LSA Open Secret
    LSA Close
    LSA Lookup SIDS
    LSA Lookup Names
    NETLOGON rpc Transact Named Pipe
    LSA Request Challenge
    LSA Authenticate 2
    LSA Server Password Set
    LSA SAM Logon
    LSA SAM Logoff
    \\MAILSLOT\NET\NTLOGON
    Query for PDC
    SAM Logon
    SRVSVC Transact Named Pipe
    Net Share Enum
    Net Server Get Info
    Cryptographic side of NT Domain Authentication
    Definitions
    Protocol
    Comments
    SIDs and RIDs
    Well-known SIDs
    Well-known RIDS

    Introduction

    This document contains information to provide an NT workstation with login services, without the need for an NT server. It is the sgml version of http://mailhost.cb1.com/~lkcl/cifsntdomain.txt, controlled by Luke.

    @@ -1194,7 +1194,7 @@ Failure to return this error code will make the workstation report that it is already a member of the domain.

  • the cryptographic side of the NetrServerPasswordSet command, which would allow the workstation to change its password. This password is used to generate the long-term session key. [It is possible to reject this -command, and keep the default workstation password].

    • Sources

    cket Traces from Netmonitor (Service Pack 1 and above)
    ul Ashton and Luke Leighton's other "NT Domain" doc.
    FS documentation - cifs6.txt
    FS documentation - cifsrap2.txt

    Credits

    Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.
    Duncan Stansfield: low-level analysis of MSRPC Pipes.
    Linus Nordberg: producing c-code from Paul's crypto spec.
    Windows Sourcer development team

    Notes and Structures

    Notes

    1. +command, and keep the default workstation password].

    Sources

    cket Traces from Netmonitor (Service Pack 1 and above)
    ul Ashton and Luke Leighton's other "NT Domain" doc.
    FS documentation - cifs6.txt
    FS documentation - cifsrap2.txt

    Credits

    Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.
    Duncan Stansfield: low-level analysis of MSRPC Pipes.
    Linus Nordberg: producing c-code from Paul's crypto spec.
    Windows Sourcer development team

    Notes and Structures

    Notes

    1. In the SMB Transact pipes, some "Structures", described here, appear to be 4-byte aligned with the SMB header, at their start. Exactly which "Structures" need aligning is not precisely known or documented. @@ -1222,15 +1222,15 @@ into or taken out of the SMB data stream. if the count is non-zero, then the pointer is also non-zero. immediately following the pointer is the count again, followed by an array of container sub-structures. the count appears a third time after the last sub-structure. -

    Enumerations

    MSRPC Header type

    command number in the msrpc packet header

    MSRPC_Request:

    0x00

    MSRPC_Response:

    0x02

    MSRPC_Bind:

    0x0B

    MSRPC_BindAck:

    0x0C

    MSRPC Packet info

    The meaning of these flags is undocumented

    FirstFrag:

    0x01

    LastFrag:

    0x02

    NotaFrag:

    0x04

    RecRespond:

    0x08

    NoMultiplex:

    0x10

    NotForIdemp:

    0x20

    NotforBcast:

    0x40

    NoUuid:

    0x80

    Structures

    VOID *

    sizeof VOID* is 32 bits.

    char

    sizeof char is 8 bits.

    UTIME

    UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).

    NTTIME

    NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).

    DOM_SID (domain SID structure)

    UINT32

    num of sub-authorities in domain SID

    UINT8

    SID revision number

    UINT8

    num of sub-authorities in domain SID

    UINT8[6]

    6 bytes for domain SID - Identifier Authority.

    UINT16[n_subauths]

    domain SID sub-authorities

    Note: the domain SID is documented elsewhere. -

    STR (string)

    STR (string) is a char[] : a null-terminated string of ascii characters.

    UNIHDR (unicode string header)

    UINT16

    length of unicode string

    UINT16

    max length of unicode string

    UINT32

    4 - undocumented.

    UNIHDR2 (unicode string header plus buffer pointer)

    UNIHDR

    unicode string header

    VOID*

    undocumented buffer pointer

    UNISTR (unicode string)

    UINT16[]

    null-terminated string of unicode characters.

    NAME (length-indicated unicode string)

    UINT32

    length of unicode string

    UINT16[]

    null-terminated string of unicode characters.

    UNISTR2 (aligned unicode string)

    UINT8[]

    padding to get unicode string 4-byte aligned with the start of the SMB header.

    UINT32

    max length of unicode string

    UINT32

    0 - undocumented

    UINT32

    length of unicode string

    UINT16[]

    string of uncode characters

    OBJ_ATTR (object attributes)

    UINT32

    0x18 - length (in bytes) including the length field.

    VOID*

    0 - root directory (pointer)

    VOID*

    0 - object name (pointer)

    UINT32

    0 - attributes (undocumented)

    VOID*

    0 - security descriptior (pointer)

    UINT32

    0 - security quality of service

    POL_HND (LSA policy handle)

    char[20]

    policy handle

    DOM_SID2 (domain SID structure, SIDS stored in unicode)

    UINT32

    5 - SID type

    UINT32

    0 - undocumented

    UNIHDR2

    domain SID unicode string header

    UNISTR

    domain SID unicode string

    Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.

    Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.

    DOM_RID (domain RID structure)

    UINT32

    5 - well-known SID. 1 - user SID (see ShowACLs)

    UINT32

    5 - undocumented

    UINT32

    domain RID

    UINT32

    0 - domain index out of above reference domains

    LOG_INFO (server, account, client structure)

    Note: logon server name starts with two '\' characters and is upper case.

    Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    UNISTR2

    account name unicode string

    UINT16

    sec_chan - security channel type

    UNISTR2

    logon client machine unicode string

    CLNT_SRV (server, client names structure)

    Note: logon server name starts with two '\' characters and is upper case.

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon client machine unicode string

    CREDS (credentials + time stamp)

    char[8]

    credentials

    UTIME

    time stamp

    CLNT_INFO2 (server, client structure, client credentials)

    Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to - maintain an authenticated request/response trail.

    CLNT_SRV

    client and server names

    UINT8[]

    ???? padding, for 4-byte alignment with SMB header.

    VOID*

    pointer to client credentials.

    CREDS

    client-calculated credentials + client time

    CLNT_INFO (server, account, client structure, client credentials)

    Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.

    LOG_INFO

    logon account info

    CREDS

    client-calculated credentials + client time

    ID_INFO_1 (id info structure, auth level 1)

    VOID*

    ptr_id_info_1

    UNIHDR

    domain name unicode header

    UINT32

    param control

    UINT64

    logon ID

    UNIHDR

    user name unicode header

    UNIHDR

    workgroup name unicode header

    char[16]

    arc4 LM OWF Password

    char[16]

    arc4 NT OWF Password

    UNISTR2

    domain name unicode string

    UNISTR2

    user name unicode string

    UNISTR2

    workstation name unicode string

    SAM_INFO (sam logon/logoff id info structure)

    Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.

    CLNT_INFO2

    client identification/authentication info

    VOID*

    pointer to return credentials.

    CRED

    return credentials - ignored.

    UINT16

    logon level

    UINT16

    switch value

    +

    Enumerations

    MSRPC Header type

    command number in the msrpc packet header

    MSRPC_Request:

    0x00

    MSRPC_Response:

    0x02

    MSRPC_Bind:

    0x0B

    MSRPC_BindAck:

    0x0C

    MSRPC Packet info

    The meaning of these flags is undocumented

    FirstFrag:

    0x01

    LastFrag:

    0x02

    NotaFrag:

    0x04

    RecRespond:

    0x08

    NoMultiplex:

    0x10

    NotForIdemp:

    0x20

    NotforBcast:

    0x40

    NoUuid:

    0x80

    Structures

    VOID *

    sizeof VOID* is 32 bits.

    char

    sizeof char is 8 bits.

    UTIME

    UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).

    NTTIME

    NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).

    DOM_SID (domain SID structure)

    UINT32

    num of sub-authorities in domain SID

    UINT8

    SID revision number

    UINT8

    num of sub-authorities in domain SID

    UINT8[6]

    6 bytes for domain SID - Identifier Authority.

    UINT16[n_subauths]

    domain SID sub-authorities

    Note: the domain SID is documented elsewhere. +

    STR (string)

    STR (string) is a char[] : a null-terminated string of ascii characters.

    UNIHDR (unicode string header)

    UINT16

    length of unicode string

    UINT16

    max length of unicode string

    UINT32

    4 - undocumented.

    UNIHDR2 (unicode string header plus buffer pointer)

    UNIHDR

    unicode string header

    VOID*

    undocumented buffer pointer

    UNISTR (unicode string)

    UINT16[]

    null-terminated string of unicode characters.

    NAME (length-indicated unicode string)

    UINT32

    length of unicode string

    UINT16[]

    null-terminated string of unicode characters.

    UNISTR2 (aligned unicode string)

    UINT8[]

    padding to get unicode string 4-byte aligned with the start of the SMB header.

    UINT32

    max length of unicode string

    UINT32

    0 - undocumented

    UINT32

    length of unicode string

    UINT16[]

    string of uncode characters

    OBJ_ATTR (object attributes)

    UINT32

    0x18 - length (in bytes) including the length field.

    VOID*

    0 - root directory (pointer)

    VOID*

    0 - object name (pointer)

    UINT32

    0 - attributes (undocumented)

    VOID*

    0 - security descriptior (pointer)

    UINT32

    0 - security quality of service

    POL_HND (LSA policy handle)

    char[20]

    policy handle

    DOM_SID2 (domain SID structure, SIDS stored in unicode)

    UINT32

    5 - SID type

    UINT32

    0 - undocumented

    UNIHDR2

    domain SID unicode string header

    UNISTR

    domain SID unicode string

    Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.

    Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.

    DOM_RID (domain RID structure)

    UINT32

    5 - well-known SID. 1 - user SID (see ShowACLs)

    UINT32

    5 - undocumented

    UINT32

    domain RID

    UINT32

    0 - domain index out of above reference domains

    LOG_INFO (server, account, client structure)

    Note: logon server name starts with two '\' characters and is upper case.

    Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    UNISTR2

    account name unicode string

    UINT16

    sec_chan - security channel type

    UNISTR2

    logon client machine unicode string

    CLNT_SRV (server, client names structure)

    Note: logon server name starts with two '\' characters and is upper case.

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon client machine unicode string

    CREDS (credentials + time stamp)

    char[8]

    credentials

    UTIME

    time stamp

    CLNT_INFO2 (server, client structure, client credentials)

    Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to + maintain an authenticated request/response trail.

    CLNT_SRV

    client and server names

    UINT8[]

    ???? padding, for 4-byte alignment with SMB header.

    VOID*

    pointer to client credentials.

    CREDS

    client-calculated credentials + client time

    CLNT_INFO (server, account, client structure, client credentials)

    Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.

    LOG_INFO

    logon account info

    CREDS

    client-calculated credentials + client time

    ID_INFO_1 (id info structure, auth level 1)

    VOID*

    ptr_id_info_1

    UNIHDR

    domain name unicode header

    UINT32

    param control

    UINT64

    logon ID

    UNIHDR

    user name unicode header

    UNIHDR

    workgroup name unicode header

    char[16]

    arc4 LM OWF Password

    char[16]

    arc4 NT OWF Password

    UNISTR2

    domain name unicode string

    UNISTR2

    user name unicode string

    UNISTR2

    workstation name unicode string

    SAM_INFO (sam logon/logoff id info structure)

    Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.

    CLNT_INFO2

    client identification/authentication info

    VOID*

    pointer to return credentials.

    CRED

    return credentials - ignored.

    UINT16

    logon level

    UINT16

    switch value

             switch (switch_value)
         case 1:
         {
             ID_INFO_1     id_info_1;
         }
-

    GID (group id info)

    UINT32

    group id

    UINT32

    user attributes (only used by NT 3.1 and 3.51)

    DOM_REF (domain reference info)

    VOID*

    undocumented buffer pointer.

    UINT32

    num referenced domains?

    VOID*

    undocumented domain name buffer pointer.

    UINT32

    32 - max number of entries

    UINT32

    4 - num referenced domains?

    UNIHDR2

    domain name unicode string header

    UNIHDR2[num_ref_doms-1]

    referenced domain unicode string headers

    UNISTR

    domain name unicode string

    DOM_SID[num_ref_doms]

    referenced domain SIDs

    DOM_INFO (domain info, levels 3 and 5 are the same))

    UINT8[]

    ??? padding to get 4-byte alignment with start of SMB header

    UINT16

    domain name string length * 2

    UINT16

    domain name string length * 2

    VOID*

    undocumented domain name string buffer pointer

    VOID*

    undocumented domain SID string buffer pointer

    UNISTR2

    domain name (unicode string)

    DOM_SID

    domain SID

    USER_INFO (user logon info)

    Note: it would be nice to know what the 16 byte user session key is for.

    NTTIME

    logon time

    NTTIME

    logoff time

    NTTIME

    kickoff time

    NTTIME

    password last set time

    NTTIME

    password can change time

    NTTIME

    password must change time

    UNIHDR

    username unicode string header

    UNIHDR

    user's full name unicode string header

    UNIHDR

    logon script unicode string header

    UNIHDR

    profile path unicode string header

    UNIHDR

    home directory unicode string header

    UNIHDR

    home directory drive unicode string header

    UINT16

    logon count

    UINT16

    bad password count

    UINT32

    User ID

    UINT32

    Group ID

    UINT32

    num groups

    VOID*

    undocumented buffer pointer to groups.

    UINT32

    user flags

    char[16]

    user session key

    UNIHDR

    logon server unicode string header

    UNIHDR

    logon domain unicode string header

    VOID*

    undocumented logon domain id pointer

    char[40]

    40 undocumented padding bytes. future expansion?

    UINT32

    0 - num_other_sids?

    VOID*

    NULL - undocumented pointer to other domain SIDs.

    UNISTR2

    username unicode string

    UNISTR2

    user's full name unicode string

    UNISTR2

    logon script unicode string

    UNISTR2

    profile path unicode string

    UNISTR2

    home directory unicode string

    UNISTR2

    home directory drive unicode string

    UINT32

    num groups

    GID[num_groups]

    group info

    UNISTR2

    logon server unicode string

    UNISTR2

    logon domain unicode string

    DOM_SID

    domain SID

    DOM_SID[num_sids]

    other domain SIDs?

    SH_INFO_1_PTR (pointers to level 1 share info strings)

    Note: see cifsrap2.txt section5, page 10.

    0 for shi1_type indicates a Disk.
    1 for shi1_type indicates a Print Queue.
    2 for shi1_type indicates a Device.
    3 for shi1_type indicates an IPC pipe.
    0x8000 0000 (top bit set in shi1_type) indicates a hidden share.
    VOID*

    shi1_netname - pointer to net name

    UINT32

    shi1_type - type of share. 0 - undocumented.

    VOID*

    shi1_remark - pointer to comment.

    SH_INFO_1_STR (level 1 share info strings)

    UNISTR2

    shi1_netname - unicode string of net name

    UNISTR2

    shi1_remark - unicode string of comment.

    SHARE_INFO_1_CTR

    share container with 0 entries:

    UINT32

    0 - EntriesRead

    UINT32

    0 - Buffer

    share container with > 0 entries:

    UINT32

    EntriesRead

    UINT32

    non-zero - Buffer

    UINT32

    EntriesRead

    SH_INFO_1_PTR[EntriesRead]

    share entry pointers

    SH_INFO_1_STR[EntriesRead]

    share entry strings

    UINT8[]

    padding to get unicode string 4-byte aligned with start of the SMB header.

    UINT32

    EntriesRead

    UINT32

    0 - padding

    SERVER_INFO_101

    Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1.

    SV_TYPE_WORKSTATION

    0x00000001 All workstations

    SV_TYPE_SERVER

    0x00000002 All servers

    SV_TYPE_SQLSERVER

    0x00000004 Any server running with SQL server

    SV_TYPE_DOMAIN_CTRL

    0x00000008 Primary domain controller

    SV_TYPE_DOMAIN_BAKCTRL

    0x00000010 Backup domain controller

    SV_TYPE_TIME_SOURCE

    0x00000020 Server running the timesource service

    SV_TYPE_AFP

    0x00000040 Apple File Protocol servers

    SV_TYPE_NOVELL

    0x00000080 Novell servers

    SV_TYPE_DOMAIN_MEMBER

    0x00000100 Domain Member

    SV_TYPE_PRINTQ_SERVER

    0x00000200 Server sharing print queue

    SV_TYPE_DIALIN_SERVER

    0x00000400 Server running dialin service.

    SV_TYPE_XENIX_SERVER

    0x00000800 Xenix server

    SV_TYPE_NT

    0x00001000 NT server

    SV_TYPE_WFW

    0x00002000 Server running Windows for

    SV_TYPE_SERVER_NT

    0x00008000 Windows NT non DC server

    SV_TYPE_POTENTIAL_BROWSER

    0x00010000 Server that can run the browser service

    SV_TYPE_BACKUP_BROWSER

    0x00020000 Backup browser server

    SV_TYPE_MASTER_BROWSER

    0x00040000 Master browser server

    SV_TYPE_DOMAIN_MASTER

    0x00080000 Domain Master Browser server

    SV_TYPE_LOCAL_LIST_ONLY

    0x40000000 Enumerate only entries marked "local"

    SV_TYPE_DOMAIN_ENUM

    0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.

    UINT32

    500 - platform_id

    VOID*

    pointer to name

    UINT32

    5 - major version

    UINT32

    4 - minor version

    UINT32

    type (SV_TYPE_... bit field)

    VOID*

    pointer to comment

    UNISTR2

    sv101_name - unicode string of server name

    UNISTR2

    sv_101_comment - unicode string of server comment.

    UINT8[]

    padding to get unicode string 4-byte aligned with start of the SMB header.

    MSRPC over Transact Named Pipe

    For details on the SMB Transact Named Pipe, see cifs6.txt

    MSRPC Pipes

    +

    GID (group id info)

    UINT32

    group id

    UINT32

    user attributes (only used by NT 3.1 and 3.51)

    DOM_REF (domain reference info)

    VOID*

    undocumented buffer pointer.

    UINT32

    num referenced domains?

    VOID*

    undocumented domain name buffer pointer.

    UINT32

    32 - max number of entries

    UINT32

    4 - num referenced domains?

    UNIHDR2

    domain name unicode string header

    UNIHDR2[num_ref_doms-1]

    referenced domain unicode string headers

    UNISTR

    domain name unicode string

    DOM_SID[num_ref_doms]

    referenced domain SIDs

    DOM_INFO (domain info, levels 3 and 5 are the same))

    UINT8[]

    ??? padding to get 4-byte alignment with start of SMB header

    UINT16

    domain name string length * 2

    UINT16

    domain name string length * 2

    VOID*

    undocumented domain name string buffer pointer

    VOID*

    undocumented domain SID string buffer pointer

    UNISTR2

    domain name (unicode string)

    DOM_SID

    domain SID

    USER_INFO (user logon info)

    Note: it would be nice to know what the 16 byte user session key is for.

    NTTIME

    logon time

    NTTIME

    logoff time

    NTTIME

    kickoff time

    NTTIME

    password last set time

    NTTIME

    password can change time

    NTTIME

    password must change time

    UNIHDR

    username unicode string header

    UNIHDR

    user's full name unicode string header

    UNIHDR

    logon script unicode string header

    UNIHDR

    profile path unicode string header

    UNIHDR

    home directory unicode string header

    UNIHDR

    home directory drive unicode string header

    UINT16

    logon count

    UINT16

    bad password count

    UINT32

    User ID

    UINT32

    Group ID

    UINT32

    num groups

    VOID*

    undocumented buffer pointer to groups.

    UINT32

    user flags

    char[16]

    user session key

    UNIHDR

    logon server unicode string header

    UNIHDR

    logon domain unicode string header

    VOID*

    undocumented logon domain id pointer

    char[40]

    40 undocumented padding bytes. future expansion?

    UINT32

    0 - num_other_sids?

    VOID*

    NULL - undocumented pointer to other domain SIDs.

    UNISTR2

    username unicode string

    UNISTR2

    user's full name unicode string

    UNISTR2

    logon script unicode string

    UNISTR2

    profile path unicode string

    UNISTR2

    home directory unicode string

    UNISTR2

    home directory drive unicode string

    UINT32

    num groups

    GID[num_groups]

    group info

    UNISTR2

    logon server unicode string

    UNISTR2

    logon domain unicode string

    DOM_SID

    domain SID

    DOM_SID[num_sids]

    other domain SIDs?

    SH_INFO_1_PTR (pointers to level 1 share info strings)

    Note: see cifsrap2.txt section5, page 10.

    0 for shi1_type indicates a Disk.
    1 for shi1_type indicates a Print Queue.
    2 for shi1_type indicates a Device.
    3 for shi1_type indicates an IPC pipe.
    0x8000 0000 (top bit set in shi1_type) indicates a hidden share.
    VOID*

    shi1_netname - pointer to net name

    UINT32

    shi1_type - type of share. 0 - undocumented.

    VOID*

    shi1_remark - pointer to comment.

    SH_INFO_1_STR (level 1 share info strings)

    UNISTR2

    shi1_netname - unicode string of net name

    UNISTR2

    shi1_remark - unicode string of comment.

    SHARE_INFO_1_CTR

    share container with 0 entries:

    UINT32

    0 - EntriesRead

    UINT32

    0 - Buffer

    share container with > 0 entries:

    UINT32

    EntriesRead

    UINT32

    non-zero - Buffer

    UINT32

    EntriesRead

    SH_INFO_1_PTR[EntriesRead]

    share entry pointers

    SH_INFO_1_STR[EntriesRead]

    share entry strings

    UINT8[]

    padding to get unicode string 4-byte aligned with start of the SMB header.

    UINT32

    EntriesRead

    UINT32

    0 - padding

    SERVER_INFO_101

    Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1.

    SV_TYPE_WORKSTATION

    0x00000001 All workstations

    SV_TYPE_SERVER

    0x00000002 All servers

    SV_TYPE_SQLSERVER

    0x00000004 Any server running with SQL server

    SV_TYPE_DOMAIN_CTRL

    0x00000008 Primary domain controller

    SV_TYPE_DOMAIN_BAKCTRL

    0x00000010 Backup domain controller

    SV_TYPE_TIME_SOURCE

    0x00000020 Server running the timesource service

    SV_TYPE_AFP

    0x00000040 Apple File Protocol servers

    SV_TYPE_NOVELL

    0x00000080 Novell servers

    SV_TYPE_DOMAIN_MEMBER

    0x00000100 Domain Member

    SV_TYPE_PRINTQ_SERVER

    0x00000200 Server sharing print queue

    SV_TYPE_DIALIN_SERVER

    0x00000400 Server running dialin service.

    SV_TYPE_XENIX_SERVER

    0x00000800 Xenix server

    SV_TYPE_NT

    0x00001000 NT server

    SV_TYPE_WFW

    0x00002000 Server running Windows for

    SV_TYPE_SERVER_NT

    0x00008000 Windows NT non DC server

    SV_TYPE_POTENTIAL_BROWSER

    0x00010000 Server that can run the browser service

    SV_TYPE_BACKUP_BROWSER

    0x00020000 Backup browser server

    SV_TYPE_MASTER_BROWSER

    0x00040000 Master browser server

    SV_TYPE_DOMAIN_MASTER

    0x00080000 Domain Master Browser server

    SV_TYPE_LOCAL_LIST_ONLY

    0x40000000 Enumerate only entries marked "local"

    SV_TYPE_DOMAIN_ENUM

    0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.

    UINT32

    500 - platform_id

    VOID*

    pointer to name

    UINT32

    5 - major version

    UINT32

    4 - minor version

    UINT32

    type (SV_TYPE_... bit field)

    VOID*

    pointer to comment

    UNISTR2

    sv101_name - unicode string of server name

    UNISTR2

    sv_101_comment - unicode string of server comment.

    UINT8[]

    padding to get unicode string 4-byte aligned with start of the SMB header.

    MSRPC over Transact Named Pipe

    For details on the SMB Transact Named Pipe, see cifs6.txt

    MSRPC Pipes

    The MSRPC is conducted over an SMB Transact Pipe with a name of \PIPE\. You must first obtain a 16 bit file handle, by sending a SMBopenX with the pipe name \PIPE\srvsvc for @@ -1271,11 +1271,11 @@ listed below:

             initial SMBopenX request:         RPC API command 0x26 params:
         "\\PIPE\\lsarpc"                  0x65 0x63; 0x72 0x70; 0x44 0x65;
         "\\PIPE\\srvsvc"                  0x73 0x76; 0x4E 0x00; 0x5C 0x43;
-

    Header

    [section to be rewritten, following receipt of work by Duncan Stansfield]

    Interesting note: if you set packed data representation to 0x0100 0000 -then all 4-byte and 2-byte word ordering is turned around!

    The start of each of the NTLSA and NETLOGON named pipes begins with:

    offset: 00

    Variable type: UINT8

    Variable data: 5 - RPC major version

    offset: 01

    Variable type: UINT8

    Variable data: 0 - RPC minor version

    offset: 02

    Variable type: UINT8

    Variable data: 2 - RPC response packet

    offset: 03

    Variable type: UINT8

    Variable data: 3 - (FirstFrag bit-wise or with LastFrag)

    offset: 04

    Variable type: UINT32

    Variable data: 0x1000 0000 - packed data representation

    offset: 08

    Variable type: UINT16

    Variable data: fragment length - data size (bytes) inc header and tail.

    offset: 0A

    Variable type: UINT16

    Variable data: 0 - authentication length

    offset: 0C

    Variable type: UINT32

    Variable data: call identifier. matches 12th UINT32 of incoming RPC data.

    offset: 10

    Variable type: UINT32

    Variable data: allocation hint - data size (bytes) minus header and tail.

    offset: 14

    Variable type: UINT16

    Variable data: 0 - presentation context identifier

    offset: 16

    Variable type: UINT8

    Variable data: 0 - cancel count

    offset: 17

    Variable type: UINT8

    Variable data: in replies: 0 - reserved; in requests: opnum - see #defines.

    offset: 18

    Variable type: ......

    Variable data: start of data (goes on for allocation_hint bytes)

    RPC_Packet for request, response, bind and bind acknowledgement

    UINT8 versionmaj

    reply same as request (0x05)

    UINT8 versionmin

    reply same as request (0x00)

    UINT8 type

    one of the MSRPC_Type enums

    UINT8 flags

    reply same as request (0x00 for Bind, 0x03 for Request)

    UINT32 representation

    reply same as request (0x00000010)

    UINT16 fraglength

    the length of the data section of the SMB trans packet

    UINT16 authlength

    UINT32 callid

    call identifier. (e.g. 0x00149594)

    * stub USE TvPacket

    the remainder of the packet depending on the "type"

    Interface identification

    the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc

    +

    Header

    [section to be rewritten, following receipt of work by Duncan Stansfield]

    Interesting note: if you set packed data representation to 0x0100 0000 +then all 4-byte and 2-byte word ordering is turned around!

    The start of each of the NTLSA and NETLOGON named pipes begins with:

    offset: 00

    Variable type: UINT8

    Variable data: 5 - RPC major version

    offset: 01

    Variable type: UINT8

    Variable data: 0 - RPC minor version

    offset: 02

    Variable type: UINT8

    Variable data: 2 - RPC response packet

    offset: 03

    Variable type: UINT8

    Variable data: 3 - (FirstFrag bit-wise or with LastFrag)

    offset: 04

    Variable type: UINT32

    Variable data: 0x1000 0000 - packed data representation

    offset: 08

    Variable type: UINT16

    Variable data: fragment length - data size (bytes) inc header and tail.

    offset: 0A

    Variable type: UINT16

    Variable data: 0 - authentication length

    offset: 0C

    Variable type: UINT32

    Variable data: call identifier. matches 12th UINT32 of incoming RPC data.

    offset: 10

    Variable type: UINT32

    Variable data: allocation hint - data size (bytes) minus header and tail.

    offset: 14

    Variable type: UINT16

    Variable data: 0 - presentation context identifier

    offset: 16

    Variable type: UINT8

    Variable data: 0 - cancel count

    offset: 17

    Variable type: UINT8

    Variable data: in replies: 0 - reserved; in requests: opnum - see #defines.

    offset: 18

    Variable type: ......

    Variable data: start of data (goes on for allocation_hint bytes)

    RPC_Packet for request, response, bind and bind acknowledgement

    UINT8 versionmaj

    reply same as request (0x05)

    UINT8 versionmin

    reply same as request (0x00)

    UINT8 type

    one of the MSRPC_Type enums

    UINT8 flags

    reply same as request (0x00 for Bind, 0x03 for Request)

    UINT32 representation

    reply same as request (0x00000010)

    UINT16 fraglength

    the length of the data section of the SMB trans packet

    UINT16 authlength

    UINT32 callid

    call identifier. (e.g. 0x00149594)

    * stub USE TvPacket

    the remainder of the packet depending on the "type"

    Interface identification

    the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc

     abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003)
 transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002)
-

    RPC_Iface RW

    UINT8 byte[16]

    16 bytes of number

    UINT32 version

    the interface number

    RPC_ReqBind RW

    the remainder of the packet after the header if "type" was Bind in the response header, "type" should be BindAck

    UINT16 maxtsize

    maximum transmission fragment size (0x1630)

    UINT16 maxrsize

    max receive fragment size (0x1630)

    UINT32 assocgid

    associated group id (0x0)

    UINT32 numelements

    the number of elements (0x1)

    UINT16 contextid

    presentation context identifier (0x0)

    UINT8 numsyntaxes

    the number of syntaxes (has always been 1?)(0x1)

    UINT8[]

    4-byte alignment padding, against SMB header

    * abstractint USE RPC_Iface

    num and vers. of interface client is using

    * transferint USE RPC_Iface

    num and vers. of interface to use for replies

    RPC_Address RW

    UINT16 length

    length of the string including null terminator

    * port USE string

    the string above in single byte, null terminated form

    RPC_ResBind RW

    the response to place after the header in the reply packet

    UINT16 maxtsize

    same as request

    UINT16 maxrsize

    same as request

    UINT32 assocgid

    zero

    * secondaddr USE RPC_Address

    the address string, as described earlier

    UINT8[]

    4-byte alignment padding, against SMB header

    UINT8 numresults

    the number of results (0x01)

    UINT8[]

    4-byte alignment padding, against SMB header

    UINT16 result

    result (0x00 = accept)

    UINT16 reason

    reason (0x00 = no reason specified)

    * transfersyntax USE RPC_Iface

    the transfer syntax from the request

    RPC_ReqNorm RW

    the remainder of the packet after the header for every other other request

    UINT32 allochint

    the size of the stub data in bytes

    UINT16 prescontext

    presentation context identifier (0x0)

    UINT16 opnum

    operation number (0x15)

    * stub USE TvPacket

    a packet dependent on the pipe name (probably the interface) and the op number)

    RPC_ResNorm RW

    UINT32 allochint

    # size of the stub data in bytes

    UINT16 prescontext

    # presentation context identifier (same as request)

    UINT8 cancelcount

    # cancel count? (0x0)

    UINT8 reserved

    # 0 - one byte padding

    * stub USE TvPacket

    # the remainder of the reply

    Tail

    The end of each of the NTLSA and NETLOGON named pipes ends with:

    ......

    end of data

    UINT32

    return code

    RPC Bind / Bind Ack

    +

    RPC_Iface RW

    UINT8 byte[16]

    16 bytes of number

    UINT32 version

    the interface number

    RPC_ReqBind RW

    the remainder of the packet after the header if "type" was Bind in the response header, "type" should be BindAck

    UINT16 maxtsize

    maximum transmission fragment size (0x1630)

    UINT16 maxrsize

    max receive fragment size (0x1630)

    UINT32 assocgid

    associated group id (0x0)

    UINT32 numelements

    the number of elements (0x1)

    UINT16 contextid

    presentation context identifier (0x0)

    UINT8 numsyntaxes

    the number of syntaxes (has always been 1?)(0x1)

    UINT8[]

    4-byte alignment padding, against SMB header

    * abstractint USE RPC_Iface

    num and vers. of interface client is using

    * transferint USE RPC_Iface

    num and vers. of interface to use for replies

    RPC_Address RW

    UINT16 length

    length of the string including null terminator

    * port USE string

    the string above in single byte, null terminated form

    RPC_ResBind RW

    the response to place after the header in the reply packet

    UINT16 maxtsize

    same as request

    UINT16 maxrsize

    same as request

    UINT32 assocgid

    zero

    * secondaddr USE RPC_Address

    the address string, as described earlier

    UINT8[]

    4-byte alignment padding, against SMB header

    UINT8 numresults

    the number of results (0x01)

    UINT8[]

    4-byte alignment padding, against SMB header

    UINT16 result

    result (0x00 = accept)

    UINT16 reason

    reason (0x00 = no reason specified)

    * transfersyntax USE RPC_Iface

    the transfer syntax from the request

    RPC_ReqNorm RW

    the remainder of the packet after the header for every other other request

    UINT32 allochint

    the size of the stub data in bytes

    UINT16 prescontext

    presentation context identifier (0x0)

    UINT16 opnum

    operation number (0x15)

    * stub USE TvPacket

    a packet dependent on the pipe name (probably the interface) and the op number)

    RPC_ResNorm RW

    UINT32 allochint

    # size of the stub data in bytes

    UINT16 prescontext

    # presentation context identifier (same as request)

    UINT8 cancelcount

    # cancel count? (0x0)

    UINT8 reserved

    # 0 - one byte padding

    * stub USE TvPacket

    # the remainder of the reply

    Tail

    The end of each of the NTLSA and NETLOGON named pipes ends with:

    ......

    end of data

    UINT32

    return code

    RPC Bind / Bind Ack

    RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc) with a "transfer syntax" (see RPC_Iface structure). The purpose for doing this is unknown. @@ -1283,7 +1283,7 @@ this is unknown. returned by the SMBopenX Transact response.

    Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the same in the response as the same members in the RPC_ReqBind. The RPC_ResBind member transfersyntax is the same in the response as the

    Note: The RPC_ResBind response member secondaddr contains the name of what is presumed to be the service behind the RPC pipe. The - mapping identified so far is:

    initial SMBopenX request:

    RPC_ResBind response:

    "\\PIPE\\srvsvc"

    "\\PIPE\\ntsvcs"

    "\\PIPE\\samr"

    "\\PIPE\\lsass"

    "\\PIPE\\lsarpc"

    "\\PIPE\\lsass"

    "\\PIPE\\wkssvc"

    "\\PIPE\\wksvcs"

    "\\PIPE\\NETLOGON"

    "\\PIPE\\NETLOGON"

    Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.

    Request:

    RPC_Packet
    RPC_ReqBind

    Response:

    RPC_Packet
    RPC_ResBind

    NTLSA Transact Named Pipe

    The sequence of actions taken on this pipe are:

    Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle.
    Using the file handle, send a Set Named Pipe Handle state to 0x4300.
    Send an LSA Open Policy request. Store the Policy Handle.
    Using the Policy Handle, send LSA Query Info Policy requests, etc.
    Using the Policy Handle, send an LSA Close.
    Close the IPC$ share.

    Defines for this pipe, identifying the query are:

    LSA Open Policy:

    0x2c

    LSA Query Info Policy:

    0x07

    LSA Enumerate Trusted Domains:

    0x0d

    LSA Open Secret:

    0xff

    LSA Lookup SIDs:

    0xfe

    LSA Lookup Names:

    0xfd

    LSA Close:

    0x00

    LSA Open Policy

    Note: The policy handle can be anything you like.

    Request

    VOID*

    buffer pointer

    UNISTR2

    server name - unicode string starting with two '\'s

    OBJ_ATTR

    object attributes

    UINT32

    1 - desired access

    Response

    POL_HND

    LSA policy handle

    return

    0 - indicates success

    LSA Query Info Policy

    Note: The info class in response must be the same as that in the request.

    Request

    POL_HND

    LSA policy handle

    UINT16

    info class (also a policy handle?)

    Response

    VOID*

    undocumented buffer pointer

    UINT16

    info class (same as info class in request).

    +	mapping identified so far is:
    initial SMBopenX request:
    RPC_ResBind response:
    "\\PIPE\\srvsvc"
    "\\PIPE\\ntsvcs"
    "\\PIPE\\samr"
    "\\PIPE\\lsass"
    "\\PIPE\\lsarpc"
    "\\PIPE\\lsass"
    "\\PIPE\\wkssvc"
    "\\PIPE\\wksvcs"
    "\\PIPE\\NETLOGON"
    "\\PIPE\\NETLOGON"
    Note:	The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.
    Request:
    RPC_Packet
    RPC_ReqBind
    Response:
    RPC_Packet
    RPC_ResBind

    NTLSA Transact Named Pipe

    The sequence of actions taken on this pipe are:

    Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle.
    Using the file handle, send a Set Named Pipe Handle state to 0x4300.
    Send an LSA Open Policy request. Store the Policy Handle.
    Using the Policy Handle, send LSA Query Info Policy requests, etc.
    Using the Policy Handle, send an LSA Close.
    Close the IPC$ share.

    Defines for this pipe, identifying the query are:

    LSA Open Policy:

    0x2c

    LSA Query Info Policy:

    0x07

    LSA Enumerate Trusted Domains:

    0x0d

    LSA Open Secret:

    0xff

    LSA Lookup SIDs:

    0xfe

    LSA Lookup Names:

    0xfd

    LSA Close:

    0x00

    LSA Open Policy

    Note: The policy handle can be anything you like.

    Request

    VOID*

    buffer pointer

    UNISTR2

    server name - unicode string starting with two '\'s

    OBJ_ATTR

    object attributes

    UINT32

    1 - desired access

    Response

    POL_HND

    LSA policy handle

    return

    0 - indicates success

    LSA Query Info Policy

    Note: The info class in response must be the same as that in the request.

    Request

    POL_HND

    LSA policy handle

    UINT16

    info class (also a policy handle?)

    Response

    VOID*

    undocumented buffer pointer

    UINT16

    info class (same as info class in request).

     switch (info class)
 case 3:
 case 5:
@@ -1292,11 +1292,11 @@ DOM_INFO domain info, levels 3 and 5 (are the same).
 }
 
 return    0 - indicates success
-

    LSA Enumerate Trusted Domains

    Request

    no extra data

    Response

    UINT32

    0 - enumeration context

    UINT32

    0 - entries read

    UINT32

    0 - trust information

    return

    0x8000 001a - "no trusted domains" success code

    LSA Open Secret

    Request

    no extra data

    Response

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    return 0x0C00 0034 - "no such secret" success code

    LSA Close

    Request

    POL_HND

    policy handle to be closed

    Response

    POL_HND

    0s - closed policy handle (all zeros)

    return 0 - indicates success

    LSA Lookup SIDS

    Note: num_entries in response must be same as num_entries in request.

    Request

    POL_HND

    LSA policy handle

    UINT32

    num_entries

    VOID*

    undocumented domain SID buffer pointer

    VOID*

    undocumented domain name buffer pointer

    VOID*[num_entries] undocumented domain SID pointers to be looked up. -

    DOM_SID[num_entries] domain SIDs to be looked up.

    char[16]

    completely undocumented 16 bytes.

    Response

    DOM_REF

    domain reference response

    UINT32

    num_entries (listed above)

    VOID*

    undocumented buffer pointer

    UINT32

    num_entries (listed above)

    DOM_SID2[num_entries]

    domain SIDs (from Request, listed above).

    UINT32

    num_entries (listed above)

    return 0 - indicates success

    LSA Lookup Names

    Note: num_entries in response must be same as num_entries in request.

    Request

    POL_HND

    LSA policy handle

    UINT32

    num_entries

    UINT32

    num_entries

    VOID*

    undocumented domain SID buffer pointer

    VOID*

    undocumented domain name buffer pointer

    NAME[num_entries]

    names to be looked up.

    char[]

    undocumented bytes - falsely translated SID structure?

    Response

    DOM_REF

    domain reference response

    UINT32

    num_entries (listed above)

    VOID*

    undocumented buffer pointer

    UINT32

    num_entries (listed above)

    DOM_RID[num_entries]

    domain SIDs (from Request, listed above).

    UINT32

    num_entries (listed above)

    return 0 - indicates success

    NETLOGON rpc Transact Named Pipe

    The sequence of actions taken on this pipe are:

    tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    en an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle.
    ing the file handle, send a Set Named Pipe Handle state to 0x4300.
    eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.
    lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.
    lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.
    ose the IPC$ share.

    Defines for this pipe, identifying the query are

    LSA Request Challenge:

    0x04

    LSA Server Password Set:

    0x06

    LSA SAM Logon:

    0x02

    LSA SAM Logoff:

    0x03

    LSA Auth 2:

    0x0f

    LSA Logon Control:

    0x0e

    LSA Request Challenge

    Note: logon server name starts with two '\' characters and is upper case.

    Note: logon client is the machine, not the user.

    Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).

    Request

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    UNISTR2

    logon client unicode string

    char[8]

    client challenge

    Response

    char[8]

    server challenge

    return 0 - indicates success

    LSA Authenticate 2

    Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).

    Note: neg_flags in the response is the same as that in the request.

    Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.

    Request

    LOG_INFO

    client identification info

    char[8]

    client-calculated credentials

    UINT8[]

    padding to 4-byte align with start of SMB header.

    UINT32

    neg_flags - negotiated flags (usual value is 0x0000 01ff)

    Response

    char[8]

    server credentials.

    UINT32

    neg_flags - same as neg_flags in request.

    return 0 - indicates success. failure value unknown.

    LSA Server Password Set

    Note: the new password is suspected to be a DES encryption using the old password to generate the key.

    Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).

    Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.

    Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.

    Request

    CLNT_INFO

    client identification/authentication info

    char[]

    new password - undocumented.

    Response

    CREDS

    server credentials. server time stamp appears to be ignored.

    return 0 - indicates success; 0xC000 006a indicates failure

    LSA SAM Logon

    +

    LSA Enumerate Trusted Domains

    Request

    no extra data

    Response

    UINT32

    0 - enumeration context

    UINT32

    0 - entries read

    UINT32

    0 - trust information

    return

    0x8000 001a - "no trusted domains" success code

    LSA Open Secret

    Request

    no extra data

    Response

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    return 0x0C00 0034 - "no such secret" success code

    LSA Close

    Request

    POL_HND

    policy handle to be closed

    Response

    POL_HND

    0s - closed policy handle (all zeros)

    return 0 - indicates success

    LSA Lookup SIDS

    Note: num_entries in response must be same as num_entries in request.

    Request

    POL_HND

    LSA policy handle

    UINT32

    num_entries

    VOID*

    undocumented domain SID buffer pointer

    VOID*

    undocumented domain name buffer pointer

    VOID*[num_entries] undocumented domain SID pointers to be looked up. +

    DOM_SID[num_entries] domain SIDs to be looked up.

    char[16]

    completely undocumented 16 bytes.

    Response

    DOM_REF

    domain reference response

    UINT32

    num_entries (listed above)

    VOID*

    undocumented buffer pointer

    UINT32

    num_entries (listed above)

    DOM_SID2[num_entries]

    domain SIDs (from Request, listed above).

    UINT32

    num_entries (listed above)

    return 0 - indicates success

    LSA Lookup Names

    Note: num_entries in response must be same as num_entries in request.

    Request

    POL_HND

    LSA policy handle

    UINT32

    num_entries

    UINT32

    num_entries

    VOID*

    undocumented domain SID buffer pointer

    VOID*

    undocumented domain name buffer pointer

    NAME[num_entries]

    names to be looked up.

    char[]

    undocumented bytes - falsely translated SID structure?

    Response

    DOM_REF

    domain reference response

    UINT32

    num_entries (listed above)

    VOID*

    undocumented buffer pointer

    UINT32

    num_entries (listed above)

    DOM_RID[num_entries]

    domain SIDs (from Request, listed above).

    UINT32

    num_entries (listed above)

    return 0 - indicates success

    NETLOGON rpc Transact Named Pipe

    The sequence of actions taken on this pipe are:

    tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    en an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle.
    ing the file handle, send a Set Named Pipe Handle state to 0x4300.
    eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.
    lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.
    lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.
    ose the IPC$ share.

    Defines for this pipe, identifying the query are

    LSA Request Challenge:

    0x04

    LSA Server Password Set:

    0x06

    LSA SAM Logon:

    0x02

    LSA SAM Logoff:

    0x03

    LSA Auth 2:

    0x0f

    LSA Logon Control:

    0x0e

    LSA Request Challenge

    Note: logon server name starts with two '\' characters and is upper case.

    Note: logon client is the machine, not the user.

    Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).

    Request

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    UNISTR2

    logon client unicode string

    char[8]

    client challenge

    Response

    char[8]

    server challenge

    return 0 - indicates success

    LSA Authenticate 2

    Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).

    Note: neg_flags in the response is the same as that in the request.

    Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.

    Request

    LOG_INFO

    client identification info

    char[8]

    client-calculated credentials

    UINT8[]

    padding to 4-byte align with start of SMB header.

    UINT32

    neg_flags - negotiated flags (usual value is 0x0000 01ff)

    Response

    char[8]

    server credentials.

    UINT32

    neg_flags - same as neg_flags in request.

    return 0 - indicates success. failure value unknown.

    LSA Server Password Set

    Note: the new password is suspected to be a DES encryption using the old password to generate the key.

    Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).

    Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.

    Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.

    Request

    CLNT_INFO

    client identification/authentication info

    char[]

    new password - undocumented.

    Response

    CREDS

    server credentials. server time stamp appears to be ignored.

    return 0 - indicates success; 0xC000 006a indicates failure

    LSA SAM Logon

    Note: valid_user is True iff the username and password hash are valid for the requested domain. -

    Request

    SAM_INFO

    sam_id structure

    Response

    VOID*

    undocumented buffer pointer

    CREDS

    server credentials. server time stamp appears to be ignored.

    +
    Request
    SAM_INFO
    sam_id structure
    Response
    VOID*
    undocumented buffer pointer
    CREDS
    server credentials.  server time stamp appears to be ignored.
     if (valid_user)
 {
 	UINT16      3 - switch value indicating USER_INFO structure.
@@ -1316,16 +1316,16 @@ else
 
     return    0xC000 0064 - NT_STATUS_NO_SUCH_USER.
 }
-

    LSA SAM Logoff

    +

    LSA SAM Logoff

    Note: presumably, the SAM_INFO structure is validated, and a (currently undocumented) error code returned if the Logoff is invalid. -

    Request

    SAM_INFO

    sam_id structure

    Response

    VOID*

    undocumented buffer pointer

    CREDS

    server credentials. server time stamp appears to be ignored.

    return 0 - indicates success. undocumented failure indication.

    \\MAILSLOT\NET\NTLOGON

    +

    Request

    SAM_INFO

    sam_id structure

    Response

    VOID*

    undocumented buffer pointer

    CREDS

    server credentials. server time stamp appears to be ignored.

    return 0 - indicates success. undocumented failure indication.

    \\MAILSLOT\NET\NTLOGON

    Note: mailslots will contain a response mailslot, to which the response should be sent. the target NetBIOS name is REQUEST_NAME<20>, where REQUEST_NAME is the name of the machine that sent the request. -

    Query for PDC

    Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.

    Request

    UINT16

    0x0007 - Query for PDC

    STR

    machine name

    STR

    response mailslot

    UINT8[]

    padding to 2-byte align with start of mailslot.

    UNISTR

    machine name

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    Response

    UINT16

    0x000A - Respose to Query for PDC

    STR

    machine name (in uppercase)

    UINT8[]

    padding to 2-byte align with start of mailslot.

    UNISTR

    machine name

    UNISTR

    domain name

    UINT32

    NTversion (same as received in request)

    UINT16

    LMNTtoken (same as received in request)

    UINT16

    LM20token (same as received in request)

    SAM Logon

    Note: machine name in response is preceded by two '\' characters.

    Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.

    Note: user name in the response is presumably the same as that in the request.

    Request

    UINT16

    0x0012 - SAM Logon

    UINT16

    request count

    UNISTR

    machine name

    UNISTR

    user name

    STR

    response mailslot

    UINT32

    alloweable account

    UINT32

    domain SID size

    char[sid_size]

    domain SID, of sid_size bytes.

    UINT8[]

    ???? padding to 4? 2? -byte align with start of mailslot.

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    Response

    UINT16

    0x0013 - Response to SAM Logon

    UNISTR

    machine name

    UNISTR

    user name - workstation trust account

    UNISTR

    domain name

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    SRVSVC Transact Named Pipe

    Defines for this pipe, identifying the query are:

    Net Share Enum

    0x0f

    Net Server Get Info

    0x15

    Net Share Enum

    Note: share level and switch value in the response are presumably the same as those in the request.

    Note: cifsrap2.txt (section 5) may be of limited assistance here.

    Request

    VOID*

    pointer (to server name?)

    UNISTR2

    server name

    UINT8[]

    padding to get unicode string 4-byte aligned with the start of the SMB header.

    UINT32

    share level

    UINT32

    switch value

    VOID*

    pointer to SHARE_INFO_1_CTR

    SHARE_INFO_1_CTR

    share info with 0 entries

    UINT32

    preferred maximum length (0xffff ffff)

    Response

    UINT32

    share level

    UINT32

    switch value

    VOID*

    pointer to SHARE_INFO_1_CTR

    SHARE_INFO_1_CTR

    share info (only added if share info ptr is non-zero)

    return 0 - indicates success

    Net Server Get Info

    Note: level is the same value as in the request.

    Request

    UNISTR2

    server name

    UINT32

    switch level

    Response

    UINT32

    switch level

    VOID*

    pointer to SERVER_INFO_101

    SERVER_INFO_101

    server info (only added if server info ptr is non-zero)

    return 0 - indicates success

    Cryptographic side of NT Domain Authentication

    Definitions

    Add(A1,A2)

    Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2

    E(K,D)

    DES ECB encryption of 8 byte data D using 7 byte key K

    lmowf()

    Lan man hash

    ntowf()

    NT hash

    PW

    md4(machine_password) == md4(lsadump $machine.acc) == +

    Query for PDC

    Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.

    Request

    UINT16

    0x0007 - Query for PDC

    STR

    machine name

    STR

    response mailslot

    UINT8[]

    padding to 2-byte align with start of mailslot.

    UNISTR

    machine name

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    Response

    UINT16

    0x000A - Respose to Query for PDC

    STR

    machine name (in uppercase)

    UINT8[]

    padding to 2-byte align with start of mailslot.

    UNISTR

    machine name

    UNISTR

    domain name

    UINT32

    NTversion (same as received in request)

    UINT16

    LMNTtoken (same as received in request)

    UINT16

    LM20token (same as received in request)

    SAM Logon

    Note: machine name in response is preceded by two '\' characters.

    Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.

    Note: user name in the response is presumably the same as that in the request.

    Request

    UINT16

    0x0012 - SAM Logon

    UINT16

    request count

    UNISTR

    machine name

    UNISTR

    user name

    STR

    response mailslot

    UINT32

    alloweable account

    UINT32

    domain SID size

    char[sid_size]

    domain SID, of sid_size bytes.

    UINT8[]

    ???? padding to 4? 2? -byte align with start of mailslot.

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    Response

    UINT16

    0x0013 - Response to SAM Logon

    UNISTR

    machine name

    UNISTR

    user name - workstation trust account

    UNISTR

    domain name

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    SRVSVC Transact Named Pipe

    Defines for this pipe, identifying the query are:

    Net Share Enum

    0x0f

    Net Server Get Info

    0x15

    Net Share Enum

    Note: share level and switch value in the response are presumably the same as those in the request.

    Note: cifsrap2.txt (section 5) may be of limited assistance here.

    Request

    VOID*

    pointer (to server name?)

    UNISTR2

    server name

    UINT8[]

    padding to get unicode string 4-byte aligned with the start of the SMB header.

    UINT32

    share level

    UINT32

    switch value

    VOID*

    pointer to SHARE_INFO_1_CTR

    SHARE_INFO_1_CTR

    share info with 0 entries

    UINT32

    preferred maximum length (0xffff ffff)

    Response

    UINT32

    share level

    UINT32

    switch value

    VOID*

    pointer to SHARE_INFO_1_CTR

    SHARE_INFO_1_CTR

    share info (only added if share info ptr is non-zero)

    return 0 - indicates success

    Net Server Get Info

    Note: level is the same value as in the request.

    Request

    UNISTR2

    server name

    UINT32

    switch level

    Response

    UINT32

    switch level

    VOID*

    pointer to SERVER_INFO_101

    SERVER_INFO_101

    server info (only added if server info ptr is non-zero)

    return 0 - indicates success

    Cryptographic side of NT Domain Authentication

    Definitions

    Add(A1,A2)

    Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2

    E(K,D)

    DES ECB encryption of 8 byte data D using 7 byte key K

    lmowf()

    Lan man hash

    ntowf()

    NT hash

    PW

    md4(machine_password) == md4(lsadump $machine.acc) == pwdump(machine$) (initially) == md4(lmowf(unicode(machine))) -

    ARC4(K,Lk,D,Ld)

    ARC4 encryption of data D of length Ld with key K of length Lk

    v[m..n(,l)]

    subset of v from bytes m to n, optionally padded with zeroes to length l

    Cred(K,D)

    E(K[7..7,7],E(K[0..6],D)) computes a credential

    Time()

    4 byte current time

    Cc,Cs

    8 byte client and server challenges Rc,Rs: 8 byte client and server credentials

    Protocol

    +
    ARC4(K,Lk,D,Ld)
    ARC4 encryption of data D of length Ld with key K of length Lk
    v[m..n(,l)]
    subset of v from bytes m to n, optionally padded with zeroes to length l
    Cred(K,D)
    E(K[7..7,7],E(K[0..6],D)) computes a credential
    Time()
    4 byte current time
    Cc,Cs
    8 byte client and server challenges Rc,Rs: 8 byte client and server credentials

    Protocol

     C->S ReqChal,Cc
 S->C Cs
 
    @@ -1361,7 +1361,7 @@ S: Ts = Time()
 S->C Cred(Ks,Cred(Ks,Rc+Tc+1)),userinfo(logon script,UID,SIDs,etc)
 C: assert(Rs == Cred(Ks,Cred(Rc+Tc+1))
 C: Rc = Cred(Ks,Rc+Tc+1)
-

    Comments

    +

    Comments

    On first joining the domain the session key could be computed by anyone listening in on the network as the machine password has a well known value. Until the machine is rebooted it will use this session @@ -1382,30 +1382,30 @@ returned by the server. The password OWFs should NOT be sent over the network reversibly encrypted. They should be sent using ARC4(Ks,md4(owf)) with the server computing the same function using the owf values in the SAM. -

    SIDs and RIDs

    +

    SIDs and RIDs

    SIDs and RIDs are well documented elsewhere.

    A SID is an NT Security ID (see DOM_SID structure). They are of the form:

    revision-NN-SubAuth1-SubAuth2-SubAuth3...
    revision-0xNNNNNNNNNNNN-SubAuth1-SubAuth2-SubAuth3...

    currently, the SID revision is 1. The Sub-Authorities are known as Relative IDs (RIDs). -

    Well-known SIDs

    Universal well-known SIDs

    Null SID

    S-1-0-0

    World

    S-1-1-0

    Local

    S-1-2-0

    Creator Owner ID

    S-1-3-0

    Creator Group ID

    S-1-3-1

    Creator Owner Server ID

    S-1-3-2

    Creator Group Server ID

    S-1-3-3

    (Non-unique IDs)

    S-1-4

    NT well-known SIDs

    NT Authority

    S-1-5

    Dialup

    S-1-5-1

    Network

    S-1-5-2

    Batch

    S-1-5-3

    Interactive

    S-1-5-4

    Service

    S-1-5-6

    AnonymousLogon(aka null logon session)

    S-1-5-7

    Proxy

    S-1-5-8

    ServerLogon(aka domain controller account)

    S-1-5-8

    (Logon IDs)

    S-1-5-5-X-Y

    (NT non-unique IDs)

    S-1-5-0x15-...

    (Built-in domain)

    s-1-5-0x20

    Well-known RIDS

    +

    Well-known SIDs

    Universal well-known SIDs

    Null SID

    S-1-0-0

    World

    S-1-1-0

    Local

    S-1-2-0

    Creator Owner ID

    S-1-3-0

    Creator Group ID

    S-1-3-1

    Creator Owner Server ID

    S-1-3-2

    Creator Group Server ID

    S-1-3-3

    (Non-unique IDs)

    S-1-4

    NT well-known SIDs

    NT Authority

    S-1-5

    Dialup

    S-1-5-1

    Network

    S-1-5-2

    Batch

    S-1-5-3

    Interactive

    S-1-5-4

    Service

    S-1-5-6

    AnonymousLogon(aka null logon session)

    S-1-5-7

    Proxy

    S-1-5-8

    ServerLogon(aka domain controller account)

    S-1-5-8

    (Logon IDs)

    S-1-5-5-X-Y

    (NT non-unique IDs)

    S-1-5-0x15-...

    (Built-in domain)

    s-1-5-0x20

    Well-known RIDS

    A RID is a sub-authority value, as part of either a SID, or in the case of Group RIDs, part of the DOM_GID structure, in the USER_INFO_1 structure, in the LSA SAM Logon response. -

    Well-known RID users

    Groupname: DOMAIN_USER_RID_ADMIN

    ????: 0x0000

    RID: 01F4

    Groupname: DOMAIN_USER_RID_GUEST

    ????: 0x0000

    RID: 01F5

    Well-known RID groups

    Groupname: DOMAIN_GROUP_RID_ADMINS

    ????: 0x0000

    RID: 0200

    Groupname: DOMAIN_GROUP_RID_USERS

    ????: 0x0000

    RID: 0201

    Groupname: DOMAIN_GROUP_RID_GUESTS

    ????: 0x0000

    RID: 0202

    Well-known RID aliases

    Groupname: DOMAIN_ALIAS_RID_ADMINS

    ????: 0x0000

    RID: 0220

    Groupname: DOMAIN_ALIAS_RID_USERS

    ????: 0x0000

    RID: 0221

    Groupname: DOMAIN_ALIAS_RID_GUESTS

    ????: 0x0000

    RID: 0222

    Groupname: DOMAIN_ALIAS_RID_POWER_USERS

    ????: 0x0000

    RID: 0223

    Groupname: DOMAIN_ALIAS_RID_ACCOUNT_OPS

    ????: 0x0000

    RID: 0224

    Groupname: DOMAIN_ALIAS_RID_SYSTEM_OPS

    ????: 0x0000

    RID: 0225

    Groupname: DOMAIN_ALIAS_RID_PRINT_OPS

    ????: 0x0000

    RID: 0226

    Groupname: DOMAIN_ALIAS_RID_BACKUP_OPS

    ????: 0x0000

    RID: 0227

    Groupname: DOMAIN_ALIAS_RID_REPLICATOR

    ????: 0x0000

    RID: 0228

    Chapter11.Samba Printing Internals

    Gerald Carter

    October 2002

    Table of Contents

    Abstract
    +

    Well-known RID users

    Groupname: DOMAIN_USER_RID_ADMIN

    ????: 0x0000

    RID: 01F4

    Groupname: DOMAIN_USER_RID_GUEST

    ????: 0x0000

    RID: 01F5

    Well-known RID groups

    Groupname: DOMAIN_GROUP_RID_ADMINS

    ????: 0x0000

    RID: 0200

    Groupname: DOMAIN_GROUP_RID_USERS

    ????: 0x0000

    RID: 0201

    Groupname: DOMAIN_GROUP_RID_GUESTS

    ????: 0x0000

    RID: 0202

    Well-known RID aliases

    Groupname: DOMAIN_ALIAS_RID_ADMINS

    ????: 0x0000

    RID: 0220

    Groupname: DOMAIN_ALIAS_RID_USERS

    ????: 0x0000

    RID: 0221

    Groupname: DOMAIN_ALIAS_RID_GUESTS

    ????: 0x0000

    RID: 0222

    Groupname: DOMAIN_ALIAS_RID_POWER_USERS

    ????: 0x0000

    RID: 0223

    Groupname: DOMAIN_ALIAS_RID_ACCOUNT_OPS

    ????: 0x0000

    RID: 0224

    Groupname: DOMAIN_ALIAS_RID_SYSTEM_OPS

    ????: 0x0000

    RID: 0225

    Groupname: DOMAIN_ALIAS_RID_PRINT_OPS

    ????: 0x0000

    RID: 0226

    Groupname: DOMAIN_ALIAS_RID_BACKUP_OPS

    ????: 0x0000

    RID: 0227

    Groupname: DOMAIN_ALIAS_RID_REPLICATOR

    ????: 0x0000

    RID: 0228

    Chapter11.Samba Printing Internals

    Gerald Carter

    October 2002

    Table of Contents

    Abstract
    Printing Interface to Various Back ends -
    +
    Print Queue TDB's -
    +
    ChangeID and Client Caching of Printer Information -
    +
    Windows NT/2K Printer Change Notify -

    Abstract

    +

    Abstract

    The purpose of this document is to provide some insight into Samba's printing functionality and also to describe the semantics of certain features of Windows client printing. -

    +

    Printing Interface to Various Back ends

    Samba uses a table of function pointers to seven functions. The @@ -1416,7 +1416,7 @@ Currently there are only two printing back end implementations defined.

    • a generic set of functions for working with standard UNIX printing subsystems

    • a set of CUPS specific functions (this is only enabled if - the CUPS libraries were located at compile time).

    + the CUPS libraries were located at compile time).

    Print Queue TDB's

    Samba provides periodic caching of the output from the "lpq command" @@ -1505,11 +1505,11 @@ and the job has the printer's device mode associated with it by default. Only non-default Device Mode are stored with print jobs in the print queue TDB. Otherwise, the Device Mode is obtained from the printer object when the client issues a GetJob(level == 2) request. -

    +

    ChangeID and Client Caching of Printer Information

    [To be filled in later] -

    +

    Windows NT/2K Printer Change Notify

    When working with Windows NT+ clients, it is possible for a @@ -1607,7 +1607,7 @@ handle for notification. Samba currently uses the snum of the printer for this which can break if the list of services has been modified since the notification handle was registered.

  • The size is either (a) the string length in UNICODE for strings, (b) the size in bytes of the security descriptor, or (c) 0 for -data values.

    • Chapter12.Samba WINS Internals

    Gerald Carter

    October 2002

    Table of Contents

    WINS Failover

    WINS Failover

    +data values.

    Chapter12.Samba WINS Internals

    Gerald Carter

    October 2002

    Table of Contents

    WINS Failover

    WINS Failover

    The current Samba codebase possesses the capability to use groups of WINS servers that share a common namespace for NetBIOS name registration and resolution. The formal parameter syntax is @@ -1649,7 +1649,7 @@ If a timeout occurs when querying a specific WINS server, that server is marked prevent further timeouts and the next server in the WINS group is contacted. Once marked as dead, Samba will not attempt to contact that server for name registration/resolution queries for a period of 10 minutes. -

    Chapter13.The Upcoming SAM System

    Andrew Bartlett

    1 October 2002

    Table of Contents

    Security in the 'new SAM'
    Standalone from UNIX
    Handles and Races in the new SAM
    Layers
    Application
    SAM Interface
    SAM Modules
    SAM Modules
    Special Module: sam_passdb
    sam_ads
    Memory Management
    Testing

    Security in the 'new SAM'

    One of the biggest problems with passdb is it's implementation of +

    Chapter13.The Upcoming SAM System

    Andrew Bartlett

    1 October 2002

    Table of Contents

    Security in the 'new SAM'
    Standalone from UNIX
    Handles and Races in the new SAM
    Layers
    Application
    SAM Interface
    SAM Modules
    SAM Modules
    Special Module: sam_passdb
    sam_ads
    Memory Management
    Testing

    Security in the 'new SAM'

    One of the biggest problems with passdb is it's implementation of 'security'. Access control is on a 'are you root at the moment' basis, and it has no concept of NT ACLs. Things like ldapsam had to add 'magic' 'are you root' checks.

    We took this very seriously when we started work, and the new structure @@ -1709,7 +1709,7 @@ actual data store (like the LDAP server).

    Finally, we have generic get_sec_desc() and set_sec_desc() routines to allow external ACL manipulation. These do lookups based on SID. -

    Standalone from UNIX

    +

    Standalone from UNIX

    One of the primary tenants of the 'new SAM' is that it would not attempt to deal with 'what unix id for that'. This would be left to the 'SMS' (Sid Mapping System') or SID farm, and probably administered via @@ -1719,7 +1719,7 @@ Accounts not preexisting in unix would be served up via winbind.

    This is an *optional* part, and my preferred end-game. We have a fare way to go before things like winbind up to it however. -

    Handles and Races in the new SAM

    +

    Handles and Races in the new SAM

    One of the things that the 'new SAM' work has tried to face is both compatibility with existing code, and a closer alignment to the SAMR interface. I consider SAMR to be a 'primary customer' to the this work, @@ -1744,11 +1744,11 @@ have *really* changed. 'conflicting' updates: Currently we don't deal with this (in passdb or the new sam stuff), but the design is sufficiently flexible to 'deny' a second update. I don't foresee locking records however. -

    Layers

    Application

    +

    Layers

    Application

    This is where smbd, samtest and whatever end-user replacement we have for pdbedit sits. They use only the SAM interface, and do not get 'special knowledge' of what is below them. -

    SAM Interface

    +

    SAM Interface

    This level 'owns' the various handle structures, the get/set routines on those structures and provides the public interface. The application layer may initialize a 'context' to be passed to all interface routines, @@ -1759,7 +1759,7 @@ abstraction to the modules below, and arrange for their initial loading.

    We could possibly add ACL checking at this layer, to avoid discrepancies in implementation modules. -

    SAM Modules

    +

    SAM Modules

    These do not communicate with the application directly, only by setting values in the handles, and receiving requests from the interface. These modules are responsible for translating values from the handle's @@ -1767,13 +1767,13 @@ modules are responsible for translating values from the handle's to 'know' things like it's own domain SID, domain name, and any other state attached to the SAM. Simpler modules may call back to some helper routine. -

    SAM Modules

    Special Module: sam_passdb

    +

    SAM Modules

    Special Module: sam_passdb

    In order for there to be a smooth transition, kai is writing a module that reads existing passdb backends, and translates them into SAM replies. (Also pulling data from the account policy DB etc). We also intend to write a module that does the reverse - gives the SAM a passdb interface. -

    sam_ads

    +

    sam_ads

    This is the first of the SAM modules to be committed to the tree - mainly because I needed to coordinate work with metze (who authored most of it). This module aims to use Samba's libads code to provide an @@ -1785,7 +1785,7 @@ the construction of an Samba AD DC.

    We also intend to construct a Samba 2.2/3.0 compatible ldap module, again using libads code. -

    Memory Management

    +

    Memory Management

    The 'new SAM' development effort also concerned itself with getting a sane implementation of memory management. It was decided that we would be (as much as possible) talloc based, using an 'internal talloc @@ -1814,7 +1814,7 @@ NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID NTSTATUS sam_enum_accounts(const SAM_CONTEXT *context, const NT_USER_TOKEN *access_token, const DOM_SID *domainsid, uint16 acct_ctrl, int32 *account_count, SAM_ACCOUNT_ENUM **accounts) -

    Testing

    +

    Testing

    Testing is vital in any piece of software, and Samba is certainly no exception. In designing this new subsystem, we have taken care to ensure it is easily tested, independent of outside protocols. @@ -1831,25 +1831,25 @@ already proved vital in testing. I expect SAM module authors will find it particularly valuable.

    Example useage:

    $ bin/samtest

     > context ads:ldap://192.168.1.96
-

    + (this loads a new context, using the new ADS module. The parameter is the 'location' of the ldap server) -

    +
     > lookup_name DOMAIN abartlet
-
    
+
    (returns a sid). -

    +

    Because the 'new SAM' is NT ACL based, there will be a command to specify an arbitrary NT ACL, but for now it uses 'system' by default.

    Chapter14.LanMan and NT Password Encryption

    Jeremy Allison

    Samba Team



    -

    19 Apr 1999

    Table of Contents

    Introduction
    How does it work?
    The smbpasswd file

    Introduction

    With the development of LanManager and Windows NT +

    19 Apr 1999

    Table of Contents

    Introduction
    How does it work?
    The smbpasswd file

    Introduction

    With the development of LanManager and Windows NT compatible password encryption for Samba, it is now able to validate user connections in exactly the same way as a LanManager or Windows NT server.

    This document describes how the SMB password encryption algorithm works and what issues there are in choosing whether you want to use it. You should read it carefully, especially - the part about security and the "PROS and CONS" section.

    How does it work?

    LanManager encryption is somewhat similar to UNIX + the part about security and the "PROS and CONS" section.

    How does it work?

    LanManager encryption is somewhat similar to UNIX password encryption. The server uses a file containing a hashed value of a user's password. This is created by taking the user's plaintext password, capitalising it, and either @@ -1886,7 +1886,7 @@ specify an arbitrary NT ACL, but for now it uses 'system' by default. know the correct password and is denied access.

    Note that the Samba server never knows or stores the cleartext of the user's password - just the 16 byte hashed values derived from it. Also note that the cleartext password or 16 byte hashed values - are never transmitted over the network - thus increasing security.

    The smbpasswd file

    In order for Samba to participate in the above protocol + are never transmitted over the network - thus increasing security.

    The smbpasswd file

    In order for Samba to participate in the above protocol it must be able to look up the 16 byte hashed values given a user name. Unfortunately, as the UNIX password value is also a one way hash function (ie. it is impossible to retrieve the cleartext of the user's @@ -1943,10 +1943,10 @@ bob:100:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX: to enable this on your server.

    Note : This file should be protected very carefully. Anyone with access to this file can (with enough knowledge of the protocols) gain access to your SMB server. The file is thus more - sensitive than a normal unix /etc/passwd file.

    Chapter15.Modules

    Jelmer Vernooij

    Samba Team

    19 March 2003

    Table of Contents

    Advantages
    Loading modules
    Static modules
    Shared modules
    Writing modules
    Static/Shared selection in configure.in

    Advantages

    + sensitive than a normal unix /etc/passwd file.

    Chapter15.Modules

    Jelmer Vernooij

    Samba Team

    19 March 2003

    Table of Contents

    Advantages
    Loading modules
    Static modules
    Shared modules
    Writing modules
    Static/Shared selection in configure.in

    Advantages

    The new modules system has the following advantages:

    Transparent loading of static and shared modules (no need -for a subsystem to know about modules)
    Simple selection between shared and static modules at configure time
    "preload modules" option for increasing performance for stable modules
    No nasty #define stuff anymore
    All backends are available as plugin now (including pdb_ldap and pdb_tdb)

    Loading modules

    +for a subsystem to know about modules)Simple selection between shared and static modules at configure time"preload modules" option for increasing performance for stable modulesNo nasty #define stuff anymoreAll backends are available as plugin now (including pdb_ldap and pdb_tdb)

    Loading modules

    Some subsystems in samba use different backends. These backends can be either statically linked in to samba or available as a plugin. A subsystem should have a function that allows a module to register itself. For example, @@ -1956,7 +1956,7 @@ NTSTATUS smb_register_passdb(int version, const char *name, pdb_init_function in

    This function will be called by the initialisation function of the module to register itself. -

    Static modules

    +

    Static modules

    The modules system compiles a list of initialisation functions for the static modules of each subsystem. This is a define. For example, it is here currently (from include/config.h): @@ -1966,7 +1966,7 @@ it is here currently (from include/config.h):

    These functions should be called before the subsystem is used. That should be done when the subsystem is initialised or first used. -

    Shared modules

    +

    Shared modules

    If a subsystem needs a certain backend, it should check if it has already been registered. If the backend hasn't been registered already, the subsystem should call smb_probe_module(char *subsystem, char *backend). @@ -1976,7 +1976,7 @@ is a slash, smb_probe_module() tries to load the module from the absolute path specified in 'backend'.

    After smb_probe_module() has been executed, the subsystem should check again if the module has been registered. -

    Writing modules

    +

    Writing modules

    Each module has an initialisation function. For modules that are included with samba this name is 'subsystem_backend_init'. For external modules (that will never be built-in, but only available as a module) this name is always 'init_module'. (In the case of modules included with samba, the configure system will add a #define subsystem_backend_init() init_module()). The prototype for these functions is: @@ -1991,7 +1991,7 @@ smb_register_passdb(PASSDB_INTERFACE_VERSION, "ldapsam", pdb_init_ldap smb_register_passdb(PASSDB_INTERFACE_VERSION, "ldapsam_nua", pdb_init_ldapsam_nua); return NT_STATUS_OK; } -

    Static/Shared selection in configure.in

    +

    Static/Shared selection in configure.in

    Some macros in configure.in generate the various defines and substs that are necessary for the system to work correct. All modules that should be built by default have to be added to the variable 'default_modules'. @@ -2010,13 +2010,13 @@ be replaced with the names of the plugins to build.

    You must make sure all .c files that contain defines that can be changed by ./configure are rebuilded in the 'modules_clean' make target. Practically, this means all c files that contain static_init_subsystem; calls need to be rebuilded. -

    Chapter16.RPC Pluggable Modules

    Anthony Liguori

    IBM

    Jelmer Vernooij

    Samba Team

    January 2003

    Table of Contents

    About
    General Overview

    About

    +

    Chapter16.RPC Pluggable Modules

    Anthony Liguori

    IBM

    Jelmer Vernooij

    Samba Team

    January 2003

    Table of Contents

    About
    General Overview

    About

    This document describes how to make use the new RPC Pluggable Modules features of Samba 3.0. This architecture was added to increase the maintainability of Samba allowing RPC Pipes to be worked on separately from the main CVS branch. The RPM architecture will also allow third-party vendors to add functionality to Samba through plug-ins. -

    General Overview

    +

    General Overview

    When an RPC call is sent to smbd, smbd tries to load a shared library by the name librpc_<pipename>.so to handle the call if it doesn't know how to handle the call internally. For instance, LSA calls @@ -2033,7 +2033,7 @@ NTSTATUS rpc_pipe_register_commands(int version, const char *clnt, const char *s argument.

    clnt

    the Client name of the named pipe

    srv

    the Server name of the named pipe

    cmds

    a list of api_structs that map RPC ordinal numbers to function calls

    size

    the number of api_structs contained in cmds

    See rpc_server/srv_reg.c and rpc_server/srv_reg_nt.c for a small example of how to use this library. -

    Chapter17.VFS Modules

    Alexander Bokovoy

    Stefan Metzmacher

    27 May 2003

    Table of Contents

    The Samba (Posix) VFS layer
    The general interface
    Possible VFS operation layers
    The Interaction between the Samba VFS subsystem and the modules
    Initialization and registration
    How the Modules handle per connection data
    Upgrading to the New VFS Interface
    Upgrading from 2.2.* and 3.0aplha modules
    Some Notes
    Implement TRANSPARENT functions
    Implement OPAQUE functions

    The Samba (Posix) VFS layer

    The general interface

    +

    Chapter17.VFS Modules

    Alexander Bokovoy

    Stefan Metzmacher

    27 May 2003

    Table of Contents

    The Samba (Posix) VFS layer
    The general interface
    Possible VFS operation layers
    The Interaction between the Samba VFS subsystem and the modules
    Initialization and registration
    How the Modules handle per connection data
    Upgrading to the New VFS Interface
    Upgrading from 2.2.* and 3.0aplha modules
    Some Notes
    Implement TRANSPARENT functions
    Implement OPAQUE functions

    The Samba (Posix) VFS layer

    The general interface

    Each VFS operation has a vfs_op_type, a function pointer and a handle pointer in the struct vfs_ops and tree macros to make it easier to call the operations. (Take a look at include/vfs.h and include/vfs_macros.h.) @@ -2056,7 +2056,7 @@ typedef enum _vfs_op_type { SMB_VFS_OP_LAST } vfs_op_type; -

    This struct contains the function and handle pointers for all operations.

    +
    This struct contains the function and handle pointers for all operations.
     struct vfs_ops {
 	struct vfs_fn_pointers {
 		...
@@ -2098,10 +2098,10 @@ struct vfs_ops {
 		...
 	} handles;
 };
-

    + This macros SHOULD be used to call any vfs operation. DO NOT ACCESS conn->vfs.ops.* directly !!! -

    +
     ...
 	
 /* File operations */
@@ -2129,7 +2129,7 @@ DO NOT ACCESS conn->vfs.ops.* directly !!!
 	 (tofd), (fsp), (fromfd), (header), (offset), (count)))
 
 ...
-

    Possible VFS operation layers

    +

    Possible VFS operation layers

    These values are used by the VFS subsystem when building the conn->vfs and conn->vfs_opaque structs for a connection with multiple VFS modules. Internally, Samba differentiates only opaque and transparent layers at this process. @@ -2158,19 +2158,19 @@ typedef enum _vfs_op_layer { SMB_VFS_LAYER_SCANNER /* - Checks data and possibly initiates additional */ /* file activity like logging to files _inside_ samba VFS */ } vfs_op_layer; -

    The Interaction between the Samba VFS subsystem and the modules

    Initialization and registration

    +

    The Interaction between the Samba VFS subsystem and the modules

    Initialization and registration

    As each Samba module a VFS module should have a -

    NTSTATUS vfs_example_init(void);

    function if it's staticly linked to samba or -

    NTSTATUS init_module(void);

    function if it's a shared module. -

    +

    NTSTATUS vfs_example_init(void);
    function if it's staticly linked to samba or +
    NTSTATUS init_module(void);
    function if it's a shared module. +

    This should be the only non static function inside the module. Global variables should also be static! -

    +

    The module should register its functions via the -

    +
     NTSTATUS smb_register_vfs(int version, const char *name, vfs_op_tuple *vfs_op_tuples);
-
     function.
-
    version
    should be filled with SMB_VFS_INTERFACE_VERSION
    name
    this is the name witch can be listed in the 
+
    function. +
    version

    should be filled with SMB_VFS_INTERFACE_VERSION

    name

    this is the name witch can be listed in the vfs objects parameter to use this module.

    vfs_op_tuples

    this is an array of vfs_op_tuple's. (vfs_op_tuples is descripted in details below.) @@ -2198,7 +2198,7 @@ NTSTATUS init_module(void) { return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, "example", example_op_tuples); } -

    How the Modules handle per connection data

    Each VFS function has as first parameter a pointer to the modules vfs_handle_struct. +

    How the Modules handle per connection data

    Each VFS function has as first parameter a pointer to the modules vfs_handle_struct. 

     typedef struct vfs_handle_struct {
 	struct vfs_handle_struct  *next, *prev;
@@ -2299,7 +2299,7 @@ you can set this function pointer to NULL.

    Some useful MAC (handle)->vfs_next.handles.sendfile,\ (tofd), (fsp), (fromfd), (header), (offset), (count))) ... -

    Upgrading to the New VFS Interface

    Upgrading from 2.2.* and 3.0aplha modules

    1. +

    Upgrading to the New VFS Interface

    Upgrading from 2.2.* and 3.0aplha modules

    1. Add "vfs_handle_struct *handle, " as first parameter to all vfs operation functions. e.g. example_connect(connection_struct *conn, const char *service, const char *user); -> example_connect(vfs_handle_struct *handle, connection_struct *conn, const char *service, const char *user); @@ -2315,12 +2315,12 @@ e.g. smb_vfs_next_connect(conn, service, user); Add "handle, " as first parameter to all SMB_VFS_NEXT_*() calls. e.g. SMB_VFS_NEXT_CONNECT(conn, service, user); -> SMB_VFS_NEXT_CONNECT(handle, conn, service, user); -

    2. +

    3. (Only for 2.2.* modules) Convert the old struct vfs_ops example_ops to a vfs_op_tuple example_op_tuples[] array. e.g. -

      +
       struct vfs_ops example_ops = {
 	/* Disk operations */
 	example_connect,		/* connect */
@@ -2390,9 +2390,9 @@ struct vfs_ops example_ops = {
 	NULL,				/* sys_acl_free_acl */
 	NULL				/* sys_acl_free_qualifier */
 };
-
      
+
      -> -

       
+
       
 static vfs_op_tuple example_op_tuples[] = {
 	{SMB_VFS_OP(example_connect),	SMB_VFS_OP_CONNECT,	SMB_VFS_LAYER_TRANSPARENT},
 	{SMB_VFS_OP(example_disconnect),	SMB_VFS_OP_DISCONNECT,	SMB_VFS_LAYER_TRANSPARENT},
@@ -2403,42 +2403,42 @@ static vfs_op_tuple example_op_tuples[] = {
 
 	{SMB_VFS_OP(NULL),				SMB_VFS_OP_NOOP,	SMB_VFS_LAYER_NOOP}
 };
-
      
-

    4. + +

    5. Move the example_op_tuples[] array to the end of the file. -

    6. +

    7. Add the init_module() function at the end of the file. e.g. -

      +
       NTSTATUS init_module(void)
 {
 	return smb_register_vfs(SMB_VFS_INTERFACE_VERSION,"example",example_op_tuples);
 }
-
      
-

    8. + +

    9. Check if your vfs_init() function does more then just prepare the vfs_ops structs or remember the struct smb_vfs_handle_struct. -

      If NOT you can remove the vfs_init() function.
      If YES decide if you want to move the code to the example_connect() operation or to the init_module(). And then remove vfs_init(). - e.g. a debug class registration should go into init_module() and the allocation of private data should go to example_connect().

      -

    10. +
      If NOT you can remove the vfs_init() function.
      If YES decide if you want to move the code to the example_connect() operation or to the init_module(). And then remove vfs_init(). + e.g. a debug class registration should go into init_module() and the allocation of private data should go to example_connect().
      +

    11. (Only for 3.0alpha* modules) Check if your vfs_done() function contains needed code. -

      If NOT you can remove the vfs_done() function.
      If YES decide if you can move the code to the example_disconnect() operation. Otherwise register a SMB_EXIT_EVENT with smb_register_exit_event(); (Described in the modules section) And then remove vfs_done(). e.g. the freeing of private data should go to example_disconnect(). -

      -

    12. +
      If NOT you can remove the vfs_done() function.
      If YES decide if you can move the code to the example_disconnect() operation. Otherwise register a SMB_EXIT_EVENT with smb_register_exit_event(); (Described in the modules section) And then remove vfs_done(). e.g. the freeing of private data should go to example_disconnect(). +
      +

    13. Check if you have any global variables left. Decide if it wouldn't be better to have this data on a connection basis. -

      If NOT leave them as they are. (e.g. this could be the variable for the private debug class.)
      If YES pack all this data into a struct. You can use handle->data to point to such a struct on a per connection basis.

      +
      If NOT leave them as they are. (e.g. this could be the variable for the private debug class.)
      If YES pack all this data into a struct. You can use handle->data to point to such a struct on a per connection basis.
      e.g. if you have such a struct: -

          
+
          
 struct example_privates {
 	char *some_string;
 	int db_connection;
 };
-
      	
+
      first way of doing it: -

      +
       static int example_connect(vfs_handle_struct *handle,
 	connection_struct *conn, const char *service, 
 	const char* user)
@@ -2485,9 +2485,9 @@ static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
 	
 	return SMB_VFS_NEXT_CLOSE(handle, fsp, fd);
 }
-
      
+
      second way of doing it: -

      +
       static void free_example_privates(void **datap)
 {
 	struct example_privates *data = (struct example_privates *)*datap;
@@ -2495,7 +2495,7 @@ static void free_example_privates(void **datap)
 	SAFE_FREE(data->some_string);
 	SAFE_FREE(data);
 	
-	datap = NULL;
+	*datap = NULL;
 	
 	return;
 }
@@ -2514,7 +2514,7 @@ static int example_connect(vfs_handle_struct *handle,
 	}
 
 	/* init out private data */
-	data->some_string = strdup(conn->mem_ctx,"test");
+	data->some_string = strdup("test");
 	if (!data->some_string) {
 		DEBUG(0,("strdup() failed\n"));
 		return -1;
@@ -2526,7 +2526,7 @@ static int example_connect(vfs_handle_struct *handle,
 	 * we need to specify a free_function because we used malloc() and strdup().
 	 * (return -1 if something failed.)
 	 */
-	SMB_VFS_HANDLE_SET_DATA(handle, data, NULL, struct example_privates, return -1);
+	SMB_VFS_HANDLE_SET_DATA(handle, data, free_example_privates, struct example_privates, return -1);
 
 	return SMB_VFS_NEXT_CONNECT(handle,conn,service,user);
 }
@@ -2545,8 +2545,8 @@ static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
 	
 	return SMB_VFS_NEXT_CLOSE(handle, fsp, fd);
 }
-
      
-

    14. + +

    15. To make it easy to build 3rd party modules it would be usefull to provide configure.in, (configure), install.sh and Makefile.in with the module. (Take a look at the example in examples/VFS.) @@ -2559,21 +2559,21 @@ give you more warnings. The idea is that you can extend this configure.in and Makefile.in scripts for your module. -

    16. +

    17. Compiling & Testing... -

      ./configure --enable-developer ...
      make
      Try to fix all compiler warnings
      make
      Testing, Testing, Testing ...

      -

    Some Notes

    Implement TRANSPARENT functions

    +
    ./configure --enable-developer ...
    make
    Try to fix all compiler warnings
    make
    Testing, Testing, Testing ...
    +

    Some Notes

    Implement TRANSPARENT functions

    Avoid writing functions like this: -

    +
     static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
 {
 	return SMB_VFS_NEXT_CLOSE(handle, fsp, fd);
 }
-
    
+
    Overload only the functions you really need to! -

    Implement OPAQUE functions

    +

    Implement OPAQUE functions

    If you want to just implement a better version of a default samba opaque function (e.g. like a disk_free() function for a special filesystem) @@ -2593,12 +2593,12 @@ static int example_rename(vfs_handle_struct *handle, connection_struct *conn, errno = ENOSYS; return -1; } -

    Chapter18.Notes to packagers

    Jelmer Vernooij

    Table of Contents

    Versioning
    Modules

    Versioning

    Please, please update the version number in +

    Chapter18.Notes to packagers

    Jelmer Vernooij

    Table of Contents

    Versioning
    Modules

    Versioning

    Please, please update the version number in source/include/version.h to include the versioning of your package. This makes it easier to distinguish standard samba builds from custom-build samba builds (distributions often patch packages). For example, a good version would be: 

     Version 2.999+3.0.alpha21-5 for Debian
-

    Modules

    Samba now has support for building parts of samba as plugins. This +

    Modules

    Samba now has support for building parts of samba as plugins. This makes it possible to, for example, put ldap or mysql support in a seperate package, thus making it possible to have a normal samba package not depending on ldap or mysql. To build as much parts of samba @@ -2621,8 +2621,8 @@ as a plugin, run: 

     			e.g. files generated by diff -u. 
 		
    If you are modifying a copy of samba you retrieved from CVS, 
 		you can easily generate a diff file of these changes by running 
-		cvs diff -u.
    Points of attention when modifying samba source code
    
-		
    Don't simply copy code from other places and modify it until it
+		cvs diff -u.
    Points of attention when modifying samba source code
    
+		
    Don't simply copy code from other places and modify it until it
 		works. Code needs to be clean and logical. Duplicate 
 		code is to be avoided.
    Test your patch. It might take a while before one of us looks 
 		at your patch so it will take longer before your patch when your patch 
@@ -2630,8 +2630,8 @@ as a plugin, run: 
     		it harder to read, understand and test the patch. You might 
 		also risk not getting a good patch committed because you mixed it 
 		with one that had issues. 
    Make sure your patch complies to the samba coding style as 
- 		suggested in the coding-suggestions chapter. 
    
-		
    Sending in bugfixes
    Bugfixes to bugs in samba should be submitted to samba's
+ 		suggested in the coding-suggestions chapter. 
    
+		
    Sending in bugfixes
    Bugfixes to bugs in samba should be submitted to samba's
 		bugzilla system, 
 		along with a description of the bug.
 		
    Sending in feature patches
    Send feature patches along with a description of what the 
diff --git a/docs/htmldocs/Samba-HOWTO-Collection.html b/docs/htmldocs/Samba-HOWTO-Collection.html
index 27faf25f173..44d9954758d 100644
--- a/docs/htmldocs/Samba-HOWTO-Collection.html
+++ b/docs/htmldocs/Samba-HOWTO-Collection.html
@@ -16,14 +16,14 @@ insignificant number of ideas for inclusion (if not content itself) has been obt
 from a number of Unofficial HOWTOs - to each such author a big "Thank-you" is also offered.
 Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and
 application knowledge that is most to be desired by many Samba users and administrators.
-">
    SAMBA Project Documentation
    Edited by
    Jelmer R. Vernooij
    John H. Terpstra
    Gerald (Jerry) Carter
    
+">
    SAMBA Project Documentation
    Edited by
    Jelmer R. Vernooij
    John H. Terpstra
    Gerald (Jerry) Carter
    
 This documentation is distributed under the GNU General Public License (GPL) 
 version 2.  A copy of the license is included with the Samba source
 distribution.  A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt
-
    Attributions.
-		
    Introduction to Samba
    How to Install and Test SAMBA
    Fast Start for the Impatient
    Server Types and Security Modes
    Domain Control
    Backup Domain Control
    Domain Membership
    Stand-Alone Servers
    MS Windows Network Configuration Guide
    Samba / MS Windows Network Browsing Guide
    Account Information Databases
    Mapping MS Windows and Unix Groups
    File, Directory and Share Access Controls
    File and Record Locking
    Securing Samba
    Interdomain Trust Relationships
    Hosting a Microsoft Distributed File System tree on Samba
    Classical Printing Support
    CUPS Printing Support in Samba 3.0
    Stackable VFS modules
    • Jelmer Vernooij <jelmer@samba.org>
    • John Terpstra <jht@samba.org>
    • Tim Potter
    • Simo Sorce (original vfs_skel README) 
    • Alexander Bokovoy (original vfs_netatalk docs) 
    • Stefan Metzmacher (Update for multiple modules) 
    Integrated Logon Support using Winbind
    Advanced Network Management
    System and Account Policies
    Desktop Profile Management
    PAM based Distributed Authentication
    Integrating MS Windows networks with Samba
    Unicode/Charsets
    Samba Backup Techniques
    High Availability Options
    Upgrading from Samba-2.x to Samba-3.0.0
    Migration from NT4 PDC to Samba-3 PDC
    SWAT - The Samba Web Administration Tool
    The Samba checklist
    Analysing and solving samba problems
    Reporting Bugs
    How to compile SAMBA
    Portability
    Samba and other CIFS clients
    Samba Performance Tuning
    DNS and DHCP Configuration Guide
    Further Resources
    
+
    Attributions.
+		
    Introduction to Samba
    How to Install and Test SAMBA
    Fast Start for the Impatient
    Server Types and Security Modes
    Domain Control
    Backup Domain Control
    Domain Membership
    Stand-Alone Servers
    MS Windows Network Configuration Guide
    Samba / MS Windows Network Browsing Guide
    Account Information Databases
    Mapping MS Windows and Unix Groups
    File, Directory and Share Access Controls
    File and Record Locking
    Securing Samba
    Interdomain Trust Relationships
    Hosting a Microsoft Distributed File System tree on Samba
    Classical Printing Support
    CUPS Printing Support in Samba 3.0
    Stackable VFS modules
    • Jelmer Vernooij <jelmer@samba.org>
    • John Terpstra <jht@samba.org>
    • Tim Potter
    • Simo Sorce (original vfs_skel README) 
    • Alexander Bokovoy (original vfs_netatalk docs) 
    • Stefan Metzmacher (Update for multiple modules) 
    Integrated Logon Support using Winbind
    Advanced Network Management
    System and Account Policies
    Desktop Profile Management
    PAM based Distributed Authentication
    Integrating MS Windows networks with Samba
    Unicode/Charsets
    Samba Backup Techniques
    High Availability Options
    Upgrading from Samba-2.x to Samba-3.0.0
    Migration from NT4 PDC to Samba-3 PDC
    SWAT - The Samba Web Administration Tool
    The Samba checklist
    Analysing and solving samba problems
    Reporting Bugs
    How to compile SAMBA
    Portability
    Samba and other CIFS clients
    Samba Performance Tuning
    DNS and DHCP Configuration Guide
    Further Resources
    
 
-	
    Monday April 21, 2003
    Abstract
    
+	
    Monday April 21, 2003
    Abstract
    
 This book is a collection of HOWTOs added to Samba documentation over the years.
 Samba is always under development, and so is its' documentation. This release of the
 documentation represents a major revision or layout as well as contents.
@@ -41,43 +41,43 @@ insignificant number of ideas for inclusion (if not content itself) has been obt
 from a number of Unofficial HOWTOs - to each such author a big "Thank-you" is also offered.
 Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and
 application knowledge that is most to be desired by many Samba users and administrators.
-
    Table of Contents
    I. General Installation
    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your 
-	server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, 
-	Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. Fast Start for the Impatient
    Note
    II. Server Configuration Basics
    4. Server Types and Security Modes
    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server
    5. Domain Control
    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." 
+
    Table of Contents
    I. General Installation
    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your 
+	server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, 
+	Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. Fast Start for the Impatient
    Note
    II. Server Configuration Basics
    4. Server Types and Security Modes
    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server
    5. Domain Control
    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." 
 or "Cannot join domain, the credentials supplied conflict with an 
-existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not 
-exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
    6. Backup Domain Control
    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?
    7. Domain Membership
    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails
    8. Stand-Alone Servers
    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors
    9. MS Windows Network Configuration Guide
    Note
    III. Advanced Configuration
    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask 
-		parameters
    Interaction with the standard Samba file attribute 
-		mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files
-			I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with
-rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install
-Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a
-different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for
-CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing
-with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for
-application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing
-with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and
-native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print
-Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use
-PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many
-Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel
-Mode
     Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for
-cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for
-WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for
-Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the
-Client
    Installing PostScript Driver Files manually (using
-rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to
-CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached
-Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing
-Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Management
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note
    IV. Migration and Updating
    30. Upgrading from Samba-2.x to Samba-3.0.0
    Charsets
    Obsolete configuration options
    Password Backend
    31. Migration from NT4 PDC to Samba-3 PDC
    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices
    32. SWAT - The Samba Web Administration Tool
    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page
    V. Troubleshooting
    33. The Samba checklist
    Introduction
    Assumptions
    The tests
    Still having troubles?
    34. Analysing and solving samba problems
    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists
    35. Reporting Bugs
    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches
    VI. Appendixes
    36. How to compile SAMBA
    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors
    37. Portability
    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9
    38. Samba and other CIFS clients
    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or 
-		OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), 
-		OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working 
-		for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1
    39. Samba Performance Tuning
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    40. DNS and DHCP Configuration Guide
    Note
    41. Further Resources
    Websites
    Related updates from Microsoft
    Books
    Index
    List of Figures
    19.1. Windows Printing to a local Printer
    19.2. Printing to a Postscript Printer
    19.3. Ghostscript as a RIP for non-postscript printers
    19.4. Prefiltering in CUPS to form Postscript
    19.5. Adding Device-specific Print Options
    19.6. Postscript to intermediate Raster format
    19.7. CUPS-raster production using Ghostscript
    19.8. Image format to CUPS-raster format conversion
    19.9. Raster to Printer Specific formats
    19.10. cupsomatic/foomatic processing versus Native CUPS
    19.11. Print Driver execution on the Client
    19.12. Print Driver execution on the Server
    19.13. Printing via CUPS/samba server
    19.14. cupsaddsmb flowchart
    19.15. CUPS Printing Overview
    List of Tables
    7.1. Assumptions
    10.1. Browse subnet example 1
    10.2. Browse subnet example 2
    10.3. Browse subnet example 3
    10.4. Browse subnet example 4
    11.1. Attributes in the sambaSamAccount objectclass (LDAP)
    11.2. Basic smb.conf options for MySQL passdb backend
    11.3. MySQL field names for MySQL passdb backend
    13.1. Managing directories with unix and windows
    13.2. User and Group Based Controls
    13.3. File and Directory Permission Based Controls
    13.4. Other Controls
    20.1. Extended Auditing Log Information
    24.1. User Shell Folder registry keys default values
    24.2. Defaults of profile settings registry keys
    24.3. Defaults of default user profile paths registry keys
    25.1. Options recognized by pam_smbpass
    31.1. The 3 Major Site Types
    31.2. Nature of the Conversion Choices
    List of Examples
    12.1. smbgrpadd.sh
    13.1. Example File
    General Installation
    Preparing Samba for Configuration
    This section of the Samba-HOWTO-Collection contains general info on how to install samba 
+existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not 
+exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation,
+I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
    6. Backup Domain Control
    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?
    7. Domain Membership
    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails
    8. Stand-Alone Servers
    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors
    9. MS Windows Network Configuration Guide
    Note
    III. Advanced Configuration
    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask 
+		parameters
    Interaction with the standard Samba file attribute 
+		mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files
+			I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with
+rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install
+Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a
+different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for
+CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing
+with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for
+application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and
+native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print
+Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many
+Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel
+Mode
     Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for
+cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for
+WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for
+Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the
+Client
    Installing PostScript Driver Files manually (using
+rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to
+CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached
+Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing
+Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Management
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note
    IV. Migration and Updating
    30. Upgrading from Samba-2.x to Samba-3.0.0
    Charsets
    Obsolete configuration options
    Password Backend
    31. Migration from NT4 PDC to Samba-3 PDC
    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices
    32. SWAT - The Samba Web Administration Tool
    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page
    V. Troubleshooting
    33. The Samba checklist
    Introduction
    Assumptions
    The tests
    Still having troubles?
    34. Analysing and solving samba problems
    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists
    35. Reporting Bugs
    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches
    VI. Appendixes
    36. How to compile SAMBA
    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors
    37. Portability
    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9
    38. Samba and other CIFS clients
    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or 
+		OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), 
+		OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working 
+		for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1
    39. Samba Performance Tuning
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    40. DNS and DHCP Configuration Guide
    Note
    41. Further Resources
    Websites
    Related updates from Microsoft
    Books
    Index

    List of Figures

    19.1. Windows Printing to a local Printer
    19.2. Printing to a Postscript Printer
    19.3. Ghostscript as a RIP for non-postscript printers
    19.4. Prefiltering in CUPS to form Postscript
    19.5. Adding Device-specific Print Options
    19.6. Postscript to intermediate Raster format
    19.7. CUPS-raster production using Ghostscript
    19.8. Image format to CUPS-raster format conversion
    19.9. Raster to Printer Specific formats
    19.10. cupsomatic/foomatic processing versus Native CUPS
    19.11. Print Driver execution on the Client
    19.12. Print Driver execution on the Server
    19.13. Printing via CUPS/samba server
    19.14. cupsaddsmb flowchart
    19.15. CUPS Printing Overview

    List of Tables

    7.1. Assumptions
    10.1. Browse subnet example 1
    10.2. Browse subnet example 2
    10.3. Browse subnet example 3
    10.4. Browse subnet example 4
    11.1. Attributes in the sambaSamAccount objectclass (LDAP)
    11.2. Basic smb.conf options for MySQL passdb backend
    11.3. MySQL field names for MySQL passdb backend
    13.1. Managing directories with unix and windows
    13.2. User and Group Based Controls
    13.3. File and Directory Permission Based Controls
    13.4. Other Controls
    20.1. Extended Auditing Log Information
    24.1. User Shell Folder registry keys default values
    24.2. Defaults of profile settings registry keys
    24.3. Defaults of default user profile paths registry keys
    25.1. Options recognized by pam_smbpass
    31.1. The 3 Major Site Types
    31.2. Nature of the Conversion Choices

    List of Examples

    12.1. smbgrpadd.sh
    13.1. Example File

    General Installation

    Preparing Samba for Configuration

    This section of the Samba-HOWTO-Collection contains general info on how to install samba and how to configure the parts of samba you will most likely need. -PLEASE read this.

    Table of Contents

    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your - server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. Fast Start for the Impatient
    Note

    Chapter1.Introduction to Samba

    David Lechnyr

    Unofficial HOWTO

    April 14, 2003

    Table of Contents

    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous

    “ +PLEASE read this.

    Table of Contents

    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your + server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. Fast Start for the Impatient
    Note

    Chapter1.Introduction to Samba

    David Lechnyr

    Unofficial HOWTO

    April 14, 2003

    Table of Contents

    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous

    “ "If you understand what you're doing, you're not learning anything." -- Anonymous ”

    @@ -86,7 +86,7 @@ transport protocol. In fact, it can support any SMB/CIFS-enabled client. One of strengths is that you can use it to blend your mix of Windows and Linux machines together without requiring a separate Windows NT/2000/2003 Server. Samba is actively being developed by a global team of about 30 active programmers and was originally developed by Andrew Tridgell. -

    Background

    +

    Background

    Once long ago, there was a buzzword referred to as DCE/RPC. This stood for Distributed Computing Environment/Remote Procedure Calls and conceptually was a good idea. It was originally developed by Apollo/HP as NCA 1.0 (Network Computing Architecture) and only @@ -112,7 +112,7 @@ been dutifully waded through during the information-gathering stages of this pro are *still* many missing pieces... While often tedious, at least the way has been generously littered with occurrences of clapping hand to forehead and muttering 'crikey, what are they thinking? -

    Terminology

    • +

    Terminology

    • SMB: Acronym for "Server Message Block". This is Microsoft's file and printer sharing protocol.

    • CIFS: Acronym for "Common Internet File System". Around 1996, Microsoft apparently @@ -162,7 +162,7 @@ thinking? W3K: Acronym for Windows 2003 Server

    If you plan on getting help, make sure to subscribe to the Samba Mailing List (available at http://www.samba.org). -

    Related Projects

    +

    Related Projects

    There are currently two network filesystem client projects for Linux that are directly related to Samba: SMBFS and CIFS VFS. These are both available in the Linux kernel itself.

    • @@ -184,7 +184,7 @@ nothing to do with acting as a file and print server for SMB/CIFS clients. There are other Open Source CIFS client implementations, such as the jCIFS project which provides an SMB client toolkit written in Java. -

    SMB Methodology

    +

    SMB Methodology

    Traditionally, SMB uses UDP port 137 (NetBIOS name service, or netbios-ns), UDP port 138 (NetBIOS datagram service, or netbios-dgm), and TCP port 139 (NetBIOS session service, or netbios-ssn). Anyone looking at their network with a good @@ -216,7 +216,7 @@ up a single file. In general, SMB sessions are established in the following orde A good way to examine this process in depth is to try out SecurityFriday's SWB program. It allows you to walk through the establishment of a SMB/CIFS session step by step. -

    Epilogue

    “ +

    Epilogue

    “ What's fundamentally wrong is that nobody ever had any taste when they did it. Microsoft has been very much into making the user interface look good, but internally it's just a complete mess. And even people who program for Microsoft @@ -245,14 +245,14 @@ not the completely clueless user who probably sits there shivering thinking That's what's really irritating to me." ”

    -- Linus Torvalds, from an interview with BOOT Magazine, Sept 1998 -

    Miscellaneous

    +

    Miscellaneous

    This chapter is Copyright 2003 David Lechnyr (david at lechnyr dot com). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation. A copy of the license is available at http://www.gnu.org/licenses/fdl.txt. -

    Chapter2.How to Install and Test SAMBA

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Karl Auer

    Table of Contents

    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your - server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Obtaining and installing samba

    +

    Chapter2.How to Install and Test SAMBA

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Karl Auer

    Table of Contents

    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your + server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Obtaining and installing samba

    Binary packages of samba are included in almost any Linux or Unix distribution. There are also some packages available at the samba homepage. @@ -260,29 +260,29 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li appropriate appendix chapter.

    If you have already installed samba, or if your operating system was pre-installed with samba, then you may not need to bother with this chapter. On the other hand, you may want to read this chapter anyhow - for information about updating samba.

    Configuring samba (smb.conf)

    + for information about updating samba.

    Configuring samba (smb.conf)

    Samba's configuration is stored in the smb.conf file, that usually resides in /etc/samba/smb.conf or /usr/local/samba/lib/smb.conf. You can either edit this file yourself or do it using one of the many graphical tools that are available, such as the web-based interface swat, that is included with samba. -

    Example Configuration

    +

    Example Configuration

    There are sample configuration files in the examples subdirectory in the distribution. I suggest you read them carefully so you can see how the options go together in practice. See the man page for all the options.

    The simplest useful configuration file would be something like this: -

    - 

    +	
    
+	
     	[global]
 		workgroup = MYGROUP
 
 	[homes]
 		guest ok = no
 		read only = no
-	
    
-	
    
+
    +

    This will allow connections by anyone with an account on the server, using either their login name or "homes" as the service name. (Note that the workgroup that Samba must also be set.) @@ -294,7 +294,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li For more information about security settings for the [homes] share please refer to the chapter Securing Samba. -

    Test your config file with testparm

    +

    Test your config file with testparm

    It's important that you test the validity of your smb.conf file using the testparm program. If testparm runs OK then it will list the loaded services. If not it will give an error message. @@ -302,7 +302,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li Make sure it runs OK and that the services look reasonable before proceeding.

    Always run testparm again when you change smb.conf! -

    SWAT

    +

    SWAT

    SWAT is a web-based interface that helps you configure samba. SWAT might not be available in the samba package on your platform, but in a separate package. Please read the swat manpage @@ -318,7 +318,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li machine but connecting from a remote machine leaves your connection open to password sniffing as passwords will be sent in the clear over the wire. -

    Try listing the shares available on your +

    Try listing the shares available on your server

    $ smbclient -L yourhostname

    You should get back a list of shares available on your server. If you don't then something is incorrectly setup. @@ -328,7 +328,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li See the smbclient man page for details. (you can force it to list the shares without a password by adding the option -U% to the command line. This will not work - with non-Samba servers)

    Try connecting with the unix client

    $ smbclient + with non-Samba servers)

    Try connecting with the unix client

    $ smbclient //yourhostname/aservice

    Typically the yourhostname would be the name of the host where you installed smbd. The aservice is @@ -337,18 +337,18 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li section in smb.conf.

    For example if your unix host is bambi and your login name is fred you would type:

    $ smbclient //bambi/fred -

    Try connecting from a DOS, WfWg, Win9x, WinNT, +

    Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client

    Try mounting disks. eg:

    C:\WINDOWS\> net use d: \\servername\service

    Try printing. eg:

    C:\WINDOWS\> net use lpt1: \\servername\spoolservice

    C:\WINDOWS\> print filename -

    What If Things Don't Work?

    Then you might read the file chapter +

    What If Things Don't Work?

    Then you might read the file chapter Diagnosis and the FAQ. If you are still stuck then try to follow the Analysing and Solving Problems chapter Samba has been successfully installed at thousands of sites worldwide, - so maybe someone else has hit your problem and has overcome it.

    Common Errors

    + so maybe someone else has hit your problem and has overcome it.

    Common Errors

    The following questions and issues get raised on the samba mailing list over and over again. -

    Why are so many smbd processes eating memory?

    +

    Why are so many smbd processes eating memory?

    “ Site that is running Samba on an AIX box. They are sharing out about 2 terabytes using samba. Samba was installed using smitty and the binaries. We seem to be experiencing a memory problem @@ -360,8 +360,8 @@ processes of smbd running: Is samba suppose to start this many different smbd processes? Or does it run as one smbd process? Also is it normal for it to be taking up this much memory? ” -

    -

    +
    
+
     Inuse * 4096 = amount of memory being used by this process
 
      Pid Command        Inuse      Pin     Pgsp  Virtual   64-bit    Mthrd
@@ -388,8 +388,8 @@ Inuse * 4096 = amount of memory being used by this process
    19110 smbd            8404     1906      181     4862        N        N
 
    Total memory used:  841,592,832 bytes
-
    
-
    
+
    +

    Samba consists on three core programs: nmbd, smbd, winbindd. nmbd is the name server message daemon, smbd is the server message daemon, winbindd is the daemon that @@ -404,18 +404,18 @@ connection made. That is why you are seeing so many of them, one (1) per client

    winbindd will run as one or two daemons, depending on whether or not it is being run in "split mode" (in which case there will be two instances). -

    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Your loopback device isn't working correctly. Make sure it's running.

    Chapter3.Fast Start for the Impatient

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    +

    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Your loopback device isn't working correctly. Make sure it's running.

    Chapter3.Fast Start for the Impatient

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    This chapter did not make it into this release. It is planned for the published release of this document. -

    Server Configuration Basics

    First Steps in Server Configuration

    +

    Server Configuration Basics

    First Steps in Server Configuration

    Samba can operate in various modes within SMB networks. This HOWTO section contains information on configuring samba to function as the type of server your network requires. Please read this section carefully. -

    Table of Contents

    4. Server Types and Security Modes
    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server
    5. Domain Control
    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." +

    Table of Contents

    4. Server Types and Security Modes
    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server
    5. Domain Control
    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not -exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
    6. Backup Domain Control
    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?
    7. Domain Membership
    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails
    8. Stand-Alone Servers
    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors
    9. MS Windows Network Configuration Guide
    Note

    Chapter4.Server Types and Security Modes

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server

    +existing set.." when creating a machine trust account.

    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not +exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
    6. Backup Domain Control
    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?
    7. Domain Membership
    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails
    8. Stand-Alone Servers
    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors
    9. MS Windows Network Configuration Guide
    Note

    Chapter4.Server Types and Security Modes

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server

    This chapter provides information regarding the types of server that Samba may be configured to be. A Microsoft network administrator who wishes to migrate to or to use Samba will want to know what, within a Samba context, terms familiar to MS Windows @@ -428,7 +428,7 @@ and how these relate to MS Windows servers and clients. Firstly we should recognise the question so often asked, "Why would I want to use Samba?" So, in those chapters where the answer may be important you will see a section that highlights features and benefits. These may be for or against Samba. -

    Features and Benefits

    +

    Features and Benefits

    Two men were walking down a dusty road, when one suddenly kicked up a small red stone. It hurt his toe and lodged in his sandal. He took the stone out and cursed it with a passion and fury fitting his anguish. The other looked at the stone and said, that is a garnet - I @@ -464,13 +464,13 @@ So now, what are the benefits of features mentioned in this chapter? greater flexibility than MS Windows NT4 and in many cases a significantly higher utility than Active Directory domains with MS Windows 200x. -

    Server Types

    Administrators of Microsoft networks often refer to three +

    Server Types

    Administrators of Microsoft networks often refer to three different type of servers:

    • Domain Controller

      Primary Domain Controller
      Backup Domain Controller
      ADS Domain Controller

    • Domain Member Server

      Active Directory Member Server
      NT4 Style Domain Member Server

    • Stand Alone Server

    The chapters covering Domain Control, Backup Domain Control and Domain Membership provide pertinent information regarding Samba-3 configuration for each of these server roles. The reader is strongly encouraged to become intimately familiar with the information presented. -

    Samba Security Modes

    +

    Samba Security Modes

    In this section the function and purpose of Samba's security modes are described. An accurate understanding of how Samba implements each security mode as well as how to configure MS Windows clients for each mode will significantly @@ -494,7 +494,7 @@ the way the client then tries to authenticate itself. It does not directly affec but it fits in with the client/server approach of SMB. In SMB everything is initiated and controlled by the client, and the server can only tell the client what is available and whether an action is allowed. -

    User Level Security

    +

    User Level Security

    We will describe user level security first, as it's simpler. In user level security, the client will send a session setup command directly after the protocol negotiation. @@ -512,13 +512,13 @@ It is also possible for a client to send multiple ses requests. When the server responds, it gives the client a uid to use as an authentication tag for that username/password. The client can maintain multiple authentication contexts in this way (WinDD is an example of an application that does this). -

    Example Configuration

    +

    Example Configuration

    The smb.conf parameter that sets User Level Security is: 

     	security = user

    This is the default setting since samba-2.2.x. -

    Share Level Security

    +

    Share Level Security

    Ok, now for share level security. In share level security, the client authenticates itself separately for each share. It will send a password along with each tree connection (share mount). It does not explicitly send a @@ -541,18 +541,18 @@ of the share they try to connect to (useful for home directories) and any users listed in the user = smb.conf line. The password is then checked in turn against these possible usernames. If a match is found then the client is authenticated as that user. -

    Example Configuration

    +

    Example Configuration

    The smb.conf parameter that sets Share Level Security is: 

     	security = share

    Please note that there are reports that recent MS Windows clients do not like to work with share mode security servers. You are strongly discouraged from using share level security. -

    Domain Security Mode (User Level Security)

    +

    Domain Security Mode (User Level Security)

    When Samba is operating in security = domain mode, the Samba server has a domain security trust account (a machine account) and will cause all authentication requests to be passed through to the domain controllers. -

    Example Configuration

    +

    Example Configuration

    Samba as a Domain Member Server

    This method involves addition of the following parameters in the smb.conf file: @@ -564,24 +564,24 @@ In order for this method to work, the Samba server needs to join the MS Windows security domain. This is done as follows:

    1. On the MS Windows NT domain controller, using the Server Manager, add a machine account for the Samba server. -

    2. Next, on the Unix/Linux system execute:

      root# smbpasswd -j DOMAIN_NAME -r PDC_NAME (samba-2.x)

      root# net join -U administrator%password (samba-3)

    Note

    +

  • Next, on the Unix/Linux system execute:

    root# smbpasswd -j DOMAIN_NAME -r PDC_NAME (samba-2.x)

    root# net join -U administrator%password (samba-3)

    • Note

    As of Samba-2.2.4 the Samba 2.2.x series can auto-join a Windows NT4 style Domain just by executing: -

    +
     root# smbpasswd -j DOMAIN_NAME -r PDC_NAME -U Administrator%password
-
    
+
    As of Samba-3 the same can be done by executing: -

    +
     root# net join -U Administrator%password
-
    
+
    It is not necessary with Samba-3 to specify the DOMAIN_NAME or the PDC_NAME as it figures this out from the smb.conf file settings. -

    +

    Use of this mode of authentication does require there to be a standard Unix account -for each user in order to assign a uid once the account has been authenticated by +for each user in order to assign a UID once the account has been authenticated by the remote Windows DC. This account can be blocked to prevent logons by clients other than -MS Windows through things such as setting an invalid shell in the +MS Windows through means such as setting an invalid shell in the /etc/passwd entry.

    An alternative to assigning UIDs to Windows users on a Samba member server is @@ -590,7 +590,7 @@ in this HOWTO collection.

    For more information of being a domain member, see the Domain Member section of this Howto. -

    ADS Security Mode (User Level Security)

    +

    ADS Security Mode (User Level Security)

    Both Samba 2.2 and 3.0 can join an Active Directory domain. This is possible even if the domain is run in native mode. Active Directory in native mode perfectly allows NT4-style domain members, contrary to @@ -604,7 +604,7 @@ authentication protocols. All your machines are running Windows 2000 and above and all use full Kerberos. In this case Samba as a NT4-style domain would still require NT-compatible authentication data. Samba in AD-member mode can accept Kerberos. -

    Example Configuration

    +
    Example Configuration
     	realm = your.kerberos.REALM
 	security = ADS
 
    
@@ -614,7 +614,7 @@ AD-member mode can accept Kerberos.

    Please refer to the Domain Membership and Active Directory Membership sections for more information regarding this configuration option. -

    Server Security (User Level Security)

    +

    Server Security (User Level Security)

    Server security mode is a left over from the time when Samba was not capable of acting as a domain member server. It is highly recommended NOT to use this feature. Server security mode has many draw backs. The draw backs include: @@ -646,7 +646,7 @@ lookups because the choice of the target authentication server is arbitrary and be determined from a domain name. In essence, a Samba server that is in server security mode is operating in what used to be known as workgroup mode. -

    Example Configuration

    +

    Example Configuration

    Using MS Windows NT as an authentication server

    This method involves the additions of the following parameters in the smb.conf file: @@ -655,8 +655,8 @@ This method involves the additions of the following parameters in the

    -There are two ways of identifying whether or not a username and password pair was valid -or not. One uses the reply information provided as part of the authentication messaging +There are two ways of identifying whether or not a username and password pair was valid. +One uses the reply information provided as part of the authentication messaging process, the other uses just an error code.

    The down-side of this mode of configuration is the fact that for security reasons Samba @@ -667,7 +667,7 @@ certain number of failed authentication attempts this will result in user lockou

    Use of this mode of authentication does require there to be a standard Unix account for the user, though this account can be blocked to prevent logons by non-SMB/CIFS clients. -

    Seamless Windows Network Integration

    +

    Seamless Windows Network Integration

    MS Windows clients may use encrypted passwords as part of a challenge/response authentication model (a.k.a. NTLMv1 and NTLMv2) or alone, or clear text strings for simple password based authentication. It should be realized that with the SMB protocol, @@ -710,23 +710,23 @@ when using clear text authentication.

    By default Samba will lower case the username before attempting to lookup the user in the database of local system accounts. Because UNIX usernames conventionally -only contain lower case character, the username level parameter +only contain lower-case characters, the username level parameter is rarely needed.

    -However, passwords on UNIX systems often make use of mixed case characters. +However, passwords on UNIX systems often make use of mixed-case characters. This means that in order for a user on a Windows 9x client to connect to a Samba server using clear text authentication, the password level -must be set to the maximum number of upper case letter which could -appear is a password. Note that the server OS uses the traditional DES version +must be set to the maximum number of upper case letters which could +appear in a password. Note that the server OS uses the traditional DES version of crypt(), a password level of 8 will result in case insensitive passwords as seen from Windows users. This will also result in longer login times as Samba has to compute the permutations of the password string and try them one by one until a match is located (or all combinations fail).

    -The best option to adopt is to enable support for encrypted passwords where ever +The best option to adopt is to enable support for encrypted passwords wherever Samba is used. Most attempts to apply the registry change to re-enable plain text passwords will eventually lead to user complaints and unhappiness. -

    Common Errors

    +

    Common Errors

    We all make mistakes. It is Ok to make mistakes, so long as they are made in the right places and at the right time. A mistake that causes lost productivity is seldom tolerated. A mistake made in a developmental test lab is expected. @@ -736,19 +736,19 @@ on the Samba mailing lists. Many of these are avoidable by doing you homework be a Samba implementation. Some are the result of misunderstanding of the English language. The English language has many turns of phrase that are potentially vague and may be highly confusing to those for whom English is not their native tongue. -

    What makes Samba a SERVER?

    +

    What makes Samba a SERVER?

    To some the nature of the Samba security mode is very obvious, but entirely wrong all the same. It is assumed that security = server means that Samba will act as a server. Not so! See above - this setting means that Samba will try to use another SMB server as its source of user authentication alone. -

    What makes Samba a Domain Controller?

    +

    What makes Samba a Domain Controller?

    The smb.conf parameter security = domain does NOT really make Samba behave as a Domain Controller! This setting means we want Samba to be a domain member! -

    What makes Samba a Domain Member?

    +

    What makes Samba a Domain Member?

    Guess! So many others do. But whatever you do, do NOT think that security = user makes Samba act as a domain member. Read the manufacturers manual before the warranty expires! See the Domain Member section of this Howto for more information. -

    Constantly Losing Connections to Password Server

    +

    Constantly Losing Connections to Password Server

    Why does server_validate() simply give up rather than re-establishing its connection to the password server? Though I am not fluent in the SMB protocol, perhaps the cluster server process passes along to its client workstation the session key it receives from the password @@ -757,11 +757,11 @@ connection, whose session key would be different. So server_validate() must giv

    Indeed. That's why security = server is at best a nasty hack. Please use security = domain. security = server mode is also known as pass-through authentication. -

    Chapter5.Domain Control

    John H. Terpstra

    Samba Team

    Gerald (Jerry) Carter

    Samba Team

    David Bannon

    Samba Team

    Table of Contents

    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." +

    Chapter5.Domain Control

    John H. Terpstra

    Samba Team

    Gerald (Jerry) Carter

    Samba Team

    David Bannon

    Samba Team

    Table of Contents

    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not -exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    The Essence of Learning: +existing set.." when creating a machine trust account.

    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not +exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    The Essence of Learning: There are many who approach MS Windows networking with incredible misconceptions. That's OK, because it gives the rest of us plenty of opportunity to be of assistance. Those who really want help would be well advised to become familiar with information @@ -791,7 +791,7 @@ burden on an organisation. Where is the right place to make mistakes? Only out of harm's way! If you are going to make mistakes, then please do this on a test network, away from users and in such a way as to not inflict pain on others. Do your learning on a test network. -

    Features and Benefits

    +

    Features and Benefits

    What is the key benefit of Microsoft Domain security?

    In a word, Single Sign On, or SSO for short. To many, this is the holy @@ -889,11 +889,11 @@ per user settings for many parameters, over-riding global settings given in the Thus, with samba-3 it is possible to have a default system configuration for profiles, and on a per user basis to over-ride this for those users who should not be subject to the default configuration. -

    Basics of Domain Control

    +

    Basics of Domain Control

    Over the years, public perceptions of what Domain Control really is has taken on an almost mystical nature. Before we branch into a brief overview of Domain Control, there are three basic types of domain controllers: -

    Domain Controller Types

    • Primary Domain Controller

    • Backup Domain Controller

    • ADS Domain Controller

    +

    Domain Controller Types

    • Primary Domain Controller

    • Backup Domain Controller

    • ADS Domain Controller

    The Primary Domain Controller or PDC plays an important role in the MS Windows NT4 and Windows 200x Domain Control architecture, but not in the manner that so many expect. There is folk lore that dictates that because of it's role in the MS Windows @@ -945,7 +945,7 @@ At this time any appearance that Samba-3 is capable of acting as an This functionality should not be used until the Samba-Team offers formal support for it. At such a time, the documentation will be revised to duly reflect all configuration and management requirements. -

    Preparing for Domain Control

    +

    Preparing for Domain Control

    There are two ways that MS Windows machines may interact with each other, with other servers, and with Domain Controllers: Either as Stand-Alone systems, more commonly called Workgroup members, or as full participants in a security system, @@ -1006,7 +1006,7 @@ domain/workgroup. Local master browsers in the same domain/workgroup on broadcas then ask for a complete copy of the browse list for the whole wide area network. Browser clients will then contact their local master browser, and will receive the domain-wide browse list, instead of just the list for their broadcast-isolated subnet. -

    Domain Control - Example Configuration

    +

    Domain Control - Example Configuration

    The first step in creating a working Samba PDC is to understand the parameters necessary in smb.conf. Here we attempt to explain the parameters that are covered in the smb.conf man page. @@ -1060,20 +1060,20 @@ Here is an example smb.conf for acting as a PDC: read only = no create mask = 0600 directory mask = 0700 -

    Note

    +

    Note

    The above parameters make for a full set of parameters that may define the server's mode of operation. The following parameters are the essentials alone: -

    +
     	workgroup = NARNIA
 	domain logons = Yes
 	domain master = Yes
 	security = User
-
    
+
    The additional parameters shown in the longer listing above just makes for a more complete environment. -

    +

    There are a couple of points to emphasize in the above configuration.

    • Encrypted passwords must be enabled. For more details on how @@ -1086,22 +1086,22 @@ There are a couple of points to emphasize in the above configuration. client to locate the server as a DC. Please refer to the various Network Browsing documentation included with this distribution for details. -

    Samba ADS Domain Control

    +

    Samba ADS Domain Control

    Samba-3 is not and can not act as an Active Directory Server. It can not truly function as an Active Directory Primary Domain Controller. The protocols for some of the functionality the Active Directory Domain Controllers is have been partially implemented on an experimental only basis. Please do NOT expect Samba-3 to support these protocols - nor should you depend on any such functionality either now or in the future. The Samba-Team may well remove such experimental features or may change their behaviour. -

    Domain and Network Logon Configuration

    +

    Domain and Network Logon Configuration

    The subject of Network or Domain Logons is discussed here because it rightly forms an integral part of the essential functionality that is provided by a Domain Controller. -

    Domain Network Logon Service

    +

    Domain Network Logon Service

    All Domain Controllers must run the netlogon service (domain logons in Samba). One Domain Controller must be configured with domain master = Yes (the Primary Domain Controller); on ALL Backup Domain Controllers domain master = No must be set. -

    Example Configuration

    +
    Example Configuration
     	[global]
 		domain logons = Yes
 		domain master = (Yes on PDC, No on BDCs)
@@ -1111,7 +1111,7 @@ must be set.
 		path = /var/lib/samba/netlogon
 		guest ok = Yes
 		browseable = No
-
    The Special Case of MS Windows XP Home Edition
    Note
    
+

    The Special Case of MS Windows XP Home Edition

    Note

    MS Windows XP Home Edition does not have the ability to join any type of Domain security facility. Unlike, MS Windows 9x / Me, MS Windows XP Home Edition also completely lacks the ability to log onto a network. @@ -1123,7 +1123,7 @@ MS Windows XP Professional.

    Now that this has been said, please do NOT ask the mailing list, or email any of the Samba-Team members with your questions asking how to make this work. It can't be done. -

    The Special Case of Windows 9x / Me

    +

    The Special Case of Windows 9x / Me

    A domain and a workgroup are exactly the same thing in terms of network browsing. The difference is that a distributable authentication database is associated with a domain, for secure login access to a @@ -1203,7 +1203,7 @@ The main difference between a PDC and a Windows 9x logon server configuration is

    A Samba PDC will act as a Windows 9x logon server; after all, it does provide the network logon services that MS Windows 9x / Me expect to find. -

    Security Mode and Master Browsers

    +

    Security Mode and Master Browsers

    There are a few comments to make in order to tie up some loose ends. There has been much debate over the issue of whether or not it is ok to configure Samba as a Domain Controller in security @@ -1237,7 +1237,7 @@ Configuring a Samba box as a DC for a domain that already by definition has a PDC is asking for trouble. Therefore, you should always configure the Samba DC to be the DMB for its domain and set security = user. This is the only officially supported mode of operation. -

    Common Problems and Errors

    I cannot include a '$' in a machine name

    +

    Common Problems and Errors

    I cannot include a '$' in a machine name

    A 'machine account', (typically) stored in /etc/passwd, takes the form of the machine name with a '$' appended. FreeBSD (and other BSD systems?) won't create a user with a '$' in their name. @@ -1245,7 +1245,7 @@ systems?) won't create a user with a '$' in their name. The problem is only in the program used to make the entry. Once made, it works perfectly. Create a user without the '$'. Then use vipw to edit the entry, adding the '$'. Or create the whole entry with vipw if you like; make sure you use a unique User ID! -

    I get told "You already have a connection to the Domain...." +

    I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an existing set.." when creating a machine trust account.

    This happens if you try to create a machine trust account from the @@ -1259,7 +1259,7 @@ Further, if the machine is already a 'member of a workgroup' that is the same name as the domain you are joining (bad idea) you will get this message. Change the workgroup name to something else, it does not matter what, reboot, and try again. -

    The system can not log you on (C000019B)....

    I joined the domain successfully but after upgrading +

    The system can not log you on (C000019B)....

    I joined the domain successfully but after upgrading to a newer version of the Samba code I get the message, The system can not log you on (C000019B), Please try again or consult your system administrator when attempting to logon. @@ -1270,14 +1270,14 @@ the domain name and/or the server name (NetBIOS name) is changed. The only way to correct the problem is to restore the original domain SID or remove the domain client from the domain and rejoin. The domain SID may be reset using either the net or rpcclient utilities. -

    +

    The reset or change the domain SID you can use the net command as follows: -

    +
     root# net getlocalsid 'OLDNAME'
 root# net setlocalsid 'SID'
-
    
-

    The machine trust account for this computer either does not + +

    The machine trust account for this computer either does not exist or is not accessible.

    When I try to join the domain I get the message The machine account for this computer either does not exist or is not accessible. What's @@ -1300,17 +1300,17 @@ Some people have also reported that inconsistent subnet masks between the Samba server and the NT client can cause this problem. Make sure that these are consistent for both client and server. -

    When I attempt to login to a Samba Domain from a NT4/W2K workstation, +

    When I attempt to login to a Samba Domain from a NT4/W2K workstation, I get a message about my account being disabled.

    Enable the user accounts with smbpasswd -e username , this is normally done as an account is created. -

    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    +

    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    A domain controller has to announce on the network who it is. This usually takes a while. -

    Chapter6.Backup Domain Control

    John H. Terpstra

    Samba Team

    Volker Lendecke

    Samba Team

    Table of Contents

    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?

    +

    Chapter6.Backup Domain Control

    John H. Terpstra

    Samba Team

    Volker Lendecke

    Samba Team

    Table of Contents

    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?

    Before you continue reading in this section, please make sure that you are comfortable with configuring a Samba Domain Controller as described in the Domain Control chapter. -

    Features And Benefits

    +

    Features And Benefits

    This is one of the most difficult chapters to summarise. It does not matter what we say here for someone will still draw conclusions and / or approach the Samba-Team with expectations that are either not yet capable of being delivered, or that can be achieved far more @@ -1371,7 +1371,7 @@ lets consider each possible option and look at the pro's and con's for each theo Arguments Against: All machine trust accounts and user accounts will be locally maintained. Domain users will NOT be able to roam from office to office. This is a broken and flawed solution. Do NOT do this. -

    Essential Background Information

    +

    Essential Background Information

    A Domain Controller is a machine that is able to answer logon requests from network workstations. Microsoft LanManager and IBM LanServer were two early products that provided this capability. The technology has become known as the LanMan Netlogon service. @@ -1381,7 +1381,7 @@ and with it a new form of the network logon service that has extended functional This service became known as the NT NetLogon Service. The nature of this service has changed with the evolution of MS Windows NT and today provides a very complex array of services that are implemented over a complex spectrum of technologies. -

    MS Windows NT4 Style Domain Control

    +

    MS Windows NT4 Style Domain Control

    Whenever a user logs into a Windows NT4 / 200x / XP Professional Workstation, the workstation connects to a Domain Controller (authentication server) to validate the username and password that the user entered are valid. If the information entered @@ -1439,7 +1439,7 @@ one of the BDCs can be promoted to a PDC. If this happens while the original PDC line then it is automatically demoted to a BDC. This is an important aspect of Domain Controller management. The tool that is used to affect a promotion or a demotion is the Server Manager for Domains. -

    Example PDC Configuration

    +

    Example PDC Configuration

    Since version 2.2 Samba officially supports domain logons for all current Windows Clients, including Windows NT4, 2003 and XP Professional. For samba to be enabled as a PDC some parameters in the [global]-section of the smb.conf have to be set: @@ -1451,20 +1451,20 @@ parameters in the [global]-section of the [homes] and a [netlogon] share also need to be set along with settings for the profile path, the users home drive, etc.. This will not be covered in this chapter, for more information please refer to the chapter on Domain Control. -

    Active Directory Domain Control

    +

    Active Directory Domain Control

    As of the release of MS Windows 2000 and Active Directory, this information is now stored in a directory that can be replicated and for which partial or full administrative control can be delegated. Samba-3 is NOT able to be a Domain Controller within an Active Directory tree, and it can not be an Active Directory server. This means that Samba-3 also can NOT act as a Backup Domain Controller to an Active Directory Domain Controller. -

    What qualifies a Domain Controller on the network?

    +

    What qualifies a Domain Controller on the network?

    Every machine that is a Domain Controller for the domain SAMBA has to register the NetBIOS group name SAMBA<#1c> with the WINS server and/or by broadcast on the local network. The PDC also registers the unique NetBIOS name SAMBA<#1b> with the WINS server. The name type <#1b> name is normally reserved for the Domain Master Browser, a role that has nothing to do with anything related to authentication, but the Microsoft Domain implementation requires the domain master browser to be on the same machine as the PDC. -

    How does a Workstation find its domain controller?

    +

    How does a Workstation find its domain controller?

    An MS Windows NT4 / 200x / XP Professional workstation in the domain SAMBA that wants a local user to be authenticated has to find the domain controller for SAMBA. It does this by doing a NetBIOS name query for the group name SAMBA<#1c>. It assumes that each @@ -1472,7 +1472,7 @@ of the machines it gets back from the queries is a domain controller and can ans requests. To not open security holes both the workstation and the selected domain controller authenticate each other. After that the workstation sends the user's credentials (name and password) to the local Domain Controller, for validation. -

    Backup Domain Controller Configuration

    +

    Backup Domain Controller Configuration

    Several things have to be done:

    • The domain SID has to be the same on the PDC and the BDC. This used to @@ -1507,7 +1507,7 @@ Several things have to be done: BDC. This can be done manually whenever login scripts are changed, or it can be done automatically together with the smbpasswd synchronization. -

    Example Configuration

    +

    Example Configuration

    Finally, the BDC has to be found by the workstations. This can be done by setting: 

     	workgroup = SAMBA
@@ -1520,10 +1520,10 @@ problem as the name SAMBA<#1c> is a NetBIOS group name that is meant to
 be registered by more than one machine. The parameter 'domain master =
 no' forces the BDC not to register SAMBA<#1b> which as a unique NetBIOS
 name is reserved for the Primary Domain Controller.
-

    Common Errors

    +

    Common Errors

    As this is a rather new area for Samba there are not many examples that we may refer to. Keep watching for updates to this section. -

    Machine Accounts keep expiring, what can I do?

    +

    Machine Accounts keep expiring, what can I do?

    This problem will occur when occur when the passdb (SAM) files are copied from a central server but the local Backup Domain Controllers. Local machine trust account password updates are not copied back to the central server. The newer machine account password is then over @@ -1534,7 +1534,7 @@ to proceed and the account expiry error will be reported.

    The solution: use a more robust passdb backend, such as the ldapsam backend, setting up an slave LDAP server for each BDC, and a master LDAP server for the PDC. -

    Can Samba be a Backup Domain Controller to an NT4 PDC?

    +

    Can Samba be a Backup Domain Controller to an NT4 PDC?

    With version 2.2, no. The native NT4 SAM replication protocols have not yet been fully implemented. The Samba Team is working on understanding and implementing the protocols, but this work has not been finished for version 2.2. @@ -1545,7 +1545,7 @@ mechanism has progressed, and some form of NT4 BDC support is expected soon. Can I get the benefits of a BDC with Samba? Yes. The main reason for implementing a BDC is availability. If the PDC is a Samba machine, a second Samba machine can be set up to service logon requests whenever the PDC is down. -

    How do I replicate the smbpasswd file?

    +

    How do I replicate the smbpasswd file?

    Replication of the smbpasswd file is sensitive. It has to be done whenever changes to the SAM are made. Every user's password change is done in the smbpasswd file and has to be replicated to the BDC. So replicating the smbpasswd file very often is necessary. @@ -1559,12 +1559,12 @@ to type a password. As said a few times before, use of this method is broken and flawed. Machine trust accounts will go out of sync, resulting in a very broken domain. This method is not recommended. Try using LDAP instead. -

    Can I do this all with LDAP?

    +

    Can I do this all with LDAP?

    The simple answer is YES. Samba's pdb_ldap code supports binding to a replica LDAP server, and will also follow referrals and rebind to the master if it ever needs to make a modification to the database. (Normally BDCs are read only, so this will not occur often). -

    Chapter7.Domain Membership

    John H. Terpstra

    Samba Team

    Jeremy Allison

    Samba Team

    Gerald (Jerry) Carter

    Samba Team

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Table of Contents

    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails

    +

    Chapter7.Domain Membership

    John H. Terpstra

    Samba Team

    Jeremy Allison

    Samba Team

    Gerald (Jerry) Carter

    Samba Team

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Table of Contents

    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails

    Domain Membership is a subject of vital concern, Samba must be able to participate as a member server in a Microsoft Domain security context, and Samba must be capable of providing Domain machine member trust accounts, @@ -1577,7 +1577,7 @@ within the current MS Windows networking world and particularly in the Unix/Linux networking and administration world, a considerable level of mis-information, incorrect understanding, and a lack of knowledge. Hopefully this chapter will fill the voids. -

    Features and Benefits

    +

    Features and Benefits

    MS Windows workstations and servers that want to participate in domain security need to be made Domain members. Participating in Domain security is often called @@ -1614,7 +1614,7 @@ Domain membership has many advantages: client or server, other than the central Domain database (either NT4/Samba SAM style Domain, NT4 Domain that is back ended with an LDAP directory, or via an Active Directory infrastructure) -

    MS Windows Workstation/Server Machine Trust Accounts

    +

    MS Windows Workstation/Server Machine Trust Accounts

    A machine trust account is an account that is used to authenticate a client machine (rather than a user) to the Domain Controller server. In Windows terminology, @@ -1633,11 +1633,11 @@ shared secret with the domain controller. A Windows NT4 PDC stores each machine trust account in the Windows Registry. The introduction of MS Windows 2000 saw the introduction of Active Directory, the new repository for machine trust accounts. -

    +

    A Samba PDC, however, stores each machine trust account in two parts, as follows: -

    • +

      • A Domain Security Account (stored in the passdb backend that has been configured in the smb.conf file. The precise nature of the account information that is @@ -1657,8 +1657,8 @@ as follows: /etc/passwd. Work is in progress to allow a simplified mode of operation that does not require Unix user accounts, but this may not be a feature of the early releases of Samba-3. -

      -

      +

    +

    There are three ways to create machine trust accounts:

    • Manual creation from the Unix/Linux command line. Here, both the Samba and @@ -1673,7 +1673,7 @@ There are three ways to create machine trust accounts: created by Samba at the time the client is joined to the domain. (For security, this is the recommended method.) The corresponding Unix account may be created automatically or manually. -

    Manual Creation of Machine Trust Accounts

    +

    Manual Creation of Machine Trust Accounts

    The first step in manually creating a machine trust account is to manually create the corresponding Unix account in /etc/passwd. This can be done using vipw or another 'add user' command @@ -1705,11 +1705,11 @@ Now that the corresponding Unix account has been created, the next step is to cr the Samba account for the client containing the well-known initial machine trust account password. This can be done using the smbpasswd(8) command as shown here: -

    -

    +
    
+
     root# smbpasswd -a -m machine_name
-
    
-
    
+
    +

    where machine_name is the machine's NetBIOS name. The RID of the new machine account is generated from the UID of the corresponding Unix account. @@ -1722,7 +1722,7 @@ the corresponding Unix account. your domain using a machine with the same NetBIOS name. A PDC inherently trusts members of the domain and will serve out a large degree of user information to such clients. You have been warned! -

    Using NT4 Server Manager to Add Machine Accounts to the Domain

    +

    Using NT4 Server Manager to Add Machine Accounts to the Domain

    If the machine from which you are trying to manage the domain is an MS Windows NT4 workstation then the tool of choice is the package called SRVTOOLS.EXE. @@ -1753,7 +1753,7 @@ Launch the srvmgr.exe (Server Manager for Domains) and fo Add NT Workstation of Server, then enter the machine name in the field provided, then click the Add button. -

    "On-the-Fly" Creation of Machine Trust Accounts

    +

    "On-the-Fly" Creation of Machine Trust Accounts

    The second (and recommended) way of creating machine trust accounts is simply to allow the Samba server to create them as needed when the client is joined to the domain. @@ -1768,10 +1768,10 @@ Below is an example for a RedHat Linux system. [global] # <...remainder of parameters...> add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u -

    Making an MS Windows Workstation or Server a Domain Member

    +

    Making an MS Windows Workstation or Server a Domain Member

    The procedure for making an MS Windows workstation of server a member of the domain varies with the version of Windows: -

    Windows 200x XP Professional

    +

    Windows 200x XP Professional

    When the user elects to make the client a domain member, Windows 200x prompts for an account and password that has privileges to create machine accounts in the domain. A Samba administrative account (i.e., a Samba account that has root privileges on the @@ -1791,7 +1791,7 @@ with the version of Windows: encryption key for setting the password of the machine trust account. The machine trust account will be created on-the-fly, or updated if it already exists. -

    Windows NT4

    +

    Windows NT4

    If the machine trust account was created manually, on the Identification Changes menu enter the domain name, but do not check the box Create a Computer Account in the Domain. @@ -1804,7 +1804,7 @@ with the version of Windows: Domain. In this case, joining the domain proceeds as above for Windows 2000 (i.e., you must supply a Samba administrative account when prompted). -

    Samba

    Joining a Samba client to a domain is documented in +

    Samba

    Joining a Samba client to a domain is documented in the Domain Member Server section of this chapter chapter.

    Domain Member Server

    This mode of server operation involves the Samba machine being made a member @@ -1826,28 +1826,28 @@ for more information regarding how to create a domain machine account for a domain member server as well as for information regarding how to enable the Samba domain member machine to join the domain and to be fully trusted by it. -

    Joining an NT4 type Domain with Samba-3

    -

    Table7.1.Assumptions

    NetBIOS name:SERV1
    Win2K/NT domain name:DOM
    Domain's PDC NetBIOS name:DOMPDC
    Domain's BDC NetBIOS names:DOMBDC1 and DOMBDC2

    -

    +

    Joining an NT4 type Domain with Samba-3

    +

    Table7.1.Assumptions

    NetBIOS name:SERV1
    Win2K/NT domain name:DOM
    Domain's PDC NetBIOS name:DOMPDC
    Domain's BDC NetBIOS names:DOMBDC1 and DOMBDC2
    +

    First, you must edit your smb.conf file to tell Samba it should now use domain security.

    Change (or add) your security line in the [global] section of your smb.conf to read: -

    -

    +
    
+
     security = domain
-
    
-
    
+
    +

    Next change the workgroup line in the [global] section to read: -

    -

    +
    
+
     workgroup = DOM
-
    
-
    
+
    +

    as this is the name of the domain we are joining.

    You must also have the parameter @@ -1857,11 +1857,11 @@ You must also have the parameter password server line in the [global] section to read: -

    -

    +
    
+
     password server = DOMPDC DOMBDC1 DOMBDC2
-
    
-
    
+
    +

    These are the primary and backup domain controllers Samba will attempt to contact in order to authenticate users. Samba will try to contact each of these servers in order, so you may want to @@ -1871,21 +1871,21 @@ among domain controllers. Alternatively, if you want smbd to automatically determine the list of Domain controllers to use for authentication, you may set this line to be: -

    -

    +
    
+
     password server = *
-
    
-
    
+
    +

    This method allows Samba to use exactly the same mechanism that NT does. This method either broadcasts or uses a WINS database in order to find domain controllers to authenticate against.

    In order to actually join the domain, you must run this command: -

    -

    +
    
+
     root# net join -S DOMPDC -UAdministrator%password
-
    
-
    
+
    +

    If the -S DOMPDC argument is not given then the domain name will be obtained from smb.conf.

    @@ -1920,7 +1920,7 @@ as a shadow password file.

    Finally, restart your Samba daemons and get ready for clients to begin using domain security! -

    Why is this better than security = server?

    +

    Why is this better than security = server?

    Currently, domain security in Samba doesn't free you from having to create local Unix users to represent the users attaching to your server. This means that if domain user DOM\fred @@ -1964,27 +1964,30 @@ the NIS/NT Samba.

    Samba ADS Domain Membership

    This is a rough guide to setting up Samba 3.0 with Kerberos authentication against a Windows2000 KDC. A familiarity with Kerberos is assumed. -

    Setup your smb.conf

    +

    Setup your smb.conf

    You must use at least the following 3 options in smb.conf: 

     	realm = your.kerberos.REALM
 	security = ADS
 	encrypt passwords = yes
-

    + In case samba can't figure out your ads server using your realm name, use the ads server option in smb.conf: -

    +
     	ads server = your.kerberos.server
-
    
-
    Note
    
+
    +

    Note

    You do not need a smbpasswd file, and older clients will be authenticated as if security = domain, although it won't do any harm and allows you to have local users not in the domain. It is expected that the above required options will change soon when active directory integration will get better. -

    Setup your /etc/krb5.conf

    +

    Setup your /etc/krb5.conf

    The minimal configuration for krb5.conf is: 

    +        [libdefaults]
+            default_realm = YOUR.KERBEROS.REALM
+
 	[realms]
 	    YOUR.KERBEROS.REALM = {
 		kdc = your.kerberos.server
@@ -2017,20 +2020,20 @@ straight to Test wi
 Creating a computer account 
 and testing your servers
 is only needed if you want Kerberos support for smbd and winbindd.
-

    Create the computer account

    +

    Create the computer account

    As a user that has write permission on the Samba private directory (usually root) run: -

    +
     	root# net join -U Administrator%password
-
    
-
    Possible errors
    
-
    ADS support not compiled in
    Samba must be reconfigured (remove config.cache) and recompiled
+
    +

    Possible errors

    +
    ADS support not compiled in

    Samba must be reconfigured (remove config.cache) and recompiled (make clean all install) after the Kerberos libs and headers are installed.

    net join prompts for user name

    You need to login to the domain using kinit USERNAME@REALM. USERNAME must be a user who has rights to add a machine - to the domain.

    -

    Test your server setup

    + to the domain.

    +

    Test your server setup

    If the join was successful, you will see a new computer account with the NetBIOS name of your Samba server in Active Directory (in the "Computers" folder under Users and Computers. @@ -2043,13 +2046,13 @@ server? Does it have an encoding type of DES-CBC-MD5 ? On your Samba server try to login to a Win2000 server or your Samba server using smbclient and Kerberos. Use smbclient as usual, but specify the -k option to choose Kerberos authentication. -

    Notes

    +

    Notes

    You must change administrator password at least once after DC install, to create the right encoding types

    W2k doesn't seem to create the _kerberos._udp and _ldap._tcp in their defaults DNS setup. Maybe fixed in service packs? -

    Common Errors

    +

    Common Errors

    In the process of adding / deleting / re-adding domain member machine accounts there are many traps for the unwary player and there are many “little” things that can go wrong. It is particularly interesting how often subscribers on the samba mailing list have concluded @@ -2057,7 +2060,7 @@ after repeated failed attempts to add a machine account that it is necessary to MS Windows on t he machine. In truth, it is seldom necessary to reinstall because of this type of problem. The real solution is often very simple, and with understanding of how MS Windows networking functions. easily overcome. -

    Can Not Add Machine Back to Domain

    +

    Can Not Add Machine Back to Domain

    Problem: A Windows workstation was reinstalled. The original domain machine account was deleted and added immediately. The workstation will not join the domain if I use the same machine name. Attempts to add the machine fail with a message that the machine already @@ -2066,7 +2069,7 @@ exists on the network - I know it doesn't. Why is this failing? The original name is still in the NetBIOS name cache and must expire after machine account deletion BEFORE adding that same name as a domain member again. The best advice is to delete the old account and then to add the machine with a new name. -

    Adding Machine to Domain Fails

    +

    Adding Machine to Domain Fails

    Adding a Windows 200x or XP Professional machine to the Samba PDC Domain fails with a message that, The machine could not be added at this time, there is a network problem. Please try again later. Why? @@ -2091,12 +2094,12 @@ Possible causes include: then make sure that the machine name you are trying to add can be added using this tool. Useradd on some systems will not allow any upper case characters nor will it allow spaces in the name. -

    Chapter8.Stand-Alone Servers

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors

    +

    Chapter8.Stand-Alone Servers

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors

    Stand-Alone servers are independent of Domain Controllers on the network. They are NOT domain members and function more like workgroup servers. In many cases a stand-alone server is configured with a minimum of security control with the intent that all data served will be readily accessible to all users. -

    Features and Benefits

    +

    Features and Benefits

    Stand-Alone servers can be as secure or as insecure as needs dictate. They can have simple or complex configurations. Above all, despite the hoopla about Domain security they remain a very common installation. @@ -2113,7 +2116,7 @@ that are queued off a single central server. Everyone needs to be able to print to the printers, there is no need to affect any access controls and no files will be served from the print server. Again a share mode stand-alone server makes a great solution. -

    Background

    +

    Background

    The term stand-alone server means that the server will provide local authentication and access control for all resources that are available from it. In general this means that there will be a @@ -2142,11 +2145,11 @@ This means that the Samba server may use the local Unix/Linux system password da local smbpasswd file, or may use an LDAP back end, or even via PAM and Winbind another CIFS/SMB server for authentication. -

    Example Configuration

    +

    Example Configuration

    The following examples are designed to inspire simplicity. It is too easy to attempt a high level of creativity and to introduce too much complexity in server and network design. -

    Reference Documentation Server

    +

    Reference Documentation Server

    Configuration of a read-only data server that EVERYONE can access is very simple. Here is the smb.conf file that will do this. Assume that all the reference documents are stored in the directory /export, that the documents are owned by a user other than @@ -2171,7 +2174,7 @@ of the local workgroup so that the machine will appear in with systems users are with. The only password backend required is the "guest" backend so as to allow default unprivileged account names to be used. Given that there is a WINS server on this network we do use it. -

    Central Print Serving

    +

    Central Print Serving

    Configuration of a simple print server is very simple if you have all the right tools on your system.

    Assumptions:

    1. @@ -2191,27 +2194,27 @@ In this example our print server will spool all incoming print jobs to /var/spool/samba until the job is ready to be submitted by Samba to the CUPS print processor. Since all incoming connections will be as the anonymous (guest) user, two things will be required: -

      Enabling Anonymous Printing

      • +

        Enabling Anonymous Printing

        • The Unix/Linux system must have a guest account. The default for this is usually the account nobody. To find the correct name to use for your version of Samba do the following: - 

          +	
           $ testparm -s -v | grep "guest account"
-	
          
+
          Then make sure that this account exists in your system password database (/etc/passwd). -

        • +

        • The directory into which Samba will spool the file must have write access for the guest account. The following commands will ensure that this directory is available for use: - 

          +	
           root# mkdir /var/spool/samba
 root# chown nobody.nobody /var/spool/samba
 root# chmod a+rwt /var/spool/samba
-	
          
-

        -

        +
        +
      +
       	# Global parameters
 	[global]
 		workgroup = MYGROUP
@@ -2229,39 +2232,39 @@ the anonymous (guest) user, two things will be required:
 		printing = cups
 		use client driver = Yes
 		browseable = No
-

      -

    Common Errors

    + +

    Common Errors

    The greatest mistake so often made is to make a network configuration too complex. It pays to use the simplest solution that will meet the needs of the moment. -

    Chapter9.MS Windows Network Configuration Guide

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    +

    Chapter9.MS Windows Network Configuration Guide

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    This chapter did not make it into this release. It is planned for the published release of this document. -

    Advanced Configuration

    Valuable Nuts and Bolts Information

    +

    Advanced Configuration

    Valuable Nuts and Bolts Information

    Samba has several features that you might want or might not want to use. The chapters in this part each cover specific Samba features. -

    Table of Contents

    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask - parameters
    Interaction with the standard Samba file attribute - mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files - I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with -rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a -different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for -CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for -application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and -native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print -Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many -Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel -Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for -cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the -Client
    Installing PostScript Driver Files manually (using -rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to -CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached -Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing -Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Management
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note

    Chapter10.Samba / MS Windows Network Browsing Guide

    John H. Terpstra

    Samba Team

    July 5, 1998

    Updated: April 21, 2003

    Table of Contents

    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"

    +

    Table of Contents

    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask + parameters
    Interaction with the standard Samba file attribute + mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files + I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with +rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a +different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for +CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for +application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and +native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print +Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many +Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel +Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for +cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the +Client
    Installing PostScript Driver Files manually (using +rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to +CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached +Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing +Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Management
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note

    Chapter10.Samba / MS Windows Network Browsing Guide

    John H. Terpstra

    Samba Team

    July 5, 1998

    Updated: April 21, 2003

    Table of Contents

    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"

    This document contains detailed information as well as a fast track guide to implementing browsing across subnets and / or across workgroups (or domains). WINS is the best tool for resolution of NetBIOS names to IP addresses. WINS is @@ -2272,7 +2275,7 @@ over TCP/IP. Samba-3 and later also supports this mode of operation. When the use of NetBIOS over TCP/IP has been disabled then the primary means for resolution of MS Windows machine names is via DNS and Active Directory. The following information assumes that your site is running NetBIOS over TCP/IP. -

    Features and Benefits

    +

    Features and Benefits

    Someone once referred to the past in terms of: They were the worst of times, they were the best of times. The more we look back, them more we long for what was and hope it never returns!. @@ -2305,7 +2308,7 @@ support for NetBIOS, in which case WINS is of no relevance. Samba-3 supports thi

    For those networks on which NetBIOS has been disabled (ie: WINS is NOT required) the use of DNS is necessary for host name resolution. -

    What is Browsing?

    +

    What is Browsing?

    To most people browsing means that they can see the MS Windows and Samba servers in the Network Neighborhood, and when the computer icon for a particular server is clicked, it opens up and shows the shares and printers available on the target server. @@ -2343,12 +2346,12 @@ called nmbd. The configuration parameters involved in For Samba, the WINS Server and WINS Support are mutually exclusive options. Those marked with an '*' are the only options that commonly MAY need to be modified. Even if not one of these parameters is set nmbd will still do it's job. -

    Discussion

    +

    Discussion

    Firstly, all MS Windows networking uses SMB (Server Message Block) based messaging. SMB messaging may be implemented with or without NetBIOS. MS Windows 200x supports NetBIOS over TCP/IP for backwards compatibility. Microsoft is intent on phasing out NetBIOS support. -

    NetBIOS over TCP/IP

    +

    NetBIOS over TCP/IP

    Samba implements NetBIOS, as does MS Windows NT / 200x / XP, by encapsulating it over TCP/IP. MS Windows products can do likewise. NetBIOS based networking uses broadcast messaging to affect browse list management. When running NetBIOS over TCP/IP, this uses UDP based messaging. @@ -2392,7 +2395,7 @@ Lastly, take note that browse lists are a collection of unreliable broadcast messages that are repeated at intervals of not more than 15 minutes. This means that it will take time to establish a browse list and it can take up to 45 minutes to stabilise, particularly across network segments. -

    TCP/IP - without NetBIOS

    +

    TCP/IP - without NetBIOS

    All TCP/IP using systems use various forms of host name resolution. The primary methods for TCP/IP hostname resolutions involves either a static file (/etc/hosts ) or DNS (the Domain Name System). DNS is the technology that makes @@ -2428,7 +2431,7 @@ consequently network services will be severely impaired. The use of Dynamic DNS is highly recommended with Active Directory, in which case the use of BIND9 is preferred for it's ability to adequately support the SRV (service) records that are needed for Active Directory. -

    DNS and Active Directory

    +

    DNS and Active Directory

    Occasionally we hear from Unix network administrators who want to use a Unix based Dynamic DNS server in place of the Microsoft DNS server. While this might be desirable to some, the MS Windows 200x DNS server is auto-configured to work with Active Directory. It is possible @@ -2450,7 +2453,7 @@ The following are some of the default service records that Active Directory requ

  • _ldap._tcp.Site.gc.ms-dcs.DomainTree

    Used by MS Windows clients to locate site configuration dependent Global Catalog server. -

    • How Browsing Functions

    +

    How Browsing Functions

    MS Windows machines register their NetBIOS names (ie: the machine name for each service type in operation) on start up. The exact method by which this name registration @@ -2505,7 +2508,7 @@ words, for cross subnet browsing to function correctly it is essential that a name to address resolution mechanism be provided. This mechanism could be via DNS, /etc/hosts, and so on. -

    Setting up WORKGROUP Browsing

    +

    Setting up WORKGROUP Browsing

    To set up cross subnet browsing on a network containing machines in up to be in a WORKGROUP, not an NT Domain you need to set up one Samba server to be the Domain Master Browser (note that this is *NOT* @@ -2523,22 +2526,22 @@ Samba server, and there must only be one domain master browser per workgroup name. To set up a Samba server as a domain master browser, set the following option in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = yes
-
    
-
    
+
    +

    The domain master browser should also preferrably be the local master browser for its own subnet. In order to achieve this set the following options in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = yes
 	local master = yes
 	preferred master = yes
 	os level = 65
-
    
-
    
+
    +

    The domain master browser may be the same machine as the WINS server, if you require.

    @@ -2550,14 +2553,14 @@ tend to get rebooted more often, so it's not such a good idea to use these). To make a Samba server a local master browser set the following options in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = no
 	local master = yes
 	preferred master = yes
 	os level = 65
-
    
-
    
+
    +

    Do not do this for more than one Samba server on each subnet, or they will war with each other over which is to be the local master browser. @@ -2572,14 +2575,14 @@ be the local master browser then you can disable Samba from becoming a local master browser by setting the following options in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = no
 	local master = no
 	preferred master = no
 	os level = 0
-
    
-

    Setting up DOMAIN Browsing

    + +

    Setting up DOMAIN Browsing

    If you are adding Samba servers to a Windows NT Domain then you must not set up a Samba server as a domain master browser. By default, a Windows NT Primary Domain Controller for a domain @@ -2593,14 +2596,14 @@ you may set up Samba servers as local master browsers as described. To make a Samba server a local master browser set the following options in the [global] section of the smb.conf file : -

    -

    +
    
+
     	domain master = no
 	local master = yes
 	preferred master = yes
 	os level = 65
-
    
-
    
+
    +

    If you wish to have a Samba server fight the election with machines on the same subnet you may set the os level parameter to lower levels. By doing this you can tune the order of machines that @@ -2615,14 +2618,14 @@ you can disable Samba from taking part in browser elections and ever becoming a local master browser by setting following options in the [global] section of the smb.conf file : -

    -

    +
    
+
             domain master = no
         local master = no
         preferred master = no
         os level = 0
-
    
-

    Forcing Samba to be the master

    + +

    Forcing Samba to be the master

    Who becomes the master browser is determined by an election process using broadcasts. Each election packet contains a number of parameters which determine what precedence (bias) a host should have in the @@ -2659,7 +2662,7 @@ attempt to become the domain master browser every 5 minutes. They will find that another Samba server is already the domain master browser and will fail. This provides automatic redundancy, should the current domain master browser fail. -

    Making Samba the domain master

    +

    Making Samba the domain master

    The domain master is responsible for collating the browse lists of multiple subnets so that browsing can occur between subnets. You can make Samba act as the domain master by setting domain master = yes @@ -2701,30 +2704,30 @@ If, however, both Samba and your clients are using a WINS server, then: resolve the NetBIOS name of that host. as long as that host has registered its NetBIOS name with the same WINS server, the user will be able to see that host. -

    Note about broadcast addresses

    +

    Note about broadcast addresses

    If your network uses a "0" based broadcast address (for example if it ends in a 0) then you will strike problems. Windows for Workgroups does not seem to support a 0's broadcast and you will probably find that browsing and name lookups won't work. -

    Multiple interfaces

    +

    Multiple interfaces

    Samba now supports machines with multiple network interfaces. If you have multiple interfaces then you will need to use the interfaces option in smb.conf to configure them. -

    Use of the Remote Announce parameter

    +

    Use of the Remote Announce parameter

    The remote announce parameter of smb.conf can be used to forcibly ensure that all the NetBIOS names on a network get announced to a remote network. The syntax of the remote announce parameter is: -

    +
     	remote announce = a.b.c.d [e.f.g.h] ...
-
    
+
    or -

    +
     	remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ...
-
    
+
    where: -

    a.b.c.d and +
    a.b.c.d and e.f.g.h

    is either the LMB (Local Master Browser) IP address or the broadcast address of the remote network. ie: the LMB is at 192.168.1.10, or the address @@ -2740,23 +2743,23 @@ workgroup name of the remote network then our NetBIOS machine names will end up looking like they belong to that workgroup, this may cause name resolution problems and should be avoided. -

    -

    Use of the Remote Browse Sync parameter

    +

    +

    Use of the Remote Browse Sync parameter

    The remote browse sync parameter of smb.conf is used to announce to another LMB that it must synchronise its NetBIOS name list with our Samba LMB. It works ONLY if the Samba server that has this option is simultaneously the LMB on its network segment. -

    +

    The syntax of the remote browse sync parameter is: -

    +
     remote browse sync = a.b.c.d
-
    
+
    where a.b.c.d is either the IP address of the remote LMB or else is the network broadcast address of the remote segment. -

    WINS - The Windows Internetworking Name Server

    +

    WINS - The Windows Internetworking Name Server

    Use of WINS (either Samba WINS or MS Windows NT Server WINS) is highly recommended. Every NetBIOS machine registers its name together with a name_type value for each of several types of service it has available. @@ -2807,16 +2810,16 @@ Never use both wins support = yes together with wins server = a.b.c.d particularly not using it's own IP address. Specifying both will cause nmbd to refuse to start! -

    Setting up a WINS server

    +

    Setting up a WINS server

    Either a Samba machine or a Windows NT Server machine may be set up as a WINS server. To set a Samba machine to be a WINS server you must add the following option to the smb.conf file on the selected machine : in the [globals] section add the line -

    -

    +
    
+
     	wins support = yes
-
    
-
    
+
    +

    Versions of Samba prior to 1.9.17 had this parameter default to yes. If you have any older versions of Samba on your network it is strongly suggested you upgrade to a recent version, or at the very @@ -2848,11 +2851,11 @@ the Control Panel->Network->Protocols->TCP->W in Windows 95 or Windows NT. To tell a Samba server the IP address of the WINS server add the following line to the [global] section of all smb.conf files : -

    -

    +
    
+
     	wins server = <name or IP address>
-
    
-
    
+
    +

    where <name or IP address> is either the DNS name of the WINS server machine or its IP address.

    @@ -2867,45 +2870,45 @@ The first details setting up cross subnet browsing on a network containing Windows 95, Samba and Windows NT machines that are not configured as part of a Windows NT Domain. The second details setting up cross subnet browsing on networks that contain NT Domains. -

    WINS Replication

    +

    WINS Replication

    Samba-3 permits WINS replication through the use of the wrepld utility. This tool is not currently capable of being used as it is still in active development. As soon as this tool becomes moderately functional we will prepare man pages and enhance this section of the documentation to provide usage and technical details. -

    Static WINS Entries

    +

    Static WINS Entries

    Adding static entries to your Samba-3 WINS server is actually fairly easy. All you have to do is add a line to wins.dat, typically located in /usr/local/samba/var/locks. -

    +

    Entries in wins.dat take the form of -

    +
     "NAME#TYPE" TTL ADDRESS+ FLAGS
-
    
+
    where NAME is the NetBIOS name, TYPE is the NetBIOS type, TTL is the time-to-live as an absolute time in seconds, ADDRESS+ is one or more addresses corresponding to the registration and FLAGS are the NetBIOS flags for the registration. -

    + A typical dynamic entry looks like: -

    +
     "MADMAN#03" 1055298378 192.168.1.2 66R
-
    
+
    To make it static, all that has to be done is set the TTL to 0: -

    +
     "MADMAN#03" 0 192.168.1.2 66R
-
    
-
    
+
    +

    Though this method works with early Samba-3 versions, there's a possibility that it may change in future versions if WINS replication is added. -

    Helpful Hints

    +

    Helpful Hints

    The following hints should be carefully considered as they are stumbling points for many new network administrators. -

    Windows Networking Protocols

    Warning

    +

    Windows Networking Protocols

    Warning

    Do NOT use more than one (1) protocol on MS Windows machines

    A very common cause of browsing problems results from installing more than @@ -2935,32 +2938,32 @@ differently from MS Windows NT4. Generally, where a server does NOT support the newer or extended protocol, these will fall back to the NT4 protocols.

    The safest rule of all to follow it this - USE ONLY ONE PROTOCOL! -

    Name Resolution Order

    +

    Name Resolution Order

    Resolution of NetBIOS names to IP addresses can take place using a number of methods. The only ones that can provide NetBIOS name_type information are:

    WINS: the best tool!
    LMHOSTS: is static and hard to maintain.
    Broadcast: uses UDP and can not resolve names across remote segments.

    Alternative means of name resolution includes: -

    /etc/hosts: is static, hard to maintain, and lacks name_type info
    DNS: is a good choice but lacks essential name_type info.

    +

    /etc/hosts: is static, hard to maintain, and lacks name_type info
    DNS: is a good choice but lacks essential name_type info.
    Many sites want to restrict DNS lookups and want to avoid broadcast name resolution traffic. The name resolve order parameter is of great help here. The syntax of the name resolve order parameter is: -

    +
     name resolve order = wins lmhosts bcast host
-
    
+
    or -

    +
     name resolve order = wins lmhosts  	(eliminates bcast and host)
-
    
+
    The default is: -

    +
     name resolve order = host lmhost wins bcast
-
    
+
    where "host" refers the the native methods used by the Unix system to implement the gethostbyname() function call. This is normally controlled by /etc/host.conf, /etc/nsswitch.conf and /etc/resolv.conf. -

    Technical Overview of browsing

    +

    Technical Overview of browsing

    SMB networking provides a mechanism by which clients can access a list of machines in a network, a so-called browse list. This list contains machines that are ready to offer file and/or print services @@ -2980,7 +2983,7 @@ Where NetBIOS over TCP/IP is enabled use of a WINS server is highly recommended to aid the resolution of NetBIOS (SMB) names to IP addresses. WINS allows remote segment clients to obtain NetBIOS name_type information that can NOT be provided by any other means of name resolution. -

    Browsing support in Samba

    +

    Browsing support in Samba

    Samba facilitates browsing. The browsing is supported by nmbd and is also controlled by options in the smb.conf file. Samba can act as a local browse master for a workgroup and the ability @@ -3015,7 +3018,7 @@ browsing on another subnet. It is recommended that this option is only used for 'unusual' purposes: announcements over the internet, for example. See remote announce in the smb.conf man page. -

    Problem resolution

    +

    Problem resolution

    If something doesn't work then hopefully the log.nmbd file will help you track down the problem. Try a debug level of 2 or 3 for finding problems. Also note that the current browse list usually gets stored @@ -3040,7 +3043,7 @@ server resources. The other big problem people have is that their broadcast address, netmask or IP address is wrong (specified with the "interfaces" option in smb.conf) -

    Browsing across subnets

    +

    Browsing across subnets

    Since the release of Samba 1.9.17(alpha1), Samba has supported the replication of browse lists across subnet boundaries. This section describes how to set this feature up in different settings. @@ -3061,16 +3064,16 @@ be they Windows 95, Windows NT, or Samba servers must have the IP address of a WINS server given to them by a DHCP server, or by manual configuration (for Win95 and WinNT, this is in the TCP/IP Properties, under Network settings) for Samba this is in the smb.conf file. -

    How does cross subnet browsing work ?

    +

    How does cross subnet browsing work ?

    Cross subnet browsing is a complicated dance, containing multiple moving parts. It has taken Microsoft several years to get the code that achieves this correct, and Samba lags behind in some areas. Samba is capable of cross subnet browsing when configured correctly.

    Consider a network set up as follows : -

    +

    -

    +
                                        (DMB)
              N1_A      N1_B        N1_C       N1_D        N1_E
               |          |           |          |           |
@@ -3085,8 +3088,8 @@ Consider a network set up as follows :
   |     |     |      |               |        |         |           |
  N2_A  N2_B  N2_C   N2_D           N3_A     N3_B      N3_C        N3_D 
                     (WINS)
-
    
-
    
+
    +

    Consisting of 3 subnets (1, 2, 3) connected by two routers (R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume @@ -3127,9 +3130,9 @@ called 'non-authoritative'. At this point the browse lists look as follows (these are the machines you would see in your network neighborhood if you looked in it on a particular network right now). -

    -

    Table10.1.Browse subnet example 1

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D

    -

    +

    +

    Table10.1.Browse subnet example 1

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D
    +

    Note that at this point all the subnets are separate, no machine is seen across any of the subnets.

    @@ -3149,11 +3152,11 @@ names it knows about. Once the domain master browser receives the MasterAnnouncement packet it schedules a synchronization request to the sender of that packet. After both synchronizations are done the browse lists look like : -

    -

    Table10.2.Browse subnet example 2

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D

    +

    +

    Table10.2.Browse subnet example 2

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D
    Servers with a (*) after them are non-authoritative names. -

    +

    At this point users looking in their network neighborhood on subnets 1 or 2 will see all the servers on both, users on subnet 3 will still only see the servers on their own subnet. @@ -3164,11 +3167,11 @@ synchronizes browse lists with the domain master browser (N1_A) it gets both the server entries on subnet 1, and those on subnet 2. After N3_D has synchronized with N1_C and vica-versa the browse lists look like. -

    -

    Table10.3.Browse subnet example 3

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)

    +

    +

    Table10.3.Browse subnet example 3

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)
    Servers with a (*) after them are non-authoritative names. -

    +

    At this point users looking in their network neighborhood on subnets 1 or 3 will see all the servers on all subnets, users on subnet 2 will still only see the servers on subnets 1 and 2, but not 3. @@ -3177,11 +3180,11 @@ Finally, the local master browser for subnet 2 (N2_B) will sync again with the domain master browser (N1_C) and will receive the missing server entries. Finally - and as a steady state (if no machines are removed or shut off) the browse lists will look like : -

    -

    Table10.4.Browse subnet example 4

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)

    +

    +

    Table10.4.Browse subnet example 4

    SubnetBrowse MasterList
    Subnet1N1_CN1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet2N2_BN2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)
    Subnet3N3_DN3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)
    Servers with a (*) after them are non-authoritative names. -

    +

    Synchronizations between the domain master browser and local master browsers will continue to occur, but this should be a steady state situation. @@ -3199,11 +3202,11 @@ If either router R1 or R2 fails the following will occur: be able to access servers on its local subnet, by using subnet-isolated broadcast NetBIOS name resolution. The effects are similar to that of losing access to a DNS server. -

    Common Errors

    +

    Common Errors

    Many questions are asked on the mailing lists regarding browsing. The majority of browsing problems originate out of incorrect configuration of NetBIOS name resolution. Some are of particular note. -

    How can one flush the Samba NetBIOS name cache without restarting Samba?

    +

    How can one flush the Samba NetBIOS name cache without restarting Samba?

    Samba's nmbd process controls all browse list handling. Under normal circumstances it is safe to restart nmbd. This will effectively flush the Samba NetBIOS name cache and cause it to be rebuilt. Note that this does NOT make certain that a rogue machine name will not re-appear @@ -3213,11 +3216,11 @@ want to clear a rogue machine from the list then every machine on the network wi shut down and restarted at after all machines are down. Failing a complete restart, the only other thing you can do is wait until the entry times out and is then flushed from the list. This may take a long time on some networks (months). -

    My client reports "This server is not configured to list shared resources"

    +

    My client reports "This server is not configured to list shared resources"

    Your guest account is probably invalid for some reason. Samba uses the guest account for browsing in smbd. Check that your guest account is valid. -

    See also guest account in the smb.conf man page.

    Chapter11.Account Information Databases

    Jelmer R. Vernooij

    The Samba Team

    Gerald (Jerry) Carter

    Samba Team

    Jeremy Allison

    Samba Team

    John H. Terpstra

    Samba Team

    Olivier (lem) Lemaire

    IDEALX

    May 24, 2003

    Table of Contents

    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work

    +

    See also guest account in the smb.conf man page.

    Chapter11.Account Information Databases

    Jelmer R. Vernooij

    The Samba Team

    Gerald (Jerry) Carter

    Samba Team

    Jeremy Allison

    Samba Team

    John H. Terpstra

    Samba Team

    Olivier (lem) Lemaire

    IDEALX

    May 24, 2003

    Table of Contents

    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work

    Samba-3 implements a new capability to work concurrently with multiple account backends. The possible new combinations of password backends allows Samba-3 a degree of flexibility and scalability that previously could be achieved only with MS Windows Active Directory. @@ -3235,7 +3238,7 @@ deliver this functionality until a better method of recognising NT Group SIDs fr SIDs could be found. This feature may thus return during the life cycle for the Samba-3 series.

    Note

    Samba-3.0.0 does NOT support Non-Unix Account (NUA) operation. -

    Features and Benefits

    +

    Features and Benefits

    Samba-3 provides for complete backwards compatibility with Samba-2.2.x functionality as follows:

    Backwards Compatibility Backends

    Plain Text:

    @@ -3312,7 +3315,7 @@ Samba-3 introduces the following new password backend capabilities:

    nisplussam:

    The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with Sun NIS+ servers. -

    Technical Information

    +

    Technical Information

    Old windows clients send plain text passwords over the wire. Samba can check these passwords by crypting them and comparing them to the hash stored in the unix user database.

    @@ -3330,7 +3333,7 @@ Samba-3 introduces the following new password backend capabilities: information using a passdb backend. Commonly available backends are LDAP, plain text file, MySQL and nisplus. For more information, see the man page for smb.conf regarding the passdb backend parameter. -

    Important Notes About Security

    +

    Important Notes About Security

    The unix and SMB password encryption techniques seem similar on the surface. This similarity is, however, only skin deep. The unix scheme typically sends clear text passwords over the network when logging in. This is bad. The SMB encryption scheme @@ -3372,7 +3375,7 @@ Samba-3 introduces the following new password backend capabilities: (broken) only the cached (encrypted) password will be sent to the resource server to affect a auto-reconnect. If the resource server does not support encrypted passwords the auto-reconnect will fail. USE OF ENCRYPTED PASSWORDS IS STRONGLY ADVISED. -

    Advantages of Encrypted Passwords

    • Plain text passwords are not passed across +

      Advantages of Encrypted Passwords

      • Plain text passwords are not passed across the network. Someone using a network sniffer cannot just record passwords going to the SMB server.

      • Plain text passwords are not stored anywhere in memory or on disk.

      • WinNT doesn't like talking to a server @@ -3383,11 +3386,11 @@ Samba-3 introduces the following new password backend capabilities: only things you can do to stop this is to use SMB encryption.

      • Encrypted password support allows automatic share (resource) reconnects.

      • Encrypted passwords are essential for PDC/BDC - operation.

      Advantages of non-encrypted passwords

      • Plain text passwords are not kept + operation.

      Advantages of non-encrypted passwords

      • Plain text passwords are not kept on disk, and are NOT cached in memory.

      • Uses same password file as other unix services such as login and ftp

      • Use of other services (such as telnet and ftp) which send plain text passwords over the net, so sending them for SMB - isn't such a big deal.

    Mapping User Identifiers between MS Windows and Unix

    + isn't such a big deal.

    Mapping User Identifiers between MS Windows and Unix

    Every operation in Unix/Linux requires a user identifier (UID), just as in MS Windows NT4 / 200x this requires a Security Identifier (SID). Samba provides two means for mapping an MS Windows user to a Unix/Linux UID. @@ -3402,13 +3405,13 @@ Samba-3 introduces the following new password backend capabilities: idmap uid, idmap gid parameters in smb.conf. Please refer to the man page for information about these parameters. These parameters are essential when mapping users from a remote SAM server. -

    Account Management Tools

    +

    Account Management Tools

    Samba-3 provides two (2) tools for management of User and machine accounts. These tools are called smbpasswd and pdbedit. A third tool is under development but is NOT expected to ship in time for Samba-3.0.0. The new tool will be a TCL/TK GUI tool that looks much like the MS Windows NT4 Domain User Manager - hopefully this will be announced in time for the Samba-3.0.1 release. -

    The smbpasswd Command

    +

    The smbpasswd Command

    The smbpasswd utility is a utility similar to the passwd or yppasswd programs. It maintains the two 32 byte password fields in the passdb backend. @@ -3424,18 +3427,18 @@ be announced in time for the Samba-3.0.1 release. smbpasswd can be used to:

    add user or machine accounts
    delete user or machine accounts
    enable user or machine accounts
    disable user or machine accounts
    set to NULL user passwords
    manage interdomain trust accounts

    To run smbpasswd as a normal user just type: -

    - 

    +		
    
+		
     		$ smbpasswd
 		Old SMB password: secret
-		
    
+
    For secret type old value here - or hit return if there was no old password - 

    +		
     		New SMB Password: new secret
 		Repeat New SMB Password: new secret
-		
    
-		
    
+
    +

    If the old value does not match the current value stored for that user, or the two new values do not match each other, then the password will not be changed.

    @@ -3454,7 +3457,7 @@ be announced in time for the Samba-3.0.1 release.

    For more details on using smbpasswd refer to the man page (the definitive reference). -

    The pdbedit Command

    +

    The pdbedit Command

    pdbedit is a tool that can be used only by root. It is used to manage the passdb backend. pdbedit can be used to:

    add, remove or modify user accounts
    listing user accounts
    migrate user accounts

    @@ -3490,27 +3493,27 @@ be announced in time for the Samba-3.0.1 release. Password last set: Sat, 14 Dec 2002 14:37:03 GMT Password can change: Sat, 14 Dec 2002 14:37:03 GMT Password must change: Mon, 18 Jan 2038 20:14:07 GMT -

    Password Backends

    +

    Password Backends

    Samba-3 offers the greatest flexibility in backend account database design of any SMB/CIFS server technology available today. The flexibility is immediately obvious as one begins to explore this capability.

    It is possible to specify not only multiple different password backends, but even multiple backends of the same type. For example, to use two different tdbsam databases: -

    -

    +
    
+
     [globals]
 		passdb backend = tdbsam:/etc/samba/passdb.tdb, \
 		tdbsam:/etc/samba/old-passdb.tdb, guest
-
    
-
    Plain Text
    
+
    +

    Plain Text

    Older versions of Samba retrieved user information from the unix user database and eventually some other fields from the file /etc/samba/smbpasswd or /etc/smbpasswd. When password encryption is disabled, no SMB specific data is stored at all. Instead all operations are conducted via the way that the Samba host OS will access its /etc/passwd database. eg: On Linux systems that is done via PAM. -

    smbpasswd - Encrypted Password Database

    +

    smbpasswd - Encrypted Password Database

    Traditionally, when configuring encrypt passwords = yes in Samba's smb.conf file, user account information such as username, LM/NT password hashes, password change times, and account @@ -3541,7 +3544,7 @@ backends of the same type. For example, to use two different tdbsam databases: Samba-3 provides an enhanced set of passdb backends that overcome the deficiencies of the smbpasswd plain text database. These are tdbsam, ldapsam, and xmlsam. Of these ldapsam will be of most interest to large corporate or enterprise sites. -

    tdbsam

    Samba can store user and machine account data in a "TDB" (Trivial Database). +

    tdbsam

    Samba can store user and machine account data in a "TDB" (Trivial Database). Using this backend doesn't require any additional configuration. This backend is recommended for new installations that do not require LDAP.

    @@ -3549,7 +3552,7 @@ backends of the same type. For example, to use two different tdbsam databases: that have 250 or more users. Additionally, tdbsam is not capable of scaling for use in sites that require PDB/BDC implementations that requires replication of the account database. Clearly, for reason of scalability, the use of ldapsam should be encouraged. -

    ldapsam

    +

    ldapsam

    There are a few points to stress that the ldapsam does not provide. The LDAP support referred to in the this documentation does not include:

    • A means of retrieving user account information from @@ -3577,16 +3580,16 @@ backends of the same type. For example, to use two different tdbsam databases:

      • The Samba-PDC-LDAP-HOWTO maintained by Ignacio Coupeau.

      • The NT migration scripts from IDEALX that are geared to manage users and group in such a Samba-LDAP Domain Controller configuration. -

      Supported LDAP Servers

      +

    Supported LDAP Servers

    The LDAP ldapsam code has been developed and tested using the OpenLDAP 2.0 and 2.1 server and client libraries. The same code should work with Netscape's Directory Server and client SDK. However, there are bound to be compile errors and bugs. These should not be hard to fix. Please submit fixes via Bug reporting facility. -

    Schema and Relationship to the RFC 2307 posixAccount

    +

    Schema and Relationship to the RFC 2307 posixAccount

    Samba 3.0 includes the necessary schema file for OpenLDAP 2.0 in examples/LDAP/samba.schema. The sambaSamAccount objectclass is given here: -

    -

    +			
    
+
     objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY
     DESC 'Samba Auxiliary Account'
     MUST ( uid $ rid )
@@ -3594,8 +3597,8 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY
            logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
            displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
            description $ userWorkstations $ primaryGroupID $ domain ))
-
    
-
    
+
    +

    The samba.schema file has been formatted for OpenLDAP 2.0/2.1. The OID's are owned by the Samba Team and as such is legal to be openly published. If you translate the schema to be used with Netscape DS, please @@ -3617,23 +3620,23 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY and functioning correctly. This division of information makes it possible to store all Samba account information in LDAP, but still maintain UNIX account information in NIS while the network is transitioning to a full LDAP infrastructure. -

    OpenLDAP configuration

    +

    OpenLDAP configuration

    To include support for the sambaSamAccount object in an OpenLDAP directory server, first copy the samba.schema file to slapd's configuration directory. The samba.schema file can be found in the directory examples/LDAP in the samba source distribution. -

    -

    +			
    
+
     root# cp samba.schema /etc/openldap/schema/
-
    
-
    
+
    +

    Next, include the samba.schema file in slapd.conf. The sambaSamAccount object contains two attributes which depend upon other schema files. The 'uid' attribute is defined in cosine.schema and the 'displayName' attribute is defined in the inetorgperson.schema file. Both of these must be included before the samba.schema file. -

    -

    +			
    
+
     ## /etc/openldap/slapd.conf
 
 ## schema files (core.schema is required by default)
@@ -3645,13 +3648,13 @@ include            /etc/openldap/schema/inetorgperson.schema
 include            /etc/openldap/schema/samba.schema
 include            /etc/openldap/schema/nis.schema
 ....
-
    
-
    
+
    +

    It is recommended that you maintain some indices on some of the most useful attributes, like in the following example, to speed up searches made on sambaSamAccount objectclasses (and possibly posixAccount and posixGroup as well). -

    -

    +		
    
+
     # Indices to maintain
 ## required by OpenLDAP
 index objectclass             eq
@@ -3673,25 +3676,25 @@ index   sambaSID              eq
 index   sambaPrimaryGroupSID  eq
 index   sambaDomainName       eq
 index   default               sub
-
    
-
    
+
    +

    Create the new index by executing: -

    -

    +		
    
+
     ./sbin/slapindex -f slapd.conf
-
    
-
    
+
    +

    Remember to restart slapd after making these changes: -

    -

    +		
    
+
     root# /etc/init.d/slapd restart
-
    
-

    Initialise the LDAP database

    + +

    Initialise the LDAP database

    Before you can add accounts to the LDAP database you must create the account containers that they will be stored in. The following LDIF file should be modified to match your needs (ie: Your DNS entries, etc.). -

    -

    +		
    
+
     # Organization for Samba Base
 dn: dc=plainjoe,dc=org
 objectclass: dcObject
@@ -3719,26 +3722,26 @@ objectclass: top
 objectclass: organizationalRole
 objectclass: simpleSecurityObject
 userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
-
    
-
    
+
    +

    The userPassword shown above should be generated using slappasswd.

    The following command will then load the contents of the LDIF file into the LDAP database. -

    -

    +		
    
+
     $ slapadd -v -l initldap.dif
-
    
-
    
+
    +

    Do not forget to secure your LDAP server with an adequate access control list, as well as an admin password. -

    Note

    +

    Note

    Before Samba can access the LDAP server you need to store the LDAP admin password into the Samba-3 secrets.tdb database by: - 

    +		
     root#  smbpasswd -w secret
-		
    
-

    Configuring Samba

    + +

    Configuring Samba

    The following parameters are available in smb.conf only if your version of samba was built with LDAP support. Samba automatically builds with LDAP support if the LDAP libraries are found. @@ -3746,8 +3749,8 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz These are described in the smb.conf man page and so will not be repeated here. However, a sample smb.conf file for use with an LDAP directory could appear as -

    -

    +			
    
+
     ## /usr/local/samba/lib/smb.conf
 [global]
      security = user
@@ -3789,8 +3792,8 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
 
      # generally the default ldap search filter is ok
      # ldap filter = "(&(uid=%u)(objectclass=sambaSamAccount))"
-
    
-

    Accounts and Groups management

    + +

    Accounts and Groups management

    As users accounts are managed through the sambaSamAccount objectclass, you should modify your existing administration tools to deal with sambaSamAccount attributes.

    @@ -3806,7 +3809,7 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz groups. This means that Samba makes use of the posixGroup objectclass. For now, there is no NT-like group system management (global and local groups). -

    Security and sambaSamAccount

    +

    Security and sambaSamAccount

    There are two important points to remember when discussing the security of sambaSamAccount entries in the directory.

    • Never retrieve the lmPassword or @@ -3832,17 +3835,17 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz The second security precaution is to prevent non-administrative users from harvesting password hashes from the directory. This can be done using the following ACL in slapd.conf: -

      -

      +			
      
+
       ## allow the "ldap admin dn" access, but deny everyone else
 access to attrs=lmPassword,ntPassword
      by dn="cn=Samba Admin,ou=people,dc=plainjoe,dc=org" write
      by * none
-
      
-

    LDAP special attributes for sambaSamAccounts

    + +

    LDAP special attributes for sambaSamAccounts

    The sambaSamAccount objectclass is composed of the following attributes: -

    -

    Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)

    lmPasswordthe LANMAN password 16-byte hash stored as a character +

    +

    Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)

    lmPasswordthe LANMAN password 16-byte hash stored as a character representation of a hexadecimal string.
    ntPasswordthe NT password hash 16-byte stored as a character representation of a hexadecimal string.
    pwdLastSetThe integer time in seconds since 1970 when the lmPassword and ntPassword attributes were last set. @@ -3865,8 +3868,8 @@ access to attrs=lmPassword,ntPassword
    userWorkstationcharacter string value currently unused.
    ridthe integer representation of the user's relative identifier (RID).
    primaryGroupIDthe relative identifier (RID) of the primary group - of the user.
    domaindomain the user is part of.

    -

    + of the user.

    domaindomain the user is part of.
    +

    The majority of these parameters are only used when Samba is acting as a PDC of a domain (refer to the Samba as a primary domain controller chapter for details on how to configure Samba as a Primary Domain Controller). The following four attributes @@ -3882,10 +3885,10 @@ access to attrs=lmPassword,ntPassword of the logon home parameter is used in its place. Samba will only write the attribute value to the directory entry if the value is something other than the default (e.g. \\MOBY\becky). -

    Example LDIF Entries for a sambaSamAccount

    +

    Example LDIF Entries for a sambaSamAccount

    The following is a working LDIF with the inclusion of the posixAccount objectclass: -

    - 

    +			
    
+	
     	dn: uid=guest2, ou=people,dc=plainjoe,dc=org
 	ntPassword: 878D8014606CDA29677A44EFA1353FC7
 	pwdMustChange: 2147483647
@@ -3900,12 +3903,12 @@ access to attrs=lmPassword,ntPassword
 	logoffTime: 2147483647
 	rid: 19006
 	pwdCanChange: 0
-	
    
-	
    
+
    +

    The following is an LDIF entry for using both the sambaSamAccount and posixAccount objectclasses: -

    - 

    +			
    
+	
     	dn: uid=gcarter, ou=people,dc=plainjoe,dc=org
 	logonTime: 0
 	displayName: Gerald Carter
@@ -3928,53 +3931,53 @@ access to attrs=lmPassword,ntPassword
 	pwdCanChange: 0
 	pwdMustChange: 2147483647
 	ntPassword: 878D8014606CDA29677A44EFA1353FC7
-
    
-

    Password synchronisation

    + +

    Password synchronisation

    Since version 3.0 samba can update the non-samba (LDAP) password stored with an account. When using pam_ldap, this allows changing both unix and windows passwords at once.

    The ldap passwd sync options can have the following values:

    yes

    When the user changes his password, update ntPassword, lmPassword and the password fields.

    no

    Only update ntPassword and lmPassword.

    only

    Only update the LDAP password and let the LDAP server worry about the other fields. This option is only available when the LDAP server supports LDAP_EXOP_X_MODIFY_PASSWD.

    More information can be found in the smb.conf manpage. -

    MySQL

    +

    MySQL

    Every so often someone will come along with a great new idea. Storing of user accounts in an SQL backend is one of them. Those who want to do this are in the best position to know what the specific benefits are to them. This may sound like a cop-out, but in truth we can not attempt to document every nitty little detail why certain things of marginal utility to the bulk of Samba users might make sense to the rest. In any case, the following instructions should help the determined SQL user to implement a working system. -

    Creating the database

    +

    Creating the database

    You either can set up your own table and specify the field names to pdb_mysql (see below for the column names) or use the default table. The file examples/pdb/mysql/mysql.dump contains the correct queries to create the required tables. Use the command : - 

    $ mysql -uusername -hhostname -ppassword \
-databasename < /path/to/samba/examples/pdb/mysql/mysql.dump

    -

    Configuring

    This plugin lacks some good documentation, but here is some short info:

    Add a the following to the passdb backend variable in your smb.conf: - 

    +			
    $ mysql -uusername -hhostname -ppassword \
+databasename < /path/to/samba/examples/pdb/mysql/mysql.dump
    
+

    Configuring

    This plugin lacks some good documentation, but here is some short info:

    Add a the following to the passdb backend variable in your smb.conf: + 
     			passdb backend = [other-plugins] mysql:identifier [other-plugins]
-

    -

    The identifier can be any string you like, as long as it doesn't collide with + +

    The identifier can be any string you like, as long as it doesn't collide with the identifiers of other plugins or other instances of pdb_mysql. If you specify multiple pdb_mysql.so entries in passdb backend, you also need to use different identifiers!

    Additional options can be given through the smb.conf file in the [global] section. -

    -

    Table11.2.Basic smb.conf options for MySQL passdb backend

    FieldContents
    identifier:mysql hosthost name, defaults to 'localhost'
    identifier:mysql password
    identifier:mysql userdefaults to 'samba'
    identifier:mysql databasedefaults to 'samba'
    identifier:mysql portdefaults to 3306
    identifier:tableName of the table containing users

    -

    Warning

    +

    +

    Table11.2.Basic smb.conf options for MySQL passdb backend

    FieldContents
    identifier:mysql hosthost name, defaults to 'localhost'
    identifier:mysql password
    identifier:mysql userdefaults to 'samba'
    identifier:mysql databasedefaults to 'samba'
    identifier:mysql portdefaults to 3306
    identifier:tableName of the table containing users
    +

    Warning

    Since the password for the MySQL user is stored in the smb.conf file, you should make the the smb.conf file readable only to the user that runs Samba This is considered a security bug and will be fixed soon. -

    Names of the columns in this table (I've added column types those columns should have first):

    -

    Table11.3.MySQL field names for MySQL passdb backend

    FieldTypeContents
    identifier:logon time columnint(9)
    identifier:logoff time columnint(9)
    identifier:kickoff time columnint(9)
    identifier:pass last set time columnint(9)
    identifier:pass can change time columnint(9)
    identifier:pass must change time columnint(9)
    identifier:username columnvarchar(255)unix username
    identifier:domain columnvarchar(255)NT domain user is part of
    identifier:nt username columnvarchar(255)NT username
    identifier:fullname columnvarchar(255)Full name of user
    identifier:home dir columnvarchar(255)Unix homedir path
    identifier:dir drive columnvarchar(2)Directory drive path (eg: 'H:')
    identifier:logon script columnvarchar(255)Batch file to run on client side when logging on
    identifier:profile path columnvarchar(255)Path of profile
    identifier:acct desc columnvarchar(255)Some ASCII NT user data
    identifier:workstations columnvarchar(255)Workstations user can logon to (or NULL for all)
    identifier:unknown string columnvarchar(255)unknown string
    identifier:munged dial columnvarchar(255)?
    identifier:user sid columnvarchar(255)NT user SID
    identifier:group sid columnvarchar(255)NT group ID
    identifier:lanman pass columnvarchar(255)encrypted lanman password
    identifier:nt pass columnvarchar(255)encrypted nt passwd
    identifier:plain pass columnvarchar(255)plaintext password
    identifier:acct control columnint(9)nt user data
    identifier:unknown 3 columnint(9)unknown
    identifier:logon divs columnint(9)?
    identifier:hours len columnint(9)?
    identifier:unknown 5 columnint(9)unknown
    identifier:unknown 6 columnint(9)unknown

    -

    +

    Names of the columns in this table (I've added column types those columns should have first):

    +

    Table11.3.MySQL field names for MySQL passdb backend

    FieldTypeContents
    identifier:logon time columnint(9)
    identifier:logoff time columnint(9)
    identifier:kickoff time columnint(9)
    identifier:pass last set time columnint(9)
    identifier:pass can change time columnint(9)
    identifier:pass must change time columnint(9)
    identifier:username columnvarchar(255)unix username
    identifier:domain columnvarchar(255)NT domain user is part of
    identifier:nt username columnvarchar(255)NT username
    identifier:fullname columnvarchar(255)Full name of user
    identifier:home dir columnvarchar(255)Unix homedir path
    identifier:dir drive columnvarchar(2)Directory drive path (eg: 'H:')
    identifier:logon script columnvarchar(255)Batch file to run on client side when logging on
    identifier:profile path columnvarchar(255)Path of profile
    identifier:acct desc columnvarchar(255)Some ASCII NT user data
    identifier:workstations columnvarchar(255)Workstations user can logon to (or NULL for all)
    identifier:unknown string columnvarchar(255)unknown string
    identifier:munged dial columnvarchar(255)?
    identifier:user sid columnvarchar(255)NT user SID
    identifier:group sid columnvarchar(255)NT group ID
    identifier:lanman pass columnvarchar(255)encrypted lanman password
    identifier:nt pass columnvarchar(255)encrypted nt passwd
    identifier:plain pass columnvarchar(255)plaintext password
    identifier:acct control columnint(9)nt user data
    identifier:unknown 3 columnint(9)unknown
    identifier:logon divs columnint(9)?
    identifier:hours len columnint(9)?
    identifier:unknown 5 columnint(9)unknown
    identifier:unknown 6 columnint(9)unknown
    +

    Eventually, you can put a colon (:) after the name of each column, which should specify the column to update when updating the table. You can also specify nothing behind the colon - then the data from the field will not be updated. -

    Using plaintext passwords or encrypted password

    +

    Using plaintext passwords or encrypted password

    I strongly discourage the use of plaintext passwords, however, you can use them:

    If you would like to use plaintext passwords, set @@ -3984,7 +3987,7 @@ access to attrs=lmPassword,ntPassword

    If you use encrypted passwords, set the 'identifier:plain pass column' to 'NULL' (without the quotes). This is the default. -

    Getting non-column data from the table

    +

    Getting non-column data from the table

    It is possible to have not all data in the database and making some 'constant'.

    For example, you can set 'identifier:fullname column' to : @@ -3999,36 +4002,36 @@ access to attrs=lmPassword,ntPassword

    To import data, use: $ pdbedit -i xml:filename -

    Common Errors

    Users can not logon - Users not in Samba SAM

    +

    Common Errors

    Users can not logon - Users not in Samba SAM

    People forget to put their users in their backend and then complain Samba won't authorize them. -

    Users are being added to the wrong backend database

    +

    Users are being added to the wrong backend database

    A few complaints have been received from users that just moved to Samba-3. The following smb.conf file entries were causing problems, new accounts were being added to the old smbpasswd file, not to the tdbsam passdb.tdb file: -

    - 

    +	
    
+	
     	[globals]
 		...
 		passdb backend = smbpasswd, tdbsam, guest
 		...
-	
    
-	
    
+
    +

    Samba will add new accounts to the first entry in the passdb backend parameter entry. If you want to update to the tdbsam, then change the entry to: -

    - 

    +	
    
+	
     	[globals]
 		...
 		passdb backend = tdbsam, smbpasswd, guest
 		...
-	
    
-

    auth methods does not work

    + +

    auth methods does not work

    If you explicitly set an 'auth methods' parameter, guest must be specified as the first entry on the line. Eg: auth methods = guest sam.

    This is the exact opposite of the requirement for the passdb backed option, where it must be the LAST parameter on the line. -

    Chapter12.Mapping MS Windows and Unix Groups

    Jean Franois Micouleau

    Gerald (Jerry) Carter

    Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails

    +

    Chapter12.Mapping MS Windows and Unix Groups

    Jean Franois Micouleau

    Gerald (Jerry) Carter

    Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails

    Starting with Samba-3, new group mapping functionality is available to create associations between Windows group SIDs and UNIX groups. The groupmap subcommand included with the net tool can be used to manage these associations. @@ -4038,7 +4041,7 @@ access to attrs=lmPassword,ntPassword be specified in smb.conf. This parameter was used to give the listed users membership in the Domain Admins Windows group which gave local admin rights on their workstations (in default configurations). -

    Features and Benefits

    +

    Features and Benefits

    Samba allows the administrator to create MS Windows NT4 / 200x group accounts and to arbitrarily associate them with Unix/Linux group accounts.

    @@ -4061,7 +4064,7 @@ access to attrs=lmPassword,ntPassword Another work-around is to manually create a Unix/Linux group, then manually create the MS Windows NT4 / 200x group on the Samba server and then use the net groupmap tool to connect the two to each other. -

    Discussion

    +

    Discussion

    When installing MS Windows NT4 / 200x on a computer, the installation program creates default users and groups, notably the Administrators group, and gives that group privileges necessary privileges to perform essential system tasks. @@ -4080,19 +4083,19 @@ access to attrs=lmPassword,ntPassword The following steps describe how to make Samba PDC users members of the 'Domain Admins' group?

    1. create a unix group (usually in /etc/group), let's call it domadm -

    2. add to this group the users that must be Administrators. For example +

    3. add to this group the users that must be Administrators. For example if you want joe, john and mary, your entry in /etc/group will look like: 

       		domadm:x:502:joe,john,mary
-

      -

    4. + +

    5. Map this domadm group to the "Domain Admins" group by running the command: -

      - 

      +		
      
+		
       		root# net groupmap add ntgroup="Domain Admins" unixgroup=domadm
-		
      
-		
      
+
      +

      The quotes around "Domain Admins" are necessary due to the space in the group name. Also make sure to leave no whitespace surrounding the equal character (=).

    @@ -4102,36 +4105,36 @@ access to attrs=lmPassword,ntPassword making any UNIX group a Windows domain group. For example, if you wanted to include a UNIX group (e.g. acct) in a ACL on a local file or printer on a domain member machine, you would flag that group as a domain group by running the following on the Samba PDC: -

    - 

    +	
    
+	
     	root# net groupmap add rid=1000 ntgroup="Accounting" unixgroup=acct
-	
    
-	
    
+
    +

    Be aware that the RID parameter is a unsigned 32 bit integer that should normally start at 1000. However, this rid must not overlap with any RID assigned to a user. Verifying this is done differently depending on on the passdb backend you are using. Future versions of the tools may perform the verification automatically, but for now the burden is on you. -

    Example Configuration

    +

    Example Configuration

    You can list the various groups in the mapping database by executing net groupmap list. Here is an example: -

    - 

    +		
    
+		
     		root#  net groupmap list
 		System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -> sysadmin
 		Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -> domadmin
 		Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -> domuser
 		Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -> domguest
-		
    
-		
    
+
    +

    For complete details on net groupmap, refer to the net(8) man page. -

    Configuration Scripts

    +

    Configuration Scripts

    Everyone needs tools. Some of us like to create our own, others prefer to use canned tools (ie: prepared by someone else for general use). -

    Sample smb.conf add group script

    +

    Sample smb.conf add group script

    A script to great complying group names for use by the Samba group interfaces: -

    -

    Example12.1.smbgrpadd.sh

    +		
    
+
    Example12.1.smbgrpadd.sh
     
 #!/bin/bash
 
@@ -4147,17 +4150,17 @@ cat /etc/group.bak | sed s/smbtmpgrp00/$1/g > /etc/group
 # Now return the GID as would normally happen.
 echo $thegid
 exit 0
-
    
-
    
+
    + The smb.conf entry for the above script would look like: - 

    +		
     		add group script = /path_to_tool/smbgrpadd.sh %g
-		
    
-

    Script to configure Group Mapping

    + +

    Script to configure Group Mapping

    In our example we have created a Unix/Linux group called ntadmin. Our script will create the additional groups Engineers, Marketoids, Gnomes: -

    -

    +	
    
+
     #!/bin/bash
 
 net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmin
@@ -4180,16 +4183,16 @@ net groupmap modify ntgroup="Power Users" unixgroup=sys
 #net groupmap add ntgroup="Engineers"  unixgroup=Engineers    type=d
 #net groupmap add ntgroup="Marketoids" unixgroup=Marketoids   type=d
 #net groupmap add ntgroup="Gnomes"     unixgroup=Gnomes       type=d
-
    
-
    
+
    +

    Of course it is expected that the administrator will modify this to suit local needs. For information regarding the use of the net groupmap tool please refer to the man page. -

    Common Errors

    +

    Common Errors

    At this time there are many little surprises for the unwary administrator. In a real sense it is imperative that every step of automated control scripts must be carefully tested manually before putting them into active service. -

    Adding Groups Fails

    +

    Adding Groups Fails

    This is a common problem when the groupadd is called directly by the Samba interface script for the add group script in the smb.conf file. @@ -4203,11 +4206,11 @@ manually before putting them into active service. third option is to manually create a Unix/Linux group account that can substitute for the MS Windows group name, then use the procedure listed above to map that group to the MS Windows group. -

    Adding MS Windows Groups to MS Windows Groups Fails

    +

    Adding MS Windows Groups to MS Windows Groups Fails

    Samba-3 does NOT support nested groups from the MS Windows control environment. -

    Chapter13.File, Directory and Share Access Controls

    John H. Terpstra

    Samba Team

    Jeremy Allison

    Samba Team

    May 10, 2003

    Table of Contents

    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask - parameters
    Interaction with the standard Samba file attribute - mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files +

    Chapter13.File, Directory and Share Access Controls

    John H. Terpstra

    Samba Team

    Jeremy Allison

    Samba Team

    May 10, 2003

    Table of Contents

    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask + parameters
    Interaction with the standard Samba file attribute + mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files I touch!

    Advanced MS Windows users are frequently perplexed when file, directory and share manipulation of resources shared via Samba do not behave in the manner they might expect. MS Windows network @@ -4239,7 +4242,7 @@ that are quite different. It was never the intent to make Unix/Linux like MS Win the purpose was an is to provide a sufficient level of exchange of data between the two environments. What is available today extends well beyond early plans and expectations, yet the gap continues to shrink. -

    Features and Benefits

    +

    Features and Benefits

    Samba offers a lot of flexibility in file system access management. These are the key access control facilities present in Samba today:

    Samba Access Control Facilities

    • @@ -4279,12 +4282,12 @@ shrink. this also. Sadly, few Linux platforms ship today with native ACLs and Extended Attributes enabled. This chapter has pertinent information for users of platforms that support them. -

    File System Access Controls

    +

    File System Access Controls

    Perhaps the most important recognition to be made is the simple fact that MS Windows NT4 / 200x / XP implement a totally divergent file system technology from what is provided in the Unix operating system environment. Firstly we should consider what the most significant differences are, then we shall look at how Samba helps to bridge the differences. -

    MS Windows NTFS Comparison with Unix File Systems

    +

    MS Windows NTFS Comparison with Unix File Systems

    Samba operates on top of the Unix file system. This means it is subject to Unix file system conventions and permissions. It also means that if the MS Windows networking environment requires file system behaviour that differs from unix file system behaviour then somehow Samba is responsible for emulating @@ -4348,19 +4351,19 @@ at how Samba helps to bridge the differences. There are many other subtle differences that may cause the MS Windows administrator some temporary discomfort in the process of becoming familiar with Unix/Linux. These are best left for a text that is dedicated to the purpose of Unix/Linux training/education. -

    Managing Directories

    +

    Managing Directories

    There are three basic operations for managing directories, create, delete, rename. -

    Table13.1.Managing directories with unix and windows

    ActionMS Windows CommandUnix Command
    createmd foldermkdir folder
    deleterd folderrmdir folder
    renamerename oldname newnamemv oldname newname

    -

    File and Directory Access Control

    +

    Table13.1.Managing directories with unix and windows

    ActionMS Windows CommandUnix Command
    createmd foldermkdir folder
    deleterd folderrmdir folder
    renamerename oldname newnamemv oldname newname
    +

    File and Directory Access Control

    The network administrator is strongly advised to read foundational training manuals and reference materials regarding file and directory permissions maintenance. Much can be achieved with the basic Unix permissions without having to resort to more complex facilities like POSIX Access Control Lists (ACLs) or Extended Attributes (EAs). -

    +

    Unix/Linux file and directory access permissions involves setting three (3) primary sets of data and one (1) control set. A Unix file listing looks as follows:- - 

    +	
     	jht@frodo:~/stuff> ls -la
 	total 632
 	drwxr-xr-x   13 jht   users      816 2003-05-12 22:56 .
@@ -4383,13 +4386,13 @@ at how Samba helps to bridge the differences.
 	-rw-rw-rw-    1 jht   users    41105 2003-05-12 22:32 mydata06.lst
 	-rwxrwxrwx    1 jht   users    19312 2003-05-12 22:32 mydata07.lst
 	jht@frodo:~/stuff>
-	
    
-	
    
+
    +

    The columns above represent (from left to right): permissions, no blocks used, owner, group, size (bytes), access date, access time, file name. -

    +

    The permissions field is made up of: - 

    +	
     	 JRV: Put this into a diagram of some sort
 	[ type  ] [ users ] [ group ] [ others ]   [File, Directory Permissions]
 	[ d | l ] [ r w x ] [ r w x ] [ r w x  ]
@@ -4405,17 +4408,17 @@ at how Samba helps to bridge the differences.
 	  |   |     |-----------------------------> Can Read,    Read files
 	  |   |-----------------------------------> Is a symbolic Link
 	  |---------------------------------------> Is a directory
-	
    
-	
    
+
    + Any bit flag may be unset. An unset bit flag is the equivalent of 'Can NOT' and is represented as a '-' character. -

    Example13.1.Example File

    +	
    Example13.1.Example File
     		-rwxr-x---   Means: The owner (user) can read, write, execute
 		                    the group can read and execute
 		                    everyone else can NOT do anything with it
-		
    
+
    -

    +

    Additional possibilities in the [type] field are: c = character device, b = block device, p = pipe device, s = Unix Domain Socket.

    The letters `rwxXst' set permissions for the user, group and others as: read (r), write (w), execute (or access for directories) (x), @@ -4435,10 +4438,10 @@ at how Samba helps to bridge the differences. the (x) execute flags are not set files can not be listed (seen) in the directory by anyone. The group can read files in the directory but can NOT create new files. NOTE: If files in the directory are set to be readable and writable for the group, then group members will be able to write to (or delete) them. -

    Share Definition Access Controls

    +

    Share Definition Access Controls

    The following parameters in the smb.conf file sections that define a share control or affect access controls. Before using any of the following options please refer to the man page for smb.conf. -

    User and Group Based Controls

    +

    User and Group Based Controls

    User and group based controls can prove very useful. In some situations it is distinctly desirable to affect all file system operations as if a single user is doing this, the use of the force user and force group behaviour will achieve this. In other situations it may be necessary to affect a @@ -4450,7 +4453,7 @@ Before using any of the following options please refer to the man page for

    Table13.2.User and Group Based Controls

    Control ParameterDescription - Action - Notes
    admin users

    +

    Table13.2.User and Group Based Controls

    Control ParameterDescription - Action - Notes
    admin users

    List of users who will be granted administrative privileges on the share. They will do all file operations as the super-user (root). Any user in this list will be able to do anything they like on the share, @@ -4477,12 +4480,12 @@ Before using any of the following options please refer to the man page for

    write list

    List of users that are given read-write access to a service. -

    File and Directory Permissions Based Controls

    +

    File and Directory Permissions Based Controls

    The following file and directory permission based controls, if misused, can result in considerable difficulty to diagnose the cause of mis-configuration. Use them sparingly and carefully. By gradually introducing each one by one undesirable side-effects may be detected. In the event of a problem, always comment all of them out and then gradually re-introduce them in a controlled fashion. -

    Table13.3.File and Directory Permission Based Controls

    Control ParameterDescription - Action - Notes
    create mask

    +

    Table13.3.File and Directory Permission Based Controls

    Control ParameterDescription - Action - Notes
    create mask

    Refer to the smb.conf man page.

    directory mask

    The octal modes used when converting DOS modes to UNIX modes when creating UNIX directories. @@ -4505,10 +4508,10 @@ Before using any of the following options please refer to the man page for

    security mask

    Controls UNIX permission bits modified when a Windows NT client is manipulating the UNIX permissions on a file. -

    Miscellaneous Controls

    +

    Miscellaneous Controls

    The following are documented because of the prevalence of administrators creating inadvertant barriers to file access by not understanding the full implications of smb.conf file settings. -

    Table13.4.Other Controls

    Control ParameterDescription - Action - Notes
    case sensitive, default case, short preserve case

    +

    Table13.4.Other Controls

    Control ParameterDescription - Action - Notes
    case sensitive, default case, short preserve case

    This means that all file name lookup will be done in a case sensitive manner. Files will be created with the precise filename Samba received from the MS Windows client.

    csc policy

    @@ -4529,7 +4532,7 @@ Before using any of the following options please refer to the man page for

    veto files

    List of files and directories that are neither visible nor accessible. -

    Access Controls on Shares

    +

    Access Controls on Shares

    This section deals with how to configure Samba per share access control restrictions. By default, Samba sets no restrictions on the share itself. Restrictions on the share itself can be set on MS Windows NT4/200x/XP shares. This can be a very effective way to limit who can @@ -4546,9 +4549,9 @@ Before using any of the following options please refer to the man page for /usr/local/samba/var. If the tdbdump utility has been compiled and installed on your system, then you can examine the contents of this file by: tdbdump share_info.tdb. -

    Share Permissions Management

    +

    Share Permissions Management

    The best tool for the task is platform dependant. Choose the best tool for your environment. -

    Windows NT4 Workstation/Server

    +

    Windows NT4 Workstation/Server

    The tool you need to use to manage share permissions on a Samba server is the NT Server Manager. Server Manager is shipped with Windows NT4 Server products but not with Windows NT4 Workstation. You can obtain the NT Server Manager for MS Windows NT4 Workstation from Microsoft - see details below. @@ -4558,7 +4561,7 @@ Before using any of the following options please refer to the man page for

  • Now click on the share that you wish to manage, then click on the Properties tab, next click on the Permissions tab. Now you can add or change access control settings as you wish. -

    • Windows 200x/XP

    +

    Windows 200x/XP

    On MS Windows NT4/200x/XP system access control lists on the share itself are set using native tools, usually from filemanager. For example, in Windows 200x: right click on the shared folder, then select Sharing, then click on Permissions. The default @@ -4587,7 +4590,7 @@ Before using any of the following options please refer to the man page for no access means that MaryK who is part of the group Everyone will have no access even if this user is given explicit full control access. -

    MS Windows Access Control Lists and Unix Interoperability

    Managing UNIX permissions Using NT Security Dialogs

    Windows NT clients can use their native security settings +

    MS Windows Access Control Lists and Unix Interoperability

    Managing UNIX permissions Using NT Security Dialogs

    Windows NT clients can use their native security settings dialog box to view and modify the underlying UNIX permissions.

    Note that this ability is careful not to compromise the security of the UNIX host Samba is running on, and still obeys all the file permission rules that a Samba @@ -4598,7 +4601,7 @@ Before using any of the following options please refer to the man page for

    Viewing File Security on a Samba Share

    From an NT4/2000/XP client, single-click with the right +

    Viewing File Security on a Samba Share

    From an NT4/2000/XP client, single-click with the right mouse button on any file or directory in a Samba mounted drive letter or UNC path. When the menu pops-up, click on the Properties entry at the bottom of @@ -4614,7 +4617,7 @@ Before using any of the following options please refer to the man page for Add button will not currently - allow a list of users to be seen.

    Viewing file ownership

    Clicking on the Ownership button + allow a list of users to be seen.

    Viewing file ownership

    Clicking on the Ownership button brings up a dialog box telling you who owns the given file. The owner name will be of the form :

    "SERVER\user (Long name)"

    Where SERVER is the NetBIOS name of the Samba server, user is the user name of @@ -4637,7 +4640,7 @@ Before using any of the following options please refer to the man page for Seclib NT security library written by Jeremy Allison of - the Samba Team, available from the main Samba ftp site.

    Viewing File or Directory Permissions

    The third button is the Permissions + the Samba Team, available from the main Samba ftp site.

    Viewing File or Directory Permissions

    The third button is the Permissions button. Clicking on this brings up a dialog box that shows both the permissions and the UNIX owner of the file or directory. The owner is displayed in the form :

    "SERVER\ @@ -4651,7 +4654,7 @@ Before using any of the following options please refer to the man page for "Everyone" and the permissions will be shown as NT "Full Control".

    The permissions field is displayed differently for files and directories, so I'll describe the way file permissions - are displayed first.

    File Permissions

    The standard UNIX user/group/world triplet and + are displayed first.

    File Permissions

    The standard UNIX user/group/world triplet and the corresponding "read", "write", "execute" permissions triplets are mapped by Samba into a three element NT ACL with the 'r', 'w', and 'x' bits mapped into the corresponding @@ -4673,7 +4676,7 @@ Before using any of the following options please refer to the man page for "O" bit set. This was chosen of course to make it look like a zero, meaning zero permissions. More details on the decision behind this will - be given below.

    Directory Permissions

    Directories on an NT NTFS file system have two + be given below.

    Directory Permissions

    Directories on an NT NTFS file system have two different sets of permissions. The first set of permissions is the ACL set on the directory itself, this is usually displayed in the first set of parentheses in the normal "RW" @@ -4684,7 +4687,7 @@ Before using any of the following options please refer to the man page for permissions that any file created within this directory would inherit.

    Samba synthesises these inherited permissions for NT by returning as an NT ACL the UNIX permission mode that a new file - created by Samba on this share would receive.

    Modifying file or directory permissions

    Modifying file and directory permissions is as simple + created by Samba on this share would receive.

    Modifying file or directory permissions

    Modifying file and directory permissions is as simple as changing the displayed permissions in the dialog box, and clicking the OK button. However, there are limitations that a user needs to be aware of, and also interactions @@ -4718,14 +4721,14 @@ Before using any of the following options please refer to the man page for Remove button, or set the component to only have the special Take Ownership permission (displayed as "O" - ) highlighted.

    Interaction with the standard Samba create mask - parameters

    There are four parameters + ) highlighted.

    Interaction with the standard Samba create mask + parameters

    There are four parameters to control interaction with the standard Samba create mask parameters. These are : -

    security mask
    force security mode
    directory security mask
    force directory security mode

    +
    security mask
    force security mode
    directory security mask
    force directory security mode
    -

    Once a user clicks OK to apply the +

    Once a user clicks OK to apply the permissions Samba maps the given permissions into a user/group/world r/w/x triplet set, and then will check the changed permissions for a file against the bits set in the @@ -4765,7 +4768,7 @@ Before using any of the following options please refer to the man page for smb.conf file in that share specific section : -

    security mask = 0777
    force security mode = 0
    directory security mask = 0777
    force directory security mode = 0

    Interaction with the standard Samba file attribute +

    security mask = 0777
    force security mode = 0
    directory security mask = 0777
    force directory security mode = 0

    Interaction with the standard Samba file attribute mapping

    Samba maps some of the DOS attribute bits (such as "read only") into the UNIX permissions of a file. This means there can be a conflict between the permission bits set via the security @@ -4782,10 +4785,10 @@ Before using any of the following options please refer to the man page for OK to get back to the attributes dialog you should always hit Cancel rather than OK to ensure that your changes - are not overridden.

    Common Errors

    + are not overridden.

    Common Errors

    File, Directory and Share access problems are very common on the mailing list. The following are examples taken from the mailing list in recent times. -

    Users can not write to a public share

    +

    Users can not write to a public share

    “ We are facing some troubles with file / directory permissions. I can log on the domain as admin user(root), and there's a public share, on which everyone needs to have permission to create / modify files, but only @@ -4796,78 +4799,78 @@ are examples taken from the mailing list in recent times. There are many ways to solve this problem, here are a few hints:

    Procedure13.3.Example Solution:

    1. Go to the top of the directory that is shared -

    2. +

    3. Set the ownership to what ever public owner and group you want - 

      +			
       			find 'directory_name' -type d -exec chown user.group {}\;
 			find 'directory_name' -type d -exec chmod 6775 'directory_name'
 			find 'directory_name' -type f -exec chmod 0775 {} \;
 			find 'directory_name' -type f -exec chown user.group {}\;
-			
      
-			
      Note
      
+
      +

      Note

      The above will set the 'sticky bit' on all directories. Read your Unix/Linux man page on what that does. It causes the OS to assign to all files created in the directories the ownership of the directory. -

    4. +

  • Directory is: /foodbar - 

    +			
     				$ chown jack.engr /foodbar
-			
    
-			
    Note
    
-				
    This is the same as doing:
    
-				
    +			
    
+			
    Note
    
+				
    This is the same as doing:
    
+				
     					$ chown jack /foodbar
 					$ chgrp engr /foodbar
-				
    
-

  • Now do: + +

  • Now do: - 

    +			
     				$ chmod 6775 /foodbar
 				$ ls -al /foodbar/..
-			
    
+
    -

    You should see: - 

    +			You should see:
+			
     				drwsrwsr-x  2 jack  engr    48 2003-02-04 09:55 foodbar
-			
    
-

  • Now do: - 

    +
    +
  • Now do: + 
     				$ su - jill
 				$ cd /foodbar
 				$ touch Afile
 				$ ls -al
-

    -

    + + You should see that the file Afile created by Jill will have ownership and permissions of Jack, as follows: - 

    +		
     		-rw-r--r--  1 jack  engr     0 2003-02-04 09:57 Afile
-		
    
-

  • + +

  • Now in your smb.conf for the share add: - 

    +		
     		force create mode = 0775
 		force directory mode = 6775
-		
    
-		
    Note
    
+
    +

    Note

    The above are only needed if your users are not members of the group you have used. ie: Within the OS do not have write permission on the directory. -

    +

    • An alternative is to set in the smb.conf entry for the share: - 

    +		
     		force user = jack
 		force group = engr
-		
    
-

    I have set force user and Samba still makes root the owner of all the files + +

    I have set force user and Samba still makes root the owner of all the files I touch!

    When you have a user in 'admin users', Samba will always do file operations for this user as root, even if force user has been set. -

    Chapter14.File and Record Locking

    Jeremy Allison

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Eric Roseme

    HP Oplocks Usage Recommendations Whitepaper

    Table of Contents

    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading

    +

    Chapter14.File and Record Locking

    Jeremy Allison

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Eric Roseme

    HP Oplocks Usage Recommendations Whitepaper

    Table of Contents

    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading

    One area which causes trouble for many network administrators is locking. The extent of the problem is readily evident from searches over the internet. -

    Features and Benefits

    +

    Features and Benefits

    Samba provides all the same locking semantics that MS Windows clients expect and that MS Windows NT4 / 200x servers provide also.

    @@ -4889,13 +4892,13 @@ settings on the MS Windows client.

    Note

    Sometimes it is necessary to disable locking control settings BOTH on the Samba server as well as on each MS Windows client! -

    Discussion

    +

    Discussion

    There are two types of locking which need to be performed by a SMB server. The first is record locking which allows a client to lock a range of bytes in a open file. The second is the deny modes that are specified when a file is open.

    -Record locking semantics under Unix is very different from record locking under +Record locking semantics under Unix are very different from record locking under Windows. Versions of Samba before 2.2 have tried to use the native fcntl() unix system call to implement proper record locking between different Samba clients. This can not be fully correct due to several reasons. The simplest is the fact @@ -4917,7 +4920,7 @@ important to them. By default Samba only makes locking calls when explicitly ask to by a client, but if you set strict locking = yes then it will make lock checking calls on every read and write.

    -You can also disable by range locking completely using locking = no. +You can also disable byte range locking completely using locking = no. This is useful for those shares that don't support locking or don't need it (such as cdroms). In this case Samba fakes the return codes of locking calls to tell clients that everything is OK. @@ -4928,7 +4931,7 @@ access should be allowed simultaneously with its open. A client may ask for DENY_NONE, DENY_READ, DENY_WRITE or DENY_ALL. There are also special compatibility modes called DENY_FCB and DENY_DOS. -

    Opportunistic Locking Overview

    +

    Opportunistic Locking Overview

    Opportunistic locking (Oplocks) is invoked by the Windows file system (as opposed to an API) via registry entries (on the server AND client) for the purpose of enhancing network performance when accessing a file @@ -5051,7 +5054,7 @@ In mission critical high availability environments, careful attention should be given to opportunistic locking. Ideally, comprehensive testing should be done with all affected applications with oplocks enabled and disabled. -

    Exclusively Accessed Shares

    +

    Exclusively Accessed Shares

    Opportunistic locking is most effective when it is confined to shares that are exclusively accessed by a single user, or by only one user at a time. Because the true value of opportunistic locking is the local @@ -5060,7 +5063,7 @@ mechanism will cause a delay.

    Home directories are the most obvious examples of where the performance benefit of opportunistic locking can be safely realized. -

    Multiple-Accessed Shares or Files

    +

    Multiple-Accessed Shares or Files

    As each additional user accesses a file in a share with opportunistic locking enabled, the potential for delays and resulting perceived poor performance increases. When multiple users are accessing a file on a @@ -5072,7 +5075,7 @@ of the caching user. As each additional client attempts to access a file with oplocks set, the potential performance improvement is negated and eventually results in a performance bottleneck. -

    Unix or NFS Client Accessed Files

    +

    Unix or NFS Client Accessed Files

    Local Unix and NFS clients access files without a mandatory file locking mechanism. Thus, these client platforms are incapable of initiating an oplock break request from the server to a Windows client @@ -5082,7 +5085,7 @@ exposes the file to likely data corruption.

    If files are shared between Windows clients, and either local Unix or NFS users, then turn opportunistic locking off. -

    Slow and/or Unreliable Networks

    +

    Slow and/or Unreliable Networks

    The biggest potential performance improvement for opportunistic locking occurs when the client-side caching of reads and writes delivers the most differential over sending those reads and writes over the wire. @@ -5097,7 +5100,7 @@ the most advantageous scenario to utilize opportunistic locking. If the network is slow, unreliable, or a WAN, then do not configure opportunistic locking if there is any chance of multiple users regularly opening the same file. -

    Multi-User Databases

    +

    Multi-User Databases

    Multi-user databases clearly pose a risk due to their very nature - they are typically heavily accessed by numerous users at random intervals. Placing a multi-user database on a share with opportunistic @@ -5105,7 +5108,7 @@ locking enabled will likely result in a locking management bottleneck on the Samba server. Whether the database application is developed in-house or a commercially available product, ensure that the share has opportunistic locking disabled. -

    PDM Data Shares

    +

    PDM Data Shares

    Process Data Management (PDM) applications such as IMAN, Enovia, and Clearcase, are increasing in usage with Windows client platforms, and therefore SMB data stores. PDM applications manage multi-user @@ -5118,7 +5121,7 @@ application and PDM server to negotiate and maintain. It is appropriate to eliminate the client OS from any caching tasks, and the server from any oplock management, by disabling opportunistic locking on the share. -

    Beware of Force User

    +

    Beware of Force User

    Samba includes an smb.conf parameter called force user that changes the user accessing a share from the incoming user to whatever user is defined by the smb.conf variable. If opportunistic locking is enabled @@ -5136,7 +5139,7 @@ Avoid the combination of the following: Slow or unreliable networks

  • Opportunistic Locking Enabled -

    • Advanced Samba Opportunistic Locking Parameters

    +

    Advanced Samba Opportunistic Locking Parameters

    Samba provides opportunistic locking parameters that allow the administrator to adjust various properties of the oplock mechanism to account for timing and usage levels. These parameters provide good @@ -5150,7 +5153,7 @@ are required, then the better option is to simply turn oplocks off. The samba SWAT help text for both parameters reads "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." This is good advice. -

    Mission Critical High Availability

    +

    Mission Critical High Availability

    In mission critical high availability environments, data integrity is often a priority. Complex and expensive configurations are implemented to ensure that if a client loses connectivity with a file server, a @@ -5180,7 +5183,7 @@ In mission critical high availability environments, careful attention should be given to opportunistic locking. Ideally, comprehensive testing should be done with all affected applications with oplocks enabled and disabled. -

    Samba Opportunistic Locking Control

    +

    Samba Opportunistic Locking Control

    Opportunistic Locking is a unique Windows file locking feature. It is not really file locking, but is included in most discussions of Windows file locking, so is considered a defacto locking feature. @@ -5230,29 +5233,29 @@ of your client sending oplock breaks and will instead want to disable oplocks fo

    Another factor to consider is the perceived performance of file access. If oplocks provide no measurable speed benefit on your network, it might not be worth the hassle of dealing with them. -

    Example Configuration

    +

    Example Configuration

    In the following we examine two distinct aspects of Samba locking controls. -

    Disabling Oplocks

    +

    Disabling Oplocks

    You can disable oplocks on a per-share basis with the following: -

    -

    +
    
+
     [acctdata]
 	oplocks = False
 	level2 oplocks = False
-
    
-
    
+
    +

    The default oplock type is Level1. Level2 Oplocks are enabled on a per-share basis in the smb.conf file.

    Alternately, you could disable oplocks on a per-file basis within the share: -

    -

    +
    
+
     	veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/
-
    
-
    
+
    +

    If you are experiencing problems with oplocks as apparent from Samba's log entries, you may want to play it safe and disable oplocks and level2 oplocks. -

    Disabling Kernel OpLocks

    +

    Disabling Kernel OpLocks

    Kernel OpLocks is an smb.conf parameter that notifies Samba (if the UNIX kernel has the capability to send a Windows client an oplock break) when a UNIX process is attempting to open the file that is @@ -5264,13 +5267,13 @@ to the risk of data corruption. If the UNIX kernel has the ability to send an oplock break, then the kernel oplocks parameter enables Samba to send the oplock break. Kernel oplocks are enabled on a per-server basis in the smb.conf file. -

    -

    +
    
+
     [global]
 kernel oplocks = yes
-
    
+
    The default is "no". -

    +

    Veto OpLocks is an smb.conf parameter that identifies specific files for which Oplocks are disabled. When a Windows client opens a file that has been configured for veto oplocks, the client will not be granted @@ -5282,26 +5285,26 @@ allow Windows clients to utilize the performance benefit of file caching without the risk of data corruption. Veto Oplocks can be enabled on a per-share basis, or globally for the entire server, in the smb.conf file: -

    -

    <title>Example Veto OpLock Settings</title>
+
    
+
    <title>Example Veto OpLock Settings</title>
 [global]
         veto oplock files = /filename.htm/*.txt/
 
 [share_name]
         veto oplock files = /*.exe/filename.ext/
-
    
-
    
+
    +

    Oplock break wait time is an smb.conf parameter that adjusts the time interval for Samba to reply to an oplock break request. Samba recommends "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." Oplock Break Wait Time can only be configured globally in the smb.conf file: -

    -

    +
    
+
     [global]
           oplock break wait time =  0 (default)
-
    
-
    
+
    +

    Oplock break contention limit is an smb.conf parameter that limits the response of the Samba server to grant an oplock if the configured number of contending clients reaches the limit specified by the @@ -5309,15 +5312,15 @@ parameter. Samba recommends "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." Oplock Break Contention Limit can be enable on a per-share basis, or globally for the entire server, in the smb.conf file: -

    -

    +
    
+
     [global]
           oplock break contention limit =  2 (default)
 
 [share_name]
          oplock break contention limit =  2 (default)
-
    
-

    MS Windows Opportunistic Locking and Caching Controls

    + +

    MS Windows Opportunistic Locking and Caching Controls

    There is a known issue when running applications (like Norton Anti-Virus) on a Windows 2000/ XP workstation computer that can affect any application attempting to access shared database files across a network. This is a result of a default setting configured in the Windows 2000/XP @@ -5354,20 +5357,20 @@ Windows 2000 will still respect the EnableOplocks registry value used to disable in earlier versions of Windows.

    You can also deny the granting of opportunistic locks by changing the following registry entries: -

    -

    +
    
+
     	HKEY_LOCAL_MACHINE\System\
 		CurrentControlSet\Services\MRXSmb\Parameters\
 
 		OplocksDisabled REG_DWORD 0 or 1
 		Default: 0 (not disabled)
-
    
-
    Note
    
+
    +

    Note

    The OplocksDisabled registry value configures Windows clients to either request or not request opportunistic locks on a remote file. To disable oplocks, the value of OplocksDisabled must be set to 1. -

    -

    +
    +
     	HKEY_LOCAL_MACHINE\System\
 		CurrentControlSet\Services\LanmanServer\Parameters
 
@@ -5376,8 +5379,8 @@ request opportunistic locks on a remote file. To disable oplocks, the value of
 
 		EnableOpLockForceClose REG_DWORD 0 or 1
 		Default: 0 (Disabled by Default)
-

    -

    Note

    + +

    Note

    The EnableOplocks value configures Windows-based servers (including Workstations sharing files) to allow or deny opportunistic locks on local files.

    @@ -5409,7 +5412,7 @@ An illustration of how level II oplocks work: station holds any oplock on the file. Because the workstations can have no cached writes or locks at this point, they need not respond to the break-to-none advisory; all they need do is invalidate locally cashed read-ahead data. -

    Workstation Service Entries

    +

    Workstation Service Entries

     	\HKEY_LOCAL_MACHINE\System\
 		CurrentControlSet\Services\LanmanWorkstation\Parameters
 
@@ -5418,7 +5421,7 @@ An illustration of how level II oplocks work:

    Indicates whether the redirector should use opportunistic-locking (oplock) performance enhancement. This parameter should be disabled only to isolate problems. -

    Server Service Entries

    +

    Server Service Entries

     	\HKEY_LOCAL_MACHINE\System\
 		CurrentControlSet\Services\LanmanServer\Parameters
 
@@ -5447,7 +5450,7 @@ the server disables raw I/O and opportunistic locking for this connection.
 Specifies the time that the server waits for a client to respond to an oplock break
 request. Smaller values can allow detection of crashed clients more quickly but can
 potentially cause loss of cached data.
-

    Persistent Data Corruption

    +

    Persistent Data Corruption

    If you have applied all of the settings discussed in this paper but data corruption problems and other symptoms persist, here are some additional things to check out:

    @@ -5458,7 +5461,7 @@ rebuild the data files in question. This involves creating a new data file with same definition as the file to be rebuilt and transferring the data from the old file to the new one. There are several known methods for doing this that can be found in our Knowledge Base. -

    Common Errors

    +

    Common Errors

    In some sites locking problems surface as soon as a server is installed, in other sites locking problems may not surface for a long time. Almost without exception, when a locking problem does surface it will cause embarrassment and potential data corruption. @@ -5488,18 +5491,18 @@ so far: report on https://bugzilla.samba.org without delay. Make sure that you give as much information as you possibly can to help isolate the cause and to allow reproduction of the problem (an essential step in problem isolation and correction). -

    locking.tdb error messages

    - 

    +

    locking.tdb error messages

    + 
     	> We are seeing lots of errors in the samba logs like:
 	>
 	>    tdb(/usr/local/samba_2.2.7/var/locks/locking.tdb): rec_read bad magic
 	> 0x4d6f4b61 at offset=36116
 	>
 	> What do these mean?
-

    -

    + +

    Corrupted tdb. Stop all instances of smbd, delete locking.tdb, restart smbd. -

    Additional Reading

    +

    Additional Reading

    You may want to check for an updated version of this white paper on our Web site from time to time. Many of our white papers are updated as information changes. For those papers, the Last Edited date is always at the top of the paper. @@ -5519,7 +5522,7 @@ Microsoft Corporation, April 2001, http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202. -

    Chapter15.Securing Samba

    Andrew Tridgell

    Samba Team

    John H. Terpstra

    Samba Team

    May 26, 2003

    Table of Contents

    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?

    Introduction

    +

    Chapter15.Securing Samba

    Andrew Tridgell

    Samba Team

    John H. Terpstra

    Samba Team

    May 26, 2003

    Table of Contents

    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?

    Introduction

    This note was attached to the Samba 2.2.8 release notes as it contained an important security fix. The information contained here applies to Samba installations in general. @@ -5531,7 +5534,7 @@ on it!" Security concerns are just like that: You need to know a little about the subject to appreciate how obvious most of it really is. The challenge for most of us is to discover that first morsel of knowledge with which we may unlock the secrets of the masters. -

    Features and Benefits

    +

    Features and Benefits

    There are three level at which security principals must be observed in order to render a site at least moderately secure. These are: the perimeter firewall, the configuration of the host server that is running Samba, and Samba itself. @@ -5550,13 +5553,13 @@ TCP/IP connections. Another method by which Samba may be secured is by way of setting Access Control Entries in an Access Control List on the shares themselves. This is discussed in the chapter on File, Directory and Share Access Control. -

    Technical Discussion of Protective Measures and Issues

    +

    Technical Discussion of Protective Measures and Issues

    The key challenge of security is the fact that protective measures suffice at best only to close the door on known exploits and breach techniques. Never assume that because you have followed these few measures that the Samba server is now an impenetrable fortress! Given the history of information systems so far, it is only a matter of time before someone will find yet another vulnerability. -

    Using host based protection

    +

    Using host based protection

    In many installations of Samba the greatest threat comes for outside your immediate network. By default Samba will accept connections from any host, which means that if you run an insecure version of Samba on @@ -5576,7 +5579,7 @@ before someone will find yet another vulnerability. 192.168.3. All other connections will be refused as soon as the client sends its first packet. The refusal will be marked as a not listening on called name error. -

    User based protection

    +

    User based protection

    If you want to restrict access to your server to valid users only then the following method may be of use. In the smb.conf [globals] section put: 

    @@ -5584,7 +5587,7 @@ before someone will find yet another vulnerability.

    What this does is, it restricts all server access to either the user jacko or to members of the system group smbusers. -

    Using interface protection

    +

    Using interface protection

    By default Samba will accept connections on any network interface that it finds on your system. That means if you have a ISDN line or a PPP connection to the Internet then Samba will accept connections on those @@ -5606,7 +5609,7 @@ before someone will find yet another vulnerability. connection refused reply. In that case no Samba code is run at all as the operating system has been told not to pass connections from that interface to any samba process. -

    Using a firewall

    +

    Using a firewall

    Many people use a firewall to deny access to services that they don't want exposed outside their network. This can be a very good idea, although I would recommend using it in conjunction with the above @@ -5619,7 +5622,7 @@ before someone will find yet another vulnerability. The last one is important as many older firewall setups may not be aware of it, given that this port was only added to the protocol in recent years. -

    Using a IPC$ share deny

    +

    Using a IPC$ share deny

    If the above methods are not suitable, then you could also place a more specific deny on the IPC$ share that is used in the recently discovered security hole. This allows you to offer access to other @@ -5646,10 +5649,10 @@ before someone will find yet another vulnerability.

    This is not recommended unless you cannot use one of the other methods listed above for some reason. -

    NTLMv2 Security

    +

    NTLMv2 Security

    To configure NTLMv2 authentication the following registry keys are worth knowing about: -

    - 

    +	
    
+	
     		[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
 		"lmcompatibilitylevel"=dword:00000003
 
@@ -5663,25 +5666,25 @@ before someone will find yet another vulnerability.
 		0x80000 - NTLMv2 session security. If either NtlmMinClientSec or
 		NtlmMinServerSec is set to 0x80000, the connection will fail if NTLMv2
 		session security is not negotiated.
-	
    
-

    Upgrading Samba

    + +

    Upgrading Samba

    Please check regularly on http://www.samba.org/ for updates and important announcements. Occasionally security releases are made and it is highly recommended to upgrade Samba when a security vulnerability is discovered. -

    Common Errors

    +

    Common Errors

    If all of samba and host platform configuration were really as intuitive as one might like then this section would not be necessary. Security issues are often vexing for a support person to resolve, not because of the complexity of the problem, but for reason that most administrators who post what turns out to be a security problem request are totally convinced that the problem is with Samba. -

    Smbclient works on localhost, but the network is dead

    +

    Smbclient works on localhost, but the network is dead

    This is a very common problem. Red Hat Linux (as do others) will install a default firewall. With the default firewall in place only traffic on the loopback adapter (IP address 127.0.0.1) will be allowed through the firewall.

    The solution is either to remove the firewall (stop it) or to modify the firewall script to allow SMB networking traffic through. See section above in this chapter. -

    Why can users access home directories of other users?

    +

    Why can users access home directories of other users?

    “ We are unable to keep individual users from mapping to any other user's home directory once they have supplied a valid password! They only need @@ -5712,25 +5715,25 @@ out to be a security problem request are totally convinced that the problem is w Samba does allow the setup you require when you have set the only user = yes option on the share, is that you have not set the valid users list for the share. -

    +

    Note that only user works in conjunction with the users= list, so to get the behavior you require, add the line : - 

    +	
     	users = %S
-	
    
+
    this is equivalent to: - 

    +	
     	valid users = %S
-	
    
+
    to the definition of the [homes] share, as recommended in the smb.conf man page. -

    Chapter16.Interdomain Trust Relationships

    John H. Terpstra

    Samba Team

    Rafal Szczesniak

    Samba Team

    April 3, 2003

    Table of Contents

    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba

    +

    Chapter16.Interdomain Trust Relationships

    John H. Terpstra

    Samba Team

    Rafal Szczesniak

    Samba Team

    April 3, 2003

    Table of Contents

    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba

    Samba-3 supports NT4 style domain trust relationships. This is feature that many sites will want to use if they migrate to Samba-3 from and NT4 style domain and do NOT want to adopt Active Directory or an LDAP based authentication back end. This section explains some background information regarding trust relationships and how to create them. It is now possible for Samba-3 to NT4 trust (and vice versa), as well as Samba3 to Samba3 trusts. -

    Features and Benefits

    +

    Features and Benefits

    Samba-3 can participate in Samba-to-Samba as well as in Samba-to-MS Windows NT4 style trust relationships. This imparts to Samba similar scalability as is possible with MS Windows NT4. @@ -5740,7 +5743,7 @@ database such as LDAP, and given it's ability to run in Primary as well as Backu modes, the administrator would be well advised to consider alternatives to the use of Interdomain trusts simply because by the very nature of how this works it is fragile. That was, after all, a key reason for the development and adoption of Microsoft Active Directory. -

    Trust Relationship Background

    +

    Trust Relationship Background

    MS Windows NT3.x/4.0 type security domains employ a non-hierarchical security structure. The limitations of this architecture as it affects the scalability of MS Windows networking in large organisations is well known. Additionally, the flat-name space that results from @@ -5775,9 +5778,9 @@ domains above, with Windows 2000 and ADS the RED and BLUE domains CAN trust each an inherent feature of ADS domains. Samba-3 implements MS Windows NT4 style Interdomain trusts and interoperates with MS Windows 200x ADS security domains in similar manner to MS Windows NT4 style domains. -

    Native MS Windows NT4 Trusts Configuration

    +

    Native MS Windows NT4 Trusts Configuration

    There are two steps to creating an interdomain trust relationship. -

    NT4 as the Trusting Domain (ie. creating the trusted account)

    +

    NT4 as the Trusting Domain (ie. creating the trusted account)

    For MS Windows NT4, all domain trust relationships are configured using the Domain User Manager. To affect a two way trust relationship it is necessary for each domain administrator to make available (for use by an external domain) it's @@ -5789,14 +5792,14 @@ button will open a panel in which needs to be entered the remote domain that wil user rights to your domain. In addition it is necessary to enter a password that is specific to this trust relationship. The password needs to be typed twice (for standard confirmation). -

    NT4 as the Trusted Domain (ie. creating trusted account's password)

    +

    NT4 as the Trusted Domain (ie. creating trusted account's password)

    A trust relationship will work only when the other (trusting) domain makes the appropriate connections with the trusted domain. To consummate the trust relationship the administrator will launch the Domain User Manager, from the menu select Policies, then select Trust Relationships, then click on the Add button that is next to the box that is labelled Trusted Domains. A panel will open in which must be entered the name of the remote domain as well as the password assigned to that trust. -

    Configuring Samba NT-style Domain Trusts

    +

    Configuring Samba NT-style Domain Trusts

    This description is meant to be a fairly short introduction about how to set up a Samba server so that it could participate in interdomain trust relationships. Trust relationship support in Samba is in its early stage, so lot of things don't work yet. @@ -5805,25 +5808,25 @@ Each of the procedures described below is treated as they were performed with Wi one end. The remote end could just as well be another Samba-3 domain. It can be clearly seen, after reading this document, that combining Samba-specific parts of what's written below leads to trust between domains in purely Samba environment. -

    Samba-3 as the Trusting Domain

    +

    Samba-3 as the Trusting Domain

    In order to set the Samba PDC to be the trusted party of the relationship first you need to create special account for the domain that will be the trusting party. To do that, you can use the 'smbpasswd' utility. Creating the trusted domain account is very similar to creating a trusted machine account. Suppose, your domain is called SAMBA, and the remote domain is called RUMBA. The first step will be to issue this command from your favourite shell: -

    -

    +
    
+
     root#  smbpasswd -a -i rumba
 	New SMB password: XXXXXXXX
 	Retype SMB password: XXXXXXXX
 	Added user rumba$
-
    
+
    where -a means to add a new account into the passdb database and -i means: ''create this account with the InterDomain trust flag'' -

    +

    The account name will be 'rumba$' (the name of the remote domain)

    After issuing this command you'll be asked to enter the password for @@ -5843,7 +5846,7 @@ your domain name, and the password used at the time of account creation. Press OK and, if everything went without incident, you will see Trusted domain relationship successfully established message. -

    Samba-3 as the Trusted Domain

    +

    Samba-3 as the Trusted Domain

    This time activities are somewhat reversed. Again, we'll assume that your domain controlled by the Samba PDC is called SAMBA and NT-controlled domain is called RUMBA.

    @@ -5874,11 +5877,11 @@ Congratulations! Your trust relationship has just been established.

    Note

    Note that you have to run this command as root because you must have write access to the secrets.tdb file. -

    Common Errors

    +

    Common Errors

    Interdomain trust relationships should NOT be attempted on networks that are unstable or that suffer regular outages. Network stability and integrity are key concerns with distributed trusted domains. -

    Tell me about Trust Relationships using Samba

    +

    Tell me about Trust Relationships using Samba

    Like many, I administer multiple LANs connected together using NT trust relationships. This was implemented about 4 years ago. I now have the occasion to consider performing this same task again, but this time, I @@ -5900,7 +5903,7 @@ distributed trusted domains. details.

    Chapter17.Hosting a Microsoft Distributed File System tree on Samba

    Shirish Kalele

    Samba Team & Veritas Software



    -

    12 Jul 2000

    Table of Contents

    Features and Benefits
    Common Errors

    Features and Benefits

    +

    12 Jul 2000

    Table of Contents

    Features and Benefits
    Common Errors

    Features and Benefits

    The Distributed File System (or DFS) provides a means of separating the logical view of files and directories that users see from the actual physical locations of these resources on the network. It allows for higher availability, smoother @@ -5952,17 +5955,17 @@ distributed trusted domains. network shares you want, and start Samba.

    Users on DFS-aware clients can now browse the DFS tree on the Samba server at \\samba\dfs. Accessing links linka or linkb (which appear as directories to the client) - takes users directly to the appropriate shares on the network.

    Common Errors

    • Windows clients need to be rebooted + takes users directly to the appropriate shares on the network.

    Common Errors

    • Windows clients need to be rebooted if a previously mounted non-dfs share is made a dfs root or vice versa. A better way is to introduce a new share and make it the dfs root.

    • Currently there's a restriction that msdfs symlink names should all be lowercase.

    • For security purposes, the directory acting as the root of the DFS tree should have ownership and permissions set so that only designated users can - modify the symbolic links in the directory.

    Chapter18.Classical Printing Support

    Kurt Pfeifle

    Danka Deutschland GmbH

    Gerald (Jerry) Carter

    Samba Team

    May 32, 2003

    Table of Contents

    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with -rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a -different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost

    Features and Benefits

    + modify the symbolic links in the directory.

    Chapter18.Classical Printing Support

    Kurt Pfeifle

    Danka Deutschland GmbH

    Gerald (Jerry) Carter

    Samba Team

    May 32, 2003

    Table of Contents

    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with +rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a +different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost

    Features and Benefits

    Printing is often a mission-critical service for the users. Samba can provide this service reliably and seamlessly for a client network consisting of Windows workstations. @@ -5998,7 +6001,7 @@ Professional clients. Where this document describes the responses to commands given, bear in mind that Windows 2000 clients are very similar, but may differ in details. Windows NT is somewhat different again. -

    Technical Introduction

    +

    Technical Introduction

    Samba's printing support always relies on the installed print subsystem of the Unix OS it runs on. Samba is a "middleman". It takes printfiles from Windows (or other SMB) clients and passes them to the @@ -6013,10 +6016,10 @@ the next chapter covers in great detail the more modern Common UNIX Printing System (CUPS). -

    Important

    CUPS users, be warned: don't just jump on to the next +

    Important

    CUPS users, be warned: don't just jump on to the next chapter. You might miss important information contained only -here!

    -

    What happens if you send a Job from a Client

    +here!

    +

    What happens if you send a Job from a Client

    To successfully print a job from a Windows client via a Samba print server to a UNIX printer, there are 6 (potentially 7) stages: @@ -6024,7 +6027,7 @@ stages: into Samba's spooling area

  • Windows closes the connection again

  • Samba invokes the print command to hand the file over to the UNIX print subsystem's spooling area

  • The Unix print subsystem processes the print job

  • The printfile may need to be explicitly deleted -from the Samba spooling area.

    • Printing Related Configuration Parameters

    +from the Samba spooling area.

    Printing Related Configuration Parameters

    There are a number of configuration parameters in controlling Samba's printing behaviour. Please also refer to the man page for smb.conf to @@ -6038,20 +6041,20 @@ behaviour of all individual or service level shares (provided those don't have a different setting defined for the same parameter, thus overriding the global default).

    Global Parameters

    These may not go into individual shares. If they go in by error, the "testparm" utility can discover -this (if you run it) and tell you so.

    Parameters Recommended for Use

    The following smb.conf parameters directly +this (if you run it) and tell you so.

    Parameters Recommended for Use

    The following smb.conf parameters directly related to printing are used in Samba-3. See also the smb.conf man page for detailed explanations: -

    List of printing related parameters in Samba-3. -

    Global level parameters:

    • addprinter command (G)

    • deleteprinter command (G)

    • disable spoolss (G)

    • enumports command (G)

    • load printers (G)

    • lpq cache time (G)

    • os2 driver map (G)

    • printcap name (G), printcap (G)

    • show add printer wizard (G)

    • total print jobs (G)

    • use client driver (G)

    +

    List of printing related parameters in Samba-3. +

    Global level parameters:

    • addprinter command (G)

    • deleteprinter command (G)

    • disable spoolss (G)

    • enumports command (G)

    • load printers (G)

    • lpq cache time (G)

    • os2 driver map (G)

    • printcap name (G), printcap (G)

    • show add printer wizard (G)

    • total print jobs (G)

    • use client driver (G)

    -

    Service level parameters:

    • hosts allow (S)

    • hosts deny (S)

    • lppause command (S)

    • lpq command (S)

    • lpresume command (S)

    • lprm command (S)

    • max print jobs (S)

    • min print space (S)

    • print command (S)

    • printable (S), print ok (S)

    • printer name (S), printer (S)

    • printer admin (S)

    • printing = [cups|bsd|lprng...] (S)

    • queuepause command (S)

    • queueresume command (S)

    • total print jobs (S)

    -

    +

    Service level parameters:

    • hosts allow (S)

    • hosts deny (S)

    • lppause command (S)

    • lpq command (S)

    • lpresume command (S)

    • lprm command (S)

    • max print jobs (S)

    • min print space (S)

    • print command (S)

    • printable (S), print ok (S)

    • printer name (S), printer (S)

    • printer admin (S)

    • printing = [cups|bsd|lprng...] (S)

    • queuepause command (S)

    • queueresume command (S)

    • total print jobs (S)

    +

    Samba's printing support implements the Microsoft Remote Procedure Calls (MS-RPC) methods for printing. These are used by Windows NT (and later) print servers. The old "LanMan" protocol is still supported as a fallback resort, and for older clients to use. More details will follow further beneath. -

    Parameters for Backwards Compatibility

    +

    Parameters for Backwards Compatibility

    Two new parameters that were added in Samba 2.2.2, are still present in Samba-3.0. Both of these options are described in the smb.conf man page and are disabled by @@ -6061,19 +6064,19 @@ provided for better support of Samba 2.0.x backwards capability. It will disable Samba's support for MS-RPC printing and yield identical printing behaviour to Samba 2.0.x.

    use client driver (G)

    was provided for using local printer drivers on Windows NT/2000 clients. It does -not apply to Windows 95/98/ME clients.

    Parameters "for backward compatibility only", use with caution. -

    • disable spoolss (G)

    • use client driver (S)

    -

    Parameters no longer in use

    +not apply to Windows 95/98/ME clients.

    Parameters "for backward compatibility only", use with caution. +

    • disable spoolss (G)

    • use client driver (S)

    +

    Parameters no longer in use

    Samba users upgrading from 2.2.x to 3.0 need to be aware that some previously available settings are no longer supported (as was announced some time ago). Here is a list of them: -

    "old" parameters, removed in Samba-3. +

    "old" parameters, removed in Samba-3. The following smb.conf parameters have been deprecated already in Samba 2.2 and are now completely removed from Samba-3. You cannot use them in new 3.0 installations: -

    • printer driver file (G)

    • total print jobs (G)

    • postscript (S)

    • printer driver (S)

    • printer driver location (S)

    -

    A simple Configuration to Print with Samba-3

    +

    • printer driver file (G)

    • total print jobs (G)

    • postscript (S)

    • printer driver (S)

    • printer driver location (S)

    +

    A simple Configuration to Print with Samba-3

    Here is a very simple example configuration for print related settings in the file. If you compare it with your own system's , you probably find some @@ -6108,7 +6111,7 @@ reminder: It even tolerates some spelling errors (like "browsable" instead of "browseable"). Most spelling is case-insensitive. Also, you can use "Yes|No" or "True|False" for boolean settings. Lists of names may be separated by commas, spaces or tabs. -

    Verification of "Settings in Use" with testparm

    +

    Verification of "Settings in Use" with testparm

    To see all (or at least most) printing related settings in Samba, including the implicitly used ones, try the command outlined below (hit "ENTER" twice!). It greps for all occurrences of "lp", "print", @@ -6162,7 +6165,7 @@ be important in your future dealings with Samba.

    Note

    testparm in Samba-3.0 behaves differently from 2.2.x: used without the "-v" switch it only shows you the settings actually written into ! To see the complete -configuration used, add the "-v" parameter to testparm.

    A little Experiment to warn you

    +configuration used, add the "-v" parameter to testparm.

    A little Experiment to warn you

    Should you need to troubleshoot at any stage, please always come back to this point first and verify if "testparm" shows the parameters you expect! To give you an example from personal experience as a warning, @@ -6271,7 +6274,7 @@ printing = lprng #This defines LPRng as the printing system" will regard the whole of the string after the "=" sign as the value you want to define. And this is an invalid value that will be ignored, and a default value used instead.] -

    Extended Sample Configuration to Print with Samba-3

    +

    Extended Sample Configuration to Print with Samba-3

    Here we show a more verbose example configuration for print related settings in an . Below is a discussion and explanation of the various parameters. We chose to use BSD-style @@ -6329,9 +6332,9 @@ default, because these have been compiled in. To see all settings, let root use the testparm utility. testparm also gives warnings if you have mis-configured certain things.. -

    Detailed Explanation of the Example's Settings

    +

    Detailed Explanation of the Example's Settings

    Following is a discussion of the settings from above shown example. -

    The [global] Section

    +

    The [global] Section

    The [global] section is one of 4 special sections (along with [[homes], [printers] and @@ -6405,7 +6408,7 @@ It must not be enabled on print shares (with a yes or true setting) which have valid drivers installed on the Samba server! For more detailed explanations see the man page of smb.conf. -

    The [printers] Section

    +

    The [printers] Section

    This is the second special section. If a section with this name appears in the smb.conf, users are able to connect to any printer specified in the Samba host's printcap file, @@ -6465,7 +6468,7 @@ write to the directory (if user privileges allow the connection), but only via print spooling operations. "Normal" write operations are not allowed.

    writeable = no

    synonym for read only = yes -

    Any [my_printer_name] Section

    +

    Any [my_printer_name] Section

    If a section appears in the , which is tagged as printable = yes, Samba presents it as a printer share to its clients. Note, that Win95/98/ME clients may @@ -6500,7 +6503,7 @@ belong to the "allowed subnets"). As you can see, you could name IP addresses as well as NetBIOS hostnames here.

    guest ok = no

    this printer is not open for the guest account! -

    Print Commands

    +

    Print Commands

    In each section defining a printer (or in the [printers] section), a print command parameter may be defined. It sets a command to @@ -6518,7 +6521,7 @@ your own print commands (or even develop print command shell scripts), make sure you pay attention to the need to remove the files from the Samba spool directory. Otherwise your hard disk may soon suffer from shortage of free space. -

    Default Print Commands for various Unix Print Subsystems

    +

    Default Print Commands for various Unix Print Subsystems

    You learned earlier on, that Samba in most cases uses its built-in settings for many parameters if it can not find an explicitly stated one in its configuration file. The same is true for the @@ -6558,7 +6561,7 @@ check which command takes effect. Then check that this command is adequate and actually works for your installed print subsystem. It is always a good idea to explicitly set up your configuration files the way you want them to work and not rely on any built-in defaults. -

    Setting up your own Print Commands

    +

    Setting up your own Print Commands

    After a print job has finished spooling to a service, the print command will be used by Samba via a system() call to process the spool file. Usually @@ -6628,7 +6631,7 @@ for the print command parameter varies dependi the printing parameter. Another example is: 

      print command = /usr/local/samba/bin/myprintscript %p %s
-

    Innovations in Samba Printing since 2.2

    +

    Innovations in Samba Printing since 2.2

    Before version 2.2.0, Samba's print server support for Windows clients was limited to the level of LanMan printing calls. This is the same protocol level as Windows 9x PCs offer when @@ -6669,7 +6672,7 @@ default permissions assigned by Windows NT to a printer gives the "Print" permissions to the well-known Everyone group. (The older clients of type Win9x can only print to "shared" printers). -

    Client Drivers on Samba Server for Point'n'Print

    +

    Client Drivers on Samba Server for Point'n'Print

    There is still confusion about what all this means: Is it or is it not a requirement for printer drivers to be installed on a Samba host in order to support printing from Windows clients? The @@ -6707,7 +6710,7 @@ by Samba. The clients use these drivers to generate print files in the format the printer (or the Unix print system) requires. Print files received by Samba are handed over to the Unix printing system, which is responsible for all further processing, if needed. -

    The [printer$] Section is removed from Samba-3

    +

    The [printer$] Section is removed from Samba-3

    [print$] vs. [printer$] . Versions of Samba prior to 2.2 made it possible to use a share @@ -6733,7 +6736,7 @@ access (in the context of its ACLs) in order to support printer driver down- and uploads. Don't fear -- this does not mean Windows 9x clients are thrown aside now. They can use Samba's [print$] share support just fine. -

    Creating the [print$] Share

    +

    Creating the [print$] Share

    In order to support the up- and downloading of printer driver files, you must first configure a file share named [print$]. The "public" name of this share is @@ -6767,7 +6770,7 @@ with appropriate values for your site):

    Of course, you also need to ensure that the directory named by the path parameter exists on the Unix file system. -

    Parameters in the [print$] Section

    +

    Parameters in the [print$] Section

    [print$] is a special section in . It contains settings relevant to potential printer driver download and local installation by clients. @@ -6812,7 +6815,7 @@ sure these accounts can copy files to the share. If this is a non-root account, then the account should also be mentioned in the global printer admin parameter. See the man page for more information on -configuring file shares.

    Subdirectory Structure in [print$]

    +configuring file shares.

    Subdirectory Structure in [print$]

    In order for a Windows NT print server to support the downloading of driver files by multiple client architectures, you must create several subdirectories within the [print$] service @@ -6851,7 +6854,7 @@ client workstation. Open Network Neighbourhood or Once you have located the server, navigate to its Printers and Faxes folder. You should see an initial listing of printers that matches the printer shares defined on your Samba host. -

    Installing Drivers into [print$]

    +

    Installing Drivers into [print$]

    You have successfully created the [print$] share in ? And Samba has re-read its configuration? Good. But you are not yet ready to take off. The @@ -6869,7 +6872,7 @@ Properties and Add Printer Wizard

    The latter option is probably the easier one (even if the only entrance to this realm seems a little bit weird at first). -

    Setting Drivers for existing Printers with a Client GUI

    +

    Setting Drivers for existing Printers with a Client GUI

    The initial listing of printers in the Samba host's Printers folder accessed from a client's Explorer will have no real printer driver assigned to them. By default, in @@ -6915,7 +6918,7 @@ Assuming you have connected with an administrative (or root) account you will also be able to modify other printer properties such as ACLs and default device settings using this dialog. For the default device settings, please consider the advice given further below. -

    Setting Drivers for existing Printers with +

    Setting Drivers for existing Printers with rpcclient

    The second way to install printer drivers into [print$] and set them up in a valid way can be @@ -6930,7 +6933,7 @@ time with the setdriver subcommand.

    We will provide detailed hints for each of these steps in the next few paragraphs. -

    Identifying the Driver Files

    +

    Identifying the Driver Files

    To find out about the driver files, you have two options: you could investigate the driver CD which comes with your printer. Study the *.inf file on the CD, if it is contained. This @@ -7033,7 +7036,7 @@ Windows 2000 changed this. While it still can use the Kernel Mode drivers (if this is enabled by the Admin), its native mode for printer drivers is User Mode execution. This requires drivers designed for this. These type of drivers install into the "3" subdirectory. -

    Collecting the Driver Files from a Windows Host's +

    Collecting the Driver Files from a Windows Host's [print$] Share

    Now we need to collect all the driver files we identified. in our previous step. Where do we get them from? Well, why not retrieve them @@ -7069,7 +7072,7 @@ files for these architectures are in the WIN40/0/ subdir. Once we are complete, we can run smbclient ... put to store the collected files on the Samba server's [print$] share. -

    Depositing the Driver Files into [print$]

    +

    Depositing the Driver Files into [print$]

    So, now we are going to put the driver files into the [print$] share. Remember, the UNIX path to this share has been defined previously in your @@ -7130,7 +7133,7 @@ re-location will automatically be done by the don't forget to also put the files for the Win95/98/ME architecture into the WIN40/ subdirectory should you need them). -

    Check if the Driver Files are there (with smbclient)

    +

    Check if the Driver Files are there (with smbclient)

    For now we verify that our files are there. This can be done with smbclient too (but of course you can log in via SSH also and do this through a standard UNIX shell access too): @@ -7183,7 +7186,7 @@ Point'n'Print. The reason is: Samba doesn't know yet that these files are something special, namely printer driver files and it doesn't know yet to which print queue(s) these driver files belong. -

    Running rpcclient with +

    Running rpcclient with adddriver

    So, next you must tell Samba about the special category of the files you just uploaded into the [print$] share. This @@ -7218,7 +7221,7 @@ files successfully, but render the driver unworkable. So take care! Hints about the syntax of the adddriver command are in the man page. The CUPS printing chapter of this HOWTO collection provides a more detailed description, if you should need it. -

    Check how Driver Files have been moved after +

    Check how Driver Files have been moved after adddriver finished

    One indication for Samba's recognition of the files as driver files is the successfully installed message. @@ -7266,7 +7269,7 @@ subdirectory. You can check this again with

    Another verification is that the timestamp of the printing TDB files is now updated (and possibly their filesize has increased). -

    Check if the Driver is recognized by Samba

    +

    Check if the Driver is recognized by Samba

    Now the driver should be registered with Samba. We can easily verify this, and will do so in a moment. However, this driver is not yet associated with a particular @@ -7310,7 +7313,7 @@ time. Our new driver only shows up for Windows NT 4.0 or 2000. To have it present for Windows 95, 98 and ME you'll have to repeat the whole procedure with the WIN40 architecture and subdirectory. -

    A side note: you are not bound to specific driver names

    +

    A side note: you are not bound to specific driver names

    You can name the driver as you like. If you repeat the adddriver step, with the same files as before, but with a different driver name, it will work the same: @@ -7344,7 +7347,7 @@ repeatedly. Each run "consumes" the files you had put into the respective subdirectories. So you must precede an smbclient ... put command before each rpcclient ... adddriver" command. -

    La Grande Finale: Running rpcclient with +

    La Grande Finale: Running rpcclient with setdriver

    Samba still needs to know which printer's driver this is. It needs to create a mapping of the driver to a printer, and @@ -7374,13 +7377,13 @@ known to Samba already. A bug in 2.2.x prevented Samba from recognizing freshly installed printers. You had to restart Samba, or at least send a HUP signal to all running smbd processes to work around this: -kill -HUP `pidof smbd`.

    "The Proof of the Pudding lies in the Eating" (Client Driver Install +kill -HUP `pidof smbd`.

    "The Proof of the Pudding lies in the Eating" (Client Driver Install Procedure)

    A famous philosopher said once: “The Proof of the Pudding lies in the Eating”. The proof for our setup lies in the printing. So let's install the printer driver onto the client PCs. This is not as straightforward as it may seem. Read on. -

    The first Client Driver Installation

    +

    The first Client Driver Installation

    Especially important is the installation onto the first client PC (for each architectural platform separately). Once this is done correctly, all further clients are easy to setup and shouldn't need further @@ -7423,7 +7426,7 @@ Data" set is still incomplete.

    You must now make sure that a valid "Device Mode" is set for the driver. Don't fear -- we will explain now what that means. -

    IMPORTANT! Setting Device Modes on new Printers

    +

    IMPORTANT! Setting Device Modes on new Printers

    In order for a printer to be truly usable by a Windows NT/2K/XP client, it must possess:

    • a valid Device Mode generated by @@ -7495,7 +7498,7 @@ properties. Others may crash the client's spooler service. So use this parameter with caution. It is always better to have the client generate a valid device mode for the printer and store it on the server for you. -

    Further Client Driver Install Procedures

    +

    Further Client Driver Install Procedures

    Every further driver may be done by any user, along the lines described above: Browse network, open printers folder on Samba server, right-click printer and choose Connect.... Once @@ -7515,7 +7518,7 @@ rundll32 shell32.dll,Control_RunDLL MAIN.CPL @2 You can enter the commands either inside a DOS box window or in the Run command... field from the Start menu. -

    Always make first Client Connection as root or "printer admin"

    +

    Always make first Client Connection as root or "printer admin"

    After you installed the driver on the Samba server (in its [print$] share, you should always make sure that your first client installation completes correctly. Make it a habit for @@ -7547,7 +7550,7 @@ the same way (called Point'n'Print) will have the same defaults set for them. If you miss this step you'll get a lot of helpdesk calls from your users. But maybe you like to talk to people.... ;-) -

    Other Gotchas

    +

    Other Gotchas

    Your driver is installed. It is ready for Point'n'Print installation by the clients now. You may have tried to download and use it @@ -7557,7 +7560,7 @@ example, suppose you didn't manage to "set the defaults" on the printer, as advised in the preceding paragraphs? And your users complain about various issues (such as “We need to set the paper size for each job from Letter to A4 and it won't store it!”) -

    Setting Default Print Options for the Client Drivers

    +

    Setting Default Print Options for the Client Drivers

    The last sentence might be viewed with mixed feelings by some users and admins. They have struggled for hours and hours and couldn't arrive at a point were their settings seemed to be saved. It is not their @@ -7567,7 +7570,7 @@ up when you right-click the printer name and select looking dialogs, each claiming that they help you to set printer options, in three different ways. Here is the definite answer to the "Samba Default Driver Setting FAQ": -

    “I can't set and save default print options +

    “I can't set and save default print options for all users on Win2K/XP! Why not?” How are you doing it? I bet the wrong way.... (it is not very easy to find out, though). There are 3 different ways to bring you to @@ -7578,34 +7581,34 @@ dialogs look the same. Only one of them Administrator to do this for all users. Here is how I reproduce it in on XP Professional: -

    1. The first "wrong" way: +

      1. The first "wrong" way: -

        1. Open the Printers +

          1. Open the Printers folder.

          2. Right-click on the printer (remoteprinter on cupshost) and select in context menu Printing Preferences...

          3. Look at this dialog closely and remember what it looks -like.

          -

        2. The second "wrong" way: +like.

        +
      2. The second "wrong" way: -

        1. Open the Printers +

          1. Open the Printers folder.

          2. Right-click on the printer (remoteprinter on cupshost) and select in the context menu Properties

          3. Click on the General tab

          4. Click on the button Printing Preferences...

          5. A new dialog opens. Keep this dialog open and go back -to the parent dialog.

          -

        2. The third, the "correct" way: (should you do +to the parent dialog.

        +
      3. The third, the "correct" way: (should you do this from the beginning, just carry out steps 1. and 2. from second "way" above) -

        1. Click on the Advanced +

          1. Click on the Advanced tab. (Hmmm... if everything is "Grayed Out", then you are not logged in as a user with enough privileges).

          2. Click on the Printing Defaults... button.

          3. On any of the two new tabs, click on the Advanced... button.

          4. A new dialog opens. Compare this one to the other, -identical looking one from "B.5" or A.3".

          -

        +identical looking one from "B.5" or A.3".

      +
    Do you see any difference in the two settings dialogs? I don't either. However, only the last one, which you arrived at with steps @@ -7632,7 +7635,7 @@ try the same way with Win2k or WinXP. You wouldn't dream that there is now a different "clicking path" to arrive at an identically looking, but functionally different dialog to set defaults for all users! -

    Tip

    Try (on Win2000 and WinXP) to run this command (as a user +

    Tip

    Try (on Win2000 and WinXP) to run this command (as a user with the right privileges):

    rundll32 printui.dll,PrintUIEntry /p /t3 /n\\SAMBA-SERVER\printersharename @@ -7646,7 +7649,7 @@ to see the tab with the Printing Preferences... button (the one which doesn't set system-wide defaults). You can start the commands from inside a DOS box" or from the Start -- Run... menu. -

    Supporting large Numbers of Printers

    +

    Supporting large Numbers of Printers

    One issue that has arisen during the recent development phase of Samba is the need to support driver downloads for 100's of printers. Using Windows NT APW here is somewhat awkward (to say the least). If you @@ -7683,9 +7686,9 @@ following is an example of how this could be accomplished: Driver Name: [myphantasydrivername] [....] -

    + -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
  cmd = enumprinters
    flags:[0x800000]
@@ -7693,15 +7696,15 @@ following is an example of how this could be accomplished:
    description:[\\SAMBA-CUPS\dm9110,,110ppm HiVolume DANKA Stuttgart]
    comment:[110 ppm HiVolume DANKA Stuttgart]
  [....]
-
    
+
    -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'setdriver dm9110 "Heidelberg Digimaster 9110 (PS)"'
  cmd = setdriver dm9110 Heidelberg Digimaster 9110 (PPD)
  Successfully set dm9110 to driver Heidelberg Digimaster 9110 (PS).
-
    
+
    -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
  cmd = enumprinters
    flags:[0x800000]
@@ -7709,15 +7712,15 @@ following is an example of how this could be accomplished:
    description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),110ppm HiVolume DANKA Stuttgart]
    comment:[110ppm HiVolume DANKA Stuttgart]
  [....]
-
    
+
    -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'setdriver dm9110 myphantasydrivername'
  cmd = setdriver dm9110 myphantasydrivername
  Successfully set dm9110 to myphantasydrivername.
-
    
+
    -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
  cmd = enumprinters
    flags:[0x800000]
@@ -7733,7 +7736,7 @@ commas in the "description" field). After the
 setdriver command succeeded, all is well.  (The
 CUPS Printing chapter has more info about the installation of printer
 drivers with the help of rpcclient).
-

    Adding new Printers with the Windows NT APW

    +

    Adding new Printers with the Windows NT APW

    By default, Samba exhibits all printer shares defined in smb.conf in the Printers... folder. Also located in this folder @@ -7779,7 +7782,7 @@ user, not necessarily a root account. A map to guest = user may have connected you unwittingly under the wrong privilege; you should check it by using the smbstatus command. -

    Weird Error Message Cannot connect under a +

    Weird Error Message Cannot connect under a different Name

    Once you are connected with the wrong credentials, there is no means to reverse the situation other than to close all Explorer windows, and @@ -7809,7 +7812,7 @@ message. You close all Explorer Windows and start it again. You try to connect - and this times it works! Windows seems to cache connection info somewhere and doesn't keep it up to date (if you are unlucky you might need to reboot to get rid of the error message). -

    Be careful when assembling Driver Files

    +

    Be careful when assembling Driver Files

    You need to be very careful when you take notes about the files and belonging to a particular driver. Don't confuse the files for driver version "0" (for Win95/98/ME, going into @@ -7950,7 +7953,7 @@ In my example were even more differences than shown here. Conclusion: you must be very careful to select the correct driver files for each driver version. Don't rely on the names alone. Don't interchange files belonging to different driver versions. -

    Samba and Printer Ports

    +

    Samba and Printer Ports

    Windows NT/2000 print servers associate a port with each printer. These normally take the form of LPT1:, COM1:, FILE:, etc. Samba @@ -7971,14 +7974,14 @@ another (“My users and my Boss should not know that th working with Samba”), possesses a enumports command which can be used to define an external program that generates a listing of ports on a system. -

    Avoiding the most common Misconfigurations of the Client Driver

    +

    Avoiding the most common Misconfigurations of the Client Driver

    So - printing works, but there are still problems. Most jobs print well, some don't print at all. Some jobs have problems with fonts, which don't look good at all. Some jobs print fast, and some are dead-slow. We can't cover it all; but we want to encourage you to read the little paragraph about "Avoiding the wrong PostScript Driver Settings" in the CUPS Printing part of this document. -

    The Imprints Toolset

    +

    The Imprints Toolset

    The Imprints tool set provides a UNIX equivalent of the Windows NT Add Printer Wizard. For complete information, please refer to the Imprints web site @@ -7995,20 +7998,20 @@ coordinate your efforts on the samba-technical mailing list. The toolset is still in usable form; but only for a series of older printer models, where there are prepared packages to use. Packages for more up to date print devices are needed if Imprints should have a -future.

    What is Imprints?

    +future.

    What is Imprints?

    Imprints is a collection of tools for supporting these goals:

    • Providing a central repository information regarding Windows NT and 95/98 printer driver packages

    • Providing the tools necessary for creating the Imprints printer driver packages.

    • Providing an installation client which will obtain printer drivers from a central internet (or intranet) Imprints Server repository and install them on remote Samba and Windows NT4 print -servers.

    Creating Printer Driver Packages

    +servers.

    Creating Printer Driver Packages

    The process of creating printer driver packages is beyond the scope of this document (refer to Imprints.txt also included with the Samba distribution for more information). In short, an Imprints driver package is a gzipped tarball containing the driver files, related INF files, and a control file needed by the installation client. -

    The Imprints Server

    +

    The Imprints Server

    The Imprints server is really a database server that may be queried via standard HTTP mechanisms. Each printer entry in the database has an associated URL for the actual downloading of the package. Each @@ -8016,7 +8019,7 @@ package is digitally signed via GnuPG which can be used to verify that package downloaded is actually the one referred in the Imprints database. It is strongly recommended that this security check not be disabled. -

    The Installation Client

    +

    The Installation Client

    More information regarding the Imprints installation client is available in the Imprints-Client-HOWTO.ps file included with the imprints source package. @@ -8031,10 +8034,10 @@ remote Samba and Windows NT print servers.

    The basic installation process is in four steps and perl code is wrapped around smbclient and rpcclient -

    • +

      • foreach (supported architecture for a given driver) -

        1. rpcclient: Get the appropriate upload directory on the remote server

        2. smbclient: Upload the driver files

        3. rpcclient: Issues an AddPrinterDriver() MS-RPC

        -

      • rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer

      +

      1. rpcclient: Get the appropriate upload directory on the remote server

      2. smbclient: Upload the driver files

      3. rpcclient: Issues an AddPrinterDriver() MS-RPC

      +

    • rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer

    One of the problems encountered when implementing the Imprints tool set was the name space issues between various supported client architectures. For example, Windows NT includes a driver named "Apple @@ -8057,7 +8060,7 @@ if is has not already been installed? The way of sidestepping this limitation is to require that all Imprints printer driver packages include both the Intel Windows NT and 95/98 printer drivers and that NT driver is installed first. -

    Add Network Printers at Logon without User Interaction

    +

    Add Network Printers at Logon without User Interaction

    The following MS Knowledge Base article may be of some help if you need to handle Windows 2000 clients: How to Add Printers with No User Interaction in Windows 2000. ( http://support.microsoft.com/default.aspx?scid=kb;en-us;189105 @@ -8132,7 +8135,7 @@ at logon time will not really be noticeable. Printers can be centrally added, changed, and deleted at will on the server with no user intervention required on the clients (you just need to keep the logon scripts up to date). -

    The addprinter command

    +

    The addprinter command

    The addprinter command can be configured to be a shell script or program executed by Samba. It is triggered by running the APW from a client against the Samba print server. The APW asks the @@ -8144,7 +8147,7 @@ on legacy systems, or execute the lpadmin command on more modern systems) and create the associated share in , then the APW will in effect really create a new printer on Samba and the UNIX print subsystem! -

    Migration of "Classical" printing to Samba-3

    +

    Migration of "Classical" printing to Samba-3

    The basic "NT-style" printer driver management has not changed considerably in 3.0 over the 2.2.x releases (apart from many small improvements). Here migration should be quite easy, especially if you @@ -8181,12 +8184,12 @@ rpcclient. See the Imprints installation client at: http://imprints.sourceforge.net/

    for an example. See also the discussion of rpcclient usage in the -"CUPS Printing" section.

    Publishing Printer Information in Active Directory or LDAP

    +"CUPS Printing" section.

    Publishing Printer Information in Active Directory or LDAP

    We will publish an update to this section shortly. -

    Common Errors and Problems

    +

    Common Errors and Problems

    Here are a few typical errors and problems people have encountered. You can avoid them. Read on. -

    I give my root password but I don't get access

    +

    I give my root password but I don't get access

    Don't confuse the root password which is valid for the Unix system (and in most cases stored in the form of a one-way hash in a file named /etc/shadow) with the password used to @@ -8194,28 +8197,28 @@ authenticate against Samba!. Samba doesn't know the UNIX password; for root to access Samba resources via Samba-type access, a Samba account for root must be created first. This is often done with the smbpasswd command. -

    My printjobs get spooled into the spooling directory, but then get lost

    +

    My printjobs get spooled into the spooling directory, but then get lost

    Don't use the existing Unix print system spool directory for the Samba spool directory. It may seem convenient and a saving of space, but it only leads to problems. The two must be separate. -

    Chapter19.CUPS Printing Support in Samba 3.0

    Kurt Pfeifle

    Danka Deutschland GmbH

    Ciprian Vizitiu

    drawings

    (3 June 2003)

    Table of Contents

    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for -CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for -application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and -native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print -Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many -Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel -Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for -cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the -Client
    Installing PostScript Driver Files manually (using -rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to -CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached -Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing -Problems
    An Overview of the CUPS Printing Processes

    Introduction

    Features and Benefits

    +

    Chapter19.CUPS Printing Support in Samba 3.0

    Kurt Pfeifle

    Danka Deutschland GmbH

    Ciprian Vizitiu

    drawings

    (3 June 2003)

    Table of Contents

    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for +CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for +application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and +native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print +Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many +Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel +Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for +cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the +Client
    Installing PostScript Driver Files manually (using +rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to +CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached +Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing +Problems
    An Overview of the CUPS Printing Processes

    Introduction

    Features and Benefits

    The Common Unix Print System (CUPS) has become very popular. All big Linux distributions now ship it as their default printing system. But to many it is still a very mystical tool. Normally it @@ -8240,7 +8243,7 @@ Problems

    An Overview of the CUPS Printing Proce contained. But lets start with the most basic things first. Maybe this is all you need for now. Then you can skip most of the other paragraphs. -

    Overview

    +

    Overview

    CUPS is more than just a print spooling system. It is a complete printer management system that complies with the new IPP (Internet Printing Protocol). IPP is an industry @@ -8260,7 +8263,7 @@ Problems

    An Overview of the CUPS Printing Proce argue that CUPS is better! In any case, let us now move on to explore how one may configure CUPS for interfacing with MS Windows print clients via Samba. -

    Basic Configuration of CUPS support

    +

    Basic Configuration of CUPS support

    Printing with CUPS in the most basic smb.conf setup in Samba 3.0 (as was true for 2.2.x) only needs two settings: printing = cups and printcap @@ -8276,7 +8279,7 @@ Problems

    An Overview of the CUPS Printing Proce details see man cupsd.conf and other CUPS-related documentation, like the wealth of documents on your CUPS server itself: http://localhost:631/documentation.html. -

    Linking of smbd with libcups.so

    +

    Linking of smbd with libcups.so

    Samba has a very special relationship to CUPS. The reason is: Samba can be compiled with CUPS library support. Most recent installations have this support enabled, and per default CUPS linking is compiled @@ -8313,7 +8316,7 @@ Problems

    An Overview of the CUPS Printing Proce print command; other commands are lppause command, lpresume command, lpq command, lprm command, queuepause command and queue resume - command).

    Simple smb.conf Settings for CUPS

    + command).

    Simple smb.conf Settings for CUPS

    To summarize, here is the simplest printing-related setup for smb.conf to enable basic CUPS support: 

    @@ -8348,7 +8351,7 @@ Problems
    An Overview of the CUPS Printing Proce
 			printer is not a PostScript device, the print data stream is "binary",
 			sensible only for the target printer. Read on to learn which problem
 			this may cause and how to avoid it.
-

    More complex smb.conf Settings for +

    More complex smb.conf Settings for CUPS

    Here is a slightly more complex printing-related setup for smb.conf. It enables general CUPS printing @@ -8399,13 +8402,13 @@ allowing access from three hosts. To prevent CUPS kicking in and taking over the print jobs for that share, we need to set printing = sysv and printcap = lpstat. -

    Advanced Configuration

    +

    Advanced Configuration

    Before we dive into all the configuration options, let's clarify a few points. Network printing needs to be organized and setup correctly. Often this is not done correctly. Legacy systems or small LANs in business environments often lack a clear design and good housekeeping. -

    Central spooling vs. "Peer-to-Peer" printing

    +

    Central spooling vs. "Peer-to-Peer" printing

    Many small office or home networks, as well as badly organized larger environments, allow each client a direct access to available network printers. Generally, this is a bad idea. It often blocks one client's @@ -8417,7 +8420,7 @@ is the usage of a "print server": it routes all jobs through one central system, which responds immediately, takes jobs from multiple concurrent clients at the same time and in turn transfers them to the printer(s) in the correct order. -

    CUPS/Samba as a "spooling-only" Print Server; "raw" printing +

    CUPS/Samba as a "spooling-only" Print Server; "raw" printing with Vendor Drivers on Windows Clients

    Most traditionally configured Unix print servers acting on behalf of Samba's Windows clients represented a really simple setup. Their only @@ -8436,7 +8439,7 @@ sent in a format that is suitable for direct delivery to the printer. Clients need to run the vendor-provided drivers to do this. In this case CUPS will NOT do any print file format conversion work. -

    Driver Installation Methods on Windows Clients

    +

    Driver Installation Methods on Windows Clients

    The printer drivers on the Windows clients may be installed in two functionally different ways:

    • manually install the drivers locally on each client, @@ -8449,7 +8452,7 @@ first time they access the printer; with this method NT/2K/XP clients use the SPOOLSS/MS-RPC type printing calls.

    The second method is recommended for use over the first. -

    Explicitly enable "raw" printing for +

    Explicitly enable "raw" printing for application/octet-stream!

    If you use the first option (drivers are installed on the client side), there is one setting to take care of: CUPS needs to be told @@ -8498,7 +8501,7 @@ This is all you need to know to get the CUPS/Samba combo printing locally installed. If you are not interested in background information about more advanced CUPS/Samba printing, simply skip the remaining sections of this chapter. -

    Three familiar Methods for driver upload plus a new one

    +

    Three familiar Methods for driver upload plus a new one

    If you want to use the MS-RPC type printing, you must upload the drivers onto the Samba server first ([print$] share). For a discussion on how to deposit printer drivers on the @@ -8520,7 +8523,7 @@ utility.

    cupsaddsmb is discussed in much detail further below. But we will first explore the CUPS filtering system and compare the Windows and UNIX printing architectures. -

    Using CUPS/Samba in an advanced Way -- intelligent printing +

    Using CUPS/Samba in an advanced Way -- intelligent printing with PostScript Driver Download

    Still reading on? Good. Let's go into more detail then. We now know how to set up a "dump" printserver, that is, a server which is spooling @@ -8545,7 +8548,7 @@ how CUPS works and how you can enable its features. What follows is the comparison of some fundamental concepts for Windows and Unix printing; then is the time for a description of the CUPS filtering system, how it works and how you can tweak it. -

    GDI on Windows -- PostScript on Unix

    +

    GDI on Windows -- PostScript on Unix

    Network printing is one of the most complicated and error-prone day-to-day tasks any user or an administrator may encounter. This is true for all OS platforms. And there are reasons for this. @@ -8561,7 +8564,7 @@ into semi-official "standards", by being the most widely used PDLs many manufacturers who "roll their own" (their reasons may be unacceptable license fees for using printer-embedded PostScript interpreters, etc.). -

    Windows Drivers, GDI and EMF

    +

    Windows Drivers, GDI and EMF

    In Windows OS, the format conversion job is done by the printer drivers. On MS Windows OS platforms all application programmers have at their disposal a built-in API, the GDI (Graphical Device @@ -8583,10 +8586,10 @@ put paper and screen output on a common foundation for their (BSD-Unix-based, did you know??) Mac OS X and Darwin Operating Systems.Their Core Graphic Engine uses a PDF derivate for all display work. -

    +

    -

    Figure19.1.Windows Printing to a local Printer

    Windows Printing to a local Printer

    -

    Unix Printfile Conversion and GUI Basics

    +

    Figure19.1.Windows Printing to a local Printer

    Windows Printing to a local Printer
    +

    Unix Printfile Conversion and GUI Basics

    In Unix and Linux, there is no comparable layer built into the OS kernel(s) or the X (screen display) server. Every application is responsible for itself to create its print output. Fortunately, most @@ -8622,7 +8625,7 @@ form and you will be reading its PostScript code, the language instructions which need to be interpreted by a rasterizer. Rasterizers produce pixel images, which may be displayed on screen by a viewer program or on paper by a printer. -

    PostScript and Ghostscript

    +

    PostScript and Ghostscript

    So, Unix is lacking a common ground for printing on paper and displaying on screen. Despite this unfavorable legacy for Unix, basic printing is fairly easy: if you have PostScript printers at your @@ -8641,9 +8644,9 @@ options a printer supports: duplexing, stapling, punching... Therefore Unix users for a long time couldn't choose many of the supported device and job options, unlike Windows or Apple users. But now there is CUPS.... ;-) -

    -

    Figure19.2.Printing to a Postscript Printer

    Printing to a Postscript Printer

    -

    +

    +

    Figure19.2.Printing to a Postscript Printer

    Printing to a Postscript Printer
    +

    However, there are other types of printers out there. These don't know how to print PostScript. They use their own Page Description Language (PDL, often proprietary). To print to them is much @@ -8651,7 +8654,7 @@ more demanding. Since your Unix applications mostly produce PostScript, and since these devices don't understand PostScript, you need to convert the printfiles to a format suitable for your printer on the host, before you can send it away. -

    Ghostscript -- the Software RIP for non-PostScript Printers

    +

    Ghostscript -- the Software RIP for non-PostScript Printers

    Here is where Ghostscript kicks in. Ghostscript is the traditional (and quite powerful) PostScript interpreter used on Unix platforms. It is a RIP in software, capable to do a @@ -8659,9 +8662,9 @@ Unix platforms. It is a RIP in software, capable to do a spectrum of hardware devices as well as software file formats. Ghostscript technology and drivers is what enables PostScript printing to non-PostScript hardware. -

    -

    Figure19.3.Ghostscript as a RIP for non-postscript printers

    Ghostscript as a RIP for non-postscript printers

    -

    Tip

    +

    +

    Figure19.3.Ghostscript as a RIP for non-postscript printers

    Ghostscript as a RIP for non-postscript printers
    +

    Tip

    Use the "gs -h" command to check for all built-in "devices" of your Ghostscript version. If you specify e.g. a parameter of -sDEVICE=png256 on your Ghostscript command @@ -8678,7 +8681,7 @@ enhancement over GNU Ghostscript, with lots of bug-fixes, additional devices and improvements. It is jointly maintained by developers from CUPS, Gimp-Print, MandrakeSoft, SuSE, RedHat and Debian. It includes the "cups" device (essential to print to non-PS printers from CUPS). -

    PostScript Printer Description (PPD) Specification

    +

    PostScript Printer Description (PPD) Specification

    While PostScript in essence is a Page Description Language (PDL) to represent the page layout in a device independent way, real world print jobs are @@ -8709,7 +8712,7 @@ for achieving a certain print job output (e.g. duplexed, stapled and punched) on a specific target machine, may not print as expected, or may not be printable at all on other models; it also may not be fit for further processing by software (e.g. by a PDF distilling program). -

    CUPS can use all Windows-formatted Vendor PPDs

    +

    CUPS can use all Windows-formatted Vendor PPDs

    CUPS can handle all spec-compliant PPDs as supplied by the manufacturers for their PostScript models. Even if a Unix/Linux-illiterate vendor might not have mentioned our favorite @@ -8736,7 +8739,7 @@ your LAN has the PostScript driver installed, just use access the Windows directory where all printer driver files are stored. First look in the W32X86/2 subdir for the PPD you are seeking. -

    CUPS also uses PPDs for non-PostScript Printers

    +

    CUPS also uses PPDs for non-PostScript Printers

    CUPS also uses specially crafted PPDs to handle non-PostScript printers. These PPDs are usually not available from the vendors (and no, you can't just take the PPD of a Postscript printer with the same @@ -8744,7 +8747,7 @@ model name and hope it works for the non-PostScript version too). To understand how these PPDs work for non-PS printers we first need to dive deeply into the CUPS filtering and file format conversion architecture. Stay tuned. -

    The CUPS Filtering Architecture

    +

    The CUPS Filtering Architecture

    The core of the CUPS filtering system is based on Ghostscript. In addition to Ghostscript, CUPS uses some other filters of its own. You (or your OS vendor) may have @@ -8786,7 +8789,7 @@ others. However, even for Foomatic/cupsomatic usage, best results and broadest printer model support is provided by ESP Ghostscript (more about cupsomatic/Foomatic, particularly the new version called now foomatic-rip, follows below). -

    MIME types and CUPS Filters

    +

    MIME types and CUPS Filters

    CUPS reads the file /etc/cups/mime.types (and all other files carrying a *.types suffix in the same directory) upon startup. These files contain the MIME @@ -8839,7 +8842,7 @@ CUPS can handle ASCII text, HP-GL, PDF, PostScript, DVI and a lot of image formats (GIF. PNG, TIFF, JPEG, Photo-CD, SUN-Raster, PNM, PBM, SGI-RGB and some more) and their associated MIME types with its filters. -

    MIME type Conversion Rules

    +

    MIME type Conversion Rules

    CUPS reads the file /etc/cups/mime.convs (and all other files named with a *.convs suffix in the same directory) upon startup. These files contain @@ -8880,7 +8883,7 @@ The last two examples name the texttops f to work on "text/plain" as well as on "application/x-shell". (Hint: this differentiation is needed for the syntax highlighting feature of "texttops"). -

    Filter Requirements

    +

    Filter Requirements

    There are many more combinations named in mime.convs. However, you are not limited to use the ones pre-defined there. You can plug in any filter you like into the CUPS framework. It must meet, or must be made @@ -8901,7 +8904,7 @@ attribute

    Printer

    The string fr attribute

    Printer

    The job options

    Printer

    (Optionally) The print request file (if missing, filters expected data fed through stdin). In most cases it is very easy to write a simple wrapper script around existing -filters to make them work with CUPS.

    Prefilters

    +filters to make them work with CUPS.

    Prefilters

    As was said, PostScript is the central file format to any Unix based printing system. From PostScript, CUPS generates raster data to feed non-PostScript printers. @@ -8918,18 +8921,18 @@ the imagetops filter. Its outcome is alwa MIME type application/vnd.cups-postscript (not application/postscript), meaning it has the print options already embedded into the file. -

    -

    Figure19.4.Prefiltering in CUPS to form Postscript

    Prefiltering in CUPS to form Postscript

    -

    pstops

    +

    +

    Figure19.4.Prefiltering in CUPS to form Postscript

    Prefiltering in CUPS to form Postscript
    +

    pstops

    pstopsis the filter to convert application/postscript to application/vnd.cups-postscript. It was said above that this filter inserts all device-specific print options (commands to the printer to ask for the duplexing of output, or stapling an punching it, etc.) into the PostScript file. -

    -

    Figure19.5.Adding Device-specific Print Options

    Adding Device-specific Print Options

    -

    +

    +

    Figure19.5.Adding Device-specific Print Options

    Adding Device-specific Print Options
    +

    This is not all: other tasks performed by it are:

    • selecting the range of pages to be printed (if you choose to @@ -8940,7 +8943,7 @@ putting 2 or more logical pages on one sheet of paper (the so-called "number-up" function)

    • counting the pages of the job to insert the accounting information into the /var/log/cups/page_log -

    pstoraster

    +

    pstoraster

    pstoraster is at the core of the CUPS filtering system. It is responsible for the first stage of the rasterization process. Its input is of MIME type application/vnd.cups-postscript; @@ -8948,9 +8951,9 @@ its output is application/vnd.cups-raster. This output format is not yet meant to be printable. Its aim is to serve as a general purpose input format for more specialized raster drivers, that are able to generate device-specific printer data. -

    -

    Figure19.6.Postscript to intermediate Raster format

    Postscript to intermediate Raster format

    -

    +

    +

    Figure19.6.Postscript to intermediate Raster format

    Postscript to intermediate Raster format
    +

    CUPS raster is a generic raster format with powerful features. It is able to include per-page information, color profiles and more to be used by the following downstream raster drivers. Its MIME type is @@ -8961,9 +8964,9 @@ printer models, should they choose to do so. CUPS always takes care for the first stage of rasterization so these vendors don't need to care about Ghostscript complications (in fact, there is currently more than one vendor financing the development of CUPS raster drivers). -

    -

    Figure19.7.CUPS-raster production using Ghostscript

    CUPS-raster production using Ghostscript

    -

    +

    +

    Figure19.7.CUPS-raster production using Ghostscript

    CUPS-raster production using Ghostscript
    +

    CUPS versions before version 1.1.15 were shipping a binary (or source code) standalone filter, named "pstoraster". pstoraster was derived from GNU Ghostscript 5.50, and could be installed besides and in @@ -8976,16 +8979,16 @@ integrated back into Ghostscript (now based on GNU Ghostscript version parameter. If your Ghostscript doesn't show a success on asking for gs -h |grep cups, you might not be able to print. Update your Ghostscript then! -

    imagetops and imagetoraster

    +

    imagetops and imagetoraster

    Above in the section about prefilters, we mentioned the prefilter that generates PostScript from image formats. The imagetoraster filter is used to convert directly from image to raster, without the intermediate PostScript stage. It is used more often than the above mentioned prefilters. Here is a summarizing flowchart of image file filtering: -

    -

    Figure19.8.Image format to CUPS-raster format conversion

    Image format to CUPS-raster format conversion

    -

    rasterto [printers specific]

    +

    +

    Figure19.8.Image format to CUPS-raster format conversion

    Image format to CUPS-raster format conversion
    +

    rasterto [printers specific]

    CUPS ships with quite some different raster drivers processing CUPS raster. On my system I find in /usr/lib/cups/filter/ these: rastertoalps, rastertobj, rastertoepson, rastertoescp, @@ -8997,9 +9000,9 @@ than this; some of these are installed by commercial add-ons to CUPS rastertoprinter) by 3rd party driver development projects (such as Gimp-Print) wanting to cooperate as closely as possible with CUPS. -

    -

    Figure19.9.Raster to Printer Specific formats

    Raster to Printer Specific formats

    -

    CUPS Backends

    +

    +

    Figure19.9.Raster to Printer Specific formats

    Raster to Printer Specific formats
    +

    CUPS Backends

    The last part of any CUPS filtering chain is a "backend". Backends are special programs that send the print-ready file to the final device. There is a separate backend program for any transfer @@ -9086,7 +9089,7 @@ all available backends: lpinfo -v -

    cupsomatic/Foomatic -- how do they fit into the Picture?

    +

    cupsomatic/Foomatic -- how do they fit into the Picture?

    "cupsomatic" filters may be the most widely used on CUPS installations. You must be clear about the fact that these were not developed by the CUPS people. They are a "Third Party" add-on to @@ -9136,11 +9139,11 @@ print-options from page to page, in the middle of a job. And the best thing is: the new foomatic-rip now works seamlessly with all legacy spoolers too (like LPRng, BSD-LPD, PDQ, PPR etc.), providing for them access to use PPDs for their printing! -

    The Complete Picture

    +

    The Complete Picture

    If you want to see an overview over all the filters and how they relate to each other, the complete picture of the puzzle is at the end of this document. -

    mime.convs

    +

    mime.convs

    CUPS auto-constructs all possible filtering chain paths for any given MIME type, and every printer installed. But how does it decide in favor or against a specific alternative? (There may often be cases, @@ -9157,7 +9160,7 @@ cost. This is a very efficient way to limit the load of any CUPS server by setting an appropriate "FilterLimit" value. A FilterLimit of 200 allows roughly 1 job at a time, while a FilterLimit of 1000 allows approximately 5 jobs maximum at a time. -

    "Raw" printing

    +

    "Raw" printing

    You can tell CUPS to print (nearly) any file "raw". "Raw" means it will not be filtered. CUPS will send the file to the printer "as is" without bothering if the printer is able to digest it. Users need to @@ -9180,7 +9183,7 @@ CUPS will automatically treat each job sent to a queue as a "raw" one, if it can't find a PPD associated with the queue. However, CUPS will only send known MIME types (as defined in its own mime.types file) and refuse others. -

    "application/octet-stream" printing

    +

    "application/octet-stream" printing

    Any MIME type with no rule in the /etc/cups/mime.types file is regarded as unknown or application/octet-stream and will not be @@ -9238,7 +9241,7 @@ be one that is known to CUPS and an allowed one. The file recognizes MIME types. The file /etc/cups/mime.convs decides which file conversion filter(s) may be applied to which MIME types. -

    PostScript Printer Descriptions (PPDs) for non-PS Printers

    +

    PostScript Printer Descriptions (PPDs) for non-PS Printers

    Originally PPDs were meant to be used for PostScript printers only. Here, they help to send device-specific commands and settings to the RIP which processes the jobfile. CUPS has extended this @@ -9283,7 +9286,7 @@ specific model supports):

    stphoto2.ppd

    newer Epson Stylus Photo printers

    laserjet.ppd

    all PCL printers. Further below is a discussion of several other driver/PPD-packages suitable fur use with CUPS. -

    Difference between cupsomatic/foomatic-rip and +

    Difference between cupsomatic/foomatic-rip and native CUPS printing

    Native CUPS rasterization works in two steps.

    • @@ -9296,9 +9299,9 @@ quality filters for this step, some are Free Software, some are Shareware/Non-Free, some are proprietary.

    Often this produces better quality (and has several more advantages) than other methods. -

    -

    Figure19.10.cupsomatic/foomatic processing versus Native CUPS

    cupsomatic/foomatic processing versus Native CUPS

    -

    +

    +

    Figure19.10.cupsomatic/foomatic processing versus Native CUPS

    cupsomatic/foomatic processing versus Native CUPS
    +

    One other method is the cupsomatic/foomatic-rip way. Note that cupsomatic is not made by the CUPS developers. It is an independent contribution to printing development, @@ -9332,7 +9335,7 @@ installation: Therefore the printfile bypasses the "pstoraster" filter cupsomatic hands the rendered file directly to the CUPS backend. The flowchart above illustrates the difference between native CUPS rendering and the Foomatic/cupsomatic method. -

    Examples for filtering Chains

    +

    Examples for filtering Chains

    Here are a few examples of commonly occurring filtering chains to illustrate the workings of CUPS.

    @@ -9382,7 +9385,7 @@ which transfers the job to the printers.

    The resulting filter chain therefore is: 

     pdftops --> pstops --> pstoraster --> rastertoepson --> usb
-

    Sources of CUPS drivers / PPDs

    +

    Sources of CUPS drivers / PPDs

    On the internet you can find now many thousand CUPS-PPD files (with their companion filters), in many national languages, supporting more than 1000 non-PostScript models. @@ -9417,7 +9420,7 @@ HPIJS).

    Printing with Interface Scripts

    +

    Printing with Interface Scripts

    CUPS also supports the usage of "interface scripts" as known from System V AT&T printing systems. These are often used for PCL printers, from applications that generate PCL print jobs. Interface @@ -9439,12 +9442,12 @@ with CUPS they provide the most easy way to plug in your own custom-written filtering script or program into one specific print queue (some information about the traditional usage of interface scripts is to be found at http://playground.sun.com/printing/documentation/interface.html). -

    Network printing (purely Windows)

    +

    Network printing (purely Windows)

    Network printing covers a lot of ground. To understand what exactly goes on with Samba when it is printing on behalf of its Windows clients, let's first look at a "purely Windows" setup: Windows clients with a Windows NT print server. -

    From Windows Clients to an NT Print Server

    +

    From Windows Clients to an NT Print Server

    Windows clients printing to an NT-based print server have two options. They may

    • execute the driver locally and render the GDI output @@ -9453,7 +9456,7 @@ or

    • send the GDI output (EMF) to the server, where the driver is executed to render the printer specific output.

    Both print paths are shown in the flowcharts below. -

    Driver Execution on the Client

    +

    Driver Execution on the Client

    In the first case the print server must spool the file as "raw", meaning it shouldn't touch the jobfile and try to convert it in any way. This is what traditional Unix-based print server can do too; and @@ -9463,9 +9466,9 @@ advantage of this setup is that this "spooling-only" print server may be used even if no driver(s) for Unix are available it is sufficient to have the Windows client drivers available and installed on the clients. -

    -

    Figure19.11.Print Driver execution on the Client

    Print Driver execution on the Client

    -

    Driver Execution on the Server

    +

    +

    Figure19.11.Print Driver execution on the Client

    Print Driver execution on the Client
    +

    Driver Execution on the Server

    The other path executes the printer driver on the server. The clients transfers print files in EMF format to the server. The server uses the PostScript, PCL, ESC/P or other driver to convert the EMF file into @@ -9473,18 +9476,18 @@ the printer-specific language. It is not possible for Unix to do the same. Currently there is no program or method to convert a Windows client's GDI output on a Unix server into something a printer could understand. -

    -

    Figure19.12.Print Driver execution on the Server

    Print Driver execution on the Server

    -

    +

    +

    Figure19.12.Print Driver execution on the Server

    Print Driver execution on the Server
    +

    However, there is something similar possible with CUPS. Read on... -

    Network Printing (Windows clients -- UNIX/Samba Print +

    Network Printing (Windows clients -- UNIX/Samba Print Servers)

    Since UNIX print servers cannot execute the Win32 program code on their platform, the picture is somewhat different. However, this doesn't limit your options all that much. In the contrary, you may have a way here to implement printing features which are not possible otherwise. -

    From Windows Clients to a CUPS/Samba Print Server

    +

    From Windows Clients to a CUPS/Samba Print Server

    Here is a simple recipe showing how you can take advantage of CUPS powerful features for the benefit of your Windows network printing clients: @@ -9511,9 +9514,9 @@ other print commands are set up, then printing will use the option automatically passing through (if you want your own defined print commands to work with a Samba that has CUPS support compiled in, simply use printing = sysv). -

    -

    Figure19.13.Printing via CUPS/samba server

    Printing via CUPS/samba server

    -

    Samba receiving Jobfiles and passing them to CUPS

    +

    +

    Figure19.13.Printing via CUPS/samba server

    Printing via CUPS/samba server
    +

    Samba receiving Jobfiles and passing them to CUPS

    Samba must use its own spool directory (it is set by a line similar to path = /var/spool/samba, in the [printers] or @@ -9531,7 +9534,7 @@ A Windows user authenticates only to Samba (by whatever means is configured). If Samba runs on the same host as CUPS, you only need to allow "localhost" to print. If they run on different machines, you need to make sure the Samba host gets access to printing on CUPS. -

    Network PostScript RIP: CUPS Filters on Server -- clients use +

    Network PostScript RIP: CUPS Filters on Server -- clients use PostScript Driver with CUPS-PPDs

    PPDs can control all print device options. They are usually provided by the manufacturer; if you own a PostScript printer, that is. PPD @@ -9551,7 +9554,7 @@ or see if you have lphelp on your system). There are also some different GUI frontends on Linux/UNIX, which can present PPD options to users. PPD options are normally meant to be evaluated by the PostScript RIP on the real PostScript printer. -

    PPDs for non-PS Printers on UNIX

    +

    PPDs for non-PS Printers on UNIX

    CUPS doesn't limit itself to "real" PostScript printers in its usage of PPDs. The CUPS developers have extended the scope of the PPD concept, to also describe available device and driver options for @@ -9568,7 +9571,7 @@ the supplied PostScript. Thus CUPS lets all its printers appear as PostScript devices to its clients, because it can act as a PostScript RIP for those printers, processing the received PostScript code into a proper raster print format. -

    PPDs for non-PS Printers on Windows

    +

    PPDs for non-PS Printers on Windows

    CUPS-PPDs can also be used on Windows-Clients, on top of a "core" PostScript driver (now recommended is the "CUPS PostScript Driver for WindowsNT/2K/XP"; you can also use the Adobe one, with @@ -9584,13 +9587,13 @@ which always remain unfiltered per definition;

  • enable clients to driver, even for many different target printers.

    • Using CUPS PPDs on Windows clients enables these to control all print job settings just as a UNIX client can do too. -

    Windows Terminal Servers (WTS) as CUPS Clients

    +

    Windows Terminal Servers (WTS) as CUPS Clients

    This setup may be of special interest to people experiencing major problems in WTS environments. WTS need often a multitude of non-PostScript drivers installed to run their clients' variety of different printer models. This often imposes the price of much increased instability. -

    Printer Drivers running in "Kernel Mode" cause many +

    Printer Drivers running in "Kernel Mode" cause many Problems

    The reason is that in Win NT printer drivers run in "Kernel Mode", this introduces a high risk for the stability of the system @@ -9607,7 +9610,7 @@ might be because there have so far only been 2 different PostScript drivers the ones from Adobe and the one from Microsoft. Both are very well tested and are as stable as you ever can imagine on Windows. The CUPS driver is derived from the Microsoft one. -

    Workarounds impose Heavy Limitations

    +

    Workarounds impose Heavy Limitations

    In many cases, in an attempt to work around this problem, site administrators have resorted to restrict the allowed drivers installed on their WTS to one generic PCL- and one PostScript driver. This @@ -9615,7 +9618,7 @@ however restricts the clients in the amount of printer options available for them; often they can't get out more than simplex prints from one standard paper tray, while their devices could do much better, if driven by a different driver! ) -

    CUPS: a "Magical Stone"?

    +

    CUPS: a "Magical Stone"?

    Using a PostScript driver, enabled with a CUPS-PPD, seems to be a very elegant way to overcome all these shortcomings. There are, depending on the version of Windows OS you use, up to 3 different PostScript @@ -9627,7 +9630,7 @@ is a certain price for this too: a CUPS server acting as a PostScript RIP for its clients requires more CPU and RAM than when just acting as a "raw spooling" device. Plus, this setup is not yet widely tested, although the first feedbacks look very promising. -

    PostScript Drivers with no major problems -- even in Kernel +

    PostScript Drivers with no major problems -- even in Kernel Mode

    More recent printer drivers on W2K and XP don't run in Kernel mode (unlike Win NT) any more. However, both operating systems can still @@ -9644,14 +9647,14 @@ development efforts. This is what the CUPS people have done. The license doesn't allow them to publish the whole of the source code. However, they have released the "diff" under the GPL, and if you are owner of an "MS DDK for Win NT", you can check the driver yourself. -

    Setting up CUPS for driver Download

    +

    Setting up CUPS for driver Download

    As we have said before: all previously known methods to prepare client printer drivers on the Samba server for download and "Point'n'Print" convenience of Windows workstations are working with CUPS too. These methods were described in the previous chapter. In reality, this is a pure Samba business, and only relates to the Samba/Win client relationship. -

    cupsaddsmb: the unknown Utility

    +

    cupsaddsmb: the unknown Utility

    The cupsaddsmb utility (shipped with all current CUPS versions) is an alternative method to transfer printer drivers into the Samba [print$] share. Remember, this share is where @@ -9676,7 +9679,7 @@ job-billing)

    However, currently only Windows NT, 2000, and XP are supported by the CUPS drivers. You will need to get the respective part of Adobe driver too if you need to support Windows 95, 98, and ME clients. -

    Prepare your smb.conf for +

    Prepare your smb.conf for cupsaddsmb

    Prior to running cupsaddsmb, you need the following settings in smb.conf: @@ -9705,7 +9708,7 @@ Prior to running cupsaddsmb, you need the following settings in read only = yes write list = root -

    CUPS Package of "PostScript Driver for WinNT/2k/XP"

    +

    CUPS Package of "PostScript Driver for WinNT/2k/XP"

    CUPS users may get the exactly same packages fromhttp://www.cups.org/software.html. It is a separate package from the CUPS base software files, tagged as CUPS 1.1.x Windows NT/2k/XP Printer Driver for SAMBA @@ -9776,7 +9779,7 @@ Studio 6. Driver developers are not allowed to distribute the whole of the source code as Free Software. However, CUPS developers released the "diff" in source code under the GPL, so anybody with a license of Visual Studio and a DDK will be able to compile for him/herself. -

    Recognize the different Driver Files

    +

    Recognize the different Driver Files

    The CUPS drivers don't support the "older" Windows 95/98/ME, but only the Windows NT/2000/XP client: 

    @@ -9811,7 +9814,7 @@ support of WinNT/2k/XP are present in , the Adobe ones will be ignored
 and the CUPS ones will be used. If you prefer -- for whatever reason
 -- to use Adobe-only drivers, move away the 3 CUPS driver files. The
 Win95/98/ME clients use the Adobe drivers in any case.
-

    Acquiring the Adobe Driver Files

    +

    Acquiring the Adobe Driver Files

    Acquiring the Adobe driver files seems to be unexpectedly difficult for many users. They are not available on the Adobe website as single files and the self-extracting and/or self-installing Windows-exe is @@ -9824,7 +9827,7 @@ Generic PostScript printer. After this, the client's where you can get them with smbclient from the CUPS host. A more detailed description about this is in the next (the CUPS printing) chapter. -

    ESP Print Pro Package of "PostScript Driver for +

    ESP Print Pro Package of "PostScript Driver for WinNT/2k/XP"

    Users of the ESP Print Pro software are able to install their "Samba Drivers" package for this purpose with no problem. Retrieve the driver @@ -9840,7 +9843,7 @@ driver files; i.e. mainly setup the [print$] share, etc. The ESP Print Pro package includes the CUPS driver files as well as a (licensed) set of Adobe drivers for the Windows 95/98/ME client family. -

    Caveats to be considered

    +

    Caveats to be considered

    Once you have run the install script (and possibly manually moved the cups.hlp file to /usr/share/cups/drivers/), the driver is @@ -9860,8 +9863,8 @@ working in an environment where everything is configured for Once the driver files are in the [print$] share and are initialized, they are ready to be downloaded and installed by the Win NT/2k/XP clients. -

    Note

    -

    1. +

      Note

      +

      1. Win 9x/ME clients won't work with the CUPS PostScript driver. For these you'd still need to use the ADOBE*.* drivers as previously. @@ -9896,8 +9899,8 @@ as described elsewhere in the "Samba HOWTO Collection": either change a driver for an existing printer by running the "Printer Properties" dialog, or use rpcclient with the setdriver sub-command. -

      -

    What are the Benefits of using the "CUPS PostScript Driver for +

    +

    What are the Benefits of using the "CUPS PostScript Driver for Windows NT/2k/XP" as compared to the Adobe Driver?

    You are interested in a comparison between the CUPS and the Adobe PostScript drivers? For our purposes these are the most important @@ -9943,7 +9946,7 @@ not disturb any other applications as they will regard it as a comment and simply ignore it).

  • the CUPS PostScript driver will be the heart of the fully fledged CUPS IPP client for Windows NT/2K/XP to be released soon (probably alongside the first Beta release for CUPS -1.2).

    • Run "cupsaddsmb" (quiet Mode)

    +1.2).

    Run "cupsaddsmb" (quiet Mode)

    The cupsaddsmb command copies the needed files into your [print$] share. Additionally, the PPD associated with this printer is copied from @@ -9973,7 +9976,7 @@ To share all printers and drivers, use th -a parameter instead of a printer name. Since cupsaddsmb "exports" the printer drivers to Samba, it should be obvious that it only works for queues with a CUPS driver associated. -

    Run "cupsaddsmb" with verbose Output

    +

    Run "cupsaddsmb" with verbose Output

    Probably you want to see what's going on. Use the -v parameter to get a more verbose output. The output below was edited for better readability: all "\" at the end of @@ -10058,7 +10061,7 @@ you'll discover error messages like NT_STATUS_OBJECT_NAME_COLLISION in between. They occur, because the directories WIN40 and W32X86 already existed in the [print$] driver download share (from a previous driver installation). They are harmless here. -

    Understanding cupsaddsmb

    +

    Understanding cupsaddsmb

    What has happened? What did cupsaddsmb do? There are five stages of the procedure

    1. call the CUPS server via IPP and request the @@ -10081,7 +10084,7 @@ same host): # cupsaddsmb -H sambaserver -h cupsserver -v printername -

    How to recognize if cupsaddsm completed successfully

    +

    How to recognize if cupsaddsm completed successfully

    You must always check if the utility completed successfully in all fields. You need as a minimum these 3 messages amongst the output: @@ -10102,7 +10105,7 @@ It is impossible to see any diagnostic output if you don't run cupsaddsmb in verbose mode. Therefore we strongly recommend to not use the default quiet mode. It will hide any problems from you which might occur. -

    cupsaddsmb with a Samba PDC

    +

    cupsaddsmb with a Samba PDC

    You can't get the standard cupsaddsmb command to run on a Samba PDC? You are asked for the password credential all over again and again and the command just will not take off at all? Try one of these @@ -10116,13 +10119,13 @@ variations:

    (Note the two backslashes: the first one is required to "escape" the second one). -

    cupsaddsmb Flowchart

    +

    cupsaddsmb Flowchart

    Here is a chart about the procedures, commandflows and dataflows of the "cupaddsmb" command. Note again: cupsaddsmb is not intended to, and does not work with, "raw" queues! -

    -

    Figure19.14.cupsaddsmb flowchart

    cupsaddsmb flowchart

    -

    Installing the PostScript Driver on a Client

    +

    +

    Figure19.14.cupsaddsmb flowchart

    cupsaddsmb flowchart
    +

    Installing the PostScript Driver on a Client

    After cupsaddsmb completed, your driver is prepared for the clients to use. Here are the steps you must perform to download and install it via "Point'n'Print". From a Windows client, browse to the CUPS/Samba @@ -10158,7 +10161,7 @@ functions. (Note that user "ntadmin" needs to be a valid Samba user with the required privileges to access the printershare) This would set up the printer connection in the traditional LanMan way (not using MS-RPC). -

    Avoiding critical PostScript Driver Settings on the +

    Avoiding critical PostScript Driver Settings on the Client

    Soooo: printing works, but there are still problems. Most jobs print well, some don't print at all. Some jobs have problems with fonts, @@ -10184,7 +10187,7 @@ get a printout at all) (Adobe)

  • Sometimes you can choose : in case of problems try 2 instead of 3 (the latest ESP Ghostscript package handles Level 3 PostScript very well) (Adobe).

  • Say Yes to PostScript -Error Handler (Adobe)

    • Installing PostScript Driver Files manually (using +Error Handler (Adobe)

    Installing PostScript Driver Files manually (using rpcclient)

    Of course you can run all the commands which are embedded into the cupsaddsmb convenience utility yourself, one by one, and hereby upload @@ -10205,7 +10208,7 @@ the MS-RPC protocol. You can use it to query (and command) a Win NT (or 2K/XP) PC too. MS-RPC is used by Windows clients, amongst other things, to benefit from the "Point'n'Print" features. Samba can now mimic this too. -

    A Check of the rpcclient man Page

    +

    A Check of the rpcclient man Page

    First let's have a little check of the rpcclient man page. Here are two relevant passages:

    @@ -10238,7 +10241,7 @@ printer driver associated with an installed printer. The printer driver must already be correctly installed on the print server.

    See also the enumprinters and enumdrivers commands for obtaining a list of installed printers and drivers. -

    Understanding the rpcclient man Page

    +

    Understanding the rpcclient man Page

    The exact format isn't made too clear by the man page, since you have to deal with some parameters containing spaces. Here is a better description for it. We have line-broken the @@ -10274,7 +10277,7 @@ box now, and access it from a UNIX workstation. We will query it with rpcclient to see what it tells us and try to understand the man page more clearly which we've read just now. -

    Producing an Example by querying a Windows Box

    +

    Producing an Example by querying a Windows Box

    We could run rpcclient with a getdriver or a getprinter subcommand (in level 3 verbosity) against it. Just sit down at UNIX or @@ -10319,7 +10322,7 @@ Some printer drivers list additional files under the label ListOfFiles,Comma-separated. For the CUPS PostScript drivers we don't need any (nor would we for the Adobe PostScript driver): therefore the field will get a "NULL" entry. -

    What is required for adddriver and setdriver to succeed

    +

    What is required for adddriver and setdriver to succeed

    From the manpage (and from the quoted output of cupsaddsmb, above) it becomes clear that you need to have certain conditions in order to make the manual uploading @@ -10350,12 +10353,12 @@ rpcclient. A long-standing bug prevented a proper update of the printer list until every smbd process had received a SIGHUP or was restarted. Remember this in case you've created the CUPS printer just shortly ago and encounter problems: try restarting -Samba.

    Manual Commandline Driver Installation in 15 little Steps

    +Samba.

    Manual Commandline Driver Installation in 15 little Steps

    We are going to install a printer driver now by manually executing all required commands. As this may seem a rather complicated process at first, we go through the procedure step by step, explaining every single action item as it comes up. -

    First Step: Install the Printer on CUPS

    +
    First Step: Install the Printer on CUPS
     
 # lpadmin -p mysmbtstprn -v socket://10.160.51.131:9100 -E -P /home/kurt/canonIR85.ppd
 
@@ -10364,7 +10367,7 @@ This installs printer with the name mysmbtstprn<
 to the CUPS system. The printer is accessed via a socket
 (a.k.a. JetDirect or Direct TCP/IP) connection. You need to be root
 for this step
-
    Second Step (optional): Check if the Printer is recognized by
+
    Second Step (optional): Check if the Printer is recognized by
 Samba
     
  # rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep -C2 mysmbtstprn
@@ -10385,7 +10388,7 @@ already. You need to know root's Samba password (as set by the
 following steps. Alternatively you can authenticate as one of the
 users from the "write list" as defined in smb.conf for
 [print$].
-
    Third Step (optional): Check if Samba knows a Driver for the
+
    Third Step (optional): Check if Samba knows a Driver for the
 Printer
     
 #  rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver
@@ -10411,7 +10414,7 @@ This step was done for the purpose of demonstrating this condition. An
 attempt to connect to the printer at this stage will prompt the
 message along the lines: "The server has not the required printer
 driver installed".
-
    Fourth Step: Put all required Driver Files into Samba's
+
    Fourth Step: Put all required Driver Files into Samba's
 [print$]
     
 #  smbclient //localhost/print\$ -U 'root%xxxx'                        \ 
@@ -10430,7 +10433,7 @@ present in the [print$] share. However, client
 would still not be able to install them, because Samba does not yet
 treat them as driver files. A client asking for the driver would still
 be presented with a "not installed here" message.
-
    Fifth Step: Verify where the Driver Files are now
    +
    Fifth Step: Verify where the Driver Files are now
     
 #  ls -l /etc/samba/drivers/W32X86/
  total 669
@@ -10444,7 +10447,7 @@ be presented with a "not installed here" message.
 
    
 The driver files now are in the W32X86 architecture "root" of
 [print$].
-
    Sixth Step: Tell Samba that these are
+
    Sixth Step: Tell Samba that these are
 Driver Files
 (adddriver)
     
@@ -10465,7 +10468,7 @@ driver. It is normally a good idea to use the same name as is used for
 the printername; however, in big installations you may use this driver
 for a number of printers which have obviously different names. So the
 name of the driver is not fixed.
-
    Seventh Step: Verify where the Driver Files are now
    +
    Seventh Step: Verify where the Driver Files are now
     
 #  ls -l /etc/samba/drivers/W32X86/
  total 1
@@ -10484,7 +10487,7 @@ name of the driver is not fixed.
 
    
 Notice how step 6 did also move the driver files to the appropriate
 subdirectory. Compare with the situation after step 5.
-
    Eighth Step (optional): Verify if Samba now recognizes the
+
    Eighth Step (optional): Verify if Samba now recognizes the
 Driver
     
 #  rpcclient -Uroot%xxxx -c 'enumdrivers 3' localhost | grep -B2 -A5 mydrivername
@@ -10501,7 +10504,7 @@ Driver

    Remember, this command greps for the name you did choose for the driver in step Six. This command must succeed before you can proceed. -

    Ninth Step: Tell Samba which Printer should use these Driver +

    Ninth Step: Tell Samba which Printer should use these Driver Files (setdriver)

     
 #  rpcclient -Uroot%xxxx -c 'setdriver mysmbtstprn mydrivername' localhost
@@ -10515,7 +10518,7 @@ driver. You don't need to repeat all the previous steps for the
 setdriver command to succeed. The only pre-conditions are:
 enumdrivers must find the driver and
 enumprinters must find the printer.
-

    Tenth Step (optional): Verify if Samba has this Association +

    Tenth Step (optional): Verify if Samba has this Association recognized

     
 #  rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver
@@ -10557,7 +10560,7 @@ Compare these results with the ones from steps 2 and 3. Note that
 every single of these commands show the driver is installed.  Even
 the enumprinters command now lists the driver
 on the "description" line.
-

    Eleventh Step (optional): Tickle the Driver into a correct +

    Eleventh Step (optional): Tickle the Driver into a correct Device Mode

    You certainly know how to install the driver on the client. In case you are not particularly familiar with Windows, here is a short @@ -10582,7 +10585,7 @@ into the "DOS box" (type root's smbpassword when prompted): Change any printer setting once (like "portrait" --> "landscape"), click "Apply"; change the setting back. -

    Twelfth Step: Install the Printer on a Client +

    Twelfth Step: Install the Printer on a Client ("Point'n'Print")

     
  C:\> rundll32 printui.dll,PrintUIEntry /in /n "\\sambacupsserver\mysmbtstprn"
@@ -10590,24 +10593,24 @@ back.

    If it doesn't work it could be a permission problem with the [print$] share. -

    Thirteenth Step (optional): Print a Test Page

    +

    Thirteenth Step (optional): Print a Test Page

     
  C:\> rundll32 printui.dll,PrintUIEntry /p /n "\\sambacupsserver\mysmbtstprn"

    Then hit [TAB] 5 times, [ENTER] twice, [TAB] once and [ENTER] again and march to the printer. -

    Fourteenth Step (recommended): Study the Test Page

    +

    Fourteenth Step (recommended): Study the Test Page

    Hmmm.... just kidding! By now you know everything about printer installations and you don't need to read a word. Just put it in a frame and bolt it to the wall with the heading "MY FIRST RPCCLIENT-INSTALLED PRINTER" - why not just throw it away! -

    Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your +

    Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your Success

     
 # echo "Cheeeeerioooooo! Success..." >> /var/log/samba/log.smbd     
 
-

    Troubleshooting revisited

    +

    Troubleshooting revisited

    The setdriver command will fail, if in Samba's mind the queue is not already there. You had promising messages about the: 

    @@ -10650,7 +10653,7 @@ An alternative command could be this:

    BTW, you can use these commands, plus a few more, of course, to install drivers on remote Windows NT print servers too! -

    The printing *.tdb Files

    +

    The printing *.tdb Files

    Some mystery is associated with the series of files with a tdb-suffix appearing in every Samba installation. They are connections.tdb, @@ -10665,7 +10668,7 @@ tdb-suffix appearing in every Samba installation. They are ntprinters.tdb, sessionid.tdb and secrets.tdb. What is their purpose? -

    Trivial DataBase Files

    +

    Trivial DataBase Files

    A Windows NT (Print) Server keeps track of all information needed to serve its duty toward its clients by storing entries in the Windows "Registry". Client queries are answered by reading from the registry, @@ -10678,7 +10681,7 @@ or /var/lock/samba/ . The printing related files are ntprinters.tdb, printing.tdb,ntforms.tdb and ntdrivers.tdb. -

    Binary Format

    +

    Binary Format

    *.tdb files are not human readable. They are written in a binary format. "Why not ASCII?", you may ask. "After all, ASCII configuration files are a good and proofed tradition on UNIX." @@ -10691,7 +10694,7 @@ same time. The file format of Samba's *.tdb files allows for this provision. Many smbd processes may write to the same *.tdb file at the same time. This wouldn't be possible with pure ASCII files. -

    Losing *.tdb Files

    +

    Losing *.tdb Files

    It is very important that all *.tdb files remain consistent over all write and read accesses. However, it may happen that these files do get corrupted. (A @@ -10701,7 +10704,7 @@ etc.). In cases of trouble, a deletion of the old printing-related *.tdb files may be the only option. You need to re-create all print related setup after that. Or you have made a backup of the *.tdb files in time. -

    Using tdbbackup

    +

    Using tdbbackup

    Samba ships with a little utility which helps the root user of your system to back up your *.tdb files. If you run it with no argument, it prints a little usage message: @@ -10731,7 +10734,7 @@ Here is how I backed up my printing.tdb file: -rw------- 1 root root 40960 May 2 03:44 printing.tdb -rw------- 1 root root 40960 May 2 03:44 printing.tdb.bak -

    CUPS Print Drivers from Linuxprinting.org

    +

    CUPS Print Drivers from Linuxprinting.org

    CUPS ships with good support for HP LaserJet type printers. You can install the generic driver as follows: 

    @@ -10765,7 +10768,7 @@ not work with PPDs generated for the old cupsomatic. The new-style
 PPDs are 100% compliant to the Adobe PPD specification. They are
 intended to be used by Samba and the cupsaddsmb utility also, to
 provide the driver files for the Windows clients also!
-

    foomatic-rip and Foomatic explained

    +

    foomatic-rip and Foomatic explained

    Nowadays most Linux distros rely on the utilities of Linuxprinting.org to create their printing related software (which, BTW, works on all UNIXes and on Mac OS X or Darwin too). It is not known as well as it @@ -10782,7 +10785,7 @@ its Foomatic< database. Currently there are 245 drivers in the database: many drivers support various models, and many models may be driven by different drivers; it's your choice! -

    690 "perfect" Printers

    +

    690 "perfect" Printers

    At present there are 690 devices dubbed as working "perfectly", 181 "mostly", 96 "partially" and 46 are "Paperweights". Keeping in mind that most of these are non-PostScript models (PostScript printers are @@ -10793,7 +10796,7 @@ doesn't also scan and copy and fax under GNU/Linux: then this is a truly astonishing achievement. Three years ago the number was not more than 500, and Linux or UNIX "printing" at the time wasn't anywhere near the quality it is today! -

    How the "Printing HOWTO" started it all

    +

    How the "Printing HOWTO" started it all

    A few years ago Grant Taylor started it all. The roots of today's Linuxprinting.org are in the first Linux Printing @@ -10807,7 +10810,7 @@ hardware and driver zoo that made up Linux printing of the time. This database became the core component of today's Foomatic collection of tools and data. In the meantime it has moved to an XML representation of the data. -

    Foomatic's strange Name

    +

    Foomatic's strange Name

    "Why the funny name?", you ask. When it really took off, around spring 2000, CUPS was far less popular than today, and most systems used LPD, LPRng or even PDQ to print. CUPS shipped with a few generic "drivers" @@ -10830,7 +10833,7 @@ developments available for CUPS;

  • It made available a lot of addit to CUPS users (because often the "traditional" Ghostscript way of printing was the only one available);

  • It gave all the advanced CUPS options (web interface, GUI driver configurations) to users wanting (or needing) to use -Ghostscript filters.

    • cupsomatic, pdqomatic, lpdomatic, directomatic

    +Ghostscript filters.

    cupsomatic, pdqomatic, lpdomatic, directomatic

    CUPS worked through a quickly-hacked up filter script named cupsomatic. cupsomatic ran the printfile through Ghostscript, constructing automatically the rather complicated command line needed. It just @@ -10864,7 +10867,7 @@ Foomatic up to versions 2.0.x required (ugly) Perl data structures attached the Linuxprinting.org PPDs for CUPS. It had a different "*omatic" script for every spooler, as well as different printer configuration files.. -

    7.13.1.5.The Grand Unification +

    7.13.1.5.The Grand Unification achieved...

    This all has changed in Foomatic versions 2.9 (Beta) and released as "stable" 3.0. This has now achieved the convergence of all *omatic @@ -10900,7 +10903,7 @@ sizes for many printers; and it will support printing on media drawn from different paper trays within the same job (in both cases: even where there is no support for this from Windows-based vendor printer drivers). -

    Driver Development outside

    +

    Driver Development outside

    Most driver development itself does not happen within Linuxprinting.org. Drivers are written by independent maintainers. Linuxprinting.org just pools all the information, and stores it in its @@ -10923,7 +10926,7 @@ effort, started by Michael Sweet (also lead developer for CUPS), now directed by Robert Krawitz, which has achieved an amazing level of photo print quality (many Epson users swear that its quality is better than the vendor drivers provided by Epson for the Microsoft -platforms). This currently supports 522 models.

    Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and +platforms). This currently supports 522 models.

    Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and commercial Unix

    Linuxprinting.org today is the one-stop "shop" to download printer drivers. Look for printer information and tutorials @@ -10944,7 +10947,7 @@ of the Foomatic project. Till Kamppeter from MandrakeSoft is doing an excellent job in his spare time to maintain Linuxprinting.org and Foomatic. So if you use it often, please send him a note showing your appreciation. -

    Foomatic Database generated PPDs

    +

    Foomatic Database generated PPDs

    The Foomatic database is an amazing piece of ingenuity in itself. Not only does it keep the printer and driver information, but it is organized in a way that it can generate "PPD" files "on the fly" from @@ -10969,7 +10972,7 @@ GUI tools (like KDE's marvellous "gtklp", "xpp" and the CUPS web interface) read the PPD too and use this information to present the available settings to the user as an intuitive menu selection. -

    foomatic-rip and Foomatic-PPD Download and Installation

    +

    foomatic-rip and Foomatic-PPD Download and Installation

    Here are the steps to install a foomatic-rip driven "LaserJet 4 Plus" compatible printer in CUPS (note that recent distributions of SuSE, UnitedLinux and Mandrake may ship with a complete package of @@ -11068,7 +11071,7 @@ the driver/model) contain support for a certain "device", representing the selected "driver" for your model (as shown by "gs -h")

  • foomatic-rip needs a new version of PPDs (PPD versions produced for cupsomatic don't work with -foomatic-rip).

    • Page Accounting with CUPS

    +foomatic-rip).

    Page Accounting with CUPS

    Often there are questions regarding "print quotas" wherein Samba users (that is, Windows clients) should not be able to print beyond a certain amount of pages or data volume per day, week or month. This @@ -11081,7 +11084,7 @@ Of course one could "hack" things with one's own scripts. But then there is CUPS. CUPS supports "quotas" which can be based on sizes of jobs or on the number of pages or both, and are spanning any time period you want. -

    Setting up Quotas

    +

    Setting up Quotas

    This is an example command how root would set a print quota in CUPS, assuming an existing printer named "quotaprinter": 

    @@ -11092,7 +11095,7 @@ assuming an existing printer named "quotaprinter":
 This would limit every single user to print 100 pages or 1024 KB of
 data (whichever comes first) within the last 604,800 seconds ( = 1
 week).
-

    Correct and incorrect Accounting

    +

    Correct and incorrect Accounting

    For CUPS to count correctly, the printfile needs to pass the CUPS "pstops" filter, otherwise it uses a "dummy" count of "1". Some printfiles don't pass it (eg: image files) but then those are mostly 1 @@ -11107,7 +11110,7 @@ printer is a non-PostScript model, you need to let CUPS do the job to convert the file to a print-ready format for the target printer. This will be working for currently about 1,000 different printer models, see http://www.linuxprinting.org/printer_list.cgi). -

    Adobe and CUPS PostScript Drivers for Windows Clients

    +

    Adobe and CUPS PostScript Drivers for Windows Clients

    Before CUPS-1.1.16 your only option was to use the Adobe PostScript Driver on the Windows clients. The output of this driver was not always passed through the "pstops" filter on the CUPS/Samba side, and @@ -11127,7 +11130,7 @@ printfile

    You can read more about the setup of this combination in the manpage for "cupsaddsmb" (which is only present with CUPS installed, and only current from CUPS 1.1.16). -

    The page_log File Syntax

    +

    The page_log File Syntax

    These are the items CUPS logs in the "page_log" for every single page of a job:

    • Printer name

    • User name

    • Job ID

    • Time of printing

    • the page number

    • the number of copies

    • a billing information string @@ -11149,7 +11152,7 @@ This was job ID "401", printed on "infotec_IS2027" by user & from IP address 10.160.50.13. The next job had ID "402", was sent by user "boss" from IP address 10.160.51.33,printed from one page 440 copies and is set to be billed to "finance-dep". -

    Possible Shortcomings

    +

    Possible Shortcomings

    What flaws or shortcomings are there with this quota system?

    • the ones named above (wrongly logged job in case of printer hardware failure, etc.)

    • in reality, CUPS counts the job pages that are being @@ -11163,7 +11166,7 @@ groups

    • no means to read out the current balance or the "used-up" number of current quota

    • a user having used up 99 sheets of 100 quota will still be able to send and print a 1,000 sheet job

    • a user being denied a job because of a filled-up quota doesn't get a meaningful error message from CUPS other than -"client-error-not-possible".

    Future Developments

    +"client-error-not-possible".

    Future Developments

    This is the best system currently available, and there are huge improvements under development for CUPS 1.2:

    • page counting will go into the "backends" (these talk @@ -11171,9 +11174,9 @@ directly to the printer and will increase the count in sync with the actual printing process: thus a jam at the 5th sheet will lead to a stop in the counting)

    • quotas will be handled more flexibly

    • probably there will be support for users to inquire their "accounts" in advance

    • probably there will be support for some other tools -around this topic

    Other Accounting Tools

    +around this topic

    Other Accounting Tools

    PrintAnalyzer, pyKota, printbill, LogReport. -

    Additional Material

    +

    Additional Material

    A printer queue with no PPD associated to it is a "raw" printer and all files will go directly there as received by the spooler. The exceptions are file types "application/octet-stream" @@ -11251,7 +11254,7 @@ the jobs of hundreds of users on some big machine, where no user is allowed to have direct access (such as when the operators often need to load the proper paper type before running the 10,000 page job requested by marketing for the mailing, etc.). -

    Auto-Deletion or Preservation of CUPS Spool Files

    +

    Auto-Deletion or Preservation of CUPS Spool Files

    Samba print files pass through two "spool" directories. One is the incoming directory managed by Samba, (set in the path = /var/spool/samba directive in the @@ -11260,7 +11263,7 @@ incoming directory managed by Samba, (set in the path your UNIX print subsystem. For CUPS it is normally /var/spool/cups/, as set by the cupsd.conf directive RequestRoot /var/spool/cups. -

    CUPS Configuration Settings explained

    +

    CUPS Configuration Settings explained

    Some important parameter settings in the CUPS configuration file cupsd.conf are:

    PreserveJobHistory Yes

    @@ -11284,7 +11287,7 @@ maximum to 0 disables this functionality. The default setting is

    (There are also additional settings for "MaxJobsPerUser" and "MaxJobsPerPrinter"...) -

    Pre-conditions

    +

    Pre-conditions

    For everything to work as announced, you need to have three things:

    • a Samba-smbd which is compiled against "libcups" (Check @@ -11295,15 +11298,15 @@ In this case all other manually set printing-related commands (like "print command", "lpq command", "lprm command", "lppause command" or "lpresume command") are ignored and they should normally have no influence what-so-ever on your printing. -

    Manual Configuration

    +

    Manual Configuration

    If you want to do things manually, replace the "printing = cups" by "printing = bsd". Then your manually set commands may work (haven't tested this), and a "print command = lp -d %P %s; rm %s" may do what you need. -

    When not to use Samba to print to +

    When not to use Samba to print to CUPS

    [TO BE DONE] -

    In Case of Trouble.....

    +

    In Case of Trouble.....

    If you have more problems, post the output of these commands to the CUPS or Samba mailing lists (choose the one which seems more relevant to your problem): @@ -11319,13 +11322,13 @@ compact way. Don't forget to name the CUPS and Samba versions you are using! This saves bandwidth and makes for easier readability for experts (and you are expecting experts to read them, right? ;-) -

    Where to find Documentation

    +

    Where to find Documentation

    [TO BE DONE] -

    How to ask for Help

    +

    How to ask for Help

    [TO BE DONE] -

    Where to find Help

    +

    Where to find Help

    [TO BE DONE] -

    Appendix

    Printing from CUPS to Windows attached +

    Appendix

    Printing from CUPS to Windows attached Printers

    From time to time the question arises, how you can print to a Windows attached printer @@ -11413,7 +11416,7 @@ doesn't require a password! Printing will only work if you have a working netbios name resolution up and running. Note that this is a feature of CUPS and you don't necessarily need to have smbd running (but who wants that? :-). -

    More CUPS filtering Chains

    +

    More CUPS filtering Chains

    The following diagrams reveal how CUPS handles print jobs. 

     #########################################################################
@@ -11704,7 +11707,7 @@ The following diagrams reveal how CUPS handles print jobs.
 #       CUPS and ESP PrintPro plug-in where rastertosomething is noted.
 #
 ##########################################################################
-

    Trouble Shooting Guidelines to fix typical Samba printing +

    Trouble Shooting Guidelines to fix typical Samba printing Problems

    This is a short description of how to debug printing problems with Samba. This describes how to debug problems with printing from @@ -11817,35 +11820,35 @@ three dialogs look the same. Only one of does what you intend. You need to be Administrator or Print Administrator to do this for all users. Here is how I do in on XP: -

    1. The first "wrong" way: +

      1. The first "wrong" way: -

        1. Open the Printers +

          1. Open the Printers folder.

          2. Right-click on the printer (remoteprinter on cupshost) and select in context menu Printing Preferences...

          3. Look at this dialog closely and remember what it looks -like.

          -

        2. The second "wrong" way: +like.

        +
      2. The second "wrong" way: -

        1. Open the Printers +

          1. Open the Printers folder.

          2. Right-click on the printer (remoteprinter on cupshost) and select in the context menu Properties

          3. Click on the General tab

          4. Click on the button Printing Preferences...

          5. A new dialog opens. Keep this dialog open and go back -to the parent dialog.

          -

        2. The third, the "correct" way: (should you do +to the parent dialog.

        +
      3. The third, the "correct" way: (should you do this from the beginning, just carry out steps 1. and 2. from second "way" above) -

        1. Click on the Advanced +

          1. Click on the Advanced tab. (Hmmm... if everything is "Grayed Out", then you are not logged in as a user with enough privileges).

          2. Click on the Printing Defaults... button.

          3. On any of the two new tabs, click on the Advanced... button.

          4. A new dialog opens. Compare this one to the other, -identical looking one from "B.5" or A.3".

          -

        +identical looking one from "B.5" or A.3".

      +

    Do you see any difference? I don't either... However, only the last one, which you arrived at with steps "C.1.-6." will save any settings permanently and be the defaults for new users. If you want all clients @@ -11928,43 +11931,43 @@ Windows box with a shared PostScript printer: smbclient W32X86/2 subdir to mget ADOBE* and other files or to WIN40/0 to do the same. -- Another option is to download the *.exe packaged -files from the Adobe website.

    An Overview of the CUPS Printing Processes

    -

    Figure19.15.CUPS Printing Overview

    CUPS Printing Overview

    -

    Chapter20.Stackable VFS modules

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Tim Potter

    Simo Sorce

    original vfs_skel README

    Alexander Bokovoy

    original vfs_netatalk docs

    Stefan Metzmacher

    Update for multiple modules

    Table of Contents

    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors

    Features and Benefits

    +files from the Adobe website.

    An Overview of the CUPS Printing Processes

    +

    Figure19.15.CUPS Printing Overview

    CUPS Printing Overview
    +

    Chapter20.Stackable VFS modules

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Tim Potter

    Simo Sorce

    original vfs_skel README

    Alexander Bokovoy

    original vfs_netatalk docs

    Stefan Metzmacher

    Update for multiple modules

    Table of Contents

    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors

    Features and Benefits

    Since Samba-3, there is support for stackable VFS(Virtual File System) modules. Samba passes each request to access the unix file system thru the loaded VFS modules. This chapter covers all the modules that come with the samba source and references to some external modules. -

    Discussion

    +

    Discussion

    If not supplied with your platform distribution binary Samba package you may have problems to compile these modules, as shared libraries are compiled and linked in different ways on different systems. They currently have been tested against GNU/Linux and IRIX. -

    +

    To use the VFS modules, create a share similar to the one below. The important parameter is the vfs objects parameter where you can list one or more VFS modules by name. For example, to log all access to files and put deleted files in a recycle bin: -

    +
     [audit]
         comment = Audited /data directory
         path = /data
         vfs objects = audit recycle
         writeable = yes
         browseable = yes
-
    
-
    
+
    +

    The modules are used in the order in which they are specified.

    Samba will attempt to load modules from the lib directory in the root directory of the samba installation (usually /usr/lib/samba/vfs or /usr/local/samba/lib/vfs ). -

    +

    Some modules can be used twice for the same share. This can be done using a configuration similar to the one below. -

    +
     [test]
         comment = VFS TEST
         path = /data
@@ -11974,12 +11977,12 @@ This can be done using a configuration similar to the one below.
 		example1: parameter = 1
 		example:  parameter = 5
 		test:	  parameter = 7
-
    
-

    Included modules

    audit

    + +

    Included modules

    audit

    A simple module to audit file access to the syslog facility. The following operations are logged: -

    share
    connect/disconnect
    directory opens/create/remove
    file open/close/rename/unlink/chmod

    -

    extd_audit

    +
    share
    connect/disconnect
    directory opens/create/remove
    file open/close/rename/unlink/chmod
    +

    extd_audit

    This module is identical with the audit module above except that it sends audit logs to both syslog as well as the smbd log file/s. The loglevel for this module is set in the smb.conf file. @@ -11987,23 +11990,23 @@ This can be done using a configuration similar to the one below. The logging information that will be written to the smbd log file is controlled by the log level parameter in smb.conf. The following information will be recorded: -

    Table20.1.Extended Auditing Log Information

    Log LevelLog Details - File and Directory Operations
    0Creation / Deletion
    1Create / Delete / Rename / Permission Changes
    2Create / Delete / Rename / Perm Change / Open / Close

    fake_perms

    +

    Table20.1.Extended Auditing Log Information

    Log LevelLog Details - File and Directory Operations
    0Creation / Deletion
    1Create / Delete / Rename / Permission Changes
    2Create / Delete / Rename / Perm Change / Open / Close

    fake_perms

    This module was created to allow Roaming Profile files and directories to be set (on the Samba server under Unix) as read only. This module will if installed on the Profiles share will report to the client that the Profile files and directories are writable. This satisfies the client even though the files will never be overwritten as the client logs out or shuts down. -

    recycle

    +

    recycle

    A recycle-bin like module. When used any unlink call will be intercepted and files moved to the recycle directory instead of being deleted. -

    Supported options: -

    recycle:repository

    FIXME

    recycle:keeptree

    FIXME

    recycle:versions

    FIXME

    recycle:touch

    FIXME

    recycle:maxsize

    FIXME

    recycle:exclude

    FIXME

    recycle:exclude_dir

    FIXME

    recycle:noversions

    FIXME

    -

    netatalk

    +

    Supported options: +
    recycle:repository

    FIXME

    recycle:keeptree

    FIXME

    recycle:versions

    FIXME

    recycle:touch

    FIXME

    recycle:maxsize

    FIXME

    recycle:exclude

    FIXME

    recycle:exclude_dir

    FIXME

    recycle:noversions

    FIXME

    +

    netatalk

    A netatalk module, that will ease co-existence of samba and netatalk file sharing services. -

    Advantages compared to the old netatalk module: -

    it doesn't care about creating of .AppleDouble forks, just keeps them in sync
    if a share in smb.conf doesn't contain .AppleDouble item in hide or veto list, it will be added automatically

    -

    VFS modules available elsewhere

    +

    Advantages compared to the old netatalk module: +
    it doesn't care about creating of .AppleDouble forks, just keeps them in sync
    if a share in smb.conf doesn't contain .AppleDouble item in hide or veto list, it will be added automatically
    +

    VFS modules available elsewhere

    This section contains a listing of various other VFS modules that have been posted but don't currently reside in the Samba CVS tree for one reason or another (e.g. it is easy for the maintainer @@ -12011,7 +12014,7 @@ to have his or her own CVS tree).

    No statements about the stability or functionality of any module should be implied due to its presence here. -

    DatabaseFS

    +

    DatabaseFS

    URL: http://www.css.tayloru.edu/~elorimer/databasefs/index.php

    By Eric Lorimer.

    I have created a VFS module which implements a fairly complete read-only @@ -12026,15 +12029,15 @@ should be implied due to its presence here. Any feedback would be appreciated: comments, suggestions, patches, etc... If nothing else, hopefully it might prove useful for someone else who wishes to create a virtual filesystem. -

    vscan

    URL: http://www.openantivirus.org/

    +

    vscan

    URL: http://www.openantivirus.org/

    samba-vscan is a proof-of-concept module for Samba, which uses the VFS (virtual file system) features of Samba 2.2.x/3.0 alphaX. Of course, Samba has to be compiled with VFS support. samba-vscan supports various virus scanners and is maintained by Rainer Link. -

    Common Errors

    +

    Common Errors

    There must be some gotchas we should record here! Jelmer??? -

    Chapter21.Integrated Logon Support using Winbind

    Tim Potter

    Samba Team

    Andrew Tridgell

    Samba Team

    Naag Mummaneni

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    27 June 2002

    Table of Contents

    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors

    Features and Benefits

    Integration of UNIX and Microsoft Windows NT through +

    Chapter21.Integrated Logon Support using Winbind

    Tim Potter

    Samba Team

    Andrew Tridgell

    Samba Team

    Naag Mummaneni

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    27 June 2002

    Table of Contents

    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors

    Features and Benefits

    Integration of UNIX and Microsoft Windows NT through a unified logon has been considered a "holy grail" in heterogeneous computing environments for a long time. We present winbind, a component of the Samba suite @@ -12044,7 +12047,7 @@ There must be some gotchas we should record here! Jelmer??? Service Switch to allow Windows NT domain users to appear and operate as UNIX users on a UNIX machine. This paper describes the winbind system, explaining the functionality it provides, how it is configured, - and how it works internally.

    Introduction

    It is well known that UNIX and Microsoft Windows NT have + and how it works internally.

    Introduction

    It is well known that UNIX and Microsoft Windows NT have different models for representing user and group information and use different technologies for implementing them. This fact has made it difficult to integrate the two systems in a satisfactory @@ -12065,7 +12068,7 @@ There must be some gotchas we should record here! Jelmer??? tasks for the system administrator when maintaining users and groups on either system. The winbind system provides a simple and elegant solution to all three components of the unified logon - problem.

    What Winbind Provides

    Winbind unifies UNIX and Windows NT account management by + problem.

    What Winbind Provides

    Winbind unifies UNIX and Windows NT account management by allowing a UNIX box to become a full member of a NT domain. Once this is done the UNIX box will see NT users and groups as if they were native UNIX users and groups, allowing the NT domain @@ -12089,7 +12092,7 @@ There must be some gotchas we should record here! Jelmer??? to provide authentication via a NT domain to any PAM enabled applications. This capability solves the problem of synchronizing passwords between systems since all passwords are stored in a single - location (on the domain controller).

    Target Uses

    Winbind is targeted at organizations that have an + location (on the domain controller).

    Target Uses

    Winbind is targeted at organizations that have an existing NT based domain infrastructure into which they wish to put UNIX workstations or servers. Winbind will allow these organizations to deploy UNIX workstations without having to @@ -12099,12 +12102,12 @@ There must be some gotchas we should record here! Jelmer??? be used is as a central part of UNIX based appliances. Appliances that provide file and print services to Microsoft based networks will be able to use Winbind to provide seamless integration of - the appliance into the domain.

    How Winbind Works

    The winbind system is designed around a client/server + the appliance into the domain.

    How Winbind Works

    The winbind system is designed around a client/server architecture. A long running winbindd daemon listens on a UNIX domain socket waiting for requests to arrive. These requests are generated by the NSS and PAM clients and processed sequentially.

    The technologies used to implement winbind are described - in detail below.

    Microsoft Remote Procedure Calls

    Over the last few years, efforts have been underway + in detail below.

    Microsoft Remote Procedure Calls

    Over the last few years, efforts have been underway by various Samba Team members to decode various aspects of the Microsoft Remote Procedure Call (MSRPC) system. This system is used for most network related operations between @@ -12117,7 +12120,7 @@ There must be some gotchas we should record here! Jelmer??? users or groups. Other MSRPC calls can be used to authenticate NT domain users and to change user passwords. By directly querying a Windows PDC for user and group information, winbind maps the - NT account information onto UNIX user and group names.

    Microsoft Active Directory Services

    + NT account information onto UNIX user and group names.

    Microsoft Active Directory Services

    Since late 2001, Samba has gained the ability to interact with Microsoft Windows 2000 using its 'Native Mode' protocols, rather than the NT4 RPC services. @@ -12126,7 +12129,7 @@ There must be some gotchas we should record here! Jelmer??? same way as a Win2k client would, and in so doing provide a much more efficient and effective winbind implementation. -

    Name Service Switch

    The Name Service Switch, or NSS, is a feature that is +

    Name Service Switch

    The Name Service Switch, or NSS, is a feature that is present in many UNIX operating systems. It allows system information such as hostnames, mail aliases and user information to be resolved from different sources. For example, a standalone @@ -12163,7 +12166,7 @@ passwd: files example is to put libnss_winbind.so in /lib/ then add "winbind" into /etc/nsswitch.conf at the appropriate place. The C library will then call Winbind to - resolve user and group names.

    Pluggable Authentication Modules

    Pluggable Authentication Modules, also known as PAM, + resolve user and group names.

    Pluggable Authentication Modules

    Pluggable Authentication Modules, also known as PAM, is a system for abstracting authentication and authorization technologies. With a PAM module it is possible to specify different authentication methods for different system applications without @@ -12188,7 +12191,7 @@ passwd: files example is copied to /lib/security/ and the PAM control files for relevant services are updated to allow authentication via winbind. See the PAM documentation - for more details.

    User and Group ID Allocation

    When a user or group is created under Windows NT + for more details.

    User and Group ID Allocation

    When a user or group is created under Windows NT is it allocated a numerical relative identifier (RID). This is slightly different to UNIX which has a range of numbers that are used to identify users, and the same range in which to identify @@ -12201,7 +12204,7 @@ passwd: files example time, winbind will have mapped all Windows NT users and groups to UNIX user ids and group ids.

    The results of this mapping are stored persistently in an ID mapping database held in a tdb database). This ensures that - RIDs are mapped to UNIX IDs in a consistent way.

    Result Caching

    An active system can generate a lot of user and group + RIDs are mapped to UNIX IDs in a consistent way.

    Result Caching

    An active system can generate a lot of user and group name lookups. To reduce the network cost of these lookups winbind uses a caching scheme based on the SAM sequence number supplied by NT domain controllers. User or group information returned @@ -12212,14 +12215,14 @@ passwd: files example the PDC and compared against the sequence number of the cached entry. If the sequence numbers do not match, then the cached information is discarded and up to date information is requested directly - from the PDC.

    Installation and Configuration

    + from the PDC.

    Installation and Configuration

    Many thanks to John Trostel jtrostel@snapserver.com for providing the HOWTO for this section.

    This HOWTO describes how to get winbind services up and running to control access and authenticate users on your Linux box using the winbind services which come with SAMBA 3.0. -

    Introduction

    +

    Introduction

    This section describes the procedures used to get winbind up and running on a RedHat 7.1 system. Winbind is capable of providing access and authentication control for Windows Domain users through an NT @@ -12244,7 +12247,7 @@ somewhat to fit the way your distribution works. SAMBA server, this HOWTO is for you. That said, I am no NT or PAM expert, so you may find a better or easier way to accomplish these tasks. -

    Requirements

    +

    Requirements

    If you have a Samba configuration file that you are currently using... BACK IT UP! If your system already uses PAM, back up the /etc/pam.d directory @@ -12271,7 +12274,7 @@ winbind modules, you should have at least the pam libraries resident on your system. For recent RedHat systems (7.1, for instance), that means pam-0.74-22. For best results, it is helpful to also install the development packages in pam-devel-0.74-22. -

    Testing Things Out

    +

    Testing Things Out

    Before starting, it is probably best to kill off all the SAMBA related daemons running on your server. Kill off all smbd, nmbd, and winbindd processes that may @@ -12282,7 +12285,7 @@ services, several pam libraries, and the /usr/doc and /usr/man entries for pam. Winbind built better in SAMBA if the pam-devel package was also installed. This package includes the header files needed to compile pam-aware applications. -

    Configure and compile SAMBA

    +

    Configure and compile SAMBA

    The configuration and compilation of SAMBA is pretty straightforward. The first three steps may not be necessary depending upon whether or not you have previously built the Samba binaries. @@ -12297,15 +12300,15 @@ whether or not you have previously built the Samba binaries. This will, by default, install SAMBA in /usr/local/samba. See the main SAMBA documentation if you want to install SAMBA somewhere else. It will also build the winbindd executable and libraries. -

    Configure nsswitch.conf and the +

    Configure nsswitch.conf and the winbind libraries on Linux and Solaris

    The libraries needed to run the winbindd daemon through nsswitch need to be copied to their proper locations, so -

    -

    +
    
+
     root# cp ../samba/source/nsswitch/libnss_winbind.so /lib
-
    
-
    
+
    +

    I also found it necessary to make the following symbolic link:

    root# ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2 @@ -12332,7 +12335,7 @@ is faster (and you don't need to reboot) if you do it manually:

    This makes libnss_winbind available to winbindd and echos back a check to you. -

    NSS Winbind on AIX

    (This section is only for those running AIX)

    +

    NSS Winbind on AIX

    (This section is only for those running AIX)

    The winbind AIX identification module gets built as libnss_winbind.so in the nsswitch directory of the samba source. This file can be copied to /usr/lib/security, and the AIX naming convention would indicate that it @@ -12352,7 +12355,7 @@ Programming Concepts for AIX": "System Management Guide: Operating System and Devices". -

    Configure smb.conf

    +

    Configure smb.conf

    Several parameters are needed in the smb.conf file to control the behavior of winbindd. Configure smb.conf These are described in more detail in @@ -12374,7 +12377,7 @@ include the following entries in the [global] section: # give winbind users a real shell (only needed if they have telnet access) template homedir = /home/winnt/%D/%U template shell = /bin/bash -

    Join the SAMBA server to the PDC domain

    +

    Join the SAMBA server to the PDC domain

    Enter the following command to make the SAMBA server join the PDC domain, where DOMAIN is the name of your Windows domain and Administrator is @@ -12385,7 +12388,7 @@ a domain user who has administrative privileges in the domain. The proper response to the command should be: "Joined the domain DOMAIN" where DOMAIN is your DOMAIN name. -

    Start up the winbindd daemon and test it!

    +

    Start up the winbindd daemon and test it!

    Eventually, you will want to modify your smb startup script to automatically invoke the winbindd daemon when the other parts of SAMBA start, but it is possible to test out just the winbind @@ -12457,7 +12460,7 @@ directories and default shells. The same thing can be done for groups with the command

    root# getent group -

    Fix the init.d startup scripts

    Linux

    +

    Fix the init.d startup scripts

    Linux

    The winbindd daemon needs to start up after the smbd and nmbd daemons are running. To accomplish this task, you need to modify the startup scripts of your system. @@ -12488,18 +12491,18 @@ start() { touch /var/lock/subsys/smb || RETVAL=1 return $RETVAL } -

    If you would like to run winbindd in dual daemon mode, replace +If you would like to run winbindd in dual daemon mode, replace the line -

    +
             daemon /usr/local/samba/bin/winbindd
-
    
+
    in the example above with: -

    +
             daemon /usr/local/samba/bin/winbindd -B
-
    .
-
    
+
    . +

    The 'stop' function has a corresponding entry to shut down the services and looks like this: 

    @@ -12523,7 +12526,7 @@ stop() {
         echo ""
         return $RETVAL
 }
-
    Solaris

    Winbind doesn't work on Solaris 9, see the Portability chapter for details.

    On Solaris, you need to modify the +

    Solaris

    Winbind doesn't work on Solaris 9, see the Portability chapter for details.

    On Solaris, you need to modify the /etc/init.d/samba.server startup script. It usually only starts smbd and nmbd but should now start winbindd too. If you have samba installed in /usr/local/samba/bin, @@ -12575,22 +12578,22 @@ the file could contains something like this: echo "Usage: /etc/init.d/samba.server { start | stop }" ;; esac -

    + Again, if you would like to run samba in dual daemon mode, replace -

    +
     	/usr/local/samba/bin/winbindd
-
    
+
    in the script above with: -

    +
     	/usr/local/samba/bin/winbindd -B
-
    
-
    Restarting

    + +

    Restarting

    If you restart the smbd, nmbd, and winbindd daemons at this point, you should be able to connect to the samba server as a domain member just as if you were a local user. -

    Configure Winbind and PAM

    +

    Configure Winbind and PAM

    If you have made it this far, you know that winbindd and samba are working together. If you want to use winbind to provide authentication for other services, keep reading. The pam configuration files need to be altered in @@ -12610,7 +12613,7 @@ your other pam security modules. On my RedHat system, this was the modules reside in /usr/lib/security.

    root# cp ../samba/source/nsswitch/pam_winbind.so /lib/security -

    Linux/FreeBSD-specific PAM configuration

    +

    Linux/FreeBSD-specific PAM configuration

    The /etc/pam.d/samba file does not need to be changed. I just left this file as it was: 

    @@ -12666,14 +12669,14 @@ same way.  It now looks like this:
 	password   required     /lib/security/pam_stack.so service=system-auth
 	session    required     /lib/security/pam_stack.so service=system-auth
 	session    optional     /lib/security/pam_console.so
-

    -In this case, I added the 

    auth sufficient /lib/security/pam_winbind.so

    -lines as before, but also added the 

    required pam_securetty.so

    + +In this case, I added the 

    auth sufficient /lib/security/pam_winbind.so
    +lines as before, but also added the 
    required pam_securetty.so
    above it, to disallow root logins over the network. I also added a sufficient /lib/security/pam_unix.so use_first_pass line after the winbind.so line to get rid of annoying double prompts for passwords. -

    Solaris-specific configuration

    +

    Solaris-specific configuration

    The /etc/pam.conf needs to be changed. I changed this file so that my Domain users can logon both locally as well as telnet.The following are the changes that I made.You can customize the pam.conf file as per your requirements,but @@ -12745,12 +12748,12 @@ annoying double prompts for passwords.

    Now restart your Samba and try connecting through your application that you configured in the pam.conf. -

    Conclusion

    The winbind system, through the use of the Name Service +

    Conclusion

    The winbind system, through the use of the Name Service Switch, Pluggable Authentication Modules, and appropriate Microsoft RPC calls have allowed us to provide seamless integration of Microsoft Windows NT domain users on a UNIX system. The result is a great reduction in the administrative - cost of running a mixed UNIX and NT network.

    Common Errors

    Winbind has a number of limitations in its current + cost of running a mixed UNIX and NT network.

    Common Errors

    Winbind has a number of limitations in its current released version that we hope to overcome in future releases:

    • Winbind is currently only available for the Linux, Solaris and IRIX operating systems, although ports to other operating @@ -12765,11 +12768,11 @@ configured in the pam.conf. containing this information is corrupted or destroyed.

    • Currently the winbind PAM module does not take into account possible workstation and logon time restrictions that may be been set for Windows NT users, this is - instead up to the PDC to enforce.

    Chapter22.Advanced Network Management

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors

    + instead up to the PDC to enforce.

    Chapter22.Advanced Network Management

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors

    This section documents peripheral issues that are of great importance to network administrators who want to improve network resource access control, to automate the user environment, and to make their lives a little easier. -

    Features and Benefits

    +

    Features and Benefits

    Often the difference between a working network environment and a well appreciated one can best be measured by the little things that makes everything work more harmoniously. A key part of every network environment solution is the ability to remotely @@ -12779,7 +12782,7 @@ network operations.

    This chapter presents information on each of these area. They are placed here, and not in other chapters, for ease of reference. -

    Remote Server Administration

    +

    Remote Server Administration

    How do I get 'User Manager' and 'Server Manager'?

    Since I don't need to buy an NT4 Server, how do I get the 'User Manager for Domains', @@ -12793,17 +12796,17 @@ Click here to download the archived file Windows NT 4.0 version of the 'User Manager for Domains' and 'Server Manager' are available from Microsoft via ftp from ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE -

    Remote Desktop Management

    +

    Remote Desktop Management

    There are a number of possible remote desktop management solutions that range from free through costly. Do not let that put you off. Sometimes the most costly solutions is the most cost effective. In any case, you will need to draw your own conclusions as to which is the best tool in your network environment. -

    Remote Management from NoMachines.Com

    +

    Remote Management from NoMachines.Com

    The following information was posted to the Samba mailing list at Apr 3 23:33:50 GMT 2003. It is presented in slightly edited form (with author details omitted for privacy reasons). The entire answer is reproduced below with some comments removed. -

    -

    +	
    
+
     > I have a wonderful linux/samba server running as PDC for a network.
 > Now I would like to add remote desktop capabilities so that
 > users outside could login to the system and get their desktop up from
@@ -12815,8 +12818,8 @@ is the best tool in your network environment.
 > even if the computer is in a domain?
 >
 > Any ideas/experience would be appreciated :)
-
    
-
    
+
    +

    Answer provided: Check out the new offer from NoMachine, "NX" software: http://www.nomachine.com/.

    @@ -12886,7 +12889,7 @@ is the best tool in your network environment. NoMachine are encouraging and offering help to OSS/Free Software implementations for such a frontend too, even if it means competition to them (they have written to this effect even to the LTSP, KDE and GNOME developer mailing lists) -

    Network Logon Script Magic

    +

    Network Logon Script Magic

    This section needs work. Volunteer contributions most welcome. Please send your patches or updates to John Terpstra.

    @@ -12898,10 +12901,10 @@ See examples directory genlogonntlogon subdirectories.

    The following listings are from the genlogon directory. -

    +

    This is the genlogon.pl file: -

    +
     	#!/usr/bin/perl
 	#
 	# genlogon.pl
@@ -12973,28 +12976,28 @@ This is the genlogon.pl file:
 
 	# All done! Close the output file.
 	close LOGON;
-
    
-
    
+
    +

    Those wishing to use more elaborate or capable logon processing system should check out the following sites: -

    http://www.craigelachie.org/rhacer/ntlogon
    http://www.kixtart.org
    http://support.microsoft.com/default.asp?scid=kb;en-us;189105

    Adding printers without user intervention

    +

    http://www.craigelachie.org/rhacer/ntlogon
    http://www.kixtart.org
    http://support.microsoft.com/default.asp?scid=kb;en-us;189105

    Adding printers without user intervention

    Printers may be added automatically during logon script processing through the use of: -

    +
     	rundll32 printui.dll,PrintUIEntry /?
-
    
+
    See the documentation in the Microsoft knowledgebase article no: 189105. -

    Common Errors

    +

    Common Errors

    The information provided in this chapter has been reproduced from postings on the samba@samba.org mailing list. No implied endorsement or recommendation is offered. Administrators should conduct their own evaluation of alternatives and are encouraged to draw their own conclusions. -

    Chapter23.System and Account Policies

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work

    +

    Chapter23.System and Account Policies

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work

    This chapter summarises the current state of knowledge derived from personal practice and knowledge from samba mailing list subscribers. Before reproduction of posted information effort has been made to validate the information provided. Where additional information was uncovered through this validation it is provided also. -

    Features and Benefits

    +

    Features and Benefits

    When MS Windows NT3.5 was introduced the hot new topic was the ability to implement Group Policies for users and group. Then along came MS Windows NT4 and a few sites started to adopt this capability. How do we know that? By way of the number of "booboos" @@ -13015,7 +13018,7 @@ network client workstations.

    A tool new to Samba-3 may become an important part of the future Samba Administrators' arsenal. The editreg tool is described in this document. -

    Creating and Managing System Policies

    +

    Creating and Managing System Policies

    Under MS Windows platforms, particularly those following the release of MS Windows NT4 and MS Windows 95) it is possible to create a type of file that would be placed in the NETLOGON share of a domain controller. As the client logs onto the network @@ -13050,7 +13053,7 @@ be read and understood. Try searching on the Microsoft web site for "Group

    What follows is a very brief discussion with some helpful notes. The information provided here is incomplete - you are warned. -

    Windows 9x/Me Policies

    +

    Windows 9x/Me Policies

    You need the Win98 Group Policy Editor to set Group Profiles up under Windows 9x/Me. It can be found on the Original full product Win98 installation CD under tools/reskit/netadmin/poledit. Install this using the @@ -13076,7 +13079,7 @@ here is incomplete - you are warned. grouppol.inf. Log off and on again a couple of times and see if Win98 picks up group policies. Unfortunately this needs to be done on every Win9x/Me machine that uses group policies. -

    Windows NT4 Style Policy Files

    +

    Windows NT4 Style Policy Files

    To create or edit ntconfig.pol you must use the NT Server Policy Editor, poledit.exe which is included with NT4 Server but not NT Workstation. There is a Policy Editor on a NT4 @@ -13097,14 +13100,14 @@ here is incomplete - you are warned. be extracted as well. It is also possible to downloaded the policy template files for Office97 and get a copy of the policy editor. Another possible location is with the Zero Administration Kit available for download from Microsoft. -

    Registry Spoiling

    +

    Registry Spoiling

    With NT4 style registry based policy changes, a large number of settings are not automatically reversed as the user logs off. Since the settings that were in the NTConfig.POL file were applied to the client machine registry and that apply to the hive key HKEY_LOCAL_MACHINE are permanent until explicitly reversed. This is known as tattooing. It can have serious consequences down-stream and the administrator must be extremely careful not to lock out the ability to manage the machine at a later date. -

    MS Windows 200x / XP Professional Policies

    +

    MS Windows 200x / XP Professional Policies

    Windows NT4 System policies allows setting of registry parameters specific to users, groups and computers (client workstations) that are members of the NT4 style domain. Such policy file will work with MS Windows 2000 / XP clients also. @@ -13141,7 +13144,7 @@ here is incomplete - you are warned. to any number of concurrently applicable (and applied) policy sets (GPOs). Active Directory allows the administrator to also set filters over the policy settings. No such equivalent capability exists with NT4 style policy files. -

    Administration of Win2K / XP Policies

    +

    Administration of Win2K / XP Policies

    Instead of using the tool called The System Policy Editor, commonly called Poledit (from the executable name poledit.exe), GPOs are created and managed using a Microsoft Management Console (MMC) snap-in as follows:

    1. @@ -13167,7 +13170,7 @@ here is incomplete - you are warned. The MS Windows 2000 Resource Kit contains a tool called gpolmig.exe. This tool can be used to migrate an NT4 NTConfig.POL file into a Windows 200x style GPO. Be VERY careful how you use this powerful tool. Please refer to the resource kit manuals for specific usage information. -

    Managing Account/User Policies

    +

    Managing Account/User Policies

    Policies can define a specific user's settings or the settings for a group of users. The resulting policy file contains the registry settings for all users, groups, and computers that will be using the policy file. Separate policy files for each user, group, or computer are not not necessary. @@ -13192,42 +13195,42 @@ In addition to user access controls that may be imposed or applied via system an in a manner that works in conjunction with user profiles, the user management environment under MS Windows NT4/200x/XP allows per domain as well as per user account restrictions to be applied. Common restrictions that are frequently used includes: -

    -

    Logon Hours
    Password Aging
    Permitted Logon from certain machines only
    Account type (Local or Global)
    User Rights

    -

    Samba Editreg Toolset

    +

    +
    Logon Hours
    Password Aging
    Permitted Logon from certain machines only
    Account type (Local or Global)
    User Rights
    +

    Samba Editreg Toolset

    Describe in detail the benefits of editreg and how to use it. -

    Windows NT4/200x

    +

    Windows NT4/200x

    The tools that may be used to configure these types of controls from the MS Windows environment are: The NT4 User Manager for domains, the NT4 System and Group Policy Editor, the registry editor (regedt32.exe). Under MS Windows 200x/XP this is done using the Microsoft Management Console (MMC) with appropriate "snap-ins", the registry editor, and potentially also the NT4 System and Group Policy Editor. -

    Samba PDC

    +

    Samba PDC

    With a Samba Domain Controller, the new tools for managing of user account and policy information includes: smbpasswd, pdbedit, net, rpcclient. The administrator should read the man pages for these tools and become familiar with their use. -

    System Startup and Logon Processing Overview

    +

    System Startup and Logon Processing Overview

    The following attempts to document the order of processing of system and user policies following a system reboot and as part of the user logon:

    1. Network starts, then Remote Procedure Call System Service (RPCSS) and Multiple Universal Naming Convention Provider (MUP) start -

    2. +

    3. Where Active Directory is involved, an ordered list of Group Policy Objects (GPOs) is downloaded and applied. The list may include GPOs that: -

      Apply to the location of machines in a Directory
      Apply only when settings have changed
      Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.

      +
      Apply to the location of machines in a Directory
      Apply only when settings have changed
      Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.
      No desktop user interface is presented until the above have been processed. -

    4. +

    5. Execution of start-up scripts (hidden and synchronous by default).

    6. A keyboard action to affect start of logon (Ctrl-Alt-Del).

    7. User credentials are validated, User profile is loaded (depends on policy settings). -

    8. +

    9. An ordered list of User GPOs is obtained. The list contents depends on what is configured in respect of: -

      Is user a domain member, thus subject to particular policies
      Loopback enablement, and the state of the loopback policy (Merge or Replace)
      Location of the Active Directory itself
      Has the list of GPOs changed. No processing is needed if not changed.

      -

    10. +
      Is user a domain member, thus subject to particular policies
      Loopback enablement, and the state of the loopback policy (Merge or Replace)
      Location of the Active Directory itself
      Has the list of GPOs changed. No processing is needed if not changed.
      +

    11. User Policies are applied from Active Directory. Note: There are several types.

    12. Logon scripts are run. New to Win2K and Active Directory, logon scripts may be obtained based on Group @@ -13236,10 +13239,10 @@ reboot and as part of the user logon:

    13. The User Interface as determined from the GPOs is presented. Note: In a Samba domain (like and NT4 Domain) machine (system) policies are applied at start-up, User policies are applied at logon. -

    Common Errors

    +

    Common Errors

    Policy related problems can be very difficult to diagnose and even more difficult to rectify. The following collection demonstrates only basic issues. -

    Policy Does Not Work

    +

    Policy Does Not Work

    Question: We have created the config.pol file and put it in the NETLOGON share. It has made no difference to our Win XP Pro machines, they just don't see it. IT worked fine with Win 98 but does not work any longer since we upgraded to Win XP Pro. Any hints? @@ -13247,7 +13250,7 @@ work any longer since we upgraded to Win XP Pro. Any hints? ANSWER: Policy files are NOT portable between Windows 9x / Me and MS Windows NT4 / 200x / XP based platforms. You need to use the NT4 Group Policy Editor to create a file called NTConfig.POL so that it is in the correct format for your MS Windows XP Pro clients. -

    Chapter24.Desktop Profile Management

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile

    Features and Benefits

    +

    Chapter24.Desktop Profile Management

    John H. Terpstra

    Samba Team

    April 3 2003

    Table of Contents

    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile

    Features and Benefits

    Roaming Profiles are feared by some, hated by a few, loved by many, and a Godsend for some administrators.

    @@ -13260,7 +13263,7 @@ problem to others. In particular, users of mobile computing tools, where often t be a sustained network connection, are often better served by purely Local Profiles. This chapter provides information to help the Samba administrator to deal with those situations also. -

    Roaming Profiles

    Warning

    +

    Roaming Profiles

    Warning

    Roaming profiles support is different for Win9x / Me and Windows NT4/200x.

    Before discussing how to configure roaming profiles, it is useful to see how @@ -13273,23 +13276,23 @@ profiles are restricted to being stored in the user's home directory.

    Windows NT4/200x clients send a NetSAMLogon RPC request, which contains many fields, including a separate field for the location of the user's profiles. -

    Samba Configuration for Profile Handling

    +

    Samba Configuration for Profile Handling

    This section documents how to configure Samba for MS Windows client profile support. -

    NT4/200x User Profiles

    +

    NT4/200x User Profiles

    To support Windows NT4/200x clients, in the [global] section of smb.conf set the following (for example): -

    -

    +
    
+
     	logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath
-
    
+
    This is typically implemented like: -

    +
     		logon path = \\%L\Profiles\%u
-
    
+
    where %L translates to the name of the Samba server and %u translates to the user name -

    +

    The default for this option is \\%N\%U\profile, namely \\sambaserver\username\profile. The \\N%\%U service is created automatically by the [homes] service. If you are using @@ -13300,7 +13303,7 @@ semantics of %L and %N, as well as %U and %u. MS Windows NT/2K clients at times do not disconnect a connection to a server between logons. It is recommended to NOT use the homes meta-service name as part of the profile share path. -

    Windows 9x / Me User Profiles

    +

    Windows 9x / Me User Profiles

    To support Windows 9x / Me clients, you must use the logon home parameter. Samba has now been fixed so that net use /home now works as well, and it, too, relies on the logon home parameter. @@ -13318,28 +13321,28 @@ Not only that, but net use /home will also wor Windows 9x / Me. It removes any directory stuff off the end of the home directory area and only uses the server and share portion. That is, it looks like you specified \\%L\%U for logon home. -

    Mixed Windows 9x / Me and Windows NT4/200x User Profiles

    +

    Mixed Windows 9x / Me and Windows NT4/200x User Profiles

    You can support profiles for both Win9X and WinNT clients by setting both the logon home and logon path parameters. For example: 

     	logon home = \\%L\%u\.profiles
 	logon path = \\%L\profiles\%u
-

    Disabling Roaming Profile Support

    +

    Disabling Roaming Profile Support

    A question often asked is “How may I enforce use of local profiles?” or “How do I disable Roaming Profiles?”

    There are three ways of doing this: -

    In smb.conf

    +

    In smb.conf
    Affect the following settings and ALL clients will be forced to use a local profile: - 

    +		
     			logon home =
 			logon path =
-		
    
-
    MS Windows Registry:

    + +

    MS Windows Registry:
    By using the Microsoft Management Console gpedit.msc to instruct your MS Windows XP machine to use only a local profile. This of course modifies registry settings. The full path to the option is: - 

    +	
     	Local Computer Policy\
 		Computer Configuration\
 			Administrative Templates\
@@ -13348,8 +13351,8 @@ There are three ways of doing this:
 
 	Disable:	Only Allow Local User Profiles
 	Disable:	Prevent Roaming Profile Change from Propagating to the Server
-	
    
-
    Change of Profile Type:

    + +

    Change of Profile Type:

    From the start menu right click on the My Computer icon, select Properties, click on the User Profiles tab, select the profile you wish to change from Roaming type to Local, click Change Type. @@ -13361,7 +13364,7 @@ profiles. The specifics of how to convert a local profile to a roaming profile, or a roaming profile to a local one vary according to the version of MS Windows you are running. Consult the Microsoft MS Windows Resource Kit for your version of Windows for specific information. -

    Windows Client Profile Configuration Information

    Windows 9x / Me Profile Setup

    +

    Windows Client Profile Configuration Information

    Windows 9x / Me Profile Setup

    When a user first logs in on Windows 9X, the file user.DAT is created, as are folders Start Menu, Desktop, Programs and Nethood. @@ -13467,7 +13470,7 @@ If you have access to an Windows NT4/200x server, then first set up roaming prof and / or netlogons on the Windows NT4/200x server. Make a packet trace, or examine the example packet traces provided with Windows NT4/200x server, and see what the differences are with the equivalent samba trace. -

    Windows NT4 Workstation

    +

    Windows NT4 Workstation

    When a user first logs in to a Windows NT Workstation, the profile NTuser.DAT is created. The profile location can be now specified through the logon path parameter. @@ -13496,7 +13499,7 @@ turns a profile into a mandatory one.

    The case of the profile is significant. The file must be called NTuser.DAT or, for a mandatory profile, NTuser.MAN. -

    Windows 2000/XP Professional

    +

    Windows 2000/XP Professional

    You must first convert the profile from a local profile to a domain profile on the MS Windows workstation as follows:

    1. @@ -13546,7 +13549,7 @@ On the XP workstation log in with an Administrator account.

    2. Click: Start, Run

    3. Type: mmc

    4. Click: OK

    5. A Microsoft Management Console should appear.

    6. Click: File, Add/Remove Snap-in..., Add

    7. Double-Click: Group Policy

    8. Click: Finish, Close

    9. Click: OK

    10. In the "Console Root" window:

    11. Expand: Local Computer Policy, Computer Configuration, Administrative Templates, System, User Profiles

    12. Double-Click: Do not check for user ownership of Roaming Profile Folders

    13. Select: Enabled

    14. Click: OK

    15. Close the whole console. You do not need to save the settings (this refers to the console settings rather than the policies you have - changed).

    16. Reboot

    Sharing Profiles between W9x/Me and NT4/200x/XP workstations

    + changed).

  • Reboot

    • Sharing Profiles between W9x/Me and NT4/200x/XP workstations

    Sharing of desktop profiles between Windows versions is NOT recommended. Desktop profiles are an evolving phenomenon and profiles for later versions of MS Windows clients add features that may interfere with earlier versions @@ -13563,12 +13566,12 @@ that need to be common are logon path and

    If you have this set up correctly, you will find separate user.DAT and NTuser.DAT files in the same profile directory. -

    Profile Migration from Windows NT4/200x Server to Samba

    +

    Profile Migration from Windows NT4/200x Server to Samba

    There is nothing to stop you specifying any path that you like for the location of users' profiles. Therefore, you could specify that the profile be stored on a samba server, or any other SMB server, as long as that SMB server supports encrypted passwords. -

    Windows NT4 Profile Management Tools

    +

    Windows NT4 Profile Management Tools

    Unfortunately, the Resource Kit information is specific to the version of MS Windows NT4/200x. The correct resource kit is required for each platform.

    @@ -13585,17 +13588,17 @@ domain is not a member of a trust relationship with your NT4 PDC.

    c:\temp\foobar

  • Click on the button Change in the Permitted to use box.

  • Click on the group 'Everyone' and then click OK. This closes the 'choose user' box.

  • Now click OK.

    • Follow the above for every profile you need to migrate. -

    Side bar Notes

    +

    Side bar Notes

    You should obtain the SID of your NT4 domain. You can use smbpasswd to do this. Read the man page.

    With Samba-3.0.0 alpha code you can import all you NT4 domain accounts using the net samsync method. This way you can retain your profile settings as well as all your users. -

    moveuser.exe

    +

    moveuser.exe

    The W2K professional resource kit has moveuser.exe. moveuser.exe changes the security of a profile from one user to another. This allows the account domain to change, and/or the user name to change. -

    Get SID

    +

    Get SID

    You can identify the SID by using GetSID.exe from the Windows NT Server 4.0 Resource Kit.

    @@ -13608,7 +13611,7 @@ users who have logged on to this computer. (To find the profile information for the user whose locally cached profile you want to move, find the SID for the user with the GetSID.exe utility.) Inside of the appropriate user's subkey, you will see a string value named ProfileImagePath. -

    Mandatory profiles

    +

    Mandatory profiles

    A Mandatory Profile is a profile that the user does NOT have the ability to overwrite. During the user's session it may be possible to change the desktop environment, but as the user logs out all changes made will be lost. If it is desired to NOT allow the @@ -13624,7 +13627,7 @@ file in the copied profile and rename it to NTUser.MAN.

    For MS Windows 9x / Me it is the User.DAT file that must be renamed to User.MAN to affect a mandatory profile. -

    Creating/Managing Group Profiles

    +

    Creating/Managing Group Profiles

    Most organisations are arranged into departments. There is a nice benefit in this fact since usually most users in a department will require the same desktop applications and the same desktop layout. MS Windows NT4/200x/XP will allow the @@ -13639,14 +13642,14 @@ the now modified profile.

    Note

    Be careful with group profiles, if the user who is a member of a group also has a personal profile, then the result will be a fusion (merge) of the two. -

    Default Profile for Windows Users

    +

    Default Profile for Windows Users

    MS Windows 9x / Me and NT4/200x/XP will use a default profile for any user for whom a profile does not already exist. Armed with a knowledge of where the default profile is located on the Windows workstation, and knowing which registry keys affect the path from which the default profile is created, it is possible to modify the default profile to one that has been optimised for the site. This has significant administrative advantages. -

    MS Windows 9x/Me

    +

    MS Windows 9x/Me

    To enable default per use profiles in Windows 9x / Me you can either use the Windows 98 System Policy Editor or change the registry directly.

    @@ -13658,7 +13661,7 @@ select User Profiles, click on the enable box. Do To modify the registry directly, launch the Registry Editor (regedit.exe), select the hive HKEY_LOCAL_MACHINE\Network\Logon. Now add a DWORD type key with the name "User Profiles", to enable user profiles set the value to 1, to disable user profiles set it to 0. -

    How User Profiles Are Handled in Windows 9x / Me?

    +

    How User Profiles Are Handled in Windows 9x / Me?

    When a user logs on to a Windows 9x / Me machine, the local profile path, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProfileList, is checked for an existing entry for that user: @@ -13674,7 +13677,7 @@ If a User Profile is not found in either location, the Default User Profile from machine is used and is copied to a newly created folder for the logged on user. At log off, any changes that the user made are written to the user's local profile. If the user has a roaming profile, the changes are written to the user's profile on the server. -

    MS Windows NT4 Workstation

    +

    MS Windows NT4 Workstation

    On MS Windows NT4 the default user profile is obtained from the location %SystemRoot%\Profiles which in a default installation will translate to C:\WinNT\Profiles. Under this directory on a clean install there will be @@ -13715,15 +13718,15 @@ the following steps are followed in respect of profile handling: MS Windows NT4 profiles may be Local or Roaming. A Local profile will stored in the %SystemRoot%\Profiles\%USERNAME% location. A roaming profile will also remain stored in the same way, unless the following registry key is created: -

    -

    +
    
+
     	HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\
 	"DeleteRoamingCache"=dword:00000001
-
    
+
    In which case, the local copy (in %SystemRoot%\Profiles\%USERNAME%) will be deleted on logout. -

    +

    Under MS Windows NT4 default locations for common resources (like My Documents may be redirected to a network share by modifying the following registry keys. These changes may be affected via use of the System Policy Editor (to do so may require that you create your owns template extension @@ -13736,17 +13739,17 @@ are controlled by entries on Windows NT4 is: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\

    The above hive key contains a list of automatically managed folders. The default entries are: -

    -

    Table24.1.User Shell Folder registry keys default values

    NameDefault Value
    AppData%USERPROFILE%\Application Data
    Desktop%USERPROFILE%\Desktop
    Favorites%USERPROFILE%\Favorites
    NetHood%USERPROFILE%\NetHood
    PrintHood%USERPROFILE%\PrintHood
    Programs%USERPROFILE%\Start Menu\Programs
    Recent%USERPROFILE%\Recent
    SendTo%USERPROFILE%\SendTo
    Start Menu %USERPROFILE%\Start Menu
    Startup%USERPROFILE%\Start Menu\Programs\Startup

    -

    +

    +

    Table24.1.User Shell Folder registry keys default values

    NameDefault Value
    AppData%USERPROFILE%\Application Data
    Desktop%USERPROFILE%\Desktop
    Favorites%USERPROFILE%\Favorites
    NetHood%USERPROFILE%\NetHood
    PrintHood%USERPROFILE%\PrintHood
    Programs%USERPROFILE%\Start Menu\Programs
    Recent%USERPROFILE%\Recent
    SendTo%USERPROFILE%\SendTo
    Start Menu %USERPROFILE%\Start Menu
    Startup%USERPROFILE%\Start Menu\Programs\Startup
    +

    The registry key that contains the location of the default profile settings is:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders -

    +

    The default entries are: -

    Table24.2.Defaults of profile settings registry keys

    Common Desktop%SystemRoot%\Profiles\All Users\Desktop
    Common Programs%SystemRoot%\Profiles\All Users\Programs
    Common Start Menu%SystemRoot%\Profiles\All Users\Start Menu
    Common Startup%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup

    -

    MS Windows 200x/XP

    Note

    +

    Table24.2.Defaults of profile settings registry keys

    Common Desktop%SystemRoot%\Profiles\All Users\Desktop
    Common Programs%SystemRoot%\Profiles\All Users\Programs
    Common Start Menu%SystemRoot%\Profiles\All Users\Start Menu
    Common Startup%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup
    +

    MS Windows 200x/XP

    Note

    MS Windows XP Home Edition does use default per user profiles, but can not participate in domain security, can not log onto an NT/ADS style domain, and thus can obtain the profile only from itself. While there are benefits in doing this the beauty of those MS Windows @@ -13794,9 +13797,9 @@ are controlled by entries on Windows 200x/XP is: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\

    The above hive key contains a list of automatically managed folders. The default entries are: -

    -

    Table24.3.Defaults of default user profile paths registry keys

    NameDefault Value
    AppData%USERPROFILE%\Application Data
    Cache%USERPROFILE%\Local Settings\Temporary Internet Files
    Cookies%USERPROFILE%\Cookies
    Desktop%USERPROFILE%\Desktop
    Favorites%USERPROFILE%\Favorites
    History%USERPROFILE%\Local Settings\History
    Local AppData%USERPROFILE%\Local Settings\Application Data
    Local Settings%USERPROFILE%\Local Settings
    My Pictures%USERPROFILE%\My Documents\My Pictures
    NetHood%USERPROFILE%\NetHood
    Personal%USERPROFILE%\My Documents
    PrintHood%USERPROFILE%\PrintHood
    Programs%USERPROFILE%\Start Menu\Programs
    Recent%USERPROFILE%\Recent
    SendTo%USERPROFILE%\SendTo
    Start Menu%USERPROFILE%\Start Menu
    Startup%USERPROFILE%\Start Menu\Programs\Startup
    Templates%USERPROFILE%\Templates

    -

    +

    +

    Table24.3.Defaults of default user profile paths registry keys

    NameDefault Value
    AppData%USERPROFILE%\Application Data
    Cache%USERPROFILE%\Local Settings\Temporary Internet Files
    Cookies%USERPROFILE%\Cookies
    Desktop%USERPROFILE%\Desktop
    Favorites%USERPROFILE%\Favorites
    History%USERPROFILE%\Local Settings\History
    Local AppData%USERPROFILE%\Local Settings\Application Data
    Local Settings%USERPROFILE%\Local Settings
    My Pictures%USERPROFILE%\My Documents\My Pictures
    NetHood%USERPROFILE%\NetHood
    Personal%USERPROFILE%\My Documents
    PrintHood%USERPROFILE%\PrintHood
    Programs%USERPROFILE%\Start Menu\Programs
    Recent%USERPROFILE%\Recent
    SendTo%USERPROFILE%\SendTo
    Start Menu%USERPROFILE%\Start Menu
    Startup%USERPROFILE%\Start Menu\Programs\Startup
    Templates%USERPROFILE%\Templates
    +

    There is also an entry called "Default" that has no value set. The default entry is of type REG_SZ, all the others are of type REG_EXPAND_SZ.

    @@ -13820,9 +13823,9 @@ MS Windows 200x/XP profiles may be Local A roaming profile will be cached locally unless the following registry key is created:

    HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\"DeleteRoamingCache"=dword:00000001

    In which case, the local cache copy will be deleted on logout. -

    Common Errors

    +

    Common Errors

    The following are some typical errors/problems/questions that have been asked. -

    How does one set up roaming profiles for just one (or a few) user/s or group/s?

    +

    How does one set up roaming profiles for just one (or a few) user/s or group/s?

    With samba-2.2.x the choice you have is to enable or disable roaming profiles support. It is a global only setting. The default is to have roaming profiles and the default path will locate them in the user's home @@ -13840,25 +13843,25 @@ using the Domain User Manager (as with MS Windows NT4/ Win 2Kx).

    In any case, you can configure only one profile per user. That profile can be either: -

    A profile unique to that user
    A mandatory profile (one the user can not change)
    A group profile (really should be mandatory ie:unchangable)

    Can NOT use Roaming Profiles

    +

    A profile unique to that user
    A mandatory profile (one the user can not change)
    A group profile (really should be mandatory ie:unchangable)

    Can NOT use Roaming Profiles

    “ I dont want Roaming profile to be implemented, I just want to give users local profiles only. ... Please help me I am totally lost with this error from past two days I tried everything and googled around quite a bit but of no help. Please help me. -”

    +”

    Your choices are: -

    Local profiles

    +

    Local profiles

    I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out -

    Roaming profiles

    -

    can use auto-delete on logout option
    requires a registry key change on workstation

    +

    Roaming profiles
    +
    can use auto-delete on logout option
    requires a registry key change on workstation
    Your choices are: -

    Personal Roaming profiles

    +

    Personal Roaming profiles

    - should be preserved on a central server - workstations 'cache' (store) a local copy - used in case the profile can not be downloaded @@ -13866,10 +13869,10 @@ Your choices are:

    Group profiles

    - loaded from a central place

    Mandatory profiles

    - can be personal or group - can NOT be changed (except by an administrator -

    -

    +

    +
    -

    +

    A WinNT4/2K/XP profile can vary in size from 130KB to off the scale. Outlook PST files are most often part of the profile and can be many GB in size. On average (in a well controlled environment) roaming profile size of @@ -13884,19 +13887,19 @@ a problem free site.

    Microsoft's answer to the PST problem is to store all email in an MS Exchange Server back-end. But this is another story ...! -

    +

    So, having LOCAL profiles means: -

    If lots of users user each machine - lot's of local disk storage needed for local profiles
    Every workstation the user logs into has it's own profile - can be very different from machine to machine

    +
    If lots of users user each machine - lot's of local disk storage needed for local profiles
    Every workstation the user logs into has it's own profile - can be very different from machine to machine
    On the other hand, having roaming profiles means: -

    The network administrator can control EVERY aspect of user profiles
    With the use of mandatory profiles - a drastic reduction in network management overheads
    User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably

    +
    The network administrator can control EVERY aspect of user profiles
    With the use of mandatory profiles - a drastic reduction in network management overheads
    User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably
    -

    +

    I have managed and installed MANY NT/2K networks and have NEVER found one where users who move from machine to machine are happy with local profiles. In the long run local profiles bite them. -

    Changing the default profile

    “ +

    Changing the default profile

    “ When the client tries to logon to the PDC it looks for a profile to download where do I put this default profile. ”

    @@ -13926,7 +13929,7 @@ Secondly, for roaming profiles you need: logon drive = H: (Z: is the default) Plus you need a PROFILES share that is world writable. -

    Chapter25.PAM based Distributed Authentication

    John H. Terpstra

    Samba Team

    Stephen Langasek

    May 31, 2003

    Table of Contents

    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem

    +

    Chapter25.PAM based Distributed Authentication

    John H. Terpstra

    Samba Team

    Stephen Langasek

    May 31, 2003

    Table of Contents

    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem

    This chapter you should help you to deploy winbind based authentication on any PAM enabled Unix/Linux system. Winbind can be used to enable user level application access authentication from any MS Windows NT Domain, MS Windows 200x Active Directory based domain, or any Samba @@ -13937,7 +13940,7 @@ In addition to knowing how to configure winbind into PAM, you will learn generic possibilities and in particular how to deploy tools like pam_smbpass.so to your advantage.

    Note

    The use of Winbind require more than PAM configuration alone. Please refer to the Winbind chapter. -

    Features and Benefits

    +

    Features and Benefits

    A number of Unix systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux, now utilize the Pluggable Authentication Modules (PAM) facility to provide all authentication, authorization and resource control services. Prior to the introduction of PAM, a decision @@ -13995,12 +13998,12 @@ of distributed samba domain controllers that can provide wide are network bandwi efficient authentication services for PAM capable systems. In effect, this allows the deployment of centrally managed and maintained distributed authentication from a single user account database. -

    Technical Discussion

    +

    Technical Discussion

    PAM is designed to provide the system administrator with a great deal of flexibility in configuration of the privilege granting applications of their system. The local configuration of system security controlled by PAM is contained in one of two places: either the single system file, /etc/pam.conf; or the /etc/pam.d/ directory. -

    PAM Configuration Syntax

    +

    PAM Configuration Syntax

    In this section we discuss the correct syntax of and generic options respected by entries to these files. PAM specific tokens in the configuration file are case insensitive. The module paths, however, are case sensitive since they indicate a file's name and reflect the case dependence of typical file-systems. @@ -14014,22 +14017,22 @@ If the PAM authentication module (loadable link library file) is located in the default location then it is not necessary to specify the path. In the case of Linux, the default location is /lib/security. If the module is located outside the default then the path must be specified as: -

    -

    +
    
+
     auth  required  /other_path/pam_strange_module.so
-
    
-
    Anatomy of /etc/pam.d Entries
    
+
    +

    Anatomy of /etc/pam.d Entries

    The remaining information in this subsection was taken from the documentation of the Linux-PAM project. For more information on PAM, see http://ftp.kernel.org/pub/linux/libs/pam The Official Linux-PAM home page.

    A general configuration line of the /etc/pam.conf file has the following form: -

    -

    +
    
+
     service-name   module-type   control-flag   module-path   args
-
    
-
    
+
    +

    Below, we explain the meaning of each of these tokens. The second (and more recently adopted) way of configuring Linux-PAM is via the contents of the /etc/pam.d/ directory. Once we have explained the meaning of the above tokens, we will describe this method. @@ -14146,8 +14149,8 @@ Once we have explained the meaning of the above tokens, we will describe this me

    Each of the four keywords: required; requisite; sufficient; and optional, have an equivalent expression in terms of the [...] syntax. They are as follows: -

    -

    • +

      +

      • required is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=bad]

      • requisite is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=die] @@ -14155,8 +14158,8 @@ Once we have explained the meaning of the above tokens, we will describe this me sufficient is equivalent to [success=done new_authtok_reqd=done default=ignore]

      • optional is equivalent to [success=ok new_authtok_reqd=ok default=ignore] -

      -

      +

    +

    Just to get a feel for the power of this new syntax, here is a taste of what you can do with it. With Linux-PAM-0.63, the notion of client plug-in agents was introduced. This is something that makes it possible for PAM to support machine-machine authentication using the transport protocol inherent to the client/server application. With the @@ -14188,13 +14191,13 @@ squid auth required pam_mysql.so user=passwd_query passwd=mada \ Any line in (one of) the configuration file(s), that is not formatted correctly, will generally tend (erring on the side of caution) to make the authentication process fail. A corresponding error is written to the system log files with a call to syslog(3). -

    Example System Configurations

    +

    Example System Configurations

    The following is an example /etc/pam.d/login configuration file. This example had all options been uncommented is probably not usable as it stacks many conditions before allowing successful completion of the login process. Essentially all conditions can be disabled by commenting them out except the calls to pam_pwdb.so. -

    PAM: original login config

    +
    PAM: original login config
     #%PAM-1.0
 # The PAM configuration file for the `login' service
 #
@@ -14209,10 +14212,10 @@ session      required    pam_pwdb.so
 # session    optional    pam_lastlog.so
 # password   required    pam_cracklib.so retry=3
 password     required    pam_pwdb.so shadow md5
-
    PAM: login using pam_smbpass
    
+

    PAM: login using pam_smbpass

    PAM allows use of replaceable modules. Those available on a sample system include: -

    $/bin/ls /lib/security -

    +
    $/bin/ls /lib/security
+
     pam_access.so    pam_ftp.so          pam_limits.so     
 pam_ncp_auth.so  pam_rhosts_auth.so  pam_stress.so     
 pam_cracklib.so  pam_group.so        pam_listfile.so   
@@ -14288,7 +14291,7 @@ authentication to be configured in a single central file. The
 on the basis that it allows for easier administration. As with all issues in 
 life though, every decision makes trade-offs, so you may want examine the 
 PAM documentation for further helpful information.
-

    smb.conf PAM Configuration

    +

    smb.conf PAM Configuration

    There is an option in smb.conf called obey pam restrictions. The following is from the on-line help for this option in SWAT;

    @@ -14303,7 +14306,7 @@ ignores PAM for authentication in the case of The reason is that PAM modules cannot support the challenge/response authentication mechanism needed in the presence of SMB password encryption. -

    Default: obey pam restrictions = no

    Remote CIFS Authentication using winbindd.so

    +

    Default: obey pam restrictions = no

    Remote CIFS Authentication using winbindd.so

    All operating systems depend on the provision of users credentials acceptable to the platform. Unix requires the provision of a user identifier (UID) as well as a group identifier (GID). These are both simple integer type numbers that are obtained from a password backend such @@ -14329,7 +14332,7 @@ Microsoft Active Directory Service (ADS) in so far as reduction of wide area net The rid to unix id database is the only location where the user and group mappings are stored by winbindd. If this file is deleted or corrupted, there is no way for winbindd to determine which user and group ids correspond to Windows NT user and group rids. -

    Password Synchronization using pam_smbpass.so

    +

    Password Synchronization using pam_smbpass.so

    pam_smbpass is a PAM module which can be used on conforming systems to keep the smbpasswd (Samba password) database in sync with the unix password file. PAM (Pluggable Authentication Modules) is an API supported @@ -14340,21 +14343,21 @@ This module authenticates a local smbpasswd user database. If you require support for authenticating against a remote SMB server, or if you're concerned about the presence of suid root binaries on your system, it is recommended that you use pam_winbind instead. -

    +

    Options recognized by this module are as follows: -

    Table25.1.Options recognized by pam_smbpass

    debuglog more debugging info
    auditlike debug, but also logs unknown usernames
    use_first_passdon't prompt the user for passwords; take them from PAM_ items instead
    try_first_passtry to get the password from a previous PAM module, fall back to prompting the user
    use_authtoklike try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)
    not_set_passdon't make passwords used by this module available to other modules.
    nodelaydon't insert ~1 second delays on authentication failure.
    nulloknull passwords are allowed.
    nonullnull passwords are not allowed. Used to override the Samba configuration.
    migrateonly meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.
    smbconf=filespecify an alternate path to the smb.conf file.

    -

    +

    Table25.1.Options recognized by pam_smbpass

    debuglog more debugging info
    auditlike debug, but also logs unknown usernames
    use_first_passdon't prompt the user for passwords; take them from PAM_ items instead
    try_first_passtry to get the password from a previous PAM module, fall back to prompting the user
    use_authtoklike try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)
    not_set_passdon't make passwords used by this module available to other modules.
    nodelaydon't insert ~1 second delays on authentication failure.
    nulloknull passwords are allowed.
    nonullnull passwords are not allowed. Used to override the Samba configuration.
    migrateonly meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.
    smbconf=filespecify an alternate path to the smb.conf file.
    + Thanks go to the following people: -

    Andrew Morgan, for providing the Linux-PAM +
    Andrew Morgan, for providing the Linux-PAM framework, without which none of this would have happened
    Christian Gafton and Andrew Morgan again, for the pam_pwdb module upon which pam_smbpass was originally based
    Luke Leighton for being receptive to the idea, and for the occasional good-natured complaint about the project's status - that keep me working on it :)

    . -

    + that keep me working on it :)

    . +

    The following are examples of the use of pam_smbpass.so in the format of Linux /etc/pam.d/ files structure. Those wishing to implement this tool on other platforms will need to adapt this appropriately. -

    Password Synchronisation Configuration

    +

    Password Synchronisation Configuration

    A sample PAM configuration that shows the use of pam_smbpass to make sure private/smbpasswd is kept in sync when /etc/passwd (/etc/shadow) is changed. Useful when an expired password might be changed by an @@ -14370,7 +14373,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so nullok use_authtok try_first_pass session required pam_unix.so -

    Password Migration Configuration

    +

    Password Migration Configuration

    A sample PAM configuration that shows the use of pam_smbpass to migrate from plaintext to encrypted passwords for Samba. Unlike other methods, this can be used for users who have never connected to Samba shares: @@ -14389,7 +14392,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password optional pam_smbpass.so nullok use_authtok try_first_pass session required pam_unix.so -

    Mature Password Configuration

    +

    Mature Password Configuration

    A sample PAM configuration for a 'mature' smbpasswd installation. private/smbpasswd is fully populated, and we consider it an error if the smbpasswd doesn't exist or doesn't match the Unix password. @@ -14404,7 +14407,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so use_authtok use_first_pass session required pam_unix.so -

    Kerberos Password Integration Configuration

    +

    Kerberos Password Integration Configuration

    A sample PAM configuration that shows pam_smbpass used together with pam_krb5. This could be useful on a Samba PDC that is also a member of a Kerberos realm. @@ -14420,13 +14423,13 @@ password requisite pam_cracklib.so retry=3 password optional pam_smbpass.so nullok use_authtok try_first_pass password required pam_krb5.so use_authtok try_first_pass session required pam_krb5.so -

    Common Errors

    +

    Common Errors

    PAM can be a very fickle and sensitive to configuration glitches. Here we look at a few cases from the Samba mailing list. -

    pam_winbind problem

    +

    pam_winbind problem

    I have the following PAM configuration: -

    -

    +	
    
+
     auth required /lib/security/pam_securetty.so
 auth sufficient /lib/security/pam_winbind.so
 auth sufficient /lib/security/pam_unix.so use_first_pass nullok
@@ -14435,8 +14438,8 @@ auth required /lib/security/pam_nologin.so
 account required /lib/security/pam_stack.so service=system-auth
 account required /lib/security/pam_winbind.so
 password required /lib/security/pam_stack.so service=system-auth
-
    
-
    
+
    +

    When I open a new console with [ctrl][alt][F1], then I cant log in with my user "pitie". I've tried with user "scienceu+pitie" also.

    @@ -14447,7 +14450,7 @@ password required /lib/security/pam_stack.so service=system-auth /etc/pam.d/system-auth and copy only what you need from it into your /etc/pam.d/login file. Alternatively, if you want all services to use winbind, you can put the winbind-specific stuff in /etc/pam.d/system-auth. -

    Chapter26.Integrating MS Windows networks with Samba

    John H. Terpstra

    Samba Team

    (Jan 01 2001)

    Table of Contents

    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem

    +

    Chapter26.Integrating MS Windows networks with Samba

    John H. Terpstra

    Samba Team

    (Jan 01 2001)

    Table of Contents

    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem

    This section deals with NetBIOS over TCP/IP name to IP address resolution. If your MS Windows clients are NOT configured to use NetBIOS over TCP/IP then this section does not apply to your installation. If your installation involves use of @@ -14458,7 +14461,7 @@ NetBIOS over TCP/IP then this section may help you to resolve networking problem to NOT run NetBEUI at all. Note also that there is NO such thing as NetBEUI over TCP/IP - the existence of such a protocol is a complete and utter mis-apprehension. -

    Features and Benefits

    +

    Features and Benefits

    Many MS Windows network administrators have never been exposed to basic TCP/IP networking as it is implemented in a Unix/Linux operating system. Likewise, many Unix and Linux administrators have not been exposed to the intricacies of MS Windows TCP/IP based @@ -14466,7 +14469,7 @@ networking (and may have no desire to be either).

    This chapter gives a short introduction to the basics of how a name can be resolved to it's IP address for each operating system environment. -

    Background Information

    +

    Background Information

    Since the introduction of MS Windows 2000 it is possible to run MS Windows networking without the use of NetBIOS over TCP/IP. NetBIOS over TCP/IP uses UDP port 137 for NetBIOS name resolution and uses TCP port 139 for NetBIOS session services. When NetBIOS over @@ -14482,10 +14485,10 @@ disable NetBIOS over TCP/IP today use MS Active Directory Service (ADS). ADS req Dynamic DNS with Service Resource Records (SRV RR) and with Incremental Zone Transfers (IXFR). Use of DHCP with ADS is recommended as a further means of maintaining central control over client workstation network configuration. -

    Name Resolution in a pure Unix/Linux world

    +

    Name Resolution in a pure Unix/Linux world

    The key configuration files covered in this section are: -

    • /etc/hosts

    • /etc/resolv.conf

    • /etc/host.conf

    • /etc/nsswitch.conf

    /etc/hosts

    -Contains a static list of IP Addresses and names. +

    • /etc/hosts

    • /etc/resolv.conf

    • /etc/host.conf

    • /etc/nsswitch.conf

    /etc/hosts

    +Contains a static list of IP addresses and names. eg: 

     	127.0.0.1	localhost localhost.localdomain
@@ -14497,7 +14500,7 @@ IP addresses.
 
    
 Network packets that are sent over the physical network transport 
 layer communicate not via IP addresses but rather using the Media 
-Access Control address, or MAC address. IP Addresses are currently 
+Access Control address, or MAC address. IP addresses are currently 
 32 bits in length and are typically presented as four (4) decimal 
 numbers that are separated by a dot (or period). eg: 168.192.1.1.
 
    
@@ -14541,7 +14544,7 @@ primary names by which they are known within the local machine.
 This file helps to prime the pump so that a basic level of name 
 resolution can exist before any other method of name resolution 
 becomes available.
-

    /etc/resolv.conf

    +

    /etc/resolv.conf

    This file tells the name resolution libraries:

    • The name of the domain to which the machine belongs @@ -14551,7 +14554,7 @@ This file tells the name resolution libraries:

    • The name or IP address of available Domain Name Servers that may be asked to perform name to address translation lookups -

    /etc/host.conf

    +

    /etc/host.conf

    /etc/host.conf is the primary means by which the setting in /etc/resolv.conf may be affected. It is a critical configuration file. This file controls the order by @@ -14562,7 +14565,7 @@ which name resolution may proceed. The typical structure is:

    then both addresses should be returned. Please refer to the man page for host.conf for further details. -

    /etc/nsswitch.conf

    +

    /etc/nsswitch.conf

    This file controls the actual name resolution targets. The file typically has resolver object specifications as follows: 

    @@ -14598,22 +14601,22 @@ Starting with version 2.2.0 samba has Linux support for extensions to
 the name service switch infrastructure so that linux clients will 
 be able to obtain resolution of MS Windows NetBIOS names to IP 
 Addresses. To gain this functionality Samba needs to be compiled 
-with appropriate arguments to the make command (ie: make 
+with appropriate arguments to the make command (i.e.: make 
 nsswitch/libnss_wins.so). The resulting library should 
 then be installed in the /lib directory and 
 the "wins" parameter needs to be added to the "hosts:" line in 
 the /etc/nsswitch.conf file. At this point it 
-will be possible to ping any MS Windows machine by it's NetBIOS 
+will be possible to ping any MS Windows machine by its NetBIOS 
 machine name, so long as that machine is within the workgroup to 
 which both the samba machine and the MS Windows machine belong.
-

    Name resolution as used within MS Windows networking

    +

    Name resolution as used within MS Windows networking

    MS Windows networking is predicated about the name each machine is given. This name is known variously (and inconsistently) as the "computer name", "machine name", "networking name", "netbios name", -"SMB name". All terms mean the same thing with the exception of +or "SMB name". All terms mean the same thing with the exception of "netbios name" which can apply also to the name of the workgroup or the domain name. The terms "workgroup" and "domain" are really just a -simply name with which the machine is associated. All NetBIOS names +simple name with which the machine is associated. All NetBIOS names are exactly 16 characters in length. The 16th character is reserved. It is used to store a one byte value that indicates service level information for the NetBIOS name that is registered. A NetBIOS machine @@ -14648,8 +14651,8 @@ wants to locate a domain logon server. It finds this service and the IP address of a server that provides it by performing a lookup (via a NetBIOS broadcast) for enumeration of all machines that have registered the name type *<1c>. A logon request is then sent to each -IP address that is returned in the enumerated list of IP addresses. Which -ever machine first replies then ends up providing the logon services. +IP address that is returned in the enumerated list of IP addresses. +Whichever machine first replies then ends up providing the logon services.

    The name "workgroup" or "domain" really can be confusing since these have the added significance of indicating what is the security @@ -14677,7 +14680,7 @@ NBT or NetBT, the NetBIOS over TCP/IP. MS Windows machines use a complex array of name resolution mechanisms. Since we are primarily concerned with TCP/IP this demonstration is limited to this area. -

    The NetBIOS Name Cache

    +

    The NetBIOS Name Cache

    All MS Windows machines employ an in memory buffer in which is stored the NetBIOS names and IP addresses for all external machines that that machine has communicated with over the @@ -14695,7 +14698,7 @@ frustrating for users - but it is a characteristic of the protocol. The MS Windows utility that allows examination of the NetBIOS name cache is called "nbtstat". The Samba equivalent of this is called nmblookup. -

    The LMHOSTS file

    +

    The LMHOSTS file

    This file is usually located in MS Windows NT 4.0 or 2000 in C:\WINNT\SYSTEM32\DRIVERS\ETC and contains the IP Address and the machine name in matched pairs. The @@ -14780,25 +14783,25 @@ It typically looks like: # so keeping the number of comments to a minimum will improve performance. # Therefore it is not advisable to simply add lmhosts file entries onto the # end of this file. -

    HOSTS file

    +

    HOSTS file

    This file is usually located in MS Windows NT 4.0 or 2000 in C:\WINNT\SYSTEM32\DRIVERS\ETC and contains the IP Address and the IP hostname in matched pairs. It can be used by the name resolution infrastructure in MS Windows, depending on how the TCP/IP environment is configured. This file is in every way the equivalent of the Unix/Linux /etc/hosts file. -

    DNS Lookup

    +

    DNS Lookup

    This capability is configured in the TCP/IP setup area in the network -configuration facility. If enabled an elaborate name resolution sequence -is followed the precise nature of which is dependant on what the NetBIOS -Node Type parameter is configured to. A Node Type of 0 means use -NetBIOS broadcast (over UDP broadcast) is first used if the name +configuration facility. If enabled, an elaborate name resolution sequence +is followed the precise nature of which is dependant on how the NetBIOS +Node Type parameter is configured. A Node Type of 0 means that +NetBIOS broadcast (over UDP broadcast) is used if the name that is the subject of a name lookup is not found in the NetBIOS name cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast lookup is used. -

    WINS Lookup

    +

    WINS Lookup

    A WINS (Windows Internet Name Server) service is the equivalent of the rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores the names and IP addresses that are registered by a Windows client @@ -14817,11 +14820,11 @@ needed in the smb.conf file:

    where xxx.xxx.xxx.xxx is the IP address of the WINS server. -

    Common Errors

    +

    Common Errors

    TCP/IP network configuration problems find every network administrator sooner or later. The cause can be anything from keyboard mishaps, forgetfulness, simple mistakes, and carelessness. Of course, no one is every deliberately careless! -

    My Boomerang Won't Come Back

    +

    My Boomerang Won't Come Back

    Well, the real complaint said, "I can ping my samba server from Windows, but I can not ping my Windows machine from the samba server."

    @@ -14831,9 +14834,9 @@ carelessness. Of course, no one is every deliberately careless!

    Due to inconsistent netmasks, the Windows machine was on network 192.168.1.0/24, while the Samba server was on network 192.168.1.128/25 - logically a different network. -

    Very Slow Network Connections

    +

    Very Slow Network Connections

    A common causes of slow network response includes: -

    • Client is configured to use DNS and DNS server is down

    • Client is configured to use remote DNS server, but remote connection is down

    • Client is configured to use a WINS server, but there is no WINS server

    • Client is NOT configured to use a WINS server, but there is a WINS server

    • Firewall is filtering our DNS or WINS traffic

    Samba server name change problem

    +

    • Client is configured to use DNS and DNS server is down

    • Client is configured to use remote DNS server, but remote connection is down

    • Client is configured to use a WINS server, but there is no WINS server

    • Client is NOT configured to use a WINS server, but there is a WINS server

    • Firewall is filtering our DNS or WINS traffic

    Samba server name change problem

    The name of the samba server was changed, samba was restarted, samba server can not be pinged by new name from MS Windows NT4 Workstation, but it does still respond to ping using the old name. Why? @@ -14842,8 +14845,8 @@ carelessness. Of course, no one is every deliberately careless!

    • WINS is NOT in use, only broadcast based name resolution is used

    • The samba server was renamed and restarted within the last 10-15 minutes

    • The old samba server name is still in the NetBIOS name cache on the MS Windows NT4 Workstation

    To find what names are present in the NetBIOS name cache on the MS Windows NT4 machine, open a cmd shell, then: -

    - 

    +	
    
+	
     	C:\temp\>nbtstat -n
 
 	              NetBIOS Local Name Table
@@ -14867,13 +14870,13 @@ carelessness. Of course, no one is every deliberately careless!
 	FRODO            <20>  UNIQUE      192.168.1.1          240
 
 	C:\Temp\>
-	
    
-	
    
+
    +

    In the above example, FRODO is the Samba server and SLACK is the MS Windows NT4 Workstation. - The first listing shows the contents of the Local Name Table (ie: Identity information on + The first listing shows the contents of the Local Name Table (i.e.: Identity information on the MS Windows workstation), the second shows the NetBIOS name in the NetBIOS name cache. The name cache contains the remote machines known to this workstation. -

    Chapter27.Unicode/Charsets

    Jelmer R. Vernooij

    The Samba Team

    TAKAHASHI Motonobu

    25 March 2003

    Table of Contents

    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets

    Features and Benefits

    +

    Chapter27.Unicode/Charsets

    Jelmer R. Vernooij

    The Samba Team

    TAKAHASHI Motonobu

    25 March 2003

    Table of Contents

    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets

    Features and Benefits

    Every industry eventually matures. One of the great areas of maturation is in the focus that has been given over the past decade to make it possible for anyone anywhere to use a computer. It has not always been that way, in fact, not so long @@ -14888,7 +14891,7 @@ special mention. For more information about Openi18n please refer to: Samba-2.x supported a single locale through a mechanism called codepages. Samba-3 is destined to become a truly trans-global file and printer sharing platform. -

    What are charsets and unicode?

    +

    What are charsets and unicode?

    Computers communicate in numbers. In texts, each number will be translated to a corresponding letter. The meaning that will be assigned to a certain number depends on the character set(charset) @@ -14915,7 +14918,7 @@ communicating. negotiating the charset to be used in the smb protocol. Thus, you have to make sure you are using the same charset when talking to an old client. Newer clients (Windows NT, 2K, XP) talk unicode over the wire. -

    Samba and charsets

    +

    Samba and charsets

    As of samba 3.0, samba can (and will) talk unicode over the wire. Internally, samba knows of three kinds of character sets:

    unix charset

    @@ -14929,14 +14932,14 @@ samba knows of three kinds of character sets: The default depends on the charsets you have installed on your system. Run testparm -v | grep "dos charset" to see what the default is on your system. -

    Conversion from old names

    Because previous samba versions did not do any charset conversion, +

    Conversion from old names

    Because previous samba versions did not do any charset conversion, characters in filenames are usually not correct in the unix charset but only for the local charset used by the DOS/Windows clients.

    The following script from Steve Langasek converts all filenames from CP850 to the iso8859-15 charset.

    #find /path/to/share -type f -exec bash -c 'CP="{}"; ISO=`echo -n "$CP" | iconv -f cp850 \ -t iso8859-15`; if [ "$CP" != "$ISO" ]; then mv "$CP" "$ISO"; fi' \; -

    Japanese charsets

    Samba doesn't work correctly with Japanese charsets yet. Here are +

    Japanese charsets

    Samba doesn't work correctly with Japanese charsets yet. Here are points of attention when setting it up:

    • You should set mangling method = hash

    • There are various iconv() implementations around and not all of them work equally well. glibc2's iconv() has a critical problem @@ -14946,28 +14949,28 @@ Shift_JIS, SJIS...

    • Currently only unix c will work (but still has some problems...) because of iconv() issues. unix charset = EUC-JP doesn't work well because of iconv() issues.

    • Currently Samba 3.0 does not support unix charset -= UTF8-MAC/CAP/HEX/JIS*

    More information (in Japanese) is available at: http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html.

    Chapter28.Samba Backup Techniques

    John H. Terpstra

    Samba Team

    Table of Contents

    Note
    Features and Benefits

    Note

    += UTF8-MAC/CAP/HEX/JIS*

    More information (in Japanese) is available at: http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html.

    Chapter28.Samba Backup Techniques

    John H. Terpstra

    Samba Team

    Table of Contents

    Note
    Features and Benefits

    Note

    This chapter did not make it into this release. It is planned for the published release of this document. If you have something to contribute for this section please email it to jht@samba.org/ -

    Features and Benefits

    +

    Features and Benefits

    We need feedback from people who are backing up samba servers. We would like to know what software tools you are using to backup your samba server/s.

    In particular, if you have any success and / or failure stories you could share with other users this would be appreciated. -

    Chapter29.High Availability Options

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    +

    Chapter29.High Availability Options

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    This chapter did not make it into this release. It is planned for the published release of this document. -

    Migration and Updating

    Table of Contents

    30. Upgrading from Samba-2.x to Samba-3.0.0
    Charsets
    Obsolete configuration options
    Password Backend
    31. Migration from NT4 PDC to Samba-3 PDC
    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices
    32. SWAT - The Samba Web Administration Tool
    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page

    Chapter30.Upgrading from Samba-2.x to Samba-3.0.0

    Jelmer R. Vernooij

    The Samba Team

    25 October 2002

    Table of Contents

    Charsets
    Obsolete configuration options
    Password Backend

    Charsets

    You might experience problems with special characters +

    Migration and Updating

    Table of Contents

    30. Upgrading from Samba-2.x to Samba-3.0.0
    Charsets
    Obsolete configuration options
    Password Backend
    31. Migration from NT4 PDC to Samba-3 PDC
    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices
    32. SWAT - The Samba Web Administration Tool
    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page

    Chapter30.Upgrading from Samba-2.x to Samba-3.0.0

    Jelmer R. Vernooij

    The Samba Team

    25 October 2002

    Table of Contents

    Charsets
    Obsolete configuration options
    Password Backend

    Charsets

    You might experience problems with special characters when communicating with old DOS clients. Codepage support has changed in samba 3.0. Read the chapter Unicode support for details. -

    Obsolete configuration options

    +

    Obsolete configuration options

    In 3.0, the following configuration options have been removed. -

    printer driver (replaced by new driver procedures)
    printer driver file (replaced by new driver procedures)
    printer driver location (replaced by new driver procedures)
    use rhosts
    postscript
    client code page (replaced by dos charset)
    vfs path
    vfs options

    Password Backend

    +

    printer driver (replaced by new driver procedures)
    printer driver file (replaced by new driver procedures)
    printer driver location (replaced by new driver procedures)
    use rhosts
    postscript
    client code page (replaced by dos charset)
    vfs path
    vfs options

    Password Backend

    Effective with the release of samba-3 it is now imperative that the password backend be correctly defined in smb.conf.

    @@ -14979,10 +14982,10 @@ Those migrating from samba-2.x with encrypted password support should add to smb

    LDAP using Samba-2.x systems can continue to operate with the following entry passdb backend = ldapsam_compat, guest. -

    Chapter31.Migration from NT4 PDC to Samba-3 PDC

    John H. Terpstra

    Samba Team

    April 3, 2003

    Table of Contents

    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices

    +

    Chapter31.Migration from NT4 PDC to Samba-3 PDC

    John H. Terpstra

    Samba Team

    April 3, 2003

    Table of Contents

    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices

    This is a rough guide to assist those wishing to migrate from NT4 domain control to Samba-3 based domain control. -

    Planning and Getting Started

    +

    Planning and Getting Started

    In the IT world there is often a saying that all problems are encountered because of poor planning. The corollary to this saying is that not all problems can be anticipated and planned for. Then again, good planning will anticipate most show stopper type situations. @@ -14990,7 +14993,7 @@ and planned for. Then again, good planning will anticipate most show stopper typ Those wishing to migrate from MS Windows NT4 domain control to a Samba-3 domain control environment would do well to develop a detailed migration plan. So here are a few pointers to help migration get under way. -

    Objectives

    +

    Objectives

    The key objective for most organisations will be to make the migration from MS Windows NT4 to Samba-3 domain control as painless as possible. One of the challenges you may experience in your migration process may well be one of convincing management that the new environment @@ -15017,7 +15020,7 @@ Before migrating a network from MS Windows NT4 to Samba-3 it is vital that all n considered. Users should be educated about changes they may experience so that the change will be a welcome one and not become an obstacle to the work they need to do. The following are some of the factors that will go into a successful migration: -

    Domain Layout

    +

    Domain Layout

    Samba-3 can be configured as a domain controller, a back-up domain controller (probably best called a secondary controller), a domain member, or as a stand-alone server. The Windows network security domain context should be sized and scoped before implementation. Particular attention needs to be @@ -15038,7 +15041,7 @@ designed to serve multiple routed network segments may result in severe performa response time (eg: ping timing) between the remote segment and the PDC is more than 100 ms. In situations where the delay is too long it is highly recommended to locate a backup controller (BDC) to serve as the local authentication and access control server. -

    Server Share and Directory Layout

    +

    Server Share and Directory Layout

    There are few cardinal rules to effective network design that can be broken with impunity. The most important rule of effective network management is that simplicity is king in every well controlled network. Every part of the infrastructure must be managed, the more complex @@ -15063,7 +15066,7 @@ complex mess that has been inherited. Remember, apparent job security through co and implementation may ultimately cause loss of operations and downtime to users as the new administrator learns to untangle your web. Keep access controls simple and effective and make sure that users will never be interrupted by the stupidity of complexity. -

    Logon Scripts

    +

    Logon Scripts

    Please refer to the section of this document on Advanced Network Administration for information regarding the network logon script options for Samba-3. Logon scripts can help to ensure that all users gain share and printer connections they need. @@ -15077,20 +15080,20 @@ Some sites prefer to use a tool such as kixstart to estab user environment. In any case you may wish to do a google search for logon script process controls. In particular, you may wish to explore the use of the Microsoft knowledgebase article KB189105 that deals with how to add printers without user intervention via the logon script process. -

    Profile Migration/Creation

    +

    Profile Migration/Creation

    User and Group Profiles may be migrated using the tools described in the section titled Desktop Profile Management.

    Profiles may also be managed using the Samba-3 tool profiles. This tool allows the MS Windows NT style security identifiers (SIDs) that are stored inside the profile NTuser.DAT file to be changed to the SID of the Samba-3 domain. -

    User and Group Accounts

    +

    User and Group Accounts

    It is possible to migrate all account settings from an MS Windows NT4 domain to Samba-3. Before attempting to migrate user and group accounts it is STRONGLY advised to create in Samba-3 the groups that are present on the MS Windows NT4 domain AND to connect these to suitable Unix/Linux groups. Following this simple advice will mean that all user and group attributes should migrate painlessly. -

    Steps In Migration Process

    +

    Steps In Migration Process

    The approximate migration process is described below.

    • You will have an NT4 PDC that has the users, groups, policies and profiles to be migrated @@ -15099,11 +15102,11 @@ Samba-3 set up as a DC with netlogon share, profile share, etc.

    Procedure31.1.The Account Migration Process

    1. Create a BDC account for the samba server using NT Server Manager

      1. Samba must NOT be running

    2. rpcclient NT4PDC -U Administrator%passwd

      1. lsaquery

      2. Note the SID returned

    3. net getsid -S NT4PDC -w DOMNAME -U Administrator%passwd

      1. Note the SID

    4. net getlocalsid

      1. Note the SID, now check that all three SIDS reported are the same!

    5. net rpc join -S NT4PDC -w DOMNAME -U Administrator%passwd

    6. net rpc vampire -S NT4PDC -U administrator%passwd

    7. pdbedit -L

      1. Note - did the users migrate?

    8. initGrps.sh DOMNAME

    9. net groupmap list

      1. Now check that all groups are recognised

    10. net rpc vampire -S NT4PDC -U administrator%passwd

    11. pdbedit -Lv

      1. Note - check that all group membership has been migrated

    Now it is time to migrate all the profiles, then migrate all policy files. More later. -

    Migration Options

    +

    Migration Options

    Based on feedback from many sites as well as from actual installation and maintenance experience sites that wish to migrate from MS Windows NT4 Domain Control to a Samba based solution fit into three basic categories. -

    Table31.1.The 3 Major Site Types

    Number of UsersDescription
    < 50

    Want simple conversion with NO pain

    50 - 250

    Want new features, can manage some in-house complexity

    > 250

    Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas

    Planning for Success

    +

    Table31.1.The 3 Major Site Types

    Number of UsersDescription
    < 50

    Want simple conversion with NO pain

    50 - 250

    Want new features, can manage some in-house complexity

    > 250

    Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas

    Planning for Success

    There are three basic choices for sites that intend to migrate from MS Windows NT4 to Samba-3.

    • @@ -15122,7 +15125,7 @@ No matter what choice you make, the following rules will minimise down-stream pr Test ALL assumptions

    • Test full roll-out program, including workstation deployment -

    Table31.2.Nature of the Conversion Choices

    SimpleUpgradedRedesign

    Make use of minimal OS specific features

    Translate NT4 features to new host OS features

    Decide:

    Suck all accounts from NT4 into Samba-3

    Copy and improve:

    Authentication Regime (database location and access)

    Make least number of operational changes

    Make progressive improvements

    Desktop Management Methods

    Take least amount of time to migrate

    Minimise user impact

    Better Control of Desktops / Users

    Live versus Isolated Conversion

    Maximise functionality

    Identify Needs for: Manageability, Scalability, Security, Availability

    Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)

    Take advantage of lower maintenance opportunity

    Samba Implementation Choices

    +

    Table31.2.Nature of the Conversion Choices

    SimpleUpgradedRedesign

    Make use of minimal OS specific features

    Translate NT4 features to new host OS features

    Decide:

    Suck all accounts from NT4 into Samba-3

    Copy and improve:

    Authentication Regime (database location and access)

    Make least number of operational changes

    Make progressive improvements

    Desktop Management Methods

    Take least amount of time to migrate

    Minimise user impact

    Better Control of Desktops / Users

    Live versus Isolated Conversion

    Maximise functionality

    Identify Needs for: Manageability, Scalability, Security, Availability

    Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)

    Take advantage of lower maintenance opportunity

    Samba Implementation Choices

     Authentication database back end
 	Winbind (external Samba or NT4/200x server)
 	Can use pam_mkhomedir.so to auto-create home dirs
@@ -15179,8 +15182,8 @@ Migration Tools
 
 Authentication
 	New SAM back end (smbpasswd, tdbsam, ldapsam, mysqlsam)
-

    -

    Chapter32.SWAT - The Samba Web Administration Tool

    John H. Terpstra

    Samba Team

    April 21, 2003

    Table of Contents

    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page

    + +

    Chapter32.SWAT - The Samba Web Administration Tool

    John H. Terpstra

    Samba Team

    April 21, 2003

    Table of Contents

    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page

    There are many and varied opinions regarding the usefulness or otherwise of SWAT. No matter how hard one tries to produce the perfect configuration tool it remains an object of personal taste. SWAT is a tool that will allow web based configuration @@ -15188,7 +15191,7 @@ of samba. It has a wizard that may help to get samba configured quickly, it has sensitive help on each smb.conf parameter, it provides for monitoring of current state of connection information, and it allows network wide MS Windows network password management. -

    Features and Benefits

    +

    Features and Benefits

    There are network administrators who believe that it is a good idea to write systems documentation inside configuration files, for them SWAT will aways be a nasty tool. SWAT does not store the configuration file in any intermediate form, rather, it stores only the @@ -15200,7 +15203,7 @@ internal ordering. So before using SWAT please be warned - SWAT will completely replace your smb.conf with a fully optimised file that has been stripped of all comments you might have placed there and only non-default settings will be written to the file. -

    Enabling SWAT for use

    +

    Enabling SWAT for use

    SWAT should be installed to run via the network super daemon. Depending on which system your Unix/Linux system has you will have either an inetd or xinetd based system. @@ -15216,8 +15219,8 @@ The control entry for the older style file might be: swat stream tcp nowait.400 root /usr/sbin/swat swat

    A control file for the newer style xinetd could be: -

    -

    +
    
+
     	# default: off
 	# description: SWAT is the Samba Web Admin Tool. Use swat \
 	#              to configure your Samba server. To use SWAT, \
@@ -15233,9 +15236,9 @@ A control file for the newer style xinetd could be:
 		log_on_failure  += USERID
 		disable = yes
 	}
-
    
+
    -

    +

    Both the above examples assume that the swat binary has been located in the /usr/sbin directory. In addition to the above SWAT will use a directory access point from which it will load it's help files @@ -15254,32 +15257,32 @@ So long as you log onto SWAT as the user rootHOME, GLOBALS, SHARES, PRINTERS, WIZARD, STATUS, VIEW, PASSWORD. -

    Securing SWAT through SSL

    +

    Securing SWAT through SSL

    Lots of people have asked about how to setup SWAT with SSL to allow for secure remote administration of Samba. Here is a method that works, courtesy of Markus Krieger

    Modifications to the swat setup are as following:

    1. install OpenSSL -

    2. +

    3. generate certificate and private key - 

      +	
       root# /usr/bin/openssl req -new -x509 -days 365 -nodes -config \
  	/usr/share/doc/packages/stunnel/stunnel.cnf \
 	-out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem

    4. remove swat-entry from [x]inetd -

    5. +

    6. start stunnel - 

      +	
       root# stunnel -p /etc/stunnel/stunnel.pem -d 901 \
 	 -l /usr/local/samba/bin/swat swat

    afterwords simply contact to swat by using the URL https://myhost:901, accept the certificate and the SSL connection is up. -

    The SWAT Home Page

    +

    The SWAT Home Page

    The SWAT title page provides access to the latest Samba documentation. The manual page for each samba component is accessible from this page as are the Samba-HOWTO-Collection (this document) as well as the O'Reilly book "Using Samba". @@ -15295,7 +15298,7 @@ as it runs SWAT without authentication and with full administrative ability. ie: changes to smb.conf as well as general operation with root privileges. The option that creates this ability is the -a flag to swat. Do not use this in any production environment. -

    Global Settings

    +

    Global Settings

    The Globals button will expose a page that allows configuration of the global parameters in smb.conf. There are three levels of exposure of the parameters:

    • @@ -15317,7 +15320,7 @@ your changes will be immediately lost.

      Note

      SWAT has context sensitive help. To find out what each parameter is for simply click the Help link to the left of the configuration parameter. -

    Share Settings

    +

    Share Settings

    To affect a currently configured share, simply click on the pull down button between the Choose Share and the Delete Share buttons, select the share you wish to operate on, then to edit the settings click on the @@ -15327,7 +15330,7 @@ select the share you wish to operate on, then to edit the settings click on the To create a new share, next to the button labelled Create Share enter into the text field the name of the share to be created, then click on the Create Share button. -

    Printers Settings

    +

    Printers Settings

    To affect a currently configured printer, simply click on the pull down button between the Choose Printer and the Delete Printer buttons, select the printer you wish to operate on, then to edit the settings click on the @@ -15337,7 +15340,7 @@ select the printer you wish to operate on, then to edit the settings click on th To create a new printer, next to the button labelled Create Printer enter into the text field the name of the share to be created, then click on the Create Printer button. -

    The SWAT Wizard

    +

    The SWAT Wizard

    The purpose if the SWAT Wizard is to help the Microsoft knowledgeable network administrator to configure Samba with a minimum of effort.

    @@ -15353,7 +15356,7 @@ Finally, there are a limited set of options that will determine what type of ser will be configured for, whether it will be a WINS server, participate as a WINS client, or operate with no WINS support. By clicking on one button you can elect to expose (or not) user home directories. -

    The Status Page

    +

    The Status Page

    The status page serves a limited purpose. Firstly, it allows control of the samba daemons. The key daemons that create the samba server environment are: smbd, nmbd, winbindd.

    @@ -15364,11 +15367,11 @@ conditions with minimal effort.

    Lastly, the Status page may be used to terminate specific smbd client connections in order to free files that may be locked. -

    The View Page

    +

    The View Page

    This page allows the administrator to view the optimised smb.conf file and, if you are particularly masochistic, will permit you also to see all possible global configuration parameters and their settings. -

    The Password Change Page

    +

    The Password Change Page

    The Password Change page is a popular tool. This tool allows the creation, deletion, deactivation and reactivation of MS Windows networking users on the local machine. Alternatively, you can use this tool to change a local password for a user account. @@ -15379,7 +15382,7 @@ required.

    One popular use for this tool is to change user passwords across a range of remote MS Windows servers. -

    Troubleshooting

    Table of Contents

    33. The Samba checklist
    Introduction
    Assumptions
    The tests
    Still having troubles?
    34. Analysing and solving samba problems
    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists
    35. Reporting Bugs
    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches

    Chapter33.The Samba checklist

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Wed Jan 15

    Table of Contents

    Introduction
    Assumptions
    The tests
    Still having troubles?

    Introduction

    +

    Troubleshooting

    Table of Contents

    33. The Samba checklist
    Introduction
    Assumptions
    The tests
    Still having troubles?
    34. Analysing and solving samba problems
    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists
    35. Reporting Bugs
    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches

    Chapter33.The Samba checklist

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Wed Jan 15

    Table of Contents

    Introduction
    Assumptions
    The tests
    Still having troubles?

    Introduction

    This file contains a list of tests you can perform to validate your Samba server. It also tells you what the likely cause of the problem is if it fails any one of these steps. If it passes all these tests @@ -15394,7 +15397,7 @@ to solve a problem. If you send one of the samba mailing lists an email saying "it doesn't work" and you have not followed this test procedure then you should not be surprised if your email is ignored. -

    Assumptions

    +

    Assumptions

    In all of the tests it is assumed you have a Samba server called BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP.

    @@ -15411,8 +15414,8 @@ following to smb.conf: path = /tmp read only = yes -

    -

    Note

    + +

    Note

    These tests assume version 3.0 or later of the samba suite. Some commands shown did not exist in earlier versions.

    @@ -15435,7 +15438,7 @@ depending on how or if you specified logging in your smb.co

    If you make changes to your smb.conf file while going through these test, don't forget to restart smbd and nmbd. -

    The tests

    Procedure33.1.Diagnosing your samba server

    1. +

    The tests

    Procedure33.1.Diagnosing your samba server

    1. In the directory in which you store your smb.conf file, run the command testparm smb.conf. If it reports any errors then your smb.conf configuration file is faulty. @@ -15678,13 +15681,13 @@ capability and is in user level security mode. In this case either set password server = Windows_NT_Machine in your smb.conf file, or make sure encrypted passwords is set to "yes". -

    Still having troubles?

    Read the chapter on +

    Still having troubles?

    Read the chapter on Analysing and Solving Problems. -

    Chapter34.Analysing and solving samba problems

    Gerald (Jerry) Carter

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    David Bannon

    Samba Team

    8 Apr 2003

    Table of Contents

    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists

    +

    Chapter34.Analysing and solving samba problems

    Gerald (Jerry) Carter

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    David Bannon

    Samba Team

    8 Apr 2003

    Table of Contents

    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists

    There are many sources of information available in the form of mailing lists, RFC's and documentation. The docs that come with the samba distribution contain very good explanations of -general SMB topics such as browsing.

    Diagnostics tools

    +general SMB topics such as browsing.

    Diagnostics tools

    One of the best diagnostic tools for debugging problems is Samba itself. You can use the -d option for both smbd and nmbd to specify what debug level at which to run. See the man pages on smbd, nmbd and @@ -15723,7 +15726,7 @@ The version on the NT Server install CD will only allow monitoring of network traffic directed to the local NT box and broadcasts on the local subnet. Be aware that Ethereal can read and write netmon formatted files. -

    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box

    +

    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box

    Installing netmon on an NT workstation requires a couple of steps. The following are for installing Netmon V4.00.349, which comes with Microsoft Windows NT Server 4.0, on Microsoft Windows NT @@ -15762,11 +15765,11 @@ from the Windows 9x CD (\admin\nettools\netmon). Ther file located with the netmon driver files on the CD if you need information on how to do this. Copy the files from a working Netmon installation. -

    Useful URLs

    • See how Scott Merrill simulates a BDC behavior at +

    Useful URLs

    Getting help from the mailing lists

    + ftp://ftp.microsoft.com/developr/drg/CIFS/

    Getting help from the mailing lists

    There are a number of Samba related mailing lists. Go to http://samba.org, click on your nearest mirror and then click on Support and then click on Samba related mailing lists. @@ -15800,7 +15803,7 @@ error messages.

  • (Possibly) If you have a complete netmon trace ( the pipe to the error ) you can send the *.CAP file as well.

  • Please think carefully before attaching a document to an email. Consider pasting the relevant parts into the body of the message. The samba mailing lists go to a huge number of people, do they all need a copy of your -smb.conf in their attach directory?

    • How to get off the mailing lists

    To have your name removed from a samba mailing list, go to the +smb.conf in their attach directory?

    How to get off the mailing lists

    To have your name removed from a samba mailing list, go to the same place you went to to get on it. Go to http://lists.samba.org, click on your nearest mirror and then click on Support and then click on Samba related mailing lists. Or perhaps see @@ -15808,7 +15811,7 @@ then click on Samba related mailing lists. Or perhaps se

    Please don't post messages to the list asking to be removed, you will just be referred to the above address (unless that process failed in some way...) -

    Chapter35.Reporting Bugs

    Jelmer R. Vernooij

    The Samba Team

    Someone; Tridge or Karl Auer perhaps?

    27 June 1997

    Table of Contents

    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches

    Introduction

    Please report bugs using +

    Chapter35.Reporting Bugs

    Jelmer R. Vernooij

    The Samba Team

    Someone; Tridge or Karl Auer perhaps?

    27 June 1997

    Table of Contents

    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches

    Introduction

    Please report bugs using bugzilla.

    Please take the time to read this file before you submit a bug report. Also, please see if it has changed between releases, as we @@ -15830,7 +15833,7 @@ that list that may be able to help you. You may also like to look though the recent mailing list archives, which are conveniently accessible on the Samba web pages at http://samba.org/samba/. -

    General info

    +

    General info

    Before submitting a bug report check your config for silly errors. Look in your log files for obvious messages that tell you that you've misconfigured something and run testparm to test your config @@ -15842,7 +15845,7 @@ This is very important. If you include part of a log file with your bug report then be sure to annotate it with exactly what you were doing on the client at the time, and exactly what the results were. -

    Debug levels

    +

    Debug levels

    If the bug has anything to do with Samba behaving incorrectly as a server (like refusing to open a file) then the log files will probably be very useful. Depending on the problem a log level of between 3 and @@ -15877,7 +15880,7 @@ debugging operations you may not need a setting higher than 3. Nearly all bugs can be tracked at a setting of 10, but be prepared for a VERY large volume of log data. -

    Internal errors

    +

    Internal errors

    If you get a INTERNAL ERROR message in your log files it means that Samba got an unexpected signal while running. It is probably a segmentation fault and almost certainly means a bug in Samba (unless @@ -15910,7 +15913,7 @@ disassemble the routine that called it) and try to work out exactly where the problem is by looking at the surrounding code. Even if you don't know assembly, including this info in the bug report can be useful. -

    Attaching to a running process

    +

    Attaching to a running process

    Unfortunately some unixes (in particular some recent linux kernels) refuse to dump a core file if the task has changed uid (which smbd does often). To debug with this sort of system you could try to attach @@ -15920,20 +15923,20 @@ to the running process using Then use c to continue and try to cause the core dump using the client. The debugger should catch the fault and tell you where it occurred. -

    Patches

    +

    Patches

    The best sort of bug report is one that includes a fix! If you send us patches please use diff -u format if your version of diff supports it, otherwise use diff -c4. Make sure you do the diff against a clean version of the source and let me know exactly what version you used. -

    Appendixes

    Table of Contents

    36. How to compile SAMBA
    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors
    37. Portability
    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9
    38. Samba and other CIFS clients
    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working - for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1
    39. Samba Performance Tuning
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    40. DNS and DHCP Configuration Guide
    Note
    41. Further Resources
    Websites
    Related updates from Microsoft
    Books

    Chapter36.How to compile SAMBA

    Jelmer R. Vernooij

    The Samba Team

    Someone; Jerry perhaps?

    22 May 2001

    18 March 2003

    Table of Contents

    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors

    +

    Appendixes

    Table of Contents

    36. How to compile SAMBA
    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors
    37. Portability
    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9
    38. Samba and other CIFS clients
    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working + for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1
    39. Samba Performance Tuning
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    40. DNS and DHCP Configuration Guide
    Note
    41. Further Resources
    Websites
    Related updates from Microsoft
    Books

    Chapter36.How to compile SAMBA

    Jelmer R. Vernooij

    The Samba Team

    Someone; Jerry perhaps?

    22 May 2001

    18 March 2003

    Table of Contents

    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors

    You can obtain the samba source from the samba website. To obtain a development version, you can download samba from CVS or using rsync. -

    Access Samba source code via CVS

    Introduction

    +

    Access Samba source code via CVS

    Introduction

    Samba is developed in an open environment. Developers use CVS (Concurrent Versioning System) to "checkin" (also known as "commit") new source code. Samba's various CVS branches can @@ -15942,12 +15945,12 @@ detailed in this chapter.

    This chapter is a modified version of the instructions found at http://samba.org/samba/cvs.html -

    CVS Access to samba.org

    +

    CVS Access to samba.org

    The machine samba.org runs a publicly accessible CVS repository for access to the source code of several packages, including samba, rsync, distcc, ccache and jitterbug. There are two main ways of accessing the CVS server on this host. -

    Access via CVSweb

    +

    Access via CVSweb

    You can access the source code via your favourite WWW browser. This allows you to access the contents of individual files in the repository and also to look at the revision @@ -15955,7 +15958,7 @@ history and commit logs of individual files. You can also ask for a diff listing between any two versions on the repository.

    Use the URL : http://samba.org/cgi-bin/cvsweb -

    Access via cvs

    +

    Access via cvs

    You can also access the source code via a normal cvs client. This gives you much more control over what you can do with the repository and allows you to checkout whole source trees @@ -16005,7 +16008,7 @@ on this system just substitute the correct package name the following command from within the samba directory:

    cvs update -d -P -

    Accessing the samba sources via rsync and ftp

    +

    Accessing the samba sources via rsync and ftp

    pserver.samba.org also exports unpacked copies of most parts of the CVS tree at ftp://pserver.samba.org/pub/unpacked and also via anonymous rsync at rsync://pserver.samba.org/ftp/unpacked/. I recommend using rsync rather than ftp. @@ -16014,7 +16017,7 @@ on this system just substitute the correct package name The disadvantage of the unpacked trees is that they do not support automatic merging of local changes like CVS does. rsync access is most convenient for an initial install. -

    Verifying Samba's PGP signature

    +

    Verifying Samba's PGP signature

    In these days of insecurity, it's strongly recommended that you verify the PGP signature for any source file before installing it. Even if you're not downloading from a mirror site, verifying PGP signatures should be a @@ -16041,7 +16044,7 @@ then all is well. The warnings about trust relationships can be ignored. An example of what you would not want to see would be:

    gpg: BAD signature from "Samba Distribution Verification Key" -

    Building the Binaries

    To do this, first run the program ./configure +

    Building the Binaries

    To do this, first run the program ./configure in the source directory. This should automatically configure Samba for your operating system. If you have unusual needs then you may wish to run

    root# ./configure --help @@ -16054,7 +16057,7 @@ example of what you would not want to see would be: of Samba you might like to know that the old versions of the binaries will be renamed with a ".old" extension. You can go back to the previous version with

    root# make revert -

    if you find this version a disaster!

    Compiling samba with Active Directory support

    In order to compile samba with ADS support, you need to have installed +

    if you find this version a disaster!

    Compiling samba with Active Directory support

    In order to compile samba with ADS support, you need to have installed on your system:

    • the MIT kerberos development libraries (either install from the sources or use a package). The Heimdal libraries will not work.

    • the OpenLDAP development libraries.

    If your kerberos libraries are in a non-standard location then @@ -16066,12 +16069,12 @@ example of what you would not want to see would be: #define HAVE_LDAP 1

    If it doesn't then configure did not find your krb5 libraries or your ldap libraries. Look in config.log to figure - out why and fix it.

    Installing the required packages for Debian

    On Debian you need to install the following packages:

    -

    libkrb5-dev
    krb5-user

    -

    Installing the required packages for RedHat

    On RedHat this means you should have at least:

    -

    krb5-workstation (for kinit)
    krb5-libs (for linking with)
    krb5-devel (because you are compiling from source)

    -

    in addition to the standard development environment.

    Note that these are not standard on a RedHat install, and you may need - to get them off CD2.

    Starting the smbd and nmbd

    You must choose to start smbd and nmbd either + out why and fix it.

    Installing the required packages for Debian

    On Debian you need to install the following packages:

    +
    libkrb5-dev
    krb5-user
    +

    Installing the required packages for RedHat

    On RedHat this means you should have at least:

    +
    krb5-workstation (for kinit)
    krb5-libs (for linking with)
    krb5-devel (because you are compiling from source)
    +

    in addition to the standard development environment.

    Note that these are not standard on a RedHat install, and you may need + to get them off CD2.

    Starting the smbd and nmbd

    You must choose to start smbd and nmbd either as daemons or from inetd. Don't try to do both! Either you can put them in inetd.conf and have them started on demand @@ -16083,7 +16086,7 @@ example of what you would not want to see would be: Samba. In many cases you must be root.

    The main advantage of starting smbd and nmbd using the recommended daemon method is that they will respond slightly more quickly to an initial connection - request.

    Starting from inetd.conf

    Note

    The following will be different if + request.

    Starting from inetd.conf

    Note

    The following will be different if you use NIS, NIS+ or LDAP to distribute services maps.

    Look at your /etc/services. What is defined at port 139/tcp. If nothing is defined then add a line like this:

    netbios-ssn     139/tcp

    similarly for 137/udp you should have an entry like:

    netbios-ns	137/udp

    Next edit your /etc/inetd.conf @@ -16109,7 +16112,7 @@ example of what you would not want to see would be: arguments, or you should use a script, and start the script from inetd.

    Restart inetd, perhaps just send it a HUP. If you have installed an earlier version of nmbd then - you may need to kill nmbd as well.

    Alternative: starting it as a daemon

    To start the server as a daemon you should create + you may need to kill nmbd as well.

    Alternative: starting it as a daemon

    To start the server as a daemon you should create a script something like this one, perhaps calling it startsmb.

     		#!/bin/sh
@@ -16121,7 +16124,7 @@ example of what you would not want to see would be:
 		
    To kill it send a kill signal to the processes 
 			nmbd and smbd.
    Note
    If you use the SVR4 style init system then 
 		you may like to look at the examples/svr4-startup
-		script to make Samba fit into that system.

    Common Errors

    “ + script to make Samba fit into that system.

    Common Errors

    “ I'm using gcc 3 and I've compiled Samba-3 from the CVS and the binaries are very large files (40 Mb and 20 Mb). I've the same result with --enable-shared ? @@ -16129,9 +16132,9 @@ binaries are very large files (40 Mb and 20 Mb). I've the same result with

    The dwarf format used by GCC 3 for storing debugging symbols is very inefficient. Strip the binaries, don't compile with -g or compile with -gstabs. -

    Chapter37.Portability

    Jelmer R. Vernooij

    The Samba Team

    Table of Contents

    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9

    Samba works on a wide range of platforms but the interface all the +

    Chapter37.Portability

    Jelmer R. Vernooij

    The Samba Team

    Table of Contents

    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9

    Samba works on a wide range of platforms but the interface all the platforms provide is not always compatible. This chapter contains -platform-specific information about compiling and using samba.

    HPUX

    +platform-specific information about compiling and using samba.

    HPUX

    HP's implementation of supplementary groups is, er, non-standard (for hysterical reasons). There are two group files, /etc/group and /etc/logingroup; the system maps UIDs to numbers using the former, but @@ -16151,7 +16154,7 @@ allowed range. On HPUX you must use gcc or the HP ANSI compiler. The free compiler that comes with HP-UX is not ANSI compliant and cannot compile Samba. -

    SCO Unix

    +

    SCO Unix

    If you run an old version of SCO Unix then you may need to get important TCP/IP patches for Samba to work correctly. Without the patch, you may encounter corrupt data transfers using samba. @@ -16159,7 +16162,7 @@ encounter corrupt data transfers using samba. The patch you need is UOD385 Connection Drivers SLS. It is available from SCO (ftp.sco.com, directory SLS, files uod385a.Z and uod385a.ltr.Z). -

    DNIX

    +

    DNIX

    DNIX has a problem with seteuid() and setegid(). These routines are needed for Samba to work correctly, but they were left out of the DNIX C library for some reason. @@ -16218,13 +16221,13 @@ LIBSM = setegid.o seteuid.o -ln You should then remove the line: 

     #define NO_EID
-

    from the DNIX section of includes.h

    RedHat Linux Rembrandt-II

    +

    from the DNIX section of includes.h

    RedHat Linux Rembrandt-II

    By default RedHat Rembrandt-II during installation adds an entry to /etc/hosts as follows: -

    +
     	127.0.0.1 loopback "hostname"."domainname"
-
    
-
    
+
    +

    This causes Samba to loop back onto the loopback interface. The result is that Samba fails to communicate correctly with the world and therefor may fail to correctly negotiate who @@ -16232,10 +16235,10 @@ is the master browse list holder and who is the master browser.

    Corrective Action: Delete the entry after the word loopback in the line starting 127.0.0.1 -

    AIX

    Sequential Read Ahead

    +

    AIX

    Sequential Read Ahead

    Disabling Sequential Read Ahead using vmtune -r 0 improves Samba performance significantly. -

    Solaris

    Locking improvements

    Some people have been experiencing problems with F_SETLKW64/fcntl +

    Solaris

    Locking improvements

    Some people have been experiencing problems with F_SETLKW64/fcntl when running Samba on Solaris. The built in file locking mechanism was not scalable. Performance would degrade to the point where processes would get into loops of trying to lock a file. It would try a lock, then fail, @@ -16256,10 +16259,10 @@ and rebuild samba. Nsswitch on Solaris 9 refuses to use the winbind nss module. This behavior is fixed by Sun in patch 113476-05 which as of March 2003 is not in any roll-up packages. -

    Chapter38.Samba and other CIFS clients

    Jim McDonough

    IBM

    Jelmer R. Vernooij

    The Samba Team

    5 Mar 2001

    Table of Contents

    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working - for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1

    This chapter contains client-specific information.

    Macintosh clients?

    +

    Chapter38.Samba and other CIFS clients

    Jim McDonough

    IBM

    Jelmer R. Vernooij

    The Samba Team

    5 Mar 2001

    Table of Contents

    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working + for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1

    This chapter contains client-specific information.

    Macintosh clients?

    Yes. Thursby now has a CIFS Client / Server called DAVE

    They test it against Windows 95, Windows NT and samba for @@ -16279,7 +16282,7 @@ What Samba offers MS Windows users, these packages offer to Macs. For more info on these packages, Samba, and Linux (and other UNIX-based systems) see http://www.eats.com/linux_mac_win.html -

    OS2 Client

    How can I configure OS/2 Warp Connect or +

    OS2 Client

    How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?

    A more complete answer to this question can be found on http://carol.wins.uva.nl/~leeuw/samba/warp.html.

    Basically, you need three components:

    The File and Print Client ('IBM Peer')
    TCP/IP ('Internet support')
    The "NetBIOS over TCP/IP" driver ('TCPBEUI')

    Installing the first two together with the base operating @@ -16297,7 +16300,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see to the "Names List", or specify a WINS server ('NetBIOS Nameserver' in IBM and RFC terminology). For Warp Connect you may need to download an update for 'IBM Peer' to bring it on - the same level as Warp 4. See the webpage mentioned above.

    How can I configure OS/2 Warp 3 (not Connect), + the same level as Warp 4. See the webpage mentioned above.

    How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?

    You can use the free Microsoft LAN Manager 2.2c Client for OS/2 from @@ -16315,7 +16318,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see or NS2000 driver from ftp://ftp.cdrom.com/pub/os2/network/ndis/ instead. -

    How do I get printer driver download working +

    How do I get printer driver download working for OS/2 clients?

    First, create a share called [PRINTDRV] that is world-readable. Copy your OS/2 driver files there. Note that the .EA_ files must still be separate, so you will need @@ -16332,7 +16335,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see you the driver is not available. On the second attempt, it will work. This is fixed simply by adding the device name to the mapping, after which it will work on the first attempt. -

    Windows for Workgroups

    Use latest TCP/IP stack from Microsoft

    Use the latest TCP/IP stack from Microsoft if you use Windows +

    Windows for Workgroups

    Use latest TCP/IP stack from Microsoft

    Use the latest TCP/IP stack from Microsoft if you use Windows for Workgroups.

    The early TCP/IP stacks had lots of bugs.

    Microsoft has released an incremental upgrade to their TCP/IP 32-Bit @@ -16347,7 +16350,7 @@ fixed. New files include WINSOCK.DLL, TRACERT.EXE, NETSTAT.EXE, and NBTSTAT.EXE. -

    Delete .pwl files after password change

    +

    Delete .pwl files after password change

    WfWg does a lousy job with passwords. I find that if I change my password on either the unix box or the PC the safest thing to do is to delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password. @@ -16356,7 +16359,7 @@ If you don't do this you may find that WfWg remembers and uses the old password, even if you told it a new one.

    Often WfWg will totally ignore a password you give it in a dialog box. -

    Configure WfW password handling

    +

    Configure WfW password handling

    There is a program call admincfg.exe on the last disk (disk 8) of the WFW 3.11 disk set. To install it type EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE. @@ -16364,11 +16367,11 @@ Then add an icon for it via the Program Manager New Menu. This program allows you to control how WFW handles passwords. ie disable Password Caching etc for use with security = user -

    Case handling of passwords

    Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the smb.conf(5) information on password level to specify what characters samba should try to uppercase when checking.

    Use TCP/IP as default protocol

    To support print queue reporting you may find +

    Case handling of passwords

    Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the smb.conf(5) information on password level to specify what characters samba should try to uppercase when checking.

    Use TCP/IP as default protocol

    To support print queue reporting you may find that you have to use TCP/IP as the default protocol under WfWg. For some reason if you leave NetBEUI as the default it may break the print queue reporting on some systems. -It is presumably a WfWg bug.

    Speed improvement

    +It is presumably a WfWg bug.

    Speed improvement

    Note that some people have found that setting DefaultRcvWindow in the [MSTCP] section of the SYSTEM.INI file under WfWg to 3072 gives a @@ -16379,7 +16382,7 @@ performance with a large value (16384 or larger). Other people have reported that anything over 3072 slows things down enormously. One person even reported a speed drop of a factor of 30 when he went from 3072 to 8192. I don't know why. -

    Windows '95/'98

    +

    Windows '95/'98

    When using Windows 95 OEM SR2 the following updates are recommended where Samba is being used. Please NOTE that the above change will affect you once these updates have been installed. @@ -16393,11 +16396,11 @@ install the OLEUPD.EXE fix. This fix may stop your machine from hanging for an extended period when exiting Outlook and you may also notice a significant speedup when accessing network neighborhood services. -

    Speed improvement

    +

    Speed improvement

    Configure the win95 TCPIP registry settings to give better performance. I use a program called MTUSPEED.exe which I got off the net. There are various other utilities of this type freely available. -

    Windows 2000 Service Pack 2

    +

    Windows 2000 Service Pack 2

    There are several annoyances with Windows 2000 SP2. One of which only appears when using a Samba server to host user profiles to Windows 2000 SP2 clients in a Windows domain. This assumes @@ -16438,10 +16441,10 @@ the Win2k client a response to the QuerySecurityDescriptor trans2 call which causes the client to set a default ACL for the profile. This default ACL includes

    DOMAIN\user "Full Control">

    Note

    This bug does not occur when using winbind to -create accounts on the Samba host for Domain users.

    Windows NT 3.1

    If you have problems communicating across routers with Windows +create accounts on the Samba host for Domain users.

    Windows NT 3.1

    If you have problems communicating across routers with Windows NT 3.1 workstations, read this Microsoft Knowledge Base article. -

    Chapter39.Samba Performance Tuning

    Paul Cochrane

    Dundee Limb Fitting Centre

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files

    Comparisons

    +

    Chapter39.Samba Performance Tuning

    Paul Cochrane

    Dundee Limb Fitting Centre

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files

    Comparisons

    The Samba server uses TCP to talk to the client. Thus if you are trying to see if it performs well you should really compare it to programs that use the same protocol. The most readily available @@ -16463,7 +16466,7 @@ suspect the biggest factor is not Samba vs some other system but the hardware and drivers used on the various systems. Given similar hardware Samba should certainly be competitive in speed with other systems. -

    Socket options

    +

    Socket options

    There are a number of socket options that can greatly affect the performance of a TCP based server like Samba.

    @@ -16482,7 +16485,7 @@ biggest single difference for most networks. Many people report that adding socket options = TCP_NODELAY doubles the read performance of a Samba drive. The best explanation I have seen for this is that the Microsoft TCP/IP stack is slow in sending tcp ACKs. -

    Read size

    +

    Read size

    The option read size affects the overlap of disk reads/writes with network reads/writes. If the amount of data being transferred in several of the SMB commands (currently SMBwrite, SMBwriteX and @@ -16499,7 +16502,7 @@ The default value is 16384, but very little experimentation has been done yet to determine the optimal value, and it is likely that the best value will vary greatly between systems anyway. A value over 65536 is pointless and will cause you to allocate memory unnecessarily. -

    Max xmit

    +

    Max xmit

    At startup the client and server negotiate a maximum transmit size, which limits the size of nearly all SMB commands. You can set the maximum size that Samba will negotiate using the max xmit = option @@ -16513,12 +16516,12 @@ clients may perform better with a smaller transmit unit. Trying values of less than 2048 is likely to cause severe problems.

    In most cases the default is the best option. -

    Log level

    +

    Log level

    If you set the log level (also known as debug level) higher than 2 then you may suffer a large drop in performance. This is because the server flushes the log file after each operation, which can be very expensive. -

    Read raw

    +

    Read raw

    The read raw operation is designed to be an optimised, low-latency file read operation. A server may choose to not support it, however. and Samba makes support for read raw optional, with it @@ -16531,7 +16534,7 @@ read operations. So you might like to try read raw = no and see what happens on your network. It might lower, raise or not affect your performance. Only testing can really tell. -

    Write raw

    +

    Write raw

    The write raw operation is designed to be an optimised, low-latency file write operation. A server may choose to not support it, however. and Samba makes support for write raw optional, with it @@ -16539,15 +16542,15 @@ being enabled by default.

    Some machines may find write raw slower than normal write, in which case you may wish to change this option. -

    Slow Logins

    +

    Slow Logins

    Slow logins are almost always due to the password checking time. Using the lowest practical password level will improve things. -

    Client tuning

    +

    Client tuning

    Often a speed problem can be traced to the client. The client (for example Windows for Workgroups) can often be tuned for better TCP performance. Check the sections on the various clients in Samba and Other Clients. -

    Samba performance problem due changing kernel

    +

    Samba performance problem due changing kernel

    Hi everyone. I am running Gentoo on my server and samba 2.2.8a. Recently I changed kernel version from linux-2.4.19-gentoo-r10 to linux-2.4.20-wolk4.0s. And now I have performance issue with samba. Ok @@ -16562,7 +16565,7 @@ Grab mii-tool and check the duplex settings on the NIC. My guess is that it is a link layer issue, not an application layer problem. Also run ifconfig and verify that the framing error, collisions, etc... look normal for ethernet. -

    Corrupt tdb Files

    +

    Corrupt tdb Files

    Well today it happened, Our first major problem using samba. Our samba PDC server has been hosting 3 TB of data to our 500+ users [Windows NT/XP] for the last 3 years using samba, no problem. @@ -16580,10 +16583,10 @@ Q2) What I also would like to mention is that the service latency seems a lot lower then before the locks cleanup, any ideas on keeping it top notch?

    A2) Yes! Same answer as for Q1! -

    Chapter40.DNS and DHCP Configuration Guide

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    +

    Chapter40.DNS and DHCP Configuration Guide

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    This chapter did not make it into this release. It is planned for the published release of this document. -

    Chapter41.Further Resources

    Jelmer R. Vernooij

    The Samba Team

    David Lechnyr

    Unofficial HOWTO

    May 1, 2003

    Table of Contents

    Websites
    Related updates from Microsoft
    Books

    Websites

    • +

    Chapter41.Further Resources

    Jelmer R. Vernooij

    The Samba Team

    David Lechnyr

    Unofficial HOWTO

    May 1, 2003

    Table of Contents

    Websites
    Related updates from Microsoft
    Books

    Websites

    Related updates from Microsoft

    • +

    Related updates from Microsoft

    Books

    Index

    +

    Books

    Index

    diff --git a/docs/htmldocs/SambaHA.html b/docs/htmldocs/SambaHA.html index ba82f6ad0f9..d8614deeb7b 100644 --- a/docs/htmldocs/SambaHA.html +++ b/docs/htmldocs/SambaHA.html @@ -1,4 +1,5 @@ -Chapter29.High Availability Options
    Chapter29.High Availability Options
    PrevPartIII.Advanced ConfigurationNext

    Chapter29.High Availability Options

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    + +Chapter29.High Availability Options

    Chapter29.High Availability Options
    PrevPartIII.Advanced ConfigurationNext

    Chapter29.High Availability Options

    John H. Terpstra

    Samba Team

    Table of Contents

    Note

    Note

    This chapter did not make it into this release. It is planned for the published release of this document.

    PrevUpNext
    Chapter28.Samba Backup TechniquesHomePartIV.Migration and Updating
    diff --git a/docs/htmldocs/ServerType.html b/docs/htmldocs/ServerType.html index 01f03662ae3..e624c5ee27b 100644 --- a/docs/htmldocs/ServerType.html +++ b/docs/htmldocs/ServerType.html @@ -1,4 +1,5 @@ -Chapter4.Server Types and Security Modes
    Chapter4.Server Types and Security Modes
    PrevPartII.Server Configuration BasicsNext

    Chapter4.Server Types and Security Modes

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server

    + +Chapter4.Server Types and Security Modes

    Chapter4.Server Types and Security Modes
    PrevPartII.Server Configuration BasicsNext

    Chapter4.Server Types and Security Modes

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server

    This chapter provides information regarding the types of server that Samba may be configured to be. A Microsoft network administrator who wishes to migrate to or to use Samba will want to know what, within a Samba context, terms familiar to MS Windows @@ -11,7 +12,7 @@ and how these relate to MS Windows servers and clients. Firstly we should recognise the question so often asked, "Why would I want to use Samba?" So, in those chapters where the answer may be important you will see a section that highlights features and benefits. These may be for or against Samba. -

    Features and Benefits

    +

    Features and Benefits

    Two men were walking down a dusty road, when one suddenly kicked up a small red stone. It hurt his toe and lodged in his sandal. He took the stone out and cursed it with a passion and fury fitting his anguish. The other looked at the stone and said, that is a garnet - I @@ -47,13 +48,13 @@ So now, what are the benefits of features mentioned in this chapter? greater flexibility than MS Windows NT4 and in many cases a significantly higher utility than Active Directory domains with MS Windows 200x. -

    Server Types

    Administrators of Microsoft networks often refer to three +

    Server Types

    Administrators of Microsoft networks often refer to three different type of servers:

    • Domain Controller

      Primary Domain Controller
      Backup Domain Controller
      ADS Domain Controller

    • Domain Member Server

      Active Directory Member Server
      NT4 Style Domain Member Server

    • Stand Alone Server

    The chapters covering Domain Control, Backup Domain Control and Domain Membership provide pertinent information regarding Samba-3 configuration for each of these server roles. The reader is strongly encouraged to become intimately familiar with the information presented. -

    Samba Security Modes

    +

    Samba Security Modes

    In this section the function and purpose of Samba's security modes are described. An accurate understanding of how Samba implements each security mode as well as how to configure MS Windows clients for each mode will significantly @@ -77,7 +78,7 @@ the way the client then tries to authenticate itself. It does not directly affec but it fits in with the client/server approach of SMB. In SMB everything is initiated and controlled by the client, and the server can only tell the client what is available and whether an action is allowed. -

    User Level Security

    +

    User Level Security

    We will describe user level security first, as it's simpler. In user level security, the client will send a session setup command directly after the protocol negotiation. @@ -95,13 +96,13 @@ It is also possible for a client to send multiple ses requests. When the server responds, it gives the client a uid to use as an authentication tag for that username/password. The client can maintain multiple authentication contexts in this way (WinDD is an example of an application that does this). -

    Example Configuration

    +

    Example Configuration

    The smb.conf parameter that sets User Level Security is: 

     	security = user

    This is the default setting since samba-2.2.x. -

    Share Level Security

    +

    Share Level Security

    Ok, now for share level security. In share level security, the client authenticates itself separately for each share. It will send a password along with each tree connection (share mount). It does not explicitly send a @@ -124,18 +125,18 @@ of the share they try to connect to (useful for home directories) and any users listed in the user = smb.conf line. The password is then checked in turn against these possible usernames. If a match is found then the client is authenticated as that user. -

    Example Configuration

    +

    Example Configuration

    The smb.conf parameter that sets Share Level Security is: 

     	security = share

    Please note that there are reports that recent MS Windows clients do not like to work with share mode security servers. You are strongly discouraged from using share level security. -

    Domain Security Mode (User Level Security)

    +

    Domain Security Mode (User Level Security)

    When Samba is operating in security = domain mode, the Samba server has a domain security trust account (a machine account) and will cause all authentication requests to be passed through to the domain controllers. -

    Example Configuration

    +

    Example Configuration

    Samba as a Domain Member Server

    This method involves addition of the following parameters in the smb.conf file: @@ -147,24 +148,24 @@ In order for this method to work, the Samba server needs to join the MS Windows security domain. This is done as follows:

    1. On the MS Windows NT domain controller, using the Server Manager, add a machine account for the Samba server. -

    2. Next, on the Unix/Linux system execute:

      root# smbpasswd -j DOMAIN_NAME -r PDC_NAME (samba-2.x)

      root# net join -U administrator%password (samba-3)

    Note

    +

  • Next, on the Unix/Linux system execute:

    root# smbpasswd -j DOMAIN_NAME -r PDC_NAME (samba-2.x)

    root# net join -U administrator%password (samba-3)

    • Note

    As of Samba-2.2.4 the Samba 2.2.x series can auto-join a Windows NT4 style Domain just by executing: -

    +
     root# smbpasswd -j DOMAIN_NAME -r PDC_NAME -U Administrator%password
-
    
+
    As of Samba-3 the same can be done by executing: -

    +
     root# net join -U Administrator%password
-
    
+
    It is not necessary with Samba-3 to specify the DOMAIN_NAME or the PDC_NAME as it figures this out from the smb.conf file settings. -

    +

    Use of this mode of authentication does require there to be a standard Unix account -for each user in order to assign a uid once the account has been authenticated by +for each user in order to assign a UID once the account has been authenticated by the remote Windows DC. This account can be blocked to prevent logons by clients other than -MS Windows through things such as setting an invalid shell in the +MS Windows through means such as setting an invalid shell in the /etc/passwd entry.

    An alternative to assigning UIDs to Windows users on a Samba member server is @@ -173,7 +174,7 @@ in this HOWTO collection.

    For more information of being a domain member, see the Domain Member section of this Howto. -

    ADS Security Mode (User Level Security)

    +

    ADS Security Mode (User Level Security)

    Both Samba 2.2 and 3.0 can join an Active Directory domain. This is possible even if the domain is run in native mode. Active Directory in native mode perfectly allows NT4-style domain members, contrary to @@ -187,7 +188,7 @@ authentication protocols. All your machines are running Windows 2000 and above and all use full Kerberos. In this case Samba as a NT4-style domain would still require NT-compatible authentication data. Samba in AD-member mode can accept Kerberos. -

    Example Configuration

    +
    Example Configuration
     	realm = your.kerberos.REALM
 	security = ADS
 
    
@@ -197,7 +198,7 @@ AD-member mode can accept Kerberos.

    Please refer to the Domain Membership and Active Directory Membership sections for more information regarding this configuration option. -

    Server Security (User Level Security)

    +

    Server Security (User Level Security)

    Server security mode is a left over from the time when Samba was not capable of acting as a domain member server. It is highly recommended NOT to use this feature. Server security mode has many draw backs. The draw backs include: @@ -229,7 +230,7 @@ lookups because the choice of the target authentication server is arbitrary and be determined from a domain name. In essence, a Samba server that is in server security mode is operating in what used to be known as workgroup mode. -

    Example Configuration

    +

    Example Configuration

    Using MS Windows NT as an authentication server

    This method involves the additions of the following parameters in the smb.conf file: @@ -238,8 +239,8 @@ This method involves the additions of the following parameters in the

    -There are two ways of identifying whether or not a username and password pair was valid -or not. One uses the reply information provided as part of the authentication messaging +There are two ways of identifying whether or not a username and password pair was valid. +One uses the reply information provided as part of the authentication messaging process, the other uses just an error code.

    The down-side of this mode of configuration is the fact that for security reasons Samba @@ -250,7 +251,7 @@ certain number of failed authentication attempts this will result in user lockou

    Use of this mode of authentication does require there to be a standard Unix account for the user, though this account can be blocked to prevent logons by non-SMB/CIFS clients. -

    Seamless Windows Network Integration

    +

    Seamless Windows Network Integration

    MS Windows clients may use encrypted passwords as part of a challenge/response authentication model (a.k.a. NTLMv1 and NTLMv2) or alone, or clear text strings for simple password based authentication. It should be realized that with the SMB protocol, @@ -293,23 +294,23 @@ when using clear text authentication.

    By default Samba will lower case the username before attempting to lookup the user in the database of local system accounts. Because UNIX usernames conventionally -only contain lower case character, the username level parameter +only contain lower-case characters, the username level parameter is rarely needed.

    -However, passwords on UNIX systems often make use of mixed case characters. +However, passwords on UNIX systems often make use of mixed-case characters. This means that in order for a user on a Windows 9x client to connect to a Samba server using clear text authentication, the password level -must be set to the maximum number of upper case letter which could -appear is a password. Note that the server OS uses the traditional DES version +must be set to the maximum number of upper case letters which could +appear in a password. Note that the server OS uses the traditional DES version of crypt(), a password level of 8 will result in case insensitive passwords as seen from Windows users. This will also result in longer login times as Samba has to compute the permutations of the password string and try them one by one until a match is located (or all combinations fail).

    -The best option to adopt is to enable support for encrypted passwords where ever +The best option to adopt is to enable support for encrypted passwords wherever Samba is used. Most attempts to apply the registry change to re-enable plain text passwords will eventually lead to user complaints and unhappiness. -

    Common Errors

    +

    Common Errors

    We all make mistakes. It is Ok to make mistakes, so long as they are made in the right places and at the right time. A mistake that causes lost productivity is seldom tolerated. A mistake made in a developmental test lab is expected. @@ -319,19 +320,19 @@ on the Samba mailing lists. Many of these are avoidable by doing you homework be a Samba implementation. Some are the result of misunderstanding of the English language. The English language has many turns of phrase that are potentially vague and may be highly confusing to those for whom English is not their native tongue. -

    What makes Samba a SERVER?

    +

    What makes Samba a SERVER?

    To some the nature of the Samba security mode is very obvious, but entirely wrong all the same. It is assumed that security = server means that Samba will act as a server. Not so! See above - this setting means that Samba will try to use another SMB server as its source of user authentication alone. -

    What makes Samba a Domain Controller?

    +

    What makes Samba a Domain Controller?

    The smb.conf parameter security = domain does NOT really make Samba behave as a Domain Controller! This setting means we want Samba to be a domain member! -

    What makes Samba a Domain Member?

    +

    What makes Samba a Domain Member?

    Guess! So many others do. But whatever you do, do NOT think that security = user makes Samba act as a domain member. Read the manufacturers manual before the warranty expires! See the Domain Member section of this Howto for more information. -

    Constantly Losing Connections to Password Server

    +

    Constantly Losing Connections to Password Server

    Why does server_validate() simply give up rather than re-establishing its connection to the password server? Though I am not fluent in the SMB protocol, perhaps the cluster server process passes along to its client workstation the session key it receives from the password diff --git a/docs/htmldocs/StandAloneServer.html b/docs/htmldocs/StandAloneServer.html index a3bdf439afd..272df7a27b5 100644 --- a/docs/htmldocs/StandAloneServer.html +++ b/docs/htmldocs/StandAloneServer.html @@ -1,9 +1,10 @@ -Chapter8.Stand-Alone Servers

    Chapter8.Stand-Alone Servers
    PrevPartII.Server Configuration BasicsNext

    Chapter8.Stand-Alone Servers

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors

    + +Chapter8.Stand-Alone Servers

    Chapter8.Stand-Alone Servers
    PrevPartII.Server Configuration BasicsNext

    Chapter8.Stand-Alone Servers

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors

    Stand-Alone servers are independent of Domain Controllers on the network. They are NOT domain members and function more like workgroup servers. In many cases a stand-alone server is configured with a minimum of security control with the intent that all data served will be readily accessible to all users. -

    Features and Benefits

    +

    Features and Benefits

    Stand-Alone servers can be as secure or as insecure as needs dictate. They can have simple or complex configurations. Above all, despite the hoopla about Domain security they remain a very common installation. @@ -20,7 +21,7 @@ that are queued off a single central server. Everyone needs to be able to print to the printers, there is no need to affect any access controls and no files will be served from the print server. Again a share mode stand-alone server makes a great solution. -

    Background

    +

    Background

    The term stand-alone server means that the server will provide local authentication and access control for all resources that are available from it. In general this means that there will be a @@ -49,11 +50,11 @@ This means that the Samba server may use the local Unix/Linux system password da local smbpasswd file, or may use an LDAP back end, or even via PAM and Winbind another CIFS/SMB server for authentication. -

    Example Configuration

    +

    Example Configuration

    The following examples are designed to inspire simplicity. It is too easy to attempt a high level of creativity and to introduce too much complexity in server and network design. -

    Reference Documentation Server

    +

    Reference Documentation Server

    Configuration of a read-only data server that EVERYONE can access is very simple. Here is the smb.conf file that will do this. Assume that all the reference documents are stored in the directory /export, that the documents are owned by a user other than @@ -78,7 +79,7 @@ of the local workgroup so that the machine will appear in with systems users are with. The only password backend required is the "guest" backend so as to allow default unprivileged account names to be used. Given that there is a WINS server on this network we do use it. -

    Central Print Serving

    +

    Central Print Serving

    Configuration of a simple print server is very simple if you have all the right tools on your system.

    Assumptions:

    1. @@ -98,27 +99,27 @@ In this example our print server will spool all incoming print jobs to /var/spool/samba until the job is ready to be submitted by Samba to the CUPS print processor. Since all incoming connections will be as the anonymous (guest) user, two things will be required: -

      Enabling Anonymous Printing

      • +

        Enabling Anonymous Printing

        • The Unix/Linux system must have a guest account. The default for this is usually the account nobody. To find the correct name to use for your version of Samba do the following: - 

          +	
           $ testparm -s -v | grep "guest account"
-	
          
+
          Then make sure that this account exists in your system password database (/etc/passwd). -

        • +

        • The directory into which Samba will spool the file must have write access for the guest account. The following commands will ensure that this directory is available for use: - 

          +	
           root# mkdir /var/spool/samba
 root# chown nobody.nobody /var/spool/samba
 root# chmod a+rwt /var/spool/samba
-	
          
-

        -

        +
        +
      +
       	# Global parameters
 	[global]
 		workgroup = MYGROUP
@@ -136,8 +137,8 @@ the anonymous (guest) user, two things will be required:
 		printing = cups
 		use client driver = Yes
 		browseable = No
-

      -

    Common Errors

    + +

    Common Errors

    The greatest mistake so often made is to make a network configuration too complex. It pays to use the simplest solution that will meet the needs of the moment.

    PrevUpNext
    Chapter7.Domain MembershipHomeChapter9.MS Windows Network Configuration Guide
    diff --git a/docs/htmldocs/VFS.html b/docs/htmldocs/VFS.html index 6b520d792a3..0b22d2e1fb2 100644 --- a/docs/htmldocs/VFS.html +++ b/docs/htmldocs/VFS.html @@ -1,38 +1,39 @@ -Chapter20.Stackable VFS modules
    Chapter20.Stackable VFS modules
    PrevPartIII.Advanced ConfigurationNext

    Chapter20.Stackable VFS modules

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Tim Potter

    Simo Sorce

    original vfs_skel README

    Alexander Bokovoy

    original vfs_netatalk docs

    Stefan Metzmacher

    Update for multiple modules

    Table of Contents

    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors

    Features and Benefits

    + +Chapter20.Stackable VFS modules

    Chapter20.Stackable VFS modules
    PrevPartIII.Advanced ConfigurationNext

    Chapter20.Stackable VFS modules

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Tim Potter

    Simo Sorce

    original vfs_skel README

    Alexander Bokovoy

    original vfs_netatalk docs

    Stefan Metzmacher

    Update for multiple modules

    Table of Contents

    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors

    Features and Benefits

    Since Samba-3, there is support for stackable VFS(Virtual File System) modules. Samba passes each request to access the unix file system thru the loaded VFS modules. This chapter covers all the modules that come with the samba source and references to some external modules. -

    Discussion

    +

    Discussion

    If not supplied with your platform distribution binary Samba package you may have problems to compile these modules, as shared libraries are compiled and linked in different ways on different systems. They currently have been tested against GNU/Linux and IRIX. -

    +

    To use the VFS modules, create a share similar to the one below. The important parameter is the vfs objects parameter where you can list one or more VFS modules by name. For example, to log all access to files and put deleted files in a recycle bin: -

    +
     [audit]
         comment = Audited /data directory
         path = /data
         vfs objects = audit recycle
         writeable = yes
         browseable = yes
-
    
-
    
+
    +

    The modules are used in the order in which they are specified.

    Samba will attempt to load modules from the lib directory in the root directory of the samba installation (usually /usr/lib/samba/vfs or /usr/local/samba/lib/vfs ). -

    +

    Some modules can be used twice for the same share. This can be done using a configuration similar to the one below. -

    +
     [test]
         comment = VFS TEST
         path = /data
@@ -42,12 +43,12 @@ This can be done using a configuration similar to the one below.
 		example1: parameter = 1
 		example:  parameter = 5
 		test:	  parameter = 7
-
    
-

    Included modules

    audit

    + +

    Included modules

    audit

    A simple module to audit file access to the syslog facility. The following operations are logged: -

    share
    connect/disconnect
    directory opens/create/remove
    file open/close/rename/unlink/chmod

    -

    extd_audit

    +
    share
    connect/disconnect
    directory opens/create/remove
    file open/close/rename/unlink/chmod
    +

    extd_audit

    This module is identical with the audit module above except that it sends audit logs to both syslog as well as the smbd log file/s. The loglevel for this module is set in the smb.conf file. @@ -55,23 +56,23 @@ This can be done using a configuration similar to the one below. The logging information that will be written to the smbd log file is controlled by the log level parameter in smb.conf. The following information will be recorded: -

    Table20.1.Extended Auditing Log Information

    Log LevelLog Details - File and Directory Operations
    0Creation / Deletion
    1Create / Delete / Rename / Permission Changes
    2Create / Delete / Rename / Perm Change / Open / Close

    fake_perms

    +

    Table20.1.Extended Auditing Log Information

    Log LevelLog Details - File and Directory Operations
    0Creation / Deletion
    1Create / Delete / Rename / Permission Changes
    2Create / Delete / Rename / Perm Change / Open / Close

    fake_perms

    This module was created to allow Roaming Profile files and directories to be set (on the Samba server under Unix) as read only. This module will if installed on the Profiles share will report to the client that the Profile files and directories are writable. This satisfies the client even though the files will never be overwritten as the client logs out or shuts down. -

    recycle

    +

    recycle

    A recycle-bin like module. When used any unlink call will be intercepted and files moved to the recycle directory instead of being deleted. -

    Supported options: -

    recycle:repository

    FIXME

    recycle:keeptree

    FIXME

    recycle:versions

    FIXME

    recycle:touch

    FIXME

    recycle:maxsize

    FIXME

    recycle:exclude

    FIXME

    recycle:exclude_dir

    FIXME

    recycle:noversions

    FIXME

    -

    netatalk

    +

    Supported options: +
    recycle:repository

    FIXME

    recycle:keeptree

    FIXME

    recycle:versions

    FIXME

    recycle:touch

    FIXME

    recycle:maxsize

    FIXME

    recycle:exclude

    FIXME

    recycle:exclude_dir

    FIXME

    recycle:noversions

    FIXME

    +

    netatalk

    A netatalk module, that will ease co-existence of samba and netatalk file sharing services. -

    Advantages compared to the old netatalk module: -

    it doesn't care about creating of .AppleDouble forks, just keeps them in sync
    if a share in smb.conf doesn't contain .AppleDouble item in hide or veto list, it will be added automatically

    -

    VFS modules available elsewhere

    +

    Advantages compared to the old netatalk module: +
    it doesn't care about creating of .AppleDouble forks, just keeps them in sync
    if a share in smb.conf doesn't contain .AppleDouble item in hide or veto list, it will be added automatically
    +

    VFS modules available elsewhere

    This section contains a listing of various other VFS modules that have been posted but don't currently reside in the Samba CVS tree for one reason or another (e.g. it is easy for the maintainer @@ -79,7 +80,7 @@ to have his or her own CVS tree).

    No statements about the stability or functionality of any module should be implied due to its presence here. -

    DatabaseFS

    +

    DatabaseFS

    URL: http://www.css.tayloru.edu/~elorimer/databasefs/index.php

    By Eric Lorimer.

    I have created a VFS module which implements a fairly complete read-only @@ -94,12 +95,12 @@ should be implied due to its presence here. Any feedback would be appreciated: comments, suggestions, patches, etc... If nothing else, hopefully it might prove useful for someone else who wishes to create a virtual filesystem. -

    vscan

    URL: http://www.openantivirus.org/

    +

    vscan

    URL: http://www.openantivirus.org/

    samba-vscan is a proof-of-concept module for Samba, which uses the VFS (virtual file system) features of Samba 2.2.x/3.0 alphaX. Of course, Samba has to be compiled with VFS support. samba-vscan supports various virus scanners and is maintained by Rainer Link. -

    Common Errors

    +

    Common Errors

    There must be some gotchas we should record here! Jelmer???

    PrevUpNext
    Chapter19.CUPS Printing Support in Samba 3.0HomeChapter21.Integrated Logon Support using Winbind
    diff --git a/docs/htmldocs/bugreport.html b/docs/htmldocs/bugreport.html index 9ae4797d31f..e8d7a8ccd3d 100644 --- a/docs/htmldocs/bugreport.html +++ b/docs/htmldocs/bugreport.html @@ -1,4 +1,5 @@ -Chapter35.Reporting Bugs
    Chapter35.Reporting Bugs
    PrevPartV.TroubleshootingNext

    Chapter35.Reporting Bugs

    Jelmer R. Vernooij

    The Samba Team

    Someone; Tridge or Karl Auer perhaps?

    27 June 1997

    Table of Contents

    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches

    Introduction

    Please report bugs using + +Chapter35.Reporting Bugs

    Chapter35.Reporting Bugs
    PrevPartV.TroubleshootingNext

    Chapter35.Reporting Bugs

    Jelmer R. Vernooij

    The Samba Team

    Someone; Tridge or Karl Auer perhaps?

    27 June 1997

    Table of Contents

    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches

    Introduction

    Please report bugs using bugzilla.

    Please take the time to read this file before you submit a bug report. Also, please see if it has changed between releases, as we @@ -20,7 +21,7 @@ that list that may be able to help you. You may also like to look though the recent mailing list archives, which are conveniently accessible on the Samba web pages at http://samba.org/samba/. -

    General info

    +

    General info

    Before submitting a bug report check your config for silly errors. Look in your log files for obvious messages that tell you that you've misconfigured something and run testparm to test your config @@ -32,7 +33,7 @@ This is very important. If you include part of a log file with your bug report then be sure to annotate it with exactly what you were doing on the client at the time, and exactly what the results were. -

    Debug levels

    +

    Debug levels

    If the bug has anything to do with Samba behaving incorrectly as a server (like refusing to open a file) then the log files will probably be very useful. Depending on the problem a log level of between 3 and @@ -67,7 +68,7 @@ debugging operations you may not need a setting higher than 3. Nearly all bugs can be tracked at a setting of 10, but be prepared for a VERY large volume of log data. -

    Internal errors

    +

    Internal errors

    If you get a INTERNAL ERROR message in your log files it means that Samba got an unexpected signal while running. It is probably a segmentation fault and almost certainly means a bug in Samba (unless @@ -100,7 +101,7 @@ disassemble the routine that called it) and try to work out exactly where the problem is by looking at the surrounding code. Even if you don't know assembly, including this info in the bug report can be useful. -

    Attaching to a running process

    +

    Attaching to a running process

    Unfortunately some unixes (in particular some recent linux kernels) refuse to dump a core file if the task has changed uid (which smbd does often). To debug with this sort of system you could try to attach @@ -110,7 +111,7 @@ to the running process using Then use c to continue and try to cause the core dump using the client. The debugger should catch the fault and tell you where it occurred. -

    Patches

    +

    Patches

    The best sort of bug report is one that includes a fix! If you send us patches please use diff -u format if your version of diff supports it, otherwise use diff -c4. Make sure diff --git a/docs/htmldocs/compiling.html b/docs/htmldocs/compiling.html index d8b85602d94..836fb50bb88 100644 --- a/docs/htmldocs/compiling.html +++ b/docs/htmldocs/compiling.html @@ -1,8 +1,9 @@ -Chapter36.How to compile SAMBA

    Chapter36.How to compile SAMBA
    PrevPartVI.AppendixesNext

    Chapter36.How to compile SAMBA

    Jelmer R. Vernooij

    The Samba Team

    Someone; Jerry perhaps?

    22 May 2001

    18 March 2003

    Table of Contents

    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors

    + +Chapter36.How to compile SAMBA

    Chapter36.How to compile SAMBA
    PrevPartVI.AppendixesNext

    Chapter36.How to compile SAMBA

    Jelmer R. Vernooij

    The Samba Team

    Someone; Jerry perhaps?

    22 May 2001

    18 March 2003

    Table of Contents

    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors

    You can obtain the samba source from the samba website. To obtain a development version, you can download samba from CVS or using rsync. -

    Access Samba source code via CVS

    Introduction

    +

    Access Samba source code via CVS

    Introduction

    Samba is developed in an open environment. Developers use CVS (Concurrent Versioning System) to "checkin" (also known as "commit") new source code. Samba's various CVS branches can @@ -11,12 +12,12 @@ detailed in this chapter.

    This chapter is a modified version of the instructions found at http://samba.org/samba/cvs.html -

    CVS Access to samba.org

    +

    CVS Access to samba.org

    The machine samba.org runs a publicly accessible CVS repository for access to the source code of several packages, including samba, rsync, distcc, ccache and jitterbug. There are two main ways of accessing the CVS server on this host. -

    Access via CVSweb

    +

    Access via CVSweb

    You can access the source code via your favourite WWW browser. This allows you to access the contents of individual files in the repository and also to look at the revision @@ -24,7 +25,7 @@ history and commit logs of individual files. You can also ask for a diff listing between any two versions on the repository.

    Use the URL : http://samba.org/cgi-bin/cvsweb -

    Access via cvs

    +

    Access via cvs

    You can also access the source code via a normal cvs client. This gives you much more control over what you can do with the repository and allows you to checkout whole source trees @@ -74,7 +75,7 @@ on this system just substitute the correct package name the following command from within the samba directory:

    cvs update -d -P -

    Accessing the samba sources via rsync and ftp

    +

    Accessing the samba sources via rsync and ftp

    pserver.samba.org also exports unpacked copies of most parts of the CVS tree at ftp://pserver.samba.org/pub/unpacked and also via anonymous rsync at rsync://pserver.samba.org/ftp/unpacked/. I recommend using rsync rather than ftp. @@ -83,7 +84,7 @@ on this system just substitute the correct package name The disadvantage of the unpacked trees is that they do not support automatic merging of local changes like CVS does. rsync access is most convenient for an initial install. -

    Verifying Samba's PGP signature

    +

    Verifying Samba's PGP signature

    In these days of insecurity, it's strongly recommended that you verify the PGP signature for any source file before installing it. Even if you're not downloading from a mirror site, verifying PGP signatures should be a @@ -110,7 +111,7 @@ then all is well. The warnings about trust relationships can be ignored. An example of what you would not want to see would be:

    gpg: BAD signature from "Samba Distribution Verification Key" -

    Building the Binaries

    To do this, first run the program ./configure +

    Building the Binaries

    To do this, first run the program ./configure in the source directory. This should automatically configure Samba for your operating system. If you have unusual needs then you may wish to run

    root# ./configure --help @@ -123,7 +124,7 @@ example of what you would not want to see would be: of Samba you might like to know that the old versions of the binaries will be renamed with a ".old" extension. You can go back to the previous version with

    root# make revert -

    if you find this version a disaster!

    Compiling samba with Active Directory support

    In order to compile samba with ADS support, you need to have installed +

    if you find this version a disaster!

    Compiling samba with Active Directory support

    In order to compile samba with ADS support, you need to have installed on your system:

    • the MIT kerberos development libraries (either install from the sources or use a package). The Heimdal libraries will not work.

    • the OpenLDAP development libraries.

    If your kerberos libraries are in a non-standard location then @@ -135,12 +136,12 @@ example of what you would not want to see would be: #define HAVE_LDAP 1

    If it doesn't then configure did not find your krb5 libraries or your ldap libraries. Look in config.log to figure - out why and fix it.

    Installing the required packages for Debian

    On Debian you need to install the following packages:

    -

    libkrb5-dev
    krb5-user

    -

    Installing the required packages for RedHat

    On RedHat this means you should have at least:

    -

    krb5-workstation (for kinit)
    krb5-libs (for linking with)
    krb5-devel (because you are compiling from source)

    -

    in addition to the standard development environment.

    Note that these are not standard on a RedHat install, and you may need - to get them off CD2.

    Starting the smbd and nmbd

    You must choose to start smbd and nmbd either + out why and fix it.

    Installing the required packages for Debian

    On Debian you need to install the following packages:

    +
    libkrb5-dev
    krb5-user
    +

    Installing the required packages for RedHat

    On RedHat this means you should have at least:

    +
    krb5-workstation (for kinit)
    krb5-libs (for linking with)
    krb5-devel (because you are compiling from source)
    +

    in addition to the standard development environment.

    Note that these are not standard on a RedHat install, and you may need + to get them off CD2.

    Starting the smbd and nmbd

    You must choose to start smbd and nmbd either as daemons or from inetd. Don't try to do both! Either you can put them in inetd.conf and have them started on demand @@ -152,7 +153,7 @@ example of what you would not want to see would be: Samba. In many cases you must be root.

    The main advantage of starting smbd and nmbd using the recommended daemon method is that they will respond slightly more quickly to an initial connection - request.

    Starting from inetd.conf

    Note

    The following will be different if + request.

    Starting from inetd.conf

    Note

    The following will be different if you use NIS, NIS+ or LDAP to distribute services maps.

    Look at your /etc/services. What is defined at port 139/tcp. If nothing is defined then add a line like this:

    netbios-ssn     139/tcp

    similarly for 137/udp you should have an entry like:

    netbios-ns	137/udp

    Next edit your /etc/inetd.conf @@ -178,7 +179,7 @@ example of what you would not want to see would be: arguments, or you should use a script, and start the script from inetd.

    Restart inetd, perhaps just send it a HUP. If you have installed an earlier version of nmbd then - you may need to kill nmbd as well.

    Alternative: starting it as a daemon

    To start the server as a daemon you should create + you may need to kill nmbd as well.

    Alternative: starting it as a daemon

    To start the server as a daemon you should create a script something like this one, perhaps calling it startsmb.

     		#!/bin/sh
@@ -190,7 +191,7 @@ example of what you would not want to see would be:
 		
    To kill it send a kill signal to the processes 
 			nmbd and smbd.
    Note
    If you use the SVR4 style init system then 
 		you may like to look at the examples/svr4-startup
-		script to make Samba fit into that system.

    Common Errors

    “ + script to make Samba fit into that system.

    Common Errors

    “ I'm using gcc 3 and I've compiled Samba-3 from the CVS and the binaries are very large files (40 Mb and 20 Mb). I've the same result with --enable-shared ? diff --git a/docs/htmldocs/diagnosis.html b/docs/htmldocs/diagnosis.html index ff3099ac724..473f5e6985b 100644 --- a/docs/htmldocs/diagnosis.html +++ b/docs/htmldocs/diagnosis.html @@ -1,4 +1,5 @@ -Chapter33.The Samba checklist

    Chapter33.The Samba checklist
    PrevPartV.TroubleshootingNext

    Chapter33.The Samba checklist

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Wed Jan 15

    Table of Contents

    Introduction
    Assumptions
    The tests
    Still having troubles?

    Introduction

    + +Chapter33.The Samba checklist

    Chapter33.The Samba checklist
    PrevPartV.TroubleshootingNext

    Chapter33.The Samba checklist

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Wed Jan 15

    Table of Contents

    Introduction
    Assumptions
    The tests
    Still having troubles?

    Introduction

    This file contains a list of tests you can perform to validate your Samba server. It also tells you what the likely cause of the problem is if it fails any one of these steps. If it passes all these tests @@ -13,7 +14,7 @@ to solve a problem. If you send one of the samba mailing lists an email saying "it doesn't work" and you have not followed this test procedure then you should not be surprised if your email is ignored. -

    Assumptions

    +

    Assumptions

    In all of the tests it is assumed you have a Samba server called BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP.

    @@ -30,8 +31,8 @@ following to smb.conf: path = /tmp read only = yes -

    -

    Note

    + +

    Note

    These tests assume version 3.0 or later of the samba suite. Some commands shown did not exist in earlier versions.

    @@ -54,7 +55,7 @@ depending on how or if you specified logging in your smb.co

    If you make changes to your smb.conf file while going through these test, don't forget to restart smbd and nmbd. -

    The tests

    Procedure33.1.Diagnosing your samba server

    1. +

    The tests

    Procedure33.1.Diagnosing your samba server

    1. In the directory in which you store your smb.conf file, run the command testparm smb.conf. If it reports any errors then your smb.conf configuration file is faulty. @@ -297,6 +298,6 @@ capability and is in user level security mode. In this case either set password server = Windows_NT_Machine in your smb.conf file, or make sure encrypted passwords is set to "yes". -

    Still having troubles?

    Read the chapter on +

    Still having troubles?

    Read the chapter on Analysing and Solving Problems.

    PrevUpNext
    PartV.TroubleshootingHomeChapter34.Analysing and solving samba problems
    diff --git a/docs/htmldocs/domain-member.html b/docs/htmldocs/domain-member.html index 59040dfebc8..19f8fd8677d 100644 --- a/docs/htmldocs/domain-member.html +++ b/docs/htmldocs/domain-member.html @@ -1,4 +1,5 @@ -Chapter7.Domain Membership
    Chapter7.Domain Membership
    PrevPartII.Server Configuration BasicsNext

    Chapter7.Domain Membership

    John H. Terpstra

    Samba Team

    Jeremy Allison

    Samba Team

    Gerald (Jerry) Carter

    Samba Team

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Table of Contents

    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails

    + +Chapter7.Domain Membership

    Chapter7.Domain Membership
    PrevPartII.Server Configuration BasicsNext

    Chapter7.Domain Membership

    John H. Terpstra

    Samba Team

    Jeremy Allison

    Samba Team

    Gerald (Jerry) Carter

    Samba Team

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Table of Contents

    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails

    Domain Membership is a subject of vital concern, Samba must be able to participate as a member server in a Microsoft Domain security context, and Samba must be capable of providing Domain machine member trust accounts, @@ -11,7 +12,7 @@ within the current MS Windows networking world and particularly in the Unix/Linux networking and administration world, a considerable level of mis-information, incorrect understanding, and a lack of knowledge. Hopefully this chapter will fill the voids. -

    Features and Benefits

    +

    Features and Benefits

    MS Windows workstations and servers that want to participate in domain security need to be made Domain members. Participating in Domain security is often called @@ -48,7 +49,7 @@ Domain membership has many advantages: client or server, other than the central Domain database (either NT4/Samba SAM style Domain, NT4 Domain that is back ended with an LDAP directory, or via an Active Directory infrastructure) -

    MS Windows Workstation/Server Machine Trust Accounts

    +

    MS Windows Workstation/Server Machine Trust Accounts

    A machine trust account is an account that is used to authenticate a client machine (rather than a user) to the Domain Controller server. In Windows terminology, @@ -67,11 +68,11 @@ shared secret with the domain controller. A Windows NT4 PDC stores each machine trust account in the Windows Registry. The introduction of MS Windows 2000 saw the introduction of Active Directory, the new repository for machine trust accounts. -

    +

    A Samba PDC, however, stores each machine trust account in two parts, as follows: -

    • +

      • A Domain Security Account (stored in the passdb backend that has been configured in the smb.conf file. The precise nature of the account information that is @@ -91,8 +92,8 @@ as follows: /etc/passwd. Work is in progress to allow a simplified mode of operation that does not require Unix user accounts, but this may not be a feature of the early releases of Samba-3. -

      -

      +

    +

    There are three ways to create machine trust accounts:

    • Manual creation from the Unix/Linux command line. Here, both the Samba and @@ -107,7 +108,7 @@ There are three ways to create machine trust accounts: created by Samba at the time the client is joined to the domain. (For security, this is the recommended method.) The corresponding Unix account may be created automatically or manually. -

    Manual Creation of Machine Trust Accounts

    +

    Manual Creation of Machine Trust Accounts

    The first step in manually creating a machine trust account is to manually create the corresponding Unix account in /etc/passwd. This can be done using vipw or another 'add user' command @@ -139,11 +140,11 @@ Now that the corresponding Unix account has been created, the next step is to cr the Samba account for the client containing the well-known initial machine trust account password. This can be done using the smbpasswd(8) command as shown here: -

    -

    +
    
+
     root# smbpasswd -a -m machine_name
-
    
-
    
+
    +

    where machine_name is the machine's NetBIOS name. The RID of the new machine account is generated from the UID of the corresponding Unix account. @@ -156,7 +157,7 @@ the corresponding Unix account. your domain using a machine with the same NetBIOS name. A PDC inherently trusts members of the domain and will serve out a large degree of user information to such clients. You have been warned! -

    Using NT4 Server Manager to Add Machine Accounts to the Domain

    +

    Using NT4 Server Manager to Add Machine Accounts to the Domain

    If the machine from which you are trying to manage the domain is an MS Windows NT4 workstation then the tool of choice is the package called SRVTOOLS.EXE. @@ -187,7 +188,7 @@ Launch the srvmgr.exe (Server Manager for Domains) and fo Add NT Workstation of Server, then enter the machine name in the field provided, then click the Add button. -

    "On-the-Fly" Creation of Machine Trust Accounts

    +

    "On-the-Fly" Creation of Machine Trust Accounts

    The second (and recommended) way of creating machine trust accounts is simply to allow the Samba server to create them as needed when the client is joined to the domain. @@ -202,10 +203,10 @@ Below is an example for a RedHat Linux system. [global] # <...remainder of parameters...> add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u -

    Making an MS Windows Workstation or Server a Domain Member

    +

    Making an MS Windows Workstation or Server a Domain Member

    The procedure for making an MS Windows workstation of server a member of the domain varies with the version of Windows: -

    Windows 200x XP Professional

    +

    Windows 200x XP Professional

    When the user elects to make the client a domain member, Windows 200x prompts for an account and password that has privileges to create machine accounts in the domain. A Samba administrative account (i.e., a Samba account that has root privileges on the @@ -225,7 +226,7 @@ with the version of Windows: encryption key for setting the password of the machine trust account. The machine trust account will be created on-the-fly, or updated if it already exists. -

    Windows NT4

    +

    Windows NT4

    If the machine trust account was created manually, on the Identification Changes menu enter the domain name, but do not check the box Create a Computer Account in the Domain. @@ -238,7 +239,7 @@ with the version of Windows: Domain. In this case, joining the domain proceeds as above for Windows 2000 (i.e., you must supply a Samba administrative account when prompted). -

    Samba

    Joining a Samba client to a domain is documented in +

    Samba

    Joining a Samba client to a domain is documented in the Domain Member Server section of this chapter chapter.

    Domain Member Server

    This mode of server operation involves the Samba machine being made a member @@ -260,28 +261,28 @@ for more information regarding how to create a domain machine account for a domain member server as well as for information regarding how to enable the Samba domain member machine to join the domain and to be fully trusted by it. -

    Joining an NT4 type Domain with Samba-3

    -

    Table7.1.Assumptions

    NetBIOS name:SERV1
    Win2K/NT domain name:DOM
    Domain's PDC NetBIOS name:DOMPDC
    Domain's BDC NetBIOS names:DOMBDC1 and DOMBDC2

    -

    +

    Joining an NT4 type Domain with Samba-3

    +

    Table7.1.Assumptions

    NetBIOS name:SERV1
    Win2K/NT domain name:DOM
    Domain's PDC NetBIOS name:DOMPDC
    Domain's BDC NetBIOS names:DOMBDC1 and DOMBDC2
    +

    First, you must edit your smb.conf file to tell Samba it should now use domain security.

    Change (or add) your security line in the [global] section of your smb.conf to read: -

    -

    +
    
+
     security = domain
-
    
-
    
+
    +

    Next change the workgroup line in the [global] section to read: -

    -

    +
    
+
     workgroup = DOM
-
    
-
    
+
    +

    as this is the name of the domain we are joining.

    You must also have the parameter @@ -291,11 +292,11 @@ You must also have the parameter password server line in the [global] section to read: -

    -

    +
    
+
     password server = DOMPDC DOMBDC1 DOMBDC2
-
    
-
    
+
    +

    These are the primary and backup domain controllers Samba will attempt to contact in order to authenticate users. Samba will try to contact each of these servers in order, so you may want to @@ -305,21 +306,21 @@ among domain controllers. Alternatively, if you want smbd to automatically determine the list of Domain controllers to use for authentication, you may set this line to be: -

    -

    +
    
+
     password server = *
-
    
-
    
+
    +

    This method allows Samba to use exactly the same mechanism that NT does. This method either broadcasts or uses a WINS database in order to find domain controllers to authenticate against.

    In order to actually join the domain, you must run this command: -

    -

    +
    
+
     root# net join -S DOMPDC -UAdministrator%password
-
    
-
    
+
    +

    If the -S DOMPDC argument is not given then the domain name will be obtained from smb.conf.

    @@ -354,7 +355,7 @@ as a shadow password file.

    Finally, restart your Samba daemons and get ready for clients to begin using domain security! -

    Why is this better than security = server?

    +

    Why is this better than security = server?

    Currently, domain security in Samba doesn't free you from having to create local Unix users to represent the users attaching to your server. This means that if domain user DOM\fred @@ -398,27 +399,30 @@ the NIS/NT Samba.

    Samba ADS Domain Membership

    This is a rough guide to setting up Samba 3.0 with Kerberos authentication against a Windows2000 KDC. A familiarity with Kerberos is assumed. -

    Setup your smb.conf

    +

    Setup your smb.conf

    You must use at least the following 3 options in smb.conf: 

     	realm = your.kerberos.REALM
 	security = ADS
 	encrypt passwords = yes
-

    + In case samba can't figure out your ads server using your realm name, use the ads server option in smb.conf: -

    +
     	ads server = your.kerberos.server
-
    
-
    Note
    
+
    +

    Note

    You do not need a smbpasswd file, and older clients will be authenticated as if security = domain, although it won't do any harm and allows you to have local users not in the domain. It is expected that the above required options will change soon when active directory integration will get better. -

    Setup your /etc/krb5.conf

    +

    Setup your /etc/krb5.conf

    The minimal configuration for krb5.conf is: 

    +        [libdefaults]
+            default_realm = YOUR.KERBEROS.REALM
+
 	[realms]
 	    YOUR.KERBEROS.REALM = {
 		kdc = your.kerberos.server
@@ -451,20 +455,20 @@ straight to Creating a computer account 
 and testing your servers
 is only needed if you want Kerberos support for smbd and winbindd.
-

    Create the computer account

    +

    Create the computer account

    As a user that has write permission on the Samba private directory (usually root) run: -

    +
     	root# net join -U Administrator%password
-
    
-
    Possible errors
    
-
    ADS support not compiled in
    Samba must be reconfigured (remove config.cache) and recompiled
+
    +

    Possible errors

    +
    ADS support not compiled in

    Samba must be reconfigured (remove config.cache) and recompiled (make clean all install) after the Kerberos libs and headers are installed.

    net join prompts for user name

    You need to login to the domain using kinit USERNAME@REALM. USERNAME must be a user who has rights to add a machine - to the domain.

    -

    Test your server setup

    + to the domain.

    +

    Test your server setup

    If the join was successful, you will see a new computer account with the NetBIOS name of your Samba server in Active Directory (in the "Computers" folder under Users and Computers. @@ -477,13 +481,13 @@ server? Does it have an encoding type of DES-CBC-MD5 ? On your Samba server try to login to a Win2000 server or your Samba server using smbclient and Kerberos. Use smbclient as usual, but specify the -k option to choose Kerberos authentication. -

    Notes

    +

    Notes

    You must change administrator password at least once after DC install, to create the right encoding types

    W2k doesn't seem to create the _kerberos._udp and _ldap._tcp in their defaults DNS setup. Maybe fixed in service packs? -

    Common Errors

    +

    Common Errors

    In the process of adding / deleting / re-adding domain member machine accounts there are many traps for the unwary player and there are many “little” things that can go wrong. It is particularly interesting how often subscribers on the samba mailing list have concluded @@ -491,7 +495,7 @@ after repeated failed attempts to add a machine account that it is necessary to MS Windows on t he machine. In truth, it is seldom necessary to reinstall because of this type of problem. The real solution is often very simple, and with understanding of how MS Windows networking functions. easily overcome. -

    Can Not Add Machine Back to Domain

    +

    Can Not Add Machine Back to Domain

    Problem: A Windows workstation was reinstalled. The original domain machine account was deleted and added immediately. The workstation will not join the domain if I use the same machine name. Attempts to add the machine fail with a message that the machine already @@ -500,7 +504,7 @@ exists on the network - I know it doesn't. Why is this failing? The original name is still in the NetBIOS name cache and must expire after machine account deletion BEFORE adding that same name as a domain member again. The best advice is to delete the old account and then to add the machine with a new name. -

    Adding Machine to Domain Fails

    +

    Adding Machine to Domain Fails

    Adding a Windows 200x or XP Professional machine to the Samba PDC Domain fails with a message that, The machine could not be added at this time, there is a network problem. Please try again later. Why? diff --git a/docs/htmldocs/groupmapping.html b/docs/htmldocs/groupmapping.html index 39fb34ce628..aebddeeb085 100644 --- a/docs/htmldocs/groupmapping.html +++ b/docs/htmldocs/groupmapping.html @@ -1,4 +1,5 @@ -Chapter12.Mapping MS Windows and Unix Groups

    Chapter12.Mapping MS Windows and Unix Groups
    PrevPartIII.Advanced ConfigurationNext

    Chapter12.Mapping MS Windows and Unix Groups

    Jean Franois Micouleau

    Gerald (Jerry) Carter

    Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails

    + +Chapter12.Mapping MS Windows and Unix Groups

    Chapter12.Mapping MS Windows and Unix Groups
    PrevPartIII.Advanced ConfigurationNext

    Chapter12.Mapping MS Windows and Unix Groups

    Jean Franois Micouleau

    Gerald (Jerry) Carter

    Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails

    Starting with Samba-3, new group mapping functionality is available to create associations between Windows group SIDs and UNIX groups. The groupmap subcommand included with the net tool can be used to manage these associations. @@ -8,7 +9,7 @@ be specified in smb.conf. This parameter was used to give the listed users membership in the Domain Admins Windows group which gave local admin rights on their workstations (in default configurations). -

    Features and Benefits

    +

    Features and Benefits

    Samba allows the administrator to create MS Windows NT4 / 200x group accounts and to arbitrarily associate them with Unix/Linux group accounts.

    @@ -31,7 +32,7 @@ Another work-around is to manually create a Unix/Linux group, then manually create the MS Windows NT4 / 200x group on the Samba server and then use the net groupmap tool to connect the two to each other. -

    Discussion

    +

    Discussion

    When installing MS Windows NT4 / 200x on a computer, the installation program creates default users and groups, notably the Administrators group, and gives that group privileges necessary privileges to perform essential system tasks. @@ -50,19 +51,19 @@ The following steps describe how to make Samba PDC users members of the 'Domain Admins' group?

    1. create a unix group (usually in /etc/group), let's call it domadm -

    2. add to this group the users that must be Administrators. For example +

    3. add to this group the users that must be Administrators. For example if you want joe, john and mary, your entry in /etc/group will look like: 

       		domadm:x:502:joe,john,mary
-

      -

    4. + +

    5. Map this domadm group to the "Domain Admins" group by running the command: -

      - 

      +		
      
+		
       		root# net groupmap add ntgroup="Domain Admins" unixgroup=domadm
-		
      
-		
      
+
      +

      The quotes around "Domain Admins" are necessary due to the space in the group name. Also make sure to leave no whitespace surrounding the equal character (=).

    @@ -72,36 +73,36 @@ making any UNIX group a Windows domain group. For example, if you wanted to include a UNIX group (e.g. acct) in a ACL on a local file or printer on a domain member machine, you would flag that group as a domain group by running the following on the Samba PDC: -

    - 

    +	
    
+	
     	root# net groupmap add rid=1000 ntgroup="Accounting" unixgroup=acct
-	
    
-	
    
+
    +

    Be aware that the RID parameter is a unsigned 32 bit integer that should normally start at 1000. However, this rid must not overlap with any RID assigned to a user. Verifying this is done differently depending on on the passdb backend you are using. Future versions of the tools may perform the verification automatically, but for now the burden is on you. -

    Example Configuration

    +

    Example Configuration

    You can list the various groups in the mapping database by executing net groupmap list. Here is an example: -

    - 

    +		
    
+		
     		root#  net groupmap list
 		System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -> sysadmin
 		Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -> domadmin
 		Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -> domuser
 		Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -> domguest
-		
    
-		
    
+
    +

    For complete details on net groupmap, refer to the net(8) man page. -

    Configuration Scripts

    +

    Configuration Scripts

    Everyone needs tools. Some of us like to create our own, others prefer to use canned tools (ie: prepared by someone else for general use). -

    Sample smb.conf add group script

    +

    Sample smb.conf add group script

    A script to great complying group names for use by the Samba group interfaces: -

    -

    Example12.1.smbgrpadd.sh

    +		
    
+
    Example12.1.smbgrpadd.sh
     
 #!/bin/bash
 
@@ -117,17 +118,17 @@ cat /etc/group.bak | sed s/smbtmpgrp00/$1/g > /etc/group
 # Now return the GID as would normally happen.
 echo $thegid
 exit 0
-
    
-
    
+
    + The smb.conf entry for the above script would look like: - 

    +		
     		add group script = /path_to_tool/smbgrpadd.sh %g
-		
    
-

    Script to configure Group Mapping

    + +

    Script to configure Group Mapping

    In our example we have created a Unix/Linux group called ntadmin. Our script will create the additional groups Engineers, Marketoids, Gnomes: -

    -

    +	
    
+
     #!/bin/bash
 
 net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmin
@@ -150,16 +151,16 @@ net groupmap modify ntgroup="Power Users" unixgroup=sys
 #net groupmap add ntgroup="Engineers"  unixgroup=Engineers    type=d
 #net groupmap add ntgroup="Marketoids" unixgroup=Marketoids   type=d
 #net groupmap add ntgroup="Gnomes"     unixgroup=Gnomes       type=d
-
    
-
    
+
    +

    Of course it is expected that the administrator will modify this to suit local needs. For information regarding the use of the net groupmap tool please refer to the man page. -

    Common Errors

    +

    Common Errors

    At this time there are many little surprises for the unwary administrator. In a real sense it is imperative that every step of automated control scripts must be carefully tested manually before putting them into active service. -

    Adding Groups Fails

    +

    Adding Groups Fails

    This is a common problem when the groupadd is called directly by the Samba interface script for the add group script in the smb.conf file. @@ -173,6 +174,6 @@ manually before putting them into active service. third option is to manually create a Unix/Linux group account that can substitute for the MS Windows group name, then use the procedure listed above to map that group to the MS Windows group. -

    Adding MS Windows Groups to MS Windows Groups Fails

    +

    Adding MS Windows Groups to MS Windows Groups Fails

    Samba-3 does NOT support nested groups from the MS Windows control environment.

    PrevUpNext
    Chapter11.Account Information DatabasesHomeChapter13.File, Directory and Share Access Controls
    diff --git a/docs/htmldocs/index.html b/docs/htmldocs/index.html index f7bc47b7c88..fb21bbe6390 100755 --- a/docs/htmldocs/index.html +++ b/docs/htmldocs/index.html @@ -1,3 +1,4 @@ + SAMBA Project Documentation
    SAMBA Project Documentation
    Next

    SAMBA Project Documentation

    Edited by

    Jelmer R. Vernooij

    John H. Terpstra

    Gerald (Jerry) Carter

    +">

    SAMBA Project Documentation
    Next

    SAMBA Project Documentation

    Edited by

    Jelmer R. Vernooij

    John H. Terpstra

    Gerald (Jerry) Carter

    This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt -

    Attributions. -

    Introduction to Samba
    How to Install and Test SAMBA
    Fast Start for the Impatient
    Server Types and Security Modes
    Domain Control
    Backup Domain Control
    Domain Membership
    Stand-Alone Servers
    MS Windows Network Configuration Guide
    Samba / MS Windows Network Browsing Guide
    Account Information Databases
    Mapping MS Windows and Unix Groups
    File, Directory and Share Access Controls
    File and Record Locking
    Securing Samba
    Interdomain Trust Relationships
    Hosting a Microsoft Distributed File System tree on Samba
    Classical Printing Support
    CUPS Printing Support in Samba 3.0
    Stackable VFS modules

    • Jelmer Vernooij <jelmer@samba.org>

    • John Terpstra <jht@samba.org>

    • Tim Potter

    • Simo Sorce (original vfs_skel README)

    • Alexander Bokovoy (original vfs_netatalk docs)

    • Stefan Metzmacher (Update for multiple modules)

    Integrated Logon Support using Winbind
    Advanced Network Management
    System and Account Policies
    Desktop Profile Management
    PAM based Distributed Authentication
    Integrating MS Windows networks with Samba
    Unicode/Charsets
    Samba Backup Techniques
    High Availability Options
    Upgrading from Samba-2.x to Samba-3.0.0
    Migration from NT4 PDC to Samba-3 PDC
    SWAT - The Samba Web Administration Tool
    The Samba checklist
    Analysing and solving samba problems
    Reporting Bugs
    How to compile SAMBA
    Portability
    Samba and other CIFS clients
    Samba Performance Tuning
    DNS and DHCP Configuration Guide
    Further Resources

    +

    Attributions. +
    Introduction to Samba
    How to Install and Test SAMBA
    Fast Start for the Impatient
    Server Types and Security Modes
    Domain Control
    Backup Domain Control
    Domain Membership
    Stand-Alone Servers
    MS Windows Network Configuration Guide
    Samba / MS Windows Network Browsing Guide
    Account Information Databases
    Mapping MS Windows and Unix Groups
    File, Directory and Share Access Controls
    File and Record Locking
    Securing Samba
    Interdomain Trust Relationships
    Hosting a Microsoft Distributed File System tree on Samba
    Classical Printing Support
    CUPS Printing Support in Samba 3.0
    Stackable VFS modules

    • Jelmer Vernooij <jelmer@samba.org>

    • John Terpstra <jht@samba.org>

    • Tim Potter

    • Simo Sorce (original vfs_skel README)

    • Alexander Bokovoy (original vfs_netatalk docs)

    • Stefan Metzmacher (Update for multiple modules)

    Integrated Logon Support using Winbind
    Advanced Network Management
    System and Account Policies
    Desktop Profile Management
    PAM based Distributed Authentication
    Integrating MS Windows networks with Samba
    Unicode/Charsets
    Samba Backup Techniques
    High Availability Options
    Upgrading from Samba-2.x to Samba-3.0.0
    Migration from NT4 PDC to Samba-3 PDC
    SWAT - The Samba Web Administration Tool
    The Samba checklist
    Analysing and solving samba problems
    Reporting Bugs
    How to compile SAMBA
    Portability
    Samba and other CIFS clients
    Samba Performance Tuning
    DNS and DHCP Configuration Guide
    Further Resources
    -

    Monday April 21, 2003

    Abstract

    +

    Monday April 21, 2003

    Abstract

    This book is a collection of HOWTOs added to Samba documentation over the years. Samba is always under development, and so is its' documentation. This release of the documentation represents a major revision or layout as well as contents. @@ -41,36 +42,36 @@ insignificant number of ideas for inclusion (if not content itself) has been obt from a number of Unofficial HOWTOs - to each such author a big "Thank-you" is also offered. Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and application knowledge that is most to be desired by many Samba users and administrators. -

    Table of Contents

    I. General Installation
    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your - server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. Fast Start for the Impatient
    Note
    II. Server Configuration Basics
    4. Server Types and Security Modes
    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server
    5. Domain Control
    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." +

    Table of Contents

    I. General Installation
    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your + server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. Fast Start for the Impatient
    Note
    II. Server Configuration Basics
    4. Server Types and Security Modes
    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server
    5. Domain Control
    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not -exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
    6. Backup Domain Control
    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?
    7. Domain Membership
    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails
    8. Stand-Alone Servers
    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors
    9. MS Windows Network Configuration Guide
    Note
    III. Advanced Configuration
    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask - parameters
    Interaction with the standard Samba file attribute - mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files - I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with -rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a -different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for -CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for -application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and -native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print -Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many -Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel -Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for -cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the -Client
    Installing PostScript Driver Files manually (using -rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to -CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached -Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing -Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Management
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note
    IV. Migration and Updating
    30. Upgrading from Samba-2.x to Samba-3.0.0
    Charsets
    Obsolete configuration options
    Password Backend
    31. Migration from NT4 PDC to Samba-3 PDC
    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices
    32. SWAT - The Samba Web Administration Tool
    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page
    V. Troubleshooting
    33. The Samba checklist
    Introduction
    Assumptions
    The tests
    Still having troubles?
    34. Analysing and solving samba problems
    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists
    35. Reporting Bugs
    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches
    VI. Appendixes
    36. How to compile SAMBA
    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors
    37. Portability
    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9
    38. Samba and other CIFS clients
    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working - for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1
    39. Samba Performance Tuning
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    40. DNS and DHCP Configuration Guide
    Note
    41. Further Resources
    Websites
    Related updates from Microsoft
    Books
    Index

    List of Figures

    19.1. Windows Printing to a local Printer
    19.2. Printing to a Postscript Printer
    19.3. Ghostscript as a RIP for non-postscript printers
    19.4. Prefiltering in CUPS to form Postscript
    19.5. Adding Device-specific Print Options
    19.6. Postscript to intermediate Raster format
    19.7. CUPS-raster production using Ghostscript
    19.8. Image format to CUPS-raster format conversion
    19.9. Raster to Printer Specific formats
    19.10. cupsomatic/foomatic processing versus Native CUPS
    19.11. Print Driver execution on the Client
    19.12. Print Driver execution on the Server
    19.13. Printing via CUPS/samba server
    19.14. cupsaddsmb flowchart
    19.15. CUPS Printing Overview

    List of Tables

    7.1. Assumptions
    10.1. Browse subnet example 1
    10.2. Browse subnet example 2
    10.3. Browse subnet example 3
    10.4. Browse subnet example 4
    11.1. Attributes in the sambaSamAccount objectclass (LDAP)
    11.2. Basic smb.conf options for MySQL passdb backend
    11.3. MySQL field names for MySQL passdb backend
    13.1. Managing directories with unix and windows
    13.2. User and Group Based Controls
    13.3. File and Directory Permission Based Controls
    13.4. Other Controls
    20.1. Extended Auditing Log Information
    24.1. User Shell Folder registry keys default values
    24.2. Defaults of profile settings registry keys
    24.3. Defaults of default user profile paths registry keys
    25.1. Options recognized by pam_smbpass
    31.1. The 3 Major Site Types
    31.2. Nature of the Conversion Choices

    List of Examples

    12.1. smbgrpadd.sh
    13.1. Example File
    Next
    PartI.General Installation
    +existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not +exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
    6. Backup Domain Control
    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?
    7. Domain Membership
    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails
    8. Stand-Alone Servers
    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors
    9. MS Windows Network Configuration Guide
    Note
    III. Advanced Configuration
    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask + parameters
    Interaction with the standard Samba file attribute + mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files + I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with +rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a +different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for +CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for +application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and +native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print +Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many +Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel +Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for +cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the +Client
    Installing PostScript Driver Files manually (using +rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to +CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached +Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing +Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Management
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note
    IV. Migration and Updating
    30. Upgrading from Samba-2.x to Samba-3.0.0
    Charsets
    Obsolete configuration options
    Password Backend
    31. Migration from NT4 PDC to Samba-3 PDC
    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices
    32. SWAT - The Samba Web Administration Tool
    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page
    V. Troubleshooting
    33. The Samba checklist
    Introduction
    Assumptions
    The tests
    Still having troubles?
    34. Analysing and solving samba problems
    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists
    35. Reporting Bugs
    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches
    VI. Appendixes
    36. How to compile SAMBA
    Access Samba source code via CVS
    Introduction
    CVS Access to samba.org
    Accessing the samba sources via rsync and ftp
    Verifying Samba's PGP signature
    Building the Binaries
    Compiling samba with Active Directory support
    Starting the smbd and nmbd
    Starting from inetd.conf
    Alternative: starting it as a daemon
    Common Errors
    37. Portability
    HPUX
    SCO Unix
    DNIX
    RedHat Linux Rembrandt-II
    AIX
    Sequential Read Ahead
    Solaris
    Locking improvements
    Winbind on Solaris 9
    38. Samba and other CIFS clients
    Macintosh clients?
    OS2 Client
    How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba?
    How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba?
    How do I get printer driver download working + for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Use TCP/IP as default protocol
    Speed improvement
    Windows '95/'98
    Speed improvement
    Windows 2000 Service Pack 2
    Windows NT 3.1
    39. Samba Performance Tuning
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    40. DNS and DHCP Configuration Guide
    Note
    41. Further Resources
    Websites
    Related updates from Microsoft
    Books
    Index

    List of Figures

    19.1. Windows Printing to a local Printer
    19.2. Printing to a Postscript Printer
    19.3. Ghostscript as a RIP for non-postscript printers
    19.4. Prefiltering in CUPS to form Postscript
    19.5. Adding Device-specific Print Options
    19.6. Postscript to intermediate Raster format
    19.7. CUPS-raster production using Ghostscript
    19.8. Image format to CUPS-raster format conversion
    19.9. Raster to Printer Specific formats
    19.10. cupsomatic/foomatic processing versus Native CUPS
    19.11. Print Driver execution on the Client
    19.12. Print Driver execution on the Server
    19.13. Printing via CUPS/samba server
    19.14. cupsaddsmb flowchart
    19.15. CUPS Printing Overview

    List of Tables

    7.1. Assumptions
    10.1. Browse subnet example 1
    10.2. Browse subnet example 2
    10.3. Browse subnet example 3
    10.4. Browse subnet example 4
    11.1. Attributes in the sambaSamAccount objectclass (LDAP)
    11.2. Basic smb.conf options for MySQL passdb backend
    11.3. MySQL field names for MySQL passdb backend
    13.1. Managing directories with unix and windows
    13.2. User and Group Based Controls
    13.3. File and Directory Permission Based Controls
    13.4. Other Controls
    20.1. Extended Auditing Log Information
    24.1. User Shell Folder registry keys default values
    24.2. Defaults of profile settings registry keys
    24.3. Defaults of default user profile paths registry keys
    25.1. Options recognized by pam_smbpass
    31.1. The 3 Major Site Types
    31.2. Nature of the Conversion Choices

    List of Examples

    12.1. smbgrpadd.sh
    13.1. Example File
    Next
    PartI.General Installation
    diff --git a/docs/htmldocs/install.html b/docs/htmldocs/install.html index 154b9705e18..d602d123c77 100644 --- a/docs/htmldocs/install.html +++ b/docs/htmldocs/install.html @@ -1,6 +1,7 @@ -Chapter2.How to Install and Test SAMBA
    Chapter2.How to Install and Test SAMBA
    PrevPartI.General InstallationNext

    Chapter2.How to Install and Test SAMBA

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Karl Auer

    Table of Contents

    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your - server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Obtaining and installing samba

    + +Chapter2.How to Install and Test SAMBA

    Chapter2.How to Install and Test SAMBA
    PrevPartI.General InstallationNext

    Chapter2.How to Install and Test SAMBA

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Karl Auer

    Table of Contents

    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your + server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Obtaining and installing samba

    Binary packages of samba are included in almost any Linux or Unix distribution. There are also some packages available at the samba homepage. @@ -8,29 +9,29 @@ appropriate appendix chapter.

    If you have already installed samba, or if your operating system was pre-installed with samba, then you may not need to bother with this chapter. On the other hand, you may want to read this chapter anyhow - for information about updating samba.

    Configuring samba (smb.conf)

    + for information about updating samba.

    Configuring samba (smb.conf)

    Samba's configuration is stored in the smb.conf file, that usually resides in /etc/samba/smb.conf or /usr/local/samba/lib/smb.conf. You can either edit this file yourself or do it using one of the many graphical tools that are available, such as the web-based interface swat, that is included with samba. -

    Example Configuration

    +

    Example Configuration

    There are sample configuration files in the examples subdirectory in the distribution. I suggest you read them carefully so you can see how the options go together in practice. See the man page for all the options.

    The simplest useful configuration file would be something like this: -

    - 

    +	
    
+	
     	[global]
 		workgroup = MYGROUP
 
 	[homes]
 		guest ok = no
 		read only = no
-	
    
-	
    
+
    +

    This will allow connections by anyone with an account on the server, using either their login name or "homes" as the service name. (Note that the workgroup that Samba must also be set.) @@ -42,7 +43,7 @@ For more information about security settings for the [homes] share please refer to the chapter Securing Samba. -

    Test your config file with testparm

    +

    Test your config file with testparm

    It's important that you test the validity of your smb.conf file using the testparm program. If testparm runs OK then it will list the loaded services. If not it will give an error message. @@ -50,7 +51,7 @@ Make sure it runs OK and that the services look reasonable before proceeding.

    Always run testparm again when you change smb.conf! -

    SWAT

    +

    SWAT

    SWAT is a web-based interface that helps you configure samba. SWAT might not be available in the samba package on your platform, but in a separate package. Please read the swat manpage @@ -66,7 +67,7 @@ machine but connecting from a remote machine leaves your connection open to password sniffing as passwords will be sent in the clear over the wire. -

    Try listing the shares available on your +

    Try listing the shares available on your server

    $ smbclient -L yourhostname

    You should get back a list of shares available on your server. If you don't then something is incorrectly setup. @@ -76,7 +77,7 @@ See the smbclient man page for details. (you can force it to list the shares without a password by adding the option -U% to the command line. This will not work - with non-Samba servers)

    Try connecting with the unix client

    $ smbclient + with non-Samba servers)

    Try connecting with the unix client

    $ smbclient //yourhostname/aservice

    Typically the yourhostname would be the name of the host where you installed smbd. The aservice is @@ -85,18 +86,18 @@ section in smb.conf.

    For example if your unix host is bambi and your login name is fred you would type:

    $ smbclient //bambi/fred -

    Try connecting from a DOS, WfWg, Win9x, WinNT, +

    Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client

    Try mounting disks. eg:

    C:\WINDOWS\> net use d: \\servername\service

    Try printing. eg:

    C:\WINDOWS\> net use lpt1: \\servername\spoolservice

    C:\WINDOWS\> print filename -

    What If Things Don't Work?

    Then you might read the file chapter +

    What If Things Don't Work?

    Then you might read the file chapter Diagnosis and the FAQ. If you are still stuck then try to follow the Analysing and Solving Problems chapter Samba has been successfully installed at thousands of sites worldwide, - so maybe someone else has hit your problem and has overcome it.

    Common Errors

    + so maybe someone else has hit your problem and has overcome it.

    Common Errors

    The following questions and issues get raised on the samba mailing list over and over again. -

    Why are so many smbd processes eating memory?

    +

    Why are so many smbd processes eating memory?

    “ Site that is running Samba on an AIX box. They are sharing out about 2 terabytes using samba. Samba was installed using smitty and the binaries. We seem to be experiencing a memory problem @@ -108,8 +109,8 @@ processes of smbd running: Is samba suppose to start this many different smbd processes? Or does it run as one smbd process? Also is it normal for it to be taking up this much memory? ” -

    -

    +
    
+
     Inuse * 4096 = amount of memory being used by this process
 
      Pid Command        Inuse      Pin     Pgsp  Virtual   64-bit    Mthrd
@@ -136,8 +137,8 @@ Inuse * 4096 = amount of memory being used by this process
    19110 smbd            8404     1906      181     4862        N        N
 
    Total memory used:  841,592,832 bytes
-
    
-
    
+
    +

    Samba consists on three core programs: nmbd, smbd, winbindd. nmbd is the name server message daemon, smbd is the server message daemon, winbindd is the daemon that @@ -152,4 +153,4 @@ connection made. That is why you are seeing so many of them, one (1) per client

    winbindd will run as one or two daemons, depending on whether or not it is being run in "split mode" (in which case there will be two instances). -

    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Your loopback device isn't working correctly. Make sure it's running.

    PrevUpNext
    Chapter1.Introduction to SambaHomeChapter3.Fast Start for the Impatient
    +

    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Your loopback device isn't working correctly. Make sure it's running.

    PrevUpNext
    Chapter1.Introduction to SambaHomeChapter3.Fast Start for the Impatient
    diff --git a/docs/htmldocs/integrate-ms-networks.html b/docs/htmldocs/integrate-ms-networks.html index 083aeed9f35..07331fd9d03 100644 --- a/docs/htmldocs/integrate-ms-networks.html +++ b/docs/htmldocs/integrate-ms-networks.html @@ -1,4 +1,5 @@ -Chapter26.Integrating MS Windows networks with Samba
    Chapter26.Integrating MS Windows networks with Samba
    PrevPartIII.Advanced ConfigurationNext

    Chapter26.Integrating MS Windows networks with Samba

    John H. Terpstra

    Samba Team

    (Jan 01 2001)

    Table of Contents

    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem

    + +Chapter26.Integrating MS Windows networks with Samba

    Chapter26.Integrating MS Windows networks with Samba
    PrevPartIII.Advanced ConfigurationNext

    Chapter26.Integrating MS Windows networks with Samba

    John H. Terpstra

    Samba Team

    (Jan 01 2001)

    Table of Contents

    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem

    This section deals with NetBIOS over TCP/IP name to IP address resolution. If your MS Windows clients are NOT configured to use NetBIOS over TCP/IP then this section does not apply to your installation. If your installation involves use of @@ -9,7 +10,7 @@ NetBIOS over TCP/IP then this section may help you to resolve networking problem to NOT run NetBEUI at all. Note also that there is NO such thing as NetBEUI over TCP/IP - the existence of such a protocol is a complete and utter mis-apprehension. -

    Features and Benefits

    +

    Features and Benefits

    Many MS Windows network administrators have never been exposed to basic TCP/IP networking as it is implemented in a Unix/Linux operating system. Likewise, many Unix and Linux administrators have not been exposed to the intricacies of MS Windows TCP/IP based @@ -17,7 +18,7 @@ networking (and may have no desire to be either).

    This chapter gives a short introduction to the basics of how a name can be resolved to it's IP address for each operating system environment. -

    Background Information

    +

    Background Information

    Since the introduction of MS Windows 2000 it is possible to run MS Windows networking without the use of NetBIOS over TCP/IP. NetBIOS over TCP/IP uses UDP port 137 for NetBIOS name resolution and uses TCP port 139 for NetBIOS session services. When NetBIOS over @@ -33,10 +34,10 @@ disable NetBIOS over TCP/IP today use MS Active Directory Service (ADS). ADS req Dynamic DNS with Service Resource Records (SRV RR) and with Incremental Zone Transfers (IXFR). Use of DHCP with ADS is recommended as a further means of maintaining central control over client workstation network configuration. -

    Name Resolution in a pure Unix/Linux world

    +

    Name Resolution in a pure Unix/Linux world

    The key configuration files covered in this section are: -

    • /etc/hosts

    • /etc/resolv.conf

    • /etc/host.conf

    • /etc/nsswitch.conf

    /etc/hosts

    -Contains a static list of IP Addresses and names. +

    • /etc/hosts

    • /etc/resolv.conf

    • /etc/host.conf

    • /etc/nsswitch.conf

    /etc/hosts

    +Contains a static list of IP addresses and names. eg: 

     	127.0.0.1	localhost localhost.localdomain
@@ -48,7 +49,7 @@ IP addresses.
 
    
 Network packets that are sent over the physical network transport 
 layer communicate not via IP addresses but rather using the Media 
-Access Control address, or MAC address. IP Addresses are currently 
+Access Control address, or MAC address. IP addresses are currently 
 32 bits in length and are typically presented as four (4) decimal 
 numbers that are separated by a dot (or period). eg: 168.192.1.1.
 
    
@@ -92,7 +93,7 @@ primary names by which they are known within the local machine.
 This file helps to prime the pump so that a basic level of name 
 resolution can exist before any other method of name resolution 
 becomes available.
-

    /etc/resolv.conf

    +

    /etc/resolv.conf

    This file tells the name resolution libraries:

    • The name of the domain to which the machine belongs @@ -102,7 +103,7 @@ This file tells the name resolution libraries:

    • The name or IP address of available Domain Name Servers that may be asked to perform name to address translation lookups -

    /etc/host.conf

    +

    /etc/host.conf

    /etc/host.conf is the primary means by which the setting in /etc/resolv.conf may be affected. It is a critical configuration file. This file controls the order by @@ -113,7 +114,7 @@ which name resolution may proceed. The typical structure is:

    then both addresses should be returned. Please refer to the man page for host.conf for further details. -

    /etc/nsswitch.conf

    +

    /etc/nsswitch.conf

    This file controls the actual name resolution targets. The file typically has resolver object specifications as follows: 

    @@ -149,22 +150,22 @@ Starting with version 2.2.0 samba has Linux support for extensions to
 the name service switch infrastructure so that linux clients will 
 be able to obtain resolution of MS Windows NetBIOS names to IP 
 Addresses. To gain this functionality Samba needs to be compiled 
-with appropriate arguments to the make command (ie: make 
+with appropriate arguments to the make command (i.e.: make 
 nsswitch/libnss_wins.so). The resulting library should 
 then be installed in the /lib directory and 
 the "wins" parameter needs to be added to the "hosts:" line in 
 the /etc/nsswitch.conf file. At this point it 
-will be possible to ping any MS Windows machine by it's NetBIOS 
+will be possible to ping any MS Windows machine by its NetBIOS 
 machine name, so long as that machine is within the workgroup to 
 which both the samba machine and the MS Windows machine belong.
-

    Name resolution as used within MS Windows networking

    +

    Name resolution as used within MS Windows networking

    MS Windows networking is predicated about the name each machine is given. This name is known variously (and inconsistently) as the "computer name", "machine name", "networking name", "netbios name", -"SMB name". All terms mean the same thing with the exception of +or "SMB name". All terms mean the same thing with the exception of "netbios name" which can apply also to the name of the workgroup or the domain name. The terms "workgroup" and "domain" are really just a -simply name with which the machine is associated. All NetBIOS names +simple name with which the machine is associated. All NetBIOS names are exactly 16 characters in length. The 16th character is reserved. It is used to store a one byte value that indicates service level information for the NetBIOS name that is registered. A NetBIOS machine @@ -199,8 +200,8 @@ wants to locate a domain logon server. It finds this service and the IP address of a server that provides it by performing a lookup (via a NetBIOS broadcast) for enumeration of all machines that have registered the name type *<1c>. A logon request is then sent to each -IP address that is returned in the enumerated list of IP addresses. Which -ever machine first replies then ends up providing the logon services. +IP address that is returned in the enumerated list of IP addresses. +Whichever machine first replies then ends up providing the logon services.

    The name "workgroup" or "domain" really can be confusing since these have the added significance of indicating what is the security @@ -228,7 +229,7 @@ NBT or NetBT, the NetBIOS over TCP/IP. MS Windows machines use a complex array of name resolution mechanisms. Since we are primarily concerned with TCP/IP this demonstration is limited to this area. -

    The NetBIOS Name Cache

    +

    The NetBIOS Name Cache

    All MS Windows machines employ an in memory buffer in which is stored the NetBIOS names and IP addresses for all external machines that that machine has communicated with over the @@ -246,7 +247,7 @@ frustrating for users - but it is a characteristic of the protocol. The MS Windows utility that allows examination of the NetBIOS name cache is called "nbtstat". The Samba equivalent of this is called nmblookup. -

    The LMHOSTS file

    +

    The LMHOSTS file

    This file is usually located in MS Windows NT 4.0 or 2000 in C:\WINNT\SYSTEM32\DRIVERS\ETC and contains the IP Address and the machine name in matched pairs. The @@ -331,25 +332,25 @@ It typically looks like: # so keeping the number of comments to a minimum will improve performance. # Therefore it is not advisable to simply add lmhosts file entries onto the # end of this file. -

    HOSTS file

    +

    HOSTS file

    This file is usually located in MS Windows NT 4.0 or 2000 in C:\WINNT\SYSTEM32\DRIVERS\ETC and contains the IP Address and the IP hostname in matched pairs. It can be used by the name resolution infrastructure in MS Windows, depending on how the TCP/IP environment is configured. This file is in every way the equivalent of the Unix/Linux /etc/hosts file. -

    DNS Lookup

    +

    DNS Lookup

    This capability is configured in the TCP/IP setup area in the network -configuration facility. If enabled an elaborate name resolution sequence -is followed the precise nature of which is dependant on what the NetBIOS -Node Type parameter is configured to. A Node Type of 0 means use -NetBIOS broadcast (over UDP broadcast) is first used if the name +configuration facility. If enabled, an elaborate name resolution sequence +is followed the precise nature of which is dependant on how the NetBIOS +Node Type parameter is configured. A Node Type of 0 means that +NetBIOS broadcast (over UDP broadcast) is used if the name that is the subject of a name lookup is not found in the NetBIOS name cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast lookup is used. -

    WINS Lookup

    +

    WINS Lookup

    A WINS (Windows Internet Name Server) service is the equivalent of the rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores the names and IP addresses that are registered by a Windows client @@ -368,11 +369,11 @@ needed in the smb.conf file:

    where xxx.xxx.xxx.xxx is the IP address of the WINS server. -

    Common Errors

    +

    Common Errors

    TCP/IP network configuration problems find every network administrator sooner or later. The cause can be anything from keyboard mishaps, forgetfulness, simple mistakes, and carelessness. Of course, no one is every deliberately careless! -

    My Boomerang Won't Come Back

    +

    My Boomerang Won't Come Back

    Well, the real complaint said, "I can ping my samba server from Windows, but I can not ping my Windows machine from the samba server."

    @@ -382,9 +383,9 @@ carelessness. Of course, no one is every deliberately careless!

    Due to inconsistent netmasks, the Windows machine was on network 192.168.1.0/24, while the Samba server was on network 192.168.1.128/25 - logically a different network. -

    Very Slow Network Connections

    +

    Very Slow Network Connections

    A common causes of slow network response includes: -

    • Client is configured to use DNS and DNS server is down

    • Client is configured to use remote DNS server, but remote connection is down

    • Client is configured to use a WINS server, but there is no WINS server

    • Client is NOT configured to use a WINS server, but there is a WINS server

    • Firewall is filtering our DNS or WINS traffic

    Samba server name change problem

    +

    • Client is configured to use DNS and DNS server is down

    • Client is configured to use remote DNS server, but remote connection is down

    • Client is configured to use a WINS server, but there is no WINS server

    • Client is NOT configured to use a WINS server, but there is a WINS server

    • Firewall is filtering our DNS or WINS traffic

    Samba server name change problem

    The name of the samba server was changed, samba was restarted, samba server can not be pinged by new name from MS Windows NT4 Workstation, but it does still respond to ping using the old name. Why? @@ -393,8 +394,8 @@ carelessness. Of course, no one is every deliberately careless!

    • WINS is NOT in use, only broadcast based name resolution is used

    • The samba server was renamed and restarted within the last 10-15 minutes

    • The old samba server name is still in the NetBIOS name cache on the MS Windows NT4 Workstation

    To find what names are present in the NetBIOS name cache on the MS Windows NT4 machine, open a cmd shell, then: -

    - 

    +	
    
+	
     	C:\temp\>nbtstat -n
 
 	              NetBIOS Local Name Table
@@ -418,10 +419,10 @@ carelessness. Of course, no one is every deliberately careless!
 	FRODO            <20>  UNIQUE      192.168.1.1          240
 
 	C:\Temp\>
-	
    
-	
    
+
    +

    In the above example, FRODO is the Samba server and SLACK is the MS Windows NT4 Workstation. - The first listing shows the contents of the Local Name Table (ie: Identity information on + The first listing shows the contents of the Local Name Table (i.e.: Identity information on the MS Windows workstation), the second shows the NetBIOS name in the NetBIOS name cache. The name cache contains the remote machines known to this workstation.

    PrevUpNext
    Chapter25.PAM based Distributed AuthenticationHomeChapter27.Unicode/Charsets
    diff --git a/docs/htmldocs/introduction.html b/docs/htmldocs/introduction.html index 94419cff04d..f2e9d6f63f8 100644 --- a/docs/htmldocs/introduction.html +++ b/docs/htmldocs/introduction.html @@ -1,5 +1,6 @@ -PartI.General Installation
    PartI.General Installation
    PrevNext

    General Installation

    Preparing Samba for Configuration

    This section of the Samba-HOWTO-Collection contains general info on how to install samba + +PartI.General Installation

    PartI.General Installation
    PrevNext

    General Installation

    Preparing Samba for Configuration

    This section of the Samba-HOWTO-Collection contains general info on how to install samba and how to configure the parts of samba you will most likely need. -PLEASE read this.

    Table of Contents

    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your - server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. Fast Start for the Impatient
    Note
    PrevUpNext
    SAMBA Project DocumentationHomeChapter1.Introduction to Samba
    +PLEASE read this.

    Table of Contents

    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your + server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. Fast Start for the Impatient
    Note
    PrevUpNext
    SAMBA Project DocumentationHomeChapter1.Introduction to Samba
    diff --git a/docs/htmldocs/ix01.html b/docs/htmldocs/ix01.html index 4f706aed70f..6d8bfe06330 100644 --- a/docs/htmldocs/ix01.html +++ b/docs/htmldocs/ix01.html @@ -1 +1,2 @@ -Index
    Index
    Prev

    Index

    PrevUp
    Chapter41.Further ResourcesHome
    + +Index
    Index
    Prev

    Index

    PrevUp
    Chapter41.Further ResourcesHome
    diff --git a/docs/htmldocs/locking.html b/docs/htmldocs/locking.html index a128cac7ced..6214254ce01 100644 --- a/docs/htmldocs/locking.html +++ b/docs/htmldocs/locking.html @@ -1,7 +1,8 @@ -Chapter14.File and Record Locking
    Chapter14.File and Record Locking
    PrevPartIII.Advanced ConfigurationNext

    Chapter14.File and Record Locking

    Jeremy Allison

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Eric Roseme

    HP Oplocks Usage Recommendations Whitepaper

    Table of Contents

    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading

    + +Chapter14.File and Record Locking

    Chapter14.File and Record Locking
    PrevPartIII.Advanced ConfigurationNext

    Chapter14.File and Record Locking

    Jeremy Allison

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    John H. Terpstra

    Samba Team

    Eric Roseme

    HP Oplocks Usage Recommendations Whitepaper

    Table of Contents

    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading

    One area which causes trouble for many network administrators is locking. The extent of the problem is readily evident from searches over the internet. -

    Features and Benefits

    +

    Features and Benefits

    Samba provides all the same locking semantics that MS Windows clients expect and that MS Windows NT4 / 200x servers provide also.

    @@ -23,13 +24,13 @@ settings on the MS Windows client.

    Note

    Sometimes it is necessary to disable locking control settings BOTH on the Samba server as well as on each MS Windows client! -

    Discussion

    +

    Discussion

    There are two types of locking which need to be performed by a SMB server. The first is record locking which allows a client to lock a range of bytes in a open file. The second is the deny modes that are specified when a file is open.

    -Record locking semantics under Unix is very different from record locking under +Record locking semantics under Unix are very different from record locking under Windows. Versions of Samba before 2.2 have tried to use the native fcntl() unix system call to implement proper record locking between different Samba clients. This can not be fully correct due to several reasons. The simplest is the fact @@ -51,7 +52,7 @@ important to them. By default Samba only makes locking calls when explicitly ask to by a client, but if you set strict locking = yes then it will make lock checking calls on every read and write.

    -You can also disable by range locking completely using locking = no. +You can also disable byte range locking completely using locking = no. This is useful for those shares that don't support locking or don't need it (such as cdroms). In this case Samba fakes the return codes of locking calls to tell clients that everything is OK. @@ -62,7 +63,7 @@ access should be allowed simultaneously with its open. A client may ask for DENY_NONE, DENY_READ, DENY_WRITE or DENY_ALL. There are also special compatibility modes called DENY_FCB and DENY_DOS. -

    Opportunistic Locking Overview

    +

    Opportunistic Locking Overview

    Opportunistic locking (Oplocks) is invoked by the Windows file system (as opposed to an API) via registry entries (on the server AND client) for the purpose of enhancing network performance when accessing a file @@ -185,7 +186,7 @@ In mission critical high availability environments, careful attention should be given to opportunistic locking. Ideally, comprehensive testing should be done with all affected applications with oplocks enabled and disabled. -

    Exclusively Accessed Shares

    +

    Exclusively Accessed Shares

    Opportunistic locking is most effective when it is confined to shares that are exclusively accessed by a single user, or by only one user at a time. Because the true value of opportunistic locking is the local @@ -194,7 +195,7 @@ mechanism will cause a delay.

    Home directories are the most obvious examples of where the performance benefit of opportunistic locking can be safely realized. -

    Multiple-Accessed Shares or Files

    +

    Multiple-Accessed Shares or Files

    As each additional user accesses a file in a share with opportunistic locking enabled, the potential for delays and resulting perceived poor performance increases. When multiple users are accessing a file on a @@ -206,7 +207,7 @@ of the caching user. As each additional client attempts to access a file with oplocks set, the potential performance improvement is negated and eventually results in a performance bottleneck. -

    Unix or NFS Client Accessed Files

    +

    Unix or NFS Client Accessed Files

    Local Unix and NFS clients access files without a mandatory file locking mechanism. Thus, these client platforms are incapable of initiating an oplock break request from the server to a Windows client @@ -216,7 +217,7 @@ exposes the file to likely data corruption.

    If files are shared between Windows clients, and either local Unix or NFS users, then turn opportunistic locking off. -

    Slow and/or Unreliable Networks

    +

    Slow and/or Unreliable Networks

    The biggest potential performance improvement for opportunistic locking occurs when the client-side caching of reads and writes delivers the most differential over sending those reads and writes over the wire. @@ -231,7 +232,7 @@ the most advantageous scenario to utilize opportunistic locking. If the network is slow, unreliable, or a WAN, then do not configure opportunistic locking if there is any chance of multiple users regularly opening the same file. -

    Multi-User Databases

    +

    Multi-User Databases

    Multi-user databases clearly pose a risk due to their very nature - they are typically heavily accessed by numerous users at random intervals. Placing a multi-user database on a share with opportunistic @@ -239,7 +240,7 @@ locking enabled will likely result in a locking management bottleneck on the Samba server. Whether the database application is developed in-house or a commercially available product, ensure that the share has opportunistic locking disabled. -

    PDM Data Shares

    +

    PDM Data Shares

    Process Data Management (PDM) applications such as IMAN, Enovia, and Clearcase, are increasing in usage with Windows client platforms, and therefore SMB data stores. PDM applications manage multi-user @@ -252,7 +253,7 @@ application and PDM server to negotiate and maintain. It is appropriate to eliminate the client OS from any caching tasks, and the server from any oplock management, by disabling opportunistic locking on the share. -

    Beware of Force User

    +

    Beware of Force User

    Samba includes an smb.conf parameter called force user that changes the user accessing a share from the incoming user to whatever user is defined by the smb.conf variable. If opportunistic locking is enabled @@ -270,7 +271,7 @@ Avoid the combination of the following: Slow or unreliable networks

  • Opportunistic Locking Enabled -

    • Advanced Samba Opportunistic Locking Parameters

    +

    Advanced Samba Opportunistic Locking Parameters

    Samba provides opportunistic locking parameters that allow the administrator to adjust various properties of the oplock mechanism to account for timing and usage levels. These parameters provide good @@ -284,7 +285,7 @@ are required, then the better option is to simply turn oplocks off. The samba SWAT help text for both parameters reads "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." This is good advice. -

    Mission Critical High Availability

    +

    Mission Critical High Availability

    In mission critical high availability environments, data integrity is often a priority. Complex and expensive configurations are implemented to ensure that if a client loses connectivity with a file server, a @@ -314,7 +315,7 @@ In mission critical high availability environments, careful attention should be given to opportunistic locking. Ideally, comprehensive testing should be done with all affected applications with oplocks enabled and disabled. -

    Samba Opportunistic Locking Control

    +

    Samba Opportunistic Locking Control

    Opportunistic Locking is a unique Windows file locking feature. It is not really file locking, but is included in most discussions of Windows file locking, so is considered a defacto locking feature. @@ -364,29 +365,29 @@ of your client sending oplock breaks and will instead want to disable oplocks fo

    Another factor to consider is the perceived performance of file access. If oplocks provide no measurable speed benefit on your network, it might not be worth the hassle of dealing with them. -

    Example Configuration

    +

    Example Configuration

    In the following we examine two distinct aspects of Samba locking controls. -

    Disabling Oplocks

    +

    Disabling Oplocks

    You can disable oplocks on a per-share basis with the following: -

    -

    +
    
+
     [acctdata]
 	oplocks = False
 	level2 oplocks = False
-
    
-
    
+
    +

    The default oplock type is Level1. Level2 Oplocks are enabled on a per-share basis in the smb.conf file.

    Alternately, you could disable oplocks on a per-file basis within the share: -

    -

    +
    
+
     	veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/
-
    
-
    
+
    +

    If you are experiencing problems with oplocks as apparent from Samba's log entries, you may want to play it safe and disable oplocks and level2 oplocks. -

    Disabling Kernel OpLocks

    +

    Disabling Kernel OpLocks

    Kernel OpLocks is an smb.conf parameter that notifies Samba (if the UNIX kernel has the capability to send a Windows client an oplock break) when a UNIX process is attempting to open the file that is @@ -398,13 +399,13 @@ to the risk of data corruption. If the UNIX kernel has the ability to send an oplock break, then the kernel oplocks parameter enables Samba to send the oplock break. Kernel oplocks are enabled on a per-server basis in the smb.conf file. -

    -

    +
    
+
     [global]
 kernel oplocks = yes
-
    
+
    The default is "no". -

    +

    Veto OpLocks is an smb.conf parameter that identifies specific files for which Oplocks are disabled. When a Windows client opens a file that has been configured for veto oplocks, the client will not be granted @@ -416,26 +417,26 @@ allow Windows clients to utilize the performance benefit of file caching without the risk of data corruption. Veto Oplocks can be enabled on a per-share basis, or globally for the entire server, in the smb.conf file: -

    -

    <title>Example Veto OpLock Settings</title>
+
    
+
    <title>Example Veto OpLock Settings</title>
 [global]
         veto oplock files = /filename.htm/*.txt/
 
 [share_name]
         veto oplock files = /*.exe/filename.ext/
-
    
-
    
+
    +

    Oplock break wait time is an smb.conf parameter that adjusts the time interval for Samba to reply to an oplock break request. Samba recommends "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." Oplock Break Wait Time can only be configured globally in the smb.conf file: -

    -

    +
    
+
     [global]
           oplock break wait time =  0 (default)
-
    
-
    
+
    +

    Oplock break contention limit is an smb.conf parameter that limits the response of the Samba server to grant an oplock if the configured number of contending clients reaches the limit specified by the @@ -443,15 +444,15 @@ parameter. Samba recommends "DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE." Oplock Break Contention Limit can be enable on a per-share basis, or globally for the entire server, in the smb.conf file: -

    -

    +
    
+
     [global]
           oplock break contention limit =  2 (default)
 
 [share_name]
          oplock break contention limit =  2 (default)
-
    
-

    MS Windows Opportunistic Locking and Caching Controls

    + +

    MS Windows Opportunistic Locking and Caching Controls

    There is a known issue when running applications (like Norton Anti-Virus) on a Windows 2000/ XP workstation computer that can affect any application attempting to access shared database files across a network. This is a result of a default setting configured in the Windows 2000/XP @@ -488,20 +489,20 @@ Windows 2000 will still respect the EnableOplocks registry value used to disable in earlier versions of Windows.

    You can also deny the granting of opportunistic locks by changing the following registry entries: -

    -

    +
    
+
     	HKEY_LOCAL_MACHINE\System\
 		CurrentControlSet\Services\MRXSmb\Parameters\
 
 		OplocksDisabled REG_DWORD 0 or 1
 		Default: 0 (not disabled)
-
    
-
    Note
    
+
    +

    Note

    The OplocksDisabled registry value configures Windows clients to either request or not request opportunistic locks on a remote file. To disable oplocks, the value of OplocksDisabled must be set to 1. -

    -

    +
    +
     	HKEY_LOCAL_MACHINE\System\
 		CurrentControlSet\Services\LanmanServer\Parameters
 
@@ -510,8 +511,8 @@ request opportunistic locks on a remote file. To disable oplocks, the value of
 
 		EnableOpLockForceClose REG_DWORD 0 or 1
 		Default: 0 (Disabled by Default)
-

    -

    Note

    + +

    Note

    The EnableOplocks value configures Windows-based servers (including Workstations sharing files) to allow or deny opportunistic locks on local files.

    @@ -543,7 +544,7 @@ An illustration of how level II oplocks work: station holds any oplock on the file. Because the workstations can have no cached writes or locks at this point, they need not respond to the break-to-none advisory; all they need do is invalidate locally cashed read-ahead data. -

    Workstation Service Entries

    +

    Workstation Service Entries

     	\HKEY_LOCAL_MACHINE\System\
 		CurrentControlSet\Services\LanmanWorkstation\Parameters
 
@@ -552,7 +553,7 @@ An illustration of how level II oplocks work:

    Indicates whether the redirector should use opportunistic-locking (oplock) performance enhancement. This parameter should be disabled only to isolate problems. -

    Server Service Entries

    +

    Server Service Entries

     	\HKEY_LOCAL_MACHINE\System\
 		CurrentControlSet\Services\LanmanServer\Parameters
 
@@ -581,7 +582,7 @@ the server disables raw I/O and opportunistic locking for this connection.
 Specifies the time that the server waits for a client to respond to an oplock break
 request. Smaller values can allow detection of crashed clients more quickly but can
 potentially cause loss of cached data.
-

    Persistent Data Corruption

    +

    Persistent Data Corruption

    If you have applied all of the settings discussed in this paper but data corruption problems and other symptoms persist, here are some additional things to check out:

    @@ -592,7 +593,7 @@ rebuild the data files in question. This involves creating a new data file with same definition as the file to be rebuilt and transferring the data from the old file to the new one. There are several known methods for doing this that can be found in our Knowledge Base. -

    Common Errors

    +

    Common Errors

    In some sites locking problems surface as soon as a server is installed, in other sites locking problems may not surface for a long time. Almost without exception, when a locking problem does surface it will cause embarrassment and potential data corruption. @@ -622,18 +623,18 @@ so far: report on https://bugzilla.samba.org without delay. Make sure that you give as much information as you possibly can to help isolate the cause and to allow reproduction of the problem (an essential step in problem isolation and correction). -

    locking.tdb error messages

    - 

    +

    locking.tdb error messages

    + 
     	> We are seeing lots of errors in the samba logs like:
 	>
 	>    tdb(/usr/local/samba_2.2.7/var/locks/locking.tdb): rec_read bad magic
 	> 0x4d6f4b61 at offset=36116
 	>
 	> What do these mean?
-

    -

    + +

    Corrupted tdb. Stop all instances of smbd, delete locking.tdb, restart smbd. -

    Additional Reading

    +

    Additional Reading

    You may want to check for an updated version of this white paper on our Web site from time to time. Many of our white papers are updated as information changes. For those papers, the Last Edited date is always at the top of the paper. diff --git a/docs/htmldocs/migration.html b/docs/htmldocs/migration.html index b8027a62ea0..c099bb51376 100644 --- a/docs/htmldocs/migration.html +++ b/docs/htmldocs/migration.html @@ -1 +1,2 @@ -PartIV.Migration and Updating

    PartIV.Migration and Updating
    PrevNext

    Migration and Updating

    Table of Contents

    30. Upgrading from Samba-2.x to Samba-3.0.0
    Charsets
    Obsolete configuration options
    Password Backend
    31. Migration from NT4 PDC to Samba-3 PDC
    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices
    32. SWAT - The Samba Web Administration Tool
    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page
    PrevUpNext
    Chapter29.High Availability OptionsHomeChapter30.Upgrading from Samba-2.x to Samba-3.0.0
    + +PartIV.Migration and Updating
    PartIV.Migration and Updating
    PrevNext

    Migration and Updating

    Table of Contents

    30. Upgrading from Samba-2.x to Samba-3.0.0
    Charsets
    Obsolete configuration options
    Password Backend
    31. Migration from NT4 PDC to Samba-3 PDC
    Planning and Getting Started
    Objectives
    Steps In Migration Process
    Migration Options
    Planning for Success
    Samba Implementation Choices
    32. SWAT - The Samba Web Administration Tool
    Features and Benefits
    Enabling SWAT for use
    Securing SWAT through SSL
    The SWAT Home Page
    Global Settings
    Share Settings
    Printers Settings
    The SWAT Wizard
    The Status Page
    The View Page
    The Password Change Page
    PrevUpNext
    Chapter29.High Availability OptionsHomeChapter30.Upgrading from Samba-2.x to Samba-3.0.0
    diff --git a/docs/htmldocs/msdfs.html b/docs/htmldocs/msdfs.html index d01b8f4c5de..fc05fee5386 100644 --- a/docs/htmldocs/msdfs.html +++ b/docs/htmldocs/msdfs.html @@ -1,6 +1,7 @@ + Chapter17.Hosting a Microsoft Distributed File System tree on Samba
    Chapter17.Hosting a Microsoft Distributed File System tree on Samba
    PrevPartIII.Advanced ConfigurationNext

    Chapter17.Hosting a Microsoft Distributed File System tree on Samba

    Shirish Kalele

    Samba Team & Veritas Software



    -

    12 Jul 2000

    Table of Contents

    Features and Benefits
    Common Errors

    Features and Benefits

    +

    12 Jul 2000

    Table of Contents

    Features and Benefits
    Common Errors

    Features and Benefits

    The Distributed File System (or DFS) provides a means of separating the logical view of files and directories that users see from the actual physical locations of these resources on the network. It allows for higher availability, smoother @@ -52,7 +53,7 @@ network shares you want, and start Samba.

    Users on DFS-aware clients can now browse the DFS tree on the Samba server at \\samba\dfs. Accessing links linka or linkb (which appear as directories to the client) - takes users directly to the appropriate shares on the network.

    Common Errors

    • Windows clients need to be rebooted + takes users directly to the appropriate shares on the network.

    Common Errors

    • Windows clients need to be rebooted if a previously mounted non-dfs share is made a dfs root or vice versa. A better way is to introduce a new share and make it the dfs root.

    • Currently there's a restriction that msdfs diff --git a/docs/htmldocs/net.8.html b/docs/htmldocs/net.8.html index 13e4be81bef..dd7c0165ada 100644 --- a/docs/htmldocs/net.8.html +++ b/docs/htmldocs/net.8.html @@ -95,12 +95,12 @@ The type defaults to 0x20 (workstation).

    LOOKUP LDAP [DOMAIN

    Give IP address of LDAP server of specified DOMAIN. Defaults to local domain.

    LOOKUP KDC [REALM]

    Give IP address of KDC for the specified REALM. Defaults to local realm.

    LOOKUP DC [DOMAIN]

    Give IP's of Domain Controllers for specified DOMAIN. Defaults to local domain.

    LOOKUP MASTER DOMAIN

    Give IP of master browser for specified DOMAIN -or workgroup. Defaults to local domain.

    CACHE

    Samba uses a general caching interface called 'gencache'. It -can be controlled using 'NET CACHE'.

    All the timeout parameters support the suffixes: +or workgroup. Defaults to local domain.

    CACHE

    Samba uses a general caching interface called 'gencache'. It +can be controlled using 'NET CACHE'.

    All the timeout parameters support the suffixes: -

    s - Seconds
    m - Minutes
    h - Hours
    d - Days
    w - Weeks

    +
    s - Seconds
    m - Minutes
    h - Hours
    d - Days
    w - Weeks
    -

    CACHE ADD key data time-out

    Add specified key+data to the cache with the given timeout.

    CACHE DEL key

    Delete key from the cache.

    CACHE SET key data time-out

    Update data of existing cache entry.

    CACHE SEARCH PATTERN

    Search for the specified pattern in the cache data.

    CACHE LIST

    +

    CACHE ADD key data time-out

    Add specified key+data to the cache with the given timeout.

    CACHE DEL key

    Delete key from the cache.

    CACHE SET key data time-out

    Update data of existing cache entry.

    CACHE SEARCH PATTERN

    Search for the specified pattern in the cache data.

    CACHE LIST

    List all current items in the cache.

    CACHE FLUSH

    Remove all the current items from the cache.

    GETLOCALSID [DOMAIN]

    Print the SID of the specified domain, or if the parameter is omitted, the SID of the domain the local server is in.

    SETLOCALSID S-1-5-21-x-y-z

    Sets domain sid for the local server to the specified SID.

    GROUPMAP

    Manage the mappings between Windows group SIDs and UNIX groups. diff --git a/docs/htmldocs/optional.html b/docs/htmldocs/optional.html index 1c300521bce..1a6d971f5f2 100644 --- a/docs/htmldocs/optional.html +++ b/docs/htmldocs/optional.html @@ -1,26 +1,27 @@ -PartIII.Advanced Configuration

    PartIII.Advanced Configuration
    PrevNext

    Advanced Configuration

    Valuable Nuts and Bolts Information

    + +PartIII.Advanced Configuration

    PartIII.Advanced Configuration
    PrevNext

    Advanced Configuration

    Valuable Nuts and Bolts Information

    Samba has several features that you might want or might not want to use. The chapters in this part each cover specific Samba features. -

    Table of Contents

    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask - parameters
    Interaction with the standard Samba file attribute - mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files - I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with -rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a -different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for -CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing -with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for -application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing -with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and -native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print -Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use -PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many -Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel -Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for -cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for -WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for -Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the -Client
    Installing PostScript Driver Files manually (using -rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to -CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached -Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing -Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Management
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note
    PrevUpNext
    Chapter9.MS Windows Network Configuration GuideHomeChapter10.Samba / MS Windows Network Browsing Guide
    +

    Table of Contents

    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing Samba to be the master
    Making Samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in Samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting Samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask + parameters
    Interaction with the standard Samba file attribute + mapping
    Common Errors
    Users can not write to a public share
    I have set force user and Samba still makes root the owner of all the files + I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with +rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a +different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for +CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for +application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printers specific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and +native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print +Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many +Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel +Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for +cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the +Client
    Installing PostScript Driver Files manually (using +rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to +CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached +Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing +Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Management
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note
    PrevUpNext
    Chapter9.MS Windows Network Configuration GuideHomeChapter10.Samba / MS Windows Network Browsing Guide
    diff --git a/docs/htmldocs/pam.html b/docs/htmldocs/pam.html index a0221b57e06..b3d0314adde 100644 --- a/docs/htmldocs/pam.html +++ b/docs/htmldocs/pam.html @@ -1,4 +1,5 @@ -Chapter25.PAM based Distributed Authentication
    Chapter25.PAM based Distributed Authentication
    PrevPartIII.Advanced ConfigurationNext

    Chapter25.PAM based Distributed Authentication

    John H. Terpstra

    Samba Team

    Stephen Langasek

    May 31, 2003

    Table of Contents

    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem

    + +Chapter25.PAM based Distributed Authentication

    Chapter25.PAM based Distributed Authentication
    PrevPartIII.Advanced ConfigurationNext

    Chapter25.PAM based Distributed Authentication

    John H. Terpstra

    Samba Team

    Stephen Langasek

    May 31, 2003

    Table of Contents

    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem

    This chapter you should help you to deploy winbind based authentication on any PAM enabled Unix/Linux system. Winbind can be used to enable user level application access authentication from any MS Windows NT Domain, MS Windows 200x Active Directory based domain, or any Samba @@ -9,7 +10,7 @@ In addition to knowing how to configure winbind into PAM, you will learn generic possibilities and in particular how to deploy tools like pam_smbpass.so to your advantage.

    Note

    The use of Winbind require more than PAM configuration alone. Please refer to the Winbind chapter. -

    Features and Benefits

    +

    Features and Benefits

    A number of Unix systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux, now utilize the Pluggable Authentication Modules (PAM) facility to provide all authentication, authorization and resource control services. Prior to the introduction of PAM, a decision @@ -67,12 +68,12 @@ of distributed samba domain controllers that can provide wide are network bandwi efficient authentication services for PAM capable systems. In effect, this allows the deployment of centrally managed and maintained distributed authentication from a single user account database. -

    Technical Discussion

    +

    Technical Discussion

    PAM is designed to provide the system administrator with a great deal of flexibility in configuration of the privilege granting applications of their system. The local configuration of system security controlled by PAM is contained in one of two places: either the single system file, /etc/pam.conf; or the /etc/pam.d/ directory. -

    PAM Configuration Syntax

    +

    PAM Configuration Syntax

    In this section we discuss the correct syntax of and generic options respected by entries to these files. PAM specific tokens in the configuration file are case insensitive. The module paths, however, are case sensitive since they indicate a file's name and reflect the case dependence of typical file-systems. @@ -86,22 +87,22 @@ If the PAM authentication module (loadable link library file) is located in the default location then it is not necessary to specify the path. In the case of Linux, the default location is /lib/security. If the module is located outside the default then the path must be specified as: -

    -

    +
    
+
     auth  required  /other_path/pam_strange_module.so
-
    
-
    Anatomy of /etc/pam.d Entries
    
+
    +

    Anatomy of /etc/pam.d Entries

    The remaining information in this subsection was taken from the documentation of the Linux-PAM project. For more information on PAM, see http://ftp.kernel.org/pub/linux/libs/pam The Official Linux-PAM home page.

    A general configuration line of the /etc/pam.conf file has the following form: -

    -

    +
    
+
     service-name   module-type   control-flag   module-path   args
-
    
-
    
+
    +

    Below, we explain the meaning of each of these tokens. The second (and more recently adopted) way of configuring Linux-PAM is via the contents of the /etc/pam.d/ directory. Once we have explained the meaning of the above tokens, we will describe this method. @@ -218,8 +219,8 @@ Once we have explained the meaning of the above tokens, we will describe this me

    Each of the four keywords: required; requisite; sufficient; and optional, have an equivalent expression in terms of the [...] syntax. They are as follows: -

    -

    • +

      +

      • required is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=bad]

      • requisite is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=die] @@ -227,8 +228,8 @@ Once we have explained the meaning of the above tokens, we will describe this me sufficient is equivalent to [success=done new_authtok_reqd=done default=ignore]

      • optional is equivalent to [success=ok new_authtok_reqd=ok default=ignore] -

      -

      +

    +

    Just to get a feel for the power of this new syntax, here is a taste of what you can do with it. With Linux-PAM-0.63, the notion of client plug-in agents was introduced. This is something that makes it possible for PAM to support machine-machine authentication using the transport protocol inherent to the client/server application. With the @@ -260,13 +261,13 @@ squid auth required pam_mysql.so user=passwd_query passwd=mada \ Any line in (one of) the configuration file(s), that is not formatted correctly, will generally tend (erring on the side of caution) to make the authentication process fail. A corresponding error is written to the system log files with a call to syslog(3). -

    Example System Configurations

    +

    Example System Configurations

    The following is an example /etc/pam.d/login configuration file. This example had all options been uncommented is probably not usable as it stacks many conditions before allowing successful completion of the login process. Essentially all conditions can be disabled by commenting them out except the calls to pam_pwdb.so. -

    PAM: original login config

    +
    PAM: original login config
     #%PAM-1.0
 # The PAM configuration file for the `login' service
 #
@@ -281,10 +282,10 @@ session      required    pam_pwdb.so
 # session    optional    pam_lastlog.so
 # password   required    pam_cracklib.so retry=3
 password     required    pam_pwdb.so shadow md5
-
    PAM: login using pam_smbpass
    
+

    PAM: login using pam_smbpass

    PAM allows use of replaceable modules. Those available on a sample system include: -

    $/bin/ls /lib/security -

    +
    $/bin/ls /lib/security
+
     pam_access.so    pam_ftp.so          pam_limits.so     
 pam_ncp_auth.so  pam_rhosts_auth.so  pam_stress.so     
 pam_cracklib.so  pam_group.so        pam_listfile.so   
@@ -360,7 +361,7 @@ authentication to be configured in a single central file. The
 on the basis that it allows for easier administration. As with all issues in 
 life though, every decision makes trade-offs, so you may want examine the 
 PAM documentation for further helpful information.
-

    smb.conf PAM Configuration

    +

    smb.conf PAM Configuration

    There is an option in smb.conf called obey pam restrictions. The following is from the on-line help for this option in SWAT;

    @@ -375,7 +376,7 @@ ignores PAM for authentication in the case of The reason is that PAM modules cannot support the challenge/response authentication mechanism needed in the presence of SMB password encryption. -

    Default: obey pam restrictions = no

    Remote CIFS Authentication using winbindd.so

    +

    Default: obey pam restrictions = no

    Remote CIFS Authentication using winbindd.so

    All operating systems depend on the provision of users credentials acceptable to the platform. Unix requires the provision of a user identifier (UID) as well as a group identifier (GID). These are both simple integer type numbers that are obtained from a password backend such @@ -401,7 +402,7 @@ Microsoft Active Directory Service (ADS) in so far as reduction of wide area net The rid to unix id database is the only location where the user and group mappings are stored by winbindd. If this file is deleted or corrupted, there is no way for winbindd to determine which user and group ids correspond to Windows NT user and group rids. -

    Password Synchronization using pam_smbpass.so

    +

    Password Synchronization using pam_smbpass.so

    pam_smbpass is a PAM module which can be used on conforming systems to keep the smbpasswd (Samba password) database in sync with the unix password file. PAM (Pluggable Authentication Modules) is an API supported @@ -412,21 +413,21 @@ This module authenticates a local smbpasswd user database. If you require support for authenticating against a remote SMB server, or if you're concerned about the presence of suid root binaries on your system, it is recommended that you use pam_winbind instead. -

    +

    Options recognized by this module are as follows: -

    Table25.1.Options recognized by pam_smbpass

    debuglog more debugging info
    auditlike debug, but also logs unknown usernames
    use_first_passdon't prompt the user for passwords; take them from PAM_ items instead
    try_first_passtry to get the password from a previous PAM module, fall back to prompting the user
    use_authtoklike try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)
    not_set_passdon't make passwords used by this module available to other modules.
    nodelaydon't insert ~1 second delays on authentication failure.
    nulloknull passwords are allowed.
    nonullnull passwords are not allowed. Used to override the Samba configuration.
    migrateonly meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.
    smbconf=filespecify an alternate path to the smb.conf file.

    -

    +

    Table25.1.Options recognized by pam_smbpass

    debuglog more debugging info
    auditlike debug, but also logs unknown usernames
    use_first_passdon't prompt the user for passwords; take them from PAM_ items instead
    try_first_passtry to get the password from a previous PAM module, fall back to prompting the user
    use_authtoklike try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)
    not_set_passdon't make passwords used by this module available to other modules.
    nodelaydon't insert ~1 second delays on authentication failure.
    nulloknull passwords are allowed.
    nonullnull passwords are not allowed. Used to override the Samba configuration.
    migrateonly meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.
    smbconf=filespecify an alternate path to the smb.conf file.
    + Thanks go to the following people: -

    Andrew Morgan, for providing the Linux-PAM +
    Andrew Morgan, for providing the Linux-PAM framework, without which none of this would have happened
    Christian Gafton and Andrew Morgan again, for the pam_pwdb module upon which pam_smbpass was originally based
    Luke Leighton for being receptive to the idea, and for the occasional good-natured complaint about the project's status - that keep me working on it :)

    . -

    + that keep me working on it :)

    . +

    The following are examples of the use of pam_smbpass.so in the format of Linux /etc/pam.d/ files structure. Those wishing to implement this tool on other platforms will need to adapt this appropriately. -

    Password Synchronisation Configuration

    +

    Password Synchronisation Configuration

    A sample PAM configuration that shows the use of pam_smbpass to make sure private/smbpasswd is kept in sync when /etc/passwd (/etc/shadow) is changed. Useful when an expired password might be changed by an @@ -442,7 +443,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so nullok use_authtok try_first_pass session required pam_unix.so -

    Password Migration Configuration

    +

    Password Migration Configuration

    A sample PAM configuration that shows the use of pam_smbpass to migrate from plaintext to encrypted passwords for Samba. Unlike other methods, this can be used for users who have never connected to Samba shares: @@ -461,7 +462,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password optional pam_smbpass.so nullok use_authtok try_first_pass session required pam_unix.so -

    Mature Password Configuration

    +

    Mature Password Configuration

    A sample PAM configuration for a 'mature' smbpasswd installation. private/smbpasswd is fully populated, and we consider it an error if the smbpasswd doesn't exist or doesn't match the Unix password. @@ -476,7 +477,7 @@ password requisite pam_cracklib.so retry=3 password requisite pam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so use_authtok use_first_pass session required pam_unix.so -

    Kerberos Password Integration Configuration

    +

    Kerberos Password Integration Configuration

    A sample PAM configuration that shows pam_smbpass used together with pam_krb5. This could be useful on a Samba PDC that is also a member of a Kerberos realm. @@ -492,13 +493,13 @@ password requisite pam_cracklib.so retry=3 password optional pam_smbpass.so nullok use_authtok try_first_pass password required pam_krb5.so use_authtok try_first_pass session required pam_krb5.so -

    Common Errors

    +

    Common Errors

    PAM can be a very fickle and sensitive to configuration glitches. Here we look at a few cases from the Samba mailing list. -

    pam_winbind problem

    +

    pam_winbind problem

    I have the following PAM configuration: -

    -

    +	
    
+
     auth required /lib/security/pam_securetty.so
 auth sufficient /lib/security/pam_winbind.so
 auth sufficient /lib/security/pam_unix.so use_first_pass nullok
@@ -507,8 +508,8 @@ auth required /lib/security/pam_nologin.so
 account required /lib/security/pam_stack.so service=system-auth
 account required /lib/security/pam_winbind.so
 password required /lib/security/pam_stack.so service=system-auth
-
    
-
    
+
    +

    When I open a new console with [ctrl][alt][F1], then I cant log in with my user "pitie". I've tried with user "scienceu+pitie" also.

    diff --git a/docs/htmldocs/passdb.html b/docs/htmldocs/passdb.html index 2c68f50c872..e627eb015f9 100644 --- a/docs/htmldocs/passdb.html +++ b/docs/htmldocs/passdb.html @@ -1,4 +1,5 @@ -Chapter11.Account Information Databases

    Chapter11.Account Information Databases
    PrevPartIII.Advanced ConfigurationNext

    Chapter11.Account Information Databases

    Jelmer R. Vernooij

    The Samba Team

    Gerald (Jerry) Carter

    Samba Team

    Jeremy Allison

    Samba Team

    John H. Terpstra

    Samba Team

    Olivier (lem) Lemaire

    IDEALX

    May 24, 2003

    Table of Contents

    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work

    + +Chapter11.Account Information Databases

    Chapter11.Account Information Databases
    PrevPartIII.Advanced ConfigurationNext

    Chapter11.Account Information Databases

    Jelmer R. Vernooij

    The Samba Team

    Gerald (Jerry) Carter

    Samba Team

    Jeremy Allison

    Samba Team

    John H. Terpstra

    Samba Team

    Olivier (lem) Lemaire

    IDEALX

    May 24, 2003

    Table of Contents

    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work

    Samba-3 implements a new capability to work concurrently with multiple account backends. The possible new combinations of password backends allows Samba-3 a degree of flexibility and scalability that previously could be achieved only with MS Windows Active Directory. @@ -16,7 +17,7 @@ deliver this functionality until a better method of recognising NT Group SIDs fr SIDs could be found. This feature may thus return during the life cycle for the Samba-3 series.

    Note

    Samba-3.0.0 does NOT support Non-Unix Account (NUA) operation. -

    Features and Benefits

    +

    Features and Benefits

    Samba-3 provides for complete backwards compatibility with Samba-2.2.x functionality as follows:

    Backwards Compatibility Backends

    Plain Text:

    @@ -93,7 +94,7 @@ Samba-3 introduces the following new password backend capabilities:

    nisplussam:

    The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with Sun NIS+ servers. -

    Technical Information

    +

    Technical Information

    Old windows clients send plain text passwords over the wire. Samba can check these passwords by crypting them and comparing them to the hash stored in the unix user database.

    @@ -111,7 +112,7 @@ Samba-3 introduces the following new password backend capabilities: information using a passdb backend. Commonly available backends are LDAP, plain text file, MySQL and nisplus. For more information, see the man page for smb.conf regarding the passdb backend parameter. -

    Important Notes About Security

    +

    Important Notes About Security

    The unix and SMB password encryption techniques seem similar on the surface. This similarity is, however, only skin deep. The unix scheme typically sends clear text passwords over the network when logging in. This is bad. The SMB encryption scheme @@ -153,7 +154,7 @@ Samba-3 introduces the following new password backend capabilities: (broken) only the cached (encrypted) password will be sent to the resource server to affect a auto-reconnect. If the resource server does not support encrypted passwords the auto-reconnect will fail. USE OF ENCRYPTED PASSWORDS IS STRONGLY ADVISED. -

    Advantages of Encrypted Passwords

    • Plain text passwords are not passed across +

      Advantages of Encrypted Passwords

      • Plain text passwords are not passed across the network. Someone using a network sniffer cannot just record passwords going to the SMB server.

      • Plain text passwords are not stored anywhere in memory or on disk.

      • WinNT doesn't like talking to a server @@ -164,11 +165,11 @@ Samba-3 introduces the following new password backend capabilities: only things you can do to stop this is to use SMB encryption.

      • Encrypted password support allows automatic share (resource) reconnects.

      • Encrypted passwords are essential for PDC/BDC - operation.

      Advantages of non-encrypted passwords

      • Plain text passwords are not kept + operation.

      Advantages of non-encrypted passwords

      • Plain text passwords are not kept on disk, and are NOT cached in memory.

      • Uses same password file as other unix services such as login and ftp

      • Use of other services (such as telnet and ftp) which send plain text passwords over the net, so sending them for SMB - isn't such a big deal.

    Mapping User Identifiers between MS Windows and Unix

    + isn't such a big deal.

    Mapping User Identifiers between MS Windows and Unix

    Every operation in Unix/Linux requires a user identifier (UID), just as in MS Windows NT4 / 200x this requires a Security Identifier (SID). Samba provides two means for mapping an MS Windows user to a Unix/Linux UID. @@ -183,13 +184,13 @@ Samba-3 introduces the following new password backend capabilities: idmap uid, idmap gid parameters in smb.conf. Please refer to the man page for information about these parameters. These parameters are essential when mapping users from a remote SAM server. -

    Account Management Tools

    +

    Account Management Tools

    Samba-3 provides two (2) tools for management of User and machine accounts. These tools are called smbpasswd and pdbedit. A third tool is under development but is NOT expected to ship in time for Samba-3.0.0. The new tool will be a TCL/TK GUI tool that looks much like the MS Windows NT4 Domain User Manager - hopefully this will be announced in time for the Samba-3.0.1 release. -

    The smbpasswd Command

    +

    The smbpasswd Command

    The smbpasswd utility is a utility similar to the passwd or yppasswd programs. It maintains the two 32 byte password fields in the passdb backend. @@ -205,18 +206,18 @@ be announced in time for the Samba-3.0.1 release. smbpasswd can be used to:

    add user or machine accounts
    delete user or machine accounts
    enable user or machine accounts
    disable user or machine accounts
    set to NULL user passwords
    manage interdomain trust accounts

    To run smbpasswd as a normal user just type: -

    - 

    +		
    
+		
     		$ smbpasswd
 		Old SMB password: secret
-		
    
+
    For secret type old value here - or hit return if there was no old password - 

    +		
     		New SMB Password: new secret
 		Repeat New SMB Password: new secret
-		
    
-		
    
+
    +

    If the old value does not match the current value stored for that user, or the two new values do not match each other, then the password will not be changed.

    @@ -235,7 +236,7 @@ be announced in time for the Samba-3.0.1 release.

    For more details on using smbpasswd refer to the man page (the definitive reference). -

    The pdbedit Command

    +

    The pdbedit Command

    pdbedit is a tool that can be used only by root. It is used to manage the passdb backend. pdbedit can be used to:

    add, remove or modify user accounts
    listing user accounts
    migrate user accounts

    @@ -271,27 +272,27 @@ be announced in time for the Samba-3.0.1 release. Password last set: Sat, 14 Dec 2002 14:37:03 GMT Password can change: Sat, 14 Dec 2002 14:37:03 GMT Password must change: Mon, 18 Jan 2038 20:14:07 GMT -

    Password Backends

    +

    Password Backends

    Samba-3 offers the greatest flexibility in backend account database design of any SMB/CIFS server technology available today. The flexibility is immediately obvious as one begins to explore this capability.

    It is possible to specify not only multiple different password backends, but even multiple backends of the same type. For example, to use two different tdbsam databases: -

    -

    +
    
+
     [globals]
 		passdb backend = tdbsam:/etc/samba/passdb.tdb, \
 		tdbsam:/etc/samba/old-passdb.tdb, guest
-
    
-
    Plain Text
    
+
    +

    Plain Text

    Older versions of Samba retrieved user information from the unix user database and eventually some other fields from the file /etc/samba/smbpasswd or /etc/smbpasswd. When password encryption is disabled, no SMB specific data is stored at all. Instead all operations are conducted via the way that the Samba host OS will access its /etc/passwd database. eg: On Linux systems that is done via PAM. -

    smbpasswd - Encrypted Password Database

    +

    smbpasswd - Encrypted Password Database

    Traditionally, when configuring encrypt passwords = yes in Samba's smb.conf file, user account information such as username, LM/NT password hashes, password change times, and account @@ -322,7 +323,7 @@ backends of the same type. For example, to use two different tdbsam databases: Samba-3 provides an enhanced set of passdb backends that overcome the deficiencies of the smbpasswd plain text database. These are tdbsam, ldapsam, and xmlsam. Of these ldapsam will be of most interest to large corporate or enterprise sites. -

    tdbsam

    Samba can store user and machine account data in a "TDB" (Trivial Database). +

    tdbsam

    Samba can store user and machine account data in a "TDB" (Trivial Database). Using this backend doesn't require any additional configuration. This backend is recommended for new installations that do not require LDAP.

    @@ -330,7 +331,7 @@ backends of the same type. For example, to use two different tdbsam databases: that have 250 or more users. Additionally, tdbsam is not capable of scaling for use in sites that require PDB/BDC implementations that requires replication of the account database. Clearly, for reason of scalability, the use of ldapsam should be encouraged. -

    ldapsam

    +

    ldapsam

    There are a few points to stress that the ldapsam does not provide. The LDAP support referred to in the this documentation does not include:

    • A means of retrieving user account information from @@ -358,16 +359,16 @@ backends of the same type. For example, to use two different tdbsam databases:

      • The Samba-PDC-LDAP-HOWTO maintained by Ignacio Coupeau.

      • The NT migration scripts from IDEALX that are geared to manage users and group in such a Samba-LDAP Domain Controller configuration. -

      Supported LDAP Servers

      +

    Supported LDAP Servers

    The LDAP ldapsam code has been developed and tested using the OpenLDAP 2.0 and 2.1 server and client libraries. The same code should work with Netscape's Directory Server and client SDK. However, there are bound to be compile errors and bugs. These should not be hard to fix. Please submit fixes via Bug reporting facility. -

    Schema and Relationship to the RFC 2307 posixAccount

    +

    Schema and Relationship to the RFC 2307 posixAccount

    Samba 3.0 includes the necessary schema file for OpenLDAP 2.0 in examples/LDAP/samba.schema. The sambaSamAccount objectclass is given here: -

    -

    +			
    
+
     objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY
     DESC 'Samba Auxiliary Account'
     MUST ( uid $ rid )
@@ -375,8 +376,8 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY
            logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
            displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
            description $ userWorkstations $ primaryGroupID $ domain ))
-
    
-
    
+
    +

    The samba.schema file has been formatted for OpenLDAP 2.0/2.1. The OID's are owned by the Samba Team and as such is legal to be openly published. If you translate the schema to be used with Netscape DS, please @@ -398,23 +399,23 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY and functioning correctly. This division of information makes it possible to store all Samba account information in LDAP, but still maintain UNIX account information in NIS while the network is transitioning to a full LDAP infrastructure. -

    OpenLDAP configuration

    +

    OpenLDAP configuration

    To include support for the sambaSamAccount object in an OpenLDAP directory server, first copy the samba.schema file to slapd's configuration directory. The samba.schema file can be found in the directory examples/LDAP in the samba source distribution. -

    -

    +			
    
+
     root# cp samba.schema /etc/openldap/schema/
-
    
-
    
+
    +

    Next, include the samba.schema file in slapd.conf. The sambaSamAccount object contains two attributes which depend upon other schema files. The 'uid' attribute is defined in cosine.schema and the 'displayName' attribute is defined in the inetorgperson.schema file. Both of these must be included before the samba.schema file. -

    -

    +			
    
+
     ## /etc/openldap/slapd.conf
 
 ## schema files (core.schema is required by default)
@@ -426,13 +427,13 @@ include            /etc/openldap/schema/inetorgperson.schema
 include            /etc/openldap/schema/samba.schema
 include            /etc/openldap/schema/nis.schema
 ....
-
    
-
    
+
    +

    It is recommended that you maintain some indices on some of the most useful attributes, like in the following example, to speed up searches made on sambaSamAccount objectclasses (and possibly posixAccount and posixGroup as well). -

    -

    +		
    
+
     # Indices to maintain
 ## required by OpenLDAP
 index objectclass             eq
@@ -454,25 +455,25 @@ index   sambaSID              eq
 index   sambaPrimaryGroupSID  eq
 index   sambaDomainName       eq
 index   default               sub
-
    
-
    
+
    +

    Create the new index by executing: -

    -

    +		
    
+
     ./sbin/slapindex -f slapd.conf
-
    
-
    
+
    +

    Remember to restart slapd after making these changes: -

    -

    +		
    
+
     root# /etc/init.d/slapd restart
-
    
-

    Initialise the LDAP database

    + +

    Initialise the LDAP database

    Before you can add accounts to the LDAP database you must create the account containers that they will be stored in. The following LDIF file should be modified to match your needs (ie: Your DNS entries, etc.). -

    -

    +		
    
+
     # Organization for Samba Base
 dn: dc=plainjoe,dc=org
 objectclass: dcObject
@@ -500,26 +501,26 @@ objectclass: top
 objectclass: organizationalRole
 objectclass: simpleSecurityObject
 userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
-
    
-
    
+
    +

    The userPassword shown above should be generated using slappasswd.

    The following command will then load the contents of the LDIF file into the LDAP database. -

    -

    +		
    
+
     $ slapadd -v -l initldap.dif
-
    
-
    
+
    +

    Do not forget to secure your LDAP server with an adequate access control list, as well as an admin password. -

    Note

    +

    Note

    Before Samba can access the LDAP server you need to store the LDAP admin password into the Samba-3 secrets.tdb database by: - 

    +		
     root#  smbpasswd -w secret
-		
    
-

    Configuring Samba

    + +

    Configuring Samba

    The following parameters are available in smb.conf only if your version of samba was built with LDAP support. Samba automatically builds with LDAP support if the LDAP libraries are found. @@ -527,8 +528,8 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz These are described in the smb.conf man page and so will not be repeated here. However, a sample smb.conf file for use with an LDAP directory could appear as -

    -

    +			
    
+
     ## /usr/local/samba/lib/smb.conf
 [global]
      security = user
@@ -570,8 +571,8 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
 
      # generally the default ldap search filter is ok
      # ldap filter = "(&(uid=%u)(objectclass=sambaSamAccount))"
-
    
-

    Accounts and Groups management

    + +

    Accounts and Groups management

    As users accounts are managed through the sambaSamAccount objectclass, you should modify your existing administration tools to deal with sambaSamAccount attributes.

    @@ -587,7 +588,7 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz groups. This means that Samba makes use of the posixGroup objectclass. For now, there is no NT-like group system management (global and local groups). -

    Security and sambaSamAccount

    +

    Security and sambaSamAccount

    There are two important points to remember when discussing the security of sambaSamAccount entries in the directory.

    • Never retrieve the lmPassword or @@ -613,17 +614,17 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz The second security precaution is to prevent non-administrative users from harvesting password hashes from the directory. This can be done using the following ACL in slapd.conf: -

      -

      +			
      
+
       ## allow the "ldap admin dn" access, but deny everyone else
 access to attrs=lmPassword,ntPassword
      by dn="cn=Samba Admin,ou=people,dc=plainjoe,dc=org" write
      by * none
-
      
-

    LDAP special attributes for sambaSamAccounts

    + +

    LDAP special attributes for sambaSamAccounts

    The sambaSamAccount objectclass is composed of the following attributes: -

    -

    Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)

    lmPasswordthe LANMAN password 16-byte hash stored as a character +

    +

    Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)

    lmPasswordthe LANMAN password 16-byte hash stored as a character representation of a hexadecimal string.
    ntPasswordthe NT password hash 16-byte stored as a character representation of a hexadecimal string.
    pwdLastSetThe integer time in seconds since 1970 when the lmPassword and ntPassword attributes were last set. @@ -646,8 +647,8 @@ access to attrs=lmPassword,ntPassword
    userWorkstationcharacter string value currently unused.
    ridthe integer representation of the user's relative identifier (RID).
    primaryGroupIDthe relative identifier (RID) of the primary group - of the user.
    domaindomain the user is part of.

    -

    + of the user.

    domaindomain the user is part of.
    +

    The majority of these parameters are only used when Samba is acting as a PDC of a domain (refer to the Samba as a primary domain controller chapter for details on how to configure Samba as a Primary Domain Controller). The following four attributes @@ -663,10 +664,10 @@ access to attrs=lmPassword,ntPassword of the logon home parameter is used in its place. Samba will only write the attribute value to the directory entry if the value is something other than the default (e.g. \\MOBY\becky). -

    Example LDIF Entries for a sambaSamAccount

    +

    Example LDIF Entries for a sambaSamAccount

    The following is a working LDIF with the inclusion of the posixAccount objectclass: -

    - 

    +			
    
+	
     	dn: uid=guest2, ou=people,dc=plainjoe,dc=org
 	ntPassword: 878D8014606CDA29677A44EFA1353FC7
 	pwdMustChange: 2147483647
@@ -681,12 +682,12 @@ access to attrs=lmPassword,ntPassword
 	logoffTime: 2147483647
 	rid: 19006
 	pwdCanChange: 0
-	
    
-	
    
+
    +

    The following is an LDIF entry for using both the sambaSamAccount and posixAccount objectclasses: -

    - 

    +			
    
+	
     	dn: uid=gcarter, ou=people,dc=plainjoe,dc=org
 	logonTime: 0
 	displayName: Gerald Carter
@@ -709,53 +710,53 @@ access to attrs=lmPassword,ntPassword
 	pwdCanChange: 0
 	pwdMustChange: 2147483647
 	ntPassword: 878D8014606CDA29677A44EFA1353FC7
-
    
-

    Password synchronisation

    + +

    Password synchronisation

    Since version 3.0 samba can update the non-samba (LDAP) password stored with an account. When using pam_ldap, this allows changing both unix and windows passwords at once.

    The ldap passwd sync options can have the following values:

    yes

    When the user changes his password, update ntPassword, lmPassword and the password fields.

    no

    Only update ntPassword and lmPassword.

    only

    Only update the LDAP password and let the LDAP server worry about the other fields. This option is only available when the LDAP server supports LDAP_EXOP_X_MODIFY_PASSWD.

    More information can be found in the smb.conf manpage. -

    MySQL

    +

    MySQL

    Every so often someone will come along with a great new idea. Storing of user accounts in an SQL backend is one of them. Those who want to do this are in the best position to know what the specific benefits are to them. This may sound like a cop-out, but in truth we can not attempt to document every nitty little detail why certain things of marginal utility to the bulk of Samba users might make sense to the rest. In any case, the following instructions should help the determined SQL user to implement a working system. -

    Creating the database

    +

    Creating the database

    You either can set up your own table and specify the field names to pdb_mysql (see below for the column names) or use the default table. The file examples/pdb/mysql/mysql.dump contains the correct queries to create the required tables. Use the command : - 

    $ mysql -uusername -hhostname -ppassword \
-databasename < /path/to/samba/examples/pdb/mysql/mysql.dump

    -

    Configuring

    This plugin lacks some good documentation, but here is some short info:

    Add a the following to the passdb backend variable in your smb.conf: - 

    +			
    $ mysql -uusername -hhostname -ppassword \
+databasename < /path/to/samba/examples/pdb/mysql/mysql.dump
    
+

    Configuring

    This plugin lacks some good documentation, but here is some short info:

    Add a the following to the passdb backend variable in your smb.conf: + 
     			passdb backend = [other-plugins] mysql:identifier [other-plugins]
-

    -

    The identifier can be any string you like, as long as it doesn't collide with + +

    The identifier can be any string you like, as long as it doesn't collide with the identifiers of other plugins or other instances of pdb_mysql. If you specify multiple pdb_mysql.so entries in passdb backend, you also need to use different identifiers!

    Additional options can be given through the smb.conf file in the [global] section. -

    -

    Table11.2.Basic smb.conf options for MySQL passdb backend

    FieldContents
    identifier:mysql hosthost name, defaults to 'localhost'
    identifier:mysql password
    identifier:mysql userdefaults to 'samba'
    identifier:mysql databasedefaults to 'samba'
    identifier:mysql portdefaults to 3306
    identifier:tableName of the table containing users

    -

    Warning

    +

    +

    Table11.2.Basic smb.conf options for MySQL passdb backend

    FieldContents
    identifier:mysql hosthost name, defaults to 'localhost'
    identifier:mysql password
    identifier:mysql userdefaults to 'samba'
    identifier:mysql databasedefaults to 'samba'
    identifier:mysql portdefaults to 3306
    identifier:tableName of the table containing users
    +

    Warning

    Since the password for the MySQL user is stored in the smb.conf file, you should make the the smb.conf file readable only to the user that runs Samba This is considered a security bug and will be fixed soon. -

    Names of the columns in this table (I've added column types those columns should have first):

    -

    Table11.3.MySQL field names for MySQL passdb backend

    FieldTypeContents
    identifier:logon time columnint(9)
    identifier:logoff time columnint(9)
    identifier:kickoff time columnint(9)
    identifier:pass last set time columnint(9)
    identifier:pass can change time columnint(9)
    identifier:pass must change time columnint(9)
    identifier:username columnvarchar(255)unix username
    identifier:domain columnvarchar(255)NT domain user is part of
    identifier:nt username columnvarchar(255)NT username
    identifier:fullname columnvarchar(255)Full name of user
    identifier:home dir columnvarchar(255)Unix homedir path
    identifier:dir drive columnvarchar(2)Directory drive path (eg: 'H:')
    identifier:logon script columnvarchar(255)Batch file to run on client side when logging on
    identifier:profile path columnvarchar(255)Path of profile
    identifier:acct desc columnvarchar(255)Some ASCII NT user data
    identifier:workstations columnvarchar(255)Workstations user can logon to (or NULL for all)
    identifier:unknown string columnvarchar(255)unknown string
    identifier:munged dial columnvarchar(255)?
    identifier:user sid columnvarchar(255)NT user SID
    identifier:group sid columnvarchar(255)NT group ID
    identifier:lanman pass columnvarchar(255)encrypted lanman password
    identifier:nt pass columnvarchar(255)encrypted nt passwd
    identifier:plain pass columnvarchar(255)plaintext password
    identifier:acct control columnint(9)nt user data
    identifier:unknown 3 columnint(9)unknown
    identifier:logon divs columnint(9)?
    identifier:hours len columnint(9)?
    identifier:unknown 5 columnint(9)unknown
    identifier:unknown 6 columnint(9)unknown

    -

    +

    Names of the columns in this table (I've added column types those columns should have first):

    +

    Table11.3.MySQL field names for MySQL passdb backend

    FieldTypeContents
    identifier:logon time columnint(9)
    identifier:logoff time columnint(9)
    identifier:kickoff time columnint(9)
    identifier:pass last set time columnint(9)
    identifier:pass can change time columnint(9)
    identifier:pass must change time columnint(9)
    identifier:username columnvarchar(255)unix username
    identifier:domain columnvarchar(255)NT domain user is part of
    identifier:nt username columnvarchar(255)NT username
    identifier:fullname columnvarchar(255)Full name of user
    identifier:home dir columnvarchar(255)Unix homedir path
    identifier:dir drive columnvarchar(2)Directory drive path (eg: 'H:')
    identifier:logon script columnvarchar(255)Batch file to run on client side when logging on
    identifier:profile path columnvarchar(255)Path of profile
    identifier:acct desc columnvarchar(255)Some ASCII NT user data
    identifier:workstations columnvarchar(255)Workstations user can logon to (or NULL for all)
    identifier:unknown string columnvarchar(255)unknown string
    identifier:munged dial columnvarchar(255)?
    identifier:user sid columnvarchar(255)NT user SID
    identifier:group sid columnvarchar(255)NT group ID
    identifier:lanman pass columnvarchar(255)encrypted lanman password
    identifier:nt pass columnvarchar(255)encrypted nt passwd
    identifier:plain pass columnvarchar(255)plaintext password
    identifier:acct control columnint(9)nt user data
    identifier:unknown 3 columnint(9)unknown
    identifier:logon divs columnint(9)?
    identifier:hours len columnint(9)?
    identifier:unknown 5 columnint(9)unknown
    identifier:unknown 6 columnint(9)unknown
    +

    Eventually, you can put a colon (:) after the name of each column, which should specify the column to update when updating the table. You can also specify nothing behind the colon - then the data from the field will not be updated. -

    Using plaintext passwords or encrypted password

    +

    Using plaintext passwords or encrypted password

    I strongly discourage the use of plaintext passwords, however, you can use them:

    If you would like to use plaintext passwords, set @@ -765,7 +766,7 @@ access to attrs=lmPassword,ntPassword

    If you use encrypted passwords, set the 'identifier:plain pass column' to 'NULL' (without the quotes). This is the default. -

    Getting non-column data from the table

    +

    Getting non-column data from the table

    It is possible to have not all data in the database and making some 'constant'.

    For example, you can set 'identifier:fullname column' to : @@ -780,30 +781,30 @@ access to attrs=lmPassword,ntPassword

    To import data, use: $ pdbedit -i xml:filename -

    Common Errors

    Users can not logon - Users not in Samba SAM

    +

    Common Errors

    Users can not logon - Users not in Samba SAM

    People forget to put their users in their backend and then complain Samba won't authorize them. -

    Users are being added to the wrong backend database

    +

    Users are being added to the wrong backend database

    A few complaints have been received from users that just moved to Samba-3. The following smb.conf file entries were causing problems, new accounts were being added to the old smbpasswd file, not to the tdbsam passdb.tdb file: -

    - 

    +	
    
+	
     	[globals]
 		...
 		passdb backend = smbpasswd, tdbsam, guest
 		...
-	
    
-	
    
+
    +

    Samba will add new accounts to the first entry in the passdb backend parameter entry. If you want to update to the tdbsam, then change the entry to: -

    - 

    +	
    
+	
     	[globals]
 		...
 		passdb backend = tdbsam, smbpasswd, guest
 		...
-	
    
-

    auth methods does not work

    + +

    auth methods does not work

    If you explicitly set an 'auth methods' parameter, guest must be specified as the first entry on the line. Eg: auth methods = guest sam.

    diff --git a/docs/htmldocs/pdbedit.8.html b/docs/htmldocs/pdbedit.8.html index 368a6911b77..54068305a17 100644 --- a/docs/htmldocs/pdbedit.8.html +++ b/docs/htmldocs/pdbedit.8.html @@ -65,14 +65,14 @@ samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:BC281CE3F53B6A5146629CD4751D3490:[UX rid.

    Example: -U S-1-5-21-2447931902-1787058256-3961074038-5004

    -c account-control

    This option can be used while adding or modifying a user account. It will specify the users' account control property. Possible flags that can be set are: N, D, H, L, X. -

    Example: -c "[X ]"

    -a

    This option is used to add a user into the +

    Example: -c "[X ]"

    -a

    This option is used to add a user into the database. This command needs a user name specified with the -u switch. When adding a new user, pdbedit will also - ask for the password to be used.

    Example: pdbedit -a -u sorce -

    new password:
+		ask for the password to be used.
    Example: pdbedit -a -u sorce
+
    new password:
 retype new password
-
    
-
    -r

    This option is used to modify an existing user + +

    -r

    This option is used to modify an existing user in the database. This command needs a user name specified with the -u switch. Other options can be specified to modify the properties of the specified user. This flag is kept for backwards compatibility, but diff --git a/docs/htmldocs/printing.html b/docs/htmldocs/printing.html index 089bba6e0f7..578e0783717 100644 --- a/docs/htmldocs/printing.html +++ b/docs/htmldocs/printing.html @@ -1,7 +1,8 @@ -Chapter18.Classical Printing Support

    Chapter18.Classical Printing Support
    PrevPartIII.Advanced ConfigurationNext

    Chapter18.Classical Printing Support

    Kurt Pfeifle

    Danka Deutschland GmbH

    Gerald (Jerry) Carter

    Samba Team

    May 32, 2003

    Table of Contents

    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with -rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install -Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a -different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost

    Features and Benefits

    + +Chapter18.Classical Printing Support

    Chapter18.Classical Printing Support
    PrevPartIII.Advanced ConfigurationNext

    Chapter18.Classical Printing Support

    Kurt Pfeifle

    Danka Deutschland GmbH

    Gerald (Jerry) Carter

    Samba Team

    May 32, 2003

    Table of Contents

    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with +rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Install +Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a +different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost

    Features and Benefits

    Printing is often a mission-critical service for the users. Samba can provide this service reliably and seamlessly for a client network consisting of Windows workstations. @@ -37,7 +38,7 @@ Professional clients. Where this document describes the responses to commands given, bear in mind that Windows 2000 clients are very similar, but may differ in details. Windows NT is somewhat different again. -

    Technical Introduction

    +

    Technical Introduction

    Samba's printing support always relies on the installed print subsystem of the Unix OS it runs on. Samba is a "middleman". It takes printfiles from Windows (or other SMB) clients and passes them to the @@ -52,10 +53,10 @@ the next chapter covers in great detail the more modern Common UNIX Printing System (CUPS). -

    Important

    CUPS users, be warned: don't just jump on to the next +

    Important

    CUPS users, be warned: don't just jump on to the next chapter. You might miss important information contained only -here!

    -

    What happens if you send a Job from a Client

    +here!

    +

    What happens if you send a Job from a Client

    To successfully print a job from a Windows client via a Samba print server to a UNIX printer, there are 6 (potentially 7) stages: @@ -63,7 +64,7 @@ stages: into Samba's spooling area

  • Windows closes the connection again

  • Samba invokes the print command to hand the file over to the UNIX print subsystem's spooling area

  • The Unix print subsystem processes the print job

  • The printfile may need to be explicitly deleted -from the Samba spooling area.

    • Printing Related Configuration Parameters

    +from the Samba spooling area.

    Printing Related Configuration Parameters

    There are a number of configuration parameters in controlling Samba's printing behaviour. Please also refer to the man page for smb.conf to @@ -77,20 +78,20 @@ behaviour of all individual or service level shares (provided those don't have a different setting defined for the same parameter, thus overriding the global default).

    Global Parameters

    These may not go into individual shares. If they go in by error, the "testparm" utility can discover -this (if you run it) and tell you so.

    Parameters Recommended for Use

    The following smb.conf parameters directly +this (if you run it) and tell you so.

    Parameters Recommended for Use

    The following smb.conf parameters directly related to printing are used in Samba-3. See also the smb.conf man page for detailed explanations: -

    List of printing related parameters in Samba-3. -

    Global level parameters:

    • addprinter command (G)

    • deleteprinter command (G)

    • disable spoolss (G)

    • enumports command (G)

    • load printers (G)

    • lpq cache time (G)

    • os2 driver map (G)

    • printcap name (G), printcap (G)

    • show add printer wizard (G)

    • total print jobs (G)

    • use client driver (G)

    +

    List of printing related parameters in Samba-3. +

    Global level parameters:

    • addprinter command (G)

    • deleteprinter command (G)

    • disable spoolss (G)

    • enumports command (G)

    • load printers (G)

    • lpq cache time (G)

    • os2 driver map (G)

    • printcap name (G), printcap (G)

    • show add printer wizard (G)

    • total print jobs (G)

    • use client driver (G)

    -

    Service level parameters:

    • hosts allow (S)

    • hosts deny (S)

    • lppause command (S)

    • lpq command (S)

    • lpresume command (S)

    • lprm command (S)

    • max print jobs (S)

    • min print space (S)

    • print command (S)

    • printable (S), print ok (S)

    • printer name (S), printer (S)

    • printer admin (S)

    • printing = [cups|bsd|lprng...] (S)

    • queuepause command (S)

    • queueresume command (S)

    • total print jobs (S)

    -

    +

    Service level parameters:

    • hosts allow (S)

    • hosts deny (S)

    • lppause command (S)

    • lpq command (S)

    • lpresume command (S)

    • lprm command (S)

    • max print jobs (S)

    • min print space (S)

    • print command (S)

    • printable (S), print ok (S)

    • printer name (S), printer (S)

    • printer admin (S)

    • printing = [cups|bsd|lprng...] (S)

    • queuepause command (S)

    • queueresume command (S)

    • total print jobs (S)

    +

    Samba's printing support implements the Microsoft Remote Procedure Calls (MS-RPC) methods for printing. These are used by Windows NT (and later) print servers. The old "LanMan" protocol is still supported as a fallback resort, and for older clients to use. More details will follow further beneath. -

    Parameters for Backwards Compatibility

    +

    Parameters for Backwards Compatibility

    Two new parameters that were added in Samba 2.2.2, are still present in Samba-3.0. Both of these options are described in the smb.conf man page and are disabled by @@ -100,19 +101,19 @@ provided for better support of Samba 2.0.x backwards capability. It will disable Samba's support for MS-RPC printing and yield identical printing behaviour to Samba 2.0.x.

    use client driver (G)

    was provided for using local printer drivers on Windows NT/2000 clients. It does -not apply to Windows 95/98/ME clients.

    Parameters "for backward compatibility only", use with caution. -

    • disable spoolss (G)

    • use client driver (S)

    -

    Parameters no longer in use

    +not apply to Windows 95/98/ME clients.

    Parameters "for backward compatibility only", use with caution. +

    • disable spoolss (G)

    • use client driver (S)

    +

    Parameters no longer in use

    Samba users upgrading from 2.2.x to 3.0 need to be aware that some previously available settings are no longer supported (as was announced some time ago). Here is a list of them: -

    "old" parameters, removed in Samba-3. +

    "old" parameters, removed in Samba-3. The following smb.conf parameters have been deprecated already in Samba 2.2 and are now completely removed from Samba-3. You cannot use them in new 3.0 installations: -

    • printer driver file (G)

    • total print jobs (G)

    • postscript (S)

    • printer driver (S)

    • printer driver location (S)

    -

    A simple Configuration to Print with Samba-3

    +

    • printer driver file (G)

    • total print jobs (G)

    • postscript (S)

    • printer driver (S)

    • printer driver location (S)

    +

    A simple Configuration to Print with Samba-3

    Here is a very simple example configuration for print related settings in the file. If you compare it with your own system's , you probably find some @@ -147,7 +148,7 @@ reminder: It even tolerates some spelling errors (like "browsable" instead of "browseable"). Most spelling is case-insensitive. Also, you can use "Yes|No" or "True|False" for boolean settings. Lists of names may be separated by commas, spaces or tabs. -

    Verification of "Settings in Use" with testparm

    +

    Verification of "Settings in Use" with testparm

    To see all (or at least most) printing related settings in Samba, including the implicitly used ones, try the command outlined below (hit "ENTER" twice!). It greps for all occurrences of "lp", "print", @@ -201,7 +202,7 @@ be important in your future dealings with Samba.

    Note

    testparm in Samba-3.0 behaves differently from 2.2.x: used without the "-v" switch it only shows you the settings actually written into ! To see the complete -configuration used, add the "-v" parameter to testparm.

    A little Experiment to warn you

    +configuration used, add the "-v" parameter to testparm.

    A little Experiment to warn you

    Should you need to troubleshoot at any stage, please always come back to this point first and verify if "testparm" shows the parameters you expect! To give you an example from personal experience as a warning, @@ -310,7 +311,7 @@ printing = lprng #This defines LPRng as the printing system" will regard the whole of the string after the "=" sign as the value you want to define. And this is an invalid value that will be ignored, and a default value used instead.] -

    Extended Sample Configuration to Print with Samba-3

    +

    Extended Sample Configuration to Print with Samba-3

    Here we show a more verbose example configuration for print related settings in an . Below is a discussion and explanation of the various parameters. We chose to use BSD-style @@ -368,9 +369,9 @@ default, because these have been compiled in. To see all settings, let root use the testparm utility. testparm also gives warnings if you have mis-configured certain things.. -

    Detailed Explanation of the Example's Settings

    +

    Detailed Explanation of the Example's Settings

    Following is a discussion of the settings from above shown example. -

    The [global] Section

    +

    The [global] Section

    The [global] section is one of 4 special sections (along with [[homes], [printers] and @@ -444,7 +445,7 @@ It must not be enabled on print shares (with a yes or true setting) which have valid drivers installed on the Samba server! For more detailed explanations see the man page of smb.conf. -

    The [printers] Section

    +

    The [printers] Section

    This is the second special section. If a section with this name appears in the smb.conf, users are able to connect to any printer specified in the Samba host's printcap file, @@ -504,7 +505,7 @@ write to the directory (if user privileges allow the connection), but only via print spooling operations. "Normal" write operations are not allowed.

    writeable = no

    synonym for read only = yes -

    Any [my_printer_name] Section

    +

    Any [my_printer_name] Section

    If a section appears in the , which is tagged as printable = yes, Samba presents it as a printer share to its clients. Note, that Win95/98/ME clients may @@ -539,7 +540,7 @@ belong to the "allowed subnets"). As you can see, you could name IP addresses as well as NetBIOS hostnames here.

    guest ok = no

    this printer is not open for the guest account! -

    Print Commands

    +

    Print Commands

    In each section defining a printer (or in the [printers] section), a print command parameter may be defined. It sets a command to @@ -557,7 +558,7 @@ your own print commands (or even develop print command shell scripts), make sure you pay attention to the need to remove the files from the Samba spool directory. Otherwise your hard disk may soon suffer from shortage of free space. -

    Default Print Commands for various Unix Print Subsystems

    +

    Default Print Commands for various Unix Print Subsystems

    You learned earlier on, that Samba in most cases uses its built-in settings for many parameters if it can not find an explicitly stated one in its configuration file. The same is true for the @@ -597,7 +598,7 @@ check which command takes effect. Then check that this command is adequate and actually works for your installed print subsystem. It is always a good idea to explicitly set up your configuration files the way you want them to work and not rely on any built-in defaults. -

    Setting up your own Print Commands

    +

    Setting up your own Print Commands

    After a print job has finished spooling to a service, the print command will be used by Samba via a system() call to process the spool file. Usually @@ -667,7 +668,7 @@ for the print command parameter varies dependi the printing parameter. Another example is: 

      print command = /usr/local/samba/bin/myprintscript %p %s
-

    Innovations in Samba Printing since 2.2

    +

    Innovations in Samba Printing since 2.2

    Before version 2.2.0, Samba's print server support for Windows clients was limited to the level of LanMan printing calls. This is the same protocol level as Windows 9x PCs offer when @@ -708,7 +709,7 @@ default permissions assigned by Windows NT to a printer gives the "Print" permissions to the well-known Everyone group. (The older clients of type Win9x can only print to "shared" printers). -

    Client Drivers on Samba Server for Point'n'Print

    +

    Client Drivers on Samba Server for Point'n'Print

    There is still confusion about what all this means: Is it or is it not a requirement for printer drivers to be installed on a Samba host in order to support printing from Windows clients? The @@ -746,7 +747,7 @@ by Samba. The clients use these drivers to generate print files in the format the printer (or the Unix print system) requires. Print files received by Samba are handed over to the Unix printing system, which is responsible for all further processing, if needed. -

    The [printer$] Section is removed from Samba-3

    +

    The [printer$] Section is removed from Samba-3

    [print$] vs. [printer$] . Versions of Samba prior to 2.2 made it possible to use a share @@ -772,7 +773,7 @@ access (in the context of its ACLs) in order to support printer driver down- and uploads. Don't fear -- this does not mean Windows 9x clients are thrown aside now. They can use Samba's [print$] share support just fine. -

    Creating the [print$] Share

    +

    Creating the [print$] Share

    In order to support the up- and downloading of printer driver files, you must first configure a file share named [print$]. The "public" name of this share is @@ -806,7 +807,7 @@ with appropriate values for your site):

    Of course, you also need to ensure that the directory named by the path parameter exists on the Unix file system. -

    Parameters in the [print$] Section

    +

    Parameters in the [print$] Section

    [print$] is a special section in . It contains settings relevant to potential printer driver download and local installation by clients. @@ -851,7 +852,7 @@ sure these accounts can copy files to the share. If this is a non-root account, then the account should also be mentioned in the global printer admin parameter. See the man page for more information on -configuring file shares.

    Subdirectory Structure in [print$]

    +configuring file shares.

    Subdirectory Structure in [print$]

    In order for a Windows NT print server to support the downloading of driver files by multiple client architectures, you must create several subdirectories within the [print$] service @@ -890,7 +891,7 @@ client workstation. Open Network Neighbourhood or Once you have located the server, navigate to its Printers and Faxes folder. You should see an initial listing of printers that matches the printer shares defined on your Samba host. -

    Installing Drivers into [print$]

    +

    Installing Drivers into [print$]

    You have successfully created the [print$] share in ? And Samba has re-read its configuration? Good. But you are not yet ready to take off. The @@ -908,7 +909,7 @@ Properties and Add Printer Wizard

    The latter option is probably the easier one (even if the only entrance to this realm seems a little bit weird at first). -

    Setting Drivers for existing Printers with a Client GUI

    +

    Setting Drivers for existing Printers with a Client GUI

    The initial listing of printers in the Samba host's Printers folder accessed from a client's Explorer will have no real printer driver assigned to them. By default, in @@ -954,7 +955,7 @@ Assuming you have connected with an administrative (or root) account you will also be able to modify other printer properties such as ACLs and default device settings using this dialog. For the default device settings, please consider the advice given further below. -

    Setting Drivers for existing Printers with +

    Setting Drivers for existing Printers with rpcclient

    The second way to install printer drivers into [print$] and set them up in a valid way can be @@ -969,7 +970,7 @@ time with the setdriver subcommand.

    We will provide detailed hints for each of these steps in the next few paragraphs. -

    Identifying the Driver Files

    +

    Identifying the Driver Files

    To find out about the driver files, you have two options: you could investigate the driver CD which comes with your printer. Study the *.inf file on the CD, if it is contained. This @@ -1072,7 +1073,7 @@ Windows 2000 changed this. While it still can use the Kernel Mode drivers (if this is enabled by the Admin), its native mode for printer drivers is User Mode execution. This requires drivers designed for this. These type of drivers install into the "3" subdirectory. -

    Collecting the Driver Files from a Windows Host's +

    Collecting the Driver Files from a Windows Host's [print$] Share

    Now we need to collect all the driver files we identified. in our previous step. Where do we get them from? Well, why not retrieve them @@ -1108,7 +1109,7 @@ files for these architectures are in the WIN40/0/ subdir. Once we are complete, we can run smbclient ... put to store the collected files on the Samba server's [print$] share. -

    Depositing the Driver Files into [print$]

    +

    Depositing the Driver Files into [print$]

    So, now we are going to put the driver files into the [print$] share. Remember, the UNIX path to this share has been defined previously in your @@ -1169,7 +1170,7 @@ re-location will automatically be done by the don't forget to also put the files for the Win95/98/ME architecture into the WIN40/ subdirectory should you need them). -

    Check if the Driver Files are there (with smbclient)

    +

    Check if the Driver Files are there (with smbclient)

    For now we verify that our files are there. This can be done with smbclient too (but of course you can log in via SSH also and do this through a standard UNIX shell access too): @@ -1222,7 +1223,7 @@ Point'n'Print. The reason is: Samba doesn't know yet that these files are something special, namely printer driver files and it doesn't know yet to which print queue(s) these driver files belong. -

    Running rpcclient with +

    Running rpcclient with adddriver

    So, next you must tell Samba about the special category of the files you just uploaded into the [print$] share. This @@ -1257,7 +1258,7 @@ files successfully, but render the driver unworkable. So take care! Hints about the syntax of the adddriver command are in the man page. The CUPS printing chapter of this HOWTO collection provides a more detailed description, if you should need it. -

    Check how Driver Files have been moved after +

    Check how Driver Files have been moved after adddriver finished

    One indication for Samba's recognition of the files as driver files is the successfully installed message. @@ -1305,7 +1306,7 @@ subdirectory. You can check this again with

    Another verification is that the timestamp of the printing TDB files is now updated (and possibly their filesize has increased). -

    Check if the Driver is recognized by Samba

    +

    Check if the Driver is recognized by Samba

    Now the driver should be registered with Samba. We can easily verify this, and will do so in a moment. However, this driver is not yet associated with a particular @@ -1349,7 +1350,7 @@ time. Our new driver only shows up for Windows NT 4.0 or 2000. To have it present for Windows 95, 98 and ME you'll have to repeat the whole procedure with the WIN40 architecture and subdirectory. -

    A side note: you are not bound to specific driver names

    +

    A side note: you are not bound to specific driver names

    You can name the driver as you like. If you repeat the adddriver step, with the same files as before, but with a different driver name, it will work the same: @@ -1383,7 +1384,7 @@ repeatedly. Each run "consumes" the files you had put into the respective subdirectories. So you must precede an smbclient ... put command before each rpcclient ... adddriver" command. -

    La Grande Finale: Running rpcclient with +

    La Grande Finale: Running rpcclient with setdriver

    Samba still needs to know which printer's driver this is. It needs to create a mapping of the driver to a printer, and @@ -1413,13 +1414,13 @@ known to Samba already. A bug in 2.2.x prevented Samba from recognizing freshly installed printers. You had to restart Samba, or at least send a HUP signal to all running smbd processes to work around this: -kill -HUP `pidof smbd`.

    "The Proof of the Pudding lies in the Eating" (Client Driver Install +kill -HUP `pidof smbd`.

    "The Proof of the Pudding lies in the Eating" (Client Driver Install Procedure)

    A famous philosopher said once: “The Proof of the Pudding lies in the Eating”. The proof for our setup lies in the printing. So let's install the printer driver onto the client PCs. This is not as straightforward as it may seem. Read on. -

    The first Client Driver Installation

    +

    The first Client Driver Installation

    Especially important is the installation onto the first client PC (for each architectural platform separately). Once this is done correctly, all further clients are easy to setup and shouldn't need further @@ -1462,7 +1463,7 @@ Data" set is still incomplete.

    You must now make sure that a valid "Device Mode" is set for the driver. Don't fear -- we will explain now what that means. -

    IMPORTANT! Setting Device Modes on new Printers

    +

    IMPORTANT! Setting Device Modes on new Printers

    In order for a printer to be truly usable by a Windows NT/2K/XP client, it must possess:

    • a valid Device Mode generated by @@ -1534,7 +1535,7 @@ properties. Others may crash the client's spooler service. So use this parameter with caution. It is always better to have the client generate a valid device mode for the printer and store it on the server for you. -

    Further Client Driver Install Procedures

    +

    Further Client Driver Install Procedures

    Every further driver may be done by any user, along the lines described above: Browse network, open printers folder on Samba server, right-click printer and choose Connect.... Once @@ -1554,7 +1555,7 @@ rundll32 shell32.dll,Control_RunDLL MAIN.CPL @2 You can enter the commands either inside a DOS box window or in the Run command... field from the Start menu. -

    Always make first Client Connection as root or "printer admin"

    +

    Always make first Client Connection as root or "printer admin"

    After you installed the driver on the Samba server (in its [print$] share, you should always make sure that your first client installation completes correctly. Make it a habit for @@ -1586,7 +1587,7 @@ the same way (called Point'n'Print) will have the same defaults set for them. If you miss this step you'll get a lot of helpdesk calls from your users. But maybe you like to talk to people.... ;-) -

    Other Gotchas

    +

    Other Gotchas

    Your driver is installed. It is ready for Point'n'Print installation by the clients now. You may have tried to download and use it @@ -1596,7 +1597,7 @@ example, suppose you didn't manage to "set the defaults" on the printer, as advised in the preceding paragraphs? And your users complain about various issues (such as “We need to set the paper size for each job from Letter to A4 and it won't store it!”) -

    Setting Default Print Options for the Client Drivers

    +

    Setting Default Print Options for the Client Drivers

    The last sentence might be viewed with mixed feelings by some users and admins. They have struggled for hours and hours and couldn't arrive at a point were their settings seemed to be saved. It is not their @@ -1606,7 +1607,7 @@ up when you right-click the printer name and select looking dialogs, each claiming that they help you to set printer options, in three different ways. Here is the definite answer to the "Samba Default Driver Setting FAQ": -

    “I can't set and save default print options +

    “I can't set and save default print options for all users on Win2K/XP! Why not?” How are you doing it? I bet the wrong way.... (it is not very easy to find out, though). There are 3 different ways to bring you to @@ -1617,34 +1618,34 @@ dialogs look the same. Only one of them Administrator to do this for all users. Here is how I reproduce it in on XP Professional: -

    1. The first "wrong" way: +

      1. The first "wrong" way: -

        1. Open the Printers +

          1. Open the Printers folder.

          2. Right-click on the printer (remoteprinter on cupshost) and select in context menu Printing Preferences...

          3. Look at this dialog closely and remember what it looks -like.

          -

        2. The second "wrong" way: +like.

        +
      2. The second "wrong" way: -

        1. Open the Printers +

          1. Open the Printers folder.

          2. Right-click on the printer (remoteprinter on cupshost) and select in the context menu Properties

          3. Click on the General tab

          4. Click on the button Printing Preferences...

          5. A new dialog opens. Keep this dialog open and go back -to the parent dialog.

          -

        2. The third, the "correct" way: (should you do +to the parent dialog.

        +
      3. The third, the "correct" way: (should you do this from the beginning, just carry out steps 1. and 2. from second "way" above) -

        1. Click on the Advanced +

          1. Click on the Advanced tab. (Hmmm... if everything is "Grayed Out", then you are not logged in as a user with enough privileges).

          2. Click on the Printing Defaults... button.

          3. On any of the two new tabs, click on the Advanced... button.

          4. A new dialog opens. Compare this one to the other, -identical looking one from "B.5" or A.3".

          -

        +identical looking one from "B.5" or A.3".

      +
    Do you see any difference in the two settings dialogs? I don't either. However, only the last one, which you arrived at with steps @@ -1671,7 +1672,7 @@ try the same way with Win2k or WinXP. You wouldn't dream that there is now a different "clicking path" to arrive at an identically looking, but functionally different dialog to set defaults for all users! -

    Tip

    Try (on Win2000 and WinXP) to run this command (as a user +

    Tip

    Try (on Win2000 and WinXP) to run this command (as a user with the right privileges):

    rundll32 printui.dll,PrintUIEntry /p /t3 /n\\SAMBA-SERVER\printersharename @@ -1685,7 +1686,7 @@ to see the tab with the Printing Preferences... button (the one which doesn't set system-wide defaults). You can start the commands from inside a DOS box" or from the Start -- Run... menu. -

    Supporting large Numbers of Printers

    +

    Supporting large Numbers of Printers

    One issue that has arisen during the recent development phase of Samba is the need to support driver downloads for 100's of printers. Using Windows NT APW here is somewhat awkward (to say the least). If you @@ -1722,9 +1723,9 @@ following is an example of how this could be accomplished: Driver Name: [myphantasydrivername] [....] -

    + -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
  cmd = enumprinters
    flags:[0x800000]
@@ -1732,15 +1733,15 @@ following is an example of how this could be accomplished:
    description:[\\SAMBA-CUPS\dm9110,,110ppm HiVolume DANKA Stuttgart]
    comment:[110 ppm HiVolume DANKA Stuttgart]
  [....]
-
    
+
    -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'setdriver dm9110 "Heidelberg Digimaster 9110 (PS)"'
  cmd = setdriver dm9110 Heidelberg Digimaster 9110 (PPD)
  Successfully set dm9110 to driver Heidelberg Digimaster 9110 (PS).
-
    
+
    -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
  cmd = enumprinters
    flags:[0x800000]
@@ -1748,15 +1749,15 @@ following is an example of how this could be accomplished:
    description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),110ppm HiVolume DANKA Stuttgart]
    comment:[110ppm HiVolume DANKA Stuttgart]
  [....]
-
    
+
    -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'setdriver dm9110 myphantasydrivername'
  cmd = setdriver dm9110 myphantasydrivername
  Successfully set dm9110 to myphantasydrivername.
-
    
+
    -

    +
     root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
  cmd = enumprinters
    flags:[0x800000]
@@ -1772,7 +1773,7 @@ commas in the "description" field). After the
 setdriver command succeeded, all is well.  (The
 CUPS Printing chapter has more info about the installation of printer
 drivers with the help of rpcclient).
-

    Adding new Printers with the Windows NT APW

    +

    Adding new Printers with the Windows NT APW

    By default, Samba exhibits all printer shares defined in smb.conf in the Printers... folder. Also located in this folder @@ -1818,7 +1819,7 @@ user, not necessarily a root account. A map to guest = user may have connected you unwittingly under the wrong privilege; you should check it by using the smbstatus command. -

    Weird Error Message Cannot connect under a +

    Weird Error Message Cannot connect under a different Name

    Once you are connected with the wrong credentials, there is no means to reverse the situation other than to close all Explorer windows, and @@ -1848,7 +1849,7 @@ message. You close all Explorer Windows and start it again. You try to connect - and this times it works! Windows seems to cache connection info somewhere and doesn't keep it up to date (if you are unlucky you might need to reboot to get rid of the error message). -

    Be careful when assembling Driver Files

    +

    Be careful when assembling Driver Files

    You need to be very careful when you take notes about the files and belonging to a particular driver. Don't confuse the files for driver version "0" (for Win95/98/ME, going into @@ -1989,7 +1990,7 @@ In my example were even more differences than shown here. Conclusion: you must be very careful to select the correct driver files for each driver version. Don't rely on the names alone. Don't interchange files belonging to different driver versions. -

    Samba and Printer Ports

    +

    Samba and Printer Ports

    Windows NT/2000 print servers associate a port with each printer. These normally take the form of LPT1:, COM1:, FILE:, etc. Samba @@ -2010,14 +2011,14 @@ another (“My users and my Boss should not know that th working with Samba”), possesses a enumports command which can be used to define an external program that generates a listing of ports on a system. -

    Avoiding the most common Misconfigurations of the Client Driver

    +

    Avoiding the most common Misconfigurations of the Client Driver

    So - printing works, but there are still problems. Most jobs print well, some don't print at all. Some jobs have problems with fonts, which don't look good at all. Some jobs print fast, and some are dead-slow. We can't cover it all; but we want to encourage you to read the little paragraph about "Avoiding the wrong PostScript Driver Settings" in the CUPS Printing part of this document. -

    The Imprints Toolset

    +

    The Imprints Toolset

    The Imprints tool set provides a UNIX equivalent of the Windows NT Add Printer Wizard. For complete information, please refer to the Imprints web site @@ -2034,20 +2035,20 @@ coordinate your efforts on the samba-technical mailing list. The toolset is still in usable form; but only for a series of older printer models, where there are prepared packages to use. Packages for more up to date print devices are needed if Imprints should have a -future.

    What is Imprints?

    +future.

    What is Imprints?

    Imprints is a collection of tools for supporting these goals:

    • Providing a central repository information regarding Windows NT and 95/98 printer driver packages

    • Providing the tools necessary for creating the Imprints printer driver packages.

    • Providing an installation client which will obtain printer drivers from a central internet (or intranet) Imprints Server repository and install them on remote Samba and Windows NT4 print -servers.

    Creating Printer Driver Packages

    +servers.

    Creating Printer Driver Packages

    The process of creating printer driver packages is beyond the scope of this document (refer to Imprints.txt also included with the Samba distribution for more information). In short, an Imprints driver package is a gzipped tarball containing the driver files, related INF files, and a control file needed by the installation client. -

    The Imprints Server

    +

    The Imprints Server

    The Imprints server is really a database server that may be queried via standard HTTP mechanisms. Each printer entry in the database has an associated URL for the actual downloading of the package. Each @@ -2055,7 +2056,7 @@ package is digitally signed via GnuPG which can be used to verify that package downloaded is actually the one referred in the Imprints database. It is strongly recommended that this security check not be disabled. -

    The Installation Client

    +

    The Installation Client

    More information regarding the Imprints installation client is available in the Imprints-Client-HOWTO.ps file included with the imprints source package. @@ -2070,10 +2071,10 @@ remote Samba and Windows NT print servers.

    The basic installation process is in four steps and perl code is wrapped around smbclient and rpcclient -

    • +

      • foreach (supported architecture for a given driver) -

        1. rpcclient: Get the appropriate upload directory on the remote server

        2. smbclient: Upload the driver files

        3. rpcclient: Issues an AddPrinterDriver() MS-RPC

        -

      • rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer

      +

      1. rpcclient: Get the appropriate upload directory on the remote server

      2. smbclient: Upload the driver files

      3. rpcclient: Issues an AddPrinterDriver() MS-RPC

      +

    • rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer

    One of the problems encountered when implementing the Imprints tool set was the name space issues between various supported client architectures. For example, Windows NT includes a driver named "Apple @@ -2096,7 +2097,7 @@ if is has not already been installed? The way of sidestepping this limitation is to require that all Imprints printer driver packages include both the Intel Windows NT and 95/98 printer drivers and that NT driver is installed first. -

    Add Network Printers at Logon without User Interaction

    +

    Add Network Printers at Logon without User Interaction

    The following MS Knowledge Base article may be of some help if you need to handle Windows 2000 clients: How to Add Printers with No User Interaction in Windows 2000. ( http://support.microsoft.com/default.aspx?scid=kb;en-us;189105 @@ -2171,7 +2172,7 @@ at logon time will not really be noticeable. Printers can be centrally added, changed, and deleted at will on the server with no user intervention required on the clients (you just need to keep the logon scripts up to date). -

    The addprinter command

    +

    The addprinter command

    The addprinter command can be configured to be a shell script or program executed by Samba. It is triggered by running the APW from a client against the Samba print server. The APW asks the @@ -2183,7 +2184,7 @@ on legacy systems, or execute the lpadmin command on more modern systems) and create the associated share in , then the APW will in effect really create a new printer on Samba and the UNIX print subsystem! -

    Migration of "Classical" printing to Samba-3

    +

    Migration of "Classical" printing to Samba-3

    The basic "NT-style" printer driver management has not changed considerably in 3.0 over the 2.2.x releases (apart from many small improvements). Here migration should be quite easy, especially if you @@ -2220,12 +2221,12 @@ rpcclient. See the Imprints installation client at: http://imprints.sourceforge.net/

    for an example. See also the discussion of rpcclient usage in the -"CUPS Printing" section.

    Publishing Printer Information in Active Directory or LDAP

    +"CUPS Printing" section.

    Publishing Printer Information in Active Directory or LDAP

    We will publish an update to this section shortly. -

    Common Errors and Problems

    +

    Common Errors and Problems

    Here are a few typical errors and problems people have encountered. You can avoid them. Read on. -

    I give my root password but I don't get access

    +

    I give my root password but I don't get access

    Don't confuse the root password which is valid for the Unix system (and in most cases stored in the form of a one-way hash in a file named /etc/shadow) with the password used to @@ -2233,7 +2234,7 @@ authenticate against Samba!. Samba doesn't know the UNIX password; for root to access Samba resources via Samba-type access, a Samba account for root must be created first. This is often done with the smbpasswd command. -

    My printjobs get spooled into the spooling directory, but then get lost

    +

    My printjobs get spooled into the spooling directory, but then get lost

    Don't use the existing Unix print system spool directory for the Samba spool directory. It may seem convenient and a saving of space, but it only leads to problems. The two must be separate. diff --git a/docs/htmldocs/problems.html b/docs/htmldocs/problems.html index 6628a7d8fe4..62e1a3615a2 100644 --- a/docs/htmldocs/problems.html +++ b/docs/htmldocs/problems.html @@ -1,8 +1,9 @@ -Chapter34.Analysing and solving samba problems

    Chapter34.Analysing and solving samba problems
    PrevPartV.TroubleshootingNext

    Chapter34.Analysing and solving samba problems

    Gerald (Jerry) Carter

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    David Bannon

    Samba Team

    8 Apr 2003

    Table of Contents

    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists

    + +Chapter34.Analysing and solving samba problems

    Chapter34.Analysing and solving samba problems
    PrevPartV.TroubleshootingNext

    Chapter34.Analysing and solving samba problems

    Gerald (Jerry) Carter

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    David Bannon

    Samba Team

    8 Apr 2003

    Table of Contents

    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists

    There are many sources of information available in the form of mailing lists, RFC's and documentation. The docs that come with the samba distribution contain very good explanations of -general SMB topics such as browsing.

    Diagnostics tools

    +general SMB topics such as browsing.

    Diagnostics tools

    One of the best diagnostic tools for debugging problems is Samba itself. You can use the -d option for both smbd and nmbd to specify what debug level at which to run. See the man pages on smbd, nmbd and @@ -41,7 +42,7 @@ The version on the NT Server install CD will only allow monitoring of network traffic directed to the local NT box and broadcasts on the local subnet. Be aware that Ethereal can read and write netmon formatted files. -

    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box

    +

    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box

    Installing netmon on an NT workstation requires a couple of steps. The following are for installing Netmon V4.00.349, which comes with Microsoft Windows NT Server 4.0, on Microsoft Windows NT @@ -80,11 +81,11 @@ from the Windows 9x CD (\admin\nettools\netmon). Ther file located with the netmon driver files on the CD if you need information on how to do this. Copy the files from a working Netmon installation. -

    Useful URLs

    • See how Scott Merrill simulates a BDC behavior at +

    Useful URLs

    Getting help from the mailing lists

    + ftp://ftp.microsoft.com/developr/drg/CIFS/

    Getting help from the mailing lists

    There are a number of Samba related mailing lists. Go to http://samba.org, click on your nearest mirror and then click on Support and then click on Samba related mailing lists. @@ -118,7 +119,7 @@ error messages.

  • (Possibly) If you have a complete netmon trace ( the pipe to the error ) you can send the *.CAP file as well.

  • Please think carefully before attaching a document to an email. Consider pasting the relevant parts into the body of the message. The samba mailing lists go to a huge number of people, do they all need a copy of your -smb.conf in their attach directory?

    • How to get off the mailing lists

    To have your name removed from a samba mailing list, go to the +smb.conf in their attach directory?

    How to get off the mailing lists

    To have your name removed from a samba mailing list, go to the same place you went to to get on it. Go to http://lists.samba.org, click on your nearest mirror and then click on Support and then click on Samba related mailing lists. Or perhaps see diff --git a/docs/htmldocs/samba-bdc.html b/docs/htmldocs/samba-bdc.html index 4c2045642d4..b317fe124b9 100644 --- a/docs/htmldocs/samba-bdc.html +++ b/docs/htmldocs/samba-bdc.html @@ -1,8 +1,9 @@ -Chapter6.Backup Domain Control

    Chapter6.Backup Domain Control
    PrevPartII.Server Configuration BasicsNext

    Chapter6.Backup Domain Control

    John H. Terpstra

    Samba Team

    Volker Lendecke

    Samba Team

    Table of Contents

    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?

    + +Chapter6.Backup Domain Control

    Chapter6.Backup Domain Control
    PrevPartII.Server Configuration BasicsNext

    Chapter6.Backup Domain Control

    John H. Terpstra

    Samba Team

    Volker Lendecke

    Samba Team

    Table of Contents

    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?

    Before you continue reading in this section, please make sure that you are comfortable with configuring a Samba Domain Controller as described in the Domain Control chapter. -

    Features And Benefits

    +

    Features And Benefits

    This is one of the most difficult chapters to summarise. It does not matter what we say here for someone will still draw conclusions and / or approach the Samba-Team with expectations that are either not yet capable of being delivered, or that can be achieved far more @@ -63,7 +64,7 @@ lets consider each possible option and look at the pro's and con's for each theo Arguments Against: All machine trust accounts and user accounts will be locally maintained. Domain users will NOT be able to roam from office to office. This is a broken and flawed solution. Do NOT do this. -

    Essential Background Information

    +

    Essential Background Information

    A Domain Controller is a machine that is able to answer logon requests from network workstations. Microsoft LanManager and IBM LanServer were two early products that provided this capability. The technology has become known as the LanMan Netlogon service. @@ -73,7 +74,7 @@ and with it a new form of the network logon service that has extended functional This service became known as the NT NetLogon Service. The nature of this service has changed with the evolution of MS Windows NT and today provides a very complex array of services that are implemented over a complex spectrum of technologies. -

    MS Windows NT4 Style Domain Control

    +

    MS Windows NT4 Style Domain Control

    Whenever a user logs into a Windows NT4 / 200x / XP Professional Workstation, the workstation connects to a Domain Controller (authentication server) to validate the username and password that the user entered are valid. If the information entered @@ -131,7 +132,7 @@ one of the BDCs can be promoted to a PDC. If this happens while the original PDC line then it is automatically demoted to a BDC. This is an important aspect of Domain Controller management. The tool that is used to affect a promotion or a demotion is the Server Manager for Domains. -

    Example PDC Configuration

    +

    Example PDC Configuration

    Since version 2.2 Samba officially supports domain logons for all current Windows Clients, including Windows NT4, 2003 and XP Professional. For samba to be enabled as a PDC some parameters in the [global]-section of the smb.conf have to be set: @@ -143,20 +144,20 @@ parameters in the [global]-section of the [homes] and a [netlogon] share also need to be set along with settings for the profile path, the users home drive, etc.. This will not be covered in this chapter, for more information please refer to the chapter on Domain Control. -

    Active Directory Domain Control

    +

    Active Directory Domain Control

    As of the release of MS Windows 2000 and Active Directory, this information is now stored in a directory that can be replicated and for which partial or full administrative control can be delegated. Samba-3 is NOT able to be a Domain Controller within an Active Directory tree, and it can not be an Active Directory server. This means that Samba-3 also can NOT act as a Backup Domain Controller to an Active Directory Domain Controller. -

    What qualifies a Domain Controller on the network?

    +

    What qualifies a Domain Controller on the network?

    Every machine that is a Domain Controller for the domain SAMBA has to register the NetBIOS group name SAMBA<#1c> with the WINS server and/or by broadcast on the local network. The PDC also registers the unique NetBIOS name SAMBA<#1b> with the WINS server. The name type <#1b> name is normally reserved for the Domain Master Browser, a role that has nothing to do with anything related to authentication, but the Microsoft Domain implementation requires the domain master browser to be on the same machine as the PDC. -

    How does a Workstation find its domain controller?

    +

    How does a Workstation find its domain controller?

    An MS Windows NT4 / 200x / XP Professional workstation in the domain SAMBA that wants a local user to be authenticated has to find the domain controller for SAMBA. It does this by doing a NetBIOS name query for the group name SAMBA<#1c>. It assumes that each @@ -164,7 +165,7 @@ of the machines it gets back from the queries is a domain controller and can ans requests. To not open security holes both the workstation and the selected domain controller authenticate each other. After that the workstation sends the user's credentials (name and password) to the local Domain Controller, for validation. -

    Backup Domain Controller Configuration

    +

    Backup Domain Controller Configuration

    Several things have to be done:

    • The domain SID has to be the same on the PDC and the BDC. This used to @@ -199,7 +200,7 @@ Several things have to be done: BDC. This can be done manually whenever login scripts are changed, or it can be done automatically together with the smbpasswd synchronization. -

    Example Configuration

    +

    Example Configuration

    Finally, the BDC has to be found by the workstations. This can be done by setting: 

     	workgroup = SAMBA
@@ -212,10 +213,10 @@ problem as the name SAMBA<#1c> is a NetBIOS group name that is meant to
 be registered by more than one machine. The parameter 'domain master =
 no' forces the BDC not to register SAMBA<#1b> which as a unique NetBIOS
 name is reserved for the Primary Domain Controller.
-

    Common Errors

    +

    Common Errors

    As this is a rather new area for Samba there are not many examples that we may refer to. Keep watching for updates to this section. -

    Machine Accounts keep expiring, what can I do?

    +

    Machine Accounts keep expiring, what can I do?

    This problem will occur when occur when the passdb (SAM) files are copied from a central server but the local Backup Domain Controllers. Local machine trust account password updates are not copied back to the central server. The newer machine account password is then over @@ -226,7 +227,7 @@ to proceed and the account expiry error will be reported.

    The solution: use a more robust passdb backend, such as the ldapsam backend, setting up an slave LDAP server for each BDC, and a master LDAP server for the PDC. -

    Can Samba be a Backup Domain Controller to an NT4 PDC?

    +

    Can Samba be a Backup Domain Controller to an NT4 PDC?

    With version 2.2, no. The native NT4 SAM replication protocols have not yet been fully implemented. The Samba Team is working on understanding and implementing the protocols, but this work has not been finished for version 2.2. @@ -237,7 +238,7 @@ mechanism has progressed, and some form of NT4 BDC support is expected soon. Can I get the benefits of a BDC with Samba? Yes. The main reason for implementing a BDC is availability. If the PDC is a Samba machine, a second Samba machine can be set up to service logon requests whenever the PDC is down. -

    How do I replicate the smbpasswd file?

    +

    How do I replicate the smbpasswd file?

    Replication of the smbpasswd file is sensitive. It has to be done whenever changes to the SAM are made. Every user's password change is done in the smbpasswd file and has to be replicated to the BDC. So replicating the smbpasswd file very often is necessary. @@ -251,7 +252,7 @@ to type a password. As said a few times before, use of this method is broken and flawed. Machine trust accounts will go out of sync, resulting in a very broken domain. This method is not recommended. Try using LDAP instead. -

    Can I do this all with LDAP?

    +

    Can I do this all with LDAP?

    The simple answer is YES. Samba's pdb_ldap code supports binding to a replica LDAP server, and will also follow referrals and rebind to the master if it ever needs to make a modification to the database. (Normally BDCs are read only, so diff --git a/docs/htmldocs/samba-pdc.html b/docs/htmldocs/samba-pdc.html index 930315b3f56..aee179737d6 100644 --- a/docs/htmldocs/samba-pdc.html +++ b/docs/htmldocs/samba-pdc.html @@ -1,8 +1,9 @@ -Chapter5.Domain Control

    Chapter5.Domain Control
    PrevPartII.Server Configuration BasicsNext

    Chapter5.Domain Control

    John H. Terpstra

    Samba Team

    Gerald (Jerry) Carter

    Samba Team

    David Bannon

    Samba Team

    Table of Contents

    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." + +Chapter5.Domain Control
    Chapter5.Domain Control
    PrevPartII.Server Configuration BasicsNext

    Chapter5.Domain Control

    John H. Terpstra

    Samba Team

    Gerald (Jerry) Carter

    Samba Team

    David Bannon

    Samba Team

    Table of Contents

    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an -existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not -exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation, -I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    The Essence of Learning: +existing set.." when creating a machine trust account.

    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not +exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    The Essence of Learning: There are many who approach MS Windows networking with incredible misconceptions. That's OK, because it gives the rest of us plenty of opportunity to be of assistance. Those who really want help would be well advised to become familiar with information @@ -32,7 +33,7 @@ burden on an organisation. Where is the right place to make mistakes? Only out of harm's way! If you are going to make mistakes, then please do this on a test network, away from users and in such a way as to not inflict pain on others. Do your learning on a test network. -

    Features and Benefits

    +

    Features and Benefits

    What is the key benefit of Microsoft Domain security?

    In a word, Single Sign On, or SSO for short. To many, this is the holy @@ -130,11 +131,11 @@ per user settings for many parameters, over-riding global settings given in the Thus, with samba-3 it is possible to have a default system configuration for profiles, and on a per user basis to over-ride this for those users who should not be subject to the default configuration. -

    Basics of Domain Control

    +

    Basics of Domain Control

    Over the years, public perceptions of what Domain Control really is has taken on an almost mystical nature. Before we branch into a brief overview of Domain Control, there are three basic types of domain controllers: -

    Domain Controller Types

    • Primary Domain Controller

    • Backup Domain Controller

    • ADS Domain Controller

    +

    Domain Controller Types

    • Primary Domain Controller

    • Backup Domain Controller

    • ADS Domain Controller

    The Primary Domain Controller or PDC plays an important role in the MS Windows NT4 and Windows 200x Domain Control architecture, but not in the manner that so many expect. There is folk lore that dictates that because of it's role in the MS Windows @@ -186,7 +187,7 @@ At this time any appearance that Samba-3 is capable of acting as an This functionality should not be used until the Samba-Team offers formal support for it. At such a time, the documentation will be revised to duly reflect all configuration and management requirements. -

    Preparing for Domain Control

    +

    Preparing for Domain Control

    There are two ways that MS Windows machines may interact with each other, with other servers, and with Domain Controllers: Either as Stand-Alone systems, more commonly called Workgroup members, or as full participants in a security system, @@ -247,7 +248,7 @@ domain/workgroup. Local master browsers in the same domain/workgroup on broadcas then ask for a complete copy of the browse list for the whole wide area network. Browser clients will then contact their local master browser, and will receive the domain-wide browse list, instead of just the list for their broadcast-isolated subnet. -

    Domain Control - Example Configuration

    +

    Domain Control - Example Configuration

    The first step in creating a working Samba PDC is to understand the parameters necessary in smb.conf. Here we attempt to explain the parameters that are covered in the smb.conf man page. @@ -301,20 +302,20 @@ Here is an example smb.conf for acting as a PDC: read only = no create mask = 0600 directory mask = 0700 -

    Note

    +

    Note

    The above parameters make for a full set of parameters that may define the server's mode of operation. The following parameters are the essentials alone: -

    +
     	workgroup = NARNIA
 	domain logons = Yes
 	domain master = Yes
 	security = User
-
    
+
    The additional parameters shown in the longer listing above just makes for a more complete environment. -

    +

    There are a couple of points to emphasize in the above configuration.

    • Encrypted passwords must be enabled. For more details on how @@ -327,22 +328,22 @@ There are a couple of points to emphasize in the above configuration. client to locate the server as a DC. Please refer to the various Network Browsing documentation included with this distribution for details. -

    Samba ADS Domain Control

    +

    Samba ADS Domain Control

    Samba-3 is not and can not act as an Active Directory Server. It can not truly function as an Active Directory Primary Domain Controller. The protocols for some of the functionality the Active Directory Domain Controllers is have been partially implemented on an experimental only basis. Please do NOT expect Samba-3 to support these protocols - nor should you depend on any such functionality either now or in the future. The Samba-Team may well remove such experimental features or may change their behaviour. -

    Domain and Network Logon Configuration

    +

    Domain and Network Logon Configuration

    The subject of Network or Domain Logons is discussed here because it rightly forms an integral part of the essential functionality that is provided by a Domain Controller. -

    Domain Network Logon Service

    +

    Domain Network Logon Service

    All Domain Controllers must run the netlogon service (domain logons in Samba). One Domain Controller must be configured with domain master = Yes (the Primary Domain Controller); on ALL Backup Domain Controllers domain master = No must be set. -

    Example Configuration

    +
    Example Configuration
     	[global]
 		domain logons = Yes
 		domain master = (Yes on PDC, No on BDCs)
@@ -352,7 +353,7 @@ must be set.
 		path = /var/lib/samba/netlogon
 		guest ok = Yes
 		browseable = No
-
    The Special Case of MS Windows XP Home Edition
    Note
    
+

    The Special Case of MS Windows XP Home Edition

    Note

    MS Windows XP Home Edition does not have the ability to join any type of Domain security facility. Unlike, MS Windows 9x / Me, MS Windows XP Home Edition also completely lacks the ability to log onto a network. @@ -364,7 +365,7 @@ MS Windows XP Professional.

    Now that this has been said, please do NOT ask the mailing list, or email any of the Samba-Team members with your questions asking how to make this work. It can't be done. -

    The Special Case of Windows 9x / Me

    +

    The Special Case of Windows 9x / Me

    A domain and a workgroup are exactly the same thing in terms of network browsing. The difference is that a distributable authentication database is associated with a domain, for secure login access to a @@ -444,7 +445,7 @@ The main difference between a PDC and a Windows 9x logon server configuration is

    A Samba PDC will act as a Windows 9x logon server; after all, it does provide the network logon services that MS Windows 9x / Me expect to find. -

    Security Mode and Master Browsers

    +

    Security Mode and Master Browsers

    There are a few comments to make in order to tie up some loose ends. There has been much debate over the issue of whether or not it is ok to configure Samba as a Domain Controller in security @@ -478,7 +479,7 @@ Configuring a Samba box as a DC for a domain that already by definition has a PDC is asking for trouble. Therefore, you should always configure the Samba DC to be the DMB for its domain and set security = user. This is the only officially supported mode of operation. -

    Common Problems and Errors

    I cannot include a '$' in a machine name

    +

    Common Problems and Errors

    I cannot include a '$' in a machine name

    A 'machine account', (typically) stored in /etc/passwd, takes the form of the machine name with a '$' appended. FreeBSD (and other BSD systems?) won't create a user with a '$' in their name. @@ -486,7 +487,7 @@ systems?) won't create a user with a '$' in their name. The problem is only in the program used to make the entry. Once made, it works perfectly. Create a user without the '$'. Then use vipw to edit the entry, adding the '$'. Or create the whole entry with vipw if you like; make sure you use a unique User ID! -

    I get told "You already have a connection to the Domain...." +

    I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an existing set.." when creating a machine trust account.

    This happens if you try to create a machine trust account from the @@ -500,7 +501,7 @@ Further, if the machine is already a 'member of a workgroup' that is the same name as the domain you are joining (bad idea) you will get this message. Change the workgroup name to something else, it does not matter what, reboot, and try again. -

    The system can not log you on (C000019B)....

    I joined the domain successfully but after upgrading +

    The system can not log you on (C000019B)....

    I joined the domain successfully but after upgrading to a newer version of the Samba code I get the message, The system can not log you on (C000019B), Please try again or consult your system administrator when attempting to logon. @@ -511,14 +512,14 @@ the domain name and/or the server name (NetBIOS name) is changed. The only way to correct the problem is to restore the original domain SID or remove the domain client from the domain and rejoin. The domain SID may be reset using either the net or rpcclient utilities. -

    +

    The reset or change the domain SID you can use the net command as follows: -

    +
     root# net getlocalsid 'OLDNAME'
 root# net setlocalsid 'SID'
-
    
-

    The machine trust account for this computer either does not + +

    The machine trust account for this computer either does not exist or is not accessible.

    When I try to join the domain I get the message The machine account for this computer either does not exist or is not accessible. What's @@ -541,10 +542,10 @@ Some people have also reported that inconsistent subnet masks between the Samba server and the NT client can cause this problem. Make sure that these are consistent for both client and server. -

    When I attempt to login to a Samba Domain from a NT4/W2K workstation, +

    When I attempt to login to a Samba Domain from a NT4/W2K workstation, I get a message about my account being disabled.

    Enable the user accounts with smbpasswd -e username , this is normally done as an account is created. -

    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    +

    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    A domain controller has to announce on the network who it is. This usually takes a while.

    PrevUpNext
    Chapter4.Server Types and Security ModesHomeChapter6.Backup Domain Control
    diff --git a/docs/htmldocs/securing-samba.html b/docs/htmldocs/securing-samba.html index a790816d021..bdbc2ae0b54 100644 --- a/docs/htmldocs/securing-samba.html +++ b/docs/htmldocs/securing-samba.html @@ -1,4 +1,5 @@ -Chapter15.Securing Samba
    Chapter15.Securing Samba
    PrevPartIII.Advanced ConfigurationNext

    Chapter15.Securing Samba

    Andrew Tridgell

    Samba Team

    John H. Terpstra

    Samba Team

    May 26, 2003

    Table of Contents

    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?

    Introduction

    + +Chapter15.Securing Samba

    Chapter15.Securing Samba
    PrevPartIII.Advanced ConfigurationNext

    Chapter15.Securing Samba

    Andrew Tridgell

    Samba Team

    John H. Terpstra

    Samba Team

    May 26, 2003

    Table of Contents

    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?

    Introduction

    This note was attached to the Samba 2.2.8 release notes as it contained an important security fix. The information contained here applies to Samba installations in general. @@ -10,7 +11,7 @@ on it!" Security concerns are just like that: You need to know a little about the subject to appreciate how obvious most of it really is. The challenge for most of us is to discover that first morsel of knowledge with which we may unlock the secrets of the masters. -

    Features and Benefits

    +

    Features and Benefits

    There are three level at which security principals must be observed in order to render a site at least moderately secure. These are: the perimeter firewall, the configuration of the host server that is running Samba, and Samba itself. @@ -29,13 +30,13 @@ TCP/IP connections. Another method by which Samba may be secured is by way of setting Access Control Entries in an Access Control List on the shares themselves. This is discussed in the chapter on File, Directory and Share Access Control. -

    Technical Discussion of Protective Measures and Issues

    +

    Technical Discussion of Protective Measures and Issues

    The key challenge of security is the fact that protective measures suffice at best only to close the door on known exploits and breach techniques. Never assume that because you have followed these few measures that the Samba server is now an impenetrable fortress! Given the history of information systems so far, it is only a matter of time before someone will find yet another vulnerability. -

    Using host based protection

    +

    Using host based protection

    In many installations of Samba the greatest threat comes for outside your immediate network. By default Samba will accept connections from any host, which means that if you run an insecure version of Samba on @@ -55,7 +56,7 @@ before someone will find yet another vulnerability. 192.168.3. All other connections will be refused as soon as the client sends its first packet. The refusal will be marked as a not listening on called name error. -

    User based protection

    +

    User based protection

    If you want to restrict access to your server to valid users only then the following method may be of use. In the smb.conf [globals] section put: 

    @@ -63,7 +64,7 @@ before someone will find yet another vulnerability.

    What this does is, it restricts all server access to either the user jacko or to members of the system group smbusers. -

    Using interface protection

    +

    Using interface protection

    By default Samba will accept connections on any network interface that it finds on your system. That means if you have a ISDN line or a PPP connection to the Internet then Samba will accept connections on those @@ -85,7 +86,7 @@ before someone will find yet another vulnerability. connection refused reply. In that case no Samba code is run at all as the operating system has been told not to pass connections from that interface to any samba process. -

    Using a firewall

    +

    Using a firewall

    Many people use a firewall to deny access to services that they don't want exposed outside their network. This can be a very good idea, although I would recommend using it in conjunction with the above @@ -98,7 +99,7 @@ before someone will find yet another vulnerability. The last one is important as many older firewall setups may not be aware of it, given that this port was only added to the protocol in recent years. -

    Using a IPC$ share deny

    +

    Using a IPC$ share deny

    If the above methods are not suitable, then you could also place a more specific deny on the IPC$ share that is used in the recently discovered security hole. This allows you to offer access to other @@ -125,10 +126,10 @@ before someone will find yet another vulnerability.

    This is not recommended unless you cannot use one of the other methods listed above for some reason. -

    NTLMv2 Security

    +

    NTLMv2 Security

    To configure NTLMv2 authentication the following registry keys are worth knowing about: -

    - 

    +	
    
+	
     		[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
 		"lmcompatibilitylevel"=dword:00000003
 
@@ -142,25 +143,25 @@ before someone will find yet another vulnerability.
 		0x80000 - NTLMv2 session security. If either NtlmMinClientSec or
 		NtlmMinServerSec is set to 0x80000, the connection will fail if NTLMv2
 		session security is not negotiated.
-	
    
-

    Upgrading Samba

    + +

    Upgrading Samba

    Please check regularly on http://www.samba.org/ for updates and important announcements. Occasionally security releases are made and it is highly recommended to upgrade Samba when a security vulnerability is discovered. -

    Common Errors

    +

    Common Errors

    If all of samba and host platform configuration were really as intuitive as one might like then this section would not be necessary. Security issues are often vexing for a support person to resolve, not because of the complexity of the problem, but for reason that most administrators who post what turns out to be a security problem request are totally convinced that the problem is with Samba. -

    Smbclient works on localhost, but the network is dead

    +

    Smbclient works on localhost, but the network is dead

    This is a very common problem. Red Hat Linux (as do others) will install a default firewall. With the default firewall in place only traffic on the loopback adapter (IP address 127.0.0.1) will be allowed through the firewall.

    The solution is either to remove the firewall (stop it) or to modify the firewall script to allow SMB networking traffic through. See section above in this chapter. -

    Why can users access home directories of other users?

    +

    Why can users access home directories of other users?

    “ We are unable to keep individual users from mapping to any other user's home directory once they have supplied a valid password! They only need @@ -191,16 +192,16 @@ out to be a security problem request are totally convinced that the problem is w Samba does allow the setup you require when you have set the only user = yes option on the share, is that you have not set the valid users list for the share. -

    +

    Note that only user works in conjunction with the users= list, so to get the behavior you require, add the line : - 

    +	
     	users = %S
-	
    
+
    this is equivalent to: - 

    +	
     	valid users = %S
-	
    
+
    to the definition of the [homes] share, as recommended in the smb.conf man page. -

    PrevUpNext
    Chapter14.File and Record LockingHomeChapter16.Interdomain Trust Relationships
    +
    PrevUpNext
    Chapter14.File and Record LockingHomeChapter16.Interdomain Trust Relationships
    diff --git a/docs/htmldocs/smb.conf.5.html b/docs/htmldocs/smb.conf.5.html index f22afa58847..2b3d51d6f67 100644 --- a/docs/htmldocs/smb.conf.5.html +++ b/docs/htmldocs/smb.conf.5.html @@ -244,8 +244,8 @@ alias|alias|alias|alias... connection is made as the username given in the "guest account =" for the service, irrespective of the supplied password.

    COMPLETE LIST OF GLOBAL PARAMETERS

    Here is a list of all global parameters. See the section of - each parameter for details. Note that some are synonyms.

    COMPLETE LIST OF SERVICE PARAMETERS

    Here is a list of all service parameters. See the section on - each parameter for details. Note that some are synonyms.

    EXPLANATION OF EACH PARAMETER

    abort shutdown script (G)

    This parameter only exists in the HEAD cvs branch + each parameter for details. Note that some are synonyms.

    COMPLETE LIST OF SERVICE PARAMETERS

    Here is a list of all service parameters. See the section on + each parameter for details. Note that some are synonyms.

    EXPLANATION OF EACH PARAMETER

    abort shutdown script (G)

    This parameter only exists in the HEAD cvs branch This a full path name to a script called by smbd(8) that should stop a shutdown procedure issued by the shutdown script.

    This command will be run as user.

    Default: None.

    Example: abort shutdown script = /sbin/shutdown -c

    add group script (G)

    This is the full pathname to a script that will be run @@ -504,12 +504,27 @@ alias|alias|alias|alias... See also add share command, delete share command. -

    Default: none

    Example: change share command = /usr/local/bin/addshare

    client use spnego (G)

    This variable controls controls whether samba clients will try +

    Default: none

    Example: change share command = /usr/local/bin/addshare

    client lanman auth (G)

    This parameter determines whether or not smbclient(8) and other samba client + tools will attempt to authenticate itself to servers using the + weaker LANMAN password hash. If disabled, only server which support NT + password hashes (e.g. Windows NT/2000, Samba, etc... but not + Windows 95/98) will be able to be connected from the Samba client.

    The LANMAN encrypted response is easily broken, due to it's + case-insensitive nature, and the choice of algorithm. Clients + without Windows 95/98 servers are advised to disable + this option.

    Disabling this option will also disable the client plaintext auth option

    Likewise, if the client ntlmv2 + auth parameter is enabled, then only NTLMv2 logins will be + attempted. Not all servers support NTLMv2, and most will require + special configuration to us it.

    Default : client lanman auth = yes

    client ntlmv2 auth (G)

    This parameter determines whether or not smbclient(8) will attempt to + authenticate itself to servers using the NTLMv2 encrypted password + response.

    If enabled, only an NTLMv2 and LMv2 response (both much more + secure than earlier versions) will be sent. Many servers + (including NT4 < SP4, Win9x and Samba 2.2) are not compatible with + NTLMv2.

    If disabled, an NTLM response (and possibly a LANMAN response) + will be sent by the client, depending on the value of client lanman auth.

    Note that some sites (particularly + those following 'best practice' security polices) only allow NTLMv2 + responses, and not the weaker LM or NTLM.

    Default : client ntlmv2 auth = no

    client use spnego (G)

    This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism. - SPNEGO client support with Sign and Seal is currently broken, so - you might want to turn this option off when doing joins to - Windows 2003 domains.

    Default: client use spnego = yes

    comment (S)

    This is a text field that is seen next to a share when a client does a queries the server, either via the network neighborhood or via net view to list what shares @@ -569,7 +584,7 @@ alias|alias|alias|alias... boolean parameter adds microsecond resolution to the timestamp message header when turned on.

    Note that the parameter debug timestamp must be on for this to have an - effect.

    Default: debug hires timestamp = no

    debug level (G)

    Synonym for + effect.

    Default: debug hires timestamp = no

    debuglevel (G)

    Synonym for log level.

    debug pid (G)

    When using only one log file for more then one forked smbd(8)-process there may be hard to follow which process outputs which message. This boolean parameter @@ -857,7 +872,14 @@ df $1 | tail -1 | awk '{print $2" "$4}' timestamp on a file if the user smbd is acting on behalf of is not the file owner. Setting this option to yes allows DOS semantics and smbd(8) will change the file - timestamp as DOS requires.

    Default: dos filetimes = no

    encrypt passwords (G)

    This boolean controls whether encrypted passwords + timestamp as DOS requires.

    Default: dos filetimes = no

    enable rid algorithm (G)

    This option is used to control whether or not smbd in Samba 3.0 should fallback + to the algorithm used by Samba 2.2 to generate user and group RIDs. The longterm + development goal is to remove the algorithmic mappings of RIDs altogether, but + this has proved to be difficult. This parameter is mainly provided so that + developers can turn the algorithm on and off and see what breaks. This parameter + should not be disabled by non-developers because certain features in Samba will fail + to work without it. +

    Default: enable rid algorithm = <yes>

    encrypt passwords (G)

    This boolean controls whether encrypted passwords will be negotiated with the client. Note that Windows NT 4.0 SP3 and above and also Windows 98 will by default expect encrypted passwords unless a registry entry is changed. To use encrypted passwords in @@ -1579,7 +1601,7 @@ df $1 | tail -1 | awk '{print $2" "$4}' copied between UNIX directories from Windows/DOS while retaining the long UNIX filename. UNIX files can be renamed to a new extension from Windows/DOS and will retain the same basename. Mangled names - do not change between sessions.

    Default: mangled names = yes

    mangling stack (G)

    This parameter controls the number of mangled names + do not change between sessions.

    Default: mangled names = yes

    mangled stack (G)

    This parameter controls the number of mangled names that should be cached in the Samba server smbd(8).

    This stack is a list of recently mangled base names (extensions are only maintained if they are longer than 3 characters or contains upper case characters).

    The larger this value, the more likely it is that mangled @@ -1587,7 +1609,7 @@ df $1 | tail -1 | awk '{print $2" "$4}' However, large stack sizes will slow most directory accesses. Smaller stacks save memory in the server (each stack element costs 256 bytes).

    It is not possible to absolutely guarantee correct long - filenames, so be prepared for some surprises!

    Default: mangled stack = 50

    Example: mangled stack = 100

    mangling prefix (G)

    controls the number of prefix + filenames, so be prepared for some surprises!

    Default: mangled stack = 50

    Example: mangled stack = 100

    mangle prefix (G)

    controls the number of prefix characters from the original name used when generating the mangled names. A larger value will give a weaker hash and therefore more name collisions. The minimum @@ -1842,16 +1864,7 @@ df $1 | tail -1 | awk '{print $2" "$4}' homedir map and return the server listed there.

    Note that for this option to work there must be a working NIS system and the Samba server with this option must also - be a logon server.

    Default: nis homedir = no

    non unix account range (G)

    The non unix account range parameter specifies - the range of 'user ids' that are allocated by the various 'non unix - account' passdb backends. These backends allow - the storage of passwords for users who don't exist in /etc/passwd. - This is most often used for machine account creation. - This range of ids should have no existing local or NIS users within - it as strange conflicts can occur otherwise.

    Note

    These userids never appear on the system and Samba will never - 'become' these users. They are used only to ensure that the algorithmic - RID mapping does not conflict with normal users. -

    Default: non unix account range = <empty string>

    Example: non unix account range = 10000-20000

    nt acl support (S)

    This boolean parameter controls whether smbd(8) will attempt to map + be a logon server.

    Default: nis homedir = no

    nt acl support (S)

    This boolean parameter controls whether smbd(8) will attempt to map UNIX permissions into Windows NT access control lists. This parameter was formally a global parameter in releases prior to 2.2.2.

    Default: nt acl support = yes

    ntlm auth (G)

    This parameter determines whether or not smbd(8) will attempt to @@ -1953,15 +1966,15 @@ df $1 | tail -1 | awk '{print $2" "$4}' to the logs and exit.

    Disabling this option prevents Samba from making this check, which involves deliberatly attempting a - bad logon to the remote server.

    Default: paranoid server security = yes

    passdb backend (G)

    This option allows the administrator to chose which backends + bad logon to the remote server.

    Default: paranoid server security = yes

    passdb backend (G)

    This option allows the administrator to chose which backends to retrieve and store passwords with. This allows (for example) both smbpasswd and tdbsam to be used without a recompile. Multiple backends can be specified, separated by spaces. The backends will be searched in the order they are specified. New users are always added to the first backend specified.

    This parameter is in two parts, the backend's name, and a 'location' string that has meaning only to that particular backed. These are separated - by a : character.

    Available backends can include: -

    • smbpasswd - The default smbpasswd + by a : character.

      Available backends can include: +

      • smbpasswd - The default smbpasswd backend. Takes a path to the smbpasswd file as an optional argument.

      • tdbsam - The TDB based password storage backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb @@ -1982,8 +1995,8 @@ df $1 | tail -1 | awk '{print $2" "$4}' Very simple backend that only provides one user: the guest user. Only maps the NT guest user to the guest account. Required in pretty much all situations. -

      -

      Default: passdb backend = smbpasswd

      Example: passdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd guest

      Example: passdb backend = ldapsam:ldaps://ldap.example.com guest

      Example: passdb backend = mysql:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb guest

    passwd chat (G)

    This string controls the "chat" +

    +

    Default: passdb backend = smbpasswd

    Example: passdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd guest

    Example: passdb backend = ldapsam:ldaps://ldap.example.com guest

    Example: passdb backend = mysql:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb guest

    passwd chat (G)

    This string controls the "chat" conversation that takes places between smbd(8) and the local password changing program to change the user's password. The string describes a sequence of response-receive pairs that smbd(8) uses to determine what to send to the @@ -2272,7 +2285,29 @@ print5|My Printer 5 printable.

    private dir (G)

    This parameters defines the directory smbd will use for storing such files as smbpasswd and secrets.tdb. -

    Default :private dir = ${prefix}/private

    protocol (G)

    Synonym for +

    Default :private dir = ${prefix}/private

    profile acls (S)

    This boolean parameter controls whether smbd(8) + This boolean parameter was added to fix the problems that people have been + having with storing user profiles on Samba shares from Windows 2000 or + Windows XP clients. New versions of Windows 2000 or Windows XP service + packs do security ACL checking on the owner and ability to write of the + profile directory stored on a local workstation when copied from a Samba + share. When not in domain mode with winbindd then the security info copied + onto the local workstation has no meaning to the logged in user (SID) on + that workstation so the profile storing fails. Adding this parameter + onto a share used for profile storage changes two things about the + returned Windows ACL. Firstly it changes the owner and group owner + of all reported files and directories to be BUILTIN\\Administrators, + BUILTIN\\Users respectively (SIDs S-1-5-32-544, S-1-5-32-545). Secondly + it adds an ACE entry of "Full Control" to the SID BUILTIN\\Users to + every returned ACL. This will allow any Windows 2000 or XP workstation + user to access the profile. Note that if you have multiple users logging + on to a workstation then in order to prevent them from being able to access + each others profiles you must remove the "Bypass traverse checking" advanced + user right. This will prevent access to other users profile directories as + the top level profile directory (named after the user) is created by the + workstation profile code and has an ACL restricting entry to the directory + tree to the owning user. +

    Default: profile acls = no

    protocol (G)

    Synonym for max protocol.

    public (S)

    Synonym for guest ok.

    queuepause command (S)

    This parameter specifies the command to be executed on the server host in order to pause the printer queue.

    This command should be a program or script which takes @@ -2536,7 +2571,7 @@ print5|My Printer 5 does not support them. However note that if encrypted passwords have been negotiated then Samba cannot revert back to checking the UNIX password file, it must have a valid smbpasswd file to check - users against. See the chapter about the User Database in the Samba HOWTO Collection for details on how to set this up.

    Note this mode of operation has + users against. See the chapter about the User Database in the Samba HOWTO Collection for details on how to set this up.

    Note

    This mode of operation has significant pitfalls, due to the fact that is activly initiates a man-in-the-middle attack on the remote SMB server. In particular, this mode of operation can cause significant resource consuption on @@ -2544,11 +2579,11 @@ print5|My Printer 5 of the user's session. Furthermore, if this connection is lost, there is no way to reestablish it, and futher authenticaions to the Samba server may fail. (From a single client, till it disconnects). -

    Note that from the client's point of +

    Note

    From the client's point of view security = server is the same as security = user. It only affects how the server deals with the authentication, it does - not in any way affect what the client sees.

    Note that the name of the resource being + not in any way affect what the client sees.

    Note that the name of the resource being requested is not sent to the server until after the server has successfully authenticated the client. This is why guest shares don't work in user level security without allowing @@ -2558,6 +2593,13 @@ print5|My Printer 5 parameter for details on doing this.

    See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

    See also the password server parameter and the + encrypted passwords parameter.

    SECURITY = ADS

    In this mode, Samba will act as a domain member in an ADS realm. To operate + in this mode, the machine running Samba will need to have Kerberos installed + and configured and Samba will need to be joined to the ADS realm using the + net utility.

    Note that this mode does NOT make Samba operate as a Active Directory Domain + Controller.

    Read the chapter about Domain Membership in the HOWTO for details.

    See also the ads server + parameter, the realm + paramter and the encrypted passwords parameter.

    Default: security = USER

    Example: security = DOMAIN

    security mask (S)

    This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating the UNIX permission on a file using the native NT security @@ -2640,7 +2682,7 @@ print5|My Printer 5 administrative privilege on an individual printer.

    See also addprinter command, deleteprinter command, - printer admin

    Default :show add printer wizard = yes

    shutdown script (G)

    This parameter only exists in the HEAD cvs branch + printer admin

    Default :show add printer wizard = yes

    shutdown script (G)

    This parameter only exists in the HEAD cvs branch This a full path name to a script called by smbd(8) that should start a shutdown procedure.

    This command will be run as the user connected to the server.

    %m %t %r %f parameters are expanded:

    • %m will be substituted with the shutdown message sent to the server.

    • %t will be substituted with the number of seconds to wait before effectively starting the @@ -2648,8 +2690,8 @@ print5|My Printer 5 switch -r. It means reboot after shutdown for NT.

    • %f will be substituted with the switch -f. It means force the shutdown - even if applications do not respond for NT.

    Default: None.

    Example: abort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f

    Shutdown script example: -

    +			even if applications do not respond for NT.

    Default: None.

    Example: abort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f

    Shutdown script example: +
     #!/bin/bash
 		
 $time=0
@@ -2657,9 +2699,9 @@ let "time/60"
 let "time++"
 
 /sbin/shutdown $3 $4 +$time $1 &
-

    + Shutdown does not return so we need to launch it in background. -

    See also +

    See also abort shutdown script.

    smb passwd file (G)

    This option sets the path to the encrypted smbpasswd file. By default the path to the smbpasswd file is compiled into Samba.

    Default: smb passwd file = ${prefix}/private/smbpasswd

    Example: smb passwd file = /etc/samba/smbpasswd

    smb ports (G)

    Specifies which ports the server should listen on for SMB traffic.

    Default: smb ports = 445 139

    socket address (G)

    This option allows you to control what address Samba will listen for connections on. This is used to @@ -2696,9 +2738,7 @@ Shutdown does not return so we need to launch it in background. be formatted as the output of the standard Unix env(1) command. This is of the form:

    Example environment entry:

    SAMBA_NETBIOS_NAME = myhostname

    Default: No default value

    Examples: source environment = |/etc/smb.conf.sh

    Example: source environment = /usr/local/smb_env_vars

    stat cache (G)

    This parameter determines if smbd(8) will use a cache in order to speed up case insensitive name mappings. You should never need - to change this parameter.

    Default: stat cache = yes

    stat cache size (G)

    This parameter determines the number of - entries in the stat cache. You should - never need to change this parameter.

    Default: stat cache size = 50

    strict allocate (S)

    This is a boolean that controls the handling of + to change this parameter.

    Default: stat cache = yes

    strict allocate (S)

    This is a boolean that controls the handling of disk space allocation in the server. When this is set to yes the server will change from UNIX behaviour of not committing real disk storage blocks when a file is extended to the Windows behaviour @@ -2755,7 +2795,10 @@ Shutdown does not return so we need to launch it in background. string %D is present it is substituted with the user's Windows NT domain name. If the string %U is present it - is substituted with the user's Windows NT user name.

    Default: template homedir = /home/%D/%U

    template shell (G)

    When filling out the user information for a Windows NT + is substituted with the user's Windows NT user name.

    Default: template homedir = /home/%D/%U

    template primary group (G)

    This option defines the default primary group for + each user created by winbindd(8)'s local account management + functions (similar to the 'add user script'). +

    Default: template primary group = nobody

    template shell (G)

    When filling out the user information for a Windows NT user, the winbindd(8) daemon uses this parameter to fill in the login shell for that user.

    Default: template shell = /bin/false

    time offset (G)

    This parameter is a setting in minutes to add to the normal GMT to local time conversion. This is useful if @@ -2974,7 +3017,7 @@ guest = * users list then access is denied for that user.

    The current servicename is substituted for %S . This is useful in the [homes] section.

    See also invalid users

    Default: No valid users list (anyone can login) -

    Example: valid users = greg, @pcusers

    veto files (S)

    This is a list of files and directories that +

    Example: valid users = greg, @pcusers

    veto files (S)

    This is a list of files and directories that are neither visible nor accessible. Each entry in the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' can be used to specify multiple files @@ -2992,8 +3035,8 @@ guest = * for a match as they are scanned.

    See also hide files and case sensitive.

    Default: No files or directories are vetoed. -

    Examples: -

    +	
    Examples:
+
     ; Veto any files containing the word Security, 
 ; any ending in .tmp, and any directory containing the
 ; word root.
@@ -3032,7 +3075,13 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/
 	that Samba has to  do in order to perform the link checks.
    Default: wide links = yes
    winbind cache time (G)

    This parameter specifies the number of seconds the winbindd(8) daemon will cache user and group information before querying a Windows NT server - again.

    Default: winbind cache type = 15

    winbind enum groups (G)

    On large installations using winbindd(8) it may be necessary to suppress + again.

    Default: winbind cache type = 15

    winbind enable local accounts (G)

    This parameter controls whether or not winbindd + will act as a stand in replacement for the various account + management hooks in smb.conf (e.g. 'add user script'). + If enabled, winbindd will support the creation of local + users and groups as another source of UNIX account information + available via getpwnam() or getgrgid(), etc... +

    Default: winbind enable local accounts = yes

    winbind enum groups (G)

    On large installations using winbindd(8) it may be necessary to suppress the enumeration of groups through the setgrent(), getgrent() and endgrent() group of system calls. If @@ -3060,10 +3109,16 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/ and nss_winbind.so modules for UNIX services.

    Please note that setting this parameter to + causes problems with group membership at least on glibc systems, as the character + - is used as a special character for NIS in /etc/group.

    Default: winbind separator = '\'

    Example: winbind separator = +

    winbind uid (G)

    This parameter is now an alias for idmap uid

    The winbind gid parameter specifies the range of user ids that are allocated by the + is used as a special character for NIS in /etc/group.

    Default: winbind separator = '\'

    Example: winbind separator = +

    winbind trusted domains only (G)

    This parameter is designed to allow Samba servers that + are members of a Samba controlled domain to use UNIX accounts + distributed vi NIS, rsync, or LDAP as the uid's for winbindd users + in the hosts primary domain. Therefore, the user 'SAMBA\user1' would + be mapped to the account 'user1' in /etc/passwd instead of allocating + a new uid for him or her. +

    Default: winbind trusted domains only = <no>

    winbind uid (G)

    This parameter is now an alias for idmap uid

    The winbind gid parameter specifies the range of user ids that are allocated by the winbindd(8) daemon. This range of ids should have no existing local or NIS users within it as strange - conflicts can occur otherwise.

    Default: winbind uid = <empty string>

    Example: winbind uid = 10000-20000

    winbind used default domain (G)

    This parameter specifies whether the + conflicts can occur otherwise.

    Default: winbind uid = <empty string>

    Example: winbind uid = 10000-20000

    winbind use default domain (G)

    This parameter specifies whether the winbindd(8) daemon should operate on users without domain component in their username. Users without a domain component are treated as is part of the winbindd server's own @@ -3090,7 +3145,7 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/ addresses currently registered for that name. If this list is empty then the name should be deleted.

    An example script that calls the BIND dynamic DNS update program nsupdate is provided in the examples - directory of the Samba source code.

    wins partner (G)

    A space separated list of partners' IP addresses for + directory of the Samba source code.

    wins partners (G)

    A space separated list of partners' IP addresses for WINS replication. WINS partners are always defined as push/pull partners as defining only one way WINS replication is unreliable. WINS replication is currently experimental and unreliable between diff --git a/docs/htmldocs/smbcontrol.1.html b/docs/htmldocs/smbcontrol.1.html index 21344b9ade8..553a9e91636 100644 --- a/docs/htmldocs/smbcontrol.1.html +++ b/docs/htmldocs/smbcontrol.1.html @@ -58,7 +58,9 @@ compile time.

    -i

    Run interactiv talloc(pool) memory usage by the specified daemon/process. Available for both smbd and nmbd.

    drvupgrade

    Force clients of printers using specified driver to update their local version of the driver. Can only be - sent to smbd.

    VERSION

    This man page is correct for version 3.0 of + sent to smbd.

    reload-config

    Force daemon to reload smb.conf configuration file. Can be sent + to smbd, nmbd, or winbindd. +

    VERSION

    This man page is correct for version 3.0 of the Samba suite.

    SEE ALSO

    nmbd(8) and smbd(8).

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff --git a/docs/htmldocs/smbmount.8.html b/docs/htmldocs/smbmount.8.html index 233dee51d74..eff8fea825f 100644 --- a/docs/htmldocs/smbmount.8.html +++ b/docs/htmldocs/smbmount.8.html @@ -29,9 +29,9 @@ on the command line. However, the same password defined in the PASSWD environment variable or a credentials file (see below) will be read correctly. -

    credentials=<filename>

    specifies a file that contains a username and/or password. +

    credentials=<filename>
    specifies a file that contains a username and/or password. The format of the file is: -

    +
     username = <value>
 password = <value>
 
    This is preferred over having passwords in plaintext in a
diff --git a/docs/htmldocs/smbsh.1.html b/docs/htmldocs/smbsh.1.html
index 935576af6b7..4ef2244bb7a 100644
--- a/docs/htmldocs/smbsh.1.html
+++ b/docs/htmldocs/smbsh.1.html
@@ -74,11 +74,11 @@ this parameter or any entry in the name resolve order
 will be attempted in this order.
    -L libdir

    This parameter specifies the location of the shared libraries used by smbsh. The default value is specified at compile time. -

    EXAMPLES

    To use the smbsh command, execute +

    EXAMPLES

    To use the smbsh command, execute smbsh from the prompt and enter the username and password that authenticates you to the machine running the Windows NT operating system. -

    +
     system% smbsh
 Username: user
 Password: XXXXXXX
diff --git a/docs/htmldocs/speed.html b/docs/htmldocs/speed.html
index 626d5e0193e..0033a05211a 100644
--- a/docs/htmldocs/speed.html
+++ b/docs/htmldocs/speed.html
@@ -1,4 +1,5 @@
-Chapter39.Samba Performance Tuning
    Chapter39.Samba Performance Tuning
    PrevPartVI.AppendixesNext
    Chapter39.Samba Performance Tuning
    Paul Cochrane
    Dundee Limb Fitting Centre
    Jelmer R. Vernooij
    The Samba Team
    John H. Terpstra
    Samba Team
    Table of Contents
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    Comparisons
    
+
+Chapter39.Samba Performance Tuning
    Chapter39.Samba Performance Tuning
    PrevPartVI.AppendixesNext
    Chapter39.Samba Performance Tuning
    Paul Cochrane
    Dundee Limb Fitting Centre
    Jelmer R. Vernooij
    The Samba Team
    John H. Terpstra
    Samba Team
    Table of Contents
    Comparisons
    Socket options
    Read size
    Max xmit
    Log level
    Read raw
    Write raw
    Slow Logins
    Client tuning
    Samba performance problem due changing kernel
    Corrupt tdb Files
    Comparisons
    
 The Samba server uses TCP to talk to the client. Thus if you are
 trying to see if it performs well you should really compare it to
 programs that use the same protocol. The most readily available
@@ -20,7 +21,7 @@ suspect the biggest factor is not Samba vs some other system but the
 hardware and drivers used on the various systems. Given similar
 hardware Samba should certainly be competitive in speed with other
 systems.
-
    Socket options
    
+
    Socket options
    
 There are a number of socket options that can greatly affect the
 performance of a TCP based server like Samba.
 
    
@@ -39,7 +40,7 @@ biggest single difference for most networks. Many people report that
 adding socket options = TCP_NODELAY doubles the read 
 performance of a Samba drive. The best explanation I have seen for this is
 that the Microsoft TCP/IP stack is slow in sending tcp ACKs.
-
    Read size
    
+
    Read size
    
 The option read size affects the overlap of disk
 reads/writes with network reads/writes. If the amount of data being
 transferred in several of the SMB commands (currently SMBwrite, SMBwriteX and
@@ -56,7 +57,7 @@ The default value is 16384, but very little experimentation has been
 done yet to determine the optimal value, and it is likely that the best
 value will vary greatly between systems anyway. A value over 65536 is
 pointless and will cause you to allocate memory unnecessarily.
-
    Max xmit
    
+
    Max xmit
    
 At startup the client and server negotiate a maximum transmit size,
 which limits the size of nearly all SMB commands. You can set the
 maximum size that Samba will negotiate using the max xmit =  option
@@ -70,12 +71,12 @@ clients may perform better with a smaller transmit unit. Trying values
 of less than 2048 is likely to cause severe problems.
 
    
 In most cases the default is the best option.
-
    Log level
    
+
    Log level
    
 If you set the log level (also known as debug level) higher than 2
 then you may suffer a large drop in performance. This is because the
 server flushes the log file after each operation, which can be very
 expensive. 
-
    Read raw
    
+
    Read raw
    
 The read raw operation is designed to be an optimised, low-latency
 file read operation. A server may choose to not support it,
 however. and Samba makes support for read raw optional, with it
@@ -88,7 +89,7 @@ read operations.
 So you might like to try read raw = no and see what happens on your
 network. It might lower, raise or not affect your performance. Only
 testing can really tell.
-
    Write raw
    
+
    Write raw
    
 The write raw operation is designed to be an optimised, low-latency
 file write operation. A server may choose to not support it,
 however. and Samba makes support for write raw optional, with it
@@ -96,15 +97,15 @@ being enabled by default.
 
    
 Some machines may find write raw slower than normal write, in which
 case you may wish to change this option.
-
    Slow Logins
    
+
    Slow Logins
    
 Slow logins are almost always due to the password checking time. Using
 the lowest practical password level will improve things. 
-
    Client tuning
    
+
    Client tuning
    
 Often a speed problem can be traced to the client. The client (for
 example Windows for Workgroups) can often be tuned for better TCP
 performance. Check the sections on the various clients in 
 Samba and Other Clients.
-
    Samba performance problem due changing kernel
    
+
    Samba performance problem due changing kernel
    
 Hi everyone. I am running Gentoo on my server and samba 2.2.8a. Recently
 I changed kernel version from linux-2.4.19-gentoo-r10 to
 linux-2.4.20-wolk4.0s. And now I have performance issue with samba. Ok
@@ -119,7 +120,7 @@ Grab mii-tool and check the duplex settings on the NIC.
 My guess is that it is a link layer issue, not an application
 layer problem.  Also run ifconfig and verify that the framing
 error, collisions, etc... look normal for ethernet.
-
    Corrupt tdb Files
    
+
    Corrupt tdb Files
    
 Well today it happened, Our first major problem using samba.
 Our samba PDC server has been hosting 3 TB of data to our 500+ users
 [Windows NT/XP]  for the last 3 years using samba, no problem.
diff --git a/docs/htmldocs/troubleshooting.html b/docs/htmldocs/troubleshooting.html
index 582beeb6b0b..b43083fdd1e 100644
--- a/docs/htmldocs/troubleshooting.html
+++ b/docs/htmldocs/troubleshooting.html
@@ -1 +1,2 @@
-PartV.Troubleshooting
    PartV.Troubleshooting
    PrevNext
    Troubleshooting
    Table of Contents
    33. The Samba checklist
    Introduction
    Assumptions
    The tests
    Still having troubles?
    34. Analysing and solving samba problems
    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists
    35. Reporting Bugs
    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches
    PrevUpNext
    Chapter32.SWAT - The Samba Web Administration ToolHomeChapter33.The Samba checklist
    
+
+PartV.Troubleshooting
    PartV.Troubleshooting
    PrevNext
    Troubleshooting
    Table of Contents
    33. The Samba checklist
    Introduction
    Assumptions
    The tests
    Still having troubles?
    34. Analysing and solving samba problems
    Diagnostics tools
    Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
    Useful URLs
    Getting help from the mailing lists
    How to get off the mailing lists
    35. Reporting Bugs
    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches
    PrevUpNext
    Chapter32.SWAT - The Samba Web Administration ToolHomeChapter33.The Samba checklist
    
diff --git a/docs/htmldocs/type.html b/docs/htmldocs/type.html
index 209c177a0bd..cc0a2583e56 100644
--- a/docs/htmldocs/type.html
+++ b/docs/htmldocs/type.html
@@ -1,9 +1,10 @@
-PartII.Server Configuration Basics
    PartII.Server Configuration Basics
    PrevNext
    Server Configuration Basics
    First Steps in Server Configuration
    
+
+PartII.Server Configuration Basics
    PartII.Server Configuration Basics
    PrevNext
    Server Configuration Basics
    First Steps in Server Configuration
    
 Samba can operate in various modes within SMB networks. This HOWTO section contains information on
 configuring samba to function as the type of server your network requires. Please read this
 section carefully.
-
    Table of Contents
    4. Server Types and Security Modes
    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server
    5. Domain Control
    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." 
+
    Table of Contents
    4. Server Types and Security Modes
    Features and Benefits
    Server Types
    Samba Security Modes
    User Level Security
    Share Level Security
    Domain Security Mode (User Level Security)
    ADS Security Mode (User Level Security)
    Server Security (User Level Security)
    Seamless Windows Network Integration
    Common Errors
    What makes Samba a SERVER?
    What makes Samba a Domain Controller?
    What makes Samba a Domain Member?
    Constantly Losing Connections to Password Server
    5. Domain Control
    Features and Benefits
    Basics of Domain Control
    Domain Controller Types
    Preparing for Domain Control
    Domain Control - Example Configuration
    Samba ADS Domain Control
    Domain and Network Logon Configuration
    Domain Network Logon Service
    Security Mode and Master Browsers
    Common Problems and Errors
    I cannot include a '$' in a machine name
    I get told "You already have a connection to the Domain...." 
 or "Cannot join domain, the credentials supplied conflict with an 
-existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not 
-exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
    6. Backup Domain Control
    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?
    7. Domain Membership
    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails
    8. Stand-Alone Servers
    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors
    9. MS Windows Network Configuration Guide
    Note
    PrevUpNext
    Chapter3.Fast Start for the ImpatientHomeChapter4.Server Types and Security Modes
    
+existing set.." when creating a machine trust account.
    The system can not log you on (C000019B)....
    The machine trust account for this computer either does not 
+exist or is not accessible.
    When I attempt to login to a Samba Domain from a NT4/W2K workstation,
+I get a message about my account being disabled.
    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
    6. Backup Domain Control
    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?
    7. Domain Membership
    Features and Benefits
    MS Windows Workstation/Server Machine Trust Accounts
    Manual Creation of Machine Trust Accounts
    Using NT4 Server Manager to Add Machine Accounts to the Domain
    "On-the-Fly" Creation of Machine Trust Accounts
    Making an MS Windows Workstation or Server a Domain Member
    Domain Member Server
    Joining an NT4 type Domain with Samba-3
    Why is this better than security = server?
    Samba ADS Domain Membership
    Setup your smb.conf
    Setup your /etc/krb5.conf
    Create the computer account
    Test your server setup
    Testing with smbclient
    Notes
    Common Errors
    Can Not Add Machine Back to Domain
    Adding Machine to Domain Fails
    8. Stand-Alone Servers
    Features and Benefits
    Background
    Example Configuration
    Reference Documentation Server
    Central Print Serving
    Common Errors
    9. MS Windows Network Configuration Guide
    Note
    PrevUpNext
    Chapter3.Fast Start for the ImpatientHomeChapter4.Server Types and Security Modes
    
diff --git a/docs/htmldocs/unicode.html b/docs/htmldocs/unicode.html
index a971602e81c..58adb5c9938 100644
--- a/docs/htmldocs/unicode.html
+++ b/docs/htmldocs/unicode.html
@@ -1,4 +1,5 @@
-Chapter27.Unicode/Charsets
    Chapter27.Unicode/Charsets
    PrevPartIII.Advanced ConfigurationNext
    Chapter27.Unicode/Charsets
    Jelmer R. Vernooij
    The Samba Team
    TAKAHASHI Motonobu
    25 March 2003
    Table of Contents
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    Features and Benefits
    
+
+Chapter27.Unicode/Charsets
    Chapter27.Unicode/Charsets
    PrevPartIII.Advanced ConfigurationNext
    Chapter27.Unicode/Charsets
    Jelmer R. Vernooij
    The Samba Team
    TAKAHASHI Motonobu
    25 March 2003
    Table of Contents
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    Features and Benefits
    
 Every industry eventually matures. One of the great areas of maturation is in
 the focus that has been given over the past decade to make it possible for anyone
 anywhere to use a computer. It has not always been that way, in fact, not so long
@@ -13,7 +14,7 @@ special mention. For more information about Openi18n please refer to:
 Samba-2.x supported a single locale through a mechanism called 
 codepages. Samba-3 is destined to become a truly trans-global
 file and printer sharing platform.
-
    What are charsets and unicode?
    
+
    What are charsets and unicode?
    
 Computers communicate in numbers. In texts, each number will be 
 translated to a corresponding letter. The meaning that will be assigned 
 to a certain number depends on the character set(charset)
@@ -40,7 +41,7 @@ communicating.
 negotiating the charset to be used in the smb protocol. Thus, you 
 have to make sure you are using the same charset when talking to an old client.
 Newer clients (Windows NT, 2K, XP) talk unicode over the wire.
-
    Samba and charsets
    
+
    Samba and charsets
    
 As of samba 3.0, samba can (and will) talk unicode over the wire. Internally, 
 samba knows of three kinds of character sets: 
 
    unix charset
    
@@ -54,14 +55,14 @@ samba knows of three kinds of character sets:
 		The default depends on the charsets you have installed on your system.
 		Run testparm -v | grep "dos charset" to see 
 		what the default is on your system. 
-		
    Conversion from old names
    Because previous samba versions did not do any charset conversion, 
+		
    Conversion from old names
    Because previous samba versions did not do any charset conversion, 
 characters in filenames are usually not correct in the unix charset but only 
 for the local charset used by the DOS/Windows clients.
    The following script from Steve Langasek converts all 
 filenames from CP850 to the iso8859-15 charset.
    
 #find /path/to/share -type f -exec bash -c 'CP="{}"; ISO=`echo -n "$CP" | iconv -f cp850 \
   -t iso8859-15`; if [ "$CP" != "$ISO" ]; then mv "$CP" "$ISO"; fi' \;
 
-
    Japanese charsets
    Samba doesn't work correctly with Japanese charsets yet. Here are
+
    Japanese charsets
    Samba doesn't work correctly with Japanese charsets yet. Here are
 points of attention when setting it up:
    • You should set mangling method =
 hash
    • There are various iconv() implementations around and not
 all of  them work equally well. glibc2's iconv() has a critical problem
diff --git a/docs/htmldocs/upgrading-to-3.0.html b/docs/htmldocs/upgrading-to-3.0.html
index ac559fa1293..16272d0cd4f 100644
--- a/docs/htmldocs/upgrading-to-3.0.html
+++ b/docs/htmldocs/upgrading-to-3.0.html
@@ -1,10 +1,11 @@
-Chapter30.Upgrading from Samba-2.x to Samba-3.0.0
      Chapter30.Upgrading from Samba-2.x to Samba-3.0.0
      PrevPartIV.Migration and UpdatingNext
      Chapter30.Upgrading from Samba-2.x to Samba-3.0.0
      Jelmer R. Vernooij
      The Samba Team
      25 October 2002
      Table of Contents
      Charsets
      Obsolete configuration options
      Password Backend
      Charsets
      You might experience problems with special characters 
+
+Chapter30.Upgrading from Samba-2.x to Samba-3.0.0
      Chapter30.Upgrading from Samba-2.x to Samba-3.0.0
      PrevPartIV.Migration and UpdatingNext
      Chapter30.Upgrading from Samba-2.x to Samba-3.0.0
      Jelmer R. Vernooij
      The Samba Team
      25 October 2002
      Table of Contents
      Charsets
      Obsolete configuration options
      Password Backend
      Charsets
      You might experience problems with special characters 
 when communicating with old DOS clients. Codepage 
 support has changed in samba 3.0. Read the chapter
 Unicode support for details.
-
      Obsolete configuration options
      
+
      Obsolete configuration options
      
 In 3.0, the following configuration options have been removed.
-
      printer driver (replaced by new driver procedures) 
      printer driver file (replaced by new driver procedures)
      printer driver location (replaced by new driver procedures)
      use rhosts
      postscript
      client code page (replaced by dos charset)
      vfs path
      vfs options
      Password Backend
      
+
      printer driver (replaced by new driver procedures) 
      printer driver file (replaced by new driver procedures)
      printer driver location (replaced by new driver procedures)
      use rhosts
      postscript
      client code page (replaced by dos charset)
      vfs path
      vfs options
      Password Backend
      
 Effective with the release of samba-3 it is now imperative that the password backend
 be correctly defined in smb.conf.
 
      
diff --git a/docs/htmldocs/winbind.html b/docs/htmldocs/winbind.html
index 567e882367f..b289f5141ef 100644
--- a/docs/htmldocs/winbind.html
+++ b/docs/htmldocs/winbind.html
@@ -1,4 +1,5 @@
-Chapter21.Integrated Logon Support using Winbind
      Chapter21.Integrated Logon Support using Winbind
      PrevPartIII.Advanced ConfigurationNext
      Chapter21.Integrated Logon Support using Winbind
      Tim Potter
      Samba Team
      Andrew Tridgell
      Samba Team
      Naag Mummaneni
      Jelmer R. Vernooij
      The Samba Team
      John H. Terpstra
      Samba Team
      27 June 2002
      Table of Contents
      Features and Benefits
      Introduction
      What Winbind Provides
      Target Uses
      How Winbind Works
      Microsoft Remote Procedure Calls
      Microsoft Active Directory Services
      Name Service Switch
      Pluggable Authentication Modules
      User and Group ID Allocation
      Result Caching
      Installation and Configuration
      Introduction
      Requirements
      Testing Things Out
      Conclusion
      Common Errors
      Features and Benefits
      Integration of UNIX and Microsoft Windows NT through 
+
+Chapter21.Integrated Logon Support using Winbind
      Chapter21.Integrated Logon Support using Winbind
      PrevPartIII.Advanced ConfigurationNext
      Chapter21.Integrated Logon Support using Winbind
      Tim Potter
      Samba Team
      Andrew Tridgell
      Samba Team
      Naag Mummaneni
      Jelmer R. Vernooij
      The Samba Team
      John H. Terpstra
      Samba Team
      27 June 2002
      Table of Contents
      Features and Benefits
      Introduction
      What Winbind Provides
      Target Uses
      How Winbind Works
      Microsoft Remote Procedure Calls
      Microsoft Active Directory Services
      Name Service Switch
      Pluggable Authentication Modules
      User and Group ID Allocation
      Result Caching
      Installation and Configuration
      Introduction
      Requirements
      Testing Things Out
      Conclusion
      Common Errors
      Features and Benefits
      Integration of UNIX and Microsoft Windows NT through 
 	a unified logon has been considered a "holy grail" in heterogeneous 
 	computing environments for a long time. We present 
 	winbind, a component of the Samba suite 
@@ -8,7 +9,7 @@
 	Service Switch to allow Windows NT domain users to appear and operate 
 	as UNIX users on a UNIX machine. This paper describes the winbind 
 	system, explaining the functionality it provides, how it is configured, 
-	and how it works internally.
      Introduction
      It is well known that UNIX and Microsoft Windows NT have 
+	and how it works internally.
      Introduction
      It is well known that UNIX and Microsoft Windows NT have 
 	different models for representing user and group information and 
 	use different technologies for implementing them. This fact has 
 	made it difficult to integrate the two systems in a satisfactory 
@@ -29,7 +30,7 @@
 	tasks for the system administrator when maintaining users and 
 	groups on either system. The winbind system provides a simple 
 	and elegant solution to all three components of the unified logon 
-	problem.
      What Winbind Provides
      Winbind unifies UNIX and Windows NT account management by 
+	problem.
      What Winbind Provides
      Winbind unifies UNIX and Windows NT account management by 
 	allowing a UNIX box to become a full member of a NT domain. Once 
 	this is done the UNIX box will see NT users and groups as if 
 	they were native UNIX users and groups, allowing the NT domain 
@@ -53,7 +54,7 @@
 	to provide authentication via a NT domain to any PAM enabled 
 	applications. This capability solves the problem of synchronizing 
 	passwords between systems since all passwords are stored in a single 
-	location (on the domain controller).
      Target Uses
      Winbind is targeted at organizations that have an 
+	location (on the domain controller).
      Target Uses
      Winbind is targeted at organizations that have an 
 		existing NT based domain infrastructure into which they wish 
 		to put UNIX workstations or servers. Winbind will allow these 
 		organizations to deploy UNIX workstations without having to 
@@ -63,12 +64,12 @@
 		be used is as a central part of UNIX based appliances. Appliances 
 		that provide file and print services to Microsoft based networks 
 		will be able to use Winbind to provide seamless integration of 
-		the appliance into the domain.
      How Winbind Works
      The winbind system is designed around a client/server 
+		the appliance into the domain.
      How Winbind Works
      The winbind system is designed around a client/server 
 	architecture. A long running winbindd daemon 
 	listens on a UNIX domain socket waiting for requests
 	to arrive. These requests are generated by the NSS and PAM 
 	clients and processed sequentially.
      The technologies used to implement winbind are described 
-	in detail below.
      Microsoft Remote Procedure Calls
      Over the last few years, efforts have been underway 
+	in detail below.
      Microsoft Remote Procedure Calls
      Over the last few years, efforts have been underway 
 		by various Samba Team members to decode various aspects of 
 		the Microsoft Remote Procedure Call (MSRPC) system. This 
 		system is used for most network related operations between 
@@ -81,7 +82,7 @@
 		users or groups. Other MSRPC calls can be used to authenticate 
 		NT domain users and to change user passwords. By directly querying 
 		a Windows PDC for user and group information, winbind maps the 
-		NT account information onto UNIX user and group names.
      Microsoft Active Directory Services
      
+		NT account information onto UNIX user and group names.
      Microsoft Active Directory Services
      
                 Since late 2001, Samba has gained the ability to
                 interact with Microsoft Windows 2000 using its 'Native
                 Mode' protocols, rather than the NT4 RPC services.
@@ -90,7 +91,7 @@
                 same way as a Win2k client would, and in so doing
                 provide a much more efficient and
                 effective winbind implementation.  
-                
      Name Service Switch
      The Name Service Switch, or NSS, is a feature that is 
+                
      Name Service Switch
      The Name Service Switch, or NSS, is a feature that is 
 		present in many UNIX operating systems. It allows system 
 		information such as hostnames, mail aliases and user information 
 		to be resolved from different sources. For example, a standalone 
@@ -127,7 +128,7 @@ passwd: files example
 		is to put libnss_winbind.so in /lib/ 
 		then add "winbind" into /etc/nsswitch.conf at 
 		the appropriate place. The C library will then call Winbind to 
-		resolve user and group names.
      Pluggable Authentication Modules
      Pluggable Authentication Modules, also known as PAM, 
+		resolve user and group names.
      Pluggable Authentication Modules
      Pluggable Authentication Modules, also known as PAM, 
 		is a system for abstracting authentication and authorization 
 		technologies. With a PAM module it is possible to specify different 
 		authentication methods for different system applications without 
@@ -152,7 +153,7 @@ passwd: files example
 		is copied to /lib/security/ and the PAM 
 		control files for relevant services are updated to allow 
 		authentication via winbind. See the PAM documentation
-		for more details.
      User and Group ID Allocation
      When a user or group is created under Windows NT 
+		for more details.
      User and Group ID Allocation
      When a user or group is created under Windows NT 
 		is it allocated a numerical relative identifier (RID). This is 
 		slightly different to UNIX which has a range of numbers that are 
 		used to identify users, and the same range in which to identify 
@@ -165,7 +166,7 @@ passwd: files example
 		time, winbind will have mapped all Windows NT users and groups
 		to UNIX user ids and group ids.
      The results of this mapping are stored persistently in 
 		an ID mapping database held in a tdb database). This ensures that 
-		RIDs are mapped to UNIX IDs in a consistent way.
      Result Caching
      An active system can generate a lot of user and group 
+		RIDs are mapped to UNIX IDs in a consistent way.
      Result Caching
      An active system can generate a lot of user and group 
 		name lookups. To reduce the network cost of these lookups winbind 
 		uses a caching scheme based on the SAM sequence number supplied 
 		by NT domain controllers.  User or group information returned 
@@ -176,14 +177,14 @@ passwd: files example
 		the PDC and compared against the sequence number of the cached entry. 
 		If the sequence numbers do not match, then the cached information 
 		is discarded and up to date information is requested directly 
-		from the PDC.
      Installation and Configuration
      
+		from the PDC.
      Installation and Configuration
      
 Many thanks to John Trostel jtrostel@snapserver.com
 for providing the HOWTO for this section.
 
      
 This HOWTO describes how to get winbind services up and running 
 to control access and authenticate users on your Linux box using 
 the winbind services which come with SAMBA 3.0.
-
      Introduction
      
+
      Introduction
      
 This section describes the procedures used to get winbind up and 
 running on a RedHat 7.1 system.  Winbind is capable of providing access 
 and authentication control for Windows Domain users through an NT 
@@ -208,7 +209,7 @@ somewhat to fit the way your distribution works.
 	SAMBA server, this HOWTO is for you.  That said, I am no NT or PAM 
 	expert, so you may find a better or easier way to accomplish 
 	these tasks.
-	
    Requirements
    
+	
    Requirements
    
 If you have a Samba configuration file that you are currently 
 using... BACK IT UP!  If your system already uses PAM, 
 back up the /etc/pam.d directory 
@@ -235,7 +236,7 @@ winbind modules, you should have at least the pam libraries resident
 on your system.  For recent RedHat systems (7.1, for instance), that 
 means pam-0.74-22.  For best results, it is helpful to also
 install the development packages in pam-devel-0.74-22.
-
    Testing Things Out
    
+
    Testing Things Out
    
 Before starting, it is probably best to kill off all the SAMBA 
 related daemons running on your server.  Kill off all smbd, 
 nmbd, and winbindd processes that may 
@@ -246,7 +247,7 @@ services, several pam libraries, and the /usr/doc
 and /usr/man entries for pam.  Winbind built better 
 in SAMBA if the pam-devel package was also installed.  This package includes 
 the header files needed to compile pam-aware applications. 
-
    Configure and compile SAMBA
    
+
    Configure and compile SAMBA
    
 The configuration and compilation of SAMBA is pretty straightforward.
 The first three steps may not be necessary depending upon
 whether or not you have previously built the Samba binaries.
@@ -261,15 +262,15 @@ whether or not you have previously built the Samba binaries.
 This will, by default, install SAMBA in /usr/local/samba.
 See the main SAMBA documentation if you want to install SAMBA somewhere else.
 It will also build the winbindd executable and libraries. 
-
    Configure nsswitch.conf and the 
+
    Configure nsswitch.conf and the 
 winbind libraries on Linux and Solaris
    
 The libraries needed to run the winbindd daemon 
 through nsswitch need to be copied to their proper locations, so
-
    
-
    +
    
+
     root# cp ../samba/source/nsswitch/libnss_winbind.so /lib
-
    
-
    
+
    
+
    
 I also found it necessary to make the following symbolic link:
 
    
 root#  ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2
@@ -296,7 +297,7 @@ is faster (and you don't need to reboot) if you do it manually:
 
    
 This makes libnss_winbind available to winbindd 
 and echos back a check to you.
-
    NSS Winbind on AIX
    (This section is only for those running AIX)
    
+
    NSS Winbind on AIX
    (This section is only for those running AIX)
    
 The winbind AIX identification module gets built as libnss_winbind.so in the
 nsswitch directory of the samba source.  This file can be copied to
 /usr/lib/security, and the AIX naming convention would indicate that it
@@ -316,7 +317,7 @@ Programming Concepts for AIX": 
 "System Management Guide: Operating System and Devices".
-
    Configure smb.conf
    
+
    Configure smb.conf
    
 Several parameters are needed in the smb.conf file to control 
 the behavior of winbindd. Configure 
 smb.conf These are described in more detail in 
@@ -338,7 +339,7 @@ include the following entries in the [global] section:
      # give winbind users a real shell (only needed if they have telnet access)
      template homedir = /home/winnt/%D/%U
      template shell = /bin/bash
-

    Join the SAMBA server to the PDC domain

    +

    Join the SAMBA server to the PDC domain

    Enter the following command to make the SAMBA server join the PDC domain, where DOMAIN is the name of your Windows domain and Administrator is @@ -349,7 +350,7 @@ a domain user who has administrative privileges in the domain. The proper response to the command should be: "Joined the domain DOMAIN" where DOMAIN is your DOMAIN name. -

    Start up the winbindd daemon and test it!

    +

    Start up the winbindd daemon and test it!

    Eventually, you will want to modify your smb startup script to automatically invoke the winbindd daemon when the other parts of SAMBA start, but it is possible to test out just the winbind @@ -421,7 +422,7 @@ directories and default shells. The same thing can be done for groups with the command

    root# getent group -

    Fix the init.d startup scripts

    Linux

    +

    Fix the init.d startup scripts

    Linux

    The winbindd daemon needs to start up after the smbd and nmbd daemons are running. To accomplish this task, you need to modify the startup scripts of your system. @@ -452,18 +453,18 @@ start() { touch /var/lock/subsys/smb || RETVAL=1 return $RETVAL } -

    If you would like to run winbindd in dual daemon mode, replace +If you would like to run winbindd in dual daemon mode, replace the line -

    +
             daemon /usr/local/samba/bin/winbindd
-
    
+
    in the example above with: -

    +
             daemon /usr/local/samba/bin/winbindd -B
-
    .
-
    
+
    . +

    The 'stop' function has a corresponding entry to shut down the services and looks like this: 

    @@ -487,7 +488,7 @@ stop() {
         echo ""
         return $RETVAL
 }
-
    Solaris

    Winbind doesn't work on Solaris 9, see the Portability chapter for details.

    On Solaris, you need to modify the +

    Solaris

    Winbind doesn't work on Solaris 9, see the Portability chapter for details.

    On Solaris, you need to modify the /etc/init.d/samba.server startup script. It usually only starts smbd and nmbd but should now start winbindd too. If you have samba installed in /usr/local/samba/bin, @@ -539,22 +540,22 @@ the file could contains something like this: echo "Usage: /etc/init.d/samba.server { start | stop }" ;; esac -

    + Again, if you would like to run samba in dual daemon mode, replace -

    +
     	/usr/local/samba/bin/winbindd
-
    
+
    in the script above with: -

    +
     	/usr/local/samba/bin/winbindd -B
-
    
-
    Restarting

    + +

    Restarting

    If you restart the smbd, nmbd, and winbindd daemons at this point, you should be able to connect to the samba server as a domain member just as if you were a local user. -

    Configure Winbind and PAM

    +

    Configure Winbind and PAM

    If you have made it this far, you know that winbindd and samba are working together. If you want to use winbind to provide authentication for other services, keep reading. The pam configuration files need to be altered in @@ -574,7 +575,7 @@ your other pam security modules. On my RedHat system, this was the modules reside in /usr/lib/security.

    root# cp ../samba/source/nsswitch/pam_winbind.so /lib/security -

    Linux/FreeBSD-specific PAM configuration

    +

    Linux/FreeBSD-specific PAM configuration

    The /etc/pam.d/samba file does not need to be changed. I just left this file as it was: 

    @@ -630,14 +631,14 @@ same way.  It now looks like this:
 	password   required     /lib/security/pam_stack.so service=system-auth
 	session    required     /lib/security/pam_stack.so service=system-auth
 	session    optional     /lib/security/pam_console.so
-

    -In this case, I added the 

    auth sufficient /lib/security/pam_winbind.so

    -lines as before, but also added the 

    required pam_securetty.so

    + +In this case, I added the 

    auth sufficient /lib/security/pam_winbind.so
    +lines as before, but also added the 
    required pam_securetty.so
    above it, to disallow root logins over the network. I also added a sufficient /lib/security/pam_unix.so use_first_pass line after the winbind.so line to get rid of annoying double prompts for passwords. -

    Solaris-specific configuration

    +

    Solaris-specific configuration

    The /etc/pam.conf needs to be changed. I changed this file so that my Domain users can logon both locally as well as telnet.The following are the changes that I made.You can customize the pam.conf file as per your requirements,but @@ -709,12 +710,12 @@ annoying double prompts for passwords.

    Now restart your Samba and try connecting through your application that you configured in the pam.conf. -

    Conclusion

    The winbind system, through the use of the Name Service +

    Conclusion

    The winbind system, through the use of the Name Service Switch, Pluggable Authentication Modules, and appropriate Microsoft RPC calls have allowed us to provide seamless integration of Microsoft Windows NT domain users on a UNIX system. The result is a great reduction in the administrative - cost of running a mixed UNIX and NT network.

    Common Errors

    Winbind has a number of limitations in its current + cost of running a mixed UNIX and NT network.

    Common Errors

    Winbind has a number of limitations in its current released version that we hope to overcome in future releases:

    • Winbind is currently only available for the Linux, Solaris and IRIX operating systems, although ports to other operating diff --git a/docs/htmldocs/winbindd.8.html b/docs/htmldocs/winbindd.8.html index c1a64d6a001..10759df47e8 100644 --- a/docs/htmldocs/winbindd.8.html +++ b/docs/htmldocs/winbindd.8.html @@ -1,5 +1,5 @@ winbindd

      Name

      winbindd — Name Service Switch daemon for resolving names - from NT servers

      Synopsis

      winbindd [-F] [-S] [-i] [-B] [-d <debug level>] [-s <smb config file>] [-n]

      DESCRIPTION

      This program is part of the Samba(7) suite.

      winbindd is a daemon that provides + from NT servers

      Synopsis

      winbindd [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]

      DESCRIPTION

      This program is part of the Samba(7) suite.

      winbindd is a daemon that provides a service for the Name Service Switch capability that is present in most modern C libraries. The Name Service Switch allows user and system information to be obtained from different databases @@ -26,12 +26,12 @@ the passwd(5) file and used by getpwent(3) functions.

      group

      Group information traditionally stored in the group(5) file and used by - getgrent(3) functions.

      For example, the following simple configuration in the + getgrent(3) functions.

      For example, the following simple configuration in the /etc/nsswitch.conf file can be used to initially resolve user and group information from /etc/passwd and /etc/group and then from the Windows NT server. -

      +
       passwd:         files winbind
 group:          files winbind
 
      The following simple configuration in the
@@ -88,11 +88,10 @@ never removed by the client.
 		slower. The results will however be more accurate, since 
 		results from the cache might not be up-to-date. This 
 		might also temporarily hang winbindd if the DC doesn't respond.
-		
      -B
      Dual daemon mode. This means winbindd will run 
-		as 2 threads. The first will answer all requests from the cache, 
-		thus making responses to clients faster. The other will 
-		update the cache for the query that the first has just responded. 
-		Advantage of this is that responses stay accurate and are faster.
+		
      -Y
      Single daemon mode. This means winbindd will run 
+		as a single process (the mode of operation in Samba 2.2).  Winbindd's 
+		default behavior is to launch a child process that is responsible for 
+		updating expired cache entries.

    NAME AND ID RESOLUTION

    Users and groups on a Windows NT server are assigned a relative id (rid) which is unique for the domain when the user or group is created. To convert the Windows NT user or group @@ -119,16 +118,16 @@ never removed by the client. winbind enum groups

  • template homedir

  • template shell

  • - winbind use default domain

    • EXAMPLE SETUP

    To setup winbindd for user and group lookups plus + winbind use default domain

    EXAMPLE SETUP

    To setup winbindd for user and group lookups plus authentication from a domain controller use something like the - following setup. This was tested on a RedHat 6.2 Linux box.

    In /etc/nsswitch.conf put the + following setup. This was tested on a RedHat 6.2 Linux box.

    In /etc/nsswitch.conf put the following: -

    +
     passwd:     files winbind
 group:      files winbind
-
    In /etc/pam.d/* replace the 
+
    In /etc/pam.d/* replace the auth lines with something like this: -

    +
     auth       required	/lib/security/pam_securetty.so
 auth       required	/lib/security/pam_nologin.so
 auth       sufficient	/lib/security/pam_winbind.so
@@ -144,9 +143,9 @@ auth       required     /lib/security/pam_pwdb.so use_first_pass shadow nullok
 	made from /lib/libnss_winbind.so to
 	/lib/libnss_winbind.so.2.  If you are using an
 	older version of glibc then the target of the link should be
-	/lib/libnss_winbind.so.1.
    Finally, setup a smb.conf(5) containing directives like the 
+	/lib/libnss_winbind.so.1.
    Finally, setup a smb.conf(5) containing directives like the 
 	following:
-
    +
     [global]
 	winbind separator = +
         winbind cache time = 10
diff --git a/docs/manpages/smb.conf.5 b/docs/manpages/smb.conf.5
index 3e0bc555eae..ec771023653 100644
--- a/docs/manpages/smb.conf.5
+++ b/docs/manpages/smb.conf.5
@@ -498,6 +498,14 @@ Here is a list of all global parameters\&. See the section of each parameter for
 \(bu
 \fIchange share command\fR
 
+.TP
+\(bu
+\fIclient lanman auth\fR
+
+.TP
+\(bu
+\fIclient ntlmv2 auth\fR
+
 .TP
 \(bu
 \fIclient use spnego\fR
@@ -516,7 +524,7 @@ Here is a list of all global parameters\&. See the section of each parameter for
 
 .TP
 \(bu
-\fIdebug level\fR
+\fIdebuglevel\fR
 
 .TP
 \(bu
@@ -590,6 +598,10 @@ Here is a list of all global parameters\&. See the section of each parameter for
 \(bu
 \fIdos charset\fR
 
+.TP
+\(bu
+\fIenable rid algorithm\fR
+
 .TP
 \(bu
 \fIencrypt passwords\fR
@@ -772,11 +784,11 @@ Here is a list of all global parameters\&. See the section of each parameter for
 
 .TP
 \(bu
-\fImangling stack\fR
+\fImangled stack\fR
 
 .TP
 \(bu
-\fImangling prefix\fR
+\fImangle prefix\fR
 
 .TP
 \(bu
@@ -866,10 +878,6 @@ Here is a list of all global parameters\&. See the section of each parameter for
 \(bu
 \fInis homedir\fR
 
-.TP
-\(bu
-\fInon unix account range\fR
-
 .TP
 \(bu
 \fIntlm auth\fR
@@ -1058,10 +1066,6 @@ Here is a list of all global parameters\&. See the section of each parameter for
 \(bu
 \fIstat cache\fR
 
-.TP
-\(bu
-\fIstat cache size\fR
-
 .TP
 \(bu
 \fIstrip dot\fR
@@ -1078,6 +1082,10 @@ Here is a list of all global parameters\&. See the section of each parameter for
 \(bu
 \fItemplate homedir\fR
 
+.TP
+\(bu
+\fItemplate primary group\fR
+
 .TP
 \(bu
 \fItemplate shell\fR
@@ -1146,6 +1154,10 @@ Here is a list of all global parameters\&. See the section of each parameter for
 \(bu
 \fIwinbind cache time\fR
 
+.TP
+\(bu
+\fIwinbind enable local accounts\fR
+
 .TP
 \(bu
 \fIwinbind enum groups\fR
@@ -1162,13 +1174,17 @@ Here is a list of all global parameters\&. See the section of each parameter for
 \(bu
 \fIwinbind separator\fR
 
+.TP
+\(bu
+\fIwinbind trusted domains only\fR
+
 .TP
 \(bu
 \fIwinbind uid\fR
 
 .TP
 \(bu
-\fIwinbind used default domain\fR
+\fIwinbind use default domain\fR
 
 .TP
 \(bu
@@ -1176,7 +1192,7 @@ Here is a list of all global parameters\&. See the section of each parameter for
 
 .TP
 \(bu
-\fIwins partner\fR
+\fIwins partners\fR
 
 .TP
 \(bu
@@ -1581,6 +1597,10 @@ Here is a list of all service parameters\&. See the section on each parameter fo
 \(bu
 \fIprint ok\fR
 
+.TP
+\(bu
+\fIprofile acls\fR
+
 .TP
 \(bu
 \fIpublic\fR
@@ -2083,9 +2103,43 @@ Default: \fBnone\fR
 Example: \fBchange share command = /usr/local/bin/addshare\fR
 
 
+.TP
+client lanman auth (G)
+This parameter determines whether or not \fBsmbclient\fR(8) and other samba client tools will attempt to authenticate itself to servers using the weaker LANMAN password hash\&. If disabled, only server which support NT password hashes (e\&.g\&. Windows NT/2000, Samba, etc\&.\&.\&. but not Windows 95/98) will be able to be connected from the Samba client\&.
+
+
+The LANMAN encrypted response is easily broken, due to it's case-insensitive nature, and the choice of algorithm\&. Clients without Windows 95/98 servers are advised to disable this option\&.
+
+
+Disabling this option will also disable the \fBclient plaintext auth\fR option
+
+
+Likewise, if the \fBclient ntlmv2 auth\fR parameter is enabled, then only NTLMv2 logins will be attempted\&. Not all servers support NTLMv2, and most will require special configuration to us it\&.
+
+
+Default : \fBclient lanman auth = yes\fR
+
+
+.TP
+client ntlmv2 auth (G)
+This parameter determines whether or not \fBsmbclient\fR(8) will attempt to authenticate itself to servers using the NTLMv2 encrypted password response\&.
+
+
+If enabled, only an NTLMv2 and LMv2 response (both much more secure than earlier versions) will be sent\&. Many servers (including NT4 < SP4, Win9x and Samba 2\&.2) are not compatible with NTLMv2\&.
+
+
+If disabled, an NTLM response (and possibly a LANMAN response) will be sent by the client, depending on the value of \fBclient lanman auth\fR\&.
+
+
+Note that some sites (particularly those following 'best practice' security polices) only allow NTLMv2 responses, and not the weaker LM or NTLM\&.
+
+
+Default : \fBclient ntlmv2 auth = no\fR
+
+
 .TP
 client use spnego (G)
-This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism\&. SPNEGO client support with Sign and Seal is currently broken, so you might want to turn this option off when doing joins to Windows 2003 domains\&.
+This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism\&.
 
 
 Default: \fBclient use spnego = yes\fR
@@ -2222,7 +2276,7 @@ Default: \fBdebug hires timestamp = no\fR
 
 
 .TP
-debug level (G)
+debuglevel (G)
 Synonym for \fI log level\fR\&.
 
 
@@ -2660,6 +2714,14 @@ Under DOS and Windows, if a user can write to a file they can change the timesta
 Default: \fBdos filetimes = no\fR
 
 
+.TP
+enable rid algorithm (G)
+This option is used to control whether or not smbd in Samba 3\&.0 should fallback to the algorithm used by Samba 2\&.2 to generate user and group RIDs\&. The longterm development goal is to remove the algorithmic mappings of RIDs altogether, but this has proved to be difficult\&. This parameter is mainly provided so that developers can turn the algorithm on and off and see what breaks\&. This parameter should not be disabled by non-developers because certain features in Samba will fail to work without it\&.
+
+
+Default: \fBenable rid algorithm = \fR
+
+
 .TP
 encrypt passwords (G)
 This boolean controls whether encrypted passwords will be negotiated with the client\&. Note that Windows NT 4\&.0 SP3 and above and also Windows 98 will by default expect encrypted passwords unless a registry entry is changed\&. To use encrypted passwords in Samba see the chapter "User Database" in the Samba HOWTO Collection\&.
@@ -3947,7 +4009,7 @@ Default: \fBmangled names = yes\fR
 
 
 .TP
-mangling stack (G)
+mangled stack (G)
 This parameter controls the number of mangled names that should be cached in the Samba server \fBsmbd\fR(8)\&.
 
 
@@ -3967,7 +4029,7 @@ Example: \fBmangled stack = 100\fR
 
 
 .TP
-mangling prefix (G)
+mangle prefix (G)
 controls the number of prefix characters from the original name used when generating the mangled names\&. A larger value will give a weaker hash and therefore more name collisions\&. The minimum value is 1 and the maximum value is 6\&.
 
 
@@ -4451,19 +4513,6 @@ Note that for this option to work there must be a working NIS system and the Sam
 Default: \fBnis homedir = no\fR
 
 
-.TP
-non unix account range (G)
-The non unix account range parameter specifies the range of 'user ids' that are allocated by the various 'non unix account' passdb backends\&. These backends allow the storage of passwords for users who don't exist in /etc/passwd\&. This is most often used for machine account creation\&. This range of ids should have no existing local or NIS users within it as strange conflicts can occur otherwise\&.
-
-
-These userids never appear on the system and Samba will never 'become' these users\&. They are used only to ensure that the algorithmic RID mapping does not conflict with normal users\&.
-
-Default: \fBnon unix account range = \fR
-
-
-Example: \fBnon unix account range = 10000-20000\fR
-
-
 .TP
 nt acl support (S)
 This boolean parameter controls whether \fBsmbd\fR(8) will attempt to map UNIX permissions into Windows NT access control lists\&. This parameter was formally a global parameter in releases prior to 2\&.2\&.2\&.
@@ -5144,6 +5193,14 @@ This parameters defines the directory smbd will use for storing such files as \f
 Default :\fBprivate dir = ${prefix}/private\fR
 
 
+.TP
+profile acls (S)
+This boolean parameter controls whether \fBsmbd\fR(8) This boolean parameter was added to fix the problems that people have been having with storing user profiles on Samba shares from Windows 2000 or Windows XP clients\&. New versions of Windows 2000 or Windows XP service packs do security ACL checking on the owner and ability to write of the profile directory stored on a local workstation when copied from a Samba share\&. When not in domain mode with winbindd then the security info copied onto the local workstation has no meaning to the logged in user (SID) on that workstation so the profile storing fails\&. Adding this parameter onto a share used for profile storage changes two things about the returned Windows ACL\&. Firstly it changes the owner and group owner of all reported files and directories to be BUILTIN\\\\Administrators, BUILTIN\\\\Users respectively (SIDs S-1-5-32-544, S-1-5-32-545)\&. Secondly it adds an ACE entry of "Full Control" to the SID BUILTIN\\\\Users to every returned ACL\&. This will allow any Windows 2000 or XP workstation user to access the profile\&. Note that if you have multiple users logging on to a workstation then in order to prevent them from being able to access each others profiles you must remove the "Bypass traverse checking" advanced user right\&. This will prevent access to other users profile directories as the top level profile directory (named after the user) is created by the workstation profile code and has an ACL restricting entry to the directory tree to the owning user\&.
+
+
+Default: \fBprofile acls = no\fR
+
+
 .TP
 protocol (G)
 Synonym for \fImax protocol\fR\&.
@@ -5510,11 +5567,9 @@ See also the \fIpassword server\fR parameter and the \fIencrypted passwords\fR p
 In this mode Samba will try to validate the username/password by passing it to another SMB server, such as an NT box\&. If this fails it will revert to \fBsecurity = user\fR\&. It expects the \fIencrypted passwords\fR parameter to be set to \fByes\fR, unless the remote server does not support them\&. However note that if encrypted passwords have been negotiated then Samba cannot revert back to checking the UNIX password file, it must have a valid \fIsmbpasswd\fR file to check users against\&. See the chapter about the User Database in the Samba HOWTO Collection for details on how to set this up\&.
 
 
-\fBNote\fR this mode of operation has significant pitfalls, due to the fact that is activly initiates a man-in-the-middle attack on the remote SMB server\&. In particular, this mode of operation can cause significant resource consuption on the PDC, as it must maintain an active connection for the duration of the user's session\&. Furthermore, if this connection is lost, there is no way to reestablish it, and futher authenticaions to the Samba server may fail\&. (From a single client, till it disconnects)\&.
-
-
-\fBNote\fR that from the client's point of view \fBsecurity = server\fR is the same as \fBsecurity = user\fR\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&.
+This mode of operation has significant pitfalls, due to the fact that is activly initiates a man-in-the-middle attack on the remote SMB server\&. In particular, this mode of operation can cause significant resource consuption on the PDC, as it must maintain an active connection for the duration of the user's session\&. Furthermore, if this connection is lost, there is no way to reestablish it, and futher authenticaions to the Samba server may fail\&. (From a single client, till it disconnects)\&.
 
+From the client's point of view \fBsecurity = server\fR is the same as \fBsecurity = user\fR\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&.
 
 \fBNote\fR that the name of the resource being requested is \fBnot\fR sent to the server until after the server has successfully authenticated the client\&. This is why guest shares don't work in user level security without allowing the server to automatically map unknown users into the \fIguest account\fR\&. See the \fImap to guest\fR parameter for details on doing this\&.
 
@@ -5525,6 +5580,21 @@ See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION\&.
 See also the \fIpassword server\fR parameter and the \fIencrypted passwords\fR parameter\&.
 
 
+\fBSECURITY = ADS\fR
+
+
+In this mode, Samba will act as a domain member in an ADS realm\&. To operate in this mode, the machine running Samba will need to have Kerberos installed and configured and Samba will need to be joined to the ADS realm using the net utility\&.
+
+
+Note that this mode does NOT make Samba operate as a Active Directory Domain Controller\&.
+
+
+Read the chapter about Domain Membership in the HOWTO for details\&.
+
+
+See also the \fIads server \fR parameter, the \fIrealm \fR paramter and the \fIencrypted passwords\fR parameter\&.
+
+
 Default: \fBsecurity = USER\fR
 
 
@@ -5835,14 +5905,6 @@ This parameter determines if \fBsmbd\fR(8) will use a cache in order to speed up
 Default: \fBstat cache = yes\fR
 
 
-.TP
-stat cache size (G)
-This parameter determines the number of entries in the \fIstat cache\fR\&. You should never need to change this parameter\&.
-
-
-Default: \fBstat cache size = 50\fR
-
-
 .TP
 strict allocate (S)
 This is a boolean that controls the handling of disk space allocation in the server\&. When this is set to \fByes\fR the server will change from UNIX behaviour of not committing real disk storage blocks when a file is extended to the Windows behaviour of actually forcing the disk system to allocate real storage blocks when a file is created or extended to be a given size\&. In UNIX terminology this means that Samba will stop creating sparse files\&. This can be slow on some systems\&.
@@ -5928,6 +5990,14 @@ When filling out the user information for a Windows NT user, the \fBwinbindd\fR(
 Default: \fBtemplate homedir = /home/%D/%U\fR
 
 
+.TP
+template primary group (G)
+This option defines the default primary group for each user created by \fBwinbindd\fR(8)'s local account management functions (similar to the 'add user script')\&.
+
+
+Default: \fBtemplate primary group = nobody\fR
+
+
 .TP
 template shell (G)
 When filling out the user information for a Windows NT user, the \fBwinbindd\fR(8) daemon uses this parameter to fill in the login shell for that user\&.
@@ -6342,6 +6412,14 @@ This parameter specifies the number of seconds the \fBwinbindd\fR(8) daemon will
 Default: \fBwinbind cache type = 15\fR
 
 
+.TP
+winbind enable local accounts (G)
+This parameter controls whether or not winbindd will act as a stand in replacement for the various account management hooks in smb\&.conf (e\&.g\&. 'add user script')\&. If enabled, winbindd will support the creation of local users and groups as another source of UNIX account information available via getpwnam() or getgrgid(), etc\&.\&.\&.
+
+
+Default: \fBwinbind enable local accounts = yes\fR
+
+
 .TP
 winbind enum groups (G)
 On large installations using \fBwinbindd\fR(8) it may be necessary to suppress the enumeration of groups through the \fBsetgrent()\fR, \fBgetgrent()\fR and \fBendgrent()\fR group of system calls\&. If the \fIwinbind enum groups\fR parameter is \fBno\fR, calls to the \fBgetgrent()\fR system call will not return any data\&.
@@ -6392,6 +6470,14 @@ Default: \fBwinbind separator = '\'\fR
 Example: \fBwinbind separator = +\fR
 
 
+.TP
+winbind trusted domains only (G)
+This parameter is designed to allow Samba servers that are members of a Samba controlled domain to use UNIX accounts distributed vi NIS, rsync, or LDAP as the uid's for winbindd users in the hosts primary domain\&. Therefore, the user 'SAMBA\\user1' would be mapped to the account 'user1' in /etc/passwd instead of allocating a new uid for him or her\&.
+
+
+Default: \fBwinbind trusted domains only = \fR
+
+
 .TP
 winbind uid (G)
 This parameter is now an alias for \fBidmap uid\fR
@@ -6407,7 +6493,7 @@ Example: \fBwinbind uid = 10000-20000\fR
 
 
 .TP
-winbind used default domain (G)
+winbind use default domain (G)
 This parameter specifies whether the \fBwinbindd\fR(8) daemon should operate on users without domain component in their username\&. Users without a domain component are treated as is part of the winbindd server's own domain\&. While this does not benifit Windows users, it makes SSH, FTP and e-mail function in a way much closer to the way they would in a native unix system\&.
 
 
@@ -6442,7 +6528,7 @@ An example script that calls the BIND dynamic DNS update program \fBnsupdate\fR
 
 
 .TP
-wins partner (G)
+wins partners (G)
 A space separated list of partners' IP addresses for WINS replication\&. WINS partners are always defined as push/pull partners as defining only one way WINS replication is unreliable\&. WINS replication is currently experimental and unreliable between samba servers\&.
 
 
diff --git a/docs/manpages/smbcontrol.1 b/docs/manpages/smbcontrol.1
index 44d419f9191..718e7d7b1c9 100644
--- a/docs/manpages/smbcontrol.1
+++ b/docs/manpages/smbcontrol.1
@@ -196,6 +196,11 @@ drvupgrade
 Force clients of printers using specified driver to update their local version of the driver\&. Can only be sent to smbd\&.
 
 
+.TP
+reload-config
+Force daemon to reload smb\&.conf configuration file\&. Can be sent to \fBsmbd\fR, \fBnmbd\fR, or \fBwinbindd\fR\&.
+
+
 .SH "VERSION"
 
 .PP
diff --git a/docs/manpages/winbindd.8 b/docs/manpages/winbindd.8
index 31ed3ba3321..71322decbe0 100644
--- a/docs/manpages/winbindd.8
+++ b/docs/manpages/winbindd.8
@@ -23,7 +23,7 @@ winbindd \- Name Service Switch daemon for resolving names from NT servers
 .SH "SYNOPSIS"
 
 .nf
-\fBwinbindd\fR [-F] [-S] [-i] [-B] [-d ] [-s ] [-n]
+\fBwinbindd\fR [-F] [-S] [-i] [-Y] [-d ] [-s ] [-n]
 .fi
 
 .SH "DESCRIPTION"
@@ -127,8 +127,8 @@ Disable caching\&. This means winbindd will always have to wait for a response f
 
 
 .TP
--B
-Dual daemon mode\&. This means winbindd will run as 2 threads\&. The first will answer all requests from the cache, thus making responses to clients faster\&. The other will update the cache for the query that the first has just responded\&. Advantage of this is that responses stay accurate and are faster\&.
+-Y
+Single daemon mode\&. This means winbindd will run as a single process (the mode of operation in Samba 2\&.2)\&. Winbindd's default behavior is to launch a child process that is responsible for updating expired cache entries\&.
 
 
 .SH "NAME AND ID RESOLUTION"
diff --git a/source/libsmb/cliconnect.c b/source/libsmb/cliconnect.c
index fa9af19bf50..0dcc9e28459 100644
--- a/source/libsmb/cliconnect.c
+++ b/source/libsmb/cliconnect.c
@@ -301,7 +301,7 @@ static BOOL cli_session_setup_nt1(struct cli_state *cli, const char *user,
 				lm_response = data_blob(NULL, 24);
 				SMBencrypt(pass,cli->secblob.data, lm_response.data);
 			} else {
-				/* LM disabled, place NT# in LM feild instead */
+				/* LM disabled, place NT# in LM field instead */
 				lm_response = data_blob(nt_response.data, nt_response.length);
 			}
 
diff --git a/source/libsmb/clientgen.c b/source/libsmb/clientgen.c
index 58c5ad8cd3b..cd9edb1cc93 100644
--- a/source/libsmb/clientgen.c
+++ b/source/libsmb/clientgen.c
@@ -141,7 +141,7 @@ BOOL cli_send_smb(struct cli_state *cli)
 	if (cli->fd == -1)
 		return False;
 
-	cli_caclulate_sign_mac(cli);
+	cli_calculate_sign_mac(cli);
 
 	len = smb_len(cli->outbuf) + 4;
 
diff --git a/source/libsmb/clierror.c b/source/libsmb/clierror.c
index 9ee181a90f9..656671823c4 100644
--- a/source/libsmb/clierror.c
+++ b/source/libsmb/clierror.c
@@ -108,7 +108,7 @@ const char *cli_errstr(struct cli_state *cli)
 				break;
 		        case READ_BAD_SIG:
 				slprintf(cli_error_message, sizeof(cli_error_message) - 1,
-					"Server packet had invalid SMB signiture!");
+					"Server packet had invalid SMB signature!");
 				break;
 		        default:
 				slprintf(cli_error_message, sizeof(cli_error_message) - 1,
diff --git a/source/libsmb/ntlmssp_sign.c b/source/libsmb/ntlmssp_sign.c
index 748c0089634..ecaef808c9b 100644
--- a/source/libsmb/ntlmssp_sign.c
+++ b/source/libsmb/ntlmssp_sign.c
@@ -102,7 +102,7 @@ enum ntlmssp_direction {
 	NTLMSSP_RECEIVE
 };
 
-static NTSTATUS ntlmssp_make_packet_signiture(NTLMSSP_CLIENT_STATE *ntlmssp_state,
+static NTSTATUS ntlmssp_make_packet_signature(NTLMSSP_CLIENT_STATE *ntlmssp_state,
 					      const uchar *data, size_t length, 
 					      enum ntlmssp_direction direction,
 					      DATA_BLOB *sig) 
@@ -148,7 +148,7 @@ NTSTATUS ntlmssp_client_sign_packet(NTLMSSP_CLIENT_STATE *ntlmssp_state,
 					   const uchar *data, size_t length, 
 					   DATA_BLOB *sig) 
 {
-	NTSTATUS nt_status = ntlmssp_make_packet_signiture(ntlmssp_state, data, length, NTLMSSP_SEND, sig);
+	NTSTATUS nt_status = ntlmssp_make_packet_signature(ntlmssp_state, data, length, NTLMSSP_SEND, sig);
 
 	/* increment counter on send */
 	ntlmssp_state->ntlmssp_seq_num++;
@@ -169,11 +169,11 @@ NTSTATUS ntlmssp_client_check_packet(NTLMSSP_CLIENT_STATE *ntlmssp_state,
 	NTSTATUS nt_status;
 
 	if (sig->length < 8) {
-		DEBUG(0, ("NTLMSSP packet check failed due to short signiture (%u bytes)!\n", 
+		DEBUG(0, ("NTLMSSP packet check failed due to short signature (%u bytes)!\n", 
 			  sig->length));
 	}
 
-	nt_status = ntlmssp_make_packet_signiture(ntlmssp_state, data, 
+	nt_status = ntlmssp_make_packet_signature(ntlmssp_state, data, 
 						  length, NTLMSSP_RECEIVE, &local_sig);
 	
 	if (!NT_STATUS_IS_OK(nt_status)) {
@@ -188,7 +188,7 @@ NTSTATUS ntlmssp_client_check_packet(NTLMSSP_CLIENT_STATE *ntlmssp_state,
 		DEBUG(5, ("BAD SIG: got signature of\n"));
 		dump_data(5, sig->data, sig->length);
 
-		DEBUG(0, ("NTLMSSP packet check failed due to invalid signiture!\n"));
+		DEBUG(0, ("NTLMSSP packet check failed due to invalid signature!\n"));
 		return NT_STATUS_ACCESS_DENIED;
 	}
 
@@ -328,7 +328,7 @@ NTSTATUS ntlmssp_client_sign_init(NTLMSSP_CLIENT_STATE *ntlmssp_state)
 	} 
 	else if (ntlmssp_state->neg_flags & NTLMSSP_NEGOTIATE_LM_KEY) {
 		if (!ntlmssp_state->session_key.data || ntlmssp_state->session_key.length < 8) {
-			/* can't sign or check signitures yet */ 
+			/* can't sign or check signatures yet */ 
 			DEBUG(5, ("NTLMSSP Sign/Seal - cannot use LM KEY yet\n"));	
 			return NT_STATUS_UNSUCCESSFUL;
 		}
@@ -340,7 +340,7 @@ NTSTATUS ntlmssp_client_sign_init(NTLMSSP_CLIENT_STATE *ntlmssp_state)
 			     sizeof(ntlmssp_state->ntlmssp_hash));
 	} else {
 		if (!ntlmssp_state->session_key.data || ntlmssp_state->session_key.length < 16) {
-			/* can't sign or check signitures yet */ 
+			/* can't sign or check signatures yet */ 
 			DEBUG(5, ("NTLMSSP Sign/Seal - cannot use NT KEY yet\n"));
 			return NT_STATUS_UNSUCCESSFUL;
 		}
diff --git a/source/libsmb/smb_signing.c b/source/libsmb/smb_signing.c
index d4f77bf07c8..df17362f083 100644
--- a/source/libsmb/smb_signing.c
+++ b/source/libsmb/smb_signing.c
@@ -179,7 +179,7 @@ static void simple_packet_signature(struct smb_basic_signing_context *data,
 	MD5Update(&md5_ctx, buf + offset_end_of_sig, 
 		  smb_len(buf) - (offset_end_of_sig - 4));
 
-	/* caclulate the MD5 sig */ 
+	/* calculate the MD5 sig */ 
 	MD5Final(calc_md5_mac, &md5_ctx);
 }
 
@@ -426,7 +426,7 @@ void cli_free_signing_context(struct cli_state *cli)
  * Sign a packet with the current mechanism
  */
  
-void cli_caclulate_sign_mac(struct cli_state *cli)
+void cli_calculate_sign_mac(struct cli_state *cli)
 {
 	cli->sign_info.sign_outgoing_message(cli);
 }
diff --git a/source/passdb/pdb_ldap.c b/source/passdb/pdb_ldap.c
index a4ee4dbd4bf..84ac6c576a8 100644
--- a/source/passdb/pdb_ldap.c
+++ b/source/passdb/pdb_ldap.c
@@ -1162,7 +1162,7 @@ static NTSTATUS ldapsam_getsampwsid(struct pdb_methods *my_methods, SAM_ACCOUNT
 }	
 
 /********************************************************************
-Do the actual modification - also change a plaittext passord if 
+Do the actual modification - also change a plaintext passord if 
 it it set.
 **********************************************************************/
 
@@ -1897,13 +1897,16 @@ static NTSTATUS ldapsam_add_group_mapping_entry(struct pdb_methods *methods,
 
 	rc = ldapsam_search_one_group_by_gid(ldap_state, map->gid, &result);
 	if (rc != LDAP_SUCCESS) {
+		ldap_msgfree(result);
 		return NT_STATUS_UNSUCCESSFUL;
 	}
 
 	count = ldap_count_entries(ldap_state->smbldap_state->ldap_struct, result);
 
-	if ( count == 0 )
+	if ( count == 0 ) {
+		ldap_msgfree(result);
 		return NT_STATUS_UNSUCCESSFUL;
+	}
 
 	if (count > 1) {
 		DEBUG(2, ("Group %i must exist exactly once in LDAP\n",
-- 
cgit v1.2.1

    A* N%G˵GÛ@:Dog^ѝX7@'BO8ujNg lw3A @2Χԗ"&2r3k#f9p[4Oӡw<%<O<Ӌ4]5qSPE K4tYfV/] +V,h`fDkЌChۢ )mE ' dC*|#=W،+#ÌK]4t^j%f(lϭ* /#8(%ʅ aC$[%w);)FxS?ana=EXeщ`-mI:|#qs*RF +|aPMT">Ag E$|-RƸ14d+tքW2DW6P+N\ÓS{Ye_'󫺬U{t\3U҄dkW6IA(h lUUuH)Ax'j]b1þԬ$"P j jW6űb'䩼͕HAP@)1H]W ^ԍ2uS]n.q xəx^ip.Q6kF!,uN~DnѕjBMǗ; BDsDyC y7Ze6i9ZV@3'\zj_D|4eU5n+&Ʒ'> endobj 4270 0 obj << -/Length 2310 +/Length 2218 /Filter /FlateDecode >> stream -xڭYr8}W-Ԉ& ^OgʗݚZ-n(BCRv7DyM*%O7??I#S$Ic7Rd>&02gOq8=7ΓynœW秿ΔRHNgI:SpyCG/o7p.>^OԹ偫~_;ξ'\\}x>}>pW -߽\sUN~M'a(T]ܞcᄵPTF:ɏ0r$QaB8TI1NOԺ>Vy-:/PIeۢڶB3/H[4ON f|A[u%hh -KkօLfG2r_f 5 U/#_RBGýN/nr\%)? ~GOy/2\Bi/M(;}aNLݶIo=+y6(? t ipGưyUb$`!,vrƭhH}*Qأ]q{lpH b!٠ Xٵ#>@rU];"O4dWx?e6N>O -j"hA#A{Be BxEcK͋X~:O 0ZʤWsn4Ftv4@˦X>3+@mJWBsrb^m޼pw}g0K#蔷u'l sNi0u-zWlU ;g9⬾@ dOĠtLa໩Bs(}B Ui?”*5 r"aYK&”|;,`|,2l $E)͍hA9¨¸(jʇS*|;j+ԨkMu%4+Vx5{pͯk 7ɢ!PuSu#=k*ܳ2Bߟ8Ir|j4S\W&L6RI=Q ¿_ -|"ypYe::D6OĻ8' 2-j.НauvK!QG 3ύH#ig$MyW{Surf{;FZb -~=^~^DBv+/ݱ\>sHr*7Riog$/V3I"R%%eUZ fpUvZuXX&1UbP w52Xc -P'5P1N2)J{ىbPeQ>x692mihwCɝO'}\S^U抑R-NЃkš~?/{1*7VgZ`G?\NCn2U˿UTT,!TCjBt r)kJ=+.iiuN"^e#=B?W$Vޛ oA -с(e,~e/}% -w+{,ߙ%.XEаs`IJnMCHě^q_@r;ngJ#wrf"^=$`C> ^[m_Q_-[D2#y#Di |fB CDRc6rȀnp%F-zҁw?F296 >c"ѸOU揺'#3HY X -ӟ30BCx;[f%t8w4 7nȣ |;42ϥUm.K7ٽϡh<=u 1z?dYQL(c DD:p^endstream +xYYsF~ׯTKʊec-ni<0(Y~$!٩&=3}~3''iz|$[x%P>M'b5=w'bY?;?t,IRv;.rNzyswqz-w}#~鯋N!gUqRv$E~:pN`|>Y(t#wur{ ԄWb `2 =7M5wt[s6G@=@+E-_jۖh |EYڢy,3%]f%-lyԕ,GA`i`"ۮXZ0d&|ҜTܝ+G㫢;åרQNg? ;+k U#'/L=uÿ$& eϼ3SmjRSy6,6 ;@5DlP@|rtΎ4Uj }}d- "`@k Pny9SVߓ ]6Eh`B+LŋtFj)^]/x74c9l3 ٸm[B`5t|^ĭnyzLzzJvpn2V4 ]eBB +:%S{TRcf[Բh+ $RzYzp]7`rXڑ Gee)h\6ܾ\4;Q^:w}HJxv0ed\7$ +Kc/Fg%8G/trU|KXT! -$LCB\Ru9ēҢo뾈=vW>l$hRzȵӟ p=|ľ>qΈvMpx|) Gh jR e3ڥ.2jU6oYBJ 7QׄbY@C36 Y/? +1 aij֐-guMZ+랫W&qytg-د|޷=Bn VҾj1E%G0FG ~bk<)̠eGvBen?wo}u';1؎^ s/n]H];_Pm*f>M˧Fk.AD$ cEQ dx."Qs̴I,1ImL.85%Wehk,ls_Y_pB$K F_3PC8w&sqM=hjшeI#mQ-qAmMpݷ)`od3Y=۷#Tp훩ЍÄT:k\kܤ};һqcNj*y}J!of&XY:G]{Ec7MP4 {o+ɰ} knѦ1~gQ!G@)x'&<~ײߧ]%79Vۓ(4;גx REs D^͗cو D;v1Mw@1GŒDzirr)ZӽܼSm&*S _xԍ-t]~ ((/̀st!٫w7¯SܜJЍFo{#,)xi$sEҀ^knk)3Pd;|"7P +#1D]"?g96yX?? rCA5h +ϗnȓ[ +԰z{JCA wtendstream endobj 4269 0 obj << /Type /Page @@ -13678,20 +13587,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4275 0 obj << -/Length 3692 -/Filter /FlateDecode ->> -stream -xڥZ[s~473֤jw,2@ܺi!**~ O-|fO"|dR,9W7?x?~w/?~^FQefZy>ݾػO+|׻_rz9w?sϿ}xW-T!`+zQ-^*8$佾Z]cWqXmNj@[N0QJ~E$Sb%p/%q}^*&cójK7$eC%%R~'DOU#C ,~^:񊺆F<kSkP/U3R|AHwASKn`kX]A[^z}z+ZRts 3 pS+]"8P࡯OB߃1y4ǞuFg^`FrI=bB8Þ]6DI]#BUhp#S;]ɻ|֚Xj)sfD<0!uݷ﫱D[7gT<9&!vvM&XrMM6E:ٚTXS$ h͚x -֍4]t펓a)PA2ye \e.([USW{BKQ N A??2o O3|ІQ1_xwFVg'$=SSq"׏Vw+t(! Qo.YNIru_*2* t~Kq*y1xXgBbI&* M@֦LB3O'5 - aܮT ̈́4kM%[F~oVMu_WHj"{`#*Ybd-2 -~l +w&៬%gƷqayqx[{h_x6 >dY AbЦD馕Fp:?o%H +~ćv.s~+爎Sn̹\E@)zD@Hמms(1iTGcO֕x+87(Wq֒Yuùٰ'x8D>Fа E^ ΒC6Q&H+< ΢❜b.SR?nas<>'>$.@yoyK0ex廔DV\,!JAe!e;͑qwbC18pAp^D*)gtP5'nʢQ?&_進a?>2-G{S(` .wpݺK6L k5V0TxpFO,XCZ7g~^0 S_!Y)I 9s_endstream +/Length 3614 +/Filter /FlateDecode +>> +stream +xڵZ[s~ׯ[7+vZʸ3I@Q +Vﻻߞδ{{vAң?2]//,qп/GezI]o~LKss/!ߜ~~{{* CVi9wW[&G~g|pU9_q g?+| ԟ~\rQ)q.˅yvLmršGw/Ĭ^̈y/ R7HCALs˶"7)hLHywo}OϪmoҵ h8~:މjj\e*HbkjD_0͖WA ߛ*ωX{|~7f_l%Bpkv0H܋IJd[(};ȰKrl"^hlt#7 C]IVfɀ{N \Df # c$j2Sbl! +ehc M:[K^)aA_qƁ@[̩蛪:5zU-,Zd;s#ay: s `*7_͂| +Ab3ZlP,kw6 {Eq^ b $5PS1 Â)Ā FX!8Jv eP -`J)=:wec&a_+Җv۰-rtڈ'6m>eaQ SQfҥ2 5vAɬ/) '^^GK',)SnsRkb@^jt@zqR;,:g +>gt +!%Qj15Ey2S_8vhN Ai[ +j߁"*Z"ԂK}#l"0U2 SJ}(#ns0$4 ɨQRj:眄|,O~;kvz@{}:N0I,2a)Foa/h~Kq~x7FM|㏋fÜ#]/Xڂ G>G85`nE-ͧ{P'ь9#' mMн!~oy<y(@-@ PVgȴ&p#W=SSSVMY:0| 6OU&3Eг~tGz`%JZ<+TXJ IiD03l%\8dqJ+/Sv{(imeB,ARBs=Э결)~+vx|@J ,6V1 +#xMlIk#n/2>,mc +5L̨$ԣ3!mxBDO<v*x'LGrWDcUDz&ڐ`ySb?^dx V7/> +7ƴL0dQu+a}5H"%cE(GQ(׫z3/c ?f䌬Ea#1I(b>En)4܋3M;/Izirs߭Ƹ9ߍ9o0llt}RL%pdlqk  -jGqi<`2[NSwzѹ դ“dG1dR&LD{d44QHSFç1s2r^g P L<͝9|{≑Dbo|80"Ԉg;PDL趥q=q?uxBVѕ(V_*eP>+"GK)N ZEyM4G( {MGK qD75DC$3s+6CIA^e3zДU9 `xSTuqyղ<@R`A9Ca (,;Ɍey:6=r*=EUZW>~PG29~7}4|a"Dňf3:I"7PZl@oOWHL@yă*;{{ޜ)5<e0뎏 ULkDNYqJQ&]'?%Cendstream endobj 4274 0 obj << /Type /Page @@ -13726,23 +13642,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4282 0 obj << -/Length 3652 +/Length 3274 /Filter /FlateDecode >> stream -xrF]_%Lʛm9vcٱne2I(hE}`@T6zrLL5ݐ7s7KB YDNx̝Ù'KAYZ8o^:ή:i4^:ӛ,Asd~o>}jן\\Zoӗ/8x׋߮~0nm d_sgk\'H#<ݙ -'ToϮ~1k1Lx֐ q$ -1y~7ЉTLrـHқa7J3Mu~q,C_Ͽ>oTR^s'k6 > DiJV9)ߑD.3+eI@AUBdN`.=YJ[甭0[ep t0&(Mӂ`LDD6!&\ O > t,6A$ISi&d#Hȭ9-IjZ6_%UPV|0bINW:`1ĞD H$d89-IjZ<aEYzq7+QleU<|:!iBn;F6ENmEg\@@|Bh:?-^_9<Q*ktFBP>NQ2|fKQ2|f_oG2HS Q+0N@@mbW2d| YE)e&oH'E[qO0(6C.V2. qjl ^$`F:<ܕ -pcEccA,S?R#^ya^T5\P)܋zCSȟ=f=99X {PVk*-ĭp\5t5WMY= p9;)*g|rKʓk%|,VUYw^DV֢t<L4oxa%1麨L4 [_1d| $vX+:K'D}􌲏rIjiPG)Q~Α۵sxhq#ΉΊXMF0A#IqmX{%@E'mlj<(൒-4Y(H~,)S/Y2bω- Ie82+I )L.'[m7$mKO!s'*83k= LQ$n;Ywt$ڬvm땳3]_p#NytC q6^HPquM?5jq}׌:E&{(5uDBPbA:_VyTbJ.J<ɝVbQE }ЮPsK7wQS^funR@?^fr~վܛ%?Mӳkø&{]g iB&|YM>yP-Ojr h$wZ-PKs]4CERZD"Cpdy=&-[\qݸm{5~ϝ ٽ}@$%/.]f|0zTtҸk?AEu<}k܉ܡ?Vte] ji:VR?rbu=+;SU  DT=ű!=qNSplkͅՁ תpN?;i\V=O| ->@:FK~"+~? Z >mŸ6B0;c6Q4-x##9R|SGQp@ߘ7 omez,>t/5 -UԿ+j搜p;bu/rkF?ZZhVZ\0|̜2lW#0dOwǂؓ fö!qYn#9_=ASQ_ -)?@F63"B $ۯvE9BaGԘR~qB鍐 -_DA?y}ox@?Vrн$ *ZLX1J{gW~0ɹqANd/ ߶/́qkΟ_+cJ F(! :RKb4f^8VXKs9/Tendstream +x[Iw8W6{rKqO{Xϼ>-E"?"ENw'|VZ>hgdß3|Q9ts`@9>p=RHz5?8zc[e}ˋyc Oa/'髗جGL=_w|}r6; goX?Onx[Nfo&9x3omr,xˏa/ʶhs|'ofT9hV)# +&Sg\֕'+"uE]#5N972gp)2IS2hLKd2J hH6 y MéRœ >dѲ\my~ ;.=tYdUhziV/loG`z(>y0?udHO[*K'n8 7 8z{9 YuSsΔk'P:q\勞7z,īα,?b K▫7CKu]M +h_Oߑ/-nXA|4:aȀctQlxax8Q BH D*b +bJ-.7:Il0HV-A)R@ H,qG@궦XA(ҥЌH_$1yQAzL_9Y ɐChi|/*A&-EBԠo+C } `~`::6-M9x>Fg\3A%o 7 w@F$4@^=< +] TɝG4=Oٯ9LJxcqjxb"`UnrU?s>BeEc+ feFq7Bas\Y{$5)r,&m(p 7Iq=ʑ9ӪFbvMNi-s wƖ+f ;:(],Q'VFmHA #5 h"K*&-wyV3Q)?/tM]jhWfe[{|u2\{_mȊ/ЭNw [EvO ?#t:VӠA@F@ʩK$J lNu3o%ԊNð"ig`1Jq +YBL%%}i3?\>Sk/ZmNO؆'W~34e1,^}sGƴw)Ln +Gf&E vѷ.KCP |+'YA7/,O{yyBߙ=譥-BLVķؼ-:x~LJOnu,?pSp.B{IIwFWy"߳; Z$˥H_b_r?=k>$=Tkd/;?M\_z!jR9~ +v$8Ez2~('=AкɚĂ&m g\&8'榢7[I.sYzĈ:B1vdw Z{peR/(Yz%KP7 IP_=^ =6-gJ5|k5P7̇xbWQʯN/I%ɹ;(` +󽦻{<3SGJpo<#wD3PDAV}H7W.6UN,A";`xendstream endobj 4281 0 obj << /Type /Page @@ -13789,24 +13706,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4294 0 obj << -/Length 3833 +/Length 3806 /Filter /FlateDecode >> stream -xڥ]s6ݿBTAi^buhgTI*} (Qdb `], Y+/,c,6+x@(ڡy1s/VOv\q,V߼~ziZk:M3axo>}Ȼaeyzfe }ޭ,?~C-şl|bǑ~}p;;Xg~c -b瘂Pa,8(sk`a )zi}]^NF Dm'ͪoؖмN_v_#o-# nb)<rI[l۹KC!Eh]}=~%P\0(Aׇ\$# Wy&ǪY[DdDd \"X΍j Mr쿞0* |/EPyȰ z(*6ZG[(?0oa'XY#p @èD?SA ;qussAvy yʚn rٛ)9)4GTc?<4w.agy*%6ñ(`gGX*в`౗ȄSP[x -<ߩ*sv}/Ptun9 ఻r> -2fpP[+QOi15Y6o)Tn D-fC -z& 5OkהS}*Xꇺg"V9ъ!tgAR6B1g,\l'\ǮBoMwotkV>(m.X=c>ܺXӭ^X/kK'Pv r4Yh)G ni1oLZ\4SiUy|zc_z\P.hzh}bNz:5‰&4 ?eSc9p,bo!%K/euPDDt/"]D;!@&1VKVSnFsKvtY6}9!xIDmJncO\a֑z0ı}fb9K/谷,yԟ ER<)>)DIjbdz  -4AS͖TDgبryWa߯}O3#CW:V0lr&#7VŒCصMDF4MxheLg<؂83]q.Dl+q`?6^@+:S]ѱ>sbT9083''46^ K*R}u46|kSZCTtY± -m*t=Մ1 NnzV\QR8AF(Q N=P89)3/^lt֚My1uf!?)d˜ؠgȺ[ -EY)sB5V!!P:7gBB?Ȃ&`Ku(g. X0TyM8\K<"/IϠׇn|;^k:0,P֍ܡ)Ƣeq ӋPbrhs cIה s"^:W!`vDx58=7ݷՒ! ~hIA!Be/S=}9*p{ƚדltZ{b7#IWi hʴg̦=֣O4Rܸ~ayٸ)ͮa ~ʢԮш?#iYr~C~ƋV$$$6ȇr8ӂCL>.u@Zy?߂k/G:6#̋a; X$tenE[͈hm_ ai"·l h6o7zlz'-)% ;/+抃wyϿBQd\[{INHtGXڠy,kmoO t8F=CF\^sH ƭTu6gUWJؙ99$u1p"o ;3g򋂌7ЊNl'`oR\]S/ok[A9؀z`CU`eo!_crC([(to.&jCQỲ\g/ڍPY,.loңtZDإ>HHJJ -oZ]\cBr6œY:'\5X--xU1̣?z -d,PmCa_,AGeH >q*ѱٷ0Àiƚ -XG?yӡ -{y4`!tN5^cՒsO# ,|7},_k_B'z):sTn XqLS) .}Iix&Ocw{4mPh)O1x˲k Q~ܘY5S觙B~0$b;ůni3nAy1kt,w.(΋t Bpc\lyׯ^me~ B~Fd?N6=o!Dendstream +xڥ]s6ݿBR'Ai^buhgTI*} (Qxvb/ȟ)gi)͒4"6+5{̇+_(,T!fuuc|e*dmW,Z9$I [k~|o0#߯˿pLsw~}c2X#^ma#?_)OgglFڋB-?vƅ35!eGR+/MC+?] 曼ַҟ@<6Zn h[ik6|wSAx8ϫŁ2ck|.ge39<È?[ʖ>-=W)o^x8hWoZv 5`gXmA)|#M5U2xn TGeS}h>h>1%PV=8!2H>?}B_Er1QŖ|+8nəE:eglam. MB +}ѺhfXQ&@ u䡞Z=i2Ez8Mh[/ų$|hYevUƎhޚSnJlYHlgn>5m kCLJ $B&яx-1'A4 "uJ p|c;FKT %ͱȠyZQvo_&. +U{Uf[ڜ%dؒ;nUh$R}I!T̈1xɄd[PҥXa Ak 4V5V;nI|4xGfp%(?!PrU$7D\oco6e<'aBUN47fS\{\2W}:FrNiƨB`,Z/ݹv5ŽF0-A])k`@-HLl9"*188ļ- nh=QAu ek¶EJ.?q l}]uy;_YCEE`#B|evg,e4bcoƃńbh=rIQ@%\Ƞ9' +F^b+)K 4tCN󈶝b\(`ޫeOح|4`# G9A,e8JXfnzwlVZ3@q(0y}]2,;1@m*j%0 ګ n VVwV 烁GԐl %lʻcd">Ih{6{n+iA˜=4dokL3#^y(#"+#qɹah(8(ƱđBx`z/AyVf"Êb&@7>/hhPPMnF`h4YooF2Q~~q'qsAvy5y튊n ۢ'7G]0r"NI)$sANTc?,4s.-/s*%6(oog@u%hY3Id)EyN<N Y+Jer_f|8e@Sj*ù^]I9" <˦#̕78l P ȿۧkʩ>=X]Ut;hE: 3WlHݠ})B{H!3.sD``;y5L5+RP,WdP.[ku+hEvrVsq!TGف>mC<--1r@˟ڸ 8mߕ#*/4YqK Z  +'^XS(PBWq:.i] 9&[Ն[ыXЙ;oAy6{y ,]>+٧!?g\@U{I2NGGXx k8J $ZE!~!篟A&Oƙ.ՅtVJ:UfnUʺc9"usnK0ت򳁔7TV $`ozT)79ʏ .zճ~ޡ*7/c<^PWpadzulϦOʿ P,ᔉoʇK{!)C(iUsVE ϊsbfpJӚk##yI[T O HˌO})}@i@kw `~s?)Ez&n&  k*`m>ʘdp2BxԒ繽$-`g3Fd]UYn$#x|3|-Wl1+;r2g8 h~3.@T5m0Gس= Ⲃ9M 0P(`G3sf6n=%Km+'2?!˰ZsJvHG: 2<K# k\l~҉VvF1"ဳ%;MTwC6Y;t"W,BߍًEv +~J1KaO0hCf窡T/V|y\ya00^e^N_Îd$=eThK>Jendstream endobj 4293 0 obj << /Type /Page @@ -13829,28 +13741,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4299 0 obj << -/Length 2418 -/Filter /FlateDecode ->> -stream -xYKoHW0gv$^dLDYP?j)Q:U_=f, 44K8T,=̻3% !Y84wgohfvM2[}^Շ70 =/4n{G9Ͼů>]]_u}7wgH]~ǣsuf7wj* Q> f+PM6{v+cf(8 -_ݞsьWMY)3?c3c&hƱD)iUm5_:vy E*"u -dnS5[|-4+ؿojS[ zKw󲭙#6źh |< -tV%mZ2!p@B\(!5#o۵H<^ fļŁdnV24rSo+sQxvlvdĺFAp2mY{4|l[l"P92BJ#uye+xAx+I$L -˺ZO&ő0*q5buu˳e{Q%%B1!kc7t9Bf^,';C,qf+x=Xa͔gq *"Xy3Ngr ~>Ѹ$1Q\tẀs2 --vߐ)6y'n-X4hŽ#EhBc(,^U_jOt~Í0s: [P(ux$vѱ0r!ЈU͔ -:"#!Ӷ,yPP5) "_8K:z[T"YWT %;EEǍSZ5{Iwuc#E!gư/[HS>^IQ3vUȬut3(Bhnv6ݯ6!ec+; єb8N -{saM@/%m)9&;8i`mArJGI6Lw!%e(|#Uq~Iu0핌l[H^^Sy -1xB%C.B9.a" D>Ğtϼ00!t6,gG,֍ `Ɇӭ'ryjbBm&Q&,:qC1G>W6 L9$$ ,$B)NpmHS'؃Y'Weom~ŚA:TSktR,lYّ};H4WvI&VW9 g%,xsO &)?Xx4iT&!v;P(Eɽ<I+FGMKڢz -#bҀ -u8s3Xat&ҍbnb^KӲ"`7ܡ)"ZQa!Y2 -X; - % ᚪOzGaqc3a. l &;bj )e+[SI46$/,(#AOL/V.i:H8K@B/`&oP5BL'&!՘S'FzO{yqk oʃ̴(? CC@k@ ,NxIT#hZoDu7t#T/2'"0SKϑH, -{T:K?H#Q>~n%9tGkZ&J85 -;?("^> +stream +xY[oF~R@E Ew8Nn;{ihRKRu{nC%iB˙sΜeFzgi %iG-wgj3δPY8©q8T6[߯>ܽ8_A|$w;ޫp8y-~wu}y37wo'H]~ǣ{ufdz7wg5[F~ Z=RY/_Wr]lY^#8_J|PLg cg_:K JhXWlgۃ%o=c}T!r ^p<Ƚ"mS^m +H&Cf`QnQLu;p#i]%Hy8Hށ[&ybo5%N%ɰBM1O)A“!S& >Rj~}$1bpJCUeqK(%wO +:7?΍RI(t+Tܐd<eM @.񻪙BaRd$ޖ%O*<7b ++ͺZMl\Xth +?5mf\9na$7l39HerENqR-^vjnWZ]M 0 xw4tڄ"p!go 7G:^W_n~|vF#˫u##ip*yt뮴#\,ha~bpt1DfR% #WS|;w؀2tpt6_̤`wO_iipN쩱N"q˂2߷6`AZqé5e:GrX}r ],JJȾy++o#kx 㫜pH\-m4KkH*v(^$#ҹhf{ [W)&3B>xD\ A?*B&bnB^KӲ"` #CS(>uE0!FB)et+8lG@B@5U; +G\g] Lv"bj )e[SI46$_}Y6C}$Ə%߬&." ld$\\,Lw/sP `OitK(B@ĉGQ7xWи zhA<jmU2~`¿9oz'$D*`4_ eC=$LsOVCa@})B@ԢذcC?ޤs+afα_ +:Z2PZ(@({³bݰ +4Yh9=a  Z1j2xk9iﵼ04|!2_籝G6VMָ5(΂>AX;ej2 +&fxk=Y:roآ^=z5s8i0~K`h_ שm r/7!vXsUGJ&mPH-tWo/tIfFk{kV!D4w7FjiN64ٓq +Oj:p 5&gXAG \:`Hި&y5UɏF| nKͲ5`Rl8:x!.9%o}S/|45{^6@Z?!lӳ`nd"?K:b j NVftpT2JGvdďU4p7İtd +r]:%endstream endobj 4298 0 obj << /Type /Page @@ -13873,30 +13780,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4305 0 obj << -/Length 3070 -/Filter /FlateDecode ->> -stream -xڥZݓ۶B}f|4_ùS'ͥ]\?PubBWHPt<`ai -Z*Ic? -j{ -V0kvd_ -,VAOQw_?0@r}$wVOnxoy;~^{ӏ5Y/{raT{K -0KW*V+~dBiWWwWtY%+EaGi87S9fR:MfV~N昗:ґw̻hoS71xɵ5d4jyuqK-yj}Ѷ΋hZ`U|-xu~&N)xj {.A9()'矻ivNnYʀs==)⬾ljr|։e VN*`B;]˶]+wM -c=_>dqhXqSǢ˴F|FE4Zy^-;XeSZYvܘ̖łY;Z^_ܩw(Su,򞟞 -*nlհZGs,j۬&lyC7Ce{Ela֩5T{˪nt줷 q:wK^y`REb)Q1" -+~_;҄? Ƽ(t{jY)aAdg۳S _TN! Z$00:x<#BHN)l|❁_v6$ꤨw ޳W~i%!Fr`h ,W=A,# bC#'ڻx^T#ÊgBGI>#m;A [{&<ϒMz S M#!cʌb*y esUdީXZ9DG- ɣx%Ů1.W ϡK%xV~ZD䉈DU/;Mp$46*f88r-fx)xf`j^%2lq ݈ͅS>]cщ̑ߏa_fM -u%_+. |[a$&47x"ʠ׹ u+$47a 6c(OV{VxpWؒ n[8Y# ӹm>,6Uuv4X:J ElL^Tu:#\VY -<(3BI%nM*=,zp*,G)3(@Β H-O -P+z?dLҀB\:cķ5_: F"-J6wasMFZ9jIܤ։Y04Q,8CuC 945cXOAl4Fp*/udi'jͩgR䂧^!H\>殝y mB¾\ۥ9fRq@y諸VaX@1rqƮ4F6"t60#Ck`';hYZ,bFs{tICr=$r(Ѕr'km7{8ms6z)( -}i3)z9HQ(!$ę$ŧ1Y_*v+fF -Ē& pM ']l`UGu2-]IÿR1@Մnx#BFy`0qT?/fLQ8CL1 pX)//xjH뱨weu家bR^StXNkv/@XrV$N y`8rHG]=S ,>8M,# -r`Ӥ -B(Ai\Hq|~34<4آ;x2ܫZn'Zl/!42ǎi@I jJ31R6F,u' n{i,Wj.]oy[Sq_>r^Q >b/P17aac{ݴ4{pE-U0FQc[>6KKGX;hF#&-ڮORM:zrѕ!!>C "k(u> }>gjD£8Pc L%4}vbw)3-#qbbÆ07Uendstream +/Length 3025 +/Filter /FlateDecode +>> +stream +xڵZYs~ׯ`* R9u6  տO_3HPN*RIzZDYF&_YF-h-pD FIM~؅<[b|߿6мN,[w7H[n:xx/Kwp| >Qy>~`_?~~E^&W_6U<[xHXǟg:)g':;"ޜ0y6󘧡M9Zl587_lsMZ犚SLC%DZ +q'>eC__|a6c:ڨZє=έUߍ} +Ixܛ ˈIFG9JgsU3ŽdzFEֲzb_H)5L܈Ę{P ,עP j9Gظeh E23w +0L?kN~?#`!<+T7f,8ئй c=l> +ƣQDx 9ȹ) +iY"s~iy0 +4jHx%<SɱcVmsDžTe`+eτO9}d]WGJ(@ *syEylbcpKa8ɐ=P 8`=r5XC63V }IPe#ơI x޻$XF{(|v]1dzbEM=(6M8Ћ5A#aqG"l1#Qq ^X(/IC8qxc͙iԤ]1Z =Ϗf_{ezM u8r?V\o@6;2|OȖP8\qC@ߜmt>1 +w]1]⸷c  EOӶyK*4ױNOұ}랔 +02 :B7E4] #'~fP6zf6 +GjC7tADBqc3 (n HXD + +ɝ DvrBrI'ʺA*|vDepn(Wn#0$%HLl/8d@Ò}=D9٭L29C`%$.ȯGP$AD,FfF{XQ_b.zuF~Yf"Ȟ$/?J#2A]x|/ ԛ@M7 cC:L̐y5/Zsendstream endobj 4304 0 obj << /Type /Page @@ -13927,17 +13831,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4311 0 obj << -/Length 3233 +/Length 3086 /Filter /FlateDecode >> stream -xڥ]o6=K`"}\lo"8A[XIr/R-{8,6"Cr8oZbfb]̲fRsԞ-e"i2eVRh;H;R9{F~I[#in/kR 3Ni )S#6 ivOz{&yfU@7K`U~8 -,m6%Ceh ƏEa%n⶟704S; [FEU~lÍ[|{%vrRwl]ג77̙?I77F9U?Aim\9Ǟ[ ٢ADirZj\)[+'دx#bL,)êv",hofC!c΋.URpzDwJnO.OJi9-:6f DexwXيcm'/f7YVzÝʹ@rT l+F{a1JՍ)ޱ9y$yiqj&6OJSdNWKAܷ˶GE}:R$E0%I!\lXt֥g|k+vaUO)uV g B{,:Z<-qwV4=:Amm5Ι4U -Vg'/D,cgC0aDC j)̈́l6ѝDj~ۏ'z'M%"<l61HCq6QYHHSW<*:O/o(_ "nB8Bc?m_1 ECnd ȟ+m[NI#:8Tjqv0h=#숗o *o%{d BXE"3 ]A&gEvNd.D&ح|',u>7 !S?K78kdvJvIRx1ÇpBai2D·}ȷ{Ē.9:4 mD[pd!8B%J) -LrLZC\N;xAәiN }%|"JB&+(ܥnSԡ5 Y.$nEKsY>{SwCYn0F_Vz:vw wxdɔBv=ɜDexc-@$x/4,gn_LTf7?ۡƜ!YxKJGSSes9)c5KqzQ4Sh}nK+2MfGQZ2 \ZQ4\9eۋ8矠"5ag=4%77x4_1>4JTU`XpqW;zmN-/!Zlry(Fr^;}} /mq1y!|^iNz#"[_ljzeZsq)p!t&vr?m@񷝻qVG -hAfy#^L,\$6_TB-JpSs"yNRu%9IEQ#]O33e4S@͟Y5Ne88N#c aX$6v/^;^f"I9mP.G>|DÃx^C@ƣm',b%OJ -4^+{ a>q֧"-qZ@ Drm-r!$R*jUפQ_1/q*A7MIq@iJM .ec{H2Ѯ;qDI6>U;haKy ׂ9ce(k* ~Q`̈́aDL/%"5 %9RO6>ŽoG7@A-kVޤ9@C!_'CǽSG~" `դA8?X50lB>ј\O}!T3M>8vȃ(\ -Z[khueBǠ/<=lbYha D"Zq*z3wll*Lj-_crpɴXpif1x\luYzUendstream +x]o6=K`ER asҢ&EpAeGXIr/R-ŵEpi5OrźeyYfE<ȷJ0♉oR3SqTnM(w>|\h0|Ȳ|~{z`3ˣ?7_|2nepZ"$j:5Ŗ; +lI>+0Keﰪ`# 엨.Dr6E㼢k(&Px%JS21<#v{5| Vcel9;6fDfxwlىcm'{?ݻJuLM̬7ܩo$հIۈζbﳋTۊ=^x OOZWI%0LU3tj4qq<-tD4m*':L4N69]-q߮/w|ֱ&l!-,I +b+c,=[o#XZ)4xJ=HX0Vn[aqP0q۳ɮёl vm6Τh-#H~'uf=b(hhua<9,WKQpo&Ld˄58oAn$*P+l\$+<8=V"B P&iދ-=&$N|5PydrӎV Dy*h{+o^X2C€;KJrKZM^Yore$s'3?M}0 ESP #[#<(SHmu +qt>̢( Hr 1I4&Ηۺr>91Oh;M "E4y]q/~)-k 85XP a&K:"q7Kr䐍rC30t=HLf#!$ !āPA/Q0Ha#dL٫+6ThS=19F:5: K#ļCӾ%.CoCA\ڊyG汷}sتږƑ&Y2eGa؟4p@62qȱMD'Pr-qʶ%'-$OR;T6ɵ>t9. lIkhjꢽ`N6'Epf4X[/KfJqcjL6Вq:|3j94jW2_v '+[ՉƣFI61DN°$+g䡲(y/ ^G#˨=EPh|OK !#X.Xy/aP# +4@(twA&"t:?Mi!BQJ! uJCiN2VhXb%)y[KZCf icsq '@jN [yB\fm1U{{)`x͗_hJFO%%CЪuZM00=`*d6y /q{zA!`|9 +Xg ++tR!9OEdGea\@"Jn6rlгfo16W4Dogܝ*8˩9q| ۨPɫJLSJfLAP\Oz*tАqS|B :ؕM 9F|8}ĭzCRp.P娜_hUvHX?xDBWoIܤQ;H!Y(6g\kGgEvcwOfm9Y9T!'$RʫjҤQ^{,"rTM8~ n+$JܝW$"eH?uSj |vY~){?L + lH ]x*.Ue(?8K~ x;|Wew)zaXwl{#M}wiy lrLծrݪIsp~jq$V|\*06ښ"B 2@/`-oSq#Ė]z ORh^Rw&^n:<:&W@*w~unW8x -6MD5PcC/endstream endobj 4310 0 obj << /Type /Page @@ -13990,27 +13901,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4323 0 obj << -/Length 3496 -/Filter /FlateDecode ->> -stream -xڥZKs8Wt!T!d;)hXH)~${HMeGh4uzz;brF۳xgZ(B2\ܞ-3".fa"VHgߣ_Ƙ(YG7:zwumgn7.t O\/恋/eZ6EJ\|ѣAX*2 lؖoz%78܀z)yM-WEISt/#K;@gQ>bvTbݐ{ۆQM KS0ӯCy%- T.{5;ת(?smUbH6`}BJk/fOK1_jCQac(N]ׯ2L --J9pn?nC#@QOc| -\L9Ag*4[a\#<618I3<@ 4 \GK&I K~"UW"tk_6 $`&3zrh -H [ ٩07(A!R,Kaܛ h?&l L^fȥ ){h--1d΂>yڠHʦj=< c)Jld @w30~ڲ -x -<3fcZyïKȫ~&  Ox3{R ڰB۾Pݿ0DV FHm80]!cV8$5 6r6d -}@#$}&kHjcq}~Zh >jC2+$HX{xKNѻAX%Nc3{ hB<@*[iEo@*RZٖB^C 8ρ_#?-Ί8d2"I+A/6;G>9t5ň*yDP3҇gy$ND-?akLAA3c~uݒ B>~{~ꆩ6t" -ؕ!miGp*IJ\5m6MLÉ.xfC)ϒɰu령N,1'sCA8sǁ& EXt,LS|9kPu 3T1(6 :JTP{pD$'@܆8lÄ).qՆΧ/2/;gF \Qa0|䉻f$.lF a$FҌ^H]~,~ / TL1E؂Fi2|لıy)-)ere*Mܞj-H器MxY_.J4J+VSn3^xbUAN{_39b GZ÷Œ 2JQ)d^]m7Za9'lٸ*r6*^Gs SBvu{bA) Cv롖H&YL=U;QRfVEFa?g5eħE׆q]_XC1Z RQ}=b07 B$@z;BB:DwK&%&)8`\'k)ӌ%-^p6IvEߞTeYJ;oA*,!Sᖛ1TڄQ_ l\+%o4*9LL`ӎ8FdO&BתANg7 -DW<#` Z2z]pFQ3|_Mv-,zB}A=d@Z2nǫd4iO NZ0,C1I}~J%4,mI/ [q5,a] /Bu NTU\&w2r0endstream +/Length 3379 +/Filter /FlateDecode +>> +stream +xZYoH~R@a<Cd=#;0<-HIߺD{0AFWuu_g>gUIgq)kl;gkte? Y:9yKδR?Ӕ7||ljw=H[E/{xg{آv==]6;Żײ>kq?>LEܠu&*Lv/j g1jٍa w'׽2,r{) v24 Bz&Os5\WN&3\ֻ䵧gWL`Y>B6ӈjTS `ūH@ز z-A 7`yHx[2&)ˍ +]gYfF vAT[EU2;0#$#ͦ +NCkVEV CR9ߘ) +bFZ$GFU7,0~h}k#:ŬCK_JC=lc5O並O8e4VgQ3v6ZHsFY][LV՞[BCmY/ZNߏuf!pdNՆsI CNqd8ң; f XRXT4&eᘤ39Ju5u+ qRc8a~,'P{ċip0>24I[[/bEi7xW%aU/lUu.@R;!$g n6Ȼ-ʕD &"PATHGI34K% 3`/G8}JV6 +^,_Q;a s2A FE:X魂grmҖ + Ba3L:^BYoϢQI ,g;VgQ,`|  ٚpJ{ˊ|$R%dC6I…7C g첇*[o8U5_+XTdE%,6K\eCAq`/, !q31Q_W1I5&T +V7>!G-;Gxj9r8(yֶ/*U BЖFZe4Ķ(V1wB/drv,5>4}rm/krr\0] :DBuĿoD|결35(j]{# =sMsiDeS.:="M˪{Ty +#@(#z_uMb*@+R{VknT<,dq Wni6Dy.E/GVO>{h +rmj`zziR9UɣrȞ85TW3}# 0Y3TLiw_GK!`aсJq ~N (v~@[*N.#rQ12&BSi%3U P*Di|6SU` Yv9 uT5i`;a[ E}'v hQ9F"J9)4l8l4{#N3*uEU#D֣@> )RY4>j_Q/F^ĻqԜ 570-e&ruE }:"4Ѭ]F/ 3v>]#3G50聎Jxl=տ +;,S3 JfOendstream endobj 4322 0 obj << /Type /Page @@ -14039,27 +13951,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4330 0 obj << -/Length 3349 +/Length 3290 /Filter /FlateDecode >> stream -xڥZmo6_z; limI(zزlgfH˖W!9f>,(YQ0[lٚF9 tƅN̹?{ubf~>_9ygj5oI|'\`QGzGa![ץAz~^máAko^E/xG -Ǧ`=Z+F ʟ!Ӂ"Gؠ8̲A>|ဖJl[KR2<.:%垾YK!5:^k68ϽEt VuV{hhxEQ8h7mص|/yQĐG~j#$=A_lBnVFcڂ[al7:oǭSRme+(` XUgqkU Y7T, -avT⥷hڶ\􄛻v#Tk~?骺*-ѿ77짶Qqަяb=繘8MIJʭZ-z9*u|Ir`SYk:M[>ы48B;6aUw y;<%a''S_59 -˨H] *,}b3 -yN P$α3qhP4t q7֥筳(N'K}lRld&)aXwY -[ue9Lf<èo -Ne:-؃ζC `l˥۸ &6ɩ&Eߗk8^'>([?N^: -\Rӳu, %GԴtY&# YN8 w2,#ִvIcxc؝ȯmB*X&wЫQ_yz5HvØ$Ka+_YToq[dB/L:m<:J&x$d4uǮ_"q'c"QXvΒM,d&뭟pq: hS(HLx WI{l-O\Nk.#B.Lӗ~M'.bQ=R$Qs:4RYi4'4 KiG^# Myf2'$#IB6X֙M -4y`(osǀ77h!gD ދbIa'^NI3/H"o df#d@gLD=;(X@/dUg͚0N`˱S* $RR'-GjYvzߖ*QM4v+IO~a邝t=RJXmײAu*E< -@̷Y*/7º^noǒfR.MKIrSZGLDS(jj32Iz 1 ,+}/7B*_fRN5IPb It.P2戎5X>cN@ &9xdO baixlr2LAkN; 8F@RTq Zz9D|e%AwƹzpC]Acht -['kXO)vA ;jlb2½j8^MQN<(7'£xٟ~4<> -mU-+9*ȿ c.;YZ~q2t/e7>&bmhߏTp!J&4.ڊKd3t9Z.٥E[lQ!-u\x~:SYT0MPe3[8<[V. JX -=$ϐ׺Vz]j<܆;\\FtyIe.ԢU TV&:Q~b"xo e+> b+_Iaؖuٚ8iry6]όM2#4K~)99< }vC哌2 ?ngphH_|VUC (GKSq$v@$іZA6ї[}YIQ3"2tec>K8{+b8?raj{)b$:na GQF~W7RGfjLVt̺^OwழbߍVAԱnXcAd&:2|>QNd)0K&>RiW 꿣P$;"!b>\/# -;Ƥ|` ,6ۨJ;ز=ϳ nYfu\ewY üEpp4CFj-ਈ5zKFk)ÚXjl"QQcc ͆ll"OH4Kt7T${p9H}DYٗe -6?ęI2 Lj6]ҵH\Y9 䢵T;B,3˦ķS=Kb#Wi8־BڂX*[%E?} -~0G08ubdۆ^vUI6SSw\=/Nc92bW24?&3Y&Tfz -J!z].IeL&,JbʦiɡqR[$RQ'P0;Jv1RV;1Աn+:p15T}iv-6"N$f[v6 3D9Go [?B./URRh(>jj -5Y~#h&ZWۃ䇺ZESA+Z[{F~Wt\ja_Ѿ`yyN0Xb,:&6iL131endstream +xڥko8{~SQ 8 $l7x,zXle%)ْ +9Chϟ%t'CXy`2›)׋4.G?Gj{nꥳOO_}8> I'\#X9o<\^pψ۫>ƀ1׷˫_&OgoF~=0Mf/\?Mg#CWP,ƩϚʼn +"7zn(+_O%'ʋqz*gJT`;q}se^lp]a,qʛ;7..=_A{Sv%|ꍐJRVrN MEKQ>J%-J ' [U^B7s[w2{:= 7P\fXgD3[kHvHn + .POl&I\!ܠabM,ư Q(I@ʙՄ9O׸W+EE| Vp^0@b lF +Ähj$bm:+#X$Z>2婬xAN26z|mW4_Լ1PUji?BajnUۍrSYW@X^s;WzNomΗh<uhS,DR]}\U2??~ϣZtu'x p?'z!1I6E.# mK,%ݾF*K|_9mQuӎ^ed Mݙ&^Eh:Y^mEi;Pز1g} iHІ{ƲDY \v`t cKieq3kh#cJDeU:Nҕ]cPq֮]֒u';['OmWgE\ؼ +ݣd&f<qt@KQⱕ؟[8ePH{pЙLr]qAf,7? +J+w ϼ9e?:uuM@)A242ܢ,\IW|MQ}~q+6e8"0Tb8tf + p?pvYk0u`)Q$-I+YbNĭ&5 dBF^^Q4AS3lg2T_67,fCX`Rmu,!C9PS(x{#;`sdhD.'fV3+9DݔYL.BGC $vHS\Y ƳcJPbI{ov>kT #tmEuCߏ_pľF14Ca vY0RzB^>c @)1x"D7+J80L +`zjN$ph;M8BŜ>#3,&bޝ4N'ޅ&긃'c p7@tgN89f\WL}C+B1i^֔D HRTl"&Jp•i:20wetbљz4`& &-T02|7VBGX ,@ ;J%j7GRb-h`] 9kN~L"lEh#E0ļ)hl_]ʆrBE:35ku1*XR_umK5%jZu:STxA:u@C# O +% FV, Xb$N”m!pqjU sv*$=w!WMڛ.  U%yd"x30PITSr[IzqДm4RsF l*ӆKUyc'5rc +4˨.e|LwekyI6+;Y`tѪ\C "(*oa"̖-њnL3X1/#m2h#h#x#Z^?Wƹg}ʁj{ reC n9G}\4u[/e.&sHC[Ǐ}>g1m$!.B⹲)pfEM݉Uv U]ql@es_Ÿ\ϙD?ac:ucL$ݝm+vMM5ޯXxc)Ϟ;ĕ1䨉 5x&JBTȏӡ[0tI\(qÕQ <pm%t!vz?+Z =Q2WqsmFtoߡc$45oO>n%5;ϵN$fe lC'։s,^6L\?X  adPt"0P*`f _Gؓ儊ڲ;=ʍ MD7D@4Bń?ݻ^w1Jj)| H*vU$BmR]3*c!eendstream endobj 4329 0 obj << /Type /Page @@ -14103,19 +14010,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4335 0 obj << -/Length 2899 -/Filter /FlateDecode ->> -stream -xڥkoP -hrGq9@Xq-"Zm”#גDi gO$bg>)W/UX͜f;_Ӕq.f鏋'狖|?O}F+'xcd> vMe^O`ĻdtXIy=1rF1nD$*_Pұy<1 - y>NY<=0AVƓo4ocnCi`XdD{ۢ@Fgy%7D:(Hۣ)|g |N=Dϟp5Dc#  __:Nd*Gc(m;vpaJ'YN ~CY5.X;%(xgqLk:2%8؝gtTM·0KyG ):wݕE'=/$5B/LoEy .0KB*Xk5o]! PhHs8pEaM&]g<,e_PBoMB8E)*p@IZ+uVVW3e]Vꁣ5=+,&+,vv>EflA ~hAdw > O{yp8jz.Q4&*md"Ik8Of_a& y7 $Jy}S0g]R$p!8v=_)x_IQʴ1\m Jawc$\xNB+h -N '%tx - -l݀W!81 ezl3+_-J/Le4CbY1*Sv\F[7iոiJ'`8yS ΃(}*r4BP $!R;rijolݖזUYۘv Oo6O``dшNEނnQ`5(:G%,i|O"WW8b jJ*8AAoh281oaJua=غ'Jt2f FoT3yhlJ,H좐wmU"gr6de\/JC/yaW@ "ߧ* D]8}VəࠤNُJذU虱zk8N1îXbtb@*re6 Ɔ1R᫬KH_kI8j}"PC\j"ܐm`e͈JDPTSOZ4Rl)m9+)imLN苰6>wɅ H -ԮdYt6c*IsMGj` xs@%9e%:&(8LWj/x5r$ @\7{LK(㕗$:@<4U/1&^ey9AᆊR:pS%ץ<( <Ð9u<|ਟB2ݑQ,6Nsd+(%,JQ ր?E]o*m:#ƾ}Ú(@}B;qc`؄kDx-OwuuZ@N׷鏔P0Ix{<KHF0x -O.Ҥ6`/j`SVVkwCo%>=cM/Y ,_x0=;>ʳ_yO/[@|D<x0gYqz od G[=pGnZCAnor%h]N.aOS|o@k>A;o+EA"f.ˍP& -%7ipeIC6 mR**[:lzQ644g̴O=1¤B n:8r+/;S`](C_R%HQم*r}s9=~xXG!Kab@^E>ivY[Yݚ 6-) WdRo' G^ImŦIs\,*~t9?GqPQ^l9J MkHraS3FR[sEN^Te&Rtu9+ ü)sٖ#H1I%o:IY)=mυ-Z#UH8I}.2ljiZʰ_~rmqC*e3BWEMRI$Pǯԡ\Fvhx[<1XT3f_u֖)? X]a55=ADlNnv %;pɥ@>H,_''M53y՚_8qVV/>h3?sD5PjXbtz2l>T7endstream +/Length 2837 +/Filter /FlateDecode +>> +stream +xڥ]o8=>d]ݸi7{z}m%"[^InEIU_"r8 i?`njs ` o`\/ pCh^Uya6]?s5dWogEɑqM?Ͼ|k3q4xq<؜@2g7Tx xW.FF@{nF)QMm@P{N2J pr'巴D?A XM#NqЩSxBQZۺ,rffm>!l߱_:e:Cgȋ +9rpع˶0YϲV g HW>[5 vrnIMI; +a!$|kX1wT +K^Mx},y&|2Z\@C HV0,kDNVz$H4x:< LduŃ+| MQwڥ3+j@$URUqr ? >L5|²-ڸ~J8F9]KP)- ~T ؟vH*\?TpQ8 *Bq̹W+kF?2_D+ԼDWp +86/ቜj*hC:b|P!9 d +r .'1࿉c*褲T|A(v hUf*W$'÷v%ДrCF:G jb + .TH!ʬxB8k[jpqUYT6#BlT +N!85V-X.Z<F9*P+0`ir-G#Ta !P<'fM-][]Hxc:R*<Ӷ14[wl0!HGLF +.*at%rf"RvPUaUZn. kAY!e>Ě]N3@` + Y!ilBY ɜ:6l1VT1MVQؓ ر ,e徾UA@q4$gw#@-6Ƙ8} +$_<йMw8 V y>]\H'y۰=W-iιE8n`t9qYP +lY R$eGx6>._$b4gpQ4 #U.9 [3c80j$1c"Lف&/JvјV®Pqf@"fre` Ɩ1-|[6qLp͞tF} + vz4*H1i}X0mVcQ{J*bg+;Ji;.}xJeZ!)")s _q7qdMѹ"%n\lI/vni^߲uKe_!^v71໑ +,[iVsrʼnJT./).ԄM UGt՝7|1uq A|rEk d.EH&{rZrfX:J;MmP`;>|\{z^6(!]ueƳ~y8#p#iAvgُr׊QO (ok;v8wY9_-L G8x;h\Z ++bfB + `S&慏/?MUQ6}P4X`]J.|ʶF0(ӇK[?-d0ˣ>.猙?9|\ =„xJ}2MmrnCY^ >r΅x(3@{,/c\O.'<-{AH#p#w/mtIsԵOZ^ڰ܉iy &_zg*Ɲ^m.[XwRwDp;RY^yP>!uc4"i%g2>HW!f20Z ю!$Ȍ27dԨٮ-z_˯l4"AA8Ha=qlvϸڄڽzorOnl[W'(>Ӷ>B9_OQep*TàN*$;^l+mgB;2&[{= +%sUɍBO댸) ۦ闗* +)D ?PqkVQx0~~}[x~:tSI+G5%[endstream endobj 4334 0 obj << /Type /Page @@ -14150,18 +14068,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4342 0 obj << -/Length 3180 +/Length 3040 /Filter /FlateDecode >> stream -xڥrF`rʄXU5R%2]TD"J eP$5)RzyK3jjgIn`d>&H L@f#/?Qxd$$dtfqr:ع*[\c޽ův.ή:vny|~돿G2{^}|yO5e y XsMOa*I&#?0nGGq?Sd!f*q.0tC/%aWI$ҮQz 8B Ϲ+`Rexs 2#*h`C9tG, p,=$3`h :2j,bT=Eza4t4<m,3+Y+cٓ\#% RLrª6JBL*WOV壡111F k=9Ōw6BLxS*Jȸf@wǸ@;6u=(]9ЭR+Y <?'YZIXpc-qWP|TUQ;fG ɑ¾_ha*&3f4XVT)F48_P^%c6_A#>|2E׋oXU.OyV#?<%_:$BĔ8*/p -A6O|2&idZ:$rIA5QT).Zne'PÉ7YH@6-OMOZl)gs5[MD&h4CE,2ce"ruRU}:P,E5:^ʋqk ,Za,Rv[I8Z׭gTޗvp  /1JĚ̯G._SqPv92GzVT"%uވ$2du2Le@u|t?Ȋwh|. yC+f#.TPQQ,4yQ1ASf^/r.(*dh,Rp} -)$疗`=qU/I%?ߓLjn/np9ppt^|BLoK8^|7\\-UzO -;PMgۻQƚ h;,g9*cv޵0q:"2#\->FOfN K޵ޑoV4Yr!71ոQD"1GzA"$ b8NOyNoc>%gel;#n%ĶL]^|4L F}ِle5RpSy^[/S -6^0x[ѻJX2|fveR^`\P4s}.|t(W9Ex<`TRH'0W#HV3qsREIi07i4q$:7+Qm.K1wMi˼ŀ,P߇ AypD1 C( d}kE!d86ѾNo 3 Ɖ<#(4$a3`f* |xDp7 bp§Tڮw,/bc$*S2]lCA^=M -xo fQ" cG{t%8J]^qnYqDk)fs^Q_*"YLNUG) ^2r[IM*ز]>eyO.a=AP[ehb1N2L30(!SdjYЈ(y6lpMV" ;DckmMIam`xĂw[jO;q6]m'?R6C%r` -UDz==#~=9֌W •<]K+szzs~u8ddu#v[>@~f 倫6L5'w[AmZDn;B)oy^0RpJ3>mD~Ǫ̾0J*p?u>O@Yݒka{#JuK*/:`ɐp^R&!(v#|kE5pGQe/ln֣(ݗm1Pr_{J]e+5A HWXhZlb G%,:H_*W oO$I×~x@_##Fd܃7?BN:i۝c[OtvӿrC@U䉺.mݻԬDJM|]w6Zzg䁔ЅΖ`ЗV+ ;>)$FQ21gʃ|D߯肕]@{|z/i"Rү[<2~?6R2BVz1&Ё\#͟jyT92~A!D%;~|(@ #K)!ޙ="endstream +xkoF/GMi>u?.V~XE"]Zh^Q0wgfwg=3$t=$rCV#ovGPxQˣ`{nꥳHw?^8_h@q87sy{qs؋*j8/~)Ӝ_g]xn9brAߎ~՛epmaE-cgZP:>uJ6E7Xrc/Sj] EfF'Ta($nQ4'\=To~vqJrK +R tAByHд d@ܲQT-xˌWJÊ,dfǦN|WMc='Lba+8؄"7bk[Y"6PQk@٢QZn᭕b9^H{.A]UҎa'J1]DŽndѶnE8kH殴=@p V(qZdj21C]?8|ٕx V#,NX썘:bMV'oTOݷ_ $*`ephU8C$;I j5=ΑkXiJWO0 !D 1p# oW 1J4v<װwȍ'ir7jq il 6)U^tB1ʈBpTUK+^Ay7+֌Qޒ(IPމ"rx&]>|%{CY&>\[,~o,TLл^Httf%{$aa@g)J$R3c*aG%Cu9=`p7K<{BLھ?%K;7xĹ3L,*q2C!Se=ad>>%ڝ`吲hգЎ Fh) qTq LjSߎQ?AYMDNwpez!NxYC|*o8": /]XAn` @qj&*!ìƑ}8&"x(x'OS2'4L]PmʖJ*]B6ado&o++{qWA ء&,/bc1*S.KӵlCwo:^WȷԈeSiFRf 7i T#6"JzX#D >;mdB!SogJr5-Z# Vvo%s6W`keu/!suyT ndu<.AxX +S:TFICE8TE3:e}{<8BE?[12Yy.G*MVb"G: (rN?Z=Fz|_pSw#Xendstream endobj 4341 0 obj << /Type /Page @@ -14191,22 +14109,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4349 0 obj << -/Length 2826 +/Length 2794 /Filter /FlateDecode >> stream -xڥnH_!R@D5>qfֳkyEJ"CKR﷮&[W`aA)</L ,ig\Ic xܨXmF.LptTd֌ -q>yZ⊐eJ`JGf`ږݓO{GZ6| _K} 6\Zp"cЏ{$py3PꌕC6PdO p|0:~ix!IJ0!Z"Bm+Rf1z{^ZuU ey3[HQ r -Ka2 Xp|M rl٬=/s}k]+moB itݱV|H6{-u߼edEcDT o ۿ/ qpK{ ~qqO=xrmjC$M܈b faO8qG_3V\.)rDRYLduCGoxDd\ΪlZk#v Qf*}()^擬88lĉ~$OLb,_wN'zc6-n"րCƅ -bP;p>ip~03K\n|CYg&hb=X -36Y j_s$RNgXU&Q -9XW ޞ9Dǹ=3K@\1Q -|KB,q*r^'B5=7d; -q@h'@(׌-ΌAb š8yz֣!Wܯ!niԡKh6 Cqrw?OsSA>XQ:[U9+VD sTnH)wl[m7>Pd.K -ͯ YxY310#&::NH8!B Sse,Q:CB [ ;PM5<'SHe -I,ׁc4ӦkzRꚮ LChWRSh0Iiqڱ*5W^nrNqĠ_V&d[ۘI(aշh˗[0X3yxlu]\z<+ސQ~G SzɚωtԱZ\Kf3kbsBg0$0ƌ&a>խ64V 5P&>iOo8"e+MɴjM)ڭ՝ ZQ>:^pʃΌ']FK1S(e}dFMYZO-?aʩ1=/Eϫ:⒜pDTT^uǖ1R@\BN Ȝ43[f~8Tm'}`%RyN riGR\Z["~<0Uu1UQjZ_5{u5zZ!?v35Ip ؍fac9Tuendstream +xڥYKsHWTUD=q&ٍ5hXKR/>MQLt xܙC?w㧳8wgʙiÕ,((:l(w?>,/|߷hyzۏ7o1Xײ_rwi%֗GY<2᷻?^_N\v?Wr+d#ر4WAa븺zHEւ:EE|TQJ|z}[ٕM/PUo~ơ:EUe b<~0krp]hwʋB ߱$fB.$!е ȶ +.ЁP3~X@08Xl/Oݦ/ @'Ս0 ְ) I+ Ku1lZݹV.'<{R[Cp_Y+Pzt+ߒVjP1h@+م!,9k[xpF2`nŘ8mhMe&j8dp~ꬪVj %"%O wC;&.5&Zg\WY0[|cuwz 5{v~]RTy#θ!ӧXLg7+|Nz!h82Yco)V0dk;%;6bElUi‚x8qH}/2T% rvM={s`e#s -XAWzm@kahG 3Fk{dHHU3PLw_tOtE&`3&,]nIh\@_וz<ӏT%(&E66l6lXD3[H`P% `U]vL| 篹i 7Z6jVqxJqWJMI!FZm%ٓj +߼lE'٭Sڣ(CPɶ3‰ +(ʏwhikR{{&uz(J޵ ljxԘ2u+daO8w?UEMg8z'KZ6=f5|dxESo! 8?5ն6bcv٥fӾ9#\Ph ກ$BPYm!_)1Xzc6-voP"քuřG +]T[pjw ~[&acfwDÜ0[־Ln'VbM4 +O49O9%B$h TI^&5%8vqhDK>bbGPmŞ={8nqۇ뷷f|X2Q +/ 8xTFM D{I>ԌcLCv%'uZ P&g3F`@ <Dca9&E8wB+sO14ëlW>{6 e3m\}%W݈'ޱ=AHiwhe^ L>Ԇ+I6"5pG@+{[%ǘsn#\!9\)q琬196=A()9_v U92b؀}!Nk9~Nrh~ (\Z~,yoU:֍l):O\1= +^bj]h:l7sKoc`ge}Z i5%&:$4)QNx62f2Z|-—2.=hyjW|ڸCMO~qsċ7NaǍk6C ԏ k ŝZ7KPrKyĞ0{m8Y٪A<.}LHN,oJvTB{S۾POnxFeS`yOBTj+c/q> endobj 4355 0 obj << -/Length 3730 -/Filter /FlateDecode ->> -stream -xڥkoFPD4wWsn'm?P-H߼vIITP\gVj?5K#?0,Ic?2j] ̼ROq8S~ųޛt|arHԻ+Շׯp8y~ps\OܾϿe<כ|!>2zl W*MΞ*f02~WWwWq{\8UST -u`8Dj`PQk\܇V,> o-b,D2Oď3=KAn`T?_(8% -|aי0 Ìtb4p}S `:;B]6&dU:4~&D -#CDN5ʹ‘Ps'S0*-dUB(nnx+7z ;dQuKv9q%etxxݞDǭJݫ/1x<},=`ߊt4T'z O_N`{Gamy #Wp[^Çqg -R_ApF ƼľeA)9gQ #c -'ߕ#{{_3w.#H4X30+oeԻq #Qx:~rWm!Sx{h} +{Byu-a#)to2at$vsiއҲm'|a8I3v\eY}Ɋb -%y%))(|.6lY02^,!CC2=AxE1bn^mF*Hq`$øl 'o0Q~tAGdpw|+J0Q(K@w8ܸ@j μ IfnL #:#tƒC.C-i b@;\1C^SYUj`aOH- B0FiI,i0K ؆K̘Yڣ-} wD088rMivO퉺=ݠHFH;1EˑkvxFͣ/d0c}F4 ͪkE6$h{gZ~l#p+#qЪ'X|/5sqc3xxrn:'<3N 5֊Lc)tc -krKp쬕bedGn1lS@܏4:/&ߞ; SxRwGhbq@pKI0)עlڀYaC%iО0ܸI}ϗE/nlo|i8KQ(-I:\ڏ#Kz*LCܽw'XcR?H>$/D|3$9J@o˞uXܥL„bB -̍,PW9qg\W*;hRt`r$V(sTks1e+$(4Y`E6b)="k(e^1P $sŹcֹ#2Gl Ԍ! -mLl10gvzTK@@!>y@j\9S:a^jvPQx q*m֋VУ;W Hjp8e6 9x;q(xʴЦLM6K9 qIg\ǗTzdlJր/y?( mQZVC$iX[_ HN .Y;K%*BQ`!*@LM'tWx(q668):٬(WعFx1:LLin%Fx4w -u Ť슗H 0FG)X#|XըiiW[,xΪgq{px7XV$T.6JJC\p|Il{u"l [զ| - Lԡ3_laΖ -~UH1L7DT l]N)>eC6Eh/%`{)]Ǟ$0~Wp.+qAwQO3s 'N@p\ 0\J+i^FNsc #DC2q=m|N`hh" e%l%nZ鹦LᰁX'q#?"JuBi*7$0㍩"y!o*kȆNhD7/\NѴF>Jڍ$!g(b.sU ϰM. -˸0sxc@ wJY6=h]6?pX=$+m(wvŴڞDHRcO~s#}ZB@`NJwːc -L -JgЌBujI,1 sdhMj">D*&!*ƣFybJ#06- -c4"gD'9<ڤDk;^VFw2Waӗ?oJWۢ}Q&Hh Uc_x =Dr}qy~ ] uW墤Z IGFI޶ˡ0(h2 FIlX"uB _ao?1О1U?QT\2 OQ)LzanG1>Ŧ`(…fO2hG"4QegFFS(OڣGTStr(PD1RJLqTFYͷTl.mOr3:thlK3-B.hcZ,թr\%0 ځ$> +stream +xڥko8{~X2P+"}ki^Beɕfo^d[1$,?5K#?0,Ic?2j] ̼PB?#|3Yn>ݽ<_c";hW9%'c7j|axb"Rw]D/{vo.KFekqfElzW .a"OZ8-d|t?/ axeP(e1lv7Em?O9F\ڱ,oy`@ 6 _$zN oYVe_⠘wf}s^bIhjJFFʀO!K 6[ֶ8$0A7eEw+*B1s"4QbȺ`"AHm#):; 9-&EY}; dH=KpAD- >s<~!̍Le{4{^p4@g[pj6a7F)kۃVlrp,0۷ +12z<tUy{ ?IN5-❆4g],nV DCt[>kGlۓ XWIU[SA:ceJbiUڈSଙ!A_n=8+R|84{_~grzT**m T,lǮNxJR|&>(`@S/59E :'_bm6D6_* N>I:s8$k|YYfO66ב}.3IPqd_OEBb۷kݧ$CԞ|3+JF͝mskD4uiLJ82[d +SH3):I/R$Y䩵Yn{Rf 3OfAel 񫍿!tC^VB2xN2IVtk#~so!,ڛYCn`/@,W8V:OD-|Г5Zh}foYH@GUm $a Z3Ŭ&`IG[˩h8 =s`k +SG"L mk)"z*ijX€We3bCpy;G6-J[Js rXxkG"ډZPБpE\6Q"zu+Pnn|*t] +{Е ;aٹXQq)TDfc!]"ualPVO'wXWtg.^$;$ پ RWHN1p̘[]!`.F(ymmvwCCkMwR(n4hd+qeϚ_:/ylW ɔu;;H!㱄X_|Oa}>ztI=^tTOudFɅZ+_O?s,77_A D[V6競ANa;,k =ot]Reo laU(l*:‹YIW(\!QQ <އ ]Ql/ť'Sؓf(FV)Ǚ(%0h\+z(|±ыI +̹tp b.u4;r{N臃 /r\)t{)ڲcݓsb3$ + @MO#dȌ-\kJ_^Ne/8r!!Y6-ѡkMLP\w0I, 5(UQCb&i<l'S:cb⼋;Aˁ ~46It!J4ysEalepTH'e ݙycWB3 G CV }V-jTqp9. _K uW墫<ꄣ4,BIvިaPya ]O4F _`@Ą3`M KBBQ3MH +'ڳz'yzU0LST4 +ӡ<׸bR,=E`(…fXO11hG"4Reg@FHx0Dzdt0m +DZ2JJ> endobj 4361 0 obj << -/Length 3268 +/Length 3165 /Filter /FlateDecode >> stream -xڭZYoH~[(̈a_ds_qd< +Yۋ< D$+Q1̏ߺlT6l}VWWWu$j]rRܾΌ1 Ί'7S:6yɽW7k;n}ˋ7?n={s1mMl?=l׳,5lanhop;SoEPߎ;K[j>3tBd6^So/jųְ {"KZ&IW?€KtPsuU:RBT_y@Mk$waU\hLOjCy{,j)Tm[g.$(J' mGgŧ[g=e ]~NJo_xIR֝jT 3˖\~ٶ|7Q<*u͜9^c­lsp 0[_pSL_ߥf-S묌SX떞q H 1=:Gp: c4)lR B15 - -)'K:t0mz&dZ%p1L!muXZgB=%RWoړASE{YYծݱ5M (=H3[`1-p,Mk( *25oe̡z* -Yp!WUkI<ݟ@tyVdq8 $ط[U/j -& MqBϓ¡suZ]y&Fgߑ}0u㹇Y5 }] [9׈jc&%2%.QB6#%V% uUd`5{gA" -᭧iwQ+#vI ud)` $>En/qyCn ЇI'A㕚%Eˋ +iCOc?6L*I:UK[/Baaې{e: cUZxײy;`ara8͇1 瓷m4 \k48h (I ۪"΁Fq?T5ɦZf˕bY>/Ǡ/Wc4i{\\ǿXTp$SE?Kd';>HW_Hl'XoRIj`/K=G![ՊAGܸ򏞎_~ս[^;)qi3xbaԐD*endstream +xڽZ[o8~ϯ[eX/}Y4I v,03X( %70?~ύYn]t"yC;ZM"S&Kبb{MLIhb(t~w]b'* +(=P/o>޽Ό14uTo` ^3:t50.t˄ۻOXp7P\s^]yۻ"g6U?6YM*&30F꛳۳4\f'&yC#)SEZ&E& aˆ&h7_5 vh6eĝ\n"Aʫb^Q18Vv 0^jCb>\׻6 ml_pZ3BL28: ujp4L{ ($ +GВ`?4M8DpWEL MƇ?ڥ߃V_ݤ m Lؗxc?`Dgso1'<*yZ2 q"-V_0u^H"ܛTW'x-KwHu\+|uFhks`J3: 8.{ϲǕL(@~)}׹tU R%"]Qy.];wܝB.4xuڬZ0phUՁ<9Hsf0|${Ȇ&X[#ŎK"34a=i -ds 2bbYF E +GC\0i\Id@CtvryKD.Ps^6:3p::WBOXtD m+s8Lu_cx7QuZGwX + <]T0l9R[T+B~X+$blI4z8{8,76n&XaA'rf?;ӊec̰m̤wTbLڈ)G41]j- cbWo $vj0AQݷ +ױtPJJjWIqbSNamDj +.KVUqߑtɬ`'[@b5m(3K/r=rYcKܼ1#+"r ("QqRheo%:=pQnmͅ=jnf`?E$fR׺uQ%~6/((6ge> 3 D%}.`D#:v66 Mq ʲpM8$ɢ-o .bJ@lI&[z !(686@i4c߯Vܣ0Ł7ܘՄێQRYm2&_ ^sA ? +=?3UxI{HҞUrnD67Y$ %䙠vNgƝ=AB6y=k:0~Fl4d\fް}8xB cPuf!Y>LΊIQ6Ⱑ6;''#*xPw]IE<5 yz.vBD=9 J571 ÔOdt^d|F- +iۊ +#)wB8_$ +R)yAlZK5~2ìcm&c 8<j${3L,dhWPdȿN/ł'μ}B-qFDQfk^sxP* ~0T*~m`50K9I,8m2)o/qx"5QVOmÙʽ%EKR}=%>Ǜk,$Du6U]߳XxDwX^O=!*ɥ6MRߌn1DR,,3lG>tj9 _M#}@WX9U޿to0WXL\Jf>ssUr"pmmL',,;ɬD]tYtQ6D* úvl톖 ~YO4ҩ.JS +Ju^bsD(y8O:`oMJ|d*O' *d1K hjM^"W',C%+6=6ѓ#?]#YH+ 9zD3gp.ml;]uM6<ȂB$nj(5}}8Th|<<k"$sUk9۫WWHd> endobj 4366 0 obj << -/Length 4128 -/Filter /FlateDecode ->> -stream -x\ms۸_o;'ƗNg8Msm|bbMd)~}w H(Nb}L1៘T&U=)"3JLnN;yv"xČ̂1W'gu^Oz9u\>٫?ΔRSy:+jTL^a~O/^㯜y~yTV7<?'{Jc_>g??xzՏ'O<`jB)_I|<u=;FeF+>_>E}zBW iɨ*3:T0rRzހJ8O31ݶ3Yزb687Ǭ^txŊнش7gjږg$dw p͆;o岝S,լzfp OА8-S?a_U`,tNf*XizC:9Q[_geHtprIZ/lwn.ݛ]|gIJOty&mjbc:{Ż[l nn|sxnO<]&7a,vt57P7A. %;-\d#[ufߖu~V-4k9BiUxlf"\:+T9U:)'w i]L7VN}/D"E ~׍dVj8DcP/ owSBߛS?DԹ <@4<+26d*!]f9 -fd|,Jg*QiLx,*<꡻^0g@aHUg,Hn)<8V4kTB;SѝMD@}"@y)G fE>@[6і%>@[Oƴ}2}sOiV:O+i_q|DH,”Q|&<%dc.Fcno - %1`U1"`TQGH p]FnL_>Fn}uq7/w\>ѸQ|.񹸛Q|.q7.wSCKoo+&w (^F($,EXw2,7m/Es=_00Vf+sIf/γ0*/`_m]&r|nGK`pa2o6d6"-!KWւh3mo,: ȇPNgEig[l˵u7|(ay^N'qϓN,6E c)ӷnE)S jw-5Z q-Yk~՞:ՒyUecFuWْXba \`>x]Zמkܸ[}^`f˷'5v7>seiˮ 澜E帰d|ip^~vyQ<|MGNbU+7ԅA1xqlea6Tq,R8ߴ[ bɜ:>-@,Ǻ$H_}nw(K$깱 +?:Cљ2P 0/·DS9 ="E>1b]yԶxp)*45Vy=Xߡ+*|Y^S]ѿ۶ Yj"+hW|x:ͲftZvulzCf0u{DK_xđgnߵع[7^6\ -{b +WC," R6NY l (Rm=X}, !{>Nܙh{\ֆv@9rɢ2t40Zvѝ!o+8LlL֍:7x~9D$Gm߯T6̗e1@{Uw_8E/#SEyƎ3պ%pt&ޫc.kXIؼg\U1v~{k `q-l 26v6_$LjJ(LjJ8NRMRoݳgTUg)9'&_JR -&xE^=0LRJۿvC1Rh+:G/1SLI7E~8c0-8IJnT2H l %)%W1}y˕.R˗AreqR|$qR|$#)HJQt{IIIHT";aAy5̈(W&Ȳ 3BcL6u@m L@ -`k̭C+( ͫx|[xNEQB+Q^xM=NndQZhr#:Z~. tMsYF%InaMkYD_>%7q}9O/Era$9$璛8>Nnz9$璛8>NnB|OFI -x.sMaɍU*Ev"Ƀ#!D)eYGT=?2I:Yq(S>r*]|92Sȿ9~ -s@,eYG},hd/IVQT4.NZ1 -g;qF&E(5l'/DI}u$/L\I9Fk3ZC|I9Fk3ZC|)yFkcF8R0Z`]uP&(i=SigxȆ1'B*6][;;#ZvH) -*A[z|Z9 -3bQ?Mwom`ߗ|k/f^nwtiA )*ajfc@-lB2C+jddXFSE! 3 -[+ČP^gPoB/Y l`6vߑf8'ALC2&C>UI[o1 Ӻ@VKHMVb" YXcY@@6KU7! ƙ]8I>OZ [ < Z=7?R ݔǸ$ e-j5 qOeVѽ$}⻖!}1~[0G+EQ]FWr3T/ lB%UF^Xf~I,6tX@J,: j7fU99NЈ$e Qяe12OzB@՜pif(XCC;FaDi.!>Gݱ|lm :|L.Ϻ{x`: YAxwIږƸv -{$z'vc4'e%ژ>9j*!1ur!/8ˍOLGq_Ĥ+x4}^fEzU=v,Yendstream +/Length 3229 +/Filter /FlateDecode +>> +stream +xr]_%sJR%YM,;+maI( ~}IPc:.U nPMBsUO7o/}vObfus6DQQ. X +8)L3"pD&8W'cr|K@GO CwVWh4OR°\<)*Y,9Dd]AvUdxMFR9P|z1-&RFV{Z +IǤܾ,f&iFbm"bTi>-"-ery*B\Vk79{62*f9^m3 Fb!Cds]' |GT4߾/B^!B")jTj2 +w(3t)a a׺qT ³à;bx%齘Ɓ\..$ŦpMy 2\t`\ehvخ3\_+@bߒŴoUZZk7ԙѠ5a;<7ûFĄ4/ӱ-l`n,k`_iЗyZXA!s=>Nc{j: PLq$^WVV yDY2kh/~0Oh4*te?VjgZg#x:V&!+ K|'lGS0 gܪ 6'Sp&oجN4WQ c7D'󤋅LM;((`9!ЙƔ[,KtFds5܏r5Wܬq4_.ٷv) ysf08_ aNn:JHFg73d^ıv~BM2`a2t%d5B@AmR%<,NТj@]ޯYm" 5no5R +_D==E΃KF)3X̽aNZ`]I|}xn.:bOn\/]brG~<=2ra"NˊǒWY=r5g/9RTQ$l +F 5(:l6DQd.$E{{ -)-NF;7j f`o ~Š ++SVX:u*U꾂 +LB+x +h=%=F@%TOT<("wT +*@ c9R 3"AQ7؉axc7½ۋ.s-\(D + gQUgLӕ=<7ͳ~zG6=h%^J=NPvJG6oJ;ްқ$DDvN Nh |IV&֤>JҰ }&&) $7bI-ShSKRH™>-8v-ߣm>qDQns&kK^tb] sv 0=S@>k9m )䍚/M=b񀯝MgXֻXKJ~\c^~7 T;[ý8߅r4'zycguZ? ޭՃ1딲}'mi'D!AR|M?A |կ/-i2!M:b1Zdy-YѦey@XF}66@6C(9STL}ev6U4 \.nXh?FFRpm\R91vFR?>yWCO"ݤLS@sMA԰aRCR B' VRjzkp0B.A#<^VXvxDM!R!!!i'Qy#i[_daø)`/D}c^P.[=P|H߁ڜ$'Ho}$[-z{G˄ +۩W!zy-֬1C"` 8PU$AS=E*HEďTK~뤚;h9]"|% 3S234q8?> endobj 4374 0 obj << -/Length 3756 -/Filter /FlateDecode ->> -stream -x͜Ms`%j2E:"ק{g0 (S.W$0h<X1?1LzVVEf<ϰA-d9>BDy= q<3u1i~񗳿_pPJ͡,թ??z -?7?j|{nӵyw?߽y{'oxtiB)O[NL |3Q׳mTf듫Xn[,dROW%NNN"k9t&4LY-?uV1E&uۅзOb|Z.| lO*L  领a> Yɬ,,SRem\|bUdyU͢/xJ%`{n[U%EnV5,do]/FUt4,-lWѰ|.)Ţ!*avY|X)Fq_J b^`^)M.hc @y2+$ -*?+Y\i!7 YT=tx8]ft9|+Q2 ަN_f-)(f@UZhoA$6pOde%aCj\o!"u)XBTi)wsn?R \geP5o#:t\r -Zye*WodUe]Cd0i@)JU7=Pկ"X<(VCnLlPtACYeEcʁֲ{V+`H IRu /YY4łɥ耶5;&“_-uEm]px1dExQTfPQ~9e9Lc,鵳oDGƅxu>SU\j;._acj< <NzA.y>y>1hHI󢜥<{,/HTm0"QOQ JbM:"O+AQ)Su@/Y Wfv"y/.x4L@PdԣksI@GNKyy=e+sʠrZ׉SI4+Ƌb.PR(n<[L9N>oqaT*uHDJFËrx1 [|!i1x$-&,_|Ap> Iu|dK]Ub:ȔpVVӛi7v ZӅ,75lDO~{ -;w#m1vtدSpAZDtoi2Pj_{^GS7._R -16/% E|>[StFݱsn^@sHP>*Aȃ~D^L{hs.jNYm{}Od7WΝ+ڦ#jO]yHWT%1vIc9ة-:͸Sٞ~y8h_c>☥SJ=a:ԩ 0Ix}UG: L,_Պ1_lLVXnss$h -kfUN)KA8NbZ8mU( -k5L0|1?vWxeaciwg> -k7mLWXy>Za۔3_ae -kLV S-ztmLA-,sxFp<P'GIΈN-SEFG;zw'Jwg -аʂ_`59>٥6S (sgLCj y3 __eAj :D# -P*63wFSqӋs[%Qq1s;\ -/?\$|^|$;9iL8Gb<4wbb<SV%ԩ - $5:;xP<ĠGxR ]1(o{|4SQ0ёև$:C9~)P>gQ>Y_Xy\AFG $N$c#zL/YP/cgO HtF~d$ -q~(pbq}4 kԏ$_A -W䫝|.#' =#' =#  = /Z-Wʊ:ryHjtBO: zzBO*t4( -=7H%C,\cyʠ9J-q4g82oA_L W l76>;kB6zgy~e9\u{H bj2Ƭ\n\ ߃ wlYvV/d׼A6pnxG"ɯ :Wj㝧53x# Oޥmёoq,m#Zs~^hHv'wS;>B,"I;EgKw -fEvvvItd8MV/=/0iF?Y"j44r <!^zS0(tܨA/ga=͹o1r/ l~s~{7nۢq-! X q)]1sq]}|~KW;n!Ӵ[7Zi:vݹpAw468);,$QbE9Y7gveɞmOlYkdk1EG0]rc.:ۙoYLzU>a -vUvA0fZ{ᰶB*Qh@G.iOo`\;ػM@Iw+Am聦Ýd4<fFLqQ#L-.tسfoof¶Zٛ5P z:Z/]^ot_'󍋲 "sQG*~@ˬ;uul 09vҋ W9bmpu'r=ٗmv{r? ~]W5tLp"> Nv.ShعMV anݵ"n܉ګYM:Ȳ= /}-Wԭl5e2԰xxS8+xJe0H_CO@RWgߡendstream +/Length 2440 +/Filter /FlateDecode +>> +stream +x\[WH~WQ+.d83=ya bXoUWKP 6C|8I}-}U]UtuO*я|J?/Gg!{ҕ@)s^g/ˑ((Ln/\&|HgQڟgE1-~q{0KrRaU'ݲx8+קm(Dp{>RRN(]of$5V;y0 ݙQ|WZ+ +-`t5#7`J@7cL6 c]'sU!.WC&UWzlJI(ɴB#݀[mUh-5x^.7zꓦ \m +)AEk+"H..-c(poApj2`r"ǠړOmIw1Ro 9d*Oy_ Vu+@nU5ExAkz;b&#"8(FmXxCa%LݞM}k6q[S_该&dr6 ;YK [pKSjx#2y5|ShTOz/NtВQ+>++sh%ր,Lz|TOqk~Tf)ZD6| YIr+SPORTk;m&d0h3B5PG=@mu:7?xўXyꎄY:A bZ>PC~3}1P+ck;Rvw;[+7gf=ߛ؛JNqm6]Ⱶ熡|)&dr ;cJ%IbO bty>B+M5{1tA=6eF(B )H:˷؞l}펌s'[_:ҫґĆtW t$5:#=Mq`#H? +I!ˈ|O2qq{e6X+[%cF:r9!r?gXy)HĆ)C~k(k-絭ݧ|⵾5/J::$| v=G]&ുer*) +A2'|Agwϐ^c*[BLW[2 1&ssf6ŷI6OOif4ĹG~);C69;%5h#ѓ臘G,RwrTA5PX47 Xi#ߣ`{jvk+zE6 :ChP XpfJpcS"^PNf,I^XƀlzQӘO5iJ$[a6> endobj 4385 0 obj << -/Length 1870 +/Length 1811 /Filter /FlateDecode >> stream -xڥXKo8W UI^EӦmH[mM[JbJ wl'v.59r^]/oZ$4((dg-h7$1UcugL7 H?e݂^DB@^y,eec2>4=Y˰, Q_*J j7༔^Ŝ .XTP=9'fብZ sI!(][ʂ2g,31Bqai`LF )&"X7 xL` |..qR voMނa:P6j>,`|Bb8 +.X mTo!o[! -mQ\RiH,Z󪧴%:ΖC\B%s[ٹۯՏECU'Cs~+~ ӊ>aaF$gioxFCȿ{@ ӻ:7.;1p 9/9H)m{H9fwʮL`]+SSuOXe1A #81f䝄i]]OvFd0)6Җ3W[)Tk -@K%sX >{ - -SHۮ&d~jCJE>Ʉp j!At0ֽ PByZ3qAPܥ.O2fR{IsEYZ{˥Qt!ޗ H3CM\H~fz^$ +ʗSSQi!Nh==endstream +xڥXo6_ae20Hдi IE1}m*$7l'a(PwG, #$LU<\VhλA,P$E|D(̣|8_|9xR*h5_Qlx(|X tT+ٗ!:y')d&S4ÖOJO2*yUd\6(hǮEAtNyҤW'rvmQ0UmG8dET(:07LE +I [ ]ayQ!5嶆7|UݘfzÔr[>t0/Ĉ +J/נnLnB4Ę<})[SEYWoHt%ݎt1wͿ^KKWbJv ] ).ngLM%zۺr7>] u0st4ۡB)P".4 3k9L͡:dr>uĘ4 +KC@J"-+X7C+Ռ@ii0R@(C:#c!Rpnj 0<x`e/Cp0?:_͠ L Ra #"K)vT]Js >/PrAp^cx|W\H \SRoCQC8k1/K$$h2%ɚCy! o_$E.vYKm jx>YFcC"7F*rp(7<@!# fc(-;8 +RCS\ 2"d@c; +#mvgB:<{xxPb{B]ˌsFqʧc _19;O"-WRP0v }dYjSЦ\E4ߘG 7HtY/͐勭LX2G6ܟܶ?*LO XrH)L))'\ӋdM:q +55F4ڙ҉2JN#(I+__R.G=˅,o1xW1RIHoF/i&3 AH خdwqI(VŃqŪkTvi{?'DzkOW~D$OLQEPLZN`r,A5g`ݎ-yWރa@m1nI>:Vlx\|'y=Fnxs)}״:h}ɨt~PV o@qq-Jȷ_4.1~~|cF̢͢2&R5ۺQ!pËRBgZ j'7ؿA|paBT]KݮYř(Ls}~0#jH7)fη]$t e4^IGQH'"8Nt<u5͛~f$|8v^{w;z9endstream endobj 4384 0 obj << /Type /Page @@ -14481,26 +14381,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4393 0 obj << -/Length 3103 -/Filter /FlateDecode ->> -stream -xڥYKoFW9Q@D|؃I`IDPBRco}U$%у.c6U_=d3,/,ckUxRD(ʭtFXaGY EIb cBߚpag\ql6q/W6Iۥ^+^,}XWźh[> 4n p0f[B%\cOmLsu  rs'K T -d1gb;ѣ+CB<2xvO -0pK%*3 -̬ۛp.a~ER_$bcAJ|D|B,*'xNeB8nhhdߓE n)gX&(P@W ڣl3\ -s^[_u=yL"ݰZa޶%۷ڎ:Ui;ܤ58U#_M4J5db5L|Wux7#}iFDd~bpd2 -Ǵ7GLh4牲FQě~3Xl)*m-^h&+(ַ_Oy&8;:"2aG?ߪۦdDP3wdFE!Zbh 3S278$;=03/ytM}rLڅr)+ޜ $ʔ>4sa@=rT$垄ðưp{?iT&CN!R_xݑs|4Veݱ W`[,nSu,J+=(V[|87>2AmD)GOD3" ̢=KuzI@sӞKB+|OȌAo?t2?Hx:c+_33Xr ԳMil7cY\<ܱpY$qNކMbc;zhPW:b+'=>G.v -d<)nswUid ?@j( ?`3ZA46tUQHKU 7ŇA&d*:1Jr |1QQ\&uGdfx4[iNd48y -s ?3Lo]Ł8-Pz]1*)4};L_NK}>RjYq>s+<8wr5k?%=t}#Y\w=4F8ydY 囱͞. kVͺߒ<@h9`;7K=I%gK6u;nxS)ůyڇyu[oeѽ>q\GNCe@z(-uKaJi`<<2 Wendstream +/Length 3019 +/Filter /FlateDecode +>> +stream +xڥZKsFWrB ^[;^oI.9$(a  FҿO=(lR.~Mpпp~`E%~lf,iU66~l-gWnuD~`9(,V!^]]EIbw;Ⅱ\qlӡ_Lz7;욥 v_6Yz\^뢣o׻u7ߢ$~ua7Rw[Q歋Ylzd34K@xޡ| b]z?jd"yN4h[=~ǪQ2LWBWL (6C7UXM̬G +Ɛ+!pؗ-2H@| +?(C(vlnDsQbqM鮾27L vz鍞bIޤ)uz)D0[ǘn{ph-{ZRx"ZYtxS1E8xVIk Tnjc+rμ߫-+,冼TG!1]u/ \Z>Y@^ +=bvqWc܂<2XvuO +nJ$3Ƒyw6t'Q}6I&ġa@(M5j# +DI0|zEP= d c7// y_9$lNnuN(t8s#'iZYV[m|)ӯ5m*vݑ-]J~wrH15L|WuC omzp?Cbd~ӿ;B-] t7_JGL;i$&^h@YoW,x&40+[}u{$*q"tFK{4ܓ꿛i/,7Q6F02s;uFpyZr+Gԧ!w.jW4l^0O@1Z湑ɘ7>\i$H~Dolٳٚݥ" ?8M:;yN”^ÊE~[`DsCouJ -. „֏ #-="4jXa[Lk5tB?*HM>R}lE塤kM1QUyZ4qnFHR)"-1yPRN&kG Hk=橗k򧑷!A3[i@R8ۢ G7eťų@yvr)P33Gݒj[?KӤkēfCcC.R&)E&W4%n{v'OR?Y)fzz~GJuo@{$IB>#WЮ9=k/БZlrIYt/4~Fl=dj ۄ(,Q#8sVW=hjXm+2.)!qm-It M4W\%'ThY$|?7SJ_4uQ)eZ9RgCe H eT+pf,Ytld#I'9Z ==%*DtR(5LYh4h`MjYKg|ZeIX-L3 j}<)6]Y?ټ Idkplϙ9b tSz &T3!{H_uqg+T\t^kWڻ~nϋ^ œ`+3"`F +zК,ьf-}$iwFaS JiVn]9cZ/Bҫri(R\-8\o7|):]xO.pͭDF\P*@7a̅^{C80:1-|T2sq- xJRˌ +&>_jqNUdOTf1l FQƞvkҮ]$Eq_bR5anh1L[}kAڨ|A7Yl}`76u'3j4*Xx4!CJc6F× iږacVbiq D \1|B˵}5&x=RjWgRvr! bu|IngG-wyG0p86INH]9 4m \TZT"q1^QEyu?endstream endobj 4392 0 obj << /Type /Page @@ -14530,33 +14427,27 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4398 0 obj << -/Length 3864 -/Filter /FlateDecode ->> -stream -xڥZݏ6߿(8g6]lv>ȖV#[$׻IQ<$rH,bF~Y~l fk׍ Mph>ݼy3Y͞|ӓىP -z|*KgGx|eM)? -oo~sq_8QSB *4AQ -"?+98BJș!BE`t9KonSfop%Hܭ>#`1.UrLJ -{w4ZV@PW\ OԇCqx:&9[D*٫xӦlB&«:~}uZGԷ-u ){l!Uň;axoy]78ɱog_h=.-uK5}C p>s}  d: 츁zK~d5s_" >,㉈MʗrD4 |EFp`㒮tadsߒhFʢվqۼW&MgLc[Afr$'hB."iaJ8ғ~m˼2 -G<7Ɗ.vَk20pþڒ|<ؠÜ77 -Ȏr; MW8|W>Ǿ -NefynmpcXrIRz/%Fڝd(S WCCt9"d}(M(#y}MMsQH@ -$3uǮ{|j}_5 -WmYܹ^|s:\TdңIEVQ1,ޙTo\(zE+kv*}!kD3@v+j2]4t9̍uq r%u܉B[j[;^׾&Ўl z -HpT'\dq~qVXkڿh "ؐ~+eoύ!~d4g! њl aG!{&V%/G[љ ̣+􏵾\z#-5{U^sGGgoi]RpF'\\Wr }mO*|Y`6@u -%chP2 #]*R=d+Գ  |ǭٕPm H]qΟ -8qIYkK}JMꈂ8*^)ld״)(|ib~, CvGIݱ `pƚ+ L`f<374{xh:  _a/x/|Qu 7< ]B{V?;u:("ۊX!+ 6"RRvKbWFNj8oc286D@}F4g Зҹ 3BFx KR1I}gg(qXp M /iJ$Q !\m.9B@&CYFWE7H2LoD>D(0[D.&J$)$ -He#)qE3~F5@j (0rp+mhEF;ґ?3i0JP8T%QӍja/9͇{yM?jxXڬ:qWQYxDIVFQ;ƋBfcp2u֩ 9qJ 358mg\xYbM> <Ģ ] -C -* -'ag '%mT  ϝcx^- -tZ6_;i&19HSu=WJ iĹ)2s:~Jմ΀l)by sqg&w״Zd0ggV{X&IHuA:f=|AW%|RF'x\dGni9e<]Ә+ R C HSȖزnKP/ `9+4@i"Z=̩^KHCX_ʏ*£[xg0<U |(SdikdNF<. X-怖>&}0"O.K9+1Lܨ[*Dr;E$d5 WI ῵߅Q*~Ku3 ^f3A+ /}&ө -c*A._kQ$*%.R +gflG9Yvv˶cPD/[d}d9}h7xn5)'%`rHůrlh8 :w2VC4Ў%|[3uP7otK Ok8iQ0Ic )0?H`ug^>WRA/Kp%I{8B*9彚N'cp~+hs1MĔ&%i3Q[x,FHI) iР=ޒyŒeE AkRSgdzC/%X2gϤ.+?Q$[25xT%#?ݟ:WjqZqFcߤ/k ͝u3뛚x{P,գ @'@ߛ-z|v ƿ)pjզyN#9F% $½C6 A[?{D~.Y uJkfle%m:f Ս%v1a{W6]DA􍟍9D!=*]*)kDž$C%F˓Y}|wtY%4?(vB:BcoZ/m^1ԺP݀M`+?[* 6DDz/'ﳰAk%Ո^b7B~WX*ǐY!Y#>!/W]E>ޣ#y&H\]OO{fB{4Y'y]pQxzcު_KsЕ> +stream +xڭZmo6_aZ-t$&m):7/$%rD9Ùgg$t I䆁?[mzuk +o&]/ +՛wzH__|""z.'w܇$p?s-@t|4@~xȴկ{ s4s4md wyx}rƣ&"-M9E2V=›PO] +QӕH}!M._}Uow-Gz ȣ.B*<974X@P<# ?_f0aNuJ=m&/D;EO٩E#8eMƭKO/ +dPB1HΦĿu@P|!tTɡoTgWc}wbxny#)Z=M#oTB{>EJ[nޜ`圴;Ǵ/H1r2#bo]1UY͠TG2 +jF-?w OUUMQA$qTǶX s$j'XBN"`i~lJ8p 56jUJpsbHiyCC=WWlI].ntkuCZfoc@S3=rҘr Tg.?rp ~DH3b f{M΄5 +C\3Ee>0QeAf+tJZ +é%],FNbh39N[5Y})v{y5aCGр2]\uT#~TMhy+=q^*)J2I/D<_ !ȟ8yIvq#i"\ߏ~$8x:4UVj!3n;Q+2z?7G{ ?˹N<RI\slyN; +bB ) ("%|paS7w>[ׇ'nilDb[3Öp¥F2jevqO60L[vĉ0)~4mp@&N:2'6\s6GuW䎖(q{ۘ3OoC ⼂DumO 43,sn0{(nu]14sSek.{A|oQW~i&,t[7:AgEA 21u'`"p4۔K\Mq䀊".O6D {|lB?n$@vhI!+ DFb֠?_e7drH)i+ /q"qڔ:oDx =^˩\f}b *-l~0vjKo!aH5v<;vr +XؗY' +?!΢Z"N̽Fa"F4y🏃AiԻU1lqHIXjY QЀO0 `Am5sW~HG1{Z6 4A*}4}hAm QL C{4 .8QakEjs=vdx\`6SBV_:F5.aG V75y@Fe%:ܛPC `vϣ֒3b\g}R6E ;vbb}0 AI +0tM2)r7LX Jk:0ldu\"ަjڃ KH8n{T*-LGC/rȸK?X>S;7uU t:sljD9ȁ4Z-ZԵ=:רM#z̏'oQ.r\q kh6ATÑB,Ŗu4'P P5N Ѐүn>Z sOsINir^Qw(13ǩ q_Bt0HsZ$46tE^` -0?YMBMWB>Ǝȍ:CU S`%* 7֏as`%@Rl  !"ɺ4v횩%a1w?ϕ-Tނ!rJD;,y^9c:=~*$RE)Gwnk J{c?K;𿈻׷" +P8egǔ5Ɔ>\E<#cfx)ȅ p!aBwyBYNu3&+.Qs'cL^W_ +P h% 0N\b pN\Co +%ڵ%/LF׊b1k!pp+oi=QAlds%K; k6 {ּ~n͉@nF"ïU`W Ŗ0 {]{sºsop_!*!\ <;!Cii>[UTܨ4..&~> endobj 4403 0 obj << -/Length 3458 -/Filter /FlateDecode ->> -stream -xڥZݏ6߿¸hZDR}9$isMlڮܡl˶HroHIki Ȋ"p>~9\/\TH7*\l7b# b)$ͫͷob? jdb{_V?vTJya.$^FV8woonCMzǾ -^]=p꧛Vρ$RǛ? -[觛WYlqFF+yno~uk^)&UZ @+a( -1~R]6J]FQ}*O[ƾO-)oS EZ&jQ8mGs -9-|Iu R&h%n~O@snhQ0 >y{(heX'D/"2De$R -TP`ÀM 6c<[&w  --A٢]YKyg*ֆx2fM7{ Ԧ $e_1/xoнa6:vH/Ykxq^A;l#GCtH<7r#&`8EO>K1 ~1@/8z$jrMnUYhS$46ߦ> kV`tO`V끧/<I-݅KX912Hb艠ONchC r$ޖ,@"-Gϼ(n ^O;%kF!d(c -z*:*-R,?XAEgn B-ApC'Ά@E3&! -{&ɂcl1VGnmKd52X҅kaBpߖG1V9laƶL,H#mp=lLB5 -3aL>j F`WK%0=ѢK$8! @*K>Fכj @q_-Or]l Tv!IxYr5oZY;h)7h$hNk2{Yk7}^/(cV{דK!qn2 _Ǹ#w_^@cPQ5T e)\AN콐 Eu)'aʸbLdSJ0(a%MsV B[ũQէT`$uq ҫ|(ھk48 0y v>ڲtLuϸC-*,^63_GU/8@Fp*9w^Gk -$)8R%rXqȣ#z# #Ql>.W;%  <]TG9$ėЧ8k%KZ J5R*x׮XN]$Q'̵sx w[_-;Wg:V$ʚ!Xo$A}l8a$n }@}7*\ 1kL嬁9$r>p㾀$gM}gM3S~SN5FŎ -U^槫>`{6y.D_G)ǎ]&ehGN|d -9.oAP n 84mil@LO -(Ʈ[NWeFru>= JmqIJpBADDlW$4\$9Sr${R=SQvuUjNs|'w tA& ̈nd>Pz tSF>(|HDQJ_]F+U-*gҭx ؙb@SO=-؂LdDPOSUPi?T`DGeIY8|/},;z +vQ'z\=vNVT.A\meC(ӝ0 -ѝM%d*Q(@V拄hVS"Fԏ5F#B4e_̆gXe9Ns)]?P&_sLDwfI,-> +stream +xZYoH~%41$y"k]d@IDLRO]ݤ,*;.fg$t=$rCVՅ7px3zQW"==7bC,gO/?-z9WJ9^8q^^߮H;KrW)Ч^ 0b$\:R(/l r|*Mf\?MgՅj%/v\`6W$'tp?\ ^ =tاUY5MHoyja̾ϥgu򀃚'~BkH\eeijੰZE=Bƃ.v9 \v4Q+)me9T~c#-slFNQw=dkfj6ܗYQ˸k QFwE;0gaGs}ju2Ñ&I0,#~;v4.%kh~wÒ$UIF 46rd04MZH1@bF+X՞Hv>NQm-ԣL 8/ivGJ]6>Xb 8>QC+4ys,,1ԃdH~֊»@G0&50 +9w3ýt44e=@I~2q9c&eLhs8Ċr:eƶ*f >ZWHk7Le|!,T0<[ ;˝1)]S rZ=Y +WJ![h kC<|3 z{(&PvZ˺b^=B!EZ˦<ގߎ:62GκTh:$3ƨU^:M4zIћΈg=KdM7Վ @t.S6[>HrmSCI]6g&6 lBOEeA7NkG5#[Oȏ-,}N0ӲkQ|5n\I+e*]`&[̘d%SH,2!dx^7U%SME! !{PYSIA[H:hg As%&)9NI _'"Ǜ_{ldMpyeqjO;B,HG)DK[ސW@[W-USoա>ȯ%NXai3mYܧldqq4L b,ť|7Ep).,< = +ڞuHQ)v/uM:EO6".oʜ#'4!@EC0l+n3 ShPMNTV>юa]N'gO2ky$q(]m֝0Ŏ$k3##.:!!No +y)g,Y>esB,. ~$NT0z*MI@fUY;夌i=}@Cޘ^xz-Rc*5 )m)lyD!_tn5:Dr'$?rl9[X9i@]7yL:_`԰]''*뎇,ä<.JD9я H,<AІf) H@^,-GϬ4 (Wvg. Bا3(1#l&d %  @)9BO+6>C!s#p;79k=H>đ뜠q\nJcz}#cl 5Z5'j G^ +~1ɧ|kb)2~laĺg-H#gH-le+L53aL!j `WC)50=hх2,VrwLy;L9[y咽#o'.6c˩(mc6 +ܛCK4δ2u@Ov`C2yYo97m^N>MʈTjV$ԒcWQ1Gmx=Uyys;ZXg{! )R{T h'ybsxFzT?cCeAQ]ٗRIX Ȥ\pCa02W'3Fu4$}[׋w*ݚ7Bi(5~A\qל-0ƱOzܸ!,sބ@zS[ԱeozZα]~bwiOSFv4;&Yl>)Ģ 9qr\,np-Xml0@PjOtǮKN\su<=gq#кR%۶ʸ x즠};Q~x@-} ,s$ϔlȜT8.|ߨEL;,7VYd%LO>3Q7ܼ%| ?mpu3iZ!'ʏ<5T0mf~W g᳒‡$} @M\8jT(8f +mc? s8U5Hb7 &~ Z0|Q (~kc}5&ST;'TF.Z\1ic&S=WS_ihG9+Qꑝ+?tNl q%Pp^I',gN>_>g%Q?:AMihpKg ]̢ȍR0& )?EFbv?]ObMrU4 lJny% Й:i?ο>1'|9NԵmQ}1f:Z#c>ZjG/bi%=J> endobj 4408 0 obj << -/Length 3536 +/Length 3241 /Filter /FlateDecode >> stream -xڭr6m&G8/i3@K̴D*$e~(+r@b۱D;7w! =-$,-"ܟ9 -Dj]a'h.snΞe~*q~L*Ge5V+./g;t9Z pYVX;7e3 '; 2 g`7g7c7|Q?ox)!".&]bj_֤ؾ-4IbwDU{f)AXԉSECUMa>YӼU5[P\$,\:hTg @[Af.KYyϹěsU5LRK^23hg!Ll|B=)kr]m/2 -4l*PNRiw%HEnWyd G=) ޯxfl|ΙB\AK̂3Z~(ıc FرHпa6T'X"_I:[WyWe7gcBod%5vd$ÑYV -6M9 gb@/9ע"?`P{$6"wۍM:V{0WI\z@7$o:y#"q1 w!l6kY73 (KժdcT~B{@G @plCÀۏ\J c!j9X_E2͖_wſ/k5+ 7 ]sɮP Ԡ&)Դ37ڔ0 Bg1 %n\}3/; dG7YdMӁkgiZ fm6rŌSH f%a+Jk"jZlS3+ipv$9tx2 !K5$šw('R%4M3c( Y7< JZzLނf?1b-ersBWE 1;tИNoy(qۆBcoȬR$y [3)jSBI، 9'*7Rq> O{ 㓡W+ɵgEClKyUtCnGG3LCG >c'#(јCRq! -'SL6tQɆ|%@[p7(\cu;` -ڹ۾vEa",>kgt!?;f 3>7]42[ *GTtVm!!LSn5% .Eh.AV(3JEtt64o>syn}͚DSԓH/{63 -Fp7Ʋb6涢Bwr^UOԜ*zT{RW%]«h<Δpt<{xr`Qn|\z8FΟRE)-D|_Zw(C0;93lqN"` Hn?$D0tyw?o/lq"~* "5e\Y+[Ookajlev75[\ThxH#41}-QIA - },jb8B^-hF.11O>턽H[zNq -xx@S a#2ewAn Zce^E%hxr< =65|hs EDl%F"]zcC/|,nb [|7FO +> n9|*1PZelHf"_^Xz@:jdM`_y}Q*b=[C >>Zӌ9-I==$=TZFߧ  gGj{ iĒH5A5E%y-&V!z YIZ{?rWt[ t^зc_{NT;b+o\V,A(-ϯuhObLLlVO.y` m%7_%RܣΟ!<.S/AZd&q),}gh7/936-Hli@eɾQkgs^O$0auJIz|!}!/mM%ݑ$Sm@_ MwC0\8 IzsMendstream +xZKs6WTUDG:?֒3@K̘"~(OjR;S:D7@tnȁ;Q(C;Ph>qF+x +3m' avr1Gc'N2-e:~ExVUGSgB7.a{rjžr^!.H#j\)lxxur'MDͶ5f6ecNB)ʃOK{e+p 82~+…!N_@ q_Ȏ/`3T i^}"-de+85BD-`:^sXp'51/Q9f#2 Y7 ! Bώl +"`&7xO/jzBE8C!aVyo"hŨUff̘ţRɬXv̓0AXA׌{ʳbZ'I´G-mՈ#07LO2_zӞe)UYjϝ#|4v.;pl6*~s籮i%<_`9;yRKhmڎϵ1m)4$bВ3$nvШ9U:clz!ZJ”Tm5Cm`ԯvW Coߏrro7T"?8+OE$ѠZ~XDDN/Vv"χ)wsN>n6vpKyg  :v,78ˏYfG^^i\^ Զc$X"p2udmn,*a^x A(b~[(ry<'%Ю+<9 +8ssMj[M]t(݊Ԯ qrJ:A*Q&u8?pq΄w,}>-Evx&{_ͳg.!\-l8xc_H7\cLu~9bgeʽ䈆*2:ʪbe}_t) Pg(\dXsK*3%wa}V=A/n7ߟ~ +أOW;UM_Ef+BiW^B7:HyyaW?1Kt^;:W䅊524ԵHܑtY1K|չ;ghqW}*|#]@p];A]"<{Xfc\@m0[W(;k #aYVPL܄gA-j)swb//BxºP2-Q眂VCEZݹ@J +=By>]L.H<(8{ D}CXw!>7N/Ź08#z 5ͺk[s+}O mP) e\'xLSfF͜P`vkQI9t/h<߂};sbצô-nW`)g@%ʇvg96'M@zf4mNH.5&XRV]lx&׆!G年*M6B} {?K r-.>62ڷ+$^,iM`~C#;[ HO;#(d#}U:'s ltށG@e*3۬^sOG)@ϣ?bؕ%ГwwFN.W%w!WQ&b{oLeN<+==d=tf3R{:95bEe;sU#ZHG 䚢`CC3(=Cz.&RH$D|wc;:rxPx'^Uw,LûقZrQ?⠁?00V2Y?ڠ @>nB>fJ]Pt0M` AYӚ,\$'d@z}"2uDGL`Zxƒ!ϩRl&57XxG*١e$0 uI鿝IMendstream endobj 4407 0 obj << /Type /Page @@ -14675,21 +14558,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4415 0 obj << -/Length 2942 +/Length 2826 /Filter /FlateDecode >> stream -xڵr۸_ά41$@do6qXvh⥨x('ṡ_0d3:3v+KdI|$v>?K<2˅/W/.zxk? -̅.|XZs@I5b P$=$gў gWgpƻ A%<8k=ێq -VCOӁEx6s, 2ak x]+k*ʬ.vxcid{B60)wS!dt.b@hmS| Z ! -߾ dc"oadsZ>}ٴLmGURXJ~x|5C6w:!j;yL&( {" 2ٕ 7Oym~(HuGރ|sClgʳq"V`K[[bO,ՀHZ{ZN oFB%;! lgEf[87煼1fE[!(!G冖dGʏ+?;\_ RRڧ5"p7?Cdwt_B^&ndW½zWu(X|yгyCKEiE08vQSa2Рzv:@(w@Iyk$@aN$U(j1â#AuH&v"O)@Hr6SC=.9Dch (fR)$!қbP+$dowN";t!%! #6GfbO+@2b2yy};匴gcڏC) w8BtU ʾY~'Y̘ UZ,N, N,&yja@YjSPmהi1rt(QJKIXj/48!?ߠR ]{ٺɦ#ˉ֣3 ֎ٙa#}^;O}oIh96m޺*7=1༿tQPS..ח -1Ø9:nw|3lo ̷@ƄJ - 32uvk&oSIzP9<Ѫ) Eb'vb}Wi&:u@fԳaD)@;ʀ W+FjOS_sI)aSncl\0'cQ GNUxSs.[~֩,ފ_$Gk9|)*e楍UIuoG Ö`c"nJ?u'n^A5#cQ:+`L-5$()Q\f4>*Q@`/n#`+6P}`4] w(j98[ul[IKߩdq< c~ƽ qGi AhrxaYGNiQԊF[ԡ(R;^}gpȲj;Fm)6ܺ70Sc3R#3pa]ݶ>8Ovel$ŨcA)˷ Z\:g]kA8; Tt")rjm>//ţ}j#|&@=yA\Jl#u9YuBzYgl#eZmueByx0 -̫6tw#dz} 7w9Ǡ>:2l\KmbMӹrpgLG]KҾ3Gyf06u#wMbԄɎ7&D"_ĆӍ& >ź9Qx #qO; >)w8~ D=wAյ&.g6&O`N_$%DH /yEs ˤSI $OcAc(㯿r^dákB#=WN#i$4 -#'nt$aBZ÷6QyutYm(jE-@BoR.ӽT  -72JQchӟ-|t*^INF!T%acz8Qendstream +xYoFݿB "[&]etnF"eq%hD;6`g~5vE؎JQځrY@8 v^/ ؉,;YXar\^(^.غ|{ߺ~S?[+k}׾5.|\ YzʷP!R]H/[%cvdQ^_{qqs^kXx^x$==;\;`~zn0#] 6z+Dr55}SghkN^y 9Wq:&}%eo[RóJyP-~oQUƠ0&9k}׵^3djLA醉VEopĭHq +r =aBy!xCYQxbG:#e!8UQNq^9%/Z˷;?^'8ѝ +O--"p7 ?CdwG:ij>/~_74Oݲ7r`^"V[c_x(sAh3 +u_BCO( DxjhȆ 2kMV ޓYىO| :8ͮ+D3*bpY+V]'gfdjIԬ53Fh"'sb*PÕX~we^h 'QD3JEv2|e| P0n(O (0_EG]5l{XۡOcm[ 2MF& +.8B.lS/lW8D95?ϊT49h:Sw;ģءk45|# =y -r C+]k + o n Ҍ/aN0q>L!|cI6G%F 4I,)5ޗ} /?LyY>v/}7'ʼnoHxoe +gIa;o==q{@5&J,?@M&ߦz?Q,+΍ 7J*grhb~ZZ)츈2qDfzVOٸxk ͕.$+Oҝ!PQ;0,R˔qL9/E,Z-9/\E1ԨO01Ԍ|ρsԪE[ vA6y;቗el`kܗ[ʫP ;my^Gq^L]O vW38Hq&s=H@ +)>$0+Ru +3TFBhv#*`;0p߮8fi!] w j&+S{NźQxK%qSN{ %8~e<;M$}boQM qH #qms;UoTQ\"]sW]vc7T"Fjr刯 GFQ+~RG9jEjHpi#q@BօߚDaSh7j^w#h&\d]T^Z +(8̏?fE+}[<_&)N&EYendstream endobj 4414 0 obj << /Type /Page @@ -14724,18 +14612,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4422 0 obj << -/Length 2115 +/Length 2046 /Filter /FlateDecode >> stream -xڭr]_iEU3q+H̢ Ȏ~Ҡ g2Kd>ҧAL]H9a8J鲜5@~a{brvS:OO:*̖RZB83; #|E֛7?X ķ?\O73HZv_l˻ٷŻbs!%jo4M\G ֮#xZN|%K^L&x1̟2՘S|/pucB&8U)'B9UQHU`+j2[0g6"Ez-H$ķeCG# -9Rxw#?g$.@56 Ο L:ur$\z -K^tn4\8 < Cye͋Gˮ((j@D@ӎ.7BѾrz6jczq\|7ڮnlDm.=KNt.>gP0ZUM-ǻ{ZKi!44[IjB ׏.˾HMHyI 4 zЩ0huJ}mOO >ti4]P Z{r$&ѫMVІ*\nxvoۜY -X OA :^do(m M}*%p6LG@0)Mp2d{=I3A.4vrGE @PNbBkVݽR)L¯WƽO"( Im(58I;ӳRBDTЎ5Au]ԉ.Zn,x%j0%=PY3!`~u3X$);ӓpJX}BfmBٕqՅ?C#'ҭ eд8jendstream +x]o=K C$mM۸J> ;(`|'Ϳ1`;&ݕvWa1g'L&QzZEu"&+=-(OA'KD2/ e}s޼;_|RJEs6 b͛O_>h,է ;G)gSpnv}b<JT'߾Iz?L#'ɤ:QZzZI^ܞo05a]^B +/N{r=5uq2+4F_<࿜S7 HQ,xo /-R,mQoȡ#3Aɉ İhb WlÈ(8ݿdU֓m +=WfONI82&6a:EpXN#ϊ R c]Sy]Kxy_vtL0k^Pb1.MeԀ|bYg,O(8ưg@  +ڹ9Rh $lPǴy^S9,˳Ԯ ӉG1q[M5%dLYQ\YyiH]cYnn'(&[٤8g YUWXE~i@۫sc\w}?J' ++}? c Ո27MQmj;Zy~ [mGv`(u\c7kwu3y)'$H;RoY >䦩EXYM0X>+1EIaD͍(͖ǒ # ;Gt !RQѠt*-Z@_ow-Ct7<~l}qbSB wɃ@j/44e& +۶9v-yE*Ԓ0x-JmI̦E.ajv}mgc ʏQk.43v"SN.H?SY: @_ⷺ,q{' <%)|`cC2t: "t:3r2JJ۱6WtVeow90BT̰ӟ9e +c[21e]fj݋pNtC;_(/jU;+8u; q)endstream endobj 4421 0 obj << /Type /Page @@ -14766,25 +14654,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4430 0 obj << -/Length 3671 -/Filter /FlateDecode ->> -stream -xڥZK6ϯPSk+C%r4PBRJ|ryH  4r=-4v#/o_n|X ʢy9f^X?y2ύx.pJ)\%I-yk Ʀ>Y}oBgw+,Zznmv+\s_ޢz*KO~-7a(T]|Xuű{\E -W""7.leE󩆏j@(q ||. @&HCu#ԑ"X(QpE7<뫶c}/79vU%(ۓU8C=6Cmýy᱔pL<7&K7J "ړ0|8_ %VJjaݎ_$yؠFcx\ EUj"4s$r~!Mfq&@^3iL%@4IXTaF]_Ù~PV=6O(+l T,>z"+PӴL5'N&LP[Nv:/1Ԝ%k08Sfeklh`ehjZLtZ){;Tkq;qoUtZ!D/aS2ZP> OTi^efK`얾\T15dAwVav?}ʍL-H|3IQ kARBpq\?"EsTL{*mXpbx~G0Yi<2xm24/l*̀F˰+”6E^Q}7ƏCw\q&qbV# gkzetNq7l:x ȩ%V%?^S~US~OĬis m.+?.FO1X# ~1E8$txV_ I҅9AŶ=N{Ix[ĥGv >O=$"[+yG+#, k4;Ą욉T -qAyYlE8ѮyslF/ԃ)eJ09? K} zHMpHq5D nI6uO -n:jpmaTDw(:Zax ͫks}Hzcyϟ8~)'/X!,\dΑ dNQ%P8 GƧs@QG2ϛBψqG4TF1$~8 fe1h,ucM$gBZ/$M@^ATF1X]?񳱎CT$-F76s"2 RYI&*:ƉpʒϫQ-aU1#oqDbx DFn#Ϩhz<a3B80uJWA>cl 1MBJL#EI?{ڌ -kʚ'rWiԂ9LtcƹMKaVTAА1?Cs{we5m{'͚޸ ZB Ts96KLְϵBTieBRLfc#ysci%qBi8<ٺ Kg::gtR4ց֪6ѭHe,Lh䆢2-@ ;TI)<.:=EK1fx)+RA?5L`\ʼBCP,FЋYA~%aylBN` -FAdf Ԃ؇,V"AĒ!D{=Te ZtڀW\-eYO=AFd:t'z@ QNwF -^cY97-k$_㙥.#-B[ة.q+P) 41tTW^^pm\.Y&I<)+)9q`\IBgD;[1)ؠ sS嬨  ?bHB?]k= ɯ(ҷr0T9{RHN=T$4BrT\Ga+9Vvˉ4nzJ(1?ޯyQ\.(Ȓ6"^KW3XTi̠L& G{(bPP`E%fk $>F^r2Q(?SAm^"+>W?r|2}q:X>F3?fMPs :%Q% 8w)oGr@& -u%`/MZ!8D8nOl1k +2aTpy!.g$H~N|^(>83V8JI]e|Qb%7C"jL7$QgAZB] =]ӲS$)FdLLF$"x!ǃ4Yʮԑ<F?m0^ԪV ٛ7ZͶ>tj{ {^.׭4w -WWzs+{; "\WR -^nsL/lj -Զ~Kϯt)ٓx;\5iqi[Œd*UHsh;'{m59ZN:֠ɷ|S"7.&/BO| -ׯE hb;||C n9KOT -rQ3kKendstream +/Length 3482 +/Filter /FlateDecode +>> +stream +xZKoFWF43|Uw/}hM~wnBg 7+:uhO c_EsU.~-Wa(T^]}9X\ qDAIY)CM4Ԅ.E] 8cgS<]Ke]ޏf.a’^|AmW65tX;=7~{lh~m- sձOVM XMͭXypL47Uz:Gp-I6j,GVUUNV +~k`ݖx~X<:PX E=*poX~Q|~{F_wAwc΃&ř y~O}a;5] +4MEfӃ~ЏʪÊ״97}5ʎyMe&B8ub߿rta]%Jr+Nm=23U^dvgyWƚ zQ9 s&Z+558ǗRs?ؕD03pPhA [bc䊻J^/ݏR|?j Jc̈1`FMT8g@T .{LNg.I4 HKTņ]֡HH$0t%`%,c +_v;NYK\zkphߕ5[o =!Τ!)@:,e#a!F n G)b5¨<6hG`Yq 5u]l*,؊eBÞ-wґu1:|WV-X-3kt`{5ND@b){0Omt}zK:5}_ppoZGl A@CXH jDy.,k&7'r^O ?nQb3yz ,F/.3<8D449WdMlW{ 8M+H.EWb8T%Yjnxmt0q&y0a7}Ӛ&bb,2 ab\k+I 8qo2sܓVbT VqxM8+[U}Jқœ{+jAsE /P0uKdmҌ +tj4#B̬O5gՂ 1x!nkf*}wٜBύeN7$ Qq8< +phڞ%!&J!l`<QQp$=G +mXXL bN, `_#ɧV9/iC<$Nσբ+j #P'y%g,442!uexQ0Ao?L`04 _uEw|zwk)JY^HcP]BјOyAiRnXеQD2$l4 ]w-8ʔKòCF7(4"{X\/V<,jj6`io>3VNguNb4xNiD*n*훺) -w-L')Ԫ؂ &K걝q{B^; T̯-௸s t/ScI)P%g_rR4xem$94lp$Zr&H1OH4B0h?t7p}o46hl !LF0 m[c=}9h`P)e5+%ɤ;d&<, +QG(=f 25O:H9W[h1]K_6lʘH1c/}4<*bIcv&a7([4E)_s/TŌBMD6$<#¢&-y_}3A7wRh*o.8t!t=j +a#yjYĖڂG]BGU3fLf/=4j xO-5 GW~?+n-Fm3JwV!w[}%צ#4YpDı\0CdX%)OB&P x0|ങe^IVqsYijoM'Giѯ{cMЌ~Po=73R?0Uȡ$Q P[a %CX_Ǧ–~0KϟH9)ͣl'0:kW ITu֫ wC!VOg?>Tv< endstream endobj 4429 0 obj << /Type /Page @@ -14832,22 +14718,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4439 0 obj << -/Length 3629 +/Length 3348 /Filter /FlateDecode >> stream -xڥko6{~Q -R$zpK}Mrk/ڢŖmue˕foDI~wbQp8Λ&.y8p\L8tM wm0zʉ:LfO:ANf_Ow/m!yΥEu}㗇H=v=~th,Ik?\3wg?^t;@*wwx:"'/v/I& 'BӋxLNx!"vXW<_8M pB[fҖjL6r [Zpwdlw\}8Pg5m 8K}u\A Q///.]μ\ @آ0D~LI 9K_PKYJdAڤ &|.f;ajOgC`Vhb`9 &e&Eґ_ZnVA y.q:ϷBJw -fVaL/"Dž#\xtF~5AEd ԀHK^_[$?o?`س#ķeHI|٣} $2LP&Rsl])iM]▯x[]^̽*JqZ5J84K~j/iv^7U foM{/ޣY~evFPN$r'%hh hXlMZS|IPy&@e3P2QkFed=s9L FvEWwor[Ʀ ` `/T4uo@FyNA*'7î_ -aN?M"iapԮ-Ugka-1xu#$e±y;;QLol<9'pD*%qrN,['tDR&Z(v7pl;#8'cfbf{ c%> #b(u<5t#yExD)<2~7(6- -&<sB˳QLNI8c+N=>at8֌*/@FD -Zr"޴ vW~4P&pT4:Dbs {|xcKkjEV):=H*c<,9N>ofFJy'xpD)bp>%%폰S,@*=h"fSp[9*+[8f|h'-t?`Ԃ"0Z&agmjAk#QH܍ 6D"3DFa/($dz='vAo]tp.LnاxGdr!N#GLeb ^A6܃Po|3RN ęS@u<0crmz(KۨWyaoGgSAq(w࿞24uhp5F*/p^لt1'PpZE Z鸐:oMbcQQi$mڰ;YCõW$lΎ ?,/:# V@DԂZic=, }Džʥ>'.ݞt m?GfDž<+NCÜ&JlZˊh\-%K ɨJq&1q3tN~N-gA1֣r,yxF -|b)OqOS>ĉݾy$] 45JDoͦCSTu"YI.$gma=jEn6dr*-(VUbTT2e&E┿ےt7%+ *7,5ʮ;G.LD;I䟼1`ϾkJqsPcEY&tONd -?gawgBraH_&9HCB#Eoa Ո*| U(G ѦP< ˀVѷ0nstB@CQl0t|F=l Th͋{?dQX -kfa$l ь5GfMJRtrPYj=d |҄|,{ aΏ;/Vā>d=q",[5TBP%:8s"^ecG/:@B -T\e@@aPU;#_<ۍ!Xm k,ۃVkoR(Jz}+}y|}}C݉Px#5ςb[(BV3,0Uam>V:{ą 5OhZaL/WrXF߯mPd' W:=~42t[)0PZ5y/(ٕ @r.d8%%|t;}ˍᕄ^ɛi *T{fg-h*'j13CˀX2=HʿtX< !d3V<IxN"p27m 'c'9v%ۑ I2Շc >endstream +xko6{~Q +f$Rwi$-~`,VW\In6AJlXlDpޖ7q7dš7Y'd+oN<N|.}3?9{LK?9oޟNRi7s\񝫛8uݩrW7v+0;s\8t +03|5;eɫ/P!Q;IoO\xcWxI2)O@W8kw>@PNqw2)))OmV(pzSS9o)țuZ(#wFsļkf8Pޤ<#㗒]H2hx25lM=MB|]kHw<)4])Bz kC!Y:<b9F[*˒7YR!\gm{gHlOh_GutT ՑQTL.ATOONโ +sgx(I~/K&bp~E*a⋼ 51ލx'K:j)/q ҲYmxc3GsZ^WxVW?󥈣'[+TGj{E2dVQ; ZY,&Gp\>٭ڴI5Uԋۮk\OAqїJHCt$T?t:D۪Ûa?U3 g [`Ov=;N܈mOE۴uK WR: + 3PRIʾPqb-X횺 qyTŢC%kwASJ qP +74et-]р -f{Q`Tl :Alcbx6ίoci'E=>_â@:<@ nP~- +jQ2"i ȟ*'"/ @Pvs^#R<=pǃ#!?pu}uG, ]#مA9V7}r8}Y)ƏھSn <>(;CUc޴ۇZ7 +!jUmyY$拏cp؅\fun״#+zh_z 95P?Ӛmu0:!Uu8?Jcf?{_=M^q^Ƽ |{uDՃKuR jDg{VfM.q|\67 *0r&1-ǿJso._PiZ~QldIx@a^@&Äя.b>6Mݠ o>XaWKXL?6^lP' #xu?KoBcff0g/(S^TXTn}:@<82oH+MZ~kòJS~Wmmu;,i?, S$an6?FP-HWE dpϧr>HDߔ/~˗`g4Ir늾 ~.Nendstream endobj 4438 0 obj << /Type /Page @@ -14933,23 +14820,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4454 0 obj << -/Length 2572 +/Length 2550 /Filter /FlateDecode >> stream -xڥYnH}WC(qY{Vf"iTH*~TuSD%5zvdšx,ۜ9G Ͳ[]| ؉̖>cI8[ZW_p7_xg=_DQl]Ul]]~YbƷo>t{Kg-ood=f[KL\/?^~:hzv,'>9ijg;$͙xv{{}v~/gj(A[ Vqg+΢ C?b|ڑ- EvO xrW[M}e/f*e7 7jNcwWꆘlxYG \E֓aYkՇYT8{m /]|FY…6Ee۴bd0c? Ã`yEX~}*[dJ6@UI7Dl#|ret[vXtcТurs -@YOk+X3ہ^VDM?E8zXߢt -l{rrwy Ә$-4XEsϏ0~r(`)'22-h3RqV.e#k?ſ㩐3rs^!d0LkX+lx"*ecwJ$K`ˊ&]˱Hbh9S؏>E9\dXNB|.;=[Wݖ/QE:ʪȅ ;F+9=M{sqE.>_G) - -'W.SW:ia"y+\}:Oy`FP$,đ|׷*Y_KUYyf 1pFE$L\D|8~ċ|:XYa -FfL'm2G6\t$hDdž c BiJRs{/ -`/\:<8K顑@d8^x$8b?ٜ֠q"+^CU -0)m0Bo=gv? /DgwP&|' )d;؍0A ]]'4vڮ+]1zJ1a\ >K1^G5.# ɡGn'Tz~Д.ie|Ϫą 6WVIElҫ5BUDD-Ö@Sp`T(5q#T,W~{BZa3qbRH'($J5(9~6:Y>^ls.V pVUte*]VaQMhcKmumӃ[.vMa'P*acg@9UY8v)֗z!ߦ}Lu a(AHsWgcQ]28u!0ಮ4k)pؤˆ߶hErH iwvX6R sC]rbrEmɠœ4/⠗)1YSEK] lނd$NL7n뢽4'VA $~Ѹ)i/oڗ8 3<`YrCR8C +wB%փ"ïi3ZYIkf^L6'jވ3~֯]j'E`Wۣpݡ>t%?-4,\W P\ƳʊCNv^Eޣ͋Wx׊oP;X\Nky[ ӻ_ўZ1[z˟[K_47ԟ&OE MJlFw,>endstream +xڥY[o۸~ϯ0Ї@BӴMѓI\ [J,$7Cʒ$pH vdšl9qf4ˉ90ԇP\NdceuoO7E܋oWK(3H74J>bhZb|Af2*̜X&cZi]`]uǔ /hTԕ?>`~="Aﰃ,Rvpar>?^y%g!zpaׄrwmBK^12]ٱ + +g|"jIMU Ȕ"&m1nm]dYW 2ʭ5-CNEزg"}뷫Q,kF5V~f;Ћ(uI;ǵ(mA~[›NCN.o],ݜrk4&ʈCWcO,֚Lڌc gHiY>S 1r9#C<7Z<A a\Ά'\)R66zTKhREJe&;q +Nn<7ψ ˔X5z2 +4CVn^u[4x#L\7D|8~ď[0v +#NiL6' .:4BcG @4^u9߀.k%H 2 /qq|DJ1qkЏl8 LPcդ?LZS !@Ymݏr`D026 6( HJbosu?vco$:Csk k;JK;F)& W~W`]ʠ,pTÑj;q*1_^E( +MYa_V}'&. \IJz-d^ 2p "j;BɌr7/|*6C!'&tRAT#>3M)Gi壯.o6b jUy_Ƽ5iejJ1`T؁;4Q6=uݮvc*ķ8"X\[yq_{DSpTu (|GJ| +ړ%5bx빯*_Ov.uL-2`M'[sRNA*|W" +0 빫.Twj`_CA1MY&deesFJoRaVv^To_"9$ʹg;KIl,)3ס9N%6Ҥ?^F*@.`Me/9w-8{ MtI)l˼= ++v셀bQKIz 3KDʦwpS`KRtppZo̜Mg*CldWSB(%P<Ay j4f¢zJ=q7/<޵}d6Ӝ37xG#n6d+| ڳKCi7tqlQ;\iP6;Ϩgj*C^,6]Yo\La W"nkx8ըHOP.Zj^؎,]K6~Ty\pl\%{0EB6T$pS(5i'u{M"(#Iђ!0Q 8 =?vtez,KweT CBa +<3Gs Ӄ+ZݫϷx)N7ŸhTE6{ƓȺDPu'mRByR1*<w&A߂X5@ gµ~5ǡvrM3giO֭>U.I;!$ܓ=cqSw_|o_P0YpsCR8K ++w<-փ&ïi3ZYIf^L6jނ_Б˄U'E`W'p]>tT|7K> Gl;6i,ޢW(wIJm:ƵVkmݭNKݯh_Z1MDٱLO+Gay+PP7F@.endstream endobj 4453 0 obj << /Type /Page @@ -14972,16 +14857,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4459 0 obj << -/Length 1324 +/Length 1310 /Filter /FlateDecode >> stream -xڥ]OH=R_ ?R  :mMpk{VfviB EP|n#7 -Zͧ3!qvhNQh1MĚ/rύ5Ͼ: lܡ3Џns 9n Ɓ=os89:@3³lshw ,IrF9, - JnQ 0qpЉV͕HZlJ45/כ1hwhay"nsŘ|JGu8=PM}b{* -Z}f >d{'n+1}g[cJS_e&endstream +xڥW_O8杻/DRINJ--Mܒ$.N7c;EVloxƥԊxF#7=b-as b.u6 .GEؚ-,fuz;;ٔ}' #? w|jr} +gϮn&zo;nŴcw1?cbK^YkK*z~แuޛޞ|KkuÑ; E6^ON0 lLTjUZ Y*uŊպd>Qò2OZ(J I^U?v|2K}JUm&}gu#.5e"z+lhISBfUt$i`eFg)^i,0Z$Om<;m'gs. =IcFpPp*x"& :nH2+ܨ)]Jޭ;J]vR`M^|P|pIwaƞ6|.9n*ymJH+ dϱl4ͱ<"Vcmu2;f}eTT9[d1MD;RRAI/+~%*k"OqRJ5-@=`w&L@>L S2JcL_^'j7UISՈEBQ/r국IG㻀Ǐ@0X9_:4550}|o9SV9ct^MB;$n?F5T1Q{OaPKS$ Shv(WWzkuJ5}歖H1hZo%.@%8(Q[PjR(0,< ^g9lz{\`Y4&ĔFĞP_^az|uM}'ϟ5T S-g`iz].Akl6<4jX^߷Va<)huՉdy#~:f-۵&ϰJMc3YS#\vHOIΪjvxH&FGיFd媪%F@^'r{DPArzW 'xcw$w'r"!WV%W/p@Dɣ&IS:.yk{W;izk_k^p"XMšͼќrih\j@at5FZcz;uzP8P]kO\?v{G4:۝(9endstream endobj 4458 0 obj << /Type /Page @@ -15004,21 +14885,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4464 0 obj << -/Length 2251 +/Length 1954 /Filter /FlateDecode >> stream -xڥYKs8W*{jC>R'2'a9@"h"F} EJZU*n6>| >Ey2Q=WjVM{,dډ=`4I:>L|RJs6v0rn"r^ۧ J|8/cH:?%0;ލ]y7oWo&-No(}򘌣qSLy||wߙ/q}X%O>ʍں~{ȕ"u=%Y{T(.9!l.AAU&'ӱZOcMHK]VÝ'|qBUW+]Sd`|)RfYWYGa@ܙYnς0YD\K'84-(I*ՍY#1USW(N1Sx-qLgV ]$GmyÝ%TW#z\o?_$i?3\:K%9G{.tע"' %+lqGI:)=t@p6Ɵ=]@'鏵S;;3k*3SEF٢%΄)GߴaLT68k°/ԨDRŦ khBvSءQ޷6\ ,۬ -bLC+&}rOuwJ3яgl[Ngle&/Vv <: -X Ǐ -aޥsJ9z94  d| ߶( -Z$XPh||S#J蛉$AlTN_-m53+L]3.r,hR9H]9J8yY]{dU4Ep)۾:ʢ_u fs o'>}E5 ͡9CH"4P'}(߶w -X&taиq&d괬hZaM- -Ƞm$" -(6eP4[֪I%}SVZa*x4ILOe+F?LXXBa<}D0|ָ]e +ߊAIIXBSj6mIx֋,J&crCkvIRC.P鬃U,uh6usSOā-C%C  `Ã%yjAe<#NOVJBHGjUV,Hsئn{|XX%k|eZlcQ)uP2<{9v99w.e{ T&>C$uP L7+i M ssҥAmZ󼘉HOb|ya*ogRQ Auw5S0vg'n0LU:G֥$$G"-Y8\߳P 9w.ep T=M|77!ͭ', SYJ*tgRJQ RAգt]<#D<@q"?~ozpȇJٺ}TDvPL,?&%& -}WhE4;.d]T=ۋ&dM忧 R5*_2* D7/ \ǭg0 +/ ׺/ n8\cn#zxxwYzYg囫OKGJisΖNFRD˗a~5N}5DA +y WKxVj~xx $ +mk dYDZU.<_2ߓX ͳhՌ'&BHE7@36HKT*-y]=O]ZUB=8 ~z%]R5]S|p?Tו*>E6^Y%ʒ}wǏ>sܾ͚[XuԬj꿉ǯqwXAݬ{]cc܍BkFZD`#"RdD +\5N*,%?݉{_)q#rUYv}GH|q -nZ\uHg \Łafڲ56bP I]\Rp +ԡR+"2L]oRWhΰZNX߼}M܃ Ciڜ +ox_]mT`d$"/`_|7Uڱ49݀KZw4ނdf:I NAܳ{h= +h}xZ{Ҽ"Jo{ef6gf~-)ssxr]|8LrA D#M0}"t;sY,Dȸ8:K?f>zLt1&dGra,.<CaA1ABeHřű$h%=-oKn uJLSnL^ζ:v5ߵW(&`@r B"ݸ pBXT&a{t}fMO=CI10"oc);r&>PyxɺuƸذA@hb ?l Jw|q&4, +k{:hrs#--bF8q_,DȞR . yFn +_UQtpCxZrEL +wItܑ(>/RA2g*6m7Ilh d@<`3}g>Cxsu.ey2=hm}ftS$= ';C#`h!0ڿ^Kcj@/tRL VJP2ɾS?b遺gQQ7Cj8]M 8@{|~k#ETKhWҡLWu@CSN;V ]Xkiڂ/U޿lSw`9w^LT5 G; o:)yN;^=tMMibB*@ĘOl#mL`3x&㙔!E^9lrWfh=E>{FMžm.:QE]t%[0z/$"}yu/_gʪ9:ٙcQ` 0f9EC q9uړQHendstream endobj 4463 0 obj << /Type /Page @@ -15103,16 +14984,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4479 0 obj << -/Length 1939 +/Length 1921 /Filter /FlateDecode >> stream -xڥXYsH~ׯPykר @Ga;ވV6#$"ow Y8{KfOpy`;b8OsQ6p[عbI-_?t{,p`1'.|a4; 3,O;KkޱP&gZk]*ܘhm,9@iѺGNDŊekYζ<EE8QnOC1_ީ(D>[_`SٜX}JY6*AVV ]=i= A>{x5<0|q~| ӋB#"K:_4ɮ6U#w{&ݥ*1!cv-@frࡹ/c}|̨IV]֛M`!> Ϻ DJa:ɷ֥w<}zq%48wρ8գx&&yd:L2ڒ}8V1 -%?t Sgyy頄żbI*^$md"KJ/Z+<["P~)US5vkoQ3i4u_\#J!( -k|ӶN=uo[4jNvNlϝ 'vn߆fٷzihDü(To:.K\.SodTH3H|}{Sq $wcs۟&yr]z1$s|/g(Q1#FIZnP"#!шbuT`E -,-n}q #¡ E33/ Xh5sصJFf$*$J|Nы̠5s.yOaU&kHP5m6{!{TтCq;F(qLJ2n뒫=8Y!joG B b-Tf 3a\TK9s* b6L˼gDO9ޤp2G՜ҤSOM疇A9g#V%]`]Ҳ' -xdFsXeqHݗBzE)YqK #J&\RSES+CІBet<\"Jq1M(P`ogf)xnॾ&9%&7 4j&QO ]hܦH*?Hn\7ƖOi?~J)aO0CJl>o3endstream +xڥXmoHί@9HؼEڤI䂫Sk`NU3`-gr&xh-uVV5Iه۶-sbMޒXf]=uzmvzؘvcO3)q;GOcnfv8s  ẃj}l]y;:\:V;?,әX[=;ṕ}ԚHۖL99tح0C ^,TtzHXB~xwu6=4^i.̦O۩fL D$= +I < "^~,!mk`O 4T":q)W Ie)yrsa&nWm6BiHi5p_E7b˫]&Ik)m\c3TU1  fIei`a$b{7ȸ._OtY~C_¼ !M7HWT]a>i[!?2 .~/U͵7ÏHMeh|?{ˁ{4_Sa˾0]P0 sם YZ2)|g8aTzg @[JߴMwIx~m j (uu M* =ۂɮZa +b1 +Oth_^WS;G +\an!#U GbcQ}qg\mB@xP,~h+ +4\ WA +9)23IS !d;~$B.9qMF2J5 t쾲Wڟ-ВQ)=ɥ N$HP8G3ޖ]k*2iDMzmH)󮼇qP*!x9:6`3 +_C$R:璇0 ?(XCws^J\O tuF6?>}s%u2ti4|RgPșꏢ"&Vs^5FPtJKˮז~rPJw2e|O ҏ!W.ʜ˳-MyH3ǽDG!jP֭"(gp+ :$`IE9FM4"QR)WTt^݈c+;ZnF.q`[?Q1dH gLj#k4]\T8wc `j_lWЅ厂vendstream endobj 4478 0 obj << /Type /Page @@ -15135,22 +15021,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4485 0 obj << -/Length 3475 +/Length 3306 /Filter /FlateDecode >> stream -xڥZ6V%zW"Mr=U+K$͋m˻9$Ù<̃YJgqgͅ7[P,daѼmg^:] 뤞6y/R}wĹէ>}uh>k>hn_.|Z'B.^7D\xJڞlsCZwuqsa-35%CS7 §EnEYncKpH PM'_Bm ~<NV` e7zlvuNNx z)P/ZT%{<:)7${< wwLm Jq-qԙw-g]Yy/A@֖#6+!h$Aw7nMkYXD|{AFq4szzC&9/TIx6<,XGDmѓӝ> QfAQ8ut9ZE/_yQ#;ԁ^.;T,fepb]Ԭ" 9 )N` #E6]oV.gJss aV2%cTr(EF Ef<Ԯgb٧^XnxM<7Dy -N^fdG`ܾ.NX!bGi6bdZ"ҵ(V]U`G틖qB[)f#cd-4A1tzvv4N:gZK4UbxT.i@v;wԫ  =WC=/%/U -9H-@j Mif,3́kd^街H%G+ޥ)^\s'v/\*CeSV\M,h#MH5\?0R@ ^P Am6xU Aі=&Nb7܏wݰV&]V\q0ܒɰ;^1@ &yb'o?pXEɋ)9%AhVֲ*[J t%o{c..F#k%vr]=H.FCD.$# DJĸ@؆6Ww@ ->|,}l8V! eW6x]6|Eieo!ư&QX)p/sNxlP\(pKXg5w 򲟛2m2Bˊ̺TQG9j_bo_,1];bkm,H8gM\9;$` >h\6dnG+9#`2S"1u/ -ᐫaL+޸ n&ƫms˥>`!03Iz!/t3*'y =jИzZ+\mol]V^Tbax-ċHeyI2H${J jfojHM:6+> E ?2Nm~6 VBR4rwz g?0_AH㞛dxQQA -yBˢ.3.GnaHB2X^D6ndaH+H=!CZwYI+`BǻGՋe}u>F/նhUq/_ v-ك?)&V?M U?B|Si:*t&RUT3!QdwO0|bLI@Ck2 -v玧79Hs>!Qf#dRd*!C4q:!4`<oN }j*SCĪ@π|FU/">+H.= qlSc'?t_{t+ HPX3ׯB1,݌JbEu>-=YYƮz&7TCnQAw-Ss_+7 ! i3@zuӇxs 6Ea %݂MEE*h0ȥCeq -;HN!X1qH?-k_bLUcltfuDP)+ ꈙS=6a$xH0lZ$-:8ngh̋,\cҰ$5 og.,SE@{)m |7h>UoOԛ JH@Mq riOBD<-wT)? q -2X5k.,c~zg!cp[Om=8R9!-Mkհ{υ(!60͏C-`xLc;hetg #Ƅē ž1σW"W-8[(e !{!,7n?)fSʱoeI5~l^@LBOt- !vXk(5Q'JR +"W{&lCZLE1DjYa|QZgN(MD@%=_ERM!WsjAO/ /$$7Z &5'$`PP|"tu?De2 ٜ2]_:o@G V˾Cv1A3a.в%֜\#6vbqMʮPDwh -Sej|ŎXW^]Y%fKf&".>8+e~hQ'La*\Y}>R1Xb3q!I[ix/8ĒxR/@28v 'ʥG,nB7?3()$ SeEI6%&-I"TIAA^Qt䕰ҢH&2`*`n̞<83M)u#{ٌgkYm>NqX ާcPgO/3{h%ιb 5%"OsEW<LJ#:qLe$3 }<}0@Eendstream +xZYF~_!8X +F l^a#vތ"G4L(R&o]M$"  Vu|U5%,N"7 lfJ 7Ӯ8W)Mt\2yOER|ljs;zy +\l87 1,qhW/O (@>^7ˁ<7Hڞta:~uuwa3^5qXMpƏ]?d|oBJ …B:wrc{l%y9O (v:F>˶US, '|YVW +'X]>-$p{|܏)${ w,m-8v8j̡_v+CFW +nx1%ēZ2:{BDmR!]DLPJwڲXiK-t &[>v>6xLꝊh~T|mPnSgMx7MO"]OB=)*=#J/"hT0KYGorB>* D/e}Uc< OKV13-e5 ^MuJYO;\99[vG7ojŮ`x[lmQ䌑F1@3e#w1$#"VDBЛ:}5n|kOGZ]ߒRn'7гM!0g$RI쐂 @l6sz&PE IVG&FH6x]5;Ei8 /F Y/9t| DxrNܠ8ۻ+Xg5 rLc6eEfccFڗ8Zq%FjgY">Nl5 Or;Ós$" ɏC|JlL6E!31ٍI`e8'?n>@X|ze=^. ;pieܤ)FԔB 3A |a5;dS⢶V/ Kp-=[Iزq^ҽ.uINVRhY!b>hݐlj f/[fY3)1Y!I=bM5L =Ϙ@ۅ&cFY +| m.A28.FMU8DQ8Gnr\b81פ”-P8FVB#ʍmL9PJDsyVeNAbT;AشdI<" 0/z 1yٸ\=cDzaI&9݃#o9X$:MTJ5f{9j>Z-a꿃ِ} /ZyL9OLZp i6U'ܑ-Bl@Cqo8t, ?F,~oG%;p6 WT7lmALl^/_¦߿%̡Ƒ|J$L{Sl~oK:|b"%v1|r_r-2-Ijj0鍠t3E L /-ۉMThQLmatv3_1[ i2 +>:%:D2v᭾\TE^HxQޫ3(зP,gQ`mOqBlbj?"=%6Ekq{$iy/fuKz |)Uk%-x]̜Fv JGtMȰfZkܸS?M\/8E=|h%!DX7Ř?]T(4&@ߘP/=WہMy,/<0\zendstream endobj 4484 0 obj << /Type /Page @@ -15194,17 +15076,19 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4493 0 obj << -/Length 1448 +/Length 1393 /Filter /FlateDecode >> stream -xڭWn8}WQ*7 -n6.vndIȢV뺋!%"M0Ppf3sH ?jCxh縜j@H^ha*lpq '$1 ㆞1K>߆望:9X`F?P"+zEApsvF(9aP0lЙdj}Lf;?">}&F1qhp -~--^՗Næ2yo8FG)s8eﺎ'|9Hp Hᄐ5Wk*sJ!1o__3'ESaV2Zz'-NJD_ h5jr]41:*"EA*'cb -. CI܅ 0UiFi,qMg8+|]gNOeÖVW-!fjC]^gčB#~iG *x kb {'U2O_$2^h2mS\2T4Q]od? -Q񐅞\ )wQnw-bf8\UJq2B{tՉB$džc~){RAdrh{4m2ѷ\bHHߧq3V~|OIzTAlޟFVU-:>}Ӳgӭvsx>3'`VDjKȦ+2 - qQ+4jdRm7msf`n+RhV5*^ -rm)j&LW[n=8^3Ц#-89mO mo봊DGjϩLxF3 ~uZږͿ;A.z5OVpwxq3.Cxq9G/G\$]{SO)qBweF osnQk4zfa]Lqk5ݍ{š#axigi748*w'ҏA7=0oaMuOqoެ^9a |8'n#^ NrEhMuVN|j+ϚuHXꝲ9J!_t^ș\HmYVEPF!p6PÆ +U%(fMsX. !EmI-UhHް4f"5WQR}ug,Ui|DpUR k\G訋)? X$8$q$1ڤ&jlͫ"QEWE&^*(ӔbZP^ʪڪ2n~0F! = +1)wtw(G+/F D2]rTjܜl}벐0d< A_ +^T1p[ʪ%u{R&.TKuk Q$GhpU~r"xu<у;ۍ,E4V‡է wWxA(BA]H2ٶeER xXU;uJhCk0 sS@F\7]ti4 p +ԊH/AcAh:@5O,9?%Az2zoJ~?s*)O|OT%NjEt_e٬I0NϊZldYsb Y~,OϪߊPgeguq:%*wpR]t=YTܐ;{['@3 N0P4#a cMJ3 B,\PD; ,fGma6>F:1z?Eגendstream endobj 4492 0 obj << /Type /Page @@ -15233,28 +15117,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4499 0 obj << -/Length 3455 -/Filter /FlateDecode ->> -stream -xڭk6 -p@eJ$*>K&iwHAYr$7/J-;A[,Qh837 gi:%iG:v7l+ b! ?7b3 ? À' (g={wBk텡?_$I={Ooqx߼©?~?a5oxq w޼t8 F*?ݼѷ7tl1#彺akf_M OT4[OS3 F)H.$TH. C5@(N U|c98܍ux㟷sٸ/T~[x[~[l7B'oKGl5~ g(Ù/WڥKp*V%C~=+2^`ߤ@z)f' $OQ7% 4E̓xITJtEٜ luiޢTOOzX'_r1R稦TWs' y4'WNpq']dhcٛ]Fr i N;xzIZ VK d:U^E[,*犖cVʗDVsG@0ǚq+6+kEĔ4~[Ax їM͠%Mkʞ%޴=o8EU N 838M\G0ͪ;A668vD^B:D>oN -2 숺_ -aMd ϐE%:"p/^ g[\!/}D;̠a ,4*`V2d^%lLW vA''Kh%& -D D cڍ@x> pY>ʼnt;Ĭ,(,ka>Cd9"aR9A/1|%ہ"LgC 9?FQ}twיBuuf‰.Sf^yԮmxeUVq.b *Dia]<\9ƇHy}Ӗ恟ֶ>:_֐b#/"?;K<!:k^0,4~B{ٱ," -kM'FB4gxY^y;U^.߬8Y[E/ kyqB)|Gd9.LŘc} 4xl3K{Y,O[R>i<@g -V7=û"^` O^DX(*B fQe[^#+!e]fd$۹ʼ)n7# -j~˦[¶ӻݔu^ہҪTЇEP#Z˺qG/-_fmQy4\LR]Y۱|7x0p -fr,H -s8sjԉ^QR~1\EL|5xً*D$S/D#d`ia.1P)W:.8b >x - C8leTp󉪨ռsсl@>O a!C:m)%TXLf,%sQꊕr'؟* -XӅ%c +h0VH6\aʃQ^Z?î:߱_ C_\5@3-Pë -.A -iMr=`t?rޢݯSKn0> aj#J^Զ3%brCs[*C $+4¢ 㶠˶X3:T  rD'+`ʧ$ΉfpT| I&yx򾅼wC pm㴧6Lҫˁ`uGOQ-7/;MNN_80ݩN? l$wPPQ6UN 叝Dfgu645 ȼHqf,U)qaTNisMe - ka>ˣDHkFM`TNtӒo±Ӈ.qYakmb!ah,46.{[1ב֫LBex]H&C?GY櫏D2 Pc@VCAv -D ?ֱ`u +H<ʅg Cn`dC\R@3+)0@ xru@ۙ)~ٜ+Y[AYJAJKtX-&ԯ\6?i3l(X ^f>WC`p:gi,Ӿ_:5э!tjp2:;^ ñqኩR!%N^Tdή._ Y3?M\ Ե ̰%QpnC -n{z|NwGi Tx)֮ \"Z Us3Gƌzsb"abz⡱bЀ5l7:l+ _42E!dI>6О9WJdH{T Ot1oXS1_sQFSZ9QٗG@дUg'ꨵq/Fiأu8u9aw]nP2NڰY,KY;|2cŔfYJa7$Myrt9rc \hǹGS9 -fMy G'fl1;cwK?hQ-Sd& OI$AB9*A_b*5bʹ -Ƶ͚6)iPS1v5GBXpKpK=x R]}K0(yxq( hRoOrC0TtCC7^1 Cf& (eFߜWlyF8Cg;lwoK5c8nf㹥)R)RϛbpvʜbŗlM㌔o =kS-:⸆bj0A#ޤbno{]ͣoxⷪxLNoG)]ק:&M)V/)]O:}p /A|JqS?endstream +/Length 3241 +/Filter /FlateDecode +>> +stream +xڽZ[۶~_2PkEhWt=XuOwc,|Cz.ȫ_ߝmJt؍/o^޼t&t#;x[ ~~+ ޿x'杒huMY8W4ؘd}ZHV ]h2Jlѩ  Yˀ^8HEcZ +=T*bEymӊЉ),]σ©u4"eMibHKx?~p\Z2vG+N%AT5? Iۼ0"S9,wEHKKf!ǺӎU~F)jT̮n5I,} pbGA^⵮P>pf-}OeXVFē|OʻbJ7tf$SZi3UTZskuX6 J~~h]>0I;B>@GYʑFbQhUFB1Fsl) peS&h^ջmY|8zV:B_%nXɀ.Ξ5u])[?-FFy:-MxD ca$b@6mE8,.hbm<_~bsnq2FC! nY7" +m17p~&o9c#oK|eab*ԩ,kz(5.Tz]W-h7~eC7yV3_ǀۢm# +L'nU=qb+-H +cO +}hE]GB 28ˎrr08"[ޝ |$0a˴/*.*կX{[h@|0(p AA 6Z/@JC@ž7FÊ_:q*'͈Q8 ze׹6)̓o*ehehOIg1 )R`5sg K/<6lM꠽*yf~<0Q?{|)}EJ_nYv3fܳ)Z9?Y ӀLm+~LNل8d߀;$Bn.n MVZT&׻\wunioУ|!V[SR[+5BMQU`P <ǮDuXw)8?@x[sSKv)IمZ$n0Qdr؃I&=Xg= @9'{K#K8Q Ydf\i +9А.eq tuDF]4v=]AI8_$m1646ܒ\" $ҷHO+G@ ߣ3l9QߨM&fg/kld?a :t!\vnDr+'3[9Ei=|(Ѩ6HDxN )SG4.>2rl$yT1*JL%GGu)?1D1w\9KUp} ea1,S1ǐL-"mjcG%pw}3 Jܲqu"Wm!"5sNmMT>*XWl9t+q<_Jc?G,/d +omCHKoG#eK\ebx1>27,' jҌ.7p |Jܲ a(!I!ؗ٣ۆv #8^Y^sOn$6䦃o&vvT6Ń:D<@Wqh! <^lQhqÆ)l?%> endobj 4507 0 obj << -/Length 2443 +/Length 2309 /Filter /FlateDecode >> stream -xY[۶~_ XQ$u ЇmNғ"H ZO$kK7_Bb[n>bg3 g"rt'0J.6UʏWRu2i.V=4&'n^u+<)ҏĻ]减W7_ԇ_-%&[+0._-?~zi"B)^},OWPix@4]W(aꗞ:gGTl(Q "6FD:&ˁ%P`5Sc߁i{,~Ϳ8{YR^ۆyTaS??߄;1gYT9.:АҜSUQvԨA+yr -ʦp-C$]cg{x,n@DZfYv/o)k J ˑUG(BK)%H-|1#ȫ)"B7("spMwPi U*  T1wSs8)@D3 ,DMtp~c3Qp&{_s)Pա8>=ĩfp]ޗGC{ƚCMMWZHf^C0Т *!6mm3Fep)R B'#Dpx}vx<trz{˭q]1ثοvA5%.ߜSᴴYa͊"Ζ+O;vPu#ԭHxaJJ7x#fD u ,ڬmN6$ۚjy=E_FuUj ə&GnFo PM+E י Vv%G*@8)r٬Hx|OʰmѨȇ/H]7b4;WpzToa_х.~ 2PB5_7~0R~qCk)i4Pqel*Kzsscٜ'= eaA4bz$؏X3ya*AvN)>6y -~e:f0H/j8q"Y -zDAl3Չ:($pɅ~c qd",n<7fnT%ic6p+'3utrU u9.ͼ)P7 -g(XDZ>BncۭkD{n=ո76_]~pokzԢx0%4\LF" -R!ʹkDc. gքM©snkO.^h( -5q}@;uMse5>,;c;TKEV -n՝b:/# MPDޟAv|+G7ʕ*TGݭz  /k}HfW9Bj@'6FrfǤ(xFP:V*++[vldĜ,vQEolL@v +uV4D9QN1ӻ,lBCH@.ZMV˛ԥI'/ %{ocdĈ!'߇Q4چ; /U5Z#n"iw@%M_/$/(N50Jڼ/uQ^8ȗhoFe uڡ}v')ә+TM2'ř2^5"Re,bB +(@'~isG :v-w(ctSMl<&5LO3:%W5󈩲ݪzylۄ;qŹғ + N8_p[ O(גuVo6)x1G(gA&< K9oJ ʬu˃U;(ޡvXs vY,d'zGDS/blJ3)I=ð1YEڅo7SXܦݕ&u.SDBsbP|U$:&tJoͪw0[A|Iv,OoOfњ4ٖMF*b$$XjC]jyGBq w`fdg0K?쯚؍Jfo֖<{p#6 `xGNh /ݾbi+e]hWe 11w.DڥkBc37L66):ξm/I}g[cFna:P6oI (<[\(uڰ'2Lӄ":CETXM̳:gstDvM dah\:AHHD`wH).;4]q|ZR]r+V&a ~e<礠RQqp2D`% 0x nF=> endobj 4516 0 obj << -/Length 717 +/Length 687 /Filter /FlateDecode >> stream -xڥTMs0Wy&Vi[遤MM0 ĘIݕK(ɥ0Z]}+ ~<4e҄iP-y8 %{H9˃ -90u $a>#_?mK) 44#HduE./us=$/o]3FHYf(ϯaK,{NQilF1a(-V(r1c17pIB rjF8TrZDV9j -MJLkFM7Ae7odFOB&n[94Z-|_ZKr"5dk6H4^բW1RvnS,5fظH\-(|lOmmk[uiu,T`e˗cߌ](֘в=@_-p/U\b]u/Yu{Q-wRdG56vV[Mn,u{ -3 j+,q=˗b%CHJ0uyP3yG#Ʀ귮ŸLƺ^;9 ]@}DO'U x.-mv+/?7nn2^(dﾧ6& 0;ܫw!"ëzx#v@ղoUxa}*]ʨdę[tendstream +xڥTKS0Wb)%FqfdѣnnG$͵}F1:bL8DU08ŊD"3}0*M>(7&%Jz}LCS:RzCP#1HH% ' ]`]PhHP| :$dҫwH2DjA=!Y6j ^#e+Υ٢|6jZ+^CO;X;JB')ZQxoٞ0؂^uah.`cӗSߌ](: ahYUL\.c׶ Wڝp\U]sUJ1苏(k1(vV[ n,u;mp|rb;Ԍ'd)c + rRL}l"fWDNjya[ 0.$su}yvk7hȆQ  {Y6>Rn* ލķ{-w +` 6Ipo~)*@պ#o/3R -{,;*qpd4endstream endobj 4515 0 obj << /Type /Page @@ -15393,26 +15270,22 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4521 0 obj << -/Length 3326 +/Length 2905 /Filter /FlateDecode >> stream -x[[s6~e%.o4i6vi@Knx\Hٓr3D$ppp|JXb'Gy"bmGYDt}3(&dpsԌd,llG7w5ĦOn^O֑b<ɲ<:<7cozs\.Lt?'@s |ꦖ3X쏿 VY,G ih}f-5/3#յ)bb)u<]f37nMG)U]3%V( BZ4iPK>$ Sy" "z.VN{Ф P݋Y$,$ AЛllzSmئz -|iFdwXGض%Ѣ/ p$h 8A~qƤE.a.E8lLœa٩`l[`i,+lfhv_}u=z\3ˇuC9xBnCJ':kNC A|N"f{N0lnY}N(ч![#k-(UBKOYlf]̔Hv$ AW.Ld -R*t|oۜX ~+L.sEr= -LH֘8VizU&`[ej8Gc!%O /=N%Ġ2hQ/8qCQz8T[l/$Uըh %/]FA)MAT0X&Ăxw;|oX$F0y} G@iq[8T=M:!ǒg /1ʢ+ܮ Y?+~̑I{/riwL?!Q%xs7:ttk_Ѝ@^+D0oPKpg8/[y؊%8h[3Er}&GhDeo77K>N0r]9gp+ `f)Ȟemx&؟5QY/8X0؈Pt 56N88Zu#c106*3'aZs0q9<-`'6mFKN߸J%YTF>b_2":Vc[~=uH7UgpGŇ_tc9*U8A_:l_yeaL}Hv²`ᬼ\iKWr+(A -4=eMg4z6B[(.!Tj -"<;p=FHi_sFȘsb߻j~ -,\ -B}i UEhÞQ[Oa -Q3cUz>G>e/,&14ً̀)I187U S4n|@w( #Z9v q(±FK/ -h>qDDԸR?VlG13vA=;duZ\' 苉kˑB!?Z+!lΝeۖh{2^5{]_'‰4"lp ,c:̙P%x ׂ#jQ;Vs2ܹXB J {X͸!ɓ:K}VJ><( M(v$1YVl e%CbSħ EExMe s+?1?棍i} ^L<LT.R>ĸ$XE] {gÈ3#JuKub=؈) @ *TRzTۭF2\ED™GtbDSف R)_JY7BՇcY:] BCkJ8; ۭU穈ӥjq-#q J- ;}j b^xWN0)^8 -*ϰkv -.C,}`L"9H:}= ,{6\cTd@cɦ/9n4+ ZԔ5IǥǠt|8b=rHi)beor],bsZKXC' nk40Y'%wà_>ﾤe;[Mv0s-i éats2ɔBj.϶b ^xÖ`d|7%egܟ^qY=!5kX|=pHܥ3<g/D)a9䑱:$מ*endstream +xn۸=_a@E-MmƋ-l˱7Jrsg.$۴E jh"z$D,og@=:©gó_^hio8%w@J qx0..f3ʻz޾0Hox ] )oOϞ;4 D>}&@g/Ӥwρ/Ҵ2S]dYֿ' O7g "r%?6wҸD&19e*Bz!wŦ`#1[I43f`KE,L>fn“6MU;EKsHʯ}tzCOlb|=u̓#L-A:kPkK`J-ɇ_8X?I/VXôax# {ڭ UAO(s箰<5xiH >IlnieD,?c0ڲ([F%MͿ>\A[ոwQԷ+$2 a= i[Śm WWLmZ4D/W?3=,R=Iy˧  JϸG`_F}Hs[1<4 _ϼXo-XRUi Oo&$oǫYVvN#3%GBfŵ;_ ڋ~cackx{g*l,$#\\!о8{HliҚܫ(V\]|GD:cKvv1߈b:_GmMH1}bLu'Rrk"m*\j Dduۗ.x#CƗFU%q5bE +m -Т̀fXFJ4)tl4ڌt%QJ "F_Nl`{PW *qrw (N ܈ni8Gp<}1#U?bpΈPA|#`XwNCθvYNts5c5_PX Q>tZPΓyvWN +`Wܲbtr5pw5e8ЇLhFOзmxn:H8mkHm l]NZYLx`SȼCkM! Ԇef( +cԶi{kR.v$3`]#</`HK"8``d@;e'JbS-0ɓb:6\ n1!f&70%Fup+!CXoB:nμլ*XwaO(x6Qj.Zou˱/}T +eN8E`F)6J?IiI\ưϢL{#({HIu-dat r[2sXt)&GE{˨vF27.vi 9%D+4r;1Y5Ny/OS[8 ۂC6pu O[qI _]o49:\PZeV~,6G&]q徊mb^D8X +JAhtrWY56DcfUy=>zړb209"b.i1'ltX[HHi6=7s}}tE0cEF`|O~endstream endobj 4520 0 obj << /Type /Page @@ -15435,14 +15308,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4528 0 obj << -/Length 958 +/Length 760 /Filter /FlateDecode >> stream -xWMsH+1=ߓػImMLNWd%W*~@X8%U.Myozf LU,.4V3% 4?=%eɥ!̥.m2tnN.>Ɖ"`qbNcnOWYdꒆ?VD+o{CQFӳ8At?g٩ ?i8Ê)Ά?9e\LIQCd:4)G"3 n?q'v|isJe8sq2beS -AjYlSX8eYtOV4sVqKPfR;Gs``e㳇QH,/rUI)6-;\njZl}b6CD(h[ԊimW@e Z>諘T2TTS2)7LQaS8J@>̕\ (( LY\W{&PSx v<&04(vka;Gm 0 &qHfҶgsFYaJa*MrC"hޖo -r~ZGW~1}eǐP):T*wָN* ?^n|+yE3;WU|(h-!uLsVyQ $澿l]x1ǣ˽(ˈA33GCQy0’,YzfE@hTPK|M~.Q -x WAg,/I{d c d[* nBa`V#~"قC$C%"4!Rݫ1`=S'}ZUh3HdoKgWRi۔ʫ/7wKP~ygAƨsduf6xBc{X ?̼qpH =DBj endstream +xXKO@W-˾r +qOI wf׉0* +`x^|s) +F"`nwP$ViPWB%~SIQvQIzW^c(}{V靴8u~y3KN[V%0'G~:mP`,| ='VԾaGh-TQzˁs)Mh]f +hus7P\ 2"dY!(Ϛ1Q0c*E+Ho4p<MGHoE}Lj12*ycީJYgӾ2e0MO !avh)qGa"#;%4@> Ηe\7kQYn7L=4_FIpwKZhhO>{{A՞\`J"k6nl-L;N &3HXBPwIU-ɇ-s0C,2V x_ 5q}ء@i=[q^f|_"",of.àM }}endstream endobj 4527 0 obj << /Type /Page @@ -15465,30 +15339,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4534 0 obj << -/Length 2696 +/Length 1660 /Filter /FlateDecode >> stream -x]s6+tWB(EɗIS+^(bk"K^I_aY<tH|_xp2eL3-,\+>eqYdy595x>ۈN.>wN 'pؕt^zvu&Ng fѯg{kjuRB1akɽ'cάTdLeiFi< V(b{OSb$$+q.V8W8-_ʳ Y& -0 (==#&,I#LY!#Jv -6Kz j-G0t{ta?`P(tͯ,NsŦ -Lav}&j)üW=2|J}_E - *~}Eo= { -Z0` @ʰN;X@QMrnتsVbH7`` Q(4 JvޔE!(ewY%(sTGP+kήBsr3ĵ - -1OT7)4c#ĉjU$t8CE]|{>4Ndz%`V򞁜kV[ qVfMHؐh%PW$; -ͱWcH4W='T2qi/\Z>Sh QG̩n0Sha4W0a=*{2~n -=aPsxv4!ѴY]}ZåPȍ^ey'|e* -NUkTX NUWA>E!Sاj~mj3|(]MS13Ȕ{b|nlmr,3NQv'I4GQ͑D󿚘&٭03ϒ p>@ A3^okx1 //4rM!dzZ+fr|;E=!͹+^ڬf%ϧs1NtØBs19bh0~\r{u*:рR~CCG֍h{sn[(Y:꣖櫻Qlq!q=)C *0)Mt `K4^`V;/;6 @4+Zȧܣ|[a׏y&YO DOܗꌔBuo_g#~)_p}HyM}Su$fr}#D 3D# F^ۨKI +)EAH`l_v`z*t@q>F[I LN]JsD)9o`[ᔊC9,AD.晐 (~OS 3<)߳!y0I#p&#ˎªda,"8RJGw6?;y|iHo?=UbG fghZ#y@>Duz%Ԁy0_QڔU{TܝnZ6g~%q^܊IGT.cWTق/\U/PYOASrVñ:\`YcO"%\}v>Pr,5i .2+@aɋT& u82ط@2E. L: f+LmYC2 +gp<œwzS#vJv^e,c;UT>b>؄+F{Wq> endobj 4540 0 obj << -/Length 2868 -/Filter /FlateDecode ->> -stream -xڥYmo6_&"}6;$=Vlʒ+ɛ<3$rp"@HCr8g"pF~E~z,4&&~d g&Wnv+?0,=c(ԀLJ*XcxxZuqQ,6y4\EQ}Z^~8vq}G{_z,u=/W`^oK]Һ#+:= bC x0y5NHy _'a@Gd'щOq/kj&hw)>/U=f8Yms|I5 /:0/UdIc2"!UBfF5DNXbzrdv9^+(=@Z0ϸX;֘ pDJoYW<=M~˙\_> ->2HUL]1n0$=P0, -K6tJBZֆ"Oހx$"+m1V%okiIŽ=DÙJ;URQ -}?ņtYx~YL0wusa3HIJ>*}'l<y5Qc?"1ď3= uIdG5n pq_&P~fx']& L3-ǽZ5cw5X ?~9Br~}@Ahڮ'B~ Vl&G+tOzjY;Kڳӈ!BIg-Υ|Fy7;#}p,v?b|%# ]n7=$r.l}Y6gݮ9V044 Fa`N0E_A3㪫04OnL n*ݖ ;b¢)9[ɷݮ<I6ⷽR7Id/ys,T˺ʭ[Db׬K2\碌8~DUYOïfpa}|6v$RvS7E1xN#7/Pd"Ћ OXľ3`{)4 y-h^'(!t 1 Nbsme/3"N.(k`@ b_L>A~B~[Sa)_5g@zF9B&Dr;Tt)_n[p,)\@B$:¡-{qJ f.ÄȻD!32Yh*po Sڱ8=!ȭ-gE1ZL MpO$k1 XCu^M ˅F}cl-x=`W']=p]P&B j2^d%,FvL9:YmNl80Jn -&AS!t"=FL͌ ř xD\~j$rTGN[%Q2]ÈO'E8ifc4$Usn7L{%^9.% -3?uoMq -Ak`KVU(bL18$Wx;Ǭ̉0R8K},V8 o)"i;vzI<1>M@̙Ef7G+NwdQԲ j <Mc*yz fNf֞B&=d&" 1hQ_gXguVMpl^B۔zjz* ȁR eGtHxi6|_F:yZ2^- ԏZleH1M}Û4 #AqZ=A0\1J.hxDt+U<#ul_b Uҍ ڼ Jrm8񬤥(AQ"6%Lr\FvY">vQi2jiFtS1QjkRG{ 3 0I7bနO -w $\"npgKaԟwCLLrρ `A)#.\F*=_1^GH{UGKׁc5lF3#M֓7/ؙendstream +/Length 2791 +/Filter /FlateDecode +>> +stream +xڵYmo8_&"R}nEVl]d+MwRm !9ghO-lj_-ͼRDCɕ]L2G_'bL;,tq{`ʻͯrEqp(rƉm})M \)纤u~ Ę7~߂9:L^t7^a/3muP~f*lz}YSKkzOeCO{~4 ʫ'۶͑ftLl\ԩ"e'mˈRV9 +iאEK:yoc!W˕3],xmsc"RRf +\ ӷ47v.grB&+Huzwb#Y 5SaHX[7{ a!aXl +Q,04J>y>8:Xvoпu' +;r!3+Ee\{ؐ|a.*0ʈ0տ($^݇WܜaPQ:KiϢh/_J%05wXZfq)cBq\MC|-FĂQ/Y,~ i^>eİXcM!N;Kڳӈs ”ɢ9-Υ|Ɯy#E +;#, }p,Ka|%# ]n7'r.l}:85rݮ9V4`p4 .Da+U? M ",'VLT (J̏ub +Web%RQ웨 +)[&>] +d޻exEۢT5Y!; 0w @RQ#EWhԊPgnȓHM+稝:X |y+0qD b,;#YFXc9lb <@ݗ}`^J')rNieD tFF\>_,_Sjy wbpҟxuH2^0cH 87h|@C Ì1KHs ,~ +q +(S0 ϓ[Z|4yZA_5g@eF4F6Gr=Ul!_n[ *&!.G%Z Ж/8|32i (zD0z=BHbX\;6dwGc|>TE[DB(FIk%Z ~ݤ5 εC Y@^MQrQu" ִނR  *TixƳ̰$_px[Ȏ):' mXԗUMDoDxQ<c(\1lfMh+N3K:ɉ, QuUӁƮ^q:-bȏ3gtRy;(*3G(! +*x5Nvy*QWrpkt{%q-߮>7IU%ՋõyQ4V]b 9,gd',i 8hܶvTwi i}eRQ>"4'*f@ߴ\.d ._i0؈(%,U~,0U|KmuW~'@%7hZ~P@'yX3\-A2slg{ + @°em& 2/_:4kk衲;=ԟ3'GrxRMl"# Dcgg8tMٰ@w‚7t0q/AlQQ'U0-lg$+Fb#{`/zR3>5ՑkNnD'}&i2i5HU+6  Pg5=R\ބST~Y:>^0zg\PH/Rb--5plجG219v3(S[jt콽/?%eFR 4w:4~?|hendstream endobj 4539 0 obj << /Type /Page @@ -15561,23 +15429,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4546 0 obj << -/Length 2737 +/Length 2657 /Filter /FlateDecode >> stream -xڥrF]_>! U-Tx-y$ Q @Hk鬷\黇j?5dšk̋#owGJ f2p}t6 &s/\ux5I8^~Lk(ߝ΢(v~*{1)o..s# g}qћף& ؏GxcUI2)]h`§dctX -Gp^+ADi,|g>#n T ie ( YjFc}Wpbœ=Y9JG)u'3=Ԁ8"@ީ%.s䥪Vx8v -")`B7.Rkh2 DFCkBf /_ D4o:m>9fu.hՔ?h'U&ptb6U.DmMF-j K'0. i lB}V- F -%GJ8@П*[u ;Mg|&z Դ|oEh;%g ,IYzZC7DWZj_{ K5s"`8ݧ eO]=[*Hzi!IRKRF+=k7VL`:A U0-*$߹3 -yO<HRXTE bCJTrzq^|>㳦F~w3q>E)XHQl! \d`# (ҴiW%72tG=7ozq||.rG=,~mC=(w59CIvQ݅ r%N="̆"2/<]hq]{!oDhBwjŶeXe. ":9Hbm*" -+BX9u}$#6ؼμƜ:  ?kCOF+ 3T >V -a S=@s|N1ԶS ?O[!aͱ.te7ӷzQPH4k秜rK~d!|9c 34y_=2Pza|XW@ȞOWɉS] d~2ԏ{H[\Ѵ|B'c!FEF%iPyȖؙg&;"z_*g:N{[*pP52FW48q_G@> -%W_03_3 ɆO/\e'p򄮷Ϩ7:`|F}5ԬQRcًD<6U8_+v;Lamk -z)vel.. RᦚjhZ( ~K^؄xaDb6;Sgxͺt L;2Ȉ\`-a_Lk4h0`|Wۍ -7){يPV97Z,l˩ -GjlEb|c'>1"D˷rB+A PI}]l€Fsf̴ C6}DbI$u"xO]3CPi[8.KNNT'-INkYtIJLZiZDyܐ2\FrS^BPsMQ6](=7![FM42_ucvA}8袋%꿘w$M%JkjEۏu=CT.} yoQOæn~T*q uN[Nӣڽu'MwZ[T^7zG;҄jIJ.z`.bjK gcN1Oco54AgP&lC_^ѐo H_l' |'pI^2էᢅK-orx^kcunM}rEhXVUX"zLrΚ-R"`NFL(]H|Na>=2;\HE'E&eFl)!`3w (>*7A^qTK+|{$'Y̭aKgY@{8/bdL*\Z@UNJ?P\Wk.Y}b _۴xf(gOd9uKؖM8|~"=5 M unn,@Q%`:}gbjֶR59cZg_#XsfŠ?4LW*ϔIB@} -湡}$6C֨܄~'~z(p}uִI4%D{\7wr _?Yw"ʯPa|[c"߶wY/?́endstream +xڭkSF;·\FcȲR 6*a ŒXI_#ɶ`s\*43oj$Ch5{d +`xBK_K&ׄryݧLk(ߝ΢(v~* Lg9>S?v.ptz̃ϧ''D] 6 x{Mp +`HN +M[[r6~3F$z8D Zj3F6s `8dn҆ײtޮ)Hzi!l۟y'Ɗ \'h~ ڢCwN/pO{sA+EƣUrD!q~JT?`:H)峪F\B;MƙC $@Z1te`4E% =q"ۦMۼ* TC(;jG7Ea"naDCI=N)w$qm]}N#ΆrKWq]{!oxhBjźE- ":9H"9T vq+s|1M`{7A +G^w5f,.P/ X,`5h(C49Ϧ&A,۶Ib׷(ny}YS<[< ]YBìr#̍$yȁhi[{ْbEH"l8Ľ) +u v-O +4Z! +Γ1WkEU|Q~66R65<)#ܞ;ۋ=Q„"G w$_,cr'0毨ZX0sTb=]y=rW!7^=RkT[{Oh^oџRT@J+nzぞ"ZN_a~prrERZ OK+ϤVš%%=Ƃ$wEnG9fop.:"Ύd4SbgU[ȖCil ~%ìO$(kԵ \=/Zb;N٠[!/S~Ca +le%IL-@hӳUzR"ne dĝnendstream endobj 4545 0 obj << /Type /Page @@ -15609,15 +15475,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4554 0 obj << -/Length 1711 +/Length 1624 /Filter /FlateDecode >> stream -xڵXko6_u 5-z耴IcuhVe[%j\'~%)Y$w}@LWṇG`zd`hK Q#`ʱ4jE=ow;7o#ƘNM2_~zs/#_M8vOeL6. ?ܾp!>6z`{%fĶz^䘥ɷGlɡvj2bTsm8+y5,r;!RlX bh S46b4*!&_"dIɗ0gF-"rX)Lia28 RȂeD20v1EF-,Gn$kRbRc²-_!%0CF=X=lӑ_]b@vuh1leRł4!(+&\dq#dxLݩJBģs/.H; -oӱl@2J*PT'P94]iTzrd*ŷJ)x\h'}R+뻪JZO|u{5خӌ8gB9O\\UkWdBZ-\\GJ-8Uq83!B&KH hIja,І"C[H6%_t< 0.c_15m6ڰMKLy-(ԓp&{kɬLeF.?x0|j(k׌7jZձ`)[5*H=iT]\nWԭ}˩}s-ԤQ}vvU0fdLf}*E`"3n9~J -ﭵL`<= `rq&o֏idY&p*m= s(_w>\W#X;afQb YŸqg+ -Y"},**MQV.6 wF+3tQwxq,[kea\|/_;2tcdyb##'ru!,l?W˂rALU`o˞\GyL{Ǭ,‹FAdu.Ax{PBeGw:ϕEZYbt=]S^y[iK_ 0a^٠ K4ƒ<37y>?bn;c_3+ .ä5Q~ ?y^Lendstream +xڵXmo6_u 5-]: mR/:AEKK-UI`?~w$ȶ쾤E"OsMGKL;G\g2Qmabz..^yN$4L\_] m6EC5`HZ=8XVO_ٿj4~7W׽VhC8}`cu$v06 ~s\ߗIfW ۳C$A4PPW1Db"͗81l.K5-2<뵶7t6X)Gq g*ϸa{,tLY{5Cq25ٜm!BĤntO, XgClk8/Eޤ|U`TB$**w]YCX3x9Nj{|m1fTѲ@s"Rm,f6]&rۇ)9RpVy4^gC34XQmlUj˚Xc o EM`9Oq9+x(0hո@d\MH7Ri|˥&-JiٛN8H-J,kY.,jPk7RU0b,hlYۦm}`Wg[B;0cLHwXm^_Y}[` LeO}V!%zX>6:E9BWJ6X$^Ġ[E*NGr0]KC׶~(w naY;CU3o_*Per="&b{Oϕߙ]Gx@5 5G]nm4Mє)_"$ń6(WXq8LfHv㸼/+YKҮGiT*EnqA$~)BWѨc׶Vzv艞ٟCr!z| PuW,3m|>QϷIu7Z ;Qef^-XtG Sŗ.D쐖4ݚ|H'88 AxdM1hOkZ|G,,HL`%|S1+[݀"p%toV-.td<gi?s1_)βZ^Sc~JHuMc!;$KKFE-8])-S7YMrw" S>Tvii| +j ӲmF'ԢVEz=)x#\$s3nϔ1koog^{'R'3]J=r"RduKݾV e؏:)GȎD//㈩w;H%eUJtzA~D =i˜#GXg,{~G*g/CV/.ۇxOPS[R؞Sendstream endobj 4553 0 obj << /Type /Page @@ -15658,18 +15522,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4563 0 obj << -/Length 2004 +/Length 1940 /Filter /FlateDecode >> stream -xڥXKsFJ.lw؊SrЂ$*~eR.3=_?X\JaNXP_r%֊lg2V/Z"v'Njm f$n#kv%^~gKʫ(Vw 0DcZ.b?|f־YnV -B^>~b^f%ߨ0* Os$>:QJQBiK٪@yw>tM[׭!ޫo>]]sf+3lt^ i(NwDG|K̼(Xu{W%ϭQK "{\< Gzap/+vm }3]X_6]č{oJq?(mIdeY \uמ&8 H|O߲,r*;;BX; Ƴ8ȧJ2L`uΞ.16`G_ޖ$I6Ѻ&:/"ãw])S07a !mR=M>h כ,cy֞IKYD$v F:eOKldIG+c9O5f2yqOM1= -x.ʔl~%H!LℳfX1QKFi0DMR2 5? %_="4ڣMl`q!$"^<DžmaI8;hrA^څ5f I. W^msk~-v{Gg3-JBc$2晄Ss\G%SIObF. -v1ת>xʄTM2/|%[{w^Ea}ٲ BMSKW>3"^bE)va/ؔ7#"HV(I 0ja EUgP5֎0XXb.Όȵ D0nhn^C_,*%@"T5US˪21eÅeirV~gljڬ>Iu==6iXYM.Q@V_b ET{[eNwtgD`V?ҍ;ԡ2 4R.*[RI'wş$p20{277ntI<&pm(]qvOfěT0;``btK? @F4!0 l+[a.XtUWv+X9Ihr{i~+o&e31`MM/zz;ݹ*{nvDVA$<يl -m8W=K*%n-f<s]15 &T8;P`"m&s~vJ!C9M7woCT\}藇DyWwL0e -O@r{ 5X*i:/Vo9}Mӄol&,7ŧ {4C"0 l4`(S& Yn'endstream +xڵXKo6X-UDuM7E)@d$7}Ajbh ř gyh:?.0JuQa[Ei߭ӵ*ֻkbտ/~<ܽ|&I8l lDpvy _o"8g:n?em];dx̴mySVQTQ(jݭ, 4qkZ60.`DaY+l}c7,΂C'~ty[}ͻfh^Zmot&ֲtW{ + +.]cx,hG".*%kfߨ5ihV`^w͢p7Q.vy( +|W/Y/ȍ{oEVd Ds6O<%ht+DlT5UfsQ 9"hp;uϑ Ҿ׀ACbjo"qgȺS=l h;ն4Y#'B^3LoYb{AMdeS!z=MdC^!m:i$앁in7aEyB+R @""0 ?PQAdb'wtjSl\7I6ѺNr0z8 oat d0/7da)Tba%?:=A4xi$QcɆ)1IXgPFR]+A3n) { 5gVỲH@ +^;';`"* ^U +ֈ ISjSVZp*pʩhRd$l6|tܕ!K0\g$Im{L9Nݕ !nE/eیS)E m^qi>I 5k7sbrT7ɥ 1 3Ə8H2{2DXIX?"L%Y]+IGX=ZTWjI>iR,ZLSGJ|`YΐئY F_m1Y9je _!Pva+f0fSj5Alo{r ^Zp +( Xqːi?QMT!UYUD;6c仱 +ZcǥUf=-1aW\Ч)a5ww/5" +l[TK5ӑ/\J'(m:.7,97]G#Usuitzw t[F tQ@XGb荮RETe%O=3 hJ0L+Pcp:_)EQq2o>GF | P}fC[;z֭0P~L^v4n8va`$FU2S;F lFՅ>PcgE]eD0TDtg@uNIR /HޚߕG*u"rC}uqPTuX{nu {WMli H\ +@OlʸmMyۀ4?l!;'> endobj 4571 0 obj << -/Length 3117 +/Length 3069 /Filter /FlateDecode >> stream -xڍYY~G -dG޼3$yiԒII`Ԭ:/˓wYn(w;@9$$qLε]ƏE]c&cçп MFw DAx&ɲ^mV$O*jKW۱[E׿y-q7(J>?n0ʚ/kǾkݯn47i83>N>-P'6Y\U^0:*t%oDG3-U{/hw"  ·j1`ld#~ -c#?J~?15S{eFoshXVEXXԘ~;~鎪;[w.Le*6Ҹ7kI|4nG׫*[a2{^kϻMc=qQVݎq[sU<.A'sϔ핎!iY4#. mOcr,YivKi4f+ -8A,*ى"A`˞7+5&Nh?t z.{+gHW{i J}e4z-B7@?Ӏ(IjNaH;,ʱp;Kz;=Ow alMϓI{9_pȵtz$^jxZ0[ìh72h|_YM_Ih 6ZcsQ芢X]MQln At۽Ю"-'<|7AW壬""HEDAƗjޞ.&Dqͨ>+] 'NX^@f¸׉q8 <\0K=YEMH|(- > sD("uC|!tTtKecS!E#}`Q99åljbSJ,B$rV@#jR!Ps.S?(+?WQ?9MQ *21laZ_*fϟÙ -|~Czת]KukQe>YL+z$6u;#k u LY0:fuli -);錽A/_t2]]P[MsNUd|!tS1@6P" 4R`,e03.,Hÿ 8yW>YcҖfٓ|.#Wm -$ڃʍqw)AxLS ^.n\ixUA43 j+萓hh̟/ӏ6_0^<hL,T-Y;U|#[(yg@Fg)˚nInS$u$ h0T4L8xƦQ9tBGCM,7AxьTz#3>ʘy;s“>V.'=' F=M?,xBo80x\xZ@Ի0Mgȍ?~ b1+sG$nʻ՘PŔ M%ޤz/]/qHE**Di!J@uY5;M.&p^t --3qj+4@r:zt )9ׂ\OF&ac>eC)ijd9BDߙȟ~* k@ڒc߼ Er?X~^<TĶ ~-gtRz$r€ˋW!e2IO;0(|)&34}6 gNueחB c (F_- iݱn<o xbW0?->dd(G3 ] Y6,6KAft(vYz6Q:8ZVE[ON =RE_ #'rIfkËapP 0a8Jė}pvOI!(iL+vhOyZ[2+y ۧ9l-L+@>[X,J6qM3^#כ4t1( 5(`\endstream +xڍYYoH~ϯ#D +c2Gd}hD"5$뷾&%QفY]}UUup_p'?*<$Qp=vwrII kۻNÍgKիkuOu_mn^R晶ެ+Vð?hJY3ڱzt;An0t'1o$uU0K_pf}[v0^RDA j1`ld#~ +c#K?J~?12S{eFhs4XVn >595f{/]tNVZmg)j#{sIFayĶ.~_%u+ ^flZyw 6kgq.z=ʪۑ1.B{yQ\x_qVJV#_'h] bPr0$tF4v-4Xya?v,ǒug(џNc^JĢ vhyQso℉L`>7!ﱷ镕Jx/5-!ClFAEP=fHg9I ^u# iǑ1V[9z'|SogٸǴtVֲ<ٝs0\K7Kuu 5zޏoc-6̧^kv`0P[9G)cL's=^rwK_vi9Y[wtU>z,]Dd|}zR@)kr)KЌ蓹Rp2|:k6 {EA# ԃ:P[4jXی"X 0GtٍA R:taBgMMWT<$9?PXP@1C FhΦfK!>a9"tHhպN;b&e8RÄ_|!E!mYۅDb訧=vmeFu>`iܐ ݨn;Mej^b{.Qmqߝ$ng +\vuVQNDjJfqq[>߁~'cb6Fy : ܫF:pYM{pHH.*@'G2z%i:r{1WnGC/O;S0zi|`T@;iPޜ +tGARS(曪V莥U+'2ڐ1D]6Aͭ$Ja"GgS0Q*_knV@0cw> %YwQ;%U4 &YF 7vR떎Kbp'Wfgy,)-A?rS$lzk=9?9?pi莺 W_LaA͵*8?UF8Hpu8G*O0o](Nq! 2E<3t׆=a4y$F9+Ey={H/ ;1)d9]0eZ!:&6b'0X +S'].JD~5lkzR~T( 'f~|N ͝޸ޗj~^8\ +9E3tQ%pAq'9jFge,ߎf2{)AQLŽۙmrep419Yh77KQl໯A)pZě(N/^ `>m<੗8lrcOyY-;" vSrVR5ݨLPa#&k}cCNT LPuP]`Z"bUJkm"->/9Woykȩfsj*?Y}+Y4ϒoENY&C+rZ_b +d7oBsHqI' D> :C]Nlkٜi0'e*iD&bZ/L.¥H [= +9vw!W24rIO;0QI()z?ƒU}{}L/kewB +ӳ0 LH(_-|iұd揄 ObW>d ޤG3 i]̳YI5L/Kft(gYz6Q:8Z_VE[&Ns{/uu$굍s@7.-47k<e_V%#&/t׮ߝ8s WOJe=}f7 =A0uC78/k*T\*qdAe{dqY;yglkH'hHz*0`4m[LJ[,fĠ!}@o +sY@oZɉ"1$3LA,FMIL릴~o,G+䛤%Br07eܱ+w[endstream endobj 4570 0 obj << /Type /Page @@ -15745,28 +15614,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4576 0 obj << -/Length 3870 -/Filter /FlateDecode ->> -stream -xڥZYs8~#U1$s߲d'S㍜l,w$QCR/hyR1F_P<_<)0Rդ(0Sd&+hU,3ay<z!O'qVQ5{r(̪|r-әR*U8E|,>7ǯ|*7/i0}}/iRLrs|O7X)T&K/WQrQWd{f*R%ߛ?,nK'kl$^Te:I4<-IE>1LGqq:X0'|@f9/Tfev4\oYhX kg͟?ՠOk $F82WE>4Wa7ؽաn =J'i}= sA -vĞÚD2W&IUXd(;4nTKs?fNZ'o/"Kl&+K,-д?:IRf:u?X}Ȧ5*8z-릖 W -s8Y9 fL!Mn]3VY0 )GvX>r -Ri;[ u.?KG³0;~TZNڰ H4DPIA+k'(zh2(F3`~۽[mWRpaDh60<-9f=Lq̣4n4B2J`K{ aM=PG/.ߣ,983;2Lf88P+<3$Q7"C#.'plW;^E݃- -8Y>18D=[陵ː!H ҀN$os︇a eC aMxVk&|5OV  q/@5r;)ˡ ʼnʉ@7OLnz~Zh0d1Hc)D*т6ϴ2mOB3=PTA~jaz:"e*qvxsʶV,ڢd:x Nmp[ NoqY "n&07̒u^`a 1=* 8 شgfӀCkٞ(HmwCƑpo`YM&WXթ -^< e@x̮$&ݮV -\mߙxNk)ݎa-7CC^*F̐=)L G\(I҂$` bx^aL`yi;0H+KDVс8CNk?Zewjz`ScCj>2HQb2̓d= -2ri!|O4'|EX)  `"cwEM>ݱAEf -vw>[2\ZsD3i 1֮ -tEvET N^aȪ{-ڸvá|dOcg_2:%QoB8f=ʖSjz 7ХnuE UK@|l bVĩKUZ[LsN %5'SU[+?"J19!C4S+6'$E0=!g{7+ -1pme)deAC֝Hҡf°LOhs^D﹗Ռ|~jAB{ -ܗ+έ?L[pN N҂KqfEhx,vaWaxA9A -04AÜ2COQp8ƋLDmɤČ R؜sH]y!neJx8ĤHV8g.#'xAYȘ~1$C*B_;#1*靣`~Kj8goT|1Kc Y^QN*)ARP lkB#p`^O3182 padj"Vj&cR`̶c'sdِ,Rى!9v]+r0"=i̸έO+B{a= FJ:jз[Y{G?9J`IzlUDuGy҂v2i+Sw&9b^NfwlM AUw.Cem hRHf)$ßΧK4Z*AIq$o͚`#W6DI0<'6鈾&7)2U3P_緡ee(\1VzU]$,oPz(]XRӂC4lpkcѤaxvZŒI\aBdxf ς&Ä證zQ ^daǗ#2 hl\e~L3?yŜ/h;HCC -0L$BY]8ӌ_i>^ O!ZD`!25.?{և(O;s6Qj:-7&Rd`,|-->+ڒOq9L\b _ioO44:7rQvKj4 0:}Gq&>fEor;$23Co~6WԚ u=ywslGEQ?p&s!ɰme%D:ozo^ -x:& a|,L* -s: ϙN'QّN)S1SUT\u[-ĺ{ -*#o5&lo\n8*a!PAR{deM7mUA4TpK1h<=2?te%!+W戜F~w-|VfjV;9vHh ʞ[xx7-HiTR8`mP,W+Cmu,(9~dfrK9eδ쉗Ν+KL3QT|> +stream +xZKsFWV0oͫlY1u "! -o=!9U{-U @LOL׏ \De~"\R?..c?H444_=w]]4"Ddenb>Won?}/!/7n?Vɓ00 +g3!_}Ofox{;vqA?/~=\Ђ~/=MQ\n.$8gEKufOqaF/Qy|I*pgmoɎq)L3gNlx=YmO{,M8]N"0=Xx웖6/ 9>yakUKfz*R}Qu|-xI2eڪǰHM]NsER'iP$ %U߈8BL,$4J\)_O:66Dzvfyӄ(G`~~U1 0``ݫ3)BBŶ-JrO<|+ObJ' OzOY5nJ5hψp_5-=M{u +AO+Yy{m)k""g6^`4:<`Oi@&ljs9ppJ-H֙m)Lnu2Xl.ȘW>?z<ԴHۋcCZ=H`W[Eyّ.*p }20Eկ>]f~[q&XGGK'6PLO_e[?-n0`s2f@BL%aᆸ}E$~H*8__? +`fM#xT +]?,hcs8=ǯQ"bX2&U۾N Kye<&oWݶ:6vm5`g-mFʇD?lX޺Ķ L?ތ3)!KBj߶ Aw}ēSBb,ӎ'lv!b=M=N6ScVoXIaNl^L!qF)!]*5ឣ"v9m]9]koXB']YO.NLLyf)Z;E t+{qR4d-KZ=yw{ק;jK +iOezFtTlH@v} +mUjz#me4[QM)&Sz?ch0l͔b3~7ROaǦ~ F"Q$j1Cj0H(zW $ͼ򾍼+)V|s+%B'R畜q47brd| o93;>;ԙ7K8c&+z:}aA:j=S}9t}k0M sV5fTGzhЯ]nidmq31 +s(|F&RDIܵK٢>DŽ h<@`٫~D#n9SeU/8UgleٯFTrxmCIC᫫L`oNвPr\?g8,yV&sc+0Ph$FC(ι=#j/z7qlG܋fs!cF $Wm5>E2~ eA1HOȮȨpNNLp +$BqC=%DUcW@ۑtP3/CqNϗA+`&9 9uؤd tJc2s:HRՓ3ɠH<$Sn +GpXW &x_xFUFcIVlG<32[%:r9 MJa7.QDx*`֙?C H"UsEN[e77f{a=&jcyf@VvXZtQ>o20O;Ŏ + &c!8Q5_B>% hK:\=`(;Q0FDO|U oKHٽI#a 0m2ZZ8&T ])ڃvЃގOB\4qּl>V@\ZV2z(9+@sĭ&E YMu iFުBR0s+Ux6T0vu{ ,h|Kb-%FGVeJUӲUb'3N9isM=\kalTtBú¨ Kȉ ;KNFSn=XzV怾v,X2"CN|V]O[Q9KշCLuz٘g~_k -:wwzO Mxp(x2|HLZ*pvdRMRT=jA63r㸄$ .76ەx48_,(%rf^I <+2> endobj 4582 0 obj << -/Length 4079 -/Filter /FlateDecode ->> -stream -x[s۸_K虈!>u/I6zHY)RGRqw?(%3?" @8Pj{,/gP, ҡH/DAY|hq]o7o>/RP2ޝ/ ^rw\\}:O W]||]_/>12.%˫7o7?&LQ(~o"x*MP|je볿M/j*D.*p֫aBN/?| -_x |"e%R9_B~%>"34uN2:} Soʎܢ \΋uǁz⫼Mc&;\~XJifM]6Ojon-T?W)kIW,iAvᄇ6EFj[,q"JKV*W-f&Μ}ox\ -0Ao#Tw\M{b}m%1 -P(/Z`f&T˪ qnD' F:CxPvI~tsEIrs[:z=z\+cLU_޾{ƿ jg}x|[V{ijI²np[UyNw5f)b-lIZJ-$yԪ^Znvr5mQ`[Fz I$/($)X?/#!p# ~sJP=[euMf L$k0J쫜y7kr ZsMkg^Ȁ͚H{%dnd;T֣QsU_HC(:]% -[`3h/[RnBS]z.ͨA_)`e -XѕXe5⡒` 8K',eTSM͕ 929}TJZ#{UZM@Ϟf)+ת'-V*ZV[2ΰՂ+ڏI ɁPBL"} B$."5 6[C͒&Pe݆^s6 $TL } /x̌g^& -K2D)Kp'WT I K<1񗝓O*k%)PeD ދW/gf8 SKB -R7} -j~EI028,m6g?F =1: 8tTTA|["Z]^}ȶb>H|ʓ"Yz/ D${@9LB!`~՛Iv;ߦQS%m4{!̽ WLMF|%sE Cɵ)v{;-ewϥ!{_dlIڱ!ېC}@"#d=\j3㴭::!96P,6LW8r@ -{gPJ %:o}vh]lrpXf]?H= -vfB 'T1 6Q{hJ 1:]$'sGeO)0Qa:e*"l1jxQd_g:!lE$-e;n"P|Nk{:qB}ǨVMc2 =z:Ağ N7Z7v1}8Ei̅4ֿƲmSycu#&[9>949B] mqqp"-My9& p9TȆy q*{JLԺuaKX68ɤCvD+8GK'bbK63q -~ |(u1.|>2d70%M*ǃ9Qjet,|!8Dqኽͽ[dBd6}?~I,́HObPWODb_n*T -|9`]PsL`:E/q{ڨ︙J67LD: zW~*c9 (`Ȇ%mh#ˠו`M۝@2^sJx/H7A!L.s`#MPa+C4C7&UOAkֿdĦYg*9pFc9j܉ǚB ]}2ay fM im?DGLrHKp#qL*G=yij(1͠?f/ZY6p|Yܳ+a!]ϼ2{A!E=vl2 4xov@| Ns۴s{&|ӡq[}F<^&$4tTGRBeIa$ 5D}e#шR#1XbfZX4?<5_Z< b) S+ VUlX +-݀K!c.e3V۞sbˉ1؞q\m6m0)2'i[&YMɊr&"cK$ -NʾxɸU1|``I3JrHVtw)E)zB<@ńs{в#Jr—I44[d,y -me~ =Vs"ԬQpI0́ '("Bka⌅㜺 bNɔtyܔ  G@ŋ%P|316)6\2S.#ڗH/;ȍr"wuF$Y8{,ӲI-A5D6q#rdBE3 $T -bINDG\8rx54|)'Sڇ(Ǟ|ttd *zJ:x[BGg">ԪD{\|VC">T -t"uZ>(N9l":µV7s;*)qmtO1RHʝT7;#S x 뼵p0'!sr+M}>όa*2d*dp:lJ$V&~[OhAjysm#rEiGuϩ9]=;ȇrT߱x]hRG|Tzɲ8%:(b#'cʓM4}Ϫ 5VNs7aŇyN[[Xڜ4LfA7-&g۲ҡMmo3 ADtI½y3g -Z%oUOYbV/0WalΜ0US2<K'en53?@ / - ~Uj r} V9o40d"CTgC #endstream +/Length 3822 +/Filter /FlateDecode +>> +stream +x[Ys6~ׯET&@˖"lkR*r4\q ɱCC*;fKh4@Ѓ?u'QZqwh\/ ˃Cs<7u~qξ? Nj(ysPWP:֗o>:qz;@vv8xClR>;g5P7@:Id<X%QӼI˒;ڨ8m';h׿ft*٬"U4\\vu#s\h4ä>=EhQ@9nw[ +&Q lL6mB\ecUމH*(ٲV!jUE6RALJ<,cPLW ?N AGuǵO? 9fd6e9>0ܣ"aOft["_}n>$D^hHSf>F_aC- +*J"p4u(IL(dAI`¸G)t$4S, +]D¢TY0#d@˲x +9^Df q +saVܫ)#G +WE>GHԹT8QL5 HV> ϒ&2g$98@&t]䫼 Rą`H}w~h΅JkjG@TOSn]&]gE7%Q]t>p<"6K3PXJup$|Vj4>s8b&LńQSv7R(WXEˠѰq5Jn&]B +|3:8S ocbb.$jhpLJR3X3ɓBMA,cWb:ؙm#, +) `Gf RDE汚rHR5 Ԫ|֕lz&;ehq츕mPFy! [&RV 7z {舊P>cx["^~M &&v‚x65 k1g>IkgHf@1jSPޒ)V 񴕉jR*_nQ00B [uArVU Fڅ4BD9*^L3`b +\څWgke "qVTVG8G Җ9>c\$LFu2QFF[=F,/S kIj#~0+q2 FWW+?7IlZ!E3}әD: Wͪ0C] 50bG\<Py=dfO,vkǗrrǢ0^fF\ kc}9=OIy +K;?]x?5U|Nـa!ۡ ,Y9.Ɵ2`*F_-jϴ[FiN2ÿPmn8^ 3^?*Ty8iP's22\%W\t+R>ỿ}gF0|^ <8팡Qzg"XO|^[hŘyu\B'ox#|75uh4|}4ȩ*ӣ"]4D66;mǏaO%kLƙO,JS.NF4Kt^"/WyM7/mx48DMaS`:m2pq~N){=QWWBrƢT8 N_3O G7~1OB|xMAN܀6sCa`lc9%/ V6YCU~[2Mk룡ҒxA =Uؤ=*J{XI;> endobj 4593 0 obj << -/Length 1766 +/Length 1748 /Filter /FlateDecode >> stream -xڽY[S6~ϯX 3)eYe(NlgBoαI nh֋d#}"[du? 툨-{%?w8i0RaK:?;Ǿ9Q]9n?> Nz[G'G^(?i!Ty imS]VZ0+&m)R#,U* 9,ȁ´ RfϬBOJJb,7BE'Ѡqʓ_!ɑ0úx*z3fuXO#z>dpCZh_tnɶJE{[x{,Vf|`N5R?^ER;SzLgX/#׎(V:$Y"`ȍVxh Sa?^)5f;C5_v6Ŕk8 !~G"-N6CcV;m7DcBӯ?Ҽx$$N5$2ִir-ENMn^S*wv32 x^^DiVV<߱&`A^aO%[hHbem$-ivS@Χ&ݿWu>aCNSZqcD:U6Nɭ҆elv|w!21Cĸ32 i|DS@2[>\aE2b2 $oJn`CVLf`%Q43`]a 2:mjNIFy{+_ Zաa1!,PXffB~Xc F9 (t?OH׵]^qp  }ĹgYy0(P#0ƒS:eh˶ۄNgyw0]fT,D:QFr+ aQ?CC5YR`w H:/*{mqjq#$r @/QNEPB,3̠(3WYa=j0A 3_=d=ۆL,{]&6i!]ϭStLW#ЫGTkrgi0 thd7pdSanQ)%]!׿t:b߳azRcGȠfl~"ʎaMtИ5.+1mӮ7)y$E}"N%d"hrWd%C9NoG!;lk?SڴK^ [*/p 8젟|Ђw&՛$n +D/%E:)?7dXÔj-Nk^yCZ22l;zw?挼^1N53YO#>"lp!MOsMx 0Jq >YTL@]sSLuC5uJj^ ^ɫSTniLS*܂*2᜘)"mV ӚVu{ݰ8u 'd0q=IC+Äfӕ?8bIWUn\&QW _~}|!^kEZ;Cx̫xbZ4{,,3:b!. +%CZV#Ù`QkSM~GW,Qi>0/ +3 Yܲ% +Rl}>XQ,ͩtƌ#J/zoH{u+eVRF<'.61@\ey8ǧoڼY(*Nף؜jCx1[* Kz?H0uL'LP9XwMc,-*|Đ36yGbO'_&^F#>Z(7#ѡ Irm b +dV >c8´|ʶ.@ۛI6[ulWz?  +bMGe`qr;Bendstream endobj 4592 0 obj << /Type /Page @@ -15875,27 +15739,30 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4597 0 obj << -/Length 3499 -/Filter /FlateDecode ->> -stream -xڭZY6~_7SUC<ؓĩL*JRB$eyIvh4>>4G-"yFXdy&F-h3(X ʣox)0)o~\ce*ۥ -/W*ZyOo?~Z&qpd߿t+Koq[\wo?~S[q;wDe 87Qh|qvXoĄIlxe)V: -3/ˊL3gۙJEvRIv$K}_'DZeIxIx7)Do ܣ֟T|3p:\BK4^ۚ;&#='˥LB{!eR*W$Ҫ?~W_VHdIlD'FwlGIt~˖}Un^sc%K>t< f#Sh;0]4Ó[e1Uk[ ﹱ,qW"t=UW|1Q4x43Jq) "uSI,`I#hlp, # :`k|s&N5b?ivۮ 0b=.ĉ {T -41qh\Wrh`ȸPN^pd.⠲GC]i(c3km`ۂI" i=z˿VqH{f"J)RL3[Xy/ u *;;Ԯ6$(w-r* %KfR0Hr񬇃/;oR5r-5&d "2 n LeNsJx}=MKɊw3޶n*s -\sTƪBEa6EB"P̝+Hn<6:4.VJt~Kwd7eQqcI`>cAaP1A( Z_e -6yj'd'C4 ֛,,$-( (m1Ypd=RrFn)5ƚ˳nI;Z ͬKw q$x)V# -JlVw"֙fr#weO8GG5 -8>b/h,˞{.s3%Rφ|J{x9PtQ"765xF:3y IH>i 1+ -I@ QnF^ ŧy!j&=G[߱Fdpgl] V6y -Jۻ)=2-: dl@KB>F^P RW{wAB؂763H:RӎKt@Pb]Qn0ͤEdHkǞB(2QcG.( 1O -iZ:* -:k=ga$Nty V_a'k"^8D(Jfryp^OdQyk8kq'eh{|fٖ&sAⴵ)uj d@S2;y  ╩BiPn鏫~HBAQ3([:hi@?uһl~WСڍ7?"W*ǧ[izY@&MT8J8J}UP><)BMœwB۽'{`+ h89υp{J4hOZ3ЛfV-7Qt~:=hbV) #E8ɽ -@ `F .m_0tWGs&E1.'o.ung"\*t^%Daka+|Cn'zAJ ;(Ȅy 'D&&\ -d/`)d@@v;iȫ8HOTSSU<ඝ^̶cbd{ - GqI\y.Pef8OTaIy2kř*Px I<,+0.4#77C W(Fڼ,DsgUhI+wv7LatB=@ĕ XD3ȳ`Pef^{x U 4Zo;ɲ^<Om*.ߘ$a+_v/I,$dó@='2(bɕr*ͫ,M-k0uvd¤\$I -qį{e襬KS4T]6Rk H]nQ=sMSbg<@vZWZܑ(tT_"0|--!,3ט&| ƽ{<5̹1~9K 4",t]OEME@ze6"Cxs窉T]q:x` -򴞲.ݗuG>/ڢb(< ,MeV'3&N3\R)Z +wGӝg*Vqyٯ80Sn>[*̐4ET̳Nor_x;%W$U2͂ƽ\j Kɉsz[Ӹ`,Dek|,YD/(.V;t,?m1Д[mƢOX -]Ij]r\_tsf#wVk;f?lT@RӢ4dGsW8y`#!-=!{hG~@: Мܥq*e\^h)7z[T`ͥav%6wyw095$a4$줇Ѹ2 ?Φhym')p-GLhc"8?Z SH~ZEvpxR/__މ:Ͳ0ļMIћQ%Ͱ{E5ZΛFP2Lr:H*'̫@U_9fdIdޡT=S&o7 wzCo:OU/"'i `U%06WEӗ8_$ZZ9a]tt.qb0͌-endstream +/Length 3423 +/Filter /FlateDecode +>> +stream +xڥZY6~_7SUC<ĩz&l%ZHXYF~HIh4}|hZ_-LH؏Zw7fQB,B?#曷qP~C$^rq2xUۥ-WZ/yͻ?|\7zwd?x+Kzqk\wï?S~[uDU臱Ai{_x&Khʲ&FͿ jF'+Kҁh}]%9\lB+?N*|Ž%.GE3s w'h%+IWߞk14̠9fp/ԫ*=L홹W[=V+!J"2ooHGF{hʎQ~]/y誡v\eTWF3a2 H@HG߽чJMwsIS܄=7&Ć}J{dp9Pty"76xB:3RL<ۤB$Ø $ (H`#/SV<^P-on 0lcb _6ඬ o5}_5Q2Bw"9>;8~ض/D'2% +5D61+ 1E5'W{\قF@$ud~1ٚ<}`{TJ&)ê[?&=yQPr$4FN#z4@ +E] +?&PM1\^+xYc,@G,M%E9(9`FsI6^=GLQv gM幐dO'7ꪟMe#BJt(:[AD3=GSAG^@qjI%e!qF +%m_*0C g.M s mC$4ňe(>/#b+/I~rXEyF(uoL@91iag4ﻡW+U.;eZ&󸵟]`&/>W< &̐4UX3iQa`Fҷ Ϙo'2n,[WWg?\-炢Q=oqPn 4tQA0]j svl%,~M褸3!t؊m{5Y$ֳx,>xAWq(ݼY0`$fm7+ }TyZO6M= y(t&(xl9#2;B8YQ*u+X1^$Xܧ ;Fs.R']l.gyxR}ӻTBWQ @9_pM#;5[5Fȸh%UEOoluV q +`GzIy藥Q-%gT\~UF ȜaY)[ ج;"Hy> f5e(X=0&IQP͕{ UQWa_SGǦ텚|Uc'B\կL3T>xlA=(r\&%)b8Dendstream endobj 4596 0 obj << /Type /Page @@ -15936,19 +15803,25 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4606 0 obj << -/Length 3184 -/Filter /FlateDecode ->> -stream -xZI6Бhb67$N%ǭd*΁-%V$CR Z"[<[1'fYF*YJVhXGjyDDQ>[޹q(d\\B)i?Ef/~L妗oǂn짗^̂kwo/7??_^xKJ!_g4[RBg(GJ*2տXܧgnYT<5өtl!MF*L3(qJexGi,r'AqÍ/a3:Q[{_G:a>_g!$E:8МqdӑplM}=^!UіT2޵LkCL1tJbiPz&eL|,'؛CE0 QzIy(x|dq6K Xq2=ES 0]ٜ"LyS}9viU "ƿ/[pTu =/W'M*x[w3* E/"2aJ h8gc$ΌdA}oF#I -iPnfq.a}uuL8xI8 |U ZaU*`в;$-n䞮u̓ =؇ḨbV(˅3/sR2U{aHRm x:6A6"o/g $V@<'#$65feVFۢ`'4%C3ֺ (-_w(GS` kSF`y@ 8F:XtıdG+dc!";˭wG6j80ƴ49XMӋ4Ou+`픊wluṋ'Mx+F"~2FR)DF2HTk9ci-T_c |8ɦ}7覣9^=e+Ũ鸑l -;F/Lr@V_ꈦDN4h%+Ce cSh[S,wNwvRVQ.,=2 .$,3h>)S'NL_v/NS|[qW' D}.ɒU{mF2!q_Lc ׻zYi<ݛ0rV~VjȖ~oq-x\v/)n$=v"G<2e7ؖw`Ws1}R+_6z~UppbY#uSY9|X#;~$lgP VIr=X%CobNQEIN=&Yy}?UdIybɦoLF]](0^X8Tͧ+vZ`$qլ(Usz`ڎletJV#Y[@_93MdaxP;(! -I!Xs>i}22OGgrxD}A҉MÍʡJ0%c(P~ Y bkGXHZ/.,?TQl/,m~ŦC!sD*)Ul(&wMɥ0C@9_8~h$_!?؞A½lDbw&+QuѸ#e3.,8oRN.¢0MxC~ݗ7@a@az%/=vrƕٮ LCj0W>30KG8!`*[ L) -߇)aPй!h5Vi3_QdWy!Ֆ[jsMLZ/0ꭃKƷU㮌MH(BG-틱U6yUg "jg fJ5Ȟh\%m[F< -='t4}K1<titi++H.5 ’ wvΠ( -?y(AO{N"?L2ΘUSt̯dV%YhP\)C 03ۡXhEO[e| K[$xJGR Ԇ;PTV}dI<.Lb&3D|b0LOyXs [CCшeQYTpȎY M '^"RV9# -R|"_؎;-VEBn QiBG!/v#L"6#KuSgs*bP!HPፌ@[)єzȃ•4\ׇ&P^(b!c仧2ITEk_ h(v;n [2tNW;'(t覥)%}Xe&,o/7d2PR?mxUڼڠi2,I (xF0[T+Z,y$Uז;4IfBwz e@5t|ZT:(434CŬ+s?$k2[n~/df_q':css' 5B8lې ^ j̃xrXrb)C)3$R qXjiendstream +/Length 2918 +/Filter /FlateDecode +>> +stream +xr6_Gjd[$m:i4}%Z]$%Q[{vvG88s94 +DM4PN1Y'BDԫɋHd". d;ٛ'`'I꽝Jԗ7g_;{s:x6MCrTU{UeEYԇ~ڰPAY:*X7P2ܫ-?嫆e"D3$`Q쵫tD5:IV-Z!_ԥ]3NM,8 9pv7UD|U }H{IAvkZmete( 2 wh91,6($QXc?91[9o{e+ΑF؍8WZߐg0pdC +E5-.P+ue=y4n.y&7W=<; Q: 1fyy.vuA0wh1 odS i)5h҂߶E'v '(q-lXmQí?h_c[f-S8L!jl{>nvvrՖg "{phP&A,bX }5#z0π):fiں7<т4Wv>18 + qcX[VKӕ t(hw]M-sY%nXCe*Q6.O +òf,ƩZ&G'd J.ʄ{)3\B á|/QDx@,ϵyŀ_pbˇJ"k5Ö+^ڂʆ:n0X;-osMӹCĐ#cNU6c1a[ +e5*q02:=XI :=Ô:EymJ7 0l0(swuku]ߺ=q,lPJϺ GP.ĤKpy,Kf}@P|9r@J LOQ],)bXWuέb3uy8fplGtaenj/[a^!f7\zw;!R}K9;?\ tyLlIր!k*==A1tO|;LN~#+- YQ\pwP_6Bl%Zxf?u[yo-Lg,e'esp98:sp +FpCs7,A~|=-A%!l#4QT˭a,+:)ݚ҅)>Vϩ r ;\f#Q)&]@JMQwW8K!N[cyk ʐ1ֆagh ]#vcJf !n{K蚟k=}&[.ۓv{㞃\fR!/[.5ݍ .;Ordg:;I`[k2HUɲ9dx26 `|)<'&5r*wN-qB`^73* xHDi S[}]71!e eRJqJ.)8,}/rDk+CݚNv K.8"tTCY8COc!EZCoUE%_ `M־bmwڴry=+0t9xW  cřr:pбNe!~G3 J_|d> endobj 4615 0 obj << -/Length 3260 -/Filter /FlateDecode ->> -stream -x[[s6~J3CHoliNhS]"PD2it!p|߹Y*6"C?/:i 78lt{״őɒw>^]OJPdvf"o'S1 -^pW'VE޽=^]_≴Kn7nm Q(E̎9DڨhW7j:=fKLeRwfNtκGSel H 4 NDGI'&>IR^v%|y/`--™~FkH'}sRj(p9Ӗ7jla ]1GޞXDf(-XƇ톿6hK(|ջ:62ʌiT -k EMIYEam }C3䤏[9XER5v -Բ)8L&}i֋؝N"J]}޾~ŕ*Iq@0ߕǔ!j~R5a $FHX=̈p6ic68@&iL'"w4[y] N<}*Fפ[s [D:*l,Q g,o7w-Sgz[[}uj)P|_@Tj L֏DJE krU׫ۀWT·KB +9`Vq"Ocrole??Ůiܳ,_@s]wo6%@pÅ.7PzS3罺% -|rmCE6)Upj ))pǥcv'2䝬d͟3kT&I4X6ۊk, ;+_t&T -Q)3EgcA DjytR9'A=.-]bXbޕ 7chdNpIbDq}U,aNրʹ%wq n$eݍ!d22ǿH,'80d CdU!A%@ p$Md!%1؀T~q`ͱg.=`=?qky!t+#GJV9gU|aO["ĹWǡ.ߛQO| -NB ϙPBX+z eXw0{ (G'A!xRc?UShFHb3|OВbF!z]A!7m]"B91FI;/X1@qsrޤ ?R DCCG]xw"UY~\NA&CNCUS]:T(⶜ex2ĺ=cXwL -A-g=PIÉ`(mN:Es"t (y\>< Ɲ>a8z.(ξN `5tB],1K\ӅC9N"tck|tӡ[U"4cAIxm,ȱTAb1g?6#&f[8H(ލ!9fUZ'xU8+[0*':|v7(9m -m|io|In6pm{4&q2|]6bv.9эcپt7yX偍=uCFQRG})t '{SZ6MGyOP{NUmP:? tM[os2*~jՂ`Dob:ӗd(W5?(Xn6i͆3#"Ι2n~zRjN ϙ&F|(:Hx3 0dr#8 Fx_{ 6`(FK70i߄47/I;J!+0 ?&lwU˚]0 - +q9WKpHߺOrAGC9vw%߽h0zj]N("7~n 8 -W&u5Ny=Uck26H}Oi)ő^|~zBGWklKED^МLhj.ܟ^|7"߽r@Zt$Ư%t| -Lel -'$./k.!n*a:p϶+NcIpAFqkYwkf+,2JB]#\x+XeGujpI<M*rTk;q^7"Eadj܇Y;Pد%Mj4M,ή7}ҽܦrXu.(nQ'󏿖tj<81RҽZ NʶXբ0Mendstream +/Length 2927 +/Filter /FlateDecode +>> +stream +x[ms6_o'D0o:57m?PeqJ>)Ǘx<΍'3Ӄ8P 8TՉ7h ~ @{*dA]&߇g?49}j_Qߍh?C}y~6x9Ό[,tTL<<+>x1Ħ?_tr>i-vl }\N~~:ă[({J'`ub_֗_(fVLƮx*2;]D20ߙU@?HQpK LFI8L +2Ƥ!EwN7dkeJ![YpˋzMsQ>lk fhTË&tcO`~qmq߬o[Q "نԝVuLlcHk-7 +kx.Y;BD0jfzlBV &T @C$tk9 W<>}M0mV?bTqHe!}:d"ï/__sf'\5HAGdf߸o!KWJ0ϴP{/0Yzeu2ы| u^D XCG&↨qǍT}[GYAi[d$0T7H;{q`BG0g?W`X1~0S(J4[rv.vYsy<dF˪V$4 !gA>brC wl$}AWYG(aP3sm 8JVq7e +^yM*, +Zq?T^lEL;=u(g]dg4l衤SSW,Pl%b=9rrr|}/٫ k;h8p>$c1s^6+V)Al3&Q yߦ=hh.9|=ٛ%_L7ΊsGc opϹcXh&P=|kvPlhQgwߒ$;@I WwPTh D i(t[mNw +:MO?jm&hul/x3b:QxFM&T e-yov)юXiR> endobj 4622 0 obj << -/Length 3419 -/Filter /FlateDecode ->> -stream -xr6_BKR'٦سmXl)Ku=&L&C3xp;,| JQ -zw/ngX9UoC|zΓ$zw7+(\EQ]޻*޿֏ݧ7~gЫ+@է7wq/>^®W?9{sn@)$g/6_|xm_I؝i}gWgi>Qcj0VEIS˩*I"V -L""aq&2R0ĄB(M;A³^&gord| -,D5F r8Q(?z9Xp&\[yW:((u "ȉ(9ǼKx҈8E6B}NC dr4rY:Vit&^Dʐ,7,rfR&-DN#-t7 N+p]fpu WlU^@X$;GbbT,XfGx؁6UkBK8x$9 PD*q H¯a}[*PdRJM[hǼftLPUlUN'ų)ŀ Amy -,T$\ˀ>g{ ;[ssntr{ow)r/a>e͘Fy'Nxg;>GǠ[ -;V6Q  +74nuAxM'nP'r07v2eS k|@0"=M*[YvPLHى|5IO ᆖ! Cp 2H<[?Oji7i=oO,P 9eM U yWt8!A-BA0b_i)c$v6D!B1Hrҵ]((N,$=%>3 EYAhh:# -]3[Vyo&E[ۉDzV{dV _Ku}fuAjgW4viȳVs2(U3HAE?)7;GRG,8x7 bYЖ]1aRJ8&4sZOqj`7a$@v$Pr_!a[g;gpJ"ڠG -'Ԡ[Z0G}}9DF9Š?0%?3c,6  z{4!XՈeN s[oV=ڜ?FI'ܐM6ۃZD8lH|r& )1|?v6AE/4XZя= pFZ$g=ʶk?sC=V_b<-]Y3nfU ~5Deq42NYOM| -#>谤No -N$˚>BXJ^ L%aĎSn?JE "Y`>`H[K&V(o-q{ ^26I!Uah=YJ/֜Oz^1'l[Y[M:$YCB.@[tP[먫0&mog0r 0j&q4'q0<{h ->4Od  U :2V B\%sM ȦU1W[kwb/d -?O9gDP ?H\푂y.l>t'Tg*{{&^p$stی=OcwCuk Ȝ&;1(>xoe8cӛ pX .Ҍ0X2f[rFq]Q7t3pl?DCxbk$@U 2D~tWEy^m]ʿ/cg^! > -q ~]ffݾ%p*pBGޮQ 1mLUiDե("lg"{u D V{o9ǚnNF5$S]37j=҃< iwu]/.g+4ޖebWuEGFbrA M -e{xS;,zg㤅gH՝]*^p|ΘG+T|xٕg4:bR#4CkI[ш^Jƽ]SC(;WK3HEuIϜk -FaOcop+f;*"GE<-J(N,[=~fioX#1 )?ʞ]\DZ.QJ5[pDu caq:tC2A?d +G:59=[ܕ삎62d{lءL <\,}p9A8$;6'S] `.X\xIff+\5.eO#-cb^xU-Var7} >jZ.o*EC۷8jKʁ'F0{Kav4$1sa#rBZ< ̿*bH)dCR.X6mb5BJ,hWendstream +/Length 3118 +/Filter /FlateDecode +>> +stream +xn8=_ᷕ1*R(;I 3Ɩ"=fi1f[` <:sH1 O̒t؏B1[nf~$D0S~G87Otv&//.^/0DZ'ޛ{Zx/N?̓^†엗^Lc\yN;y 8Dl}ǟlQi2v4mT +]??:?G ϩɢXRS w r$ G:Bsx94è H!ힿ`EJU/vichCG[6Ws:Nx[Y ך +˼^ x=4ud!WI@QA8܆ x8h$:J9l.STfK,ljx"Ҿ]te4UD|YVXX]2\ IِD1_$>BEEHZtW)_ 0IvZvQ~BaZZC buPU&ovQRx)b #4v$e@ rqe0=SPWç 4!MHGHZD.'pu'nܵKbp1?[_K6;ja' +'z"N!z m1鹽#`?vԍ_vf*85 Rc7'5FhaC6(vWLqSxp:p¿u;Z by]."pO.We;'GdDa1p$ߥ%>ubD2Zo-D{mG7.%>O)JLYeuqkl!q.@@#4%"lܢ^)w 5DJRQ1֡)Ik?Gc2DEE"nyל2ZY$ޮ1O4mP +nCrbm] qd +ȔeZ jvVq Zgq%Q ,Q --`,Oۖh`ƹ#&2u}bsH=Yy5V4EHZ]e@0H EԌJWvKZ%U5Z2DLR:N+CL=+T!u9j)l] G -RSuêslm/Jat:RlQ(hk[YŠ.;yAY ^%8ƝKwA.kkP06HaW4&+e0O3*IbWvMkf` JR{}vC߃ I@bRݕhO-HpjJJGb, ɂPǑO{GsriO YHL|z2:>P Q1_ >`EZCn'ؾP|g aJu +쟟qmY+kD[ITPKt]͐PC*jb07ߚlXk3N0<4ɒRrX6Kyr5s N.ӦA6$u'ԉک,2t :_r-}op~14$o]O1:>?br^5ETs􁩖 R=z,־V6a{>U5 (E_EqV=񇺕,3wIY)W[jTYSֽ_KHg׬&'[[NY{0#oBCq+n-.cQ9!djf/oإ\ +R>Z<" tbTG"+3>1 BeA4Lv_-rҼn v;pu?_p~ZP&Za[QvNzPJG-9P0ֹ ޡdj + Hs:X. +wFXlhj{撕UEqaT<|!<ՊٜmN:U,!m267zN ;1+6È3]6ǤBC} !YlO0#APA5+E$@~(׆0T7]-I ?EsupE27p#J*^}6ۛ<%I[{0m͛`_=ԾHddHiD?u)endstream endobj 4621 0 obj << /Type /Page @@ -16094,22 +15956,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4632 0 obj << -/Length 3116 -/Filter /FlateDecode ->> -stream -xڥr۸_Gj!>t8]Nd@K EjEʶ@H)mw2cȑ( QD"r4[_%Jt`~^}#OGӅ;'EFwDkI-Ɠ8Ncݍ'p 7q;#rLU7qWS@E5ohz &Bh}Z6?YxאB0}qɰ#.)R0Q0\!-p%Co|8=γuſ*A`+ʶu9WF2-vҜGigg- -{whU>0FRgb+ܳ-GXPøI}G9XA[ܽEߺj c*Kh`o -rDp i D{K&1`UJq}3jVyPf-ރC`^-}p＋'ښU[pHJKFCpL&^7x}deKB0a6\!b Fsz=16 $w;$]{hҜ7#:";] Gω?9 'diPYה!ՠ(7( U}ʪ 'Fko2JZ#hm9:9@*pjA:¥e~,tNj JWbs*`jz4Xy%f -cCNB"t -q+BCyp=& }e)FƍIp/>h\}H=-bUF{N"Nkb~H:0×;܀`Jb"0 m^Pj sp[# hQ K%4٭ん~f2z;7x"uo|qlʭʐ[ts -# n[;33^ψ٤R<.i\։>V ~)7KjjS{ijeo:M-JCoz]ld@QO/5N$Va M$E_qVx#yPkئl5+*y=Yqg etU6Ρ^/ก|e(T-/(˜E3DΠ:9=%WB6x~qwo=QJ R ) 6jDb|׿}HBC5 PJ=7e¾8QM);$%\r;Dt;ѱi] (v;w@;>r589NE1TJ<1CJt*AH4弣!/;Ge6}Q]BgElQu71FcNl QPՃ'!! SOU>OOmV$\a ^h0W q]4J؇C]0v݊(ee>]CfO7ڹXSK#dzH]T^ ~Msoź"q%ۇh>72q -:pgFUoT%FޙNy8GN;fai.zj,LcY ubGk`jZfn{ư4Nw$1AҖQԲ<3PǶY$Z(qS)p(K ΟC|8G s:#p Kp)R]%ŮYx_0 -DG,?{=~ џK*Θ80GojjGGN7i 2RD&?'\΋ͥ]Ii~ݍqbDȾ;In-X.4XlzFբB . ٵ.U*]uL-lWF5( a%:{n~D\pd΁J ;:W;xE7 @ߌ8E-xYeTuSZt~o nv^PgB?ʱMWS r'Lu]R֡LE޾` nK]3/Mݳ@ZViB}}tg$,[6"+"[D6UcE l(Vٳ7ƹHO(4? -+GZ;(p,\M|5BY2;%mź^b)B`ǀ"ŽX(Ή"IHyj!ia!l_BBylK "ٍ~-Ux֫XZ2T|=Qopϼfj_AP(rlQp$Ne@.Gb N$wYN6Ư)>5q;;9# (/^w`?*мB%'o`P{sbhk[~1D zY=ʻ0}ĕ"@/uwu<vQ^^.U^a98TPSWTc@Frt.ʢqy) wƍbeJ2 v;D\-Uݴ7Hɝ^ppRVS[VjѴm SyA{94~8T;[4@(Ҿֺ#`z45 -хa(d80,ιPZ{1/ g5l!%1TpJ}\[lendstream +/Length 3009 +/Filter /FlateDecode +>> +stream +xڭr۸_Gj!>t8]oc'vy%J"$e[s(J6 s!r?91U2M$B%'?Y?Τ'ZQK?޾D"|E OL)I%863}^}wu{y1x;5O߼ÁK;= w/pO_|wӯ_.=dgZH!}O@ЯgP<2I&3*jeut 1c GSz(@ Ub7Jm7TZgKZU&2\-Se[ܤ=.Z/AadۤS3%Y#T,dw뗩"b{ާjܽyߪlF cP77$%@rd&Q ,U󊖵s^ײB<5~7s6gx`-Ȍ0ZN\EQx{FѱǁS]QXE QgPU(:Z#5VL}#vB=:ef3z|?xGNZryi?f|꼪 d7o@ A(  ʏm( +U0\@4ݢI56#%h=8D8=m#CA;s=D80]t./׼@ր^BECKhh+qfM>Lr%@8XHsLah;asmGbG9Yq +DC +ÒȊ*@laē\eRtFuʼn+/kkmW+$0G㏴f"φX=,Il@,!K3jSqwk|tz?Gpk E|A21{wպkܦ|y!0ݗ;ֈ`11!X'Դ +6G>x)! PE{1{i\hfn,ڦ=(NeO]vTmiQޏUsmm;cNx +1r]h;vG*_A7Kʍ7U %V7c $ȇd]dH22wIH`HȩB@vz\mx17?d#ĕHCC[;gXZ?s$8&8.o!wDZL֫6<;3Nda,X]/]jD7+ +}|o㍋UKHeOc<&t̞[P :Ʋ?G9h +}mțOv3wQgS:y9yu|)P؜乢"dcĐvx*0/Hw?/w?=4\:ǾUyB': QE6Vָ:=j (,tgWz q-:X._`/ѩi|܇2C第0f(aݍZAצNƧjV_Ȟ@Z"xN sqϡ%Se2:8 @Uϼ3 β!3lAs]w6wSn>S|niG1=5(V6Gqy O 5[KZ3;WR&yk^Aܺ-F +m]rCm\R{Yl؊y%I20avp ϡ]>#7'B$|VR$TJ0{XK\m`H=RM4jLU䀚 (WN4#ngF(.Fͮ;81\k RYĻpk +V5..-P +)xwOA :)}k#x[=RՎ9v@ܩ`-跏G)h3.u[nt™9o, !d&96*s ~Sovآ)DᎧMF1Z-%ሇ]7cNi3'@(Q{*'KewQ/EeB1]DꈎDurk󮙡Z\6mB@}u$3bi +6_uMÈfRZ(b>;Xbc B㡜CPc + +d@1Ơ5(iVf\b[cră6JjbS3 -W-] +0hAäsΘfi-h):H?SaYaE 0wXpfLׇƅp9,?6K<3X$PqgꡬN練҃;/Ff^b%5zCsďAe~HBs$\#x9 Tu3߻l,J {&ӢZ7//TJ׋g"'zDa$$)Uw@dC5Nq< @wiher?9yf{gOETFBE'͏$endstream endobj 4631 0 obj << /Type /Page @@ -16148,27 +16014,28 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4641 0 obj << -/Length 3722 -/Filter /FlateDecode ->> -stream -xrܸ񮯘S #7lok쁚42IYߧ_I8KJ"hF1jZe6tJ$Zvdzhu #?)fĬTQu(y.~qzכ4͂k[oT ^w\l?|Zg:'/_cWOo_+_|~¡l:{Qi>ht:VЎB㙱:FK>:_̊g-qIЈ'͉eKE0:4+u:PxItTKLRan-^Ri*SF6[l2|Xg30Rad\3ΤMFWjJW3byda"VeS6 sR8-{^y(+{ ZT__ʠ}+R.yKUpe8^KUw-lO][^hat(49Q8p4ڻ&N0e -W5@{r6:Z]QA]~.Y+vk54ྏdR렽1aj%n^x ^j(jeʂpFkĩ)vdΔ #CF#ʯUMzr+W~%}>쁷kU\*!N9)I1%2qhdq;bpӦhP [s`&&|*_e/^;މPvt1=A<]{0\឴52庽ѭ߇Om chA'/;*OWow ٠.2˕8YWIGT7da\2_BMIEĻU@5,Bچ$ۄW)$s8Pu2z#&QFF6vjD6K,6t̰ĩ &"uUEѫ>2pWWe2D1MKm]nȖ1sIu=2 9kk 5bK9r;$n݂Blhzjc~bm=u K{" JT"ێ~]1hO9Ge2)>agdq, -|j/}5pHh XFžIaǂ.=*ƫhTfq`< -^mT YK c2d " -ѱܑ+c{ ; -2|e{K+ſ6%1F, &zu -lLqfϛ<Ơy(X@2.ÇH#rMl,(59E -U,JF^2v((?߻e@sL&mLd |ɼ3qDQ@TCa'9 dif,K9ҕU hH${Oudf'!"xW~/%3sNN%PdSQPځai>07V=zk^> J+ߴ,\c"ɉacrH|5X5U?tQF̂?Á]<:}7I(EZ]s)݆s2xk{dh= "Ί5 >WYfr*2S燣x7v+2zEr;GKlVq]/KTǜsL#1kzϪ٭-Z}Ks*=oF~QAcTF`kZɅ(=SL -80^Tr@L}$RA%st^S Sf.RApxl꺉iy&,rZ4Ͻ%,M礒!dx/LJVF\h; [\\~:JMOW(;b=qnГI;KhT ٱ g*fRkr$ZNy2Z:Gc*]EuIBxw%R K"7w슸p%`@߮':Os:- ͢yIqd0&|/ɹNKVPq]a9Q8OR@dR;|{1ipu 74" > +stream +xZKsܸWLĩV7rَ4Hm@PrHXֿOl!5W1jO2F:_YZVYϔV&Mm^MJEa u .zirZJMf۵ +ޭ7*xJ/7ۏLgX0t!,8?l/ol'nLh~>h p:VPB㙱:FK>:̊G-dc$S('i6OUC"K<dž:[)eB\i 0vz\Z瀒-$T3>T<:) "zwT-y& +zTEu8!{OM{S5LPnD%} +.zkU2ő Jk !'ΙA{)v8P :(OF[뙼k\+*/X!e6 ~ax; *(44)۸Cb !Ay- ߡBu᳀j*~QBYNȲt8t_6Cu0e؎b֙."=N ++b:o SG_* +XWh!N)i1%6iq;pӢ -9>ׯiⲗIaea(;:Z({}=reUNpMuqno{ mtcЈ:Idyñ  1@jHmsPq(Y?U}4xvrw@4(Rچ($0³>R2r(:|,qp٘omAeA.ufX-E_|";UEѫ_>1qWWe1DELm]n-j=~c8QhZ\ +3%ŇB/VnAx]If4XFH,?P.XUlf 'ֿ Au9q׏.pW h_!0@y=J|dp`6;r@# jQ qCxtFTgQ hcܷh. A!(b= zDy^.pg&e1G> jEHg:Lq0ܙM K6abr)!<.#ȑ2IF2=f 8!:"zW~>mtGF`O%7CQQځia+=2u&np!ViCL<ىkt!@cT4^FIF= L,6WqognefoR lj.("# *Ά-  `#, 9*2[hoşAS uDH]qލ.)x>E~rm:UVkRֵfs솊P &O$LnevDػ'=ST=n*&I0&qU/hݒQ"C~4_@`KYjSGP*[?p ((C E*9(T߮ +$MtIMTh +Di ~OgVbc1y* !6fa/Q\mbr}ľ +e]{1j$r 򈻀 Qhc=[q1` : FGi|sNE77G%i$4f/ +%JJvofM&^Ʃ]Ҹi'$CB;zpқD?O}ީt'0 sJ^(Pw>bT^{U<u5Rp ANA&D;G>" <=rwpit +TCUj+^snpdE13'c9)Tw08`/Ů\~ =Bat ]FF7ӶRrU8&늼Z.=DhrN[ SWk_.X8IFwOuz$񸻓+f+Ωd f6V–Ih_'VPF TkF'N P'x(헒;NhV}cO7kUI0IAI^zUh989F2 Sp[[{KOj^R`=/Fz]ѓ*QrK3.7cD> rց̯g58?5(Kca.h^R  qbҊ[N†~)2`0i5 _٩ +L1yx!UG =peGg/ 'qr#'iG{s + ybђJ-t ]nl7.{qS=P c*]uIzvwOu%J8q8gư% 3߮|"'ӭ[o')%9TC$I]Zpk슚;z\kIw ܨj9F$V2U &5ބ"==B'AЮD Ia|IƺCIxLCi܊k ujQ?Q8l?ʂ~2Z|T@$@'M}S½ix }5ϧ, (o̿|'nm@)N8=s"'r;J3F1"Ȭ{/wl>MqI'HTLdYKnj0;ƥJ9J^԰{ +LeM!ԏAMSJ2H.ᆷ-KrNbpw%jG\Paig-O"H#wt (3hR,ƣc2K熟Qnє(^7p`Pe^ +4I|ds yendstream endobj 4640 0 obj << /Type /Page @@ -16204,37 +16071,31 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4648 0 obj << -/Length 3747 -/Filter /FlateDecode ->> -stream -xڥr6_ҋ!zr<33ػVZ,HCx~HJ&[[.p4Fߠfi:%iGZV`3_(X -Ȳŷb3S~de~wOo?-ZkOiL{Pbo Ͼ"޿yl~Va]k\w׷??^wQiql G"u^*f i?2Z8\lj|06K`D5q oA&g`F%Sg/-^>p&Ũbs>6.,#XKW#}e6$#H{Qpż.d-/s y񅐭<ײF '- d=Qʼ}.V%(xwÐfK+v[7Y}ߑ6/GNRAZ1sq]֗$wrI8v@@e+V0>>[g聨)M!ӆ >%I, 8y‘W񑌽{㮢dAO}0Z4Lэ@hw;6d! 7MXA3F€ؕM- -}w& -pE's15%dUջ5e)6 -CxlN=-x .z3pK#-o ) "#0:8_IbL+YC -R+eOGƵ-oU$&TtS\79OI( -b%I -"_ؠR6[>ཱུBVp^ -F-Җr8M։p.5Qp.n;&< H.E # |TzS0#ah vw2b!^Eä5tYLgqQ Ws/ 4 ,R^dן[rs6'2tq `k8`]WA7އId*ܕ;K;@WeOm)G %a9pMU4(jrЁLtڄGuPo1),V`4t^9[ ;M_/@. {d2]]Q',t q IG!_KDʕ8ѼM-{RWqQŠ1F;/*kãYd"H>*T=HXL5v0XR(~ rJSֽrg-~z֥G/AUV@uϨ3l\ GFb kSm4'a]T2"Ǖ;P~ -6Suo D/x@r[|]BhLRzC5wʙj*T_7dLY|Hucb9[XijNs;X?]ua}{N~|2[#":T_~qnJVۄ\&Չ'̃}J*%EV漯]N"JG PiZ ddfIg.ucp?Ye:}LI#g_Y2:Q:!XW'>>˻ l'E5r \-oƽɤ=ݓ}Jf_q)Y2<F+6v].f\SY,z/멳Ybe2)| -[?ⅱP|tl!-;M`n6`mE1''"QH8Agl:*?CFvAʌŁF<}:ھ#YqJr{ -EOUDgփU}cR:D,h7%{t)#0|ꚓ@ _zrb8r' B7*☒O"$Bl]]#S GajWN١`Vn>)ߤ sY vqy?!pSkdKAƠlpjVig z5X-$@H1/Z ?H9:Y#=Ր,.7 s2|+_ 9 |!M~sS onK3ncB.[LAԽ -d vROr((~Ϯ?(ȗQI>iA}Opp4u1\M|}NJD O™ [zҶCX[ x,OlRz;v6\JH fbhd¾z@Ud(,]3xΎ2#VHV>m//+tO>c;>9jxZOP!v.70R;HF" r*̸u9l˧Xzt:` F.* 07ugBI>[ -%@.Eήr&/wro^NMԕbẊVm҉T~1G1S endstream +/Length 3698 +/Filter /FlateDecode +>> +stream +xڭZKsWxXeb1jwm9+gN>@$($V J{zzu$li5Yl/#|dD01~G͇LTgA6_ѐW?ݿ2k=w/T{䦫`;՗< S_;n|n?~}عM]{0Y~|g(ʲDڏon35“Qp2ׁ1GE#y x ZQaJ)x:^Coon*vЗoQFT+f0(L,ƑrnT=5E-t@c P\F݀> p {w2YV?¥'K Ԍe$ +{5[̦r#ynɓ c{1L-Kd,,#}[.qG:g08a A{h@ddF\i+$W.f~`bQUi +5PAT #7ReNsis#<'+WU"#=SQ0w/'at~vt1x$)" 󺨷%m֔N:dh_ɰtj sؚ7o00KvofukW;<}EȒh䩴A7|(,YbqY6 >Xԙٺf^ڇ]gxEb(-Z^$-)pY`8'\B, h{j%5G_=앦|1 ;8"tԍ=T:UՅ~ba|;ģއ5ODZLt9Gv Q~EHy ܩC1Xz\ǺzcA.kjYPa\2nC2@X~wgL"_NIo" .8 >ALvLW}b!&"FiTL_l7Sl 4,*ʭ]QǐbS)9bn +\q'h$7Tj)8w΁ж,p-OpH7hP3cEF0/UfgWXPu*lrSaq2ZVq/4]Ǟm[$^J!dLIB;e_o|iSMS(X}?phz?}yWum~LU*6ǂN>cKj +y^ 5o DZ@,w6mlwBĉ)u5\K9-X\@vy'r,GN(34/kR?N滜A`Lon!}(k +0 *n&ɥ"8bJ>^jxy Laʖ A^js㿙P{a,@0YvׯNoOUmv{ɔ+7K;.ʞ:R2nn9I욏v}p"yw_ T;{8›L Lj?a-p +92S<»). |I +,#ԜwK|[vٞz!$mM>Ltqo+irhʆ+% \$ o@vrY`)wN}+Y|vO5XXϼ7vY ݽêڥisu"ӸOEDY@ q3c!򉳍KH\e ry +a/~BG8Q${s RtʓO hr M1rT{!}tqKɗ ~ɠB6:zs |Jr0g)د/؅sԡJ1aGj-0Gm9 +I +!=ǀ_]9q[::yKENb0[HKZ@Цjod&RN8 +LTbHgI7F}N>HOmN _$lH/[.u2m_ټYDݣM! S '3}.O`}x.8r'~9 -9(+ї3b7(/g2 vz`K_dW D7HBwP832bKo+ {I +k7 c.'Ir* 5OF&+^Y,<Ƚw+xY>DU:CjDʌ$)hbMlԸo"h1"c tL5^㒣;ꢥ|yE2Bkn.-T'Aq"mXOt Z&mw< +쇆2kύBIEn]M R +©P,|OfW3g1 +CBU ?endstream endobj 4647 0 obj << /Type /Page @@ -16269,23 +16130,24 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4655 0 obj << -/Length 3718 +/Length 3562 /Filter /FlateDecode >> stream -xڥZs_3MW̹߮v<mq, -IvP"|Y Xof!fY:Y:-Zv BH_.?%fA泻OqV??|woZyEfOW"Jp뷟o?~\˷X0@ۏR}nb_~]o8_.~9`_γ3 :׋̸טbqOŞH:R4Ĥ$u-]SG $w명5f|KM5[C_c dPHn*ݩg?Mѕ\ۭD4Y ifBJ'*Ӕ UV'rUɼ/dUUlpG'52 ẄkAp~ņdOB 4NraBh@.ja۸N WVG\<0m1UˮBwk2 חȴv4?A IqB"_ wAZ6sj|rZb-+^S؄鼱ni~%<OI~ Q,|Yo+ s "; }-NF%y4Ab -Vd, XEOӗ&TZL3UcX<hELcLj|%6|v(q@F*[;Ԍ>NǔJrL= SFqG潸eSݻM^hMj ^S9dI#ߒ&h<˷/bo,r6m#?qvXA[WUo?]ݼr-YeoHӭqDYr aVש:Z> -!cZ%I[BzjT챁R;UatB\]=$D prɄd։F)dO 10t ;8 )1$yrC! TSXlFI-XI[bV).SSz,M6wd$Sz?#;MCa@۳]*\ZlQ =TYIN$w]3CW7^X'A<=IȊͲw5)RX=p?jȘ*c=1h:1n44l Jcd^4 ˽U[6,:2@Х h6%1Ȱic7jJaf:aD[޶qe1֠Q<05oZiƒdy<{Ws[7`*27\ Ȅ†jQpSA[L4Aga |N8kn_n*f-GkD> -Xr5sST횫If虸4O?4uCK\}q}0u- Z4\d.ᇇE!2c'A:bW\^ZPYDqBi{ֿ#h 1$0E8H#mEAl[9+nq1Vbcoiw֠*+w 0yW6ڏ;Ӂѹtv+ CpJ:Ų#iEmkrmG AR lJN@y[}{׫ؖ2t.H  N\zƓa M j~qVAX񊿝 ƅr[J3A1ze33'Cb߮a\rAwidczI^@!ae0^~:FK=_bi'PrD# sFdr0P\lv NJ1ta$z5t{o(&J!;Qĕ^}YB>G.E\۬w$7&8J\72gUMղlWe.e{7RTqdVJ 1fYvI7JT$oMKGO -64n1ct4 g0);`ԥyse(-W^PűdS 8!D[vi -=UɫWKw̙;+$DPAAj -%AeDd( |0<8 UbjRđd'ZaY'txBG )%zP4rR -a!tVmpjo's#w 8+ -s@߃k*NH] "*tzޑ3S$&d7uL>x`-M2&捴K-?e PϤl_N,0PHMaݬ\|p|BBYwcm4%6u$fwERmpj9]U x{K^iJo|ʶdOٙ$ZU<zx `,.6Y+w&ĸ}#8E -mR`o[GkgԿ-lӏ"lbNǁ&n -0ȳ ;a+~2t "OQg[endstream +xڵZYs~ׯPe0+okhJR "Q" -)>}vR8GOLOO=#ϋ4TyY|9ΗY,ѹ,Ůή?d<2*gD2[?fo/RA˫Qa#}vxv8%)b7 K` +Z f1B+2fa=YE'K~oGL'aԁV +.b;._ˍ3`BYŽ/6% (P˱ꤱ7+A?zpE_\LGI&$DqZ-AӸ9w͝[ +;dd;{H4-iv.ԝQp~-Vఈڴ9pa[s .k?C=s+Yչ5k$8,]`Tsb+JĘbi톥nŃm6Uob'@NUXtX[%Ѓ RIT OLxGfx)4BƝlAP?9Fy/+a`'KJ vq h@Q 6;Q#rwR6*Ro9U 9; z]-,dI ^s^4KwgUn*\\mP w=TYߣȌ3W*K^q{Y: "@&a'+tٵHnJauύc!s"h)gSv,e[P + 'wiXV/o_ +1 4 Z#"Bn2C,BKUq̽-|kZ1^c(T%%' P+7xkt=E2nj}2Lwk>R2; SQRpވy%aYL4=!17N-ŽQp >_7Zք$%,X{C8LT~U{B_q3)#=)-a)k#78xNc{C7rJ?fC!*5a(λ5PTh]x΍6 ɝ*I_w/gfp*ZX'q]u܌j9j1zsp 宸Ĩ>b܎ 2QZɆ)ʃINò1)C 7OTau"qʼn4i]%o!5+Xl3oQe0"6n +s>hKk]:d0N9\RWV{,٩WiD~(kaYu7~䌙KGpe2{-ť_!Sۭy"k LɃyQV7ծ`ٰ:nK^8X&^6UMpגD׽`C$Khc&B F2R,A4ex +T)TdqEUZ +206n̨{&M;Oo>HIC<0b2[ +_m rf)`lF*ʍܑq}~\ovbIZI/p%4+{ISyr W5{vIT R8s7P >dM 85 {B!9tf\sA嫞N\Bk`Mt9!`n%˳&uꩿDΚcmϊ+BNۆBᬍ6:D7ɘ&˻`e簩 +%OMYYTxdʁSg_kYs)'DP3< a %މrX)Fg; rI՗xW?UyR;_& Tƍ{=غޥO8GI<r:y\$~;徟XUƃI&P+9X}sʧ(I^4=+6l}uyP5>.$M?M&(zE~Z`^Z*eGI\Ab"O68!EʹƖ81R$a^&̛֛83,h\,dqve<ñw8= нbʄ0󅨢[磭{9h{ec»3a/#7* ,;LOt:2y:ʸN%2zl|t#quo{'X$Ke[-~h|@@o*w3zY4o\hB↻{R@JѸʩxkG544ęv2zo$h +"" ɽ3ޱV&rDZ-_zQ(?~vO|O0B':%;r#endstream endobj 4654 0 obj << /Type /Page @@ -16333,21 +16195,26 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4665 0 obj << -/Length 3281 -/Filter /FlateDecode ->> -stream -xڭێ}Bȋ b/)i` " ZJV)rCRA6H"e)G3g̹̹7\_Hlotn|} -JPV_o>G0 [s7Y~_]^*IR2^-W }ƫ_}q{2޿8;@櫷/Twoqo߼Ko[|͋AGPkd[ۛYxqY8DF&2nn1kтwMi7TWhuJJ?aۖ-Vi3c-aGYe{dz7,zJ쭝=by^v -Byץ1^^Q)+y2tņH5.p;{\q[0DxGm9la^N4VDv9I[fөivr )j/2Ӗ/Py %DKҳPM;8=}9VykE< k0M ssh"kvqhƻneac0,}RYRigF1I:2_9A{<+F+82glNTPMv"_a|8x5U)OSUD#(V+gD3(5@aJ?p~ɀ IYȏl-HyJbltؖ0zpxl_24@U?/Eph,WdA2$HW4QŝY`r~ic!3woR8c^mJCj`H (S^ #Ћ@I6.NrhA@?>/gA#$0LܦUJ}ٸˇ:GCt<ꚡY_[ilJ,2@|t r.4>i|+0U?!!QB–_s"kIUi+. N b MHj0\X$E)Y @ mqIǭ-]>[3 T YOP* -N iIl)% ZV5LHTUӱ&q53*8TܣdL1,䀈#tZ,C&CTz\!hH^U,Zqwǿ9/#hBfˡTl0$=-[VNH?$[0 -krQ/{wZV4,b7S)5Ϩ$RN mk·TKN7<ףmA}ͥl=!܊Rcf`lMIUF9tn0M=)Ƕyi}ℹ M;v0_zNڱ8r$]hfQzwsű1aO= ;q4#bÿn_++ ?[)կKift{6',gznhRc<c[S -yURyqPDPX7h%xRP2g!#*yΙp0bS[`"6~hN5tDA(PS`DzJ&T!#AhjKu=sD!{Eh2Y-%NR(f -PUSWyĎZ)'ȆDyArcaaŠƿ i\lDO&HyP2jo=aWDXD}d;*$t)=x5H.j^ʠCN"h͝A*rXmW[/I9&$։5|4 LF@QvMuw* -fGI(0=$~ꡐ/F2!Et-švtjyhFtތ88CO:fDkCl{۱(nar E6K ?rU~FHܾ,3.Ο_*KppG:>BeCkٶYGNw 9|Í؁}anC^Vc3+)*,QQ[Ú-?49˱P=X+_^!镱Os C}&8<2yPڗë`x[uQlmLLgO%}} K=xGr^XKXJ~Pmw+-Qޜ"^LBN{בEoBjր1Σ ǟPActg=r2ׇWVoy@>$F>=nc/TBd#$Slg9ߣ<{y"2<vg8ʪ{n)3R&I0I SziI5KzBP8.8+iOB0$JCIO﯒ߥu㚕}7R7NO.e> +stream +xZ~/GM..!=IЮDD"U６\I9m0`>汳3Y??K# Yn›ȷf8ynMS""IRw^5\_ݼ/&}6B}͛k!U\+\{䫛wopw_\Y.B7?rP tml@?]x, ,B?rXi8Ǐ&s)@0q= +h7#S;&{TLH{4.D,zZH,5y{W/;MF~7,Myy9Ὄά)賅V)m"V Rwwc;֤9bh4li8X ގfD6#*I6o튞dO8H3{q-kUEQUxPj\g*ꬍOv_bEmK&K{jhHݖsW6¦-qzKq;Zfkԕ+ʮo5. gyy)6xJW-{KvTMY{t}YUM $gw)8N "8,,^z :FMYO8eB + .U1JB4{(y<Fưm^2 VC8p,{j3V n(k5m~4gv#kctd]rG1D'^9a5i)0Tx|>:|%p14FWʅ}W5bKN +gצDG5;ر, uCi1l"={ؙQJc]kxBU~" F"xуF+s:X4p}5GQ}~ 0,J8ЁO91! ӈ5$INDT`!q +ćY-GKޓNBNdQ{d LqAIaD!::FaPKŃ +|7;5JFqkAyP@IVVLDnz +8, qRsӎ= t`;mnWB8;w T)>}bzTTJ>u(0!#9F^`U2K@Hk7Th@ l'"b}k#w{hMl+`Ѡa(.Ȏcq?ܬ9VhӐ`#x6B Q"kzĦd =i'Z."#Y(ہ y<k4$Q/Be̳`Ҋ}B(( f_Lҕv([l~VD]t* NZ7}O>H`ځSHx>#v0wN7[m*S|kH=f_^b<+Ҹ4zeDp+5aS/0m8]KTEnfB e+`Sd.4?3BV17 +%X^IAC UJ*"FBvcS(w;g9E‘FCA>v/xzaAv#7mnHo~ǻ)I̺^'j tbv{O{Ȥ:Pr?~d0 +#2 J*z[\2u? +nʼE+>`si@LjB\h] q5N>tSo`{f)N|WZ}AQ'’Jc7?%endstream endobj 4664 0 obj << /Type /Page @@ -16388,15 +16255,15 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4674 0 obj << -/Length 1440 +/Length 1311 /Filter /FlateDecode >> stream -xڭXSF_DL(܇LaX-9eh A{ -q'0(,3JDŀGw揁gIGVGhsfr?GD) ņIfۡφ/Nޞ] :wGק~{(>]㫫tq pQ(|ȣ\=p,Z͙h1F1_76蝎Ԯh>] d:$Sr:%s0W;A Q{[J"TLfjl6)Le$ˍ -YnMʔ\/=y5M EH0\O@;6":i(4MXxfRF): La"Ӹ׫j>*9epM`għG:p[-,ֲJdn'=^68v+d|=)JK$"'w>"kE7(~JF݄YAYrVxbgQg̿@wQٴ|rϢ못:1 z^bN夤u.>ji늌zfas^![Ю]B=5fJOLN\Z}հ֩`WRPZRGɦY|#03 Au0KMY # Z~+{i5V= PeHzX^;Od+#%:>7hѾ*m3J ag~&FxM-% ~*s F4g?DJhc9^kcb6iL32h73Hy -.eH-nq?Ȣ;)\ -ي@^FݦM2>/ƨT-)"i>'p9ջ`UV!MWa_*`! ẍ́.ؾޫ~mCm[\Ք'ԎR-nٸ; sӞoڴ~nƏYGU7=ve9IYoϢ pqv w{H{xbể?ǗAbAlj6I +_ip|q$OKGHh +;]Zs=ѭR aLdJl%lr7ܘ$kW]uހ-hrzԌb}:Mh%w2Q +y:I.cX%j~v2/nf3 Z^*XɑtGWOV/ˬ@Y!"Rmmj-I]};Cn+γ f7%-55iFb9VC(gK8@JbR/pT><ȎYU7uM(?\'y[f}FZ8>+Rəf^A{$_Rx70)enu~+$y,EIN?f&c,Rj(J$f Hԣ7'L'6K4 GlUބ0IY:U}vQbIl9@21~>mV5f'V7-MwS8v[Y(6LWȪR3):=UdQnҗʒ^9`U^duQ*p0 )zD;~Lu4"ց M@rf`\F?>ާf;q iySűVqmf+{ m =&fI Y6SO>8SBP|Ю\\\Ӝƽ>` [ p-Cxf/e>%`R})'Wq".oYJhDuoRd$Wi2;O+8#*'mV)dԽ" {}yng jä(z4!X) _ʵ䝰]m.Ů0vd|(ۀjb 4㊗5˛z299MzӺO3ْ_`6|N69`.WP# ֊ܻ^`/O qѤ! ‰{ٗ!תבBzoxendstream endobj 4673 0 obj << /Type /Page @@ -16426,15 +16293,13 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4682 0 obj << -/Length 1145 +/Length 1096 /Filter /FlateDecode >> stream -xڥVo6_=U&ߢ!K5ElbrնRII~wy"d{v1=?]MS \yp͆lB.2E١@Fn{c}h!CNGZuGz@UZ^H7! *[\ WjD[x>B3:JAP[a$#. endstream +xڥVKo8WhOKQ !E(n-b*) ;ál'QC r<(3\2)Fd8Odd5}gu"/E̖AdŽ3;RIӬ({Jvf}<w➜MOg)OMOu;vǨyI).>^_g&`3͵Uɗ"Y@B&%@ .2NQhϛߝ鄴F0˴.wvTU>,^4!*J?brI bW"O1:fc^PBDrRq۳LNmhPy)rHi-ˡ]`RMȚ!f2%t|F-)+bAXT "#%T,WU~ XoL;iØ1m]= +MC.$-tAPڅTv` 7ņ'Xo}Mi~VC`߯*8MU VKhM;=O)z4ޮpQm *(۰Mo⒮B }ew2G=X{/09mj^׏ t<B^ eZapx# 2#>#4{b_h`_1}óm^? TZϓ!9zendstream endobj 4681 0 obj << /Type /Page @@ -16458,22 +16323,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 4687 0 obj << -/Length 2983 +/Length 2910 /Filter /FlateDecode >> stream -xڥ]o=B}V"u{{ޢ_ -(6c +KYIN%ʖs@19gIE^'A / ё=ޅV~ F c/,:UAg8r:Sq1|ܽBOAjoE -t($˼7?:IBcڬ:MY#Ǔ_̶]hѷٯtȎpIo;QEaPŌ];$dKGqegfIJ7===t8l;s9a˙gpRvXYCWm'$QY2Am۾!fJÀ @|х?u췏`fi#` \rgי󌐝!?vÔyd{^lLǐAP)ۆ֍+pjwL'D#4Ҹ?r8u#dbLc~xo(q¹mI:W}yD%=1P!ڹʆqekV7&{ѹ`^PK6jK4ʁ>3h͎x÷,Kb+Vzx:L3rΩ&{Qae'׻?˺o]젯U\LS, dFJ35D,C3yXiZ.|ua\TEA!B,7{@ HScyP!s8K޾sZ-rVo;p(tn -)x5Bo$o'YN]GI<}!򂍼0,ggh7.t 1G \4r ܯlˆ!]5[A%Łx_JҾ+0zL"$նseuNWTNy -y1"7I1;c?cv3;ܜJ<*svrVb%kY/1`x;M5C),M;RN#;J3GpO$nMRreS_T!F͹LZ|nI3"FsEWC