From Martin Podworny Fri Jun 6 11:36:26 2025 From: Martin Podworny (Martin Podworny) Date: Fri, 6 Jun 2025 12:36:26 +0200 Subject: [OpenAFS] OpenAFS and VPN Message-ID: Hi, we have been running an AFS-Cell on Debian for years without any problems= . Now we had to upgrade the Debian-Cellserver from Debian 9 (Stretch) via D= ebian 10 (Buster) and Debian 11 (Bullseye) to Debian 12 (Bookworm). We on= ly use standardized packages from the Debian repositories. The problem we have now is that clients that are connected from the Unive= rsity's VPN can obtain a Kerberos ticket, but they cannot fetch data from= cells fileserver. While the cell works flawlessly for all other clients. This behavior starts with Debian 11 which installs OpenAFS 1.8.6-5 and ke= rnel 5.10.237-1. On Debian 10 with OpenAFS 1.8.2 and 4.19.249-2 everythin= g still works, even for VPN-Clients. Do you have any idea how to explain or eliminate this behavior? Are there= any correlations with kernel parameter or settings for file- and dbserve= r? If it is useful, i can attach some debug data from cells fileserver. Thank you, Martin -- University and City Library of Cologne IT-Department Universit=C3=A4tsstr. 33 :: D-50931 K=C3=B6ln Tel.: +49 221 470-2593 :: Fax: +49 221 470-5166 podworny@ub.uni-koeln.de :: www.ub.uni-koeln.de From cwills@sinenomine.net Fri Jun 6 15:18:06 2025 From: cwills@sinenomine.net (Cheyenne Wills) Date: Fri, 6 Jun 2025 08:18:06 -0600 Subject: [OpenAFS] OpenAFS and VPN In-Reply-To: References: Message-ID: <20250606081806.5807cc59.cwills@sinenomine.net> Check to make sure the OpenAFS kernel module is loaded and the afsd process is running. You can check the kernel log (dmesg) to see if OpenAFS has started. =20 Next I would check to see if there are any firewall rules that are blocking the OpenAFS ports (udp 7001). --=20 Cheyenne Wills cwills@sinenomine.net On Fri, 6 Jun 2025 12:36:26 +0200 Martin Podworny wrote: > Hi, >=20 > we have been running an AFS-Cell on Debian for years without any > problems. >=20 > Now we had to upgrade the Debian-Cellserver from Debian 9 (Stretch) > via Debian 10 (Buster) and Debian 11 (Bullseye) to Debian 12 > (Bookworm). We only use standardized packages from the Debian > repositories. >=20 > The problem we have now is that clients that are connected from the > University's VPN can obtain a Kerberos ticket, but they cannot fetch > data from cells fileserver. While the cell works flawlessly for all > other clients. >=20 > This behavior starts with Debian 11 which installs OpenAFS 1.8.6-5 > and kernel 5.10.237-1. On Debian 10 with OpenAFS 1.8.2 and 4.19.249-2 > everything still works, even for VPN-Clients. >=20 > Do you have any idea how to explain or eliminate this behavior? Are > there any correlations with kernel parameter or settings for file- > and dbserver? >=20 > If it is useful, i can attach some debug data from cells fileserver. >=20 > Thank you, >=20 > Martin > -- > University and City Library of Cologne > IT-Department > Universit=C3=A4tsstr. 33 :: D-50931 K=C3=B6ln > Tel.: +49 221 470-2593 :: Fax: +49 221 470-5166 > podworny@ub.uni-koeln.de :: www.ub.uni-koeln.de > _______________________________________________ > OpenAFS-info mailing list > OpenAFS-info@openafs.org > https://lists.openafs.org/mailman/listinfo/openafs-info From Martin Podworny Fri Jun 6 15:44:59 2025 From: Martin Podworny (Martin Podworny) Date: Fri, 6 Jun 2025 16:44:59 +0200 Subject: [OpenAFS] OpenAFS and VPN In-Reply-To: <20250606081806.5807cc59.cwills@sinenomine.net> References: <20250606081806.5807cc59.cwills@sinenomine.net> Message-ID: Am Fri, Jun 06, 2025 at 08:18:06AM -0600 schrieb Cheyenne Wills: > Check to make sure the OpenAFS kernel module is loaded and the afsd > process is running. You can check the kernel log (dmesg) to see if > OpenAFS has started. =20 >=20 > Next I would check to see if there are any firewall rules that are > blocking the OpenAFS ports (udp 7001). ... we have just found and fix the error with setting for all fileserver-= , ptserver- an vlserver-processes in /etc/openafs/BosConfig the option "-= rxmaxmtu 1260". That was it. Greetings, Martin University and City Library of Cologne IT-Department Universit=C3=A4tsstr. 33 :: D-50931 K=C3=B6ln Tel.: +49 221 470-2593 :: Fax: +49 221 470-5166 podworny@ub.uni-koeln.de :: www.ub.uni-koeln.de From jaltman@auristor.com Fri Jun 6 19:49:22 2025 From: jaltman@auristor.com (Jeffrey E Altman) Date: Fri, 6 Jun 2025 14:49:22 -0400 Subject: [OpenAFS] OpenAFS and VPN In-Reply-To: References: <20250606081806.5807cc59.cwills@sinenomine.net> Message-ID: <596690da-92e3-402f-8933-2598d66a6b72@auristor.com> This is a cryptographically signed message in MIME format. --------------ms040702000009090505070304 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gNi82LzIwMjUgMTA6NDQgQU0sIE1hcnRpbiBQb2R3b3JueSB3cm90ZToNCj4gLi4uIHdl IGhhdmUganVzdCBmb3VuZCBhbmQgZml4IHRoZSBlcnJvciB3aXRoIHNldHRpbmcgZm9yIGFs bCBmaWxlc2VydmVyLSwgcHRzZXJ2ZXItIGFuIHZsc2VydmVyLXByb2Nlc3NlcyBpbiAvZXRj L29wZW5hZnMvQm9zQ29uZmlnIHRoZSBvcHRpb24gIi1yeG1heG10dSAxMjYwIi4gVGhhdCB3 YXMgaXQuDQoNClRoZSB1c2Ugb2YgLXJ4bWF4bXR1IG9uIHRoZSBzZXJ2ZXJzIGZvcmNlcyB0 aGUgc2VydmVycyBhbmQgdGhlaXIgY2xpZW50cyANCnRvIGNvbnN0cnVjdCBSWC9VRFAvSVAg cGFja2V0cyBzdWNoIHRoYXQgdGhlaXIgbWF4aW11bSBsZW5ndGggYXQgdGhlIElQIA0KbGF5 ZXIgYXJlIG5ldmVyIGxhcmdlciB0aGFuIDEzMTYgb2N0ZXRzLg0KDQpUaGUgdW5kZXJseWlu ZyBwcm9ibGVtIHdpdGggbWFueSBWUE4gaW1wbGVtZW50YXRpb25zIGlzIHRoYXQgdGhlIFZQ TiANCnR1bm5lbCBtdHUgaXMgc21hbGwgY29tcGFyZWQgdG8gdGhlIG1vc3QgY29tbW9uIG5l dHdvcmsgbXR1IG9mIDE1MDAgDQpvY3RldHMgKHJ4bWF4bXR1ID0gMTQ0NCkuDQoNCk9wZW5B RlMgY2xpZW50cyBhbmQgc2VydmVycyBvbiBMaW51eCBhcmUgY29uZmlndXJlZCB0byBwcm9i ZSB0aGUgbXR1IG9mIA0KdGhlIGxpbmsuwqAgwqBUaGV5IGRvIHRoYXQgYnkgc2V0dGluZyB0 aGUgRG9udCBGcmFnbWVudCBmbGFnIG9uIGVhY2ggDQpvdXRnb2luZyBVRFAgcGFja2V0LsKg IMKgV2hlbiBhIHJvdXRlciBvciBzd2l0Y2ggY29waWVzIHRoZSBwYWNrZXQgZnJvbSANCnRo ZSBpbmNvbWluZyBwb3J0IHRvIHRoZSBvdXRnb2luZyBwb3J0LCBpZiB0aGUgREYgZmxhZyBp cyBzZXQgYW5kIHRoZSANCnBhY2tldCBjYW5ub3QgYmUgc2VudCB3aXRob3V0IHNwbGl0dGlu ZyBpdCwgdGhlIHBhY2tldCB3aWxsIGJlIGRyb3BwZWQuwqAgDQogwqBUaGUgTGludXggcHJv YmluZyBtZWNoYW5pc20gb25seSB3b3JrcyBpZiBldmVyeSByb3V0ZXIvc3dpdGNoIHdoaWNo IA0KZHJvcHMgYSBwYWNrZXQgZHVlIHRvIHRoZSBERiBmbGFnIGlzIGdvaW5nIHNlbmQgYW4g SUNNUCBQYWNrZXQgVG9vIEJpZyANCnRvIHRoZSBvcmlnaW5hdG9yIHN0YXRpbmcgdGhhdCB0 aGUgcGFja2V0IHdhcyBkcm9wcGVkIGFuZCB3aGF0IHRoZSBtdHUgDQpvZiB0aGUgbmV4dCBu ZXR3b3JrIHNlZ21lbnQgaXMuDQoNClVwb24gcmVjZWlwdCBvZiBhIElDTVAgUGFja2V0IFRv byBCaWcsIHRoZSByZWNlaXZlciB1cGRhdGVzIGl0cyBsb2NhbCANCnJvdXRpbmcgdGFibGVz IGFuZCB0aGUgbmV4dCB0aW1lIGEgVURQL0lQIHBhY2tldCBpcyBzZW50IG9uIHRoZSByb3V0 ZSwgDQppZiBpdHMgbGFyZ2VyIHRoYW4gdGhlIGRpc2NvdmVyZWQgUGF0aCBNVFUsIHRoZSBw YWNrZXQgd2lsbCBiZSBsb2NhbGx5IA0KZnJhZ21lbnRlZCB3aXRoIGVhY2ggZnJhZ21lbnQg c2VudCB3aXRoIHRoZSBERiBmbGFnIHNldC4NCg0KVGhlcmUgYXJlIHR3byBwcm9ibGVtcyB3 aXRoIG1hbnkgVlBOIGltcGxlbWVudGF0aW9ucy7CoCDCoEZpcnN0LCB0aGUgDQp0dW5uZWwg ZXhpdCBlbmRwb2ludCBlbmZvcmNlcyB0aGUgREYgZmxhZyBidXQgcmVmdXNlcyB0byBzZW5k IElDTVAgDQpwYWNrZXRzLsKgIEFzIGEgcmVzdWx0LCBwYWNrZXRzIGxhcmdlciB0aGFuIHRo ZSB0dW5uZWwgbXR1IHJlY2VpdmVkIGZyb20gDQphIHNlcnZlciBhcmUgb2Z0ZW4gZHJvcHBl ZCBhbmQgdGhlIHNlbmRlcidzIElQIHN0YWNrIHJlY2VpdmVzIG5vIA0Ka25vd2xlZGdlIG9m IHRoZSBwYXRoIG10dSBzbyBjYW5ub3QgY29ycmVjdCB0aGUgcHJvYmxlbSBvbiByZXRyYW5z bWlzc2lvbi4NCg0KU2Vjb25kLCB0aGUgVlBOIHR1bm5lbCBlbnRyeSBwb2ludCBvbiB0aGUg Y2xpZW50IHN5c3RlbSBpcyBpbXBsZW1lbnRlZCANCmFzIGEgdmlydHVhbCBuZXR3b3JrIGlu dGVyZmFjZSAoYnJpZGdlIG9yIHR1bm5lbCkgYW5kIHRoZXJlZm9yZSBhdHRlbXB0cyANCnRv IHNlbmQgcGFja2V0cyB3aGljaCBhcmUgdG9vIGxhcmdlIGFyZSBkcm9wcGVkIGxvY2FsbHkg d2hlbiB0aGUgREYgZmxhZyANCmlzIHNldCBiZWNhdXNlIHRoZSBwYWNrZXRzIGV4Y2VlZCB0 aGUgdmlydHVhbCBpbnRlcmZhY2UncyBtdHUuwqAgSW4gDQp0aGVvcnkgdGhlIGFwcGxpY2F0 aW9uIGNvdWxkIGlkZW50aWZ5IHdoaWNoIGludGVyZmFjZSB0aGUgcGFja2V0IHdpbGwgYmUg DQpzZW50IG9uIGFuZCByZXN0cmljdCB0aGUgc2l6ZSBvZiB0aGUgY29uc3RydWN0ZWQgcGFj a2V0cyB0byB0aGF0IA0KaW50ZXJmYWNlJ3MgbG9jYWwgbXR1LiBIb3dldmVyLCB0aGVyZSBp cyBubyBwb3J0YWwgbWV0aG9kIG9mIA0KaW1wbGVtZW50aW5nIHRoaXMgYW5kIGluIHByYWN0 aWNlIHdpdGhvdXQgYSBkZWRpY2F0ZWQgc29ja2V0IGZvciBlYWNoIA0KcGFpciBvZiBlbmRw b2ludHMgYXMgaXMgZG9uZSBmb3IgVENQLg0KDQpGb3JjaW5nIHRoZSBzZXJ2ZXIgc2lkZSBy eG1heG10dSB0byBhIHNtYWxsIGVub3VnaCB2YWx1ZSBwcmV2ZW50cyB0aGUgDQpjb25zdHJ1 Y3Rpb24gb2YgcmVzcG9uc2UgREFUQSBwYWNrZXRzIGxhcmdlciB0aGFuIHdpbGwgZml0IGlu dG8gdGhlIA0KdHVubmVsLCBhbmQgaXQgYWR2aXNlcyBjbGllbnRzIHRvIGRvIHRoZSBzYW1l LsKgIEhvd2V2ZXIsIHRoZSBhZHZpc2UgaXMgDQpyZWNlaXZlZCBpbiBhbiBBQ0sgcGFja2V0 IHdoaWNoIHdvbid0IGJlIHNlbnQgdG8gdGhlIGNsaWVudCB1bnRpbCBhZnRlciANCnRoZSBE QVRBIHBhY2tldHMgaGF2ZSBiZWVuIGNvbnN0cnVjdGVkLsKgIElmIHRoZSBpbml0aWFsbHkg Y29uc3RydWN0ZWQgDQpwYWNrZXRzIGFyZSBsYXJnZXIgdGhhbiB0aGUgdHVubmVsJ3MgbXR1 LCB0aGVuIHRoZXkgd29uJ3QgbWFrZSBpdCB0byB0aGUgDQpzZXJ2ZXIuwqAgwqBUbyBhdm9p ZCB0aGUgY2xpZW50IHNpZGUgcGFja2V0IGNvbnN0cnVjdGlvbiBwcm9ibGVtIHJlcXVpcmVz IA0KdGhhdCByeG1heG10dSBhbHNvIGJlIHNldCBvbiB0aGUgY2xpZW50J3MgYWZzZC4NCg0K SG93ZXZlciwgZXZlbiB3aXRoIC1yeG1heG10dSBzcGVjaWZpZWQgb24gYm90aCB0aGUgY2xp ZW50IGFuZCBzZXJ2ZXIsIA0KdGhlcmUgcmVtYWlucyB0aGUgcHJvYmxlbSBvZiB0aGUgcnhr YWQgQ0hBTExFTkdFL1JFU1BPTlNFIGV4Y2hhbmdlIHdoZXJlIA0KdGhlIFJFU1BPTlNFIHBh Y2tldCBpbmNsdWRlcyBhIEtlcmJlcm9zIHNlcnZpY2UgdGlja2V0IHdoaWNoIG9mdGVuIA0K aW5jbHVkZXMgQWRkaXRpb25hbCBEYXRhIChzdWNoIGFzIEFjdGl2ZSBEaXJlY3RvcnkgR3Jv dXAgTWVtYmVyc2hpcCANCmluZm9ybWF0aW9uIGZvciB0aGUgY2xpZW50IHByaW5jaXBhbCku IMKgUkVTUE9OU0UgcGFja2V0cyBsYXJnZXIgdGhhbiB0aGUgDQp0dW5uZWwgbXR1IGNhbm5v dCBiZSBzZW50IHdpdGhvdXQgZnJhZ21lbnRhdGlvbi7CoCDCoEFuIGVuZCB1c2VyIHdob3Nl IA0KaXNzdWVkIGFmcy9jZWxsQFJFQUxNIHNlcnZpY2UgdGlja2V0IGlzIHRvbyBsYXJnZSB0 byBmaXQgaW4gdGhlIHR1bm5lbCANCndvbid0IGJlIGFibGUgdG8gYXV0aGVudGljYXRlIHRv IHRoZSBjZWxsLg0KDQpBbiBhbHRlcm5hdGl2ZSB0byByeG1heG10dSBpcyB0byBtb2RpZnkg dGhlIFZQTiB0dW5uZWwgY29uZmlndXJhdGlvbiB0byANCmlnbm9yZSB0aGUgREYgZmxhZyBh bmQgcGVybWl0IGFsbCBvZiB0aGUgcGFja2V0cyB0byBiZSB0cmFuc21pdHRlZCANCmFjcm9z cyB0aGUgdHVubmVsIGFzIGZyYWdtZW50cyBpZiB0aGUgaW5jb21pbmcgcGFja2V0IGlzIHRv byBsYXJnZS4NCg0KSmVmZnJleSBBbHRtYW4NCkF1cmlTdG9yLCBJbmMuDQoNCg== --------------ms040702000009090505070304 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DHEwggXSMIIEuqADAgECAhBAAYJpmi/rPn/F0fJyDlzMMA0GCSqGSIb3DQEBCwUAMDoxCzAJ BgNVBAYTAlVTMRIwEAYDVQQKEwlJZGVuVHJ1c3QxFzAVBgNVBAMTDlRydXN0SUQgQ0EgQTEz MB4XDTIyMDgwNDE2MDQ0OFoXDTI1MTAzMTE2MDM0OFowcDEvMC0GCgmSJomT8ixkAQETH0Ew MTQxMEQwMDAwMDE4MjY5OUEyRkQyMDAwMjMzQ0QxGTAXBgNVBAMTEEplZmZyZXkgRSBBbHRt YW4xFTATBgNVBAoTDEF1cmlTdG9yIEluYzELMAkGA1UEBhMCVVMwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCkC7PKBBZnQqDKPtZPMLAy77zo2DPvwtGnd1hNjPvbXrpGxUb3 xHZRtv179LHKAOcsY2jIctzieMxf82OMyhpBziMPsFAG/ukihBMFj3/xEeZVso3K27pSAyyN fO/wJ0rX7G+ges22Dd7goZul8rPaTJBIxbZDuaykJMGpNq4PQ8VPcnYZx+6b+nJwJJoJ46kI EEfNh3UKvB/vM0qtxS690iAdgmQIhTl+qfXq4IxWB6b+3NeQxgR6KLU4P7v88/tvJTpxIKkg 9xj89ruzeThyRFd2DSe3vfdnq9+g4qJSHRXyTft6W3Lkp7UWTM4kMqOcc4VSRdufVKBQNXjG IcnhAgMBAAGjggKcMIICmDAOBgNVHQ8BAf8EBAMCBPAwgYQGCCsGAQUFBwEBBHgwdjAwBggr BgEFBQcwAYYkaHR0cDovL2NvbW1lcmNpYWwub2NzcC5pZGVudHJ1c3QuY29tMEIGCCsGAQUF BzAChjZodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29tL2NlcnRzL3RydXN0aWRjYWEx My5wN2MwHwYDVR0jBBgwFoAULbfeG1l+KpguzeHUG+PFEBJe6RQwCQYDVR0TBAIwADCCASsG A1UdIASCASIwggEeMIIBGgYLYIZIAYb5LwAGAgEwggEJMEoGCCsGAQUFBwIBFj5odHRwczov L3NlY3VyZS5pZGVudHJ1c3QuY29tL2NlcnRpZmljYXRlcy9wb2xpY3kvdHMvaW5kZXguaHRt bDCBugYIKwYBBQUHAgIwga0MgapUaGlzIFRydXN0SUQgQ2VydGlmaWNhdGUgaGFzIGJlZW4g aXNzdWVkIGluIGFjY29yZGFuY2Ugd2l0aCBJZGVuVHJ1c3QncyBUcnVzdElEIENlcnRpZmlj YXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL3NlY3VyZS5pZGVudHJ1c3QuY29tL2NlcnRp ZmljYXRlcy9wb2xpY3kvdHMvaW5kZXguaHRtbDBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8v dmFsaWRhdGlvbi5pZGVudHJ1c3QuY29tL2NybC90cnVzdGlkY2FhMTMuY3JsMB8GA1UdEQQY MBaBFGphbHRtYW5AYXVyaXN0b3IuY29tMB0GA1UdDgQWBBQB+nzqgljLocLTsiUn2yWqEc2s gjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwDQYJKoZIhvcNAQELBQADggEBAJwV eycprp8Ox1npiTyfwc5QaVaqtoe8Dcg2JXZc0h4DmYGW2rRLHp8YL43snEV93rPJVk6B2v4c WLeQfaMrnyNeEuvHx/2CT44cdLtaEk5zyqo3GYJYlLcRVz6EcSGHv1qPXgDT0xB/25etwGYq utYF4Chkxu4KzIpq90eDMw5ajkexw+8ARQz4N5+d6NRbmMCovd7wTGi8th/BZvz8hgKUiUJo Qle4wDxrdXdnIhCP7g87InXKefWgZBF4VX21t2+hkc04qrhIJlHrocPG9mRSnnk2WpsY0MXt a8ivbVKtfpY7uSNDZSKTDi1izEFH5oeQdYRkgIGb319a7FjslV8wggaXMIIEf6ADAgECAhBA AXA7OrqBjMk8rp4OuNQSMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNVBAYTAlVTMRIwEAYDVQQK EwlJZGVuVHJ1c3QxJzAlBgNVBAMTHklkZW5UcnVzdCBDb21tZXJjaWFsIFJvb3QgQ0EgMTAe Fw0yMDAyMTIyMTA3NDlaFw0zMDAyMTIyMTA3NDlaMDoxCzAJBgNVBAYTAlVTMRIwEAYDVQQK EwlJZGVuVHJ1c3QxFzAVBgNVBAMTDlRydXN0SUQgQ0EgQTEzMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAu6sUO01SDD99PM+QdZkNxKxJNt0NgQE+Zt6ixaNP0JKSjTd+SG5L wqxBWjnOgI/3dlwgtSNeN77AgSs+rA4bK4GJ75cUZZANUXRKw/et8pf9Qn6iqgB63OdHxBN/ 15KbM3HR+PyiHXQoUVIevCKW8nnlWnnZabT1FejOhRRKVUg5HACGOTfnCOONrlxlg+m1Vjgn o1uNqNuLM/jkD1z6phNZ/G9IfZGI0ppHX5AA/bViWceX248VmefNhSR14ADZJtlAAWOi2un0 3bqrBPHA9nDyXxI8rgWLfUP5rDy8jx2hEItg95+ORF5wfkGUq787HBjspE86CcaduLka/Bk2 VwIDAQABo4IChzCCAoMwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwgYkG CCsGAQUFBwEBBH0wezAwBggrBgEFBQcwAYYkaHR0cDovL2NvbW1lcmNpYWwub2NzcC5pZGVu dHJ1c3QuY29tMEcGCCsGAQUFBzAChjtodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29t L3Jvb3RzL2NvbW1lcmNpYWxyb290Y2ExLnA3YzAfBgNVHSMEGDAWgBTtRBnA0/AGi+6ke75C 5yZUyI42djCCASQGA1UdIASCARswggEXMIIBEwYEVR0gADCCAQkwSgYIKwYBBQUHAgEWPmh0 dHBzOi8vc2VjdXJlLmlkZW50cnVzdC5jb20vY2VydGlmaWNhdGVzL3BvbGljeS90cy9pbmRl eC5odG1sMIG6BggrBgEFBQcCAjCBrQyBqlRoaXMgVHJ1c3RJRCBDZXJ0aWZpY2F0ZSBoYXMg YmVlbiBpc3N1ZWQgaW4gYWNjb3JkYW5jZSB3aXRoIElkZW5UcnVzdCdzIFRydXN0SUQgQ2Vy dGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vc2VjdXJlLmlkZW50cnVzdC5jb20v Y2VydGlmaWNhdGVzL3BvbGljeS90cy9pbmRleC5odG1sMEoGA1UdHwRDMEEwP6A9oDuGOWh0 dHA6Ly92YWxpZGF0aW9uLmlkZW50cnVzdC5jb20vY3JsL2NvbW1lcmNpYWxyb290Y2ExLmNy bDAdBgNVHQ4EFgQULbfeG1l+KpguzeHUG+PFEBJe6RQwHQYDVR0lBBYwFAYIKwYBBQUHAwIG CCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4ICAQB/7BKcygLX6Nl4a03cDHt7TLdPxCzFvDF2 bkVYCFTRX47UfeomF1gBPFDee3H/IPlLRmuTPoNt0qjdpfQzmDWN95jUXLdLPRToNxyaoB5s 0hOhcV6H08u3FHACBif55i0DTDzVSaBv0AZ9h1XeuGx4Fih1Vm3Xxz24GBqqVudvPRLyMJ7u 6hvBqTIKJ53uCs3dyQLZT9DXnp+kJv8y7ZSAY+QVrI/dysT8avtn8d7k7azNBkfnbRq+0e88 QoBnel6u+fpwbd5NLRHywXeH+phbzULCa+bLPRMqJaW2lbhvSWrMHRDy3/d8HvgnLCBFK2s4 Spns4YCN4xVcbqlGWzgolHCKUH39vpcsDo1ymZFrJ8QR6ihIn8FmJ5oKwAnnd/G6ADXFC9bu db9+532phSAXOZrrecIQn+vtP366PC+aClAPsIIDJDsotS5z4X2JUFsNIuEgXGqhiKE7SuZb rFG9sdcLprSlJN7TsRDc0W2b9nqwD+rj/5MN0C+eKwha+8ydv0+qzTyxPP90KRgaegGowC4d UsZyTk2n4Z3MuAHX5nAZL/Vh/SyDj/ajorV44yqZBzQ3ChKhXbfUSwe2xMmygA2Z5DRwMRJn p/BscizYdNk2WXJMTnH+wVLN8sLEwEtQR4eTLoFmQvrK2AMBS9kW5sBkMzINt/ZbbcZ3F+eA MDGCBAEwggP9AgEBME4wOjELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUlkZW5UcnVzdDEXMBUG A1UEAxMOVHJ1c3RJRCBDQSBBMTMCEEABgmmaL+s+f8XR8nIOXMwwDQYJYIZIAWUDBAIBBQCg ggKEMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MDYwNjE4 NDkyMlowLwYJKoZIhvcNAQkEMSIEIMIfQBIDc6qduqbuwMA0Uo37nzLn2bBbfXkTDgbYAjdp MF0GCSsGAQQBgjcQBDFQME4wOjELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUlkZW5UcnVzdDEX MBUGA1UEAxMOVHJ1c3RJRCBDQSBBMTMCEEABgmmaL+s+f8XR8nIOXMwwXwYLKoZIhvcNAQkQ AgsxUKBOMDoxCzAJBgNVBAYTAlVTMRIwEAYDVQQKEwlJZGVuVHJ1c3QxFzAVBgNVBAMTDlRy dXN0SUQgQ0EgQTEzAhBAAYJpmi/rPn/F0fJyDlzMMIIBVwYJKoZIhvcNAQkPMYIBSDCCAUQw CwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzANBggqhkiG9w0DAgIBBTAN BggqhkiG9w0DAgIBBTAHBgUrDgMCBzANBggqhkiG9w0DAgIBBTAHBgUrDgMCGjALBglghkgB ZQMEAgEwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCAzALBglghkgBZQMEAgQwCwYJYIZIAWUD BAIHMAsGCWCGSAFlAwQCCDALBglghkgBZQMEAgkwCwYJYIZIAWUDBAIKMAsGCSqGSIb3DQEB ATALBgkrgQUQhkg/AAIwCAYGK4EEAQsAMAgGBiuBBAELATAIBgYrgQQBCwIwCAYGK4EEAQsD MAsGCSuBBRCGSD8AAzAIBgYrgQQBDgAwCAYGK4EEAQ4BMAgGBiuBBAEOAjAIBgYrgQQBDgMw DQYJKoZIhvcNAQEBBQAEggEAC1fIOrEInqfKL4zvVeR92Ftwo5OCsHquGBdQywalcHMFpWOu emzxOB6x4BztEdWpAOBQsDEilulhWSNsEY22JzJJDx3fuSxeRJOe6aEvNzUpX/aYgvU7a/55 bE5S2GZX+qCwc05oJrJswTb/MJT/jHMTDgWFikbKVFb6bxXh1CQCuvbKGVvLT2m8H0tw8Ub1 igUEg0nLC4JTt8Z+MJnPhcdd41qtuuP9M3K+rY6ZCFkcv10ayInzZIuiduoT9hbuvk6Xg3/G M501PNuO/5hqLMPSYtpDkiJIz6m/Sa8F8Er7nzVwdcSp80M+x6GcGI1br9edoMz85R7zTmC8 kDmJ7wAAAAAAAA== --------------ms040702000009090505070304--