[28111] in Kerberos
Re: [modauthkerb] Negotiate on Windows with cross-realm trust ADand
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Thu Jul 26 12:32:52 2007
Message-ID: <46A8BC4B.4020705@anl.gov>
Date: Thu, 26 Jul 2007 10:22:51 -0500
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: mikkel@linet.dk
In-Reply-To: <1185459418.3002.10.camel@tux.lib.cbs.dk>
Content-Type: multipart/mixed; boundary="------------060601070401010404080506"
Cc: Markus Moeller <huaraz@moeller.plus.com>,
modauthkerb-help@lists.sourceforge.net, kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
This is a multi-part message in MIME format.
--------------060601070401010404080506
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Attached is the Wireshark print output of the GET request showing
the SPNEGO and GSSAPI
In original trace, the client does request a ticket to delegate
but it looks like it is not delegating it.
It looks like it is:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.5) Gecko/20070718 Fedora/2.0.0.5-1.fc7 Firefox/2.0.0.5\r\n
I Googled for:
FireFox SPNEGO delegation
and found among other articles:
http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/index.jsp?topic=/com.ibm.websphere.express.doc/info/exp/ae/tsec_SPNEGO_config_web.html
Complete the following steps to ensure that your Firefox browser is enabled to perform SPNEGO authentication.
At the desktop, log in to the windows active directory domain.
Activate Firefox.
At the address field, type about:config.
In the Filter, type network.n
Double click on network.negotiate-auth.trusted-uris. This preference lists the sites that are permitted to engage in SPNEGO Authentication with the browser. Enter a comma-delimited list of trusted domains or URLs.
Note: You must set the value for network.negotiate-auth.trusted-uris.
If the deployed SPNEGO solution is using the advanced Kerberos feature of Credential Delegation double click on network.negotiate-auth.delegation-uris. This preference lists the sites for which the browser may delegate user authorization to the server. Enter a comma-delimited list of trusted domains
or URLs.
Click OK. The configuration appears as updated.
Restart your Firefox browser to activate this configuration.
Mikkel Kruse Johnsen wrote:
> Hi Douglas
>
> Im not sure what to look for, but here is the dump. If you are able to
> see anything. Done with wireshark.
>
> /Mikkel
>
> On Wed, 2007-07-25 at 09:36 -0500, Douglas E. Engert wrote:
>> Looks like it should have worked.
>>
>> A wireshark trace of the packets would show a lot, as long as
>> the session is not encrypted.
>>
>> It could be a size issue. AD can produce very large tickets if you
>> are in many groups.
>>
>> It could be an enc-type issue, which the server does not understand
>>
>> It could be the client is not delegating.
>>
>> Wireshark could answer these.
>>
>>
>>
>> Mikkel Kruse Johnsen wrote:
>> >
>> >
>> > On Mon, 2007-07-23 at 16:27 -0500, Douglas E. Engert wrote:
>> >>
>> >> Mikkel Kruse Johnsen wrote:
>> >> > Hi Markus
>> >> >
>> >> > Yes that is what I want. I need the KRB5CCNAME (the credential) so I can
>> >> > login to my OpenLDAP SASL based server and PostgreSQL with kerberos.
>> >>
>> >> So what you need is the Kerberos credentials. I have an older version
>> >> of mod_auth_kerb I assume your version has the routine store_gss_creds()
>> >> which should be doing this for you and creating the name in the
>> >> create_krb5_ccache(). and calling
>> >> apr_table_setn(r->subprocess_env, "KRB5CCNAME", ccname);
>> >
>> > Yes it does contain that function, I'm using mod_auth_kerb 5.3
>> >
>> >>
>> >> Is KrbSaveCredentials being set in the conf file?
>> >
>> > Yes it is set. And I have set the:
>> >
>> > network.negotiate-auth.delegation-uris = cbs.dk,hhk.dk
>> > network.negotiate-auth.trusted-uris = cbs.dk,hhk.dk
>> >
>> > (Have tryied all kinds of combinations. This must be the right one.
>> >
>> >> This controls the saving of credentials:
>> >> if (conf->krb_save_credentials && delegated_cred != GSS_C_NO_CREDENTIAL)
>> >> store_gss_creds(...)
>> >>
>> >> Are the above routines being called.
>> >
>> > It seems that "delegated_cred = GSS_C_NO_CREDENTIAL" because the
>> > store_gss_creds is never called.
>> > Compiled the mod_auth_kerb with the attched and It is now called but I
>> > get in the log:
>> >
>> > [Wed Jul 25 11:53:27 2007] [debug] src/mod_auth_kerb.c(1358): [client
>> > 130.226.36.170] krb_save_credentials activated, GSS_C_DELEG_FLAG
>> > available, referer: http://od.cbs.dk/phpinfo.php
>> > [Wed Jul 25 11:53:27 2007] [error] [client 130.226.36.170] Cannot store
>> > delegated credential (gss_krb5_copy_ccache: Invalid credential was
>> > supplied (No error)), referer: http://od.cbs.dk/phpinfo.php
>> >
>> >>
>> >> Is the client actually delegating a credential.
>> >
>> > So it seems that the credential is never delegated.
>> >
>> >>
>> >> Is the KRB5CCNAME being set in the environment of the subprocess.
>> >
>> > Don't know how to check this. The KRB5CCNAME is in the env. with the
>> > attached patch but the credetials is never saved to that file.
>> >
>> >
>> > /Mikkel
>> >
>> >
>> >>
>> >>
>> >>
>> >> >
>> >> > /Mikkel
>> >> >
>> >> > On Mon, 2007-07-23 at 19:33 +0100, Markus Moeller wrote:
>> >> >>
>> >> >> Storing credentials in a krb5 cache pointing to KRB5CCNAME has nothing
>> >> >> to do with delegation. You only need delegation if you wnat that
>> >> >> Apache logs into a backend application with the users ID. Is that what
>> >> >> you want ? If see you need to be very careful as iit gives yor apache
>> >> >> server a lot of power if you don't use constraint delegation. You
>> >> >> need to protect it like a domain controller !!!
>> >> >>
>> >> >> Markus
>> >> >>
>> >> >>
>> >> >> "Mikkel Kruse Johnsen" <mikkel@linet.dk <mailto:mikkel@linet.dk> <mailto:mikkel@linet.dk> <mailto:mikkel@linet.dk>>
>> >> >> wrote in message news:1184745677.3078.5.camel@tux.lib.cbs.dk <mailto:1184745677.3078.5.camel@tux.lib.cbs.dk> <mailto:1184745677.3078.5.camel@tux.lib.cbs.dk>...
>> >> >>
>> >> >> Hi All
>> >> >>
>> >> >> That did the trick, recompiling krb5-1.5 (on RHEL5 64bit) with
>> >> >> that patch.
>> >> >>
>> >> >> Now I only have the problem that mod_auth_kerb don't write my
>> >> >> credentials to KRB5CCNAME (in PHP).
>> >> >>
>> >> >> My "kerbtray" under windows says it is Forwardable but no "Ok to
>> >> >> delegate", So I guess that is the problem.
>> >> >>
>> >> >> Under linux they are forwardable.
>> >> >>
>> >> >> ------
>> >> >> [mkj@tux ~]$ klist -f
>> >> >> Ticket cache: FILE:/tmp/krb5cc_500
>> >> >> Default principal: mkj.lib@HHK.DK <mailto:mkj.lib@HHK.DK> <mailto:mkj.lib@HHK.DK> <mailto:mkj.lib@HHK.DK>
>> >> >>
>> >> >> Valid starting Expires Service principal
>> >> >> 07/18/07 09:16:49 07/18/07 19:16:55 krbtgt/HHK.DK@HHK.DK <mailto:HHK.DK@HHK.DK> <mailto:HHK.DK@HHK.DK>
>> >> >> <mailto:HHK.DK@HHK.DK>
>> >> >> renew until 07/19/07 09:16:49, Flags: FRIA
>> >> >> 07/18/07 09:17:06 07/18/07 19:16:55 krbtgt/CBS.DK@HHK.DK <mailto:CBS.DK@HHK.DK> <mailto:CBS.DK@HHK.DK>
>> >> >> <mailto:CBS.DK@HHK.DK>
>> >> >> renew until 07/19/07 09:16:49, Flags: FRAO
>> >> >> 07/18/07 09:17:04 07/18/07 19:16:55 HTTP/sugi.cbs.dk@CBS.DK <mailto:sugi.cbs.dk@CBS.DK> <mailto:sugi.cbs.dk@CBS.DK>
>> >> >> <mailto:sugi.cbs.dk@CBS.DK>
>> >> >> renew until 07/18/07 09:17:04, Flags: FRAT
>> >> >> 07/18/07 09:35:35 07/18/07 19:16:55 host/sugi.cbs.dk@CBS.DK <mailto:sugi.cbs.dk@CBS.DK> <mailto:sugi.cbs.dk@CBS.DK>
>> >> >> <mailto:sugi.cbs.dk@CBS.DK>
>> >> >> renew until 07/18/07 09:35:35, Flags: FRAT
>> >> >>
>> >> >>
>> >> >> Kerberos 4 ticket cache: /tmp/tkt500
>> >> >> klist: You have no tickets cached
>> >> >> --------
>> >> >>
>> >> >>
>> >> >> I found how to set ok-as-delegate for heimdal how is this done for
>> >> >> MIT kerberos ?
>> >> >>
>> >> >> And how is it done under MS AD ?
>> >> >>
>> >> >> /Mikkel
>> >> >>
>> >> >>
>> >> >> On Tue, 2007-07-17 at 21:25 +0200, Achim Grolms wrote:
>> >> >>> On Tuesday 17 July 2007 09:41, Mikkel Kruse Johnsen wrote:
>> >> >>>
>> >> >>> > gss_accept_sec_context() failed: Unspecified GSS failure. Minor code
>> >> >>> > may provide more information (Cannot allocate memory)
>> >> >>>
>> >> >>> What OS and what Kerberoslibs do you use?
>> >> >>> Background of this question:
>> >> >>>
>> >> >>> I've seen this errormessage "Cannot allocate memory"
>> >> >>> (and it's solution) in
>> >> >>>
>> >> >>> <http://sourceforge.net/mailarchive/forum.php?thread_name=2306E39C-CE49-4CC2-A902-4AE1C40E486E%40neosaint.org&forum_name=modauthkerb-help <http://sourceforge.net/mailarchive/forum.php?thread_name=2306E39C-CE49-4CC2-A902-4AE1C40E486E%40neosaint.org&forum_name=modauthkerb-help> <http://sourceforge.net/mailarchive/forum.php?thread_name=2306E39C-CE49-4CC2-A902-4AE1C40E486E%40neosaint.org&forum_name=modauthkerb-help <http://sourceforge.net/mailarchive/forum.php?thread_name=2306E39C-CE49-4CC2-A902-4AE1C40E486E%40neosaint.org&forum_name=modauthkerb-help>> <http://sourceforge.net/mailarchive/forum.php?thread_name=2306E39C-CE49-4CC2-A902-4AE1C40E486E%40neosaint.org&forum_name=modauthkerb-help <http://sourceforge.net/mailarchive/forum.php?thread_name=2306E39C-CE49-4CC2-A902-4AE1C40E486E%40neosaint.org&forum_name=modauthkerb-help> <http://sourceforge.net/mailarchive/forum.php?thread_name=2306E39C-CE49-4CC2-A902-4AE1C40E486E%40neosaint.org&forum_name=modauthkerb-help <http
://sourceforge.net/mailarchive/forum.php?thread_name=2306E39C-CE49-4CC2-A902-4AE1C40E486E%40neosaint.org&forum_name=modauthkerb-help>>>>
>> >> >>>
>> >> >>> Achim
>> >> >> Mikkel Kruse Johnsen
>> >> >> Linet
>> >> >> Ørholmgade 6 st tv
>> >> >> 2200 København N
>> >> >>
>> >> >> Tlf: +45 2128 7793
>> >> >> email: mikkel@linet.dk <mailto:mikkel@linet.dk> <mailto:mikkel@linet.dk>
>> >> >> www: http://www.linet.dk
>> >> >>
>> >> >>
>> >> >> ------------------------------------------------------------------------
>> >> >>
>> >> >>
>> >> >> -------------------------------------------------------------------------
>> >> >> This SF.net email is sponsored by DB2 Express
>> >> >> Download DB2 Express C - the FREE version of DB2 express and take
>> >> >> control of your XML. No limits. Just data. Click to get it now.
>> >> >> http://sourceforge.net/powerbar/db2/
>> >> >>
>> >> >> ------------------------------------------------------------------------
>> >> >>
>> >> >>
>> >> >> _______________________________________________
>> >> >> modauthkerb-help mailing list
>> >> >> modauthkerb-help@lists.sourceforge.net <mailto:modauthkerb-help@lists.sourceforge.net> <mailto:modauthkerb-help@lists.sourceforge.net>
>> >> >> https://lists.sourceforge.net/lists/listinfo/modauthkerb-help
>> >> >>
>> >> >>
>> >> >> -------------------------------------------------------------------------
>> >> >> This SF.net email is sponsored by: Splunk Inc.
>> >> >> Still grepping through log files to find problems? Stop.
>> >> >> Now Search log events and configuration files using AJAX and a browser.
>> >> >> Download your FREE copy of Splunk now >> http://get.splunk.com/
>> >> >>
>> >> >>
>> >> >> _______________________________________________
>> >> >> modauthkerb-help mailing list
>> >> >> modauthkerb-help@lists.sourceforge.net <mailto:modauthkerb-help@lists.sourceforge.net> <mailto:modauthkerb-help@lists.sourceforge.net> <mailto:modauthkerb-help@lists.sourceforge.net>
>> >> >> https://lists.sourceforge.net/lists/listinfo/modauthkerb-help
>> >> >>
>> >> >>
>> >> >> !DSPAM:46a4f4bb190711804284693!
>> >> > *Mikkel Kruse Johnsen*
>> >> > Adm.Dir.
>> >> >
>> >> > *Linet <http://www.linet.dk>*
>> >> > Ørholmgade 6 st tv
>> >> > <http://maps.google.com/maps?q=%D8rholmgade+6+st+tv%2CCopenhagen+N+2200%2CDenmark&hl=en <http://maps.google.com/maps?q=%D8rholmgade+6+st+tv%2CCopenhagen+N+2200%2CDenmark&hl=en> <http://maps.google.com/maps?q=%D8rholmgade+6+st+tv%2CCopenhagen+N+2200%2CDenmark&hl=en <http://maps.google.com/maps?q=%D8rholmgade+6+st+tv%2CCopenhagen+N+2200%2CDenmark&hl=en>>>
>> >> > Copenhagen N 2200 Denmark *Work:* +45 21287793
>> >> > *Mobile:* +45 21287793
>> >> > *Email:* mikkel@linet.dk <mailto:mikkel@linet.dk> <mailto:mikkel@linet.dk> <mailto:mikkel@linet.dk>
>> >> > *IM:* mikkel@linet.dk <mailto:mikkel@linet.dk> <mailto:mikkel@linet.dk> (MSN)
>> >> > *Professional Profile <http://www.linkedin.com/pub/3/333/803>*
>> >> > *Healthcare <http://www.xmedicus.dk>*
>> >> >
>> >> > Network Consultant
>> >> >
>> >> >
>> >> > ------------------------------------------------------------------------
>> >> >
>> >> > -------------------------------------------------------------------------
>> >> > This SF.net email is sponsored by: Splunk Inc.
>> >> > Still grepping through log files to find problems? Stop.
>> >> > Now Search log events and configuration files using AJAX and a browser.
>> >> > Download your FREE copy of Splunk now >> http://get.splunk.com/
>> >> >
>> >> >
>> >> > ------------------------------------------------------------------------
>> >> >
>> >> > _______________________________________________
>> >> > modauthkerb-help mailing list
>> >> > modauthkerb-help@lists.sourceforge.net <mailto:modauthkerb-help@lists.sourceforge.net> <mailto:modauthkerb-help@lists.sourceforge.net>
>> >> > https://lists.sourceforge.net/lists/listinfo/modauthkerb-help
>> >>
>> > Mikkel Kruse Johnsen
>> > Linet
>> > Ørholmgade 6 st tv
>> > 2200 København N
>> >
>> > Tlf: +45 2128 7793
>> > email: mikkel@linet.dk <mailto:mikkel@linet.dk>
>> > www: http://www.linet.dk
>> >
>> >
>> > ------------------------------------------------------------------------
>> >
>> > diff -r -u mod_auth_kerb-5.3.orig/src/mod_auth_kerb.c mod_auth_kerb-5.3/src/mod_auth_kerb.c
>> > --- mod_auth_kerb-5.3.orig/src/mod_auth_kerb.c 2007-07-25 11:38:20.000000000 +0200
>> > +++ mod_auth_kerb-5.3/src/mod_auth_kerb.c 2007-07-25 11:42:40.000000000 +0200
>> > @@ -1215,6 +1215,8 @@
>> > spnego_oid.length = 6;
>> > spnego_oid.elements = (void *)"\x2b\x06\x01\x05\x05\x02";
>> >
>> > + OM_uint32 acc_ret_flags;
>> > +
>> > if (conf->krb_5_keytab) {
>> > char *ktname;
>> > /* we don't use the ap_* calls here, since the string passed to putenv()
>> > @@ -1277,7 +1279,7 @@
>> > &client_name,
>> > NULL,
>> > &output_token,
>> > - NULL,
>> > + &acc_ret_flags,
>> > NULL,
>> > &delegated_cred);
>> > log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,
>> > @@ -1351,8 +1353,18 @@
>> > }
>> > #endif
>> >
>> > - if (conf->krb_save_credentials && delegated_cred != GSS_C_NO_CREDENTIAL)
>> > - store_gss_creds(r, conf, (char *)output_token.value, delegated_cred);
>> > + if (conf->krb_save_credentials) {
>> > + if ( acc_ret_flags & GSS_C_DELEG_FLAG ) {
>> > + log_rerror( APLOG_MARK, APLOG_DEBUG, 0, r,
>> > + "krb_save_credentials activated, GSS_C_DELEG_FLAG available", "" );
>> > +
>> > + store_gss_creds(r, conf, (char *)output_token.value, delegated_cred);
>> > + }
>> > + else {
>> > + log_rerror( APLOG_MARK, APLOG_ERR, 0, r,
>> > + "krb_save_credentials activated, no GSS_C_DELEG_FLAG", "" );
>> > + }
>> > + }
>> >
>> > gss_release_buffer(&minor_status, &output_token);
>> >
>>
> Mikkel Kruse Johnsen
> Linet
> Ørholmgade 6 st tv
> 2200 København N
>
> Tlf: +45 2128 7793
> email: mikkel@linet.dk
> www: http://www.linet.dk
>
>
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> modauthkerb-help mailing list
> modauthkerb-help@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/modauthkerb-help
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
--------------060601070401010404080506
Content-Type: text/plain;
name="wireshark.txt"
Content-Transfer-Encoding: base64
Content-Disposition: inline;
filename="wireshark.txt"
Tm8uICAgICBUaW1lICAgICAgICAgICAgU291cmNlICAgICAgICAgICAgICAgIERlc3RpbmF0
aW9uICAgICAgICAgICBQcm90b2NvbCBJbmZvDQogICAgIDE2IDA5OjE0OjEyLjA2MDE3OSAx
MzAuMjI2LjM2LjE3MCAgICAgICAgMTMwLjIyNi4zNi4xOTEgICAgICAgIEhUVFAgICAgIEdF
VCAvdGVzdC5waHAgSFRUUC8xLjENCg0KRnJhbWUgMTYgKDE1MTQgYnl0ZXMgb24gd2lyZSwg
MTUxNCBieXRlcyBjYXB0dXJlZCkNCiAgICBBcnJpdmFsIFRpbWU6IEp1bCAyNiwgMjAwNyAw
OToxNDoxMi4wNjAxNzkwMDANCiAgICBbVGltZSBkZWx0YSBmcm9tIHByZXZpb3VzIGNhcHR1
cmVkIGZyYW1lOiAwLjAwMDA1MzAwMCBzZWNvbmRzXQ0KICAgIFtUaW1lIGRlbHRhIGZyb20g
cHJldmlvdXMgZGlzcGxheWVkIGZyYW1lOiAwLjAwMDA1MzAwMCBzZWNvbmRzXQ0KICAgIFtU
aW1lIHNpbmNlIHJlZmVyZW5jZSBvciBmaXJzdCBmcmFtZTogMC4wNTg4OTYwMDAgc2Vjb25k
c10NCiAgICBGcmFtZSBOdW1iZXI6IDE2DQogICAgRnJhbWUgTGVuZ3RoOiAxNTE0IGJ5dGVz
DQogICAgQ2FwdHVyZSBMZW5ndGg6IDE1MTQgYnl0ZXMNCiAgICBbRnJhbWUgaXMgbWFya2Vk
OiBGYWxzZV0NCiAgICBbUHJvdG9jb2xzIGluIGZyYW1lOiBldGg6aXA6dGNwOmh0dHA6Z3Nz
LWFwaTpzcG5lZ286c3BuZWdvLWtyYjVdDQogICAgW0NvbG9yaW5nIFJ1bGUgTmFtZTogQ2hl
Y2tzdW0gRXJyb3JzXQ0KICAgIFtDb2xvcmluZyBSdWxlIFN0cmluZzogY2RwLmNoZWNrc3Vt
X2JhZD09MSB8fCBlZHAuY2hlY2tzdW1fYmFkPT0xIHx8IGlwLmNoZWNrc3VtX2JhZD09MSB8
fCB0Y3AuY2hlY2tzdW1fYmFkPT0xIHx8IHVkcC5jaGVja3N1bV9iYWQ9PTFdDQpFdGhlcm5l
dCBJSSwgU3JjOiBIZXdsZXR0UF9mMTpmYjo0YSAoMDA6MTE6ODU6ZjE6ZmI6NGEpLCBEc3Q6
IElibV9hNDphNzozMCAoMDA6MTQ6NWU6YTQ6YTc6MzApDQpJbnRlcm5ldCBQcm90b2NvbCwg
U3JjOiAxMzAuMjI2LjM2LjE3MCAoMTMwLjIyNi4zNi4xNzApLCBEc3Q6IDEzMC4yMjYuMzYu
MTkxICgxMzAuMjI2LjM2LjE5MSkNClRyYW5zbWlzc2lvbiBDb250cm9sIFByb3RvY29sLCBT
cmMgUG9ydDogNTkxNjggKDU5MTY4KSwgRHN0IFBvcnQ6IGh0dHAgKDgwKSwgU2VxOiAxLCBB
Y2s6IDEsIExlbjogMTQ0OA0KSHlwZXJ0ZXh0IFRyYW5zZmVyIFByb3RvY29sDQogICAgR0VU
IC90ZXN0LnBocCBIVFRQLzEuMVxyXG4NCiAgICAgICAgUmVxdWVzdCBNZXRob2Q6IEdFVA0K
ICAgICAgICBSZXF1ZXN0IFVSSTogL3Rlc3QucGhwDQogICAgICAgIFJlcXVlc3QgVmVyc2lv
bjogSFRUUC8xLjENCiAgICBIb3N0OiBvZC5jYnMuZGtcclxuDQogICAgVXNlci1BZ2VudDog
TW96aWxsYS81LjAgKFgxMTsgVTsgTGludXggaTY4NjsgZW4tVVM7IHJ2OjEuOC4xLjUpIEdl
Y2tvLzIwMDcwNzE4IEZlZG9yYS8yLjAuMC41LTEuZmM3IEZpcmVmb3gvMi4wLjAuNVxyXG4N
CiAgICBBY2NlcHQ6IHRleHQveG1sLGFwcGxpY2F0aW9uL3htbCxhcHBsaWNhdGlvbi94aHRt
bCt4bWwsdGV4dC9odG1sO3E9MC45LHRleHQvcGxhaW47cT0wLjgsaW1hZ2UvcG5nLCovKjtx
PTAuNVxyXG4NCiAgICBBY2NlcHQtTGFuZ3VhZ2U6IGRhLGVuLXVzO3E9MC43LGVuO3E9MC4z
XHJcbg0KICAgIEFjY2VwdC1FbmNvZGluZzogZ3ppcCxkZWZsYXRlXHJcbg0KICAgIEFjY2Vw
dC1DaGFyc2V0OiBVVEYtOCwqXHJcbg0KICAgIEtlZXAtQWxpdmU6IDMwMFxyXG4NCiAgICBD
b25uZWN0aW9uOiBrZWVwLWFsaXZlXHJcbg0KICAgIENvb2tpZTogbmV0Lmluc3RhZGlhLmNs
aWVudHN0ZXAucGVyc2lzdC4xPTFANDJAdS8yYjBiMGIwMDFhYjYzYTlkZGY1ZDBiYzkwMGFh
ZjMzMjJiMTVhZWQ1OyBfX3V0bWE9ODY5MTI5NzAuMTkzODk2NzY1Mi4xMTU0NTEzNTAyLjEx
ODUyODIzNDcuMTE4NTQ1MzA5Ni4yMDQ7IF9fdXRtej04NjkxMjk3MC4xMTgzNDU5MzMwLjE5
NC4yNi51dG1jY249KHJlZmVycmFsKXx1dG1jc3I9bXVodWh1LmNicy5ka3x1dG1jY3Q9L29t
DQogICAgQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0wLCBtYXgtYWdlPTBcclxuDQogICAgQXV0
aG9yaXphdGlvbjogTmVnb3RpYXRlIFlJSUQ3Z1lHS3dZQkJRVUNvSUlENGpDQ0E5NmdIekFk
QmdrcWhraUc5eElCQWdJR0JTc0ZBUVVDQmdrcWhraUM5eElCQWdLaEJBTUNBUUtpZ2dPekJJ
SURyMkNDQTZzR0NTcUdTSWIzRWdFQ0FnRUFib0lEbWpDQ0E1YWdBd0lCQmFFREFnRU9vZ2NE
QlFBQUFBQUFvNEhqWVlIZ01JSGRvQU1DQVFXaENCc0dRMEpUTGtSTG9oNHdIS0FEQWdFRG9S
VXdFeHNFU0ZSVVVCc0xjM1ZuYVMNCiAgICAgICAgR1NTLUFQSSBHZW5lcmljIFNlY3VyaXR5
IFNlcnZpY2UgQXBwbGljYXRpb24gUHJvZ3JhbSBJbnRlcmZhY2UNCiAgICAgICAgICAgIE9J
RDogMS4zLjYuMS41LjUuMiAoU1BORUdPIC0gU2ltcGxlIFByb3RlY3RlZCBOZWdvdGlhdGlv
bikNCiAgICAgICAgICAgIFNQTkVHTw0KICAgICAgICAgICAgICAgIG5lZ1Rva2VuSW5pdA0K
ICAgICAgICAgICAgICAgICAgICBtZWNoVHlwZXM6IDMgaXRlbXMNCiAgICAgICAgICAgICAg
ICAgICAgICAgIEl0ZW06IDEuMi44NDAuMTEzNTU0LjEuMi4yIChLUkI1IC0gS2VyYmVyb3Mg
NSkNCiAgICAgICAgICAgICAgICAgICAgICAgIEl0ZW06IDEuMy41LjEuNS4yIChTTk1QdjIt
U01JOjpvcmcuNS4xLjUuMikNCiAgICAgICAgICAgICAgICAgICAgICAgIEl0ZW06IDEuMi44
NDAuNDgwMTguMS4yLjIgKE1TIEtSQjUgLSBNaWNyb3NvZnQgS2VyYmVyb3MgNSkNCiAgICAg
ICAgICAgICAgICAgICAgUGFkZGluZzogMQ0KICAgICAgICAgICAgICAgICAgICByZXFGbGFn
czogMDIgKGludGVnRmxhZykNCiAgICAgICAgICAgICAgICAgICAgICAgIDAuLi4gLi4uLiA9
IGRlbGVnRmxhZzogRmFsc2UNCiAgICAgICAgICAgICAgICAgICAgICAgIC4wLi4gLi4uLiA9
IG11dHVhbEZsYWc6IEZhbHNlDQogICAgICAgICAgICAgICAgICAgICAgICAuLjAuIC4uLi4g
PSByZXBsYXlGbGFnOiBGYWxzZQ0KICAgICAgICAgICAgICAgICAgICAgICAgLi4uMCAuLi4u
ID0gc2VxdWVuY2VGbGFnOiBGYWxzZQ0KICAgICAgICAgICAgICAgICAgICAgICAgLi4uLiAw
Li4uID0gYW5vbkZsYWc6IEZhbHNlDQogICAgICAgICAgICAgICAgICAgICAgICAuLi4uIC4w
Li4gPSBjb25mRmxhZzogRmFsc2UNCiAgICAgICAgICAgICAgICAgICAgICAgIC4uLi4gLi4x
LiA9IGludGVnRmxhZzogVHJ1ZQ0KICAgICAgICAgICAgICAgICAgICBtZWNoVG9rZW46IDYw
ODIwM0FCMDYwOTJBODY0ODg2RjcxMjAxMDIwMjAxMDA2RTgyMDM5QTMwODIwMy4uLg0KICAg
ICAgICAgICAgICAgICAgICBrcmI1X2Jsb2I6IDYwODIwM0FCMDYwOTJBODY0ODg2RjcxMjAx
MDIwMjAxMDA2RTgyMDM5QTMwODIwMy4uLg0KICAgICAgICAgICAgICAgICAgICAgICAgS1JC
NSBPSUQ6IDEuMi44NDAuMTEzNTU0LjEuMi4yIChLUkI1IC0gS2VyYmVyb3MgNSkNCiAgICAg
ICAgICAgICAgICAgICAgICAgIGtyYjVfdG9rX2lkOiBLUkI1X0FQX1JFUSAoMHgwMDAxKQ0K
ICAgICAgICAgICAgICAgICAgICAgICAgS2VyYmVyb3MgQVAtUkVRDQogICAgICAgICAgICAg
ICAgICAgICAgICAgICAgUHZubzogNQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1T
RyBUeXBlOiBBUC1SRVEgKDE0KQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBhZGRp
bmc6IDANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICBBUE9wdGlvbnM6IDAwMDAwMDAw
DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4wLi4gLi4uLiAuLi4uIC4uLi4g
Li4uLiAuLi4uIC4uLi4gLi4uLiA9IFVzZSBTZXNzaW9uIEtleTogRG8gTk9UIHVzZSB0aGUg
c2Vzc2lvbiBrZXkgdG8gZW5jcnlwdCB0aGUgdGlja2V0DQogICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgIC4uMC4gLi4uLiAuLi4uIC4uLi4gLi4uLiAuLi4uIC4uLi4gLi4uLiA9
IE11dHVhbCByZXF1aXJlZDogTXV0dWFsIGF1dGhlbnRpY2F0aW9uIGlzIE5PVCByZXF1aXJl
ZA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRpY2tldA0KICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICBUa3Qtdm5vOiA1DQogICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgIFJlYWxtOiBDQlMuREsNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
U2VydmVyIE5hbWUgKFNlcnZpY2UgYW5kIEhvc3QpOiBIVFRQL3N1Z2kuY2JzLmRrDQogICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOYW1lLXR5cGU6IFNlcnZpY2UgYW5k
IEhvc3QgKDMpDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOYW1lOiBI
VFRQDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOYW1lOiBzdWdpLmNi
cy5kaw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBlbmMtcGFydCBkZXMtY2Jj
LWNyYw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRW5jcnlwdGlvbiB0
eXBlOiBkZXMtY2JjLWNyYyAoMSkNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgIEt2bm86IDMNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGVuYy1w
YXJ0OiBDQjgzNUNGMkRCRkUxNkQwMjREQjRGNjdBNTcyQkFDNjFDMDdCNDM4OURGOTRDRDYu
Li4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICBBdXRoZW50aWNhdG9yIGRlcy1jYmMt
Y3JjDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEVuY3J5cHRpb24gdHlwZTog
ZGVzLWNiYy1jcmMgKDEpDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEF1dGhl
bnRpY2F0b3IgZGF0YTogQ0Q2NEFGM0Y1MzUzQ0ZBOTRFMEU3QTUyRkY3MjY5QzQwNEQxRUQ0
MjJBQzlBRDg0Li4uDQoNCkZyYW1lICgxNTE0IGJ5dGVzKToNCg0KMDAwMCAgMDAgMTQgNWUg
YTQgYTcgMzAgMDAgMTEgODUgZjEgZmIgNGEgMDggMDAgNDUgMDAgICAuLl4uLjAuLi4uLkou
LkUuDQowMDEwICAwNSBkYyAzNyA4ZSA0MCAwMCA0MCAwNiBhZSA2MCA4MiBlMiAyNCBhYSA4
MiBlMiAgIC4uNy5ALkAuLmAuLiQuLi4NCjAwMjAgIDI0IGJmIGU3IDIwIDAwIDUwIDA5IGIz
IDQyIGQ5IDhlIDNkIDc3IDZjIDgwIDEwICAgJC4uIC5QLi5CLi49d2wuLg0KMDAzMCAgMDAg
MmUgNTQgZmMgMDAgMDAgMDEgMDEgMDggMGEgMDEgOTkgNzUgNTUgMmEgOWUgICAuLlQuLi4u
Li4uLi51VSouDQowMDQwICBmMiA1OSA0NyA0NSA1NCAyMCAyZiA3NCA2NSA3MyA3NCAyZSA3
MCA2OCA3MCAyMCAgIC5ZR0VUIC90ZXN0LnBocCANCjAwNTAgIDQ4IDU0IDU0IDUwIDJmIDMx
IDJlIDMxIDBkIDBhIDQ4IDZmIDczIDc0IDNhIDIwICAgSFRUUC8xLjEuLkhvc3Q6IA0KMDA2
MCAgNmYgNjQgMmUgNjMgNjIgNzMgMmUgNjQgNmIgMGQgMGEgNTUgNzMgNjUgNzIgMmQgICBv
ZC5jYnMuZGsuLlVzZXItDQowMDcwICA0MSA2NyA2NSA2ZSA3NCAzYSAyMCA0ZCA2ZiA3YSA2
OSA2YyA2YyA2MSAyZiAzNSAgIEFnZW50OiBNb3ppbGxhLzUNCjAwODAgIDJlIDMwIDIwIDI4
IDU4IDMxIDMxIDNiIDIwIDU1IDNiIDIwIDRjIDY5IDZlIDc1ICAgLjAgKFgxMTsgVTsgTGlu
dQ0KMDA5MCAgNzggMjAgNjkgMzYgMzggMzYgM2IgMjAgNjUgNmUgMmQgNTUgNTMgM2IgMjAg
NzIgICB4IGk2ODY7IGVuLVVTOyByDQowMGEwICA3NiAzYSAzMSAyZSAzOCAyZSAzMSAyZSAz
NSAyOSAyMCA0NyA2NSA2MyA2YiA2ZiAgIHY6MS44LjEuNSkgR2Vja28NCjAwYjAgIDJmIDMy
IDMwIDMwIDM3IDMwIDM3IDMxIDM4IDIwIDQ2IDY1IDY0IDZmIDcyIDYxICAgLzIwMDcwNzE4
IEZlZG9yYQ0KMDBjMCAgMmYgMzIgMmUgMzAgMmUgMzAgMmUgMzUgMmQgMzEgMmUgNjYgNjMg
MzcgMjAgNDYgICAvMi4wLjAuNS0xLmZjNyBGDQowMGQwICA2OSA3MiA2NSA2NiA2ZiA3OCAy
ZiAzMiAyZSAzMCAyZSAzMCAyZSAzNSAwZCAwYSAgIGlyZWZveC8yLjAuMC41Li4NCjAwZTAg
IDQxIDYzIDYzIDY1IDcwIDc0IDNhIDIwIDc0IDY1IDc4IDc0IDJmIDc4IDZkIDZjICAgQWNj
ZXB0OiB0ZXh0L3htbA0KMDBmMCAgMmMgNjEgNzAgNzAgNmMgNjkgNjMgNjEgNzQgNjkgNmYg
NmUgMmYgNzggNmQgNmMgICAsYXBwbGljYXRpb24veG1sDQowMTAwICAyYyA2MSA3MCA3MCA2
YyA2OSA2MyA2MSA3NCA2OSA2ZiA2ZSAyZiA3OCA2OCA3NCAgICxhcHBsaWNhdGlvbi94aHQN
CjAxMTAgIDZkIDZjIDJiIDc4IDZkIDZjIDJjIDc0IDY1IDc4IDc0IDJmIDY4IDc0IDZkIDZj
ICAgbWwreG1sLHRleHQvaHRtbA0KMDEyMCAgM2IgNzEgM2QgMzAgMmUgMzkgMmMgNzQgNjUg
NzggNzQgMmYgNzAgNmMgNjEgNjkgICA7cT0wLjksdGV4dC9wbGFpDQowMTMwICA2ZSAzYiA3
MSAzZCAzMCAyZSAzOCAyYyA2OSA2ZCA2MSA2NyA2NSAyZiA3MCA2ZSAgIG47cT0wLjgsaW1h
Z2UvcG4NCjAxNDAgIDY3IDJjIDJhIDJmIDJhIDNiIDcxIDNkIDMwIDJlIDM1IDBkIDBhIDQx
IDYzIDYzICAgZywqLyo7cT0wLjUuLkFjYw0KMDE1MCAgNjUgNzAgNzQgMmQgNGMgNjEgNmUg
NjcgNzUgNjEgNjcgNjUgM2EgMjAgNjQgNjEgICBlcHQtTGFuZ3VhZ2U6IGRhDQowMTYwICAy
YyA2NSA2ZSAyZCA3NSA3MyAzYiA3MSAzZCAzMCAyZSAzNyAyYyA2NSA2ZSAzYiAgICxlbi11
cztxPTAuNyxlbjsNCjAxNzAgIDcxIDNkIDMwIDJlIDMzIDBkIDBhIDQxIDYzIDYzIDY1IDcw
IDc0IDJkIDQ1IDZlICAgcT0wLjMuLkFjY2VwdC1Fbg0KMDE4MCAgNjMgNmYgNjQgNjkgNmUg
NjcgM2EgMjAgNjcgN2EgNjkgNzAgMmMgNjQgNjUgNjYgICBjb2Rpbmc6IGd6aXAsZGVmDQow
MTkwICA2YyA2MSA3NCA2NSAwZCAwYSA0MSA2MyA2MyA2NSA3MCA3NCAyZCA0MyA2OCA2MSAg
IGxhdGUuLkFjY2VwdC1DaGENCjAxYTAgIDcyIDczIDY1IDc0IDNhIDIwIDU1IDU0IDQ2IDJk
IDM4IDJjIDJhIDBkIDBhIDRiICAgcnNldDogVVRGLTgsKi4uSw0KMDFiMCAgNjUgNjUgNzAg
MmQgNDEgNmMgNjkgNzYgNjUgM2EgMjAgMzMgMzAgMzAgMGQgMGEgICBlZXAtQWxpdmU6IDMw
MC4uDQowMWMwICA0MyA2ZiA2ZSA2ZSA2NSA2MyA3NCA2OSA2ZiA2ZSAzYSAyMCA2YiA2NSA2
NSA3MCAgIENvbm5lY3Rpb246IGtlZXANCjAxZDAgIDJkIDYxIDZjIDY5IDc2IDY1IDBkIDBh
IDQzIDZmIDZmIDZiIDY5IDY1IDNhIDIwICAgLWFsaXZlLi5Db29raWU6IA0KMDFlMCAgNmUg
NjUgNzQgMmUgNjkgNmUgNzMgNzQgNjEgNjQgNjkgNjEgMmUgNjMgNmMgNjkgICBuZXQuaW5z
dGFkaWEuY2xpDQowMWYwICA2NSA2ZSA3NCA3MyA3NCA2NSA3MCAyZSA3MCA2NSA3MiA3MyA2
OSA3MyA3NCAyZSAgIGVudHN0ZXAucGVyc2lzdC4NCjAyMDAgIDMxIDNkIDMxIDQwIDM0IDMy
IDQwIDc1IDJmIDMyIDYyIDMwIDYyIDMwIDYyIDMwICAgMT0xQDQyQHUvMmIwYjBiMA0KMDIx
MCAgMzAgMzEgNjEgNjIgMzYgMzMgNjEgMzkgNjQgNjQgNjYgMzUgNjQgMzAgNjIgNjMgICAw
MWFiNjNhOWRkZjVkMGJjDQowMjIwICAzOSAzMCAzMCA2MSA2MSA2NiAzMyAzMyAzMiAzMiA2
MiAzMSAzNSA2MSA2NSA2NCAgIDkwMGFhZjMzMjJiMTVhZWQNCjAyMzAgIDM1IDNiIDIwIDVm
IDVmIDc1IDc0IDZkIDYxIDNkIDM4IDM2IDM5IDMxIDMyIDM5ICAgNTsgX191dG1hPTg2OTEy
OQ0KMDI0MCAgMzcgMzAgMmUgMzEgMzkgMzMgMzggMzkgMzYgMzcgMzYgMzUgMzIgMmUgMzEg
MzEgICA3MC4xOTM4OTY3NjUyLjExDQowMjUwICAzNSAzNCAzNSAzMSAzMyAzNSAzMCAzMiAy
ZSAzMSAzMSAzOCAzNSAzMiAzOCAzMiAgIDU0NTEzNTAyLjExODUyODINCjAyNjAgIDMzIDM0
IDM3IDJlIDMxIDMxIDM4IDM1IDM0IDM1IDMzIDMwIDM5IDM2IDJlIDMyICAgMzQ3LjExODU0
NTMwOTYuMg0KMDI3MCAgMzAgMzQgM2IgMjAgNWYgNWYgNzUgNzQgNmQgN2EgM2QgMzggMzYg
MzkgMzEgMzIgICAwNDsgX191dG16PTg2OTEyDQowMjgwICAzOSAzNyAzMCAyZSAzMSAzMSAz
OCAzMyAzNCAzNSAzOSAzMyAzMyAzMCAyZSAzMSAgIDk3MC4xMTgzNDU5MzMwLjENCjAyOTAg
IDM5IDM0IDJlIDMyIDM2IDJlIDc1IDc0IDZkIDYzIDYzIDZlIDNkIDI4IDcyIDY1ICAgOTQu
MjYudXRtY2NuPShyZQ0KMDJhMCAgNjYgNjUgNzIgNzIgNjEgNmMgMjkgN2MgNzUgNzQgNmQg
NjMgNzMgNzIgM2QgNmQgICBmZXJyYWwpfHV0bWNzcj1tDQowMmIwICA3NSA2OCA3NSA2OCA3
NSAyZSA2MyA2MiA3MyAyZSA2NCA2YiA3YyA3NSA3NCA2ZCAgIHVodWh1LmNicy5ka3x1dG0N
CjAyYzAgIDYzIDYzIDc0IDNkIDJmIDZmIDZkIDVmIDYzIDYyIDczIDJmIDZmIDZkIDVmIDc3
ICAgY2N0PS9vbV9jYnMvb21fdw0KMDJkMCAgNzcgNzcgNWYgNjMgNjIgNzMgNWYgNjQgNmIg
MmYgNzMgNWYgNjcgNWYgNjMgNjIgICB3d19jYnNfZGsvc19nX2NiDQowMmUwICA3MyA1ZiA2
NCA2YiA3YyA3NSA3NCA2ZCA2MyA2ZCA2NCAzZCA3MiA2NSA2NiA2NSAgIHNfZGt8dXRtY21k
PXJlZmUNCjAyZjAgIDcyIDcyIDYxIDZjIDNiIDIwIDUwIDQ4IDUwIDUzIDQ1IDUzIDUzIDQ5
IDQ0IDNkICAgcnJhbDsgUEhQU0VTU0lEPQ0KMDMwMCAgMzEgMzAgNjMgNjUgMzYgNjUgMzcg
MzcgNjMgMzAgNjQgMzUgNjMgNjQgMzkgMzMgICAxMGNlNmU3N2MwZDVjZDkzDQowMzEwICAz
NyAzMyA2MyAzMyA2NCA2NSAzMCA2NiAzMyA2NSAzOCA2NiAzMyA2NiAzMiAzMiAgIDczYzNk
ZTBmM2U4ZjNmMjINCjAzMjAgIDNiIDIwIDVmIDVmIDc1IDc0IDZkIDYzIDNkIDM4IDM2IDM5
IDMxIDMyIDM5IDM3ICAgOyBfX3V0bWM9ODY5MTI5Nw0KMDMzMCAgMzAgMGQgMGEgNDMgNjEg
NjMgNjggNjUgMmQgNDMgNmYgNmUgNzQgNzIgNmYgNmMgICAwLi5DYWNoZS1Db250cm9sDQow
MzQwICAzYSAyMCA2ZCA2MSA3OCAyZCA2MSA2NyA2NSAzZCAzMCAyYyAyMCA2ZCA2MSA3OCAg
IDogbWF4LWFnZT0wLCBtYXgNCjAzNTAgIDJkIDYxIDY3IDY1IDNkIDMwIDBkIDBhIDQxIDc1
IDc0IDY4IDZmIDcyIDY5IDdhICAgLWFnZT0wLi5BdXRob3Jpeg0KMDM2MCAgNjEgNzQgNjkg
NmYgNmUgM2EgMjAgNGUgNjUgNjcgNmYgNzQgNjkgNjEgNzQgNjUgICBhdGlvbjogTmVnb3Rp
YXRlDQowMzcwICAyMCA1OSA0OSA0OSA0NCAzNyA2NyA1OSA0NyA0YiA3NyA1OSA0MiA0MiA1
MSA1NSAgICBZSUlEN2dZR0t3WUJCUVUNCjAzODAgIDQzIDZmIDQ5IDQ5IDQ0IDM0IDZhIDQz
IDQzIDQxIDM5IDM2IDY3IDQ4IDdhIDQxICAgQ29JSUQ0akNDQTk2Z0h6QQ0KMDM5MCAgNjQg
NDIgNjcgNmIgNzEgNjggNmIgNjkgNDcgMzkgNzggNDkgNDIgNDEgNjcgNDkgICBkQmdrcWhr
aUc5eElCQWdJDQowM2EwICA0NyA0MiA1MyA3MyA0NiA0MSA1MSA1NSA0MyA0MiA2NyA2YiA3
MSA2OCA2YiA2OSAgIEdCU3NGQVFVQ0Jna3Foa2kNCjAzYjAgIDQzIDM5IDc4IDQ5IDQyIDQx
IDY3IDRiIDY4IDQyIDQxIDRkIDQzIDQxIDUxIDRiICAgQzl4SUJBZ0toQkFNQ0FRSw0KMDNj
MCAgNjkgNjcgNjcgNGYgN2EgNDIgNDkgNDkgNDQgNzIgMzIgNDMgNDMgNDEgMzYgNzMgICBp
Z2dPekJJSURyMkNDQTZzDQowM2QwICA0NyA0MyA1MyA3MSA0NyA1MyA0OSA2MiAzMyA0NSA2
NyA0NSA0MyA0MSA2NyA0NSAgIEdDU3FHU0liM0VnRUNBZ0UNCjAzZTAgIDQxIDYyIDZmIDQ5
IDQ0IDZkIDZhIDQzIDQzIDQxIDM1IDYxIDY3IDQxIDc3IDQ5ICAgQWJvSURtakNDQTVhZ0F3
SQ0KMDNmMCAgNDIgNDIgNjEgNDUgNDQgNDEgNjcgNDUgNGYgNmYgNjcgNjMgNDQgNDIgNTEg
NDEgICBCQmFFREFnRU9vZ2NEQlFBDQowNDAwICA0MSA0MSA0MSA0MSA0MSA2ZiAzNCA0OCA2
YSA1OSA1OSA0OCA2NyA0ZCA0OSA0OCAgIEFBQUFBbzRIallZSGdNSUgNCjA0MTAgIDY0IDZm
IDQxIDRkIDQzIDQxIDUxIDU3IDY4IDQzIDQyIDczIDQ3IDUxIDMwIDRhICAgZG9BTUNBUVdo
Q0JzR1EwSg0KMDQyMCAgNTQgNGMgNmIgNTIgNGMgNmYgNjggMzQgNzcgNDggNGIgNDEgNDQg
NDEgNjcgNDUgICBUTGtSTG9oNHdIS0FEQWdFDQowNDMwICA0NCA2ZiA1MiA1NSA3NyA0NSA3
OCA3MyA0NSA1MyA0NiA1MiA1NSA1NSA0MiA3MyAgIERvUlV3RXhzRVNGUlVVQnMNCjA0NDAg
IDRjIDYzIDMzIDU2IDZlIDYxIDUzIDM1IDZhIDU5IDZlIDRkIDc1IDVhIDQ3IDc1ICAgTGMz
Vm5hUzVqWW5NdVpHdQ0KMDQ1MCAgNmEgNjcgNjEgNzMgNzcgNjcgNjEgNjkgNjcgNDEgNzcg
NDkgNDIgNDEgNjEgNDUgICBqZ2Fzd2dhaWdBd0lCQWFFDQowNDYwICA0NCA0MSA2NyA0NSA0
NCA2ZiA2ZiA0NyA2MiA0MiA0OSA0NyA1OSA3OSAzNCA0ZSAgIERBZ0VEb29HYkJJR1l5NE4N
CjA0NzAgIDYzIDM4IDc0IDc2IDJiIDQ2IDc0IDQxIDZiIDMyIDMwIDM5IDZlIDcwIDU4IDRi
ICAgYzh0ditGdEFrMjA5bnBYSw0KMDQ4MCAgMzYgNzggNjggNzcgNDggNzQgNDQgNjkgNjQg
MmIgNTUgN2EgNTcgMzAgNGQgMzcgICA2eGh3SHREaWQrVXpXME03DQowNDkwICA1MyA0NiAz
MyAzNyA1MiA2ZCA0YSA1MCAzNyA3NCA0OCA2NiA0OCA1NiAyYiAyZiAgIFNGMzdSbUpQN3RI
ZkhWKy8NCjA0YTAgIDYzIDc0IDc5IDYyIDY2IDZhIDZmIDUzIDZkIDQ3IDQ1IDc3IDc5IDY0
IDM2IDU5ICAgY3R5YmZqb1NtR0V3eWQ2WQ0KMDRiMCAgNGEgNDEgNDUgMzEgNjggNjEgNTUg
MzQgNzMgMzYgMzUgNDIgNjUgNTUgNTggNTEgICBKQUUxaGFVNHM2NUJlVVhRDQowNGMwICAz
OSA0ZCA1YSA1MyA2YSA3MCA3MiA1NSA2NyA0MyAyYiA2ZSA2YiA1NyA0MSA0YyAgIDlNWlNq
cHJVZ0MrbmtXQUwNCjA0ZDAgIDc2IDY3IDRkIDc5IDRlIDU3IDMzIDM0IDcwIDRjIDZjIDM3
IDVhIDdhIDM3IDZlICAgdmdNeU5XMzRwTGw3Wno3bg0KMDRlMCAgNjkgNTYgNDEgNDkgNzgg
NjUgNzMgNjcgN2EgNWEgNGQgNTggNjcgNmUgMzYgNmQgICBpVkFJeGVzZ3paTVhnbjZtDQow
NGYwICA0MyA0OSAzOSA3NyA3MCA1OSA3OSA1OCA3NSA0NSA0OSA1NyA1NyA3MSAyZiA1OCAg
IENJOXdwWXlYdUVJV1dxL1gNCjA1MDAgIDU0IDJiIDRlIDRmIDQzIDdhIDY1IDZjIDQ3IDZh
IDMxIDc4IDQzIDQzIDYxIDRjICAgVCtOT0N6ZWxHajF4Q0NhTA0KMDUxMCAgNjIgNGEgNTgg
NjggMzQgNGMgNjMgMzEgNzkgNmYgNmIgNGIgMzUgMzIgNzkgNmUgICBiSlhoNExjMXlva0s1
MnluDQowNTIwICA2NCAzMSAzNSA0NSA3OCA3YSA3MiAzMCA3NCA0OSA1MSA0NSA2MSA1MSA1
MCA3MSAgIGQxNUV4enIwdElRRWFRUHENCjA1MzAgIDM3IDU1IDU4IDY3IDYxIDRhIDcxIDc5
IDZiIDY3IDY3IDRiIDVhIDRkIDQ5IDQ5ICAgN1VYZ2FKcXlrZ2dLWk1JSQ0KMDU0MCAgNDMg
NmMgNjEgNDEgNDQgNDEgNjcgNDUgNDIgNmYgNmYgNDkgNDMgNmEgNDEgNTMgICBDbGFBREFn
RUJvb0lDakFTDQowNTUwICA0MyA0MSA2ZiA2YSA0ZSA1YSA0YiAzOCAyZiA1NSAzMSA1MCA1
MCA3MSA1NSAzNCAgIENBb2pOWks4L1UxUFBxVTQNCjA1NjAgIDRmIDY1IDZjIDRjIDJmIDYz
IDZkIDZlIDQ1IDQyIDRlIDQ4IDc0IDUxIDY5IDcyICAgT2VsTC9jbW5FQk5IdFFpcg0KMDU3
MCAgNGEgNzIgNTkgNTQgNmUgMzIgNmMgNjkgMzkgNzUgNDEgNGEgNDMgNDMgNmQgNmMgICBK
cllUbjJsaTl1QUpDQ21sDQowNTgwICA0MSA1NyA3NSA0OCA3NiA1NyA2NyA1NyA2NiAzNSA0
OCA3NSA0NCAyYiA3MSAzMSAgIEFXdUh2V2dXZjVIdUQrcTENCjA1OTAgIDMwIDczIDdhIDY2
IDJiIDM4IDZmIDY0IDYxIDQ3IDc5IDUwIDMyIDYyIDUxIDYzICAgMHN6Zis4b2RhR3lQMmJR
Yw0KMDVhMCAgNzggNGEgNTcgNzcgNDQgNzQgNDkgNjQgNTAgNmMgNGYgNzcgNzAgNTUgN2Eg
NTYgICB4Sld3RHRJZFBsT3dwVXpWDQowNWIwICA3OCA2MyAzOSA2ZSAyYiAzMiA2NSA0ZCA0
ZSA2MSA0YiAzMiA3MCA2NCA3NiAzNCAgIHhjOW4rMmVNTmFLMnBkdjQNCjA1YzAgIDJmIDZh
IDQzIDRmIDc5IDY4IDUyIDM1IDZjIDM3IDU3IDQ0IDc2IDY2IDM0IDZjICAgL2pDT3loUjVs
N1dEdmY0bA0KMDVkMCAgNjUgNTMgNzEgNzAgNGMgNjggNGUgNzEgNDcgMzkgNGEgNjcgNDYg
NGMgNTkgNmIgICBlU3FwTGhOcUc5SmdGTFlrDQowNWUwICA3NiA1MiAyZiA1MSA0YSA2MyA0
NiA3NCA0NiAzMSAgICAgICAgICAgICAgICAgICAgIHZSL1FKY0Z0RjENCg0KTlRMTVNTUCAv
IEdTU0FQSSBEYXRhICg0NzUgYnl0ZXMpOg0KDQowMDAwICA2MCA4MiAwMyBlZSAwNiAwNiAy
YiAwNiAwMSAwNSAwNSAwMiBhMCA4MiAwMyBlMiAgIGAuLi4uLisuLi4uLi4uLi4NCjAwMTAg
IDMwIDgyIDAzIGRlIGEwIDFmIDMwIDFkIDA2IDA5IDJhIDg2IDQ4IDg2IGY3IDEyICAgMC4u
Li4uMC4uLiouSC4uLg0KMDAyMCAgMDEgMDIgMDIgMDYgMDUgMmIgMDUgMDEgMDUgMDIgMDYg
MDkgMmEgODYgNDggODIgICAuLi4uLisuLi4uLi4qLkguDQowMDMwICBmNyAxMiAwMSAwMiAw
MiBhMSAwNCAwMyAwMiAwMSAwMiBhMiA4MiAwMyBiMyAwNCAgIC4uLi4uLi4uLi4uLi4uLi4N
CjAwNDAgIDgyIDAzIGFmIDYwIDgyIDAzIGFiIDA2IDA5IDJhIDg2IDQ4IDg2IGY3IDEyIDAx
ICAgLi4uYC4uLi4uKi5ILi4uLg0KMDA1MCAgMDIgMDIgMDEgMDAgNmUgODIgMDMgOWEgMzAg
ODIgMDMgOTYgYTAgMDMgMDIgMDEgICAuLi4ubi4uLjAuLi4uLi4uDQowMDYwICAwNSBhMSAw
MyAwMiAwMSAwZSBhMiAwNyAwMyAwNSAwMCAwMCAwMCAwMCAwMCBhMyAgIC4uLi4uLi4uLi4u
Li4uLi4NCjAwNzAgIDgxIGUzIDYxIDgxIGUwIDMwIDgxIGRkIGEwIDAzIDAyIDAxIDA1IGEx
IDA4IDFiICAgLi5hLi4wLi4uLi4uLi4uLg0KMDA4MCAgMDYgNDMgNDIgNTMgMmUgNDQgNGIg
YTIgMWUgMzAgMWMgYTAgMDMgMDIgMDEgMDMgICAuQ0JTLkRLLi4wLi4uLi4uDQowMDkwICBh
MSAxNSAzMCAxMyAxYiAwNCA0OCA1NCA1NCA1MCAxYiAwYiA3MyA3NSA2NyA2OSAgIC4uMC4u
LkhUVFAuLnN1Z2kNCjAwYTAgIDJlIDYzIDYyIDczIDJlIDY0IDZiIGEzIDgxIGFiIDMwIDgx
IGE4IGEwIDAzIDAyICAgLmNicy5kay4uLjAuLi4uLg0KMDBiMCAgMDEgMDEgYTEgMDMgMDIg
MDEgMDMgYTIgODEgOWIgMDQgODEgOTggY2IgODMgNWMgICAuLi4uLi4uLi4uLi4uLi5cDQow
MGMwICBmMiBkYiBmZSAxNiBkMCAyNCBkYiA0ZiA2NyBhNSA3MiBiYSBjNiAxYyAwNyBiNCAg
IC4uLi4uJC5PZy5yLi4uLi4NCjAwZDAgIDM4IDlkIGY5IDRjIGQ2IGQwIGNlIGQyIDE3IDdl
IGQxIDk4IDkzIGZiIGI0IDc3ICAgOC4uTC4uLi4ufi4uLi4udw0KMDBlMCAgYzcgNTcgZWYg
ZGMgYjcgMjYgZGYgOGUgODQgYTYgMTggNGMgMzIgNzcgYTYgMDkgICAuVy4uLiYuLi4uLkwy
dy4uDQowMGYwICAwMCA0ZCA2MSA2OSA0ZSAyYyBlYiA5MCA1ZSA1MSA3NCAzZCAzMSA5NCBh
MyBhNiAgIC5NYWlOLC4uXlF0PTEuLi4NCjAxMDAgIGI1IDIwIDBiIGU5IGU0IDU4IDAyIGVm
IDgwIGNjIDhkIDViIDdlIDI5IDJlIDVlICAgLiAuLi5YLi4uLi5bfikuXg0KMDExMCAgZDkg
Y2YgYjkgZTIgNTQgMDIgMzEgN2EgYzggMzMgNjQgYzUgZTAgOWYgYTkgODIgICAuLi4uVC4x
ei4zZC4uLi4uDQowMTIwICAyMyBkYyAyOSA2MyAyNSBlZSAxMCA4NSA5NiBhYiBmNSBkMyBm
OCBkMyA4MiBjZCAgICMuKWMlLi4uLi4uLi4uLi4NCjAxMzAgIGU5IDQ2IDhmIDVjIDQyIDA5
IGEyIGRiIDI1IDc4IDc4IDJkIGNkIDcyIGEyIDQyICAgLkYuXEIuLi4leHgtLnIuQg0KMDE0
MCAgYjkgZGIgMjkgZGQgZDcgOTEgMzEgY2UgYmQgMmQgMjEgMDEgMWEgNDAgZmEgYmIgICAu
LikuLi4xLi4tIS4uQC4uDQowMTUwICA1MSA3OCAxYSAyNiBhYyBhNCA4MiAwMiA5OSAzMCA4
MiAwMiA5NSBhMCAwMyAwMiAgIFF4LiYuLi4uLjAuLi4uLi4NCjAxNjAgIDAxIDAxIGEyIDgy
IDAyIDhjIDA0IDgyIDAyIDg4IGNkIDY0IGFmIDNmIDUzIDUzICAgLi4uLi4uLi4uLi5kLj9T
Uw0KMDE3MCAgY2YgYTkgNGUgMGUgN2EgNTIgZmYgNzIgNjkgYzQgMDQgZDEgZWQgNDIgMmEg
YzkgICAuLk4uelIucmkuLi4uQiouDQowMTgwICBhZCA4NCBlNyBkYSA1OCBiZCBiOCAwMiA0
MiAwYSA2OSA0MCA1YSBlMSBlZiA1YSAgIC4uLi5YLi4uQi5pQFouLloNCjAxOTAgIDA1IDlm
IGU0IDdiIDgzIGZhIGFkIDc0IGIzIDM3IGZlIGYyIDg3IDVhIDFiIDIzICAgLi4uey4uLnQu
Ny4uLlouIw0KMDFhMCAgZjYgNmQgMDcgMzEgMjUgNmMgMDMgYjQgODcgNGYgOTQgZWMgMjkg
NTMgMzUgNzEgICAubS4xJWwuLi5PLi4pUzVxDQowMWIwICA3MyBkOSBmZSBkOSBlMyAwZCA2
OCBhZCBhOSA3NiBmZSAzZiA4YyAyMyBiMiA4NSAgIHMuLi4uLmguLnYuPy4jLi4NCjAxYzAg
IDFlIDY1IGVkIDYwIGVmIDdmIDg5IDVlIDRhIGFhIDRiIDg0IGRhIDg2IGY0IDk4ICAgLmUu
YC4uLl5KLksuLi4uLg0KMDFkMCAgMDUgMmQgODkgMmYgNDcgZjQgMDkgNzAgNWIgNDUgZDQg
ICAgICAgICAgICAgICAgICAuLS4vRy4ucFtFLg0K
--------------060601070401010404080506
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--------------060601070401010404080506--
