From owner-freebsd-questions@freebsd.org Tue Apr 20 20:49:21 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 36D5F5E8B5F for ; Tue, 20 Apr 2021 20:49:21 +0000 (UTC) (envelope-from john@johnrshannon.com) Received: from mailb.johnrshannon.com (mailb.johnrshannon.com [104.153.32.125]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4FPwlh36zPz3k8k for ; Tue, 20 Apr 2021 20:49:20 +0000 (UTC) (envelope-from john@johnrshannon.com) Received: from buster.internal.johnrshannon.com (buster.internal.johnrshannon.com [192.168.1.34]) by mailb.johnrshannon.com (Postfix) with ESMTP id B4EF7811C for ; Tue, 20 Apr 2021 14:49:11 -0600 (MDT) Subject: Re: iSCSI and 13.0 To: freebsd-questions@freebsd.org References: From: john Message-ID: <4019a502-35fb-daff-9da1-53bfdcb020d4@johnrshannon.com> Date: Tue, 20 Apr 2021 14:49:11 -0600 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:78.0) Gecko/20100101 Thunderbird/78.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms040202030405060100090801" X-Rspamd-Queue-Id: 4FPwlh36zPz3k8k X-Spamd-Bar: ------ X-Spamd-Result: default: False [-6.10 / 15.00]; RBL_SENDERSCORE_FAIL(0.00)[104.153.32.125:server fail]; R_SPF_ALLOW(-0.20)[+mx:c]; HAS_ATTACHMENT(0.00)[]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[johnrshannon.com:+]; DMARC_POLICY_ALLOW(-0.50)[johnrshannon.com,reject]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; RBL_DBL_DONT_QUERY_IPS(0.00)[104.153.32.125:from]; ASN(0.00)[asn:32444, ipnet:104.153.32.0/24, country:US]; MIME_TRACE(0.00)[0:+,1:+,2:~]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[johnrshannon.com:s=dkim]; FROM_HAS_DN(0.00)[]; SIGNED_SMIME(-2.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; SPAMHAUS_ZRD(0.00)[104.153.32.125:from:127.0.2.255]; RCVD_COUNT_TWO(0.00)[2]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Apr 2021 20:49:21 -0000 This is a cryptographically signed message in MIME format. --------------ms040202030405060100090801 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable It seems to work fine when my initiator is running Linux with CHAP authentication and with FreeBSD initiator using no authentication. After connecting, using the iSCSI drive and disconnecting, /usr/sbin/ctld remains running. If I connect from a FreeBSD initiator using CHAP authentication ctld terminates. If I run "ctld -d" and initiate a connection from a FreeBSD initiator with CHAP authentication I see: [root@nas ~]# ctld -d ctld: obtaining previously configured CTL luns from the kernel ctld: CTL port 0 "camsim" wasn't managed by ctld; ctld: CTL port 1 "ioctl" wasn't managed by ctld; ctld: CTL port 2 "tpc" wasn't managed by ctld; ctld: obtaining configuration from /etc/ctl.conf ctld: auth-group "default" not defined; going with defaults ctld: portal-group "default" not defined; going with defaults ctld: opening pidfile /var/run/ctld.pid ctld: adding lun "iqn.2000-05.com.johnrshannon:target0,lun,0" ctld: adding lun "iqn.2000-05.com.johnrshannon:target1,lun,0" ctld: adding lun "iqn.2000-05.com.johnrshannon:target2,lun,0" ctld: adding lun "iqn.2000-05.com.johnrshannon:target3,lun,0" ctld: adding lun "iqn.2000-05.com.johnrshannon:target4,lun,0" ctld: adding lun "iqn.2000-05.com.johnrshannon:target5,lun,0" ctld: adding lun "iqn.2000-05.com.johnrshannon:target6,lun,0" ctld: adding lun "iqn.2000-05.com.johnrshannon:target7,lun,0" ctld: adding port "group0-iqn.2000-05.com.johnrshannon:target0" ctld: adding port "group0-iqn.2000-05.com.johnrshannon:target1" ctld: adding port "group0-iqn.2000-05.com.johnrshannon:target2" ctld: adding port "group0-iqn.2000-05.com.johnrshannon:target3" ctld: adding port "group0-iqn.2000-05.com.johnrshannon:target4" ctld: adding port "group0-iqn.2000-05.com.johnrshannon:target5" ctld: adding port "group0-iqn.2000-05.com.johnrshannon:target6" ctld: adding port "group0-iqn.2000-05.com.johnrshannon:target7" ctld: not listening on portal-group "default", not assigned to any target= ctld: listening on 0.0.0.0, portal-group "group0" ctld: incoming connection; not forking due to -d flag ctld: accepted connection from 192.168.1.23; portal group "group0" ctld: 192.168.1.23: setting session timeout to 60 seconds ctld: 192.168.1.23: Capsicum capability mode enabled ctld: 192.168.1.23: beginning Login Phase; waiting for Login PDU ctld: 192.168.1.23: key received: "AuthMethod=3DNone,CHAP" ctld: 192.168.1.23: key received: "InitiatorName=3Diqn.1994-09.org.freebsd:polya.johnrshannon.com" ctld: 192.168.1.23: key received: "SessionType=3DNormal" ctld: 192.168.1.23: key received: "TargetName=3Diqn.2000-05.com.johnrshannon:target4" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): initiator requests to connect to target "iqn.2000-05.com.johnrshannon:target4"; auth-group "ag4" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): CHAP authentication required ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "AuthMethod=3DCHAP" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "TargetPortalGroupTag=3D257" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): beginning CHAP authentication; waiting for CHAP_A ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "CHAP_A=3D5" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): sending CHAP_C, binary challenge size is 1024 bytes ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "CHAP_A=3D5" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "CHAP_I=3D93" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "CHAP_C=3D0x422d337dd60ad86d8e30e8b95f03eea63353465a352c944e3427c9315ef0e= bcb518a8b39455d64ebb2cfc1b073765d7a7ef02399da388ddf84e7f9ea8e1464152a7f6a= c507611d69725ea2d4ce568ae995cf7f3e0d8372a6d6b9cb71004d7c126fcba777f0643ab= 526055437ff0dccba49758353822519d73ffae0e664a8d52e87c691b1b4a09c6efa1cc363= 3ae4e4ae5f4c4eba08d72cb07e6709d899ff14976f9c9ec56c33608f98695f5b34e1bc2db= 6a301cf809bce1b4f70d4b126c082e4b78b01b0974d804d421bb96ede80b842761bf27323= 70c6d114437de954d299c1132f2395943d5cfee83a0c409e23928be77ca5693d5daf89549= 83d909642bb7d0aef7feccb7abfe4ffbfda5854f7544f225d3aa8b663268088be9f1a5546= c19dc86a84713709fcbe9cd5ac105654c702a93377cb953c6a39a16ae8a8b380aaf805d89= 5441a4521ad07decd4adc1fabbf008e8c17ca7c1985e215a4bfbd547f02dd96b145e5f319= 1055898e2afb06b1f6177e1a6d2069d5c0d0a90414b3f7d056b6f5c77c4b64d5a3bc5126b= 40f0dc307aa78ab54314bdb6ad2094925c0ebc587f05e379fe5096a38564dfb8f8479c31e= 1b2c19cdf0d5a4dcb7663c57f2051e647dba628e844c1f9988a7dbf9625642070b902bcee= 7374cc646a5e33ca99c05ff3b730b6a52ca5c42368d77f5d90fad9f6b109bae ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): waiting for CHAP_N/CHAP_R ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "CHAP_N=3Dpolya" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "CHAP_R=3D0xad14e0cedbcb56b11dfc9f4038f321ae" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): authentication succeeded for user "polya"; transitioning to operational parameter negotiation ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "CHAP_N=3Dpolya" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "CHAP_R=3D0xad14e0cedbcb56b11dfc9f4038f321ae" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): initiator did not request target authentication ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): Kernel limits are MaxRecvDataSegment=3D262144, max_send_dsl=3D262144, MaxBurstLength=3D1048576, FirstBurstLength=3D1048576 ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): beginning operational parameter negotiation; waiting for Login PDU ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "iSCSIProtocolLevel=3D2" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "HeaderDigest=3DNone" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "DataDigest=3DNone" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "ImmediateData=3DYes" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "MaxBurstLength=3D1048576" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "FirstBurstLength=3D1048576" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "InitialR2T=3DYes" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "MaxOutstandingR2T=3D1" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "MaxRecvDataSegmentLength=3D262144" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "DefaultTime2Wait=3D0" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "DefaultTime2Retain=3D0" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key received: "ErrorRecoveryLevel=3D0" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "iSCSIProtocolLevel=3D2" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): initiator prefers not to do header digest; we'll comply ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "HeaderDigest=3DNone" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): initiator prefers not to do data digest; we'll comply ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "DataDigest=3DNone" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "ImmediateData=3DYes" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "MaxBurstLength=3D1048576" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "FirstBurstLength=3D1048576" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "InitialR2T=3DYes" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "MaxOutstandingR2T=3D1" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "MaxRecvDataSegmentLength=3D262144" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "DefaultTime2Wait=3D0" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "DefaultTime2Retain=3D0" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): key to send: "ErrorRecoveryLevel=3D0" ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): operational parameter negotiation done; transitioning to Full Feature Pha= se ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): connection handed off to the kernel ctld: 192.168.1.23 (iqn.1994-09.org.freebsd:polya.johnrshannon.com): nothing more to do; exiting On 4/20/21 1:59 PM, john via freebsd-questions wrote: > Has anything changed in either the target or initiator in 13.0 that > requires a configuration change? Specifically, with respect to chap > authentication? >=20 > I'm asking because a setup with a FreeBSD target and multiple FreeBSD > initiators stopped working consistently after upgrading to 13.0. >=20 --=20 John R. Shannon john@johnrshannon.com --------------ms040202030405060100090801 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DIowggXrMIIE06ADAgECAhBAAXDpswmo8LwaMVdBtIgjMA0GCSqGSIb3DQEBCwUAMDoxCzAJ BgNVBAYTAlVTMRIwEAYDVQQKEwlJZGVuVHJ1c3QxFzAVBgNVBAMTDlRydXN0SUQgQ0EgQTEz MB4XDTIwMDMxNzE4MTMwOVoXDTIzMDMxNzE4MTMwOVowgYcxLjAsBgNVBAsMJVZlcmlmaWVk IEVtYWlsOiBqb2huQGpvaG5yc2hhbm5vbi5jb20xJDAiBgkqhkiG9w0BCQEWFWpvaG5Aam9o bnJzaGFubm9uLmNvbTEvMC0GCgmSJomT8ixkAQETH0EwMTQxMEQwMDAwMDE3MEU5QjMwOTk4 MDAwMTA1RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC926uY+7Gq/dUdtT7g L4Hz2oIStodijwr6EUYA2PlL/KsvM4JkqYgN0ZBpbVjeAyUoBByrHpZbW2vy+ve6M4yKvosA 721pPjybjdIjSDxLVBTOzlXd3ZOocLzyPqfQLfLbmXnmcCbIjyySlVfkqx795Gd1wUCUsYKT qhYoxjcs7xHygaQIseVNsMW1tzt6NLJjkn0Lwbu1VVaCpEwNLRGIsRA8jQC3EpKxbapA8V5Q fzLkxj70gWz10qEQZRaZUEy7jV3hL46AriLHlICio6E6QAkT9R8lxXZhyCqfXBwQ5wgVO0p+ pLagVVILTfW9jOblScNbEtUVZ4qVl3OqCvtxAgMBAAGjggKdMIICmTAOBgNVHQ8BAf8EBAMC BaAwgYQGCCsGAQUFBwEBBHgwdjAwBggrBgEFBQcwAYYkaHR0cDovL2NvbW1lcmNpYWwub2Nz cC5pZGVudHJ1c3QuY29tMEIGCCsGAQUFBzAChjZodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1 c3QuY29tL2NlcnRzL3RydXN0aWRjYWExMy5wN2MwHwYDVR0jBBgwFoAULbfeG1l+KpguzeHU G+PFEBJe6RQwCQYDVR0TBAIwADCCASsGA1UdIASCASIwggEeMIIBGgYLYIZIAYb5LwAGCwEw ggEJMEoGCCsGAQUFBwIBFj5odHRwczovL3NlY3VyZS5pZGVudHJ1c3QuY29tL2NlcnRpZmlj YXRlcy9wb2xpY3kvdHMvaW5kZXguaHRtbDCBugYIKwYBBQUHAgIwga0MgapUaGlzIFRydXN0 SUQgQ2VydGlmaWNhdGUgaGFzIGJlZW4gaXNzdWVkIGluIGFjY29yZGFuY2Ugd2l0aCBJZGVu VHJ1c3QncyBUcnVzdElEIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL3Nl Y3VyZS5pZGVudHJ1c3QuY29tL2NlcnRpZmljYXRlcy9wb2xpY3kvdHMvaW5kZXguaHRtbDBF BgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29tL2NybC90 cnVzdGlkY2FhMTMuY3JsMCAGA1UdEQQZMBeBFWpvaG5Aam9obnJzaGFubm9uLmNvbTAdBgNV HQ4EFgQUGfPYxtfAxHd3sz26iYyDoBv7kvowHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF BwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAWkpwNq4zBCmFVdT2YmzsB1yPio09cp6GTcgjzDekF e0ECVBMRA55ovWjYfMJadFK45VwdELI3yEMiQlUMafCzKF+lVYoMP70ck5CkKlLEB5R3GnmY mzohGbX9l2/Bjk/u4FZHvpxNq17nw7WmYgo7PrNPy/r26qk5yU/Job1GkelPqEl58DKxLP6h otfHyuyf3lh0GtNrF0IoH5k6JbRrR38ATxpQ5DneoKi7dGmgi4n24+Y9fE7fUvdMgkIRjTXP J0YQOwhZhXtOyu/plK625YVLgB0qUCj3i88luA9/9cASyzmPs9e0N3TyDA7Ztxsvc+wO9soJ 5mJi0fEdguzvMIIGlzCCBH+gAwIBAgIQQAFwOzq6gYzJPK6eDrjUEjANBgkqhkiG9w0BAQsF ADBKMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVuVHJ1 c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMjAwMjEyMjEwNzQ5WhcNMzAwMjEyMjEwNzQ5 WjA6MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MRcwFQYDVQQDEw5UcnVzdElE IENBIEExMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALurFDtNUgw/fTzPkHWZ DcSsSTbdDYEBPmbeosWjT9CSko03fkhuS8KsQVo5zoCP93ZcILUjXje+wIErPqwOGyuBie+X FGWQDVF0SsP3rfKX/UJ+oqoAetznR8QTf9eSmzNx0fj8oh10KFFSHrwilvJ55Vp52Wm09RXo zoUUSlVIORwAhjk35wjjja5cZYPptVY4J6NbjajbizP45A9c+qYTWfxvSH2RiNKaR1+QAP21 YlnHl9uPFZnnzYUkdeAA2SbZQAFjotrp9N26qwTxwPZw8l8SPK4Fi31D+aw8vI8doRCLYPef jkRecH5BlKu/OxwY7KRPOgnGnbi5GvwZNlcCAwEAAaOCAocwggKDMBIGA1UdEwEB/wQIMAYB Af8CAQAwDgYDVR0PAQH/BAQDAgGGMIGJBggrBgEFBQcBAQR9MHswMAYIKwYBBQUHMAGGJGh0 dHA6Ly9jb21tZXJjaWFsLm9jc3AuaWRlbnRydXN0LmNvbTBHBggrBgEFBQcwAoY7aHR0cDov L3ZhbGlkYXRpb24uaWRlbnRydXN0LmNvbS9yb290cy9jb21tZXJjaWFscm9vdGNhMS5wN2Mw HwYDVR0jBBgwFoAU7UQZwNPwBovupHu+QucmVMiONnYwggEkBgNVHSAEggEbMIIBFzCCARMG BFUdIAAwggEJMEoGCCsGAQUFBwIBFj5odHRwczovL3NlY3VyZS5pZGVudHJ1c3QuY29tL2Nl cnRpZmljYXRlcy9wb2xpY3kvdHMvaW5kZXguaHRtbDCBugYIKwYBBQUHAgIwga0MgapUaGlz IFRydXN0SUQgQ2VydGlmaWNhdGUgaGFzIGJlZW4gaXNzdWVkIGluIGFjY29yZGFuY2Ugd2l0 aCBJZGVuVHJ1c3QncyBUcnVzdElEIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRw czovL3NlY3VyZS5pZGVudHJ1c3QuY29tL2NlcnRpZmljYXRlcy9wb2xpY3kvdHMvaW5kZXgu aHRtbDBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29t L2NybC9jb21tZXJjaWFscm9vdGNhMS5jcmwwHQYDVR0OBBYEFC233htZfiqYLs3h1BvjxRAS XukUMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDANBgkqhkiG9w0BAQsFAAOCAgEA f+wSnMoC1+jZeGtN3Ax7e0y3T8Qsxbwxdm5FWAhU0V+O1H3qJhdYATxQ3ntx/yD5S0Zrkz6D bdKo3aX0M5g1jfeY1Fy3Sz0U6DccmqAebNIToXFeh9PLtxRwAgYn+eYtA0w81Umgb9AGfYdV 3rhseBYodVZt18c9uBgaqlbnbz0S8jCe7uobwakyCied7grN3ckC2U/Q156fpCb/Mu2UgGPk FayP3crE/Gr7Z/He5O2szQZH520avtHvPEKAZ3pervn6cG3eTS0R8sF3h/qYW81Cwmvmyz0T KiWltpW4b0lqzB0Q8t/3fB74JywgRStrOEqZ7OGAjeMVXG6pRls4KJRwilB9/b6XLA6NcpmR ayfEEeooSJ/BZieaCsAJ53fxugA1xQvW7nW/fud9qYUgFzma63nCEJ/r7T9+ujwvmgpQD7CC AyQ7KLUuc+F9iVBbDSLhIFxqoYihO0rmW6xRvbHXC6a0pSTe07EQ3NFtm/Z6sA/q4/+TDdAv nisIWvvMnb9Pqs08sTz/dCkYGnoBqMAuHVLGck5Np+GdzLgB1+ZwGS/1Yf0sg4/2o6K1eOMq mQc0NwoSoV231EsHtsTJsoANmeQ0cDESZ6fwbHIs2HTZNllyTE5x/sFSzfLCxMBLUEeHky6B ZkL6ytgDAUvZFubAZDMyDbf2W23GdxfngDAxggMUMIIDEAIBATBOMDoxCzAJBgNVBAYTAlVT MRIwEAYDVQQKEwlJZGVuVHJ1c3QxFzAVBgNVBAMTDlRydXN0SUQgQ0EgQTEzAhBAAXDpswmo 8LwaMVdBtIgjMA0GCWCGSAFlAwQCAQUAoIIBlzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB MBwGCSqGSIb3DQEJBTEPFw0yMTA0MjAyMDQ5MTFaMC8GCSqGSIb3DQEJBDEiBCBQBkAIw6NC D5y05YFEZpjpz5fOEASmWpHzlLuuEGvrHDBdBgkrBgEEAYI3EAQxUDBOMDoxCzAJBgNVBAYT AlVTMRIwEAYDVQQKEwlJZGVuVHJ1c3QxFzAVBgNVBAMTDlRydXN0SUQgQ0EgQTEzAhBAAXDp swmo8LwaMVdBtIgjMF8GCyqGSIb3DQEJEAILMVCgTjA6MQswCQYDVQQGEwJVUzESMBAGA1UE ChMJSWRlblRydXN0MRcwFQYDVQQDEw5UcnVzdElEIENBIEExMwIQQAFw6bMJqPC8GjFXQbSI IzBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMA0GCSqGSIb3DQEBAQUABIIBAIZ0j7S9LmHvbC+9yQWe8KY/Fs2ogSM0hvUTgVNyD5bD Bhd1sI4O0SEs2NswiBGVyjlrKzchl3gcacfs1q2dD1ZLnT0rT5e3NNtlfhtqLmZdktmU2TMX mRse9pVaT0Fo2qjH7QUjTpvl6Y2in1RHTRbcqJt8L01viskjJLdLIVwld1jIzKHWXADfwJYR YoiKirYESzgF6iF9PYMJU+JFr8T9BlRmdLfsbA3TmAHsMTxv8mmg0E0xVItYQb0jmonx47aW gGYuP3iimBhk3Q/dF9NP87Ypdc2g/zcLS91qdHaToepb8/mymxsBXfbYTADHa6t0r49xqhQV GNWLdUCKv2IAAAAAAAA= --------------ms040202030405060100090801--