Lachlan Simpson
2006-Jul-20 07:39 UTC
[Samba] samba as pdc in Ubuntu dapper, fails on ps$ join?
Hola, I've done everything as correct as I can see in smb.conf under fresh ubuntu 6.06 fully updated install to have it run as a PDC on hostname florentine, domain DAVEYST. There are no testparm errors. I've added users with useradd and smbpasswd -a I've added machines with useradd and smbpasswd -a -m I can see the server in my network neighbourhood and access/browse folders on the samba server using a linux account login within the network neighbourhood. However, when I try to go to My computer properties ---> computer name ---> Change.., and then put in my domain name and computer name and when prompted use root account and password (or any account and password) I get an Access Denied error. I've attached a log level = 10 tar.gz of the /var/log/samba/smbd.log of everything that happens when I do this process on the workstation (hostname = robin, ie robin$) - it's quite long, but it also seems to be successful - see below for abridged listing. I've been on the ubuntu forums where they suggested I should install quota - but I don't think that installing quota would solve my problems. Has anyone seen anything like this before, or know why despite my smb-log having the like of: [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [DAVEYST]\[root]@[ROBIN] with the new password interface [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [DAVEYST]\[root]@[ROBIN] .... .... [2006/07/15 15:57:41, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(267) fetch sid from gid cache 0 -> S-1-5-21-3923429160-1838912494-2447857936-512 .... .... [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: sam authentication for user [root] succeeded ... ... [2006/07/15 15:57:41, 2] auth/auth.c:check_ntlm_password(307) check_ntlm_password: authentication for user [root] -> [root] -> [root] succeeded .... .... [2006/07/15 15:59:43, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2006/07/15 15:59:43, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] .... .... [2006/07/15 15:59:43, 3] smbd/service.c:make_connection_snum(488) Connect path is '/tmp' for service [IPC$] [2006/07/15 15:59:43, 3] lib/util_seaccess.c:se_access_check(250) [2006/07/15 15:59:43, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-3923429160-1838912494-2447857936-501 se_access_check: also S-1-5-21-3923429160-1838912494-2447857936-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 .... .... [2006/07/15 15:59:43, 3] smbd/process.c:timeout_processing(1447) timeout_processing: End of file from client (client has disconnected). [2006/07/15 15:59:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/15 15:59:43, 2] smbd/server.c:exit_server(614) Closing connections [2006/07/15 15:59:43, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2006/07/15 15:59:43, 3] smbd/server.c:exit_server(655) Server exit (normal exit) any ideas? smb.conf follows: #======================= Global Settings ====================== [global] workgroup = DAVEYST netbios name = florentine server string = %h server (Samba, Ubuntu) wins support = yes dns proxy = no name resolve order = wins bcast hosts security = user encrypt passwords = true username map = /etc/samba/smbusers unix password sync = yes ; passdb backend = tdbsam obey pam restrictions = yes ; guest account = nobody invalid users = root log file = /var/log/samba/smdb.log log level = 3 max log size = 10000 time server = Yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* . veto oplock files = \*.prm\*.mdb\*.mda pam password change = yes domain logons = yes # domain admin group = root @admin administrator preferred master = yes local master = yes os level = 65 # Useradd scripts add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -s /bin/false/ -d /var/lib/nobody %u logon path = \\%N\%U\profile logon drive = H: logon home = \\%N\%U logon script = startnet.bat socket options = TCP_NODELAY SO_RCVBUF=8191 SO_SNDBUF=8192 domain master = yes idmap uid = 10000-20000 idmap gid = 10000-20000 template shell = /bin/bash #======================= Share Definitions ====================== [homes] comment = Home Directories browseable = no valid users = %S read only = no force user = %U force group = %G browsable = no [netlogon] comment = Network Logon Service path = /home/samba/netlogon guest ok = yes writable = no share modes = no browsable = no [profiles] comment = Users profiles path = /home/samba/profiles guest ok = no browseable = no create mask = 0600 directory mask = 0700 [admindocs] path = /home/admindocs valid users = @admin force group = admin read only = no [apps] path = /home/apps read only = no force group = admin [twsdocs] path = /home/twsdocs read only = no valid users = @staff,@admin force group = staff [twspics] path = /home/twspics read only = no valid users = @staff,@admin force group = staff [shared] path = /home/shared read only= no create mask = 0666 directory mask = 0777 writable = yes valid users = @users force group = users cheers L. --- Lachlan Simpson, National Database & IT Support Officer National Office The Wilderness Society 57E Brisbane Street, Hobart TAS 7000, AUSTRALIA lachlan.simpson@wilderness.org.au Ph (03) 6270 1798 http://www.wilderness.org.au
Lachlan Simpson
2006-Jul-20 07:57 UTC
[Samba] samba as pdc in Ubuntu dapper, fails on ps$ join?
ok, this time with attachment, sorry :) L.> Hola, > > I've done everything as correct as I can see in smb.conf under fresh ubuntu 6.06 fully > updated install to have it run as a PDC on hostname florentine, domain DAVEYST. > > There are no testparm errors. > > I've added users with useradd and smbpasswd -a > I've added machines with useradd and smbpasswd -a -m > > I can see the server in my network neighbourhood and access/browse folders on the samba > server using a linux account login within the network neighbourhood. > > However, when I try to go to My computer properties ---> computer name ---> Change.., and > then put in my domain name and computer name and when prompted use root account and > password (or any account and password) I get an Access Denied error. > > I've attached a log level = 10 tar.gz of the /var/log/samba/smbd.log of everything that > happens when I do this process on the workstation (hostname = robin, ie robin$) - it's > quite long, but it also seems to be successful - see below for abridged listing. > > I've been on the ubuntu forums where they suggested I should install quota - but I don't > think that installing quota would solve my problems. > > Has anyone seen anything like this before, or know why despite my smb-log having the like > of: > > [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: Checking password for unmapped user [DAVEYST]\[root]@[ROBIN] with > the new password interface > [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(222) > check_ntlm_password: mapped user is: [DAVEYST]\[root]@[ROBIN] > .... > .... > [2006/07/15 15:57:41, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(267) > fetch sid from gid cache 0 -> S-1-5-21-3923429160-1838912494-2447857936-512 > .... > .... > [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(268) > check_ntlm_password: sam authentication for user [root] succeeded > ... > ... > [2006/07/15 15:57:41, 2] auth/auth.c:check_ntlm_password(307) > check_ntlm_password: authentication for user [root] -> [root] -> [root] succeeded > .... > .... > [2006/07/15 15:59:43, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: Checking password for unmapped user []\[]@[] with the new > password interface > [2006/07/15 15:59:43, 3] auth/auth.c:check_ntlm_password(222) > check_ntlm_password: mapped user is: []\[]@[] > .... > .... > [2006/07/15 15:59:43, 3] smbd/service.c:make_connection_snum(488) > Connect path is '/tmp' for service [IPC$] > [2006/07/15 15:59:43, 3] lib/util_seaccess.c:se_access_check(250) > [2006/07/15 15:59:43, 3] lib/util_seaccess.c:se_access_check(251) > se_access_check: user sid is S-1-5-21-3923429160-1838912494-2447857936-501 > se_access_check: also S-1-5-21-3923429160-1838912494-2447857936-514 > se_access_check: also S-1-1-0 > se_access_check: also S-1-5-2 > se_access_check: also S-1-5-32-546 > .... > .... > [2006/07/15 15:59:43, 3] smbd/process.c:timeout_processing(1447) > timeout_processing: End of file from client (client has disconnected). > [2006/07/15 15:59:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 > [2006/07/15 15:59:43, 2] smbd/server.c:exit_server(614) > Closing connections > [2006/07/15 15:59:43, 3] smbd/connection.c:yield_connection(69) > Yielding connection to > [2006/07/15 15:59:43, 3] smbd/server.c:exit_server(655) > Server exit (normal exit) > > > any ideas? > > smb.conf follows: > > #======================= Global Settings ======================> > [global] > workgroup = DAVEYST > netbios name = florentine > server string = %h server (Samba, Ubuntu) > wins support = yes > dns proxy = no > name resolve order = wins bcast hosts > security = user > encrypt passwords = true > username map = /etc/samba/smbusers > unix password sync = yes > ; passdb backend = tdbsam > obey pam restrictions = yes > ; guest account = nobody > invalid users = root > log file = /var/log/samba/smdb.log > log level = 3 > max log size = 10000 > time server = Yes > passwd program = /usr/bin/passwd %u > passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n > *password\supdated\ssuccessfully* . > veto oplock files = \*.prm\*.mdb\*.mda pam password change = yes > domain logons = yes > # domain admin group = root @admin administrator > preferred master = yes > local master = yes > os level = 65 > > # Useradd scripts > add user script = /usr/sbin/useradd -m %u > delete user script = /usr/sbin/userdel -r %u > add group script = /usr/sbin/groupadd %g > delete group script = /usr/sbin/groupdel %g > add user to group script = /usr/sbin/usermod -G %g %u > add machine script = /usr/sbin/useradd -s /bin/false/ -d /var/lib/nobody %u > > > logon path = \\%N\%U\profile > > logon drive = H: > logon home = \\%N\%U > > logon script = startnet.bat > > socket options = TCP_NODELAY SO_RCVBUF=8191 SO_SNDBUF=8192 > > domain master = yes > > idmap uid = 10000-20000 > idmap gid = 10000-20000 > template shell = /bin/bash > > #======================= Share Definitions ======================> > [homes] > comment = Home Directories > browseable = no > valid users = %S > read only = no > force user = %U > force group = %G > browsable = no > > > [netlogon] > comment = Network Logon Service > path = /home/samba/netlogon > guest ok = yes > writable = no > share modes = no > browsable = no > > [profiles] > comment = Users profiles > path = /home/samba/profiles > guest ok = no > browseable = no > create mask = 0600 > directory mask = 0700 > > > [admindocs] > path = /home/admindocs > valid users = @admin > force group = admin > read only = no > > [apps] > path = /home/apps > read only = no > force group = admin > > [twsdocs] > path = /home/twsdocs > read only = no > valid users = @staff,@admin > force group = staff > > [twspics] > path = /home/twspics > read only = no > valid users = @staff,@admin > force group = staff > > [shared] > path = /home/shared > read only= no > create mask = 0666 > directory mask = 0777 > writable = yes > valid users = @users > force group = users > > > > > > > cheers > > L. > --- > Lachlan Simpson, National Database & IT Support Officer > National Office > The Wilderness Society > 57E Brisbane Street, Hobart TAS 7000, AUSTRALIA > lachlan.simpson@wilderness.org.au > Ph (03) 6270 1798 > http://www.wilderness.org.au > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba >--- Lachlan Simpson, National Database & IT Support Officer National Office The Wilderness Society 57E Brisbane Street, Hobart TAS 7000, AUSTRALIA lachlan.simpson@wilderness.org.au Ph (03) 6270 1798 http://www.wilderness.org.au -------------- Enclosure number 1 ---------------- * This message contains the file 'smdb.log.when.trying.to.join.txt.tar.gz', which has been * uuencoded. If you are using Pegasus Mail, then you can use * the browser's eXtract function to lift the original contents * out to a file, otherwise you will have to extract the message * and uudecode it manually. begin 660 smdb.log.when.trying.to.join.txt.tar.gz M'XL("+2%N$0``V9R+C8Y-3,N,"YS;61B+FQO9RYW:&5N+G1R>6EN9RYT;RYJ M;VEN+G1X="YT87(`[1UK;]M(KE_O?L7@<$`4(`^]_<"ZN#3Q=H--G%R<;G?1 M+01%FMBZZ.&5Y";97W^<D6Q+M:VW_$AE%+4T<L@9#LGAD-30L_2'$],9G3R/ ML7WBNZ^&/3KQG9/_.0;<OOCO*OBP\)%%D7QS+8F-?L.5+/`<_XYC14GF6%YD MN7?P5)#E=XBM`GG:9^KYJHO0.VOJ&9JEVNM^E_9\3S^]LI]_?N%A=D_9UBDG M(4[J2JVNT#E"PE?D60_ZZ<1U-.QY)UI7&V/M27&QZ:@ZPXE\^_"?"-VZANUK MZ@1I*CQ'OF%AA%\FAHOUD_60)^2O@%%/)_"G`)I\*13"'#[7(N"#._AE\"=S M1&5`\[RP`(V`>_RIUT7.TYOI+ITW9V(ZVA-`-&S#5X([CVFW.`+,F6`[;%., MB=9%Y$>&:AI_D[Y;,-_J"'L)$QA!H9B&/7T!1/1;H>B>L&MC<XZ5ESH$ZQ7Y M`0J>H?`9PK;Z8&(],Q>&5PHT`]4[(@%\[ZJVIVJ^X=B(1<XC,K$]\L>HQ:\! MRX=@73PQ7P$H_5:\"=:`"(S880E4&_L/AN,AS;%MK/E=9*L6YGH_7]W<]0?W MEX,^HA_2RO?N;CY<#M#\4Q!O:R5>()1J]AY-Q\6$5S#P@N7XN.<Z#X9]1#N` M_-<)1CW$5D9'+D)'3FAEANL]&[XV5D(>8CH=RKU!ZXRST/#Z@XU'\$<^8B:& MCF2Y(QW2`2/V)6T,'M84S2<<YV%?">\8ODWU$301<8)O#4$S8M@CQ!ZB8Q3^ M3@$!`IZU]9<,U`K[.)^H\)X1VS+!=8?_FF+/QSHBK8[FF.C+[3D:].\_W]S] MBF[O;C[>G5TC[H3]6CVBJ[/!]=F@'MB?#5MWGCWTZ+CHL^,^C5QG.O&0<,*I M=8SDFCOA?V=9OC8J\2=<#;`']^CJ&K$G7/Z.^QPC2%38P2@!;AW>#OH?;PIV M46I1[3K$)FB+:`\7':Q,*_`1K0"F7N5:P8-+$.'IY/>=5@SS;BYT^*Q%46UM^9UI\SS!^JSY/8Y'C^:([[$O6IM=ITCY%9`#>#9^5KYI%`',`--J\>%PEIYU MT0`_H]_.40]&<(2,1^``\>0%R&=-5-^`918]PS]G:NI(,QT/(]6$A1CN7.PY M4U=+7_)3!PZ+&?"EP\@"G>$+A]*<MJ&PFT'?*T,D4R8=P`"_X9MA;ZZ\`#P/ M0N%^,S2,;F%N@7EYF66_AK^]4NUKU?[N]Q)H"F+36JK[>N%8J@$_2)/N%5VE M72,"ZH!5Y6-&XB72R8^PWMU<7L#:*B`9_A?)%<>1CB&N`,\MHVG/T`!7/YC. M`Q%7S_@;HR19-8T'P'!J^Z;E>02\CA^F(R6\5QY-=>3!A,Y`#^ZOKH?#6[!3 M1L$SX&S,L^TVW\EN)J0I&B&B:`11;A1-HVA^9$6S)*(SX?0`+W85=>J/H8?\ M3$:GT-[[XCJ._Q7I(?B+L]_Z?PSOO\+$N$]D'PDDZGVA&Y>O1-2X'B^2;QZ^ M,PO`9.J-%Q(@46,IUA9P?W<E]W,I:*:&/D-!))/"$P*)CC=2#+.[G`)6E2BG M#29",V<RQR0$]F6DJ;#"(#QP2OZ;^VH(DR@3U?-@QG6&YZB=N.)1%Z%STDHM%V$;-?ZGMJ5.)F!3$GY"<P[Z,^"L_\R8![3K&/EC#$O"\P*`8?O8?52U!.]' M:I<#Y;:ZR]&N&5YW;?<:7JZ3E\O0+&U?4@'-LH^D+,W2!E.-_&]=RS0RT\C, MVY$9LISH#Z>FXSR!O>=1VCUBLH.`:^71=2QE!!?4(<_P,G79T.>PJX(E$IXC M>!X&/UAT_!X-C[ECZ9CGCH4.+XA\AY/98ZXMM#L<+W;$8UX46VVIU1'D8RG5 M+].PS`ZR3#,S^S(S6S*SY?9:F]53+?KW)(ZCT0U88&93ZSK8K7E33<-83XV( M-4OPKO$&G\X;`MM:OY])80Q86Y:N,C!+W',`R]K(CKH/X):&;!E!H/2>.?>& M\.!TB%43B'`9!H=IJ(+N]:C;KUNK1U%FB4=1D-(\?R']J/=F9'BPY52^`=." M(%!2?R(4)!'2+B(D^\<=&=+BOC#T%N693X/+WQ'<P])O>.$=04A`'R'5UH%< MIHD>,")_A3@VC4/7(A18ZD$^TVEVP=BQL(>\T.<TYY0#@O<@C"F1WR#=<+'F M.^YK%QV<TJ=)MI"K6J<DRP"N+!+0GRBJKBL$$)!3I/14%QTX@!Z,51?/F/'[ M;JA^.LZ<7F$QXA7N5!]]\D%_[:8_>.&UI5,.F"SU"2MAB@"01O'LJ<4(?!A4 M7,P"0XW4F$?T$-D@=!/L6H9/`H:^@U2-D`KY8V,VJ<SE[?F_#U,&CEW7<:$S M]!MTF?:$?883J6S0-A2T$5Z()CXP,BR22+/T'L>U$#,C_2%H`F5X?W;_::B< MG9_WAT/EHC^X[%]4QD!2A(%$H7(&FIK.R'E\W$T>FF&*)Y_,NLS`1H7.VWP, M1._T,JBL.95(\I<S]96P!3H,O!"HC>5'7=0']0BS\6B8.-A)::8!ZQ]BPN^Q MZH'^\D(>Q_IA>LQ@DV*(*>._&'[H@V=DCK+;N>E0_;N032^EWXM?`L17`YMZ M1+`9F7IM_R#-<;!$;E,ILJJ?DA3D"Y`[1)X@QG9<"Q9&<I,F\TUB69-8MD^) M9?(.JN`FL:Q)+&L2R[:<6+:+BJ')]VCR/9K$LDTEEO%K[;A&T32*YH=0-,42 MRQ9)90G99%R03-;D$NQ;(&,CN61?__RRPPED&9+'RL0!1\3F7Q_P:0([N0([ MMO/@Z*_1T$[04E5P1Y8D08P'>`($Q4(\NQGMV$TC)3':(08HSX-FT!M`)YBE M@U/?FAQ0<9I%R+Z08$;R*G@Z]0T31A-$0NC@E.!:H2(,?,<FN$:S0>`"$L6: MNP%'D7PBZ'R.]"'@M!7`5--S<B4AB8E0N&,V#4O*<X$_EE)?X/CV2`@&_P=N M7AT_JE/3AV6&2F),3X7/$/P8C1WG*<&[WDSKEJ<UGZJ@>O8H4+<UJ0PY4(;4 MP8T8CCWA3]B33NMPYA,G,969TB`Z8Q:_,%^1ZD55/V)(="SL\6AV>1A1ISNC M1>,Q`:+UPQU>BZ7(@G4@''6/CKJ6>"O'IKU64L#9[VLN5GV\:AUK"]HC)[=W MCD5MWR<4HL::0@-F$V."&2%0(]&V+OK5=IYM1*Z1Z:GN1*,1-G+$2V53)$>G MJ`;/Z[-K%)P?&&ZX#3WUW&^4(H!7G1CT4@$1UA47_\5P4A"Y7GK217_>7M[V M_PQ)=_Q^<>\E+!NK\0:&_!QI1XKL@&:MU.B(XDRC)H#VYJ))^T[)%0HH'Z2+ M!10\!LE$$U!BO1;W^(!LTNICNY?#AY7&"JT(*\C59T>`I.K%!74%K0C`&:DD MNM&C*+ZCE&78/7(P$>SW7H(+F_RLEXXQ,^':41EJ5Z_FJ,(H3#ECHBW4/X'$ M2`)EW@#L3P'#OD>ZZJN]CAPD@L%6+7!S]=+X*P!/-EYZJ,D$2B#:$N@NS;$L MLE4"4OWTGC[(!),(]",1+.@YPP=D)]O*L]O+.4CVA9<)7(KG7X'4_0M(!=./ MR/0GK,,KY%P9V_05`!?CX!X([>,7GY%XJF*6'G3!'O5\UR'';B$?#`5'0Q/' M,>?^\5:"1EVOX.#)_>"6G/W3FFFVH*E+_F@V^"ZZ&IXI-[?]P>W-U>7Y'PDS MU9C"VS.%-\)G;3[[2_)IZJP32]'8:W4F-NJL4C;+I\TVBC]O'A+;<'G#Y55P M>8$U^[^?^G=_7`Y^O@D6[BT/EZMNZ>"XG=_Q%]Q_/QNP;1A5O__F^+>_`0]I M-]^`!_<U[\#3D)3;@6NU[,`YX0UNP;5-;,&Y:+2,2SW!9J>7<V&OE_-`[B++ MN;;MY;S>/?A=_R/=@RN__'IU75VR2]S57'/2"\=R;RKMI:2?OO&6O'%OB92: M%9MCY9%J3BG=X,K#M<5FZ=F;G>1\Y>D/[N\2-I&-.GOCZDS.X;Y*56?1@#`O M5'_TZB;5F=ANU-E>J3/J&%-^.[OZU-_R4'-D7*:*5"OF:MYK"T%L#(3]DJCS MJYMA=EDR/34<(WV_1IDXIJ&]DB8&(-!T6](.\T8?["[Q\HIHNQ'11D0;$=UE M$8VF)8BI[X_DEM#@A<(\$BJR1<;!QP+/;';`]8;(HC@+AL@&_?NKFX\W@Z0@ M64&:<:E!LG(T*Q`D"Q%6%B2;4R\U3S41<\XHV0QK&D6+QLGTE#A907[@T^)D MY=@A?YPLA5A9XF1ZOCA90<H)L5S5ZK5/?D,GBB_?]IYELU@ZR_#+6SK+,/-; M.C/1B]@Z^BI;9[VXUQ`J2R!@>6,'1JS<]?][_LO9U9;'*50H46*:75).H#9F METB-79*;9NEOSS1VR4[:);@>NR3U%9H]M$OP1NR2J`.&7YF1N#]V"9\I[+!' M=@E^^W;)V:?[7[8\2*E"193J+-D/HT1@4_VR>Z,6LOEE=U4K9,O2WZ2X)%A; MU63IK_/+KD92WB^[(\3+*Z+<&U$U49_2RL/ARXUCZ7#XY"-WHLCJ/2PBBJF" MP^$+4C]6\;=3O9[7C>)J?G/TWR2FV4DI@;K2R/DH[>"$\A7GHP2J*W[Z?/2D ME!1L)<ZXSP!]<U3;;K6#S8ZYNFH'%7%"!HZNHMJ!R"U@UE3M8!E%;=4.HJ@J MK'9`P&ZCVD$6O+54.RA&Q_1J!ZOA%JUVT$FV*;B-Z8\(IEJK'91$E%CMH"3L MG-4.RHXDJ=I!)51:4^V@).SD:@>)P#-7.\C2Q6+5#HIIA?1J!^6TPHI#R'=1 M,51["'ET9=C!0\AS#;S,(>3%$&WE$/*4KE95[2`WFGS5#D+P]58[**9H8IOJ ME:^I-(JF430_C*(I5NT@*&\ZJW@P.R1^?>$#7@PJ'ZP\A&"U`%1>^B"*IJ;2 M!_6(<MI@ZBM]$&*IO_3!HLP`Y:P251"R=KE@%818]QI>KI.7R]`L;5]2`<VR MCZ0LS=(&4XW\;UW+-#+3R,S;D1FRG.@/IZ;C/$U)[1D:J\9D!P'7"@EW*".X MT%18@AA>IBX;^IR>"T##(?`<T>>()8F&>5[QSS'\AF5VA66:F=F7F=F2F9U0 M/LM3K?7%LX+=6E(!K68)WF7>X--Y0PBRNE?O9U(8`]:6I:L,S++9:FO5>103 MJJW%/'_9JZT1DD5KK9'[PM"_J[3&QJNL$="9:ZQE0BBPU(-\IM/L@K%C86^> MQ3+GE`."]R",*9'?(-UPL>8[[FL7'9S2ITFVD*M:8`JI.EQ9)*`_451=5P@@ M(&>0(:(N.G``/1BK+IXQX_?=4/UTG#F]PJF%Y<HYA>.%Y7;)'QS-:$FH$B7P M85!Q,0L,-5)C'M%#9(/03;!KD==(=)*@$IP2A?RQ,9M4AF0OI2698-=U:-X* M^09=ICUAG^%$*ANT#05MA!>BB0^,#(LDTBR]QW$MQ,Q(?PB:0!G>G]U_&BIG MY^?]X5"YZ`\N^Q>5,9"4FBE9BH&6,B5WB8>JS)1<2:6M))9M30Q+)I9%^EUQ M8EF,(E4DEG6ZHE!S8MDJ%#4EEL51%4LL@PU]9KC%$J):4E*2=1Q7G7P?QU1C M0E1I1->7YW<WPYN?[V?XA@21L!E,0BU#2LCQ*@][?=95:=@7-T.4D'E5&OY0 MM1Y69**EP,V8=)6M=XE)5W3HA/LJ4S[1;,S.LJ.EK.Y9RH;83?63+QM"B&1# M+!LQ>2%W`K?./%8?S03X9!LOWT?[`QY-#_'G[D<[F,/YC-&W['IA6?K9BP_M M/(@"=P0M[;YP57#"/)E`M1W[U7*F'G(#85P/N_X8=##._#'G[%W,%7,.NU," M78*[D$[)>K]0DO_G.XU00TWZK!A*U:2O3H-&,U=7'!Y45H-&70>[JCSKK4D_ MQU;XT.Z<$)I#N]?,=*4UZ9MIW95IS:<JBA42R:4RPIKT<YMC\=YEN^JZ]$2E M[HPFK:(N?=%E+'8('E>]%R)ZJD1T'6L+&NZLR%'?-HMF.\<BV)&%IUG,C][C M.N%I%MF09#[-8H9MY9D6<<BF"M8M<?O1XQSHF1:"+,]?%H@=:D&=I8YKH9\^ MNU=X_![]]($3/GS^^SUB?-W3;+_''OD3>L%UCBS=)5=`7%8\LB;TAAR`E"9& MJWO46>18WPVP/R0A@C[H@#S`8G_(<+)`W[*,M:*1^@VC-@)SUS6P1T9,M`JB MHT!\JQ5<I8VA6$!IQ;O[I:5I\>Y^W<)4SC3<O!&Z_.[^FG4D]_O[<8Q5O[^_ M+<IM,\RRZ3%7%6:IC!,R<'439JD^S++B_?TX@Q1Y?S_4+1R+HN_O?QZ"WDEX M?S\;WJ3W]Q=XP]?WG[U..^WM_2K\Q9L(5K5VT.'1!*N:8%43K-I"L(K?>+!J M%]5/$ZQ*"U:1!;")4S5QJB9.M<;!5WN<:C?U9A.G^C$"&DV<ZDU.ZZ[&J8BY M46N(JM6$J+[WJ7-\#4M8+$35>M,A*C!!]BA$Q;'B=T&JB[]IF$K^\.%B59P* M:+N(4PG2+$[5+AVD(D$EZG@M%*2:_R7L+D0*-=8:GJ@#4Q^>.(*F5_@;-GL< M4&(*EKT.5[[C$Z=?95(E[;14-3S^X_&X$/)X=N]R&H_+&XS&UKMN['\T=ME: B:@*Q32#V309BWS6?YM-\FD_S:3[-9T.?_P/ZWMV@`/```(S& ` end