Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id C160E200C2F for ; Mon, 6 Mar 2017 11:34:52 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id C01C0160B81; Mon, 6 Mar 2017 10:34:52 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 72F97160B73 for ; Mon, 6 Mar 2017 11:34:51 +0100 (CET) Received: (qmail 71538 invoked by uid 500); 6 Mar 2017 10:34:50 -0000 Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cloudstack.apache.org Delivered-To: mailing list users@cloudstack.apache.org Received: (qmail 71522 invoked by uid 99); 6 Mar 2017 10:34:50 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 06 Mar 2017 10:34:49 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 92329182919 for ; Mon, 6 Mar 2017 10:34:49 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-2.999] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id 7Y_hQN8MV8IT for ; Mon, 6 Mar 2017 10:34:46 +0000 (UTC) Received: from barracuda.everyware.ch (barracuda.everyware.ch [212.71.109.144]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id CCC575F36B for ; Mon, 6 Mar 2017 10:34:45 +0000 (UTC) X-ASG-Debug-ID: 1488796477-073c721304ea250001-3Ujofz Received: from securemail.everyware.ch ([192.168.251.133]) by barracuda.everyware.ch with ESMTP id 3cWJc7xX5IZfdBDa (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Mon, 06 Mar 2017 11:34:37 +0100 (CET) X-Barracuda-Envelope-From: florian.engelmann@everyware.ch X-ASG-Whitelist: Client Received: from webmail.ewadmin.ch (ewsprod021.nox.intern [192.168.251.21]) by securemail.everyware.ch (Postfix) with ESMTPS for ; Mon, 6 Mar 2017 11:34:36 +0100 (CET) Received: from EWSPROD021.nox.intern (192.168.251.21) by ewsprod021.nox.intern (192.168.251.21) with Microsoft SMTP Server (TLS) id 15.0.1178.4; Mon, 6 Mar 2017 11:34:36 +0100 Received: from EWSPROD021.nox.intern ([fe80::d8a6:a718:c162:a4e5]) by EWSPROD021.nox.intern ([fe80::d8a6:a718:c162:a4e5%19]) with mapi id 15.00.1178.000; Mon, 6 Mar 2017 11:34:30 +0100 From: Engelmann Florian To: "users@cloudstack.apache.org" Subject: Re: Ubuntu 16.04, Openvswitch networking issue Thread-Topic: Ubuntu 16.04, Openvswitch networking issue X-ASG-Orig-Subj: Re: Ubuntu 16.04, Openvswitch networking issue Thread-Index: AQHSiStdTF8m9syWNkGg5FOO7jagn6FtSzXH///xBoCABNlrnoAC0muwgAAqoJiAABO+gIAJNrJUgAAo74CAATH4IYAH/6qv Date: Mon, 6 Mar 2017 10:34:29 +0000 Message-ID: <1488796464782.63100@everyware.ch> References: <1487342212156.73333@everyware.ch> <1487343738332.23598@everyware.ch> <1487607928435.89839@everyware.ch> <1487762692779.52787@everyware.ch> <1487772843495.3591@everyware.ch> <1488282277438.21283@everyware.ch>,,<1488358434684.50751@everyware.ch> In-Reply-To: <1488358434684.50751@everyware.ch> Accept-Language: en-US, de-CH X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [192.168.251.22] Content-Language: en-US MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha1"; boundary="----07AEE39EA53FF8D712C0A6B757BC6933" X-Barracuda-Connect: UNKNOWN[192.168.251.133] X-Barracuda-Start-Time: 1488796477 X-Barracuda-Encrypted: ECDHE-RSA-AES256-GCM-SHA384 X-Barracuda-URL: https://barracuda.everyware.ch:443/cgi-mod/mark.cgi X-Barracuda-Scan-Msg-Size: 13103 X-Virus-Scanned: by bsmtpd at everyware.ch X-Barracuda-BRTS-Status: 1 archived-at: Mon, 06 Mar 2017 10:34:52 -0000 ------07AEE39EA53FF8D712C0A6B757BC6933 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-version: 1.0 Hi,=0A= =0A= looks like I was wrong. The typo did not fix our issue. We are still not su= re whats going on but we are not able to deploy virtual router on xenserver= if =0A= =0A= system.vm.default.hyper=0A= =0A= is empty.=0A= =0A= All the best,=0A= Florian=0A= =0A= ________________________________________=0A= From: Engelmann Florian =0A= Sent: Wednesday, March 1, 2017 9:53 AM=0A= To: users@cloudstack.apache.org=0A= Subject: Re: Ubuntu 16.04, Openvswitch networking issue=0A= =0A= Dear Rafael,=0A= =0A= my apologies! We had a typo in "router.template.xenserver".=0A= =0A= All the best,=0A= Florian=0A= =0A= =0A= ________________________________________=0A= From: Rafael Weing=E4rtner =0A= Sent: Tuesday, February 28, 2017 4:08 PM=0A= To: users@cloudstack.apache.org=0A= Subject: Re: Ubuntu 16.04, Openvswitch networking issue=0A= =0A= Did you configure the parameter =93system.vm.default.hypervisor=94? If so, = ACS=0A= will try to deploy only on hosts of the hypervisor type configured there.= =0A= =0A= If the parameter is not configured, ACS will get the first it finds. After= =0A= it deployed the VR (let=92s say on KVM host of cluster "x"), if a redeploy = is=0A= needed, it will retry to do so on the same cluster "x". This is a guess now= =0A= (have to check the code to make sure), if there are no more available hosts= =0A= on the cluster "x" it first deployed the VR, it will try other available=0A= clusters.=0A= =0A= On Tue, Feb 28, 2017 at 6:44 AM, Engelmann Florian <=0A= florian.engelmann@everyware.ch> wrote:=0A= =0A= > Dear Rafael,=0A= >=0A= > thank you very much. I am wondering why just KVM is tried in our case? Th= e=0A= > Zone got 3 clusters, one 3 node Xenserver 6.5, one 1 node Xenserver 7.0 a= nd=0A= > one 3 node KVM cluster.=0A= >=0A= > Is there some Setting we have to edit?=0A= >=0A= > All the best,=0A= > Florian=0A= >=0A= >=0A= >=0A= > ________________________________________=0A= > From: Rafael Weing=E4rtner =0A= > Sent: Wednesday, February 22, 2017 5:00 PM=0A= > To: users@cloudstack.apache.org=0A= > Subject: Re: Ubuntu 16.04, Openvswitch networking issue=0A= >=0A= > Yes, I am able to explain. I am still not getting the whole picture here.= =0A= > VR =3D virtual router=0A= >=0A= > First condition:=0A= >=0A= > > if (dest.getCluster() !=3D null) {=0A= > >=0A= >=0A= >=0A= > - If we are forcing a VR to a specific cluster, normally this happens= =0A= > when we are starting a router that was already deployed. If it is a ne= w=0A= > VR=0A= > =93dest.getCluster()=94 will return null( I think this is your case).= =0A= > - Then, we go for the =93else=94 part of the code. In this block, we c= heck=0A= > if there is a default hypervisor configured,=0A= > =93_resourceMgr.getDefaultHypervisor=94.=0A= > - If there is not a default hypervisor, we load=0A= > =93_resourceMgr.getSupportedHypervisorTypes=94 all supported hyperviso= r in=0A= > the=0A= > given zone. And this will be the value of =93hypervisors=94.=0A= > - After all that, at the method=0A= > =93com.cloud.network.router.NetworkHelperImpl.deployRouter(=0A= > RouterDeploymentDefinition,=0A= > boolean)=94, we get the first hypervisor available and try to deploy a= =0A= > router=0A= > in on of the available hosts for this hypervisor type.=0A= >=0A= >=0A= > Was that clear for you?=0A= >=0A= >=0A= > On Wed, Feb 22, 2017 at 9:14 AM, Engelmann Florian <=0A= > florian.engelmann@everyware.ch> wrote:=0A= >=0A= > > Hi,=0A= > >=0A= > > after digging into the source code I wonder if=0A= > >=0A= > > https://github.com/apache/cloudstack/blob/master/server/=0A= > > src/com/cloud/network/router/NetworkHelperImpl.java=0A= > >=0A= > > line 453=0A= > > final List hypervisors =3D getHypervisors(=0A= > > routerDeploymentDefinition);=0A= > >=0A= > > line 458=0A= > > for (final Iterator iter =3D hypervisors.iterator();= =0A= > > iter.hasNext();) {=0A= > >=0A= > > ever gets more than one item in the list? In our case it looks like the= re=0A= > > is only one item in this list (KVM) even if we got three clusters - one= =0A= > > with KVM and two with Xenserver and the VM gets deployed on Xenserver.= =0A= > >=0A= > > Are you able to explain the following function to me?=0A= > >=0A= > > protected List getHypervisors(final=0A= > > RouterDeploymentDefinition routerDeploymentDefinition) throws=0A= > > InsufficientServerCapacityException {=0A= > > final DeployDestination dest =3D routerDeploymentDefinition.=0A= > > getDest();=0A= > > List hypervisors =3D new=0A= > ArrayList();=0A= > > if (dest.getCluster() !=3D null) {=0A= > > if (dest.getCluster().getHypervisorType() =3D=3D=0A= > > HypervisorType.Ovm) {=0A= > > hypervisors.add(getClusterToStartDomainRouterF=0A= > > orOvm(dest.getCluster().getPodId()));=0A= > > } else {=0A= > > hypervisors.add(dest.getCluster().getHypervisorType());= =0A= > > }=0A= > > } else {=0A= > > final HypervisorType defaults =3D _resourceMgr.=0A= > > getDefaultHypervisor(dest.getDataCenter().getId());=0A= > > if (defaults !=3D HypervisorType.None) {=0A= > > hypervisors.add(defaults);=0A= > > } else {=0A= > > // if there is no default hypervisor, get it from the= =0A= > > cluster=0A= > > hypervisors =3D _resourceMgr.getSupportedHypervisorType= s(=0A= > dest.getDataCenter().getId(),=0A= > > true, routerDeploymentDefinition.getPlan().getPodId());=0A= > > }=0A= > > }=0A= > >=0A= > > How will that function return a list?=0A= > >=0A= > > All the best,=0A= > > Florian=0A= > >=0A= > > ________________________________________=0A= > > From: Engelmann Florian =0A= > > Sent: Wednesday, February 22, 2017 12:24 PM=0A= > > To: users@cloudstack.apache.org=0A= > > Subject: Re: Ubuntu 16.04, Openvswitch networking issue=0A= > >=0A= > > Hi,=0A= > >=0A= > > this behavior was caused by the following setting:=0A= > >=0A= > > system.vm.default.hypervisor =3D Xenserver=0A= > >=0A= > > After setting this global parameter to NULL we are able to deploy=0A= > > SystemVMs (virtual router) on KVM.=0A= > >=0A= > > Sad to say, we are no more able to deploy SystemVMs on Xenserver since = we=0A= > > changed the parameter?!?!=0A= > >=0A= > > Allocating the VR with id=3D4213 in datacenter com.cloud.dc.DataCenterV= O$$=0A= > > EnhancerByCGLIB$$6fda4e4f@2 with the hypervisor type KVM=0A= > > [...]=0A= > > VM state transitted from :Starting to Stopped with event:=0A= > > OperationFailedvm's original host id: null new host id: null host id=0A= > before=0A= > > state transition: null=0A= > >=0A= > >=0A= > > Is anybody able to point me in the direction where to find the logic (o= n=0A= > > Github) behind how ACS decides which Hypervisor should be used to deplo= y=0A= > a=0A= > > VirtualRouter SystemVM? Why is KVM chosen?=0A= > >=0A= > > All the best,=0A= > > Florian=0A= > >=0A= > >=0A= > >=0A= > > ________________________________________=0A= > > From: Engelmann Florian=0A= > > Sent: Monday, February 20, 2017 5:25 PM=0A= > > To: users@cloudstack.apache.org=0A= > > Subject: Re: Ubuntu 16.04, Openvswitch networking issue=0A= > >=0A= > > Hi Rafael,=0A= > >=0A= > > We do use the following setup (Test environment currently):=0A= > >=0A= > > ACS 4.9.2=0A= > > 1x Xenserver 6.5 Cluster (3 nodes)=0A= > > 1x Xenserver 7.0 Cluster (1 node)=0A= > > 1x Ubuntu 16.04 KVM Cluster (3 nodes)=0A= > >=0A= > > Networking =3D Advanced Zone VPC and Virtual Router=0A= > >=0A= > > I noticed the error Message was just informational an not the real=0A= > > problem. The problem we got is:=0A= > >=0A= > > [...]=0A= > > Allocating the VR with id=3D4185 in datacenter com.cloud.dc.DataCenterV= O$$=0A= > > EnhancerByCGLIB$$caa6c375@2 with the hypervisor type XenServer=0A= > > [...]=0A= > > Cluster: 6 has HyperVisorType that does not match the VM, skipping this= =0A= > > cluster=0A= > > [...]=0A= > >=0A= > > We tried to force ACS to use the KVM systemVM template but for some=0A= > reason=0A= > > ACS refuses to use that System offering.=0A= > >=0A= > > Hosts:=0A= > > Name ewcstack-vh023-test=0A= > > Host Tags=3D"kvm"=0A= > >=0A= > > Primary storage:=0A= > > Name: ewcstack-vh023-test,Local Storage: Storage Tags=3D"vol-local-kvm"= =0A= > >=0A= > > System offering:=0A= > > Name custom-local-sm-kvm=0A= > > Storage Tags=3D"vol-local-kvm"=0A= > > Host Tags=3D"kvm"=0A= > >=0A= > > Network offering:=0A= > > Name custom local kvm=0A= > > System offering=3D"custom-local-sm-kvm"=0A= > >=0A= > > Disk offering:=0A= > > Name custom local kvm=0A= > > Storage Tags=3D"vol-local-kvm"=0A= > >=0A= > >=0A= > > Creating a Instance with a network offering "custom-local-sm-kvm" doesn= 't=0A= > > stop ACS from using a XenServer systemVM template. Why?=0A= > >=0A= > > All the best,=0A= > > Florian=0A= > >=0A= > >=0A= > > ________________________________________=0A= > > From: Rafael Weing=E4rtner =0A= > > Sent: Friday, February 17, 2017 4:08 PM=0A= > > To: users@cloudstack.apache.org=0A= > > Subject: Re: Ubuntu 16.04, Openvswitch networking issue=0A= > >=0A= > > I think we may need more information. ACS version, network deployment= =0A= > type,=0A= > > and hypervisors?=0A= > >=0A= > > On Fri, Feb 17, 2017 at 10:02 AM, Engelmann Florian <=0A= > > florian.engelmann@everyware.ch> wrote:=0A= > >=0A= > > > Hi,=0A= > > >=0A= > > > sorry I ment "I am NOT able to solve"....=0A= > > >=0A= > > > ________________________________________=0A= > > > From: Engelmann Florian =0A= > > > Sent: Friday, February 17, 2017 3:36 PM=0A= > > > To: users@cloudstack.apache.org=0A= > > > Subject: Ubuntu 16.04, Openvswitch networking issue=0A= > > >=0A= > > > Hi,=0A= > > >=0A= > > > another error I am able to solve:=0A= > > >=0A= > > > 2017-02-17 15:24:36,097 DEBUG [c.c.a.ApiServlet] (catalina-exec-26:ct= x-=0A= > > > 30020483) (logid:d303f8ef) =3D=3D=3DSTART=3D=3D=3D 192.168.252.76 --= GET=0A= > > > command=3DcreateNetwork&response=3Djson&zoneId=3De683eeaa-=0A= > > > 92c9-4651-91b9-165939f9000c&name=3Dnet-kvm008&displayText=3D=0A= > > > net-kvm008&networkOf=0A= > > > 2017-02-17 15:24:36,135 DEBUG [c.c.n.g.BigSwitchBcfGuestNetworkGuru]= =0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Refusin= g=0A= > to=0A= > > > design this network, the physical isolation type is not BCF_SEGMENT= =0A= > > > 2017-02-17 15:24:36,136 DEBUG [o.a.c.n.c.m.ContrailGuru]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Refusin= g=0A= > to=0A= > > > design this network=0A= > > > 2017-02-17 15:24:36,137 DEBUG [c.c.a.m.DirectAgentAttache]=0A= > > > (DirectAgent-144:ctx-b2cdad73) (logid:eb129204) Seq=0A= > > > 179-6955246674520311671: Response Received:=0A= > > > 2017-02-17 15:24:36,137 DEBUG [c.c.a.t.Request] (StatsCollector-5:ctx= -=0A= > > 4298a591)=0A= > > > (logid:eb129204) Seq 179-6955246674520311671: Received: { Ans: ,=0A= > MgmtId:=0A= > > > 345049101620, via: 179(ewcstack-vh003-test), Ver: v1, Flags: 10, {=0A= > > > GetStorageStatsAnswer } }=0A= > > > 2017-02-17 15:24:36,137 DEBUG [c.c.n.g.MidoNetGuestNetworkGuru]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) design= =0A= > > called=0A= > > > 2017-02-17 15:24:36,138 DEBUG [c.c.h.o.r.Ovm3HypervisorGuru]=0A= > > > (StatsCollector-5:ctx-4298a591) (logid:eb129204)=0A= > > > getCommandHostDelegation: class com.cloud.agent.api.=0A= > > GetStorageStatsCommand=0A= > > > 2017-02-17 15:24:36,138 DEBUG [c.c.h.XenServerGuru]=0A= > > (StatsCollector-5:ctx-4298a591)=0A= > > > (logid:eb129204) getCommandHostDelegation: class com.cloud.agent.api.= =0A= > > > GetStorageStatsCommand=0A= > > > 2017-02-17 15:24:36,139 DEBUG [c.c.n.g.MidoNetGuestNetworkGuru]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Refusin= g=0A= > to=0A= > > > design this network, the physical isolation type is not MIDO=0A= > > > 2017-02-17 15:24:36,139 DEBUG [c.c.a.m.DirectAgentAttache]=0A= > > > (DirectAgent-72:ctx-656a03ae) (logid:dd7ada9e) Seq=0A= > > 217-8596245788743434945:=0A= > > > Executing request=0A= > > > 2017-02-17 15:24:36,141 DEBUG [c.c.n.g.NiciraNvpGuestNetworkGuru]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Refusin= g=0A= > to=0A= > > > design this network=0A= > > > 2017-02-17 15:24:36,142 DEBUG [o.a.c.n.o.OpendaylightGuestNetworkGuru= ]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Refusin= g=0A= > to=0A= > > > design this network=0A= > > > 2017-02-17 15:24:36,144 DEBUG [c.c.n.g.OvsGuestNetworkGuru]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Refusin= g=0A= > to=0A= > > > design this network=0A= > > > 2017-02-17 15:24:36,163 DEBUG [o.a.c.n.g.SspGuestNetworkGuru]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) SSP not= =0A= > > > configured to be active=0A= > > > 2017-02-17 15:24:36,164 DEBUG [c.c.n.g.BrocadeVcsGuestNetworkGuru]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Refusin= g=0A= > to=0A= > > > design this network=0A= > > > 2017-02-17 15:24:36,165 DEBUG [c.c.n.g.NuageVspGuestNetworkGuru]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Refusin= g=0A= > to=0A= > > > design network using network offering 54 on physical network 200=0A= > > > 2017-02-17 15:24:36,166 DEBUG [o.a.c.e.o.NetworkOrchestrator]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) Releasi= ng=0A= > > > lock for Acct[3426fb73-70ad-47d9-9c5d-355f34891438-fen]=0A= > > > 2017-02-17 15:24:36,188 DEBUG [c.c.a.ApiServlet]=0A= > > > (catalina-exec-26:ctx-30020483 ctx-430b6ae1) (logid:d303f8ef) =3D=3D= =3DEND=3D=3D=3D=0A= > > > 192.168.252.76 -- GET command=3DcreateNetwork&=0A= > > > response=3Djson&zoneId=3De683eeaa-92c9-4651-91b9-165939f9000c&=0A= > > > name=3Dnet-kvm008&displayText=3Dnet-kvm00=0A= > > >=0A= > > >=0A= > > > We do not use BigSwitch or anything like this, just plain Openvswitch= =0A= > > with=0A= > > > Ubuntu 16.04. Any idea whats going on?=0A= > > >=0A= > > > All the best,=0A= > > > Florian=0A= > > >=0A= > > > EveryWare AG=0A= > > > Florian Engelmann=0A= > > > Systems Engineer=0A= > > > Zurlindenstrasse 52a=0A= > > > CH-8003 Z=FCrich=0A= > > >=0A= > > > T +41 44 466 60 00=0A= > > > F +41 44 466 60 10=0A= > > >=0A= > > > florian.engelmann@everyware.ch=0A= > > > www.everyware.ch=0A= > > >=0A= > >=0A= > >=0A= > >=0A= > > --=0A= > > Rafael Weing=E4rtner=0A= > >=0A= >=0A= >=0A= >=0A= > --=0A= > Rafael Weing=E4rtner=0A= >=0A= =0A= =0A= =0A= --=0A= Rafael Weing=E4rtner=0A= ------07AEE39EA53FF8D712C0A6B757BC6933 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIIUigYJKoZIhvcNAQcCoIIUezCCFHcCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3 DQEHAaCCEaUwggWaMIIEgqADAgECAhRqKArzRiMoMclbQsKdJMSoLMM14zANBgkq hkiG9w0BAQsFADB/MQswCQYDVQQGEwJCTTEZMBcGA1UEChMQUXVvVmFkaXMgTGlt aXRlZDElMCMGA1UECxMcUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEuMCwG A1UEAxMlUXVvVmFkaXMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x NDA1MzAxODUwMTNaFw0yMTAzMTcxODMzMzNaMGMxCzAJBgNVBAYTAkNIMSwwKgYD VQQKEyNRdW9WYWRpcyBUcnVzdGxpbmsgU3dpdHplcmxhbmQgTHRkLjEmMCQGA1UE AxMdUXVvVmFkaXMgU3dpc3MgQWR2YW5jZWQgQ0EgRzIwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCyge5EB5ZP/fnk47KPgdEpuiBd9u7lcdLWxeGLOtrv YYp52fawKeNgm3oQogK4gPQxBMD2Wa080nOPo307UzrQQAe37lFCJqXlLpVBluVq jQdPpk9gsyucalNwstNBHmj1xoXgUfTXhTrRWgkAuxGhGL9odj2+9QxbwVywjikg cidsDzVmo23mXc3xKWik6BIp3zbDjfTTyitIX+NIlDiaMxwq6L5QPnazrE2eNsSJ rHmwz/Ie3gm8aDVy14+gE1snEw6CK2x/NncRcl/WcdaBjQN338DHN5u/FJI84NMt 58y0BYiH3V3zF6qvntm4n0W216jHXcyyDHmSIEDMpbApuAOh/jhRj+BXq9K/Vnm3 PghWJAHXembeS4Ax0sXMUrrC8mQUW+OOELONE2L+odG0+1cwnnLD2CEJmXCIcoCL sQL1Op7zmF8XXOExLZUtR73oNi1sIs8Ic3mrOln8shz8tVkLlKmSskr3ilUKQn7M 5zKX7F6WKlbA3Vy4hz+IMyjEMAg2cAxNuu6MKEneoUrlGUiEJnxjvFmWsegwFRVb BcZepRV+cX0d3aViVieUektNjUGsXrRBeADSqH7jj42IdlA6J0Mcv6HnPjuYn+hU 8XyR2EhycpVfWzsA3LuKmSfqQfty1qNNE6Tsxb7YCBbEt+ijnnNHQJ1XNV/jR5wg 3wIDAQABo4IBKDCCASQwEgYDVR0TAQH/BAgwBgEB/wIBADARBgNVHSAECjAIMAYG BFUdIAAwcQYIKwYBBQUHAQEEZTBjMCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5x dW92YWRpc2dsb2JhbC5jb20wNQYIKwYBBQUHMAKGKWh0dHA6Ly90cnVzdC5xdW92 YWRpc2dsb2JhbC5jb20vcXZyY2EuY3J0MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSME GDAWgBSLS23t0ym5BhnsOTmp8JeEasvv3zA4BgNVHR8EMTAvMC2gK6AphidodHRw Oi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnJjYS5jcmwwHQYDVR0OBBYEFKAg bW1JXbpKhdN3ILJ6uIsO7dWdMA0GCSqGSIb3DQEBCwUAA4IBAQCuMV65UC3RkrbW AhVOWN8VKS1am+0sRTHC379oueJLAv3aWkNL9kDlTC0m+cNiK1/IQ/vVxpPtloqF bqWL4VtIlqauzSLOQuSNCuRPftMDkHf5IgbcHEeyCMi5z7ZM8Q3thlDSV6vC+F8l hQ1CNB8YCHL99BtAGwhQs3Zn33FQjCguqAYsAkbmOkXMUSJ9UflrALhI6YXPUqn7 4JpZVu2lNJ6UgXzld9QpYV3E130Tjx1jdcCBynDL7ibco5VV9CBFxUGdoRiBJr9l omVPyzm7rZJy5hx+qoNnNGoDStJklLF7eogKKYZGxgy9DJDmUevdmBiSaUYNmzCO pJwgXlcmMIIF0DCCBLigAwIBAgIEOrZQizANBgkqhkiG9w0BAQUFADB/MQswCQYD VQQGEwJCTTEZMBcGA1UEChMQUXVvVmFkaXMgTGltaXRlZDElMCMGA1UECxMcUm9v dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEuMCwGA1UEAxMlUXVvVmFkaXMgUm9v dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wMTAzMTkxODMzMzNaFw0yMTAz MTcxODMzMzNaMH8xCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1p dGVkMSUwIwYDVQQLExxSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MS4wLAYD VQQDEyVRdW9WYWRpcyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2G1lVO6V/z68mcLOhrfEYBklbTR vM16z/Ypli4kVEAkOPcahdxYTMukJ0KX0J+DisPkBgNbAKVRHnAEdOLB1Dqr1607 BxgFjv2DrOpm2RgbaIr1VxqYuvXtdj182d6UajtLF8HVj71lODqV0D1VNk7feVcx Kh7YWWVJWCCYfqtffp/p1k3sg3Spx2zY7ilKhSoGFPlU5tPaZQeLYzcS19Dsw3sg QUSj7cugF+FxZc4dZjH3dgEZyH0DWLaVSR2mEiboxgx24ONmy+pdpibu5cxfvWen AScOospUxbF6lR1xHkopigPcakXBpBlebzbNw6Kwt/5cOOJSvPhEQ+aQuwIDAQAB o4ICUjCCAk4wPQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFodHRwczovL29j c3AucXVvdmFkaXNvZmZzaG9yZS5jb20wDwYDVR0TAQH/BAUwAwEB/zCCARoGA1Ud IASCAREwggENMIIBCQYJKwYBBAG+WAABMIH7MIHUBggrBgEFBQcCAjCBxxqBxFJl bGlhbmNlIG9uIHRoZSBRdW9WYWRpcyBSb290IENlcnRpZmljYXRlIGJ5IGFueSBw YXJ0eSBhc3N1bWVzIGFjY2VwdGFuY2Ugb2YgdGhlIHRoZW4gYXBwbGljYWJsZSBz dGFuZGFyZCB0ZXJtcyBhbmQgY29uZGl0aW9ucyBvZiB1c2UsIGNlcnRpZmljYXRp b24gcHJhY3RpY2VzLCBhbmQgdGhlIFF1b1ZhZGlzIENlcnRpZmljYXRlIFBvbGlj eS4wIgYIKwYBBQUHAgEWFmh0dHA6Ly93d3cucXVvdmFkaXMuYm0wHQYDVR0OBBYE FItLbe3TKbkGGew5Oanwl4Rqy+/fMIGuBgNVHSMEgaYwgaOAFItLbe3TKbkGGew5 Oanwl4Rqy+/foYGEpIGBMH8xCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRp cyBMaW1pdGVkMSUwIwYDVQQLExxSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5 MS4wLAYDVQQDEyVRdW9WYWRpcyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5 ggQ6tlCLMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAitQUtf70 mpKnGdSkfnIYj9lofFIk3WdvOXrEql494liwTXCYhGHoG+NpGA7O+0dQoE7/8CQf vbLO9Sf87C9TqnN7Az10buYWnuulLsS/VidQK2K6vkscPFVcQR0kvoIgR13VRH56 FmjffU1RcHhXHTMe/QKZnAzNCgVPx7uOpHX6Sm2xgI4JVrmcGmD+XcHXetwReNDW XcG31a0ymQM6isxUJTkxgXsTIlG6Rmyhu576BGxJJnSP0nPrzDCi5upZIof4l/UO /erMkqQWxFIY6iHOsfHmhIHluqmGKPJDWl0Snawe2ajlCmqnf6CHKc/yiU3U7MXi 5nrQNiOKSnQ2+TCCBi8wggQXoAMCAQICFDssI0IMrWE6sieYxhkhYBSZKDAbMA0G CSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAkNIMSwwKgYDVQQKEyNRdW9WYWRpcyBU cnVzdGxpbmsgU3dpdHplcmxhbmQgTHRkLjEmMCQGA1UEAxMdUXVvVmFkaXMgU3dp c3MgQWR2YW5jZWQgQ0EgRzIwHhcNMTYxMjE5MTIxNjU0WhcNMTkxMjE5MTIxNjUw WjCBjTELMAkGA1UEBhMCQ0gxCzAJBgNVBAgTAlpIMQ8wDQYDVQQHEwZadXJpY2gx FTATBgNVBAoTDEV2ZXJ5V2FyZSBBRzEaMBgGA1UEAxMRRW5nZWxtYW5uIEZsb3Jp YW4xLTArBgkqhkiG9w0BCQEWHmZsb3JpYW4uZW5nZWxtYW5uQGV2ZXJ5d2FyZS5j aDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIl/74gYL9Q3y8i2QKmd 1X6oii49J4AmSztVWtusUjPfDAbJexLZKNS5+WT4zkbFr8PYJo5v2E/JFnHYajoS WAIt83I2/3h8Ihk/Xiyfu1hMJY3rdnOHakowuZldX6vK9Ll5VUcsHWYtmKUqmIoa Jz6YqOS2/+TUNLVV5NF4G4Oq6yZPJ1h0CabjKz4N07tD5YLfRTCCTPsQCluM5PoD bdrwqwHn/2N4U0ptZ9iBdpIouNUAxSPIlQULuz2m0E5M1aql6Stomq7TIadH/SeJ f6iVeEE7UDW4Osc9dkGfHc/+TFdGEp4XuBhlSXw/I7hKxBpDpHOrMfxufHQDpUZz B0MCAwEAAaOCAa4wggGqMCkGA1UdEQQiMCCBHmZsb3JpYW4uZW5nZWxtYW5uQGV2 ZXJ5d2FyZS5jaDB0BggrBgEFBQcBAQRoMGYwKgYIKwYBBQUHMAGGHmh0dHA6Ly9v Y3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTA4BggrBgEFBQcwAoYsaHR0cDovL3RydXN0 LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmNoYWRnMi5jcnQwTwYDVR0gBEgwRjBEBgor BgEEAb5YAYFIMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9i YWwuY29tL3JlcG9zaXRvcnkwDgYDVR0PAQH/BAQDAgXgMCkGA1UdJQQiMCAGCCsG AQUFBwMCBggrBgEFBQcDBAYKKwYBBAGCNxQCAjAfBgNVHSMEGDAWgBSgIG1tSV26 SoXTdyCyeriLDu3VnTA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnF1b3Zh ZGlzZ2xvYmFsLmNvbS9xdmNoYWRnMi5jcmwwHQYDVR0OBBYEFPh2V+o/yxz7ExM3 4Q/VRakVlXQWMA0GCSqGSIb3DQEBCwUAA4ICAQBdO9v6A2zn1CmzCmfz0kMapUUW Nopiv+miDvcuYc16xdBbM97kZ6Ol4beni++VZYXxzSlGhqNPg4r+Zfbu68beNxFX z/VeDCfP92rrU8ARW2DNFbm3pabCv12L24Idcwz/jZC7VfA6xcs7UIieGUYN1oAh ZsiD1mGXpHQ0CNQ0l+mIdG6qgg1lv1r7x6wC7HF8TKlLSkC7DKVszKOpe7ygutlE GFEiWHJm2HRUD866GpZ+dEdzdfS+SXUBC+JeA0GXOJiL/DlDWYWIU/wnbqVfUo8P XLW+Vx362jaKR0nLfZXL8gLjln+tIQ2Qm9r3zD9qRYA/i8g8RVhiQPVRY6l/mfG8 1GXvr/HbNtNH3Xdx5XU0uYV2ATC42F7OgRPb6n0GW61lI2pFmnO+iSWhpJ4Zers+ aYYlEJe/CJ8+3YJ2te3t/nLZW9x+n/vGnWglGj7r72uB0Q1JmTsKpz3J8lS0p6Uj ZPtHNFVu7WeFcZlfXCquUxcsJhuNbO6wSy4ampwq1mlmMETQmOMbg2oluUdrkCkZ +ylkfkPFNfG7+pksIaYSxCbEbdKZSj1gCr+b98Ct1gHQ37h6OPMHuqFno33jJxfE 2VuCLgCyIs3pVjBzHwomN/tdqRUPh7d3CPSkldSh9C5wxijeaOHoXndGCeutpxGM OosMxBRg0rqNRdcmHjGCAq0wggKpAgEBMHswYzELMAkGA1UEBhMCQ0gxLDAqBgNV BAoTI1F1b1ZhZGlzIFRydXN0bGluayBTd2l0emVybGFuZCBMdGQuMSYwJAYDVQQD Ex1RdW9WYWRpcyBTd2lzcyBBZHZhbmNlZCBDQSBHMgIUOywjQgytYTqyJ5jGGSFg FJkoMBswCQYFKw4DAhoFAKCCAQcwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMTcwMzA2MTAzNDM3WjAjBgkqhkiG9w0BCQQxFgQUXGJo 4382xA5ClywB1qHI2BWL5DMwgacGCSqGSIb3DQEJDzGBmTCBljALBglghkgBZQME ASowCAYGKoUDAgIJMAoGCCqFAwcBAQICMAoGCCqFAwcBAQIDMAgGBiqFAwICFTAL BglghkgBZQMEARYwCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMC AgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDANBgkq hkiG9w0BAQEFAASCAQBwdqlnJjCgj69oic31ruwMEPrIqFOiq9RId1lfRlUdqt8t Zx1c6Nb7m/PJm4NLqC/Pa+bs2eK8qDJVtTEdNw6J7z5LaxRWJh/oxJD9gUDQFSr/ IFGiEDRhvnVcmHY4UNCj7YX2ELE7Js7M6KxnqLDp2t+Efq8cFjStPKxTILW8Kblg e1gQiQG5Iv8BRC7iqlohgp7Wad/mh1utB4MU/2qflsBSBH3QxhqCoO3kol1JkWPr L+i6azDPOQ2XBPN5NmHBXhqJEoUKaxHWnKY6HfelS1aAYIGU8JdSBtdLR0AHUGO/ Y1q6kRZraf6PqZsCr5P3tspfKXE4Go8Sti9zZa0A ------07AEE39EA53FF8D712C0A6B757BC6933--