grthtrhthjhtyjytjytkergtrhtrjytjerhrfh4:24 29/09/2026ELF>p@h@8 @55qq0n0~0~@An~~PP $$Std PtdQtdRtd0n0~0~GNUGNUkQqz>aD  @"`!$I(, H!  @ K@@H R D `F!DH B(!DEFIKMNOPQRUVWXYZ_`defgijkmnoqrstuwxyz{|}~[ȴt)|%+;L҆̈́/ A9)wr ʙ̽GbARēMchwW1a\Q;^6\1i:h%2¢ofڌh ]էh{g]zYhvDxV{l/E4hvQ0mOA<3S+fEcTEEc_ʝG:=껛XI4ͫ1A)]>S4W Q=#{k7eM~SLTzo%e X &Ļi4oz2/Y PaU%×C8h%2.r.[$vK bLk(&nt#NcHnHPK`Phbpp|K  ( 02@LHaPs`ahpyyСyK  (/0/@9HP`Kh[pfoȢТ @H! P! `1hpK@N _tt~ȣ/У/ (0@HP` hKp';;D[fSȤФg (0@P`p0:SaХ{ 0@aP`p(5RdbȦЦ 00@@P]`@bpnhbЧ '' ,(>0T``hpo P`.@BpWhyЪ~0`Ы  %P;Tbbj@pЭ0` p&2Je q0Pbc@pа0)`?Ueбt PH@Tpg8гhy0@` % д;  U Ph      @ p  ж c@c0`c`!&!c;! cPR!p!!!!@!p!!й"3"0P"`ce""" "P"""0 8 P XP`p x  ( > R d  (0 09 @0HP`B hpU k k w    Ƚ н         ( 0 @ H, P, `; hS pS a x x     оXX +EȎЎ؎sXY^tIdl (08T@HPXq`^hpx eLwXcNȏGЏ0؏mf(|Hvhnȼ (O08@HPXZ`hjp xD   ȃЃ؃ }(08 @!H"P#X$`%h&p'x()*F+,-.k/Ȅ0Є1؄23456789 Y(:0;8<@=H_P>X?`h@pAxBCPDFGHIJȅKЅ؅[LMNOPQRS T(U0V8W@ZH[PX\`]h_p`xabcdeSfghȆiІj؆klmnopqrs u(v0w8x@yHzP{X|`ah}p~xȇMЇ؇ (08E@HPX`hpxVȈЈ؈ K(08@HP\X`ihpuxWȉ~Љ؉] (g0J8t@HPX`hpxzȊЊ؊ (08@HpP{X`hpxȋЋ؋x (08@HPX`hpx    UyȌЌh، (08@H P!X"`#h$p%x&b'()*+,-ȍЍH؍./123 4(50687@8H9P:X;`<h=p>x?@ABCHHHtH5%hhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Qh:Ah;1h<!h=h>h?h@hAhBhChDhEhFhGqhHahIQhJAhK1hL!hMhNhOhPhQhRhShThUhVhWqhXahYQhZAh[1h\!h]h^h_h`hahbhchdhehfhgqhhahiQhjAhk1hl!hmhnhohphqhrhshthuhvhwqhxahyQhzAh{1h|!h}h~hhhhhhhhhqhahQhAh1h!hhhhhhhhhhhqhahQhAh1h!hhhhhhhhhhhqhahQhAh1h!hhhhhhhhhhhqhahQhAh1h!hhhhhhhhhhhqhahQhAh1h!hhhhhhhhhhhqhahQhAh1h!hhhhhhhhhhhqhahQhAh1h!hhhhhhhhhhhqhahQhAh1h!hhhhhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Qh:Ah;1h<!h=h>h?h@hAhBhChDhEhFhGqhHahIQhJAhK1hL!hMhNhOhPhQhRhShThUhVhWqhXahYQhZAh[1h\!h]h^h_h`hahbhchdhehfhgqhhahiQhjAhk1hl!hmhnhohphq%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݺD%պD%ͺD%źD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݹD%չD%͹D%ŹD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݸD%ոD%͸D%ŸD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݷD%շD%ͷD%ŷD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݶD%նD%ͶD%ŶD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݵD%յD%͵D%ŵD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݴD%մD%ʹD%ŴD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݳD%ճD%ͳD%ųD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݲD%ղD%ͲD%ŲD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݱD%ձD%ͱD%űD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݰD%հD%ͰD%ŰD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-DH=HH9tHHt H=yH5rH)HH?HHHtHHtfD=5u+UH=Ht H=>Yd ]wAWAVAUIATUSLHHtwIHtoIHHHOH (ILLAfHAŅH5CHGHD[]A\A]A^A_DH9HHLhHfHH5H5HMHH5ٮHM(HHE (H5YHM(H u|H5EHM0Hu`H59HM@HhuDH5%HMHHLu(H5!HMPH0H5BHL*B 11HjH=AxfDH}H =1ҾAŅPH ϭLLHLMAWAŅ&H LLHL}A(M*AŅHHE HMMPA(HHAXZEH ̭LLHLM(A AŅH LLHLM0AAŅqH LLHLM@AxAŅGH nLLHLMHANAŅH \LLHLMPA$AŅfH+E1DA DAWAVAUI1ATMUH1SHH$HT$Hy@HL$LL$ D$dH%(HD$81H]HALHj,ILL$@l_AXAą6HD$01L=@H8HuWHD$0HH<Ht>tHD$0LxL?H=Y L 1jH8HLt$(Lt$ 1L=` |$ILHHHLE1PHt$ E1H,LY^AąLHnH]HE1E1PHt$(H"LLpAXZEDLt$(uL?IHH=G 1\H5?L HD$8dH+%({HHD[]A\A]A^A_HD$0H<bAąLHIHHD$01LDL$Ht$HDL$ DL$ At XLHDL$ ;IH'HD$01LDL$ Ht$HOAąt 7HD$0L HljH= L 10HD$0HH<HLt$(Ly>1HvH= HD$0L=HHH= L 1|@A PDL  1rHH=[ rDLt$(A L 1HH= Lt$(-LV 1HH=Lt$(Lt$(L=IHQH=1b fATL%UHLSHLHHHtHt2E[]A\D1LHH=+B1H9[]A\DHH5H([]A\A]f]UD@IuH1LH1!ATUSgHwH5 1HDH HAtDA1Eɹ@LXH,qH=gp[]A\fDH@HSH@ HC8HRHRLbxHjHDK$At]1L@/HpH=[]A\DH@HSH@(HC8HRHR(LHjH{HH5HK(ILHCHH1H5mHHCH[]A\ Lq0@H%p&H=[df.AWL=/L AVL3pIֺAUIATUHLSH8dH%(HD$(1Ht$ IHHUHD$ H ^HH\$ LkIEHHCAC AFC$H|$ HCXHGXHXHHHD$ H@XH@HEHxHT$ B B0IEHo HH8HEHT$ HpIEHT$HxHT$HBHD$ HPHH@HH@LHrHx`L;H|$ IvHW(AAƅvLAƅIELt$ @(IELHpFIFxHD$ HxxLA HTLH2HT$HxxHHHt)LH/H5( Dt$ED@Hھ1LH=fDH|$ fDB YiIvH}vHHHpMN1 HamH=gLiY^1HD$ HKHxhH5%DA Hh1DH5VLXHuLB @L 1H&lH=1:)DyHHEPH= 1L,@H|$0XZ Hھ1H=LAH|$ fD@Hھ1H=LA H|$ LfDMN1 L+HBkH=MVHD$ 1ɺ$]UHxhfAWAVAUL-5oATLMLZUH-eSHH(dH%(HD$1LH5[Ht$L +HH@LnH BHL0IHteHD$1HHC0LxI;I9} HC0xtg1L+LHQH5+LILH0dHD$dH+%( H(L[]A\A]A^A_fDHD$1HHX0HCIFH\$HpHHt$HCH~Ht2HT$ pHHtpLHbH5riDL~LH1@zLHp+ D$ ^ILH0|$ HLHPDL$1L*@XZ^ff.AWAVAUATUHSH8dH%(HD$(1&H*H5HHIUH*H5=HHt$HIOH5+H>tz|$HLh+PH0lAٹ@H=1:_LAXHm+]U#HD$(dH+%(H8[]A\A]A^A_I]Ht$ HCH(HCHHx8Lt$ I~HtH5~I~kHC0L5kLH8H;LD$ H;LH$xLIHC0H8aHULIHC0DHjDD$APHL$IQAWARH QHH2H0HHJLHH5L)1HjH=.H)"]ULfHSH L)H=HLJPHQj1jY^LH*THELH0uHCL* HjH=HLH1H|$ fDL|) HiH=@H|$ J]HLPA1L)@H=XZAUATUHSH(dH%(HD$1H)H5H$HIH)H5$HHT$Ht$ HHtZ|$ Ll$tnH5)HH@dHD$dH+%(H(LH5)[]A\A]H5A)HQH@dDEtH5)H,A]Ut#A]UwH@drH@d \|ff.ATUHS`H5H(HHIOH5)Hu[LH5g)]A\ HAHkgP1H=L(@XHcZL[H(]A\sAWL #)AVMLfAUIպ(ATUHSH8H $Ht$H 7dH%(HD$(1HD$ HD$+IHwLH5*H2HHD$Lt$HhLeIF HD$H@ HO@HD$H5ԉH@ HD$Hx LH5%H5(IHCH8HCHMtLsLH51LILkLt$LI}IELDL|$ LD$ HD$T$H@ |$<HD$H@ 8HD$T$$|$ H@ PHD$H@ xHD$t$ 11HL@mÅH<$ 1H9HNHH\$LHH 'MLhQH 'QHH4H|$ HCYH^HG HHHLH'H5fDHD$(dH+%(H8L[]A\A]A^A_fkD$ fDSD$fDLc(DPHELP 1HcH='&2AYAZE]|$t D$|$t D$|$ t D$ |$$t D$$LLH&HLAH]UHAٹ@PL%1H=n%Hbm_AX@D LA HbH=+%6 {Lc(DHELP 1HSbH=$A[[f.HHKE1LjLMjjH|$0\H 1LkHaH=$DL@1HaH=W$bDAH]U(DLc(DHEHzaPL1 H=# XZL@1H6aH=#AH]Uf.ULH5SHHHLl$ HD$pHL$HLHL8蔶HHXH 11踹IHHH1H1H5HpH3LHD$LD$HHOHLE1ɹHH$PH$Pk_AXAÃ<H5LD\$0D\$DPHHUPH|$01LM $z3XZIl$IHH|$@H5ηHD$HD$H;D$hHD$(HWGH|$8H5=获H\$0HC0H@xHC0HlH$dH+%(3H|$HHH5M[]A\A]A^A_黹H5wL)A fDA DIHl$ 1HTLhLHHL$ItuLHH1 OH5L蠶AmDH|$ I鹀1LHT.詺A6fDH$H|$(LHH0hH5oL!+@LL$ L->1LLHoS*H5:L۵ rL1LH~S@H|$ I1LH3SFɹH5LzDL-L@LHR艹H5L:@oL1LHRXELt$PL|$XH|$@H5LL$ @L1LH[RH5!L´H-HD$(H.H|$8H5>菴HD$0HLHTR0H@(HLH1蝸H-{L^1 HQ\HgD1fHH|$HOÅH$dH+%(H[]A\A]A^A_@LD$HH$HH8HHڹ@UH|$0IWL1辷Y^D\$. H1LAHQ萷HD$0L@HQ H=YH@0HLH1UH$dH+%(HcHH|$HH[]A\A]A^A_HD$0Le@HPH=H@0HLH1H$dH+%(ufHcHyLL$ @L1LHO蝶H-L1 HOHoq赳L-P>fAWAVAUATIUSHڵHH5|HH5HxPHѱHU@HE8HHEPHuHHHP -H HEPHHEL-INLH@H85H}xL}XLuPrHALHHEHPjSjjAWAVHuH0HHt'HLHQ[H5A]A\A]A^A_L@1LH=HQHL[]A\A]A^A_ff.AUATUHSHdH%(HD$1HH5H褼HIIHH5 H胼Ht$HD$I;H5H*u&LHD$dH+%(u*H[]A\A]D$HcHLAE`&off.@AVL5S AUATUHSH dH%(HD$11HH5H軻HI`HLH螻HHL$HT$HHfH5HADELL$H-a1LHKHMHL$HHC@HS8LHHC@H<t-HD$dH+%(H []A\A]A^蓲HLHѺHHH.{0{ L-JLcHL藲C LHC@ÅLHL11@XHcH+LF!HHL,HHHHCHH1HxjLL$ LD$sHHHHXZIcHL覲LkhHtNH1@LHItL1ɺ"H5}L葯,@HSHHKHH0HyjHHLHH1 LiH2IHKL1Ҿ腪H5YLH1LHH记H{h1ɺ$]U9H5LʮeDH LlGL3H1@LzHcH.L1ɺ$]U躩H5ULKQAWAVAUATIUH1SH1HhHT$HAdH%(HD$X1HD$([HD$HH|$HT$(HD$@D$0#H|$(IH|$H4Hp I聨HD$HkH|$Ht$(LN,7m {1L|$0Lt$@LfDHH9QIEHLAEHC D 1fHD$LLHD$8LHD$HELtljD$A9H@HYFPDL$1L~H=iXZ1DL@1HFH=A4Ht$(H|$eH|$H5:ԩHD$XdH+%(HhD[]A\A]A^A_fD@LA HEH=p辭@E1|@L8A HbEH=8膭m̪ff.AUIATUSH(dH%(HD$1蚦HH5H$HHɬH5HxHLI8H5|L跨HD$IL$(E1E1It$HIT$ PLHD$PVY^Åu~HL$IT$0LIt$8LD$蒮ID$8HHIT$HI|$@H苻ÅH5H袪HD$dH+%(H([]A\A])HALCPH)C1H= XHcZHHDٲHALP HB f虲HALPHBkϨff.@AWEAVI:AUIATILUHSHLD$QHttHø{(tH[]A\A]A^A_HLLL)GHsLHEIEH}t LIH|$1 D$-KDDD$ܫL LIH=1ǤD$EDA DL}LL L}#HLDT$HDT$H$HYLIfHXfL L/LLB L\$L\$_fDL\$$ɪLJ  LIFD$L5L1 *H=|蓣D$f.f1LL\$HT$@HL$8)D$@)D$PD$HD$@)D$`LT$L\$LD$8HD$p@LT$ HL\$(Ip LD$HD$裝H|$Ƅ$!H1t$L\$8LLL$0LY LL\$(輢Ht$ H|$0@HƄ$^I_L\$IL-L1:H=UD$hD$L\$LT$H|$L IHB1'L\$LT$cAWAVI1AUMATIUSH(D$pD|$xHT$H HL$L$D$ lHH/(HH̚HH`EHh(HH HEA$ HK|AL=)҉C S$LqL(HH^L;HCMHLL Ht$`IL{LIHH8HCH8HHLL$L$DD$HL$,HC_AXHlHLLHAHt$`LˤADžHSHH<$HRHPHSHCHRHPFH|$HLLHjLL$xLD$ HL$p跳Y^ADžH|$t1HLLHjLL$xLD$(HL$pAXZEE1HHLLADžNH ILLL&H ϸAOHT$`ILLADžHo HLTH$H A H5k HH(D[]A\A]A^A_fA L1 1HH?H=ÿڞL) 1NH>H=語kD1L\H>H=czH/HD$/fL 1sHv>H=#:zLIHC>H=1L 1VH>H=þAԝ踤LIH=H=1蟝`f.Ht'UHSHHH6HsHH[]ѢLF 1HV=H=#:f.ATL%<@1UH-LFSLdHHH;1L3Wu#H;1L4Au-[]A\LALH1 I袜[LH ]LLN1A\~ff.AWHbAVL5<AUILATUH=SHH}-I}L4HHH}LH¾9AątHD[]A\A]A^A_HEHLLL SH1H賛I}YL^谛IHtLH}LH¾5tAąuHEHLLHL AW1NXZI}LLI}4I}LI LLHH?AąI}L裠H}L!ښHHtH5vDžImALL1pH=\sqfDLx1LZH=/A@>LILH1@DHȚ(L9LH1/ff.fAWL=:1AVL5AUIrATMUHLSLHMHLWHT$LH $yH $LIHT$H"IHvLCMyI}LL$H-:HL$$I}HL1ÅHT$PI}H۝Å1H|$Xt HT$XI}H賝ÅH|$`IEtHT$`H8L1舝PIuLÅHL[]A\A]A^A_LHL1@NB苤HALPL L1XLZH5E1L;HL1@HڗLHՕIHLCgL#HL1@T蒗KDѣHALPL L1[YL^H5E1fLLL1@"LH5PE1ВLHL1@[DL LL1 w–CLLL1 ~蟖LH5E1MATH {VAIUHSHHLOxt []A\@H{L[HH V]ALA\鱚AWAVAUATIUHSH8dH%(HD$(HCHD$HHD$HI$L=X5HLHGHHH{8H5Hk8I|$HÅuDH1[]A\A]HHHHt]H{@H5Hk@h@)HAH"PL1H=諃XZH []A\A]ATHH5L%UHS菏HHHXHjL ZH DHBATPIFHH1H۳jH =CL ATH}BPLHIHH#jH CL ATHB P߅H 1[]A\@UHH5HɎHHL@H\jL CH JBHBPHOP}H 1]D|AWAVAUIATUHSH{AąXHE0L5U1LH8ЇLM1L=YLcL螅Ã[IEpHE(HHE0LH8&ÅHE0LH8LcȸjHcE1 PHLHPHUPH$PjR+zH@AątX艍HLEPL1 tLXZ'LLIH=THD[]A\A]A^A_fDL 1CHH=誀1LLLb肀E1ɸDLsLL1@UAObf.LLL1Q"5D@L[LLA AWAVL5AUATUHLSHHhdH%(HD$X1yH;L-2LADžJHH|IHH;LyHE1LHHD$L:PLL$`轁AXAZADL$DAA_HD$PHt$H H4$H8褋D$ ;8HHD$H8HT$PH4$H;Hz H $Ht$WH $D$ 1HD$H8HT$PHt$H;BHD$|$DH;LH;LD$L5D$'HCHH@H8xH;LHD$(xH;L1H$vxHD$0HwH<$lLLŒID$HH > LIH HH1IcH5T|$IF{HD$HD$8H$M<H5L1HT$(IHt+L|$8H5֮L1IL|$IJHD$HT$0LLH5Lx1趃|$'HH=IH5L裋K>HHKD>fDHI98H8uH-nL1@H^HA V|H5LxL"LH1@)|@kE1HALP1HFH={A[[HD$XdH+%(jHhD[]A\A]A^A_ Lj1LH=A{H5AL9wALL1 UH=@AE{bLP1LH={;f Lr1LrH=Az[$LL1@eH=zD<$*f Ly1L:H=Az@L\1LǠH=SA XzuHE1HHL$ T$ Mt$jjPH ATPHPjjH=4A |k= mHEL_P@bH1H=A5kXZfD@ELyA HH=jf@XLAA HH=xjLt$HDd$TL|$XH|$ H|$ht'HH|$ H$H荺H|$hÅixH LHlIHiH|$h uHH\$ LDd$0I$HpLHyHCHLA$HuHt$pHH\$ Dd$0(sH|$hNsH,$HLHcH|$Ht$(HHHcHL$Ht$8HHHIcH\$H]ELt$HDD $ kHLe@PHDL$L@1lHH=ѕi@LkA HH=hL]@1HH=wA h@1AL,HMH=ChRL=@1H"H=A`h!efDAUIATIUHSHH(dH%(HD$1gHTH5HoMtPAUMtHPI$Ht@HT$Ht$ HaA1EtD$ t3n]UDHT$dH+%(u$H([]A\A]HD$]UDdf.AWAVAUATAUSHdH%(HD$1HHzHH1H5I0pIH\L{HLnL=L51LeLL@fC ALLL1@ E1f9f.AuR@1E1LtH=H=>afHD$dH+%(HD[]A\A]A^A_L 1HH=Ah]U ff.A^H1AWMLE1HH=eY^\DL=L5C 1LLLeAA LLL1E1MeH51 bDL1H5/nIHHs@HHtdPH$LH=mHHAnEmHL1Mt$ LE1L/dXZ:HLUM1AWH=W HCAh]Ucd_AXAuZL#LL1@E11d@LaLL1 Ah]UdLLL1 Ah]UcnLLL1@+cLLL1@#Ac"LLL1 Ah]U_c`DAWIAVIAUIATULSLHXt$dH%(HD$H1MtIHtHEH11_IHHH|$0Lt$8L|$0q@aLhIHdHHHcL[IHH¾LjA7E1uNDAw2A Ht#H@HXLH0-\Hf.AIL9vLIWKvHDAvA HtHpH-LI[HEAL9wDL$t.Ht)H;LH HOH=p6Ht(LmMAE u D$HLH53E1]HD$HdH+%(HXD[]A\A]A^A_DL@1HH=aDLǖ@iHH=1`LH5A }\HtH;H5i\HHFH}H5I\HE)@L3M_M~8MMAM 9D$.MMMMEMbLϾ@LD$ L$LL$iLL$L$HLD$ LHxLL$(L$ LD$HD$gLD$HT$L$ LL$(L)LLL$LL$ jLL$L$HLAWHL-;1LY_XZfALF1@HpH='_LH5AJZPDD$IU0LHHT$fHT$IAIM@H@@uHt 8L-qLR1HLw^Ly LH 1U^LH5#Ah]UZLD@1HH=^L@1XHH=A ]L HpD$GL HKH=l1]LH5[Ah]U8YHD$ubL@1\HH==]L@1eHH=]L-L-L1HuXL\\L-L1HGQL\.1|@8|HHuHBLIILA9M)1D;LHH9 DLL9uA9t@HMRLHHAPHL~L-L1H\|L[CL-LD1H.vL[L-]L֐1HqLc[XfAWAVAUI1ATI1USLH8HD$xL|$pH$HHL$LD$HD$dH%(HD$(1HD$ WHfH5FLHSHxteL@1H;H=QAZH5;HJVHD$(dH+%(H8D[]A\A]A^A_@H@E1LD$ 1HHHHCgAƅH5L1L7cHHsHiIH'HMILt$HL$HT$0Ht$bAXZEHXLLSH\$HDL@1H&H=<YDL@1HH= A TY@L]AHH=ЅYfLy@1HH=XLDL;@1HVH=lA XLY@1HH=4A|XUfAWPIH AVAUIATULLSHHLL$Ht$0L L$dH%(HD$814bIHPH|$0HEHT$LHGHIGHO@HGHGHGIGH@`RHT$ RHLL$0LD$8&[_AXÅHEHHpIGHx`XtHEx8KL5H@1LLoHOWH|$0HuHG8LO(PHG0LG PHL$ HT$(WY^H|$0HLMLMGIuw(HL$THXZH`LHH5gTHD$8dH+%(HHL[]A\A]A^A_@EL|1@HH=4VHcH]LpWIuL\fD$x@1LLH>VHct$LiL5ς1@LL!^LVHD$0IWLL$LD$HJ`HpHx@HUZLuoH5ˌLTKL{@11HH=DUD@LHLI1jU f@LLL1BUHcRDATIUSHdH%(HD$1TH*H5H\HHHH@ HHH:-LUH|E0HEA:toHEHLEHSL LH0HbHXZHLHċH5JR HT$dH+%(H[]A\H0HLHZtHU HELUHgfDHM HUE0HHELEL 4$SHH0HUZY^HHT1L@HH=vS ?@14f !PAWIAVML ҊAUIH _ATULLSHH8dH%(HD$(HHt$@H$V]IHHD$L8HD$HD$HXHhLpLh(H@ IGLmEwHD$HCIIuHX`H@TtAtvAHt$HtH;[H}QQ@L` WHD$(dH+%(PH8L[]A\A]A^A_f.L|$Ht$ L^A]DE HD$ 8I9H;HT$D^ffDLt$LMLDt$XHHLTHuIuHxpYH-tHt$HtH;ZH1L)HmQH5+LO@F]UHLDRH$LH0eWHcuADDL$WH:PDL$1L@HH=sPY^Ht$HL- 1OHH=sPDH-ysBJHHPLL$1HwLBVPXZMLˇ@UH=H=s!P`gMAWL LAVIAUATUHH XSHӺH(dH%(HD$1Ht$HD$YIH|MnLEL;IuLLD$PWLD$H|$HLHVHILHD$TIHH|$HKLHLL$PHHLHCH5LHD$dH+%(H(L[]A\A]A^A_fLL]IHAL1 HZH=qN LH|OI6LT]@Lk1 HH=9qBN 릐Lr 1HH=q NPKAVL MILYAUIպATSHH HdH%(HD$1HWIHLROu^H<$HsLL{FHHLHH59KHD$dH+%(HL[A\A]A^fDHL 1H=pM1H$1ɾHxFLH55KH3LS|D fL.q 1HH=oLrHTTHHKH H5;H3THL$HT$Lx0IHt$ X|$ H5LGD$IEHHHHF]UEHcLHD$dH+%(H([]A\A]fR|$ lIE IUHH<H MHD x(>H54LD$FD$>DH5)HYI\@D$ AE4HD$IE8f.IE Hà  D$ AE4HD$IE8H5݃HHGfDAVAUATUHSHH0H4$Lt$IHT$LLdH%(HD$(1LJAątU=4uvtJLLH\$D$IAąHD$(dH+%(H0D[]A\A]A^ÐD$9t`cH HcH>fDAkK@'LIHPH=<1IxDHtHcH>fDA K@SLRIHH=܂1BIDHH(HcH>fDHhfS 5HPLL$1L/H=kHXZ|$"D$HHcH>H fHT$Iؿ1H5AOEUf.H ρHT@H@H@HH@H@H@H%@H[@H@H A$@H @H @H @H @Ht@Hۀ4@H$@HfH/PLL$1LCHH=GY^fH_H[HHKH1t@HՐdH &HHPH4Cff.@AWAVAUATUHSHhH|$ 1t$1HT$H2LD$0dH%(HD$X1D$LHD$PBIHtD$H+HcH>A H5LDT$ADT$HD$XdH+%(\HhD[]A\A]A^A_L ~L= 1@vL#LH=~gEHFHAHLHD$T,PLL$`GAXAY#T$LL%iLLOT$LLLHOHH HL$L111HT$PL A+ - L1LH=&~DAL }@L }@L @L }@L X@L }@HcIL H9D$L5t$taALl$8LcHDHD$(T$LuE1IM9Jff.AWAVIAUL-ATUSHHHfDsI>LD#L{ AIV(LDHMvFAą[H H9uI>LL=Sz@@LLHI1Lz@HN H5ւHJu>1ALzLL@ 1S@A^0HD[]A\A]A^A_DH5yHJH5{HxJH5xH\JH5UaH@JH5^H$JH5THJtTA:fAL5yL1@H=xAU?fDfDAWH5\oAVAUIATUHHJH"y@HI7HHID$HHHEI$H0+KAąHEHHL}HelL07IHLpLH"@8HHL"MID$HHID$LeL} L5LL>IHZH5HE#H5,xLEH5 xLmEAEoEL L HHU(1HEJAąUH9AąHILHnjH L wPHnHP/@H D]A\A]A^A_fDQIHELP 1HNH=a_HELPL,1HW,2AYAZLL1L5TLl L1p?/ff.@AVLI1AUHuI͹ ATIwUHH=1TH1LH5a=LLHHPH]A\A]A^/AVL[I1AUHI͹ ATIUHH=SH/1LH5a@=LLHHPH]A\A]A^c)AVLkI1AUHUI͹ ATIUHH=QSH0LH5aA\A]A^&L5پH-pX1@L<LHd(At^4HALPHLZ@11(XPZH1)[L]H5A\A]A^@&HcLH[]A\A]A^(fDAWAVAUATUSHH $~}FIEIHDHD$A@HlI$LH/t(E~;L4$DII9t'I>H/uH[]A\A]A^A_@IL;d$u1fAUL-ATI1UHLSHHHH(dH%(HD$1LD$HD$4D$ uXH|$HHt$ -Dl$ E8uuI$HD$dH+%(H(D[]A\A]-HL PDL$Hd;u1H=_a&Dl$XZHH55HI$ DDsHM@1SzLH:H=_A%Y^8DD,HL PH:DL$R #ff.UHSH8dH%(HD$(1HHuOHtJHt$HHT$H$D$Hl$$u%HT$(dH+%(uPH8[]fDܐ&H9ILP@1UH=^$XZ@"ATIHdH%(HD$1r$HH5 H,HT$Hx8H[Ht6HLHaH5#]" HT$dH+%(uIHA\Ð|$0H H1PDL$1LH=7$D$ZYz!f.ATIHdH%(HD$1#HH5 H+HT$HxHHt6HLH H5! HT$dH+%(uIHA\Ð|$/H HG/PDL$1LH= g#D$ZY f.AUL L@/ATH OIUSHӺ8HdH%(HD$1H.-IHH$L H,$HH]HHEHCHE HCH@HE(HCH@Hp#HEH$HxtmL t!HctAHRL#LL(HD$dH+%(HL[]A\A]DH5L L1@H.H="" wLnF 1H-H=!^0AWIAVAUATIHULSHHHH$HT$LD$L$HD$dH%(HD$81+!HH5He)HT$0Ht$,LIPtLT$,HD$0]UnDHT$8dH+%(HH[]A\A]A^A_L|$MtIuHHLIHtIEPHEL|$MtIuXHLIMtIE`ILt$MtIu0HLI1HRAU8G]UD7ff.AVAUATUHSH dH%(HD$1HH5EH(HT$Ht$ HID$ Lt$CH5HAnnL-)H-` ,HALPL@H0 1XZ+HALP5 HL1fY^HD$dH+%(H LL[H]A\A]A^2 fH51H1L/H(; H=HD$dH+%(uZH LH5 []A\A]A^H5HA]U]UvDEtH5HMcVff.ATHUHSHH dH%(HD$1HH5@H0&HT$Ht$ HIt7T$ HD$t9]UnDHT$dH+%(u%H []A\Ao$1]UDff.@H(dH%(HD$1HT$Ht$ A1EtD$ t&n]UDHT$dH+%(uH(ÐHD$]UDf.AUATIUSH(dH%(HD$HLHD$H$H?HD$HH52H$E1HcP@HH@8HHtgDm H}H HUjHAUHE1IjjHD$ PHݾPHu$&H0HHt@LH;H5BA HD$dH+%(uBH(D[]A\A]fDL@1 HN.H=U"A eDAWAVAUATUHSH8dH%(HD$(16H?H5AH#HIeH>H5H#HHL$HT$ HHgH50HAEEHD$ H>HdHD$HH8HT$H5ǽ!Ņ8HS(HL$H1H5!HC0HH{8HcCDHH,HEHcSDHC8HI1HUdH+%(u!He[A\A]A^A_]ø HL HH5@@HATIH5UHLHHLHH]A\+ff.AWAVAUATIUSHHbH5(H0 HIH_H5ɣH LHLpXLxHHH8HP0H`HPLMPMAVAYLAZH52HLMPu`HL%C1LRHLHMPHu L_HAXADžurHM`Hu HLŅu!HLH5[]A\A]A^A_@ HHAPL/1LXZY HEHPLL1Y^Z@HHcL[H3]A\A]A^A_AUATIUSHXdH%(HD$HHMHD$@HD$HAHD$HBHD$ HAHD$(H=HD$0HAHD$8HdH5%HHIHkH5THHt$ LH H5mLHE0H}8HXHHUHjHE1IHD$ PHPjjHuH0HHLHH5hCHD$HdH+%(HX[]A\A]@L% H- HLAPLѿ1 HXZ|$ tHLJHHSHC0HRH~HXrf.HC0ZH9tW1HtL8uE 8 u5HHuW1:Vu"~"1fDH9~L9Lt1f.AWAVIAUIATUHSLH(dH%(HD$1HL$HD$AąHt$HHHAHD$ ,PLL$^_L$1~fHT$HH9D$Ht$HxHE1IED$HD$dH+%(H(D[]A\A]A^A_DL=IL%%#1LLLtHD$MLLL 1JD$QDML'@PH1ATH="AXAY1@H@APLL$ 1HL>H=Z"XZL=aL%=":AWAAVAUMATIUH-"SHL-H$H|$Ht$@A~MLܳ@PHPAUH1Y^D$HD$xdH+%(D$HĈ[]A\A]A^A_fL ( fLf LH1E1\$1LڍL⾩HAHcwHHߍ~FLl$MIfDHC4EL1IعHI/XZM9uLl$\$1LvLHE1AHcHHw~JLt$MIHCtEIعL⾰H1IAYAZM9uLt$HHD$\PHL$@HT$8Ht$0H|$L$LD$xD$A[[qLLH1CHD$hLHLHD$I1D\$TE~HE1H@HEIHD$xLHB41ID\$dY^E9Ƌt$D$8AAƒA u&HL$pHT$ELD\$诼D\$DE1LnLHDT$(D\$DL$ VDL$ 1LLKH3DD$t$LHL$pHT$8LHDL1DtDT$(ED$<RA]UADljD$\$HAHPH/1Lΰ@gXZL @L &@L @L u-@L t@L d@iILǯ@PHZATfD.]U6HLHPA.]U@1L_A.]UAX LHL=1D$.]UfLH1LbHrP1IL y@AWAVAUIATUSH(dH%(HD$1VH_H5HHHH^H5 HHt$LIH5XLn|$L5L- 1LoLiLoID$@ML$PLED$IL$pH@`AT$ At$0At$XAXAYÅgtLLL01H5BHBHD$dH+%(H([]A\A]A^A_!HAپdPL}1@HH=;AZHcA[HHID$(Ht$H@HXH^HD$HpHLQHt$H4L5H|$H5  -H^HmPA 1L@LX ZH$HHHt$HJeL<~1@H H=^H|$H5kL5SH5S1L59L~ HHH=HcF:f.AUATIUSHdH%(HD$1 HH5~HHI9HH5|HsLHHH2H5L!HLMXLE8HHM@HU0t$EHPuHuH HHt2LH|H5 HD$dH+%(ujH[]A\A]Ð HԥLf.H~ APHe1Lt@H=3 XZff.fAVAUIATIUHSHH dH%(HD$1HXH59H)HT$Ht$ HItPT$ HD$t2]UnDHT$dH+%(uCH []A\A]A^D]UD@Iv@HLI$AFH1f.AWIAVL5AULMLATUSӺPHhH$Ht$Ht$@LL$ L HD$(H$HD$H$HD$dH%(HD$X1>IHrHD$@HL$H=H$H\$@CHD$HHC8HC HD$HC@L{LkHC(PHCHHD$@H@HH@HD$@H5H@HHD$@HxHH|$ 5H|$(H(H|$IH|$IH|$@HzHD$0HHEL@4EDL$0LMcLLyILHHp HHD$81HuHSH[LHHE$Ht$ HEXHEHcHHxHEHt$(DlH}McH LHLHEHt$D<H}HMcLHLbHL$0HEHt$ HEHcH|@LHD$HHD$PHLHH THIHpH5xHH1|HH HCLt$PL;L|$HL%LWƅAE0T$PIEH|$Ttt$D$Tt$IEHT$L|$HPtt$D$Ht$IEHt$83IEHx't$I}E111ÅYH|$@HMHUHt$HGHD@ZHHLHxH5X"fDH5HHt$LHD$XdH+%(UHhL[]A\A]A^A_fDHL ,HD$8HH1 H|$81L H LH/Ht$L\L HH=4 D fH|$8Lv1@HNR W|$Pt D$P|$Tt D$T|$Ht D$H|$Lt6H|$81LSv HHcIʼnHL; PH|$HH1EM]_AX3f.HLLLjILuH ujjH|$XH 1LU rH/af.kIʼnH dPH|$HL1EMHY^H|$8 Lھ8LtH5cHkfDL 1HH=zDH|$8L1 H>~LIʼnH HPH|$H1LEMXZFfDAWE1AVAUATUSH8H|$dH%(HD$(1eH6H5rHHcHHL4MHAvIѹL- 11L%LLLL=NQA~8Y^~<IF0LM@D L41SHXZA9^8MNLsL1 LMN 1LssL꾌 LMN(1L`sL꾍 LMN1LLsL꾎 LIV(H1H3H53sH4IFHHMNLL1 L5IVHuXHHL$ ADžtYPYLLILL 1HD$(dH+%(WH8D[]A\A]A^A_fHD$ 1H5rH@H8F1H5rAHD$ H@H81HD$H;D$AD$EELkrLL 1D\$EELLPr L1$HMNHD$'MFAFDExHMXPAWA SAv(Av T$@HuvHL$8H0H rHH5fLqLL1 AD$A!@A AWAVAUATIUSHHdH%(H$81HDŽ$DŽ$yHH5HHHD$PHH5*oHH$H$LHIH5LI~0H$^Hc  H$11MnXH$M~PInhMfpHD$IF@H@`HHDŽ$HDŽ$HD$`DŽ$HDŽ$HDŽ$DŽ$HD$XHH HLLH$PHL$pL$L$_AXX HHLH$PHL$pH|$hL$L$D$$Y^LH|$XSH nHD$hH%HL$CD$ L=L$L-~HDHD$@HD$LLLH(1LM}<|HEH }@HX  @_HV$HDŽ$D$(H$HD$0$$H$HD$8H$HD$@H$HD$HCD$xE1E1DŽ$H$HH\$`L|$pEfLeƄ$MAD$HH$PSAoD$0HH$AoL$@D$L$$L$AoT$PH$H$H$T$ Ao\$`\$0AD$pD$@H`3$t)A$ uD$xA#D$ $fDEAIƘD9H$H1E1L|$pHL$pH$H$$H$$ H$Lt$`L|$x$DH$AVAog0HH$$Aoo@D$L$$l$AowPH$H$H$t$ Ao`|$0AGpD$@H`H$$AG AoG )$AoO)$ AG,$0$EAH$iLIĘHDŽ$9kL{HT$pLMIw0 Ƅ$AGH$@LkLL1@JLLL1,H\$hH0HHIHcD$ HLÃL$ HD$HD$H9D$HcD$ HL$hL$HHHt$hH@L踺H|$XH5 ID$ AUMIHA1L-L=L%dNfDIHHpAMLL 1H%A_AX9M1H/1LD$蛼HD$ HH UH hHD$Hq  Ld$ELt$(L=?H-%IDHD$M,$H1LLٙ@&MMnAE8IU0IH\IL9I>Hu@.L1LޚHH\$HLHIHcD$HLÃI$L$IL;d$6HcD$HL$Lt$(HHHt$HPL蠸H|$ H5\ID$A=IH8AH LHHEL-L=EE1L-L=H-L`!fDEILFE9uIELLHC Jp1蹽XIHZHJHp蝷JHu H|$PH#H{xfDL9LL1RNDH$It$0H裼[L$H|$p1LH9H$H/HDŽ$L|$x$t'OL1L)H譼DLѕLL1芼DL- L=1L|L LTIvXLHct'3LyLL1 A~HH|$PH5>H$8dH+%(sHH[]A\A]A^A_DL|$pL\!1@HL詻LJLL1苻fD@ L eIIHH=APL'UHLE18AYAZ -fDH5y1 ȶL=JHALPL1@Hj кAYAZ8LLL1 ]U褺@5L1LHvD$E}H|$xI16LMHn9H$\@D$EPH|$xI1DLH%H$L$LL1Ź$A#D$ D$xaH$H=zH$轶H$H$X.]UHA.]UL@P@HL=1.]U.]UL#XZH5zH|$Xд L꾬LLH|$XH59蔴L%XH-T1LӓL+ H裸A~HLNL1/ ]UuLbLL1M RIvXLHctPt-LLIL] 1LNLL1Z H|$PHcDL-YL=U1LL L褷IvXLXHct'xLɌLL1 jA~PLLL1 ]U<.]U}HA.]ULP@HZNLLILY 1ݶH51芲 H@# PA 1LH&H="芶Y^L|$xL1@H%L\H|$ H5wHD$|H|$X H5 L=ձYLLILd 1H|$`H$L|$x }L|$xI1LH=L蝵H$H|$`˾D$ HD$h迲ff.@H(dH%(HD$1HT$Ht$ )A1EtD$ t&n]UDHT$dH+%(uH(ÐHD$]UD:f.AWAVAUL-bATIUSHdH%(H$1HH5mH胼HHD$&HH5\H` LHcHHL^H1HNLK5L}H5LAۯEBH11H[HHD$XHӐHD$ HHD$`HD$HD$hHD$pbHD$H,Ld$`LDzADžHD$X1HHHD$(ADž*LD$`H|$X11ҾBADž_HsHl$HHl$L`HHD$(HD$hHD$0HD$pHD$8M<$I\$ML5L1M@L7Ll]HL$0LHHt$`葋tBHL$hH/]H|$HHDHHL$@H|$LH܌HL$@HL5?L1Iٹ@LRL\NHL$8HHHt$`5tCHL$pH\L|$ HLHDHHL$@HLHCHL$@uI L9d$(H|$XHl$HȳH|$`>H|$H5"mH|$ADžHHHDŽ$H]XH$HtlH$IIHu&fIVIvHLA$IHuLH5GIƬI?HuH]XHE@U HLMPDEH@`HMpu0S4AXZEH$dH+%(H|$HĨH5$[]A\A]A^A_ͮDA L5KqE LLX1LZH|$XPH|$`ƲH|$H5D}HELPL1@H% AYAZA ueH$dH+%(HĨ[]A\A]A^A_DHELPLf1@H 螯AYAZA tH$dH+%(H|$HĨIcH[]A\A]A^A_XL52HELP LL[1Y^q1E LVLLH|$XH|$`eH|$H5I蔪ADL5袵HLEPL L1茮_AXj@ALeD轺HMNLPLB1@AWH: AvADžL+ADž-LD$`H|$X1ҾŸADžóIٹ LPL LAW1诬Y^Ht$0H|$`^ÅnH|$xL%LMt/LM L&1^H|$xL HMuצ(+HELPLa L1AYAZDTHELP@1@ L>zHګY^輲HLEPLʈ L 1覫_AXljD$胲HLLPDL$( 1LkA[[I@ L1L H6A;L|$Aw LLPL̈=1AWLL$(]A\~A?Iٹ LPLXLAW1˪A[[HL|$ Hl$HAHL$HLLPLF1AWHL$0QLL$@ zH WHL$Hl$HA譶HILPL{aLAWHL$01Q /H HLAPL1 LXZ=ff.fAVAUIATIUHSHH dH%(HD$1OHpH5dH艱HT$Ht$ HIttPT$ HD$t2]UnDHT$dH+%(uSH []A\A]A^D]UD@IvHH LHLIEIvPH1Jf.AVAUIATUHSHdH%(HD$1u3 1HT$dH+%(lH[]A\A]A^֣uLd$LL=uT$LuLLU`uLLL莪uL m|$ULuLLELLL?/L躱|$t{LUHuL讯HD$dH+%(uNUHHuL[]A\A]A^xLL͠;LL赠r胤ATUSuE1D[]A\DHHPAąuHھH٤AąuHSHAąu{HSH Aąuf{HC8C@CCC(uYfCAA9?DHHTtA!fD[HLP]H M 1A\HAVAUAATUHSHH L'dH%(HD$1芬A=AAu/A1LeHT$dH+%(H []A\A]A^@HsHtiHDmcuHSLL HHHuL MLE;EvEDmHsHtqHDmLHSLL HHHJL MrLE;EvEDmHsHtlHDmwHsLL ]H$HHL ^MLE;EvEDmHs HcHDmYHs LL 4HHH茴'MLE;EvEDmHLt$HLD$LHD$LHfC苮D\$EHH'L5DL豟HCHH`T$He@Ht$H +DT$EHHNL5 DLFHCHHgT$HHt$ H赭t$ HH/L5LݞHCHH;T$ H葛lHt$HLWT$H HL5LoHC HHT$H#HHD$dH+%(H EH[L]1A\H сH"A]A^)L fLLH HpDHCHC|HH1荝L HHHLāLH1H 蓮HCHL IKAVLMKHL1HN T_AXHH1HHHL iHC AQL JAVHH1豜L HHHL JQAVO.H1HmL ΁LHHqL JPAVff.AWAVAUATIUSHH<$Ht$dH%(H$1HD$XHD$PHD$HHɂH5*WHH5LHcPLHH@@HHT$P臥ADž#Ht$PHHߘHCIHL5XL-T@1LLL裞HT$HH5VBLAǃCHt$HH^LYI@LIHD$H1HDLL$MA9 1LϾ\Hl$HD$DMIHHt;fDHx/DHD߈\؞HuH\$ HLMAHl$EHHx.H|$ L=HfDP/HxL'HuHL$HHH1H5GHCHpHT$L=H1LߣHC HJHT$ LH1HC(H+LKLdFL1@LLK @1LKFLL蟜LK(@1L8FLL}HS 1HVH=*8蚒f.LH5H>E1>@I HuHW87Ål覞HAHPLy1H=7(IG H@8XZ$DAWAVI1AUIHyATIUSH1HhDD$ dH%(HD$X1HD$(dHHHT$HH5x7L$ADž Ht$HH蜏HD$HHT$@H557LADž/HT$8H5L˗ADžHT$0H5 7L\ADžuHD$0D`AL =@1xHH=Bf.A Ht$(H; H5yH~HD$XdH+%(@HhD[]A\A]A^A_Li<@1^HvH=BjLL$HLLx1@HFqH=A5VLL$HLw1@HjH=A&H@H;HL$(HPH0LL$(I`1H=<L|$HLL$LL$OLLH9IuHT$HHIHgLE1HHLL$PH ;诐H5wLA EhH|$PHјH|$PH5xL5@A֊D.HLPLLL$X1LL4;ߎXZjjIjAhD$,PATLL$XLD$hHL$pHT$@Ht$xӈH0LALwLL1@of.LAALK:IH(H=?1;DL5?&Lv@LIH͛!1DL5r?LFv@LIH-1訍DL59?贕LEvLIH[41oT赊DAWAVAUIATULL vSHH m5HhHT$Ht$(LD$LldH%(HD$X1'IH;H|$(HD$@֛H{(HT$0Ht$@HD$H辌t =4DT$8L5L=?=4AH<DHcH>HLIHL8LP1SC_AX]U]UEºHED$$H{wLLL8HD$XdH+%(HhL[]A\A]A^A_fyL@IH1H=H谋{HILHL7LP1sD$4AYAZH5vL蘉@HDT$HPIL71LLXZHl$(HD$DT$HEPHDT$ 1LHEXHCHl$(H@H8DT$HHD$(DP L(Hl$(HǀǀHǀHǀHD$HEpHEXHLHEHl$(CECExH;hL HH;Hl$(LEHl$(H]HCH@H@HE@H8萔EHHl$(H{HuXېH\$(HE(HC(HHp貊H|$(HC0H0H1 D$$$H|$(1HD$$MHt$(HT$$H~02HHfLH5H550SHp@H@H]@L9VLL1 H{P1rD$$~D{0C0HHcH>fL 1H֜H=2蚈DٔHLLPDL$41Lhs aA_XHct$$*@葔HLLPDL$41LSs]A^@1@LL%L DT$H6VH(fHIPL5כL=31LLqL茇XDS0ZHHHHuHt@HHdHX|$$WHLLPDL$4@1L߆A[[y"DT$HOQAWAVAUIATUSHXdH%(HD$H1H/rH5ZHpHHH.rH5_>HOLHL$ HT$0HLL$LD$(I]H5rLAEHD$0Ht8HT$ Ht.HIt$(HHd t[HcGfH|$(txIcT$LID$@Ld2@H=IHHLH1蠅HrH茆HD$HdH+%(HX[]A\A]A^A_fAD$8Ht$8LL LqLeH &@XMt$ M<$Ml$D$ID$0HD$HD$HHD$@' IH[HD$8HL$HL(HD$8HHL$LpLt$@LxLH8豇D$HD$@L|$8Hp L菓IG@L|$8HD$@I@fHpItIG HD$8Hx H|$@L|$8HD$@IGIw HxHT$8IG(HB(HH@LHxD$HD$@H\$8HpHߒHCHH|$@aH\$8H{HaHC(HHp葄Ht$8HC0H~0H@HT$Q~HH_LHKpH54uOD$HcI|$HT$@Dlj蝏H@AP1L?HkH=Y^xL%1@H6H=]UEILn Hœ1H=O跂D$LHo蚃LL迈H5BHH>/LF @H5aoH葀@ILn H-cLH 1LVn@HH=H|$@l} 0DHD$@L7n HH=GLH1詁H|$@}HB @L .HyLH1L@HQH=ݺE |$}H@HPDL$$1LH=XZwA~AWAVMLAUML nATUHH 5SHHH$Ht$Ht$0HT$ HL$HD$(L$dH%(HD$81蚊HD$HHD$0HL$11HmH$H\$0LkLsL{C C@C$|IHHLHHH>}HC8LH5sm{H|$0H8HOH7LD$(HT$ {HHHL$HXnH5 \}HD$8dH+%(HD$HH[]A\A]A^A_@PH 2,L艁HD$H3D$L54m@Hl11{IHLHHnLHH H mLHxLLIzH5+L'tH5+LoH|$HcD$H+!LH@@L NLL-KMLcLHLE1mID$(Hp@H3L_|ID$0H1ID$(Hx8H8LPmIHH LePLL$8Lc1H=mLl$8AYAZIL$0It$LI|$(qPID$(fDyHAH xPF1H=LL=b lA[HcA\H]bHmHD$HdH+%(xHX[]A\A]A^A_fxHLAPL/d1@H=/lYH?d^HHcmfLLH=kHD$@@ H5HeLjLLqL}1LqH=CkH/cHlDL1LAH=^kHcHJlDHd L,lOLl$(MLt1LbH=j HIc HkJ1LLBcH=KjHD$@@ 1@LpLBaH=njID$(+@1L&LcH=>jHD$@@ ILLL1@VjHS` HjtDg@AWAVAUATIUSH&cHH5HqHIUiHH5I HqLHH@HP(HHfLH58eHEL`8MGHLM(1 ATL=wL5:L_LL1iHEH}@L`8Le(AXAYLu MHEHM@LHx H0nÅHE@@HE8gsLe(Mt"HU LHnIHLe Lb1HvH=hHEHHHMLEMH@ATHuHrZYHHHLH[H5e]A\A]A^A_eLu Le(MHE8gRxcHx>HU@HLe(MLHmIHt Le@ HLHD[]A\A]A^A_hfD X[]A\A]A^A_f.xcxftLM LLa1LAgLu Le(Lu@DIXE1P9sHUAPH=` 1L; Huf^_5@HcAWAVIAUL-tATILUSHHhHL$dH%(HD$X1HFHD$PHD$HH8`LHHCH8`LH$IHCH8`HIL$IMHL$HLHLD$gLD$HI:HIvIHIjHAPMt$BdH HH2HCIVALHuH8bH}LkHHuA0LIVH@H6H8AbYH5Z`L`H}LeIT$H5HHD$81kHD$HIT$H5H1kIHH}LdH}LHD$ dH}LHD$(AjD$3HCH@ Ht`HxpHtWLjLD$4HCH@ HxpMdHT$HHt$PH+hL$4tAH E1HDT$4ML$@LPL_1A$H=vcHEMLH$M$Ht$Xt$hD$SPDT$\ARAt$t$@HL$hHT$`[H@LH$\IHHHUHLH #LHPL}MOIVpMAt$@t$ t$pH HHH"H5%#LsL.dI?I$HGHn$ILHxIhIHIHPHHpI$H``HILHRH@HR`HP`H}IpD$}HH@HHt(IDHxHtH9uLD$eD$HD$L80L/1LH=aAHD$XdH+%(HhD[]A\A]A^A_fHCHL Li\_H=MH@HL At$1aXZc@H}?b&f.HCH LNL\H=HLAt$17aY^@L꾱1Lr]H=aH5]H\D$fDH5q\H\A fD$L\L1@H=P`H5\H\\D$ L51LZH=n`A k@LC1L+H=>`H5Z1[H5ZL[A fDH5i[H[A fDML$L1Lz\H=n_D$SH5[Hq[A fDADL꾧1LH=n_A k\ff.AWAVAUL-lATLUSHHdH%(HD$HGH@H8"_HHCH@H@ HtHxpHtLd':L1L[H=c^1H/jHHpHxGaAąHHx0_HHsH{HPtjAąHCHsH@HxlHkHtcIL=kL5 HmxHtGHUHtHuHsH;LPH$HHmxHu@Hs(HHH@HHuH1NeHHtuHs(H}Ht1eu־H`H-L[1@HjH?]@LHL}[V1!]HD$dH+%(HD[]A\A]A^A_LP1LZH={\Y@LJ1LZH=S\@LC1LJZH=+\HCLZH jH= HLH1O\f.LG LL1@ "\hYAWAVAUATIUSHxdH%(HD$h16UHZH5HcHHe[HZH5 HcLHL$PHT$HHHiH5ZLAEWEH{8HT$DDaT$DHD$HH{L- Ld$`HK(L|$PHD$HCHwHL$(Lp(Ht$L Ll$H oHAUeHD$ HZHD$MZHD$XHl$0E1L-d H\$8HCf.H\$ K4HxZHTHL$HHHL$IL9d$_K8HITNHHV11HHD$@QIHIEL=H^LH8hOHHHAHLD$DHD$D,PLL$P:W_AXÅD$T1SH=wRY^H5VTL&NL$$Ht$(LLHTHD$@HHtHcD$NK@AWIAVIH AUMLWATUHպhSH8LL$Ht$ L PdH%(HD$(1WIHHD$ LL8H\$ HkIH@Lk(HC8HC HC@H}\HC0H\$ HS0HHK LHWHCH\$ HCHHHH@HpNHt$ HCH~H HT$GHHZLH H57JHD$(dH+%([H8L[]A\A]A^A_fDH}Ht$[HC8H\$ H{8HHE1E1HjLLujjjhjjjhUH|$pHPHC0H0 H5i_HHL$ HQ8HHHHPHuHA0HPHǀPHA0HHHq0Hy HQ@HD$KHD$ Hp@IFHxYD$H\$ HS0E|$WH HTPDL$,1Lv H=$KXZHct$uVH5=OLILLQYDg L'@H(TH=,KD$HOLLDo 1Lb@HSH=J fDLp@1, HSH=OJDLH@1W HvSH=zJDHA0HHǀHHA0HǀP>fDK 1L@HSH=JLL$? 1L-M@HRH=IfDHD$ L$MHR] H=DH@@HLH1IFAWAVAUIATUSHXdH%(HD$H1D$+BHjMH5oH+QHIHHqMH5 H QLHL$8HT$0HHQH5kMLDYHEHx(L5UL=l1@LNLLHLl$0HD$8Lm@HE8MLNLL1@*uHHEHUHHuLM(HHLE0GHHLH]H5xFHD$HdH+%(<HX[]A\A]A^A_Ld$Hl$L4$M1L=MI4LLAIHL9uLu8Lm@HU0Hu8LIHt/H1HcBH5NLE[fDLE@MHHEHM8LL$3HuHU H}AQLH0sAY^Å|$+L5SL=H}ÅLGLL1@#HcFDL|$0HH\$8H =rAWL|$PIHME1HD$@Ld$E1Hl$MHL|$L4$QfDD$,J=H|$H<$&H enL-EID$8HH,HTKHID$8H8H@HT$H5wBÅ5ID$8IT$0H5`H8lBÅrID$8IT$0H5"H8IBÅID$Ll$H4$HL$LH8;IID$8LH5H8R:ÅID$@LÅHH5!JH)@P)NHVAPHEN1L,I@H=PAXHcZHIHBHD$(dH+%(H8[]A\A]yLlI1@HMH=JAHcDLHE1MHHEHPjSjjHD$ PHqPHu DH0HHt?LHqH5^)8 HT$dH+%(u=H []A\A]A^1@LLH=P: R7fAWAVAUIATUSH8dH%(HD$(1HD$3HPH5_HAHHL9HPH5pHALHL$HT$ HIN4H5PL-5HD$ HHta^L%Q1@H{H=O+9HWQH:HD$(dH+%(H8[]A\A]A^A_@HD$HT$H53H8HÅuHD$xML1@HzH=iO8Hcn@AD$8HB bHcHH5OH6Cf.9LO1@HzH=N*8HcfIt$ H@HL$H~`HPH0H?<Ht$HOLL-1zL5N1LLID$XId1Lo7L2IHIL$0LoL1HnH5oB>HHID$ LH8AI|$A;LE1LM_HID$HPH'jAWjjPSI4$@H0HHHHnH54fD0VLIHyH=M16i@LLLN16 Xr@LLL1`6 0@LLL186 y3fHLH5e)BHtH8H11LGN HwH=WN5HAVL [N0H _mAUMLvATUHSH dH%(HD$1Ht$?IHH5 eL{AH"HPL-gvL2HT$HH\$HkIVHHS HS(H@LH@H8/HCH\$H{IFHHp5Ht$HCH~HtRHT$ x/HHLHMH5 v2HD$dH+%(H L[]A\A]A^f@L1LWH=L^4D$ LH?MB5HLg:DLL H8uH=L 4D$ D L1LVH=cL3D$ s@|$ :HLPDL$1L@H=L3Hct$XZ.0f.AUIATIUHSHH2HnLH5jH/;LKH IHpHL0Ht)HLHjH5M0H1[]A\A]1L@H^sH=_K2H []A\A]fAUATUHSH+HKH5nXH:HI)2HKH53jHc:HH?H5KHA.HC(EtHz$u'H@xHC(HuHLH5TL[]A\A]Q0HH5 U>HHt}HHs(LHsŅH[]A\A]fDHHrL @H=.JLH11IcHQKHL[]A\A]2Hq1 LOiH=IR1H3K@HC(HqL@H=IHLH11HcHKoAUATIUSH:*HCKH5VH8HIi0HJKH5hH8LHP HH1H5JKLP,HctHLHSK[]A\A]p1Hc+IHHM(LgH1HgH5g7HHHEH]pHx:)HM HUjHNLWE1PHjjPSHu[9H0HHt'HLHg[H5]A\A]o- ff.AWH5EUAVILAUATUSHHdH%(HD$81l;HI.H:JH5DH7DHXH@@HAAHC0HkPD$,HD$H98Ll$L%&gDKXHM@YHHC(H=IHPRHn01._AXL9rHkPH9l$HD$0L|$HD$ QDLHfH5g2,CHHL$LHfH5,HCPHhHkPH;l$\L[HC HL iIH{8@Hk(LmHt$ H fL$LkL{HD$8L$HIHD$0MLLL0HD$H|$0LLoHoHG(EEjEPHeuPIM,H HHLHI f.LL3fDLQ 1LHlH=WHL|$%-LH@1HmcH=,H,CHHD$8dH+%(4HH[]A\A]A^A_ÐL|$CXt$,CXtƋt$,1_,Hs8MLH fHLQH eQHH1HC@ZYHuLaH@HelqH=GT,PHkPHC0HUH9HFHD$HAD$,H9&ADKXPf.H H L,{XHD$8dH+%(u&HHLL[]A\A]A^A_1ADKX(AUATUHSH(dH%(HD$1$HGH5>QHT3HI*HGH5@H33HH*HGH57cH3HT$Ht$ HI$tyH5HH&kHuDHC0H9CPHD$dH+%( H(L[H^H]A\A]+@HD$dH+%(H([]A\A]ÐIu0H5GH}$HNGHHC`Iu8f$H5_GHHCh&kHH{8H5lG%HC8HD$dH+%(ubH(LH5iG[]A\A]N(fDH{@H5uG%HC@HD$dH+%(uH;H(M1[1]1A\A]E'AWAVAUATUHSHHdH%(HD$81"HWGH5ZOHp1HI)H^GH5>HO1HT$(1HLH0L@(HI+H5SGH$Hct:HHL*HD$8dH+%(HH[]A\A]A^A_HMM01t$0L5CLGHShL(IE0LI] L GLhM}ImHD$IE(H :>HD$IEHD$ IEHD$(XZpHt$02IHHD$01HFH(HD$HL$0HAHD$HLyHAHD$HY HA(H$H $HA0$H $HA8HD$0Hx8tEH@PM11@X1HULHz`H5L%LHvF (HL- L1LKHff' 2$AWAVAUIATIUSH8dH%(HD$(1&H@FH5_H/Ht$ L MFHHH@ LeH K<HL{L3HD$HCHD$HCHD$0H|HHD$ H )KL0HD$H|$ HGHD$LHGHD$HG 0IHL(H@MH|$ ILLdH ^(HHHHEH5\#LH_H5&H#HCHdHxe0Dž/1HT$(dH+%(H8[]A\A]A^A_f.1Y%H3HHH%fDLD 1HdH=@j%HHE V&LH{+/fDH-a@LI1 HcH%1 HL]Hc$ 6"fDAUATUHSH(dH%(HD$1 HDH5~JH,HI9$HDH5T]Hs,HH$HDH59HR,HT$Ht$ HI=D$ HT$H5DHA]U{0uC0Hs(LAątD<0HEH^bPLD1@H=>#XZHD$dH+%(CH(IcL[HD]A\A]$@H5)DHAn3YfDAԅ3H5CH4fIt$8HCH,HCHHC8It$@L%a HH5CH-$>HC@LK81L[LH"LK@1L[LH"HD$dH+%(u:H(LH5aC[]A\A] fDHD$dH+%(u H([]A\A]AWIAVMAUMATIUHHSH8HL$dH%(HD$(1!HsCH5H)HT$ Ht$LHtSD$Ll$ A]UnDDHD$(dH+%(H8D[]A\A]A^A_fMtHsHHCHIMtHsPHCHmIMtHsXH*CHRIELt$E1MnHs`H*CH*ISfE]UDD@Zf.UHHH5HdH%(HD$1HR'unHmHuCHc(HHt+H}H4$^(uHBuHU"u1HD$dH+%(u8HH]DL@11H9cvH=8 AWAVIHH5CYAUMATUHSLHT$ HT$dH%(H$1/AąHD$@9HA11PIHHD$H|$ LH@HH@HT$ HD$(].HHHT$0-2DL$0A[HtAHt$pHt >LA1sHaH=5 HEMtAHt$XHt >LA1HaH=5IEHH$Ht >L-iaH-Z51LAL꾕Ht|$ Ht6H$Ht >LyALH12fH5AL3L1@@1?H`H=4AH$dH+%(hHD[]A\A]A^A_L@17Hv`H=g4@<LVAHB`H=34fuL@1RH`H=4A 4AL?1@H_ZH=3AJ@L1V@1aH_H=3AJLJI@1EHn_H=_3A Lh+HEHf@nLMA H_H=3A @L +IEHd@LtMA H^H=2@L*HH@L-MA H^H=2}DL*HHd@L꾟HLLA r=AUATUHSH(dH%(HD$1HD$H>H5@H #HIH>H5"RH"HHL$HT$HHH5>HAEHD$HIHHD$HK@LKP1LCHHH0ŅGLK@1L-\H-11LSLHWLKH1LSL꾷H5LKP1LSL꾸HH5>LDHD$dH+%(H([]A\A]DLI>1H[H=0L1@1H[H=W0IcH=LxoL=H[H=0L4%HAH[[PL=1H=/ XZOff.@AUATUHSH(dH%(HD$1H=H5>H HIIH=H5PH HL$HT$HHHKH5=HA)H{ H5=HC EHH|$HD$LK8LC01ɺHH0 ŅHCHs8s0H=!3L >PRLHW1H H5>LHD$dH+%(H([]A\A]fDHCHLL=@H=2PRLHW1kXZH=LU#H@IHCH=U2APL=UPRLH5W1H HCH@H=2Lp<PRLHV1YIc_] ff.AWL ;=IH MAVIAUIպ`ATULL-YSHdH%(HD$1H IHH$HL0H$L{LkIEHCHxHk0H{ UH$HC(HB(HHxtLt\ tWHc8L-yXH-,LJ0@1L<LHLH<LLHD$dH+%(uhHL[]A\A]A^A_LJ0L-WH-.,LL<HJH$HB HHB(HLt@AUATIUSHdH%(HD$1JHS<H5:HHIyHZ<H5HHt$LHsH5\<Lbu^HEHMHHuLE(HHPLHNH5H6HD$dH+%(H[]A\A]L%gWH-{ HLAPL1 HXZ|$tHcH;L LHL1]UfDAVAUATUHSHdH%(HD$1 H;H5L9HbHIH;H5KHAHt$HIHH@L0H5;Htz|$HAHSP<1H={+L̟XHcZLHs;HD$dH+%(H[]A\A]A^DID$ IL$LIVIt$HL@ HHt^LHd;H5=8fDL 18H6SH=*:H5:LkXfDLM@1GHRH=*H:1L/ff.@AWIAVMAUMATIUHSH8HL$dH%(HD$(15H:H5HHoHT$ Ht$LHZ tND$Ll$ A]UnDDHD$(dH+%(H8D[]A\A]A^A_@MtHs@HH:H IMtHsHHU:H IMtHsPHb:H IELt$E1MsHsXHb:H IXf.E]UDD= f.AUATIUSH H3:H56H4HIH::H5HLHHH`HPHHLHXL@PUH5.:L u`LMHHuX@uPLI1HRu` H=^HH 1 HLH5M:[]A\A] fHAHRP 1H= L9@[HHcL[H9]A\A]?ff.@AVAUATUHSH dH%(HD$1XH9H54HHIH9H5FHE1HHL$HHT$IHH59HAa EHC H51HIHUH@L-O1LH8HHHHC HsjLL$LD$HT$ H8 XZHHs LLHŅ!HD$dH+%(QH []A\A]A^L@1fHvNH=G& IcH9LfDL@t1LOGH= &~ H9LjdDL@~1LH=%> HcH8L,&L E 1mHMH=% Hk8L HC L@L%oH=I%HLH1 HcH8L ATHpdH%(HD$hHHHt$Ht$(Ht$@Ht$XH5AH$HHD$HHD$H@HD$ HHD$0HHD$8HHD$HHHD$P&AąuHD$hdH+%(u7HpDA\DL71HMH=E AWAVAUATUHSH8H$dH%(HD$(HFHH@HHx$LHL=#1IIL7LHL' HEHT$'HHCHH8AƒD$'H HD$HCL52L'LH8B HCL%H8&L&D$HCH8H5DHD$HCHHHP17A IHtiHMHcT$LHAHAPj ASL\$(UAUt$(jRLcL$\HL$HH@L\$H57L߉$D$fDHD$(dH+%((H8D[]A\A]A^A_f.L=A"L61HDKL HE'L5KLHHCH8E1LcMvHCL(H8H5`CHLcHCL $HHHP1IHHEH LAHHPHjAUUPjATLL$@H3H@A…H5r6LD$~D$DHCL0*'H8$L4LL O1nD$uDD$'HD$pDD$L4L1lLL$"H<$H55DT$A D$HCLLJ5LHHLH1D$ff.@AVAUIATIHUHSHH dH%(HD$1 H55H5'@HFHT$Ht$ HI1tMT$ HD$t/]UnDHT$dH+%(uPH []A\A]A^f]UD@Iv8H4LH4LIEIv@H1 f.AWL= EL41AVL5@AUI͹ ATILUH&SHLHfHLMH NHNAąu/HHCHRH@HRpHPpHD[]A\A]A^A_fDaHLEPLg41@.LXZUHAWAVAUATSLHhHEHxHMHH}HuLMHpdH%(HE1I@HH%H)HH9tHH$H9uH)HHEH1HILxL}L HEIH5I$L}E1HtKDC|5u1I?HUH5U ]It$H} IIL9uML$HB1L3,H=$I$HPI$HLLH}BDH=ѵ1L2@It$I$1L1 IHHpH;]vHmMLLuLeL-|H]LMLuBHuLHMHuLDHyI $hq'HIH9];uI<$LL A…t@1DULHEAH=DU1HMHHEdH+%(MHeD[A\A]A^A_]I?HUH5M A…uHuH} HMHUIDŽ$HuDHyIpHECD5fEL1@H@#H=GDU)It$I$ A… HxLIH/HxL7HEIt$HH50LfDHML$@1R9L;0H?H==Y^L01pH?H=kHL1qE16LR01Ho?H=Ȳ#ljEd DUML$HD?PLL1@ARIH=XDUZL; 1WH>H=VAWAVIAUAATMUHHSHHH$HT$HT$ DL$H$HD$HdH%(HD$81;Ht$ H$H4$H4$HAEt1HD$1HT$8dH+%( HH[]A\A]A^A_@HT$(HH0Lt$(H$LLH߉&@uEHL$AELl$0HDHH$>@L|$0H$LSLHAE;HH;,$HuLHtHL/ PH<LM(HMLj. PH<1H=j8XZfDHILj. PHe<fDD$HcE1Ll$0L<=Ht$0H$H4$JH4$H߉@2IM9tBK44LHtHL. PHD$ H;N 0@HD$14@AWAVI1AUIATUHH-SHH$H|$1LD$LL$ HD$(dH%(HD$x1&IH?HL$HLHHD$HD$H8H@H21HH8D1H57HD$8HD$HH@H8UH\$`HD$PIHD$hHD$t~HT$PL 7 HL$`LD$XDHLvH|$X1HHD$HHt$Lt HD$H-fDHEL.1t$ H:H=5?HD$XLH D0XZAVEnYHHEEEnLd$0L5t6IEAMI+fLHJDHEIM9oHD$HH1N<H@J<HHuHD$HLd$0H@J8H8 L5-IH 9H=41MD$Ld$0D$ H5-6LHD$xdH+%(gD$HĈ[]A\A]A^A_f.E@m1LJ,Hc8H=_4RfljHAL+P@1HJ8H=!4AXAYML +@1H8H=3ZD$DIcLd$0EwHLlHH54H Ht$IEHtH4HEwHDIcHHD$(H4HHDH\$D0HHL$ HHt$8H4HH\$HofHt$PLHt$PLIHD$LML#*@H6SH=2NL*@H6hH=2%H@\EPL)H61H=2Y^{EL)@bH`6H=\2OIE1Az@ATIUS4H*H53HnHH@(HHK0HSHHBHCHhH}8HLr3UIH+:H=11XHKHZHsHSHǸ Ht LH<3H5HC0 []A\[1]A\fAWAVIH 2AUEL9ATUHSLL )H(HT$Ht$8L|$`dH%(HD$1HD$IHHHD$LH5FH(HD$HT$HBLr HT$<HT$LDL|$HBAEI_(LIG0IGHD$HxL)ÅtC f.HD$dH+%(H(L[]A\A]A^A_f.L11\Hv8H=90Zf.H5(LHLf@ H(Lf.YH_APH81L4( H=/XHcZ@L. 15H7H=/HAQMAHHAQMAHHAQMAHHAQMAhHAVAUIATUSH dH%(HD$1HD$?H'H5HHInH'H5/HHt$ LHT$HH5'LRu^HE8Là tH5+(LHD$dH+%(H []A\A]A^f.HELt$Dl$ 8{HLH' AVI1H5SH=-AUH HcH{'LsfDHpH} [2HEL'H5H=j-LH1ff.AWL S'L|2AVAUIATUHH ,SHӺHHdH%(HD$1HCIH_{@=Ls0HLNL=1L51LLT.LH$L(HCH<$HGHCHGHCHGHC0Ho(HG HC Hx8G0HC HHp8HHHLfHD$dH+%(HL[]A\A]A^A_f.HH11IAV@L&H= XZH5&L LLHC H,$Hp8HHE8HC H,$Hp@HHE@HS H$Hz8tHx8tZHz@HH@HtFLH8H,wL%HX0H=y MLDH1Q9Y^CfqL<%1@H0H=7  H%LG0HLHc@HQH 5,EL 1fH/H= =D LLLU)1j [ff.AW1ILv%AV IAUL-.ATLIUH-+SHH HILHL%u1HS HsI~ AąuQHD[]A\A]A^A_AHELP@$HL$1Y^@HLEPL$1@,H[XZ{@AWAVAUATUHSHH8dH%(HD$(1nt*HT$(dH+%('H8[]A\A]A^A_HD$$HHHD$uD$$HSHJuHSHuuDcAHH_L-Y$D⾘LHCHHHHL$EKM,DE1IHLsD}lHT$HD$$MHT$HAD$$IVHAFKIVHrMF AHLLD$aHT$Ht$HD$$?H,*D$$LD$ttuL¾H&DIV0H}UEND)D9A)׋MEA91D@9EIĘM9nH|$WHD$HHXHSCLHHHE1L$PJHD$L{HMMg AL+HT$LHD$$KD$$ttu6AW IwHAW Iw HIƘL9t$^ML1aHD$(dH+%(L "LH8HLɾ [H?)]1A\A]A^A_L}HH 1HHH}HD$(dH+%(L Lt*f.HD$(dH+%(uH8HLR1[H 0 ] A\H(A]A^A_nHD$(dH+%(uL O!H4&AUELPL & HHL(1%AYAZ"HD$(dH+%(L =HEt )DȉEPH`  HPH1H'L%ZY&VHLH PH' 1_AXȃvHHstruct sdap_optionssrc/providers/ad/ad_common.cFailed to parse server list! struct ad_server_dataFailed to add server Added failover server %s No user data struct ad_serviceInvalid private pointer The AD provider is online Out of memory No user data? %s://%sFailed to copy URI Constructed uri '%s' %s:%dNULL GC URI Constructed GC uri '%s' NULL GC sockaddr KERBEROS/var/lib/sss/pubconfError: %d [%s] ad_compatSASL: %s src/providers/ad/ad_init.csrc/providers/ad/ad_id.c:593struct ad_enumeration_statestruct ldap_enum_ctxsrc/providers/ad/ad_id.cstruct ad_id_ctxMissing realm sdap_id_op_create failed. ad_enumeration_conn_donesrc/providers/ad/ad_id.c:636src/providers/ad/ad_id.c:554src/providers/ad/ad_id.c:1540src/providers/ad/ad_id.c:1294Unsupported request type %X Unsupported filter type %X src/providers/ad/ad_id.c:1332(&(%s=%s)(objectclass=%s))src/providers/ad/ad_id.c:1174tevent_req_create() failed const char *objectclassSID %s fits into domain %s src/providers/ad/ad_id.c:1213Cannot find sdap_domain sdap_id_op_create failed src/providers/ad/ad_id.c:1347Connection errorsrc/providers/ad/ad_id.c:1286Performing update src/providers/ad/ad_dyndns.cstruct ad_optionsstruct ad_dyndns_update_statead_dyndns_update_connect_donestruct tevent_reqldapiad_dyndns_sdap_update_donestruct renewal_statetevent_req_create failed. struct renewal_datastruct child_io_fdstalloc failed. AD--domain-controller=%spipe (from) failed [%d][%s]. pipe (to) failed [%d][%s]. Could not exec renewal child read_pipe_send failed. fork failed [%d][%s]. src/providers/ad/ad_id.c:734ad_enumeration_donesrc/providers/ad/ad_id.c:771src/providers/ad/ad_id.c:773src/providers/ad/ad_id.c:777src/providers/ad/ad_id.c:781src/providers/ad/ad_id.c:795orig_memberFailed to start transaction (%s=*)A group with no name! src/providers/ad/ad_id.c:992originalDNsrc/providers/ad/ad_id.c:1047src/providers/ad/ad_id.c:1049Member %s already in sysdb src/providers/ad/ad_id.c:990src/providers/ad/ad_id.c:896No extra members No matching domain for %s (%s=%s)src/providers/ad/ad_id.c:1119No member [%s] in sysdb [%s] found in sysdb Failed to add [%s]: %s src/providers/ad/ad_id.c:914Failed to commit transaction Could not cancel transaction src/providers/ad/ad_id.c:824src/providers/ad/ad_id.c:1384src/providers/ad/ad_id.c:1388src/providers/ad/ad_id.c:1392src/providers/ad/ad_id.c:1408src/providers/ad/ad_id.c:1363src/providers/ad/ad_id.c:1365src/providers/ad/ad_id.c:1371src/providers/ad/ad_id.c:1375src/providers/ad/ad_id.c:1417src/providers/ad/ad_id.c:1419src/providers/ad/ad_id.c:1427src/providers/ad/ad_id.c:1429Search returned %zu results. struct sysdb_attrs *src/providers/ad/ad_id.c:1445src/providers/ad/ad_id.c:1477Retrying search Cannot retry search src/providers/ad/ad_id.c:1492Not found src/providers/ad/ad_id.c:1502src/providers/ad/ad_id.c:1512src/providers/ad/ad_id.c:1524Found object in domain %s src/providers/ad/ad_id.c:1531talloc_new failed. src/providers/ad/ad_pac.csrc/providers/ad/ad_pac.c:187talloc_zero_size failed. -%luhash_enter failed [%d][%s]. src/providers/ad/ad_pac.c:224src/providers/ad/ad_pac.c:674src/providers/ad/ad_pac.c:675src/providers/ad/ad_pac.c:678src/providers/ad/ad_pac.c:725src/providers/ad/ad_pac.c:721struct ad_access_statestruct sdap_access_ctxad_sdap_access_donefalsepreservinggethostname failed [%s]. getaddrinfo failed: %s Setting ad_hostname to [%s]. case_sensitivecondb_get_string failed. trueInvalid value for %s _srv_struct sdap_serviceNo Kerberos realm set NULL service mit_kerberosNo Kerberos realm Option %s set to %s ad_create_options failed Cannot set AD krb5 realm Cannot set AD domain Cannot set AD hostname Cannot set keytab Cannot set SASL authid struct ad_resolver_ctxstruct sdap_id_conn_ctx *src/providers/ad/ad_access.cDOMFORESTad_pam_access_handler_doneUnsupported type, skipping. confdb_get_string failed. struct ad_init_ctxstruct dp_reply_stdstruct dp_id_datastruct sdap_id_ctxvoidstruct krb5_ctxstruct pam_data *struct pam_dataDynamic DNS updates are off. Could not check for nsupdate Dyndns update/usr/sbin/adclisplit_on_separator failed. talloc_strdup failed. talloc_array failed. --add-samba-data--host-fqdn=%s--host-keytab=%s--domain=%s--use-ldaps--verboseget_adcli_extra_args failed. be_ptask_create failed. src/providers/ad/ad_id.c:323src/providers/ad/ad_id.c:441src/providers/ad/ad_id.c:442struct ad_account_info_statesrc/providers/ad/ad_id.c:451src/providers/ad/ad_id.c:452src/providers/ad/ad_id.c:461src/providers/ad/ad_id.c:537src/providers/ad/ad_id.c:538src/providers/ad/ad_id.c:541src/providers/ad/ad_id.c:545objectCategorypacBlobpacBlobExpireTimestampMissing arguments. src/providers/ad/ad_pac.c:70src/providers/ad/ad_pac.c:106src/providers/ad/ad_pac.c:102find_user_entry failed. No PAC available. src/providers/ad/ad_pac.c:134PAC available but too old. src/providers/ad/ad_pac.c:142Missing parameter. sss_hash_create failed. src/providers/ad/ad_pac.c:304src/providers/ad/ad_pac.c:441src/providers/ad/ad_pac.c:435src/providers/ad/ad_pac.c:436src/providers/ad/ad_pac.c:438src/providers/ad/ad_pac.c:734Missing UPN in PAC. userPrincipalNamePAC UPN check successful. objectSIDStringndr_pull_init_blob failed. struct PAC_DATAtalloc_zero failed. Missing account name in PAC. Validating PAC data failed. Missing PAC blob. Expected only one PAC blob.get_data_from_pac failed. get_sids_from_pac failed. src/providers/ad/ad_pac.c:513src/providers/ad/ad_pac.c:517src/providers/ad/ad_pac.c:558src/providers/ad/ad_pac.c:659src/providers/ad/ad_pac.c:657src/providers/ad/ad_id.c:185ad_handle_acct_info_donesrc/providers/ad/ad_id.c:135Cannot find domain head Invalid domain for SID:%s src/providers/ad/ad_id.c:173src/providers/ad/ad_id.c:175src/providers/ad/ad_id.c:385Unknown domain Cannot create conn list ad_account_info_donesrc/providers/ad/ad_id.c:430src/providers/ad/ad_id.c:496ad_account_info_handler_donesrc/providers/ad/ad_id.c:523src/providers/ad/ad_id.c:246src/providers/ad/ad_id.c:248src/providers/ad/ad_id.c:265src/providers/ad/ad_id.c:275src/providers/ad/ad_id.c:294src/providers/ad/ad_id.c:315Remote InteractiveBatchPermittedDenied-unknown-src/providers/ad/ad_gpo.cgpo_map_type: %s Invalid configuration: %d Explicitly added service: %s src/providers/ad/ad_gpo.c:456gpo_default_right_config: %s gpo_default_right: %d struct ad_access_ctxpermissiveenforcingAD_GCUnable to init AD id options Out of memory? Initializing AD sudo handler struct sdap_resolver_ctxstruct dp_resolver_datasrc/providers/ad/ad_id.c:644src/providers/ad/ad_id.c:646src/providers/ad/ad_id.c:651src/providers/ad/ad_id.c:656src/providers/ad/ad_id.c:661ad_domain_info_send failed. src/providers/ad/ad_id.c:672ad_enumeration_master_donesrc/providers/ad/ad_id.c:682src/providers/ad/ad_id.c:684src/providers/ad/ad_id.c:693src/providers/ad/ad_id.c:696No domain name for AD? src/providers/ad/ad_id.c:704src/providers/ad/ad_id.c:712src/providers/ad/ad_id.c:720ad_gpo_access_donepolkit-1sudosudo-isystemd-usercrondftpsambasshdcockpitloginsusu-lgdm-fingerprintgdm-passwordgdm-smartcardkdmlightdmlxdmsddmunitySeInteractiveLogonRightSeDenyInteractiveLogonRightSeRemoteInteractiveLogonRightSeNetworkLogonRightSeDenyNetworkLogonRightSeBatchLogonRightSeDenyBatchLogonRightSeServiceLogonRightSeDenyServiceLogonRightdyndns_updatedyndns_update_per_familydyndns_refresh_intervaldyndns_ifacedyndns_ttldyndns_update_ptrdyndns_force_tcpdyndns_authgss-tsigdyndns_auth_ptrdyndns_serverdyndns_dot_cacertdyndns_dot_certdyndns_dot_keykrb5_serverkrb5_backup_serverkrb5_realmkrb5_ccachedir/tmpkrb5_ccname_templatekrb5_auth_timeoutkrb5_validatekrb5_kpasswdkrb5_backup_kpasswdkrb5_renewable_lifetimekrb5_lifetimekrb5_renew_intervalkrb5_use_fastkrb5_fast_principalkrb5_canonicalizekrb5_use_enterprise_principalkrb5_use_kdcinfokrb5_kdcinfo_lookaheadkrb5_map_userkrb5_use_subdomain_realmnisObjectautomountldap_autofs_entry_keycnautomountKeyldap_autofs_entry_valuenisMapEntryautomountInformationldap_autofs_map_object_classnisMapautomountMapldap_autofs_map_namenisMapNameautomountMapNamead_domainad_enabled_domainsad_serverad_backup_serverad_hostnamead_enable_dns_sitesad_access_filterad_enable_gcad_gpo_access_controlad_gpo_implicit_denyad_gpo_ignore_unreadablead_gpo_cache_timeoutad_gpo_map_interactivead_gpo_map_remote_interactivead_gpo_map_networkad_gpo_map_batchad_gpo_map_servicead_gpo_map_permitad_gpo_map_denyad_gpo_default_rightad_sitekrb5_confd_path86400:750:300ad_use_ldapsldap_ipnetwork_object_classipNetworkldap_ipnetwork_nameldap_ipnetwork_numberipNetworkNumberldap_ipnetwork_entry_usnentryUSNldap_iphost_object_classdeviceldap_iphost_nameldap_iphost_numberipHostNumberldap_iphost_entry_usnldap_service_object_classipServiceldap_service_nameldap_service_portipServicePortservicePortldap_service_protoipServiceProtocolserviceProtocolldap_service_entry_usnldap_netgroup_object_classnisNetgroupnetgroupldap_netgroup_nameldap_netgroup_membermemberNisNetgrouporiginalMemberNisNetgroupldap_netgroup_triplenisNetgroupTriplenetgroupTriplemodifyTimestamporiginalModifyTimestampldap_group_object_classldap_group_object_class_altldap_group_namesAMAccountNameldap_group_pwduserPasswordldap_group_gid_numbergidNumberldap_group_memberldap_group_uuidobjectGUIDuniqueIDldap_group_objectsidobjectSIDldap_group_modify_timestampwhenChangedldap_group_entry_usnuSNChangedldap_group_typegroupTypeldap_group_external_memberexternalMemberldap_user_object_classldap_user_nameldap_user_pwdunixUserPasswordldap_user_uid_numberuidNumberldap_user_gid_numberldap_user_gecosldap_user_home_directoryunixHomeDirectoryhomeDirectoryldap_user_shellloginShellldap_user_principalldap_user_fullnamefullNameldap_user_member_ofmemberOfldap_user_uuidldap_user_objectsidldap_user_primary_groupprimaryGroupIDADPrimaryGroupIDldap_user_modify_timestampldap_user_entry_usnldap_user_shadow_last_changeshadowLastChangeldap_user_shadow_minshadowMinldap_user_shadow_maxshadowMaxldap_user_shadow_warningshadowWarningldap_user_shadow_inactiveshadowInactiveldap_user_shadow_expireshadowExpireldap_user_shadow_flagshadowFlagldap_user_krb_last_pwd_changekrbLastPwdChangekrbPasswordExpirationldap_pwd_attributepwdAttributeldap_user_authorized_serviceauthorizedServiceldap_user_ad_account_expiresaccountExpiresadAccountExpiresuserAccountControladUserAccountControlldap_ns_account_locknsAccountLockldap_user_authorized_hostauthorizedHostldap_user_authorized_rhostauthorizedRHostldap_user_nds_login_disabledndsLoginDisabledndsLoginExpirationTimendsLoginAllowedTimeMapldap_user_ssh_public_keysshPublicKeyldap_user_auth_typeauthTypeldap_user_certificateuserCertificate;binaryuserCertificateldap_user_emailldap_user_passkeyaltSecurityIdentitiesuserPasskeyldap_entry_usnldap_rootdse_last_usnhighestCommittedUSNhighestUSNldap_urildap_backup_urildap_search_baseldap_read_rootdseanonymousldap_default_bind_dnldap_default_authtok_typeldap_default_authtokldap_search_timeoutldap_network_timeoutldap_opt_timeoutldap_tls_reqcerthardldap_user_search_baseldap_user_search_scopesubldap_user_search_filterldap_user_extra_attrsldap_group_search_baseldap_group_search_scopeldap_group_search_filterldap_host_search_baseldap_service_search_baseldap_sudo_search_baseldap_sudo_random_offsetldap_sudo_use_host_filterldap_sudo_hostnamesldap_sudo_ipldap_sudo_include_netgroupsldap_sudo_include_regexpldap_autofs_search_baseldap_autofs_map_master_nameauto.masterldap_iphost_search_baseldap_ipnetwork_search_baseldap_schemaldap_pwmodify_modeexopldap_offline_timeoutldap_force_upper_case_realmldap_purge_cache_timeoutldap_purge_cache_offsetldap_tls_cacertldap_tls_cacertdirldap_tls_certldap_tls_keyldap_tls_cipher_suiteldap_id_use_start_tlsldap_id_mappingldap_sasl_mechGSS-SPNEGOldap_sasl_authidldap_sasl_realmldap_sasl_minssfldap_sasl_maxssfldap_krb5_keytabldap_krb5_init_credsldap_pwd_policynoneldap_referralsaccount_cache_expirationldap_dns_service_nameldap_krb5_ticket_lifetimeldap_access_filterldap_netgroup_search_baseldap_group_nesting_levelldap_derefldap_account_expire_policyldap_access_orderldap_chpass_urildap_chpass_backup_urildap_chpass_dns_service_nameldap_page_sizeldap_deref_thresholdldap_sasl_canonicalizeldap_connection_expire_offsetldap_connection_idle_timeoutldap_disable_pagingldap_idmap_range_minldap_idmap_range_maxldap_idmap_range_sizeldap_idmap_autorid_compatldap_idmap_default_domainldap_idmap_default_domain_sidldap_idmap_helper_table_sizeldap_use_tokengroupsldap_disable_range_retrievalldap_min_idldap_max_idldap_pwdlockout_dnwildcard_limitldap_library_debug_levelldap_subid_ranges_search_basesrc/providers/ad/ad_common.c:128Failed to initialize default sdap options src/providers/ad/ad_common.c:263talloc_new: src/providers/ad/ad_common.c:620ad_server [%s] is detected as IP address, this can cause GSSAPI/GSS-SPNEGO problems Failed to add server [%s] to failover service: SRV resolution only allowed for primary servers! Failed to add service discovery to failover: [%s] Added service discovery for AD src/providers/ad/ad_common.c:723talloc_new: src/providers/ad/ad_common.c:954No hostent available for server (%s) resolv_get_string_address failed. Could not get server host name resolv_get_sockaddr_address failed. src/providers/ad/ad_common.c:1017src/providers/ad/ad_common.c:1019src/providers/ad/ad_common.c:1020src/providers/ad/ad_common.c:1024src/providers/ad/ad_common.c:1025src/providers/ad/ad_common.c:1048write to %s/kdcinfo.%s failed, authentication might fail. src/providers/ad/ad_common.c:1086Cannot retrieve ldap_enum_ctx! sdap_id_op_connect_send failed: %d(%s). struct ad_account_info_handler_statestruct ad_get_account_domain_statesrc/providers/ad/ad_access.c:541struct ad_pam_access_handler_statesrc/providers/ad/ad_access.c:545Failed to prepare search: missing search_bases SID %s does not fit into any domain Global catalog support is not enabled, cannot locate the account domain No point in locating domain with GC if ID-mapping is enabled Cannot sanitize filter [%d]: %s ad_get_account_domain_connect_donesrc/providers/ad/ad_dyndns.c:140Last periodic update ran recently or timer in progress, not scheduling another update src/providers/ad/ad_dyndns.c:150sdap_id_op_connect_send failed: [%d](%s) src/providers/ad/ad_dyndns.c:175src/providers/ad/ad_dyndns.c:191src/providers/ad/ad_dyndns.c:192src/providers/ad/ad_dyndns.c:195No server is available, dynamic DNS update is skipped in offline mode. src/providers/ad/ad_dyndns.c:201Failed to connect to LDAP server: [%d](%s) src/providers/ad/ad_dyndns.c:206Failed to parse ldap URI '%s': %d The LDAP scheme is ldapi://, cannot proceed with update The LDAP URI (%s) did not contain a host name sdap_dyndns_update_send failed: [%d](%s) src/providers/ad/ad_dyndns.c:266src/providers/ad/ad_access.c:510src/providers/ad/ad_access.c:511src/providers/ad/ad_access.c:514src/providers/ad/ad_access.c:531src/providers/ad/ad_dyndns.c:273src/providers/ad/ad_dyndns.c:278Dynamic DNS update failed [%d]: %s src/providers/ad/ad_dyndns.c:283src/providers/ad/ad_dyndns.c:287src/providers/ad/ad_machine_pw_renewal.c:140src/providers/ad/ad_machine_pw_renewal.csrc/providers/ad/ad_machine_pw_renewal.c:161Could not set up child handlers [%d]: %s src/providers/ad/ad_machine_pw_renewal.c:219ad_machine_account_password_renewal_timeoutad_machine_account_password_renewal_donesrc/providers/ad/ad_machine_pw_renewal.c:252src/providers/ad/ad_machine_pw_renewal.c:291Timeout reached for AD renewal child. src/providers/ad/ad_machine_pw_renewal.c:297src/providers/ad/ad_machine_pw_renewal.c:262src/providers/ad/ad_machine_pw_renewal.c:264src/providers/ad/ad_machine_pw_renewal.c:267src/providers/ad/ad_machine_pw_renewal.c:270src/providers/ad/ad_machine_pw_renewal.c:272--- adcli output start--- %.*s---adcli output end--- src/providers/ad/ad_machine_pw_renewal.c:281Failed to schedule enumeration, retrying later! Could not enumerate domain %s talloc_new: src/providers/ad/ad_id.c:855talloc_new: src/providers/ad/ad_id.c:937Group %s has no original members Group %s has %d members but %d original members talloc_new: src/providers/ad/ad_id.c:1013Could not compare lists of members for %s Failed to check extra members talloc_new: src/providers/ad/ad_id.c:1074Search by orig DN returned %zd results! Could not add [%s] as a member of [%s] Could not check cross-domain memberships for %s, group memberships might be incomplete! Could not retrieve list of original members for %s sdap_get_generic_send failed. ad_get_account_domain_search_doneMultiple entries found, error! Could not match entry with domain! talloc_new: src/providers/ad/ad_pac.c:170sss_idmap_smb_sid_to_sid failed. struct ad_handle_pac_initgr_stateUnable to resolve missing SIDs [%d]: %s sdap_ad_tokengroups_get_posix_members failed [%d]: %s Membership update failed [%d]: %s src/providers/ad/ad_access.c:309src/providers/ad/ad_access.c:325Unable to get basic AD options src/providers/ad/ad_common.c:299Cannot initialize AD LDAP options src/providers/ad/ad_common.c:310No AD server set, will use service discovery! The hostname [%s] has been expanded to FQDN [%s]. If sssd should really use the short hostname, please set ad_hostname explicitly. Setting ad_hostname failed [%s]. Warning: AD domain can not be set as case-sensitive. Could not set domain option case_sensitive: [%s] Setting domain option case_sensitive to [%s] src/providers/ad/ad_common.c:596talloc_new: src/providers/ad/ad_common.c:795Failed to create failover service! Failed to create GC failover service! No primary servers defined, using service discovery Could not set up AD online callback Failed to add failover callback! [%s] src/providers/ad/ad_common.c:903src/providers/ad/ad_common.c:908Setting ssf and mech for ldaps usage. Failed to set SASL minssf for ldaps usage, ignored. Failed to set SASL maxssf for ldaps usage, ignored. Could not set password policy Cannot set the SASL-related options The AD provider only supports the AD LDAP schema. SSSD will ignore the ldap_schema option value and proceed with ldap_schema=ad trust is defined to domain '%s' Failed to get uppercase realm src/providers/ad/ad_common.c:383src/providers/ad/ad_common.c:404ad_set_sdap_options failed [%d]: %s src/providers/ad/ad_common.c:413set_common_ad_trust_opts failed [%d]: %s src/providers/ad/ad_common.c:394Search base not set. SSSD will attempt to discover it later, when connecting to the LDAP server. src/providers/ad/ad_common.c:1222src/providers/ad/ad_common.c:1230src/providers/ad/ad_common.c:1237talloc_new: src/providers/ad/ad_common.c:1382Could not read Kerberos options from the configuration src/providers/ad/ad_common.c:1438src/providers/ad/ad_common.c:1443Cannot initialize AD dyndns opts [%d]: %s src/providers/ad/ad_common.c:1479src/providers/ad/ad_common.c:1487src/providers/ad/ad_common.c:1511No ID ctx available for [%s]. src/providers/ad/ad_access.c:476src/providers/ad/ad_access.c:262src/providers/ad/ad_access.c:498talloc_new: src/providers/ad/ad_access.c:173src/providers/ad/ad_access.c:229Cannot parse the list of ad_access_filters Keyword in filter [%s] did not match expected format Access filter [%s] could not be parsed, skipping Could not determine the best filter src/providers/ad/ad_access.c:295Option [%s] is set in parent domain but not set for sub-domain, inheriting it from parent. src/providers/ad/ad_common.c:1667src/providers/ad/ad_common.c:1689src/providers/ad/ad_common.c:1707Unable to store site information [%d]: %s struct dp_get_acct_domain_dataCould not get AD dyndns options Dynamic DNS updates are on. Checking for nsupdate.. DNS updates requested but nsupdate not available Resolver must be initialized in order to use the AD dynamic DNS updates DNS will not be updated periodically, dyndns_refresh_interval is 0 Unable to setup ptask [%d]: %s The helper program [/usr/sbin/adcli] for renewal doesn't exist [%d]: %s Automatic machine account renewal disabled. Illegal value [%d] for password lifetime. Wrong number of renewal options %d Unable to parse first renewal option. Unable to parse second renewal option. Unable to parse third renewal option. Missing AD domain or hostname. --computer-password-lifetime=%zutalloc failed while copying arguments. src/providers/ad/ad_machine_pw_renewal.c:96AD machine account password renewalsrc/providers/ad/ad_machine_pw_renewal.c:425struct ad_handle_acct_info_statead_handle_acct_info_recv failed [%d]: %s talloc_new: src/providers/ad/ad_pac.c:47Search by UUID returned multiple results. Unsupported filter type [%d]. No user found with filter [%s]. find_user_entry didn't find user entry. Looking up user in cache with filter [%s] failed. talloc_new: src/providers/ad/ad_pac.c:270add_sids_from_rid_array_to_hash_table failed. new_hash_iter_context failed. src/providers/ad/ad_pac_common.cMissing UPN in PAC, but check is not required. User object does not have a UPN but PAC says otherwise, maybe ldap_user_principal option is set. UPN is missing but PAC UPN check required, PAC validation failed. However, 'check_upn_allow_missing' is set and the error is ignored. To make this message go away please check why the UPN is not read from the server. In FreeIPA environments 'ldap_user_principal' is most probably set to a non-existing attribute name to avoid issues with enterprise principals. This is not needed anymore with recent versions of FreeIPA. PAC validation issue, please check sssd_pac.log for detailsUPN is missing but PAC UPN check required, PAC validation failed. UPN of user entry [%s] and PAC [%s] do not match. UPN of user entry [%s] and PAC [%s] do not match, ignored. Missing SID in PAC extension. Missing SID in PAC extension, but check is not required. User has no SID stored but SID check is required. User has no SID stored cannot check SID from PAC. Failed to convert SID from PAC externsion. sss_idmap_free_sid() failed, ignored. User SID [%s] and SID from PAC externsion [%s] differ. talloc_new: src/providers/ad/ad_pac_common.c:342src/providers/ad/ad_pac_common.c:457ndr_pull_PAC_DATA failed [%d] src/providers/ad/ad_pac_common.c:381src/providers/ad/ad_pac_common.c:387Unhandled PAC buffer type [%d]. LOGON_INFO pac buffer missing. UPN_DNS_INFO pac buffer required, but missing. UPN_DNS_INFO pac buffer extension required, but missing. upn_dns_info buffer not present, nothing to check. upn_dns_info buffer has no extra data to check. Missing DNS domain name in PAC. Missing '@' in UPN [%s] from PAC. Domain part of UPN [%s] and DNS domain name [%s] do not match. Name part of UPN [%s] and account name [%s] do not match. Account name in LOGON_INFO [%s] and UPN_DNS_INFO [%s] PAC buffers do not match. SID from UPN_DNS_INFO PAC buffer do not match data from LOGON_INFO buffer. PAC consistency check successful. src/providers/ad/ad_pac_common.c:460src/providers/ad/ad_pac_common.c:464talloc_new: src/providers/ad/ad_pac.c:462Missing user name in cache entry. ad_get_pac_data_from_user_entry failed. Running PAC processing with id-mapping. sdap_ad_save_group_membership_with_idmapping failed. Running PAC processing with external IDs. sdap_ad_tokengroups_get_posix_members failed. sdap_ad_resolve_sids_send failed. ad_handle_pac_initgr_lookup_sids_donead_handle_pac_initgr_send failed. Unable to convert filter value to number [%d]: %s Mapping ID [%s] to SID failed: [%s] This ID is from different domain Skipping enumeration on demand Error checking hash table: [%s] PAM service %s maps to %s multiple times Configuration error: PAM service %s maps to both %s and %s. If you are changing the default mappings of Group Policy rules to PAM services using one of the ad_gpo_map_* options make sure that the PAM service you add to one map using the '+service' syntax is not already present in another map by default (if it is then remove it from the other map by using the '-service' syntax. Check manual pages 'man sssd-ad' for details). talloc_new: src/providers/ad/ad_gpo.c:368Cannot parse list of service names %s: %d ad_gpo_map values must start witheither '+' (for adding service) or '-' (for removing service), got '%s' Default service (not explicitly removed): %s Could not initialize access provider options [%d]: %s src/providers/ad/ad_init.c:251Could not initialize sdap access context [%d]: %s Unrecognized GPO access control mode: %s Could not create gpo_map_options hash table [%d]: %s Could not parse gpo_map_options (invalid config) [%d]: %s src/providers/ad/ad_init.c:309Could not initialize GPO [%d]: %s src/providers/ad/ad_init.c:617Could not parse common options [%d]: %s Failed to init AD failover service: [%d]: %s src/providers/ad/ad_init.c:174Unable to initialize AD ID context Failure setting up automatic DNS update Unable to get TLS options [%d]: %s Could not initialize ID mapping. In case ID mapping properties changed on the server, please remove the SSSD database Unable to setup background tasks [%d]: %s Unable to set SRV lookup plugin [%d]: %s Unable to setup SRV plugin [%d]: %s Periodical refresh will not work [%d]: %s Cannot setup task for machine account password renewal. Failed to initialize certificate mapping rules. Authentication with certificates/Smartcards might not work as expected. Failed to initialized certificate mapping. Could not determine Kerberos options Could not initialize krb5_child settings: [%d]: %s src/providers/ad/ad_init.c:355Unable to create auth context [%d]: %s src/providers/ad/ad_init.c:511Unable to init AD module [%d]: %s Unable to init AD options [%d]: %s Initializing AD autofs handler Initializing AD subdomains handler Initializing AD resolver handler Unable to initialize AD resolver context Unable to setup resolver background tasks [%d]: %s Backend is marked offline, retry later! Domain enumeration failed to connect to LDAP server: (%d)[%s] Cannot retrieve master domain info Cannot save master domain info src/providers/ad/ad_access.c:342src/providers/ad/ad_access.c:343src/providers/ad/ad_access.c:346src/providers/ad/ad_access.c:351Error retrieving access check result: %s src/providers/ad/ad_access.c:372src/providers/ad/ad_access.c:378src/providers/ad/ad_access.c:390src/providers/ad/ad_access.c:397src/providers/ad/ad_access.c:409src/providers/ad/ad_access.c:425src/providers/ad/ad_access.c:426src/providers/ad/ad_access.c:430GPO-based access control successful. src/providers/ad/ad_access.c:434GPO-based access control failed. src/providers/ad/ad_access.c:438Ignoring error: [%d](%s); GPO-based access control failed, but GPO is not in enforcing mode. Warning: user would have been denied GPO-based logon access if the ad_gpo_access_control option were set to enforcing mode.src/providers/ad/ad_access.c:447SeDenyRemoteInteractiveLogonRightdyndns_refresh_interval_offsetkrb5_store_password_if_offlinekrb5_fast_use_anonymous_pkinitldap_autofs_entry_object_class/var/lib/sss/pubconf/krb5.include.dad_maximum_machine_account_password_agead_machine_account_password_renewal_optsad_update_samba_machine_account_passwordad_allow_remote_domain_local_groupsldap_netgroup_modify_timestampldap_user_krb_password_expirationldap_user_ad_user_account_controlldap_user_nds_login_expiration_timeldap_user_nds_login_allowed_time_mapldap_sudo_full_refresh_intervalldap_sudo_smart_refresh_intervalldap_enumeration_refresh_timeoutldap_enumeration_refresh_offsetldap_chpass_update_last_changeldap_enumeration_search_timeoutldap_auth_disable_tls_never_use_in_productionldap_ignore_unreadable_referencesldap_connection_expire_timeoutldap_rfc2307_fallback_to_local_users"!####"$#4$$$d$T$D$"!##""x#l","<#,## #L#@&(%&&`&p&P&ad_gpo_parse_map_optionsad_gpo_parse_map_optionad_gpo_parse_map_option_helperparse_filterad_parse_access_filterad_access_sendad_access_sendad_pam_access_handler_sendad_pam_access_handler_sendad_gpo_access_donead_sdap_access_donecheck_logon_info_upn_dns_infoad_get_data_from_paccheck_upn_and_sid_from_user_and_pacad_handle_pac_initgr_lookup_sids_donead_handle_pac_initgr_sendad_handle_pac_initgr_sendad_get_pac_data_from_user_entryad_get_sids_from_pacadd_sids_from_rid_array_to_hash_tablefind_user_entrycheck_if_pac_is_availablead_get_account_domain_evaluatead_get_account_domain_search_donead_get_account_domain_searchad_get_account_domain_prepare_searchad_get_account_domain_sendad_get_account_domain_sendad_group_stored_orig_membersad_group_extra_membersad_group_add_memberad_enum_cross_dom_membersad_enumeration_donead_enum_sdomad_enumeration_master_donead_enumeration_conn_donead_id_enumeration_sendad_id_enumeration_sendad_account_info_handler_sendad_account_info_handler_sendad_account_info_donead_account_info_sendad_account_info_sendad_handle_acct_info_stepad_account_can_shortcutad_handle_acct_info_sendad_handle_acct_info_sendget_adcli_extra_argsad_machine_account_password_renewal_initad_machine_account_password_renewal_timeoutad_machine_account_password_renewal_donead_machine_account_password_renewal_sendad_machine_account_password_renewal_sendad_dyndns_sdap_update_donead_dyndns_update_connect_donead_dyndns_update_sendad_dyndns_update_sendad_dyndns_initsssm_ad_resolver_initsssm_ad_sudo_initsssm_ad_subdomains_initsssm_ad_autofs_initad_init_sdap_access_ctxad_init_gposssm_ad_access_initad_init_optionsad_init_srv_pluginad_init_miscad_init_auth_ctxsssm_ad_initad_sasl_log @@@@@ad_options_switch_sitesubdom_inherit_opts_if_neededad_user_conn_listad_gc_conn_listad_get_dom_ldap_connad_get_dyndns_optionsad_get_auth_optionsad_set_search_basesad_set_sdap_optionsad_set_ssf_and_mech_for_ldapsad_resolve_callbackad_failover_resetad_failover_initad_online_cbad_user_data_cmp_ad_servers_initad_try_to_get_fqdnad_get_common_optionsset_common_ad_trust_optsad_create_trust_optionsad_create_optionsad_create_sdap_optionsPrivilege Rightssdap_id_op_create() failed src/providers/ad/ad_srv.c:467struct ad_srv_plugin_statesrc/providers/ad/ad_srv.c:472src/providers/ad/ad_srv.c:480src/providers/ad/ad_srv.c:488Subdomains refreshed. gPLinkgpOptions(objectclass=*)ad_gpo_get_som_attrs_doneNo configNC retrieved configurationNamingContext%s,cn=Sites,%sstruct gp_somsom_list[%d]->som_dn is %s Received multiple replies sysdb_attrs_get_el() failed strtouint32 failed: [%d](%s) som_dn: %s struct gp_gplink *LDAP://gplink_list[%d]: [%s; %d] ignored gpo skipped unenforced gpo skipped struct gp_gplinknTSecurityDescriptorgPCFileSysPathgPCMachineExtensionNamesgPCFunctionalityVersionflagssdap_sd_search_send failed. ad_gpo_get_gpo_attrs_doneError in gpo_child: [%d][%s] sysvol_gpt_version: %d struct fo_server_infosrc/providers/ad/ad_srv.c:99src/providers/ad/ad_srv.c:105src/providers/ad/ad_srv.c:114struct ad_srv_plugin_ctxstruct ad_subdomains_ctxsrc/providers/ad/ad_srv.c:418src/providers/ad/ad_srv.c:419src/providers/ad/ad_srv.c:427src/providers/ad/ad_srv.c:429src/providers/ad/ad_srv.csrc/providers/ad/ad_srv.c:454flatNametrustPartnersecurityIdentifiertrustAttributestrustDirectionad_get_slave_domain_doneCannot get cn Unexpected attribute isMemberOfPartialAttributeSetad_subdomains_refresh_donead_get_root_domain_donead_subdomains_handler_donestruct ad_check_domain_stateRemoving sdap domain [%s]. Removing domain [%s]. No previous GPO result allow_key: %s deny_key: %s RESULTANT POLICY: allowed_size = %d denied_size = %d allowed_sids[%d] = %s denied_sids[%d] = %s Error encountered: %d. CURRENT USER: user_sid = %s group_sids[%d] = %s POLICY DECISION: access_granted = %d access_denied = %d struct ad_gpo_access_stateserver_hostname from uri: %s sam_account_name is %s AD_HOSTSFailed to copy user map. struct gp_gpo *struct gp_gpono gpos found ad_gpo_process_gpo_donestruct io_bufferbuffer size: %zu talloc_size failed. --chain-id=%lutalloc_asprintf failed. /usr/libexec/sssd/gpo_childgpo_fork_child failed. gpo_cse_stepsmb_server: %s smb_share: %s smb_path: %s gpo_guid: %s /var/lib/sss/gpo_cache%s%sgpoVersiongpoPolicyFileTimeoutENOENT send_to_child: %d cached_gpt_version: %d ad_gpo_cse_doneNULLDACL is not present num_cse_filtered_gpos: %d NO_SIDallow_key = %s deny_key = %s value out of ranger->owner_sidAlloc %s failed: %s r->group_sidr->saclr->daclinput_path: %s /..gpo_func_version: %d gpo_flags: %d ndr_pull_init_blob() failed. ad_gpo_parse_sd() failed num_gpo_cse_guids: %d gpo_cse_guids[%d] is %s smb://%s._sites.%sbe_add_offline_cb failed. src/providers/ad/ad_srv.c:195failed to get subdomain name sdap_attrs_get_el failed. Could not convert SID: [%s]. auto_private_groupsMPG mode of %s is %s ad_gpo_connect_doneservice %s maps to %s No connection for %s No attrs found for GPO [%s]. ad_gpo_get_sd_referral_donestruct gp_som *DC=OU=ad_gpo_process_som_donecn=%sUsing AD site '%s'. ad_gpo_site_dn_retrieval_donesrc/providers/ad/ad_srv.c:242ad_srv_plugin_ping_donesrc/providers/ad/ad_srv.c:291- not available-Failed to copy forest name. Missing realm. Missing domain name. GC explicitly disabled attributeSchemasrc/providers/ad/ad_srv.c:305src/providers/ad/ad_srv.c:306src/providers/ad/ad_srv.c:309Unable to set site [%d]: %s ad_srv_plugin_servers_donesrc/providers/ad/ad_srv.c:406Missing realm or hostname. Cannot initialize AD options sd_gc_%ssd_%sad_subdom_ad_ctx_new failed. no Disabling subdomain %s Enabling subdomain %s There are %schanges const char*struct dp_subdomains_dataSubdomains RefreshCannot get the sdom for %s! new_subdomain() failed. ads_get_dom_id_ctx() failed. ad_check_domain_connect_donead_check_root_domain_donetalloc_array() failed. sysdb_new_attrs() failed. ini_get_config_valueobj failed [%d][%s] section/name not found: [%s][%s] ini_get_string_config_value failed [%d][%s] Failed to add [%s][%s] to hash: [%s]. src/providers/ad/ad_subdomains.c:1205struct ad_get_slave_domain_statesdap_id_op_connect_send() failed [%d]: %s src/providers/ad/ad_subdomains.cad_get_slave_domain_connect_donesrc/providers/ad/ad_subdomains.c:2048struct ad_subdomains_refresh_statead_subdomains_refresh_connect_donesrc/providers/ad/ad_subdomains.c:2004src/providers/ad/ad_subdomains.c:2033src/providers/ad/ad_subdomains.c:2035src/providers/ad/ad_subdomains.c:2347src/providers/ad/ad_subdomains.c:2350src/providers/ad/ad_subdomains.c:2364Unable to get subdomains [%d]: %s Unable to refresh subdomains [%d]: %s src/providers/ad/ad_subdomains.c:2359src/providers/ad/ad_subdomains.c:2449struct ad_subdomains_handler_statesrc/providers/ad/ad_gpo.c:3473struct ad_gpo_process_som_statesrc/providers/ad/ad_gpo.c:3383src/providers/ad/ad_gpo.c:3384src/providers/ad/ad_gpo.c:3388Unable to get configNC: [%d](%s) Multiple replies for configNC reply_count is 1, but reply is NULL sysdb_attrs_get_string failed: [%d](%s) src/providers/ad/ad_gpo.c:3438src/providers/ad/ad_gpo.c:3460src/providers/ad/ad_gpo.c:3462src/providers/ad/ad_gpo.c:3512src/providers/ad/ad_gpo.c:3513src/providers/ad/ad_gpo.c:3516Unable to get SOM attributes: [%d](%s) no attrs found for SOM; try next SOM. sysdb_attrs_get_el() failed: [%d](%s) gpLink attr not found or has no values gpoptions attr not found or has no value; defaults to 0 ad_gpo_populate_gplink_list() failed talloc_new: src/providers/ad/ad_gpo.c:3083src/providers/ad/ad_gpo.c:3183src/providers/ad/ad_gpo.c:3187src/providers/ad/ad_gpo.c:3602src/providers/ad/ad_gpo.c:3604src/providers/ad/ad_gpo.c:4224struct ad_gpo_process_gpo_stateGroup Policy Container with DN [%s] has unreadable or missing attributes -> skipping this GPO (ad_gpo_ignore_unreadable = True) Group Policy Container with DN [%s] is unreadable or has unreadable or missing attributes. In order to fix this make sure that this AD object has following attributes readable: nTSecurityDescriptor, cn, gPCFileSysPath, gPCMachineExtensionNames, gPCFunctionalityVersion, flags. Alternatively if you do not have access to the server or can not change permissions on this object, you can use option ad_gpo_ignore_unreadable = True which will skip this GPO. See ad_gpo_ignore_unreadable in 'man sssd-ad' for details. src/providers/ad/ad_gpo.c:5154src/providers/ad/ad_gpo.c:5156struct ad_gpo_get_sd_referral_statesrc/providers/ad/ad_gpo.c:5159src/providers/ad/ad_gpo.c:5164Cross-realm GPO processing failed to connect to referred LDAP server: (%d)[%s] src/providers/ad/ad_gpo.c:5170src/providers/ad/ad_gpo.c:5184ad_gpo_get_sd_referral_search_donesrc/providers/ad/ad_gpo.c:5200src/providers/ad/ad_gpo.c:5202src/providers/ad/ad_gpo.c:5207Unable to get GPO attributes: [%d](%s) src/providers/ad/ad_gpo.c:5241No attrs found for referred GPO [%s]. src/providers/ad/ad_gpo.c:5238src/providers/ad/ad_gpo.c:5244src/providers/ad/ad_gpo.c:5246src/providers/ad/ad_gpo.c:4840src/providers/ad/ad_gpo.c:4841struct ad_gpo_process_cse_statesrc/providers/ad/ad_gpo.c:4844src/providers/ad/ad_gpo.c:4846src/providers/ad/ad_gpo.c:4855src/providers/ad/ad_gpo.c:4869src/providers/ad/ad_gpo.c:4870src/providers/ad/ad_gpo.c:4874src/providers/ad/ad_gpo.c:4876ad_gpo_parse_gpo_child_response failed: [%d][%s]. Broken GPO data received from AD. Check AD child logs for more information. src/providers/ad/ad_gpo.c:4897src/providers/ad/ad_gpo.c:4903Unable to store gpo cache entry: [%d](%s} src/providers/ad/ad_gpo.c:4914src/providers/ad/ad_gpo.c:4918Got %zu primary and %zu backup servers Unable to sort primary servers by DNS[%d]: %s Unable to sort backup servers by DNS[%d]: %s src/providers/ad/ad_subdomains.c:1229src/providers/ad/ad_subdomains.c:1230src/providers/ad/ad_subdomains.c:1233Unable to connect to LDAP [%d]: %s No AD server is available, cannot get the subdomain list while offline src/providers/ad/ad_subdomains.c:1243(&(objectclass=trustedDomain)(trustType=2)(!(msDS-TrustForestTrustInfo=*)))src/providers/ad/ad_subdomains.c:1253Failed to find domain name, skippingsrc/providers/ad/ad_subdomains.c:1889src/providers/ad/ad_subdomains.c:1891struct ad_check_gc_usability_statesrc/providers/ad/ad_subdomains.c:1900sdap_get_generic_recv failed [%d]: %s Nothing found, so no POSIX attrs can exist src/providers/ad/ad_subdomains.c:1912Cannot get isMemberOfPartialAttributeSet Server has POSIX attributes. Global Catalog will be used for user and group lookups. Note that if only a subset of POSIX attributes is present in GC, the non-replicated attributes are currently not read from the LDAP port src/providers/ad/ad_subdomains.c:1961src/providers/ad/ad_subdomains.c:2297src/providers/ad/ad_subdomains.c:2298src/providers/ad/ad_subdomains.c:1761struct ad_get_root_domain_statesrc/providers/ad/ad_subdomains.c:1765src/providers/ad/ad_subdomains.c:2304Unable to get forest root [%d]: %s src/providers/ad/ad_subdomains.c:2320src/providers/ad/ad_subdomains.c:2324src/providers/ad/ad_subdomains.c:2327src/providers/ad/ad_subdomains.c:1154src/providers/ad/ad_subdomains.c:2334ads_get_root_domain did not find the domain Failed to find sdap_domain for the root domain src/providers/ad/ad_subdomains.c:1190src/providers/ad/ad_subdomains.c:1192src/providers/ad/ad_subdomains.c:2218src/providers/ad/ad_subdomains.c:2219src/providers/ad/ad_subdomains.c:1969src/providers/ad/ad_subdomains.c:2222Unable to get GC usability status POSIX attributes were requested but are not present on the server side. Global Catalog lookups will be disabled Could not turn off GC support No other enabled domain than master. src/providers/ad/ad_subdomains.c:2263Unable to list subdomains [%d]: %s src/providers/ad/ad_subdomains.c:2248Unable to remove subdomain [%d]: %s src/providers/ad/ad_subdomains.c:2258Missing AD domain name, falling back to sssd domain name src/providers/ad/ad_subdomains.c:1438src/providers/ad/ad_subdomains.c:2280Name of forest root domain not available, lusing cached data, if available. src/providers/ad/ad_subdomains.c:1482Looking up the forest root domain. src/providers/ad/ad_subdomains.c:1484ad_subdomains_refresh_root_donesrc/providers/ad/ad_subdomains.c:2391Subdomains were recently refreshed, nothing to do src/providers/ad/ad_subdomains.c:2420src/providers/ad/ad_subdomains.c:2432src/providers/ad/ad_subdomains.c:2433src/providers/ad/ad_subdomains.c:2436src/providers/ad/ad_subdomains.c:2440src/providers/ad/ad_subdomains.c:2575src/providers/ad/ad_subdomains.c:2582Cannot retrieve settings from sysdb for key: '%s' [%d][%s]. No value for key [%s] found in gpo result Cannot parse list of sids %s: %d src/providers/ad/ad_gpo.c:1824parse_policy_setting_value failed for key %s: [%d](%s) Unable to retrieve SIDs: [%d](%s) access denied: permissive mode GPO access check failed: [%d](%s) src/providers/ad/ad_gpo.c:2140src/providers/ad/ad_gpo.c:2141src/providers/ad/ad_gpo.c:2144Failed to connect to AD server: [%d](%s) Preparing for offline operation. process_offline_gpos succeeded src/providers/ad/ad_gpo.c:2165HBAC processing failed: [%d](%s} process_offline_gpos failed [%d](%s) Failed to parse ldap URI (%s)! Failed to create fully-qualified host name. Failed to create dedicated search base for host lookups, trying with user search base.ad_gpo_target_dn_retrieval_donesrc/providers/ad/ad_gpo.c:2270src/providers/ad/ad_gpo.c:3615src/providers/ad/ad_gpo.c:3618src/providers/ad/ad_gpo.c:4166talloc_new: src/providers/ad/ad_gpo.c:3669src/providers/ad/ad_gpo.c:3837src/providers/ad/ad_gpo.c:3731src/providers/ad/ad_gpo.c:3765src/providers/ad/ad_gpo.c:3796candidate_gpos[%d]->gpo_dn: %s src/providers/ad/ad_gpo.c:3817src/providers/ad/ad_gpo.c:3831Unable to retrieve GPO List: [%d](%s) src/providers/ad/ad_gpo.c:4207src/providers/ad/ad_gpo.c:4210src/providers/ad/ad_gpo.c:2424src/providers/ad/ad_gpo.c:2425src/providers/ad/ad_gpo.c:2427Unable to get som list: [%d](%s) src/providers/ad/ad_gpo.c:2458src/providers/ad/ad_gpo.c:4619src/providers/ad/ad_gpo.c:4623src/providers/ad/ad_gpo.c:4763src/providers/ad/ad_gpo.c:4824src/providers/ad/ad_gpo.c:4662src/providers/ad/ad_gpo.c:4665src/providers/ad/ad_gpo.c:4939create_cse_send_buffer failed. BUG: Could not exec gpo_child: Could not set up child signal handler src/providers/ad/ad_gpo.c:4827src/providers/ad/ad_gpo.c:2683cse filtered_gpos[%d]->gpo_guid is %s /Machine/Microsoft/Windows NT/SecEdit/GptTmpl.infcse_filtered_gpos[%d]->gpo_cse_guids[%d]->gpo_guid is %s retrieving GPO from cache [%s] Could not read GPO from cache: [%s] src/providers/ad/ad_gpo.c:2486src/providers/ad/ad_gpo.c:2487src/providers/ad/ad_gpo.c:2491Unable to get GPO list from server %s: [%d](%s) No GPOs found that apply to this system. No GPO Result available in cache Could not delete GPO Result from cache: [%s] src/providers/ad/ad_gpo.c:2665No applicable GPOs have been found and ad_gpo_implicit_deny is set to 'true'. The user will be denied access. talloc_new: src/providers/ad/ad_gpo.c:1145src/providers/ad/ad_gpo.c:1253Unable to retrieve host SIDs: [%d](%s) examining dacl candidate_gpo_guid:%s GPO not applicable to target per security filtering: gPCFunctionalityVersion is not 2 Security descriptor is missing GPO not applicable to target per security filtering: GPO's computer portion is disabled Could not determine if ACE is applicable; Trustee: %s edacfd8f-ffb3-11d1-b41d-00a0c968f939GPO read properties access denied (security); Trustee: %s GPO denied (security); Trustee: %s GPO apply group policy access denied (security) Could not determine if GPO is applicable GPO applicable to target per security filtering src/providers/ad/ad_gpo.c:1234GPO not applicable to target per security filtering: result of DACL evaluation src/providers/ad/ad_gpo.c:1247Unable to filter GPO list by DACL: [%d](%s) no applicable gpos found after dacl filtering dacl_filtered_gpos[%d]->gpo_guid is %s talloc_new: src/providers/ad/ad_gpo.c:1300examining cse candidate_gpo_guid: %s {827D319E-6EAC-11D2-A4EA-00C04F79F83A}src/providers/ad/ad_gpo.c:1341src/providers/ad/ad_gpo.c:1347Unable to filter GPO list by CSE_GUID: [%d](%s) no applicable gpos found after cse_guid filtering cse_filtered_gpos[%d]->gpo_guid is %s src/providers/ad/ad_gpo.c:2629src/providers/ad/ad_gpo.c:2667GPO applicable to target per cse_guid filtering src/providers/ad/ad_gpo.c:1328GPO not applicable to target per cse_guid filtering src/providers/ad/ad_gpo.c:2824src/providers/ad/ad_gpo.c:2825src/providers/ad/ad_gpo.c:2836Unable to retrieve policy data: [%d](%s} talloc_new: src/providers/ad/ad_gpo.c:1483ini_config_create failed [%d][%s] ini_config_file_open failed [%d][%s] [%s]: ini_config_parse failed [%d][%s] Failed to get specific parse error [%d][%s] ad_gpo_extract_policy_setting failed for %s [%d][%s] Failed to add key: [%s] value: [%s] to allow maps [%d][%s]. Failed to add key: [%s] value: [%s] to deny maps [%d][%s]. src/providers/ad/ad_gpo.c:1653ad_gpo_store_policy_settings failed: [%d](%s) Failed to create hash iterator. sysdb_gpo_store_gpo_result_setting failed for key:[%s] value:[%s] [%d][%s] src/providers/ad/ad_gpo.c:2803Failed to store evaluated GPO maps [%d][%s]. src/providers/ad/ad_gpo.c:2890src/providers/ad/ad_gpo.c:2892src/providers/ad/ad_gpo.c:5257src/providers/ad/ad_gpo.c:5261src/providers/ad/ad_gpo.c:5262src/providers/ad/ad_gpo_ndr.c:276Invalid pull struct ndr_flags 0x%xsrc/providers/ad/ad_gpo_ndr.c:422talloc_new: src/providers/ad/ad_gpo_ndr.c:433src/providers/ad/ad_gpo_ndr.c:433_NDR_PULL_FIX_CURRENT_MEM_CTX() failed: %s talloc_new: src/providers/ad/ad_gpo_ndr.c:442src/providers/ad/ad_gpo_ndr.c:442talloc_new: src/providers/ad/ad_gpo_ndr.c:451src/providers/ad/ad_gpo_ndr.c:451talloc_new: src/providers/ad/ad_gpo_ndr.c:458src/providers/ad/ad_gpo_ndr.c:458src/providers/ad/ad_gpo_ndr.c:471NDR_PULL_SET_MEM_CTX(NULL): %s src/providers/ad/ad_gpo_ndr.c:473src/providers/ad/ad_gpo_ndr.c:484src/providers/ad/ad_gpo_ndr.c:486src/providers/ad/ad_gpo_ndr.c:497src/providers/ad/ad_gpo_ndr.c:501src/providers/ad/ad_gpo_ndr.c:512src/providers/ad/ad_gpo_ndr.c:516src/providers/ad/ad_gpo.c:4461src/providers/ad/ad_gpo.c:4476populating attrs for gpo_guid: %s gPCFileSysPath contains path traversal component '..': [%s]. Rejecting to prevent cache directory escape. unable to extract smb components from file_sys_path: [%d](%s) GPO with GUID %s is missing attribute gPCFunctionalityVersion and will be skipped. sysdb_attrs_get_int32_t failed: [%d](%s) nt_sec_desc attribute not found or has no value Failed to pull security descriptor src/providers/ad/ad_gpo.c:4118machine_ext_names attribute not found or has no value src/providers/ad/ad_gpo.c:4072src/providers/ad/ad_gpo.c:4077ad_gpo_parse_machine_ext_names() failed talloc_new: src/providers/ad/ad_gpo.c:4021src/providers/ad/ad_gpo.c:4352src/providers/ad/ad_gpo.c:4354src/providers/ad/ad_gpo.c:4357Unable to get referred GPO attributes: [%d](%s) src/providers/ad/ad_gpo.c:4375src/providers/ad/ad_gpo.c:4377Unable to get current site from cache [%d]: %s talloc_new: src/providers/ad/ad_subdomains.c:595failed to get flat name of subdomain %s failed to get dns name of subdomain %s subdom_conf_path failed, will use %s mode as fallback src/providers/ad/ad_subdomains.c:555condb_get_string failed, will use %s mode as fallback Subdomain MPG mode not set, using %s src/providers/ad/ad_subdomains.c:571sysdb_subdomain_store failed. src/providers/ad/ad_subdomains.c:664src/providers/ad/ad_gpo.c:1963Configuration hint: PAM service '%s' is not mapped to any Group Policy rule. If you plan to use this PAM service it is recommended to use the ad_gpo_map_* family of options to map this PAM service to a Group Policy rule. PAM services not present in any map will fall back to value set in ad_gpo_default_right, which is currently set to %s (see manual pages 'man sssd-ad' for more details). Could not create allow maps hash table [%d]: %s Could not create deny maps hash table [%d]: %s src/providers/ad/ad_gpo.c:2087src/providers/ad/ad_gpo.c:2085src/providers/ad/ad_gpo.c:4278src/providers/ad/ad_gpo.c:4279src/providers/ad/ad_gpo.c:4284src/providers/ad/ad_gpo.c:5043Failed to parse referral URI (%s)! Could not copy referral DN (%s)! Could not find domain matching [%s] Failed to parse service URI (%s)! ad_gpo_get_sd_referral_conn_donesrc/providers/ad/ad_gpo.c:5137src/providers/ad/ad_gpo.c:4337src/providers/ad/ad_gpo.c:4339src/providers/ad/ad_gpo.c:3241talloc_new: src/providers/ad/ad_gpo.c:2964src/providers/ad/ad_gpo.c:3031src/providers/ad/ad_gpo.c:3008talloc_new: src/providers/ad/ad_gpo.c:2921src/providers/ad/ad_gpo.c:2935src/providers/ad/ad_gpo.c:2931src/providers/ad/ad_gpo.c:3026Unable to retrieve SOM List : [%d](%s) target dn must have at least one parent ad_gpo_site_name_retrieval_donesrc/providers/ad/ad_gpo.c:3287src/providers/ad/ad_gpo.c:2289src/providers/ad/ad_gpo.c:2290src/providers/ad/ad_gpo.c:2292src/providers/ad/ad_gpo.c:2307Unable to get policy target's DN: [%d](%s) Failed to read host attributes. Unexpected number [%d] of results searching for [%s], expected 1. ldb_msg_find_attr_as_string failed: [%d](%s) src/providers/ad/ad_gpo.c:2346Failed to convert UAC [%s] into uint32_t. UAC [%s] is not a pure numerical value. Invalid userAccountControl (%x) value for machine account. src/providers/ad/ad_gpo.c:2387src/providers/ad/ad_gpo.c:2411src/providers/ad/ad_subdomains.c:2069src/providers/ad/ad_subdomains.c:2070src/providers/ad/ad_subdomains.c:2073src/providers/ad/ad_subdomains.c:2083src/providers/ad/ad_subdomains.c:2091ad_subdomains_refresh_master_donesrc/providers/ad/ad_gpo.c:3304src/providers/ad/ad_gpo.c:3305src/providers/ad/ad_gpo.c:3309Could not autodiscover AD site. This is not fatal if ad_site option was set. Overriding autodiscovered AD site value '%s' with '%s' from configuration. Could not autodiscover AD site value using DNS and ad_site option was not set in configuration. GPO will not work. To work around this issue you can use ad_site option in SSSD configuration.Could not autodiscover AD site value using DNS and ad_site option was not set in configuration. GPO will not work. To work around this issue you can use ad_site option in SSSD configuration. src/providers/ad/ad_gpo.c:3335src/providers/ad/ad_gpo.c:3343src/providers/ad/ad_gpo.c:3364src/providers/ad/ad_subdomains.c:2111src/providers/ad/ad_subdomains.c:2112src/providers/ad/ad_subdomains.c:2116Unable to get master domain information [%d]: %s src/providers/ad/ad_subdomains.c:2120Forest name was not found, using the one which was already discovered [%s]. src/providers/ad/ad_subdomains.c:2135Ignoring AD site found by DNS discovery: '%s', using configured value: '%s' instead. Failed to store forest and site name, will try again after a new lookup. Site name currently not available will try again later. The site name can be added manually my setting 'ad_site' in sssd.conf. src/providers/ad/ad_subdomains.c:2174src/providers/ad/ad_subdomains.c:2181Cannot save master domain info [%d]: %s src/providers/ad/ad_subdomains.c:2190src/providers/ad/ad_subdomains.c:1797src/providers/ad/ad_subdomains.c:2202GC always usable while ID mapping No idea where to look for the schema, disabling GC Checking for POSIX attributes in GC (&(objectclass=%s)(|(%s=%s)(%s=%s)))ad_check_gc_usability_search_donesrc/providers/ad/ad_subdomains.c:1878src/providers/ad/ad_subdomains.c:1880ad_subdomains_refresh_gc_check_doneMissing forest information, using %s About to discover primary and backup servers subdomain_create_conf_path failed src/providers/ad/ad_subdomains.c:324src/providers/ad/ad_subdomains.c:325Failed to inherit option [%s] to sub-domain [%s]. This error is ignored but might cause issues or unexpected behavior later on. src/providers/ad/ad_subdomains.c:359src/providers/ad/ad_subdomains.c:365src/providers/ad/ad_subdomains.c:371Init failover for [%s][%s] with use_kdcinfo [%s]. Cannot initialize AD failover src/providers/ad/ad_subdomains.c:402src/providers/ad/ad_subdomains.c:408Cannot initialize sdap domain src/providers/ad/ad_subdomains.c:434Failed to set LDAP search bases for domain '%s'. Will try to use automatically detected search bases.Auth provider data is not available, most probably because the auth provider is not 'ad'. Kerberos configuration snippet to set the 'canonicalize' option will not be created. sss_write_krb5_conf_snippet failed. sysdb_update_subdomains failed. sss_krb5_write_mappings failed. sdap_domain_subdom_add failed. ads_store_sdap_subdom failed. failed to set ldap search bases for domain '%s'. will try to use automatically detected search bases.src/providers/ad/ad_subdomains.c:1273src/providers/ad/ad_subdomains.c:1274src/providers/ad/ad_subdomains.c:1277Unable to lookup slave domain data [%d]: %s sysdb_attrs_get_string failed. Not including primary domain %s in the subdomain list src/providers/ad/ad_subdomains.c:994src/providers/ad/ad_subdomains.c:1007Disabling forest root domain %s Unable to disable domain %s [%d]: %s Cannot process subdomain list src/providers/ad/ad_subdomains.c:1309Failed to refresh subdomains. Could not reinitialize subdomains src/providers/ad/ad_subdomains.c:1343src/providers/ad/ad_subdomains.c:1339src/providers/ad/ad_subdomains.c:1026talloc_new: src/providers/ad/ad_subdomains.c:179Failed to parse option [%s], [%i] [%s]! src/providers/ad/ad_subdomains.c:235src/providers/ad/ad_subdomains.c:231Could not reinitialize subdomains. Users from trusted domains might not be resolved correctly ad_subdomains_refresh failed [%d]: %s Could not find the root domain Cannot create id ctx for the root domain src/providers/ad/ad_subdomains.c:2602Failed to find domain object for domain [%s]. failed to set ldap search bases for domain '%s'. Will try to use automatically detected search bases.src/providers/ad/ad_subdomains.c:2689src/providers/ad/ad_subdomains.c:2691src/providers/ad/ad_subdomains.c:1521src/providers/ad/ad_subdomains.c:1522src/providers/ad/ad_subdomains.c:1527Unable to lookup forest root information [%d]: %s Failed to allocate memory for sub-domain list. src/providers/ad/ad_subdomains.c:704TRUST_ATTRIBUTE_WITHIN_FOREST not set for [%s]. TRUST_DIRECTION_OUTBOUND not set for [%s]. src/providers/ad/ad_subdomains.c:739Failed to filter list of returned domains. ad_enabled_domains is set, skipping domain filtering. No information provided for root domain, trying directly. ad_check_domain_send() failed. src/providers/ad/ad_subdomains.c:1603ad_get_root_domain_refresh() failed. src/providers/ad/ad_subdomains.c:1599src/providers/ad/ad_subdomains.c:1616src/providers/ad/ad_subdomains.c:1617src/providers/ad/ad_subdomains.c:1620Unable to check forest root information [%d]: %s NetBIOS name of forest root not available. Domain SID of forest root not available. sysdb_attrs_add_string() failed. src/providers/ad/ad_subdomains.c:1703src/providers/ad/ad_subdomains.c:1699 0@lqom nnkjohopooooad_check_domain_sendad_check_domain_sendad_check_domain_destructorad_get_enabled_domainsad_subdomains_initad_subdomains_handler_sendad_subdomains_handler_sendad_subdomains_refresh_doneads_get_root_sdap_domainad_get_slave_domain_sendad_get_slave_domain_sendad_subdomains_refresh_root_donead_disable_gcad_get_root_domain_sendad_get_root_domain_sendad_subdomains_refresh_gc_check_donead_check_gc_usability_sendad_check_gc_usability_sendad_subdomains_refresh_master_donead_subdomains_refresh_connect_donead_subdomains_refresh_retryad_subdomains_refresh_sendad_subdomains_refresh_sendad_check_gc_usability_search_donead_get_root_domain_refreshad_check_root_domain_donead_filter_domainsad_get_root_domain_donefind_domainads_get_dom_id_ctxad_subdomains_processad_get_slave_domain_donead_get_slave_domain_connect_donead_get_slave_domain_retryads_store_sdap_subdomad_subdom_reinitad_subdom_mpg_modead_subdom_storead_subdom_ad_ctx_newad_srv_plugin_servers_donead_srv_plugin_ping_donead_srv_plugin_sendad_srv_plugin_sendad_srv_plugin_ctx_initad_gpo_ndr_pull_security_descriptorndr_pull_dom_sidndr_pull_security_ace_objectad_gpo_get_sd_referral_search_donead_gpo_get_sd_referral_conn_donegpo_cse_donecreate_cse_send_buffergpo_fork_childad_gpo_process_cse_sendad_gpo_process_cse_sendad_gpo_extract_smb_componentsad_gpo_parse_sdad_gpo_parse_machine_ext_namesad_gpo_sd_process_attrsad_gpo_missing_or_unreadable_attrad_gpo_get_sd_referral_donead_gpo_get_sd_referral_sendad_gpo_get_sd_referral_sendad_gpo_get_gpo_attrs_donead_gpo_get_gpo_attrs_stepad_gpo_populate_candidate_gposad_gpo_process_gpo_sendad_gpo_process_gpo_sendad_gpo_populate_gplink_listad_gpo_get_som_attrs_donead_gpo_get_som_attrs_stepad_gpo_site_dn_retrieval_donead_gpo_site_name_retrieval_donead_gpo_process_som_sendad_gpo_process_som_sendad_gpo_store_policy_settingsstore_hash_maps_in_cachead_gpo_cse_donead_gpo_cse_stepad_gpo_evaluate_daclad_gpo_filter_gpos_by_daclad_gpo_filter_gpos_by_cse_guidad_gpo_process_gpo_donead_gpo_process_som_donead_gpo_target_dn_retrieval_doneprocess_offline_gposad_gpo_connect_donead_gpo_access_sendad_gpo_access_sendad_gpo_access_checkad_gpo_perform_hbac_processingparse_policy_setting_valueadd_result_to_hashad_gpo_extract_policy_settingsrc/providers/ad/ad_cldap_ping.c:555src/providers/ad/ad_cldap_ping.c:556struct ad_cldap_ping_domain_statesrc/providers/ad/ad_cldap_ping.c:423struct ad_cldap_ping_parallel_statesrc/providers/ad/ad_cldap_ping.c:427src/providers/ad/ad_cldap_ping.c:428src/providers/ad/ad_cldap_ping.c:560src/providers/ad/ad_cldap_ping.c:566src/providers/ad/ad_cldap_ping.c:562src/providers/ad/ad_domain_info.c:267src/providers/ad/ad_domain_info.csrc/providers/ad/ad_domain_info.c:305src/providers/ad/ad_domain_info.c:308src/providers/ad/ad_domain_info.c:311sdap_get_generic_send request failed. src/providers/ad/ad_domain_info.c:328src/providers/ad/ad_domain_info.c:348More than one result for domain SID found. sss_ldap_encode_ndr_uint32 failed. src/providers/ad/ad_domain_info.c:392Cannot retrieve ad_resolver_ctx! src/providers/ad/ad_resolver.csrc/providers/ad/ad_resolver.c:247ad_resolver_enumeration_conn_donesrc/providers/ad/ad_resolver.c:291src/providers/ad/ad_resolver.c:409src/providers/ad/ad_resolver.c:434src/providers/ad/ad_resolver.c:436src/providers/ad/ad_resolver.c:440src/providers/ad/ad_resolver.c:444src/providers/ad/ad_resolver.c:459src/providers/ad/ad_resolver.c:469src/providers/ad/ad_resolver.c:476src/providers/ad/ad_cldap_ping.c:117src/providers/ad/ad_cldap_ping.c:118src/providers/ad/ad_cldap_ping.c:121src/providers/ad/ad_cldap_ping.c:160src/providers/ad/ad_cldap_ping.c:320src/providers/ad/ad_cldap_ping.csrc/providers/ad/ad_cldap_ping.c:73Unable to create new ping request src/providers/ad/ad_cldap_ping.c:100src/providers/ad/ad_cldap_ping.c:366Unable to schedule next batch! src/providers/ad/ad_cldap_ping.c:378src/providers/ad/ad_cldap_ping.c:392src/providers/ad/ad_cldap_ping.c:393src/providers/ad/ad_cldap_ping.c:223src/providers/ad/ad_cldap_ping.c:227src/providers/ad/ad_cldap_ping.c:228src/providers/ad/ad_cldap_ping.c:396src/providers/ad/ad_cldap_ping.c:401src/providers/ad/ad_cldap_ping.c:402src/providers/ad/ad_cldap_ping.c:406src/providers/ad/ad_cldap_ping.c:411src/providers/ad/ad_cldap_ping.c:518src/providers/ad/ad_cldap_ping.c:519src/providers/ad/ad_cldap_ping.c:523Found %zu domain controllers in domain %s src/providers/ad/ad_cldap_ping.c:273talloc_new: src/providers/ad/ad_cldap_ping.c:288src/providers/ad/ad_cldap_ping.c:301src/providers/ad/ad_cldap_ping.c:544src/providers/ad/ad_cldap_ping.c:698src/providers/ad/ad_cldap_ping.c:464Bad argument (discovery_domain)ad_cldap_ping_domain_discovery_donesrc/providers/ad/ad_cldap_ping.c:505src/providers/ad/ad_cldap_ping.c:726src/providers/ad/ad_cldap_ping.c:727src/providers/ad/ad_cldap_ping.c:575src/providers/ad/ad_cldap_ping.c:579src/providers/ad/ad_cldap_ping.c:580src/providers/ad/ad_cldap_ping.c:731src/providers/ad/ad_cldap_ping.c:735Unable to get site and forest information [%d]: %s src/providers/ad/ad_cldap_ping.c:751src/providers/ad/ad_subdomains.c:2774src/providers/ad/ad_subdomains.c:2780src/providers/ad/ad_subdomains.c:2784src/providers/ad/ad_subdomains.c:2788src/providers/ad/ad_subdomains.c:2792More than one netlogon value? talloc_new: src/providers/ad/ad_domain_info.c:67ndr_pull_netlogon_samlogon_response() failed [%d] No netlogon flat domain name data available. No netlogon forest data available. No netlogon site name data available. No netlogon next closest site name data available. src/providers/ad/ad_domain_info.c:174src/providers/ad/ad_domain_info.c:402src/providers/ad/ad_domain_info.c:405src/providers/ad/ad_domain_info.c:408src/providers/ad/ad_domain_info.c:411No netlogon data available. Flat name might not be usable More than one netlogon info returned. Could not get the flat name or forest: %d:[%s] src/providers/ad/ad_domain_info.c:443src/providers/ad/ad_cldap_ping.c:172src/providers/ad/ad_cldap_ping.c:173src/providers/ad/ad_cldap_ping.c:177src/providers/ad/ad_cldap_ping.c:178%s:%d: unable to get netlogon information %s:%d: no netlogon information available %s:%d: unable to retrieve site name [%d]: %s %s:%d: found site (%s) and forest (%s) src/providers/ad/ad_cldap_ping.c:214src/providers/ad/ad_cldap_ping.c:210src/providers/ad/ad_domain_info.c:210No internal domain data found for [%s], falling back to first domain. Missing internal domain data for domain [%s]. src/providers/ad/ad_domain_info.c:251src/providers/ad/ad_subdomains.c:2705src/providers/ad/ad_subdomains.c:2706src/providers/ad/ad_subdomains.c:2709src/providers/ad/ad_subdomains.c:2719src/providers/ad/ad_resolver.c:301src/providers/ad/ad_resolver.c:303src/providers/ad/ad_resolver.c:309src/providers/ad/ad_resolver.c:314src/providers/ad/ad_resolver.c:319src/providers/ad/ad_resolver.c:328ad_resolver_enumeration_master_donesrc/providers/ad/ad_domain_info.c:455src/providers/ad/ad_domain_info.c:461src/providers/ad/ad_domain_info.c:465src/providers/ad/ad_domain_info.c:469src/providers/ad/ad_domain_info.c:473src/providers/ad/ad_subdomains.c:2739src/providers/ad/ad_subdomains.c:2740src/providers/ad/ad_subdomains.c:2744Unable to lookup domain information [%d]: %s src/providers/ad/ad_subdomains.c:2760src/providers/ad/ad_subdomains.c:2764src/providers/ad/ad_resolver.c:344src/providers/ad/ad_resolver.c:346src/providers/ad/ad_resolver.c:356src/providers/ad/ad_resolver.c:359src/providers/ad/ad_resolver.c:366src/providers/ad/ad_resolver.c:374src/providers/ad/ad_resolver.c:383src/providers/ad/ad_resolver.c:393Unable to initialize background refresh Setting up resolver enumeration for %s Cannot set cleanup timeout, enumeration wouldn't detect removed entries! Unable to initialize enumeration periodic task src/providers/ad/ad_resolver.c:119src/providers/ad/ad_resolver.c:113Setting up resolver cleanup task for %s Unable to initialize cleanup periodic task for %s src/providers/ad/ad_resolver.c:188src/providers/ad/ad_cldap_ping.c:760src/providers/ad/ad_cldap_ping.c:764src/providers/ad/ad_cldap_ping.c:765Initializing sudo AD back end Cannot initialize LDAP SUDO [%d]: %s Domain [%s] was not found [%zu] times. Skipping removal of forest root sdap data. src/providers/ad/ad_subdomains.c:864Failed to parse subdom data, will try to use cached subdomain Domain [%s] not in current list. sss_idmap_sid_to_smb_sid() failed for user_sid '%s': %d sss_idmap_sid_to_smb_sid() failed for host_sid '%s': %d sss_idmap_sid_to_smb_sid() failed for group_sid '%s': %d talloc_new: src/providers/ad/ad_gpo.c:654sysdb_initgroups failed: [%d](%s) sysdb_initgroups returned empty result Out of memory while getting SID of the group Search for group '%u' failded with error '%d' Failed to get SID attribute of the group '%u' Out of memory while getting group SID Failed to get SID of primary the group '%u' SID of the primary group with gid '%u' is '%s' Missing SID for cache entry [%s]. src/providers/ad/ad_refresh.c:119src/providers/ad/ad_refresh.c:50ad_refresh_step() failed [%d]: %s src/providers/ad/ad_refresh.c:104src/providers/ad/ad_refresh.c:106src/providers/ad/ad_refresh.c:160src/providers/ad/ad_refresh.c:161src/providers/ad/ad_refresh.c:164Unable to refresh %s [dp_error: %d, errno: %d]: %s Failed to set initgroups expiration for [%s] src/providers/ad/ad_refresh.c:189src/providers/ad/ad_refresh.c:193src/providers/ad/ad_cldap_ping.c:612Failed to copy current site or forest name. CLDAP ping is not necessary, using site '%s' and forest '%s' Trying to discover domain [%s] which is not our local domain [%s], skipping CLDAP ping. src/providers/ad/ad_cldap_ping.c:681src/providers/ad/ad_cldap_ping.c:683Initializing autofs AD back end Cannot initialize AD autofs [%d]: %s src/providers/ad/ad_gpo_ndr.c:354talloc_new: src/providers/ad/ad_gpo_ndr.c:357src/providers/ad/ad_gpo_ndr.c:357ndr_pull_security_ace: r->size %u < size %usrc/providers/ad/ad_gpo_ndr.c:310src/providers/ad/ad_gpo_ndr.c:315src/providers/ad/ad_gpo_ndr.c:364src/providers/ad/ad_gpo_ndr.c:370src/providers/ad/ad_gpo_ndr.c:375ldap_sudorule_object_class_attrstruct ad_domain_info_stateobjectclass=domainad_domain_info_next_doneFound SID [%s]. NtVerDnsDomain(&(%s=%s)(%s=%s))ad_domain_info_netlogon_donestruct ad_resolver_enum_statead_resolver_enum_sdom_doneCannot retrieve ad_id_ctx! struct ad_cldap_ping_dc_statead_cldap_ping_dc_doneBatch %d: %s:%d cldapad_cldap_ping_dc_connect_donead_cldap_ping_parallel_batchad_cldap_ping_parallel_donead_cldap_ping_domain_donestruct ad_cldap_ping_stateOut of memory!ad_cldap_ping_doneFound site: %s Found forest: %s netlogonnetlogon has no value Wrong version returned [%x] Found flat name [%s]. Found site [%s]. Found forest [%s]. ad_check_domain_done%s %s %s %s. Missing domain name src/providers/ad/ad_refresh.cEnumeration [resolver] of %sCleanup [resolver] of %ssrc/providers/ad/ad_sudo.cBUG: Domain does not exist? origPrimaryGroupGidNumbersrc/providers/ad/ad_gpo.c:707S-1-5-11src/providers/ad/ad_gpo.c:715src/providers/ad/ad_gpo.c:720src/providers/ad/ad_gpo.c:721src/providers/ad/ad_gpo.c:725struct ad_refresh_stateIssuing refresh of %s %s ad_refresh_doneNothing to refresh unknownSending CLDAP ping src/providers/ad/ad_autofs.cAlloc %zu * %s failed: %s r->acesPull bytes %zu (%s)ldap_sudorule_object_classsudoRolesudoRuleldap_sudorule_nameldap_sudorule_commandsudoCommandldap_sudorule_hostsudoHostldap_sudorule_usersudoUserldap_sudorule_optionsudoOptionldap_sudorule_runassudoRunAsldap_sudorule_runasusersudoRunAsUserldap_sudorule_runasgroupsudoRunAsGroupldap_sudorule_notbeforesudoNotBeforeldap_sudorule_notaftersudoNotAfterldap_sudorule_ordersudoOrderldap_sudorule_entry_usnad_gpo_get_primary_group_sidad_gpo_get_sidsad_gpo_ace_includes_client_sidndr_pull_security_acendr_pull_security_aclad_subdom_enumeratesad_subdomains_refreshad_autofs_initad_sudo_initad_cldap_ping_donead_cldap_ping_domain_sendad_cldap_ping_domain_sendad_cldap_ping_stepad_cldap_ping_sendad_cldap_ping_sendad_cldap_ping_parallel_sendad_cldap_ping_parallel_sendad_cldap_ping_domain_discovery_donead_cldap_ping_dc_sendad_cldap_ping_dc_sendad_cldap_ping_parallel_batchad_cldap_ping_dc_donead_cldap_ping_dc_connect_donead_resolver_enum_sdom_donead_resolver_enum_sdomad_resolver_enumeration_master_donead_resolver_enumeration_conn_donead_resolver_enumeration_sendad_resolver_enumeration_sendad_resolver_setup_enumerationad_resolver_setup_cleanupad_resolver_setup_tasksad_resolver_cleanup_taskad_refresh_initad_refresh_donead_refresh_stepad_refresh_sendad_refresh_sendad_domain_info_netlogon_donead_domain_info_next_donead_domain_info_nextad_domain_info_sendad_domain_info_sendnetlogon_get_domain_infoads_get_root_domainad_check_domain_donead_check_domain_connect_done;дPT ,@ h  P $ ` `  h @ 4 @x  D `(d @@| T` x@ "@0&&(<)x,--H`.//5T5`68 9\9P:`:<\`D0E$E`0FtFG`L4`T@U`YP`a@d$g ilXnprPv|p{}8Њ !@X!! !<"p""p@#Д#p#X$$$`$К,%Px%0% &p<&&@'@''`,((( ) )ж)*0*@X**P++P+0\,p-P----4.// //00011@82PL3h35\555 t6p'(7(p7(7*7P/X85(9;9 @9pE:G:I\;K;Rd<V=`]=`> g>kH?l?n?0s\@x@@} A}FEE E(A0D8G 8D0A(B BBBF SYA+ NS D LS X,EFBB G(F0A8Gp 8D0A(B BBBE ]xMXxAp|H;FQB E(A0K8DtFSBvIPAQRNAw 8D0A(B BBBE HJBDA D0n8H@U8A0|  AABI N8A@P8A0dT(LyFEL L(A0K8Gp 8D0A(B BBBK GxKbxAp]xI`xApH@OFPE B(A0K8L` 8D0A(B BBBJ 8Q`FSJ A(N@} (D BBBG 8D(RFBD A(DP (A ABBJ \S1FBB A(D0I`{ 0D(A BBBB hRp[hA`hKpbhA`lWFBB B(A0D8D 8D0A(B BBBD ~\LB/L[GHP|\8FBE I(A0A8D@ 8D0A(B BBBF p^FIB E(A08T@OHOPI0D (B BBBG K8K@a8B0P (E BBBD t8N@a8B0b (E BBBF R8G@\8B0L8G@`8A08G@`8A04La FEB L(A0I8DHLBFBAHXYDAISGaAG`BKG`AX 8C0A(B BBBF RG\AeKcAKG`A GdAKG`B KZ eG`BGaB4imFNQ I(N0e(A BBB4imFNQ I(N0e(A BBB4jmFNQ I(N0e(A BBBp,Pj{FNN I(J0I8D@\HPPQXP`PHEPUXI`L@D 8D0A(B BBBA KHGP\HA@D\kFBA D(D@HKP`HD@g (A ABBD Dl1FBA D(DPXJ`ZXAPu (A ABBG p0nFBA D(D0 (A ABBJ P (D ABBG N (K HBBK D (K ABBL l(pZFBB A(D0 (D IBBH }8G@\8F0T (D IBBE N(A BBBHqBBB B(A0A8DPk 8A0A(B BBBE X`lqBIF G(MPv (D ABBD KXM`eXAPnXK`fXAPV XM`V 4rADDPf AAG aXM`MXFP,(sBG s BB M(M0d(A ,$sBG s BB M(M0d(A 8ThtpBPK A(L@ (D ABBF HutFEB B(G0D8G 8A0A(B BBBH pvFBB A(D0DPXG`\XCPIXG`\XAPX 0G(H BBBG I 0K(A BBBE 0PFBA D(DP (K ABBJ Q (K ABBG X`;l?>BBB D(A0DPXA`BhBpFxHMPw 0A(A BBBH d;P@FBB E(A0A8Dp 8A0A(B BBBE xBBBAAMp$<C`H[ M oPD<DFFUL A(D0DP 0D(A BBBC XI`eXAPH<FBED D(G0V (C ABBD j(F ABB\<hFFBA D(D0 (K ABBF { (A ABBG { (D ABBL `D=GrFBD A(D0j (K ABBE w8X@IHBPAXA`M0L (K HBBL =HFIH B(A0A8DIHBDJAM 8A0A(B BBBB zHPA 8G0A(B BBBE pD>(LFBA D(DP (I HBBI X (A ABBB m (K ABBK o (F CDBE \>MiFBB B(A0D8D 8A0A(B BBBI DOkAH?OjBBB E(D0A8Dpw 8A0A(B BBBK hd?QFBA D(DPXK``XAPX (G HBBI  (K ABBK T (A ABBA H?SVFEE E(D0G8Dp 8D0A(B BBBJ @TEQ  DF L@@UFBO E(A0D8J7 8D0A(B BBBA H@ZaFBA D(DPc (A ABBF XK``XAPp@@\4FBA D(DPXC`HhWpUPg (A ABBG HX\`RXFP_XZ`HhDpUPRX\`RXDPHPA ^FSE J(A0K8DP 8D0A(B BBBH DAP_jFBD A(D@ (A ABBH YHGP\HA@LAx`FBB A(D0D@HKP`HD@g 0A(A BBBF H4BbVFEE E(D0D8Dp 8D0A(B BBBE \Bc1FBD A(D0w8C@HHSPX0K (K ABBG K8K@c(G HBBLBcFBB A(D0DPXJ`ZXAP 0A(A BBBA 0CLfFD EF TCgFBB B(A0D8DpLxBBFBDBASpA 8D0A(B BBBK xVIBAABBQp@CjFBE G(D0GPv 0A(A BBBC T,D0kFRI J(G0I8J@ 8D0A(B BBBG KHGP\HA@,Dk9EC I H |DpFBE E(D0G8D 8A0A(B BBBE  RU DP[FO PT u RY 4Er<FBG E(A0K8GMPuA! 8A0A(B BBBK }KaBiN]A@EwBDA W(M0^(H { ABA ACBTEPx BBL L(A0D8N` 8D0A(B BBBK {hIpbhD`TFzHB RpFzHB RF zHB RF$zHB RPF(zFBE A(A0DP 0A(A BBBK YXN`MhNpIPdG{FPB E(A0K8LP 8D0A(B BBBK DXN`^XAPXC`KXAP`G<~FNJ I(G0H8O@v 8D0A(B BBBH NHGP\HA@QHGP\HA@G~FBB B(A0D8Lpq 8A0A(B BBBH  8L0H(D BBBE s 8M0H(G IBBE exG_xBpzxPYxApNxRTxBp @~Ps""""""""" ##3#D#Q#b#r##########$!$4$C$S$b$r$$$$$$$$% 0~8~o/ % "Z1 oo8Xo oTo~0@P`pа 0@P`pб 0@P`pв 0@P`pг 0@P`pд 0@P`pе 0@P`pж 0@P`pз 0@P`pи 0@P`pй 0@P`pк 0@P`pл 0@P`pм 0@P`pн 0@P`pо 0@P`pп 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@    & , 0 6 ; C I L Q a n |      j x  Qx`,        )9HTgr`$`8Jhy` *GN[p{g -F[r` aHaxa$a1MWKkK4>KPbp|K  2LasayyyK //9K[fo ! ! 1K@N _tt~// K';;D[fSg0:Sa{a(5Rdb0@]@bnhb '',>T`o.BWhy~ %;Tb`Tbj &2Jeq<b,c)?UetHTg8hy % ; QU h         c@c<`c!&! c;!cR!p!!!@ !@8w!@ !!"3" P"ce"""""""   P`   ( > R d 0 9 0B U k k w                , , ; S S a x x     XXlibsss_ad.so-2.9.8-4.el9_8.1.x86_64.debug!7zXZִF!t/+w ]?Eh=ڊ2N&ȇ$S̆hRztV t5GAQ эJy+LfNfwgY&a$ 0? lt5&"B{BC*g+%ו RtY8ycqA! A,Y&u`tX6,FVn쿯%NIpuN|{|ԨJ-+ T9)RSJjlr]pz?:U!EdZ߭"\'61h3cSwՁe?rv|02R@SJ7 Bzv&^)Xc^'~{Ҕf7r6}ݣ*39o7DX9^x~E:KX"e[DzQFGEg#," ht?> `i<ymyWkehKFRإhzʐ}glqsHvݸ`/u4U~C#>pLW^0D'~ k 94ŻBLeJ)N6-plڛ2侃lF4_Ƚ^1%ņ\[7}$`fz)EX-'PXTFDHrE"г fR>/֩OkE$/f"fW;҉E_-{WM*P,Hr`/#? 'G}-m*z:]R0oYF~vF9Q q# >15]f-#Л&E!e'Aڸs2|P#7az^̯Z3q(@mۻ{E/zk8= zao1NT%f]hU#+(qQ-,@1WO(%šhjp&̎ĸ9P v\B XdA&em XAk*T(w>Q5)OmW/49Tz')X#O_[U U,bJbB#IUD zIK|0CzbSY۝zO4bߓ7(%_'T@RXWiIh5nʑ3PE)x|V 纲:֒Ii 3w,Uz111wqtmdApqNo9twv7|e8lU{ _Nfn}d ND3CjѱltJ"jgo5;i?rD!CTݸ>D>Fj"ї)?ji3 /U1KyMEӹNݣs*&48/OGvx>C Mx6T%&%ES>uKO5f-7mZ.APIBvzR)sh`Mbrf>%{%<`t8cۑ٘f:Yriڀ!Q}H%щK0i oD"*Jw48]3Y^/SA 3x]:!%v/fbb"(Θn2)Ƞc;ªˤJ:!UDAK*Ond9G|p%m^{ʬ:Z3^Cx˦0T8D