From 550eba05791f9fafe8afe11e666ac66a5ec194a1 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Wed, 31 Jul 2024 20:05:35 -0400 Subject: [PATCH] [2.9.0] 1370 optional filter on azuread auth group memberships (#1394) * 1370-optional-filter-on-azure-ad-auth-group-memberships * assorted revisions, including adding a section and moving the step for initial setup * reduce repetition by linking to section * added image * slight reword * apply to 2.9 --- .../configure-azure-ad.md | 27 +++++++++++++++++- static/img/auth-setup-azure-ad-filter.png | Bin 0 -> 92832 bytes .../configure-azure-ad.md | 27 +++++++++++++++++- 3 files changed, 52 insertions(+), 2 deletions(-) create mode 100644 static/img/auth-setup-azure-ad-filter.png diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md index 817a490ecda..7882e6d9be4 100644 --- a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md @@ -167,7 +167,7 @@ Custom Endpoints are not tested or fully supported by Rancher. You'll also need to manually enter the Graph, Token, and Auth Endpoints. -- From App registrations, click Endpoints: +- From **App registrations**, click **Endpoints**: ![Click Endpoints](/img/endpoints.png) @@ -221,6 +221,8 @@ To complete configuration, enter information about your AD instance in the Ranch https://graph.microsoft.com/abb5adde-bee8-4821-8b03-e63efdc7701c +1. (Optional) In Rancher v2.9.0 and later, you can filter users' group memberships in Azure AD to reduce the amount of log data generated. See steps 4–5 of [Filtering Users by Azure AD Auth Group Memberships](#filtering-users-by-azure-ad-auth-group-memberships) for full instructions. + 1. Click **Enable**. **Result:** Azure Active Directory authentication is configured. @@ -314,6 +316,29 @@ Endpoint | https://login.partner.microsoftonline.cn/ Graph Endpoint | https://microsoftgraph.chinacloudapi.cn Token Endpoint | https://login.partner.microsoftonline.cn/{tenantID}/oauth2/v2.0/token +## Filtering Users by Azure AD Auth Group Memberships + +In Rancher v2.9.0 and later, you can filter users' group memberships from Azure AD to reduce the amount of log data generated. If you did not filter group memberships during initial setup, you can still add filters on an existing Azure AD configuration. + +:::warning + +Filtering out a user group membership affects more than just logging. + +Since the filter prevents Rancher from seeing that the user belongs to an excluded group, it also does not see any permissions from that group. This means that excluding a group from the filter can have the side effect of denying users permissions they should have. + +::: + +1. In Rancher, in the top left corner, click **☰ > Users & Authentication**. + +1. In the left navigation menu, click **Auth Provider**. + +1. Click **AzureAD**. + +1. Click the checkbox next to **Limit users by group membership**. + +1. Enter an [OData filter clause](https://learn.microsoft.com/en-us/odata/concepts/queryoptions-overview#filter) into the **Group Membership Filter** field. For example, if you want to limit logging to group memberships whose name starts with `test`, click the checkbox and enter `startswith(displayName,'test')`. + +![Adding a group membership filter to Azure AD](/img/auth-setup-azure-ad-filter.png) ## Deprecated Azure AD Graph API diff --git a/static/img/auth-setup-azure-ad-filter.png b/static/img/auth-setup-azure-ad-filter.png new file mode 100644 index 0000000000000000000000000000000000000000..9584b0986bd4724a8961ec97e80d0e53b1646fb9 GIT binary patch literal 92832 zcmeFZcQ~8j`#x-xwiI0`HM&r{C~8wwZMCLBu^yIa_7FU>%7kMynNQvQKO?_r6D6Dqf>vWqEALf z^_Yx|lHv+A@QzEs<0W82?yIl%oD4e5wh8g~JpLW?e{U%Z$p4?cf%gh1{%dcl#|4!C z^_mhm4;h(~AO0_}x$5=O%$JOeiR<5kTwVXs9vPV;nYxOSVG#NDJXPCmBf|In82ZiB zuh&zr9}{DXKHaN)!1s>4=w9KQSTO9%yAM(C@O=0A9x(BlzJDzE!1TR-hK~B?SCXvn zyhGsH;M9CO0=J7j{ekdZ8_deW4z?o*gP Y938zraQQO!x>kv)lN5?1biT)xN`69 z|M67$_^Tu%!xy{fWaO8wEB^0KQAgMBDQ0n?vg%d-_mBSVevgalieA}@!{37c^HAXP zmki_-shi$lDb4@p)Z~}+_1}^?Xjn7R)BMk+|7-mIXTblPx$r;J?7vxj|FgLMk7)Hj zA?3eWJY@e9QvRD!`TsYh9F(uT^49y`(lM{#H&?WfS(|OGy_+?+Ya=veNJg@+QEt`& z`$NuWBfpb3e7ogr@nC(3N0sJw+L)@Q`q@p!5|^xg{rWILsr^5|Vx(C&b!Z^mg(C-yaIpE`E@^iAcfm?cX}!Hiw{D#mu}EO5du>`!52-Kb zY5#0(ZAgdio9~~`oCQLlEe7H|B4`L<{OQyJx&D~QBVEsl|xZuX6?IdhE{m~K{CgIQenQxwF& zQzhtTUZ#y1y*n`bx3rV*E4~$F+1kGKzkGeYFuBvL6-URd8^@p~bqsArdDR=Z#0pq2PY1EOo0$*?~ElA!Me_IrrMMmrdssH?1RRj!lkj& zeWS6JU%n5j-|7QrQOpI9P&Z5J)_*1P|J-y`uF#V=Ggl%5J={g6|HdWgL)_rG5$0@2 z<=2zxMhBa@A{R_)GdqaT@!bS{fq!HBnHj)aL3StCqrUIXBOF$GU-_KwjZR-^WC#hG zSWWW2gYYI_ixRYG>=o%@d-#EtS*Lr~cV7N@frNn}ODtP_l7%_#BvxB#2d{p({insZ zd?PiSOEdk7nUFQV0`bV#3>guw=MT#DZrxD02>`;cyA(1f+o>pI_@n~4PNHwCW-MNC z9L$BvCk4{-3|Ne-{aLTPwK+Gj#l&m&G;|@uS5AoM6B)>Je$SKJlJBC!HTA#&HmB z^%k{V2l5q=e!F3%D}57Ga;bk28#s01>sp4va?WEhV=Fn!taJyRsVuaiN+ z$6?Um=ftFwReS{?b%~W>b857mphge@D`r!W*k9_*1U!lUlkIW z|57!2qVF$vhu`RUt$3C08>-^f{DnzJ*x6h0wn6$RbOga_x9yN)G(UR_1>+HJ+sn<3 z2BgWa(n2PXPG{zmnYKZl3x+X|9N2uW; zQLl4FGq^k4P|!#f>KPF|QKKg|w^=8jamC)P|Lc7;lGn8nmgZ8Lm?FQ9OY-454NKJ& z5-yKY?5ADPJ$pF#_wqB}HG!7p1VkL@RlOsf6sATj9y2CrK-p35xqZdF=Xp>Rvklvw+qn~h)C>_rcu_w+{4wTk2ZhEdm4xSlK;XPT zEK+KQx$6sKMytPWs^TJPpmp_B- z1sbEHyVG7dE(BPdb67g<9sQ)8)fh-0THUU{J1h69NH+I96DmEWW6{3d4$}{D_efb% z{lepyZ zupR4gzMfUrx34VTZ6cLpiX!`Smvx@SaCjNR#w|SKpX9YPMr4bv^DMW{|hny~zcrE1v9HR(|*vsw0 zFaHIRfGgJvv*pEtc_?CJa-{ejt4o%WakUH^`{vBjl zu5fWWp5nGXTns6YrCqIK#D6W+FLk*HCDo6#Ax(31tVl23Yajx4XyDoYSDAhbCpV!Z z$}Pi>;YD`Pzm5Za`co_OFlI^e6e&EBSWcI2zbVi5 z<3?VY(u1SIKPkE=%yfoZ``iTEOr1~lUc?6oi>Ah0flTCUjbQI5)BFV}8!Y9{8VvVg zf%DP75^ge*Kb9 z>#cLGZ?^w0wLIdX6Bm~aKEq2yMt4$Kw}*ESSi#BNvyls}d7AI)#%Cs5(((QHV%h4~rV17j-PIi)C z)i0owuY(~uSH0b6E^x573k)GP8`}#Z`MKsh3i>r(B4I!}i+cZWR$i(8q?1tZv-;&5 zT-c(~(sATML`^rn{tXp*|2Jl7DwAEw?O>8ih$ym%2m{Egc`*lY{}&yU#u zE!=0OO(J5IPu@S1Zp;>TzIR$#o_8d8AQnqO$2yUbqEp4$n9h^G%^yuo*VuDOjB!f% z7dk>l3R>TpeUc&+JoE10a6};~$D?(UgfN6!N}Zue)@iqNW$#;fOlWuo}x~n@@PM;P91C)@e7w_h+ln_PbTVML10q z_uA({pNlLXY9N8SMYZ+GznyE1G~g$5cPOjxls3@G7XXbGDdd*_@}Z&mg^@nqo}SN! zho&)_=HHKHB68bAoV85Um_4K#c~%?K5J7Bh-d3bUP*Tg<$^ACv6LZw6jqEr-h`oCD zoH2uPxGOD{&q)7*fR1sPs&Ss$hOL=twmZfRbqQRR69;#lWY|O`=SSw*4b2gYC);r* zQnA(S@W#sd-Wi#7%}N?1m4mL9i@C(g;c6}FwYr++z40x#}?iE zhtJ5Xr1!gc@|%0o+qUcI#|o80Q5?Pp_EH2KmO<)e3&y_h^SV}~%{KaW@5d=IY z4l%ohW&laA=iV2&ygSo@0#UBho$J(Hj7UP^&VAJm_IJ5m#df zOpX;&*Vj>vY4hfGFP*A32?RCHFQxbSSPD2N{S}we!R=a=s;AUjQCCWv=`44H%&aGkh~)su*x2c(rx$2K0iA(0#5MSX$jl@s5!b0DS>0I`?#1}hF@VJhF}3Tp8mUHYsylq zsVP=H5EdYJW&9_9bv-ob$(#7B`xNf+o14Svg;7sK*SP)g7paR#1;_Kp_37MLqR~3T zGr!ZX=e{fXU)Mz$BkY@KLs%`EhTV7}*y_&8klyu50>T%Tt{Sy}3GNCVVjjvqA8k^?zOGOMM&X za5qC8S2$m~{w+`RFK+)n?wf5ng1PHt-a^?U#lmXOQI{^U$Qw-4-;mM%b?|moqZ=At-P9@nePL54;9teR*=B@4jrM*t6>j zj+NBkz=&Kb8!OfP0B++!SR^^q#;T`q56r+_cOqlx*&Df$6(FKa9}O8Q33yL4ih_zl z_hA`|g@xb#UV0 z!XGm=-BW-%SV_72XWInx~{PORpbiH%P=W^pE@qd>^au;blx9C}k&XP^8Bc;(juV zY5`KI&#)9|mf=@!&!TJ)F$VzURRwOu_6lQ&xt{e?TKsqSg|>Xi^2|0`3uGmKJYjG? zfL{V4r$1Fz1EOg`c=QnwAriPNOCZ_~Ws6S{I;9EWwa-5s=-0kc9Vq(T;5Pm9B%y5K zWxrz&;X|Lwh*>0RZ5YfS3&D9231#aR^^V#Iu4xufE=S*Ap7ywl-Ag(**JSRoGnH#) zjh!qpnpk?|wrTJTY>ux7pt)}lC#L-N*@^)8ur;-w*s4UBvZh5|;4Sp>I$**6>vVjl z*mqdGG)mmXuhnTl#$XIhj>hKFgA0&q!#GFcUE*eW{=hpbS_o2Evj+ET-Z+a-ziIb# zk)ZLhm`(}r4O~P;c&K*5c;$H7i6g$FOlb#zt#=KzAMgxZop}{UD{Vh4HgY7HAS3nq zd#um#q=|ar^AB%o=0odSSQMuDM{2^$0t+ue%xa~SC3d9o7mKq)AHjDWCT;jj&0DrQ zYTV9R!Vc>`;S8Ge_pk^LQ^fO~Pfa76RL2pceLhDQ&MEKHo22Fwm(|FkegpVVnV`}> z^;9as_~x^qridUP>c{Z7VQUumxBAhJ88!>*k_;L^wqKyp%SOaqVmuGDoog1ZVNj!d zXS``DpC5kWt+(+0>a88&DLmDahjyhH%4Vji!@VsX1E3BIUXC}}QMA$PvSnHuJnNGX z^CusFnlaUgl^v*==5yKu~>D z5L@h8Xb)YD74E2`=&p8{teP}_0xAt}r}*+mI26}0ogH*qQiq_+9S2Q$DupBDZ~EO1Cn!I zvBwT4o}?`d6vL~lFh62#{II>udL3rBgCCQ_&2a^y=X=IyO@yWuz&6|AJ@s}y^k_|z zZn)D@Tfz)qH>wCUS!EOuD0irG&tQivUcNVEziScMdBJ{8cpg10O}YK`erIlV+`!E7 ze!4}-K)mF_YyT8MM*%V4HHL2CZoK@``Oxm(b=VQG=w4!{oDw!l+F( zj^M#VoK+-)O=S2tb}t%P5wL0yFiCb6y$hdHK|~1IFJqb3shRptQ2CMa!_6br(5>we zR16jC+&C`bd&x5GLI`H)6;W{XbpHL1D8BaHewH?y8k^caG#_^3)OQLYBy0=s^Q3-Ljd#iof=0_&bo4RiITYMh?aE zrt2g7u5pqzq0+ppYA#}d{a|$@3+d{v>&`FUk2>PZ!yJU;Viy!bI2rlfF5HqZI=Q!= zlSR4RxTnaX=19D5o6T14yRM@Ik!WxzPVihi*Do8;m7hkT-`q=9mI*t}fBEHu;4)#4 z6}s4tlfQnTS>PFJ@O7w3$Kr;I=C7B@5ock`@%N_&TNBmv=RBxFc3U9Z!c8da*-28N z>|FQE&+V4=yuk3nD{ye*v-Z88nk!{FAr>~ju(6f!+4Hl*9kSINPx`bN&WNWIyXP1` zWJtn@0;y(0DqBCmhG$$P^PmAu{jMtIE_@Q>Th=>}^$h_AdUQge*H@ zs)tDiJf32c)k;D{@Fxl9dw)MLQ@2WB#!3zJyvB^~^lNSed; z<$~zTNT#ahcA<&&di!}o$m^K{O9haO0SapMt}a``{f)vk@AS#n0eqJq!%co_OU}Pm zaJnXa-&F~_A9VRKv!|&WwoGX?rR4R+yJ0JCKQo@6SuN*IiP2jQRkQgh6E`zkY#_dl zWenmhiD_O!yG&qyN$mdFfcIxcwlYpkMs8*vMT`<0FIuUJaHG!RqKL5aVyg8xGKziX zD<1u~Nci!p7XVB<(##U`-}Gs4P+V*kv6H8@)WV=w<%if(Ao8hiiff(l6Wjx!;k>6$4t3LP2Xt0SWfIR#+1!I1dcMUf_TAmjCIs! zzzF3S{vvuE{ID*iAP_E7*sqLFg$$QKxO1L5bNG9WnIuN+w;zoS+?2l8?rF1+uY_>T zHaOq)_Y(CY*@W$vGB&h6DicbiWfr>Wu0CF4R{beDr6b%`@wjdP+Rz%udEihwH=-JQ z@r1*mLU=Fg?uHzUeC6f4lvXRSG!M1MZY1OdgZ$|?kxv`Kx7R*gTsU1fBUwwOPzxU^ zWs5oUFPmOKgQ;#pJEWg|U7WLdIv^9U-SE!cM3pi3Xc7kLJqqMWPaVX??#wpLDrE!b z4e^kUd-;0oaz&XjX6DNz=7+}O$>$&lVG{XpxP$?nt9)xiCA#bg$V*vu^@1?_zTTMe zzQ$;pKS|UF$M;nq{ZM!JHf#3!`xcVep|#cyQxkdf3!%oqy_hC%PpfryxGp(-4#j1g zVDrB3q@0;sOlOb%`i#!5t540?_sm$k#mC_uo?S{){Ku51XY~HHu+6!Up%Q0sv7n0o z{2-TDSatpC`p2E5rh>tAN{xN+>F!;0cd+)MZSi@8?88^3K&E>{Q1N(HiOv57Y1R2^n6>p^O1h|eKEZh@o$l61$|#G=uy z*4*HHdy9UVAB`l{8^2zB&TIPZt?$MG!oPNaVW;u`--#_OFgGbMdy0Vq-Tmd4jV zC{WE6<~!TdzVGD!xa1|+l|#&wxxfWgKx7CQsFdd=Il!BDb-!RuJFV*1|Vw z_pl0>e)}rdoyAL5IO~MTOH{b{b%)J&Dl5)`t|MC??qZ}p4Q&I&fEmG$;7DOhD$>xi zzwd9wRX1=g|1K;|Z*HwKxV6b(7LtQ6c@ zz%T?w49i`Ls(!8bk@stXUDehz*L{tqIUkE&Bu^H$y?j=%$FD}t;I+_trT51T#~XXOZ2lxDi6EY+f7TQS9<2-Ia=Lk14e8AE~iboS%FN9;Fk7S z(Ebc;YB~3PnfeZQ(ck_+P{I**Eyo6#w02zN$r7%T(7VQ-V}EADQWrA7$7|G(YA9@? zT$KS4`al!Z)O+qa!bIwL7+kn)zbp0i>|2}tXtI8#Ay;U9Cy6bY>u&lCjCN%}SbTt! z^VJBs+-_QqNw0jheXhLJi0H^;}=%hdM|Xp<$|)3W+j8jSR{}f`V;)xqntQZCm4mHVl+t z8O7Spfwwj65j)htlTRI$DkH|)_I~9dnGQmwk@0q!LC;Z!|N&d)UL>*zFTx8?!-wzDcU^P+rwyy)MS(o)mza z5A5$^ZlYx^)}kzvPETvp@GaxX+W=7wLa(rXROG2PtFuoMzuGm*v#p)e=;h%8KM6M- zmVv?f(HXD4y;edG2#~_|yP~>7P57r2g9#_hnxAiSy*nwk@jANS>pRkZJrzca4?X{J zne(#=#sfwDF^)+vd)7`!pU0tE2{5ohy+aI)hGw{*u&yYzg^aqAoNwrMwi zEa^V;w8-wabgnujXgx19VWQ%d@(C6VieE+i%$qBjKyURAi?amO5cO)arQv{pGld;I zgCbj`h00KR{2`W=Uylmki#cn`g@3I~@!NdXEB(sqMK|9F`q&;#2npBjs~!kA-kMb9 z{1QeYP819sDUCc#lwHAJyJ7hFGwlq%UOQ*18(AoQ;U!C%niJ?zH`4Itb1wy9|IKKh zx8DOc8|n7$P5lzRSE2h2E~KR3>WEq!SiNI^f@57Suo}`w>tFQ!Qbo6Nydj(zl`nnv z@x@q_9EoJ5c+%yIY8jg;4Gu+;7#oH*I2FE%D8%o(JCe5jj6u#u$TS5kTpjj>qnLZA z=wfA6cLtVWULU1!++}d$O0*eh6)Xv@=eTfyF{6btA7KZBP)K}K07ElHsu+`QMpHRb zkU;N1EkgW23NM_8hBmd0!ol^HvgzTtc&z*vHSk0fV0Eh?BkzAUf7#k9?m1mI3+7qz)5bP3l&R7f$JbdkH!;lkq=)E(8iO9)aiX~ETEtkDU}76ZDxNCh zbngbV69YgcSApL>(G&tvAC8=f1xmtZoV&VSRP;v!*g&*)ToAXlP5ZulkG&-iy5(8q zmRo0{T>9CMp%xt;=a$1^nK-2|!D^)x;3AD$<)(u6Qx>-r(nNLW3+h!c_JUC7{F$3uaMZjx7nSqb{-Tc!zW8^CKr}(llS~SL z*7(H8eelr50fO^HcO>4m_=L%@bf?1&N!qaXI9WQ&wE?wwq4Do$&p!Eg(xJ@A*9h+t zlsU6EqbZ11agVahZMTjY7@HGI7QTy0v!w8TXuW*gG2xpj8~o0nF670$xNO>j@X_3{ z-10PtpelayrUI$Wx-z(1l9Ha8?5p+TyJ!gA@!T;7y;iMO`mN^h3KYOHH-$7F1yJ$8 z8OwCuGY(;WD~R?z(sVPMls~?!JN(>{oW^y?dx>Z#6wi+;4}F0uYdoV&4S`DYmN>tR z^`f7KcZ3|fbX#pwehMmc4{e;COcTmxsfh*67jF6JB#f_>NL(zfi$6ni7EBDjd02^UxCDLno(E;P*? z8*qjY^uZd&i%74l)3u)E;A7$vuaD8P(0vO}mmk8B@-uc?O)#6%4w%L?2tEl&DQb51C{$$ks}k#0-@ z;sE{nz2hhcKc6e%`deDXYLQNXt6pp6%XJZ%dC&H%zbSFuDSbfU)$K~I1W@o@G@N!3Hy*f{ubYx^e|4$+jY^v0z}P?j$4ij z#?MT=88Um3(N1x-J;Xn8s|_v$E4ek7+3M;3UJc=mnsUb&u zFL$dj=1%MgA!?#G2=QW@=ze=Y>{LOKnDcLJ+hGE=KrZGO`*I|2K6mR}+E{hfGvCHC9tg1P#>ULnNyf?fK>i)^;-|8#h{w8Y8GB{Z~2V=fcsYW8xDr z=Vc|zAAgDM$Tjysp&LjD^Rii!iPdnQ_ZMb9A^+-$V`i8Myu&F^c++0$vaC5RzJFV; zS(gKU`nO=QBmydX+-$IVFfN?IKhpfX!J$mpdC$A6Y;c4v-sNesou=Wnneud*GR0Ri zHmI|UH2zn^CaQn(-F2NY!o`FfxL;Z1^wFC>JOJQEMlqpE-%rdh&R}^AG&)=RR#V@K z=j`F>+wnUQGq@LKe^1V;NZQri-9ZCo z=?mwTd8~_c%1-88bmq&*Ic%8SC14Zdnl)ohB&z`yxFyriO=`TR=O3_ZuC8p<4_Uez zSl~3%(2IP;b--rD1Ac$aJ$MX;7K6%RGN|dMe#vY;3(K(d@%|-9cC1`OEs^WIzr;0M zlWI0a7GG)9n`UC|!Iu0T^BpM3R%yPunt@eR5y`6Az|=B%Jzy3SfDqHB_?nc|Mz#uY zZK^z-qu$%n0c~R(vE#0}R&=|W9DGtE<1MnUzl#~uVtsR`Z8HeCK+^8Ui%~!HB+?)p zKj%1?QO^jazxul#6lh{br{@wl=e3Ez&MhBqN$k5po&vOKcW3kQR8IU^nHKwlBA3bj zGNbM`!(ikd`&fc-F9jIIx%Z*xZ9!he4~n8^S^j)qglIt;k7Oa7TA zJP)ja@KDBZJYm=BNnqES2ISd?@n>dz6W-sn>*Fxbx@yk_d;4qc9W3a28Q59FT}KR? zaqUo7Ko|b_XtdA_+PbA-l4Y1Lpa#;AEcIfr)Si9cFJtfjc`8-dvqP_IsZ|H@*p+N3 zVGlW=VT#Z8@CdJ$MFqc=4W3T92;Yi5p_`pOYaPa6&r^i2@ZECx z3lx6Q#)+hzoC1gSpOVN#hJF{0Z^RM)wZ0{7HH8$HMgK){VT+!i%BPLP<$a&m|5)|r zZ~Qi)S>ty?6Zr3cqVUU8qiW+JQ@_=IBj|ahK{?`}!Kj}Fq%svh+T;z8?P0=1 zg>vnjzme>_st-m)<~r)_+9Sxt07_qU%=)SzudTW2PwT~ z|FqJ5mUdfxI(Ig+`%Bwe_MouGaNR#bGi%j6g0K^470miI!GvEd963qWF4pyCspjE? zPgR@EhKLKO9=UU%)9=Sap zO^>#h8a}8M!ZfEe%?D(-`m*B=e_X}}u9o|B7bnW!84vZS!xAT}QFnTBCNC!e!WDz& zuK0`61l_!4S4Xg*oyEWmbc)|(T5(R-XzW204GavmSK5$TKvuf{Qi-W~$NAB?tbu=bp+FoJrRbprLrBQU z_KmM8XZmOmVBum*jXdb1i<=KuiwokZ$n~`anBM9o`1fLnr>&i&Or*| zsq6-|N^!L8AhB{DfJQ4ilUZYYiTd2Jl=M7arjmirXRJ8|zfhobZmM604gaTy`fc7G z-P}NnjfVoHf#+xWOB!7bc0B>hw!!{H38sX5^`9oSO~*O-71P=Kq@)sbOqX+NxV=cM zma?@!uU^y)_W8`w(KUQe9Ed#17-!zmbrq&M1T{XmW}fu^Lu2`+rsmu|g39tMErQr7 z;pJig>%@5|Y4rP1sqw(Do>)?oG%rw3(#c5N!LcN2p~IIEiA%3|{Qq^T@Ldl+eA*UA z0r(dDwr+PYzJ)#C$(9QGhHyxjg6M9kC())pel-nIxYc;N0~`eB6Q>FapM8%v zt9SHYc4Z-Ky z&|`z{dA{GKPks&pZsF-4FaY7I??32zILCML2HNMXbHd@;7!UW@Z&E{u>t-rgLtP`< zUDsWkAXocoa~))yRBtl57}W@_Ch+n{?hLo(8Dwasd93@ToS(fzhFlIHO&!1!cvmb{jM#bO-LLEZVfq2umM80dv&RgGfw&RE2B!YKK8D52xroN3|vn-E`W2}4ArQv$B3UZ=iC~a}LHM!;?+4rp5i!fm{Zf6?QBq9E1L? zK@oTH#R|yJhuVPu@(pk)d#QakPRX(5t0u!|R^LtJ7X%*D}~8Ky9>2Ild+MLr^W;pDO+8amaFjFDzPbR;5+v z|NFhET+nllw67(%wgG9FNe2K)?2~5D#_nm6Qh=b>?zMkV7GA2kFbq~hXg=D?)l3&i zs;KfcY#*Ky4B6}9v=Ory{`);DS~T>;E$fMG@&+?I*jBE*d}nt4$0NCN(`e&XNTq5X z@3$HUUzf2$&MHHZ%NrW$0=y0b>9rQ+Po2DypSlHQi+7{dZ_teRw&EQ%Np^h8k zk&q;@n$LDOvvO0Gofh|#5;PN7K_k0GLwNQ58;|wAhs|Q_$tSDWGgiS)sE1G! z?q$I1Vwv~(8u!LRd(l6l&P&)@8ynE9dH8uFIaGy;!lSR|F1NR zOS5%v4%ZfU+gh;zeY}BY-wFJ|kENgXF!le5Pig-Uz5 z61(c)=%PI5WN zc5jEcEb#$UU6WbbEBTwCA+98;?E^rvZR?M7CU z2$g+9$#BCg;FLRjvC{oWuhq{P6(F7U;z4qNTIg!pkEx9K^_#E4H6|);QnmY}Mn6}^ zndCXo)?E78cA^~NM=?`3p4C98N{DA2p!_OmA=>l9XKIsiZpv2UsBoykc|2NTbjmpj zSQ%w7BnPMA3+5sg-QVz9wHE++Xyw{AJYe*s``Uu=oA+XFW%bu%0G{-lnU*tWe+Xb&A#r(pM>!kA~+S9&$?Wf)r0^wm}To1xA~mu`d>IPL-sz?z=ghb z0x(TTp6j~F)j5_A4VXdHg5f=W7k$j9*7!(cL4!$>xec3i*b}Z+LkzJ97tf6jw-?@1 z_{W*k19lQSl?h?z>9mFLz}o=7_Xd*@%5FbD&E-8Uiu)zyJ?Cz2TxtaZ^WLz6`0E!z ztwP`Du528Q-|e3U<#Pe`C>$Z~+O%<#OT%2O0G8o6WG>Ah#+9L&`UFrs;p#QctNn{2 z2@M!aX!fH8VsVW`pHI{Cue%`(L>QR;l!umk!8c zQ1Bbcu1RTm>JgR>YOjS>=y%PhY4zM%Km@{^nvPT+0TaF)f4087WMYH`A#aR%DA;eK4@q9ICUf zaABI;YgOhjKRg}9s5I|im+}0=yUQ{oG`~}H=095kdciPP9Km7$mE?)5<#F2DQHR_QTeL z@Qbr`7Hkt>h*!j)gd0Bn`Z{}01w@`$npVF5o>EjBa9cniZ*NJZNMf1EneWpIYvaBc zm)}ZT8M;e&A^{Y5UhuFu$2vB4rj^Fon+m%n^mM7?`l7r4P_d5Gs{N?|8!HB^}0D}zbGc}pVkENJW|}uWmD@hb2CGxRrA-Q zcpGFZjr87*Ntx+PivH*njR#BWgyhYRSGSg|+IVSLu!uTTv`4aA7y#1obi4RC0Iso$ z{8ALDoTSs*T<@@leRjl*!4km8*dFH-)_lb-LKOgVqlX6`KQGIj`s&=x; z5jVmCwcOIkndsSZ*6Mxpj>%uP)X}zJF~FBD9Gwuf&=xE*k6_&vrE>Bwx})zyb%7;a z*vY;HnryUz?i!FKGv6WL&=7&1z~4WG09s|iT+s6I!TF&uH3Vo6!L1a=?EdSyF;6jS zws5o#FzYEe*f+1RoSuKDkC`G1e?XbqW@AsJxxiyQq4$cWs_ZaytVjCk0Z#xYUd!UU zSWABuQL}^und$mmXUFWno#lIu-&BWNeKGKBWWd7ukkJ+_j zfhPnBB>9;CBzcQ_bx8rs?I1=hF{lvZae z3+$VKa7|r6*hCWJNADW~7Ou|tYHcKE_d9!TtpcES-Iq(=zO82D&8a zpXD~T;wD0+Pl0LKs^X_)-a*a03j_?$2b<+~Rv2gp9*|l4Sexx+zwb*!JXt>dfgRMhT0)L`__YeOS*W~bPqG_c-oWtSu4BRs#E=SVX zBW#^}Qvr%RBGhA1CjpaJr``cOTmJXTSICUz! zs@71w2em@f9h)Y@>$jVA@TISMLj1UiOF()102H7#z;9gR=MFf5EO^ZuD)`Z}BpVnfbY{i+tI>(|~E0v4Qokv|#w6_lz@Xy`Se{C{=?D2{5yJ?HKatyYZi`HIIH)d9Vjz!i^h;ao0*5zXHJ!XmoeDy{$iR=`f}RQ1>l~#51jnQ=LHongGCH%TRYzv);xNt+J5_Kn!^ldb0g_K)$F_ zg%fHSvbox=ee^6pxD4rSB`Y@j)XB~Sw^P(t*H6>k#V^Iv!)s7tsCBDq0%B>R!6fuo zK>+aKM}O>?=%;xNaO^dnqxAiBry+0Wo}7mSySPOLhYi||5g>ORCK#}Ufx&@ZHs#Tb zLUKhpd7GI)C*<7GiM9_aG_b!jU-m&h>AZ!%Vw3;w=E$Lr{D`R`&*;@OjoZ9JsHYv$ z6}>A89VynGA=5o5(qY8ONDjKiOdh{!7pbS;(>CV>Z;k_v5tOmFv^xmgdB+CKKpSTP zkg1E?7~1mc0yf8Z`?K3(L*@QX{%2D7DE3VE^_tr9ailhRFTZeI+v1PYt%;@y5y)&+ zhFKw|iv70iG25x_p*HK%_lU`aK{3j6&pjx`$2iK%^fNXSF?6At0o#9^A19sH*jw@J zNca+VnpnyG9!LMD2SG|qJaY|0vC7uNZzGS(ul0ib3_HfGuqMi#y!R9tP|%*Ys<*5x zrl7ks?{C7X2K@th>*x0UWil)MoxP%Ji((JLgn@3if7tJr2{EFM(=9x3HOdzI9Fbw#BggyZh4Zbm=d&97 z<5G4@Mi4E(hF&+K=e?)t>+2(Sdkeo)c+JX->NCSj{${sMQA)K0p^k=VJpou$u z-=7>su|DZ3NQ8y)Rn!P={1P9&{Y+=&sB0WtU2G0DtV(9H5jqXos#}ZEgy_0FY|0Oe zxjks|q@scYoqw14ay+P#DuGwe5O0kSQt`iRbjR^WVB`kzCiXAc&+Y6LF{&4Jg3 zW$S3W;^*~zQrlQ0q z#IL)nenj3RFWG zUM9FLq$d}$5fmg$m4-5F0W`*!A846i=J0+RL%;OTw|Jx^6P>0fe9i`hkv>#SO+cIQ z%zQt7422lC?!~Z6VL%lB*9wQc(A}(0(aQKddzY*1&BEdH zfJy{1p34wM&dGMHevg9viISxA$xObu*vx!iR!gJ33Jz}hOMGr2+UPX;!a8&(@`P{! z)M}+R$nuq{>eki^52+Ca{(;Vz#3vpLl?GlYExW=iVt~@Y4{$Bnh!P7_*l@mr+d$AfByPjqy#&z9|PRh0^#^a9&R~Kk^lU#>4xz7&PaPC{A%4L-RIRY!Hai+B{ z80@=RS{iQql$!r zh>C#HN`rJasDL!mbpWM14;=z3($dmM$D!eHXp!#j?hdI#b2rAL`1p)_zufV@AO2q) z+rimut-0o0zd6^eEl4YT&9|RY?P(70qUrQ8C|#O=wjgU7jA(N!QsTgnwjyHjusgDv;Rs^a$?uq^Py*RzPm{-Qwu7 zfRvqjoOo|rO$pmfnNJ?4x^wUF%&Z7}kX7*5&B*P>EVFd&g8MS$8u=pHqt6S-b(FP{ zVqA;L8gE%k-u@&w31lKoL~$OyRElkGd%ghXTKK39!B(eN6&zayAyxzFOsuJ|(13$h zE<}OExtx4tJGkbL$KE_sFAn*t;Z>#z2hh_4tQk*Im7l-TZw=gB$<|Cu#vkTZFmF#I3$gY~uJ@hq?Aydy3rg)Vw@9aNI~<&1gyM1V|S%cDpkmT14o2Q1f|) zv0AZLKYrcZt=m$O$)L-4z~Z)b_LQ-RQ-j=IcS1Xn+X)rdXf`t1u3dL%5qG3@p1mCB zc7gQNh;eSv9g+!K5HorOi}}QenPl`~xtuf$Wr5=!F1JO7prssKfp^=N&Pf0KmXIU% z(b+(fh~27&E7u%3Alvv>EQpTNdbl9T2(JO%`XQbcVgBSpi6Uv!#2 zyrio&2%uoE&@@0ZmZLF8mzRoWt99%eVZjZ4-*Vx;!+0vi@yYfX_?hZ+HAJ_wLuDmP zbcqrJ%N%}9FRSkA{*Jz4W1Majr6c;DqFdqU{Y-D0Mh0?`Q9ozJe_=+{y?oSe<|aKKh>UiJ+)ur^K^%n~7`ur!0enj^sU} zP1tlNwNdV8Q6I|tH6G!yndA|UnA;-NRkAss9qN;5fJQ3!r`rbe5zCcnuTLJFNjexG zUC($~yq2Z%5LO&-9c|J2)CnD3iF9VK@gA43Mwy=0(02Pu9LvHm;SY*mTRv<~%!0xB+%X`C6wdeV`$HveTxj?|tUWidB-+3#Mh_ z7biMf%!7=VDee=DP^3T@Sz7PW&>ZfNEf~8rq~1KP>Y5!mev?n3UFl)sbp;{lI_Uzv z3aL}aOWoaeDT++S6q+1ZTWD-bg;Z<~1CU;RzbH&h>$V{O7~gi2X9LB?k#2Gt>r>st zVB}BtVTsP>yE{Sg(jW7W-s~A(rbj_bs{5WkH&DUdapVmU6a%; zq@f=k6utI{*HPX0gg|x?a0q;TPgN8q-W*JJI?pPTo_!-$yUTEO;QY8+Sdn4j2{#OK ztWstZX|TmfD5_66NMF^FOiL;eVtccw;XTlo!1E(QW(U_Jl`0_e$#abrH>Ss}I~ge2 z>302ar=2ZSvf?#gp5ye}MV@k}s)JVt^rr428P)tQ$7k#eG>L;p#E<(XpAuY?DfiS9 zaXeaf1r)+CkQVd?^GG@*F6(R}I+#k}B{j~+h~7#1i+G$pmtZaqt!n6pD=Es2VJ#>ukc&)*be-DUImLi0fVG@W5pI1E#-Zl5N7T$Ue-Jwo$%bjpL zCpfQF%C+)tF}IrGEYO*ijWqFRavg_b{I{CVXQ*?MI`gF&W~T+_j+x^{%bc=6tQ;1f zX-l+Md>aj-&aZC#p)-;tAwv`PO7y7S>g*(5d$`X?#Xj-bvCVO}NRr#i{oWcOSht+? z9wxymE#dNdiI>Rwoxsy~StM9FA+AgCs3zjEug3$%#M`U6jmSucs94lG#rK@rl}MM; zT;01q-6>)%aDBi6By#m@ZBA?q#0p|Pz%Fu1G(1sy`oe9Xl^$cex?=_H^vYQWcWr%E zxhl)vq;)4~`(U;kB|C8#MOPb#W2a5nw$=I+Av#RH(h)r?Y(Ob-_M>n#3ru_E$!Zn_ zHxXAqLt;8@QvsSEKjHaZKIWl6x^{ZC*z*yf>|Loyl$kqoMP(;hLn39z1nC#WlsT zK<`-f0gt6jxL%G_*F#xTHdK5Lo6l7kyRKcwPc|{W^(HU?(uMD!uF5IMF`+|Esd2>P zTp5^C>?SOUd|ercfD(4r99jBa@;Hawsw1D%BG{{XpE%tw*KJtaiWdDBrw= zp`;7V85HOQvII@trv2Hb=D52$V!4~whM6IXNjL`uvK#sZK)rTz7x6q`NEzTq)8H#h zXU%WHC#6Hnz^gDHqlis|a_QAKgpg`%K=WYUfL$5WngKkaF^|N9zFdYfi)l%&HsQom{2W* zTwe{eK{1LETS-3J++n@7PV)j@bxV**=l!AeCtFYHXFac-OUyQ^^^at=$!PQ*2`$ap2 zZzpUG=%V=G(>9PMY8loypf%FY^kNz4N5g3QHjWFNX&C|Z@qy}3^}qIXeYq<(f+}(? z5@-T&!^macL`eD56Ng-Ck8SWHuSn*!7Jqg}JF>xWZZ5jnzKoD;MwDno)6HU;QY+nD zg}B31)7^tdqDOB5&&%fefc*#=r+N?l9o&1-%=)RU4Kw15?N9@*35#P^Q_N=0hE=Xe zk8U8khHf`>wg)P+fi`$YlLYb|y*KzwEZ?J81GGUpn3XVYt4|}9Ck8dz$1u&S8AI|H zK4lh_3jx)tTE-@=^g@k=y?xO2!yN3UprVm3Cjm9yHzR3rv+wWJLc(K6QuNw!2PQn^ z09f~6J_Au}@Dywm0B#3Kpzy&|l6V*5;@W_EjfuW=?$t5h;PGk2&Ilsp#%aMTA^4{3 z;dVEYup~TlIS$o@bfGv!j9~r9oGu79)|1kDpC(YBSXhnk7QqpJB+D{hdA~UayD4Wj zt@SQ^aXIZ+Jd$Zan}rbeP;S%iRBb~7cP@}s0is+}oUu%3iB-U)3N?9&uFC)_Lb9Or z1-jg*Xy;ZL@_*QpG)rOYm>hi$&uR>oo1jM+-+kzf{49oQ08X#Z+o9XbfN6C0`5K(l zx4~4!O$7O-eZ$^u39oXMa$D1}eN0KAi`Ghe6D%r4YL@B8^86*s#Rp4C@Kbj<(7&Ry zSTY^1*1O0ir@_*=`5150$qlG=$$6-{>pn`8TS2Oj`Rtst%b`M}6@$+{p5Uf!PCV-> zioRla_#Sf!-_5@2c&_Qd{gEydvg$Lg!83J;wsWd1wMx;OUC!!2{^y6gu(W55#H1;K zuQkjoH>#$Re-pqa>pHRFe3D7Na9y2Ss_H;f(5lC-KQ80ogALVHlX2kAQ&?qSnvY_Tt8vP)DlTf;9UeX$yL*(QT08>n ztG+hUBO8L8UL+J?&RHJlds?rlby2FWjb=7nAhhe7GvNm0Mi-w=DCI@WRyX!RUhuap zO&Z63c+#jlP<<7br?X`;$e@FTqEd6osR(&>*ZTDt@AbVY3fyZg!sH3?g?P6!Ll-Gk zGq-@Q=4_k0wPImb3yU)`Hk%^0Zz)rLHp^1L&e7EI+~r6sXT`J=x3DUG-7%1jNoLq% zHa=n%JeAyDa}LC+q7i`vButia!AtEMt$aSeHzZl}w%)bJ1A2^b#dN>O49gCeyA?m{ zC-bu}7?WK;j}uz#Z7)U&lDee(Kx|h5i0!I#X575o4UGWdA{`!R|qWSGvvDxRxcjg55zVp2>_%O-BVqP#1r$y0Ky6n5Hqg&3iJk~0@KWblQVjvMG07s;G0C%%`dITobn19g3V9yE z%pQ+U!!d+Yd>IMMCpGI^CUl+gSD8NItAtLF7O;j-&H8 zW>2lxiJC-<;X}wE2b!An=Ui{}ytLlAD_7AK=_c}&nb_zzA_{hBu-S%|gh5DmihXT-qp2&6uLX~cWc z|LGOtHhHS5kDAP)MMUp)T+uoAIGmi7|mz@-=%8TjW7&{^)m z#QVG7|M%wtJ`e-O#SM=X)xVE@ogP?s#T~N0PAoty2)G|H5ygxDKK5-5fF<@MVt>y0 zeQ5$7z$qcW9&U8!Z$t?YR{&IP35Wjmk5}9gfj)E+w;%Wa(U1!dEdW}Jq^U_-mxbl{&nK(q|bpZ z@zBb^{`=VfWAvZ${Xa(kTg?7-=wcbUiu$3N0l`#R1T+74M~}&xJ?x-@g+`2FCD{_p$o-pDuoW+YZ1yONx{y ze@F87@&NKA%Z5Jv+w!is!!G(iaZ_Ra2c9MakVq1ii2s*m0dv=ZfU(C!Gj9Kda$veg zSbzq~xHtbFN@N2Vdsa&9?SGJ!0qB9}DU^Vp>Tf@=ywGlTvebWVQ-8(%Ie^B()Iyy9 zu_xug*su`UhkqUV`ZH<(>1C-}{(~K37g-sxp{W0%zhnV+1c|-4_4hrQp##R=NR|g$ zs{W0vAXI=I|97&Q*lo;MA_OKN*nhQZA!nE@w^Nng&1{@# z(D4t`_d114n#9A>3`;UY5Y)*DM2DK39KSv((kt-;6$xRV7I)^HO_1z7BE$WYjS8Qj-5-tOe8j*hegEsQw!&_3SDBpI|S|Kxn)wt-i}^*qWij0S1{9R za^JVZ{6Xg`d9(Knfd-0_FdvWv|pS$#K9Yu zKu!JnfMjd)^=`^{zf*AIPS+;s(fG6Kq$NA73ttg17pDqv7~d#K>#q(ZYfA-RI&|(j zXa`l%2US_5$M!?~-+!NfA!;&a)2WrVqQJf5@(z)zeTI+M!9irhjkRarX?=fjA$enk z2gffGUojcKNErJCDFDt@ZIV}QQaAGv?teG^1t1qxgtl6f7HY-u+%Xeiy!?jyk2h|N zVJVP&-z%95n{+e3JYndCYdaCAa%t^PjmKYtV;{sc^i*&;sw8=rr1ocOjFuzE^@ zf&VzuPk=K`9vabdiLL+0G;t_^7cyLs|G>~Uz)ng~(uaMg;!g}0paiJ;WTX5aKz0KF z$w(Ou>hIG0ogVk1I~-Qebo#}DkamP_5lTe&E>v{V5D7qizx)nYl`Y z2rC~U;wNXX(*pZlgkgO7l`e#xg_as3*S5zY6uEOil8>uP9jesX&O}q!Xu(hOmelQ3 zq`FP-s;)VgWqMI_ydD`t=IhL4-d~)(4b~i4xK!5`+KYAi|a)2lzWDQQgbk) zGp33k!sV`YRaFMrDetm)K6`ATb24bfq5T%bCq4ZrIM)fI*;-1DYAarjX_dqI`7I`2%9&2}+f@Zt?SQZMYj5&Wd@kr6mToMK756A?k zIA%Tn$?}pbSH((ha9-YbWp_8>zyhG$(BqI=DZGM!3x9m!Kvgymq;|gTYAR$1Mxpp2 zZ?Dx}Ur8B#gMUe~iHkm$6~v+d&C0Gu|PXwRGr5-!{zMU@TRI?r)-9H zYn9&0Vgb^oy0Z|1z&`fjkZa3&BF>F}r?^~sdm!B`m%qR|?Sy%y(w+!??+1p>B5f}o zFgKA=e8|_0U*p`Bme7|glz2&{`dYd0#^%&CNx?yG8-`a3+G0ct85%OyXg)j-GF-|} zNpB%olA&W7Lczd{mJ6S-DZIDg=s#C_6!p08OX{!v7sWhSB;wp^z&jhqDNBxhzK46J zyXebvxGnmS=5;Cjlh?Y!F+UN75M6~#@``0g;^Q9}0|j70Zmx%)&9GR<1b!>@Ems?b z8UaPSal}mpQY8rYN#~trZ6Va1mGeguZtHxM?5=vnsztJ%+d^}D0mUBBm`bBGp2O3T z1fInwXB7@}u)9bp8l{h{)|au=1*P;46LgJcWKn3vp#`)KK)1ki(*oUWx`)ffi z=GC+OLr=~-CtN-^g2N8a-TG+ZkHj~~=qyFohHiLcrUgC0&A5G?^`S~|-WozH!m%ev zS!?(lo6Sb~NiNDK3n+@7 zl(|DFBG?2fmV~-$dh!-lb|{vLgqib}Hxf=LYulBXv>`-*BB3#knPC%_UaY0@B$EMP zBqPT*^p6{2&EP@RGbeM2a&Ej|fOr(}IltWPWp+Pn%?+#=hTd&D>+y1C+7NQJ{Nv-? zuN#`kPAo2PZp9OS^Rf-WIX@k-=e!q0xVzH`yeovs{Lks_nnoK1*rJ+Si4-}LD=fp$4~q& zFE#V3YBAOFKKo2qWfwb-pI&vWxF->9bf^T&IKdOJ{HTFyGQ%g4Rn z3#EJVvi9*WmAuR89!}&usTv*axkJsTUphQfzusxN!qSSz+wz!xa(gVIZ(VFzhNkK; z)dD;#?P{c`NyMjr^&1`THPiyg^H&_^@uCBVU9z%Fb#*JVM{&>=+G+7#EyB!NaXJac zH>iom?Ymq{pd(W8JYzZhDQ!?i_L17$!J!>)jNy(Ez36488=aAiJvnMDbjvpfqVg8b zSXuX1HXPMf^_nN_V8c=t$B(0#zDzi**!R{kbqBY94JhRs$l7NaGGlMuPhC+)o?oT2 z{u-wQ_mZTKs%kOKBDU^{vj%m_9r+9#NSpv%w**~)3Km-sIOPFXw7bx z&PuL(cQWOrSB%n5E+L^xvH8U}d&{o6Fv)mO%~;Z(;J6+X?$)YFmfb4$v{Miq@)mak_H))GH zc?(F!Qr})H4;(?GJ2)6x@Z1l}l75dSYsO_!ceY$(3LW?FyibcuBgYTV&CMsOFomMi z8lhF{T30;vr`@laY|xw9Z_F??%BL?+NTA>3FpN3f+n#efIpivJtvH3;c=>v}pVzCG zT~os>1r7xxq0*F_5BhE#$R30u{m@LnQQ@PWs$wxOV`dA7b>tl!m6T0skHY5HI~Rd%aXfE#rcAu|CL4%yUh3tbsoOXO&B5tSP z@q!|rw%5+xNK=HiS4A{K`|VqE+1}MO@1zE@NKWkRznz676Ytx~YV9_5uJ4uC@!Brf z*MbE0vUeIs<_kxe1VpfL5Ic*d_$j3Eu?JnHc^)hxl%1(!F_>BmXGMkwx6&7$lv*=q zOMSzK??SGDZQ!ybXgr+9$l-fZz|>lOW}4C2gudCk6%?piTkTw<>UJF6x3|z)GUH2k z6IuerX9W|b{h;_GQd7d(V(!^s{1}16NMh^38j{@F7f#cf3g%S*JnvfHHE#Mfbfz;i zWm&yu^4X00sydpLR;iMNAbg{AnjH$lF!pB6TH zLwl6mq4dxXwR{dG%hSbme*f@wD~p686K`C=-n2CZlH^$RLu}I6S#r#yxwmq`tfNV* zdR$q>Ipw7-*by(d_-mVexA}Lc33;V&{kqt6A-TV+9oS8Ze}f(h%dhX1va)}CR1Y?W zX%@Woh&F>(P{b7tkcdE*z0)AOVM@V)#*rraKP-BN&xioMjr8ed0_V-(8pRiS(|G#j zS4%Nl(8Wg@Je|Qx+Z#>iw!=lRspKdQ)0M5f6atjlaw}tr*3L>pRdoy5u>O=|Qk)@q zLlaItFOcoaf}Y`7GUKF@L4P_^-*qK+(&~;0K9PW5ag8okcSUyjK)o?VD)lAuO3w2W zEzWuV-c+?^96s}>X4UQ6ITc*G#af=x0{I67>~FwPu3MEBkv~KmIa)w1R5uTFcm*~= z+n;}v4Q$d&$)DS{_cn$1?X*12e}E6JxIyCUxRQsD@(c7)kfMl=0ELahaByz4sWtCM^$#K6uk4?-Fo^|* z12rw%E7n_)*_YejT?;!i>}mA$k3_-k7Z81Ugs7%#!B>9z!PM5hbKGoU6XeA*YCFnF z#_P>O!_B1;1#)thv++nUOcHlIIl%wrFiJo{^ck&sZ+39dSbqLm$h2|w%+nI_`{_Rl z0HCXCN7d#?!Y5E#EQ!F}qEIEC<)y(0+XCUHYb;b284v5@$xIUWdS|pTb2{%qZvMMm=WG!=$WoiG9;WteF1+a~=k@P50+$Q#JdqwL7mEx@5 z&UF$Wkjx|bzLL`mj~c%#QWD5F-lou~`ZTn_tUBs=u``#26!rBil65 zpu%WNWj-UDxH|HxslH+zh+q1b&5r!>vr22W0ROeM0@#mB$5F7rks$JMPox#yI-=M( zWY||7IjKcF%xgW;)N7=_+lOnAOl>^a`h~`@91)wf=o1TBJT`)+cFQlGq>u5}QXUju zC|ew&VZ-z72fHl6r&nqq7;glcw%0x6LT~eQ&R5dr8HL^(JZGEzr?#H0xUo!S>oH|kZD0j- zK^*X;u(5HRX|5qlw&r{RIi6a;q2&I+q4xS0&ZOGK-wcsof}%qK+<3W5_zEM+9L}q) zDTb^0p)?$6-0`_Ar=;O8=|-*OZxx)EAUiODCh8u;q!FdS9qm% zOOHRquIqWQTevjQOL(bPR?7vD4h*d!gils1yxDS4!qynG9@-7b2@S&@S)_~8^CeG> z|3C@CGx>Sb{Cz78E{>gEw|PX4#jvw4#jTQatB?{>y(6lfEmR!&ikG61{x+>u_ppoF zd18&mnr3FfiKEgs%HkMcsMS*tBhb z=4`I1_)-nTHk*}0Q%;Zi&h>M)v=Zvhs4(OE7^yPQ4Ad~DnNwTbL_;N`oq)d&pu5NC zQDIu6!orP9H|g(^E|7+_z2J6ammNEig~mMwuafhu)NhaJdaLN@I=Hi;uDddId|*nk zcT&UcP?rfP;URx+PDcYlb(w;Y_T=n|l?hg-l_TSk!` zzj%B4EnCsYuSDfd%^N=rq$>!g>Qnf3@rk)}MC&MUs?(UL-fwP{C1LkCZ))%?QkRXB zd%?>M-F|6yY+Vu~{H8d%Br!Az{(HY~@=s5L`@^n*bFh{=hSGn84^J;(g5NQpL*Xy4 zUqwWY0^rJh-^Ysg*8+cg+9d(}K&MOfGxERg55ErV?fVA6#S~?Pre*J!JpT676$rQ@ z_mgmZ<^CGH)Jg#2qWA{6l!KS!*gr-P;0Gd~!+{!)FFR^~PVepxM8T~RDihT){=!&b zoBv1n|34gmdu`nV7T1OpKww;~-57wxeed3!nudnP0=L}dui*WZQGCGJ-FEerG|LOS z^cvfZF(N{vmN`o{XM4i~p6ItYniE=H>gCk)vm&D&hrI=csgoOpW~aA|P5oof-rPts z-A$i<01|Jnc?#8+mXuLq9LHRg@*d4KIv32!%tRZ&!p0t2Q^A~tra2Y7oHgTiEFw#n zRb>0p(%|otHDQt53^g0a%ZcVp`XVOg^JP&rJ(vI0sGWR$wzzZR>)rIAT9dYqFBRok z7~IfV*olgjG{#NPMQ}|I@?_O2mJnMzDXzyKXiRbbDPxti3=AZgmDwZcjX*c&SVc8E z4wFNR+B<5FEo)m2Y-rhZo;^6aa<`xbPMz*s!M;AIOt)kL=UYXAUDcG*r_Z6k2q<~%*R8>9P7{a9RGsH=NWc%h~YUq6VB4zg&D^@!n z&8j1kwYk9`FH$B;KW^nTP0O6F&|WEb+{`N`qNQfUQLXxATD$mla(G+6<-alG`GvZO zl_DBW^(!;5kWEuia~cXLyQ26~P>_gITq>y=m6F)8PFF9-+0?f+9seZ-?MJhgytRx1 ztA6ZJw}b&7b?EYTA@;&rURkPvs59Ys1Jj>dbA2}s0F{Zt&Vwd3;LD5ISvggOQcV@d z7CpksoKr}BE^bX9W?-u(CMLJa;6#Qd1>xaC9Lbq7AdtQ^-)R&rmxErzgA_}2{jYWU zoJVclkE5QK`Q|vSLZRo}So7M!1KMQ&o-*fR%Dv8|B`4~vT1Q;LPP+z099@Lahv;Zj zh^dk^cG?WLMDzP0sS7e6c$cq*t(a9B^(#iS!-&&BIdZX|yBCH&MrT0v%Qa@LZxN`z z>fbnOi1076)OJccc7!f=y8ecW-vH_+wtL)aBd78+Yv))Lb>ZlE79mL>Rg9CzV}R!1 ziC_W^LXrqZ$-F+DU+c%dt*gf4q)&KXs0MVBP7*X`QW6pPaf@0MaN8LEd1ld#Y}1beHIOJ-4IFuIq{s=i10n zc`kVtTsBjiMj*?QF*+(BH8a?za=-WS=FyD6_!8BhR1I#3179G26-e^weWGEs0qmkbrp% zNWUA%p`(#SYck(hqk`&zb59Um3`#j87te8$t=}6W5MIAU{PM26vvge9$wz@xH5wak9)6o-?%5e zFrtxs6nmib<_q+Ygw+Ao0DR6i#oS?R#QRC6M&Uc68@}$tX5l+J zLYp&^(fhFTkmC^~9q_uYZqiJ{m9QF{!S%TBcah)YV2prDbvcO5tC#e^q~%Lz)OK{Z zpU}6z5%pL^FiJ_u%#7U=#!sQ!Xy_559}hBS)|Vy0+ud72aru`>71RvE=+@f}@?>nl%4aZMB&HU_FLA4SqC$@@Xk zqit1oz7lJ*y#AQ;)<4>Ibf2JEQw=s#?{j>#5Iuv#2+hDWf1A|9{<3d)}hg7h1*637t zva+w1B-<+S6q4&glXEJq%t!ARxayy~4f8Mla_aqv8`V4p+=>|0M^4ljZ}ihdrF?u| z(MJ$^l`ih>cSC7Sl|YSEGtPAXHTfnn-=Fr6?ZBNIwx zJP*d||5_ue`vILu(I_Q_EcK?0u3Tn%0Mkr|eXVzm^=Xn;-w1fLcCl>VP_7m9A*&9F z3=c#;F#$^mE|~W5MKfLLE3hEK=Aw{MRmG2@Hijl8!k@5kP@Q{YHX!9b1%W)*vode! zp$<9;ZQjB1zo7z>)29^)tVhS0Dmm7^^`PfWDRji)>%6~Zjc7gD-r0*S=4h)a0T3*@ zLvT2hHmBScy!UB~19wCKRMH4zrm=+ms z%ws(E7AY%GX_AokdF8>(JBH6iXL|&S8y?KvIRo8Cs&O)m0}HVnWM;)>{YEzhv2+`j zMQX&c+O=|Chx&MM>(fRPLHP&3cyUY)F|BQC1aY+$Tx%3clxl7ELpToRP0aN;Bo>5a#>fjY3f z$GhWqSYst}z7*59=eRLOwZV&pcO)fn^u?(~&3$vFUT-q5exR)S)qmN>zx&J7CA+i#+g} zpU;OpcJpYF-<>@)1m#e)Ism%+Oh!D1F(>znvLS zV4RejGARve+;eT#jkKF7V&KTI#k%5m7QfV%?`$C-+0vb8B38NS%sGP)US)6{k^fq0 z4(IS~6uGp}w}hw(M*?Z)o+AIU-xx>)hEXPwP@VhAR6e-8*nd@U7qm&yDym2y4es`q zN|pBQobZFD<>aA?9o|K!JOZD+z?>(gL8ZoerbiywfgigFJq*4dvu02^*`d9NcvpWy zaf=S*EoGA2CXUpq&6&HrzcRw+Pak!^Xj9C$<+fy)3ujAZql>px9HubgX@h(q-Fw3D zB`a9)FJI@6%QJF`z)@4}6m+>bOS5{r+#LU9brMyusYxMF`^F6g2PFzmf=)VJ0Vr)FpE_^E&O1LNJ3-n0wbF zVA%uhG5ECJm=VuP3{^rh4}wkf^r~s28^4-Kw1Ulo@sVEl?K7M4eC8~qKoVpI^G@Ww zjL2Ap_%Jax21*l2pi`3{QgC&P2De*goqU~96pp)xPo)1M>qMeEsNE1JX)kF#d7P>d zj}@9ukBXnxqP_5!~H1GP#bG&bsrGve*;eHN?KZ&X9w-ZAY?#Pl%X(M_a!YCWGxD{9B%Fzsh?H#`~Z zu41Nm?q&fVdJCDnF}&!^Vzh0cxeO`r{)-iIxZ$Ye9&;p!Yb0l1k((F9lA1_PwXOSH zRBdZGSA0L+uc4qIX#Z%neC)Wt-I*XG*>6bFEZnaBb>+caWDxDCo8?(WMvc>ULbSie zAS80-)MT$at9K~8P+!t7=hcIMd^A6^Cj!vA>dONwu>jubSR0joe5^13ML9@P(iGE^ zlsnBpAgc?k-41^7PA{`rx=+`(?)@j*hUFbd;dptHw!U!grzF6w;18XKi^oX1oS$)3 zQ>|;ivRkUN?b(P)@;4qVGwFZMzR-bKj`fCD_v;PY4Ni(tXLfggCYq#_BYR<8n{ff< z0S-upPk{()IovRc$>1!Q!-G{@}SxD>G1GS$ZsU$w*=Dmf6(WCS#ta%FMo70)$6^^8+cC{8u&zLp{n z+)wsr$6;7){U-1|FZFlXPFF>45=AlP@yX=Gul|-s^Nk_IIDqGD;R&ONDdhnct#`=O zvl5{QeNu_=5RPW4A~W(<)PTcget9=zQj2g{wMR&|wa@>?HI)%9%rK2OFDGrlpT5j-oy}LOC+YLR$)Ox~;_|jF zXwZG-Db#xKjJTI^B%$MlAaLL(P;gbXJa(kl!s&Wz&1UXv3I_&YXo*lDpf*(7m>xb> zkJa4WgPZQAG$zh&-ihr!J1yS-7+tAei;q|%2A}A=pOW%a%p+kQG2+EY>}>Hq8BPb% zALr4%1Gu%U`6;pwNXFpn&%EgaWroByyzybA>w?k`h59yIwX}+qCXC%?r?E77^0D&R z$m526=p7|_d95h5_K9k-ZshGQIoQxQX%ZahGda z*&vhUCB(!B?X}!bAJ#vc zm>~I@Zo(A1vh3bE7X&ks&D1%qL!^*WM4XPiwfhZ4HzRhm`cw+w@{mhS)58u#-q3^P zbf5+=l(E1*MIFY~EBcw%9eWl?*K0FPhL(huvFh{MBeg(N2 zuo}(An*D3EZ9GyA>9Sb5pJ1*YNGKFr7NwBgN9jdj9n77aj@}3f>}TDZc4(H!eM!xY zL=Rk2uy9N;?DW3JzW*Wgio4)r8Q9T|((cl{`B+7oNZ_F6EycxxJ1$g2{AD2GMsxAK z^qgc}ItxXxb8yHAi#AoN5s76bf?|vC*mS{-lG3k?Sd_bwuQIa)K9%LtsWb5E4jN5{ zapterEp`(t*#I~I!D!Tri6uRj044RisLt9E8v4!4QihLWK9rZzfe@!$tYEEc4zO_?T%Xn;UsGkmv1=nP6@u5E0zk`(F{`y^lm~!si zI$4=6SI{d0UL^*}2WholVIv0YW;2NFcVzXP8cJ-B46Q+3Wg~2+6F@N-i{28#BKMf2 zQ7D9xGOMj;NjWJqEgxUn>i96x+PCWbgR^`w^a%rrACCSuKa z1nr&#PTI<9a%B_p^Bhk^hd zVuvN1>WFKvThKK=7)^ZS8xAk=0^c@Y<2`nD&;d91OG}4dLm6p^l}FYtv&w^JXJs=@ zl;QFy2oyYK!n7;XwzG})u#LSj28NzaT=Au<c&={9Aw;D&;(%2&OO3=o<}VByJJ(B^4ZU76nTeWv z>mgu=78(vkl4HH+URFwxnly;dqtnS-J%Kxxca1uVGM&4@Xnn&t#pO?vy-W_!B^!My z>vT8#@EQArOLMCDxUJ6JRY%WFOmELMTR#ZHjU~2(JYQ$F>zJb>h={$@^la)GyZCXd z851!Q85X7HqTcd=Gy^n6{Gi{7*%A>QyuM*%Yfio>Oz`JqMjz(1m1@UqR#g$B-X+wtk#sb&is%mL||r{xM{M- zGXKIRVhw-|Nyqk4YP-FO2_R_YO#uk`)l-K3e)#n;&ff!@^&EoB^Ni!ZF zUACAwQm#@asEkC!@^!K>%FIvTvU7IbF}7lErAgqEpDix?D%|Lg*R4GZy(RF9?#3^4 zxOmdK4X6@)MEY$3*fS(&a%o)s5YsUM7=F&n*Ee*y8N04%Pg(uB$R;rWKUMPcG5>V| z{N}5hdjbSO={)a!t06U6rCq~8q(Vj94o^S`No zMUF3?{Ax~r zF8F2>|GJv}E1Y`Vj#Tw~wQYhEkY%p7 zY`4;2!+_h;#5+5K>lME}l&QAzkJ;ul1mL7)?A^RR8w!-)kK3+3u)V$8Jz^WH{Z$atjPDA29rm9`12CO~&993XF2gowzBB3r*NuyRfG0 zrmSXqezeq)P0$OS zaX$!q2)qfhXFMyaY9O4HHO_*wDbG*qwXSxn_tC|0l>c7KBv5_F0L)uV{SG@)Z*|}e zhacy#xdxZiy$kdretN;eCojm7a$O6&yI|{^MBM)X*^3I=4N1d49lSpl$^_(VM?SpQ|8ug->nDZ-V_Tbx z`Tj)RU(;SZefR`~cW!?ALwSP|^5p(MR{uKeKc4<~sxR9n-%vw`Qs(1J-b}JP>D+xn*2Mp;^jT+CF`xHK(E*y1^_e|rY`X1>s=x(F0J@4k;95!^dLI*$upReZ=1 z8T=moca-XCM-U6`;`R2a7Fk|+N^Uwq6n&hO%meub&`WPFz&xL2s<0tOzQl})g85m} zC7oj9`+7sv#yrvK-gwro&GcD%T0JM>#YX2{Z1lmA5!4LJpHuX5#}Y@i?`B9G50RUM z+bv!PlYnmpkqlda`L1^m#m2^l!pi#a)@5D2WO~)jd}dR@aohQX@sx9SE}s+of^nZe z16gd5)5aq`J$L(bpc^-9F6*9g>hHEy3E|^UmKXEgh<5P#hR*_N7xOjsM*-q>*&gGi z>cWFlS6a5kvCJ!f+bv!iz&Ed7$$5$Tf3({5XTV6p49fqZ)#896yy3zL{Qs~79svrK z(zCieq;SML%5ZjB1bPA0mZme1DURRsdNyt$FCO1L{2vhhrm7?NlvDZ5=~w9$I^)}EP-7i70N$V3mEBseuWtt?DoUtAik*l&aAndhVvmq z;Pj#KNwakANd0C-jma2n%3(UYB(ij4g1WtvPk;Z*P7Txf4}J?=SQ6`!%9qpdY$z?( zaLzF$-X-}Ug^;V96%Rt!t-m~`shTO+a!4wm1ld{qjJFm6_Sf*l8`j?;;I)9GJBT}b zId1YD*k|%wNl&PLU^|RnZD;bla=6MxaVrjw*8CtZp(CGGEql-Xxc2C0>`EXSU;`Uk z_)mfQW+}S+AqKc^It{EeM95R|fHQ_8^&{8EUP`*zcLh}KM-}rO!iLj>6t^efZ`P5< zYcL2@K~ShE_rI zbX(b+HcD|!8~hCS-?78YzZ@G3LruM!i}UijQYEAB+J##IALq~$royeHob&=p~zr@BxqI!`y_= zV(M24r{&J?n;4z6yC^yy&g;pgk}J+TP$06Ij@%vKn|||P+DcQ^et#Het<%jmvM6WF zd8Zsw;p}YhcsgG-J5{4y2aQoh>buQ0+##h^LlytQ{ctFsBT zxz15Ep1XFS{H$?1r)tEct|>t*iy7@pY$wD*n;t8YmX~!o=ewS|u%C`9KNFp6(MGeO zLvX5ODYEH5QwHf)B0@_lCDC$yw(ON-Y833M&qDo|D_}dKyT| z>jfl{c}yiw!hmmzS944e?$x9`ZUtKNH}jnzo)__-eeJ9vB7Xo{YNa0yia#C0HM37E zK0BJwiWmSshNZPdRQ%5E33N8RmX%y zI2!i#d|$mWQcm_+Oy>IJvUdZxA9woYuAe+em5pUGb$65!5M7})ejjb=9oKlQ2i z7-+$F-ifBqCli;t<+#6$TP#__9p)Y*Sn6`z(XnG~KIp)_zr+RrKq2J5EC)5 zA3W=ha&`|AIQnon1PKkYL_4V3Iyg?$-zZ*Flo9UMub}tz-GKtnKeo#?5iK~KaT&#c z(=!|e=h5}pTXYMP7M}C`yA<3DXLJheUkCVkv>YPr9yM`VuoPAWr^Q(fr!}@hRG3X? z8T#NP7ZG7 z+phciUiI^-0^kn2BK%B;oF7PY7D(XT03xvvxE?f|7D|;CI`0Ha>1V`6Ay*!|^0U+^@i~BBbsVcXP&0SF`RIF^# z?$5qLZyFW`J+591<)f(*5V8|e<4>{ZghScq@iZTj;Jwg zS4LNwOW1E5Qt|iwAvi;W#0HRUKU?t4=Y>?zMec4IP6vM(%{=|IC-3@P&C?o_3GO*= z`P4{X&ANsiCJ8=_tj$r%`$%E}(DuS$Auzii=@bGxSt@XWit&dzSNcVj*TV2gW;K=|W1v<9;uYl<EvpwjtK^ge2R8o&=%ZN!Qg2`r^f{2-x& za)UmL)aIb_>;q{iB%8hV_~90IpYQX1aap<}5T&R-IdR)E#YQ^hDn;5U%7c;wSxQYy zizummf-Wp>-B};EH5OP)MWMTc&0cP&az+bTWkBMI*b!nZY?YwEYc~VaM$MUdKmRB*lvWZ zpTEUvp~)=yLz*vlT(x&Q1)TV%Jqg`|Q((7d0XBk;d2yFh!i6@mWnOrr&2Z+iJQKY# zuf3fenYVk1apV14feM)NN{h87POv=3<4+GCoAwPlCeP=@f&Bx0gjkrCF zm4nY>xXtjkjdb`y8DU+F-)8LlwpxQkT;ud?vybCYyDBEa658B1)pu!Qt$OssVNY;L z@dxk}vf9>TX2a`8sB7Rcl8+IPi}yNCBf+TcvRYi2)jFBSmb?Zhqtbk;l3b)tkL zvc{!2k7V?6>A8hL$OPov8{SZAZy7Dsss}{S#px9c_@h9DWjX5feg9~WLvbc=&e18KA~)S=REu=? zEhKJEwH>w5LQkxH@G!)qWv}Gbw$cGuBIi+<)vy>8V&b{*SU`W3H1Ogz`_sc(|63mZ z`C!bHvnud_;jm_+ zaxgI);aOs%@nDp?-?01a-a6zU8hX-L*P2>((=SC_%sr|Yd}fYrNi#OETb~nXh%%j+ zJlWk2aD-BeMbW`Ucr<&;?rj#>n}?s%enm=8@D=JMZKG+(WQ-$ zrNGE?v&`wy=7MFiZJEkXrzb0?v>yJ&J_D0tCyG+LBZxV7Wi?|5Q@jlV%~Uehu)5(j z=Vgg7M0)2qiW5HhG@j*b3jtTkWJ%R;Tb9v&BXeHDR~vV-7f;$I#BK?YmQfC@1p&3U z`W$>PuJ58_oHL!BPjDy?{~s34gzThnwmZEt679hhU`AG^ddH0(z)bC#PiEI1n*^|+ z(LuurP`>FT@`DN{bH0HHkFY>IG$Vgi_?~Y|a8uf3@>eq0A!m#4L-7!YJ1^o3$(UIL^rqMmfuK-!ZCU?3 zsNdmQ+fR-pb;CA!;wFBFnHwa`uv0vgI6!e6ek*)Ez|Ujo^gEWeMNOy+ zT3I({w$=|xh;3z&H#U9ToA-0;B_l=RdB>Zq7dCObX!l16U zS1ZhW_C63e6VYm%%xwwPIHx8fRhOek8^UgL>`!1iv{%TDUSdw>n(jPafr3tV7){B! zsi^bE1Vouqc_l=HP1S00#pN;sSp95QB@+1dTy;BlhByh0XhO9_$}B(|=nRuPAlKE8 zQHa1uy}$>;1tiJzY~0ru+CzwOY~%Q9_yh?OV%-5y(9>UJ?wz?6iuM|$Xd?|5_tm2M zqC_Kkg+KR5wk(8Fg;mC6WnJ^IUxh+r>vT^7Msx9yDqCxQ%+mK|^4L2mK%gTs)^?YA zm1esceKyz9lOnT9G0o~R@`aAV+GFgJvr^nF$BbB~C*%2l#Afy-eg_;_G5*oHpdxbL zEL-+txJEGUu_1HannkbA4|!WLmv2dFo;?btUXPFK;=0`#-faMNvdq_L*vVdqZMU|! zu@V<@v>ctRF1z;{*AI3d&K1teXX|A+z#tVjiCYNEj&qE2B3AL?9KsTEO=@p@;%&>C zzq&c*N^0*Dl*Afaw%>~c;%52>9_Li~^HfJ3asv|zTJ#l}ur z2QR3g>{g7?-nNefZyT2Eo$0?TX{+rD#^-N@D@h!+!E7uW-gIYvDdZOODLOJM zi-b;gWYi9XF8<*@HM0z@2Uib&K(GROJ6}ZeOUf?PdbDJp92x~uHSq%X*tC&gWW0Ao zrn%eC@E-OLNRM^Ei3gzLU7nNI+xeV$ztD-jjm)UuM1|G+BoaWu;i9q9ZuV&2z`A3u z_SB8u3K8E^If(hT(?&UWgEnQ%J62Ogh^1zpP*OZY%i#f*a(!^*($5#)1<+@hU_Lci z?mhOFSc0$Zgt2jilB?LvstH&Z1PkrS%;t))k~ILgia%Z7Bz;Md&$29|--GXk`{zaN z;YP${W`)d)TvJV?3O2(y85!dZ?K^aI#_+uwr4E2)R8)@c&%Os;Qq26DMi&tNrOWk^j^-hz(ok;~9iE&|QN#0h^+f5tw zmsu?o<8=&oUI^>T%s$=U$_x{iyCK1R;vC0rxZYCld(X4MR(JQDwVRy+3`%I-ejH6{ zYAOJa8Xvc3Jc0C$8ZibP{&6)C9u1ugLBEc&H>~-Ek-Zz# zyq?lA+q}*GH%p!;WwTGfn29EG)^&~4b%v)6S&?}RZ-vu>@gr&m4FX!~H$sDHG$}ren?6jF9OY8YkXjSf%b%5p#^ko#@f{QB?`{D`r?Qy%_7F#>&Uy&B+v-;Y(Zr_ zGDxdqe&22OQ9K`A3TG0#663|G7%`vemYv%Y;>Vn8Zd+K?+MRHjHa@?EB3qZz@W@5Q zLdu)=jL$OdU%G)azE`b+x65SQoPH`{2DQbS<63_Hh`NuYiTd4wm4s0pDf=+YBPx9;_nuU6mP_;I4mJB}R@cEX`wX zcV1Qs=IFP9d-c|^Z5rXw*iEd2xS`;NjuRBJ`*A!5@AAI-@p&S}?2k{^-o zx4RF@ttfvl-&o}&>VTV=QyQ!Ery8iW(k$_}ExnM$xN!ZuSNy93FkTT5<05201z)WU)Kn=y*_azCm?cqM%1iU+Xwm|)#>K@2 z58kBZElo$cYH=q%WpX}UMPgIy2iJOwV_R*ix+e40 zv!?qI9}CA?Bd6ikEiwNc0#_bqSOt&3#sOt+sF>yOr;k9LeNtEpUy z%H8;$P1orN*^|6>Q7bpoB21CL&S}yrl4ieT9!N0+QJR7aRLA*V%{EXhTt8SCG3^0D zh@?E{*L@E{q}^y52rd*UOuvU#hwOhgk8@%egD%ux@m=3$I}B- z^rdy%ij+u;y{mNMEg!f1RCG}#nJei&cMmK^1e5M8?);Lx;P?IG{bAOvIDnP$HVG47 zMuCN6q|(rR`2CmeyjwLC7v zOsu!DG&~4^rK#8nerC(BeV7lS6u8Lf+wx> z1<8VibYa}Qr^r)Wli#}L>FZ>EdwK77jp!C8BMG0wJ~MqxInXREWA5H^IGtoBw8Kb2 zeU08g$y^S5S%%N!o3OG&tlH1D#?MT43OFrHm%=UeVcRl{Q$=R|1z*RWH;Br5r1AuS z$-8QOo}1anK(u4$%s4i5M9oaG*wmDW?|c(_RoK9d8>6`A%(VpML|BfT8uv%YXKE_u z<2TM?*eXp~#WJVi^(9M_pIiKzb~-&K&-_0vPmnbMcm?>2594Z$ZgW^xraO`Xv_XMp zIzspxr(bCay>okMwWNtL?Ci2Z^D4?hY?e>2Q8kv-Igagr2c~6?GZJpC`%tFF~}m|bv)JoGVS>1e(ZoW zs$Wzhv*cB|Sqd@Xrr(G(3ZC?KAByL(VRRBx8rO}$<2i?$mF2idK;WKUx@+RpR?orA z|3q#^Ei=>`x&~RyV#M3hR@u{)+IEDk1eQ}#dup}rMERdo;^f6esw1iCHI&-ERSudg zqv&-e_t!>exD1#I6nZMGhQH3=bz{ucAB7!OqbK>`MhtJ5Su}0wRo+INZOV~TZ310 z@9nulac{U38yw*n?5JPCjc_Wuqdh1i`Q|8y0f+Z`kzRXNIC044baE6WHo-3xDSqpu zR)0-J6+9qhnTQ)YR#e*pcx}Jbwj8XxH|B5DL2iVLf1Jb3)iRY{g|cxSHKXyoz6{27 zyFH4Zb9ZDn-c``sV3=o~*J2>n>sN^u#EndC8$+jb6%3 zV~b7h*!1)u;+yov%Y3!7?wYmAUkerrVw#U9%~eUebS6rGeI)X3fQBEQE6!*3=w^jC zyq#~BI>4b%qt}?qt)PHsA5sK@0Qtd-QhFsPz#FW*eN)GYTzC#(N6jqaHW1$^9!&+Z z<8ZK3v!fK^i`YU*h^bh4 zo4ZNU>Ps2eNlX&dS_m_}@{uga(>^ekc>2}B^I z)HtVe8#X^Nj((e&O zwWYukr^l*^4UWBB22`7Vd&$V34Ya=5v(HWrm~45bgX8>Wza4}Q-YnyE_Gwrlw7VSd zj?Ru)hHw6k1t8!8Cq_1{Nyq&O>q64>y63|C_;yWoF6L4F60ig{J;%oJ3SwG4XliEV z=;m2a?A5CPWc4iacnu{I)12>fkD`DY-)QRJr3w}2t3&T3di50JhC&?38|gRZ}KB~vf_$~N59=W_mlE>b@%RG!8x4l=Y8y&Uy zp(vrV)#Yv($E_2X8pOS?4)4J$?gEMSJC;sG?0Q_B-zPpy3?Hlt!?xf1D#8fw&Wkj-9$kV+of25N1vtwfP`^T+DT?eQhZQ@axCmMe+AcE1 z*QOiT*>$a_hu59nQ?B;cg>NLouvl-8$cNK@zsMpcHf`5ON*!NzMUEHS6?0e|L0%OWy5edM!%Rd!sJ3JanS}H?2RsXxUhd zi=UnrhPQLXwSFq4A0M53M^?<@nIK;#TAk;^HOt28!z0YA(_sD>k?X^o8WdU9YVAl( zv6OS!+f6m`*0+t-l%IL`$_~fDZ!`=H3^wQ6rd!J@yEgLunh8nlP1OepKK3s=KyP!W zb*H+(V6YUoM(H5a_%r<|pz&t)M=E&-WF%NTyMhHDSCYV zi%22eY$@fM9ew7Ol|JJ5DTlQ=(v>V0mze=5Y z-*9RFa=;;85BJU5`Tt<4;<^Qt?OhGlO|<>T!oBn;va`nZ7A|93N@7 z4iu~Kfe)uFCqLXCo%N*KiEec(yw3Vpbbdd%dk9=g>5Sn)M(>Ii5Gn`|KP&gY-SPr& ze{J;&XZT+##fPGZy*I>jY9kR*rmQOTXAaxF2mriibpFe4JrlpXaDP+`H|PQt{21(r z@b5VruYb5{CaSEr6Hk zy>(5w^;`10A`>=Uk@V!H73ueoySuw2N7Sxf|1_c>P{9Z?^^ws?QJu{o0ZO#|>%jj4 zwfzg!_AgM|zd&vO0=4}M)b=k>+y761+WrM+`~Mo8ZT{2}Ek2)JI3OO$=uNuTEblm? zE?GzxNK8KQC@#OelZJ0%@@BtnX6~mKSm9-QoLY)`p!){S z{%sC$!1lbHQ8PeOzzPK2*D_@Zb-fB0)i&8X5l@YQ1~0up!2V* zueVsKdo~_yj9;3nwmTNydtd9_NTWwKuysp=1?ouV@+r|}iHPUb3GeLNhO&iqht)>$ zc-x7eeYZCpRLMo_0rWSDcdW+LCV%%z1b+|{!MqrEXl`G)W^`9Jm5k%Y&7x>qxC1wP zWaQnx4`7p{@~4hVKg}+i);;o6LKtXu#LBVpG@5reO&l&)rL3@j&N}yTI_*b4>0}}3 z0v+$@(BgY?T{?Thrx11vRhVonE9B4s{ZI6W?g^eV{d2L!!Sj-`F8%wRIsO zxeeRq{yHt@M^KXC7&UQZ7O1pASesRst3P>skDCeJV0_rZ7gb0opa3nryhF4FReK>| z<9Xh>R-ty;Z2YS-1>GA`I{&7CQLrYsO{!quRw4GOb)?X;RdPh05--SVAf=l3 zM`)@r?;h=|P`&$hdBOV)_Z!>Njr6LG96eAy`ctAKU*=i0Sv|vXKT~qCJH;IIcDj~D zsev3xn(EHPCMRIh*|k%MvZLP7&o?>T-?UR3^lU7V$qG%XaiR=_a1dEa3Q<5=(Plm#5gg za+N_L;w!o2vc-un800j+DlXvY8TwFj6dK&8Q=l@gzB3Y`#FAUHfu(Q zYT6zj6R@8~UG4CtV7y8{r_vX#>E?to;xy#r`XKbltTynAu`r`O7PIkY+KYUWxsqG2 z<|Ib__Kfb`8a_(fs?1IG64Y##&xV!u$^2iQ_qX%QUBIcu+vA{?Rd+3JGoJ@On?dQyUS% zl`NVk1$r4N1^QVwErHSN=6ktdX&QF*d(J*)2m9MNH7*{}U-J1M#3lvA!l_SEju%Jd z#!vhzEjY<9`;rV|*m9iB`={A0rfbQcmkzZUM~kjNuL#}$N(Z7P2`LOIyT;%W7QPz1 z*|#ZBq~o|RlK-|e_tB7tB%8l%FZMvy?C(oCf3X+<(z(4arB}&sNev*t?HPzofsNa) zjeC%fWdnky!+s}e$~AsUaq}S9b1m718rKSjAG0r&RB5E~I(=GKk)02l_H%{pbt=?qs5O!fx_Qob_~FB#R+G zZsR^21YrBJ1L;`%oA&4L>nkUT_SU^k33gN^ct;MWyzi;fyrzeVUh3x*_CdMaG|H9@ zC~@Dqvmz6XUTi4qH*`M{#j&kAhaq4K-RTP-OzDB-Kupyc62-c{!^rk-(r zbN;!cJ3+CGJ^pERODU&0fYwz*2Q!!f+~3L;Sep^^_R^J)TRXV5 z%}v*QEt!JXM&&!htie?4N0GZ5+C^z)rmzm?OB+3f+H?_wdNU0tm6y7Cc2nGQVQa&* zV(K5u!9_3cvwgAUP^IY79d@Q|a#);JDT!jlVP!}^*bs~sK5>7Lv+i{rqD;4h zf3`+BYrZrAf%L&--^k3>yJRImQ`kobDOH?166A}-E)n^SY%UZalH1(}O>Q6i-o81VLeDIRfaP4{&#k%nDNDweL7&yayZQ7ETK~ZKtP_juP{&44SSb4Sa{Q z8+u^zpA*ww@d7|_v>XQXH|#K~7Jq-q0v_rCxKdZVju6duFLc+(#94LkbZ6LTQA$!=A;zuHyfSVKd9I`xa}$zu@8sQ6eTY&P`ZnRm)!}qMsIs5U!f009|zy zIq~EAPA$s6g*Yb6d|-e025N0p6|8DY7!dQRbY+d5Er7fve@%jb*AOW*kd|;an=RNN zR6NhAV+x7A3~KB?4n5%PA#5V@niCgGBAYvUi6}@6jU|2-XAJLLBngtvv`02W-p6a? zxS+|)vM^-1EQ?hxIb_Ssj&t9<=bp>$q~4x3C}SvTPCuZj^z2Uh1(PQvjqquSZI+36 zKurva)dyM_wGMdW&1KP|x?{ETD}!6AhuV8Goti(X3X1jWhv}wUCKx`OdvMm#-ThoT zICMzg*k>^KM9{B232bPm;ef)=$i8Uwf}9E}>7n?r<1<#*_PnFCXj{C(BcZ z*}ydI^Y0^l+|iY74~b<)^?5h(A&H8ckEvd43^!|!^|IXBKh91h>@4Eke(_1D_17?y zPV~K_Q|cHJd^g0BKwS8wsor&kA-dYH)>!n3!4Sv7OPAa&IKa_U&KbcE>Nyu_e9>mqjil}f2o@QNShqY-EKe8p(`4I`; zdJ)B96)!i>F?>kg*pf?pNrmE?qkqi%e1DmocTer89`}yShUc<6KEUE!ym_FPXdM;LK^&Q)%uZaJ^S8KY*#&KBT5>ymw`-zr}XpJUc?LJdNVZkNd zJ~2^xzl|FD@8qbqmrOs66@=RC3h3;7oI8Mvur)~x9R{I;fZ-mAZS;{YcP>P z4!+LBK7xkCpcYb8D>%eZIcTVFa{eGJscbyivC5*Km6+er_SvK5zjk+@zX;G~5yi;1 zN^@MT&3~)fPQs@wtyw8Ja}}f3ck#3Ft^9;%P9lFd0UteXy@t-76#PHZ85%&5I5&0J zZ({bBsQs@WBoEXtDTPHu|NR#G&4LC572sUWkfZzipuZ{Wk7w-4{|^0EZ{yz$|L;xy z$5;O^#B5RP>2=G$qlFN&sNI4UQFZc>kHpyingXIK24qgKSuvIsWQ&q;;u_%jD<;XM zY}Ho0!w-nAJTlg$cC&O1`>~P4=Qr{G#S}2jQgoJjV$1nF&~tPvxBrF#Ho`Oy5paeT zWuq194c*~xe&3CQ{=*6NjT3l}REiX0d!~}~^&1yOgZ`3dd@G5)ID>wI@`&9xX7T7n zC6!Xv+kW|t#xLLqsCenL*3NMu)~vC!uJk}cD!qCS1qc5IBKFbyJYFResk|=|2GM0% z{fd?)W*;~JrXKL)jLz?IldS$LvC6#)$+ho|Q*`p_uiv}mx|bAMw0AzmNnCQ@nzk&|DKTU9#P!Aun7m*b z@!I?=oXPIP^bRXtWLB^io2!NlEP2%<<}2$7L`!eih!#k*F+%|TaML$eyGV;Sr`hah zZvT`tE5BVIfsynwzw}=-k@r~6Q*7uQzJ5i*WZZR(|1Q7%D^$!!MnL7sudexD(z4SV zutSz3HfQSLo3o9`yP}>$cU3akRsITb^ZIhk_SHC6?H;QoJ9ZV#Tdpdd>x?kQj**31 zXB#3Z3QTEHJxoLPwEf;Fp-U>Jw1V!x8A0GHxuSD0#+=yrP9Pc*@S45#flvo_$Hny@ zRot5zK-&5s;`>+s@)7@e7c|86b)dbdfI12fYvX54g+9j<&dVCyZ`t& z@l4b!p_I*k6~zCHl&%NN?CC^QeDXg&zE=rssm0-5hQ~jiCY3EPvwsi!ulp|f?_vM1 z82|fb|JA7ZZHK4)2R$ zK_;=4HGR`6&=B(c#s1G~PVNlBGtjJUopBIp)1sFIvM58^Pi##)D%`!w5aEb(x@^9# z^VEDAUSNjhE3#3s^V9NW(jfnj4u5_z&3nB*J23jOVjOQQn=ZG$K0KW%zAa+2h+Fs9x$%YHpbr;KY5{9Z9~mtJ8^e! z#x*M5KbT!x1Zq4X~(z6z~Mga(-6fZIC*Hs}iZ}X8G&|z8?ss<>{SjCH6n< zX5D_$101gVINI%^YIJ~GvY4<9gJdXw3jAsu2D{HfwYm9o^l-1SM=>D$vOP87y> zUUCNpH>kEr01Bu>M0dZ7eIF5dc)+IkcI1r_+TVQzG# zN@4x;9hYUA%R`)o_S26h21pq{V4j>p9c_JaX8hsr!q@qMt&(pTZ=*tEksnknPzkw4i?*nrdDV)USNvvw8rumzrN_=zhce1iT}tip3#M&AkuSZPq7B%%7;Ht)HF_2&(4&1tu?B z^6mXO=La^`D7TnVLtOz=qp4>$qiYQgW8~hXKnKJ%7tg)rKqw{8oOlxsrRTaB;gKZE z;PoJTu<2K;irM$<)qC&ux;L)mKAL<_x!wg7v79dId-R3=+4g`409 zv;x`%7JW}D;poUpi<5DxlqRs6w9oTFlGr|hB9CQZA$oW}_|q49df_TQ$Cl$XiCQyw zY3f&->{I(DKfQ`K@3;C;v)v#}_NhwU8MKSjPcpX+_YV{V`E;ekk^9mGzB?HX)J65+TGa;%-MfXw6b`(~CeC&^-lGA=Ctj8^3~VD6%(kZ>H!zkgnV^efw+E>Ge|XD-3&jgW{P0_Wq$ zqJp=J)QxMo!ie4lksPpnP{hGMkVuY}-9lC5tQnG~DbNF$p;y*dd1`H-q&re(%T9CR?K1&K9TTB-lmKuZr4 z+r{H&){nD`&QyN3wOFHekxt0w;$Lt9vrU13={_A!_ZOO!O-z|SBvomu4&5SapRR;I z-f}Ffm7X&~K2bXQI-p)aOaf>OVZi6o&l=ZX={Gc^x};v9meEwdSpmfrh4|yPFfYlk zUA(}b6jkhhD!#lw8ZxC_XN*Jf88BM(C4gu+O>E*gO_vI%-A{qWAS}8%9V4{zfs4;Z z3xj#@m=E*EAx7P6gAagy`G^JWO`j4IpN$d>wu`Wz7t-Xzu?T~A?k=(QuMRsVQnTp< zZ%VA^+vIwn87x+ZZYmXMaC%!4|j#WN=QsWuoT}WkJgI{mU}t# zyh(~q&MD_8P&bb|Hzx872zK~)p5oEHHDxx1GU3Z}4`g*ati}@<{Zq^dK*!+}{|3Cw z7S*)3oNxeEYm@8GDzqj`DG-rwSK_mm>i#TL)B+?1CxNU5g2d>vvo?Y(vk8BQGx1*u z_8pk5yeoR-Ia+Bc0H-+BMkX3M)OQ_ff=|(>4BroqU1Ax%S5^6kaxuEb;Lx?9`OiO$!g+V?4{_I`BFJ-sIeSbm3t`xNxdSA8KJ485gh10O}pN4VriBT@uQEY^!|C%t_U~VC7Iw$3F(uzrxn(v8x73zsq#E*&0Z-T1 z+arFl6s#az+df2?ZwF02-}DOyI=QJej|w?+jU?P`hZo z5LbrMFDet5b*mm;!OVI{Y&XF!9XFXmjyaW92ByNlbUV+~sYVP?keuwh*2zbA9@gg% zmWKs?c5Hg~1l~MRYCLM>Hhg@2C4Ox1vEPdJbgiR#X$v;~e*C3VyDcOPi94k>ZyrQ6 zeS9^6)h`?zc-G~1Nk{_bxISKVbL1V36{422TC?Gu(OZE(YsqWsfR*$jZVdfY0myLR zON|?S-!=P4`|G>j=D|MJJ^vAaY79R4T6B~85e^O`*fKzl9QLLxqnpe+x*$Fd(l9Rn z-R>0&!b!(+4Fa;|jw>6+Znu##A|yYX?&MJrs|79{Ek;G$PQOC<++wM^zgaqSTRY>n zj;TLB!fU4k9u$9A8;d_^BZVfEwIo?U_L6NQAl>dV=P%!8`EtXAYF>R}3VM1%$(b;M zBsmHM2l{Dz$(N6Q54m3CCrSxFiDTju z0RWzv7*5kUIu)-J#&iIvE)?jX`D8s_C{yY>8|i_>4^cMMnT3nctZ6f-iauiRW+w~i|eMk0@VI81b_E1ecz?*UM6h!16EjnnRfyZ)y>9po63i=`CwK4cb%zIlbaumY~Sl%=P1%r5_6F zz3zYCU(LyW!*a1$-?a}7!I16&NMn7J+zpFof{e`yT3?5>hX+Qny7;YTbUi0pDJ?C{ zvCL^bvCgC5lMcS(9`f9Tmc!_E&_EkBx%4Z58Q2FU>|=hx-04dh9}L>Qabnk>+SuB3 zvYTuY?1$QP#6OLN7vxCtOM^O6U6n^6SjwAUlK4Kc7HbJ^$vx zBaV-1)i&Cr)wZ&n+Zt^^<7J1%(=}QoK*nS(QKSaO?ys$ZZp7^qT^o&n6lkkYEL2$| z6B)!BI>BpcVvXLnlc+bjoGC)J)bF8Ivy!LmF;G_R!n*#dW>&KsS5#P|<)^G&hSXGv z6|`jarD9o^o?gv3*AC#BtdUlYo!*xw@tV@1*!Pcg19p?EG1?C1 z)zT~)Xvpl-nPT(IxFQq#2Ddi-;h=D3H7y4PlL@z|0VXGLbX)C?OJVC7@{bKJ`vaTD zK%FyGhC+??dzM)o+Xa$+aPoCikF9C@ml4<~f2G^6+C!jkY$l3d@dQ#QXwJi_K{r`7 z`9|(~?bH?0&vr$t5_Dj>Gf z#mKm1`DlGQRk*qmesZ$c4dGv^bH1sBY^gteyA3;yI3&z}idKirIL|6Ky4%|wmWz`z zLXJZ5Mr`T1AKJ{^owlFEaTq%wSta51u1uOR2t6k=KI^n{HPO;!7yFrhGgci2@oSP` z(ApttAh&luZIOs|(Yr%GsP=E^4(Lt1R)`dC|Cwof%Czno@iYQ`%4)7^mQ0Thl+b|R+ zJDS8B8k+mkKOs@bH4=YZWDdlAM-{(i+P$I1`>MO=1vX(f8=;!Q{NDS?{0VndhYSze z!wF_tKT3zwrNqjRhJ6A^Uo`0s(#J6+US?|8Cl_o#dvYSX)%#HIYvp`U*W@4Yxq#gk zuz!|GftJ|U3z9O?rxJzJ8oQ+pzrMuEl)^P+NPO~&F2xzPxfZWau>^+Iu_~^VcM(ve zS7Put9p7rS^Bg!%6i=Cu{BS)?xa@CF;`F45pKknkDpdmC#ZHyI!G`Feu+_zp zrQ||Rt%MVi!H)aE_oad~RmG;rJH^a-9*wtJLjA0R-jfAdeaDe=HrXJwjj)H~&R-&C69L`(n6Chd3CpZaqwxQC^agviwIz}`@`jfZ&QM>ojg`cp@&&1+CJv7_VoM)?yVWJ#jq##JiaOg6Iu5@P`3p@8W9@ihEXRxwn(^db z4pH14EIKUL{t^k(fuFw z(JFV|5O$(0?Q{xyhekbiTW}CtXfj83!3|y|B=M^}75sz|;C2uO*IcNl4yBv{@aE`&g_+EiLs z7(7UYJ@?4h0Y)Gq(=+y5kUKTN8nNUj z%MH5%;s7q?_CJulr28}X9QaGVYTNi{ce_B`Z%o4kjls~Sm2ur0Gs zcIHayyxX=&x}}8gQRw|~*$=l+q)f8`ui8~yk`J}XS6-Yc>Tc>3Eo0CvlGFK2vtqV8 z(_7r4GK9(*#v zOJ3*+gkbE{xBx%`h#1D~o<8}z$Ahcz*|3jAkLI>037N(By95j$Q4uj@A|Gf4kR{K$oV-~G|(pxoAr zY2B=s6e910N1hSK1csl~NmdbYw`FwPvDsW6cimD-1Mm?v-ac>JZc<3(&N*RS0QU2q z2G@6ba{vBbzFR3V&fzruUz4|yP~Y9lgc|OnK-axvQjMzNFRy~~k;Lx&77z!2}^JkL2t&+j}R|KHwk`vdGf zYpuQ4y6@|{?(2rlvG11VQ+tse)Y=)!DF|Qg3Ki(;d#K{2*<$9K%ZlaigjJepurGF* zs#5&};^)xL(oWuJVPgV<^UjTgV_wh65A6>7YYt~-#gnhncVIq<`^rT{0IP7Yz7Ea1 z(Ik2dq@jJ}flZf8i-Nl%N;Ap(1^6LqcikYu(9NMA3Ii{Tba!g+=6l$B+S)zXEL45A zTNe_uFq+>HzdI`o0xImdBXREfGTU~xTI$subWx>ft{rVjttsQmUsm?vtLXHJ~-FjD*M)T+Q zGLpnWR(WE$(C&$_u~;d?O)?AVW7Od}YB#W=qmlC#Bg8CZTTb$`q`#eq(tIa^Tb)IB zd!WvR)rR2+pS({qS9L!MZ}kY%cee?c5=Z&@j^r-qJ#I7``pTw#zxXj>9^O~eS**=l zH`P=#-ei2;(a(a6zFaAw8z)-V)#0zd=Gk@?)n4ijY%G^?{9v(_{ifDa!2W0~_SOMm zsbPDca}513PgC~uI1>+^GUuNqpN7~4w_0w^8i5@Cu}wm6tALi+W~jw|&c6R*&wrpw zEEoNJ-2~pr*4{)+G>3(AN7ITk=Oq!w65bnX=Iolph24N2uP$%K#hJuA#MGm^A|NFd zYanIJeL~8}1Z(*_!P&ud>4}1CrQPg>hKK!2lBiS&yQSbnO48}G zN^O%1xcuDthtHn5yzt-?r3`4h#|{x^ExW;2y*ga(66yreu$^H z?^u4Ed!vwgXl-FS2i%_lP*48aU%_L4MA^nWlH`nF`X=9>UI4bO*aVMVS{k6^uYK`I z7kgkXhdcLcJ4A&$9}dEl_sxbf@;#L1Aq{5MQg{%@%LJG=%3kb+3L>szvB~g;r3m?! zjD@q4=-$m*9o@XgYS8-RKJtd&SRkt22j61!jY;dZZPv-7uCI_sTqdbgY6^vw>I3g&V|=wZosqLT`5ZY$$mYmRo75N)lNAOaq7#snPXZIzy(aDuoVgGv`#o+I{(! zF~Yn!uAkC2@b9t*FOOTg0+|}NFt?cGTOyQ((#RYON1Fv%J9Xy)C&GLjnV528d#*11 z$Se@@%WQGI0+egUT&KKxOa!o?Xo=B5Ogfc%V#_u?GJSxD(R3q@ANp3cx)+unE|y7X zwZDCVsfG$1zoVj4Qh0%k!MvhGnvrD@$)qPB7%6)=?R*?hiazOW=k$cDT8cVo;J3Q7qx#uayXPZRMzDS!8dv>G)Eb6QjXC0Rt#zL*KO`v z#t87EzYV4*w}`dm`rlf0WVntc=+9#^R-ki~K=AxzvI*7o0+&%zsZdw$8=rb1b!GW; zAf8PsA^QBW+*w)p;Ms&lbwrIr1Ivc?C59-oO56F*Z(?C%E^FOhm)$oTIcLcY_pt6p zd=JFU6#O|YbBJokbX(x&jCa^$Jv~9fWR@S9{vtc@rg;Gp+qlppTkJxEpgYkxuQF(~ z26Z|61SmU4n*Ej943jY#v=xnGRc%znm7KASW8YH+?l(AY#^_eOBDNVvDQorOIgA!5 zW5U9V)8-?#>rr97bwMMlJfULiCUs*$MuqoBn@0S#Dg}7dN&)m<+C&yfkxp2z!@Zj3 zZOvMs)|39Ul}@RZrtQt|4*OlN<}e=lxG zJ35R=M3I^oE>yz;NhN$HzKG$Sle&t{l3ZpwFl{<;F9HOXcLjECXndE_eB2rFvT9q<9wd`OZ?ECO2Wa5v)d@Jx@(Uld(@4R%OJH_oYRGNPeH&u%e1A2r*>P2l<;XxX-YqEI~Km82}m$xuss9hs1T)b)HKw z_*+QkGtfvRY;kN_fIqMQ?xs4i2@?A~461zD=PUOY09ESLfx&zq?_K=>23?}3z(j!o zC107_(aYMdx~a??BRdT>hM1?W2NRh`mtQ`6$m+UB<~aE-$@jPnuwzKT>x^%sBh++1 zk6I4Z-2gM-00Ak|c#>LC!P!dETq=V}f=j^E9^!MpiN8iItOWuK<^a5wOTo7a4-Zp0 zExeXdRH{U1fd|<~>z)|)sqP2xd0Ey0{zXW-UczM=}?T?I`1u!%OJ}v9l~zlTP;`$71I4 zxJJ`6x)KsLN9J|$IS(*Fj(X6Lnx1e52+Ek^@!l}i2Wmt!J$!QRZl*)ZC zTTvlT#GivhOVPUsz?=wJQ?_HX@7tyd^d9#pK+4BI9Rr7b9Mz8&T8RsnuN*rI$9HXZM|HzEzf2> z&uJEj66u5b)xcoFtJ=uIjUmX8ESG)!Lm?6zeAINX}v? z{{iPvHAG_DMAR@=qt7#m-I)RjrZrORlcjq7Btpz z-)E8q83sO2XxFc3w}R~jVOzE}mX~v6FSU|_WtR|BXkKGYAK-!Am%9P4ua(54+YdB< z4wcm~#=)scnFA)xb`4OnpZjG)e$m?vv8%US;yG=+iDfizzj6YJqT_ol%*5tEKSWK6 zP|=wf{qd4|OO1}=XcAGXGa@>2BZX(O@F`#9$K|zZHB5o2a*GA{s&KS;}~g#*F#-|Ckr>{aR|GnykygAiVvRXr>VH;4D9UlLk}i}5`C!V z#hR7?7Sq|CSM%^hVS1arFe4$I#cH2_sK}jo@1~7tQ!_vdp1V~lJ_dV$+iTT4b+b@2 zO>g}MA zmT65Ek-t8xle9epOYHoT8P&iFQ7$IJkn2uurIDo>sxg3P{ z$HEnpPGDtbeC{dcW}@(?2IG&I6i0-b*5K7WHKrG1e8u~U#(P0{#&ASE=IA;Hdlv~{ z+h1kK9Q*mT4>>-+N1T6t6ptmdsp~iav(l%#H?CCcj;37CAI{U4*hs0y-mcwtjIAfS zA(MlLIV`v9r+OiJNPREU7L4xUAlg7JMV>czf6_9AyISPwIEywtQB#)JkSFbiMT{hOES&iB6yi9{WOYdPBR=b4YB(-;IeSK08 z3^=vX?g#F(*OudwLptS1q5=M1A(Euy^$KYr&d_y(f~zRhWhtUkq(p)+ZvaDXIRPr( zVIVp%X@>^+md7(ST2;@tYl~O+W*X*lOJXEK$mfk@9S<6mwkNigo%J*IyGQPb^5p(a~vFx?U z*2^Jya!gMznH@xnDVGagk74&#NbkuWt17z2A7FP-Sh99&l4TiWBoTO?-8!3>psI(_ zReh2i_`wp&xBHGCRBT0RzZD)H+RwA8n!kB|2oIDQi$JQ9gp^SZX%#|*80WnAqM3HH*6(v%>{o(VC`u_ zP;GrW!uWVj6mf(Kub`w?cOLWdL(G4i2-Ha1e4*P?bF-=Q@cn+bn}=ue7}Li7`ZAMk z!KIhZ6-sqZ$(BXVEO-l6Ose%4(^p&Lzw_P4V8p2%=xF9RtSaN|a@I37?`QoGUdlvk zNy4Wh7-LBm=;I9~x#i_Mnev$8J~8^dwQ$C=3qUDiYWM>|KTvKZI%Gk2C|Z@FJbda-P_ zX&2p-+rOwi5A!k*xWv8xfw;d8O6AEn;B=2;L)4QuI`{&z>^tZ7I5BY)vno&i&f$Y= zZJOwJ!{WPXuZo8DOWUTXA8+NSv3?Q0fNA^|b{`0*CE6ee#ycI7m!FL%tMsds#n|Sk zPK`X^f-Ex@BK(*ks4Yrz~M01ua8bs2PU?dzJf2GR;Mrb01QQcgJ! zf!5|4tODpFw&`WsXN+kn+%!t;sI@TKPKsX~sT9gUu1U1HEV2Dd0{XX5k!}#vzq7Xh`h%=YY#EVENyQn}7?ccgpF>3je?UyV!+nIn2Y&p7K{!;Gh5Q zopPZBHx(3g{bwcAA5RwwyU<&wQBlSJt4~#u>4mC!5*7;oWw3wO>L{dL412X*V)@^P zJ$WI=K0v0Tehr8I`uG2T*nck4uM7A8c(v(t(x7@B@rk^i=^9ne`5LtzxfA6Uq1@UX zr}Ml2zD(@k?UdpxHe%q2Vrq!7;;@1zv`)nRmJI*>k8)m@(!YE_?zeMy_qG#w7J(xv z&z#56)I5eG$0|oPTmNM^-5nE#f0VcUH4zt72$kwJ+nhf|9>? zl6Sa8l5$m&Aln(ue__jV4d4H-`~3PLNeW#c9O|04B_ML<>YUME>{1l}wJWbTAJ`HR zmltnZlv@+_{i{^n@-=NAojb8~R7w$&<&F-k3^T!-IK z;Xe|~|74f!e`q=RPL%5LAH8gKxi<3WQ+|CVfHNQySOXVqyWfPrfB)&=W1#o5Dq{=! z`}x0Kxqw;ik^Zpo_bUB*_35I`pjm4A>tE;W@4c%-8qA*V3-W*6A1-;9U91?{GrWJ@ zAH0Ng!T6B)Ke+yN=enMDVQDvMYIg7U(f&Ct( zbD{ne33ko8cU=F=vhbpTG>0bXuT1&hzrwrj;!SweYWMGRB6-mQx9mUd#s7ZdUssEd zz;ZC%5BVQ+G70XT5&YHfe+=vY=~8ZR?hrkC39bfq7;Is2$7Dt*^=O zIIVe7FQ;g2`8`0z`26fN!+v!zL+XpT)Jzw!TAS%V z5YWgou(p%Ms4EJnBPNfJ`P>1@pYbX^z_>r@3^>`xQPlz;*bt2>+mBDQD)Oq25EehI z69fLa+IMNa<7UGHhja+PKqu;d-BMSpuwsC^i&fX}ch+?1fas2%)|L2NM4&$TP z)qtURlf(L+DCTb9(7xRp{$wZ>(8#z@)D|m{W|lbsp;O$vlZx#O^mN}TU-p3-p#Pmj zau~QoJGH%moA}gR{Q5kQKusGbH(vA2C*!c(Lzmhu7<=+2;9>RveY#xghW?)-{lE6r z?J2Hoxjt()hYj2S$kVMFj?H862I&;IttM{_ zl`IXMxk&7`otd8W=Btc5HH7cMKHYID--s0h1-rgB6?Wm*>OyPu&`;0lJeEEq$jeIHZj)wN+_oU zg~~JefPvK6p3<9yEYd6dsnw1a6 zHaN1vdWOhGW$m9Oaeu@>#{COQZNsdvx)oHGR%IVzP?~9PR$`J)tssts`>kl2$OiH% z+c0{!+w;!QiVi-6EQn(d=OKdK-6LM^@$FZ(FfyHr8 znf@do?0xOj$9;s$7ea#c)~K*d=RO$Ua(r)yXLxqJZqpk?!dfp=Fo<|Za2(y_i}t@R zlPJ(~(_!=n1?bYoQEoo6qx!*mv3#I~%~D-3tpINN$Sj{xH(!%Ic9ld|SXd1tGlLnj z3^vS(-i})5BHdU@tkgaMOnf*11Xq(1UI9Y|jSWjYOzi|wOyFIJT$il)VPVbqN zouz41Es=s^<6XDm2Tuo7_eU`v0`<*TD;2~Qtb=`3?Xw366{2UF<{9$m@JaJ5_h8bI z{DF_OH_K38FEtJi2K>wj~zIoDMrQ;|}knIPc+0nBLB z6|9@;i9pr{Mb%C#=WC9TQNnv}Pzkh775qqy3<=(DKsWK^Zi3vV8!a~yys!PM{&(d=96XHJ#pN)d7zyzG}!N3rMW{Hil6G!I&0GQ(PF34 zrjw?|IO)p*7!1e@p^4o(89KEbE@yVF+vL9$j9k1(i%Q_66}YVAay*#ceS)~#flD>I zNfiV!gx8629NO>9-DmR6jdNMcK7SvVO`XOtRk{5fCV>8YAzYm@(jz?7taHwee*XG1 zH)uf{MLLqnMX^Lk0V=HTEQ1jtC#R?KIW$or7MOgYkKU zorGMUn?}_1%-N;|Unzc5j;@UH2mW2D`|_7F0g^^P_8gV1)W{ArhprtDSY1bP9@F=a z6zbV9*~XPlmQ4nukY(U#MDDbBa^RF<2Ex~oDVK`;j2Y-Cbj3qGT98qsCFpjl(!43a zAWi67?aTqGn>1zsP~%9i=6k3V^lX@f^zZo6(lP0yiOl{Aoy=X5;7ZLI3M&Ny-f9&>_pBFW7yX% z6N#RxZ(uHkq7udugAkzA0=y2>`it5>qmw~K5O{31{?ya|9>DIggy@YuoI09OXp6$Q zS1_Ef)oux|o9O;*Zsqjk!{OqW^W9QT3n1z&WsD%HG9NK#qUM~qRs#3*tn1xSR@J5N z293SUW0gi{ncK@My)}$p)u?ppx&35k;u?FLEW>F;>9{rwzt$Qq1qcCF*+|Ct7d81_ z@Y-z;eU#b#6oBIH`55Z?4`VlgBbk|FJk_1$)i+h77QIleU4E#a zP58}nqNJMGbkfAvt46Rq`^LaUO`hNapxDYzhi}fH%rfIQjFv|#qam7iJiZ4+90(X? zZA|Ta9$Q`o*zm6Jmv-`@CgTrZ0nOLF6>B4a-jIe;^e)`f4R^?%d-EP=sUFjY2P%$d z$&pmzq0$yYvF*v&0t?>P^>!jO8l}%wo@n{<*xd+CM}xUVn~2}M<|J^D>z1)>6P9}o^}C=A+Z({kN1I6eN!)EuTZ#K>yC*fCTu)0$9? zXi;+fN~T#L)S;rLW8lANTsbv!v-5O;>fC^J?`|5XTvwAUdRVyL4yp4zhr>S|#0Bx= zNvrrJc9WBFZVkO#o*cgI0(u749j{Gs=&zRamDy~J+j;1V=eoDY&?;!yc8Mwt?92gJ zQB_cVJVynW>;#l<`CCG9uIoC@ELB(^dKOguc))ahs%eXo(UJDF7rdZ;oMvddAz3y58}GNr3PY>U&m=ZkW7#c2@bsS? zrae_K3a@z!3a0$tu+V?V^@=EA(sNmo<-N+!$IDy@8|sOMSR!Nag;47+rz-NTp0n|$ za_+_j0d8!suX@~*2mtXW{x+UxE*13xw@AOnn+|9f#0-r@cwa$BNl={zma7QS z^BJv=<|BGJ+ePzppdZ-C`PZ;tW8Hl-+;~gyWPAmk@fOr%NW^6bB~oB^sJQN}n1k+& zZngR69iR~CE8-)q_=HfV-?YE{YLaV>XMC<$#ok25U-8s`BUXiej7PY~KH5w*-$E!R zM1oaPHOp7LG4NKEi|(H!mRwDZ03mn`;NgzF6ZPvu1!CqJM{XPS65o5;Wl7Gmc(qoV zL@kDfIU?O|K^!Or$0~eS3VNb`rcMQ+RYX3p`=venB5X!Ku2`kK9)Z}P>as9h%1doTFRv5pK-jW;i(m%SP!$43EYGuVwGTk=Yj zqUdG6J%4aAqMEh~1S03fARp-oRK-O0Xb9b}c>vb&x}13PUj@1Uol_z2>+i%go06Ahikk{7+6D^bDBvL&g7Ym=I`N>?uG`A5&iq4GZHABG{AC8UqpF1( zl4qY&@O$>`+mT4kVuPa(nG78nd4d{mjI2V{X$#{s<5*g+DHGC>u_9<}?80=#TLRf> zlNmJAX!)f3DIkRmYKR++YPLwA$G7u8QR~IbPO*5xMQo)jr?r}Su3V_w>zSL3nip%? znYq0Mg7EiL72DmBOvHALB|B`1$pKn-TtUT}hYltU&5S?7#9je`YXe9l-CEAn_}(9RGA$57|b#jy&Hp zebfkP7q{SaYiy{sPLRhN84JG@)&AF=PWqkoV>#7M(9nSR$T@M}2&gPezRbgfw>XEDz{50e8Y z$JD_VlP;nNx2+sYH5Cg7V{*)S&NQu z45Sqzxe){e`SfaE=5cYCa&8;?Biika7TTUUvL0@fHCLZ~rwt7tnS(X!({QkR*if?3n1tpYNUA4VP9KaB41JZ*clqmM^pmnkzj{$T7<&*eLb+ zv0cx}h}bVHaZkgyc%3D=|9{-MgmNzQL7Hq-n`T+1WEuIG20kKMzCh=CxYOcvRC{*V z-Z=SQ_Jji45|kjS8DO@APau4_n;_HGtFCy)!xTK>+O{tlUWJmOqT~JL1B;$&eJyo8 zI$D|vz@lrcVW?l=|#T%XtK;~9#5pNAYV)v$g7B1bD80eh9kK;wO>6!(e1`lUQY>q5n(Cf z#Q?TNP6hV#*aCT++mCteRhL1_sAz=Vxoh8n)l%2SrF1_bf7r~ud}PhCSm4)jF%zG_ ze9_!QY;>h%C&|rCzfew7g|TkR-YuO}@qJmK%^ez4;m-wMU5nQEiv4;9tQ5CFKAL5Q zaWqY(9JkbzQ3@4()8iISsr*N6Es~P0&}%q+#1Sx~2PjFM-(wkX8WAtCw=65%7R-Tj zHWHaB%#-7LBf$POC$L)3T@$`KDK{HcM?plWGhnq}I5v47m)hIGfYYz0mrjyO-*e!t$-8nJd z5dMnVM!|_-0A5TP$E}_;`4V)?Z4RUcdQO0H@)lSf(&?7lqNtiQ*swiE z#R4*db1nnQ!JnzcH^cA5!Sz9**?mLB(0@G^jsCEIY1|^@OzUpC}=< zAjXZKeWALfeJUIapa@+*!QVnDLK@PW2P%!jbQCp^)bypcO+Jqhu{I6CG5hyy zP~t)Ni~$B@JT>rg?4p<$9OM>id!zf{^tURto^hRu!_d*(XpK17oI1qqqx+DpQdzze zgz*4KYdBa<`W#hK8`g9w-S?zoUuU{-Ra#E`z#MCM{)JY)c$rS0*Hqy=Yq=dNbn3d( z#2d`QS{^SsK<-)N^o&0By)mWh3NtTpx@w-Ptz=6h;f_|hdGG-LwBuAEfti4w!>r5l zl~hax5a2I8OHlqEYY2INwCyQ@CULlOjohZ}LCwpf-KAb&3vCVZg`sO2@OScU8iRNd4mOKe!=lOJwt^~QEy(9?}8d9PMk6`@6pl323 z{Vg)b&-`p}I`olX&Zl5y4K`Yp#w0T)@jMQ7+dprjPnDANCVBx~&jL#PN-RGApG<<~ zqPa;MUqD<4-EGJ1`pOAV*rMBYFqkuBy|fw^!>vX7GIu2B%M%>UivrkK&vP_4nWd7~ z%X6Sg;ZAgdN8hi7?ynhxWFn4OdD{F6ZK$9C{h~7%pw%};;W~A(rj#9siXO^gDI&5} zyXTQ=?Rt+UlPlvndY0jS`wST-Qk$c2Dsn6rBaU$gHLP@A3X>Oh!hElz_>FB6 zXTLx$M=#aglPz>Xj5t1Wtvfx9->9}GMXZ$4c`kG--)yEP!fYTVT4!$s^gU)t73W{T z%tnoWds`MU0g92=6Jgi>iDXAV1TJ?nuB6@#rs-Rt9ptszen}9Ep1M4^qGGut5$y$3 z%Q>8PPn^VaRj>lJmMWFA>!?Z#etx^+G$|u%WO^;ohYLveT0t|h;OdgqaEi=RppwK* zFhEZ=dfGsi<2j=f_)GmwYR}#&@4-z&UX&LK#WLW?(3fr|K&^k4pz*b&cqSdRr#c(x zaTQUnlV&2pGR=W3(x4tKQdityrE9K+I06`Bp7T>zx-BQL12$?Yq3PRcdk|j#JiSs@t(-@Nxr2uETl1sJoN$*ca&twee%c z=fa!|b#;1YoMsJJ-|Iks)?Gva3FaR0`lq7Dda2?LHswf&NJ8$G@MSoFgbz2@At*3Q z<7n*jtu+$UpK+j3Yw+p-4V0@&?#8B)0ct@n>i>A1zj~<992>b|8!#D=8!aYXvg~Uy zzy}=&tCH*TdMST~GGaqvp>FN`c&xEpg{|%oK$b;Qq`Cz%&oMh$>dComzjbF#zqyj@ zO7xQ_eZ65%Wz;PJ=PFP@-QVi2Lf)hjSmfU}zwiB{itOVnyQzw&OhVN&H}gkt@A}YR z)RN2dg~j*gKDhyM-K6?5)%R+)a+jx5Ua?u~4pGx_X_OiV^EDz#w+acT_qi3?Y;764 zQ{KY%{;*H`6A`^FG}nRO5kKhgX2vtDM$71)d0&eU9ggiI{KZ#^cZIME@Z)6!%bi~e zGbVkOp_<|D^6O4}U5X?6h+tgyfN%Nsx{9~fX?J)^UTcc#-NR93?4LxZKVO{xrWd$C zk?sSpTBNe z&>2P}&kz>~QTgXVd|Ofyn2=!GDU$rn?EHH5>Ir~LB4Wzk|4NqqJuvJGYU@MbZ(6>; zI3DUxFG0AKJ)HKdVa+cnK6vycqZiuB|ASvr1~Gz6`eUnqqRIcczt9UXQi2~TEdShW z{`2F~UV(elvzz@US^N9h_!qR>HM2ykzuY$>h32m0&Pr%xaqcvqG6Kd8iP z(6~DKrR?PY=o9u1EdS$HF{A&p5`QeeWIDLFviTs}F)@pQuR+%aVCoA)~yQy#&v+SoRz zc_dQhtYXA4Bkt(xVj%wK=kCGTb+>(RKkrd=wDO$S*m=`LUc z8D?|c!6ezy8XB~qkX>k#nDVTL-s(`(;&B+Miax1Mbn$OqmO zAQL@~Nmwn%%@C6og|Murz344y|27JQ+ljfe@2eNS$P2K8P586R`ROhEt+tH`NDly% zEzf)7xEbb=fm7JCZmhj1g`@(m$a*O17+W1aMjL2lQ8vB9c@frJ}d_*AAV~rsIs4@c)Av1uoJB;G8&Ouep z+w!oL5DCg7!SisSu5Ou?``!lpwt6X?rmbRQI5xG=$Ee2hM})G=wZQ-oJF-fnCm6AL zo=65Z*&*ZRcQ8u^)HEcr`s~9kLVk|0q`FUfS=Gi7zO3* zKvs|+v(7|46isGx61>?9j4(`&4>k=efdJ6bd?d$+!+P2@!ShTE zaxKGmw=ON(CWR(n^sEDOf~@oo{e zam$kXHFo?vbV1uX4^EY4P7V}3`>S`m7*4uBi>)dZ{o%O$=N9w*Vh3S%iNbljIbJ*i z?>*R@D2%qZ5Ip0W+Llv{W!(YA9Q)`3nT!w$h)Fr2pQmkKXCUKoH8-$w@eouhPQFpl z6_I-=i$~>A(%370f&p>^LI_qHEJC5T`4IkSSh(;l{jqZsCbyt3o5Q6*gGa}Avwjl^ zMPI$DUKaCb8>endBXYqP~c*LD~#XCH9CMPs_}GF$|ehydFP5Z=4Rpi zZc{Ze=&78tXwBHB0iw7f6gskz&l>K!&JNihQESWUO*X|Kje&kAREw4&3!uzz6f^S_ z_T2tlEG0$-P&kV|0kq8d?sgq(+w4DF$?0x_tt+raX>aTPkpC>BMoC`Bg>%qgoNco{ z;9i!;tLGlfND89??W5)>$FrX<5xVtQ2SUhUKHRTu+vI{cTtJK0SRH(Sva>&?)I)W) zV;WbUjkpS4>*zv`!Rc~LfT*0lTx5p}fY7ANhQoQ*`l3_%2FIp$_!-&nB(1jrHJBY= zsuY$2fFPTznG3ib+V&)v-+NsmHsKrtQ#hY~!SS)8+-BAT+Ms$LUQC1f!4yc$Bv&St z`u-7cH!=h!KA-Iy@f%D((=N8p>byebLRH#ybd7cw3s2}HbsV!BDJ%?;h-cy=o9wi@ zJOPvO+xc91>kqZ|>PEy%5?j>AbV`l$2bN2zmxV^cFBP2Z7oI;iZ1-4!XKb(&qRKCn z?sU5)Sz9baFn?gY7G38-Bv!*L%bR>aP+kZ=rCDvj{heA>hRtrzfO_Cf{zu0y((N$B z9EQ;T+6bg_rSV{GWT?z+XtH5!86XF}XUzYYgA~S3UlLvoZ>QbcKTi#9BYXC4r{xyw zY3-o47x)HQfFTAuN31*+ht=d8wqYB9!Nb>UJ!Swx-@4_*TefC@cv~Oy%iZTk8>JuH z^7}W|ZjrL}^Bu2jUoZpHjOQwWB`3#YoD)1ZUuxWbj$a?7puXt4bcXvr*D%qn<4<1Ym%?EN1(8$+4$sMvd4 zMU9OV4Pg-xMyx2{4r5C6tP2~Tq5tR9EF52#e+&(ZxsifYeKhJ)xn_ds4G4nj{4f*m zajoH6qpD8B>4BCkC}^0mMo(5loU~AWWCg5Fv+kLAUFPWsYytt4kGk|}O_%0r<2l;b zY`Utrktqz19|gYi@1VS+7T&Bldt6~If;!)6IiH2Qd{a|Nb9bgorjfm?{PL;SxY&v1 zw}1~m`ov)ddY0-!(-DNlsFDW(3^*x+mgC<-=+@{}m7mg4UuTqE^?qm2a3ml11!A)$ zyCq9g?E;@=isK&Y>w)y~KRieG)m28x#q(U%p>!CY?U}9?tTutJ^jq|JT_(O}RE&Ro zGVO-UFOYl+yfWf4Cszhidw}kqtf+CLgrOJojVD2tMr7K>1-)5bstx<*d^k@reM0H- zCT(^4$Q1eQ%B>hRU6+wwt^K{Ds->@FGQh1vyA+s2U06d|vsz8AH;}1if=|5y9?V?H zyF<9Y)OCsyobz#fpIFa-Fh1jsz`9x2qYQxh+;%<=s~DPLGi`Q@QG17g<7y~4D}lbk zaEA5H8H><%r}q^mX4-^tR)l)E#^APb@g0VG-qie8=`S<1Di?g9`=AC|jIVKEpWFY^ zRq9KZuM1tmxa|cl6%wvfD|{`k-7oaiv7v-o$|NX0xfGIed0he;cDgKhi}&?1IK$Nv zYVbK)ejqT`BZ!IU%BSt;z6swkP^kJs!U|{gr*wTs_(->+{b2q&`-jZH2V|cV#0siwZ4jg@)rbWysmlmEAH$zr-k zpcT3Bn)h|{o1ye>W=HI!i90`%w=IwNoPd5tCvTj;sm#Xn159p(ZUDF<+`pW;A|7+T znwe;3UB90(r}2r->2#m7rWh1n@n?9RH+a(#%?QxY(EO+tJQ!yjP?@f-`vKBNLmqps z$@ujnUeq*h51EZj@RUDVhP1%7m!p>7mgnj+Sg%r?L z{H%{QBx2WA0t0|a-{iq|lph|Ms2cNe&`ok@qXai2Nw3<4klL9@I(Y%^wlaY48uJ@D zZj2AO-ybSoP!x`D_So91gL|NLm<4Utv|&FniM8Kgc4Z^x{UxG+eCFzyata%~7x<1< zyUf2Q?j1OgPEpTbGOO!NIAzC3_iwuMpEv5iFBcsO=(oH3pM_Hs5YZBbi|W2%Ic4T? z+#u*f<^lGGk%_-PoqHi@DCnyiXv|G>+vOoW*lmYL1_bjpHwn`oX-X;YR&+DU<_ir^ zT@*+@)u|bF#S*~Zqk$E!4$a!b0~$OIvjo%Fjcs-f!WHN&W@^eUoCc+6NwLlGG3(=P zUvO%DUFTkE&os(-J+M)=5K{g?QLq%qO5(GA4l6Chf1tL@(yfpCFp`<*k+XkLH|Fq6 zzEvG#36$opGHr$w*0HePPH)DXua2{S6&jTgIDfpl+KIeX8QD(*6VdR$DWSnE4!3fM zI@cx~pvsN5C;ra%5SYHLDUIQJM2Z-CijZAC>O!}OJ$%2iBGGv9L z<;yIboJA={N?&|rx*5Xn8b>}1U5;NBZXne5aSLYn`lxHxbqmwojNEE+Bk~jguM+lV zsFv;u#YA6M3SP$$x?8ZLQ7xNLIwUQPgaCQjSp6BWRC80bEz^w>rU?FyQxBf;ZbBn$ z+N9R7ss|_HjuFq%La54wBif7ah%~fd*)xw;FM&tZ@@AKcJWPB%&zUk@>pq+I;-KS1 zHN%)m*Vac8#e(Hx$Z~-&bX|owTx$YeIT7_ zNA{a^bay}<{MKFMnf2r^)7Fip?7n0$-v{T#Qi?6wZbcoKM%MBj?r_EiuD4K37YPpYyVZs3ARM}C6@CZ~V;{(-#9F;$Ij4D4W?>pC>gy;J z36DFgdl;fQxw%=h?k7Htm00Lb<$tTOFOhT;ww_-G?>%$<8KRPlV02XnLfSg>MUnr; z9)F$`PX9S6a05S2#@a%k&Etj|Hu+%MVM{IcpZR<@0@?YE8d6q-6wQ3I2f^*d@6vH^ zU&4~;G@Wlq$Wn6eo+ZI^3lWUmY8kUbimSTya-1F{^?lM^53P@=sRzc!0nYHC1fZHE zafLdu3<~DhmSw6j{PWIT|nbnp^f9a#^G(qqZej@v)! zZa{DGIz7$y+`AdgzFwMy9+KnbmXx3k;rdZTy`Gu)HnDn#*AChc%g%LPtyPZW%~GZD z@V70|`>p&X?~)rc&08}N{^Exn_8ZPY-22129L-44b-b?(3K5H+2qU;Hcf$isW@@RH z57GnG5-dH&Efk?m@$LsMjB7)pZ$wWiUw}(0RP}8!)7JKDR9#iL;XCPEh~E zXK%3+cC1A9j!sP!j|C}3M?Jg{Du_R<{sv`Pzn0U4jr~(NmFuGqf-qAWaKBrPovvZ zcYWd{?ueF#Gbg&(vI2UuyTY<_SA+ciFVQi$42NP|4>wvNa@=&y3%-kneYoSk)8x;X zV?9-YRdu}-Y56Jk2TSd2THqpsVzyRg0>|^#GY)l0>DnGX;}MNo)6z zTti!0sk`JoX1hAZE(V#-bnMmQ&n3ws=Xd69La(C zbckt*rAC3mJ;hJ3kD{iSWh8uuq_hWAwnDtXet{KL*KRSI+!A(&(g$d=9yuf2}M(M}Tn2JDPTlHwTvy36Q2LD3kM#B&% zVAhPDSe*>GHablCGW$9Z=K zdA{PzY+!t>koolS-H~Z6=juvWsW+S3;HDO7T&s+7Ky<8R#sNOL;F%Qhkw$mItQ&GO zDVk58Fkb`i$7)<>CDs)0TOvxJRf*^mu^JrAc{DjJ`Sc=~?(w}P5NAuKr)V%?6scoS zCXr@2oHf9~-!FE@b8n#CjUD~I$wioFqIIrGZF2d9b)k}|>Svo4&UB&D7+qK0X9~lT z{ra)Ot@@4C%=QU>D_o+ErSj+%mZLZAX~)27&)Rnf4C&!;FJtWnzG5K=zwZzS*%@3R z!GtFbKz-Y?7Q;pp~7eq8RBJGP@(7h$E%aKH` zQY)VyHAWN2aXq=cy_lc%jSP4oFarmHnVx85L^TRN?S+4bm@%EeMdWOON^Pos)i|~i z?%IpVh7DDrpA##i%_gR17p1aacu$;Bb;rV`@~U+7S=M&{JY8f0k3$SD9Ra+u!~{m5 zt)X#7TX#bZ#X9LY<1j|eP{+sJ5hQuHuH8g*{~j&A`y*u#(V#$rLB-}zIVq6!h^Ypk z5bRv?kMHmw027)g$%tKgpq~tU&?<#F?XuJ4sl~kSz+f+ZuSYM9=V+1Oio7ni^<=5C zu+m~O!w@_gy;*7VV&S8TlmVP3l<%(dSx%qJ@+rRow~Kx4k0>?!#P9C#3ai+p?#Xfs z63k-y71}#@SXat!e*{3gXxSh-DTz6okEiN0&y!B@7E>?8y+fr06X`Cn-6#7;xKRx% zr8N9(zWA8iZ@HDtlx_(+Mz0~8Bp)5WLy_FT!IzwN7^}DLOwVy#cZ`eXN3#;Is$(Rc z9Rjp3o?xd&dhW${1+j#%09Q9qVFFy$GqIZP5ATC0n#AtC$W1fi>n{Ol9*r%bDX>{K zU5`H^`Qu9^YWDnFfV|Ra_R?u3wT>!*fTUj=EmNH-E^avf+a(7T(#OJ?k$BJ9tR}nf zXc4w*eogFfM)Y*fz!YE^3I3uo(ltvI3}5c;&z|>{!K*@}OZ#|+OnJR#9H-cgy`pSq zajrsE)35kEbz$@OUC_2y+!BZoPJc*%|0B`W+_L{=qJ>L*TPc{vx`sf8M%ma=VKtzt zRrv%@z@F*eF}ct{JlnN>`C}%oBdPiF`-5>B{;GsUR&9GvD54sjv|P6EmBS5a z>5htc5?ZEP|F*mQJh^fuiE~oEFZSyFZNkiz-q-(Mci;U__4~$;G)R$=B9ZJ_WM!8< zOR|np#z91g<2Xk2PMImfv9m{HAA3|X4jm(VoRA}NoXlhU-YUKI{(e9Iz}Jr+uXB&< zzV2&2@9QEcS#S?psW0W-ObcA-dR68;1{`7bz=0Zg$rsbq7@1v5WWaj>Dak4d4o;A` z)9^%*)fZF4b}{N1V}@Dk_h+XrK92L+p%Xi-u;{VU`?%d4fuGTRY{gE@_S^MU^r09V z6E%D{vCs@V(H8vD4!c8B-Tb|S!u_V{lEyd7CvQI2`BbM&Jv&8>?9I~@?tbV?EVXJr z*;w(_-z>qvlz>zExQs`+1>B<@zWgT&^GoIAT>GiPTj71f_uu`ae)&*{9kwOeFNrl& zT(;IG!hrpp>xm!*W8)X6s(Zg}68s7SS`!sFC)Ctrs2~Hg&fqpHz992! z(Zt7CoIV1VyU_T33FB7FMI4ic@#ehksYOU6m%f9Xd<7LoOFx+KQ}G%Wi!A^gL~XG9ou43q=)Ol=t$(5U9D%b2fIhV6Hb$w}F>OjeP-B zudb54X{AiNyNEU=RPJupk8onUMlIZXd!fJpKQ%}jM}J0rA`b;3R4c7y&+k6(vbz8Y zj>tjYI6mo%=rv%mLp7bdYh^v7zK>aIJX!U%&e zwn2AvzV1ho9uf+ArerZhfXerMOZzyV&jX=alasvmA6t~4oc&c=u}ChZWO#eK7JuL} z?4~vFs=HLyS-vV|0>5BD?X!IRuyeiWvGC4%KdcN{>wI-q{7jEqLm10ul%{^3!RS0U zy#B-w7bM66&6+03B-C*CO~qK)%va5N^whxJN<0@VmnK4lrMglo77TOrngq*M0(v@M zzrUZ3uY>~2S0@5I@Ze>v!GVOm1V%2tBx-viO}tBl`82eYTsc+!3O7erzl26}R2sI(kFzeA+^kp6vXM$vZncJ z!hBMgafzJ!&2QUfrKUbVzT{~Ee{gs3g<%d`3H6%57EJ+A~|!{ISBZj9OLLVB@8xkSnRwkrP$yG$f^tE3sDLA@h6_ z)ax=&p0r1Fiaz{yso$$B^$9K-;&j}rYNby)LBW`xUKVny(no(jWx^t;$cit!eMBa*)n@w5<1Y^7esT7jwPO-@Jady983_)%$JW>Vy=5+YwXm62 zq>pbLxi*K9Iebc?T5ID%47Z}tmKM(~%^}3f)lrqSIv%?iyK9)d)s>z_PYRtFQ;|#1 zTQ04-DQ~PEUzvedOebwxmdC)xK~CB#x(OXc!>$80gBaCDW)rBeTAVuZd3~BU7 z51kyq+WFn`F|elO=`Fl_C`Ra$-&cyY`DM?%joW&7*| zO70XT$zoM7ory49-SO1g+O$KQ>mEC??bA9h272pP$6whCYixfIsihXG_~LD-Z$iKs zO&*&LW0k)k*;~SPm-+GEnk9mdoG%OXCf<|*!Ak2Gv`*2xHZ|^NN*LAiqVJzlmz=*s zFcNOO+STNw`%aaWg@HVHfq|o-W@jT$vGfl7Ea-tCnU;a+%CsA&4Y7fOCe5q4mxpH#%!=|m_(;H;0cBlMux*$U0*NC1wPj#3Ri+hw$Pw^^rk4I zQd>Ta>Btm);ViFndXu*LkJdkaATMPp_8bZ7z#F#WZ)AW>lU)kDyoNUD^3ThrSS+?$A%sI5+Ah%>-=5w1$|>H6E#OG(Qkrd}~R ze!wq1p6==IJ;N}y0eU=Kwzs#JlYX5hr+F(=#!8mBI1kA=HW|tNT!M)8d%p4=y+ER^ z8G)BoKPgk$vdwkynrf1z99GuDbA)bf%v#R+mo^3mbLl|0rWnZs;--690S3QzT<;BOy z%Yst#*j>|prGRNoVcBG@CE7g5XZWjuhKYv)!XH2othe?#lZ4YbV(r&>;v6U$$ERS? zGFPGtNoFA$4PX*iS9=kKpsp%3E0L*rd+Q%z({2LpN13+?#KKNq7pXJ|V&luo|8-*1 z$w|rE$epe1k4I6Q47tY;`zRpuoS!%KQZFcN_=G#jbHwY3hwzfp1VxmM%NOu;m?|2E zUaF`_g~c>gM!&jTyV5tD>5O#?tuf2eMh|M1z6rgL2upM5pP!m{tE)9~G5gDuN%5w= z69ikYaSml7Qz5l?suqO3?OvGVzLs%@g6Gk5EJ6?c1>hP?Lu-3(3y=-0P zua-7=MH!PNYrY*rLwo=Iu#vvx8LcyaS>9^Kz#ZpBI3SIb**fdCFNhDpKkXogC`tI` z$f#wn@O{%#%nWuIgm>}=$&ilq zRcJk>kRl*ezD)IRc5r{TU!T!~w_L>}3iSWExqE5EUmtR+f)Bn9bc^o)H z&H{fdS@R$zQv~QDj`6y<0-S?R>>E(@K$=fCP|Y}+aNg?oY*C;IVbs*L`DML>%pb)^ zN)Z7;Ik}T%)IZqs3wULz!uJoE9smN{EF0Ch_y4iC0ySB(yVM#TI!RF=FPjNk^e7l7yNy)k z3o5!_H{(Vi1;~4k$G`797@#VYrBF*)mS=h@!=0stv;=udn?CTy7Qj2_SF@GUN0MMc z4!^00{uY}Qf&5Yo*7nFH+!Hb>7HK@K|1Xcx zJW^<4`>}`?j`!W(I2#l-6#0`&(w8^&45%pEX@83(|97-Naz%_JRZF;tO?#tw{;xqU z`~coj94KEGuN^NgrK=&VcP~c*UCaN;twHN|boL2=MFSX z0`jwu9At*z>v!6scy-d-+uNyD)0fe;r+5#J(z>^j0HdexhpUE?{lutWh)_7`Klvlh zXtE{A%{|8tyR8n|G6zNZR>DA0j>li57@m@g?tjI06L5Rb%iuIB<<`~^s1d}+c4vO}Be(;S^9JcLP=>YFakRK;YkeB()|+9=AvOtg*2lwb zXC<5xAoH@5kKcAkUOaKrm$lG@LL{Fra{O3RP7NaOUYIASQ5PJCFL5p0!v$eLM!afCt z7SeE=2<^A=o7u$$5|x!HEqgrRVM>A?BsPL$Br(XSjw=?4`y;2WqtZ&f5Do=Cwn3 zNTmnf1iTu$T5|XO5fmzeFDINFtvALbe@2*MU$~ablgjX*c4hC7?;ph8+3~>0nXcH~ z0ba0mxb(c_#c`L9p=TS<(bG(Wt0lge3rdKW9}m0*(2=)5h7wg%4XUDK0!(NoKtrk6 zziN%7-M`lSadRR}MmaD7=5|A##z4CZppxr0}GSFad6EpXl&_7onafwv0*=eXW=eP%` zd~1u+M}Rj;pt{cn2v5i<%9|9(dM(?*>d->flEUh6(|Z;gES&nFMFRh|Y$~S6eM2PW z9k68HJU}H-9MoKFa575ki-cwnqG)~i{d21$5OadqorPvrGu!DzSP~t(4+d102}DXb zCpp{#8Gmle?>sJg&4mg%oMWDPUatE_H3Pt!+B8*9xBq3Cs?$X%7{4`_Edh{)t1hme z5~Q36Y7`-q0X z^5bc1av`1H@`NE8toBLmiq>BYe3&jma>j2D-iX5_6KYsFuWBSLPoxD*gThHoaHEaA zR%CYOzUwyqV+hSQI=X#sAR)U84}CJtEp7OAX8#TZ>ox}>IVvyUO`p<&z5O^06i{C@y8nYDSH&olhN|#8RXwH z$Tyj);Vgrt2aEs}*L=9@g;CBTAm`Qbn_V@WMr|B-$^igIkYK=qjCP+?p1JYkkB#GZ zs%2e}^xVOF0azsUm|8+qO7=FF`v^z{9Cu7}6C8|gW!4*eMJvQ0kOllS9MEABz*Z3h zyj?d4o`eUO_o_^!Z#4bUxR1DRwC-HHnLEpm+bwQ4Lp)#R@}=76kKZ&AQB$x?RZ`!b zJgf=7es2)96BR*|qaaC{l$H$kq};CL1KM+eg-0v!5;O&g2CT^d9ZmN-9U zjr|{IKLaG@pD?ribdVTo5syB!{7B8Sd#eiCat5JRGxQ4+K&k4{pvZ9%iiF&>G)76f zb7Z~y+g5Yg^Syi@BhT-1>)vR=8f+#}RKzTipzy_1{Zc2v^=P6saDfwOa;8SclMA__ z6|CL+)9RaoAsC2bqHg>0Yj1FRq=F|B743O;+l zW!%y!PT5m`SnmV-BZadel<+^(?r9ALJ#vm~UWy_)f%<`9yNL}i#o{|sdy(qI;Z(&F zC6MiV>Zr6mE6_g`*b@SLibDs*&M&>wcFbRw(fN{LeR*ML+B%FFjf;S~Q;sGD?#)Db z{n2R7@#|sYe@(k*hWLx9-C5rdRA%b64e4jhkqz5BQ2IcU^HEP;t1urV;jc?`mg9l< z>_#Tkgfq=%?C_ujTBO}}7yT?dI+4Ytjbd*=JzzK)^Tk#kJ9vaY$(8beTtwVibXEk# zIpUd|=z#Qr72NkIh=&pb!$uufozFtwNz^wBaWL+Ygclr#fXx@vlYbF*PXI^o_@n$x ztmfm^<6DQKYaFafSaOkFS@U%XOSkqV0JuPJJ=cG~WlLJhpGGAJ-OV2i2-^KNQK8gPaS`~0b=|L+cWhCZ8LdIPmAGjXEjZ^@o|0P)CsZXKbo>h{n=^OdgYRdn62b>t4Ra5kG^5; zL7P_ut~uMF>~~w2+MStQSJSIDD^BBnM7yKs@0>NR>X_-<~rTNTkU_pxu0iB8KM%KhF)PdyHu`#ft7e*IL@yD#O_# zOk>JA()-`u^}=IYt~eXjo_VWRRIQOg)LqlrIlEE3(*kwZzP;JbWoa_xld>&)b<44t zmfKmf9J%f>^HHfP{p21K(q5#2oaHG(XQ(tU;=DFOUP0Sq_${^U%Fx4&lx7kS?V%^{ z8*r;67RPhSi*>vW-qsZ^+FcE8Eq!NUEDk>|yNI>HRT2ytB-(ta#y=pjcmjJNp=|heJL`d+N=sn#EsuDCehb8V&9k&^lv~sjJCqo3J_8DCzt! zkqqy946fPuS`9M|S=zdVuI_A%RqJ5{j`*k2RE*;-I%;l9X~xg5|L}v>bCqd%r7!Xi^#FVLpRn?sYrhh_=Pn^Snu1-|7J58a`-7J_%q;!f-HmO?8J zbcv~S{l<8)(ZtsW{5s!>c76O$)L#H0RDKjVpBy<3Vk4ZwpCsf5oV%Aq;nQZ@L)UtI zFdNY9ZQb;m0cGKKH#h0cM=Tv!Y6m^@Ko(ene8GTSU~T1q0JehDDe*xg^HP88u8_I2 zlT>-7lqYIp{j^z9=2D+^9NYpL*Y9g`-)UxOq_q5eJg2=CR8V3P`u0kGe#PS23?lk# z#>DD&*!Jnw%z7C%pNzD)elfxCh7!^cLO0XxyfbhX#-_Sr#I)(<6~_K1$TX^~i*kuE zI>c3QC{xbA$>AcFj$fpl?MCL#ePN=gK*uhMZo8h7K~7T>|FY#SK_J{y&LjU;$DFmH zSt)-emYV(QboytCEhp^4-JY17c>HOVUd=Bs3ZJ{or@6Od`d985Toz>hB73%udZ9aL z=Ti(NA=#5EIF3~}LF+SfNp^ph>>lF<9HZA};mIb_3na^I5|6ovj0OwZ4rQF}n4=9_ zK|(rUXz@7PdI*DO=+xxeZLXQEtr%kG5&ptx7-DBuzWteQw2D@m*Q+*M1DBX~Jc~md zZk6%fZvL>PuTf=}ko?%!Xz#q@4^#YE+m;)I`n0nTJR8~bckWcCZ0nrre?i0s+>UQI zowZ-6WhkjVI^KN((*EQYF5c}8iT7O!$_A|QU4!xq4x64Rry^$0S!PG)`)_V|<(X;Z z@&q*5yBRuCRxM$3kDldVi{S8|T+OyMFS1~7SuPkrWWC&GztB2WA|n0e|Ys LI!XoC?gacF8kcHZ literal 0 HcmV?d00001 diff --git a/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md b/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md index 817a490ecda..7882e6d9be4 100644 --- a/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md +++ b/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad.md @@ -167,7 +167,7 @@ Custom Endpoints are not tested or fully supported by Rancher. You'll also need to manually enter the Graph, Token, and Auth Endpoints. -- From App registrations, click Endpoints: +- From **App registrations**, click **Endpoints**: ![Click Endpoints](/img/endpoints.png) @@ -221,6 +221,8 @@ To complete configuration, enter information about your AD instance in the Ranch https://graph.microsoft.com/abb5adde-bee8-4821-8b03-e63efdc7701c +1. (Optional) In Rancher v2.9.0 and later, you can filter users' group memberships in Azure AD to reduce the amount of log data generated. See steps 4–5 of [Filtering Users by Azure AD Auth Group Memberships](#filtering-users-by-azure-ad-auth-group-memberships) for full instructions. + 1. Click **Enable**. **Result:** Azure Active Directory authentication is configured. @@ -314,6 +316,29 @@ Endpoint | https://login.partner.microsoftonline.cn/ Graph Endpoint | https://microsoftgraph.chinacloudapi.cn Token Endpoint | https://login.partner.microsoftonline.cn/{tenantID}/oauth2/v2.0/token +## Filtering Users by Azure AD Auth Group Memberships + +In Rancher v2.9.0 and later, you can filter users' group memberships from Azure AD to reduce the amount of log data generated. If you did not filter group memberships during initial setup, you can still add filters on an existing Azure AD configuration. + +:::warning + +Filtering out a user group membership affects more than just logging. + +Since the filter prevents Rancher from seeing that the user belongs to an excluded group, it also does not see any permissions from that group. This means that excluding a group from the filter can have the side effect of denying users permissions they should have. + +::: + +1. In Rancher, in the top left corner, click **☰ > Users & Authentication**. + +1. In the left navigation menu, click **Auth Provider**. + +1. Click **AzureAD**. + +1. Click the checkbox next to **Limit users by group membership**. + +1. Enter an [OData filter clause](https://learn.microsoft.com/en-us/odata/concepts/queryoptions-overview#filter) into the **Group Membership Filter** field. For example, if you want to limit logging to group memberships whose name starts with `test`, click the checkbox and enter `startswith(displayName,'test')`. + +![Adding a group membership filter to Azure AD](/img/auth-setup-azure-ad-filter.png) ## Deprecated Azure AD Graph API