Vh.ddlmZmZmZeZdZdZdZddl m Z ddl m Z m Z ddlmZgdgd gd gd gd gd dZdZedk(reyy))absolute_importdivisionprint_functiona# module: redfish_command short_description: Manages Out-Of-Band controllers using Redfish APIs description: - Builds Redfish URIs locally and sends them to remote OOB controllers to perform an action. - Manages OOB controller ex. reboot, log management. - Manages OOB controller users ex. add, remove, update. - Manages system power ex. on, off, graceful and forced reboot. extends_documentation_fragment: - community.general.attributes - community.general.redfish attributes: check_mode: support: none diff_mode: support: none options: category: required: true description: - Category to execute on OOB controller. type: str command: required: true description: - List of commands to execute on OOB controller. type: list elements: str baseuri: required: true description: - Base URI of OOB controller. type: str username: description: - Username for authenticating to OOB controller. type: str password: description: - Password for authenticating to OOB controller. type: str auth_token: description: - Security token for authenticating to OOB controller. type: str version_added: 2.3.0 session_uri: description: - URI of the session resource. type: str version_added: 2.3.0 id: required: false aliases: [account_id] description: - ID of account to delete/modify. - Can also be used in account creation to work around vendor issues where the ID of the new user is required in the POST request. type: str new_username: required: false aliases: [account_username] description: - Username of account to add/delete/modify. type: str new_password: required: false aliases: [account_password] description: - New password of account to add/modify. type: str roleid: required: false aliases: [account_roleid] description: - Role of account to add/modify. type: str account_types: required: false aliases: [account_accounttypes] description: - Array of account types to apply to a user account. type: list elements: str version_added: '7.2.0' oem_account_types: required: false aliases: [account_oemaccounttypes] description: - Array of OEM account types to apply to a user account. type: list elements: str version_added: '7.2.0' bootdevice: required: false description: - Boot device when setting boot configuration. type: str timeout: description: - Timeout in seconds for HTTP requests to OOB controller. - The default value for this parameter changed from V(10) to V(60) in community.general 9.0.0. type: int default: 60 boot_override_mode: description: - Boot mode when using an override. type: str choices: [Legacy, UEFI] version_added: 3.5.0 uefi_target: required: false description: - UEFI boot target when bootdevice is "UefiTarget". type: str boot_next: required: false description: - BootNext target when bootdevice is "UefiBootNext". type: str update_username: required: false aliases: [account_updatename] description: - New user name for updating account_username. type: str version_added: '0.2.0' account_properties: required: false description: - Properties of account service to update. type: dict default: {} version_added: '0.2.0' resource_id: required: false description: - ID of the System, Manager or Chassis to modify. type: str version_added: '0.2.0' update_image_uri: required: false description: - URI of the image for the update. type: str version_added: '0.2.0' update_image_file: required: false description: - Filename, with optional path, of the image for the update. type: path version_added: '7.1.0' update_protocol: required: false description: - Protocol for the update. type: str version_added: '0.2.0' update_targets: required: false description: - List of target resource URIs to apply the update to. type: list elements: str default: [] version_added: '0.2.0' update_creds: required: false description: - Credentials for retrieving the update image. type: dict version_added: '0.2.0' suboptions: username: required: false description: - Username for retrieving the update image. type: str password: required: false description: - Password for retrieving the update image. type: str update_apply_time: required: false description: - Time when to apply the update. type: str choices: - Immediate - OnReset - AtMaintenanceWindowStart - InMaintenanceWindowOnReset - OnStartUpdateRequest version_added: '6.1.0' update_oem_params: required: false description: - Properties for HTTP Multipart Push Updates. type: dict version_added: '7.5.0' update_handle: required: false description: - Handle to check the status of an update in progress. type: str version_added: '6.1.0' update_custom_oem_header: required: false description: - Optional OEM header, sent as separate form-data for the Multipart HTTP push update. - The header shall start with "Oem" according to DMTF Redfish spec 12.6.2.2. - For more details, see U(https://www.dmtf.org/sites/default/files/standards/documents/DSP0266_1.21.0.html). - If set, then O(update_custom_oem_params) is required too. type: str version_added: '10.1.0' update_custom_oem_params: required: false description: - Custom OEM properties for HTTP Multipart Push updates. - If set, then O(update_custom_oem_header) is required too. - The properties will be passed raw without any validation or conversion by Ansible. This means the content can be a file, a string, or any other data. If the content is a dict that should be converted to JSON, then the content must be converted to JSON before passing it to this module using the P(ansible.builtin.to_json#filter) filter. type: raw version_added: '10.1.0' update_custom_oem_mime_type: required: false description: - MIME Type for custom OEM properties for HTTP Multipart Push updates. type: str version_added: '10.1.0' virtual_media: required: false description: - Options for VirtualMedia commands. type: dict version_added: '0.2.0' suboptions: media_types: required: false description: - List of media types appropriate for the image. type: list elements: str default: [] image_url: required: false description: - URL of the image to insert or eject. type: str inserted: required: false description: - Indicates that the image is treated as inserted on command completion. type: bool default: true write_protected: required: false description: - Indicates that the media is treated as write-protected. type: bool default: true username: required: false description: - Username for accessing the image URL. type: str password: required: false description: - Password for accessing the image URL. type: str transfer_protocol_type: required: false description: - Network protocol to use with the image. type: str transfer_method: required: false description: - Transfer method to use with the image. type: str strip_etag_quotes: description: - Removes surrounding quotes of etag used in C(If-Match) header of C(PATCH) requests. - Only use this option to resolve bad vendor implementation where C(If-Match) only matches the unquoted etag string. type: bool default: false version_added: 3.7.0 bios_attributes: required: false description: - BIOS attributes that needs to be verified in the given server. type: dict version_added: 6.4.0 reset_to_defaults_mode: description: - Mode to apply when reseting to default. type: str choices: [ResetAll, PreserveNetworkAndUsers, PreserveNetwork] version_added: 8.6.0 wait: required: false description: - Block until the service is ready again. type: bool default: false version_added: 9.1.0 wait_timeout: required: false description: - How long to block until the service is ready again before giving up. type: int default: 120 version_added: 9.1.0 ciphers: version_added: 9.2.0 validate_certs: version_added: 10.6.0 ca_path: version_added: 10.6.0 author: - "Jose Delarosa (@jose-delarosa)" - "T S Kushal (@TSKushal)" a5 - name: Restart system power gracefully community.general.redfish_command: category: Systems command: PowerGracefulRestart resource_id: 437XR1138R2 baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" - name: Turn system power off community.general.redfish_command: category: Systems command: PowerForceOff resource_id: 437XR1138R2 - name: Restart system power forcefully community.general.redfish_command: category: Systems command: PowerForceRestart resource_id: 437XR1138R2 - name: Shutdown system power gracefully community.general.redfish_command: category: Systems command: PowerGracefulShutdown resource_id: 437XR1138R2 - name: Turn system power on community.general.redfish_command: category: Systems command: PowerOn resource_id: 437XR1138R2 - name: Reboot system power community.general.redfish_command: category: Systems command: PowerReboot resource_id: 437XR1138R2 - name: Set one-time boot device to {{ bootdevice }} community.general.redfish_command: category: Systems command: SetOneTimeBoot resource_id: 437XR1138R2 bootdevice: "{{ bootdevice }}" baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" - name: Set one-time boot device to UefiTarget of "/0x31/0x33/0x01/0x01" community.general.redfish_command: category: Systems command: SetOneTimeBoot resource_id: 437XR1138R2 bootdevice: "UefiTarget" uefi_target: "/0x31/0x33/0x01/0x01" baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" - name: Set one-time boot device to BootNext target of "Boot0001" community.general.redfish_command: category: Systems command: SetOneTimeBoot resource_id: 437XR1138R2 bootdevice: "UefiBootNext" boot_next: "Boot0001" baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" - name: Set persistent boot device override community.general.redfish_command: category: Systems command: EnableContinuousBootOverride resource_id: 437XR1138R2 bootdevice: "{{ bootdevice }}" baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" - name: Set one-time boot to BiosSetup community.general.redfish_command: category: Systems command: SetOneTimeBoot boot_next: BiosSetup boot_override_mode: Legacy baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" - name: Disable persistent boot device override community.general.redfish_command: category: Systems command: DisableBootOverride - name: Set system indicator LED to blink using security token for auth community.general.redfish_command: category: Systems command: IndicatorLedBlink resource_id: 437XR1138R2 baseuri: "{{ baseuri }}" auth_token: "{{ result.session.token }}" - name: Add user community.general.redfish_command: category: Accounts command: AddUser baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" new_username: "{{ new_username }}" new_password: "{{ new_password }}" roleid: "{{ roleid }}" - name: Add user with specified account types community.general.redfish_command: category: Accounts command: AddUser baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" new_username: "{{ new_username }}" new_password: "{{ new_password }}" roleid: "{{ roleid }}" account_types: - Redfish - WebUI - name: Add user using new option aliases community.general.redfish_command: category: Accounts command: AddUser baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" account_password: "{{ account_password }}" account_roleid: "{{ account_roleid }}" - name: Delete user community.general.redfish_command: category: Accounts command: DeleteUser baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" - name: Disable user community.general.redfish_command: category: Accounts command: DisableUser baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" - name: Enable user community.general.redfish_command: category: Accounts command: EnableUser baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" - name: Add and enable user community.general.redfish_command: category: Accounts command: AddUser,EnableUser baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" new_username: "{{ new_username }}" new_password: "{{ new_password }}" roleid: "{{ roleid }}" - name: Update user password community.general.redfish_command: category: Accounts command: UpdateUserPassword baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" account_password: "{{ account_password }}" - name: Update user role community.general.redfish_command: category: Accounts command: UpdateUserRole baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" roleid: "{{ roleid }}" - name: Update user name community.general.redfish_command: category: Accounts command: UpdateUserName baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" account_updatename: "{{ account_updatename }}" - name: Update user name community.general.redfish_command: category: Accounts command: UpdateUserName baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" update_username: "{{ update_username }}" - name: Update AccountService properties community.general.redfish_command: category: Accounts command: UpdateAccountServiceProperties baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_properties: AccountLockoutThreshold: 5 AccountLockoutDuration: 600 - name: Update user AccountTypes community.general.redfish_command: category: Accounts command: UpdateUserAccountTypes baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" account_username: "{{ account_username }}" account_types: - Redfish - WebUI - name: Clear Manager Logs with a timeout of 20 seconds community.general.redfish_command: category: Manager command: ClearLogs resource_id: BMC baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" timeout: 20 - name: Create session community.general.redfish_command: category: Sessions command: CreateSession baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" register: result - name: Set chassis indicator LED to blink using security token for auth community.general.redfish_command: category: Chassis command: IndicatorLedBlink resource_id: 1U baseuri: "{{ baseuri }}" auth_token: "{{ result.session.token }}" - name: Delete session using security token created by CreateSesssion above community.general.redfish_command: category: Sessions command: DeleteSession baseuri: "{{ baseuri }}" auth_token: "{{ result.session.token }}" session_uri: "{{ result.session.uri }}" - name: Clear Sessions community.general.redfish_command: category: Sessions command: ClearSessions baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" - name: Simple update community.general.redfish_command: category: Update command: SimpleUpdate baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" update_image_uri: https://example.com/myupdate.img - name: Simple update with additional options community.general.redfish_command: category: Update command: SimpleUpdate baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" update_image_uri: //example.com/myupdate.img update_protocol: FTP update_targets: - /redfish/v1/UpdateService/FirmwareInventory/BMC update_creds: username: operator password: supersecretpwd - name: Multipart HTTP push update; timeout is 600 seconds to allow for a large image transfer community.general.redfish_command: category: Update command: MultipartHTTPPushUpdate baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" timeout: 600 update_image_file: ~/images/myupdate.img - name: Multipart HTTP push with additional options; timeout is 600 seconds to allow for a large image transfer community.general.redfish_command: category: Update command: MultipartHTTPPushUpdate baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" timeout: 600 update_image_file: ~/images/myupdate.img update_targets: - /redfish/v1/UpdateService/FirmwareInventory/BMC update_oem_params: PreserveConfiguration: false - name: Multipart HTTP push with custom OEM options vars: oem_payload: ImageType: BMC community.general.redfish_command: category: Update command: MultipartHTTPPushUpdate baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" update_image_file: ~/images/myupdate.img update_targets: - /redfish/v1/UpdateService/FirmwareInventory/BMC update_custom_oem_header: OemParameters update_custom_oem_mime_type: "application/json" update_custom_oem_params: "{{ oem_payload | to_json }}" - name: Perform requested operations to continue the update community.general.redfish_command: category: Update command: PerformRequestedOperations baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" update_handle: /redfish/v1/TaskService/TaskMonitors/735 - name: Insert Virtual Media community.general.redfish_command: category: Systems command: VirtualMediaInsert baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" virtual_media: image_url: 'http://example.com/images/SomeLinux-current.iso' media_types: - CD - DVD resource_id: 1 - name: Insert Virtual Media community.general.redfish_command: category: Manager command: VirtualMediaInsert baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" virtual_media: image_url: 'http://example.com/images/SomeLinux-current.iso' media_types: - CD - DVD resource_id: BMC - name: Eject Virtual Media community.general.redfish_command: category: Systems command: VirtualMediaEject baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" virtual_media: image_url: 'http://example.com/images/SomeLinux-current.iso' resource_id: 1 - name: Eject Virtual Media community.general.redfish_command: category: Manager command: VirtualMediaEject baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" virtual_media: image_url: 'http://example.com/images/SomeLinux-current.iso' resource_id: BMC - name: Restart manager power gracefully community.general.redfish_command: category: Manager command: GracefulRestart resource_id: BMC baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" - name: Restart manager power gracefully and wait for it to be available community.general.redfish_command: category: Manager command: GracefulRestart resource_id: BMC baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" wait: true - name: Restart manager power gracefully community.general.redfish_command: category: Manager command: PowerGracefulRestart resource_id: BMC - name: Turn manager power off community.general.redfish_command: category: Manager command: PowerForceOff resource_id: BMC - name: Restart manager power forcefully community.general.redfish_command: category: Manager command: PowerForceRestart resource_id: BMC - name: Shutdown manager power gracefully community.general.redfish_command: category: Manager command: PowerGracefulShutdown resource_id: BMC - name: Turn manager power on community.general.redfish_command: category: Manager command: PowerOn resource_id: BMC - name: Reboot manager power community.general.redfish_command: category: Manager command: PowerReboot resource_id: BMC - name: Factory reset manager to defaults community.general.redfish_command: category: Manager command: ResetToDefaults resource_id: BMC reset_to_defaults_mode: ResetAll - name: Verify BIOS attributes community.general.redfish_command: category: Systems command: VerifyBiosAttributes baseuri: "{{ baseuri }}" username: "{{ username }}" password: "{{ password }}" bios_attributes: SubNumaClustering: "Disabled" WorkloadProfile: "Virtualization-MaxPerformance" a msg: description: Message with action result or error description. returned: always type: str sample: "Action was successful" return_values: description: Dictionary containing command-specific response data from the action. returned: on success type: dict version_added: 6.1.0 sample: { "update_status": { "handle": "/redfish/v1/TaskService/TaskMonitors/735", "messages": [], "resets_requested": [], "ret": true, "status": "New" } } ) AnsibleModule) RedfishUtilsREDFISH_COMMON_ARGUMENT_SPEC) to_native)PowerOn PowerForceOffPowerForceRestartPowerGracefulRestartPowerGracefulShutdown PowerReboot PowerCyclePowerFullPowerCycleSetOneTimeBootEnableContinuousBootOverrideDisableBootOverrideIndicatorLedOnIndicatorLedOffIndicatorLedBlinkVirtualMediaInsertVirtualMediaEjectVerifyBiosAttributesrrr AddUser EnableUser DeleteUser DisableUserUpdateUserRoleUpdateUserPasswordUpdateUserNameUpdateUserAccountTypesUpdateAccountServiceProperties) ClearSessions CreateSession DeleteSession) GracefulRestart ClearLogsrResetToDefaultsrr r r r rr) SimpleUpdateMultipartHTTPPushUpdatePerformRequestedOperations)SystemsChassisAccountsSessionsManagerUpdateci}i}tdidtddtddddtdd td td d td d tdtdgdtdgdtdgddtdgdtdddgdtdddgdtddgd td!i"d#td$td%d&"d'td(td)td*d+g,d-td.td/td01d2td3tddg4d5td!1d6td1d7td1d8td91d:td!tttd ;<d=tgd>,d?td@td!ttddg4ttdAd"tdAd"ttd ttB<dCtdAdD"dEtgdF,dGtd!1dHtdAdD"dItd%dJ"}|jtt|d;dKgdLgdLgdDM}|jd}|jd}|jd |jd |jd dN}|jd|jd|jd|jd|jd|jd|jd|jd ddO }|jd$}|jd-} |jd.|jd/|jd2|jd3|jd:|jd=|jd5|jd6|jd8|jd7|jd?dP } |jd#|jd'|jd(|jd)dQ} |jd@} |jdC} |jdG}dR|jdz}t ||||| d| S}|t vr<|jtdT|dUtt jV|D]6}|t |vs|jtdW|dXt |V8|dYk(r|j|j|j|j|j|j |j"|j$|j&dZ }|j)}|d[dDurb|j+||d\<t-|d]k(r |d^d_k(r|d\r|j!|}n|jt|d`Vn|D] }|||}n|dak(r|j/}|d[dDur|jt|d`V|D]}|j1dbr|j3|}&|dck(rdd| de<|j5| }B|dfk(rdg| de<|j5| }^|dhk(rdi| de<|j5| }z|j1djr|j7|}|dkk(r|j9| |}|dlk(r|j;| |}|dmk(s|j=|}n|dnk(r|j?}|d[dDur|jt|d`Vgdo}tA|Dcgc]}||vc}}|d]kDrdDdpdq}n5|D]}||vs|jC|}n|drk(r|jE}|d[dDur|j|d`V|D]R}|dsk(r|jG}|dtk(r|jI}/|duk(s5|jK|jd }Tn|dvk(r|jM}|d[dDur|jt|d`V|D]}|dwk(rdx}|j1dbr.|jO||jdH|jdI}I|dyk(r|jQ}_|dkk(r|j9| |}w|dlk(r|j;| |}|dzk(s|jS|jdE}n|d{k(r|jU}|d[dDur|j|d`V|D]d}|d|k(r|jW| }d}|vs|d}|d}<'|d~k(r|jY| }d}|vsB|d}|d}<K|dk(sQ|j[| d?}f|d[durE|d[=|j]dd}|j]dt}|j_||d|y|jt|d`Vycc}w)NcategoryT)requiredcommandliststr)r7typeelementsbaseuriusernamepassword)no_log auth_token session_uriid account_id)aliases new_usernameaccount_username new_passwordaccount_password)rEr@roleidaccount_roleid account_typesaccount_accounttypes)r;r<rEoem_account_typesaccount_oemaccounttypesupdate_usernameaccount_updatename)r;rEaccount_propertiesdict)r;default bootdevicetimeoutint< uefi_target boot_nextboot_override_modeLegacyUEFI)choices resource_idupdate_image_uriupdate_image_filepath)r;update_protocolupdate_targets)r;r<rTupdate_oem_paramsupdate_custom_oem_headerupdate_custom_oem_mime_typeupdate_custom_oem_paramsraw update_creds)r>r?)r;optionsupdate_apply_time) ImmediateOnResetAtMaintenanceWindowStartInMaintenanceWindowOnResetOnStartUpdateRequest update_handle virtual_mediabool) media_types image_urlinsertedwrite_protectedr>r?transfer_protocol_typetransfer_methodstrip_etag_quotesFreset_to_defaults_mode)ResetAllPreserveNetworkAndUsersPreserveNetworkbios_attributeswait wait_timeoutx)rfrh)r>rA)required_togetherrequired_one_ofmutually_exclusivesupports_check_mode)userpswdtoken) rDrGrIrKrMrOrQrRaccount_passwordchangerequired) r`rarcrdrjrlrerfrhrgrr)rUrYrZr[zhttps://)r_data_modificationr{zInvalid Category 'z'. Valid Categories = )msgzInvalid Command 'z'. Valid Commands = r1rretrrr"rr/PowerrOnceoverride_enabledr ContinuousrDisabled IndicatorLedrrrr0rz7Only one IndicatorLed command should be sent at a time.)rrr2r&r'r(r3r)r r*r+r4r, update_statusr-r.changedsessionzAction was successful)rrr return_values)0rSupdaterrparamsrCATEGORY_COMMANDS_ALL fail_jsonr r9keysadd_user enable_user delete_user disable_userupdate_user_roleupdate_user_passwordupdate_user_nameupdate_user_accounttypes update_accountservice_properties_find_accountservice_resourcecheck_password_change_requiredlen_find_systems_resource startswithmanage_system_powerset_boot_overridemanage_system_indicator_ledvirtual_media_insertvirtual_media_ejectverify_bios_attributes_find_chassis_resourcesummanage_chassis_indicator_led_find_sessionservice_resourceclear_sessionscreate_sessiondelete_session_find_managers_resourcemanage_manager_power clear_logsmanager_reset_to_defaults_find_updateservice_resource simple_updatemultipath_http_push_update#perform_requested_update_operationsget exit_json)resultr argument_specmoduler6 command_listcredsrrVr_ update_opts boot_optsrsr{rroot_urirf_utilscmdACCOUNTS_COMMANDSr8 led_commandsnum_led_commandsresourcerrs u/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/redfish_command.pymainres FM:t$:d%@:d#: : T" : t$ :F:  ':#5"67:#5"6tD:-./:AW@XY:FUE^D_`:%2F1GH: VR8: 6!:"%,#:$F%:&&':( 6(:;):*F+:,-:.F+/:01:2%D3:4F+5:6"&5!17:8%)e$49::"&5!1;:<T* =:J(^_K:NfO:P fubI&648 $&$ ?T*'+v $   Q:jFE:k:l $,fgm:n&)o:pvu -q:ruc2s:Mv56  $ D '  ' " F}}Z(H==+L]]:.]]:.mmL1 3E mmD)"MM.9"MM.9 --1 & o >#)==1D#E$mm,=>$mm,@A*. DmmI&G-- .K#MM*<=#]]+>?!==):; --(89 n5#]]+>?#]]+>?$*MM2L$M$*MM2L$M'-}}5R'S7 K mmL1}}]3]];/$mm,@A IMM/2M &9:mm$56OFMM)44HE8Wf(3t_prH,,YYacgh}iCiCiEdF(GH IB +H5 5   Z]_tu}_~+"A  BB :((".."..#00&77"*"?"?&77&.&G&G.6.W.W  779 %=E !6>5\5\]c5dD1 2< A%,q/=Q*QVZ[{V|!66t<  Yve}%= >' :3*73D9 : Y 002 %=E !   6%=!9  :# JG!!'*!55g>,,06 ,-!33I>::0< ,-!33I>110: ,-!33I>##N3!==gF00!66}hO//!55mXN22!88I' J* Y 002 %=E !   6%=!9  :Q |TG< 7TU a "+deF' Ll*%BB7KF L Z 99; E?e #   %  1# OG/)!002O+!002O+!00}1MN  O Y 113 %=E !   6%=!9  :# eG++0!!'*!66w f@UW]WdWdesWtuK'!,,.00!66}hO//!55mXN--!;;FMMJbrs}A@ F P a F ,5A = JMDPX&_7D  zFr