ADFSToolkit

2.0.0

Private/Get-ADFSTkIssuanceTransformRules.ps1

                                function Get-ADFSTkIssuanceTransformRules

{

param (

    [Parameter(Mandatory=$false,

                   ValueFromPipelineByPropertyName=$true,

                   Position=0)]

    [string[]]$EntityCategories,

    [Parameter(Mandatory=$false,

                   ValueFromPipelineByPropertyName=$true,

                   Position=1)]

    [string]$EntityId,

    [Parameter(Mandatory=$false,

                   ValueFromPipelineByPropertyName=$true,

                   Position=2)]

    $RequestedAttribute,

    [Parameter(Mandatory=$false,

                   ValueFromPipelineByPropertyName=$true,

                   Position=3)]

    $RegistrationAuthority,

    [Parameter(Mandatory=$false,

                   ValueFromPipelineByPropertyName=$true,

                   Position=4)]

    $NameIDFormat

)

#Get All paths

if ([string]::IsNullOrEmpty($Global:ADFSTkPaths))

{

    $Global:ADFSTkPaths = Get-ADFSTKPaths

}

if ([string]::IsNullOrEmpty($Global:ADFSTkAllAttributes) -or $Global:ADFSTkAllAttributes.Count -eq 0)

{

    $Global:ADFSTkAllAttributes = Import-ADFSTkAllAttributes

}

if ([string]::IsNullOrEmpty($Global:ADFSTkAllTransformRules) -or $Global:ADFSTkAllTransformRules.Count -eq 0)

{

    $Global:ADFSTkAllTransformRules = Import-ADFSTkAllTransformRules

    if (Test-Path $Global:ADFSTkPaths.institutionLocalTransformRulesFile)

    {

        Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationLocalTransformRulesFoundFile)

        try {

            Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationLocalTransformRulesFile)

            . $Global:ADFSTkPaths.institutionLocalTransformRulesFile

            if (Test-Path function:Get-ADFSTkLocalTransformRules)

            {

                $localTransformRules = Get-ADFSTkLocalTransformRules

                Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationLocalTransformRulesFound -f $localTransformRules.Count)

                foreach ($transformRule in $localTransformRules.Keys)

                {

                    #Add or replace the standard Entoty Category with the federation one

                    if ($Global:ADFSTkAllTransformRules.ContainsKey($transformRule))

                    {

                        Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationLocalTransformRulesOverwrite -f $transformRule)

                    }

                    else

                    {

                        Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationLocalTransformRulesAdd -f $transformRule)

                    }

                    $Global:ADFSTkAllTransformRules.$transformRule = $localTransformRules.$transformRule

                }

            }

            else

            {

                Write-ADFSTkLog (Get-ADFSTkLanguageText rulesFederationLocalTransformRulesLoadFail) -EntryType Error

            }

        }

        catch

        {

            Write-ADFSTkLog (Get-ADFSTkLanguageText rulesFederationLocalTransformRulesLoadFail) -EntryType Error

        }

    }

    else {

        Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationLocalTransformRulesFileNotFound)

    }

}

if ([string]::IsNullOrEmpty($AllTransformRules))

{

    $AllTransformRules = $Global:ADFSTkAllTransformRules #So we don't need to change anything in the Get-ADFSTkManualSPSettings files

}

$RequestedAttributes = @{}

if (![string]::IsNullOrEmpty($RequestedAttribute))

{

    $RequestedAttribute | % {

        $RequestedAttributes.($_.Name.trimEnd()) = $_.friendlyName

    }

}

else

{

    Write-ADFSTkLog (Get-ADFSTkLanguageText rulesNoRequestedAttributesDetected)

}

$IssuanceTransformRuleCategories = Import-ADFSTkIssuanceTransformRuleCategories -RequestedAttributes $RequestedAttributes

$adfstkConfig = Get-ADFSTkConfiguration

$federationDir = Join-Path $Global:ADFSTkPaths.federationDir $adfstkConfig.FederationConfig.Federation.FederationName

$fedEntityCategoryFileName = Join-Path $federationDir "$($adfstkConfig.FederationConfig.Federation.FederationName)_entityCategories.ps1"

if (Test-Path $fedEntityCategoryFileName)

{

    try {

        Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationEntityCategoryFile)

        . $fedEntityCategoryFileName

        if (Test-Path function:Import-ADFSTkIssuanceTransformRuleCategoriesFromFederation)

        {

            $IssuanceTransformRuleCategoriesFromFederation = Import-ADFSTkIssuanceTransformRuleCategoriesFromFederation -RequestedAttributes $RequestedAttributes

            Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationEntityCategoriesFound -f $IssuanceTransformRuleCategoriesFromFederation.Count)

            foreach ($entityCategory in $IssuanceTransformRuleCategoriesFromFederation.Keys)

            {

                #Add or replace the standard Entoty Category with the federation one

                if ($IssuanceTransformRuleCategories.ContainsKey($entityCategory))

                {

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationEntityCategoryOverwrite -f $entityCategory)

                }

                else

                {

                    Write-ADFSTkVerboseLog (Get-ADFSTkLanguageText rulesFederationEntityCategoryAdd -f $entityCategory)

                }

                $IssuanceTransformRuleCategories.$entityCategory = $IssuanceTransformRuleCategoriesFromFederation.$entityCategory

            }

        }

        else

        {

            #Write Verbose

        }

    }

    catch

    {

        Write-ADFSTkLog (Get-ADFSTkLanguageText rulesFederationEntityCategoryLoadFail) -EntryType Error

    }

}

else

{

    #Write Verbose

}

if ([string]::IsNullOrEmpty($Global:ADFSTkManualSPSettings))

{

    $Global:ADFSTkManualSPSettings = Get-ADFSTkManualSPSettings

}

### Transform Entity Categories

$TransformedEntityCategories = @()

$AttributesFromStore = @{}

$IssuanceTransformRules = [Ordered]@{}

$ManualSPTransformRules = $null

#Check version of get-ADFSTkLocalManualSpSettings and retrieve the transform rules

if ($EntityId -ne $null -and $Global:ADFSTkManualSPSettings.ContainsKey($EntityId))

{

    if ($Global:ADFSTkManualSPSettings.$EntityId -is [System.Collections.Hashtable] -and `

        $Global:ADFSTkManualSPSettings.$EntityId.ContainsKey('TransformRules'))

    {

        $ManualSPTransformRules = $Global:ADFSTkManualSPSettings.$EntityId.TransformRules

    }

    elseif ($Global:ADFSTkManualSPSettings.$EntityId -is [System.Collections.Specialized.OrderedDictionary])

    {

        $ManualSPTransformRules = $Global:ADFSTkManualSPSettings.$EntityId

    }

    else

    {

        #Shouldn't be here

    }

}

#Add manually added entity categories if any

if ($EntityId -ne $null -and `

    $Global:ADFSTkManualSPSettings.ContainsKey($EntityId) -and `

    $Global:ADFSTkManualSPSettings.$EntityId -is [System.Collections.Hashtable] -and `

    $Global:ADFSTkManualSPSettings.$EntityId.ContainsKey('EntityCategories'))

{

    $EntityCategories += $Global:ADFSTkManualSPSettings.$EntityId.EntityCategories

}

if ($EntityCategories -eq $null)

{

    $TransformedEntityCategories += "NoEntityCategory"

}

else

{

    foreach ($entityCategory in $IssuanceTransformRuleCategories.Keys)

    {

        if ($entityCategory -eq "http://www.swamid.se/category/research-and-education" -and $EntityCategories.Contains($entityCategory))

        {

            if ($EntityCategories.Contains("http://www.swamid.se/category/eu-adequate-protection") -or `

                $EntityCategories.Contains("http://www.swamid.se/category/nren-service") -or `

                $EntityCategories.Contains("http://www.swamid.se/category/hei-service"))

            {

                $TransformedEntityCategories += $entityCategory

            }

        }

        elseif ($EntityCategories.Contains($entityCategory)) 

        {

            $TransformedEntityCategories += $entityCategory

        }

    }

    if ($TransformedEntityCategories.Count -eq 0)

    {

        $TransformedEntityCategories += "NoEntityCategory"

    }

###

}

#region Add NameID to TransformRules

    if ([string]::IsNullOrEmpty($NameIDFormat))

    {

        $IssuanceTransformRules.'transient-id' = $Global:ADFSTkAllTransformRules.'transient-id'.Rule.Replace("[ReplaceWithSPNameQualifier]",$EntityId)

        foreach ($Attribute in $Global:ADFSTkAllTransformRules.'transient-id'.Attribute) { 

            $AttributesFromStore[$Attribute] = $Global:ADFSTkAllAttributes[$Attribute]

        }

    }

    elseif ($NameIDFormat.Contains('urn:oasis:names:tc:SAML:2.0:nameid-format:persistent'))

    {

        $IssuanceTransformRules.'persistent-id' = $Global:ADFSTkAllTransformRules.'persistent-id'.Rule.Replace("[ReplaceWithSPNameQualifier]",$EntityId)

        foreach ($Attribute in $Global:ADFSTkAllTransformRules.'persistent-id'.Attribute) { 

            $AttributesFromStore[$Attribute] = $Global:ADFSTkAllAttributes[$Attribute]

        }

    }

    # elseif ($NameIDFormat.Contains('urn:oasis:names:tc:SAML:2.0:nameid-format:transient'))

    # {

    #     

    # }

    else

    {

        $IssuanceTransformRules.'transient-id' = $Global:ADFSTkAllTransformRules.'transient-id'.Rule.Replace("[ReplaceWithSPNameQualifier]",$EntityId)

        foreach ($Attribute in $Global:ADFSTkAllTransformRules.'transient-id'.Attribute) { 

            $AttributesFromStore[$Attribute] = $Global:ADFSTkAllAttributes[$Attribute]

        }

    }

#endregion

#region Add TransformRules from categories

$TransformedEntityCategories | % { 

    if ($_ -ne $null -and $IssuanceTransformRuleCategories.ContainsKey($_))

    {

        foreach ($Rule in $IssuanceTransformRuleCategories[$_].Keys) { 

            if ($IssuanceTransformRuleCategories[$_][$Rule] -ne $null)

            {

                $IssuanceTransformRules[$Rule] = $IssuanceTransformRuleCategories[$_][$Rule].Rule.Replace("[ReplaceWithSPNameQualifier]",$EntityId)

                foreach ($Attribute in $IssuanceTransformRuleCategories[$_][$Rule].Attribute) { 

                    $AttributesFromStore[$Attribute] = $Global:ADFSTkAllAttributes[$Attribute]

                }

            }

        }

    }

}

#endregion

#AllSPs

if ($Global:ADFSTkManualSPSettings.ContainsKey('urn:adfstk:allsps'))

{

    foreach ($Rule in $Global:ADFSTkManualSPSettings['urn:adfstk:allsps'].TransformRules.Keys) { 

        if ($Global:ADFSTkManualSPSettings['urn:adfstk:allsps'].TransformRules[$Rule] -ne $null)

        {                

            $IssuanceTransformRules[$Rule] = $Global:ADFSTkManualSPSettings['urn:adfstk:allsps'].TransformRules[$Rule].Rule.Replace("[ReplaceWithSPNameQualifier]",$EntityId)

            foreach ($Attribute in $Global:ADFSTkManualSPSettings['urn:adfstk:allsps'].TransformRules[$Rule].Attribute) { 

                $AttributesFromStore[$Attribute] = $Global:ADFSTkAllAttributes[$Attribute]

            }

        }

    }

}

#AllEduSPs

if ($EntityId -ne $null)

{

    #First remove http:// or https://

    $entityDNS = $EntityId.ToLower().Replace('http://','').Replace('https://','')

    #Second get rid of all ending sub paths

    $entityDNS = $entityDNS -split '/' | select -First 1

    #Last fetch the last two words and join them with a .

    #$entityDNS = ($entityDNS -split '\.' | select -Last 2) -join '.'

    $settingsDNS = $null

    foreach($setting in $Global:ADFSTkManualSPSettings.Keys)

    {

        if ($setting.StartsWith('urn:adfstk:entityiddnsendswith:'))

        {

            $settingsDNS = $setting -split ':' | select -Last 1

        }

    }

    if ($entityDNS.EndsWith($settingsDNS) -and `

        $Global:ADFSTkManualSPSettings."urn:adfstk:entityiddnsendswith:$settingsDNS" -is [System.Collections.Hashtable] -and `

        $Global:ADFSTkManualSPSettings."urn:adfstk:entityiddnsendswith:$settingsDNS".ContainsKey('TransformRules'))

    {

        foreach ($Rule in $Global:ADFSTkManualSPSettings["urn:adfstk:entityiddnsendswith:$settingsDNS"].TransformRules.Keys) { 

            if ($Global:ADFSTkManualSPSettings["urn:adfstk:entityiddnsendswith:$settingsDNS"].TransformRules[$Rule] -ne $null)

            {                

                $IssuanceTransformRules[$Rule] = $Global:ADFSTkManualSPSettings["urn:adfstk:entityiddnsendswith:$settingsDNS"].TransformRules[$Rule].Rule.Replace("[ReplaceWithSPNameQualifier]",$EntityId)

                foreach ($Attribute in $Global:ADFSTkManualSPSettings["urn:adfstk:entityiddnsendswith:$settingsDNS"].TransformRules[$Rule].Attribute) { 

                    $AttributesFromStore[$Attribute] = $Global:ADFSTkAllAttributes[$Attribute]

                }

            }

        }

    }

}

#Manual SP

if ($ManualSPTransformRules -ne $null)

{

    foreach ($Rule in $ManualSPTransformRules.Keys) { 

        if ($ManualSPTransformRules[$Rule] -ne $null)

        {                

            $IssuanceTransformRules[$Rule] = $ManualSPTransformRules[$Rule].Rule.Replace("[ReplaceWithSPNameQualifier]",$EntityId)

            foreach ($Attribute in $ManualSPTransformRules[$Rule].Attribute) { 

                $AttributesFromStore[$Attribute] = $Global:ADFSTkAllAttributes[$Attribute]

            }

        }

    }

}

### This is a good place to remove attributes that shouldn't be sent outside a RegistrationAuthority

#$removeRules = @()

#foreach ($rule in $IssuanceTransformRules.Keys)

#{

#    $attribute = $Settings.configuration.attributes.attribute | ? name -eq $rule

#    if ($attribute -ne $null -and $attribute.allowedRegistrationAuthorities -ne $null)

#    {

#        $allowedRegistrationAuthorities = @()

#        $allowedRegistrationAuthorities += $attribute.allowedRegistrationAuthorities.registrationAuthority

#        if ($allowedRegistrationAuthorities.count -gt 0 -and !$allowedRegistrationAuthorities.contains($RegistrationAuthority))

#        {

#            $removeRules += $rule

#        }

#    }

#}

#

#$removeRules | % {$IssuanceTransformRules.Remove($_)}

#

$removeRules = @()

foreach ($attr in $AttributesFromStore.values)

{

    $attribute = $Settings.configuration.attributes.attribute | ? type -eq $attr.type

    if ($attribute -ne $null -and $attribute.allowedRegistrationAuthorities -ne $null)

    {

        $allowedRegistrationAuthorities = @()

        $allowedRegistrationAuthorities += $attribute.allowedRegistrationAuthorities.registrationAuthority

        if ($allowedRegistrationAuthorities.count -gt 0 -and !$allowedRegistrationAuthorities.contains($RegistrationAuthority))

        {

            $removeRules += $attr

        }

    }

}

$removeRules | % {

    $AttributesFromStore.Remove($_.type)

    foreach ($key in $Global:ADFSTkAllTransformRules.Keys) 

    {

        if ($Global:ADFSTkAllTransformRules.$key.Attribute -eq $_.type) 

        {

            $currentStoreAttributes = $AttributesFromStore.Values | ? store -eq $store.name

            if ($currentStoreAttributes.Count -ne $null)

            {

                $FirstRule += @"

                @RuleName = "Retrieve Attributes from AD"

                c:[Type == "$($store.type)", Issuer == "$($store.issuer)"]

                => add(store = "$($store.name)", 

                types = ("$($currentStoreAttributes.type -join '","')"), 

                query = ";$($currentStoreAttributes.name -join ',');{0}", param = c.Value);

"@

            }

            $IssuanceTransformRules.Remove($key)

            break

        }

    }

}

###

#region Create Stores

if ($AttributesFromStore.Count -ne $null)

{

    $FirstRule = Get-ADFSTkStoreRule -Stores $Settings.configuration.storeConfig.stores.store `

                                     -AttributesFromStore $AttributesFromStore `

                                     -EntityId $EntityId 

    return  $FirstRule + $IssuanceTransformRules.Values

}

else

{

    return $IssuanceTransformRules.Values

}

#endregion

}

# SIG # Begin signature block

# MIIRbgYJKoZIhvcNAQcCoIIRXzCCEVsCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR

# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUdK1llKW0jalzHMZm/7DVOBO2

# j6qggg51MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNV

# BAYTAlVTMSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNV

# BAsTKEdvIERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN

# MTQwMTAxMDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAO

# BgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdv

# RGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmlj

# YXRlIEF1dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC

# AQEAv3FiCPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjH

# MgGxBT4HTu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6

# or6KFWp/3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T

# 3UYH3go+6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6e

# MAo5zvGIgPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51ir

# uF9G/M7EGwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB

# /zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/e

# MB8GA1UdIwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgw

# JjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQr

# MCkwJ6AloCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNV

# HSAEPzA9MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2Rh

# ZGR5LmNvbS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEack

# e+1bMc8dH2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVn

# OQoWCcWgOJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYgg

# HFCJyNwq9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY

# 7NmuHDKOKHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzds

# yqUvMQg3qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcY

# QFHfjDCmrzCCBNAwggO4oAMCAQICAQcwDQYJKoZIhvcNAQELBQAwgYMxCzAJBgNV

# BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow

# GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8GA1UEAxMoR28gRGFkZHkgUm9v

# dCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xMTA1MDMwNzAwMDBaFw0z

# MTA1MDMwNzAwMDBaMIG0MQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTET

# MBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4x

# LTArBgNVBAsTJGh0dHA6Ly9jZXJ0cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEz

# MDEGA1UEAxMqR28gRGFkZHkgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAt

# IEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueDLENSvdr3Uk2Lr

# MGS4gQhswwTZYheOL/8+Zc+PzmLmPFIc2hZFS1WreGtjg2KQzg9pbJnIGhSLTMxF

# M+qI3J6jryv+gGGdeVfEzy70PzA8XUf8mha8wzeWQVGOEUtU+Ci+0Iy+8DA4HvOw

# JvhmR2Nt3nEmR484R1PRRh2049wA6kWsvbxx2apvANvbzTA6eU9fTEf4He9bwsSd

# YDuxskOR2KQzTuqz1idPrSWKpcb01dCmrnQFZFeItURV1C0qOj74uL3pMgoClGTE

# FjpQ8Uqu53kzrwwgB3/o3wQ5wmkCbGNS+nfBG8h0h8i5kxhQVDVLaU68O9NJLh/c

# wdJS+wIDAQABo4IBGjCCARYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC

# AQYwHQYDVR0OBBYEFEDCvSeOzDSDMKIz1/tss/C0LIDOMB8GA1UdIwQYMBaAFDqa

# hQcQZyi27/a9BUFuIMGU2g/eMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDUGA1UdHwQuMCwwKqAooCaGJGh0dHA6

# Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LWcyLmNybDBGBgNVHSAEPzA9MDsGBFUd

# IAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNvbS9yZXBv

# c2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEACH5skxDIOLiWqZBL/6FfTwTvbD6c

# iAbJUI+mc/dXMRu+vOQv2/i601vgtOfmeWIODKLXamNzMbX1qEikOwgtol2Q17R8

# JU8RVjDEtkSdeyyd5V7m7wxhqr/kKhvuhJ64g33BQ85EpxNwDZEf9MgTrYNg2dhy

# qHMkHrWsIg7KF4liWEQbq4klAQAPzcQbYttRtNMPUSqb9Lxz/HbONqTN2dgs6q6b

# 9SqykNFNdRiKP4pBkCN9W0v+pANYm0ayw2Bgg/h9UEHOwqGQw7vvAi/SFVTuRBXZ

# Cq6nijPtsS12NibcBOuf92EfFdyHb+5GliitoSZ9CgmnLgSjjbz4vAQwATCCBRww

# ggQEoAMCAQICCDeMqUwECkf0MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYDVQQGEwJV

# UzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UE

# ChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0cy5nb2Rh

# ZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2VjdXJlIENl

# cnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIwMDEwODExMjIyNFoXDTIxMDMw

# ODE4NTgwMFowXjELMAkGA1UEBhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xDzANBgNV

# BAcTBk90dGF3YTEVMBMGA1UEChMMQ0FOQVJJRSBJbmMuMRUwEwYDVQQDEwxDQU5B

# UklFIEluYy4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhfCjFqiT

# mN1uLoySixnwaOjf/ZAL9P6SvjlCaBA2mutoorEgnzUP8HnOIcvMRgEMPmpaZ8eg

# M93Bmx9d41xoarsQpCN3DhYOo+b3fWnPucVtpxbul2OFePv63mw/uvr+dqkv4b/f

# 3Tg+ilQbpsNonbvh9MKEFv8Pn9koj0ySV+qxz34PxTVAe6g//pel3/3i9fqilCnI

# Ecx4zg/+NKBeOWROSs4oXo3IvBjVrunmz+YuieSr78TqIE6hD8JF2q1wKwfMB3+x

# 7dEXZAus9WtIU/qITATtEfO9QAgrrYL4F1MLN+osSp8my5eCOjnLTQc47q574V3z

# QhsIHW7yBXLdAgMBAAGjggGFMIIBgTAMBgNVHRMBAf8EAjAAMBMGA1UdJQQMMAoG

# CCsGAQUFBwMDMA4GA1UdDwEB/wQEAwIHgDA1BgNVHR8ELjAsMCqgKKAmhiRodHRw

# Oi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczUtNS5jcmwwXQYDVR0gBFYwVDBIBgtg

# hkgBhv1tAQcXAjA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdv

# ZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAEEATB2BggrBgEFBQcBAQRqMGgw

# JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcw

# AoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dk

# aWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAdBgNVHQ4E

# FgQUUPnMg2nmYS8l7rmax3weVkrgz5AwDQYJKoZIhvcNAQELBQADggEBAIYabiAR

# aY4KhO6oWgNHPOBjoHuqUH7NwRGN/ztYJznRBZbdD50smoK5GR0FvUZ8TXhYoZOa

# zXe4NlFM4e6YcudU+EA/OF+sZHFBWziz1VS6U3sS+cGyJcxvelSoid0q3W3i9/Zy

# 6Nv2kk/DEJp49O47mPNovpL15yykX3Vo26GwC9peo4s/cKMzthmgrcF2uLkT+LW4

# 4xKhaL7nBTGDMhjno+a3t00SWCId7wzgQadIJ1QlFOKm0xgmuiW3LIqCG0apvaOf

# vWKTPKq68q+FbDPOO48oKrvw1c9K/m8gcnBLz6PX1REVIs5u3pvdOYBCz6uXyKxn

# t+Q5jDEK0NskLu0xggJjMIICXwIBATCBwTCBtDELMAkGA1UEBhMCVVMxEDAOBgNV

# BAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFk

# ZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMuZ29kYWRkeS5jb20v

# cmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3VyZSBDZXJ0aWZpY2F0

# ZSBBdXRob3JpdHkgLSBHMgIIN4ypTAQKR/QwCQYFKw4DAhoFAKB4MBgGCisGAQQB

# gjcCAQwxCjAIoAKAAKECgAAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK

# KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwIwYJKoZIhvcNAQkEMRYEFCpNKw1E

# gcQ6qTZBTBPsmn8EjhJ7MA0GCSqGSIb3DQEBAQUABIIBAJ3DZQtRIQ2oaNOs/i01

# YpH2ETY80zKo36oRinyr7gC1wNKtg7p64fsfMgduzLOqYspfgjHXj/rscRI3ZiDM

# Dxurw16Zm+nySRIanLUw1NWLacpXTYV62Au6Z0Rdu4kLO8MHlt0yZIMBO3T5eKdI

# cW8fn6kvOuLKO5UgJdn/kMWrri4sVQd+6O35YOH7kNUElbsnpwje5Mcb/X504bDL

# e2P8UR5rLOneb/lYHP5y+NfCs1/lc0Kn6f975Q+NUXBt8eE3y56q1u7wo+xaprSp

# i0aWFjlGliE9wG+Kt62SsKsiTd40jNKwrRBlRjkGYEa1Jlh7iFLeZiH1GBEcf35P

# NTs=

# SIG # End signature block