<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div>
<div id="Signature">
<div>
<div></div>
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div class="BodyFragment"><font size="2" face="Arial">
<div class="PlainText">Hi Pat,<span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" face="Arial"><br>
</font></span></span></span></span></span></div>
<div class="PlainText"><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" face="Arial">3269
 is Global Catalog over TLS, changing that to 636 will change the behaviour as you need a BaseDN and won't be able to authenticate users of trusted domains any more, so don't do that.</font></span></span></span></span></span></div>
<div class="PlainText"><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" face="Arial">Instead
 raise the Radiator log level or do a packet capture and look at it in wireshark to see what happens, my guess is the TLS handshake.<br>
</font></span></span></span></span></span></div>
<div class="PlainText"><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" face="Arial"><br>
</font></span></span></span></span></span></div>
<div class="PlainText"><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" face="Arial">The
 domain controllers might not send the whole certificate chain with all intermediate certs or you don't have the root CA in the trusted CA file /etc/ssl/certs/ca.pem.<br>
</font></span></span></span></span></span></div>
<div class="PlainText"><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" face="Arial"><br>
</font></span></span></span></span></span></div>
<div class="PlainText"><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" face="Arial">Best
 regards, Alex<br>
</font></span></span></span></span></span></div>
</font></div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size: 11pt;" face="Calibri, sans-serif" color="#000000"><b>Von:</b> radiator <radiator-bounces@lists.open.com.au> im Auftrag von Patrik Forsberg <patrik.forsberg@globalconnect.se><br>
<b>Gesendet:</b> Montag, 18. Jänner 2021 08:57<br>
<b>An:</b> radiator@lists.open.com.au <radiator@lists.open.com.au><br>
<b>Betreff:</b> Re: [RADIATOR] ERR: AuthLDAP2 Could not open LDAP connection to AD domain controllers</font>
<div> </div>
</div>
<div style="word-wrap:break-word" lang="SV">
<div class="x_WordSection1">
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="" lang="EN-US">Hello,</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="" lang="EN-US"> </span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="" lang="EN-US">Try using port 389 for non-ssl or 636 for ssl - even if the server is DC atm.</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="" lang="EN-US"> </span></p>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size:10.0pt; font-family:Consolas">---</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size:10.0pt; font-family:Consolas">Best Regards,</span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size:10.0pt; font-family:Consolas">Patrik</span></p>
</div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="" lang="EN-US"> </span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0cm 0cm 0cm">
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<b><span lang="EN-US">From:</span></b><span lang="EN-US"> radiator <radiator-bounces@lists.open.com.au>
<b>On Behalf Of </b>Hirayama, Pat<br>
<b>Sent:</b> den 16 januari 2021 00:56<br>
<b>To:</b> radiator@lists.open.com.au<br>
<b>Subject:</b> [RADIATOR] ERR: AuthLDAP2 Could not open LDAP connection to AD domain controllers</span></p>
</div>
</div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
 </p>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;">Greetings,</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;">I am currently trying to migrate an existing Radiator 4.12.1 running on CentOS 6.10 to Radiator 4.25 running on Ubuntu 20.04.1 LTS. I am running into an issue where Radiator 4.25 is unable to connect via LDAP to
 my domain controllers.  The log shows (DC names changed):</span></p>
</div>
<div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"> </span></p>
</div>
<div>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">00000000 Fri Jan 15 15:26:35 2021 089445: INFO: AuthLDAP2 Connecting to DC1.domain.tld port 3269</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">00000000 Fri Jan 15 15:26:35 2021 124694: ERR: AuthLDAP2 Could not open LDAP connection to
<span style="background: white none repeat scroll 0% 0%;">DC1.domain.tld</span> port 3269. Backing off for 10 seconds.</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">00000000 Fri Jan 15 15:26:35 2021 124845: INFO: AuthLDAP2 Connecting to
<span style="background: white none repeat scroll 0% 0%;">DC2.domain.tld</span> port 3269</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">00000000 Fri Jan 15 15:26:35 2021 125576: ERR: AuthLDAP2 Could not open LDAP connection to
<span style="background: white none repeat scroll 0% 0%;">DC2.domain.tld</span> port 3269. Backing off for 10 seconds.</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">00000000 Fri Jan 15 15:26:35 2021 125720: INFO: AuthLDAP2 Connecting to
<span style="background: white none repeat scroll 0% 0%;">DC3.domain.tld</span> port 3269</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">00000000 Fri Jan 15 15:26:35 2021 126451: ERR: AuthLDAP2 Could not open LDAP connection to
<span style="background: white none repeat scroll 0% 0%;">DC3.domain.tld</span> port 3269. Backing off for 10 seconds.</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;">My new <AuthBy LDAP2> stanza (again anonymized)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"> </span></p>
</div>
<div>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"><Handler Client-Identifier=webvpn-test-servers></span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">       
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">RejectHasReason</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p2" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;min-height:13px">
<span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"> </span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">       
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">#AuthLog webvpn-authlog</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">       
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"># Handle test users</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">        <AuthBy LDAP2></span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">                Host DC1.domain.tld DC2.domain.tld DC3.domain.tld </span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"><br>
<br>
</span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">SSLVerify none</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">include /etc/radiator/ssl.txt</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">UseSSL</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">Port 3269</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">AuthDN XXXXXXXXXXXXXXXX</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">AuthPassword XXXXXXXXX</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">CachePasswords</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">                FailureBackoffTime 10</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">#BaseDN XXXXXXXXXXXX</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">UsernameAttr sAMAccountName</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">                Debug 255</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">ServerChecksPassword</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">               
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">#HoldServerConnection</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">                SearchFilter (&(%0=%1)(|(memberOf=XXX))  # removing filter for privacy -- besides, we aren't getting that far</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_apple-converted-space"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">        
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></AuthBy></span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></Handler></span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;">/etc/radiator/ssl.txt (anonymized):</span></p>
</div>
<div>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">SSLCAClientCert</span></span><span class="x_apple-tab-span"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">/etc/ssl/certs/server.pem</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">SSLCAClientKey</span></span><span class="x_apple-tab-span"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">/etc/ssl/private/server.key</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">SSLCAFile</span></span><span class="x_apple-tab-span"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">
</span></span><span class="x_s1"><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;">/etc/ssl/certs/ca.pem</span></span><span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"></span></p>
<p class="x_p1" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 8.5pt; font-family: "Menlo", serif; color: black;"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;">Aside from the lines that have been commented out above -- I have tried modifying SSLCiphers from default mostly because someone mentioned that they were running under a newer version of OpenSSL that protected against
 weak Diffie Hellman keys (to prevent LogJam attack).  That didn't seem to help.  I have Trace running at 5 and Debug at 255.  </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"><br>
<br>
</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;">Any help would be appreciated.  </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"><br>
<br>
</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;">Thanks!</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"><br>
<br>
</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;">                   -p</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif;">
 </p>
</div>
<div id="x_Signature">
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="x_MsoNormal" style="margin: 0cm; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 9pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">--<br>
Pat Hirayama<br>
Systems Engineer | CIT / Systems Engineering | 206.667.4856 | </span><span style="font-size: 9pt; font-family: "Arial", sans-serif; color: rgb(18, 48, 84);"><a href="mailto:phirayam@fredhutch.org">phirayam@fredhutch.org</a></span><span style="font-size: 9pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">
 | Fred Hutch | Cures Start Here</span><span style="font-size: 9pt; font-family: "Arial", sans-serif; color: rgb(18, 48, 84);"></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>