389-ds-base-devel-1.3.10.2-15.el7_9>t  DH`pb$ƨ7S;ʳ"rC!.ό~ٖc+8wL2mU%qoQ`?!9.jKO1y'Qtt6H Yq-ADt߽nXOP 09 LmTR@$)Yo-n~V?qXw~,ϐx*hNczsZIbo*|_nAҭs W*o񖥥m@.= i3{|3H*~X:5*3 8lʻx.TQRT)` _qX,0_#W`3"JłP ~@KQZ1e,AHq1DܐaZYr[: 9qݻǙeX= Lw;bW٠.)l,1_BiX"?;fRg1IAhR`#̵eOZg ݲ[ ֔80094b616c93224cb1220c4e689253e2e1ec90d3p̉b$ƨ u{j7o2Ia+ ;'|WN&*BPG KKJ؍L^tteFb~J˕.*ucҏ4Do(*\a?b91sC1gD"#Maiݑ Pj Nb S&^-C_qeh ?y9Ε^/ ,>8sH?s8d & U -3<(( ,( |( (  (  ( ( x(@h(p (f8pr98r:^rGh(Hi|(Ij(XjDYjX\j(]k8(^mbnvdo;eo@foCloEto`(up(vpwq(xrd(ys s4C389-ds-base-devel1.3.10.215.el7_9Development libraries for 389 Directory ServerDevelopment Libraries and headers for the 389 Directory Server base package.bkx86-01.bsys.centos.orgmCentOSGPLv3+CentOS BuildSystem Development/Librarieshttps://www.port389.org/linuxx86_64 K[%4>Km l  fnD' r3A큤A큤bjbjbjbjbjbjbjbjbjbjbjbjbjbjbjbk^o ^o ^o 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.so.0.0.0libns-dshttpd-1.3.10.2.solibnunc-stans.so.0.1.0libsds.so.0.0.0libslapd.so.0.1.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot389-ds-base-1.3.10.2-15.el7_9.src.rpm389-ds-base-devel389-ds-base-devel(x86-64)pkgconfig(dirsrv)pkgconfig(libsds)pkgconfig(nunc-stans)@@@@@ @    /usr/bin/pkg-config389-ds-base-libslibeventlibldaputil.so.0()(64bit)libnunc-stans.so.0()(64bit)libsds.so.0()(64bit)libslapd.so.0()(64bit)libtalloclibteventnspr-develnss-developenldap-develpkgconfigpkgconfig(nspr)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)svrcore-develsystemd-libsrpmlib(PayloadIsXz)1.3.10.2-15.el7_93.343.0.4-14.6.0-14.0-14.1.35.2-14.11.3aa{@aHw`+``7@__@_"^@^?@^@^@^@^oj@^\@^\@^=Q@]]W]nU]A]:\Q\\P\g\@\\@\\mA@[@[@[[:@[[-[~[~[m~@[W[U@[L[L[L[L[0@[0@[+@[@ZZZyZyZk@Z`@ZX@Z*~Z }YZ@YZ@YZ@Y@YB@Y*@Y˒Y˒Y@Y6@Y$$@Y@Y i@Y i@Y i@Y i@XQ@XQ@X@X9@XP@XX@X@X@X2@W@W@Wu@W@Wt@W.@W~W~W@W@Ws@Ws@Wi,@Wi,@W_W^@W - 1.3.10.2-15Thierry Bordaz - 1.3.10.2-14Thierry Bordaz - 1.3.10.2-13Thierry Bordaz - 1.3.10.2-12Thierry Bordaz - 1.3.10.2-11Mark Reynolds - 1.3.10.2-10Mark Reynolds - 1.3.10.2-9Mark Reynolds - 1.3.10.2-8Mark Reynolds - 1.3.10.2-7Mark Reynolds - 1.3.10.2-6Mark Reynolds - 1.3.10.2-5Mark Reynolds - 1.3.10.2-4Mark Reynolds - 1.3.10.2-3Mark Reynolds - 1.3.10.2-2Mark Reynolds - 1.3.10.2-1Mark Reynolds - 1.3.10.1-7Mark Reynolds - 1.3.10.1-6Mark Reynolds - 1.3.10.1-5Mark Reynolds - 1.3.10.1-4Mark Reynolds - 1.3.10.1-3Mark Reynolds - 1.3.10.1-2Mark Reynolds - 1.3.10.1-1Mark Reynolds - 1.3.9.1-10Mark Reynolds - 1.3.9.1-9Mark Reynolds - 1.3.9.1-8Mark Reynolds - 1.3.9.1-7Mark Reynolds - 1.3.9.1-6Mark Reynolds - 1.3.9.1-5Mark Reynolds - 1.3.9.1-4Mark Reynolds - 1.3.9.1-3Mark Reynolds - 1.3.9.1-2Mark Reynolds - 1.3.9.1-1Mark Reynolds - 1.3.8.4-18Mark Reynolds - 1.3.8.4-17Mark Reynolds - 1.3.8.4-16Mark Reynolds - 1.3.8.4-15Mark Reynolds - 1.3.8.4-14Mark Reynolds - 1.3.8.4-13Mark Reynolds - 1.3.8.4-12Mark Reynolds - 1.3.8.4-11Mark Reynolds - 1.3.8.4-10Mark Reynolds - 1.3.8.4-9Mark Reynolds - 1.3.8.4-8Mark Reynolds - 1.3.8.4-7Mark Reynolds - 1.3.8.4-6Mark Reynolds - 1.3.8.4-5Mark Reynolds - 1.3.8.4-4Mark Reynolds - 1.3.8.4-3Mark Reynolds - 1.3.8.4-2Mark Reynolds - 1.3.8.4-1Mark Reynolds - 1.3.8.2-1Mark Reynolds - 1.3.7.5-18Mark Reynolds - 1.3.7.5.17Mark Reynolds - 1.3.7.5-16Mark Reynolds - 1.3.7.5-15Mark Reynolds - 1.3.7.5-14Mark Reynolds - 1.3.7.5-13Mark Reynolds - 1.3.7.5-12Mark Reynolds - 1.3.7.5-11Mark Reynolds - 1.3.7.5-10Mark Reynolds - 1.3.7.5-9Mark Reynolds - 1.3.7.5-8Mark Reynolds - 1.3.7.5-7Mark Reynolds - 1.3.7.5-6Mark Reynolds - 1.3.7.5-5Mark Reynolds - 1.3.7.5-4Mark Reynolds - 1.3.7.5-3Mark Reynolds - 1.3.7.5-2Mark Reynolds - 1.3.7.5-1Mark Reynolds - 1.3.6.1-16Mark Reynolds - 1.3.6.1-15Mark Reynolds - 1.3.6.1-14Mark Reynolds - 1.3.6.1-13Mark Reynolds - 1.3.6.1-12Mark Reynolds - 1.3.6.1-11Mark Reynolds - 1.3.6.1-10Mark Reynolds - 1.3.6.1-9Mark Reynolds - 1.3.6.1-8Mark Reynolds - 1.3.6.1-7Mark Reynolds - 1.3.6.1-6Mark Reynolds - 1.3.6.1-5Mark Reynolds - 1.3.6.1-4Mark Reynolds - 1.3.6.1-3Mark Reynolds - 1.3.6.1-2Mark Reynolds - 1.3.6.1-1Noriko Hosoi - 1.3.5.10-12Noriko Hosoi - 1.3.5.10-11Noriko Hosoi - 1.3.5.10-10Noriko Hosoi - 1.3.5.10-9Noriko Hosoi - 1.3.5.10-8Noriko Hosoi - 1.3.5.10-7Noriko Hosoi - 1.3.5.10-6Noriko Hosoi - 1.3.5.10-5Noriko Hosoi - 1.3.5.10-4Noriko Hosoi - 1.3.5.10-3Noriko Hosoi - 1.3.5.10-2Noriko Hosoi - 1.3.5.10-1Noriko Hosoi - 1.3.5.9-1Noriko Hosoi - 1.3.5.8-1Noriko Hosoi - 1.3.5.7-1Noriko Hosoi - 1.3.5.6-1Noriko Hosoi - 1.3.5.5-1Noriko Hosoi - 1.3.5.4-1Noriko Hosoi - 1.3.5.3-1Noriko Hosoi - 1.3.5.2-1Noriko Hosoi - 1.3.4.0-19Noriko Hosoi - 1.3.4.0-18Noriko Hosoi - 1.3.4.0-17Noriko Hosoi - 1.3.4.0-16Noriko Hosoi - 1.3.4.0-15Noriko Hosoi - 1.3.4.0-14Noriko Hosoi - 1.3.4.0-13Noriko Hosoi - 1.3.4.0-12Noriko Hosoi - 1.3.4.0-11Noriko Hosoi - 1.3.4.0-10Noriko Hosoi - 1.3.4.0-9Noriko Hosoi - 1.3.4.0-8Noriko Hosoi - 1.3.4.0-7Noriko Hosoi - 1.3.4.0-6Noriko Hosoi - 1.3.4.0-5Noriko Hosoi - 1.3.4.0-4Noriko Hosoi - 1.3.4.0-3Noriko Hosoi - 1.3.4.0-2Noriko Hosoi - 1.3.4.0-1Noriko Hosoi - 1.3.3.1-19Noriko Hosoi - 1.3.3.1-18Noriko Hosoi - 1.3.3.1-17Noriko Hosoi - 1.3.3.1-16Noriko Hosoi - 1.3.3.1-15Noriko Hosoi - 1.3.3.1-14Noriko Hosoi - 1.3.3.1-13Noriko Hosoi - 1.3.3.1-12Noriko Hosoi - 1.3.3.1-11Noriko Hosoi - 1.3.3.1-10Noriko Hosoi - 1.3.3.1-9Noriko Hosoi - 1.3.3.1-8Noriko Hosoi - 1.3.3.1-7Noriko Hosoi - 1.3.3.1-6Noriko Hosoi - 1.3.3.1-5Noriko Hosoi - 1.3.3.1-4Rich Megginson - 1.3.3.1-3Noriko Hosoi - 1.3.3.1-2Noriko Hosoi - 1.3.3.1-1Noriko Hosoi - 1.3.1.6-26Noriko Hosoi - 1.3.1.6-25Noriko Hosoi - 1.3.1.6-24Noriko Hosoi - 1.3.1.6-23Noriko Hosoi - 1.3.1.6-22Noriko Hosoi - 1.3.1.6-21Noriko Hosoi - 1.3.1.6-20Noriko Hosoi - 1.3.1.6-19Noriko Hosoi - 1.3.1.6-18Noriko Hosoi - 1.3.1.6-17Daniel Mach - 1.3.1.6-16Noriko Hosoi - 1.3.1.6-15Noriko Hosoi - 1.3.1.6-14Daniel Mach - 1.3.1.6-13Noriko Hosoi - 1.3.1.6-12Rich Megginson - 1.3.1.6-11Rich Megginson - 1.3.1.6-10Noriko Hosoi - 1.3.1.6-9Noriko Hosoi - 1.3.1.6-8Rich Megginson - 1.3.1.6-7Rich Megginson - 1.3.1.6-6Rich Megginson - 1.3.1.6-5Noriko Hosoi - 1.3.1.6-4Rich Megginson - 1.3.1.6-3Noriko Hosoi - 1.3.1.6-2Noriko Hosoi - 1.3.1.6-1Noriko Hosoi - 1.3.1.5-1Noriko Hosoi - 1.3.1.4-1Rich Megginson - 1.3.1.3-1Jan Safranek - 1.3.1.2-2Noriko Hosoi - 1.3.1.2-1Noriko Hosoi - 1.3.1.1-1Noriko Hosoi - 1.3.1.0-1Noriko Hosoi - 1.3.0.5-1Mark Reynolds - 1.3.0.4-1Noriko Hosoi - 1.3.0.3-1Parag Nemade - 1.3.0.2-2Noriko Hosoi - 1.3.0.2-1Noriko Hosoi - 1.3.0.1-1Noriko Hosoi - 1.3.0.0-1Noriko Hosoi - 1.3.0-0.3.rc3Noriko Hosoi - 1.3.0-0.2.rc2Noriko Hosoi - 1.3.0-0.1.rc1Mark Reynolds - 1.3.0.a1-1Rich Megginson - 1.2.11.15-1Rich Megginson - 1.2.11.14-1Rich Megginson - 1.2.11.13-1Rich Megginson - 1.2.11.12-1Mark Reynolds - 1.2.11.11-1Mark Reynolds - 1.2.11.10-1Mark Reynolds - 1.2.11.9-1Mark Reynolds - 1.2.11.8-1Fedora Release Engineering - 1.2.11.7-2.2Petr Pisar - 1.2.11.7-2.1Rich Megginson - 1.2.11.7-2Rich Megginson - 1.2.11.7-1Rich Megginson - 1.2.11.6-1Rich Megginson - 1.2.11.5-2Rich Megginson - 1.2.11.5-1Petr Pisar - 1.2.11.4-1.1Rich Megginson - 1.2.11.4-1Rich Megginson - 1.2.11.3-1Rich Megginson - 1.2.11.2-1Rich Megginson - 1.2.11.1-1Rich Megginson - 1.2.11-0.1.a1Noriko Hosoi - 1.2.10.4-4Noriko Hosoi - 1.2.10.4-3Rich Megginson - 1.2.10.4-2Rich Megginson - 1.2.10.4-1Rich Megginson - 1.2.10.3-1Rich Megginson - 1.2.10.2-1Noriko Hosoi - 1.2.10.1-2Rich Megginson - 1.2.10.1-1Rich Megginson - 1.2.10.0-1Noriko Hosoi - 1.2.10-0.10.rc1.2Petr Pisar - 1.2.10-0.10.rc1.1Rich Megginson - 1.2.10-0.10.rc1Rich Megginson - 1.2.10-0.9.a8Rich Megginson - 1.2.10-0.8.a7Rich Megginson - 1.2.10-0.7.a7Fedora Release Engineering - 1.2.10-0.6.a6.1Rich Megginson - 1.2.10-0.6.a6Rich Megginson - 1.2.10-0.5.a5Rich Megginson - 1.2.10-0.4.a4Rich Megginson - 1.2.10.a3-0.3Rich Megginson - 1.2.10.a2-0.2Rich Megginson - 1.2.10.a1-0.1Rich Megginson - 1.2.9.10-2Rich Megginson - 1.2.9.10-1Rich Megginson - 1.2.9.9-1Rich Megginson - 1.2.9.8-1Rich Megginson - 1.2.9.7-1Rich Megginson - 1.2.9.6-1Rich Megginson - 1.2.9.5-1Rich Megginson - 1.2.9.4-1Rich Megginson - 1.2.9.3-1Rich Megginson - 1.2.9.2-1Rich Megginson - 1.2.9.1-2Rich Megginson - 1.2.9.1-1Petr Sabata - 1.2.9.0-1.2Petr Sabata - 1.2.9.0-1.1Rich Megginson - 1.2.9.0-1Rich Megginson - 1.2.9-0.2.a2Marcela Mašláňová - 1.2.9-0.1.a1.2Marcela Mašláňová - 1.2.9-0.1.a1.1Rich Megginson - 1.2.9-0.1.a1Rich Megginson - 1.2.8.3-1Rich Megginson - 1.2.8.2-1Rich Megginson - 1.2.8.1-1Rich Megginson - 1.2.8.0-1Rich Megginson - 1.2.8-0.10.rc5Rich Megginson - 1.2.8-0.9.rc4Rich Megginson - 1.2.8-0.8.rc2Caolán McNamara - 1.2.8-0.7.rc1Rich Megginson - 1.2.8-0.6.rc1Rich Megginson - 1.2.8-0.5.a3Rich Megginson - 1.2.8-0.4.a3Rich Megginson - 1.2.8-0.3.a3Fedora Release Engineering - 1.2.8-0.2.a2.1Rich Megginson - 1.2.8-0.2.a2Nathan Kinder - 1.2.8-0.1.a1Rich Megginson - 1.2.7.5-1Rich Megginson - 1.2.7.4-2Rich Megginson - 1.2.7.4-1Rich Megginson - 1.2.7.3-1Rich Megginson - 1.2.7.2-1Rich Megginson - 1.2.7.1-2Rich Megginson - 1.2.7.1-1Nathan Kinder - 1.2.7-2Nathan Kinder - 1.2.7-1Rich Megginson - 1.2.7-0.6.a5Rich Megginson - 1.2.7-0.5.a4Rich Megginson - 1.2.7-0.4.a3Rich Megginson - 1.2.7-0.3.a3Rich Megginson - 1.2.7-0.2.a2Rich Megginson - 1.2.7-0.1.a1Rich Megginson - 1.2.6.1-3Rich Megginson - 1.2.6.1-2Rich Megginson - 1.2.6.1-1Rich Megginson - 1.2.6-1Rich Megginson - 1.2.6-0.11.rc7Rich Megginson - 1.2.6-0.10.rc6Rich Megginson - 1.2.6-0.9.rc3Rich Megginson - 1.2.6-0.8.rc3Rich Megginson - 1.2.6-0.7.rc2Nathan Kinder - 1.2.6-0.6.rc1Rich Megginson - 1.2.6-0.5.rc1Marcela Maslanova - 1.2.6-0.4.a4.1Rich Megginson - 1.2.6-0.4.a4Nathan Kinder - 1.2.6-0.4.a3Caolán McNamara - 1.2.6-0.3.a2Rich Megginson - 1.2.6-0.2.a2Nathan Kinder - 1.2.6-0.1.a1Rich Megginson - 1.2.5-1Rich Megginson - 1.2.5-0.5.rc4Rich Megginson - 1.2.5-0.4.rc3Rich Megginson - 1.2.5-0.3.rc2Rich Megginson - 1.2.5-0.2.rc1Rich Megginson - 1.2.5-0.1.a1Rich Megginson - 1.2.4-1Rich Megginson - 1.2.3-1Caolán McNamara - 1.2.2-2Rich Megginson - 1.2.2-1Tomas Mraz - 1.2.1-5Noriko Hosoi - 1.2.1-4Rich Megginson - 1.2.1-3Fedora Release Engineering - 1.2.1-2Rich Megginson - 1.2.1-1Rich Megginson - 1.2.0-4Rich Megginson - 1.2.0-3Rich Megginson - 1.2.0-2Rich Megginson - 1.2.0-1Noriko Hosoi - 1.1.3-7Noriko Hosoi - 1.1.3-6Rich Megginson - 1.1.3-5Rich Megginson - 1.1.3-4Rich Megginson - 1.1.3-3Rich Megginson - 1.1.3-2Rich Megginson - 1.1.3-1Rich Megginson - 1.1.2-1Rich Megginson - 1.1.1-2Rich Megginson - 1.1.1-1Rich Megginson - 1.1.0.1-4Tom "spot" Callaway - 1.1.0.1-3Tom "spot" Callaway - 1.1.0.1-3Rich Megginson - 1.1.0.1-2Rich Megginson - 1.1.0.1-1Fedora Release Engineering - 1.1.0-5Rich Megginson - 1.1.0-4Release Engineering - 1.1.0-3Rich Megginson - 1.1.0-2.0Rich Megginson - 1.1.0-1.2Rich Megginson - 1.1.0-1.1Rich Megginson - 1.1.0-0.3.20070720Nathan Kinder - 1.1.0-0.2.20070320Rich Megginson - 1.1.0-0.1.20070320Rich Megginson - 1.1.0-0.1.20070223Rich Megginson - 1.1.0-0.1.20070213Rich Megginson - 1.1.0-1.el4.20070209Rich Megginson - 1.1.0-1.el4.20070207Rich Megginson - 1.1.0-1.el4.20070129Rich Megginson - 1.1.0-8.el4.20070125Rich Megginson - 1.1.0-7.el4.20070125Rich Megginson - 1.1.0-6.el4.20070125Rich Megginson - 1.1.0-5.el4.20070125Rich Megginson - 1.1.0-4.el4.20070119Rich Megginson - 1.1.0-3.el4.20070119Rich Megginson - 1.1.0-2.el4.20070119Rich Megginson - 1.1.0-1.el4.cvs20070119Rich Megginson - 1.1-0.1.cvs20070115Dennis Gilmore - 1.1-0.1.cvs20070108Rich Megginson - 1.0.99-16Rich Megginson - 1.0.99-15Rich Megginson - 1.0.99-14Rich Megginson - 1.0.99-13Rich Megginson - 1.0.99-12Rich Megginson - 1.0.99-11Rich Megginson - 1.0.99-10Rich Megginson - 1.0.99-9Rich Megginson - 1.0.99-8Rich Megginson - 1.0.99-7Rich Megginson - 1.0.99-6Rich Megginson - 1.0.99-5Rich Megginson - 1.0.99-4Rich Megginson - 1.0.99-3Rich Megginson - 1.0.99-2Rich Megginson - 1.0.99-1- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule- Bump version to 1.3.10.2-12- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)- Bump version to 1.3.10.1-4 - Resolves: Bug 1765106 - ipa-server-install is failing with ipapython.admintool: ERROR failed to create DS instance Command- Bump version to 1.3.10.1-3 - Resolves: Bug 1756182 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex - Resolves: Bug 1749236 - etime displayed has an order of magnitude 10 times smaller than it should be - Resolves: Bug 1758109 - AddressSanitizer: heap-use-after-free in import_free_job - Resolves: Bug 1676948 - After audit log file is rotated, DS version string is logged after each update - Resolves: Bug 1749595 - Extremely slow LDIF import with ldif2db- Bump version to 1.3.10.1-2 - Resolves: Bug 1748199 - EMBARGOED CVE-2019-14824 389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user - Resolves: Bug 1610234 - nsslapd-defaultnamingcontext does not change when the assigned suffix got deleted - Resolves: Bug 1723545 - Directory Server 10 not RFC 4511 compliant - Resolves: Bug 1724914 - LDAP server returning controltype in different sequence - Resolves: Bug 1739182 - CleanAllRUV task limit not enforced - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache - Resolves: Bug 1685059 - After running cl-dump dbdir/cldb/*ldif.done are not deleted- Bump version to 1.3.10.1-1 - Resolves: Bug 1639342 - Replace error by warning in the state machine defined in repl5_inc_run - Resolves: Bug 1691931 - memory leak in automember plugin - Resolves: Bug 1662461 - Log the actual base DN when the search fails with "invalid attribute request" - Resolves: Bug 1732053 - etime can contain invalid nanosecond value - Resolves: Bug 1546739 - consistency in the replication error codes while setting nsds5replicaid=65535- Bump version to 1.3.9.1-10 - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections- Bump version to 1.3.9.1-9 - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit) - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character- Bump version to 1.3.9.1-8 - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary - Resolves: Bug 1713361 - Update defaults.inf - Resolves: Bug 1708215 - maxlogsperdir accepting negative values - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together- Bump version to 1.3.9.1-7 - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients- Bump version to 1.3.9.1-6 - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7 - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist. - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass- Bump version to 1.3.9.1-5 - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections - Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit - Resolves: Bug 1615155 - extended search fails to match entries - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy- Bump version to 1.3.9.1-4 - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database. - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements. - Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 & 3)- Bump version to 1.3.9.1-3 - Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389 - Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone - Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members - Resolves: Bug 1673472 - the warning about skew time could last forever. - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod - Resolves: Bug 1482596 - referint update should discard any changes if mep update fails- Bump version to 1.3.9.1-2 - Resolves: Bug 1417340 - entry cache is not cleaned up if an operation is aborted - Resolves: Bug 1603140 - Export produces a non-importable ldif file - Resolves: Bug 1518320 - ns-slapd: crash in entrycache_add_int - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)* Bump version to 1.3.9.1-1 - Resolves: Bug 1438144 - [RFE] Include autounmembering feature in IPA - Resolves: Bug 1645359 - Rebase 389-ds-base in RHEL 7.7 to 1.3.9 - Resolves: Bug 1561769 - [RFE] revise the "transient error" message in a replication agreement's last update status - Resolves: Bug 1563999 - Is it possible for Directory server to reject the current password only? - Resolves: Bug 1597202 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass - Resolves: Bug 1643587 - default of "nsslapd-errorlog-maxlogsperdir: 1" causing huge log files - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist. - Resolves: Bug 1653163 - certmap fails when Issuer DN has comma in name - Resolves: Bug 1602001 - cannot add cenotaph in read only consumer - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day) - Resolves: Bug 1600631 - In repicated topology a single-valued attribute can diverge - Resolves: Bug 1626375 - on-line re-initialization hangs - Resolves: Bug 1627846 - Contention on virtual attribute lookup - Resolves: Bug 1642838 - after certain failed import operation, impossible to replay an import operation - Resolves: Bug 1647099 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified - Resolves: Bug 1648922 - during MODRDN referential integrity can fail erronously while updating large groups - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy - Resolves: Bug 1663829 - import task should not be deleted after import finishes to be able to query the status. - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements - Resolves: Bug 1622049 - db2bak.pl does not work with LDAPS, but ok with STARTTLS - Resolves: Bug 1633488 - fixup-memberof.pl -D cn=<> -w - -b <> -P LDAP fails with ldap_start_tls error - Resolves: Bug 1451460 - error messages during ldif2db after enabling encryption on an attribute - Resolves: Bug 1627512 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value- Bump version to 1.3.8.4-18 - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex- Bump version to 1.3.8.4-17 - Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int- Bump version to 1.3.8.4-16 - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical- Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch- Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack- Bump version to 1.3.8.4-13 - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly- Bump version to 1.3.8.4-12 - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)- Bump version to 1.3.8.4-11 - Resolves: Bug 1614820 - Server crash through modify command with large DN- Bump verison to 1.3.8.4-10 - Resolves: Bug 1614501 - Disable nunc-stans by default - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server- Bump version to 1.3.8.4-9 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-8 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-7 - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)- Bump version to 1.3.8.4-6 - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA- Bump version to 1.3.8.4-5 - Resolves: Bug 1595766 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default- Bump version to 1.3.8.4-4 - Resolves: Bug 1597384 - Async operations can hang when the server is running nunc-stans - Resolves: Bug 1598186 - A search with the scope "one" returns a non-matching entry - Resolves: Bug 1598718 - import fails if backend name is "default" - Resolves: Bug 1598478 - If a replica is created with a bindDNGroup, this group is taken into account only after bindDNGroupCheckInterval seconds - Resolves: Bug 1525256 - Invalid SNMP MIB for 389 DS - Resolves: Bug 1597518 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode- Bump version to 1.3.8.4-3 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-2 - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.- Bump version to 1.3.8.4-1 - Resolves: Bug 1560653 - Rebase 389-ds-base in RHEL 7.6 to 1.3.8- Bump version to 1.3.8.2-1 - Resolves: Bug 1560653 - Rebase 389-ds-base in RHEL 7.6 to 1.3.8- Bump version to 1.3.7.5-18 - Resolves: Bug 1539082 - Fix memory leak- Bump version to 1.3.7.5.17 - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp- Bump version to 1.3.7.5-16 - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP- Bump version to 1.3.7.5-15 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections- Bump version to 1.3.7.5-14 - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)- Bump version to 1.3.7.5-13 - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy- Bump version to 1.3.7.5-12 - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length - Resolves: Bug 1518287 - heap-use-after-free in csn_as - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL- Bump version to 1.3.7.5-11 - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get- Bump version to 1.3.7.5-10 - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled. - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes - Resolves: Bug 1498980 - heap corruption during import - Resolves: Bug 1511462 - scope one searches give incorrect results - Resolves: Bug 1514033 - opened connection are hanging, no longer poll- Bump version to 1.3.7.5-9 - Resolves: Bug 1271208 - Fix copy and paste error- Bump version to 1.3.7.5-8 - Resolves: Bug 1509016 - cleanallruv task is not logging any information- Bump version to 1.3.7.5-7 - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1506425 - Improve valueset sort performance during valueset purging - Resolves: Bug 1505046 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV - Resolves: Bug 1271208 - nsds5ReplicaProtocolTimeout attribute accepts negative values- Bump version to 1.3.7.5-6 - Resolves: Bug 1488836 - directory server fails to start because maxdisksize - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl - Resolves: Bug 1447308 - Add option to show full un-ellipsized output in status-dirsrv - Resolves: Bug 1438526 - Server allows to set any nsds5replicaid in the existing replica entry - Resolves: Bug 1185774 - Missing warning for invalid replica backoff configuration- Bump version to 1.3.7.5-5 - Resolves: Bug 1476207 - Enabling instance service doesn't work - Resolves: Bug 1434335 - Errors log filled with attrlist_replace - attr_replace - Resolves: Bug 1453155 - unable to retrieve specific cosAttribute when subtree password policy is configured - Resolves: Bug 1459965 - repl-monitor - matches null string many times in regex - Resolves: Bug 1463204 - Adding a database entry fails if the same database was deleted after an import - Resolves: Bug 1469567 - Activating roles returns error 16 - Resolves: Bug 1498773 - Installation of ipa fails with crash in topology plugin - Resolves: Bug 1501058 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends - Resolves: Bug 1352121 - [RFE] allow to enable MemberOf plugin in dedicated consumer- Bump version to 1.3.7.5-4 - Fix coverity warnings from convscan - Improve atomics- Bump version to 1.3.7.5-3 - specfile remove cap_net_bind_service+ep from ns-slapd- Bump version to 1.3.7.5-2 - specfile updates: add asan support, make nunc-stans default, and general cleanup- Bump version to 1.3.7.5-1 - Resolves: Bug 1470169 - Rebase 389-ds-base in RHEL 7.5 to 1.3.7- Bump version to 1.3.6.1-16 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird - Resolves: Bug 1456774 - ipa-replica server fails to upgrade- Bump version to 1.3.6.1-15 - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file" - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0- Bump version to 1.3.6.1-14 - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing. - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl- Bump version to 1.3.6.1-13 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)- Bump version to 1.3.6.1-12 - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10- Bump version to 1.3.6.1-11 - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl- Bump version to 1.3.6.1-10 - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous - Resolves: Bug 1377452 - Integer overflow in performance counters - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975 - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script- Bump version to 1.3.6.1-9 - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup- Bump version to 1.3.6.1-8 - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica - Resolves: Bug 1438029 - Overflow in memberof- Bump version to 1.3.6.1-7 - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression) - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.- Bump version to 1.3.6.1-6 - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set - Resolves: bug 1397288 - typo in logconv.pl man page - Resolves: bug 1436994 - incorrect pathes in pkg-config files - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75- Bump version to 1.3.6.1-5 - Resolves: bug 1377452 - Integer overflow in counters and monitor - Resolves: bug 1425907 - Harden password storage scheme - Resolves: bug 1431207 - ns-slapd killed by SIGABRT- Bump version to 1.3.6.1-4 - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch- Bump version to 1.3.6.1-3 - Fix spec file to include the tests- Bump version to 1.3.6.1-2 - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors - Resolves: bug 1432206 - content sync plugin can hang server shutdown - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1- Bump version to 1.3.6.1-1 - Resolves: bug 1388567 - Rebase 389-ds-base to 1.3.6 in RHEL-7.4- Release 1.3.5.10-12 - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992) - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328) - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909) - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014) - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)- Release 1.3.5.10-11 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates- Release 1.3.5.10-10 - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)- Release 1.3.5.10-9 - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958) - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960) - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967) - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964) - Resolves: bug 1369425 - ACI behaves erratically (DS 48972) - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957) - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969) - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970) - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)- Release 1.3.5.10-8 - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954) - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950) - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)- Release 1.3.5.10-7 - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1360976 - fixing a compiler warning- Release 1.3.5.10-6 - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928) - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939) - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934) - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940) - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882) - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) - Resolves: bug 1361321 - Duplicate collation entries (DS 48936) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat- Release 1.3.5.10-5 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)- Release 1.3.5.10-4 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919) - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767) - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924) - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922) - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916) - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)- Release 1.3.5.10-3 - Resolves: bug 1354374 - Fixing the tarball version in the sources file.- Release 1.3.5.10-2 - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743) - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755) - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914) - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)- Release 1.3.5.10-1 - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)- Release 1.3.5.9-1 - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636) - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899) - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)- Release 1.3.5.8-1 - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366)- Release 1.3.5.7-1 - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366) - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892) - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538) - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891) - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354) - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)- Release 1.3.5.6-1 - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636) - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234) - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py- Release 1.3.5.5-1 - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833) - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880) - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449) - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404) - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755) - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862) - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275) - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336) - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747) - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752) - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854) - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844) - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834) - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)- release 1.3.5.4-1 - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828) - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220) - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)- release 1.3.5.3-1 - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815) - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813) - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822) - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS (DS 48798)- release 1.3.5.2-1 - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283) - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757) - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777) - Resolves: bug 190862 - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142) - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548) - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285) - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332) - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016) - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129) - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109) - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280) - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144) - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951) - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326) - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289) - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244) - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290) - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252) - Resolves: bug 1258610 - total update request must not be lost (DS 48255) - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258) - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269) - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267) - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295) - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294) - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299) - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302) - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311) - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312) - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982) - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978) - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976) - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394) - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840) - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328) - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338) - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339) - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341) - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325) - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344) - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363) - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362) - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375) - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370) - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338) - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400) - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3] - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446) - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536) - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492) - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445) - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788) - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420) - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450) - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759) - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145) - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775) - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383) - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799) - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369) - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)- release 1.3.4.0-19 - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192) - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)- release 1.3.4.0-18 - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)- release 1.3.4.0-17 - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')- release 1.3.4.0-16 - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226) - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266) - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217) - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)- release 1.3.4.0-15 - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)- release 1.3.4.0-14 - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254) - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)- release 1.3.4.0-13 - Resolves: bug 1245519 - remove debug logging from retro cl (DS 47831)- release 1.3.4.0-12 - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243) - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)- release 1.3.4.0-11 - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249) - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686) - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511) - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245) - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)- release 1.3.4.0-10 - Resolves: bug 1245519 - Fix coverity issues (DS 47931)- release 1.3.4.0-9 - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215) - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232) - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931) - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228) - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231) - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)- release 1.3.4.0-8 - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910) - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179) - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48226) - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)- release 1.3.4.0-7 - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203) - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)- release 1.3.4.0-6 - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208) - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799) - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013) - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217) - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216) - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119) - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878) - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223) - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910) - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224) - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)- release 1.3.4.0-5 - Resolves: bug 1235060 - Fix coverity issues (DS 48203)- release 1.3.4.0-4 - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119) - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)- release 1.3.4.0-3 - Resolves: bug 1228823 - async simple paged results issue (DS 48192) - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212) - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)- release 1.3.4.0-2 - Resolves: bug 1235060 - Fix coverity issues - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)- Release 1.3.4.0-1 (rebase) - Enable nunc-stans for x86_64. - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640) - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669) - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801) - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900) - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905) - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927) - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957) - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526) - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963) - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008) - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981) - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980) - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934) - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617) - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001) - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005) - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723) - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966) - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025) - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)- release 1.3.3.1-19 - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)- release 1.3.3.1-18 - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)- release 1.3.3.1-17 - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)- release 1.3.3.1-16 - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn- release 1.3.3.1-15 - Setting correct build tag 'rhel-7.1-z-candidate'- release 1.3.3.1-14 - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030) Fixes spec file to make sure all the server instances are stopped before upgrade - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)- release 1.3.3.1-13 - Resolves: bug 1183655 - Fixed Covscan FORWARD_NULL defects (DS 47988)- release 1.3.3.1-12 - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 ) - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)- release 1.3.3.1-11 - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)- release 1.3.3.1-10 - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off - Resolves: bug 1166265 - DS hangs during online total update (DS 47942) - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526) - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950) - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949) - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947) - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967) - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969) - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970) - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960) - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636) - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722) - Resolves: bug 994690 - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451) - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451) - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451) - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525) - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)- release 1.3.3.1-9 - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928) - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)- release 1.3.3.1-8 - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937) - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948) - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)- release 1.3.3.1-7 - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928)- release 1.3.3.1-6 - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922) - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897) - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920) - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919) - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892) - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)- release 1.3.3.1-5 - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47892)- release 1.3.3.1-4 - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47750) - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908) - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838) - provide enabled ciphers as search result (DS 47880)- release 1.3.3.1-3 - Resolves: bug 1139882 - coverity defects found in 1.3.3.1- release 1.3.3.1-2 - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834) - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890) - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights) - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895) - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)- release 1.3.3.1-1 - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts. - Resolves: bug 920597 - Possible to add invalid ACI value - Resolves: bug 921162 - Possible to add nonexistent target to ACI - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message. - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync - Resolves: bug 951754 - Self entry access ACI not working properly - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1 - Resolves: bug 966443 - Plugin library path validation - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit" - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default - Resolves: bug 1024541 - start dirsrv after ntpd - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry - Resolves: bug 1031216 - add dbmon.sh - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - Resolves: bug 1044135 - make connection buffer size adjustable - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls - Resolves: bug 1044140 - Allow search to look up 'in memory RUV' - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change - Resolves: bug 1044144 - resurrected entry is not correctly indexed - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute - Resolves: bug 1044148 - The backend name provided to bak2db is not validated - Resolves: bug 1044149 - Winsync should support range retrieval - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised. - Resolves: bug 1044153 - mods optimizer - Resolves: bug 1044154 - multi master replication allows schema violation - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword" - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533 - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv - Resolves: bug 1044162 - enhance retro changelog - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog - Resolves: bug 1044164 - Password administrators should be able to violate password policy - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules - Resolves: bug 1044173 - make referential integrity configuration more flexible - Resolves: bug 1044177 - allow configuring changelog trim interval - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup - Resolves: bug 1044180 - memberOf on a user is converted to lowercase - Resolves: bug 1044181 - report unindexed internal searches - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats - Resolves: bug 1044188 - Recognize compressed log files - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected. - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area - Resolves: bug 1044205 - Allow memberOf to use an alternate config area - Resolves: bug 1044210 - idl switch does not work - Resolves: bug 1044211 - make old-idl tunable - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration - Resolves: bug 1044213 - backend performance - introduce optimization levels - Resolves: bug 1044215 - using transaction batchval violates durability - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation - Resolves: bug 1049030 - Windows Sync group issues - Resolves: bug 1052751 - Page control does not work if effective rights control is specified - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN - Resolves: bug 1057803 - logconv errors when search has invalid bind dn - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime. - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page. - Resolves: bug 1063990 - single valued attribute replicated ADD does not work - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate - Resolves: bug 1064986 - Replication retry time attributes cannot be added - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53 - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf - Resolves: bug 1077897 - Memory leak with proxy auth control - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX - Resolves: bug 1086902 - mem leak in do_bind when there is an error - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value. - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority - Resolves: bug 1097004 - Problem with deletion while replicated - Resolves: bug 1098654 - db2bak.pl error with changelogdb - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator. - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=* - Resolves: bug 1108870 - ACI warnings in error log - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors - Resolves: bug 1108874 - logconv.pl memory continually grows - Resolves: bug 1108881 - rsearch filter error on any search filter - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ? - Resolves: bug 1108909 - single valued attribute replicated ADD does not work - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs - Resolves: bug 1109339 - Nested tombstones become orphaned after purge - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled - Resolves: bug 1109357 - Coverity issue in 1.3.3 - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage - Resolves: bug 1109375 - provide default syntax plugin - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs - Resolves: bug 1113605 - server restart wipes out index config if there is a default index - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro - Resolves: bug 1117021 - Server deadlock if online import started while server is under load - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix. - Resolves: bug 1117979 - harden the list of ciphers available by default - Resolves: bug 1117981 - Fix various typos in manpages & code - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes - Resolves: bug 1118002 - server crashes deleting a replication agreement - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values - Resolves: bug 1118032 - Schema Replication Issue - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients - Resolves: bug 1118043 - Failed deletion of aci: no such attribute - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed. - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache - Resolves: bug 1118057 - online import crashes server if using verbose error logging - Resolves: bug 1118059 - add fixup-memberuid.pl script - Resolves: bug 1118060 - winsync plugin modify is broken - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144 - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages - Resolves: bug 1118077 - Improve import logging and abort handling - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]- release 1.3.1.6-26 - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)- release 1.3.1.6-25 - Resolves: bug 1082740 - ns-slapd crash in reliability 15- release 1.3.1.6-24 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.- Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch) Tue Mar 11 2014 Noriko Hosoi - 1.3.1.6-23 - release 1.3.1.6-22 - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)- release 1.3.1.6-22 - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)- release 1.3.1.6-21 - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408) - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)- release 1.3.1.6-20 - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)- release 1.3.1.6-19 - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)- release 1.3.1.6-18 - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471) - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374) - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374) - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)- release 1.3.1.6-17 - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443) - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)- Mass rebuild 2014-01-24- release 1.3.1.6-15 - Resolves: bug 918702 - better error message when cache overflows (Ticket 342) - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516) - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620) - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408) - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)- release 1.3.1.6-14 - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620) - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620) - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571) - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606) - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623) - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620) - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)- Mass rebuild 2013-12-27- release 1.3.1.6-12 - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620) - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592) - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614) - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591) - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596) - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599) - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598) - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597) - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587) - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613) - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)- Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches- release 1.3.1.6-10 - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - had to revert earlier change - does not work and breaks ipa- release 1.3.1.6-9 - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff- release 1.3.1.6-8 - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache- Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep - Resolves: bug 1018914 fixup memberof task does not work: task entry not added- Resolves: bug 1013900 - logconv: some stats do not work across server restarts - previous patch introduced regressions - fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551 - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - previous patch not complete, fixed by a11be5c Ticket 47513 - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password - cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes - Resolves: bug 1015252 locale "nl" not supported by collation plugin - Resolves: bug 1016317 Need to update supported locales - Resolves: bug 1016722 memory leak in range searches- Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs - Resolves: bug 1013894 - improve logconv.pl performance with large access logs - Resolves: bug 1013898 - Fix various issues with logconv.pl - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files - Resolves: bug 1013900 - logconv: some stats do not work across server restarts - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025- bump version to 1.3.1.6-4 - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489) - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449) - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)- Ticket #47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly- bump version to 1.3.1.6-2 - Resolves Bug 1000633 - ns-slapd crash due to bogus DN - Ticket #47488 - Users from AD sub OU does not sync to IPA- bump version to 1.3.1.6 - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - fix coverity 11915 - dead code - introduced with fix for ticket 346 - fix coverity 11895 - null deref - caused by fix to ticket 47392 - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback - Fix compiler warnings for Ticket 47395 and 47397 - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107) - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch - fix compiler warnings - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)- bump version to 1.3.1.5 - Ticket 47456 - delete present values should append values to deleted values - Ticket 47455 - valgrind - value mem leaks, uninit mem usage - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication - Ticket 47440 - Fix runtime errors caused by last patch. - Ticket 47440 - Fix compilation warnings and header files - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D - Ticket 47378 - fix recent compiler warnings - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47449 - deadlock after adding and deleting entries - Ticket 47441 - Disk Monitoring not checking filesystem with logs - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold- bump version to 1.3.1.4 - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry - Ticket 47421 - memory leaks in set_krb5_creds - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v - Ticket 47369 version2 - provide default syntax plugin - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15 - Ticket 47392 - ldbm errors when adding/modifying/deleting entries - Ticket 47385 - Disk Monitoring is not triggered as expected. - Ticket 47410 - changelog db deadlocks with DNA and replication- bump version to 1.3.1.3 - Ticket 47374 - flush.pl is not included in perl5 - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix) - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured - Ticket 47396 - crash on modrdn of tombstone - Ticket 47400 - MMR stress test with dna enabled causes a deadlock - Ticket 47409 - allow setting db deadlock rejection policy - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'- Rebuilt for new net-snmp- bump version to 1.3.1.2 - Ticket 47391 - deleting and adding userpassword fails to update the password - Coverity Fixes (Part 7)- bump version to 1.3.1.1 - Ticket 402 - nhashed#user#password in entry extension - Ticket 511 - Revision - allow turning off vattr lookup in search entry return - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate - Ticket 47327 - error syncing group if group member user is not synced - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback - Ticket 47359 - new ldap connections can block ldaps and ldapi connections - Ticket 47362 - ipa upgrade selinuxusermap data not replicating - Ticket 47375 - flush_ber error sending back start_tls response will deadlock - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3) - Ticket 47377 - make listen backlog size configurable - Ticket 47378 - fix recent compiler warnings - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached - Coverity Fixes (part 1) - Coverity Fixes (Part 2) - Coverity Fixes (Part 3) - Coverity Fixes (Part 4) - Coverity Fixes (Part 5)- bump version to 1.3.1.0 - Ticket 332 - Command line perl scripts should attempt most secure connection type first - Ticket 342 - better error message when cache overflows - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager - Ticket 419 - logconv.pl - improve memory management - Ticket 422 - 389-ds-base - Can't call method "getText" - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional) - Ticket 508 - lock-free access to FrontendConfig structure - Ticket 511 - allow turning off vattr lookup in search entry return - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time - Ticket 528 - RFE - get rid of instance specific scripts - Ticket 529 - dn normalization must handle multiple space characters in attributes - Ticket 532 - RUV is not getting updated for both Master and consumer - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured - Ticket 534 - RFE: Add SASL mappings fallback - Ticket 537 - Improvement of range search - Ticket 539 - logconv.pl should handle microsecond timing - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck() - Ticket 547 - Incorrect assumption in ndn cache - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration - Ticket 558 - Replication - make timeout for protocol shutdown configurable - Ticket 561 - disable writing unhashed#user#password to changelog - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized. - Ticket 565 - turbo mode and replication - allow disable of turbo mode - Ticket 571 - server does not accept 0 length LDAP Control sequence - Ticket 574 - problems with dbcachesize disk space calculation - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions - Ticket 585 - Behaviours of "db2ldif -a " and "db2ldif.pl -a " are inconsistent - Ticket 587 - Replication error messages in the DS error logs - Ticket 588 - Create MAN pages for command line scripts - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control - Ticket 603 - A logic error in str2simple - Ticket 604 - Required attribute not checked during search operation - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND - Ticket 612 - improve dbgen rdn generation, output - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements - Ticket 616 - High contention on computed attribute lock - Ticket 618 - Crash at shutdown while stopping replica agreements - Ticket 620 - Better logging of error messages for 389-ds-base - Ticket 621 - modify operations without values need to be written to the changelog - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork - Ticket 47299 - allow cmdline scripts to work with non-root user - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances - Ticket 47304 - reinitialization of a master with a disabled agreement hangs - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task) - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64 - Ticket 47315 - filter option in fixup-memberof requires more clarification - Ticket 47325 - Crash at shutdown on a replica aggrement - Ticket 47330 - changelog db extension / upgrade is obsolete - Ticket 47336 - logconv.pl -m not working for all stats - Ticket 47341 - logconv.pl -m time calculation is wrong - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide - Ticket 47347 - Simple paged results should support async search - Ticket 47348 - add etimes to per second/minute stats - Ticket 47349 - DS instance crashes under a high load- bump version to 1.3.0.5 - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse - Ticket 628 - crash in aci evaluation - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion- e53d691 bump version to 1.3.0.4 - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled) - Ticket 490 - Slow role performance when using a lot of roles - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry- bump version to 1.3.0.3 - Ticket #584 - Existence of an entry is not checked when its password is to be deleted - Ticket 562 - Crash when deleting suffix- Rebuild for icu 50- bump version to 1.3.0.2 - Ticket #542 - Cannot dynamically set nsslapd-maxbersize- bump version to 1.3.0.1 - Ticket 556 - Don't overwrite certmap.conf during upgrade- bump version to 1.3.0.0- bump version to 1.3.0.rc3 - Ticket 549 - DNA plugin no longer reports additional info when range is depleted - Ticket 541 - need to set plugin as off in ldif template - Ticket 541 - RootDN Access Control plugin is missing after upgrade- bump version to 1.3.0.rc2 - Trac Ticket #497 - Escaped character cannot be used in the substring search filter - Ticket 509 - lock-free access to be->be_suffixlock - Trac Ticket #522 - betxn: upgrade is not implemented yet- bump version to 1.3.0.rc1 - Ticket #322 - Create DOAP description for the 389 Directory Server project - Trac Ticket #499 - Handling URP results is not corrrect - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 456 - improve entry cache sizing - Trac Ticket #531 - loading an entry from the database should use str2entry_f - Trac Ticket #536 - Clean up compiler warnings for 1.3 - Trac Ticket #531 - loading an entry from the database should use str2entry_fast - Ticket 509 - lock-free access to be->be_suffixlock - Ticket 527 - ns-slapd segfaults if it cannot rename the logs - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't - Ticket 216 - disable replication agreements - Ticket 518 - dse.ldif is 0 length after server kill or machine kill - Ticket 393 - Change in winSyncInterval does not take immediate effect - Ticket 20 - Allow automember to work on entries that have already been added - Coverity Fixes - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5 - Ticket 337 - improve CLEANRUV functionality - Fix for ticket 504 - Ticket 394 - modify-delete userpassword - minor fixes for bdb 4.2/4.3 and mozldap - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort - Fix for ticket 465: cn=monitor showing stats for other db instances - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type - Coverity defect: Resource leak 13110 - Ticket 517 - crash in DNA if no dnaMagicRegen is specified - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry - Trac Ticket #519 - Search with a complex filter including range search is slow - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error - Trac Ticket #311 - IP lookup failing with multiple DNS entries - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error - Ticket #503 - Improve AD version in winsync log message - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message - Coverity fixes - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs - Trac Ticket #498 - Cannot abaondon simple paged result search - Coverity defects - Trac Ticket #494 - slapd entered to infinite loop during new index addition - Fixing compiler warnings in the posix-winsync plugin - Coverity defects - Ticket 147 - Internal Password Policy usage very inefficient - Ticket 495 - internalModifiersname not updated by DNA plugin - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin" - Ticket 495 - internalModifiersname not updated by DNA plugin - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h]) - Ticket 486 - nsslapd-enablePlugin should not be multivalued - Ticket 488 - Doc: DS error log messages with typo - Trac Ticket #451 - Allow db2ldif to be quiet - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes - Ticket #481 - expand nested posix groups - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password - Ticket #446 - anonymous limits are being applied to directory managerTicket #28 MOD operations with chained delete/add get back error 53 on backend config Ticket #173 ds-logpipe.py script's man page and script help should be updated for -t option. Ticket #196 RFE: Interpret IPV6 addresses for ACIs, replication, and chaining Ticket #218 RFE - Make RIP working with Replicated Entries Ticket #328 make sure all internal search filters are properly escaped Ticket #329 389-admin build fails on F-18 with new apache Ticket #344 deadlock in replica_write_ruv Ticket #351 use betxn plugins by default Ticket #352 make cos, roles, views betxn aware Ticket #356 logconv.pl - RFE - track bind info Ticket #365 Audit log - clear text password in user changes Ticket #370 Opening merge qualifier CoS entry using RHDS console changes the entry. Ticket #372 Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing Ticket #386 Overconsumption of memory with large cachememsize and heavy use of ldapmodify Ticket #402 unhashedTicket #userTicket #password in entry extension Ticket #408 Create a normalized dn cache Ticket #453 db2index with -tattrname:type,type fails Ticket #461 fix build problem with mozldap c sdk Ticket #462 add test for include file mntent.h Ticket #463 different parameters of getmntent in Solaris- Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start - Ticket 473 - change VERSION.sh to have console version be major.minor - Ticket 475 - Root DN Access Control - improve value checking for config - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension - Ticket 474 - Root DN Access Control - days allowed not working correctly - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas - 0b79915 fix compiler warnings in ticket 374 code - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope- Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement - Ticket 386 - large memory growth with ldapmodify(heap fragmentation) - this patch doesn't fix the bug - it allows us to experiment with - different values of mxfast - Ticket #374 - consumer can go into total update mode for no reason- Ticket #426 - support posix schema for user and group sync - 1) plugin config ldif must contain pluginid, etc. during upgrade or it - will fail due to schema errors - 2) posix winsync should have a lower precedence (25) than the default (50) - so that it will be run first - 3) posix winsync should support the Winsync API v3 - the v2 functions are - just stubs for now - but the precedence cb is active- 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete - ba1f5b2 fix coverity resource leak in windows_plugin_add - e3e81db Simplify program flow: change while loops to for - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0) - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar - 77eb760 Simplify program flow: eliminate unnecessary continue - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking - d49035c Factorize into new isPosixGroup function - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly - Ticket #355 - winsync should not delete entry that appears to be out of scope - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values. - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code - 2734a71 CLEANALLRUV coverity fixes - Ticket #426 - support posix schema for user and group sync - Ticket #430 - server to server ssl client auth broken with latest openldap6c0778f bumped version to 1.2.11.11 Ticket 429 - added nsslapd-readonly to DS schema Ticket 403 - fix CLEANALLRUV regression from last commit Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute valuesdb6b354 bumped version to 1.2.11.10 Ticket 403 - CLEANALLRUV revisionsea05e69 Bumped version to 1.2.11.9 Ticket 407 - dna memory leak - fix crash from prev fixddcf669 bump version to 1.2.11.8 for offical release Ticket #425 - support multiple winsync plugins Ticket 403 - cleanallruv coverity fixes Ticket 407 - memory leak in dna plugin Ticket 403 - CLEANALLRUV feature Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs 3168f04 Coverity defects 5ff0a02 COVERITY FIXES Ticket #388 - Improve replication agreement status messages 0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion Ticket #409 - Report during startup if nsslapd-cachememsize is too small Ticket #412 - memberof performance enhancement 12813: Uninitialized pointer read string_values2keys Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values Ticket #410 - Referential integrity plug-in does not work when update interval is not zero Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled Ticket #405 - referint modrdn not working if case is different Ticket 399 - slapi_ldap_bind() doesn't check bind results- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- Perl 5.16 rebuild- Ticket 378 - unhashed#user#password visible after changing password - fix func declaration from previous patch - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error- Trac Ticket 396 - Account Usability Control Not Working- Ticket #378 - audit log does not log unhashed password: enabled, by default. - Ticket #378 - unhashed#user#password visible after changing password - Ticket #365 - passwords in clear text in the audit log- workaround for https://bugzilla.redhat.com/show_bug.cgi?id=833529- Ticket #387 - managed entry sometimes doesn't delete the managed entry - 5903815 improve txn test index handling - Ticket #360 - ldapmodify returns Operations error - fix delete caching - bcfa9e3 Coverity Fix for CLEANALLRUV - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #389 - ADD operations not in audit log - 44cdc84 fix coverity issues with uninit vals, no return checking - Ticket 368 - Make the cleanAllRUV task one step - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week- Perl 5.16 rebuild- Ticket #360 - ldapmodify returns Operations error - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress - Ticket #361: Bad DNs in ACIs can segfault ns-slapd - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #337 - Improve CLEANRUV task- Ticket #358 - managed entry doesn't delete linked entry- Ticket #351 - use betxn plugins by default - revert - make no plugins betxn by default - too great a risk - for deadlocks until we can test this better - Ticket #348 - crash in ldap_initialize with multiple threads - fixes PR_Init problem in ldclt- f227f11 Suppress alert on unavailable port with forced setup - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return - Ticket #351 - use betxn plugins by default - Trac Ticket #345 - db deadlock return should not log error - Ticket #348 - crash in ldap_initialize with multiple threads - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied - Ticket #207 - [RFE] enable attribute that tracks when a password was last set - Ticket #216 - RFE - Disable replication agreements - Ticket #337 - RFE - Improve CLEANRUV functionality - Ticket #326 - MemberOf plugin should work on all backends - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type - Ticket #347 - IPA dirsvr seg-fault during system longevity test - Trac Ticket #310 - Avoid calling escape_string() for logged DNs - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object - Ticket #183 - passwordMaxFailure should lockout password one sooner - Trac Ticket #335 - transaction retries need to be cache aware - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - Ticket #325 - logconv.pl : use of getopts to parse command line options - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV) - 554e29d Coverity Fixes - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions - Ticket #315 - small fix to libglobs - Ticket #315 - ns-slapd exits/crashes if /var fills up - Ticket #20 - Allow automember to work on entries that have already been added - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.- 453eb97 schema def must have DESC '' - close paren must be preceded by space - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #331 - transaction errors with db 4.3 and db 4.2 - Ticket #261 - Add Solaris i386 - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks - Ticket #324 - Sync with group attribute containing () fails - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV - 77cacd9 coverity 12606 Logically dead code - Trac Ticket #303 - make DNA range requests work with transactions - Ticket #320 - allow most plugins to be betxn plugins - Ticket #24 - Add nsTLS1 to the DS schema - Ticket #271 - Slow shutdown when you have 100+ replication agreements - TIcket #285 - compilation fixes for '--format-security' - Ticket 211 - Avoid preop range requests non-DNA operations - Ticket #271 - replication code cleanup - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages. - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs - 6f8680a coverity 12563 Read from pointer after free (fix 2) - e6a9b22 coverity 12563 Read from pointer after free - 245d494 Config changes fail because of unknown attribute "internalModifiersname" - Ticket #191 - Implement SO_KEEPALIVE in network calls - Ticket #289 - allow betxn plugin config changes - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback - e2532d8 init txn thread private data for all database modes - Ticket #291 - cannot use & in a sasl map search filter - 6bf6e79 Schema Reload crash fix - 60b2d12 Fixing compiler warnings - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e - Ticket #306 - void function cannot return value - ticket 181 - Allow PAM passthru plug-in to have multiple config entries - ticket 211 - Use of uninitialized variables in ldbm_back_modify() - Ticket #74 - Add schema for DNA plugin (RFE) - Ticket #301 - implement transaction support using thread local storage - Ticket #211 - dnaNextValue gets incremented even if the user addition fails - 144af59 coverity uninit var and resource leak - Trac Ticket #34 - remove-ds.pl does not remove everything - Trac Ticket #169 - allow 389 to use db5 - bc78101 fix compiler warning in acct policy plugin - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints - Trac Ticket #27 - SASL/PLAIN binds do not work - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops - Ticket #17 - new replication optimizations- Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++- Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames- get rid of posttrans - move update code to post- Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash- b05139b memleak in normalize_mods2bvals - c0eea24 memleak in mep_parse_config_entry - 90bc9eb handle null smods - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash - Ticket #306 - void function cannot return value - ticket 304 - Fix kernel version checking in dsktune- Trac Ticket #298 - crash when replicating orphaned tombstone entry - Ticket #281 - TLS not working with latest openldap - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse- Ticket #124 - add Provides: ldif2ldbm to rpm- Ticket #294 - 389 DS Segfaults during replica install in FreeIPA- Ticket 284 - Remove unnecessary SNMP MIB files - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5? - Ticket 175 - logconv.pl improvements- Introducing use_db4 macro to support db5 (libdb).- Rebuild against PCRE 8.30- ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources - Ticket #281 - TLS not working with latest openldap - Ticket #280 - extensible binary filters do not work - Ticket #279 - filter normalization does not use matching rules - Trac Ticket #275 - Invalid read reported by valgrind - Ticket #277 - cannot set repl referrals or state - Ticket #278 - Schema replication update failed: Invalid syntax - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server - Ticket #87 - Manpages fixes - c493fb4 fix a couple of minor coverity issues - Ticket #55 - Limit of 1024 characters for nsMatchingRule - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned - Ticket #6 - protocol error from proxied auth operation - Ticket #38 - nisDomain schema is incorrect - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword - Ticket #22 - RFE: Support sendmail LDAP routing schema - Ticket #161 - Review and address latest Coverity issues - Ticket #140 - incorrect memset parameters - Trac Ticket 35 - Log not clear enough on schema errors - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given- Ticket #272 - add tombstonenumsubordinates to schema- fixes for systemd - remove .pid files after shutting down servers - Ticket #263 - add systemd include directive - Ticket #264 - upgrade needs better check for "server is running"- Ticket #262 - pid file not removed with systemd - Ticket #50 - server should not call a plugin after the plugin close function is called - Ticket #18 - Data inconsitency during replication - Ticket #49 - better handling for server shutdown while long running tasks are active - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI - 6aaeb77 add a hack to disable sasl hostname canonicalization - Ticket 168 - minssf should not apply to rootdse - Ticket #177 - logconv.pl doesn't detect restarts - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating - Ticket 75 - Unconfigure plugin opperations are being called. - Ticket 26 - Please support setting defaultNamingContext in the rootdse. - Ticket #71 - unable to delete managed entry config - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock - Ticket #256 - debug build assertion in ACL_EvalDestroy() - Ticket #4 - bak2db gets stuck in infinite loop - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS - Ticket #3: acl cache overflown problem - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- Bug 755725 - 389 programs linked against openldap crash during shutdown - Bug 755754 - Unable to start dirsrv service using systemd - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere - 5910551 csn_init_as_string should not use sscanf - b53ba00 reduce calls to csn_as_string and slapi_log_error - c897267 fix member variable name error in slapi_uniqueIDFormat - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf - Bug 751645 - crash when simple paged fails to send entry to client - Bug 752155 - Use restorecon after creating init script lock file- Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD' - Bug 750625 750624 750622 744946 Coverity issues - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication - Bug 745259 - Incorrect entryUSN index under high load in replicated environment - f639711 Reduce the number of DN normalization - c06a8fa Keep unhashed password psuedo-attribute in the adding entry - Bug 744945 - nsslapd-counters attribute value cannot be set to "off" - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular - d316a67 Change referential integrity to be a betxnpostoperation plugin- Bug 741744 - part3 - MOD operations with chained delete/add get back error 53 - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in - b6d3ba7 pass the plugin config entry to the plugin init function - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins - Bug 743966 - Compiler warnings in account usability plugin- 498c42b fix transaction support in ldbm_delete- Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user- Bug 695736 - Providing native systemd file- corrected source- Bug 735114 - renaming a managed entry does not update mepmanagedby- Bug 735121 - simple paged search + ip/dns based ACI hangs server - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.- Bug 732153 - subtree and user account lockout policies implemented? - Bug 722292 - Entries in DS are not updated properly when using WinSync API- Bug 733103 - large targetattr list with syntax errors cause server to crash or hang - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining - Bug 732541 - Ignore error 32 when adding automember config - Bug 728592 - Allow ns-slapd to start with an invalid server cert- Bug 728510 - Run dirsync after sending updates to AD - Bug 729717 - Fatal error messages when syncing deletes from AD - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working. - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash - Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed again - separate tests for atomic ops and atomic bool cas- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix another coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - Fix coverity NULL deref in previous patch- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error - previous patch broke build on el5- Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error- Bug 723937 - Slapi_Counter API broken on 32-bit F15 - fixed to use configure test for GCC provided 64-bit atomic functions- Bug 663752 - Cert renewal for attrcrypt and encchangelog - this was "re-fixed" due to a deadlock condition with cl2ldif task cancel - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma - Bug 725743 - Make memberOf use PRMonitor for it's operation lock - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package - Bug 723937 - Slapi_Counter API broken on 32-bit F15- Perl mass rebuild- Perl mass rebuild- Bug 720059 - RDN with % can cause crashes or missing entries - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2. - Bug 691313 - Need TLS/SSL error messages in repl status and errors log - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not - Bug 713209 - Update sudo schema - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9 - Bug 718303 - Intensive updates on masters could break the consumer's cache - Bug 711679 - unresponsive LDAP service when deleting vlv on replica- 389-ds-base-1.2.9.a2 - look for separate openldap ldif library - Split automember regex rules into separate entries - writing Inf file shows SchemaFile = ARRAY(0xhexnum) - add support for ldif files with changetype: add - Bug 716980 - winsync uses old AD entry if new one not found - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9 - bump console version to 1.2.6 - Bug 711679 - unresponsive LDAP service when deleting vlv on replica - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package - Bug 663752 - Cert renewal for attrcrypt and encchangelog - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute - Bug 711906 - ns-slapd segfaults using suffix referrals - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode - Bug 710377 - Import with chain-on-update crashes ns-slapd - Bug 709826 - Memory leak: when extra referrals configured- Perl mass rebuild- Perl 5.14 mass rebuild- 389-ds-base-1.2.9.a1 - Auto Membership - More Coverity fixes- 389-ds-base-1.2.8.3 - Bug 700145 - userpasswd not replicating - Bug 700557 - Linked attrs callbacks access free'd pointers after close - Bug 694336 - Group sync hangs Windows initial Sync - Bug 700215 - ldclt core dumps - Bug 695779 - windows sync can lose old values when a new value is added - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET- 389-ds-base-1.2.8.2 - Bug 696407 - If an entry with a mixed case RDN is turned to be - a tombstone, it fails to assemble DN from entryrdn- 389-ds-base-1.2.8.1 - Bug 693962 - Full replica push loses some entries with multi-valued RDNs- 389-ds-base-1.2.8.0 - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1 - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1 - Bug 693466 - Unable to change schema online - Bug 693503 - matching rules do not inherit from superior attribute type - Bug 693455 - nsMatchingRule does not work with multiple values - Bug 693451 - cannot use localized matching rules - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5- 389-ds-base-1.2.8.rc5 - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"- 389-ds-base-1.2.8.rc4 - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - 389-ds-base-1.2.8.rc3 - Bug 690955 - Mrclone fails due to the replica generation id mismatch- 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2 - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format - Bug 681015 - RFE: allow fine grained password policy duration attributes - in days, hours, minutes, as well - Bug 684996 - Exported tombstone cannot be imported correctly - Bug 683250 - slapd crashing when traffic replayed - Bug 668909 - Can't modify replication agreement in some cases - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1 - Bug 644784 - Memory leak in "testbind.c" plugin - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree- rebuild for icu 4.6- 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1 - Bug 518890 - setup-ds-admin.pl - improve hostname validation - Bug 681015 - RFE: allow fine grained password policy duration attributes in - days, hours, minutes, as well - Bug 514190 - setup-ds-admin.pl --debug does not log to file - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically - Bug 674852 - crash in ldap-agent when using OpenLDAP - Bug 679978 - modifying attr value crashes the server, which is supposed to - be indexed as substring type, but has octetstring syntax - Bug 676655 - winsync stops working after server restart - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and - "--serverpid" options with "-t". - Bug 625424 - repl-monitor.pl doesn't work in hub node- Bug 676598 - 389-ds-base multilib: file conflicts - split off libs into a separate -libs package- do not create /var/run/dirsrv - setup will create it instead - remove the fedora-ds initscript upgrade stuff - we do not support that anymore - convert the remaining lua stuff to plain old shell script- 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3 - Bug 675320 - empty modify operation with repl on or lastmod off will crash server - Bug 675265 - preventryusn gets added to entries on a failed delete - Bug 677774 - added support for tmpfiles.d - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search es - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH - Bug 671199 - Don't allow other to write to rundir - Bug 678646 - Ignore tombstone operations in managed entry plug-in - Bug 676053 - export task followed by import task causes cache assertion - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8 - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used - Bug 676689 - crash while adding a new user to be synced to windows - Bug 604881 - admin server log files have incorrect permissions/ownerships - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv ice is restarted - Bug 675853 - dirsrv crash segfault in need_new_pw()- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2 - Bug 674430 - Improve error messages for attribute uniqueness - Bug 616213 - insufficient stack size for HP-UX on PA-RISC - Bug 615052 - intrinsics and 64-bit atomics code fails to compile - on PA-RISC - Bug 151705 - Need to update Console Cipher Preferences with new ciphers - Bug 668862 - init scripts return wrong error code - Bug 670616 - Allow SSF to be set for local (ldapi) connections - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the - log output to the text file - Bug 668619 - slapd stops responding - Bug 624547 - attrcrypt should query the given slot/token for - supported ciphers - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any - error message in logs- 1.2.8-0.1.a1 release - git tag 389-ds-base-1.2.8.a1 - many bug fixes- 1.2.7.5 release - git tag 389-ds-base-1.2.7.5 - Bug 663597 - Memory leaks in normalization code- Resolves: bug 656541 - use %ghost on files in /var/lock- 1.2.7.4 release - git tag 389-ds-base-1.2.7.4 - Bug 661792 - Valid managed entry config rejected- 1.2.7.3 release - git tag 389-ds-base-1.2.7.3 - Bug 658312 - Invalid free in Managed Entry plug-in - Bug 641944 - Don't normalize non-DN RDN values- 1.2.7.2 release - git tag 389-ds-base-1.2.7.2 - Bug 659456 - Incorrect usage of ber_printf() in winsync code - Bug 658309 - Process escaped characters in managed entry mappings - Bug 197886 - Initialize return value for UUID generation code - Bug 658312 - Allow mapped attribute types to be quoted - Bug 197886 - Avoid overflow of UUID generator- last commit had bogus commit log- 1.2.7.1 release - git tag 389-ds-base-1.2.7.1 - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes - Bug 656392 - Remove calls to ber_err_print() - Bug 625950 - hash nsslapd-rootpw changes in audit log- 1.2.7 release - git tag 389-ds-base-1.2.7- Bug 648949 - Merge dirsrv and dirsrv-admin policy modules into base policy- 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5 - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref erral) - Bug 635009 - Add one-way AD sync capability - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot - put replication config entries in separate file - Bug 567282 - server can not abandon searchRequest of "simple paged results" - Bug 329751 - "nested" filtered roles searches candidates more than needed - Bug 521088 - DNA should check ACLs before getting a value from the range- 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4 - Bug 647932 - multiple memberOf configuration adding memberOf where there is no member - Bug 491733 - dbtest crashes - Bug 606545 - core schema should include numSubordinates - Bug 638773 - permissions too loose on pid and lock files - Bug 189985 - Improve attribute uniqueness error message - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat ions - Bug 619633 - Make attribute uniqueness obey requiredObjectClass- 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Adding the ancestorid fix code to ##upgradednformat.pl.- 1.2.7.a3 release - a2 was never released - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs - Bug 629681 - Retro Changelog trimming does not behave as expected - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif - are not upgraded in the server instance schema dir- 1.2.7.a2 release - a1 was the OpenLDAP testday release - git tag 389-ds-base-1.2.7.a2 - added openldap support on platforms that use openldap with moznss - for crypto (F-14 and later) - many bug fixes - Account Policy Plugin (keep track of last login, disable old accounts)- added openldap support- bump rel to rebuild again- bump rel to rebuild- This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1 - Bug 634561 - Server crushes when using Windows Sync Agreement - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self - Bug 612264 - ACI issue with (targetattr='userPassword') - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager" - Bug 631862 - crash - delete entries not in cache + referint- This is the final 1.2.6 release- 1.2.6 release candidate 7 - git tag 389-ds-base-1.2.6.rc7 - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6- 1.2.6 release candidate 6 - git tag 389-ds-base-1.2.6.rc6 - Bug 617013 - repl-monitor.pl use cpu upto 90% - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors - Bug 613833 - Allow dirsrv_t to bind to rpc ports - Bug 612242 - membership change on DS does not show on AD - Bug 617629 - Missing aliases in new schema files - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments - Bug 617862 - Replication: Unable to delete tombstone errors - Bug 594745 - Get rid of dirsrv_lib_t label- make selinux-devel explicit Require the base package in order - to comply with Fedora Licensing Guidelines- 1.2.6 release candidate 3 - git tag 389-ds-base-1.2.6.rc3 - Bug 603942 - null deref in _ger_parse_control() for subjectdn - 609256 - Selinux: pwdhash fails if called via Admin Server CGI - 578296 - Attribute type entrydn needs to be added when subtree rename switch is on - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"- 1.2.6 release candidate 2- install replication session plugin header with devel package- 1.2.6 release candidate 1- Mass rebuild with perl-5.12.0- 1.2.6.a4 release- 1.2.6.a3 release - add managed entries plug-in - many bug fixes - moved selinux subpackage into base package- rebuild for icu 4.4- 1.2.6.a2 release - add support for matching rules - many bug fixes- 1.2.6.a1 release - Added SELinux policy and subpackages- 1.2.5 final release- 1.2.5.rc4 release- 1.2.5.rc3 release- 1.2.5.rc2 release- 1.2.5.rc1 release- 1.2.5.a1 release- 1.2.4 release - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif- 1.2.3 release - added template-initconfig to %files - %posttrans now runs update to update the server instances - servers are shutdown, then restarted if running before install - scriptlets mostly use lua now to pass data among scriptlet phases- rebuild with new openssl to fix dependencies- backed out - added template-initconfig to %files - this change is for the next major release - bump version to 1.2.2 - fix reopened 509472 db2index all does not reindex all the db backends correctly - fix 518520 - pre hashed salted passwords do not work - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of - bugs fixed in 1.2.2- rebuilt with new openssl- added template-initconfig to %files- added BuildRequires pcre- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- change name to 389 - change version to 1.2.1 - added initial support for numeric string syntax - added initial support for syntax validation - added initial support for paged results including sorting- final release 1.2.0 - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389 - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428- re-enable ppc builds- exclude ppc builds - needs extensive porting work- new release 1.2.0 - Made devel package depend on mozldap-devel - only create run dir if it does not exist - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330- added db4-utils to Requires for verify-db.pl- Enabled LDAPI autobind- updated update to patch bug463991-bdb47.patch- updated patch bug463991-bdb47.patch- added patch bug463991-bdb47.patch - make ds work with bdb 4.7- rolled back bogus winsync memory leak fix- winsync api improvements for modify operations- This is the 1.1.2 release. The bugs fixed can be found here - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721 - Added winsync-plugin.h to the devel subpackage- bump rev to rebuild and pick up new version of ICU- 1.1.1 release candidate - several bug fixes- fix bugzilla 439829 - patch to allow working with NSS 3.11.99 and later- add patch to allow server to work with NSS 3.11.99 and later - do NSS_Init after fork but before detaching from console- add Requires for versioned perl (libperl.so)- previous fix for 434403 used the wrong patch - this is the right one- Resolves bug 434403 - GCC 4.3 build fails - Rolled new source tarball which includes Nathan's fix for the struct ucred - NOTE: Change version back to 1.1.1 for next release - this release was pulled from CVS tag FedoraDirSvr110_gcc43- Autorebuild for GCC 4.3- This is the GA release of Fedora DS 1.1 - Removed version numbers for BuildRequires and Requires - Added full URL to source tarball- Rebuild for deps- This is the beta2 release - new file added to package - /etc/sysconfig/dirsrv - for setting - daemon environment as is usual in other linux daemons- fix build breakage due to open() - mock could not find BuildRequires: db4-devel >= 4.2.52 - mock works if >= version is removed - it correctly finds db4.6- Change pathnames to use the pkgname macro which is dirsrv - get rid of cvsdate in source name- Added Requires for perldap, cyrus sasl plugins - Removed template-migrate* files - Added perl module directory - Removed install.inf - setup-ds.pl can now easily generate one- added requires for mozldap-tools- update to latest sources - added migrateTo11 to allow migrating instances from 1.0.x to 1.1 - ldapi support - fixed pam passthru plugin ENTRY method- Renamed package to fedora-ds-base, but keep names of paths/files/services the same - use the shortname macro (fedora-ds) for names of paths, files, and services instead - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base - updated to latest sources- More cleanup suggested by Dennis Gilmore - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1- latest sources - added init scripts - use /etc as instconfigdir- latest sources - moved all executables to _bindir- latest sources - added /var/tmp/fedora-ds to dirs- added logconv.pl - added slapi-plugin.h to devel package - added explicit dirs for /var/log/fedora-ds et. al.- just move all .so files into the base package from the devel package- Move the plugin *.so files into the main package instead of the devel - package because they are loaded directly by name via dlopen- Move the script-templates directory to datadir/fedora-ds- change mozldap to mozldap6- remove . from cvsdate define- Having a problem building in Brew - may be Release format- Changed version to 1.1.0 and added Release 1.el4.cvs20070119 - merged in changes from Fedora Extras candidate spec file- Bump component versions (nspr, nss, svrcore, mozldap) to their latest - remove unneeded patches- update to a cvs snapshot - fedorafy the spec - create -devel subpackage - apply a patch to use mozldap not mozldap6 - apply a patch to allow --prefix to work correctly- Fixed the problem where the server would crash upon shutdown in dblayer - due to a race condition among the database housekeeping threads - Fix a problem with normalized absolute paths for db directories- Touch all of the ldap/admin/src/scripts/*.in files so that they - will be newer than their corresponding script template files, so - that make will rebuild them.- Chown new schema files when copying during instance creation- Configure will get ldapsdk_bindir from pkg-config, or $libdir/mozldap6- use eval to sed ./configure into ../configure- jump through hoops to be able to run ../configure- Need to make built dir in setup section- The template scripts needed to use @libdir@ instead of hardcoding - /usr/lib - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall - do the actual build in a "built" subdirectory, until we remove - the old script templates- Make replication plugin link with libdb- Have make define LIBDIR, BINDIR, etc. for C code to use - especially for create_instance.h- Forgot to checkin new config.h.in for AC_CONFIG_HEADERS- Add perldap as a Requires; update sources- Fix ds_newinst.pl - Remove obsolete #defines- Update sources; rebuild to populate brew yum repo with dirsec-nss- Update sources- initial revision  !"#$%&'(1.3.10.2-15.el7_91.3.10.2-15.el7_91.3.10.21.3.10.21.3.10.2dirsrvnunc-stans.hrepl-session-plugin.hsds.hslapi-plugin.hslapi_pal.hwinsync-plugin.hlibldaputil.solibns-dshttpd.solibnunc-stans.solibsds.solibslapd.sodirsrv.pclibsds.pcnunc-stans.pc389-ds-base-devel-1.3.10.2LICENSELICENSE.GPLv3+LICENSE.opensslREADME.develmd_docs_job-safety.3.gzns_job_t.3.gzns_thrpool_config.3.gznunc-stans.h.3.gzsds_bptree.3.gzsds_bptree_cow.3.gzsds_bptree_cow_instance.3.gzsds_bptree_instance.3.gzsds_bptree_node.3.gzsds_bptree_node_list.3.gzsds_bptree_transaction.3.gzsds_ht_instance.3.gzsds_ht_node.3.gzsds_ht_slot.3.gzsds_ht_value.3.gzsds_lqueue.3.gzsds_misc.3.gzsds_queue.3.gzsds_queue_node.3.gzsds_tqueue.3.gz/usr/include//usr/include/dirsrv//usr/lib64/dirsrv//usr/lib64/pkgconfig//usr/share/doc//usr/share/doc/389-ds-base-devel-1.3.10.2//usr/share/man/man3/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textC source, UTF-8 Unicode textpkgconfig filetroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, from Unix, max compression)troff or preprocessor input, ASCII text (gzip compressed data, from Unix, max compression) RRRRPRPRR PRR ?7zXZ !#,p] b2u jӫ`(1U ]( 7ҝjv|'^VQfmMEP ,Ɔ&l6Bv> ^̽Ozjl V+J27H2v?iM^:RzA4 ,#~_%N0;}6 MRTbHB6rC=|y`(_9ȣϤ(6UdEw %GwA_b7pM4FI)Ym]9b;jSê8&a Jmi'GBVLTݿF|]Mj= R] .AVw ph-҈ s}y̬Y`>u!(φoLm Zu+~˩WT5R}M1SFƪ)ѵ.kMJ?kq0D`c<#L M?vWrl9ff,СN$ T"^>:y'G8i{Ek>qp{$\_wO-/i[ AI, Տ#Y3-ۆZ3lmXd"> G3;lS:2PCĐ[V3:-)EVhU^\C~vܔ_~R.ȅϡ0= XdRh&~ )cȰ~9QJ ILWԐ>d+wM:xFJUd.@o"#%pOܻ+r^pE,ENq?;~qghdM›{Gxdh1_w7EA:&<4p/n2aK$Ndw"JY(;9ً_?yVJ#n :v'dnQy'o|A-atǹ9bcKH FYpi'THv@5!+liiSߜ(= 5nsau+nCP¹/"ʼnl ooijO-U:|U θL1ѝ֡􂓾[S[0Lw ˹!!߅rL:[HHQ5V w8Hj.E&K}+Z\a G{`ԢScmy/J.Gq&^<ѽxE2>e+Yi`UoXm@mRW}s3J`AX s>P^#mΙr)!uD{ ۡ#=nQڪ`kRl2bDP^VK~,4Hb+np++d{%O, aQ :s-jdB@E3پ$re<H]BEp3h#kG!VKSY4e7Hi 2|luoQMJhî!`Fن 3 yֶH?\47Pu[}VvagRa U 9gsл2򢸜]C\>~y0Xc`c8-x)Q$&LCڙmbgETC.dָFʟ;jO'a7=QbOgKqY)xr%}53V֬բ&v6Nnjf)bbW,.8 ofδ$+Z)WYSc$jqQX{t_nv\yB-3Z5f.&<@:k)K}4HtsJax V{zK@۵Lw;NNz7=^z]Aʁl \ފX~\Glex}rҍ|G>{6-N 5CXiC2]b$V^ˀEGh^2wPdI$zJފnX- l>swn.p&2p7`Ԙv6I{Ǟgba~[n.JӅ l[잰݊%&'p! *W{Ѷ5fA(5J a ()vͥMoIwv Q_Jw;;Q6Wݎ!mĸ*/mA?IEj1i2D}}` H3{KǵZLIE=z/iSNeҜ9Cq %,/T;fwCTCl&4M j-ц; 'k~"^'lRKb;"O7Q}? Ϊw4J{8Et7NEok`0󘻵 zmrw=!OnX< YD)ͩ/3BcA7Q0kjԼ)B,$݀ɿGA}j 1 O8'BkKD 6f#g]f,s@GK$!d.Xúz{n֘I`:Vʗ1R$cG wl9.a &^.$^Y-@g64>blg4 CCض0뎪o =o5ZphyX^h}2Մ #]GԤ?E2|mbuz7H9QBdv {mN/ qV{zbưVUl0e/sHr$tDoaUQaxnJ;Q\# N}qp%&hKSsD[Ms;B|$G8JﵜO)ˏE/p AQҠ6 / 138ls ^B~;.ۊQAnl;6ee{@РbM:5LdbCV4Mfwv`CK#Yd%oTZR;3N-cð:Dq~^?\4T;#йˀ:BBByIR;|S $18\% 2(x'8MZglËi=]ú16tvuÂE[ˉ# 886f#{Vâ GU]o\FxVJ#qr_vpF5wNKZI!͇pv҇pcbx6Gp4$+w ÕΎ+0_ ? ) "pn G\'瘈QÚD%ʨ8O硊dȵ㭚 *v/l'z,S`|REm!J Hݹfݼ|E_KRiHq&lPmY~]V<'d;Ϛ}dIC۩&\ s,=ݨn}Qb^BL +O+#]>L1ԪrMo[]:OMTRUdE\Ԥ8n@rqN.o1U$dm[b76vgKf6@7Ȟ4 \ Rzͣ6f[ŕAF ˭6%4k_?0e"9;X\3IhǬoZf@I\1_iĠlm7ۮu䘹݋Rd(uQ6rƖ Ό/ky 608IlJa~(,I]ͧ=RyDngXzǹyO21| a Tm > *1潣>yLmF-2t Cp_Z:HoE,mT$sPuM9%q9c^ `U|K9MV+ ]'և䈟F'5c3%RzzNN ;{| 4{LsxFeEJ.M/GӔbؔ`p#/ lDGS@ߡ&kDr|v JӉ:?D/VoG(69H12f=A3-iS;#ݏb!*uRi)c%%|eum rAQń~(k,c]2':柼&k`rdHNZl~ -b2?+tdHyұU4R1'e+whj/HV '¯2"muŏyhSٶ>4kM|wp*%y= o݊(䨜ZojHmAщ%eCqn1sqm:EKoҫ~"ۀ;•)=R 29Lm.}(ulb.cXt$y|Pt> Q%)Iu},%`W䌬KGz>4[U\Ŕҡ|`3"5j]YB^.'*j@5P^sē/4g!2]r޼CX|^v>!I3[/%[28QFZAc!3*'Kk 3?9DЃ5cZvo1ks8ߵX缠4Pӌ ،aAGz uZ݈EP^' h\"T{ׂe3p т&J(* ó%e 8Ozty2nGsUY7GȄ2|ˁژS%$?e6}DoɌ]kz&!dr~=ET2#| )@F  H7.:Vz2Sk=Xi 7[6z7kAߒiypghV[h۟l&u~qyX' AfԬl^*BȤjIB@E 7d}(R{ee74!N"2/9p0m׶ךx#K85{\p!UZ( 77W$%[LU4*i%,xkީ!0?+^Of?&i}nUqm3&9V@r2JUp6ãV4xҠƊ&S>ZpсaU?<ۘfl'?6e֞rujGzLH𔳤y՜6٘72rXzӍիڈ⬡x!s݇YW/YK7BZz#=s]4sQ~< =DfW6]R|2>kxk;5ݝ=>1Bi|zFQ,^U%&7=g(.;_y)5B3 d.$hZ"E0{'i05LeFt,F!%4$"h匪Kڏ;:Ǭ@cQq#oM6Ubj[X× >ξ JH"r AN6#IE& (z ^yLJgFR<| xke};nXy豻:sרZ&3Gͯ5qo' ||}*y]<ćl7"o.'0Opuu+q`9YkvEմrpOL;Nd0ii\T>Q*6UTς!F 89%DO =: Mt<>vbD:bH{"+-8>g]1|ǓIPp}ȵB.ɇɟ}(76P,ܞ-oryqaW ª ;iEeT(UpNV(D>=Po-hIEb⤸5NOt[&,(m|j4,W y笸Ȓ 8Xdɍ"ki:]2;m)}tsES (Taw>W[qPo.T!y7h &^xF);fSugMD?S!lΓͼ{>FzAl}>&ET\ z. Zp ԴmcF.0Ό8OtD/;wdˊtD/^tYxFLlaZ67?蘁RpJYWEC;=k(a VZ5B`Z*oV5hW_-Z(6xFYd2 A}TRQzsN7@=gz#ⵂ}@#/«wq] ȝ $0k4|Z:QMwTSVxF= VvaQmO?|[} Sٌv8KŲ!F =w/7龫FGP|B<fFٲnpx˞=h#D'UQTx+E1.#|6'0_29f?:P'59[6{dLhW4JgMqFxVZMbgDvA(Y&I#mZ6%kA #+ȜN_d/:,V;eLaR>!mN;%M;Rt絎K2WO3u#ZYIm^?Q$ǷUD<F3^ D(ﳰXoKO$^ǁWA]-NOϋĠZ=#[7D咖Ͷ'b}“]j?%j !*uXT-?Ңs;h>k>9FDܶmWmIN Qݞ[3_c#NvZ+=8sذgWRfDxl}>߃E}V@!PK@bjnC SH#bO8NRdF=g"6j{7i.3^))} E>ϱ{24.+r4s1~43 w0T,~7BSgyn]d\$nѩ,z8rrCF8zr'ƪٸTR< SluhS.qB Llɻ є<vb^%mnݏ+"($/z[XKƧ-\>6?AY̠$<^rdk(D>y3BD79(Qj‰(i bg&iTى[ jdRLA/|HR7szcc21˧G)P| "w=h*kn٬ t{(I~ZA);+{<`tFfk[ MiǬ 2.گY돨/$x-u9)nw+a~c^}h 6s d :*(*i4ޣKqx5r G"-⾽*g{w佸x%ih,ƴIދT;9KbPxfٮVacjr V\=;Y#>I [(_pFTBfYBhujx6rՈ'JQt7E f办5h9n!4kXaï] ҹ A4>WsqވA6?S{E*j3V:gD|MD $ߺ"^GlY8 h/+ pZC Iƀ(C]Gl C+j]wFo <_yj^7MR3uGhr-vxmΉwF..T9Kb>4x~P9_!,+v#j 2A!H!' xl=v(l.D!l4dHo3:֦u%r"\f;4Orh9%Ic{vY[`Ur(a"o=^:|JUx0Wr`, ˷e PgDjOؓ [YtlOnYJ@K?_32 :YQ%f:!=2DB㵫ů92ӇL1nSkgˬ չ'zʻ5<ce!rHހS!x6^SU_x%w3ia͈7^oE kk Zl@]vIWz>ڌeK3St&۫kes',E]biY LAiT&έN:dF.s﷗d;||{n}] ɐ/:9!Чhp!8A`OI$枒CEUwF4Wz孴odlE)u-iL2bR"C:W^0L>r>D/ܷs_ɸ@jƪ{tY; ITVpĕt^{.74ZDP"IDMBSM˩qd5u뒾i u`Ѯk=LB)@$s RR v2Gٴ)q#P{+GF e$mj[ζS3$Bܰ9vIbpi*>y62wj %Dd:TJw,Avs%.Ig,H~#8}:Uu4l 4}N~UJ':G$,nqv$D=Ahc n}6 { f${hJ%,Nzvl+C=i,:..޺Gm7PHCT@WU&E|ڠ:ֽ\{2yG%2E1>ϱˆ(%( jl_D'BTtrpVjD%v"ltl(~.(WJh_٧H1M?b-PvXtc)%^XBC,ڵyd[}"VCƫt<ލe8e'0oBgQCIz o\B޽Ǣ̀""ׇ؁;2F`c.FrtnnIaޔ@9`jH+5?IGq D>Y3,D]mAR_^Ǎh|+ ZNk_Ar"{-U7P_@ m:Z)P,g\` ١VS#3~ͪC"b8uK:ج:񃷑]sDȬcU|3&zFjC-t C9 ;8K-Ok6|o" wig!OHm: e}1-m)on(*$a1s(%`_үcMyxHiPABn3e@Uv@o4(]ۈbx':JeC#(‹p^sN69E?r[ʿ. (`EԞ|F6D\ s , e)_0ArP\3ӘPvn;s IgKyM*6vS c̻RB;VSߛJ.h '6\Ӂ-ӆCW e4ݖ; S`*(jcDXL]j}q_<H@wRnrJXR ɗn N5QJ3m2<(αG?X]s}a lھ?Prw?Hޣ|{]u32,GZ[5MGq 1!<9jG >kci]Xoȸ2rE(?*+vP_ϕU{7eh=Wh9!\ͩDG `fm29& GeTG ;E'k q&>lGZTGXqaLgsy( 8lPd5f=`$ d&^1 LٗlXmQ]<+y7n(~7z*HXDmXsX@#݁kyf'sN \$pБb$ q $a>63;p|Qw# /~v(< OTE~}xI$6{҂~ eSmcS^u kMn1soa4Sց"3w.k|=U( #Zm 3pдewLK7ITCAHt\̅KS_qe)P1&=j`ѝ7ᐪWՁ㋖~H% Mo.W`5/.H!i:bx6: G+3oE/(vG#ɷ'SF\Y 70st&(p43R;9gcw&eegM1!URIfBE&,V.nģevq:P+,xM|4:361ԓ+DK2ؤ|LaBH8ё. `g@ &K"NUd TJ#ut5T-{uxr6SZ}?92jt$0*FhȲS'U}$]+G%-2+%$oXI41b +WI s+)9=,I+aXhc~*?l…Ƴ6>73Fq\1ߡW%FՕ pH{ 3H:U+Eȋn\&V:{~ H% M mKRMzU/p3(ָ_C)W(7NhW>9S"y9)gLC)L0VTJ@Ɂ/ąڗ=})Sj .&)wi-ú}7o}<9V]cwNE4JEil빞a%3LtmJz6j'3E͖tD0f6 ?7*ZLmA7QNTG¤ӂ(OdbXIՒ,GwՁVѩX u|ro,?rS Dn 8,z^Kx4rh"_Us q`nb{lB#eNf xb}nwNΕ]r?ɱ]9YO+^UQKWHHxϯYsA˰?#x ;:yout1b~ Pjۥ?Gjd($@nqE*1O*~\SSV:X .c&;W LAB2\Qo"^(¨&r &V0g'p;f>4#zK2"8)irL;@Rl,R_Q׊Hxgo]f>Uޑ@3z~ PYG\ӲxjħbOhcF( l7ȹ -FkʪzHc 앱R-C=Oȣ3/p|J K7}J8}wyc7xwV'yoQgTgT2d0y(=㴛T/Āt"߆%9`C=_*?y8q>]Vj) [U}9ƻa;Aqr֫4A5mQ#3fɩmP Pq9i_N2A1"帬IUn6KN ┸O&NGH'_" 7]sYSXJUlmVWtrzA^{ʚ~bȐ[\o6vJTg㣿Q#֥YUC@$!5%W;NV[+r5&H}LSFJ 5kqnxj|e]'&{9顃s*2|#'zC03. HM$)<2EInXURjF W݅`iT\zA*LAAW RTkQ|NYɅ3KЎLK~·og=KDniH&L[dam**8ntpݫM)2 q_xI'a0űn5 M6ο=&f$|Y$aU++m6|c({;ҁŒ< o(OOSTIψNE tWU\csƾ_ v#t8{X128;-Xf0(z8K#flui=tNL.9'j(@s&XBj!m(VXnP܇קYQ=#zQ=*l5bȫ)Hg%Cjdv֟xIE1:RQJf3ϐޟ5{~[FM/S4*27(tGy9\=>IeD*] RwbƠfV%L%p-ӑB2-ozZ`77;.Ñ|JyIe[=xƗKBkfO4f' %+>㘸W]wkO|64.wlE Yd["J!uvv/dk<߂}$<)C n%_\!7!Ls}Ux+ CYHu6oQr$!A 0_K"Pqu +y Z}65z؊u&‹Qi5 ":nPWĠ\g]"AG)]}kbl,$Lqk|g6k }f5_fCZwpEPYRӞCs%!dw5&\sxBʜ #3n~y3`P_teSPg 4)'cW2c[ 3d䕘IvZPяȁi thS= ,Du*pm\Xɬ z3r>0 ͨ??R-ф܀ \IF ]J9_Ђ/+Yݯ-o:ҫu#U8ON?(`OFApXG 8 >IP Q}uplEBx;t{+q L[g7NbH G~YmpЧ3Q KҢaF?r |kg1[ǞJVc_Xg7}\W@I ,ŻbӁT4)qDD&x reM'4c+aɏQPcQ!ëT#e3L]\s[Vͳ'1/Pgb8"8%q`"7%US_%V 422s%q"t׾,G-ɝ5ҭ,+S,Nf WƑX`'GE&u|WcowΔmK)#ś6h8aզqd W~ T3'kwn#*r^]h1y"o"1=H<|[# S6۠-{05}CP/'hA]pHd\4ʄٛ#,xu|pU9nwL'Vp1' U_]TrY>?C9zXs=}RB2~U;ZKclw{a PR[Z}›s ΗrK5bT`_*^xM!?ĦtO&Hɴ0V..=OWim 9Ǻk.5SEd9"\ڀqy*XvW]?+ s层3.C(D!I"ψg"{Q6z' '֎G}9کrÆ=-*FaΓxƘXZ>O1Ԣ\vD4E3Z,nI ȶ7u钇p‡C)J,?͹qӋ,hVMhpleoh;=S\~ELN Ղӈ `6fh!m@ް: =/3$3!nU'a5B2)鞽5J_ T^mw.,R&j qlUʑ_'9'҂'Q|hrNpЕ`#WL8) =nZ\ZK #0eφkb]',cWE/>5ڷ㌧?<8g"ڄXWnt, %zwLBҌy킞NkP:~Z;7︸2aмr奺|E}YUpC} ZwWHIzt<]kwޡZtO߹9n}PH @q@k3:+Cfg$R{[.DsٙG[E9ˇŬ8d>lJ@~F.4YfIu]|")l;NuK4ʼ"zk~?Ct?s;"s>!G`{ co¦;c|SKvhjn@%ls'TqĦjlӱ9O' bLB:%Y&IWsЌI"# [h9IϞ jGx^≿f0<2(]Zxijڄ3~D;IDj/m&B$&^SZ˾&g 3_Q` ^U5Ƕ;bjE1=*.ոuPaGO.JbG~;54'[)۩+04%ևMy[Ynh p)[ n7J>m:=@ P}<2$z*br14ꭉL7IhV4˙~zA:EFPLҫTfjw5;-g #vk(=j/ZL"#zOU– ^?U*O!; {f^xj!1u#CYq{=w@Lo0%7Izo3XYt2Y@-'#&GkNHiR17iAAg;DBȦмx"':nnZivqMדOlL?2Ƨ=/]B_4ۀ'ȲtC mT0lPp`p @D2PwIˏޫ.ô  b{uTj/xE!*e%1zuBo[ReL6܈3 Y=Ow@>yP[YXu!GqqdPWIi-5;~r.v±{ {ϫ|[tffϋg q"k;ܬ z(zW`/ ÛTui@;߀hTyOҫ8a4v6q3"S)ZS]9M_^ZlKYx6%G\H SckPGh# )zEUD*ߘٟ6M # TДuCa~hEc U{Uϙj-a yWvuSd11DU9Avr*)lGC]¥g8}bht|ބexS.xUBaS3#kL=l D\.ɩ4gRMB8K]=.篒 0kxw?Bk~j!x hf\'ÃZI 6EXK1T[-yMS_7rpK,vW#u2hc A:sKdɳX;ct TVV'2GD]@a]50[;3(>{OItV6"I>0KUh.њh9^Z/ W m|8鼻Lj/3jSPJ%Pm~4Bc߬,5.#ƫP_qPa^f"3j]O\I|@1^)2/^O{>"T"l Le>‚ko1Wx>$\OeBJ=$3[pbZUH5R]1 Kui8jt)qEeHt7K\=%3BCn[sHtfN7Yk#X@P$D&a(#Z=~yz4u%̀Κ,$<G(e >SǽΚRϜzyR͐ srU̔LJu}gC_v"Ft$#XjGT#nMaKϧ3@Q兯e6 +"|!Bw{ /ykB^dmtKcl VO0XRx.1y"ٸv3WvsmA Q_*W^~ݷ̰xת~ARn&E3DU@8'h}Q>r!?W V)SI95|M/#Ʊ_L:)'̿ .M܎_}b=’H']LHk cE2AD[[.F0g\;QDTBʦQkGG0rJ  i%YkC`}r(Ct8'VJ. .l ĜgOk._+ea6r/̤b"%@Ȯ`Fh{\C(#\v@,/v y@V>TvDLtn'/Y њu(/NC&7sd!"IJJ (|R-hUra4լAO0Qo4D\~9F5G!@]=rd]lT'r5b nbAi MfO"BN=}`}ߺB݌ĂY #ǒ=1?!C䔯dY ]n1r<fe.ZbV?9Qr0"1Uo ɺCѦXVR)D?*0?{ x47Fo=uhjFPQ9EhyuC 4C;׊^h麡 U r4 >$Rd]^+lO﬍F~)7O#x ^["Uz1i$+Nf{C)';M]T5@'9(U1U'h@6??.ipB Ii\Ja$E>KAfpy˪֫UP`NИ8U="'Uv9u;b/(?&T:T{l>Yjcqvk^J.f hS>}е ~(Zgjsx6 XKV<T0HO뵙d6#2_?7&ΚkYٝ;R)` fZQd@N.@ֶekd[g!:d2s`_IZFW3HI*י1Ir5J PxtA$>sf',|30N\ *u(;]sΡ@ir*P; xсo<9JX+p3rߐCLV˩]-]˳w4 5X)w+)f[Q#/ L;e bKÌ̅ׯz Nn>TE29Xi@.]A&Ə;?jM ,Ӝ/+Ch%Qz k*;_.# ~ xZmH`,r^FmZ}eM\oϑ,\']_/_;6I/12ʚ-;Cs5*A$4?ȴ:@VQnN!)"B e$㿻>N{o*TID62/g|*#Lدjp06nk x4gmGn/h5jF5ǒI$$tv(.׫SulqXB1XޞwAPgBqX  g͊WQ6\K%Z^=J}ߠ:vch2;OEئ;;9pAV}ٰ ?0(<ߒC{Cue*StVlqa$b" mG3)Դ]HHrd?w@dQPdL8Hm/lE퉝Id5Ge@hZ6*Jgт53 I~*d6KhpO $˺hѲLLQgt٫-f OW¡fͥU<TRI+rCkX;-B;^&br Ø$A:^HN4`C#o -؝[PLUg,jQ2)}RlNlsx.F%敽>ƻ&{urt8Ν5/`"zW]e+_~a! /h0j{ ɹO֠t&# :?;wQ.7V +PL}(rj|_}֯j54t] P($P8{j9h_87ڋI,QׯǢh!*76jIxNh)w)!aBM8!8sfZ3-!RԈlr r!Z-.{V& yezY]e9%g \.R< M~gw^Zhw>' H>۷  kVG4zLS1f'ic#4͆|9bZXYSie&[i6Wzo79RٝҤt7Bѐ=;!B=?F?1ŚP"|^hL48i]pp@`&#+\*!jt qr*ޓ-j :* on:ZrWF! afNl`$V߸4}"iPމ,6G/CIU%_{T# c U|Vt\%cZn?>-?7F.[i%ͯwcD9)_6 FGq6eteyANN'c~.SYnx# p@be[ iAY-@۫TVr-{n U";x^m7vkr]y/ߥsM넬Hfd >v?y&Qwy6Q:$W M,λ麖Ajggri2D,nQ\VهjǁYwۺX\@b+ۃYR&&9`س ZS T-9regbq-Rz+=a +wq蹘cub|drAO;B"4u|ߤxZT$N.GvwpAtƃBxs8}0H V8Ee[/_d?^ՠ\i1hfT @-GtaO[Άo3]T:7F펎7U`?'BgYCȬF#ft#"*1M:`ekŸPw`![n5v³"3=7~q7'=MeHXJ_]E_eTco|ߘL&gk \B1 zB@OZ&2{ZlIKMoK^AHm /h%[lǢrn6dh|C}FPrcϔ3C9X2(d-}0|2ƭUNcFcԾ5goK0[e|Y#k[!KB<>rT*%cem4a*5|g\-A24JZs/ՋhC F{${ 8YJiwx}s 8Ӄޠ߱-)`fA[oюcVx/A=}<>1*- =L◰iҲw`Zy/1Gh[(# uΐMY{$ug?OhMig1M/\&:|XP7+Z0i4$*!M9g,b#jdWi^W'<%t]σw ?(~qH5HR}QuF(5hg}q-TĶ3U~86 HSg|:ް'O˾5l3G!Z9Lu~t҈ss.9/uB.T)~ ^|]i_ ǰw?JqT@)iZMFxnF2\p? }Ft?{Ĝ2&'g&2 W4IyA'cC $N<.j+.9,;<"WWwƭwu| .tV'RV~+;^3|%rxLȅ<-[Rh猿]7⩚1IPOL_)`q*LU sDQ,;3z [W_E=-P9 %-zҙ7$%O)y(vz3~ GWgRpƄf|J޿-9tt/Ŀh&ԈԱgLWqbh/r7Eρ;F.Ecznsн5Đ>v&s1仛PJj&ȤxKzcOiwL ?FII2Ei¤Wx#& *@jJ|5 *M18xm:4Ay4כD=< PLV&g: (uY?C$=;cp)sWȍmcgFBb"f(a~RKu~k3/̮q9ujUՐdCo_M*>N`ekV΄|#?x@ Ft2!t2bx8 SntFLk:6jI( @*%x"=Ml%]ƿ$< 0u?\ji,oʢZ55*S9IEûC$Z(|v2f{O"?HH0eFRIS&!O"k:L΢2Al1Kiz"ߣL;.,'z>.F'@/P]i=ܠFQ;KAK JG1Jc@9;Ҟo;mrXsXQr2^H 7!Q=A?“n8655!5BdzsA,- [J]7;ݙ @֙(f8i+VIX6#bIcx%K{T@r͝aaoKrȋ􋘳G7v0.zM&zn{8:j|3S֐TmR+@)iEA`<}BsN~eH_&&v TaeqЍg kp!T #X yl}kT#OA-H?PgآPX3/L:jCb+޿{KzNmLiFi$W` qﮞС/Z @8-lltL̕Ac4n֪ºϟh+KvrbBI+o[}nC$}oܞgubJHM8G(=0b먆/,p8ZT BrۨOm)vn.s7 ^I/⃠Ys =XO?DȭAR|)oGg2Gv J|= e}2_Kq'%l1B]ϫjQ#q4~pκ7}lllUq@ 6?jѽ i[{1\ߞ DpYM˪xf.fѴK$:p>?.;Cʄ*PU uBk"{4xJ: u4U9e)W c3?gfV4w|j>ct Sx8ANfd\RUna jLף8P%z=i6N&LR @*d ?8g,MΒ|. &Z@W>@|pnfl!s3ΊkAwId86ߞQgB@ rg~`TɌHB5>9 1lBtFE$p,,ya@-JtImRk4oU^+gxkj0MyUo6, L ]t=74w$EUQ혐%AUc^"U;% WC-5/v+$//^i. C[i]KNkb¯ܱTj~ mJӦAѨD96ji!{R<-6H"49(Z4:SF\cq7(MFQ<=` L6v1lqIM"PUIq +9n"h x|BFϠ8R8IHg|7RsnK 6}CwQ{HHy#Z!C k!*L z̞TTwL;+&^q'dV ;N<2'MӾ;ev=1 Z=vCxtL-?S5%FPet} Om&Nqu,mS]%Qql y".@ O ^lrcexà1n7A O[f\=1%x52j3TMw{3(l:?1N~-*>)^ey wAAwF <_%s&azF pKb(MTi_>iW}2铩ן^/氃$I:>_fAu<));OABo;DbjsA0?#!#rQ(yRd.]AYM=-5(6w0NƓku3Z{˴Q '$ GK  <\##:CNm7ym3N`KmW@UBx,~} we:&5: -L/~̷t]{-8n*ıM(aKd>i eWT*,Ͽ ҉wqKc;@52=AՊx He2_oz_}z1_XrZ HGD댹]*P ptlY]VLYavSȚ{c*6;,O92j1$}m]"}Mwԗ(9T,bmxwsIn[Ci|z϶e:?WjhȲibo^ ?WR;.NbW"IENřhoF_DrVLn.Cot+NUoBj>Ǜ1 ]n滨 8X:1yؽvC.eZݵQM)6;Ȳ 8%(.!eA3Qz. vj` 4QbOt} QА|ҫG!j}:;p@rcs?͌@9@xBfQivlf 0y}G NJ9rjNO',CzHT݁- `qVCGOVjmLT1p0{~(SdA&mu.cp4<)Hy ^؉]j#'3[|+Á^yp$.9 ]덪I<>Eնx9/fx HU: p7 mZ!W& R,v84'؛ M 6-~ +&[Z`骹A9ȡ3T &k%SÂJuKz"'Pp]`6JMZ#ΟQ]ӣ ق̠"S2R# 1j e&pCmVQ?г=NmNB}- UlmF2_zKaQNWd_xdeu}"ǫtjmRe^IHZ J49 }a-v/ 8nȞM5٤+ -14 Ir!#9uBqQ=50{@Y #y(z1 ΅8aS1q$ǥ#7*(6gTdpY*NC 0qT|x.lO[΍h32ь}^=k//8V%i8Q_).j):%ПJ6]y *pA H~k()`dQn縮il [p ojM~m6gt0ccub5~néM˟,#׵ˆʏnZ$]%5# ]r2Ay BM^Ibnecɨ&uTqN#~Odh-!ה;'׳ e\,7d0cVɇ%Ao$Xz}# %]ȫ!?ihl0RF>c:[R(Rr#;>nեA]<0qX#[{xaobhi Yph>ǃ-ruWb Vd( c<5hy#8lJ]7%6JBH_F2ԗ@1415@oy^_e, ZbL֥E?vI T=3bc%}fĥ,8aܠ{fB{j64dUjpZf|6.{RgL>[и-?X]62>4 's^53c{T-=kTslIbO=EkVf!C.~/Ա]&}%xyKLɻvp%0QfP^ 8 9VP$'28{O# ]n >T+g#]@<` rdJf2 lmǦ{SgC\gZl8$R|9 .ئ]/Ǫt3v*D6 @F)K? , <ת" itQ_SoMf~W QV#BW<P/%d`sJBU^װ yfUϗ|qU<U[i/{=0Β\*F-\%rcr%.ّWJB*Z CdpnWn^g9mLGw{D xزDL?HN?OĂ':ڊR1}VC9q66LY#>9s9SL-\ \7d[-l(+Eŋ5Y{;dRWJz%x ]5Rt͙}G>Dq"VnSU|fլg&KE9ѥpK|2ޏ| zx?H5&:ѡn7O~d: RZY1) Dg ĥ WjcK4;OVG?mGCe;h'Z'$V&:;5ᎬCyzVMr!z4ƶQ^P]Y3 w$[R~c@/6 yB6V%#^ %JvMyqǓIQţʞp!ON`Q (ׅo-eBFC+E94}h o^oaPĀSu ΥFƱ_(rUvtHf2KkY#M eFwȵ Wz&uFwѺ~XlH#3r؛vy:?߽ à=2(XEhӼhXP7%Nb,(7I Je+ƞ͟e8'1lYpF2sZ8_@?C`d&)T^a]j|e̾Dl#4[Pr;_qD93=XnlVŵwK=ēp_)x֤3i[˫&/=U[80 Ż:{W{[p{ۑ 7Qux/w~-<)b.kP$ae(-®ۖ?iѫG\!7ayH%ʷ1 l#d{*zBK6:~J|\!ĸ3mo%3+U ?' Qmo3z,W;Ug1Sgc1-~V v͓7kW㸚_pz 012t#4\ ϖzʾ: wBb!}n W]-$%LB]yX895jqkO]+[AG(:ǃ;s(n3(, Aǧ078#PhPn_S#p==i qsX^y8oXљ!/,y?vz\_})+SRGWٰ |h`9/׀k^ N@~;)rK46i?`U&Rt?.|e/7r.93jd.H\$Lnf;N:WJ1~acbz,}N>]R cpˊ .j9z' 5,WD,)>^S*&G'ʹh;9~>@ *jpӷ!?:X2aD`tD[޾e cN[27og W_:M3LL.4NqmM[N 4xaݮ $H`v5>IVeu1 ¡NZ)EnM5G|PO?=r)ܺ|#A:c?XWM]O5hm(P-dϭ& $OVkLb.J8pd;H37i vI[~͙!( }|O:L5dXwӟ?jY\-3Eż.XE7k8r]Sa.~h/nؘinfO؊"jj7~SZoIΰcd(p\<$u[sgV88LT3Ic T4bzyPn+kwQ . D`gӎXnA`Z'3(p鬒8VVƒTo9;,YМ&PM*Gr\$!Nb)7 zvdXwHEt Yq'suCIdk#*< |tS5:(]r ]yV0J~יgsСD|\T,|GOI+}@Nu dVC>ߩ6u,} B ȧeW fwy]_ބ;DOHi@wBFGhSz1gH,T*kL^TŠ׳ $pߙ%ݩnÌmRXGق'͠$ =2 xգRaIrk8WSk779on!V{P OL`+6uEm ehߎ91YvCk@hm8YU6nX1bܑDه+]ҧ{//5\\Coyp)L Ѩ]vW,CB߫^WrPS)oZՠ8z׃'Z d(pPA8JއR U/w?osc[^Z̀4`[o'Z!К֘*X'[nge_b|ꖭ6Fv E8bY%%Qȝ[f|J@ xeZ޳2Km?qrסLv!LG `ȽQs*pM@,<-9K>u;nsToĽ)Y90hT 3? d5n9lvo$Yq(ŏ @ WRG?6HPuZ)';"7 ~E =XmiZ_˷@71@p @V9W?[o ت#37n=O3HXºtX\r;h3O:PW,Hyu JH’>U DO i6^ʈ Rpm LFݍtM_U7f":qB#YA(};FlS j'_oc]ӂ% %U|+”wG4-}HqO#'i%nc|[">}; ?Gm=HN!^;BK]3A%'q>?q"+pEE+Y UF1YPZ1=k%v>GM!QE솨loݓF3{%lZ .(ZdE?15"YmрA[ U@#5u(XWЌ2ig8RN7%/cg}>ѓ8HޅM}X&nyŭyzr9,>cXHhδR E`H^G*w(o zPh!JTzݯ(g'~/yФ0| aG"޳m)~穌.ՒRV@aBJROkuTQVe}Yp)4t@E.#Dź>DOw$>ꫪ1~,CQq1K 0qV_/:#H*dδX d?v<І!\:7{[fir+ۑǺT9rIOX ÒrYQ]]sjS &O3NˁjSqb,C}]M]BЄE+ܘ'_wPW` &e"ZV5Aʄ[ŦdæmG" I+o8Q+3xᏡn"@ wO/%E'R'߆cRƔS崖P3b?Nw`fVkNwKAef.X5 )`sx..R%j]D؝O6髋3ӈ@d?g_ٚanFBS% I\AA-̻͗RA!"ĒT8qPy@\#..h|pX;2=-]v=P#=#+6Ǿo ,u/}#PS߸^?;Q=ԑF+/Dlיq8?1TE :HĬTl`d|,ʝKvY|ᶍQ: Ɲ&қ4efF@{'26>O ;Q#C(w-pDR F;؈y:|@/+^2rl':CdVy)ADUv$ÑoJ[B<_F 㐢moM t>19L/m]CHz{x:1 ف&cNd{ ڃ=t4`$<[^Z po#ʛ3ZdAײ$[z廣0\Vq@k3}ۭt/ %d=#QoyO?NVaje!O=H̰cadFa3 'gśn@$ljr~/ulwk,0#g/;mXѧCqaDrbjX=jZѧ3㍱Ŝ_6Um 5hGYg,iEŔt ndEvfW zyhNaM576 ]P UZYQ\O*i]A7ޯ%!x0Tb9k8$<g|DJRӍ yƛ b.Eݫ]:;YH,ˆ우zG §S$\SNjL^V*{؛Th1Vz5xPmmܤ^t\H/q!^f};7<8J&C*a榎~ěxj%!:Un+.XI 9:Q)YSt01v@yCW)Oي$ ^0nf"Q -ľ[Rfn5JDN=}bg(;ueGx1֮1pbKEVib6kAŗd9e2ᑘg{޹c[vDNO ȯ]](>ňGQ"FHvWG@r:pnqACS_xِ͵o*OxzXV+m˧mVb[Sh~S:H%,fsnܲ.NߣS9utgVTw4/Kf+vX?FwgeaY[3qD\ůW-lvntIʏǺ8$y$8>j8$kwrg]c~//4/ZZ+up )!2{GC@@ּOX!s>c25' 3(8 _jB(]6ZbE\S# `?. G+wښc!1u^갞'c66 (Za5tn l] aM}ªp'eCj{El+>z75y\fAUTEG6]ZFvye,hu~-ٌ zHK*r©@z"t6*E4 4~a[MQ,h&1. ?zx͡^M`u5jzԟIG7Ѿ"20*e%@NP[^:`*-hywqة~RP]夈/wtC׵ sc%ށde>'Z\$7<TqFǰA I['C%}=_㆛$(l緲t\5~P3 3-ʿ7 =Rբ]VyO_c6|H,51Aa;XQ8L{ZQ!Bea5,6^_9dMңꄐVN㸃Rh´ 5S'(R<8#uNJ"ۈ kQ ~BИ\約{laWM mEk01ϋ KN'# uؤvllhq:^֠Q(9_mK,{' 8_*F] D%4 k(X.U4X6G1 Avfp򈟑AOd3m=}tĨf̢hD{q)XSY@N|2ᧇԆTb׀tF3ԀLor,86+dh`<0)SJ±^b)LqqA3Ώ+s mU+aƏ6V1USӗa*jIP))𡵫#smjc8=]۠ 8͘qLjLl""mH*8pKce P;|b<t/*  W S߬i: gv"N_\+14vb/5‡/ &V"Ĥ:ۯ@|MimC:MN >L7@x'kw^Ksm, G@S?EG^36PVѨh,n`cWŀ|d>DsG'Ex(ϽUM1 yRElM*õM_Q]kMw ˺ t:_䴴\ķ5F;2c:kETlf% z,?d`"\+Cӕ)0aiˍwݏY-}1G37;`A&mQ)oR+49yRn % [x;^jJ<;2a횕v kbЕ(>C՗ 0B{J,3]SC; 8.3^S-&otJ}663p}i0{~q9Yt@EBfXPI pKkt^}AGCs~ 7a~>کKR#fY!GeʣmC4KB؟f)Lz=8P IXzY I!w-Wn74NڢtV=zT";uĖbm9anG>`TN3WGGqǢcR/TYXWF 3և֑6 o: #VSJY29=#yq?pyjSN Dz3@ح[%&jsi8o!F`k/͓КƠ =]x> ͉iixl0`q$Sp; 'K{ ]V4NF@7q:y78:i`.7O Ĵ $M^ٿ;8Yq9YeRy&fY-(ǷP0_<5? @cS p{G8 <ҸMEuߩȱҎt5qv"\u*8!r*zlEnqQQynτqI-жt{SLP*p!mcbցYD-vtr]*Tl;(!I)o/SG}*j=bJw`ܩѫǒ\:H83KzQcR T'i>DQT~1LmDuj]䒄c{l$-bkضXb6Pl#? 'B`}YT5I<`)ntOun|!,SiŕgV dx$e+wN~BRxJfo2aIF˿O|95J ;ԠGj&̀FaYء0|GmVkxecv~miA J. T|av]#ʤ4>t* ITAHI nh׸ǀk%g,sqNoD6`k*Eu]X^opc=MO?,cJ? woC#FųCQtyG[p9Rq BX10nɯZv 5JWVR´%tVM]nw1Ķ]17Q_- ̄ Z.n%[#=iC <"B_0>S,9eX9rLM~ضzV/8=y3'@&SmpFg?97-H 331RKE+UeC_<4XnH+1CY\sPndJ}9)OΆ92NGیס-DxF[4$y)Kk]C&B9Nf (˴Pq!a^Ήu(LT3dvBcGn8? l8Xakp9B~l px(ActY&nb76<>S?OsTq6PsljFl$VjANٲN{)œsPmǒ R"%3 H8+=޽nBP␓H:,stbI+Er|\szKrs˂2I36TKC@l'' x^cO nF.R+N;3ź$[v?w!L#C fض8DMDɌe >2D[sً5hD7P`W@ VX,vu24SItNx5|\h7ß?9-/&Efӆ '4<5 PzӎUY C2vbյ:U9̟l!B̏!E6e8.S") fL) dLZdҙ9*_ |&eO;U šSͳ2W–@n\2-&WPRA+ܔ~Pf{~GzW8:H~6闘C! r9U! >-x4zWkBQ{ϛ!灵>V$^/h~@D[mIw M"w R9Cإ,0AcCIE-r}NeTZՒB -ѓ.|:bJPN@l('㫴:buZV.˄^/sz:hUB3?쾭OĉDF =i) ԅL+*mpwAA-_پ@7x `$GOS3ŖHkmO/r'vh!G%~Aأǧ ç>'}3y*9#@ vQc(MR%Kp%*bUȘ?֢f,"ϴ/KW_;_Б^Q+Dޒad2:'u*LV ږ-%$Q 77G};(<&`k! i8*xK5+= G.*p8@Fx}F E0a $ 6O{BY2wC9baflbZuH:ց/4gG_8Fe吪p_eLVsMJʭH@vX"@Id)i.o,&Q|/rUVfӘԝ-@ 3fX~ɜ_}I#hG+ǧ*-jp[[ωHk0ABB- 4:7Ŏy4o%jDutshEoGDE"49>w]E+)> [JNe֫ߺH [>*V}O x"ѿS+!ӣR m Mmy]QdmMNp4:Ty9F$-X`lǩKn۽gD<-X㎶;10wQ^.=Dw\V0lm~+jTڇcGqѽjh4"\8( {51ts kZQsڻUfP>4a 6O;Ԋ硙W3"طf󸪅 F33D=5_Z$j.I~zx*zw 8Bj@R$?@Ei+6e?YGE@^̒'j LdKmUeT L>W&T>=HG4p5MA2eMWd#77[w@#y,Kr&mT*O w ^o& @uM˂gSe,D?Ā5f#þ%XX)n=G*,}6-ź$+,P;:㛙ҵ~JCyH\w7j,zl~ ԧdy=];LK|Kt$4JhFO؈ge1-Vh٨ڞ{G_!uTg#tFjSGrb"ÝR hOy1ز qul#i<jֲ #ln2=G_.+ɗL.% H['fafG WgPt85 :5%pALb & x~냢8LAu i~/=q`mr5[̗t`H7WqҺW`Yv9c (lk~ $үs\ m~;@&ӓCފZاsG4{, w1xAQzm]9R7 "WCs(tv:>2;u7 Zk #wn ;.6&%GL2 5dpsB?Նˡ}C6dn؁ʈgD 2uJq/ԨbB}/5Q|}j=s>_25I sh,U /M8쾉[}twaVuqM֔1[L˯-x H [[׹iZ-JQ81\(Xl)qEOD=^L8Uv eytD ?NCQyH*[ _K`{#9۩u{S˫k `L(hLJ^ߊdMtߘLdg s3GЎϧ[=a5mbz;5}mKjsU(zA l3YLfoyFeCڸe oPzCH74Un*V(:^N }Q&#v#nO]?roDFĵ ^AfƂ?%8dy@8JvJp®r}Dcġz q7bYz4 DwS}'YZ]1nX(2bk[U9Xyz%wmFs3Ui99?K,4ކghSz*\)WrV(+ -ְ;IФQ:Oa V@WAj'I@/wwÞe l $-KT6 ^] 0Q$ޑU>i(x!X%d%.` z7_ Ev9I1B׺f08H;Ax͐;trd<`# a[݃jqjWl*)a}2|9ذQ!xh:XLnDX~KQ,Xz7$Sq>?́6E0}5֬uC]UΠ%-+~r*Bz{N: &J@CC޻lTthK!<Z~:S+V]ϗ2aL ~xQ9 ]_ ml1Tgi=_12|/yU!ͦlW-wkה?ti>A@C܅ 1`P[T\Eӥ1K goKnm?K귉 8Z:Ao{af)}l*_ԛ*ǍQ\ Y=KVh(k2CB|>vɝj5U=4Ҵ++iHAt'ҕfUxBL'!߷y98 ^Po-k^b 㢴oErYfeSr4QQ)gl,I?)iyu50[nEG%!ƭ9J< 8#" Gm4p^r8^|ňu~\2(WȚ7;5J1~#r*~M9ΐ Ý yI).hK%d۹)8ZUW>2פWrw$?H:gDTϵd7<*k#n5_Xeu=Ov)P%̬,`_qy@ $Vr ķ_"x|m^"+:!'#^Y΢"O;T |fL(s1eܩN`-zF` d'9@Nqe7t*70O&isA Ld8}xY>2N6nNfY=W.vP.j#1_-DK8i-j^Kg%h?h,νċqO1&aIMָ͢k]+IϿ,S` G8.˖PVTĒqKkdʭT2ZlQYD  ' U.bt! v҂fh}DBQ߸bAVf5fɖC`j,ɭlU7׊=D[P|C # bIWtZ uEɲJ6^[衟1QN혽$&LNp*2&*6($.!^J]ZQmG6h{2ː  x#0L޾ՀIR9)K08*T}/"Ke #kx %P!S9mPfA 0B{ʂC=h { #o2❕1ڛB-R$Y^ 6% ;̊h] nS[( #ASɮRZ"kǧbK=3 r.2E;+y!Ž'&ute\+݃eJ:XODs=l&Kn|}k3  (2 qDQr\dDV=3[4EN<-h3@G-ELjv9L&!:Ww%cv^ju}ّRlC[1|[4q?pLqFYeZxQ~GĐ {j/T n}^֐ D,adL.vuS8 I//hO%q;[@LhzC_='%ق&z$5&;wL^l Uh'WѤ'0#OH1G;XE)rW$V"EUVowhW0h@%"cX*v9Ǵ#_ٰrW"њ~Qa;S'FV:7C EP4S ¤o\bi( l\rH͌,j|-mP ^"R :T 85tмCb3wuwR|*~ʶun ``Fs8ݟQX1-3 ۼhA .9yIsxc0VH"\R~rsZ2^o<ޒ 2*:,aN:Cvuش2IyP@` iI x"~&њs33M `C,G͒wgPyŖP+gq{N/HS];XF nM1`*-sguܵ8v|ٮizi1q1GsLI$9ѩtGf֐SXi]A 1l#CNV6 ,v{07+s,Tްc$m**'/zK82X2C3; z:Sz P)ċ^̖RO4m+Mx WaC~APk8d1D=]I'QfO]d?r#z%^s'n[ ^Qe603gJ3kceIOH9Nnu:gB@1 ȴҙ4 0#5)J XNW.("c{zwH|'zf[ At-`.tMdq` Eڵܒ{<.p"T.>R0EؔiP a4/N:Ⱦ^TDrOqr65j3q{n?sB^nVboS(wzwz%&z|JsX:fg^O48w˻0F_bOv#vhӈ[.w-GaFp([iwrP@m:fl=î!Yw*&7V}sdVF=+]] X{~_m .! ]r[G*&ǒ ѷ9vlʶ0r:SF>2=c C\(|c!نa©VɰE ׹אķi'[L$jq ɽy?K/D+rIdBe_ZE}:/ dr^JtXn[KL&R:IKuxk)0(W񞔬7)FZpcy\}s|z:tvmTePRChcl'CyQ𷝲\[E~t}g_xKF(/ zKu̿/.&Ƅ+zO랽Z+kR\U_ތvA{8`]ND|$@dI̩BL7ecvyAp1cq֚R1;C0U5Z孓oTwI^ڍW Uv(h4*/6U^Vd˶BRO27^yjbҒ蠘,V/w}x . .·c2xŒ=; l+I,gc3$$NTNl]%@@AӺ>r+P¬2+(!.Vk _:!3#|}ScYp6C1Ay;"3h+ 6 u\Xw˴ӮnDݺ{RfIqڎe]/AFԸR"S@d,:ŠIAbOi*KƊGuM+B {˛Z?@Oԑ8 > \'}6]Ѽ8QTB3 `x0;k"?cQ83޵L6NV뻓80( AR+&W?n?@Felt 2^svTAƞ(?hJ^˫zcrP#սlv&͞MPБ&q",uĀ_l*l8Mwi*^3ji{^kרrΩYmt?_]<5fG\#@i f3vսTG;/qc+. bL bǬoMDSD~ƄƪP~,3vne4:b:2Cjw!.v`s/ُ4aW~=Ō}L%.udtzk[BxiF BNRAoh_ǐx9jdtЫSR12Ƅw쥖(XII7x0WkBSV{gq7 !ÍtгҸ֥o%bIE*,~λ'l?O8T3نVC b/(6,XH#^ͩ}eJL#P D?3a33"A;2[c@r|ZѽIߪ`Žzy?H9%p$PFac??32L>;;Gnx#kԽŞu(,"7dD5Pa4gq4w7.|C*Q 83tWnmg<ШP8{Y1 2%M_QpkSzx.̐y`?4>Dld ۝68 />\2luHJ!d{g`&0Yb%Ux^Ó#C P!﫢 QmK O#PAyy^FaP&ѻF 8u~ν}X,wŠc))K>Xje 8te!; ``TQ1'nZfd̬KJ,WӗDaҽ2W.QNR z{]x0qD.:G ~D6JPz4+ӣ,9&&Q =꒙bv=Ljx۟|P|^dRM}%2i9:Rl>;5)dM!axd?JcwuX!o?h`VܙeQF0D;?s;FmJrn3q ٖi[NZIM9,ݳ QW~9¾Co- P Ura*RkPyDgݸO-ϯ{:V]r~'T4HWm=I~}߅휤v>bp% M@M ~OE#G`X'zG/;a0vh>.Gjg4ꤷsx@o ^Ayk p'/pwӬݢ*v.7*=VX!X#oäDH>Gm'Hc(-m^H7,23 1 c];Yv>Ig> Dҳ#{n|r1|3b-<.Wט  x)/B$aTΧTb}pl7"Бu;:W(ˋ~OJB>zL8kYa{3X8qVDu2Hk-,몾\Q6}i`Q l@&9]̆`Mczi @_6٬NVHjB䷔/i v_X&;^m??b<+G,ƌ3]-m a$>  ?7t~Gh9<˖%q?vQhOoix;/7-*rqwNOL6 Y "0ųEߏb=+[>$9 -͞ !,b]L(!GsUWjT5L 6uoONj[-w&ner{ՌlN-5'*{-0ydH[e+hՎ(Xo/ jJOξqivKZȖ-[ xf* 9@*3Apk!MzXxm7gv?@1X1W s!) A5nAJJeȁɊJ!q?A*ؼ2FOf\mHutk' mї>+A "62 ɅGmX^nxpjlI""%c _b*O4 Å.fQpTЀ.*oMeՔ!1DC%1C,8o U04"IC|<;8՝ԭbڰ9Iz:]K^\\N,D! BX@4̓2 ao+ hGK$4%#"SoGr xE_Y`U }D@xRh1\S_α'%,,@s_Ŕ_$tNƤđqV&[횑*zw-R+zF[m-F]%yzv/YF7GxeTDITs Ò դcK\7 S p.i36h(,*ـ&&$7-~ ۇsWfZ }ؠTKs}V/5# 9xHPzht ̱&2L'oHs9 y[rS@!$VmK|=ˆx<^]+CE(ˇ,>ҳn/H7a2;֕d2_6~mk!^=hk"ʟ.GFG/~/ 2q_䜫hg٤,[LLP8+v`irK exf43I瞙{2(͑yqfXo0ky+b&d?!71͝ *B[9HL>s|O֌$x*uۡ+HJStBEy`Ҹtm3]|d:?o2 8*.aX\\ZIQ"/PƯwgLF-.ѹ?RŗemzU|`푻yCXq+GߘA(.{8h@3x+ͯ) C!V!x fÅ!ܻߦ(2{˴*? p9✘݃Bkۚ5=j8cڙM8lcn&iXdjXriuV|aBI_CV+Ϟ@^э^m%۪Fi[xJ$y} ]RMv9F,ѐMǓ+=TI:ݡߩqJ[ٯ2NZSIVB#e^'@9/1d-К* %&H # l/VaрR qF'ޖd~fyܗA;ބq]]-!鞫MKC\Т*6o\~6 ly}re?wD]} TQY\EįA`3b eE\ZTQY9 ̔* !Ը?HGl@BKrX{+/D 6'5"|OL%\(6Rc;qʔu;0#{&~RVbKC7>5&aзtB%=C]1j#rγZ^fhߞyF+Jȷ%]n~C\BF eU v8:.X<&%sWt5qT#8݆(~5)՝VW eDzm֨yX58iW2K2qf[<،Q{uS< <-جD/X ;ph3,Jw=حuUHĎ0zJŧAPg*w _%He«>vx|&x>xj\[ԡ5qxS@l]JWRQh8@5gSl&W"\֮S u}?ޖn({QXۮi*T+1./:_Aq=ykEYF3I52yGoKglQۮCmXe_l9/AR itB{r[-魞69@q?a7ky쏥9S/}H[jʰf=$5,U; x"Nlt4x*QADK!l)g%n't~T.xpYP hљ~k `zICf%) ;*oSʂYP8;8j`n;#apk ''xtŽryx#irb$=}(>' ^OwĵÔ8igF!)^PǠk4K2FxEBZGythaj29^,ص5G$ɁWFVnej\Wqc\e^5ax}e3X>a_Q*'QhVU[ dr,|[f|AfΠ]TKMu_*ظ;.7/̆ܔc-]8[v:āJ5M$E=']3r40Zb4M/M?q**IΚ'\sXP4 G b,WOG / hsrCK5;Сo&jJ7d#B5'4?]/ټb*ꎅj<%)L ' wT[iѱ2zz?}4tMM$q(K<1 t6tNGyD7!}SC~eAh81X9tQrM8LoJtA۲$UrZ0λz b:`^X1~--˛6eڅ:I>< ߭,KY܉&5e\/NP~ WM|LzB 8K0|}a&n9IX|=^׮tJ0xL# `!WYL\Szqb>g,T7[@iCB7)UN1]Ig΢BU^Gss;'}En/ᴵGGv6U;tKQ$+!*]&ҒlQsbpݸ16馣Z(@'6s$(-FIf\?1 bxn‹B`MPNIdf}~AT~aZ,$ڱb56Ǔ߃GiK867W I_4.zšNPB?oi؀`%Wɯ v/2!3\?5 }:.ܰ( 9/o𴢗1MEDg>l_yEo;wq, >&fCG^N!`FuFz<) ?o2?).4t|HZ ,*ا̬TG#DJ0sPqcE)Ŏđؗ} 75d{ǰC2l΢9lA3.#LKq2c,؏r^ kY4 X<}^9&aJ⽠e^͖4j;B^F#za[4M<5*XZFOK|gTpÖI9n} 3Kfo馔\|H'ʔLj TDP3u-IFA~?jdic`Wi]e!!NbKA"$+$"z.+Ll4 /X 1HN>8<6MZөs3Qj۾zC2 m)-C=(~Ы|2 s+a^ˢ0< ب5U9X"o#U"ziՄt`zP'/b su耛*^_LﮠC>pnϼʋ[y u`c& &y`>H8 9nn";q,#@l!* :",/l\py7n`3_Rsg6kUy--@ցv[-y,qTM(K4x?*fiҭfϹAP~iVpD%0  ^)I%gHX ȫpŇ"_d%^npv4#\2-^wft햁. eܨҲ,)(&ሿ}j{ۺO !rjoAF&=)\36?7;Ƹvy>t)ΝV^& jUs*xR.eҎ5D6A6H"\s5~_/Nn%s[xBp^V[<:w} Ϡ t(TY3{^;Ę{5{.Š"Ҝ‡f__頩LHCUFJ.\ȏZ3OQ6|GR/),mt4u`B'Wn0gqq|`Co" \B46$2&E]B ۜ.0MK/fR$M-VBճv*gq(xK S{!;FkBO,Qy񹣣35Mά*F힘&<\k0sm.7[O8+ _nYI=!@s>0V#d Oȇcɨa]k!9-L\!?3,L'BON-!l>qΈG鴇P[tV |D?K޸%(6hhHuB& |e,m?,pL ?zxb.2K S/^]y'kMY#+%h^wDwH ԃ-VMe4Nǒl)z\rjz3-bEț{² p e޹jsqkj5Ow %9L) ojs2?Lg?~D(]E$aEA*Ҏ2L2`ܙ;P?k4L#BK$u>%&FvNR7hК~ę$8\:o+T-Xgța7E` >fQtXawr'2B{%3Z| ݰ}&e;0o-Xi6<`VYfR 1bj߳ HwTTGD"zMÀPΦ@P+;|or,W2]'F7|F'c]"]cHw؉1&a ( .l2mY:_P.xR(gJqw8 R _Qh9R KZ!V|l}`Ґ>YqUT/6w7jQuڌW4j_AAY^dA\j&KDkt!O;~S׹Cdiaս8k @v>!-_ӑ2R_V؟Z]177nҜ)x2Y s}?߲GwM[Lyح*ExȟT&0*B브KiK& 1x`f7. ]g(V$CM'oZ;l}VY̆g_C H&ci[I@LK`l ƿDꕢJG1 = 'he.ŏN2L:}3 jW#&@ܭzk搌{R鲞y3 YL:\v_Ǔ뿙 _+{Wp=;)F|'y[@,YK1ڼK7 STxe>}ɶMLuSqŝۓQ&&Ы fT% Q<^b*f& HlfItpe CYȏRVE}H2B&Tա jn`~ &ZKm"fhòd{\-=h:bp1z3^|zhl5qNGnɯsl~Q |q%בu[{ڪOd2Yw﷿nw?@Za[϶hvЎ\P_;%d\~EUɠL/VVO-gQ/?*RPUCT,˃2QL&f ֗hmJ6Vr\lY')w E:<vܢ[hXj ) c ?DH*%Ui~P+>ڏ#z8 NG{(ZN! io1һ(v,),FYTu7رP9-7E2!cO䔯yfenO*G7+`N3Ic{cޟ'E('"Ŋ'K6*G:X۠Rc⾅&Wf :ؒW8WlDd7Tw}LuĜ mF@a[ܢO(&X8/ L-swH,B l#0ѕCAbB8')bf>W5)Bw#ЦOfȾ+A!WuQvY&JfTC'YkA֥]zvkjWC'>Ι<'*FeK If/@}mt`STԆ*YU{1iSQtuj}5L NǦŸ̰rEG;Ao%TV{+ČnJ%D9wE)~H(K kɤ8L7ԯ??rF[;N4E#}LJ~rVs*1Fn x-YCWw7שs6uRw(SiIHdHa(2 ·@t;"YW *2v}q.дRd6^4phwy^񽿞dEnvY{K1@S|#P,EЄUk^ڶDDM>2WӀs@-mn幜-@R^=#bTz#1$Lgr d9W#!ݠi-j<Fms4 hYC ĶTS5X+= s]*0%'rSV}۬e[# (9.Z}>((R`{w3,5`r(r4e,Os'J+G1MJ\I^N>1[A( >8辝S@}0ŠY'2= *Rϭ$T.—hi/-Nc pt΋U PY/G=`osxOz2^5s8{iT-GꡋN>O ufKV(lGT%BhBI #UjE~l^k c w73ۯJ~]le4Ή́^b|P`9Q5z*=/4qmd. QĴS!ߣxk95#1Mpqx|onԤB.cma:`Sv!x-E g~9s0qQ=Eەca6x״!օ1<ʥ>ut3z${jClFm>\z75lߌI-KyT+R+˹Ea89ll hԩndhnSUUi~_*őICKd;Fn)9|zzQ+&Z[RlBQˎ`n}eLweQPxrX):)¬$&W&0'tP} \AaNT \l׀Ǵ~AU+Pn>8k!(] i_G ۍGߍɨaMyzJvY~I- B( oIäR+UUg彀<-Δ~riy𮞕3F!\W=AܕN0m:&TO>h?ESź-ϐ(~<Ɇr|/ %Y ]i>l)|^xw=΋E[_^ص|2furS6N)(!ӎ(k9!.lcDx1`Hyi I$crn<|X[ynl rVlLfQ^K߉)\%ŸLƀ;fρv =6?9/Fɇ3zѼ+;jz.kfzלY\6k'"{G'--9z+u8V gw1V~ Y&NjikDK/nq$ȏ'}&Nb7Gv1P3ADS r&*9s} &Dk_TL@r}K iIx,+Ϛ "[tċ0 e@,y~huی=Y jp1]u!ِY1 간5wQ i3*[1:P~OdC~r\v5,pHu0Gɲ -[m/[@wlOJV] ј cGk06",}>~/k,"Q:-mf]wCKaJu\eG-'V.fŢ~\`WԬO>~cqn@GwЈc߀>=_ĀQYH<ɒ+X%Cf -^tZ1f^qU~*tq%kaQ_6f){#$TɫZچB8M0=sI83 0c U" M&$>bT6}=:%3W}vM_f % lT78(`{Wư*AM2Dg>w>ۺ0%V, @%껗yh>kEX/1Ne'4Kc;kVF>lea'Չ ֫01ʔ߄AET/+C[QϥDR[p(|":'ejX7]'{#q"CDpHGOVQWx{-H6Y՝Us'j;\-G x֤I[l%\z73͎l3R_* N95k_]'_ӾT,ZO%$'f%ؔbjSyTߙ@.$.aXVD1!M'HY C&dWj@z?x6 )%5ǡ|\b\zf7egL{~V#gu^ύ*OsPxFii*Jo[ns:cM9BF*!y T2'mV` 4n9⺦FƹgBf|ecp;.}OŢ00KOp $%%Q;@!¯LZIȃ̲9o?MsbX5S2o,޼zLVt%VeW/% X'H㊼Z142k! UwHI(mJJob?lx ~ 0^XVRC9p8. ꐘj\:Z劣kiI>+s4'"f )ui KBV-AK"^` ĥsY7D<֑^Qa$4->1$CM;Ȼqp3T G㜤9~ `ms;a\W*u PJ㼨͙Ɉe_D#Yy;8Jn0}%ڸ퀓-5էǤ&>I hˎQq+sD _ѽ4(Ǝd$v;^-Q=ǯ s# f=<(d r2Trh0Wf%xj+e\75jLi 2.YxDʃ/f*$ YcC5LRDWfb76= Lg)J&H(y~E' +s{XܜmuQzlҝ[-- _'ʠԾi6c0H=*]EYw7p[ 8Ċ[ ߑ1|l  sn1X50Jzb-Jr-&4vk-wyN6T!s_qfAd\GyGN׹).Ӄ'5 *D1R"]}V?u'DFqc$āLF,j}|6GQeWAT_=#yz  Z(lyKm٠Ĵ~k < T rZ8^wc7 ~AIa ۍ(k 7b%>#HlZ5an*9^EjTdS`y9ӒTfWûflDNwk3,(84@ZZ$6#ĈÇDzEz/R ƽ$V^C9ʩqe 49ZuOnRrXQ < b ~@nQ5s1*db*6/&e_4d€"qPOu# $<۞SߟŗK#%~krmx J:fcJcpnN瘉׵-Xn|*nFDZ˵W('쁟ːIPКV-.0}H&Oٽj Z'XV>䋵䨥sY좿[hMrC6tߴHaV0Մ@i%.%!k<`q1M=gΝ-cT SAv`gOkc!x3e4s1&z+#ck{  BP<0!ïdhO|`JQ Uᨇm-C%Nb4![%;YH=qgֱ?;nUk9/h = 94( F0-Է`; rp$I嵵d 6 DbE}jF,ğ!^g"zHqG+ZBk:^*h&gk~)8躞7 |®೙^*]d@ 맽Uc8e oAhHle,,/X&xWFa^Ԑ 3ΊH##E' e1P^$6ÍK㹊K K;^K`]ڏ>7М"ɞ0sy@>CJ tos2M| gWNA/v{gjjcRa>\ɳz^=2+uOϜDPfCVmz-69~<%+C40"'JT_IbtNҙ|< "'(qFq0#}::GPg^Iѥ9P` HkEwE3@5iHk*aS` m6\h7zW{1=o\!LG9ɐ~.҂4NjN¤"ła@L GťShr7z$_QЇ蜝lBTD`M5!aq^+`$n[I>%0R,B,1,lH9#[^q?-g|8J Э5h 6 b_mnuɲۜs]%:󢠵va{X341eKw;NJW- p, ai%K*J &D6g}{-v]~P?,z3: ވBv~|fϦxXlsV"FJt4A`4xͤ~IaBa:Ŗ>DQ}tF@g !ˆpƥfAd4("&wa.+|SU=s+x~z%~/}0]o.З2~ håZ$!ar;g*-wQk圩ktOPUsʶ-8 &lF/ :d:RF^a2]qaRl4@\:l ף3 üݷh c/!X 煷":aKAT"NHbCo<k[xg ,ZȩƫHWiTs9gx$<{%:XL5sy!sk& A x=.\|r°-qJ!4k4Yу2YI}kT`r GX_-S ~Jm0PEj[:qR)#>ʜs'zM,J;Il85;fsIq7 բOvrX$7a0>ַʺGDrOl$C\ܜk;(f}?%E=Z\eOL q S)gqt zXoJAO(䭡auOE;ɽU j]ڄ lvTy"brk[?LPjz'+Њa]_. Rkq \cYfȴg{)GLIډ͇G5"PtWT͊~E8&Iy^S/c)͞PC$vr1]hyd +p_L(it.=j ZckM}t,uOs6vzbJp ?>< !AyG9b["6,o^Mcj>ez9'p(j}?[h}j.+fX;<*vCΎK 僽Qۜ 7ʏEvbmO0x/!Bʬ%iџΜuԐQ;^[.)Fo֝g:f.4+Rfz=m۔,cn\؂+A̳ ]ČE}'c{ɷV}j; ⛄k :>LƚcD aW17xlъ-Gsњp8HQ [t`GtlbQy{x'g<>G [u̯p !|8l~!{G*GC%بS]jҗkOWxNCR9RX+d%ЎЗl2e=1#r!y] Ε_ef S Jb:O 7NMWtԅeAج&P tfESϪ@P781x0ct2ͦz?$qG \R]=}0\zYƳ=ܻP;CgſME򳩺ՇjqG=`K$A[Uc(lt#܍w\֬1 kUJDA aI6w6e{ʍB5䜘ă"lLOKo~ 1!Ҽy mp\MģS4_ILn@LAVhs'o/{8cq7Z̹2*P̯>gjߝ3vs+O~ 7Ws!/5 Mp6,% )PWMd`8Y-^a-1+"r1䞴~a<#Z 4Y̊_Y(WV !n/mᦏ[+}ab5VP{\Ǡ^$ (_bJ[Mعz60z%@5sCo2̅i S9*{/;K^s(Nፅh*f<-~ 4‰8'*p-IDȸ]yɇ6C/f~jth x]z981+xCV9 $RdS؟TơT4UVjZzZ*Ry|lByE[%vRZ]17%9 cFV۶7{ /vuje rbcx»'WDQ Vy/<v;B0eXz6j 6ӰHlCS7QgW8T]-$VY"}V` Wɛq-L;$:bࠕN|xA'`B*e\a;o4,KÅُ ?;ll88wF {}2/~rkN~[22.MW𲍇7]ڣm:.O>b FBk cӅmD`ԋWŃFlZ߷]֥r aS@U5~d@ {|[ʏYnL6ϖ`)9 RK :1uˮ*!B,N1?D (a#"@Щ1aNҾ¤i,;MR`GÙP _eBY_ۏ(RfPͦb7'SWM\#cF a`kCWpBEǺ7K+Z/UDNP 633G~I{O;#*~\F_"+lEDŽϾbܙIo`h <ũo ȨLk6~aTL*l_I/,GKy~TK&)~_ ac$}#5fID6 bty t3KY O8I,ӫ7B5n sJJ H=iITy/HP 5}_rCKc؃˛$0H!] |^sQUM&O`0Mِ 2fVaa옒i.JkJV;AmT^VCDQ",G<"YY F7tZ-ȝC1HO͠DPyBMU\֠_Ȏ@{`n:5rĔ+?۸rhW W%?̕.tgZ%F+O! Zb?0 0QTjG=첋(tC,t<3g2Us3Ŕ?b;˻dXj9{Dk=Y[!.%X3wxe뀰z' 'by*V%=8<D.|1z j{ZMf_* .bo=">Ae4c |m4$ [7Y<åok1^c!_5x%5>d ¾bzm4RX"Qm9_6!i$p;r\|g/f^dd\4XI3|LpJ{r>^+ZOָ#)QoZ1C$u[.I\K)S[0&f fb0ƿ 7ot|6;{Qc-I*i<jc+mc ZT܏}u c7qB=A{zF?Pkh ֮90 O NC8aqJ?^?q[#%~P-m#̜3h$ y}v:C I,V'AMMHQz1ܯe6)s6pbYzuMBN'8;Qx  nѣL]u4扅gN"_^ҦFMib8N#\7[N8 r] 2 H¡L3zHH4slX_:(ٽs7 *j979˨?2Rͣy͈r1ӘRa uG+FpgדHm\+,P-Bz(snePT"2W'T)?vӫ96((hy컒cMzfdp۾u>nV.Zzdۈ$46xd"fI$픵{A1Л̈)]zV{ZG>X>‘:$#&x4gX[sd/JAԼJ:6hf}zrR|!f؞hMݽ$F/Zl55 PVTk?`޾! u(~fm#96}r:%n+9hSOYy l9ˉ|=}6ϻU_WoI%ga OjD[Zl! q!p>ۘí.3M<Z׊"=Tg,=e]&6ѽ {)W4WKG z< pE}!f֔A;ZƩUf͂BPc>zx%RA7]3rEUɫY[:`SW3 j6^ϤQ7Kk>ba0F2):oN2=P6jևD"cF]`#r! Aߝ*za|Rў"HhWʮ[9]qŴp@hVn?a'rͩ`CYtC hM^ށȺ#ުӼ~A$+<\#Bh^:|oo q74 wk֏AX@uX.VĪզu 6@~ ,B bsع{S$ʡseiK2Y L)>駤~gZ*v׭Sa^.JE%xU.ÂT"#ώGmr̆O}45Jh#8(eě 4a*b#@YhrWC*w=Տ4,raOdOKPg ^`"-+%y\tӎiEg:NƝ+Oe.<5k Q(1Y: 'h'G*9tliY:^2RSeT´ m4zHɤןCtzF(4;6M*gb)#Oc^Jlw25i+D5*XYXtʟR:s-Pe<.zJ+Ac Dӥ;#FޏFq@8YD3ϐ>P}d0Vso< bƛ p3M\K &lb^g_ ADO^iJНQUGAbHUc=cDžc%m>ʘ*0Jͷe~h+A/Y ʶO'2֌u8 @BHYA!jc qcoAcJt+ؽ]V]y`>Fpg@.\J{N^dg<}y̨yM\"行pD͹S^ LV,c\}iP! vuwrP{PEwaFMgFh:-geHSX:#S8 Fyv1 @gGoP sB0}u-7*o6ΫD-$q|/~T Dpty'ًsB݅)U7?Pru'"N{4Fxg~/oRtcjFί-@4rܭEe99|+dBJp[ʼ>ԕ၊Bq[`A[CZO7>\itpC }`s75rEk9a)$|-{G't7-~[.^Ɨ=fӨGPm%tEi%{$m]g1BcTZ;ɺ uZaAnÛ[~+.i.ωoaF&)Oztӵ63T0=`ѿ;۶# 6 !8׏5y /pS៻B7Qqd2]f1@Nec|[L3#\#YUH*@V/yCimQ f]VpA7CA&QxXXf7Ap9+)K2ǃD *a7̒I=% }4Ҵ!.!¡`QW*1 {MgNEz9+ `#O}p+/iܥ0FY M,m@"*DE[f5Q3bKS^v׎ȓGPϨ U<jk|b!ґ6=}Kt':fwԄSeF`gg*#$x@7$k[aP-K3ӓZ-W?D%:7[ |^ޅ S~ؑ;pݲKYP:|J:f0t.Q%L_<iaBI<+3?޿sA.ok #gD6emum`̒ÜxI ˫[/פ<^lv$J$>YeH#*M̳lGК[a:ljN^ h2TYa,`VY=G﫺0VZ^3o1ڴOg fy΁U/~/L7)cd:D|ϒXlPH$.g\DVD[x y jɣzv% }TW񝂖~x7A_LfӲ@aڈDt koilE٪ KA$^KւSM V׋Bq3CQTjfزeݟ@$[%l9I䲫lC;r#?z?]+ 15L5wh(r^崤fOx}xl$Hhn,wcFaaXq0WU ]K>׆Ĕ.x{b+q黕ޥU{r`_T ~./!Y([wl=C%B>:x}+GI._cd8s 'EΦTݨqGtŋ?ŀgEs?7יݿ ࡿش?݆i{jf0µ?5!dY+W"h1R"Řp[я ZtqL5c{y[ˈ$SAe\T=c tVxL'xL735.NS _o|)"R$Ft:0V!AmIGSnNf NgDnϝSl ǿ2&FQqUd#]LA9\X!DU=Xp7)-]"=P@VB^ S^g7/gbTRDUdHT]:;RL4|R/T0$LG:2c5ҝ%dijY|Rdz vF(S}I6#>:DtjsͰ ih~4aFD&g<,)ȓrO=9k+UxX٘{Wd9"$)2 j w?B`Z{cMgQ=ԉ'GBP♄ʴX YN/B~a 5Ė`CJv/﹓%Ċk2UҀ'1z-Uu&u"DY41U];ZVx |uēwTn+}3'2(E^Vh,PveS)l{V#)R'D"8p R:9ng1qnchQ܃kߥO\g X}߂Zn l|>%{“Uɺhqա] VBAkl:s ?w$Y`S ,SxERW|䭈8W㉷-wtBNYZIu[)^N[[@6F8 `\ YV/K1,QI:0c- 'XIhi/a?:펱d`o+/BʸT׫*l:̂CzdrBŀ7:u t鱔3N쎲@@zDwt-8'نjhc{&m|q'(%]Ł,l#)N#&vF<}\{MYR٩c']2l 7pWKZ>8[0"8 &/%?8 (AEH gܛZNCv1+$l`kz_zy\Gp맍ƀd峛 9ЧASfsA|/}ܒ'-J -fÄsr̬UĚDeC ) bNJNͩl') j1˔/HVٗJvqX(XҤgƮ,EKmiRnt>e5VAyrÜq> zйYclw)WK6θ ˞POȀ"ß`8}t|*径쨸jϪϠ[m]PņIEK#z(KZLHxtoqZNI"@/O@SЫONK ;ɆzRl*>W*#.kHAga;5*<.1.s~jDY99Ӆk;Zt8Iu >Zx!C ҝb*I_^uq "~"}QG?"yj\XwR{ƞ}Bx\_O^%_Ph#2d]~f,W(ZFR=5rWPFufL31[ө:yNsV3!}K/p@Cy̦&hnRxq6,0[#'6AZz]M昰oz ͖YBMGuh-'Iw^2lQ5ZfWL3);qqEȻ"%31ш9Ǹ,?F_cuW4mk*#ѶƛH˧݊UclxG $~t yjMet1֪m`)n5ae@u#!Mnɰćb2lр=Q6a]rq1jV)/<=?2;)񦐚Ou6l~Vy·2rSa4LVicG#} yvAChT+1Y*L`&y@C+f ɫsË&fEv%m&T Y8YUKRq_/p׀?ןyKsiE^dCmQN4eI1C2A՝M+}tcG.&#+5N1WhCʧզhnԛ#(!晌Xxtȃ_ ޘ#Niۇ1]߳#f,Zb}jK)a{xÃ!g2w!U_:|9H?>Xb0Ԓ]>(Ѕ=9A@Ze"`z(xƁ~%@[?Dd)ٰf/)ï'VxNΟwY;1^Mm n}~d'ea>ҍk9[|:H>~) So%P_jc/3e`~ͪaea;eu[ 2}!9Ri<e+*1\ix;hnZ3y[v Zf+A#L{-tuD Fg2/G5Ƹyθ`֡gik8ԢnP*\]W2Z 3szy_vw[}20?fCcxxҍ.Ԙ`9Da:3jSJ~˴wy07oey6"0Fm{ER瞁lwͧ⊷ܠZ3;T̺(!X<ŷ?.%wqK-iNUB}T<5,ԍZ~9_7KH7"Dy8g%sx"Žs!) ǮdȝO4-ܔ]#TjB"!!EGX} zF@*#$ݭ`(tDL@wФ?\*(dGD;/kŔʭ⬋֔X<ŋ ڗ>Fw7"ة=ovf<5U咈 2jʺr˓Z6khMbډ)XBP1&/ U/Tq5{\;Vw#j,YTyݣ'_-"}TJ$tw4ME bEj{}hc7S_g=[8|ya~;W KKm%5dOh7F>(>-e40]|oDk^[FӏWN6VPOm!"!Mh[.(w+&~礢U+H#GBæ{ 44&|U:ɮJ}䔾@Q}P ׸Elǝo-\×TP 6f|7Y@Qr&%{]3Yv8b 91L%"櫔M3McQW7nS{ ('Wdr}';61}_0A:WfQMXW`yuAuqC|ݶF|N&<<%ܓb7łq0єpd9ӣ~bqx n02SE 1%Ijwg;I˷[U,ƕFrJzNȹH&|UA`h^\ ?07?t Xppf.x+ ^ &]^P+'5J ;,š6x BԞ+ƀ;&Z$|XDX.>2/څ$D ,9oUJO,;}NMܻ!G-2zaSw{Z<(57m^=, D ZCńҊ~\招*Uyϝ6V<&bu:|%?| - #٤^F|7oDKg U>Ka ɈtQU7O|oN,zݶAXQ9=c彴E'4[KjDix\D5VVxD^p]ճuZIu%^)QFV{Og$623 aʭLO3\vgeA.h*mHmXw &]MYDt*4yk|z0nY":- YFȠ¸O3:AF1&R[2^DwŃMi{=兓Yr#7y/= KS@.YfyB3AG`i@[؏|vzyOLdC0MĆxQ%Pݱ‘3΃L#7'%o ulD`orQqyjKtXg!7 (MΖJT˱S߿֯|C„cQU˭4@h,+GkZ<ؿ([ n`=s?ڧئS**B3%7y=v*Z p@`$=@4I6x\ ;,Q3NvĞUf kT| ):  鮽!&f[nHꔿ4BV=4x,su<ӱ/ %VT+JFbɣHK*Żoƅ&%h)L1ٜJ}m<.zpY ?8h1 $)c_u"x&G1= 5~% QXZ+TYa}RU)]8)_3̓M fdSқ,_[9<$S^W5,кMW*+sԌ 2^hovSí6@@q?Iǖτ#iP:$$Mìe.\Cn / AV%Dd,I+Scx'`D%T ;ܻZT>iyy}{::%㍔Y^,<3܍7z7 ;6PKMX{rr(=#AeAؑm>Ip1]zZ Rzf3%ly(NÏMEڵⰔQz7f+In>N+ОM~v]܉[-ky?Xjl d" vHv:ƆźDs!Nmpִ ԉ9E?tԭ3ʈ\ Šn;S  a燫 קW,腜5ϷL0):W.qxuw'6Y39R}lew|:E l%UpntF兌,)B4,;?,l$p h7X=\R/Dw$nd]tfx$#pwĖo84jI2 $}l կ|뚯lVLEa n=7yL.yyi,rDog[HUE|N, ,jDɽO/k&gfQ"vͬGۇEE$tCGcFF$Dr%StU-)9VQ%goSڳ$cӪL"" #݌`o/!.$HhAP<6h#fc_C%YYnPIA٪!_^1/#6MʬL1Y m!ifZ.UXjSٍ aGC39KLbfK`iPT 9ox//b0.ىNJ. 91&ͺ ]MSBJ58BCxT=S_^ _RJ`b~;%ggXg',\iy;2H !"毈+rؕ5V+ My^v.lÊU:U(<7 zJU|-/(I`YNL1hGU߇ ֝+vN/x̍SJm1#8\b%- T E? ek VtQ Ɖn?Z1u qx6FDj1YW%;u@1A8ZON6eǀV{H@ҝP[ȝdi<|f>7% ӸT8\JK[~c2;gYk+v:^ܦO_u|w~}=N߭Cǔ5`.[!qC2Tv>Wk֜߼{mGz%#.I60v@T8Ê g.[U ԚMYB][Ƀd-Նo'6D!П t` -9FW~6>d).c"p z_k# 0^<1)߰PK*&d l|A&P1"EP}JʟM[SfƅM_yV!Һ>( jHTfksq"90&+IR~HTLĶZV~ը_fǤ,-@CwQ$] 'CƮ%̻}fiњLGkHV,1&u0ŖZ9)f{;8_cj R}_m~vF"1G>.IMQ^&R/.p WlF>A#<Pg3Pnر|TNتh:}p/M xpCpdu'6&P+o-cSBѨ!ѵ(TV~-D#LVZw"P}VO>O#ޢa/FU/ۗд&GF,RtpqmeS6 v%zN|%h?]- ݘ4:'z*sfᰲ +yM2X{o` +Z`۩N$@va=^ . NNKKsx8RO<"zY~k^Ag7-LH%Z/(ya7g0Ke4 cKD8T*("&Bh 05I$3q(k=%A%713‹/.bݩnHEʾȜ t#/Gw{' 2-33ͅ•ĂޏX(9nV6DUjуzۙ>Y= n"CUJDTd *q/<!lP-AF+s+ґy (jsՆ6~ ECȰ )KzXI*~qF< 3r+`ͳ)*e.16bѳrm͑I ɱI6B,4rÆѭ@+s~J֑vs937/DŭɫdXv4gͺ lڇ:0 u7 ԨN%s0ED"q)W*})~Z$fu'8Y=aAʭfX\6@3*y4FJ9ܻ׸HԔL^*s7lnq4y|LA53o,ZoH~uq>g2:5Ԅn]#4=[y`Ik +0TkC" !*׸zѝr)/e9;YDȄ/ *juE7 K/ж o M/]|%3}J11BW5Yn*/h^FwBѥ NW6Y;` 84+(ޯC(W$Ҳ^̂]|4'UySk^|q+͞G]lĐAS#z|_kE$(}|(ҖV֛ލuO3[%(uE'FSlԔN%Ugx0F-{s̀b[Rٰ{}mz $YslWd[gE")u>?=l#Wn $h zaM 7Y VJ^W$*#4oB.H#7տ: ,~ҷCpx47Mϙ23-?Bt1Ϻjm<>+EK0r;ԛaGrѤ6Ý2wJ໇`TDLi۠ڧEܲDY*o애|dcb>[dnN(y%\8U bFGPO#kz ̩a I\e<"ۙsSi?P>~$YUhQò; -YQpb(\\Xe][}~FW2Ŷ:5Fxֳ9 J(Fm:c OrjcR;CɦhкXFS+Wv@(|Lf{ C+rsHx3;sodLs aF 6 D%la~0H%ep쵇׆V殮sdch5H! %~@I^NjMds_erwm3):Nhʞ_ꄠ1 X_ z7j`\S[! FJQaic&]:0y/n_XJ,)[xԭ3/~ d siJk͹Ƒjɞ' >^LXKJ %vPd8խ^.8x05iVI$aLx Q̥rd*/y@'4dS`N*=t[Ƹe~(Pg+fZ㱚<'F 9\f5/,LUތH]ډ ^µ`ЂA򑋱5YpVk{W#G3r5NT:|#G}+ >=Hw0b] 8?R $Pfg,Źچ X<(_1GK)͉f%64zSQ=0P% W\sFw7s#<*]ۜO9-Va1Gs-8b,ÀMnBJO//m쥂iҚGbl{e ifeESmud10tQ/X'Fmj `vA96<5GȻqdL7f௣(v9o>ǘLWF3`&'Uo̳ʏE0$GWCU{UɈ*)XcAs4\0)6pvP,Kihʈ|DFi:yB:`mFLy;NQu Ku:MD ;4[ki5<%pO}Edbg5#J(4K0Zgޫ8EiT˳K#nSOŭ>^.,͌_IKGFt!?#ٍYXY1,|séE.P2dj=isqB;ͤ|dd$zbfR/a{SEO|=3~-dg|zTNE)_:JZ @sɐC2>~.  zi[+Ky!h`^z 0D"톞kd>8B4.#@Y'<]Tr{OS ߺ62 D)>dt / FwM" ABiD`#|]* N.CfQZ{fZY9jP}~bp-]yl̄CA. PBv(iӘZCgF3e)vOLܲB~nw&TEFgZ^XI RLhQ.oJCcV4S?GTSZ w:<$CaE&" 3$D]3W*;u[E*wx2D|D`Ƽ!@cMsF0Lu%rTJo)bJz<SZKY 4ɆgK@]9<Ղ~x@*&6Lm8ӏ~W\ sKytz7"guaXMR6yY)nb[f1JfYJrNP4)z"Hvj$D!ul2yX<=T\(3=OEP>7 D?05< L\=SaHpDRtڗ'vg( _`d=+|lx9TڗlFn88dNPn?p\OF0e+"0d EWцNyD苃$$* SeII'lv]f=/\.j:Koo.]r?c󙱄6miuA<3baE [S;G1&D@](joEH* t TpYĹtKŤK/;f. +/r^Ӿ_1v͠ >C:e"U>GR%mhֶla )aH)NfI.3{ߖِL9hygp<6eW#e;/ P<ƥ]xv) ޕ]oG^}:۾$3{c8r?D6)p['xo2)SND(׌mpB+;x./-{n6d 2{{Ӏm;Ǣd|B2<1;Ǝ2uwA7,ZMtٲJ -湊-56>qJT,ɌO{T%Bry4&,2ʪ M'|T쐭7Sq(f[MZasjF"01$FذMet`> 1^`SIwL4 Kl_w7v\L .EhP.MeU#?,<#>=uxu5$4* #϶=Y]B? E73@wxxɿFq=|Ї iF2S5-֦sG^Q?VIpbO ӉpڝTZ"Y5q߁|)QZb޸<â.-&~[+-ڂ,׬LĜ.iDl.,3FQ15V^Fҳ| )vnd Xя0A|wnFi8,sM$>Tʅqm:b)gPZ~Ƙo;CMwXwΕƻ#0rH0B W<>2a44FޯwOxM#Tp\M[4I73WR4:' һ,F$ :xQ{Σdw-wu ꏈc篢*W4+"K@&8?d g,3-}8+ziӣK60a/T9E۪' E₮qҸVxxk2+vYyw ?*&wp2C95"US$8Ex'=KJkx{ ;yB̔(~2Z)QBa9f/du9NH`p ^,NT,lr0(#;L{񯹣T0Y+2@ya*)-"Ю2A8ΒjMI4ՀI8J S PM5͞#s9=.dZy2`t֧myo=h-`: `@O:pB-r|4e> 1B TrI#~^'t}dUF^4!#{0Cl<zZ;JrNۮ2r 92Te0^Qfϧ)s@E|W0=i,<\l, HQ{`v@?j}Y4_'q /C}tgu^YYT$ spՀQr9D)pTE"O\|Q;JjDA?EBb3liw(i~yNǤ, M:i3#=h,cvQulF!pyC##h^ Won?Ʈ ?*#Lw ]&} cp5u01E8\,q4$@&6ss3t͸&*2pSJԶiN vRw[<,q[@xoTC9, $jDZE~kUr♦ >cl*!|rjҳ(W~ˉ Y4 C.`$pG\J3~VC"RTY[~3w誎r3}7FgHbmpYòU3/rՖ|OCI0p Wh"# VR.VY1Z!w8  %FrGY1<Y`hoxhXl'Q6]wpdKGN+q u2aODD8ttUEfx1]-aA% δEC#0EaטA2a ɜ6, A{ȤtEcfw/2ra K1@Pz8G:zKu YϷh؃)pzhZ$W7 /յNԔIg `e5c'ѫJg5|=[KyGyem^CeTJC~piA]7i :]z_+9aثJ㼻Ɂ<ӑ5=j060,5SIYz ~++oX&jw Qϛh5\G{MK8ә>4Ϊ1V8);khb#kh!`iǣV1"iAwcD<9StaI5k?z!y,o7j!v0e})m(l°} z2Fﱏc?Vm *Hmh¸nt_E50p#5z.R,wՂ-,RG;w콢>O"vnH,SOwKw|vq]97w"3ŵkrH[Hp/ 2HF Z>j"sP@9|+nL@ȧA\x&ZX U*:;ev!? |=Jf 曩.U8=MI2rC{ 37X\#*_уºa1]ca]HlWzp|\y,E!+DG]wAouDE`qu_ |AF8>M*#B]`32kxE%Vfф. 3_]@oCxMPMZcv%y\vYk8r&)ˊ`GjDlL%0RgWxTؘQ_Kg*yJPEh ^9D[PEY/%uAu =YsDҗ7w{/Ύ "JM6եS1/ THugf#{ZG|)8Gq\tߒ$BեDTŗ.UYۻmxHLM r9wj<ֶoG"6srT+LZq/%?ɥB?YwShYt+mzz8?6)M `SI3zNEӲGVt ]#GWf/R TQqm-ήƇVW~#-#Qꈎ30BqթxE<#w؅+]H/_}rvWOB[It`1WY(%af _.wwf24gv{k}%"0AdD5YFl%JN׎6<6:uMz A}qzyu02GEW5.;'izm[$Ò] Ǚ2l^2<ܸ ֋k5dEX&H]u{WeK)*5I!;"pPm$qόGI(qX\Cau_̇FybYȢfz5P4Yޫ1=7 dΆ^(hR 1j+֗H))wsR洗QejoA*:ߖZv@vOj2`ۉڏW@X+vYF%ۚ鼯|l1bP `pО|X0m(2Oq@ncv9h4PCBhO ;b7<]>; >@)cNǐ@T]|ip8گqXjTN0g.)<$֘t+ޠYxq+݅A$sEkqJ9;5$;ܖo!'&@uw5YP;ޢHn|<y? 6UεX}oTs 2G;P(W?} OJ_mE0n>ѣuԲ^CHy_ACheS2!cr[LHh >3y+6Pۂ@$7M2>aX"Kɭ3A.h)[ .rK,LDP<žcNy$e@$F59m@Y7@+u[ eWhneE5 `  O $lk)ZZ6'|@B91찾})o%N:zir#`>#BjP#f5n=.|2yP {0l-aCëNJc{l :D,PPj9K+  #53<^,-ua[WgoU$jF :F&*Ѓ*Ҟ( R^tiFiLi'\Tw(N3FB̐):?'V &@20:@~f6Fgؙo ֒3ڌ{| w"% urWgZߔ| PJ!7fUmqpq(UBWDl8D&]m(ch*dʊ`ynRG.7t@o?ޭFuappx7<ϝ4yQtՒvCr!QtwE(Sڶt2I" CMF4Wes 90O|i#8þ^-AB'aK b B9;NS6i|(=:YpmPCӾ9lQtp8:NIPs/-Xc-ki$^?oZމ'^Kͽ2ze~ q-nz5$7Oڍtڰ9%T++R7h:(&I8A^-I~f2{u]@x7~ViAl֧DY'C ~U-;u]hs0cΎ3ɀbXp*̐YPF1oM:Uj>= [Y0ђ MkE[GCIk%N_yf@g"׃mq>SՌ]-G8!}UryJ( <9AqQ<_@!@2Bqmn_ {i>\8S-F8?`HT{C&DԬJۙ]S*nJ"7Q.9DU̚p-{`6dXY{Ve5 F2Jis/@G1qGIl5J"(QC6{CmA V,٪\6?Nh _ր|'3HXar W&GWתc_N3T%g2FeDM߈:ޡð=/7ȟ o=?5TMg23+ty'\Pq'YuA^i])[+[X/0'ifX17La2D}:(Lq )nϸ=x?;fwJqgҔ=l>ۥ檻2bN^Z:vfh絛'!8Ps6-(QĊZ³pXBi }f%L!ƽ?d6˜7oxc5巶s,ud&yUVpsw7/^{HYM# !=CyTwȘp2?NTV/q.x8# ПhRlB,,(fj J !`$+a %5}?)#Ay\ݙ}/b] K3&ҩ> Jt,hhwne6W8Y28:WjQ?tnRMiZ7hɫN%zFx"w*JD6;4:3?/1QA[Kލz iɅw)_hdJ+S}vUVB6.k=xy[101d1F^aN|%OfɅ]3kF9+lȞҽSڂi*2duVB&3xs)ZhR{c~e:\b61}.oc5ر!Cx̗ͽ 10$Cwg;:<};GmnF1.!B`X{6.٘yó$P] &0EF=!jOhʋanb>*{0/TYb. r@xtɂv6ɓ㷺sf@|lqez׸yW=65Z}HA*';hS[^1^7f!<,i^#pUX]^+ofi&h% $2Ҕ}@mSˈB}sB2vC$p89ӕc/ŢΥ2Xkb>e/8pXʽ0w ;K4w R]J|$'A$Nrp@`FWMjE:E0fǹ,_FTkPȫI gi&({HvE4ԄX>ğln܄%r;:?lwn'6:)~'SWѯ5w(+;;RM*)U2-l6]+1+R-HdҿLs8N"E">z{7r7D^ЅMA3rMrteD8/&'u.uV`_Dt5z7. ܶh`I*ǀ c@ƨ:.JۧPۨڣT+PtaFŋ2iESֵHzN]j#·]],w'Ld`N,!.3t8~L1=??%x*"Xw$$ zx%-v92ut{)\+y3%%D <^ )w+Z'CFln҈~N1x 0*=@NcUbgNjpI{1*G5QTHlk[)mU8K|!/`HL}ѧ >44~Q04et`3y: k>t~N[`nPp*BT\ 'hR 73ݏgO-Uh)QEvM)(9$3#hf$gI1V% x{J%f7y`70~m٪o >O'>Q>Y[RIh )M:6Zv2uvVbfzV!][7ȶ8>q JKAleU;xxL"QX2`arRyeAQzbri@fP9tgzq>Fy+b$X%7@Dpաo)r`: 12`]gdCH>OR}r8!ȱ )˘22e \K R2u(,9틹s6#`%UP W"ⷔ7~mTZfjX.4H`W ')b{y*;̈R~u9يZ2t|uwoKqYxڋ=K+:MԢ)5t=Ǯr?8sjPo[Ǫ˽#())CH{Kgb)pe2'u7s"][W qs1 :ahZ;:@L;ol{0o&X,RHo|͉?X$ 7e;[Fj=H}R'WҬwx\T29{\uLt (nzIVxQWSW$B3tx޷\0+%AYdrŭ5lƫߟֳ@G:Eb]yI(x#%g`$K5b>dzyc1 X&v-ApO r$NN~߈N鵸Q~^,uĺoWyxYwKjPEyS^LF?7=*p/ǓEe@5 MŜ2&Ql7+m `^mF 8Ŵσ#TV2"NtU~҈,q|&&&Ů Q_:jp6.N},并E2t_`/+@!q.Z bw/KhWAb^4`a|b@`s׻;7TSQ^մ=glVgY[eIUO4.Cl2,:K ֙Ʋ =ZGwbq"';I*&t;垕捕 -HNg-g& 'R^2oЁ ʬEXC,K(v;t)I+55h~I蕵{W>/:C2//S&!a KLlq)<ɏPT?@=|P; $]|3!2V <<6?DWNbт"(* nɵjywT~"qI|zѬg-nc >v/w=j#L8R&{i.1he^ sNF9O#E.XEMre"nC5@8]xE9(ЕDztC\1{I UM!Qշ'W08Nvvi?p_l)Ʌ4;n…nK ŝ~BnIŚ~ñ 5k[Yj$Oƾ)2 ~Gmaef+E yV羗* yC%Z~o*g oiO>$ˀwן`hs* Fը qn)ζ%擶 g/JˎZɴpk$!VN wwZ 0P]d1\ZeuFA | 5O>cq ;ry݀Ce\q;H+ETZߥgu~gMvo(3@/;޸'Lbd@jEg"T=oW= 6՚oI:)m۷v?hm٦7ddv_AFq(ʢ|/$5}?ONq{qe)h bgLԶz"yz3 dfDfOž|$n4z + n~g%Gхe߾"X-Il&yGѳ#[S'|LZݽb-է[eJgW YK̄q}+*.￫B`2Cdžv?vGCItd#yP]֔ad hΡ P> -X-C൲EkB>w$\ OP m'I%c9O5[v`b,R!Ρ5qNC3vda.:魢ϣ.x3q~)/-edO<8 ,s`BMb#aZ~CTv<ܛ:Lĵ@ 1x#]5ڨ{Po:2Q灘hwo!M, ~g*޴̹S,(!fTެ+̈{hB4):?n]?*EɗpbR},OfD-sgTZ܈k=})>Q՗T#u5F-y}F` nݿ[{U_٘&%'(,Év!)dח0_!RbJq-5  b-l'IQ i{{4=sBvn!"q5M ~1;uOZDv$cfإgp}G/U)2P.xĄj]飮߮%6l+ u5{d^!= ϘhQ+,6LBOł<>`EatiSpa玹he1*qrn/[&~SŸh(NZN|*D/eu0 }V7G; O@/+4CBa4_44%Ifzm7 jOu - l_]rd2ij˘B!Ce2?ppXM I 62ȨԳޞK(ߎNg_+ _yဥT)DKM liu,RE_.Ԋkjh4D |&!dZxȞ8 %n2͔vY MfE0wkS. ?% WHvF"AqDRNta qSɧAl\'=jr]{pVz>X*Z*oèԖdwaEm ?w JUҳO;ӊN@I2z33F*4Yd:- oHҊa+8 =$NZ< Qw B5Ĝ,[~}" |_ ͧĽ\]o >#5m *P7h(ni DoB0+ S eTD5FGAu:!"*z~ԪlߝQmԿ 7bw^+^jvC7?N%Xhh\^ ;74ZDH=qy肮gJ4#.7UySm.I_'l5ٰ7b ἵ vN|3?#3ߗg3]eXZ׷]mGv|t2@9}Wr؞+|S.aLEWN[Dz(]C=n.ܭcRZzJ =HJlreW:G18>|,F˟C^Ė:drQLO,Nq̹ 5bnnZ潓"qRGEN<n5 ] F53nE$Dv LD4 WTCxln!?xr(Q[Bڮ5xEH0Lx)RֿQ 9_MK==i;=DIt?gU=SABycQқFRq>Rq6 \۱ŻZ,Q^P#~F1^a"ro@5&W/kFIb~qP,mJwgw!g-ݺAԐExl=e%RQ`Q^_uO/Ajnv~٫*Ƈ** ߘtϱ*pDzl7GnP#-+(AeUev.ᖵ,&nONVfX]N ,yO8ߍ"'`8gNȉO;3T}`PWjyR_l2:,=_CW &5 `KCq;<>7Es͗PS@Eip* d^:msGu"vBuV=hyQ,͙ANkZ /fu.4L@>'r3M8^AejΎU7[Rp*&T(~rbj! 'roPnp^k3x2H3l(cITXaR Csŀ"B fB,xqNANjEoϸe؟.H!6<pSR7ay,Ӫ"3 D"Y@vXbDL FjDG+)pIB eBc NAn,k`AB3lzm K <:HBq#C @k00q%aƵiSW%R8CVUɆ~4r|ϸ5G)b(y# וGB[{\PHpA@}8a/ kBDlƗ&@סtxe~UNq͸< hZzAH~풤?z7iO{NIb07͟ ;rfSG` Fg PV2R"w3=!( % xzx=ۃXA2pS2r_ ٞE %Q(&EB]=gԭ-F 6ԕ2P8ʼnM/)o_>|;I%a]P__uD?ҳںf%X"dlbc^pϒ; ۜ1D)YQ@uhN xPU1[{ )Y$a+H$-UalP`lzbɰyB'`/{ìN?q7dD/#݅3ax6烲Y5'*a$m_nA_wh"j^0'N% R vbJ(xhsLbW4b+f1Ras ']h*f#{*8pC9J?Ng2}7SrF)û]KԐ "ʢ̼ Ls H2:Y=떥Pi]0oRlH7d4UQdW֞x}r(aL*JH10"]G5`Sp&Ǧ?` >ftL!(8n/N0UcsAwY$eWoa]t_c JX0j3=ȾѶ/mB+VS]R F]y5M@S-a_/pe_ws5hW4)췈DZ)Rm*sFUVn+Y\UX,'Ĉ71]:Tq;WQ/X*kW$]᱅Lh#Rz c'(r{g~$d?") "B+0Tu^9kfgOP4WPȟt<՝HrYtI$ž|UsT]7 BoJ[+^H בjU45Aُ!a灢PQ$O wBX+uUX fx%Ûmϸ)y !7rvVX@&ES2 ;d<)1u#Kuyzӻ;Qc/XA9Id >dlmnF$JW)2{{+xaL~Up';B?/Yum_?m}L2J=6mg=#,Rp3F@(Iռ{M-F!U{Kϑ (٨90΃e:|ݯ?V ,,s/XMi"De\ࡵ>OikSB5s[roYdoh\+*<̕dXәR  'QT0Qzjsr Zf Rŧye-FP7un\pVmfom9_V~Ȑ62I 򺶴r]{G1;mؑq ERW ቉Љc}BUԂt \Cu9 "A,ӶnÉ,z˜bϷRMG2ClAgug$oKژrTĦo4JjP 4Txᄣy}R1t'U3+IL5`o)<dk5}5!JRݨJO9?Zm'"T0RelrT 섣ft,Qf֑EL$A_v*1XѱCziΙWj)CjwB1d ~9&0I{eg4C|,gLNؓ 1Fcʡ#L1 HvI`jUZ~茅6cW$8>w*$~#Y7vS#%| ;nr/R)3Owp „5YOG}cNi^L2tv(&NACĐ+= D:K݊;zi Q^cDaOV{pt;X& YZ