sssd-ad-2.5.1-1.el8 >  A `5U]>]s,}nt"[!;H0cpw)y8 %)}lkc\TE]Z814U"1Uh3p7<1CW IPwCڨ^ $,M^)rZ*$^U1 xd;B԰ښ Cu1$68@>d5!-*|=#Ҳh3)p򟨄g=DoVB bR#7B8'}GA=3"m1wY^ĸm۪D?wjPO4rn6 $m#UM7d@a)3|itj`.:Yd)ˁumNB(-M/hgڤ]W}?DE] ,)3 >&183^pEjP?j@d   2 3PV`         o    + b| DD D   ( 8 9 :bNGa Ha Ib Xb0Yb<\bX ]b ^c- bdde@eeEfeHleJted ue vewh xhL yhxNiiiiiiiiij<Csssd-ad2.5.11.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.`iaarch64-02.mbox.centos.orgECentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxaarch64&'DK8=OZAAA큤`T`T`T`T`*`*`T`@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.1-1.el82.5.1-1.el8 .build-iddbe975e1dac3cf851ab5f9aceedcaf264e5dbd3c6c4acb6791012f22182b28048f80bbf3995f5alibsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id/34//usr/lib/.build-id//usr/lib/.build-id/3c//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c6c4acb6791012f22182b28048f80bbf3995f5a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=34dbe975e1dac3cf851ab5f9aceedcaf264e5dbd, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)77PRRR:RRRRRRR RR7R1R%RRRRR$R3RRR+R2RRRRR4R#R RR R&R8R RR RR"RR)R-RR,R9R6R R.R5R0RRR>RRR RRR(R7R!R.R5R R R RR"RR'R$R9R6RRR>adclibind-utilssssd-winbind-idmap2.5.1-1.el8utf-8a389cd297bc0bfafed2924d2ef89669fa54d10a837e410c5aac4d193cc695227?7zXZ !#,⒓] b2u jӫ`(y,x݋DDUO_a\d*ÿԌ8V[f<=a |<(tޑ] GsسFZB28n+إABzҋ,&0F0 ˇ?EuY-lY=b҈SZ1O|YC\A5byp;;o6;Q*ibxӔ,Ԉo%Qh:Dw盇YF] k/ h%e_-F\3z;"ftbȌp?<" 4ۆ>:>er%mc0!0Ybw152zإb˫s HKa%LIS`gP1O i8˼?tŃy'?M 1/r0DGf`GT"9$lf#d*0foZzNPyaC|"?0*"RUyT?eXzVIqhޟ0T8vIZ ~c#n,6avE*ʌe@?LXlqPMazi"FSVQ9;u[ ){/DHh Gԡߙ#ʓÌ(5 *(@A- [W~DYVяa[qgc*DZ|U} R|d@2睕nnX CUz9?! "uDEX&cF,0mQ\㯲@f3=?+2:]8~pS`o -!FD'6&8%P vպ%Aٕ< X! Xy _6h~Ẍ켻N|{dYx?1$Rr7_Bܸ!4|x;R'J9X u݈ػG]CVqx25XK#a@|A(g4J)E7:fu6[CN׫-EqsU:%Z:Bru3p8!{3F$,krA1_.ޮSÌȫwHr8\rw ] siKȰrG`&e㠐KUcji-w gSeeɛPcEx~Ӝ TU5e~p;b1I8F_1'0v,2_&&1%^o?z$Q@5l{m'BoW1SgʹhlU\5 D~]j#wE;4/36AۘTAQʼnƔKF Tޜۺr8cU!(GƑʉx]Tqln| e33ѣMB GPM7Jv c uNb#BHCsіruJLkR/Ңm4_V)sJKsm~Ckl'Lp< zTi0"7azCS ڤ`1S( a1>@Ea < &R="K#FF9_ p+0 ~y0b81S "}YC?E` ]Z&iKRw l?}X(j*56jo+(e@תQ&2u +_w=،nw֡q=%Ί}!a4LT,?'c sQ9%aYd Z:⪆R (|t7]5zŽ֧%O"6Nnb"X苮TG)aA\7yw]Wڢ(ul. Y ; M/!|P@_h[&0U?_^ -+&XZpoNjN9x']hIג]dM ,*<$b5䝰u}u|xt:jVY !BLYsH;0x ?+ҳ7 _!=_:#AYÚ]LGڅ8ӾvYqGlz~u ݀6ǐ|BSԋ4T#d\Ʉz&zP+"j[DtG61ذ$)ڦعGƦaq5t?Tc YbL2К*k%ſZO< kTt=Gqh'p0ZhxQ6ug VQO#(Wh=$n& ϲa?g@:".W]Ro2xYf&~HqXci_%Vb2P>˔]5~kߊ7fVРBw&Ō^h814Gу1z3\V{{~.)thBwV6~ltL0lo2$KH {xGi<"\زߞ}lmTpl=>3al񟅼2\(28(hal XU/`!@7Ț̓v}oRW?AsuSl$C^ឭVm7,H\P63D#xb5E.˝ sW7~x1#kF )RCL pt˓ ,pzxEI?ךj@&MPOff{!Ua>WߧwK ,l7PР6fcgmNQs^J'&`f!#x^;bbuM9JPguu}G6%{(h)F'`< IF>vZAd4#(|7^zkxlK~ 0-ji}2R˺|"6ž3Z-Wu{H7(l5!{n?꧛t¬Nx3*4!ε<e5BZxN+=!Im8Rߤ#fpO|ӇPEp͓g+f} \Qד?rWڧ@Ln1_7^~('{$O H՞t CHc0?뼂:#^ .-!y֋+8ﱫ_TwLLL_=[rKl]<9tN]ǿL^'# (5"/^eqh1)u{SP/$NDֽX_̪kh&CHM?36 $U eg7+Ybk Ub#Lvg`L:P]U@bhƟ0,Y2 HNz:Տȉa?8>Cdގ, Cc$QjuwgwuH<[GWM+;$Bm"*iI}5i2L (9с/cP ~zDgínJ-}D/73ʄ^-q"@2VizDCTnOt3Y1%?${@ɛ#*L6:Ʃ&k9vauݮYQE%S-OITk\xgk T6A|n ZgكY~g@qt_ug%~FQq\w4@đT{{jnTA be8 @GMDvMZWuyzb}!a|Is34?a tf<9#b' @h,ŵY>uk8[Hqvn;'# +^xa k`tVG[lh{gNr.!^a6{;`a8*Ǔp?@-;PZ?o0 Lw+N}v!ߒƒPWL(\oieKHZ8Kи {%esSEhkΎ"~V> p%&n;_LE᥎ʨ~KO(ȿ͌pktOϞYҲ`ӻLI4d-uwgTy 2m9<93-= !Hv'/OObUk) |"m e;^d/?ݔ6z WO#ۘf%7QUoټdpܼFR)Aեg-IR &0WGGL|Y-xEC,V\r}ZdVm)_=[W=E~LRDPw`g #ko9d5R/SC`DEy{H0O@ib_W#uW,* 9$!6;i䑨7ۭQgie# ~u=`GFڒXLnOߞ?1"O52\2ڥQCelN+G;(4ރNKP:(QP祣ndoP+-URJh'G@~Yi~>$$Tګx$3څ}$ЮaJ㫢ڲGmׄnHpFDZp=IXk"z-Ӽ5>bRw/;h5.-g8RR zEK 5,hu[9سL-\mre* R">֐PÂp1.u}ִ{:D) FSqD+EawBR-\6QC]f9U=Ij2,jr _MT>̧ci6X*@5-P|t_xL8-F5N2;`4Z{ 9!M]=1<8P{tҕ(܋ iSz~ow L&y.!D+j.XMe[|m('PnOp-K%ez/6Out龉;U$|J ;̨ 1DV+ OLT/}@,j_}0ߢqD:lidzؾ1E fLRnxB\&60w)^4nM^XLܑ쩄GŨ c$L"+y'_,#%Bx23.yQ0bgiy&/6QfsRʩQGz$Ғ u?xb)n \Ltް==IbQz$0Ž%4q~;Ӭ7Xdxµ O/V9Qzyɦ,37 i-\'Sg}h))5 z{ψ ~F@+13bf#̫ qI$19H5ԉ~oCgSlK<8hֱӪ睐=g2$sp&9JU~6qrd}Wkrv=A sn` {Y0R+h\~On)#[C1B]D/VكIΉ[ԢX{H{:t=/ 9ml0\ԃkᕡ=m;~dKOpG-J2Bc'T'T70ʦp'_*V/ 3A`P| J&JÕ9S&yWy/&s'[먉Y8ϼR-m jVd%M/ِ?f"b,MG\JHZc@|O5f;MCco?L9ކm" Q~|;%bxc+mVpLaSɐQ #qMpq w=)N lV߽CX~`W,QOK஘p'k0pwszVV^Z7Un@op嗺X\^@nSr&.@CcLIX HWrSx18u@UQhԚ B#-P__KRC3C[/юU֟pnQ6Zsam̩{%zWQ%TX@e v%U>ذP',uB׊/KJ#g^3}~flAk'*y jrOzrkwٗ8#6d#߀l_FrN+ٽD*7I74vVIY'K5࢙ĕxW$'a2aj ds@ME3Ws~L뾗=: @oDpQ[`Topi16gH30ҟ v`K .D>s2q56xB"GvT;tbTpytg*C3';렵>q.d&8@4l&!D[Rz~x]W튃eJ_I4R{scV`3>G>XϝA7>*#YD1KFjq'Xo}anuJN98STxlGypw܋GrbFaoO?_ط l4f nlAk-?/9m QpZ{9[632|LZq9;+c8,8NvWg碄MZ3!%Agtt)/:~;$ 44l"T]_xI ZzZSfDQa8o0\tOl)KUIH6\v:lO$)|axCKaDkaҶK&⿴?E*[$9un hФn"zcH\2v9dVkÙAIghEr6KYIaz YYj-p"͎bV0` @wg6Bt;7KJQA1j1{,.Z- =U|Wpx2z"c Ml"PSSX̫iċS 7o%%K@grNR'9>˅S4E ͇,QxMY'-1_I?U*IژwLNy? 8} 򨟰<_ i| d^'-hϫ-ɳ@ YYRӒ ۸F3J•)bIhz80YgZ'"UАN "y%T|lV^}-5GW ()GOW.nή: u:#,kCy2bm6Q_X+z:(yᙠٔ9."w8tЧqk6p6PWS+mhV ƻ =׫k7Л^d-0':oK0 .Qwj/6W1C& $[m=x6!ҮFˎG+z~ 8'2X'a ιy*;l/9PHc$9Naj1Mu(rݡ#}Ϝ"wn83.E4#t9%Z7.XrkaߘIBf V6I-kEuz JtB[>AlOcFEy~\] âGZbuw϶w'Ùh1\rrK^ʹemG/сҫ0Eڮ yנԔ94_z,kd]QS7ku8S`㋨6>C\5hk{=KɪV/1ǥqDfS௄f6Gf퍷v=jl0J:z*ۗ2Q _u٩m$-i/[EyzO΍!(HvJ*_I{8P9缨bH]$vpd;Ճj&&܀C#{̞jmT۱[KV_^2nz~0bT-l&LƠҿ;+o A *z9;٪,=kIV8?M::'tw&\Ϧ~ TIT;[,Q1g &&*I7%[4 bn/@{y DOC5oԨ;1O'1/2{FQK "wm]|=*.{ա>//ٰq!f ~?H>I`{K>:F*<"6/f ?Xa*h~#"w/2&͕_̯0pj3QХ[;EPb$j)z}1SCrҳxO;K9 8>I!pHzۆ^O>7ܲѾj O ъ'_G`.#&|11.]oǎ I8j!w$b J4f/Y-sV\D<[Z.Aʌy_x[-RJ e2.nȵJ tF> (Cewlfel{ښjTXKu)p#ͣ<@[Dx]qm {.JQ߇=_#p\"~nNcp W %nxBOeTT9=0/d2_5qY:w@bȤ#'Qj0vsD|R83E,>l Rihu`e,876ђ@>`SУbĿ,GE! d { t`}UYmT'JKgۢh%E@0*ȚHcW'Q@ ' ׵s$A>>g4nhYT>fXQ ^]O2zٞQB֗S;!H$jT3}K({ɖ"%b9OsX-ho%%kPI(.gjtL웋wګcV!zp9G[P @sKMX`~~i);Q48QFh3bљjCQ+yĻ=ȭ\gxu Pn"ݍCR`2(>8m Ȧ1A3m@󢼐?Q?f'{D.qy TjhbJݨ}!uW[= I(;m;`,n<䞆ݾS(ot{ƻ,9/=ijJ,o`:тY[V*CP9q 1 =;kwI0I&ZvacEK{azPa;d. ~˰2MFpͪ8 ɥQ|p`xLD9|yX;ee9:[R;FyA>£6Ϭ̗E)Bܼ zqAբ) frrZ$l E2xQjX{[9SP$~<î5!GZITf fdpG 潗 y)Iy$"~P.nvl$v"h*jd5+l"8R*z":z}X!]mW񤛗[DGs%8ry^?" <3cZ62Kd6 rx8?V| N4M֝)c (ETG"J4e/h`D H!yd][Y=ަtPwcumdȦO̩F=}vïCрKS!n~( > ?2<6TW3ki~b[z6ߏ8n򶯨{urW0*OEa3Rll3Kb\EqA$lGQSE@qcoO`ތ-Y/9}GzFԨ Ո~2 ZEƂr;>}3II`u$?p#B\56x/tc?0w{pCuO'2Iyg`~ L' ہxg5qV"f-ќLI_/Hht16leCFyD<X}c@|j&>_8;52Kh6Bu)d["jܖ=~M3*s ]'LS@<7FEEBg!bBd5@5F4~۱q) \;0L I㶫!BW&>7<+?]mS]SPq],q(ϵF25$E &x5.2Ex%<idoײR7cIUpT&ғܰnG<6m6hېᢦynrGtgta^ 3-{61 "y@^Ph+,<dNa GP4|iR݉c)V^ R4 S,k? 3$ktEwy;4er[PYKZAr t܌"qAM\r–?o*A 8 0*jC͔qK(fM{YAk-BufipY".ZiC"HI)N9()[;I eߦTgP9beRiRñ,z~[ |*1B=>;7,Q9UW:"*7})6 zWc^67du8םZG'`5qr@kv5jc$Y/n~m#vi%h.*5"$(dTzFo$Rbex?&y{sxzϔ9uIMz[KImhk~45˨;[}GnxpCUj:GaDL;Nhm!V5p["yĤ È,4 >(/gm*#3pV1KI;]Phм`rPeh>篨,K2uO|l:Gb+w& Cr N֓|!Fa+(!{ckv'Q (Дh1 ұQS_t}6'O~MZAHMMr \:sTOHMyl&re2BdMf8@'ڥg2]zEe6RhU ~ "8>'r%$r@UW_7?IgO3yEDȧQdHD6Y~cz.rYnh;ZpoYJ7Ɋko[QO6tttTHLu ;kKg7`كv8 onc}lbqeЉ *mdz ٲqXʣN \%$ŋU2ͨh;A@׽I-634b΁5ŰjF}׻/U9bO7[axʊK Љ`ڬ.37tJxIM @W1<ôly%7 !]&I= Gܝ<ev#Y̮=;g@L[{gDO#smf*G(`z=EJ,T/s?A<.G.Zg\OJpmV8\ˉVY@˩WkmV](9w/2S\|t2-ݣOljC m6#5D"Cg@&( ZR}mYRH-)qW|E "LMۖJD+@s'^* h"c!x$OxL%U! zkO'Ҿyv{h_Pp:f!9>gE*(}XRĔ7U /s0nyyDUᎎ05{$Or*ONհa82єHz=;8y_T䓎@u<[yMpOr{TJf^e fYؽ&{zB d<6"H8(|]J`?oĻ sդ蜎 `4/[7WhLC ՙ0A4c-`eR _#͜`VS?0Wђ_$:@ӧ(>v55+6H/ʹdWă1tZWLbjDX0t.CQq1..kgwF:W%F9dxO^dbW¢]֭4 Cs*hyx(ebGm@t?/F=- _A]m+B5ru>$HſӐNAYs!@;b>n^WE: ~b$H Qg;9LǨBDTzȱ Auҍ4_WȞe]@Rc|3 \ aJN1PPq n=RLeE` ? J4WmISylN$h3Q|ܻomH+K,J0%b3+*<-U-bK"3YT&+9eF46&H:umxzGqPB6`u oki)?rfI`峕z80!GZ21g6N %ow~^[!`<#<"{Eb&׵^n b[-dDk|ov[[RDm1 ½ʏRe2+ 5WCo> - 3۩M rڲ8vKb!e7V粌}qq.vĭ#%\K{M=Ǚb | *^D$l;G C]V)vf(qGG!n N:Ǽ˧tt{ = w>bDֵ+"M2jKkU 7[H9"燭Q:n5v\J[~)9Mk\ILX%6PCZP@EWhJ!g D=/>ӵ x?h3V]dm/|x)9nԯO'O%m6/ D~>U(/@omTі';e}v¦Wh 4en~S%q R?ԮV\?%Ձ9^f'0_?s֠4>l=a8PG lxlH,1 Z>V@}i`HɈQ<$ZYFᡶlb\%%TxF/%c1-תxSd+]3}kmr<(d߇Kv[4}n+ÚCM\^up}-jTVP*̭ʵ`w5HE;yZLďҼgX(pI~g6JMܙ@[Mj$1፫HcJEEeUYiSBp(5tDft܌p [-d , .g X!7ht_Mi G//BS:ʑTj7rx),#z6?aVt>$3FFIv z_!F!R_d()5.W%z2\)+ VVknq 5lGM V _])l9)h "->_Xcf@꿜ɓ!J202f|<5ٍk,ܪ,z;C`˘c2ebLzl o] *Qʓ|T jrhBLbiwܡM&UiElIg RZ>$߶]"e uP[yb0Y M"ŋHԓZe1z l 7a^v>!D%%gzI؀(L~6#P ~D Yl,]DT۩d\5綠iݡ4m>ˬ;K2 oΛ(@+ I[ D m.R[<C> ((~ v֛x.g *|){YO+,궘iQ~$Oj" [snA%-*CҬg,g"7,$[њ:D$2 HE3*_!J+\a vnpbWI!N233Q$vc8&‘jE.~ d;Fqv:^DX(ȘNN`3qVx_jf'`p)Сq6&W%pJ6ycydq{mWUY0y'SgV[~F[\t'/9 k Pt{K^V$qұ9t]&ml]XC u1j^E,995 @ ,q#bv{ BfV XL 8e<+N[=k 3BKD-cz7i=3BM4Xc {ny$:\0bUo:Up|MoT+l: :R-%+hѱ ڥ3>v4((!q+"'w?G.A"ʀ\V0Z1PF=6k{1krF toc/,¾&sXj0DWʬ+$Ʌ8X>q4ݎvp@F-t.*mn6I#&$M/ +Z{UY*s0 #N4Id*~y{bn'UI*AU;pZU|cmL,T'Ǜ 06%[<ͪ4BX ^%*ֻjRd{o˅u|GUZU@t)VSΟc>NJ|c+"`}RGj{$?0۟Qh xe-tڻzdL )  ?ib3q` Q`<;VQP kD%V!:ޱN`e?/& ѠgIC)atzJaYC~sI{҄/]g-5K.s6u|yHqbҐdoF %,un,hlH Sb-Ffg3oJ3cʅa(6}"c8ϓ+3AI9x!f^x+$C8l4F~ ;QP3u0~tM7Dz10tmP4Uq[\МER!a_#>$ub+U8r1Tj#dʁ|ABM[^n^8JCOV0H%)~KŶQs!a*XJb&/pP+Snտxscx^ciO&UFn쁖靡 Elx7nDdڜD&zyugF`a`"r̓;0-~ _H'n)eb |;[4bqZ  1lgʕP V3 :괉nE=sbSާN:')\ͻɇW0ġC" C%ʡ5ې,4aRUޓ\0Sw: C}c4c2"].dtKRsq+)0c.v7-V+G\-6IM<)5߷}8v\x?rݞЌw.؞;RX0PcX+[g@d62a2An! БB:GįQ<-H*@\科EJ)q8Ma٥pzgzsY@Ҟ[g^,S&(P7lXBOn@* ًwy gMFۃQʿѧ=u3MwyV}?u+_^#imo Zj#jTM|Sӷ,svYm zRܗ@*(CBvRH+ 3Y6VLo0q e:Q'*1YYPRP 8@]jVX&ꣻa"MÀNf`d. bW*S愺E:щٯl3kGUqwA_ ȉ0w 0*NhrKSw,R[=A@}tmjI=` lYK:x…އ4'XOC| DILRjgt^7`gꟷ9a~y["ZjnqA (PmY:T9BE)# 4ܷ-8,}ݧ ;i0$Hzޏg\ѷ|or3H;ӠtN7Pi?C^.YdW.+ЇwRIՓWK k l.k7ׯ resHr4#V̕7IEF`ʙ @<-*2E~*cg =)wozF.VHy[lsJYR<¾K 6WDacj|2ܺ0 3(Ħ70q]RuKdHRRy|@^Zq#sl N$+;ւC22me|+AVqQiФ# $u b_yԦY08jilA#:<"8hjgR-"V]ۄ2hţ=Ari(pq<SK [ayˋeeULT/*̄Q[<ȢyXK/%/6SD9SxIt-mTdD$.EBDq+c 0ZXt"iBڤA;"GPL&5Q/*?@&B]7ƍhrʲ+psX]ػ2-( k ㄨ]ќy Q1ٿnˊ˳;y%½FYW߆f{Ƴ\jg/{zwqlZʣzH=Q:xA7%z#ԍn]rduDʱ0Dt4}'TWX"~ , $ώ!va*Xm73g2ʰL^dKCs-8NH%\7 Mm_yَaB§PVojJ5ZIKDz0w:pXO&YOڤ,/x!lӲJ1D!B?59@!dAa`c@&ោ,-r>JJNثWLS&z(պ? fd6~I >36*,&"5԰塧NRlڊxqA2=?-z32T.J.TdY5}e,(o2RM/u#Rf-N#{qZ,xO0>gLsGB5BD.ҪeTAHLY ʭh[Jア[q fpZ ;CYZ*jLR,~(v_:%$5VVCadn,d.UPޔi/uNwJ)&{U6vVK\r1t}DKˁA$YhlWHwIB. \hkټKd@xu= ) FȐL\hc8nǧ{]#CFm(cTl #[*#Zaƥ{OkE^JD [PJIRxrR h1NaЋm Xez{=Zr:ar,O.mɨm z2v5} Oy)~\toK{6Z%}ǣ #$ MYeҪm=x%dYP Ck';wfFuہ1%Fv^|$WیRB+@{ΛĆnn161|;v$ML2F3/#Ʌ?VLߛū:k88F3`b4 zܜ ]vTN۴[MI'}U}ӝon1߈Z(3cxF,`WyxŐNe![ޗBJ'Rݺ3:&jXrYUS Dhj7`B8^^+^ Aa0>. ԡҡ~Jv')YɎˣa,EH>ԀcF 6äKʫ$RL%F~ۨuJ"_/r+oOv/hPK`Z$G$( 'gLrX6v`;2\j^z!Eaⱜ&쾹O1t^JY%ş*ϾSj$t|?D^nRlIQ#oKmᅋȕ18Id>`|%^u8Qi5iNVhUY3Rkl.;б⁷}$В`^d^d H-b͆ginMJ>c&՟JP'"}^N)]9qwGSV/I)A(lBh䪄U ш2$t&тBWz@?\AW aB -MkQ0j&BEEfAf@5h֙R&9BRP7[4X|^)òfyV$^UW3L}%joP1R˚G a .Ʀ~|b3 $NYcos&ϴ6{i7]Eh `)y  #}uc{AI_SO Qjռc鈡o~ Q'"şSڊu$Œ"Ayx?d.;腻b4 Ўo5ru;y,*rwֹՂzsR;ᒌ!Oy*mQs$UWԔ}+hS]]bA T]Stc{#| xV~:W&K}OU8O|r[k! E'DF%CfX<;t(;Wc{+7OX\vW($O$^7S pxU40y }x#HiƟLIUDOH}Br%J/w UBGk 5}:ѹ 7?P;5 '{Lu\ [SXO6}әmOYMz/[B'OyihB&Hhvx&-s7NvE mv19^ $ .R%1^t=w\U4dOMjZP:tw;[piPkwJWveo\;ܷ+Qdze # h-j*5DP[8zD9BDt\+aҗw/5T9Kqu[mofH]G Mɫr:ŦJnH.P|ܮQ(,ATLTNkW&V(isqWuu,\4fLpk=Uٻxn #Z֖tjP-U?Vpc#ZhU2R:MM JrlV*08ցl&++)VU4NErY5*T\,[^:Q,N$T;.m{zϫ8Y-xat#JEֵhsJH qbД3m+V8b%}EseꍑHr#ZKSi{̷9I(ٌBK:vm,,5NwZ<\!TU4ΥΎ||v<6ہ{z ([(F A},踊lReEG3*HRF49K~oAqHjn 6;[]BFum鱥F]rn:|m=AU#xCh~(IYq;c0T`2 pEX8p!dZB4ϼiFslFv `"{aⱸłS:`[SJ+YR_M:uܘY{]ޏ[we.H!' !Qm4DlXsAmYfm72&Q- UXwZUU.L> %yAÚ2@*DJ#"XۀYC{݆ A^/k1܁W𜜕JU,gB"Ox]ޢ3 19mk}{eY# jziGjg߬Q?8>u"X!]91dQMw\~h"!]peةUAS@--.uuQ\l  ^=JRkK1~>|KR~TafVG=V`W. (,2ǽjo" uix!|xz:4 ogkF,%A[=?q,(;JfV12ZZU0iЌ^o>9Fpt+2\"dOtF{ Qf% X; 2O몚lgl۰;v ?ѨF*yB.5.ńUr[ vy8CAZύE_hxM0C B m.(jE[p 58f*#tanK]7"b3E㈉:2ג2(H 5Ծ"@M?e}F}t'>NgLYwVDpdcN ǐ &ReaZ9;+LsiD I,j#tr*Evj^i fYSfza>L1'dH祩uj?OK::v2paob7~[ #dC2$;#<; ,?Lo>04AAOffhC`ءi؃ߪo񱴦/Pg@{sCH4׼Q/J*2#pCv`6-sOw `t\fvV$ycm^/Y2tT"1VOhs`T #!zԫ"eQcIV(^`_fi6Gdʁ2^ņ'A.iÐ\&'oن+*+*7Q,/3fP<^5:@9G{V*4c qOAGQ\lDHhn^I$82yYWb9>6">(]4a2>4kNj=]8d q%ֱ kyN\F~iA>D1>DwYrk:ni-DHH^ck%{2jRP/H"XJu^2:9] *t1WQV."Wì3ߔ_iՎÇlk0Uuwo%H-.'rl(9^aQ *J'~ _vݟ QKA|qxF:9 ZVKf/{I/,;KH;AhBPl韬墲V1~Z3|Vz\0gwB8Q|gﶦ&_@@n^ؔ4F$.@M:h<]w+wA99BQښ^k..r M㈥϶?7a w<_1mzj9}K2+nNT;(`$Z&t|nD9 q$O{X&-& zGÈ^A(x&C$AH9כީZ!bQy_s a uֶR/SÒ{RRmQpèa :/88^9,wiF(א  NM}'=!4a-;s 1p:/?ŭ:F]LכQh|1.Q$|{:w0.µpLKeAob v0]Qܓ$B\ӓzQ)iVeW35$ʹ\ftpb2"y,MQpii$M@wͧl^Ljpg8/Gd*ZVQMEAz W%y>dT?{_qɮB[w-?bS B V6*DG\ԁHLR8RkLռ:E.gҔE_efyTf,|.wpHKpVZEa|JmPk-N˜I 1I4 KhDӂ ɳ<07zEvMx/=7]gAmFq1R  :9OFoxrC즳IJ[/0+F-J&2s .Vv[eO!]eeZR~T8ilATCt=&A2B_klSe2!Zu(ޒZp#b*ad.>I1cmwՉoŧɦ^aQW66\xQm?߻y*DgnL*؇A d;GҏE 2fҪN&z%f,B.0efN B7\n.K@JRrtҩ4̘()ڤ#!FCT[ЍDbA\=۵PFSO4)SOS&j{Kb9 D$6?30͖=Z_b,4 H YCFYv Xo3C $vE&Y 5ѡ 6&{#Ό P\r0MU~0GGk 0mDy F~yG0j=ap]0Ns{QVU0ݒ A͙9i<ƍ{-p BЦQtur;/3"tב9dDrրMգ6 uY} FJ!J`z/'ˆD8_Mqf`$VdnFX>[EG=g9Kvl8m*9:^!e.:B4*ȥ@S^`M$9+Z兵 C=k|xrFu\pU>Ns"3SNaIGCaM{n5@1* T Wk7I721pDv(wyN b2F.n=حÎe5Ҭ%(Jahѭxq؎T΢s9jM㠼 F!KҞ]ƛEֶْXv xՅ2|}`7(&a$~̒EP FF%&XuhԱ&L LmQ*вZF2 ⍥d}ߓ D⼿_#"XIR9*=~594ѷJݘL壬 p T 63D;;P -S2i8? +QdI{AZ2. hX!>VQ<|j;,hlUlkBB.;ޢ!_RYԱF J˜}'ɼZgډUq*5}YÇ,]$+IV=vi\w{-Mm}M@ e 'do% Qtm7cXV:[=@UaT;mΕc+N#ZO-uD2?*?( mZ&$W[aSzd8 yu}7Mő3 ޏ - q~xd'ZװӶKݏ%& bݔ aŷrwG@OuOK\bt}OL+ԩP6`qr͊ZpSJtU(/E_{h`|g}šAw7_,z>(ȅg2ZӨE 4Yз{ĘJ@<Ց|'9\ALuL[Nc.! 3qZ?xLR7]cDqo!шrr&L!~k&wTyֱ$D gf8xrm(-H(ײ O"ۿ {zuQEhy_]aNjd 9k\ӆN6aJn v/eF8fEy].Ըog]T*cWʳ_3Z4JRtx6я}3e kc{9:圓qM!#B bFL?#ڭ']u"߱ã7 k$"R9 IE<Ց>3uh_7 ӒZd]% IKdp >=`!f=FnTTTK 5{qݣR !8ٗfLW>Zhm=܉ƕ O%/v'G\ôQBοO0P*k{ՖIНү'}٩Yۋ_?]LD 1f(skܲ= jz௥Nd?Xc5$svp 9`BI̤S:JuXTP[Z\ qe~@ TwWedOS6K 9:ĥ.I@KEOŠ2Z;Ac.bc퐡Q{OL5ajwv?ObGt "9sz&] |TPr3)-xb7 c]A:8}-RӀ78.mm[dk c h KdDp,k*c ]72Hx,im!Id,_*QƸjj"t s!]f!5+&K gë2±\mYql˓ @Rf[؟{suAujPiVIW X60E 8/A-A>\ie/oxʺ.ڈTo=bCA>2i 4ta8ĽTF@yJzuTIhJ" #h,. xpC8_ w9TEY塚Hc3u8xsDYWuJ:`$SM#pBdƵ<(5vjFKus`_g `0!nr}'K$5)z#7&H&pe5H`VF@C0OaI9F$B]N&9u+УaM 3~4dd؂禾7\ȓ,+O60@MnN>:_)qydXDk@!7d: ># b- ̅B[,o=9Ʊպ,s uVY odVgRx*J 4CwyerM<03SCчMMߪ:UEbP~qpMRʢUj㤳&;9.%.{|8 " z8/OQPL,qX`Xg"6 t-ᶹod#em&rt%dn, 5S,ṯtrVv=5"M\FV0?fۉa@+鸛"Yd#ROo(@/b!d&ȊNo  a{k~+Ҙ6Qx#~ry3Tݤd*6o/8n^z InS|Hf0F̜S #Zv=rFbdc Sb 񚬶g~:ٌV#8}a-ų;}/q1SdYR%dLr.{MOF:VWX'X. 沆''\%gF\9n!^̯_~7$ Xy~/ ߑB/ȕh#a 6˳#ZsBW+1r8 hָAOsK[LIV< ;έ9`kj+J*e.DI]!ؿK,0ްFYր^ua%^У ʿJrk(x &TɴͺKqW"k@BGAj;kA1  .Ě-nDE 0e[sT_FM~FO.U:vsKŒ'j.*2…6jrG¥O`{+ IՐ] Æ:s]_LZCD)?@1j'K| {DTV1*| x^Oܖs~ zǎ{R)b>0p|o4Wg,*EKqkCugΔ㱡R-o)7ӷiܟY}_LPhKqbtfM є="5N(8Tuj=eÜC%(kN,9هh\ ?WkX|"(?}-SG=HFmv˽)inoܡ/0uj=UjhI>ɔ"BNK^{_IB) ;!R%.gz M.+6 m'Wj1xDRM]BPy˚šVt*P3A܄w۟ pI>7(>\HAjIQ_4;;Hʴl'f찱%A;O#Md#\1괫^. ˨ŏ^XI9T^ ;<(I/\,nj9(K%bqH+ 71yP+)H,YݮZt|юe ġ2ߓb$|жA47 F(K|\U A3ͫbΌ)|B'1]s$aE i_!O`TiVy[Ữl*|6`(7' r|a`i[H }IS!a;FN.|$_5sW"L7??,1J y5m\餷0I5)Xڃ筭0k g\5Ou(ab؇ۧ'u' J'qjW17p cwa# :I+=5eePrޜ\vJތIavlHj`,bZASc.|!U1{U湨7UBi-iZmS_3y$u!vl%мҒi ,|! Wͧ2c~)SA<\̜* )i/P~us7%gk<,GX*Zȋj6˾ lŔWdZǣWv.pE ֑PkYs4:@c)1m#^Jr F}2asP3"= luAYR*ZܴXhTsE76g'X4T4qɠvU<8D(z6F@wZ& 9lg\OЃR[KڍL4)OBR %3LXT}. K@Li~2zZsW_6v\wޅue< w|FRxiD`І !.@Or!uWb:J/:a[0fxsMU  ^|*gezR@eg 8Qn\+*qunO96(XVTnx :  1s^q!1/[qȍF&Qyjd÷w8£Y4]5Q\ȌeAusYӚ1⎹mt&NV5?Qw". 0(x}b^|JAn~FsbtUFܧ xN5F h]I6׸CԁbU|i: s~)UɖpLx[7"MYԐo;`l@:3J+A&~<2O/EAb*"-G _7 U|UeqnV̊>G7~L&RG7C=SG,o H}SUP5rSbf l.Hٹ[}=D :k%Z<Ӄ( мE'Q0CXT*CG޸hFW@37lV4*5:\%ia :=! > jqá QvyخChQ(ʋr$mŸiaIS47g@ BAkb MٙI/Ko@RnS4X0 uV6(1h L]? :݃d`B+JdPMX=NBnN!bƪc Yud'Dq azRx:yl1 Ej.` P5Qu(ϲDپ%u-k0N{N! }U>"sOq9vzR@~,:}+H[_ 1koc{ SDJeg!^U Vq⿯&I?$}4b~Y$\`\zZ*X`LJ[DLy)MD;Iֆ?S6.Žn)?Xa*=jlkU^MHgGC+5V>Ñt]K`T=9?(÷`.lp5` kR$jKznF1}HlfFqsxJO֚;Fq5 i+RLora?_QX~G˱tbbN^՚;"E]ʶ$Ӡ&AxKqҢa_8w! w9{ _t&wpzR weWh>x~p^w~rF饛Â`A5l3ĺD"D{~Xg5\ͤ@;KY5]vTXҤ2NC8i/fmh\#+?`Z΍OOyFiʧ \/Dv D3|f K  ͧ敆_f}(Y[854ڪ,W^lqG{/n@vf yz+7r=QݾI\nbr 1R1̀aKΞ\/7YUx1⿿vd8i ZG(kx⏐MdtmY-JF N7Wb P.c#)ӟ~ia |u֣.14OtaT y>JZwx09whSI,#mrgPEƻU͜6cf{<Hr'q w2 ]_qJx x ~: W\{d]m٤ʯ #j5%8$,.YNHevb"ʂʅs;&X1qWn 'hۢ}>̲6qǾӊPTZ?^0H)'8 E@OD~ ~ W!oLŶ@A'U{=*c@bi]>$FـQ*|ޢreqV߳ɂ]>{dz/Tmn%j~t\[uFt;{|g:ts2s3@S_IN'Udi?7˰]ƍʂ;d !| .>Nb^@C㨎ƫ57?~/-ɇF[cSs>gm2%jB~ƛ!LhbP4Ɍdȸy+./ ;Tonɕ-Ľ\]%E pSd.Wf<+ސ~Xn/F/Oqpgp?@QЁ~ulBj5V8Qv^r}{mɄOx Y񝐈Ƀd\HG "1 KL8KOSj8dP*?` ^Jv|r9l@gYS{NRnY0n˕r xm@pF_36N(N\1cSXAj^sL52/I?Ĭ'; [m O]'QC1lo bxo ~ѳWՂy{zj>`@_ͺs?j ֪`Q ͤG9g.5fV0g-y?ZW1?ViLfia}[sQ&[9Ymu$|b{k*\duӍObr8. fP&l 7ڎ#Djew㴯Sjr0P.CnU}s~-sWŲek!tf~6g,GӔCA(z_r~NO٤De\#@ pkb g<"҅GBj2IMޖ˯59X]tn|,~ZݰI OjQFM)ܳk[^zLԽ> D9q|-4oy 2pufۚSA0/E V/Ɠ\.3qΥj[}g-kpN36կq6hAŋf8c0![f0w8JVn_\ ,97IY(͆+4@1@TjnT[U{oХx'-Ha؃dX>h+jGȕ,ՍrD} |]V=qxf3Ce >:0.ejQVNjrtvNJ2\c읒(7w0h3B* ; Li{?lUPt/Chje>2c˃ZM>TE,vG Z|ksHä9q#{uT:J~CӞw/&bn*恈УjZ)U$ L#h"gL0O&J6V<#4e'CbbP[9&WUX9f?j ͧ"ta;#L`bx|xgt<1xS&(w˼.LJ*S@1O<9&?;&MG<ɨ'E=3 { S[Z%Gճ5xFJ"8٣s`})| e 5ƫ&^yMGs0M0JBILU;6?͖(6_C O͟%i\ZiMw<>Ff"%i-/Yn[DÏ~hI YvP5$pdoo+=p/ͦ {Ȯ% ەnaKPUDk. !-hq_ ri}*\1, ĥ2L0baBοNT-W#Z-:z!qsb仲O:잝qݯM%'N4oXw ϙ:VjRJ4=+uL|᫪#s3dJs`أF_Qox1yտ҈'=IsT/f"UR y8ɷ\[Z fgN#P8SHO:׿sX1QD& AOUk[S_8!xOq R_ To.C'Rt@Pyli d.mo3KܐB% qI_|?"L,vc H; ɑn)Ef`=ǨgQ2^v/lxPil ,oՈH.כԅe/͛C=0VCPe{>1=Vz(=iHQC>[xCBU,L.)b1v2Csظ#Q@(p\ɭ!Rj$;'$e ׯL6#ğ᱗X}AJ?#{@]ɥz,p )=.ODCk~:(D&r0.DT(LX'HdNgz!P,Tt?f׶!hAhY>Uw7mxu9aƇg!O} ݳRJ|jE |_KBpp|:D}hmX?bD4)(#Xd/o0 Ŵ.)@Nrhŗ- gIDOy%C&ɺ ):eLl@1JU߽^}x-#ua0nՀO{2Da$CK4xo'y$P8:(D:o:)1&ELc%Xfci2A[ 9$a{cHܗ8i9djݲj0pk;9!f ;ۭ* 0ֺfT"H{Wv ҕX9ur0O ؽdkm<4vJ;ng:f~_w1i-, oEr\dcyypLy0q>b/A@c%8O/?Dz,ۚ1jYL6wF^ FҹkJژ$7V9ًNWÃp$Yk+7: [9S*c2#{N!BgU8Z(Q#*h' =TʒR 'OeLִ=p#[5h JקCc}ՕVhy!ˤ걠A#fr*jtGiv%9pRe&ˇLʂ[: %%KevVp=i;f/YZVZU|^\!p .*\~aA&=h›1ôI~N#.VSacy+)Ԇ?Rt2FNQi[TLJa4Efz1%t;'m y,'&!ݡ~Q.;u2[wV3uɶG )ɽ1i4ѰL6 TA4/WϪfST uʿjʻO;ZлgŇj,irD1 -Sݻ3u(E"X d./]nDQ(+'08 lРfbM/juc^pNeVh&4uCS݄QKpO-+uf`#UZevE"z!LQX'H0H:*RH;8{X3 IQ[@Rd}@0EH=0GTH _ir܇VH>KڗIj4lb'\8=h,=~zTSBr*44$3f^P֔>yC9%pMzo,l-@Dk%#9ڼkZ Ҟݟ 'YV>.?%#& t(E$xB2+ڭ(TЄtfx1IH+o qvw9z.OK;2 B=1ƛWT#Oģ<ahaJq,,IͺwY%@)h04+E(V7ߒn:娪3!6_,{y@UQ#Ġte.Lō,7(>6`;a.ںǝ\[BXV[EV&>M9Fqdm-I x4A՝E6zﴺ9j;/.!Ӵ*.)XȕǨh 7'$bi !kjX'MtE9? }8S/bWP 31"1{0:I6J_/Uu1z,!6|kXC|)XI2Jޙ#I z& "CE`sߗmoqh͊Qz,߽5 QB}gC (M\` ޞuX=ÔnPTD8PxYOZ4az]9`; y N>[I_(BrsJD~O(BTjPcbQTQR'y1{KZLbApԼ_PSHW+Nr^/R/iᮈ71GRm&+Mia)/=s5ϲHF,$O PVÈk:IEK,(Aspn )6Gdÿh}@9U?`y-&=[3SJ6VuѠ+ց hr΢HUQN9 (1%h%U]`((v B'`sz96V]+`i.otLR7bMS*u5֌Q~ZiRz '75B-^e-2ԗFjV 훏}f@bgčʈjdq(xL4B/(q;;מD1metkOs| ]+KR7 k)H Rzlߞ LXj8;kT-QcFj/>!ڧT0hYs-陘gR3O;[  /3J㼽 XtSbſ|{qՇ@<󐩑[6mG卧h>nGdTߠrfHwb)~5U NZZ{rԔ@/_f֛{GWl88v`ې}a[w(OٱN]\Oh}& S(|3 hrUGA? 6oejt \Y#@Ye>dwC]MS\Da_M_!GlZ=8qҿ(|fZrX}O/zM4f-4 A2T(E4XW͗Ĵy*x^ 1qq-מFz;u 7y.UAz=PF~` 8U|gf\&!fL,f̫){|4-Vڢ{\MKb%^Y!nI%f I(\ 0p 8\iJ $gQ%c:%D_?fݹg!L^y@VK%l2NsMhԙae痠|+K1mWRws.5Pxϧr09Z5`ĝ"[Ts/kYf)^V#h``iԘ}BɃ[m=6X`X2cߜ6A~X^5$plqUa|'ύkLnż%uf{A'1Ψ3[FˆA /FGKnCFQ4YDa0H}&?Ų)_ Q*0o㦃;]Z~2lCfM^ |?ipC$;p db3 U#k\{-Slѵ 0[7j1֎: 1>Zxo˾YB8f9'uڧX:.-o-|Ux/_VFj}o28/Jwd?FbEe&rrJ>u!Wdݽt'- cZ1F1'|`2%94Et>fi :(WzfMbQ-)xQ:'TMm8J@=#>Ά(2겼AnT)C?j2jRZ*nSy+oHSJC?m F <,,#nAPp]^& kO'TÄ8]/Ďtr\YpHTw hO cTpMfW2ć EΣ˚]5/dUB ӺQ9Y_( !.FƢSB͆*R2CO$ k>ңpB^+HG>%V-@Q 8MNh 1FH,>apT`PV"aPX1,țOBxs#qmԙ9|:B>{Αv0'OTkqx d+N:x N߯@E$}/ ^,n&Beb̈́?$y 'ʥ7׈\ @dpH墢(5-'7Aؗu8,zϬxE".;'A?_" S!52 ѝpٺ`фT:0i$E*b-Z¤i^Dl]Zrs 5dlfг^q:n✇:ՎU^zQ7?x־( ӕQounVjZzQ> c)-6'{1%lRPn~ݨfwg Lc:0Աu@\\I8@_nAn l$tdWlXR~oyFB)wlS,FIkIV:dNCcID-0ڝ}O ai'uNGfJ_8ߎVJ5žDb&7Ȳ[Z!z.!5Y ?q !]r74-CJ>/ucFR(9b&;6p̟t!R.;'{3wʆԖ,vX+O[Yܬ/N8!;z O C؄WWY~I8kMٍ\h&ad5Gcf8^Rx qlիDy;zwj}} \ 0:V`NOnMPڍvj2LVtMXҺ5i<;k@FΑP |=TaUC)}KtZ:[tu1-Gc6ʹҜT75n5DāxI)E-//<}^x; KkE@xl=3v̞ȿՠ=z`>ςXDvDz,j?9?7&o*Ef.N~k)gAK( G=] xg0kjwg*iXG'$=/QEAbŽ4fak҂<&j(y#a %s#TtsAtmN3&#WH :MY4^ّ=? CC`ʳKd\FV j$9&]ɃNAK/^,ۧ/fŀv7(nQMdsƙXь~ 8aso[{kewCU#u~ʝ%jSt{=2ݥ{@D餖q)VSPpQWgfkMOG0k{UɕFw׷+j_)C(5w?߉hVcKT}F6kq#+j'13~CeDM> 7S"8a@t:6v %tOt[J=d8V6b#:6weFd^Fq|8j2-7rW"a^-@:2X HAHpxl+2opMF=d!Ցcu=CB'~(yb[y'\p[}3C"@D׸=FBxKŠ/v#IF$oTSOH̼5Yz Xle*I반< L.? UPu@c|8fNJfVa% nl\MpQ6 8]?+η?Óu8Y$[dɌY:&]KNZE~6w8Fca&r+Z$`3Il_Pmlq V;:1rBZskE,E 6E%܈7لy.m*ϬoU?ύMȓ,1H/4جv+lvwfP )6%xK'@dl W#y0!: rLsɑucl|Ca:v̐U;2M|mS_-$&}Rs&^@;;}ú7 ٨1MXHd7 ֐xp* sSٵ)Bipa|/c#w%Y%0qoi N8 S0))IU!W"%-&3*pWj@NҺqZn2Ffy$%N!3M8lQ؇]e4!k A.߸8&8 ]αxLc,nWNY <vj5D X4NarGEKi-}t(. ͔ GWZ: ~h9!뻈73L$a@Bh5!48uP[.BU@d6; Z>Ln6ClH爆bcRM 5>)`+]6;qE0j=kB2=M0&R\ h9~%ԓpR)JA' ԌQ4l bC0a>8#JOL$$31 3F_ Ta#s"^ov A4ҦdD,M`hY/}f'7aM=dל@CU0~HIT/R_kP:4LuWGv ~[zJ,#6IZ:qMcI69X$S_]'%y*|,# eSQB޼Vf ay̲OZ3|x-yvr,?}* X6ahar0~_D ĩ^$P*.XeHnbrM19*r>ڊPAǍ.D/g;Ӆяo\4\QZehmzCX7>kpC,MU#bY|%ݖ M{H/#ڥQ8wGn=r-G 6S}Z:ЅJUjՖ[P1)'5W!xGzWop{YW7_t\uAo3ؽ%X }*z&Ǒxa@[hui-E 1UaK'FʭcM>#"Ο#TJzgӀM׳gAũoΚF{L0b{~\w[rM~:8Qk*I hЉ1^ ~離&IE-Z+O g[2aͦ{·gv6CB c2(2Z#)assp]U_?t_ /y-orӖװj'G?,|3ƠgQhx.ݴVOg 20wٯlg&a1 (?#Hk5־!4jPf|Z|s FPM@FV,&3ט*d bc=Vn]_Y0!z#4+;_AT#S˅r9G0smddI.]~3^ zǩ1GD;x_#ԹOFP O!RTbJ2Eͭ-V',EL?9YX>"s|}by}$T3'+)6OFtӡ\d8#e\33;ul. &^rQyj+{YgFtUx9<2'J+*2~T3gs^͓̙~Ɏ6ľb/MD*]we%w8&D7L"`llEϺ2IP)*boc]+26>iS9OfL}d6[0.5E5=:|k[٫[DViXoG%bU *hUi]+29 k:`/A D l,y#jZ8k;5p<SRWty+Q+>UgV7eB!`_ =[H8+k諳2YIc+I[ubp˥3i3J=xi2cYrFrU|faaHSb]>z⼫I4A4ևo1a1n9^'VZDM0kLY?`Z. }<w0 5Ho<տsŌ`x2.tpD$YХu T.?C=yo;"&NPpSټ4NT~UdƐ+x:WENKĶ%cm%-xu}N~B1(MFttmpR4d_:sjD A od[MOjTd70nXz x 8;̒,҆mǧ,%L=a )ނ7/B8*2)\<ڗ`Av9)_= G9E*ۆ_WSizش;+tC%F_a焭iUb׿-1|k9`Ժ"+\V==u͆1hed|űoc#wHFKFi-a;|i Lm0?_ eV)HS=iIӑ( eF8q}g4:8N}ӉB8:)ifr#i4Zaۚ`տ/R] GklFJs#Fٖ*mNb3%m9d.Ћ81bsKPw@bb-z_tׁj6%4,?w@e ԥUKhh kc٪ٌBSz_]N5fJ2Q/1 eQZN<³1bХ`cYUjˑG8&]~Q4;--0; հYR" 4.-@o&d)Xn"&^xr"k7*77^I$ސѨchY*wQP/~=ka730`!ݤ%Kyָ-=Yeڔd`9nR^79M@@ SMdmo2OئʃmD0z~H'#VnP={=;h|V[0yGw_aZ#ނ#j%ʝ i~\._ +nƝ@;~IyEk҇N"MF{V˰ECT($@X&kaN:I] 'L[ ՘Kq@%7[!S* *H9")!5~uB@LY+GۑN:16MlMpO7&}@ee}y8C^\;<#D^(YY[Ջ3z=ٲ@H3EV%ƌu4jGIkg\a:x Qsr)h`+"/Q,!Kؼ.$WuXl^3|+rJlTPEUb)q9v[@/.lr@H-XhOK6ؤca0N"y[WiDB_f2Wg" FO-ڗl& -e| 6z`ҎВ࿙#u gq.6"?_Ws/%_c+&'FmkO>t8qE=1;=R'( goW6]l o@ʸ*ǵ&%[Z6'¶"l' 3[shA/{s_@CBItLwƿňkfȈf n-R=",!h oq?Zۗ㱈=sʚt%d]Fo<<E/R2™rYwYsQ ^3GD 1*e*;&I&A^NLrG KAe`%oVZ71r$ RTQVh g4lD*PO^YNuXʠ[#6p٢dTyy;L k׋7$i3ŢK[VT~b|*F>QO9'^;*Pt ٌp׍!!=*>!a 0^q{4NtTzY;1ccn|C܄)~fz aW:5ׯR8xڼib)ꥭdDk3jVO/},L[Jɟ,RV]Vxb!' >i*&K>+rumt NEI4YkW1_[M/#8 O/N VJM(/Bf:u9I 4,f8T0’QWvA+ [1&5FC+.l\>XWa5>8xh|ӷ QeŌ׫lk-DA5@RC=qߴ aF1~Y]WwK8i?`37 \Lb kٍM:"i59r@lP_FnhY!1v̛]:f!néYK _:ͦbyGhcWJ 5Luv6cݕ.B{_U>evG-ǣL_~ xaT\'_Ðh+YxΆb+}^j0u+]J[=`LHLjVLژFm1rS<6v}JrQ?J10jpwB nߓz&+M u~:1[ e-?DJlu!eI!yg4A-0?_|m *= ,x^2YӋ~j(Ԕm З" MmBAPĭM|o oaj5X`cl缏ﺓh5&y 0Gw|DMJc(B}'u$}!OVT N!nwMGHfβ^Ջ\b͚Dv=xc.e.po΢^RnPbL\؋(//-b"I<'m |ceQM~ zV(,>I6CtrV-%i]e:~2f+tI@81փNed&63(b)C>g8j T@gSt: WоYMt^}ƹ'NW%"Q)ʖ`Օ/!hN d$(ϔF~ǣhk?QgWkA;ݖm(4{y^d/ݧެlza9H .(DdDȷ*Ǝ*,?rw{\ %Bp3In{P 7!W9SKYΡw,<'vhL})AckG:9 d̐RpV~wl:=gq6@4`w1cFǗj9B9wߖ&ʄSni> ̕u쮆D=i6LyCijv>cS\OLʹcK!>vKrvhGYwjnOz5VYѶ5S>VZWpdi.6}f4DPUE)Yyu e"ZQf R/ σU&͏s?b6YR)oͦXDTaKCu &@MV\ BJ379s`X.#~^1I,,dynpQq7. #/⛇+ťJyi 8a+J-嶇ߣ{> 0(֭UC@O37!(PN&\8ID@ptӽ3E&P?{̘%ARP4ҋmnbH|ϫ=SR˷b8$' ?X(7⊭󷷫 Qy=P:$>ӧ;qjS+߂w77OQCUPȮ-lt 6̩%qn.ygG_j0n gSuݙⲰx{-h&hrsC NgǛZXfVu&vL f̥N|Ҝu89o-j}Wd) GU(d_̱M>=8W*1zSܕ˼@>]/9d }ˈ i)\3H$\Ģj_,ܜ٘xQchePcD|KyĬ$,n=5"K tT̀QˡzbiagLXM Xzi<(ݵ+[;췾gKqDHl.1.X(,ŭw`+Qw{5'LWı%rFkWZOj[%qTPSfԶnYCdOu% +%oOeoLN?BOg6GTS >4GhD5¨$E ^MDȭD-b";E ^TN3_"qxio?擲Ѩ9L!VW/ yy?K$y79Zp$PtG-x M ?(t$`4]BRMf fzЖ4TQWMJ/P "׷Uu*8nb+gtsv";fnv*RB26S}>M.#'mlKX\d|zWH<rXE#j m+jU3ih :c\8-[O4 V%9:7#!NǴogg)_PDȖ ߤcy^-~Uvc_ M̒#]48w,[Ns.٠K +k%H`I-UR*7jJ@2 v8b7XS j#VNxQU)# X ẂC"`2ÿS xs2s}l^,A"O9a/i3RV1TfӍ7dLoTcy`[֞סn|Bitbyexĩ7[A|ۣp>_cs ClmriU^+UzN+$ d(h;NJ f#lhb&̫ӲNxd̂z)V[-1˙vӫXl9LMwa ID``C-uDJE¥"UFa0!H1m0Z9jµae[9Q+ra=T&\2WE?_u}Spact`jRiBPr2ؑ/H<ϨFViG*NkZdnW]Z9;6KԈ1%nVh7՘7miy)o5mO e*#޼;)+Z,N}C*X&73?,#4wx1SNȠs$ T\UDMgeuľXih_z4U&#ϱhzNGj8(mq  ~G9kgY)+M&"ЋaD&fa߇4V<,ҍT'lɖ>Bd`?N恩v;!1itْO 0d@ӢZtYTB ddr0.%&s[9=N^𕂾vsEQ} J_^8 l!v데j9M%H\-{ ?+3$ Pgqަ㕃<+fW/QAh&Zk v=ުBzUYng$d V=;%IF_C@9y>RAi63Is}rV!MmLn`*uAY'wFڻz0Z#yYH QZ2ѭ/JᣙMu3 LqE,-#,ē! @gEuIq(2/* YnHFp9C[6e}/ h5-5פ7#5] p^Ƀ<(eiYˍJ^GA-Mܰ$( q*^sQCyV5ߌN5Ѷ m#Y&`ڼXeRJ>vɒ'*;S8t/U جg z{ܦ3>(rP/ +:ތ t37iy.E" 5Tq 1-A[52v: 乙(,VD i4 ]ЖYkp+/Fvȭ?f 8 +Į$2sv 0q>$0OLeXZڞ;,x3jV=v"RdO0֢ q.SDE,?Q9e"S4.-e\FAq@%*UZBEN)=gv,ۑS6v]I/ڣP4'ku?Mu&f]_Lxh>qힻjr-lNScb+̞z ~`}>p`!{Cx _194z 鑪-7]s3쒠}ݬ@OQ_>כ53""0d̓SO5҄Gt+{%WKi4{T=nāȓ -o ,71N,ҩ99M$:X|%sFD?޹goT- t$AxgmBIl7?yҡ¨_cӝ2 vHJ6Q;zݼFw]-tz>hǾQJ4FvǤٸWp>SHaA&'EᦟʉX 6:w =X?7rc񗫷v3KKtq0`[xXW g$RJ@V ]d ֭co\} $+RR022HE9A C % M?=1OL/)B].Hvξ+^R5 ՊnjasN >vBф]jEO @t:Su{d"o{QL : .14c4TDc!8dɓ $G'Vgf(_m*/>'|e`)bU0T]NU]7& j4oSs)j,~Ur- Bzl8A5Зk`Y)#ԙ\%*YY퍣CIE#{Ln ̴˩`|6 |Trvse!vOJjH w>_E=*dZ hٴ{ZbI@T Rg nS}O8 {tkp1zCƘ'k(}s aJ6c" '2l^UZG뱃Bb*WGPA# ge@i5l  WPVz +NMvϿU[XRD;o6)+.WS!a_ZH3z21|KH2DI<%A.cozĻ1w\x Qo;Be^P%6UL_zֺ;caRB5}L=L\BGc@?^U;!a E?rE첑-wGڶ%D:!x`OdGOu:2kz淈\!N`nn5^Y7“˸&K{Bo)PhiWH;ϸ=vd8mب'On4U94:iG4 vꑏCcNS3 >itug["_ Oj3nAEήĹZ>\%X+ӗ՜ۅ\wdg9";a=ͅ7}UëpW⩾/Dj@ δEe\K.͓I7gjjWh.|Hj5UW$SZk˃&2cppmH=//)u@YDE*hPH4Ʀ]%:dR V=l9o>@7WekJrƅ[\@ $YEIWXHaC#&[@gb]jq;V93Tz8S+yѻVнZMn9^I$jr0q&K^<`8Q[q47sqЩҬV5>V.1 u"1xXތAbS uHZuI6[6J[u]K u涇"ņoLP7ꜩ~8p)_$c\ lFS4)|[vjնuD- ُW QZP%uY Z2Ő Dbԕ!&8FtؘRjPMGS_LIt>ktO.>Fd6X<6RB D\Ȍc]4%"|$AVtyr!B}a}(F@^X8eYiJsTk+0FeH2K0LhQu5qMa45l1]K25b+#.|oROeKDO;Z_1؝f%jA*N9=r*HimVcq&cfmSPm]RVڣ^XbEP/Ǿc*6UR{XDž {. R)D+MخwI%.+aԢp`Mz2b*)$IR2WC(5Ϲ5EDw Pveho+m*  |6kO%e0@m8? 6ʷo4GYf$zCpMp7Vhhُk3&WK4t:eKɆ0WOF͠a &r_10ױ`ο'~q4Nپi$V!6kTWYRp=bQþЬMe)Oc/+! RJ٩vh BPGtyQK#MEvx=L޸⨠ T3\HA SzZoťPob 6=}3Y,X32[wM?R䂇:DkD MŚj在Fj4b$$v TKYLc٥4ˡ[RvbY{&*|Z- 6YԉIPX"lĢOw#q߃CxO='] y?Uwٺշa#| ۴GH~Dɭ8޽s#}OS bNA%CQdcZz]'i"=5׌HwŠ>MLb vK}9c;/x6u2!$IPovGt!V*B2ʧ(1%xMAʥ1h'eB720MF+3Zܖ`@t4 ל.X52.ӁֲP@_n쎜ʚ )G*Y1dI5ߌE|yl _$6E~1V_{E)/y2E}[v䌈t;C?\gcu"zׯW)ّ y`*Wy {Dei>yUG(j(zLD9tus/Ih m&K|j=KV(ЁHJ(ŅV_cqbsFնS}6}$&6E@r˜SN,3p\F&tLD*!{#%u`UF< N4n o T-ӽ5X)'Uvqկ  & b=55yݣ+"fޢ"XgT4ȂE1Llmt-_mZ墑1 J\Oq iϱ[\̶ #o5ō{3 d!NoE+\\<<xS8`.8x+Abk5UA߫ч5$;#ew|}02jPz=Oe$҂Ej7WE*(Tk| BjBq]ıREY*to|{򯜚ǙI_bsdުk {Ufg뒍&&y׮ y[p JXaHs(uDʛG˸߬M  _)N*W[@;, ~tY@8_Pq)Zd?zNQG.m_cth;w AͶ5ܪM|4zKvbqiQG<8@r2l8׸:owJ{-Qf۩nt8݀+5HSVLy2˄VصJ$ 'hWgVouӧcELPWTk0<\Ѕ .:WhzJ'DžeȜv5Eh%vF7yXA>cIeo|JhԸs#4R5Hށ [F+rfU2ٱ@xcBv:,lT9NXr+֔ 8wְE*>r)qK Znkr|c*C1H8M6Eqa` Rb5wN"`kS5i-jsHnvSZAVc7˾"^!gJ,6:Cq'a`pջq-ѤǨ,rE} GB8҄$A o?F7m<FkK`cDm(8BcHw {Fg/gbdff8a : S /2sǽ:N\#:;BKRjk/秺XhGv@hBn9Em^=;;sm"tE3OKB0liވ0zybܡ9mI3/{2n?ApquȲ%GqCkx[^ m}޼{H e2C-ZU ]̂P١v\ 0q`Hꨕv+ qfH-"'pmH醔٤ Y46}FrYd3L $/$P{)\+APXR)q=pK.G mgQT^تDu֣Tv!+}'_p; xBI},!n-"hI#$+#~Շ"۾^=}j ;i>V}[ܸF ;e>0MDF՝FM<" EP_^3AR%^L%Tу:6;|iY6 K]Ҙ}Z]"9);|IY (mwWIPDan!+{vگ ɀ;uux$iބ!^@bf{N+r ٗkTv@9܍(`} ψY٪ N^ ['&,< bH{`ՈZs8[Anؿw_702a&R* rZs^EeTa{HB.8!B>g!ievx<:rݖ hP v 6+C S--7%aU?M>~#M#A)̐w`9զ~p(hz7W-shtfs[WjQ񒧸gU8Rݯn?AQ=X8h60&=y;]}O?i=_Ur:v,WaQmQ<: a9hDUl2}2A1a;=̡9=%2ybXsrk c|R?y]WY j/stЌlsdD@vJL(`ɿôm2h4#0LQ+BWL mB.fJT Hbj `L׭Uꛬy$Vwk3\ܸ,`!x4e*QI989V'L 4zJ>bƕQ_y]r-aqތe8P<:7 VeiI>C7Qְb0;S zDQ Fھt&o*!?t^ߣFE!>̉*2mwN)~A^%4d̹?(%o`&<#0 x 5|Uz_̼7+ zV@@2AIǼ8J88Wc#S`(_Cb@N<9"~t&L;u3 ^O-4U&OExQ DŽ*Zo,_ 0ɰyC.Ke7Q2ykL\̢?*̳ڥ[n riO1PPNfGT$X/tŬFxxp:n+4>01 /\*YRhResGU i{XQkaY: ~ܕ87#. BO$\w, |z>|Tl?t͈jxΤw2csie_kוP;6"j;#.W-?(n~D1ʼzH.8hLr͵f؊x Rü=";K"Gк g.4В~{Ioٕ 1bgKk3Lv}g9 kTufpsvX\ք̮Cd|> f, * q}8t'kVE1lEA#"-Q+=82zxu?_:rTPw\1'9 N0"\FTV{+_) II0oT}ysʫ1Q#DcSO/&8)(nk7 4y2py}g$':)wݩ639F)kId * L,y%Zu{f7_3$J:AޞHYLr.R$/߱JNZ#z5]#mF =" rdx)((vǧXܫkٟFM `[f\o/)k`ѳRځzv #ŰMsǣmyF%y7VS¯nlԈw^ @fB۶l7!iĿo^5Tp^X!M|2f/CG^tcGhž*DsP[@ӤA)grC6E4=!%C?`_Yd6(Zxẙ]q<Y#όC;NQEKx4׾+?!g4`' !zk_XL]u,>R܏و)|\Ξ] 6+]2[otLPj;p]q//uXtJ܈*UAgv^]c̕*J&Kc2(Scukb1 =ٺ|\9Ǹvpd )ٰJ6hJY&E\&E+! !ր\z7 bԨ”36w:dƎޗRfC+PW?\-Jǎf*3x&-{Рѓnebؐx`jHYtT4Kiۥc< 8$AiA)7OZڝ1*b+/9N{ s?mtvI4>lj~G|!rծ寅wQ*dÿƘ=1Z܍ĝAewu(/'x'ej"[e =V4mO]r/@l[yEEO6ĸʛ$Ymy):A*-LUAgD ~Ʋݵ-mT'ؾfe@ϴÅ6؀،wI}7ĎSXxJG4ϱm8n;Ƈ݋7WĿwu~@L UqD"=N,Ĩ)icf#teၗ)WsK![cԱ7x Lqu.)TJ/X!P̔,hr 2(Aj8y,>/G\ ~3.1D:_#򢩢4ҲÖ1ghxf3T( #a?9Wݪ0LϨ} Wl0fOa,(z>OYɢInZ'9=A_4f<d/D rbDevea z*}YkMi8إJЊ/7r& R KImNֳU^*v0jW%E (^Q)QɚNR*!7%]3]}8lFuZ]#0"P . 2&9I70.S)󳕔+yxePbچԤUɇq,K*% USLܵYk)/ a֋`)jMFd޺ϩ=oJӽɰLV/@SŜ۫(Άhi.AC3[QSQι˜.?rT.|eG¬n!~o KOpbmVq/jgW= סfۯ.ک[ o R 2Mv}K%H^zDOnjZgN$fjf ̬{df+ɵnNބVEd9Ӝ0)Q\*ap;'n5{ Lvᤣ }(՟DR$1߬ ,oZe|.PHgRaUp ZV^xc<4-4~u}pz( 3yF}$W^sԍՒ#{NҰ٫ c׀x=&B0eU rLdJzptgQ8nĹsS3;BقGµ4;f륵8)m(w<>m6~w1c"_. A#3xN8A)3 2M%IQe6FnryK:Rn RD/qdm5bZWPKm*IUhjdc&F| G2ᆚ{4 AI<8xveoECUHV2F?=1:k,xA ;miDEddyIF::WlU_V=Bv<{O8;հ=rFyeZ3'#gRw|BYM" 7i8^0\wqp#o$ǧ1 ^A7i[!= T 5w:H *ש-S<_ю7S2A|"$OLAE-KHH1a%t3|A2qMwD(( JuVVJc~i RZ If(' }8`LOC N+DNHK-<,:+w*kD}ߺre?ivç ZW0g3-ĭђ}bc+aX$)Bk'|ǎl՝pL0^RW] ^ߦ՗O@I^EhjI}":B $F Wɥ1u q%AŎsx~~ ,Va8'¸<|c:I1'Oz,i<gA\5¾"3SȒD]|7FkܮqT䘮YRZPC6lN.)DEexbz ԙLܲG^lҬ$k)%+1CV[ύg=in`qq.\|d{^@9bܵ@E` TggU.& ~` |©V)YG^9Dc:\쥣[W(^+9iVր\B7HDV :mdWl4\<UrU]0lM4b/6C~ ,3<GR 4TLY~?tP$ȧwzBBARo&"\"6)Q /K{J/L Vԉ=#*.-~Hp1&bz++CΗ5PdU%%w:]K_V7o=9- +ƵxW}O'@h+Y J7%lW|hܔ0 svjY_5u|h^*dhedx]>.猠 l /%Q5aIrTYF7I'!X)ns ?:9]\#.|}kJ> 3T}zb Ȼ Rh{SJiGh=T%bmu0$]?lDpfj7_tS9U{ *S{r4|gFzD!KT5ޒP=˷ k Vc3줟n|w};:og,2$XWQq F3V5\3Q@gw| uhN7ɃV'TW{qQ]]rfFî<쪓v&7 Ri7Yk7oެAdM" Fl_mZ6Q@aAR#Qt+Acјj׉@kL5Ѭ' e"OڰESA|VVwCOۈoƃG @xr$@ͱwj6%dH3UIwg r)btDVQb)UŨh w и /2iM$4tAbd{ޥy'V3k-CfHh>Z7+]b"SB5VոsY+@Vki{|A h)U> [6%4o*&{L3v~fEǛ9ȝ㨌?=p%naY}&-nުVz{UL{{֔䎁WO f=CNK#U@%c cQbHQ.n;1)УpA @VAmb܈|9W{zC XxPMFU|/Wj_@gr(=$L[R1%s==hwV%`%{͝N"EtAGuqذ9fo)Y2LtNrH<i,;]×T-Ȉl"}-L)Ģݒ@\LkBU%Ӫ`ϛo++9\ :UMiH1YhS䉢J}SɏZc}xy_8)9غ>2=Ґf]LtT/d+?ƣ$'Ǿ;ݧ8 7%Ysm3- uG6"D)-S?9|r߹2_.O 0Q(ȩ%7M믘I@ 2d˫ܕ!<-/l`=\r۫:_R*+2cK_6^%-IU=O@@"Td›jER#hF{Җc%ԧE9k$7 #GRpG!tJhMdV nIE(Dq8Jʁ|/ I_~aé8ﶧf) RǶS9\|(%M2]4Ie!J@qC27M%Ģ>׷WˬuU g_q|Z+[!&|r"M9,sGl=.Fi/c4R&(H Ԥ|;yk UfI-jw< 6h"*>؛ :X86R31@egmOkf!/`k+ûa#ϹdEnD9Գ7Q]#N=q6^_z"?Zjb? Բ%HZAƀh$#.LnYC6,{MI8!$8޾ER/RM-ZAYQ$[ ϛ |3cX9ˏ$3/75V )m1 &l xA1L{xWƝr}o;# W0;g OFB\gPv)5{ 4^ȇå cx#1ͥ!Kk2jwE锩umffJk:Eć"Es%d #j+fDEW3ƚ-Y_ ] 4Jt;_C \s9 w`%m몴 /qX҈7LJG>蝛=]ـIh] @>'ki6,)K$=f͌J<,2͙!Y9q!^|KT]6f`X ts?HaIaAwn5Hv3+d=Y0VʁMplb?8}UrFxS߃ eW, X?߷`{k/5\ɌVi-arnmXR|0ۖ+.q:E]$6ju[1\ `^Ͻ:&j,B ,=d8Yv^OسsGgc9(T#I57'v#g~0Hh6a:G-$NZf*yHQɁ@Z^VF'i K8ZK2ɣ+\goo!Bw\8Y U/cZ8 F8DPőHe],kW ͙׋vR[RjCī'CinHnSY:*NNg_&kiV-My%yeEi=y5Skv}_DIo$ -Ŷ,˜"DND&ekCA#.FP{NOqZz  j؁O͊ˑ笪 <]_qgp*I3=.'/˅:.9}3*]e]"o|B;WJo&Eb׆t{{鄌>ԈVF DudFV!?bx8f|< ?U;k^ ^{Xo_f hLNio;̐LG v5ʫaM[ e>ЊY1:gcOxzW^Y=пK_XU&Tu6Ȼ}nvR) 59vcˉM/h6oaR>078&EMSE<D_DFxgu{IQ6Om>)Re;fޜTSƉzZxWe9L  =kHQ`Gz)("n:)Vlgv_P>w:;mfi-*MY$9_seIb6eEQ "w29A|9h.:$V|;ر/yӻB/%h7ȱq8g3+%{|%:Ǥ *"5M6"Xˆ ȁz:Nƙrf iMb!sNGCIt}٠*ߋ…$"/+OAsMeD|ˣ :@x2{mlp樿ll״2=>{dZ OS1G7,+%%؛Yҵy ւM[sx& 7t1{\TԹ_S*'aG܊i]?I-k* Tq ֫29 _i"aD\r _J,mNEoM2v+X$&М)\~qZS1Q=iwN$R=~Iչ}AU( Kat \͍hTbK t|<$T( l{u:R1:)(FH9']`L' '{Iwa=vLU gɂҝ]U\S—*W :^cFR&sMㆯwmr8c~}[yS2kҼ-~fOhl0shpHP(eHɐ#qai֩ykT5HsnegBT1&[Xz4ꅜۂh{+l<~ti6$4oN9sqDPr0[POXlNsCm&%b?Q}z`!UOykCt-Fj*b~%QGZ<_괌D[ T,1 ߚ.C&إs^7yE9~+Lu:pg#ŪގWG\ WVJHҊCR~& T:%4^*lҔ䱃b)OMDCB.㉆W:I4!@ DZ93dq}}ϗzb$2.Wh\p?oX&+"ĹQwL\F'w{8W & ٦E9c00UНaѡ\yt]07 L:֖\:=EIgo!1*cxRή߶x y~U{ƹá.ꖱT!('IWͥt`&. ҞԼ 8A )D]#h`q:=NJ. ^Οm TGStaHfќX˸p#C\NdI{pc EDֹN; $޾ G&eJUlaKyJЋ%lru:iM5΂a?SH9JGio[(gok$E43nE*_ɭB٣QO-Ɵ'h Wr<(UJLH0h(AgnMCڼ֭秄H"pڎSŤCk4EiLΓj A&!\' V'ye4jcʓV]>)jWIX7EϜ VZZ6fqЫ3rHqDԥrdUDŠl{;N,*k8(i`P!ZfV"S4&ΠSm;zr>cЌ0a}ʀBjYbsuq;:`S װ.`y7 ы }M:BZJnB8 ΛtW4n0tyf&j( )ӠC Y7wŢ&8@w@J b6*?L #JLj#(t}$(#Z!sƪyPX8Q>FVl'"Q|km ݏah&lա$MKGA|_bIoĜߤkF@ tZ6US}s'O,o#@(^ĺ>:a o%C۟GD8k!ys, MY/x.<:~+; i_T_ǃg"^!ITvnX;Ri}$'ΉÔ_u6;@85*e ԓcp.l|^ul֣"Oǩs^1:S3%W&m@u`USg.5dGug30ǠM P&J9b!&SnFX}~ܮWMT*Oc "R:G9Q27=A:w;q#ě uF—zitoYMe72*g:y,yO]NT]|DUM߯=GB*ۆqK{yas d5(\S])8D9^V.*I Laa> ZHSإ9=y37A P;^k4Hqu˱hF VU3b ê.Q9hraoG#/',V?K[q/Ki&.> =UnYLJ룗-+(8@BBUm%هǪv9{ȡ_n N?8@čr)h|̛ _2X%oWh(UF[[г=֓,Š2TUsGes_^"\U-vje".ySwGˋkҺ.QK`ŞMڜH !f#d%W]:Jd})'Y ԂΉYP0y+yk7 Z_@^&J s b݂b w'i+=;`Yc1{x%Ԕ~ek@GO/,x٣u%8vv>J0~EW9CM*qTMw0Ixu=[%&STe=*M\'3nP( /e7W5m WW^M+pd#1ZMVPi8ŔￃR> K(/M/M`5|NIRx,il&6w!ДTP,ڒxg0jwdIN}T" {jE56`>̚2Q{ҵXW}#C i@^=H3l}ꛭTǼO+x" ,TWxvÂ0'(6g{QII}&[G4^ҒMw7p-$_s@g!IW\Xs X:re&\v|׿B[ק;&M,# k:}StqڀHim9EHp|@kq~0p]2hy bV۝%} |sG%1[^.-*[oiEFxщQlfƉTi~[ŷGk,y/ShC>{taMկV=U:rjo=lc %-xbXkY:_'T_u)߸l'T-PdHJɾt&ƖdS:+AZ7B\8h'"N=J Q"pCl/ ͢P5w;dN1a`֕B: n~<tDq[B6vc'%u4ncw twԈ %vzuH?vX6emdҡ.?05Ut6|iCZOx`-u^/.ٔ9&%1^ȣZ1`4цL;0lg-~B9z)AQ_!"a}iZ eStH/btF0+ g88mώD`3%jR3fZ&\.@mWUdT&6A5ѥ/t'{7m;ox`>mg+x8Ocf޶)KXAVbNokIȾ!۷f_-Hvzݻ()7VMg%6\V_}_ZZjcSgndЮw1[-g6ԙ""j+kkS.tlC/pǘOM)k>#Y "hWkҺc"W, :-yYɕ4(xj_Z_lBQ8jC8=ǙjVpImI1Dɾǭ59kΉh5$eR0%F/^` ݮ{vO:Bb.0$ J՝29^H.-H.i#Xr"^]F? ,n`+Jp{2 CrÅQ"pWOD8;=Q MJ;|X'h 6eVu03pJj0T҂6{c≦g{IGܔA ^w>l#SdBMʂ ~ d\p!eBƸR@\֌R@ޒeЗ8Gˉν̱. 2d_LJ{k*;S&^^cScHmUP'R-aOCDg}wo@MF` ON!'{7}(g@`D*~Z]^z¸K`#Ȁ{{"c6 KSH糪@=r |` Jj9;P_u{?c#&)UvM*T** ~h$;^u`C ZPsu2,v4G^LB{Xpu-ٍŽt BHz^}*!̉$l:& U:ՉP#u!&4_r`|¾b`FTŋ"qpQHk> F`(27&'3r{ƘZ18푑jf[^]zjK\,˧1fnBn/x䔂SLIPJ260AgnDU\EO}]] SU_G"u޴Q"Da'Dߜg8ENG\,# %1} wy9Uժ_a@0r U.RMЅ>OV=k45 ȫM9 R0®Deji5:AȵQa զŶs)3E;Kr`MX7ԙ]lJAdBlDV,A;hჂ6zLZN<0*$`D^_/w 450׍ WrP{u.Z tMMzjZۙlfԺmjSHޒW!r3w{7YdV}D$vQ߻By6]se:RXw\KA_s=/UPs${!Pcg"|npz$;KcYYVK0{aaʳ5s  \g &W5=_އ/d񅦩 {qz8Od6|sn"4P \JreH͉.Pc5t+#l}Z$H@QiKf{J'XFYX̻Wֵ"59룂_X)KlXfj1iڳɑmǗZ pNĖzc[K-<$ല|NP9KWQ.g .=\F#*2X_P&|%E`k5B"rđL |! ^sy*:ce]nEc0ݥ8=YPfu}?|0d2\-jXʹ/BͿ<$P[aartJpQ 5cz Q 8aVfBcj#aB-6g,^È+/HRм"dhaˋV]DuVQf%P#8\9w/lJ#swQtKo|j_ԂU^2Mṙ [86J0-GSUGT MQ N`=k,8mCs /++ aԪ̹C{tmVs`?Lr} ܭa +WXK`(Z~8ʈr5(,Аmn~KFr?ˉ?Q&>Dʖn@]R -{o9@XPaԳfH\|!V'ާRkyJ_IF( CViSF.͵{#hi[ණ5FD ݙ(04aa֙mw$p؀h0ײj?ezoҞrHlnm@Sɺ^;5#k) +YN ^{N髌c @\3K#1sc"f5:_ovF-Q>Q :8\R#)? U9fj;I ۥ"wV BOhl1CV\#˧<uRtt|p [vzRҡϮ0-CFPjd)n"ued*齙S*DSs>$_E` I|9{!z{28G6IH2P̖y$M;?EUnDZ(blTn+I`X+nڌ 28y烺[ل"V{)d$WäaZiE| 5AaU>H@nd33Y&z+mF60FH. '. 5.H I@w)(8{H8y@&ڲR,)=<^p$(ۆB`3H曨{sYn2LAe`l[?y@_`n6+2J^1и#PBǢ&6W0q S8B#h&(^qu貮=h0R.8tXv׸?M];WGǃUltD&vN@c1`c%rl-ݡ9v$G\n%7wgYǀ)v"gG|{Qcq?: [ݒbPíJqAWfaeDGJ3ڐ0/$F!1AXt%qB *fmeнW?xDP5siР+_o5%F0dUƅ}w:_s7):4JY.C4?w>%`N3j!-? `Uw l 2%Ԯt`6SPC2=ݜVZ'!]RkF\| C(PVHv/@Uبk|)hR2^.xU 챲ٴ`?X]}dji# ME\iV AW$ĸdEhCD1!wu`O SR8 űd36W'}JE*[p+O6(~8Ghw.18nm=pm9dy݈VHŦd2SEwXYX5tl@h\CY\ܝU6o4}{0S6,@ϸs`dK02>4Egs> IKUa8 ߆Gj\W Oqa|KiswQ7M0ڛ֎!lT`)DEVq Rb2C,Le36 q5 ܤ]q S,r8 :!.-k{%&vY̯}k)\Ϭifs-ɚ(AM-u Ԓ6yIg(W=z}K9 oyj҅W /K4vWr"R1@D-.p{fDX (!";ծ){eAΌqW&Sh)*Ԯ A:|'[c;.9+V$I`Vph@]O_f}ŋEp3Yʩ_s ]Byh>Ć 4MJvF;:XRuvZ}Z 8Oyit?m;pc^** }}f\b#tH΋Lcm"yĒϻQ-D% ^\Dj)Ԅ$[lj̷tQAhf|zY̠G`t`Il4Y7q~{c`T c.c:pF Ӕ:ПuwH3 >gཤg{)$`bLatx!FakDS xYj!@ fx[Ay"o>&G/1otiD:ٲG8|PߜU˳$Gn5d+//ଳ\U+V9F[6C&*]~ y :T%{(=|;됇 h ~,U*Ob@]]n->G,fB7Ъ8&4KMzfV ,7wr6Iad4˼O7$b(ar!՟h|{ i! <.ऎ8H{XGKY\Hzq{珜\ ja -J\lM6;'kа\) NRv6JR{aE*%a+0.:5a9[S:v8~"ySڨ nev"ݽ*RAu"lfU#y2_}621-RAeʵtק l~:&ua7bO_ZgLZ볨@wfՓ68ȚOjx%]ֵIpHB|u. g-[*'HԻpt2ש%Av8 ?dN v~S>0]e\.Ù !+6H~<ځ6xɹ!Q C0KUڰOև;m^Ȑڕ XT>~~lG #qiw[v5>:4a[j6K1'{D(Pħ 1\x_6p̡LX˛pr{24<3D+H`Ğ&F?Ԣ%ݮ hofon$ΖU5ovqHI P;H򮀘S  $Lh0|IL!̐" -< =OLHJ+`*^0 ľ%(⛟C0Jgax^(uw%)up$%6#L#^ Zwy? 2k$*pMD2'*/_0;|ky08(G4PGY9Sc-h˫`K& R"ƂȍX?\R]Y3c ## lBeP,,=/Phtltr_x#76_8q }YBGO^{ڕ)YI[+lv^2R" -p0\M";)'A#tM"2@VAg'~{Uql;|xU10}U!NwN} ~|H/G4\cdhʦZK$R#q.9N:V"OWvjx D76LnQpQC0m0(m#&.H6ځș&oI !>̣k5*B2t m_eJ&6&J)*ntrhs;Jێw8`G1 $ZbX6Xd57?>S`8ܕ/-8 lilyWjw|8,'?2׻L:Jt ӓB_6'?´wzE7¥ݯ9t.\t'$DDXe'_1-b!EOΰcԛe{lb] 8 :!^wt㶷T~9|ҸB@g%>(on'jpu)qI2xޙ6B޾X@K[QV<1=3@~8PcI.ZNJ?4xktRGٶ/1x^yj<[tզBZL ]t 83l:^x(cdaml朦]#31#߱{C#6pvEM`<(hS0/k j~LZ{0’v#̳BWWCqԴNcƎ66 =üDXl(PK!$h&-~,`Gugla\<^#烖D̀з::7y> ڹ^8~;A)MDp!C1 5x!~@QQI|7z:%'m4?'ل C[Od)qeQ{3 l,ck?P;zz R΅x 6`K@oњu|َ?i9-\oY'>!!R&E4pqrG)ipuCTOy'HMMD=SFH"ĩ0Efc~n8F ?ҋfvw׆;7U =̰9TC 3fϛCz|z1V'o`$,򖳁x(ۭXE2']SU%qWϡ]0szfU!gb,|~4aj>t]_i#kX e]M:طTxcp nU]ԇcT( DzEH_2WZ 8Sc*l{<^+JTXoT|ΐSu&0Qw'w%lVOC1H*N7YʃE?/*zH,QGo |y=f4wfw3*1P05W0 ۃm|7{&8'RNDm* * M § 0 2Ӻ~{˔h]&eAVp[7 Z%G 8VIdt?}fv0JibAS66a L m O \e1ޭH 9cZyM[9 a`''i7:AY%{Y *-*{$ +ͭŬi;ةfG/gA_Ku0nK: $VW2*S̙E3段 L7< io Ue#j 4oN(}T\3Jk\b?ɚoȈi[A EK4Fz@މX5&; 0ϙ)x>c I!z(R\JTJ.٫|rҪђ(ΐ.2FuBG4P7 YRJ*'^<&Gy[ e-Ag4j,h>+hahA%d38"k Ɨ_[#maV@^9tmmK(z6~_Ryc mQ|d@Nu}JΡMҊ6SlTw[q_47*wqG>zBߍ$Mi*4JGC`3Zإ jo+Rₜ^gjSW6ݜQ{)Q} `cZQEO9L k(Ȩy:W;уG  ʣU1U~>S U(ênW]I oznpYk/ ; fsd訢ZhaqTav޹^/.oIal8!"#%#t(̫R g\L1ĄM)2Z̝\3+w%+~G6qͶ+UAb6ZKX[4mfoNldg_iu›3D$.d)': ܛ&ec<]^d3˟t-t$.Jxՙv8y-)t}T7eߤtx-IwZ燾t<'8;T~.{N ΫP[㵞")Ĥ~6#wK╢DZS+_;. Tv7b0{皶Cj…J!06e` 5)D^þ͇(@7<Ǐ\>iljgZp&m!d $Q-B:GyD&77J1@/}VirD`^uoFuȴ ;>q9g8m:K}sdwY%ёFW:mdr@e.}9jCSPf}2HォQ)ȴdWݔ1Z@2" 5Im1-oYe8>z(p?:lc|x [M-Yb8H|'5 /0(wD>'}k?ǐc!20󊇬hܴ)k ໢kdtO*$ I;)]嗯eM:- J~+m[ؾƚ6$]*KMit2-mNo]_^i.nanqq&_F\tUٺz#%xLJ5-lBϡgcØr)g$2gN];U3-6| WVGȮp{hhtB{ .y,{n0N/VܬDDҒGb.%IhgYCMYOB j] VEI/FW3=[RMſk ?| RZ[^gGґΌG$5pEOZƛVEF甥/f!,qi~樻)Mbn/Fy3+͗.%x6}M4'sl؜ighކ7[lt-ðW%#A2@#&wU#VD4>wS"S &蛀CQiG$.S+` X="v\H;8\I'"4%2.2M^36 s(G; @{w<#8S|UxGs&LRGS]k ZB<wxO  O8fm?q{.Y(]T^%>JO]ڮ¦]vl |Q 3J9%:i6>.5|\>V[5uZ@úT C|r#[C?2mm߲?u#i$& m:,17W3R' ocHhGjjW ۂ-7ه(?KӴRsRCVTN D(J@kF,-s ?m5-.O`f#QĝG*OF>8y Uhm"KzF{r%r׿[!bV4 '%w3^~Rna|6o!;w #2Nִ!Z!6ts:ZGsC@ϟN<&OHnynwRxs<x-Iۡ4c^Nv{sٚya>Ǹ&!DGF=2`$ p| FSwJ1&)otmҞrL<@BtTM O`6 t#؃aT/ ިIԚ&d2k`Kv9=1xڥE'ԅAP,R;Mv$EsnZ-9+T[  Y*ߨZ}J0i &C C1E`0FF6NĒo찌.PX=T WN (Jd J?wX0^́^bĆMJ(( /YLSE4.ݥ-NFK泝mGap_| XlɃq/ڽ$ElWը?1M2_Fvs^/7R]PBJ 5T8@Z""vBkG;S)@cKAYcN49st l58.}4zi.ɼ6P.zW 2|[YJ!ћLw_5^M;B>SB[FL&'wT~Y'_Cqf'pCDAMS Z^7r;gnFNKr1QU}2,b5?MϘV#+do8*eOǡ΄،viKl8嶱۞A%`qE3Y_M|TIJY@OVœ<j^%9.Q鯝WourQ`gzv [r/-{k ?}T.(֯TK)1ڠ&O@$[ݐ7[T+$ y%06뷔CXbe\-zpڼ4JgT[ C" m}]{Bdk&ZU?TT5^ď:,6J<طlꁣ9"yJ@5r̃ל N_]$5=G i76osn.6V{O=A6!3g65X䮥yh swW^(A gBn^bnViZ.iزi? _'"}?KM'A&%@48Ș|_ᵄIľS*crA1{7u U&}o9-qՙ&m.&CRpuW¸rW-)ʱk&Y-ʦ%E|j.AgMQzk;R)ɭL@CrCiq p tNOp%$4x&w\m&=f[XQS]S4*[+Ih*{HL.!4UcEoβ/T=K5h8z\8;X-v? vvTw ),늓Ȯ(N'"=%a$QŋgBjܵ3ы6bfz$2#Lb+5K|0]7L[Z1xFjry;qHB K4u0(]IR(aupjYwa2?nU: CD'aF!oaP&Ӗ/qpDGD|@KTK]mH *ʠ՝Xĩg+d8וXnrxe~fukYXqagznJ*!ϳYUzɩ-xH-DarJR(`…Eor#ڏ/SEQxы)IǮ` IW?(n*&-B@"ewͷ7c,geg=AABVvp#_#3տX&8&_=U Ԕ^b;@Zc}!\3^=~?}#:a>5鉪N? o j)d!CFW?k̆G9}~PC=/3 O_EaCBR KNj&4Wڣ)Ujk*I{~&)in ӫ `LqO>h QOXĉ㾜?X}5xぶX:h`&||^Ԫ}$2yr##VbFY zfCg3hE y|!?Ab9Sw\}ؓX9)et=v?;ɤLc NlW2&ǿAUZLGONAS@2d% VJ3K%f['[+^%j[L^FBHEu@3T$.~3\g?M3ڏ.+J(7֮tiL 3pT$`MX5Gуܱ.HZ]s ] 779p4$;t%U:Jpuvh]偂 ];"b ncM.MpBuLԂత$wN4٥v)sBJɞ[ns4~JAQQ .& nz&T-&*U{_Wwr8x d 7a5A qoerNB.;^BU؃Gn) VfX#\Xu"س8LTQ8)A^'n</==mڴ%-%F.ei,< meun\15ϯ:[7}?A^߄K| A 5 $;; ՛oh Pp?S7kx,"-5c0" Μ/[w[48$=7ۉ ب r>+iQ:p{8-Фvzd}]z!_K,G$?WM 9AZ4Kc]0W,y)C>Z%]$]O)0b+Zhnٲd5<1O=h%Α*]f.Dklê7e _1p->~c`K y/cSR :͚A9m j,_UQHGq5\ i'Iԃ v# <3EunJ${œά3Kk '˞/E @'qI:j|ng%>B~m)C"VR8aTQ" bq]EG´xPFe5e %I3*ӊVg=zXrt S":ՓzrH0yuѳaih?jrNj^J CԬK=P3t"4v`Œp5+z:ߍ?OQNUkY/0A 6UK;WcS+5E]Y{?*]s˞NeY[ Fn9QjFRk9q8b >nHR'՜v[Cp/.jsI$Z]nl>ӏ_uW5D..;zA+b+AVM9-|MhRwkh @ϲeq5*,/gQƍڴ~%zD駠H5|]EΔ"v? -(v.%vj$3yn܇qZAfVSNqT)^>}mkh'ĀZA2F>;N@dH"$ Lzx#`ӻ>o$@+wx[%vSb]aEU[P8sL\whoE@NV\Ļǹo`jj,;{x;Γf-wߥFTޗa'$P.#Y,CebNF"An8dw`dxk@,Qʹ$zR F* 1/ kSkҁ6_)S/@I=Tu] "n*ȿJ$."\te}ر?㪽"4d bQ&872)>+~+&T ь}6H8fݩ_KhÞl1K1۲<!~Iı}J|V⾊S(-J;7+"i&7O14sӧ$tBD@>}vRr>4LkFzJp@J@,?RK+`1^5|S9wӕ>/Ό -- X1@5ڠT!94"䅖 I3|IϤI"x"梪sꪐpJn뗓(ƥ2GjޛDsݏ/RMb48:GQGl203{lG/X}0oB-;Ar$|m%Y@ 1`"om?xKYDܚtA9^RTj#Jr8svՎҊ`dJr4y܃MӐN|5F21zO>xPz_hWP3ተ?MhwNd%טXFmȩ pMkԵ5Bhq[MF)W{6ͮ։ y.Ui+C \ҮDa{tׅƯNbԹՌ9؍Kς3QB̝lj;KzZxoNHK_oyQ딛|>|ȳV+CSouN%|ﰁfg57xJA1'>X>6_Y~ IM"4EU|7:UgXH#-+WC",jB?ms6nC.+bR/ɇM59H!@֯ZXl`JF a}ه[tjUND0d+?{q 2ZF,b65)"{ӛcբ%Yi` UaGk A6s"~J=G/%vl1ѝ*Ϙ n9G&P;\Q>xua5T0ז)kIF})\vLOF#WZ>Qڅf K؀'$@De؍_qcCwcNݵÁXv#eaxϠ͊zrXʜ|*I[A\D еipu~I),._x$mA65=b-mѺs9S0tfL,ֽpJ3}8Iʺ˭6ưIEL爛8=W# L>Dƿ_{!j}݊h "0ghdꍯ6:O#V3:>jI{W|Ka5Bn2A RRY)x Mև6Ya+1Tf .#'j`W]/Ir8ʈ_K 1?,b-}OP{bKWU1|YyxoǼh`dX{9~O[wKVګ/V5R5,I4*|K;d#1!Ƣ( fyiKYvM~D[o“LIq^1w(6/b;:Zi1վ-\a~N,:=dh…%9 ir0֩boہ?}nVqr슊8C?oq[v b<WAMdrˎ.>-}8T{{y j\GCx;W|H{cEvG)bYYAo j[YIFv"l?>\"vvGZ/bFcZS^ hDh\ zGd1,uO.cǑ9UbsB P(^m VAh&U0SFGUuqAKz+ e^/+k <!@Z]Ď=xr9ǻZ[db|AZ|شTVB18!zҺi&VRu.J_ oz_eSGO:iY\eڬ$nʢ76;PHO9 Iϡ8kV\V% ] .Zu jk&SjQSy:0 ^Ž''GLo_B=DB㇡`@_נt$`+d|L"jp[ 7^MFU@gئ>*evt]@ku&rY}Ju}` A%;ZO *@R-38:GD4Dnhn1gı ogU%:oIJDRL &cK;~)P=XP)q^qb:]VL]GL1.WSשQ@zRsMhEfS4NvS);]-b7]Xbpqyj&uy =aO'b-$5[(xNOﲘ(cxث)G{d8s]Z#Cf|#hQ2nb󽳺&;$^}Ke[/ kxTLs% PQ?v R\!rN[' sTF<.:j&AӒPj{o1ea\5pIH >}Q2"Up$_vZ!2)BLCz9VUbl'K6:+h<)0 ݠvdɫ+uL^ULlwH2=~rk4Aj9/Ԯ*~@kd#'+麯4=oay}f˩ɁBv45*ZBR3dҐR1pX'Sdzgw9-$,c8h,_m6djM`%k񆒣qTu!-&-vlmOڹ 7T}bBwq8w^+nba2xEtMB|.Vo)O_})Q/ +t(m7%wC37K 8bGsأGMlKr*Ef2TdIk lY}S_m'"jSPFL_B׶ujd6dN cfޮI:fYNszےmLolN Fh Zv00$xe&}P+4b^gs)AkSq\)]T)۝K{"o^`+YS~{oH-Uvu`y/t@OA-ݣƤ/*z7FX(K(iы5Y,:M8 !A܌QчhVP?UΙnSSO`g>3k- R锠ƉN6 j$v5C >}%iNwGs'#$.t$"o VZ57ٹFFdjݍ?Q_5Yh󯖓Hma*~]a>&  >DHCtW͡׊`92/{bG:,ZyEE]C8h*\\ OϠFScAuh\3_aPju,ӘԐJ--^6WlnAIkeYhꟂ DučYI!^K ڟ 3 ">įGrX `rġ4 p 68Hk n35+Qs,ڻtH 'M~#g'f|L^ܯҍu_D[`11(~BR3ޤ@w ill|z)F*ߖڙ}VLu^"phCߢX :N݄"EIK!%yULsWuxlq]BI\EX\.ib ?c!m83Yg?N֟ WS3}:KF?0KS# j%C4vxݽ7ʑAJX?sڄY ]p01nTDNFnv Yfq,awvё)1"Wpy9:_=)q3xZ#j9ɖ=F'3cKq$b.I0<ơ":b'؞cҡYxV&1p3(EWX~DxV:iJPGy#B ;RpgqȎ,D&ʖa˖չ>:~"ii5,vG30~%`g#r:`Pn ^2-B2—ğda*.7ݙ5wn`1t!| {B0[vn"+ta$9{+Cu)D nҦ^K~Dc 8^"m„ʽ}OS@#u@P]RcSc.#i~.ll񼲗^| KOݻJWG7i, 62*ޕH$5XX0Z7O)T]q] 03o:4 (E%QyyI?E߯ X*= ],Tc<<5X}2 C!oZcRNɖ>W}-A9:$E˪}+@!g, $kEH.bˀOͼKfs~\nCEZ=k:#b7dF͸XDt.*<"+GOd7$}Bلɑh2*iԞ_D$"DձRTC3,dzmNd<`3o\qp(eUoneX\K} Xo*Q@y~^Hi(}^i?^|$%jb GŇ!}fX(aƒGV"08*D> ʜTVvV:ߨ=* f3J.YJK˜c0 MVDYaZRjV:FR+& iOA,WtPȻj>|EsU`COwZ݅u kx-cēL8`,3M䋚8ktP"χTN ƽ-Y f==q!؛'8[4`zW>HK ΜN079բ?Yjqfj($186 }ߏ=ħiJ8BT`H̻J )DHIA+c`zs;t#ȆqG>jectp>xh`]6b'wO LmdqW") P0';Y:%x*_8XӕDRۂO1B@vS5li""^'tۛWK30άI'%lIK|1"ƚqǯ5z.ph0G><1Hx+ĥiw5dіg}lͱdpKV'B*%{((4BQ%Ƚݠ=]?d\w<$:o7HvϪaY_(Dw P.!T;̨#[~hbBBFOd zf.dv {!}F 0;T/pۙ)Qe|.QM cCd3S"$kJ8\$!bFDS\ 9r/ q~ݢ-7cEovp̙P1<JôX%eչ 2*.or\iv"^Ҡa %!ԽA!m _#V@+F$`uIsbm'R$4YԐ8OEnm}|n+ze_Bȱctc=ܧb`܍|f y a |TRiZ{nJyגYD<ӤP+Sh>CmCyqDArzlHn&{Z""&0&vJw%?(JYʑ褥@gr-"^ýCV\>;@kX y4mRU.$Wӎ!c{13^ڝUr7>uُ|:I -1^5ƌoK~^hS+Xfpx9bQFDABΞmM4HqQY2xe x:@.T_`DNA4|)H e18l?D5 gଢ଼]7-L+a½4}F uUj>}=<:NO~~:.Giy?<^ ..8:zxN.e (U%"i7_ 琚>>,[OF#)T q#@a/Ǝ VW(#xQ7ܕSPv`icggLOmr+]c*&efХc0 Vs6(/9֢$BOu1{R_Pfrx=YG J&Q"Nbr=~e.}#ʙv9Je\nSyq$ [j#y$7e>Kk?{gp:8g$+5y$+,mDf{O5]U%  TGmV@_9YُBŠ\ b8B Af}1~=/QΨج;'"fI2Lo҆>ցJ0 A5G,#{x4c-LQn T)X0H;^`T)8bgz3X =3EgQhP9EJN7@@+,A01[ǧmmuۭ{H6xd֌Bӛ]cxa3%G-簛֒]bGsڗb}5%^t%g9E2wߌUnͯ} 3 I_B FJ0>} ;i4ɰ- :ȷXת4. YRUG vdogjՐ"^R{aPׄ$Dn5bSª*Bޢluq.wK/&xrʿ':?}IÙ]tPAD<WÓ*خSXu?rR=U>yoHY8:M=}=уzܤhd)n*0xoUFk"0Bl:ҩ{¹܊gڜõ֌HdžPCFIai\Fqg'^FS+CM ϰEM/3fP-}j'k+ZR)^T ug\Y3)smlB˸J8RBfNc51:^0y4k.z5qbHS^`ӐP064D4hWo,0UBh7]TlUDdñ#7b .-ib?l("kVZ%zúbKrZTbv: ^6=`0lmF J闇[mBN.30R { p _Jjn0Fѫ113c'yBܾOFy^P1ї|v|^Noe_{ 5^ "蘬/g *Px`B_PoXۧ*lh³#!81<" gԿa@NgP}p<鞨(+_@P1Q CV)eUZ#(D>+amѦ7@) ̜NClD|x 5!pdqt[SP9Vk^#[u\F-eUH @dNTJmJk޵=GnF y&: ɰ)J :J-^=+Yv[:]70ƍ'Ѿ+[JVirNU`27= ؠ.OZoYFh+uMu zS; E7%hrgW Nj Awm/Yfu@2Bf&71E+r1H4Yv_& 0>];C% =ҵLr_σχ$^ #NX}TKvl3;`n-]OZDş<1kɫݑp#&Ȑ?]T B-h(ub[M>q Ã,̋Y|}OVALX !4,}Ցe\A@&ؓzYyb%E˄)4ꘊS±CVhJT$DZ03-UQͷPFBnn{Z)?9#DajS'Ԥ4ˣK+HJ+i 'Mfڼ‚=NTZ.;nR~CD'iyէ9?X&ZrxSɁlךRMJFԈ%ľ sqZ?mPjs(y~rC i Oթ|} Z&LaPsYT!vQFpSiOKŧ\W]sޘ$3^jO<:+ s-~lbƆDQjAHKEW-8rjW}2ĠyKqs,Yn$orpxQRm[uBA< x;5T}06p?R/HyJ(ķ `TZ5 J0X `uѨdO' sʩc[n׹c j ċLBH΅&EϦ:&E4;AtEu˓G#ze{_8O N@Etz_~9ߍTJ[lEIV]bXJD8[Me7ɝ@dR1cCi5)iJ004p @ԛ5(SRF,0^ґTطsS>neR0dejO?/6"uxغݶvr L[S@.y.ht3l4D~!QAsݓ g^ Nd0IlئU*’JC@ZIx Ɇ}e̚{8kGL ܞׂ@R?9\VY4! N84 Q;r(T]źA7MoÛ٤F>(xVN?\-%7c^2L 2~zT4(tO(+oHp2ex*0i$08D(&0%H0 Y' DD S7:QDG^)yˑjfwOٞ_;JTlxsxpOhʄ#d!;-s?Z j*,,S7¤ob_Yn5㨃7PBT I{N`(jfs5A1H"K{ZD JѰ{H $ӡ,Q+0vE+2@.y|4ex@ xňs}ǂOZYDW|}3u&H!VW=bWDc a}٢IË'dWo&3/]j،܁vZgy@<=89VM?*ld;݁cG`~.ᖐ7 &d_#]rjNْ n݇@(qf72cô.L37|J^v4S10ҌZ_7K'GqFeNٱϴ"a˄;4 "$E9alTR125k+nuG?_}OeH5%U#wO/(_CD4p \2lYM$=a G,ӌ Ajɑ j ݭT8Qw*G(=#6eG"GeE)e,g)uI_ ʭ透K#MvnƇ$|r c*V٧U ~vwۭ[owߺ3>ΟP< G;5(ߙ>Ydj=V[_X:]!AN >ќ[h0?#cH(X+`gBrE"{@NQ5$trXZ10%eF+Y3iĖzEZ!)(b cxjAk(.1xm([uJgzz%[Bڅj V%",ףӋRKGg Bq:$fd8k $Fx$g15=S:Vg^_qgq//#Cū6\txR RdlÂ`B$ )z< $\NE@QD:6 cVܧ̀(r]\d?NW꧙?*[Rn7 =K;R,AgXy%0$8LXxٺk t>wPآBÛ󣃮A'燃Pڧl~rxt1;:4i"VD2cq ŕRH60 Y̯ljHX/ 6;?mu^5Ni'۟Hh&Հ No@i<8p ͦjsɣ^.#h1 oFjV-(%N q![,nVB>ud'd0M.Hģ{:A{u Q{ha$jUVW6V,Yw(ksJx)łS)$X ,:ޣ Je}΂9he\ݭ|ԅZŻ^6Cg!yF>؉ma(y(hp4: -Mg}8~gxF6ͧ*n>g'SRڃ:sg S?_l>'܉ͅ#2 y1^-4k~UތYvm.ȼ @Kw׍^ܮ44+F )jl~qFWnѶ/kn*'b.xSUi QMxkDgN{mʑ_GHa'J(L^K'rLE^ J~]n.IttggwwqGz%˶o0707010000000a000081a400000000000000000000000160d9e61a00003db8000000000000000000000000000000000000002500000000./usr/share/man/sv/man5/sssd-ad.5.gz[rFϧV%DԗL-ڤeIEr\ S&!n0VM3دAPhjw=so7?uoXu:h_ff1{"_6ZT"Ƭt(<NwDcoT2ih^:} \ m\)Z'rFa Np硞&{!I=:N&;ul)HsHJLB0ͳe2ĵ~Ƒ{n'sW~_wo<ʟDO͢D .X(̭&qxgI@M"Yxi0{MZ2> t6>>=Z!}XFJPZtS˟[*~ʈ@da=DISXjI:LnrmY4oŞ 0~"V3#2 DI|:U gŨ1Qw0cM3D_tqXwjeej hcL%f9_]A_]z*I$B8@ҋ d(3V&PQEe<\5$QƳwk|/pCoD 25SxFt)mbi0N"ci_{ϭ"X'39ŋ8kc0-f$Wtɋۛ*ȴlTD,^Dx1 sEa%&t'=nq,`sH3t.2OW^`gWg"]B&2>·㶌qcG%V%FKjfXE"rI3fz<UDevmFwpCZb=VzT8ѝ)R( ՜|hb'!9~ͫ[zTAͧr%:dMJ̲'2Y ^w-15, 5+4%`4Q y,l>NA(䕙-~ U(" ut8+tn`;Ydte%O$x[FUfS|>^ --,>I'O!̛C$C(K ̜x(4KULBm*RdHuh+Kr|7J1$ılX}+.} `(h 7^^rE;] G_)etGc5>d)ڌb:_I΃yT:ӵI3zROEde?\}(X!q\1zk|BjبVlEt58FAHxɒzRJt-gfݳUg سTA" g=H'iY&`u4"O`$*W\\ Z.h"?UHO"6mdd*d$g%.aF֡^D"C d`u\/jE'TKTgQm}úm h%(< g 2eͪb8I! ~S#1ӉD8uIag0`㒧"M(TB)@ : Ch ;a+f'F?O-Q3y}dT纄P$&\" 0*֩r:W׳((7`% mr(jDRo>I3[sb?V3☞ <хm hKeBtO̹e ոM*`[pfXa!r` *,K"[˒=hf +ȑ1::+~ ҭxNV! gJu]^ fؽwl[?xPuњm㎊?m7źש qAأ,KU$r`~MT #2ё2$\ew&) /YpWEeE U"J7&a PT>]&.\vy\pV,^HЀz1up2&#.?Jŝ{ CIN}3Ll_qpGng89f:ٱCPu~>NtܕFv(LEI>Wl Cq(ۃ@4 >: "k͉Ǟ3puebV, 'tgThCRzuQU6tvt D[N}PV I$)*% FD[(9OU1$]!\]W,c'CȪ.eJ n+ W}XI&< .v$)7qYo?Bb5ˁ9*NH|EUffxj@##mԌ'_aǑ3w]/ 4ȃд*TY)a̎A5qIAl\dV-oH)F':i&< i/5EuWףY'e˥{z.*P: wɩȅ~1gCuqPPu6(4O#EkK|yP:yr!Aw.\&S27v$L c.EPnˬ,uӹ,d9 n|&<54~JæU`90 "ݐlJVh;[ HQaVTY8YY*ڼ14b_׹辻>ȥqA3eыcE|`wf.EGe "(-+T%!Bd^a}ѭpw ,8!rJ|i0Vlw+ZD-hqL^l}uHc1jH#= s܏2*|AhvD^)uBY`Sݳc<9y=yvaomU3,6,)J9Tz%(QPq!iҘ霐=b",1e5>b/5 thYAq.Y ‰{@D9+!6lCnL.cv'q~^nH,FßJZa4_utx8oN}Ȝ3g&r߃iv!t|F0Z.%V}mH-ȡ`#2b\|q(vHn3̏c~k>0)7|}K1ÅN-rًiBKԋi"| ~[sNE&<-b9]>T S,,vW( bl\dk-I :T/(ؿT2Uҡ2DԢl1N,yWe>чHY=kYuͥyֹ6{8m#^6溪؄jBX#/&obDۋ= ب&OU{KSo EISkΕlmnwʽm8*Q=poMR_WLmiBf:@; \]۶ ZP!o`;_{:fM)v^&).I^VPsgw[(߷B2Ef`I*:BU:S*"7Rݩ;{nv f, qjc[֛Se%kA~RFsO#J&aHf1ԯafg]p/>~sT3LlJOZgWnOs0Y/[dteHF+VGӛNM ~ހKa iWgfeigx ,7rֆݼS*rPyw/"x@XPJnG]ۨs: 1 UY0:RI^'ԂH箛h-vWNPx/,I8XN5V-Mur-.,ZKqGVJrL(xkX_Ya Rmd@,H,H th`$|,ĝ>/G;i;0 2W;/jlw&5 X"3ZN5c<9| AZS8.G~&" F]M܋ 7'-|Z8gwhU}4))NR<pH@K0.,VyN<'.A*jѱeuE=L Cso}l"ٹ޵2" %ͺHi35Qe\ҙd ƲDGzhDh8H =Os,穕eN Cq=^RD4>S A:)9؇DEy;6V+~^D:ܙ40$@bu5}) <F XsFIlh4pK<] 8' W?yrF&}UIOh3S^Nt2E>,*"t}X/tP`/ z8b`'Ю3 Le{g}<ɔ e{3{ݔO(1݌'wְ|Xb{{k[rAvi澪/0&E(-1jL}^3{y==TsRvUt^=O/faD/AVLp+kN+)T! }DmCt =M,JZ]o2C\eh*)W.HmI){g\qT ,m,Eَo8|}7n#W|zmbk_N TqG/< d@CD[;ʳrҊUJ ͑Z aowAؾ۪+I}Kܨ.UY]uݰ xBCPĘ2P$SJ[`p[]拂?k47+4=VU:՗%VUt">ïCƱ}*Kߪ=$pa=f-rv{7`|Oҿt:7*'z=# w`=ZᏰ֔ %7͸}پ߉='H4?}}NVNn= 7^eq[eh؅/7qW{_a(3ۙL(gB&G1&TÆ;#g޵.m%~ keψd9vSZRlmdI%ҞR*%$@ZW'B^/udǛs?}D;'CQ&w|5zEdv¯XIWwjEr|T&󬾎iMSdG2bDkn%Nmuc8??jA|X~bVVYZekw^q=Yak/3a+l_{H9Xm<.]jUj7+oGC,{P>GۡsxY}1^ ywQYp5,k.И*er8 2 8UHAD ˇiF|]lIڬ2bfio, ~(X]o/bwr5mqȵGZ`A_vےǧ `:ډ`z愐nYɾ3Q/nS .wd4Ec'/cA^W9|&8>mEҝJ^b#&:Xr~ "]ӷY'H4ߚuΙb7#XdHk:^ mlp= !AoЙ1"9IWɧC9_mx%P9eo\Lωb0WJEx>ZϦ ]f58Pg.q(ŪMy=&Nw#.E*ju ,R}nizv|q}ffh(BA;c*-f2S؊E^ HO#mL i;C.&S\ !m!g0$Ⱦ@\dK,Rc$48 @-_1ẅ!4gˌ t|L Z ;[]4kLC<=/uu3D$J5Q_&oĊ;&Dyː-{y e,  -_ ˆ˘1Ȥ1-h&h4'R!iYSI_Fη- fH9Y36>\0*2^/re~g_nE?S,[09|nn+QxֆDr`؍x;pŗ'lj0t|5I}SI\sDey+.-^4H਽f)*(k@11!W_>H ػ Cvo|TPJl|Y@5Y%Ib*]/ ((&Z( IvH;Y2Cizu>TDnJySh̓^hձJB^CzG8d42eʉ?2kz8˟&bTȜOOm]qT_f,Ւ `يw4uEYFT:Dv1. :6O=UeW*3twi0G[ ,ψ;/֕KJF+wb4E<3$^}>FZYM^E )*QxsR\<1K/lʙ $Im6 LcĈBs_5L ?O W# qa4{g㷇{_hp}`;؏f7oӨ|4\eH*21('\e Խ΁Ϋ~WДaTZ,?A0/d#|4oO 3 e#=>3 F\(rVT:pxoإ*hpձY*e}4+eJ#tX%XLLL{b>t]cF( C8|N_fA$vuX,Ӎ(Y_v *-`a H+*fǺܠtRDF]͠O2+@JUu |b)uB$ts{)z) VGK9XƺsϖIt\gr\AI6^4AsT-J@9'N!pH&>1I7d܎y-"n u )҂ 7UDj=[Qm41)6U/lu`F ^\j f+%1OuVܭtoUeW?1ft!/ acRT*HmѸd۠ThA7Nt$-T"jQ4]I]7[VkOnhʜfSsRL_W?7`xȠkRG=9wRlcZ q_ȶX5Abh0β?BsᒀcZgRò]X2UE(o{,5-;Kɲ:]u:`M"tk)uZI|;٨0ǀe&~!FNO/79JLL]r0>WZɄKnE. xX7AВeA8kߘc2!zkT"C6lY,%oK,TGKꥑ>X<=v*ޚ*XZ Xc?p ! 3`}a1?i] ~HNӮ௵@o%C}+(yfU:8P> *T-baP:CaBb:tM>&9[H։%,kgP>U-5gdo]&I'8ѵR`ՇJi`nDV)Ef̕>]Q1gS![nP~G%H+`.y P i<)`LZiĉ1br|Ѱjǡu\ wZIqnWAy>[c;$?'A>hPv|s >bXaLgIwS˭.abӸr]"ĵ=[AβxsPkڔ̼Jߑ}#b$7FpA8]]4nM{d`aB"89B2 fqB%;2nHؤwZjTFI<&DTO#~( nҖ#Gg~}N{bU~N}^wܔ~e#}H~˔1cR gR &^RKDߏ{A3oݍ<_xխ[rqi+,njDt';@ X#eOgwg0Njz>K9 2tL.VԛqrUε73:vt$=Wse=>L }H`D*Şlld%+pCfnÚFw8\`% pL6&VŰZh|82Z_^klrTܚup<9i3 =Eed EE`'Z*RSP8i-Ί:0c׫nV>ă[0& Ѥ$Pk#K$  w| F{8yS-IRTo k+UN@JHZ~f0/)`_N*:V7DK PKkWr7߆EqE]H _;!?\G\ɤɲj|$uRtGbAA ٘(=\Q(i@'ܴ\AOT `g.·(|"3r&3߰V-LZY!ت fڲm6U-ޛ~Vє} [t渥D98 l'Y衙#m,*rOb1͙.sm6] h:m _[vmP$gx; znnlA ~)Siy pS%beR\{ m} Tױ:廸ҼLڙBÓU΋`\I@Lb[rHDIƁl ɔ]|12Kl\9qyi$[ں6Li8Y h=w&]SB6(Qd4Wa|8jZ6Ԃ}-xn;soDS÷ cH;_J\.6y}!>3W!3BÈH6$ +1č?(TmN" qq>N]N]*8D7M}1L+V[Z`lنj "(ߢpXkcVdIjn@]Tl)gǓMut_6hN95{6X'u.S{H3҄Hɗޓ`s;'.TFinq.&@񨜐BHd&d1cǝ=U;~*1.aEuޯ$g_=tRovON^IxϗZꢩ4IØ4ǫc фDެ0FB'g{-숐Xr1a@x8aH(ӘSFSZ}-ֿğGl%bWITYr Fab᭾azjW "%k lR[197FmԒf=W_1,`5ܝ]̼V/j!21)zZ,zď[u;{{B9So`  S7c):H-Gg x|Dܿ%K[ĈWN4:**0lNJ<A" GgEuՌy ^U%(4+1%QS#"1xZ.V5߾w_^g4.fBڙƁx^cvo#X\przK0u8QIl|CԹa\ .̠HD 'v/?/..Ӵ35O5VhYf{uR4X p a Ɩe22COdZid٬ }#\ި5ύ;l{}1,]:P.+b 08"WlYH=ݩ!˜ț7-rE|ȅtvg%9xu+Xؘnj8kx1[MyT}B''YA\:V0z~\LV2 \l9A&wbf2.wDN#y|f5&8[Hٛ$@CFf0TUSJ̽CvxxM~n e h.4ꅐ҈Q)'Kk.qFt( =GW1‘,LfbETgn<,)ۂob`B>2(Sz$QV;V:-iȸy_b)kmMPyAE佰@b-f50jpC}|TYp?'?!"{roeD#!9KٝdDSYqڶ΢s+R/q#܄-( Ƈ{M)p8=Tv.@8ؕWc["m:=Rx_9T^^yCGk)(p0u8fph T]Hu}m<2+!$E\WR|$RX+x# s{p r>H`"%?Ő^ 268rM͈ q=$X b>~֜.d: YBҪ?}*Z,˟,Yrs%)Zsn:PUD9K`}% ABMt[rkmJb:l^AZݥZ1qWSzrC԰TXx' 5Nl͢(WA[[q[9؊^4K[`"* wx|AܬJ63y\*lfQI,y?m<=ytγz;Oll?yBooo=e>8|[B~&tC50%bxA٧&ķ I/dzVhQM_o,gu&>r+!KFb7~54fQD`t,W] }^OW ֽ"bV$urW0N ${mE|__tuAMec?i1ۋ+K11{6c9TE2ίI yiE(y3Kz_$A5[ ^Y/}`i2>bt:@az^}Fu6 _Ma빠Xi 4UVc#ř5+M|[J$p*?4 6 D-3@`9|gY5&R?M5PnR2G~ױg0= LVz?Y5d[AEwu bajcuz $֌%$"Wxi`eAطG$g&S YǧS ?8TJY/HS;"Xbs+!.yےVvTF?&8~ @.n>dBdGM;g}gFSD%7".3+ff쌍MPA}7$R!7}Oj0%2糢E_{۔Ce"ՌOA-݊ jV\L&vQ^ -$C,&uj| 5-b6Tucnϔ]+2߾g4CS]Ї:TeG݆|HYҠ U`)fج6 Q~%ӹ vסPJ rץ֥Cec|O gy1;3XX_v{@ BTbɎFoO<~ý㗻<vt4JRۃDIōC0BڨshѤJ7)Z"3+dAlOefNJ8 05-OT(ӹMe_,dɻ{悬sYG.H1qHUPa&XpEg%pq!pF Wi\s|W%c4J_&y!DժK/+=g6:r>b%R-!k[hv׭RU=tﲮ͋\ $oM4ɞVC /M78YLJ~fU1FeQ{KޢڜfC̫㝝ϾS=,rV0707010000000b000081a400000000000000000000000160d9e61a00004f5a000000000000000000000000000000000000002500000000./usr/share/man/uk/man5/sssd-ad.5.gz}isǕw  "%sW 0' ]]ݒ8A")G(HYK݇c1n@/4;2eVVw$Mw?{!jQV%9iZKd\oz_]N{{R?]UO7f4333͍&hjmKfr\? )o&`zzr˙sLJ%IF例.[hzqAy$]F]aOFߨ+ekuqzn>Q!?BOoH^[9x;թhn8@o]tpo!ߤըWʍ=0>Nf..Y/P0< Ã3O! PK@އ%` f"ob]:[!z@Oቚj_4G y^^ oč~ 'm$P1 'ēi oTw&ƪ?TAj7gf&/܄y xiZr:((0uu=[Xwd]}ަ}ggKy\H܅$؉JX}ǜ.VֽG>+fD#}=z5V|ks:0$]*zHW~ӱ[%&Cb5<Kfnt <c'a,E2檦K{aɤ^v}SczǏ% r8Р zHMT?Em_@/,V18-!-dip8X F6,#tQo>+As/P#rs$ S(FRsܤw`^'!UO:}0$@3D8?|NC%w(y!I%,F,q0QT lD6̅,!RG$q;j[8@7"hvv d1܈ tBk`M5 f䮂m5H(⑊2|Jt D )ٮ̍V~`!^U WJ~J _?OU?anݛj P\[aRr}0!ǾVPx 8 `2[$vAfV0K16Qݪ/ŠMPz@DIFpDqZ*V"YmtpUAAXyyѬ[.%W1yFAC\2ygKSd%[z+(e-'!^S8KM2{o%T? NT_3JzӅ…ԇjC\6R#?}jp>KE\75_<ތWxno(럸@ pMਤ#XLLZˮPa5M_o"s!<ƈ4\8sWK8ޚ]l˜#GȑbTenLȑ9R[";7RjF\IH7rd p0"^ts3.B rn)_k0~e$gE0mr[K.%jvPb',8Scfzf@^D\Rx)4;&$Qb&pU֑^:X  f>TߒHk{7:咖I.~K#c9*@\CA~% wS Rߩր?Aah Z5,=#m׈`մ _ ⦚[֞|E%%r2Xn-n$gbw%{^,_+]G`Py`.HVf %TlP/e975yE[Heq.8"PGěҋZ!kSs Vd=0'ۥ?N#xw3}؏B0ٟ:= +ahr0;W_AJ #%8|{RS$r5}VR=u7ՀK£j\ íw8cA}7Kj\Ejw1dA.xCtjDRLXO3 d^Dr=w R8^GMHg'nQCǀWl|͈:UZh׶]7Hqޑ‡AAvwQ00օً3|3ؐ& {&5}jM 纰5H !h[~Վ1Yc*0J}5UĦgtV%J[/J.M9?mڭv!E;HfAk4M.D٭YGO䬙wU2ƈa$ :H@~MB.$uI(hEfCLMKd #CFiQ[}t%S0oln8󇂾ί;r_Orpr?\?_i(Cփ\(ۤN|Hv) :xrm@ y Ydl5 Dc:F1\ClO|n&xn- qcSĘY\x]p7ܭllq83D] ({0"25Ȋ |\we̵"cZG7)>&4|<93H`Eapw2Cpfbʑ=lV5C`>Op*=6\HbvzZZǚSZsY_/y"Ng=ҟFce|f6gҤmఁ5d.$o9H ^e#86g{uBhB(`ʮc<NjCwYۡ۸z }kH8MJ@I<&{`>zkBqDL#_)6PF4t0 )]a_鑹*䝹~u~+gg!I|*.N)ޙ\:~|c̕ҟ7(kUg',9i0R YaQ A?dca 2S XC`Ж,ERN<أ:pɖ3{pIX*Ir8H 2ȱ{ aMP`irCl` HߦsF-Z.hEouQ{TWWR\K KzJW-X| ;~zw@݋rsgi7Bi2{&/y5ht WqCIZn_x0nr+*DSGpaIQsRr¯e[0@'Ԣ:yL.5::6rp[56tl&X&~ѷCfOց3qC"8nG߬Jz܊+1%9;Cn[L\!G+0ٔ2aUiCKEK&\K']7kUmC)}Ήմ:a?2J70zX`^K_zBAabő Xd^x6B]p`m6-nFK?y*Ǩ/Sgr+gLH,ݿ|Q6bj+fDWF~/˞ ;lk)}wI_Λ.R;tHG@GxnZp~wm`%&`j`ĀW >7'9FDY|baFB>U]Q"O)CwdxhR[7XE#g ,H\792kf 䆚=b03,@uHھnۇp&T9b`a#wt%xC}rˆph$ͪ$:F{:Y8ZD86'?Ězф c aĈ3G-1& _4H-)(fl?ں`FԬ^ch} Iފx`9T5 rCNkҩG]vL :d0ђ):v-pF cU S:;吤QiL$Zl׊P7%(⨝gBL3_[:&b̩:URT} J^\ t)EA'HN S{,@:'AÀD? 2ӎ?vj` Y~Ab!h[)ibڶ1i;_t☝:$9 oH]'a/uLwI!u?7҉,ŶIst|4 `[veXw=a%4W(Ip}clU7(6I rש(IVZͱe {hp^gp0>qn9C5.pH1\uZ?uSohcM?l6k&:d,},yF}ͅf!S_sg{9eBR"U Fjs\K\a(UgVTAݹQ 4JJ)*W*m\w4(JَiW]oFj" Q\+EH*uh|,/-RhPW9w<-=Q}1 QC̈f>,{)?##&\a/c#/òƛmz9OI5heQ PBx*h6 Q^fC͘Z/HU,10mwd1G~@ tB"=WV󵿺c󄗥Z̷k$.ag`v:@0e=Q=G dp.q:nL3IW3dSX PEYpLPnd_9&c(B=Q{Aqae&EOo Hc׬G?DI suS08jeA9$ K>Hgr?2G ކ.SYP{`VH8Y HE[? }u5A3 hx3 )Xa}W$l{+J$+)7,( >lϭ!EԥO7&jNwG/_@"g*rJY'O3jil칋8ύY{nJ)nMե <k(9)ah&"<#a]) Iq5y9֕+ ۶!jm('_~.O-yD˲&˘R̓,{V Kۇ1:vT_,זffhi^Y:jlrzV@9?Qaڮ[W~XuTV֪:}u><װZf [_6FH~X;܃8s(捺=  PlzMnsR9:,&L 9zkYQѥe[F4CE:0k}n{ r,yszˍrRKZJW\/zIV|\9#Di޾ґ+bԧQa0 azG= X.e-|d] 9T}9j *2d=drpB#eՇYs]Xl5-5 犆Q ﳉ q?-c!nVx 0/vqGʿFVl&~C00\ԙX.fq1_nNL\-{W zAxT On`*"hn1McŐ݈ΕkEr%W2d_B'GS|OX}Y"s/g!box452uDO>ԍBWYNm7 V5rB6LUHлB#(DҤJ`^{Jm2&qRT Նn}47n9)µZ߁|$8&m9%aۍR v^a b[<"h]`__ʫ9!w MSM7GZ>6[\fLj%1&{w0A.o`z5nE3BW斪hǦqWsMNٮy!DEu;M+Q~OM•p$iٴU5tףsS,▸J}!Dǭ|'N尻ىYLtĩ+34RMNeTu.Tjs&5[W_L̸U.[Q]ڌzՊeqO1V ߍ1`JJ9`RRҧ}ILk-tF~?<x v@ѭ3 GμusS )zL̙hbgϝ=?ً7/.ξuf:xmx638 `,&M/-v)5Xw5.6-W=S-|_9O:ɨ܂>0zXA™r kɕFtq/{H *y7ს霱iPszqY,Jjjʅ+H5Da?R?O nu5SxYYu tց|~9Ii&i'p 1ny/T4JQNIPWPXTTmԎuJ _d . Q&@ADKj⢺ smrYM "ƖJeX4TƽyD B$uHk7z47>b/ RlO_l'-_m4&J?3gb-J[~!EMk`bkٰ~X V`]#$vǤd2@&G$Nv~Ѵ7|Bp`XJ>croo2ZNPFrhӉ:s.:98-c]NHCbWD̦5ꭆhpP8G/7N*(B8 ӛVt;;{Nf87;A_ʳܐj-֐wQ; dۘI H_@>i6uͲ6:2 ;-Fgro?B2l&&ZJaZ}esh&5XPP97Szc ЁHkM@. u韾kfl8qnj~,&OVB'(a 7Nnkrkll9@;q`JhtҼ+U:OG2%cZXLL>Ko{ ;AJ:kƖm "eNO4(H[:o$,{N>]A]-Llt䝟vPtݍ-e$>v^It P* #ےlg0S :cSp6Ui24()Ag +w֩~gҌZ<7Kos,7Za5]E? {w^E+\oB@vxC%&2e v&b)%l@΃J/6 + IѱZʋqx뗄>D+ƣľH'ZP5{̲q*j--Hud7nµW.t$l/cdgD`ε[]b`=8G){* fTC3%Qn!]I8ZjÀ*tDV\[҇ XbPEU[W `$0c4쁱1MfFHɢi6ꅨ\7[ƮYk gPG@S18 Lobi9+,"h5Rf"rd!$1DLP3?N[ =&ݜdh (1 u 3I\zk&FmE%}؋, Tt/8--fBZj܄ *ejw&E7xy6,2n+!}Q7 F;YQ:RlZ'h+J۲.3r 3+H%ŸZ\n$.*Jg/O5N:r|fc.zGuw0#aHm:Gwȃs guER2\&rD G ."(XJe?̩|&&nPhhța1ma,]Ca*e w_bN|֩; H/Q{`Cg[S> _|[rh"od⢜""w[ݡ`ŊsuoeC*!V/o_͍GoGF\.#[ubK,nu\u&]1#yyW!g}fxx`v^$:߷@yd/꓾KFfר5=n"FbڐhO4lHLXU돰[韧!IFGǣ={6VP`b3!Z#\I ưd\k+Gi#)HlxӅ()ν4$ ^Kt^Ca+cc/*/VZʥqrZry n$"bt SH U-(aƕv-as؜}a ˱zD\,NKWJdKE{铁(qU1Yd3b:0%WX/z2n$( :/8Nq|dHPmY!qQ;Wkxr)[g D~Ux 5b0ѯjiNhp "`8ϝ!`#`g(z EcaܐpB|#1>}쉁ш>paӉ.Į($+eQ{^M|7̛P'8Vy&a7z=Vi[F{NOT/0&A r_*&x?}|>VUzw~)X&9mQFԦDFFS&fil<V7D)QVAfEu3ahaUr3A4C,}N?Eg6q!C:e:G0o(pfF!Ov #zP|\LhՏ Y cjVB;\9{J@o&qzh9ː9hzqZ&XXd#ldQIq%U<G%72ߠ®"^pfB(DI.&<{Wkp歋ӳ&ϟY.E7fgLz\.v佻&̊am"r ;=1Ĵ@> T Y CaC-,Rk"ֈs9MmtrȀIpSG7g=OpH?@xA~0a؜W --f%MTw'"T!OhGM(&}/QmX6r]]Lmyd#ڱ :棁k "\(03s YB\41)cSSEp,%nx.H ^|E$BA lo /nBql*;.وeqH490VjSjLEإ.Iк>=y\InKi9RO`2G LF8^/5cRbtގJI,:kJV ULj7BДg׈-LQ4r񕨖@MiGzoԛjqQI R^!=J,`Fb^](\H pA>z55Z{eJ*-8u)65JcAy%({׽OXưT)bTErUL[j F|/v%#.K ugT (‡h3w4ٻ‡ DA ԻfT2 ;Y=w B.r {ȂH>'QN<އGD70x6˙Jb8z.onԾXkY.։xd$ʱ¼#ҽ^$_DVA|;Rx:da< +e18= d&z7BV.*mI6t1bd06]b E%2X''F$`|F0ޔ$EI"LTuI.DkhD3SUاp:ǜkb?P, _ *W} [ʭ W˥.o{!@9=4DMA|>k`=bd_E[>W_AU>+#&Rqe /f47#ŶƭN 2!$02/(d"sڠNn@y 9A!8 EBȏCm"\X6fIti& Ei} S̔ю6ʟU$85>g}lQZX\ԞPOmY&0.t]~ N(Մ:c.'Y+Sp$gى;>LJ[TٱYm)_`rJy ;̔ Ly]6|9GېuBDM%" ]Ąe7r[)LF,,l֔z (} ouځ/9]  xfdž;N-d'޷8V,9me5Ljs,)j}aS o3?l3 IOLɕu21:-:XUȀC)s\X"RL \r?7f*Uw&QP˵HI%* 4Zڐjt[hijGd\JZk8JU(2:f)dzN iuWFd(]S|?S?~*KNY@NfJ3P&u DxVB)}=8Ƽ>:g2PX,&X>^~WyRzl_p}B;\fHk[VS+fEh]0qVp*atQDИD_uģy]aE26ߝSk2*F"3Qý%Q~g@ϠwJ 9j(+64=#Au35ZqRe{`KoJ: Nl \Ŧ\Y\ 3 yoHukJ%VM JΕ'=8p9/E>"|e(,.'R\K q/unycneG55L(KwLfk ?ޣ\7*b&l܁Z!,K]L0KocYF# YC:(cj^\g"ydԼ#:/m*7mrN5n}mnZ)[(YkzIf/F\c-}g5g735xVɩ>p0*s G62ǿlu-]?*u#B|e  EMUϺ{RRcQ%& )l-~\LvS9NOd,Cɶ8ߐB!mj |)9c[`lZd ގ'[I^.PU^EBuM׍+uLqbLt(Mс!m?UPh4 6펪>VjW_b/z߽'cf HalpZ"Ϛ,66ѭ(P t# E؆wpO@]\AW0-s;U b 9Ǝ-.h~E܈YVk'+i #u#l]o4>~@Ƭ$y'wMg=c+[FrMZň.;3H&Jp!3 ]CH5,N2(kҫ3sO΍?N8q~~ԉNx/M4qK'^Rox"y$'(ܲ85+.XD}5{:;Q!dZt poU[/֫D~3G&mH-Jt r~ ]o.~с;3i!v?2O^qc *.#= {ٳ|R4aDC u-buJôDĒg3!OƲ S~3J^mm ]1kOաV947%k*n h+ +AZ\ 5j1{G:g\TlKzmw)mTpjRT+qN\2*bZ)9Cp6K[6BJp+ʵ9k6A ␳ׇ-KGakak{h#iZY0e#6}cS\f"Vi 7nR:*~j3$ 9(f(vMhuR. &{N8S*Pn4 Ę*z.nVr&$=p?'!<9s­$fdi"I:P0Z91\TWL$1WHr٢^P-\[}×Քo_.7?[iBL) }C[]߻u7{5G'ޡO-Ԋy.['=t9 Q_4cOd+YY2t E]vT,L rssj I/g㌏_$kjc0X ڌTKC&2SEh|GU80zʵ HU#r=Cu'OPaׅ2qYm'Mh[OKţYpMnWe kxH60˺rpkQ< B%p)o v|BR&ۭe%RC\/JpWczecSbWIrmC{zpW0K0kp ?M:kr57^_0 %WsZ}$=Y@ o(N}Yh|j?ްᩋ_f 鶉Zn6H>[dC=,ULjkzM|_@LG^۾Q{îS/Juq %5?6Xxl[(ضycDGC(xoeJ)8.h+q >w.|{ggjy_\>7'x}G@oS>{neF5)fkLm8uJzOR[b/a loĸ-;]w9^mHZ`K, ߎtҐ:w旓/;H4kQHtIzˍ8p$.qy){<(VIz-է!ny2hPur@BDkeU9-hAE ~RAM.C''XE"u/`M{s[riBeqk>7je9e~L'H݊_%3$-.s{f8n8FIZn}h6Xd%ښ}VHPPEQ?yS} {uǜ 4ϻ['!0Dr5H#b ~׏x9q/b?:B 9QryTbaI^fn]i*[_O-q{y6нgiY܈GqX$ifvy(X^W;Wt\[r_pR^$&b;-- i+7*rV=tIrr%u A*ot#/0p8cN%:@`2yEJuИvdjmK&pr(|z=0ׅg`&¾;bL:?3>95;Vx)<+HͽUMK#rYO-M&vzR^h+GO88mLKbat07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!we'췈KyKj#^|5q|5*ȝ  YZ