sssd-ad-2.7.3-4.el8 >  A cU] !q(ɚyC8b`A;_'(+{Š>wOV?=[:iXI(_Pa_U PrkMCɆ+"bu,HaOi;~W(b؝)cz * pfI1$EoȘnpR>茄N4YӜrMGpnW]߄>EqӈڄA m<[Vu(xA w/1Gd*i34H wkub؜PQ8d&IܮʋM`Ž0˸A/h7w&[[xϭ#=fdC `U =ݍBx|ݞY&)NLhSUKZ>}#ٔ|"hеuGUWoW5`ȧdcqKfuei4"K|},b6rfTK4xKr1%٠[(X-}rj`Y/Ȉ edeed9e5efa6fc84dad9e39b3eec78049bf7351b4c8c35b2e9cc41119bb2e437b8d27ad81bee06dff02daf4a85c981fc724799813cU]ܴZ y@hlҏWV ѺDe0f/ ͗X}HM1XÂ<@"ҡbxӬcU5 \vB S]OԵ?yI@GIGDvf7:&V:bL;* XXGٸ.sS!Mi:oxs̽'L#~2"QI T /3\T*ZN@uK?%plSL!<~T'*hLN%ّ#։gcVKb/&a\~b0w F[X mU-OӯȶchtX7u8 傛/irEQ1E.3wmYģ^ UjpQ*=:ȈGV ,Bz_iJa_XFjOoZ<_Ld)HJ2Gnȭ+S08D;LW=vtC?q=msAn_̤qB1Ơ!/Fy.Xbk >pE?d   2 3PV`           $ X   (XDhD D $)(88@9:eG H0 Id XxY\ ] ^ bdeflt u vDw x yNHL]`h{Csssd-ad2.7.34.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.cQaarch64-05.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxaarch64'&EPK8L <O AAAA큤c@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.7.3-4.el82.7.3-4.el8 .build-id51a078ab58c09ab7afcd11c48e83621853d4a6245f3129ae3e65adc33ddf2cca709c50ddee500665libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/51//usr/lib/.build-id/5f//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=51a078ab58c09ab7afcd11c48e83621853d4a624, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=5f3129ae3e65adc33ddf2cca709c50ddee500665, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)77PRRR9RR RRRRR RR6R0R$RRRRR#R2RRR*R1RRRRR3R"RRR R%R7R:RR RR!RR(R,RR+R8R5R R-R4R/RRR>RR R RRR'R6R R-R4RR R RR!RR&R#R8R5RRR>adclibind-utilssssd-winbind-idmap2.7.3-4.el8utf-812882c623d273622b05b77692a7fe07d1b50edb04822c13f2c8b7540546ab87f?7zXZ !#,] b2u jӫ`(y._HRlX2>>LP4^IlhD9s:AC9P> HCkH44»Ca.e**ʉ7$ܣP(C[,aU0-Ȁ%k݃7Т-Ih suK[rl/7q[N(yzܢh蘋3f`z$n3in)ts(< &F<߭_ PyutjTBYߠ@;{$}m<4i)W zI$ fPd;VX{ ( b֬|HƊ,`}}7b%i{\,_Ys N~qg;(VRdW'M73:Iw w!C^"~à3LxE#b[\Ul3z =KD,"zNEJp{ *C! Kbx9ho,lk&&Zl=> X .T2辧aq[MFH~g+E"]ei:^F٩ozNL{+m\D!=uqq-$g4I-Zw]L5#K ?Zz('SjK c'@wv!Enϝ ѵS.]{.1}ēEd <2[s^UNq0F<{A|S2v-AB^CW.+䪎 ʣV4!O sJ58F4 [WL>$ф+«E`:Y#_(bq{ f16HY˟ \|,AW?Zb)7so77nnƚ%08e!XZ6i6% @&-%0*uا%Q{A־m*l2Bm )C}ղ:7~5ۄ$a=bU@0q?A.[aޛ)F_/ZAZ$Z8`Uɨqܑ/Wz`aoʸ;>J51.:"J E\ 0{;kҋ+}8*bn%Fq`} K]锡[/,P@ 5"[Y*qbެNu~K2at7V yjFAExuK0 VN3bXoRl8ǺJhNzJD>Tg۝ByBܷksD ZXƑBAI)}^R OeiaO !gݽHN*zg#ԽX9,Fa|`]>ufh(/d#뚦`>¿5(w69=b\l&{phvⷚ0$m %_+0!E޹gXMD mVswXWx nLܶ!|t {_hjsp$߾ Dj1:|M3 J&yfķ'T+K(:O"ՎPOpԑ,G/ Ѣ^H';q3ن$- vEm!B&T["7=p+Cu?knE_6^Cm^7'Nk=%qv+- uZ 'CV Jx sV.f+L7Nśsk8z g;V ,lACMYfNZ-pMp ir)kʤR$E7K OSv! yjJ9q/b]r\sr&egŭs1օƝT 72Sf$E`5/v6RI@WQ`_N'_%LI^n%LLDQ#LT& r^\ۏ<nf[oԡx`Bo~a2q>A 6ۥn'&ɊiύtCxPΗb֜}p\=l_Hi/w h$Pt`=0ni@w>I@/oN̍#ȑי5?q<^ӑ/{࠻̣Qk}# -Sc7Tg+^p;B |a{[,.M'N]G<=s],@܉imX'sSEX7;G'Q| *.L(u_j 7EkWZWTsM$lN^]4Y h%G߸C𧸧9XV\۾z\ĕtЍu/-iop5 M6[4M@u,=`xru~c@c?vx둤L ) "tԪUFSɲͅ蒈 [͆ ?L> 4֔b^gM},|knVV5':ˏ b@!mOMTQɼBzr?Z'Έmaf"G 2oo7 su:[eFĨ=Jtޚ*(Ig/.) cX7<䶓a "If2kKeB$q[w{ˀũ,u4I}E`tϘTZH|h:sdᦆoHE$F{xX+LQ\36%/rq9Bi,Al"0>u4E]0gA랊|+g?mtٜs!HPL~VkN"UZcb!INfX-Ԛ"Il9ˢk> &ڊG:BQyg0p8=}u 62}5xG!-pznPQBŀ7x |h?%g&$G#A!Ȅn4w.2fd{KƱ᝖7h4ah.FTj', ܜɁ>~ώV+ZRX2 R:y&8Bիu9 PnK|с]؉Ѥ˓&[d! ڀR}ꮯ6}#!Uz6Ϡ+gfK~Ϻ+^Ss>AoF#( |v H*GcPɵL2u܍B=eV7R&5X9[aёp;JEKR ] 4αz(~{P:_FOWg"2 XUXBld%'pԣ'ibnl ~>JRexqSo 'un _KA?k$F)Nj;e\o?.W*m^O:϶bk+T9!PL90=ߒY`s$϶̔ t:Xp>KD\H24Ӫ}@ IzƊaR1SㅝxH_g &QSߗyy"[yCѲ0!0XrsDwrd"Y-a$}x-4fH(`aaGm ?b/Z;1W>ԙwly"Ֆ/eEiZφa^kvUL?**lX$[H:Dg *b u4~kQ]!)IR@b-&uIpWib zGGr ȿcKZ{\7 OCb6ׄ%^)˻׾8Fm=_=bSԲx=UE\;N++ -Ko!DF> r`'_F{J^`opbG+piX3.>}_~/YR U-/ǜ[T_Ve|17h RLF3*SdQo:2A̚DD^IAA% rFCeF@(I@ ؿD"09T'˖C%ɮ Eд]lDV!A4򅠳 X6p[ֳY嫎mKH@vf^lzOg52j5Ǖts:7Dr+5.؇Z%jy!TX RIʋ_cz߹lJȶ;ܔi-$Fؒ+R|;mfnJ-˸/Iç[]WQ8+gu fطY{:%6YjO1+qh7_u4?ର91HL ^eC}Iӆ]o>dnOвc&b<$BuO̦VѦq S$RWk ZgpEeǙ12 =HHmۣkI]a㢷/nxV0>@[ zh9aT3rßyf1:8 j: ^"\ˋ$:軀`[4(<_Ҵifst3(P' Sd[jl|6a2(#8 N?޵9ː5 tvuoGۗemFr=5w( KsJ}"5(4raa Y糕8A軾*W1BX(z(-jW%<^1,3bZmƨ`ʘ >$k|#MjRI5O'Jf]zQ]I#oB:A-BV9Kץsߑ@=Xoı= GU̲xtq2CuGJ`Uq%];'@j-Q>!R`I3P-6'C,XA$z"*>$lO0HpvTRNJt zk,nW4i0~9x{<QU.4Q_ңcx+Qx!`LR]tC;EKܥ},se3)]a'֘L QacbBR%ʂaQ ȯi@4Jl .[|.S0 (\9nE5 ~/ iqҕ*v] O] *\h"4CBw_قXI!g+C[ukEg˄a-nE-&0}bmd3vАM,ͱm\3_/M=߉9P"([V z"jՠ&w~yŸl4r{iԴ/g=Ѧ Ъ0 qphF:CY@*I;гy>φ֤F=oU9%9.q i0! LKhJl.#g{;htfZjl#7dsgBDǑrC W&)%w׼f'iCc %:[JEOKf#iIc⑆ˏ|fTš ҚG=GѥM*]|!' R_%sMؼ,{Jn6” ݱnF2*Ŕ_1no?Y9U`A2nŤBK>wz_֧%X'. 6Wb0A)#rdQ9Lzڦ[=+=ɠlҌ^.l rf u9=6(4Kr;ؐڵJD )lԤGd 7ox8@tDw\?p, ^A;z,s>; NϹj I8YϡH5HHhSa m)9mZǶiqENvJL4LW>Ӫ24eQa^݇$2Xk3K8V(ci7n$P/4?| pkCɐ/P&nu|cw%.Dixp{GW afIzx}=W٥~}YB+93>WDZP⑇EGV/,+9qo)T6H<<;h4+h-a;zGיrJ{;Hm;];'azɶ`'=aڤ>OsW_7V+͑oSoSIګ/5msl%c=S%K;bצS^ c.ܠxMbAf%$2VU*u9.7FY#F67=0.cZmcn Zel$0N ;a]i6yFS*6O DIoxA+([,{0y- *=Ⲋ$@6ui(<* X}Ohs :|)0k}:h5!w8Aaº5 FXzFo.?j R..71C>D2W3Sv|'!hϑ{KW=a&t~*연r'CZX;˧G9aw 3"OO#I1|YCk7F63!鮎#dGpR}W^$eMq(QG쫉K Jt{RXz٫Y) |Js|pY(ًX EBhnSRDG'#dFa=<'J>fq8xɥVe;7Vk~\EFU 2jِ3.b&AXvاj:˻08y=s|o!IWD|öo=NE-ύ%fgꬶiV[m_p qBX}hƍk_==iY_r7֖5Im./Qknxx'bq_\S>%Y`)0fYSPonȳdEf|QrP1=l`I8TlP+&k5k=Ik`%d7u.ұoP݀'8~+{C[eA~XgK`{^)dԅ0c,HYU?˥Bꗁ~V)uhBוH)h~ﵙʮF }#BpϺ}Ī I.Dz!Oۧ9G#AKI5tmCŇZKwf‡w7VwȿG( nG A Zl=q(pF Jɋb!(l6꘍z2dВTL7̵=DӜtxO0WT`Zꐂa}`ǬڛJ2:~s-\یވ@O#eq0_Fo)E<"ct"/#e|d ƥoRrHZ4R Pfs8^#JA=NW[yS7$A` .+gS3.EA䁀%?"w{髻D+28ܗj]pΑ Q=\ڢZ j?U[4H$P$E01g&=k%@xI)bH ĮJSjYl}0 * !F7vIo/FX MlXI,ϋLlE:`A6!}FRΊ.wf 8 }tkDSc$No8Ҭ0ew?+) .L%'W;.^{8nJO+))D3g&JNӱkX,Eۄ

g?O.tњ7Ԯ?';=FVe|ubJF<9X#l 4ໜd35Sd퓁8:KOե:`7/LX=wQ jp>) - tqhI? h M=,|[>wjۇ3\ HޜDN9bŪ4'$" wiW9UU TZg(\LJ0\؆}F'˞IK1Ezbգvߣp[<[͑diNgc5=y?K><'vPW3t8tQ7&H@#CWL/O%PF)&?K&A[?!oGU -0|ˬE%h;3PkBr_Iy?px6e(c4ӫ(59;8+sI5lWSwVU##l|޿ij2+c Te5eaW6[߶,v1lzU D~j` c!{75gĴ~;dFTe[taZv|JpMp# ڲ4z>2;OV"cG(.1u+%3V/.T|iݘ1;{dլ)=1iIDN|}^҇ߌC8 (_< + dtF:𕑔JrX<:,[̐"d@+ YCM8[K$knA"k"om7(eK}bUʘg_T0h5n)ش<}3nG7ʑj0pd@7nyTKz.a#Y,#rח g=cL Poz75+xVܸfL9 Rt VLT.:{b[>4)5t 9#Hbo|`6vTܹ7S[V Ey }زa_O<Ȑ {IdcR#Ja<{Ѝx[g{ě&](DYNQp=`4kB︹ŝpCc^5Nǎߨq"?uNA1emmәԲ +x(ݡ WӀQduTh΋ߛav8mu`-h[!i Ych럱 ?$V)~ Nz$Av߬OjTj T.M :o6v j)ZHt_D!35ԙ9cp E;B2":L4/:C'O 3ۨZ\_HK.a\͘/@cfCAr!`TMTTX=}SwDVk30 R_wxq-kQ3pX;p#^pvf9`W y].1t2Ct״R<ʢ5Łmo0-mrM*A,JuFuهH<ͨ}}V88qRa NwkkqO?/}F *) !&9ߏC&ߘGuXeNI-a1h_Se(Wt q^~\9贛Vr:=R>ʠGh4!Lݐ[Ywŭʓ 'NnpgN4"W/veri+biH9PUjKyBNAgzLYՄ~^4>*/`{hm*R8C=Nξ:{! 837Rh=ܰ l<_wV2 ^@@mѠN:Iu*V3Y㦐3hZzHˏGϱBLwdc]W(Q8~>N){>'ysOnJ-ںwC! $/ fxk?؉Pu)wSYYјBIϲڛڋJ0U>ؗcx\gBӼaLb|U=z @iB[zLwLy"jbD-8fG!KщbHw)Di qXN'tߗ؞QyZsg/}f#pF5 K1%$bB-_'hѡE .$TUзbod#솗d+Hl(֛Coq6'9JlI@Qtonܗ x2s_|;y#@fp·Mv} U_̅xSg0x?c!7,7<7 9N7 w0a˟¿/娗NW!G>SvfZ3//Iڜ2^KUj{m )^Mb*o@pzQ'""es%Q?e#HO>0,#*2{*ƈ'2sDǎw<$zwBj)y_t#$v?2J\nHDZ .c k{#Xx*M tPtwjwƳ% #9ϫxjĝ'B(X0'У];G_>܀`׊Zq4yZ٧A_[NmL-W ?VOL*){PI=C787;Uc~0hĜGk@cװGwԲ^dP0QmGj E2u ,}S:icrS# u-bɎ Y'3-XC'zdDi2&^T6s.m*QW(7njR J!֐ {?DPM>-*' ڴ"yuk0lH ,F΢]YM̼0$./pn.$biU>QL(pxBܘ0O%eh<UL|7 U<{3|&r kСIYƫZ5ry S=$Zc(qo 8 rdu(cDjEX`hOuԩڑT0%%?3&P$FBJ|>F9#C{~\ۮ*a6T8X}Q@ި;#V{< 0E5~xrNyg:WCmnץ㸾ookx;ȉ‘8QHR%mB᚞ֱVݯ- ˹LRNA/R *RbےJOREބ< oQ8G⥤PNX-'8h#uRH 2 1.ky3ʁ|kyn$[d>v_l Lɼ{K$FQ=^ƚرqJx[ZdkobPOMlęO"Þxy-˃ݴ~;Vԫe+1SFjW=b4%" on"}Ixm0N/Rg GNv&}.t8$PS> ̣/ω{P폣u-=z`+_՜25f3n=Zg3Ƙ7*.Z?VDMԍF v,)7 S-՚nouf%4Q(lqP#`MKϠBU+5FdF~ˆ SQ1»/V0utĠ: =مyK;qa3ӀKA#N&T3Tf _M"sQ,8gyHm8$ 1Us%1" βU4uvI8WǺ>S'X.wD Ϝua$me wVLdFjGyR6t@zޞrߑ!^?j?J zNvM[XuF+ㄷT'2c$d;n`Z"%cJ|*uЕƮp(P#[O[JrEAU,<2T5Q|EعĜ<0OK- (xX6%!DLI »0Fi`@ߏ2$Þ3(ZȕT$R43gWύTk_\&*T 9R&WF~u~1YIW.1r_s K0Wz$ŖguNvr|ڋf3Lhw6D;7?*L /=@yPږeEhĹ mHmkB`9: DLqٱbY6qR7,%&3$o,Bdr0oQ)_@pҠ -$ҚaUh*Tnb4S)pԟXmdv7zW]w,l0d`4GkTEpF*F< Mr~޵)vyGՠY\ҕ$Nj.@^'5,D&p9ω"hJ~y/$"T!pWӜ2Yf\ԯơJi\'HOݒV8~(%wRfA3[^frLQS%VSq0* ;SdVնl%kJ!RqXٳ_[ڕ1I181'_M)Jʁm}lŢ*G׀NtP!ճ,[l-%+9yg u4 uKJ@ǧe0@D1 ửpu0i9!zǢ+.i:{Y;JפMvuUߐ$/S>zJiW^DP=HԠʹ{]}!п.Z@hYFqM'&ή(eW晁H?@8Ͻˣ_+]ld>ί¥ t4~!D;wiur $n:;O\7c}%ɞQg!"NҸs;}Gi"|wAQ'\UR\\Dz tg "Y;ï4ƈv%IX8)? s<;D-l3HNPΥ@d0a3h2 E: r ܾ7,Nctqvcz2Q8=NF.#O+M$!rJSJJ"a. u%ɰvsSXͦgm9 v +"<+k8_:[¯Y e#ϒv2l6i`ʻQ3-){YL*E~j:nc{6x>& "'%xqjB9FaL8j%)Kke@uŘ5qOG()wBI3i ?LtpI,-ѝi{֏n)10jrr4獙}7yAGNí!"vHٴY),c~;p.Qra%Vޖx GU_<=Ϙ@FGJ ~¿J`2NA|Q^ /@f/@W9@v >]ã\vI_\tFib'Q'!bL Ђ? fLLko7Yj+J)PVRYbM6ݎ@JF0h9ҕc"]Or _0HlrԎ9uXq;FE|P%ϐÿ:%|]>,#Aw[hJAdG"ElMq^wQq;#1sa` >1IQCrb,g6 v }!+ iy,W{HAQ ~MaP`8gItb* RՉhzFyN[K !:D. =dm q홬l0FC܅<&{~N΄hԳe@W[u6~tN,ܹ˔ ]ة$*@gOʕ:|@*C8 ; d8Q^WNc_eMƬ,BMgI nv+7 >E}"z4Z{GᥔF$Y/ښAW@_hٱ4N/[1!,mW@Qw_a7H oH{R02!O~ZTGiK\bDoć%Rv!9z^lEX2ܼ9*.GzxbZBƜnSIfXu[,,Aֈmu2}rV#KU -Ȳlk)ƽ='9+z@\E#ƝH;;W2 ZMύo 7|̭|j6K/ⒶClFB]%IVpfz6td6[ }# 4^̈vT֨`YͲߘQ(#C.տ]gv} ڈ\mno+DFd#!Fz_zPגo.fxuLZ6_ *T0(LiǞ (`IۧH\ $PŠG{?␞ڳ&r$W Hgϔ1l %CװM"&ēLԥ1q5d0"JH9{R0uO#_!X?ߺGxNWTrS4}T$/*W9.ĺFoM$TBdUތXՒC lRCP7y*i >ۛ#ЛzV}H^ һv>$:;RT^X狘McGy/9^P!Hv>`2EigDk ᭅ(Ur;$\1,23H;XB PE2ϳ\g-=<.1;] ۯ sWAlHR)ѥq\:PYv-jh?5+Dr8P4=X%,:+uqxk. !`\ÝMH3𰚻'"c)D~ n< ⼬FMB)> 9Oy6~֒95FQW}D4rbFac@C[N\5E ϬN1 'LD3)Io߃{@2̧b,,OMJbg.`Z"4-ሳk)%RiL1Ft5;ul@;$M 鶮*k_odR64;˴%Z)y-$Zz30#r-> (F1k~C(L3r˄sVL:,?[ms)#G':.zz#-޼`2ّu{;V!;l/zAbDRƆ?[]‡QU3n SJIi bQztJ75GcEpٰ֕Ɍ~,_̻A:xJLAμ:p^:OQ,<|nS:?ǡԳgF+9A/lU967eS%"![^)~ڸ4?̱7(‘~Cސ _OWE{y%| :#A*B?b]"Az;܂"}EHx#e/ɡ܂ǂ[iGa SuiC} ;O\}CMt !}֬LEAE2dWT{!*+H9 H_9 +=%@LtU輒TKwAxXD+"P6С6Eyiyz_>jܩcMr+eMxll,̉ڒ&4S&@m"4WߨJgsԂU30e#&Gݮ(0C`s<IORØʈJ]E5}@& 9Sq+ee*Ї-3sx?:lhC$U՛9mTRR0d&N=wQK`M_`=,Oo0_>b1@πѺ0~h`L!hfX.p睊?6iM#ɺ$ʀb#+f1{D}~O3t;0Lƕ*nޱ}8m"v8ݔ"Y O%JLR2bpmqCsѬRvomt'3P^`q([ٙTE l[X&( wL7c~O\u wδfT7dS"1*oܵ6E 68V64yëdUN Xe]J"CZ|:֙Ç|Θa56KEglmKȝm.ܵ[WUܻ&:z,(uc5"^sÅ~ v_}q|UE5-s2@.G}4,U!>ѵP~cռۥI3 @Qm3uw`N.z9/0~cL ݠ Vǵ:Tͤ){7Ơ1֔Lܢ}rtk˜|#Geױ([8Z :8)qٟIC,r>IDH\9Ŗ=on\綉 I/b3\2GyO뛍ț(Nvx@|\Oed9HғW A_)4xRg;&_΂l< 1Uh:Y> &7߀[SUűÄU˧X}>J3nڷRvؘf>yU /a (XtUVp+kIO<w!ԛ=%#͐^4;soclz~j&\(&~۽4:`*4S)ls0&"-{Cl=>3ĊQ _ji[jh >r|5& 8g Dg:Rn:˖1h; ll*̦0=Lġ$eg]O'ۤWL"dj.-<ݫ83X]<Gјta¹_x(jRX*7-${Jh8fv%J4fͦhx_zg%`^(בV(~"[@zjߍ @gqrj,2b<TD#:bYZd{Ц iG;G{gm/0|݃QN<$CyIf^-l>mghs bt]L?IOR*\vp21u.|@NڦZ~gpјw*ZA ku.|{gBShRf-[9 Y]ZE_bLPE9we6u@ǜMTO U7=B!\b<&{ C]8uـQ~|Q|Ѝ@'^gJ(>vqqL㦠pfmcw9kr\2D,qK- ?ɐ"HdB9 7lc/̊,kHq9NQ1 6DI/yM ]1'k{qzΌ8al=͑=8KKF6OmN ^\kwڄ]2J7XΖE!O&=LZJ,V]{hK3s>ڡPSbH$ #@8͸8+Swd]ůmaq!aC oTLDqC5afoz9C~~ضZ/ç~+Ey{؜}i1B]Xl%PTR5q鳝j@KL+ճh:+{LpPs̤4:k˼uG7آ)BM L<f%h.uM犣S7v+:Fk6>$pXSf4޲9& A⼺M1@(zLzrҖ`IǼO)lj\Ĥ?\Vn=;.o0a׌s}񛨺yqMRK-q~y™䓞#-0Uh7McU'c!ǡM,8e9Ҿg-6!JƔPKpe4H(4TR8FֺlnyC3sHͬ {G:4g 蟥9e>goS2iDZ*3Ϊt2%4j57R =Vaxo=la7X / !(wSX\^)0#nmn_F6&o<Po.k&2a'EU#)* zSb9f,<71]A^^ۍ'W*z7R-In o"p1d벯xxEq7f4QeXӫiӈ1ORk|zh!+ Zmgԭ5EK wf%Cx.p8`lp@e]bH0$'Wsr}eKnB'"+piȖDVX\&l})DQWI#A8O]O/ml[k!J[pE jv kCTJ+%|Gڗ&+#jzt'l^KO7B՝JW#Xv2tڀ[vګu**>X [g;~i2 yFр| L#VR!@;Jaߋ)|`g'͌NؓXCLgYN=4Fr(Q@ַ 4#P>U'׳cnSF*6E=*[VZwm7 yi@Y|OqO|85MEHHۑ_eC{j#Bl,$,-y N'snAsQ԰M$1]/˦47p%D5:Eyw4g.y>'ܪCIbٍW0ؓ'Y4JΌEj"߼ 6\] >ڂ#8[*jXRL>Z[8# ;gmHI.R%H)\Sym 7{Eqn}kBi_fB )i8u' iw8LX#QnBmR\P8ўO5۪~ej)Kr)oc+A%Ҍ/'L p@ޓ[J{-q D+dV6JG{/X+폾 =iar_=M߈lv'! khLs5u%b큶X紹?Z ibhx٠PtJVsM7u7o'-<;:OlF,i%@:U^5 ~%LJH_\Hy%BX7L΅r%/~3z`+_`uᡜ}V{ x6YnJpUUa7xJc0{E:*&a%ѱ[b MK~8KimXU."NA䤢;Gr(3H[H;VIj.ESۈѤ܊~`aAl$j`mD |7pF1T`j_{I0@VKޅџ7LP yKӠ_Hb4bZbSA*$I/Td#sH\/0coLiS֙ו+G7xT'r(% 46yI:G$˻{Et}U5;yxuһb:ILiSc4]H(, !A~ף.\aL yѝV^xm,<b:dwKܚ{P2{UvqN-KD5"ĸone̶Y[|daP5DXWckgY+})(jYXn۫7#5;۴ZkC\>t-Klͮܨa"6B2Ǒ%[;+`n唀}z =x _(%z<.9(lZiH Z B{ rb(X, 1^ܵ[@H#&Czz<=a'bV\mIj:N>B7Z4߅:@d4Aji4bHft2S32CUZSsP4S+MUd #C!ҁȳd n$3(~ ^9'u_ ;_[¤T/# LWXٯGai}^`ZAء/פ+aPDH=?۶ ^waY=8䡖-4uݦǎdpqe-mIeQ"rl@q!Dce 8'%FrPzIڿpV({_<jG#tr=Ny!4z(N+ĸ)?,?j\f|Iڶ^ֳ(G,\8@pp`w 42Aݎ9j&W#2Vѣ_f$1u7Hh$ wdmĿ`$F^ q*?pL=120|9x{6/wPϋ/UE?@mjI.\UpSՒѤL'@䵨J-JTn?O7_ngk~lzG`6W~g Pڒ(TmufQ`1G|%9ʜLTYχQ2\8 K;) P l81ڄݵ`4\S'1ڒoʼa;WǬg|!l+JmPoӴ=&.e:Mۑ Ч6Bc =|7"H{G&o馠 M ᵢRc[0ZO"dWc [T$`-ĥ8k-SX'0 us~߁O=;[3j Ve X 7=Eո5SlDHNXȗJ>$(+7BNj"pk:b] Rg)+/"i8g^ĀnwsmGȰ$<@ePv=Xi#2?LS 8:KbG{femhS)싍v٨#fZ[PHAXCcXE^)14BkTIw7q cR`%ۄE ^sEeT\Ask~ Wxa`:ljǃ짋!ggӐaXhf ]x߸ʐZп?X!{IH'i&"~I}mT-9=4o N,EshyUo`Xl]w6eVM<~uJN@F,$)⤷;ߥ]Ȭƴ)_Kψhq khl!VQl/|br5^6Բu6HZlQhI$9si݂k)މ7/4nrMnPmҦ+NHv+S.!m_:dWC)}4}$GEoV|.#weceag$qo j 5'JO164 }l]i224깅c*ҿs4l䡡l!už R#a<^#SS+iCH}(%Z1ΐ[aTL(|ی݌4k%ljQmNlG`s7#xtE8H|dFQ ~|>mjfұ<9m oR=E1|y+Fq; /I遐lЇ ZQ+-,+oC-I,^jй)Yj+(~؋"~08Qӣ9y̳ s uGa yNa^H/-ύM.aJhNֻ!VLʢx,T #VR H,jq7֕ejΎb L YГ+3nnq)xx?Ӳ:1{YEY m[89ew1 o>99f/D Z?¨}XK3gQ:CAOVm&QLx=w6FrvF^fVG-iˆ3JnFy4sk(L'KM` lVUX:C$k]vWd׈1e E#+ Cxt-gʘ"^΀OWcF8)S bI\ҞY =S/P>u&eT㯶?8+Js_˨{aR_rO bs->9Dؠ0oAS 3g#5ktX3˗{g0Iq&#CL8Zס՞"( c']$L:LÉ[' h5;>I \M?",f%l縡.!X[t8K-F;/QʲA$:*6ޡ&0;}p)7] .- `)Z =|Ԯô o/! c&arO\s( 4 /ZBfZ- )A SЫ-aB،(^n0%k䷳vBD.Լ CT O8پd?*k<'ܛb Ik`<DqzYb\6+');|kiCmǻ)APQ'3ꅿ;}*@]22p@{H7r bl4oO}=8`C]Jcq5_EJTϪ{ܴS2Ւ@Xw^5Aw@sY:M줠׆ sPzx5MLvѠJЁj{9aJF1v)/U2$||8G)&uY= 31K3e|h#dZ3+i8{*bdS\\NG/ai YX [/I?GR 5dMբd)w2Aw5~ :oOL2>6RQ=B/ȼ`Ur '3s;H $L(+y1mp*o]+QքᣞY7hmN,jcK&BUi4t: jJ/zO>1+]ﺎ/xfbúi~2A49}!hxP_q)lO 6WKO$T$gJ O&ɥI`e *gƥ{"#5__8NCMμ,_w%{+5NJzS+.u@bEwŗx0첂Lxor25Z.8k\/GĿRU#4{ ,z\{ g!Huzl6z_A+32 #x꾱SQ' {0UQP 0Lf'W⿙m8oL_R S` )|[7[MHiHZT}Ɩ -`N sG7aw\MIJ,.wz]+CWV\ }-XOi7\gw9F{rmt:] 5Ci}Q9Z,4uDɂ,Z;(ߩdȳN0/Fz #n3^'F(t !Vz)!\¿NP"*;;Җњ{8ܛ84%͆^r.hO9S| d@YYf\>bmnGyξt3 r9@N.#oRj]ԥ֨05-^48=[P=~KToL3K1і5#䂝P6'h鼊}mG a@Wu)v;yp n/ eeM!rŢBrfEr@ rSl\}pgnk1ƥCZL|Q 3\Ed)"-I0MԂ\d2cl1w R<^>= C|"?M{N߅s,/7?= %g, 9&u"n~;d6_b*F.Zt$38+ b{JŐ}V!248w;׻sH oMi#* R__Nˌ3 g}.ZB5ܭmH)=LdZ܌atLD\rš,f4&B"x9z,>>=9"yfˆLд#b nB;b+Pb 'KD|Iuo/HIKwE׃hhD[n1ݻ˕qq7i^zVQF_]m[93SYK~5F'QW7bM*4=GrEls)UnG [ULSrWH7߾P & 3;+i<0ZӎṈUUj@t=& E/)%t:ilK:d=*̵͔51LutW3JxyiB(3;hrLIL{Ǎӓ x׹<˖lTUݷ&^2j&iK FzP ]6:؋G=RoMkG#$f?Yr1"cv8@gh̃q_^05U|%V\j[EI3$o{ivM0?eq~JtvY*PGmTf  _+96KM.rC7 㼂T"uc*z^[qf͑ 8^wRڈ;$3ly4O4x; yMځ0 @QFy֌_g )=ϛy#Nm+P8ipȑ,׵#Yb}6B9MͺYc:xI^S-k|qM,Jˆ(Ts? v>q't`A{:?Ǽ(o+DKw,sK03:Bldgt0iuvi1Y:26mLȗ- _XW\V3.LqJ8VXrf ^'l^h>-sm8)UxTJhyO;EOGm=4qXDPϹ+P 6Q.F疯ʾa:uJɺJ_;gm Mˬ|Qi8L_  >!TGNORP孩#OevW*ADH!\62;4=O#/=E[ 6N?S,.iAVEe u'uVz`@]c1kuʢI#yN\3Or$W;ͯi>(G oՇ!;ޭ'q-Co?Ռh%FYֵuX1r?~I8{X `BaHWu1a)F?6aHFi8 EkI.U}/Z/6A?6O+⌉~PRCr*#$ذZd>Lo4^](B&~ʋBH*:n`G2O{Vzֹ=ww1h]k"ğt+OT:Gd>Iw!@_g \psr| pg1a1[&`|Ԍkq#&th!8CYC~ziSJ{Ob~} >q{(UԺ6YPu> |o.0 Np3, ¯bJ薝XmB+.cp"u<]XC#بֈ)BT12Dv^*|>e9c(ipaR),v5}&ALt$%׽9b fh(!{甓Sߩr 0Q}Tz-C^2Q0ZZvY9XyazMQ>\a>?.;OלmTuUNar86psL禁cvx"*r0u=2 agF/Y-JZBmF]x߫ѶlRr7Ub#;:pW:^;9CPORn" aOeYAz!0:͂Þqimw j}Ee<x2pίo@.r];. $ tk. Ogaa P!-,i:_1<Cdּ9'u!#s2.;l +s&kkv{A*qʘ԰CزZ U@N.OH^O:}UHvےL9Ihܰ ),a_ ߎtB:Crکʴ;r8˳>ĩ>: W.zH`Zo ]-P39rdZ ز&?~07 '/|!IA$YqX4+5x]stF#sE$n#&c,eSq'V),(3Sen<#;.#T|û߾&YRz%5X&=HV-5,'?TxVxm??mb5~e[4MSÇELjTR?r6W՛C^,=ٕn}?~ 3C_qBSt(j^;TfpݓJ%9jbc&(hK=1esKVcqFg = +ǞWO^# w2zc;y.obKoIޜdAw=2Y-(ٗY=W\#AI>cr=yw_PP2Ǒ".*kojd]>}Azʼnfm1?'aB֑v!+Z 2RPaxjq i_p=%ߝ̈NO+ЄްfXkz npKI^'qˤ ؠBeOf*ЊU7~ 7WWG7ȄU<-*  顁ͼZsGEtINLЙ7GPcoI%zWx*N++ *L` x;?a3`K[lxo{ӂtre\Mp^N5fcof^Z@_N`rQawFKh}ߣRENP =HUaϧArvO@i 6yXLnw5ff|oM˄$c%7Tjb x(Lt>mv09: 4QCzx\\Zh\4(sH_3T_-4)X=\MG^;r)A .4Evt9ZS_Jɜ%CX1B0 kw8jq bشVRONe솹b7Ik,XNy5D`H7DzP+\h;9kpu+Z=Fz[@sg}ԊGʿsKQ߰n0!=\lV}R4 Fl۽+_Xt^7# ?:q(RkuݱD@mQf3%ʍ<(V?wƄ,ܯp{aȑ!}AgVWgl,̿ {]Q~==#jvVߦ~_ Xj>ě`ps'(&!i;;}ZCj̮™f CO(\*!khR؃R*& v^|B߽/jɈmTEѩ|LJ3 OlFm;<<ݰ!3g>ڬ%5_`=Esr$Aq@]A.%^aAxh$ 4|?Ḩ *$99=bIZ x.ro'FC;$ <4Of2oDu63BW6(DOi*R-,yS})UvM>Mlv&Vx׍)]?|>5w)mICoVF.> R{K=1}b$]"ͭNDLJPM"e'N萬ίg':-!)KT;YQG^7^^ Kaކ  {"?\ (3va 0J'vFt(t!d`*dk)B k N-j Leyv~ݏhu ?6 qzt+!-ncT$נWdi+7^$0L"xe$"n,-51&HGl%h] SvG_Q%1p"ʇ5G?0&JՌ"@LR˜Q u!!tC0Ӎ62RqP, }rS&!ENЮ?a/^ăԍ=.j>.!),/\F"3C eM}P՝9ioFVu黄ӷ6x2MD*>7VմҜilO0摚3 A<6BytAc+ t{&jbxȒH=ʡAk{)ӅI27DwA78QtJ%O9_Be^8w]`^ 69Hc9ڝKS4֔Ml`M|a9Tl \Byi* ܗ:cfZOStX8?¶ÉXsp!W;Q2$]Q cGc]"ǥԈ"s'9@[/883ͱ%'?/a-~<sr|ۊN: jJfEqEg2G6GG * kdXOoϤDb[@*|/ u!Ko-h;q(YD금 \f3SdU ]Ad;R)@y4˅9T8;NKz">뎪 t&UX{^]#=rZB{8-=|1dx7Ha2.]ʁلKI[O,BYz W*1_t뤚="1nLaux#)1G;̽{9xLE}РyiV5cmTt|Uisr7 ""$^b-k6W7&[1:ayRRߋˉ)|2Z#aYvO鐶}Rf&a~VyGlVT1V`C٘o]4XqҖ&G䐻Ĝ^t6]_Ѧ4;ܲqr`m{p+[|ez5ađR9Pl{)ƣj<geI (FdD58Lv[3wVes[DX#Btu?VwIo<(ҁ1#o̩8vIet b L&hV%TvuQ )הcȲ9zcNoP|mGKncii-`QMzW)W }p½sCTV'YЂZ7%LHw6];«Kt3gP_lYr\//UrC>m $;*C9A2>(6P3Tzq|/&pl+TP-D$B .L^J|rmcj8 d4^;Hۑ4S9}DdQ( * HrQ`T]$ zZMɃ><*=֔>ï 7&-O;}J+ɶ}jd =Ћѽ8Zao{Q=)bpz֭xdI }TIl<;>]Psݻ }ZM.G>R&).^yYѨo_qSV"}Fv1b6wiC%D6'ԟDYiPE?.'N D彚S +YGLjmEp~hU5Wnʼn#;y(sA4 F%igB@J1:2x.VQHès4|4NW*W5~Ŕ!Ƃk3(DwqyQ?8`58k(_hx7XKXjc 6-` ii100~(*j-U&eG6L7R .ї;$VK> J6[Bd0ߙ28miwœ%?'לݔ0 &!$CJx@rrɿΞ.`q<ң:{Jj$xmwQ@8M'…^s4 p`"Z_ &;XTa {ύZl2G,;,w5$VXSͿ0&!v#62;E>IjU7NJ>N}{ q="qՂ',Hr?8|Y_u(3D?(fCP H;v.JZ 0)(F}MmS~4  _N3~-ܤt!T"Q@Z/Ћ#c_^Uh=p[քؙX+KY9b6D-Pkh*=RlDqa2V;! d,5 Y{ ަ)#:zU]p2y@}:30~x#4qw>U bP'c̍>#k }Re^mBy_r xeI\/m+jXzČh'RFQ89:ZIA'tp_؝nnq3<# ^YMonAq-yIBuorN(ϣ9ߞT."$@Bz]YP+LHƮa8(ǁkUQ'wNZw%Fk݂&eL#j$.zyoF=fݕ]/_H>c˰q [jE6]Je »@-I̞ 1~<lwyp`nA̙TLa{}.w#s&tLh% L"7%4j75k⽒|qԬ+}߄r5P1?AmiE9D-R{#/ѵҩZfҤ2ԱA(^.--N jI~txMZh Hv+=/Yj5] v)a\c TsS\S^gzS Rj8_մ{e')XpXOۿGw+Eipq fZD@}1AKYGs : 4-Oq$ꋭU!gD.!~ںS Į(AFQn*)0XrťYhY[ʛIdP_9)y7vj0U8ǗTd]b-jqįK /Fa:Y̛j܉wt>csHJkQη8\ܻ,!JDpxpD UL2++p]}uڝb D Og@`,ӡl+1IwO\|s!, ;s,\XvOqɣ7|3pIr>K0c"])2gQn8Ѯ[hiO iF? 81n]; 36RFd%E !1 tB{A`QJΙ߰l1tMI/ogo\ŸQl ]:h_=6gI>.Pr|V.~}O ?1Xͼcg`b+8Fg?hbT4%Bp:2y7 D)lcg''-u-Bŕ0tA3Iy)R';ҴT"KG{61*5LLcXgyE[=|t3G~U"45#!GF)0<"4G> >ˠF[+=7?4`cŒ1.A 9.¯lZ} u$+M]hGI->,cL170 9DNQ8xZ۹./X1/?v lIAWk*L^z>tkV1I5]c4-Rx;1>62CSl_oN:\5!')7 h1JA@O^U/==| 7#.Wa8K|<ɜ#Uh1@ ɦnެ&s’5ȏbAo`h]P/;V4ᦔ3H*IV)  94aT wX pp[d(WC B &o se dZ?"#[wt5Eu3ғ KTEeFkReh)ߎ(Y1.?{hGY{]ё$$TTϥf_Ɣa- 2+Ѷ4M}pQ= ?.Xcp`gt[~z\D 0eßJyRV@~}+{s!$A̛n7 ( Wq5a#=s./{,e۶@BKEBx RcG3wL/z#W)4d"STD? @ws^ǩ>e(7gmc/K`&mm u@.)f)@6uuVg&A m 4rG|Bgg币~fѢMG ItT`ʰ+[%"}9Hj],ʩ!O؊ah38s7Q{p/#JՖ:3:ˤ D4|lW^9)2nH2c T$i>~k~:ީӔ6hO k3D+zvGyXyݢpZoLiD;ΓZ 3ﺺ.m''ל IJP.%|L-dihw3qOpPt"/"}Jhi K5={[{ǓhD13#O+ߊ>7(mmayH2Q~%̵+XS\WzSE{I&Ԣ tstu֑2` :}ZtcǺBFU2UPY@ܥ'dsuu$&5dO_b߳g/ Gqt4CZh0v@?raާkI5Iʬa`#ǣXciGc9ZlAS+k{,#ĩЭG_Nۨ~@K6eT9*, jJ8 w:bfŠYgn:~ iJ\ 9.d\DFl] U9&u 1sn9`iM=Jfǧm?Pٗa|;Ҏ-P5h9,환b`nah}nL^ޜ#Z\ۙ*fXYhp2.bP"F^ BQR2D=6 97Ʉ>F@^{#Jmpo֩Ҍyƽ0k%SFJ~3r-0r5: Gyj Ӏ38bbyՃr1J=Pjmv*ϑDk2rj3n|sѭΏ:&Wb/Hvi[Cەكgo#tc!2 p*3n u=*iCx?yVM1: XS=Aq;_)eeY07uS@xHsfgFZQ9Dj:P "TJϛ/qae 19"k% ߧ[0{#*V1=ɋ(qG# ുFBP 7∳{ zҶ5_T3ڛ>O433B^ЌT=8H~.јf:@ḪEj:c?U\M¢tR:ׯU,0)*Z]ɫO1E>j?޾Nu7_ő\O)y+7i .ak]|3r$6Ajh wy{Na(8+d7.uB:̏7=XDhudNH#zOZڍ/gBR\[qV/}o%*_U11 ;d9=T"eyF^&@~~אkҍD:gdz].6i`kTjQ(F+x 9lfEH RnGQ3tR֔2^GQH(!8Hҳ J/l.kP<P}VI1=$u ,%Ӝ8'T5qӋ7B 3v;cut&($ 't VJֵTgߊw3cG+?'D&,('3܍Feku&8Z5%& ]H.ˬ_=1ҿ8$kqܞ }UH[oŻ_F7]&!Zda3XMT3H1)FoX*LG8Źok~/{lv,cA?"dq0V=mP> n+a?\)(6НeO׈>o_nL;`h^oiV`xKzf$Ya}B:Ј ZL'ӌ# # 'cWSr`#e+@~B%%ip(R'tP9v^[C8;yX6DC%44ijks}8ufUi )A:]h⣠(>C6  Dl?Hۍ.'9LxeO:$2Z%.Ӄ؆i !>L .{Sg덧6]쬠)VSߓR "}@*'`&ȡȉO)GՖ樢d @$͒ Ϯ.&y S#IdV|:a|=T* M8q)Q.yTD7W~FeM}9*FYд+_?sl U" Ot:w?s5\u@$IZ^( `9&|9O>NW'3O(:#4aٍx@[% 5Ӊ9CHC|Htˀc`}@w n8xJ|([H.gvX>%3[Fj&2 M ÅH@qkvߝҏ.l*/ͩ)CsY+$ 2#ӢTʩ)b]Mxa:oU?|>x CS3}ޭq$NQhؿ%aXf@HiC]fstGFMRkp,J<,J)>&ە=Pgqzahb7}7dT"**S&s#1~A8]4$b(l6D滞( _($m_S zovEwHU 6>D]Ê#i Տh1Ga4vV៴PSA{Fq>9>JV f$ȖtK*n·889K/2 eThAYV|Lڇ9f"_Q!S-Ȩw@_sg;^$ǎt 3n*ƪw[BΣ;ۜ_̈́}x3Y|r/*^}f ɀ2׏Y.?n-~_'6EZ@YhJ>^JLUTmُ$@.n*-# E9Fil t6SXM$A6X kZXGMXWAxio۰=c]DLpGW<7ޫ.6eRrpYyЊI!FS#,5 d, I9Ԏ3b[>Lvx 9`o2gz 2vX+h%N J|C Z蔕z+$oS.6l;0Et54%SK|>?9^/pYȏqeև4w/\Mڛ}*l_ݠgI YYSw-w["Rje[$U^H .wfspx%aqGV9]jP1˕B  m 'Rkz- +J>:ipӞ~DLCS*&Q ~YDݰ: 5~̓HI:xO&d9odh/~4|\4r89Hy4-d"7ߎfz}Z<7M[8 QBLnCuC`)̱ǧA((M nJ4ϒv<b=5 4)n eb?9>/YDzn(<[HӨtb74GO<#٢5K۽4kt18Ymt3X!bh~1 Qz|&8$re'3͗YɹF|%} ^{_/+{ͤq1|OvSER:"(mAuA?qOLݨ h0%8lWN.2{?TzW, #NW1NX`ol>#bwyEAOT]<Ë{fwI9grDw'jSo:"v'q7H,ssD4>-/D@k5ïn_ ů,E WcKBC>xΗmE7;O̬$a[»BYvPk01-ԸI[@ؕH!d Bqui_ri^5 Wni9u:<vO@UU`.ߥB'l=x65O7`| Y?R("g&޷"?P$׿zC&79|l)k^(W潚MGDUW¸F8AhF.M,*j!g( fȱb$R9ZT ]eNҿ z 1ѳVsi2f#aeGrfzmp}t6p}]9>.fŃf5⹽_6{bN}󝲀j)\sE8z]Ꭲ3DlVrY97w?٣isq1CJq_v$^*vE_}~7/9׆ѯЋVHCя}1q/Bt.P_[dLQ;< :MZTok*EomA` }Eշmj~ffDv>h跿,+m!`]uC:*(bûzzՍݲ]̤yZxr.N=1vaaD a{w{(G=0Ѹ <w=\15|xvk+2"بTEVUI`o/2RQK'P')L/$ŅAyz ۯHǦQ ;lb~E6tTEQ9;-R1tߢKB; : "\ Wo:&IY"I4%T,jIN#Xq\+6K8)vtTfd.0kހīb YvuEX`w'5d p j`,+E\mV sB8/E!AXWs0 U1熩#b']XuFQokzJRB٩, #ai3ӷw /;\8]>VRxbTNUlOPlw ̀`M@|c/=^W!gl&=3Z*RݍAP׮111{mf81)PfBnw%-<)nQj$PIp2}ZkE{%چCrr<?5NaٜI f8oo p)6~x+0v3^;{_2_ i6d0ݏ$#뷉!ou՛_[}տ(k)Eʧ(㏱ wZ9Ⓒ'eo N 54[ԥ3d7AB_ytg,N4 ޹O swW"u7֓fԀ LF%i山B?wpš_t][&]^ W607T8? NMc Y }o8TfF.0o+"+ CIJ2Jg3 nǪpI4 ~p:okk!HI*zrHRt܆YnvcvX 7Bz1ê?21kvc # w"1?b  ˵ (q7V"cl=;hg@K ǚƯ ejا88 `sCS!7ZGuN`m%"~SMgVէ+ m[GoϞH>poGXs"~NnVܘv`cӗh*%Bȑ~L ncݓL *$PH" qM? 0q 2JUp5A ov.ߴq&-ݲTYLhlQ4mgv6!^\:o;Cմm_y&;_Q;}BϻNCa0UGu./K>c`8i4xV{{*HD^⡛Q${QSƧ#PH(xPlhsEƓu j;l,$gЌ}xtоstoOeyIf9 3xqfAgfpҳ[DT:$=xq>uY]Xz(,ůRޠx H|Ҷjsy;j. 4$ )A3xO8- fT?mV%v֋Tm(|'F#H4-os#y^>9!<{_E8٧Uw>7SdXu 1PM릮TEE:@1)E,"#gᐍtڿ);SuGޝQjaf$8KY4? <-6U$]>Xt֬O(p܌ uhwI(]#W)6܁@:'.ܣиn^Ƨzދ%f+إb+?ez+I;,U|ghBI_Kwn=SkIOo@6J] P g#G> eA6IqQek,mڝw|M"st7zUsvZT\w3q[QLH)hId ZIi{ ʴ-3`G/vZ$oNy܊fjC,k TQ=!Tki&j T+IG< ] mcAD\Bч]i&?sL  IS=7Mf=!)nf7 e:6w6LpXD*l\K+b6`4 بq0Fn[Ͽ%xi>m^j[s=a"YY#GM;M*4E Y mOv(w3>_Ya:+Pn> ,g׻$`<5OML7]|N#>[Ec1rh$ ȊD[Z ?KXDsP{>AxM}gmO.jSdS+;RG q)әOr\RK[#F= Gspd`A7W9ankɕ{f2wzI3Ajh^*)5 ޒ _ euYoMIo: kJD˦ؤENp/0jyx BNjYԉU2@Ohs\AIV͓1ERpk5-b NЏkOKgwurlWyc X6v}S}|6QjV~y,K7# p kXf/ FvA K̘kG'wgk3rJC9WjK `kmdtЊ6*j9B [+pUn~eBZϾX]ƙ '%pٗ*m"G_2v9rfO|"/ e -X~*UGV^+:~.ݾ_Z^ڬx!oJ)릍O⨑O|mIxr/V W7NƁO]7[X?q2B/m.y$X]^ ڮ؇idJ=+-EI $p1'!?LCp%Qo4(;6"] H~4p.8`ޒ[{uwg ooO;U-~}ޤFp*O{3qqV곺’s {ڞfU}QYyK"#[NYm\⏛Zg" , F?Lh%_PS7ꨤ9;G5;}%3еtQ).ܵ@NNkǶhF؄Lsp:=oyΦx>%(RE#P/NH*誰Dw7I^m4~=`d0;> TJ,=8ge]&ԝLO0mT&7?V ݾGWYrq5lxDE^KY喁Y/B2@31á3䇍3L.3:]vG#:A%Yyh=U cwS_))(r,T&3 RQ5rJ߃Xɲ=71Ed"$g9S5F(ӕWK+lK/6 .]ҡ|/6UTCrRԑ}TzB*ނ?U9SsSGwݵ1dɶ᩸M0J$^(x3$L='z6/T~5lEAk˳t)/fHX3 ;q#x6s ;骃8U:|_AS"_;i,|آf>gVbDD: 58W,  -Fm1Ģy-j%ESPœH:ܐ:=$#Y0+$m*usӁVc9iƒ#r+7C,!z,[HEJd;ˋ\,0Q$0_G2=. #)SzsW'Y_Sf_)<$MdgrÝ48C9bU_`$=xJ3p۰8Z 4Yܐ`=g'/%_Qdmpo$HR"jVxモ2HGRϷj n|ͩCriԯ*B[4~eM玣}3~-JylN%Jto0< MiE *x);dJR + ӈv=m@l=~VRI4kw'&К$*cWI{[Nq!QءJ*7Ù\5(0wv34`u JҺdDC\p܁4z3ꪒM .90K*uvԯY_ 5ӛ|vn C8R?\b\xbc8'I߮=x|V'ASE!8|Y_ؾ-Pq !Fka/E@ȡ,xacrk(g\FW:qnE3)oAc?Ie5>tVCkE|ٽF=ٸ_raV6 d6ҁ]_}4/`wSY1:qDPRRbEcJzYp; bFk jbRU*&K1Can all^2i5%ַti5aŭˢ>]| vd6Xy+|Ϊ Hfa^^sί,^Z* (yBYV'4wd?Z#e97o :Psn"+;kSac zsFDE C]=+.c_C쓭-X5sq9 j{r +[s+h=bBכHgx1 z.lmH9ǝ eDΓImKuu C= [B3 {\ %-c]x @e㿏2wǼg5|b|j>3s]&= hO3aNdÔq?ɛV/p#M()\b[,)S U]=kD?s)Md7眖 ,}5k Q>s| ^"%B1x#$,@0M答 f>7;mTiXXg޵yH(!W=  ۜrL0[쫍ʬ'-R6D ۬/FvoD:ѡ^T x )6|8pJa?,m`̚k.R^aUݚ %imƥ#6ɺҠI1ɻcRY˻J+b4T׫i{o d!?Hd Q7m  F@ӏ|km?L#(gY Uj$37R,oO(tbtCNdC&c}q5a]q8rcFꉓ:\zo{-)% c^a^ct*s.]K1 wCd,8`*U2q~rKf;$9FJoХ9wW(JFY)5u39Ρs>N2%VK[#ѩee3~* }]VeZ7ܹv XrZv!!Q} /vfYn/J(pl`VԒ / ǘ k/ZB+/4FqB{nxTīǽ,da''O b&W(Hg`CImG B#b0z '{TMq[ro;^PoW`I فYF9: <\7~{Tth`.UUz'K5_ zIzt vr~$հdMJ4fg1"jY)FJ9B^ot܈k}}%c ^ju غ"zwty~aj>~ ┧+y3py56d3d!ɀ$O/vRRoOEO&؞n]-^T<3S7QtCuY4}zˎ!{^%ΚK9Yf')-Jܼ2onh9F!9pf(iDIXzqdv,݆jA  \$}{ΔH9&ЦY=,I}K.iQN:R[dYGe]%=[Jk?E^&B6yCZK_RT'n=}T{V`WhIJMT8h%츿~ m(%m l)*-rH_w;q-eUࠔ9}^;OeC#YMئ<2Sf埤?0y~օ~\!o1 0t(V [ixf>37슪J寅|3\yZfUknyp?uYL0/x/ZCxZi޺lyWT6,P~PVA*~3|i5Fe#o' /;p_iM$~N=\tcV*oEM\@CT3$R'Qj0dFYw,Jl#쁁#KRB\[PCLmJI4Vm4 `کsMMbea#vaBI@jh]ݼr_P\aރ׫Ǔ͢\Z ? 7~r)~ D$;ikzTb)7$ U6Ir*v3h7(e{wwG9!_ H #vgiWe录`:2 Xџ0'@F [GYtw0U]ӵT#e ;)zhh2!ӇgAVb`PX}_ Ugrhb$#Ē[!;}fk'n/D)XH,^S my92Je6Üo?5O$s2ҋGCJM?ն3g6 QM'sBHFi >3brc*R!+1t{:F Cѿ}*BaHV?% *:_-c hLM%쪧6Xfs.\Q<.Ŀ2>Eꒂ(nGu!ܲ2 UЪI 5p/jNQI)oxW:0[Aqz_Vv\P%0U[/]cVv*C3H0یD/*Z>$ }[;)v@ @4Y7\?R)9T^_'Jru$vjv7yw-Y#a`"v;[ݰWc4%(,)YV̱r\]\0/j<[Ls].D/k 0)U^j~˽a60Ws<'-ҭ۫F 0ٱS!_Al!M4׎TK6 @EW|'r65(]%`16g GO'=k= Ue{_n^Ǟ}ZG{a'Nc?H a{%g="Xz^r!_#50ݴ,J̩AjsG7Ɠ$ssB6,U/C@dx*VMj~[nP3ۥ*ē@̲~Ďq'߻K@yj8օK^9q[_`z'KyyRŇa gtRm0GEB4f!k*C)Km{awrY$0eȦ̡9^{z8m bu; iSohc@*Vek}ȚraS1mKw;Lx$mDeSE=7FU8I/mgcd)K:Y7EY7}F-NvpbQ#~EJg3Vmg=lts(aYća"_H0G%K$Y:Z,ΉoUtQ#|xG:E&kmŋF09#j$ny -H;[HLC#=HɆT!sLzkI)2T3f)!_x)oЦ9M?Zkbxn*CZs'AWIOGRn [Hŋ L?tBČ'Fz6g5魎'';3$7`hCYU柯(/ ^|v= G4#6f&"a_d\4$H%gEʊ8:s\il(vdR{x;OOJIpgV[~F}@DlN@{L^w9Z$xeopQ Ϗ}nc(^G׀GTѺ1ٕx'jin~C! Qs=[ ܊[)M -=5>˛c7plgJ"nA8 <)mo&$GdvG@&Ph<2ڐ`jrF| U,CϠcEs 穜%Q &_:m9`y :xP׺"E{K\->{`;Uc/ QkGR<{@ZWtX9~9aK}Ec836H0k*$55Ax=I8%W6Vꕡ%6ːL{BT}8' t6ƵHE_VKc9[p-Mi8UIcИz48?SݰTjj"Y,Jl.7,8wBSTjw[ LQA 9Yj+0:8֐0PCSs4R0!עaΧ.֎/0=kyw@gS =K򬯊* o޴ =^Ds39}1R;z^b*~A/f̅l7N/#\j$Fx?ũC !s MqWFCW$ LVɆnzcbÛ:Ghi3V/")e$ yP!ݨԂW] /c,9@c)IEThRMga#єkAdMu>SEQI ?==(;y0(fKSx7 Ϙl44{f4;& $ל4#=)파iȶ鑫erB".Yحkiy)/֍$%|K ^C0bA)Bnd 0~ ՒW!"&IǐcnYqxVL hl/TФ),hƘ[TUʍ)Ț9ZaAxv4c=gu3RI_BOXXġQ|ݭ-NWˌnrϔ8>J ?eQM~;Ds>P2܄a 6ǣ酙꯸2s8}(:c-8ƕxEO ,1lr!Io"DԤAAK9;`H:.v`4˒`LN\IN=I0;-n˰YEYFA997fENQGKa ?zAq5۫c؟s X6Aҵdc."=DaDQ.ZiUݧpRC:0x Q-7g hzI,pjm 4Hm0 5Ĺ{o^^BT5YsSYԠ!Hiwb)W!2[,>8Kz.*V4:Cr6lWFpUnGލyw<p) ʳElzf*D8cU8"׆ޱ`L=9h9hwC. 6y z[;"N,>s@KUb{@.fAU|ڣsHj3i{~+x ]\u;~UnAWjdsfo~{*Tdk0 *3YݚkmJlL$$cYt[/}څ-:ȳg ?=؎EE#eƾX5t݈ޝ EVoioL7Deh:3ǚ_82 9xA[/Pއ{J'xW;u8*cK*ܭq֌"(4G#A%5Ni%4VF0CǠmֵJ^|UEvZUZmUvswuPD;$ y*·\HMw2ZddMhͽ\M쵘wCu v Z-Sgנ8T+ ?X8؜SkaN߉wN9mre4HEW\A'(lg16:?1R<k 7c C~C&,R> C"c{3tpHd\âc:죏[ sͫmp.ݹ*/l?&KvS[,H[eA )m}5O-$w&aaϖ@#ZmPrM BtjՉ|OY4O !5D'`RT:wA5FݛFgJYke3=i \FgВ٨g!w :'en?țMB&ͽ? lY(we|s)U{Cc +RЧxtƀt &}HݙTY0֨x?@_G^9c{ը@B ":9Z! =`ӌ&B˺GmB]["2y!3w%AR&leȮnї@ ijux4m y:s67F0\1HYzfDl"P=d THZݫK-lQHf`!>&K䤓P)~h=Y>K"G2Qaٚ3' 5DbD/ (Ie<K>P".Z?clTJl3aڴ!3p {w8IӞ ІfЫ56O}s<R*b@0 ũHא$%d. >hEl\eX&ty!}K8;NbGu3-\ehְ q%gtEm[Z4as.Fe=VTV‹d a[nq-OK#5^C+"~L+~]4sl*U=/oM"E]QEΝ3 h4mq-X,ceq;O,hj~Ol6nH k  /֑Ut{ӹ!m[^p>d5M뎴1d0WA9J_0`b 82;JQ-_4B-`&r̹ 3F $j0$.5f}T\]?ME@R#I3Lg¶fip'ab 7[L[$XEЎKR":{Ȼ)ƿُߩ$! TD%z c9P[x<kkȾ nWhBefk}a.LIfIw$mt6OuYP p%笗Z(l&ɵ66jBR"ݛبN)Q; RC6.D #{OF{C{d9GC%0.J+B;T&FЊnLVƕ1NyY m*r)[޲hJ){V[C[w &?3l@瑋T3`]#g;["åYE;>M8u3YxlqՓZ@xs=g|5frCء/?9X?s u 'Hk ת6LP}u*KWx^x\Րabਸ਼^X gݛsedfXRLJ g~(xv} !1?|EvSnWnTF*"d&Jpo' ?ONNӜU`8JDa")wR:ij; "@.YO~On߁b3 7e]l%8y߇l(BIrMNFH⽤y곑T2bn,I[LhU9j~3fCb> G%ҏ7,5:Po*TvScB?pgI+K \tfbW|ڔa7G6b%Dٓ_!g=~}kх D,:v79ίkk&b*n2?ɥLC?\S{U(1O=J-_!n6Ngli9Ga&a,ԅ{|YwqFJueټT9 J- =ex5㫓bqીM MZ=N$g_J2ϫJ% S(E7Vgܝ}"?O/BBl!(zjJF푘F`@"#?Xa7)7T-BP:Oi*61c='qh? bu0nl'U0N^XP./µ%r Q9Fl?^BFmہ`8n@*͚  %raCka4-вO3vIv x>2*bsW@8k Fp "RKPg "k _ΓoPWz`7]j ^A  5Wyi"ruѨ~~0]dtѻ}D\FFԆWGnͤ)t rF$2e QGK[0?|ZA໭> lypwZ5pcŤ kWvr ʡ`- rT"[DrVB߼J:y΢ݙ-W^Yٓӑ3tSწ] LV9{QWtaz ;\4cXUl |qqɅs@ҹ$XJw5`HRlVMa+yU#w\hW= *"KRsxZ IhqQߟԼ Zk'8^F>w!\m,s$/K},zVuxŚλRycVu!pu>B[m @A]ι3cuh+Y =DdV}uj8wV⋱CHy]Y2OՑU^*C\;EyҸHN4@z ojZĴw'J)Sa%qߑh:߁@x\IH*ԝYؓ2ƙQսeE+*f ުhtbS/Au_(d7HJCO)L7L5߀bġ6e U}GE -Lu[S !{ ΅:i^yL DGSTK5sؒ# ~~k3- hϡ:V9865a]slzC,R_P,c_3zASJ,ojj ۫4t?F`K?3?dQ?5jQ\ o v!! — T5 v,B|oѽ`l5>L-qT٢@F;-67 M]AM݄!#U}TSDGGjwK'e\Rhn<zŚIKVg%Th٢UgpPf(v)M腀:;D<ޅ]4>ҐAבlz*[GBy¤K[~TE%sl3+S#.;~\(YGkBd9Ά?DiRJf0TK,@RZ[$\{^q-?v;+/e>q : gBH'5xWnπOpg)Xy1n"h>6kqI' BgvGU )YH~=hߺûG`>=@)7, Ԅ fУ ]/l$^:Cc:,jn s*4ApnF(yHsL#@P*#F,y58 $2O0U? qrgFj&)$߂.=ceѦolIhЦQ]I;TU<>ۀ!/T.%D Θ x&ղ1kkN;5({*e%{2;Zw:c֥hL fAM+J巬BSխ3HU?%@K#?v/{ jop]")+ji)kFދ{A??xQielk.竫DakcC8,UuyPzϛ7mb^ @Ɨ %~kLwhkRbm&3ЏNG|Y@J@RA$pc#+A]2'׳qzSa~66tL0ψlG58O~Kef[*\!FLhQ#|w+):A8>Οy"d1n54Y'+:ݧLyJIw^Mp|ow( 6v'*Zk!pAÜ,+Py l׌R؏ZuUށsH y +Xʾ$%$aS|^tlmmN} ϵ1I*}9&1[+: yx0ap,@yV^\=wz<ͷJ+ůH;S$?3J]nOˀㅋb m޽p">Gp 0cuNWO(3 x"ܸ1c&4qxN17OBT8VP}hG[gw w%ձ+xH5aŢD0)HAPGvA qd'ˤU0pT lbi(% _چ{kOK{*\^] Knw/a$dӽ|tfpmCƄgaaUk?گ?r`Np Nwd":nؤ߲ZjFa5]c^ UOHcʏW~ cAfvP6PYbcRUz^;l{uBUFv73n")ELu5Yu˝Qa)EL_HYLg{=Xnmbz {D}O*xd.vZ7oln@Gט]o8ɈӸz.O ~6|Nlb1hq" L'{DJƂ9q5a2I x4itCTJd [5L7.fwtGV:Yey&X;!0n؃CEkGq<أZ C=`ю|[:q+|N>/پ,R˚gÎ2Dbb3[ 5xB/9XLX&}mXD5]iW{`z6qѧh3qc)߇\w b2^-% O sffRDT/]pSvn@)E?Y2aޛqF>Ws|, ma8߮ZIY!" X k45NrS$!1Iy{Fщ(n,Nr02xLhJaTֻHt_RլK=:>U#@bRnv,v 䩯زآ{ @SRȃb V}oeE.Ȫٴ#!ުg3xAe[rvZn5sl]y"=- Ü ?4kl$f#4E =LЕX- wim!&-h5N^ ERV >y}7BOb (oTulL*ӚpeLlxbi IUn=5,؉R8O(Zi~{.& _Ky0s!Rlb Nb9L{᪷r; L8 an/ VUOw{5Dl!:WQej*o!~|% 7Js&F$I?ڒz=IQ, 1FĄ}O)PR׼K:HrD %G/LO2so|8i8%U8{\ht}$m ?|=n"PT''"ƶXM\OQuK}N?M>P t\h]!}z׈w&cOe9'$?s9цǩ6]!GND]R ȕMR3r#&g" C=Y *6ea?#=847 `!вsqsoK <QK*7l TSrT_ S~ю 5)t1+kN5|DZN2f]"H7ּb3\67da7IrNʴY@;yz s&,~yʦ @Bj`W@1?&#OV]`ɝO?nE-|Kާ)Zul5fy7a5( w-@@ߊʻYU&X쩎ZMK:v4" K5KrCvLK)֋ޅeW %DtW[9g-=tqK/v ~1u!u>n? tsQE75xC`[+jA?(N>47ND[L(Uݕ0o bxx@]C7EX';P:]`sN}t_ޟ)`t%F6覚y|rivAd0$.L+S?/;j @Ŭ2bAGbd"* ٝI/j}Udv`EM)(xfz8} 8jxt*Qk1P3daI= I\HdD,K\DCYV]^ɿplU󄲥LoZm9 =Fv#ʹ U512aff|;QL E1G.&_?džL&(zkuzyƐJ"ȍ'Do\.b+IMshRƙ!~d7ˮ]kS!?8kߺ=y& ȢhFR]?ܺ%Ǫ?T1Iv=|VmqF`vk^[ ٳAE7 qc<W%vos5*sf/I|¥U [lN!1tB`9 ߛ[+-¡֛"Ju} K'nBx΄ /!՞Ak7;0k閷Jw( g*k+!¨*g#1ɅDWw$C!tTQyj.BHｪϚޗi\=N֯[`EPRn;fCq<@jw 1>-Xпv̟wZGbh ˾~³ ͣ/3|IGe{g<3$K7~v|glM=gx%6V<70L8b|"1LHoԯ pKBa[ЎJs"OuRTqW 鉵(J= HDٿGϰu[<<}&bNOm~q;FzL(YWpS7ɝ֞Z MƵSPu*9Ů<_zj8An9PʖaFM8Ex[pk. =V!p#zH9#7m [j ikn֩o3VND}"6'|| Ѝjj-:VɰxiƃӱUaxkϪ^ΥY+u8ZҵMlV؝kz*H?*ȅvP$,pYϛs﫚2X~L I AtQ^_5gGBMzGX= CK8*>A8.4#`|OR )7}>rEUBQr^04/rsƵF;”?mA)?9Кi)i8Q~ [+C34G֞)]-rzQI "OULVʤ!ӳVO{blL0wV@LkfQyLy>~hoEB - \JB2aAHS="Ú_m[m}t)iKciA 4R%JJ?1j'Qd}k0/ qx^~`[b'iu̶5,2i. 8]{BֳCAjjiv"un8}~$(r3Nc>s&.E6b9iG0jqd{8̸%)_4#K?FkC# 3ÜAFR[9kǖ}QIz>.')dGT\.{tQ.7ۓ}\ִܴYٕ\$͈M/g-#P~i B"y)3lRPwYpv 2w S $p@{dm4G>TEݥ)Ҝ)I "֊ss:!A:%epv $AhXE|YbImYe8E/_w~ =](؟SЀٕCNSIvyޣ=q ծj&rzN.?H 4 sݰG B4tͩ|A#1 SC/8\Zt~C4': !C] FA*vLeӑ%c/3 bwڬO wޘ4ãϴ4!Fjdj=6&1^ƒ:K=iS F1)zAl$h>Rp B`爋!=_[1d U~(y(:/Ug-~\gRmz!Ez:aL4"ItBg$~ (B6!֍]m27Gy#ݽ9IFωl)^(줵HPSq@Xm>5ڮTz3ӦxP !`EAxny u=&Sg(>ɖn%YMA.W6?Jy%K8Qz?Fs 힌J8@.hY.k2}w]Ol4+=aNo 1wl6 97nʆ#+r$m}V=ad=d*;*WBޖ qM\6fpQ{o\#TqHq% cFDޣ!#_!V+܇_| aE6G0SLLV^yS Yy͚ ֗޸_{&*vS1u>t7_ORFDDw6X9C >ںT.9x4."w᫚Z#jyiWQhdݘ(M9dH sF?ͩ$pg1B^C.CڑUL '4Z]LMDZiQzl`߱Ṱ֬Vz& uzm/OW&ms!w,0 I8.ɋL̎dF,Nk{=&#^ `WIkdCS5 ^.1^*|7Ĝy:s +:4F .MDWƓ!]ůMsBszb]R1P 1s*`aaC^U}&RqSqknw;MO*S?( [hhZDnwJe҈k)؛21ܢlVz^ZwKԿ9h}uYڌڗWƇ0@6?afƍ*e]i" \t\mvBfa;D/ O8X[A9lh'3+?jف/8<,k`r߷QLW6i^qwRfRP㣃EPBW189_DY $.-!wg"5ڤ7*~ u7, D|90R1i[͛tN_a׷%Khs( T練p}.hpU 5?x铡$[g6&LQ/TxF]jo|F1ZwEʊ^w {o :Lny+" 0;*%s\EWJș !={FzV8% G|erL|mUOpDBd NjJF‰9cWЌ){E I$2ۘo9`: xIlA/d=ĴOY`D)G> ĕC=yyj A%|I <ɦX0&G X?D4c?oeo&=ҩ~~ĂNU}ѝiSҒݿ#2T*)Ү)?{%qS$o89YGZy]Uef.z+Lŕ?EB9ԓdZb@z;fLH"Ʃ'49Q|4A3U Gɰ,9yeIpۢ=od,|ʶQZSScXF@'eXteq I\S u/drS8N `lu7avohNKnc@@4+&u6GaG얢i9i26M&B1>)K*W}ۨ9<>UɄ4}ٗg0bl>6e,V x3 vIR ҫ)K"^(Ꞽm¾XN/mw69\v !t ~΍VygՆ+t2PaPւ(LCާOt^^>R3r޶bM=4ؤZ-5N`8Lq0X-~KYE9ۼQ,1 $8|N(*[Z۵d6(qTʯ:MpMR6Uz{F o0wXJ>ŎOOEc lb#֔I|[H|w5CwN( e=k%Eʡe2b5wt,?v9 +y+l#^Bk'X>&ӡ$rZ:XVj.bv68Q7d0 ~ ؇:ʝjUoC;v}~2ͭu7Vϰo6VH=+~|/7CZL]#=_}\NCcυH ϯ$  mF5؇m_\;10g y*cX}bnZQx6VsWpmt#3uc^ gqnwo YzAq^>>oMq[ꎰ/99\Hg`"`V fMzoH l٤ 3E;yƩ#1լVmcw قX0~HZaS>$mao32Q;|ȶɺc'UobaJ@JB֎5X5Mɀ݋m$XIh[lCU-{*x5O?VrcgBDt)z }=œ~FK {qaϷd4x%#vZh_&$·&k6=R8MT!.I ?RDE* &+'QwiQ~I⦭^=Dk: ba(ߜ,}{M5>@`,eyks.U(z{sÄĺX"/ǙX#+*]7CP.X ޯdo@K@7@}MDbp:lZ@ v3|"Ӂ\nrj s<l֪UmE$TZVL"ލٳ)=f9dM e.‘R^,`8l-6ivEz5;1~(6oNx5uI&W ­dhB?ډ^?wLS3U;I=~^upC~Jlk~tCYv,a;@486OfWќ%%wڕ2Jm`it.~U*E$΢]CafGvDM j[~]!C@)TXBd\L1z Vۿ8ii !/xilN3OlRZlo Ok-O[ۙbVO9?Bx ãַc@wN'~wzS>ZwDʮ/7rRы-\YaoQ2%rۖ`u`0zb?~*^\QE@FR2 3E'(z6 $MGIh˃D*fMPŋz< 'L}~{*1;c8I%6iGIyYj}/F ^٩nS1-u3|'i{Z(7 \%u .5le-<|8Ky $/EpLOTde`vh6:e!~c9ܤ>+IK膪Q1U 8 U#T weq (GtN;U}r!0&jp?wBq6еx 6rAhGW&Ѓl/B I8/GB o L̗ !2!9X-yfkyPa#Y#іh.Ϩ^z/G '{^MبR7;w G 1)47BY^%@u Moc[\79~xu<{=,LӾFhαQ4=Hp0s"TRqk*]IВ!ol|ga%Z^P4vOf `as?LT` ec赹SZۂNoYT(s`UN8zBëe 2hץ xҦL{HVZ[\?[cFߴ &*(F+D̪R5,WjW;I]*=קc ;o`75;wk~&#0TZY+a=ڭ)Ojr.y <$~z*uñov b@Zum$%KxȏN23kT, `E`BɨD #VHjĦ16sNz\ϵDvu)-r-5dKV ]zKpX9NQ7:dxcXU)`7R%BA,&6"NJk?kskeh7Xj9C$WEN&\'@ ~к! 7 !"bf8*Fes@^I@u,=;L|L%Cmȓ#ג/p# `'UbѲbNF֣<(/bOMX EE-˼I;d8ruB``@Шd,vNuWKy)]9PxROO,uKJ -|pZ]Gpnخ͒OХ6(g:7NrHw " Q)5V] nH|+Ax]3»Ρ SAraԓ.F!nIS<P.%PwX6mML1FMlqpB^3l[TR(D\iM@5AHPzpt9) ñ"Q/00vH“tttW!Dy2(ȮH;z"JG[#Vͦ Yܚ]CJn۳7fZ-UP}.%,Fv՟U] ?.{h(}Gm56-5.Z⸅"a6Ǽ=]w"IuHj_oډ<$u|:컴^P5~p﹅- k5۽&ڃݼ;O& 6$5|bЙ24+5;M}8Q'E6o K/#huPKk4Q6:M$:Ӗp.\訶7s]xP9YeE.xd2ۓBvx|WIC[[|B(p;W!tЛOK}őbs&7o2>H…rW†P\(]z|bAOB\iF?m J4Q$|| Mf P i\V/Rսl\PPkiADŤSvTY cAyKjeu`jOSz,10ye:2:P 8vŻ!AW`ez;K [:w+0Q U{I09E.q~of;B7cmbAsrLF3X+.؇ 4LUuu#iz~ZIR51oGiSGRlՕ>w\ y]8 4*)'Eݰz`;BV!Yi ws O|5Fl7BBhwƌ\pmUIǂ~vѹ}dMwֆӵq8t}Av0n6&͸e #!d^qyX2>"ct5Ys M.JZX?_Rvl?AD{ A;Of%؅(Ϫ-X» ,kOH='x|?b=|ZifjR{.J,}Lӝg]s ˾ ޝ)W6vB=&suv%¦fGp >Ĕ ?`#E/_e"T[̥UWz0Bn;N6ڠ߻ "P`M1fCewϦ]ZB2|ZG߂>?;%b2 MJҿ`I.Ha~: a`\P@UV֏7f ;߽tʾC2nr\ 2<n}xx4z JHhKx-)wHJ ,3_[4eZ-5i0ЈTF-ۯtX'V9c}&!_م7"+mxk?!*_7ErNa.KM*k<AEʋGIr6B֜C>X1@Vzn>%Fb/4;+`r5w%ɁTFg~(GQXC؈Dl׈⮲}hD<V3V޿$SA;7L5F,Fh60޽B9xyvz"F6BL@@iGD:SpS[Ύ`77,x4 ZJ<ݝzHZ? 'I'H2L<ܸ5ML}]ok_99,] \ pzh. $io5iycFc=Ʒud׮  qe1|uYo/Og Ј$MZW:/5cS {@h%/u5 ?IS&VjmO?0*nQCs "U #%ifdG *[V6P }DՍbD)f\ jC+ת@&{b(F_}+øCW-'͊.Q-_m85iVR xj.ի& 7z2ltjO@ߟ ӾwL" ^܅& \Y$mz7աi)Y`F32ՆeױڐZr W?dNsmlx2GSzZ/v+V l*$mGWfS ~g?eMs&fQA1k$>Uƺh8#//KI9!z+ŢC; w^t^jE=m^Čݜ:Wp%fU)7vMB^2:Q+щ"C=ۦ_.-ш^@M=j-F%I8.f|:[|Dn.EJ*Z)O(߲Mx$lx/A*sW"?q9- DYbT7mG 'V7=DyE2IyYJram=nGw%)+J1K̠1 X(2} h^;T_S֗m'[7N9fWLŝ,*8LvgPo6KR[4ܵ&@ =/Ek[ى0I3Qk{ ]$vdԮJPvZv6[}&&R57k"qGS=]9{St ̮*F13Ma`M&罢ܞ4\QF- 6fwh1-'&}2IQ9>Yrr'viRgݸD/bVlD)DU6Wsi<2B|t nu"J Ǿ&duw/344(;E-4RX12&zeeʛ.%ηkG`w_IЂ Z+ay+Zh\?wIǺrJƛy>1h|Y @@в)ޅow V@)c w#}651--ݺt;:"[}C#Yp+FgEsCQ,$S޾i/ )%[!," 7kP |x)h{ ڕ37qp-U={H = })vwNZ>h/D f爺.38R9G F2mG/q5\NPp+ ҂-$OE.\̜; pQ4'\(6,^jIksqÙ=#А蘜ࡌ}=}p3`|b#^zS_92g躉~Cu'NQ98R>/h8LbL2`Qbb6V[o͠"I+vO"eA :Ϧ=4K%zCAHO1'ڀks]@ϳ@ #ʸ\'\_i lmܧ~ӭL YVsX! k%#$֬(c/J(韇gd[kG1z怨&0TEn-O$/!Ό31rSfM%|è^%)ZcqSf5x3)pTz=N=`P3:{eНxsj}/w,э$ =(ʆ_Zaɼ焥INf9cvwxBNo"= +(x0Ȗl.A≬'rӡFaO^1~4)`N}E3 VN(oh)Y1&=!<-X2ƸU,xbVB-wLYHذ"J\\Rn,ϬWIDQ=M-70*SHJ|6^|fvz`8aian ;w RU3S//;$ 36jqqb(}a_/WqrT}`rfh(H'ܨ߃8ڧcʼn[=Cf\^)Ќu!w5Tc #-lj\w9M Osz':׽0^!%)=BH88^[kuΎ(*acZ&T۲Bvp,\r; LF2k֓z|W"0놏1Qn<xxy gEp-z],ooW*Kz-7eqXFsȅǏlﶚ,;D1\ =^# jZPTm@;ic3\Qf5jUw:XhV o6Y-l5Wcn%F{1Hsz.@P?/ή#b8&UC4 o'Rt+"4vRhD.$q4xb e$li%:4'=@ŷ먆CKw+y/ FbUo @gV&XYw1QʨOa/Q/9,K$ L $&EAOeSܚ˽wO9{T/}/$%|C3挒01@J"3LFfQ[?6 sYw.' ts7Ajvy6bue䳘-_ P@M>˿3kH=$;{FyM_A*&[Y8J6n xb{V̙]Zn9}/Ps7&3޲V7A^K$Cfo%&⣗B%FxGe[~3+]뚲nf+ 0I1bc˗x7s04!~fi0 dHZO@?Ueǡ?1\n/f58(~"3+=ԝ])>٭bEa+&܀o{@]X`a6'}:S6bUNc_^ j.*iHӶגG/ A =~ j~/7y2` [< I&WL\MKF7w{̮nOo((SR'Tg0~+o*t`qekˀY'ϊV bpuks.qa`[)& S9wMUn$fhqQ t*@;v"t(3Ni$n'_*u#cB9R);0GMJš9 ׭I(ntI(ai('fY_bU&VÚ: t/ɝT^ t1I0(gLVQz`n ߯ ~ˉPwSf3 h/br~_V{F'(zHBp[/]F_Jf:!?ܫJ| X&K۱M7Yz3q/nl x9;' p5~4Wyt孁d=u6pBn[E 3ApaUT_(RYCG k}a1;  z,N5BxU!=.'su;@BQ 9nUN{S|㷶~voJ8~&QѢ#쨢s'T>}H[eb$zd@!V7z(ogMq珧lvV|~B N'E2Scu\%2vVâVG:fcL$8pv 8*0*5AI*B$M, Pk¯Dux,9z!__;Ӽ+oM-ӺZe5<;#Y5REƁ]/G@@xy1j,!$<''0<+6ti&Hoovyu+ 2)'vȧP[<+iDBBc'A U/w: y TWEGxET;AfcL]8ڋP6s`>VoB-V֗j#~ :L;,V߁Cp%*?2Xgn6DC%$ն3R&\[D |' y*`_2zC8,|܂:hr5 g02vm!f1R#*hJmnbYcj6/MD E[.FY)lvV}/4އ8zu;J/ʄUvw040ug 9<"GVZH@<L٘Y7+0VOB>!5E38^jMږC[W6J- #UEcB# p{zc< wPJ%Ì#ا);-,I AXx2߶F{zbf QdLV^iW8)4jġc OD KEFhB5bPJ%j8㣩]Z^KGrex{J1_oGĺR6>p@/rhÍPȐj^P`j0oC :;v"6hI-P1H"ZE Bzвi]'JdNeHLg'ȑH vV؅0 *,aÂjtig\n#Q΋?OgXh!U[rْؕL7kTo>,DMDznݱє.BLkN2,u9ḩɇ̖YǞ-4]/|2tJS9[eG뮤v>پڈ`s{fq;`£4FF{!2Yl 68_w k@:hT/`*tԠڻ1 Yv2T.7P+(i5}ՃP140S#6"RVy]=ʡ6fR`ߣ*wURoeC~_~Lyt[DGTBgI 5R4EึbڋiHڃQ-B,@0_}iAzBtV %f1Tq] wQ{) `iQ ,{3m|N%|}k]={{{_3!&.RK57 ̩w Ɩ+{u7?JP6:Ns ]4,XeyѨ>ѝuJ_d3HwɣUy!e ӷ-Zre/A2­lidӨ~ȑC?0z49?> ]܏?Ig ˩= $PeIQ.\dNwLN-.^*ߘF *"b?.'A9 j#WAV[+d^)) zcDS4\6բp±Pj:f̄pK&{[nb%~զkT.q9mX+Z BzU:~k;h~ݸ)CQ}U_)be!2.%;ˡz&AAX,+t*pR}qhF#[^VLxt7wwʅPM|x;*/)oCh>dACj$ViM rC,E]1oA\û c,S 9Sݔ%}CK߄C38^σTayX}S:WC0vs=8i^*4M4Ϙ䅿xRG2+%.W)gCA@SxkW&޻iYxxBV󀁂eps]Nm%!q!V+)p;2Ns$%۶$n~H }m:[3Bg3AS!Y)C?;"M)@tzqxij6ZiihBfzȇC4q~#*AsѪcyЗSKF) ܺꚎ xA|wɦ3=AN6K =h&\vNJ9z_ߋ5eouc՗E){EwƼWJ2uoο5gIBZ`9mI#QᚋS1S,>iKqh A?LNRwcFyi^ڡ sB/^LcS T&b"Bf텎LF\=o<j=Yž".c]*;_ݣ >ы̂OqҗG۰B J '֐-ٷϐ30!Xh5 Dmp0)턳"^_ZVSccQ˞;_ "+%d/$KKqSOD+Cz}t.3c6{oE\5ۃ~R:㈿͖닜c }3ˆq@c y(4|7g8mN YAmcB\U\J(Sax&lw 96պᏱv giot* /C"N xt&r_i/ ӌqC VZ]gr`=\ʼnik0খwLk-;o8BRy#Gu.ZdYH+|r3UPZɰ@3iըjoasEnLm>X!Һ,J;^peoXOȫj-.Xi q0ž"oz0kW `[뉰jgbB2 ay%.'~ lTL[Ad/ .,}ax}`q"~QRhD\l;ɒYz[)~44$t° 9G@VvtVH.6A&_EA[Cg# f` Puyt'ǀ19-|.4ZF=<-Fq/*!a.q j b.\\-ԩ>h]lRDxETfئ>]LŬۿ6]v̴/Hf*^iq]Vr H`#>!<LZIYg#+yZXT#˖C\"'=>ahC"*v1kV;M|]aǕyHO3`9(s%bβG04?(U1-Li51ZFn:@ Z -lٖu6]֢zdm,cFo:t p8`D7.;j?l%H7Kh&U[N XE%&t#׼o Tt{sR\x|bGe4jV١:=OxY4!Zfc-qQkj7 L V_r<΃XVPzdyRC8(9;ݵa؝iC?bV,AEDEHi>'r$*SNeU!.b? [ħiG w~˪-y;'(C1s~xH7hsJ&|/=fp;mצjص;0ӭ=rɃa BfU&t^m-(L[W?ta<#x)o~վBy:EܧQx`i:;Pު Zz}p5drn~% Ӌ *-6"͚E'lb\`bYb>[d])YԖB^7WdB"51kC"t%n ٹ g]UR޶P9N:2OU؟gT< H}bVJb3h p*G+˚1l^FpC-ýKE۠h'+[ dT?WG6} $Dq8'4^!:]@|*րB,lp߄'c!Hy4;Ih{Ѷq\銿p^\`q}^`uLԱf|5wM/A=RV3>c_lg4S{a%zckWR a[=$-򎲅4dx>J`A(tւ|S o\ l^`}|0@|qO6Jխ([LkfJ,11E%{[eތ)+ _cu@4+78/VGgd%8 GόJyP.,q[N<<" >07O# ]#X‰fdW$$*ݧk^}0ŝk͌P!a?7'u{,Um_fkv ͦpZ8bʬUn]r۾ %hۇmB%hnV<Z_m 4050ִMU'?,7ITZbArBh Iݣػ|*b?T9.Fe_V.%0w)/i{5%W 9y}5>J$g %4zQ3jJd>І?+!,!ݣm _Q#I opMo5T fMMhHC]Q '%_e|[p#4l!ϼx޵ݴb5Tc}>y=|F&< A\+ՙhK]x8̣vTyz>q jUwV܅r5ʗgC"Jp/!i[lc ?|ymf {I5Tл^ i(ϫNb~F1{_n j5Gs7[m io'w?!8ec[y`1OTɖ,Swt !)^Qע,:v}Pu a"2cZ{P'Tӊ-Mg7ZtY'fӘH!XЋkR;f-O !nO…qD jpI7'JVj0n§J[S0iB>1gzZ\> %e9t>X:ύ.@0c7QRO+]_gO^UDbUP(J hb'@n$yӓ@nwR g x>F? Z"ֆ(=>M`5 ϱl؈T"oƭ'jƔ2[U&l.T`c zPК ^- PdãKu9X= 6;{ Yf6Hk*oxG܍u̢A+xdfψAY T `^e> ]U%9Yyܷk:_ hyJ ڃג4J5b PcKV?N`h}MEz^ Uh茝.wdS UrBkL& vem^_w'x?l?.0Pހڰ0z7~ cSʃG{@ɪQR'wtz;} +wJF[S|V=N dO5a is舴,39b_Pܻw"ra!QlWMa0͔>?}~hŅea4I /߭š#m^G->,A(egƀQ-(H"]fPzkuȓQjB' b[Alep2u18*xhtMt:;"mYD(15^$MC>LOk8tPgD7bp)~2CE{14~4:>ۣ(hW[D-} R_ZgFEvabf]ٰၾP <.pȥ\HsB%bs uݬ78AԳ^f`Qp]zF3|׷, jo-W3(aDe&^亥bA b ̲n n-+) c%k)Q"D[d DK_=|rzgr+Vd]|fWp:Ғ~'5H1:T [6 &pH0Hy ] ㍃iq<#f  cU c2Yd$}X@:hOϟwe7ڌ&\IR_ǶԌ7VT9!N yqkJ=Hw;q ʠIh WݨazB$RH]f5v}}-ˉ/GJXQUffQnNme;$;3uQ!YYTS+JeD&=P 7gr|lXzn(+^.:?·8p5ԐRNMA|'IyZg$h~Kɕ'%vZE"4N%=r8?/yJUcUZp{jvTOn D ֣QM8A ) $[?9^zr] X起UgN$Y 4-"0a;DKt>BkeʐU`xprr*9M`;a]k8@[eۖ^ w~V<-4iuftQmArM 7aRBpLa=sN" BP~u ;2lnZԗx6*i,;h|c:%8i^{tq .wZςm#$qdoKUn|.ʩ`s0qONK[vt웅Tid 迓2>b?HyҤ\+-IHi{VJW>vA8%z}ha⒓K2|7I2g,U!\O&k:,pq.4EBRgKER8[[YQaLl7]` <B^˻Ӄ˓7ݥS1wD'e,wi^9 (?W=oN&3YQn'NtJ;]~>IRhnNLρߧMep Usä^;ַ32o&-/_ZM9:n92]9&2(?:s:~CeA젢p Gf66Qd=I'x 'eWB o~f_WO|G&hiB6 c/*r_?~[\#D1ZuÊS˭[Jsz8MPQG02m'ɍX? եb-M,E{^6J$p|X^gGFq!9@|[0Y>y ʗTC;ګVq9k#k;U%o8,n=#Y]6[)#ҥ]$M2Ь~NU}R"&=՗`911h U^׈)G Lҿu)A@P.ZT+%ûMv&xio@@9ju`Fx_2i҂R${}.T3JK8qzumIǼil(+_ ZP>}^Ż/e-n?1 V~RuA6ړXe|r9NJu#Ӛ%sx2<ҿ$4ۓ"\ܩ A;;Vc<^| ̑q*82^㍵ |S-mO&ޒOYjU7 Z<8?bZCqA@o%]x0b-R0 ԑ])O](ex䁎Y?A 8p)@YnX'uyFr21ﶉh2sW\v9&&4ĮŽ#Ejȇ,?mQfEd4"oG41Nlju\NTB}i>e*qu<(*Kz/U n?­>ǑaB^>uWZhvE*oA=70}2}w!*@H4 m9,Ir=9apA'LKG`1eQ^M߼f4dhE9.r6eܫځost);ysGc뙛H>!q~ŒYuDF!& NHm |xpUrxmAz"?S3m?jDz8n\,Vj{ ]$5`ƛOS8.Ӏl('(]kJtf E džpL( UYfNyHI`[ wɝ Ve{3֍";>_R Z8u V-ǴZ#;يAAƦ:T>>qJ@uIB ˳6NoW)qzBA׏m!+yPX OJ;45杭4 Ӝ"&IrׂnCߝwqQ3S$PKRpոgb(f+jr "0\)b1U$r|'4cm&RYX*FXj<.[ "e}<^ u-ep[qUS`':=~Q ^f hQ/^/n':)'ZK]1v2~4sN5`{Ȳ4R|/P1fRT8p0#!;P'։&ln9JR6웄16#.!:iCdGO:k|]<2ŠbH63.T6tW%[6S2&Vo^, r|Jԑyr}_5 ?{^/.KlKC^(]|(kj[ȉ>ط媷O5zrQU;+Epk3 CΡ&3JwsAf 6WcYi5l*gmo|:O/]&3QEߠj"`U` ЮCwfʲo ZlC3 K!XsQՆy'3hO P2 tJ$嘲sXip_8WcDIH\hڐqH˷ >alIllJ,}*yP2  U(-DkvN< mǰ˼D؅kJZ&,RQrUC%\U<>a[ޘ1{9c>g)E0VU(-GGS+ɱUР\m; h6dg1E,*5nM>A#9G$SgtP6ׇQ%//lMim.pOgl ciV񨯐=G]~OV ñI9"kx.\i C}Y7h?[{Z*=R^)(tBw.Ғ*@6;Β{JSG50r#{,+f*HnKq3cɹuJœv)|d!/$UNl_9nud:k y[BaMg]J-1NRԙWѺԮhYх 2ꈵqzf Tj#Wwh #`e`Xgc]>m S^m7sXe4 *lX#Oŝ:XbH$Ba7ЁAI6FW NAi 0Mw88f%Pw5I|n4pHBcuLNgmL69 v\s|qF<$+?]d]' Lti49q`wA{SK3<'m]Gf.}H" *GFZK~AW5AU_4nA'.CҐ+ rcn1TBf18;ۨvtNyϝNF«XN088Q'-Ajp*c6[G,15Ô/Y.1pJM #Űgv7警LXmAsm5=.\ ruLJ-Xjsכ@FT1-L~␝FKys).t"g3S()R{J`sx'bcPs?DH_m%^KU^PPqsTSqL%5aun3v´݋s715=Q dAP\(yV$xnN:7Z{ R JA"Z2jK˩Om͛6FjgDC@CEzqƌ*.exЇ1{4Fq8\ƕ)f99` _5L,"['1֙/nT6qʊy4}ʣזmRUZo n@1I-yVb^,:[Jd"izL{R@ֱA[#Nt`n,T\w<ـG#t&I#/ ceLD֨Mn43sU/dܖg [7WDTd(xABB .*{Ƒ!Irxϓ}b݂[tAYݓ&jKsSS|LS*R<^ͪkЩ5 (ڃ`K2v6e h?ucO:'(#qlή )7J~f{x8I"5X{vN8 I VVFo@M=6h50rΌM2i?# nuD4xqkX V6b'i $ZBm74*3ߓ@wvò(i%XwNGt6A-t"<K 5Xytk͙ք: Ce F C+ PHGכ|-mn!qs"4K }jOʰ7m'EH6a{nYX>VG'FjM{ 595!\n.8m:x>/>FזPYAՊrn'CXc;a0QaE3MN"ӁlСJotT(œea/G`й<KH;XY:n*yWtg5 7E;u &Eߨ(^kT[y3E4'\+l+(?ʄqb3<^WUytg޿`XGoȤW* $ekZsvp1D@!L>OO~H8,7T( oC` ڄ54;J !RZ?/s% -Hf۟VJ:64]:qrD_ʑ;c鱁|\p!/4(BQџ囔XP6pY7/8,dD| @giDhr&F2miw/(u}턓~R_i%o1IJBgmBOMn SUEf(i=[9Vα*Kfب/7(HU p"mI_@w%Pt՟)/z݄c^TVPK= uw*Goj~'XLZ8}R5/+S/ vIJ̇}۔})/.YUшhQ!b5վ}#k~\MPa+'MЎ,/ =/Jv=5ꩤb W7~ҝPy:雧X_އ!E;Dq/g?l3PEx 217lv:Х /3g[S? ʰΉ]>1 ̫#Њbua69(JI;$Y>:6t9Q1\}/"f.vtX|gv]3lfʡ^)ƒfJ]Fp轨Z4.սPy@C2Ύatr,У68;v_r XLLٽBэ|B th5vQ5cC|#CQmz|Z](CrvMN /f}BBQr;#_<3r~]*VMW1-;^f#&4sW<m61O ~VE7_C|t Q9[oަ!NǺzK 7ŭVѪ)A5ݤA+H}f/ҠOz|0̙ 'Lns/tf>D|CgV̫'S45@Dϒ& zZ|ś/7L4w;ֶeXcF5FdaIx7R:aO%H?LU[sкė9BbzNE/imE I/ Hf A?kVqYhaDLR'&gO-vet)N.ax8+F ֡%S B@dx4 ߇aN ^86mc%|`jM|(8Rr"4][ch Whc"ݰ _C4Z0H=F 8a|Wf^P2;y xPP;- 1E(4ȸM˰.P>B?W9E M&o'Ņ2a=nSZhy-'ʜ' .O3Tr&]V&u 5fPx[ 0&U,j_c0Y,* 9doDj&7GTzZZwx`@w @K@Y]׀<_HjN#UG}Y&N& oSCK̻ Pܭb*[ִ1ӌ?Y-h۱ض#>B= 6 3 sc-mɎE@˿#ZS~򗅇M[0ִvu-Ѻjw֦mN\9ҟ7SR֑&%DUS=p3jj;JR(眕sU~_9HbR|J0lFed(Xnn[Q+A LE!ґcS DYٌ-0=#(]/q8y|C-9:~ 5RBگ"J񈁠]O XD0`dIR~rUtHCk5:Bd YV:!&2֝Ea+-heoAB#ke +we-@YV%GW]si%C8ӼD6 hGGѭ*u;ר;j _g3"#h{ψj y~ { M2j% ]Dy@9棅\o3CPVgr7CGڗ6 (\Ȁ&Aeҭ"HW8'ͶW!Go?Q5iG|MvagSjw-&\Cޓ3p^xǥzɲbJ4ΖtEO_o>w-.iEc]Gm3MP**L,&]d1Hα3]ޗ%IHtu'&xJP۴e5H8z3|/ $rmU 2J% 9y=]#~ NR P%IW>]1;@_r9Ke?#Ѳr[xrl#BMPP٪FS+6/[S*zO̎(e5 6"rsb9V- X[\h939R 8=4/*2hT]kh]承m48c !QEG4,L5DM<#KrTfnyXTkͅ5\R9 qS9z݆bq`k +IA܉߱Iwv(v$_w$P\/,<äWe$]꣯Q^T&Z*UIнoAa.5EjQgAڬ1~nvl<f/` ?A{)nmy|iˊ7SvTnt H`9 G޿BmXp3=i0?~8p^ZUNQ2k?a0{jw`!jY[4vniF۵FPDfsG齢;lgo,~[҅ M!u:X(Syї&@2n1~.sԘ'q^m"cf+é=?NLEMp+b^<Jd2zF0}IEchqf\ 1jb\3 7cD@7[g򬛟r'm<-MӡReLi̔LiQJhFLki`_{w8+P?8%S4W~\9m=, l8$p7eR]Ra!p5S/1`"ߺaEaozT:q9a# QBY/Hi2 o)f(l67~KIȿ'a. x'P:āY MRN3pGR fIrѷ8lvQյ3@ߙ8D|RP S|@Z\1+H\hn)93WPǠ6M3 ,+}(X-vɭZqL&'MBߨfkUd ,#Ocebdg9FJ|IoJrsɬ'4 ^EqHE>>}^nvK1f%-1t8/䂮L /5.0]Rb]{A}yB"+*<sDe Y|!gBo6$)ZGdm?hܔ:+-Pr J]][3ɏWNfީp<_DSFjdW>wȗֿRh~LdJywB !1Rش~@ >$F"Z!:z 5el"VUI|b)dkmIp"nj&PT)b1ty$aO2vɒրjW ;[>ri?X:X&;uWס,a$ʐW;P4k}ښo״/y}1D YyQg>;!^%!z_}+& E]QG1Q b[byI=ŰRBhS;A QM꠺EPIVPrմ/4SSh'Z.*UIlz}DTpड़ lVaهw__CEsOLނF@;_܄m+wi2Voǃ%o:m2s2$92֤bjc6Nn:y D}UU_7C?`o:hgpU]tAx M%GK4oH!!t~2]eIR{kWy|4('ݭR, )wzb.9uhbۢͫM'cq-٬j//V9 #@%maU?:[%,;9\LcY%,w?ٖ@ɪJZ ~Qy|% kp1*fZ([/&ÙvjlC%~I:*M xRH *&#.aUPߊ/=EUY CB)r>x##`E]n?yNvBȃ)(`oC^-)`nEn ?0E5<6kФ!(:+{O/Dрq[ا3כzsŦaXDscDşCp77lu Wf|Ag|!i fG#R AXtmַ|Jt!qH):3^>ho72x^>&~]=QbKBRW}J*50Ͽoa@;TZaav%o19 BghBm ` h[S|rA1/ OiJ/^7l波qSުLX7ա{_J /`/p'CNV/1X|=$=їL"Mn~R֦6Wp{4c85]'!@O:<7ڶIjifү6zR QL[#o ^_fҒ&̀d3A:iͬ`cO]G8P}E ,Ո<&zd8)mwyEHeB\\^v3<3n>bN,v>{l$"_= lxs ӊW֑0A 8Įh%Zz _56twz|,5Eejn[Q1;tߣLR+<`), fMܞ:ɮ nn8vl}ɢc.,۶2J7>XaKPB@x$$'gZϟ"=Ji@t][Pv'W7Qe"nbHU"͉l(BJu|rwTP'Sϧ1Q'kyKL sln7hmz.OlЀu ѦQxᜋ¸#j[!-34 3D@MC2%(X^9kc/jRcW왟U^GcpyӠ{PaߤWxӅw*cÐUD).򍁩${EQM2&srsj:}ni5E9UoǛN笳 -ms4YvedqsBN'YOqLtD4DIA+8BDoܥ>/~UUA3 J5D_iHSRWpgq hlu)&2t[$w4L4@Ϟ#2P z(9a W-̅cO(t4nR{CWQ>"Ew1^kƏ\p}+$Q sqۃC Rii6 |d+xMD fLu&8[Bef"e)`cGи=)"Pm;0)  "$hs/T rپ QO/G{k1b+y]b]٨QAejY_RkC|ń9W:_U:^%y `f[~gQyP6 /d]ȿi[j#*~bk6Tymfl([VP'&$1]D1SBV!>K?%7 -gQ%j2if1DS.Rr*I\mTI΅W 342F'Li`A<^:eA|،ڳa4#c'ŀt_̚}R`|_8{tiaeoZ$e,H(4ɭG?Ws!!MHrrMtIdƈkQg1Y@%˘r$^_mz~A05sH4~?:p$ dc`p7h=2|Eׇn_Di/[€65_,%5*ʅ۹ q@1IRd$!z4R5, xGTfD ?`BqysjO{KBO|o@i|3UlTB4,FK∳$neAϓXp2; u܀>#&ݷ)!R >uX޽C&H'̥/-mh8ˌ(g`դzЎk/6ܼ*;9בs,fgé*,dmn N`ɏ|)<3LWk)s~9dP [[CO[%]UWxtcb}7 9 A^e<4ܪb}*/{nvۼd;+r]EI7v<cOGݳ`{:|nމHّQC;r!u.V鯽 Tŏ"Bkg@?kWJdݹC]@"#FhuI{O: Y ޖtQsIpy4 D:Kmdpf m`j(=otoW巬=#b[%k 9eRdڔ-bϡ!+5K'm.!w>/16(sSdZ`,g0y,WwGAlt9iR`|BZE ~d/Ր\SGP*i^g-l9bEZh"< 4۠XC Kj98&eȦѺ z j Zb=q*.F״Yv,E| Fܵ0`z=y,Y萌t%:OVsf葤s>Rң3@ ŠJ}Pa6o>pKGL(\5g#z~"fcF!ۿ{ z-In`23@ LOcmG%r97M];X,RC s,ŋeCR_dJUHht^'F29CQ`,9<1 J#NM\iJG94B܄*\e| i%C[Ed1S67 @gh;cYs1}yw1!68_H|ۏ[ p?3?Ӹh;i@>'yΒ܌Hz VZo@9* I&\a-tlҦr#kNǸN^&-:S]قexQp d BԴ:'|c"Ml^mD[S=nZ6@Oc 2%iíUBU':vS~tyD]*^H'ijP~:J~zv%egy.sJ>ՒtʙCҡb'\)9bYD̾ބbi0bB[l(*DGOǕu0^ت]>SD+$+ lyD:73[2ݹ1: 0OڪXX #֑j82%<{1(;߸[oImlȇBCnm/=8N02\]ΥlϮWPkW8^jXѪK7v(_ɔ4zT [Gj^L.J#(_>|{eg/|$NdBfh x;7ĐJlFA_\7M1j{`SX&m3 8-D!fn"p+tOzh\ *DOqi2JkSvfFy2+ BW(ZYmr[Q226jApߪօ;.T?# iN\_y&-1(SD 4LV';^5&) D #IAń˛$Cë*^wтJG{׀$O3j/$O^CX=sm+Yd9&1 |i^N>ktf~9)*mbzfN,a<|] j0-AP~I!4㩕P DB"A@؁ J`p"Y >A>EPT%䥑>MEQ! \-a#GѺA_> >瘑3}DZosi#Eo!>'q$#'l?`#h8Ԙ8QZ_Cg۩t7q☃SvQ5 'OW=k$5._xtKi{իKR1U\Yн9+K5yt]v^rƚ0!v 'B7|3gҧKqtyJLt8*D"sU֣*9Ϧfm?Ae?EcnG b*(ZԺf<[h'  ͣM7Ύo_dKҰ̴U5Fo3v2ARU0%# ? xG/Х ucS,`|uim $,"qMD8rV@ָ!|% m`FI(Xw'D۠?vO$tmePRP@4> f~w8ǂ[pYx󂺇~qRi֍au S vrsdAt)x60ϲ1bDRbRڣej5( בPI^v!1\wb!]%E,".BA)T_g̒"bvȁ̬=rk^E o)Os+IJ0u-۾"ELpnT㜶"0r#yrTh`Kf,cAM+ZBbfS {J_G>IقKMQWLߴɛx>ÆKj* Z-& 24X.[ђ#fE߸%p<@qtR62:XmDͭfx{ܛp$[Zzkd/FѢ|xd|08q 3kV~G1%jk"YRhWJJ4Z,p#P?KW$vd$͕XPX0れE$a1S gtZ"P0ֲՅ3J٘S@`(_ Wr L}o= J=~XYS~J ;uRRAR\= 7M E`i8s=%-݉LzrxLBGV%aE ȥe)6:@^ui^9r#[ 3 'l NV_-ɃB hLk?}Xv|Q =㙔hbÐr8g]{۷lXzpy>I8͡&&~4bN-VK J/τX\NۄԱZ,%#A܋⦖!cw[Crv(y(R r) T$B\0m5 #2<_֘ s6Q2Sn#=ع 8zoq^&iwSoS7GMviLKp3i׬h Qqv&sV<68T_SMZS ,GsdӳuK}LqFAqXyAydwErE.(6̳mHW< %K#C^ (^"F<1ܖ]:mFWK:m@$dmȝ.@X:7֙tJy#B\??s7)D2HeOO0KLY;Hd‰kH/ NyaIНht Iixp#0}BYbܽLw!l-*lKN o< lX`_/} ֓(cQ1aaC {lʡeڽkEH\U!،doEv4/Q6%GD !%oWK񬖡{ Cac Oq7Uʾ@+,"TF|U:,Tg`[)Qtt6CYE7#"" hJh~#m,_ajРȰ7e+f{t͛"~ѭfz$Vǡ$]:Y ( "p ɠL׾+p}FyU@0Y"s~l]m(R|2b؜Ň8`wz7SsD)~O|b=>.)(QՉ{,뢖}4&|  ߱EMNQLpjHeỂXlS{mSAhјkV;1M Gʐ{(Wpء|lY`&$vلv9)m-,RRYNlyhrmhNh6m ?Ѐ|K̙W{/@h7/,R)jS.gرY*L Ն[x 8~nœ s{>ORO]IVq$~|" :HI^2^cS+lWV+ )IYNS֑R3/\f)!W#&b˾+fG C_);Le%S$F|#Eˌҧ7u{CdbCqFH2>60&̠9:ʼnK`u&t:}^\tymC6w$vk:rPMv*jN3r)+[ڠ8^fƍ@- 牙XR";WHrZe[R#M&L{]HRd ƃJVrUJ@cQZ܋egnbb^ %,6wI#k?9%S+_AD/>K >n&'^2, |*qWP &l|=v.fĢ`7y>` ѭGO[xx3]~s^˛YUV"2ͩ+-R~F1׾UQ $֏5P~F>]M~y^i8aP YN:ڍ¨'.}z6R!H99VfD}^/,jWmnӆ[S$|(? [yMmW\˿F5dPccsGitQsaa|&C"f.y|$oN_g!`x58'yOgHewWPJϑ}=ȎTܓUr')XuQ9W z~XjnN/*5|<M}EA1Я`I,/ Szn DD=lگ0t.E|WӒddOP3 ~Cʯ)Ŋ:-a$¥ʶ6SHDa6(ADsTA8? /\y,q߃xA^~o8|8R 8$]-80ԬI1mG@HFub՛kT<9缷dh?=͚f-coUT*{<=ނoPe6iFzC-,,O5셯+0"qhANXnPOIҭckTE~5?R2dH)CJ~0?b4ڀ[=L g4_n8p{t9ف.'$`-zh8=*6p$i3mQ9(az_Y0r%CJfj 3 HGb65b 4e,][ux*/ظ|b^^shv&JtM/4S>:9,`Jw^y.mU18|nՌ#BJ}lݑJ@MM,wRUZ̓E%b0mQP ^^;i"9OCBhޗ~F01|%G{;нNWN:n,PО 5YY5+@ߘ4(|*x_x|.$)8Ka/%QpÕ f=hZ"쨕L=SCg9Oކun=zloԵh:>\@B:@j'*7Y4ki,q}S]Q:yg;h1FD*`B~i_c"&ȢAE$yoX{R#tL_-(~ǟ700EUxe|% 'g;U&Îٲ r u߿n޹njNT8KGn z#>~k`(i/"<գ* mDvtB5n}68T<):h;BAΠU|XZQ.$_f)k ƣ06n ^/?)ahd U(#Z7 ꗁ?\'TJ^mpUxsiK>o;4j-' sUṽ,L *m-/ue6PS>n`},6Z}eSTg- R;u5#lx#(i&̔?uB UrOtspiPok_~W zo`?;r#ذԒaj9TVQ;ʫ6YpB9iEX>i`2COF Z[1KcqfR^Ac.$Geܦ[쵣cA~atEh;5c ֚a2Y0q '4Z6="fZaĎ h9$cn{Gߜ8NB,dc*'.L Ԫ7'm Tx7:5鉪V}N 85@J*ƠX5I`fAn:M!*XssFc *!!,{ΓOrqntq+[ Z#՜PZ$НZ\4zF\ b#i S!;D_/C.v= Z辞= ^͍!˻"iLsDC7eڤNʢ58".ڔ-8R‚1 pCW˅ 4\th |FKʼT43&tq| Z _=˸,1@zH`|~b`ڳ YT,ojgnK,誄3.fu7ԯ5=MM6(Er*"w}R G10%s/1++g_^z^E< KΙ߰r !o&Tq+8[I6a&G fCJɂmGIHf D`J I7QΔ#Jc @.Hp$NC\Џ:$8{$vFrgI=F 2ֈ\'%Fxe6|`( FO۾ڥ5,U|,}N8. Wu 2e)fb/"ca o*[#rk/owV=`ukhNTCEY&a=sF"_#X-8d*~):M-d YrgdSݒPmO]U.{"J:ih+p3_ް5u6adtd?~SxE&~WcVe{ Oglb3 #wwmQ۟--smclJ6L gߋ[|_mR.#p${H3la^Eu4ZV$Oai)|pS7 w9 &0Un}rwH:p#n_mEMIF_ºk=-(3ۭ2@3YDBUu1`.ߏZ61' OW} .AnE,'6S_1'3 ]c/EKNʊ%Wh~ .Xj*An͈tOW-CD/zNH' nxdfϨJL"@tT$Lfn7{{h+~Byx` s=_AmBn +E:r1;UJ&8y"u7̉wvf rtee8>Hsu).|a.4uG;6AyIK(S۟&jn{ Z*=Bn!ff=w'BXZ5q->jSsa24ft^Ge^@sɼ?1zƙ u2-qY]z:2n{o=SJ2 }N|oPlֳ2?ن tHgQXtħ|2{2Pb3q#F8])죴v!]9WSI |׸tj=C[x9AJB?=lRTy4:5=VW@V2CQÖbT}vJ8XlqDc jda婏l[!)[؂{2x'v&yr& _ TUmZ(aycS<\{]UԷEW6rS0*sh5lQv,s^ߕMϷ{H6mQ,)A/ 9B&oӞ sr"W/-a&'Q7kH- fO!zoH9-!z\I>nhK- k8y"hLP w|cWn=W],=O;d/ݵ/ *\iMtC4k_'P^]&Wno͂!IŶtaJsv4CY|._}\ؾn N($/f xR7) 4`RQ鼷D\ȥj Vޟ3ceG`NA]p)Ff dNtQ1~$|7,iq*?7ItDl T"8uU/KtI'@chdSwV+F &|{=f.Xf #JuʮA<V$`7;QYVEnT?p(&ZrWP D4Kmv0xZS̀c'1WCP<ҰSFro}%`w#;ebGnhEn(k^:BH#D4Gq̒o!/Xx߅!O)/JrI 0}w6_Gn(D+ZPH.<|SI&q/ !AXQVOYLUiV-1q3f LqO6.=țQjsDk>4t"})ꂫɶܜMOoa|l*|dk ]D)BL^_" gb @Xe:g0u +x9է!8v6Ѳ gJ* 5/maagН@xibj}V<:"y'*!x3As0r 2 0h+v5UGS4+cvKKd=mxAqWu>B'U'ǸM?qHmYѦb&:7M^6RG^.ew5gX/D2:na,h)I׬ MAI.B~ r.//8^V} xV%5FɾCEQYs流0*JBsVM%Oo/IS֝\F۬HaS&s}|nQGrChjy 3n{6'M>=Y'pګB*V4[ρG(iҭGsv'Fs;hz8/<hĹB+QRkN5բ!Ʉ۱vs:&$D[i>ԑ8sbSN84OJ50<+u V?[L{q6FU#`vl6ihR[({J/ϾZk5wȶ$ *U3;^Xct5H $I5&:-<*2*5.I`_zRhlT8r[AƤ+xYWqEV@Ni\v7Q~q C?m%&,=\Xo_ m'3h|$ 4lIȶ] ;|xz'Z5 P>[px17MڶdmVpw8Pt(t uȢΤBgM%CҮqȻȚ$ϱ-AԦ$INYmXz4q E0Ґ_A;FdLM I\!R*h2rD=֌3].7GkgRAruV@!?mx*B3zݳ/JiP䕾Z6'A6<o  = } lcZYMՅ`~U" CԐݾqR߯L2SO|y[1{"nbݵ4?N]#Aއ) t>!_5Expz ZABV_s'y#R\AY_U*7q͘h|w]mO{$QPQ&xUԈCp~^ȲFswS~6&w/{@`EiS`GjLa$2V X]F+þ!Vm/hh7\2{bs)%Ls|A£aډNU ' $R[##'u0FwȒfd_Y0RюNn{Oj'+UْxL B( /;uU:Va!eI $km q[w&g۸ԙtM9ONj=z +uJi~XH+Â\b86xaA]DlʛM2b %0ex=4d<*Y6)yq|BTN8GY)Q~sey~[UK,NFny~)-A=2"&C0խ{bE  ##la,Z4y8tq*EmZܚ 9q7-\1y{ bS^W:2h[5F Ic ?iIT ہFISth7j(^%3"-_+WW$׵nٙNiqg Hp-OP$Bo׸ff 4[BP9r~ycVi:X3Eܵ])z7{2w3idgIE_,(w ! kw6|"=n,^=-\)d9i&)e1{ @8D@vRT0%TpOOOst AгXVYs"IJ_0lwՓCBTQgXɪ:Y.S7qkA A nNP wUkikvW{[7yEvܰj,8Y@3?)4-y7 O4oy 7vt76 41'ƝHh#DE KӉˬ!䆅PU(8sĴW.._L{%(;H%tԺ#w!g~f0. fRUHn3T#HrsX /EM B F XĽn@ `9g[7\u'f~[[HL!QbnhaTqtKhIFZmGfmtʶhlq nJDi g!qFPB-pxeH G8kM8+ VD%B<@Zox'-88,mS#'!9ۄ͑Y  |~r b| uABqv8˻5(rbbnEga|ôj[0F.Nک:+9>!? b#LFT7x¯hY HAst7Ϲu_jKjj␥QB%Vy[dn+PR87.֌ު IR/[ <1!@l\ PlK"V'by&WcFcAQ𫹴j@@.$Z,A}>1?Dƺ͘eJP'+w<FhX<%ٜ=}/LܿOKT[LmN,uق}g,}}0&DS4JzN2&쫧SҟOCxtgQHW\3ht!7 @! :}c |N,}{HRFZ؇WW*n4cg%"RI WZһ"! t 1qF瀻24Q0麴Vŧi\H_64~M4fV~$/Wv!kĒOx{];-uC1O:{8"%}G$!*F$%6,.Zq(#ݲY59Wb=y1U$NR( Vĺ|W?q'm4n%2-a|,_y"훶l0׎!:U{j_w`hi8]Ik #I4bt2ϜNʢ(d9{X .oc|Z{kD=5W懜 k6F4El'ߑ-i {g%,>YCݐBݕe%- ֺ{O…4B܉FN {PsR%vU ]2]`;G'/g;’LֳAg?Hm1C9 3Zc6&e1&rb6Ci!8깰Jԋ@bjOTH=eFwPpk6`5dtfGo=ԡ1ۿ XqCS{j:Df`K@ e1ex>N\hS@氆L'kn lARܵMȐxv HEDniae (5V,QBJv3Uxa`u42k׏ ȺIh&j=E{uRZT; 9<;S:V\)O΂ ؠnF`| b')n cdxp[ot֗t&siMK!OZP&x>/J=2RdYĩvH}me לm.㢇T K#~`mCpva4u97p-jqYs?ퟗ1GԆo '@ ۍ"`{R pQiү ʭk'ap.=e}SXe 4ޙz:xRGI3)CgHav(Y%Vz9fQj|yPDJL㯽[\+ֻc4^Oݨ|ﻺ };ё)45p8Iuj^ l-Ic8*G\^0LӾT`ek^4[^ G\\Z=C KnYy{b> szTqѪ8@UVG/Mj:C0ék($yy}}8'+t4Wh.qϭ̠|)>sv!Z*)a"tB D}l!2hɖ#zh){\*YFX 152+19PWsļz Sd*`dO1ZK #, GDAM6rwZ}\g@ e!ٞ;W.I"I+Bu"}4l3R+>roGC|VdB q$ف%>TdT-(w%~灯9=xlki\PkSl=( 0f[D<#FTqSAf¹-/+1U^\}a^d.Ha»L<'LOv(7)gDU}ūh^J ĉ=!`eR{Krçļ!1,K'eS9t顚Y`I~Z󹙩*Rwjab6:Lˊ|*RJG>^e<+Y W"[#@Ueɔ.|t?16 _(/|v̞Xқ yP_\Cr\-TJm<ws/ Кwҝ\_`QUb<'i~ $BQ0 }DrQy|zcTNwn^3,;yX>ARemV;+XY3Hdʷ2Peuӆ!5ZLbV=b$ekLiRpߔ^6TegJy~nT^ױYnCUNjrw4LJq -d0*VX:DM18*&/jO+܉Kj@ `JXZK23 +e񆞜1 |GZ[Tlݺ؛$NJ֩fߗȣ?NkݧT=Ϣ!plޙ{ CUV5zleظ't[E[֮ rv<"4f]ݠNgn(إmEؼ;qru g R`m OT?#iTt.UŲ8+2< RThjݕ}WyRo0 B5FN{pku~G(*ʤ(/xhtŵET"dbՎlj檠Gy\W‹MBOګANjCsI9v#|υVM"{ZуtC;T<Ku=@%jDZbTB;5s/cn8M= C|B:o,KjnP̣zݱl$O3`[4(gvTgDN[I;lf"J y)"6ץ)$žM2p<Կ\;sQ&\X R7}ۦޞ1P< <"n*}y+^r&q '7Yal*(t`[E7Tn'Ҟt+*H.d"ld'+5Lק$x-̝VZ&8%INO$ ׉wO8-eM:5!H-Zr>fc}`BwsE:+ol8kj ŒfE-(HW^,Ufr9$HIMq60H.F6o ">< ܳaB\GG^&.o1%^^T=CŞra ;糊U4c` ׵T=eS7(LUŋLCyY'Ϣ"I;w&XGl< !a`p;f4% xH #Mdy7NeTIz﬙K+;3561B1 lj6_Cq2qjb [~xq?^z S{ݬ׬- 5-;â/iIB}OCYRwOjcT'CIyzwlOK!V'REr"?e*r3۪ &E~Sm|y#Q^t(pkk.Ofeɪ45X5Lm=$t3b`w"WTmvi<~#0ED2=+4BtVF_YB/h&^i^ G!YcI`9T@;m:MNF7+?PƒiRb]iWX;R۴}8Es~Ž랙1,?bP }#D? )$3kߍm)G{G<~OW7ݎa*χ١#,#o#Ϧ{=9,̵8G &z~6JUBH5pxGNSQ_,!@dn$c_yzE~uf1O.O,tᱹ.f 1+ %22yf?cy#fEߋ^QK mIu[Rͪ&V#hFXyݝwz!pk1x\c#8NHc޶qU%0(밪Zh3C}:Fxq8VCH~/;o5Tl!mknr n\Fw7ߍ&47sf 2L `Ġ`p/NM3{WݛA@!1Z+u6.D+PGAͻfbuzk-_p2[--w>`CvSOҼ7yd?i(X\Hov&ce\mx ||}t# تDyAင}p{#|1:11gydoXDWS OJ&ۭ7hwPq68mIUB?=(pAD"ݸn9E#h6 ~ڴB \g ~'}8xD 2E=jND[ Z8 o6X+  ,hҖpRaGǘ 鲹f8=6BЎ0MpM'NX`~P3uӕuƓN_5B)YC+avWv*mԳTP+ڬ0Ο{f&Ƃau%O>vJrOዲ>Lqw*-/dx5D+}`ai 8.},njxp΁>q||xa`r\ VF<]ncynqn( }*|gCt T"z B@βbP;QɴbޒIh.:$| @GU~ lK;h?'_l&5*~1Bđ9M%|Sz$_O}u^0"_3"800.Ʋ*yWC?F,W33K(ayh7V{dhH+WoyLdw+[^$#SBb ޽; V a Y7,%txFpJ KEMYt'diZiLS8-WSۃ, ɶu)ޙ\FKmq.v*lqG` =շtry; UT&ir;H"xi"M%^G\MqSL;>mL)޿Gmn!.K G_0E,/d=W~d /( 0:E.~ϥ2z7ڑEa6"C ,朅h[x&uQHs?岡 P~5Zr鷺D;>x:[~!a9C |%Z88ׯvسMٲ~7671h*{z4H$D}}SPM(Z]_QbVx6IgQ*UU /=vO:/PG~H+ZԜ}"gr{f^ ߨ:[:N@lӬ"o\$/qx@[#/84\ŋ4YlvOsu,KVNW="n[LEcX}AȀEiރ,oIr?<`]Z/%1ҭ~2˖z6W C\쭉b几 P+a)rIW;n)Q7}BR(C$cgf േ*<>}G_(ew?/JuT6%g T\^l)VӔ@!ӒU@L (Uw_'Ա3l<Ίbdو?D̮ה|Vbˎ|]\ Ѿ!W yb@暮b[=~s,Mpi=U>=&T^aVEԢdŪ=vdxdѱa*gBJ3$Vؽ×<# c9C:ыAQR8`*Ζ~ifL|1*cTu{xuD%[tR0w}F7^$^zc/ܕtGd'/QtEAWW JM@*+>x1:8La&x+w`met7 ڲȍ zoѐ7:4E!G95Mκtrг ]cr=ѽitEPhl{~Fο+@Ղ@gKŕP)aĺvAo512-lRm1`BYm;0d\[aw&<#)PP»kd̛ BE2̿iuW1U ̑E!AOaU/c;:gU^6U" D.k1|f3ȧUw:S'3vIZZGr>(Լj$3^ѠXVϛholkq!~vZTJh(0xtK^ZJ<|vS'8(TȂX#H;Ọwpjp|Y;wkcaqNRs${Ž}~-X ЀL@ϢUjl$Z3,?/ط/NW_|0%C*4p4#EmU8,v\}{l&TR %M,!L @;7tnx=t cQCN8Xwmwu.Ev8YnŮ%2QpIl#gmiFe6ch*ֆQg.@(xəs4GZOr.z}-6$t79dg;GtԈKffi2W1;i&u\XqT5[9efHr8xk }ǭ՛23 .П~i/2B۔ަu. " hKY\Lտρ^ k{_Y$?$n5&r"oQ>~F~0猳@D6ݨ  #7X6  V`72 2pcftڝQݛϭ~P6k^#a(/96qG4~F~N8=8_9(Iu_;~vK&} h"UL'?_r htCIods,}sq(Tq4uocL9Ҝ |cxB87;J6_VV?eک7K[?]ڀ}('S ?i"ixc(я.nvgKa%-9+p?F|O/]Sp5CdNܣsԬt&p6ixnU5[7DF; ;|U z t=4GX2$?`W;\+ʛ-nܝS(&`tjR:B++2j_BybVC4Ub#zXj:P+ ʚW9qr|NhuQ q}-JWzqx/* DNqv'xMcw KҔKY&D~)_Zm@ -C(( 9fp/)jӪ|$y HN;1nXL VuUI[K0;DY@xU*(MB8ƞ[=jG/Ⱥ: _RPvWV(y 9"iRYQl.po0xky@M}ڥ5^We4ܙmlf{Ւ=-b |7r!W#xJ_v ( Da޵^lOAFfx>hfz}ZN0 $ȲvKC ΦLH[v({6i8X^'"'^g\uIHyEqI/%D܎D"݊|d%οi:4nFv>ȄsJďNuyu}2ڛzfNSA;l%z [I<*籄zd4ɪ [0t/C A z rcT:4[~ム.OÅ%t gcJ}L|({dEmE0\xRN 6ُ#dkBX}DEE^˯ _Zk Ucͩ-N\%RkhI:lrR5=k87 lгLXJ,1N5mr#gR;!wA$yZ3^@|^^*a c-ua;$_+kSi(e^h։@Ȣ ?J}ؘvY/`s$1T$χ*w7%M!Hi4n61:?&Pn6*NCmi֜U`ab/Bb |*?kzہFH.pC.B´G^CJEM˹`5r{++JDGj2 $$1XE5X*,AnON.E.9.]I}0(_esu=o oӄꃏ+hĬHl&Cp[d'*5?'Eox2^X@D@L@`P: J(} 5."rP7utŞR5JxPJYuW;;WK'S+DU@,(RH#jvbGg2¸4&iFG&OK>6!KC /q/6>&lB@%W^jY ֳ }ę8տ"ߓșO3P-5zQl9ˠu?I@&۶hkۮ'0'I3|hJ [04 ?6~owq7 yڱE h"LT%Ƌ\O7T̵b|oDw̼a* 6ޠFO[MSS ҋǔd2LosBEtz۪ڄ@ խZPp`[N_,W>,ޡ*ך*VJ8W[sttnO}<>X8{r7/Ӆrmhegr ͘XtE5龎/͒0~"f)MVt'\!/*=ɀ0qQҠTˈߦ/.$FL}_:l~z/lh!mg], !:77,XĴ즊s NXيCq7}ؼ?K|3{OyB<[`XXOsyEG 3940 +&!cJ/*#p uKIOhzbl9]<i5HF"om],C= P4-O}Dࡢa Q{\ s?ٟDkOʏ7!61=SI{aaU6W~*&ntQQЅ8mW^QCM¶+/偘wq_&Z.R4(:bzem7\BD,(p*"N6'531SZS@Y ygMCh 9`e!R-Xy:g&2є~3DoqшM VYka=B)_L2֌N\;SgjAKLM!3anհ.Š8e3%/=7I:҂5C9e^xS00&FϺaIb|y~j]V- KNyO}PaK>&%xjMn1T#*vx 9smbA {p[ *ea=n[ qhoX蟵"7R~%FjR8%QZW'l/yzgSm^e/jheHh59C)[Y}U|/ +Gh$z/ nXu kG>mFUIиvRyy7qFE 40OzjF} Q M8Qչ՟޳=?+ %BBꦊB|v9prXYylU($:na8+p.R\Z;B{8/18ms-e_Ù GAœȰe c71E_fckQ.)Fq[OolqF%iY hxD"ZEOTQGfx]Y>[!2Unj} ڛ> ˸-Rbe;2nPq}4Zn9Hn¼{vcCaEZڴgѮ$#{+f4D_\o.q(֟+3-};}=2Ւ-+b O_DB#^mo /J[KTԽUk:FsFM }̩Pƚ]bl')@o;UtK?ƒYبۏ|:#KfiR/OAlLڭ__Uф̫T)n_bqǙw*tu24dnjZK-lNW!4L;ˇJo Z*R6dg>˹x~,?6b\+;DJcTz8w6 T`BAO$I"܃h۩T("ΑƯd*I!) ,xdV ܭ;:yþ4iF (4_Sx?7BybUFpP7;FqI)0]bTBe ]z$;atneBj+KHAvӚ2;@A?Jrʛh PL3J[R4QNeKhsn1z)Gձ)NP~BiݦO8ۊ$xFX蝶x=1-abߢ}#F*pZ>yНuL/),u l:X%䪄s5%i|bRC3A 0KLX*9o3_P !mVM5P I?oKjrzvN,WFֈQ 4ji"{`":lvVT[HdMch09MgїQ?jDYj.1㩰j>NDm1WE{.j•%P6xműS%)kSTETx ÓIHEEwjl7vmULIݬ,:eyp3N@3Jӈ}IMOT0R ɒQ?yH+l5ƆhԻrqu&Kv:s?W- 8(W{I;nyz}3z}d)/9NCjH=}kz/Hpw־.n^Qu$ s k ABRlT*8ٶҥ+LY0/?7EL`;`~: c(hbY⺋wBHEk^3J,ݦ!{#=K2At-l 7j3[ kq&%Ba o#5n|.Zi86t k1,.A epn@rB ?zKI4FmQ>cnCJmz^ ?%X/8y74ZDI9aIaz(܇0 5v~+Wmw5Go}[ ^1 ]ˊh|M4uBH(D;MP;jbpqά6:3Y*Ր\Kd]@՚P❈Tv=NA'Poz%c*F&`ُ F谀#xuEqy"!\9nifMGydO,?iEjZ䓤 iSa+nEUtEhZrr72'_Kj xku" m%ʽ_DZw|™ kɓ'XRdRsN~4-+Hz\L0wٕŀSĈ9byyqHݷFaqmz>\S:mLkaY ūU껲 Ur,5OM1ɒ pr'{$:W)N 8!Y\ ŝ%Q O彼S5w^ȕGњ}{1 ҈kdPs-4_?$Wtf`G z㕊n9(c#TI3<`-V&2s4>\b*jڤ"; |o'dྀlLzVh>,JZkx"yT".QtĢt3]>nyv6K\XĄ$O4Y_n[Pk梾U5I(pńc(sn@>K q EbǭX @};$t lr=WĆ2 FY߳|*p_ٖ,-i䋢ObOHB_M]@{IZP,{ȋm~ Ba[.0nFUGԀwvտӊ)3+$m;?9x7@`p:CfnEn@ lfXB=MSjG.DgO$@tFy@ \N9֌dկMcBWHXB|Q܋ɾ= >&Ō1 .gua8ݚҊV8L_1W~:?0j1z:b7SrJF-7rL!Ĝ0 5`)7/( aŜ]#;BoOc#uo(Caj ef)0܋,nڥshp[KI;p}2JGq7d 33Aejf?lO)֐ ,XhmZkM/HD\y$1+jX|vK.PH3Im䉂A^EGf1v i(H^049q+B^bUWc 9ABg|2T1YPGϾhGT5we 0TQu,.`J@(Xӆ-o3qG2wk'\+nr<i 6LUQZZJ|ro1'q ;fDޜ)+mH0j.[/LjzߢIue`R`<:ДodJ^$0L0%h%Աn:{DS {BUW܉#|+q22UVl1݅Rx< c6 0 (09 1R5ErmlwxWr ZfmPm(ۘo!#DxF$LJ vq'sL?a O>K'," e]>kquSYIt6YpW|`KR ~6 Rb{;f:IQOoJƲ :d5l,륪-ǻ4\p]ʯxchʇ{:0-lE&(waPN.܎~-,(RP6Lu/BWVVތ[[RQ,oU}YJ ! (vmH ._#[jtUd*cw34s7oH{ B弲SM3=~EKp5pQz.ox~G S)^ڌ1ı:cDU5H[ We M[13{EÌ Q\*9~uҵsWv]Tꆗ _| u譨J|QX*j487G"w[/A\`5iӹp|jTR$U=_Sz m'? mZ],#j(5M-FCxBH3apՎ#@WPR1'vJK汎RLE Ƭo8;HC[TMڏèa{޲&( IO8@(#4rﺪr?nZd֍-b=7_noW&\5!O'NƋf8 (`BG"1^eҊxvB- d5 x_W bzMM`&3L0˜\ B4kWcS {8^){P@/`_9RW12 кgrO/0/@k nlmg{q)R|}6{p  HhRRUߞ`&A!sPQ"!$`fƸݿT=@kWq\/6S@~[ 8 F鐫t{Ǎ 3Q}Tz?0TPz36]XD'a{Vk2O(p]-ݚ?)w|&:, !Y(ϯ@{ t8=a_q $ͫ$ٻLǹ3^JKh9ah;=tv/>jYETHOӯ|k@g4|N4 M,4R5 pTFlWxN0dTjpn)D4;lRRl?? ">drq5b}"Jw~FK{V'7 8ТEzc,HǾg4l$fC!Jahw_Ѹmdrv⦀}BQ /4q`J͌L:ч&NN #k[Hµr*])Dy"H5=-r}=®rbTO$| &Gx5ua86-wX ,ƕ=>dU?03zr>Q o6jIe<& jC#kHwW/wu`pxUR)M# 1 M Uy×f{!Iy#]3ц~%>$7g?Nm s c8x-NY:XgUn>Ɖp[ele01AlRK_yڽV0,~o !^3dDV_E]u_3[fQƟx˝&I RsPRMCW3b$ط "$@W%xmyx2IN5YJ/-Ʉ<.7>kUjłȃ(Dy}>Aͨ?9(SWV`r*c, *ZV8 aFC-L4idQkѮ1tkdFΣ W>z4 w?삂?x:caRDF:-@ fx1PGL_qkZ),IGS),{8k{SH/7 Vul;(o#YCq"?-c=!4Qp>R'k'=W_e(`M{7z<{٭>[zEB9Ȓ#+&j9 h\s" "~ <#s/+acX@:Q&;+@<ɝBeYNy%'˾XS9o?k丞'9q5JJ.:U/ޏEF"36\K^AhP&`H%!Ρĸ ǙBa4‚6Uc؟ᭉ^c't&NT#gi*7&s"CN%'Q@NM=cʼ"k =]OA=aɠ=nme N3v[#+mKjx^;'}QlxUzQ'08y%uug fJ\hPדzK2u1edu<Šns6fރ@ KaȒA( ̃6`gbH? H4颹T:*eG5KJ**# )"m8:Q}iQmQjxe.o]jA7FU3eg*( (cExyJ=Ow*v `v'_ŗS'aJ^84 Ei)E對W<9 y:e93Rr/zZ|՚}X+s} jU񗅰xzѧYlIĒ ixWo ׾ rS GmXzn߸h%Bmyxr;pEW9l׭e"di&q{֢PPZQ=Syx MWL^+ ؅}'BQgL Ov. YlהEVN:B |yLOI/ pIޥGwɰlZ6 I!8o##B/Z#@sStB~'3Dīlm H >3bO-<'ڇHȻ.OX *D' e1/(|aE3 6c_eٗH7Ya`dGºzwB+o e4VZW{tkɩZmmL# N9cl1 ϴtk+̰=kMEN?Ǩz٢rN+Y GCxĔ\|Og(qvouA!Cc[c_Z4Dc#ba> < ɬuV~.P/GiK5GG8 x>\[7D9 /Թj ,(NWcO ~ˌHFp bدJ5Xi{1JԼnސOFz&Rm}3&* IXD!cyzr)26R %y=vRҗ4u;~^ )E*J!\6yb"fQD&=MRTGiw3&V%c AΜE*֥pSBrPT.,@K]oA+: ԋuzή441=Xխ9 Ux/ͻŏ$/\iMxmAꤝsq`?Ȫ R/?S1t*v㏻ OG94?|W0;y4[[T*^1Z/\K۞Kk@pI=*UtїVP-G 0űky)Xoű7LlCQǰ w Qz 4vf7~kc^c}]O54x@m* I`>m7̻'RԏYp KPǸʀc4ܝt/LqV'qF6YbtDd^7oWpZfTwձQ+K>GQ~dAc/>HtT)~^*PP}w\҅X#rVpQ枧'@kBbڠMAyC0}/W?EfgJ=z,rH2 )VXy(?6C ؎d8crhZГJh;{e˸-]`G@D}pr8t˷odpUhM31$g$8/mcHK~s5DL-f*6hG\UU]~/kZB%MW PzGݝ { Kg P X{S6픽7*Iѷ"&rrb{٫ĝpg"2d|YQޡq=w{H:jxY24rl@{BN1֣!G<Xtlb(kaFk.LuAʸ./qg̸lP{GC{ {Q\ AARl0!-n-S^#CKZp U9E1{ĵt &c #aQ\q?.ISs uMx߷[w aeh_װ*&cB^DMԠQx u^3u5,:uDfC.FхHzbn%+,ԜYidi`lN*kJ??Ȫ7D6}'mt2,"&i_.9nP!)'p! 0}H8Ox1ҏžzYv(BzEm^pod>QhA?r˽P1A9ܢr I$ﾔ*=uHV : l]ǒ559)ūM VhSRwvS}z?zx>}'顯<#͈5u0p*UBY2\S*/f濤:R *!DwwYÔw[z˘`G=?xHK{WQ7% 겥%˩f ]pإjt؀%`"!KpBuTt=7|(ag6<U_& 4T~ 1nKIccƻE6>ctً_Uu+)w Vٯd m`Vv%|Ws!܍ߍɊ{^׉)fcѵ,ޠzwUE]<HG'RKw`j_2Oz3WQP+-JO&feO,^:f\ηmKm9yz YkAhe'5UG@MāT¢i^Ωsfs|ȥmY{mCvvp?+/n]ͮ /IKI o E{j+?xz@}a^Һc˒Dp3|4V8-aM*Ů;9qx3|k`@L6v᛽܇_UIEK;fi=OjruKML]@{@- j,> o9pP;:kWXS) 5u<0([>b=:=-95 p&H:^'%⽆E0ڃ NHĥ쥜CD>}T39qϗ_/g7;.,Qi_m(s[-Ϧ^7shˈ--h17uPlCE}xiָygIZWRLYA3yRqӤIKi)<icK m8>LX^'SbXv/8O.B94<~LE& %XYheObƆaiߵALk׃x!ʐLTZc6oà IV+\9^X5짙^xdܱ^͗k5 ~h< z<޳+ʴ3Z*AhYy}\b{'{-{k5EMpr4^T=eg^l0|Ip6MJThUM2% fV*9Y>eB Ϯw}z!SDeR`^,t.}VIA1ɄA"NMt*їT_R>]o "|E$m)ab-Ӻ! *hlj +( H) OyX+[;|e8j3ȀSRHqF>8I/PNh!<?ܝq^$(ҡ蕕ҡY7$_f*EmɴҴ3o;VElfN @C\ eggVI|RG+ eV kt_!.Hc;pd>M 3qǡlmi+mV8s(iOYNm~uI~*2m~+{c1%H f<$=~ןsa*8M/(¹\%`#H \e1GE)}tP],ZHʦKټ  ;AuI4߅㥠{T]lKlK_\"?$fPܯC4./4.L)."V?tٯi73 O.EN3xpqt+>ҷNaJ،Kbq>s,e {@,[Ӛ[rwmsaO 0[N0o+JYva9Wd6@I4 h\v%-xէ D1R= :K3 {=̿V +_:LY0.ő>БFG6P@9f /VWɟZܧj2#nGG}Y3ȹ5ĺ;G9,&HW}^j6ep[em&kOqbVm)vvKD:NU!,1kK*;K vW:XTL^NabGWC\Jΐ$ ;XsX%RU~b 'ʹ&:z+~ Z0Th Ri"^!!#7)@zhz|y@Km*BtĹk_ѹp3zTPq丰J #ıI `BAG3 tM$ Y~9ߠ8Zjp ǝX/Ҥ| A`Eè fe幭FjBh2aĜvso S XE/ڹF}h}# dZf"U07S}3 ]pnF^DOJ?l(N{9Pt+(J]KH.+2;3'|Y<ˀ1%w筗iԓ. ;dO!VoD\Fџ_!) 0 !%O+]^fod5umN=(~ʨI+iT` r!GeX|,|DRNY+&)Kuװ$ ϣĵH3hx\~dFqN_)aAbC38M3bbF\¦l/*7nDϙj.lZ7Esx=g 5~C?~GY`@9h*A_f"hIbT}%Қ҅0|?*%_ +Jd+}:O=_?LCEdTh(ˊI^cXi2v7B?yPR!UZ=PIYGmDVib/Y^/7i qZHW_u%ʑ[EADMTTrbfKe &{R7O¨Sf<`~ߩhIa ujɖj~FSrʯMw W;HSe}l'0 ޮh wH l=K#lp34{R1d8ޣkqTf s8Lk5 0a:Jt|1E5Uܝi.=P<٨H< ](Bhk!ozy` "I~77g }c(}IO j phanXί=my c]),xZacSEQP'miA2mT{rya@F^ V5?\C~1Y PDh G-P]b♜heY ZjDe8|M-x2hm1SOρۻ'ӴyqVP4(+x.{0pΎYfIZ7C2MU访)XN֔v0ڐ9 +*aQ> 6XS~v92}{ғVG(4{ b;VO ]Eнyh6L7+zp/G}1|uw~5)#!so?~%lmyBdD5ˊk>ݼ%ƀe)z0owDr.d邕(ދHk /$>Izk\r`[dmLEԱxi|+spN$նDA6</2Ӹ9755_ XDGP䮪 :˔_k\zku滎upٴ7`B}8K(7Yߤˆ/HBX lifO[Z>@szaQ|֯(RHHY/Udd$>KT*-Hr EdzSZRf.W!S k\͆ո^̅ܫx e{#I+eK[f KCtS}3qYCbÕj.Yh3 ?@ Eu9CC2OtHiUsux/Q@U{?[~x/d+(/ۓGHmxg"s8ɂ%`̦ͲЮyn=uY1,1H+큦nsƮySH[[=H4ȉ[ppmK fmR1Pf* `_v(- d7 7Aq4vJNb'jAyVpOi@\r[3X1<[w&q&o(ʟfHc94٨Z^3r~2ګ@D'u<|x8v"jű/7#Y)r漂sE7'fު-r~#Rsz>s =T$Ub h_t*XcFB3 |m4$ AZCcsj uCD6G@xcu z ï0E ¤n&-~~0!7~Z)CZ"oFj@/2\a&P5t>A7P B 'N\n$۰$T-n*٩jn\%qP'0OKQp_xJ+tjRBtZdJ^s 1a1ޤi\Mn&M4w Nb[xK^m$#.'x^~^ޔZz_&WCeHPſ*G"SuO;SB?vP7.\8@ 衫>i {Zi`"l vod67Gg SiꪒjqtY/zm&9V$F"ng϶ni4M$mځIS,hasjWz*(e1=ΜNk&O0v%eikK4Ԯ<ߡ ׈qX!Pɏ ].RGL?"&ܶ2Źjn57ZWU͟' |es ۴ \Û;p`%6`ײ+]0DF"_SZNT߈gqsYs:,Yym'9JC0T ƻ_E$r|A9ra+utdbq .fϔ Hq@~ u;^?v&[ʾ~,bZOt#Tž9y.Fa\L+ѹa'@&aT)ܙhX A zK IÄrwk lL-y-]ELEu̽8cFN7!FX 1@%j`̳=o(SQm.W|IKy/3U[chDw8TĹ moGDd3_uí}r' -.u» $l$lktgF]mNCZ[b;8E}ۄ 4?N\ GevT rX\1:VX#A2oX">W߫8i7R2lp'XТº oAPtdƊ!M1&t0%vHyI\xx9*S<5Q_G$w:r=V Xg]' IgOqxiI"rbzhP\&OfGv[Si C=r$o -+}?\KcI;̜a7 P -pkKY[K<\.sшN$E=w |0PuN P[kӻzR*ߺz9Rr9ڨJb5\Y? {,`N]]D$^ٻn !rlCC0 <ԭGTsqR;0K; o1 ctE /6Q%l2Vr"cevMWIu=60?77K#:pxX/jKd40($1(W>E/ L'9Px9`^mFAºxu 2U&,7QDMljVƌނ{u:q@>P'T+j iPP.~<7L`zYPb'%ҩ'c8, bgwSTDLY^ Y%HH2D tK>EjGp^/iǕrϠ 1Ji}OFזRmN|ƀRq|&ͩثgOm]?bxzuXz','0<&-!T43r_.6r%ny<H*^}e'HP F/ ,hܕ,:M` S7EqqFW{Ahܖ9s2"G/H֭W(`熊R8KFIP1_D M=*Bc-Q8# ][xȇ*JS&" GzLrL6O=t+>P0xS;!C{6- m|f\K:@S#i*C 6ԍ12ڑjOeP]e-{OWݏE~,ԸKT%N^~)έ+8nS6\Ev5k!>$vj"ҏS$)]!r8 \mRv_-sDExK.>STtv%J6_egd&b,^>D8aVi4f11S*cK#T@w@Nn痽xrK񀧸šsx=$_ω~ƣs\#X謤MΌ;2mb2pD;K'-H ;'n<.yw6 FNP\@hCgO2=Hwwğt-\9qXs A%zs3*̩C9sO@,HaO|8X$ƗO.eދNH- M.x1F.Ia/'sq6L5\yNkZU43[T.dqdZ\\yGdAşDXc:q5\@$֗GIais0CsBpxu ? kp*FNc"8@ 틬.͐eᮗsJ>  uF$#lb2u&,O0^]1h(gckt CX|?x Yˍ28;pӞ6wpc|X2pqu ] ?-D-A\.DF2B4pmN Evq;lT|] D<[]AɴfrZPg@'/IF.72y!+: kw"v {9I^Ck2lU[:VJ|x.Ǭ>&7T^b{,; j7WakB ֎: Te <,V Օԙ`bEI58fZHX'A FjwS@4N h Zɂ.c|Ue̶'B֬ni2A9 Y}mJX!9[ e_ S$d%(a Gγo0{Y jF}6Yj{#KljLl#2܄5iZxT$GH#^#p&Fz8)yG@,{9p㐒䦬DDeYF|rG?"e< L"p`sCiN sb6"]ƊD>;7r4wVN*q}q$ KLB6:^EY&N/k_i溳¶;o@F&X`Ȏ~te4'$M\_H䦺[ k\'ZWgң'Țc9XV*4c88cu9)9y!Ք"4.KyQ)|a(_.Ҧ"eϧA\J ))_gHJ=^35TU?Fx'nxUϙ3&vb(ah=mX,BGVfX '޵jۺ"0qӤ8L3"HnZsrFlD -}5Lmu$Qf>?tlRܯ$;c<]I]92 ?u~BuvF[JUQPL*BaN[2W-Asu3Očwf~GM堹f>awJrC飋@|VL>HJIOvzZnN=HAsHYBoL+6.bgUe.#!|5\D[N)oP"fF~ Ը2SKKI;Tixw[tn`d6imGa&E/m9"E㴿# #`Ͷ94dSׯS4547{Y'W7h5; .i*K\qDfĕ(YȢS +9U4Kjz[2O Vk"b.dF@ ҭfeo{ÉR++A]6SUS ξThq*^Ȕr=oBKc|{ _TWʼnex8V>T]ryE_zMc=Em r\9|>9H:6 ¾ h"K7eJ^dqF tR "3J.rx+nriCظt v71u!wA5-Km Fvާ+:cPEhfr6ܞkFuCy~=Ζ)@ [&r)aqhs;?3mWz!g @tx+60Ml) 6EBa ޝKNN5`%Tm UwS8ĒB r^ h[rfjh0zoFyI&ڛћ\r'(b}+OM G྇B#{:2QD]J#}2h*#ЩV~K)Ks\+ ⑘u9s{(c.4;=rVěq&x׶&2p}@TX䅃Obw1Lᾡř7DZt&ڌ,XzCސDG+zqi3IcsvT;!PJzQ&vk}40I$2@Fo̒u^-LKWoPѪܻ8mvf,F*g_O_<@b6.9Xe2n/}" tE;SI10WhbW,N7M)AV[ )K?'&kh p"۸g"]RQCFu|$4ƫ׀VDB_ãh>_S^e{F H D+i/q֡4"1 53}5n)Bl 7/;K>IN,UKr5d7( blyrRCIcцnTxX㬷P5_XA(Iyuny&.~eې`G^cNdvvwnNĐ9HLK.&l\(jq6:_nwkӍfSBZiZ_̘&uLP߭X+CjhBAgCw91v 1bwоa-$Ů+mcr[?.S kpV0Nd.R\Vu *4n)krȝdtg%xP+㓃&N>Ξ9s~~ܙϜy3/8|ԋg^T>5!,ڕ(4SP^/ʐBtcq{䠁݈N@|WKpԀ9zva_ڮRP̏jϡBa7$#~ ZqThfz0Sd1%a<CԞ&3).].bquy"a" G fCnjǣ+T8`I͜W}H{)sg4:R~=.éd(Ćd*,9OVoE͸SUd3{3N`w2QƔ斈:}DUJ\I;&-Q[*JmR+s` 9y}\1q;\eelˮiV҃Fc9 KoM B$A5 7@vn[:a$-t*80Rr.;TԆ70=GNsGesq:ִˋj4ؚSl1 sbToT;O7@]ǼgL\(^kEe3&w"YiЎ_]T[i"ũnO&ڸGCe r٢M' ]xWk+x{#s[HV}lt=B#lDjͦ6edEɛ簙H;3(ڋa˰άسhvzRj(%KpS(arZc+RؚtZeDz^``JO!D.,1o]5ƕLZ2v|KW^ ~㵱 WBo%K/[!Ո'q襉;pꦶ s ^{HmA^VG2$B5ƽt-D8sWp8o(ߦL~׺cI r[^k!QâҀ{yᗣo^tJyjQR.KRlz/e.~/ 66;O }=-W&ejbL=b"rZ-6UBA.*o^*w0T2pqU|S=(l]м7)T66=ozޠַcv#qkZKIeY\MCV,s{f$ns\;D6ϟm&^$מ]$$ڒG Use14bIԙ|FawS#Qp!0L.K(Tw H 'b eb篝>3R_4,."( !@(8uPϺSQc2"Uy[t'/Q͏s1-.ee^ ך ޫR2SkUAr*YN}Z9^UbTl_hƱ1SlbS JVs{n+;_;񵦮!>( rEwe2#wz8ďC5J)msي[HU7֒nUlK6LHꠑu\9yr8_wO¸'c]2qFR& %~!U?FOO)]BF2o=f64_)5L TqmpyZnNJO9sbs=btH΁07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!! JޛZ􄱝gj؍F*^xӳ] Y YZ