sssd-ad-2.7.3-5.0.1.el8 >  A c U]^[*=9:&g:8zå_O]vvmdE 9!#Nə|-]p}{aLXo'&Etl_4v$b»RŎ0 %Bٰw ZxBxbGBWugdN".̶A\:$VUd\m_s7\R_@*rÂ*$GLZ/%Jo{ 3 J`I6t cG8eU>A?7饆$(HÈmA)'AcUf N3=KtLR+i{C0gOֵށ;T.`IBx.ctsѵ!W C E6 }?)ܕwR3 6{FL [PmB?#V&|hLU=eJ̀C@`<@477122d0624ea20df2f4ce0b45c5fbe3af09b49bfc6d6e84bc27d466fa67ab3e104e6cba2fbc6a2bff5af17534fe874fb9a6c56d@c U]  QZeZve}Nh8sD blZ zB-v?NcJ9/n&7(3lR5ϼRyVPP#A '+9 ߐ6 St3xUшY/g~4K ֋%:K(P;J?JlQ~0|A]J[Z=:$SL~F܋c+3٥0$|BBvꢒˆc2Kb=2S^N;;D ;Jw谺egf֪3>czY5 EUԥ"OI5Y0CP!6!( 8JMU\{z,г.bTp\" "fanj_u鸅$:'D4v.QPXPIf!u8}A+oL{&b#`7Q*(QЏ׏g.ܴ&>pEp?`d   6 #7TZd            L   DDTD mD $)(88@9:eG H I X Y\< ]l ^" b!dMeRfUlWtp u vw4 xd yN\Csssd-ad2.7.35.0.1.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.cƳaarch64-04.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxaarch64'&EPK8L <O AAA큤cƝcƝcƝcƝcrcrcƝbºcbcbcbcb6f29ab32ffeae28aadea81054bbd466295a2d7eeb7ee425ac341b224a4e96407b60bc5ebdea86e6f2b44a401430e82274e2df5d5eb0fd7f01964e6d931d0c1998ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9034e54f24973f62864ea2a52ca27339c2786467f78eecb375a37bd8956340e498e20aefe1b7b2572e175d283a4f0bf02c6685ffda0233b9a405129dc88c6e490874b84915b9f4cf29157ef9c9f0ffbe690bc66c7bda131c2fdd6b8ea5bc7db95b6cd6c65a6e08eabe8d716161e9125783bdb7bc36b6c4502a7eae99ba60c2a5394../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.7.3-5.0.1.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.7.3-5.0.1.el82.7.3-5.0.1.el83.0.4-14.6.0-14.0-15.2-14.17.2-2.el82.7.3-5.0.1.el82.7.3-5.0.1.el82.7.3-5.0.1.el8sssd1.10.0-8.beta24.14.3c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.7.3-5.0.1.el82.7.3-5.0.1.el8 .build-idaf122b5430dd69565739efb11e2464028876065acc2cbba0a741a32e25825cba33b5c9dcea5e2alibsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/af//usr/lib/.build-id/da//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=af122b5430dd69565739efb11e2464028876065a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=dacc2cbba0a741a32e25825cba33b5c9dcea5e2a, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)77PRRR9RR RRRRR RR6R0R$RRRRR#R2RRR*R1RRRRR3R"RRR R%R7R:RR RR!RR(R,RR+R8R5R R-R4R/RRR>RR R RRR'R6R R-R4RR R RR!RR&R#R8R5RRR>adclibind-utilssssd-winbind-idmap2.7.3-5.0.1.el8utf-8d6b6043c6f702e93dbdaa9a5783158260cee875a56d0ab26d069a23459f29612?7zXZ !#,s] b2u jӫ`(y.W$b JƒzؒT3&gvmYQFnn8t[dvq15EXHv::kPֆfESi["yVڣ ktu;D^Z]k4zA[ eN~յ92QU~3R1ep%<0`ޕ~ L*sW6.+W1 a70[E6{y"-ii" QFpyG 5ntHC2PdΎcSIֵ {JC=rZ IVt D g]hHDJj0%!CfYߍuYުRTdA%tqi QIܼNa|=u0Ph-nIir} AeybNxfc]Te#|YvH"k E[څst; к hH%]S]wuq]"l 8kl"J+L墳*4Ϯhj$!^̓#ZaGkzIW;,ֶMVZZ)ueV?lZ5aX/gYzSl恶!cp-}vn-Q\=pk{**<&$" S[6z!CiM(בKW#H7e3r.%e;^f  e:ʍf}V eDn}d7 7[tt&@12_`6 iC5*]̭#v&k!y:D'QTr /{{vXF6 M6\ DqGo8b$1`Шn(B`T:Gy/VnS&U\+3>P- &l;7l1Pp,t!F)l $/]5Rң&տjm"*B:d42H N*ІWL2K\idvW-*rwPX %ͤb(~aڎ{G1&rwڝs`<- .yGVC@_cF}#{",dY=+1 #Ŷl?(\3%r?7GA$B~y~w'!c mͺ:2_ì`'m.y)_I7V[BKM]@8Lsl'k{@U6UE^XI3ȓ$Wv2NFSVr#<$ؙmL5 p9粮FW5_| ljଚCunsHP6(%M-ĘfNarhRbEU.f"(AGJ[J=Ãr|nZ-31\)[a=NB<\%x7|T-)2,)YDaLnZV8YC^LȊ3L=GHsYZJ]#Z[qd^#fe}JIDzU>'*h4LᤦJ~BvJup;|)1.W.&XP>:=qƽ Ę`>d(W\ߚSUs Lv6(B0=LϲV\c.e9jS+^I>@,}0/aw*;yU_Q&3>ǩJSCz\'3/=,cOo<8nja2"JKxלWH*7doͤ|=JY pfvwlm~1M YҔP#pQٷboϿ @L:"'_Z2SF[ Dřt ʢb;兆LtT J&q\Ñv=|//vI^O޶k 5jAx%U6P@0Z FqDLT%<;沍U83XShϾtUW ~-ϼ"ٗXJX<~X[!Nw}~ɱe".U:T^#誊ι|6DNNV2]/O{F 1b}{4T:4Pұ8!gL -l4i\ Þ(9-"יJd.lҚ_ ˄ ,z%<(1iDco M5"H.` !?mFͨWP1ܭ|ʘNGQ}#)?i XfUJ~c~DUjS=.J@}fU/H4̈́5Zg$xNJ7!ie(>n!)Wp Ӏ[)ɜ k" Xjwƈއprid "}i*"MXsplBC~K$W)TsZSLVҘvhO^XpGc?i0F`C?mP&}{}YkD30BɈ%kB .ZA pO}?P/j2t`Om ߦv~.Pά2$WC'4tL$-vSZn[oy3Z‡CZNs_g*.zcV7"5jmM9iwf%6n /X|2r- m,^  O8(#!,`Z]ZmlWq+@jFl|铡UwObʽlkHUP*@oվ 7Q$A^a$)v5L"C5iW:OWGk/Isy朤e8|es&йz->H vl |9Br_g;"X[e<0D L0_S` u(WktK'HUFQm`i6X7}eщBl艦0@2pvXcUQQbQoY(:ų=na#=|咇2RҬN;\}==H8^_^M ( :=궬W0ڢ.b]3؍*/hނl~nmv$ ܎]K }-[{e*J2yNe!.89qIfM="H%N A5k_ xN@ᑲGѱ?WTd>-{8 Y 6ʋoIQM <@`e~ ״:::خ4 8*v]˅s^MĻ8Nl@kFbgΏUXJar R;&6h!Ҧ8So=D]( %z~Ҕub-jWmkTHR+tKvкHt_3El`E)`L& i?kF>kK=yW;D^:iHp`bW%Evj؈:_%Gwq#CUpJ'j?˱Ɓ1pBM`ZE0A`P!~mby8GPWK},x!lIlr@O3gYף7yJ'eE1lԿ&<v'/Gm]"BI&%G;v ٺ'ٹ\$IX\D 'E/5=et ;NJ0T ;NrsgcmhBbtBE^>j9,1qסXW.4f .줙`N٘.E%JeY FDrOŨ{~@߬D9L&k&2P\My.z,[!av%PuuIFˊ9zE6h'H~Qkr|Oˊ(* quzM x4ȀЮcب%L¬&< pt҈9 ڷ(F?UATٳflkVBLH:!FgqU.5+A`*@y#AAB+/}rm8+Y!,hiw4CŲA 6z-[Ź"pt<眬bY*J'48HC,C'*BEҫo;.~dyw{@*$S3h4MLǢQ]^2 z."DyejA gDisCJNuE3q ʜjc d-L6?QcPn w4.WwU/ϙIv13uhܯCX(ØpKM].###hݼ03Sxtw}q aNjY*G)zlӀLo #j=WB-n7u؁R8=lHd<, ='*Wy U[J0w'ABWh Oq>FВ~lX4f*^Y;P&epį~n{ǻj&%ֈId.!iO^+ wK%O?dFFa)C%oǒ&撯Z-Iܩ &3gH"}b5 ^81K ]'!No~(]hn> u$ ԉf1z)pu^wUT-F-'a^q/DH]~z%a3?ժdOi @7?g.L<19A RfﾌXx}5kU'`PẍFTO`&RE>@ͽT#fXs\d闞Z5DB Rи=upJܵ^{U.[8F.yyۻ k϶ Cc[Qiq0жhiGlT7ݑ:7ߖXTޚHkG7C^}g6pl >=KEI=2]HQʍ GS阣5$nE&Ad_wu<T<5{Os+>r u΂HQŦڼ1_ռ`fɷ<]BRP2P{mVZFk,~i *̊Bu]!e2[VYUבx״;D~>v^i ~ʝa3A&zU$2 / L֡(J/=Y]Pzr7t0O氎[a & d P/~ߞ]&FճܒAMʊCqٺӄ~PP[{7t16AuEk/s7S̀% mD?2{ :AWn^WtӴui`|{3S_"X [Q9D˩'U_f+sVQEHf >alnb:ð &(HB\{0'Aݎ:o &tuwNb$W! ;ę 6c!^ 9-u;x.:R?RtSzăx#F{ē 84:mv-*=7f9WINgjoCxHģi;NCl_ʗV&{+x-MǏK EeNz+s apTO"^oY␍X6OxOkHչN<z ,[ #d{NHU"Owʬ(hsU~}TL*!ZCr53YBSIO!K+'9䞋vڱB>Pڃ'y ᩤ'F_G,9ROFUPYOFن-<gDҜ0 yn&7ɥ<j[pgUh̀Q"nX?d ,|QDOK=E"tvIM֑C4< ®4f&rcg<0HW P(uȮj֘8~] }QqX ',6 \PV؆Ici5%1eBF"o/vRbt2dbVc(gd#gZh#0Z7m䆮Vyh_XӁ@8D6eDniX⏑m}B>/g|WOkF-̋Jƈxc+]Mm3εBgAH\&1\:^#1ۂ0wv[u-.E$s1o cVcJ@Mߪ9lu`.X6$O1[$%MؠG) x5o*k_s}E,ǽ׮̧= 6t3S`\A [f X(GrGVX ǂqt=dd6XgL?3/\xΒS|I BKizP'8|@`乍i1M}[xI50}H:0HAՋ j0B]}7yL5ܱPi(pt7flH4><%& <Sb^%~W}ssjWw}oE@)صUAL܌Eqc= MߕLT0Cc:Mù3-yO9)C,T gFN}AKPus){. ,zy~Ō<,XEE +gQz_~\`E,+dV$%J1x[|A SKШ<8Q 7Ysqn cqXC}5@95qY셛/!XJP4]C~Mʸ᫇6kps R>WRҀNo\]}k58AsvcXm})?9ޡSY7գ7ZTGZ:A} `_|lWts&IZsb6-  ENQkܔ.hSI{~ !da-ZUfx':beQ k&r>orKt\EXJ&9rZ"ͦJw xɾ78E2[[&. ;Zr_`U,n8cD!~ vYh)-~ƽ6CP":>1k׍.,D\H w dQLؙ,a"%L r\u/Xy<`-a"D>C2%~ Dng~gPvԉ2~¿-{Zm ϫ¦i 󊗜* ]zKZ9=GVK+:<!,:6; e}%NEbJ̎ FHȭvMx >7J6fOY"3hU4ˬMٿ^dkh [ B0~r^(o ( w殺7(hj`sIYr|B'!,B9 s?`\jn;SRp3(,>% 8H0}bA8l8a#0b|4Gajn[{RcB]y_.Ɖ#> 秧n5ÔO}Ggvi< L 7'9xoe_(?[feS H:~f7:];JW{ LOk~]BUxc[GOOF[áPjiI$*8/I%(V-~A@i܈osF|+G!P,?ڡ:GXo` i'(b9P&ߣv#7UF+ Q,fAC!>xDIvڥM"u0r5dD^UuyxpfLی*GݥTXQvr>4'\ǻUkJdRt+ʫ[s9"뼼UXSG-AϹ"ev,YڏԽzUnbHZ 1 x%hTS57j&8*I!cgvp Fܩyeq\cz%[lε+\Ը{<, .D#a ;8dhcSn 1;:N39OB)^WfVUlgM$u8%*Թ;/_.U~:2|`4@bCg_( 72fl[^ڼwzpܖkk+; |Wc&NY/8* =#4:,fV2$IEFd .߬{^7%iS"NJ ~'SV6*}C"14ت6 TO^\FW$O"#Ks]rD{ VC߾h-"Pg+|4ѝob_M/jB0c ?1[53ҺkU9B}=J1׮*nu7DOf3b%?Z+է v{ ְ |AI*No.SKh4h~NMWs꧊i=߁-2eZ>A0lmFC s+m9J*ul`j!!M ejm^ъ+6)#OZ]&#(ml`| #/96 rsESc0aMg~m"=5/Wg!SiU7TuHDwcXL9b,Mk0m[Z`Qbhm=啒6zt]-Tps z,DhSbCC#7wT9FחbFx øFoocp)JOmA0$ÌĘ;Y3XeZ~X'Y 8h0<`,8Qፎ :> Ѭ$DvmB|msӏzWCmxy[I1!ٮ-kAgHr4"w֮y (O DXOyF1XPu=uIITӝy^%-*Zxȣ쓜@4i Ư&# $kI`rbԏgN_UoH&ռw`ܻy\eۺsSp>_S zcЭfF7 jMY ֏&l$RN+w34dXѡD0 uULlf=3mXLf .vCד,uIxڂ,%mm_lҨQqU8c.3͎O 㺎/ɃԮr1}G.%2Xv~Y m3Q4Z 7,A9mRy y)e x:4c2 0P fVeǩ twis  9>9),;.|C况B-"?FK{mLYk_cf[} \VnU޷%ר _Ht_o35:Y樗_$8p>r?8NaפN{OM3+tٕTY6nL~Mk tC{RlT7}ŞqJä΀eVD;f'WW2s7 ]ig= P=( =]S -:I\Y^]o_﹉ʂB?Za%Ў7OS}*vz's J wi&}e:uV'/L= 6N>*1MݲcJr_4C, =RhTCF cWUah4p |НU=jTs,ǘpI$< CA94r$52vWk_@è‡l_M=~.Mv $o\zk 'zՂEjJ&'G'D^G>t*^mie@tF3+;k 䨧mv]@tNz[eHʒgb4ų0 3Z zkcilQfI^c) *5 SøwӺ!Mj;v_6Tު,ߗ }R%}Y&W1dAѸ|΄1HjjMQpn r'WL=.a2bvzC>Q͸pri6<ez*˦6.[F_||)H3-aEfbXq} N˃4B S6`Wn1l׼Y|) v?rfRɟ")h_(> z1%aRWsbL4( gVPQ'Ƚv!Ob{uv=ٮKvC-9(uc6OjE4 mkEm3|0`e#(&toe/qŊ,gIV@GZ^ǽg.7G1ɧ^50*yAE18"VfNHstM0I+"F딶uD6sS $ Š 偢&ֈODmP*krVʎЊTB)Ka,}RyhWt'hϯv/^I3y9@|pkR4|FgfX,j~(Or$c>?E{Sv!:37 V~ cd#,+ [Eo\~`P"eb;3{cEZBc$#EXƸӳW5QݩecwY#M%ݗH1agC~] +J2Sh s!av3Hn"a ˆԀ烳p7+oC ;3^J ‹}2Z6 d{0m1dw y %?R:-&{t}~AC4#'c*\ 8~>v}MkespKj-D<mRp`TYFy+ fquI,D| oġ v[LX.M]6a>o6S!io{ W"K$NˑYQ/ ljꘜT C݄/|]ސ$ZUP>ER}Ͳ] S>$>8@Zv#BD^l2^C3??3=GdXz}n$9#QʺʴoI^P 8s &bD͠ʝb,8Kzb! ɹV%+V'bčv\Cv̚ v߯Ob* ǽ[M?(/(;TQhW^!}R1=eߺEp6# ?nR.I&n Z݅,{Uג29?,m쫅"Ox|;yC9Gz*{n!ݙ$"8[`\JH7 ^ }Bw5%o2ͽj+ (iJJ!D~7_2Iž}X Q!M,(x"Q ` J4v`jG Xװ*%Wgn!JP :,GXjMS&<&MF3<qtvCtg汋Y[8]=& aN=xr7 &Sh;{' 1zR֛~6V\rnht[B6:F]{9P;+¥U-4{G}o\ I`z 4۞*ƾ4n#r9Ӕ"8#V%߼7 cHv\3vd'DE޹K;gΗ%Ն!3 1KOk(HVtG&5o ƐGL&kzNz %1uf<qzs xogk`S=\d +e\ M;qxϺt׈Ϯpj+.ժdfc˄a(x/~-wCCjL6 "*> \PAsxN'y>^4Y;30KS$k Ϩ݂?_ιScx ]و]^{—H3گS9h ~@_y[$|@>NY)Lq[4aHk> "Ş6va{!\EAZh{?/a?OJڇOrhf LA,ձd5uF4@X?.]=}Sڑ~Bqm+?5;7~WA7H. oAWg/SJ"sZ;ē,pDM. tR|1B2jg(>DcЬokeL˦=ub_k2B >Vy[ MMYȽ~ WC&d6Gk HU#L& >5^J&5bX,{r<߃4@Ty|%{ s$ PN4Ƣԁ:k\<:}EACIɆ7a 3c~`?$jsgZnQ{0@G. NlfT3JeQ]$Z{r$GV\݀ w ghe685Oշs{  VfeQd^1鲍a㵋UɩO4L`| aH QIx_H}A|76??܍[Yz%=(Q7&ug/ݟ)jN"r&,ߤ_ptnV,)?:C;I<G.28>(_.WB1H}މ"ۆ'+,MfXkQGaX]j!Z<&HrGӂ*,YR`1W̹+,mg8x;JV&S<'8뢟#/'nҍ ݈<#ٟ4a`趗ap@$˪Te' c(v!L?C("a;/C][̡kvPJqsE.Iϧk.}@dvK# 9@7i8ME|}/"@D_[1x&|PP*TSPR'%z֐1c+܎^,JYUYee ś'mXs 8P&h 5=J] [#,w;O\7 g,o x繟XpwT~kƻ)].߮y>\XE%deTZ%L`AޖNǮ[ /?Qm񴺂,ٷE2_rZ9X&߀fDWۣ&`މ@w33Z<+ }1juIUL`?t88mdfbnQEh%/3;P2x!yKDD#:> U&2J2 jWL94P4WJ 4(~ 3M/%v~ZM'::\Ȏ g"x ;M/3]cE}_h` ZJߪz8ؐ^Zݠhy^pt8S&N;"xH(:h}Ip=y5^sW nIZ jW~}S_*Z+2߿8ל4u{VfX.q,#Za}hr㙯+#Tެ<|{nЩZ?bX@)H_ڼ[ u%ƂMBtk?PGϯPi+9OrVuUp#?*qӏ\Cu"IzӁ0L!@^f&|W1A깃u]wE=ib׫LS漢II'5#P8hŀjYEl޻r\1<`Al&B~yY@t.YIa^<)٣2" J"ٙ4tv"T1GD7Ҩ#rT1W,bK Uz.jV]Ccǿ {.̘I29vSo1h*c*h|Ӯ&ޛW; >W{Nh?8ealBU ̼BÒ(J<jzvɜ:84gʒVM^YwS:]!gAB@.eH3(=q8@ځ(wtS=B9,齍5p sF W\uKxg:A.r+Fh7WrUӠP1F0=@䒱jѕrPkA +pqp;r(#VWښ\Y\)w0 &0Ei*9ɄdW <%L! !,.bRi&Ș3Xi%~½ط)Φ =saM->À7$WSDiiYOK|*$QGd>W Ua.ܡkȩ0/ !q߻CJ-ooYQ{o?{= -5ju)I \., DQ m V>V괙DjFYCSЍzM15s g4alXf@|o_41MH+8'{>j6|@rs ΟA1z>+y`( Ržo?-~ri + %k4ص#&9DR$Bضu',~^[6G!Gl*[-?eR5!N" 7"U~v'LVX[ʦWF<lKJ|Ͳ݂j!SjD]9⚔q 7CNpwJ'2š`֍VJSqbVP(wšڞ3p73(8ˏQ @.tME@( e&7k:Ň,KKedVE [4;j:UZP~AbZWXNI<*1D>Rs@J#MB3r^o㲼EIx(~29#ne2eoӀ%d"sRf U()%29:sa*TX*[ ;k{~n40!hȒ3^F)8'Qx$a@+rśs̄/: YM݋3hz8 S20V$\'U#m(D64fr,uē߾s)SdJO^kL>z3[@d]&/Y q}j^ >30Shxw6ΫQzQ/ҩY{#HLb۬ݱ3Jwϗ+SO$m!_TeyIq3 0ŌxN-@ӉJn˃'H/֔.ՙeR6}zN$1 4؟>-;B;_=,D]رZGfjTJ'cn] $[œh,YBǾLMU,UpBxޛ`{qRJ-,ofzH"k*hNUt!-9^9Zn?L/^siF&Bܸ#$'/w#=-$A_^Nqo 31κk3G§Ln."8KàbDr`s T*σQWu9&Ph$Vz^=ou69_9mS*ӡ $X7FG,aTO2ԟ6ݫSKVtu+ېQos=r)#M0)&m&8HBl}td /4daW9ů4\ZZ[{ 2mbKIIa.xڗi&hdZU:E:^BM\Td0ֆ8ȝs 3F\e4M7 Կe*_z8fk<.4݈-`^"K1?" 'PqXu\A&|epGT10YJMW5%g+Uht F0{ юNI{ڗ$K:ր/Ax~ઇ\x>P]_B>VOrR2" x܀4.a2m@OZiپv]kR`+],6]Kf;,q z=^{oKB^JiEC^Yc;H/Оus=4Fgq/ }wwYyJƒsis9j΀9>'ߓMp2Y!1˫?{L+%nm[::MAIAt(0TU@Z>,K/'5RZ ztk466%ؙy7;?Wڀ(Y|q&lmq7|9Lum4v'lYk{ؖ b͟w0P:I}E SP|q-ھ{`5N_S*0H3SH@\XOU f ʌW(/mP"I2LX?;߶Xkj/T~XTczƉw@/X ]JP~iT ecD3";w 7!ίk N} .+b*1bSwt$ mOÜ< s8ya e 1[Xaz瘔dF]nn$?mL B-Ht_>HVDH䎉^A K<X61O'\L 9#3yj*ezJ~Z߶~\;;eWyKu{r5ǸxNXz V=|q9-4ǫui'*Y@a@}6@'1UN5*a C1o ke'UA)i\\i:ai>0QNe|3U2e*]wm#~dD12 7F!4^ A٘FosEMWNXN@c:n^d΋ $oxtُ"4pU~@*<ؓeJ{/uI'<,<uki).32˶Xyu;Z)"aD}#1e"J(B"RqǴʄf~py}IlT/E -r{a>]0  Xf~BD+%lIVw/\xf=0}`U͛i *%kC:ۄ)D/Hth{Ur|'r`KoDU5kVdsu 10UO[ghotꊈO,\d|clۏw,W9*JFOb7?$R&rT@'ie%@Iu'::V=U+HO+bcngL'|+{Ȓe4ֵ: %YV &ZOp)ي!=iDq\O;ǣ bfЀ2W.:K|kxTr7,X1w**K4@U%u{ˢτz> %*5 ^ƀ6輝 3᣿J¨q/z~nB@ح %ջsQI&Hƈ2!y*kd\ |N-yLd)xq3T n(ޭ͟z)NV_fPfi{ b=O.tP{]W4ypz)8r`wHeMY _-< "a)"q+G2shD ,=lsjywK$Kcɧ{rizOWpn#z60Yt4-+A!W6IKމDwX}aOHN5B3M[EoٟҊU.'| y|dAȧ.KUvMƀ9vS8ThǮ˗X9)+=|`wP^]ɏ0mCa~zHFJ7bːHX5¶χq\EE{/c>o)i FǒtMES&m C% x{D!VI3.:<2J:-xɶo [ҜLN<@Y%+Wo8[ ) jNNR^h5kEm:4 \ Bфxpr AD<=G#t,#hs3◬k8r)Ӳ$H6e: ?kϰ1&EQ]1U7nkM3aVbӰfD;ѦnĎ]m5a5_d"坑*bY5}<ʛSpsg+ChjC{Je-O1`^O/!Т(/ks4ʙ6GN"1Y Wބ&ܠJ~e^W$ s=5]rU"}C >$jPtC}2z7̌:qq2C`e89 slYw!hkwdzV?wW|uZտ܃ ӨԂ MBN:^G鮠>b\b6j_-\ hT B&{=Z ܨmLLxNy>*f5nc.O*n`,VN!Bt82]L:'(A ![geaXBHod{(A:(`Y:m`6X>f k9%^z8(*J!p nB<#L$S{wz hԗ,ӿ(6(+VEBΜ^U Zóx_cRcGsOjCvlzӼv5KFO!\zr&V+FzDs.O\YDi>.'3߱e`))qvE)`kTvGSKhCQ d %dg4P8{1B.KhIjR w %MkWʂjAbJBY-Nmźg;r1tbأS|y}єzsWR2+e.+ʪxX{̼)l* 0#%/|>8 ;a5|W|Y-Dd5 2vݖp~[7lLlh٨C k#V3[|!*qS#Kb|Q4a҈QLɿ1Q#g]%ޒ4 s*9؉Y>jW k3*R;uLl(n+@; $ΓJGTܠ9c.X+AWޱ>%"a:%~P},gfpCfڒiy V hhW?-F[MM_+9NU Qt?z;l8#蚵gxAR4?ThԡIycx ElrA35wD&a uHJ!?$>[BGVz[/*oWȞt}—':&"0+)uս+c0_۶)TfAүiQ6*jyP4 DڽyŢhr7), ('kֹ~/]ju]" I%CWWܱ7aacX^M{Se]?X* ='Ǿm! '|x*,@"#ChGe0UꖗmZK>g:Ap^ju@N"~D5xY<κpלu_j@Un֙6iQR)bkItsμϢ6A$y2})j|8ҀLFGi$"x\;q3fVXQ?7tZXCˊv/6ƶaºpu<ߥ3 /bpp3 w ]p&cʥ o039j!$"m>&P z˃Lfʻ˱SZ~|}Ab1rrx׬>yF_z 湉N8tqp-ryCc&92pX0b ˈAd•*#X+p9iק1~׀2~Q]^OLV/ `^qOB C5ҿF&3 ":>MW/d=}"\]wBVFr%J\؍uB5L-N#) ^ ),T ˄t:mmNa0p:u:)xjN}NY [5߅MtxB4p}}EwGrgymaGmN{F/M_˚?ϧ#7/.?"65UwS#7qo G00FꂓFP H@]aD`z.>W1 89(<(đbn9J*Oî{'"9Ps!M%?ިOO֘ AVGVCF3|0{nwË, / nMGx7: *bLJJ`%L5qN57N>=^L"0z:0z5n֗ޅ(FBCTKD ?x-pyzK]hʻضl[S(&hc^35)zRN;οД1{]Dee\$p8ճ>$ofX6`S)D_-ۄ哄%:e%FlO]I|*ݝF^O5w۔.v71Otw3_b(aR(@֕cv3'-cZD@a%ZM-#2p,51LArǤB2w/΄N n6v 0 o##xqk$ۯ*=):ܦ"e-$TO #:peWCyK#.y EOE=L%]Zl}AG+OSBhXa-(]]~_kA\KR3d }']^ڨO0٣-sTQɻv>KN&55SbW(y!9cr [oJʽ ?aBZԼFaAu[j(T^e-blr y2&DpZ秆?jwZ}#lF6AcSnUf$!:p2 {,Ŕ28QbGERhhsYH (LQd;G Q3ar GCH&3Qj? cnA+- ( 9)&,Ro uո͇>y%J8Nle9ZhC(@Jf(z(f*wrhf,3H" (ܖ"&d8"eSs/l=HHcvHUdg.|QtI^O";,Vd໽ړIЙ A*!{L@2ht5vv eޏhfkYyhlq=xqtWc 4kv޽"NQ7BO 3&%=|CVB*e2M|I@T2nkσ@Hpl'@ Vru2,W _q\Qw`,&V9xzpɡxܻH4!& HAIV<)$Ґd5%O j Pg!"sn(e~cJRk,kfJu#c?f׼ @vi%VbmM[8^== LYW1 +TqpXMT{2jh9ħgMds*qϸ͕UAM <\QZ}:~~MCpв/?ˆ#oP3z؊7F =t0˖ɹ2¤.իC [ߤ )&ͿJ5h ɽް.&#JQB9b](?L`(\HV#  Dr%VTu{SiaQZf*>4Lȋ4m'U^yѻ(]]b0fP0Yyz|bE'ذ=!1{+QEBQi 2{ Vj\_ն*ʄdfQF6}FI 'x7jr ig^z'rFOݪ2j|˧`E!A \ ҂{Y1ޝ OF3} ilW\trG84}NgBqq3wT4b<O^Iju?bkQYY1VS\H1| O!߅,AhE7WR 2uy(r>AkSS~Aqx!}}?Gaz! yACrkjx"&UAHBbWߎP ZdA5xp /ǂg-eo= ZzFД"#au PJ䱃vY`ɧ=ұPMA. TLnU=w\{d'Q6V$V[>+t#ndӫ ЍP뮀7 >kCbiKʄT'zEvm} p -d%LH?kx$[z۵]Zky?M1t!u$,viupXeskeqȕeyu^'nn/+h9(Rjjo-Юe5?{^xA+A9/ \0cGyj/^?/z-T[NK/taa:_ u69,u̝蕺\{qMt_ dRqhm ~cHO4bеwne%3M~اy"r1^ zUߩT\sKOr]ϝL$sOM:Q.39U P]. {ndc9O@EV8J!*r73-~!7{ߝlB‚|dzY)H3a.)AaN&$ih]h垼)Ȫ'(糢'@$&b k k'oJe(²&ѭ"P9;D>4ܔp0J 3_ӍMKi+/HWܵ$7Tٱ6`۝s D_'c1kʓMBGQ(>2A ;ДA:L`7z:ʫAsD԰X%u|r1<Ԏd ,,^RQF5KےwvzaFpWeq'ڪ_i R qse 2LY|v f׫J8]tEvr"G1aiZen5FpqC>,`I7WPX*73 :e!q'+㾎g}߇̉XiM.RKBڵ2b>Kf=*}'Oϡߴy_˞jq??Z]j#ڴ ]8SܳC=u.k5 4죣8ԕI[PleRv_U#b `[ɴuT#LBŒahaq;]`' 9M_NB?mmFلH^j8 ^iFCۍE{ѸZٕ'VOY轭UjFWR7K.Ӊ1'{Ζʈ 2h԰ 6rhB:DH.[ݔF ="[(HXP#q0+&Jy0 4^MwP (ߝZXLJG}`9DK+MFZfhʰcnɑ:[D xZucƀ:?o95#h4LJ 'B֔vRАPGqn㘇]M%z5y(2 P `&ѧQ*OWvkO*V }PŸZkc6 X6eH2[T2w5O}a)66ɑ5[@V43 9b / $M4owoFޥ۲cl9r\H k&W;;[8Nf]{wۅOkH EA4i'n4#~ڧ 缻RZm!˙H1n|lhT_tε?07Aq96{e #[e M(7 P{XzРoH=@{6 ;C)DmЫyFi{aWFhITa *6ǩ+t?[\'Jkm]l1֐ 8x3yAދ8u;=Hi `@ГU'4iiQ A4BV=t#, iN_{oALגQp0\4?SNXZD 5'gF1>-cծyp ӕh9 bS{@J(?E?jzd4_ud}'NUwK?cՓ!d%WIpG~-2#P TFd1]5ٲj! K,0/JuPer^bVK^P=$ "TEu]PcXMjV/iQ:n*Cʉt!$|K5[Ծk,Lt§bJZ`aaxySmOW" ձFp@–]:H ?ȱĠv(RSW9q0Nd"ܽ@V|"ʎ|LlΪ橀ڠ]m pv@-gsrϲYњ= ?oq}7mE(NZzBOIV`Jjub}5*NDFZэ8lW*Fh,2v͒-k+~ .3D=*g*(ZP=qlq1c?AŶu4Ğ`GdV 1 j=/"oħZ:MW\LD󚄊TfG==i |0%;Wd4Dd"[>SvԲa BXJs;3ߴ~qq42'R0:QI,a61sm~(g#5 MV X~)or1ii]?QhE_>$!4~ǎ팩29<9~='f6l[$}O r۰*5;%4xbŘ&aDg^B~>7dFOZ JUARt"KʤYSYڛ}F50 sP W\A0̉%?JШj FpD~^_. _grR!%\eɹBdߎzMRn!aDA-FPvWِj:s(pUt>Ds}bᘋz5ǵkSuk}Hu\:d :fcZr8<0NyG"(I;Zg)$e@ ͭs3/p#RWpB'Kgu VmƸxVb F%pvuX]@s1LVSuA9o8+'Um|!OC =ǘAR֤v 35TTDewЩq8:$>A4iXGzKƽ79 72dC&84W] <Ӿm`hkwJp o:N R( U.2E O= ږXWb1Q,22HP'&t4"OX?t}7| 3NJAFE'Bl7JXGR ETK|؁ ~6Mw`XSza$lEN8Wd.le< ׿Vz57†y?y3/5@BD}\z9::z̮}6Gad;ڹkuo:uN C=sWN/h9(ׅ.EB!ZcjZ_|g7 1bϱmֶK g3iUszΒa[[iN*6`8a)TA`l;!XˊY՗4QvD6// kzH~:rq8eHHvХR^޴:014BEP>:w5N %xz{ J^0Iͧk)P, 7k7'lqyOe^B7w*yJF!hPY;[L:@xB#p7ese.R 5Կ~$vJs)402#A@r7+u$j0 NG."0d.\v yBKXH6Yi'o/S*a +L*`FtC)>bVuܩ?Q5q$`xBM] `_f|ds7hw-Nv ! q 9p; K~4mӍ ܸ҉dO"FthOů,%^~:dizn>`" Jz tS(%;1]JnQB;1s銪ssOiarU}nzT$"?ww0dԽOxһ 'Ob>ʃӅJ| njG΍V0zEj},‚ցbySz$ܤ%(m/?1*y9׊z(Pޮk5\Du4"ٮJ% ;3%cy@Ru_ vorEPXNsvGytlKT7{,`qXwZߜZP7ͮU,S-H#!3;h$*U)0lJ%KvRa b=hw HqyA P O Hw;/Kɱp­=Rnf'*$vZbIw¡\ap K,pQ^,!t):rWG{~[nYE 3 r@#Z +*i#{`4q(g>Sl:;Oq. "Ɵ"ia^oaxl#42鄺i[0"NrQQ[|Izp-fHZ{?#7}R*CzdJjo$m(M2toVPTɗ:iH(Ϊ]p#KJu%HgՌXU*(&"g_4 $wZ0U::\Roi-ebsl?4Գ/+նߌ:Bo\Te#bY*A,V?˫ 񇆌ս8Z] Ԋ. $=&TklkjNB (\~(|<@RY_bŒWdeh1ɂWBDCU:*uZ;)j|º˝b{nY6eKEvV_';5$ٺIQ #Q⽦LшPjM_K|<R 2k I-5B1Īgs GMf$*U3m&rˢt?A >ʴaT8C7^EN9ubB!ZcD~7ۂF+s}-<}eR~?(kvފC ~e5 W"E_ dܜvj'ϰ z KaYoS PCͪf7=nO{5c{d4* <+WYqR@{m=F@zjP]=0\Cץ} wǷl1셛j[LQ_̮ ̬"67G'%Ŧ4k'pcL~SdW#Ly >5 Y~PӘ.Ѭuߏ~sJ%7V=y;?.~_gf/RBQVZsQU% }zqi޹.Zلb٢S/4Jş'2˲I"i0qz3'eX =-B t/Cff'@j_z巁ZڻcQ f z/Jjey}bQ_*+|Ft&vhQ+HҙQu; 4CRU<ׇx^:xrϏkhTq87/&0M Z,Unxe.)W֡n$_}|:%/_׾g:xFg3U(Xܲ7=nmZI|M[ _hل4L燀s>#QGTr&o!R˝XuaՔLڗÂ¥y\BfjlcS` *;Hobytj*ïg/aʐ!Flm-N //J٦ș_l`mkZa;ͣ);qOz9't sٚq><_-</nQpP%qB~(X,"xL"MyB*_1h,`̀) "R3meroM'j@%ҖSWU<ԵmĢZJe1=!ja u7"͹<֚jg/o kQl?3T`09P)ض,T֪^Á?ۧm#SiALrG,aSv7\4AP/OHD0Z1'X;.bОukO /A@ YxTd&Yp&g*+ WĈbRvFڂј-+ooӗq%>lM 3w{f9/[,DYpu #ݪ.Ѿi}wBmS:>gMga 얻xU8WW4.|C oYn(~"ۘ a5G7ƠѶeyt㇬b+8eSaDyW bA lGaq.J]䮺a@h/URvڑ`1PTa -Qz$XW&T"ԲN7x3CV@SQ8bH?ZL8m-< UoR|3\YdTo!xr^$3/É/Th@tj0J߈g9i] _+3!# ('g Ў?priU3bS"6I("vF6"n0G583FqL-*1;=X [Sc߁0J֤AV_̊p6 !&Y{i}n&.)#7+6SQ kn!'[0o;#˭^8d3# b[%M;!q 6\B$0J4dz>$@1j; QD) s;m͒(l BIq g{@EiҐjy%uhps.T@Yj^BI99 w`F*>}teTb՗X zcBg ޴z\hgA+\L!kG!˵y4hT9s7cըaS*mf**duL>ȾOն@#s-g@ ^}e{XsE>c91Ms +̸^ʒwmb=#9$$|;&Ǧnf-A'4Z'lVR둴Zj)^/WO޶DQQM6|G -Å&'PT pjL q)4}4HGu'Kqxٵ!FdJq|;վzh"pV@#{]:_댎X 귖˺1pH_j!>"0bkTH;5L.zx*e9>ˆ H4**Յ̔˂Rs|$@>;d(-w$Bf" S|L,B3þDR>B{Rn\ed _K*v ]+ (x 6C:+ݷm~o0q`4>|E NזK^Us7hT FMtxά.6jf yJP³]OWi|Y;xKcG[`Ѣ)E,<&IAˉ5TEĴ-lډJY1GT&M3HPP"4fBQF!)jq_I1hG@Zq!V>6f׊.Oi/ԛ{ ,m4~e7 /-v߻g#Is]  M[' HdqeY7T0NĈ ^֛:K$}~3_K o*so\3Fܩ9DU/Js0d2\W)mxT- O{Q.gl*t]2vYPb4wS(UBʏn욪L|B\dҶLmU*6^1l.9 s3hCRy0 Sz$1 >iZ:M>Nu9 1D@mud~{~ fk!|Kkv))~ԯHZmLg@F~-_Rf*>08&BĎG뼻 B3 hM,FmdZ=Fbexz~Z%{$ )s<|QD[6H4G82w'8e43II v4hY˭dY4/bO*^5ᱞ'\JxEˊ< :Mc@R!"ouK'־\*G|) 8<.}.֧Q>3a'*BUʒԾJ;WE S䵾*iuW{ߧ gPbB@\G[X|qŭ/5%Ah c[bS+E>e~|I]tiA@&c0ۿHt Xg-PryqGj$jyzJ(%+"U،dVfkz~b)l9HtqEDH73Iscb&鹛94tIFkۂD0ҵ}Hn-ЌԺ3/xCb9R`U%(ˢ^$h"܉N_{V w&~%:›8y(GuU!_!ѿkWYf)h^$WB,)\voC-UYOo6iUwT󴴐r,&EfvN<|+|^_r>SyWtjё?} VaN4xKYʸ[N 30::5X\cէ7(B}DF2>d!emLaꜨs1~KBHۈS&-b Eÿ` < q;36]^0䥙:i-\a^}lKdA6}0Cп1B|`X9F% 1d[Dj =x8YL Ҭ m\LiE7 1Y1L)XаϊYDgiZ\_=rAHw ʊ'ĮV˧)I!FB ץp.nY|TGE6?? 0INP#3j`E9߿AaZCh$_ c]GLl\-(^Ca>i@l%dBI>^ ~\ bԎQĦ ڑml)!cW =d\鵧)pP;N-z?!Ctm}Uʨ^[.G c@e!yWٶ" VB{[Xч^L>CYkPQ̶H$*o`d㣟t۲ Ao2ԴE!7? o=1{t3涴 hbU%=o(_7go㱋D85aDYzz۵ v#Olt|󘣅 w% |v:_S ϐHf{'~SsL) ޜ"iO#U/eY`2H.3Bw$m?8Ae` t}?=&rh~1_Q7eD:f ޙ'pP,oha+ylg9uحCVQ^-MA9l"\4_{/ݕ"kyω(p$kR:O~&o)-l=QPLu.nn}! @5si$`-ҶyuzYw͵Rc*?͜++웇-msU@VP2Iʛ?ʩLO0k4fR<MT2neWTLvzDA3UQE!cۄi.3YxoZ`DV?}t1ڙOZ_1R'WzQ55X4SH5l A7deV!.gCUx,yP@6lƱSjaq[1Ix R,-EQQV-6@49(l>/} X٠}齹o@ز%:]1n9,L}z)fS"EFv;#(F矷3͗JS}Y㌽&s ~;[w?/ _R1lK. ڈh ]3WF[!QXq c$Ƌ0$-lۇ:mn[fHl4$8Ÿጫ'OWdC=ԵD:M@D`,6#,Udh P2d(ϼr ̭W/2 Ҟ㟎W܇ȘLCe,*`gSZ\"a$[̲hKREFsf 7G.Oh.R]T1Hܹ}>dpp gWgp=WFǐ]arv Ux6wB{ؐ YչE[: ܗjA@=搬 q<Z>oӈ@O>ENHSvYaq/ g3W"mշ"{5: m0^ef%: e ⸴':s*U}{nRGr֘ŗ4̼鎈 [D &$mq$jI鸩$K7s?߃Ucdŕϡv HE0*_g ll'H‘}YO l.ρ}kCs1,/fdƘ݌X&lc8CiW;顇 jL]t)^tWaXJM-rϷɆL<Siا'_)ۊwYsek|{R6o/8V#'bc_rPmmk~ $zhݩlfTjd;iL8!Yq3R: &Ra>+#YԎ_Kz\gB Ӵx"RqzbCe02lT=Diw6Psw Y3ՍWn # t! Tnu nU}x\ ~OK筣yb &b Ī54f;U7\"mHdu , HlQ 9bs{&c?+lVȹGTLL v[SPsݖG@5U#X_Q"Py( #P'Bq!rjH8jS:% OfѶօb_)WW#cLyd|ySW<Lo>J;kJ}$"X1#Ryʈz`/\wuxK$c O #^bX? e􍓠k%L.C|6ibNX{}q:Fⵃ7Ha?s$3;)bJiSx>]})6IE0XMpK:In-Q]ϊ40ro6.13`]2=>L:U{*q.ɪ%ƇT ї-b׶kZ͊=CNfsg%dL%9I#'j^c{+n%zZ9J"Ev#Y)QHvtna⦮C  j>jG!8+lnQ mq4|+ZᗐqE>+RRY^bz"Xɽ 7.xτxPBrcOZN=/D~).l_ g+4ž`! |iׇju9ZH b]Mf7 fzM(de69Et7@mn,./":p;ؤqTLDNhonmjpNW[H889ڗr4fqx=|IKyhJu\_ AMZݿM f|n:Ih`,xݨ׸QfGewa`> f&} Ͽ!q:yiqx;$|e> 7o _̾ve,2QI |3 ئSy +h>ZYЙ{l6["O ,wm@J?# RBWJָg(6yk# l7Z[q̆ߞxl֯,t1T ,Yh4+ GWބms[9 H] T⩆EZ`GY#2مB!Ê 5;}Lm<\9~zF# [9(>ԤCo_"g톥e#ZPaӣ 6-;sGjVٞJC8L+:pF^T)d߰TD!4!DJNK\ö쑪\q%z7P@1MF.)Sm'՟d=gqM݇1g !ڕ`(0is& 8K6\T=B|b~3+-cR)[. O؆Ro b,, ZQ.k–ɲ0`M ?| )3 L>Щl=TzR͆G\*Jp\DC.>^n;`yS hIA3i vy˪BXuZFšCB %krߺ_ %QwqC>{hrہ+aeFʽ>oR-zഒ4々rFzSU-06f]OaaC7zQ!0a|rڒfEq}|;1V[SX#nP_/9MAۥ 6'uT0fyJl-H]Ls)ӮP郞.D4\ZTkC1 RC*}| ]<ScdjӾ'T6Y]`*y \'(:aӟ=lsQ3Xl%~QIOotE:ٺդAI]fw%?%!RK]!0gH{9:w.Nr-5=֫ي3Ww2|S\)m4|Ah+nL-Ň=F_aց ovѯJ0y6+CiR~ &+aUќQP=/u<*oh{e_{w B᥍;P] ANu]"rTG߶LGS%,hyϹ@:0`Ъ9y75ZY˝4bbYaQ#L.@BNI:pt)& G󛆥Sc+AxbE>(R|BuFك$=iw ?OᒂD9M_dngy-⋽35*63DmidtpN..lŃtGT$ >Y -_mxD ڵ8F'k/ į+e5OE0Iż Unn$ 􏠎>(mN7 by-^ Fy.!IHpg61ټ8oA2nnjO*r,T,P/}~M]4kF+[l. oVu )x Q .܁`#?bH(cZtl!,\;!&X)T1THq31wj33π@2<98J(RY~%pOZ*}&IUmogV,(;ݽOiN` ׮տC cSjvLR' 2:5e,Ktl'Sހ~2U꒺A@.mͩǼ-\C,C.8 xs sBG\#tcF 5h[]o:gheExbY0A)΀"빁Zb O2>*&e H;]n@$!j*Íwݦ #&Vj2|BEV/O+y^CC5coZ2<6Woo- RvG. l(uCI69 MPF e<݊/~'1b;)Ǖgrz#cKQ2S?ˠ2ev| |BB{]xD c5eArNYqwEӡZbL4bңn鮔 򹽓1^&Yqm20q7ij9~nG%|>F,Syka@o_\|hf~~?unDܢop/쨭`}@* ic9S7(2؄tcP+yiv9aGSik tR0z{O^xN82!&[.0ؠGe>KBdv4Amr]{W!}!b?ܻ|6+%҉vy0#HD"e<6A ڗ?^D/g_n;A=p(&zJzkeYOGC4?8 3(/"!_@0'n z[򹋹uͳ5 8 RPH@ۭsŤݮih\؊/\Cg#)UZb1C%E8f{+[LGdW2|9I|*|SqHro~vɠ<^6Si'">g58IiuR0$JL:Ҧ_wZSN)ZW/7Df UꍴzЂ{%eE5ݥiQƙ] ҩ8犝kz2J6}E$MZ'Ў0y(z?A6gbdűh6EjUm[Om@>$PNvYD3 ; Ko=i]q6B.85`4#MP?Y|w6CsiSzh?l҇vS9S6k3$l<NMQ6kYHFe4t,;='xDZs?u(f~8n|:cTn=ix*Zǐ_icY"(BȆ6hЖ3 kkȶ &?p@ʴ !ĕ.UDwinP-{RAWJ:ST{"F#"u04 ֒7"A,К0GVuЏymݑ,sў3/"2kQ)SoM,*!I*+V&N1@] *g(Bm 9;3@,K"UsCn '2EModl8_ll!ȏZL+#ixnvd)쪓PGOFp߀gEavZЎ3 q  l;YfPPk(Y9"yoƈP7z=gYJ X"HIDޒXBC֟6{Ƅ.@ކ+.oc\ٽ0^V\)bB0uBsgq^:͚A߭尸Ԉz!븪M7(U e-۔i? H:/=K>pP䠈aD:gWc)007Hcܐ~gƟ3'bNd?ȍ| qUE SgAȻg"[| $e|Uu }dQJu* /^ KzI`}hqkV}$&NjBh-s2uYv0>BP֌I-GG="~j0gAMb4UôIkÃx`'CLyct/f.֩fc׶6v,gW/j h٢&ǰPJS<@xu{u#j!caeP /;rBHsc.P2+?ZZVNL7 K֘\UVznu@kk>i,QGzCř3T5*X7DE߁%ʟym2tӺtA-]`4gv d mrp!)-{.^CHSKx )>RKo tVⵉKGcA@CfG֮떷}ᅼۛ_EL+-K.twa9<@VUfeZ wzĮτCLۼ%=I%iO7bO."sd``3gqP7㈕&= }#!܇kKrdw Jx,> g ;. V夹FpwbgԄsQ,MNTדp4w& !hV"̲*`K9dVU2bX.k(Yg';d*x |ezlYdjl(vݭZ\efZu\Zf€K"umIq"!p.)zhfLE#Rϵ[tAP$HCcʱ墇gLr]HO._ \i蠢6yq]W tzlb^dċ{2ꔞ\m4 Dv|x'8y7!D1jQ39zBC9x8 Vٯi55.$'XiY'@wIM bA))ԃJȃ3 Y , Np/!K~g 5 5_[G\Fux GO?(/0|!*YwGRIW<Ӏ{qnQƒua3mr/4SLCn,[jߑ}NUwy5[Pa=VRɒbNK 84chT_A M8޿n[p^46:4پ8*A $$1E?om,,`389ȭ;B *v(rg=5b9.v=E궖Rl{Myb(7! D XQj!Q9.Iɵ>-J<靴7do[wSwgWZЧJ{I1b{b4%29H;4hcN$NV"X4媍rhu=n;T~h XzioɈeNr e@5_;%Pe8<3' BD$'.1Н^us>YB<%^XUӦ^=fG#,0a<4<*wugܥRٯ''emE٩F>o%f FY-Y-n :E FaFL nuAanyZ{mu~( e\;AVi$]pKC!&n~9~pu< KTiz#9/}#8elm Uߖ1o @acJg0.o,_fK<%Uo4TN#b]tB3K1Y>^P:fB4-{$e?vRD^0iǔ`&%|T&#tutp@)'k ixb <0cxJʙ0,L 't0g<1M 0ћj(8w_K* 7O.8ރ$NK)֘\mm*;HtH#\|Ns:i?a6H#g4ZKB4+kFYj(V.J3:$X 6lEH*L16MZ3-Pq jBPV߃%L" 0ȈY/Đ.! < !af: n&) ?, 󃈦%ayFQgHDqE'rnl+gSgm'a:? _/*f8NUUI@1E;¶CXE 0&@2;+ZHlH-D v$DBYFpCn!.bl/f$_؃ 3\~瞏K%2.LH\wsT!b"9PWhUruEH҇\mz Yfww,^9;+udΐ^idCp BgѷEc^Zdo ~󞠧RĈ42X|[Og^NP s A'{ T @<-yba Z6:I|&b&5?j,'-}'E3m 2`g71fLNo~EnĨ>io?.U3cnB=qE3'weH ƀW>q"U6)JH@*7d\={z侑p\>AvuLSOGrlց>]BcT11S 9t\%d}y,px+^$k+Oi8uS3Kdj &'A"2: qZMeod^&fIw ; wKH~?";ҡ0erձ!̏)cZPWXG_p'[9|dWIXr nj~9YAW](…r7mOWL)M쯄bTH&x8`# ŝ`j 9s6rm}`EJs*|-9z\F+$$6\#htej)*!\bjq(@QX1_FYX7޻9B7l-}[CxQ>e @4GR63E i W5Rq'NVw!F5G/;;5/%֘(X J`FyZVb;shͿúk‘P;(94rg>nX¾x Kԃa7OIV 4)X7R[mm7>&$QV K Wb|x_ 4oq@:H8m !Erc|=SI϶y9vR2#N <Ʉ 7>Iooi~пVj6I%CA OiTaȝ]K۝Ԯeuy}H4;0*DM T]bD2VE_"f]?%g|l@c@eSƅ.+ mRj[םFn *Ywe'+p#v6^L&ʦNqۦSuU2R1#Ҹ[QHЃckBiZڀJ/Z44a8w6jl:>ټ{ن>9L0 SϗTΚg)ffLU!g܋F\΋xG( `C4Ub HMr9gWB Hn2>oΛrbi˵@ep::Ulg0ՑwW*Q `x9t9E\jxsA(Qx*]7]p!atly.,F%cJ7zQ=ͦYֹϙAƶ\&HdhX8yNFƭ" m . G&*0/ x\|t Ý3t𥏁ݣDywx;,hF O+Y)%r[<\Fw$7lEmu6/'2TVcCۮc௃Y=,QX؋~kwҀ(O[2٫Rcl۲SLyb7e"Օ8C=Ϝ>\N b(W_b3qgM}ne#sPkK)l⭔tnm,\jIrhڣMi`/wǟ<Ӏ* ;^BeR>}} ^ZK'#lZ4pTMmYM^Xfw0q,`7Z@yJ+EW6(.EҚZJK"Y"ifZ!G* [c??F)y;[:d#- Z;%l^V=}ǻYyRao(|/->Js(\UB®!tA]:/KrPȗqNjPqZE`8AoNQ`IVl⇔yM#8IaWʣJ CyfWf/ĥR`ݔp]Gn#~>*?sߘ͝(6i<)m3{YiL%grre!ΏKC~&8%2L߯- o'd=^E8<5k]M P$[@O3T  bkBD+|N?[%ƈM?$ܿ(oc]yQ:(A#O]Sa dCAͩбL x}o4F.5з@>kfFlI^[|'&Qap$xN =R&Z)k]L{M]eq7ȵ !KȨ٦}KS h%%eTR>4|/zaE+/x/#GAUR>]4i.o{4TXC}s=0Ǘja;DÀcҠ' Ѕlwig&#i*'kte|"?NCO] |babc>`1,zly} 8ݦCB[@>nU}v씿Oݏc,t4La0J(ASvYDž+hERdjkCjeaY loD3 1 1dMQjzOلJASq?k+]đ_ Ge Nwh 2D@v5(1s.cs1vA8w dڴCWhVN[gpwO(67a$2[#"&! AT]p_V࿕n맛75DLi Ċxa-LWsY}J6-^hQpeg;TOh LY)5 jvE@&Xm:T=us ;(iòا4W}i%ɸB@hQ<Ʃs弐]Q{0IRє_?F {Uog {S9I kr󂯃 xNz/4^QL:x]ΐ3ð450_/sQ?4KhŗxVi^$qRbu7f#ˤD5zO21nL^v E L(Wݝ~ݺȤ)8~.^Zytm&&Xq ",~u=T_x|ΟD"81qX=yzaL{J^8Vu%dHo+$^`zqūV0o(Vtqu:kb5kGDq! fbhQy8[,]ih"t;Pk3DAe^uh0?=CуFrRЈҞP\ YrFIdʰ 3CmM&ۮk);}-/ *oAwD.*EՉ=U9͘s6Xm`꡼"}uO4c"ى H%Ag'Ls5]n{!1/ý2{m'ɮ6?HlV:Uewy$aܿԥSr ҪM~[(< O wv%ˌ;9Y{tJ~5Y~3XyHԢ9q6ԳS DoX¯FV16߶fȄ+:QFdokJt"+:{}{Qذ5=)I$8-H%>CֶQ*X>DEQ(vsO zƼ) biD\_W᳻L0Ղ;GWy)IQgQDfe'=ܵ[S]'d~C:sј3k'$vyvn^&[>7wE^@~niuۥ)D ?ՙPDj/gQ,,} V~|X5/|CyS*ZD L^of  t^7k!&,0^T3q '1N#&_ K  @x3a*ISӊS_w yGGFD7(a@0 E70TRsۺMT ]GHuis0+ ן-z  e -qI;{~}[N.#ɻU(TE;7Tn4N:jɦ| q %fD_ݪd]>}4TiV4;_" |뾹( XQ׮fC>Y>XdmF1HW@՟zDT\%ZfLZްa=ͭ@\1r3,kpgc5Ӓ5WKn*FưM T8~ͤSlh<`@BPIG:%/a0 !p.E,hV8o9ǽrzO$+6vaۼdK7m?]> (Np]ڬMflX_٦_2!c }:@Ec0/FcCV:zp !P',TGPZ#C9XWNo SKə1oZh8X:ao )M> Hk_\(@fjHF?{e,}{b oGĬr9nԐ%X sdv馲 [ߩdgw1jt'qCWH \Ў8`:/W E nN_cd^]0Ê+IV_ak IgvOtc#7%-x6B" R=tN!*?mG'1aY! `VɡWMS@^kxدb؛lj+٤٥`nʙ䡅3?Bhcq7|v}TS)(HYmvW8t[Ik4'ͲkN-Nx=*nY"%YPqhR/U{W-y eAm'CdTD+|[B P=vCIXzG6v~0`^ے}MrGԵ{mӏcxI{WU/+ IW^nMTuQ;opgXYek 1Ydm }:%#!%1)1LxCXFjjZ/4ñ GEs,6_?,Z)?Tj=Vk,0MQs L{xmI_Cp|fOTYPD|s"%ކyshVB4}Jݬ )э?O,*|> A AS1 1u}q-)0Fyyp( IHRMW:7ndSaW w2& eMMEap+eC@oc %",fwkh7|Ն`Gv#Q8~r)>WLb 67 ׸fzʞSb$D-W%\{oUESG^w':ޠ|~P; :I'>~z v)'9ᐅ,AK XmAtvUoLgC2s74NѨa#QWÅy7&ENkϋsԴn@(gyA'c`Wfk_2pzC\ZH75#uK_FܥiXKWj-?@IZ iO\}4j.ߛ\T9S^鰶lLI\w!d.8V6:?9 )҄ h: y$, zl 6 d@]>h+DF'¾+aG> 9JYKǎ^cboQ1J Èq ,nP#OUIR pR%ZUM7?w*"jR2_Ȱ}4Ɉu5LEo@2UMo@jR{S(*ȋ*o,3bܻJ@f^-J-`BۊZl#W(^ Y8$WxʇdJ3uE]h$0 R.m5"Uoy2g[Oc֖Z]}VHՂQ")oO=4|ir揇taTvi.9Il]F0M9=&va$ pKK^p\U Q'ww<8ܜH]1@5ViĶ[R 0V#m5=wؗW;(AUN7]ܛ+p{ ~a? `>cPr-C5KZ)x;UuSxlTobƼZ +ڂyy=/;=S˨>/0m%1Ts﮲n";Cs$QR$'f"37 afE uC;ٖ&I@B/{\3 4DZU]}0'dŎ:a;CLt1[R`E!ⒺmB1_ZrO[Pz5zpbt~/H3w"QLrW[3'%?c5h^*|;ĔJ`M]-2)w$0߰o`?~w((t_;wghp~$P(o%! G`2h3 ̤;^^0c%wҌD΂_G̡6XN^ +ԸKsz ר! >BEVG+/7{#>t?~}y1AOQؿ.%'gSNIK8@V#`."4*N%X?G NhDF{uN%^S/V'"2<&W}A'@t.qHylzz[Իfqm$Eds ;T[Nω4084r*B8 PUzd)%ng~G;TCcYa"x_g"ez-!]{%JӖ)D`.4P~s뢸Gp-D`n\H C3uK⑹0GAg=k?/UkO:w ڊo73~W,ǩv/Nիx‹ǣ]A؄Jg_jfiHuGlVhgV UK%aWO7E#d'mug c8nzCl*ND"QdECG@5opՊu xb9А" 4F5K;$4k$ڪx))E>̟ z 5G#p7?0vI[|;V!$$2[Ɏ,HCgEU!Պb`FvQj`÷i=dX>Cח~D02zjwǧ9x 8} ͝rPpkCL|d]+[DjvLk[g=yuJݬnN*6U#5p#>@]7m%-:ĮǙA`Clw›u,>+LDNBFyS*˩/=7g|r4*dqUER'>M}wdT14W . $t ݺ{rO$< De^,*by"Jeڼ!js@[t_&0myA=YX P0%t#U0R΀ɡE׶Nv\?cu8g-gz*NSm(Rns?7E)n]E$^`~\]ZT.^a;,BҬ}(o^Na1SQ%* oܰy1:{㓡vO2jm0^SRڔHoIvp3&R"#|!\T?q GY>W!H8aYͨ[Uƭ ҅T0^< ĸMCr+BbzS +@Cnw&S)QM9 %f~ %נ `Kk_c?bpss?Td7_Wo*ơ׾70M0I_uPk%OQ"Ψ"cΝ0%2 JiqA yi_82ATPfś+_bURY튲d=ˏ_8nXa@$nn\g"(6a3rA(iCqdEگŧctQiUaTgnqEz i={Ä F0O-Nps ;b:?+~IwrQ_,bjOw6:88M7Jl䎌/0> aVøF1JǑs2>/r/;c=E(Z,;7M#J&?Lɼ]6Y{hpB_*Զh1ĮxGs^ĴA缐 d-v1Dy"0ޑ-7_*kvh,fSm?hsӗXN{ з $^릖HJVZڿ3 eP?J1l+hy<߁)_J!Dek2:,D`t_;DlRPR]{ Q3%V:SU!+:%:L@DiQJf& CہmyT|u }9Y6z%Ѓg$ܛfWAD8|GfI,dD7Ͻ ,ɡ}nˑw1zŪh 8Qon\=:Ut*X%NIɏ߄N3LuSADH(74׾P|hVRΕl&AT5T-3(n6xpK(7V@8` e"277i7"a=T(x%JKմvӢ*ﲓPϲW5 ./`ʙ-ӭivc:G-~`șHظf(g3.nqtuz@xRe@Ev>o9:¶L8K]#(5kfc0&$q!Rwx4^y]fW&Y؇"btbz8wV)"Ai nV/đ pчq8h)KնՔ!-4k{V,E19D6ାw!StDe ߬UiE넎 j'2{vc%?€OU* WYی[/h 8Rӳ5;SakR>^1H5Bdl4t?eO6viN5T[_e۫0_ij.@萆TQlA +zA$_ pȧg z#&u!=H G7Vf ucZr̥Rq&'MI|ѧΗA̛ GnLHΕ:\ şo{Rb>>3IDkw9ٰS!% ~"FY "VMo7Me1U48;M0^^j,d0%ܘ9&{,S.kGcW۽q,t>|Pp?$IZ b d!. 'H)qzPA^kvc8)MN +$OK|Cc|^nC K,Xqd4 ZY~YOvUyN11ټ)Wҝ_/UaTODО I=@ Ag9գ=t%(:nrr7ƭ;\w+mFdgRKMQpop4 <΍='m*eR.}L.*i'i9 ֧I5J!%hU@\7^\$x.IWA%w& q @TwvBBbmo6;d-3Ѐvܸq zC̍? |\q)C4^iYnjakK0PQVkxF`:tL6@#78ęߍ#˟C#ϑPN )vA~ixo^ tv\<_\ ˏG,`c;Af=(cGx,;I ng8ẂJPϋԇy8nbaT+|Qk`.}Q8Ig|6NP` @ad-D_-3n`9bZdlIC)z LŦU.!}}=yw|$k/j{:U@\xCvdha7;*Fw}/r`[>z_Hz!Td`zeRŶb>=I< #^@P乌W&s Zy$Z~ب5Ξ"p'5j#jנ6>(D5:aO G e4 ӊ b R3(}u/@ rQdٙRd!YΩH2h*Lj@\1RJB; U^qX~'M|\>栂'p{7`Nj 5:(D-& b @[*l[ pǢcDt5l{Qtͭ@ y,Tl%Ty$@ގ+/j@W\ִz2-kyl >@BŲT8O~_.߷ݝO-_?x>tfЂ#A׵HU+Ńڳ};/P7$g } E %N'QQN<3h{ ͌_R;spL0I=b ݬ$] ڻOU@19 Bu$1yy~UB ڑ؞q(V|ǥ2}ΖS#n)9Mz& ^+$ 42՟ cihS?¾%J<+c4:M+/NA (P/{Ep[2dD/ғI?[󛵋նunUm+t;SupW$\8kUVߺ5[!uف%NIw|)y׉5FlI*YRVwUal@'_36~Јn"g!|. #m#+S@.¤X|¤cۭBsHm{CTUa\IVgR~&"mR|wM8mwߏ"D*ܚpO3Ku4@o+j0 qm&@D )$&2<0  [n~`C 7\Ն "]_ajxG w v"=5v/H4|3)K>甬Zc+%<`ՠD3>L'BzKMjTG&s:8=qOdE^%]cQn`ohB~ܡGPn24 (Q“,M+슽VC;YaQబ =#h`*8?sKr7Yr:e?FRG ֒Z .]\a͟ǤU,.H-@YY3ϵLIZa{DZfLG#fu6+ղRzOn6M>O`vn(q4ϟk"="_*8.0Fkh8sx9@dN1ԕzʖSB۫x8``jGXxhMsſ٥O{bD-0iw*UE]2|*Z*PW 2.(s<L^ I`޴ɫ=q-3Bm/qGm`3>Xښ\7^C>y.+wI!#ujrE>!hB9i\nriE(;Ai{0pvچqltk޶6f3)!I]ȳ r9Ⱥp;}X P47/OpE$O+ e*zؐr]QN1aѩ P Kʩ'#jkRftfGM'9dNn@\e6AvMGb{~jۙALiv/o"G߉zn &q0e=\~f#1`R/O 2чjS4|\P r# 1y *Nw=Aub@tnp1M +T0{8Mķ \HȞfkJWlsBAIQ]T4ddqIթՊV<'y Xh\i`{EiUʆʌύݴ{a0 7|rΨ5dc{yz12Vrf0B=!KXE%SvJDzMC@__'{n{|髡ZdU|:Dpwݖ<@%h1TQzBH]Vb#Yf8Moxz8(5m%֙(><#b|K>IR[59~:D 8ޖC^D MQ1n;(3Iϻf2ڜBifq:9eՉP k%ذu7Gp0ZhZ1ʐ*ɧ9J6{䵟ƇYhȀ+C=B h-Rgȕ>V/5y ]jF#HO ݶ e7q.CqF%T0_H1Z].U >8JYj6nx{d 'zDwNR&B~ Qj\v-ISZQ"ڒa"LiwCߗ-1Ѫ\|v+œsQS6@%3l ٌ©2ܛG1 v? řx+׈;Toԕc+nocdŹ<\\"reߕ ^~L;Q?x2*/ bMϧ)|5}S `nwD=F#w3D璍J ?:7jDFuXHc*K9Aw=6FMIAxpkkV|W~eϓ=UiEؤe 746%6Jl,ϟ~`5CCB92tv\g!X8vtF!mRPCzٙ?:}c %uųTBes4H՘_|JA` rRvs= % f]sy`B6!n%KmL ꪾwlq7e"Ҩ_Y吧%= L ߳2Tk:bNf;چ [[n^KQ0O{z'u~W76 pn \JO6d88 ~5bW&>Yf>P LߋR?bIV9LNN)[ Dm+ xd4{ެxH6צ gY{KPG ܓi0ڇ,CL꯯݆t:~ZdH`MvnhkQi r!3t]CN?"!HⰣ)@6j<7|S4ە|$7G'š1T4Tᯰ @\w0NTwa-&*Ͼiũ0+ Ad>:pM>U\4h lW+º9dBd6uS6HhQp& ;a)<˳Gz&R!.6oQHT $1!Q&yK> (XYԎnvh ?%bfފs|W^#%yF}0+啒 1^S}GANo,9x皝7 2c)"mLnԻ& 6( H ?nrWOGeD/.3 %XԦ4U `/VsCDG:@|6sTY8БBUl3K\r(T-i߷(U8!Ըm@fKȕdZIE'K LF:Ϥ*-=Ӂ:5ׇ*o[^wLMtKn:cѠ[{%",i4m :W 23 gx2H6 !CrLl7XuZH 6IL_߾YP[r .,>oUh|<^r0Jtmnkځ~zNoR$،w! Q8.Xg恔[0t>8i.nU2JSJ o=FGQqv'`k q$@;cJFG.֯=.od4v"s'`#ˋ3F&Yz7~ٹ),T^_x aב`! ;2549jgPV>|xz_#_Gi>QH@Da}5&!ItYUPblW[X&(AYLe]tv.}_>wuqc;L.Q_t<(?ȿ3FLEw$ZiOl6(Z8 2հ"Kz?oEq켽gk _lG0^RC~; O`΂54rp "|֌_CREˡF8?"l-&_|3ꆝF *9Syr8x8d(\tnf]d|t:|wn .%G 6>)3f5=)OyC[ArmoB[/֯-rO⤅9@lL0cM{;ҤJPӧwIObԅQ$jxދ_qlʹ=4F vMqD|(;,~ @Ri6y Y6ilj#^3 e RuHCAu ' )<,w4 1(+$ہ3Nvh9+c"= 5f;CJPfÈ'DhJ>nVAz&!܉QVfhvzZBxQ^TZS.}BcYzz%/Dķϙ ywHO s+m>u, \bbk`[0iNJjQ?u2fj\x`xJ AÞx('F !G\:1<ށ`VZe(*A-dbnkrFS3Wc?f3Yyz!G>fىХr ;y%NZ 8YP TӔ퍣 <ٺ>46xd/f(g#&Pɜ,hdFg+DۏjQR%0Tjtk5c酪_J*尰܊Ecjƅ d!-G/Za盈`#:v~s "B*]vc/8T@2ʑ(~x5eQo! rLpp ^~ÔUͻ u>(ݸn(-){i fZSƃ Fuk V,-.IaB-e@@4mm9`/' +^Cfԕ;i [̆""2WS[>`b\g%@!#9zj ?.Z;rʒFK8 EftMS?+awYp ݢW0> 4}+1 yRI`qN5>ǰG@ >J}$(QӸTKL+Y"џG}ao&!pWv}@*KK.?o]"F7it@Bs7Z6%Z9b{<Z=.$%o5[!V-βBʚE:vm9g"?ԡwjɷ:c̠6ClIwGrF@X,aKP&O U-hȎ|(1^N{9)IYu#xn:!Dv;subTjΝ-C ʻWpF2"y%  0bUTc麫{iZ>)t{N7f3J(ȘB‰~5yHbCע#<%|@f2┮6ZBqo?&@&*81 ]Y ksFIGfX@( 3H 钌4pٓ:6 3:bz1_ͮ_!D̂X=r~! xmLn#n~@ϝ(g tB|-B`DlU1/B e<rO,f8NUF]e"K`{nn &d eV %Q]de-uk;p%۞D@ٟIEyAme*q;xFҭtBe] _|510gg+~m1A* .Or;ot\pDa-QDSC0Q;y9ߋq&#,M;#g"6e>C}b_ǫNΔ|Ӵme= ή[?.4N//'\c}% {D I65?V*DP3o0"='[_`,*ڗ$|w>j㒒߀+oQA/!+ujLxđx/WM+2+KRy6Z(BɊobܜc1K3pGm Bk,׿<>ZRG%:m %gؕ5>k.Qj{x"[!_~)l#(;Ϟ8"D)ȯv F(f>Sq t.3ӑbvd [S,FfF4iwGͭ&-sWT=kU)m%&({!vbqa)5f&"+ 6b/|>T_S8,̊|0jTОKH& A'~uC #@#6=D&4rioLgIBRԀI-q}].KB2 n}}Ҋ076 H Y-ݜ51rd@2ye6O 3w9ƱmY۱x>C80< (S=hCEkʼnS}ըtBO)T(:E%!Ðcz ٲ/5$Pftr/B.C.ZzFe6vH%'kU:ȆRcxg>tBf8?KՓMEIؚuHn-G1UJm$q#Y?֞[puOsbi <;MJkDJj\:'ug+;8DՎL07 rCfl؞gn>|n\s1 lG$ !FCLJ.z m?hڏdGۘ j~)D|oIa {WÒ= ,l􁰼Lj“c{UH6&.Ev=~gƉLq]ik ڃ\ "!Vy+XA:Gpq5ӹ))nOŅـ`˖fD? cF Jh̰q0P6Ix0fرi;RҬs!{?=OaȉFpjVO :QnA5ήAFC2>.PM0ľq r>[glP,n;mQTaCOZ4yy)}Qڢ;i#)'O Z!A㮙h"/2@jL XؚNZ$6?z*a ja/ɠ2'!#5%IAS&sDĉ|X>+V wDLw3#ArD/`7b >STsڗ5 Esh%317"=(Pנ) L]**2ȫ K/@myBz3':k|} c \1׳GbĀǬ(猨16Z@?ckqd,6|>kܘ)_OiedpC}.Ŗo|ދgI zZF}%;!&'.."-\Rn)fbmN?g"I(+Owpm)  DO="xuGxm />,R4 $@}D)w]L#uJΤEL`!ԦF]9+C_7-cfq:rq`u7;.esW\q<FIU91`%Y|h [˺}XeN?*AK>o&7kqb$sDĬr9(M |Esyȉf&s]B|d#Wn@ɔF4'_˥@#ms*C?Yiz  =@)+Oަctvd2/ErUS]nn(g&PVOKZc(.$Oӷ s+(hDF#^:a3?B1^d+@~O"c! Ls[ tO7Y4 EPmNAÜi/ۨJ}?݌S)`r~eS`HLo_w y8=u?ϼVzˏ`@r<ॹ8 ^3|)CN簡[$Ee%b ClOz7_"A"y'߂1ZZ{3;K6:K`YIi8h)T%݆(00Nl"91lVnmLUWRѬ2N" 2 krX,v-A r{A۽ʃfRNt^Mr&hw4rO۪m<2$  _% )1LMN0y$~!XiI#vRB#,_y:-h,ыˬ\"/zEM` 6 *|| ^5QS  {iuf}Hcl{1ak.EjaB=ˈ~rhS@kSw5,#:#'bitVj7(ჰ< Z23֠Xk)؏{>!bD:[*Y֕&5pְX" ](m\ ,2~%Ӣ%s6 s\xeZW[z f*|;?ͪ;|'SٳX6m20=Ʉ8bt=ŨIjeln zF]f cHzH>pGoq/ZE CƤXNM¦HyӜ "S{GydX"ؚ11,L^ޠ # x82!Fj Aqg:4>Ȱ=l'֙zڝD˶υ#ibځˈuWM{(+ ԗT^J(LEHIj*:{וM4Py!>1`xqزyܲ0r,=7\:>x]S[ xۃPx7kykLz@ջDC-&eTEE)yUّNHZ}$S}ȰCx6Î1( b"9 o5An)F!d?@Qph'[B#.LOSBI6Gm'4D'ݝ'&[cNs ,L']i⃮`q|k9̼,kTQ:|>$M_,{_Fe]V&.yiddd-(}B=ceT랼# Qr?oGx#a0}PUrAґ`(bYb]9'}4*sp+aw|N,u rw(ίMȕ/[NE4FIa_&>^9fi'EWRu(I%p:mRUaoFM|GⲄ#h£c<'Ө2t+R&>XXdG,\#d!摪'bD2.*, ~b ;܋Oy.}pB4eJhOaC_Mc'%kNؔQ÷ddar;lPԒDK5JXEߒްI5FꢺP},/ThW%q7.E^co/c n0LtfS.v{ x|ˍRtJɃcp÷)ma<5+V)?`6l̙`g8T2aJL7#AU ~t8'n@ٰR|"4:v\bSҖ5z*/ MώeNcϴ"6e-%8!ks.Nm[|v-47(hSdm  Rs ZauW[a~0er*cҵtv;Uw?8!jvpCզsfRʁ'si6$_NZO.1 F>-~SZ!bsb0VāHӾmljwߵF0έi=wL($[1+k}ḇ=^hNγ}uZ U6?21^ y bNJ$. u#O*MJ;{!,aL{.pvMʇnkH{N)B՘ָ7  IJN#ϲ mHkcRⅽDDu\Y Ęm^Lx}[r5)(;JK4CMaYE>P9"hS׈M/ ${6olvˈZ;VdhQ KK5TV +]T.~\sg6M}ٛޮ䀺_o\c). Gڨh}p+.,?5<.T}~vz& 02fwhPy} e2r#keҶՆ=:&B,$GˋnIՑ;'BֺAj>jRB ^ŧiߨ5 أA<4K|5-'RF~7I17SA)zzJ@ Bw&q@ †*e0ںyb߃jDهo /uvKr")_'Ebћ]+5P¬)s/^6\VCR ʋ_xW+SZ4Fm<$A?&`Bv). Ⱦ5LO2^o۸ұCtB]=`^Z8̒bӄY@ZU>W #h<깺RMs.Ǹ9p4u@>N[M.# '~>(&`СG/cf 8-3@LQ'|lQw^G9 R9 / ]L\%E%xTfJ&a-C/-CZ H ?htGn7nB%P P'ymNp/'3xE =g`\TUGۿ<.Iߏ;tdSwײ+&|I0?#߈Y|u+ZqWRGd6}N˷QW} oǧe?Q mfȅ< Ude>" h[ vbYE|޽{=ګP"4)Ŀ0*[RݹW<~!ڱ-Ssp)jXZ(a$yprD{@c<[8,7E@)oCڡ f 1.wT1TOiJ7%TT+~WX.qriaZz⹨tI`Ȕ"pч֕_?\V #n`M@4:4N6| /p1)m^c_-ZT[׆ <08c#q7^lӑ0 t+p&pdOa=E{fXGI¿n5IO{q kW}H:-'G%R92(= ["4OU^3LF}yu!@ˬQwb?uuIVɯ*+v4G6%NW}-+u>߅,񠑚)%#僇 &褁z^*IшNiR>j(XMci?k悻Qk&p4 v .Eҭizr:7 [Ԗ+j_s\cp!O<:Fj!+nR{ I=rlF<34XH&{.b`;}t۝QoetgM15SӋc\T7)b% v]'1 .7hhﲈ#B,xc%q]e>41\mn$ӁP'0\<~^ ?/n06gSI4 `A h'^0%o[DLg#,ՇMvaד$8 SY߱<ɤP<b:;5x3Yx̱`?8"Y3^o4 dN%C~Zgp25 hƃJ`FT\vŽ!I}G hz8%u >Mlap[ b \hQkDԾ-qUf{m5ggVX0''h3B$w` *J|饞W` PG>Sv1Ʊ-V^^&l2Au, R>'(5;4ePqd{sٱ% EwT(iE櫆ÉE.{WY06&5.g\YcC]ꭃAɅԃu*L}^Z:J-w&fJ[} ht ].]+wu=:iI<?r%H'2/S>OѬ$hڃwI@44~{?a*T$cY+3oMo9vjz_ʜtY`.b[/&F$+ 59Íc⮣xRm }i.SXp[YN{i^bvj WtⶅEBγg6t̡n55Ԝz^džC@sYlb.k.+׺"2rԹG1d|$5Fy\MAu,^'kݪw\bџekpe?Om"H7ү#*܅Nα0%V$\]9z3a(~mI+lՃ&\s?sB+fF(8KbQJ a96@ H,`ywirdsօɶ~79]2R {ּ |Q0.*%8v*EN%8.1ԕØb gG#'q_%h9j'Ȟ(/פ#MQn^~T% 3U=^L^ڦ$z}ٝL1pEPc:dÝzO4USs},_4 `0fxޛM'3דeu`Z#,-7@ɄaUތ%GXEo??->7Ȳt H :ܽ9헖/Y/ eClPė1$Ϝi]؉KH3cxZPءdTHW:&}$) m\F4&Ad1KT> ABZi,,G~NsKjV?"Cº*Aw,/¿ZV{p _/M d̛4&`ܨ:R#q9HEljyq^mKfMEƎFI7q羞 Kgo 'q<69KOSS$nZG*{yh$H\%RL5bzbd }-fem g]ЍGc0v:SzU Bt03> ( z//i38-UQ,_PãVAp7ògk &(b@d[~_ygATYe0 !P "ل$n(W wlRle'3P 궴x[uǸLq=%b*̙b7 2/ag]DŽlx!Ұ/l5ڵ,aӄImg: }=&J!9u bL44ׂ(ĸ~aQ3UIU*dx6mzomHuxIbZV>#N{]y a z"kh4K!⼪˼G*a?wnT:TX*ѿBtv=Ɯ)~fx: ^Lϧ󨉘h*Ŗ&9' ~J4uu[cFrA\xIvSe%TGOr_=}Ͱ/<0n~ hĝL0\h0vTT!q"0VK?ٮcKWIP 6gzkJ꺆+Yô(޼it3z6(~d.[~MA{o<`&Lno,!É[ a, 3.02~[14dr|#*ל> 0 T6Q;8уSKWC=Yl7&=,5lw+`_3hY7=`1w 4e(kbcsz}USY[e^j~Q{tɢ@ok*E]zlPU   AUolB/ 40pތ6T?'mU O1 } -#^U`pY!Gm$#GcUi˘ ϩ8nRq+5@`d;F{_\K ȟ? u |swhu ;~$ҵ1WléMrgCbC&t>9^M `57RX).oĎIZNrޑQ؁ 7]d )gB4M+1UCM@OyAHN21,5?;)2$@ `ӔZ(Ɛ3xRb(:Kִc+4dWu d~+5"SӽÈals֓Ј FCS [;f|ogC˔5.XxG-aB0HJ3q^HE3T&Ѵi^ an '&H$~YԜy)كWܕ#jag@i+Qp4ɬgQWm{NGU\>MG!gjHtS2ؖE:EnKgYJp[rHtTjqY3'Wʜ<38 I:- ޫO<B_>C*C)'u{\]x^:KGIa[qk~u +S..jFQLnQEԢc7*,sي%݉zck>0诼YaL:rD5MA٥?n^%W!(uMr@[Ź~~PNFuw1Xn!>M@_hn8.J -zA:}?g4<qW>"Ъ"~V2G6 0v'Qy}Jb="'|f y=N!i, NU=JL*#tfJiZ9l;nlB>F5Xr2BL z'JJߨ@͛Ħݺ A4_'u]SY6%{EZ)(MZK1  D +/4#Ɂ3I)vW`Q/=Y`ZS{7SZx^/0θ^ERex'pHP^N2rA$޵B7 ! 1עHc^j>%K߈sW:X}r un2 Oރ' G;%fCD&\*NU-?."E(ވ$8F,#$]f* ?ZpK~!2x{Q/Va:z*3)]g%~V^w?^h+S9>l&Q 0DkQe]JFA?DFަM+D/H]/Qb-&G >tha( OlTl 1LN ~eё۽p U} Zy%g</nVV0>$ZCŅFzcexl<с%)Ved?{t0&(2A7D*DQ|Jv?XC83X87ȎG֢亥uTwgV4 aaStqp3s\[b6:gʱHS IڜGls߃ͯVF[8W-]1_gg(?y:SbAKnDy]aIdUDbN۝j WkLDh Gzp!Bm%Y)?fwGQ ONj`3}6a`Vm{o ww gC:E[YE]6nevY"I?eV4-#pF36c^WfCʽrMR f}ΑMm",58uN b#Ib\3pb׼B_bX/q+GM(5+`w.ʕA =5 9nAQ`zĩd_4fӲȻke?4D۠oT8*PK.G=4EY`)vA.N4-9iM8++ğaN`Դ!}ܪ?D7aAf^C^'T[Ƣ-N]34~R}ioA[e5c,>\+7(7wg5ҠYx8U22BLnֈ{{꽉Éjr&98.3TMl,^ec[MZ#ʾ"k5b*^E׹ }!~KtcyVA"2 ^mt5\>ѥG=2/98& aҴ8*\Npq/8o wiӹgxavD"U&1Jͧ_~a(Rw o@6ֲlQ^!T̝LJG;*Gh DI >yz}@ ߗ2 ~ MQ98]NϽN0h)k15E!6F'A݆>do(YEa5Yj.^@\ֻPsc =zxb7ܜ׍%9Sb$5l1$Uâr[͗IvZtrh^W~_Jx*m*^Hg ۶9`>p)IR昶Ίq$;E -5M8fͦ5q+h~u%2.A$HQ0F`V.11]zf0]sA8tH}w,+qeI (ߝ؜#-(]٢> )0C%"ڄwIq*)]AB<*'ڶ 1M)=h}#i!`iOaOn\ :%)ٺY+rW;®o ?XpVLIY)ew`4 iW:٥=kKD~ն~qnUz9|@?)@J#s A +2Ǩ>i }\ij}yB/fOtQ8i B?\m wl7Qɕ;y> p$YSW\=7bB K8Ռg)ӰQz8q8Ow' ͩ5xTo%BKY9?fwLr$ƋCp5G[0}:Ɋ@L̨4>!3(>o)WLap>*E\F00uk5C.͟m@yZ ~ɍˠNpKo%"x6ScjLOI4jYh~[h-(Sàŕʬ|7IB l01i m@5G=+Bw CQ ;y_wmt%mY4}_eXvJ=:)׻,a|oӹIB4r jrLќq4ߌ,r:fQj /_j/7=I[2fbw һ d m]_)qsyJh 5Jma$孝I%o ds UUQ|v( r.-;4ʅ4|5'^ț[h'O3 AjH̊dY 꽇r:4r8CgQ|zv}Dj`yuW7i?4FT?|nTA9Ce,hJ ց[ G9e*3tjXhzveiDL]L՝V0a5O<3a(7quxr:|3ǔx189 )@p ]~J{٥0e}6x Vֱ^[]m{oQAvѴʵd "+ߋD(BZ\J>O4N\Nb,:й{.52 C4c<~R|yp^&պyʃt;dr+h xs.Q6.=*1[y+X43x\y$yJQwꐄq b?x&bm4N8>R//jGSyFLi1/Gf@sy[`Z> c$%zn2Z,v>xna rҰ@rnϓe$̏(OF-3N0ͦw=ƶw n3MLw? 0%zLy>G|S~,P1=_I9/jy粕f|kƣcg9{S)$hĽj6X<egH4e瞢VBA[d6apMhR)-}Qk@H D2O=ǘկscmJIڍBZKRPeDو,i}9D wҦ֙\j*ڬzW[yw45y8!I>𐽡r$ 9=3:jӣr/?={oPzj|Ü[kȪ_0;X۞؁^KFEQ_ k+HeJVk~n/_Zbb~pq`⒞w,bi%wV)>Eܷ@/^Xu졀9Q`Ka$})J0jAZrP!H=fYm%őIПA7] !ֱ̄VʁӱS׎)0d\5je A˧dO1bȐ=ފ^81%}IpY3.i (JNޓd8vTpy;Є1!毁i+؈z)? isL6:6=$!z5s?U) C!m`!^k ڃlsh 6,KeJ2:ag^G͕j'@ P4=gvKO54 ڸ DHT$~CÊN _^!j۳N/y[(uwdoCg,OLAN1.CR Asyhg`*HP?7 ޗ LD C8zǡf~zQsƮ95BG8}`Ҥ,frEjPa]sp&_U|[{q!fhG\3JP$ ˬ8$zc G*_|IO]'9O!ݧYWRs?TӾ,5QhS'J&ѥi.6.j=D!PZ7}QVU8W$>2t7`(?ּO/;σ孃J*s9l>RTnpuE#7đb%yU__=H*52aUF}d޹ ?}CEN\<#io'v-.6,z v$IUQ(xF5E*UlW 9ǨcK,3MѪH:U[KBn"Xg'zwyfZxm q,IH9d1NҬu-dEw[% CCmhvA|_ -=#ᒿYvwU]JnZ@Rk̲ ^Rn\:Z:_U zZE9ٓY){Vc"-ƭ d uqT0)l+JCYԢ A庆rKS)م,$ԗ`5?3a+$C=~^lEcuf7`^Y)A~drq!<_VNے;R@02UϭQ>]XqɲhJ$baN*o{JLҾtͫf\| gyxB@T/osr= mx#^Od$Z d - F%0z ޫ(Tx[ʳ=lc5wʩ"mNɨsGf6׈7Xu*h&)/UWʃ{[^%2g Cs QVpAOu8 vmp6 ϥ&"d=?gnldq@f8#3nq@(\Ǻ~$$؝}W](z#WAqé_kt7-|Ss_]?Wt%E=q^~` /[wM(hIj('9A pCJlwY"G>0d29s<\}Z/`ٿ=ء.* Js,* ՛, ė2չ B Jul\xJI+!1AreC Dm뒣Jh9'lG# 噘*-sdη #F>30.H;:LT0(R#)Qvl[h<%*Fʶ`QiПB imRޯF .oԌM8ICL97#milKPE"0Rx/ә=nږ4ʤoإD< 8߭t- $^dc鲑J_fɏdYڣ.*m-oYu.t,7! u mwiCdε<"ïClACo[muayuE5*=q+K,^uj1`,YDw_ CyQ;g'qՂj$QPX#\@D P Z WO?&`QrZ;yJG@'"Ka80R~(؉ШэR b[X,5^oo뫋T3R1@~jqL[LM d:DלgUFk1^9nTr ZUs qp7!8?7&x{rNHVG~> Du@.3䅞A}.ƆUc=/tO(͙~li#}=Z|9h ٩^b~WF Dt<* <־d/j̩? Ǖ/I!TNV.M](ta*/MnKtZAϋ'~1A D l8^OY[5>∄֫Z epD Av}:#v+ݔNLʾU8%Bt~hFH8Q2?r]ݣmE%!`!>?׀?fVd砶Ӝ>0_U3}52jnC0~gMͽ޸Rapp[w7ӷ D@ E/X$TF\@底<1T9}*oɼ6\iT/#:b^EO A(B ;VL?6y;mÎl+hHȲt$ ёu4KȓGX>s8i΢ hCztZ~QI䛊za5XmXXw'k_fW7W^}[6pp5\ 󴟾"O{ɌfFWؗ}M,4^k8\_ `ȭf8>}rn(>2xP ^&ȏjaPK ;Esqc)\ ~%_0X__ DbLV`9LNj@<_Jhk:sx{z˝@WI@m6r1xKM2:),,Ŵw"p^<|:4iūdvS9ŘgXP=Q__y\܁%ŠB쬦zSR~M)g+zߝ6{'i<XeSe1 N,JK1@mD-.i wVȆY7E|Yh{.2(Wh8+OFJPmcVt8[9`_~;g̯% |tM3pݸӧjI>L.qCzi3DUTώh. Ϩ$nGv_0AW9OE%E3 !^ ԎQbXY: :$?Fƽf5<Æ4 ɷ9}Xߐvzb%IzWp? iXv6nך%/3yPPTSH4h%VkfyQB܇q,̐ÑȜB0,]?x3)}cYKqQGq48kg/- &Uq{cs׼'{.{FNoscRmyK@P"7ں_Esxѡ/Ux^ZBOU#. wĬ#|U˶N:ǨOr. a ǿc$2I#찆Wa49$!L YR[%һL"BK7B&qxIb@Ф#ek9FYvUL\ǝ ?q `UW%.Ky'h ֹ'KI?  % ևDMM\fX/h[rΝlq%]C#tvx.2+V F]w <O::sUO0?ljk,f^aA( X.`|TiӢR4A'͂':40cbS9,olg(Ddsg+.ޕHAVݎDkТX3XRѦ̇/7|ДXu6eLrr`E*LxVW eI[3E :maXDΓ5 -,΅AC8;s1%OQ:ߥ4Z읉^t޲a@dzKi>_Uipve,v{a1UWZ@j33V8P0,ͱl5k߫p3dVM:N62L(o-ġ'a0VGϷ G'ýƝyAb!BsOv3GpAUsrf S%*KtzE մ13n?2x*kADP~h$MV wك%Qdb%ol^]*ժlpf_ҦjO^.}CmћpDI`D3Z;.F%jpObZ'88V
-2|Z#jNá2ԸT G)e!~;.bw ŵR+o}oTV(]E q[*::a[)ն2ׯ1ybu pa4jV 2!6WƩЫ-ET |Â/w5 b` nf̈́j lltN 4Ռ usq<君ud"^Ev@QXum{sg+"OV#H]55#:m/SrVp(7 *a% ? 'G "+dkJ_Jz~o='.ԸбV'-)H'` ̈JuC@?R A~nkӻc.͉4ۛ\kV+cȨ"QLsI QINR[:M/Y5|єkZ s+!6ZTsXWx+P[:TVی{CHеžj)1_qJ uh? Q5C3cj1JTmEx!f0 V$ G^V/ &Puv@!)ɽm,*zV'B\ ;2uhd7gfI9҉{(B%Sݢ*ö.U0mW  Q'jl-@CP6¼NQ .mOkzMj5{jt[=[ad!h MFQ,_ +/X@/IcNTh'[%nxX:{hm L_3,nW_5cxCG B6P+vɹnj`GDٌQ?J6Ch$X8ύԉB:PBcv5Ցnb\2Fl#϶@6%y.ޠo4$_UpD;"qyܶuf[:U>Cd+,O8|[ 6VTU>JōTNG]+k[ݑ)WJ{aIO[? -dܕZw9Õlik} JT}cs Q^tGе|} 5m}:^LGqBZ+Ss+i I)*ZN3|x|Mёʉd cUHD|43U&`e غǩPp͒D"('b):Xǃl/k&}Ů2GC5:Et' oC< 2$.wQ~Gu3Y=aK\{}-[dMw]IĬ0]ڡZ1hTng.+.\$crS k\& l21Erw9AGGt&:0Ʌem}Nyz{(al`INޏ!8y3HHwD~NunսPC8H.3AAb@LuFaA_ċmp]JFc={AJ3n}E1VA#$ˋ~i{] hy Sr?mPG(=#COLo+H)=2o9Fd7]0$E""]]/`}^h ;QpQܬc#{ 9&fm#G {|nDma]MHGjzs Tys]ߓϲ7=ҴN '&1z3l[N/!I%6k.; WDA_=s$%5Ԉ(x7j8Cz&nr/A#s(_69D!f$Zms8We#8>إZjcR 8;;R0%>ăo#2mH `CYB`soPk>zhkf/P +sAr܌v0H#V~OKȽWK`m1Z2[.З ̸b63ˢB1[pO4=)=T&y(߷P#jmBcT=y ʻ5|{wiE^Nf7ͻ tܘdo#t91*w53L~08[O"7.t%Iν5ahq 8R ٣'6v?v+Lj&! i"cfҩs<^g_8fE֪M3t]. ZcG^G'R9TGvhoS y̙{>1%fpt|FJ[ <`(RRs\S%]tnrQ[Yx=KwN(ʬ/A+!AD3vᮈRqhU tb6PJC&3o ]扉w@0G4pew,`$TVJs۲4r\ 1 y3 .'f"E_齽!Ye xIQS] yTdxq]` faaVfWI a]?--dJm D5hD/ $cd@ݧe5kؐb`nki ۓ^W_MW\ѺQV:Y~> aeu9=}s^4vzoq BxW%Nϟ(ep_-.YmՃZ33Yݞ8P)TXx2.Ħ-uucz:Y֍o'4%K@T@Vykg^33'PJ4.pRdpmX0]֘8װZkh>-z2) Q,9Iw]IYb[ w]5>P%LK*EdgVp_SQ4L5C؍ŗL)~I M lk6NsTrkmLs [I(5MP2QCnϷƭfyZ}NE$#UAT!!Cʾ43uK6Xqrwǯ b>8cLRL?FĠy֛8'F?Lyu陲*}:ʁj^©6~.3ki乭Y*ږ^~hitFiAj+/+a+m7͎{w,z46BK/tx7GեV]8*Ng]IvA_'Us{lΗ.CAa 0P4;R2dD+GdB,O{(M4T 2 K( . 62|R#YЧ0>G^a\+?M2iA?/\GIKFbo,*_Me%HgfaxxW _t+Pcn%72ю'> 0P1?5:Ⱦ@X ;#/e8A5,k{tRKQ?$Q'*Bq?0 ]׺u+EL0L|=m'5 ~Ϙ諰{ Eƹ6>Qr@Guiܚ⥭p~/i<`kp;* &Of@.C w~c;O;]dyv8әD-[8F#ZJPKݼ`~v=Xp )Ib'6.J?uOXC$MueHcܵ  E۵Wq]P)\'<9U   e::rdfZ,gvDǾd%bZMAxUA*f9O,o}ެ웘]aCs4Z'zW.ydpĜ"b&,n`dmQ؅:z¨+VcP_~sV dBV I[WdE'~0:|!o>*[ -? Er/-rێEǷ$3\q֫\eenq)MVK;_|Oa>,QtH;ͶaA {[JrOa6wJDץ SV>|lmt_^o1%bJ9l(8/:p\56<@yj|/`C՟״Ϭh!DRDG:0cV=KRy%x-v K3 Sd{ H_>5A`M(<{fVd6R՗4 ʘ Z+ׇ5>2@HƝH}y;͐؋-` Y#QDB4T*M\V;@X8p?% O7> (# a+Hg5]m27xG(6 Xc]b7)bFԍXc<r,7+A jq(3~B#6|7섣kȪ٩'y?R_hQTٹqnOb0Njd #Z3`TPʚvݬs$8⯚؛]NM6gj7Է<! _|Vfu}9zP {AqE7y=jik^ _2h-J&EQuM.Z,qwE+5k1(caWALz^֘oO6ULӰؙUr!U-8lI1;UQDA﷤7tҤ4NCy ðUgHU.Ť]EJ$b KqRމC2;՟S4e9Mpȳ::ыCwp~ @>ʲvw:ؘ*h`n\:AR. GĎzŏj?m6P5ZeVEz6B7T}ƞ[F e@y 4/:%8u"YZ5N[ܖ0v?#B]č<ϒaH/741PpDmfj?O~Tq"-_5Y}:Eqo4;drD۩@HP")/˾}~t:5#Xa`.p&2+\/)3E =yшGmACɅ. $|I%NsR~&.6&`μ$eGH7_2fOr;@ (F/qgx.e#W~&.ipEꬕٞWH! \4, <mV,"@TmHb #15Em\Lk K ,foMdF32+)[jפL2BňC%c-$ 頱mQgZ d৬q\t#U^?$e9;.2y3bBDy" N*gQwz]k$,'֟R^yHd/.5oi6ڛ{iρ 9y-"72 7uy`<#꾗k̒z"} Hmr,tg0rF$65_tjJ&34V`, +X_!'&$WZ-SG6Ҭ--ɳy|+]7 L$ OɥztWkžӟ DoNId6uv3+@AG$Y:Fk rWC::d?zTI2. b|  p,x}ٰRSȣG 3@WE9hC)0P;?+kSQwYaL<vcpk EG`6^Կ)Ex|ob qbfb\5$!I.bnpZ/ᛨ%GʈmmIM6'O5nAFpgkeLE/K-lJ̨^7i޲O=j u)z_v)k'SƋ V i2:O~/1eUMdf7Bҍ'IF.CLy LmJd sg߳4nB +#}%VD.Ѳ^kR^)%_[;Ek?\5f)t腂eedK{:'$.v[|Z|Ia7@ @י/*>W">Yw@S{0 Y."Gs[5"41{mTVo  n HbaVU)-.X[[hQKgbZ–(T jC"n۫aQ.iFco;.W=Apǘ{-T-> L\Nf!0M$*20$4iz3][uŅ(zn4ژU]fP (Yݜ-חGvh/sC")Cݤxi !G~/ V㚐h#>I ߧ-OK38pp(ȕ!PY#X cB#CŵqG}H})ƾvd,Turi9}5&DZg$`⊿[#DLpz=9!D4G!d@̗g _hG-\T; m=yc"8 =t(%!m-X+$۫40D^+sc/NO>ar}VƸPj?X#.!$6)`)1&̦tƴ̒THx'0%Ff,5R -^m~ 3Nَ𡎕f3q\W^?ݰc-T{'8N`]@+9P"5xG ,#H#d`E2w[C;_L6V6,~lHW,vHFc.3 RSQ*S52R`oOj $03ԆZ><fGNxґS`GPplHiD\}|o8LF% tt}_$({u'<3 ϶VE|`;dU>P/p#س ֜2'QfVe= hE(/73*"X6a/?S>XfM3WD~WH?H3jڥA*0B5b~kZY￳LniUE-١$= Fx}^{>GR#Ն"”^f3 ?43dЪCcqtosfyQPsl-o+q\e?ʳt'TPH̙%h>d|iL1 x53tgWS0H={Rm-+x~zniX8{ȪR dbQNm %M\4.^>(:fEDBYwOQ` FSƳ[.z~]Xz3*Nx#ˣ!&q95 քrD]TN@4A0br)XdP W~aDƒlpA%{nZn2ts۝pםwCvIȯ {. Դ ! eL(YJfDGw׽ N-٪G98!nL`j`-:se= 8k@7/}Rl&2f@EkQBQE1QCPӃ3(x*i)w 2HlzYAڭ)LcS|r <:0iũNQ!=7_/9b0Kaz@,,M4>`5wiCK@1 sQr1Nhk뾵4|sY, y[.-Fޢ~ Fz)1㠐}4TQ灁s̤pw@c{ a6,"xDHR}:u4Mx^ ^TGdeif`\399hi ro+Pl!9 OGRE({^+soQ2&,g*pQxYG3] BEq^:6tRi9D>: Xߧ"ǏwI;X?{Y80^\rjTȪvhebf,hN;7pFʿ"9|4xtsg!Y#ȉ3lpoƾө,N';UWZwPeZ3xJ_oۆGk}#fP ϱJЩ): VB{=}+/4 `9`̞rmXo #A l)Df`,ۙ,pʶI#A-k8% 4b Jpt6WO ֞iHg˟ړGƦ}sQZn{bZJ$P%e%3gCԖ XV7{E5@ N3E021#WQUS9);烶r5q 1$"qǒϢ!'[Gk7`4P, %k"" ԆjQv7"M%ΩiѳPl?'kE*ϑ wR޻r uOAm'XtxBj{m1b+ $"߀}R)SVx&(=X+BksOv8L^>L qSShcDVʠ 7}A[C ɻgT>@ܕ츣%؜WtԦ4ƿ0DI!cwf]?8M8k$a/υ  {f4{ɐgI#B!qI{894A -YOn2"KyUIKAw*bD!!/a\NJotT`@0vSY6 |Rr{^;O5; g$V!Ȝq'v]։j]4&ZƎ M#!YnBŪ l1%q--qB]~s}<ax?nXC5M!uNq*PM ZAQYҶ-EVL:PoCz`".>ϭ:/}YD://FM=+T4DF?2ޜ0FiM^sJsP>;Q/fn!oٵkdO â˽䩖ByFd aw+i0QJ7 3<̵#UGIS R+m ?/X8.k 3k<&y X dntՍC ͯ&[~l̴Q~4HyY!źM*Geb%;/ t`j垢Mb)plpK'CAEiF'h }&"d)4"pib60ȼD9* 톮4e5~S7$IJ?E؟+BZ cVE`c#ĄӻPe0\[i+Af z@5!"),W9SI@)ti(S+\"pÁLʀ{T SUc>ESR9\Ç7 VG;e"6ue^1ԬQѳP|LrIړF{CQwND#I'Smk 2;+1>J*Ywݙ u@(U[şbt)jйR/KN#ߗgS?n(&uDY%~2˜ 2zN ;?9+t@Ux xŽυ.rmGnSoe(j$0_k镑Tf5wcLV~o;Lre\}@0/{=(N'L;^c./G8^ch0s]pj5Z!룑G ߤ6|xYX + "|mD9>ˢrپ*[J #քH YU%Ǫ0֞c#0n_ )C$ Mf e)QkU\HX:J˃?Hw5rG0s];Ldyя{a!^E$`l,Zs(6V(>1;*Ƙ8"a 9bٴEН'|x ^20 r!FQgf7IRJsdXPSdvLuW!(8<{ZY{x!͠Yh ~oی{2 Mv]%@SKL3'=`&ZڃgaUr@A\"VY -& ؆]/`}02\11:R,Gѵ'vhcyY8,*"?+P V$'Z@Cz!ac"m> P#1T*2Wl*0Tl>{}Pk/MV^?WgJ[ZVsHfK ?S }&+|q9HODgha'<w9J8Œ dFgÌ;5S]*(f.DOKRG%57aӽXXMn@^s<u)-8]u 1Q|[JJq ώeR|(oro`1ǹ>_y/Ŕp |4 O_ЪvH@s1\ ;]y,hB-OVkۛvlvV|:2 o.M^X q%j,eRǣ* *%ݾ3ER %z+Pu(\ku#|) N}}Aâ5)çю;5]\̘~R= 5|*/jGP·'8tR>j6&2 14~Oj8Z,8Yhz}9p}n'7+V',Jf.ФVrXTNX\z];tpS1MhROCĞf1vC2+OПR.Is"f}Ef${&LnA _T!Π o2uR\&=L6h!hD+cuQ|7S\tiiC Vm%ḍFM!AՀݳ@дYV4'JAx^36!B| 7c1wvmN45ؿzz7-&W}lbòF ;x; 5?O ~ BP|nIv Ra׶>Z3Cq=&^ )R7ｋAttX`!͚Ky7,*e1gs%wХafs~E}a~봝8t'ƓxSxԲkFպ1p잷 7ރ98%rCIǑsEb'~_:C" Po5wB]%vr }]HC}g_ FuV 䤴ԡjESѮyqb;n+5\}?YB*}Qd.䃜| ;D_t(74 jJeBh*7/ d٥nxϪ딽 ];V%U8*;x.]BVvG_.6"Gmj*=, rYg\!+^  }<"yQ1;,d{tja`bfe0e421)C|Yf1 iu߂꘭VL:aob  S#b|LҺј_hXyj Bӡc?#;tܣ=pswt {&o9YOI6>Jj<0h|Ͳi|d骷zDF~ }=9,1Unao)qd}.ϬEKLyEiU o^,e_XÓޠ)J tk=%~,6YlT.saK"ֵ*lq}w؇bWh $<G6 {M>n XHm5&r$vV4(p|d׵?Ge"&A3w¯d.Dtl*}<ƸB71yx4C藜-H@>lXH\ z [AgR5a@*S2?l- h*[A/$͜s?ts6dGaY37閁a ;)($q oa>w: KIƷ` 5OblTIk3 04t3.; 9But!*?O*qL)[,bBֺ3Y7sؤPqp~ {Mܞ.>qœCIA7ohBIS#n0Z3t# ` 盻COdAsWvb:*5o-:Rx>94߮b/Ds7ˁ_! rY+])P~Ae1qjvr"zhT7`ɮ8< Q`KopKe ' gɟTSx'i7x$"m6F>2c 1 dmL_2"t4+%:i%ύgqhb66H/͉fi+9=׌.+ς %nAH|5KnjhRRqN]ΗrlɌēW;tgB ݋EU/:{#8u!@+Ac Zyyxcx~ɰG+RΦ5.Gi=̝H@&*S-78|+ŸL LRB3=*j|u{WElmV7VB.񋞀*Y<'Q >20zAA@((H$4%Ə~~|O.+ǬO'sdzR0Xeӫq&<6Hl2YScCO"$:uMU-'@1k3y7N pSMW!FCI{58X.EScxF`w(Ncu-Y.Q22_wۊ+nJm+?cAŠW-YW,Ĥ Dޛ;A\w3Ky/Â͎o"$ʾW ܻo L:n՜ p?l؁ԉyS Բk\ G-Pry%[AQyswSeΏ=ZF*y ϋ }+1SFaW&ky645G?I}4E)qwM751aC>, qt'b4Gmv7Ԙ=^ VQ,]W2~/IYQ[|N78Kԫ3ܭch4-UU0M~ሡɐ@tC#^_|m1Q-~V@e͹НlSoO7wQZ)~3V;09m*G4aJb#4`I4cK 4ƪxpX X8NF8`AQYbe:[j7s_ŇKHoރTnu3E/S^:tXy{UWʸ=rSDf"b; %//gߎ*9h6ϳ(>}U(!_'/]5ؙ^/ä|t.?* IsPl% t潌}μ7- ' FγtøGB͂EAL!*ԩڵ< ,l@?04ͨlfOJVzVXȔ'r|DZ¹{٨\9z=IJWNÉ o XzM{@EE"_KY))ruRIO5I1KZ*4Z\$ya| yfRTU}d|2$x < 9 \Y(̢ gJeT66D^uR<䴰%ڣ%#։!]xTޞF)!\j3n녕Gd_Ìr1pm=7zsTwPU7P@+aZw>8#ׂZҮYx_NA b~\c +Ų(Jݮ#q ~أg4h=k*Ix-xvc҂`ژYݴOZ"}UҀ"Zͬs uą&L SC.@@\$aڍ(Iÿ1a"eOi=wÐ *E{toNQ[Ya8]U{Az˦y=FzhQt9-Y"R * )f&xt?/w*<{> EF#@֕+0\kNQ3_#bP OKc\v!c$>u5Y;`n^RcA99XN9zkU-+X?^Yr,ՍRRM&GH#QxAX ܢvӃRf2XC@ vS _vxhrMCüMˏtrWuhYXo _:]p/:Re*_1ף4}|Yw{(2OO3 .<aK9@-Y%`ɟ)5!0TJƭ3hma[HWT3EX K9\$uGs8$a5#F#S>yDTVgV-t63O 0Cˎ&p@ Yy (?QXiy *fJ!`r,''J_dh$2p><0hoPh3Ţ HvU2DOɍv8bB"O{,;Fěıi<"FH6@ۤa/*wxtukGzvBUTj;_ i,O=hQd$јvh"lo^ VեXmE!R8,-0](r|e'G?\xRr#u- H3L2FO!vtk9DJT">?~%tok|EAEWN1D[v͙0O VՍZ +!LJECF*h$scӮ?Y MX5օ~jH/ʱ bX>H8&"-H{[@/Zԧ7=IzP4eg.QcSydG:}m,k/tC)_ 4sb׊T[xՎ$\y _gљv`[-!yٲni#lAQdVKU|:43j $HC# ǚ֊cJ/H^@ %Dp]3KNO>@J8$i؃='צ{^,EG?He]dx-ʻ$eh$M[Ds"y |%ߩHSD T~ w|=0.)ٮ4QEpهna!Iֲfۛ.D]lRb#dOQ4&:=Ϻt*?X# Eghs2q }ɓ}{*^ڄxy^ 1gu~~]IQs:wˁO'ENT()!. YM%>1G3ToX#_3aBht}e0F'q^M8gp\ǜ#yvb@ =}dJyyЋh u642QM{AǑ>zb%9s)jU6wn>nwĴeOl?)Z{S1ԕlEaGRIozۿE’xቫ!ڒNh6KoWinEјIӬЛ,:Sev*7bPS) !=ߌQ{"iQd, g>g36$NFCp;5˶ !R[`Xr&Ě_ _>9_.MWe@T_PMVx'HWM v!if๯/],gKO1reܪ E B:ɠ">=*uOdsc evz6_!=W'0u2]!p 7[f[8n1CD @5zD# D0PK|ޜ9X "'g-D_'sPy㉧H f{ZMEΖD@}`l!r?s%Xbb l&sSăKPn-ǣ[62 "j0A̳06HFobD+?Eh18Q}lz{-ok43XWhQ ߃_9bStڕݵ䑰.&7H- q@` CDvR *v+෩lcM8iA)XӔBs9!tM,:x-29ӷr_& F3N 2uǰ̶yFgSLtZ"Kace3x1o{c1r,ꋙLJ#ysNcUYy>#_p+0W1OpCl c)IÇ*A:]+֦HSXhm&4t'F6;E0ռckM;TG 3 2mvL0n}`V| г%H_(JSRA ŝil\q:}q7ou[ PXr7ϐX9O$"BE:e9!!YmyZ ůEH5L34U5X]IXLO!oVa (d . VH\2 6B1" Tz^Jw̞h^'e&X#ҳp6OVQQ%氀l"c*Lwngޅ'BQm,^PަH:^m!*#Fv̑ _ǣp@D1L\{8Yf¾%M"*7T/_.&EkU QPͮHf-M\33fiXC)d7"YcF#(BV ̷Ҟ0F6WNaИ)]J#:(¼D[%/ڔjD' OmmLjxֽ.2R/ 0UzN)|(Z;hg@cIkmL5 "^#qа5>i$i"IgAJr<,}P8ݾw dF.HkAGmOaX~iʊβlWQ/hkTc(Pk&d$Y*P2+/ UKh3ބEv=JHʈ KJ(Icx#)oe1tڣ뱳 f3Ub6oU%ś龜9~SqI*Ru[O M14tԯNf(Ss8Trp!%΅!>ԛ4dYQA zc**{p`!;q9b`B:`O!`1 ho6Jp/[ hex M' ,W|?LMmz=_$i[x&ch#^.zqKXZ@$v|.VXnjfs%c$ gx=J-K4|*߳Ht |)a|kgd}AiԷX'Q!B \̛NނN#PÄڊugHbΕ:gK;-3 4Dɮ83B֕>q*|Բu +XZTe *Z|5g,6 ܁@]4dye%"RX-nTId֎UN_9!6T{cf)=a( nT ZHmL|#X(r\cŷ<><Y%Rt>uIALRLyd[$D#ekE4H5ٱ^:(ޣ*ŝ.p"^^8Un\%^_z )g4V&T1b-0J޳kp{^}4něm:CWoORd E-S/#og6ؕ0by1daǃw\:'t, Hj4T% ̈́E͏e$mBGA] xsJIN0'- LZK'24]^d$rVOB*G9J2Hى6@OFy*=k46R; _r7ց%^eTݣ: fNy%s$M !={)A~J,DZA(p?P va-79&O/_- ɾn$y"bޒ.ȞHlD`EaܺIMm`N :דrtvs|.RpeNOiNwLoSlV[^MC F: 9eB]TĖGy(WzlayI,k{'Շ'HZ4nHaZ̭u(Euh&tojTh="~`h\&aFOPûXASj@qx.%øY)|c~q3ǙJ8p}.v ^㸲껿9C Oe߅S:v>sc5ÙIØlAIk.yj-nNxhKmt}`$k}l~6I,<ۨps>)y3E >Rvro}لܠIZ͓LǬz/Ͽ#5 ?Yydz/:"%ul.Bo;+vl &&< 2͑~bB ll˜r%v ;8s.Bóswuu벛dϮQSmٿ V9)-E$8 nO YtHp{y ;¥9[%zδ(p8rBO(B%s+pKXkxQc34.b.3{cyM62eTD.('P[0OM*!E.+^_ɘ^oh`L }ԽqrŤ{Xf_a>QPߑ|WXdL4 F;kSobA􃸓DJ% &Y>G4TPQC?/ #2{S\/(XiC⏽9wWQd<nG$K cV[5*uU5$F EgBxJFg `^T;42N5!~Ի0q<C6|vi '<g_Wvt3($Wq)\2x^a/?rF'4 dYt׾ dG}Ȁo␏EDLț|mnA>yKh:%)x(?AD^k)|m- 5n͵MN["AE*iۭG7Do $o;LW~)nlYD|P"іёi]X^cL}Dl =t1.kp%ClͰ4ŵں8ƽF18^q"Sp`^~1rp ui؃Q@l)c 95Mhl} -EJ"l,Ɉw aF(c)zʁG ^E'(PI\W{'?_E=hcM6W5 {0ɮEX`)4KOHVaf:o(R6mO䭛mQ#zƊ@t`i/ ,;f6$Er7f-r-Ȕ7#q$P瞝F!2܇ jHۓ6"'D[X*6NԴ(1˅X?f !l i3Şgl 2ߕ98nV fXhNHe'wZe *yRk~=0#>:RpS+E_u>J'P||!bKy.٢ $8lZ*6 a%Vp-g LS#Dny\/U+64v^aZ (`+L2yԀ4g9 yl5d[,dўwz Xa? ptFy{KB$ ,fGmޱNt*䌫 ,CwPƱP$mmo77_qq;tvkyeri"0t`VMJ=DxAnhj4N 8T/C]" yapbϣ&AYoJzr ?xo1)5m٘q]cYv~*U&p!6ʗWpc~X]g{zx Gr75KIG\> xXT"\MTFlgr@8<+T(*,Ꝗq6&p@_tE!҈9Xz݉G'k'aEf^=HÎBӓQǼ4]{kG] H[)\ G#y`>wA6TbʼnI(y/,6VꨡP їDFeAAWAm47YŰA<ILBIH }TD8Bjvyt$|ZMZ>HҨN 01|I)TB5(g%zVO 4:gXU# &wф_>,}LxSj,5FKi0^XLza6 ʹ\ o* dVy!I6S{=8)3W'ŵ`wR Y fKK59H>/,SZm>kX:4TS~ +!'T!U׳ v9C)4DN")B:vk%1A-Exs7zJl͓yA`. .3`>.]`QD3 -Ҍ:Tzjx.Ox!WS:e]ʑ}}vU5;Iԁ23B4LM20y3 ugd4[g2as^d tH&[| e@KcuX2kshDa0g4+Pccؠ$`q+_ǙHH7SLF,׸i[.-}!V͈&K!)K8o :MT\{4 Q$ 46$"}N=1 ̟6Im6]l;A%՚~,cSⵘq@yf}:zjC|%a=->ΨjNvL;XW}|b nAp,U:O6yI/#?4`4GvWB6<_zD񜃓d-pW6?o_t*>FSX@IJykYϯ*߰<+^noF0% tdͩlJ8SX0>BBl T#+Xksvl+MඃkM䀹 XgF+r+< |ppVUs?\DЅb7bR\qipCþF_Fb4J7,R$ eu3!lF2Y;2F/Q C"54]M,%3储FQdpƊZUYWi;uC'Od.fVw|k{ `s:93IT) Nv`fF10tÉوr "4~, mmsQe[(O Qk:C* {S)L[TbU'J54\ t8   g< $FV|*}qo$1 )6+SB"t04f>a!4ˤ=w*v:|6:!͚  W; TJ YS)XK Blk Zۤ%SZwܟf";eTز(VYKȀŢ\B{i#[3<4PN3\}:o95ɖR2LrFYKଳ~[5.-n6;gᭀplt{O.,d1^~0CyRt^AQ4{tvzd "Vf m^ny]3sY!. (}fe$RJ5^5ĘPzɄ@/w`A# :ːM-Ɇ|ʮU2sk.yM*$l}.j}(Ts&zF}f^^h=15?Op?/Eo`D} DE]H\cpJ O:Uy.30MbX* 6" S_!W9GX~=oC5VH"g 'ˡ>(fDZGULMp{=ǸpV|Y6?=]v WB.N~ w =g\7TV)ix UHfwfՉE>ze*Y'>=GT!"yyz`RPқ Lvo֜0-İ:I[0F/BrK/Q!hF}C]4W, RQ LdD}cf$70RoFL]h$3#]_dr =2W z j- = o} Ȩ>%N1\3f /͈o)|ps z(n}[ɈԔQhY' (6BB,LJIT(QG*p^s/uflʬmIѱ2qAuXNibl~thMnH7WԂ=D.PDLݬ&-@fDDf+Fx~S&Cщ+x`;3a+LbW1B| Зt̗k^O( Yvo}=p* $1\NP ۞@iDѡӛ6FH0=;FI5R/+_kBStiV %LT<+Ť[nmuiȎS:>rs7D֝p-O=LUgb-?hu:c\ \ŝt/Vn,7 uƠ b(\/qzϓ̩*.{NK1rD>9ތwF""urI縐x+qf YJs4FF+I@M) ;ys/z9҈+\~R.o=~4.b%㶍TZS`Jیʹ[uµ:ZkĚ/K/ s& gGH]P;rՅ]u+1bn /y/fT7l/E1ֿ5K^om FU@'a  l׭& 搩Qt5]^#Oe2]+MxڎxI-Rc(TE5}b2hLH&yz})=\ݟk"8GMtX#O٠nj.;t!@$&P+u. >`lMeʉA{ lGQ1 |%%C>CYw C{#^ƤgYţo575DG`b^.8:)} #LV)QG5ܽyDI[k)^78GP= c@Q-wL Ll##茵XXA49&@%qɻXXO)qLkoT;]]ф>GElA; F8x/h7B)H[d~SS[5  hh(7ykpb uqxs(~#D:$JH>tC +5H߅c\/M12.joRH l$e߅=`@߉_pnN&uU, IkbH^ \Mh!+9]RlU›&t4*svKSV4g'`[yax@H4 ㆱUr/;ᛇ+biG(l*@r;uVWև9]%I ('`D߄%YN9n̚Y\w:Xfyo=yL esp6M;13ծvz0,C$O(ϯ7ٿT`W7 !nrLKPM&ǍOBmXh&?ys!5<䍒/.ۚh/;Zrv[H%/>6 kes"TZض Cwzg2r5ָV2`5hnHUA>$@YLAA2Q)Tvn|*!4*FꝭiJ 7S{]^.b^)ޥ8]Q{ ǾMu.?yk VV[OἋLG@CNk^څ&̠Kz}#򱒲mQS*!vZA(Zʚ%7AtGf"H=@0@ndVi_z>'uxfxd#tqw0!J 'nfi!u-=yK(P$2$AvǦb*{Up 11 !tάA1vk&Ibj䉸jͨy>?)yS,>EXR]11:{4GAVRX`+<}yYvvy$AWC$CNEi j֯~]: 5}wsސݑ;!sAe);UW2V=7TBLN0r`PnQLIɸJfK.hl*]}pՅ!H_=>K%LYv*)Cy֓gGgvԖ[ Ĺy~OR^NAua9ABƬ+{ãc݆'66RPbiX d=ZN(;7~ч1Ψjr6څyI+[^<߹VDyQ]3>bhh;C枺ylfOƇy&n1pyvѵdpƤ6zқyKo8麐1.|U×fMSd9rYio`;U_''o< .,7"fF,O~3u 禋RmV4K wb2SLNMfE@ڮt"G: JכFJs+u}hm%ˋ DGKpۉ"9TU)zFOrS +L|i3MIrRqX;Sg #LzSv<׍vf..{_&G#\22O>`b48ڄP,YN6 r4K#bd8BzU;H<]o_Y]U-nC\iyt&ZpX+ "̉i1-OUb vbG~,I%T@`V wWގ06L,$ Gu Th胨gæ+鸤L>*+L@(,ֱAEU"=Z#ę=>Ts3<>õwdDLȐ1},b]O")8W&26xzL_GWYPY +eg.$I|?5/$ރ@Ղ8 X_ !Wa!fkoqkO[pM;تMJp2cxԘPm'O(QSVxQdڳ{ZE&MRCx&v6^lqnG;NJf׹8fAS_p7k]\pD7xDdz(MMZ7V`ɗo!QY[ru52na[7)mbp6Jcqa#$=pǜ}~ۀryyk|gMk25F{}[&|w-|"#eзg>tN{[(X+(fg A#ir/0n8XLP|g,g|aԩ_:Tumy mWm692q^TW2d2*GcK$I}ƼLA4­dduodb: iMo]ā#gm̉ciW#\d$\y7NP9^V@p Deix^#B=20:q:%11i@cAZ1P8|z6㹤L^ 'L\|\~L )f߇zn•{% { kW8 67./}k2kBrѽyx[9tՅ򜆝-e o>떧4V^$sI(pY@A@A]0+6[6C7ZPv>TFaK@?b_9 hqoSVrGۓ$OtK8ӄWX&]t&%aMTkGT; +JkK o7ꮦ9jW{^ ˧9@dJ]!LOu _t0S)T2Lh_< Lp|%MOOzRG@2]ud{/ CTg}. kִ|2@O+QR ,cGDgfdqe)7(aBxF]㥑v2*>|x;jՆp%wj0v&*/Uo! ǗW5 \| R(Ox@m:ⴒ>c 7GKZ Bԕ"9-x ”(o9:';iU 7Um#vN4^fBg S~qBf@>ۆnq/(PAu@ٽgzT!oieب 6aqV}Ai)D*TMu]`2_:qY@1-5gPyn?ΎG)i36UJ}af,b~x'oJ[1#p]Q1˽Ys,=<~Q9" 4}T[fjo!H$WEX8Maay[=%mp5(0 -Ƹ(KAf5/W]f M'!@d2̒&#HYYR0Ơx OK_NpuظekW $}xhgx*L]0/j/UL\!,$b2q?toLԖ^ɭ0 g*ն78%9<|lh(-Stv6n qk;3U5QM^oI#Jkh:G.FW'5vW+CdEco}2Tw zPMCEajYrES]rdR H5ZL2qgem2 :ӜI 6m<~4Ij`17LuT| XoG&жFݠוi۠s|KMkǹKʬC}uC&ˡn.;1H=w?k#KK4uZz@&Ӌ>ݔ|ΚvAB{ AIS})+C┝q Fo w s@ ?؝QFCwp!)@dps]GqҚ*e4Оڔ˛c$ .|m=c+fRllS%1$.kh& }S?F߻"KM9E~ b>((e JXL2 /V f  ٗ"llcF7$t(֗d|!HsM~u {waqC%!ACy*\c*Dހ CdExK$\a!8,n_Ƞ[^ +45'uŤ&4E'c7Vˠ)Qlrp{*w{4ȭKP3S0F=䧟nGVwKCPD+{$8G]$_# (g aGZ^E'I?+'cK%O~y6 CM|[2U&}? v #>.}; {W;26lg}^Tm{@6~{鄝nfzVv( ԼچK$1ɣx$1W"B!S*h9ǘ4*yS]#=/8smVmķiawzd{CbG'@taJp`C|b zB8*5uQw҈ߗvD $yM&]ZKM ac4>爟gK?J2=3Y^xk/YȔC!D.'Ƙ6v`nmy$sn9h1دz yTqm+UjKV~DҮF c' EpΟڱO"&231ELR׍>Ѥ[j{N_aBDb28O1,#_Įy5`#{(n-Y><,*# vPoxRUC`U_ՇB:}?aC)PzLVJˉ^UGTųo4pP+n9/oj-0pJ>uj|9g!-4qж_Of{\+-z\`pg\ʵ0*p<]-qw7>zt@(2?pQLACWB,ɚS6E@],yjjˣ+NQO_>#h5O$'@|ĝa}جyC^/<03㈡HE{/!_'N<ϣmH!"yǰ D{cH%$?!oTc ÞDmgof+>+JCnLA`C+Xb_pkNGQ ۙz?jLj؝>5l[R6\aDRʌ.ka[j_Wƥ,Ӭ:e*#I7pJk0p!E+⸬ɺ {^Ak="&37!!`<-h9R+MWa'E|9K6݈h)X CL4?!2M ZUu{#ZEt2e +|Jr`&B\(p %DnImkF`xsnǠ;>k#O5d˭ p8a] T(07;z|`V>_ l{*|g0 Jh.pmV'J<.jSݮ, ֫Oݖm]sІ) *{qv$]AW =IސhE<%2`"JEw0!M6}`eR֜T VVj-}/mZ *sXAy%3y.9-D| /foýTsQO'm+\ ](fbT֪X!\3mh3'Nq#OT*RRkP3II挍w %VȰb KnuM=\~fEGzo[BW#qC!:q-4T49@"x&jfPӲZHZnCm!DR."=QĴqISЗQ:bۀQ & n-CrJVI(euO` !wES'Q(j.ylq%zo-|8cESuʾF>Os*I k`4)B+(*d@Ln9.R{[e2 "EvTNn)! "ni7) 6NӁQ>gJfw}0KO M$Ukq@|)u %Z\-c˰IR+(K@(`wOytßfCH6  w EbW˾)/pג;^d9ߜE'^3`-=OI'p#'~C ZL9<:1Bۼ:}gG ʮy0 Fڨn-: m'ʴZיV#Y2c^z38ɓFCcPe$!aW^Eoe #TY!D"O0g@r{1ی6x+e':%J6J5y Kon+h-J ܿH`|x3EA噯@L·PS̖8 ޘMHp a O ;DpMDqDh꣌uFpdOL.-.)}P׈}u!|odkYU-=tBb\-_{JkdeeEfd݀kc?¥`kjj .vqKF|WM.Qm3@Щ]i;'yat=w\2̬j&kiC;Ag:>vvG@ti92dv~~k\oHa'!0v ptw]" _BNJD_[$KC|8@BhMiT&Y0 n$¸O`h7 "_M{r)/p abU"50MEjw.'ܟ+]>M!;ee|QB,V)Cj`~z_JJq9j=]{ Xޡ[tpT{" W.!Z2D%Cs ?YTNhdpT:G?GTbTJk @Μ*Og S{FīT~$ǰt6{9f;})[ãjIY@`z1H #ayzX%Drf$(O-va* O@oवv*un!^)?Slk|jr ǔ: }ddjgRݱԱtRy ˋIAmP5Yx iӓt8M'0Uh Ge"AHb+>^ oŴ`7Jע6.%r4CxlK6̥б魙YJ0(x`TØ'8R`2fL(؆D]-A!5b|_w䞯Vh/|YOWh "wN&䆋l+ 9pA C%(g0WmmS33Kn!aHucDe<*k@Փ8fKR,XڸUb?jIWr.#TKySG!~(Ї*"]4<{ S50( CE5SZ>P{8P/N&i]'[]^SFyMA'fRwFxBzy=eiRCg*AlÊ4 *9z/ ' F|$ǒiՐ;P*z zu&"+VSu7LfM@ :G~_ fd*<5Hn)`as1p.j]; ,{$~gcAkuP┆L.Hһ03#^t:M݌邶SBrkΙq ٧~lusN: )-*F 9\K%ePX-$|/T%w1v|$k vmo.6mMU!VQ 4!+UnŁd*șy] Wk͹hu.-FG0eS3B y*{᱂x,}>L;bf֙!K& N{E4u`0q^7XNԳfnխJ LqWx2UǿYWMV|U-LQb_t1lImh%%(jFI#N6fղ Ⱥ=3 q#Nctl@7 } FƃDG&~;;sT&#ss9m`AՕh I#>^+.XkZ*CwTx^xXee¬%DxM@ Տ] ݟlEOgUƤ}=&!Dn峾#DM>Y(/}Krv6i$LuF˜NJ70Fs<}f(ebI/u}XR2&iPȾxTQ{SA|\Z*\y6SaOВP-nmؓ 9p!XQDλk% 1ErQ[׻ChҁBǯ>㡝]zfhXG-(v덒$tI-WX69$^D3Ť_뚿emc{1H] .1 nN)iNU"*MG6b[Ѱ{$ \W0~N–a\ a߼-qObgWdL`lP5 (]{]wUnbpTv:U-c3 I t" 77|3XJBK;YN8`STTN{}:;%Bd[N9Xr*5ًc0 { ~}bg돟ɖ6VYh vsA_ %TX]z #Β7ωSN!Ԋoy[/΂U<0']m$ႺC=wUl ,gcXz@ӬS$>H9+upY[[@cWpHkX ~mFmqA`*e2[L`- Zί~ =__m}$ <݆VT}ؒD]S)XA-M$EG4oY#D\hҽ@@D·AdM_uRNVWVVQH0C;g0O6YV4[4&^ bzjIQGɺzN|3>l3 [JWz(.LmZVdb_1c;`{ˌy'&'Qm$?[T@qY_|,L=rhqoL%%pwLɮpkwC5~8ԯB0!ej]笍eQ E8+0nɷE.+ !,2LܝU )j,M33r-T >mWl򯥁e#&KM"]l2A5:yձ ub}pbs݉nޤ v^M ; fJ `G<(9/ik)C~A||H[t`>N78pGWłR"ѹ}D2 7#yjGp: ЊdxDwp@b!O+1>g?ܳ"u6Rݸ`m{N'>tZ"* -֭ـΒԎrluU'[sFqL R<33ι2+ 0.?VC^XCpmgx5"$fEaXWilGq`XHBtbڳkuO?&"zgo? E- b]Z4hC MB^M SOG,J]70 fg} TG{aøĮg&4 G?y&W6,r>\ ,⬁"Dqqiy- J +w=o e(oYхACʏq& Wމ5-![`n)k<\J>$JSf\F>ɇ|QkHΘy=X\p,f 6(O6IvGM$R& b_a&VG;~$(Bi nNgͪA53Vyfx{cPdP2~*.S4!dqo̶O?ǖ:ױܰtV-t+bZ _ePj tE/@U&¶;Pk1L;@fUQo:j~D%/EO>4Hf'N߉; ˴}ḃ:N (E\!7D~V%=2BDs"nq5 \YQHz6OLsCE? Lw)D= ؁fp=,3૶EWUʈMNSqi*>eAjbqBz B= 8hmW/fz#c_s^%DٟP6ت?(9?KH #~Ǵ3 3(kT] azQb)ϙҷJ)/GfUcZé.{V)i2{-۴hʨ.?m 4)Cli)|Y&5e# /_F,X5ѲLK20o.On˝F]jk잪9]L` JaqcV>h|_&6"Og?wiѨ+,L]9qk¶(a\~Nd2ǝ70-7 vP r\ T.eSZ}jĩf$0> Yjy -O:!# *i1gI&c*ߥ$ZZvLNJ8} Zj]\2[Uhهij]>EL9{mѹ@Xwl[ԱۻK䱖#wĬhGi6MJ"X"tGܓPdy=So~X6bS!q: :q~?CB,z O] 6* ȫޛ{t1wt2EQu~Jeo0[P@}UD#5`@ Kv(_ v"Bx)n`g !]ul$0m}8?w\-gW.[vp:or/sQIXb&,D /eA KǪ'W T=ٖ 蜕#b̵nfޔx0LJo}4ü%L%<(cR0{la+p&Yc Z%RQ{:)ؓ/f~/gXѦ~b=c_)g ujA,\ eLĞb<Pz-*F@ʕ6|ջ jMhϰшl4OTm/:Cp]D|uJB+ЌFP H1w.Wɹm᪮,8 ӁkgsqAOHF9guNAHO"ZtɏU}d^!e^UJMgv"Ĥk9t{P%& Hb=3SYaűS wn_>y*΄Or_0+\8^(#Cn7tIv]dyj( _rkDh&mJM&ܸ!]$T$ ޳ehCm{fB69O*@uZP6l|ח @llE,P#)5fݛPJ\8v9ѶQu >q :(o8FjH.{ YoO4nѳ(I> ikf.D4cnKCiK$M`zF>g|Q?KD&pdK+˚ڂ 댘q"EĮAq<:h/1e)c,I#$$aN 52*">h5S$˨k]_PͻUU/Wg~Fze2 [ k(N!g@S_T]%8yW)tе1Bpzg ..3ocRtNBW3cSE Y?Cω@6ѮNAVg'<4X/X)BqR-=c}9g^n]j<Q4:ԚZ=uƳRƆ5\BFof_jDѓuxyVAjk)W(W`3(EU}o4L ;pZ\YCcԹm>X lMq1g.b^%`ua5бq9o `w#ts vͬݡK8Po\G'9r(~r,LLڪƓֆ;KuQ]=1{)ۚն)ԏNHkJ{c7EF X/^B/ uɓUtEaumR#Z]vj qB2':duA0ɓMueF(T`Hx=-pspPC^@i{LN+}Bx [ޙYg{P9st#;)UTJU\8LБWc>b**(Y3a]q4Rl"0g^k+]-'n\Z&G@k<EN<\ˣQr]Y?:b;XF+ nuE$>9=]v^!qZ"jiwCߗ5bM=HDӛ Se)R# g>iSʜ?Ӿ`(r4:xM7xqMW̯p+p$X6z gO]?};!w tTBi,gbĆ-8l:Bͤt{pPDZ/O5B{A uVh1 f8:~ceI+L@ˋ!ET&Į%͝x< t-':لmȜbi` 369h([ս`eМn#$`/.v9гw ADBI&-fNeBN7_"ɤaf,00M&S^AP= .?_ϟt]ZVc$\s MJ"1ߐKw€xgIAQ}w7 :y, xOk_m~Iη:ϷDǧ]k&Oڑ$LMAwK:4*ϥ[Z!)zLe)uq}Nhj#+*$d&M}]62E ɞ#;vF#Z-ڈ\+#&Je%Ϛ՗:j'})K@asR %`4\mm&ωLd]۝p[`,!%IY,#޴~ TvEhM9'79MaAÔzXQ[mGZD5ë봗4c:<si(7֔ҼITtfXn{#=? Q{3Cڷy9ӑU38higK-Eouu-> I*Y58ߩFtC*A* sM)F$woȢ ހ v\Vp[L>d:SH~BH>IHC˚<\kfi}VdSHWZiBQ ^c mO+h;rjO'aed[w{<]&Ri=ɝ`K 0yk-QexnIJ2R9qOQ=0ua{l0`ǹU0Hb_.~yc6ӝUFnЍ eBs23 YYr 'Bk褰W?DŽso-LT>*}䦻Z"JCJ*z۽]xۉ䷟5yOC>'xTRHpyQ$0R[D;~giN-_ܹ6r9Ȑ9ʩpi"BBfeF`0=aՊCJ :릝Elra+'jnϱ i!g]xcNpD? 8~Z1oQF9W5+ nOe=gGaյ%wRB4ժEl.aojSOUŒ-=l0W~K,(4|%3+L(Uw b_(aRÉ^|?`uu:=H\D)MIM{+'26 ޢcb5Hcmbٶca eE6, B&I#P1n&7k81'@Uhp)˻P9͑t82 Mnvi׸ٮߎ?C ]~XmHGëޗzJw8Tup*nYiR^bR0Z1cqg_},@֏g.ZUSA,%C0Sb?36F6?/d]flYa4I`~_Ӡ!:UN5)OR契eNa=Gڹ0qJL<?WFVI/Y">aq`J珞1A=axb*@O\f%jA`ƈOO12pSSORiW]i(|(8PCM+' 9#4N>녤`I]~s#DwySE7L]MC}Z]_}A# O|QO^!_< xt)ίH(M pŪ֤Y1fm@Qf x[DU,x f{hb \aȣH^{+ r[TrpOBNOqnJȾ*Z噚e'!'vel)ح+?i!;xB]nhO]X*Q,i7\KOރWexBе16 j*# `0Dt"б3E!՜,+#*0ZbUq[^.jE}PYCfX *kX[ A@lJrTVeo\?=aT!{hq`U3},4bV~0W͍oQi.d$dݙ0s',=Hmh`JZ9NXM|7l̻Sg *A`Fj] •Dw JiO("M`F> m?Z5%vזz$w{Dij&Z4T[-Ûc-zw].Vxu$$.1К@v1gyErAnr]psm$l^꘺lrs36:G?pQ?4MY*eGcbD7da 'P-;Uo 2( dd"H@ C&ݠMQ7\g0Zk6+feyƕ`yd6_f7U*h_Q#qʿ BmNnI ARk{S6Z_nz*P2N4+5ל󷵊<Xpw0w]BXqW2sSR,- (<U wڣ i~iKaei=4(F.I 8}"Qϴ+ [1~,A'TYr=BCuRqL4k9vi ~z=D-.>&ySky3`A^OԸ5O $Fm;c(FfbyYKกL_撍$W,@6AH,Do)QD#S!jD*f6P9d>x+:쌥PJ6CS {J3p52j+ ^WyЉˠ+@o8ViنrԀ:X).H`aT6y}*֡9bWeVHIcKk' 腕ajIaP# O69ﾕ`"]pvzE(<*(ΪjDU3r:j ^;*,\y C)07ּ(gviTF p7[1|X=/A/'}"+T4ȱh?Q:cu&qڲđ Ž.?]bR4R T1!ATP"ߐg,t'/{ &_,2M'՛% @@6k{vFvp?%9Ɨ%=`F=Xpjnz~K"kv/=h6빙PH>z~<`(1g00XԱh iԕ%UƩut)U.@&Bq1*3Dc/l.Z .:l~aFeu[JB v&1B`ql+}}M*i?ѿZg]j7 )HBV Jma؛BRiRH[txKG(5>6Z@/y%5ۓB'#ϺnfE#A] VNDFJg z>/3\'~{6:PVBӱtHvX5| c\P#Hq6_zES放Ixb:eBu9ZZaP=#bNЛA2:{u\lK[M*"^<: l2J~wmd o6cHd7BoTA_0 ؑtPpk{z-'CAlzM)oVg Z3#| 7y&s41gnJF+]~һN9/S~,x|Vg?hq;Õv71 g/jIz)a {VCu@ӨeE̖_gB^; +|x/&8M!xƺ^yRb.ٵ~H- lX9a>RF!=tM &HQvbTgcLmm6u伢yܒ4W\߃ZD38(ޣ1>}J+zWt1ϑ-3|;쬟yMeT#-( -E רHO!Ϧ({f4YZ>_`wa9ؚto&h@(>"Z7t %b"ЌTB;u8;D5?]c%lŦRꦛTI&7sP X]K4ϫMr5+z׊f%g#ث'SgTG`7YcVwV>._m"r M"MjYΞ,vjp{3NLq3Dp2Fc 3xOOsE Eē O|2<84/ U#2UZ]QX^ceP5,Yc]eѯM)Ƭ̘O=n Ϫ8H$F k. ouX%15UÕWk^.fa܇:tV $?0;CL˥Gy+fF"0|e61^!lua@Ǹ8MjGC+cQZm˺(ȽJorCĞܝ 'm8[?)L|νLwn"-˄M]+dvb ;ѩM+ɨn)OX4XrsToI;Y-pwD׎h0'L JSN;Z$Kٵb2Mwl{ M=/\а`#۲dOӢ] Z\z˲ey=<5;pV:B(.saQ)˓&f`˼L*]Yg'EE (dWFLΑF^y&*RfYu@x'k5JnP=>0-˲FzpgGFe"*uJGB엛, lE3^"@\Ff,= 90@;q>_6p@ȺDb҂/@ry|b߲@!pdg>ZЃ7%&ŃÉobIPHf2Ðb,+,yjz,⤧\XvAZ=qg2gSQRR~h?ns`Pەtʋ`岶"V! Ǭc" kZFH a<*ItCQ10lI:(-aDjӤx*w~*(w|7,1BM}ݓh"W؍k&tWB Q9~Y2_\p\=H0A"p<$&(׌Jn<,I+Z9(#qUe!C{-p<G 2 ?!B[-D~mwW *Onc[̉)ƇC&0eyam҃%6x8[Q#V?xtq7r.OV=NFΛD( A0#/ažr-ۼP}xWߊk._@Qyx!Sd6;̤֡8jN{9j_TJQeҶo@*7e< .8(ڳ,|ݿj}=v`U{Tl)ӵ F"-8a^QؚƫZG&`{m-M7MW d>Jwc!a, g׺6qQsEVC<:"5qLmyi47^.FN|Ouּ~}AK=1'5|f߈L\Fi5Y̲N9b}IWS+zk?>R즏n\,LPJs\헵@&7X R݋Njg'KBjSA]kGmvuqP!Y-xv.xjLd}91EY;K pm~gB,Cƾdw#yG~'<6 㪜ѳL?t<9Zz9sK |y hKŎ=˱. ME!9&{7 M_$e=|PTqTUaA Z$*GglkW o6rS@. :{槠1=$$PDaO/?^:NKlLšC?ط4];4nrs}ٿW6B):ER_W|v >me mMre#=Co([jE6G=L4` >-$P'>3:}fLPl);:V;TȀ ,}DAEK#ϕmaJq_!u-.%Hm{9qZ4) XX :Bn5`JPlo&.TD-lf,'!x?NKsG@%FSG ^2*^A]e&Jaahx4{#5wyGw7iTMܙHχ[Vwc k;b їn:{fʧPSDRlQynE@07x O]O)v9~ba&CnTa!@60wpɺ-veV:;bMRDUΈJJ.DP ]vx}Eˉ:I;'ꢿVZ \B1b̛;9'ɻHo䘐%KF EM%~U Ot!fg E `ֲؑ5Dp1iVnǕH0t Pv?HY]UC7tt1{ކVPB4g6,(,#_]dlAĚvKh>~j,\)BAvw8d}%P'<.γ?6>[[O8.Hx[Md;Ԁ*PkFl>p~(x &ÑRY~> ia3kMclt^pM } 7ғ%׭zmaY$zcAZ;Ik'D5 .q{y6CjZ`K.uR^> P_SV{Sŵ[mQ>rZX/lC;S:^{QEØ[Ĥ d.,[?~iCu8w9A2'ֳ (9g=HOxK&҇ªtepNOeh%v Cj%6foVu$[$"5)ZД04M2vWV\+_Wkv l{ J5zj6mCmP9YQp=UAbT'[;>IgY&6*ݏ+tf)U$ eV2w IVѰ=i>艟mgAIXЩ{GM¾g3(@՛gjk—lu5(M\av|o` ,r_Ɵ]mM ^+IBQ#Ur NN\Tib+]Ѻ@r삸wֿғA)O(uQo|+V=OH\h8(ްbJ{p XbbܞyyyIx3XO: 82uCyqKh:ߒ\zU>/SH}]抄GY郌1 f!R]5K>v4ɤPq`{cpp|n⮜ﶘ,?~Lw޺/6~G͡%_k w).31he1%YC1AO6j Y+5l~b.3&rtzVEuf1wT\%8)}zzVqQ~ +BJ/[>FL|(s&JٛϐU 7ei"4T+5k{Q``gU%X5dڿ}BF8>χGP}l)n/4X2{Z[ ֔uM-ob>  dCY ?>b9addf)GKY|x39+z5zMTB\拞&R**184H$Așwdx2@*_[wZ1f)z?vΘ=o܁A[+fQ I$KAq u2bt)ƤSlJy]^ןc*Zb":@2B#ϻ l x5%U^_k`+R컊)kH-Zi~J&~[L:](o?Xn,_RK}V Uy E(IE#@70Vܯ!J\hܸڌ.WW"DHUfRKåtKg}م e\~thʘJ(3_AIS`m4@|~\#wChw|΄b8D8bub>pC(P]᲏=GRl; M8ķvq-%fv2hU}*NX=&fj:$iGi^?@q;^zJ Y!AZ1c%R-nLbdOdҊ9<닲j l)Ώ$8ʁ꞉(HS@b?,oX?F#% Eri-/9ۻ"E T,얰7'KKr¢!KwZ~`y1 DPpT|K)#t)w3fvB?y\ޤ?k5wcbbQD}<^Pc()CY !1]G:d:NJҠZ`[\ Pi0ka4ttx-_ ٚM¯+p!}سQ2yͩ(g1ȒOo992+lL$$0@1P}"%1(EXȰ~^QC6qT,m\LcRu➱=XJXґhtIN Sܾ@UA:*-DJ!b5\ܷntiS7iϪ}UcrxX\!e3k\={a^TKw( QÍ?M_f)俧,W%m-B /o qȦ`p3Dׄx+_@b7Yލ /Y͛2vC*vl݄i&(M]yGN%Dĉf.1&p3^~#[mdaTY*5Pm`EFw -ό+P$3PJ 7)sLT K}:\1$x> ۩8.w3P >Em4az9&-]Oῤk٣GN8(?{e7C=8?MG9 U a NMPy iDg| xG^e]z"R? m.IG&zWlP"3Ўٞ^eϬ֡LVܦ[)'ٙ+-7reNmt5JB-ϣ}n*uϚylNTgm<6y4W:^FW`j}7: E+ 9T03"8^n+T/dAU[}^Hm@U+f+?sZALp8Ϛ! WGPu@Iv7/a9r!׾h3;aB+gNYM4\gs TZPam^̔bYHN ݿ%WPt&-yH7^6.68;"%srDkk*hZ)=7*a2X3BZd D\nYp@?>qE61|g~ VXოHrK#^A$Tn-V-Yi,aoE|'5G?;,E ,#E25G~$DI~:m?`D pno2"<0 tWt "7m'Ey~uUnTz\,}a 3:!ߍ1go " qn/@D$uqIF)7 ?&GݍaJaS@$-32nQU(4i6 In,o!~$խ?e-Tk갍^8\4TK=jkNp)fL#zb|/Ղw rrvfJkקFYld `ad1_={S_F\'yKEξza^{52|l>09~4*X$n~riq~?$ޚ[o:@Xf (rST[0|jn(f-=,14.^pDF)8`p2vפ,IjmYb}E'Be?' 2fUyk6v ud3 ѻL/ iAu+ ZraE4FNTɱ5 WE sZH~ص(e\\Exc@E 3 Qg`Yrg`Qվ(k2^NY;a Kk=\wf̏l4Z8[T ^ ݎWF&LAF$@"ūID_t*Yy nk?GpAmĶ/=ݜ!?HJ+Ghz͈4j3Ϡ-jrʥR?D'en",2RHySp`{\W~ Db&f~KdK0.~#Oo]%|&0Ӫ ޻?!u/r47ը Ήԥy+&>,Tr&n*)c?M&Uo`#ly3.IԌx=ÔAs:&j(ܝW? 3䖲z)ʲLőV_kߠF0y}l .x2Fsg(X/Y%$_] "EdMOE9ywWlM*y'} S%To(XXU*{OQKbf956ݼW=i>1swuQ:O`hI;S"y<5s+KhOln@RpKB|Ȥabw @ `VDcecTQ:c4'>:7:U&>u+b( #EG%N]ёU֦|) *3vy/jHݗua}|P10G*s=/# 9$E?RF.SLD3]NS** WƇyQBJh`vc֠qnY.ˀqhAICφ. )͆6Kyj0DU8eyPq[H C$ۤ.Jm9P7rɾ5cɻxMl\*){L9*3`Zh552̱H.z|[QQG&.d㭹V,^ oeƝCghC` m`<ܿټ/ʧeU3r2v(B__W0w=-´>&ZmZ.xQk.ɞWZ:v3r> R52n9tga8Jédnhf34skWc\_ xEL\ylU>ajγpRw"u=JF\^<<%~]Ķ "sj5tmZE>7|)BO%35@]չG%C3/"Nun]5T{Hy!>s:"9(ze 74r:' EDDskXҦ[D*,YCnc4J:m$`7g"u$!k:9-PXpVΐc}#;y y9?UekN!Ѡ9uX$ҹ /r!Ӑf1nly% REKP#灕Ve+2;34Lh=2#em2â'Lpds~D hx1Hp!)n3W`[~Mrj 4>Qxs(F%{hyA1N_[`13U/#+wWl>]yZ]SG??}< ys, Pb ? rčMY +>_&*W|ZHVe2N=β9`n,:aͪ&%܄Yo{cp)?[A4R0T">ҴvVu]SZJv^;w,`9>Y3W01 ZCU}2s2m" 6 } &H K7x [_ ^|Vz&vF@yxzQTԕSda?m˧nxwٔwtQ736;mܩ ^mK*%Eژ7@*qHKef؇k?Zuޟ6gƂ{Wq>nԼFsje.vUmerDE٧I@(:'tN[N3=A#]q'.wY]@<3 ){BOS"yO`(D|T=͒[@{'f AIi_ܙj`)}m]?q>ȠWEòi hYւތ@"YTTTO5@7ݳB=Q#.j6|ɵx$/B 5VjO2YfH'+v4<г̙f_#m~$guM<Ӡ<7GUl5}bov\}3[W >/d,1yF%=E ù5IX+'5H &BVWm mD 6"w` Ut^C_wfR,vFM+*%+a1?fOFnaD,v+ BSv7UX= ߾4]Ѕ.O<? A<՟HbРՕXCZ1*~&T! x'HiJ4}>~j:VkZ-_p4T0/2w*^0/=߭p>)7;$XB&%l1E# v7e E/)JHq~vPkM搰K`3cwCQ<=oEFMhd>V9ݎys'[֥&[|;-(,|3U Ņe*kǽ|+jG/[`nujF$k[*0}^;Pj4J47?ݷo}PuUPiUAa/=7sBZ Wzᦗ j$IPVZ%44 1?9?wsO1<):Aם^_@ritpgaZB@{qɽ HQ1FZhߛyOV) wVkG JTO<3ځ@";sɆ-3+vQgt濢 +> u38fj)-Ԣ[3pOX{|ڇ' *={]-6 anbk2l2Ju2ۜ,ڮ]&C[@`CnZ\=?Ay#ҭWN 2"nLǍzte`0"KCZ;q 1MwcBYC,W~&dÝ8x78uqm$ 옂$7Klƺ~t,8 ;8h#CI1!6 a>0W~$,I} &NSP DLCE-ѵFԀ_d+Þ;&\Mޡj|\nVS%ڡ !%$L(N HNsa=HЧU%'V;j_JLr7V53L51qIfs7EΞm3i i wZ;Iӵz#}ʧ ܅Y!.#( 8ծ+dUPQb$y{97<ֶMޟ`J0!&"ZC)EMm[esSSk)po ?!%jOR/pi7%'v`K2leWaXtuD1 ѻ43-f8$GtX;FNNr``w2Hj2`sºW @\z) -1,5eԿw2~L 귔}XĴ$G=s:]øh WsN  =M 0:S3а q +{!@ڙZh5Z< '{qp^E\oB@vxC#&$2e cJ< D$g'zLQZ%/\Xɓ^2f⵫"̷:ђ3e/p$s +߰&Lg [s=:O[\lօw/.HHJyΌۜvpn-, h0[6@@(ix@˱Vc6u .F>mJJeҭD<햝`ID'Ǔ={mPab7~n8n‰Ft`^lȂ>ihafQH`cDQ>E6)}.P_0w'HSOP3sbG|,)r0-:uhAejM>XnÏ=gxؙd*/orrZbc!E$Ldbb)3c22ʉvy87th\74Mphe;6w1$&끼P-㍗NlP⤶҆m9 n \0`]/jXQC |PP6~iZvh-!$s֓:;9%<a 3婅bnE#2zXp+2B84s8#Hcӈp 5i-by񏃣ȩ# ejI= V/'4.+coD'xf,G}Ku|L O tWzn(\`y&5>w[oNKS)OF&qXAY`!6令͉ 8J d } Ԏ\S&_Ҧ+Ab&-ѳۜ%+LSWWϞ8ڄyFtּ"G> yc/4*cQ!n XYjVchЊ#Pnq|[ڋF\H_X5XiթDc(XmD鑏Ӡ* ETIăgJY }s  7/FWYRYy&Am5(sbPukSRaq7B96$27H[@;s>2#-:+iOx@aGxB>v4!sCZLf_p!d &2vHcϵzum0zM̨J\gӗ)2:yk|<\i/<>~YtN XOaxLZCש6ifM%\mt8vK\yVҥUh.N+L;)_@Xи+Y0u n;⌮֛"I(и-i-reDt _[P Vq|% cn6z.TZpboG&?7񼥑)E1)U pMDpMSl倹Y,ՇymA-{2l1,KWm}vavB< am[͸JuGTp0lcd:#[՞/ʐ'&b!ă[ +X{Yqq{JDཀR[Wpܦ8mꋱ+dRk&א=B}H2EHRCpXڸ(Z ]|GYHʩJ7omL>#X|p8)¬$#h6b%bX5UGՁ|kI-(/{7Oq5!L*_!zI GY6kGYI;Xw=1ebd2?$Sk2wЗO[*vN݌y\l@Qk7 ? ІcϞd(g{\?s B[?*rⰜJfTSr攓X u3žp0ñH/* ]ʼFZ,-˷.]Zc%(=]A :_NbЎ-&Q"֌7~eЙqv඿=mjv,6e'2~v[[⃤ӹ\ e3ki&#ڜA⎕wؤ%4'#xFi䴠jN^\#n)d CVtD0pÝjr=dJ8FuN<]Y}5"M"HoĪX(%wH+HAo"o T.'xu2!'*x&y-h >O]mO~Y8T7dms*(ڔ::Br ʾ@HɠK5?:Q>|g;^s߈a.e$Ռ}lF4/K gjI~(mND03gM.8$iQþznR%` X̰NrkM9 Զu9;EaIq6WEg*0eED,l+ZjKH^-|~*^_ӱ)8H,?wx rd~v]nW] T.œYdL:"[N8f;9dAs}he-%&lW$_A i0jhd;o< Nnzkv¡\#U ' h@/:."K]+QEVr\i ! etbfE\f狵4[@] 2WV,l0l }gs0Tҽ)zpmX-fukhοĩqC$zjq|_Niā{&!)S>ѹr'|t9_sL'u l}K n;d &DPo%(ɒX&9Df \Vj  m%#FQq 7EoP]Q njc8Br+ˋqf=k~[/ vr OWtw̡T͐l=@<:_{~-SJXq %D.%&`lߌ%M7q7N4P2;WT1T}Ftd41EF2.$dTFSU{ '.S*VNA#1rQ\iv({hL72dMm_7/Ld&?Hr'$/ c}CKm]3ocMY!Vg:wCZ#"M@^1h8>a܍rId:7%σ ZuuJ-U#AwO=ql\rd^D&kw2 X'bPa(4xGMĮX(x %oRR1.Ecx;ND!Mָb=D#qDP3 xH%oiW[7>XՇG- |D &b$*@VkwR_ㄭCoG%iDbNjf~kR؜So^v|,%Y<ԏkn!,Qt0NN-5/Y-JkƢ ȩYok~<{QnL\0*ʤ!'y^b_lsgnF%2^ۂBmH"3'!}f"ƜR?x!s&-wy, ]M!y<z}ڌpStwOtRbέi{w2.ڏ ϫ;Bc _w=kF0Lh@ǥN2կքIG-0HaӗX4q ()V$1L5]QN톔DQA$յ5٪vR@ !{v=UݚH {AK%4y}iaK:FՕr0]$)b#Gae\l+۝TS~ޔZXodcZqdA2o*>(`^i(t &Q³ {p"O<=핥X'ަjpDpGG?LSs`T~"쭾,"\i0PV~5Z}P,Ń3ltJ<݈צ}C 觧.1M"p<桾[6OWjj1/Єj_* 3 sx^*e9Tƛ˓K4c8)-GBuD.J.ȁ9(nuWٰ+xX>_;#%1 Ru׃ϹKmd͜м9΁$=eg5n]2ɤU$ w]ur#~5 n0~;V&U|̀"R ;z!rrO ^6up+ܨar+42ҁ oKgeXUIGafz1f_CrW&60@ׇX6vnuh0EN5\#%Y "x[Hm):R{D^[h~6ޣۡ7 -I#}bDEqc}K[lIu]WƐ嶴&\rf*`f'7\:PUiܪS`;|J xS*W'OM<} =s9ҹ3/9˓g^~q̩ϼ>}j%BjYc+cWQ8 i 85ˡzǽ._!P/+5AUF?/AѩsA ݵ]i% Ρ6 HնCL#nHG<Z1 `Xc$Kxn'= L,gR\\,3j64E’EZ 9̆-9ԎGWp:Փ6t9SMhtz.\2#SqKP KTrY: srފq1ӫf:gZqQ1JyT_(v}e85)-u: =?1O]u'NGvL c[^ T-DMtV6b;)6HAr8c}4^+~]F/sIH&ko*(4t*U1IZUp܁{a,\v naxZb׉ɎTk0zK(e>% d,\%_ld0!|r+ 9z l綏*tiyzb4 Jjom0em!GOgUCuRZ@ȾXn-U`\д[RkdţYҬMWG + Y*7;>*q8.v(}ht54ֵc?b1ިwf:n3T/y"7Pιֈ9}g*'qMDӌX&+5sDSݞ MTqӏd%‡:EaN :y-VF.~zF$d՚Mm.$7a3-0/wgPNexaIkY-g8< QJPDߧPr!X0bV58*)۽dRPC@>]Y|cߺt)}k+c'jte6kcF'~#_%Ky&.^(BUOKMmwHMm]=$5"~۽dH{j{;[0?qp QMuǶ: dBţE'5/G߼z}Bn72 ]L^.Almx_w*T(U+q{t_q+ ҏ[d'LˢMZG{z(D ܵy[8x/2m \UlT`S`ܩPe[HzrQxyojSN!$mamz{Ao{MG~ִ^ח,X&v7H%7+-?vz6m:? L+I=>II~%'bhXŒ38¾^GẽCa]P, c dӑN@_;}fViY\(D+PGCPpDu eD KsKC{(?<΁07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!t-[7|Nػ+ЎXJMdP.%@ [a YZ