sssd-ipa-2.9.0-3.el8 >  Adp}U]<C2!䠞Be=e/SO`ҵ|[}Muʶ ǼcӋQHN)'200bGoRPpCGAQ}M2<)+4I,L@1N "]N8g@\\ ̀ڌ_g,nԃf :bosZһ$ꠒ͜4)~oNJm~^4&]h3=8tR͛M0Lk!<4i68 聗vPi䮮~8k;yR56m;H&t" DzX3FJb J C_-SquNJyGQ`0)*!p!5cTg[KO(vtoR 6(#| ֐x|36#i[#ɫ| ǧf¯ SQ5v9*yK}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ĉdp}U]B9w#8iLh<!ZBAF܎&0 ^\Y4U0]D`Y9h&[CH@=:D̬ZB,iaWTоksiz YHۆf:]Ǒg=E.V?qg ߿wwE±V% ' '@!qy&t,'tw *pD,y4Aa#G?PE膧{u GV-TKDX5QYe,ejyV`ˮ i+~sf,0rwͶma`-aGg`ۺC%Θcb{% 222e|F^u?S]n_*̼EY9h?.B?x{V|DYVxI3 Tr:`A$/ED,J&ނ/%75ٞɍ1D:1;Jj bPu^iC)¦p!J}U >PD?d   4 17?  ( D |  $j8GTGGLPU(d8l9:h =GHI@XXYd\]^bdefltu<vtwxyLIptCsssd-ipa2.9.03.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.do4aarch64-02.stream.rdu2.redhat.com CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxaarch64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd*( K"( (AAA큤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../../../../usr/libexec/sssd/selinux_child../../../../usr/lib64/sssd/libsss_ipa.sorootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.0-3.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(aarch-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.0-3.el82.9.0-3.el82.9.0-3.el83.0.4-14.6.0-14.0-15.2-14.17.5-0.el82.9.0-3.el82.9.0-3.el82.9.0-3.el8sssd1.10.0-8.beta24.14.3doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.0-3.el82.9.0-3.el8 .build-id00c6015e498bf7e6ddac1e4a2ba0843c301a80f42432bb4e25a2ef1d28d54eb4cd6304520ba63blibsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/00//usr/lib/.build-id/2b//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b2432bb4e25a2ef1d28d54eb4cd6304520ba63b, strippedsetuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=00c6015e498bf7e6ddac1e4a2ba0843c301a80f4, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)88PRRRRRRRR;RR R8R1RRRRR%R3RRR+R2RRRRR5R$R!RR R&R9R R RR#RR)R-R R,R:R RRud7} i'TНLn|sRb YWme|"*-muk;H鱿ox)# 判ڃ;'Ef}M\̐;$߮x "W$ χ[Kr g&-Bޜ◌ʕ~츈z(\ *8k7\, ~2lά`_iψAzPkNG )xw^nʷ6~gue_x_UXRn7e"#ZW6?KtMP2!;h!jmڕh=#.|'A!9[} 7z<'o$01A~>G/>$kUuvj3n8,<4tľ@)JrZ+)\*gJp\DxBEu4'"-805}6pA??pwb:.u"3=uq[*Ms6b_2MNJzƊ`Vj0RCi1aSluz?<pXĭ{ud%ij(a8j>?g#˿WiТrSQgA P 4/x0KmFG^SB[{Ԟ-HG$ `a!m]*ʟ h^7HlN&YJ{jDds67Dj]SU@Yy^-eb '_}PH4! 6KH'쯮L3h ǣѻ?f(]txUFj]baA'gHĴ`U޾f)FEV#d\]%x8a;iGnIw}K0r3t!تXC*p8LɔO%gluK[Eʻfoh.VRnFo|7L0ج.{m)˭y03.5E55:Ge!rL 9F:GCJY VRr@CPҋ E^q$J&{nQ5!&8@so1܅Յ=f"4{ҐVm]QPJo(p{7sI@HuUS&onDlTH9QbJ?.|<p92q8Aa^/XWL%/w|JlFUfG(7UNp"/ lc RNtHh}fp͸BK9fSajޙmK1,p7[BֶhB0A] lZJUyi%v/Imeaң~+'[g!WۭEsHMk\NHԨ[#DVH) ^.m=C=a$ #C6:RyjR¯m(WPrV=Nb_xS.?n{$RBN &{!)΍)8,odkъf~i^Y~[*%voWjUb*UnDZؠxYz^[o{ٟMzGJqpB5'LLﶔCny&vJS =uK+#@%bOql,&/b6 hN.oi+zU);ˋR2=!ܲWy]č]K >KSEt2f>^*M,ٝw\] Jx~Kʭp8Hg -my)I(!Ԥ*蕸moan A yVxC=D* "bI VP0{{CdL*_`Y2g:EAcZu<ȟmլa}y48vxz[Յ?JYCXN'( #,'{ $ҾXC K͌"SS~~ )B*;)?UDJִ\<"@,nc(~wr°]@sYKwZXpzNS7:t]g*(-& ]}0_Q 1`2Cl}h綈{R&3Ȝ=S9BuՁBNI?H5ow4}zRa|8&M8G'[9hԸ&B'< {\ZDvn-hM^i\0*&O9{Mڌk2^X:ǤXɭp]Y\#m޿ҹbI%:DwJXIT]_1ZSr "A݌Yg eN{;i*>~1%?iL~gxs/3֔Qeá]8ukJa Jrx(9}]"KMI7)ᱦ!]`'ƿtV;cPt/PSBbAKvV tz>T -J%Oo=٥`t"GG=3f.1;MVY]RF?/e8UT-& ˝MO'ժ2ir%m "Ԁ`z^P:pAbŨ*$NKgp*I(H9ӫO.@{bc^pۥQ/=S' e[qn479y5A])ТJ@^g9c(ҼER41DiHG&8M XN^%țJ侓km,uR zk܄/3(*o a(=5&twWz-icF" ެQ22ADGg+UU7j&ei՝6SsFn_naJd3stS#f8qc^@k%>RW ړ!,wqf>Eoʣgya"eظZᩬkXA46#&:`~M+Ɠ`/3PrW ef]&0 'J b=Q^qzO+ʴ(=Y4)C2'T¤(Ґ̰+^D(u,ڝ7QեrsC~P r;kI}ePvAنu Å6yrlXb;QhJ{_١ !<ZG{KP%J*KFk M)cLOL>;Ӕdzúhx ]$F&Ux| E41Z&o[0$/XVzE6Yqbvg$#+GXkb]ZtC!2Y _'܅;ү1⭇w胭-x>{iBp$W($n{G/EM-3m !g]&tQ @@oCJ39|:Ea k}TbMW\h ->XD~L3WKj#gU?yI#>Ue*i L \>SgLy)zٲ6[^=XPQD 7:!I>UَVq{rPы%"ہln+AJ/qÂ\~mt..͉#R3Q4luދ"B 5IH<''2hfOyOv@>޺7POOo $cw7|J8x }GeW[0p^V@c@{@!զ* a*̇IjBUUv㙱W 5j>Nbl ;U)Zׇ*#{u(P]:4;z"7D>=k[7-ƈoD߇V`x3TY\{dee;&~x\%jdueM7ĉ{OFZ#N 3c_*@p K&'b1u 8Qml'ٟbΰ~wn P0p3-.ވ更Ȩ\U.)7M}~*&H;;܏!&"zH%|,@mwɂ%|2YI4|*C_xWAp?|1N|D?.¼Whz2:_VS6YHEB;Ov&g??@q_3T+E {2Mu,b2m\z>eQ|YÙ'U'%vZXsTZHJz6\yiUi_Tp>Br+Pg#&mf;Rl#t\zv( 4C^ n>v38 _6zϬ:wN%UK B59;BW9ϕ1{* dtD۪5Lp\c:|pЖ䔀wdpYn\q:wx1Fzͺq Eނ&O-uA򎰱6P+?@Zuw/۽EZ60Ӎ OT%8ΠsԉD;|2Bva!w+Y{A9MC1ܷ0a8}i!1὞XTezΤ`;7V;?㊕#>L lP' Y}ܪ`j:@0gI41٥v!=|Cx~h`*S $+7f3U*ÙC` QNQ&+Ō%Y,'n_9ځ3\nf+̠á[Ձ}EjѸե9KJ cf8o?b U_s4{/Z 툃@3KCZRc,+KU;=F)ίxlնV #?@#79P^GHDHrT V7](z] 5$ʳjn.bw)xCCEUPKba:Fjfa{1u(egD}J;-!\z; j4Zp%! gWEwTOKjK+mآv[ S' hAKSi٧Dw21p,$9a 5hL[?JrƎסO .m%iϣZ;'s8G*oI4WXp#$%peF^jsޮ Փboc4e5͠j$OCiOcA?P-y-lݣG:$9Qk}Ma?!`0Lh 4N*N;o`YYՆ?~Z` NDz3TRS>TtMaQXc7" N 8(h[g|ayE-}DC#N1I.525 ׊ɺj3$cy{RNX00g?dDîLJ+^K\oxis(&< vsO\?t}z[1zh62T Srhyjh,u-bB VjOks6M8 &XtZNY, PqTSX.O_Yɤ5bՁEL(3Nx QHe/eSZA 諰. 5J(w 3Cr}Ҩ"cxQkKn =+xPrEl2ZncRMPEѷEYzo '^"YyghH O?jIN\q%1jBB`E@~#}X!"ppMnr@Mh<תS&Kgg 6.7_2`W'I8ap(6U ծ>zxf׾[c `C^h(:PY~q(I&vy҅txVV޺+3|<Ƀc L\3G!h)sot.9nOuZ#rf~-o~_<|=Ȝ2O^xZ'LDLj[}үSxVP5x_pY;Zirך`y.W{p9X`:?> ʏ=sVH՝/w\er}N-;= f+tkAc/,Zp&\R ڔWHgBuN*H#BƉ/LO9! ٮ,T ZGDͶ!kiwv-1?y[kpW׼柩L:҇_+/,R@umE4^ M$V'ڞ'd* Nн!Y̍n3džUb'Ԡiĭa^֞mpB6ЕRMPl0aRR0.Ӽ3.~tEO‰pDQ/( D.vq`-%{?@Q M)_Ml +S`51Ivł]sKUMx y7 tcZWa y+誣6ZOŒN^+;m5p_Ϊqj%r0vEc.}/Wv%S ~]A9+mP| _ Wx%Z1rH|]#gGRyEHQV5hr/b2`n;Z~ t|%B8D~ucCO\*_Jۘw3VQ>-`ѻdtǯG[` :f"'Wjzz4%gjνV^Y¨l q̭Tb'UAvn/S6U~᷼vL|$HNәך'¾cV_d(0٘M Zy9:rۙՐK!+#0>xMռNGuF?|=?ȪHB}d=ށ?Eq 9n/ QZz \(äLd3țI626*mP^j|v:jT~iwIph^S|x"ΟSygWȄ1 sq=9q-0INDg.ߜiJؽhٍ\]|ss`!k ýi:=w9Pp䲅^-rTmJǶPܻ0ͯMS+򽇋&*. rNTYơغoܹBpc O|QD.ȧoX m; NA(($5ڡ'GM &hK>kbP,Pi VrK|;2bMS J+ _+O qUԡ+VLlUZ9}U|o .Ɨq:RV6byT t@O<0ɲ4#:бYùT,:殨St x2$tJ!Zr^WLޑ5-Zoiֆ+̣UOUW/=5ium+}? ^l /ufG}2ޅXV)BNQ}l8$mo4b.T .A%yCVxTּ^a5nKaqc˽l%pVQ (Cݫ*RVc*zsG}u7ZzwDP08xvz|7eϽvKz|?Y;g@5dž `ĸٴna܆t? ws^ˉ?_T²%`pa$)0xևAp>C3y^.^_ar뺧`?q"$}.bB?c?7 TieA!8ï E6Ad &c1M6j _JTPDą5"D>\FҘ9-y͘22`Ey,tS€PNءplKYkv۳8f*C!ľ9_DYce:?3^<4ب(OM[sBM3߆-ݕd1.EtݗDqÕaϣ^[Ew5+qv?T17k. n3 [&LJd6q[׼sLwڿ-[LVI(W!{YK]xGco?P:7fMA7E$E;~z1Y_wUQU1nך Y1\EpG›F(fESӟZl1 QBDp{fcKP  4[i %aTrO9P[ۦh6]'N%k@Hsʎt uDUlH&4 NI3'I)?s/ҔN>f{I(?؅fRjV}wHl(RM@ R*]a xLMtJ.؀; &7K=;?T1 '괞ąX1ttQGѳ/u@3+&n3WHC lD]yppB}Aq 6 Wݣ־3bCƒi8ɗiY&1j%ImhF'P`tuJz7=O!^!b_-{ cQ Nk?lFFx ۖҨ`jP|NձL D{>"18ssw: UgETeQCql $3e|>V;(׏_W]T WԶy}1(rU_]B-%ӉQ͠Fkk(8D}r&ePxH4!E"m'DĝFAKyFt%z&KQf6Z|@Оq%Wݷs'lr?\ E­f0z4IYUQG1gPѩh:8 ->׌wgh7&`Es=lsn+!Y.<xltfJ-Y+ b8J ydh[ݕ%@$SOċu`\M&a/DYA_Yj_`>8J/Z'aIp|k[MAz\r *P4FJFrȊWakhsI'+p6NArmЍLIپ~`\MxG~hy@JXk12d:m dퟶ1TMW:0OrF4"GGΖ<)qDԠ4Xǩ_{x-B/aA/T#aR=uyT%Li*UPce=V|q 4K> $F6*"l9'#3Y1R^CvFC,籙:Z-^p UL>`Wa6l#$c xKͼ?mgQ1K>F>*CX%eH~t"GhFp-%;*?@*)/ K2 f-SxJ.#ypAaF c|S'jv46cM1 sL#diaUªp Oӭ!wxkp~1sgȂk(ylTuΏB[l=2V 6)O(k~m;T|)6 nE1W æz~_scW-) Ȉmz 4irlײLyrxb,LgR;wz oW]Ș]3Zf-̼v@=8 >n.*\K"D@ O%jzEqfJ`}) c(&t4󠦽}heҙ͖ :}ԸmnN DO6FFώ#UsP>.8;j`B]CB..'zmAtGS;kdpL uQwj##F^l%= Âbq)(AɃ?D|'!iTHҡ2Cا@hϷv =:ۊX\ubB𕟟&܃2u0)E*?r1dS$GVdpV,/Ď!Jۡ1E1ɎĖfhWVba!80np6Or9j(|bMcIgbu\< 7x&g6 cEʙz4^&ZRBke鞅~+_?p8UO+Riب0C1he.']yvHrqռ9F%D)u'Gu[-M-@$FϹTЖgԵs`+ l|W3X5!ҖC8`4q/tSz9vP_f 㒬#TZ$6DORxU(vZhkLuӧqG^pZ$yz']4@Uy:vW7٧>J0lT$0N&gv)W $?6}'w<"uisJ'#UNO3Nb]6̠;=<ժI0ge/RVUOe3HV7dupA( ScYd9vGXgn(F, 0Ď߾['q~Lf*T6Al/؂NdVGL@~FNC;񅫯#qBvK[x|ڍ@,NvܹLɵc-EA@a[B<YtN {Ço3 U;M?"Gnɷ_ĚDH Ȳ=?6;H]~ 2{}-6YTm dh ;/T-_Ow ,.[]XĚRԂY" $LɱXs'5߁U۪ɠ=NKm)^WGS?_қQ Wrb)<~DrA\Ha7kiP!zok]>b=EȽ _&xh!w:xŽ}p%`Y7dm8߽{FBMG==AMP >NN,SeX;Ļ{Y[ 4i',Ǯ(~o˂`y6b2ܢSLF 75d-6Mމy% K.DJr98ۙu]1r&4kRS2=w;v4+QP}v.4RY=hܫ;&]䥿aǑ[)z~I hhirV|i03>1H|e.=$\~6ڙwQ@Ypl:ߟe"5]*wِũ.y~~.3t*yJg b=v)(qt*1 9XOS\FrTxZH,cP+hf(M|J#H`?}kLHuA&ؚK{UOswЩ"-`ݾDNqxYݸdcMں;[NG$)1ݢs.fgn5GZzBl $#\*2 Yb*xVY]s]> 7g=F ޼*r&!@Qg8= ->(no]Q2 "fV >ûs|cG*1klssրwCv"mW]')V57! ń/[^c :q\J@4q.B%5@\xZ"œ=, L)gnK%ׇ Ȁ TpnLIm[Peی 뒁W64R)mQ)ȊZ'ĕO?hsbitKQՀX WN+Ćl7y*{68L=:TBPu"uH77gDZf9&{ѲgǽYWr$y.v_x/yf^k(IΑp9~laA][ ƘK$:YҀ7DR2"A0SpP0B u85 ʒұ7%Wl4҇6pQ̮~3C_z5K _!9K_s)_,8/ߘTˆH#>4D|+'@Ll{@| 9Us3b<5B) =[ Im4Ty'Oq wGp do%|Lg(k T8F*8VYdC5g)] v|>#lt| zz*$TKClwzֻ:+=*&E?IV\ԢJCp'ԛG͔=09P$86;yG}-tHIY*m#s!$M'bHiR4 RCw0vumqvӮ59܆K!{V }zVsOf) ?#9on+ϻc ,RDnP*NA/qٽ-fg.&j8x+?)f`/V@&o+ɂ2QR%|[E 'юZX 6mLIz0BnNNcz.g#Yڒ&]{$I3cfeWS>U匝P+ uԉ#:\0<-cx` 7-; YП Ġ%sܙx¿zX;K wR|< ɉ7"Mn\`ql8z9yQR$4ij+y|p{F=[GvJVhܒNMx <'8;R厍`vq!)H3$q^RYͧ9]YRKDsFy5J m"nvwAQ'XWaM U?zE@hv5bM?MKr'A3d@[8uwO%@5RA}O0Q Ȯe|xLZY ңxx! IG:)]E D%tؾc #i˙2/`3RUX%fX7TPyA}׽Ϣb5yfqt^CwT[ȕRqR,1ԧ oέx3X8r y^@h޽I;ͰY<; yQG |oJ#K 9 e:kK~[o@;#cf/:$H9q+,8D8Ηf9z:هS ) u/xόE"9 4L%5y<4M_ufEjPa(kJj~7Cћx4%H@L2$-x4"~Fجk!@϶$P84j)U|W5I(粬"dt_7ARQ|rpr.KvLyVHtsGWm$Q+Xz(@kTM $ZjZ u?L2ZAga %("DH`uan7gMC4ڐuagKЌ(D'߀ jH:1n, <#@~U%~f0+@Ky)ay/I ܨ^F|r }I^]feߴg†"\2p]Q%Ά@ ʩegdޮvhJ{ FϋC{ *0)qX[BmAGm,nvwm[baw,^j,ct.0S rGN8#+ Q{?Ї=$j7ϣ+h ?D#Y9p"y9BgU3(Pa > |Xoj4YuUap@d+w/`á4Nr=^pL4\dB0@ t)`i6=dlb '5۷͛,̪۬\17V\.iȖb6w slõS # ]<,ʫ͓ ~Zu^/_gNWтXIX!w*!h|dvOrYY]THpk 電R_͊aԹP^j<0')$Cq%<@謋%jTGۿ_vk3Q2[Ȕ mE>bu\:.$k6+r)ÏU0Bdq? ,HneYJ:MhAl0bFo~TCp,q)MfQSA9t^Lw',/4+Џ},Z뙘m;te+}Z2Xr xmQ[7#թXM?b;-I$d.n`X.$l]i묶bD/$ pc?7Sv83`#|*7MZB3F~#9}/Bi,EA'OQej}gݯgO$X ^:7jZ>A[9೯ۿSC XɅvNse%xq;M)6NQo1*UΡu*VBC1]A$rlaqd dcX`L8; 0l(!()2W1Ωa [wGFgZ2hx_P2w %wciqO ngƞ7YX5- v:q,蘝.>dC8(j- h k?dEO 樈QGDU`Bm\jEιS!V꼳sS:%ފy $%]Op%1S}xGa@wᶔ5 ?"w']]]O]cs$C+??~\SZBX$Pz[58v;;,~_i}mѯT8Oهr|vA`{#G0W+Ɓ-JDV(ON}eyA5% ;L;VGz"ۈ6a LlN,/'[4kQ=)PZrM,N~оZMI o+p(xUNGipjs񖛃vkP=Kg|z4ө^a1påBNY&áw9vz)4Y?/5bH.;0LNCB;_O4 BOq8Cš")-(Al*NugwrVaBQ7{gD4PA6DMԲs`0%S^z L K-c"8uF{byK F{17JKL7VWj7BJ{up$'KbsRji>}WfYDt߷y2~9 5> OLs9xs7 (^gr~L]{s7UV~u7h6]4_?O"2bys8fcIyG>\/{4s=)}Dh)ih,0f3 +ls,A<N a}X[ޓ+&c=jlufWSJƠ ^Rn =++w^?^Ɏc\*`C:rQ!-]x~r/ Sa2[ >ZZ9D~sy wwt=ZOh^*OIss33|n]Govj];y%LĂ_NH{$*o!x@:k"-~0Rvu!R85U6vpާX\Iq j@O2$NL'>[ ITWFb|/2V۞mj,6J >z "xU<%iWGWE݁ʴk-9ado-"yFv_D7m౯2Mfqs-u+oϥh}sj_g#&l"+v,-uđB[H"%Z]Eh / +:šY0x:ï+./a7!Qc' 5ۂp[H P^Ћ0*C1 Z7)H%CغvW!-xID~=B`[U)t\У=4̣8ѼVf4@:(vNMJ28WMe8tA$gx|=eJyI<5ڵ$U S^ѡ lP p _bys6za=7g,K} $ 4CxI'ƥq."o{}A:]0Fpk]s N{ f*};[Mo`Sًw.baMY&dF7#sSneXlTh[np>jUe;]ePΏh.s6WH%vХH֯VB;^ǃlP][D-CCԕI mB(hՔ[-Up/[P2@ ?v/:$w4KhzϮ8qmֵ^QR0?arj&XCsqf=y]'z81+mʲڧwt r[%E~Яܓ1]m}gqٽ[u->JA\f .s4EiMX GpBJĥ.J)*Ꟈ,j{ $(G̩-F#**@ǓQ5懌'LD2dkqCfJ.W?D/߫{I \~~Jn::JU1u4 &*2IP6uù~:ldm.Yh#sv7_gy34n@hӺZKVv "8:waZ qE!Ax:ƻ x;DHY{/h+ nF̓o+ti,'\ Y & Z;5sݞSU,/ܕҊ+^%gL:_W kĀerlbzĵ@?)ŭ '.)f#ƕB*5*'8a<O+JadМbZ- )8MĨ:V 떚 Dw t2~ѿ WĹSȌY^W{a "4u{h-5*X-kopvxIRLahUg~>t i//CpkVD`v^B.0F?JZ~-ͽDzԻf~K8|ml.P ơh(>:wKwyz cdWCaCprnH;jeC*ْIq}BCx(-'=n5)gev;n6yX~DdlA՘75-)@/2taVmIMFs};Tr<$ue >A BtťX vq~bT /ܠMj},= ۗwh^|l/Hf榑ƛ]HLW ꆈKGS^8ңT/%U?4VkKXIȾ#$wwkE - Ӫ<|D|NVϱ$\c"njNiMs/h)q:#R%(oz& D k`ى/ QRCeTb|jE?=i{bjOt\nUi :=ZײCU~22CqihcU o((kŭШ`i2o^}%&l;Q)GK|ؚ*\3ɓsNx@MО+b { 'R}~f w8@ܙ'Wh`;=}$I>IFX#>fn|: f5%nZP`#-uy|S& :~?^Y90ѣkxZ!P^᳌QriEljkAS`u$rkra|Pjg񞕤j&WIcrMPDcEHNaD^xXsսT@2g) tdgz/:"6`|g%ͶddQ$;tyJ@?.E,?YQ*'|jVJK(i9/!H/"Kk%w mrAn e)o2;PaDhRajEȷ,;X39+i_ۚc vQ1D :`O<}]~d> [gwA,Cpƛ9t@3rk^ƕIm }P 0AڌkMC7͎;q%^NJ#x>70=m)n;%ɕ/uZƯ@ۢv/ŨzFpW(7p`OT}aM|4P#tr@Fy1T T|zkwW2+9 J ]zR߇$t3N x4c_EU SKgǾ%jׇfW1{|͝N|,So"ͤxǥVkshP`RyZLg"&1heR;CA 0g ʇsr5WN5TPQJ-P^1$Er,c߼jϴ`nt gL'b}ƪ܄yRo;4;jq?ɠ\鶎x/\opVCf T5ToԿɄL,T.^Y5ݝ2SEJ{k>J4UicMNnz;p(9Pt/wUFQg'%xʏr nT tQIssw(| ,?'V=bЮBh6ڭvA>F*nK߆:ɯUo 'N)Y]9۫_wͯێlcSG`I߼W54*6(%qMBmJHǴx\q4Pݹ IYìRe4z\bpguh2X3y('d=):?Oq|[VnH}2tX*y ҰK ci{ (-7<?aOq.^8XѫR<wD9lX) DBDd,xer_\H\>i!EjsrZ]9Ȟ7Ze%SN4뒤Ix/M~?ܙP9yI5C Bb#@)1,1 k]v90'jNߛa˲w'ܘR uO}^+8 Anpx`A7-x1]Nr"9rj^d}eeSp-a\~]] oF&Ư髣Ufdc0N)F@oyCH4"_4jx[Ŗ(>ZEZI*a*-3M57÷3Dy6΢FR@'G~T1 gnQY~=~?햴k "j'e 䣗nmNw0CaQlS$;u& Sx M m|`;<^p31+>n>IWHX9<]B>)fupw?ǝSc׬vӇ451]แN*#:e +ڄ`['՗g^C—8 5-)Sy@M(aH ]+-A+I2$r!b0sW &+!V@1d51sgC: LxEo9Ob x$i#Rł~Le T,4=o3Yz]Yԅ?_@'Y*l{='=b,ԚxlxZ4w$"K~w8 Z%Q+]MoFΌ(r&6Z,;iܓuĝ=*2#ܺ`  O SfI! ϗ.n+ BKKI'W _)AգHԚ5fCY:(GFr؉lh[|YtAϚF!QOQfeX !IZ"Ӵ!g_sA@tĚ;YԱk僚C͋K:е/dP{ tqFge:6HPVF q]:},D.-)6JH_[̼(:k ,OҞpT+I#rT[<ikp/G 9*(&2/hJ _guh`e7>`i8 #~`dٕn5g;.Goa*`f v9 v^^wSou"ҷEYi|:j8u7#Hp?i*Fy?+g!T\&@.%};. b#>_RW[W*feX{>G܊ꄍܕ6A.J쨃󼬪 lX\tkK ^Ktɹ tJtHHɵḽ-W( "VK.ډFw/1~nb.{7t`TXji*{O+(GN \ٞW衁I9T> 1^%!$H3bܹIj6k9e/A]b}`(/k%1Fyqsvd Fb(Wߙ@.E(_6 d} vLסre,3{?o(fҵ3 .ey 0ﱌ%M)`w's~7H9]Z &&ZhfOىwfNYȧmS[;5Ҝbsn|޾KZغh"xwr6Zp=3 vRyyz"8Pxu#e?3K \[ M^q cXܜͤt~bwwFFcɥaTae`K&1ʿ-aEc[if\t6 M֢Fr8r`QYih4q(u('oOUOi Tx7q( #YᬩӺ~ʟ-X'STNh*`M{lb?m))_]~|?gXהWtnu6eAzYwn>\Xw)`S{Bʏa=Xh2 ma?A5I@3KdO\ =wީF vݦgPcQ8(•m~/c|3+B+ioO$x}K9ѬI)2^د#ObM1JQrC)=ґ"YOLeUͷI mK$rଖ]y2j%L$G'=m-Y" 9K'Ϙ#RtX#|1QN>vD]BI-OS;0+ށk |)yNӦA֊LHxF߆:93Qw'~-n 4ˠD zʽ4Z`p ;lJlϮ6u`իD{$- 7l'~$">R ڱo(Q&UYzmoǑ#;b4S\;&",T:FO[#LC5,B"l9O1"%CrS1QaW>fo6ˣ(;62Dӿ:m 0l)YCp9;h>ޱ}L4BlD@(,uD_iK=+{СMKrI, \qPb x ?(l[0LWpM[~!ŕ@uO bHsHIF:{]5L#rʆK3*D4j^'Uzg W^tL[۪DZ獘Ɇ7??no4%,VgP>Vm1KN{e&)8?86kjr;u2r?zSpvn9j5O?nyCo̳/2}P))>P؃ Q0켺imp±0GfR&i;"Yk+ ;ظc"k'9H'3KnoS2mOkpBQ/,> wT#_]ZeO:O#&:GˡۅlhK|tI8G2g6ȿ码"k _m}Ggڝ;ˀ1# D5de>~zҟ.Ϙސ[EMkc?gK\$t1;bI>V MT\Cl/dXFh\_H0yZCIe<ˊwKYlCg5iQCcv#6JLa/KԴPc1"Tlq2?B{m^B< G X|y#٧!k 7נW>0X$G=O ŅI o,b5FۻuCT29&(#0':m!.6Y's #*F\.GS4"ضVX߯+7|ݮA.KhKLHJI_KW`%(ڤ3%]kӀ{ &#,C |%bX7Ϝ T 6iVE~9i!ɻEV1B\\s|I+.>s‹UtQ{Kd$g ~g 'PZkrt? WR/ ?>d5y݂#F~k[y#W-'Ԡ^DýJ.6bi#Vj+M!"OUk5J5I &YPY3¿l5/SB@h8.jꃅK6U9/ Y-frgV{_TW۷MiIWFO_k <TqɟeB`j vcn%3(C/;xW n&5ۘgcR-AJHJb guNgcC (UciYxS h WdlUsZmQ)^ȧi:eť_6mNĸ¥?X/&KzU<}$*CPy24T{՚IR[Dp!N)w *OZyqR斠\.Mҹ rlPp_p8 0\(ߌE>ZEUmy<~\ˇ>ovGZG\5{S_I]\@8V[- J5J@x,* q7*.E q}P S8--.19BM\4LFmyN Z0yS s[8BF@G""X$գ= æA|ݐr{lr/Y˶Fc]#>F>։_JجapYfWcG@SE3p@᥅ Qhe'Y{(RtmZݔyRN=ˆH1;᝾RR%xU,kEK= m)<?O^W=yAH{Rl HTmmy &- N &Κ~AUPIN @ w{QnL]aѶy<*anbIŝt}:Vrw3&EWD̓E _)+uLv4[xZK#u%@٦*|يcɖXL{{grdG*d=HH4<:[#gROyi|dh/\YB]>oVܳJs)k6mp`BPyRmPӋSP6t\[Q͐&Bv`?G{bUxKRY u_D*NҒ'u_Ƶ? _A=b&ztsCs_oq rh]R+RqDž^"zA{Ly-{B27etG(}/ sr:Ղ}]&ΦW(lػU_HBFe{`:GW:\ؿady;-{, !)N>X }m.qJx5G/cGwTRQu])=c ; ٵyu@pVeT 6 k5xWJȔp-YVC[&GX3gȃbּ xQ5QCS?*x"v8-)ݧ'ڍrW<.ןêSȖ֎M*!(MyAklӴwޱváUXI? I %kWAU vzBZD8!>$R1 TgQ@0ʂT ,ϰ2&SaG,PE@sɺ Q2r^}DDê<_8hYP־iEV2WoS+^gd=!VU5ԟoN)~nKn5)zn־cMݻՑ$W8ύ}[fTP ߡLJ[Qa1+H i0um_PΚ`2in` ;,6ybC񕳟xE 4!Oci& EA+zf ۈwk:]3X ]$?Q5Q6DGۣ%쀈fzE}i. O>M}g,PI~5zG_.,R8",+&y&W0`-}U튮pfO2

vu/0k֥gHQ2@l{L *Z4Y4 &_؍S(7ҙ{gf\@g1 Qf:8"lnIW$cmNF厙[HqE>HxfV8AqG@H@oy`ThGj)s&0Bzw8"%Z*?<$0c6WPmYɁa2ŗÒɏf|G+CdʼNvg+P/H=EIlIkJYj>YP ʮDUeC|'x>.9zpꎅ}dm1x#H}|HeiWi>p2Fp\ﮎ2N^$,/2>ɤU|覺95G FXə)v:[P!ZtqD 4w;9K=PsCQM"O$J⤟jrڅwH`"`BNQ- >-P E!?BGy9>XjVZIt IL8zH.?%Y+YfS b0ؑ4,rհ}Yfb?p$z:<UX;ʋ]6Z<&tnKֽ|)n2p1̧$te|S\Ӽ0ɔPXGlbI4/~ݘ5C G$.I,{Czz(*Q-PJ)0qU4OܷQ<sN|Ƨ%H@xw Ciס )Ѩ:1ZMÙF0Oې\gH"c'ר9fL(D2›M9 Q斀AdWSshc,̻72U=Cƈq|& z.$F5K;aD6D$EPyڒ5 rco|H~.b#m&3vQV"+oz>?gx9yxK!i2޵Vma#>̲Q4k?3ďT~ZqIv(pgSz-<g ƿn|T`q;x`:7J"A;2'*H@Ҷ"c1?:I0@EOUsVfWʬBL|\B!&<ҢgU./veT=e֗te5!K:C+'Us%Q^w-8G$>wt'[y, O֧έrT*skgEm| ͇Mv򩸼fWG8@0awQ%iU5g@9ZЁm|˘{, ,RPeě)/4.%?[=՘\z }x~sJ(H_sd#b ]A5@Y1aڤo>1OO7/ r49;EW2SHZ:k'~fY kwjx#US]"a=&ncc%tY@zL_ТjDnPF֙-e;dbo8!IN뚻!5jtZl\Nv$2a ʡp9RXubꑲp-j)~ى`o&O76LIr*A¿tZܲ#urt'J \{W졭"ISD>Lb#t68GXr98-h4]]BD%%JLp( Z;UÃYg~!$f7 ul>#ιGp=ue% 8,§ɼJỷh,5h=,>lڀtY1esF2F]]%,-=d60CˑO$t#ӅEY0@943Cr`e6;߀\flB"AR+gY87>? \q=/H(u6}S 7Y"%Ij{<&7  OVJ`GX\ Xida "Y龳Sq]]oG?*qԓEx[5r4vt܊Bu:uXYw+ݓrDRwчroY4b.cz@ 4Dy{,m֤=(N%<7)Caw<f݆"gb~F%`o¼YBpNΑ5a0pJZ_dECIWG Wwֹ;^iѠI<+|هAe͜J0IJb咇G*pST/(mk\5a/els6`R:yQfߚ$wiމWgW/#=yگm@bnatyB4LS7Wjl#I׺7}wo> i⡹hHz36~U3Yꪗɰfpzn%.ذ0|̧m53i,u%ggE<ԎtĭqL(*u[2*t;a@–ț~4 P4Zĭi.T,(j+3[&BX]0+upr^k:H,ɔ Fpt ƽ:Ճ5$f?ԐUB] ƤG_Mjڜk7 1Yh"hBEB|YԮ5AAsk܂r!A},|ƀ ʮw -DY0uV.:E_3\Af 5)'Ln4ϾOQ_kB6um]u`P@dj%l1[l[w3dtYul>݂Y԰d]x`E 0]cW ^z Es_΂[ARJ}%-ciu?yd;?@QpD*BzOm bnVz 3j"Pb*gk$ʡlQW!W%f\~},?]>Ҽ e޽mXq0#5h}ϼm_svU%0”ڷ@2—؉@F6><=4bߜBXQXY^~'8"}ĪJ::% D"~gϸ9ܲ69Qf ïA6op;p$q61c0{Un P5ɒs0Xr5ԫ\ qjJ!m")qh Z/y-[\TTNw;_Mhr* *TR 0LM0b!ip@*UY,OU YJ6 q'm[][F xĸ'xbM1z} ]\;Yҁ61-Y I? 8heGQqJRޠO8=Q.0/M] `hDl/GZxWʊ(E6d8yR,{gp-X Cx׫]TŴrUIxP.4j3]TwոHDvtZ{jr) ^p*A_fW[f!P9+m J؈?P5k5H ![5=iZcrytBsm渕.dJܴE\}:A8یָoUrclF-Gt}S y}G! -D\sc>1Z׸[ú.d~1ams&WhMIӍez0>ҽOn͒ &BO #jpw(ҦizxZU<SJ;Qj͉91Ģ y2TGDh£M~7JRD;q8"sd0@CFM@F*՜ ϖ 2οLJ^s0{ I%;/a-+878GiUD  e6~ˁ<"<V7UI"`⼫6?pylb{jTM*3tr]A%gxϓ2]]E6\%4SX&o o j'u%m@O3|40#rԿ=>4>'[2ҧl6 v>Q7rrG*Rz#IrljIoRuLL5H*в"]p+Y7Kcs=2g[SmFW? }}]_d~5\tqL.fqthuӯvf.D dn{~K~.6`^pq) PBm8͐cR[eU1peT߲:崙.Mk ̄sTn1X>o~H8=b _?U~\@k2ABVZVS|$uZA'':ｊa_a0B46Yݯa'72gH(Dv~UIV,%%(5_ñS\tSÁYQ u8Hw88*ZαYz9nbeTg[uB?2$ol$`dW~^p:Ps~r41(>SǕiR'xL@ &=:ĠG0C@N @ PdE\5a' d\.] ?2y |J2S_bYE| ez6=bw,N5 01YT]e$Y8})''yPc4ƥ68{:KxэK(KNta쎨Pq12ǻ1vQJ_8]Is8X%Z}VIUl ?6JΎrcYZtc$4 OX^bGkف}Wq E9"r3!׍cSiQ-^ L >pO#*o?"qWS.sģŪj-ʽڗlPo(ƹFɮDa(hU(55,R4?p_E%XoD^:>|nv`Rn2Ρ3UFΨ`QjHxV]>_=粭➿<;>\A{E̘Xi9J}Ϟh#0hd)#]{lg w #n]z)Y-[Q mQaZw:Ͷ5Y }{=ÿc*yV82`ނ Bz@~n1[hЏߨM7>1xe42@[ [q*.o#Z l8baՐsm`dïtZME҄b[oËMwZX-fC2'x,m#K3ю߹ai/覚mLOt/ 8g+#*S3 ۭ%V4w=j^eZ QMi% &/w߱e0_~ޚp>bPCA_aPUC :3GC<*|ӆT2]J*tjڸ,~GDKRl>Ag. Z~0h p/ԅW3*u<:!:-Q7.skqXOXȕC'a=E+4CKn`ܫ˶ pvku.^Ջ?Υ1qp?P,. 6Zz~qf1“; "Z]`dke1qm)\r̼><"t-|4_ hީG;UfULT'Vf08C)cW@& yqI!XN3o.0,٢Y ;>LڏU`ȹB1B.$krEn6قES*%Lr*i|F`4e '9Ajm1>ߺi괽[p&WSX?vAZ.3voDGγDsuBbj<>@ޞL{4HR ޝdupUFaP:KzSH3s 7 u8)G[7kO=_UOM5]Æ .F |v+:|5G+XgqQg`{TU;pBRIRֱ#|νBUUoe ]hDDoZ8),/L tb-ǓcsiB1Fn=Jf4Fv`%o ٭ N˴`ϮxA-y &΂1pI"M$OWhmjTILv]4٠L#+z-]Gb_ XmU-ITyƅdfm#⏟G* uܓ]،#L )h,a;'w@ϵ{I[M~2:ؒě4$Էґ|;Om Gi%+w!zZ(|2 $ٜY/K׾h1_7ŭ\9{ymϥ⃉Y-W3y` SdR[a܉\O*4F 'D ,@+LN$'jPFڸ-`Ovd^ [j k1G#*mjb㦩~Ca_c5׶d72 OP\UV55 %Dn=<>t௎zIЭ]BnV5V`bxJ!(:$6ScB}Au7}:8E3ԠTse n緸m9.M1f7N9j(n3M&W4p9< '=>< FAݳ (*o W&!#A HYp1-_N "{"A<5O_h4K痀Ԅ0:xߝnTi9% Dר{hʀ H)ُ-9َ9ʰu39j讆3RR7L y\m;u|{`o.Uq}":1:Rk]UB6RCp'n(m췮 %6u 95A׭MJ{:] : čz#Ywr6Ox'7Ƌ5͹y尖O#Ȭ=-(3_V3c{З3&ۚHh R`sF{ݬJ\Cꃢ)D7I,^=Rt)^+v3.0gA|]K‰*Gu yqf+ɲ֍/+o1(ؘG2 ܓ|r8:7Ou&YjUsPFܺH}6ӈkY'`cVplq_a)Yiqi&PouJo$d2[@w@cGDV_JM[0.9V1KuVY&5ވ)H(rϪm`㖇P娽]{"Գo#Cqg.U08\ .f"2soH5t#6h.ݰ2߭ 3L+=Cʢb;7ii>E칄N\tSպ6#czvBRMܶ˷Y/+&MTU ;`ѫ܅ Ǵh"J2a]ⴲ`$,NjfSuIGSQGx,N6.0~lch-2"QKT+"~&HwQ*V>:,'2xݸb_yhgG/}e9KgN*bbSō L;xǙ+]`enL8, IP.8y< iwc +\^$}E[2 ,cZL<IMuUwE!F6$>.cOx}( 8`\pcRac¬}<:\~рI (jw l3tZU1"; h~o{ZS]ΘYU9:K4 Wa'l6E1b۷} UCLd&<#,R:DyESv@P^3aa7 ,gFw@ " |K}_Jh [d[fBIzG#r U>bEс `h-sX> +}N 8 v}MIux}Nݨ"NX3 +}< $+f#|>vgYU. A}Bq̗ 8xԅ>0*5d;hj`kF/',xTzWh{Tg֌0r 'r/co~N\fvZGz/I+e3q״|9YYտN߹|uHd)6HmA[Vf_tV6o8!ʟ.ZfIȄy_R̡\c.B)sid>z}D7 ]7kJ.\AE #@Ȫ2s/r?C-+R/]3*fx11vlu? VmcKn7RAw^3E!yY@Hr~@O~+kyD$t[>/m0x"0+Oe#% &3m#c.n͊ u`@- &aTvYpBGzUBC}td}2eZ]`}hO~By|G 7 7M-clH,cml&`_M@ a<| m;qA?֝$23imːT]3f4ҏ53R/ՑY'-} Q>˰@X;oTt{ǝXL[lCȫ5qw@)mzU!'^64<*6 YJav4⭘8ĬC,qKK:#ɝAiRgQJ~aO3Yzj͂B$ja\ֆ3.J!S__+QLnf﹟CϮGI$3whny()8 .w 3 fqrW-hgILDB\$"7SZzHS3'Oa $Dqgs2z|;-}S^FCmP%ڇ"xNj~rm/mM{WRlF5\~WEَ4]NxY|}8u:s8Uy]skWI%+|^f,yXɁ0\oxtW^!֗g# a%,ZT0́}k"猸*ɎxaV brVi^YMCڳ 9p4 /9>ԞzZ6?CB@ +.X:N*(3׉kd1# !:.r%sOO<;L,|frNk?<\An+㜼:~޲"I6=SfI{>JdĻV&~r˴8jwT1nml0_j\!Tڲ3Sc CJɏ[mr,2y]s "e>C_,SQjI _QoƳr태r *epX$d:eHgu !DĆ߄u/ pb ̫Tx褄xtՂ 7ɰ l`.%0z[Y*IУԃc0 Q|4d Ag[HWmKuPEʄ{>$cNDI>k}th'N)rݩ'^*T5?%e=a #5Zpw'wHE"=/ )Q1ؾ+Mx*Mw|BJˎdدW\dC^RH羽MN8m$c:ʞ ^!&h")H| 0E$SjUIPd/c7B r2Qm8PVh X`{:EE6PU%iAkEo]]V9\{-,o}Ҷ+V+x6?duN:Ok"QaH€ 7n[Wu8 0|ZO*1 p9>hyu2jS/Ů$!36?e[)*[}ȹEOݙ%g q}:[-~>|3MQ=˿4y )0F-FKkEK6A.y?ehVe7(LOc3ʕ-} XY%h)^~  wr+#1Dưy?79յ`/ /4_؛ hݸُ8]5!ھs s(IP$!T\8hx"r/ .iFC|[Ox v꣄>^8OAaʹGI_^,2`?UrEЃ4>_Dሹ[r&I>!{VZRJɩɊh̰qGq24zîT>+>VvDhkTB(+G:@עa oDLT sץ0@@K`5EAn]jY%`k][]ع?vkޒsXY7:n:j^1זƜ۹BA'^쁳6;^ IyW|ok%P$rN1}󎐬3qvMYzД5h(:w37] wAEs[U >FZH7N"|kc 9j_WcIdPWg {cBW37ưX ?0+kB@eVW$,tL҈7J/rdBܶqO}{3@˕D+YHP5HĂF @iGXpaq{E弓VL^>8=Aeg̀UZ7!h-z;Yu'K )C]q9v,K^Yo brGj§,$8͆XfOϜ-oOTXEύkxvPw!%fIV ژBкUnԚy_a^0[4`Lsh &{0&Pqzs[?GuXvGCL@LA{ɾê@OG4K>Q?AfԕӅȂ:nSڡ!ўb"u2`%&r]0Jc&H5lL7UoBKac >m! ƥ,y!OQҮ6J 1e첻պhC(?LuQ|D2mYA9l[ٚT he~Dٳ!,6?^}8Z]l9e%;/<>&Ƃf1^mV [φDh~}"n-m9+@ūHBK{w*=QdJ H@H6 D,)cT&Ha7\m7_}$Y$ :wP/!8Be<dK7js8Mw*?B̅Ro| 3!9@N|o3 Ur%3MP;(X2l1Gu8dq޸ڐmWC&<)})zw"4Mup|Yb59 x@_6C~ch5TU1<'%$zN*u w[ ZLCWm4l{ApϾ!6-KA7ؐ3!U x [KVy-Kj.OuˮyZELv3Ww\]3[X1FzITd(i$aZp0=dwm*@g\7mEQQ_5s,6?֮lϳP?iVjXbjxsAF(ɥB/e/R{kC˛濡r(c_AGL旭KTU% &戂\4RG~áppY 4\X-1@Lr3s³le$ս~%9l[/K˿]ΠHh"}"ϳ.r\([2"af9wZ"[K.K*6^Lb6ߍW!?*w}}TOGEУK ʏQ?e^c-vPe l*V<@'س`ŇS#),@ CN+іKNclyy}:TM&*bi~PE8ZSf>3h{]/d71İ b/6pJNl3'( s/%#p ;ʚiD}ÀbGrcK38XX%kC`="`Oi9d0'`+/wy/퐩|S:QfN5 zQ$tb>!qEn<7]TO>:y?#|ꬢ m2{$;#V CRyI wS&I9[[c5耶z@NOa6$&(} V(Y{Z>nӥᔂVblJƐ`u4Cm26u9"ej~N`7uRz+ba$#.N z,(dϓ9UcRF> :=Z/2 QwuA;ebDB?cyyQyIΩԒOO{-klT#ysxz@ͣغMi `iRNRT7ЦҚTfxL(2SȽmǾG *KCdUq`ݏsܸ}E^G^1 SeS ,GiVu!6cS:o5`m\ܬZؙ1qhɫzF 9 l&Q~`"T y~K呗հ^kN8 td627OqM<%UI QCPտ?5!cÜjM uT'ӇجIJr~0[a׋;Ӯ_O!6S+Ůܷ*plO'M<.(6 >d^;}bz>3*rb4yq9|];eN<˱f'IĊ0^=L8Ml6lխWJon *XZPp8Rò]GgM@(HHL$~]SuAS63z1`*!C[ۄj#k,b :A=bu3RR#_ 9yge}۸|u/מdvb$X1޳UtDdc?Sږ 6F϶q28F5,I1?!2#=%s9SUv\R:ӭqH zqڹHISW4[^xP!vy\ZT? ;*75rNknؑ(,UΗ6 Y Wx U̯Qп0aht閰@ƿGi˱V7I &IXIS{ڑ~ȧ^H<-'lr$}/+ِ3%ߚǏxTlLvuwL5[G>s{$3sfK ˢcN2lKN}9C!ʒS{yl*!| ՙG Q 죠O( 8,,#W-9Z%*qU SyimB˛|6oU!#1k/.B1/[qi.lK kd'@ Rڲ~D}^nM(L%SX9S@AѧR^퉗ZWv9դ[YbԶTV#]@%Hݕjm\Wq*Ԙ& D#)KhUebE PY Xݾ%n&4S,9[\wuw<nN߇kBBa~'KҠfv0DsҤL*/8# lݓ4Z6i"ڰV3#NR }uҺl=Wn:ho!sI'Ϛ[=#rhe-"2)K.Ec\ HL'MmH,>IdP&hmqt|=VY%o17O}̞`-kUvJa|RA ? 88mqb. t1'&᥀GhI]Wl^RSv%:ЋW(9w>-4K P@ ob;,:Ϛ=i~>fh/;d[m[hBIx! ճ;P`g4ܺ0x}!7mf^aڛdy rcԐ\مe5[87{J_qt7ՓN)TOE1J;7KS]\(Cpj3ޤKOAWlX2mbEڠTbגA//B}ӌI I'$-y~ nچ|e=Nd>؞lAb8ZJ=5cl\ٛW9aRgO;Wdͅjc4ҽq/>:!kzo^-*NzoW-;V)ŨrUZ-R7/l ƗkO͠n#O>. n4s+dݶuV7@(C2/{nx| x<` ߝ=݁/_[a(˯!!D'lq[ʡ$_Æza+WY= )gL}Z[=M+IRͰ:׳oKO_~) ' $-g1Kn}Euw4f j32#RϬmgqLx0HmGuA}Z &ϱE[ )79h"0VQ FX" XYn7pܦ@ƲmKU X<ܢGcapFY^QN[gf9yΔ[Ӟsq_Ȕ@RGjq$;C쉙er8"L]YL]ZNZt`=$ISyq1N#>oj-BKUaq1kJSE w3skElo ׈guXS49q{S3B~y)Z!hBܨ̖wɗrݿe狇VCjSm0`00KAϤ+#ؘN v? 1!ح${>(r}"4튔ОF:& /OԵ5#w#[tFKArSf$moNZbغnݩl!Ey 0tnC.UKHV^uYCW @KCd;}9.`?-Uj:*쇶k "!w]}Dt*~e4.ʪ:֦gHQ)p6SU}_s?x8Ϊw{[O'nmLp>enJxTEXg! SCB΃VoM)c ÑqWK޿{*HWwSdỤ *qէgd2ua#>4ЋlK=JHU[IE 'pQ)fQxY{pak D8 @[Gʋ-MЋdOIIOf;)Nx*ɛ$rn cO՚աBµ?!Qzh>Y Z03 ը&Unu~BۅVt'nz_`>郤4U߸>a&Bge$B)l_v)hI m,Un\[m'L˿D gªZޓ(p[ SKT3㆙0,4ǘy N5|kHqܡ Zg,GRgC|I,qV wK-|Xb,JZU\8" 0mu 棚 anck$330^ ,W V `<|!#~J}m4iXߨN1&|Pqj hQod۠!Pq;ߖubtqU!=jB͐ i94S$Gx/+.Yq\D'v<4D1&F'՜TԘlҾ`R:K j.QO&t1Vޠob*s+YQjP"0H<: 5 _p"ľuLN'S.F.۶doE5_9icR j Չ~J:g;I22sGޡȐ;8q=j_ђ5r賂5QUBNxFiW2} =tK>6M/***+{i$ s5fOBI1 ﯗdsR$TVgIdW'Æ>>tfE&!LeÐlEWҖBYf­g{)\a,/czkM>U2z$ΏÏYn.1SBV8w&MbѐynCQu_"hiw/1ejxO"]C xE]N7R|w} eszv})vy^0E4yܫ(f⊻RĊjo5rp-C+^¿(VʀNh6Ne %sׯv/y<z,]횿;)PqgfF'q*y8҅nKge+PR'`Kp#ntc<]҃sFHoU0W"Kx8ԿLȃrfeS ۂuGx죊n1$t+(´~ό%kzhִsaŸ1y]W:-rq--- *]]Jv|0k:@_Qf'? ~) ;/~ Ri# ;LbȦx:|Y+43'Y΄U,wǖ2gj[&x/ =~D~/-3D%@&˨f\8AZܝ9J *zx`Nr#c9S[E-# IIV+wxalcaeR?ʀph֞C1 ğ& ]>+uS0LWj۪|}x.ӄXڐ)f$3Yi׈9.Ü3,2&+ǰH&c-?g@<;ycЪvםD_-(1P{F{W}j2)\Bta8yb$35Z4{R)2j) /uhwqxbdI<Ȭӵw7 KH]j9r)Jo>])2Dɔ|X &p+.֌,ϝ˒x)ԕؑ<=S3FNAŻpbZXw]wĿ/N+!M$4SQq enۖ/6إ!zўBĮ Կ;jl ,;zaikޜsP@` ۛZflpzwch@<}=Bb\m(q?KͱOI^S1k[bHY悊g^637r?M^!_hx:rK\:sC+c4 ٞqS9UFh<^XLb7k+5;[ȹE؇5!Ԧ]4exd{7dE"mLk__|&%ddW)W){`^;W)/6z?؁EUO6;BӓF1 0ٲI~btܼ2?-CH-+; 9>L#ߗbv;NK;|ڿ)x(-1UDi`! 'r{e m;ZXoF5"́/.`#}8@ڼ XG^Qro_ A4R29p8ED7Ǹ[nGb`ȰYL6 $0ɏ)-l=B+;'|M|F+4z.2Q.CY72W;j+òL6j _O_W3\]Č%|PW L}DDpUhc_<;eP a\t9~dɯV5zdH2}٣.Oϴd&AȆ_1$ a/Eq!7M{o`n^OG5tp<_u޵(6Y)Cũx[*J?p Ι~!rCM!q Wl_gVMΫh$G="$iY#M'W~g֡ hCpX S VC Y6֢nUө'XQ0JR״I#  5ż8O] @JB"od]pvBQHS] +]*Ar_C0SK[5w[ @#JD݇RV6 `9D8dN)3n}󇝜!g3>ڠ&RҼ Wc-Àk-g8:z䍦abk erQjx! K`VD? '!Z,;(: '#l.jz~ӘW;C$[BRW4Z-!-:M8XA){Q*7` q¹Ydmw*cBpbv2|#I >j'f*d7h"bpu[L]XaVjQfvMW+BDWƞ}uARZ5 z/jfY=9ҝ:E~k:u`:͕7b3liN AņZCY,WU]rW-l\ 0z^v__H8NU(oROE@v \pgڔ(]yF ̱=*ѣ3׭! FP1A߳DoRHwiMujRHNJ|tR?Ŧ%2Da_2*(O OnsmTq6L5 / `*Br,Б DEd :_7M ߀GD38=JVe "<3ӒMQ9Mٹ w}vFMC~cT=86}t%R?7 y:,mdv~tKbGSt+TaC^[TdMn}{a6Ϳvz^ˣW%V~D?'u[rYWtHEq"\]/ :›Xqxq ^H$XJOL(żCWڊKeube5هw;]a#VazzɵT U9SR:U 7.ezWPݕ%z@@Xo1AH{zvJ]XJO>,ʉAM-ދ'aSzR3%9t}Lv¸{b$cK@6ИPOpF1ĠY#͌>Xtw<-*~@lk67f]yd^`LG+XiL"se"A@mJMF#,}{g;wJs[ O@KW)59*rZ才ЩćB,낁 az-uLg 2LA^#< mҷ7˽ A5ϰsHnpmvNJq.[]?wY__Fi5+2yxt:?}$]@Ο=HM=%+ܘ#ehr+ \0UeqwY1ƒ~O)943%OZN?Ű 7U1|ahqdEЮ]6_0oEqj{'}=!|E 8 @ E@L::ZLXeoX _,P:9;t ZdԔXD9&%|X`Ot]'̗Z 0]ժrߟ6"799dpq YeH](J0 I_ro􃍕"ead߿#Dh)|oe$ӠI/R.v|τD!7)Os6kI"B~0H4v".~1NԕIlRޢ*4~%/kBw8xN5TʋvkxxAڀYgP@]P4& a&r+`Ik͊nKjpm`ٚ/>]FVID{bq2 qdGvB;ǗCX~Ιmd?Bc] Gȕ:ķsAA >C~&D́FZI:W\ iB'?ŜSO:9QW\#obYY|v?=|/:IؐqEoW#%]%<Ͼ!\f9>ljP>R4bξ\e@p D=.陡ZKS3 0-TZ1UmkX+׭h٩p\yRjCd?d6P';i2=]4븑alZ7Hgx ;-1 wPl q=~g9ƧH"(ΰ,L$Z7z7_rnڢmSt3)^k|G(/[|I[M#L.̖obt  ${84)w[3j⊁W1|V@d\:Պxf#RiLHӸQ\Mrxhmh`'=^>P֡$ҐPR}?wc 5Fy `_GjD*9@. h?רv1|2:CH |}dYAF?㯕78#cQ>\xF]]Ϭs1G:\=s}kq @`hͯ_' #" `\ՑbH#LBl߀ɫ(qʠHܠ1K=H*vma8ʯz;DQs}n4 ^{KP'i!H'G^54 1w2lfIRud+l0Mҡ1}Ɣv0< z1Эmco'32iaGI{ͺi^/r!`GD_ gPW0|74Q!D)s%2ܭQ+h\R?wx%^ E+p;'bA $ŊNwJcCf{_ t'yon}6.q 3Y67 =fNIBX.&2E]'#EQ YZRTh#9ҮFxi]6ή>h'x[cXqa73e/&T\z"O/-a,YWknoFasdn<29/ Tk!PE!1OFXNKA d(>&/D<~ S}=>-wquR aMPWIïboYk3o)dҲN ̭.Op:7iI{dLb0~IV3]43%$:F[~Bt[]p,&=1 otPt1 5͠t32%Ș>zeJ!#)\ }G e3)]]= /b`?+L⻀ӪD6"Pê_y6AmbTdz׮ M<E^`S[a I*׿fU=ל=Jȴd~+ɈS [NM|7;yM$,/hc0/TU%kDsŬ 0#&`i#澨xke{'IGKn:oqV5bzAkfhiڈ-: #S5zթH1 &LNm(dI| yFޯ?[vggt4 Ou/ lʸA5Cyuï®atA"F;yoVhܰ'Xɋ:|l+j GF27NNcRZlGl#6fB]<;tAMGjvAF;̊apzč:z.3D/VaZѵFxBf_Q@TX ݃H]WsL+?>WR"|7;zP" ΅>QvQLiK)f0-j[*oyy+Q޼Qب$C7YQͪa͸!>_ 8Ĭn'DT kr'uEmXmױk&"\-ڿrdlvq|Q9JߔV&V4_5D~ouL 0Mv@Si1|U!̮#*R.q8t&7EChKp[@b%?ɨ3{z日46,=:-r!vؠX08vEx q xW8\t?<0 겫l㑪} y}}]uY -|D; Pb rnjEW3y"Uu}K;%{n!wl[QZA5׉ /,anz֒#j fq+ZU UXjP(2հ c)8[yA/""t$]sLy_(P8[,r W}ta'wԕQ,aarl_dJZMI;ńܸbǫGG1<"n/bef<}Wm4;# Go lP?CϗtSqU?jJ϶R5x>V9g,[G\ =/bCR.嬝G$i}<KUuclY+^ď x7D~*gnqTQU%gt8\,^֧Xӳ˟{sq:R?md3Ha8adJoExG*줖P'1/etG3$vb9[GͲ4 ~n=.e_*BYMUn4cKQIPQ+Y2#EERF5 $|Ы#p_^}*So]U]g?5x;$1_9 x)<)|qq(@[Tso]0v#lo5)4-y<j2(4駠jհuaWR}.>uUrUꞺ.2Q[!F=98.c!})yt Pm5q{SWûdHU7'dI=5J&뀷(kG*l,SHb>tP,nRRt^*xd{jma&@` fT7Ag  Cvc+ Q}CnP3W= U]ݍSǯ  \Da}G;U ir,ш+PXN }4jW˰*G}xXĿR1mrs`6*b$,<|z.yJOVk36V|ЛxL$iéy<@b[==2B ab xxO=6oK.Ƒa7ѼePLĥRLCшv Dŭ0o6I륹`xp*:r[=+b: Ex(0*2* *q،c g jp0 ԾjئlDgHVytpc螤įeHhk"E?J &xv;]<&s<ѤŐ5\nqaZK+´>{XʂJoEͪ}Ekd1(h n'P԰nn#]N qJADGkwnqZYʁ(B!;bݸ+2(߁=l`wWXBuCڽ)(j:b7R)) /D,I﫢[phd! % $KL⤿PrQ_Vq%YZ!<Bc, p&r!gd^i<!R  XN@Y%Q/RRv P[μX0&\wg^C-' ^Hv:%bN8^[\/bC 'nE -4EqppLMgÝhmJU,'lj|7CҵWFd$O\x@Fc_C%-EgdMzy7yb94YxT| R(14?ɰ$ QnusllcqLơ@%*{xs@:0/}/:k;/GtAnI3]΋ " Za ̪Vu;4aBUU ,;Q=Uz+ooݑ$|lbceRG5#q˽f658"4~]P񎊤6 5L l==:5Ho=# [K;DbC X$N]rw^X:>p,OgH!c넼 146ٜ@GBMIVuߩ r߄Y|C>Lyh@B_5G#:2I%OcGZ{yYh[̧M3e*׿jE'hLU.m/IvmߡMLʪYKs~v+o!OAm;Fζ [rOmEXNaoGuaq*Њ^PQpVωw;:ܻu|phHB(1k4h|Ϯzh&TgKU+BLCklh wy*qnTbӲR'ķs+w i_18j }pGnU<EPEF/-Vtjto|b̲NRS#^}S:pɑqsWtMRvẂ-f7Q͙1^ה?bPMvhP,C{~5q(| y;6snB=H/ ?Oaz(Xmsu\`xEJ͖n>v wmFqPB4Õʱerl4@c8sѻ;0u YPŇ (دfת>`ŚtWEZKEΝ"^ip}(J:W>ip7>=ڲd3V|b-/pt:U#nӨnyr@?pO RXZ<+<㋩Ut`}Wm zL7t]V5֏`e0ZS#֛Ux)`SG9q&!8kң~o]r ;ixgI"Pm*&b4輣LZ*\f[vx9ڹAH4Zl)zx~5䃥%280y{3RgϚ q¨ހ0{>Ĉ . 㴇sl{Ε1jI@HG-"NO5eiTg2$6j|e4NMֽ^!*|>$GQkPEOTYȝNq6Cv$cpn\6{:,/зsRչ@: $"T8֯94'C:NU&[>N*z;%09'b 9|, Fj[`|p 7[H_߷(Q*ջfȠ9jG,O^@g(U*"*S7-팓"gr_Eg_48oR5V{n◼ECr,,QY(:mtC.uՙ~a)[='Aq<olXLMN!S,aeTݐ$D~_hHhtN)# K_Bm}l+fS p=z*=`DZ"YY_~*ĭ(3WYc ngzK]e,'@]D^GC2l$iF΄Q=t)ۭ+$V[T $Jk0/Ɉ)>&k}j@2 ɡmMrW4 >ӈSV!$ (1ͤ{!  Kh7cSD4',Z?'m I))ns8r7WY{*clT2hd䤊Tb@Vn˨fjL%&}Nv$" -r0PňdJ( uGD5ԙHһ\#AAdf'ۮtx}V"8r[v4ePxQJ)3p'I O(elX'd~ob {S\xNȲj%8of)H(n'uxgqhuܭEhZrǺ?-$zBHҠs .P@spFz*Q+t dhG)?}-@Ccn%iT(>I!L[J;9KRnW)G>i#^+ѠD\x?N&{!SPL;4佭G\mW74|?\~8R:B !zoO:l fqSky0qF"}HLӟ[8O5שￌ1RXg\Zu0aEŃr^A1iAۣ[ VEVQQ怲yXUc]7_ZXw($eiJDͦVtojmj:9U35c1/[8,-6N1z/\(ck>VqQ@ yiQF6]46FFY;MNj -`W1wm#ם>"\Hn]nݵ2]6jK3a=#*w|PA?7hX@+2%{@ҫeqGcG;<ΕD:9c~+o!鳵vv-7˥fܷ26yd¿ øl /|ۗ|TWm>vArKz|-(%Oh7/zE,,͋  #(m i`]Jq Elg}9K'JHd^ @F :((xcuŢSã2Br[K#8;J$4:6+> 8PN6HEL~ocmL},ʑ`|xq9KvO2+#UV9G s0Aݍt4гHc h,;%8$֤؍D9د{^rQϷa:J&[_\ rl lC2e5\1G ~WG|,x 8bÞاkTy73i ;O\ANCƊ+[s/Wֈ:s_w=EYo/%곧ʂ7gwlk[`V*|YcG.U+b҇3Ncun R/ '!2E.Ls1= ɧ!A3" iKevCcOyvLo+3B*'Bh"#֣slܶd k\!vVnR]rs|vm-5@ۏ̶YhBIYU//QFo{G  h+=gA^wlD!B (n{+ÀroW墍DjY2eoƹ:+Gh&CK_7;)[]Ǻ v*t[&DM}}v!-"*Uy,fre+|"G{=Iԗ"6O5lv3T1AˮD+nDYe;$#.Л7 Cr {sGt4c󔇓VUcޗD )[c3Ʌ vh l1=,ERحp@qc ?2 O[d1ahK11o\KZ-$L.|!L74OmD(xZH)4ڛOE `B_g˘|cDli0oa:NB ;&G79>{xSUXa7LfqwmQ*xC7ng=>`x0Ɂx}_봖[Uh V퇒5[wg;x`#Dg4QOЙ~oԒ͆e;mq/[Cފ|dRw.D7INIwRr_f&`S[JtD9q\s"64z[F )8}9.T`^Z*=E0&mԧҧH6FPyvx xvin Y㦋izPuOu=1-RG?GF6L&?vGg*Jו^΁qLAx:wGY޴08T7(+PO$+kFV* JmX47zw:NVHT,6YȇyX"2Mb$cetqrisd91E5e@ X pGNT^M8*.d%w=W Q;3ʂnplϷ< -A5F"oVJԌ&,#,֮'ug5VgtV@V>l+V@T.j;ຢqtY&hNZ#[ԓ,+f,3H - b^A]A;;J=>blTR:?u脭ߊ%NE!UC/G53+>Z/N0!s| FE:JZR7v Z!XzeKZfz9[@AA$)3= Ԉ͗yY߁^Jop2ho0d 3L6 y[|3U,{ҟ377pF~s^H0@ >cs\jj&sE`>zez\y]T Np)ё `,'GL[/`gCoq;RFbDvn#M SI~+W8g['FLbr#_`PƜL΋oPO Y~~Otq1QeL$4Y(F)ff/nAʹЌ 4T i vRhZ%`Yf^baB ]PYR'aDz#Vqxno㮣[Xf7I7u&ԇR?8Қ".2 TQ2krv hk[g.^sݤZO H7w#w'j+R[M('$ ߧ;w4 "{ ;^6gc٧BÊP50 .G2R)ȘdM _FcUWXC>d6q~ YX^e|Lg۽3V!Ud*޵61{-]Zʮ|M3:F  qd>Rfd,U}wۼHI|/("u|d.pL'99ȿ6;/S1^ 7+~0>?n,pdH5`K4јVƹI5͓0ןB^̏Q9G ({be>b"s`;RU\uQ#q^SE$7হ7RlZ(q==2Jx;P숺=2Ru0aǬȸʪ,D~܂*2:ț2aa3|Ow0 Aςj,wz2{uwmO62=|EfDDS,1X.5Ifdf4@HZCjdK]zS^()R37NQDA8*^sjk1 2:u_rFͫ_f0=!` A?m=uZ)YW] UFd^ S0y=r3e[=Zl.Cy 㣥ҏYj1 KnF@md`E7}7޽ty$2 wm*UC9z>-"!`{,f|g[ 257aZkLLwAU]02ɩ;`Qv:{&#g[1fWsx]5nY+^k׍MN8) /hKKаIbi">/2V) \e}Ohr/\t=_8?M@8|pŰ+di }B&>q%feUWTRdU';֎[t"I~w9!+aQ[)I*N@ٟ02+XRŒR 5M(y|#)ی]lE*(D4DLg|-_(/XCљLXv+s 9>7N*GyAҭ%17",VQPah$~5bxx9gJ+N(]/H9PYg ZM{F6Ģ%r_)>dD(80эuxջkM;:@:,y nl;dnH+{kb+ԋNX_qJ-ې)7\Џ#vZOmiHZ ri Za6k{d%aQg`õ#Հbms LX+ Q.+ВP^CX ÇK=hţi8)AI(Okj} k9>6״R`PJ@u}'cRlOH7P$b %yR&cEB>zԾVgAaw^v*W%ReXPWBLcfwuTwuR.ȵM{_ f$+bMALu(3@Ba*<|qA7U]ILYPt#Fctvj pY̏ AJiLG!xV=;5j=qp~,E@ Uقq 3JrcgfPL %1RpPQ-iaۨu1N֎7 =TBVY_u~gMo(rH@E)Yghd¬qW>IrgFpHX TE@]kM pS [/m`Y` BV[3۪:USiUh,tG@kcS4 Q%" FI4b@!^۰|gf\ww$HXqJΰ67(#+(xllYyy 6qyݠ7q_@u>Hy .E}]aZ r F0(W<!ȫgLqH3z+7sc4|cQxlALG`4I2t_At5jQr± ϧ\3~YJVe]`psqt5 @OD֫y .UT(5!}+!y>6YJo6t!-rP9=׍O de&ԁ0zd+`Xg**nK}Ps Gi-NT?ŝ0CTQóZj_ʧ 6@=Z]o%g4dqb: d*Ҩ39ߔ+(;˟1RۑvQLݭ՘8oK :vGG7 -Pr5 A5Yvy_G5"4n(vVN`5]Pf#<њ0t֨ok"wxOp&n 8Vg"b=у/Q_:@l x̯{Ӧ5=WX[݌.=[R3.҆l}33+41+J8$.}*VܝCc+WS5̦gd+聡؏~_RxQ@nK¶-mq5Mvz"=WYEM,<5~up¡:B6lحuȡge 9PQi=d=qJvk4k|9YImN#Š{ӄܙKR$t I9?0 7l;:Sߝ Q!^Q~> 4^@I\1K@St3mkm+t ~ZYKG)dĴMra9{#dAO.40[7W =k_/%WәTf8db m)œSI(=ֱ_(?\,Ln&(8ݜs;B٥M`p2r,M|JDw0 Sչ^Bh Sʼn`찲](&SU sŇBj.fKDgL"  PguXW/+-Scsz;Rd 13&gDb /_ -c/,Rv]r\YXJo #\.Hj@ޗ)'*c>v}Ҍ<EڵBb…Cs @n'Ͷ_vOAXV+Ĭ29Y;'vXȭtܘݏ[ULybB !nY;I#:?G '"aX|F>&GSj&]hT;LvԒX. !8f#[iI>}j`5jfU$rvTC~ׯ/~CG> 264G7H͘OiH 4恫]{RӖ1sɶ4&?WFK2F^,4;ڧѱVqAb428%z5Rk<5/Rҋ<PRN2՞Yh2T~~shX ߥ1G.O?;:r)}e_D?H\wQ5IB­Iѷu(I 'bg'LZ{Tڭy&G蔟j}x5YTs߆mK1bZ\9JDdku/~ud}.ei' ѭ+EJ$f>2|Q łGd)HPYo`/Qt_a@)@+Y2C6l'6KKPcR4 بNn$}~|fy7rԸ5ڿ~|\9 k5.g8o3B/9 QaS,3[;X")bXT}eK;[y6П>, kPq%gH"($qE F !ot5#?X]1]] PR0̜OxbST)T-E"%ثghR߇J1'Nn bXFXGnUgɅ]}3HmĉFC2[ȼ # FZUOM+F:P60abVh _M "+@Mx|qLne˸n3xFbB+}AZ}Z]+dY+7šW>ۭHtR s4eZ{*B縉Z4%ɶ;[ʵ (cb)dp>i.K8>λͨ⨀{ ~g!f8.9^q&Cǐduf[u?HoFʶGIA %`.j/ )|?dN@FЊŔQׇqr%SƮgJ63$6 D^pw\ P2K4H@h&DuB~w[[f9X6(`>av KMFez4B,n]܇KTB.ݒivfT,{$Ʈ9y,2~G)v𸌺d왘9H}ƶuX0$yd`┈La<ږ*R/;QCbK]릞AquZ c{e_Y]_R59Wçyu#l$ Hz:Gy,>ׂfuPDzeÚ"$w ҭڶn=nȳEfӋm? Bb Ɗ}jn\ԥ׬Y `npZ6!xۄEH O&;ꪔn3Qf"D贔Ճ.[0}a" $ҧdalZO<5u8G) ÛUB7+؅JF~ڄU[Ѩp"NwjH-Hޡgʚ;{yq:@Ys'7XEٙ%fAf no,;v1dvrumtT)?pclq HڥIJB vnx@SwF?8=y3INqG`]P_?j `^NKCЭArjER~mu3fE3q!ǖ-3|yb |tb3! P{H|>{9t/.zU~ooL9*Frյ?ݑyd vW{P_^V~Yv݀fU e!h4JӸGXaFj{J~@Ps*h z%ϞW][ 7{5SHP|njĐv2A 0]E#o;dHy WV],D?tMyHa#ƅ/ w:2VIz$?6 Y_xBqգ/B*|ܰڢ.$P-[S oYZ@Tƶh1*{NJ!mI[MpTڏ}s-jxJ}ຨRLc(` IB=^u>qZ9a|iߌ6Q#z]^h81>B+:JGVme<'L4zvjcu1ix<1yGgOaI7lzp'nlRISǑ>촶ʰ4:GEFiԝh2Fn\fQvc&[t_ؒKMR/G)+m=a==U{l %v!r(d'F2 RSe C?!2F`Uq9kD;cCDVK Y*T/-@*x+r>Ǧe tR-N#ۋ4&*CWz-K*BiH|/mGOT\b˃WeꯪȠ0=^sڨs^ s*5AZ肹(`*5$z~T<ԝ\lRs2\ޜ =ԦkkQ @/bDX݊(H0,ʢ%+fO+TyV-R SeO ~]_t5R^cZٮ`veV!Wi0 mK -k _DNξ#VXs0Vω#8XZf8T7.2&AQlq`* :v%6TOfJ2eZM!}YC$GZ%mr![6]>svhDtX4:3 ˛tt$S2 7XTGױÑ[PgT\E@k9nb3tUb7TQ<#*2Ȩ bv{)ϒyĵ I$=Y+ s Z6o( UYМc7?h|z 8W'{k^ՑpBV Ny k7I#1}ܳQˑOg=kWMG&υDwOǯ>@ZF\ʵF] gm5}2ic&FCblG#_ޝhPLfTFukl|c\PDתy6w}1g^w?cy%VsgbS^&3ɶtcۑaOlz&5Xu:dK{)I=dQ'^zўߝ@3%#`y/Kr+çEB'._3aTx2,vQ}@$/i x˰_@B~Lf>"~.сc, E'\0RUd:>+GxbBMOy683B_(x$PcIi#$Y?O՗m˔0?y4ү s7 BTnCT_f49K@$w%jkR.X߷:z _Z)e}Vıa~҂iwiz=f1: F_ʹ 2{)a_ ?zwF۠R7A_;w{WfuC)7LrOQg֭|y3는#m\՚1eGrWf\՞t%]W9W *5oس#;Kr?J8t{$Wi1cFH>WjxK\`fZ:>a^=o'˪WGi<ö,>IfQn U0vruu{ e}OdZ;~]IG()b?㋤M:X . %8[fM# :H4u>VκMFߐ]&]d[<'%Ϙʩ VLw @Mr&-z=@1md4^U{4 Gޢn숲^A8/`&ٿui磂ֿh: 㝖R&TNVL>^5}\1bT48 (7sj}C̼f0Rq\2>#[ʡ;Uv6F h{,me,VQVj';fk#Q(#(Z5jO uԃg3j+se:sޱV]Fր'{ތM$:3e5DVU_H6i DԊI-pqo{Ie6I{x?;ϣ9`]Dhg+ Z qQ%2DͶR"#8q)/!v|+]2[&K>+`_+ںT>]2M%D OZDL1yeۖf 71#]G27YGa m1~,D`g?&84AgU#*]^U ]@_OaX$ gU!N`ր̳Ԋ7J[fIzmXFvgh}cH:XfaTDђw[ԻԲAdrOpzB5?߁eoE=lړ!PSDGiez9˕K3P~`C"H|% `ծރ [dۡMsZ*,LKz[0_Yъ}@` &-_ w;.zsT홵>u #_scCjړWhڈlgIG/֦]WVV^jPТ0\KKC|5`:`9V$0C8%PQab`\;*0DO:cݗ he }.yod 4B8LR$cr+2tN{<+,j%g,&O}fu\W%:b2z%iDcXBZsPVjX } H6ˆ =.yWcd-Rzg$ξlv%c{/b{-h?<场Cdf5?^D̤.sompC͛'@E^@5X<|畐*wbZ[b.K>.V_=}Fe)j3S> BGb8BgXjfu]N؃=91D\zA!WI21؛a+,N4/NQ:?Gh #@q$8"fT<ʷ-AES^)ia ?-ۃ<0u'7 =#GkQ<3M,5+љ&5sc$$սL?Q!B]ubF?=pkEWiڶeұM؎'P4T4rd7l^rED4R-1>@SEw1}/e V;rbDfSy`5jr5Mz G:;g3 iU>~f_92."\h&+!+>]l=['0$+FiIvnr]0eBɃ3'Qe#AߟF8pƜ|œcV9OPj^|? h&kS2-aMׯnMiJIVzG )D:8Eh^nM*V5 `%A}wsU F3Їw UժV SPh%: BԿǃDQ|$14 pj!|&IM+[B TdQ7/[1S4TpZCCmM"XXy>FC\5>9\_``k5J0S({L@9݄U7h-{XWyqTQjȱ̐a.?G㣫y#bX&I3.p٣j/1!j(}>6bN&!:L6+}@Wc@cG&$ qhôt9'n朑zyw}Q4]iEBLzB5r ӿ>dyGko#>ܓL啔pOami֯˳w1 zG Ѧ[Ŧֿ~;뺐+@ҧV.xp+hAgϙِ֞IkʾbncEu4Mv bb*ؒx o9$ J(8X@`!*>2%rwigEwviJ^Ԫ޾Ln"a3xVIFpއwo Q]j-FtO?tfVL2y.K⡒MH|I']^M?27fh14`PI Xȝp_RQЎ>{4%8AuC͸ϮiClyLǛTcg9?4H60S0QrDi`[8F //^aI\3FC&b9D ahg;`qp恷 ':: p6h)s'p 82tzp,{1kTB-8;{m}3/Qo=E7!= tMMcȊje-8ͨbeHAqruqSSGfUR`ߚL2~Ve/.*b t8i#Ti#cfe Е)K>+Pvm8^xb-g׉5(Gq8ϔy丒17z\G,5 5q4~7 x…M1VRWWr>}ڧ~rY,\^UIK( Lgi`uس?xԁ2 \꒸Fx%Vi}kղ\ X7K25#zHC+iO)0.)kur$36Ͱ$3WFn렝4 ne”vׅE;m; XUZ Y$ϥƖՌ,;\VO|f(:eh)4$LfWxHKN%3R6^NHXky*"gZ$A"+h~__BH&4Sf)^5C]V=m-޳ƅ'K*]Er'.Jp&a[̃Bf;R,$o:+^P~V>7ۙKLc ͸%fQ"Vp70:%g— rnr[J/[S9I2 ^L9s,9Mĉye]0V+'? 7 NVB4H Ӣp!>ry M'qw{n*#W3OzD!+u=.;D[gG.H>>d,mcBK t,+Rm- ބ\u qй⨈O DL:y;Uc]w&og)rIJM"uD%:X+ )p􆥅)DP󃅘e z>R:_F2ŠV׿`m~Ad ipZ(eOIc>ƿ]$~+.O$;w P=hr O&d>H,Dv[Zȧ9kU1.0,.#?͠ 3 Pȗ(Z=8#i…hN (yHWGEưʚMBWt7q~ ._; 7%)Ұ3p&Ծؠl!HKGPW.@po]1mD!p mIjA^t[\n*+.W %"U^53vZK\tm*tA3whR 0 RmDFC0 $MtpčtO\oGHoqe"bΨoB?3wī~G[9e87E"".w{PT)s|`_Ocq8^'Aܶ"{ ~x@q5|.>M'w]^n _;Ɔ kf|l ׫'| 2U,HG4}p?hU$jtrܼH;Wit0ՄO;KžœlzID .=chK3}"8=5ВOi0حxlS'K#0&ΆHzQqfk)Cb|+\4f*o7 S5{W="r7Q1'4ef‚JE q;8(*yy5޾ֶWVqۧ`+o{u="' HGTe~WX]> E;0h `Z=B dJ䟙P;T ,Tg:P\VlDA5\\'Bˑ3nccK3x]*U |HVj'3y)Isߥn]cpu}I>YSȋgTTEsT!s!^m|/Ӫ(ɽC #RjΩ(-]ӛ ӈ皥z,o14&۫HHj b| ;I\jrxa٧Aمu)l97lefgtU hO^g{Y3>o>ߤo7a;=*)h-e ^6uhm˵1ǘx\6*} :)7̡%0'}P X [VEa{ķw+$YMO%2uYN|S+4AnʽgOjCw 5 |pQSr^kӀpqwq̱?' }M'EH>jH [ƿyg((B =7`"@WɺH_ډudkF@Py\g~'l7y֏@Z(c5-dѺPhTm8՘3`NA%¹"D&~n"[n{*lO&;YjKwnj ~2KmƳ\4ϫб!V3+Ljk 灷La.HJr.C#|4ɖ,T5,%~-)c+j6k%4|G/GRIbaDVa \zhoU_ 3E kwa-헏gDHX !YZa::ApW=jm:3r(Tc5bJW~ A@_<_m05xky~V Ma~mVF6]&I"5 7f$-ҷo?v"8 ߠA ~;VfK "S'EJˎ86릻u97iѲ>'!gV8&}Ԉ؀<"`S#92(hNwu-eiIfRۀ ^yH7eMqT?OWJKD l 0,6akxpʚ[= u2;.$\nYP@8u-"@ݮ/#I ѩ N3_x t.SC"ϝ BN}QR͋4^etDcOC _{'ulEW")jǡROա Xov1R$:F|6;M1eW\2pۑpx2"(*Vҝa7qǕ\͠lOc gt^1hP3,juG"t֧1Y~hK!m k"j{O&+j@ ՔMm Jx7 R*y—>^=v,4}^AcSʢ<^eLFݼvP3nwY1 ""o xؘc|Đ.hn.2g7{/ F/Y*-v%K>Ϸq;xEDJW#*+@ˆ 0z_#t76G5C)ۆbVFdP蛴c|о`aSǓ(?DNm͚mKM>|&H=q6 BfQ |;\x٪?s b ] (Pfӧe%t/H7ŠHnɿU'Չm4c2M@4cb5ᆊ.;Q-6à&Gb4z v'F",O&~sv*EZ4oZKoxb!Zv o}lۮ @s $@SBe7e_"E@±H3\0%Ojii0tzw(i1AM# F~'myu/7ݴsh [ )T@֩G2~dît{޼[ru8RdnӒGgn[cvd{yg,ˆO1p(8+KP6~Rս(ɏC-mÝet~xewxhI8h=FV E9]^3a;Pe"d=?[nCZss&ZK#Çϕ/҇cQB(f<ڌ?B]6CݚgJHI"^WsȘ>s@Nj&7ZRBM!]1F#U*@Yvv֋e$%'M&bk [V4:p䓙дnؐP͸|AsgcEJ~տ6c$9;B8%\k=ѥϗGZA缨G.Z2屠I}YY6 8րJlojjh[^0Mʘs.5^\lmď/"Q&Q^$iJ$H`͎F*<9h$KޭτZ$Pя:3D|/UEf:ĬP}j4HΉK2*ĹE,WMդewe'ٿ1Rڻ[^8&.7!/gP&ɱw8y4~)Hکl~]f>%&=Mo ESLhϱ+&C]r=5AS^]sw}lMCN)3!FE&wIcn  |ʂ!,-r$/lfv@TB/`GzB:$8x>\4ޥR*]>Af* Fs|Z V5%TYNӸx3ZsH/_@/֏?T'CTSm(crU:5 =ۗĶΟH u4T7sc.G*Nlã1;9V!wX 9 }opꐘv I9*I.m?NC/s@> /zBaC[:)4^,֌?qD/bajbVt#79Hţ$ib3ӻD#.֥'2? hr)6 d[pu_Ie$n},~ӱ)6JUZH(%oyUZY]")7kcp |nYn1rF)̗ng^.ppj ,lbE>01e>6n[hMt$sx0`\z;7fWILAsTyl?OM-2=DyMQ8_dlrOmfke ,\*2 ەD ;, Qe`Ӷ圁Q4| YˆZѪ[a͉57Tn(rn@ߨEO 1nL08#%~-3& j eb,mә6|%pye]  t&X~M zIgo+gR4lHW`g4rC2Q=|~aiTߘ- I\2[EI^^V~o>F$pt-{0mg:70_J$~1ۮk2娃ӟNgNeaPbs7ς.Uoυп UNrf3r$ V5(Oꬉ4>wK=Λq[K9@A\ɥTwq2Ś5Z5D $hs Px) \k<>YivHΘP 3:lRwZsdy{YXl+~|7s}#+de.奸4[#Lb)f ؈y\/Nǘ"$խ+46e Tj"%xZtԓ0,YҲ 5Q ui h@)BBd\>dwVɳ. 5QG}f^YA!Mg͍ڕL>BBj2 ֹ7GN>Fr|&'rv6G+b 䋡xO-$%|tL%G$`[([%2˻{?Evׅ|7uo(+#CPcW+ӖpmhŅ'Io{V$$S0R4^ڌr;Þ7ɣX,}NiL\ϔrr|y+üoҒmF#M\Q11W}a19bXQq!䒶Ĉ5^G0o JU\6 61|]CF+ОB4grJY}pTiƵeCY[+"N|{Tsy)#-fu>XA|4Kr;?yr;~E4?t웼Bv&0 6<=;8 XX,dHoI;q͘2JO$L$&D0ƾ3RþN4+}ՂKNr#!n0S04yD4jK;_az<,c+:b"wXbb(ە-b_X|ŌP.InBF2~gm.|\3h1 l1kZ~X43ũڃġw?W6} ,ISf!EPd ؤFa/ud׵~gEw[7DZ6t+nn 4n P:9[1C="p[g1Y"~?澬?{XRI6L|h6he-OQMLrIM:Z?Zks/huέx%Ǔ:G.ŒſqX3Nn\19ˤE׌u*?MC T?ˌ$UU&W]' ~h4(pA:3Ve΁."Bvۡo\\eo/yi|ޢYLb2#!5Bc| <"[k]/xѥoz\J'l2p%iK4WrڂXr<$F(2AUwL^{e6i] '|? ͥ!%"k `:Hvϼw~\:`AYfJx*[!H<0%χ}, g %Q~ɈkPFa4sƪCWE/srp2c>U0kyjZ9dzc[+tf&)[*2/yt52c|kG m/MNO𰍽vj>sFesʗiԲ<aOZjtB7~3x rM}C7ڡ\b1ve3ojgw7uX6u>55z˦+RH 8 }'Pky\ޚ4{Gh2=ԧA_: 2a"Pd†B֢EߕRw󙮊.ߟՏPYV6+Z,$u[&j,)牑OvД. 2GQZh*Hm :{% “m%Նz!a ݰ1P`%8`$Dqd]}H,USAW@gbaizZuQz NT㾸>E3 $'^7=4@V#ղGaSRB31ul̏~ڲeR|Gh4KBKz|2B =[@H+6KQi.< :d"7l]/򁵗s\ľGY@M 3h@߲5#Z5f9ɖ|1ٱA:WadB/-ڀ nlRW8goZ$\ {Ɲ p#R 5OgW;t$Smm!IU n~U{BF{җ'>rV.Mf;n-CTp^@IL|/>!j?*y4&5yL/4~Ldٛ]M. *_w+T6@DWk&&宯';Kyk2tY]Cċ(Gl[1?Oa]] "ue:2P䪖,Ei&/DlX ;Vp@na_/ឍ0TEV&̊DD>?\I/ʌ%A> \iiL'x:㌼X~I(>4$*#vCM|- v+⦒ة"Ixd*wFx_+_h}0Z tnH|f ٛI y7UZd]1ci5[kIFyL-K y*T)TH*!F%Vl{"/SmʼKEd1 >Lq3{EZ$z6oYyP*f/ +6"]ʘt98pTj՛~ R)ThG &Gd:|@,-pv\e8ٷj;щ۸Y B480 ;L [tWZHN)+q }hrP X)~~F&}tBnS@K)W^zI F}-A ?\/f)"Cr%rPt>QJ1Nӌ Jq/Zn >a'<9Dif+8PvB Jf\g7G?Ģs!2?%򖔦b2xj(81l>4U^'i{9s\8-;hܷ?[7a[ *e`db|=iq'$Q!v!DfM}԰Wk )Y;4  +@{'J0y5"FDi%a q7vZsIĽa8o{I-ǪB鋭 m}|6RdȸŋCAjJṠzZfKj:HXi*x}+dyiNHgO&l~I? "6|4!p.'n ԥ u#lC@WR^G[XSSNftbt}`Xh.#'LOG?RLI(p,Dfe֌+Țo;Cz1NqBvrB]4}6i9i9D:G9<9vUi*#Eq.ے}|EH靃}VH}3t<G8Ɩ3͉9Bm"s=g,?P =hWU9ر Vsa;T"ъh9bzX/"iI@WK3L~uLK6k]t:F$^f-[{s84[d*TTm(W㐞`%hTv*B(4ik-p|> 6Ce);?`LD;mx|ɝ%?X3t VŘ\ 8HѮX4n5 cpBZeHv#<6T w?_x@~dd&|qߤn؄ۥ@~}ʧF!&BU yQ7l=`aC/UGmvcF5!.}+MoU֙<@93G(r<e֘Iڤ6BF\nr|"eiz#FzTE5oD򲱮bB #GWFY̧fWyTM2+M6ykIAY/q:[mɚU;&<]}S i;Bp㹔! >o~*CVP#UC/h*.DG6 󜃮#& @8Úr}gXON}Yu {)Z[Ź7cc jʍ-oEJ$x(JDz L/ƢJ!l~{A0&Z Avw|EdDr?-f#)|iAF(A[%Ѷ$lp 7$^"3LMmW?rǢA.T۩ w} TyB 9F 39ׄ䁦Ѥaj*Mѩcx[j* c"A=tb @Dj*c6T?URTm#P]cz?۲a6[% -@һ}|}O3@8`ʳA"84wBuN.a8',ueл=NpugMIL6F'.8PگHH%ICGqrdbKrrpCr%x IU@%謃2^YVOIk3g)T%VL t1=L`?Ѕxx%4x A`%lfIWR,))]*cTv!XVaTta,`UNsPqͫZQw|tVQ+w+ c8,•njy.xG²C3"u (@ Ճ!|ApS)˟KV L􄹉YM \nVh64}<Ʊ$T';&I$1U@ucpC"=ZoK.Vzw' [51sb K,dF:PmJ4 &7:nO@o@;a&[A*r`<`yDP񔗓xcZu6>GZy)x>PĜvbt~Z]Q' ߁tEPFŠ.Y[r)-Fa$$-vܵ_i2FxG?ɷ N GșɌEpC4.Azyy~Yg_ss%( Ԕx<5o'V逰{o ¨ʡ9 >ìG@y`ՂZ|%ana ag<ëdGɎxXR^SIYc~ q$Y]BۏXvpb$OrX"ʖ밧/fGve]3Gx%q|}*mVSÉԷټu1:oFyӨ\D|i+4tt`寓|JZ+]}|oT'4SVf܍$"  }91!%HryC]ےQb0+Ćlam<.hpjmlX-zg[EtMu^OdDc*?Znݾ.s||bNgCDk6w Yx\Qa>gpUxꅪN&b ʢmzOhWf?1ô̩Էö|r9 b>[\fq%E 6` 7~$Qq D̓7fSA@)RpY=CN]Ҕ0ـ*m\h9WsD VRtPyd.y,B 31鴩:э0|FE—(QęQMnzd Wl G,%K.UjGF=C:m%hѪ` ~SSy%9)3>?U3疳g+T^#󂫍'D@$ $,?m_޸ze 1FL\H qn9YG-h̖K_'n>zł^t:ލS]"8.>d0]{lFdT>1 bE9+^ÚLl7ѓz)CޛPj ՘dBݚS/OrFY/.פ0hOi*SO}U(S V^,-D. gVHrP#s%9 %:NE+Ex^~VΑo`3q eVM~'5|gӫ=Q,~4قפQvXH2t:K[B%yC5NXR}dxk97zVT.xeV~D둱`mIm[1Ni/F:ehލe_)_-kX4ѯ>yk ?8u^jwNY'H !]?0dhWCmW3pHŸz2D"}s  "HZzbPۡph3.mnƖc0R HӔZ3g^ぽ]^YFˤ6b}pSCvwf"/ djNZ8CRs&&P֐@]̃?j&xjY8{v9><:6W] 2/A~|qP憙m;;+gFxyָRESF'!'G*!FFF1ɳj4baB#hBN*m\X'~W0hRMԛc~pBfC%:o ,}X>B2PÏQQ(t14׊nKn L^ټ?$G=G?S>+>^SIYӵBR.9J *4R%QQ +IQ߳|Բz%}kF;GEڭd.1<EkTWL |Q>ʾB4xOE=qŸ Vc…0e|+ylhJ8%:?"Tإ@eDž+Jcu4~FFyrm\'"Iߓz698B"$e  15o`(h,J(z)}:Lxkf J2뒷fΒBo,B;YD֯Ȏ>&J=;K@;7|*!nyKE=SOO˥pe@wHMc'=r3ic؇)qmR%#fOs0N.v@#ɑc!3\йR&tհ)TnL7ͫ&ru.di_mӇ}R! wP{&bh$ybdiu#pBxZKR<-kz3mSƮ3;t!_!5+Kc"^8,mp>T&4 (MVu iuS~ŸHPQ gu⫞`̶n0DõL^>U8> iw zuO-1YZU4QD6 +2V#{(XtZ5=e>L&!lok|ͪɌ,>{[}emT 6YH'ͱm8o?OSsձٖρ47U{rcc.5J0|yCjb0l`'^|>1/^?cKa6,_Kg kqU}Lဃ ߦȝ"_ | _@6tB2wZ6Añuٶ3J491%`jgَD DPg=ǕFyS;qSqquS4_0J}:.fUt-(͝%]Dj@93z!j+4nt Q9D09>nd+'ћfp_b9-oiن:GҐ5qTR?UqhLAf38d)dY,5e!뽭5@ؼ.Ɇj^D` f^;6_K8dZHZLfѭ.Xl4G(Z4D;:} D%xjy&McOkpE$Va2ܫ~+o~OF +H忙J`j:G;s',{w:ceW+# _h2B'f0;9,(M/5# 5kO{`/A)@[bi판_'PC{9i᳚&ro\!$q15fJx%0мQ,:@P])%FÖ/RbM50iYΰ85߯6nw2vVb*%p}Sx#DUK'D d:* \׏k)ϻϹ0-N.WcZgI-BQl5U B`%kNU3 y|Ҏ$x;]7<\F|8.8q55Wd(CYUvK,zNV4?-h P1lK]fE5yFD>[Q<1]c=N+wiжorg{X gkңAgyx"BbOs+Ep`dQ+s8xјdc`ܾRund57]f0 **zpxJe3sW.>Uv,i}KFR~5k]ŘM9H@Vdrv[-y ?.H[e" =Veg$ ,Kv߫Tݴ._Xˀ4hJJOPeڌ9fSc] 43w± &QUV6ݣәLqq']<.3$kyqOyfVΕ)RIUL>}=Ni1Ar/0$GHPˀ^"s j0!?`;Mp?gz ׇ.ec.Xr3QF`Xދ[iU6Zuzҹ^@-iO8{0m4]4mC5|"+ `K1hz:2I G,U 5Q`5)WA[.&O,heBK&>"'KN-jo+<ӟ2$(ڑRdk@7^1f$hg.Uʹy 507Cȯx6C(](v@+%# 17ԽR%niot=MlaKhk0q,54N h" *EfNȢZg]Oxƙ$qzA/[Pv۰O/*` \Rk*up^A~~23C%&txIÀ-xB2SR ?DB vw@!acrN¯Q:s]J3baN1fFs_f {TYܖ2gB%n$NH58S/;8{!g 8;DTc$KCۏdB3rxWZ 4Is1>nywo1iUK &:&`H >'>Tf-y#+BoCV2"i4UJ簪erd`k{ !hc|{u?9~aJo7)}Q!?s]rNixaѢuvߌUmT%ɖq.:Gid6nB-BT.JxP/pRuUYPMA%39<<[~~Íb`XwM/nݸd@|t=J/mv, SV)fQ)Z[nj%\Q4L.`1Ĝi5'4$9_k-m|F^<go ZOO.+j{Wg\|N (~Qlx3/ܜS OоNB$WQ -aRe؁4jcV[\nTCwj0Rtn( EFP g:V,KkvԮarHƟ ZLKCcG6=8Eq3`zJK\㩖@xo;c97?"2vm-לrycdRcOXJzԁI !!" *!;:VwFv<:Ad镾b k "nNĽ.+4Ňȕ iUƋʪ7rEtcR6uSv`z39\I}d6? p`*3Ҳ(h Mtp?7?犢'h)W&21PFS.TfCt.frsvq]Dn:l\HYE‚d۷KFaV3~[HsFy/gp09a "EIev(O FPK HD |J5+ M˚fk4{kT>x ͉-;f'$!q n kcW^ESM\'k/;!qb DDAYη^T,),y^i+4:|D8Nw|,!6Nd. Nd>|R6ɿ*$親+pnx~ԌNP3:u5ZRQK{e9VT޶kb`QJޤL#㯍E۷ P$їq}N[Bv[2)ni5+Bh0(b.dҔ pXpxo?=\ ? ɌmTN7Z)0䛸I5 $G;"?#2Nz{r{`* QvW q<QO:7GTe@³W|6]/58ǃG8I2m(66fj61Oq=^V#h ^uk+ֆ%*'XUe&7&) BX6J_!H5=F7m y0UMVh)7zq- 1Š,@ĥ?"-UNZ563tZE_i!m:Ԍ;+Z럙k~u3-Ucp`'z݌tX\!ԕn#|;HE*_p'M_ruÔew}V'Ŝ fj-!%[}+e[{[VCȖ/,'~frYmX\鈶xQ K x?í~l:plа]ߠ(-rĻ$pWp7C{myn:NԃvC<?8 &DgPFz(5i5lZ,AX~Ǔb d ' di[ŚQ;:`P}aN1rGFs\f`̅z=jգ|_5#.9E$OҽL[ ћ(p)6IxZWIh[` 'wjܒ~lf8ZIG6`^5TnRhxx>6Uɝxi\zi(w5ژMё%~~;vs|*bRiBD&6֕efW"DB敞Ak| IqzIHZƩwk>-m12Xw YE+ aVwNĄZD@WTAun;Afn(:gz[ [P 1(G`EG/DN1 bn-+e"ŵd=6"Qhv e:bImv*ڽg>x@LP?R?Cs(),.IIYn{P7UMFK5wYC`'#)̇$,PN?d7 4׺YĈd,ү_84Sp?<A# Њ'" ]dg-؈[Qh5 RaC恖18hDD!ŴyF2I72\`nia(7ܬ t۶eeEp UM >PKūK!-;JaF+aݵENJ;sЍ$韓~x/))=:X^STY>>-4-']0EaiбXF3E\1,] co81~w1ܗO:74^e7b[Y)?ܐv7HMc2}7b( K4fc`vi9$DizFi5i-.‰w.4s"JBXRK<793SkR; Vi4wEB5&sV>R~/R=88X^v*DE!Thp]v*ͯMC%'* fWC>K[ d_ez" +丽'$*9ziͩ%KpqX? =USS{4~&H[UA~*69?K9MۍHxhLhWS-ϾL5=J'tv=KviOF},ECM7_g rd2N,>Vr$|sلɝQQF痶*m:p Q䚑".xʷ#%5?R,X"+ZNmM:~fEt:2oɡWBg7F Cu~͛ z%Tg4 ->’ Xl̝`kMfQ6rG>.LMy"B@,^e:Y37#ǥ \7x~ Q`ʭ+(nF#[Nr)F}G "TɕCHd2TW8 6&\ɔ _LC9s'B֩i_VY6b,WdZPsQ{#Y[>Mg]~{N>3lk"ӻҼQdziP{620r N5OHc)1XB&xk\;+p e|h`P{ Ikf ?28\=k~ h[p=="M"殝:fV%}d;~pD@;ucѴB(=H19`iRyߚvb V@[ߺMy,3 ]zPc#D4C{ 5ͷ _n䆋 $ta9mq; EJ0(jԋJpaׁ2Θ@Qslt] Xst{4OۑNQQ+TD;;PX@b#4GMv"p9 PZ573N%Uot{7Y,sIaP߈&_<淨ET$N9E3~;h^~j5>i?vs:Yb2RJ|S߱UeM|e =r~mPIѫ 8HO D?;Qٜ^+zA aPMJVKb"gi@9ޒQGJE&b.c5KDnZKW4@P{u7#*)T$Ty^Ąu{a,8dΜKS8EfTTǎau8DN0}䇡gg S5B2Gշ—=wzpx4ј\f ]R0$1y]Fs_Fa;IeOTf}_AØLTt^ɇ f/VPVkVzbdF .Zf@RILi 3ܓxE_UMn]b~2@kfnvG)iKGϒ -gݠZw+:!h^#%r @.͢tO''TsB!2ilBymJHo7JPu:K#pVhA|Q"S_~m̈SvXZKD?88LI%pLgope;UfbǮ 6)^KrRP#>\m6LCN$yV^]x&d=20:ITsVj9&&qMG~ʠ} ~_#(|$brD7}~7 EC8ڗ{Q ͻ{' O8^\w"cߟNe a^14RQY!~o vd/L: 7UɰMQWݢ֓ߖh%(f3 #; e(C _S86C*q܀$ݭ}1{]?Ʃw&tS3q ?tVXXFpBwHF;Y+| r$])Հu"mcD$@@C&l`D'kemq8W>,X8,k獥h1ef6[ZKB왝S{ ^DeOz ~7 b2rռ4LJ!ZJ,΃bR40O V% @_t_^Rz5\4i_=h\yIˤlq 0hmpnާ]R̻|g2x >̡u4l9wU;69~`?m}#@nX0%SFQￜ<38T}+qB'zmWiZ.O~7Z$.+=@ySS_q~p-i4o .(XS/ʶ<ˠ 6@R/_ed,>ع,/-r52=Y*=q/6nϟ5uS%20N+G3nFIs=| F׏NSm톦:2|@k"F'̿G"B _ۄ1ڽv9_(M#Ӻj'(? x ź&w?ē:0 $"bls-kE05&s'`ZN `un<7>ţK q ȴQy=nMćI>I>a:3deB,L^p"poǨK%1 8۰/,Юniޏ,Vн.!Xh`3yF iαd0̺vOe47J^+m'P|6d wH'ۮCb3װkVA p1UG=JAOlJe@ZYn l ֏Z-ݰoK(YĜJ:>;R!]ܹĶ⯁VHY3RǍ["U|znc _I;KjȴGv/.ZGhSԛˮdgF6@^&Sa81 xaL8 ΰ7O5WK\kw(D'OE4kYXȀgk$ <:e-Je/:1zʵ5pRhqH$b'q}"@}HON!tԚ~Gk]gڞfv"h"b3Gur,ǖei:Ro\4xJz(}F^zs~ξS($\ ?Al!4eg-ŅC)O|UbSJJlDLƕ,Z&cj*p™S&t@`L\h~x0N<41 P1{zHֽ& ~$A1D؛zbTghBG 61yیJ߄.UQEb-}e?X){X(r'*~&OZVYV3{/"B|bR]w{~׿ z8- W*T2cbb_E<{Rr楶f^\҃0Ƹ,(l]O]6PH-q*UhJdxұi)$OfxtНYء۞ZC#,T K ]%m6V$? vaO S,M86Ě/Li_$^ 2P4Kɳy>I5dVh{Pr3"Y[% ϹH&F}*lilp[Vͮ6CAg=I y?dh9.ү[ Hf;{ Noxjýݝ|bAJԅk!_'=FiiNj۱J+L>[ vf ])E,pqU^܁uCҮnœ ,(*A%r?aٓRw:9/#=~խ[l[yq:} V\gS:cCI NL ΦGd#2s!Gֻ6rΔ;.Y'U#G{}ڄh#we6we 1}>i w՚$X07?B j~PRsa -KVQDd+qmO:RgRt GPPJӯ{!^]RI3a6vV+,=x՜`ls.i`[=>y;Fs(t8hаJTEBel6P;2D$ 7a\:$% =Ѧ8h&D /% s%Ey5G]@CBX]f,i`!ӁF<wyF\2G, 42T nDSBms?P6B`Y-R9/4@W FWdIǍ\5IF?"OIV 3mFD{sSVE%8) )6lv_t:[j%\23߁V&jZqan]>[]^yC|JB''jC=QZ;~(U6s6v{B=]p8sr<#ԝ_eO.:GQKԅ0 fn`ZCz^IWt914D`&`բryt{ pABijah&屪" I (V.Hڛ'!:IVVƠ._CӔ)QcF~{#@X7:r"D!AC90+L阯C>"Nn0̲cAbVx_ub33zU C8`zϿhvDIɧqCf"ь"Aun/ q( 6OA'x[\}  (N탴acm5o@x okWʐv`mzB~=XPk _"X2^i<ZCT07?Ӡ(m_$diP]R74sr˅@Zӹ+:ĥ- x7]+9\Ҧ*ԩ,ڗv{֕o-o_ r@|ρg;[@OfVeWNENA4%˽<Y)ٕ #Y!NTn{1_`TJ @cG!ٖЕ.SV Σn7;}PIph7c'PM%lډg)򋔄z"A] {3=O`a7GKMMG?ئT Ml%P:_Z+_%!>܆+HRS8!|WZ, =Gt!fkVu0ÞU5ՌlPMFquڞqL"Wra_7VnWd9~&=#q%9yANew:;ѵ^K32y5"em DdӜc푎e91L94m)r/^@Ct'ֵ.:amCG^\̴XVCKD< ۴\vz~M Hq.AA='a2M):Qy{PxD~%!9d9ͷxsG9y_HA82NъBDFڬ*EBTB\ zMb˻vh Fϕ| hgcj^kVؿ 3AasjS K:5ݑhZT hYŞp=#b{ N˵aUzK$ đs֜4'̷\{@_ vxXBQ'~Ӷj߆^9QP=ܡ4īNa~vI.U>r;ʲ3m7 a\N(g<^5u;', MϠ^ݬARĠe$Ψ'$4`~k]VմMpZx`wd%`2Y2Χϴ_ jw\:PAvm@(FW>̋"+.HDuNIX'og[x9vGN4"gW:MKʈ(Si`W0Gs+(x}rꩦ€oC0xc?ƟITH{XLwP vgaa6['Ofb% &iGTP n>Y G`Ѫ(/Щ@w_A@JZ>I4 e'eA(K{ds7[A´4z6rnƜڬ;ʠUw+Bi R qce1R><3՜.V< ahwH:} Pm1.8' CLe&]y17%ykيY`NS39H\WV#GAt=!=rNCsC!d(??%TJ_ƥ3tIQ; <n7-2oA ЌP䌡ىMccJ!H t4UpA1\#'ȣНy\Zw%rH\*S83qnj辠V݊q]AگBq+4myrO)ktUFJg|G!Dd\o슫8ҧ;Jpxd8}t=ʕʹIыa[LړwԴmA!v╴_^ AFZ4ʺ[`i슶ـ+=+";R7{CK[V0}83$q".2t9QLME[kk0P=(b\%Vޗ1ֻbW(SPQK&%Aܬ,X@8q`fqYPlkU-DC92VC|}}”@v[TPWT!<-Ե}TD[xpݯdnPr9&~kG!*xp( WX/@M$ [GZ>\~NBBjq.VbëT V{)$-NyJ `ǠJ="e/{W-@@ ++Hmګ Ơ{wkh_٧V?CD[Cta4~q${QŠ9xl' iV7:Jw2Sncz_ڞ;Ul"P  ۱ (xB.l`Oh'gí,(-N=ȢՔ'æ`CyjDxG̭o4B:@#5?' g[P , 18[7wW 8(,W ]TB݇Y5h N,!pZuEXMւ@Ex|0-}.q4d(s* OLc|6ysU_uAn9i'9Eή `O<#V4̠_!YB-E$}-r,DvhjO#xRTIא6YX-ڙ[nU|?vct".~CsG#~c/YUb4CW JzA)rn\VY 2=TfiN;&X=gebsՈJp;ءk0_ &mWޜӉ$90HPL[؎=^\<+;̹ݣ+QU"y LN{fOb6VzW)Ayr76)xcKP}zUDbٗti2չH /M"A0. ܘ =鸔tG>ryX_bſ+^DrRȯcMdۆCtЮ6L睏zoV]VwK#걁G~n~IeR,r\/΅avJ*!々2AG5,^S|_aXO{9 $4 1D'ز7>0_ kPYs{Y:{6ܿuڨrHF'yb7z7l,6 pVtoӘF\%0BNT2_9w6l=Q@깰"6Mʘ׺y(\D34FKс4x4 DbwIjüBۄ}ͨA>z~#ƽ8H1Iq+#7"JHM=SԐ -+[̹!ck^(WATɧbA7|i0#V=z9GۭW +Sw# S߃G%!~ُ]3\~%>ʿ ɧuRߴFmMT; ?{fĦ|0({,xFyˏ'w4At6.(J¿71R]joGhG-' 0Ti8|'L ^3f,{3Vo+&=mbK,, x$"KM[O}'{lqz3~'nB‡szt6˨= Jӎ$I/GW}L&¤ֶy [\B=-`#<sf )8qx6r C  0򣭬T@kLB6&cHJH[Jx hsbe/[vL"[:d2݀3ؗpw]A'Ff:x/t2å>F .t<Vå&Eׯ@J *EK_AɴNg]CZ?|XR-;^/\8Ye/zCM(OK-^CAwD%*0:;W(nj s:-C}+.l`1g5:PHSd^,6 PaHNV1 {Q0|ySե:x H$yWs/Mߏ;_I/n>tG97r>U=n2;?sizRMs~8o+]1@{=Ɍ3ԏߪ6)7$PlVAm2_Aw4i9ֿ'qQ`8̡XO&tE6/G@/w$L8o{;ȞJ3)rrA ؾA oFr`REp Gp ubޙ۰oU]yi`<_WOgְT*Ңp}f窫4(pǖo}Xɚ9^t%-HJ`Kg0<}9g)0_yUeԽ4 YF I2qm=KjEIg?16qބFiOj;Ht z?gq#:Ƽ^c9r>&͑u ԱٛY+i[)#kXG |0ELDbLJMVmw?ԏUEIƠ o2 ¶ Cl tsM2R|& J7pEd P@䦊,ӭQ0(M]n|بߗVb@C66,zC.%f\bG!Ł'6VڅyS}Ž:*9i@"S%`j!+Q)0HJU C. ,dImp/!'B+@>f4@SVŲ-C?$XM10S uV&ոWށv'a?=3/,}uRgoGfsǜmxؒ ,܅ RNϜyK;(JNzW=6(u>I9윶c;P-@zZ'LX;*67u6o6V2$Lp%קVE T.)=A9> GB ]_ooEŶ~Rs)_W)sq噢Αb$Ȏwidj[FdOtPBLWYN78Vt#6<ӴX }{~5aL{"sQ +q{lT|P0`u1}`HC=oKJ I}<ŁLvA&r}*f+o_, N$\<$2l$١& 0z #;[4TqFhe+@ކ0HBЏ`KuH_~"`81$m?`gG,00V쫶Sd9k8 dpf41`SA7NvNA♁쬧hXmU!gMKV9t?`)5pNpk0yYam\W^tsN "oo큯.+VG?'Mr7`K0dAw.Aڪ nxH>h"Rӂ{;Nb͗ļ:*0Vþvbbs}{ey)I EMZvjO6o 7V/G+1g b: %}؛z+# ̴r`Uv{l3 %:O]Eնyi׹ièBSn/' ϑt>ٱVNWj8<8H 0.tMJgk? <4)0FP]$Cg=;ܛ[i4옵)%@XN{gon1$", u)AzGnX~g"=+u> dƎ*dR9 He>3*uza qm灯 σpRJk 2.35\*w藑4"ON }p~>xRE y~"񁸚B~%#qͫ/9dEr {-vl!E~)veWf+`PSA #ڪ Bλ7p"EѾ4s1QJYֆf]3=Դ`ۈ rS-[V$6K^=kj_A\ڌAڊl_(yM eHkH웗JBQ4Ge.ҚQZRpMɁ#8+4[8M0fXe\K-l0eB;!\{:P$F!,EqRTQք% |(O2\ˁ^h91fT!* QOtza1 vcG0 ;$¬оѠmUyce'Gw:w'և#_9!Bfg7 jXGY+ih"N$uZKK/hPGgg`'r;pWE{#%}c0c_K9߱ɖ%Eׇψ8fwDkDQk5킋F>Sz3Bh.9:w\ĜKRHR PWVE]kÜ=ވ}WM80bz3CG>pe# W7/onN=ÿ',R)'Xg^[Ʃ*4|r,NУ57~^xBi@Qp9Y9x=ZÊv1^c@ķK0UWF~ua, 8}BPTWpEV4Ϟ@jy*F8+J2qN֚)  R܄i 0ؒ Npw+ pi+U-G,qe&T, }Ez*BzQB2p\A$|k8qr#W+fHyZ",}0s؜ۀ#2wElkJW(A@+Wӯ8낼]@^#>F4e `gkAx |j9Cl벑ɞZO@ܣvؙVQȿ'36j2뜻|i=&wD9됍n:`Uknp)LffJDlCd'?z2??(Vl M|rՍlWFȸvJ[J8nCTsnrm݊udTIgqCSmHvs@ke"Uo2H]5쌘@V?C÷0!Nq(+>AA/'7ӆoSM7Z W}:P틻je;_dnOsj1a& 䃕(cՏܙó]9uv 46ٽBgg|/ J@cً>'7^)+|=o89eHr_;ua4#Xa0S5Y&2i PZzO1Ttb(hPQ=?NYq4ҫANkɤNjJ~ MCq%aFkP%n {^e~F?9}$DPJO;ZxDAv}6 "&dŢ6%,5!)\q|upqyc҉ ޺Qxc{%l*$R`&P<a=y]@e+ +'Zi1d=]ң_ 1,!$W&7T Rf@У?+4>bMo=M[ =6a5&ne,9E_,KԄ.㘽F&$,;pvh'{Sb'%.Z\}M\kcHgﴕ9՞5} cJci +;V|!:TxrөmQ׍rMz@\/ wyU -g# 0I\ʽ&0ޭW%E/I2GEm4l)/L"3MS %æF7{n6-fS=2 =ܓLw >K'u˸ss( Mj?aN9`;Lv!A'w`{? .yRm #"w<쁉;g>cUn ö@<ѭ- ({|(y0Y_.J4zfFr_naUvQKpYh^hRB:0r#b[C hfk4uhho J2ҩgŨctz(D-<Se2*:20Vβѓ}Ch#։:N[Lv9]3CK1fMa*JپX=XX0jҁ˶n|'- ͨZe㊍223.*qyt$*HI.<j#h9K(?d=(p=,J(Y"MPtڔ)7h #Ȭ|SŻi:傏ͧiO@$;ՅO 94GipP oQ:d':Ӂ.|l(EbChpΩ[׎KTDm;b0Bq'~7M2;BS ǽwM[~ہ)G8;'d,$6X[h ]Z_ K|c* !p2 `ֱOu*lW"Oj]Mx?֥l0R/W:={ 8oO~jBj_ L(g&l< DJdz۫K:m=,gVIM|6S,GLCbmCz\usni8l7q $mO c̙qۘz:K8$6зC+#uTD7ou>v'W,[pXT5)?݇&ɦ;N<58hߘ@vz$!0F#JY0t?:-JA-LzumHw M]@" ;CL/V_6slۥ*{gpN7*gNv;ʊI=Hq ^bVjJHږ`©fZ1sr-o,< nuo]q89(X%[@!ŷW M!L 1zD]-Ι'^3Mu©ڍ PG( QR z?`|{/«o]p|E`v>\lEK$Y1մlM ePu&2>3ir3а6E^B`jayR|b?|!ԧO򫨖&(p3K |6b r*ά[At3 f`{N.$_wGwme Lqwc/8-rN!e_I4a82 gtm\WAJK fs84B0Yb[F j1wgq)HzV5&|i1`eewPRwo缦Wx`j݃9,er!SOYNO"s ;Rk;B̊cnhšmSh/]OMV|B |w9 )1" fGx'8dR;<_)oT}Fp#dosHӆvJsKI|;EWY|xxJ$!F-hUfaxLU /t9 ™GN*"+r* xɿM,*?Lt/C $+eJq{EN8eh[f$hp/XFi?CBKNBi}pP2.g51 ؃ ,a(4SM?%$D J\ M@8XSsJН3\pa*;?6xY'+2ϧ~RYS^B(|oj0P3G< *0˅&f`JO~:8(a/_oy|-fRfu D|8>b617Ú[`K<&BAlsxf<>}!x-) \AOESd(> :(v 2G^-N1Ie;Vo]1r\k]:xg-NOjH,W\ajށ{ʫET ̛/Z{mlgk 1 3Dt@o?hF^!TᲤQ i*ak1Tև{Wu|}+j0CWsxlca ber/ckh ʤ⋝prSbl`Z;T2wn1 I޵0>msS)rΟz㧟.,H Wb 6W?5s&ӫ;)O&&}Rt$,KFpaJ; +tG$&5yǣ^R}qzr) =nI* "Y+S%-#KH2.y)%0 q m\$|~Ezmĩ7p׎Ic8  _ 3pvC5ޓq0BVjp+%an@T¿yf{fYGܟgi[`dM4? } .2ÀdW}W``9(@ѹמꊬT])ۇոAKKRt;b>w1~j@y{cN-(ύ%Dժ@kdɼmHf%:CiiqS*54k&P\cM}wu$5` \F[)*J9jBcx#x1c:[:ȜoN !L :B >YJ rG@3cΜ.H kr=)!}ꇨ,^AE7EGQUyMZ^m-rT܌8]@$%"cb殭B|=TKSWB]`$.x3r^F S L dÙX nWWfCoM^@_k2,wx稵 u 7OOP7ffV}Ê M>؜_7RTkY#]~K[m) !-~fq^J %zgdƟ/WVo^xQ[n`;Yvĺe)bS@* 1xg7'Byf EZ9M AR !l $$*Rڷ;skBO\ N 7SiNlK*HI-P*A:Pi(@Ó+03}I+h|eLM]Ⱦ~z&wDQ3H2`pQ.\T_×QA\ړU|a ׉Sbr)C]15݃MWMbjTN5;L_3<4ǒ;M.`Dk-aEuzm m!)>mH華S܁53'CZ"Ù[/ĥ`\vFZ2nW]&nęǙ6욍lB l3 a9wpE*tx5G:AYUlaIϩ SbMLrոФvG;Ǹqtר#sH =&}KmYC$'iAde~(b5 )nQ_x?sz)2O3eM<{ߊgNxiL8suM{S<7"/kM#bbxQdM.E0 ٨ʊng^V8A#l--X6Y Z: X%i}/Y*D0 KhoϷİ <^MX$BEYڠkи gTT#p]BXBGJZf\͵6}z%|IFۙ* m`%R ۵qEڎ5tGwӷ&sI-Sr|#r;9g Ӓ jkӺ͸2삽|{g4 WqbVi(Ll!Lq0ȑh&- H.bkfPb^ͫ?+xVRu:﷮I-grC*0WEOZGySpCrP-ۡXG1_St@'Y<^f:, !_v\opP8]fO M5d^cK:3ZV0+}`/S?æǩFI]GHYOEҽCD~J#Yzj%Xx_w#]/B -Ni`c\!W=3;fy] [Lk"A/*ic])-Iy.D7 +q/%+^hg3$6WR+ S ϙ:&TG{˭c4CB`NӞ-׳O﷐ 5XTNFOS&k˹ cQZ+3qK\|u9ڱqdRbkOSf׷7 iR1gT>@zKye_͍ X/0p(p ynBT]&^5<29UUo Ɔ-b-EzԦ*Jc'cљNwi SSl#E,>% 'X5vgUp;X'oM 8sw3- 5 `f. Rp(4=f#Jl8Q)pxuk%)=J<@%fK|u=](dzDI,.)݂,~* Eaz.t]iBtk"v]ǧ8uUq?X*`M~ ߿a`GsXl%1%+e+;1;ymf]HrF 34|Z UG~?BǩAp> pܺ8(Q#t2GiQdyBW(龻sDwASDRb̭C &F"/+RS 5V#1eH~^ e$,q#A:E9  }Yg5/ʺquE_cls6[ޒuUA3S@,g1HqϺ$*w_j!=y*p}7VP䞻@6AmSφ{*r+g1iȿz@3o<0Z` ;Y uάo45FLb{4i4jQ_fΚw'O8]2 ;Ԯ ]_Fu"Q/}~ wiCX#bS[h'v]A.*A@;P%[&caɦȦmU! D?v\<-o!V cR;%m"QH <}Q?cB'2U@r0SۨN`aw)]Q>L$&TcBay7sa\q3s3P˿Z* x=fvtk>'1;,WDtRڦ &L&ΠXh`^ Ѵ} IaCH9YTڌE Jcg-g;?x ]ME4=iYCRu s r$VT&Gn,鑑@ƜqzYnn{eف;! 6 Zi]> ZӴ 0- ~/WcڍkM  ͭmY!T-bQ>J{ʙ4:P׬  )`rd ~!W=:6$X+*t~'zZxHVbB&r8_6$$+2% LIVŅd OeJv.g8f0 +kd)?jnNsm̽Pĭ@YmY56P1+ *5+"/=]b lנ7CRHv1oi뽻lgT?]OY뀞5jAL83}ิ %B%h:]"ЧHEa{ hذՕ_q/=$La)zy0vjE(}0ӂ|ǿ&ܳFk{sؒa+6}麇ѧZ]R^ZVƸM,HMFՂT)%B>8 WP V3(gC q(L8g"ˏt}.f&n^~vOJC?Nϧ>vpLdCzPC}J ԋhA@TO5e)Sle;"L$x 8UAUJm(VxS3,5  zRl;\\z*Vo?oy~h]*Nxwl)E ǑRڤָU'n۔ +(L //َL|Z}@\Fkr/Er ٴr?|dHr RR0T$}R7f{ϯ{_A)~,{ltNq ?WI7*C nyĶu$Z 3A!6)%^Cb&<`wW;:FJޚ:ȭSOP,&:Ȧ`КwLn$!<[ P -_H]my8 V=T9>  y } ",.iA-h$ 4)MZ`eT!bsϪ=` Hw MW-'Gti_J a$l!Я\Z'r5u]wShM~n)be;&!RM0>+|%m~%"SKlA\0ؽ^R W:TÖ6}^%d_0EC*vIc3(A5"q0h_/T3+xG+fEkւ.rBdeh$`ո kx 1lS,fJVϲ7}+ lp=P4?nYt|b> b$찡]K̮p8|&YR _}HDJ}x⓼u;> S{1|)y/Ò:vp4!snI܅kZ sX8w/nEC<5ǂ%IU-)_uځvcYBD|7iVXfGj 2h>4Wh$nG/|GT0OB =։Ca_:FGxmF/=E8 g!% I0XA]<#=z\6'F$5L$XG`5ƶhtP}G?3wc:?IK4^)㍍cV5eMiaV95}YHci*Qbs u3Ŀ6G\ ve4ރTG Qy;X^A'tSe,/] B4 YជOo8h`1BPţWor}dE~XffT pڑZ!Fv!Q}!ϵVx*cw1ej DnfTHgE`o.*a+hOeDɭ?λ3) cV6R`erԕPw쬰XEQ0I:5b62-K9>P8w<㷽W2(|i8! ڎڔbф/\{2_苑_R&Kت?J"Kx.57"!2#j@RA5'1Ɩ\J#1Uߙ m  ʏׅց=eUh&nγ"ޢd?uMl#J| WLpHr:0m61|mY02]Z7)mAT X+QS.F,=2*>E%*ѯ;WtX:>gX2n\پ׊./-<c;C%+CPA2K~8N)^@i!vs$?vޖiMapku곊"~d.D~ЮiRkL\TAIjIeیUthZwıL н3vcW<0tlUYY s:*dwrEN :*2wV*sHo+M.h&D{?)9-#? nKrBp21a݀\p~&jxHB i)B+eA_rK`CqjaA9)IgI)HR%ѧ!j*?X(R"8<3߇Hl'Xzp%ؽU>2P^MFsFZ.;MIGN3TQݲoTKP ZyM X Y-{})+>βeKCExgpV8l5Tl K0Ň,wW1 .f<:y8S[Z]E;ӿLѽp0xh5=1N)u6R% wb.{-Qz}b>K{oP;wPPP9{תl€1OcoBBϝV}]Lo31 8˺nO;|/i;Z/-xoW󩋳í^}-?$1T睇$= _Cŧ\@a$\ ILWϤJ02SK<&:C-6XP_w,]|+K/VY! uZr^e+9T\\S~˽QvXӖF(}Dµ]R>s9eGv5@ut<*)"eZ-(0q_B>c$J]gu4٦em?XV,! G!Hˈ!pֿ.LIe0zl7R08Xw7M>L5̞5օtVzTqIazWD J-H{}2 xhO_ű`Ͳ>G:Or1 z޵x;t0A?^V-1HbլgM !K.Q2spNMtkW'/Zч*M߁Ñ5 ^z(櫱gGKV+Ń!Qhg鬘JN^{K `]o6טf5}) %@F H茳T45?ѤH$cH>9>tF9Pd25޳YUJfUu!+-qvq)dӭ4~)h1BDvkD ]y[7ح.;3(8_ĽOr"0Z_LsEnz@Ř``"`pk5ҋrmo?T׋ bh cv :W`h1.{m3jtXv7HdX#K_BP ҅l쭮V,sLԹ\@Y7%;te:!`"x΄FڽI8M8 |e~id2hΟ# I#7-BrRBy(zd lbotr`$O!+Ɖq̷{Ǥjnii#EN·\KbYK3!n]otH %o P욒9[ m%ۘ깬^RvE5:28`q+ssZ!+Ѐ'M y},$\ǧl0[r+H?>|pN x۪GBk^/P@NG4ϡq.ؔZ =$boZyg)ksq9*N#p/W>|e6U/!A}ΦHð~uAn@Oݦ:3ֵΔU.aIN~0)JL+zB^T? juqY!seeDSIL|rUДwjP3ՓV7wC8uylXp,S0ID ER]U1DP8SCvݷĬ@u7o pp?T,d^%$(e(|8` HFWr@YQ[ʦlI!,ZD|:3ڄo-ZK/+WK(B>UME38cD\TO  iaq&L",e+= *[v~VCdA;]~1}.` .d%O.@U&aJz &Xk65+70k 'y1]"_ 4R#˙Vpe9x sRGr^t&E*LkyQ;eU(ՓR6466io/:/{ՙ2+qF B `fRW[A:-%f 7>lǫ$9yr1Y7+"씵ɛ %:kndhGC7*T :\_b+A5ƞlodFf '?G_g;U6OnA]HŬ ݸs*=6!R|TWEU$gG*4,+t.d"|'/[1ͬVޱ߷#=33Šcy5 U!B`Y脱1^%-doQT6'KŜ%͝ƇҼFV;ۻ;v-[z?PsbZ|UH;Yͮ2exF>HIh| ATpK0W0dꝢSK#I$|Jx#\wu\_^EZcs}J"m]6!h[ڡ@LBNW 6.;,>>D`K}3Ž-jx3pin|b' 5b:b+d'ĚX@ɷRF=g󬧊 ;Y^sۃةuY}O`SP[@&)8%>Z7g"$8Կ`L9A9`rV8% "zs.p+k0;: Ji\O,Jghˠ X]fU^c6v8 B0Ta)a]5͸@ 5G!G1AFUǢr'&{Q)g!6MrC!\Dzi1&iSgmchNsu2 ޺6Mjq xDtt$L,8s3z)OE|0_캵}u8nWD|L0~ bejv"`Biِj`oni_+)ccyi8q5 F_\LҔ=Tqtã2`pt Z_fmuʴBW';ܨ߼U2gTdG͟Ra9RS I0?|R #|0K3VAebMl/Q2QT2p!N6nEDD&WW'yB#y@!=06iȏC]^0NucI! қo;pEP"q)Ȩq]߂,/ v#"ރo=B܆c?`}g~^zhۦD+/5MNI~ bJ˃%9.ϑq^ a*,ur1ؗœ@&Vo/pT}:+Ӵ.i3.ǟ=]0Tv .wS{H@B0BԮ 0QlBNJ_s#7n>Jw a$+t'Q㈏[G"& 5P)T` 398Bfm[HSׄ1?XkF<'`ӽ*Za,g Yrpɖ 3,iۏts|f(4v /B(曡3֟K?i29i1%9j6`_+T+>Xh9W>t& :'[ :Ʃ[KXl['鐴H\My}WeS7b-H*M8 ̷X:E)q)S V࿘AbxOt`D`͐!cn{9a_Xɮ1'!,xW0eEԷ)^>s^nN09nNk}M']4LA*QlVݯ˕֣[YTq! - yxή s+4f+*!SN;w%31S&@R qAt0,h q5[c I,1¹Q3^'1m 9F1R&]>>> O,`5:Q6I1n(p/Z&HXg7BTb6|~iޜAuiPVQoIx=QIUM_;丷bWY,[0;(8@6}u㳒Ƈ=)BE]#Џ,2It-ô;pE 좎9s%(A&N\IS4[oo XS $4]bߟRb؟UDJOPW#|y8Ľ ]whT+C{ΟNnyC2zt) 3uxv+xor{Y,CVgxK-z_>{kfn Ox 2L@ԙ̖5}3՝_ЩT/fEc]䥰yZtbVTgwoĽs W\Hűo|_ g%iORL-b77暱q5amKnuQ6a?ej`.䟢t'sj俧Faж5tKZ"YcpAi>n*Q3#%ᧂ~ 6B% p> }LA~&ua-Mo'Ep5ρ̭Ɣ-^ @Wx/+LwJ|?J@-]Eu0ߣo8svu)0w1'sb ҭ/a"Y,K$xĽ\xiц̑hcMcgg1@MM緳iᆵY02gN|8X\ dsbBM ?nSpnqO UdT!>(%JHW%)/7,%,TEXaa&{VZ󞙮S $GuS[hTQ ~`{o0i5xg%3NJCӱؐ[c%Ͻ/D3C< /ltj)DZQŋx>VfMU`G,[ϡTn79Mwti( ֗)y`~n\U r;5ds8))"8S HmVhL<46(A.ws=>XUz|I@pOufBd}ۻ0:Q}b ÕUZS?]ISS~%7~Vڷ#zٮYF(F޴ CDq[|u_pZ1 h_QzĀaE3քc pG"#@r܆$q|iʲ#]xKmlrEoJRzf]`v ůwkE&FKL9:&;g"71f]e?:S#f:)%jX-F4PזVB솵|-gޞ7Ljt^@Oh%Fi#Hs|Czzj}X`_0TCώ=w˽/ES/O4hQ82…A,rq!8̇@ԉ-ȧ@ ^\ĺ&Ps+y# >fduʖ80~ *Hn̙I /LF9c,Sf,ֽ05Ra FWKiMыFT9m;:Na0%tg@h"-~)]wcvPbuۑR7 \c_8W>9X"{I:4i[:\EDZ.5K̓E+2m@3lQc*㴋)S3 Qv6mP1(LC| kOxn*xD ӝ1ލ+9/߀`2,J 6p0\ˆ֡Ď2csS&o$(Q^! N|.㼉XeBsvu(;?\¤ެ1 r~*XhۄܺDqwt Hu涜EDha`wo4:1~kD+-+;,2;!ԗzLW`~wƈ1vaʺΠ=k H39 *F>§q^n&ZMZ`R>n2u]`"](Э CH ͛+Z ~bo$2l5'?DdRuv/Z.VGS+ZcfqoYƃ"Va/7pໞ*XJt366N`XQ7.MP|^e]^{z1..ASwsd%>*PnZ3!1(kx;1:Lp-n<`I{7w1RlЭ?shG":* 'Д FP@6HXY|pyq<2iT\[1㣮Q `u-qgw3YTĮ;a Viua}uۛίFN' pɳ3jAd!dkͧt\ 4\4 !mgn#ϣA=RO Z,|:$h>GL>ݍ[+ xU[cuDtSu$\%{p)@PJ#f"+p nkn| 3ÜM4lӯ$ zki K Oa%>̯,R$ەJӝ7м51.;aaSS;xK۴Dz\9NVf:! *[Vk'wV-?3=wK Y% f}Ig e)_.IV2<=J6nO}yxłŒ|Jh<5ֿn0 D֬dj/BX=K@!V\Oy(TwB H#J7?x<]KJ4k}{ײjIqxY Dn}0?l*lI^\gHmcXrtn,4iI,a5'WDgɗ&֮cڧ 3+^ C[9sH F“ )m HusT.RKO= ̕e{WZWW؁TTq4O K2`L~3Ff#v+傰끦;ev|יOkf/<吅 WEC5OzZAy.1t(; $DwVꋠKx\M7Ȃ(. -5h FAZ2ϮΤE#5wy~1%HwHe5p[%i/fC@\{Ghm`5 rb$5}VC@UxIW3{7]R*dܡ£yrA>T57:e7}rٟ#XКCэDag՚JG3#xvH_.-(,λ\&m_ S_'I~5q{z9bM{J&Z@ nTNnͳљ5WIP7 )EF (q~O':w p'/[e6Y3A|S?oHXxS5vO|SvR>]pu(~ӄzv5v;#6??e_k5㱮:1B9sk}R\I(|`U~z=">d| Z>1+#~oQ(nUr\*+Jyw~w&2@ +EI\㰥"We} ;=I*3-~F”HAY*j) SͬK{9T:llA( †U7JUB?δ$u̮KjlYa߀z\S9nB4jO+G3["rz$EA?tt#]: $3i9ZHe /k-Яf~;6op5C_tǘ0F`;s9 ?XugxY :噫 zZ,:]mV̉fSރ &S;f%jjaٖչӟ0]Э{:Q;__b.*9 Θ=?֑:Z,vvn dOLCP-0eRـO~>!6dػpKd#q-xܢV_p4Msoϟtk)*ӌJbQ5ymG^z&nSMl7J$BgΩbr_nk.o/NQ׽q@>n\[ar"{;KOyvUVZ;^( Bբ!8iȑAzt/!qt80ˮQK?0v}08^ax;IW_Kw "o;X?wI^>R|ބX`>l:FC緒,`ܶ,ɕcD;GYh1O@juaaqc.ml:b &"o<@YJt:PEͩY]Jev(J[ln'yIa+r . mGN<3y$ؑ(wooS`ě2s㟏%f7kmZމdĤ+Tw(5Au;s KIg)|¦z?0p75ڨ1M|$"i_V`~zj#l\MTOGP8/)!yӵ|rF/P:da-%@zvm+]phy6e5ʦZ\.PN#xx{Ծݮ]wLb`JJpJQb5 Jr[0(s**ռ c{<ӢSc>J6%@ӳމg~܉ ! ~NgF(_|10T0N)Iz[M" 05语r"Zu@({LF:힠Y+o!!+K!^ѻyR|AHL.4S56J`m0.Q7xebn+"-%|v$QHd/3FɗR40""oW -еG s)EDHNGgለ8Ո`z^g갮5Uv.!xHhw!PJ+O>#Sʣaڧ'_M/NtȰ0:s 48,5M\=VLvْ0TNg* xs 5SZP3˃ELAm W (<$F7@3SϝXsW0>xxfe3k[P_5gv蟗_\Z`M+bf5`I ʶiR2va88{h8ublQ$^v=wZUp mƨ3[OW7 ѫbH'F͗|tں^6(bج) p_"0oW%RƳ{4IXlL_ @dpz#u]wN(7l;4 (=7xgVV+d@ҁظ-5[b_MTO'hAVK,y^Y6oZz̥_=b+Pc XbtXGP̞T 9-%L.ͮ/uIđR09/ ưNm^:vA=`%ò o9mV_d@ODs)ȩ|`CNn#|!& <4ĻDh{Ա%,;Η!sa#\kj6333w-e*UI׎͊ qFhOЛU#74Dɿa^'kr5 TzGs_o6l"Ne&qt?+Ša0SoGýp3%)"t^ih=Ω@ #IW&8kq; ªFIWpY3Bk+8X >d'#|!4)t←KGfˑyͲ]`հiϲhwi٨a$%ݕnPlFKS`S̯[r}E: +UյJ&I\j'^1tƍFhbN"C_T]GJbF+u6h-3Mj& 9X^oRw*YԴ(O]W8Kf_yfo<-F/8XiO)UU/JYdLW/K*tͤAy挧L쿡B MWvipݝM1Đ\}ӨR.EIM38#71j^z>3R;]K%%㚊ls~q8MAi&h7Uud[yxؠ_|cy[w M:ϛPS| s3ݽ*=AQwKSa6ts8H7QUT'%kRu3x.A,j5d2$|2j>SPs Uϋ9F25qI^Mk^̃pM[aPԻ> zmc6il qzaow 9Ee^cC8 9AsbHHfv*?ZZ*O<&TA=[Edm)~qq:I// FAtC^K‚oZe{+lc}K$Hd2`ЍRlCVVpC5;L'f^|{[$[ex܉j歺H%h߽}B h -4 m%iPg3rpBΪLߣІRޱyL&?㌽WG`Xڠt{sa-BBJPco.>R$\׊)r)7N':'^ ZLmc]%Q Bw)r6r=8טaB-=ӌվd|[z<†A lْzp;6iJ^آD„+ջ#yUD̹ؐm%()PH,`sꩂD\)e @mGYMqIxjuєk![F.#[Ij вFe%q]YhMt}W5C^dF^kS6LoH,Og;4xm3Ns*j hԥ%e:ٟ,JBُ0X{uL/aYrmηy8A4zAgz^$ !@ئX{Uhc*0H=?c/$BJ[ӝm @t"|H)ya1WEH,?Ԯ2̔L#kcsǙ$.+@"Nѹ1ww g|] O!]Ge"=ҥ}5^/Տh vJW}yie@rjmEש$F&05xMrTM)F`D#vG+932YɊ;]eLȆ"Z"VHtDB{')Qbռ>]AīZH)γHx4`CCާkj^"ּ  ØO`HF]>&Ioy))E3䪒}3Cv1kKR!.@&UHRxF})떿}# /' ?ZOa.u܊XV>SfW1? z c'-c!,:1 fU=,o57ه"p1f:PkCR49˴\a .'/24:!VQl#$|-)dœ9!`qA/\ջR8#3sRon7^B[TS ,SR2Z*78R11 䭸'c_ubʉ,P[t׷g3["KYیCR8}gIJC 6p?a%샒[ZWH(f#`Hv2[ Q,Gui<y6;QE;seu?@-`̉ T\TD%cX^("?4h'<^wXslM2Rs .'q,8Eyyb>(?qg T*ܯוzd.'!i)qf=蠲h] h'쁚*;NIuNAqҞU]jTM:j>)̅wa&*P  AKweV bjʨHer 0V1"x]LD(zr# A9j'Y"98jy`5}=x9ԠvUX;_0p9G;:N0Yȸùɗ;xGlǓj_ ~я߲` Ao9Ez&`! Cv' $$mKo(2 UI"-4F>F {x :q-bŽ^GMe?ƬL%A`w^ _-WLzr+vIaf xǰ"!S0ptBRS29E:_ܲj kcQP9y91_G6f+v"P5ClC"ߙG˚{FGk}7V:SgM#ZkOBcхMcvE5dKޒU5rp& 1IVQwcW|3 a%ǥc011Z-Å2 꼼gAL?GU}_IimThb֜=T()F bY֠>Ve0bGvIyرEe*YijkGg, wxUU EVqoa;.ߍm0ߦu\ܷ>JeAwa KJ}Լ[oPҬߒs6! <y#$F/J{?Q>%WZ͢1>wld)dr6wzۊ!C7>+5ݩ& os"K;z#h%W[S) ()َ1BZkI^1vZu,R5?т|a#PtXyV;Z9(M xƦprI3=l*=bj]u< "ooj! d?eb?+_&h{#հQ\6*p=tfajVFmr̐YߵniZ"@;Ĭƪѵ4vޡoŻ4)WZi>Kd`#ޤ"J `Mn](׶hr%tK87FtZą}t(7-T%TgMmN$QBn߭ 3g}7\4bylh#eZb6Z c8 #m3*Nøf)ƈ~O [.mүBCY]͑nʤHbm\∀xOCv8tK+wr+cz,?AsmsV%Nȭ\m-#w,&\uX@жjeOǯƨ\D_()tN1 T/p *\T%I--yd8sY wvR.fBM.`%(Ee3ˌu\g&$ R?ӳGor֎z%lzxMU7@|"~XJ:b\H ^}M𒅧/ >2k"7 ;1ȮӁUlm #2BDϧ՟YiT&E86 rgRNuQz2i[ٶrz0Tֺ"f<^TÜR b~"/pP=a.N<+x0e7OPPL,[;줍Www?Dx*HH(gͳoM H &A~6FdP[DȘvw9܂1VlMb_oh0 7 G|֗z)8z ^[H,0~&ǧV%@pݮ;6MiRAЎ5oulauix~ZξE& :Q j~BrN;/i8rو؎[REs~̵2!@L"Yv@!ۀʗK ~۞oM,7m|Fg/xA6U>ܫS\u#mQޝfA{BdtoL˽37&p"ߓLTENwqkװS/n~ jyIgrm @x0Nbl, `]/lv~`dꕶxnW*I7JVCq=r{;yx;gj7-? YJCSGiN}3wǎYZ¨VR]̞>C?"+R]jdMvUejQRYe ELM0u,Go':w:Q5)(pUIBCRs\ PyWY5+ɍ\dM~A߼/eL˧bT*+iCa%k+!VI4Mr Vavǯ02f'?hnau@4!KpzcAfjH|3%nĶ\59~ǡn,\M*y{$+RH3b9{8!, p"&2]6E'#k[ޚ̺F?~N"-f^1sg6a١*s(䗐cD\γ؎~G$Y/нESNUΟT})iݷ'EQrMZ!%&m4:Ρ[V+=)jc:eU+YOpU&e֬BU•H4h 냷 TmaF]fe20Τ9m,HmվTX 9{zx1F: oQ/m1+^fx=B{a}U2X@ .h<4_Xi6#a)!w!_ HY@ossL#bxCWvl]m>FGר^5A,F>G_(G,IwT儹 |&QcpE1Np8xɓӺ< *%f?Jޫ!2Q/9[5h*wHP{@3ͮDl/6Rj̰K'nZ=( dhL.@s, NY 8Z 5x_Z%Qݚ%3)sQl(WNKdž&\-!EBi>DaS7t9%O8o6w,ZA4@h%^h ~4QxF%lqQ3hZC>Ypv-Tjh^ '2)pN\hG1L.^5=~î."N3srKs7IjrD/Q nKlMQ0=i]i%_&N&`7LQɧw @:M?&NG[]uM2ig5p`jwH{Rф(.sww:zƖyȨ" cNh@ څ=:u4Xd}Sö o v }UDPѮ#IGWRMElhAB{_JC٢G`EX-EDzѢ'5FͣѧTCğ\ᮻl`atTKcBoN)QZ*=V(}srG f#F*|fs1 [5(yJM?_ǚ)r]Q `Y Q%8IhD0 .a&ꞺuB͐\-A"XҚ|]f"fb~>4nmʋTt\~ַDtYo *MSA\<#ܖ Ӛz*)PxS#Rg&')_: ;nQne[w飢TZ6&I}3Mz& a,kOBWF]cK?{btLM@/*sQX'9Sa}"Q,Hj)HJ{,NDlPP=\%@/@zgOU gntjNBAm~@T0twp#UQjJş:5#NxClltv=7ZJ)f-+@osq;N^~5nikz#Vo(ek/@:x/_ino0vfAX0aܿ|FA~EטH|WJ7T%KR`L#tsfgu 2 VJ0ĠN [,划h,4pfnxHQԚTQȯhSeTaƶ-|A|=>%:u>YiNc _QL鍒c0QiJsײB}K%2\ڝ$!oNׄްn{|&sX.(\zRt\B8TX%M[M9Y6kbZCc?sN" ވ"]LR_ϫpZO%ݡFqaɑKlsȔA\pZ'иѥk WԑE ^.9F;Jg% 9R'6?]s0 lj!XRo]ZX tjVGo~ <ω R7]3BnJRI2SlTB5^4MxUro|+3FZ-}so!HJ'D]ҭs GF1)I\*҅˝I(Oz >FU{r+HW*Z] .}飺4V9\كԕ1u^iDEK}BaI  ߈v\yaBCUPλњ>`6丟57j@c/ vQvyN i֥US0z8|)lyf2?0(M&MCsb0vҝF߫K v Ps\+="mEȸYS7'2_B *km ="!6JnIn.rd w[&u//^Hnz~Ait?g1*#CP1&ƈY"?8нEȳWX?8lPl!XkZTLԬ0Y@=uep{S9YB#YUKi id9)mˋE)Ge}8QKA[$rahd<õ YjO`C aAĀ?2UN *8.@@ lE>WoMOⰅ1teTPٔh33w߸%[${\Ey.\QF0;3BTx&I +>Kխ4N{De[_vӴ軓E{4]g2p*,=sH7Z݊u&>ݝjE45:E3`IqQ9NΞ^V,US1S.AfN 5#[C( V+_(ӅIx.&fQ"c|c(=eA Srnyk꣧EC0} wXrݖ|TknxߠKո|O&b{~w!^Qg0{R/!V!߮IⱧ!%um0%BK3 aY8k%B%n:oZУkQ3a(LPl35H$(0gv)6r1)4,V0D+_"DѤF!ʓnթt6Jiv?R fdWQ/jn_ȑȕK->..M`e਎NmZ̲pI1[鿏UviV5#ΚYOgrC:#n-CBDJ=rz1e RPp/TվoUk[Z4@p%ޑEx>bA@(!XrdMR}+^+z-fJD_=)@j@Mc"U`/nAnkGCO8t[' UqNS/~`d^tiY0vZ1 ?yɆƶs*|'EjΝ1XV[OP5l!~p!Yɛsp۹cgHX)zW..˰|xE'x #TքN6Q4 itj}5y- Q/)x|췛4\bBcuz CUtrT(IG\v#e^VDK);o YځV3/{mQ3&՞&Dc9UjP2zn{g:~0x+\5j`t@otNˊ%8[9UBCƼ_,*-vt\CW͡-+3M*?#Fr䢕J`U0k3w&/w<2EUIlն81}c*) kh\Y` TI[G;R)=[aldzq)K,0޲[HO[(̒~Qfjxp7}l㥘tA!itEK_ \K2폦bŭt%ܲXG=Q9g2 Y%טTpnP(7=_hy1-% @8Bzy|kW0>Vt?R@ٮѻ;ߖ8TeU?"M/Od9 3#ἧ0{JgLr SoKIJ!~T)e+ݢ]ݕB"2GƌnGY D SIy c4[\ԏG{Exa%> .K v0 ,c :M ΐ\4Ի:g)ON/T1btn2%B ;C 8uf'vS Q*:0 ]!h=t(vEPBa\}%5]16oK  7 DO]5>$ b-%I|iGpI&s '1 9 I] ,%N7]L+ q).]^w&tX*Kаu'< aӏÀ램Lٰǚ|70>R#&c*.!{cѠxqp]}#a_GrfUlBҺtyajxu'! Fs6dA'\58NY +\SŚٗ9l)[g|me갯\a/ص`E/UmkPezctb=2mqi)b!XB)rv( E8.AnsB&0bLU pHXՄ^';=wp جia8bU8FüǙ Y^[7Sc 8yZǥ.-DZdg{NuO/lv:PZ'U\FV\&Ccn.3۶*jNclWUiJom.YXY} qXv>C& k:3g[D +8wg=AYb:@?MDIse{XXr~ÕU1}uXZ >,/.~D6-뱚Yh:U cXKdi֨19aIv߅9쭶d)GFԆVηu*phnB$ 96+]acb+ӎ)Ϲrg cuEu;)H i X l-):b-3;"QIjsSvFlj!4x&dC`Gf; c=UKb[hb31)Kh4={z藯EEַdئkYx`-rc  ց+ 9 uڷnzޚd^8~Imj6'ZME@-P9AS̾}ͬ+Ki:LڠL4r(GŤ%8}~ 0rЙR|1~! $ /KL$2UˣT#U˜[to5FN|]tY`8gW_zQz&6wuHWZL"g*B{5ҍRNNL`LP;xLVn Q 05\Ӊ&5K9[&!b+]q^'3h8!㶙TLsCbk"Y% AYdRyj OG{P[Vz>MUz?X Vd7ނ96XT7ز8')3H 6fXP텢K[Gy*A^jVraWR=B_r::ii"V8tt~ t{I0j~ Ylg ?(RZ/x%͝=CLR+VSh;JkkA:H7߄y:O!@q ӜLjAbݭLw d5=®Ȕcݏ.ȬTrHn |(ƿl6e鏟7,.yy"eQ8]f'>o_JՐf2ఊ7 \(r\sKw.z[xvG|dbCsf^Gu t6k,2D: 4{%ʼn+xF.$JhBYā9<1r&H c33-j_^ANa f8rTA̍Bnhp 'pt mj`}WfZ#ZpۭV,mnn若'){=Z$Ou;"4.j1P]7/GKu)$E~mѱ:kQaTM~-+DEFZH>B߇1ZTҠr^PK )tD%980Xoa==M>zM>+W0ssWPkXI0"R~B;w _E-Xy5  ,Zqy3*N HȄ"g# G?K_&Mq8gׯ^M*AJ_i^_֓0hS^UzA%@LЮl"Ι?=}0Gp)8Vse1WIBoݚbٜc%P뤍?M_&=t6"c G ݲQ&PV;fn:ƀz^unjKe74 >x2& ;I:5€1J!ae}9Ue%BvRY_-xΒh1u1g' ѐn˭ &!S=*J/vTF eR9:s::7_yw1 CXfC.(oy׎Wlmbv"@'{+W`GUӥ̕7,vP$?8u7dJ\PTKۍhRTP]ĉҌ|c1vϑ5rb{]4Ճ@O<3DM{!2uJYc{Soaۊ tE,a)->a@eg6r. f%cIBkԺIRλ0aP b:^Af2{tAx԰SOggІN:N=ˑ v(H> {Z5;*mK3,}/jߠP0y.-cÍ?~ ; 9a:qf&O4ήqҞVYx28ʏNNGJ-X\>F"gPIBQb1@aeqIg=x[kRFsNpiES dů]o tحynGʿ8`̭oTt"e``%"9munkV ˍ]/$p"|C{RjSgh ^J' d99nްH: tp6 Ɖۗ,? Cj_lS&XivBv05+SbP/9oL ErVWG[}d 0GL:XOTZSq%Fʅְߘ)}6 A9ddwuerawtX`Qh+YzZcRBn;{gX*:+G3~E%gQ1v0GHhӠEC .PR$$3z'&d :-\jF &hleCϺ;K"<ܧ>KAN'>I\|-ml䰢mɟ0,]-{W5՝HA<6~;N=;ԛ_r/$aF5-_@P GwZ7#wfGdy ?˚AW,NcܸtYQWYE%#Ӎ[r15)MMJ˖G 5OՑzmo[1bS7܆6$z -|75KaJb-\JP-WF0m!"pmhP\4ξe&xzʲ2;bS5f:U_x"YM$)P"=-xkN"~͵q*HutQ:4_ۉƆ+sBS?`~jdT@=j;h M[ ;x_h!`QsLܾ3Y+djKYUC 3͈'Zx(1*9xAfN1#`Kb9Aԏ^CzXu'BvDi Ԥ c43g4YOԎvy?PxKFw}FrfpXb#5J$n z,bGr##*b2$),35 6-fPJ܅:) Qβ(eJϤm>sv19!F妦z/84ؼ(G3,啋?⯀FwTY(X~Êr"~ge~"l]oANvv. ti׮Gb|4-eu2VC}=< ;u$$US?%~Utx r4an/m8pkPWu/>픖7ąC/L&yo&AՓHɮ#0XMLL[Il!Y1O2 j*[RD7ә2U#l]EY+aDwf3@+~v`}6Z>Y| $wuAqzNg&ƾD3<#Rd8sw\wfc(TcO.ZP&sL#XډKuqb.h=}FepH! `X vpTCȱ6DW+iNKML5>{=8pb St1]O4V,ƸL/c{g ڡȤ 2kBN#7C=ȓdEcb^nT ަP)dE)eSڅHTb uƓEu APѫU~|&tЅ1kW| LRV ˽iJ RzvM g?3zu+kcʼ">zvx̐^cRdz`:na--74+bp@aq>퉅y)xha}BKNi))@yB-5-"ITyάD UA`PL|lpO֋ ]>{4SFkZ59)%mXov\?^g+Kݣ 1_bLHqƃ0W0M{ $Xwb(z 1]8pҠ&PJus kbbO[)l ?WA`wG]V|Gipo(40f~cQcXʑ^;|Ss"E 6 6udH; o_ WDuGWBPדiCKS~zHLU^;`-F̭ ڒ*piAT1}4,(uB spȜsf{Dg7.B 3 Ϟyx4 8G $M@Z-FN4Pi:zf< Vl"?g.ݏ'S(ٜ=V)!q S:#?&V>bq2ri(Ų d&߁rX u4SRR, =pDl<> l\k9 6TMv$(u)?,dmO;nP& x3QWỏN9)D(C +GUf6_-ly#g5-b \p%9b+;ZMd\>jKjaeX~ ێ7krHU@n;ִ vMߡ7F=} )8z}L(=ԣ|ڈ֠m #_xLݙ +q/zqu*(g=kh.^eC ;'m ߧY!{f?յ~Cۅ[pvr扯@zj*YaL0h^ƋyN5u[(LFfHI#eLVA324%=́%O5>CXh@K2K1%m-ڰ-gQF2Oرt_hmv'0X+xdc/O]G/NJ!jggd9 .A-BD Jsd)ɓ9ixs#bu v8%@Ɇ$m5kR{w DʲY}BRJ7x_Kz/C係~0FE3{7y*pR"ӱ:ҬZD3˛Z'cY4n] wxʁ&Lo ];,H a3 Ӈˍ*VA  *hE= lE+N"LmzGs>Ekf ,X輹TĽ2ZGL${bw)GR}$A[;ٮf[FW^;Fwm(b:H4iqqz k0y4.}:̼HԣE$Ҁ %keJ(H#zXdth-[a)͊Q)Y3<1f.pl&jEˋ2i3!yDj({Na5^az5.+C_?9avT舞Љ*񴸫) ]J0CxhHBJ@*㵆CoaЃiT'v54Dthfu7{ϾL:Mn%~9`Jɴ1TO   jUA["ECTG<0k~Lhm;ϼQ*nquBm4(7dxݗd`tGi_1yS=%t1G%Odz9OI_QqT;$] ZXpl-^lΓRCL+ARFGާ}Gn+R: $$\?A>FYb`H46a81z ._$wX2ELl`-<FO".D|0 \5OaװeGk2H\3VԥHWW WeخYMϓ.?}1jT㖜~kVFS챕Cz܌۹n38dK}%T٧e8=L,;fغT7|DSbr@5ֲt g$P=aE:UFu%oC`UX+X-M$7p=ฟ) =KF.Z+LJxi;>Hd&Y[Pf4)"fHS Yc ΋֩\\5x\~ypݫ>Wy@^˗j+LԌ)&I֭!]ߌajZ05ۜC:HQ F)zw҃/\0o8@Rǔ+6,?11A\b–u5HTؗiE.3/X{OVP-5b(`Qy7Š qd`޿QmN/,>YO#&2qT<k( *;+`shD{( @M[va>nh375kM?NwD6Kc0"nv&e{L?7ڪE Hz29P!z͔s֣u]/@o,,](|WuH]nZ$5$+`sKale_+Y>ͪt!2Yf5YJZ2Zu:KODj5rf)cCN#a6=Q1rj 924&َ 9bCbI{%t&?\;Ok>>v?.a2o87A=CuDv E![p?QEq%t]OHK,7-2vt3Y6xa&mB mb5\BװmX@ݑftG߻9zUנ))iAeAdPS<ToJ몔TO $&HE jXC dN'?fWR]X.sɷ9鈇 <ˮ\t cw&[#bRn|.˥hC0|d'ZXDK\ה^rJ\tC'u<^u"&%&J(:b4 $<"q'YZU lW1e}'Zl/2}}D2ќ\H]|B"Jd9 6_FDjҨ:\k'2JAn) U=zW53q̆6x(+67GQ[O䫎tsZa:;lvhD'PTfADc3Xp.iZg>{BOo@h'F zʰ?cr^!_t~ӣ&,"(k$ p]1 *IɠNݫ糣.Q6C ^K ] V̭_+ h0!H+,9\;z4wٓiXۖ/'aIaYD0ڏOy(Bb73/8?bOPd$ sVu'G"?~`A7lm bԀݕPlف=yNAGA?햿x́NtU(-; C+U}hȉNF_MHD^-JmHy?<~ͷPhT~t= w '1-x&4aY͹iR[گ䇋måf1lAڄ6W0\3%9`tAqP4 6/(ꭞ0{5SyC wqM"J_Ic0ځT#}u)mt@<6y pqd<'>Y1j}GA#oJV8{υc/",2^A0s 2Ca\@YFr@pnbޱ̾PM7NؒdJ!ɨ$ϲ5,61<?/< BH(?\ VyWaCB|%;+>qmktO ՝;^W;_ϵ};/9`6.LYBKm'C̛ 9TpuweFf j Zv)zGr2׾p]P DD"ݤk|V 7qHW/`8ŜyLA?ɖ8)s }u&bC|xa\Z>h -NrSfw>Ӣڰƍ#!yY8eS~%@(Wŕ"!][FCg=/Pgx'/?>Z_2ԛ-G4f5_^W"xTSCaMƻn;JX\P 2vvyVd(;U*'.RPN1P9$} O'0i@5.M/7kO #A}41:*ȁ;hDr>RHTIjAG} / VgZ %+! =`'N e@Q|ZW!MUkw> QGv Z̊/B %;CEPo%K asN:c*WWc` 8b`?гe;YOUu=4oP=jIE;_R㉴ԗs1D@LD#ߍ.Ӥݥ/|,L{9{udQB(Ծ/!eL ,rw-2k]# o&f[M ~~;D_aL~_JJ`A=Lziڣ@69*5" ۄ*f<#ڀ~%TQ=*D^H2}l!: z8@bjҶkV}I-'`,OU]BhƘה'E UOI>ݖ<vh/iSӒ`JPtHSG#>'r پvx3l1UZgDasxVuOE 74DC%y"A{][w2p1E3O4wງɯ&jbI˕٘&Gy87_肄V$DELo3~k'Gg:bk;rJmN~YFlE+̹Y3Ň؈٤E_sVH4u㵅jF.U7%Nт,VF,׿9h7HP{][Ύ^mi$3^-aeZ _bu7Y~+RSj0ݘ~]>%~Q` A,UeoSxKی @vKeS6,MŔ1[ ']s`( >hk@;3qc~'(sL$T]IpѮ>LHC'};c,P0"2HG ۻJj qGWɏ~ T5"RO-pNHT_ \GOx1O6JrMCm#uQ!\Y{lrWik ;5qQTSqlc;`Hj"9q,S4(c+lHk50CS ? U$%Z=x50\ ? z[ )KP?FB(/ <9~ 4-I2_tNi ;^hw">NTu7) QszɅ H w8*w1#A;ss;O ΊfJo  |MY09= ]> wS5vf 6ŀ͇ :k/5Kv#|=wsf}2wTԺX}:N_Fv>Icb,G(W簶YP$&ч4_Afaa66XP(cݤ-%~=3)#giNvW{"GuZc}ȒCHr򙏳67S.G^J84() r=.i\ R1-4ztFY<ÉXB(F5/w G|78`{=~wx5ŽR(#ۡ鯐DOWZRǹ T%Z)JMj[/D;N 1qc}R1^F6g0njjH +7)+rFs~W $v.Q9/3珈ݮb$TjlBɵZ;DW ]D@h^McZUi3kuj[Ki5ӣAEB Mlw{ݠԯ_$/^PBSa{1@T\i[ڻ9 2j:gM u6˾{I9v3a,fڍO/ {J(ʔAf36Nӣ ]U?(' <ʃ;@ӛaF~ f>̣KF^"X'P*IE0q4$Fqt+.zsɹdwX.RUp1-^2|6ǖXoHVMkQΠX.#U@ aq9PJT2R'e`䁜vD}<W< ):G#!m,2K-qEX 1Ik|qsƐa?}'ԊcӶ"r_uaJ11JE7fG^ʗiZ5%A2R).VX:p<-`ZaP4k D),+h*2 "kL )-: =@J_"$ B[2bf GjQ^4L*hW'}Z(PV9Z]vbmv(@~OT,y,p;`H=>v@PK:21C\jҐwd|,co-*Ls`ՑpP‹#Z~XtdzbʠwBEըԲߑub%z?sbFUN(]++ܗ! -NCԫ3Wt>3i0+b |Ӛۛt$ ?^u/g\wV 4FPe4i;@z['GZVO^ kS?ވDv>Qi| '`^eqc6 tYe}ы Uz-P1h/-2E04WpL$םXH8nq˸P+ݍ`C<oZ@A/?l6e*V6XG2ҶXQ bt)e< ٰqf hÀ1C1cu'[iwb@+F xW~{ԕ'iV .|:=%VHf"\P,<;x2"y%{?bXnXz+u婴~6l$7@O׻ݗǍeu+e$0NL!vr30!muD[1v]eq\B|bG3h#b% hkonJq4/ !PMt5ߙ&4vQz1/U?\I/#8WUu ͩEȭb޼ 1,S\yaX9 0SD,/;Ņ#;Rִ$ő2@)-LZ ٫<BYX iY+԰:ӺQ0  U̕ |kw{V]Ă7Dih繜-֩*kږ$>~&1pxXOw-~QϿS_\7 U]ZQ kkmHc$ 5%17!/LbA a#c 5jwz%mA%3dDn0=:6yK)<8%GxQSR]z[ Qt[#Q9V3~()RT0O#(1sZ6J/XsUIpuP3{yB?SQiԝ"PDHEcCZ]B[EiDAh..:j78|7ܡ^S^>n5e.Ip6[шͣ|4"P8qI$Y@!g!:pV+f99cCeۺKc[O%M`!P_C3&58<n4:їѹ=XDB[6^%8J#D*uA ]zLfErZ%^Z]odh X5/(U|ehAuҿé{q{'&M0ٴݒe | Ĭv%lʀmu}#Hx)%<9BtN#[ * $(z ~zb85jcHWȋ5D6 (0vrQHǾ_֠C$}fIrmv/nF 4=;ٹqYQZ3: y?5v/ Xe9?f, )&N;)W%ɋ<ΪEkeX~=[LSYj_AIv/N}5j`هZOL\Wķ P*7 `~'AoB+vDsI bE8F!_bԨ_6KX)yI}1R}6lU\yo]_{I]]  3yl%eX@_F ;<eW>u*GsVKavkSE:U`!2iLxy.CʸKpzN mM@T"NZ #P׆Ona)k쓵D#ߡ'[˜TU.l;)PϤ92ɹad>(33>SK/)N1-3U.C١%3U2wWa66*pt.z>_Eq;`8Jb99]nDMc'Z29!CXFaI_ `#yL:7"l[-lWAԥA^7ٕ/Rj^t>v¤|-.:0K8Jg@?Qv?P!iqaO\5}‰ L[$.2G$e΋fcDO/pޗ$(y7]T"؆ ne\sD_MsR:%werg8z}̳_U{_B5>_ƱhCx|Apܡ.cS7$Jy3`-̙_#FpS3n2{XBN_T]<$|˵'\S %zAU) uTcoS&!{Gla,TSPmCd$a!A,'26KmYBompb"DZэt jb pg$J#Sz]YB #0jHIiK7¼ +yf)ؚV9C Ô(eZB)L_OI:W!?R ʿ.u^عEO. rt\мҩWZug{y4?yR3`n(4~Lݚ*;:%ay#̓}rs˧|F"KmjpwfDg[/с_{?m{¡QH\xkK9 |dT x3* "8C0K{^ I&#w0eֹ)+` l/HF6/^/vX [:2olmvwXwCxTv{-po!|ab=!~z9.$ !Hd8(BfO^1>}V4BLc?  HLW_:MŐtvPZm3\`k>o!;7:9/[bgK:+8%I~4WQjHRRZLw|$bjL}I?_PHzm#KƩH#-#u)W *\E_DȚ`"{T]&;z5j$)TG"i$0!/Ŵ"*})`S԰9wfk =Τ /,R ;,gWf%Y?Ls KIfAz@8[/Hyy+Y Jz%5{ & |yо)"! EtUo/[ArߝɝlB<&Nrn.d&ͷޘRLi.s9$l| [g~ OmI("ƥU-,k&c %'KV]'zWPm2gjiiİZ{~vx. .(;9)5sxtH0pKx.;*擂Z, :~{r$I HE&L$nH=g&"m:+0lr :141)}=pzT"[;o$Ktph @+J4kyܡ(*iC QFvnJ|RLvO E(^G8-ˁN @SVJuq4b>K<ǐ?j^lI_8~B?F"rapD4C[~+bsN b,k{s UuCtB!F Ǹ%'-/lȌּdֳ$TTl'Hvx7?{z&0U@E@D[m J[\G7mX3חê:?l*Qqm`LcbCanDdݴw.$JwV0݇=;*bhBHX{7vOzѧ{4p\q指 fp0J<#T3IL)4*s .LFN}жjN[(F<0˦ ԈWpT$\Be,gzӞ֡mvfL(޼V|MկB[:0l|*KМ#fRIZ#(QML'W֩zm8X0 }}JL\7n~O8B]]!R"2쪳{⪋%{`S[j16s{tl`ﵖWgEfJel]VU`"$D"H"^|JxjPl6%*>DCwgY`Dͱ%>J)CAWC<>fRpi \PQqI `~+qZ;s|UpN6.y!5#Ǒ{G'$ƒ{;sc>ȸU)?$`,? %zaMNVٱO28< KSVT%ݧX30-li"29 \7br`kÓ@iLSõ 0Q6I#x-u|_Jak(ooH73kܲVtϓ'W's__ȩe0AtC3_2M.,n~Ca6+,ZdȅySUozfZ< u2 B|}u[ٮbQ-\:Xbn{c:f8=ܿp1o44諜`]/6cտB#E/aQ_ι 6˔q"ڊyn.9j1?a(jX.H(Q~PNJ4))"Kt@y-PX6͐6T/UgD6e *D*@˸9>mP ϳ 憺ki;}FH@8>KN"4;& }W&ͥ=, ()}BbԄh]W@Y KtǠ'Ys[Yfe]+ 90WL#ӀyźVBw(K08fCv5R80Dni +|bË2'b^>@[<8h1v|+Bu۬ ~ѐ5:;|D:_Oʍ9]QAPZK3bh)(GQ9u"?adI62FF|,Wʒ}\\[}XxEU@8KhDL?sÿ|T*23z)"A00t1Qpš|:4nTk9L5GB79 J6W'X TR}$g"HTV빐7C5zd$ci>,CANHTʅ4[y"'6G1g@.ErdZ p yW[}-7R+]/$J0VІnWPYF,L1~aWiYG ױ/PR y1: -(ٍzw6^1ZG)}Ȗ+FL 7rLx{A^eəۣ }4K%-fvw=:ɹ]*Wx BЏ^?LTug0 &-nӪTVc'`h^슠(Xi)я[Ҹ ʥi)Jꀛ};ą&9$ MRb04\n s 0,5hlX&{ .t O 6+k*SaOBYJ=7VGhXf GI(ka.^4VWoTVɞ,e#UzEz@ T0[5/a^%?R"[ , Ȃ۬+߂ʂiK┢*S`8޹bR"U+<]ٴ2,Kc@"z|Bfg7&-"ly/M Ct) atp\bŪő-pV3~?Y\fibͼ6r)4YhFV8&~eSI Uyi7>]E4Q47˪ )1]BHPsY!>@8UvVdw8Gxe]=S {?nJ:alI$sygGp?&E4N߅아9f>,%tl{Vf4ty4=&J,mBgK` M LoYPF \ĒE>H omnn}^ǫ`<(U2N8 ǃyв(h5ug 5Vƌ] Ԃ VEb͑6J)v>Uz-d1jY6xk`ӋEYg_5Bb?妟.jgKo JcI E@gx+~c/2uԣgp@^0W#q7 zcX˜ϕ1#g[̅2h`` :nA7nY e+|wTJer$N\kJp>546WK { ̥b ׅ- c\>,X?au֔!IyOAÄ`b꼼̅?#p7a>gY7P vO#4oG ?WcL:j#)T{ ({@{ȔQA55wy#zS {`e[e;]; IRk~agjw}M[sgdhIEs;xZQ~( J Ru;h3ٚyײvh|PnNϖHT8lAF)le5skGTsdvvnm\kWy@0;kI5 xa"ΔĒ;u/ S"#cdfyA?-q0s/?eJFoCRB1+5]-V3=3qv `ww 6{6rvZVǾ*$;V@t1>ȭ XJ }$;)\#@1NId14,yL9$|<~SĖ: %e57$ 2]L@d+)Օ- Ə _9nm:{z$,bHJ# Iګ5ׯ"JpUvA)KRȔOnxr;'vJb0ߧrGv y ]uO\!eVE72UH/,&ՃK{ DI{ee:G-ztSp ?(Dg%vhrfUl#% |%SufeLTaDڊȐe-h0IRȫ3H$m3ψgC_R& ꄖfIrJ&(DNf̸oJ זw6g~I_vOHK#- @_wzO\un[=ބ-w{ "ܬ EJ2<œzH o/ը ^~viJc/B;b$rTaG# њn_Bj.Iw\~-Ft3Ag0p'.+~bH94$Uޓi\W}G9;rtґ׿F:jgc ]wI s*3{rd#B67Q:{q-YI!BIH]fFMª#3Fvlw_9x`Rzѻ6s =/^)/{0DyGG#3x1O K߿GEtJ^J3zMY:5 /@43ݿXogTJaNkED/=!'^$ZP"wn"3h&ː3##/ $*U/U`4ղ- Fӻ<# =e =A} Tr{"Yh7˱YoiJp}6U(C.\mϬ/9mRr"7+˝)aߋA]!<k${z@] QbYمgMq&M{)DL=_cn Ԧ h[SI8 ,]PX:vޡM=J XZʜxϦ^p&pЌVژl5 ZSJ%؃[s=Woߊtbj]($3>JVlyᬟډ50Ha7EgJ3?'d/!Enl{6SJ1yՑW3WK}o ڝO!|cB\@>Bz 5FR3bnn@ K5I|"n9{渼4 m{M@<-R:|z̈i8 }NM8zgL@jJ 2(rU0V7J9*͓CSa0*B~A$ntX6_g NSXЏв|NmU_"Y9C`}dP<'ZDŞ4]Y;ivV+ófce߂,mϛpB뤕<ő:g]hK5%}&l0^)%ɽFe#瘟*WtNnbOYеis˜Ji1jS0 }#Vh^qC .'DufHa;]٠ݟUP}`}r2R䎃toAi#2BzI+T 1iݤB$1ۧ6m6Ձ/'|(#3)sFmjVvIECY"t +Nbr*8,s" s@)=z&D'gAf<6\ O"d FɦQ IC]Z*DU !Y鋾G ,TSo !Lͭ@-Հՙ#s[Yk&y hDuBppQifԽ T{\_! ;cYԹBq"Qz:iboT{ڐ~kBꂁ-}J$Y5 uScL KGלv XMý'7p>8ExGW(S2mR&JFXٳ4%d o<t4ϜѬ#f<"IHlkLq v N&^GٻzP_=e")F&V3w!esq仒7V +fƮ_ C)8'QތmHk6 I 8*,|G3^p2)حb:v-?hjԴ5CNc}h{?C" b43A* yUF?zpV~2 {A ̫uQwOMkΖ R.tr2<)O^.m 'E+ >Y'Yl{.m{C&RP x/އu1~~F`{=*4B<m %];υ +1_0~7ފ[;fY`֥ۊ* ?-;xz:řJ}/L3*n=8I'?`jKB7@G}ѿel:ݦU"PFD'Orñߨ37aױy޸_Q|bRӜ I`Da|S΄ctB#;< ։Hx[*c)TL9,))vꇵWa(=o1,.Y̑ʯ=LlK8b_o5uUβ  u8[~J_I`\-TI# y]^z U+07>T3Y&Q̥]_H}F ۊFWlmMBB|C(`DHM#0ʮK!#S b-RlE2N;ia7TY!#W, 3@5`6ބJӎ@~_Ѻ_DGG=l\v&`o!7qs|(;RWW}\ɶǏӗIZ߀BqU6Ro@b߅i턬'{AxzCQѶA?.& F3%R=/8\EW~FM']|+ux:J6HjLi%"&iQ5)c|L;GqDz:; !%Mn^eOљL^627UG{JZ#Z _s@s {'ō:^FI>_v@atẁt[F=50[[Bh] CBV蝓|%ϑ{d!,u)`ɀ ,u[6*)hl$烬: P } Z*.W긷un[p"2}V_ S V$CHZ'Iq) ߧ ;k=:{oM SYDo$Qy8wT 0lpTH4X@Y [ū)-UKݿび7uVgb영quRYhQZ~WIx{Pmp&KyڒTD rTN@m! Atcu8,e(AH+ELVvLkɒ RUPwKuҌBRp&J-P|^V5\[.h5h/X0uV;dg%dd}{Ƚ%mH+> sb,P9jeJK ~sϜJ{=y:mM&X7r9#8& }躹 ]BVmvS#Fw7==$J{vѧG!;44/O \_C.^";* sNoA\r[YdADLK.Js픫lc\5LRQEXdӦW}ÛJu|߂i ⊔xccP*" fcU7 Ņ^zMq.V*dhQ\%qXeʫ8~&2\{ E΍ʜPSF? }cLJ:{ hc Qg'6C.A1no}f(`]!=ErqD71d*9vN* npŽAOΛ6je!b@Dj7@ ݲM/w} gDw?COV3}DHQ" P!gg&YNhiOƲ$u.<ٻt:RJd?xϯQ?' 56Cf؊۠XۻO9;tPܑ/]*/1 m8to€A: sku fH~s֢Ux?QkW 2pZҾ{OfDQZ1¤<)c +>hmȊăH\rC|$-y^O;aMB`{TB cfMSZT V06|C03X,aET%2KM\`'2Cְe!L3R$[qд՜ك\Upt_)z>hj*J:NA4*`gԥ;ED*\c~`1. Z3{Ou)>8L7Nz 1^xJ24ңVx v`SA I(f:Nk:mTQ] 0E"lw0v6zTFIz{jXbvQ̡,">E[^b8Ӧc=DU(pVF26U ؈.x[)i d&KB2GgwL{+.v e],t3r6mBc?K|9Hq3Iȇ\⣸30AS[.˿/DT.O6Y:?I} Zi 1LJ/shm1~L"p؆:XuEVYp=i5brGM:(Fd<A$A_\(U&-C}+G[\0Tac&=h[#SzCau[ތjx_'#&a.0mwoGSR0&O@V m =7>O k_k<<^Ŀ#߮42\*ܣ\F_p6?~@q&n1M)2fJb̅ cw-Kȸ%/\fE `׼ 8ܡP?cR>#+Ź h/PQ!yݩxG<|-S=o\ôy+%D?5YaCa;W{c#r}xdH=@CiS}?rz|:Agߪg"95lPL5q85HlOXZ6\Q7"9@.1 fވ媻r;WIhK0EMʇ( 8,T;L&r)r;8-Bb,-ָrzyNTd(ӉYRUTjZi`Ep̅zjh׏{pKuع1UZ֊Zs-1Ԑ?\=!KPjI06uV<ӟw R]=sG  MaUYڣ^ޢyM#'/tkY|xYpKX;€ ^UYyÎC &5}<`Dd_E7tGLx% PT /cD\4{=Ks)*<΢SkSq>%[9"̧wrd1[cӣWCb@[tM>#I Nz61ϼpf9XQ9`WVZFB ͒^|W#<}jtͷjR\9ϹGrA-kO L۳u!аCSa9Fk &7ޕ?h8Glx/$b_DucD[O(7cO}z6% EpĔ+L]O+z{hSXPl(/>`D`ֹgˎbC)Gy82!pz՞.vUown&!xm0g<=OPMYW7}uCFD:2ba9#ivҋs.Ɔ #O0ڞН{}J^isosͬKѽ~I% ":g_qu}&zޓ7N؁KJm栁a6^)<\F@578s;^n8g>F! 1.%ׇ8Nn+~h!BBz'UɴT ٘mb&KZt vkcīSe&">]궑gK$ؗ]W,KzZCDIQ=`Vf\ :hZaHZ7"A22@quv %qΎ3@^NJī*7©t=>ԣW~3:wC/; e)d7 )fBJlRJE+v/θ@$t`Y)VO62"ڧrݱ(F1hs@go vX+ il,`06\,ggBҒ#4y59끊`b qox+:*a hssxfY5,Z؋b72>TA9(zivsGgb I-v|bNT3Z=HffP=Zc;wokwQ 5Ć$u`y8|,U_&'@|B*,}9\Ӌ é]?p *SƽF-EJ݅gi=4|:ݵi ,><(qǙ@؀Q"=ŕ q yXH`{Yl.;hz, pOC[I_# FpqZS+xP={^.ha*Km;/ w33hmYϦ@AbI7~N^_\"^1 髅3ZZ@?n7rBڱ-ֱ 5[NlPVxtti,`ό ڠbWbQ+ALz:.P Eec98 )-wg+bJ=RRhx`pq?0Dlub|vDJ;f}Nb6&֞܏Pft81C*AQm0tSxմak/0ds6?W;{첍5 e j6<|n&}?fozt@.BG7?I^|t>85Il㸢aG18{YHE np|i_pMELHv xӻ])52)~-M~᳟Y11-Y|\6лeb,@ Z#ԅMQ>rf<B$kh 8QUކ0zt QW@`kՁ+}?1Y#4C9HlrMM!x:@y̷HhttwUCfMc}2`ǃ:JNv7R<'MxEq fo*yǹZQ c-ln %eFMڞ-s\5D !}yq}A!?0W>}yـڬD9sx@TiT.p1AvWi^ݸ@u yBk|<J'p\AJM=FoG=mWRӾdN d.YK9IM[SE#J o;6.F\ьC tIˉg*PuTR/ O,jEƾEd]bw `qϔ?\D|83U,`_o$yo5ZqYo[,FTVs(5GyaSs/i?Egx ޡ2pt}X[핾cc X&;1~])?L]{M AY6M%#R?ɴFg7-7BR33}'N;ϑV^"խ~*h؉y w>^^?Ⰴ7@aqደ 0^3_bD BP"za&Vg0&[ =Kt)CZKbEsfNZy=?ZsIEqÀ$7GTapp5n`βN{Yc/{6ٍOr0)uQVgOQRA@'m6pf@Ab)\O3!d̵$waXϵ9EB:abMR˝8Gg)8ޏU`Tt.ʻNsDC9(i4;dΠ!^w݅M49_HrXQA\|\?!Icv\cISūE"Eib_Z~yRŨ$gO׊Zڴ:FJ:F[q!A&w<uGdRmIcJ :3( X~ܶ'$t8^53nG*mX}u>tO$Mi 2%o`9P\7iv:ޓLJNx8pE !2;2DsWZQ\#KDD8/7 yH*kU;ݨlTer$P:r;QM0r86b h7xh,QϪ}:Q'0x^E?9\ϙgq$_~FZcV(LvV nv|}J"bK,)\ӱG!5W%&{,[6Ƿ/Odž5ɶŕ5a9txѹ)r8/Fq?CSP)ЯtbBcWG:doFhLrP@3"=Y( fР8'$IX7>Iv # c8 ہqe)sDdĒ  zS.܊\>wHCQoQ|8j. bBnX~Oh; Jqب8Jq{ǰJ{(9ymg~q>C9!#V7nBRɭ wIJeu8AMʱV!fy?p(8I.-!:m?'%\`KD&}ЊF?[\ ; #!_.SZ2̚K (0SD%-ZonPs"\6@p}~~MIz7O|r ̤ .)ZĝL\EGw u#V)Ϫ -;$ Kr'nQmsIKWxo4!T&IŠR-ƧWg~3F%fVo~?2;~#_%y:LOj1U]Wvz mKN Iía_F(^W &ѹ<PӖ^F_ճf=s'O-9 ̠vۜ=ۺwiҳ sJsmvl=8=D!+I3 IHR-B$KUd !'aV+H}W>a.B>ݿs. U ;a!8KS£ePN{;}o{KmL_Iz ;ĉ31P!Ӊ#cmG޽2Kp,[KnʞPxxn*rLfs4c$.W: +.|(kG7Z1ϑӲMк<WƕW:!i?{]otum˩a)\)gMQQ)` ۩1@1:Ø8V~?G6XuT)Hކ`K([';E4k)EC›(=qELayYbgb5'u륁$z-*<*B!;o#JE~<E{>cJyrl`RGzZg@wj= HEȞK'w5b3ͲВ`[?hל$*°'-٢@8IO}*c@NQC%s, ay6k}I*zi $DD./<؃~u5&`B0^B;]r{d2@QRPajhɊM`UNdS,*1v#Ⓓ>Mbvty'D,_A!@:k JRhf UVp2Hb"&!m|f*[!]5qپRB<%>|뭺̀'AADChU,s%Ru{H*X *e6Ta 6[~G.}Ydͨd'zϷ{P=`j.XO8Zll=M1T9;>A›{ L EXыऌmq2FzYjqv}lLۮ>" }F?ҦqRDJ0ی8a-wsϝhnp]>r}KPoji69CX;7椨ʦ>4D8GS8[?&F](r|86Eh~vD ,?: ʺ6: SgȈAHP/8u,i*C)e3zڃVLc\j]~UaG6@ N \8"sS\,IJh<\\f4D-pK"*׽5; f+n*f)I o:,1ڨ ӛ9;zap78L 8V N]/x2񮱽r kspt`\(q->fGNnf?J ?A[W LW`=᭟+DIvJ)Idϕ3w^ȍ==P]E,Ҝ`?Y@G$K+M.S.[.%$5ΐV: Mq(? n$ %U8vA5pکlJ89>o xuoHnfR:A+ dFGe439kM-r$Di1,3xa'k<)hJh%s0o V4#Z V8 p3܉V(YY #f.?괊@cI_nQ+9d((#< ea,H ls7ˡSl9s+J-4&4YT0 bei r9[uUQn/;έMؕ(K !KfwX^Ŷ6' sB}j{u.=4]2PeR,94!S%C5K*FzA(TjՉQmo,$nmx yM? n=Bmw"s- aYaj긎oBk&.,GWUG[0>9p٤ykc TC4N[i djB'9rHW+=A ޔ;4RP/u:mEvYhK -P+@B֞3r$9+h`LAk6U⁳&IozO_QV|HGx> ̍o TNA!+uT197!mFˇG}Fn_WZ6KF p"L3WK#;7D%׳]b p]T >#B)IsX3͇">ʚL֎Qmxn- 8h􂧩$~2"3e~R\&FY]kA]=KfF= vZ9:\.G9qɛ^F)(?0I5v$ Z}97佁0saQ(†'9;=xxUTa`ޤ{N@_p옃M3TW3xx߼/`_L2JG1}DrQywOG8lmg<+sIgEqHCU;RyC84| :XT2CUsީ/K$P\}=yO#*:6c4¬MN䙺[ ?ηl r۰'h'0;#U(v"b-֥.b~1V#c$#*)HX~6SB60Ӹoq,SOd]J@qމ ;~v,yIYcR%4OwDk/f`%~SKq^(F`a;y ђŝ O,>F8%YɼDRkyb`}e^:uvڱavt$C8ާ 56g;⋓ {: uiؖKb y6W+-fAذY=6NUÂ5c'> ܋)GVlВ}+Vk%xэQ{tӠ>)Yi/Pk-3=3 g+6U5? `z@Ӗer\ Ml;LrKS(g-.&)6I̟5J\Х{\PCKG9Z6**UAo-P~kR4ySo玀 D<~lg"'||oD\ \Qm'*U _ +Zi@+,}6'rGg;Nͅfsk63D %^р ^q~h~p t}YOޕٗ KDTdLg{P~>!4#Qqk|T[tmSx20*5u6['WMSIzk \_EhJ nI;3'oM:3dsƫ.cD_eă4Hj U\YVtR̒0mfHmSx׀VB&{`|@7ͩNǧ.> ԾgOv$rjdLLM0~<^KJӖm&&`gR=\j#8m&ƥ\?pvY]k.̭<|BhCW%X=sW*=.7Pkwf&wN ?XZ>c!!&,OMQ}Ai K <W-}ֆ`u&Pi SdկZrh1>j$%3I=,'p4 §B0|CroyE 9Ih`:WX<8u`PSKK%tl.! V}ӡɞ"jyT瞣,HM/5tQc7;$x;PI8Qд^3ٳs9XOȑ%b}Y!>pP Pipn~u*o: S~NN"bгT ?fQ>Nh8;](mOFil](d[a1{"Ney{NayVqd2ע݂K}X_TGUBqn?;KyI]Dm j.&"|5K邔S7(;j;s5r}EQUE5;oJc4}1anHt`<ױ/F͇YdA:2g{ZrR MQ/-n u%( cK4A+`Gy3j=X>"0E Nc87|Cv yU-! 1hc(uLY sY|2oYPTA5<΂b렂?_o%nWrfQs]M_d/lZ;Wa<%]TE ?^MEzSw h Qkܡ:㒏o4qbrf0 N#=i@ 5̄SM"7Fר|q_Lx9z2ԱxA4UK)fn9Ra*qPMs{XTȉ_qx%:P[w8ݒ2yp9R4G1e.*/3ǣOlаII棽z*Ԁ? qdKd_ENv6\8&񾑓YjPq660 n3 Ё"Y#M.5P6o51[SVvw>Pd#|vY68)rP~R)w{WniY}m'cz\'4]OMo~my5 mU*٧UfFUѓ+ ɯM&JO^_G^zo%͜fQ^Bse 7'j Ρ4p؃眷G2z~rjĜ{(iHX{8OE'ZhS- ,6*A.)@x%6H }6ķR~#)p7{fR.9i蘙&q|J(֪xjadIr!dtX m;٬c8( {JIU(6}D3QADŽt,;Z/DZM`aM\i% b~~(%xS:A) IVPXv,ӸܴVRC ez7SL~n T>x mY/ɻ\_8|j6WLj%*: hu⿟A6f( &l)N`D. VrAeMnjwUң+Cj~mܔ*qXn{R!~G4r&>Nm֪H`!q(\7/5hZ/>78ff+?6 qm.-tG:!6QLb]nDLWy2VB3( 7/&c5E(|`seYJuEbʓA- C;'e-xrJT:l6RwQ {.W?j>0(\# '#AQtӌO0\f+ :6ﶹ' r&HFmE}4W&u$@%)]?a1XO-#=pzRj7!w}HSp;Z^q;ViJBOCot3ד\,oe {.,+tr.Km\+SV;SF6eOI&-UhǎݖYp16@d t@6RagAثPg83N78xDjF6{o.5Tse~ [X0.tnf$AzfgNCUEP3&XY@3Gԏ/b^* !ϮBlj$4Ymfvg1ui9dvFXЪ蟈j^QIGbkU7oML+[Հ p$Zj}e}R*q%H6Ĺ<@-<6F(7ԡ]hT^Y7D 9#jwQ>\ CG1PeA6.aSÂz5I=ǭ4nE^N:$]+kd^iO}wHCW'lr\*}Tس1wIU3P?UOWx eAGújC:FTv )P#e BuQX1=O(u8Ka8^V.gNf|a2$#N:-X죯2Ͼeif}Iow ZeНY3KDA'.,$̒rZnϡDhZWqDfn\Sm^G+.߯?G3=JiyzcK1Uu0٤ ! Rdi\(/ (1ޢʹ X8iP{ oZR":VfE,Ŗ3M՟ uŮd)xw.8}`[{{]9jmMh1) `&ʎ**zt@;c}ӓb.HDx8i-+5\ 7MP||; ",Za?E(9n5> >^zR !jFSw 4PfF)Uqi_$ENȋTÎyhr7}SEfƻ2_R]ZyE[b:PO(0]4T_^mbDa]ƥ_MMpyW_[`RJ:JdOJ~hM"xN5j>Witt 2~͉.'"dbNuۛv}5-`q6r_gV3@i3N)e녾)#_-^׶_{`j#Mg?VN.eX,NF1f{Q$"B (ĩjkwm0$ φF5ݸP[@8{Uw>k Q6FIWi Wg )9# Z21ս96hӳތИgNP?j8o԰g64Y~Y,6"qA=:Ժ_wap_)&Lw 6:Sr{!3]'5}t# b/xq7+m3e k cnr^y ,4A[ > &:' &42Lp#?yDuF#`95MGF`q6E&prn m;/_F(4`Z6鈋8۞K,r tq,ίia?Trw]?o䫔%b$#)0Qd}<u쫶K϶UGY# ~2yɯ?W(w(lK?\;M b7,b j !7j [ u)):uAtCqmOYmqkS\% Z12f=Z s!K7mlsIl~H3ά ɱRJ!܂NjW',Ь_y9/>3x X {øeF>%7X0@}6 oO*b߶  \f$P-#/_> UqЩmUg?tkλm5%Q ;58t=x\9؈ q7y'k\m^鏱t]aIWL%4JحO3# f| x2GxeٌpC.d [^XP1.S( 跷ьnYs8 ;Qb'Jun/F7bQW`;BaV΋п4Ug{IrnM=0M4"1P kciVg'8yS'8S" 7t ުQޮ]X /CYQ p1'_ƭmNC r@P}IA}I78{CR@ ̱Ud2bNfRxNm7YA(ZރuϞ) ЀNDٲdF_\la+4:@QFөZwn'yY 3{ bQv,L b.v@?^jxøifzĂ[{pb:&v wN74bm-''!bC؁[#=?n)<+~AݖYtT\|# [)׭> 3N۴f~L$elL.XD+["Lmb 6QXL0^O/6-=L9,WLz޿b 9 ]ؗ,˙ H01oPPuOI M.;/Tl" ?F팫]YbZ`uVfPuTNk۱)8Z[:sc [Y鴐r4`23|D;<Ԭb^=H?y'_"8^QM= "뛛;< 1mĨqvC& s u25Ia?-`pΜ-CDhG.-wyoE8"1'M d%KV><{Cm6Cy?<$>$ljKf}%)V{A+ ]5OO Ӂ= 2zejB& x=Tcꬉ6CͲzv 4ݿRl据_bձwN5 rQý/m]py]҅s]B5a97;zi$7'ޜ M'0 vRhv&F{!u.x(F,nmț LrYYl,7] njqif~->%R)lleo4`~ )ܘm[.B99.X^żR*F'QUI-iXi<7n}*K0Pz7(?/[ECD%`}Ͽ~;:.!˘F56[w?'GLc%: 3]Rn\gq8-v {DɪL}u.<ݒwR#{Nqq>I+ΝDd7ϼz2'gsgR{Mk GKr=Jx[D1@X=M03:QUXdA~|KS6>^Ԛd^hlƸU*w57qtwU#؋H'RyZ͠ڶJ`Ǹb=(8RjZ~ fmbxȻj$ |su?SHqA}#PaxzfoVw5n6\ \^qv6cH0Цi?e5>JFᾞEoQXAHuF~ꦻ;7cyz#s[XEqvڜ$XaM9g!c3Z.cT0Ci*a~wiu $KX[0j̙",8tjlЇmqѾ2^,1㽀 zL9E9W".+dэAjӅe]V_RmA yA)h/ښsc_1fR(K1)d)(~.;?'熼$Mer! E1o4EDHqv%gQ K4&UD7!- ֜ku/Ew+ Nj2N^  * 9hZ{VcR?P$q鶠h2Q0$4>3lQlv֭ITxk;՞`G=' fw*@fsGTy7:pV UFJ|'21$8K nCs̋_ dQsXnB 9ϝ88>U+Xt='GcK9jo4R -hO関GH hfayxyp"XCX [G2n{ B0'CUBMO?R#¢#k(5_e؝Px:qqv!^V+/ ]9`Ëj_Wc);.+zF!i l4F^=ϥClZ5f4uH紉xЙ}ƷN|jYaT%,Ddf-N nN4-}@ht RO ,,vG$֩_y1UK!=ƞJ %>8I4 m++J]ݢqb>? t'.qUα` 8\{VAfsSI5{'z?*EJl̂#C/^dXL%M˩lfgvf vOHG)<4  ' ! mh%j<(` [C#N]Mݷ6ON%-L (曎(b:Ϲcw#} Ca! 2owC.F_EhpGwK(aUֺ5do#$*EH8DX+4[AY"xڈ^4J%K2կ'y略;ƣ+ tkl @dqi)ػ 7\!BbTVGR%6B˦E~鯱}55KUDޞK>eAs"1Dm$XP%h,g&/XPCDO uT͛=7xnyAg $&PfIp%Mi/b? ߢFowIVgv4lt-&p ro:cwOTç~YaoZN1G…Aq82RY*QV i; ;Alޢx ePxGIBnH{M|"^i7OWPm/B@~!QA-~ k=hKG7Ve`|@ A)=[YĵE:%avX G13$[6 })k-po8 @m<\`[bl.Vb=s~1bap8/UJQ*lSb~[">I3~Tq:Ci``J>`Om`Y6.*N$c|B_护4->2 7Y^ nЪ@=(މ<* L_o.:wUw>W)nn3afU6І?jUyЖ kqA>,]=4;Mm[X1x~ՒXJO|/ #-4SwnAt BUӾ k?U|1asGK6RFѓvBYǣ1(%U=O>@%CjKORd;cј;m%6YOR|rZ% 4U7U̠ˮ#[BT64u0=2~޳*g8.3-җZcCFȩ91AOѫt:&mMp݅w`VYpWSKФ$axֵ( o7.n<8m{'?<ΚIW Fsѻ9/K vWIҀ&عCmX-fCz'-T`=~έ;qb]"ol B' Z"W80"HV/YޑAlQMH g]δ#WOhO.c,zkw8>W$g"H fFfwe9R^cv&TcYܳ!CTl{:pNԊS@?2,FV|^~$3T.2^9<ûJnEE9iY11F`XUqޗI=$pRbS#OQS_a2/e9@ֻ}tPNabfx<>JŹp [à =6M9jksyMq%݊/c.RBM)ό\Z(M 1x}1M:`UCͶxUifr%|lI"qٔH4p(uzQ+i|oy@w|^uuD܏.ƚPcm0%ʥuuڜ % 04I`.3BA!uTbkc-6I̸Uވ8C  e+sC&#[‹8T(^ykU4V޴tK5_Z[E)=r$Fi7yW)7)keN [U(:InjTg ӚJbɮ09V$ڨ5ңMO"4UY+NiQx6W2?fM"Ht$ܘ./;fRbC9 m(?;4eUQ*kԏH9WA9a}gZEvG6}WK$<8h0KL5(sEBXTo.xVۙpTZ{ /l ZrQ:QupePLoLtd`f]fkD j D9Ejh=~FhVa$1U~888ʣƅOji*d!'t|rC8,4uɓ-ꋉ\*E\pma>>J f\k 0dc?ٟŦtH$9ka/[5:%T AKZfr+N+ ljOO&ړX #KF8syP3 )YzMWAWwVdQ~>F@CΠzYOB; oWX]:@Y1tZ2G A9Cy䤒N<`6@F|0%FC:5QPD ?ȭci8.OB,ړwMi^C$ɼ{ż,Zbx{`$DֳL{7V9%zRFACVln2A@ @+5k-5MD꧜cTԜFKS 6sPRe~X=N·^XLniA!m{]uS)w_K "-/2h1dP.I4p5FB|xr_xA53tC(+Z!U*n *;4^Z^`K0hsTGyPk0I I+߶R\%"nD%IB[XX&bF!-ZB T}yDL'qǺa0V\v9Cf[ m]C_l goINW䑣' v ; Qpm3eB1-І$RaIzAc\2LdqjB(}hlPٚkzfpNy֩7PC~8 8C)!7)l2WxC% !@I$&71#/$ojI:6ΚiHUɠqu,wd(/"K6l6i8,M!H֖m J qiX!.L=_݇m ﾐXffD'"n;stvcd4{OؾwkFWynD&joV{z]HK+O]b?؝6GQA jcQkm/a|vJ`Z½mWnO^:9G ¯nF2|'™dKS>?3 Йsڅ:@DsJ(ۢ %N0U[a2yGp=5SvNM?_ϣ:c;0Du^ˈBT>*4iGY@1赓'Y1(2wPC=R @fHc>Tmkςix䍠ȍ-L-D0CPxN;S%&Q΃M4\!ОJ38)n_a w]}I6n-!D]%tno鸫< i' œ%uX4ʊsx&^>'.I(TV3 ovQz$5N!7Bd;Ph#;[,*_rYН:@E@q?$2ˉQ6g3B??fJZoNER4a@$|I =˦~;W*a\灌xkB_@x&512 MU"jzVb 2Po`/*D*ajBou)Sim'JS Y.A60>{ĺ_C9lbqWJSV:EcU0- Pϥ=7 ipIE|'(\Ι}++,7.i>>W иVmd6î}='UV\">Hi^>h CZD? NWǽbb;܌@ Iu La6D~_<\].ARͭnեo.ûskPu8GrVh$F_#,o>0*5rViL3+ܾONQFA} X;0[9y bDD OoȚo#PUŸk3ؐ4µ0QZN\OWn o<|5V@ubIYbѻ\x(,s@ۅDTwzڂHEJZH-[Qߣf-5|lBt2S%> _ !wc(Srk_uy9\ltj"Q9k[Py b:LN˽;( @݌TAC{ϥm+BZJ)ܞԱ#!kX(Tܻ-?*@Ulht=+/|)4:b87㨼>,֏Ye,3 ʕZ9Iʵ@F @8 祶Î?eM#/̲/+7 !Fb.@ |@ьλ+AD,z6,Hƃ w3M)[FncuEbbtD?+~o?\.2%:Kq}О.}>;_L5t9{ۗH[/:aQZr3&I3anx&.?a,;а0N9'KsDyjS ΖLݩgYu{5|0ٰC&IM.#ў)b&U.ePDh\ 3 LnZN[&Ai>aVDkV^o@](PیA[ Y}KaՄچH&x8b 4^qQK 4+M#F-- or1BstrpƋ&?ZfphP9L.罌6@zڀLԽ~FZ%^*<E݌2FR 54?NHqo Wf.Riu^L~NAGQCq{$d'Mlk١)D(ҸՔ־{(UG+;upUܨB Tjp] [ tV?/_+NVo5=.,0? ua*rL ps{(hMrf8r A#0d\Տ?JtRwN"959U߱dɆbqnR`;k3qO9\Ii;~7i,ϿLx2Y!8$ǦiwUh8{#|u!Z?h6ZY"U /^s@ay@&?FZ27tv:HGS,9(^[qEM"tfD؂OWtj F3Iǰ[L"|EB+Yط/K  YZ