sssd-ipa-2.9.1-1.el8 >  Hȉdp U]ࡥ!8¨W<;o뎉c]tme#=\^@ܕ\]" CAP8@:hOƐF\b@b5"뇓$|IrBP+ !pΒl~J>ށyf80 ф pb|Ը[b>oNs\4>|Θj!Vu1]?`%`2b3i`<W/JkF}$xIqظ[?/EREY㫄-*-NPr m+u<''B&  #Kz\.v+&'*2fHnCZJ"$8,c^gn090Z22loW g8wL2JtMa$Xq쪪t!7WjX~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(dp U]sZzTu"Kf=LwKK%mAIIʙΨ9!gi& V9,>ڇS %3ܳE8sowS~ՃK , c`ޛW=ZgQ v؆){4R?u]-b* Qtg}v <a>k! mPLY89Y` 'rkŽw~hx-sdIx,9bxKi_XVnBW56[tjlVnN>Ymv@\NJ2iRi;=j>V\QūU`\-Va^ƭAx |i\ʴ8vOi5;f{TA\b#a}wnJ+Al6 8Ø쎵|OpxVW__x?q M|B=K5&ǼQ- ܨ>PD ?d   4 17? . L   4 TGpGGhlq(89@:h=GH,IhXY\]^bdeflt4upvwxPyI Csssd-ipa2.9.11.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.dխaarch64-01.stream.rdu2.redhat.com 7CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxaarch64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* K"( (AAAA큤AdՕdՕdՕdՕdՕd^d^dՕdudNdOdNdOdOdVc2802a5f889e0ea0cfd09cc6b2c0277160519304d894790569a0adfe8a90f4c301c5aff81ac79fc2d5e1aa1bbf0c4299b8cae1018ce2b43db181c9760af87cc48ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9030581abfd769fc372a53568a28b95f67e95f389a0eecf1c8c928fecf3234c0672d35c0ab32f2ef85a081cbdbb8522949dba3fba210b91594cc82d67138466512fad6d848e07c20cf0bc8f5ddbb0c76aafaddcb417006b61ab34e0e1625935fa4d40c8d8ceb022b5dc9b970ffdb7f911c806700e65bc13b5e7c922df413766ce869d38d754b4da94ef871b0e9c5f4e9c1ca7bde610b586c5f605bcd6e477db37d0../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.1-1.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(aarch-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.1-1.el82.9.1-1.el82.9.1-1.el83.0.4-14.6.0-14.0-15.2-14.18.3-0.el82.9.1-1.el82.9.1-1.el82.9.1-1.el8sssd1.10.0-8.beta24.14.3d@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.1-1.el82.9.1-1.el8 .build-id804c64fa388d7c06c714fed40e2b279ddd6fed0fa4975765543a6517150219a71aa70a9db69ed9b0libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/80//usr/lib/.build-id/a4//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=804c64fa388d7c06c714fed40e2b279ddd6fed0f, strippedsetuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=a4975765543a6517150219a71aa70a9db69ed9b0, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)88PRRRRRRRR;RR R8R1RRRRR%R3RRR+R2RRRRR5R$R!RR R&R9R R RR#RR)R-R R,R:R RRI@搚)~{Rwb{C[;KĚdD~,V.]RctS|mBW0EK%~K>NH³(fGqMbFj@>dS3*qpW>k.#uS`) \I\u 9\ vhѠU~ǜ63"ED>?)%D`Vs4h!̙:(4?DeQ?TD}3aN.'||Gֻy` E澀e\ `#J#7fHf/t55^H$= '̟5LDS2q꞉'9u7^̕R:|&{%B;(8wGMl|ͯgNSż3p>HҶ?ވV<4qANګceEgSY#YHf5YF8~D8Z};?xM@+0)HB7i xVW"- S)W'< dJ1VQh+tb7EkhABڄMe +B+lP~b_'/P!ںKYW6D+< el!y3Jvc|F?0j9m73Hqahu85cd\In1j7JxΊ]gҽդ=٬lAX@v`Oo-Kg%$e3.d po5"Bh `ד!Cb*t9: #-$(4 m#˅<>z("j"{_k|~ CWH`ZVݥtBa ΪN,Fak~qL4ykP{NB1KוV l!8WHj&ޑn51Մ/=5؎;Inϣ[{US9 QN|12$*hc۾Vr TZ# ,14ȧL*dh$~ntLOx^:B/?־'b i8r PGSe;ogSh(7 5z{[ftSEXύ&m}7r#Cp}2sZlCUuF#;Jo8$\{e~ePaN{dxUV}k2/3) y/g" 1px7qisi-"uxh=]5&/Fyۥ4(m(";/$\[,|?XB9zo-x6Y ;δCBQtBȰ{+/~k,y@V|ײ$Ƨ_|ЅB+VX4@ ;K=֟1N+0 A*xN- 6 Ce^Pj"cS/RU9Q]խ% YWnߥtM5:2Jwpx;EG\+ݧA`e^pdOo#'8t:dʉPf[6D+W(K8$[ڨճ'3cO_Kp8|\򸔘#~oDq$@9s(C~ߩc7N#8]Z<Ι2 !EN 66fG?[i-X_aRVO9lpi{c3'iʓy'W<)25MR@)1Lf,b+O W9SB׿w/ْz~F)L$h=l(R&llXՇ"P4^o_ "Ӝ5ig}N *.x;GE^ /oCl'e.U&Z ;ua.쫔 P#)U{eIpl6LřYg"XW@MgI!ɮ`9# t t*iá`e/V͛CdNOvuՃFaȤ9rtonP51ҶK vY'(Ia𰛖zL#J}Ku0XSuA{1wz&+$+Bwf#bS]- c6 z^1pى q Ƈ)V=|bQkx[7(71zR)G 4=OO;5_$Zּ]n  CI8nmG,yE4r: 7rwÀ9ewm 5( >W \ل݋ Chf=%"%<GTzAZѝRK)s4͙"xl~Sg[43naF |~q{犤nLTļrGunH\U$Rq1[~JόUN^`=jm .0$ik kXD{H<4mR10O1r2==x3%}` tcu,bvq =S뗌y~'Q6jV(z@!E$M IEa0;|gE_Ey$@ٕ@ߣh:B+ƈs̡fUU&[Qu:I{8,d?$=| !2-s4ȕ<<"aŮ\?V*:& '%pVMaMskHi|OQY>d#% ^ 5GZ i()B}%G:[wr쥩OuSӴdЪ'U:Po@s Vc?B( ISh\PUiي{|~XjmAVHaU;X59-Ut<ַ&u8g@ p<_0+P#VEW>4=AN'ZN R3@ Ξ,!=àQ2t!Z!Q{%1O~.M 65ubN1UX쬩[- 9\Pϟ-=3y+*w2"ꨶ)|0 =T,=mH")ae% X78xA,\ ҝq=lYs,brfp?[HYJT_re*3ѾZzIkG畷\^Vlf/`1jd2^2_cbT}fi2tȎDqiv0\^0PD^WDIk BX!jifLI%uZ=dQݎCE[.2͈SG研yoZ.>ޣ`鈯 Z.LxsGg<\wA]h( tL@9dJMMq`)!O[c zs%g|j@O[Q[1o۽b騅ݞXIJĖ$E%' 'xu̪/% 9B\[؞ ꉁ} kەv&k)sf.P?b"~3?L(1a#>% ph 党tf/;ibl {ڤ}5?R|*L])Wɛ3bu ދ>ͺTt&ˈʔ~F7ʲsLC^}μt== =F bƁ2s .Ep͸d$y %]o<@?wuۿCgY1v A`H]=)ߨ&Ѓ17(ܯ]#e k9C8eQr뮹]=k j8f6[I( ^]bkFhڿ>+7v" V)phX wwYBA<2qjؘ&U۳[jGYgEM&yXզ*s;q99-fBUҏ}U7j+=NutP&~Pd52`N˭PZd@EU6)%_v$ ·fl2 ~;Oh?oڈ 'Aosz,3$ܺ]9s1#En"u;ɿb{MN]艦H'G1v*rh,(pc@N6=SĻq~W62ZZ/\3Hz-P @ e :_O *{C74]θ|QK$RKV".)GEn׺Vhz4-7ݾ("CD~<Þ[l!tٖMkUg(SBFDwAn$T䭜m|O9\]_B@o!;n?.]^ϐ.f} _ޣtB8n*brhg~ϐCq GYQWm*ޚgר'6}yU.40#5%j(~6pv*ap 94ztᱬs /3KP[N]́kZFr,Me )\K /Q+7SˋdA)O$5 1K#24´" :>XŖ! [+6'ڋV)FXTZvA;ra)@͕;qVX Bw6Ceڨv*s+:f&^~~NЩbI=GmPE9gRVe{O~IR .;Z>m[ZAӦGDu?u/%_;\w,p*stBf島C~Ӭo"a$Jj@zN8#wrN),UU"g}tbů䤞1_+?h [*ܵ\Q   ; -d$KGyV~H\l8ʥ`X8 A;.H@`[Ǟ#yӊߏye*?A8jnz馹QE4>#0-I~/qqTK~p-~9%ԩVG7:V2q$Gm4.Z{[5&ag6} c)][W MN&?0}m{Ƭc:\o I.fG)*$ o?U8z"!2k]Ŗds9NsT ǣ{n_"U@/Ʉ63B%([JDzqJi ;| {6\WИ,8nmIz[zy&ۙ }{Іݑ~;LQz."]e*CQUavPQ"61zY1TwS&w*%՜]Zu%nKݭ.4q< 'x*(5z+J@1p7Eއ*%ր5`8=Iϸ:UOyP}\0|@ns9tŒeF-e^?ī!Ҫ.V{n΅z6Բ֏8ߐVxӈf⳿mnUSRN%{wثk/XtYig+%χmʢXSͧEYUz~z4l{yitS($PU2*l*7u:"Ǡ ^F0T˞Eq~Z.l_kFJC@3.tgD4==|}jx*uy9D:@s'ުhlT]䀋,Mhǣ4-Ov8NUBJGyCR4?3j|ZلZkP%W1_ $ g'YӋ`rN~{D; &x)7PҸp̳\s-Fx/~L4KquM̉O9 U\A.4~,7 罸ȶu蠨"G5׬UTfھkUT48Tz˩|V~ƎZ;& v+zvPO?Y'ӝϬa}IW zpgA@Ȓ(6i\@+mTy46k?&ӅTc0p_f 4ؙ?[~@YxkBzI@Ce  }A;%c-̢1NvӲx̅Fc\*z2>}lͦb=O΀E$i kp0("!$QK[5^9fH02ux4PC"92C'n!@l+-\k_~8y|G]䶔e -q{-PqaP2#;ݩbL4B!oo[K)Y```.0+wU28+yZzKUSu@Z,}\rAmOή8mHeo{l{lU{,pB O?P(%fHsU5vá%N- f XYI4Ret=̣0)o;N |q٦dm@em$|NR+aLL3K%L/"Z< lI}ysmxw%q}o_5(_)+?*#BeCr16Di`&PQHq-[4ߺKIa\5==pt |glTI x}_N O[|\K߳tv M2K[ m*NOX O~>x\ǟ~P-xM-ZDMaR c17%!2^ 4MwtѦ|I TKCwJy ܼ+e5p ZduUb-L`.K;;Itqj8 &{ m~:_Jja]?T\eBGZߴӪ+ pZt9qj.,v/v~U")BxmR+ g5l.`K}-/.C|VË:vao͹1 1s D^^ G.|rzEsmϲ(Su 0B |_Bfh;Szۍ$ف义[D+1)tRsAZH;"a J*\[JXb'[c>Ix c">?/0ٵNSLp#7|d u-s>6%A$}I"kS&9u'ن_@1ʾi-Ռ=|FE}{r4'hn5ݵ\&*ccѶ>| ۥ>]nC"}|h KMK]`syUpgiYЕr#aE|ꔷ$A&dHK9P^7WB-b^{IqMfh]Zܲ#u5@ɎB}:Pg`#)Ji"fhr ,диD$,!i uSki\jj}Cw[ܡm'h@L/;W̻k?q*hu&_,॥)'?;!LLڅbipD }$n_Je#OkooH u3{A <:wMkrc-=WB^ۛxm?*mK@:w6eII WhxrΙя-F9ߜ#<*ÆWgQq }A^C8=KvX J" QoyfDTnzJ.8eiĤŃLia>k߅q`&#W)o2LP}vF0L~b'/4鵂uTt VjC@-3rcʼnʹq:KSOsC/0TbԴ)T{BVG$g) I9xYM8%ǐ8N|Yeɩ s`6*WQFr<[GIftS#,Ƥ VS Ze2˥e򗜤l4.4 rweܔﲳC&pl<.;#GJDzRBdPV+g#NBMڃZ8UeN9)1͸1E`rAUڋ^Ks=5n.bKsCuVԔ uf?L]uBNf⑌L+d5|T큮?B,OJ"/lfAt <])?$Vz 7#ϙ`[Va0'd,)Zuc}6 \ v3_ϼ}fIfDA]/dcRe/J}v%|֐"aOLCBnMzdȳ%;x%=c090J.aXh:d肑B٘ڄ wsF7X)"^LngN"g!c$O2نc7]$˻ #ʌD ԙ``J73;@[߁9 3#n0*EUٌkZFp{Y͑DWmkaL74¼Cxi8MV,5F;LdYPoJF؇!mIG!JPՅݖe Z=Tܯt.{Wv6NdPa6,]aUy-+>Ҡ<Xymwȃ(?Z0bHёՊ1-X;ƇF!X瘷a֔)6ы^wISHR9ǒC1&yW\xExrF bɞ/gWꩂ'8!CJ !)qģDuj{,'N`PC ˹B%~:S|F\D]wk;]{MĚb[ 3_?hgy8Ax>Uw<&ĉLs@ WJ bc{:aM5Y kN'FvYi`ʾK?U\l1_8Q@FY|&([Uni!ޥ3H.P?#J|^8q -m_j <-p*]]iie:z-B=g [35d8_lSlݜݑ4[JpDT[:TWYZԺT!_bb7#2w:-a2S;fֲsJP˱ $,߁3RV]r ­E-Y23f/ K2)tz 5ަd΅T(1-Xb!dUJp3Nyr(Z Jйzxs@Wx)H6(aNqW̺FfЗ̺Xq |[A7iĽUfU]7e!B~R~UNJ<_mQ;kR,V}?쭆-[J[V|Utl, cSSu~[0hJnP'oz^auxՒɕ!B&7az^V DM_ fPط=r^wQkV)CV'Xtvw7Ty܇V Fd3C/[(QzUShwj4 sM|8|:XY8tMKČY,PwŎ65ZEbbbE//םPb H@]ފ;t?|zM_b\Ӹ Ԁt/4/`L8yU :a[!4*8Cda "p DʍBlOT)\m=$$OaZw.:Eu`"vJ߼]>q,*jH=IH3Wo gl5`GzƖx'ϺZ-xake<'>PpAhr^reM@г)x2.`+(s9WΙa8p51SO3ElsWv}F€Arwr:sRJ"ٲ bTB9bdN9.߼ZvyB?.0(RͣSaɧUsǝe DEpN b˂r ǭ5&d-Ư4 @c. 3׺ӎ:|:*8;Ѭ%Ck/ݬ\y1,o' @XY9 FB{-u,0#b9Tk09}H+3e,YvEvTW(@! ז:1۵uT/`̧f!d0GC0IuϏj<[B?);[7Yy+l?!K0QSgAӋp#|@J|7#Lح0GZL9F2;U%B 9IGG:gS) 1">dBIڪ]z݇FԐ \`eOQ>/g`p/YR^OEsӿ^2ݝ@E|ډ]]>t"B=C_x-˒4Njskyk=IZ-^^aY&n2zUq@x*8aT %zm9XioeĖ1Yy;IGU+)#d^hpҷIo+r]W89q|ŖOTb @jr׻s_IJKc Qz`;Yc/+dن2-:go dV =gfRk#䷅lFR^!hTbX. N^ج^ !r>(f:}H{Op6Z#1-8x l>>ukC2xHFB9 !a 54"@+b jĸ+^JZFSiήXқ\qlbr*rT`\K@?m6R7Aй0YrLgl\2$q0K [X nݱ={8}Og_n+\9,.HcZ1f0G7jsaf#Z4'ԇu9L\w^ O AZU~c`gn #rp _Vpf@IDs|߃CsYH9JT@]úMؘPP'ॻ 1E}݊jV1%V*Ҍ6-$đ%v 5ys2^%t}yB$cjB?rI+S\\j:ڹjU@kVZv7 ?aݨ4Wy.H$Vpy_`0 -p6̓`TP\1T>E]Yy0J',^gPp`.qLiކʮV6,u7ͰHޔF1G{ l+#%R;"R :lIMs6NNUf ~c][:^5nt>2["#:4n,#̚ H{kkч# ,s%u)0t? !sҹʌ=8|lt?۞ vFI $#mdeXSN Zʟach@'J0mFW2}G#Eu*yKҧ=\${ލ,''G$V<e`(tENt0U"Yu}曝7>E yDx|N1hj6R&e2+dwS1*6hJQLTi "|aq&p2%T=}[4s2F\ gRHӚXi 1ݦfJO$Rg񳏋O~PKCۋP/5;ܶ%X x-TSx C.FfrM9,/J'f~^z[mbG`L , @7]uPo"r0wgYγ*75v}=v`uW"I" /iYJmy:Q[%sp3,O.eT0+rZ9PGaFe1}&5k& -0.UC''T*T|3*+EO3 ;DdXe4YgolRm0uvҸc#{ոJH-*N*M.o#x΢jBYD`k6 Z 8"\&m9HEc/ez(0k}baωr~`y 4zʽoDdbOy2ErɏB PJT%Z y}G)`+`}YF*s*KNCkxlmSyP(s%@azp(Ug7;px8l+OrfiRP/@TsT:cqX OXQANe5F۩v!:y%@vWg Ҿs`[*K% (MDQʔ@l~ԭ!X_=w9;Cx7l٤U C5ixYQR߳ z?,kbQG;{Ǹ~zzZs(\BמRƳat$0 U4Ay!p5Ffk^/ӛ{P JuuK֒JiחHw? oLKzzE^6@^ZƼ%S|<=[ {/0H9|K|A\6RKCF*̒o:<'?T4&!2:1sS§,<4k%IE(5u-ry o`ʖh˰$R"Y?H/ecw.a|}9}V&%H)yuYT]Ýu~g7};}pOSdA?eZJTM~DթOF@.L?` ]'4M|7nc守je\gth P{*|=;v"uIZAY_Nd0Y~.ݿ-ʞ֥3[_cw5<ǧJ[Y9t!#Dqm?tKtW(ݗi,81q頻sƭBnO3^W`iCwNn0kC؂$80ړF@KRm,<0 qY3~D-]aՇ|ӧhBpMRӐi W%ٞ0p_O!1êNOFZ\tyQ N,?Q҈b;U\Dx9eAٽ1SEmEvCt'sN<?XP}ސOP[,\URlԞ`'RωHuY*wtHƴKmqEnɨNNA澐`7~J;R$X;ٶּPcnAfOridt)Rϫ{ua U=鋹(ӽ*ovM;reku« W^WU뉩d#=øU"ryH\L%ڐA>ۭkJ.o7q)=!ҽٚwˌ.Hg@[=86[]w8y|?rahA>gڋJpWp2Emj4¸s.(o`0Ȇ9$cc9j|c\l t H%7/ \'H+h`Hq ŅVWUQ@chI+L׍}NhZ } ]},YnzYշ1iϹ;RU"bs҇NэsT55.1!-p ?ޛvr%Ӈ.hXd2j,/s0[YFnlߔsI䆚(k`kIhuz:c%?.yR6-p<,"yo%ɨΎtoF Us}\y>e#Qa @AQ2{`Tg ¨T.,;/VzD+`"[oˊ܍)-*5$S6ÚO|YaYDϝĂwg>V͠zAsT6kBx^hBQ[<0勭X'JYL7YqQzp+ "H6s&myoyVcXmv_Mxf*f>CYW{ͪgw_W(g{ ([oO_gp5g>adQ* YGՠӶ;@>\EP?ouK9jSME[K\$\@(=1e$ɭ50x;4͜'D;tW/R+|(j "[fNCl xiB2@A4?uܟwx6%+Å= ULW6 1knO^i8|[W&Og]E_cr.0Yݭ 䝖Z4Xyi(w8Nq%-VŧЌD_UPCʀY;EbLZت!ְ_8%!5ĈV I)V70y#r }`hp1SņX |,3*@!7(V 59-V;RKAxym ǁ%3@e\#0]tGx=˦/l&m^P@Ζ$bB~s$\u4:~ XxTx!լtMQ qlbKd^D?TƃwQwSy*^:2"'?YqYX. !CH7)=w` x#kBR|,c`2&3@#z3 95I2 DpktX4W"3>lk7+pj 忽T4B"` RW{Eo|mS1 $V)OO {.>? orjco[)$2}cEpT|©k]ϣsQh9焈OM+j/tX4 $CV(I#A!)`Ψ0> +3@TC`a!;xwĊն|-`!7Et.V~Z6Vж80^C8KDi#~pChܠ%Hh,EW(l™+f]c`A{ёs d=EϚu~<UF1@drnMeNZUiHKF.ϺҧwZ,bba $#PńkieEЈ; Xx-?1Jk7Ҥ6I-SluH>kDup%62z*/0w#l3+#O֓tf*1f蒯R#]e~;˯od{堦l2y`TA2eȿ`rWQ79+bUM{̇zM!#F"SN_ea"0jv1g}#za$(T2 E8::YQrY^z54a|[0ďeIhAX*6c5$s@r?iY[ /:)Y+^*p*lIj^V;Z v@@b0^ol3s6ASGI{o5yL1)T[sa\^c,N~ǵ $W{*s ecjV Z4MwsmuS1k~ȖlbFd,TUg4ӓzO2b_ðWzRE "Ω[; Q1&H {>]4"ė@|ļ;)# 7@LmآCv@0eyڒ^AcEU)jS򒷪%d;:XZ5(`Uq<bkxs\% Ky'Ez}1L1YTjdb Ҵ^xB,Rk =}|}ׯ~O43.xBG ?TDc%KhM58U 1wnپn=;YXԖYC`1Qm(Z{ژ żZ̝2PNUu_˘0}uquyKXDTd;£:K0izuE3b{ e9?IȂ' 5'j{6+$ݜ'6i&:'J/`Q7.a @{oRX=1i # 56  lv}"eVE&nn$i(SQ8" G|=ksӧkLmU.(P28>øhfuiuMBE&r q-3 %@՜W`x|B Ġ!j} 8v"䭑C(>R܈9@yt]%p&vnjZD2Ytg4NɸD~9G:HO2·G:>dW#jV\>VTxY"Zs_/}+}9eG#/ I~{]ź$̎W~`NCrDr_?틂j>BoզO>)sw& H))$;4[ƇUeNR͗&W|P&CcrgISxC FLxlFG- Æ<Y_Ii4$f9& %;~ʝs~R3ڛP'OP4Wؘ vˎ& h$FkDxzJ5F%J$Hve1jy2~ipe%PD&ƒR(5i W!BpGo$6ocPKb ٌU?Pv:`5]n&zu7ÿ鼏3hwozU ʫZ,>* 1R*qC[qlwsF'lkB#8¬ݸgi՚kճݙgil/H C`vR ;.n+3jyHE).6Zb|̖Q^'DS nOrs&_h"gʋաT|'UEˇ ls/X9NIcWۧp$ FqʝV9O[;G@RHy*A@HxJAò͸KuUA Ȣ6F E$$"1b)kwret$\[35ݭ%-8iE9,v4h}FR2<) =VGYvy׊&c%wʴJcL[WO2?>6pݢ\o|Kyk k1^șV$?dp%e\ *w ]SyGA FCR"QU!nr}B>!zq> 1y0' Q]ZֵVz[`J1hsKOբ=$FQ 4QO̵ӱYa#՝Ho̼)7lgQ~fH=_krUL|٨3D(o葶c~lLv^?/P?B%fk(_\eOCR3.]C#!>{} ev{ Ѭ ͽaI# @sOdU[@O< O& ^aePE[ALj+zR;.m1Ch1ʺ%ԷJu*McRQ:\e>^V!B"4z MͮstznԾkNH{5Tp"j0TZIXI!\]i!KM}wb8Jk[j $ZSFҳ4klaeBg>R#Ssㅒ L5gk&,Jrcp|3Jtn`VĬf:cq|{#DSg ۖڍlbm_#ؚ ,BQwg9!e3#VB$e*YVJԚ@q M'uFYqC^'?_AR6Jɍl̕[!\EMz>o>5;)ʎ0Ma%u}a.CIL40踗N@(ɽϤ7 KCNd TeS5S] 4EזӀ?w{7d0W%n8Pn\ Y[9!a ob+,fu1i"W9zN)5ƨGFъ% ݆O^SWGH@#X@bbu(RuxZQ 8"7Rq` bn0 .y"Š?yQLȒԐT;ZK0bX!7fz3&u|)C$F.Ŗȉ 's|39lԍӚﱛQI0q' IFXd`"{Fi# 7 r0GF 9|vf,9.%<^t9Bi:cKCB);]w$UYlVOt4B. v^<֘Skd{HSɹr7K亲.laأӚ3%J-~i SGH܌謙ސ܏`}Yg[ݛ('lQm:4O ItފRl.+:\z[^7/)eEDZ@ <.OxFYEXυQzfw,5l䟆؅O^H}pvlF 2=ib!N- x/6 asFsha u}G*(  e,`36/[7UetW`|f ^^|ܪOS \S)LRanQٜ,#!”ià*b)Vfcw ،u4(LUru0,"]Ƶ0E!HL/xXUE1?=>KYlo1H[._ʹCwadv12[e1cLufZR)'dgWСFpxQW>4e%/yVܦ /zZtbR <{88Brw'9ysA/fG1&v`*s W+$w2% L4Ӡqafe gE~c}T^@ Lm]M 2L=@_ :ut?fMD2' G%fF `yBx=D`G^/,T#:bEQ,Ѻa:Чĭ+&i‰H؏Ѫ\4|cj#c!d#U+YNW4Jfn2fvޛMz}w}D%>qU,=*k@5`qG(ž,> R$DhIUW$,20ڭva( 3F&tӡ.lzR#zzs*=y ;} >('|ZÃiG7\u.9^As|̞1 z΢'}f fYƜR`8=P/)s\[RzGwW|ĞsB%?4WKiXϋ0؝f7H Ae/,%Rk&DߠI V&7f;q|:%ye~`9хhR:#=VI,,b%r@81 \'dUs_=-)O ~;> =8ވCcAqg[bPw6]/.rDE~7}jp|˩r|{=$Otx{&9ErcB>=N'ԥTBY ?H [R $mZ%9)$bo]/cHz 5+ aX9h 0I6qQH44VU1פNL_A ӘLV6;)&β!.UO QIZAgIU_G?nVo7Bl hHR5[ :7L+?Q@5Fm_28AU =l#AE DՇōjפT&F +cfWO6MDrjy#^)h@{K\jk8A%)u@&b$lqTc5Ay5DDM/ ="YS~J,[pV#.MkL^T$Դ.@|YS<o ~dpTN!) J8a>E(!6<6I^yEWcfX,=uތbE:K7"pmʍΦtüNG/WtعTAuXT0l 2[Ou)LJx]"jK?yRjQ6(+GX;.8 kYP ԂFܟzxZɘ #^tY$4g"}WB^R`ӼRPa[Stzpw 5fyҕ6p4e V0 D9-@*|RN7#Z,L94 rQbOa9h bC~BWX ςjyjK lS4?[KBȬMxRｎXKI;/ y_g G=k$oy<0yvZЬj6C:7t2L.)%NN_h4@_..wzh6f+ @Uu%23hq=1qɌ/|4ʑY<.' ˕n7&WuJ #)Y"վ߭v)윦`+<Gr* i>aY%UgDg"r*D~rf)` !b6I-O~%1%]Y]cm4>x[!j^^ w z"9bVGږ:NN-dG#/݈Ww_۰H%)W6S-h "[I,q+ U

P *]ZRQ|“f/Ϻ>om/怂!θ$EK*&|="xD@pD)=M1&BnXg(m "#dfL2)jEBikR2i/3E|5%o(IhLc>^ އ˜ܝ (2 pPZ;v9n_3Btbʿck5N "&afH?lDןέ. c^=ҾPdl:IF~d ϗɋT^Jz.;OJlgke`̚FEB/T vu+P_,I|A nCfic]2 X@nϔ.XTZ寢ĭ 7BAڣ0ML<)k%ࣤ纱 }Qﱙv.]#" v -oĠU}`к,Eh]*\MTjRl˪7HQ|Z|='MHşkN |ݦKcIopx?/^Gt8xQsYgS`QXo [4ap_pWb\ג׿) {`<0L 0Ez:ml[l5ËG֨Q߹r=! wiz'yU&T? <|VKD,'NxZaHGX,̤H{JlyvIy<ުP+,Ě'uSj-#1$O y bL7X\(= v 'JEY&Dҏ Ww|mq ~m_aͮיŋ2.RinF545n ҿ`Zd+y`ƹ XievhyuV !v].0έfԬ\O"$/wљ_Jd{o[nkQhA-gǩaO,-Nw xxu!82rAvYX…3$õ|J`C[+njqsӥLz{bLStԀr I9֕,7Hg21!޸([vBgSL*^b<@(Y_Q1+-`,i`~ª |56Hgɥٜ;R` 6@O))ι>PsC=L2 =; xQ{@S@s/l+*~rU-%ALξǷvk/` c9]S3 J\ GST6^#MU^+krd|,r=֒+C\T:vXai(X߽9˸wר]Ew }a <1,Ҋ:׏=.L޶ ^@rS0 ]%;g}7-^W>HPk?4wC}Wd@/֭r;☢oofvC*JQ,ķɒ $Ӣ}E}oS}IuMpC+VlDs:d^c &BZɵ1yD-H | iC9$"q#DaƮ8K ¤mW`(ӥb:Mz{Ng]0}CloQjN1zl6Y;xRGbB 9Z8u[E]=X} [ fACgPAK7C-4&,^}jA4$#p·K,2w2u-kՔ'2HUJhrjΓ5\ۢ/aSrȕJܳ=E;~zS xuBJ }r'U`oc+rx?|nvNUF:F G%w#imil%WvP~L,L֢YlmoۈI`+)$!FfTzwɏvf=AttXnCfn3i"`A{C9+&G,[ {n%dS=*ϦSD@qW{8X:r nn ߧ#hhyHnAS⥂QL^Al\P0Յ\WEE}[3X2%Jj lȆ|iԍ&t:akm΃Vvw2ѶtXX?Z.y i޲t `Fbl,@19gBߓ@g 6{G> "O?R|@x&d3}z,6b,hPapVۥߚȻ}H"#0ʣ'*6\pe-8#4%u,;KDfZ[`:@w_MB϶TVȞ}Km 0ťMU!Õs%ppWEY^< C\t(9ts"d}Ln*ť*U^^4>.>oqlB7HPy ZtW3Y󫏍6[Zuyk%|Fv;O.ZEb}̉|p[v{%5z{$GhIOႱmX2Os D A~B-x3[aZ7,4ڜ[_?lK\/-Nз[%VMzJO0_-Dj4+gL'W#}o`C7Fq70t3P6Wz<õ;R PcwnϣH-m]%R诓3nūNc|ɡIKy_"LC̺7]#FDJ׏=)h_,Tд$oo2Lgb(p7WYpOjjzSGy>-hʤM緓)PfI%2i)Rn= {-Ll6b\ŲO:P@ɞ-X20Hp*xb"q&DI8/k&''rʐ{٪J亵:5<}*5aEDl`.ZG xvEVʬLeJwYͬ([p,+nSv$?^5 xUdx.Y J뮀H2;GD.]XQD ~ΡUu2s-saZM./l\{ܳ3ӆkޝxhc~|5~bB.7~K +oMMOvi{?t GS1]6k{Wȓd@vPQ"޿l3$~v+d淗J@Ev#T11h'.r*J/kjȊx4`:.aY(l#Php?ZOZiJ4NX^y tΟo$(m-5vϓu'~M9Tăyϲ@>!M Vҧx'e^Q]?D\ ҤnxrSl_ ;gg[ F` 2YU="J&2T2Y&"TM"Psk?mm_hHElG$Hs1!nKwLEsP@Vp7M;C6b%7:Vd ),@j֘TStˑH:0!ۛVEHQmD.F^OpL u\mHٹo{>r3WD4?ˎ7,h9"f QJׯ91Ck)H3dkF!5;2*nfEVuTȹxZ!$fH飄 3-o?KŽD/|4Zr`m> AN}@ zaUm%R+{2C45<*i[bmך:9H^ѐFsDqb/ (HЂehQZd1!ǿ@wxءhI̚b+ۛ*A9[;*J>jc1L/UFSR=!YV4@kHť fV`k I}(p]EB0/{OB2dY[E\4f} ,(Ef^Z V6Vq}4;R-mP^ȐZ\9\2健#M~ěL}z1ލ_IHoCV=?<.6{,@@X4ѯCWǺ' wѝ431%/ǭ@ܣUy1HxCpׇjZSF爾`*y,m}_`~@ ;aLfDU&ʳ\ ùDr-kMPץ UY){1șڂs!֊"N/!RݝiTYw=LeIDd,&,Cz+ǣ,-"1&VÔ-grS*H''ف8s4p:/!*-MѠp75Vq?'ɛ2b?@褜Fޮ4,}"*G.j{2j2:K`F!Vo{rf/j`Lw },t',W{q( c,AX"&פ4ýDIіyx)㘹b)}C;*Iyͽ^ꖪ~]ֳK6zϩ  _}EtUtks6L4 ڍ4v3u ,Q{Jc`~(5@cgvE`QwF#〢CM1 sūe :9gh;$ڢ]C㭪bگ YNeQS貿q^A6| ViC76rZ?E_2/Li@wstf,*2=wv/xy^W!0*.@a$ASde#uɿMDl#_%*i:tXmw{3l-GV68mO*s!U˸2=d| ؿ }9wR^[ᴼ6eɇ~t=RP{M?OE1Ed zъ)vjn@u;LPl)$u5yAC?vxasG}5[2:z#~`]^{y)Jɫ^h@U18w$/l@p 5I}LW/Ғ)ߣ&Pkh4D79!!ljSMA~}I!=0O'/ #b2L$ kR&Myu ŨMhPڳ]kn/y*l,J=(eqJhy/PDNh$C1%)h7 _M?D.ҖR>*䚂eF,"qՕ1A|wcǕKʽ `!%ŁDqWMaHP <1~>T﹎9@&{3ʀqXo8C圥E%Rk9ۙKo!HbIe]M y w7~uGTxmҌ$".fo&9zs$C2guVfK}݅ڦtoP'?,§m8)\Lp k5z΁~vXޔ Kܰh~M &8eQ*.ͳm=KJ>NtFٟvz(__E^a7.#Ḩhs*v#ýG|OHh;9ס#AL_ لsUC*WXSƀ溙P> iD$6|ps (N\a8mC5ujV3Iy? &؇ z\=Ņ=Иm|g]D$tHܯf\ 6^,l74j٭$ JA;shK; i"T3EΘOȲf*AT ],݇Zꝺ~ht[kך{CR_~n"Gf+dh0~3KXc%Ӝ7 e㶼F UsηD+6$JR_IU) vt@m@Y=xg(Ed 8p!v X;:ᒍ oPKPA*` 3Z0_/IZ;Q_gDYVt_PCߍb8BŪ.@eHڋ|v꜎rS9]SrtVBY׵4"/ع=}"Xg#-jr}!L۷HW_BC?Sc=٠UVqmS˾TL.a;bJHtxdsg?b %1 0! ;RbM̦#A<\RyYM.wl3$rIxnBmcizH_\l/*bf-~p pg0BGrWC sf<qbWwkQ={Erw~"Eqp;* 32%ĽumuQnB{ d M; 1sȡ;D̼\R) [d'9m$sμjϨTF4<=U,~p`?`wTl:%kgJZ#n@DM4"7#k"(. 8kaR\`C_OjAl>:L?GTB BHaoj_,=lmP9*;|/rZK'76ΒUCL۳DfXJ5iXMXtU l!mҝhgy`]D _*'l tLE/4:N} HzS8ВG UqǏ0r8 %L'!-P7;POt+QTI!1;4Ke2/$lIAᇶ" d#:QJr0i\.Hôɒ7ss/lSzQc~#cV30ìg/,0q^q&<IQZe ƧA- )ޥb} #Mk6kCO]<@rHz"a7.M%QQ"LtS~ p҈!h˻ҮM);++$e!HLǝJd%6UmeΘ%515<<[/LF?N[l*$vdl@W8"L=I}NJ ~f#ٵI9tM:5HQ)23}pFR< JWH*>b߆-cFX̞tyN=%lm;\W3⊮hSiyj c0ë@u\ 1iTg ǝwICH R9ȰЂ 31(j<bj,2a,abgbNh`nD r"@]u%RdZmepIީ&ƥ` Xn`AbΓ$9\EnU,* "X&7HHw- ^ $$+Kp=#-8ϊ#bY Q~D_%u5&j4<]i1C mh,4MI]Li?eZ^隓6䁲SL"G9ΡZK syf+ < ~#?ͷBxQ,y 6|nHl4eAPCh^`#ws c[wSqNU,]RKz} R&#FC߸;yk_]m5]wQN+G}/7˼a.\&H ڸ՗-YbJ1'o0Ĝ%N=3 BmՑJ ) HZ ѿӇuҎtDZu,fegX*sYQ\;&>4MP{^w.-׫9}[~&L2U<BE/KWIjR!;NB;YjS7z$vtUy*VȒťF0#3c|F<,p).:@45s#0@%-XB6UN9vJ'dDWϘ{X =DwS~ڦ7Kff#(d,P f"Sh1پݙH` $|iei8 SHz&1w6-_2튿f}wC|XftT0&uXC,#H CNdx66 GN&i1)G]tiy&]N@Gb4S63tjFa0֤^T)FNǑ$D{N恌]ʡ[:y)SXo{r7NQ giAt[ፂľD{x^|%Ҋ[_ՍӔ?0hf ȝVh з'IFKrq Jbڣãsp UM"gضkB&X}P/98KZ yݚki VlZ:%P v.U{#I^EP+(1ra'3P:yvAJ(dݜSmS $nM-O.8!lBLa Zہ詩,] o-@ή"i$Y?wJ%eHn[+w*j4 7+Q|*q.Z%kR ^'ZͅD (d}{(RM:N  Pq㝓dh܏SxDQ;Yvr0ZӦ1XXo@~Rj}2xWTx&|^PoP@0cݐ3~DNڧ^{h|6/o@(gi擁."U`hQ"S2NnEfX{Az߇DLL,[@ޢ``heԣI޼C-ϼ (fKDK@5$vkeECpr ٴQe1K>?Qm6in#f$K$ʏ -WwΓM-W߅| 6 |opu-O̔MuGeZ,ENӂhU "8W6]Ri.D[&^OTJ"ʸdIffz$"icܹcu-qD4ޜj,&e V5FoNxR *{JdA6BPԦ8IҐ5 )|PrvU\MQoG;Ubz]ra #J M-A+KGFwDҭg tNidǾURs)PQֹtf/u(A"tF2^(~3І8 d [C9*<9ڙd[2,:iQ(S&Bi }) ,0gEUfEuw1A1:}m oؗ]ZCzQHlo{ng _S1qd o/WaS1siPM?ɭ^;聁.t56qh>8Ua#(o;VN% @ɜ%ueM3mo+8wA\y ;T yYD"0>{O%_b0;u6 dO#x\$SOv4PKM)`hQLa0r=9r6&'1>\p|xssᶷ6#LDƢ .~%.>M{Z/DX̸ o"҂p#;Ǻ^GseE H@ m9]DnїWx_\Pw+ٱeuo%Km8*f YW`чl`yBfo5)5Y}SbS@i4ÉdaSz>a<ţD]8+kxn@2~!hdƕf%{u+rF杤M )V).a7Vl N Vf_6U.pҸ'֤M0VqB TSʽpL39ZXƴU қHE~L`Ofa ϹI5P LZQ+(<3\{])BHF=m!S+2pv@/J-g}EvuL߾Z}38TEx̹{\/b 02+QQT(2dOVl}cnr| KdD3ƺ^2xГ{0Ўiqu6b^[#Bޤ ` [lf!,jZ b_g$6qV3HCCB!M}״^zleCXT >5iTO]-MuA"?q=O$W mtҔ3x$jpQkj$#&((+"i.۠3m|PUcf]=®xIǻ v_@{<'\Aƃs,4z'^wݟ14fuiOyUzs$e&}P'i%wXBud~lO^-ӋC0Zz.XkhѻyM)i dn3 U`'H3@ll05>?9NE_I9 Yow!INԇwQ854 ¯NձuFnL,Pt CJPS"v?]@DMDl֚n~ :^H/Li6vܠmCӫsnzq)_Nu\ZVkqρ+6z--br{g:ag:GhPk+-/,$=aPBc "tY) @b1/s×tl4zը!8毰U45?ۚl"LU#` gzp+{Aѹ#IbF O{5N}|vi7vw2Tԓz7Mށb=raEժ/,b_5XZ5)>ыN(90:$~mm17ypQ u' NPl!\2d܋b>MO,i?)O.GVJ5l;l=rPN9RFďd+Zk/nvm4dE[vɱag?mo}g1r3DqXr;B1@QlkvY lQW$:.-DΆ5\h ͧ.EO(ֳt`8V5]b<Ş}bpq0$36?z#GZc@_6 1œZ6ו@~W<[K#Zư=gv|Q4}߁ ^RXe3kMV5}XE[ހ%T׏gJa6yF`N,hBTϨ(LLXlIz+]$ŷt\4ZR39hڇ&pS;rA&qv&4q#롲y >K*lߧ %.)8.))d|̓ԼNL>O# yE ڹfAS n"Ŵ[Zʋ?UF&Wv^ۓ/,PfcHa cKS`hю_sDp++ %wuWgrvi ~Y>CW/'tZ sN)\F̒Bɏ_/-@Qj=Mֱ =[hWFU7@l_ qOUP&m;uHv"*2WXqV8΢&Ƴ'B{6886_grXsFSoF B5^e{/2m2Iɇ=pڒ1s)쩀4 }%_&\cJsqō-cn轒#>wdF?]d96,$˓O5'΁n]^IZje:j%v,JXcD =VU\"o'K(XqC@z+pEĀxP2*Go\9Ju"BLB.ƱmIt973`jЖ|JWwz,y´W/ق9Եz,B2ïuMo zECdr"}$Ai8reoʃM7,F=O֓NǠ*~K.X2NxǴ:e.sL%s)8FÀto@/+D SaV}`ڿx6*S>P]RIY] ̛e+-7\YS"Ԣׯ5B[z`^K@. UmTNF b\- rG d_]5P$:iwPdRr2Z~s", L4|;rN`B)$^r?q+3%tƱߊgWuwP;YHY(Kg1xFf6㙎Wi>IHiCURt Z|rdΡOhֱIHLҸv-eGƞ0sgDׅ Gu0durr!ssi ?@"3*/ J3bT0XUcܣLHV\BMx{T@PHjϑǦ!Ccg\]RJ/h;SehS)2nl,dO Z>!;S'Z+!  zWkKbrX Di1R9θGQM>qA1VIֿgzJ?2k?\UWݴlSn}ez90d٧[.~l[7B N9v _„Z {H˧B4k'+l1_LA$Kc!W?w+x#5>opa8z֮Єp,!Z(\h'Y`#iL"A9vÆes؟2̗}\ٰpglϥ&b%?'HN __2y%4O5(K-xkninU{e-Yz+*k{&vݱP 1f>$,Qmp&Lk‚P+k[)56݉+$qcy4q Oѣ @ OI$:i\՟TMmm7Th mW",bԅʄ Z.Md1z}o˾(ONLo{EQK:nt52*PֲU#Mx~.Y l9"?t=H%3T?5["q.:345t,) [M=}w΂ M*+^L;Lٱf9߀Qٸj@Еwh.,._!z &s 0EL>?Q, T\4roVI/ {CUW&W*B)6lD &zSoJv naHʳs@'Ext)+xŖ?Gð tWőx9&܄ CTӕiǢUfX6<*NR jxLp BHUr9Ynշ@, x-%!Uux(EW}4(ră\QнG {LAîʰ`:I*%xej.aLGZp=+Śf~[]͇j}Ew7+THnj\,V| Y' ܳ2<6=L4n1: ٫$Mur!Fmt'R)mb$㞋y *Eh=2$n)*&ů\>{8D nv FH_7yjnx`xM񹼢=}D8f&`G -KYC"Ö G5M\>G2"kU\1B#`ӮNT4X&G=Ro$^EqgbRĬN%HT]v MIlݡrE׍#|K6kHwrl6sj= !)0Fԅi3MtED01<4hnMjL]Y 8 8mZN8pxwti 9r@ǻ Zghq\0:vC6wl)J] pK8u~;$Qr"D c}l7Kg8AonI GYRw dBu-LEݐjxsN;~ehʀ< CXѯ.p`#30J|[{zѬlm3},uE=)mo/f_zx|)k03O>Ն⾭C%|5h`摳q,/7vҝW&$a2D]Ez{T YhZsg-b"GZ|QX]Z3D [ ޡXb́<ن^{e3ҝ5BΘ2Diڔo|*usNsC䌂 MY# XnC|B9/j=^6=B4Ȋj;+ɿ[gmڪfߵQߊ Pi{tXTuF4/KU# |Q~zPO0ʽT$ |8ѿC [ݨOZu ʟ&6AEL)!T._JǝJ3#טMUP ~X=Y5s5R@^$?X=ɵ/*SߔFBh*{U샗L $yO#"J2ַ0u6lIMF',n29&F!?o^ 7}jC ojyJ7h{܍ő1%Fq6V99cZ#W$f7= *垆cIFTwQ!Gzȱ:(:NG $ lHʖeF FWhm [O@ңn8  ScD vBP2oޫ߫kbq{hWW.yn)i&Q+w~%'"{86(VE.^\$OHu+ION50<W)eK>*/ԖěG9'ro3KQPypſDEos=A>u/tc_l'S $r.]J~!,_p2_MiAR0E;5mh}(nMFgbۦF'6zUr2LvHVT1 N_O?VKW.kH#Q[v?8NZ] 87E H$#bhHXdȟ)'3VJ1utC~~^..nKoh1_ppqov4{x$lWp`IMa3ȐΏ@jdh4/'}[Bgm@ *iMG %Dž IZJ qe{U݄< I  Tܖ9E5&$FeA56tnhQiUP_Q Qp%ZP(KH>ξȠƄ|4aQvϗ,EG! R/7c'F7c} 7lv=4D 6BokFԒ-IQ#2¹YKP'~ ߨ\؁`nw%i,\ se7.zxU/GH7qF!>K]N=rMl^~ܪL0Ex?doꅄOh. ҪDf=Ke&H#Ll= J#iPcN{NN=%sM5 9{|'IqsE&o~h<^C.CM"=G65 ѶxL_7\cW2ÖG8fZL=yKؠfdWV;0J]%cO߹:vR> .{SOgP(I:M)\e 9٧^9cSpf RWM|]pck|X7\i&9g쁇~$*+) GIQx]y&֥"{B C&E?@PqQ`Z0CB}Ue٣y1THo (9)׸9ޠon Wx,fWsW;/X|o>EC9eDl cp,*2l7VJ}}p{X* [%`?6YXǩd(Y9sWcSvқQ[S`jbhoTԃh/t7 Ȥ:yY{ܹzzpۑ.`SO}EqR-o9#`Dףk/˦%t\cGWjHHo3`NCQ hya ?[PȌ'7Y3x_ iz%+L~8{skHqd:k+Ê~u*ﴀ,;sa5Đo^ v9Ž.S4)>Ifj_5%exOM 5%oe[P̃3bK"7Q͙r&kۿXUSQNHHxJo:S[9TпQDwS:#n?Ёφ;o/;Q`~NsK$Ww:bs 6 c]Ҕ$u&ݟoE%o'cXo8A'}5F]$iƎ5,\)ykf~76߮QhQ[V>K0r} w-q 7CbgVY-c(H +mWFF>p&|~+&7 }v![c$+b zRuL! s4 kFyCL"&, ~Wn<5k g_<Ҭܧe $ Enq"9Bc?W5gdӠM< R{[GMD(PiEk*h͑wGeй] nsf5JQ9B>1跸V):z3D $AU@v_^#~fLm e^`hCHo{NkFDl#4j wrZ>"vQ. .zW $1m0q#CM@eĴIJ 㖳#)P ղ+&oBŭD旺]_8N7]^~FOHB.N2 h8m'x_L8>\:7$$e?FtydLfYXgk,!‰*Ȣ&$.>}ZBܙ6̺H#7H;oqw'O) BT* [nPu@@V5!Ds~ ?ky*w@䩦kFq{k~r&"6F9s0F|*ʙae ALR1I +̭ ax#UgYV`m,vc4ޣw GӪqňƤ^Ϛ|REs-4Rޏ(pGF3a$,{fux%_)9l Rl1_A|_V4|zǁ1h8)4|J ۤ *dvMDTh}̽ g$kEOQkCcڀH@D=hV[F|+{-k>Ąpqw< %I8 !,cNq*j1(*4WW(\Jbפ?$:Xl^"U$GZ"tl)''i %kC8n.jLX!Q gVvĉl>NZ-ɴg( !72:­/˵0 M/*Tl <^ Ƹ+(ZrDvG{[v1 /ܔdqO)y[ BJE/_AlINY;HD 7﫼/Ncq:ݦHy!}7)mu߸̓K$£l~ Z #X1a,:$̈~-Pm TmG `OQ-Uܞ1 7fVB2Lj{ P/s}Bp 6j } S5u89  8U2aN:0baa [Jc6k6 z*VJC#j1FSo,G)ޗL\t&^*YvyŰƹS|2n[7.bXI3JW}ʁ ZpI&NUQ_&[>@!/]Zm/!~.(.;!\|Ը3|zjͺF^A,^7]b ,>>2qrfo„&,}k)j- % ?Fn4$dX㱃*Z< <~V=G* HeVsCF9"q%4]tF-:ژ )= 0a$ >@o?Uͥ(㆕L6䳍:4yԙUվ""cO|w4{2=ΙZѷhO}_-[CZu}+$U@߉g;'K6)0j^"yvx Vz#/tѲv/dkҲ5LQAa85,t+@.kX5yJKCt6{5O~l+Ǻsd }3z3=,5gvo-WQ~O&NBE^&, ;O5b7J%! [/DZμ{Zkch0I#aۄ^ߞgˋ($ŏgK i76~STX(d ;a9g'nD׎d 8;zkpƌhިxV%}WEpc~0SD_g(7ovfNFg:kob;'5 kr8vrP`~C*uy(Wo%nk#¾ vf굠,'_, x,BE^Y vl</!TܑCp-g!b=.(6 j;l:߭)6qlK.B wbTԙS6aÖ^@״2&TDT6y,u]H?7=nDWzZTm <)Yn=|遯+c3%)W>UG ]v|kzs:||*7 \Xȓbzx&;yqNtvG&t|/Zc~|L띝vRJS7ClevcFеC +.>;:ZeYҁ9O[Vbmx'4E@4;B.?=ЙIb7P&&[M]HCLX'I݊$fA^ wm7 Ԛ}~= |~LkD3J J5%qhJqZcfp&u T;㠢 'Ê%aZ$ Fzd jF8UAIMҙLط9MP֯|,Oh 6-V$]7TE`JC{;m!t)sjǿVI7 \=gRL] J շ+MA,ں&,{>Qܖ_Ŧ:01;eUļ sY^ˊ+␿G_K$r00"}!"rH#)QOFzDSvůPj&n?TpEo6^K~644e[sL q /'ZV.$ؑ8v$D B2]m!65oTYނ7n;}upڬl8XYQ ; K</bբ U=w [9s3#Z&5AVK!X(66n rꦠC;Pu4<3mƃ|rM˝M"w}Td„Ƒ 3L!B"TrY7/JW%"B*R'|[wa7g/D;ҫ Y> ^sSsYI=!"I Ʋc8EV&VoXlk(T{fZ1sY%0Q7LJ/'9Lzv+D?xm$RgW-ɰqdm_ETdB~֕o#$y3q(]9O{ȐhT egÖ B]`h_*C:.(Q):@zKŨQO@g#/yS%W5V¹ӖҨVGI٭ [ Fz;'ŕ `6'LRSvLQeZX¶ S7 ^xKyS'&hH9'|teEɆช5 \ F;xԮ$/fUi^abV$pATfM)d6>UCP0'ar,Wܖ^bd\U,0{I~A+h BN;3lSexYݱ@U1_]/6 KkNy}!qGlk+T!wtӛaBd?3.ٷOŖA۬vSȆe{Ċim0#_i2rӓ2Z'k[G(t`8| "C=[]9[*())bpHhhOOʒqR@:a !ȠZzjə2CNZh@8s"9/jkF| @e22W;>վaU#?VQU._uaS2*>)u->OȰ\ÔeƏ;^#M)|^4 ˆX~DC IpzKWgt$ƣtJ{O6Q[`|W ,[p-፲ޕ"ܨ.ǼnZMZ1xK TbPo>V\/ț@~+Ƥ!͘#)pws,mf!_Ǹ*|ڲFYh(n7 œ|Es/r8}'A[<;,u.#*@6}ZA^ʶ=ylp;EV)e¦etFH|ԐQ~ZAQ~gEBϥq[anbn3ށ^5לKI`yܘ%(k !͑ m 8ƽɿkC]XnGxG,;yQni 1 H_χ0~wj*r*0ٛ4'xڙ Duj*2֕ gV)1ě;ZPib{wI^J5l(Ā)֝Gt>Y  DaQ|NM(ώk*"ۣ}ޅ.+%b[݁Y1%*E +i`S|Oh+ M{~ǥ{T7]JL5nr0l'* K BCa⼫'GT:jH9R?tz\c5եvԨYdt8E<#nbJ?*+i@էCWT'D[{$hnz'g=81ӝt}א8b]MjC#m.1D6A)`lT*k`ȉ_/"dc`AfAAM)ãԑSӤ8ȕe@`?C!I%e M\=`G{V,`@y9j;dT)wv2旰HW|j NI9rFYwqۑ7ڳM؁2?Zxe#8MpkQ'渚5Erͻ")붾 ;5Bbx&gz{ ﯓKy :,G+q hr;R@9M=,P/ Y_+%֫v[NyEA=]2\@JCܰܠs+Z M4>DۧW{Z)& 簌}S! Q7iy$^~!.U!/Cz*]zfMnS:c+-׃YZqLʚs`]\sTaN:5H+\JQ_ѻzYә z1*՞ZrA9qŞ,ssfiմi o| ٸ/4$5KnGH)nZGRDP`E}(%g:iRl q) xkK>o*Ց V%utSH;ܸ-JL"<,+߸4JC3gQ\n3c)mB6)H~:|:"a75'B P7?V 'i %J(9'IbӵL$wDA&YI3߻ ]%pn`qq,vLqϢ3=8D[Go3^aLe)V&hj&xReɂrx5°qvo Pq6_~tlB~wlcY6p%Zb6h,wk-*:כgEPrI-ul>ĭCm`-nq.Y<xr+/]D0nA|V?f eWd$VTop;3_P/nm{.Je߮5J|9įGq]t4xS:_n2 WRHseE!5!FܖHs$2 uT^M߭L멙ӵ{_o t{Oԭl΍+7RJ! .LD C4EdQyvrU@٩5@-JX}j[MS߹y.i<jC%PT x_ I7Đe:ٜO­UQxgXMcv`v/{ g %, Iz7LIٺS_7U %# :6P-;; 5 gifcqmo @!C⻣R\r.[OdBmMګiV{;~&BzHn5a&7e\5^eUPe#D1% up@ݢK!N6SfB2V [JdYFh} ]Y4n.cjmK]m X$ PxHD=؞LVeWj[k9 %. 9+> `(͉D&M6bX맑( a ;@` OpF s9%spCXa -ⱦ4.ԕk힚w9lY1 "^@kN̿Uѭ4 1.@$/vz}=47R8IQg4h'ғ$ko%ELլ "Ɋ.")k]Gy~u^i튱A=>IR"Gs ϐ[4k!H.Mׁ!<$ez,|}c*fdΣ8$:c:`[#I|ҧXtW(&WJR/A4 `w>TRȃ^M2'[c)%GeK3RϽ.1!R өN g##5^ȑ;1K@'kWr)JfvfhgRrCP'qEl>Z@fwZ "&4|4-GjnILT|I:3hGT3i^8,n5 kFjch;6LT=Dx ̓ TqoXc~EK3RU1oY]qh o3<vs덇g.`Ѧ H9Cgi*./gٹj<q{Gdx'S3\ :K]SUOtOl҉ + ԹBC5'C2YU ~0$UB8d뚊SòF/lB".kJd!!xb^ş `Œ~5<;+_On}[P"&ưB,!v6LVTUz3;6ta[M?&#[T9>Ml |]8C8KS.%\< sa8w`Gg9ti79J (ˏXTS 9Vhy,Y2jo R5b;;w?.MZ]6ӝSJߦ6;-U?#4`rQ'5] HC[q{j/XcP$sj!ĭߖ{lo< 3~ADe}KVbdjdKP!xHCx<>?f(-q[ %Q!u"A[D"ǭ^m);t'L! O҅»2/)_}JBLS~IS L_luABϭuqrRAT $tN6mo.َeA60]hFT汧i4خű_"vqjCD’e_S:/?^Ϸ%r5`kJ97-> 1 Y>| 3#ޘ#]-C 5 ʅ}~)=2 Vka+PC_[H&Y K4Kf+K)|\ ;D t6α+]͆}kEX6OH(Psj&% mI&[PXo&dW$qĒ"/]`2NζZH4_'`pGMuc۔RPW,Nymi7om.Ju49.iP.RB縚1ג b6HKVm+mY 쇸!Tt>)8*@Ҋ@ؒh=?=Bqݺ-ZL#\ѹαWގz؞iy -iheUQVFiT UAY:L?xeUkK&Ю+jM~jg7r_,{kFbWU|OGKd>3|io_0WP&b.:-ofY{joH#>BfkIwFwRi ;@>a :?\R;M'b押&swJ%bJ\n\A50wP &E8[jÌi\F)_W)N+j^ͯ.HpL)5_pti{5`<&8Ur+H/>-X\, v8h1R3rqX帕>|rc43v($NO=+tA)\48|\zD g{RQ[>g KiCܝ=Nul :? qf-7d(z%?׸RcS(IAAЄaV.! 戡f}7MN$?g  窊|e xzdib &m? ^<EY Uғ#/$&Oo;!~zLhu碇ΗUJfy| ť_r_X(:=d$v+|߈g Yt 2H Gߌ5yx,|LO$uϰ(ո ?5A!- yb]tC؆GX.#4[+e+msi:Mt{k9Pp5G]~QƴiV?w8l–FO` k yl\vE a@ns!y+=h[B.+Xgmn#݈;:|9=lHPYx|qV?'N2ǯnG`fQ@2@"\XVf pwBr#%6 ԅK.PǦfH P:4Rve*5" +{SRԯHz3^!SȰGx$RN:UF '4{9#ӤYzdLǗ~m)~{=\lؖ+4*qdV.L~ B2?-+\Qv1R]܃kbIqmG0 ۛP~'u: z, \#2(xr!hOƙvqPRQ z#Hsn/adٴO(b7K+g9g[p{@/aȷ+/1žSi@-%uxv>QȎɨ9nks[ UDvC3얋[dX|/J BO4fϱ C8nҜ/詝 J!R'Kލ޻Py@)dq7KyM+4E_.(y9UGwjml7wч[O{I~y-D:c<.@)~쥨 /mꍧ>њx*;t 8&ElEs^)Ō7Hul@a(3\K&+J P +\)]§h_aS-nS2V:.xQ䇶26$C߀4!J}dϜ(p5 |PAj_/P0mrv:ǔ]"O,yqfT &|H(@b2|Y.lS:3mR 33Tz31W)庤鷧4SF&=;Ogp܅ fx dv^B|EҙGw+h*(V9-BE5T {JSZ_~Ke`xˆwfPêhT[|1@,&+? QɿmBaaeQ >vJ (qSL6ÆZ"h,Pj.h}#͖8Hgn>ꖊ?v̲' \TX?Q-JkM&5D+a> ?m\"!d,:d NKTl g ad1/Qa% ?qjJZ"FsLV:'Ϭ9G(p"RUbv²ƥ|;g!bFg9@vY.W7vo}\k3Ci1v/Gy[7ثB6D4I3L W@Vg"'fwJ>B,̈́B(E5 4gԥ &CUs]Hg M>Z&iS'F qӌwܟ' m7 >u2Xs`[#'1NIlLvg2|+.xLChDK82s'l(JG6C$BwkY8:,1pʼDEd2zZR2TL2jdv9rI11F.1G4Mp<;p=n!-`ۣ!.Y"]?>g_q5ELKJ(E"۠WZaO.̴t-I/yg 4nu1q]`ԖBdt˓9)>BC\":蠍s*jt18e ,9s#EQ{pkePɂoa)c%rD"&a;sQ2=Ω *~}K.oa-PHzP;o߭>"9& !*Ss YKs3I2)PҏfVvs=TNCl|J:WLۏBm7t %r=l.f_RNfD0-S [ rӤ|.澤xS{]7q ӎ< aԷF9XVIvP0'#HP6PA^{gԝ_ "s{Eur AsgdsGZ$ %aG٘ (TSqF>RUsBg#^קi1SXlVuW.!,.7ImkO;u5uܦjRgd`q'QfbqM: ž@O 7쇼_ &(ߒ覂t/(!guߵ%L55&*}eO2^y2نvNQƒO;lxa 軓c'!z_ r/1 ;DDE!tp#:/UMDЅ$r zApPbuoJV@|s)^J Yv:mLLC@ZLbQwzJý4He`*4Oc_ -((nԷO 5ȘYlRBv3F :vCXxdU"N'b߇#|lf=ZM*R`zz-?OCB{nKr+P75Zx/F薑1eKOZCS=?SXQUN¤KXM!7חVzɜ/Z׮2=.Y3, NgyCrw"RAq0dH+M78ȥ`Yef$/Ѳ̩lM7iCĐpCK|[p$So$:6=,U%С٣BdjNj3D:&OҔ.è!@LpeЪ]Š6XkhjqKwsH`oa}JN%z'yM7p}PCJ:\4wTwx0R<OЮd6-\b8eP^EhsN$/l\Þj+!}Q2y4u?-i}96z!@llӢPmk.!g|&n\fm\E' vf8圮R*a es(}C|tk01\Q/+ŎO@Ap$`rAn؅#mhNJ&$F8=04$wXIE d0}'t]}p u_޽5B9OJoK_|hJH[3T+d?&EaB# zu|Urv2 dB#nѯVƦ4ġ햸\Lޱ8\ֵu%oH `=m[OQ3ϧ!V3x4c"}F|ƕq)6a2)u3c6.og[^[<'2 #nh9 @z7%NWvw5 `rY:/D/hv@mDf<{ML<|Z~ Ēi;y,UwLUK7xdޭUfiƴ;x_/V}hn I'#))b,#qM}]5;K:RN9=)O:Ž{ w1$qό vJ{E\475կ"$^Mz.. !١ePA(@wV>e]Ir!8q2o2w*Y:-a g(]-LgAAQCj^ mT!'5l':gO&|Dd옏[ eYrGȞT&N_4$%P4#RwYdZ`OhՌ&)~UZO̔}羣}х tiU8P"s}Oʆ_̞b**:9(jm*KD _M|Yr ~^@?9R=(S?`< !1sx )  p=DTꋒ_!E+R b+ILQFP)XXDh=kB :"=S&%8ڃ>R"?"<ʻ ץ!t93E.w DE%*;p:Mk[FPrUOA7 U[IKݕ\ܰ#6F[5,zj*in]Į|ʼy߹d bjs֣LwCSsHNIn&^+|YM3`eNzdl?hIM,)uY+e3-zyśѢ='^R3DUW۬?!>obȸYR_#vI\ }eOKPN*ݷw@1L337LUo:@,H)w ~nG:IɁk~|``fJрDK7wzc(g{eժR&f[~k ?!' hRu"it _1?Z\v s8LΑ#[ڒ~/Rp3(={uNd`1JM5:kmg_4F)fŦpEY0PTű )c(+KJЯ2. DimmP8wy"u6 5 Sz5bȷUm1""T.RQ:qO3k\hHV'$}U D»/.8wqo%QXaۻNxH%,ɻo!2@zQ! v\5b$fR7Ʉ.X;+2цtp#SN`Hq *CRrϱJ&$Q=4d+{t+Ovs^N]>," ]\ -YKTӲ\eB &ױz,92b$sb :}N\% [kǩii fK|+JĻ _-t{{ϟi#:kem ;5_"Yb tVM_/ReT11d-PgBsȅ GXn=4pAn:ۆiؒwYx֘/u!Pi}O\z(Է>?H\)aDTx"sHA8eՊylR#F&FillzaIbH_᰽oEZ"zZW>U>!TkYu ⢅7&ιĈ~2:S5`:ih3}v,kVմW:>!Vml[2oK.{h[ҋ@qP>!G]uX=sVO;%'G 渞/h?p[N9DO%=2D/![`n'!k Cq>Rի_'Ϭ Kޡ66o#JFA0P$7ng8$(\V1Ppr36S9ѠJgђ7v% ?貟S0v㏪>N\~ ".*[! j-){+ }Dť10ouEH$n!ٍshvPV$$(g\,G}Nj 1mY]ގ߀v|B_5p1$%@q"Xm$YOt֌hR!#@ܶ ׌[(%%{MV%AKIYv{{Hpfǟ}qy<*_oTf9p)yH2>{1Rd՛9&!yKؽEirzۡt%yj|#hU65!`EW1ƘO9h;!cD/U=J761>1Cvlkނ3%"^Y3-f1<"[ w uQbOG_PΑma'i

eZkDZl|JԘxId{72n&*m^j[L2j FڛxqUڽyPs6nƲ)xZ[FՐ9+4twջFBᒻF~Ø}Yi-QyV+;-/ OXMs+#*W8ʞ4Zj H5 tkP ߡ8fřhnY5 yu1׋ޒ>VI9^ʛ([U_UⶪB2:r vh9C~ixmӾS@;yE9w#q\e~I}eoNr՝&;IK(72MҔ'R6'\.^"tKiZ<9jOoDsWm#R 1 /b5>z-'Ba8 ß*1qn$حGeM BY۲yѺe 4PSqնygV,>p[+xHT+e< ,!*rlwzCH 8f7=Z$ȑrSiu'ŎN+BŎ4OF`ŏ 'QŽ7-XU8r Y}bZD˅e6ͻԈԻNk ~W4SF &|vq._>,ˬ-ZGY;M3`#jY7K*QdM<Vb/*&b~"Vtn-:dx zo9`lRD6 U{e2tcVV%N??UvGdt! %SP?ҹy~d)?s K. t=q>J; W+Y(1߅)oF$>qvT>v|5l).UD6-n]*GYqcՏ0a |zĻ͖`IL>Z{֨rt kZ.Q'i#E 2y @4'G ƾ:qװg;IF-AE:{ {]!}$Z K51Bn"tSJ< `vm"nW2қUnڡx(Ҵ+!xSQ75 ơqZFh&vc!Db\Gr?s>ij5A+VMsv5Ahw" 4[FAs}~\bB%?9֊65A'ۼ+ߑmF5CFVۯj1xEuZ PƳT HTľ&+{|lյ.Ru.~R^;KӋn(kڷa'z-^6 5zL¼s[eaq>?/q.R1?OLN͖,; fl6vP/k%a`3`>P::cPULQWTU'׷by>re{/|9Ґ\]o)|?6рu,U)/h$> 8`RQcƳ͸iۅK~ˉWnDv]6J׊?Avb @{9;j[WK[]aQZA '{4 _8IqT6>2:ww5^?B/ |3k0s: :fQrIZw}R $~4}AfgǾG Hͬх _Q麮QW2ɸG1w~oT  5hAyTsvE$;Ӡǜw€u9)% Q {If 1\Ddv.AC.Yl fsi^kڰZjYh\x@6EsmvOtga/%zOnuP,}/L+{8Uʪo>F3 zu.]ZPɦh8XnOQn3͎(5?%syk Đ\^k'dZVEx8|{fUC("v4"dN¡]ŷ? r%8fk [L@QCggFK%C(;tϥRAWrRB. {=4>P(ѠzES^b^&k^'xm펈b|µXbXr$r"vd,S@N\n0 Eشee͎)h"w9l0Vx9b˱$ZIP 2y:`g{'{ ܘU3˾uEοޖEP\|0I.F6Y4Τ* PR:Uh,.d ]L.8qab SRq^őٌr?#=n8p+3 { ^y[bI] 0#lQ쉊ĚEcU5;6-/D̳^7&7Ǚb:A%FxA?;Bnu㭫i ;I'z=T咭NAfoWP |vwuMCa6SrKOccXډ=zn=BcF>]+'gR"q3 %c$*BwNG u"!|ǤVv"}Z8pQtc5A,y%q+!1TKx-M Z;Xd_)TjEU.&(w/ b5A]9r W,%t=[%C7o,ekCo{|הNJ.^ 6#]n^#qZr?QDY]NA(cjд]=TrGYY4ꊫV6=wRBvnN˼4 p6q%vܲ|v+M6Zv+=z3e)|WǤ7xW]Ȉ $r }$ѐqh-}\YF.?km##GĈ` ԓ=&^ Ul NkydOڋaE5)"B*T}>-_6^ e婟%u(z\&pO_\ƺ(!YlLmjmj>Ƽd#VF$>ت5A{f6ix X~}zS*u&?t8<K'F nٶ\K-*xP=4ɄNЙpmO]`Bּ YD6j ؔ:&Ęď6>ߍ'%پP8'uM3oͫ$WAxERjd-J>Ur PᔫJZcɸaW[nvZs}CIX! SB_AU[dAسsב %jI_R sO.о >;j$l&i_/m 8 o7`NBкxqܝR~ o.%9 14"op IW9xy HWCGxL~Dq:rK + =o/w3^1 A7{!+v猪]Ge6xg9_WH~+//L8`(9~ jPp`$?k(wxgj8YC#X-T [CMZ mZ.'U_dP!~apoPTe¡s(Eb'O!1gnnL{}E#1-6BR`FU$fi+Vp$_ Ј߁Q^ NbVKŅ 8Y:hk`ay4x8^m=sz@D˜<잊Аs)rovcI;G#yɆx[.$;Unm^od^F5$onFN٘E@zm}LQ6,Zdiy(BYT6rDqiHС31e4|vVN&pCLj~0auꭾ;詉uhIM0Um;R<\PfcYS^cLA]GGA.x8`4i<1(o ]t(Et!@IQb $2(Pzc;.򃋎Xij2f? Viey _qqYMp+@/!VGm!=gGCyS]X[tG`+x' MڦR@eXZ= Phm*xe z{`!-xg@xkrߌ=<29 ,~ݻΞ_[5o)7ľ%\/^xB bvU'›޺.%'9\>ڼ/JTញ_͝XZ1RNJ9Ln;)!y㎿XX.LN="J oǜ%n*jjO1wSC -?OAFbL Q6FNYtu[Y<+UV xԨST7M)z0sE2@1sC+}S2|7{`"쏰&__QC9ҵcI) NΙfv?{?g ?ߨ:*A`a Tc V7+['zҗZiL/)j _6)>&<*?@K0_EaGY7%5k]U,,y !?n5jeeQzxrCu ]x ?o&ơp0QђjwX"2b:a_J҃W< ?p3re>0=4b:g3_!ˉѺupb.u;$uP"Uce;D9:pu}rՋ7X@u6hF*tt~$W4OIt|xီ 7|](EE\xfނ"zYPUU؁iU˪/ r]7:M)i&# pz8ZiƎ?C4A B~BUIgj͏2_s2EuP^ !kW)KjX 9 (uXQOew& =0<dMٮ R -H_E`<2E}2x#`^|xda GoX :L"zdNDC 40yr  U^ N,":08qj@gEida/rVLݛ8i0!š<ϓWA =7),ht'coRb$Ҁ) ͅ]Umo^7l'^-.K VN/@d'Coe$|ṭ RGGm 0T{4c9fR38>oUs,+ψT3m2C)<+-E"ww b 1毪TR^J=yroLGGžjb<,$^ll\3r-C~RD_n!aGQ4/(,X F쀟T17o+cl_iؽѺ{U K|D7;b߾TK|Tf=Cz>=Xy姆(W=/㤳lZl-TtIR 7]D_,ق ol֑B|-?it9 1YY=D:=$"ЯhRy!Dz*87:k+p_h=g숙E 7ջe֤ (@FW47a{LLAٮyG;1+?NğJΦU+nLf:E(APSfBUW#Ajb돫Qghs\- mRqf[6YNVC#~ he:z7N>v47,>:bn 3HI&xz<'𤮡ݓIQVC٢\Bэ#RüoC 8k#}ض9NẝdFwDe:u$¸"Wf2*e6_bF(U[p~ĶH8w\-8,.>al8v哌T"E{Y?n؈#4^D͉(m0lB\^U*c 5e%!_4`S*{3mVmr7y]3L_82}],?Up->˽17GA 63TuVߣ?^ddGD?:S3 \T*b[Ī.),r83#U'Ŀ5Gj%SbV2-Ϊvi'~P#}s&6\ 5;#kߔ1J"|YRP=++0T#Чd&R^ ϣ{VodE; {] Ck-BeF[&ieߊ``5 Kj5S8% =S3.}*و9x]C*ؤpzR})m?υ@EoPfw8 3'HQ vϕR$ U66t`kG]WczC߰HgvBH^%BG3ZHA=v5EX5ϐR| Ց9j@;Ș38>=pS,:wW $䊨vzuVRn+*TcTxv|A&q1޲ŀ-7󭼧'EKnL[<jx#Z:a!$żp^RmO͂DVW4bld4V D[ghtۋd lC^d9k9DUmtl -+at~o5 uT7˂ߐrR/@*92C]<>Gy5.A^"&װ,N~~S)t9n{CNcy h5ɱXC~{\U q,:'v6{ SB-7dOeprUd,:8F:̜ g G b+V5.m':' [U UIZ%q଱QxVK'FՀW_OC nK%6Iacx'MP UůV!<\&Ig(Б n(W/\e.N.Ye-t>'{zeRSϯ<3x\lep໢42𣇉a;q;\VAԕ@DA&puX`6+5a됫$@aSx]]Q+&aٵJgL=P{x{S͝7⥵JT_~7G;O%$\SLq Kt$}MwL)8<6͖?#q1L;rp3!f iѐʂ/o.8QW̋y%6@Nkz =\%C˃elm~*5aA R79Q<'|*x62g6xŴK[g'95m;:|vcZ {^$SMحk{M]!>>gլvv?0:r)5;# ayD_igxYoL0I '?d)- Ȼft'BSl3 DǬAC׿#~{MIlxV*Q"0j<2LBRb*O&ɕ6;b= eLRuy67}Z1z^Üh'KQy"pU#x]17:Ƶt\_^@2Ot5>Bq96+j ÇH<=X,\Hk>"a,k=ov G*o^Cvez j [aj!K=1kQ!H ӾPjUiD) 1A^9/Rrt > \,L:4<bs!3>l |ITVG$zlEraPgO EBP ;O=ՌEL쫞*ewzZf3hෑZ|•ezJ`dc$`hĭ]-%/x]T@9qQ2Qj:^dc:j;uU3'&WhqS"-+ohjhpiU|7k$(< o`9wPr/_[`7H/RbK !IB.CIW2$..]I]˱g>XF8E790ks@[,ƘEbelǽ05B&ud~@fW:{1 ȇF7fg8&pp1_bиş23wqtcw_]q3AkD" DC0syuy1mq &liﶷhPı2Xޫ@nU?݄-`aM& ֩kT 0t68mmavuWnV@M ;d˩D=$&=R]}ٍ~e#GPP@/\ GVϣ O7\3悍X˒x͸(9[3l bիAtNȓc&[6Fԕu+xd=I^BT c5U5|U~ .D`$ӕ~D6Rγ__6wYg{99L[6VPWU |m\FgomEAU:hCT?T[e DXޓiQ{~V#LP9φQIԑxUn钭3CHtfF$Ap9dO*p@Jі!OϘ dQ,{#4 ?՗# 2cd%\qeP&lwVsxp8O_l' |'b% 7R}9@Y^LL8E"Gn\T \}*.-_O[$bqd;9g-j,I w-F6¢DTv/r .E'a>gj ]Ѧ<'NRLr62@7ώy D'pۧU@=w9}/x#PnjQTGܚ"+pJiI{gE|@{8wz"s.k:pӈO)ݼ/^8!Y!Y*G72o088dȥ ɩjXQ)WtzNnSsMFĵx>AhT!tX(bOk=xie tV.@D>ZڴCt(ؗQ&BJӦԢ ~H~ c!2׃*m䊞MS59 #Jwɱ!$jq +t`͟sa^zoblt+IsW]LҲa6kѝNw^j}3WTm"F;̧ K/y‚mVn`(,Ɲ셹FhzSjMN0FWۨ31R}Y(2;b0QJ7MsF7cd#їeT1jnC`we+>>ǣc,"X%?g hqI5=  3%<̓&|?QUz˳c=C=o*=<ҡ7p]$L^H +YaED?}߼  cNN`K1~./oC=[ @I2An8o`TLF.*u'dO*Bj6I i‰r4P ńMH̶Wa4qoؾA'3$0uHZM0+AB: Lo dk6؈ķƌ8%(ޭm<+\NU %Z+c5dDrwf 7+a* 05 W#+=Y[G+ B랽3V4a%7j%Vx!ŻU\tIaYx=`I&4K5dAz}+20PalU!TQ& R-t]aSk8f&!if_l?RD[Mx<2R.[CZ>ȵ|F76:O.΀)HeMìSGqmVlJvl$46+ >ee@*'ue)2i2wb?T&n?NE^129MbBI堺g 5.P` Hi|NKpZ9%N`YW罥oXWUV) yUQ0aVo [{YFq.A*GH1D8헤 tփΪޞO{!`/4~]z?\.հ>,V:yUӄIi pa]^2"7RvȣT<^kXvNJ٬t9uԂe^zcÿ~OύP؜ة0gJ1".PodtjT9)QlZ cV`w-dA(,ZIĎ[I &&5{:#IJ[I+{~QpvS|Dɰ;gpul%i7k&-æE;;, "pr.R@=)8s $/BKN.:q>6Dg񴘐lX@b1XN)D do`(BTPjpMЍe1DAǀ դn6ο/6% ”}hN?2) :pM3jv"`t ~|U㲦qQ]UZ"/0?MRT{ϖzZCi!PԗxjZI*Ayn.Wdz/,޽qΑ$q? l(gd {Ly>ޭah{-pݨ');vvg9DK"Rah&eNBWH8y<p·}˳vP7tXp0js{B3tƹzixqGjr ;k+? OjԍJ+nyki!Ħ'Ʉ/Gȵ=cI<%|)%#r<;Il>` E,qsq-`}0ռM903ł4X:t t 7Ci|"VOG "3̓9D~j4*yh!H_B6DCQq8u9Eo Ⱥ-W8e؏7̱b\dȳ?}MDRv]&emkv\1r?̤J--1QxhIXvT@Y;e4X--sƀC+jb*C;G? jzh/_Y?`o1,caxDTf^{yfd^qC.CVH7+WXQO x*6&WIxĹī~ӼĚY5cEoBY~Lno)N{(D%G`|SDi;"eŠ':o韰|b @jJ,8c; 2B8\7؈zA; ω<:Dza!bv9Y{UPгE# "7SE~ZԃYZeB2s>΢FRƃ- WVayϮ~j0(sIت۶sG}_IDT GuOzuu2=qNӵ`Uo|2f(`Iyb^=mۨ YcDcչpUD_1}{H|8H5րAvM]6u49 ˡkd,sZ+^d)?3{Xҙ4-_9! WAV--lfgK3^xI]_Qovx})]2 o)眀T.d"~l/?|oh(O 'B\#k\+y+!D U`zJ|-j>Qa!;0=wlP \hL?b2X/A "@'Sxɟԇ$+_M2XdƱ L=kB$q‡i*c"!LH>1u~{R(m0]3RAG[MP/+jUFQ3(dSXsߧ15YrJ^|`boyHr/bXͰf].:ˁ\F))X[D7YX3RzUM?w @pX_ž~Vw9HqSӶ(0pE (()$hy5ļR$KhvPDاTvrۺ]P<N= UiYSzx05x*aXzc' []h'cq-*Dv1-bvE*{gj 6 xYOQHwEPed{ 7: Oq,Og+G$^3 ]A7N`f?_䚬a źv#%G嚰R-)7jic+gx.ReCj# +"kER5SWt@R]xʅ\ YBiUlNT/q&8=A&w5? @"cjI ⢟hZ] `rE1 Q~j$jtd)"v}șBrE- #i2vYO)6:iŜժ)jν*jXCǏ,71"i22SO г9^eZU'MLP8ǽ0wP "& e;D)o;#[bPqh!ڤ+ ~`›=6OY*vp1=:7ͲZ5-YvA)sg52g(&9o TAw RWbхQ՘ѱY:Vs6'Įۤ+\d(pbSĸ[ֽޫ <%)r{-wّ]Zz`13e뉇 kqL~>M4h8 0Tj&>)!g/z_x1]et#q_dgeԟLY@NCOs.Wc0}i#~Yȩ44Qꔡ`0{.P&~"Aw8f"toChM.L^#{);JwҢTs^Өe*9hd‹,|>RA7}wW (.MR-ٮc4A$wfb^? k o1vJ5 dxH>.IO 8V vZ ~8J*+o$K$z),++ԶB0szM*h Z3y+}z)^ )^)v ;}(%NczJ5v#2ԗB5 Q`luϨl@`&8Z!aLr5MZ4$?gp˘]yhʑ<5ɨ(X\ETw''VJQNn /$K4)ttr uh0Iڤ9Z\<ŒHh7>o/ 5Ķ|ʱ/MZN,f:r><,?nq|)Su)6xI1pm)LM|ZyR>6A{R L\s!Jf G3ysW`\1ʗAxlw3d_fR ${ęlaP*pߌutR #9Ӗ(2n oLH07i%%䳐׽dd>()l$@pgFjPTC#r9qR3f /s}fM_us9_I gJsi/X$\ZE!F2r5,^//Q3BfE}Po1Rq]ʬԠ.95`ݘݛUBD[v%U$#<en{K*NS 3D& s jyN\C[3W S/cgnz)wW15P>WE,J%S[)2wk<AO cD"`Un3㉹Əy}MaeDF`@abk'0ݘ͊ŷoOESK ( قxhN&`Ơ@0g:UdjhSr#iBaTq  * 퐄NaL Ȳت穦v8Ȥ6|f6vl8UGg[ @ *TmѢK盉]be/#xVn. DF<燇n8J8pi1J#c$i=0tCR{5t{!z`g,80 we.Η`)$;.w!Jjo67mm=:\_-V*Ex%jx*xMl:k ̅&|*T~2]:i)nAFXʑI[0%I;]ߗ6: *:\Vʀ-OmLt@Ç R~@H.kX9 2LZN9 V9>vt$پ7H=\Zem*MY5B|~r.`Zoao\0~Z$(whJgZ_syp;H$JmjnK7S)H&Nթms7|o⻳h/ k}]~Eoȥ5܄r!-3cD+<*kU=o|3 Ch^G*ʜɯ b8GI6ڲډS:vÙTL)-dB0 >Ke}&xWD S,R,}: }STnQͤgʿrSݷspK e ;K8ο;rpËuuv  $->=^QQHuǝW='XƏHT茂<+^NU({%}hLjg FTL M$7 mS4]`GT\5k+WxI9޿K`vk1yx MW9!1k$%~81n-&Ͷk'$^ǒ6\f#Ƹ&7SӑE`/oOL[hht0+Ncaf! U~I¿R2k=,k.NJގtx:1}4 ~2RNy{PH;z>3D#qDq{H\>x%&Le=Lɇal(`=@z™H~ >Wy\GH^/7lx0ܳs*,HNcChT {Phfcc!CCN_v;f.' NvV#_cZkvBK}W1ȱj=:JázAivÏ8 C5"0bIzpL34E|m &cæ*Yq&(gbɠ R0] m3BLě6ESmܶ徫Ӿ:8+NfeLFPi8Ta I]RZeGz*U%aqIU !kMpByHq|;Wށk| g8r&`.u n4Qwٖ5յMTh*xok=,Ϸ,:R\Æ;ugۖ/#*XWh?:ns:ְqJ/x^+/vCfL_۽tbJB .--z;XI̛j/=h4@orhl*f%7'W""+~`dFn WeLM{dk7F)7h{_Pm4Iu*೥80)02hH_r~q)RԲin("C$EHr$쁰aO'H^S"'q7Bm"]$v S=;U,7+|t\eЕìKو1jG{|Z1ahBLȁY9"0> p5c@wP>Pf ͝e+T=57&-i@=^ppw,>3w?#;!D}?luw*PQ s6O8)8drH3iFh:_̭&^2H9u 08Ces/_Mw(3v dx+A9?7?=aOX=r %>[5LTZ~Olt훡bL^N$`|FBǹo~ MWMi K~HRvzE2Qv!A/0RV{%Z lȜ+ps8A4XRENG{%io]%J.O%7dZŝ%g񺋛Jl&dj^wb݁+y3 h+?^جGB! pEDU|$h&yL%5۝~14qwpRdڽ8BIZam0 x{2ae[4tM>pH&4` R8WJxŎ ( 3Q6 Tf,V\- Y-LxN?,90(^Ʋ&K5[ PhaCJڄ%&`{)g TF)䁾TSWl\e"EPY1M<?v;<>' Cvk 3FXiձ9֛m9M%tw`f3  4ELm)SPAXag%h9S:8jowwu},"6=/(`H7ym*tYJ9u9VͿ͇'7KۗZ/w+R@AQ@ŵsq얡dTwVC6r~b*K< C0C)xcTH$;sWR7hփŽ"kFJ<*!)fI(+ 'HW*^<=-sjFf"\Ep#M!4 j!'bK+Qv:{nG׮ 8MkNW64)%-KC7̭E>춇)! ˪0\㽙~K2R6β[;陎Bfl7jop(Ė'q+EșoɈf t.n$=4:ɒЦ5q1 CCRf+{ۻ{{nW*KML-` 3Gp#{Z4d5n-6p 2(o/-:/KUldpʌW7fB-p AE hURkב䋶%m+T\ cTKz奖 De27{"v\T{<^SXgO@HzoOIJP+%owӶ*h'r{|ڍ5k򀋘Miؼ9ƍ'DIhQi15HB]A! bA/eLP1I6&0~U1~] ',Ɓ|nyOKm|@,DX&|+ZwD7W{K*= )+_^Kzu)V߅]vcA8*,_J's0b'Y9wb*O#F3#N2q26-:? /r=6U .`{ F.^VXOL фqiʀ$>>tw~͑u2-3}5xZð# 'Rt~?qg%3 ]"z^PŷP_X ۞ch"|K) c~3Awl .:k=vnkH(ݳD w=#gRܱrď.J?x@2 ̥՞+EﰌQ9NaaSQC}7YVj\l50Jck;߱^ gɀWbu01t-3*tg^G#gH(]%օCN?`\.dcpewL+gTG2.i@5jߊT~`sZPE=)zώ6i#Onte#z:#pcU2( ?*E">4ƒ,:wJ'ؒoKjJY$*I^iz:v:PYnKIًBoA(ʇR iy$);:m{񘞽1H6^td{Jm ( z;jpR\rݐ!AӺg!ٜWJ>}P)&ă҄^zј J~L'ClA5zӵ n] XjbnyMuE&vs^t] U ^ u tH=ΒJtT-dgTBs G~d]e7$44Re~8:gF+Sts+5  s s1j:k:^uo @ p˙Z"4z)npkz(C"8 wA_ D^WWUV}v"wsat #ҌAtmOJ/j[kn}03"mɘ}A˲,4n2%moPRشGY%SN fnD-ǜ,gzkkxȟ*{3`0ʸ€0 [Hڎx73r'ސl? #78>SoF#=QrIiK-'_ 6r4x^<*]~J^zRM(Gf1JD-+V0NJ2A|Ul~Հt-68V;\Y68'fC,[㨕/ E 3;N[]g= c)*'J(s= *Z a+Kx,7ws(y5&D@K_,[ba21 X-,|^ bq!%85"y I\ޘUe7+ʌk\' :TPxu^&" ZT!vЊ?>>ne0O!`t]c6R)}AB|ӵNsN6LqV#ͳ`L^k _& &8jrz}gہGa~M>D.1)`W]^Vrowh˭-;ZDۋ-Vǧ֗Ph Z P\d;9\&)fj3e} usXJY Tթ)E*G>JeHv0: Zh @Ԯ_~?VL * TArY\+?pLr8)`6fտw h:m2;v'4t;WqXQ=QjKvPْ$di lrBUHgR7$]jjX6 (ތH~;2Yb/ X݋tT5蘘q8HزF4MS>,dYnD1qXg.-ٸɏp%qX.cc\I-LVMɇ#Z(e 6udlT\xՂ7bLȨJ.IC23wcp"g{?.UMܺ.' :#KDt5Rs,oKCp3v^?$JF-,`f4aw o\>#і[w&{_!>y1K(0,Xv3~89cs8ՓOo✒XmR+1bYUby])ZG:?*zdc@,ɰ DR`]ǣf}ĝe9RG rf{{@嘂Ȇ}V \l6kszt|s3$ِlI&{ǹdN0}S ߄2|w2Cpg_~$ ^ad]|ıX9qOqW98x:D 8j-V&AG٪iseCO#h\PwFԝ6#a-[Xڃ}bNV@T1A.YAįKڂál79Fwъ)bYe5 TyDnlYeЃT D1cnX[.)w|hk?f :4 X[>rLʉuL=< U2bD4VGԝq_ >.ZH8C6@i@xf j`3%[ptZ8pW V,YY-A=3dYhAS󤘃JZ͓۸¼ $b)`[Uڼ }tEpLsEd"zCuլg=%;{tMtOFU&kUziHH*orUsnWwGR+'&4 xQ:K!5E^f*0 ^hI!uZٔJ)] TfLA1=6x (rnt.aOK6jmB?dAgmdsum59VDhK, 8Syy֤V?8顶{Ý_ø2A5\DilԸp:!.7detygZ"M:M6%n)\ ]G#P3Ja'S,"^_q:#>hIqk:$S_`~A⸁lm[RW<UJcYЯ n>D^eITLT$] Zr4 C表,Kq[hl&^MGQ#KXp!]4Tw^,B۝qu]Z0tfM;ǛGx6-DገM kf,"L<:kI朊xZ1{&2 6ٓôzΈ*5JܰI!^!L̢8m*(3Vc5_b;ȕhPVM)@t&elݟt]!uf62rX.O}ko=@ &ԍDq;Hx4%٪ .9M3#lK%DX$D,yJFh/t@Bέ\b"w)d#,-CC<- V1Nтtr\mьr+GlNPgtd97ulRή"hcAz!=Ԉmd s/K*WDW`֤XOӚ­ z3uw.'/Mz-A nW\4Ɂ&^:WFjZ9ѓqKY_V%"Y<2E>S\h.V,+E?rh[ˬ?>`@+ xهWXK#r~!*1j}LQk+Z1Y©ڬ]DoRYꪡd?; 0kuIP0'@&T0Mf/Xi k^ԤX8SZT&;˜Ah +5&_ 8]BחlXzjFϓ&E8C7{r|ż%JΜUzd~jC$$(",_jjW -+1o >vM29D_ͳ)qt^5ڣ9M-BVBp-nq(U(t WqO϶qlg '(*4hA֢ail BKՏS666}-ʃp7p]Iݞ0(*K5:n e\.P,,[ )4`Uӂ(1iSm ,Ε܈*wk4!;,=Khhox]z ku. /9·Bth@NK1.ShP]͜ko.,︿1t_#DV^fNVƘ'}_Cv'5;5"[c+BeEZJ1lge$d^KfiO{5[1/mw#-lOh 7XdLj(! h!OGVbM&V`{K:%+p[m]+$?,zw>IA5UfT˴]-TJz8zHK booZ)i~rs{5d<1.5wV^w,iSM9"$5ۯѯB_+].8b%jr +/Лq\|h:*kS%Q&v2be2,hex79㟞κ|`V$6X]G:dH.':5'KTFVD G1<.i[,?CՑq/ c1Pw%d`{]Hcq.J@ٍ_2"@ [|1: Qt&x+0ryw0%5yV^4r *dJq&L@hJFt̳px}9N#)5EBT)PhƔ⦒h訨QE?E]]Q[ lu (B9$jUjuqS?Ve5ɩv% 4ƞ_禩.@ORgcDVsВ8*n#ڠvCT7CJv'vEʯm[5')_5G(G/V`ZJ B^U 40T$10$8dX]RF/1+M*E+IL>XyjWRl@ $t_WJ4J{FמٷxUҰՀ67yĐW W…(ti) cuGnΉ;ѵ g%״ ]τj6*?y ^$7~- z(䕆d܈V >EnhWWƵ&o6K,ag!_waP-(*We+(h)wxj&VR')&8|&w8A j#;LJ.xЈu6Y^kh#,c9s(8d,wwT:X t8 0X\>%~]7J!Ng-=?eD?yi@Pk"J:d?ҋlY"JÅ_`sg }h4SsscgzM u{b,xc(9X/tsB|^s(Kqz@g)}~P]F m# zoN;zj)Ľ^ 3 ѹϔhNDQk.$JmjuuɬKgPWx*j4:_i6yTIJ}3C|VUn8*wr$.m/ݤx`zHJ'1ˮHna\wa h+>|n:#۱0z4-* ^7h+WB& N[w@[01a8?!:ٔyڶ]`$/&:h:q߻V\TrdU75 ^v/Wd|~|Smg c.33"W×S D4 #w!7mь4}V0j%b$EÎCvj K=3xWxP[IMOQ镯}b1+`>v/}>%]4KxK?+1;L+j!ҡڕ쬠:w$5hXSmU"dҺR*tV{׶ʺP?{Hdȍgb!WmrL;3u2%( c@Ih!?O-.k@je*#mL<\N[ǵQdDP1sW'i Q.NQx'B쑙_f<4qv9D^*98~kG|3M!9pZJ?GZ%v9đ&7#{ɿ4| 4XȠ4enl;_rq j؂E[W#4%6&@7jjqvu6*1KT}eO=Yu4nX vgh6Cv() 9,8G(,6yۖ-Yfe@|sJ&RpRTUkTBs!Ԋ9A,#$"G(JUy&{?4yJT=R%#s8R!`YcZeLY.L3 \76)9fn25`$G1\Ig˻B}q_GІd< RM gG3N,UGٲ?CQɒjĮSf+VL6hQb^ l>)E?i*l:r.Sf:ߜtG]6WQW$t>$. F O4LM8jGD8⹰#'KUuZ@/eE\U7݆ɷ\)َrxj.#ɍ4+5%g,E3ʇNH0Ɛ]e|b{) XX8it#xMS 4 hSb*e|gs2J6Ю%*-P{C_NߋDkON m)|w22!?ma??KCմh`<֏.ZŪKqr T|,Tԃ,D[A"+P+ȋ(m& à='_r,l +^ȡOq { {쌳!YrzmdD0RAκ?B_!#X v'-?; J<%)֍Ejc9`>Vj4ػqӥZBb7ǂiV2'S\ET8KЧ[v"97lD"kdtzfaMX2Hֲ/KkE{`@4Փ} N@u3FFǣUˀa'PFE||?DWA>2^fp" ©@o.hXЕ\̢JD:6082yYR%Fʛo]&Fu8dslNblsj>{܆,o28S) 4d#;CpE\Pq5buY[(@CɝZߤ(Gq&\c'(VPt\$N-Xٕbwe)_khn x˻{(4ֲ.YqW-P? t0@^<9q:Աǧ ڕNبd`mگ˻R)״XVǾAOnLA}K/r"(]S H(sKJ؆m螀͛˂,3>nB2 y?p*$IWJ̌sо޿/m t0VF6aZq[s-kjɱ(6{RӌxCW> 6"EA8_3+j-&Э {+ V.UK_HDLs"I.vqƆ g-:Zޛ2ø!܊` /(m2t_m%:bX+rHbIҝ=1TCB-R~XaV| j!r lzW]x,SF=/%ߴqB>wZU]W3ZPf1SI]12q:5eYo) %Ԍt-`<{nyuSI{# SUg.bXV ICK潾>͑˨67IoalF7JYI6C8}v] $I^n=Z =3ԈQu$7\>49Dl(y؄&KjbO92/$zM%r{G&$Y<3i+g+-H6A]lM3"]衭.b MgBR-a2oЖn uԒ8x"URWf]|1sNvמ8[Nɤd!+ "EրS[ kQg]XM [b'sM硐{8*vR/px>_ xlp d|f|SݾL>N@Mg)9[vPGDUI+q FGfZjwCJ9&ϡjS'z mCHc"'agbRj:?XA5In<A΅=/{*!(5ΡwD}.Cs|JV+H"&b"6U+$ Liˍ|6,.D]&LԐS ub Y3'M5C{7308c*e<EGzʂ${!},M4Y&/*z^-;w6ex2'8#nA qTJ9;u閏#a^ʤ4 S_`)Pr[`1=kG eAO4aM򝨧3bp Ex! YQ{>."6{0J^x #7Ed(P,XW3 bwΘbVRs4k*ʒ sߖ7;(2fI^L2XF^2 $]ks6ֽQsng'$~Mp4>:;JQo9 `e.SR!2@_1yM3ˤRmQxF:OyY̠*)x&E:r y~oCj2•qǤ$;XpUO-/#ϕ W46TX@w瘁;g9;p6‡RJk=XI0.G.Gwt!--DD2Z<7ZKdQ%gP_P>Qmߓ(*jj%';m}MNxj/,2oGٰDlUڏvR;DKdFaK`m0dq# E~_05S{M̪=Fmy#tt;,Dyc E?[5- *7yeu?*1ށ7f|[*ot&HcPuU"J<-Ma+t,N="!ӝM.2sv-`ha_TtbYQV;z쉻Qj2jP>n, e޵ehzI@SKh´%mff5\*vX*B>@Җ;luިLs -7͕uNo{ȸJނnh=&10s_gΉPm[5EK*6g (>f;xTVDEcMjFRҵ-4|SDU 8Ȟe06ѹ"&7Zm.fe浩o&lC10;l!eֻ[+!6 ϤQjT35Dpi=[yYa6 ' #҉m k$`m]z /Q"`oY@P4fgbRAr#@@;ۓۯ)p6btE;iys'n?@yRj{ȸoAPzɤ?1D nRrs0M4XvExRO KwQoB+ٳMDDm|s`k^GYni}_=c1}>}OO #Zm99c[bm Ntq _ØO' f0qW DyvM>TJhXRxYV'(\ Qʣ`\:%?s6w6^,sJzr IMԨ nX߬ oiqi}ah2MG'>~Ebdшbze7-W̎Q7$D?04l Q}wi!AiX۔]\1Kn6UQٙLTx|ji!=Ua G~5h{a0DN d|rrWM"R"ǙbZ9jƑ$B!֣-$|-9C=`~H^ bvS=n;kQk} o|=ZO3R!r$uWcQg$I9ZiCT6%Y T_` NV@H2^C`RܚL? #r~¾(De<pgU~5 SMJN,7K.k܏ 1ccSEJ(]ʨ>T=B󟎬!N|/@O !3l /Z9<:o3$)sn4+pt)i0Q8)䖼-p1 ;@i @ycZ΄QhRw Vrυ\$-> }ґ`x}w@a?Mױ; ?*`[-&bEFsn*qZIS 2tMϤ bɎ|,߈xj㮏 kK{9z&8wvY 0Tl QB b< u%!,*g`1(y&JǡWt;(o%}.(Ԋ4x)@ C]ϼ>ӹ\@Z: @A8 .j쪋6jb8 X^@Ԗg<,͸/zKQb_3_vGI-G5д"C?6fZQcd8-rv#%LJX붗 9IeGWMPW ; c½vհjU UU ~f8J@]' 8Frه;ݚ"<1>ї*c]OOd R*6DPc~~,>_xMs p)lW?Fp"VjZD0 k pUM∦'I/`J5u=jsO}:ƻW Aǃ~ggBrb^)Ma9jkB|w9S'5#};Ój]1Ov*Ȇo| g*%G`oz:'1V>K׍ׁ!%g_CddeNlL[vKeSĆ9Z򒃡 DE!ɰitD?|hi4L =Mk50\t_pNr>}޺Q(iiu^0`AFk3,)EI&G;s2t ˶XfO! (a KY^03]Eh6C_*Ճ_?4sG&2Md)֐W}2!]t謅z:")󊂰!CHHJA"IX}ɞ"|عR`q90Mb?~DcucLňy >zpIe8SoXn`=!AZm8"S:pgjF-8cjA( JmMau8fiui r&V NZmQn] RwsguBwc|!qƀ[n1^Ke;f.'8F]^ 1UY #v (+pl45얏"D,Sc]n#^[BjYl1ֲ̮hg{DKeP#@3IqF^Lgh RizyڙPY*+lR}\_V>:Efԙ%(G@ѓQpNGL]劒6|a^?wlؾ"`:8od{db3?\h^^Bncc5VdLma2d 'ndW ~B,r5f82S*>Ѱ-zqV4PXEK2GApc my8ʜlv(lH|`ƬhlK{V&-j<4g)#U"NDl`7L19}JdO+H]=JXE"<;[oىt[֒04)t;񜋺L-;򜣜iݖ6~`ʮbxN}>:HDҴ Hqtwi̛)%kdq@J">?ʻ-/Qd`O+&v O6E{# aG$00.yzDL#>3|pPf*x갧CHi _%,'xBV2 j&cZVslTVrcjItϡ&;AF)ߡ3GeHuP(O;:ޔW-;t4#ҖJ$o1+ ./ w0;5bK)0G`MHA f@3gP,} Kc3|>A`:4]h ae JMyӤk ޻h52=zKÛE/9+66MxKH2hQxa.4z#+MjSq 6f1a7eJه\t] v\Et7 %iƧ^vt9ۇV}hX0B {fTLnOh;+?ghcqFT77򭟵 j4+)-eg *Dp8A] ԏޫY+@EPHD,U#\[)lޔ__k*aDw#ާw]C-_wVX5g= ߝr#%nY. {TZd/yg}qIk1X7b> 0 ÷T*N;k8W1Ǭ߄O۞fۋ4ǐl?eaNAFpLmFٜZTY7F^^DCԙoꡚOś,0aXйUs/{ʄxE-8kG佧YVLɈ&Z7V4Me^4U(36[I!&Rx# 5WʩÔv#ݭĽr'kZ2a6E1Pi#+UD ,p{("N[CIqа\sB>]?j:ÜQG'mydۈóg#ya&O)&n;(gzdO4€.g) n-#=Vta> 0v0e^0Di$Fj[O7shϳ&"z!}<T/僤|Dٜ-Y/,I6e *j*3,/$Bp8' 6DhUgZMۛ7WZtԈyI0C$ c.>:!-B@:&)|McˠrIyi 4i5KN[=^gZCEmu 0{T K9)m?𔷟#&k|E\٘ (|$$ 6 d$ij瞷5l-bK`ׂ{sbv0?^ZgRaFWGYոY[[om7 iLF9 QEϫq#q2G3?g|<6U(Q$`|) /x@6Rq=<# kC Y2S@A)0"CzғtpSSa~O(#"E,(9Ub| ߗ3ZS/O K̦Т>_ ^]:[8r$ٜ$m^(e~4^i{WuH̎kG])۽0꒓Dܸ2[!@4Ex s𿇣ϛZfRu'W% +ꞔ4# }]^O] uܐI5N5O7+GBbzP(b(Rzt=IB؁S/K~{쫿NN&ڷ:x-ȭ k0N%~D)*%Hc`IbrmZӭgb8[8P^xaPnET ݙ:<7-uA1 5~,Uo&1+Od~:ig=׵Œ{so,lR N5޳EtdN4 \9Pf3X5"g5x*1X?M?8.֐l?[,)Pcj\i[ޱ#ÒXl` !Or! Wđ|w}P|w_PQ\Dmd{|ƫS[֪kRRFRfa>1 N]'O3v˘Bc~ǀV\z ^~tEZmf1m c-)Na9LK"<Ѯfw<HۋvH1NQ:C)q:ɹjXuN;g=0k@pv\uY{Ybޙ_pⴹV&äVZs<:@E uX*?1Il2I+7[3%*_Vx n yBw߁R_>ډNE8Wv#.6\XnIt3qF$z"#^P$ϚE^A LfteY&_O}IV|%=>Knsp0ŸylHpz"Sn·I /"Kfk3ɁsT<چ0$JcKm JHе >0L͸&x0NnVe4Kڗeoւn $KPT.!(86:;`A(L⓻hȡyQ̈O@W%%~{1FlJTv9XZp2N 58QC̬ԷA|rk" /2,j Ix׏mM†^VW?RR- qOǚk2kE:L^+|jW~,bVzJ(3s9h ) :r>' J\[Lܨ}b=Cb#8MOMtd@<'E&ӽa}][ZXYL˗5Z*4rGĊi7SXB Xt}C9\R'D$ 7d=n79>3<0haLSDf!<٢ǃ6 WXo_췾Tt>t'{A- o0_^1/?bW{diu+?nlS0Ahgg kI@H<b#/>M W*#"dR;}XB|n_cZYr߷5EP˳fiqQMXB-F^t(_U[1T=!2#0tCMk!SR sh'Y 3ِ$.ю{Kߘ>Y!%|ݺ|? z1Dg掙/^yX:3)n iIMoKڌhi;&w8Uמaғ?`CKOS1/u94M77mXc͓-eSg0|޸ D~0V ТEbކ8@u"HE`;H-QNRv /84 MMJ[[)Ń3v7/~$vy-T݁Ɇ,Y>p\>BEy lJcmMLy7ܿvc10^R܅J cHbPtJ(%ki'&C4A2oTj-S;]ͶeZ %uWfghsء|)°_9& 6؃2ɍl\u+;D˾{=,ĥ?2J.U iپY>&2^ MJyنzzG8$_O z ~wK>N[fd\ƨ䀢74S=H$יF2%9.{P69ѪcR;%^X<8РuQkSL%x# V|6ДFPs`)mw1ۻQaTjMsBT'}BH/M4y7ؓ~)pbgTpYBp4%hkm\ 9++Dx/(:Ҧx \EwZtQb;oudп:Y,Xgfck|5>2S}|^?,u7<b/]бp[RģTn o[ˢhaR%(Ur D]ƱgA-xK;c]&=E} M4*nƏ?1\vw7(o'5ЄqS:h<6ˆ/S3= =(WPƴ?Y!٨r2 pwYЋxXo>N{&ʏp雨mM@Drh /i(gYǶʦ4 ~)3R?F Uۙİ Oϖi0O+/F|®[Jωȱ1tH0w9€Smj{ϋgYԧtW:gOsbMT; aqt +ml$׎UQS3Hc<%?~ID s?I5&B]yh F vpCB h[%c|0i+@ik;$"` kGyIP C/X~p__4o9\E֕14H4=CR uaQIj6K"+lG!z۬ί/#qsf>SnԚcj;[bTrŌj>>w'~+ZOY1IlH"!\fճVwCa$( B6 1:`YWo76hyբݑB3+ӎp^C4/h9G+,)uiHFw9= %P=׋h^ l,p|=*OX? si n7E*vlċe6>j[R+LdCludxz1H̉N" {ໂ1mtW5;?4->샶]TN éiZSx-;ArĢ8gIA0914fIZM_śNY)^Z(Q@0Xd1Z}gq \ nX溒Gb=+t`)ptv^l/IAorQ,4$ruk` ̠@r'aRt^?;@-zIhԓYw o]'.:lMϢmSw](|{F&51# g„y}8 KAI(~5XR>g/Ώb2^@a~;eGbhU E(jU/\U&$%q ?,_XiXY6^֛KƖ>(f k3uVo/ &)7֨EsSSJZg_/[h</TA;h>NN V` Mp@^ǦMsF>_j'tWrdJ[&ׯ7Ѯl|\T(3'2GV=\gtfPP 2ge~_p9"qO@lΉFKA#oSO÷X`h-[MszG:/W.!Aѧ1+ɾ~}z4cHdfF'`g~=C EAU~a3/Dkew, 4kMrpʈU dV֞g\^T!𠑜I!YS)|B]k6!ğCTƒƠ1j8gWe_JeR kJY2VT^ʋpdj&ʎ^p󧳦dF$^c_=Z]qʙEЩ턡iT5hd>{d6 TĤBHFvm1"$Gp%C+?CfkR fuynHY8T@mPz2c8Cu4s0@\InDֽO9 kަ$tYgx QcP˛] tKK p%RlzqźR$=!u`;NIx]2Xb`7JD)#fGi$*dwc`oVuQH7(ʍ8UDW,kRaM ?^V5c!"RǓ;TqEe}4ĀYhx\bjϚvqo%91|d{5sv>viE=P΅eX$ Ie*@dj.J~:՛picryyR)&e/1F>O>.G6BWSRm. ܂DYuZmdH,JMEkNb|*"˒{]oEt$?tO=)A U! [|G-KTZM`v,%JU4ihc":_wWnW12EA+dcb:aDLd㊆6}9PVĕXeE. y+0VU =}γv0I%*A4pS(ie6{QkPXhiݣWSqԀa:/)m5ɣ7T 7:Gk՚~a[ wBf?C,sX.L-[ު@ɔڒR:HBT ]i_Z TZ=,›D7Ҩi*VΕ-&`@&cKLU~zN[|7uSڐX!̾6~iʖhw.b#`}`)<0"I 92 P |MWTMf) פֿUܖ7:@ΪS<_#ĊC%4럍YfAՁYy҈ٌ:<}hvroe,,m ѭ3|9/8\ǘkhKUaV]^V`r]{nQ_hh@^+ibK0^24T.Kl6PMTc(dHLvnc\uN**j_Ҙܑ:< vċsCҘFsycT9&"Oj[.q85*?7 ^EQQW48XD*̖p*WϝN8M(KI ҘuQ"-hRBj*M7wAMǬA/:(~['ƅv" oeZ,?"+x)Rzr{}dϺB [{mJ?sf*r{p)L\NjT ` Wy^Ͳ xȾOeDžM -iЉ"yVM;ۺ-C5DP\-JAdS/4.gK((p$_eCE8/4}IUun=t%1T϶H 5Qi T$:ǭ[bz>XX7a Rp딜qtMsSիV(+~#dɲER&X#j``N9duHg9ծq Bpf:]J )d?Je2F?'eD€`̒X,~,a,KR C`3刐\%-2I;eYwmaSe&>lºKv)4#wwY?\ߙEiKfPLVzf)O"d̅JMAn)vld ]3oe\WqTBVߜ潲Y2pT#+} "a!oZϵͽifȼ4̈́I}3z/H6~o$Kp~(fg7,7[("قA;?Pަ:JX}tdlIL3'Xb2^dz4NšpKlO.~>aA&/*?6`Р/G[#g4A/.WI` VJ? gf$;a(>anE!;ɰ~%١5ln-J]a4qowl7R#CKhW0x,uE3E-xbu J+d !xuRF nXIlW''S0hؠe:"1Ah2(|xM={HA|{r:uH: nk.S& }G)ԣ0ےMPY=zX2.b˅!uX>%{($+ fN}'v7 Q\E')Su'hsѵ䲴P]xB7]idnD9KKVe>AC D7FdheWB́0%B`30HZi/vH%0;B@ZRDc;'5H\98pU.׭<ٱouI#vW0m @=Ab?ڼ#dѣҌAg4mMIeˊ yV/j RPEs\vߊV#yS>hlˉiD+  Y/ 6h(Ñ?-Yӫt NoCJ@']x^ ^X]A!(1G 3Uy$ O4@Jlc*mlT&%r{:AJ99 BL=r[ҮxJ"ēHmOV hf6iG/+ 2g>$3)#s#jQ@2V<1)wmo -d%a\˟/o?@gTdž"ٓ@9ẕt/jO)2QŢE}S_I Շ쵱>?v`%P^~zltַ(2lsXtZ?i/W|`M%m\B =3=kou w~ خ͍r%xJN&_%.NZPTbvzN0a&j 9s/1%\0<$<1Xn酒KĶdQ8H| h710̘W uߩ\ qG!GU47q݇7ZF$K4 rw^:e}$P$ "⫐}Mw%rqI/K\Z`(&Q:mKc8u4 fӅji Jڪ}os׸h(٢ $qV!yBN w}{gN λ9nr\Zb'(~0BR{зV<!Hҳe6#<_I yziCJpX[#}NfTL}):[D[eb@Bϡ1|vI쉣oiz3qc-CU;oez;N>.[ &%KHN%X5Ʊ&b$*?(X+2f,EC5=%j>fPErc5xu\Q+ auNycY5ϲǫh꿌ɨ6#bUM2y' Ϟ4gT~xQsK|xWzx-C̽BR:YXKjkс9iy;ޤ.dD\>՘Mq:+M!g4X YizacZA=vl?&ff vdUlQ38kMucyX1g+ܮf'gjw.X|X_Ϋۑ_n Vmٔ} BNgUxMkxLYe=9  ]>d?"M,BbS83g` >)˘hY.ʾ ŕ4Wq@q j^ MErN򔈖η 5;*y>vIs ďs8XeVhxB^~rmJh@\U ;⪞\05ٗ°O \[.kX6+dw ]fߵ!\Ess2> /}w \ԷH&3P^GБ2 g6uRa'nηu6b- wL]N~Vvպ} 8O[9 FPey161.(&T}+O8g!&s3w^|0kTc[tQѸV[8"BĦ)uwQQykw!i.g쯮P߲B:W!X;GNǾk` Ĭs3UEf|1b"Oku#2Nі,t;}9:f!o'DŽtuk۳ȭ_oCwOf s ڤ?|2saP<y}%\MQ2$3\.& >g2 i\CI/cQ΋"2Ϝ r=+A>{Ǭ0 Jdr^ºK7J&$n3t l_3])[!g>{U63OG|p=`NIK9]}xO_Ⱥsd 30h %l$d6*z]F.sʁ'^}2mX!U5jUwNzc/QJ ֯zfK]u:6Us$Xǧǎ|6 ܎՘5&P"*oL1f㑄OމI!8GqW?Iy ǰ  ?Dwz_nltӫI -l0 fɹm\ c h-Ð9]^LA%1.U Z6{-w|Hpkɰ|Z" ʼ*jv- uրN'šTw)2PHDum{ˀ[cbw;7|e}/ M5~)1؂DtCv !cW~ d?}_W>\ R0ݯ|pvȔOc[Q}MG@jxx0}%=t`8);!.swH>ʓXffnEjy徬VhR@PNPj*k}aFPw r✣ ,.d^;.qdWlLz[ʔWǪu+[w(2%zY:u,|mʼY5dT[QB(L*dl<2,VY{N9=y)!͉̘yH^/%@۫ӷ' XLZ]>8%YJ($Sx Ւ ZhKj$ǾU_u +L"3.堘e묏'})6[=Y&` <0ZU(V67:ޱͪ"tkr\&蓃Tt l)ysŤ!z |)j>>)'J|njBuyBR@w l-' v#|xɑ-Qb/x~Fu խt$$E$0Y[%$w"wbDńU4)Ѱzx5wԠP޶q3}_i4}veM>O B gVKA7b,:9B47F=97 \ wՅ35@رߠEŤB峔^ ^;Ee(, o%FvE~xf_'x}sg@N`RkpzVbeA H9yyR5v_.o/~͊BT Gȕޕ[-ɸuFhz\]@i(cHTNkJ]Ӧq~BMP❋BkgGl>^.܇)%>'M)</;enVxKltKP)Uk*˵|'$(0u|[ yRmCBtVtԘ5{ɕN=9[_&7E.FM҄^1rM7J*H5P=@ :# ؑynE"S r>aH&1Knm݆v>f3a2Ioc9!溥UBhPk5`x_okre33eIyGѨ4{Sު YDW>1uGɴՌRH&ZӯjCzu&"Fy4RrON]$eM 4P /%'ٳȆSP ˅/+mZ #. ]t^p*g>RdH Wu ΥKO-=2}=fUBہfYF9y*q[plŠGB_I}~~=>["R'"ܲL9zB>?^H{˭3ܓ L:]5I1 Kg?^/IJ FxwQuI dQuRH̰oС_gD& \Zj cLEwߎr+ĔӞ%KՓc ѫ{+p({ ,(ћfDnKj9g-ORRz/.S`%mď Mn}jD\CfA֓Qrdhz 'zfBoG_GRPo.[ҭ~Ơoj , mC:~@fk!xYӞgڱ8~wX="N}zU\2t QuR$9_D&zL2O߇ %C &ƚ zGd_w`D;.xyg3qлJ&cn`Vunu9JM[!J7U>poiJXSGy)?(od̶Ļ Na DiM%U~mr?S40N*XYӐ"xE1dkŪb&R`#$ Y.i M>Il9c|d&e ]CҭY EP^guҴAQg2#"}f~$ra M⯇y]yѦAbzSkqM%p6!;)C>OavӃ3k>lS8QXSV>|]{;NLp`=cEpg~Hrj AKUB_:N,EfMBKub`OǙnXGG$Fb6r 1<=4 =SU_>%n򀥸MJH;X0wTEXQ749I M!'龬Fߗ=fK2qsb…jTe ؍:&(AC8%obY9#87U^#^L/$ D 딦z %$DE)kHm9wlIhqbPyi%fUhԷfZF'E+W".ʢ:~qhsk Ss&t&+Mq^:y~~?kr-"!\EwN苭by EMvNӊwrT׊v|*!|m$H!w3꺞-}Mx|i~gb;d3ڙz@ax{%R1cgί?.^=|Do<ө(!W9̚'}0t|0UHFV}^ &LR5eLoO;gl :LJ") lhn  G,uίddLWgQDsz[0Qբp VxÆ} 9~IzokKdm 0k-(b3#A)P/Ŕkq$>ܚ? )7x-E;-%RTKhXҫ͉mmK,tN,1t-9-0,R_:^W ;&^[7o~R XR[vF-ݾ\f;DCmR @b[eF컋*oB%ɽΗQk \+iN8F_/ʉ8sq6Иd􁔾7vd\rʻu[CgAwp2=s~pErzbg P%ğ6к#haXW}XGj2Ródw8Հkhs.lrE*$U՟A. 8Z9 wՑ;\0RՋK<XE Z%01iذ3KhcXtKhmiC rL %ܰ'oDL!Yl⺶֬D={Z 1S`ɖKkbV,tL AdJ%?Ur$ _%JnW*gJLr̀Je?Ԅ)h ?T^ujS@mnh79li5]Kr)W r/8.k`#9"/ƫ ZzKiz"}ֽί} 7t9=ߥ#GȍpdAlPîtu(.7zTuUܾnwC>bj1Ho}._mS"e[@9r=v"؆k>|B~Y[E$C?.yiV(uF/ݡҶ닺rc rⳣT]GZgc ֵ"Qr QDȒ`wqV{k*냲́GpsL~r0f*~؈{%9vZ7(A"s,MڪTDaKE*ٺ:}J*^F[يds$cF4!MŧNt"-)U8**hq A捄P-3U3 LR{:v3?xͭ^GmIg|29X$eDu]Sg(z׉uDƄ9MsD-U 0ˍdL Ha馚5a3om9q 1ˋsyS\3nzAJK8ND͂&`!|#ZL'|txǔ=y%ڍ_Q 8?Y=Tm(G8ÓW=1 @М[3^fݘ~_ܙ؜[!P뗯Rolt?r;׌\7-,'COfM)-4:d{~V۬Rm 2IGY+9)&^,l;ɧ ZQX2Fǯ9G$qd'2]}Q>bk/ 4v ZGvɺf27XhXB92\|0N;uB*QLR= U&@Ώ*So6:9Õ|BFuYCBcuDj>D&m7% >960!YX[o6%^3jîl;HǑAMlUSNlp}cE*\1("]^o/  Zy[45}=wv@*ӭTʕomϐܓ7|3bEB w f>ݥG)/YBi}횾JtWE6a%M<쟗v7j++Ai/`r`m늂@9lSnEشY#N!WTovJM}PO w:P[td#L3N<0hܴ6 ?_~d- -*}>t9viӫoUaϗA" 66/<&T Yu  jM3O)h g7Sˋ,$,rUYMQB.Rcbak I^t xݺ_v]{٤1K)݉F+וVw<:[/ fY$1l3QHǗyayy5FcvSzۡ!s=)aJZ $8P,ӱ1\Ȳv>q 6=ߝ1Lx}cd1mgKRC*2iK2Ik+VFnٻ3x*( !&l ji?O Eept@]6;r{Rʜm=&{ 5ޝ侳542q]6|J>`Mܱ,4'OxzgqGe_V&r]Q ׸cdM#sc +&V]ŀp/|Bbw#֋^%xI6,Hd t1v`bKɢH",Vz~6+'fE4@dۄ*uc!1PANCN}ώ ɛKzBmrcot(KOJ-9f}:F[?]:n=,X)7>2*׿]:3*n/[ByWg6?_n M(,IfTU"1]5_?|accGv ή.$@[.Jwj?lz~ցwi9kB{V6[B iX> =&N$ DZyTq KS v;D/d  ju*uag0l?ERyk6DtI}A2|{~~m}4F<6kG܎V-i wD4&^[a)E-!B9PP$=gy%J_6ALf*xiʣ-,NSof90MNN+f=-PJ Q g4+?U\"= #8}F铱]1lQܡ,xpwn[1~q@k{Mm7LJ)vc b 7NzbڂAװsHdNbXnJ6B0cCD"N%+~у jXnAښ'B5qCO'Jt Ek[cI=r'S&gBa&>^eS:% T=]oOq6nZtP~eRg-`3ǫ&+"Nlxj1 25EYWϼP*̎Bح"z 7kf+C!&]_,W aҶfY{GSwXc:Mg'|z7j?n/TOBtY#**vD|89l1~iԟaUr̒-IP+h} "rM\ T_",V9q[lU@"2Q jlKůDz2y^}75#@uVR1|}7*yk-CMq_rTan&4̅[)⴮ȀxP 1@ޚk r[„q ̊@RSl<&Q l̄ ņDSrj6ȶ~ liE7jOEsoķmo$NNDbR*q=ʋ$߉yvVUXs IMٌ,mސuRyCЌ0(^rEh<4iCvu/l,fd =ԀˊmmB“F4b$(iE7 23~80@" jI:{egKߪ">g Հ0GnE+(L59dhV{{ PJjK3~Aq19Q}NCc;NIҌW)ſ9d3F d20#U9n GEq0V>I)*GnB8&Perag Ow]@#& CiUm:?QӵE ET*_of:ơ1@1ǹ;$jE _v~nq!7X&L7o ʘQ.P, +(Sht鮎>?N'Lbq{Pi|˱YV/HԠڦ/ڵ.C3OrA ݏR=;DPdJLy]c5B>{?s ,J6:jAp[dGxR12'6Vn*[ŵ?(olk̞MBcXM __ǩjP֙Sz\3pˆB7ίC)h5SsimW~=̼?⟌@O4]$N#&\yHPEqCW~,*fo!%d i^EG ?MK:+j> 3/&  ]u 532lGJ0ڝH,3y&BD5KFZAJNr*pq,sq/_u&L~JsC*Is!X"-u(їjr%) ,~iK_}s/2Ў7|ϳ yG*]w n"G4<;"V x?~|Ewp8?X80%^a9_0_ܛvP@j愓РZhoLTrgZ$ nUɁTC!$@/,pq^◠&蒧P걎[{=N1n^#P@SW=(4NdкE?\d;՛(ީZ!{H3iv|>]B$=ߙ}dӈ-XĐ[aΜ瘹n+:WL\-RlR %w/`;.74=tA,Mтtػi,*g[ب)[xTde3"Btw vhAw]t|q#ܝ! ̹n]SJ5^p"A UDe;ҿnS!>'R9&eb?kېG9֦cmɂtm> U3<*oX$B (awbmcZn5=^n40F J VO<ZM*+lmЙ_Jdma>IZs- _F~[CP_-?m^Kn[~uGJ1) 7b[[ɼA E-](#6ݺ1Zt"īZڃXEd3[&rmF4@a|[X-oi:^q?@ZF,b4i Ly2}g9Wlqyܳ]ă\nfѨk:vq"uX.g{T9cG`m|)gI8,ThZ` wb%BC) 'r B4j(~y_@W~̜I|H=RPC*Ia3LP[=VB/zQׯrT!0)RL|$c F{II8^BֻT^ڲktݮKCһ6&&i'ȓ"I'Ѐ9%4F?C=A4 %uXndLYnTܙ:p1~{PuԎĎ[s軉7Q3.Ld$t,ax~ǂ1]}[:S\XdM+]UڙSfRŷWww<+9&F2`FyÌ0YK l⨖Co cTIpfK{,^α7De'.ڬ^CpOIAuPT?͉?]]'Ui=5TKq5YSyb/PҬr8s^j}12[C OLWH okÕYlX&Os,N&ZРȬpsbOHT&a4VDG4X=cXWp 1x|2o.mZA> |nz~ &i28ȓJ 9Jhߥx joQ{]T؏MvsPIPl-Dq?nolt_U4^_"Xd w!C8KtM:mjQ#<,Ui_T OV2aҠwF6Ŧ*2l,V@FDg )|?r)+vY!s0%4{pã(}XC;SGna:(vZ5KJk۸4Izn[HEhȁr}]jS<٬vYi'+i[- ÖKw#d"h)<{җ i(8?).?aH &Sc3v(X#6Dw|[gS"Hs(G4hLzf=+l[t(iD>Nz]T3U ‚p5Bdrك݈dt0Ye2Vc !Q#8[qT+|NB^?Z3A.RAT=ΥfyB8sdoH1 l ;3`g!*&_t[0꧝X"dǪP2NS } cE1FZ0ݩD|S6#}Rԧ Ē\eEsae5W|%:KWAHw gNXR npL oR{M$cnKXTSky' J_ՖGmlm# Lw k(Mņ `uS~pwl&a*qH$LdQJ%}nljXuˮ4rfk'M>Xy˓y /_ ajRX;V.0mѭrY;mk*`d-YfKNJH6צ_1~F.oiSe,PÑà(z@XΪTrq +xϦ%0GCn3]Ќt; "{#FPd/6hTp)\9 V6ՎrTm`1䡦Ԑhb}C'$BNxxId>bjIl78q D,h2pޯ\=?z ] K++|㫢y[h }I^8e90\nyDNRZ*>($C!ɑOZjb.Ҏ?;Zm-hQX-g).W#zd$Ȳf}7xLvp(ƹi"16n1j`7~!)~EHFNxZ~K4; ((m~_Fg3ATBw/Z حän@= y \$S'p3+[:j{E=֒zT/kxh i1xmH0#tҽnأ&I|ʊγ kVOgYmt=׽MBM IoqoY$l5Ox}5j]_%FSE"YH%qT[hy z&U7,24hRq5Ew)`r1ŪAtxi[?ךLTAm6+,"Mb4[i ?-aHs .iY1tPs*m=rJ>lX=C)>,XQB+-5Aׅd^iqഽ[ `N]\I&)uyitY4M-TVS E!@o㱖4_x-ܙV+b۵*aH~ʠg=-gh s2tBrN!z,SBbMٍ; ~_ҷ0FXۭ~2%*#ICcH_ f1l)=~ӱꇷ~&^{lc}\;'DRt؇̳"82A|Woe,|IP?USSeF\-Wp&v"­+t)fׁpO$IF z8gp3䠤 pf2gar8|Ѡأք."b$g^2y}=7Xr&eB"˯M ?NgA #bS^!.\ S{J䮔h*P4Um }X\.7҂fY369%:r~Q {,Op88S?RrQ)͢8 ,*O pǃL7nS6ĔQ3s?x09oGе8C;Z\OlXʓ2\`߃c ╜>z|8F?h_yd>lʐ,~6rpˠj]eFѥjF:v}ƒتoZP@`01r(#i\\UX{Xѿ`.M7Q8C.ns!8$o};[),ԓ) B769 #vҍ#',dzhPEY\!Th euRWJ',~dz?\0vca"6"x{RZP " SvcQaKpgSu4}<=\?V/_7Ȫ/Y*Haf;8FYhHyOG3Po !?BBvYalI[WBz}KT"2vpyd PF\gI3^F,Gq#Ad@$Xp].,Jx1'&@+%MAo LzNAZtѤ- B̒FoTezbL>4Lϱ[$륬;eFX?WSJDYv,_824vq^xj"z&Z )Zݒ%KEBaa!]Nݙ9 MBTן׋hƿg4.x\~vzy3۽/.셭Rn2(!'2#(&EˆPK̰:^ 6<F4ؑӆ(GCH;%2=DY ZMOKhyd[H|2J"!"2zo;lYr0 r0dƊCuat1jR w|}Ǝ $g?hp+2uwcG}X ao>?qx_vc?fQ93<-]JlrL0zC8bFS$pÃ3PfD$oJPb{ MqP| 5k˟tD֙I r{ Ye6zþm6f[Kߌp^ގlqsy)]7濫Z\oKEu8bt?9(y?44jdVK~ܛYkq\n]%S8oy">jkVwFfbtrPìG5@NOCϬ? L>}Cn^:VGw6 _a9ۍ2XZc|mڨ"2)H@5Z2f+_(hzJN?k"vJ7.TQx1 = nX?D!s gg+ f0X[%$ @K6xd?m?4"1>h*_JZԲ}#4m.mfc&&`ܩUk׫yd|H}8~Ęy:Xk'')%t>'l~֮O2},V+D}&e4^l0 ظ0ЁTe0:@a5@ ZݟzMi9]HcM!5=, =9Zۢ9HiZ4'{yX,D<ƻn<.՞a*lC`8mi@S"x2ٮҊ%i\f_ nd8CLgSaڶO9 }Fҝ  JAXEHL ׏ +/yYb }ȗ D[9`{%bc=$ʎ\ϖ &W#jɂ>Y=!G}.t ּ:z5sfG}͙WnK|q+Ja:W.9:3rHN71|>xh G-UЪJ6C/|lPrjf"ҥ w5.:d;hq;0faSGdYe9|ff:4$eCh2o -ݑ-1ZUc!: ,-TCRx۹t94UGckp"c_Z/w]DDت-0"n6@7"v \4uX=#\mBe!Xt=wrz(1έ䅤jˊ< UoRr4{ M@z'\7Xo.XB;dZ0+twAlphœ^r+Z8xl/k`` ЂDX}g.BN4Z9\>sLCBP8/=/i WdK[aRA TR/ot`rcpw}ZgyӲwCV&7j%=}C2,pY][B6zڮA}n_MT"ƽWEm3EnRzթb[>؟ܵ(-I;uBhX( cK`߿ў|N嶭b\E/ i/e"<4}I37[t_k>-Vn}EWyFtrbI F.V@6bʘM`~u`U|dH[xW;v~,*(95[rt؍Vc?}HMLL܅C.qeJՌ MUT?# ZP2BH88b+V}k?@uM2; {ev:ija\7ԏ=BDZza V{^f`rӗv_"*+Ÿ@m>+YǻO[Z(Q'v6y K= !aڎZp' .9 A;Ӟ銲 loZ3)}Q0%tRmY1'M,0N(ǎ.0E̤K-tL8A#%Qɽ,yDOC ۑ!k lhލv4?HDےBjz#O/lfbѺ/4UW;9Q@8Xvܙll?[b9[8 +PfK =6 0wq]?rK b!Req۝$rjjXvӠJ/D1b`5"w=@Z̸t+1ǟ6-)@oKTd>RD*,r6dM9 ?[wv黣B"20%τBgh$Pό ]Q1"ڙWMEK9)* ӼKb D <{A@|\XnwZI`N4o}-L}M%_?U]P8P&,x_-B\GcBgVdXbRN,f`+p>oAMY!S |@wV /; bBILCJZ/h@،jr|AKt-UVv>.~Wo_mao-Syz#o՞f@:yTF}{Lg6YU"v UnO)Ӯ1h~ZhؘvwsMA1AbHH~\;ɟ'~C܍klm%#~&) b&TD?bw6RX{dH3md8]KVdݓw_Ὂ+=C|gҔNX(tqn oKHj85Y5V 8R)?~P~in&mmf@68_El<3a&JqTpj*xy(>R 9t^O]P"}b/*UW&4Qi^$T;NVq7%]RGHX^E1Q%iJܥUD T`P'>gBk#PLfvusw%:ڗ&&B\y kw] .~AГyVK 7_;Kku)fs|'j)؂&&jĵ$3m .VYs)FɵK1ݐƤ@xV/34i 1VPfE 0D%#`}@qSz4 +RS<D7%ƕ3H;̫M1tOiy-_P4syZ6g&^.0d>cP~6|1YKtUvڝ"11}"CQ<ɶ)&O. AyӴ08LݤU=qPooDY}];6q`b-mO;>tJ՚W yVw5U0sKMk2K ?jhXA6)0t# Z]jv2:NMPaj.֎n6)n`Ok Ҫ|h[# WI F27œuUVqT?$>i7vQѧ{Erͯ[^͛4>[M=G׭ZyXD$~c حU8dw4UThfVِpTt&ܐt)F@ S[3E x sr *Q GvقGTL*8RcfLf gJfQ_*v'@'ܾ GA+1SPuN"uz{%9\_n(vWjoMOAtQ0ϣC)9ZU< A0wyKlDaIm"q4t !Tcp 1`eDpC!ȐoྃW &$֜8pxj3,#~ȍxv) '`^,9 6wTpۆApsJ:3y|n3zoůMgn&CTcF1ZyitREh Y) ,CO{r1aH3S x;QԪ - 3Qߔ h$NeE^ܘgN7rz97ɗRQ[5jg-JTK$z Ӯ89ʪ.﨧ZRČH\nJNPx_mkv4^2=o&횼ԐuT.L)a7+̻+j j<oDڥ'‧h_,(؝р>tvV"gn`v6c=8s%DTy"As*u8{$9`H7;Edŧ> z}lZg8f^]k ݽ.5w9yܹ . {[9k}P}9铞`ػ>wMq|e2%Ik{+Tg:o8w>ѠBN"b53?D,x!M/,1M@ YǩtB?nrmV>H3dR Sxזl( ȿ/kS.>ssˁ^E]c%$bT ߶nnB'gpIq*QS8Gqn{ F1Z7vp8#OGFdJҒM'eQBz72v#nS-.Kc!N_2"~`b=aan4`+`0-޽/5'~FƉ nop cXS?7n%)&3SSGHQd {Fȼoit9DEB-ZqaGE-"$ _ы4X닥Zȵ?Fl/kfOd `NXABPfyDJ? Aq,-H""5[ Aa:uB:cN; J^Qjy)@&}*!0!]-:h1[ٿUF?*(\WĠw jvc+ʭV<WIf'2E6zUz@Bk5+I_E4P6ȕgK7[#L𤪮&D "uI 6V nZ+ramF Z:(0N0WIC7*"~Hq8qɖ$ ?7R ,BEןP*{Y'I-r|߯6)dcmXͭhza҇yz F%x2έ3`-!:ڮ2s1jox*<6dbIY`P/#dT4wˆt $3ƠƟL,w+SdhئE8 )$s\)AHe:7o`cv%ix=^k^hfg4Y}'EEpA${,-OdxYT$㝡}#ڛd S s L ɬ4*EhhS/P24-e:=Uvzn}8'pUr2Л.,\xL>~U [kb4?=^ T cG aO淾) V0wP3F9-Pb5*џ DۍWڞY{ B#I1n=_3!+,s`KGe*[jgщ:*M:?u(3lVs`&xŰ4)'yg}(=H/^޵=kk5لgw(WO-9"S_n Rs?3_ nRRNȲI+TgrM뜋ma 8e#1!}\gHHeTCqD1wjOoY~ixo!PÁ꫙G6?Ds0ݲv E758_Mj?e;jdy#de.}:_^axgTǙ0$，w=NF\nHUT|w@@0EH`W7E?pPqZY .kXTwZaq;@ HnVt;d8Y.!FgPOAJB޼絋H4N9 } I袸rah H:^;sDCеל:2Uκڸgoz(dֻK {+V\AѧIb6A?sثլgตcbly~~O_({JxNא"X{ Oxb]c.WSk)~zq 37=h<'3mc=ɖzc\y}&f GؔsWn o}[H}f~G}hF+/^i/z0&`[/=,s.ϊpMOpD`'8&P@+ bYڗ^^"UɂJR3ޔv49'~ZWP}Z/^,48p*tΒMU&*L'G'pM[4^7F7;9W+,RrL |yJfC.uƸ`V^a5&oq~(t*a<1ƢV%j^LruUGY(jnzE^ GYwqMH^q@Z%3f{t!dx'PP ɝi,X6)C}zͣ _%cR<'[hU]ӧ$rOo[ROT!]Es\޵ Иw):6Yհ3U@D9>@R`#ZT>7_dߠONi!0o'0^&a͇Wݝ/}dF+nqX]Iю>Oe;SCuPJEwz#ao]NpdR[j#+)QҸ(4zygh~O#ǚ@&dpC/ |=*|AjFsSOi|YnX͕h.JMDopڢ"3Q5!WiN^qe&h9v5{åiLÙTC#qI#X A#i_M?om&q9b jM57OL`C)Smscu.W$/ [b (Mы@|BGsXD #p'ES 3"Q-2Bƙ!jxV(fyXV;8; B6~^.2?6SI(Lo?`Lt*i.l)p%ӹ0JYjBW:V+u>5>V@5.XV/{"6Yw*"[Ċ"IF6tƵ,FOjvK4ė~4kN7}xnFNu lKe3alzy2!--xN,n&(zvo£pOY[>l ^580Ѿ׍(t .aƵ9uƁk_T&;0ΉN2eH uGXJAv']]ƌ&]Hcg' ` QA&MƃG'l\zsg~ kvƳ ui|Vv*-$ܗv+K _&="Hq %luj;;}ѐ kzB'V >bY_JO9rK<5K~#jD1<J_Ef{1sd4qn}<^UeȢ-<48u>5V tA^uL( >Pz[ca CQ6,s | ~ vi;T|.Z䦌{!{%BxI#D﷙ ƇӎqW)&v3 s))Dnsw 8!ɡƻPәw]y]c;q@"/ϸr=,DHhk?~9|!ĂPh< (E}vxܗŵd7|p3ikbȫcg%ԁ(o 2mc8+}Z͝p(vJ38ڟuO[tGJQ$#H7q4m͵Q~ݐ8 ߇]@KVNsH7XX%[ #Q3@4o}S=q:bH늫ϕ-#y ֗nГ&e]=X֙jC[0> Kh|oaVž]&/ 9%^| fQ89פ] t&8[?tzb+|nS&3E9, (z$}{I YZS]:"!8z.S?S#NYqRo _Sŗ@`OGGg <͔`⒡vl3t}\.ND@_RxͥA.%w©<& fIϬObSomT(ws\;FKE59*=n(NNWp|iSbϝj^mᓮ!=_&Gܜxa{D\-`ٻJĪDVR qMAg 6[v2뫹'鄹v+ٗ5**ea~H+L$ )vL S "~y13ܓ@]i鞸%1V.k6?^&"ʖi?T~5E[WخgO1[Yd&#AH]K4 ,a~t5Q|(RY:Ά]F&mpM#~Y迏vXU F+¹. 5aG4RSTdrJv т(%gS')^T* `Q,7jk~ᴨYcM+kr# ڷ8:^4/k)&1ZBNPE%ͥ-68t`{ECRl$e 7W ?yBtBBOo_ ذP7>RZ^usNHp 5ۀ~=ʫk\ 1 X`gXcILsv2HGgbH vETӜ1i1P+ęc!XE^tu'jzzVZy/{ˋAtn5Q@,%~!_63>޸%7B<ߡek~k{t{V\^KslBg9WUNâoD:1?XbP]KcjT .>]}W`R{QB:r Q?!} y`J¶;B$'/ 75AP' ƴ/9 X:2^*Iuԯ,k][hUs(m&g DcRz9YVL.c`F="BZD-,kF7GP?+ U=,"6@=^F&q;? W.}TM*}eSm,wv5 }Y\}8M:89VvKkL#riDQuDG^TOsia@b@Lxvdv.3q 4[VJRl`ioҧ?!\[M>Z|\L<?J3#@5|2R_Mgm aFR^\ȷE9pҨHYǓ|LI'5,>?R !ˌv# 56\pvB,OjxqbdԡJN#0[S݄m;rѩ;گ C ibt:ӊk*Q#^/!PK!Kcr?Mպ \u`/ 2J-fV@g-We0=gO op5޿jj4T[E<$*@kw.kq U#by3aڹڦޠC1EXx`?S&?03 X7lÃw"ՈS\5h".B~R>c[J+Azjx zct&DrM'I%6q>CSLʺp8"3k(}u/MYNԨ@CҲKQ`ysykiy٧iHQ̫|R>/ݾ<˜byԙ-. Mif7=OMNŐ^(7-qEe^¦1$K-[ %GK59@;&ܶMʨ^K },>S3N!aR1|m ('{<-f0gp{߯SgGv ^?oӪ2הS=Wr {-н;+KeéMI"?0HeS/:<+;lCڐi|D H"%%c Η{)1y!+,rZyotWnwҥG s~UGa]\|Y'qن|h% ?WT: |?沦>)pU )\@NSQ~=;ˬ!`5Q5?]s9XInv[GYq{š^ImuU_; R~nY۸X&mpn_xt$捱I=—~2>) ٤JYYbPw8\H=kVP-/3I6kz j߼bbfdolx6h6l(>_g@S3FvU v~1ڕEX6ǧ̼‚uHגāN5<5ʷ3- ǵF.Gj\Yɏ(-VC&{^ruYR^$×A\Pd7jF(e9 ̽{w5Тcf}+5J _C5ocf 0D/&5uu_g>='īaṤe`RHH9zC'⹭pκ^|xbr-FGh9ib٬6}-&7?[ R{#"Y'\2I=UmC5=$oCj 2kx fMhs9*%=>,$sIL9ȠO(f{c[]AGȻ$EW/aS )p M}qxrABN ˢ~(ePHz|8S2 /jO۷dH2K{YMFm/#_p gS{Ϲmao2>Q4KŠG~zxR"+`sf y *К?$6#MQ9I3􈝷U4uvd-?\~:֯[w7| ^y+:'m4ߋڄpR„dVR('F08H羹<6SEs [zX$՚m,K<<Y|y7Dx$%`̅\&y.EzJw~HsH˩||">׸!w=g>|Gn[7r!r8bAmTԄQ]"DOunʷ A36aaК{quOVb <2G!jI\T~&E,k=Ea pjh~QmLiq`Ꭱğ 9`Q -GX[~▵36g⯻zQy9`"`a`g-Ō0Uw8JAG>iu T.O"ItFzo )iRv)YմEҏ. ~ a@9S}\Xw3)s6pW 7vIZ(aہN FYg(R> :r Bҗ0GcXi=LD&A2EKTRm(#=%-ya}AO숸wxowChlu_O XJBܔ%olP?=6#aBdXBk{зw48xmdb{3~C 6z.5MUYx^9>zRI )Kq?)8  uj qrP=Fٰ.nj7G(44 }߂h.F2Qs6774gc'@tgkK~vgGR͢mj.Rݶ6'@{6u1e- ZQp)Vgd4=L-;- U [jڿΛ03[rRatp@^!TigdC)@B ȧ#{߬<<q$ƝXEn!:⾪˜d4C(@-6Z|uU NytF>)qf)rx&,b9:$ѡ'O e<[VIcp2΋j#bJНAN`o;색ϕy;]=&Y)in+{!P6*wp)t\4\xgH6 TmUji%NNfQ&^pf 6/3*m&uN1n9aj@PۤO@WNXz5eF:Oi+vQ~muNɚ7,ܲҙ* وG bl^\ܑ|E\oϢou\&i qb?_4MӍ'$Hv;}q;&koWZ4yG HL7+?, /b|2ОL036V?;;!RaϷmnv9y͚Pxq$bNFaƂ>nsVuȐI?A _:QL 7 iE;75Q#GLEн-QY@=c AoD/os( Qwᵃs!EʱIhdu'Y^셢.LD2R5? 6L+~L_hb1 =o<],sΓv^<)>O&@O M<e3l1  cLyA],aΑ6/<:ht=Ҡ{v/eb_/9A17@Nlt1O&Ed&'.a9!Mol탈;*ȭt!F4+=(GL ^D[[3o.Oi$hAg~vxSy0U~cLIsD9Pd ۀrQ=DP:Ǿ*?q=!\PyCZMNb R3wpuw8* U-S޺e,%UZ\;e~_EĈͼLa[)Eb!mc+՞N!"#fp5/re +of$o7V0ip)5`IqWo7S14&{pV?=Һ$xqt[}=5)GD28Q-΀̪#y iicLsqs6QlܽR}!уO50ja"EEg1LBC(yn$:F t+fq LJ*&&aE_W=SHRʌ&=t` U9z{œ h?f-.SvpMzjnz$%D>vy]IO_XayL4lr׷k7L̊ȴiDc-0JGaRlV# 6_a5`Yo#n2I!j >F@CK$L/ r,t6Cp; U>,L.홄eTt pjWiVFbp)A/H_T& b:@9cU*z{7G!-hM|̣$yZC٫GNrxL$̑KV͒%Y"@: ^ kzԊ}6R"8FRG Sc|:^6gN٣%zR.{Kΐ~nQL~_Z+>9DɔCQ+nzYګuG@Y󃷽8yWC Xܗ~&.T1|YW]N(-+Ag*&"rDTw;Z=rro8XxX%/\0ru%l0l,H{2 +O6y+BᘳlC6o&,烜 wFId1?=ȣC?Ob: cqݕ<*<&|a?lNǶ J$"*gJ;txǺ蚯1TEt_俘+q`uOuTiY)(;J{xzT<0RMdt@5cZw&a2U9orA]ٺy]3qXLY4OS;7&׹C*9Dj DTR,$u.*mfГfʔ.=V_VB2Ⱦ xx]?B*Ya48ysgT*Qŷ:wp'0ӊ 2%cC(ęP!6ŸsE( ~a y=:ϊOJ^2R1 =s5g I3|_mA} vy;Y' [B͐xǚ'\JTk <{lA2M~zQ6$|Lj~%;]ׄK zT#)0Tu~FiЬ`5|iZSF ˇj**TZ8tωln7*߅@԰w2 ;QN?DТl-l2tʣcfr=*QucQ^:yHQ6UeTǘrf׈WWuǃa4U:G:J*\7#JMP۽Oȱ3?W WYlx$Fyh^P03lSS?$0cS̔q.IwIozo^uN5K! l +{*|%LI6T d`5*{j$0zR_/eJi7XdcLj9ebeF8q(u fX,:;170m p?@67"ȸRg7n}l)rYem3vV 3[N8{̓ BQV.F^߿ f])ň7s< 7BGQ#wž Z:#Skz#,, /3& <}uo.Y:z蠃/g`qZi2.aSM1n@!-/.v(4Bm PenQgycKR_]dZʩ}S8ktHv3_|;jY }Y"FƗ,6Fcr,0dY+>X AG!!dT 7Jj.~aX_gqFv.4ql~M{-p~&%kfVTv]`!1wpoJYA}Ty FJ8zH,l)|=T4YlTO[{0^5;\|Tf`+YP4hxOZ]glxN=37q|Q4IJ!| -e6.PZ/#H!ceW$aZ s0ȃnCz /nR_tU!-^*<$)*/,%?QDgSXiW?3}r&kkJ0AĨ`qP}`)weߋiŻE!n@- r2% +w;KȪۈL=or1Q<(|xw#8ŔS9ĶfV Z|@/PJ g^.gXF;;NŸ@W`RO3(B#G.iZC;O{f7k[)FQjߜSqRG7<4Z"DLF8fxkrՒIJg?+v % ] WVZ< 56f: zW,\NbWqDB73}\b9nE߮;"2WisZW:NּGNJIt~[0S5|ԥ!8x49j6M\Dz~ALN CXi*W?Hde ; JmW[d?L?*8 7_ڬT7cl9J ^&u3mޗK-Ʊ`H:q b\R;n cKl'obʡEh a%Wz-Q$п2-I=WT}\LOxgC63_?*4FՁlyX4!|;:+! 3:=י(i>Ԛcgvqw E`d̆&'IpM9%] W} 0morI+rfi)lt t2{w73L܅(B*99ҼR2lZ:bmpߩ]Dwnxq3]AsR-<\"^|~N%eY,>ٞI'^fX":7cXZ]Z<0l(&DdwO1BR(=jGA f h > Gk,8q5%:mҟ_v/W}luq @(|x Ma [ㄊV6j!' _:O;I{7'3+b8?ȥmn5#Q20lBoJ]tY\NהM6p٠r?rMma\gĩ+S`V"!3@nCx>SpO]S3e kYćsX0LRTPP(b(#m2]:4bM e8iGtV%ƴ<z@}h!8El^47=*9Uܚ>KM.aa k) $[[Lk{n gNG&32UOI.i%tL`fōZGԾ ^)#>c  fdVahI.'5[wW͈vϿp65q&ELx)Y{RՃ QMba1Kj]axAX[ʴ%Wy]oѻ O`N*~Pkd#8iaO1ak]xg&4XT؊,Pu62N$H(=+?@~D.q/PILdq*0 Bb[jOs4'/acmy13v`າIak?ͅ9+*v@3zp=>>"R"x/v܊gCwʡ'G|)ڜ'h1( j\_]juqQ9i8H9}ݽ?QTro1ASGu8LAD+@a̟dONg py͉+JN0Fd|v, 7 }}\[6d2p㔡QEm`Db|$wt,: F ݷYnyg;SR+_{Tq<6y ]M}f4 TRD_]G[qg)+?+rU5 wƂ/;_B]ˆ`%* )r?%0l J "& |C~)fdIJcrDJB">Lg%QGe;da9DG%#0|&QtH #:ofQ0F>?da[FEJM>wSB}Ca11emt :N>?əIur<^؀aPGU誄@ofC-eqi#]'E}5G#ksVʲ'Cst(ZXB<=Tvǫ=":VF2p+1fkR5^y^+h$Hyԩ6#̃wv/w\HuT+JՒfޅ# xe/t;꘿[!Z>ωAYH)w^(wPR\)K+}ޚ9#CQAs?6Jʈk?ǩtf!G}D Ry4w$TkTChW* 9?D~&^u`;2F(Ό* m2IUwXq VL>$,נ {nr5B;u1p/ĕoP׉r}{qP5Y SI:!lV3X:(: "RT/eԢB·dʁEhyU`aiԻ |%bSfX_DtB9HcR@.\ UKdٟ;:274"=#sׂBen"PKZTS _Jv'z5?Vcu[.S?;{Z'%c U­bc6ws )XN%P2jʰPLJ.< l׍8<B*Tt@CCbխz]{Pq?h'TOPg)f3絇8 S[Y*ǒ\鍾wg5|ܒ-V'v< -XG5z6c=qvR\68X`9ŽJAU^-F ǒuƑuD¦ *HVd|>+w3>wi -1n'Ҁ^)[QhnFz4 H3~4ǎj^"A+tk':6Q G7Yy1!i> TB uXl]o9&}eMQZ^; ":{fF @<FK[ǴA-)An%Uːqw>JޜV O;`!.G=>O<<ږ. n-qYHEoAmuV,晢]PV<ϲݶP0lI3.r[l2ʝ}5:x̭_yo4o dt 8- }ܺ|jt9Q^bZ.L= A$V]aZ^(%8hi ,μ4Da%SVFbI H2KBd[^aH]mm Kv:玏N#3@9zut`}Ig,%kuda(mG/C GTNm vn͔[ÐgVZ`JC] ӾooW6?{J)%bC#AIr"C94[[dX 62|TRtb:^ XMߨ46OxK %jo5Yї]k)R+cK{ѻqqebuUGu7ӗ1Vu]>}q"ot:7EԾ2&Eh~LⰔLt}BʱN$ U5f^9M[5h#}F#,탿tfcݐL_+}rѺhU $GX>-AoBj }~u|)}a C,AYnB x/ 5#C0}LzBr/{`wD,څqsqTqaU"`|IUWly|RاS QV xZ5V>m\|aXDO(ϦVm+:<>,y#c˴W`\C7Ϲ[:W|H?򢛪a#=2C!L(̆f/i/傩).M$.Jo%]ްr$A!`z8 ؕTRNQ-<8gE^KrpJgڗ?#[tGվkJ籧ZCrF MXC Cd5(O* ]_?b8ZUk%Q 0+pDc{Ap1x q S2i&_R별||Rb1elbg zMֺWB㘼)B<߷=Ddw2K[|M1F "I8+HFPRu}WhGMߙI8OY{;V_w%>j7.' 1Z+xe.ֻ`ӟx[fwok i;8: yozEt1`E-v4s8d3W~ٍreitѯ0mΥEKA~dl Xav|xCcڮ*J{:~N=ȊxyQ>{ɒ+ v7 OG1\f:@~lK͐0'`_,U3<FCxƸ V Wv^6jom40.ӵ,r .: m"CjndO: 0vګ[ ޷Um?#hQyX/U [n׊>(oL +zm7[VȇcߏWb6?! rw"jN)_PĮԕ}H~aKg/(>B+=p$;֜+_G#n:J˸AK$0=Z~]I\78~-q^,&NE2RQo®;?%qu/U]f 3e٪/v;Maaʠ>OSڭ "M0ސDukADD̈EEZF=uMh3M @yWs)VN7P-?3CD0ob!#eBUNJ% Ј^j{6i2kȝN-Cc#i"u)'ho"FrTx1"(a7)cJ钆@Q=@fڙcWMqwXs'rn;jۏ(rއq =$ЁI'y7*`ve|TϝbҝS1VA) !eYbjU*C_AUĊYv<)ejT -/kFeeǰV <[g9t[ 4o!Qߕa`3n!8FkjpAmT@5[ P>}= 4ev2>(4GI&+jo3_pLs]*NRiOd1\3Iq;Cayh{j0KrMiXH;I#E\2APwнU+}.io9\ Q3k`sf@ Sa>7 e!Z6WF!2ބ0^s=ѵaeTp5N_/S 瓙dlƕ@E߯1,8݀?'pO,J&M^B'ID')"aykO{ _Je4νRg4.b l"ڿ@M[93+sƻa;a?ds{Ϣ(2BkwN̔lPn%4+1غZ@*SAPzt ɛ𾹔}bza`(E%g:4/lXfq/bN-{x%ܐQbJ@Ig~UZ}Tď}NY?-hx[ ۑUKK}bem) $-!?qx|YL3Dxů9dlDQ7G1_6RSok0 ۤ)``c/x斳[184;E-'j3ٲ2C[|̚7)=/ثl ǧvwa@B^HyT@-w%>PXҔP۹b$Z: u]:JHe˨cÀt#_gQ2U^wNTe}BH]Ah$:a55QMP$ܚzc0BauE~{)a[Ni2a\VXɠDڠ՝yYqI0Q^X璀S!|CA!YBVFOdΨJ:Ư7cX3ofBfGꓼQ,9vD[k ƫ˼} ǮG*7g kٟ..6A0q?Xׁ0}֨[dQH4`>)1P+10%[cō, I\Ivn5rgg ̺ǣF߽+9u DiƁ^.+I-t΋>!GH!y C(ӺL%|E0!1X(WA`Uf ͌pٺcC/hsi@T> v@ê9݃5]N]fLRH"t#cwBOUFKZN6c#7v`-($PpqrWsZ~mJX,Fq,ieEOq‹A^t]::Tnb)Wc3|ܪƄG8%'j&]W8,ߏTpi}1Nfs.!Nj{u#ZJhDj PV#|Y+%_$gqם.= >_H^M/(?.ޠfA{ǯ}yPI" ɀGwgQ"LyAFMCɊϥԱQ HlbT^!ʰ,f,߭Z#x5eZdʦ|i+E7e8bc%&>R咢ex4WɰM{uo-'w1?m@1I LB^(*\f 0҄}e[ }HIe%IWghql*{kF}S/CM IYTo=ĬR/`{I<*5]oy6G8nq..J6>a JY xtRwo <̏ZRRk_p Y[K`!b<4< +ߴ#7Y_>'HfU9rY[.Obܯz%tbsڔ/6&u:7=]s+ē0rM9%g?oͤ ?FTyBHXnV;(hZ<ڑRoUkЀijxQ[?ԦWTw,T19b*X/7RC%[4'p$0kq) K'P,9(F< J%t+C`eAB^DVހnhAtƭz@zLĖo^Bbs8@㟰s_ r=vL$i5fbk5G[؉KZzD:oP-VbAD[r'lGd\|9`6[nOsSzcFQ@,p-a\iw0P[1fZMb@]'-^D 4˵≒Ub"\h2i w^|^bl6@V* Ṉew1l–-fm%h8W 8T`ŏzWI$}8GBy+^3w=QCʮ{!Z^]%!&;u`aCAU15$P3rW't zM3h$,r%H@m:6#2dԆ0ӻޒ kwtkF7R#uH(X6p.~ZT5 M*ŪJ,j7 t`|йm~pݱ~dO[TF9}0iݺ9d 8=~W'&bm3W_0!c6sad ng7qxmȲ`QdZ$&w1.^MKxLٵ/ॲELzqӊ,P+j!rRl:!h TWvOB02"{tCB~)TkBr 6#}O5f0mX`ķ{yZw*sSqrB ۅovh&j_úQmuqMݾQC Z>9*AԕmW&:S;AiH5ȩۂs#lRRUrB*N%@4hۨ()6ͫT8FU!TWp!].VT[B*6nD92@\Mɫ.Vzl^)U^)n_!TDP,|D{ D \`UQFn(#Y!#>6Vb/i}";y_ϼEL Y߃SPn~-?*>Z+z['$mjqtL7:{& !;)oBpzbmdѦ#,YJD66;XtykIc+z@u€axv!>F6MDO$V/y9勯Xr_sn`k0 I+,J_H٬{7"$5YƜ0>c&ŏ0ǃ)6'>Uf|c$*$!NW.Jdzִl05vm P%71ϩnޓ@:f&f9A&GGoJvw2=͚ҥDTf+LEd^^%31E'Ve&x6~gLvġ2cvYs%*764lY_@K:\h U87MR1;2W h;fd{2+C#:ȭ0 [褧B$ߔ}LR{+(4^]+J@D5HMFMKGrzP!is:aڝ:/V0.' 6ЅuIbdz!lwJX)Xv*7[<<1S 3BPB&%BnJrj_*a:4`EN0Qi#C 8yc?%ɓKGLq9f%TIJ6iՈ 9/3u\mD:#0MNGS/N~3*?&^\͊Lfw9ᐃffԵ- GPRA32raho(rHtcKU"gt(ag25qBV_$VߡeiTW2R3@lU-$jtczf/`5?akt:+v}]_' #_1d!", vЙLUHb\渽]U8Va R𑽝Y|je{L'GԤCbKV ?C}Kk6o'H mWj Vr5,q\OG0[Xv[4[(RX`U`a{n z2 P'6O=i`8+@R/Ɍ$s= Z"UjE0qLJfs僃CaM p*+T9*]'rm EبUc{" pШZy)nMKIGPR=A(y4PG:xKuQe$ v (!E^F3M%8L~DЯc>YY?&LIϖ^@ @dߏ_~{e\s2oߊг*h˱96}VCZiĵ8,xZ7vvM T%wd_ip,gBC7R 6.Kd4mYs ej ?/zS5Ew>@ t+Q7k΄K%ፇsCkx?ESQު%9upֈ| .pcBƒ#osZ ]%Lih_V@yLиXЭ~u MfdmBp8XnpJ@מȰd62L}mpx̝qysKŇթM7Tf4ong(d"q],2 ו'O}"V@,~B eA{2- R@5 IW'bljt4)>$m@薤*hL0!D4н@#Ơ(1DnDZT)}`fY=MD0 {A*G]jװIX83¤k.'1h+ `{pB @M&sͷH5qNM$*.BpϢu%jDyai4O=힦EVt!WJp:6Og/`3+K Daf-P;p6cОCkPJ_iu nL0cNJo8ӫ}a/6ҋTձn~h#+J6GNw'[Sb ce/ ڱwh;Ũ5w,o k5nE_5PZMlql\ W<U+($QhuHKx}$z3(y[L,}=ߌHaHߣ8!M͙?!z(A8'ѴY4 49t/\T1A$eV9#4|ïrՃ*dQl}Ȝ `ٹ`jCAcPQ6a8nvO}%bt1"sDuT_ @VŦd XXD. VO!FfzLS;U,K*vK`n6I4D,_'[‰[^O O5h 4(Ɓ꺨Hzv@s #+JF@a!j,[ ߘɸmџ5A#x H|֍c\6'0r8j#"MA[Dw.{q $|*-=Z@fjV)U'Z?E} LQbȯ#Fӵ;\4ԁՈ+N},)K|ܘi"q$(5- ɱDA*WJ3bѻC[\/,iD+Y ИU`Av=%)zsB; d~99dm7xJ!5l2H-8|rW;+osw[ٕ-'NnR:A߅gj !<6H޻+?޺© (~#2\CkJMr2u?09% \c8|dteqXyנ M׫0,JL4A;b7H h2$vT,[bYZ2,+iYuT/9tԐ7g\M%CKx7$}[@:zǁ\"s#ªQHKO@Ku |²vifVB#~ڣmi5!G6QhKG<\Կ2t@SQ&a3]6l |iG|}vиlch${,np ZDwiD͟,NfƩ k2^[ڍ;,.bVIrpPדЮM6$`s Mo$ׅwibkX%Y~!\.\(eAt%,!I^}JRh@CWmKj? sSA0b?rbBx̴eihĔR@RE8F]R+kkD%b ؖVc`vcM".v߇ؖy^+]bBE1_lPZ{?fqR-.V$3lm L廬?я,=?l:/=AѾzҗd\2wP`ɩQ=JyRŠՏ;PM {(LnxLJYtTdwbNճlpi"Z"IS>^HڵٴBḝL_ӽw/$H!*9R-4.tsINe܄4z+С Ǥim?j*ڴ]Қu k]f8(\SFfUD>%p֕d2NfcBǘ8ҧ&0 GP<훾2c#Yo,q$0m u9O>H~ڒ{Oi.mgUͩxA}!|+*DYy+$/"\17ѭ.ar]”I> -ÿคXrxٲb;Jkk $|NYSeIt!C_h^P2Yp~qY hm[Ԇ1b@˸ `ds&UqZpjuK;/rHBql@J\sP@?F 7lB>]Clz]6a`K|g d!AbeWN9ڶ)Ŀ<..Ȫ/HzlӄFQZHjHV!|/۷s< \x^zO"  gک)SwvQ广i\eŘ WEނ$p;&Fϯ^ya1TCd{MEBV@}[FƜ+e~ܭHa`DhMʕ1] z$xCV-nBQuo-lq]f&𐗵&i"%\y櫁]!$ׁauz+@H DOu1R: [=<8qX:Mܝp4l7v`qwD^{2_0)\AB'mRvL^Fnl,RW4. lSfWx@C,@kz ۬؂fHb6|4.7ryӰS*) V= .Fk~rʍh>s\4uhUUOϵO&=a%S]ܽjC\iPĐాO{su&!t'yLHXEDE2-#NֺU.h%/.O%uR352)Lk*\huj?IVe4s#)gnn3V\~8x>nUb@J4KEdj+e.PRMyd\_R' maߵnW0V,FEE_.[>qI1Gޮ]/Zt]Ne\m Zo?` a[2*Kkpt ^7析@/mlμ)QīebrĝrԸ&FCP3;!G_Am9ytzaSN}4t?M=A렓5ԮPS&:R`nktx97[8{!H*jjOyks_1;&aQXd<JMFN2$ARaęL60v;>:) 3D(M/љFy(P˾@؋ŏ{ApD@/oMY-kL+';| .oJޕ.쩳oAHE=[)fJƀV<36'wKɤhCM3590%[wEh2LEP}EB,)ܭv+,7^;,t`NYZ6`LUΦa#[$%dجnC-<.l!68 :oƷtNZ GYO2i+* nď:N;I%*{i LPÕ*Td­cTA {c6l9ePX^QLun >[Ҹ~)F)il nʟ8M!w\B`D܀rLX)4wvrME]t~kl1S)nv |5SG[/OC5Gm؏E6$X^xTr^^xǞ&RqK4Ǯp,' R$ -BB8hN2\Q0*9x1\#eϪg$YH.ga*¥K:+[*' f'Ędy#z;W? zxZUPvp8x!PgUUVTD?ΣGdZGܷTL \>qfkY$ ==KD?WQ*0%6/IrdMIx>HoAyõAtOe!7y.=wqvoDz,j%݉,m$yi/@m<1I:hh*.qxwF?fv^_ݤNy./,SR5E2qlN^E[8fг˻JRAE57{y !,y$C?]`= ,Ԭ?D$r| .]Oeo>x:x(mK;+7fUeR:p3BS{邉9A.-Q)!Ot n|esBM̶ۢ6TMJpM"#[O853DhmG% $dvƥ2m@%a}dnZq~\'dzѬxJӐY@c/2M?=J ?md|E7VNE#%Ptn0_ݝ5?BܳC\ySNEA`"2Y"r3 ˽l;i(DWhDzbqnh{f罚(ve*pڭ %ae=A3 uٳ=#1н%٠rȭ9FKQ̾5}A6_rLs/0)2&n%.]{N0"D \=su Augĵڼkj!rB~fQvU;w,y\Po1l,aFH\uQԒ5ZvS\{P!.x/hqMfpɵ_boGyZ+[V2{ > ca:2U tUK^(rظ55vs}iP#"w_>9hHXjf7a L ԗ< +CDxdf$|ۊ8,GBO[B1( V#\:R.;U`2jG|5!TAFo8ɾ<6ScWk._Un_je?/c<|~"2(?-z0Y2QVdJXEK0}r5nV!PO?:( 4"WNC-"g7K ֽPlب8~:v몥9yJScNa@wKF"Iظw^G.eˑ4jĉ*"VFS9WOecRH7+yP𒳔ƍWGp߅mp9c>R̝fLqĄ%Kb*75!d+ЫX;۠"V.p&"tJ3Dv=vZ9_)˿r:):>lc[L(19d:h(-:oΞ>3X8>38>e7ݕY6+рm^$6'7 Ч"2eqyRN8EIucV w1h/0]3q}~`x+ d?wʓne (.< x~!gPڋ9&̄O]?_4+ץZ T?4taU. :ܹIUz#Zt{8\AD2FC|γaqIPHsv#gq+<>3"pм+ {Amrrqm >.:KL$Z!l` {BR: bf ; j\&cRzuG*dWVkg B1gk@Ă!5 f cF1U2frƏ(ģwr>w Ǩ7f (r1E|/W?ePZO%xϴ?wOm@?n=|_L+B)d)b Clh٥ps>Jw 'S]Vi7GkDjS-Ku@MΜ.G ~OWb3tm~Z-+l ِ#-۩ICpKVuFps"^ ^xDA߫+? 90V+w ƪuѠ>UF;Rx4TkSE|c/R;Xn$B s_a ӤzBLfe21ѢP&# .3 XQ3;.Hjupz|BE yiI^gk~Ja,]l2Гұi"٦xD Ff}ܶRGSxdWcD>@ף8I L4w-Z d}`B5\l߽Ld D;vy%وNvZwKd5SP!6E鷪Odruan7}򴠰jN-,7reIWn$x).{=;w8}PM(t84W76RU9rE09_23릣RpaWE꡼4_UƯvC ~18Z}`Z&婼RοʗE0Iϡ/19۴mlȁ WsH ]4Db kɸOžEIrق*>hn4J5)ҳ*"M~کWG2i($Y.Wy§#M&Em S㤩 6svDL5%k+>]aTʥlm6[Fc좃xw~@S=+we+8 76/ΣHmW4\ox鷷)L;U3U7,BA)r5r  %OٞJ.^mbW7^ )>2}4-^1lncz+H}\fy&09(*ˈmEȎ7wJDuWЍ_~ zJT͝hX)\/׿K$5v5v)jLv!38s,EDge>94^2 (FY2m{pk^&gL,еzAE䥳]lxed7T#r N;]eWܭunAJd]S ʬyAQ5]hw#9/Vq})OsﰾTfEj]cPҪǥnl{'!҈-GlS'Bj  P(QR5#f$A M"lLte9tNC WVF9Kgkkpnf!r9mmtգ|0DU=;Τ]j/r4o=!(}r;/c?轤il Dj2BӇlpwe~5}kōE.[߿5XkʇaH\#m^zh4~]?wQ3`z2ָiW3 YU,}Z>s>"z) + l oA@E1E?}// XcWJFo+oFvw]-|JiQ`-YZW<_)VimXn}mAئCyq$DUIąDy;5[2UӘDS4a`٣sril,vSw ;\ɺ@}x0.lyz%'R(![qsCSozV5ۣ~, jN@Vq 9:,\IH[톿@ޔ KȎ7vݗ:vN,osJ.}pwg/])*M1{%#_oB=M{ +ѐ'{j94S%%wJ91߾al ?_wr_zbxu"eyD-,&;ipͶ Cx_{!?[k~bmO^@Q #e:k pgtN2!0V?Eݶ[6ʉzi6GH8~a/j<<;r0l;n&^+·Tw~!?X/$U^k,s3G>"5JzMSӇ ϸ̱$ Ik3GAic"%d$ݧFjPɆM-.m_Û?BJ-}\1xaٚ7}NBW`$?ߓs)p<Ζ~ڦpe셸$ Q!̳la]6ؕfRpjN3 :F.-B+;MJ(O;<9c O cM^ɹl:1I6Ϭo\ ,t]d{H=J=hdi> m q ;Ui{KIocNto{3)uitQ[&M!dXcx WQ0֌ӀV|Jw}s4h9Nq?=AƔ~Dm? &͘ *؆4ȡ\SX>kZb- rckXH1 ܀4n/s:h #8 Rtf[w eo@;T`'ID<_hBJK,-"鵌)c6;'8_u*=on4 ʕ؈,b輬te:xZà˯ ;gBnk^8:Hc SW[ wV-'4,=mn#0[W[ԗƢzGQ,kQ{(jjc)ޕAxQG[@aHۃy<{An@%$iže?_7$"JAcx5.H/kp5 g8 -֧ Z|08 8hBS/7E1\DA<9K Mߋ_Z}ZU0yykjnbwuL0xj[G7'`.ٹ-,G e[9?O) ) ]P3].h-^\!k$`@S3PFhX@;{~WÞ:N1KM@Z?#⃊?rD `,ű)>!wD;o'"ѶMO玞L쵠q0ueTV\.bz T6ZUHTnCv;f&{iT-: Ȁe DrƳѶk (9CdHuPsm6y*CF W?7 ReŐ+8%Iڏo[1lSXl'fî d`C|8՝19_(VR,ҚUg0PPRL &1iE9d&ijW2Ho[VFCM)-߻/Sw ?POg,̟[3vNE0+gҭjOP>)ql+B}REKUT%:@A/8H.4-jP,Yg6ѨLަ}8hӀk6Km~ӣ}=lNہpWlHCk؛6iIEN=bj*(?ЀOO[A4#V%@fk%/t' i_| g!\^NTti gkwXztvNkD4 FXJ& m!]fw]<9r;jgAvІiLX vSO~V?`>I|]N&jrE8gB!߻LaYPwӼHp}Hv,Js6IV`ktfduNKcaߖ{_ obʗV0$h;N & *5,(^4ߵ W`h$oy[(=2^wu>Ir M [a]r ϳ \gH]'/-#o'"ɤ^nP a~VB̄(؃  =( \̌)# (t6|xΖ7gv-}MUlq>Dd<: j/\IY ybM#-IZbP./V9Ӳb`{XZ?Yt ",99i&@#5n ev9fzqF~\:?{-#W8Pq-_b|w # $4JLaq~WDЪi,~) !$ј-x RcN!)!n) Ҋˢ[+ ?W `Mҹs L{SYsˎ|4GTcu"CoB%-֎5iT,nUTh% 1 lodg e/Jb[Ptس@&pӽS" ˀ’ӻ,YoY*; 2B!_D ?DݜvoUa:Kl-w$M»͝T>05;Ol6oK1 'Rb&p<g'vۣZtSxWbM,qot='>+ +Yzʦ SqHJ5fAgh 9GSdpyFqmS#/O¨&͉(k , v@4pR:C`?%f(1f-/y 4%Qs]XJ3Vю!}% o/5:\vj&tem#;r wCd B%zŒ +WWiDNXvAwlBI*,x|r+c?\0|7M3YOcIfZc"e_n𥒆[qD+(Z&k tRܿ*Y@=Oeic >F6-0yͻt@:-Q=hSjA.CԀzMZߏBG$UMYN(m}@{jU69kdem{ƼםGt@jt6X=q'-8;;Ǯ,Eb'j)o G#ݎ?ƀ[N2džݤ89c+{' .pUm[ 6bTK]jďtK?i4XBVqv0U=* WV#\Ky2л( -q0c +&k1͍^D!{CE )ŮO6TtrV70KKo17B뉳d8 bȎ,π:m[DӆdUB dŔ?kMsɈ"cz.E28qgkz1SR266oi9ƅ:ĬƾPOgD_$#z)kAЄ]p/qc:8NΰMiA @U7fP(};)+MS +qIG(nh(<.c19Y-3%p`ZӤoyںy93d_95O6 K&t؁&?x Ք MҢ2`ƱΝO\;"(YpGʥ"! EByBqNz"wfNC)P}r~{[:xhp0 >YӢe2GeP15ŹVf  wFϝ=z.Z+«$\]`=*\H}![Y㌨q|xR]ݼw ^)Cr4E(ch.ePv1böQglXzrU?.?QU[9$KcĖ?0"FN O N6p}xqֱ 6A BT)aufp s!M]nU'%Qtto*fNRvگ쒹KA6k$L{^TWTdϡٖd pH+\2*t:g~r)%Y2tNa7Ha.2[̑cA&=B,3v&ن%o#GY4qFV5N(h5_pS;*A O8=gq, \p!v@A2\^V}1B'wߣh`-vM[GWZ т)22\'φJ`/6FZ"c*u"AJDžɩ/#Lrn %#𻷉aQTg ~=o]M-i t}-8g=U/_@;*$x2#l"YSnGbR5aF<|R7N[ooX)Ъe91*f$\i1|^&O?Ư1}/p!Xp 9'\q=Rh$==.qwo[Xht9xRQ0$/>rhXk\o9Z0ѮX%r̕i3zbĎ8:9 9YYS>[![,& @jiKdNɇvڒONW%2d!1QF{"WW2iPH;Gk8;r<\v"j`Ky:nNX!:p ]:PVNI谫"%TyXuG8w=vk:npioqC7->y{V܋ >Sy6ojEan ȅ\T. }wWgVa/ނ=J'H̆(s/Y|dS[&pt8*Dִ1}y~اy~RyW"~` E) Vrv(Z"_z)jM0`x#@-X_A,ܛYbniWqɳK5Jzz/(d bE{)|XR &4F]|h LƑkUk =LW+8U<12xiJQHoz7| 9= sm{d?ۓ6'ʃު{.3slZ3.&ծn>6;N͉ZBjڊDhF{YZ^nQvη=Gphԭ%x6?d a &-bD`B_ȶH.2!8 Om~4Cuq&]zAC#8dQJY=mw_k˚l~yC۷h8AA:N2Q dBZ?9EWh&׃q?/z.\4|{*ר@U8w '.Ӳ5bK>+T#Ce #%dC̽?E%j. OCY(ʔ۳uůP5fNE2dR]T_`EL mhKaW퉒?67XG\P0!Y˸_,<hЍ`6*<<5 rmB7}-hM ,>IV%.]L0-7+OŦV[޺WVZL6F#5$|_GP30h?uL>5_j=l%C~GDc`Hcmj9/un{e:E_2|}3atQ~a{~ڕe8c?K6&YQMfo[%V`,hzmD L`y$uC_@׃`9 zNl+U" #N1T?RIQmgǀ aNĔ 0LedX|2S(C k`j½)"4AyyZ.Hy\T2+"/,F9 \PO9} Zj!֊ kQG2)`]0dN5#(iChJ)C)/RmIEm`uB¾"ZF֚/2UeEQNQEyt\jq;5G ͞Q ?.=1&SDgo2$EN {6.2SImtDA1H̼cYtrRb{H{0Ñ,WX3m?zvp`8xi].bw/hXܨ"DO uDKd P&G]Rş3GkT20( ~tqVt'o(ZPl J>ǰPp'`xT Ԩ!xG-ɍPEn٣ȣ,$6$Z+vQY~!Q1e1p$ ~L8Z#oU΢;&3TVn〩3EQM{O}Ǔ*E=K*J.IûR} xCd3yTRn^CsH-;$&Ds&sK׮LQ56S-'r򒀀Ő ȫ,G<,g~|Ky TF]) 08IĖb$v2F`p;1Z>GG< ]Uhߤw񱪩5ꯣHܨ?iBY^.''G|WQwsz>_l<5ڰLH Bk!2DLPtŢL3 L[se0oi)i4?ˌ9@0뀒RC+\EIf?x6r28,^35^\bPHiN>9 aAM6{FFB826vWV["~PS |$'cCI4Vk(?x(JsB]2|CT/Vw6ު3؜-wwVYҮl~zKIKo!SIJ{p0羞>XDE 8N`B-/nsIe(VӀZ4SBc&ܭLh@"RT;z/bs Vz )7DƅݚGSzmn{<0*?,lIW71X7 _ PߝK0rb J$'P%PZJ(Ө!+#.j0Vٱ!|l)Rkg;QqhT;xॵ׭Ik-PI{Ux4׎x_bZMIo\W0Sa Ch>cRU&eemQI$($T6! 艂)\&WH.g>i c >(iTeI_nn)p= At'`k|=&n9sAq7X+zPca=L0I\O)̀Ȇt|]Ŷ !&"hOַF*as,3&֢ͼln\CY|gH9x CC=<nMp zȰ3*&jh_^S`n{''ADvL|jKDFo pr-afcd^H(Ԧ~&&湩ߍr99#0iBvQE) l=. {Z#aκ8jdtZ*/߾w:Vqi'>KD؋v1,WTE:M)$ ѪoJ0 ]2x[mo . !qt_($p<ۯB8CCKI.0R;q#3;|K1t f'E0ؒp$Ee8Zh&ρ=Nl%ֺO =DSHqky~Hr JOXIS.m#u0M ~s# 'EצU[Mui6ڼ_^6>$,ɫI[wLY{ MޗtoJɇ䋴sij^M7]Xo&% Mظz0jF fRj nQdSN[$;LXX忥L«zz9~ bBS 󵉟|dEs=)%SWo *572bɸSEu_YCAiWWRY'|Y+@+Bwm/<2"+zoߤgWs`x3\] AB B) + pAaΟ &w@%"y@ꢏ{+j8>VCFMޅVJt3hG*U*/?Rj>Q6 7[iȯP:3iAyA9\!o^㵴J&l eZǽY9|ΖAMLy5{֬9Jx2!yCT26)-qqZ߶쉐9cٹ>^U]AQ3hGOx|aE ]C= %_v]!\$ΒGl!Y>9%`!六^v!X0=)3BFƼ$ݠ RW2犃VTEk(>y.,̩흍,>,B4㾾Z %v|a?&(A-BFan_)dq.YI|#ߨ5^S`]'## 6`\Od$kr"}\[{ 7qKa҈Q?y˸Rn~/xOԽV:&Z=:`1ǥ[чU5)WM *vD[ؘ.4!-y"E-'n "TW|F̸C=ʆG.3^cn[| sw{mp5' 2'k/C IA?L/L-{WSfQ%'3ݢ`>vb ,?m\#[Џo~+őQ##Ẉ$7"]+PW0蟫tx mviIOI[!(FEJւ=A38u_v9^[-Z'[O>Q Ya-sWWYq9нE# i. 3Q<48[Oe^$ [ JrNJ2o Z,+226m.CLSڀ]> EfR@XmP*C^,ddLB'uq|~p /O]%4hr4f2Y)s"JPG|.:z]z(vf4Pv>7Ιwt̛W,ǹhRG]wޗV+eCIJ?hǖ~p[h PKg| Zd]ק͝0hQR4~@kxIݜ?g3]p7)]=~yދ_74`C8S*}sX߀ ۝$VW~=#Tf?}3I;kScD^GO؏WoV>'}F~L_xkfFOg4JRuLi~fG޾Nޕ^խmyc4(6n۳ԍl#K1|4ܷ̈CI;`xG޸LmZ\`->Jӊk{vXCpQa? R4ݔnPGu8Iee_ReϢG' h/5sPYww0fQqkbr  a۪H@wiv7ok -ב!*IV&q/7Td.xfO)lbCeUzNe ԓ@ZAS4;rH3UQodUw[ ,;5^*ʏoݚiX!<^dO!0rZ}] Ҙ䊟}ru`H0o͈M7[4gj5CFY\{|"Mzҹϊ_KMDp܉R<:Q'U>s_b<+nGb㒽08\iIntC-I7==НvO".wsKE s޴f4Zy\үOZsE ޢ`jcxtX]ٗE<.)D"v)Qee0m%w& *E[|| ҋ2HAAOXr∤! |oiկ%q̀Hݍ'yJ^,/%*qa\KU=~IuR_'uSÇ@Q}Xȃz.2o ;eS2HI9oPxD,1풥R#aA.")-+èJ`l>Y&oac=!vҼUC0cOұɝ`Boq}p&nMѐTo[Wj=i@QS>+Iol8ވi*J9_Ѱsnk_0izwp,\;اcIrk 8#8ʝE Uktsh4Zv^|ua~gʡ>Ľ[gR!ap]|Ef 2 3*>@wcj4`|#J1T׀^Ku &Xq$FwV`S|ӛ4ǚFdu=]zp>51y\,'ʥ*=ήODװ*:I;B8?$fYU >q~QHTȇ~ӔY PE=̷aO+)lʤ6t,%>mzq\viJܓ,xbrq(Q0|se(ºlr#ԗ@nO*ڮx?;Q/\30u^[kUТWz4Q 䕰- :wW-]س ?$X2Kwߋƪ6@|bgF$cHsQDBg;EHHNDS/lYӭa|,k*`=ywJ ;! Mt7 ;n:km|tXbo]Sڍ 0b5M=Ϛ ]"R0$ӆ6n*]"$OUE*a`Qs~FnʞLxu\~C|9e=U6A9,<)燮bKn5-~Dxm$NP>YE|O09;n-]Fau|C7,ڍ{6w?-LpV :(Z)WO03,̜nj+5CkQQuvxw/0${03RGΏS dHʸRNluQ-n>%O+INzw쇦ˇ+%4ƦAE+ra$vadqJbsvKM@Z݂&νEE8IR:::Aoe+iҳ`pY{׈lgQdê51*KC^#nÀ^Ll=Ըt| S低zhV? l<l8Uw\nsv"G4 '%mqxܵ"Qč%tTmElb3F@/X2'/(q'p2dBxQgŦOn,pw o-{@Jn,ὥO) D0+-%Ͽ- z.P U#Hy[_co29.%|ҲGQB]JhS2Q9r-DD%>-dD5xsݔFK ax+R@wUVq 鯇qZBTbV =Bu']!+8br/CVx @Yo`qLu>@U ;#Rӂթc.QۍPHs]s= *!S{`zpg= ezܳ?^Nb b,\st?$t'w#!l [QM._Yj>ҋ_ƌ4M*6 %cWyeO<>D؛xl@ 2m_KN3"Vw>ݢD,gɷTЬl0ZZ(Jt5goaf+\aHL>r"vIժ  ~g?DE-[JqH9zF<$r &T9ݱǰd:Hʨ3]A>fDdl'<ϴ 9  `_Ƈz+0 U`_ Yq`ME;-7I@~樓"\nI'෤q,jy!l>,%sIe5 0Z5T_N4UKjQ[>ޣL{bW2|:5Eq;s2J$(wt ko$Uq'w+EϰwLN.l$dVJ k:Ÿ'öf*5r!s )pѻ0QVÒUQ }ofIǬͦKmp σT\04aSo f9/~X9 }2I(j~a"oC%i͑p.{_Bat<)}?륾wM_y 8`C{e6uIg%=+^3HZQZ}\N?Ih;dB,9֯aJ2$A_ߣ;Й p@&oLAC1xJtzwkvFS׿8]`Tgŝ.u2@}GOU&j'6K"e[iRw4د \. Xg!x h?fID۫ {qSWh.tcU(symyy?@vdʁB6HoiB[lTY@ TuN!GAݮ4u©ŶisEOu{˃}H!_<W}l܈1ӛ$ԋIqv;=iUY.D+DNy4 PSTSBEg?#zkkC̺b9\b18 jp4W Cqvr\(wC!6L6&zz y:tkNfpF-*e9z™gD [z+WX5vx-,i dzJMG^  CPL-`svS؛oe4EPF~vjsbƎ \IWu$5u2$%rC! %HEy.ƒ iksꂠr°96Iyk(^(xuH^q){6/p3M6[>3cl a4O9q;bX{y|Q`ǯ!ZAģ+SmxP/Ût"'|t8ގPZHͨJ0,ǗMRmX$LՅ5E@:I7o Ϭ.TuM22wY@XV`|_AwFO5iFW"Z^ԢGԜ/0J4Uod:mYک[KXY07llD]:n"S7'D DrDz5x=*#2=6O96,!(qRnYÍ g glYyx]%)Qn#F+rrЂ؉P'(+vZu9l~l$5B0jB 'ԠkGN|[!oBuUhu,`_ QAzi!{aΕƎ2fXfLS{oMt<$r.(\gi-w4vp]XIꖂF)l%cn.o\Մ0ږIyNf_ΑcfqnLASL2NʇE ׼)h_h`GOх\kVc]+?W6YET6A7r3X:q { 2E.x9FHoBT7m-L³.e[c&4V#p!fJ/ :~+!B`.Q9 ٠좁̽'hT̘HK\SCWgT,]U ކj#z\"庸/F~'plax.%Ba9Z[?m9m6vl,ee{+?%YjcXAlw*1K%2]'4 ZIn< %kͻpv{z[7:=02с ZOi\m/1S|hxBbArt?s#U%=摞{GCl^5xT5#Š,0em}%] =0ew `#Z< gP(ǐJZ35tK@ePUOa5@3]M:$ՀGĬB9m,IH4FIl0SF@?3> }=BY5<{$d򂷠 ,Cpo;q{! L;8t<=m w}95I,./_)lY%FHo9%G]IsQ]ʰDv\$EF7p?ޙT!TPm9~giDz/b{gV,Xhv|K귛}lȊn$@[}g_!E R/q 1gJ'Bjp3=z$bOM_WUzO#|^:PBE( 31pN$G6G9A2i6$e֣&fpai';@^4o4a,Cxg;AH\D,+F)ԛLub!a'ku]|wXhVǡN߮[u AF,Vj:_ꅸKff UOGT;E1 X8KI .Uϼݨ;l'yYζbv ;ܥh\tTm_u +NX,~9ݬw9i6q.?=ǰq׍ItovR큀4&~l8>+ܢ[%ɑh6/dlU/VrD-~zܞi HmKw0W^Q$4]@CeLNB,Gǟ ,-$z(P@\4ûdCN -㞰:,<^<ȎmRl9U$#"N:L:gY?y .,h`oNG80Gى&UDa33оL[qfvRaNwӥL, 6ׄ &C{(֕%F&Ӱ)cf-LtI~I&dKs-MitJ^FU}:2oqY?&ңP$pXdT̡t˧6d+ݘkZ(B%dZlr2;TFLN(_v4Rj 6p)gg|0[n'[ZtgX8g((aww$I J.-LHN|o7b9;j7/IFzGt4*jcUu;>MA~BvxLƈ=rրiO|MsgwEy;}vD*hu| 04ۥ«8¯:G+HԒoh\dZbt&!1G78 mT=XmS 5osH@5Jw \bT0q IV}Cn/#X8zi]@ QQZjWA`w(rv2Q^Ռܦ_r̯ TȨIRd~kv+NM,N"6zyy6۩:ʩ*|;zy8N|@!Si.Gv֥|(n݄C\\P"7U50Ƃ̬֞A__d^^k[`ڿƍsEG đ2E]K7fI&{1Z%(Һ6O4-&ֱ t4K7OPuBkuK 7wK a!J'o%Y`dm8qT$f 8ONn/IWR\>ؚvF?8Eǔ2S S|=B3=D+zZȐА +I59ŹI΍v"oXZ\5#:NrDjBWX_dQO.hWChrl91уd훟ĺx@!;n3(}@0x-3 r!x:#HIc50nnUn!yk 0МӍ[|KbێWC]?*Ί6YsTZqE_IVzt3ݑuByX5>^HۈyE#wCilmEP]s5pn9c6" (ܖ8U dN(_Tfe-7r/.;ljQrස.O['lחp!%\آ.uE⎵i5146$ 'k= /WUS^6y|6G\oQgr\|`,hT*Rr=GU'%J]ۀBv 8W@ͼ"Smb|gq|$e5Aly}.ۘEclϕCUL9a􏙕Է M7e ܶI/E`[#bv;I1ЫLjЄ6bƳu X*W*}u, XBh1+]EѰ((/$4WN-aDHmm8냪8 4+Oʯfah\i-jPb9G_ϔ*$~۳;)V1eF{wU72Jx<{IӪQfm~}Ϩ}tQJt?ә֡ "K<}ܺ =^=-{y,vYgR0]#Z^x[=ng?g2:\5*x|+h4rA;=]y,D6<;Ք)m׫Jd k=ѫ a&j  lXͣCNd 0HR=ɱW .5F~EjNpkWIV]Yx}\eJ7G5v|\rO[yB#]Vsp3!9^9MV0Yʚ/[vyXpϓPŕN8S+H=<, }GsIajYGyGڝW! na~L0'6I}ћa('|ҰL1E+k4Xh9I+ [;;,Z7E Ġd/o  O2J?=n `kZ noWh&Tʧu'(Q0'#K2wlJ{MD!8> ( [P[qw-H.s2Z3@q6`EsӫmYlë^ Z]HmGƿ?%IMKzEO52(?o =1w&Rok9ߒ{ן&3x$_^Y 7{!.-wl^FLNcY FAZ L`ش ۿ_AY$()R'X'n' gUR".{m@z!jC/xag=՘-SHoi0γk&RNCn1opZg*`#[d^$T)*/o6zj5'::h Z"# lSn; )OJ (j4^|Qɩ2zu0.[4!Wi"DPXwjMd|jM :ӥ,(=cEƲ=qnfނ,O9O)H,yɟKJJ}>IPiM#W^m%_Ro2~-V{Y:Ϟ=2&ٔrb qK㭝ӧkuVmvڟd M^x<_#7q>k56Ɇ84eH2d$/v5(2Ձ*)XS8igD7r@ό_Ij5(M){m;kveIڄєSfG҄o0zxk ᴿplˍ -!p&̆­W|,A,ңf{8{Ql8eс|p7.QQw?c(*#=gH5iM l jL ; +oە닇UD{ _ 9bBJpQeCcTaf.a Ø5/GwTSȵl?"iF(1k:9X*ȉh-&XY,x<9@qhi6)0wuIŅ~Q}}±PW>B##Pw\B},hD Q|QI9f ̔{=s\q/~"uŧ,79]!BBΟ= !*Ʌ'ЏFrio~B:V)'1kZP| 1z!}W1]kZqψߵKs^^:קdiY_(ޞ)׺%i_<"8W$ *# VXG3nYZ7;{ݧkYFu,+~.ݽh׷oFu/Q'46K{mh6s*}7#V>;&t]Y*xZ d6q6.i}`*ZJ\2d5E )`E+gT?ٚTBc!;ӹ8,{ @ ϶kYtPi;}{YW;ı’Θ]"I~O[]gj`loF!$S!ޘ]"d-;o; YhخwL԰FjƧsyWVnӆF; 34% $MϏI D-;ŭ~r@ۑOwj-c>P0E26Q򐳀㜻:E6 lנ*gE8S Y/5% gn†j";-cJw P;R/d ݛvxzrSxaBТ.;o , OA,16E&I!Q:6auDK~po)>v3?!t۷eaoy+[cħP9 ۫YaM+@PNVxm%+d?+)[NЯDCBI/!mL*q Mw5҈%KPc\]q0 ac(y{$ԁ@Y`}VtR`ǝE̫%0.p_!m8rno?`:UOs_zbm0bQa{t@7gf|/fAB8 ]Cqq0ڕb#ukGVs(͇ب,8cX-D/@65c xU[qS Zz}ldxY2NT2 ~*.JCLKߍH%-CRt(KӕW48["B aB1(P*/\?ȮWpsJ£%ۈXqׯlbN5)哤[yjg>\wPZ^?l6_6 Ǹl4++D95](#BNMTM9G'oW)[!T-=zĐU T ?Û7d`ir GS\TnY <^ ;#8Y[P/G?s"Uø 5XIvv%q/R.z?n7|mS0^c"/=e<`$Lt|׸&FnU$;uIաd+"Fp%F!)y( h{=lv!nt<;Ivx Զ,' B~Az(vuc'Е/pcIv&hAݟIVGWF2c:Qxm;0p` K;7|b8u$ C63*CmVx }^,(7C~DF  [߾L]%0flJm2qw5yxDÂk\_f+h+[9MX?_as>4rha|.rzCT0!i?iv\C>.PɽsdnֱAkC w脱eY.XFѷw2 ^\Y:$I"e%ҹ3ݞMgk[Ԙ.&+C޷\8fj L8OBճ@t#'=cM8]Aa9pV*;; =r.,f8Z~?p2g&}ȴYY|jl1%aczzF`I2kťC <l Th؁Rp|t6b3.nXyIKs@m3ur61[}*(ȧS-GKz@cS#gG/J!m,QZzZDJO?~ IsmKg$w.1MU-w`w9½l60:IǣN`jdm4_GqF҂RA[_<ӾcůyBR¹_91t"|ZM2ʩͲҶ8%q ->5oht{>P!2Iq`wʃw& +dz RWO$'=V`ߪ ʲ)Z[P m >S?-F'( 1; Q Mwmh=$ yb7gBHW[np&k_u\8^6I~/y%$q ra>Lķuw}t[Rc(۲s@? Ԓ2"3UpۨӑR1j']D$%Є8Rn(XWOpFVStn˃Irx ;Q,*wv\ SBcp6IOQY0yOgU\2 q<Q8e!!(V3Ht*P \c#hwǎ 4tU p<ŸcgM5r&zlBB!{\ 3xxjvQB)@Qn/J[ IQDM'>:ǣ=l@ ]AQRY!tPݧPO6i`^PD BQʊ$iW1Z:n$ }C xnH-B,W2A;<5iwtoWa%`ET2yc 貉~wsC\K LzX1ۍ{U) Ȯc (^(`м+sXeC(9(LmɀO}_- (5>ʚ9DjD\~*X_qM b Ĭe;w:Wrg}-v`$(F{f*ʝ;14I*d*h$ӎBjXS<vx]N&o24g5ފe/%Qrn|!GT)Y-̎YnFZpB̜¿=lܬM6r{RYBy2"%_2ozd3sk<&?%Oaf"?for;A&0lt(a*;8e-gW_)>/(F$Ӵ? @*fc l{BC~LԜ ^Pujo/^\ YZ