sssd-ipa-2.9.1-2.el8 >  Hd U]gbot(}Ü:ڟ9" 9FSM7}_Lb0||ƍrqNj1$ihBɨژ DFtJ"Oҁ%70K]N]|{C̮ԂfcLv+F$h ^qBV%hm~ɖPMmӫFDas\S7wg뻙,WGu221})< ؓ&X*;i65 o㢥E+y(hAG7Ggj=bY qUz4Z1hE?Owuh+]"%@ `ܙbT@j=o{ *ebbgݣ3pMkeڧlo~a4^SƦAeKܥMQ ?B"r5Cۜ O$]9x`6PZycEOB:ў&铅 $5͡'ޣ i"oiYtFE,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 U]3#] T2vp&̧AYyƁe?IhEo^VOp"d+p }8&UU_5YsNN&t5eqlRʏ|[; %A >;NTY$`F9k52X>mSg 7saZ𴾙4)UoFBɡS+fI ~Ն]i;moKm79@~rUȿ$֠$>``Nyd Ƌi?~K@x&S&^1^:&\S70)jC[\֪mA?#OgW0&+wK8ըvw^4]p/8.oԫ8Dn\EZxCiw4ZIt>5Fk:,~Z"n$UxQt{M8(M"(2r?oR*kqI©:' >PDp?`d   4 17?  ( D |  $j8GTGGLPU(d8l9(:h=WG`HIXY\]H^bDdpeufxlztuvwlxyI\Csssd-ipa2.9.12.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.d8\aarch64-01.stream.rdu2.redhat.com 3CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxaarch64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd*( K"( (AAA큤Ad8Dd8Dd8Dd8Dd8 d8 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../../../../usr/libexec/sssd/selinux_child../../../../usr/lib64/sssd/libsss_ipa.sorootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.1-2.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(aarch-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.1-2.el82.9.1-2.el82.9.1-2.el83.0.4-14.6.0-14.0-15.2-14.18.4-0.el82.9.1-2.el82.9.1-2.el82.9.1-2.el8sssd1.10.0-8.beta24.14.3dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.1-2.el82.9.1-2.el8 .build-id66130504e7b6371a9f4bcadd1805bc4757f704e9905d1f81e60d46e16fa2577248b92204dfaa44libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id/2f//usr/lib/.build-id//usr/lib/.build-id/e9//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9905d1f81e60d46e16fa2577248b92204dfaa44, strippedsetuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=2f66130504e7b6371a9f4bcadd1805bc4757f704, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)88PRRRRRRRR;RR R8R1RRRRR%R3RRR+R2RRRRR5R$R!RR R&R9R R RR#RR)R-R R,R:R RRXCX(;7 R4ӹWc d? u%;ͼ=xE]>a8E/ ƔɎamX瑮m%,ց9xVm פqOf/03O403ֶ-nk03},AYFBⳗle/&1H!<\Z%u)xyկ[ OY\<7uST,s]=pMy1;?b +)w:4t?7j̓"aX .|"d Ց8mrl" _>S+B &fTB<t襠0v#SYꦁMNDHe8soXZ]SQB[X-SLܻT[Lb3;(m(ge9Lhy9iaOs׾ߊb樑mytxG /Hf*F<ザ"AFZ|ۅ=s_$T&6g# b໮YfʡIr ZXqN`'7Pz2X8d\zxcxw[3Hc+:ߔ$Mo(ikT4̋ "3 hF_#gڌ, <:?bIu6^z)k ,^o!<+ ȡ6xYqC"FgS7+r܍6ջ1wE<[Fw#A:f=fC䷻?Y74i3LxSq( RA6 w?l&@9?O_9b;@V1@ 4 -+j#RN凇3-/uvkX(V |/G>Ԓ0fv3U=RՇeFLu?8E\ؖ+ M⊐g.EnI+¥eMYl(_=dDrF0x4dG d -5|S`$G›i&AF^{l WR NߺXgLQ$ { 4_mɢ]ݶ Yx9blicmAq>2FXUL'gpV"-^كZc uE?-#,LlPsAsyj1ѠY\7x%#;nO?l[V犄l e; s 2,٭< /=b~P(_`1S6zm Vר^-nk0g`ŒYzI'ٹd_5K̼Ay.Dͺ?47sd-dcpc|".YW>(x\>K[58yٗqJR V_}6P C1Cd`IC|d91O= d47]JSѠ}?t[#3&QAmyW z{@h@4H;H*cza_"Ust1,N*&[+J։#>(G؃{E/O3crpEwuzLY~w(H\.jA &eZBHZ"lR2.o݈,f+ժy[l+[AfRfdH5GXI̩-OcwkG "/.X5FзC\7=vH9{K**cQ8ƟO9"h? P\0.mSXCxS=V[l+E {8aX ] ){)ǪNΘ#e4p"G".}q $178#JSaڜQ l~;GϼJ$8Jk$f(B͖?޼U_͛6[$X"aL~NF G~W3޻"7f9* G3,pgwBBǨ@y 8r6 "(VVLF%Q1~1Xy6vљ|vaHo`سY1*!G}Ypj$_ L {r:h% MpU?.8׬0 =v@`ckHmv٪Ÿc@1^x1J G8EO$,~{뿁s1X# _c7K#z2uMRTF9OK$©?>0醍ګoV!mD`mxM?EqDBjF(~.!z8aS5KrL Vp` X<tzzҒ1 I1L,E.&[:E ~B/CD g]RYɧBy4 V BraɤpA:3E>q,JL}N9$g,4VIiIj⥹WX⤪P0BlRU㸛fH36\c#aP$zpyAHhئ[-.11 FY *UԤ&WLb?bkscfx_|m;`ݞ,ҰPvQ$ 諥fsCN:X@ ؿ_[,h`$?\|IV`6/={ahhuQV6,T9oP!HSIm>ytxf[:ց{DK  窋g0JUT)|.3MH?UXjeX!kUphy9Y̼ Aa30Q$-dl inWkNկ4lyOTU[$h<$czTFf_`9uLqAib}mK#8 `TH(&5O'*چƱ8TL`y 4 ?-z9X FAf0[ ZHJŗ+?aEcCk͊} )|Qr{!-_`w)FO(4"n[WR'W1aA1 :m`«j]p0gRiS>]! ']J -3 ~PL͑QH\` Shs6"~K.vTEE`oy}e_ɌBj;v\O>ZC;S!Ǽs@8ؑ$ "ZWOVͽ%QX%׳hIP}9[P4ɮܳ,#C2̠p$g9c&SW`1@2i!k4(:w+#~VxK"T Rǘwi衋D48)Ig[7{$qp4R%nrLo=4:vOzQ()"& \"/{*j4h(s•.u6$H6ԒjayhNG`M1*R m;Ujn ui~ul 0T p#4+E?]darؔ+x[}a~/s|XJbSW\ￚ=C5؝ke#X'W$؈ߙflPjo$ZPMf4^hݭ"ܕ.Fd @uZWezKC99JwA:$>0FL zVxLa-ip-=u_SS*@֋!s^H~"=QSW!=( #Wo>V_qsyP緟̌H}/Ĉ(P7^Mo{Qdr8QkYYN`_P / ^lu{mUuΔFϟG<Ǫx Jk~t- 'q1%,}Bݔm@25j~Z1CR'i.hMQ `j *!@Ļd ix։JIC|5'~mW&k dk ᧪4dhS.7@ .)9<S3а"4Riwwv2kUTAE(Ztљ8lc|H OnZu0y3KAKKmu+UY0\ǙHᛱdᢝ E0ydEdť갵0+C*Ȥ^C!Rp~Fª]CG ݥz[JFMM'.oxulz\vJ:ɇ:jN#zL##VR\awә%?)TjӑM=߰XR؋hҮ23bIEC9+ ? ŎC&5^4Og؉pY$߀~ͩNXU;9riPpNf>V?KWì,zSGQZ/󨖯.PU@bl:XԤ)YXz<˝>"-u"urv-Lڏh%J:rz0@W'S;cK(0d]oai vN* .>؄'O[S' ·{n3lBG(×ݠnjђٛGPV E%kY? μF$N`4Iŭe4?IS={yA+akk^H銙_)X"-FŧӀ<3(֒6.x9i{_LvN= .t}sZ7H'J8v]6ݯG=iiwIV;zY2BLﺚgA i ڼ|"xu`,ei⒆hzܺo$]uml&ڎʳR2j#k"{( {Ў9o&)ZȬHoga|VdKxȖQPغVIeQRpĕ%]ӿ5?ȴ̳$ "FЫ;ˤ ~.yar[Eʤyq{SQB]@7xHʽ7kTRD px,\C8y,0EAU|^ Dwq:_6/}Gyw o !=a )%fK+aŲwm}컮̡jEH+]ꆡjL(N|GjI|E fRStTCWz5V9Nў"tK5!p{i}{3WLb3B cн0ty`Zmk!clk.ϾU`Æѐ^%xF@kDwmCy 0U3BFSubD{8q\.E#xHtrmt3B9|`+5cjVgNŭ`>vRѣft*}o# ;\5ѱLm~p]h_Gޜ30qA9 aFY+L<별8Lߟ;ƃ활&y5ҿ7 K%"ݸf=HI? ]q (mLˉ]o.y8o2c ^ S)_Ql?J*^bLL~>":٫-C\U ^!VJt*S.?∼ZDͣ4tv#EgDdǔTFSWu˶^'=ieihм^VM5 1VTNL*4!BZz%(ղY>K5Ѽ^ڪV˓W7{Ly8tHzGPtzNaC 'gHC,QPmr%dJ^m%@'qKgh|- +9R=P,+& bOq0qL~3)_qKHUF}sK%c8U+orvcST:oneѡ5³~neykTm\]@?af)vfYdi7zk@tЯH>mam{H|0x/U> |n='*{rx]"xO-Z{n|Bd|䑤zgN"s-[&_.h S3v.:ʶA@\ H#vCwrgbޟe5_l?&4DbZI??$UGϔ (@Goom/)&g}m/?]պ ))w̩Y#ãpgA_=ٮ Hc2/@_t_NjmX_⣧(Ƃ2FjHB$- ԩ8c4q|7Ҕ)ԲRw4fktiC1R6B|]}@HI&dD:iiSE;pqڹGǹ;"Ū|-֮ۊhfk[p[e)8pw?/!nrX7ȿ|iaϾlF.Zn?Y>홈-Ma,f(+$;R`z/+Ø֠} ,׳j,@XhLed}{bO=Ґ-fQJUEIݿ,ZŰ;xdQ*2P<5w&=^tKJ:31 v«@m`&H=Ċw; (Däӽi?-J葼+t sDpݮܗFw6 krGjRze/fva(NCv9SQvN7HlGJYIt&lWi aœzƋ͖t-JG2rOՏ0aS\qixn& ]D2v[,XSV:>/8稵4&-H=yqfb{4T,YJ|Q$?ivVFux3Hj\1华=ԧFH*ԫnq+DHXcNXRL{PtitGqRk2X?b_g}$A#zdEz&tuR_:l,>_b? t)©-ם{ .[ QvAeLVjS+1*7]%x;_| J]֊/(NjЌsvݷVs{AM)YrϏ*穜b+md٤*Qo3Kb"_ԉ_oX,\w&Z{KM)ؽF wˋ1ʁ/$z"2EOU E"/~)mX,+ 7:＿:Z<[cѥ4f`-'iɑ* ͕Z ۊ|wyKfKa=q P.iZkhI4cU*1Nȧu|xqSl@&=ʆf@Qs] dGbs wVs۾aK$D vG*hjmVQb~3IEéK>oC$5qw!~ɃXwo|6t\46v>-S\|14lXkN7.- _˷s1tajmsubFsQ嫸տau,ΌQ =y~mhu"| ֺ n&g"7mLAKemZy3u)NUJsu_su\3XqLrYy6lhlѹĽUNsRϬGt?Jvy*'J2.aKXvc$س#cWfR>m5f; }yJnK[V&%Wr,BG$ZB0_Eb)f8*$āAŌ yc=[pn Gngó!N&_7KzZ.8S7ULB-ϻ~BG!ʢ@0lF %Ϭ_Ŵnڪ]ׄ :16qaj: `(};{LMO#|WM`"}C8N l(mڝM>J-bY' Vm&ō4͠h%dp]PbݗQ ЪuIV{Z۳J^o^CɄoUfA||ma1Vh(t{ A/Og=?*%f^G:Gd)<]S}ZB h],i_o5A=~rGT}ĠgX{>r78Y5?qG+f|NbQwsncQ\N$^Qi1e{עoL ;m9r`f8,k 0Hb'Ltպis{팛+E\B|TAҨŠcs=ݬl-P`GQW%[F]TBwKs#no<9A>\e;[L{X_/Ɛ^,D#MN>B%8_ʴ1x: Dnm8ZnM(MLcdD~gYa01,;ԭ.[Wr>}cԍ]1R: ƥ3ڏ<<(J)/H&@DG'@сkZs*3V[H"B?HN Ԭ7"$aL$}6&hy2Vͤ(UH1X俳Pыx)I?M0~ 3bwvn( e3)liE#kU^iDVXChQtkIB15ΚUxŕsY6u(ϥn? tۏ'r꬟[#Bg1GCB 9&-x/q{=+^Q[~>AuzB m>ev¿-bRuHnkZ߽?d$ g6o`PLh/wRQtrc!*$ w@rmbC%6Ц +' 9kګUuj{1`:^Y}:\z7D'V;SsV1ejǤͿvsz[864/"˽%G(yb,?[Iu:VHowQbڲB( gZBwrUhb̰ D,F iT \_,{j處0XЁm%lDFEjS+!el<#otv"Hw2A߬"糏ďu:={ d ̑GTb:N}IMIA*im{O1OsAĸL4U:OgX\%UݽSO[!_DxWiCQ\Ij,Tx_E@ƺkz&*s DD4)mlͫ6)o :@> \`#3?˻B蹀`ENi(zTK~cϒyVNPȌ{v.ML\6曹˦WGA쫯 sڏ솚S/nktP֊JCf\e7cHPmNx6XP_Pb *)9n^zъgO-Bv\v;:0ܲ*,lx5B.؀*cmpJL¡pMIuC-4+ ٔeY? ܅WP3 +:-cI|/`xý'mo E4NhQKŧl84V^(럖lO$=WoubK6^xD ^"V7E߹;y{>XqT ]WYXߊa#Z#phCEVu]ja|0>LF+l !]u.%\")5& ri2gGvLܷݙJϡ%.q^vg'7ˊd'ʷ4ula9$HaMә3"AAaE$T$S#&l 9[NjY]v\y^g^e$Mcx%@ޭ#>v >^3D1S]z"֩rD<PM.;X:7càs1IHY S[g0%DήH^~94ߓUB AV):"[l)psyjgpgF3G[򣾡XN-:Stoe>``{j6u`N,hGW`Bu+9 o.ڗvK6B붤M4@i}4,$oTr1ݟ"_4=` :c.s\nZW@d6=C s;@don#`nm#Zu8b,Tx?Nk7*1h+(-&DK<G0+ߢs]ҕ5:cDMv"yp4=燇IPxL/`r"țrtkh`q5KiNitWϿ(5Z*u4 `hf2wr,ҷy*W*&A[oOҜWYysy7|ݵ Jqu3v+70qB_ Zd] NC87q K^3X৿nk xkkbx0n @B( >cf Ӑ7xS3;ʱUcsn"(Kp:ie3:47?;?͘7Ξ;UȔ[Pb仍E6#b.ӯ0}$ otgJMX0εEt ?egL#d&.o(Z|CT0<{n[$>DMT y1))Ut?LSw&b>Ry5B89)y鄶L ?><E$@Y׍[_ՇDj r[ nƚ`FMvY  NQeF`<IV4mo;QxrY[SٲpnJ3)W^+ }gF[jcD%*G_x;BN)+d]7IBRa2Oft߯"9fg,΢NP^|,&+x@]V:ozR|vLھ4a$fuhF ?q/5H  X/%Va1jn3~#P5iiC7B=A zדF٬^ÞJ2Dƈ:׿VG%.=e`͎*Gc\':dn1)VS+"_چ#Uې~o19Trv&NGz`sُ )K I1XҔƩ|||z~&ym1@75Uz{#4O)矵ͧ1Y{UwC &|κ]5#/^(^ִ|dd!гA[!T14J_yjvjD+;bbܴuXQ8+vWqtP8on;ع$c`n7h%Z X#t8de!l(t7Lå+\Ӎ &'Cp~fAPm򦟪lA/w"NQ2H=U -d{EeXu>pa3ՑGm]ec(&MX80EŽzn<@(ϋGV~*Q<i7B"Zq-5Bc /Ğ!nN+n#=l~aiO(>{º#]9FgDUpnW;vJƇ qm#h9V#sQ_lE[)%,F4=Im1tvb: o21O*dP)DqnƛN8 k۴O(\__vIlTpQ=u*R@E:N$w|t M^WNPۖ`~33y%zJh9vfDpBSU,ZչUbE/~D6cdSZb3fu6>#E?cDeL 1!Dn ,ܻu:b0G8}qtHZ$9\K胋9 6c#IlR. X[Ioa g s=,b3AUgCS54;BbC}wGGCЀ\e EuPq:B%ہPSdw=Fؤ^iB )YzsĩZnڜH E'ϟSYײp!<Ӵ D[,=;S~cWăдMoAS3 y KzrIl>@Ι!U EC)q&g]C@4Z牸i݉%6{Ó'Ws%MMaD-}#DZmpb\D`:||A{zg,iix(Ͽ_rS8{.ljN]J0+7apTßi՛vWI\Hj1"kbĖ?nX GEL&?G J]s=WsIǙGvı|!~J*_pp - ̮SEyÆ Ec٘H:])\N؊@}hRmУh%^} tEvIԾI0MdZBcELdzlqszqԜu#l0YYayLDC(ѽ:uw/3^ǽ^_Әƫ|3i, 1$X(KxF蟂2u,oy[Dl\S.{pg㬡Zi  \O0QOg RK\zFŻHL9x?!<5?fxA{cXP띣͔R6E HpLDHvl0~Tz}Cork-w5n..OXd$FΩPzW gX_ÿ\ppzV raV%ȺL!5B8$4eHgKg׋#ݏ^=}RT_8M.dX2FBx`e؀# J Y`Ae$66_L;N N}) uꄖ9Wq]yW!M wяai ǃ bh/h"Q/TH iy~9C KFsmr;@b=1`еd a"vn@>4sҝOQhwlH|kXPI2/ıTn |X _hf6)rK!NUݲ_l6Y$Ľ+ Rrz\|RgW-C}F(n9XF!=B=HZHaxWi`3t*g%s CepMߠ;;Jf{B#lS2:tŪXcՃn ¦uh{]?ֶ0vбkSk6wgo y`#MϹ >zZDy_E/@hɿef'^.>Wx5Ih%om냖{Z~O wT63c oHUNz=$2m oB-7Qfyto,zqH]{֞ɍn~}(Liɸ6=U0F[ h%dz{!QH6J )gU7VܜDk/_†"dx4v֩^@bQa q(V,I.!kIX&,EKPك} ʜOLc탊>1Z@=t{V^l@1QRAE"`/UdФZ3n 1OXlf"PF{3X C! iLJy ?@4uD"u.6@sVբx&AH^A<秈f\˚"䪗gSELD (IĻOlugHowRH?R_=O@?P#0)ƌ} %QĀJ^['zP3Mh4nkN"yٰVsֶBD.NmN&x5qQ kb_Y0ZI+w+x @b25~b^|Cݟ1]V'T~{3鸃hE|F!"RK@[ZPE慃zn(M X΅%SkNwm-R "";%_ o/]5JV3b'aitB mw\`Y&x$Y9*{I&R DTK ߏ")RMwc+這!}*~饟DN6M"`AeqfS5 ]RxDOޣ0pfM7 :G9d ^P4a/ ;M.Cv`ָ) l1ZdzvLO;2D?-!ܹ3yOu7Am,~)9O:7'-Ebdgcu kѝӚ {/M:hԭ"bodf!(c}Zbk \c}c˘^TZ1zs۠X9U@">9F ¾U0cd5&~ۘ{=ޗ%[s|%x\NҬSKlrlijVN,KTGLW>//7> ,ѩ|b|x-&nDI>.'K9 dΒ~0:<}E B*]|ڠP U_QAmxDwZgLA~2w$㄀1Tn2"JQ'f=J70ģo Ka_m`-n]?2f09޾\;_cQjiRɠmkb;B1oV2]#ל _-$xYDR`c,ʭ|M\_>+^;Q',XJPaÂM}\z2Q;dzLe~Cׂ7؊5NWwץNS`@˵g%8Yhw(%7SK $l9RO 9KCu nJ \X\88c{Fʌᣅ$4e0pz 8ErBQmemyT]캉Z(%ψ=o7ݪjSP֬z,K7( _7xx>VaLK]~'&GI^0-҈#a 5x8;{p6+#зsT$"G'Rn:JI[ K3Ҟ8g^ ;!]|'V!$CCY3w}Zg*0zMx ة !bca 9:Pʰ UY6 I.%x:Eu)S)G16ֆ8˸88}CGB`5kc9;C ڔ}SM[gZt;90>0T (Y`ıK7^-Fp;Vݑ-_k7rĎEH͚ȥ˥`_M&pZfQD ~5cΕuazy6մAOWXl1p&Nrb\`᧢cڸXV,/ӍF&ENXʰUH WX ' :@=.D:#z6\c%%)'10XؚR _\ƴGUMM8;лs \nA,~XX,!Ll zbvf8v[IxšeOuJH3+YGxu {jiXV9ʤXis]de Q_̉|t\]"R/͚WMK Ic;w}́wJ5kf A!_3K!c}fx ^6"jlңܫ5wh`Lw])q&0Vgsݥ-GY'JHYhqka[Q#/:k'@{I7>x 4c T\+yXpD<-5 Qxyq{^-Q{&.BSjfS+7z2J SІKTT;:jBEϥH=anLj2ôל@߬s]R.}^4=MQ6b,j03 Ɲka{ ־Y9^6mX V& uT{I9ۓ5=&<?@[󭡏󎙪N!T+q-.Ppd@tpatөt#s~j&f"̘}"'){%Nt>%jt5ϐ_ZѮ$R5CrF^d~O֛J{#muv\kה2r\s93IRs+o,;&Ð778Â:R-/9}s)gOX #3av'g+SNe9gQmתAQ hc;I <)2y+օƝ'=/'u7\bUwf\d2 Bb#>SX%\QsO7rz=/+Sop%[d+rV~" ʼu1w][NCim/jWDX.]Q J:z.? bܭm=!,?E\ hXUX|=kRH_!ѥ3*pl ռ_t9`U,UxB.BP^4OH> ݦք.iunhШPYкU'0e,)apw1pe`$T?h'/.Q*kʥu3_\|m#OG$ c]G7J0 dl=?M,~!a$"w AFTvPɛF: 6vdxSchI;k&;/엯 6PVz5y>鯲E{~So-}t;-c ,{-;amvҀ@/(B1:+Ee/*$lw?WjZiӳfHTOV#Ņ;#)PҾv~+2T\^#{Ly1vQVrߊ~KY4pJ(c{%8.x`isRm+c?BWv~Py cWyg:?eޚzx<~#]kVDFh2t$D._~@JA˽30sS=΂ѝ" ]+%j^lF[91?e%'dkE!TgmnAyXKmҊ4n:!ǣ 9D8,6~ʑw9W̳&O<8#.\T[&yD1m\}=e7٤275oߣah]S\=ĉl+0yxA^R4P?exyub !)#&BaiY(6!{&-s^Vb+O^Qްڛ(z=Ӂ]'!)3CF !A}q:?x΍jiVu)(4F =LA)"rrwf>'Rʇ`C|>nՎX“[<ʘʴ!L3\z[8XjβmEiWUvJ{Jco~|"|I.%{{Žk; ׹ZWB_ l^ 1+M56`1މՈ^ٖD?5TiauD c^YUM0=28]ʫ)) Ds A$S{7|/3$S/rb >c!!~oU{ୖ\8WgMEuhd-XueZ S={\33p WQA@V{=Xe^ICtsFP%oǩPm ,Y塉0u5}qҿIveIQ'=> 2;4YZwaUBjh\E( H(1۳Ja'Yc~yItcPg(YqN&1|̧ 8gwϦ':]i5oxk?|ePT h+^ {YOvj1b]7JbvZPܑo2Ul=3TQj$`:1:Ÿ_8WD<)jl }#@nf4 b iR Z2gunܩފѻl}D l"EJfvɪĖRucUK}die =LN%0/89{l{DA3Jwo}HUo)?QxE8-H UG3TЍKIE͍L"wR#?WY@HR? hSj1ށ^}OЙ 1HB?]5&,u?M. {s&+PYZ+ߎ$q:~8{VZrX٦z3 -˹U8|6RrYHe@Ņ,YW?V}'/%&iv0 4Ǎ`a/=M孿R:=jN;|{ܸWNw&B!RCqnIjF$_RچZw )7}+tùN%,luM1PʨYg*hB ٓlj E;+gh/o(J'(u:CC@wp/и6.R?ÝߦD?saӅ [Eώwy9N ݻyT9_x9)qml^D/ʥ37GBn2s-k}xl@3E:=.' \2^ .qth՜R72 HAt:ߨ3 abm/wJ8a[e@r֣>7HWבpXА*оp tS`G 'ˆ^8sT_}},Pzagx,I@ݕ`?i9~;]X7{Xt!%,lC0Vb@?]mb䛭RB'3?1lmy'FٮF̬.8 yʢs3\=*ܬtϨ[15x ӂX74W" 3 mBdhJcFdvyMaBSUiՈ8ZvI Ktz$fnRwoWJ-Aa3 ρ:P@QsgiW>9ɣ^=Zn#D '`O>́b| ./[#zO7Wa0!e.AN/Z!b{dZ~QyBOh. *yժ"lg-:Jy @6$BKeRN ;=gcʎgB&c#"ݦxE?Be˃ѝ-> H1=lH45xx|  .ܵLW:&"X|}7|[P%5nOlg]73 ގOQW1]ucDN0xvJ(c%ISRFlKr\)l%TE[ؐm=<Ӵ@/pз>U8RS@f=}ěxq9 ӐW?EZS/5ݝõE97 r۰aHG_?XUm?Nl%>-&oGLu><^}wh1}0C$Qn$HKlkq!Rhz6f951e)CnlV Kǖl|s&cA(y0Bg#ޞG@ k5tDw^ݞA'WZbx 4U ?[L +[ 5Zv%Ex8K~,F$UZFv 5QL!$ s.NirhTf:\[&IZuj L HA/t*z_Kmf޼$J4v֏8x!*z'wOՍ*J ڍGZjDDS13oo$#50Sc18Y*[ F3*+V&4@:O[M(KY3y: ߊ!9KРBn ^(A]Qpv#@<ѲJfhv2O+c"cR#(LN,m̀'R ipȴfK(>-;1gFT(?h+ *҆ Q\}$)=viC׈YLņZQg`B_jvxsnfLu;|@0).JvYw*B`޿)loMi7Wd;'I6%COLJDS0KvĹyo=aOp`Svf ?5T ?;TA kz W3`Mr?t/5(b IMA A=(|5Hu%W "l* mvX~6G31~5~H=tH['. =%\FeoJd 0]F4'>22*+->sd'=Ml=CceYjwy$AA(ݫ9$J]b,IQLݖWM"nXe;UIq\gi֐lwiE70콪>(ebolzJ а?*p&P* g:T߬FlyِM1)" mg4Mj&drZdPĸrF$,j? ^¾ &62c+ydeILҼ0fVYI7WFn``9H2 _9z+XFz~6+ |zgݨVӐSY.+8hCDXk@WF󈵫'I0Di?NVwE<畭v&ɖ ͎ͱJp*Xt]qdBВz@LMS-9C0.U(T3yL2+(Wh yM겠 awa!J9Qn%v|b(b|Gb"8 fm 1x;0d@`"{ +X 3F/(΢3~Xu_\\ ޟqWNj\$7peH*u?bğ7.}!?['  |Psj`r[g8U-"2$# ~C\+tʘyq@n jBnA]YX_pGh:8AGI w#%vK/1CiU}tB6SU}gjԘA8v7Uq[w!ތ r-Df]8LYz4Ƞx<4vVG,Z'z\%D.3ȯw!g2nTݨ+*сVWH| , ҩʲW -pnbܷݝ"'";80xUbkysYJE-0fiePzL_S5;na06;ݐIXqo ΫNIA/wŖ ŲiW `{H =nzZx(ʡMPtcye, KJ7$z-q"\`jZgr*alI`8/-:V Q~AJz-Oǥͅ=20ciO (JdKVHv ]B_P'-&u4F\[F3efǪ 3 !ѝK*ml?&!7r\ ?+E!]/ys~NNRM!:YTԒT,7G[wvBQHS695,CƸQ@j>ϒU8DbW3_ ?QL0⋧%z"An[kߣ:P 3bʏ-7bZ'`fbGOAaI^PӔ:iyI߄4ەVp–9#:?з㢲*bg&O"#$kiji E D@w/CU' K:[q/ 7QWM-\J :U9MBf5^L}їR-!.! /FTgʾ dtba uWXW4]240._(n^{s4K0UC,'Gx%{!#D5kDyf:3?xg$>XG"~6~;;,rjU,i7N"0j7bhVbj]·@_a^rSW~752I:E|6dH>DȺRzhxaza(%y٫yg=} 0 *>RT5- $eIO3  dWUP)NN1 偼@=^Ǧ9+6,SGǿ6C?ط法G~0sd PBu3ƗǏ +3opÈq/ݷ89:Ԏ=B8Vu1/*yfiT}6m [HP]|;xCE7@qV@w1F `VJ{]Hut`D\ % ]3/mH]pq#q&ƀP['l#5=`d۝$yQ#.W+zAnf7M͋`:>I`m6v$j9kIn`V?v+waj)~@2$P | i>aY% G vC`rC'דe/48\op 5ZM"nvEr~Y-ԄO@Joв>M0U %6Ug>x)w+?\I=@ƢMmӝ)v={Wy_Fqp('X2 )Y%I H\Uj'q!e]:4SÍnw,"kIi~%'20uĚxY/}–R]bwĦ%AN&RrRytȱ ,Bh-L5SZiwcA>8R:@j`1,oDޙnrp w@-5<ޤJo*;w;'9ag &7"'Mw޾M+1^Ȇdx[pvɱ Y>A  .Ǹ77t=6ާf<=15:n'_؀zb4q⌡E(&رw8pᕥ0\fxCsoo VfHyYk@2/}d^$FC"yS+^:k +n9@ j!=Pׄlh|VJ6N4:Kн*9a\ERLyGDP* (YS'^HrksqlԸ_o.L~.uqm(IjLlvmNߥg)'~\J4)~},1P 7W|AꏲLLEԽC ?j/wb΁n*kEam,;-`/mGS5'u@ޯhF48`4#F,jN_JZäEiV?PB~>>_:t)+?: {>L߂J$OL%c](:e2eowZ 18]i!tХ~9,Q&GG}q|"Ѝju0Iח?@F;j]v%neۆ? :V6F\Qhx 424_1側.8ß5QRLC^ɠEQֹ{*宬ga>\sψ; V2‡ˮrg%VVǵ"Av$(3KG%A87;EI#1@T%"0Д1i qy9@.Zxvl9=נ].rpZ_?εM*\Bi9hk|4&?ZyXl/AYsBؗtU9zcީ9Pt)R> Ŧ2*7C H2u}Kѷ:Ge;ۼW4UHP7 H%_%edq&<⤖)(J1)?dIn FHR!KYi8Z0T3Hn/Yow\N@5$&s^ j dGgcY|JvY ycq7^u/q4߬^W~Pjkb9Ⱦ(6N3 <^-{~kL𛯌`L!;lh?}?PCHZ[sZ4ESX6j/e鲙KǂdbliU"H#q0Km+q?uaS'FFA7DAE6Se8qv&a l.`Xgf=5_Z颈 y{?6$K0\F/ʢPWX]`|OII.*2[)hpYHL+ܙ9zQa[>Ʒvq&@__|ޘE 5-$ }NbQ/zp|0I8i:XSN&]P~{L.WEIYeG#ĽP"r>bNU6/|Dꑨo-r!fhZE>Xm rcK ߲ ֋Sq’e@#W܆RA?(,}M ؆V$aܖcM{6rګ8DxG 8┹a)Avv]bOY$cs2OkS@}6nIm>H%|sKaBƉ͓+̌;@3VgCQ/NvovjA_Ggmk>p'&c n| hS Q\-~^lH?ES4*+1[ tsX6;=VjdzT>w,}8!םB&`W걑 )=@zxi7ܙ),(WtYv8BZ Эby_'y1nd,YWqGS.(S>jM~96E<rc6|:s6*مd\G%^]/9~82/ZG4F0giДq'^e6|Ueadj C'|~#ӌ=qwZ܄l-0caY".|%:'OGJQ LUQEis +28u`jb`9#mW<9jK""9]IQ ȂJZpHFl2!PyJG.s%U&OuR9/EcQT^VvY"Mlx w 7{wف\/ t@1hT Jcsr%2%(խ^N-, :zʺѦ}ޝO58BD𦡰E&hFII"6&FDw^G< 5 7EDJTkDX":Tn1ũ5ZTʑ'"4~pbV>Y&5`PWW8HHz/_,:ɪ%}\O=ҽɧWhϣOdò = \m`~ze5o g/oCVYaze&-)*FP]hc\.\V2ŲبPT{>/3u+A9VN,K.*D|R/I]I6mPD>. =^eoeF|tdž‡-7ƂFl+YoEgOJ1"y(]DCp.7H:̟‹6= zy8|'t8t?ęޘ4G.'|Zk"U!4W2)-Rm;b}wku{_xɲ>9"?͊AO-YT;9|}UE՗esӭƟ`D0 zWh.&:^@Sj:Z|w5ru 8}M.`Gu4}{:k||OM]@8UbNŎPzo."esQE]mwh/?L<d՝dZt{#rsm3- &> inAzH4QEC\k%dXЍHBp09wb ^$1=zV&[5䱎Y K>iL/u5b[fff3FATuY'0oGZ}c+!Z0`DÍ{ms֧* f뒫ڞJѯ%<-Ef\j:N>g wzې4O)_Zuy+EfP`$pZ()`L3w)q}/- O*׆)뷗\&K+ŗJ&i{ Z0u#eG>ۗ a/BöqVê$bCmVVg>DP?GM-1 ~,:ޟ1)g]APs=x#l!3wS$, M *i{&) O}p^?}>V)mV#^KV<"EI)z(P șh=Iz|⍆L1hH%ԗo*VUԝ53bm|;@ɣ&k}_nId UQ4Jʸ/+UCwЅAO>n 3p> Naj,6eT8NY&sh$DG2pqw*R| W'` _qIzB߱؅"mmK74͒]\Y{Tĕ%T6]\^Ql-*bΠߗ|[O즰?҇K5Gbxn^ }cZJ 9??B-``̛ N6_٬F4p Lishw)jWF6TzJ$ ʨaXpKk0U*!pS^~B )&eڐOZDp܅ ,ҡE -|Gk;;8bO4\]+(m򜡝)BIK_,`}i,*™O㿶.VT/zƞ%"2"U@`zNCWF] t:hͤ`%]mёՃ(͂%SwDQ gT9jभWzWK2'qH|a~ɛ=zU ]uox1U*Xn\Y>7r[^=+h-F{6vzδX"Da炒H' /ɿFEToCv`ǔx@N+n-fvN[}( s`'O =ѐIR37?@Q}!# ,񏋲֘z=y% #d6mnWbw  %\Vp w>4׮51+WHOАNV٤6Ki'l:vX%{Hzzgo2'w9yu.${/#Z®L ݋dX$QE)"j97#zV3Z /Irm8cEh@CAwP.7m6dgCLAa9MpDe| C/>̚#^2?%T;C@`'Igb0]W!6me={H#ϢקRRk1 (jlGwbfq)) U(b+ hb>t ߺoI I}f}L'6JR4(KG, 1.VMNf7{p_+]Fv,f |v6^?K5_ 4 VW%v1a|u&dMt; <n2]T?M@4lXkM[U`;N(-0.c d%z^)^uYpd[1ѣh;6k&zwY2G1cSdO*l4-hՌ%>QQZ oISֽ.VىmOdyY=.Hʋ0MQw{$WZK!డwPXITSct>˅l A>h=&Y@BK}0nD\1M>8+b7; $0_xb{0̓AE=HRU >p]Tm*V3Tw֘=婣?qWj^,kg 4[#V*"b.70aYYQC> SѶK2):wypZi(zϮ#WԹxdڌ aBjc]Hõb- [Kjd8\!m*I459衑twٛ>Hhmay0$\Md`ca(+q#Mo`WQkisV" %X^B}Qe&}i\]:Ր=n"5;i.dW8퍿qpBf֛aSyL%`R`{DR4;&5u%!Y c @ՌQnyT]%'WDv/:+dgAZ9Q}] f,`t`8j;TG #vP.ںJ%9gm(rMDC lpʶ}āt-$;ˑ{3G&Jd:ʐ0V# e(C0y}bN.^GXupC&zT+}7jr24q%ȓ c0\ "ͼI'-KQw u%5ЏIL'GxO1RT}v1aM9c-OYE#|7ү}P;/}!~vQ舜H)U qlu si~b Xa})#oU^bDP?bd7NU;C)};c1S(ۚJACAi$qM|Αc^אGX N! Pa65e3 ^Yb=* CLn{-PB .ĥֻ m︮Cw|C#PJa売<„-a_ hSO!^0ш}.ER:pt?P 3 8DCKRVste0E;sj*>P.DўEjK~u&au*0JCR2"Fk!_ސ- T=0o_s/5lFUfhOQZ0ED"rrC߂1bEG5 H#g ٿ'b>o$]BFv^x=00ql+v^7mzQ;g. xmNR*W|4}]j)W5puO:+Tp@os'w|e=?͏~y(})q՗5 ;ܔ_=2/s~C[f#?O&K||;l:Ic>|s\-d Z/5Ƈ]u^).gnf~L![,c YL7d @`߈_ו"˧Cyk}#.ݘ 0MQ}Sc|YV6)ypGR܂V D5\/qa S쾁5ˣ5ѢA:K ~ly)9X!1Ď"EoJ?$@'*&,^,+XQ,"zLC66A56Z꤮ Hs!t&I=  {,ɜR`|ЙWd4'8%2-jY/ ?W3M}K.2ov,TOJk_Z1eYQxWvzyz~)^_p$Rl)OA=e[lȣY(CÖNį3t?1MLTd0n I`GE+A˙zXIBU_)|jmXc@ٯF &Ê^Vsoo m~am[H~|z #&p܅ ֠jbƪG|G ]M#`.;7Y7ܹ rĞ(C5Iq(Suwe#».ep{V S$D42x-cz!-w$rQ[C ܩ:db)F 25vmju<ۃc܁tw Dm+PbVV\ }. H|^w ~qּ $^L1L2sƺ7Aglҥ #V21h?#WEΪ/jb N]B؁etp()#u%1J3@nx*1 迈A{_pFi7ʒ.0jx]މ]US6T'Fj&8]nsrB#i%(RcQW3iQJ\1+᧠%WjHO2&"٤ǝ>aב2XI^_$XR%{K0 GXlRkEB,. uK!*&`21)Cv ]l4Au>[<#i xJ;7#D0@f2缂X AVT6Y r-Z5US5[8 lߤaֽ6R*uίVknľ_F=E\s͑Eōk<վR\2־:KF^BT@UfW'Ǚ3aM_ddu… w6yV^)@Q~Cx*7E!qOicQ0d(ۤz;CIz'U\:ǜ!NK.6ݶ;y\)T4FA;o+H5ay/Em5_\:#D3Z,_6E ֶ{xC4ϘS%G.HDT%Y AƗ_j2&~$e _o74^j5 Ⱞ=osrWGl}{AAݛ%~0-`f;,jP@FxI gFX ɚȔ0\QA!;tx'!>JvVLs']bXbEÕ ODǂ=#BC1QJh!] J-[RL-"m '-_/D\e˝Uc@ M '9.$`bs/㛋!NR/?}Ek)gꤼ;I+8"99I: ~G]wO6.$ w`*- UeEAI \xguhKWֈ.WI޼ $E͏@U*6 EzghŞ`:UD ^G/'> ԿQ~(鳭Gڝ9| ͈*pK<2S3tD1F1?E}W\=ZCخG )0;僒n^@sM<|mqn?n5EC,^y{0AKg, ?Q8o_36ԼEFj$SVy@ϱ# Ե*{rgg Ŷ;h_d)P9+VS/?K~vVv!q⟨zJB!m&r2]$ex[D&&51{PMi8d <↝QekbK.{eJYnc8C͇zwz?R`)|MA( B=\9ΰmNB S`*l2[W4 kB&ThjȪ A@櫠ϩHTkz; =G*@h"Իޛi* lS;ӿ驅?K)^X ̀wCFn-XfdvП.0(Or=%pMsSLšCZ"mtNiltXkvef{z!N\\KŰ#Z >„`•Aq8]4#s -zP+f-?C[͟j-7Gvd պR.q\3nr3(hsD gK;4 15^}A]cF;!voDE.EB{`V.ȰyDH=~EUY&./v&lIk̳7ތivIWlm ^?݆P\@55_еQ1Jf?Jϐz`np#&)azOU@yRD6L(6*; [>Mv5FMTt-O JDO\4JuF)ǝ. +>m@f7"*IV{C̶tL}rSG>?Uf]U$V8z6i+ "ʜq[Z>HNJ ݠ>6ǜz)MJJi~ӳG* (ӧ )Ү4?[a>f͗qZTͽ֑R 2.R_kˤoC =~:Řk[9%b %}i+0gXIO- a*/#,Vejm((*"֋B/noD#y~idOӰmK6_Xs\"n@ݹP̙3Y)rJC: ce! 5L- rz"D-4gW'2m4W>6΄^\ƑGɻBs{kl.^EFy )=Y$h]@6 3Jpg}Cmx=ѡNoyTX;O}Az#*z투XGOqwFacBg\Y]4umYCTpWO[=Tbua9A`F62r(!.#1ދKLUDyH;*Ar#FB,ݮv1ҳw*u@"Vи3"k`O=6F ⧹7gZ>jN3\vsó)=rbll&[)~7ec_ 6s1}xڈϚ?_93batl!FF)'S?'\MJF`ն9 dŤRHl&0`{4r}zhM2b/`ɳ\jz`43^1 e+h(C 2P}L]WIk^#Hu\t0k+Ow73F:X |ֶ5$ Rӯ'zCJnzd*&w -`.Vf^[y(IiJW=X6ӌ&B潞)8%S<ĻHёS2SIH*00eadrQ-"%dbos˞*Jkx:{{{49)68:52X{}VwX`0*\t7hU;t>B_gbL,Ӕ|t\ Z+c{&޽{\e*h7̆Լh(Y<9mk_W1tfxhJF#;i00RW`-,PF:h0-Ez2]1RNs8RGM{js*c(PqI۔ǹYD xe͟t&S^1fNdX{ yPĐ )3Mdaqa=wjBHqjJp}N*jQ[J-Rوdz^7h*+Bj&RW2Ģ޸r*nN?D/̿16e{fvyhI1ʭ j-Y1ޯMCctB3ѡ&c P47lAmInrEr\\>FAu9(5o`ѦD#gߘ4,5֍ (H+n@"t24L7:dNZ/2R\vL7m=ܮDoi¯sMvŒ'+:ɼ.zɱFvF.Ɖ(<[}$:4  O[%~0X0L ۮ >+۱?Qca%q\bkfT z/v,"T.PkC'izx;n T_-›|,LpA :k~mkSL;~'rB[Sfµ\i?"ѢC" SQgj^.*-Sɿoxf2e e,`l* *K?C0}m1D#>f8Q#1ׄĎwz&f򅂁JwoJ[?J;U~LwF85Kf*L1: q+{9sG'pEbaRVr<紷óC(`K`h qc, Sn7%] gQ#"%\U v~Λ ({ Ç*#ZTQ"6tE Jv-4_r>@⛏VkOX-Ѩ.FWVv/LYO"8\RfS[:C{\{ޤ^D8u.1 HJ{bS7ⷣ 765~EqǮ>Wܳ3 ΐaɞ]_O˜U᨝uoN/S;x$gh(Wȗoպʃ|Ez_'Wn@J}1")h%1GB!sw}!1/>4'En]Xɓ6A KP.Kb6uK_(hI9,A{iMgV: >K6de*d#%g63ˌ"D/?$v}=Q{)im`C^ɻJםT}[>ˏnhyW-^CBrw})EDŽ$xP )#NrPQ2:[D)mGS+8ߕU?nm;zܲmdzaQ/HהҪwwP MzLT oA"#mzspRde9F;Ɂ%A-ۡhݞ %As;o#ܵq7 AۄP⣨%C/xYS tH9͟96Y9ϣϪ 7yY[:^桘*!ļ|y*!!;ӝTo/>$+cDjnRLf7n%IAM]z)BV-{N땞x/s? @.(b&\_)c4Md*|ㄨ YcD7qK; oFN0Awd7?4oP 6=K<πzb}i"_ď&12 IWKOw1} p b Qɦ"-,+>aIfmiGI[1Xw*DQWOz۔Xi =T* vup?GIX/^bF<šQM^TM>89p$&A+D8ay>iNz=,0Qi{^씹l~Wx{Z9tv<0%6˿rp(Yy:w `?~y_>_PsN.) \pZ?>l?+!.PZx Z&.@s#y%ύ<(D24ǔw2KhmLx >|p'0YsV@aїXpWUYՅ^`n.T=踡Ό6ۣ? t#-klߙLub T s8d:9\M?pfXn-q|lz<5}RnDe#H $Z/]{Rvl#Qc"O!]2M+o<&_8e&1U.=P'1%%S*9 5(.4O+d:"m1w.va\̖WGG'KmD2ˣ(b~nڑt #4xMPo$WGDOt5J*f_*jP"vȰck$JDYm"曃mוGac_&Ad b$Wߕڟ!?,oZ+Q]bYN6HЙ~COAd[UԲͩ+n]ґTS`MAmPPi pdiWB6UD>6~9YQs ՚' {wC!)w, DJ!ŕ$|ŚAn#] ?Sh]%+!G]Tt:ߧ|ROuݺ~1HGV*zoYTp#|yx r B7@QC4;E1%w|q}9Bf wW9ŗV[ds ޹\]2:4hJ-PG;mQ(R֣Nh2>0 -E- `\µUV~]ddb% Ek3mq5߅PR;(0Kjdz{rab͗H2܍;8(VcI)FL,WN"XywQ2)~})[הuLhS)=c.4"+QjE *S!͛D@7aS+f>XY{:C.kr`ǟVJT Bl *}K w;J*S,fjycKbMl(ojyَ閇(jhD ."QE]엱ȭD*l #FHɁ=}PA}P IJ(k8 7s .KºT}pnJJ KcR)A?ez%k|9zaa/b#SY-90Bj _&->h `$G6S\+tBsY-;:ƂFQ)$\fԼmTyGQ҉85e Do\& !͜{kc}4%ClgDeY^)hP-*J^ӛ<ѵm ㋉ӚRӭkpihnt ,8b0?ߠ`eId8}RE^iWK┿T%SX臎)OZQё.Px HY7[\[u<~Ǚ=L"S-2Uc~ZI.04YcKGо􊎾AVN/ن-/\N#'1‰)4dTߝ*[p&jw`'"uzf c^IϯԷDov;67fx"X2!d}p~DMwC`'+{K(ː>jNѥxTi??Z]Xǐ䒑~7W917;}42>ɽF@9Eae(¥jﶫ>=N\^xԝyrVW3TQ9xqQ~ghhT/q 7Q{eicմ EڃlWr4H= ` n> hk)ʠP@/^f$$- ; ΍ ߡL[b PEWAo7@GXmd1M.Ъrh|}*pNcՂSG~-$X/ ._v,9W5la*JE'@W_vmi``vkiOMRCP5q$jHtB8(q)SYb ZU%:<ہI G ܋x1Lߞkf7Eeu%"/e_N|] RHo>Y,v"opkakAC{}šO_ bp_@ ls)-{"I/OHm8tkxʘus.)YJv5E7dM-5^pRͯU$?TE;nlvpls[B6O\Q^6rdm (#iTBåJBrƉj@(1}S'o:pwPwuxBȭ2 8e\Kj40fijG@/?}cWlȇC_B=@I3x_50bԌr&arm4b'Dl.K* <9۶uF6de- kЦԯ)E( 6`+ֿoƂs%UO6TsyxpTg %4F27@Bz_A82%8J~'@:=Y6ѵrz!9 XНgP|dp*wԄZ4h1ָ7q^/uv>l 4gm Y#隋y4#ZM\U/賺k^3Žx$NBr۵p{Hdp7j.d/^Ѣ5>EEHH@!'= 7 8LJT:&@`A}g%T"hj''MZ $- p(ph9Z2!ubz %թhHT&Bw684pQC3S1Rvskhl\,ѐ̫7AZ.Enz=N>wi*\<[P~c^)tȡE P`oP }Du})6۷nX C{N07nt+qpΒ`/j2648ʋߪe@kI'd/]rr#EBa-4n/ LxؐtCE{|ϖllb;C}=Ce2g]ZW5Ł&p@Oha_pRGWyTQ ;t'$Cܣlj?Rri-jipO _ G 8LFJ\ؔqQ;EŜo I=U̢`k_@khǮhJa,,7cewL\&:% 40&(NqOkuv7y9 ''荤se_Aev@؜9GBDjJJJ_16aw'~2u9ҙ@+KpXz cU0}ޘC|InT V xV w ,*KhL㋧#U]:h)./4OB>|7 5km(KP/qdav#C$ۛ5d8)=89 <,l⽾%Bv% |IӁ'KIŏΕf\\kD1 #9;L^qF߉⽱jn*L.k3Tm0'!Zuhzhhoߩ_ M%ymxhǏS< ױFJodT#η-e/˘̗\K4 M l9f(<w1;!Q i5\&gP~ٯ 6!-YE}\r99Dūд܄4tMO, ogJ@ :I9n8 86̗ `!+1xww|pComzJit= -A2ojNzK2w4%;6TUב=QXCyuYXRE{eAfODlI}hdt +wMO}&8sMl 1sRq,s&\P[qs@Do+ hfCU[Odj_RZU'HB69YF%WޑL >h"o3>D:W.5ļt}V{`MNc'8Tq \in UƷ崐 'Jv]* 6IV.UcNuw>2Cv5Ķ v }*. !p h (6B*6260u?Nah*-V1<%Vk2Ϻxsu=&Qvd3|b1lNʄ)7CB+r`J3X`@<Q!yET$H]utU*0:> ݻe=}I򿦭?y+f޺&tlBi#KuS(WtLjP}v ь``aMyuMbcawEE99k@Kgj.(9 ]꫽1 S+cNوybt+YCCdk=Ղԅ]و?Ip߾\ .%3#jmPAԢqIg u!6/0N%jb6@cx]O-!1I)ꆣ;ʑc@$.t71L8DN'LA[E̙ꌀnSe;+Q ottTH^*H-~B&%1$Jͭ09~<=GS趉#ׅ&;ָI3W)vs#w]l*-;Hqy2ÀdT&ySx7%̏xhU_N ~˞{0IyEBb1>*2CǵpPDIٓ; |gSeYk. 'G]B?t7oCX7`*_`=vT9XޒNl@3<7@J?FN5rIXd`,n|fei zysn1;|Q/m)f> vvhղ'QMub+@Ҳra#*zӊ@3/WHJӸ "Il*J^}*VTwD·LNYBScZdR `_fGbFʮu$?Ah/n0TM ˖ o%2`Q/ &uvGBZ}K0n9BA QaR-.iaQQmao2qFNVcNf=tGe5̆=ܕw$C-q%?Kg wpcZN!6bƔJ޼@UGy[v#]Ic҉(ߦ3 QPQHLyKe"G3-ɚf > 15k[r%,x'4P ,߇xRBDs@bEl䫁#hmr&L)БŬ-bMzx||CS>'V$@C9"e*<Գ;=dդL?Y/Tf]%UC,H{ K\~2,(1/AbfȔ Fڽ6jʁ l8:4Y|E=3# ԧI?i( k`{> Or0" ^nL8<vCL;j[.xʀz$ ́ x"%h+Y(XFui'ϝ C]A2'$'_<մ3t֎% CxANX!|DW^՚cn0fVL=EJڋ-x]):ŋ}96czh :;5e_E [ b(E>zLA5EɄBp1̏?C`yܘɇ9&>H_GI]{ozē}67Qaڳk!x||ZW" .7tYB ENӞD}%씸m.D&=sFw?\Gw@xnDQ 'b&&iֽ6Hurz*Ŭc+R>0q j[Q9IZ)Z`5'"o2?~Q渠$Џ4taV2׏CnbV&s@X^`sxgHn0pʼnھnB{"A4!'U+-@&gCb/*9tNg7~)r@@q :"D3Yt^6فcgU`О;9 O+qHG4T Q#}c4cGE(˭G_yAxJS&ɎnNU_<WEaR.[ CCJ*+~0 r J,\Io1*EE0+(!nBܛ{!iPXO|DnSN<8*?iw(NQHz~Ū$+-e\X+'ahЫ<0Nʽ kz5=)BO&ﲐb+Pm^O٧)Lau$d4Pm&@M+=2+*|1$^ 2-^!z.2IjJk{A×]J83WqB0"etGr~^(m,w= CT \||4-j*EdLseG<{<fwhv"$w^1N /dy%DV8G|*),ܽBb[`n" n!x.]t =^ q L Fš,E(EV3swn~bj'}gPgN=R|'|;e3*T⎟vřc9kw^%W.ݓ3ЫGBaZ+#/27"+`ІnWDJ^V$K??vnGXd oTVҨtGkI67]);Psobc(W}sw..èd]3\x]~hktDJ\\6y#T hqEq4=yz隑n[@Aߣu$˶@2BzvR`dxɦa'CEH)hhNY4FN+zU(ڒ˾fQyLU}K(i da\y# ObF|UX2yrLK#7yB·uHi~Be^%P:#698~_ztKJCC Dž<+f3acfwI00O%nȳ0U4,܃) +D'X"zȽVR#!jLՠ~f$/an~YZ˾4{?$CD dzä+46yA8ztUir7j yJQ |@?e[>:_Tt71< `#Y)E~?!i b,Î @+u JvԳqs-.UY}&#Y (`T?fN$z3jcO7#]W<9vk-6IX]Jib&_B$iNЛqaaWN*A"8GUaC,FTW* Hf =e;S.lV`ޭkB߬R;}5 Xs tfCojQĊR:q &8G0Kؑ(\T{8O*.gJv5iYUbvC[2pH27'ࢗwQ݆4sDT=CHH||T#:F`( &fLak7 n(+;ă#f8:cغxc[Tk=Jk'd{+̮龍|Ŀ9١XD0Q# p:l0v}PCcjX[ AGXWp*t\j]JλzՒLK|XBb#wKwi;Jj.$܉(߲wɮb􋍊|e19mGdƓY'o& LE.J Vu!lǃ쨊I9s (9KRmS ! ~VPE?si#2Oq\WV Hv)X̘)!d2 2k:{cTJ^{od#yDi@bU1̬`ҽcƳ6ŕYZaPt] T?NIA]wҴcν*[:VeM[1QN!iYIh,P'1{0bi<[ :1di;tLMG3Gwo_J얷y?lM4q_Y0OR1Q{_fcB*ÛOWVu]\,blq.ry54Q׼s罖8(T|oe%[hed"(`EP1#ՋI EJn`f&;ʶKg9n# rWZt6GP ԙu.;sgJJy33o|$ȫz0SIX fbOSMAc9AS!Ud9Cő{_Y+ގ}6j͕4to/NA>4FxDBS(x"5 K=Ȗ>xv&=1CU곝ƽ*c7__4nDGTgvL'GW{)ɪf#TwC uzο >|^FYSA/6%)8F7xHUS XMUɡ3^֯snHc6 Rp!LzNSo6Յۚyز7ei DG٢oHS[DH|%,qgv:KqZB.iuCꎍ^Z%!8F߉\Q:[%tlmώ o~2 _Rl F_ؐz X}r @N 6 N8N 3֤DL1 짙JI٬H>}/aMN&\ ҐOX\F'qu(ձ̭\Q<LpzȶkCSҒ2FlNq|Ul ,AmحmR8 Mɥ%˂v0fE2ʦ]g׳2gr d-&֦['iGB&2 {3R?,_oL^YgM<5ydÝT7@58Rh~s6RjلόcT@v1YD:3`A:L{Gv!gXܸa>uke 贿:hRh`.D͌qQ0.ȂxF~D@}kP.ΐ/&R8r(iDv c&2p1 $K7&3W UKp; ZMOoi}pq(js%veF+w0 Ln)W_T2gmФ-m8c9mԅj\cE*_qGFE?~ml몈I {U>">nQNyσ!9do* mW Am]8~wݷRr|]@#P9(0A>j]~YAcKh7;Gvë@r$uI.nJ|Q0s&AKʗN=-V{R@ox~RФ^JJ+0xctQXW5,X eF@4idT.x D̳2 Lm!E;VF /6 l#pޟylM_~n8;'Gty?>:9IF#o{-m'0uG|>f[ s&o>iR)r+׈J[QY5lBspXʤNVCh|MPϥ*5HiF.B aOדE5Ɲԓ*3!2_hG㒪pSFy 1dʃb/wJJܮ0N6U4,* pNנi])ʷN~kȪe`yW/oK))@nP"3}9kE\0& T0|}b<ꓵo]0eae- Ŕ{ܡEn.PYU;!N0x\TYFڜfḾڎ9jeK7=tuFB$/Su~{f爗"qj%Nkm/M\ƹ5Bv5X?6:!|24ZI;0T yIpPC"4pV6}Z3G3@B2s1F{\0TxmcmoSh٭&FS-핗 ֛b J6Η"}AmJE/A+&OQ>HRh8p#?"p{R,Xj '2X<]*^B^~ 6V*Ͼ47Ϛ ]o{FǸr)NEq{6X%$B". #2f%edy?aq"euU,9|->$.uZ .77O^novg0A~m iM"6wueF0,owBti%@TZZK0͒Ltq㠤$Y`I KE"骪r7[CsT圐UdѬtK6ֿo,k^*=&0$k ZPC%@UgcP W'>di^7͂IS0nq=bO4oGT\\j F@AP $!ҵ9\i+EUY¥9}T|yR$Z*}{oa#܄h* Ӎ9"6^`[8h1cBN9uXZ*Ü<%/؈͞-RY7pGJ/ TK[g('T3?_Ziš5^k0rEHHF`L}o1SG soK"B^ *E; g!#W/.IWqڛQU?@Me4^g6g/CMVB=j˶cݭ'!@xZ2`2k b(h;pn_<=Lg{f,FXIW N~H44 ྴ+= 5FFVÐp ©!:=>M4YGgDc)%(nl̙i"Q4>ҭGlUB~aP@KtR(y-~F"!ze~_w U?p]F:[f/PГxX\,Gjg$׌)]N%C><AMb*?.\?w #UeƼ+F{'CzˊΫi lYǓdOz8 U}FOVq͊{95br$a0V %d'OJmtC89lc8r1'Y3秺IE/aR1 2qp- $*9(46&r#w0h˩=++lmVoRy4L aG'Ig%8!|0}БM`k m(UrztO2^LI`[ʰC{YB xFoj Qr L1'ϱ(tgҗZHгG`e (w.fRXD&r.5+iot ##a$~iV;*#8aH%$Pa٤GTXg$ain+/cQ0JޱY(Ljq\޽af B _2xJ'kTby;kKl B+Jj4elPjfF2ߘ E@⡕ 83 @@JK3yjDnIs'mGm 8}Umqi[ ީO@ĕ.?w6)%Au?7\.;4gVjhAaF,)*٩u 0҅.f]:-n^rQV,ez/ j&}*xk S V2S$P~7.A>?o#S\-\Ѷ3RUFp;|ǽ4NZ;]7@X< >9)xl Ж H`}>𙹐 ݇l (;k%A}Lht~4Zx"K6>{گ,{z:}U5 GY*Rm3Cj _dK9&3+"a?e襗22Lty/PxEAxͲp'bBڼ] L0>t,mo:~lF%ޅNoE98~{[|D]i HlаDs^΂=֦џB!tld_CI\T!m"jxig-\iEc,_1 p^9;\S,E.,+e֮j^ t/`'Q Kܔb kO=UU'&gP&@UN&5 s.t&(? z8Vl͸vtD3⑓ffsL۝aD/&7H!u h#wG;`Նcڿ-=(!xIpW'DH ٧ ,]p]fg~tH[d!ȗAު7Y yedQv@R]EL$`n1>\#H/x= 74" &h uIh\bćU+5{Hط!Z EPBռP<%J MeK_>F 6݆EvO,ԴtCh-no#їrs'!.wq KhMw:+a$kU+H`yxc#J_ÂNU[z̢BJnp'VNڿоLOՠJ+V7mX]s걺E8s6OSlLSRsG*b[$7w=fqE&Yq^.VKy @ Gk?^C*~hP$fzc6g/ˍu ZVX&LU4* v*W*`Ds.;-{OsL{>0=ޜPv6~1~l;?Ѐ XXSE@2C=\١VON]鄠QJ4` ^)U}b.сK=pr1Da!"KgybR՟xsQw=`?I`< B BFκSȆCL}8ýcɑ9`*LK Lbs;GJS`2q&̓Y kxohbS͖'&^CtJNpPaOKSLmmSdz0$J; > Nl 4NÒf!5Hq apO3aNOgŧ,?A n S6Tg+ӑ ŜHȝ :Rպ -,W͛I k]‰[{b|PXIo/1M#vL䧕kډ _[b͈s2z4wBn-xнr8[.){ɡS7urWR-I /= od :uy*q[/ǰ.&1E7v69f\il:]&'A?eE[Gl!}C? qQÍ;7BvV@WzQUܟoHX5.~7q;+vaK{'PAV̯Pjo.7Ă`OVD Fa)04haml4]MSʆzFOEL1}D4jкn{ߎ@ĠvBTߧ4`E{GX5j :{3C7i!)IowJWY?.Rg뫠=:T&fAh~<4C;.EAy[ SƧhyЮ}N ddtѥF+SBS}._xn ;g`#|*n5ʾg >˖w Z&wz.ʽ=>~~]Gz)+ e <"$7KTaw$s0,Iq9&-4W Wf.D:bTQ6*xNOcJmSb:b()1r˩&1:~r7u=?>ǜ2dygpq ?6 "j |/ VG{d+fRR_4A=xK0a5'}|0 =1gC[fcsUxvS!EWr&s:Q:<0 2hƶr c ߞİq.L %;ʘ[HkZNc85%$ M#|h6'ZR`9 Sj(bY1fG/LˢyfHwa:s21<k+9F=vKVWíhѧR-?6?j\`'k*@#PȟeBn~?nLS7Lz^Oǽ+SXGGܱ`Z3]$H{5" ]"oWoFz%"|eHD!v|7JI՟ `hD;GЕ|1~eG2:-A-" @$?@ 6x- Y-p2Veݓw ip)::`&A> na B05Y28ɂ@R>>@d%u[v`ިN)΁ښ 6A1@2CMCxƼ=t apF^Jb`=uBEn aЗ^J BbNaZ=IIl}2e׃ k)\;u uTcC߼gBşDaiQ޻r& )$j]B\CA#?XQ]mJb%B IX{J9[a{IBzD C8`Oy<^d|B_AdKCz= I^EɜIDC!M1T.s2Y)2eye` ]{2_odX% 8O ]QЇhEB-jZ㊵@# [S;a`!ChBA >͟xrR}0wn&dwU^tLiF882_Jw*~ @GRN?.kk+Y槄}Aj;0含O$s)׳ jo`,|F@Y)7V1XJ;7k+}/wBŏ̤@!{2RvF! v6 >HXmLGu^G+Fݱ+]FO;OIbXtseEQ,uIR.]uAR"GxZנꁈB:wmlVa#Hso~c C cp"n Ղ݊]{x7ZsR~Xf^l{oF9g?.4GtJ=邸ӏl!$;X>$ EKwȪxqNPbaDCнO  鶓fO:1J% cSL'McN ҆"ʉr^=zT؉QzvX򷇎-u Am0]_ r<* *>;/:, ~8*eMNi$)=,r\E>㾿 nAgϓD ` dm*oWTkI 5w!11Ayq4O~TEL#Q\F,LٗjN~GR6 9QfVQG{\`(I" *Z9C޵!o6f:}gWPL{_y,ssz9B˛ t;*c|TJKeE ϞgJ`3y@R楣þnɍ@ģ9FD*UaMt.! ;W\Y6n~}Y ')IV!vlq$͂YXA)86x;ɒY9stQf')HMs&#uR'tC%W-ѐ$QCWcXw~G+-\({:So jDIt%BƘ͏s\NqNPk0~i"8aQ*Py]gy禁bP JZ%:֪҄ 4զ 䗃@T񵀋 YTjܞsq2폜@F"7"+_zT2q4mǨ*pQaLο=u4.q]nWγ;IUB2av*ZD.`< (Xe,d4޳#Oe5"-&l=<`d,LJδ0z3"lvˋWҭIKHaۗA%]9碵{\WF\\pPGBh {,lw&[o*# qS! ni)"0a隦:oc22bD |X.`X\VA ϼ fֈWOCzĂx>EmG4-[4"kcvo/ώ. +,h|3Q `.DgR3x 6b!!A[jO5.1Y4uz+ɺ~kz0"//_D 7Aw}G'q).r{Jgnw7I"%iu 32SRzAAc6n9+yThW('bT+1=&FI1> (6tT9:?!N$d]rVIwJby6MFxu=4 !%*nBkeAJdцUVm-p|?N$D^#̔!e |Y] 6mMɤ1TTl-d1 ^Qx5 nvWYt=%t:/Q^vPY%&,'-Z\?`acY|T>f|N2) k}&\@6)vDtUjT#y2Ɓ^ƷT9+W癧>PEơ Lxb}}ov 5SHT=$I!tآ-c;v(j2KfpXմ}:0Zl?CFϩl-NY`eM/RU7f`7ʱt Q a,g=K WڠU) 13bN_U]Y"$d\ߐnr4VQah)Abu= Hwr~#o\n4)ߠn\xh\D@xzDcH^&dP!RFlspmYqll7Lbya, \5ttM8(  j%0&4A>&rŎ >b*ZTʶNXXmTQ_/.޾;)Jrqq?nU)g+2yĊ*A'@0uϓ}Z>N y~AY b֙]KTӎmB mP]|?y18P!0Y)cB ŵ"5ٰh)l=DIQ@P̑{M+^ i|D+k>/$8 NÁ0*eNB 5 c%N^ِ8`jE:,`~$_(vC [עW4nO6NlvŠCΞb'MGc.XVA} I"K5 G(xswws\lz'$&h_۾Rؑ6T]yX>>fe׎0%:r}-ƞx2F=4a?١HlmDǏ6Kf3=t1b'MDJ³vZ(a#Gphe=7@!Dwm&LG0c2:L[JJe=`L̹["]'}~DCKv/l;Jg*$ B O濴GT (0mOc@jR]JzSd4AVͨWPT64 %p#1ԮNΣFyĠԎ*|k4^MfI`$/(A+7dYwe6^7ryW+'j(v\/9)7NcUImdHGHDx7͸hx4_:bpIzJ_< mW&O7e4WN? cSDtp/Fs !&(,׈ְM_00 ΅ ׽hhbQ  @,.^ :6)_/ھ\dׄ,KSOd:UqdL l' Pm, o0-/ 8q«4($:~Z-Q1Tx.B8z-cUe\W~A"䷹sa|wlNHOe"A'nV\{NMPGǜ9} lx' \$QuU)͔g,.5XX|ѪUj&L,I.9P4sZ9I|'\B}VN_b!p 06\;Z.ss[D*iYb }» 1Uȫ-cdN<;qG5ޠ5L>u靓:/fQr V5K YGC( Y)s,v U$S x X%ۖ uê# 2;DF'p H@a})Z-hJYbIUAŞwd#P[e%oo韂nAF EOL N:?$ˇʬY:N6m#>͈`5\%h εa[lq#&Pw)Dw,ۍH\[O qv6r>sݸP9XyҤ/'׊e-Iw< k@FXLdƀ/ C"C7'*E f |Vq$+hs!a(f#t_o<+d\$}czq| -KtdrNhu~=rfC.! FO^Es]u= ikR#pQ+`iX9~㨺kHqxS` GQI ؂V'WvaT{:Qumyrr^TpUf:, ӎ1m.3p'4/#JtJ.V0 Sh`@uYafN,41VɀT { KE?Z{Qߊยv_SpCѭ9yڔl/'ܹ hUq+!e )56b&4\n ]Zb]+-++㨿l}RA&brL- gj 4%kg+e*TW9ЛGP(Xwc%qX4ZGsϜ ,:_P>A|ǥ$Q wg[wG}5MzʯԴiKEb?ЙpYpOMksKJU?+X-?N'?4(T]mcu{$Z?}\S:)G8;)/hEY854DvGg~mWټY#%?o(;v7x7J+#xAq2q1Ƭ *d4@ *"lJgjϗ|Hr;0|PɊojӾsҲf:Z@:e6$e`PYo!i`KeE93%ڎNPF8F$bGg ֙&fې\TtnQ+1蚵c/('("ť*Kp]@{^E6|#a=wÂ0DZ v6y}k2_<sJz Qx[l=qI$}"#VShBx~bP [8~`ׅW^7%zVmavz^80(bӝh'gkA p:|}Xn|T8%4 v၊ʼ3oPbRET0U|KrMb 'qrK,s̝&273l4J=Bv^1iتJ-}A׎w;K aML~%dD^u,2@{f."̰/d&Q <g(CA٦}$<hSO2x@y.j, %J ' IhRH dD3ф0&\+99asRS挋,W8/,KN;+Iehe*)VD9ʛVä%QuzU,V7 -q"Mz;"\9=OV ()cs^Jنު3;ј 0QĢX=^:P!p-gEI`XaFq$p" dF;@.} &Tlw&[YD;KWٚf`^pv N=^P>'B>,9,+y I(d8 p9 4y%;:VW10MӚ'Ήli*RׂOxNNrb0B~`T̔8Dc4C%H01gc4FM2q4-^Ǝ) [iT$ ~Xᒭ5܁__B'}8!+x7A'LthV-ajR T2犲Ž I7vF׊gYz[vİ%a7tlE;ՃL ?Tӏt2|C]fY_NEqF_h%+1zㅶ3͜AH0Np !phi>Y-Cd_m9VGwd*d)k>_i;VН75rqJf>NW}h>N\is ;pM6bM `-:s$Iz1Y]v41v߯>J0 ƽ|[v \l ߪ]> ? GemHq Ow$RIzv <=RopM'#j6$:FC(J1ǁ_ʖGdA "gui}t`˜ٗ4\;{3ux?CM7}߱, dZUe}K" + =kF5d=B0e 4g_ɮZݓɏty?OXb{t4wc2ial1=]H YRo'p"Y88 ZHLH̀|tD1]au7᳇zbIf*ygqC*Hoꅹz/0v @weGs/kz&k(ˌ X]c! ,7emlvU 3G2OU]H҇$)%ܳq[ؼUs`HiΌH0˃>1h)8IsgsC*s敝yvYۢ Tl #5҉Έo/6"dEFQxTZ)S\Vs ۘG%&xDͿ6FBCz-E$O1|O : T9,g0E[^߸jcS QyTm(NY ߣ]hvW5q{~`O9(Ё9d4W85WTS?){!#g$d@Ś>(,ޞWSJ4+d=W#+L:x1 t:ٹ'd1lxY.Lywi> :_#:Z9y4 N`_$@?[>Y `W@ihm8\#⧙pڹLv Lk^^V\HrS 㙠E"ۖ$E1끚VB Ϝ<^CϢMWe5W XwMhñ WS-Ѓ#;m֝8CXxfK"sU!nT.Δ& 3 \%V\}<@R 4K}@t%aGI>o 5Ԃ4Ouaǔj܀< ݆NLYpP#lC:zcU9 s{*Tsiytbyi{0KQ|#EhDZNgWM{ܡnD? 5ڰpz䴅H  /:X7k7d_kTvLTl& 4ZYTJ5zȘ/\oEd$GI.?OP}}ҼMDY>`TjlOs5jY#n]{mMËa8 *,u v2aI~s!;1*HO@9{[_QSS&% 77@$6L9<|"m4B ĩf:MIxHgjvփ]SLwGMyv_IGdb()2u33A:k> ۴ns4}}]5K.u??Ð[ͱ'W4[|0*}erEĄgfScuwDd3$Cu~FD?DU鰣Y(S8eBcEl22;^,\Ƭ/n·(X EE:m0ځ_\YnxޮusUW0Oe"O˶vy _^|JѰC!C Z updWZQeQ WJ/I};lG^&mh/}8־t5PKvb_`=/ۺD$<.,xf\ ۈx٣@3Ü1_t#wGeqC^6גgLUZ2;_sq2 S8:qpe^~T(~O9&Q,9^3.if4n]@Qe a}f`7bwӨ5!a[ORaAM񇩳>acݎ:`y9-o=X1)WJ*i,]N%N-Uϴےpv`oPZå7kl{_^ 4m,<ܥ4eG7#.h{%9ه񪡴$v7ܯ!v(gck4/jJܰ۳c;Jw^}ؓ)yUPs+ϯ"5LM!=:)A")TN kl.#+bYaδ9h6-lѽ ^^)jH%,Db忮aґ4{kC8{r_Ѹ~o0kc<_Fi/ꊧ`ڈvb e3?u D?֓HurBu|G~J1B͍t%ŞJK&'Vyz;8❲A\# C>'~i耹f] k3pv'ډuTb_tpMc4,{gryΎHa? Xh]Y+.AG?0i%ӾrO$i֮2nd=X1)zHnv*\ YOƹ7QQ 'p4 ?^|+_f "EZ^n{C<ݱsHQy{oD`՟-Hma.iڽ,k<maيzNܳ!v/[VppSnvz2qw9w~NU68N9]&8W[vKs6!'YW{Z/b˴u5=w{N.ڥ@?y.`FS{/{"ʙ~WZ#qO<7( ]~lWz 덖o~}}IH J^kӺN!<" %V\|+UƝl^ ×ήx0!?\V2AkvaPodFQ2hb? 2ƥni";X֒C?T\}X;*xjjbJӽͅb]`.gZR%Fe%+w qoRﰖQ:NJ$kh^nnTSmlG&/XkIB@Rmaпzc֚~ըX)3,v)o2@{*{;0;ƷܻWq$ UAzTY~Tyw jϤܜUOm&\V=H slvUPj-X\v:NQ21HU3U0|ϲ>r>CϬQŴ ȨF Z ;&0d<=Dy/>5֠-C!٘o5-O}N̂FeP %K;qd6%xKR SDC`!&9;0~851\DdBCB\2һ.v>㋤Œ4P<92p)[#K k\[s[5F+ dU ^m$B WCZuۂSZVl>?!@櫏q*aSINtaBAp9Y*SQ(ptu!OY!a>DL5I#_WZ(ߖl?:l#Ptf_%(i~8|}}'/ %ؤ{Dj[-I;G5+X c!a<hv4R8RC 4%4ӫpmFwq 19,UJak&'éO) Oξ;kEH)j3UV??q{ 0,]+}# CLlcD{:N2u\~/?R/;o4B x P|.`"CCAʅ_7$0#[/6"<ׯLLtr^XװЋer jo^ ~Rp1D z&i +!f_ cA4}qu~B^C_zYr\=~CZB(83MinBB}÷&SSCʓ`Ĥ^n[`n_WPO+l.1&و&$,25!p e0Z A[o2^Nrimխ:=!MVaN?P_ONMv߉OSmRݴȎ.J*O.qRG dJ,i1 %vk];-3?PL^9D`CZ-*Bǫ?[[vKZKB$PhqAp"ejj8grUTي}IC"wpơ&HTؽ*| K L6!D & zq&Ctwa@Ouy? g)kz.%j <D. D4~W(";Ien֒0ߥ]i:pm5bFargR9ic?VB@3Ⱦb.@B7l1O=\XRo2+‰O}j$-,6w,ޒtqjuja{+E\ Уg4 i%[Xgr1홴D^20`_`(dm2f4}2@;q&5|ִ Mܓ((or)My(d_QO ĬW_B0_zd%FOkʔ%>᚞4)G:$@e׮=6QWTo]Ś-ߎ0%jo JڊGOb)ͣc"L:[݂ҠzW6c$p6aۤ!]Ap}%Tf#N,̢vDeIi?Yäu M67L758fu'Q(dtxBݞXhGx !M&72 49~L8Q5yu-tA #"mf^X_;"؟,@`gjI_Q`t-Yd¨eb':.c6eA-Z"+X=&@ϭꥣVئ~J9oJH wĨE_B%+$ %R-ы )2V\hԽrیt"lF )(#;|H .7Ns/ɏX$[؛I2QKVXsm[LDB0KCD];7͓-ʭ=`I i/|Э]\ UI$>U:̱;OT]{l}q~rR=zRWxvM%'a߿ACs$zo2fÚ@̢75fokҜYG=SECfvc*2+{=\XlwmBFߎb㌪B-,JP# q澳~K/w>I\,Ò;~e4RcQv9T&/> xGVx*O,0VV똄ķ OJ70M^e/"f Y9a(WOuJ_M^ ϶ 7" x̔coTy^ܙE;.z^) xUmWe^? +_J h7tU 0/Y*7[UeY 4EZ/mƧ??qy.ȔGo,ϒ6-#~Dc9=q'(qVd?6Է"{9Ԋ|3%;ZN_eVϕrjxS"T*ġ7 ;,ٌ!Wn~]l{D!1Li_{ 4ḥTMjI0:O̎?plFĺLtA*̓˜p^7EDğڕ|n3@/mEiQHYU#vFdu Jchg'LUJ ӠzH+' ( y@Oȇ@7{J,"te1*`-[$iڑRﰶ]ۤ|EO]qU: &1ȎY-S@bbX,=hutÔ݂ǂܪw>h%4TƗj^1Ի/c*e6iN'wh,k).}*_ɹe^J4V[E!B/|+B- !S6a:|GM"a16G('Exov3IcJN쫃ϋmNu%RE8K0 d&R>>;Ҫq9>. 8PTyHJDdsv;..WjJ2f}q5įO/; ;gST4IY'l~IJ@|xAL1л=1H.&" PQxZW3imW| -d{=|;=@NH-iS]S"sXlb3nz~VH4 qa# ؙ0+<]6 e G* QCp]}b{w).LN G&]x2n%%?|c‚-;dj'3J6Äuq8r5DMIf.:??uҕ&k!\n=*9Z~N,ɣ {QM~3> ^iEQ֮tƏ+C6+z|z#aQ.3Bol\1ɂsU!_ >_} ȓ( g;gGaj=LW& ծH ߳ɦqˆDfT?\=m~E|Q{mq7bM[H䳼-(DUq1_19 `ֹPT4L4N^+o%@%.{-jaG禩\6WP;jĭxPS<<@o`(ÇH_1pjHQ^lP|+j|LiK4t|L[ m( #({P9 DYQa~3aRU׳zJK0yKKiocQƦ?@ 8(jw"lAǤGt&C˄=NGm4[yy[]e/5 /22_gS0Z]}|1îkXEURn=P^dz QaLHc }p\#6g6)nYbRWYp֒Ykc1P-/Kq(G[c/3Ġ1P|{mPf%ǒɃ;A=isɢa.4B[Q&-83F>dq}GGNtwϛM 3"5͖,wKnrEƍ" LMeiᥐLt38dp" e_]?AVU>:w3[Y(N{&bfXmBęvFs^Iܝ*Hw&yFP)R %3(&>ݲi-7Hp$"_xfl`!z4/RaAyKՅ51hH< |O1F^b#':tT3MnU @\Ca/<)#KnUE:Mn!vJ̾vcgwH7M̙z!s4?E~ɣe(ugV Ю]w\V}9NZ,ꛎd`0L6Ʋ-ilXj[Ltd+CIw`c)e3uG(ԱbQX^BGE|1t,z,zI(q?ͨy^adb o` ٷz$MULsrW`Ovn:`\|/KmbXKE~d=!!Bk;i[ /LeP?Yt zr"H, y"Ϥd 55GS=Wv<#,0}KEf$k%3Jbq0ȿ[sqUM"d\ˤR8ҚdRS<}pu,e El{|L_yY=<~ҥ8ﻕ- D11H1g<^pSnH_ow&fshM" Tx13yx?dYh5p S'Y]YP0<)eշtp_N{X.{N6B@հ. d5 r9HKL:%Ln[~!UbSbX~dt&-a$NNu?irZQ3̺w ӊ^7h( (imjbJ:Eg'.6Y:2HmJXJ3 T~gUT\ߓ6ɞEs {CgBN-:4^4$xb9e.`ޯj˧K1`. yz-85fqF^)a.G 茽+x(Yg8PYnGu1~hkFXCH7ImM_VS#vSJRy]J%ɨSioh >~e9B Ҳ^uʋ̶ @|2wk!-s`WN-I!~B0jV'sq_O ]7-ȬZBliOz.Snd>A2 oN\ gP?4[, gcr8arI3_U5+Ut7.+k賉׷ߪxP|SUb(Fl:G3[_,kѢ@\lr;c)q1dcY'32R@4L$nP%D'K1YC pZ 7 !䴿-S>:`FZbikL-ѯ-Cq/&3z.#/JO^SHO)PpW ћr`P\_.Tu|$k DF&U=4S ܪL=a*qX&shϲJDž7,'.;{?ޢtUyuI:L]U%[H QĘ8 |V*vе7cvvr0oz# Aw B>8aנKɀ:2%wg7e8Q\po OQ>HY=)%{+>:w8fu8;w992l.vZ7fi^ƚ7v:k1-T.NyWs-dl8fx#`OBXppT- |Srx^Dsx>tݭYܑjnIL&,,M |&Ѧ@C$W=_i j4YI1qr,a7F'fpê$cמ $U |fw^v$X`GGCԣ.%mxeT}T<N>.u=By=պ[l+)[H\Bl<:@[x5&ar_'Mـ;TLk[2d!HHaq.JϕH_X흺nimhvPK fh>,.뙠EP^<\Q^>0rƮS5*nD)}@uL~b?Z$Z]4!K`+8ޙ;L(eh95(]?8~|lѱ_TDb]y1K %H{itTX}ʭZwNb(rkfH kW5_H,ΫܶݩOϵ(p&|u5ebtp_6RFoXFͤq!3*pJ6DOOf/=6? S}XbQ<~u!R*T Q(͕Wz6yB`v6~\NH$f=fSqlK 4 `pv&Aʟ~{ Oxc(de _n#FN}̱>;ԛPzyhx'Ft;k n.Қ@N$:3A CCN \nܶb ;4ASø jֺ ^KEE9چ=dz8R&q}HzaGH4!VѼN\E=}X*0l?&zu>x :#zO=[=V ^=Q˦f`yAK\<3TpVbh. 7'qZf2%0Y5ŏ7V R+_*~Ye7d *N JKC 0<#0,!Ĥw_JT5D' x!Js,R̠$$wFIE6=;l#gIo٤hb H jtQIdDh7LTo^E9^pd[zSu,磏Len2~A7kA;#@;Ӧ8B+&kϵLDig\m$řz+gð (t*l~ @jJx;0&/XU8ۢ- GzpY*Ps8OCFAJ]q %QEKd'B]\@H3lrp\My "4u-A[ Y{i~invnclE )N ]ltXh1WSάQf#Z@?Wm'36e 85 ÷='&"Ƀ̚H_00Luqf%:#{+z`I nR)&\#i͊6{ppH%Gң1,D(-6P^%RBuxh&t|KRbf ӓED C5^:A??KTcceٳNٝb<.3Z" RYJNAۡ4;ʪ/HQiCo" UVT|a/CSoGy^xA,S)#wOɮdN[g5d җ,Y‡1Ax#%-޹Wf1No[ej}"MXW4!G^'.(bo!| Ubgp.aD~I8OKllɽS?PS#/ϐ3}tjjڼ7[ᗓGzV?Y .b&'kQ}OE!58[LA~3"өw|.=Y $O]m RVr;Z Ef"j5DNv= +x*-B<ͧߘ4ypa>b8&`UQп.OwniÐheyq(p`X2g֮)2?e3is)*a֮{B)lh`8NxH;q8Kj+1aV 8 +37E'j2y)S|na>2 =zI; ʼna_ǜ&`2)2Az͛aV퉞N7iQ7QbҾX TƸcw$ě Ssד`{]uxY8F݀D*{;' *4P:xBgm++6!CNX^hR6(]d6Hm]>@U(~B\sIv>Dn.Ćp+呵',#ԑeM.C4CIH?[[j,4~x_^a HشL'./=;]Gj'6zAXsBX= 3jf:'IȬf]V+B=ڪ"޽n f\rv$>>Q%_;RCkҿsZ9K>Ds/pݏvrL:TQ!nCw |u'B)N<pLihnaӗ,^8Izo|^*(;I|IuJk?C;8]v&?I51WGp\c%Z~Y-k^+h"Ub9>BQcl)Kʡ~1C?YC(tjqS 9n Hr..l?R=?~Tap+L8EԟkI ~H{ W ND-,E92ǒg",?Bzc$QZhݠXU0ľg3חzETx+~Q!9=S-]XIG30jF- ׭#pDZpFeWf~VJuGv|xt\&W2 o1QjӋjq1>-T,ҐQ O m}{u%%X{}`|u{ 2Hj\c;Z86|>M#;6u" >Y/5g:)ē/MڼʍDc18m8|ͦdQ"9 bE5ʪHkAy4ϯ? %]od$'DhcΩo`PN *02|S}&(ůC&&a&Lpay m [Cqڛҹ>z^qc}'0`੪gI՜@; ֛CNmqg&byY \Mݢ0 W.f s B?vjM$Zf9}A%e,NhE~(,T8c&/}Qn=pY5EӯW ur|Fv;9 =25S07.i0tڷpҙ"G?ǽ9N_Gܧ"cDhaXwdpR^Fpb3֓M{*EF8Vj( 50ZUYލ>$ȴ?˽ 8Y]{7b3Tal8#n,kl3]qĔ/],EDZ|^c4lWV,;iHJT2N~38pk=Ev;K]Օی5:Dé 0`4[m6ձgwb}Pwq͒95EҞ ؼ6J\%O 8,`n4^ҺR Ye7ۿӑ}(R9)0T[,m>w~USCDPcD2_Ǜmj Ʊ [!2p.;EHC\8ǂ HY0.3Ib1eznIK|s;955*e&~+A nZ//QbId }nF0+H` F[ttuȸG/2%5e'$@__@=s8%dƆ|wTcmn[<9gF(`vi2>z]1`D w,{M81}=mT混cְEd iJ~xD]΋LwUZXڈ&^+$pkCɝ7'63\Cjo{*lWw<{d6~_3 67UMUp y@MBC0 d٧L$7Tꑨ~Tkrua?y CwZS. }=19m],Ź?CsuJUkB.eBz^{ 睗f./dCc?P^!!tf(j "jv49[6L" ɘ. bA^b?]xVztPo,HM]jk M:]g#ck )R鑶ƔegeI'٭ɬH#W"8`n$S*9pVcOjt.7d&FYٶfµ(I,6>[%&ףaC3qp+H* 4cPi9}7cN e-<v q1N]"˒{a =p?dX4O~{)}  Q VWmG> 9pئF_Rd`Y9FmX(iwKu<|>q6, $f.x6ZeI| E8atDOSJ3 H> = ܁VO$'fs:[\_2tL$Ȕk|}E[[$:p-Ey_wVһIW;z@,dMIJ81h)k϶~pOZ@ ~l\-7и}eC:gmI{o2×_yCUfxY$CeVc z>;TV+҇u"ؤyN(E)*KTBGFsabb{nHRMFmS^?R; p"1$P YJ #ѽ0f0 UX0tdn}m Yh {C$9dvb83.8޼O'ڝg<&P>oL&d.ˆC XV Ru@|ѐiK :rMMWY@K2@v1ȺgE5)_NQg+?%"xQHf%?:;D-{蕄 0 yZ(Ǯl^˶+yDl 5EKWJ=R#G%3-u,Xv_+BwTsΥa}#ɵ8pqEU5e(H!1/٫ŅbSȩ@bYi1͏5U`LM,Nӽ`i(5]Nl0:֓}vxpkSKru)ǂ^ŹD5x8yČN93ǩh lz3Qb+dQ!$.e>f]P] xV7k Ke(*y7C|! 6Kh=%J)͒)q=3HB4JAoc'W7!Re3vD0؄"pyO6ySCՌ]{:õ8sAF`5<\ Cyۑ v@m~'}^.S .hM0[;RANI:i.#fޯ+s^*2D w|4)LB%طRLғaNEOG*[x8 Q6(t~k^yNY@ı|0y^Ҿ ,Q&J|쵈:AqHKK`}{HOGOaeRӨs6fd䕍ݒ1HUjؗNkɴ#詐lj-d}Wl~NU}Np(زR( gݚ7̐wGv/ݰUkɇ݅)T$4pu$ O4ơf+U=y.P8Y ']hwz{Bm7VC e+Dv[B6pyL#Op ~Q%Bm+-l)kX;O0AA' Fj@jB9 &@riϊ!I~)90w$FպrDu/Kѭ>8VBө-l>1J QtXuq"6qS qj|~GFn.v+alOYLQk+֕&/ŽDv+sapErap6nDr=E}۸&LC_3E#rHr9oRzP2ޕuyf޸se7}DNhr:O 9x6U 8m %wL&Ib~\iy9~t`qžK{*hp Zn_UbVYvJN՗*fV5Dh[RBF4[BP#xs0Ό8R sW3I_@u%6ÑPk*ں@‰p*CȔ9}w I(fT([o rG1#LE FvkqGAn lkde`1DMbx}CE3]>oQɄĮz![I41?$1P=S4譋QtOmٳ{}ԾȉH ]4KW4rs6Ra(NfgpY"h7rjTO;&Cr T̵̍LODqF:a\rlMwophoL7oQˑq(2w5 bJNWȤ5\}#FsbaUƎ9`VKmš {1:_2|/l[dF)LL2 x,uh@GaLvzOfUIu#VPP0(^7Hc>\gwR2pp/$C9 8-,!q+nmjDBqv<ƾ @}DZW]q3 Y$ Ll >&ٙD4g5P~ʴĐV@w[ ɗ1t1o=tNN͵P~[,{8{"u@AA)ϲ-Il]Z &1M ! uRNhMq"' %})z۝ MFzsc61P<4$[-66o|[M)/* ӃE-$C]UCġ=>gKax B8.YY7þ EfƢ7nL_Xݹ80`IϺ=d!AX@&^` _"t2۟6t@pO"~F5TZ 0+WAIm}(UFj`A/U4=X޵"U_ #Ӌ~!fwWm㫐d+++EooT";{Sذfx[BfMbb-_"`պ}!5裎5\l,:JuFS=fn^:BX)O"gψZ3 /WMH.5̸t4UԸBª_*l$pܥfn~)q@&:SiI zXfN+ I9K}䟴qCY4۟+p7tt'%wvEf})?fe6+fp:{Q-%,'T7Zu1WkvAG‡܇!Cl,fpkACP^ Gٛa-Kf,Njnqr )]lL33Ha<7!Cw0)MD`,G%ϸ1םt6xz3|YG>(<[_$E%DL5xh"F?eR2bܳx5\VyEASOFYluհK:s`A+]+-.pɭp)og_$GưEq%R#TZ*=YBfV&c`~&']k &* >G!#qym?`P(-9&8DAW =FC%c:JQ`bEj/>'&9qK=! [s<$YF??6OH͞KD7n }\ȃʰ$6M7BIaR9`+ebo,HcQ?W lWNv ]UFSiJUn. ԐK|ɔ?^uk祕h/bbm>XˆGhC{kw8r==\E)"w-.1*}KZ \5(H&O~eDF;& nro/aOӱ[&jP}4FĞC0{bZ ŗSzw#XռBd?)c+9:6$/MjaRp=k&S£ $MSj"Y+J2`B)CBq9{[R4MkCwa ӞFX FwV _N D?ASJ ,CT]k73\yZ&PoMk+*E wC $Q 46!EQ!4ht~R0ZtiW곖5#||2':6x Ye{DȯԢ|b{$$}VcUOXI)Alפi) ߼WKeE%aJt\79bU4Otæ/VCX|y/w@(5 QmN $)wXHJ 8Oi:uk)x0 $H--VfpAh*'7x(Xz ^("ӟ XBYa=z\k5)nF;<*e{^kZo WQ)DIquAnJ3X+&`$/|("d ߏ;/!\~S3+=& VCpЗY%cESY8JE<CYDF=UE#O9vE>- xj5 [ҊoSy1.ġzԒiKgJq hIۅ1A9HǙϻR3(BRIX/_WH H=5 rIMlA(+*RwM(EYpsl4qērl_µb0B8BE @0b 3-ɨSR2&v?|:n NDsj0TB>#t/:iNć:.<2಼GY,;:?6x;9v0i˹ .> _ s& k+"Kա$R zYllU`OhK\X 7 )}qǢWC|<;D, o`Y%oUlwlۙ8 $[k>?񊳁5$yG5dɦ6Rvt+_#4/6\o˦8NÕ'jjÔv6PC^ Z!}qqaD3c:u*s]7eetR%*tӢ@@O}_a [< ۜ$[,3›I &:VJ6l߲d }r[xȌrBOælfdΩvn&zAjֿG P6f#PE]R`^|| ?u7Feg|1Ndf~?T| 3$tND3=!MeKc>PcSς r6zIl 8[ķkG$R@;1T JF0>P]k~K/<\Q1w͝=Uk*?lxSEztd`@ab!hҲR0+(VF݇b2<KPL1X)p;a؟Ltwy`AHS'΅ZTN{2F$ &y4D6?)ت8bS|0JBV=0Q.q@Nkd--Y S ̈́I⥉^k K|#7z1'PzP8|u?=?g*듎Ts cF'Y~L%2=!c]f0[$MUQl&jJnц.CDp m喧33_$u\<:gJq/>< 61YL|3>]6vPyWݏFp&R#AqK;ק}2Ia?=.ޗFd<`VgHǞtD{W C2GlYdY8D2pJd`.%I\3t\ט &<$EH%Łe1T("lŗCGcFl0!ɇҬVeM¾%~˒22]^hm͗~3U`jz >1BLl3Z}'uvkV st>R=0W6y9 P=,lnGG=jdKhl]cL,Ŏc1iI ==W82)( e+ڴ$5ϝj VqD X@p[%̤)Rh_Y !,#xyZTNl6[*YJޑ ufbjfULW9SЍOP՚U751P+m!{z8ICާnf ˃`/[-ǶA]!^Air)\NUh7g⦮$-wEb#>vk `)w8PɳAᓺ^:W(Hu"Tn8(jvʕjVG쉞m A_0ɿ/bvFc+2^P)~.TFdgkՔ4 |UncW%,Ϝlum7IW_SE}Hnh*?ɧEz٨.AX}!![6/K=Ӽ<}. Yg55e^&g}OQNR)K"h9teu`]}A.\ !L( GMׄOj9@8il0:^kNEĩ*)ݘgrQXJ @bo:0()'ڏFhꦅW&C,PO8oHx$Z;3hsxɑs.`Gk˱~藟zO%dGmمDN>4T{q|O1]VZ1LNf5Z!mh){M$kk>S_& I6i`YMvfRᨃ8nJ:twFuD/-biL$2-g4XTY68QwB#iem-4<L0KDLwy~ 2lH۵ߘ9 l-i 6, {;R+qϡ[=F=zR2"?,KyQHg}b⊆ig yYד +ԍªc.>~dxb-ӖHQvdLNEHv7k7yDY yOx® w//KrI8Le,,"+J9 R5*V߰Vѡ6IUR%Ԥꖃ0(xW'9ȚIL?aފ65x.8 $-Mb `m`Z?AREz[p{8) J):e4cA(}S+/99v՟9*>3@͞Qo >N<`~aD x .dۅcṼ 57ޥ`e{gH^B2 :S?lVDm5Υ+Ku>U7]N%׽8+AaZjTR hI[C| (wDϝ!yW*8;%N0ɮDqJpJvp;#:`@[&v/!'͘}hϧlC G BB+u@"ܢP"hE"\yߔk.o*7m⡱\>8#BU-DXPYM1s ÒTޒLM-to>% u nJӒOe]Qsp,N {;Ȇk^UT,}\ )wzWvЫfw-o=tzY@v ӦSPE!t, ULШ}mіMJWhy'y Aq+ΣKh9MSgaIx"XdfƷAGdD ~kgw A)w<-k|Lg-~}e+~[*. L'*B1cb*%BmLFN;# k+-8,{UV{aN}]IhZ1GS?37,l|x   ҶG6|t,P0xxHc-oEo,uqF7NbMh.Ok5.X^##*%6eS':=0_6_<XfJ4C\b5&{`,@%467g,|TZwy)ME>ئ_hy@RΉu~5}Oz7sbhJ& D#pWW3o+pXׅL cF**;SD`[ȟOy^K9BB>fikJ yy3ʷX/UfQۄLTˌgaH-Vk]I}cAV}|LbaHܒTCƦ s^+|{W;Yg3[~V"MKE ڃ~|2\{{wj`g\a"Ix2gW,2³e}moD@@U{ST!L0yŁl5mJݶ'F-4sJQx١QT='Τ@ FDҨ9'|3Hp!EFvsQQ)f3(Y\6a)4{}۽;Xm*EǒO^N>3F܉s[>%_p 5wV^+߉=NCv Q+𡅊XV.+3зS<秇?I; 1RbNudP&˵d}'zŮDQauލH'!1Q4/1Yk)Xp/TNyDOmLvv3`̰H@S87@`}E)ppR $;TU6SФC@C濂Yh`\ޗD.w؀CC~,? c#ڌܳHҺ$F7B+SɅ Pz6+i-FXC!iCl!MP{6΀gP*2PUw_/0)~ϟjB,J:"i?&$rexf;Y+*H^(R I[#o˙3 #J 6(Ncj%Qqw^p:J5㜸.+'3b+LC#;o2B!Ľ8@|݂gK,CSqg)tY w#ߝ4\x ^˖ lhf%$fO@=&%Wxm2|&gPRD^O4!Y Lmxq 4E~IN8F0'Gql;<w|qEE<>l0y# ^eP;w8>㏢^PH\vaKYEş%bzs;=^LEE7`+qͺ?{aفtR_!k@grϢZa'4ʱ|V ;yAҤݏٜv,/~W f$90tMۏ3 @=5,TEf :/ԞVL,UT f NCH= $mSɨ@ "B.7}ub30aGleuG?w,'ExPQ A rčcRh̲;Vj|Wqm(aHG,Av3y"|_[ՠa{i0lT?>?OoR_tg X=P2[[Έ.iz8'Q7D$"WmkrAy#<ѿC<>Ŋu}s1F/HNzOԪ_[hl6SNM- pQbHp?Wr֑PFC'z'~.Szs:_Ӏ1u?HMYg]LZ]lV-)_2|j`vvH"H=Hxjt:N::CS]zC!P:m&zѽ NȚ-bժ܈q):T'_⪯fh3^d).ۙ-CYb~$6CL C5l˺Tw'y:|^wx8]e7$Jfða(UR6_mȅ<2vpe0@E2b 8L񄂥4pO>8̺:Xce| dJ`b3N)fS7ч(32pR*45G`qiՌL&Qo,uh+;W4 KUUad+?i 9š 0uQl;4]Gl}{T [ 3 0wnH#LMU Q]'NAN?1ZGˢ/'u#II-yb-;!ưI 6x̫WI2(3Nji8jDo;2K_ݙyyTrv+-}[/\яdaqxj@O(*梹WCB/9V%@#DҮ[_*S%em+uk Ԙ^u騢 0+\A0PIz|AIh6fҠ!ʣ7%xwQ#} 9J%L@F २w ` .yE e+&My?~F;'A w ˠތN)E8p=G5Y'Wao5b͘mA^F.Ѝɽ2>[mF7U•~ވ PsҹLIWkfR!JED^8|y<=bSTZ I<$ֺU P 8j}^րn!9ќGNbBi'3s~$>MGzx\i B1u-*< 3nYzMD9A1`POt} (\]@X֫G{#r:d@U`K&sqjfb S4֫W%p8YUA}>0x8}Ӗ'jjuT˪s^&]⿳)l&Mq Yp ylxkP=KH D o& =O6xnd2UΌłDN[烍 ELgĖWQ7B3|I v*äb-ceCw1Sb1[~Z8Je~͑I%EiQr@N-d|?ڕrYCZ6߅r+M0$L?6ܢG~b|j/ t)gܟ&$vq/+}/2O X^@^!ڈby]Kaj@2gKh`d?MYe"h#~"VNevF#Bk D5BJ2KDqK]@ewj1 kq'o( /Gѱ\^n2+m#6PcE} QA>[ـ-tj"4D{BNZy*AR5FEz^o}ӑo@A:܎қjǞS,t6ѼYfq« >lbMws^%.[4оe:gjDsSiӒoZ8{#:HOX'T/Lz0a"h|J UD a$s4k_*u򕵖ޚ4F6`cKގr+8Np+V lDl @ʱqTeԙL+m#VA#)sIܐw2d-'wYXzJι{Uiکu`('f 01vǣ{P Nr )E.|̹4 K33!mXzyZ2{ꏛB[kt&uŠ? V #SĨweD|;tb=hK8ϸAȓ2))+𕲘 k7Bۏ2jcE#N.RљZ_i 7^%,\+g,P8NcD_YZjۏ&xtj v ){i !=?V.-@zSf9&V8,>hV k:axm'wг !q ]4T$xUn,GގdEU׀LofJ[*.^?t|z@ 0w(L u9~apXq\:c@q[Γ_lFj'ΉߵJ؟w*L1p|*bdRljp*|]:k"YőW`o.iBAu.\>1sy>{܆,o28!NJ8XJЀo\6y._= uHؾi2'ZR2=lzp5>F'{zk rc!4jtJ Z8^fG"w]GS|xC2z]b @"ϺwZEFfڗF|OB.sެ!SZrP/͜[ U&@БmTlt:iu$"r`[{1Q:\k+*}/G ;޳ء^;=A1D,=H5yS`{<߶$5^ puL 6:4P?؍V6y u`՜z"r՞/]URZ*-SBț++B nGC8te1Q} S@?QA@~2 K5?DѢ('oGԿB.QIIW+@-M(' & b_5}BPN6u{{TM1*v,b*wԣ=Yo;!Ƀ6)Bny"d\Ym-s9fk~ -&Wc!]տaXbxg!8q*_: q&PT?VxGa5|>u3Yby.]hhSuZU*u[ڮc2HzD38H(' q#U/樛`8&.ۥeGrɣ* E5}fnKϕCN8Qmd|MZ3<,0yz+?嬿\1#z9?BhT1kDj;$VWcBVXoFe8@'mJl#W𴀓 BTįTNZ;@"p2.kX`![,}zL$S bi~5;ݲvq*$<q jcɚIr3RKE61pԱJbq;hENd !3ֽQ0idžϟj`Gh@Cm'P:_i)3 K.b`C钘I7 Zb)j6붂'! jAm_?&&J%E ryY&+iupe1>$a({HO ŵggΚڴ&uw9K23CA,CDmv'8 !琀s]mUimٿ0pamɌ>p3f Ldmt<-*bg?VvFQYhm6h βьW/ɋ0K W2@0 Ww5gda3fwaC+QRu!m%qCYRGqN\@8tnȩeC3-˅^E\ܦ'+Qv2n$SDpZsSRL\pWQweqɜQ/fˡԖ䪤6TQ~{əhOl8eۄ6~2$ m<ÅOp&" Nl[^+Z0(B{N\2|Hr!>g7x]}+s}·$nu]e\G[#m evv0&M.3uԻ2|aοKxP.=k](G._,_|gIoCҊI%"sDu"iτ58nC5i7ꅕьۗs5 )odf莟9e6}(K6}"TcHN J.یgevl8\Qq``ܧJKsB_'1\y>>MIQ _W->*ԫNc&˕7ݛKH~NCǮ4ӿM`ْQCP{*v\~+ʺxqոO7>e aedR2q5C,sfټ0d Q43@$C;?N`6%6(ljAȫ2UC:n7v#1gU=u#*:shR {`3!;'5PIX\Ip"YnL=N%!êC%\9>2G)gcee]KQkKb+F8 f~ 3Tͮd~o5_yrVW<N`{FՈv;,&6p3893Dloqiߏ7mPAX(3hL[㨶]ڀP*"@xplH4 ZC5. B!9#ܷR=\zMWf5KQ54ϟ{6qo3r]BId4:?p E)H(.,nHW5,b, d*N"f5j}E\=ۆ57%*ܿp"g+qT&FR{GWxY[4JVW+KV(g,ѼYӵ0SM$[h-\)5ZX^c3}i gE{3q-ʱɲЫ w>Y/[$&d@|DR"nL%V)$FDn !r*6t?X]b7zǦ94? DOz΀ZAc`v{𤋮 e|# >cbǵ8sbH?@1E SҧO"u"oEԘk 0~!4 i-+kK+.B*l$G ln$x0cViDwkSP| 6OjfNk}%{5$ (mB s hF3l2b3cM;[qAիR1R֒S&BoaKi9BD]yTЫk@;[,aJݹ/d󎾥k4:SxNwg;ZfՂFv嵌V|% B!nWT%0S蚎$5hoa~&cqLϮEzmD<.hGj&g=CˡM ymƅdBR~~fsu4mOL(& o}P lJxc UVmoH>v;zv(jÀN7гMOC[wZ\.q6)܀_PpH}4I R FRzP r|476Oݧȝ]*i&$m2dN'$u#>1f#&O"tM)_\xt) IX#ߠphRrXs ;Gs(}_ҿBȎηldv|ߞҹJ$T^`%K0hm ^k^ѫOblEZ4-g-!0|>FCRf̶vH]6Û7o:txrQs#N~ן0Mr0[e I1>ԅqn_5E礟AQPٔd5/5fB恗Sr_֯M +ρ^m )Da\klЈMc*%DJzւb`89͜ȓ;/ 3fx%~ ޏQD9KtEb_0pp|\ȐR=ImDRv>\Ջ X<ЪcAH^ [xl_1RZm恄?c\Ѩp; -ٲ-|nea-O'[<ߏDm9We~VED \4O%0 x܉n-'O)+6O9paV= Ib:IBæ10b_|Cپe1-R%7mhvp[۸=Pv)% ήtzC;+1əX8 e>v 7kXsB4HDh΍vpӆj Lo?-D :M/|fޛ!&@S_]K>u/9͛v1 ­zR^ЫSoaAQ/nTIOqe}Ϙjr ʹ0֖ B }S%dψaFɻ˲oӺc"DQ脠:6}SUb@1U8HKȒErc<ɳ÷i.00N7)AH,38`xMI~ͅ(y/%tr8uj•p@+Rl'c(U9UFv .b4rSɿ$w L~z1[UfBWo˜$~OՀ?L4pp* ܲWDL0X67U+=;ueW&!)j?ACa=M[pX֨c-HqJ;" xq#DfcjcX2o䌙Hj#>*aw}7yϴ9*(2EYSe&xMlͨ[e='k% P-xoH6ݙ|[ykc^`kՌ7 gW>zrK a>D!ٟ wr1xDgkO?lGJQ*gRlqF ̜mKh3GӑHSn'YϣG$:8+iB.B?ۿeSYg<"- )>Nj9r?InNC1%\ Y%T b\kJw2F6%r \q1lG`s~D%ּ)F%rIF[UJ **4|y*7Lfm܉}>?x++`\r|Jhۂ@ $U{0<¹M>2`/86%zլJFq]E `)MTȄI,S onTvv7<|iml ZQRC8cN HE$H;@phoݶ.DYߖJ̌^]A:=}p 靯KjtDO:@8]<K$e6K52jwde7-%p%*u"<(fԳ1݈ab_S[d.B*&ki9xSk&ZʙrdtB[;1ѤP6NzjZ@fř$٭v;ȡ$f^ xCbl$!7ʝԓ<B2wyxPV<QNILt6l҆kgT-+⁌GW4%#'?xWnsI$S@{e W+-W7OL7TNQO }{F- !Uv42xBM?t9QKl.i=5 I EW6*zC&WRWȭ0 }L~JOy~5cqcj)з4BĖAwxlQ5x>٬nұC#B3| rGi\жm_͒N7֜q2Ahnp*a2! MXq *l.3*ۍ|wQ(2\蝢a(=X1pDdB=Ij}XMKnuSS˽̋n=&-ۂpWY7$R5#SdgP{Yۇ?W߬vڴN:*~ 40nVdNEHBpKf(L[D!C7xfw<J#QK(\߮YE f6lmXpn5)y3ڬnJv-=ƀ26נlҰ(T'~_=Yqm$*ƪ"B;j&NTBSgMXSҋn2Fx(*O ۩!?ݴ v{ FIu}ɹկ횀 72!թG:;&qCœZ[53Ɵ$<-!ކɤ5vzoNȮuٝWsoJV :Sk'׎GS$o։QZq6v{t/ahM#a0j(B G`WzI=iG yר>G@#xplv)zV)YCDT8J="u_E9Y|[P \MQkD]J,|qCS ugcVdhۛxܧ TD!"))h|ߙ] ]CV8=+ErkyO0PvfӣI{P1>wSAKXOw[vkJ.=*lxQgJG # {.7M=S|[X૞^v!5m%T*U bW[ߑhcD~)(zN&"-Fp@U@MyIKzStgs* q9Z{:qYL1(| L?+A65gͰkæfG9?*ČRm-$at;*g0 H\DE(F*u =s nz8'hMθd۽;C$ltB)1~gB]0~CP.KI1oQD Par :iǞݹU+(~|*M)Ogxxw8zAVSCU- +p/κ\PC^*60y#2`s[/g XUs@ljޗBW /_&(~cu*$btB(L"δXxS:҆lZ< 3˝d˸8:'|҇gMhJ ЦEUa7g @UVI7x0Ws3]\oK/SRe*Q͕jꔴfs<ڛRb\#Ad%A@mr0]1.-g]?)lKfpqL̙1B>h Z~fZɥ6.AڈL {etR#nỹ:3, Ϧ,Y)N4PjxXu1%X/}G&Z53&U AtWh 4B+:~YmIaU$@$H,H-|N:U𨙀?kNTy0|"^AT}@fD ʸՋTvZV$oUFsq qlځ A!(VP/;f:J`E~.ʛ= ɐp8İ/XiPK=D!,hCr0{ (©H8sM&[ڍYTH{8ף_p|S{tM`0Pӊ>O0wQXr]NxYp~+f4u@yD*b)ɪ JoxkFP'~*60]5UȤ:8I> 1ULDZ3($e9gcVB& n0jJ64S5 !YѼ~qNdU=~t ĞVNKխ*50iv&HvKrFKEՔz/ t  ow ŔOpQ8? 'C`I"i71jisRB 1֡ԀsKl}kfl"M~c)?\Ibt/h>CYcCl4¹W9X2ڳJKGwSnpa&J %`8}.+^$T EM¶U~wN6Pyz{ƅ:_aC@Tt ލU90ގ8ΪXp}$mF([!r/pfMz:V*%w%N/w+.4U H0D 8)0 ʏhj B+_vc/Fji*K1r1J U" ´Ⱦ:GЖ N A`w +6NX"-kXi,zkPk RnkUrwEHϖf|qAE52q [ ي~y4?n{a X*5!R"bsb L#3f%7RDȩ_f]PfࢊND9kYWd.Ee%ux_wWz;QVT2T VVLfLŸu /2L=RЌ-k&qD$Xt,yhjDK農'/j2 i:~Z[-m!L: j 1\ %0f:> .[q- ZfVWsDmt,59RaweG(PAWx-?ܜV!rE7UCĭ h~m2N=U%.*Q,]@~m/CZɢ Zkx_(x-w@0?mqoC4GC>, R'Y/k}-[lld5zɹWF03Lc O5wMsΜ?bj:;ES9^e;~ 6+MDS( \%ʔH ]U (Փ,MWkƪ6gy' AwO!MQ0 &hr,Fȟ$sKGoѧ_)ǒ٥zU6 ^? q@O0Gso10V*Ú&{3VbD",%k(luٙ+ݡC'Sre=0K}N|Yк0g^I-ObjX Ӈ3JĺDn~F˕KÒO:ʽi6HER.됢)OMX*fl"p`tAfՆݫpag|g<@laZ9j4w@ȦƄ1=mSRWdX G=բ^ސCODPE*iF/knT(솜p:m7Lb776c#ujwN`+$KhŕK.l Q"lI8$Jk(BCNt/u~dNVIHkYc Y~; u%3zAP&ez-:_Q> \^2?n 7|he XH LWͮ(qŞ߭ *\7x 8ꑓ w,Ue{h?;XAxϕPa w0`J3 fq8ZLCݏ}Mط7yؚ':Of;])[syNtKX,%rɍc%5/~\,*>&^xKnŅDZا/bDn[j&g'd=V?>Qx/IT}a+#jՖY2#m_h@+\u簗LIuz/ \I~ۄQH}^D1H:*ςLplxe[Y+(W@]bT# r+^ L4V jHLR*F2J~ ipImj(GW $[^-f]lFsTP P;i*_I2Jg$SYt_'v*(MF.`1JBCW!v"=[1qeV3f>J,Z8sxVÄU|YQO1O Y~;Sw3TGW+ C/+kEU*7~A\ tw2H_p;05rV$xB[Rvy`2*q|^^ެkM pRT|qgaK={[32 E Ѧ ## qM\<\H8<$7&\s0;&pg&R˺'v|k?^.;X`T L0>CX=*f\hbdWhrQlABoYpCsGW;>!lϋvKtڇھ2uT9,Q+ٿ]ｒ,n1^T5i-<4 >Sq;̜٘qWSQҬt*? b>1Xshyʾ-!3kץH5KGSڨ})6$)~^D@g{'dt;/w߄eriuNs8C >cȿ:-   j`^w=ӛ;ҪJfyӭ/IA)4w;/-f٣{hFNZ48pwz5܋NVKK)Tx;la{i^TD<tL! &Wݑ8Ʉ:z+,p4{$d[dd$RZhNɎ6^m@i`G5M*}7& *9#P%RF)BD; hNI\K$]c<㔈-+YiYEQ〻Ky2)c9/fO If}3fyJ2̮I)R*$wё#:b7)xECIn C6TJyl6ܑ9V{n.ܥP7=L07UU>瓋a 5w&_0E)$9! uvjfuqdBij&(E_)1֧3H ~:_bý_d}[C[?$hzsΨ0fSזLEF{";<D1B+ICo3b<IE{A@kyG"XnAܛ+k^ 8>h")TD 9ͼeqI>赐H0^I!@T-GJ$~NQz8{j%0HfV6jwZŠE6@ڋ<֢Cf+9ƅ Jp_y/T qJ"D{.FsÖI\נ!GtzJ6Z̀!{j+?͞RTc6(X6 Ur](3nqoԂO#Y]{9⹽4f :k{X?2֞NC 9c7Ox #W=9)`t67w>D)#B(p:WVܠ!V5Ys5&ݷ :_EcY'e,$c4"&Z2etց}yӋa_.yTrL*0ִlHQ_KzΙG"(8zĿNP\1-R )ƅJRMcahMyh/ cpvjZerGF ցk&eQSsVnUO7 u +ߴ<8EZ2ΝTxht$ZJJ/6an[˚?GH$l{:'qõ1l$D-v$-'l0-`@NX4Y'n5,k{d[[h5[B&cEuBEt6u˘UD)BC#`ȋb!k#aw㄂/Zw ˰e+J> u:Kz׋i@kת2P?^-Z7:Կ0FN w\SP&eΨ|%Ǯ!,&E g;y<2Ԁ gfK@xjj0֫IϟguT(Coqׂ,lb&GCr0mѴ ~jJ:zr 5D܂yi8\iMOp=DknWA9ZP_ D`=r 1Q_ ߠ[_~"j w$ u*`(IU怩-Q:R>@ŏm8a-itL7?_K?KAg.H]8PnLD 6x^)@cR7[F7h z7R v^ydEd^2c|RVzLk]ePJ':?PDo٭^J%9X\txd,J9 JvɉFdTinR&_)lKkϡ;y7R@j`ak v. 2_@ik-ψSR$i{fdC{cMLte\3Fz5q"G6VOx9QφUtZvOCM*&=\^{IJ :5qǽ@4?Ɍ!7G8>yׇQ (2?TQQT aĨb S8~=lHKFGXOy{_?yEjGW ,l쵵ƢT!5ڏQ|T+g1L}M!XGg{}?lWhf'Oհd} q,T 80feaE>d-WWSI;?ۭg50Qi7ent dqc~oQi|(gADu-WAlAf{v R]k+d@ELioFT*(/v|W6-=3}]  (-P-M50FI?vq_C b\kWRRUsHM1A=N%ʆgĈKk9{~?-(Ԛaw7vmaiVB458N#4͝9jkLzaGF~;$iK&9u$2Qtp-Rl+.=64D)g/-Z6 8S= ϣBû-ߨ,nȚH>"ƑB"iy fy֎2SCgO4HAѠXr3uiiEMչd@!L__!_o>+C7XZ1/e@Tk"*$Aޤ~)ݍK)c4ý /SXLmA(C06(,WuQ8UM'?ߎI/yERɽ~/QA^ ۶\=f|N^iNܞjs'>"YZLnj%FE /ȚBBHBD$jEd/BOriGO˧IKpG=6]Dgy|h Wx<ںK NanATpG]C=HHI̦D1Df7i}?53:A|mM рC 20Ձ'Qez;"P5,7c ogaͳ``*le"Մpa{o|^gjgka;b)6 دABF{-oQSF"V'M?(tЦs{i 7kh=ϝIR"}x^X!_rIu IPh;<:@>'k5Ǎ3Lp4:-xL4E9Si߿H"HAKP3P9'T_76KHoc r>X_M?i2m)'IH=)^|\3?'@* Fkß}XiZ8@!rxXz\4AOLk;nQؐU9zBi($u:TS[9& :S-~\ xfQ dS?y ?: ֏J)?:2Y ~_54xȏ$&;hz݅C@߼{.1ZPnb!y>iL}0}4X? 4U;p?'bZXBZwc N؃ɋk^ZW𛠞NAXRTX4U =JpPXL?,/[:n s]KS'=~W)ަ-/{G׼|k@zFyɸL+; +@I7fMӫU:c@jX25lr#u 8ۻф"1}yE:g_TZ ~``4 ґgbYƧI 4ks4χpwl9Z?iV?1IC]>̡Kse-2 XgGGvZ\mY% bh"#k^DI :LK#7yY=A[CI#YDjX~,cW'`u2*3̠H)H/!)VI g#"73sw B.p[E~E#u ‡< uyb,j+|GkvD?Zqy8n~ۃg) Bd4ZȧMVȷ1z8AoĎ_E@R)7;Nlz h?..}f.xk4H{_oHꬹ(Te-pNUʋ݆8K#Y\"3uˋ4$aHL)6'\# HbS.VzdMF1*>z-q,TO[1VaXQ-P`nbJ|R2[}N Ul7ÁJU2 /=_h+B:1akEU;C[",@]wj洫wcK25nsK'iv5eU/]yKrKR|+NɌgcz$TNhc *0܉=>qv嫵/<>c =GY0<:ߦ"MD35lz/X7~eOHE]ŇIF>i>g-Z ${W;7֕J.=Iu޳0 .bƹ__+ !\x R706)KX[r,gGZ:,h;uM]Œ;M7T/kc1AX2>|To5Nm! Yگvud(M%Ca9uݫRv.rSkH2F ԙMZ~׮d)T(I,S f. J#ȖY=ۛ+Ϋ#l' x@!~Sx_vjccĢBc{>,B`S B:KБ%{jD.wKơ0[]{4 @ϑE`=eKs 7zV:A;fsNh~4Ր3ֳcH#TזE jlOl"cwh3*tɷ˷z)&C[*%D~G{wnｾjXkQ8 dj܏/|'>z;3o9HaS@Ǧ]R5ѻ 0*hz *b1L]<ԑBl-1DWH!8%2@*S~?GR/aWH1.3ӫi-KV5HH?vmՖ$S> _ dx!`֌Aߝ6bh!F#OF`" JIFz]8 {LEgRu*aգ,ҋfVXy=G0 JM ae<{K ܏8Vʦ G4Mլ&vRiSA N\'$f_Y𑾑dh)Ѐeycp8UQ8[-aK5{'8R,@Z2"( ˑtgZ]~q~c=ЯZbkLI8M ؒI" 27L]vPATXD=K"&wu!b.S;iZIΠq>m侼eBk؎)C 1lx"#s-<心@ G,z𡳖t0 -3KBOQv0Ȑ?bPSۤ Azߧʽ\w]w_tӄ)_ 4T062NxCsoz%-o,jfŮveY-{8ky>]MC RiM?sCe4)g74ާsOAOlGE *GqmS: *xm709sMv}ڵl|S9cEG%$L1'NEE> `3jL #+Jq j{g3Fk.e$+x3/MEf']XvR_?|_3"JtS²fqm8-CJ-v %z㽃ɏ댖bp0TP #pCsBXOڴ@p VF͌SlBULpP>rq]ba]i@?YCl;m(~a( KR>+M?, 8,z) dz18Wz7xj<5qXϲ9B+'; t&a&B-mI+EUaO 9TGemKC< e0QTAU{^U z@b}XB@jycWpA˼C7lExl܏YȆ}Fm@I|:OŖF-kχe4.t'V8MW uH$ɇY̊NtYrx' 0|Fn~'@\ɅkڿQfKm$B ('wi ݜj{1X Vfs[ o~vbּS?3b) }UՄ] *s=y+Q$ BP*CrI+ÌEӖ++9f$^Hul̂I%){.21C.\l~|l93I>/~*{{F"7%e%;FkQ޾/aZM9|y@ezN(0A&y^+oޙjKv~dBby,;5ۻb`COn(]/u8h__(re`I)ч+vp&/CY ࣼ^m&so<@Oi1پqe35R`Dr (bl_{Јޥ_ԋФȝJ62nsGNeƢ<5U)>|}2ic>z=4I3?ЊOZ%K`S@Y[},gA%ٜ\M\„_ 0ڦ )˰ת nz_Mdymɐ`;'s-7jX]x+U6iB ٽThb9cmb[rPmT]!#s Hc NM*KF(ubKn YBǝoyz1@o:S#EĖlSJBIMu8A/Igr/l\^sBj&s)԰F~N' ijEAʇM Ytn7L1mݟS$\ /k&,Q[ oBCxoּ/. ĦdZh2MgeL LjG6!G" K'ծ m#Ur9N8t ?/sA $5ϔt \\N{&8L偡:ӫwv3z`R}U,ڄ15D"u ^oEdd"OzڌRCeMk6Kvg 0fTh& W+nXyOU>ISl(̜yK}`13sNƃ^uUAiT4҈@l1XMQLhsJɛ B^ t84uigYȕ O\`YWzW:Dݚ+3i7R-sx#kJebuIAwXI׳&Tc^L$'.%-qp#\*.;y se gâ8^ &2\[=dRPY//$\]KMm嫖}K!t MƈFFkN<@YX0m)"@nΡW[s7+yu[cH obM$}z^ )F;kcTZ@P~ +=4!_=i)TaF@{,cڕQmJ,Q{e _H3qV u"ңIa N5 8"c*!S2"G4elV_g$L(g$L9 R"i9[qm0hZ,cΓFS (A")k ?Hbi HV[kޏh(W$#j;iO!Ɇu~rCC0OQBoTqj9vWik|(S5\La }`ξ3۵ |m ˘30c  ?mkT&ԥ;fb@ ǃgԎ۪j(N!X[{ ±-q fz>זnE7̖+<0qg;⵳.4gw:0X[',eݍ;QK=2J|xS:5 )…KkHsT5]G-W4*m26D;[|6iɺQ\hCYȭW9s~1K/g]%„ fp8 JA qQ(F_譻 : xY[-C҆N KQ T?4Ca6(\x^Q9Fv\51NR%RubhS8 '@PКZҒ} &?9CTHr;{;u!0s 8BFʞ8+y3u 9<{eklb$< Խ6"9-_&aoA]HCl[cuz5 :-& o\6gztfS7ZxI+Ӳf!׾~Y}R}CTL}|S[q8<.t29LJ+dE=؅Rت,uHB+jPV.coK-~cvA/@ūkUQPܞ UE2zj~^PB_zCzLUIT| )(n1WP__TDOOQAP9}FSz[$G:'k z*B -R 8b{Bқy!(s"ҀNrх%++eq7 ʤpŅܢrߔ&((FچKHcO`d;y8g/hh3'uQ՚FQZRud'橼ݖe}> C*1"7[*sSX~Ƹx ;#K'9".H$nrG7Ϧ^<AY\漢,%͇3\,UiZ0x茫˄aլ^Ǩx%F0Hl98'V1Tcl8'(Ԩ<ԟOD;U|E6 XQ1$$|}E&S!H 6&!'{|?V3yg=fb:) Hp(y Ad)|5gߣEZ7-Kth"^=%J<@qxרإ@782xCA 8n޽Y @4V委h]}܋ /YGh+F;!̛96rԝ#O4Mn]DȺ#Wtl:^y0{`I hRPmȒO1-i+0؁v }~lp*R^ʍѸ6'#,MmN݀bz,3v8}%o`}.0 N{%1iN8*.SA-K1Ey oN!F) J tT#|*68;~gO(5i6l!=|QW "`B J ؓ0 zƵh#dqQKtl88EU!l=p` &tZ 汜8pxkz۟;un'. oi6BCp/ݾ3 i˴^DTk[dm@=TV˧H#t^ |SUȼ _C_yT̵h,⭥j^}#(uyCR VY𱽋1 }Epd QG2rI2U^9tB%<.cY5pauN>fFn4vC)7?)03 [c=,\~N36㺰2ɂ^钜NFr*])ϒ]_Gh-Q}]ļ7* 7pOg=9MI'@y-h>ߪ yV5₇Ov֪1A`hwG}n=~6FhrKtQ3{5wR ɗyIe\xBL$ uKs٧㩹c\p;n!rRi4f cI43OJXP;l;4F6a-Y; ^}lqdHBu{7x= &򦜾.4 '0E=.B5+:c"ԒӚ}jKu1}zUf+TsfƤHCCn¥(wHu!X)uGdG}_i8qV].v˼vTp1^rYiA[f5APސ;Pṯoâ?9IAeش!ˢVukB?DȲVsNE5ے)=wap?+(g$)^5I+mu j{Q6LOd,uJ _Ŀfag6(+Y}hjW9:\pwMNd2SǐEb<ˌ3+-I1lƣrc$4(&{2Ach=V@({L+V'*11ک2PnPwmay>ҥX:{[㳄??zvf$hzNĵhGm`e~;@̞ɟu+3|DdyuPXK_כ5`HКwޢ bt5) P)^c$EXroQWi=suDZl|T_] Q~f_7w!iUXyaΚw+7&3h,V;qkp6ԌL _v$+E|,ͼEr8e"YПXr,3o~(xe_^^ѭ6f#]yQofhe1;1{URKaB:Fpi@bgy «I ѓZ@{qsǒܛ.+ ?Yg{❎7$'˷9Q ۿLmh9>EŚGLR2O?k7A0~);K?l:3w-JnW7g~1en vf7ER6ED¥Il n)3BMJme֞y OAKj:3Qd  g a !$۾՗l6r@`Hdğ^9xG|YyJ28k0$nw[^`%!O9J#, uΔ7/zkdI#Uӛm$w'vAƾoX:v;w˗0+i(G4az?0*v-%̩F> Qj: Q`#Dk*me%eD0ᱸVyGPSqv>~jڼ")EH Hjnm%;em4K/aqPJ ~sM|d>v&`@XLKaV矌pnNGh6Ѵސʐ`\d:0p"نݳAsa*=o @!MźD,$a+kԸZMV ̢=wFs 5v'"[Q]vhvYA:Y$ @0 :el1/(T`I\^=1tx(3m|\c-۠GiG4b̭Ue)gU$ 9@+u@Hwg^q(q*"aF|aW+njHʢ/U\Í̾7"ɪp,dLKh/:B~߯2=g^ͭxrX30S2οo\pC/q%q*s0 ѩ}`kFվp}İ"J 7lKa˞ۼ'&}>_, P쯀$+[yu2xBs#i .D2Y wObfLYSI۔uNp]R۲I uJn ;Iu1 1B-&(nH 5ZMw.JQqn J*:R]P92(ƲMI~%4r-ujKvp"{Jt^rX q wZ*./e~Ҫ dMB`P^3,V}-sm]Z-d7j ڎ:GޛCgc.nJmH2g l E@oM#i1z}9h7;"7GQ<^my$xqgF*nopsu2(ң{qyx&:j{T[c*S0炴n(fWmt1aO0FɰQeq5g93dGHEٍ Ss0.C7ȟj2֘3  2.WQ, i1#Η`?;z/M H+B}.K`=oJh] nH>y n_5s8GE6aN҇6sEfۗnږŪ & :49J7o\C]K=;4^P9a(jfOY1/|RXKk>S31HD^xJ<ͪZ]H/drw_"ؤqPk"8ɝ'T"69͒Zkd>xqq>fѵF]GNv%2Fh~'wGoFL>G^$U^jXsyJ_'W+xnӪ3^|B ŗXG&B*9_ɼ<'KHv[A~a˗h.sv&UyVGD~yY =\/V6Lis~;j-srh7xڋg軆*c";gϛj[X~u!ށ 51ѣѿw8OIOW9|t54 XAcv'\9XGthv1d(I7 `_5L؃ T,rdJn\Q/ay5Wx}v4^?;ٜ!El~V9bLn8Aˣ BBUs\Z|}|MhĠPnb!g\) ZXX9kb;N bzc)ػwD<9{]76A(o%ZJ|O*LᐊPyT!<[6ǏǠ-wЬ~<,!X t$l"d;oPl6Hʵ߱/TFEǦB" "$`yy@F*LC֐\Ìcn3Ƿ*q=x[Vq^rxlv?Ve^-W/|^Phr^Dj~eVaK^PrEuq?YF:ɇΨħy 0@ a" FD̀y聬LFfp 0Pe•0a>كu;UTxs5y7/ =d((c/ޕȰG]JMǭhnRx`&vjQE\LT'ГM'I6R>} \tD"p4dMLj!UTx-m "i )[C#T%^,Q#IcA {z.I+\2Lo٨t%g"8h P>gLܳ{4Fx SG #`p#a[ɸ)oul4/,Fݓ⢴E~;0S э%l%>b!S8t֌gk >=T1ca Wav&>WnP:cݾ!["VZsE 3F{nIJ`zA%ƺrptYe(`?[N2FZY78Q(*3C9uD2U; We=KA-k0MҔ%j0a&ovk?gſJG`f m+n?V3Ⱥj#C4m` qR$ycIqB%5!Zb:鿣<-La_ Q !2%t;i0QRzdX#usV'Ejk6F`ka"$8biŕUx! GH8uxiLf+rKօO l@۳.r9cE@{ޱ$jvFԸ!y揲m<~ 06-PPGɆ x.z>L[! u" )5UI'#hj¡F>YdDCCHbeuuj&@;oQsrf^|pƆi?˟4:D.3\6ndaܚS  &R*P^l+hH˂,sWmdbNO6Ǣ6^[m«SߊYiB1rcZW9G]T|ޛl Q0欐(%*J4$Rǰ2eHmqQ_& dg-_,ZIBvF V2м:[s%z )Kaܮ䤨 3oB>v^܍x noWO*9H|HUjt2Mu1&Wx4mZw q*Xz9e ZJa(үӃmݷpɞC)#=7\ViBK/#z_>7a IiQo?:,brY'RDX I3I:Bx(^:g3xۢ#|Dh2炁ԯNZn%J4#ft.']X/p085H@ $y.5B-B6gݹ^:}=s<@ud -F5^k22ldA@o2|,/^8a:H`0M,?&|dbk2X~{ߋ;Խky<C}|]e7g-KrG̥- ke7莥Jd8°T2fh\$"}HDFҌ`Clt22gn(0um]5h#/[ !&U:mfw`.uIչ=F@>;d_RG~ vL؃]ѡnDGN4;\iD†ֻƀO$6ACu@, 5hoE#6P1\" {l=$weTsc#NLy,LfPF)zO ' V0Yާ՞& 4^ 73o`. JĠ>j̿)=:?Lq"!2T n94H_z!P^-vwg ъ#IUOcYOUK@n_f=!`c6?H?U+Ppӧe(]7KC)UDD)6t"g_8/MOp/ ӆ4}sk-j)ui6iivQ`gk4lU9mrx#jK1XrW |4Yd@%Xqd}Riϯ@bڔ[j0KrdLj#8f斴0{$vWp1Etu7LTh[ >Jl9Ao0 „4or 9LpmFˡųI4's_;c3﬎{CN" v]n>G>J~㖈o(ܻ̟ .VDKbFӳ43π@Xp6d@w]H=H/}dOSa&`8 _y:9ҔvOTVf&n t;.6gۼ,ȖHNإ1 9HU1?@-%[.F6K!y?/+ɰGn٬ݏ ?=Mt @![d ]qwge9Z5JEk5Cv`+2ft#?$ml*Z=0OqcvfV ToƮTH |zUht)g;ӱ:Ⴥx l0nb`f)W=efhO:.?N0x"#. &{02-F! f!*}+)s~Е ,"SH4Ĺp<;Z|,t )RB*-(aGZѸE>7:e3 ewa%~nrZ'HlLrdTl`ftúkTSpQ5|v:BQsn<+/И8)Pg Xɘ&_#t*ff*d,^Օݤ;Yk(MW.VyFm^m) /FΎcz26N$Ҩf팖K̯JyfCncI[q|j.9%F1r ȮXI> !Qƀ+EQmo /"Z?vy:JOy^d/ ְO< .+65 Zxpg,Gi`wsa;KBj{v<czD 陬$Y\PvoZ-̌gN=i",rJځd0ܒ-eY ՅVptVu J_D */+J|HhQX oogFm0ûJ`JxJu?,y9r($!4l PHY@_?BGdṣȊ0sQ%If֯NYb2i< f7㗵RWl;L#=PJz^rZibpy`Hlb,1|$&HcoCe,,"#A*b)O6^eAM)aLJS>`|\GA*(S(sų>W 43-BjRK|_$p/v"ߧn^w#׃PC*X#"00O跷ƛЭyLC6@>:}0#[qw=_6G?PWUn2K)bcc>o RҤQI1=f&⊜*'[* Zn)E̳קT[/YiJ9Eeڟ %'G7nr .8} XuY࢚5_leߏ{|ɛѦx_^ n9ثO_(:öPĵ@z[~uTͷ#U%5G&tya6wRYe;aȉfg{]/Ǿɮ5(v sGhZtʕ^j)@x(L$de(fc/f`yrM:'cEU yY$B/i}' hG,-w Kۥ g>7%X` W>C n/*1")fNdJe5c +(!ڞ@DY>]'>E/I'm&u>|8i]ޘkm2TAEzeM7%e, ,0nq3FCv u )aSBܒlL<`Azr2*hkɭ@u]<2͗xW uVLe:^$⑉ tvx3_|_ġ)P8umL~ adCMv v{jƕ` hUpkBpIha$yzA lPN9YgyJư0LlXy{aď!>rܨ٧-as+:A^- >j?С3{F^m _]@%3t^dlvKq&Vz(OW8*)WC~~?a"C١!LwobĠpiWt5qhA)._r뜎Y=L_//ć3L{.kV]= :ґ%,Xѭ;{\KఒM4P ކV"X;@͢/u͎C t^pK"0tM[_T"ء8͑)ψD'k^/úgIcov,;ܵ YXpg~< N<̈cd4 OҙQlYAz2I_Id_>XBmDWzU!ڻPX?s!뢅JDFùԫpS#ax'RqɇDJ/NaB-Äd<|8BYi v[}ENfCgh~G6A,MNDZtc_l0|%%w }ϵ[1P`;^r~%v(0%qW վPvKN8&*BւyXjb wa43nþ |oTXDqifD֖mp܎7n=@3~2۔bՍ_0gV.T9x!LbcH7WoggdI=hX=Di9ILP蒳)w;P$ts ͡v2t;.컃T "lB c <樂}k8*^V)80j e';|9Zl < #Y_X *O/,{QϦ!O ,KeD¸BguUb}`\汴2tO7)6iɯyk65-(eΒ>4%Ҋ=ϱ=,KJ#LPQKY9~@Wo~nnWlk8%5.%q4瀱eDXe,F\h 3|m+FG1VCNUr@S 9Xj>'Qث?-PҏZJb}jGȮm]]z0!:RϔQ..q0Y Hצ$ ^"ipПzPT0épЋ;Wh"gV =2agal|ӏdUx3﮺']"@~O4qkl\HܾRBb(hU|;W4HwLgh~CQ&IJdҔ}P7`eڹ)8/&уn ]nt@;ؼŧCy(':}:\!ScZX Ku4#2E'B'ֺ*ȴ#i"{AwΜ{'"@3~4n\G8`_gb}%;@[ƵY9ZͻAd{5 g9J,Q79O%RW-<4Ft*C'N/ㆦWT /$7ć٪tIq餆G@5!H6~k)ޛ.ޱi:{_=oO(.'-_RWF6.#ߨdGޅ)1ع|%V߆ h6J#my ! 10A+*zqv_%1Eو( ^'쑖=$HcWi\@6t"󤣳N*o"դGif*=K K_Bk/_t{Q@Ocf/n͛bOQ-fS62Dw?ѽ-NNj.RZ%m?7пBFrŇ´ȪB}\!mОmI"`jLbsk-Gt58-ϻ,]s8^0\kz}\U{ޏAܓa`H1dVeb&Od- [){8`1fLjׇ"ҿw2гY5X?9 +Y0 7`ЌS-LP{-"P6M ?yJ)U68qHJN",hjiGf!:t6"Y`(<ص,Z^h5;ĢjK0fg̠69B0r!@2OCZ)l~J?ͅTyy`FZ稻g:!E3IjFE R8[}+J><^`w4.Wq&JpuǾ=e( qTvҙ8>@ W55=7ʆ6Z} e ;˻6#ްljSs.;9YsgՈS;JBXǘ}~qRN ZIy]Mi{H|Zݼ]̻ϻ̖8޼9lUYv peHY(M9 tc2p̩8'4$3M3[ڨE6jU19f.5t:`S^quDЍW(ru SFER<~SVNOuI~;ע oPKs WJ{֓wOU,&6W雀r4;2lʏRdlOB.5Y@,U%G N]>ޤ~]C* Umð*X35+HTSHjnOX˜4M `CI|QJ^;aK `\l.zs_n9g!ʦd;_>8ZJP[e/`gaIP ~$oQURIz{VQ\U[3#@=7g%\2{\D) *GJQƗQn`#Dڥ8jW /Z34QzBԨʫ/OT2 9dg`Nk$>Q^cM[T *IKn@SlWవ1ƧN<0`ň[e3| xR Sx3 O7Pnlܗ%=T¥g_H*A1vZԴ;0gۀ=o-i Th~gxܳ8 ؆HnJiVt/'Vi`:\O(:cYWOL[5<^HE%Q2yzh5$8QKpyI.7WHѩǤ΁ϓb&-` R#VP}CUpsqF~e^H/fPzxTḋPwȲqpQhqA~ԀO#9L~˔)j48޽+ÍpVPo[KFBF#]H \fF1iӉK;ԇt -X=:,[h8H1/=:g%4l(anTrO9n7眏e7/BRpP,eI ]74IbZ\MF^!_14g\Je9'=WWk@ 8$GKkbSko'``S>Q{1.IM[#AQT 'E~I\RI8[FCssoxww/Z00yhoz37(hE~ݨ<Ad૥ZC{s|G%grV/PSuȵM7PY''m&L"X{@S;o8Mavˈb2a\#t&{@ XﲮDI,ӿ{S4#WԚo$ W:lV(iyj[z?eA{t}҄-eGu2KVbMм9l7Q2,F|Z-i&wa\H6=:O-HM:m&N ?±7R3P 43J:#AʬĄа@xeء{S<,ϟ\2>BfU m7 Œ#V l~UBS1wIwٻh&JfÀs$1 =CstݩT8dOYmoRSlEӖ0b bd`Ehbn7aj̑|W[^oێ)(!eMZl,(1tҭ>֊RŃK}1*+=؞vEňџQ"50ZJ#*H5ydr ) :T ,8Ovxyb-q2ߴE?ɬTNeNVb}66lY .v&ZMuEP4Z$#3\RQ$qcXmLr%!GqZFϧ jJXoČi19A[j8PJlTlRek e4}* 7nv9ICoGGfq~hSUFh DTdX#|qR"Bsqɉ¢K†kNkG7I)vēã"Q9JP\&\qJ@ikg,؆ DB0.MpL1-ԝBu&wgƥУg6CALk7r\7~s}f4,  p!jps{tOYk ݯ48oDu0&Z F&|7HhaYCa`Njyh('1aUwk69(G⢃kuҥX^MX5BPxyG$1rJ(xz;=PR W"OM dJwLaFh5+`1`qw&o$gcЩM*a p;uv) $]>}De1y- 0@5pDq`;M4F鈴~uzu}rVjf[^'_˭i{{R/C3r`ېS^@n7tRr9H>Wt n es-i\GMÎ:X[8%6=NQ2w5p\+y8e!33 h{Q9X+V"̑fƣcv> 4`CTzQS,5 dz] >*CT.t`9~eV$1z\D;GY3EnSA!s@1 W] g?gdmne}hdؑQ<-bZZ~=%^ޅ')D*2bMmϥ# yZ~Pj˲Ř oK$սQqo,UMB╫NZf%;‚%-ӚuZ.+$)YKï#O){*~c(Fae<&R]U}5d`/-X>!Pƴo.7gfZ~.&,l^Εbͪb07Zhd_%A Hˀɥ ;X:v_Y!d4IEwU#x=3sBw8ϑ$u V|BxO^'?jo|k@*X(H&%aapDwY3>d>1> x>NF ׿$YfkkT)lg 6Zozc^9ƧS<^mM}B."9xCaF+傯 {_B佡y=ڢ`vNi ㄉRSuCg>hnUg9{V_ʁȚT1l3tL΄?AgBVn.,>A@źqZßue̝xԷM,4UB2Jֳ0 ڂtv/XeF K)<]m^՝=ྋ153º9+`Jjm_ɺ-CBnzgS:v4Zd` ~~uK8k|-R=ΠP ǥ.RGɦRB鼊wax"Ŀߤ 8E3qe8͜.q<7.-y@| s>{4_]TXJ_TxN%2(eWճtخ}utveOxNK;sԁ#q>?}%Ȃ;<UzUx3)G]r&ZfFMp^sde|1%pXyվB߷xsbh`1Uau9sf_!;[غ!Y~m\8O7(nEiD~yb}I [޳F uuƲ#b%p_ݬ@ky89A;t߂Ķ *E SK:ѣg(Jrt[k :Yɠ7%(|?]0 Pv'$) N:+'3i4x,c9PCAK֘tgUMx xJ=(;͂#_K*K{s~L8;Ks1<6&'юcㅖdaa!(ݙk8 $;=GPݼM;:5gHD$ mm6Ojg6ڧyY^F{' [TX3 (ynp(H,L-1U2DG8,UH{׬ A)?ܾ\4D71c'q.OG´Oe^?([ 2Ne_t&=LN=^-xWjؘeoX\c2Ds˿s|4j RwAk+9KӥO2lo? ҩ }h \1P\ģ `"+K?K٤KH(W|W=$]u Qu&5"h6S<)}x' 4UC1d~bMNiAQeջge{ɒ.Kgjqޗ(!llYa'@E]81&Jsi _]AޱAO|sODJe[ةbWPt!baJ-[йghodӭׅaχP0bh^O8w%b4S0q(~goxK)Z# srTZnJdBDgΣ68!ɑP؏ukqD +bRNw8Иb4 0h<;(}=_j jqFK:]EfeLF=h ]ftL8~/ʥI<6T!\҂| i;ua(L8i:]GK~6)oУ(ɳo*.`7\_;҃ FsN3zu%UBdq ʮq%E:]9˙:}eJ7'R3jT^op@؍`7|SG5ԼɌ %\S0}7=s}JG(XEJA~k0kStDs너bfo<ԬJŮ^|Z&k5e]fpWbZPwQWZ>Cm"B2\ǿ4/H l#xq&8jcI$d{*$Tr^h3<+@;"@2;qБi.IE/8J#6cLn5q{;N8e6+ٮk@=b&0*3^<+PlEQ/ w5Ԇ?VhZWC̀~kQ9T֧W)?I=϶[p0%?$!7Nh ֲ[J[GpigM_B~蟹"):k+nCC޹]\V/"ŵ2"^ohwa4xC .xCxjsY& eD$B؏E2kGCA.!aԔj.u| ф(/6^!"(m籘à$"I\Tհwk^S]^DHDRQ6*6@F2̄G>w0"X =}eS-)ZQO2OߥFKF7{EY7u .xN=:l("ne$귱m9IZ$' Qz 9e计HFcJbMDnӇm+@݈o8ڽBIr+- _~BȢ2 sCmʨ(~2:>ijގpH .{˿/0I 2&b=]DN;tC ]D|"Bŋ-nڡ ܥwM4UO%ndSKL.(횟V3Zl_䦙l0!Q:AM'*(8 ^ɧ5N31:CO0Win.oFVCcؔ 4x_G4D_0gɫ>Xw'!h|8váh^EĪ-{x`nt"̨㟧]J8 ؟MYa o>wŢ!\vXM#MVS1!)mCE7SҪag9E ԹyL)nnpܝA :,!)${6ͱ:קΫ1YSgI_LZH|o cY_Id)=M3Z/i/^v_\QVGBg"T0[pVhd?r W`N&6#n^l6{+To [cS^EZ=_ F4w|_rMטQy*~lc-UTib38mռ-q2 7^#2+ ::hz 06%n辰c^vͿ]'4{E?f %`x(_"R࡝-JоwJD?0Se _ߟOd?Qը x- 0(vx'aLY%d/,nfԶ `aeXS.WZ!/zҭ)- /JX'*_ c İ j3Q~B>_" '7#QmY@KJy&RJij:ݖ+/N+mߜ' [ފ5(L=^-UkCPC^-w1jr'Jmy"]z{Gq(F6$A ]n6;`{{\,Sa>,(ԹVijA"ۄNEqGI# p8)lN@+~`]ewanٙ9^MP7Mjxg@2T+@rQQJ2+f=xJ [>5ZːA\V~'p @75Ib^wŽ4 %hꄉg/C&ݐX]>:E46qfuˀp~K"6jC>%,w݃I? <7 ڬzs@9#ZRju !Id2C <GNt&sTu+Wzn9BJqS1;/psǒ<@Tʍs!]yywC JBM53+VdV)g;:[ 7-2vz/ 3f(`8nGGZ9>r܅p++xGP J,1d:c0OQ1P_í?y5 8jsWUAMk䯭q!6uNŠNGSNy8RT35pJjgt'~% O1`;_.Sk{=O̬(-GZ(7'.՝nB ߅6;Z`]cVs3zqEu m_ɫkiwչf+m\`kmH~rwK'`ٻb*$Ev1xR-{ 8>s *Glaspa$ҁu*܍|/e*?چgq -n?q S  UkPѻQ⇤9  xXjjJV]Bž1L#-"V>r,yL6zfߩz?ycE NX`ʽOiN;. b`b1W[@;s&i0|Fa$HEer9`?ubʮ+\iv,0dOĞ8Cg=#>]:EcpgĠ䆮.+?E)e,班cSmE_uF wӅxM/YA݂ze3z   !`+E:,!#Z1qs&nLEy(I'o w 0w ʅvMp40 rLwֹUF1s)4h|4N MAI_@ P祐ϟٿtSDZ'&S#%)h 3 aslagK^xPWS"ɳ. LoSs@ Z,`kTo] glodDy8  &fo<: N,1ayڴ^~viU =XF631 2 G2-btƹ?@ /8kb|?uV|ՉUtuiϼ>rZ8˼UIcr]#g*Vb Go_ߣLRVfyGGy;S$Pq;+Kgr%A`?coU|̧dr$ImYk?MG5)ϧSGW_=AU [{74|a O^W҉#&qM `13nR^ 9IgZ%opD i29 Pc+S}  `)9` 溎uyDeM>Hr}C5lɆ}*8-'c6"N8 -2P猽 ;^ƼkJ" Crr{ Ү!F85 s@_T]ȫ 9X~+9 \l'chtf8]i $H́ |ƲP 憌^b- yeX&Q9󛔇 I SkE[#GmD5b^ؾ<,jTX߆7Dh:eCh1f8x;/&x>P?1Kh%'8jҹ 3kT5У{vr4yn)j8 "[0v19 Ԇ\v:Y#G*ÙnِPAufYGOmWⰘӟ5 P׭Ѝ?q/EsPʵsY.$urHk X#FE7Pŵr @ R2:B,7Q€%WT;@(:Idg.Y2G{M8zY NK_M|+55u F9Z$† \?? ]X՘$Gq"wԤW4t0?L@q/b^ 3K%-$4X8_k"0TߊwtFYهWcU :=:kV[0HQ̹݅G'd[q̵BM9eL=Ӹ{jxdjGt< D?ci]j@1:^EOFvYzMZQ #,dyBmȭCb/洵SI!2 6TcE;\5OfXhr6%,llXIK}+* _wo:f"=pB.|*D(8h&fowig"MS9E. ޠQiJƲ*MK塞yyo:#=c:w*?)ޙ.LMQ/7gC#Z9ܚ7|߸ }q8̴c cqfyX-9yTW<4^(ȍ8Y\<o0buk/Q>T "͓욍ΠZg{C| 4pT+y܎l\v.ӺJVao߰`x/K#zղD{ @ъ1TVqcY[W-ET{P1s:`Z4r9Тx 9r'fE֓=OUeD4V\# vszOqD [̳N Ll01۫ P˘#&;bTLg6>$u5w4:Zq8Yd '9-9 ;$ݳ`_~! Ap׹+06ahvFxwۜMbu~iGe_gOʸ8K^w6YC)JɊf6O 5u[":'@ ۦHɌ Óf̲]hr -e\|V.Ɛuc Preov䊰?($ߠرyH<(P_F wlDW>T:|Hm$7FjQʉh<ܞ%^{_ǦÑ η`}Sx0â7M33aI825P@Okfy̑>_sUN7]EXm>%I,ڸ=qDTbHwtij<2'Tb񯨹A|$7YzRg ~aԝrځVhN.'UmR5;-'HĎ΃~ >-%.˱BBa #Iy+r/?b LG} Z_f 41d<$cd@|E̐!=w%C=zXE9K+3Bx IGDL&ՉsQx՟1sцI)]SMm׺L@nmr_)~S/X)zx:]S^>0YH &hz/PwOaSq`yRzDպԭ`7Ec9Ja1o֑hmk?%*&Cdm7٥9;{&J:o$F1Uv7| 3]!xn""'dm~H7 [jrz>X)Ղ%#vjsA4sڙ txk!Lb|ɻnFՃZ,Ej6BLb]C/(>/T"+yMb7Z² Cp0˽x[r+ 02ߖOCbCԱc#an@v,5tZ>@>|x~+-m認0!ҲTth$Ls?(f_,f%PԲOAu+T\+l7.Bn '$PI-ͮ ۪if̑t']Q<θ%?z-zYI]詟t*:J4w2gdzm8C'ãeNFY}H5 mtoXYD#`H[ݥq:1-nY'A0j-Lh'ʼnwWSd˲=y`K_xr+%n%K!8ٷ>B׳! _zϳX<^UdPqc Q[&ppBa#Lvs=5kY r<9(qELj #҂Ϋn@1I5;xFvȔ%)~`Vu(|S$ $ռ #ͼ\R(ͩ-Zb\NR:d;c>YވSU%iKDkM]c9J Plr-4g&243KK::.*P;?%R; ɹ!bMɥ"[qr f @F#A\Dߜ3GUN׊3]޳?Sn)9(厓P< cX>>8N~s)(/?Fbwrp~LtM߹Iսtv `IA-ڎNH3&-C;6-l|q $xjGFBaGTl谶m23Dt@+>y?2MN$-bׁ S_ D)&28ѕNq0A ĆwIzJc-$vg7{ -lXt]G ٮwаw /<vS .0)jmvp)1LHD~NO@'Oai3xAGPG&EnO\fq t|Kӎlj }#]zk.:;LVQǭ r Xp*>PL(Wp Q}!]{,SB]`?Kj՘\d |]ZEK=O-z^%8!eOҮnuᯙ% I#yAAy=;ݸ `쇳!*"崑Y|ϵP\[!|t/ϗ,`p5u!ӊ~Ȑ~$rԯ̭%:W}8 J7hGʹ.%%O#J_jwci40B\;5l譕HN?fEG"#[شGܩ9ð`DQ(?C Su o y#4,gقVy}\FWldBL M$yƇ_Ptx9z0lcL䙑c"V#!t8|^[`4@I 7vd6x W,/HMq&n`yg|5+OZd'qZӸcV2xJ%4QF3jZ/AOM+xk Uzʉ= 9.uW[;,GzXlaNW#ύV70;}zdIYE?:Y͜B@;'] UT77T T>CY ?[)(5z!"PgYtl`N"%u]3bR g 6{e< ^RB65ڳ`P!ݹuE=G5a4Eea? wMˋ (ꑌNqZ{/D~ߤC. =8:H5^nb Q8,yo߯Le1<+MͷZFd ʩ'9Qp&} |B`p~qWU|xBV0߶U~b̤G"$"\HITpWTrU5*6L)г NpPէ,B1h/d1ũ!mP^Nϯr8ʱʝgEεv>f {8=_7Tao9u=TNIӅfu%%cn~B%gaR;\MyAsVz bJ ŮȚiJVK>_Z nJAMˁiNWڢ۳Nǎѣd7un%t\qAVGVט.L g$1:)B V܆ k95 s>wy̬ o|, k<t$ EO [:t6N3HM`yK/O~+O#뎴mD `!LvʛE ƍuDcwitTɔ.l9[Am~*Σ*ZS7eѧcAۋhT{#]90a! b?9{^#=%yu1Gyμ`}}nbFQ,9i 2U6iB&`|s@A0WMyo^F3OXd˯ 3eDƞO B-*F>7\Υd@o[| 7㶇cO+teC,$<|vC`'i;8rG׬'̌k}졜k.!+L$ =embߒ{km9y, ILE,&aL:@ɂD' #+:_O'ΟLA +ȤQXv(1=ɘ/ 9&OeԎ BmepS=3^|pLe%(o"-T $6Gt-H_+~yR az{\yk;2?ZjcaBL/\weTœZN.L.+Tb4<-%egGJ6Fc_>i°tӫ+G MSBoR.@XjӚTB_VO<™5x9 pjөJ>EgZ^g.GmfJAH'o>b"R=ϯ# vMX5)1拕 u6V+,Dc6dAWTV%"o EB , L7&4OyfOѪ?%[wSc7bri^PFP\q 4w'g!"mRֽT`=W߯~{-//Jz8oOzض( D)QLx!@hګmi"rv*g)pjq{ 0knDY b=cT紨LVm|4{T{U|U#;Ɇܗ*]q ⚵aI1rbB1TpI# SqBJŒFokt[5B7g]=;O6ws4ِe(9ԫK>7*,^k=kRn6]#`8 _/ACF0Fȁtxj"Þ=N7NamA!ZF}f$)6UwR}.7[>$ z^S(#5\#0U!of-.N9x`6'~8f*.G?_3ĂBS6)|^9/Ee(g_/* +0Rֿ^p\6A=ȹZn6%jcbc55xp̊9 X@1-| +2~eӚj_nL3ef&%-+^!u5 w;ݟs3V;XqOhrLE5LOk3dhEqy^ܛ̱-hZZ4e.s\ Kh+XT(U{d} 44TWܭ+iը\r(*y"y]/FeVO+2xĤm(0}Y?\+HsF%di7w ʊ>,g% %'?:991=ni:a-2[.D'x2̡ѩګIIJiFGN5z7*9Lcs2VU; zc`wۭ='N-2vL~ͭ?Bӄ/O<)5vn1aF&L%ri~CߙSnLoFըeRȈ#7w(.4^oyLlE)\tvQk>%k4jAE0D'ZC'59 U(GAΛ 0Ɠ՘I*LX;Ĉ*k>;ʵn+l7uClʖ.C~.];a?ҽE%kuЋ"r /䇪 RU},+cu/nj=شb'oa)0x ^2!]߉jhrٓ Y{I7N d9nHObq2V]2&[wHd{o>v_+ خ*_Z),!ϕo@<}~ƽY Ƌ TL`6VC ? ?ZѨ@%+|KPVHԱ%۲V2o8`dFb =gE# rrvo#8΁d쬓=Hى$Lk^Tz[ۅDNg_W13_l~eF V$60I]T3]*_vA|W3ts~>>jlu˭ӧ\a/ vl= v s_amgKy{vY[^~D7][8;W)flq2u;}W>_@G8K2$ (\'#b%-ѯ l拜'pvJŮWBw8r;=T5ڱ6[f*0^ B.c-sT%l (N`W#l`.7ѳ`c7 tw20uqǡ1`2aʮ JD_sѭg'4K.FLeJQǰ.3f1ȢJwUqjRp"M u"-LM_%N?eu6-  q3s]$Ai`bZ}-ڪB ժ1El#qEAkب<8P] 06?6)Z":౩C5h qk숮yXݽYhb*f} OG?6sj s ! uJ%VL[7(LGq m ]$`=K(pDl t!d97cU4@fe7XO M*D;c/D/^?2rJ"9%ށ5G.ƤoHЮuB;f!dӋ*$?wq1y%z8Q^y`_,DcC8'3[?ߣMiD(A0<iQhg0t@@P^؜&nk73]%>N]2]mi;ͥ_۴M7mF;w߶C'# UB|UR354] NNxͧrQ!P{H?u+[K1fրsȉ ^vN蘏?7jVSWAn|GtPN#wfZO̒ B /m0ĎӧT"s5K '\v봊 ~+ 4w:RryX.- b8&JiPmr͇U퉫8?fil\ڿ"*IﳌV<>rHY c29GU`c#B ©dGDal< ۑ ԵL.)pR,pʎm.cLAq>`+l5V  v p-P{Ҟ_b. N, a1"`j JKaedW 7 y7*?e s7XsAlEFY+ƨcs+G&pQr kͮSjRT)hsFzɔ^8zm C;є옴8s`7t `R Mx,Qj3fefR/,}e\SIڻnEDaЃ^PyX4SA?ADтT?=Ȍvw%Ur(~>dJ|vٹ3P5{=+H30 ^/WsAǗSF&5NWjOZ'o5psu#+t UX\-'3TkMhL3K>VwͿXgU3e#ú+0KᏭXvAUmw4\>oIx md0Oq m/ t>HmN.m_|Sƽ`}6$BU?4ܳOn2ss.3_^ UP.1*xuDey~ 'o 3y9 UFΑᝏ#[)nkM":{jpm׭2d=PpGNaQ_cH —u ~S yMl6bh"Ɉ)gK#gBC ~%?=kW&Ou0VmBNfe%!;ȓu+E+V+:)Q,;&@#I4,=G "h2TcWM(lL\Nd9Z~&_}L㉾yP / ~"WØgu ajAF{ ;_FP]g#$M>Q⹌ǻci.r4q1oJWZyfS$).VIxcKxMS4b-=!XsL[S7 6!1^< w*b[O>53 ﶿpMUFGجF̲HR~UE hk+ߍ!_!Сt;e0hyr0ne#w9 #%10%[4yL{).^*ᨮanV۞;((NfM^pQ w4_{i[ 4j腬"ЉWADTշ-uSŬջ;V0 F f46\Û33)).;RV_,G.x劀ml޻2<>ǵ;*JAF$z6"ӕw2c>~𱕿؝6ΘwrEJ!*qr/:,! r_\uH-> َ1IZ&lx^ӽlbM(T @H6^Dׇ$~/$<^iVٗ]b>oPJax-ׂ%=/aﲨߔUD!M4 @Dm$A-U܊b'?{FmӠ\jN$~'-ɊFUA}@] mZ]rݛ6+ - jy =\_"l]*6"StJؼw1 Hjq[=c 79r!-Y=4S$k4 |@V-5c P_1Dq6C~ԅu/kBl-yo]ƍ"b]YW^pMEgXR'z]o2R,[u/UUIڀMg|N#*M;`Cz :4S)Cs?IޟrAfv<|l`۶2)o{Չ R[B*uq |.pbKNBe!q3]7P;w1%kMu#PuE:!/EU4=.}bT(GME;7"fw+q1hi :7%֙Q)I+%Wc\)@CD|Cnj3NBjs+@u29W6;a՚ԁ×LD=S0g:& .6sr)wVP$,  )" q26C0ޗw%{FD̮Whg,uRLOwA2MG﹭5a|$+cN3VRmMQ$yoN~)8t"YÚI&2Fqf]OW.|ĶGpL* cR2INWqF '.9Kgp8=YW]oɦ6sguS_ϭB3OO\P$d=1KĂX/gr+A;+.i:[+y5rMOM0o_f{},2?R# X aW=g hQW@t1J XGeC1~3O0U;}ӓT K/<8.q{ .; B0-OЛOHw2 3}U ӽ 7YW ≶z#äs{$x $(|+`'KaL}~nAbrjӼLO0p6brBҦB (Z4Q%FVn$e)Ć$QIw(qLf閞mh;Ftk7*e 0qնl| بpU.i)(P^WdV<aڛ :Cw}C]ޜ>s*O{׾O.sv8aV5pA4 VFt 6*X=#VmP^4>0{1U%Jm\͘qB1&(uazKl|#-̈ЫÓJzKt1`,jQJ-I p7tFI>{e[uw,DhlR4lDfmsQ=ٺwԕQҴMU}͆(HJyƽ`)/<2{c{J6CZoEJiUS?l'eI֏h=I'CtGgyA~$C猋ǯEZ:>;"8X[w7TRwѶD1UuZIT_1f..6(npNM@lIeN?):z~D}J1(< 2-/GBJ1`'Ae@L6(Kޝ#qfc9ȡDJZ/ K\[+ ),RCgF.rx@mUyxrbvP||UQyr! w'aeBz٣Pzg?;#Կ},NM k:ź03:tZqGny)25(kAG8֧?uNaD@uNvjpsٶ#iǼMdW{@ $aX /WcLhW 2ruh,^gB #tq߅Ի[PpLԈYAqo)20&LS $nwu(ɰᣙ` mј O3&œDguOcu AVӯ$!HxxjOظ;CXt J_v*5 mP)k!;VK&XRp5Qe=xi>YADsʄ G"TTJPl÷wӴuf :oe07`,!l~Oh&.wk%ai}Fk˹\Ě|%H`N&?G:gB,*`­NYBQI#^'[{{h_ß jbI~}$߅R&ƅ׌]_ѩ?)r ]Lozك Xsz!Tz3އ 8fuSw5m`gX´[@(5!Z*V,Vf3nn-b9"у$Qd,j0wbtqiog XGj|u$n5sڄr skUT,꾭|Im6߰OQ%RB_?čGV\ ?Ŝu&!EOC؇QlE2$oC1>xhي'-}`؟=hvQOCuCFCLS3Nt:(Q;mhG-@.RX$SMѽIͶB4I?{%#•9f4/$ Ml(zѼU'/bn8mq[~ƢfkoLd~$UZiO0ETxfTBDK+V'nS0^`dt& qU/6nH~O/pQRW$?pfkji(7w{ "036;CEz g%ʣ ոei-#/OV`a$. {1"B/s̹My뒨Kl:\! 5Z & J=C; 5 nՑV L8.qen=i8l ooTOw̿=zÐ7C #P) hGdidC(G!S>^DrtIq(IP|(0FDVp Y4lx#4U=zqHEc1_; [Gxnj9|:w"(@(;:6,))Awn evRa ;v·}B ʋ 'gsF>Z`{7i .ӺS6[K5)1q@A ςځY0$\)HhbC3Wl.þý|_uM$F%lpzîl$@]k6'g1@wyv?b p1~x8=[#9]9'EfAXCC8(*T5rwb) w;('i-r< 7v!ُB#q95Wc']V}KEr%VT*rzhbc"bn#n%><+/1A>XqZx:[[@ܽ8*/^w%{/vYʍ_!DS#zy2[%]BΈT.=ss"X]l)yY*涱gT0,R? :@W7eR,6e>^,Ȳ+8xSt3Ds-)|dن?)(c }\T#u 0eTH_E֞$UtBe,̮~e-Q~MZҺRgO QG+y[OQ|˝%8ZWtPar$*|dTtO<yuQ(CWgu>:/ ϺAEZyRl.N 8.EJ7#2I`{lJ%ahF`1+q,.?fl'SXWY`h m+[H@sœuU2ݴ1JatL1,d[*3/*yyEN7AIrËhqRZ_gO|N(5'HUn@͋ag9\cQJ nD(ԑ!.2$f]xRt9|-`R zր}bY+83ENba)[57?3oXaY`ИdBfj{4IO:;rZ kLBƘXP~e;hL4+;_ws͛wM.'F2;`l, ^qɝ+[wKKPZ3Fs*E8"38×'Uz'=wCuT}d0%mRPvl& 4îSi܎T3rJ@oa8uԂf\-0fX"a+h5"Ka%Q0]eEȉfӠfnZA&3u=0? snPg\C%i.ǝo<ĩL;f&.Krg~5\dPJ$Qژ˿^DkshE͟6\Qa$ό=1+fe{~g)ON!lu&CvlTόz򧇈@~t U C6cu`C>YfWtSp(M$ <7Ưf#Z-*7'+ÄB2ɽ&4j"?F缰V͚L6 X5NހQRO0o&Z1%Al8jOSL < 2^XuR*ȿpZk$;Ǐݰ Kdʆ0ҿrXW4p\p}N yi>sYn/t`l%25!r`աI,EOz8 Dh$)Q//潍1kkV]DQ B?evTߧ0~w!b5XZ%}!-0L DK5Ȋ2smu7S}f9ٟM&5G8\K:#>iOMNɖHX7ّw2̟BS8G*Z8amITrԚ5W0ҿ]E ast~Q- & "GzbM^lk.(=he$`qЧZiՂ۟nR5]58V@ @d x ٩wr@`Nb6&[7:;:WϨ>y3krCGK;U-nW#RDxi<7 4[o_H~RMHJmIUJힻS wsI,ȃ ]'pzkײrb8}R}ۦڪ"CPL/AHڄa\ gJ55$Q` m/SY>U>Y_DߝDfMz6kDJI-]ៜ.!Q1Yx 8K53!2ßRIgm;>jԫ'-nHˣSd6_Nxx=.u?-@`^4D('GShQc(@K#,Ll)fCRJeJwG֖} ơJBPL/w(#|:J>>YC&\l8PĒ~FhL5=(Ȑ⧲ZfT7-jgTe|#QY[]ipb.bz>!ח#`EY|cu4n!ڴwCpu^:)˛SuQy8_s Ko$HN^22l04L]tu%ڊHu xgfTR|A1~45`]7LSJ2f(d.#mޑ(}}\QQuzgܴ5J y9*|EϋjPB4LGFx V]0Qvy x9{BAc1~WXj1V}.C*3^X]i۝B/|Qwsk\f}< x/9a|XP|7Qx^񖂒L' B.tS̵V=l<NI͛ޛ_9s!LU{UΟ̆NV ^K`@=I)C[Zum!ņ kOdd2!¢lrжCk'2`ΒTeұ@qkbÂlqS>I5n [m@=I|{=c1zg }Fva~{ ЎƇ8jaX^ixTWٰLӟeK^wZgL,(RJ.f5Q=ZJ͗~Hodlxi601qn˲jz?vj++o0Nr{]]t{+ 2doBӌ;:T W[D^]a"J.h׮Ǜc;W|Os[&aJ2YA>j=Sn %΃E4wn?'2BK/I%&I|^ɜ*h>+$]h)FQj$X0.yE?cdz#Ȗ)2 ʕ3J0LY<:ZW0,x-fǓ\)#E]8Cr*Gi( |ywY`:RČNwhCNO>,R;5;#U(K2 Lͅ g-^I{IEZg[]ulzOzUtn~]EWЯE3^iw y36x~]j{bDޓG:._\TS_A/_{ ApSrؽ6J*Sk)LU-J#Ys }U䳬;CW +#O}~/qj36,PS++W:KśZkTn^[/o1Go*WN;ٽpPv.I YR]=t Vy}R<7OhNJ͌+.]tiqY ( Dնn2l`וP{H9$aNBj)' ^Fl眶حEnjItQh"̀/:ɮ?eD@}2w@k k;5ጐXtg&^tAT]Q iiA)dm$5`j)Xr#!_W/,Zib l]ǯ-U@ ; UOX{NAw`O67~vf̕>89]21*{M9_D99RY,@j#@A)KpGo%h/)v|l]3} G $FQC>-S=L|YlQq|gO%_gel4!4SK?$5sVMdEMYj=+^-ʙ\ r LKR%ܽA Qyhߧw;yk/h@@*jF^"T{ TUSkWT: *檳Oӊ|8Mxf WIfE)4`@mڄ>U,.7%D5Z[qϓ,CoLyxJR_a8񪾞#5;BDЯ7e㬿}CWF|fq}xk|=;ܻg` sgs蜀qΉx_JG:=uڭ] v/zrіRZ<&1€ckM٤30HX($ ck R:#o0l.W ) ֿGxNfod+[s*n} ?f~(H -"Ƚ(8lUlWHZcL@(SόH Y#ߵJlL1= }|΃rW/`& h %)E\0zLG4=^ަ9 1@O?s#?ᅭ u MdR[4!줄J i" QUX|F׀5;=kX<OT+ V QwVgzdhICUX= d':91ga} KيǏr?Q6<2 .u`F>_ּѴF)sX"~(2V%izGfrjD=Dnz=ѐ/BҟtNTr~\Ȯǃ{Z N!-$ 'Om~sjfW7h?{ǑZd3ݡm[QXv;_뫝Uc2nzkT~ =XpvZD9ՙ1ir;WPrXO~{;Dg\ T'x<@z)ͨ!œ0lg + `QJWhrѫx 8oޙ)MMT3!݅Cd\oЋYp LK>C%~/e2,Fݩ7׆6i[GAOO;\ #vJ.FXA >|Bi03UZ8_pfv^YGM>{,TP{>!4Aq,jMWGS26Q +{K`d[٤ !&uI7J+Ϧ+4^g%4&bHyQ𢹺5ȶ3_9(XbB0E4r\M<3*A\}e參^ULs?'gϫ}3wD&H 0T}E( TU1H>>lM)i[ufCul+TM$Fv5@|/E([I}-h ]}ĔϝbE ׸JdOѭsZue/CRpҍՎZ(Fl.#w0-/ՉzS679#}F.Ϡ聴$~d¿oE~>` <1*BmʇaKUOOQnj TMEkߟ.jv4 ̬psd=Vc/m#QRG6SXwKV_ག&VSqh0#ۼ mǔ&:C/uͩ)^B}P qEy@Z$=+ Y  & 1Åzmhؕ%6i  pbsXN2"vc[1@"ooy&,`~|Q`ź5`pDt~^a5ׁ>{6\plO0hF,y`p@w}$F9mlz.Ue0f"ܙo괪\;Ӑmb"ÅV[VװsLUu4 )ёF'$?/w|mj#%3M,uHy@:0,>ԛcwקSg)R8Eݗ!=cu)%2j/H`WIcBP2CR2PI0Zpo+6 &< Y(ɆrHa/ǝr-3a-j}_FmH],z<#5ڦ v:0"'c{Md*8tYsP$)!9N*Rʞvj =q]p$к?yLytl>L27jгGDWjt$#īq=6 Y)~wkg t|i!.0k LV+5(ك){5Ep6u6. ZK\Ֆl_l{tJn ^!(x{cz"G"C*Nl,J|M(RH9Y[fa| !&75T‚f=*_#y-EZIćt{bMjc%Tl<;yܽ>?!b6] 牫eTWإrזeEgx5X DuH?1O!'}h0siM&gb h01M dఴp彔G5%LjGt[XRȔf6ltmCqr0 f&΃CʤB0cs\ Y-Z/kQ #9p+8c e-K(Y/0`;GEȤ?j+Oi|K zR۠&om~dGq̮&6pK&_x+bX7 mݦ ,PfRC)C~]Q+vIcƔp8#25@k8EMi r|T*i}$j% c!Q,Oa{m!<'fwI'9$'-/m|>$8o:!l9ȇK5}=ėu8tx5qb`bGMlW M/^`ΚA/hb@ 7# P`*ZiF6+2 :9'Ҍ__Uʴ)R ­!{YXzd  ѿ/Ɇcl:$K{8"N>>̤k"ϙE-Fu_w~^cMUBR(ƫvcUw7|m&ڴX|x(ff#fo#Ij1]|Ej_hhΥ!@I)/ g \uyqҞuF>1=ۑѾ12GI _t^ذ=ۙX}+#|Zq5O1tcmuQypaRP Լ4 `Mt3-;c JUW Heu2gn}^"k=}tCqK>4R_*B"1Cp]ۯRe?HАY+g#ȍh!|8~M.+jF+?0VA$`o\wcDn)̞n&)ʼQ>c̬X{FQxObnnȨ}n 9Ohkj:3wv!5'i#TP7\tJDP}G@2}Ll{wczC\*ZόF9&{6 *o HkO]Pe:2,9;܀ \G7ȀR)4ʕNK^USgac5Tbe+mQl90K"G+cWlKN#E`}Hsu_ю;Ǯ !57LNT .ߓ}ۅF<+ZXi_LTg]\VrB>j;i%>ݾXn A)u|}W::ٵBog ˢ4uTWm1 SNx9~Y1. bĢP=z0ES\V׿3S:`)QUǫU+ X2!~c+$'*ˈAL o1 A(gR[o1 Gm/`%kqmXi"*e\|xڍ1fi##G2Jb+jM( hίM_·'>ĝU&XE'abqu5aj{Sq%N/:(5IAEX\0P1rUԄ>W4qʷdjڹ+9}.|~lFI ݱ2X 4#ם>%/q'K5PwK' gRfzZo,H25 B~ 9o!Mk}{Bz͏jEr=Rٞ(Z/Ĺg-KSu8—!asmX޲+L巔@[iS,h[B'Q.Z,}ü]%]&`v5JYeT;CQ6%ׂ(B?"Iq Em | ^C_vE+F unYS:uuy\',`IzC^T9c.,!(+.4ߕm& 9,N,Z< mo7lڽ .H,\҅QxbJ?dvl3z Ͻcf;}؆wYa:jڪ]`}񓃫4aZ{UzB?Lsl]eI uPl`N 6kalB+>$_V/M~ZLP;@_+Sl-.𚅩_,E>X+e!z\n}`[dM`}NFظr?\~!'%Ϳ8TY7NMaCulJ8fn|ߴtwEŏ0'Z{<-sc;1þ }I?+: 8)uІL7y7zՆbYAN%S)g=Zw!rT*]seGW2 Q% oyCx@O`8?Fs wN(O-{ţSE8WIsPyl|,fL0zgMƼ˜F% *ŠDs˽+=o*44^}O:Ewn j$ݤ]4 t ԮCلe Y'-%VW/ դzA1[ܜ4O`CM]ÚYΰAs1ݷ6{>]>=Wb !I9Te($åT)R-li uY\㽕䭜19%_7s |HT@ȿ5pۿ i/J)K,(-i Ub)ll!c@BwKZ)wG |nM9^?d(7:\(8'zZgݠ sC Ȕʽ Ҁ6A}(r38ZGwvR6=|B \ӭ;TGǂQ4Q fW w_W6c/B Ԯo==lBB\_b;ƺ^Y&UqNw>cs 46c#v9!W1&TLW,_D5.H,nuvS7<&fޔ{TYPo~x#j;e)`Cy)~sմqUk"O1wI\eK;0b3hĺ{K1NJ1Ob7@)΀+G*O %^m/BkgjKX+d=bwD)3+9xM ט#),2 U})Hl ~,/#YS i]]2%\Fb*$>Ip ^9 k*`}LhNCZ2f*bvXMθ!ћ%Z5_MN*j"T\q~掣wЂ \f!-#SX$09f}#"'-IcT [o|V\~SlO8`iqY!5b)&ٰ9$*ǘ ݓ!KڼĪ$ȩ:,UViftE|%5\-Y/R×&i j'Q- ױ.=T5@YꠛqÇ$=rfg͍G7)J$5<7^;4%)!)ˆ*/cTvҐ0VF TP(6W.49}/qL UL=@H>LF'vDž`W^bq$)FseBY0c$ ;.Qv"XԻArYCpP=8u.ZXDz :`r(Ȏ>4N#0UXGQ:%J48*`5tLVe?k6H35Uf/rh̵"Ȃ>T(6jCzn ?Z4BCw:B NZZPUH.B{Bv]CQ6vǗy`G:{dfGʌq +rO/raFi+4D E!=fZCֈw+^ w.ȏ' ѽ  +Ym))W_s*0e`g P% Wy8^0KC EDž0jqAu䗝aq qQLި1~|IcC;*'W|5YeM X#xf?YKtMJd0pzeezc364DFoW4 oLT.Ie$N@YP;i,} Hc[tTWovs(9pTkUؓm%fԁXNb4b|z![RHܷHCeoG=Ulz)[jw[pTn-涇ÃבY[rqzޔPgbU~=m(P/|:"\K $l⋃[!`3AiiևE:(&#gEۧDuwRP|kpUަ(2S-X!JT4}_aσB]\qE҉OĦ\ C "|'~QzjmF~ZNRj)SSKEx[\dc|Uc Ev*FsX2鞭}S4|=>UCOO3uυ0O|Bb?'J{8`)qՊ̈L0hfA]qAjBWx  ]WDy<H,sT1PM3g1bsXc;DAV@NN7n3NLV&0;;fRFm݊>߆oy;bd7\vo{.qn1ɒ(-ĒA!UWO33$fT|P3bSI'ud34UK(0n.N$$Ð m|fG GiaD}%wDX9QKb ZEK|#k)6pnsqIY*VDW ecjqz͞▣.K"Qg*qipbrZ{c?;ΫOxǃfL^\Q_w+cj^g:D&C,C_ł|.>JS ARnAJ ?L]R~Z%L+Tl4N{A}Z]gJ0* *Jo1seYYs;?,mҨhhE{[rڑUnډwr~\- {K(Pt9T.eh[:u^"wC2L`n鶼gVOi#jw0YrF]ssΚ T ˪ G32:kk"#x(14`Lܺb h!!8k~!'WMYC_ImZ`% vaS_02f[{*\kd\}0WZ{0¥fiCU:WA2W)1!'\Y`^}\zHI gU (af1ontQ!>U0kH6bk2`}<~-b&`jk%<_Q-4 hXX;!%sn|7:+X$gm nN1>P?x O tS 3o_o!S0 kAH/e.ei`C_7QF+SI_ {4˔~ \Lcn$G LlʹX9Jlx$ Fl€;zakleey;ڬxR?cqwKMFeKؿ4d1$.;6!$dK;+PGUy#*v8yy7$N)m;c_W YP+bM~]Lhn ݬAq x̱ S ()r'pnL #}F&#aRH`*X,-?OOK|te@wk_n+)!Ԗy ~pș"TZ~5pYn!|ȦDСԱO\ +oR"D~d5 ҃;!i%xH4@mտ)0]m a_=i;#)[i7HQ3.Q%DzH/R;L BMhp%UBCixmJ}7B(]٥6zj/ mg. F=JDrJ+㳡l#tftU\՚0d#H0D!L ꘻7v5/a|Oct ˧*;^Zd}d nH? ۗ[CZ2KAH"$b{Hr;+p7׆q='F4Bs =J䶃>+HՋu)=\/_~Q( y7nux?”v"hh0DEJ̿ee0u0lƟ~LO!!73l<%xAEXܢkۋ+>zN7b㵎W*o|/7&K}#V[ΓZ$(/ ZX0m0asBhWS;[ 6=t5Fo? pTGfWgUHb7Ko C'g뀇Zu|Lt=i#5DRCǡkv_0Ex7^0m ŘM3Z餮 }j4gdU  S |Oױ~~NjϟdH freޫh -\8d*(h R  4,ZrA55KS,P ;iup8 s,tiͼfDM1Y< X.d6GEY$>HW&f|70v  Jf?nfh̥?^{234uy}im}el| 0Ӹ={`pO^A^K*Ž "A Bbs4e; мƃGk^#ǀhANG $xY`tܴ'd&q 4KU.XC;2czw'>&J'ߦgj8қ $aKU\3݊3+#Fj?:@E[过 HIUAlf'+5`Fd(M *%$5A! l H,Mihg1ju=H;]ssj s|)7y^F;]*W n MAh0j%A X}Hæڶ^W]'ƘU>( A(3j/3䛾z 6gV<K,/vv\abҳ)&Lt9`wFH໠W(NLICP/ԗЇ-UM wDWn`E&߿\ɒx31l܊u>Uv<3:qTrYGKB°'۸Y?j۫.az$rIf$<q ߧSQp1b\-. rdf'R\L[ v>nDс}$1ƨį n͸%3{ЯE5B9} SU6}KDNjAg!\(vV32CAg(b=${Vq¬RԾHNdZTxaZʢ»$aln@:Rv yP!k]es҉='4w4>SU e( z?+l6v-?ڡ0c"Wg)L<)2 \qP~idn߭^+ [0-qopsuqΖqwy:ߩȉcK6gOEow J,D6z:#J#ڽvz$N..B6,WI( *49#C  ĠLa%6Ӱ{;` !Tb+Ճ3J*g D;mX|Bw@9! Ur4m 9P59hɱs4lpJlcj( F eK P: ɹ9Ep;zS~$7fLOO\ xS"hrѼs>8kJXX` V{XYTlMnKixBN;]) EIOG-y9+\'5/ԓu|JƇ}NwzmSlmF1R h3]"-fkC<}&bEtZBŝ)I#,NoƼc["o:m.6@ˣUz@G\İ F K۪EhG<GQ_dMSxgteL@KaM YL̴JfTnt,ϥ6l󫖥 JÂ]1&Qt"$7Qm!$T)1xd=>iJ&#S#RըE[nos65Qף-G-Ď\~a%RG)K_ʠ^ ~pWxΐunUʾaCUpt#=8[3^pD?XX2JJt2cѹSXVPGeyY[^¿Z65沙|S3[c ;џײQќ]q,A#)63 $5sT)ISpTNJpʆ7 2^_cFC/Nwyl e m0#T^j+CsL7Y}i -؇-ĂKc w@ޫQWi !ze7h*+ ?S"~NG"vg/)ŭ2, GnVNY*TKPs<;~;X a@EFTztRaj~>gRh"Kr[Ao+㨳11Eb|3FC3xͥ/7?pÿ#i-Ukd(38d mcʈr$;z\^1v|-Xݕa%6z 3]n+Vq`OP9WCu2CfÅ. ;܃+ ᢜ>Z 4"`ԞmiyXro{"۫$E? L"`r. uSQ`g!Msk"VL-ߏiTI6f&xeCy 40q$[,YPkb< |^1/6^k2Be3ȚdJg_7wKёUZ#^/kF'4>S 2$X3+1L6~}ػo+o;VJE_.D7HKgbpA g Yp/Ґe@ u"W?yb4~XbGKQōD;eҌM t 3./[`?.e{J:gyD?ތ-E*˘ \02=2'VtbSa rez_ʉNjpa>eXàEZΣ!fE_ -ʱQ?ٻ3\ki>RdH9I@dcc41ޑOc>ڲ UOM8d<<~jJ ܞqwj*A})2N40|~*\EoDbu2~Sdh3MH?FE&JѨ =fX>|+q'R E(8ݐ#%u-T,*³}}<Ƕ5OUFqۡYM*(4H[㒥7JaLfVSﭖGS8R`z*b =m 7O,XA;4e kֱYśFR,v% ˕1rdX: [/QNI 'zKRTy=4#ِ߶?%o`:l{[]R~88%'@dDu94ܛ0{"vco8eKoPv["PlFZɯD Ij|egþ,b֖7KD* }VU V[|S,ͿC7F1|JEWא*b_Dm4 c>Je'6%3C't@QUGC0zi6i\14]cX08tH0o9RR+ܳW}3?y3[#,kʴ_! Jݵ6xd91JS+BJ?HJQn8;^]Uq܅ ldшWnӬ ,694elhgtnC3>"|g ~_r }-9w' @A?@Iĸn0*>®HR`2` xj$SE'"NڂO?me~NLWD"N30}:)#&j¨x5*q{2W>W9=Njf >[,7x;^[{>4uU@X4>ٸ{<CUG){fjfMs:hvГõN%FcDZOkpǗ0G8厤d*flhVrIڃCKĴsd "<iS+/tE+ fØrz9pA8Hڥd|WQ&ءX Xas pyJp-D$S"Ę|ٍFsyçLj 4ܧYO:[Ⱥot2 ]@#Ktph>?X$pt mdg33B2kOoY#7UhnfyW踟CfG{,8LźյNM0Zs(*T;!;<{@2h™wuj ?`|LfW1K'6f[q^6kA/ь:J2[}t8)OP[ AcLbr%1= [t*T?kp"+NŮiG`U@TyI K4]gFkڸ/GS1JSޅGkZR" th!$^ľ8^U_,Orx@D$2Ku 1 -j FPTÍ$1ye[_Qᕦ]}~`P\#"9aUg-]u)8unpmN %y20€n[^xzE}C*LRpqU;A ^NX4)>ݻF;i.='˸UMs7h<ߝ dZHePQzrH؟ ifFe!YKI||(Hx'^w.f>${p r&/$?Q#ٙBE9q'sxy?_M6/0 ١oBȘ9 WDt@xKݳu<\hP_`!P/yskQ"Wҗt t |<RixcTfd 0E$Gҁ?eU⡒b3+`&kśz@_~҇E2x4qODG!l.<DwKyvfF_&fI 2;!)Nsh,PqizW9TGض^:r㩁m!BS{c^%.n qy>:ǝ5Jv7}E>y괠cdh,a:ӸT G+utwn6ͺU0)51ئ9Za]!p^fƏ5-t6fY̬{+T-:bSiެZJTc->g P`Iap*֧1FX?cjQ?Tt{b/|8;!bY_ hBikܟw(; 4L ]QJZ $=KDÈ*Lmv>ҟE4Y|"(sm&)ubr]ХLfßtL؇;8@T1JyB!$hPd(/P0l!Un)=N ұ>(M}-aOAu'6P;NRw "?a~  Vj3GpTx9m+氅HGu.O-J*~ pJ}Q7m!VѩMlzZlͻ#6Re'-h4b>J KYy$ 0%\V5~VPD2ET40ǂjLy"*C"F%N!ҝo+)HҩP) Hsiw.c-:ü3څFM{$+/ F D=8LŸ,oc DX)[w=!+\-|kPWu'zvrT'ぇ}6 %?=;ӣ&v DӌX|8r:2D^oܫIu?|]/JoCn7*g[E#[.0>ma5\g_Xf*z%E>w-4Q/٨`80IF,\}xl`Y1qrs)RG n2!~IA;x/ʎ" [ڼf=`q"+ӣo=_~)7"1e_:J#bGִP858 ITqQiWWJke2{qgj`&( Vq!4fcH!o> < t&hJt+Ygpe=*=#StfR:U.C:{&%u"%?V]ӪT4ԋQ^ 𘃗lցUC_:VjN >+qq(`VrqC5F[lySRJ.n4Y,.]P_:ؐvU]1+ci;@>]7B`@],"ŝRbWګ=&SM`լN5¡rh G=KqΞ\=#,xN~ӂ!SEmEܯ\y ޽n9t˫#ś㑚 Í3rn"-M zD(К 弬f sߍs Wn4a KiרX(,'ڀy܅8.ՖX])OȌL2O3lQqa˳qj?2ic鲦BhƬAORq¨Op)XI`e0ǜ$Z6'.@갥b׃ؖdҚtO >C9ƈ*|\+.t%vN #:Xda V܊̚ z5׮aG`?ïx X^m FU>@1#ˮ+ecQۏ)nWE˥M {>DGGp$P b/(qlbjYu&W];N`1ĕFlmZ86$ą#@ mҺ<2ӊ)H%?[po̸;|͹g &["x_Jm~:2gU bp:Г.#A@H<G)HQs(hg&~{|9D`p @3U"RK`5Wo;!\1jPs[g%>,(gu@D+~N ,@PN˖^;<=LaDŊ,n z W\n߄x#DQZ[UV6F*R%yX5+r)o;O|,r${0O<")aj+.a 6~,sL~;6^ZE6n%hF"p6P!aVHJvrDЖ.In<"k`)FW29g|-^jԭ<#k>d뀓_NY78PVH2vͨo̩F0%u_ʫO Qb@j-xݍ|F^!+mU[vM/]L35 0&џ8Xƛr15¥z)NfT *XO=`p7'$!ooG# +BJB0݊#b4_`sװ\9~fbf;9Y黈1{(&)c"` KHCFBMk>Bvga}rȰʞDM̔ED%c 4xփ/kOV" W U{ψ=zCEZ^b>{v JO9^&@'%? Ur@&oՏXXo,my*;CWqߘ%aX^ {s-q r3!qI9vi#ē]0SNKWDՙM`ƑmE׷%KGQy7j&=IK1O:wסT{gl` #]-9 G!r20%wCJ0[}>blDH;C0!KX:Σ7m-˝-[ 'ՠߐ,:.f:|$WIʹPiMI"wa1]L֏g#6tH>Hldm΃|u<޳[J|yEW0Q"udޭ{T8Ϸp<$BhoKZQY'!ӄ6["юK*tbQ_z< o CH4z:6N\*'X$V$}h Fh\\x&$]/3Ս&XV4~VB(+oi[o-'(1 19 U֧ߠՖ&FhlG?'$G|]MBM#J vkky9~2\| =R>խ<ƾ}Z{rJxE9\ٝ ΃'0Ъҡe1vYD|i(-}Yw¬y ~˝%=mGԋ{#%g"=e+7BbLlqf_/e7HVj tGq TY03{J0Ǵdfqqa.jŸ~H"= ?KVŢYQmʌB0!hv"uo~~ ALհ7J_4x[ T hC= 4<z2grÏFL0;x(*[+)b>`5xe[@!;auQX.l23 ~ !c L3Yk#H*_ܚ'e*x(K݅'!}79e*Y( c"!Jk ͤFz*Wۚ9MCh?wxN|ol6*|{6O#0DL$硌E^m?{ثS?KSpZV0d$i 0S <=JWiJ+Ukʚ-)c엚8ߚDN_cWQE^腷8uI=TL@M3腨@[#:sMCQ7#*bo:˦sDݒ%LTkY8 ȯLzevD_y/2C#* \ƦE]E'r?0q_-XWrXWx+;X\`/wPʹ~څԇQ3J'd7@wdy>X!]edS~!~N7IOpaMmcA񎜶=Jn2tv w۱8u;GTF>RT_2 h'ֈJKWq1~,CH5Z6 Ti\M7eܮ^)5-4[7j;d U1m9jT|YZRq6DAUz^ $0Sq̻n J673vҥv?MxxK+rS۟,f|{_7SR2lw{M /?:]q nEВ-;F~eL}- B5Ut[n(LIdTB ԡ~SPsgm5*r00 ktcWZu6h4Pp"jvaV"Ws܆hb_aG<YMR~FP&B"2~Y}4ܞւje.e|B;yDՙ őuuAv{o'YpQ)Ga1%o4 #ρՂ?zN]]?MorxwX-# ]20]";@n48D+Y'V<+۠@r$RH #.%!.&]1DwzW>ކF9Ewԯ[zznixN*_ORa9!nfX7P5&ٚ<TR赡@$9R :hg{G7{c&Xc(7/,XX}%Ԣ[GXB؅0eǥ%&( !7OMl/zH^,3I _"{3` )$`$h!Ptݻ˭ >H_}׮O)७MJ%p1Jf[X֙ 1򅏏!e_ sНAAxЯyا*j&2sUnЫzR9Q'ՠW4Npl /VCM#^tg]uL8t`D|-9?(D_r:!Q54.auϿʇAw1`W;H:WjL ^JId}-ժcCio;^M+iw"qZ phĵ6W5k+ڕ.O+3g%RNzĈD #Gi׿Ǩש~wjE:(Ua~jIH8}=0c6= NR^-^*IJR^o=$1Bn&/JvWkV!aIl.Y@~K F@J<b?g4_8߸dx`!l|`-֗+).7=T܆ãP)̚Њ/ WSPYl-M12n61Kf٥?x& *& \229g~u}qѡ6yd1h[&l%yD-LPނt'oFԠwuPc(eI>H4RB,D P"V]nXbΦY2Fw{MUt}TN\Ge#N/Wpɸmoٷ;%-B9 R!ɮ/\˧azlzNIQVkn,c}623E.o!Kwr6WE1WLEnTl Vp 5`qvUS"9w5> eQ3 @ %g3ߎ35֢NyK={ fqI$ %2ӱ  "? j#*e(t ^l17Y (OUGrϓ{, ~_h 6 L JYpfMgKP >٠?*L'y0+aP*3;utmnF8pW}kh oחK<8Q#U?ЊDU?* y/ę{aIHLNbtA[h"2EG/kE* t0ޤn($W1߂ dGĦ PKϝޟ~'笓ӊBВX0ZoePۚc0iA+ArOeٍyv n"RɬZC5.+:s(f.x%k_kfCѾuD/W6\g4^Ȕ3 D}lᯩXi1bzr7ф.s:YZ~\hr̤M=Z?hKnÌyy8jqDFZEJÖ c79ļ$l 0B-~y, K*p+2GNw9h1鹧3HXSmBE$].(nƙ:Up~tfn٨c:|!H 8w*YרMF=HmuLC"v(2a*zb*uvk_lG,g6Haz%ӍtqKާGA[W#H}1jSk|Dhi?MvW$>@EgG kJY^z:{>.rS~ۯLHWzaD:'Q+}^]]ܰys.҇Ȓ}2PnfVl+kJ-bP| 8|RPA49 ֻȟkyv\b;$:{$ޔQVn~ tn6ĊM#>s]!j~TJ؃Լyvh !'-{!U#O9ԱdJolT;iaeFիI|QqS3Ak|2.XB,&f q9 C"2Qo, A7D =H8 #=Bs%'"LUV}H +1*MmF-]n7TB5.o\2L\+sĂ<l%%[YVIg/ʇWf,~k>ƺ<2cZ!NZ $ү}smCGaV^K_Ėuarb֜=ĻĬ9&R%o;R9 ~A`hnmSszCeT|QVd`[h-QOW{.R+4ER*ZYQ*UN3Al4E'u?x,AtiB}GlTOh go]Gb$U3PgB@ DC 3$}O UG<P>! ?0?>v89RWB#F g@|FC{bS6!A8Ryj |.ŷeY&娨PKѣ(i-Ӓd1T)Bu<;/;U:bL`IN JtPP6_G0x$'P Tu՛CtV7V})eRWKdyC؄qs?(Hhk҄uxV[yk  vÅ/WEFtskbl2yFRGgUEp`;aNaa5x̛Tq*Xu(vg trxr2L;yG !4 bc^^[I-#L4z{f->Aa9#BYK#ES\¦C5k_ߒ}!DjC0xs"sH4Qsc^BTNΥ pb~Pm`8,ѯS Sjۀ l{KQ(sf!%xQr[^"رһglS\ T(q qZ߸U{۩YaY"ѩ\ -W0i@~Vڷj_ظ-职hj`$0F?Ω> R4UϟjwB6 ͝KXde|sU _hTA|JqZA(<w ^hpЌaS$l('DXy~O >JϤ& r: 0YgQLY@t\1gM(G(U0z N?FFHk/8i l{;!mN1Vj?7/D*W2#h)KR6X ZgJT"E)p$=DcYfO10S)}&O/]P(YtD(M7Q (5b趈 ҼЍt􆩃N5wwe"x|Bv1nnϫkp/xwƔb\ư|/Z̓Ω{cPC(Buj8eG5w3 LPősQ4jH{p#"Z#f.p>NᐇrzY0)+ܕ3 )ߨ(3<~ii!;I6aqf\cT:4L[ i3yKm{ՈIFYZ c2yn>KK{dm[LH;o E٨2b/If2[tF0hNwDreį,/epõ>zie/W{ (҉ϱƗ[qI'wVnpHXf@⚶bg&ӺlT u򂸟qq!'AAR~পul+*.U~k*] W^<^,۞"q>#1QU#, R*+s&L/0MۂKhm/5#A6h,0&/[Jh;~B(zA|fq?z SP7MY~agZ#{Z1h|VISnyO{f6yS(F_ JI ZUbVCɆ^}_׬gs/Hw!흿42ȈyzXӌEbxduJt9+z@؎Z "DrcTax;WK5X'{YKPGvPT^͋fz/j\Rʙ}Og S|(]EOwl->_>CU; W{BZvC!Cu>%O`OJ Z,4)~`Oe9rET?v5DSJZ-}E/v+0k_PRz>,wSSB/H9*ul3O"[M8B{TEGṂwB+g&o.ldmG 5$WqG,5xg@-^HꍭQ3dOwSLkRA4$= -)ϓ+:ƤlJe@#] `*iF,T GWǤg8cꮢP{;3fN/oye3.,oɨvX]ʐ2*ݕSǘ@}2Sբ"ZPOjlR;닁J.XݛRO& WoXz (to nz.ӿFOQv%Y،U$-+ĸBXK\̨?IewbNT#US}Y%XdS`&)zI=NwN7YA|ꭰC1!Ft:bESwkEeKrOqMv=L7 :q -f_$G_[R|3U/q'sǬ-O#=oS33ˠU) S9kcOJ d\ )0`/<&m!M^h דbQ@ xZ4nl8˄*bw8PGԗ3lqu3ޟ_فOd¾K0ItF>“F[/%@~l # S6B,}i_߼1`i=)9䌘^2f8["G8vo7 ji!!qh^UO]bmV9\iRKh .ȁzzg.vUHH3ZV_%ŭ5}G(z*9#ńJG0'p]m b"OHzZJjPFF Y\yψ(uU8!ӹΕ؟xXH֠ C#.qgۊ+7.ZW\M-h7=M"pk;_X'!.~XB#rdyO߹;[tܪ%~MOU0 #.UsC,0 1gQӝN 0SUA&Mi8p>vﺭT i#ZeLq SQ I:Fnl3y|S.P7OrK޶ZugU~{oii#5y: 1Rt pI-ItFt5?[8Պ\ a%8ygik'O,/a:S 2BFk@H:й;嗝%d;zrR_r1g'??Lz{&Fs>/k3?M4y|9,jO~_`_($q-vC`Mql p\8GAgJ4tur^@9^n Kr _#umދjDnQJh-*Pb&mk͠LFIEqp!bWol+x+hJ3hP]Xe@mii";F0xUQ9+F|,VH )vF͒]xXCe jpuh- "iDhioAixNꑌ 72ᛆTԭ7~=yF>?KH~e&zhWLgUKR[-\jvJ`ekK&AL Ey^NOJCOEFɌs_4@qAö30ۯ ]JA0V4UxXC4ܕHeA/BOn'(IBzb6@c+9T*(nprJ K;sWn~4Txa;N4 W.m^`#C9~myޏInI`+-/c {ѿ4V4QiEΦbz΀ |7amR ;ytµya631i2춉O/X.dZ) u0O4*%f&ed.~I(ALC5 ̙g =&."+Jmf`ZXS}]FNh^Oz7iDKZ.׏S's, )KQܤ >HiTב2 6OƉk˜$>9/j![6Ϲ^H֪xfo `rR|?X e]0Q_Pn&6ǁl,S (6o{Q$=Y1Skdt_xTa ysQ){~]/La5YU\A FAL*2 -3ͫ1۫(vXllkFvNU\ׅIm(CCc mH-3=#Ooϟ䕤7|:l ĜvBJ뾟7$h*4)}W8KC`sFմDKn[n~{RNMؿ[k!{۠?ku;c<bNF7ԶW*d;{\gtz8R䝴[B:y PƴG7C?\eαY1"tYhF1~M Ngg(-Y\e9mWxL ,k 7D᝔ ʖU<խZGtplu--? zKIt0}<`&@Ȥ >rW}m"t 4U<@̋9oHWh,B:lI7ѫ3BNn6ܛ|10^Z #m6Po-r'UqQzɯ{0pN;x W}`ή^߆z*,L ]qz&ܢo.r &v"mh1`j~ =ś|/dt{1Ø#Poz~F}lc*v׃"z8'[0G=WwfK~"@&6lh+b=*e<$/~yT',+S:8P!Wm64JБA/*Bɚʲ=OڈzO5~젥'*JA&2;?ޝa W(v '"r'7f?  ^"4]/gX{XZ]WEm eIxCFxg2ȂLm cV1WCUAB;PG*0sRP$4ɥ~`c_8xcBfm \,C+B]@>Q8GAֱܸ rr h~dM2[ξ 09gf,4njzu%yJroob_^=5dbdk5)!Ń D{a SE*dd(i4^?FY8 &+?d[*,a7}-'mĐ%1Kg[ %GJ> (c՚?%۬;JՎ˛x Z]bfAT'<+ &{Gâ,o`)]<]Ab tj0-VrUmKxaΫ92wx3*P~-uh=`_=bJLSQ|bFZ-z|*A=Mʃ )QA@H1#նy6ec<֫28uU|ie/*Bؘ]22̑6ڡ5N%XUw#CIڈ~ ><=4Q`bn&tx5;+H%o2Pιvǵsu+Lkjwm"iDzF" ˔Or5Ֆy./]Xju=f;APDGπN k@Oʛ.ٌIYvNw }-0K̪_J3v?IjKDND q8ӫ5I3J\(mT6E'W/<׸y[˧{†( .1'>@L.9 k<@~VC_߾s`1E^t~)E]L"ݎyے>o1Υ|V|B~ ˧W c`mR-` È,gR/pzHd;[a7<%A,7YL ]q Zra^徟uR)!k6M3^2~ IcO1/`A-d  teK۱<ݗfeg.OBS :܌to#䷽?/re!(Dl}7tҎ (^l?@R,qr9'w?x" x-!n;rK,tL)ZNz8F-Etť_G{x\zwkf,U35oUK[ -E'+L.[!N."hn^2!!^NaxZ?٧ l^-T-q6&k}.*ei vr0\Ēw_FL[4'iscּ8wI=,̟.Z QAS= X jgTAgCjKE|>P$h8dv1YYCKxvmVF~QK 蠭$Elej?wp6Wr0w 7MgJ(?x e{j -AP&bv)A{KE?7dd:`%)RXof{_®V+0,?L%-kx7>s<~98Yc*M'Ӕ&MfvS+qj/g cm>DB"NtG4F#1 E>@MF%y h05_q܆2b<PΛwZv+p fLe$bXn=j꟩g_+E5(v(Wő}˗و/?Oֵ7ܴbQG}| ෽&+rZp'p&랃TXY1*,+p:Ԭ#WjICq\qEb;F 7KXC:V*컋|JeeUsQTz:N !Pe7݂{HLMU:3i]LeoPE۹/Ǚ֪>ET7 v@iNs8U )<HVۦ#e?yw5ulG2S<4] p@4kR+k6To&=f*4ᩫ$rc oR%.+OH~Z P\y#vͤIs~c=*=*7c;!S> ;B@<8Q}ve kRٓ2pi> etQg(őLzX mhTkT QFo|]J6+˰s)-cbf K=;t:S r=ԫIstL>/2>h*+-;X:P`iJxI`4mZQ7ah7IHz,#( %B;&|5t{g߄L T)Rrwi<3ee|#wGd{B {1(Gl%HS 6M枨Nv X\ =kTq9EҸ^kAQm%ԄsFKz?#zCOJhV ECrI*`)+1GߋX/"S 1ijH?h?XiC5ʾ>LA,ai?9֘RyZ$`MPy>Gb+W: l-k{5ydN*fqa;>mHѡN3;WZ<#׽;`TT>CwnwաW yvhG? 20V8,i*L[֗LH0}݈BTaw q=r*_\rtzs6|;Y(萈:K }&X16|2-\wZ;׌ u$\$V4 Pl+/4GC-̵9X`d-gSN0IԁNO;$ xN?uSe3vSHK iXg /liP?{D b/+=;|[[\@JFu4ulax-Ob2}z\W5rR] D06Lș*ü-H^B,]뱐 >9-fN#Ynj6h#Aa)PC䈬kFE]!Ԇm7FB*Brjj䶥jUjc'esOx4nwh61.cMJXaq7bͻ .c'n򂌕f / R_'O؜`b^qoվЅh>:Brŝa{dr$i]1!7|TD8vVYnƵ=Iyj-|lbHf\CĒXf'uz(2#KW4<d#eJ|hBGrj4՚BB~\m˸Fg?4dbԍ h=I1k|OZ4ݖy31>oϬa|VRA ѤF4:BV]ѿֻ]$ln[cqS/y_e' -d] .\-B]=gblH ::sKKa LNJO|> KQFA$dPbއImE1PS%6ړa֊?]B yׁRm$?^ R>b,h':r՘zG37(:ND-3wqv`nԾ&M<ĪClE/mTSM$1 H(?Dun[?Y $5v@:֓1j\6&1Šaɸåklz XM/hq 43Oȍ}"_puNϴgeY_cqjd:HqՄ9J!'LFrBZ=d1/:wXo䗇wWu9k(CP@1%( H)hP%!i<ʹ·MrW?kPL-eOs)ɩC8Y5(}S![vŬ"UB},sˎ(=vklJ.%  +sz̼q`\n1anS^ã)AsDb-h\6Y/9G":=ރ QK mO]nltۊ'PYpfySȇDhD%eVFUP gXVuQL'o̫~23Qδ4GZ~ئ̝J6"c-^Ep:Y4v90:Z#Ap! /cm >CKi Y Yn)/'bCrFLhAfݡl*KPqe!@;o7$6[5E=7OX.Z߄kjO18 ?T'QWCO@ff親p*ףKf\A N<5%@!Fi ;b-žWH.(f C&(y-T[Qci ٘ 2aGuֶёʁ19`* \4S(h1Jx:"YN9u:.<4˹"`1}4hx:gCfnQhx'8H.̒))&SaW Gd48PU{N$q0 WY)(A^w]C!:VZ﹁ Z^:xƳ˰\]V%I>u* o^?0h] LXy [!%#޳F2xIFVwz:J\GD+5I HM'J;0ܙK<'qC]īj`4Rw!xٍE GiC~I C[ qn}%= /I+…_s:e#^%?mȰY^]` -@]%Q#r<B'k<O;_(-8J1㢊cZjئF}IdBGKQ6$kyW~>C÷4p V/#ڶšLQ3^u 1qǎ'fX ׫ 57~2Ngד`'[@Iۆqgk]fW,MKGn<өxήfPqeKq A@cW3՚4d3GDs$t,%z'G.I񋼊/vMwaE\@kwukHF̩?Dӳ E;ٔYcЛ$w [.۽urǡdGp{9lGN9>kR'x[G>k v-a&ɫt<[qo>u."]B}bpTPX1f=Ti,u ˣLa.50z[D}scNjCUe8'ѫwÉO3'=D>7Uf;<hh &'|*%dz#t#`@!BuǧLHA|g,)D}ZBOn5EwDU vIeI?;B)8!xK, A~?grr~_R"jh딯uEJBÏxhL*7w*.nDFYK/7זd߂fe .5 ۤ w` c>Lyxb{QW`6J[l+֍<8xx}v*Zbl@= f8He#m5$[3E#`PBE^ExC[&ˁKmSd[tꒁ]X +et8i@mPV_)TeFYaTna.=M4 ִrRs~_7udQ5Gۨ2? ء߫ye"HP -$zk@.S( TGd{]`upĕ` E)*аz@_â!RxoYq&B&/5,9#% kߏy[s*,+PSwaDS};Ayo+͡ӹNvkY ;֭DW/om-i:J&^Z-P#sߘL Ԓi@}wIA|T.RY|lQ_ ,JujW0 EY[5%ְx[Y59DČ;Lt0xs뇇c@v{E. nVF.Z.(X<L9wD}h$R"ea/Re7-n{>t(wTm'`?5]D[r;΅[)?Bj0E`?rB46o5Kd/Bm7I]qs8Ꜳx&^Icc!Yܝb‣)y]47}Cdˍ!")COW첄F|r,1va:QO)K\֊ 5fyPpʺR&\^ޘ0rѤI4[̬c3Q )b'yW$y~ }]-_z?B3w|>-Ri)d>{۶c&i' w:Ppr4;'F)-qp(Ū} Ca%Ұm~,,߼h~[aț1:#T`Ϭ]nb=>BmH&@pnOOYxb+s$E#亾#zK<|E9~h94I5zXgB,QEsN$O&XCEg@6iLQK5D埶k\vi!-$2& [B1`ZΑS!sLȚlQ{vq Syjstrw+3&@ B٪}reCβ` l!q$, /j>ԧWgh5+<1T<を?.aU.cp6DvS A3!*i#,[MI8c/M'Fd0"Z'^_3"o*L!({AtcA QH+~ n9&H|ma#+den'w$׶n($wSeVq/+zALpa,Л΁TXN005n=˖Of ũzn_,,47Vú@v!cf0kB3/huOXu ĠJ5P ux<RߢcV_yJgiPn*Рjp2 -<8Eb@z DO7\+QEY>^KG;I2͟H8:ֳ] /Q\aѹϸuv&ab'XO-m6F] 7uL7q*Jt;g\6 ښQvrO7rm1ةEr1Am7ö|*?wAn㉾JoڀV6$ hR䬰P^B_Tk%ȱJYm.yՍ3M,ʎ~k"H}xUSt^X:VWJz04"_-;Ӗ9@DI"N3UM8~O7 aG}0ltҟ΁ew"/7ٶ YZ