sssd-ipa-2.9.4-2.el8 >  He U]I%NmI"}*QbցY*E{B ;􆥴Ôܬ#ܢAТBwKWgK~y<^$<^,_J>Bv/S_n|`8U/gfR,,,隷&B2lOnG=4D*4oB2{/a1kRcsX~랽œ殭)tgx8R-ń_MmCa/-ѱgIh#Qc LQ&84^?RM'^5,q6`D?d   4 17? . L   4 THtHH(89:i=GH IHX`Yl\]^bdefltuPvwx0ylJCsssd-ipa2.9.42.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.eaarch64-01.stream.rdu2.redhat.com CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxaarch64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* K"S(^ M)-AAAA큤Aeeeeeeeee+eeeeee1785d3aecd6af1cec4e15ca0716bb40f411b118108e4e1e79ae454f1bccf07739f96149dad048fa5ced55ff6f92ce137df3ef9dda5fb884eea2bcf36260944aa8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903454b87a3c65910aff5586c3feea5599606a9c66bab0b3b94bd70e613cae08c6273fa3a376dbbdaeb0d85a63fa850dba8b173fd7110a9d76c1d7cd701b11fdaeaba049fe5cbb36fc98708a9761cf683782cfb51e6ecb59b771c68ab529b349ba7507b2eafe88c3c67c4655f7b1ebeadcc86333457a29a540fb0638dbc05f43d116c0f6fd8bc91f097be0c15ac15c74714bbb9e03626509281757620a70680352c../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.4-2.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(aarch-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.4-2.el82.9.4-2.el82.9.4-2.el83.0.4-14.6.0-14.0-15.2-14.19.4-3.el82.9.4-2.el82.9.4-2.el82.9.4-2.el8sssd1.10.0-8.beta24.14.3e@e{@eReRd@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.4-2Alexey Tikhonov - 2.9.4-1Alexey Tikhonov - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.4-2.el82.9.4-2.el8 .build-id1acfc9b7db8ac1820f81f5db433089e25a3161feda9910cd34026f8ef890a01a4669dbca8aa9d1d9libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/1a//usr/lib/.build-id/da//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1acfc9b7db8ac1820f81f5db433089e25a3161fe, strippedsetuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=da9910cd34026f8ef890a01a4669dbca8aa9d1d9, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)99PRRRRRRRR;R0q#{>/ A#`9z)hhޯZ~Ҁp54chqK`[7n54jh=D1l|O -=aYV9Qw:P8lXqfڠi+k.tYܑ![qؿUZϬ|ʄ'Z%Ra /´ogP.0].8g~[p ^eӔ-5P悴4oc6Ȋ1_>V' -Z[1[Iuv~_)ci 8gN8E*aQ.Ex ƹKjIUV/{}rX8E,B3|*svFHmLDG8Srw5LChhSgxˠюXJuF~ Q=BQY Лģc Iiu._ qptE궇 LLnF0%>>u輶w cf5E](Av06ay]VNZE@U7z*s9V=KFC%L[prc̈6|Ϡkp*Yy H.-('i8v Ɇ:yt!Fc>؃(*vqB{FKץU*W^sSH~͹/YJ@y+0pR+e k?ԛ 2/zzU>_yߤ3bSVxqE>A+#DdP8Wm`Ov0&᎐0{{o3y?5:iw~@!, NTD-T"a8 %^pn4V8mnASR|ͶFm1Or֗FOՅYj:{ uX5߾L)nPOD., wK՝F)`"#!\~tT}̉b;}LsΚbWܾND̓l)xW{R-SDiKoŴ+9(ￇ[>@mVkQcڟXn sx69Eآ ?5ػ*D:bwJ:FA+CNVjOy=ieq U׾_h ?3m(! ]f30G.e$4+EPrt|.Dm$j 9Zɻ>wsmh$p%4gKo+Od %t|R깪+h~Ρ4<»(I_LIټIB .M [+>ZPm&+[Sw;N]tB:8 U*9uD"h@ԼIm8ҒTFn5'jĬx Dp07=<˨m+ZƟ`%U;i|\wc @D.6TeJC<7U@&)L!kjYp?G:_*4fNceM/ *:eKh&d9hk`,vZ&Hl5<:vؠB܏n1py"^CK80S\^Y`BǧnZ:,Fi)0,T|)7ї{1qyܻ_Ϥ#$L'c?={ >EGR wQ@D(VJgeGSWl5Y3Xѡ 孈29{$L9e 4$Y2Ev2"V/ +=Yכc.i Mtچ_LB@vvʌ>3~z^c ԹJ2 l7-#ITgo !|9>$HߗG3QS||G!觸a~yZBx"[ŝj,g1V2TMH =W#F(|dͶx/II&`#K"'ƻb2[Y$ T>F.LK+|l&!ECz+:l~D'ǘYm4[F8 `4؞v_~m׸B y[<\qGsz@ԈM"\!=M'mp 5]L* "'kZ{'E/Q_P 0q );3 C/u4-0 qPmn9ֵ "7zW`1}x/< [b1klX5T2GphX]c"ZQof_S!o-O P@4WlXڐ=ѽ͡zYsĀ|Q.!q@'18Wt`DQL]-ǙRMϭ;#vLj' åA5E:eE6%b]j58"^+3QznW_f'܇RbW3o4n|a_AMɀ^GƮx7ba7ݸθtD/,/mf!DSsi3-|3* 33@% E_r$@aN䖎7f||Raa_ӍmAa7Q8rҹw rH3 ħYG.IE.w3C>cԝnG$F۔BVԊޚpan)4hC =H/, fA$qP|e-";EɬĿQ -qyoRGԠP$mS~Y{ASЀ mJ l8$'J  ۭq5o5?ϥ*eFe'(ߑ!(vHۆ-@9f cy1l1^6Xx|k"Yb>tgTLjyz[:U?. m"Jv: B1Bf1xTF{R-Ƕ+%( ,UDz5НEcq#'^MvVDm8-7fT!%[rꡓJXF Ӱ?Ξ!ѕۀv[h*j!a4-h/1[ iWқ}LU)w9<.shzN$[Q.]|Y&!a"L@D3$;&T@d9[Iy3 }y+@%GB~/6g`yc'G`am2)lkZnz^3|h![=?A Mp6p hɧO>a ,7 ]'![03p[e7\5ka,AaS(%TqBΓS)K{zB|RTߋ1^y Σ^R،ntTiI1ep!e&9 peU ` qQ+x)go܎ز!ȗP~YTUSHkRWxs޴|G&oe 8qf_ίTd%\L|= ~uZSs2TB mA`XY2`[rI!g4ݬ[F2% {x0ɪ!$Τ/)x0>oi+t/EgUhXx9j2KM#G/Èu4wAPBべ댧rygzpʣ6zkQ=&sTx}eǵp.3:k[LvKFbґۧd ]`qM5=Hc nq Ԗ~I~ba^ k=tjqH4}eWft]f;-./s\Z!~>No>z僻Xy7ڑm[r#ZMi?פ .]PkP6߅0%bWL ]Tl,wq8E`t:a!u%H'u%p摨QRu͂lw`Q!N¤|,$H72"]V}zr^w[DSvRЄ/#m(k:wٞ*Up1KcWT?q gozWG!nWĦ jD 6&Q x-J,N' Gh&AU-B3k Oz+G z[pP UȪL{n4^YmTR4k&16MAh%˝xE'GU2dY+m)UnL$!屹b% 5.JfTӘ k>hMx*=Tֆ,56I@YOv0)HWh',Gvz^`u+%!ad ڨ9I A+sjx8KBܘeTy5f&j3mFDhW{2wөTю v, F#S074@8A_f;-k@?"ǸLYHeNQH Zu(#ku;g#}p%4}HytjY _0{YV\l<{gZ*(eӐc&AdU\jZ^9sh(s+wv5್I @$%+ti*y/UDӽ)5fJ0="O/ aDG;/8jٺ`enI5mG'SJmcJ~)/ [~_]y)a;0*1^0Qoxt զHBEٝa$xpfPLIoo0p_&(#}_Vabx{F|WNGS=WJinr3"_.cXZn;I;]}n L.y?DyhU(u67;,? '>82)H.zGRJټÐ nGqU%gt1dIWi/Q}ϋCN OxA bjHF?R9էAϓb#p?^kءJـd.yf<Q~CV|ƹو0/{tsĒ`oȼEONN7I`? ܂lEp~t;ak>N <^S2HBSi ؄;+`cI Vo;`[nЧBl滢ߩfZUպ9 Zx ~ j vB8\H5W8y吁_5^?(($$8EN!N2%"#4Q29}K;o ~"(%'ň"qJč@RZ`s^&]ڷgDBAJ) S.GQ rFrU[锛/C` Mi̓$G lp*N3~^V("$ԞP5=uȍpJMB AEYŀ#\侓mOaቴU+j"wF~X$'p 'ۼ EFĄeH0"p3 Kȁ So"KH`ӭX%T7{LlG==!-MbF%ֳmSğCA^}B\7ђqzWVtb=.A*h+fDɪ`OMӢ$i23S[ $ST#kʕ.a) Hp7X *+qk?Cfcbvc;# u\VAt>nj X9(vxv h[Od4\@S.h6toOz+8OPXogv 8>㉇ ܦ|6uϏ棩vdOb1Zx^ВWHպb(;IaZT{OW*zD.[+b^,aw^ 8ɸ^,kaj⿜w>2ڣȂT6ystT?ʑ>{b]>^W3S!d>H5WPZpBn_*̸-=X>PY>U*_"^eicMD %LSV\l ]zD 4GY^{٬CV,ٶ0N9xo䘐TCc Q|1L Dw? YcUSl+(dIP=d c*zS ?x Y(3|dq?W!`GG*q"iZ nO?̴c~1E(/HTA'](öɯg謧o> gazK|*Ofs沾h\8hnK'm}|"}@*udm+Hoǿ'i<sj_,@DSLlƯ+&>ԣz7؛@M9v5u do)9j+-m;EmŁ@cg"7x-:379WE#T}P}vD~֐x4|ѸIgH#yrF"~nRyJHlayCbn/nJԔKz:XVƠ,u8xH{`Vh[<+, Jx?vmap ciUPvű^Mt}~|JsOX,w(E}i߬VlI?s_rT1p> HR T!冃GpH4r.r czمߊ_t_mv둣ē ,)d XDPu =iݢDo^]ɷo!쥚Q/i9~Csfc&S\F0,O0 1sa&҅ x.eAqo`$oi>AOP5{u3׾9k2]86In+8H\C6l14OQx[OVlLT3PסylvQ?sp#Қm9tqΤS"=)zHڹKy-'#p$&Nφ$8J'J[kQC:"WudI,܅DuĿJ,U.-:+ NwP졒H7!;jIj&帼q!pZgQ\@jucWeFa oV^|'Tl:db،=&E/G!4Y&LMN:}R_33 If 44 p\F'XDX| :qiW#f6p dFfKH&:eܕI*et xN>U/* kC}rf[N΢bWL/Q)s#mz:Q;S^׭+gf@XE2"rB_ {l(E}Fב\mGV~?.עNRdz:icw#\t"n`҈D;>"ŗ,Fl(68aШ%thn!wY3cDa`v\lg{#C?A0KDLz22h+/D:`*&d{ =~&bщ #)HLP]Axv9rXz۰o;1z[@YzC1wʛeĐqZj$_`֭s0 c❋k>+jO_gLjsG'_g'}DfrnWk}-5U''8NBn$:托>FLtDJ?Zze=cDCeb`;^ekŅ@Ew:4_m>e,cЏ QcxRP{5`$ hv?X=V-$9b0VB瞩z㕕l* GM'7ša8Pv]c:chwr\~ a\>;,ט$:AOz eg( R )۳4+;|QtK+tbF: wى3y֞ntҼ'+?-P2]2s/v Ig3C,yɏ܀2c-"+ffQc!7 vDu3B)4,kC-Rb2Hɸ,y2v|<8ej\_pqX[AYȻ%ѻdKG}$1W %]ĵ,2dn s<>Fd%7WTXDtS jC',_H>d"℠O^&$rpBۑozqctA7X\v㺆6wy|]o-`m~F=q+}y@id|gsո|;KJoL YEnL!PRsyY2 QNo":^$bR[E&]꒘KKeq<7)_iu!SӋ܏m x TL.SU_ɧZ#` k ?YXom/&"zSnQ]C$K~#/l6 ϏNkt&b E-\ԝ_ +3eMMS6G yecapX"Na4V %6!$S lt .ԑ?IY|?8xSN4St 'LOsCXŐa D,7OzW ᧷*NPţpܫKh'!m`'3"#zrS#eĖ،-L+QCxfG*So}Nd, yi]z3{} $TJ3 @ưgB*QSpG)!-ʚuxk+^7;SL"0:TK>1RH<"s(⫄XmOV5noسME:A.WE:{}$LĴ?j xȤS-\Z2"6xSS@KlpA;fUi"x\jМ֯G=^+崏ԥvSlF!jZՔ M{B df}iX1%ԖIY1Y|\ɁV¤܂} )KHenu>N~TAK-˗/*4]IsYIh%Nd^F古3^-k8VO N+ ダaj4@쳅}xXT}G:*=IzJr@ FcPI9 M*Zyk}Ws "C{͂>f͍f"!'zl7&lM{4I[BZ(9B !KU+fuh`ƅIS+j($SCw;]h>@/ݤiw1[~V`rBI/b jр hʀ>] j/+BQkcEڼ aeajsڿ!yV 8?,cO2VsâD+!,l#V^A2:OYzurhDzbQTGXB%߬}2Lp[Z{p#\]cvGU36a9Y=N֫l(k ~ 2NI'#~A% 'Ao܀L2=c=pTYr%5 xV>gß Þ#E-bDr8Mp}:6*X aJX8)ېnF>bӾӉb 5<'FJ!r 8;c:sS5ψ nLʃO^a z;j̴27Q5Sn/q%lavqOf럊;~jOW&Tjzߦ +Gl0H&a x_I e榅#K?WfKWqStJM>#pְri~&~3nD~+70Cw`} & ,0:yf9>9'KE` W-,X=VD%ｙmݽIn 7V jhCYfeI9>k^UkG5=f9S&9"漬b\ՙ('}<vjD"7yBj&S/՘Z zF]#}Mt`2LT,6x3>dR `{e2|4`H1n*.WOtּ2]fo/]#Ņ3ˎ,b@Nz4˸$*lӧj#RD/8R*@͒!77{ ҙS\C"y6-|=WĢEn:vUӹMB5(Z<@He 4֖kpdԊXN2g ޢV˗W}(-#cxciI(mSs8wK)bVNJ<p]%5Ur}Er-5skr"US,"}RFKQD}Q˹sr!,"&dv-lT]ꜲtiTH5wf{AL}K؁6esGle}q'Q@mK͟Y}6LOɲe1 `I(ujzLbS_E<>Sߢ{0pjUUgGp[QR[r zL[.RJ?KwOwۜ} 4WI%Ւ(SՒr݅ۜ 5&?4I Y謁ɿ~Pˈv?ޤ5b΃@n".=u"!6ʾI7uf*ࡡsg:B?r~E'OT}Hڣ.ood,4!UAFbQ?^y9W%& >iݕ۬!ˁ2jӕ*vBI(װBp!3X۬3nl͆7yJJChEʀt+Լ'4hOoϷIPc=M++):Ss7Xta͉ɪÕ ~^u5Q.(^D0Chh[L Wgo\  5$ݑBuÑKІ"߽PT}v.;'n]o~0A4"}EQ&jH=.{ItFs?%\l~@R&YdÖHdsLY8z5<8H s  J 3'+jɾmRK}`o!u4MC/ߗ%rΦP=n]'Bi+D _Q|J?`n71y rGv`R|.cQn4C ew!wn#\Ǚ٥,Jif9[+ݲ}z&'Nf甏MU$ X2e P%Ӻ*EB_RUbjSr3 <U]̈́/k(pUV ŞpНz@O)yJ?o 4]iQl֕%87Y~9r&J$| 34Eb3 *_s5]kߎ8 ΀vQ K )kgUfq]}0۬u<cv.D2?e?*]٠b.42,^.H]zh`MeO?*i=T!l="&1Txxb"ڃb }er RE4u_Rb,W8jNxQCRr]8фDRn( aiPRZ-e6kd fkۺTY2Mp0SvApwFkRx*#{?hbd DyewAɶ%WC (- 2nͩ5|]z(CucQymY6 !moSz2? `tX|k&<1-L)Zv`؂D|3(L3À*)@iK;`痮w..[ŵ8&fMb-:knm)jmvI@k*E,yc[sOVPw%RD8T@nc\%?9 e 8{_)hv=D&b*L\'0"~p"A\`Q `$olk RPy ;0 ڣadqbl cʠXĩCLn||xe)a-4scQymo}S9),}Z؏}r[=1/H5nV+u7G w -#p ,GVsFAl(*|W,-:QƇ"z䟜& nzܜ>nT٧4Y R'RqZؿf ͈]Cw d "RXJ @PT IJ^UI}VSoj9ņ%WCl h~O 2Ĭ1fP 2^ݖlc5xo?O2e*sζ9?A)*k37 ?zP0@J/M5X&Xzh;djU cJWosȼ._0 XX1%7zgں6T:YrFh-Y<ŗ2 1e=#!1 nwv3 o\|i|,I<FqczsB kE>qRepu~:$JRػ rQ +4.?C̟ҡn|_3OGǫO09Xhe3 &HbܬEg" H9>yIl1զq`90)r&˂8囫,alro>a %Xטy14Q Sk-)Tl)x$G(C}«R ȈR.á<ÐkBBs&ҷaXp꒾*Z>2_\еRFm|W*lӼiK@TؓzF@̷EylқW :(; CV0\Gpڅ3tlF[@a47NvD!VЅ\AOaeSzYpc| ׬Mn)vt!P_%$ VKDp*ZJƆː%\3 i 7mBKeA^^ # S>dy iAwmR*pg~~҂[weRk[+gpm.C.Ʊ*[ &rbePuUMMSعW,;e pH+LE_8@ˢ v ]+uBe&^༕œ/u.2=7YPC#fTU~A|O𻌘&17r=!jF a:Sg.40@_ ^nՈߓs9d6>-%bWt'|L>61XY!L_>`MxG}ޅ?PqL4 ѮMjp(H~⊊K0j~jozcNPb,הpȀ_lgq^h[Q3,Ce)%N,&-Gh~ jQ!KdL}: YX>wu$x*@A>6:pQGss@d zD/Iϖ?J4Z&ʾpyf6. VtCB`)},JǓ6(}Bo̔KZQP*[ [|#B7DSB vPl&' $w4KVbVZjb(KMT+}g0\;;UPӘL`I^8T3ߩ5m:Hm){ґ[[YMJ<2#_p0_ ykJ$H޸_;d>Jʖ3M[:U9t}+ ?l~&T6Kj[n{ O ,gV>RxIŋC@ݧ "K᐀O<%)bAɩF>7VJ()Kd_ZӺϿo'cRl~B"A۶,= 1ill&7ΛUNv4O;s>JQIT*^Y-rlcԃ2u1w&8@-ڔS߀T .Yb `{_ٵ0zp?+v /7/ar2 ,XCz-urrw1%u*gzUƥa%8R%>|jӄ- >5o2x%sFo=*١P~HA.8(M`[u{wsf TK\^J^ ڛ4Z4a lF(lZGo~'N)z"3{'pӺh־3a|29 ;n)+LY}'1q>#L]L9Ty9) ;?KNMTgU|SVXk" Bo91QkglS4\{vGͯQ)X^;a]xCNyPCR(Ϙ|4huYb(YrVQ |T?4 {aSI CQspWﵙ w#A10|}?&T)}w񄅂똥cBBА^̾{LH>̢OF9T,|)L6P%.J3H*\EbbEiۑ&_2Zӗ2Xo)BrxG͔ڴt6X Aol`H3u2E< ůYci#a"Jk% 8pekHX }J)z+0' 䮽*qd[nMn\Uj$tjKI j\Cai`J[@R^ ?icmhn-Obᜫ'rPKa;S 76)w3;(z(~|txc`.. XY{6{IB@+>o:pq9v7Bz9bk +ر^,!]O ꡘ-HOtĎɤ3k!J"񔦀d E%Z/ Nh!xOo7a@ 0kU73ۙÔ濋wX]\g@Dܮ5fVv"Y!zHD w T.o{ձϖ ƪk?gɁ c&<+@e20jW;0e] 8ݮo Eia: 2g|a)t2){T,=M€F6(V]~}z1WZ3;&U0}u @Brw< lpZtؖ_^맇^=,)ƺ-agB+D$?g$360أ5u6ç[P( AZpۈU `YVB"1-|sزCsB!H2LcSš۹Ј"hPPZ8 {i驭>Jި(UGFW'Oh)anSB+bV$#]|ShGm !ZPU驏&i'f"Ye-vUp\Ĩoţm}7e*/z:z&fV[.hQ\V;2޸ ^n FOD6o;il?ΰrl1*ȺÃUe BgTiJ-$t3Y,1%D홮P&nv$2HLR P9B_܈EbL䳳rE%@'`O- J IW^\o|'QAAՃ戀T$e!qZ}Ԉv0iZ٪UqU-x^LtCw S"X #O5bi@8h:ld_U24 @]g/0]8R@.|Th(z#_+_RǸFqQ/+ j3"P!s{ݔf͓XSȃDuwUXBpofܞ^XۂYqچCfCUVc~LL!"#)sg5ap@h|& ^^lxāf)@O)S9W۫5x@5V:nvW!sw=߅nE-E|C`4Gig/۵Z e>uAŞV rR&Wށ1aL|'8A) -;ulv+ucB N=xǹ򤻄?qfզuHw7o L@ K际ttWoETlXH6A VT>+J,!l'|HUN0$e s@ITx. Y`>w%g^7U]6JLKy#n[M/@z5ٰ. BCEz\bg6&^nn M 6@^{K9i#'Zl/BgBquơcwOQ .,vͲ֝$HCߵ.pFq/v,Xp.g?^PPWsD¥{=@BhGj繏fۓijUgM62 mB(@Uh7%zDaUf(|G99` \NYF)Z5Q*'H)5PD%IŻ hMZS[hxd7C2H)y?haB@Ae$&aN{hXgGCԲM$ҧ=:[C%oPz\>[KvE@GTt!ߘ#$Q^APPK;k1+A8L +Ō/A~**-)Ol$;ӫifa VzUeB KNawwAUFkBir8IǵiiѨu\iڶ)w8/Io|/1"z@|ՋN[SP=M#' ؛1u:=5\zH`MjJp:~FwE ֆhE{Sg WBh 0ݼh7 Zsb_/ \2\CQ3Usu<J+TfZMg4aD⬶(뮅}e_<~W{V1]BE/c\&g d^}JD^Ȳ\gn}ށV+ Z4_).C(:,I H!^OHAnnl%Q(hcA1%'Vjav+/ld a 9CԒ?mnXl-.z`*1@L֝ۆ}aA5ImMKKwÅf.gmMHZ*#=YlҖ|ܬR]8 `W eGU٧[g|'Wʃ)62nަ!\)BG(O2-)G\iSǬVҺjYų↜Ϲё+/$SǚMtqS4rHPF̛*_.[-M G7{f` `Zef돳\r9a%éJլCd#`C#縨P e# {#5X=y?JљS[ױrk@)z 47 6fk!];~WK`իYa:)2H] Pj\h,"i z_H}qAaz/wW?p+n_*0"ڧ~.o>Քn-sx4C3Bݗ%9U6K 芪Egm=T +0:(:oK \jظbaFlq({>a; ]E-X!(ϣŏc6/7l8[FI`1qq>4y ݵ=MJ:hZ1 w+WE4غy5wpcV5P΁lz{2B14aBiY;y?˚P p#4Y\}@ H? 6M9i 2N|>Pdh \#5^iջkSp*Q>a#=6+syg&7ӚOg'Y|4]dOmX3|av7Fz]bX@HelBGbUvi \Bv^ s>dŞ0U6|d;N*<13~Pgkzjz5DLzgC…+/6@c JlwU+g u> ᯙڈf9K ;L@ta7WCn5uO*XoT#UydwByUݣ\T~,3-&PUpc :~tX_w&)CTRNK"mT-8U&76TcjMӕJU0I֧SsJ Ji&+avZ1VM3wIA.:xq'iy2eUc^L3졊uεXY*1J%,-1OjHB١ FS`Gc]$RU._j]-:с)4,"X S6^@.mq#6w_{:U2O8O; <꛸&Mi%ܴ JcugJ"r {ȿW,CxZ z(9>T|6+}p;1I±GSwO$AV 2")fhc&o&> VAx,a m\(a1-pF!o9s D~(2b|{*4 !#r+GÕ!ח)pMmP =RH6ݲy y&>UzO;Dy:! Ab<jSi8GM+(qfuܝbnP#Hcn4@;/dc8T³3Չ~AZ_E3@%$8=oP⋘ Nэ^ٚg kpZgw (UOG$>آK޹e{tطϣWW89r`G,[7XBNWmaC1 wPjt)a`Ie[Zz_a]hM"|cF9G! .\i.e)w$x3BU+A!s^mCosL3ZF|Qň!4"w|Y^ԚA]yzY $*iٿ, .o_ .fÔ =\, l6r cn2gA˖⳰VcV#bgMMm l6EӞRBKB5;lQ)g˝j1ufE bDczpG(77{,6ddgF BF@P^0A74$H*t ϰPi.c{bW]j?ij2q Ԏ*#)ʸ\cAI;fKJl?zެ'u)(3! 5}Phs,g9 35k̠N(N6;fCL[ʯDSWn?VyB>_i~TJMP *C`sw3ޠ.esT\"3o]DKy.k)qj`*)shE/R΁9 KtH5mAhALjEIf Beu83p{}zŠ>l] K\4Zf)s&69g/s_čXg *ۅ@3lgF.]-s˚sM[M[Gti5Z&6x,go}*?*tH" ^w@4^aG[5:Xm"J&矒ɫ!HivPz0{yJW%V ;";b*\nCF]}AZapĹ/PoJ*K ,xvP *9O\#A;ȬnT<-A&ǬCAn0]6 SP#>/k8z mqLsL)Gb:C$_9wG9ϨQl2j̷QY/g6 ofO-+vw桩ιK}/: D-R5XcwPuLbF<VkP}Mʁe ۇff$Uzsu?̨OٞX0 )R[9tQ ro8 Z\]@8!kIDfzGeUk%Yp:bֹg[2߁_"v`]]XZ˦L>/^4+]%_ ث;)lIv{/Yn9it D` )u׃?n¨&J"v\'K>xWaĸn~_#_Hi6:gۏ'D&;AKẂ!{u ([X@U U)+oV53Lg3Y4"5=-s04C i3A\=qIa*I֯#2@`7XtTHGBr}q dNuIP9ަ`3GAG vͬ`Q OFz@o&/%)4 Mp@GkCT#|) e_Ky&sroUoJ]s#7.HU@f0"U lXXv$U˸3]ZG&Vɖ#n0Q,6ˍJuoE):G$|Ćh]LBZVah )D.6_]:q+|, I?Sbh];c Δa߼F8RCj'%ŕ?>[L] nCL.u ?;oFT +ZV|uȠC4c7QBGnAOaZ!L)#4^珦}2ӼI-+a箤Gtt9dD xLWm Gf&xv+QU:e!=?1m_`k} k'r:'`$[Z$ۋ JՏmغ&7:!$d[2lҕgf}_qب9LZQO42vYMI`MOt$`?I.E JFN8szN1N|7Ihj hXA ?j;F=aL:op:n܂^(oK ;삽πs_NӮE# qJu9nn,mK^ ~x"* +Sd)IK,Ehp;":lto (ҜH $D(}O@q >x .V-iyJM8n. t>Kə,pA9P/Jenm @I C1 p{hkfIۨfry'Fa|v,m(`= kx9NZ_gL'T4^ற`BZ,\N`}ǹ&ap1z",Q>萻STE|3L6eA1wŨ:BLe$%=&x QΌs:k=chb9hx(y۽=E}F_,2c;w_v햊#Dcmn$"JX͝ln4M/+>x3~hVz92V,V-hn29 36ZQKv7ZhFқ5*14,d 9; BzKx؝N^m74%\#t9 -A&gZX|b w4<𴲇gckAnJ'$m~c̣Z :P'dt D m[Z$7:Y7TJYH!ׄ Eu-w?B-LޡjIEi+VەґǓ[ k(Gr Yxm-wSL\&RPN/}A%IJ/gK(o笸ou͕G(Nߙף{{PaD6787O4r~(-V̫)boC4 Z/FyXyp䩃=%u 1fgC fE g&l5Y5P%IGŝV~ly.P+ 6-V.a -b5z $Yv{/M A2MhWGTJx.aM6b2<xߵfu玑!/QC<|_\\M J,דBrsn^޵;?)fW:{7 hwҽI;EѠfr=՚GnHj^mrñk(,M2B| _Zmt_Ҹ8y-*]mD\駑c|T}3Hu9f.lhl Њs`tl,(@^#͇Y5U5ݹxsUآP!Yl"s.jVd&C[r,B<\fTV(}'{a7qD db5pJ2QUp)|Ȩ0B^q4Weop3ݤ4:Gr4s(`]"%q#w?%fFv6+!,!:ɢ?H3`N"Rh:k.omcq-js2p4q8ZY.w^ = [E=䌩!rѸEcXoG`;Ïب~/bv블U[bhi/^uJ0E1 E1aaEKx?[dy&wwM>yoUYɔh!?tDun;{@a)uSsd1fEv1B6^8ӟtZJĄ8NkTN XiBe3-؏) D&- w>:̨RF[_5obTjqp@`H7bMS}HkIʎ(Fe=յ)YlSh U 8bX^\#QvpKjX6CXĖ2A3wwO2iuH)ulZ<-ɷ{r0AbRfYNR:ݪɷ4$ fc9OoB= c`*D Ԭٻ ByP^8 fcy {[@돲qXɪ[JD/lhd,$ynD&,̆ߙ  \q))Z C@_Zwh$K}NkAZSjT.:8q# >fNKr3+%oO\>a-2krΝlhˠ|V3͍S)}CZ6ތ΢T{i7Qm aԱ VXjՍvDx@ 4tqXER4*Ī&E,P Z@[%-l8~& VKdHct8Bw#?b D9WDO͜ 5r$ D9/9 :*i)*8LzZOua۰4؟@EXKWN``Q{Sr{YRLa=cwBRBl&$l<;*o\%ޢru`ƿKGʇ)ه5]xRXޭ9q_$-L6aZ i@&\Qиg9jzd#֛{ ؅X HP`BsHJ~,F#܀~$ܾLbz(z" \Rſ6 %R-)03d{#2SM@j?o8wCbP7a;,d )k3+M N3'׼b'E16ԭڨ xzt>.9,nF[!noO\ԉIF%Z>]o> |ê'N[yuDF:!GNL2vDShwӲP&O'p;{r~[NI(VU%ֻ@RC%OKe/PDn<m^_'!\~b?+Bs*.v43$ ѦO;`1Xw[ qrmtɯI dH/j=Vߴ5CiQYA秂eӎTL_ 3nU"÷0%'X%_iybˀG8akA<0`;C[ dE&&2P*Y&NV.!쓆IZ=knpwɰ#}m?q.0;p6b^KlV$EOX]8x F; ;fF_iIg4H)6K8( ծ;j! Ҕ )C|)3I{ut|P+=cJDG+a, )fJSB8[ć9/.ڮ˥eU7@~Ra^[.;޹)Ȳ{CB.θe{zY%>Qrstޛqܢ^ UE67r'mM8as‘c*c}]bMK|^7C O]ᐓt #8hmԟc\7I;bZxR w֒ȟJ7UL\҉J74J)pztCiŗgP~2Ϣ'3^SqۉD¿UK/;Z]Sc0q<;W1x˺*d3 c&.$R¾)1nţ`Ӱ ̧qhYΐ. mnoة2r*iO>!tF2#pyip/Y$)I֏k @>饯.mHj&k>Zv#mr~yW~QE5,%*Px/*]L]Ч?p:1LMXf׭[eYѴWg6K+z1hm QvKr*703R!u0,몀օn{uLԼ܎xEt;7"'ptx޵| vL$kIЩrY/2iDe &4 #-7]9)}M D#R۠ tWC ]@<liZ] @p߱^X"X~GH*5K/0(eLM->⎪ꑺ< Es =*J%7܃ i7>4'7I`ܮUV:{e"N\O붞#&}kw~ɝ 2<3׋U!SK]8έ7+uo^w(n 0Uj.ܳl oyۦ^6g*! D[)yΈ;,gTC]{v H!ǵO,F8]VUQ?rdɨsxYd<0%K@yP%~>GAg+^gEϘLkk6+bB  !Mʌ:aZȮn\9ץCwu>d8{qB)4 9ۉMJ<EcHuq4~oZ*įm^%$nu0&cBCV[GZ[5Nֶ8_ 4[Y+/NxeCmY<Ah:Di\2+󣛓f!Q2JNhA̪p]I+`i%}|4V˗\3h_As;P0󔈀x:Q!>L0 I[Pqէ3:~!Q`>C1{{bFLIW/+|,U/0ӊ( gTQ4{BB a|U{: {˰`(Gꮺ?\61LB995w4StUtj- 32)s@aUD/]MytNsHD L]8lPYF@HgsB. DeiS XudY R*f^̓ uގ'q$>/#%@ϛRӣ [-U"3dR22#,L6.d5ںrȸ74Ŀc3wz^M9=VC4T @ @L๜؆e% ?b V>o3n!Wl]d*%|+UR5eEǖt#Obɨ`X;SP_ /?' u _ ĨǎNԀTAq4m,O~K-Nx|3ON&`ٮ/epoo뛸ܯh)jU\*Nռ d癥Be‹6>A3a.WDz1͙vN,7Dj HWKӌY\J (֓@WE6M@J\.ix^y)ENusPDprk ^3peg|W3*d~Oɖ_{ll)<3"غytA_z1p#'WX@Lƫ3 Twb#KvbXA!Ri#v&L"~mY2'FLl|=b! D !$V)y',ىwPYqB#hl=yO Est౤7T#N q_I'-%V&ib@{H rْ&ox'S̃eRV+[N o*TaAUA et ?_QX=IlѹaQ- L Ci\x"uW2֤|:& 椮Җ{WO#A)Bmnq TeFʣ ~L 48w 㼯3zu Kx/VNoͱc!57'!ňåC%gC&",cSJԔ?T p>ҘP8{dbv?cĻTN! V`0rn¸_ܴ$ykVL Cϛ|Z؍1!CodBG۽ Y@'}++?L{u- *૆ꃗFRf̘[;(-G#t8J#j_dr?T" p.^] l<"6Ҁ ]#emLHLh󦩈q+#q@PXb/O{&6o\ʔr*@^=(U+@h_+]=C5ZEKTv(6*q%d J.E"a<-q6?%ѠU!7+QM ]htV)T i?57ӄңx!Bʀ'-ک~eO q 3p<@v^RI3JxE%cQ 9v4Ʉb 4V*0b|-9bU?3>Rv\T7|-&\-Hj ]-}$% Ù+EWuՁ|Rwa{z3^[*"MRy4'J5(j<3L z5q+:=n+ + |̯?dЦ (W" ,6awYY6Sk/k5%^WT˼jo?|Rr-e|֨7+x=Iq]oOn(ĺ3dzK0$VN#\i[kK=aGPḴ oBԺކUw&nnE ۓp Fbb81 P-1P8od[KFдwXW|w3^LO]az!rl x%AiDK7}ew6-l#=9A+}w)*=ȌbH;-៬>Qy/uLj"o* X7:zoQqاrnuF,Xrknt9ksvσ'[OsJXЁ CpUذ&4 J'`_{ׅ'DT\sFFcroVV`HIR$:9Jjcw*bv!]QJݘvY;iڋ{[_U9w\3;hpU KQ ;]^ފ )0`mas|MV?_$kkD`d.I溛>;^IR[sذ] axj̞^` \{&*%ُJxCUm*s|jcܚ2YvV>s.VmP`9=$uoyXE<BD8L7OTC,~Q ┟yF;I~TѿNv2140Af]Mg0wI[UN<]5KjПc04. *X.=1<5!M-6#^LG),4tG{$kSCb 449z@TeJWmB_8bF7(=a!,m=Kz׾QGI!jLb4Aθu#q2ߊNIc ]zd/aF֤$DrhvНԃ|YQERcDlC2 4#wyԩjn\R]hq_`=::Jmh éOБ>k!g K)mEC!s 2EҙX?W$;ю7edAqۏ^ME)0bu=x@aP$ ; ~ߠiW?DD塞&;O׺?rBuSC\I<]4jIt>d e_ik;ѳ,mi@ v,hM˔@ygFՖ5Z"xɜn7+(V<:vc,eҫ靬bY;8=XɇkQ~n&kZܡm+D/>KF*rI0s`sce |S}'{M)~o Sx8}42"G4' fb+~ת1A[?b97x9!$ie}Y h`SEX?YI7»sDh3_}tgiN^..汜0N/jڶh8Lҭ=(`' DžR7Q e?lVz!ZX`5%uO:zQT.2%>T?贮vt=@GGq 0IPHF)~TNHjWZ@WjIu8vO}URTk"gDTI mK&|% ލaÔ;S9X0e_bBTX}R%yߪWegFh$Aו-ؚƒ-Z58Q.pK37,B _NVG;E ݰ/Na5[Z3U +ўpG8+TH„tZC R}y)uMLBfޱ2V`%줟[fa#d5L  [Kx fw1ZU ?i(]F磎O#Ҧ gȣ*"fDG >Fy/¡)+i8MOr,Sb% p9mWlcS>r,gO}8oVo`-(zC睮 GouC1~Gzmk/jf'Pz47:!{zBTO7T X3}$t?#&|DZ EZClJN/GַN;2l!AB!a_鑂A"/R0anz_! /=bFK/m~'pzUPغ#佻f6cɄ64,+duCȶvX76-Aa6w-d=Yhj$[,ATw'/(ݟXAJC0 VCwdǭ4xV;/b"fiKPE2 *S.NZ?69]zs\$8aۓaK~~UQ'9Ȑi"+##ΰ,/mIOI"ﬗsqLFPlmL^f)-J-XDj(K1Y*{H:XF kc!7-# վ1ܖ^uU(hվ UyJOe{'8wS!^!Nv~uGރ Y w+1yDc JJPw.N;.׎Xka'gdf\X>N%FI{|ǿnE7h bDPY8%'Ty6, E9zrv3>~ 0'ρ"t\߼0~ieكtNPx;ejR8w¸C&u bPȿJwAƸd'X?ټE2WVMqK<كBݣ̈k'4WYLą`,4em6l !726NV_5Y '5\f}E׵)Jݴ+V;(`g֥1̬ƷAdB VkBU$\G#8?3ug+^ eK5,JmrD~Xg$1# #k̀JTa{9vYQL\&^@JNt{(zWU;hU׌UL:t<0 b07$}zG!z-"_h`ꉁQD"+ƀO<!8M禙*5eׄ٨Laveo\@mS~+F6av򯫀Y>oDmeW &܈r0Z}) 1\L]"*S7sVե(7tg/@ꪁwCNfV]Lug6y*|r?I DɘC'6>%*o#FF20l1_KqUqls=BaNAM*S$C=]<3^D7DuoIo[jRԝj0u%:'[C٠_$mӣl%ӱɔBNIB2?1љ ?9Pm}vev* NRsqf &go1O=1.kZs^3ۧLkn<EWGoc4y Z, xє`(AqS.&CkV$m8 5]5!8NaQCă(6@ $}+5\e.J )WmJ=&XmEi47iˬ$;< t0h.ގntr%nQF+!C].6]qE}l;۰-]fxtlAъs$p#˯#:`S]J:AmB1:Z%]|u\/ (_b}w0"@EQ`(=r³.,5'řZ)lha?(;nNunE~U*9Zeбj5FN#Y"ɽMƻ$]C+Q=Fb~&}#_Y⮵ď<$pgJeJJԉny?d~<6͙!>a? XIt5 a 7N-7m  Z.4^ϡl} 7 nֲf*nAg`EII'[2[FբRMeECosJ䬾ʬ-=v 9 (n+:]C$!2K*.VǜUPk|-{.ZVlrDwxڹ9ſ 0:ԍ?Ӳta;ߚwB U Ew'zj oV2XagA ?E.:w vIE6QFZ/i]@OJ/gZs> 4V}woLԛM̏8*U1v`95^}S2x YgM}:y _'J?"ω|A(6&_ AYC"`d,w{`oQ&-18RXo#`<[xDe9ǜtZejI\Q-8MvB/ȶHDĄ٩]rd Sa bz%N(/-~%!pG˭mƭiN(iDW]՝ޔ,ԪKwj SOMQ񛐶p*[1*7Ά}:ⶹ̽D6o x5Xc$!.,0Ny N]CpE^zLh[WPhL d4fN(l' 5U}E2^ >g:}CdJix'[L{q|8CyKZMN#,*w!ʏvAA9ȸ~(/㈬A(g϶q2#T}elEYπܦWF9DTtDw+`NJDT0(>ҟ6ҰZ!X{ ؟{OpA4,@E5[+JQc]@<_Z{CBm AAVQ+pt$=b[ebcåm_zu̚"5w_5 Tc7odsoEc"ق^X=$J܄shӓ q\H2|V u|]y̲ŌFzblo,z˒Tl =o-f|:LM15V'.Y6y_ve)ޠvD=ɒqlE{[HzWR; Nz^X *S{v#C3nOFʁ~vWJ ! Qأ wBfC@"ġF RwڍCk]%)I)0Qv""sϲ/iz[jJ%Chshgxxix,'ƧZ$c9Co+^sHIz~s |7ՂaD¼ŘGȈPntH+ƋΜ(hʋAxԝ..`XΤ ixnYA恸;`Ȃ?\PFE E:7AZ3)7%PJ[Q=l6XR޻&pٗ(w!ؑ,*3PY{3EF,m+;Y95qzVxчuMGY?C8!hg O8a FTŊ?a GG7~` ;>cwf}(S4t08) W)R7?,9+*=ZY*w\Ps Xf^)t#JD>ڻЉm:^+Zr;J2/r&÷سOw;eaet Ј!IصVJ`w8]Cbhx؛[׽!e!vYt ?j@Hl砖_iuqmP]]E^ag/jK&18c+8tZ"ng1ؕrQeȺ6Eyᄺ$!mRx>.j.ضh[0Q2Sct*?10**ۯ0f8nY"[RxVp7m6&&9VJ?w9oByxgSVPDd mU㸎 hT *RhU~QW>qhRɁ pIP <)Y(Lj#RSH9};Za{š3ϋ ޞ&Vy](e-H'N{4ˊZGkbnp4^60B`j)nW>Qx#f2g5x2ӡ\rHQ?rJ'xɩSCHNGѮlN^>{Hlـl+3VCWX.5h mƁgwA5bPRK]'DR$>[NPgEjqC{_f1* Qvdn粐E"Nَ_%Ur1+v b 2ّ1 "FEFM[l}=C- Bk.)3t);E MXy ׍x5 U0X'b]E8JdB*L7+TY Ξ1m/^w080!i O a@r&(Tcrߙ ̛n*J~|NwFF#Hpl a\W&$eD°(W-@]"r|˚b_xa'W9)OxodCQ9SDd~"Z쟻]QnO8ybM~覨1م5zGsWB1G $9Z L].کOuW*Ш0"O^@7̨݁b^\̚|,R?#bC4%8 O&TIV6dS !hдl  WR~\G KD2#*B`Wv7*w A ߢ`[œ2_gV>% YȜ[*^8>$Ƨf8|c:ERi B )67/ s[u W\~ Me80٭}udOEur˜/.³cɜƱ^QVr"9= ̰X4?}q:{O*S} ]iear*|* %8(n+$&6#C-KE3û5~:҄Xdb . :k-7}Yϭ~h*Q1˶ֵuhEd >X?{g4.t o (-K%`!`kM zWwJ&ID;Pa3p}4-~4k^8ڝLuA\Hl?(e :'#Ox22;. ){NsRVYI(1eQ\ @̜ŚI0H38f~]rв)]0ʂu"GAjç$P76 Ĺ7JNdY\,0,C/6tkL!7`Hsz1 4˛RGIl5TgϬ:qP; |61s`tn#6;|}ssuƈ?cEϿ%iXB-fFt^ܥ3QbHK1q!Y4y'S%E_2 `;opIKAYNزXŸ۴zx\OPNw0`UiնIWiڄ(  5DqJ=p' [IS28D&YW \؛+gs< ǢI Rt>2Q'#{ړI:nE0i(^}@}t.R"_p2x trWVPu}0ȆNJEڝIk%R/sgz*0Iwoar>l7]wܤa ʌeXK'˼&HWB9_Do&B;\>Z'=?Msb4`QqZ-2/_d5~ӽ*nfWVV)(&+zϒm$K*xQ] ?_0lm^;﵄G_m}wPrmyDƩM1R67i^ZH <,f^o򔚑QKGT'/ pMtb,}%nK EYPkk]9),-B|SG)Ws{EcϘ1~ ?hRLJztjE_ 񺀘t;aC"&$ ɠ^λ[)sMd~HSb,PΧoɅq2(*[P?ؽB34L^u-IB&@Bg~H9&bT.uݶt<2zH<"%GׄC*,-6>f&&7 &80TZB`ۿv'*{ƇnQ"֌=V C}ym [p Lg.;24c. mq-r2]}MpF>\| y5{߯%i2KVymN1*\3'fdMmh.W^DBȀ*i{wz@CJ:u4Op}n7pҏ $" ҫMǞ6qi D|!qTÏ_1l)!}5` Y89]~%H1D0ĚҟQN\ĸM6iOR6no !\ O-?<|7i~wYid%cc[ hu+i}62/qAb'ʐ\n5>lA ΒEml۾R%,=ץF#l}Xa!,ub$S3nѵ{yU!c˻&Нo=j$Bybu,N C [8%V|GʉX旸kV?X~W5hR#5M9vm[TfotƩ$Lo E:KB9qFRɮ]RƬI\p4=7kv{v:a?ndQChJݹy:@꜍U՛ /ϟ2f/!D0<ܴ唄2hTx5-m癆tcUЈXGBJFӭqې%j7cmy+Z ^]1OCxMN9OpS&RFfZ5з4[%ݘ$ǎopG1mJ~",LLwjW,_YF1yb~*rT]m|!osBɡ7A::^Մ!G&"f; <꧚|!#;T@{)3P?q!sGEh@pN^vGC@#_Y0Q-& wHA`qYn S#do8_$ia/[>ҝKP0;%Տ -x`pfW*\~">,W K(T>F, l/ ='F#RI#oׅjR֌q1N#{(} cm[x>3ĩ](Fn>ݷս#k72eKOŦ1{.j,Kz~V q0 EX9z-bJVdzԍ $WlX`J֫x9Q45I'RZ_٘dxVn10K~]. Yÿ:y҈,1[D뜲nbɩbtnΊ:AQs. z;To2Z`/}xd_3hR^3Ulä]EAU ,6&M8˩;{|cҋ~btWY2B?|B`ΰ@z RE4(QHu"# |' g촔z &r >݅m9'L!@/ѯru)20%+˳8.Wz4膥&jxO'4YIFaEK+֤9M,_bGQt1hs6@؁ɑdySdLeL E@qj]M8sEyضs^ܸP_4$}r}W!wHH\j;Q {xZH v[+j5 fEՊi Ly,ЃQ)_d+=/#UdX,<玁↛rRFz/nR+5Q $7 MM:x۴hFm!-Wy/v#Xn.b %97E_`|HR%#Htޗ (%~ ~ yę;`a,u#{ ^Ո7v}'NHLA/+v(WSs^Wߺ}| í\+(."s:cDx8gZ~(t},?/­1 : &L;}y|Q&ؾ:{qJtf81 l1Sq~ lEӱ.,o760E7X|"WH$c|{0! Fr`rA]C'xk N&`mĶ@S EpRU^o̧zurh&ͰUM)bAY.gۛj^{#jc]钨91xG>33 Y5ҍg"X6Hl믎_No=1̬ix7RKrj>Ѷ!䗥 8g1X{ |"P0ew00'?3VgK( $78e|(&d Qlֺ[݊YO rH u4dvJs@p?%8ZךX[yVtu@ cYR_)*΀j#4բ4Ә-2|_F:6pZ=A`"jB۪"&O& nHfoK Y߶B3[zއ}9# mT3 sliLQa>CrJpw}O7|:ucJR T :LVgݡKn&7 Bc]&P9%mHfۇeShGUI)Z]zP+4xIysNx:϶! U]qHڛ.@P1 :h;P(D-j6hgt! /^ EhFj0Z)ӀěL;ŷSYÏmRA81LP0fxy-ג 1| xZ0( &" gOw%ǾE`/}ĝ 7Dp>Bygk =? o+f@=`ml'ut੩ A{g;vI&xMCJ6r{x v5X;kK HyÓ!Qg+ @C '˅,t=+~P+sCDi^HT+?zkoe8Ҵoʩ{ܑiD6CŲ_xl="X~:`mK ߑV,j Z~E%@_S> kZӾUiNCms5n)Ȗ#d~}&nW>լa JqحCUM!~6DŶUsHDկ,yRYժ*- YBđFrm+IF4 =%CAڿ >]CtCḎaZ J2S<-GdN˾H@Ϸ9OW,;NIYEPXWU0EZu#g&?SlɅ$}}~QUC1 cd,)y'VXY@ y*6:W'ݓdozGE>*g4XQ[ 5Trq, ZvQh1}\92(dxl€ߵє&jl#'fRGH Yq>M!7<7n&u/{A>H:>>i:o? 9AuI |Mp͛8yC @O?X͍V^z7M\ACfAڃXD4TzFȀZrzk؊ c$KY|/(mtڔψ/9:뤧P`Hq)7[g)pNL9M{ s}8GE(s^>?~ Ѷ{紹{~ 3'TBb*};WU EO?{g ج@V.5[7G;iNB @NlWQ6jCGΙ{F].idJ+t>PFYϖ1~gbE\ȭE$f\~)X1r.~{$#EuTDyR9$oɍ(`陌ժ+YZo]Jj.) .;%JЈ܂ZA7:Xh" 'ZޅXJϻO.7gK\>2=-ry MC>΅/'M;`bʞ|j,Cbu0,}<;BA\ת^ e/v\Br7T}v9'LKtBZfsa=a*n=NG7/&'ƒ4/s./ AZRzAk|c]/q7tmZm_O@\*94Ն?ȿzܺq7DHy0vM]mlk̊`i8X9ȼk#IYDۣ>?f\Ww}:MC-#%ŐHN+ghZK+L_d*4@2=1vmml"V$}"@ze-^@Al\y.A=MD햙OK3%$TN@-ُPF5*Г1ے/Mp]_S\gyOog"1D^6Al퇣zny7N?C7Xl4QfՆw4=1gAdVv[RIQ E#uyiExqX  FBm?,c#ãUU^$8ڔ]A֍[C-E#yѓ33: < X*طMcyNjG nؽGXQ= 2CMwW "Ab{6E:r P =D.!ްyUn2ח0N3,\Z̈U ]dp*m |&A@McޏIxÏ."qdZg 7Pv[+Et>U.^[T<`SZLN;%#G X [Fw[)o[ʡn<aGV4ǰQGC'r˶,5O6ƞ ABYl)C|䰷6ێt:Mp,k C%ЗipMgTքXz/Uz\re1THr&hBz&$'m#㛽Lɯ&Rp5GC9nLN&>CU^w(vM9Pmtˏ2FWhguFK ~qᜊ+cO[Vm# KߋPG@cv_\lu4lMv$*7 LD9 YAu@3WEWr2sHE >mIp8@*gDA>VXw6rN)Ndp.aooeNFL9~8]aTqX(MO7̖[t9d "VUrt:>5V;y`N芯o(zGS.C7%.K!Ԅ_cqdWJޢ`*P>Q6L wP,\nDaM\Q~z}#(q#iPPmxƬ%!<%eto|; z9Sm\7?/n"K{edH`!Xow館`e\R:bal6E>h uL3)#SLŠ^pP8Hք7-aS4y7 8?Ղ7}5%Rۀm-b֒u]v_gwۤ?Gel \{ۧ{d:rRqf&] a<rw O%Rܝn-~hYSި[RfqYVibHuF&oܱ q)S KXwJ~rIzTv{73Ŭƥw4f*wH4>0tSߝ#mھFe,_1_ۧH<ͧŽ" G9 38B?(k/_Ql_!?Wga&;jaG示}n5'||[}G`!jע^OC4qm/apઁSOAkԋo2äƓ0jFZ ng!zN^]n< G4c-!Fw!*& v[蠤 X]' r.&[1,]ppNXbo')E{\[_aA`~y _XӅ`i'^;.I0=]rXt=_;ϼBe55LRNn$Ro}sꮶ$M'3T`#Nn[8D)u\]_Pi7eb\u87ntHHc(8;$AK xbM#șx|ʠ"a">d~S 3ds}mnXl8O: ҄;=VpEC]UHO\'o/v!y\Sⷋ|gE"nrtw$ ?ZqŹOS#s M% U琈q|IqKW,v[UP"Y1tB/PN[F.!3UOrtT1&; c3IӁHf1|a'FZ`#F>q`|]NjDU3?dXkCXhp6RlMjyt2Fqٶs}4#GU1a@5co ZײBqOlO !j@ɰZ 7%C :Pn~3jvK<8j9TeF`P eY$ >'uږXu@*@q/掋+M0ޘ|Sʱk#zfPSj*R:,9O/UߑN Wؙ9#33=s7!]0#K:V(lVy=H8 bLu!ϱ%7://+D1k)i`ᔵ$!EչTTJ?d5ZWoB$μ'F6=OY2YaadӂQP" y%?sWXb O[LR󊈶+[^Y̟N^۸`EvD 1 r`j#N<]Fʆ=a)|QxWTg}Ԛ4&>αyP=c'xɭ_ hsU$IұS\ 'L@Xg~1G a*X*gƨ"Z:Y; 0A&Z_3o"14Z;$28lnMY'\D؈oԐq6]gud J_0XPɖf33Ys5tTT*PR_|T_oJ@}]$SU\4"pKSBɍzu.YDB$$Y"I +$VZx!xU4XJbNZ-zPRxU O 7jY=CC];e,%fQL7I@]qQ&Xd D˓O0ۯ ΀\[J/` f(J$jcW L.߾iYY͎y;kcHY31$~1s/Q-H@F= "sE"'<u%%/tf8CwX(92W']#lSoY"f~+(b$Zk _PÆbMOB{":OY-`1nW *vT2-QB Ki&K >`_ i&# :Hl*{suZo%5!f ,lV2m bN'룑ߨKKrX)s@$U7!D^Dx )%{yfjznmLGN-Cr,g6`$-W~1!׈ywօtd7MOjج䃳S9SxM-o\^"؋ tR& R m;`cQKJ#|\)xۃvR!CA 1Ov ?˽U}7 q Hi"Pg"b Hm2 \ٹ6fЄVbMr4Qu?xn8͞ Rzfk}#BzvcV+z (|橽zK =X^8b7I(.J(q%Ư١9؃R9D9&jz8:*|$Ed'Hժ ,+PiMO_2wF+#\hTE)6ʝk!Y3]_4QA[\&Ņmdi)zm2b|2a`gRsjm6`kӍ>uƠp4ZS(g+Aпch6͢(.#z"JO~#-s>]-t̲.z Oe,n:GJCilZ|&a=ge\>3&*!<9 c~yNڄEga*o?b`dǗϑ^[a_ȝS]dۆJE>9}yIg:fDK\ T8u uDY@va8ȡ١u7-!DOįD$Ivׯ>VO_f7215{4܈Zf*?\e ƓRRv>S`^Mye p<+&uU ;XQ2P:Iɗu kcGܧ³ <1 j4ڐb6DE2_ـV 9d"1}6t^ZX} ,8pN5rtׯ|+[\`,[Ck'V;_&Vuߥ$%5Ty8w4&C`mѳ TU^z>"gՊx<doݐAYDE+ ٖ>&mע=o.v M\ 䲥$_bfK:k_@Ar-ːy >IߥN͚U"U'z֞RVr&MCA?Y\!z݇;6]Q.{{nҸ~ygW^~|K^ a<3 ?sA"0W {<)I|{*ԹG{'&؀2 !*!WFY9p#|tU ]~v]-GǨ)q̈́Z˖{ST\Y"Θ=d Y:y=j,Csк< &($_=f4,pJit]ݼꎣ{ܥ^LGBfeI 8c[ : )G&J+'hw${M,EG`L HRvs+MƬcK/@;+qGDsoxM|”߯K5 #s\$xYMSr@V gZ|~s COmnS>u:;Ajx\IHSFvR40ҭⴝK?e焧 o슛9nì J۶c Zlsљ vbՑԭ$q5?y j#2yBшB$cIZ_ .x]-;CiƁ1YߗlC^J ݉n:cX'x*˙~=̀ "9]kCY|,gv9߃VjGHn:!Ay[ ^e|ۖS ^zN՞̉Xe{7v2}NU0= I$ByHi{Β+hKT@%~^ĝ@pjAͅtAT^gOr.t3i|=-%G0vDm*e?'4(A niN;GL-Z]k;%]mBwuj|ޣ"0KB0ף[كO-7M`SۥY~M1PV[ s0eYfH&DW'1FzjIF=FFM>ox3 <ſ2f6{DLaą."߷G>CGS?Fֆ oR7 Ot VbuCd k8<gI[#-*,97qyB;-+{l(?V"5LI%%m%}PH>m 6%*˖z )i|' :xĉgR&^5T %bI=]+r=DWUw~V,XN7^BS/))bqUc%ub׸! JD~1Ka*ph\wL=y<فW'\p w?8 lRZm4{07UK-(SG !'`gp럋e)OJ>oi{[g$g,q IFک '[ ,A)>+eo#D+o=.gKB1O=1j̹a(;$[L(?Z75bv_$Dܡ+W:N/A8mr'E)œfn,4߷\G,_ѰM-KmI߁06GUx2aX4*UPOiXqe*Y㾶VXI*(8mh=@|·CPvd2C\ ! Gq2XԮ@{kbF.OlG4g}7q¡0h4rl.*csa "N_ѣe]m2(nIGBZ ze& of&SYQ'놿sG> FJ]9臜 QllVGA2)J?$zn _ Awy1$F{ /=`7S7WDp1[@/_$bn '77+֚e|-; Y/ wh\Ia* ZSdiu4e1* 7R)r6| W@eGMk/8ZL&BUYXlN:T2%jEcEvWHh6s;y08eN²l.~*2}r\6 Qz9PmT] OZ%{Y VT-l$<< ;GzӧG(26Hhium]hsc` %&ӆ,w,#{ PVg>vۄ٬ G}CM%ȶQUe:y7y=VE Ks0ǀĞ!J.Oً2JtVUm wFS-.R"͡Г.3 @l1B~ 'L[:欥&:.E;E}j3N]M+g{ HجoROm7 >iS5:ع4hv \?nM`Ȟ$uE[-:ylڌlg|=VY ;zEJ 3GϐDm O LD>ÆkAV>ȁ3g@7M5 ZIfDNt/Q;=:NxWqMʠ^C퇭'($OfN%oz_M a_v\2]y<3t06N̈́^7\BHs蔊W:(g)tR+2ϩލH W4Mi|cPN-2[ J2kVn{9\ `U;Dͣ J?F%K=' jgjR(Qz׿1WHC}ɇhꍰibc]Sǿ[^ ?RFȇ"Ln<RKA4uCwдlPz"zހ:tەoKӲ'AJ1S _\WLd\_Kơb쥯M=Xܣ¼6W.rdmX\$$s1&Ϊ\O6D>&.iPKfe!(y:?YCXZh^\!]Υ&sfPeAJ=˽M,PGFO`#SJnE=I3x7X ~rhەVSt*_C6+N3pUr~<^<[?Ow9jOֳ.IE՗D0" N {@97ѢUkT*$!.m;^6ToqSvLʰ7)U]\ vcoFu] gU{z>FQy<A;V3ts8P=`L?swcݲٹ.$qfĹH726+ I>̻XS U$~WEFnv3~6ţA9l P!+XWa\|4D}n.6Oߪ*,ؕ3!=1@ak7X :?{2sf*j"W%](1p'*9N{M 5}//BW0K?6]-M{aH{&Ll~RW!c= Fa$u Oz|e=I~*g_ A;1TZaOjzA$X;jb_,ʽQd"w+JMȽ#v  \R)1. %oR{ %-95DʅԗQV> Fj3Ie=ur#]>UE!!]]g5X-6N^|&BWKgDMگ<ޛaN -xUA8'24r;J3%G@E):kǐH !)c#l̸!_l`ǖk4`юdV-/qбy+5]73Ws谓#tz-('OjH2R٥cgl= A7ÁJ+/, m9omci':sp 4Sˣ.ڕHZ3 :Omt'D@}e}'LO]SBw'w`LTG:~ ]Ձهml< ʀ8>H͕D H/ Ω%_QNlN{g8_ac%sB*?c<`U.ޟ=>K.DMEljSR6:f C`Ѻî>mB[BQ$V.9U31Ha1pΆj*z̐"p!Bw*/&j+KqnkX(:Ef '!vVE%;l+m@3CH746 gyݶH^*Ey:4> uI*1>Т!-&V$WA#'0GXas=r"Pe%C73FHn(H`1f6\ѷUN-"Y']E}؇ &m FIvJYk:Jk!5wu@&] ҨႥ3CГԚ .D{H)KWBċ'Z=.utҁk[P:%2lzn-+3Qg@;,{=MphQy^lA: LVSۭ*u7"o%<vv?IJe?f@Mum>Oʭx59CQI'u|#R\CSC`$EP늗񫷓U+)%c{dGztsTjDKnװPԨc#ΧW;'^ΒPGbLxd?y/SEpQ\[#N)"PfvNx⤇1} I?ZH3dy]`0=RjVɃ-PR2"KÓҙӎK$w#5 $ /P#4B*XE*~Eh18nIGe~wr H-MJfXC9e#ChuCf LLҘ\ DfD\ei.m Lڈْden櫈&{߫,}sf<?~2퀲ԸmngQnc4X+#RxV1Cw[ޜ1hMxbOH< .A;KNG[NwS_n {"v:xC1/4ɯCF&HuDŽx"vCxPfS f9U`IB1Zy^~%I[X`4r7BKO}C~7zŲ6~TY۶N k8!` RNڮ%f)no XJZZX&6%]9~CL-EaY:ھS6MIE1R° ád$e }5&4 ,r AnQduN/Y*#,=^c%4_z}L >̆/y1pP~2]֠m 8[$TÀ'WyFR'?Gb=2!SX ě?ÐɯAmFr ΋[~@xA\ MY ㈜,8N'Ix}Bؚ")4xbh8O\ =CFI3{pZ{zØ }$*:|0ɓ׾Zvӥz"]aAzx9mC -=k*Hϒ;9s,>V~3GeL_P~5A&kFdgay1TfJdK-D[9}t',*xX"7(D/Cc;1o e4 lfpԉ&c$}RG3̋UVK20J8B",]mܻ%%I@wZk>J48AN4k΁elC"90ۍ\ߚ_NP:٭#TH"}. Pc:Kxo-jۤlNrmv|5͉ޗMfh6 >AB\s%L4˯.Gõ&OP`mOajCm{qI[f gb|^]p "%4{݄m*Gc\ݵq>x{2bD[6gi7^l+NkGjSӺy8Ovs[W8qp3еMxAŬjivddGG89\x8\dHeC4IA῏\iHVc捐"QwE84w}ȫ!I[r .E#~[Kh^j÷5Wx\pmTp"?~ *ch 5^hNU#X}}[p3φ6>,,~ކk[\Bjy|M(ͶNBmy6q׏{epaLJ"z6eUusyR\*G3BptQF$HU:QK{B}"0e+yG h\XҐw Q CHL| [bRׁyc Jimܶ?(;y* iN5h0DA=OvS_zKD«`*=N^2&i kڡOc1<A¦_ۑĠK?h.ﴎ׹!eKԦV J ^ECO*%8I(-s0;YLaN%bO3ǟVDzW.k@zѥp]س>H1rY(K c1C0w*HOϻO e!M;'*:^YX Z:/̻?cc[}9V;@Lņn Mꇫ9:KkQRY`H<0ozMME6 ^*zN(rVI"(e]e+T]M{~s,nE¶SSP LΖHd2c cTDN  ͖RãMf5`}vw4J<࿔_sH3lTGHd=Hpč|h+TPbI^$ixd*&V8wR;R[ NEp~64UL*O vko ڿput1кMH2?l@Ogɭ%.-dyBoQ{tǰZUMJ{I(ԓEOTZWQ"HY .Ҡ[:yN > I*˦d HQPs>cqO$mrC 3A3cᤵR0.Km\Ekِ?^،u% YS+@о7kKd:ma3(CPh AL}=CBɃGۓqK@--aH 2ZpG;0>*-+hW_3'-H!9_qA'T@ ϲX4w{7~/S<኱;5Gq=umR E.#-qbG2KM=H[uU3d2M+=-և~_`9@J[&jeg @ήLj]C2bxmFչ!tRV&SdrL+[5P4e o7KiP_r644*ecs=%RZMᾅBmpu$eu>e*Ͻ^enT5Ъ\AEnƦV$sX\=SCD+@4X^M֩*u5,[jι16{r"d)|8Sz bγmiEkyKn9f 3ۡ2)/\(a+ׂ3U}f>߀Uu ,2PyY: {.WO򴴠&-&zi> GnM>VhVqC,㼮֟ PKl&%7 W_T|\HzF~E+md.uMs^RB|gF$@*Uqxk҄/jrǻWn)we+D.Om2G{HiiZb+o 5RAuG ˘*ͽND A%A@=>B;=,zTWCjbDo҆ $k՘.kO16A03BXZR=a0+8`MKyTMtnzFpWb%%/ˤglGeM80ĸxySBH#RI!\u7Bbb:TrI퇾[!2A@`lGԂ/'cvpl9 N8h7sR*T:9oL@m\KJk3r*v.kWJZkA9% X[x.KBZZ}F8ƶ[t|mt.LXf-"YSJ6ä^ŽZfspXbdC{ x0PLIo{ϧ,rT yH2 ՝Ҩ?_ud}ltFL}'T;4MR=T&y-/[B:ua*k.׽R%f(*hvt} >, 4#0Fa賥ҹ˫m=PHP!7";@q7{ּ4AYFV&cAES x]xm$B;D'x8MDkDUd1 qh*r[ fD]hyLGK-ۥ' 'd#SLyTn@|ݯFwщ2k+0m!I').Vp +&~eΔ "kQ6`9;X{tpt̡!l+ׇ.x`je[f"掤Wjk(D ;#'#G V~P(*%92rSB;-Š!\Zz{*|*Nd[63İM. #/dk# 0]䡋SjA8Dbޱ ̫_q"k\Vnf!)x,#d#PɌy| B=t|B/LU}UGp'BSىnA2.1.b*>dRI?ш0EPFi쵁OOM(C&z~a<{dtJwsV<+#C)i_ 6U5%Uyy6 & [N!|x1/;V9$*AB9`pF_x!_XS&vMgH,a雧ajB~pJZ~Vm p~OjbjOfQxMPd۞OWCB^I: E(b>5dC"L}`P6ۮ\V\׏9t*#_spXۋ%?bcPd)ԐRHlJᨲ-u#4çZ# #A26JmaMI鳋‰@Hv2ʦͫrD,a54+=I,$G`{gxՋB*Th?iPq2QN $V mXWÿ]K0d.z<0+*&}.o߷4!ν9KYQC}&)yϞ+A+1ii bfq^e7l1zEj!\3WXy–WSMaI)1jaXӥod~|:.^yh8O_8?\Cw*-a2`u g܄/_Tuޥa]i+ʸ]7%ơ}0,5!1r:|"7)'[=p*P5XNwNƳ:1=ؘYdQ'\90_&dyԕ}/XthZ4FVfN]0P+5˿> s[ M, xB$B!CZK/U DĤIW.tTP aa5MJ*O(Z4,w:lڨ(-,^BӨx4CbuE5,Ut7P^`cX^xά m3%<)]f'S׏mxj.o-"5HS!WNxm8H~AC=nFu?eS"Z |]ir-.o.]TM"ik{8I,‰]݈)K Vb~A_t+PN LL~.1 #ʇS@N->m;oS$6w) ͺ+Q APbqs@{p?a']sLUDMī"V{t'"vG[:O|=\8~L'$]=L$,p)A8D3 &FC욥=]q IoDl\#[pe?Z3JDem;"ܣ5+D8xUJp*oth&xjFԅr:m-s o&ycZ;P^\01 \ʁ~? X!?.lYGuS/ԑRC 3{0JB O/#%qUCgͮz𸙥g.iEw3omQba0OZI3YЯ J[ ]k:!6M?ii&t?3׎DDC)E^vuDF [2`mV>;,GXJ\kc"VJ5g/u?J3?cBE1%z㌂a_YB;CËlWy#t;Mtk^I#;ː?#eAaѴߣaW^ٸA~c{ lI#HgVC1Իv1l,gɥ{r ~PX<~?|TM& !;ҚO:V~߾(\׼jSFȃ4E,9xfלԧ:`d oQo%ઞL3),/7AU‍6 _^1/ʗ@~weӆQ-:_%~t7Mf©^Õt4#M>"KQx!|y Do#cf#g5)|=#ho v/sY-8vRt""؉'93H2`{S )UX<Q"IYf6,Iwe?Um~h7?9c^6lhI?-B>Z?%T/d.Kw93K }q2ۀC-ϼ.&_3]Mo ʄz!1*W"hL+0 Ư҈&i}VF_u],=jeşm^T a&yyyr9Y YQwg$>^\ D(sX %8" */NW( QSS4%h*kT#n97f\R;1 7r1B-\s?'<ׅ.ZY 0p7A?rs;D8n]BBG&`rZ sLj?US/?L^b@)0эU嶲"b>AwRq$`S\Z/ wK.W@U溤Js.Z@woBTeZD(ZvG~-<φr maJ_qGU+mcxRq$_rq[\ R\S5D;xtݞ(/iE jfÈ@d*ȣA_r\҄Q+=x*iW)*ٛg"ʰFXpyP}̥E ui Cd^A }<$;h͡Ձ uĎeO&8 "ǻʼn o0i܏.ͼe{1_,蟅"wŶj:^\qz@&3TY@RX# ;s++mj dij|¥շ~">1Ph0J0 Je l?4aO{k a~/9_Z[`D7mnԋ@(Idnq ƈF1F sH3KMXqh5oF7 {JmjwlDCNFk:18͛Nfx0NcrUu~Ѿ_81+áq¦nf(lsw=7YhwU񡹱kFBN=dk ƻtÊ6ف㞀 ='lCAW)n,5#q(pbkBu\$8bNSDBeXteEy W jӨ.R<ݭ^s9z6m,_`n(-uQzBvȷc gf"BrAR{fkܰi $|gf9!f/.~ڰF8 Quv8"P^ЗuAR 2BjX;սгGU*(fYuBX. "nXCK@0/ /B\1v>%>"L_h)΋Bf֤>]+Zk7]$~z*E_پK@@KX.Gz}?$=]nxL4!~_JF=ﱕ:5P8*q+X'ãI`Ѩ ò Vr촑K{\(f%U) j<? ^lGXElhY0XOh&,3eP92A?A !@ ԨFo[POfI@C͊ c%/w9*#a'=KW/n')kB@r{Z I4z#jB)roj{K=h^EfB\R?seIx1v| 0u"ST$R:?l<ؤMJeA:oW8|-%|>z4yR#d&]qjqe섳2!E#;؛ LafIKBkc7"K %{Pw8i ~q3&Vbȯڒǔ]i9p' L *8+Sr|``>k|2BG>._x//bE@1kdsQ51=n 7B}"IO >(+ !WU+Ie%oo}!P(r )@̵W2W|6҈L8?FeGҭn$+ʙg:a1/@}I1$֩|38t_w:pȈE`E1Ȑ?(UG="yBwNz>l;Y.l (YG+5vG"0&eY<,5 s8` 0Wr"(5(#MMx;1U* ^ d|Wl$W0ƀ̖`]%Ǹa(MTBҞ:JfJhϤډwuxcX.tyҋ|a^,~IN&OJb&&d7L))01d(񊟬𗪓Vq?ȞJďw8p_tR',Xc*)B OJoJq1mtJe_ḿy@=C <7):rt:qLO&hSAcR#."7[8GOZjZ+ t,~!qx9 Q3E b* OwvXDŽsRZ$]()E  &24"^t\%U} 4iMZ*.~2#sLt%XDGP]s(TuTLJcOsU ݅1I.d7TWTwU6^s˽(e2%-7FhB=E{Y6<ݽL.8 |)߳o,.$F0`xTJ}b!sM x*g?`yR 8)$H`ۢkP4RL3e]/QFO[}%4}M %-~<܅7 GVN!0p'fz%;oJi ;5棰xԍ6/hc-SX䍑長+^j21e\r eyX\l$ y4$VA$ i%G?!qb@GAI? NbUM n&*-)(5XX 8 a^:>*en0;U۞wGVǕË nz؎Cg`-J9ƝPbYЯ/=^;-e3R#) jCe c^.$G.'ڛH;l:?>zsGgV&;ϯ5=2ia !6 t; s!T9Dy+BOu]΀C`̙)ޠ~po WYQ|ne1TJ8є=OŤOiZ¤GGM}Շ~ g<tu!0wF.?O@37c RA4:rE˩^v*'2̓c崩Uxe* VmZ/H%op!N9Zw$F9Y!aQ/STYqVI0B/~u-|PnR ?-Viu4D\)8:PYlMܱJTc4GA!eq/~V%sI3̝>ÊQPV7dC Pj. 6b 6(CCN۵M3=7i0I1|$uB Jǩ@LӮ^>4`D:6)g9!WRe'L=T@9&Pvܖu@dgm2}VOGB'.&aS QhT! #˟trdm9$g 6$Zd_xJJmNqobdV3euftxԻM49[bCEx!F`keB2È8!/q4h$$+,to;e"[ʩp!s<^& yRbpyU8旹龜TX{j3}x=gǘ¬'1!Y.{@0&.l`%TfquN:<^Xu{ÇXwY|!X4Sf1 #X\}v6*0\iH;#yO'P"%'+Pk@_@I"]O5Yyti0dD$x]@d(yaDNyktp77Hy, VjE%RNJmGk3_ClVI/\u~ MPDS7܂dn"/U&P-яzzDMIak r:XX-|j #\)o@JM 4~V.wj=/hTkmr0: e@V;0#`w M>`3I&t4l;.hrHG7W| O`O8w}l0̨3h&,t^fsbf1 $o;n9 's{=\UJF Z`+*#|4D0ONԈ2zQdyי@.F􌖆DEk9ZZmS )- K p8!m.2P@d-S{ &_}?85j+\323uM/"zȎ2*  NNP ~5pb' kD~Zg+T #[Z?sZ4! 0]@V8{1В$uNygìi"v02GKcD$a3=vaYeIa<@y1f7~'7ک:ՖeO6̦ʞ,;8}>T2",:םL TXQU8_ruAt|y(ͅ-W06Q dzn2eARX\͏-Pc9Z~n(pƼsqV~LavMhغ} x" X/|O=Jg^b|EQPi$vFy7kz`kW+d;QoxgƬJИɼx2 $9][bl^8ejMx&b]EN<_ ,7i94;0;6]NuU'Q!m/D %S|rHrO$z OwuE]#t{q$#p6mVd}!B$yyr mXMwz TmqSלk@: hlYn{gXw'T'֊_*{{`W\ '܍y,Q}*Yr2"kvd^7X/,w$L!hjjrmxl̺)wPq@,jw ʌDU~ N'?g=ȡQM>W9aׇl26qoEF4~eFt)m .CE 3kx4:ChpLJTy|0iKin+Ͳ j0W)87ptX+^wAC+k~'9>)0 <yʫS% 3*S#0p=78P)Xx߽ ^;X-䙲qXZ݂PcU>T>٧婀%@0a#eqLp›ٍasvY i=@Iyߝ`&4JqimʀtOgGh%xlΦzӋ5}7>cW$(OV!6Hd%Rhq`|S׺ATnqҝ~l8h6 dQ3E$blaMXjmCQrtu㥎ECߐeDB<2RU! fYFj /~1UCUC(X:`}\:q%+O~$t&,Faac&9bs7Hu q<~TDG,Q!PL<=[i4c( 1K;.U/+phg|'&$k[UEtbc\֡IkJјt ?kǪ1x_?/$ ,ht t\Х3q +*Md/,zt& G6(7Xјxݒ 0LFQ+4lϪa$4#"\:up&Di޺+l$3f:QBu'/Gý8n e0$2( xdgARfT vy'N%3$E=^> maChH <\?E 8V 5QI;"v3%^z"B*nb[0圙F279t&PQ2w ,4~JqcK\hZZخQf5ɄsrPV [O(ny">J{ X'Ka >HҋEJ sdw@l!#*c.hq /D| %YVrjͺLh]G0 _K8^Hj8P(]@).ωghr+bnpO3}m;b4!lD7[E.P5"@(=8l.L As!@x:QACB||QW'KvuJ4J]0qĴC}< "tf@f{CāAx3Gǖ|iǛkD˜@/p .HGcҌ ȝV-L 8S)Y=CC<$=\@:cDZQպpǞE'M"`jBvgbơOZBrրuZvpUKx}n`XDvx-NR}&\"[qiE$<vPW[j6as @yMf_׋S>Z`HQdt; ՞yk)QLv+/zBhr?Lc̃(PCB[zB(us\ OF+鋭ެ<$; i@8x؀gE,dܿ-͎яnb&ErQ J.1iiC0e@Vv#YyF578ą^|GgW2Gv!7%C$ #>3`.}TcDRj%7b\2tjÒ :BL Cs9̲++Z4o p+;KZ =hqCJ35.ma{8iV!/ݯ(x>.-sqAPm/n%x!Ȕ@Za6w_,kiƔ]9N FQđ9af-x-B0m\uhi?Jg$T:L~J _9=X)0fCBzY (m8 M'į239I\6C,R ;):. Gh|a- 8j;_}dJ3z)v nI7H/Y&'T-( Ⳁ1uOXOl/E"U  ڗ'Վl8D~vu{-m&s?FT̯rK' ͪE!IK9G6;1BV%\hiA_!| _uAEM!7|.㌤!G -G粱DH"^k`>^YN֕6>]KlA92x-F圖Qy=@Wġ к았jIA(׿V0yp%_.P/8x{?ibET}%}+-ur-{$ȶnqu'~[Pՙҙ4`=OkgR B=icJͨv7:e \fYߚNDjp_eQ [?-?j fNCL5PJOxVѿYFia0~PHn;ˮocʵ*N$±?ʤ;% GrnJ:.PU$pX>'՜";_Һ]6KEщe3fP#*M4`Qz4@[KAE _#( ֫!m*c\Ԃ|iISGxb48GRl9-E8y*\w8p u!!LrfF~U/i"OL:I^. 3Ay|rlFǒ$U"I2NEM'8c|xjV$_/bf vCBi0(oD /B嶓Qߨ23@\Hyx>/Z8,0[Y@"r9돌ISkark׊/̮9&>['w:=] q~n%eywuVj"8iL")L .)־]ءH}Y~8G`9`ed cM^\]c8AF0U(f"X\<3rc%D^J ߰ c3s! $oaAF sKPLB_x\βP|A}ƾ\ LiqPNm;PK~ᖲI`{eJ ԠG쨛*k]יxҁdC$[~&{f~?c0!J HܣǞL)QBJ (-r2L?> R,;F4T> W*.85jbeS< _+Pee21ܶWذnU"AJEfFd5 n^xolBWvu'-̶G:a={w.Wb|/2#D8#2ٙNw$68vbEKD̴+:7fB3X^ZD2_4+"-''XT*ZֱC_8S^F &O[.ƯT3 eL߬ˆ`YG뛂$S:h;#i fw reVc;@DCֈˉZ]OBz#a5m<.|ӻr.sx8GH'dگ8M.JP0õ~ڄ~MH.K%+F 87gtu& !=g|-zTzf# ΦEHLOYdڂ1ApVYp C&6|Y~M^Ln0t,.mD iTS襧cVHtqƑS[{KJ75u,)uKko\wO|G}&6 BzO]A|Ƌ>3DKeUHJה)yl:##J4&>yReN;u}ģ!QzA?J]A/%[#!+D۲\v>"4OIp#7*"D^u`sm =or2_\>Y`۶m^Etז~A;+g`gl=ZfQ9ZBG`QjO!q`~tn0zRv-KAR;ٷ5<~RA/b;u{b'Sh eNզ :jkִ6?P?߹l)Orǂh]$Ʀ.У5U;`QG&`7|*J-<&_ =H#<}߇8uz*^f/iִ\%Pb+99>7iE`VzϤzy& `y;;Փ,+0 ϐ2Fצh5-/1%&t /YL.UIض̍^C)cL"k@n)$Jio!ĢyG4;m|1v6kEZ9߃MmUh`nD+;i>^_8tiKRWL>#C5=XP;v]_k!IO]Xl{2<Tf}ͺҾH+wܣc)A[t>uM 8#Ƴ"2p4 N'm ٜJ3ʥˬ&;{7LzB7R.:VC"(>7MAa WaC0UAqd ry^E⚚{ zKͨ0:Aܵ]rK]= 6BFլҋwe6d8P'"1y 1Bzh# TMoZQ]KHo'OAeCCSJ!I+gS#:<5jƮ]Y_Ϛd7/}֭n׮W~p@d[~'v:<}"d[E6 =t`>"<)^VW /8.eז {_@B3EgUvBs. R Dʜ 9N$:'.B%C{I~tG`%7H*`gJyD z*cW;4&ʋa~#vS*PP}}kTIUR FOS67wg/ѩ`).)Nߔwuf_ `"M= ~& +СcʳVux[B`kπh* ;i$zY;]jz6{\?QD}1vF+q i,}2=x;UGN.=URvًb"j5蘫<`A!u%Qshw^brZ0G~,Po GZ#n dg"E jQ|_` ',Pz S’!y),b3PZ( =dӿ,F=bDg ,eV$?A46 0Wn‡ EuyJ}0,MАI*[nx;D EedǝlݩV鼤%0#W0W,ڗb&`bJė ->Q]~ggH"Gʴ{Tnq||Ep?\FtT!ZǏ3?Rf!O,5VTvZQSmJ(Amy==xgNn]%g[sqVИ[`s\VlpqI re!]1N5[i*T_XB |7hj2FÛ`zwxn!yC ;cxnr0Vؚ)9_1Rs%@jdgyDsG_]}/r&ބN ?p#H(df2^n5៊m!7@OrǷk`-Bjtc^i0~]zb/9GPBQ<[;{\\?ܩtǮQ2nj-mׯL?g/M|*[OTLlA! Rdk Tw[xiyW%FvE ~IQy_,JQ~ÿ2験L$_?„*suT2γR'@J,XnZfՀB%N6wdpP8y7rTO% kB-T!DE%^"]6[cFo.D;C˩RHaZ6h'ﱼ@8ѐVG&;*Y$y:FǁV#ɒ,ݲO^I8{Mk=H}~1%]/v㸬VNϘi1KNś'etR̙.Lgģhw8>^vF2YNH$]+XC34^`/~&۫wQ~;uA&cZlB+j2Q(Q`,֐bKY )$ nn%K9q#-{9Y}SDN nѿ|Wz$ KLeഈrk׻X)}ܨ}Jə%wg):F|QQ;̀ˮ(M"iHݔ,th܋< ~a: ]q*,س$bzy9_]31PBY?„vqfߩ{S5p"0ZsJw?TP몀-@k1Q~47252]8Nɧfi[V XΫ8?jEbuT?Brԥ'%@ğs:gϽeQ }/nÄHWRXZC5nzDky0JݞCOgw8keeΙ.QO  !܎Ӄs7* `4mMv8>\(=Wϙ"T$KUޭ O_9i-W\GSBBi>`y_5yN 0L96jSniaw|/%I=꤁ uѽ벉pax D8mu !D S漏J@5 {逾=|ҢMY ׄ:J./ʆ\mH@dAMsp3'$E>d2NK `{p(jl,Hڗ#sRt)c\.A~**J>%r}#iS89*-=zm Xr$WW2T _|14g$$91p9Dp]j%N'obwQ%4lj`Mt/dI:ji]N⳱ !86ݍ*f]\%"fwlyۧ1SG)b 5 ۚ5) 8 xj2sv]/n$%jz3 aIkwi0,3Sñ]d(p3ݐG(fc mqwc$ k/22y` [:e2?Apu1!!?,(z7/{A+Iy\?M]Bg5|n'9F;dMū3ezo|[񈆬^_.9i%ҨK}Gz6,p|:FXs vRTX&wi? rl,4Q. yLQC.[7_Xō+V X8;VM E:~0aڦWd3;'8aOsq{ [oEd>G[6I* D9w%IYU{uAcBf0Bޅ%`iVubm}p5HN(wFL04`Gq[޵o 45,OnUɇYIftKۓ>rΐč\hB^[؋5r] ɨEp 'R }YЋZxU)/B|OI-%b>hl {5dhT1_q</0XAqyrהHmN֢Sb 8+*ϸWo۞gFUsyzMAXAȳJns}UQo8MrN?(؃!Ytipw 3#o/SfKpC+l .IR_Ńj_q9pQ7es^Ƒ |S%TTvB/M4WKLXC۝"wkyI4EuE,i @,V3de9P|<)ǔqah7*4yrBB{o%f"+YerYBg@6PǎOz%%IܙCc*~bu9#]P TeAv;6g E{LLk=pqCJ:d6Wq2i,WKzCk:vs+˽zn]$S2K61(a nJ- zXk}i,`xJjecOSI30׳1 2 {]peTK鉗Yٞ Jz)EΟW<)Ė)/U'ac|G`7;tZZDnb8dkMShϝ2PD;E g32nf5OTۦMZ# QZoOuցN[iEO"Q70@ Ktc^v0$Yze+\d-*O:p6]g,{ySQ"\-8 *[On~9z }FƉ.(;7 w6څwG3!`+͸\yP>ТɝqhFNkfXcO>nBϝ] `H$qeKQU7F{ANs7Oחuჾіԏ@YRȂ S~r; w!L!njSgf6Tr;`սP)!I;Fo!R +ׁJSnhC+5A A0WgN61͕uP' uJ4eH 3{}Dķ腒xGsFmJL ntӣ_գ9$GX{E]EۼHs7dHܭK)]V='JC.v4b4RdAW_*_"& ȿ2S= 2l|MޚRwg6t)EDdUhh|UG2S)1/W0h ƐvJuG ÞH3ȏ*=JJCF>h IFX FZ{*V ޹A Q:rYV_ՔoTb#ҤY\4s#Q)\4mc(!cNP Ci$Ķ*t$K9s% yt2vr9[ƍy(4o"xQNdDxN D_E)M1 αդS߅ `-+YhUHϗ{W\hf+L۪ o[/[ dkXDm7쥰7>RDnSB^Uu[LIoS^v 7 Ú*W ,+2Q'9(߯]3boQVG9UO@B!Ӄ"~3fPu Nß]6҆Yl!'pm] 'RZ^F:VFq Ž*~]{`ʉK murC-Zt/S= rkHpO6O9h>=5 '~ѐ /uBlB,/I|pJжyTpKZz.Ȧ:9շ7|w\wnSu_q.2#i`=JF[\ 厣'vl+ @\ےw|1,z۰:Zt5Ѭ$m_x9oɧ@*R8n>T6WU8T[ی]- 'R;b|8VA` CNK˰ٜCM] 3/HDg{S3!fD ZZda<@ANPfZ6D<]AqxSܙ э{u_9sC_ЈV>4(s˂|#oQ&W=R9\ｍa5ǬԵN^&e`j64(2X !ɞWQ2;H;X3,Έ/=e:cn$sޤM6Q4ŵz쏨qNmM,V"j n[ͯUZep5`ޒ[#!=^j\E;C\''jd;-2?9orR> J? T) 3^/MZWJRTdϤ'|Du(}=KV\hpsRjR߼TAoغ!Qs419-50wQ >@ysbvS" dXsË>׌5.LLzG)biLCGjh) olWwLܣN\yɗΡ6#&Wd{uUtTQp_ssZ+heKl;I>\e 8I1wԌD&R L4Išd,i(dS_y|s瘎^ij|x^Cv %~b?$C?P?R9I7Bsfw9hJo +%l2!]ϱr|7c%&HgHFr+]E>>Um$~4i"–K|bIYR},)7/\B%r^&7C+4,iU"I8t9PM8`\~c{s 4F.|_eTq4j4>.͢K-H]bg 0;û1<-#D)!?$Ӣ. QF`Pm 'jʯfV qAd8Aw|&: DHi~3#ՍLmٗ~p~Z-hF,h&ѯ Ҏ1i_>S]^:7N~"q*;XIB$ ִ83!i;;?~_|`/jeMK ջLڥrLh7yUrTdS-"a3` MJqp6XàeNoSt}XTXR QWw: i$bC5$HAHEWw*0XZ 1E?Oĝ3Iw@0RFdDF4𵍻y(Y+$FPH㞐  GA>XA>MRŘ_A?xYVHt< X#S[Dc%W}4b#&Mp?mofs܊&^?:sZW\NA];łq2NLxppxֵcK8%@k~7Ffa*n,wR5Pg&lk BO[]7g0k~~!|3:~6P- sA|<]S";ֶxq6VzNpe tg)C<+oJ.K=TvtV((^a93ZT&'ï 44y 4Bl,sDݶm ]5O"Pd":bln_&_6-.w(W;sx苦!XjAfGOrP19 a0ܷ CR\mp}hޢF9Ƒ%Xm),jS: )L4`y@(`ERRI)}0֑$z: o8"&BQ6]k>3й!?v5w 'O<܂/):\b{z7d"'orVe&)U=;!ك KO &t&/NcM4DFs{yQ8|A&ghsinDt;Fip91h" m^4?!eq Nql+:yƑ 8G$8%!N-`5IWg5L` } )aPGa72WV" ʼnfx' (uum\ט>gzI8ĸ(%z=xY0}kEۗk̩{Hb"BK>S?[Drs:N%<~3?N>Q|* +6N ]v+ԩݜ,>5IA7*h? &yS1e-My<[XY#߳*۞i' ęc3S~+Xr $NkI/"h|RzWBOsZ{ 2%ČCb6|8WV(:nooܔW f9lOx]4eP81I2rVA: ޳@/]tmnXD@t#_pN^S =zl~Wy ;܏(.XS08,yj] ̺O޸5 Yw rL9)*} #+"E&ZiB2m"8#wD}K+]i9Kgd覀Ky[=OÞQUաo'2P*s5'͸\Fxжܭ[A\V"\:Ip+iU<>J/ҡ5e|ܛ1_P}^r]> ~g4vN_ =o?/~:869 ',$_š{wBi4Rk?~8j>3Tf]M1BEtCkLfm^ƒ9ak;hR=:?e>>dX1Noq1lw vOd*4}_JWW2Q:2\篣iCa/*л;,n)idYF(Ox͒!n8iǟ$z!*k}"]W_,e֍C@JdW3s^Bྕڹ} u|}px 52WvW[^RF`-O暲&̔aYZ<4(뚬,.YDW/yhBs?-Gh(^;wζSBxULdrIIg3Ye&wTaZGfhzf@뜩 xKװw-x KL"Vmz,הۘ}4nr/%U@ ̐^k&ݛhkȽl%SzY{Ld]0dsؑiuE<]HB9x19lH=%^f×ɇ:pmpqc97N1OZ'CjHb{㨬i9" 5u8%H6I맲ϟ#};d6iO2ʑ=g]m;΍V#6W ȠQ1;׋1NϽqOщ]knѱjz|'ЀPe)ɎkHW%)$-< .${vg=49c[CݻY1H6k5Cua`ǜBaT1P/ *< yYy:Ck ГϼG1 C,7a1iлf@PBgRI&+ߋ7w,-H#nX[ůq|AdPv`InQ '@I"x: zoB?˒Ԫo^6]LѴIβI0W5vkrBTd'{;Bx 'Q;]l]1m[huˢOjB,Oܞ}!d9dsJ KílFu\3#$s-hźКK}Ӂ}ų%R w@WU8ODg~Z%ӖW*$Xsܫ I`vd'i93{LcHP4k-NLzEH%2VtNo4&`J>lch,4_~4Q8"h:)UEEY='-:*!=z0Gn`P$kE n>egw4Qn"s{G| y)9mŏ; nEV!Wu+ĉbO@2=x[V< k$ӓx_'W4yߡL ǗIz?ncH*3?'i(w  1, sݘrEtLzڥYF#"!ٕbP}J= y  Ca`2:#i!rgZVR;+~8%J dՑ Mv>\唰:{JV tHNS_*!JKP2!F  5ZiY3@щOs+>7━O^5ˀ^-&Y@.G':vj@&o It$1FoS#, ݚ?sRh Ɛƪ WNY? DkJ&<Cz?Ż :C"bN̫ҨN8p;yK&acT+‚n$eǫ9>yR,u$3H]NӀ{?JTm5^e37/,>KlX &/(‚)[- atjY'tI,]ٹs*@"bhncj> ĿrΟXMGzw%HAiG 4={Ye]0a2Ò.F}V#Qή"s>ԺၥpXu gv7j5KeB!ܰ .x צ%b6h;TW"h==G3}鉖ƄP%WyGP:y0a^]+Z3<%pb)> :`PbmWC 4?2+U㢃E43F:z>([;-m&&/<)*/;NTq /B"vVY`0i,hΐ2+my-y(B޺ג$?: Dǵ!j[%䦴M,Xj?F~I5 f\ @Hx*5׼>)_s˭=7 Cot׀SʗMZ1<(RzjQ}Z<{ Ͳ{]v<эnqh57[]`֒mҮO0g l Vb(XHrT7Tz CoضT1q{c-L|Xw{I1l sL:qy9I1U 717촾&!ɁVeG%ݞ`U5}^CB ü__d 2K4sXr!UNhML>guW!:|.E30 rXsv.D z0+~54HowwH˸ӻ޶& =}1"ۏH:.oH~xeP% =~%{uOm;F JzUV+>u̸Sh*#wSE_s=2@̲T M^Sy/'Γ &RR!d,ۘYhvbe;i,Fy{+\>D?W;u7G)-Pok=C/7S?j*okaK'889Ñq:MֹUIB/Y]Kl [43>J`MtC6WIE#D݇gwXw{9!!32PU9B:2ŏ*G|TwaH#iGʋCOskh6Kꨝ! 4o)QKp@lj$EWnMx |ȴFDQvL#1/C {왏@W gobAA M>O&ckk -&#CFK#gK -Y<5? C& č2Vlt>후Reф oGdG_\X:|> *`6Yik0LpARbLWx-p_Vv(˴C9_59-СFr+[f 0"4԰6gKh{8mFuP9[;Ieb)i&`YwUT=Is 6SbOzhs:v53v#ՅR4_͔aϛ )E a 9lԇR5tə"xwN"nI^^_/A Ye^cr`v~{AqЭd}RLǷu|-~[ckL[z s(q#?*Hׁݴe_= A҄1F:& *J59WTWʰ8\H&sA p w2D:u/nbrNjN*/vDDOQH<^\`㺝)J"5isj(nXQKVaLVB}iN/%8WudD|^${9{ƝW)@JlUjҾ}#ޱiO.cv^8My4"3ӛYQڊ,cBcJE߹%،IIL- ,z\Uv3↎Oxu(1O=YΝeξhmW7c mOG%;;B׏1Mi c|K\%%]Tv PB6P ?h6s/v [`ih7T_vd/bbzXJ|Keg: g0bY0 Uu(>9冉rtzB1}oxZmJ09; * +l]fr;ڽ!| BW`"DW ? GxbG#K0KTQh } Z]~WypYJ[uW|kl>Ыgz Z2Գv+[,4x=gCi][ 9'u=Og~Jg(@^MJʦ Uqnzbd?'m,v+ Bh㬡gY\ ڣnT[yd:vjϰe~fr̮ k pkե7D.; hX,cc y Ĵ)8u(iL5;*/ɩq Q>gUaOL3p[|kM-w.H0$BAS&D+e.{Kw'zVW +Su<-&vؤ~+B¾W}B ~&E[KCAoݡWŊPbsŁn@"PZvrtP~g歔9o;{=?Y8'V9f݅iRDiU}]tf͓}Vwx Hf Iѕ xO~)(Q"ίUK|atǟoh e]ڠb+|Ex1Yt︕8VIR0NJ {["Z}mWVsc3q_!ĖIm:_,rmÿHҞs@Ǣ}Xk ÙKl&.]b}{Acp*OZ-F!A-Sk(3`e̦(lN)^Hҿ[倝2 q7 Jޠ7./Ƥ$㈴*fx٫k*C8UGs?0Yzt; (8/"+%l 'g:E$ŝ'.Pw<.A"Iis)$vɰ)nO` _9j^OE{dV'h_|-*[f$ ۞SxL0FFDDk:lU& .%vU#pɊqa.Ɓ0ĤTLmQ̲(vÛ?kQ;p> "A4YiI Dx4 /89+&y]n!w?+ra q_ gT,#AY&Rjؑאf4jO7ʡ`4`h?5ɪ4ᒦ_NMkljOd]ƃ=bHWLQ(g._%, ҵȪP>/Śj%8c{?#,]a|;E']q๫W2I]i Zg=xb%mC d]eR+GrvݭShQN58xVh=-] 2z=HkWXu|qa [`0g!;C mx3?]O $TwT$cz|LDg/O453oEI䚐CR4QF0-޽B8wß1+EYT f"m>!$&a$s؞-υ>uhm.0?\G X6=jHyvFC~y߀(ڈpfbZ&F.*hb#A.Z5/=%eD'ZgR%apt~AҡfqN+i~F,#D̊5=p W6l+h>ezkLT29.yrJcSHP5P:TG^Jyy \Wٞ6'qM'^E^*K [fKNy(/2kC5%2eio$ٍUP9\/n &Dnsk M*8K"M TW+w>*s`TE\@xi2݋NuD´\}\Fy/e E -mr)XzM^񨒱=[ێ8vJ^z\zx7Iڼ*gfDE]%aTɔkRVh31qytcko_'OK6`% Xc#l0CAZ|h1rwC̑9l g^゜C 8ES KAcD(G#s\Zү@)0߯UXզ:xPՍ; .=b(x$ fШ*Mgpi[Ӱ[FiRS A _X.\_8ieV/Tt(oBkFa!HX OMR9Y$50 _2Y|p&Ve#N 2VD]P>h 00[cp(f?%ht%S숪^pCj\7KH羹 ) )1"ْ<b re2?ox@"QK7[9|-P ?'fIHP$pYVFxKA-"M,:NbTs 5x>%mAg )|$uNOjxFkʥ2p1 hq2ޮ_`{,Z 8y ާ+TpShSI@d"q>!m@}` *F7F4 :_vE*ϢAp=x:o| ~K`]΋Œ #O e:ΊT`-vC5ͱB8*4`ȋA6 7]7wl}: |!z tN\lUrhxˢ*t\?NזbT݌(ROWZca,P*Tf}N_<`xTH~Uޔ߻N+=Ѿ<]jA?U$ !u杞UY( r48X)T M~'A2=zɨAq8S& ESU=s=rP &'b&TY"\ } ZybR6 }+te ~\], ̀[H5OoEF4ڔ4|W:tFjX)(3W@]߈+Άg pZ{Z~pBkOɹ*1& XA ^ڍ!⧐ ͘9GB}sO/ !҆X4tZN*FFH8`xN.?%X,,yL.%KG^OB-<:TvwbΊ$ȇ)4sXuU_ z34(bv4ِ+}Ԫ܂Qp{ΠB*Kx!EhmŃpC&% 9MQ=k j Ixk|Rgq8gX^bZ3⑎97P/ۂpz՜]k-2(+NbDbCBg')jhO= ႐Xv$px#K2X]UR($PI1b&VR}2ػ^%P P9nzaXʤzMjcV(fhFv0ʤ.57܁"3ہӋ)ٵ"r^f3z)s(B :0_0 )nCFkHA+B@?qIT#ۡh4+VUBXyvHS^)6)BBãRn 6QT;XҮS;8>rIJ?U9 8s0?&1!lU/0cggQ%/GD+s$z qT i$1G5KH8 j)^AN^<pݨr@b*بfS>)x2y\v|`1G<g&~B}%풚tšB [*uW2:j}0_ Jvv|>w$*% >B% G Iw8 ' YtiO@c42d~{"S~FR;dd2d_`b1<A K/YNUg ss^j?ʼW|?dI 9ɺCq|CϵdAYF|8+eA2Kb=2s[zaw|h 74mQE60:@C| \7((jIN"B.w}5]oBkY!MUT~;YbmpBH}u_51}'-Fғe_U@3FBGx IUHE ~kO)4g$(ڥ*<܎HznQwCHD,%++Q A7cUI;߷~eF:buI_2NoΪ\iz'2^0cXZi'}#gGW71]S˭iŹo`/!d}혁 հ׎{V[O|)Qz3&t:bypq>- <ۋ#(ñ*_8e;˰1ͻӭ&oUkև%k{n,VyL;E `-WUrƉ u [%8kd{R 19>~ ]zxgwRWYUǝ`jlS!2Otߠ64Q#WȰ}\/Vc59ªo2Fu:!F˓2eJ qoi2eA1L3pڑnQeC![+ұwbݥHa#}!8;6  ]2b\Y? h^ ­yR̆0Eێ3hqUI{ۤn.:CSw[Kğ`' ?5ŲY{ ѡr)ō~;9?JR<(%>d xG=ځZs@].)-;&=h?XJ=Zi5G|6=p嵴*ztdEK .Oj'3.vAjDJ3.`~lUoP4N<ߟp:5DN-?Me9Sz J_c(Y TS=VDs 6#Gy7P G)V>nM>}k4:QfJ 7mX !ׅOqp6 _`qh0UzY-R&%()"oKBL145{Ğ[XI({yRkVe,&3[?'4;,=tӂz5w=稴>"Q5WU,-~H"]hypЦ>|]h!%!9gew)!$;y$+8WoC^}GvC{Pk32\췆{|E$19'Ejrcg'@2 QLv*GůV \URjs'Z[Ʃ'̙1LBԪZ6A' a.LJ(AYQ3L?#2ej!KBjZH8ǢpQ1Ǎ?UM@TPCv:AlBlsSzbDYQ@Ih}1ISDktDj?q65(A:VM)Û3Sg/Nf!^fgc TVR17*MTkl\zq$)6v"'wy8ot;~YiUҜe,t%b\k%5tQOٜKX.7xi34^CD2.9;攼wZ ƾ <$O9Սɫ~te;>Z=C[``ߓz2 ٌN =uݿyJ˝'774#.| 1':,\=//'8re&^sQ|6/ s"SvAap? eUU0i2qя+SY9mr{h* ʭ>(v$wS`ncSb\)gN.7Iw͡g0L<5^e(ۖLNZZk5@O u7 tߒqQ&6 wM^)`T.恦z{;F\Hݹ_>bGLrw"L-S0da@5&lN?w%eInQC)ٕo&}81dG;ŐIkm(?]|rs@!Rn$q%NP __b-ݞ7Ep:m!/*?6:=dxf%2jKdeO!ysL{6Ɉߡh )jQ'',طM:[2naǶ!e}|s/v,ti MC0Oe>\L@p zE{TQPjϵ{5mY FVtin]')įU ?;͹{2F=m 6uss Z{# y):ھIa/ 9h=Vrlխ4{{'UC딌TF%Jz~v-ߎc$-´hpE5EYm|; ,)k I}M} +uNYt}Ts*}mzܬI&(ı3<KxX1"c;Ț{I[Vi[C),?G@_|?v t6M>!̨dwUfDDYNM`T\1X\HjnJoIf/0c3.)ԖtCYJiY=nt)kC*aIU$Šnt{X5x~Sҝf͟gD7y| U<'^h$w~Agl9r>JM3CZb9>X8T \7_eòP%5E@Փ 3bOFj@ƟNu0Km,*S8_obzWݼ8}I巳G[g:[})vxv)Iʯcv7s !?C.+W: kG.(*!^jfHNL3ud lREOGNfR4gJs;#M>EF?9E:%m,Kɤ7[9m亚0,hx]ՏՊ,uEǙ[5d[B8jSY{j]m(Q-hd\&JP. ~)fDcHV'GNU q, \ns)`n~v*uCXY;/PEhF޲GX.Fh"?Y.\p^+vxyD%ƺ(w.bSmhWצ4-n2Cۭ1$[EKD&xSVL([fHPV/^؞Ŝ^]:,6h F Y+B12*R$F2b+_$#Zws+4רf9YJhϤ\I :&@C4Ag׭{4d$dnң/]-#xť)hKHE|Dvղ9yϳҼ^~s,JU[>uE5c7ħ=!`'Ywr-g :Pg5y)αxou|*e@3[y#pMQ{GamϵJ@Ԙ*hב\k8;ADҹ*po2:$|MĹ™ܔ9K$ruuWl3q}9ppsXɊWdTcJl&==.|iؐ7'Η F4;K@?4oVe6[/ IrܪK6 wSinjYb/7D,gM=blH@1ak B1Чt=mc{Hmj&_\gls&Vˤl>u#Rv _edׄamNmf1"d6hWV=OGȘ',oˑزljmSԯse"n!9C51r$*0^~7|8!n\͔u@X=܃*[W#p~E1IN"}Gśg Ig:O@'#])pi/,@ C#k[<]__Boɤt*3ʪ&J+tSgKxMVĻ-$ٷ*TwI#R,c靇]tcҭ*bPܺP98?ANSW>K_*` &x0Yr6?g,c(OQH.U."sK2&Jj͓A> ߪ迯bY |65!3wHYٴK,fʋ1-ӣu~ bP`##luv+Y71>Ct+zhYP6>Dyd#?>&q4} l2iHSeP}+270 `%Q5øe82Gstl9,6h8ؕ" :_5́5$,`tB#dHt l }_{5y;+maA &c}%NI[Nu<ŦaǓ(~UjExmr:ŋ:GH4IV4xhԻKQv/._ RxHIHSP 0մqU4)b9䯗d)qllTF}84a3=gmP ԩe]T ꨋaso-$r)jO> }NGNc#/RYE>RC㤽C }b!kYML?ق8'_1`p>)Q~̀2D|Shtc>l V6 r9jnAx+^KGQ/ƻ$.YX6#NQ&Ge̥"KޗsGL=>6O^W^y42%(KT1G JPŋ"K@pD(P|oKH6*ikd15Ľ3XGƒ/p.8zlYN8zt|)L/} MLF!j#PF 'CMsܝ7rɋEȯW@^ZW3@ZˈW#su$:zq^ {zBN`'QCZ߸5dr4p VG戴_Ҽ??mΒEd4|X4QSV`&~OqߝPO^ 9@^t&>T|>@llϝ$,E.2Z]ΡnF=*6a@]zo~͋,|;PMXs|ZB6YӻxB-ax~c]xwIRQcx6F%q2 !,2M%$p ajYz:0ؿ>D.0&~$z Ьu槉3IOQ{di^Xcх$k>Xډ,zr|xdO1uJ A^S{O⦟t_ВDG)}{ gΎܸw'k.llZ5ln ` )LɦG^мz2}[B:ďl}I5@ p#}RbhT=mAݠ:+$ϥ"iBM֙qAI>Qm޶ؔ2UEx4N@/E4AywC7II:L=Y ͅ6ܥv\!A\IlȠ{&C# nlq;(đoil|@Rl\.D>t%q pbj S Rou;%7F&ԇC#}\.E/@>u <:-Дz@j=@ @ Ok4*`usBF"eR>an{'#D!4BlxdIʹ~2#| F9etfkKtdxQc`BUG1Uޓ[ &\RC /_ sNɜE,X?5L؀(y;%WtNʇ`Z*'3e L+m8 &4^ k%v r5Qq kKGoۙBB em!yd%btc@fs'6-Wb&`>|??~6HoKlr]2/#8}p>RJ㫥2!OIA`4ee9- uLjRlǔ kc'nA:!E9 YJ6^ {!vuv!"Cގ4k=hh LIpXf <~A謚iu k0B x-ވk)AqPC`԰wBrCah%YJQ:j85f?%aDl;˚1<=-zJNSExW<[sG dMXjtiZZAe,MɺoQ ٖzb.]}FȒ'E6D#o AUrȧـAHdC$/Re40L#;/oXf&]6EH6q\~y쿛y4BXj k1 m.Pr*mwD4xIxl'!-fl2b>FvAS>C%l#w{ۂ9ʎHWqk(|I>?h:(lor|?d/ABv3RVm2[m#k8 MIhx`h/ɡ BJeX:{u3>[L|= T *>wJSVA䖴l2bW_!OdH1w*gU8{ T}O]t±T%YJ -Έz&3zHmy$&Gpi 7UqD_X RV˶t!]x (IWw%Ϡfo?wr#f..P>(6|aVX0[3|[2K>SzϨHT-'k#+.ڿŀ=#?' +k'/Eف„CK[P7ݞΛc6׭J5]ҭɃTZV,YeT iV={T< L3MKMVsH#|mK壠 vnNQtnOi"j9v }W9ho8r&ƔLZ/^>^D,N OZ\>[phܩ`ā{X*N{Pǧ~AK.dWϪv6,Q?9q6?>ONy@=@PcΓZErX/Qϯ_j(1E\OlJ`8~}M I{(8;ʬ )_lAN.i5&Hm%"No {ٳ/eSHF/߲w_Ģ gcPRvz xknceRw^mM+P@.Y R9w 7ǫ<ɭDaI"&mk8M96c:A,m$sJgYf~zƭBsrIAvX:tse/<xƝm;EX]N4+7[QW~~6q.x߫tn= ]~ 9)FߧJyA!5->p"i K}/μ XI?;yceyț=̘;"kT@oO]nrX59TqHD ՙkJ21 m[ rYJ(8^z$M^ccbRf';dMhn|ZӲ4ǃQ ۺPDʥ8Kn}X֟҃C"^s0ɱ:x dɓ+U^~t4C1/Rl RrLy)=N ,rB,Q 2q 0}QL(`^HLL@ OLi $S;x:c 4nŷJ,~,m:T>"KBB9?G8V1t*Zd؟qJ0Y0?}{5kWFdunX|M!6PH1KӁ^-y@ ';0F96lفƹd@*C3%Ew*l&p(tV{^-F9Gaв3G|ɛ?q"'=qqm26׋XnkٛsX$,nrxydL`:K0fĉW%zXǼ5roP9sUhuCXEgVgiX>lj}7kўt z}ǐ8_I6bSkXZ`iZdV> oЪT+})jD6jo w'zr`O59L{+P0 XH0L (rn$?('NP7bw㷱S h!2`G5g3Z<-d_.&AE*UB6GL]l' h-\!ggLPưW1!#I3FjZD7ĞE"x ̩51r,U)f5 (V_,q32*g]xMn\^v0z,rIn|%J0|Us O5f]F|]}쿬ϹAp 98>7+ f$tfrlY5XY˾D@re'ݦZta=Ffd#y> ar>6m0@k~ga89&[[%NvEPL#[yÔM]u,Y*==ڔGrV_޿\_ yLr> ]UlN饡-qp%D]V_;ֳBdfɱVJ@1TWP}vٲ!&>jxUm#Ze7fH[0U\zt!i"#O]`U~A% ~rOAypN8(tmGdܠhKVj^f;V( Wؚ 93_޳@1vE%/O*8UCl]{VH8牨D;HrGΐahey`Xxé8ꦵZ85Z~\{{H.E;`I| @ɰ݆[X %aX[_>IK _x*M1C JXaAm;Ga'@!]TƱ8rm[7I0y%׮.%7V.k# F }wi"ʜd?ZJO_Z|h!l爌6n[<#(bfoI@.594eh Shb_k|_w9v6}) S&e_!3`vN`nMl-s:e-\9+X֥5C@:¡0_jo &%ϰ5} ~0e-1 b4;&zvg_jK@,룽Ç7&Y30*pBSz6M:QW^ŠۉX=]F"=X!}=:lbU$-.mpQcsTStvFtWǮ?5"lz"fo@\ɵD}bS3%a+bxM7Rx}r4]uj rG* ^/kIۘ}KMC?NrҔʫ 'jQm\_AnùAabUI\5\46zR9eq (s~ؾxf˓LGJж[Usq l* r\>|7yNYS?bX\H%aVl 1:zpjH(DuS4XM뭰|9=ʪԖܨ1~f6y 5\DJ+/ĹPX>WmhL/Z;%*3gsWDמnIۣ$3Iݣ x8ÝmU5S=B2wXhP܅IV: wR18"8"*2^k*B%@&wT~@){n;(c @i1q޼VOJ'b,zRPIpKl]q</tТWWy!|D$,U/rd*q&kO M& i kv>5)edh;N>J7x!1z:bp+ozywZ lFn#`TCp];zHBC3#" C:Aڇ<3]S RF%iSpSo¥gu0#uO_Bp=뗨ܴ8"oB&h=XW7po<%)/R]B--Y&> ?dL蠨*D@Kn$R{U23)XX;ԒC LMwAb᭄R!No[ٓ>c>~< +8D2F4US61w* %m5z@ѨR25e26tFpi9)~c@xM^z 5景N!SD#yR3Ba*|ҫE$F 9}2q39ʝڨ^ AAFЊoײsuVCE1p?Q- Nt[vl@Y' R+`T*F]յMXp^bn~'EߙRMDLS$g3c'2sjFW֌0s4gO}.UL"]= `N-CXvV0:ѣ}T\~2ʣҲVMU<}8Id<3I;2h{d;7Ic[ꙮJc]biO*~:#6K>X p@A!k{ XS-swH͵X92AϠ&7(,^r?Տ$)ܞjE2݄=5#BY}bo6Ƃ\pǡ >k*"6$۩z<('4)^J(arKo+^BI+|&҇:E~FRo}iĉ"/7H6@+PgqdR޷GZ{<(@ _M Ei\KFn (%.r;6`Du^? /riΈޘKC릤dfZr<聘[-;OGnQFԴ|ixLe7WY 6XQISd@83 S`N0G?܅!s8M/ @q"ʴa1 5cɿ" lS/F`Xu5pgo 4p٦կ4e֋QBJj:#Y14=UD|geUL8ԏט{eo!Q P Y# Вdz+v`v,%ڭ;&؝w5G%oJTůO<hꦥԩ~YN,[%_gZӭ}pVwSMJ>T +:v e9a/6s(=*(;eb%v˖;2ozU3IfpO'&b5wc%&~$[VoBaCy1N㇈p?>5_ 7=As+QY!D=g`}UM|A09be& %*S/ha箪bB7 4 koOge)H VQzNMm]MLjʜ[%AD gQЬ>8x$䯻ӫz+x(E(]~z"-5^ӉY(`-[;(cp]f[UfF-3'4XOiN̨i:/j[2/+mBEcW`"Wz xvtaud!f]_}/=C0s9CY13bnL]H\NZk3/; Uc !cEQ!ظmj>MK?Ek '_d-oARr Bq1W]QUf*ӜHH Hb֥ųH7['nD?L?!X3Ū-|ٰpR%LԀwuXధr6ÅR8:[?l4ܜ×a쉬E@G.> A(?ڹJ eq1Rױh) (>e7dhoiWa9oko& kgf~QzV!CB0!0|hW'X!6~B3p^ƃS\}\hr$2U=*tn6OuF΍H䫥q;4['oz%#4<)[u,b˝)1nl5(qÜcv-I}|*7yw8@:^]e Fnzɽk/xg݅4;NΘ S~ZhpҰ-^Fs[|y>¢5C[$ygDQsܑ+3$MxtmIѨvFr1;ًfO($+\dhTYg-uiM''8Kr=vWUϞ51Y8a@>V;,lR5]ԗWܞ) x|;'3 M` Wdž`]8NK™ W93'|/#)9VȻ{;-4pŕ3Х}B,;&`.ڭ`4V4>Y:@0c9VCcfR8S~~JݰEWKtL %;Z*U+@!Y( ɑ-shO`_l !,k)ɸwbk+CV-ҷ9P1teV|.%2&CV:e*#Hsk;pҦ`6S<dw hk:$yz}(|qNgLL *K@9qQBkW1ҽ-Yt%Dn v逧Yʙd_sۤ3{q{ҕp*!lf}HTiE~-! }DZ_e oHZ;3j#xuK367[㨸$ Ԗ.΢n0O^ 99=jQPMo[!^jpdCuewf* P' oliy {ਯEp<[@h}G'^[A:e2FɻUJy%+`}GUoBj5Zm d6\tƠN2VOI( <0Ada]%Ob͎Y7U{?"(Jj茂svunQ_ܽlx%ͥ8l'^HN?73`XmU,Ѵw '7X!U+*VJ/AM1> ^̀7G_hjind7>p0\$۹ +|z:TV@dĂC3-RVݳ+RRgDԶS) i}4-Va?_YZ_)ZnXvF V$SfL7DPDs5B&#Og}PWMHs^ZG!*hXP+O-lg[)<&"@m I?4g"{%t6۰jHSUtc6Ii lQ!?AjK|Tu2I9f|#ā# 7l-W/U?wRb_öeh(eev4?wzCZhSP/sOm<I<DAL'K ޸Ɖ8.TC!4x&9O~A$b@s "cR&Րm[э+ z߬nqa3,q6OQSɜ >P;7Kyx sx>x&ba 7X j5pD̼m lp؆McTcԾs0W 3a|bk=U@}OઁXO":(:\d n2uP(=,E$($̽S`3X "ȬrCTc>joJL~u}/+9TD9MKihy_J>Yg5nHM@PT )IsݿTB( ,\h̍xnY VT7A{ Okd 5=uUWg?9%ײY{JaIU^Cސ7oep_R]:@/ (Y2ߐqی,ۻ r-_ )jF]>E _]>{\z5&'#üSl-%>oj@sdh8x|+BAOyk]r ϷcKcP\NBPLC}} "0&u/s6@ۇzKGOLLq($-qdmuA{^T4L)bPeC. eMw0qA1FW8?1늖qsv :L_T"KzLX_ YZm^@ vTSN+ (Bml(CD%V g qq=qж:o 꼼.#rVr_ER+L#_q_֫-Y&ӂR_i;`UI`!ꊕjN]a0"U[,Ld|v#+:fdwqxL7E >_8f?%~Xt,(S.EyءwtL hD3?V7U *ك02/3|ߥ s> )=?=F?sr >XW}&e}/]7#馒wPǖuM=k5f7H:m,rZmU΍8 NFY_^e;ʛAd J",ɴ%đ6ȂoEaioL1&2xt{. *SZQ)%Fa@HgGDg8 ESQ@^ zQ?BžKpݲi%%b0K"%7)*Xt|NX sRJ$S4l0b]m#aeY[%ʫSRNEsOgqJzF":h2!2q 34xbd"_Wؑ'Ѵވ64N~dٲ[ ϵWޡkwoeSP7{>{V,Ytfa"`C.Q}ROMpD9 qVgb JUH4DK^  鍟pت; Wx@=ZUEt7RxP|C;]"N !^RTjI Ry\[XI$tS O:]Xp: 1^{?)2]LMԹ]_h^Oy3 CAdy_JBP3k9PF# :a!Oҫސv5(Xy]eڀ &(ekZfJ9}i|'uηӵhd!Las=W? $Z{zn>ZX kh&?a4 '<$MG;&-N~J1⦍XoP~{?/bd5wN ;2gi-AkY"8/Lk#3ZR?TxWF\S;_8 DzFrBT53X_bfhz[ui*K1MOo<|M/I;kh~&:j5J,:2G7E1#$6QF"Ga]RMOz{w;tCVs$ o/,mm<˓GOڷQmG}(T Ν8~2ubħA^B㮔EdڶA Xg1HǷ%/t8w폟Ys+ 2lR1JA&C3C%O|)K^r_u; ks鱃,3GS_wW'j 8 C!ThprܭoC1qETXIt極 B_Ts5̢5M&S/:֜XVibHGa{KZղ)@ E>&~#8!lE1-|k36D=h%j3pwYY)upZ+ LZ ~A щQKV*N㆟t\A(iW򷸲:T3 G{,۝iPKR JUWύ?f&*##   _!RjɔyzF8tXϜ=\ p7EDfX 2S5✔<}!>8ذR'/zY!fؿ"_/kQ(Щo_<)~G?Εƍ$7_1rjYhW`^ҽ?VpE|^r M) o皸|B52'0$g5:m;cUj a/G~t>w1C*aEcX? MOs2 xνS)K–֚\Gڑnֹ5$ڟM8U]Hw NQu[J'M,@$8JjM j4vybQ #M.QrGX 8jWu "+GYz,g‰ %(-(nڂ{ `Eu#_[bG\?]˻$çNq*x"{m9> 1l󎤮I%g m%=KӧÐG_sc(K"DkLaRbdY2z^fKf̆M"#Xyf=uǐ`#hZDx/qh<$wiwC]wwNqǽh}R2N"'c?Zx\Kh64쾩VRD󎠧q2v. Fyk'y"|k4ښlL3{q(IT$XV`ɧS(yp38tjJ5=N:EeC.|L9 Lxp6̖GԠF!NwEvT!uA|ɯyCtg^U"#ua gץ>T߭ӝwBֻB5W:t]57ʢIsHRfN`CUG ?B3rm™Pu^"n[WHBc,/%c"X 3$dQYb\B#IZ 2/dKzɊjIf.o kk=ud䛵h uxK ｍG',ѰTCV x-pEDȂ_4U^@`gD2+t|I'ZWCo 4bh4Sb79`BXՔB(ho_ޥmZdAJ=&X?79>2S =&jsX(Ј^|bnhInb EG<‘ HdPT7$hFZI"fP쁢[W){XsVY`T,Nu݇=i>2SK˱fb,k܋faWHGaEѲ@ş Y 3hbex̳j#l.󚺴S}x$SV|\x4Shm@ə[[SNkf%ĵH_mӫaIz"K .fT/~mt*1nG8^k˷BϳA~*ĪFFg|^S]P6:w}7+˟*3BWJt]ǢiFv=l''Seږg;2X9"0٫UU7cŏҬ>=e>I n2@~:u|Ġ粑ʄ>PTO:vP7_= &BlN)Ky|nwd/qphr#č}35 `ɤ)T ށ27R ]ݝ0f6Jp~9(ii`c'fj8~=7~Ri_M2E86XQS}dp# 8}( MS1OƇՊ[Tu;9ic)%=UڹÒEo=RQzR0yXPyiY,(3fy3v剫<Y 'ar-dF•M8bEC;_/6r~\pv?CKMpO4v±N}Z^k*zڽF9>3k"Ok jo MМfVJcIhUxOɆ5-Y>̈́8?4 ;8-&!iycS:<kiH9^Q3A{h+ZM:$;.öɹʧ)| hGu_6s k7eT~S0}F ԝ&*bXr?,p&RQh,Ԅ*m\ CDjDd#` $:[9iwجRB` 8rVݴ 4S#p٬M\&'HmSI(FTv`f^$j?Q+O m'>,9&snGm.b(VP6]#!bFcm aWߣuO^;&/?%q˙\åjy8`RK3^87=y\ eu[FB;QdQۖ nX3 l! FYlDŽɏŭAt,pѧ;A .Nj_InLp[ ( _ PNCX+xxԖ͵"6 W[ap46&6rZL~S,{c  8E1_~It5 5!#xEg. !$̶6+-Q4bO28C؍]t<|sHUhW*fR xQ wͰy!?)*HsT=/6( 땀BBG8f Y:Ji@#bve1֐Xz oi{%Y 8Ya~aF$Q>i9Go)5ߓpFH 1ʰщmcN0YegȄN['־V'li۩QRI'T†#4FH 0P}V &ՇòmP_;]Vrj PB~}x'wV;o9eq;6)Hx !)}4Ͱl_v Uf nrE2rTcѧ"oS6,VA'XJ \$"Ph`TTmel"\Sք w'nS=. rk 9H]`iEZ sIɬt!εZ7Rnhԕxm/w^wVG>_>_I~)׉5Xh=Hӳ.;řsAJڣ||\2D:VLG)b'8ȫ Xo<|E6m찳|i˽3\RysWee)6"gaWO$aIX تNb*Im4`:7fGh#UCr/i ^&@ ̅8 ^b=ZQR{_od&{FV.k6`ƻ.LMmj做Qku'蹮%MU{ NÓ_ DVPA' ԥjAd"nR @ &(9 {рG5I1zⵣժj|w^*_ϸ>tժ6)i* MLR*nxKOۙ< K'5? Q\A|_ЫÊuχKN?^`؏`MANQh3)y 1 lh=j߄Ir Q!?czR-7*:ګCyrv 5j h3Bۈz,R.` qOcO $EL‡3R+k˞82%S*AfvD IQwj_Q[E>`'sp] Ҍ|(UN1PS$COp⧃@-է@fZhcvw[[Yu !xXwV#45䛣m`B5dq뺎8+>\ 5l&jp]}k%Bb)B1},p`ϷO|R7~S4cB n {NzԢỎ !&FDbeωhi@C:/6Yg&u.g t@nkǬYO9/@20k5Lfg+oJK,mGxY\V > {~ΌѼa-cl~^Mf)hq nPbmCi]1Ǩ蛕飳Pg}θB%"°4o* V[%cAj0SvgJN]hf39J*Fîcc'oQ)AOCy]?>n -Y*iSrY_0BgꏝV{#Z1m*]dr ~fq*vwwu[}QFٹQZPZ`KZ.G蹼NJ \:WʪR(6RՎdĈ1Q)=;j׎P .SH|Gӏq{q@Y'ِu& rH@?+I7{ L{[Qi \KH2Zj̝a%Pѥ[y,Dx<+d;Ӿ!a48ݭ b(`okՊo)}i6_oh>z١eȣ̢ ̄!2R%,|pBMo4YLC &be ?AzAb鷴B@12lϬ#5P[^<`Q倯b-6Ajx)Oy>ȹ|][`쀧7\ z:]h61Zn=0;&{KpOWy< I4>Hr5i $~"+!Ƙ)1< Y OsiP-t`;4Ҫ3Bغ’f>G6#9|a~1넠 vDJR'~$14rB$qY2 Y 5r7|qAPf]v$Dc.`-4xFξl2_8gE(wxcJShg$252I/\K5ĦjaUdm]azdzHt$b ~ٱLt.\"3 'BhWMgrOePcxQH ^Gd‡/,DQҶ3aZ\% Jw `-6V8Lݬ9^)?eewf.ŭ2#@Ij9熛H}٪RNdCgJ j89DvJPBON9CH5eEk??0*dk+JM"G7HET 7dڭ7{2~?Msa)Pӓ#Ɛ "ld9aQVv))ҦF  KjD 1> ƪ"N(j e+~7|3 N %oļ| =RzԩB6܌o,w] 8>< s'"shɌJˤ`'' ѸWCAU>|6PW?7͌KwOTn~`/E򞄢q+<4j1b':u+X8{9Q-Юkda)d8$E΂y޵!YD Jz7Ǥeܥ#}"\Y:N  ](˕Q"ȳ"qI%Nj8 IL:.0Gc@ 'dD.}(Eh1MZSScQkL}6e3:7AA7elpc6]LW:8(9΄ѿoXuTf Oe]0}c7DgMoօf;y0N`4=3ۓUu9TJ?2we(+g~an3ޤ'*2hUn~E}o]#s]xnOr|x>5ӓsX0P2~{j>G;5rt':$f3ڢl*p-+%̲x(\jP 3aIw&$3ַi`EXE#sƤiĺwoDյago@4cqu"L܂^ӓI+EQ:K5Sg麃Gw&Av{rqikz 3bVH$HAj'"C;\f#6bf*֩rG 5Ɖ4|ף}8 C5{i <֭G@йu״ε·Qb7oyT?ta_;̇UKRgnwY (/!pɽQmgLfl(SBȿF/r F\" GnW 2M"> # aWB1_,0֢\#:>ѝIVIfH;^Y=\#٫2 I4%n9F(Oğ;"^c(OĝO\ i~K5׼2o`f]O:163Hi PE*KSY߀$B{ bHoQLz# iIEFRWDVYgc%.$6)Q6/]cB@.S#ft~klW[xկ`mH'MhL ۣìFuIkA%j~q}2rOWA\;";.dy9K}Ub%NIKsٖ+v>SL6u8mDU}òj@ܿS{W!a\Ed9in?n{{"Y%_ҢC}K=ga z947hSuq17 .WENRo8 !)xOUu RFOp_Zt_ :SfM?xd9#)z2fOp@"z=G[ Vs$ o|O+eܖ/J &)TfVsԔ!5~N $&XIs.&wr e,0K7&>pєW `Isv< \#zBÖ2걬j_B9O0'Mh? >\xT9-:I*f*e xV`M:Un&;NK\F{]fUQCczD.p۵+q5*}B KVXҺ]06.iW7>1KaFŦNOQ |M*=S4;Ez>x\48ے%e:朶;9[ւŠ%;R#AdQHHQV}XN/OƵlmZZ] jESUG}m8c %"7 A4N(JkEDdj m2PZ-z;],D;**A W8 hjT1؉UBrS9׫VJ Kr f3+GShPD6NM>k𷤙=\\bYA)  i<@r-/Z$=7nWudr&.4 .nYbk" HcTO7dL28_15R DB{,MR\Ff0K8Ad`d)Ή9Ť՟ O/>1́y܍K:{,[lop@yU"27K#pTR0meǩx#tIh( 56R3ޱd9qTJ =WdwST`U0 pu35ߢ~z[S)VWjVkT@6Dk~ȁ إ3 f5V41mt!@|o'UVpR1*ϰݟ2kg/dTHK& Y)U4PͥUi !t%tW hW.V %F.`Z1i8*hR3_w@^^F5&|\ erV603CP@E³w$ūꀸ] "# \6U}f8@fctVi vlpYvA :d16kkeyyDȅ4ǁ? -XEVKWEU Ƥ 3#0;('$lguSaL-lþX/W)c_O+Q݊@xykt~SA,[Vئ>t"@Kna!4N)ŐWnx9OLC)wkjI%`dV}'sVDkRA-˿d%s_ A:Ϊ_)?H3u3o{aTDDGy\&o:c0-~+zDS@/PEmU[GQۑh`Ǽ΀67WyV!bKmw0RE$0աkd\1( e;ȭi=jҭIԈv̦{yap8(b|aE4XhV/΄3NT5h/=1Շx di)x`^möw(_C ]V|&xܧrI G ^K=SG.|{5;t'8+<BLpWǿS0'OD=tTϢi f!ٳkNެ_Zjk9p?0V/ }U֗ͩ wTQ8eV@C艵A#JȵBo0XY?dr Z]Wir*~#f];AƽZTeRUxq*YXZ6) >[ 8m!b຾8w` 䋒=r9jUZ=ԅNUiT# 094ҢG2NEV6'kG\ةB30@ X˒/Gɠ]!wwe_ z7&SDkM[T?.WƊgv{_|Prh9g?n%a3M,LQ47mn7qey=W^%HM7[-8КE%0B6'S77ni!dzj_՟hgp ,9Qiw-٠F,F(`8Z1JXu G3R,cF.4I{ k ΙNB&\}U[2M9>%FO=]eFiġEށXM%rt~y޴$k\lR҈Mo#<Er?j^ 7fFC,/ֶFceH> VpqXe:9(+[4_wjo jɶPpo&!Wj:N4m ɼ,k/.T[jM><%ed'iwNjrUZF0ץ;1w!q/wmpcʅ=ٻ° ~T:=DŽ fs|WW0Lsa0`oFKL4Ӗ4:Zk k` uD_Q䰺׎m>XMJFTiɻ9HRu?50j| 3pCBmI rߎU/mu8& ZLv`1%@M"UC9KX@Ȣ Z\{,U3ZDPg41{VX$ 30N ݈I'jOI1͛ڨnRH0k/xF1ԄA~cj1cKU-׉͡7En;NAN8τ7*!uz$|U>@hjrjfJõquKս-n.9=9$Tf;tݾv{bgBC炬<hFؘX2g0B:fqw(1*[ZQ[dzyZ!/ӹj񓢹"KӶ]`j~O] |s{o"ܰHE7;3p&F$Y{ g# rL \Ȋ&3'IOF@ZqLR"x֤>9Gϖ"j!%M  W.=6LoŽڡAXjTG!|/=aߓqbp!ҠsaZHfh !vKy.8^MʶP=ߏE_O¢lGS+c0ubzDs#0&5`ÀXJ,3 sP3L;XRu`pȌyRa}'2B=WEVIrFW=mґ(Co78(b?:zlZFT5#9w/r)&&g]䠴y5j6Z9n|cyHj fAd嶔JcODVؿY% ؔ+^vlDBSY8t]+?бMNflƘm&Ŋ 1=Ai 9DޖZw^-YcԦBNS`$Kzfl~PwǤKM#-l꥛b$R Jk#7mT2z/D(@?!6N}̅ dڢX{z(0PGOBƪoç܀)d0HDpw+" 4H!ŋ:0o"b]R'[]]#YI?V i;&d\0MWC/ѣ9"xwm)eG$wıxGΆk}Mz)KAH; -;N2ԔM /3Y̯2J.70YAy1*X9=٤۰{c\4VNQey ۸)OؗXeE}wU:Wٯ!=,iBٿˠ 53%| M]a1zvGi>H8XdprI̒AY)Xa`a''Ӆk,# %w2Bv5sQ0!2wo2ݿJIh8 +hġ}RR^lQ#m\xX31Ak9-S/_lŀϹG:I[H)] \q(d' @P$$x#b7/$jM H_N ."9#,vgJ j\B?W{_!m!_54rU] G\ I sbhxYuJz._h<RHDl$V^ك'M!emfy$>-]2ҏlR!=!- q靐a´~њ @Sleqf7VDNeFph|k5-Ϥl98jܴ21_DzIiaꙦ-goIOLJ >ͩ`;*Tηs7yk2@$.0Vd$@3q\fԫi s&z,Fiq@ Z|pRhTv[۸i}Xeˆ24}NF!3=UWuE] =<Р);MG0 (G E \NY=>}[a投$$";-Y0ֿ-T0FM@<;{MZL&P1%-5\ס')&NV~QԮ _ĭJX1y;Xp[)C}VxY!Sje~%%~ cՎoݿŻU_tKWƬr 3hC:A-Z ;XjQ"asۑ:63xw~✐VFI/iX`4j-xqGR.H5&ffĄ6MIJ{*~ۈ^Wx<~6=uu8$Y&vpd vVza5e 蔑_*qZHK}!c^GcwQo:y f)+^C~BM1f,<=t DOg0q܂}OP/|[`l>O2("\ >*췛S[tP3SqQ rL l!Rޯ)kv2%.HX?dy%|>ȄBՎg1Dz2]pSf0i++8?.\+o!@5إ~Ⱥɪ<i4WBb=7Ɵ 'Q1H BCIa?GB]!/te?4;B[ZGdP%ZZ%Kى>GzɔVeMŃS,p)i4Cv!7cNd$//7Ht H/ ~z -)e;\*8I Pۜi@'F~O!a{I1i9 0uOC.N#_u% *iç4-dХX+ښl;(g4(ucH=24;A7|*Y(554F,螇Lgz?M8 qWῲI192K{̄qD%%Mܹ|}Njϳ]?&5J?0 vǭg^02JtU`XV$Y]aƎL !61Z-kuNa&<ު![sz=sUnƇ}&R[Qǎ j nA daߏ9QeʬvMqRv;o5a)1|0R8cE 啽w-9"xԴ~:@H{oN8%swgHk.jq!dj3؄Ʌ3VE?d NB gd?-}Tq3=H)+ٶ4SUS]m 2[;}J<䨊?BKtiZ.6ZsL1Ot\&==] eZ A$)8%j_$>v;UpYܛG +?hE2;»`}e+Cm"cjUDGߣC̺=M_V !լFiJ4l@IhT# }YyqMQAv NN]5k!k\HVv ZK€{=]tV|Dȋk"cuY=R|!cvD Qpx(̔/@Me'V%ajz햗];ʰ3t3oJ$+s>5, gH8vӤ )P4(^4MDr[g%p֏ eC]+oГV`aAa}ܠuYI"W tAB5YL8/gGtYzQs;?w.gh_Hq6X#t:^ԙ 03w\i뾸A?v8!v5cJ:n}vJ(Y?Szׁ(d%fObyUh.>Fn^Gh`fX6՛^"}tq*7#Y8z"yaJi9YHNڈSk;BZ+P7 wkԍz:JO՝v`st Zހ)3<=ٽ̞ӽ/-!O䂽T>ڶCj(FG CDq hBؕ@7 VB9=A@ H潱mff6W Cbg) @ufo?:$ÛԵLޅ?b ҼKh!i!?Piѱ_0ٻ) oYcDwG<">,~u%ͳBuhWV=|F*s٤%1җLb:Э{Dcb#Oj,KvsSDMe/E1tdaR 3!w4^m`6~@,j> XkbVKbr[jI_ڿN,8ҦSLp{&Q>?[~&λ9&#JM4a|xJM|;c"y;2bȇĸ7޷4ͅyDm(E?̏ןS%ds'Pl'm7Ϭ l鈔繽H\Z~qʲWH9F<)+$,)YoǞ*gV7 Y| 7YozwX F VOiܡunl,f+n :qмOS]m^bRF Xhˏ Do] &UOZ@q|GT %=RY;^ʣK9HSjI Vd Kҹ:EKk9ypk4^ԀH~yǞK <1H;ysiO.P}9o*SUM DReզV۩W*5)MXJIi*7ݓ\x" ޓNpDEE -k',t^k<}/TK { Ҿ!:Ss 6Я5; 6R m-1IY bb9𩟭:iЎ_ >L)|"8VtPFȾJt+kse$kۍL)#=:0a&-?͂JPհ\8 㐝v8oZE>zD]ٹ-NDB unAY..fz*kF2tD >b'#уM [}A qpb̃ʠE<7."Y8vxlo+tl TX}\bOc~\vANnJ,@+ U ֐#zC&CrIP3ߐLľdwId4^Qf;d@&>PӟGR~ngcLQ(ܴ %/ͬUsX=HZŲ Q9p-(n𙮍"^H(SMR}{?0aW'1xFK͛))hZQ/yQ|SHJuJ7 G%ERV s_04&S͂k_TP6 {|kH]1tw[;eG2Ú*(OFBo#i;cLk{̕xwO^ek ^N?yr` 3fÍS\D$c峾*_TqyhhH<* y'4R8!$:D% 5:emU}xs\RCnJ8tnE<8)쌇~q='`E TbV[z|L|a'E0Q6\Ǫ ><$wmu@x ݑ,jA`-NXfA{.}t'd>W@:t<"m,k,wϦ[ުyh0 }H6>jcg>^.|+54;j.]lV@d(Nn+A55 ]V_+]Z#ʉGt0켓 @JA u " jƻ_D=ONW[57k^QŦ3_NJY_6(^r(TUGΫчS/ؽwj)rU*zߋ4kFQ ֗iGyV%17vP!QpVԋ.<^'ܪ 8 9E8ˀeY [u2d u葉 ZYt ,IPr&'f; >]$Q!FEK0JM؎RgSKLĴf;ѧmKDaq&"k -:W@G!5:0!^ ̚ѠfxOK HHY. 0X#>=ؙGw_RkuDH^0WM{ hbuF2AboO*| hSԀ-\uD.Yxyip8ȥ5`zy1S3xܳ=#՚*_K!C A&N1`g#D[,W68V UXԪ rh*Mkk(;>ZX-H>GdEn3mݮ}?v1O]N3{kE:Oo<-?da~^u%=XUSPWIw$ҁA,UvNwR,EHa?aB=aO 3'qljT*lz}=Һ :.n忍YB+2'e/]51tmoZY@wǝD)&VB{%ag8.f-,O\pLǗ(2a:Zw*kX;\ "=|]טX3Ƞr0[V9ZzPWqh?XSZlIj9:=u3׶ fVmQ %^^!ho:=8Fr1TPgΠtAWЊeƋ% 0.I"'Iwfn58bW@w\kd*s܈'tC2tś}bߖxV=~ڝQV'm<zqur3R2').9 )Y? %qdYcwGD* OsIf4^`MsNxqv7j=ΩnYe~Tt UJyȟBKQn;qxG0&Vwj3]kӘ3u z ?I& ITGy>znwch 7KpMH3z$G$%R!Ji̘:ZfENɳ4`Hp^VZali8O8-:^ޮL->,2+4m'e,& {=CO W`GySB Tmm0/H$Qؘ/$Z%{~ SW*?0Α.jm\%t%|"mOZU.HvmbyQy(iOfP%_̫X$Sb]k&".nl!+] Z09ODHxQȳg̲ ѱwYgR$]4'mR6g E|San-T,(嘒$:8¨sm^nqD 0=lziG8Ea\;ުXi.ƚ+V2'Thb9j2+9lJ$$ BIHl7T6unN4F?H7&쇭 Wv8 ֻ-Z?)VDZ4NF&ϜM{E#WOL LZ}lTxkb;KH3.M/!$F!j\?L |k( I^LLC ކ'9L)BLMܗT(x,v2}X4Z<4gUSlmG_5aRӀM[ ڭo5"߭dmrEsQ/zb`39?}>J8bЈǢͰ Y?JuT܂wX[5z6KK4ح豃P#2VQŨ5oTm*|cu ab*n,&SzɣcmO2'꥞8h7Rl)Xυ 0qBd4#tE/WZ,0{B- NNԗ ZYB}wT^3y X #*dU&ΰ?#j `% pi=Em ,C=ۋ^"i:Bж"c,21ivL j4:[*͒UYP6\͆HA"$4Mtp}Cd$KWI/> ^6뽀~ ul泅wU}FV,zFNySk6lRq>)3&')x 𵉺i~)Dž;ݧht>7'8M@n#RQ5Xzߥ)sj8v#~.!I zWY!n%eLgY>r]9xb=,"TUqC"57=MS#]:!biYLc=;X65+O!i[}p|P~,`6eJI^ais$3s*}ؽ0RC-lZX0pvC-P`6DTx[gύzD"+7VOP7h*fղǪߧ}B:{>?EN}̓sMo:j{.*HPk E}/:E3q%禗9]%oB$8mΔNl*S ,I|'i%rz# Zo]Df3تmbm_ΈLm_xU;~ņdtMs7y5,n'OܕyF{V`k zx gBj.p;nS@X >U:1Y2Pݯee[ϡ ɁZ5?Ӓ L>]KݎM&4lmY}c<}[vwH"@(wA@YcBzgǷ,±<ة K&{L x7@AM W4s7`2zvli|vh(/`t\.M^\Vb@l.;pB4-]׹ha=s$inWG}8\8a8%]l5g}bg9]lٞ](b}֒ԮPT!urbjnٲT&5IYz?0}F&6'VIhŖ`>(Hk3j!D~A?ϰbd.ӭNqe.cY3˼,kFwCAJ=rbÿ[ėFEV96-Eơ k~GqF]9T9 KH1MA=E5{HK 7I]8[-HGB#>W>~.]v`0 …+bE4QX01Vl՞Y~u&[zI?'}yD8csd1<$?cl U~IJNNqW\/?FaOIecfq\)@ z 06z*Љ--„|.U(vF; >c!5w%5`Ycƾ;3S`|٦a 3ڬ&-% Rx+:.*,0'#fMX΢M fq;N$Qw w Z@x^4ޫ15=nwp?)YD-2TI@@ UȮN1baöZ#NG;s;e "AS,|OV3Ұ<ͼkiϢ$BAd׹YJ Wgtf H- &d}RgBGWO8jw7+&$]oGJÔ`"l|\h) ( AĸZrMhƋ˓~AMbqT3@ -AwZ $?w$)S[ɮu"2UZ&|YPa|-}(ށ"~+qF\s `i,)k|1 *魂@DqE@:}1xQ˂rHUV:ZID|}ͱD"mU"jFi"m|kzv$%Fx:5 O‹ ?/92޻ L'@vowG)lLq#{T}a;G1)L/q ųy &We/s,jJc\}R*v }M^gW.EeV (,%AM bA=Kp㾞qc;T$I3~{BR#' Awaqbj1M#MtR[m?1Jd/eqwLh0Qyج؄1b+կ4n˭ N}L7hByed-\- l 7"]^vNۨ7ףBh_ۼ͵& @'Iضd[V~)NQ`6wffS&LĮӎY^3c-ޠ܃ vvYi b:'Ta*MCq q8#ϛpْ!A,@mafi[r9d(|[kTF5 H/첆Ie $oN̗t.ӥG uq] +ƼMJlp_0>M+mwJwb֭d!aʙ{EpC+)#BA p~ugT}a ih]W;k1b56ϱZX`.cW;rpRGhDUrU襭/\\_MO5$F5$);齮%3C<[' ֤.N.L2=86!/,ת/ yx0qbcJw1Iu]<4E!k^ʐ`4jnz1*,uMkH}ٌ.;bi_Q;(=Kkɟh)ߴG~2 (Է,9+@6H9ភàq5d8A1k!/@qͶ3i>qMXdfcV\˿^'V (]k?Tab-q"2!Fj031WTdv #WfJ>4v]0CzGzRR7¾,BC6 ‡tbtUx)QY Γy|F1SZ9CtC'96q*x)QĔlˌÙ(v} `FZ1u8( 6Z*iVy1FCA=K-~Bg&df)1ewL:V1:oh_fP:yIuhVlyUt{36wƣ(8G"IVFeATxȗΰXz.XxR7+Vc\70?GAxacwT?uV#~Ѭ;I()R'^SQBh? &:7yKr:i\nuD5(TmӟMax^F>v 󡀤wg3~Ċg|WB8; `Ay y.0lqj/'tcNe'n̔%M\ҙ2 #WUHxBuZ :!-r)"hVo~ڦw=_O`{@j[Jͣ[OǔgU/DmWa#꨿Ә'e$vpRfZ -T"2q>[UEJ ;]gAR C5̪ZEܲ<  wLaޘ*#pѫC ު0" ::~ywzr@@,2 yMP WВX PZuji%ĭ@w1?D8gK9ߘW4:LO~^Ufŗ_T ǕMաmu` |,Kǔr\;~F}>~9=jL n9.]ШAtJgKv;lb-4.\W!wYD'r'=d<)ˣH };IT2 xc#I›8㪸 ak埩0jFQ%ϊt!Mߏq:̾`K%FA)pI[OI֑fw][8 F\bdq"Ht ^~.-a)̆>+ҶƱ}'c~pV,ui`DCמQRi d+p>EE└?/ygܖeQ6ȉ9;w29@]MgF2J  5ܱu>@Dw x NGPSe&܈aUsЮLP|w4n9&r6z ]);rC[%CEx-:PR_HV,adLD{5375zTSvhFr]4fg~;f8:{&:X!2Cv=hYZSjP *UH GQ~$gF0dƔXv4*w.0<#\?zO9@~(\3 >jrPk$3gcmn"ʲQ-!/)v[ey~clkq<_ ?TQLM~"(< >8RR?wk+͍BӦCe6ƖwAr@M$\&b|? +ձbgܓ mqa2)"yP. v8s?%CU`5r?.j_? AXbgq o=#t_<GPڗkukuT o@>~邭~YW wDoQ8g)7}n5͗IQZ9P1BO(wt 8Y]SU1aNy>+d|hVT?qo:E*l8Dɶ'<'l:]m.u( ݱ :n+M@k4BY{ӘOMk ]~cߗ*y21Ti1qݡ:Y)yGF˘Ȝol˴͡hJ4|hwh^G0Y5iWJLJ B|+4&qꢮ"VryGzݙUhoanz>YL zh&<=ײ )ޗNpX Ԣ ;Ȉrlf,@NyBqr]/n@;ުMF{'s\ȹ6>.rylI;-M$ZNbcʔD}Ai'n٫2Mo2eq$P 9x&J ByX67:ur.Ḵ9fp$q b@}d9W[8'jeX;j/5t ?ɎL\,y`_ϱ 2 i9?iMXM3cu'w_ xE wq {5WfX&O%yOWq7{H=vm͛ &fƀ(ՃWݟJΩ{YqQU~coVX(He8L/H3>Sjn-y?w҄tC;N3td%V\ ΢KӶ Qp"!^^-V0ԳCJI0/=8k)EVwQWdOPQϽP XKbt( HXĵ;C`JVJ5h5r-G12?jCyrb}S6ݰx:a2S3q@J+C\ xtfp@~ZLOi?ˡuOK ?4 HL[f)Vo1эyбQڜ6h17O1$U)4"-o3'a} 5ݍPiboGqTF&SEx[G%^W]. B{":L/gaccP"ߍ(_љhUAŇG,/TgL>ϰ.7|o'Tsҹĝ!KvD+HlL*R5xY#g.~t`j0N 5WQv܋Seπptn+^l:'j%+ ~CL7_EM=tvCb8\!37)?_NG+sWѯY7cНQpVs20Mf Z4I{h1-PCMg1Q 0)k#020*l%欷͈9?FW_X+ ҟۘdL*"Z<ڹܼqqj}-*U>k[[qz#Qt;z=XRMrZ 8PgXL')ކ1D#ɓ&*>52E[iUZ&U]~$ֿ ]qp,im0!mF٧ޭ!<g.F|n~L*1*[$tXtmUbb ? rQXfvwʍ9,#ĤeyfW*~Y[jUH+ۻY_7Xl?s4{–NYZE'Q֨us:]JCOkō2hpMGQ]G@?BFq5 lK;yM SQ i/[:FLHÜd uLLd*=-v4A{?VzJa8E /YuۮGhTYo?S|lNU$G{%eMNsDdΞ*X8EN*;"ۿgz,@Yf;duOD{ lْe.?zNETmx^4bդolNWˡy9"{- =K=!:3Ere2 ^9YBK10qu?v\3oD2?0h=bsZclr^CdkE%h(d^Z:vh.ȜrR5Wjc4vY?y doiU\Yb**Y -6ɯ6#FX+Xj?6iݍ W$>g}nBn4erxhBjĀ# -Nx>%lXvHr 'H@Ninfz${V%C_ R_Vt^ tjxwsrTVjv"ISlfi tӨz2%ɘPF&؞NC OFņ(WnhPg8Ǟy*cKs+ VF `fGV›uHBlm&5[Wܖ0U y/{"$HFN\㘂@xY!IUc=\/ Y ƞ&/buoMᄥxDY/I %gxG/S Z:>خE/踙Kwv;xU̶,m=b1\= Ȋ\u6p0^e_cNB=(ޏϖ# g 몦Q?;.H65Iq5&_T7"^ Wm&,e=Z F_=, US'@-l751Dys_` ( .Ou:KR]Cvxdc#[pA໩?1 O{l9[0@78)G$. ]xh E^Bڈc)>uPW6s+c]QӺ,*!x\b\w:ippji+WGU:x,,=¿a#A`[3b|o\is CcRO0y;(FlOH|->Qͯ퀋lB5mӞ8![@i} p 37rOF PĽ%5KrR*WL'גT;T%6'ư}h>[7oE&A`-^hZ2lID#'뺭} Cz>a1iNd.uBU 9}^=vPcSI`v7 0Pϥ7qgoz=w 0 <ĹJ!$Ĵ1I{R$^.J 8eD4yrF͟twd:Ǜj8GKYio2m$hͨT:1UB\y1 *v1Q-,lZtkRq6vݳx\O%DiX 3@ba4cs|p#sM s?Sdݼ&hEoTpBu]j53.Dk x5" HȊקФIѿg_^)p(MvHi>ҹ:ۯ}o4рYO kwb[qS>-{R!r%@'P{.Fo;N'zc¼e>HChkB-D˙Tc-yo[kB[)y0H٬ry=uhxls[mғhDϧ%`^=K9̮A qIlÀփ#&JX43::ϱa0=QJ%JQ+NKf]H.;gJծ;*tˋmјl ʡܹI =t5BwC %΂r'~\ i}Vk݆ rܲvy+aOuL/#Y߲S$Bɏ'N JQpبR 2S9cLsq HL)A~1kRuw f'i ҤX%Gǁ)P0H si̜[IyfMȬi N@(R۹oCq2xu\`'H4Ot{t62B-mҋ荜jAyR^%ͣ/\3KF(UlMhWc*s4g*7Zwjt ϴi@TL2/7:/9vH.$l8x5mΛRWWC73- L3ސ#w19s' $VYdؓT>qJ`?SޣԒfXê>ZF@Si+zk#Fh)BݹuF(! cb PBObP)\ZI0#B9>H_'DăxXhnto!} ň XxOo9eB ,U$陉flZ]rgV)B{NfOx':|5}Rl/d2ɲx-Qy. )u;27IM-F5y8+Ky{vv& ς)JA;~71!IUiNZU$H1 Nׅ lFᗚ JAi`徢@1fvUܸ'088PG|VB".N_DHf(W=Yz;>Sճ棌Jde#!&`ځDbqXśU؀rPΙQ9-prV^1?RAj/cYl^-gPfu7BDVOg08& Vd{[_T$:)oBRn_Kw%^ysҚ2jDH~{2@OaKƅW#+W0E#at`3^ Ǹ[ baEׄI)I&_ֲâ_$F7(_/'MWRwC 䖢pL D~=t>a'CvaMrmn5A%_URZ9|yglјt^VJA8iZߞl 8!R T_ЭH# PA 5CQ| w6Eg^ipQh\.T=ݕ7 T̩CRCȂzX &CY#`nmI/iR#@i}nB2.d&%D|'s7գZۦH-S,nR^̞̟~)¨,/y߳374PAᏓq Thj04ɃeC#)hЍ܌'10_8hr;z -c4⹐ϸ:&Z8hA"Jtnp@VV:vq  X:xp p+)ʫBs~z"JKeb컰`)g:"*  qmr5uLn3,^e\h5 KY]9u=a\J/VO@pIb$+:  cFtD"(@H(.5a]|:p2(cs◔Nר`޷𸵐t6 ed|R'A7=_˧m\dDѧ$_jL:񍫙V `hL%9daJ~LbZ&)rޘo jx<@~ux{3;P\¡ *ҿtac):̲ktc/wsF@%|,d9wz%͏Xc9Ķ: ;b{%5>(7='ɖCZKDl1^^7QS/ȭ,kb~Y6m Hy8G)=:{f#`6p)THL7:1ըgP$QYv.j{9E->޺tkȴ.*2Xׯ^q"OBj_MfnoH7ź7C;itOhP6P =3$sǵy|} u8KC$x2 NΜMF}"Ks.mu!hs &C dFu&1S-a jdHi\"H2dGk9Z p-dOÙAH< wX*I ۑjĕgթ"w쬦YWROaOǶ/J ]o]Ո!ϗդsy̱, Ȳ4s:IPYj1m(%v7bCwU3c~E\XF{./6-;E۠UrD y79bhH]W~KfpǦY){pgM|91Ņ@0dJǤc7kB:#fw0[*G7 6>^hV[@ÝY6 /r%a%fK| aSzE m*4nD^[?!֧,9Ơ m}V%]K+/fhTopRAJws`ǂ]; M1.U>1C? 7j ^2f}N`ؖp_: sh7˄2AީM,@@(b-4zs30Í])<0W ujTcGDJ YJS!o=[߹:3+RpbAAah'~Ib xhco\=LW;_^ҍ](-I6 WgV;b0XEX 4:]yA8|A.KA/v?UR4WVAH|_ +^nY6BF<[lj,I4=ZLUo &bޛSϵ(&mrz 7}U(8 ɦD{`G@rQ(Čډcvp CjԞfak򪂟Q,9Ŵ]1q}f#FINMU&9W y 0<^pHr}|JJ|*rP<5j|ƌWk&¿F_X2W ـqsù2ö 髼=X}zeRi}ף#{ z(= yeNv#*BVS(QZ3 i窮roX;[c`.K "#7CL֧!rA"1s)(N$ż5Nlhurln)88BO/*)S{O>@yY?MIT h8EӦlߙ §mgq4SA% r=Eu:_7?/MoOսȳeDW}%Ai7-XEsH/=-U`4Ix^k?^l6N_묫(PNء>xlu.>A2ť\->t&S Ͷ qc8hlwmjQWYE- '1%x^tǛP%khz}!̭jJ $|TJ⨝˺Ngn _n0)򆖺"k){*Cː>cƗI"%]`^ z1~&W!]P'>Fb1վFftz|e o/Fӛ/O%%bb3Էĕv*+ܦ-i\M[Y^<̔ οƋqY}8 )ܥ½YexTTG"qH?y>9zCT.^ʄeḋ;c[e+.ʢt}lR[6T0E ~Vt%ָ*>* 'i2{JF|>tUI>98"@z{7zGY5t{2څZbxZt5D$X zG22+*^ ѷ9ѥɭw!c߆Ut>SWg`R 9 od*B{١,4xz j@!2 zG2xcNUܥ/bΊqkdLO+W!{G>mW(}Zڬ,4Y* ]aA(sZ}`n]e_4CmʖkPB"Xpq'JL7ύWcqY"܉'XHycX(+fle fڤ]ӕҜ2mP6wRo,( WHQH~WlrM' z{_`>C2vz̞oy~B Eg4<4e IuNdzyZ}2?:i&EhJ7VSNTT♄Z{Zi(#lFU޷u~V`o;{>Z8*t.+ܡlZ`Bco#0ly rD9:OpYeF% QgdBZDk!;ZV" s@k|-?p0+EwE ;8 ϱ,Dg<#܀6Kh2|~!K `j! f2qiB~= ^V +MEm!Dc+wMzF`Q8w* s_uduQqSw}uLʷ9m'Ag2^Ì7 9.]h'VLZ]!e_TWF/x kڐ~0Nu@JFw~zj& DNchJ *bC hXyS6.O hqD?[J? BmI4uJ򮦈#|I]G/IpR=LKZݦ>h87ƢT*VO\[̓`2&x`q(} lf߬xA]RrEl2r[LG?Shm XS3)Σ$_ٜAfYr(IFʶ $IaC:Y>{pK}y?{+3+ |GI&F^pZ-si$~&XՆ,=G6nYr; oZ%ֆy_`Ą?ۨo= "<͐v-[ sg 1  ΝS[dV uX{#t-YL"{4Bbml4wtCs}]CLo6'zH=K3Gϑ~LZ" f}}0Z:b[TXmy?f Py`yEAVt69ޭK|4fY:3CaQ>a=G*Ey-q*9Z#k#V@-o 7g!' = F4HQ# 5CƵ3yc_1kagY/Oh}AeZ$(XsGH^}H0IF\l%a_*TGr>|V|eNҗjiE㋴DuV\-<|b!"&JV6׹M8m,j5Q6j8m,<ߵx۩7+"&i,L-r7}8LcLTq*.'WMBk} RZj>\ 児?S uv?|Լ+fyU=uZu\D& K2s~nV%6*[;Էݠȏ.H {$3MvX_ nώJ@!<&8YC.kX03+iKcFB.yHI'Xq]1tox>ǪVXQx$*Q4UegS}r Qy;|i>CZlSYy>6wŕRHjbZ* N$3V 6:t|5 & la0uyGF|-okhQ}G!TAD@-(N+(tr}}>B9k<49LIF'X?T ';M`z'ҡw8hj n"8W^v2-rV{g-U.7biIToR2 l>p|7%Ao5^;v耭Rb7QfS _.Dxڙo&, uVR뀦qPH2P0zme]ɡ#aJg87^+=%ɢ2GKj Aؔ'Cl^ p,-ЩQLjK<&wN`[D!MNb3MNIf{ uvM3LØ/c8ФD*L;TV6+o9H@0Ov^zk3<(K7 GZ|  x)yy[rcuKi˚H.<VB ~LK:|0 \"J_̗KVs]Vۓִ]٠~V&jQmHgiW+!.B̲7R\1NY410[qG췷-űsHS'A`)lq0] ^fM{ 5 'dW7joxuŠ/8^*~@Aޣ'9}3{adaPQYw |vC7isAlI{7wJ@,k89< 90gČ%+"i C`JfआU:L*=4'1ZBA9P:viQ#ly؉UHp0 JۙaQ0'"H\xmݖU@f2*m3JU~D:.DtbO"u=Y~ِ*iÎl&=yE@&9 X@D \w.p%޿VMK2<-uQvyxJHp ?)@'3~u"HSa*BGYeN!\,FI"|SOJ Er$p~ԁUotkrO_E69OGW.[ߖq2幁x뺦EТIt*C(F0ؠ3kxg- Q^MP;@U[^~JϺ0#rn)_]"co_uvI$%0ج,2!4NG΅JhɺMV&Jk ny;8$]W;FMb[hh-GXt%- HMd9Qu XˋNTm/ +-~vs,-}PrXVuv:51wB ۚ4F_*r;V_,LipgXQNy"pN]|T"[+:^q(p"W})XDD9z̛@KTq.L-V8;[\әl AT)A4˶LSq[3J2DIYfsj~A.]KJꂵ/[-[oIzA &25H6+M(pU/P>; Ϡ?mU&&^K˜AB @,X A ::<_BsW:p!p&<+}& Ȥ<RygɊ z `̫9N*<AibYd́f{۶+N*Uf79>R2}V!~{ .UF\ ɍOs&QZK݁bz7Df]lPvhQ <c'@@|p[? R^+m1n^dQ v&D;y!i÷@/Z~<002"?Jq_Mܥ}b =&B&.oF?r$kwo#F*ґ,#B"ɸIa QD`["#}. 2!ysgtl2lXi+TʻMA U m#`Ǖ8ʍS N #3Bdq!:`f*T:6lyT[<5>CZ+uVLM,H_.gFFҞ bMfsGLj vg# S yÀQBo$'2#dY'Qy[Ƴ&RxVk1ft#4g^ȡb[~Ŏ`~LIbr ޲:颙UpJQANƮfמ_WXւHU6 *"KQ)oa ]pdɸW(b2dؾgZ'$aK9D_uQ|áh*ZtdBlQa-sE~_꒢*A|SP566>P{2ݢ9wb$jVW HhW_ T(Y;Wtl5OD` < F54ؾI/w>Xڝxr¡C8܌3װh{K-o%Ь/!`G%+,QG w<ð@:I#֊Ҿ;m6=X_< ,C5tAr:? Qngō+H9SP;BhLL=M:<#5o'=a"YڂKdX'uo$[Hd2jr=Դ*29 3zWU1XύK۫%ᗤIvY4V4tu? z$ HG.vVK9L9y4R\?s14lNvgn0S ;-l80n;xUz ӋzLA?Mέ,Jr"&")?gSwU@/$&R;t驨}li X՞1+ `vf(=5G![BPq!W-yzq FP"0> |T+mb}=2dLj,tG5Q%LE`”c0DZW0\?O 4) `Azz4L;8 %\At&{~9\o~6PƮ+6vJY;R" b +`)hp?n+GOW_~4cK WdrPff@QPxyu2+/jS5wF, -vҦ&mah4݌rt|HE}^8H:d,%=ou.MyYig`U>$t[7Hzt+︶AtD$xz:cF: |VEL!kr" xj VB%IUfV&ɨ`&51mY?s% aW67)+4q'b?@٤X|#(9i6D^IDLr7aa](Y0c)̴wt-֙%X^9C> жejFz`R հPz䓅2TzS:Vآ,8#R,Pϔ,W'Bx,wv/hzD\=Ƶ$Q^=vj@盧I6a\Z$Kj;k>VW 4hT&@aډǞ nƷ@76YH×¼/?Nxֆ=iZqxM)QM&a9Wn{xzߛ)Hy-/ңGb8eA&Ə3em::yVxp}RѴzubܠG+{ZO9p86:QohI^bPe{‌uz2Y~lӻ#6c]0A l8`;xe;b+@%C1@SK;tk6U@L;*?E<[:Ӝ5&hX[Ǚ?T];s|W krOѿkIǩCW8O=-ҍ?>UU.a!m\:Vj) \Ju fzn,-L81Iޢ/ۡ$ Xq8Ц` '0g0`/oT|[?4LbϣX)YO-wkq]>Xo">%=i[wgdVr_53(Txpǽ/`4U 4 oI3kyIv( J.0Y^ #Ū@d.n5p{-hUG Ba2.< * |ш} +'Kvb,~t}VaR8')4?)Z*k l귞&`H`.&<N~=.G5vmQه8 &p,ɼRTx%y>;EF7fhFxw!\&֝*{y'Ye7OK/i ɿnș\$W` '` 2dwփ\EZ+X"+25x:yPKY׊ l©! !T|vQ$CM j8" )nf^FIgk%<PnaEnJ_9dGduV=ԣhȌg`_نSyshsT"n ܀Fr[Ȩ5 )L eJqJ©Y%UPTScGpFm/3AdT":ʂڶc׾y *ZЛKxMk_b_@(hώb-d%|62\İtUq@C+GO"j~! TSkT+L#ǦfӚ&O HPnVmF P _&m"zQaD+vx"lS|2 :1 C_g3x!M(uB؟F(I؉Ľ؃QjV*#Z5{`Q°C0wl3=&qt*@5~}(Zk92uFL`~0 {3h|x*!g3ev / h^ȧ|{9WX5. 3,|d5f:{rыmbX&17)n)$6%Lg%uO!PZ39|yJԯara2'x`p-L묂w=`omôp7`@thʠv&BӹkoRd]H%.*KPG-(H`wZ/oH JeQU'yຎd 镑b/q[Hvˆ%HjHO2r2"@pVHot.вJ{&u2$SkDZBb {-$ڽO؈]`ɸ:dpY2O>@beL`pe&8BIEHM3eؗ+gMZv[ __4klCjTր^;6;U{TnL$E(AJR0el gF}_1>cP$r}&z(C1IyH1]8.'TvLѹ. FbX{N ^XԿy{$Q=$%8,_wX-ه-}VMͩg;mYٸXܲHV͜p!'Ҙx@Ώ!<QBhh~)[Upؿ˷PՁQuk'tssS gWg6k+%y-m϶5+@=3=ZԲpِ0>OYO@"T&7^DoZ?He!CÀ(bf|L\DcֶՌC0Tq I m''E1zM\_˪N@ X^H9<Q~O M$5$ʯA'añIZ )48F?LmEe3ʩSna|5VUu7z -X=7aל)U&YŁ}ߔi $[kKn >"7NIz nC+,+MY-A:|3FS`m݅ԸVcd7%ՈGI|mLݦ0#/DٮKvs[',]wTstW<{cӽ ׂ@+܍ׯLEU(V3.| qnnRJiE.f/֙Njĉ0 ϙu.p3Lrd8*N\uf3q-uVUPX5GT +^ZeKS.#r2KA)!d]BӐs,q`'*!n`²m9 c1,͚|~5yd[ü_FԍƓ0Q6kHmiomݵg8z}`v}uq9W~I>Gij}82zpMS)ٓdǃY+ %>E;DE&d{'DqX+Vgi Aq8T U$䕔s2^:Y>N;~FkDCAG +/1`,%Te Aɭ n qJo5<5q(dfA&^sgbe")d{C53oQְ6sXRU+n3yG+ ]#BpU3ʠ-[}tD:c=J‰6 hoa:x:_;WZ$%#ܾ$u !@z>oMj o薨Z1%|&ƙ)0Bmy y }>HKŪ:?*ݷ0\k _!ڶs6>L즖ϰ#1]Fs6vb$a"-Ѯ,&y*Х%=N̜9T: kR7l%i OPCxjx @7.HǠn@BȽEx]2e,Ƣ@!y. ^qd{0vYeBJK)㪆ҟM:u3, B#eY@vͤxQ$ld("v 8X/`+Ea\lU]LQhg31Z U} f{"Vgn 1-;K:[߈-%gs䉥>Xt'%Tщ9}2=MM[cDž*4'`G؝W6R`]NF֗&w>H\m>2`#D=2`^Ȅ qh4|{pNX  D߂B8` [eLEcx՚e<*&pJ%է%.SOr$44S fQ gEAqu~ ua7Gc(B8×pG4/2XvUPQ@p̂6q*DRgy*3x5'j׵Qrqmay/-~eh%ca$jL)kP|Ғ t}dQ)SlTA|/-&ˇS e&Է-T\goC[^O{6ȡ>i+^Ltjqx}U% M/h^vz Lҩ0DçTOEnEnqsX ube$n&|U-ꃶGnGA’ u C|a>~I1AbzbK`Cp7׬$'@bgDiUxWY'K#BYfZcTI~ o"\-ESU@N^Wb/d6hjS"b p6] I?rDƍ/,]D@l05eb}s'2}kM?i5ި_6ׂ7s`wJ bjT$mU m:ԕTfN3vwbsxS+ѻM f'.zw->+5yj%J_ν$(Y!qQ$,z_j,V-]qAl$9ڟGxP;NA9. Y\/ȩ-AIgW7 ϤDžٝWUP`Z(GT wC,"ѣDۥNh{9w*ώP9 oL U$h.OħMgZuޞ?)e!3Ή3S 9T0tʅO!N.eb633d/}gs| 1Fj(AHhr(z2CFR_nOӻvd1HZPCYX<@1Mm C7}9uŲ(\R!A) TbZ7"dxA.E4)Xp0!ܪ2+-},wRVZU-͹ zC .] &ϱk@?|q(fbm N.%G au+m^4wR,Kba=R dP۹~k?]^ƶ䔃 ; ܄U)@p;ia)ّY7Qg^,_z9ЎN[g$‘k8°: YToG DZ{>9jCMrv 0}s&"j&a =Is78LTl{^+~$kl$͹!M&(zʺʥqx/p#DlR_eՉJO͒ WgZ< pNac8?T=]SU& kw"qRdp\fZX#ӄqe!(N 7esG k z˧2*"M+AxIrW..x2nLbj/ňJC72]ĉk·KkrߝMdBǯ+Ґi- W*h)*QVpP=y:wH Ƃ5+y@3EgD'dG$6;sӁ ך%zuM#:FY1,ݸe QYHiJrAym5)WSEFnձ)ez< ܜȪЭ()DVo)xJB$QX}=4csdt+ hz'&stI9 (j5~z6QLuƏ*V=_qGႂ^glV..{D錀kZ5dLј$c6fra^y _.c+J 2dMj^ (uEj{[ D'ӣET-JKf RwpFR\-ޗﳀ7gd{A^#Ҫj׻`Y>y=:Q8A5{J60ܝ}/I9XRqv q܂Q(5"CW|%VjG‘e3?\`tQL~n>q[ Bw$GHᐘ@"DȻ|ZIpv/~(Vx!ʳ2?h ??]mw H _i#G6#TCv{Q J;9o(ݮT)6gV2.>8l:VK3UÖr[btOaO2=v^*d vd< M. ]{]zQhY $Y+(L3I_FYA) F w %`/[ȧT+F֓q5\^+ԧqS\]KL>$:0Q uK)GHЁVEBKKŖG|P㠙< oz貭A~5;ΌḢMx_Eх@ko/B[&k?PA H /Jѕܒ~l6OkLhWhAι>5 ԜeDwN%8G fg6hQP`%%N##:[QI(U4Àp_vl]} }Jb'\xliaauA'VZ#F^@ij M>>_)dBxd[\Ur=ki39QI 1Vkɏ.2u,:VB&(tj_P.e{_,2FԯmL@7]=lbYG=Q Mא;~!uN& q7T%ǽr2L$s@Yɕ>^t#UdםpU<4D}aڛ)ߚ멚(88dΏWO[%#Zkz1m:Ҋ3`t5 tkuё%@R-$9q7|&8^OQ>i[ngcnOUZziA8d@N [rhu42IXptBi<3k"P`P)]b~d7K}aB%ꋩ2;f X$Di;UA'i"p6 9mU`[Ήu!&UW?av9J ,U${!q6gktÕDEDʩ+:IPu7 a#S#>!fo fOE,}V%.2 ee1pX#_(`R1kYHWN$ q4qdd˒㭊HܰwKO/pب3zҵ80-tٞ=+ݼ{$x#'U,UI(`TGA7(͢_ռ^I;B3)K7롞/fS=J?W<:T Kܓ=P1:KuId^>opQkѦ S<nI?E/ϷI \GvX Qk %%0lCOXUwѭ)%P #)E#^<1R]G$0ؽ"ߟPNWQA;Ec ҥuG n_QZC,qu?Y7  J 3W $EjSVsF͠tC.Jcy^+FZ ϕ\j5:>D{?oXu 7ϞAyS!,щ\"={4d#* +7lY&A+L񼬥nBVf[0cUYvr |9sڋYup\P3Q|)ǹ g2ǘOQs5#LK#"Al7QId/9~B;-=[p&jY[4\L\ݬHE๪;`_yqv zRKO9g5ey^@9ec;~P"Xr _TjXz~vF9BCFLbޖ YjmU3r_sV%@k<$S'RCYӳa\B+#N6<]sEA}ixNt_XN,v U 8RR{,]yi?X N?ڈ<yU |eo'ՈE];dtbd톓mtʮS*8D rlzKNcӶ#.9+Cs9GRj/X IG&?:'F6nꗅy nQ8e4"DEOMWW#(oEi4'JF/J[7b ̴LX1sVi5"*)>DQ2mvZ/in˰B$S.K3VmLճK(ͭϖ?ƚDa{Dl$?CEXDGYq楸iLR*GNpԍt玺z* ( ;p B"n,b[GdfYu_fqXyvCȑ2p^g.戁. u{Ô@Yopy ;0,߃Tk1}6֗ln7j<_69sxoO)h?IYW hJiL-K[A+2pHg1]ySzO}jCZ-^f?qqtxQ yGŔpnab=4ڂ5{ lШ.J+^:BMxx^U -7$F y++HtőOE?W2w8TOt9>+E=]0y]rUWǂ:YzNImYKࢾ jj^'VKq]Zr:q2N>Q f4Z G QxȊ늇g|4EjŸ/4ζ!")UT mOݖ)(AiK^^$>B#n}+ 3Y8NePR]{ )Z{~B6\s T}u~+ گ gHN \Q:uQr`nW`PJ$C֙=Pznm56Q.i(?43#aeqzUodۂ|kM|ݰ%x̾Ž:L\J"Hk00ۙu˗==1<[@\fʆI.S;U=*L>ZS.4ޅHtUksvA Ux5l`i?,b*/ w1;>Dc}&SqAmpmLJDjHc'(VT{~WU),>o!4Z>ޝΞ$q5@lcwws۸wU%q?4O|">!r=~JbN;TIpvU ?}:> _CɍCV[bDX4HB&xu v#0}8섲- ]ʻ2 Rqt Zyw uH'"DϠ9⩕1zS Ց(::>;[kw +-_K4fS<ޟoH֓lE%R Zoټ/ߴgg|H}A2k lR'O ˮQvz LVX)QB}!bmHJeICf/H+$UcrHD{wVtzʊIsV`HTf;ewB>J' 0J=K)C *kEVEڹeSxoߙ5t{u62>ZDg:+.&a;4w#i"ZY 7lL(9vW&:#`Ƨ>@֎WEpw JQLgDkjt.X+f1vS~+:,.H2 A@k\J|6Չ #v^*s#ѧeG^pxD_U}c\z@ne#e?r\r!bz o^|Wu,$*L+/fV ,qxC7OA(OSv٩UiLitph_N˙"{۬#)~=4Vk)(KP%?Ⰿ7TҌڛ_||zpiEGV"li9̭{U2EL=7>(@M4"Ǯ(\(Np[ |95+&FyԝĻz QJiB>C mcIj3Yv7UGlĐi3ްy@u i!&v'( toC&$3&;IXnsjV$gr[9__Bl*k{YS1`LnbVt<{A;xnM{L ˜}V1wAx|Vy SXPf<ԫ6> ;8xF yN@لho+ogʐ;!U4Ey*vNv@$}=U i4p|k Ў%`qaXV@ ΃3(>MݗQ!UP6}12ld}ndZ9pYȻŹd,9ā :tVS4%í MvsgɆ&fKuԱgzb0O1!+W ǭ7kaISppAi;{-q ˍd=EnO?K3Y !$S΅A1QM#Ozh +Fހ(yQXפm{Il ioH=]sb@5*&wW걤ՕN թKM $8L~!Hk߭~@^\8E~Nϗ]0u %BtԂdU@kVƞ fi(mAfQЖԒ kj?=i*/.^+KHZy%}h)˜m2b& )4\qTn>)YGӍI8>ܪN[o ;0,/dQ} @%Xξ"N;jњCo[-nT_pυQF!S]UKvu^DuC"[CguuYMKk34|p>v'(~ICEAw1LmFDh8f8 np}n;G\Pdj%J#NbG<4=M?㫐c|B,hpu\Zi7y>hj0t#qKAwOyȹJ I`#{TLv5jk㺓 ʶaɧ/TS}-\hY.s12@[`Hl[TgT]_ۃ+1'PĚ6aqAxxfhxD.ˎB^5i/rq7wUui p\_!-ùjDM#ߧҴ_5UDY^tp Oj2M}6 Zj$EFoCC&d:6_M"CdW^kޔxm5x*AVA8 ðrq=E \xZ |]3_+^IJniIbap5mNxpeM1됼Ҏ$4ֵi"%Dr[yg[\?$f>+5;ۘp"wN F#ղ6ُ ϐ !&Dj߯tXȅ i2giMs$C~s5 GkKR!`+XwPz"%%JIDv>nsZyɝf(?/|d1;n$jk~ ?c`$sQ`L׀i$=0[d6iT؈#g>M1XP']NC =^d+9b *SҠT} ] |IlP'}ޏZo=i(Cv6ָYb35}IlΠr1$)N$2"+=|b7+:BG؝Pq7&"&/)%O!38lѯB-aȟxmQ AjyB7|;|)NaՅZ+mI tE'瑸7l6j{n@V(H/Ƨ腻AƜ~o+ҭΰ''ͪLh'k\Wx"220 䚣5O]g1]k7Yꑚ`djTvu9VM~S@ w\Lp`]IC8&l;?8[griz^S)^X?2>xa̠/bА_lT&b3<X73ˀ>@ϚExx .,^ VohAdL?:Z#?!(&Sv%遙H7C,GF`qftd,zV+lf}TuʢJ(a>Ifc=MjWH* &HZP<5.8!Td:t)gJFB;ݭ-X%-Eqm|]t⥊zڡJd>dI`%kjxJJYD&/W폸%9 61r@+P=IDPyAnE`{ hO{ʇpxk$!Sb5g3G ʥr^^ڣ^|34%Ug2|2Ԩ%݋7B$ؿT/!${]Q@م[s_ [*j|EۼfJLY8ɼEL1)ݔs{4+lM|wιS Hh kE_ OQ+KޒzV)QBrPZi^%`mfN$j胔4'l$>xED9F^ ^?5l1fuKAzm2Vyw ߸@ +~n: \']2d/b =eD#>k`*ȯqz`4Q.E@/Z"ju#lS>{,;L eW&:9kH'4x IA,M%-x$ȉmY^ `Sy,beKlW6ZC4a1:{[;E!W$>:&X$cyޅ63qK܈s ݩ[}müq?N1k.CHgY6'I]. v䖪&ğw [5.T8\YON{v0W"KwS9ەō$4|a.^矻\.F;hr䊵>ˏMRs*N.c>?6$E9E`{ʚ&k:Li)3UVCR=_6sN U7M6dx'sfY8zDgQ+X:d_,dΣvL'RB.3=fit1%MeL9yϻ]RV;& 2#݄)R ҎKQcSN8#=Gb쇗KH6!3IpC:6*d{uo^ޕpec*Q1C5'_džhvͶhW,{K$qjeB΍:Ҍ|*U:,Bj>7^ Nz5dc'ANug%tˎ;|=VoKZÜj $W(S:0fۊ7.7[->7V͚?W\xmoSa ruJylu+5u1˕h`A6%R T ~ A37` ¾~ċ9g.UyQUZ̼ﲻ%-'pl_lޘ-I.l;/ahr צUbG&JVJ^*4<Yx86qm0a_h(0ûf`.oU\Nr+$վj@{[W칵~^v4@E `)a7OP~l]!1\_/3A|%hHX]uNr]~YeL&걈>R@r% ( _g"_arr<xG0mЇ5#9q +Asjv4(Iv'朲\7 <AGϴ2։D4>-ѤzTd|<O1:e?j1 ^폿- Xg$b:31/Վ $KNeĚWnDT8i-^-$\? &QBdvU FtDj~K2C2blO'Z&mţFa9V|ϯIiz ^fg`s7Ti% BTt߿A! x/ѡ=rqD2̃ LNgIg2&tB`4Z4.5k8c&3ԸCJn[C72A{e8`'>ϠJ,]At.|׼LlYb$ #ʷ KpH:yFog~"6N;IԖ9wqeRuI@d7qT0 z$ 1Ww|?>Y/]nL%jE*(RSCzhbo +\3Fi>oy=.L'9/.|Jx:;.sҶe evYx`VYx%~D`4ӌA|<'TȌBX %i׆ :!:Wo7؈!3#@ZpU#J[z5ѫ ˟CSMəH5ԣ; )2egٰ.I mMG@c@R]KwWu8Dk!kMkJR[CB1$N9{#34H %bH5'H$ " L]e'j(̻T5f<:(]H,ilHѺW)9pUx A͍w-!4mr%&GI=Sm~Pl][@pm!'*bAEoS"?+RK!;`!"~Enܦ0nA*0hS>0Q5nթ(COd5>zDZg*xȇ E 1DW#$pܒup3Fm t)zWtGK4t9̷؆&ɓӋl 7q6m9;8Zf7RF$ߔTO5\AMSYBD>6MA1t F}N;W02x& 5rRfWZwd%+N*;Fj-_akCYgH_I׵!XU$mx(7,E*>1bw9W ]]գɵ+ʮM,"nW LCG d2΍nRɏ@##`*ΕT>YN=}Q 34lJm)%IbQjAoDiv(_Ig)3j!XT$K:7Oa{ol4%pr,-]ORSy/}TΒ0}μ 6jk}5:-19> N mjx5؎:e` a[b$4' ^LȥBzـ!W)Pt~"G7$>R wK3;߂!ɂQ%:#(=V1|9`S|sV_Dxk%Cdtd42ݵ+br!춹.mqZ;~.iEOE w4T4Ca"p 볡Q뗉ep<*s_-1=.&*_AD4l~Pay=Ѳ>A@nnExLB4N>u {*0k+lSV Bs.«3|Dmǚuި~ Um*M贔OK8e6 RKj#(#DDj;0븦zJԄe8I0h;!nā#eu4䞯t>hL#P>O/J*2?k(dbVxcHUAl ERA[JD࠳^IПxT|& PHř,155G>>6ҹ/A~&24\?.Cm\ѢtWRp:eշi5%9 5 H{ɔusWu ET&^@|q%tB U ӥ!>_UP3HagZt똢,83w'\6]T\+|_6тǠn"ʣ,Z΄2ͩFN,%҅ݸg<:;vO.pR)}L][6doz6jzLE[9C( p@dio -nZl %NJt6d}턣t0AJdp}s[0%L6#Be;Gh+ڀu aԡvh̕jILOaxQqx!65H"-s[saT*w s2oq<頇˞CP`f*7ؒ~DSRS="[C6ena1AtKDY彀5^ԊZjXUi{3v7xD%x)`$8]"N_#ӇNL{<_y^ϋw;OzApu0*;S)g03N.ϔu@SP*됩` WӤ%lM}]jd*꨼$XrpvT'S/v@򏏌NMfv;IO֝l&^1dfv&􁫼B_!o呏ʀ(6W59L¸|vͱi2_͓K&vŗ绒?1uQpEJW]z7+:-{DÐ]6dž#Ly 2rΆѿG\vs]h*7D75|OFfʘ .Fu""RExXTo+K((O1$C3RujڝeSKK7x"+94pD:Ms~O]Σ㦶e\^'ޔf+ joPö[]/I@&i%&A',aޖz"ףsvbUJ-dci R}qL483HnTy8\;g)l%b0 K I~ ?~:_PpFBHHg%R5b`EW`a1Sk/ꥰ"H}BpN,0#|%~ Na]~LKoty@Eg"_Ͻ{Dnf3"j(:!J)%rL|˧{U(e&}iOEϷn.],>?y$DyA9 W4nv)~K6o[o$vI8zd2hUKwuկ&[^ ^*;џxa2BvFo~W8-S_Pi<@fZ9kLbGEej /PZ ;@XkAjXwMw=dd8wL)Iua">4C#U|? ס"'Hk{= ; ]; DCaSLn3!@ވ{w,r)>9;-\X`zdbDkW9V.oc&x.9vk\[j.bVS<*zSIƬj11Ix]v931@THszޮP<@+}B7n4|v0މ3rz<+w^a6ǔ-Jstl ܟ\5i6E0<ߪC-v'U( V-\>r1MKyc7y£eYq.O՚JʞV@z#GTN0yNWUW!M]#4gvd#?V'08 v'NiH /dÏа4i0|ɮDx)X8/SVqgBs|D21Pf T34Rs`o 8@/uJY/d}YɀQ/g˨c8T tσ@#|!:;(V5Mg}p,6>\= ~#_x6坥9E=GOx6:1:\VQʑsܬ1ˠwl?*E}o!*7d]z(|: d{eJWh7" 3AQM6:0wp(mO,N|#!0"ZAyEjKaqd0&NŪk3koVѧNn@ܨ(J BIXZ Ȥ[6>ny[gBl@~|~%I|k݃;m<8KbnI=C u9IyoU,lϊCکp ZI OSMuW5 ǃ}*&sʨ~v='#tVgX2ߣ@aNl}XcthtunXdf!5܆ A嬳t c!SK(1g9.< *x&oH p_']:Ibs`UK@whh,Ќ9f %fvڸ4~?H[3;)/:fChT(XY.Vr9kDuTwocs W"]Ԝ֦`/&Nb#JoJ:੼s*9tNckC>!bXug k6qF̏!bD6u5$~?Cr}\G_N9h@< e%W4i<\#]Qܐj >p.fX_ZZ@0al~Zn8WJ՘; @+@b4-܇4ܭS$yfS8)KpkcwTtshfvJ\_^7 9;p(Y.3qf5{OyK?޽@?_ԮbFuZT` X@WoyH e;C.\_b;KШo@GQAEj.0&or|$փh*i'8Sz_9ANX+mJq\Z1@FRe%_ B0\PO\ HQ!o·ףif \?]e&T=4MSshf΋x%C( 2j ТmpDk7Y;K m2yzWwGڜnPlHVTr:y VL/mHXtE7a8x1 pIKŠiGh%Eez]G ,7iDb*_16BY8T-J.ۋ%O~i&eQ37ZOX& dFeLcG-hPEFNrOHl$:7&b't<myԔlQ{tee폴6嘮KpUY'Q_&{p˖(dNM!12QǾfNYe+Ax3! AX}Ţ+aj52hlaox9oTdaN7 ΧƼg\|fQɲqnEb#iÑHԔĭ9\Q,3]ݎK>#NfHK‽zcmrFO(O_mNj>c2Js2!fE( 2 ?x<|HϚT6_ׂ=7k5 &FƵ EΒgnp*PJɞ .f9Cvqv8M~&G^s-|eJlSk-kE於戭G"4>c^f "be6!\|hM9Ui(t hzk$Z|ӧ ¾R1H3~u݋·lahMnVH @r$сWC>Zt+-&B`|`CYx~0;0ͫj+%Nkga@]hF;03M/} om Gx/#ە`60\bTe\ap 'bbr8 u qB0ڵͲZ5`Оٳ1Jbe,y|14^AtO554Ε%; ^Ŕ͋9!o^Fpi"VրރifXB;FsV8&Q6p@"Z+<R_aQ5z^N Z2>%q%ٶc$3̈ȴCgR$[b(#$Ff{ s GS`A63gkK}'EݬZubRx<߂=h9"'ݧtфSoP ~_9ZiMLɱ!9 gi^VkQf1D6 {12=UL0x]p;]ģW"uBV,uG2rۥ1ۆ =İ Je37 'R-?Wx߃SUoѹRۡIJYuDξH%~fcyn̦5> ēfM;@З20>*ly|9ڮܢKy0=\q꘯>;(gf0MK%xS/É/!801dGK<,&܊KH-y,lfV?ezNq^/]j?||5:%4QS9r${w=ohc}5uEi"}kh~8ڌǁ]S5 =61gF$LXv "ln=XE %ǂu~INgɥRNtOR5iN]_$19UYŸ;O%`]d4}8!15S}3ǢWzDb)Km6ʺIsDjM@ƬĹ5Qnʻ)†#Q1[g.芙 3`&]*' F>xJߛzU˺w A5~Sׁ"T}=V@ Q乒Ͱg]G5NDٿVrЯY32rM%J29Q zUiPw@D7v15R-oߢ+UbQF:q"FA /? 8Q C_̺<$RѥOXdqh[K}jGv?B8&<8:ra |mL29BywixuQkDm+cVjE؎[ٮqw=QoJe7Yy*KVe~H]k9$*a~pmi!3F qz v!a%=<brjǗ,SƒB#lMP ?VzvaShL;{ITBms:;\!(/"fu>G0YAM~Rd C {MbR?4[]g#O#/2owӺޜ ߑF#"g~(V3M}U6zP |ԋ9sS&BؒҳI9Gk_P{4V4dU8ie@Λ8K0Vfbx X@טrMAF dE +Ye{ H9dᔕ{01KGSŃb 聍7/_D 텖q壘j3pm9;bv3D rS4-{sb$P`=Y5.hnvzORBOҹ1Dm`TYKhjTfCK+s ]J ])]su侞 U!7K/[ݨG]DVT2~@:/6eթZ="MQ) oApϰcw #B,9vUTTXjO,~QȾ$`t$#}#{ޑ" Ru;>8ݟ;JGDF B̈́cQ:qd0iOasvq孺;`ȠkYf:8٘?`|;%y_bzxZ彀^!N7h姧#pg(AEOz̖Aye5c~ǟ]짘md4nvQxۢFVlY1阭++9JjMPE%3ع GʟcdZX0-fE4(j&-4&۞㋒cS\4 h0?=d|>G3zcsIJ@#L?&8T=z:)=LHO)*9Qv(C%ÈQdYZV)׶GTC IKdŌ~& =[Q(^ȒC/ GW$+Ӆ w;rVJ$-qfᯚR AT.WDM1jbçזTrv7}$l'#ZzSϭquޚ]iw.4mӣ++ GD9Ҏaf(QO+t6 @YžݢTF*'"d ߞ^QA"fNi}gg`h8@ [ n^%k׳MrivZEMO? 6&DBE q|_d~=J~Bdz'Q ЇݴC$n.RB9K|z&U 7(j'lۃPktaqkIԧh1QpIeuƥ9;>f a~}!NN S';e1& F! H~V~"`ڴFy5*NC+BG+E_tǵ5 `y [ca-{{}{?Cm#vaƜO T%J@z7֬C0u/H]5Ӆ|/:}&+ ȠץCb8V>3ǤWEICђJgPWk5a`ÓڷHF#tY3OU;ތ:]yV}n lJK+O]F&!oS&wAEEu]oW%9ªߢϪT6B 'ywUOSǗW%.C3NJs;su#0Tb\QtJϐ_n %< AWejU^4uWT<&8u|$bƏYbD DMJ=#Ôt,~S2$Ƨ1rjv凜;K'|<.i,6횫Wx\=vALq$_PBPa3„]/\C b |n8&u9\YkIj)4GƤXtgu= nӰIUH@mJ4JewzD)"/f {j<:Ji= l2HxG8'{#g#‚3Sq~ӌ`bA.G}6=uhϐE-s#BŊś2o'<\jkR m|c'M"Ney6*[%й$ivNV9O },HDњJ9ݗ<643gq!޺f@\ћ6R''Y&!W*Ж?Oa$ /XyHMaMn@jjږH$dY`qc.`~ vCCc櫨1(y@0[?عN }d(wsq*^`}Gٗ#)QI/w7aaX ӴOv<7\φ'̳(!K^Wlj-<ѝ'Uox7&WcV-N !?mOsÜQEʡ~} 9MA#щ]y?4y-_Hm.X+Nl Y,5xpw~K)qͱNb74frԵ: 7X>ءv!Uf`D:OǂTA~S͑_7#ߝlϱFX% ݑΊaJ#z.Mr)Qh!ցHoP"WdÔ.\6xi!JE~{Ob)a745)/@#nl(:M(]mw-íRZ VjPK,?]k$\:2a2e+zvU>`~@%pM 6yPΞ.ˎA#5Y_`!yx<<{8_-v{l{Z5rK amj_e+ zmrr$)t|K3aU sX1x%3+M}BCD{(|L7{Ho7N2ƆڣDceQ VM0[p߀WpaܺT'|kyxQKݷCfDXMkC0_\k91qN'Xϱ5"8Fx,[!gyᙚ#6Ojy'yV-D)bdlA &a$miUHl R,.. [h攺ݧ(nK\ACʧgAa{ʾ#32tXAܞ0r0}K,Om6ە^;d0C#VV$"HA cʸ/eٛ]0鹒IYef{ Y[U~n×]=*mP`t4V1/ ߅}@.7k 9rKܖhd5jTФW+J!T[RMGlVQjãM;}4I*6gl|QLvp|;f*--@m[0L60RKrqŝT^MeHm<$HUE242}|JAt]Lz%tو)mv~SEHŭ6 ."ʟH^4zgrD㌔|+ϻQE3`)E^!(?/~12bU6چ1u8uu홹*T1dGc`+޼eRLĐ+c%%`}U;yv MX,x͊(8WʂQ^\.ujՑ,7n |y=Yٱ⹴Ǟ-ʘt,6Dz_#"]wm27w ZBc`b6L"c-P|Ftr"F0L]WmSmP%I)zE2!Uk)ɱ}3YFKZfkL@YuZ$?1͓-Ix:PWHNcbjlE0z{a}=\YG1XR9*N|ws/(3hJoU @&|xT-g?ɐ*=|$* ŴJORoVaZqSRT\ڽ }y IrO(w0Uז喰GUEhJ/e7i]g~_/8F=2p$ UKC fgު7o(?3k]bjC^az1Ǎ[_WIlWqE |Hg ED_Uhɠ56t? e."-riGPwE=,rU].㪮! aգ$rBD}( +w/[Rx t}JO-P!I+ h'E~# ¢Q1 A/8`iڒ o[uD1yLN4%Rf % JLڼ8J $" DmM!gxw.reۦ>[Ayn@]Nrk4IyH.n <-x^(C4F,k.6}h")=\3DSCr(V] KBU!VϬvB3 l<'Z2VbVMO L|’8LwZ䗿G` '3D[{9^x}糴/h Z^I;2I-oWr.kl xG]M*g%v1WkbJN"^nl.7= !Jѥ'LG0wTOÊn= gU(mum񶑁2N"ϋao\eab]=#;4,ȴt?cmX7 7Süfo^﶐Klyq喠蠭E?soH0v΄eWkd\˟LwYFG\ s)19][G_8e4A ~E'TnTpMr(L?],88N⚉ rBﭧe{mڼ,@-mIdvHPP)H{ҫz_ LU>Z,!\M n_EYFU_Uޅ"AIOGQByFA~>.g Cv},{㊡&'+/h[IiV[Z-d穱y<+S$[̦RM!|WN"588۰k-,R&f4}^9:Au-~q]s5Za 69aO,тtsW@?qey}z͇r8 Y$}F{HR55T``sƸrT=thĬ?KOؑFD^N!q~k~~-GYqTaZeSb)Mc_|vCpo`-CXVm5*i!4UR@ӧ7%W֒i-*ƨ:J8ӋD *|H_soxwhF Q*@ImɣDLɜz}EI O-@m.\JúO7#/@>9m&Ԧ3/[IYyl4 yV@6~> e"Lw AXT4j`)ffm A1L3 SIiz)3rWQ=aс!d r${,^Ԏ's \{e"`YX$ܫ' Ak~3C%h2P1&˭f6W6~^"$R=?Xwetmx}W!wh BQ1[9y.I``6[\5jS=rA;z9oA6\RWΕ>z99@3rk?JaiRO+/ܔaFz0 !h:{V7+y yBu|RE2 ԥῃٟ֓{3Y& e+$ALC=cu r¿pMCYti'M<ek!E-]%yK - ʾ+4jSܚ֘ ۰]*#B_X>Qϣsƈ5H{VyJ(|LCF~] EI (U_.Gex22#*B`5[ /Vh.Q ;SHUwRdSc+غDT򖝕$^@ \sfep'`NE`,` =7]"%NipۋM(z >+y $[WbJNRKU.:? $겥B9˔%q̛%:QO_gڵ:k<5`ЉӭL`A~k܈nj`3H鐝΋FHFa=rC n[W˫F2ﹻjGq<_-)YQ #_u o ?GG>eAHPNʮ3shIc33KvGNՊ4."?Φ5V9o=rSaqC>%8qp͕Y86}h N0aPW=0!1*G&|@R4~3'h?RepN)6H7FYI9*rzr;h#6 זn8(T[# sx*1h&OW}Լ; gd $*#t |\ZG lSfWs uz1ztر?hzd;)Ì1"HP0Oܔ:Saeak;7tjw7Q-[0ЛrpXV'ny6-}_jUۙ6,?yerO24\%ʝ>gxU[nVvߥS'3~(5gQL_wދWqy:zX1uO@SN:(2^hި]ڎBN0Hy"9 CIs ㋉(H5\LC6Z`Q1(ܷbS"'؇9W5y,WLO GNWhKZ5+*m8޵Y-PD+`w"gEP~݆֊?} Ц(0$7Gw'k,UРf&Ḽżm}kPy)HLȀg c4>8jXqȯg%dnS ]3y.y[s|_]ގQ#r5^1R}*̤r ?X׸W>XԽHǰZ P[BknI8h 0:'ܦQ[gDy['s :kjWkM݅<\8yuc39:hڒQ+lR :%bAb"XqV[+#>·odX K8=XKپ6))ZYZRh* *nVdZEseAIO{r}i[f:mGu~i .]"49RxZ<ݮ;eaAAWd$66’f|qT"o-"x?Edoh+cPZ!Dv2y"pUd=((?J_Y7#طt]BEm9zܻ^21#{`eەOJRy|D:۩V"-ʭD@Kxuotù 5G}2p%Ǹz>0@l^ Gs8{7[P7sĐO=Oޏ|CͦOo`7(5SI9p=zQ)Tvwқ3Cp[f`({U6Y/si^(IqVբDLQunmh!2)el1ṕL˿`D4̔*Pk6I1\KugӹfMcʚGmǶ)׍o#tOqT Be l8v_IX ^M @0E{+p#.yu'LC1Jsrh8'?xtܗXndu⛰:fJU9&tt:jW׸>w/|rmcFkI|KJv8Vu< X(5QM> }rJ'Nf7vZ!V̦\?OLu;zqàbfP&?i`=QOy<̫ɑ8+ .udQ8c9 CE1aa.ۘLVd%+ѐa7_,=\,`S%v w᧿T/\ YKH}?<4nIB5|#:_Je5HHLwo8>sHA+iDsm$vI4%85y|qj^데:dX8;n!G.tB!k]kp6)ή "YZ呸v4`[yEũL=8{P·nέy@yr g>"d3@U!k] ʢ +'R8~]2#B/7!o ߁ !Hz ]- Q0mn ,wв _7w󆞢\ƍf yV,2SrNWqvߓ.^o;vSOQت#k-b*qVǀj⣨ ,:|[A=i5 Mpk Hƺxk$͓|4ŭ`.xzIhU-sc}LA[:F}KV~?PeL7׏ϙZ4Ml֨$WK [`-I5ٝ2@}|श_3_d>A`cD=0?/"'=9! 1%~&,,i. &*ћCDTlMlr#! üJ:(F1;‰$U=/4\ kשF;qʋeV#:S>\l?JZLs(NЊ B76_tUԷhߺSڻ qd K@xKv}"TFd+QhCGW@ܚ1qomdUNj*<͋[zLdZՔ%{p( ]EƘ˫쿽)*wMJWEepbhhx8H~wA>vz|[VA@u7Z l5 R bp 9\6w51!zG Hg N:&`;x֊TR!az'sn NgF[}p/JxTs`\-[]'D}C+I= vV.Wf0NX/,/uk9`G* BLaN m= B8l2,}%v0]@٧Wn jM%jG=~Ar˻+UpڎaZNH\c &SODm|L4ۿ;A6 YNg(6ĕ./]'KpK絻CsefeF%7c]Ӵ mΜ"$tq7y ݞ/@fea/@b`KSH#_!{S^j){ a݁Tp--2ZK-*AR: GdxQc]jkOxzY&_q"A{z87/$nz):;5* C.G젷_%z87Og5($XXȞ_OeP'(E 6جK |5a {AΫ ss|s01B<|G#g8}Fr<X:E*>Cy]Q4b+ukU8.'m4{􊝄VDM9w,9P,a,]?q{$SfxG^79k-UVS$5jə'tDzo4zQ/p7`u8qWMzX6MKv-dYn8B`D4wNuP>:mC; iPL1-B.7=VKP}ED(“\&L4tD7-8_!wO폓(s+;h# &Ekwݣb:#VTakXewWBъiFUb؄ua$w 9t\SnN">u44 @ o"TL|\ dUY^>Q,m-TlvK E':Qj ]j VFx˹k9"+ k->b0QG,,?pmd;@"5ʿ (P[&V*\}sόQHIhRh;b L]J҄2LhȦ'u_D c ZX )R;=4x&a1!4M_L|Rd#lJӟ@G#P4xca D7%_pwLN ;_<ѿ(F`7UaQ|G6 YGg.B$?D_8Oxne5jpxN \S⼝J2*G_")}v_5 _2oS!0xm•[EDqMy'έ(يzW^3?%. nВCcVԈ_Ȣiͣo44S1Dhg8p٨z$li!Q4|Y}{$Ղ33v5*k5uC0I_#bҢ]\Lbg?g9tOJ9VцRN"j*~&DŽB OzmN4/>l8}".ȀwJ'psMV }Ȃ5@nWxpN 9w.^46%ZvH8%fZ6ium$-Y,ݲd1bݼ\f8R)/ A #-l]B݊^ށ"D ! o~6ʆ]0bӤþտ4b4bS$I\y9 ;iӂjG QSl۲WY硔Nq{>zhh3o6K,u/?RF)|IEXܱu_3#*c.S7$Msl9X[tHa}8V8*,Q v"}JGIb^2GBli|cr*S_Hu\F'R]!=5Muq2vIh ' t{-{m5MnF!Ōc)e9 *sF/~D(誨KM!3OwxIGwV嚡 0A_ =W,!fOqj\9>[$TMÚ-2 Y4R.9NM_i>+"r,U+thIw,&;B*?S" V腭Xl5οx\x`]$w+*~\˫?9BWvj@W+{rUpKO &/\*R( D1b Cd W^M7nҰˀr yK' Pv &;\3<0X$Dlh)7 T(|_`7inF g c%c#0r=.3V nQ4 IWPtAпt3!>s! ]gp&~QNߕɗp L=/7Y}BѢgH& .Z! d#nKE o:ScAa֋+S?Dd.]F|V ŚTU"=#P2G 7p 16C>J_pL6?ctO38B|nݯ=NVr x:ȨB2TN#SKz]Z`C^/I vk9A.ax%Pf~̸>è^FSKnܧ3K4Haӟ>bq-/I_²=rX}j,F$pAvyB9np-Z"XrFs4pnէ3[w(KW$xF{;r՚s/pуJՔFF[3QRI6AcHk*M{/݀9 u!p٤ǀm< iQQx\"yQ!ʍ>m ZA/ezW.L$pz!rl Q*!%XMFϣb9oStxN&s W[AVo@Q6}{Qj w?JĈg]8 +?A0Š1 L\eܡ^(5W%ӂNE=~nbY`l8hSk_=aml9Em\"e,{Y `d%e4e0eӦXjIH{0Jk?85fufׂqNѭ(9Wn*hg\ Igm IfYoЕP<}\$n%pwXN3 #mh j7Ls|3+U7[F>WoC6e?fdW{= G‹`M aK DfnR}{0ОBqVeqai LӬp3Fq e PXURӔ]N{ ̥se{_G3@V-y@0 4+8_WhȤ^F/$ʔ 6Jc6ʨ-Qif8.n3@2?,~ӠObjUf404 1d{8SʫxۛnO.Q>q,aTDzx_ML@Co8۸|#2WDh?no*67,9b:˛K{"̼B']K>sC<PBrC䛪UlJcIMŢ/=!Kzp,4 9,Ds!\?Oz/JXqM 33Nc(Qʷa^Vڦ{ }}`/nM5Ǎ[sڗ%a9'itUE\+M k=ya,'¶͕TsW4;ʭ3mܹ,\PYq7Ze#xk5,gw8LwF(J2)ކ5.ǥr(t!/; L6thKvj1 I"pxi* 0>6 $n@u^9Jd:ݪ(ӭy'ҹ˷ U ; pH^:6)%3B#(Pۣ,ɭKw\jdTø u*Mk.ncE_o&BNL$!QNWE cG"|)7=)͚(F1EJ"16Q~.^Σ&J&s7 RĒ,k)\ ^%rK !62O_!"T;ҪY)bbk?bd\63񮸃M{ndGFà [YN 2Ջ]|d< JhuZ{sƟuH45)AYzM#z">BeR{N&l e/@UD)[(aVg|)) -Q" /ݥtZY{|!\/հnC?*^(_6 4Q @fR]( *+SJK'WێJq4CP:ޱoB&XM4s?ud΂uEj3fxůɫe):|un$ϗĜu|Z+3C W0}Xa4?0lI4SFE葀-F^^#≺V̼Pk ~1r7&=%$7<Xx Z 9p햇Rs_ 5R);(f!d>-O>Jwg=12!2Lq{|"RZepHMEɎ/NpɾdP&sj&]Jp? )&ޜtpT>xf RI_]E]PxQ赒QV=(!]KT/ %;mY&Z>թY&3㽧,*IRx akD>Cu@)lؽIy1Pz8㦽ԦI!2 L(håYixFfK$j=r{z/GO,j6/L?3M|Zkܒ>Typ hr@~ud<\Q?G2ÿR5V7#%'cZ!k'2_+oQ&qnsn"wc A 'Ӥ5You{Y  M)kֶ0as:g92I(j}^FcҹǞNW 4KgIF\[^k`~ b6?5O5)\ܡ=#3YDio1}XB?{6Ŏϫ;Xk+-k3QV jXUq]a[^O/p/ E"zVs5'u'AbH ٶ:Bk5]c{t՛y5?yp [/' YZ