sssd-ad-2.4.0-9.el8_4.1 >  A `U]%Nދ,qbpSW1Y+ 5/|eXdy<"S=VSU?[?,0*/+Q(<"*=Lpm6\ކL׹Os<0s<_Պ @(1ˆ-@N^U~-;^$!_|舸;qt^?l1kcVC*30QN_DMAlc@%hia/؎ut|.msNIb Lѝfs!N3{4B|)lD:ǣ4 >1cRImRb r8+FH*ȣ2^קqJJ6xɋɂ/ż8Mj|s%ї> E_o*#)Zk~=LzCDT3*G &ŇeAV:06 ݹ/52c59985eb452f48174505291b779375973af5f6d34a93fba1b716c8cdf32839134af500f119d75f3f47c1abaed6e3fbaa745c1b)`U]. C^_Z?=ȽԢ)ӳ?I ܷ[~ޒ5Jյשh'JEɕH_Q8D|7WL3wЋus6ΜL>Fq*NT ~ӽ}p! \l0zTι ]N`V*ȘS%$'/j:vN/1]@N:jR%#8$n]ύQRT}{Hp.5%pE^0?^ d   6 #7TZd             H  B B B   ( 8 9 :b<GUD HUt IU XUYU\U ]V ^V bWdXeXfXlXtY uY< vYlw[ x\ y\HH]h]l]}]]]]]]^Csssd-ad2.4.09.el8_4.1The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.`1ppc64le-02.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://pagure.io/SSSD/sssd/linuxppc64le&'B0K8Q=JNAAAA큤````````_,```6057b575715a222469291e301787b41d75a967d4bcd66c3aeb3508428cc8ea172e41125258b8274ad54644ead12812ea5af5ae01fc51b72bd7bfc8fba17a813e8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903e3f8f200186a0bec183fbc338d5e39e1b90b05e9032532f338e9241eb97b493faa9db9557bc821dcc970bc6e3df84a46be2c32c2abe55a5762c6f821216abe72cf0881f8bd1127cccfc8c1cf7eae9db197c2a913e622e472ae9a23544d1ec217../../../../usr/libexec/sssd/gpo_child../../../../usr/lib64/sssd/libsss_ad.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.4.0-9.el8_4.1.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libglib-2.0.so.0()(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.6)(64bit)libndr.so.1(NDR_1.0.0)(64bit)libpcre.so.1()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.4.0-9.el8_4.12.4.0-9.el8_4.13.0.4-14.6.0-14.0-15.2-14.13.3-3.el82.4.0-9.el8_4.12.4.0-9.el8_4.12.4.0-9.el8_4.1sssd1.10.0-8.beta24.14.3`@`T@`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.4.0-9.1Alexey Tikhonov - 2.4.0-9Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1949170 - pam_sss_gss.so doesn't work with large kerberos tickets [rhel-8.4.0.z] - Resolves: rhbz#1945656 - No gpo found and ad_gpo_implicit_deny set to True still permits user login [rhel-8.4.0.z] - Resolves: rhbz#1945655 - SSSD not detecting subdomain from AD forest (RHEL 8.3) [rhel-8.4.0.z] - Resolves: rhbz#1945654 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-8.4.0.z] - Resolves: rhbz#1942438 - Wrong default debug level of sssd tools [rhel-8.4.0.z]- Resolves: rhbz#1899712 - [sssd] RHEL 8.4 Tier 0 Localization- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.4.0-9.el8_4.12.4.0-9.el8_4.1 .build-id62b45ff4749a30c300fb7b3279b7037287dbe00cd48b1d4c48c7db29d26bdac63073df6b29cbde86libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/62//usr/lib/.build-id/d4//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d48b1d4c48c7db29d26bdac63073df6b29cbde86, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=62b45ff4749a30c300fb7b3279b7037287dbe00c, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)55PRRR8R RRRRR RR5R/R#RRRRR"R1RRR)R0RRR RR2R!RRRR$R6R RR RR RR'R+RR*R7R4RR,R3R.RRodocֺ$&AǒQ1%{ ^ 8xE\u#+Q@*Ƚd'J֪yN- J/5a @o4ŋ~窬ca[xn=G8x>Z mp`=)'RS]&u͡b,cq'SڼBf)v׺w2iWg<23װY,H>_';۱oB.[lN8;BGZpa4pha,Z4ʕŴΓW 5&d0$"){:;Jڕ^rP=Ksem᪤%={ l0G\ߕͪp+ ̠8@c`uvmMV>h3}4EƒG aN59k&toPD@FQ&V(!Trj]¾)qԡ׏ Z2kqx\ur0a;!ܰ=0+1usΡ~ro4`Z@^E簦&428)mhP=%dboft?vt AK|5x :NhB<.=l),o)]A+C q(=fd0]<4 %J?VY/p,3-"u⫵mק8TJT u-g\=|^MDEm!šE&f9Ros9ش]{l14Ypw_Mwì@eQ6;"8|J{w材1R?e յ+Aх>17ǫX.z?i{VNp=Q:Dn a a&&`jtނ͵mC$vhY\CQ6.z*ՂZ3ȫEӫDeL$e2NE liO#hL)Qڙbx*?mdH&cv,Ae[ß70S'i&(PmIF`@̣E]xf2?AKMQ%apW@9s r(}'2:GKɴ2cG7!Y^ ,CTs{|(D+IF`Qy2A>!x}/pRuNksB+]+/K>l+:G^7HdNeBQ`hJʆJ&CK~wVsBp3k絠9Y10tDWݖkp=ިF/a:hHֻ<7U$/- Qiκo $~@f8Y(y^9PUɝt&0qi#C,2ٳrETtS\b" A5>=8_g5~ 9N4ZﾝAe[hcߣiQ+` ŸU 58wE G^F$l"D'h(I)Z.׮Z&`%(4ާ4~O9Jr5lcT?pvwQF*sJ/FaBm[}E|!.L֨o\b ygin+56b;rV" 3O厱j+^"'{ci?_ W! c#""Z?#,(\Kj VO^LwɎN׵ƟgOs /TSҦyR읾+qlWcπۭ`=׀))%0 QeKCķS3,gN MXZƒٛDnO>}T7#~F`iFoYbiwȃۊ'd,^<'׬2Ɣi x+ Dkp|SþatJPf;8[1ViZP} گ<ʓS[35`y;2lc|dC]ۑ'Y?`!8N\\O댬R}l?!KO<v} ;G M ˽NHJo]dh-Ai'w h:J4W6 g[܅ _? b"P<& ocY w- Nu~\co'<^:g0O6EF־j}ddvȇrQX!};(PMu_y銂KW]7u?hѴ{[ XLPG˯Cf:)r9NKZgF GtG"{ˢP7y5S^MxL(7uBt5HÙQ!L.("U#$YQxU EDA3TN|t}']@gVˆebFUԄ amYC<ٵ@x|9Mor$?Y!?~7AT-AMz3sV< Q)6r/|[95ধD!^v:FEh9 X;֌̛=PbꃫF"!cf࿁\G$hcd1vC0z/٥4ZMqc ŲBR3IѠ-)[_gˮ{+wm`vh2WA7.yg;L@khWm橚K$ $*#X ev?@^܍IsbbSjM Jl*X yzQ8KAQsB^#xgsROߥp{u)-I>i u$Wv=UǙ ?pЀq՘.S;>k&<7e+FDy߶25<:3oWYiYYl\:[M&Y4?4WRpHwSvZ2 N-ԄPDK`S[w&,Ty}x,[ez3ON$E3CZ=4"}c#X!9s 4}MN7 y ;7p4ȟ[m]>7:I~WL+EfB]SB$ ׭+;4{]6pl)7`923I$JxnP6LsY ;c ] /%4/(&pE:: z(5Urp{@:)ˋ@W qj)Oj<`,l3EvArS3>EES1aiNJjЌ뢄%ƒy+nyIܹ"ww-wa)cc+uiPtmݥ윁ije4\"Q.7%t>lzIׯb~W!wQ[ƃ2ANl&y(xKе$jLdB(QBeF~ό $6QZ"`CVЂ$nh2ٌ/RJ.sҩTB0[b@B&Kg1^RW"H :5_A ;Qxs9ʷ\(DD1'%qtlAN*€l&N@yQ.۾mHI7faC9 ^AoFn<6 $/2Ȫ}!Y B wR̺-a'CؖN \ l4F*$8WpßՇf <g/ TF_gkc?7e`KdAWYyT=`E ͶU.zUJp^cZ]4x'&N#'IF3,\&GvP}lj1f]5gEa}8/!G/Tx?[^HrTߚ7S+Z$\q\CcEGוV%1b8rcQ+k#84X9i9VYga cߡO ۮbsQZ>ʴ@YMTnm]֑0FWīAnMrE,fIA/_M4D/z~mT6 XRPt(\5k|BFpapRI$JSެB;la!%R71T_Y! FD#jWsĒ 5 |ÖJn}9.q6[3]shH@GIg'Lt꫁F.}, Y"<7(flz޲^?kmB &甮Fd,h2@b2f[?Lq*Sct9m0ZF]R4%J+q}Ex=pc6H[H2):Л~r߬oJk(@?wіBi8L@ w{l c5MjXp%J>h9R9Sk\ךqnp(H)^Jl'SBTit۪LxX -{$aAFܶkEZG[kc@eyTt:589DbV-Ǹ~Yםs+/,X3Tv7S) g¿Nd-5Q}Zow=9Ӿ]v-Gt䠋2 "` DJ>[V 0uڬ@Ȍ E^˕XThЩe N8<s!54jwzL& /|0re^)w<j_;=xkdY1s}K&c0#t92X ^Ʌ3nL% cxl[r!cJƀH_y1nqE2],J@lǿkSe%1q/ 5}=գzHzo7~E]QL.%,"wLCuߐy0uPa?yG3,Q=F藧=1YTïrfc}8xġݝDg~əEBu"Y5j~քÃQpE&sKU&irCJ6>?lmL'D$\hTIÍ¥\jeXeЦ[AogWQ2<+;\&dѡ w=ݝUXMK 9m9Y(> w!Alϊb2+ѹL V͞vԴ >X3ًc(`S3˷5`L |}"J&Qd/ހnFrRT^zфjJ>rSY'ʪVĺk}=ˀRkd$)HWS؉01\vcDת o!]YֶBnV "b^MTH vY.RtJ6f/";I*wc\*: {Woȿא.ʙUy?@%-4ڵ4@ ~ey`,54K'_t^z=Iݞ;rMSh *I0ʃƯL$S!,IjNՓC4PjXE>e/6Xճ yykFsˣmZs3YƺJ:K.r:k|MuCD~nyܶBZ+Mwȉh]鱪ob(;<\B%ӜfرVPI3b=Ox~TsZu#Ǭ7N`GdikҼLui@ 6ژHTkE+D! %DM{In>MSY/S!RNf]}̌X<'BvC#H9 brx. mu=5g/@y ؅ȣ@ _SNbkۤRCV=]׌}O&$y=`$0(&%3pŲ@/P WU_QޯW)ÚKXjzŀ@[ R)e0pF,p'8oJ_w}Nt6Ū*ڈɷBj2^Mh׌֦Ҩ1f>mB}5!2yD! Cyqfʟm%biRᲱƱf]ag=}>ݰO"rB^&z 5fJrth3ӸL{Wj7];J@hyvk㱿cvໝ{PYzwgW>;IP UrKwT&hNXocnrdVEWyp$-{V]V $]L' -݋xXiRc\4Yk) ]dBvZVEFpv}/r*Ozr,[5ڱR?>V#I-hdtI([zJ6xayȪ s$F>B#!$W#j,6n$ԗu,fT( XaԊ({fH#rT@|gdNp(>}J3ӦοEGO%7W"tXb=V 0Zza݆u~WGW:ț<+YluF~eFE`G+-@nOCŪUMHjJ]SZ`(yjNBa@PZSa6h>= ri7 gȈ(L?1׻mx(oj?'cnp$in {w AIͭn,BF0`jТr6$O>fdLDrr@/5Nso"[ۮ0 7]Q)@@7K/ڜ}׬`}pŰ)wN7@?o-a&qns-G[xlѶa(pC>y]  1Z.I}oI^"wC|Ԓ-lOj$,ŞyNvn(@[}F3QZG9%<(Xa}CR\KpS:4 Ά!kg>,jg+Hr<J5Ϲ .&_"uFݭ_ 3oe8c dV \"UZ&0pbl'/>-{CDk:mϔBКXj6Y[+mb:epR#^pOy(\דwJ{ ~,KX̲ p#\[ID=^'$oCav닟W xoV݀uE P?BgKi| ylDV^~V,@",Xv.xbrV=[%Y>U 3Vs҃Q]KR,Xوj%n7hT?WƇړTbVܼEA LE@. U"' s`Kk#[byaJ(#=-Sŕ~un^A gdu` 2Tq>\fIL63_9:Yzj C du*,xk짝BA%HvH1e8Cd|c9o6Dt/YS1 +܅ td~ N{cGfJ Ơ j J`4Mon+Ѓ$L,Bb=`SO?/['`cXfy֍(lYQX+ 8[@KvԖ*Vv'ud`=b1DD+yuNH(&CROEI(.eXoXlVŖ-H~S0 vBνa|1^wMϞ6*ᓓɜ,τ!eUAxxZ{!=pσ okf WqeKu~HP6>d Om^'m\U7dc< O1H6!̑()>iE-T)NƪK}ͷqNQ(D-^(5Qc5ܧx %7ž&V9,n.n"XkiƤ#"1jNj^)WojwQ(}!0z n|eٓgx'GG%K%ѸeUh} p!PFp_x6`F}G\! 6LP/pӘ˰Qgۉ@N4:03+C/`x}7scWJ`N"Z:TUz6Ks̼ '锵_64. hi-݅D 5}雁;3guSw&-H=kɹw?RXᵫ^]ޒUjQٵmrFn;,~ (nFdݢ$&i8M偊 FI\N6Z;Rޕsylb(>Sl6"ULJdG]6v {Ԁs𷓄dXP!bdᕴl3<>TOUS N F7HXZ$V{IKjsݘy1cÁb6=;:aε|Pup4w4Rnʹ+}cޚ?1/II۾}M@+`.u$BRJJtsWK{4_)x@żr6 ur,O\89*][sσ*9ؼgCDbTuhPw9BR%Wˬ](|z, gR{uqqs9' , |!i0oCN )y'xN22HJs퐥,YI8Ugȯ/[rOƍ =Vb3Q c26[mJՍTvF ŤNĎccLoVL>(Loã&F!EXYYTl'fs]4f-!O* f4qY=Z#}C o~ T&:7̟z/v %!ލ@Z_| @NT2 .KtڥnpڀC!΄曆! Y%&7*"j#'^i,EMr|)@~t-8%9 e'h&usR7- hjS%|fS*^dD[aVW 3hcB5[|e,=E0袗(8J5Q{8\.imCڔno(c|֔qy=#'ۗt7^&hcb e.̞hP!}vO_x,=&'^4bSژt."B5)7?75czl&9$!w b"hbã/WC;lū0BQ )Xt%̢Qbȓ/mG/7q|C"]L!9!FC Us%}52,Cl(j,8l c۪}<]VlCY)?&Jo =1Ny[܁L5|Pίt/rC!RgJ`menm:9d!&D? 0L(yQ߆Kd54Q0J5<|j0KdߴSe.b3)t)g}xC=*@v J57՚TB{o]h[Oikh-4|GFJP~8)'&굵ʳ9 3{A@DYiͻuםW<*¿'EwM&ub2Z!Mˑ}ɼ;uGQCnc.bZ֝ouLDXϑ)r__X`-S4݅> ;Yo'D )xY:fk\S׶lГT-wZ4keR"%2[hk$KM&Vx`Ol)_E'O WSWKIF;^y}>\qsR-CQe/eZ HMOP 4\`+Ϊ]D;ųq1"SS\I- ; =`'@6NrY x$@9U)xz"NeH]}ɰ&E~cQJv:ATj,1II`΀W yFRz7RVRT]$P=\Xq0ëtv-98@$Qu.ikuyAJ#Ntዿm\n_$]MWdb _Gru}b0 j> 郇R1Bpaes%x^8ݿQªrr#c_]તIv,Y9?NVC`JIk,Ut/HY(zEEɏcnS?(P h~fHzsB0Y/vtsZ5]\{<˛ᴠAst4R\MWB\;" N 'V5G9UcZ l{̎/AWSw|8|}Ia{Z~hːXP npx Uw z;p}hOr'D%H۪/#nj;^2æ>,a 9_ȭ󤳨OfqzgԱ2=Y/L  V٩4dwpz's+ԫR]:I e:7' g=lTY/q6bJi$F?'9&טS<"'쾾5j Yc /=%(P5pehv:MMw+oeVv(룩v,C+ ӬQHh}$-au/WpN9_A \F;KT̐311ĭ't@괋3 z̗($;?(- ]hx쒹unALk ՒL54ËatK*]dڅЅR;eœZWhDD~۲ h\:r۩.X[$7eH UDFBEjw] 9,0a5יU.z.nd4:83=XTC}%V9r!c.  6R}-K)_o ehԿݵRtt[y1Đ|9Ł|]<{.-^=`CFw60BHЫ.A snt[|ߌZ3)zLz2V;Ru {<|t X&Mc 8Q∑-Dv"< ;:[lKQF0L$dIb9EUiȞfrV[Z6bTԖh!SpT2ٔdg \0'"{MŴ+n| dN;[2>u,igVmy"` *a 2Hnb IFZ8OZdh4__:.Wg9DD!٤  &`e-Vk /ZP\1Yvo2s\\_yrZny)jy_bGnäp`JoPb{:!kH\3nubθ|Cc `!m1|8nw]/f5jFr^c&\9-*')_U?(Al殥2;Fg̲FVJp&bS^xN ( =]ekD*n]h{lp}&VaUoW"%䣌nn2 ){.A{⺊X#=%|3Yi@d})%I-!+3a'rE勽KjǮhLhAEltۋлD{}0]`g <^D:u5U=Se@t#~fjF]'b[;Ψ4Pm,/τlO)O\-밹4 TMg^?eA*V'~iPaxJfF09|;Y|+ 1cGa5khKf(`fjWp6X2藂/efAGZ|Tq\"x!Y.-@f';nBId藨 Oǥ{7 9&m^4 B})s㜶{IJq+A!3.ʡ)[I /&"p nn|Me8ښuD?FOqVhS^(\"ughՎJB%7hM_+]o ;\KՐUp|@f)_WSmVϴq;_q#N5SL ogeIc=D 3C652/ALUf5Iñ9̸ZV: O l&'%qE=d @ҼB"Q9W=`- ]:nZQ =n'60rU;!J\}9,ץ2죁P)' >(fT@̨Tj3^Щod9P$Ou,ip{V1L8ШgP·DmPГw[S_fQy#ރ26uy4_B.y7@QFKKRg:7t:f?I_|&mednD5>Jl{WUٚL8:HYi Saf/Oiݪ;} '&s L?fɍ˝0if0|a f8Db)xA; sh QOHi8sb ľT@6 1rbwR3RH&ѓkViA=YЕ+S~RH T$j }]FWlΠmL/JH!L-[!~Pݟ&Jc0)Ľ !{+p5fP?ȕ@1Vh/ aSGI\9J:Z.+`S{ 68)fzF* 9V$v8oUGT/w8j^{9bdŎtΌjB'`Oh'@ȫHX)54ük~2U|v3܏Ml'|1i}K,{R]̤ح ^jhQgmzqbIGf|)n\rlVm>ENqJGIQ#qplGEU.-JЏ*Dfi[9&z_d !ݘVO"{6Mfrr(VP)`UО$0U)瑱[`~aDލU> Dx 㭢NɀB$3~Q"k~]xG 1!HK˄)>V/^mq c?ƀ(& H wBZy vfBN Veݛd9(X# vIݵڕjoV˛IK!P7CG_W/@fH:'/ח"2\#^*|eWpڎo䏚j2o2 @FɅf$DYKh%ECa `Dў*Hr:R1"!'|m9DR27Ծxv*QFw̼%%ǣ|\\tGZWG+KKvw71[d[KO9o_ ã8٦QHNU,9]mz [ ?pyKH;Ks>]@q[Q QIê FsXH=c[S 3 fmwRbn8CN/`4k˄Ʈ1YNIF@càG^6{qI*܍Z*]&)* MTf&H"T;{LHHJVh%K*=%6.Ɖw9NDpOjtU͑uYҶSnYEϹu%4vZzߩ5u!{EL'?G_#D-w'@ioLugS;G|ٛ`tBtW^Bg]Sqº;)y22'Io&OƷg&w#.z5%L@ x .U& .sNxU}#flQnM֪oJh6$~-Uܕ^S9tfE' .륟Bu(q͏豌>*shvubM^ wD<] c%ɝ{UZ{^\Z@[t(ԅU  7uztb=AWK/e 8{*+ScU_X+G{4>7" _ӡw|,n $w&>aj\>ڈW%n2g?_WANn5R M0q_I)d#EPuM:뺔 %'ȸKyTo[Q>4f/߁B{jHS|k>^3%ՇWga5T hZ @2edQ`}?Qy^!i'liTbQd?s{Yr)p0O;.oTX-LюtΠPel w'h:l|aKtD"(㊼_`C+)RiTYǘ?4ts_ŁŝRrdJm F'@0 ǧ^Ǖ 4i;0_&:?wl)TR2aR3 0G_M~+aĬiK1*@ºTmɅ: 2[\$}*J:Z.~;o9o!ؚh.̔Dl )U_ uCSScڳ$47ˈ=Hl-:oBMuJWrT5>g31`>dT}U ab0B?FJC&7?j~7N" I$QYJNu[oLrN̬;g/@kH $VkQ뜆H&!ѴL"N1%Z[=% GR#B@M9{>Z70n%sB˭4=qJ2ҿ g8Hxw4̇ÔƇĽtݷ+[ a)O`hvXn:Vz}¡)3SċܮhW ?3e m?:dʲd GMxlRIIh  w?Lbɝ2K7;*PȳvI&+i0 xgM!`kT=V뱅eh%%l-dBcvkh2MJجPGy11<)5hx}" 5z#`s&"$SV?ߺFd(-~ޫetO%_!}~믮],a-xb7>ZI4DD35ۤlHd`ؽf]2qVkٌ66ʙa7A=uYld N\+1I c6M4PЄC_}  y ua>V4k30y~" @%IAJ%,أ]9bݮ{ba ӭ/ؼA5G<4w@<&(`GL0 {Ô5-\[] iF+gh*QR) vauw:u gΨMWU WJihruߵ&0}鳽g }o:THNL`|i :W2ݘD,Tx8[o HSΑ0WGjH;KTy^ 4LX2{TOo} >Q@aJ0lv]Bvs,ۺܚe+Jv6}*fXQ1b!5O8DthިYV1 gBg^&AM%$2aݐRhFï2HF#/bCT:T^ŚA', 1wS"=WU-VSFR n[( &mlz0P0yzBqf6q4nMQ,I.9ƠeHCqsɉ-TM n-ZH( ),+wgX_*<:F6 92=ILAA5|NmVkyY}S{$l PzET9Q<8kV4ufLU9GcƼ\b%Z'@/!~T+Sdd9[gX_++aedb 5'oѳ#-LxcfS$Cx붔Vcc߲j:B/Xctϴr/\:16Mr;P ˲6Eɢp[VKcW{/zXg^$;, JD{ix/Ԓr׸'6:U\ȏC~;_f(4 U 6N Do¬8EgaL4n'7?L&OFbM/ 5ZD@Fl]lN,%c/CD2S@6jRKEzVx߹XZἪ_~9ig2)gba3ImKN;%a/3&awtk9ek ^\.Vov܀r-: *M-|va7ftJ&էevH".A_ K(Q"a>D\Ҕ8[°HmUxh_y%s.fe)8|xsToh):WVA΀5aytY7%¾tBp˔|Vp\bka,ugn<#)=r>8"ӗk.&.XI:a<>{t-{fq741w#닺f SMB Y+hTa2*!1_]=GWC!a7ѥ"ݟ43{ 󖞍;bZWm?op]K8IՐup)punu[p Ś10Pm/2Ȓ uBQRT]#D8;  u`&2΁r x8<_èlXvY.^snH -,92Y7N$N( ˇ=i{ Q yT66ɡ0/)b B2.3a.KA7^pl[; .e"~7Of=} nJ+|miG^x5{4A[ۨJrYH5^: %~()#dD>m %!?7dޛT0Fc1=2>N(O³Nl6*t^ ąӤ~`+/B[ڏ*3_cGbDd>[t~9?/as<ut[ cf6Zh"ǂ C`NhiX^# }rK?&U-={d=&Bg$eq 䒧qIX;@;+)Y$XK,Kcnk68[Yy*$PLf2 _b=S.jgiI^0CmMY@VcE} nR/5}ll0|`=͑7Ȋd@n,ODf<s{C-ưG<iPm0YUt:(2`xAc*M8jʥ[* ggcLn?Tڽ=-Ѣ,>{e:.&輜-9 [Bn à %';ُ)zS #``_ ǏEI.w׿:Z?S:XFúH$4ni$"\%|:{ c2H){BL+.ԓ"3Ē0I4CaRi'D-R|h i藎\MUGh,<}V")N2f!⥩V]主vű/+\UQyq lB&GJLC"+6w%d / -JćLQFr8I=/2(Nz˼NIzzN%}4'j"x7_^$ <}tFsB aUp!x]bH.ּ?e(Lj6U 2}bdp0*9As=Ƌa~{=^0o[{ռ>/E5lH,rh;r2S6 G=`,Ra!>!+9բ'%43!`H+6kkF܍f/^Eb}vTn|6ƥL ::J!a 5"vKN|ˀHo@zݨ}G4pVN uQJ6j @2ر=! 9gVlsa[iylXMEgJ cU~{ rpż۱pLhi1STuo{tj3\Udԝn^Vozy_B\,"Q#0&^zԷ?6*%fs>R-i{}EJ&w S83Dh&CХ$>kfXzZ/y@ŒUz`"p!-VJ(KnV2q[19{ޚ@Tߴv%wE90!6Zu ;mS_5J(2&;c]琚y-"ljO<+tɔ޸Xj)=oӒcpb2w[r*:/ZT~80SuY#z(ͫշ&TIDvnQ={-Ggyr lrPqKp72.nb0!%o!yϤ=R&桴`0oRW[q+lK瘿D@0ެ8XL+2-(V"cOCGc=m#p[kYãR0+aRjKm+bh?A }fF*&z8,v },0BU*Y[%Y H/ 48ǿ`L]h瞅" -l8ܥ{V  R4".؄$h'An^S<;o]y+vh<܈ o,d(3Jw8[*wir]$~ӧҙʍ38{Hgy=OD~XGaY ˍL( ]hng"S\z#?X}ˆ<#O+< w"M`@J̊-$, C; J&'Ӂ/[8!x*Dݧ` |1瘯NT8VQM͘8vr*{ύ͚"# X+KHl#7(J&t w`*G /uqگ[i%.c[52 g/W갤q>#^\FA0p^}}Om7 +։k=AX=Vy;oY%l)f, 6Ng5۾* U.-Gt'`\]`3И%tUKLy WCm4<9\NXfrPh.YQ.Y1 ^̝V3wLjK9u`EEH[EF'>׭M}A2i:<^si+r]uWPŹC#q9W mr$Fj4b侏`[ސKjzG~8kND`W6ms pyEΩ&iTE]/H'U/@f]K^jGp`Eˋ`r$0mrg}FT.`x{;F)( `e=K{22K5 EGOMT 2)h7@p_5oLqOW`` 40fz^qܩA~Ut_b Mh8*b[]9u6Lp>RSbJv,8 {r!i}a~ ]tse"dvCFX,E1 sY0K*m'ә\k3+^E6?h-ׄB뺍Uv 仔WrRC4_ YP#+|`?U442mR/"ӉJCaz81uolHbK tvb9?-ō._cN0)>K3q.Gy kVNQDS"Fw]xj#x8t4ъE%y$h9nX匤 h3ed['3kp]o4::I*9ip+gZSw(܆8KӘ[ ۂ#TNDe6׉5mT#CY Ad#7x8hk(%t1Kb0sOu ζL ( NZZ`qvZ.A8S38|j:B)=ϡ mp_E|tqJ<q >7w)zu!'Ø}ӓǺ^pr]h|:K0}: g.}N*-tsQP $BڻO:.(YIPI-ZUYlR[hvwn^9 /\υjSzBbޒOR{ͺ,b>[ۈߕcU+2j (73UM}$Q1-c;!j24l23{'M AڌEGkC`5ӓwvZb4-qm^=$/)pd, s*u6ig;m$ʥ]Wi@JFXRrWvn;v}.&\X g Դ- r{ǨdT4G3 H96xr+˘N9 Xդ-taV,(7< ticq@cLa6ڏ۾fԞ]M6Y'KQz%͊ 0RD7HC1H"<گl2KmLw_QLdė͕i$A8 `a~l*Ip}eܜIj~Ea㌱#ĂlGfӅI \܎`0/5`όne-MJvj]b-1~y@C`K i "At ;D4B sʱ(S5ZQ|zg#}Gٳ'~mxQ hL"x45cRvwtOt=WВh-zaȊfE$w,(.8u4~ߖD'!S(Wt|4C&] ,]=c 0 n[\3TW?hGmtpZVs,pұ xo 'W@ŏ7#{Nu2oY0|q8 _DYY1(!P(XLV HPu_#Nh3 o 8.'ʷܶ_Rmf49 Q)k G T0tb&-dRWqſM؝R#ʀxr+cAv.6T˗D}X]_EJ'An0D4[Ch)]jTdRFŒ#x!:qy~xWZtJHƶ[I0ዊH1Cĭ1AmlK8A<9PXv(.(8޺&TՅΊ#Z ~}閧v͔`ON 3Nos\aqu vbw%rX{`F-ӎƶ=dF>#f =!I]H|7J$-ڭ9q |l֧A+4u>)Żo O06 >O9\~I7LBCr("Coժ^Yj9L ~ܳ=[bܝ)F%KjywSMGA"@gv ,5<;e3^9#wM`l [C G9 /} "j̭m:n;b\D,T}Y b g92 ?x7Ug /s64)ӓ3?'#W ;7Q>U5t؞A#ilh!a ^s ^b .THp^->$j^=b}YF9lk-U ߟ99~6q{NȾ}XZ7y>IV?Xkgk!u, ɱD#ˀ޺͒2MKRb%MuMeoBRByou6Pf0})pև'qVMP:|7ˌj.ˤ ,ЃQ!Qb*z|EJw'g(PH\r}TpŒK]T+ WcFSYZ^o>NN2DR;]f162lAa ⇏GyC[; "0t-RXz}>ZH5&K<"ŏDbd ́')@71.҅k<@ԚBvzpyaixear(]aSmQeox};: mw3yZg27ha\OJ Çm~jrDlNG (S$ꢹ84CqkYp3}k23Uyg=glI8 t*dз;O+Ȍd$]!vC\iWN * .PcEJjmZ1U/aE)ķw#(8xdU#D8pfPV@;г>d"NOk,(N ^uxrpUPR?RY`f.I-Ȼ:>{

,Modƌ[*Io؅qMu>+ޙ3]I{^F\~h\M`~>of,5ch;V£Kӻa}7֕7Y,p^d ?#! G<.kw>܃c wV≧k17r{0TEpsBřW's-~Fg~v~gvni*B6'&=~֮yIc-<R{.*(˾y=Fi0˶U Y5 WS!lKHAEMcDz) epԵСxܞABfIV(B k붾,]mv/ՎRLs) 5y8E50||X3c'Ry} Ҵ1(g ؃ aMzڥŎVZ>[;!bşHI[wOܬq74?'X%07ĒY1ͧx k97^"XA*p GF ud;&{! Ӡ1j1 Vc z{ryq qo"#~::-0cـ3,YOę܅ӥ*s/U\N ^M^?f^}UHaz/", Q^!j{,%1? O߳2DlX`a:eSӀH.PQʞ`Ih$9l843J[43n:fK-VuwjT-J7, &©JAޕX3 *_,vp;GN<~nGrO_-Dz7 C#(≱Hi;R2)s}+뒮_ϭ ف6.wP|eHQHK軫@F;S">㷚x?  QIR7!$ LX҉AM䢘5EȌ )=F q7yxV/-ZHt?W~2?=ۣCA0ٖ&]~~P/<1E:)oC*TԓόrlÙE5Wf ]"Qavh ;2^cEyX\_<<"mS5,\Gh bMymyXep#E,ABL˘ 4LU] yJ3]>θ"EQ@znN`[r2hNρMbBtq\YftjkQID ҕ*N $;NRW1ޗD,tb_yKnw1㥠t{Ay[%tsvm뎴IV\X-M6T85n ݬ㍝5^G q"LW[]JMi)BDoŖ1@b Q3օ <[!rz-{zK6""]4 G#8'>޾à"|QD ccb@E(1#n(H(aǑT;}e,Рζ]"]Jap f6Yc<'D1Nhvv1n=k>ki{5[nQ(v(LDUwL"D7)a eW{|50JuTHv741x7 bTl %Tr }?خh*hLɩ1 `JeŐz}WAmF'˧Aѯ|&vR)6"WT6n^IH5{zT/u{(#ޢ+Qx.r`s)W㱝H2cǡcr[)pIن3 xe`(k#UV gOL6dPW?]w Ja;p雰㣆OyG`fL} Px%>Ai -^{ h)AoRlphe={1V04NJ-"aH48[<}hQe~]ozGWФЀ!;ls'cLHZtMp5p,^Q+.}W#@G,v6j #KWod&eP9w_q>p\#ZgqvKuqsC\jc*VTthq({n4FnXͳeG0 Oa]L\_LVnTZ8 II9@-rfƚ{C໳[g`b脚m$D{Wjl-I8qWrdR~_T. kԇ_~vc t+- w.H 0⿲mP oJLpS;aPw`u?~1,2;9iiԥђL:~ӛsMd=swS&o[Ux?PHnkɕؑLU_813)Ofhs1~7"*k8$J 'xX%Cvy)fɾjnE3ׁ ,FW>< ~GxY4YVOa屼Zп-k)g-L:2Hn8LIPvQ<>xe$pCc 1I! mdi܈PUCXKjUQ\CS{dIdJ†lz;KbPdLpYՕSmAv!_yIMark'Oo o`Kc%5Ax;O~* C}h3Ϟ2޺ŞN^>LCFVoP^։[S )oE.8 qG]JA ii"ԂCupm0]k%r-`cK s1+4; ^\P:BvZND2~׶ʾ@ѷKi{`]L]ıY__F,Ψb[OM(y?/)Naˆ2z7fީ2ԕkg.=v}= Y9# a_y}XA ܜB*3806!Y RiaDz#;h 3ӛa E9$N~! L3r@igc eu~c"bm G67Yw(N*B57PW8rCH}([,h0%wR#!lJR5߹p2Nb>׋- HSL')%@~ ,lY sdntGxOhcӵNL Ї\nU["lϼTN2Wڐ3rE* 4[l0Q&ҙU*,jf)5ߨXoi;$qr\B)D0C]d53l pyq@PGSH ` I )jˉuPg9ƁCr  [S`d'9ӯ!I:EBA"iG 07Թ =ooBpש." a.(E@J̫,1Y͌]cMkyҚ8x8r̴e Ödα m4~B+pu_T\e6˭2d] IUW !9qVwWdX4K4t_89vwu wj^ɶEnUC_b:r4٦ 6J/sWMK!O2&;[0S/#L'1X>{Msc)qn+nW}];;``o{\Odϗb虦JGR9M(G[abQq̾jbWP[^գxVN&YZ $+uKr!4iAl̓ƨU_“*L= jΪJ`Xg1TYIKGD"%W#2 MH 0,JUEnV78g! p²~ʐhg#t{;9κ:VD \gbQE|$b,/n3&Uh]M3B6E*ظW&CW9Y/8!{3'x0LMrF]`y&'= qK!z|i\>p~8<'o$4Ykddvs 2UFrG<s1}݉Cv"b69cIUKAlC⫡-HvM#2A4n2~?UD@^+)Zg٧t+$kQ i.Xi:M8y_c|fnv1|oT?2~CYeXiֿU{EMqvv/ʱyYCb1aT-uoCk \>zUG Og\vOCF$j!Ej% c!6>>%{#e3o}ߕbsȰ4AɾX-qzwjWgop5TPp>u}E89wFдrGHDƌ@<ͻVkN!ooj)$N%7hYTi:d0s6fیfe%wPR" E -i[&j%{A1u̕p|3S=d^tv~7_.7z#/[$^g>5U?qęҗ:ؿR>c wCN'0UY‹A2)\^rW+9<$ _2Qy՜*iO둎r94\t 7IփKAќ{||&ny]z b:.e DŽ я^OGB&bAZ`?ɎBQ8*G$rT\ uhfƽ0^!c#*gA^N1pD!.kd&ZѤȾ @{sv2qT6(7;3DHJm`}Vuv ԭ1fƇ Uzq^^W{tGgsi(%fU)FLOg%סG2, ?>[n#P:$0И*ɀBfQ:\1+$/f!6=}/^RMGLrmDħ*K!8mDƷ 9U.o0:Dpg u{5=-+aяˊNnp"\587 o/255.*JJjƑn!*EI ю }b/_O~w՗#O%S1r/6k(O軒to\a|L{OX992@}w$E4hBo@/ [tw'ݾQ 1FUĐ6硉;ϽɉA8,g*ð:spGB8G!53vd7&sn_ *J Di5-@J\Q F^ͪņíQ'] .gVú x襟4m@ιb ?HJG'd|\jtJ2H~{ 6c^x#Ze˽@0izh~uM3ȡ | kydLX¨:p#GoYEڈzJ A]`}S}6KMM_Da,Ӟ㛝ivȺ֘ruI?㻜΍~fψ5tA$M`CZFRc`eD5ޏ VdWM |(Vh:aIybtV. 0X {Kl3/H\"ͦlXT n u(fԐS@Wr0xYhFW(`L)%%N.=h}YbbxO b FwBf6?S6cLtX*f2n6ybA4ZE*{iAoм2hn(,>=o~WO >(J6/]%H{SqS;xq.|f)#HAY.lӝ^<ᴜ#y?jP-?7qsYPa.G t\Q VX发b<|vRG_]h9Gt=l;>fAʚkj㻾"pĴN\`ܭ0<70:,QQ!4hϼLg"d(c%yx2coާcroɜώhMxKpseOJ59] -.5P#y2XHub%5śKnjcHEpՊCQVHk.DNɤ(ę I!*y]v*4?fJM:2IۣLpPA{縓dEF>Iy}crLշ7G͌%}wOqJҫFv f_vŀk4̆23)sChiZ>$)w&q5'"Q2)oInL*NKdM%UMߎ9Am}$Eh*6Av%pטsS?a\TK y=8~*`ε+fjoאж.&h.,7Ji 2&52ĦcD辎#酣WzSv.$ R[4mAzȖ%sq-׏QAʼ}{G]q l-WeJ r`̑!Zwqљ`) \auoڴO}%i_"؈ ݜJVLH{뾊%&;!q`*nE,3_Y;ٚ% Yj4Xy›AsF.%eEER]<Ӻ DQEKAQ9Np~iNǪ{ `9͑^̇}_ٗ+7D/`lRqmZv8DgD7k;CaRNd!dmQ>{*aM^2.ĖBLZ[o 0dӾe=FxB;CBc!*"kxë~nB.=v) <4I"7WQԎYk[v CН˙=kk?7ʡJ7dn_ J$.mt)`tPs" ~˓z'kL <}Lr}O*3'kN +92rFq ֶ7)g:ɭKUt*Ԙm JF&ybu +6op`f$^)E#*rXsW^]-qMl1cNo4㳃=Jd %Vc/8R.7K ߌ:zRolo2 ,'a u [χ˼aq{͞Tm~۰ߙ6wQtfVa!VB>ƴ_.AjF>?jvΑl\5L/]C0SJscfPyے|/8vFD0 D Lf]PwϥAENH@!4~8$"t_vDbjU9  G."'r"zmكs(}-\CFQA-0).AtYd;K0@5-չcBu2:$n^qkͨedjz%?Cj!e1̶{Ւm}q7k/p#RտcŊhu-S:tq<'knx.! LK+]JlO1qBuToJ_&D״ oC$2$}2;A :rVΔ\pqKm!5~Qj<%lWǣ:Wu_i] **veqì 26X^ls3Vo)InK}%]9*гgsc$bN!.}-uh\tHn`4ޓ٢rIw)9] :x2gUӵ5*7~Ob` T˓b#upHlp s]}v ,#t4BckcqQZ~su߹Z0\!bJ/ԏlߟ/FF_=Ue ɸWAj 4jX?aQt tCC8JPMӏ~3q n#8r`ض(I 88|yN;w|v!KS>^5nnу6 "m21ѧiFK%@[]OdΏWUJ}@9'pA bn:@X*x~`#AޢFrDaV*{'E *wLMVWxV B6ZO14E;e;:ԑirfES'׿Ydχ5b΅?]Q+!,L!+6ְ@LR w斣Z92+Y8=AГ*).W $ϟV.c3Mﲉ@%e ma4gǮJNobmF];pF⫝̸J@cn-rx_&?xa'.E.~( zμ-2[ E!Ն2Sm,2j,h p\l^Z䨡->M;qʁ !>R79 `\r,|]8;Iڬ赱#IWKgt GEUH? ?Nh#?5iQm|G_)LdrCyi +Ipvf2v~,_#kU$w8 M=nQ-5= GHb~"/XTO[E%z.lJ9l}Kػ9067*Lu:16Eb]uBH?m9] o;-43Wi'.fG4sL5vgmc4? P]rCp[yTƒ\%~{ΉaHu0CW5]ϕɡp(mW T񶺵PI|l<׏Syr?I '@pq9Yh$ps ~ʮ DTkBsqƔZA]bJQDLF`22qLSAۆo- =+h-9PmP!DtTw,طϊT.QA(2KRs)<吔+ ,nFEʄ38]K+up{7``mA)-5j$V?Sם:X}n86P+) U!<]=98r3e5>d'<6C'1 Y2:*A|ܢ_ғl& ui?F̭BYˀ"b|4Ҋ "_lHoz|kko %¶wBuZ ^UGifNg $ԻČyvDM_ݔ u 'i0(NU 4d)EfO57eWf}Q*)o] l2`8;uXT[‚K2нcd<8Yk2-=şW.W㖗^[[h`qhu߁xymN-q#ɭ>Er!y"MXw]qySʹ~4]jOs E*pOPt㫜b{7o_pdd̂/o~A-AJ; Lܣ !]271Cw3C: Gˡx}2@b{w^ɫ |#rB(oYhz*Xze& "Ybs\t4Aڢi(_&)Ât)vJ k] .%2˜ݛq,7w{ -W+KB@z&ℬqcjB/[aH$c]z(~7ɘHQ%DSy$`&iQ e"/j*9ju[1{Eҽ})WCU~;Y-J3=#t_Ux 4PDt/o]v]w?q+A:zP)3*ʹ?p#9P2H]5ol-s`V;4mBKĆ%m=˷uUQqu\-d7.&_@r*)[ng=RCfī7$C~!y\muT0rV]u a&XAjB"o_h^N3M7sJS͵8?LaLN {>7O"Ži#_vߓn,oEleKQvJºbLjr%\``ax ɐuѶi*"N"Hnm7$ڔ<2I%e4mPFBkS 3PRݒhx_|^ʌ,:u?-"댛H ? Zdl`Ei|׽8k_zF.+;1{-AHC@w-tͨUHy@%폣-c*2گoJyÂ(ǯánoʵٻ+]3ŗx5Ӑms>2Xt?XfKzf 㳋cA9eLOPB-h;8ww9pF) Kx$-ze= -k~:C~ʼnZhpyFuwYHYvS-lݎ6Grۃs31kbuo9zLY%8'ف^~E>hA.?=7: ن"y@."{9z *=r]חɚY}f10gz 'D6O^Rnxi*c\ZP!Oh'n5|BF(Oe䟚"g'婡E(V\3!f=1_5 1?CEWZ&#ngG!l9:KXrM긘A_Aʉ6 C O'V.߈%iӖO 21Pѝf# k/HO}nk) īy&RN^lD4ϻ -2DT{C) RNj]ͨ.8KZ W'a2$^g<>=BRTn+?rɉ(Q=ct(t!n?E[䆌1] lT7u+0 *@1 OgmNA"?zoJmFxM ϳ`s?eu8@NL # I/k{3\Ʒ4!O0OC{D12T%WS`rc CenH+ up=}tP͘;jwm ; `7RDXpXR-z`ˢ^h5Sp-y aQHXgl&jt1'E鸂N_̀H‚ uJ:šU)N!mX*a,MfQö}7Rfա`6PR"- y:^Q (Sνij@[ɯ k0$O`nmMF ڈihAi:}eqEAg6%k;ǗnEZÛ6Po&yLhg(տfT<>1ynf𿹹,t0ZSN!O!9K1X~e{A nwWn73.G@S]dmqT>޹* eg*ZTg@4>=JDY"$F7 BnAG=`M!TD)ܵzI 2 cޭ#D_w~mK/y 尔-SEeӹn6n\( VDŽ;i&;}jͭ2P6FlNz. B`I([ĮwE7vPKS ShcCt>Lle|ɤl0)!,HLm 4ɗ:0 *Fb>H5ڥ(y" 蟚^mne<bBdQR.ayTFe$!B ewPIٛʑP4ix7HeźǏkG{~Cd#ZDUKD+ t%)(mG'MYl*uzu.ۃmL@cl:_9]X' .߲wAt;-;B=H82~O6v*b<}D+ ' bmi !PR),AY)B A\HklPŕ`FJ58iryoU%ۖA;'(9([8u]_RȓۋYdGDyVsEj EAc:K)=#=kFh00Ǽ\yi HpF-qusfb!eWlj(;D A3 V,?'N9Y(_fO3&*#|]"Q-U,X͗'P}L$QBvd-֍ԩZnBY؍`) ⭩ŏĀٱ)"sj:3t;B(b5i.il˭2`zĂ?@6^|kL`ѣ NM)h{fQ6_0lƔѧ!]/Bܰ~cr#>ΦVpvH<*L mUS*8v_\dȜ'k%mǵJ>7&pV%|7u<&(ef D5gݺcțAj:H"5ɽjbE&ToM=5 a%IMQBNg{3{=pxN=A}T TeSkHpz٦u(<0g~Sb I{,F*wqE,'#3 :ɟ{kiN~%c"NorMxֈlXÑu݊OܧP˭CM!^رOvOP C^[98s|{٨=ǔ^uH)-arG 䡴}wߟ< hlk] /p:6$d ZƥGaO:끠Il7`mլIs3Ŭ9 * Ft&.Ȩ1E~JR>h7#7Y`݃Yq^g4<:콎.p~I;G6~愈1~ .VkZGϡ,h=rDB-OJo^ ;O!I=F8k]a7Dh[oUѹбUc3 nTwi٦' LO3 lʙ:= <%Hї3*EXe4a}M՘(˝R#!vT%G F^QlIg!4nVg̢C/Prx熰T  {"xO6N_l,K6"Ґ CEG.mpckr^T؟ rkS?;üqwwH6hdn#za'Aʎs[;C@`07 z->"ISɈ\E~ =5 ֳz74#/^r7,!.r**"b꿞 T35:,DC)Y1VTGh&a?äZ5Q5olK aJ ?P$rȜbF5w^).K?Ӷu0K1=)T_f(Xb &'r}TgT7T>JQW"/f^bR׬ݞ6< \7%HbBw%j*Ull0U !x9cvxKJ| 3dTYЧ fwwދ/#~IFD KS\=wwyeaU .ot' e_F1i!E8ϴ=(26,=&{0)JCM'3Ǽ0ZDn|kC" nM򲔊ی/{C?lrАTR>LAEdjmvaP/0;JЅ.߳y (yc{x&VU@ 9bF{*anwȾ-}V2JW>B>ʴ/=P+))\|2Ox!l`UR)w 79C3K]2ÉV{+#/^k5(rh N>~yѲLzNIfQ`0IaOkz_D]mն1 I$~&ݓPR K6,33AoW H܃s| x gn0l~:l~Q_)-R"hȳB]j}9`t'S u'W'~hxDS6/VT6ѕHJz'G e}&Ah! d> Øй3oX䈈$]x&-X9v;_>B _#{߫ؽ~kLb_:)F39nb$g/-zQQ4^P4swnflҡ)_2Ak硢]^o@~c0XQB9%(:bF9n\/a㿙>6Rlۢw|hJdhVslq̒m,cM-P0zjcOT8Ш\d-81X5o%j7mmuɺ:( 4Xpq%o􇸸*Gv!8靈2^'$/2JBZp7ڥv<~Ce$?VΧ-DxW \p9'$#H sNUz?i82!{1~s)|;lzPO5 `w:AG}s*u }^%׋iS@V.? yEB a&NT?R-Tԉx? NRͨj3GLe쀁#sTDp%[e0#cЩsɊ ND_-j7?ESb,g:˨Xۄ>ޓ=rFԿ>`OH:VOd̯qa!H$ G&d :ϝk-]NoV;ud}šm T)rdt1?\:**3 nU8LP9q9%*ÇBguX*F7A\W3ʍP:.'(ju6z8`3͑Q8%lׂ/ mllmdGwY}"؂mN`-5酒h?nfgE;.9hx?Mm7E6&73RBMVѲ)r|+3v\IrWRȘV(r4^t ˝n"X?e(HOD$7t Dv͛qe&M"~L&nҟS,ޚmAJDdvU0}TB* Q%n8lҸPmI?=Ņ羥@_rqd6,ŀ3ndt{zy6`]+0XrplGgW}T'4=\+5gEJq)nJϋaW"yb>OUu,Gf2Q~߸( PZ`\oine2? HuÂ<e AoG-:aqɝs3F]05L؆鄪j+?g(~nf˿eZvU vT@X2< ?NSl\pY$ݍW@na.'<}j+DIi}PԦB53 {&U _3`77l)er8Ԯ^h6N@ _[~&@]mLJP1{Y;yʹO 3an'{mBlAի]`AA槃4Ijl8ő[* Zxd-EA`дccn2((iߟWE kl[x&p1t1Ceگ';-%]?ЈEe\Rq#H$͟*I +trVfD6<ucY\BȯGV"%޼ thϿXla8Ce,.N!_+ӑy7]6f?ijIS59n#@Jd('oڄw$?QoeeIς ]NOoq 4)²sЀb,>z@$X9 2P )uXeфl?C .Z vR>eUwҜ5ETNo,4j?nxh5I\=@A]wYh?R[/"t}ׅ&GIi3ξRYxZsz8% gBLޘBI HA PIf= pMDBT;l։=UUg}+>cV|?\ ړ.@/Y8bxf%ݚzWNسr<{}.g_| DHtK'Te3 v>]tc|XhZ )Sm1NI~D>[bc JjV3>tp⇥So].NY)j6}P)︚}]ݐABV/>j.% YәB.`- tQF$/pvf$U%ŜKKeC^%Vj D8O)gGC):3u-z@$#|q/+(\՗2򘻰L3?/jWvFA\ tYa^u s[nvO5YQtv7bݰڿ&Vty$ILӵɎl@ˮjpW!-dvGZ,TL6_Ճ|8D5t+EN0f27f?AU zF !kU.RK9M:zQPsVX$د4G9 qyɲeXҢC<5}z !&0uM@x3DHi*iؙv;,oOu5:A$Y"T% pV`(]JIH+\ԩߡ 08]3)HnQW]7beA2iqܐ[NFvmZW>[(:bD/fQPFY&c k/V:.,9L&ѽ+Jw&ZjE^Zs|σR찏] n%V H*U?siףucY?Jս> ;,UvG''PiJyaWtF"*4~M&7mGɁ=o= Y f*^&.jL,3cc۫zvRymC~* &j,^o1'Bdž9WM!YhM83a3eD2&|=R䱛`5@ /2a1ʮy1JPn򇐀ah3LP]@)> 3i/nZ;k ,LSz6J,P)^rJ=p9 wn? G&ްQ9# Ί𷥺 E5GYl0ԥ (V L FpK1框/6ɴX8OlhEA\L%X$RjAH}sA })YGHb˹^`[DJt"'n\ޗ oM5D"A??KV}r^?׺3U[@]o^35cM#&׾eB^ w@r{/6V7yTF.$fcIlP5!7c.9j&aGRpդM>6e<ԭ,֝aːOI]BUF.bWQrl-0ia7\t0ă'2g :ߢ9uӗckT?]uMx G9E(syy7(EnΌ ({v13p(o:xٹQs:cg/^F0e\?Bt:{ ^ the8TEҖٴ kX:&^Lz`E@` WO!G ;+2-oLl#ui6-jsjnrX=;ouZ,D]*AA*RiӒ-ȼTkV%E|U Vl톶[!!{,BGo1u6wx?lZ p f#sij>Nj 7*>.T U4aQ!P!zK`hIvz^#IC)(k%#4[.um++y~, 9Zg#r d-96zlA Βc͸'7o'0)c0fN l%.mmӝ5>]7K&Dt1Rh/E-O1k#OS ZKz$1Vl!eN7֤vRg *3P!Pb%Dn'`%,IE˸f߾ HT)[nexYTT[CEfb9gڟaSt#~TC7S2 '55)Q"WXvb+҂Hٹ@o\+zLkItᕖ4[Cp>-ߟw,z' f<ɚن%ʀx ¾^zW3"!6D< _`lW1.U "?4ypG 8Wk*Ńo~276/DfbMCX9  {wVi_ͥǖv*q9#_PQMu%w},Ӯuu|U0O.GoD +*ժ@P*.5 hcWhs< P2ɠyoCˁP?oB%(3%08o4.bO۳?e%-ңگ]6WfkNp= sqȷm~yi%r§m/Ҧ{.b9Nj- fV_A|,9T^^ 3Ύq`) y/|:>= Prvu; y-0q-ѽi'̠xeC13l/f*]t va(FHN+-㗭aOԴ3#I*!br!pd7Ij*I ɿk @ /]"IRnlrmO%k&G`k+#jJB0-O`$?T8?o/ ^@ ̨`| +SYrt/=}>ȃMJ>N9ћLU`rKNαbƃ-7%>;ǰcfZ5z",*#K7OھEh<+ű%A=Gw#Np+[^kEZTطmG,V˼&9Ԑ5UB? #7CTY΋3\'2Tv5DbǹY 9UhR$,4i]3Ak NC;00y)D P?!AVi#fhU`<)8DŽp8NU|:qx "?+k (<_"(qE$+{v9-_1EnaEnBO׾]썻wCR5TQRl_KMڣq+<+[!$]3v7h{٭!\yֽ6*o8 aToT=+wwê\ Bv=( 3_w4XH?&&:*ڊ T.NZ7j%"9ͩ".8k[6c3&$ #w&*gxU18#d|YLkh2A;] /`}Bu5 :7}S, 1[|Usyq`]V`g 68<NΉ5 xىeb&N Wk^ޜZ ug9. GgO#@I[/Tca )" eerzcycQY@617S|Q'ws #a՝7 SU~3 +6Hπo)fRa5E',p#C @:Apwk1[жvǎ&j$ 2 RP\Wb^gGdlxa1ױMVɣ)'Zh*<Ⲹ= ]|~h'؎˗f6AOrI]׾GGBs"Zubet%M,72{ C̲1Z~ s5~Xfؿg@y.ڰΫIq\Lx+oc˧HHme' ~>\&r >b:[ÑDwQ>nL $U+{f3=DuzOzz ~WVsbyYݢ<2 SF{Ĝ^;"[83}݈hPwnt?Cgf({ɘ 9liHaLIt>wU"VI/:)>Z3*#g;y1R^wZI. E I<K{Chbt-jn_i1 O$Ztٔ M)4&n==((٥DTDrpv.rq[Xtu{~+gODϛ=Ҍ#lwN1# n'H"(շQ"c0LvGOob!@I>wG?y B( .ȓ)ab9}>g(#ƴʯԝO+[-33Ap Pq l='awNP"%NqM/;t7;bcdDݾ0M};e~UqPO6R4\}Cn3n=Ծnv+4ljg<Ħ|[ҎXn'¨ZIB(i>AF14drŜm'9a>8h@rcH0F^Gˍ9q=ƖG8kfO*RNsF;jagc G*e( $"=>'$K\!MC*߶U;2/'f"?hAS1'aNfQyc \mew}w|2bG W+1-d+4cH|0K>Ȅ<jjU,N@?/p>*|XR^0V=}AG u,gYH /}&+Т>R=Dȕ:;ƻ8+YHLWHd&D%`6=agzdfkrHe`vu3G7q"VqJ-6 2AUt~\|L i ZOK .}~pBw&'%@z7S ]'2߂oyE=,MtB}bV*|LxlB/o EE肝OU8>F mc!_2&,Эqatf}JTV< Y$E qSW'-LKZAVh}E3C\)nڹ>V@scpu@r J5n{/{MO>tu%n ɗ5wȽ>[ p8HPXRvc4BeEBfthQРz:-Qț9خ.n a}DRaHςn%)HTB6~sT3>J0X <~p$M3M:*&$zI`[i@Jx AFjgႄD5h aKu,J^.oTBl$)e T pɆf]:nۮw7ndi'.CDwp cXZ^Wm}pf!9۟4'@Jqom(N/WrFk ۲NHD | ϐMMY+]u(Hϭ09賅ue]4s\ѹ(-܃){tc+S"dceLI7"[k]aCvnP&<ҧ7Cw8,!EӨ"Hp}) x́u~҆dw=?w #N{nB JK! ]y`hkkeE's87oj~禞3o_hi!fayve+0AX.U`C[kuHԿe>bL bp4 qgaz3c!l>ZtK bg/XzdΙǂ\ѴJW(/cO1w"wF6uL偋@â_|[i&GFכxsJ2q.\ɖ&O3J?_0i؎57 !,llW5T; -s( <<|- _5g-4z(Q9wLؾ 'o&Y#u[-|ŽYcD*3@r%tdž7 $!YGMGǘՀ@1Ip4f:qrSR8ydt᭤6\I56}Bp:GTT˧vCGJ vth~BYn8.<5`)%)+&v|BLY{4~;,*Y A~5z+=y>W iN9f_k: ƬVEŃ)]֓"?SΟ~OH"*JDeSfCn>?#gshI}Qhs> 6 I9ͥb-/-2^΂UFj eTmQڏ FD G/loY~="_+t|Qy-O?LEYcCrJFPD$}~qGIzHBﴰa0XODII nC(Zi_Y4HB3%i]6S~4ߦſ]c1t$D.W_; AtvK<["Y=Àby= ;Fg@\I}prOwxXcr> Bɤ/A,F-~<qp=>Jק˓|vxd{Fka)obt= uw %;YA3_¬tGҫ}d@AI _=jhCa_[a}>7b&Q#ѽ03 lmD/=j`HpDB=8seJ9]U,LGeNe=}n/9=R-o(j )Iԝpn1*يt}'dBnB 2֎!Pķ@m"Qλ5\Y zΦT& 8Qռ(+BCEiɉj]d_YnVK#EeEm45 ]L8Pf,RZE08B!kw(sHj4i>KO 1/*ˁap)]4Jc+4.COyopI$i '>U ~Թઘf|B8G;~lkI LkP{yB?_aqALB"BSʺ췅exqCr`{Mx㼄D*{>4ҜUr|5b ߭O/tp+%ioA;P<͐c.>o>b"J+$ƳWX~cv)+[[Z;5Z08 TMw-ЭN_;Q'e &oJZŴu m%mc+[͟yރ7\s]~ZV.M\R"9+խO%q{< C0w(AVJuiVcZuY.Td] jwE;›dqbT}s\s&L@^w}$ \ -9)}R8-+&d^rƱo+b>2RI7bnՈB؎sHAؽKs@3|G $YNf!w΁t}htȪtHk ғѹn&'e]"@WĽړΩK#3?{h, MnvF5)?5gs}LյD}4SxuFO&JBTbg;1?.GwWLjg GP6>5aL鏎&(!-a.͟Kpt!S (H S͢O2eKɹE}HH)(6IڼI9:hf.rn7[ {³>;ZnSӿU#nt9翓-ya4tA|:Җ,;qkQ;nPΏ3=8NG2)x콤Sk奖J= rYms=5*YY;hibkO'56^7tRGIhb1PG7%2ě䆐Y}W~C:Fmwz3߹a0}ǨWx:f:tu%5Z=}B.B 0@f\rdE);%v_!du/@,hD,FPeʛDR6t}#&R Öćo`=Ŧ $5~Uo]Tzbe(P@Oz_'Y @ (Q;?yHU#p=X1L:H E#:n;uBqaj^9 GŰ &ee2QA.e*o&X68bDK&;￟1 zQ&iO\y+!v0N zw"uےlYOP._ O:oO6VZ,"b@ Ny9z_F8<~:O*f|]:d{~/EEq#DX0F>^o㶦I)Lr3e?.Z)g|Ԩ ɘg)|О<6+B5"x')o/>,KcY^ EiY*@3 ƯPF/!AsGtC-">k9Nk8uHii~TKf.{/UNF|[L5}^MB^O7O!Hx9= H5) Fr)V X& C?蜕=h޴-j.{O˲ @kQ$5Ą=pㄎ &yg3e2tsQ` Q}Í-tY%{ !9oXUfHČSUZA-e*UBUP.*YpUfBw?8@KCLU갣A T!&tPv!$6u C(W6@c].`?V~IHCuUh.~(5̗X ݃2 3 (CPgq3fo&y~>LXUչ+:w-<ǾU̘>.tSz3SZIlb| R= ߣqFw/J2o`І(!o?j!th ~UaN1[<Tn~]"e/(1d8%>/Eγ]|{3sw 'v/7XS}EHw~ ]h]0 4YX0ѩ8y,k;Z1 5ўI#Pܺ KaЌ0LTD{r;q:qcl1S,`,i4|>ހ-gg~YpUY?Fj3_zXǶ,W\<Z@[GmiyOj+eӡ 8SyvZ37!Uһs9Ul[~&?B'ioYu73ʭtavå/"#a=%B"zBXhL@'wAġ= D>x'U$Q_{iZӨw_#_㯐9ވ$]L8`E"2S~ӟO8)L&(uVnjTMna* i |%z<+B/pLDBԔ{i[p΍ܢOO5/f{rӪ1BQ{&aѕ QuIٙAFH$k%a\D lVG&ʻIMFάà]q J (w5dob=|j9 iŮn_Wu\FJEx@! D~R"*#ٹE?׃0QG <9!n4*kqM`lPl{hhHxW8nVk%)^sc@-bj_\L Fī]#LJF;6䠃sf(4:h=VIy^s}YɔYЖ5@*o'S'6 0{CS%dt3FzMCҙpoD+𚿆4jez!.eMMZrIYon?g\ ^}ju^YhUGٮJaxӺ̔Aqt ZyVJjap-W1Ezy?6< "nDљ =l䑗v({M}]1A'0&NTѺ@mo7Y bgȰ%1{_u3j+p2ODO 9p=oS cK4lG8_,2#= Qsc9}^x}-qGgcf>ȭHwU_MbYbð髻-WdPg&Py/~zh%z(=@@%ilvmXx RCޑFJ~Agat<9>{fn87yȶ,3h랃~ʸA2aQzj.]#pj҉fdcΗ#ox9>/!&qi Hp~u u St2Yu%*W@] Zv[:4zN*qԍ!Kuu/_yI")눓z@ {&U&In] }N*:l pԌH2< sX=pA0P⧎w^+"0$cp5= ]곭\%5@C\ؙȗxu,Hɜ޽.I)cc7Ը_NRkT.h L3F ]ғ'UěEt@̆՝irRsAݳ[lO" C/L<8sB/ʒ)IB%/ `X-J'D#Qx :VRYBSA?˃w\Vc1Uwq~h4L<͖<[ހBxDvǃA.Z dFQFfjcǾ(ct*TCE}L ~eb v7fN>9@[b(9E,!G>j bCUXѽh.V[ө}I͎bE{mlo@u/1P˷t]r4g]Zs Oﻺ:X$!d>QkV w{>~ƏRf NO0kGLspO$r8sfY-R8.񇼫D {Ֆ 9PZ!$}_l<r/(;ϯ LYۙ7y8hM#4݋%} RZљg[OP$F_ӢMv^pBFl-yӏ$)C#,R-B5\kQgs1d ֥ffsfI6r5n^#6rirRpТom((v oUIGјd-6Wv )QƩ~/)io) ^=X#$}jЙ(_a _ 8G !Ӽ'NmOyYr7#^Yk4>=y!eցXw$$9H>qe%bZ Z$oۘXf\İ‚HM@̟AGh1wly/${2m9lw .)rrĜȳDz$vG),-)4%{G]ʐ'_DDn+jGGV}^v6I83b$x:P.ކ6brW"gES;cԟ@C&U:V|5dǿ}1|S{%J+bqث`rVL6x}?fޅrDʉ=ZTEEcTS 4HRr>>?5Y L؏qE"VUPWU񧩖)JTDsEnŖ`u(6#yp?%7F7rӮ_*ZzOMeت3S…H"#a ȏ=ζ^_9:[6ى^Q +?i\Y>Ԏ+u01!{жt%r?lzwZDŽ=I6N2BC2nube# Uǰ= 6O䩾YIqzĭ K5"} T#I̙Ih'nV%jrV]$0vjo/\k*'Sxɫ H\V9dU:NlFŐ :+Z [r]eo@Rk&P%bc*TT5XP[IB y +p&:{)@Z /Ƿ%|/ЋbZ#>+7/%s:zdnpe5VmqZ[ܗQ#cZ5]OY S8BJEu+2ʼyT *N NI=}{dA0m=`41v(ȭzoJEeW8MEښ!/;~YFOmCġJ ) D򜻴zV-yKA:uY2WB#PՖQ}NR7/(ĭmSVft:_[m+&r) u607ɅDK{G4y?M \0v!qh|`R @~/k&ע e &c䲍F,?'?a$jQZaN+ٹl!`Ѫgh&шQh,"O DsEJ::gXYѤ`廙XyVJ!y3X;HMDnMK5&xjC5ts&m˼d^~J%$tnDmbͳiB*9=&l@[eaOQcRu=ؔ i0C,gu1Dyx W+͕:RV'\*Ny@ea?"FMcNx=Z5/WRW Zu LPQ,sTK(Éniãx( :״{߲˰:Zu~BԭNE'fy8MhU68> p\(KE E16WYM&]d^zN҄84\wS_&-8~9j">N7fI cs>Om︇`B `U[0`;6CU" %D:7cf1}}$aNt+$򵔵ra20#ZQ10:V 1g7>I5h9MWCkqVd(< #|T]fgv39<^M3!Րf':aegRR qup"5fkda&AE@ўLҞV|IZ6dlU#]E b߷?Dq}JA}H~Oq- @n**V3[+N:!g!@Wg1?s282|5AXRa>%>Ul)>7/01pܖr^er FwW>DI>8' %# C>&i,k Z{&u qw%,6R2_p%ox.OZHompO*YwBGǪ!qA&ܰMȈAD YHUĬ;<_R9|Lҫ}H l-;b¯5U)tg"ӿœtwO4Z}AiP%Jm*ӗ' YeaAOS)ŏc)㠺bJ.].]a;L9^׿=wuk*'3VąMu(م,㯒4;0Sa^&= 9\[5!p*ʚS&^`c C?3wgj lm|_l@kbBKvUÌ|ػ͉1߳d'J Јv~l%[˙#={k cܼ܅n-^ 2a^c4ڂ~1Sf!0 wȞU1]C!qNBvdV'o/0:ȁ$->JTxT;P+N7DA,(?md1g]t|¨{y#vӵ.cih"ۼzӕPkߏƏ#=!wde VcT璡ӱ۲gsE`_X(3d4 DBJܰ £ioB0X=R#;#˒dIUwmQmgde} *>՛C8p]ӿ>| j5 L74c ApglrC~b):?t$mHMD~IslI#UvoIqjeBXA ?@+M8X+/ Nhӯh, Jڌޫs]I"tK[DOV`ܑHR36v+ς`C+tv9JDcق蚍&3 1 zpeֈ&5ek@Y6 ORg6Qȵo f 1iOFc?u->)(´I&,/n3,:5$pyA`K!$3vL.y8^aLaKT*=ɺNymsf>FǗØW`-;%C#ݤ#c۱akrD_c+ ܙ:yj,z#EL\mz~XJms)yRl,U<*6Ԭ!4|D(Mo˂v,,p[NkO8_"+]M㰼ݶ ;CqB8RLJD` 9}܅Wp>!lߞmH:+n k4rErw{=o{C#5ս?l]'ᩒ^5F,$EXݶ `f1[&N4?"3K.JG(>4:3B5~k,hE z770H荸r6 S3{[cd2rgL(3W([l ɕUQ'Fpfru2ߐ z)\qҵ?^眲0oj̅~,7U5A٤ %QK)v*N*-sx,1lj$.v㢶K#ϢֿCշ2x=|bo%v9go@|Ki.2A#eqj{.W_:3hɼ nߚ~W<8#jؼ<(1Uox|ݞZƁĕE rultWq[n_cT˚ Z2bI<$ Z;̋b߬oC]H l5X|xftL^D{^+@ˠF24=/-U{+HOC.$8`{ZT(dr7l^׎6z"tvU(/3A.OC efBm=|9FQzyZXi/#=<&G %' PBUUo*ĩ;by4!UQIsTt ͊-+?mPՑI^A y 4dxɑTZHhcςeNؑ . %MIOqOB}{Œ( 5A0țdȜRfr{a~ K! u$yP=vs$&Ӫz Z?҄04z0Bj/!1+rqݨ-n!ɺm},pjGIJS?2 [HO cGf4FJ.NZ[ALQ<<C~ݤVNdLmQogOl2[ ?;'yلjxKƀOƼ2U tx$A H Ѩ`FÓkE7/tSd}|8 X %?)KdJZ8Jy'3"j I,_,x8h-b5D.>׷W,vǎ@N)Yg>: wsacY"&Ŵb)nnT;&ূ-5ʌI58"Vrw1EUp7).נ7@n,[̋8Ҙm"\Ttu,dH X7Gxz*c-f#b(ä#ˡvw{b5Cqb}Ri\&l|nyKW?U$- L(#N0,҅5Td^ɳ!ǵa 'j VbV\WRy_X\j ў8R=Vf!@9Vms:OhA{7d^vm T=_rv CtHʧ xP L/!8ߔd@%70bqUW$gGԔߓjGffӤz*SӖG4,Ē$2ۮP}+E$l\GHyHʽ6ڟT{dSʁdm/3&j3tG">n:$}RYh=_1YjZ }{BҝŔ!!if}K(ňIfZ4B;`*3\w~.;Ӝ1Cymc;kU|?:+ütUeX#Zv4C/fz~2xbOѶ0^v;Z@f-"BRkszz\ipv̗WEhkq ؏/Ƶ8q{<pa%>ffj_B_s'j_+6m"33yn* Wľ/j6{{٤{; QÀUܚ̙PqlJ".Wk{+VKJ +/w驝)^#{{mt]i [oeZ!vIV_[HOԆW?/)Ӿ2u XI]yӸl#M 8ӥ{Gƥ߂O4J*PsLvm@r$c~8*Coqn H{%SȎќo)DK2vJ7<Erk#9a's ^eAkoeaJT]/OH(%1T&nPSfLubn-{pWtfD̝롤hh5ĔT[n2 ʍ2sC?vɔ`[dUfv/kMBAQ\=.Awo g$i#eJ2 ?q_]%gAhUk`Nݜӱeg8Z]$ڙ쵱5cF8ɱ߿1"P]yU 98W7ˇ}\D%vȠU\h ";?]Kl_jz'o2'+uZȃ\j#pl< Yz5JGQTU0Y|9mН9^eoUܣSs)\s }Oo}pqFmjT⧬K# >XH{nZL* ν0Y)/ʤ Eobc:UU_!=BM0HCQa5% h~}pRG^,G]%w¹k5{'ŅF _&,Kњ\T TkM 3{ǥgs: dJKOr-"%;'YeqIY j8ErGgjӵvV1Y0d58>-L N*<$0T`NPd/sG~(qR2P~K N2CO?I;@4 }mhUQC1*j"uy51slkAP[c ȐA܌I=" 0LB asP~qFXBxBqjo W -R,ATFEi=颷D#W7q'ofuWr1Pp 2 U]WvETu3noa }Y<;^xl=)ķtPNL3yEj9m>xܑ 4oJP뻥]ۀ7B_.)īŅ!+':H}U:J*,y{L)t xcw}05k Պ`#Ep-?te|,7l}A/'C#<bNq(Y}2~@wR Cǭ-I IwWVv-h0E81ò/n&+O׃boU>(aJE=O),֠KG"QpThiHiSМ2.JqXPǶKQߑVj $#pnVsQ;>Ðsхxӏ̷O pOJG)<-/#us^m3@,Jd&uG=hi|pJ'@ _wvASfĮS=+'^E?y$lHFTlOe?oR=]Ea9ӹ.KX?{@\KW7ROлVPpjH׍r!XMFԢvA5snQ <Ns=)uDQɋF iMs>sFW'gzqc2d. o02fgI`2r8f@\d=:6Q2*Cݝ @ǔhKG"l*>whwMӧ卟7A )禑[-Bwz.Z(ANϨtBSNL3`d+`_gQXLDC_SsVhݷo:%./JYe?skz׏u%eH8`N8ک^̀5*rJZdjrg޵xtY^P ܩ礮2֧ydN!P]oTUCFR`O/>ש۴ߐ a񜬑:{jU8Uw}vw}zXpl ,{ܧY2[p~cl]v!30}|2D''FMLbjdq[ldqHÌ1G?.s \Q%:V _`n:PWf%+Rhʬ:)*D,#1xt`c"ЯBwƶ#2H҃q=d>9=c[MwK)/q*A6jڙ%xOTZTs)?Iehuȶ e&@,Gf[I * ,FŸHB'\|9lP[>jx^ϥqf3( :P#*)ՀƳ:>R!HY4?lZϡ̏(IU<8,匌=cwxr1MRݍ{J< N Nv;'ͨ;f)j])];#)AG9*܆#]KIk.z^ۘ_}RKMJXEgX'^]&bQ+m'j{d&@GwDTdg ]fkKм8KMÉ{ K\zF&쇐H_20r51>jA~_oO{oM?~ѓ#AQppb0 ҶpL-82XS)_yy&M\p_sRD q[,7) db 0s>nZRRԇm6VԹ u`g:ivNq:Iqs~\VJQ׿XO¹Y[lX-ϢNh=ZaG[EMWXh-%8D6V P%E%uN aO!/%柶%Uxjo$B [QNZud|ݠw#ZKuϨm|aB$|儔p?~^{4UFu7"*gٽ6~ˮşb*58ٟi 5/rr8y~ Kxˏ[udVpO1A,}j'nL_7D_:(1qx &~hl6*T,)c*GKp=K$Ʃi:V0?\{?1#k"yH>IĿy3ϜԀbZ$>ND黹X%$ 1~d(땄/' lk3o+! F|scG. :ۜL߱:PKB(u3r!rȕ`=E{ж+&&]9.BR-S|ϧ^lMzOGfA "Y Ү2%0ȹ‡:H>,g.yj`_}wjkfT"6AzBd5!Nio_LZEW\@>(z eGkD zfvb#cLL {JUsc:n8Yeq*v5ȭM2ΗdFHڒNݸ&el/ݔ|'LP|XO@vicy<5@3G",[k<C?xSR9^r!:Em'DwHGݰ6{,Ū#̬&rg( (FgRa9Ywn;Ƶ?$|:+d^ ?jZ5^z&٣` v_gx6Ä?*y]) G}mcN/ {?2KK`Phba X}6d ZƌLy ۢOZ.ٽ;GCyYF&7+Xw92/"TG24}6iP =h[enJJu,0-c-a\;›X};P氕łxJLlAwWWm)꽱ȂpW^py 6~.] V=780%'~fPhL& a:g8숵bUNC@O(==>qƱ8q*圍eA۠L`u*ZColO8.`' {3(9[e/i}GVYu:]0 A s bN&F@ neH4|{TxFE酷Avງ1@,H)S.9k'S== :/mXx pB+."4dk!i_JjK=G"(I{d?4@MmOiO>ބfvi?3gi-_ڛZß.M?:̕az"ńo>#E}XbI6jR[,R'kUfv\~41`ԉ\Ed"g70cE| Y =") ; G֪<*3x5]˟l4w ,[H[l'MphT-D#M35lª x$&,wL$4R" 6-,3cpQ [V(ϊ{դuԛu%۞ҽ;"_OjeV˞ B'urWFHfxA_s&  A7iVaNu}$=Ap˕T8Yϡ'F)愰iEx5f|cl(zv;wqX|ⲵW> 6jӮ1ZJ!ռ5ʢUl#@k :b1vOuC'4B]!3b iKFyd&F ` W$ E7xxX;U< x(eB0JK:#:3pfr)ȿKlmT)7Jݻ &">Y^ŪF$F6rƕ zbd,$,^6dTa-dNi{c -N$xsn2AXh{'B N`W`'^h)\*YaY d#=7;8a?rاE쪝e!y rq!/ t ZLEvG/!iaV⹳@z1hW.'< } 3B{%ؖYm}+dLNoϴҔ&}o&QJs^sw幆^<c2shOLFHfɮVo3{s a][!-Cq|w`ső%dm6|4п@8':|c ]43)7H9)ǒ(ڇ Gi$(wgC=&@'q"=|Сպu}57"}=*zX_ 7n;#l+Tu9 |_=<,0*aH_<skY2GKPeO*24!.3֣Vcgj_,1Eᚾ Z*L^A%^!7_eTؗ5^Vpˆ OgtjYj!wmwnDo/,%PL:rъAܩ?ª9~2a.VAOU73ԉpq ircI se+N1/3r8`/>}~^B2O47"yxH*UIE5jl Fo]onhTK7=j ߲ڽn<mi4CǥZ?XGU >5ߏkD~6EMQP> Ŵ8@N]0V+++9 w E,;ۢ5XTn=rR,8ɯOغ/b59kxVz4 {F%|dOA^:C}Q` }v_HKwQ0>+w5sX$jC#_U Ue3 NԫBN V wXm&' CGFQ"ǖu#~ɯBP'Ku;~DXq kc,eXM8y2߮ g -&mԈ+!4,bmŴB" i?8}Z%Ţ"] ^Zj6~*;+%yk1Vp)Og;J_7k{ '>_OP޽I6 Y>lUXJ%0Ֆ EL''5h]y4T&q֘ LS͛M/z gբGg{ ۜQr7#SA *% HK1(֑OCM^V}v+8@k cBt*>K< X.Uj'di\W?jWωKV`&OEEMz_qwZ]ataڎ0?c)jw9t{ר2 > ƥ1p(QvOIrd>;I._8]fm2˃l۩0G1*Z9~yeA yے`NKgwT@{/L>F-p6xΌ7KZ^%M#=\ݴh1TgN6YT"ajQw]cfcwD5x.={l8205Zɏ&-(0Z;B@Jپ¾KL;+h {S#:Ev+KUAky< FT@C2=&p%~jSdx_^thr1`ӎ0a[A4~dǿ6#U* &mF0R%W[R%6#]}2,_o gms&?cP #; Of}R9ݼ⢲h[z'2b. CCWY..4c)pE?Dȧ$qJ<ն@=im>[si8 Ty[hfD j.( \o&UsB璙ӿ^>ޫ1W<88/sš*I8UI00QpǶN2MM4/#N E+XΫk* Dt#Lg*fxXxa(`9!Zͣi_x5&@S!84..h̀Ӻ㢹EE테w9h]W0#g۶8ʼnl&Cٵ47Cf#қVs,P#{ƾdB:\7ZG5'|6$t;(#E4HKL(8 lĶҐҹK6c:[e/=9.K v:|ѯj-Xjٷtr>Cj3́i#k33d} لp[S0SXDD?E+'BU1ġ8(cUȰBΑvX7N? J`i"Mb1Bc|ꅴSc`ֱV==ʎX8T%pl]5b|bN*L&WC؁Er[JNk?ẁ?a-$Lxb6H?7q&pk8R6zFE%ܵ1 `Ë(HKk>S؂6% $H䇡't<րOLYPW G;Rt BvC0q7}Ƙgr$=*Ʒ ȵX6Xz t!V); bs+8)Yɗ?fSPFXXFXj] h$uα vӋh' $Z'ǣa$nK6|?'<]T]^T6޺Ttj^*6G|@spd<n"x3暛ZBuT\}Ӏ;d6|vU'緆[wE86a!Rv\CO`gE?xO鸉a ;Y0}h@b7U<_U5]t!r3; V|![I8q 2w )ƌ6jZN&UG"|'1*"Kn`QyGҧEx_)UT +}B~]<ҭ0}BB 3.*7ۥ↑XApo>S! f),&hL; ion4mztnsԮd`U@PZ>matG\Qv( :&؄?/RjI$@&}HYbE9 ͡WkUOg׼ʠH~F41].q^]R0ʈfN6+LHV }#:}r$] Wqշf7 $r}^#ًÛ1b>/=,p% qgW={u'qov :Ց8:vj1_(~ZzTAZ(m b^r[{̍1aHf/FN;简y Fw>zQ|-U7ϧ׶[ 2|w$إ-C4l+PyTn(y5%!YRƎG-(96T; !&yQչFnX[+i3,BiڗB85zx3-^]=vF2sKpH9Ǖ%Lך9AjIG.-3Um[,XG\\1"^{Xa5kf-n !ےvzk)vU+Ƹ N`{q8_7,G;t݋ql*<4ԙ]kSgubSs㔕^h-y;;نU$@/ey |yCb܎D_FIlh}TMzzʃ hAC[ *IhL@ 5iF,n8™[|v#,ig\8`s³>,={"LfX!^xn$`!𯈣g]1Sqc|mQʶ/![eUӎo:)-)P(< @Y2l_Q{Rb.wyQ)ej!]w^g]¸ —XѢQ$88v!I2c[5.4u^c JQ+@pY>h#gU n41_->gǟ {l*k1G8JdSeErhF&[:QW]WZWIU-b1*Q3`>tvݾ sz4y<;UԞBeϙ{Оvg޲j[{ oM5 =yb8_#ë]iH|S_g!_Azrh'Գu0=PEE>fm μ(L2IKn-Ot8Ӻ-7-y "O#$Wm嶠γ A+ MmJhib!OY^pv]PLsjL%D CȓeX̴rj[}V0&hf$ wƅԐAtr@ ̹$H=y/z f_po'A4O_ \Z"mjȭܐl_YCu)|Wd`B~iԦo C`B^αfdjwg I\43]v\:*K]>驁TW jfm]KHFtۈj`4;.H1gVf.9hhQ AVK!?S6zfG60[:mѾ4o#q $M]CB^T:[7n2I &EͼБ/lhϰUh4v M$I3苯pjl$JH*G_tC7ju펥 BGwn?<{W3ҳ!6vΨb9&EA9rs]?r0qġmZqoL,dXܽIi@hkOPOgS`;3fo$IX (F`l0?G)*>q6}E/dikSaQ͗ȁwt\;XT\ е0$/ߴ:u#8z, ˈMt LCK~McBޖ#U';p}=!zRD~$vv3|2q;, 2?wNִ ,fC0{*^X4 coyqers(ӘcJCT}‘Hc, Pǥ{ܿ;4>!%q_ 5/4AVK!'PP~LLX0T-dOrn5_KHw/eeJ$륌0 |'hYtNșVlp.Fi3JfF96TO[s_pټO(FlAI>1=p 'U4 pZYPj7+7횯3뇒u972驄zu%$ - K QCc%a*v<~M'6iM!lqBuG5tSb-xFWbx ;-A*1Ɩ:j JLA8܉p 02i˸DWxݎx -5`ߤ!Y{C$b@)3f;ӼQJmʣ|N%N#r<8*r'Y #lhHD C~S LHzf YBDK`X,.[;t&Øq$0$69{:2^JTE~;:30< x5䊄}pdC}x4+dJ)ٕH i|ox|վ"B 0Uiѱ^<*Ur2A =(ܼ .xo(im\~,{ 75dߙGH1F UR2Z恍kJUSYDp =*4?wZ{RZSdϞi-5t@Dc#N2}*e\9g)"']m(뤈^fj _oE#q_ dv,+~FUxoivoD/!HfWCjm )ǒ#X'_}f!p,Kp#w;?0XzؓG n2Fd;p-lZw!)1QzO`%ߏR/mPQʬR"O& XK鐗RkֲpK,Avmpf5/?-G9.t"z/>t<_ dr_|9FPR pXJ{QTY !+deݚf[xe^W_749xhT芫pJtIy֗opPO8MU9%,%]2XOD;_D\oz!?ݔ1U2w(j(&KeEU#9o}ADQBN .Nk3o!_a~5R^;DF1So#܎!b"ӡ]Uv ?LBrVDpXHy:}D# N#  ŢvOo]zw7 `ބ9g cjVsawH裉k~{H0qܢb3B[U&& ól|ӉtLwUCq+g _F傼 ;l]2{wgU:Ѭvrsi\tU9fqGWLc!fvW&hT $Bkb+Pĸ|h"έh?S2Θ!o3o|@hggq1j郠&Ul~gQM ANh/`"k>S]n<[Rgiɧ\psX@t"HM3%b:e/.N:};Bo[>=+bh,w;aHpQMRl]N''1۝NI94bYIÙgڎDf3 %i:Hgw67 "ό^ *VPl].rw*F(ΔmkR6Pi)oyZ2 c(??rHtқc:{Q4CiG]?޿DV8F?nR.  (^2 }ּ>&ձS])ZK1-8pI=6Eƫ&׋s0©{jqjᆖ$r.Xbvʅ5 *!8sm|Sbrϳb= "w(8t\вwXggܻoJ U `A金J+8eɫҋ@jO{7vpvb[=~@vsNWl@5kS#M?C_xf=*?%V$TvW?os0v7c6kWMgf! DHPa}ޜp6kV*Qo2*4!Rw=\b8H{dDnUH1G>"#&K2E(;Ꭿ =&q"x7w!g%CLA cryd)[F[l;e#utfCif9:(= ktEVbv`ixy79uuB԰ɒXEKuA܃Jhap (3/]5X}$[wЃ(qh9AԾSc4ЩڥP ImpdVZR)_伊":gwjSCz,T%ɓ d2T^C7 SAl B*~FeTdlq@blYϭ `1iJzi YLz0nv m>)(a &ܙ7&0F">\o[z}Mz|W8o9ϴ<Z)|QU݃#[&8; "Fs.;JjH)j=XUtX~tlcH$PjG*ns[+}ܖ+.`&ay RBXu96nU,\_[Y"%Whø*r ~6P]VbiC=/ĺQh%MyV0q4[C/Fri!a 8 Z-B8/a!rLMI;;nZ =ie w߯d"B0CzցٕukUDi+bmi ^6x !zsT._fo$v4h02y7&r4^d(x˭pfq'%VٍQOA(ehbo$WupH1V-٨KbS"dR)O<[߲0zPJ^UhK2ה QI贐;]p=c-h]4oo3<4Cj̼<ȽdBu^ ?AAv HsbSǣZ$&E؛Ywcq0jץyj5OvuXQ!:.fG㒃>?#|8 ;{r!MH9B)(a&eJ䟷X-px([;%"z.N(QZG6v)D7@2"6r83E!mdہ0E&HJ6 ? I6m"~oyC!+]kpr !L &EG\k8i89iKQe`2S|9qey)d4PWwa鱾y<燰8"qSN{#tb7?P[ʽ/\0i C$ iг5&TI:T.y| nPay΋%u`,Kv}a*\b"ʼndXƥOHlKQ`c|krQWu%v#[_l\0HsX>HnY'w `!ͭw_ܠ`f}A^p?Iz#r]"ηџǞjn)1r܉s2U>๖ⰥoIK.no {#Dg+E| PřA;368:igi9t$I퐓݉0zK| {P9Q<v*Fo0ɔ pCDmf#OI :KemlRCl&+69D;ԣf˜1s{vC }eѺOGo{.S"huXJ-X`tP @ILA/Rx4ɓX[JCb VaIJ?nՇ! nrM$ZQY YƑ|S./D#X&Yc3ƢtEV. =X}{&a/ENBKSe+82<՘}7a1$_iud4M)..B 7c'1q̓3}i9z}&kTG\3$D#XS݃sw= ft&:bᴟu w. Wv IŐQ#sJrrWơ1(zL]* ZG`|*e'dhkEVh{zxݮ?sb.^-)\sHV&dH*0?G3BNخ;T0h,o:nmh';X} 7jTOPnu<$t<_6?[S!RR ȣB *KojшB)!#XŸ<1h%Pydq) z2)RQ)+y SL I<*的&T5qtġMbͨ{ayK$hl‘ضs?0_ˈ^aG&!<L9]Gy7WEK ȮqWjtOU{r#%0 7C#]r|/O{! ?")eZM_{^$[og9Q¦=KT{A YPIv$*P5 HZ4~ 3~8c湄 ϸ7@m:b>-j5b; q~]&W*l@#Ԃ.y\˻rC^_!4VjU2|,cMqb?czM:$[SF8%]3NU`^v$iN'snҽj"٦*L[Jx]Lŧ.Gs6n.bn.Pw3V j z۴01QڄQPdMa[=GC@(r'FwP9{"QӔn}곺dcl<5xGZVcO">e/U˂5Ofe+o-T|k(]&I80I߫䊭DJl%4rQ'G~!bZ_03}1 ךͺS7aٷx.NgizAQ)"0*>atQ7iJ^XT_*fOA%jU&r Xg* R)Kn*hJ%{7e,ҕ2ȅyB丸;!qF,!Ci@SdN?:j}0 Ҫ3 mO*&t6BJIku%!tu+E,'/2ERQWY+M=Zr\E:B4s Oj4.xӠdrh:x,5GYk+.p'wxbou~&1^=L-_'=N fLF?&6@LT뉉ă1Wd+ ժPQI_{"uL\`FUƢe1?o5&}.ڀhWr,EyE+-iHk- iȟ&!\!^ޖ,CGҡ3};89+Zy=!|TR]Z6%-bX}|Ygcvw#DBdXO[[T\m.׿*#x܌:9fU_w-6U0Br;OPގ ",uP\JW5WԼ[/U;yuרñQu$QnA( ' €>{AiVƢN%a8_Jy# 斸բ)B83)8q+Aq֭H;Ye$c~w=Ǥ@íq]ƮC3\:5'jc,`r膣]Ap¾q 0чk9xG$<|@|E^~cMHi.H|9Oµ5{h| ҃N?AS-4uo7 BP&n`=,+*!ZFK{ V+ScXB<o6׺MFA9s@'FR\ET觙rIkK8/MJ3za%@x˸I+! [fYYN%gf 'Tm,ł.`o#O`[d x!){ z;fBE/S`fe_R.V6ҿ:AUF<6`o=@xsOR*KVZQ}Ӂ00LsaR6"rzf NC@j~7x?CE@qxbM$Ǒ*uI, ZKC%l4̾dD0kAMW#Wl4R M/SecWN:q߀cٲ:)C=,GS&T8vX%Tn D,~m >I^jlf(P/#n]KɪF D. PyHqG؅Kiy(]Zmf U}+-%X}y\wpSDxAKw Ae $9>BC)[K%=4rh]6֫bTo|nz"*3UCbZ`!4Y3Y%FPІ,ꈂ/#ܓ6:^ho  bX A.QhSq;t׬ttZ<'DXWt"JTfRX-rbQa)sLmF ?(a339hXujȓrTOL:o ~\HjpXBԀۿLr;w OI^1Ҫ&h.:3]!io_ n%0H$ nЩf ;cTEL_%!ChSV7n8sMpave|"\kwLpJ%8Ѫc=^–;,AL.\!@x| rr#bOq3.V$O͞mp= 7#߾y4 8 G(eƌQ&x$2J{V,A8>^(paKviQ~*wAG0%S`>K| bKX7O^ o:@Rm|_ JE4PxF:Qpy%cM*`;XcXi؄u:2P3wqqz8mlO9̝%.[MlpJ%W{姜xzs. ! ɷ1[s=QuYʍ*N[) )S (,)c I$}-v1 4*}]?St 0xǤ3HDJU$mi?s IV#l1q#J>,N3w !\|To!1z%Ji ﴍ6ȕxFU%yT/ aNӬJ|h,DQl&[dtի o?PY'_WCxC &`M]JoHp>%;ފEjqЊ{-J#H"AxiAto d :F:L„nF2 \]bIXc6qPAFHlп]eذ}[m f>|u^=Nl ިZ2;.}כh[v/B^A"}tͨBsoO_2х-$xCPܼDГoڅQ=_(&5SN@@V,%}b1iDe0x<2? Et),m~\ȑdgp DBw$*QvO1 Cu1; dޘjHPTLܵ (6$I}%.3(8=m.&VB/dBxP[cK{ 1ӗQbuVƫ= 5 W FZ!_aHkQQz2vܺޭ#RŜLNWk>}Uon=Tha}]x`ut1˼J 2n}qk hF\3%_I|6vOkѱN_@|'/S y7ɝȚ';;0ABsQG4j|ʛByI >̗n+ :pb⸰{)\Y$2W\Ăo0; yc[! Vj@dr ܊b_u܏z[ I*JUã>/z}L h[EZ(aBae_!^ڜRtO6u.5buO;ӌ=Sn6\8hMqX1T) dy[ፐ ".IƳ3F--GoJֆdcw}TAPJXA4ա4p9  X4CR*h9s䧮 G8+";]^nst_;qjH\p5ZuX1hi|o^D<8,iq5}޹j7ʭ"JZ$E߄S@ۧƏ)V.MjTc^-ZXTJ̴kq7yJTP]Љ?028 1Aph)aA 6oE4k{LYx"LF5i5PZ=ڝ&l6 JCYEM!kLIt; g UmKԉ$.ݚf*As5$Ǧ~CܮFXcˀl%5; '民޾eD LǖY(e%Ƈ$6fjYLI`G6Ά7jhnge"dNGsԡ#|2\T $ӒǗp&D3tu7ԿM=c^ a۵`.PRmf*R!˞'| FokjAr[ioK4<ۧ|Ccx7+D{ $Є/u9 $xAh[X`Rl&w ˘@xXJ2re}=V TJ JT,D죺,Fsz_¾t0dծ5 D7MFL=,akrDaIB8;*:TyrXG wCPzI.oY jnU@U@ckخvYU`df͛{ղr0ndiȃ k d'37K@]N12`ېP![O1ء xٲм|ַJ@ I0K9[*E>6-aUm&ikvMb_t{2$<-.!˚IzKN[}C4087hˍdDnaN\4?/]`f~wRyܖh80#*=: \beI.Vp}yEj4nQ׳a m~_ x PFaaLwCίDqYbFh&=j5޶w8xqk:b%'͜n^6Wol wSpۥLzE`*M\E!2$"<ǮC9CuVh>j|*۝HOvl/Жs` ' c8U|=A'f'HL`UCp=9Њ]WĉӛhS{fr@{v܌D!{eszq2(xX0xM& i--r7VE;Φ4|՝$8g,m0Wq+5R)yL70װ:*guҦ?89|CZ:y9,rg=t$`IG:JŰ6k$2 tFheu9@ !~Dai^AnoW42j~=8MC]|¦hCEJR~ rKjX9y[ڥ " *z~Lop>gFVa5B'-WdQG",vD{fW8QV؟[Ox@|==`<%08EFe\w-{{쪹*ZbZhX'is`4!,MTXsc,y1mdP agS'Ƙ"!+/  ̼y/s,}t=qFf^<7*QԥP~[jg@5oD=a&nFH>fO߉D]6%̏QF@twӓ{;E%3/mg¸߳L.7TTxUӦx2V rSH&꿐=hD S{Ze!$0j~8 1 >9|Y GCyOSa<Jl7Eiw&~](UH>ܓxEa« hi^JZiC2F9yyi X\u$] u7PYȃX9K^VW~c өowO*Z*,Y [=>vPc$h{'\0ѭ2~4o,NamZ\E6iHM*d*:GM]' ;ʸFIGynMP p|  >[xJ#!mMf ;wNp9'Pq{@MlvЯTt{W'ZD5ư IC=cp Bt;/<&|_S#B< ,xY0>v׬o0v$l9:<#$y33ת )AxȜ/_FTQiAM<:FM4&(W4]oEcؘ9`}qk)'X)${pc|cX $:|}yJ{`ehO9\W).G!c6 CёLM"/%k}WZ^7\q~9X@Y0Q\c vHg)0榧ObǶ`A()FٰKwK_x\E- j}x_c>N-=Q~.`d=VJ-5jAh,4ML@/+!:S{U &#yV[*tMY?밷@y.K ņ߶z|psWMXr92J]sMbv4ļOެe xw K7 U;:YT$Vi-jgͨ$Q}N.lOQ[`KFM\\Hʀ<"&L?3B!{1Z4陀K'g|*D'4>y 'ieއYT_ZQB&N}8\+J[ #\$hQ+@QF751 OnZ} UC3g0X;־tO+8$Iez_@i:$? 8NA.7HAQ %Tу IVݚf|2rsLyɦ 'M;rzM U?-"<墛aR{-g+ T-t`*$Ӟ9Z)Ɓ Ax`.i;za x!#oZ\f1haqb}dN  ;0k`UՆZ xyjQ yBw.CMWu 2c;:d&a&)ފl,;%-l3 ޫo+wwl]۵ꁣ Gnl=Oۇ ( |26I>aY cI>IGRN06Sgae'9ĿGJCϢu3 JaclN@pqc_Ho-3n`nVg<{ܲC6nN* 5*sou]x6 PA]ڣ!cC[ZaykDe"b1kx YYP+-g6: nSAѯ7CzZ$>mgbM{ (.O$+{ڀ'ۅӌ7c؍/py׀'@Īf2r`ϚfLg;/["6ꀣ As,Y>fJhR8?E%5 BrBs& j=(/kD[p Cq0`+2ı>V.W. d@ ߝ,FAyo?eZ8, @ k'#sgwMP-oOwՒQ>r1 q3 $X+a,rp0S+WXG/9ےs܍mudžj u<>; 5Bin=I?ޫ.珲H4xRH9M@U)ȝm~~q|?dϕti{n|""8_e-C|*%c[ʒ3LssSsZ+u \j8RzQ{enQl3ٕ|~]&%:;B:nnJ@&A@6!\&~lWKRZ`] 9@C1kAw00=5+wݒ'|0TZY2N$z8E{d$kJ1}9]Pr:TtC :a<#>2xИI aL{~"P^wQb! `-e šENLE ZQO`6{3ϗ4Yt-p0O64lQ/g2.w_Sթn̒G l;hRWs'1z X9ޝp<;?+9dߜq%Z)ԗuƻdW+ s$ ߀:p_sͭCb=Ma"a{'gf\# ?w-zi,+QmXtt.Zݵ>r]fq>(v]M.qC -FlqQie3K6-=1|!Yɐozf9#5tQfB Cѩ3牺"/ >#+f TM7f:2[H /(佶 yX| R@elp} &NWِ;*}524pOX ![ADtXWBB&v1e}xFc30߆-Hn|›IA)IZ u̿̊5TxdH񛬻';:eO`:m|4Rv#=-Nj2,EdTncDH2l-#Pp4ZDIg@A[o7cz\:7m9aO` ;Vfڼ}O,Z-@<3[YGO姽{zq8^y^@H֞Ż""mɰꩁòU7ID{r޻=z2|`\grP֧Pܫ6 ŏ;]kn[t%Յ8̙\wwO Gb-*"E2$,Oz&zy$CH \9Jh]hCi5fPq|_a"pezۄh !L'ȥ87&:ahYl`Q&$t"%)U*AFT(AM{,Ei}iKtyLA%E̪E4Qj)km]31{o2>PC\2gZ}(5f^ m|KC S;6;o:ԑ얖 FO D#զu(\I=em,\)*ɿuθ;l\b@n]>Oew ~ M L<O& Ss % Pf2LжCӇm|,gY= TA`!6A7 `V\$u}*]=qY@!p\uZc8R,,& MN6oȠc9O{D[T%fK1/ w;| v|RVB,6MnDoZsaƲ0΁^ZgC/C4 ^OYveB)b h?QqXAq sV ²o z#??53M}EPpΒ~q6.D*_%2 SdK=ڛpC(T-=W-Gꁭ yPD j٧Q2=-hK7=G?)_l#÷"PuhT;jw*9Wfh '&<5o…?,1v  U>4?;I҉ [M%#ϢwdTr6B]JRefA%MŗHFK:Cyy)k7}XVVdo{H t8]C~U S!&c8l&p!mP[DCjd-ttj2I.v)#5#mnb#v/Y3]]cQ$vWl "Ri8 Ɋ-\*9B;(ǷFf"%M 5;[;jMx>v۝O\0fMKRRLdtP"J]t+!,nXNa΁\C & ŃNMLB/^]a}pK`g0(٬ j n;5xW4\bRn/\Ş!w ->\U>{_|p&$j .g(pg/V8G6vxNNh^/8sr`R1AOZw]M>uX+ŸZ>o '&rUcaܤE_/,'~8 ` v#2V U5 r<}LlkqSJᦍl{DE]U Pғ!Oq=  G|LпHIu=sjHPі4*Lrє@ڲu1pfLf/93g }2SǺP9a{"D:nO>=DOJl]qDcZX Ǿ0Lx)ͽ"r@ }*h?lX d"p*ֵ> v9 \ZѤP{@zЕj9rӘ[l)N.[ZFhɚlکj=Zx5<q5 4V;~z00ǠB'gL+Sݿy4()&s{c=wR[=(|3BI$9uUg6iS z-´1@/natϧ=lI8;`9ggS%=^`D>{%xLOD_܉)0^v2&$0 hldy d#DTK Q}Ph7 О_2ERz=8$ ˟˝6EAste+_cvHâyȌwe\ ~0 B.iDdyHGH`fgg^,>9|f'38){/)DQ#tA jpd&HzCE*b4 B|)g$JGm\)i\9)bڮ^kC\Bg!g-V5^dqc,1o5Q 3'  ,k_8a;(ڑrǙ|&91Z~cU PȮ(<9mv+a˾cGp&BF%^Rz[>% uھBvYbG9cA78S,9} J+=O `r S3bq^5V2@bf9:/ pSCyKX^qwv̈́yZGTG|:0y~Gb7ls=d. L~<𬏱oVn12$kLQQaYS>z˱hv\z?}ƅym*\A9+M bو׼ O6|-׍.X{Ad)B&IpUȹ6F_JTjo?n8L?;,@||\yy0]O i襪I_[vUwV7ln*Q̚"nrHQg~=F*o^H>ߖ?& oz_D@:?3Vs#&[Qwq)(:v4Z^x-H /b!tŭ߬'>(cF8 LI_Xi_DiE#PmDmnX\t)m&j(G BWds7Z4g'qGva>tOK۱Tu,rk]P@->yz O;%1\;܏ ciJ`閉J =&pn I6߲A:پfew'X8XˠiRxiwѩ9.\Ԛ£-ns+5My3B0L8~ubT̼t̀mzZx #G tߛt"k׃0X/vđ|^ך9)L.cCʄH8g#~l[ dLgc5o7Ǐrΰ)I$r#G&z:hϺ-cĺSX["d<ۃa{> $0mQtIaq=8fa~۰eUAdyջbO:"&tݙ\tUpSooiZ>_E "S781о:=nUʼw`@8]co,]GHҞqbY}r$_2@ĝj#USζj*~2o< *dI;Obs]"#d+A߶8gK.`띟2rOXƳ֭6j*Hp!Y.HwJ<5D9@F !cR. 'ӎ [S7cEuAdeIì6U]wv`GȾ̛o% 3Q]ԊYgK_qP[4P=7ͻKQgs 'G)FT;$FI-#ִhN+UPC5񭳠Md<:;^XREicXF֔:iUh:Y AR)p+3yMTy sgW\ $-+2Egna a+lՖaV+tSŵ630=Z}|·$W/$0+3"?„<ez>EAњ`y,!zW*A.|%,W[ L T:=2@[߹k4efxuCťڍS2׊B0[әas,H~@o0c*>PcdGMg  eMYH,'pkN*Py"xkEUkGm%Nvw'0]bͦGވelݝ_T\yym4Dyf[0k((xTP&IUz^ZjFEy/L*ɿrKH!& Dٕ( ['}EYWHFq\O3Y6)KsjAeLByi@$[uNat|}nVRnTEr:#Ol=ljVF7 Wx_%yƔYLO7r%W^Q+Œ`9͹>0M0iH=TFxzTk3>ȱrU<3-03F`R_z 1=㣽Sz逦nkhf9%ٻX$iIuSPzU NV$oH 8Nv,L~&(wMv1bƲ/}tXK ri %&LF*u2]mg6KЩgģ٬u6TYNPoE\2g"Nf}esG8Pv30 & ]ф"NۣJv9+. A nn4CGM'嬉ip#&G6PܨQ÷=Yvoc)7- ׌;:J`%Zn&iM2J[3IxRzKnFG 4*_p)Bܰ@ Tv)|>l\%blZWu3X,1%c4 gtPJ'˛2h}RfaJ3vZn :=2Aj74a%QGDԅJ@5gl<#":02OvغɿB?,ǘ`u`>.F*'3kt&wrS0|G㈛-=:ƅ'Yz_ /Jz:͝)79mZ]6z8ǂlDWl=(19)~I-RgΏEpN-Dgr&ŊT myL8T:N7ƶAo~1< 1_Уdƿ6{3 X <}t)XWuM7{6 >iiWRceiˠ˫٘P?}ֽF` ftoiieCcb L] hT95TŁp9_\xUq(]p!QH!qu ՝snPf8J1Ojɵ]ԝ1!z~JOJA̪_=hWPɏ ++872/g9\UyTcʮ ȕkM+{4q|f:bku念p?g)փ onEݷsUs:%("b= {[)S E'>ޏ|$;X92f57`.kZIr&*ٴѬ;;3 F4e7 .zѪy+@+W1|yj h{kYB9B[8~| '@3f"s/gMgz4+ZH[GyXL( pLh@xe.Rkz98lm<^a᜻Y~HhQ;v m 򠜞_*gFNJnHO&x eZy3ѡ>ۛ[Bթ]t)(;ɛ*}FȈšmU/& b^[M>2}'v/n[FR0C˲Z0Y-,)0l/%.%ĘVKҋ0sc&2aXkO1:Z:nR[óBیCޏ`5PG͛6-riL߃l SNFUԀ[/ <Z~ I\>=`Adss)tSv+_-ʄzͥ˒"@s;wա=Gc56)_=m x pnlV]ehJ\)P,nMsJ8;Y@Srȳh^J;vVwDF>_ hER\w_&Uc=xтQn8mnj禁 >."(=Gԛ.;{#*YȌWׅNSxIC Fu\yu2wOrR0aQ0<Ŕp&!. zQ`0G31]N`7êB nsD-fPփ%wswM:KM5K[Yb03 8S>CڊmFʟOaDX4K!@IVӨsv}':.7Sp0ځ\6>uT.jIAl)V =㯫Iն:Yq;.o])wu@-/}zY( 9*!ބ WTjo+()t)D_SJ+S`࿴=ar_2w*sK>ш ڠjXHŢ7iICuz ׯq_jLC_Cì@pAvyr 3OS?nox5U,r5>M1$謎@@?B^UQ-} –ױvy]/? N)|jEý?R#m2+AVd~GRN`P,rcD+4.GPXFnkYА}Sg_Y'eeyġh{ @t9F禌¯s"vVK]:`朢&e IRjgTǨt^E/S⌰'C`Oͅj 4 j`y7UO%v*G{ r&!*rwu.`6=Cd&-DJ ۝S$;eX(2O'{#el_ÓTΦ͉@4טr1~26{U>5ȬK ʔZ~һBiwBi|[Ee2^7x&O*d>OHahOCw_m29&c. z 2NNr$ >i"2;yD&~4Hz9 $׵nrh}T.7cD3H޻NI!wWNқ0yygqV:ɋHF4dx~b` gd {)ƤֳlkOFSK=&A} u A F^CR7]4[R׎:q$aݵQw ˸_JvD i4svUEYUK!ʗ7c=KM\1~nnf UT}}X{IV.-9՟9Kn?TɻY~fmk̗ZGeH[|XR⼔R\?^Z9c. +(~$ K{ 4(EoC&DTUrE5fA0.줻z|S5Jq쫊\HmFGͲuƾ c:wwi-0f2`\MS7o"<+LNu>t&~DC_A, u?,mXLȱWmmyy^kQkAðdi \c)%EJ{ xle"p61H%2XqsƵ9`-f?C$L"ʬ!B~Tf)gxrJ i=9OJF_x ooC}9HT{僻u2`Ka%ٵƣV!TZ0_Ԑ,+-w&nbCѭL<ͮ?.;rH=z`B&Ͷ/< Wcg\^ZɇN-&q.OK?ysl>;AU皑AM3d J]RKT0&ݕV3:Wh[ߵHYVոx\+7>t _+;oTo! 4^C:9E噣J.=ɮUPYpn [^Q4 fN)H0[xf4)PqVMNX✀$0-_ty] Gv~cqWdZe 4Σ$LTX-ANVB]4 =ݱNxAv1Tp5A;8G)j(o6ck[Y衅J;hע%W^DJIE8H"IESaYõg-7"Y򭺞 PXLI:k똫 3Ю5am8!&'_̒o~kSiEd ϲiK;=[~K!$sgܬlEw;1P:SD홠<t~:WL}OZZ&'$Ƚ)){-RQ!uѹl=E8}$_[(Qda ?AaJ cn\Ei4\1cLm͗ j;*;p 'XHUꢀL!ۜu;d Y[ D'''^&rC(8YN۫Q+1,~ eZ}3O+tpM^<nE*؛2p43J*N0AyG+;G5[M¾,5`LOKዳ}F\r_z*d_3F.ELȀZ$0A&0]sFpB`J7Pݮ"\<# Mz I-boAcϞ?yO\P3Izm,጑WImDo8DQؓˋgn.)aY4i.*F:$!ɪ3X㞼v´I}mI9|bXi!rvl}V\C]0LFӚ/V2eHc$}ZqVKl} :ߞVht4'սt$2iMPg^"ƙv3OzjN˲z>)I ׮jR 1Rk^uv@#Y=JޤO:JB?>)VԯhᲺY4tI6aEV'uLqtSI(SIEt*ek Hߍ;aNza@^i0.]Z-Iǚϖ-RC;do9 }ZjFO=xV7MJI1wB",PTgMRe"?FixWR^}q' !oV, k7'c7 Pɷ(Ê0]i*$ЧOHN73*&b`6uQ3X62ԓu-[e2׬K̀0 RI! cú 6_WSP\*9mYqKܫ8 |[ٖ$wPGc0'<:$2tRkd?7=Sx3HnˀG;@ DES `qM+9AU豢0NAi0&{\WJ79:Ehe@*e ᰗ..T6zq$-, ;Mhx*瞝^>_'TN)qKX泼Iއެ9a̽O1,C,a78foUJ*XI_um '_8kjGPܡަBɌPlb $p#ByYNUհVpl' vPDJ%{YeW1\OƱ4 AAvچRͷs;hIvu ǓbRk~s# h o@1.DpC2c&_v;.fN :X̘ 4av[ N   oʹ7?˃8Ps=?O81d;VIY,O|P]p S 5S؟"w&.^0 ?W Y3dIg]T Ywlg:"L#8P^2$քujdU@r؛\sb F-b冫A߸_P$_!qZo~M" +fA<+?U>=gy qI`,{R]4 {q,+iRP:u7>?'" >pH|RQYh;`QF]IeDTv"nV')2޶ `U<@Bxgۆ=UxС0`nMmz-{۾Be[jT*̐J8QUm uI['8`~j5Mqk-r $FKGI*ket^(U-E4gG D$꣜hB@Z. $DH)QFNb, <ğcCV^{+v@s-ݷU]&t6I?ŋoa4$` JЇ}'aV`豨Ӫfäy_ا?C4":(̠;l"}i kpy IhU4a&-ĩUta͡K6JP\.H kvYX { EfCjx8(qlJ%K(Аl[Z&  D#55zcJVN#$xgN)W |d,%mXW5g~]JD+NT8p+yWnXEIe j˕Xb%R'ybX `M/ϋXiQh—_&LN1߸/EKta]AopyK;  69"ZzAwՔ-nM%Phj<&DtS67G+@wCld)[?N8(u&S? -{`7 jo(;{Я _bJ2k`W۽?4bpyt4Xus 6K 5|.-P>q~1+gwz;A(9W0}w v+IP Tם R!lшl\F9'$R?)n;4Z3Tp<8ovݶkGY"N9|y++3]x²G',EtV߿GG}Ջ[Jt&~e Q?ԭX[Ww.}F$!Vc+=4X5Tlj& ㇳ{y)\BF+J}LﵥNOȁ/<w\mD,IhE匄ܢaJs 8dI>k{L 5z4f`qq^K %sir88?bGFշKxf"e Y5a!eSduƮ ܣ0p(L5t2ڮ\uׁ;.#ࢰ?N*wJaMmsRKRVCFHȕI4J@cڧ;nmZjkE~?jq% 2*ČR*Gؔ&9g_[_!ݲ'ЄB *5M#U];KQހMP) 3dbף,Q%tمS>Ttx,cKk@US>Ey fA],Ƈ('098Ιu^5tb|?%#dt>_cQaɳՅ88 TM-㵪AǞDHP}AȐ]` A"B8K0ٲ.g6!SPmk 7Uۆܱ߰QGwAw@puq|9!lePU7H߸?D1G0sEIq8~v s3̼H/mt<ꂉ 58@ZWgE79 ; ?)e!uHeOO-]  >@Lmy8.8f2Dh>,n>YA1dk+;H Ve<orQxl h6y+.fEUi y;NJ_V(]cTcIC3/O)w(\.<0TvۚsJ glߝ oѪ06Xc𒟡ALbr=g3X:G=}|/,|#AYlI$ČV3*!\H^jj9坻KtߦL޲=>؝C9I*)Hyl2Is:VUd#JAG,WC4Z9Ań TZ>u2k~ ڀ >듕e.>:*FzQtt^$yf>;dy V(R;ss>D{0ok6m!n[^߼EE K\L*U"zL;p3+:kp\CXnÕya*O3 *~B%%(ѠC>o/JwWUGRTqlI2Jfl*H}"DuD%y? umj5r#=2  Cȹy7,w;=<=؋mެ2kW 2R\CbNz7J#.BFuS*_xB P축]A-|b}L{[̾(߲+<-zz:?$sʝru~fBDZ:A ކYuuZ xJ E tw-"2~ ``wI 6_Kׁ檨hUcb{Xx4MEҧQST)ٗpu 4?{\ΐS2Ã9tOdhrJєbN{6b 8_*(F3L(ʜ@Dhw6܈պ!-3}kЯ6B]nw e[oc/_F ?Лfa1y=(I":Wވ*-/$WpΧ]س̆9.ŧGtU 2չAL-ޘ-6Y" Ҝ&Z-@tݘ&mR#`4CzE9.OX2d"OA1h[,Ci& 08p097EU%z6B Bh7fScbӮ$5nI >cKbuıoJf–WhZhC/ )GcP¦AE{pqk y jyE);Xd ?4RitӃ[jmx8$M@XPb hٓ3Ј4VNܮ@Kh|>ȃf JlZ^D@FX~/#r (}If%kGq糐M>4]_2}:Щ@!jDCcM]'{BȻJY[[Qp{Bv(mo]X%|~Bs4l)FI Qnev4Ws.v֛gwt?A)Y^Klһ`_rxyZ)Vi܆*31@%o(":՛مyZvG `O2<J%W|ff!JūƖt8L#z:\ +S3 ي=cn!mrP$ % >y^Uf%&и2`8^F'F*Ltd+Y<8x`yu omNB>rb,_w8}꯼>¾(= *vs~|t-t"@W`HG٦Ԗ!#=ͤRp;"j?T<pYPK73=Q[T[RqbOUJq1D!{3C|\S2V24h9<,0}5GnKMj*}2IeEyEǾ?SeMQo&86"҅[G8VfUR"c z`P $יg+md. .Qyx;-6HǗBq5s%9#f\Y;2jA\2BXniSjS$n9!ˇ}j fQ.Bκl_$I^k:i7#%6F5.1.u rv=?ʤ د7O_끌SihZJfktj^èuϣ(4k1Q~(O0רEfP%X|EӬNzVpi~]bLHnM s4T?*m87 C8ޡ6 +UP2oQ`<'vИ 10D:7 =%sYcWV6YM n*D/URש-M?+kk/|U5ڮZӽtWsVphKp}PG~z.=S 7JbO nci:2Uųh_,bqGG.+ީ80i9i;Պa<;`w5 j5,[]Pagm8#vj`51΂!]!.tHzIcB␼a nN}W %$mNix5 IU`Q#$ MBًNhYQ-om7Ub,A-@0̤m!!$ VEH?t*-R`X勶1-;Jz'v#1܂31p4Ab%P$k9ok*x_ss&g/ujtd7gq=;L'aH(0 zǪ5)Ҏy0\ &;bڹrH -VMq?1͊$2@hm?Bvw"υK8q98SIG+RKFV.$bZ<"W[,hGFĵ)k"^*$aiKv/jc,m;ЇMwE  LGQ;zkdc&vcbI Q)ɶUoH:f=c(:z *3z5eF ~ xUݩr.E3iQ[켼upyls [cˤqK8DWD.;` +@-|@O""4>㥲gt/QiXXgQ>ܔµ\)VzUg}`F0s 4$hY ToIЄ>C[A2|l`zfNE#R xZ妙O,ʼ; ye$[#.T,I黀* 3xc(E$_Hu_Ȍ[8)y,#)f!kmhDnv;>xê{)BUJsQm@'s<3Ps(xMgb7n)_Ͷwĵ_CgoD]+j%yy|x3U~9gU_͕wm, P $-X>Lt $I[?تUQ%|ͺbKF ÀrAZt:œ11dpyJSl~ 6*$%aNfqHj aѺ橷ށ pֲbőzڽ5iIAt&xZ_3J6A4!v-gӥ,H~Q . Oœ*PuS#TT[yp-vI(i 2T :3UGSsY đ/,J兩:/+Aտi{acIH<1 FDHd&W#D2$5Yx\3Y?\jD ?<:f+wz' hɏ6Qw/**F Z®)K_>Ĉr5x0ӱxYPzNkLC ?EC۰vߦ+hr2y%o :)srXcx/ (fv)ny!o8LR*JUk - yV*4X^3uxX%`N2kp9:ȄYFΌ*a>O_\dM}8~NEkZl5᪌G>R՞)#!}+ tb"Yx Kp=PƟʘ<rLXi,%Q&R,[70Zک'1hf[5(qOJ^Ɛ~ke/CaGZEhk=|ɍ7ޓV.Ƀ /W yqeHC7{aV/~F_֓ SQH99swN&WzК3,UFx> . jN 0kLQCQʦ/:V;?UG/%a֭l^n3pˡiq7,bj9gDeݼH'"Y`1F@`՚7Eh[L"Go5e_L5*_n0t8WLNϱ#C,zIo[ i;1@Y؝[ '7u3h#)krպCOݭ7׏E1H3-7l[FFr.9zɢC!GĮݚ9C+,~xLND ܡ r-%i2%NXz<)k)̰b (+ن2= B ݳ ySs%0v>{WD ؀j//ʂL1IiT7O◁8&c c.djX_F=aT5ó5knN&ݠB1+gE{MZZqg+Lˎ 4k&0GX_ ӾTcxi .`S $ihuS}p1mnMn|bZǤsHu9:^{&d\QMykDt;_jƱRΖൢp֫94¸:<V{`J5sBw8;: ;z^G$ Ol"{bǁ6}251s'aS$5ߛ>z}cN{N=zifnd:C!F6i1"9XYKm`)o׮0 } &:1!,"!GHڷ=.crp ` eouy=i&{8 Kt S3T1k% 7lQTh؂*n%.136 |i.>}Lf|f捂]ݒ kU+q Ew_4@gw0O^ƥ%?pG#T1p-wcMr؎Sdď8 ZU7x3S9(SGkrtP=U-seOwQzyu=.X@{JCOsW=4ũ?_ (d8^Dr<3HFi𚉾5"Bwj]Z8dkC|`~yliSV٪'<.x%XT^bUbh cfpfْҁJZ:|{[.]:40A֋ր1զ^ȆISOLiJYs , .vG_=xY!DcvYH*7*̿:IYu,-X8[M  [dNply3niZޠrh(ǩz;1-1grI`#g U(mOrzqiX6ފC]((rtQNW૓/>>RU7\xhڷ(8_8Ne_e|\wPX⤣B}jZ$p%7Ʃxnfu%q0{BDiò~9mWuL=$HXzXOq=PxbӒ0RCZ&[v8rWO'sum6j,oz<[-}mS &kyE[JR OXS4}A~d籜=Id⽈ ;= 慵x{f00YW=>@: :tgW`:gn^ux8W@%o4pkMIఠ{^+PczE'몤shHMym,1ᓱ(ɵq~U;JLNʦ~X<|( 6lÜ(LQ iSiBqLd\?Vv<E6TـTЎ vf_P)ya|6݈]JgGی0 ojӡKE-=`*_p3$Q[?"-#n D?/-4ş(~ƳCeY7,Y;'LE ;g_.Աt @P@QJ {HH9B/S?g扇 ^f #dBd/؛7e lo&y3! ,Y` =x tٳ]}VQ7i_~UqWtTU0;U$b,N mԞf`i$//el2N1/۷ eռl n,nqǸzGcYɻȏ jƮmg>N?to;SSkn5#o+l@;G›X#4' A%, Ar)[+Ƚ8L=@~Rh*~fԸ?sy<&qYi~[5X7_j%C팕) l Ȼ@4˨rtI΂(6R$_Nj T2|-J~:ߢT۶? Oq||yn`;p9 zVɣ)F+I)M&$X;^Ь"]J\:`q>ܶ.u顀*FN322N.Qׄ 1Nr2&,6,*}PM#NJ\&& t&  rz @^0eUkRBT]꽙xLP%5.aU\L&]- r==?㒿]7?bOhr X5hJNpL ǭwH+M̓ZVб>~~dcߛT|b ~d`ܔ)0m&5R8}GnkuCM#IUmrkJ2YG} Z0V:(CjU#ԙd\ܷ]숕&RL\!݆QrqW`L~,_yR\?VcF4AG0C{'0c?0&&'uj޿qe<&@:ɟPڝ+n!ͱiw)=ڙFԭdk`'v%UsM<)kYOncy>pgFA_@s]3`ȋZO Z9ҺNneCv,@[ 8`PB."BBذvj@|I"/UK~RLAvCnEUL8LP`ۊw,{K.9u)&̔/ẽ̙D|bwAN>*twMò#d ^|v~G2%q.,7L+2S\<ky@dé~DH҇Y BB炴i+)gpi ɀcmef~g$ZfaP@y+sW#L-Bcjt7.G:ʠA.*toҾUE)N(!o0b+#owشtxȅ(Ʈ-;'CU};4P 1pM;s0 ,uyA7-)K[ ҍXq`Q0sݍ_ s'0/RjUb{NJIYLKaפCۢ6>Mf]2P0"l,Z^f>,΋u2g`G4P|KLG,V -.V=YiͺPb|0J{^TA$Hj] EQNsȸ=`SԵB+,Vf:;- 7Hd9Q:=WYרMir tˌDgNooVQ n/˧HLP x),5{q$fz6KEPZL]&jwo}٢̒CbKFu{Bߖ? |i١79+/_*Q=Wfy#И\_i!8w@ʫk>˲^]=Gk$ŘkQ0HLx(O 4PX{ q;\S{aSD, QxG`;qF>g~wlMD q)_[(CV{JQj않oi[?C|H!no"ݑ f pwntPj6>eQW.έF_ P~"=4@&2|hx+ ʏ[Y:n5K9X!IY5٨D3IR˜;,qu~};PZd)'Vҗ`*H_쇽A`~LѼܳS0m=k;RUr /g3>$j]/*$<bXrs9Hx<ʖRXܞQd d&&ehW pr{Hrl+[*\4%af]*5Tvni19-h'fEã}T4eЙ]JEhaP$[$/E_X/~_v\7=#C&՛dr!,T*- TRql>Qn@5S(|$B{&rE>rF,K렪>f`D셪1K r/]*KM יAU4Vu '"A GZ ^E=q *rqٌը2ʆfʎ̋̄R]kTz}^2Ÿ &jpFt/ YtBEeW:%p`t7ɪ%X~\1/R[G8@)7/sCaCls$ߝ(vAAjjgy{0 G zϵOױ)[`Ʋ8tԃ}[G`2(Xg\=%۸YuWFiu}H|8i簺1N!a n|e9Q)ɋaB{C8}fDW ًGY/Ga3ta6H3S<qf;jkXh Cx 3>[ ݰԸ{s`&%"(ZI1ED DC1P\.Ai4$y;hcЪ<|ף;d-+A- &5M-YNld#SLN՚>Ǵ C5%Ż[@fJGQMëgex¤غ͏?bK󈕊4A @urMɩ-:b;t$\*W}$*D0=,- aD?[a'nG pieٜu4ktdNJN%)OX _zb X}; h&JC3lS|PG]1j0c}rk|r۳ ΊD ~۫[vl]^0е{w8 N5yB X_e', x1+Ӝ urda쇊K˹>lAcVސ_2b7N[JL2jK=\$wq~ywpic6;TW}0=dO loC@=]'򇌶W*}P*lP\"*[./c8Y:M@M- nlhO{:¬#u[;LP 0L0hdXTAsӂȂM,& g6Su+:xӝ,vo5&0ag_EH%2k dW~*.uhfw2s[EL]bwQpx>hR'sA%fϠSaFfh8?-Eэ=6~Y\Kȼ%Z?/o_`_qvL%@7%lQlyLɗ[r8=/&`x ]Uw#!-eQodMӺ$ ,ʬѲ^zoA%8Ef D{7W0e*͛&LkҪ ]-.iFV?G{B¢<`?'͈-/D |$ޮgM/L 1MD8^V0D Ov'i;2E"Hh:%rdPJڲ==3/`X_ P++rԾFL ]c,>Oq&(9J3 ]`1t vѹLq%?u)+GAf5x!39( QhȯAQoY[$|p* YZqi*7nKڦlgURQqga=Wl.Y.)ێ|ܡ%CE聽%9!.qW]}GzIOAh>})ÛWLʾ]׊׌N!י7MDd,"=sw4<@x/ f <zҠw1yFjf CNu:v>o?Q՛ikjz9ߣC8P]J %Lz588="u2}mҗolS<֢-@dF+ MWb+,|>$Du( z?L;g12P+gl]hT+eE6YsDXAA#Xie+W~#'vn 58Fy d\FN]NᯒR&PZ|y+E|bJ[Eis۲yQn>\i\zŅ?->)Pu[ܯ3`e>Xu:>wU w?"s1Tb>Ad ((x#lcFu9xӦ 9H%M"|MXW#yF<&r jGeK_ | P O;bٌQ7AoLkn{vfQPp7wH+Kt_l+ƨ!IMοUnLOd 6kmn9]{ Ch I!)6P(? BD4w=(mF Юet/hP,˖A~EQ:8kL֥RL[*.Ä\@,[bw5*~f1ߐ|:`"ኺjR %yb,c9VyИceHJU~xnJPR|,;8GdHa2Oh,şΖ@ ""TO`{x[9;"@d &:ƺjLZ`ܣN˿὇z҈ԃ׾'vk6sOvefc,FtPGݻ3ۃN@c<·~LAY- -q$*PH7߂N`j"6>!]S".uA#uս–4u7Kisw5cxW.GT"r<߮ f@礑+nl7wq9:(HHrKDO+pcb?.![`w鮯aqÿF`1>sVd;)՞5'2 CbwEK8x^XE8j#R?=(tzEMK|ɃojJ87'7e VbW<=в,m&"k 96+zJ@j8|qy+;;q:;vIJ1֐6CNF=f'}dJgz~6Sz6֊S VL W|%55H\qDz*vNqJ0V.j~ /+NZHszQ/~l;J}tjڡ/\͒׼giA$L[N.HrZ^$̞( )V&R[ދoݪ=T^բӛ"| -2UDeUqkZzNRG"#M~w@iEeҼ=)S~,dSCCڊco 7 p_ә&hOfT !<'碉[[q 9ZؚM )!2v+5+.,SBA@Fv)" 26v퀱: p^/&JSUZw1m0Ke>(m3IEbE6=/(Czp!ғF &%LھNU)] ߭ws74/վfTP&[tIJ$`7GȖ.`{~m_+D"No7h]Z=Mo`㢐uW:V>d}s XK '(8XTP-FYߞ*[/Pc:bб:2%eυݛw})dq^Y͍ ruUޚ~<-4 gjE]kNB  X&7 >=:P {R,b7 /++f *.uxc]_9h-{UNYYqRZ|+8sXg u'aj W4 _.fqvj+JZqv jCsQ^c4qni#blG9a+VM^fs)qdXͮ*{8)׹pD""*#(>YLTذ +1r=xaܾU}r)ZQr֢VsέrW:3H,Q UifG-WgQ>O\M"S&hߚSB{jIj1$lwui|=Ksw:f< =?o~KɼmI"j)pFmFbg\Hy')_&h9+},zۏ16<n~uoi72Nbu]T<9$o 6P{9v;Bԇv*5)jMV{X0G)omN%e:R5wKᏰh^s*mP1'Y-8@:[萹aP&XK B\9RJ@"a9 PLOϞErď.q3Rvu^ILukd|.D-M:HuoЉUR@9rҽH2u=^r80#_m0*-5#ե:q DAsf1j.*-iYoWsM9l\Ǥ?X[M{׶9[yp4|~P80ɥC-Xܯ5ޒ˯tssy~"&*$%{ z0> ڢ:XrNf%:L/2mM{MX&3I T.?fNj8V;{=GV -d gԇ-%cb Z >a >"ʂ^伴l8)~@^8VIl/Bb<-vĹ Ρs[87kR# Dg8e޷yz A@CC `[sS(*u& /ο @æSNE9UAHF&ۇ3fb[QP?Z=2ŨЙow遃Z۾Tl!.}UqIC 5̱l4O*SKy'.*ۨ2Uxp&_?F0t<҂9 bJnbAx9g7PkvB,ZZm pi%/A}ѫ\ưPg {& x)j ZBs3ºҠȡŽ*EkjrdG._ bi6xXGf+$h٤7D0zrai-QF)cđDiqx{5bQ~[9Dvp7=o eu7,;܍WߐhIpPD.B1$Ol xѮ PbQ* e^6E`'Ab7q.#b"*\xN3sx1NюUPMMQ!gZƞ.`!v$bBH f٣@$ZJTr4KzRD42R$oOƐ쿔U`b}8tt M [e{,ZfꙅLúE)&P{+qfwt̯Gx#{ 3хs~&AbN̓&cj֊}d/zk5/[S4n;Z:.k i3X#g {,`[ɗ Iv6 n7T{DDoR4v=F0Rouf{`V;M | cģ?nދW?xyc:thـ!su 5,#}!P81O6S!J`?vJ -dv:<J~/R8eijSPsx̑!TG~r޿gW1;*t~-4 9%i ͦDq'<t9NJ2}c{h6@ߓϣdq4kn(7}[.<^ J Қz >#{4漩fw7V#}/hڎ9Xj}b"OPJhO`]#wT*X9QE宣( pŧy[?ܬcjS:(WiTuA{kkx{F4"tu%taobnj?EKU~"ٟ rs~4?:H6LG# :KGPdWa|ܩ~#ۣE~IB P(2&9.3I87.ga"%I #"ptxm_ JMHaB>^X huG\3!YZ!2h=22-0o"O!m'rJX8y4ЁmAyFGD4OPK 2QY[dSh{YeĽ g4g!T#ĠuPuy?DJWm;"@!4F }n ˍ ]\7e!Qa܌L~+KO+B䡑@Ky4me`x~_RE`Sc'ߐ'_KG)Q S5.EAX5ݯ%φu"]( FGZx\5&8]Oy{ H`L{3Rl4SP3i'WM'ZWΎ^ʵ]׸2aSt#Qկ77i)ܧML>{_ܤL+-e+q(fcJtFġ kYCPX C ).Aj 1۳=poaq5,qsXpҌ$W$p|޳O T]_%\ ͝q~q ˸')LM ],ۥ lzw5tK$15!^M+( '7p?%}Qp{ĉCʴ黓#7K2-K.\ر1R8tP8Mm~,ϟ_Q$ˈCiG߸Ap+~%m 6>]>Ot{ Pʲ ;`s~'瓰ȽΌdftJUH^W L;`l)` nDW&Hq~pt#a .<~]OF3U~`ܺYe- oJω[hXÈl7BE}.of\l _B$bAg)@I#?mLp'gl5!9#ڕX^+E{=S'fQeEkxbiw8ՈU8sQg@!-j vpH%>7*5kbU~ѭW ƌnta )o.v}~pqО|Bb=*<*1t:![W}-xn Ӆ\0|)f(a}ˋA9،4G8,T0"a{ ~b=v ەy'pOJ:- ^"u%WPI-J0DY{:YG3 c d>]ޠ6rK-Lq牋;3Γ9vr]hI^ԳE?QEuqɣ nH'8vGudB_ԁp|.y&0a hy ϕx$wp@@>њ̀X_/ꊒbP=.1= Z_ E36U0ڙm! ϵH`eCX ~r̙Z~82g.7mtKL]I $ BPJH?\eq\'czP,/Ǽz3SCLs k|kjo7K9WK@KBdmS>ow*" X]y%n1SbPÓ4f 6F+⇲_oN;Gxl2ah FJ|IgvESkE;\$ԭi%wB6'׃봒$o="0;c96@O/K3ڨ pϠ8xQu3flgfX[SoPn9|{M'kx1m 7kⰗ bjKQMqz!>1s%^2@X/ ɫS(se=Cٽĩפ Do `_UA~$}L "bp[KdGQ)PdgjQ?'1:6X4v>KpKkjC0 ?oNJ_+W$]Ll(& A1Y9fdVۅ #`4{6zݰ.\ѩ5bԴW}'9zEyKpG .1糖i>UB\2v sL W @Fva9V_*&s,qQ0ٝV^emje>\+T_;)w*c'\s*ʪ.D{ L`":?I33~5RY*` RE@}^s(bR1O\=T&/8_fy: X+um:CO= 9r%? wy *Q EfVNW8zITRlWߊ][1cn}=i/E<\KG{;#`NBW&߳nd_;y'T኶PF,)Hi&x0Aq  <"K찌_f rZsNׁ86u|S]Rbp+#M~ rRFVc9I"RsђeLw_7#X\YTdwǓ _i3SlT3#98Lw F1JA1<¤e 6K㪧B-䶍`2xQRscȦVFÃS@: y-J [ <"`p9CmOi"`8R]l{iek!?H>arҀJp:c{YD |Xx(N˲A5fbH5A#MSW3߈%Jwԓwza&f,_ϩm*^b"і9ɯ<З}"-$ zQ+X`ԟqP2w@3UKt8"j7SuD>w qyF}|Ъ&:w W@BM Jm~ՙ=c7aa4E]Џ#cc3 ?ݏm$؜&}қTm~IBC +|fE: N`vtNoSrӶ ur"JU ֌Ui) q/2݀C z7١_h>Bs+!5 FҞ0 df56T"@&r~3V/q/cq1hF<v38gnȧ@s۠\YvC*QэXB-M6x~|&_9ۈǺP4}*cC?ޠ~?tjZFw5,,#kLezCf_[K#ᣊ%[\V?j|UGy)pa1ZA,X:@J -bv`Ǥ_ՆOY|PVDe9c4d!LעbW Ctgʺ%dߏHf2$b.GF\Q95qJK80X%nrzv|b(w^Y @Z=>0(pȋH٢Ґ::A?6](1NϢZ8ag,=FםѱYn<Ӓ{ `ڀBcy0ͺ7 ! 迹vVJhhM`ca6q0QUgL)iA[(2jz]?H'wܰO ֮@J }Z6expm p_:}(Rg/_^T%1^NA35tCY}H5Ԯ$]1־2U9 '/CR3"(XC9]N{Sia{hSRfB\L)K9}3{ ag JgVQE!( };{>&zU, }O){kHMأYŭ@5=W2ٕi`enDZ[flst9~D^qq߿(C&&Pg_E>ԍ_2"nt<^ylQgAG)oB)  Q7?&i\60NDk1rчv9Bۺ׹X JJOTêl_<W: Zs$YÑBf# &lBX?d|n>cˮ+J]K/tꨋAQB`weRSەHIBW6λ8#Dx^$E3ƽIKS6;T$Ã'ޠCc3 zlIy82 CBf;PPq $|g(;&R mluKMF{t%X _3,4h_BnKK{b ŪAqlD˰.l:7#ǖI&eJ␶M=h\L!r zDϞ*6*[}V/7mF/(Wyl?};Mus`K1,ۡr?u 8gCgUUgW;Ȕ൬Ž2nOm'#8̮#5:U>_dpyJu@j~IEr)}JKPLϠq ;ĔD s;T,<~MO8 HĊ76){z/@KD<NJ2T4.o@O'Rb4!lWW !ϐuf;aW A^)&#JJn"d͹~Բ(3FZzLQ!+^.E9ldE F^Nhic6c!L˄m.̒b+xtG ;g4{xaշZ GklK󾾧k6% .00G Ib R0{T;,(5'Rkb@ v5Ŵ)oݚ+cL;?fϥ+T3I2J$N@D{eH?D{b{(]]&oZ!KZ9?ɐu uO`*;34<|CYQ`6ԙ_Lz] e3(ƫh,(S ɨz"s-PYY܆{M`hkă3矋Sc9' s BAQ']gl}xSлҀ!CTi^AYn[vq]s/`ϗ@ ahf\p6QwX`[ՍEƑ*{zT'\Br!߅%kBVz`:W|@Δ1ytgÍqlMsی "L] YZ