sssd-ad-2.5.1-1.el8 >  A `5U]')} v'An"qL@qIw ڄpZ}GpEj?j d   2 3PV`         o    + b| BB B P T Y( h8 p9:aGax Ha Ia XaYa\b ]b4 ^b bcdeeefe le te( ueT vewg xh( yhTJi|iiiiiiiijCsssd-ad2.5.11.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.`cppc64le-01.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxppc64le&'CK8=OZAAA큤`O`O`O`O```O`@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.1-1.el82.5.1-1.el8 .build-idf29b42d9269d27a5b55790428d4b6ea1eea34f6ce619a608ee7c3916a185ebc54db731c7efeeeclibsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id/28//usr/lib/.build-id//usr/lib/.build-id/6c//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ce619a608ee7c3916a185ebc54db731c7efeeec, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=28f29b42d9269d27a5b55790428d4b6ea1eea34f, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)55PRRR8R RRRRR RR5R/R#RRRRR"R1RRR)R0RRR RR2R!RRRR$R6R RR RR RR'R+RR*R7R4RR,R3R.RRLrk-߮G! ?)$m'{NG8d`UOM&iVtn8X $%o ^I(TX_Kg[ǀh΂u>nP_nQCxCYGMnA@{65" =W7kbjbZ%s˾X3VU dʄ,*LpN8q\ K明r(z1K(USܕ|͘$1&=Lha+j.ASzʑeZ[>H+>P'6o\])6QsP?x)q ̹]iuHC/Oy~Z:I1nn(u }rS'92׫ ^qT&Vq`k ٦CvA^\$t+:mમE/LdI#7IG)+E)ʇ_N QY`;gm<5&ԭZjnÎC;=+P2-҃n\[}.ȁԬv-Hi`-&,ҫu2Qk'ӷw!bٰ[ZdeDK)˜DQq`shXV!g vɋ?peY'mxEYfRxL@B1Vtl*q8M3ی*)[=AwT#[@t1S>FDRa[Mx aW#Mr)a?ހkfJƳVWlYn4v eKjv_*P vũj%0(ߴfoykEOjVR= !" >@!'4EU9ep3;Q J=rX _@:zF?O3D\r\g:t%q(4Hqoq Tyu[B2?G,- %\kz*0#|+` Ķ*+ˉ*A:q?o#pg26˭4<0}]ɡ O2\fIN5E&AD\T 9{qIBIUɃUBW`]0jb*{pd~ 7x:aͥm!vJ{?PB-%S3b(bMŨ[pnjV+H4Gr<)組 N'!V )g3#q3/nĈ Lܫʏ_4qkc-Id|[E? n7X̹eM0{l2 F qݹd$Aލڢf'O*ȶEA(?ckm64#h0i/rv*=JWD{d'$nnW m2z,O(uXۊzi}R`nd+%% f2!Hm)7fhI`QT{b"ub`@#*4^8]"K¤yQ.oc|ܟ<)ͭ>x;9K `₣m;9M76c'Wt9%?=+9P/Z;.gο~KB*C#=Km8e{]ef9~J)[=mC z1"ċӴ/YJ>ߡu 30 .PAXfq]W>{\M!DĕsXuUL_+@Sdz 3Mt@nCrU("k(K뇅^aI6./4EPѢHwf}ǶR0ubN%%@v8N"ܻ#u+54e琛.eD+[yQмf-pNr>?N?ϓzkb_<'~J؀M3N2hwq&F+tEÉZlwctɵi TjZPIĘZ%m/y:m` hi+iM) ף)ݳh^U&LPqBCBt3eMJ/`pO7pcM7A= C|J!CiC6A 7AAl=[1 ^;2bsP#׼j! 6) 쎻H/JQ FK+7IN.FX)^`}bvPh f`f.- !5m|*egH[C&@5t'w;_tBKʲ|L5%*a mf9U!`xD",r9C)!SD)_͔L]tr&1/Bp#/S5XfNGhHeD¯4E!ebVѯLnsSEBQ{8A !S BtiڵX| ˫z2ac5~M{4>x6"Yx}!EtcE^yUf!h4̌i 5zD%p!.e{YAg}.: A40wi]k4w$Md9{֜ pWqb1[|,1m"r["La>^1pSĹ}p3{ ֈB,Ъ*\h=B4p nodŹmoI<F.w*haHh[DȰ vQPSφɟ+v{L4E$'X5n306܃7O? n(Ӥ*ח૮)G޾?Ē%yk#YAT;:3[kx< b}#9 W/ 4g%M—7!{ry a?X02*:Gih3b$ln֝$C1.SL"O;3ҹ=U=XHFoİ[EO~vDׁ9M@LIlM鴑j8yrޮЇ]lvX0ͺP\2Y76# J2V'j@ˉXg /b=U3;mX>L]t5YF[AQ>6f+_PDBg"+zd~XRyQ)ÀH/&o #152jÔaù!-5ESBiy߽(j1e[g;oktJfg(!~r({Œ`OR& ?EY76dJz\Vb:Exg﮳mk$լ4׾h4?&k(c=F[Ԑhnq<ĤE%;xPK aF='{tp6NWag=~E~[mq!/Q?"?E1{n,쓴ˍEGxf!=nIot.ZPIyfA5l:)lҍ|[|Nƫh_RK@`m6M(s{Psڇ^A3Ǯ-Nn Kdm ;@n"0a<\osʮqwPZZ:c<3=i"$WMzJ1xkwU? ;1LNlo?ϙ%O"P,,ZC܊(xlguoM !d1D9|ȶZP2o D_K/:m( fbongJ߄F{Y# kV,%6{3d WW쯭\8;\bJ)16Og 58w[_Z]0ZG3g'za~4!i9Ʈvc*n%E2Z# [v;;)i; &dr[ rq.ےsqؖ-}!mynOmxE+'VN35HN_͍W jA\<0%@=OSMi ~ND#ޯ!F>Ga:1KfA4Ad~#CЉbl歗Ct}Qtbz.Iwg0#3xXrOOM:?iG2>2e_%/;jM FD7 jr*>dAY0VǾv{D {,quSJ+cy`C -і)u%q/ zc 9mˇ]MinJ&(SPkԬ.r%&۫ތ4?Y,Q`]QrfoWlp1 Ns@˷˂J{UWY2 к4 _YKqUmT9^9gI0żR(ܐy2:v]X:sJ/?tř^EPeOpCL@E_)m?:'IQŇSgԔ8!Wg~ٛ:] sb {_L}{Գh$5-pTA#D2Na~mM=sZʬ >vpM$panLÒ{L T|HlVܣ6eVJXi>LjʁF[5K3$MHϘoX4s?9!\nV2H!\H  f8ocakup(?e2y>& DX:ӆAA;maÝ׽XOAb5-jBF]"_Nh{J[-7DhVń=Q$wCٲzlOI:ζk_ʬvF11~Xcٳn>8.ӒwЁ9Y-2*\հmq Q[ ~'=-"JM~eF?WW]QO?JBӍ?G Q9^2؟VN?~_0e5#"SY_BNWbE)NeGgt{ԵGMHoK##ƷlSI*6l˒Pbt(ّ>.4@g ~GjD, i1 khi8_HgX@Hnj.FUP+{&[peW nRXBuWx7 +p4ZEo RbDBkj@<@Q<;Qqi|@) _%p 2 Zlmbl(NptGy'ha8Zz:fR!-p.oHnt>٘yk=3or˽>'ՈlquWd~Q.$t*Ӻ-}ja=>Ez3BbvŅ0=hJj.'VQ _,00 +.)5ٮ {C[(TĦ ny:Qg7q[i5FhXCywoa5R5..ҍ"B) C60(TчIbp8Ge5s{<&tD)1Ҝ; 7|-VLӶoc;8QƂ+lgщ;yLS~OwIˤH3/(GƲhG%J3.dJ =“CFuI&sK)Kf+u!B(x ωQJlGN\얜=%G/ՎD#_\tH)j>[3P_JGsd)аo&:p^I. Evr ?fwe;}sm_@MHB0iSCxEY9'c #Ǯ CĝQm'wPlѹ4}:3jůEYഹ7;Ch?Xۈ'O \ZC`9-N~pHV1cD4u2%A#Nhl}.9N>X qJgְ^ ovam#;YB?ks ~&͜)M?V:6PfcТu~,D]2'Yuҷ5ΟQ^1#6bmCdf/n춤jZA͂,yJ="FK̻3;ew:-?"=~J|@ 67?X6-OP,sćYܞi2daV\G;0pw1;*$k}ga1`30AV;Zi=nc2pqxy)F "tFXݳkv} V* 2.(r6ԓMA@rAګ:hS ]Z]{ͣ,mMȎؽ$%E4}.NR%*:vtQvUP2Z~& oW!;Q˗4If!*E `?v}?8?9u<4@ O+ 1St4#ïA$.s72y.d*BF,A3KÒx*fO=2"_Pׄsy:~w϶k55=%Jt8@X7"SB$ndHbKjh"#"lEJ՘|3-‘IL5>Ͼ\%Pǡ-іvo۷ )O &+2YGڊɯY \n*O y[.ǸX52t}%DM ;t8k7j3?([-0нŭ 1|'Oi=DУ+Fn*e0ijv.r+:sG{gM,2s=Ԙ]}*xOS"{x~Lɾjm"/: tw۾ .tY {H7lJG3p7nCҧ,R|=ؽ08*c.wj\˵sK wߒjړ"3U+-D{Btx3_uH Fv@3 "Պ$^fN:lt3Iex&.-(W J)4)̓Gw ]/%m>bduYZ;߶HJՏPh#7(NDPm`Ubռɪv}-6?R]"s,"­+uK{:$ o|d#^r";$Y)\e` ^1;,S ^ej I_Xzβĭ5ѳG{0%:REn_)w\N!!~ 8˷N%ɅF0jκrIMPfzljlvuM߮=WH#H ? RiFfZn&͒xH$>dˁ?ս:'K &.EPy²ê>)K%C> D@ ]Z 7c 8w?ר/ ,k `d )L]|K;j Ϸ샚fkosrsyNmmw'{2BTA(4XLxs*xD+wSv"Q > 8iGr7_M.X]i8{$y642p:,]B‘ݹn5t$4S!yH9Y?<&qlXTUcv**kUJrBxA3i|ZAy:p0pm; P pR+e)D>v=oyP _cɟs(>ӕqq1%{oQQgN ͡ޛyzxdDؔdRk6KYX[^(!abeompz+cK8`#?O qOGl ytW? ;ƚװ„˚n`9/H[`0G=qA q24,tuڂ'5εXu{ Z{ r8|tb6b!R>,k d,=k"*|Qѱt^w FC 61h?Ntd-BB!Yq@Nt3ҵ"u(/Սy-iQo [x@Z̈́ t6E~MB@eʹL~3kmH))ߝW;yvLKdu)E'cc}Ϟx*=Ju!UEwɧ7f )~dɞᤫMthLWL AB8w 60kӐP8Ń^byt@0\SvcN9MN\mRh@م[*Kb{Ⓦu_>AK[“"%vE˨*ia5LC8ﻞ#gp"\5CO=8;X2\0erѕep&L"tekt"Pug_dT~;%f t>᧪b^kZ<äxG*jd_rd^S]uQ*t2ϾQ29B5vn{Pg,(l, &^)8M?/R%̅E$:ar(TRb2hm`ȡ/3۰gVfyIT-y=`*eB0=#?3n}~ Ɇ .VDd[I?I]{֒ۗatrX3( FW<*+@0FOIIG ^YX]yGPiPcCG‰ jc|ϰa aګƽɶVh5?rx9!a}"^Hv?]7 "_SgCӊiŝ TS-Rh/x =G͢h]Dgvo{nUn7`.u(ʓ4"fh5cMqg5I@Og(g.{TlQ1[ B &zGR/Ĵzn Q%)4$y|B6Nˍ/_08)_ q撏eHN} 2_bӔr!^НˎMtu }6 <-u)ϰ9 Yu-`n'[Xjg\]+48~IpknE!.&|^7_2u*wX Q1xR 91#Pc);U+!Pw>7uC4$[zidg@TgYOEOS ->vLr5.?t˜0 e!Rt~j-7 8{G^4HqL%F )ᘚT H['R?AcŜ")MJ.1Ag"4UkcxiBI3j *5`óaP䎭c<1rPy?3=|pG:G4O58pWY>zQw֐ttW1?By AB~4}k7=XuaWy>pѢT6xVY3+YE1'[`?zD[U@Vt!`QS~(g&IB (8.5Tt1ET:N%XG cDsґ05h89q} 4Z%vy֊ҍ3x(/`?j\f(3r eW1绷`/q:4^K&#X}=p;s_MFXy2#ś0\0%ypYqbb>r WRmg|Ztg"m"CU>E],ݷ^$vƬr5Fq.,8S@8jP.S0#|UeףR}-T DCg94OVYSFmJ IN+(wGI[4.[ eAÊFM/ ab,'j-׽ צϔCNCes"oFeo4ǝ6[ 2DGW;U2QU+~sޖ?oWDf1vM!n]dzyV[M-IZRܤtCj:({SN1,2ߨb("no.âe0ՎQz=DokW+hgo\2Z_Po _;U$Gnd:@J25n[;bn[}%Љ&s ԏt">tUkr #ŠHnlf޼KhyĩNFmOB'Xc PޣeDnt Y̛-8)N6#Ƥs vꠖ=@,?ifߖ/?ղ}Z 2W(B H+c{p'&aV$ZD~Ljp*T0(_mx A{{έ' Qt>з|&3K|3B &1rf8v̚Sr~b ۋ-yV`}ފ3ܫ74҇Gr Gh`S }%ǔc@^ iĻIVUmHIα0f_+Olp68aO28KDHڗ#`50|?/V;~_.i@f.2"Y Q#eizf4Տvd۲hɬ'!ȣ<ַ뗑f&Ӽ IEW0 l #0JwJ~}9Gf/}wqknP()L4ZRE=^#PBs ˑ R / 5"|CKE NBnlSۙ*^GJ7yV_H:(B;DͷOHcv7KSDGzhCJ}GzC`VC~GT"V($jVSO'&+&S۸/NCG;m}0:z"(EVBR(5y^l;m)Y)S/ܬl$鐘fNbױccj1ujC+?ce? 90]ʑz#:[A'@LJ4G81ZJG/fŒ()_D;o9b(z^˒q% / z໡"#u#cl~EdPʊ(8Fjp5T‘h6ky<tEfץ#Ι = t׏zkȿht~ r\HngO_6HrԺ:<~qQa;AV#lYUC$YH(l)"*nYrk_ALEO|+=_S99,abFImW2e$A`RY\.rUG{`Kحb AUunyb GPAL3G¹e ='/iEJFj 'LhDOBDP9c "?q\W.(Q:+ n,ZzB@ƹҴ> TmLQŹYi+c1RL<O;y;-Kk^yd/²aƲ{2pzd7(Z.?8+t1QluOW hG;#8H(^&&? C0U \ϼ*]qs\حU F3ϺHSrYրn (%h/7UFp#cY4S 6T?>7O{U?z>j[}_6nyO#/G dQﭸ)D/ fުAcD(~7mCp A%OK:HJE0N4hF)5x'_PC 緘A%T:bwV=nP{N;&Oձ|p>O%69=τhzbC~Uc?"4 ӿrXVv"Hqo!^ |xt:0%6$H]ZU Su'q8{LG/^YD损/H8Ʋs\,ɝ/b8su.?hX*)RκW8<+-ݦ-aMoqs܋r#ܾ)K-DH1 cq'Ʒ6='K5?RDMNk?vPj8jl`?h,Sbd|_Wq?#3#!#mW~ ebDw\bAJbW8vHEa7gYv$ػdT-*67ViJxV\ǡ b9f jD7 7jc\GܜԦ/ws ;U7h߳Ί ej!oP!q[߻ӈ|u5u*G!.hh;s .->$MgUϐ 灘D{>R %:&2/='n+Sk@y۲r=ltddьaAxWYZ|t\ jy-" q Pnoџ``ϙ3i蜈nOlFKR7MF^f~d~Me Ft"tG/( 5DUq$j 3+';X*k Xu69?POԟ?0{ }iz>sJ(X[f|c\~)!h}; kX w!,68V. QדI5*l6+r mV_8 DC$)ݜ9Lrr=59C e|gXgK=P <7iPA JtwǵPuR \r6h4Ir |HrT8T [̗O1coKUw( 9(=J{Z9aX}|[4.:yFi6{wDCy˽^?̲ru`ػm;`q,h8g;M~6ir6DhЉWGTQ`xW-@w[ |Pj<f`zqڔ/nJ2aWJI~$~hj2,^QY Ҩ#UBekM.H6UzrM(+tBVAKAFfnӵq{ 6&7"`+!G~+Da gF ]yi`nvAτ谋αɰIh=c9SIh#|:\|ǴBQu ]|a#fDHy2)gRXg &_ b*`q!8!֍n5Y?07׹'A__$F4!M2 0Nl~r if+i~Il@ $cG߯hpbH~W)q+t0}4T~ >aW:M<#pnփ W0o/5.8*:1M:ŋ{Hkq^Υ(,q/|t2zt&G⫝ȇʒfcHyw+Y4B0g6 >sQA~VA0\6<2c*@ c:evU0bȫz5"U<>}iQ7SE`R'bjcq4qM»|Ě#WRi[J7lBPOǷ[K#xpW_7q/y˅~Zpc|KZhxIt 7͎Z}15'QV \+S^EzEgeU!i&JhP$q-5:,iTLG7h/H/6ipe5Zʪt }H>]s.0u.'l py/u? 1G]ቀw|m9T#<50>6,^#rȲHl-Ub.)" Vp?9F竮Ҥ']dhtgrbe?yP/8rr-Ǒfwi"Ȫa+SJXUMh1 ~@0)ډAof; Gm|g? { ,l^񀻔[dÞՍ5WjCӤ<@ӓI*epʈ:`i~8(&xĥ=oZ ܶ:|XԷa$İ?rX\iAvG2dy/ɫXgujy h"`=e9;*vCԔ6ˈ$ (_;mݕ_\oѯVJG/tڅA9h:IlZ?T9)񿳼w6=g8!jb<;*@Ļ LFAF+RPqONp0ߵP{CW?@ Pԋ*AД cp!_}Oc eyz|cQp1d{΅]˛Ai/T4^n{Ώ| rxK*C'K6R<~&@Dȳ 3KP@7qix_hʠw;)< Nޘ%p镴?Ú5^؞HaF1u '*-pHRT)R~<`,x4d)zZ+GHMI۠Dk N% w&|M9KciYmRf GbRV#ɞt|;rK B_~ZEE~yO|.K+ʀhܤ!B)鐽t%s]U[&^6R_F (ֽh&}Aw|W"@ɵZs?~k,h8B:"u)-X3IA]!zZN=Wlpkg-M+,j-1"ã=BФ6(CAȑǾG`y f9=|'?KʭvA[~VAf孟Pwy\3 q鑙3H):}ᖹz[yŗ/$CLqϢtб"?zQ˙xyI~UfKTURqo$PUR~5*[oaN:^۴;]Y!dxjs 0tOjxiB=ZxpOM2@Vth~#R,NUbF:zD)|O+/ |F v`xZUMV}cFLḄ Y5d[ ~8V4x 6"V7=.5{.B [厳}[o '*4L.rlB/Mˏ8v-8/EIjݛ]Q@r}^T{t0b54e\2Tʲh;; 1$W`Œ08ev:n+o~5e>ǒx#ցD|O6fcōyN̄8܀ITzM| 0D:آ5m9v}NmZ9d!]7_fj&vI2Uzo ,9>VL9eeĤmsťj:ϗkfҳ}MuhxEI$),n4#xB1)INs"K":M\ޝ2 Y5#icSvqH9 ė< wփ ^=eϠK`j0+؜>rhCEÏJ`EJg:o :G)3/8)6ctq%+ݵRщJ1i&L^jQ!@. Z! .0~sÖaVPN1g 5kzǚ *1Hŵ:odh!FDiPl5줛 CcGX ;΋cfk;fj;Ȁrx4qWTIE¦U|rtel0]O(. g)!Җk%gk,~df>1r:*aJ7 k^@}ba2{}'?Haҡ/\!z_Wd8#y f7ja {qTyGUK~7o\鈃b nx[8 x^ʜn($݅AI;w -R̭&6MG/I!$g!w(Uq*5 [s%[JL Lo78a\pTh#&u| X5^WNGq;%6fMrP#&Q=iCB.u1"Ӄh[v?aTTKiLI>"PSF{LfjUjxa͵ϵlHRTWy[L+  lC0$C(p!y~BHh5= 4oO D>HDL?*"W3׺P,ҖAQiɾ;!SIHj?D.ʒm;TZ } #VCC:B\ b:ƐiM2:s"8,@8`0Ä~3"A,sȵ )ߊ_UpB^S`1O4*>l [1Y X:&I՚.pxqu[ Ͷ* !w.?r*w CADͅU V8 o/3sh_N J'"$^*뀿0d o>x!^|h5{Kꥂqn!zq2 KG4Cql_i$g.) Wjt|< 8 'Rh![L~=\:ձ&j;A2VY‘lЅ6&xLcߐ͇\#R`Xr\çIjhnD`g* !.47bQd!qLQ'--A]О8EyHȃN.L0]2<+ƭ~13]Itq,Y:(#W梨=rךf5@);"C/sIwL軘? }e\M J*`t>5b:@&6r(pP|hz*Xc0*X = .(d,~Z k6ƙ]kv (rtPeJrh^KaQjg0]pQGbW.>AN>ne7*[0.5︛ }ȰB\7=f.%m_d#uj/cK\AvW`Rb?o_0_ Uʷt.awhhp?͋A.7P8[KO&nDuArT':%Gć/6տX6|tc}<pi0޽Mha5_0]g/˪pg.uMz3p*cl` EBzegܛ׳ ~O0ߌ{kdq" TY0mq(lDuG%jm4'`qvnc!oCa;wUtw4KH%0%+T) F*fPr鐥d|u-H2;R6&|rXCj"!c婗}.w 4-d~B~=q\/nؑѮQ )D)yYCo5\0hE^/.~5nxntJM^b.kl̝Bܚ(;3C{G:*E`fEj\.!&+RÌWBuN^<}EyExY+R45Ά3!S˷U\KRb{$q HJxKVLֱɡ* -t_`,xNn\Qn^AWs+h䠜Fĩ"IO鳒-qW* ;_n qDtꪺiFZ0/ ~~뫋!j+%1nkY o(|*CWP4ګ0+yFZN-K_ؕtUc:3q6bQ@]ZD>ey.Yd(u{1Hi`'dɪҍ[H$a<*GKxߖٍp) 2MWWXh4p}ջ&S6~51&β琌 {i XG16Z)0`s" B#?~Akk}<D4؞ 57c&x Ce5<=7775U7kmgIJUPpZv_#`tl PxPK"%9{A^\2 ˗3wg}vX.Q2֯}2g%LzF @k5#gt7R)n?Z/ʮaVzJ2$]Z/BEꐌJٖmj#knuҞc@31dk-0=~K ,e&˰]4Lr%)-0#Qo*FȆ{( H]^Y6r~ё#(j+-&)i,C5n츶QU1|#TJ%rG yޕ>I2QG5PۜOFmC8^&ӓzFhI {3Q7lyU[`(l92>4F°Y o`^;E&ྊB/K^Vfd HZ5~$ZYqwȡgУ 輞`L%@<[^x5Kv樂crQ@䜲Cc-UR@I4U @e@sȥ>`}\+&1VA;`Hg(~}2U2ϑ޹@n; ͅ t^ kF*h%TߦTk`HwU7Qcu,9U׶1AC*؄̒ޙ{( u0 1GO~ED[۠1 .SS&3y*(@d]@!\bPt ߴV"aU ">߱TΎ܉lݕb6(Ni'-ZO2uАؚLU_&* hvg#*IL'byznMH@k*14:19杳S1.ϗ S= z5{wLj&bݔS*e;q48G]l-Fa êhV5PhqP'E j yr!8s2QJ׮TF_ t̳'V@+<"{xaR W&rZ)3gQf2*XĦ^3k6(ɴLi75̬d5YR)MF%q $/ 'j9#w# O7إ a lk >U LjbIz}z5WW|&zݥǠ9ંNclUF-ԡJ2S @ՠې3@\C;6A}c334٩TJyr ͒bR57~F2#ku*KXd L=&tMOI;h}GuȠ ֩.vdZLCԵ%eƓ;0ustx V,0V6B6yFWpnJ%+3&sO%G+#HbwtfmNhaC2Z4iI<eMoօaV0ܱ۽5fV)v!$w׸+86Mzfe`s]q!&AbESۖ]D6h3LЭ).THVD:y'9:nΖ&)7-I/pES^³lOW>hViW\\sؼ_,v CBĬn:Vdo.,\PlWj&+xi9ainAr0!FS Ll=\s !$ f$uz`2׳2?d&b2;oŨǼC4=>Íjs:kR^/!YJ7,5G*`qQ+P UKϾ}J>HR1Λ-'Us >enayH(W!/Q{Rc!VN9'xZŽ m9Z~,S0eQk=yd$gx̑OyA ftOS2OQ0Pg\RFS:hAY3=Л[wqJ,Ǯ^Xu+JSu~ȹw?= &YGJwwq<8 D@՜" .^H`;g;uo8՗1i%M $@k 4*P g6嗼ފc2R,(H+95]5\VABw4,=f uF۵7'VsKKqD^3i^Â=/+qq֧8Ųfu!plݐh`zL:owxapF!ILTyVz(ӷ7ux&Yq]?{rr:&ׄO>WBȺ1N-&l€8tfY>#Q5_Ί4eFӇsiNM"Y!Ql{J"d?S':;( oZAw^‘(눋];כ776JPbxac\n0(yt8SzU Qr)]x s6hqb39E.Q =6ra;P^8L(%M:`LxIpsr}{|Uܟ핢, ]{^dxPy"b뎨 ٰ)- 瀇+p2+PGbť LUf4l#(k҅[YH'U~xU Gpf3uS[ڹ~ߦ=qɌjQ6 Zq~wDB4v)kDڭ 53䜆|;z iG#3N{21j۵t=_@a-K`|+NBQ/[\9#6;&ƿYOfo Rt 6\nKdͩ0u[eUZLt=Ii֘$ka7Rhqm,5&%qZ|op+t@f]v+4F^1៷c/Ʊ|\=l}&^0t>pЛ\.uR9dE`K5;h#0r15&tR*tHܴX!ElG°2ˮnOtMWQ_i%WwVb򧅆X̩Ljg8e>h1t!gwbݙl[*WN/c[ `;}ޏYi "ak~j~`bJ!W+l7$IQ9<wͬ^i61|! EqS 1 RSr롓h_jBMan!e\Vh'Cv޳t GX:EYuURBß5\Tg9Pidz3ȝ8b$sT2 ʡ6kl_ƅŇ5d&'0oH۱kYĪzQhaoCGh 8uEqN $,~nE7|%;~CNߢ b ocQ(~qQGuZXl Gis-~V4E|=jE~Ymbt8qnM>MRBGLLS9}da<"wNZ:%R=|: Kk\,_Y6?ݖ_a`o>Y{j;1V*F@T = yMY* 2oF&ui`??#oc>Ve_GdbI%mܑRQ[C69^`,vUҼ| &|}\-Je-.@@?7@ڠ?6X7!!1_5 ;t$*2M~2R|;sgqZ3 IH`1i'XpN 8 EED(Sc$qJgua艜v VWo=KԔUl vAs/C{mOʘizGV,7W7Fb8ŋ~}:R?7q!`䣴'`~0%񗜸O%|f˯қk{>9=+.gdS8/XF~W/!V_w{;1v=j 6"5|geT;"+?Pؽ;]z ?Vxuw>:A |OR(V2AZJ,ڼLoRKmh<ԪY` q\ a7C/#QnGeȫ⿐K'1Jvu<3j/k١<ԡ{|Lve+ơg$d8)O0F4%/ Қ ͮ,IShen\bn61~2T0qjgAq]}X ͷ-Q<٘vO()B}*Q+N*QsR&b' 9aiNh7Ӝ9I܀+L[]Clw#5yv݅fLA5Ěw%+M\#d#z?Ghr@J'kY \9YaeI.; a o|&R{o)) .id1!5y$B`g:ߓ ͒\AP1ӄlJwn)(~'|3u_+҃*ك`M¨B10DHOkB9-M2Xͬ%u# ko&w Ti05 vׂl@KeCp-駙k,!9s*ÊsP\!喝Ɇ˂ (b; 6.OPh5[2\58G4;k-m6c=J#8IMȕ"5Y3vi%xs aaŮ{ݙB%;c {E\&vՏքVePUI)/ʮoWBJ͵0P߉Ţ1W;3[U:쇐ޫ#nϳ-؅BߘP\LVC[ ,0q+4靁Yhe 􃘶3+H )`Bۮ]13zbM8)سǬ|kԎ=,+J۫6-cMhMT%7WG+~}Բ55I?F?+`CJp7 (<<c^.&ζ`mخ1@d3up\swL5 }"dYl*ã]wn$霘p ͚&G޲. >*L([=%N88OF>F)BxU%"fQ4McQ8e-7PmM\eA,oQEog86NuͰC ,PM!+cg~ 7n jIpEq][Fȏ|aaMӗҵ\@b+Y}V "mZԬw#nmq-1ظ ܭb3UU# 2¶뺯ΧbJ?iЅ}PL}$&ژJ +rCrQ l]ӟ{sdYȝ5Τk κKxQ2Of噷YINKN˽]\nkm1s#,ր&n7Q t@ƁQ\VbÛ7;Q$۫\3$4-fV/rwZXb~ט:iq# ?*-OX)YbDiq?Q%s }ȇ5R9y22Jy ¼A{S.}Q·O{3΁VqyĆyx{- *hASi}h1ݰh16J8lDA+kRPs>0_ `7={mnr?M̾ٛid' *Vo Z l;}4?˷Q>=]] 2@S GRvAF*mN[qpQmPI[ Tp>n.q 3WsiMZϩk}Y&<ٍAJVeWA¸29[gD1lŁ.pL$鮕Qި7:n77Yr=Ѵ 3W_A-*&0Y *>(Փۣ#KdDF1 OԞi+/D ̀4%0Y8fopa`<$ђ.u(#} X]hÐ rIuu5wd{K9fUBވ< qmy1ѳTu=@烊>E;Oq2kjYD zvT].)SL{ٌ\ i+0$(~_I28!5>.W>7p^w)XRZ`0C/ U15df&l/!l0[t[3D139*Lf"&$OCřps r; Wu)XVD|9gO6zGQ{ZJ x>3;(<؜S?CIV>!6J3qz=#%n!bREY +.p+كx>,I_UU6LRT‚cp΄}f.1"*T$]mh i!BsG#nhz[-Ğa; Ժ%I?w|`t_nRQ=3 Y/;QQŢ(*7PAyljfKK򁴪I#(8$vT&[eB!r{&BF Ӷ\1yP:7J(*e΀M}/! $ӏJl,P-s򳳢*2sB󿳲¯ شj S6ִ|ڡ c?##]/%̐1|έ齿/75Ld`8q՜WvsyLYFdP8ar+aIE ܓ佭 7\Oݔ=+ul+'tS20&) |NU0XɺyWiɹTův `0C VVCDZ^rxD2o@abSER+cT_^@U,|3\߶Zÿۻ'!6Bv|_SrV6@[ &iJJen܏~| /r+ӕ!+9[&O3-K+ e"JUO&dWqo:R, \1e7ѸiW?̱7[z0/Iu]lup0.e] ]Oԡ^1:'*̴pu(>b.{DJNe(IEwuܡ Jqęm #*ЭO]^iG 7zہ4ySof: Ny`nB\xoj J0p'E\t?>,#rltH,|:چ*$ON#:Tzy6 i^23 P%uKd<#/wM7LAڞ6:^4jܗ#[Y*yS7=d.|*3ۅ 1ՓCtK+{qlnBԬqpOi @JTE㜷+}DCG-U -HHVj'@h 4 07(~98=w*hnvr ݋fVٞ[;Vա%` gJsމnC{zJJaUH.U]8(ʨ /0#ٸQ9s3g飦_zhJո <躿`d;:SÞvIC9#1Qu,Ƌc: HG@Nx@Jc9i7GadU Ի.Cm~ߔe[$*j }w-ox{3M0ՓR8_ވq.E(7gRE˿R ?[pj3-@5=:~QXzcf+[uNհ<棻6aԔ,@1/{LTTwat"( 'R"+4' @sR`we@@DŹ,UKSUf_*M`\7\#qS8;XP? ;~_ϫ[4)iOFz]ueGw A%5,AvR1M_zIGKXn,zt^%M̴uD}bԨT?vzrC<鬸WۘP=J$ 3!0 I<$"_ 9"H÷sGQ+uwgvLV(V&BF0s4j UDyjcf-)(G$9vkG Zzzشhx%#7:G3R u%Fz&j>!sZ]('!%J>d/Ԣ|OÌ>g 0]r/9l-ry#Ήi$9*t D;8@u=ļfQh IB9+j琋#A ݌lMxR1Cv&ET6]ñ-I\--CRyg5 2Dkz_)Td*==:XB&-㙄eTFkrc$!y{a8p F0rD01Qn}{4'󼬊7dRB:iB:0#Z{2͉fu뜶OEfotЧ ~9|'@ UUJ2{wUUA. Q 5 ~>쫇^cd5Ku]q+70v7T}Z]gh7Ue|/ɱf{鉩|q{ܘq|=3B ONBF7<˛c97]>Q!{tl,@5y[}7L?YӐ辰u_}3lp–-V~q+esĬ -_VSF,K(Y'ovG]jU@"餁"b NJ))v܎#LlL;{WJTWF9{Rb2>MV[ 5mF>`X٠' #0)= J7fWvq1?G2yhDz- wJ(oi6gB+H,Q,6# ? vM|u<;ˢ0*Њ] F@IWMW(]]]zUΫo_z{ZT=wŤ2Fv2l/9VX'3- ">~剃)_ROe/NzuX.Bƿvƿ thmTוk(#4eɞtA0e#JjSY^L1ǯÛn^3zy='aBܙ2ISm,@\F#ު;Lyk͸F2"MPRPoהu%1!VZ27T0pc@Zj1Lѥ`VFRE0H.@!J(S<]ҩMh' ϙ;뾑R 3tzr!Ҹw^~.'wz]^]? мa@7rifH:{f"!So ib4+a7GTxJgJN5=Ih9r)` kXÿ-I@5&8*>"50ۀ=\SKUgTVt#  CEm)ћ/77lRHY(ag.zt4f; D|:-M2kWVޜ_%)j*Eoi}ىv% 3[XkB%xqHa\M)JljK( wSR)?@[#۹#W*2\^)5손#L-5Pᮾ[䍬G2P7u{ uH؆62d3^SUYZbcW9Ai'ABK,;cѕDgoYi{L"Ҡc!-iz[_;^A*;^UvG揼}gpF^ADQ~A_ {FE+(0rWƌԡ+h?k gBO 6_Pzy߳9N; 6]=TR}GCuyVYh35> |O P**w]dB/8d!PaRĩ>r}rfiWҁ OJذu׊lv\l@8V2l?^qy#ugJ0[FV1*p^'{+d&~0k!h}; e iɼIҙJ"hSI}n?+/BXb^a۹)$AH,xIB-|@O [;J_WP}pTV(lߍt|{)o2 $M5@ O顕 c@!8\+ (͟vn@"O{2HQBD)N jq^p+jGPS^&* gz"Cֹ  1dv`V;!]%s-+ aY˙ 5݄hX[vEjOf g(mѴC ۫(X Imֵ2?=\Umi#".]~;@4)7 ?(s2:|a>̅ͷ3t1poFt@J4"M`ڥt7o2= yLC tpwN|Gw5FU&4Jv:hTC1SxD9E' 6.xRk:{:1z6 ݧ91d%0ŵGn TA}+j[bZ͜5/#<k_;PGŨ&2 KrgTӃ4gѸs vHs{D@Z#S8t5L}>~bxLn5~Cc0q"}] ]&@JPj#Zsҗ N.8(:)\yz4C”:uDyrFL~L qs_ 'rHMiIkh>v%LUs#CKT O=ZO'҄sExWp_~"2 PX ;bDVxz:O?6Lwꇔvd oC0KIqk)6j4C27oθ1g b- VjÛ.*[E|v:ޙ,ph4Sa]1:8AE1Qt `Ӝ)L_1 xЬ'zQc_bFtB_A @D%纶5Df&"7: h͒p6#Ws*V4`iN}XvD?ժ/8J-;K фN—"̴& =H,Ƙ|r =եVGH^1_:+aX#zw | %pZ8jeFN@Clm;'(je0?4<\\XT'W'gEɴO#h:v=dYR;]vKXX]\߽mY2b0NW #1,Bh p1.(k@~:g; 'lӗm)}7M"an!1`(:[~`)wIJ'[ȜRh%HJ-xZL+"=K煞u)3/?#y45])~)F.fr WiYOUæXvd݄/!=!-4h34mL0y,<# 캧rQn7;S9&'.揓hC:[)Ȧ_*t'G=l+X Y[D،:^WAۥ{$.6@1F'LD\M9"νNTca[բ HَE^FrI0"aE[Χ#]&S9ҪhF 8(h 0L5@99wc_zBؙ[@v>(uńi c@Mʢ|I&n%׉'joL44*8XjT7 yC'oQ3eXJư_M/DqHa(T.?ڄ|~$ZL apʤ-Y,n42k!j<7SWCϠflN;} %j{F~[ LHi 1g[67gLJ#E2n jLl aiu~#+C'ˑO/.:z ElX=\:ou#loLuDlhLÀvj`0[;pJ Pa˿w} /!j-)&D24u_;[z( g,pK/Y$WGMX)C%L6_HwB<xa?T_YZ>y0 cHx]Tnbǃi g9̤ 1ƫA'hw'AHM#yDj3![^;bigA)Ġ)*.}[O+!ī Cx9O RJǀ~p6_׆<%8Wc5F3RMr)L [L]u$h@9!q ʼ*-N}ZCvBsnI<4Zk% ܵJ:L#p`D'5 gדyUäƤVL[aM+W1 u$a"f}Rt*]0\*%4d?-JE\W<;{32c$g @\8 x2bIme&W<a8\,M^g-He1h Cq 5-&w ;gwdk!l s,n},\EkrZaZ  @T$ٴ*cQD.U6zʳhtVҶg?j[$XIR )H$3T.'Y/GPX)r7,O-BT2󈙔3_$z*Xy<=Zw;378rJw_=>BNѐg|. u: ƛXh?Pv CY:z~]{0JM̜ [/[>3>1ӏ " [W,+:|3FL_z;r!t2U@} 2Qg;༛"fn$ و֢f,>AD oo.DKH+8Mo&y!FoxBz&P@YxPY%& ^屬.r=6naBW(d Mi`+ :au)Pa{Md eW;:T6 -ax?OH8UY<ܤ\NRO!$-X6P+QyDYy$R4=]jN!hĬi2Pg"=#X\f07󕅗bg20l)"aʀ+B"]"vc"׸0-ăs RO{PGvM[xFAM^[-x0Ob(h{(Ee$ׁcѢf|оX`%0kKf;_}Zdﻕp_Bz*"|g0b6do"%6cL`e66S>\t M&!p0Wn,T߰y}ӆrtP"3]'~] /<41Oz2w5;.5QfsDsU,>]Y?|!NIqÌ9TQ/).8I- 4HDE{9N;\u>F0 Wnwr7I^BbMP<%>8湹 3X%D:gV*=]&v:e6a! adV+&DT⪢fJJ{V>Xl0w Kg3`{z-;]c8)fiVsq}fr\p¡Eh:*E*y!̆`O@Bzr݃: f vٵd7O_~̈V/O4b&Vd\ԍKc -=O? 57c#R1bX2np'I R \ b c'顭 +aר`Fe6f'&⓭>_,~LپJoAnyM2ilqWd~vvSԨ`z\%$5od_m.u#E -wLu&^Znb82AkyKt_=,#é=`u<Ds%HA;8 PR$:Üɧ[vX mS&"Ǚ"AGmܞ*:@( 2-9p1Jb.GQwcf4gB( C0h$I:LFt1ŏԴ2rC~GT?%$ySa]^n Fe[rO߰>$s~E}b’߁żN:' ;!F}nGa\Y4ʹ9eHHO҅ EHs^I㔑HL~&FW1 &{*|dJDi&fj"Y=;y nt d@PZW-kh~34;{hW-JCs(Be)e}Aؤv:{oK}u120J!VvCr.dbUԵ4W  *4HYIC~`qCӘmO2 .ћ99$pwV@Ev"R_Ez r"dkȺF3<@"r7ꗹ?^ęu&:l؃3A`Qp/F//Iat7ِS_ISy܆k`wPoC% uNc{LMkf諂9eBDyoG{RGEl3JklTǷ 7P!5bC>kS͓*>raBF o^[2]agWukE6Qn$mqvj'qE#({V<]rWGop}2ߙ+" b`㑢'W4yG>D`Y =o8z#H4w]R]~#&KXEf.‡rKJ`D;Ǣ&CzYbF.>ت:FQCs qٻ|Ҏl'cj&s G8| "?YklϾwt^[9ŵ91mXE[k%SMT9Qϣ.P3;'ț$A'[u}EB\D LUL,IGh6m},-~U6hȁ -Y:y#Ac y_޶hYc9=UߌG)ǜvLi6?CS?s YެŸK3BG;0&Vi%#6  iklP s+|2$1soArxtJpAEC.IRX^UKѭdZvT^Bz98dkfcI g@K|Z [ 2N]e' /@,YvX<'%IeEi |OɄ-׷NG;dj9kpm-y[h%=Ֆu3\bn.,FӳQPv#PTx_*S^yaF?0z kP =dhsCo#iͫbT^U쨠!ȒK&԰dÊgG\Lvbw/o_nк4k8ўVl}Y@ ҂>_хY$/ 1g^k =ɱ%[@0vUhuw!,l{%[^^P1kg![AoVWC;hۿ]+a9/xִ ؖ>VS&L9wdXi %@.${b /Vחb>O?DFRib0+.V/zL6. uW ؙXF${uETҌ.ù͝Rs'!%{e*1J-T-q H>FTM&*LT1Uۧv WNO.(\PР+=@Lب3cyxl8%M^O剪B8$'W⑟QLjW]NnkDk} V ~gCg,h'ɍ=5ДL5Cdb=\H b!5Hg%u66\j1d=[<@+K/d)~ nfckDѺ]D^EC=Q>aHAzж[ cU!9A:bTG!O^G3G `):,{DCP/KRT{m0V-񷧥( 12%TܘKJ;ȯ#_-qeJ?¹ vj j|3;01b=L#'5]HY]ߑwx%dK;j!%{L2V\ ;"1=wBܶ"j:v"-ŊhF}NȤ`,NPIr`Z`>kG%KuA[%g&`#,KhfF]? *D%9t'Y.RY]\ZOaga҄Q1*I{ f*-y|{8fQhs)K&\s8ؕҬf:=VRws>yPȔoJ=}qS6+/'LWiѽ$꺱"RS>ʵIqS|d1*|st5dytIRL>0hg06GAXʂwe\]=89E$&A 8~m421_d)NفAhfj'vFț)S5lT_B2mXAD{n FZʂ>E7$ٮB"wb]Ԛ-iVQhb><%\`MnB Vk,%]G[WF@򌕥:퀽y' Ti gړk"Lpoy,o(L}ڱ!m<-x0]8虿{ldl͚:RX[7gwV!G*6GfKϏw"89 -N&# 䪣ZQNF'_In3=䫺)\'xAl|yG=#?wƕyKw6/zqeopY4"{׬ 2ԥy n;v6

M]@Bd[AuRe%}k/ͅWɋhE ohz7ߢbHzW똒|ō.'Ti&' b?v <9ڡMH څڢF5w%6/+Rk41j:}ۛ{xqqH7;$wγni<4ʓX.oFڗǵaٞ2Q1 ',@T%CvhR5݄;,2#`rꃛ+ N>6{ҧ8s$c{en^σR<[m<1] Qs9DZ;@z9yg_?RP{b?qϢpD2;x~^fJ \)pdnc tvI%~XȢ]hHmiۊv3>T:@{|%r]Qi}VV ~L{%ΗFgx)]_C` 5ۯD ǚS젙wڝ&nwKo4+OEfPG$wlz[Veuໞc& 7MQ*a]RHTݢ9=Q*R#[d0A*[ojVM;z#'UqL΍H;`Ty5qD%K;52#^O mq m]͸vo2LC(ۼ$`1-p3y-+n"T!b.Eߘ8I=$[K uZ3\mISHyV~86-uop GžfA* *<9`\R!ˠ}]Ax9B1u/RQhPGF ]!>#2Qh:(X.C ߇2mzi"rkHv%;J[}?Ԍ$+`st3%|bC>o B Z`E9ѣ+E$4$Pܹ:,1gbq=פv$[=Q$ԡ^ )4IkΙi?!{)5MjֶE3Ր26!okZ>p cDl3]9[C b 5T*iC1n? 1DV>x6tWHSՒE@:D '9A]J/0D9>ѷxA _:qJ Ф~;^u!|$Xބ*,>zԾUf ZK 0εc^`UC8$96r~ʁ+k`z4+eyXuEW$!LX*#Rs=*inՔt sv̖GͿW6a*+ adݦM d bF" 4*d|MZb'\`g5JՌy3;s9T} u(yH@52-l+>[R Sls`O((ഠ%LY:>k UF|K(KPұOC8YlupBZv.X]' ]6a$ɋ4xmⅶ].ć5gn۩V%~|oW{!"\r &pۡq6>3[J\~1O5rܐZǑ`_*%a M%6|}}!hZQ2!'_E"[" 9fʢf5yVtX[Þ3F3\)CǫhZBq.aƁV4[ydY:3(ʿ`ZaFd. $1a#bxeձo^EHpTLJ(,a2ZKzp~d;u?8 :] <4x5?NIKǙ{`/Sy/Tʩ~@h;Mff-?Țϑ×dԅ)gGP,\o5u#PѦtգf.wcymLScMc i;qRcV8%LѯۢjۢPYy+ئ=ob!vFOc^6d"3="a=TUY8bD3W_ ^1 (*rh.9$Lu4MUvN^3d ДͦضA /s4U1zO`'|)MGqhcw5Ifv$$TG7TB u?C?P 32g% Xr=^:Y_̍R`i "RAI|j)JG{"V\-fkD|Pp/~O ^@н@2Aoh@8bwїB8(ԹzQC+\S?&"φOrlt@2sQySzuu}+ZfBzF;j@();k^ӑ^[ս@n,)w2e.k.^uƙ=JqzjZh;. V.Cd^m?U+ YbȖ >\hi|X?&!zXFyG=N$<ذFVq@Oz6spp5̓QO$s΄ӆ"A$!f9_h{R}` ӗBe Ρ7,`S,K_hP/YHQ򩓡Rm'@GPE\[犎ν۩tnʃKޭ)rCeH?`I‡8ڪ\7<И{*^.ݿ\E6M}wb(eBG+z%!ρ1Xb=,TaCNvG{TS)y>MCbx@T%@Ρۃo nNHW=*2SSzW\/~_2DK.rNv/qp=( 3 J*B.iI 73f<,1Aflx:%#iL֌RuOK6rrF)sQ.yc[Jˮ.أ]R~T6p/}܍9U=Q PxoLv&M(EȐ|ojpt |/XeD)rEQL0V=s~\dlLo&G\t PV>8,A0p.(g;IF|fWy t޴<{Y^F bhe"-|s7 ~>|h,{yck' m~nD*Jd <ҔRrP2tX=pQ TRvEaRd5Qnw6Y(]xLpn8إFCto̻]^ۖT"%8 D;| fbX ݍ6JطF?ig3+7_my9ʤǣO<:Gnw,$p/ψeB2iLO f&~fl\g1s"Om۔ mbX~9`7g*wF1(y?'kggJ(1:|e%4SsB o\.rLP(Y7V`1s#a:YC kvٓR?co}:#}$F#*Uyfe%rIA+*K!Lj|s3| Za>JK$]gِSyTaiRl0 p2 '6,n2:&7\Fа<٠ːJ}vrGK(I.HړNG..U'eRcKb z-i-FM jlZ}| - aGWe,6e-ɋWKO16rg y}'SOzG^LAm9 gPBd8Zj Na@-\Gde]t{&ѓ˜"3tO25*f{Bbn 5Q.3kj6] UC]5K5ZaBw]I"t$ "X<^dK:[CJ9:rO6e>8W6k6Ik(V\N2$f'AJ~w(}L/sTwH'2/ER7U6 q#Ƚe)/ Pn:6;=: A5Oǻ:uSɐ>أ}M> n՚/6n kqg1.G z|C(sa4sDru/tz{. ZIř^M1C㐥)F\}U%0mGF5Cc7,Oяwܜb~h5-3OeB O1*"ٲiK`ۊ'YDoksOZX#(ъ}3AԶ0kb(L۲/-~lm| v&Sdd ܠǥ=93x+O8'D"87k%G{4M+mc."~6E"`^pb!Ild@i1; iUÂ-u%UW ,G u&^11#qNmi~Ĉ1ca g,.n8sPWAbC<ڠT|&ˏ 521O4 P@pcMglN$XV~:5_oqӾ7^it_cD^,7^ $ o'^nq=^NVPyGOI.@)fZv< ;H8=4әn&^;Pݭ9ְ@ƧNFG8˝KėR|?D7Np(,\2* S:|ڀ́$Zh|:6hzd%+J>lOt JZrn+3]̛>p#ȃ|VYV4Ns /+5B@/k+`hF#8krZ>9[C}hyM99Y>$& 25z1AW#ʄׯfVIZ6 ,׮,1&n']@ѴܓmT@ $/쥹aI(Y>H Ŝ=sԻ˙^ jJ! 36l]:I&;@/n@*h>SO޾sC\%T7)`pw%/kvi'N`uo9:*9ֺlq&RPȕY'ݤ9WDz zJl!3ĐO'ta[d_ws UQG"},auiV*O%`^nesPU7ԡŗ~F|e|I՟0^J-}݈Q1"?o4}(eh92ѭgl'a)8]2{@4QT$J?N##'7P\8htí^X 3vpהDwPSu/&X&NJJ3P, ѣy%,F(5*#s|7hi-6j7oy)(WeO\0!zP2 `@4@0/#j KRֵ!Բw 7܈XJ,O :Tm;5ԮWDyԈ8͋/6k?*-%[UOVLP3f]cvfs_|{Ze8|+6}@ b|3&4kVLS$~ t{* xE͟K;9O,ܩ6='-?9}͙ö[ _ g_F  7bBݿAL4#d4 9&B-rgmVrp-=^hwM|%'_;Q7y= Z_Ғw )M7X s2In7yafUn˙*4Rl!tJ@.E*j*~hqFPDf""O % ;@gXa!fu@%tX:ޒ'j#a6x0Y :2B6ũ~TS}`JKhcЪ` @|{2HSk̄˹`̱=EFPe5 \s֏ !&MQC>尵遤 ؼdSDj(3}Ee*Q7uC0p\lE;BknnBV"xD[bXjTd8B|ea(U{q7^tTgykINAt<=4dž9ͮM>Z2 d!wUaŸ#6גs%v6> sWΦs0z:ND$"Ӫ~0+$ih3/=pcADcOF^ж&j{kU"nK(+PDH" wI G9>6n^<1g! }\F!cEah )#rm:`mL" 1%02hRCGNͺHAԏbpԡژ&ȪVkֆ jlL2aAk>$(o4x ya m: dT{Ӗ 6Q_AFUfp(#ׁRX֦Wq<#z@؏[Ȍ=MH eX*BtK 2_ɣ` &'Z.-3bj( )+})th99TZ]_1sQ]$YkB Nv y8y*9gsc3} wD!!r`r`p9 L4NLs/LW24m z]rhtrܤEYceZ91ù|rϫ#ZjAIm(%kVzGFGJ\1u PG_fPK- r(P՛;Zi=Xl%\jNELH0"k:=E 'djhHOG@^pyxY6زj"Jܴf=xwz$"`'V@ Q꭯/5V'"{r'u_)fb x8Q$kU5➬xKv.C1֌ ?B!;0wLwسKݎ`LuK|~N5q=g W? Q(])~Y5Xܦ6x0/ 6}Z eod:4 g/]'8:(l2P( d`Z(q`:kܸM (&sk[&3VSkp6#A'wI%*Aqܕyg'Aq4LKV; \dXy3/&a&ӂIB*vUVTJ3: CPsfs3'YOi lMo_8i TAP9A[\q2Չ)D*`o|$^~px˔ٔ Lm*-Tq;SufA}ITP&_=ˠ|%6_<|6?ˁ7ZQil-G+ {E<;TFvq%!2cb%pd:8Ph֛hFI=xr+1k~6Fd]VbT{HqlXK*EEb ^ѫCwH"-@l`!,L&!Rel/'y?;[g66[a2ںɺS);SbWۢ$ Bi)YQ{`#i]28|3c\φ=8QiNSysASxwŒ }KnyՖP븛W8lFF7qi=Us%ƒ 靆Y,l7_vuwmv<SE NΔUT&TckF*nzH!:80IYv}QsWc2iP'ŔabGwHʴ^I}L;n2 "AhLjNKt>_όRm/\wK$dUȯŒޭ["k.O)Ʌ\ u URAĆNj04M4ե}TNxў=!46v,2~ s_ÿrI{\ J8*ȫA%3%;ܪe]̨NKjEw ђlV/31JkB$(3Yy#zJLlU0!jqE +nIh 2"HCVݺV~knC4J!QK*4QCWՉxj5ěhTˈ5!s  "9Ho${֞MI¸:"EӨ΁tAu+=9U! ;y6`{c]Z*nf3v\i)ӥ('p͡a76?$~;BEPnU1WMM*" taJ )5K59?h*z}4Hq<][61fg eny\U#QtrYWK'KR\ޟ=Z3ɷԳ?d3$Kkm$_p7W3;%] 9{ōPq]+a:9y%pP]}AZT\cqoxׅYˬAqG#>?8@[hh㵂 7U F|+}lmjfW==$Vb(K!$4XZR\M:SvJ +B$aȏx:xcO /:jl? 0?Ŭ;@ejƠAnMSN {:b1d, r(W3It?7ZTakT.ieBAM׶lǻ/ަBAuo8CCu$E 1┨/2 o*&K-N狼Q dz{|ךcPUcϒ*F,0_,jԀԥ뉏z>ͪXzD+X흶',=3 lo߯y%K-fA@M9嶜Ng8mM?HX,?~'mOV@l݌T8{>1"iyHJȊ=lT]o%Y#Mg|p)F\ FɺY5MuW[n$!II)wێHD ^dɵ}/*Ҍ3/A`%c!="[#9$pW7.Lx9E>cWMp4bDZ: nz9v]!aޏwN\h~ʯ9^/ު Ѹ} } IdR^?MȋhmMV[L? D'@Y8>EW2pjұQ3>RbDsQ†V~fV:zC['4脪g˕5[lXPQ3@x @@pܺhiˋ Hq~Y f;uvQIWY*+Y_wT(gNhBݒV!FztDj%?8?l#LM~1HT5¬I-`d͐{,Q`:+dn NvM 4HX{&KeQU& z װ( v7e\~*36MRTJ.%Dv%6ofN:zgο1ӮjcVyUwZ uTle`<l]A0:wH{7tg>]v?*AA&͕!pyTy`ӊJwS~wHMp!# JؠTwg٠GIH^:D}ǥ2 p rȋG2j*h6r1o6M%#^۷`FbH2-GZҾPwGr锸n>}~?+h'3kSqMO%Vfr-L-LӚ},Bq'% \y 5,Ac6 Pd=d%Be,yd)[J&޹bU{bt߇6w5OH uiUQwvR߇&ڝeZ9cR4>rͅcyk Y[beWTH  .̛l502X3Yb  fgf$+~@Sl2Q263Ӈcb߀Xp<uXvxaUZ DܑP^:_w,茀ZU:[nb;-ĮRDMTXؼ=aT=Zߓ^u&a#Zϡ4Z-'o,?-F< 8Y;W I۠cP3IiHV3w@. ]2O2,~Wk,xb _@_~0Uԣ+I>{d4L.SR*p8iX*(W|nx)j;zv]?. ԭO`x!gntk12 2 ?OgSoS(ihi-9whKMkV;1$w4s 6k8斟tkծJ^zEwG biy=zrCtPh(6t& |oN9L\7`-S9"AXAĬ4+jJeZ!LOiNi jG) k.B"zeڹlgnW[p[XYRaǸnnE@04(^aӆY. 1Go25f/V_]j_ЂG"O?9kNl!=|> QJx^3s;eplmB" ^,56T`Cl-2JpBv ,z_Yt‹oEyb,KCרVޫ8]}^$̛ᦋc]3*ѓ irLG/r> FD!o?DY鋯kH?+#SڇUe=-(cK0k jvs*؞ A08o_o&_E/479OeT,Utp}DmInFe}֡$#/Hx`boh1 cIa4vuo;֬n^AU,[49*_BKF+v y,hAog&1w^*%n7lM N keh<Ū[>D%;c )ԗdfX@5$4+}8gݔ¶y6wX|7/}㑣K`nOy>kw(RVh1CN`CŚ[=M?/2t+$̗["}r.$ 4 &QP/h8GFJЇYs'[\`t9B\֪ +[CjM ӣobeF0eW*Ihm@ԗnjw3qFjdJ?gh6`R[V'74Ύ2e^14I5xԥ-c_'*(2(=nR4%]RY8"-`RJ$nRtYmK !df3\9BQ__1SW=swPV!dʓ`f V 1TWh=b§2=݋JT:0;>`C+/gG:WBVlI`d y'pn~f.KdILW~D塱iJ #V6 4Vɯ CLI!H2TLpKPP0EYljy(\\3E7LW{WI7{ '퐢o \#RR+ Q=~}i8Sk|f`%]TAoXցCfSluخ־r1XgOhGޅ!#eڍzMxeM6,`#RG/>A2f|(rͩ.g-KU!ٟ,vڝsO7ۻ CN"aҸL~kC! z "lL5SR潐)NEh<%ݗ9-[Bq&$xuh/FU:GN/[լevcaXn`,Ԝn6O@,#cW:`ʢt`RX`g+b(:_!vk[HiSs0i#RҥJi_ ea|Ǚ;m$]x6ҝQZTx$n=$ȄS$&F bUp▗mۅ6o|aӠ,Se;ٜxG=gAFG%Z-C_ @jgNPU?Qҵ ~a]N]Lja AiH,tF&愔eSt+8G,p1͐Kb8ÙMx ,锥'=uv ^^@Em|ņun9p1ƛi3ߠ%hӋCim!{({Jµ*[{uK?T0\N)]Z< M˂-[dj7]U< v( v"?y+o$ZCdcU{60׺0$i(&@ dô> {rjlՐھ[2q-œY#d ŢalOD7a2(\5g]]2X3 S]7ߙTX;r<3}0f瑔;fF*0H0j:K֮DLˏ`[<@1xiXłcy}zQm.@7FPRdǐ cUuUa+[%y7֞я~}vG65 Ώa30%?G;:E]>DPͶrShvfthu>迁{,f "_n n`j78K'%i5` <Шrv I !ga" mψx:(Q5g .a`Q5MV`Xl,8qvrF*Zn[\}dʯXT -xcBFrʘl@1ոa=Sh#126Yk]=q5.;s(UI!Qo꜕,Ġ}}P O 5AZFTt5:CO4ԧJON\0 YUuWiE]DZ[v*+mI'=fx8q, ħ/Y߿޲#5qVw#Jqi^f%[Lx=k=QÒA*$6)R/[:/cj &\r^>"<6Zi_ ŷh1{r$MCmFU!D JU^ SƪlXVpu#|o2} ]lׇM@预rV]zԢ,FQ|T.Dږ|@.5e3d;"6|gs^E |&C84-x% :zC AkTt]юap?wC<|.Vo QyQ꼃FqY| )D~\bfgQJUbs(,бcp0F+LP\@/A!.`1h-ҿA̩'w%ڠ}ID:ۗq/LL4f²F؊q0AnEmBsc9񭽝#PU55XRsxL7 ?Enm)<z Rc*\UYeu[٧oT<Ԙ@ڪSE*q9 ވh~|oK/4sX[ܡt9C pK CMZ+1SQG=l#-X 񎳕g9g@^띣7Kb9[6Tb;n)՗B"e~ n6̜`i}_@L-ʤ+/ oxGyI+1<9DϬlVj69r f$t QioΧP3O֎Ʊ` " |ng/_yu6$v:3y fЌW{wZ!qA҂)=^<2Αc+9G:K7MC9Pryu`"' D3Dž`2ti5e60y G(4bc6/Pθߢn,6)x0#٬?y3u'W!ҎOqe=6q /dO~_T(6z̗V&Pg.qf O47brCzJ"3t@0&P _M?ϒ \ٓ,C(JqPh@o iok8O ,T ]Ԃ?VfH2e%+bMl@WD.NDsƆFU!VIyP s&]-VJOpo-綝F y o蘉EhQR/#3]rfLI wo/raѸN-yU̾t0? ld a/A{͏aܻԳ^A.bF4U"/0';SwP z\"ӉO 59˪0 F$Njˆ!OU;@ȟ4=kE$ʨ$n>Tp⫩ K8)D߫њy>E-⸝\vn`"C'o5[z'eTg@MUV׾y^>jvB߽S赋-S(ELОl23Lۯ2!6:aB9Ju|1|x><áӚk/T<1-ԇ?Oq taZȀ~b8l*M5Z6OwybG 5.5iw)8^,~ZũUg[(:ǨiJRApbjHX Sڽi3فO&M7sWHM(0O7p_f"&jT -O1 ڎWܚ6>!E8 \m?MƴxPp˟ҥ^ wtdJ`̘Y=-!噱4Չ?+Y0&Î%#PYSXۻr&c~h+?c1v%p+ϧ+!hשjvW}RWIҭmlI 6e,& ؋91TNBgfi[C@^vS`v4f mǧC쑯DZ\ṑ_ Wˋ}l;j; [C aKH]Nna#[^rx>/?TLBACri ǂ6knvJ;1C 3J-}YgylnY$"ICmR>mIpL1yW#5;-:*)2|ٹeGRaFikqسb,!dlԜ\jsyCƤ3{^0 -6$L>Walnb~@nЎ)r&B]^S˟s~2nK~&yK`#*4I𖟻KHɟ5^EЃ󑚂L 1GH N>E97$mZҡr&2qS\86еqڃĤACBi5wBx4E}É;p=Ӹ˞RY.rol} @o$-qnG;mş֋Z>le9 =oٗ^0Cx(804-{ܵ+7C.D"o2.0udnn:QTXa8Z?c`C H&+&4dsӒv}FeQ\TV>B lLY:CKt?C͍ Fp!BBh9bwo&RN[O72Qߦ.ٷ-109@oCj=|+NVb<& T`<MGmΆxs SOU˅8[ӱGbչLsU&)O,ʛCsoȖ>bZd+3ӵP\j{0:Jc31yYm>n3;A5t.c?q _ZA6_ǬE@*,vKw6A8mQٜpnWq(<6:Aڴx]BʷTv0⮎Ja hi3/TOeiʦFol^5?^u-Ծ!O/m@$k9(~AFQASΜf˟zp.cQGz<3?o%it*O5Ypb@qnua*ހ{ʐn!^,mWeXWI(Xrlk^NޔU*'Ttb@BCw"h̽J͆Yt}$z';>rqBqE9G%F mt8}pZ a\JtjKmH7?*皪6qV!|ET0 ',jƗ~d=V^*Jo8NԎ_]{坊(: 4kO?' F !yȱ%i: E %*5~?'#!ɟ~Reoy=ly[,&4Rĸh0hӍҪKo=`[UChJAy}W\:\ܥdԉmcQu .]\ VKM  f]Mp&4PmﮍdJ YÆI - U2St ⷒg/40;_{>U;#˅7Q:+$&v~؟tԄn3>X_k?NgWNY; Ȅ  SZ|rx~`NgȰEʺhChwjܐ7YxgL$}N_veI$՛+^:=ֆn"LA<[fkWƑrXMClWZ[xP>.ظ3X9_$0oTspk!wk<Rs1'+w8^ [<8jyu:59៥;\[ɃV1|cY6"=c^W8OX^nӇ!gv-w{ט2vFю[i.H ~3}iEi Y:e_ZoA5&5 <<{2O#IQ*- S7\lc(g$$+Xm[; E_htD"('gs; l]%aM;0}4fD 5ߥHqu3$C-^U=7ģ\i - >4T@Z݆/ELx;jЈr܊L_KhCƜUgѳqqFf;\b]HsyW{t%$ +"0rsKjU?ϑ8Ru76J\p)5I>hā? SzfꙨ$<PQZPit. Qe@|='V]EZ]vP~{NX57C̀(fW*ڧ+ aPsQ LG.0gBTa䁤/Š1mLQ4y51ޘ%γDY(O>' (Q Z(3I4tI;AA0?3Fe|l |LRq'[l@٨m\hIw?$h8@p\0M 5w"';~?:zhOBV# 8np.ݎa9|.FlѰ\e2ZP`D-1Cxc7  Ϡ: d`u iDh(iy܉?% T yq,.^ rmԈakQrq27`1db}=cۏbc9&gX­:2{p@Hwjڛ:ZO9عV%= ݔf8܏{i\{s9ZGExQyaN:=c}YfX_ *tϹO} ̺c<JQ%W۞ӒC@é {A5~ډܻAl"ZDq8yxR7e FqnXh~2 x8^h!>y~rҷT]NLS!0%( ^ח!.Ŝ#ΒlՇl^CGTIQ u넦SdfڼqֵBPhG)q />*>WyKZDߟ]o- ӾɡYKkw{"IS *_zio}tpGt E}3"X%Y*Xηimj|;;)z|zzt"wMΙ?RAyS@-Һ˝p_94G`;IG5rbi\N83_ h9gu0Ɣ`#B'Ȓ̻06"#QOY6X@ft㱸wϒڪV-@DI6`[d1պy+[WZ)γGnx M}(w~]趃LHQi+rn?.LjE:ds'|Y)k.vC9hI^1!5 dH5HImu*bav!;_նlDNؑUդLچwwpN2c p/z"3o{΁O]gH,=d?t+CYZVǰc] t;K{\Yi#pݎANF< 93]'w7ѫ}Sݬ6`* {rޅk zb![=D&;Ah@4?JcF\ b/xnfG,˳$yIGAli̅?+&iyxT:1Ed>_˅? ;\@%j v9eCH1+Q wùQw,tINYVGH96 "*.bTxn{ԑkٽ$yC^B/?8xpt6= ]ۺ6r'몥cU/)ɍo@G)O^38m} cҷdtQˎ_\)rPOAAq::/m:`:rx ȝGfǰ R0 oA37~9T;xa4,O4zlAgSΞ6bLx/♒=",R@D-ʆx>(Z*Ql7tT)_5gU;xg1{ex/CdߘQ‹ZYǹɝn; :efU?-TOK{&OWEf=V?tjҦ$IdNܘS()j7ЈR[nkx\f|Vz&!GoQw׮Ll]YjkeDmz358w2 i;*2x ]UKbRHzm08qʛ]^'L"'T,1z\\3nRB11Jw3ۡ*sn,?u$那_I[\ZzBp2Y[00=49Ӊ-o]V*_})p {zdxw%oo%F BLYg6ëd 0scg7C_1tۦ7N` $Q\-VBUJha'`9!6taN(M>Q#~"B#/Yd?etEWڳG+/v=,UV,- ,fkvмm=Qi ` xXr`q۶˫JX~+b777^ ;}_EoC[?(% p&+;s<\2݇JgyCr)_ trJyl[dI5{Ù=qb{A* |8 |vP]F2$X"ԝYkKyQ҃k $z!rEZE<^C.8JIe>,tMd KBi4m& =T9 8gCRC@@4ᘻ_}QK Ԑz DRV| LSwc‡?}v/<>zd hL/~ xFuB3I8erk}RchQfs%lQ}'HYnU-=z6 j IXFw4ٜ?W敍O/>P'}(=w:z7Gd=# & .#Zׁ$Ԁ?`{KrMYH>Dc޻Rׯ磆Sg=X?ZNMWsX#3tmu;W=Dܣ5Ğ(Y3N[+ FST'$!V8+ȻF%UB$j+:m-LFrK/=fq: v(c\UI{_&lFBH Dg"'!մ^>tUbT̼vp9ykBQpqQfהnLР»#DOmy>9n=$i8Ŝ 'koqNp1ߋƫ]~EpV0D2qeS̩@[m6͖zAhah ĜTp]xSnߕ)R} `kMQg+bq5AwT%CC_sMt7ZRg!b:;bXo#7JZEiH, r(o%I@Klc!nW٪7(Un g:JY%.lC]'!- vQ3CѴ'Z8ga0(MʰuJBqc =Qo*yXdʳ@#O 1.Ahwr@9]ZMuS&`u2Btӹ BiyG֏Lg7~l4ɣpMWZE}ʷ9yPT˂PQ܍ps5z6OCW "'*ұziJ۶D~pՕT$. 2J O]Zkm3]n,t@"Zz+6RhZ@Kty?i>lB/ ό>sP2R/_zTLA,X}/v.%;d?&YC 8BkOnR rF4oF2)4ML hSkAGX>#dMeX_\w@|3(0N ݑdۏ QkPBLGFEsv↥?xbc'eu.^CVź⢶HRQSw*lL»mur*n@1_>%0?ZdRgŤ 9e&>늫׀["qw VeR'(' Q WX f#-v̄TQI7 h5'Z*©֞>YfZ[x)[x'erX;'m<'2փ%𼅹Ӹ>X pqjrJŒpe4+_#Z<0yj"-ksِ6 4cܬ[qi;D/E1۠k͊@^E*麤{짖|}1M]ljVU{Ux*q?GX{ 6[6eǻ-aK h܏ y%dcsIu,uɏ \}׋:Q!3!ώw !fdXIA QI}d 9 oыCxk? (kk/‘VဂM* i:b]đϣO-Udt+i΍ BSVGܬn*ãlcq4t'td.-7<-Myr)U` `ϧ z{ .:"RV'̓Ht$u.+&[Ѝܭ=$T(>d7=տ)Dx u\ Am2054'A߬='`"]wAyzB=o786$`\H0WzYa[MQҠ J?[u+c_qnͲCz>^mUŦ3x/=_>[\XlAފw]"2M0 5Oiʤ>Rx:7 8>2 1$q@a#cݩޅ邀[(njDTuPf162u)];=LaWP*kP5F.X?T,EwGtֽ{,Ԕh|WߘMSk_RHm8@5҄$ݍZ:d _5{K=ty쀹$JT2tqG/Ѱ(OYX:d[g'"xLjlt ڝ.A";(:XPΜ;>Vm,Nhkڿ1*lUy}䑖ʞ1lP#{(OTLԙPGvHtim>u L[FKD^r,Y 7cx@7Qng7; Đw*T޾p7jtd<"bcpopIAe?9+:[+ی G~i%q%x?܋_ c*?۽ JAhS@dPzVس3Ca+֡XD/[~yҬD— 5$aLG rh0h1)Ⱦ1ZTo-<4ŸߒWB oSsv̱[*櫧.G0#,{jR=BQ|3\4yYUG/0#0iB(҈ q Pqv[j$硂.-0V]vI̾Ro蘿ړ-NV8pq^ioS08[ԎBNy4o]CffYTC|iHIFa閏v8`SFϟ% HpMn*s:5P؆ U2#oU%e6[ Wc't̀@sIYE &ڀ1T\ES"gFPV@jT6z `=0,]ޱxpe鷆~>\7m~Ew]L(k; j'XSb,jA hj4ꧺu1 ,[~CWB|n%>%PblKv>&n'o,$ mtYD/ lT S`$RwTp*_82*EAnf4Q} J膼HDp}qA.\< [Gȼ;#KȽizz)af.yI{ BH</s߯pn@_24^)ח:6/ʔ֙s{ĕvkdhy .DTb|~sC?Ӊ=%VEQL) iZq]4i9?p&|P Od7I,gQW.˂+GgO/1|Aƽ,2jVK4Zg)r gFӚ&  u!P2^yN'T<,`x*\\u›;Lˮ(,v_F߃]UˇS q3^OL JL |Ȩ^pw _[8Fԛ:k>U:p~$gȀÓl-f9쑜l苎.@@6~^Ck3#1m\7JAҪZll9߯tBJ2DH.̇:`Uܡl(ہb;"be]Гې;&"VC.p)[E_|yd+eSxvFh=YeYN,#KFG n+?.1 6G<4lH * # :*L?үg "ZUNWh/NHS) :qqA{m˧C})>$V,U &Z@y$pxI0B`h5d7A5-U/'fY%K[!M%)HFNt矱S>9\l8MH% Ә}IJ}d1ਰYUrb´s_ #a^VRBw(d8W:u,mJS |]Qezwá2عnHW/+}=$:^5ր 42q_:ke@ƿ㌵zWNGu-ZG~乡lJ'TOWL%E.QH*]AwQhN^. LzdF4w@xPxB`lYU0ylqkǝWbmvJuF;KHTNZ^qwn/im|[=>![q[4vKC_3ozSD8 Qڮso䝟%!yT-'Y95/0~]UP蔞2{@q;]H#M{y\w7'Tw|H@xq#Ugng؀I\Lv#:Ut X4E_2W@ɶ7RZ'#4/qiCLێxh$ۄidCcP?Y$3@v;bY QS*.> ޵8n6psI!ݾtgQw%[fn1{[WDt_>ܽfHOmkoWܭv+W.qg]/T2͈ 5L4g @%r˛Ha]Ӿ%#"c:z!x?'UvH&bԈ^:T ٚGKndNmf@iE/;eNO,KN) 5P#|E+9F~HxHi4^ܔn5;ğj5hG֗%\[,=O.Fz|BC斑jO`dg3*Lr-smѵJD2#{׺݇בPp3}Oǭs[iS ±iO+"5f8!4``<ցQ/fuX㑜@cŝ89-UBunϜ+74+ۦBCO-c;fĄM0v>N!ОP}d!@r16-mS6*x&>gaR,0U}K^5#Kq'c ` n3্L|xRǣ,q 8Kmľ[/ݭ<Ӿy>@'5#T $[/''L܀*,{%Ȅmf^/hQl_4pK #坭 ZlEET⁺i81>8OGU[ΙbD߉^S52A0W7?W!ݪ!ZRjJ+(͹ֱb5%3/2f Eg灼sL._ _YQ w ,>4$n"Ʋ]‡;+b dؽclÑN!A8rƪ'Z=9QəQ樕拕dK΁fߩGC~ef㕎K┄IJe'r~.?r6.55DQh&џ0siX[4;yRrAV/#xAӉ_Qt(,)+ĶK17]" bkBnrtCP̓k+S=fX󃝝XuVOK 5[N4ԃor6WَʬJk׷Pf "_ץɥhWY+1! "ڥɖ<lEkEi*"ˊ 1ڠ:)rݙLw@3 M*OxZB fC8Ejn-W(C :hk}'GqD-yD:+ʨe\M)gfJw[Si2 6Z^<fR:&+pHϒbz,ܺadvXYEeގႦǞTTJ7cG. kR^ZťfSMsHS$1g5_ #BY,R17#8"rm^'p19+g`H |06Q!ݞӓ@6֫˚loUizN:o'$+Y$ TH|E]nLz@jH+xP;ۛay* ܆ظ9Q 7 Z}&J[I=i|tX^̀Q8) }9ʎI] mÃWɞHYh2iJK&e^)5w< [ܣƈ WHƕAJ5 (u:$1xM'%Ρwl8~wk2ϑ6u[`| )O'#-?7gڄ\2n} zw'(ZȥZ4Q1ůN5 &Stgi^QAh(-gNC}12"ɴJ/EmIݾdE^6ƽc4Il^S=dT`sJaql9/`X[0(T\(C¡TnL$kul(C 8kS rխqӧ3g K-/ n$8WB;I3t qm?!,Vmm5_!zmv7fY+nbz>@ΏmF<]dWvi T-PFT!q8FBTyġz@tj)7T{ҽ@٣Ph[ toy퀰5 9)#:NJ0'k32@m&}{?rbKX58:~A/㤨CէhK,WW [~Z6]z6'uY{( )FsVa9ɛ$,cR{kp&H}?".NGfvL(]$%*_i260(qs9y@EU7B\8rO .by-P7ŎRr몵BH LޢKd~^(1oo>&[yd>^mϳ`Hz FR5t VPQ(i pC > OU M4tXj(.T$[CgYS 8⨫uz91sI>P[ c )X8K+X< W Fϭv 0Ňľ&RQh¦~6nze4*J\j-pJt\{Ř3**ηi9܆t 0sMzNjoU,þ[a3pz(6B6mm#7~k ߳pI6픶~J,Y١iWMul~*m1WGoyw|TB Eߩc̳0$8B§^#\"Qu0΂,T],J.&i}?;P7;I! - JcyZQ~>J6,JKpk0ExP9X"_Dj? NE}|¬@?}~bH؆7Ű)cױ|avžk^?Qv~KTRt7Ll@=&7SAE߾̾&m핂#kXn3YoVS!gFY#"h]F~Q8@JgŐ<gOx^EҕgVj8F@]3Ő8pͻ٩sʫ Œ@"#m|UhXQ 3x}" !qu % uiP ق*ХV1sx3$ФH:6ehʂ.fR2+%[m6,e@޺;Ls `'+UɟgoS6l9g# ^,Ҵl)L@%վ&?8W^'ZPBSE܇vW$#>Ԭ h#c茫nkӯ}3)s5哇xg@ |_ٌ]B 7_?uV(&0#:nAxIܞ@}0Fo7`zB_k1kaPP?Lʶ_)OC %J3*wwWh=TB N~"Lcc]uPARd+H8-eIvF/@Q`Au}nJX<̄ ->6M?iE#\ass%Jq >cZDƉ;=0]=6y&o.>hVWխ.{h)#]#M%"[f喉P 1d!Ϳ+cMECJ-BjsźB|רa+Oy{&/nɡ=2SfΎH#8xH<,UGJ? רfF?|fCD2 9y÷D [N?;-&X)c'D+ٜ}8҆%s^4_9e^}|tA$fFA 3:65I4 uɼw=q4 Va&`ΔXgԼ.n>!Nf:tBŤRL)]1ɎkC)ҳ# t'M#ˤU-r^G$ڸdĴX?:n^;F2HYH]NwUs|FM34WYZI"XH1zO\Rq w nZ>Mu.XWsa| =?7^{ .}I}_z쿰jY{"huޑlIH'a۞>s516u= so1sݴ+mOI[9H5ƣ̩ꬫq&NsM6ϘMaTt=-!Cܼ1v~)q36[(8_h 5˷ zyWI-.a1u8Cxz7P`hLm} c>t 9-h D.(:5rN|wW}'mNTF³eF v7bkD%4*F%%}/XS5VPWʹ7V(YVH.hЈA_>H I.3YuQÅ-vt?VrLD 5FdD6!Ws-3)nzI?!vVqKtQlywru 0" о(>#Q{Eoljmz-41)udę.r7Ta 0[n|c冠Q/Z)dϡ͞> NN'Dh) 8D5n0:t߀Ofeax `$7LM!A0iKg R ؂+F%)Β|pRbC0Ia,A]f?4|vp}:l@2bmOTU7Ę|?xӖRL%]9/٭NzG2җ"MOuvSd{F܂921"onjOÀ)֭?Iǘ.:N(j)RN=h,l88䪽R/]&7?tGMA rye%p &!8hjzC xg߉~J +;94"j %k'(i <[U 患ZTNd)AOw)U;[ /t7ʁ{s+i֋'>RzbGnq= <-n)S{N;O}:[;B!`ԕMs IP7eAVj~@vOVɻZNy6hHn{wBat֪- \FzcޟIS\ R05; ::/4q_=WVF式?xpOQkA[!Ҳys5oa:_?J0ץ\A+aBƑp3wWXfj . UZ0P޸Rf&w>:P lul'>D5m};#LtT% zPh YksyXe1oeu}Vϧ&|Vu3Eĭk=w? s,=? $4D+wĝh@uRE7I (tc=5qg@]x]Qyh| D߽0Vnr:4Լ}e D7GDLLKyKB==FAw%Y OɃ=&2= ܚ cE(0bm sKnBn_9[*,W嫐2x;Q7IAyP0PlO,~CJ@əBE`2 (v9(Հx xg7e mYUuPWv,fnN L+hU5^g]dTc r%',tS "cA-wUN Oe#9g~J&9(&Gt pFrT$䵕aRr<aNǭk@@)=h@8KWGwh^Yّ}~{K:L.a ՘x'oҖ|#ebgd " [__3Nt N?zJG(ծ[JяD\'-O!ʅSr[ gkoxW UJMv,ag A!y#WCAm  88vb2 ΨAF܏ׂo?ɥ6L_uYpP?gn]o'%&?,z&}+tx/19i:@|QjAvn]0HĞAfH$Y/R'DvR0^n=G2߁{wS]mZB)Ttp|Ù.Z|v*'ʈ1gh3<9p`e ,ʄ2>8dM.gY@J_Ysd:=>8ZdA*1%@ɰGCtt%\v(oԼ!̙@`G ogB5R2MT ?莇^> |a`pI]MNn嵔shӯщĬjK8}C9Hg;Sι^4(B%#7>g֒ R[xTI-ƏMtN"% doB*7b*G, SxR5_sWcûZfgD~vssQpq|MBNN7\1qc\`M?ЀzwWFxǢ/-@Ka=m$606.e?qL^>&έP4lX%9%)_/EU6zr;ᗉNwkjЧAB+IU}bҲȈw'\;^ iRћkZVVcqF?4wWg/^ _.3;s'ke=Jd]āwnKDPZHI`ER4iqNG6.))*7X{@硤HS}郟tR^y Q[d|0J` 3ν\_*ťyC YO߁+HØw,˩#*"vVҠgB4<Yҥ 9b>*%!¥o;uf2yAK4;!H<?t+F֋u> V# x&CUEOU0!qM~(_C/D֧**__F](/ ex )О`{h;zV5+x_"\$4 /$݌R@~hore{7MȑWI r;+4|vMzUhw\mEd Mݤ "tc O:4ɊJK~R F] ,ɪ9굜|shdC^l˽NKy?nByB#կC Ga|YR2.ap I]0}^zEwyPO&Xy[Y7 !%IE\02M\ᫀe ^W\[듧^@r@9֬:6&,)kt(?WV ))t㷘I& ʍ G;=":͇`& nS3/\FDhq}itySSR|^x :9d\W 'bM(ɖod [$Ҟd +Qɏ&.{tcӟsY íA$5Sdd*\g褳 wˊooL84rv-cf_^|c3Ϋo'#{%D8\sV_o;ZS`K?)Ȏr+A73 .IX@[㿗!NE |ϓ{)p]$z(r}˸?:]tuIs94H "b* >t.ԖXQ#7`vې|3@*=V4i;9Zߟ8 #%Ph;.>_̖(N5!'Ce"n&"D)/Ke^#܏?۾[R(_l~yH!`T(㋖iX}Yґk! ZRY>)U%M\(PiX`vǐA{Z!sƮg웬>dqR2f*}΄uK' (HаF)"b6sx)hg| aG*𞚜2(ϭr-"xߙ ZVRK!왛۵KF]Eܧ:~<%Վ%=wȊp$t>qPMO+AJDWS)| hte>ۙ )hZB$9!g>IdhJGY8b YݴăF-ɘ`kCj-uگngwK$% $ bJzlBlBM^d|Hu .fu:p}p<v[?it`^<|̠ɗ̿`Tτ]D؋䆛+.ɠi樌psjeV\;'K>|=P3@v2`Z%g_(_$~]__TēoMYIMAx9H5n<Y Ȟxªi\Z'TtS<(r'˹N=!#ؖgKf{JTJ=ZK:|XDp<4o 198 cN!Ë]4 p HExZ֜ K6E)QCstX e[/xPs4;[2~a9T=ᜢ(8m^Ȓ)`Lm ةRRSkRYK1D@f7K~Zܿ)^/f+4vr$9G•v!P,nG\ɦw>88cC`@?ejߍV/>a>%·%ߏ-%V نHh[Om6P,lH4&Ɖ?gc=8.MY$ej嵐ۑ 2n)0{A!<&eB، K&SdmM9p6i=3Ii'R9d0Ϝb Q9܇FkRSO)e6ƏDŐ3\Y:1Peu`$5!t*w7AT,S~a[}P=U7 bXHEXq*S"cwh\YXO^#u4p:g-AEN$S u _R[֨罆qDnMKEv,s }u$ɂXhJnpD3%Dii3D)LGP؉#|Z#8꼌%"ʏ6T=#$,mF5wXS FW_ rau(4La&1JX=y&w.p)~I ,0YpxIgWE|OnB`zxk今/&WD mHMUeUŃ:%3RG HXP>$ɥ[% }T NJ|-%h?"8 >X}r4<t_`b-U <_nP]t6u$'+ Fv2-,F$#J<GFHn#cSMNZ !+K!?2uƴ7lQEs#M "e"LQǞhFmZT{ir72jMxo)ɧbka+wNS_7/Oۿ2KZ~͖֢$}..m w_[Z !KzC-IXGԤ NO7SGl)"ťa=U'7LW^ }<ԨdGty `tu=]Bcb/T= M=%;6Sݻ-S5kH?06a@ˑkFq12`C$J4Rg3תْJ) ktKtlTXUt^im̫?Ex5UgjP3-cz*k]0"JDO*;kJ3GVUrXr&upȖ^^t^1r&:IrN\R^)=i:u۴M&_)D^;߃bk Zpao Γ:Bo͎fd`~{GsTU6P\v(5(t-`>F r2gc!kck?}5| gUk{b2S+u?Ѩ  L|,b\A۸ C0 YM6,Sc<]j$>=2V͑jBf޽W JFyGj Ȳ57L`QPh[>$0#P4IKS`8QM{~6Ҍ! A~XRXUQ( u"s2o %͙ѕ-!i ո&7 MGh׹.PLANX6 wbR[ޞs>CD ._PX[} "k*:ȉ* :ג$$fofFk "}J^@"zv?,vk%Qy &$Qoʖݮ7֯dE'mL{,|cW5&bПhvt&'0fٶJz1HUN[ќƽ._ $),LR>\'rC 3Z M>04;#HhErZ9\0$)2 LhQͺ++YqЉwGfՊMW9U(=NVo!Y9 b9~ HPL2~IA~eђ_F]ܘ؋LPp*`xA0Fz7E, ^_#p;&D> RNV-## im & >|HÀmu:i7C(*1MQ47gFXT !ޡJx>vS"ӿV7v2q:cg1`@'P#c٤ϓ/#/QպqDG}L=z3Y.%:gCsYDXp(,|ò^h$Ψ^C>&-v' \c[hϯ;N\9ݾ-SShVo115/qyH9бF׶AҌYňPؿ!R4=A/#}c#.:3}~x&K~N5{o'IKh]ҒI?lS6Q'rnD.YlO?#*lh ^JaSF[ՕF-f2`xqVwJR\lJi]>Ь)7]6zBlFhZl;2 ׬TFҾłtK.LjM1B=r&K! NR -I;3chf_[ X8 W'h@ILsXb3\.=syeNb.v zg8æZ56mL㟥սe 'gRJ4&,GƇ 2pؗ5`JrɹweuDZt 8  g.3ΌFM:Í*yԠEt,ɠ ZY ;5axHS~w^kSP\jCDGR}DErCБq[Aj 75goA!:5AA?@CyAIaQd]aXn܄KV)o vDmSyHۘL 7&1~T Zt(ڒ:u17 ^q#Ff,hZߧ*n$7iY$t @O ΤN7xKpe2#m|z/n'U\["k5uw&)&c iWi -h0D.mI[vV5u,n{Q$畎q(ܬ.2nbv#MUa>bw?~;+.,v{3Dzp]뺠x|j+{q݄]S7G_^9mQL7d`FY@v; *BJfCG:1-ckt4hKۨmn|Mwoϼq=K3s9Z1{PV8{9IŲYF. ٶXȑ8?'[rzJ'4m}t?8$YaO>C`Otrn]ލDeC3ع<btfqDC_sMA2:wئ$Є >Ei[̇[)9MO*.[h rÅ&ƍI/!MQV5){P)qI-:b{o#v3]pSH_)Ν0mÍ+vݜ]SLT1r\+Dܷy6|.)' tL(zRX̣>]gvZ;s雉c~r!vOux9(ͨ5B .M霎6<7QDT-gk(PzC8 g˅Gu/+o'igh?fٗ|.}d"7tO[λ' ͷ`', ڃS@_Ҿq~r+l6?",QξHٌ4u8ryVx]?ϘJ5RT/~n4]A$Q&_Ɉ08B?^Ut$p5>1Te&2Aܠ0ד|_"!`&α|1q#i~7Eh\-s&2ҖCyDEms%hEpvdKӛ!e}>`Q:A!0w_} eCFJh:fx G):ܸIR8g˗򻕘7;)؏iRR|TYtpIxxBQϦ eGg?Whv*Q&NAHDOv%R`"]Kvci,!Ua5OgU3NP"Y&=/0-aF#nm|PD7KΊ Ň<@7o#t8]f]kA%lOcjjQͫAMYqwtb?w2&ۼm]{0k1x¬A1 KJf]ǨOL=U=^wBjXF8]8NPzp1Nqey#L bH/̉NT=4n|2? ʍj9 o6VC$a!''wiT;U3t1}207/ubLA`/(D|A|u"{Qq8#_Ʃ*wKU!߱$f|yѠlNp]Y, %w8/yB՛̙Eݙt)eMeɂۿcT/y[(Y枟D28쇦KGfnp?BiYM r&6uFǫ!BV2(w968ni.^]VQ:=c.1k!;Rw wC5Lٔ8[AK^&e+_/E<K`(2uPCٞ[-VDݭKAѧ] -q]mT_+T(|kϟeuO?N/ j*5mJoUx9كٍ"XE#Xb ^?N՚e4Tu_a&(V E#$(2l]ԽS=^6.o:ڄyQO3{tr'Fs^rͱOz .JnqA9O^ŠߒgU}w03C(j 0\v.E`qv$F٦ O3Qh(](V.% y4ZZ@{p=y{ϓqlΐQ`񑇮͡0h/W4+oY(q7=ЬVP _=erzm}T$SZk#4( w`.^p[`R/,KɆ(hFE`9~YZJx`{~b̟ xrW?`{g'&L`8iLTֻ8QxQGdYk,zQlb[I|)in&Zޭ`ʑ[h1*kZ`SbGWdR80g? '\vJ9q}.\,!g8F.;)CA\f@:WjOa^j1#CV)U}] (ba- ű+PwHi$[o)=AVVsĿi%T:R0\X~~w쐀tù~.%X,xI aćࠈ]{&}%D{p7w xO48Ʋ?f 9%  =8-ӣ7.YH"Շ"Ffh`tv#>+pK{ԧ{0-vl/hE9# =z.W)*L ԏek'&V0Ox.~]@lo*#x]DfeBX& ;CIU-*j+*_7#{RѢCV: ?V[02kF(*6 ;.Paڢg>XA^\A^px]P ǃ ҿҞ ̊ڵĿ-:+S=koF,`)2y"nYsXaX rnfq-*JWyl>-#Dʾ*j~y}*-)Zv\:$%6=EL:ؗD j<48I2tKj8!ߣ|C] kLmO"ǚҲ#s -R+ Y{~PWmRZU5A%Vy`' <6o( nEAq@ʭGѝ`94s]lL%N| v<$ӘB*ԖY`c@/@L6@~>b  @$"4µijm#L'R9Ac2` 9G/,o"-ӲٓSը8VӋ7'jݧh`~ϼ&>LقK4oFn8= gXު`z PE0|CAeulSueaKGfj054,yQʱ[S.5<1qk5·Hwf{ݲ*`4:ؐPZW8]h%z3_҈c?'߂JV +* .<TyM(7O{8SZ1 >s!@3'#5­7wWUӥd?]՘3; ņ,t5C>^+nļu g\kjguXm/ Zytoi㽶o%qiCaW.Q/! UcMpPhKoϐ?bݩ‚H_e>W,r_[[58#'P^ @qMHyfR . G`A 6 2l&u,DCVOBL}A_UfP*\펓nCATRT۲ϲ=Q;p+ xdWMN *7$db'Qn#|*2, G| {@yj(9!I(ﲶrv(n`|Xp=zRl3auQ옧2OzL4|IJ\w%y!;9VO<76ibb6!YxzbxU8Hd2||%S$#wSp%zMRnl\A?xL-aJqqaLx1tnzzRhZ^)HhX_[AP)þ}:X-2/4qBqki;.J.ؓk=+4z8 - w*\9W)l%Sd#MC8=}Ft,gYyFP%l +fPA.L,e=aYDԯ'oB X]/Z@5IA*|fe/҃%+f wi3e#LCysth) =ĩ>3ozu\4 1[]A 1HtZ;B]%jӬ],3ڣU4#Z~P*|Uc2KPU(̦d]€g30o@0Fw7q}ZO'ZO{гM7~VtT)gnPu$ yox,?F*/ϖ5? lAi¹aVEVBq[?:"Oͷs1K?E)@juuߓz->(|#h_yӅŬO6fKgq|f4/.q.ˀˣȯ:@tÇ*E5<֠imă;5|3&~%go!M:^ȩZǡHϞzMQo~l/뛎}AhfّE(Kt9smRp5q*(kyd񇉜nG}Aؽv$}Z)i)|k28-y ƻIy)]'~:)3LQ=2Ē>bc)Xj u@u+V~2XO.zv om>M SҲ;aBUW[\kT׫~"~?Ē4u=C,`V3JWt 'OÃ,+pq6!=M<]*jMrI~iW0Zusu]9ɑ::a2׿]z0h8QFvTdUK,\9dF`xAb@cE %Hň&ܐsUSޖOR~ !ڭ.9؅55{D-ݴReؑ"}͉Q ,xfd)Y\Qb7p;9s?- Jp_56HP5b!M );t]PoȢ%S;KtYPGeTx=JbkAzs ZN"Lt̚Ep[d^*H 1QbVy+ .2fR?2ົLXu^)ec.s"(PΑ6ʠn}`ӂޔ>Ps0_Z)`p/Y~s }Xu +ˈU427cڹ3] ̂snxAε`)aw/57ߊ"cdl*u\b;bʑ r{)F.Pήm1i%4Vm{Kc1]siqLϫqڨ=z"迨e/{5ȕ8y|FcA#H,n#W2?*oTH;]t;JZP(|yyT#qX;</KzA͊ƼU ;6hq l8̗:ۢ{ZL "1ƀeEͫZmXGsf*1`]l,#׉n>9G|aqnX>n"0a/ಾ{lq* u?Qf<2gy*K xBm;СՖb0oI]d`qz{M≠U#YHe92]ыjҕRNד ]A4Jҭ׀ʤ^7 Hj~l8O;%QH+[B$=Yx  rP`Y'Nߌ nk 0S\D۟v)6{>ݱju*fsƑAG"4=LmT bNCxfz x3Ȭi ϱob90~nJzSJ& wD+ے2En|ȥp0) c@?ȸ.x(>+D=_%oPĉ|' g)qx;x̭hEkrYrFMwVpF1I٦D=݁ acg1Ǯ/r#{*'S Ǐ|2@k 6q;|Bk "҉Bo$?}ЁOng|KWl@+Jkc4TfշyyK<~qd4cdjUѰ֕|h\]n=Dqt^f }0~| Fu/5fk2m5j%zrŅeo bӇ/Dk ^e舓YPN*gw25PoQb aoCkƄH5Ð^dM`O5#Jb+jK[ %;TQ(4%H8OA(\f7g,GN1"Uwqmz?(I G ~v }MF [UtRV/;!1J!)iO:ښB8YAFȁ2*C9 e-c/:o!Ec׹SDtov p6Ņz“Yg'Br.WIAgLR 9/>aUSu s3>Ƈ&`/5=+\mQ39]wj`/LQ'Z ǥܦu⧬+Q\+ ۺGu\>(ovmː&45>IyK&2UC'7$g><#t|m:OoL -1O/k(:{yj`&W1r eTLLr:H0@53a:RT=7XX7ns`5_q&?pl!qfǓb6]ypWTW'+6C^q9Ō핾ݶh+hJ¥Jv75Fu2/CfU  @ ̧U=Ԍ3yb-:76~0j %֍H{e~cj׬8 +pa'oC)! J{`,^{Vr1Q|6&ekֳ&Gӈ:r~P5%GSz!duld_PNtDՖ9K DGbX=,0޽xC6sO ݐ97 32xt:)AJ E1N,,{M.q5ЯBL!YOQivT~[\e]1^ˮJnbfE uNMT4]hk2]^ua<$ߚrT8cJ AV]61Q} 0aڈ%fxHk{\r!ZMD]MEQor9ݶhk0ܗy|WE _̱zJ a`L!brG?"[iN0,cpܟN`O8zЏ~lSfywR^r=HqF~g4t̹ b|2&+C :‚U ΙҦ#9?G=G,<2nµ#_GI58=s h5gC%~xPnb,mdzFU5wHqﭧMR?Q;sYhɲqPi!#1{c_V6u<GБfqĝ[7>ŚnyI9d{h$9^Oc4ͱiˊv&uǛ7dひ_MDa 2,x!7J7!mjܮ:UnvVᶃ"ZZ x?:datvTD/0DF. a MK(<7Tȃ.OQ[8/dQs K n}g u-u2'0N\S-"\Wv`6ΩqM7CR KOHU{hjj.Bl]dp"u;=$emGZ;MI_dNP2Z: E{bd{;Èjɹ)Tsɗ0uw" M}~csI73,dH9Ob]J~mb{bB vez (SEϦ獺-w/ڼt&:@(+;.gh͖؛ F<_)ô8kkLhjx]Xn S9߅>/$C¸ #[@¹ n|WA׬Qq87dxsˁ"8l3w'a>%sk_0Jxߠ@eo .t?dj$ TTUOYpITZU+|DFLEC vr̵.3\wB iVvt,KcL& -?wg\Lđ&qQcȫ Tva `[3Ć0}jKCobdzS+Ϳr Cs }|# )L$wYLg7=R*u&k![. d w>)Qio?7w6Smzi m^u dZr"nثK!-%Rv.BqNtL8BW V(-HY86[N1rʌm:1BR,.->"7ַtjB0}qLH|@:G^* e|̪Yꬢ4vpIlń jyֱX B Ffg@L+|agH'XƇqWAU",P؀d%: ohpij\ *}j= ׾ ^"<' LJ[7F7dZNN.[;wyIϥacyLjaU\6+Sd|qj_L`WF<4b%ꂦg۱=>{(Bz܏ٰ fӧ_{URvۄ!2-XHn;Ee.QiEXGlXiskd8TmϪG"V@aF3X6˔B3_ 63H(0Y5m0j,r%@!E' ya\zsJ뮟)'1QQ">(ٻ&[^C0L< SX# ̄tTkK-%$E5GD2K8ޏ&}V5š +*n)dv%,DEKDŠ:S +Ŵ (?_ }xA.3|Q/ӢH#6z^. g^//M=J:{ biD=ISm42cGmGOܬjMW| z2P훘DSwlseL΃Κ52/-i`c$EE?cYAvuCo1A">o-J@ P ;P{O!M&I˾g@}6Rv HA<\-(hi:emp9vW'A˙NCo雼}$(9R@hhMz5_j6w͵[]4 tqPkwŃeFՄrfdpf@~j:ho&uo(0XhT[ +/g4:|nAKl2z̈́&K% $䷁±] c9zYp__;w%LPHh@6qU RVis7'Gf2*X{,au[+c!,Uƛ~Kc* 0T]Qe:c b7VgAGO@XD>\x#O]b Ӭa$'n;Hcl}\4xɧCh9iRI7]H"c,uZh' Z)H(.Z֖=!;aHX{> er4;=jPrsJ+nޮ<̯AK< ZckyF؜=$̤W4rX1Y{Mp4o0 S.LiVq'kwiGOZgtےrK# ok4ӆn3E*%o-*HdDvHx9g%#LkL7od(} 虜)Ӧ\+ζw^olhdHtn(nڍ^jACɺYY>YYtc){Odmv=lA AsZ 8=Qi JxN j}0Wɶw[r3,Xc鴐:wc`4›`DL$* '<1+6=8oL. 7P!~'܋u͒m|T@G •lНWC2(NϪ4[B!=DWJǨ|դ/oEvH}x:ƥ FР*H>#QnFB@+e+\鶰VgN-w5LIкPƗ%w7Kr|-~d#l9>oeˈ䮮qLJMԔ޿w3WF ¼{5rav1Xj1͇7_`#'+fD=ս l5kxJ.EJ=g(cXpAҽb '4tcxWE8@@L\n$f}5d~;w`4;E5*8 ķHe#lP/$#tZ% æf T[d5r"NŻsgRKPMz8s:gt36x.zД [(.w,ora7d[5`=q\+ _.[P; ]X[lv9VM'}i'\~2K_yP` iQac@?LeRey~jB)z34OvƨJBq &NQW`Z9,iUx5"j "/%|=ʖͻAi^LfkHYֿ*Xf<}`5"z׎ud*4'd+?%G8(mW{2MйBOh #OBsMez8$J݉eHV ť Pk;hM(K:7,-;C5m GD_M+d!T"# \|x$~TjVlTL%{MUbNOҋv\LVf ,$OQXpwBgB4PȺ#zR-+.N<|AeI7?ŖT fLp…;a;ӺKP]%PdFęJio;3@aB=b\!/,&FPPt)?jU\w|3Am6UaPw)1Ɓw&چ9e:BpOYw͇x]LoyqU f%|oOruԢ!*kv6_BMؾ^+c) A)}l=ɢ!)rIx*g'(: kȞtl6S72QՏɋ@rsA"= g7"7}qCsJ`G;owk}gIb [ug K^d4IV>8OA t~ga`fg`ADbԴX-m:/zks` /70i<|JJ㵦 gHp- !ܕv ehP!{X^ [~-$:#E1H' JO1d H"'O"1A>g~Zl`1OUK}k @P T á1+l*e=5dH, jSpNg+p,-·9LJc ab:Lc]oo:iд)@ʑNhn:$jSQ.CyJ90iVs]1U12iQy2תQ {cG.  iWpn vu % *`^.2w(7c=^7r6wdkS&۹i>|oȭ@!dEATMpjm) :׃1T.Q9`*jI#e[GYmMl tW =!E3(|.8T"g 9iz?9]/AdҞ4@FYN&-9u6]kxs`K]5|gU}Kle,v+C[j13H:B:pbVr x9ׁoh鋪]3rt".8.,ODtJ GLswZX$cn쵕tqSJ{{A^ v>t~EL=RGA6udD.^,ihr5XgBo]eՄPj>6;1% ɮP aY֩e@*QPʞhb펨V39pR=pNɹ=E#9t!LS<-7+*I%zq>C (kXsybdtj?(|wW֙w {`bc` !|{ NR$N;'I8aFχ]Ķr6l](DZN[0iۦTYIw(1G,JL<Q#i=O%A/;g^n=la-PPC R ^VBQN{``p#&$~w \!M]^YAz [M'ZPƓ{nkk|kko˛ l#άՌ ?oYa=Q-Mʀ85/urN3ȉϠfWP$Pq3V5}x#XҶ p.m`Z4P `xI:/mso?iU vHqFjb_=Cѯ R(zjlxw9{&W1awVOc=7 '0¹˴a_gk­άaQRC{@ArlUeȬXg|q 3*21"BYC6[>$DG#*2SVªi,bψ:TOcܨw;L >TF&1a)Br[SԂoh|KqӴqBj& 8FޤG`kR oa2_DwfZ>^i@I FAE>GVLǢNVs5oCi ̵4$ DvN?&#.uElJu*:T"%{CR#c9ΘpP+h*!WumwǀЁWl"0W<Քz4AǛ'|+ s!oi [Y7u*<N)bVfdOF )"kJ`'v $B۪}NKGj3.OHcK}b訷}瀗'Od_w[=>:!GL:xL]1;/ܛ(=("sDuMzјPX K.$POm0O&ѵ2VEFhLdjdTx"IC,]ܚOhk7j.2%7,"W{qeJ) g#\87{Z JHtlB 򕡎mq{bʥAC1ӿA1+Pw!,-B,ͩ+YHn0kxwi'-4n3 ／ =`p 7͌qG*免❆.HցZf/v/wՍ\E ny{@w8L+ E#5W#\Df95UƢY32diw>ؗ1=P@=:'[94|S,pW]oW[J:ߙ^HQ+Yk(EOBc^t j&K#:%NpAzX#U G0QrV@;%fs 3UGy[y0TYJmΏ3,1n6fKDUzzFĴqUSrx߿}CV n#!6{^QsE3gƲ)O7 4P椀Z 1}#5hA3 ۶n韽=iuuvn=f<Jo0)|u-y&x<&6OKS: Lk;R&n:!+s)m98ѧ-/湶x&]< f0+wbmvɗ:$}WY[a*'ICD1,8={7,1Z>1.#yPF蕰`eKCWˆ:܌S7i1+>`}8PEb [4dԹ*!F2iJD9VMhⰷB~Yh b 571) d궛RrW}R$95@4X! o(51e)j\/!t]%rι3OT1K `PF i/SOr$s$XFk 3OatĮAp_qXԠ<հvfl­+N)~uqi)4I*絷~f&;fjP,[[u =X$o?mwƨ,O3ވ.6P~~횋 s ~r,)b{ SH%$r1PP$UM&R*2EŞ2~4#sletfl6`Kh 8>\,-um(-2*o5ysDYG-E1V3nfw .650/_HI %HhtI;0^qDtGМp*,vH!u D>(2r>waTI'~n ֡:7;SL 42>@ƙ_^Yj';}9{74 xdwja;[PZ+jب@ƌC&}X_O?i-,bki}AttlZ*v OKs> \ ?Ģjq0'МYgiGO6j!x,iX7>iJ*61J~!FT|m gbCab ڬ /nC`cǿ; p! ֖.a7==Gi;<UmqX%>Dt@yS$EM{#a``9ZY=NVÝl6܇O6 G]uV0nUԯBkrЈ`mfm)M,lcj*L/8zD.WiSKCz'>+˹WcL&]1t.l1`aIe`h-@8Z)Ud"0 k}&F;;/K)3ć~#EλDg0{IQ3'E+L\p]3";&ֈֶ% ޱL@Mntk%=)D|ԗsaN27 Kۜǔm8=/ yO{a"{9d L5r'aM*&74„)>}G&~ʻ}dq< ᐤM.Ev5=r- bv]3ڌ3[&DoI+2_rU8VZ#'4RD:| AC̨`DQ0^=wN``}QУtǺ~Z'=MTt L}(POj&'H kU Uxb76?ř e7Kwc;'*Ȥj0 ۱~kiJfvZӴ?!b^fbi@>.CB˪bQ|O(]\=Dte 2Ug~x[ JhS)E^/12KWe%*^/#e֢j}1 H' 'wM"ƃQؖm?mhamos LO ;b?wqwx~$F?)$Xh!zԅ 7k2xA3Oޚ]wSG0̕wDWe&'e-<K 2Z¼z%'0c>Hym/Tiq((4ZqύM71H8 R!HLBTi,b=|( r\,WCJ zy:@__98U)X+7Weg` Fҙ5{:ӤPriדykx%ྚN DtTt#g+q^qc Aq}7\U%.Q"-0Hͮu-H[tRx;;{uk{90pH[q{[HeJk Ҧ^Bg%A^XwQ偊'o#ɍ@GގT6t>冨b`z*>`Ne 3|=;rV*Π%1a%v0 QCs~Um}%:W9mL|/}VInzͲFB\o9~S_[`O9C$ hB\ZS#! s+'Y'aXLELiKddA?/ ff@vGrN={С!:Ij@ J #m!:ͷM_@*TJ+mZkg[Eur/e5My! ,Ç^. rPi׼|hLH/^W8͔,26?~]vyc85 _ƴF$Y>JnJ=Zv \I&ԉ^tD' $w?h@y| "'CCpul\} \%1sN}W(Gҡ_7Tb87@ b󪔺;zRe e3=;J\NLdO\p];݅~8ȃQ%o<9Au7a)Jjoj$]{~ KFE%oEtv~ FU°P>;Wg"e,s~#e"uk֍icdT8t6OAD>2>gĀ 7x*8tヿ<+Ay[L[)B`I0Knj\t[fcOBqRD: &zQkJńb {φ=Gw= ) miM_DRum?ͷH̷D*M#@Dܫ~|G)Q}K.Q| -X#܉Ѥ*'0O Փۊ% yaM\lO!`R25bg05=58% e+)(_h){{[ ^ bm% /B#KS}K"4go~ 56_ >!AQ,ӏJya 8}q,`%1QHe~^2:TSa"l=ݸn\5j, 7e?SS\thoa$T3(W$T~ HcB8@+m}My;;r!̏KL#)lqJ P1,%;R"CZml6g B 6 ={Q 0@@,fV$m X-lzEdMFx hUhT] *NA8G5LCF'"B*< ioDHZ\M NKo\X<7Mh03Ar'4fCA|s`TϬT3KFgfN `"c(qH0D=m͐Fɼr2kc0)D=0 %KYhDt'w[CȐ jXp9Vo'–uhvGН?4uI;N5C.ȡ-+n-Q偏 Z&2xG` U oN aNEg=fB%YISSє x|߇EIVMv6upv3C 5 7.X%wgtX=LEoQyd "V/pP)I7dcM!]E_\qQ?f>9#䬒PrV6ֶEs5@Ml+긲V:Cp$<aNΪ`M RA:adp8^W)d *w7(Jٖ>ޤIfճlH5M),;0G=Z/œ+^qsɼ>nuBY\ El{} Awf ޗ˛ܺ=SHH\OeYuO*/i&9͝tB$+,]d9e[* -$;}ʲ m -=_{յЬ _zl 2pxCúGM]\bXݟȵ c)Z(m<%]l NKiIEdK}z\uHDC/6॥GփEG?9@ ZH1i{_+p& iy~R$+Ӆ%ٰiPuY*ݧAomT󵳓]:=W'47WNfP%P0hD&xKJV᳧Zߊxݵ= FCv6!7}i}QۍsFW-H|Hч;`8_%$YGG=+;|[/߉iI=[6 xN6X/]n#BuecY !QF\@ ^ Br=J0|:4rQ-lœTXvm9NKd+2*j>t]>JY5K0Lu[{OAkUmm_!op:.ɀ:pEqqK`ܬs8l2ӸJC2sPR!C"ݜ+Hx (oj?bQxJ7զz'h` _cγ )攽bjwqQyӲphƈ2|lQo陝n?،{N+R!fs0]!;Z;zn>[I5B ̙]z)j{o-;=īk( .-㍶HchDAq̺ ,KL޸дd0*@Zbm_/i~0/ʞx`~,`ӈDMb> !9:L\কPhRrBEXo4!!a'? xSNlbZ9 x7o-Y@@/ 5-Jdt8>;! 8O@3]ɪfԕ6L#u=s,eZ%tZM_!gؾATlj¸q5"r?QpϏ7׋nsZOD;ةX%xoɣq3Ux[I<0ÔW?ғvRjr±bTJ: ot$S_aUt[>͡> "kxXuŻ-o.h)p:k xOg^ڼ7p\\Y%ܖn3eF]Cs6ً5-eƒ~'5P!!塡JӰ;Y69Jzw@!^{I4 6Fk?(#d(n@ŜrN&V"ߞkKDtEAW5al9O.GZU]s ̰Lu첊vnuuA ii%0W}XHrc<\*&n (̈́)2zdNkNv}\h{M%DBMX<.l?GٟB\CqlKqƈO25g3QL)w,4 S)$N T*O{jHrgH'._FNx}Yk%.\#+_sʻ=QJ8GP)D H;m*P|ҝmƏC\oa^(&'˓Ÿ68wIةeH h\G6]!+ )UʂXFv{"jW])iK x7V{w lOIU'= 4śmfb^%MscD&H.9fh7Oо I03;qEbh"פlyy%<22Џ49`xۢf[<:yPˌՐH6 {c/TaEicv&;:sx?Dx(Vqw\n}Whە ǥ zOzwhf.}E~o>n2*+\x7xhCVGLJlȵ?mzoRgy.΢e2#TJ4 n+2)=w6)M(ڂjN?dPJjuuD^UxVT$S֞I9- %/JغYwrXʎ +dXQT+|["W9R7-a1x۷0}ZcJFQkhQVOrzό1yDXTm) =G LfrBMvX i%%tGIx918 L=̻ EP$M# l4Jm^5ORj_wZ̥9Q=)Њ`#K)ڮ5+Jˍx㈑>@K}l݅1r`{P@]I^A&?EʪF~m/p Zy~4{?u3tݘoZzJÚ_Ai2rVa%رhtN1@ؠwV|1?x]Qd2#VU[tiػ\n 0CovA~*.bl@-^`,98(VtzA+KZfc"39j+H:\Kig pyKW>z_&sJ|RFy7P.nOt)YbEwР+/%džfP^꬗z.]5#ss_Qzк-qצbQD5s#ɬ 8JRC_DȦ t-rRth2 ?;ٛ!xaq\> .|m( Oi8k5#HF|w\xWPn,F@ZFތ(}_ fշ% f6Ψh.3] vgIƥ\n۷IU\[Ѻ1K:Wc_9Gedx䲷0%$"ʠUԙp}Oթۢ(7ǂ4=K=zd|/=Ȼ (8æߤ%@:v(>QRDAT.p[`Y{Mkj= ƪN9jF485mF!,OҔ:5|] H.3G}#<: 2~ bVO4MSߪۺv9a g}B-ǟmM>e5\ UV%_ \}lc1&?W$f \iԈ޴ 0pT92hMj0S$Ie95EGR`CGA20^tfr+PkAXjm˰ݐ'kX)|"\DCOb~Rߕ=#y|ۛW[P߬"LxeNU[FYJ° N,o~HCK^ fl]gK#zDu pB̙A.VDNѮ6D9훜IG!|K';?iܜ|!7 J GjR@սKUGg"?)W,|yq^}]BvOO|LGPTtϗwr qO; @TInXﷻFO.2,Q Ǻj B9esavg]CI^$3' cv)O&rҮb 0ݤC *CPtu#uJU%*WcVb>6fm'ui]kA$Pj_(|oP(Pn $ʂݦ g|uTrg-#&qw8L-$dN 2lոo.M +@&Y&bϸIHz<%Ύ;\3"$G)85 Qp[`828 )`ׄKh2l"xzUƯD*T YBcO1nR]z̋3Yr& #;AH0:]Tcnꐒ6zӈl(TaDNOŸ&`8j(3VΤWHahC'IeɯRsB$%$g6g6~wk/#ሢ)pW>JRp?\='ђužjg8`4Jnyh30Xz Jj8,X@2qWš9,)@ ےN"i-G1Y{>%/Xo[+(!nT! =G̮qQ6g(I~j zn(c|3?!R4bA%D fn`y7~9]'xKnpP)+q.Vb36(WI {ZUs]P8!LYG/t7'>adV%-;O=rK;%̲KrjDjSV(-*, X/RT2u3yuh]3XZ,Mh*.uJo9-)PIҕ&؄ڤPmk+]﻽༲fNQ{/@k~Dz ){zE{WWb[ C=żR/L,{nV/$n ;YNT8*>?܃L`/7ZތUI׋$4Zौ vpm)O'?ʘG: |pҧwVBɒ䕺d }sM匛):zb &z( Za/~쪍 ,'oE/X 3n;w~ZV.l&1xyagcNG#wSc]zP/z; [)&. Hl@l)~2ۛCo#7El%\X ű =+KLW*Nrw֓*lv=!%o~pT~ `'Aȸ\?(p.~` "uC~}-oTK"LR$X R0:?RleL}*:.S܀Ee¹{VJ{}-BP:H(@L8S{Laҋf>A}{\HYRpmȉ˷G7BTV;`H`mntKG4r#^z;@=oԋ7;1ŌRGow3!Akћ!.;-u־f~7~N4Lu:u4a9[x֭a?ͱUGMr9Uf=e}C$M,g:* h+Īqα쐓t"/mY)k|U[h%ED3eej"fUir\M~ʂ\`c_P ߨ] L`RسkQp~g@;՗Ap+仢䉱Wo B}u#H_蟋[.O(IތÀK(Ō 8 Wvr;e/˰ʏ<[]P%jюPCE6 &6I%bH6j뵃(|!)۱'mpKq؝nXZ\:Ȩhl=Fs}6awEeY#g>7CnϏŰq0! b_3ؤǐ6me޹ԙ_((ht#Iu7wD*.s,BnpŸ<&vmꮋT_լ@ P;<՜G@) r&^hjD^Nˣa.(UӔS#¦tꍼy@;h= ΜUQ!^~s;)ejC0/3~R3s'CfIT TiXLAS_ͣ[@ȑjN8#9+A%]aß͍L1 q :K{)qK٘ol<&*><*D mҁˏ"fmp.'Ѧ 6:&N LA2,bC-L_ ;Ch=c}Fdžsc]?5Xtܙ#f6`kp 'ʑv?XpNq;(%ħ@C"[DD!Q Mw(7 [oXnKf?95ԣRb*DHOzn _eG-̺Nnӽ nB230V,1q=bSsd u7b=uAKidzt=?pmxF3$BNa]x" v_ɷgӼ,:}E% {wZwd?`m˼&/kJFO񛒊ǷdbbgDS B'vVa>_)l@Zx9;{i=حqܪ}~:܇ҧp7a_M)e bu' [#zkR)f{C8Tn0#Ce~>䘔1C*>oN/S7,:㈜K}ozeҲ cX3N6E y6Í:IqacEFj+%GLW;6VC=ζOƒd͇{+d®03#f45KWؕFq0|K%ݤ F+ۑ}/AcȐU6t+f OOOun0xlO Coz"oC鼦0eEhW~iJ>9d?74 xٶd>XbZۤ(Qh`Nsm*1z\lI:.?`~puU^-,+%+ +BH(98O2$ͼ%Yl14iѮ7l+ jOAHڠ# 5ݭ`V~ƤrGG3k +CUљ&q` uix h^ƥ_]^P,Zp^:͂Oghޓ gh%jQ:HAR:QO$lZx=KLT& h6 $]yZei%]Vb⡤kPI1^+V2d)@ȳP&lVˑuȤ( Ola$d-*+MNm<HC[uȁ j.m<I'O1 ɐv(ivղi;-4?Mqۗ≯駣΄r NB [Z՞aT/x"xp,61>YPq;}ZoOQLx=Bo j#*l&jDd@.. xWPVWۈcvFuN7+SdiEvP^w"6tUYvDe;XRAuwBғ-:M; #3Lm*^{<#s|e\oQjT3%Ex>+Y@4< +W*)/M`k^_A.z{t5'_i!Ղ#&tIپaT`_3zUWO{,7mT 'Af /a~zG ZhKdV2 Dr‚5xyW E\cLZ .%^(C6ztp~>mn""dh>EfQm Mְ?0ItySLrZU;߈-%Vv MX2̹'lּc]JB% U23^iԔd$*IN9-5ưz~<}f٢I^k6]8dQc>uy,;&_!>/^QD_/ n^<(Wu~D(PƇhf#xg/VYյTc\~{zC-v5[+̏$CR,LZdYXǑ^yyOBc&b-:>ӬvS&sÛ< =6;sB3hvE (> $~{N媡gGz58qs2ntn$Æi(_FLY\J8xz:&2 Ӏ\16m}m;u%Q ڣu[7.ڮ z -/\,&E O(b>Z{\XWe R#b$p巼/Ŏ&XB1~4X, bp :ie;:3. tQv4Yb{0uoxA۔B [T~a!N$z'-a]c'9U2@.vEG>rkYd(3)Az#3"/A5nci Y5bxFX=VDb{2pwǷ9#=eq#A b.bP߭i[y {纣d!]QSlhDgdtɞ; V@]b" moGF<|: n j3f ~JԤS ;v3UQ\ cY? IɈ?>MH IJxOxAhs,vr# ϔZYQcõx%28ߞ@C=0gbtwIǶheGD|UE^˓}^Jor Sl(I;3P  J- &.YCROă$S%xh_ Q<q,êHVhPrkcb] +ث&UۍBuǏm˥ @cU%U傿Di8GCTx)@WQd\X([ʉ/[bK>Hu;aپiz5#MJslP;:!,+tj7(%DQ5Y5oepdN,41AM0yv.Ƌ¡$D8F{eD*Y$4\ ڢZX;vv/H5`aV5Ku τ(`$Y}1NP7/LTi(H<_ h F1'P.GyהƘ=0۹)/.` ndLiӶ}DHEG>ċyS=lBIH) NCܳY2sqdgђ~Y6ɗI &,=+|0 "s\z6PߒF29brHH*GO ?d.X_ ;Qd-Pd#(q#V/=Ux 7 9JI1{j|KKj#풦 Ԟc1kiZO>WfSS0qTVNv;>y.wPp`bAD z.(>g^w/ƕ\'y߇W9} v uFUkWc_c&K+uV⤲44.?&)./^i+ 5mVH_g_SWy-gr7EZ2M<&m5A("JK'iE}K_W1fÈ!H"}!EXD?"L\%m)Q$&A6+`~zܤ5ِ^%h@W G$X|%s_o5)+c#-C"_U"Kh!(G!Wo%sq#y(#] 퇳]r{^,pfw?PaQY3RKV&h&$}+?+C斾͆IyPwo#Mw\}Ya^k3 ZWM3j?al\;ƈNv#7}ap#(Cʠ~3Fʡ8وGCe|8()=+(T6[y@ :rz52 "r^U,1WݯVL>ρ4,zaTO(FE=7j4mJţ\ l#,Q"̈CMbT;2PH]h0íN4|9 _wE%E~Ƈf@C 8?]O]^j1䂜EkH Q{ 4UX(+gAPiM+@pۧ=o xe@Y`B0~v(C/w7O0alNl M^C E%DZj _%3=Z~͒''bÙ5&0bw3֠B4$~NY՞it@xN 8/im[t 4D&tĂͽ',F"rCˊAe3Hvlצiٰq5HuV| AW @>ְgik@n/Cr)a#d+c  iʒ=ے2acT)JvN:Dh_x3j\+{i_(-GL׳b}/ԽBAwgNxء7|iK4$ނ ߕBf'xDuhz} 6 kI)^He>_ٙV'H `qiq)͢h,'z.wTdW2K1g$69QP .LSSЩV0a=JO2WަA27>U|4v=%G> zP;Շ.O0Ey+ sS_yT5B[( LZH F2HˮGnICt RQX'wdlqb||s؆VRE*gό@^gJIf T ݹm@]a)ZE^:t+Gs ~$l18] nA'$VtMJ"]V5<ujW5{mCl|#teb]w2`QQ f탽 )<# +`xR9#\c )gp9l{M=`W{؍s/!GbHǶZ7_~c,&^= gT} F+Xm~Mo8BȨ&બ0. k/2 O2|{#h@ NbZ/qifz=n3tW 4`w9``ꧾk— ;?B?6خ(ё z<`plc\2k?c'+J=QZƮ݂$x(R>_Ͳj닲H!S?EI=Aq68,RZ8jݱ7"J0uXd&j,+R42 `_cwPkI?#+ uR`gm{HkѨV Kgc~: s|Iuк2չ55]!~Q\"ڝ@){% )J1ژYIIbX<8 (4p]*_X1O a(es+ Dqvm~(~flBnUy VC[1ՕF"]N[>kfˏj9.YBlvF񐐵! 1Y̛"qZ tQˢٽd$GПHs\+Ub*[hѾt\{Pio_nߒհFVcHp Nw| e4A%$O\$W5ʵB*u7 rֿZL8^OұD3"?܋b,?J}wkP>:c:tQ I0Q]ܦmu0ܒ=ljq/ӯH3I5)hwLf)ρ; Mzv*~s`\2½fzr2dubkeArF X5:n8v@3pfm2e#Nr7ul;"ښ7^sjuhoaV"* P6t4h6Î٣b}0 HO n5m'*oӎ=*톺L- *BAg* j ((xH4cpKpR$w*3ojD4љRTaRo(57@Az4 u7Mq:]{ITI{rj)h6r)k&$.dR-.7F!EA"}z%AaR^ED@<vr{ GP9yhȒ@YN}x6^hOd/CXG-X_§ٕӛ"9lN CAG XuAY$v{FV2,SX|T"(TXbzG}9J`@ fA1>raEx,،@+}wL kfoF.JjÜ?l?i[j)L9(VuW\"3Jx7E]' Fl 8, ,b'Qs^A/g@!U0c)a ZgNe}@1sn1lA~#rgc{zG]z3g@j>|7wB j:!$QwۦeKGW=$ۖ^8t5,0-==-Ʀ3g, Xh6O,aǏ,T:>0HB>wfuh[UGQ:6VbjJ,!)5t3"Ê=3T {1̺7E*}1"RY!8  A` hNMuA`G±u'󠿌%H4]8[]&{ ¹W(A#nk]UvmJN[=hY*,χc زJj$x!ȸWѦv!-ݏ$,Ty(H"{ UObdb q׻x27*y4&Rf(L_fd3^0GO=&L1 V9~闖 gq ~9jhA azoc9Rap l<'Co΀OxH )%%(58^J㝠8* aLcD>2"m- Bχ*#^ulGd`ŵީ;A)`IIh ~g K*ށ1^ Th!k5g El{t +MunX!>?ǃĕk/. MrL͈^;E1GYD:wVQf}:k9u;LqL98&G"dy W1`t' J^c<)U*i0T'.Zq^P7"+!IQ3 Z .S[3D%A7[j ^r!|@m7y8;o5D/3|LQ`a8py MC9D=cȩڜG9^%1z9줺KA8qǪ옧k_RO9$68~{¯Z o"H.w+1XK~@8u"[4,=fq`͖x%% eVeò9P,BH>ƒ]UK=O69ӮO]/[D7  #[Qw1#gDC&:yV<׆WvS37B@6*DυM"zHcnĝ:8N2,!2/k -"FUd\7t>v*x0o2F=\~ NÇEI{ll C5p S{g7N <^BC(VvIg| ?<~I5?*$ۜН{G%|EK0R1:HKjOUCcddMf俶L4ٓ$2ꩈUZrq nBS d&fE`AUWk6m}#/ FU+Ջv"}OfCj)$ۇѸϸjfxbdyTTRX¥a,ƪ6\NɌ>RjX2 W[ҢC^$I=c`| d<}WJ_4M#IȰwE(Ut+4lMGY(wt0h*d2<x=IO0]&!Z5ƕLZ8~h&9Fc)k5@Nγ5d4߸'>)Mߤջ 0h1Y=F5dAe}t)F+t * [cN5+gLל 4@($`1]ޒ cl%z :eP͂„/IjAՊar6H,xalšNXtʈ7))lp}O`~MJs6;ih(Kcy&\Xٻy-k gFZQck^$F/,;)1Ө09H'2B_իIj\72<ph7veNu8TFf̦Ǫ4ZZޞjzi`(xNi"-*DbYXŒKHĢ 5:϶31<}5}BӨ:FȜ}RNH%(z6]7b6YT5>~Rd|VJ&Uw GiM c2A$Df %W[wk(B47Gw^ZO%ܿ >su&YN-' #!huZYa^:$,/:(#fkϒLaCpl%`$\NU6Fȝ sz"4,%`.c\nO;WthJ#T!q{,5 \F@@QS4)pQ1-hP,f5m1 Ȝ\Lh_yS~p< cZ ԃM6_O1gǥ8z*7P[4**ŕ iz(aP`˹ЍNMx!dGX}%dS<6V|Š6{lw8Bk̺ދ ^_+ΊON6*A}5_֫`SVv^Zznj?v e~ ΒF0="I 2 ) kDV!L ~UMG,TňSw(G簅5SS 6(1z{ ^%GE_xG˸ @Yt$"[">6z7`J;^/w6`\f/iY`2末0qPEZ h RNKQ5$BL9z ?:q-Gf@R\No4pYRɸj0s "ӎ"ӎߨl)oolW?6&* N&LsR 11Z ⳵e:xr3'69of21v \AbY@J؜ˋHxBw"6}/ &t(Ȼ 1V@dI7P3 ”TX4k¢3b0S&DwPpnHH(0U#V_{xprVzH`2oPA{rJR[2jqHsײ}+G%q9z Vݎau!8/|^X Za$^~&ŮP͐5tHے-B҅O32Љ QC>;$t6hIO:jT ?] )5}6 FDhʓ4@l&2*}HWW_~ԓQ˼ \kf@!Sϒ0Rvt.nm|au DYÿDwJ?VN?k[V2sNzU9YAqy (N=52OLߏg?x[O~",4??m=;r̲l'ȃy׬'{/}^t퉙/m 䃝hnt 4M4dAcqW]և_b봰c( TY6e1U&/5 t3^_ $$ޤ;d Ew}nLSZ0M e!=@*4U`J\Џ4t{L?5-`^ Q^Q)`&Ung@lH p̜мsa/d۬Z!-p[H*Jb֔P\? |OQᡔ ҇|xBUx6vm(^ c+,:y羅Q pZ Ȝ%3bQ4N{OmgG Up:Y~'H0`ī E`|ru /_-t4gj F ΛV{v@B樬aJia: ~%_3l+n8R#fV3bPJ 'iS]GcU)@8D#BVr_<@(w$]"L4ѿxkrS#s߶ @Ղy܋ޒQavg ,q`GE3ep3gJqNVik' CSA֍@U`hxt-MmMSÀBLCLJ+,.G+8Θ2\SO&bbDwxa^}cUI'/i R89!@Ad84hK"h,a~-is 5^imFjC1맲9OA__τ@IH؟`Ai*J *$]?g.1|5J*tfAd ^x&n%ed'H+@%ϵAZ*fשxPklvY74ƴ#`}[?yrU(Cᜲ[TĨFd(R5/x/OsʑK+i9R2B< Ɨnqh$6juo;Ucup6`Y175{?kK aR$v~L])JBm% 1*٬ʑEy a(ӳHS?lØB Bi;9QK >1l j&=﵌dGg:[tfj{Gzh\h!f\w`r4`>G{ w: i[ D/iZRo,7ضM{ s:ݖ\U1ACЛf[F0|Y?N)tf."4PˁC8à\]Rl6t(x'Ԗ8VB@X_R~2*=3ژ&Ƥ5 @`<-QxE0/[[=f?dynnc"Ke?m8ĚtIh/ڴ=k_ˍBύB6ӽv&[-aY$o#ay،X%u]-]6m#'QB(v ="zUto"EԱg^fy2]y5a# DBw3ƞ.=:~i>_{1BGR~*e[yN8HR3lu957 N;1#\3}]xK713b5oKS8RmǷ^9(Y`bcAfFrll5hKے[G#^(1J)sW<aq`SЊHa,;&TBoi.5t'"e7FN3$O0 8 v0;lfT=f 57M6)ڠgURHY`tt*^n]?nd@8'7n蒸Rj#a/oQΏAFށ`/N 5A 0sd2hMeTb>[z<$oWt4oUbA9J%UGNL,Hn@agQƀ0\GajNAiTt|z\^lZ7@ ň}*BYRvd@%]LqW ܯL+J1Xu H*w\D(Nu s 4>E8]@|!#X 귔.S7:M~P%j*h}%¨&2⚞kT cQ崝 )J_xqQ'JVŵ0hzHpaiU:"y9Mhvr5w!adKCy-"RITʩHXV>V.H-2f1?,ZZH Xgqi'맟#zs( wغbȿ-QS_~F#q 8hQR Hd˄kH>l sߺ xx ڕi Fʒw@rg( w=$5)6d=R@tいTX c}N%yB=_Ė4Y%1C7|WhW4íq؋IqT&qt($~"c XoGf@zѢ)J`՚ ΂}Ƒ>GTH/agqAsVh!id< |,띊mȽ2%~0Jo[7{V%t"T>V^" kXLD@^TX53LA? 91ÁW8׌Cҥy{0e0> vbrQ ǑV3ԑŴ[ҭ &"\^J2Z2>g` .g8|N5a܈vp/o5$J{eF4^as`jPU;:^K6_U&A62׏vn~0U2QoWr3 4M BIf78OfN%+ g*S2A?S:XpA46Sgz p3|յCqS´p[l n/itڻnƠ;4pGϊ}OrT!4KTWLO%.FFj=c͆`(S+/<~f?, q8>9V-Il-jV:[(GIAL_sUٱ/(._MTWB/-Q=B8l)r~#_U0Q弈 ~M/Woi,I&htrb"sm8 f]<Ju+]cɫ3:!~)NE`9˧ $`vFYx\X*4eToH2{֮`Ll9G5@9Zz@MЋ <[Ӱ6XT[nU-bKBl?kaW"_F8JsiŤ%98%šaleQjro 3gU=Ɉ!1!s^:oK8A7.k0L6ݟht$GyѢWye1GDl!U̶fxs I0QWS7߶Q[kԯmUI@Wv`1:FT{=GT϶am]ru2uDvqv.&?4)( .pwSRybTݎzSeZxK7{{W*|:srDzU5/'%)!=}x=%!&iF**2Mq![ JMI+4,(fd7:mt%miC gBq3 >#k-[ ݺ"KhH8G͍S4b2K|=OY|=!yg4Cљ 1ld'Y&-kOAcrVn}4Qw XMJ 7%k*Rɧ[])*bL-]ͭpL ZĮqwA~Vy7UpFy*V:m|̾)?@fPNqNGFZ}1"+$I|ugÊ )ZeA?*^/֭Z|mm6qM{J:b`ODyUY*?HX1tɗ7pW9;ċ#Dϭ?Ezm=VcTl >'H~ZcOf X6M~K΂w+E~~^pB7D՜r~P>m,ˁ;CPH^ wg0^)\m~ "{p$v6>ӻ "ݶ?8ȰbwvdL #$畒^VE 1_ ̵fT oR#AH؊?~?>-of4}KQ~\G|4~eI?|yW{&gy#M3у̀OLŵ%J"XB{q޻eǗ IG)W_Չ) 2<d!K8 fX{\Ʊ]o{^HD D+i2jN f\ '#doEǭ߇٢\ܗ֙i?2:blLDψ?p:Ssw/zu}=ApR+<.b eMǔ,OV)E G!)@wk"I(|s`?&PA lH l”%%@ݖбU+z6 s\ {B)==I'vl'NүXNs07әIyVn%΁ 6vRr-<*g:c73P(<c?^1V46h:,ГbVh݋껆`GKP!.: [~mx778`XG[FM8MUH?`WctGF ?$ȳ{ 䫗d("D<<^qiJb/s ?1&q?1[ZAaJxx [A$9Y}O=Yn;#lϪQeөV;w)" r[ZgC[Vj oI%Ʌމh7$d 'du&(Zڂmiog c\ME?\'*9O=g Gdw%=r. zl7u {2azv+M[h?`lz b8Umս#o3v|9h5WW|C]LekmJld,6eqVIdkI .5$ r~9 vfȋ`CAmq@ݢ1Z>- &⊍fƗCHn>L}onWsQzDIl#Гμ"y/D z^)I;̫*uN -V@ iEdL"0 v'IȷX'y) zڛ"hLG ,Z{XinlvQH/Z(w* ԞIihy12UwB}%Q-rlF \08ɬ c*'tx`jcmĮ8=^X3钄okIfe[oN$@~q@[=k=b*K\f[;^@|}*1'\l (`[ȁ|}uUGbSR2]PaJEٜ56%Ur1']ML!E=pMтhG;̴~D+ cXgI#@ػ{׻\Q [/>k1X?2rE6%2|E;4`2$tpyMdEmt^JԋXpI+G ,L1KD~#Il%(< M?QIFiLC͑hDGgvZ/N9%JJm@漵Wo/heog+gF`+ƭޝ5d豟X(1IbHkU1$Em͟HMӄɮ{_e;,eAc=m+zNRQxܨJyCՇqKR|7*&O`Q(uF9?&=1ORƀ#YLIb+g>'Rh+/3[`|E,GiG)_B!Յ) UjOD;PYSxm5$ )R67@$WoK4zZ~wA;xkEzHݔUUf8[ bU 0iJaQlB#,9ՕqGkP?!jҗY.BjF|_ 9In%MEYT wfyR&@[n@ZϷ x r:E˔y%TtVLH6`\)&hfQmMƖA򿑳. TEzA...yX3삌G/jBH&ywo3bg9&˛\"5wg֢H_k3A{ eLp,>zXV0I*=v.+جV6P)6LBgrdeVu{/M]d6m#r)כ\ }D$mu_)VζgY.cgD!cu)[6 3>4EV澖2B׶`uhd`%$*hdiU-8P0e+4Sl$1e[4W"5FWl(Q}Z^, ӭ4-yA,uigs-$TtmZU90ƢYIୀ-λ;uB^us(H'92 YvJ_ |zs=(bu8U5J2wϙ ,$̤B-(ŧxf4+ҡEq8 z>.:)F*q0Ek6w @ՑǐP~Xyun+ K =~%"WDd "Zoćx:t+8$~7iOO:m " Iy ~K)I; *W^ ȑyBv|V+-, DH[2PsqRjހ6'HqRK\Խo_Qk$R"ޞ%cI7xIwN~,9쌜~,4Ӣn3W[+9/>_;_3<0/;dFWKem@jU(g >ufד;`ی<˰ rkQ^xujafw8lcfSqw(K}<5F)> & YG5 G@IK4gu2m3R˗i4̕6@Q;ч5_'򝂂Pa'. u&s1.B.ҦEMIai9E|"Ft0oz!Q= Вbw6]G3-lGC).e]v'& 5{i^*T윂3U1"*)+Uu|ixXX^bLex2H:vwZFHIya`-3T=FZ1?){ eВFo٫=D{﬒Ư*{{Vmi*XG;747 @DdF]6s, Z[Q2eT)KH* `D> Wbܭm0S|~azgbuɷ" *Lz5}4~glmݽY}>P{)ls6]wuJR7âl  $72l [K3⬉jȯy0}gDdT&ӿR_4Y* R7=-_b`@O+ZTIwhLE(:kLp_4ݛ1W!Y7σ;UGw%{f]kV+iyižǖ)V7_LCYcA J:Fr aNdKЄ:$*lډ"v돗52V ó䌒Փ@RCJ'u˗e.Z >6 ENWH,Lt޿u hDmCPݹ bdONk B2ۅԫ[nU.|89{Xb\?LQ5=GL:2`,]D¾)1/!~Nc@2 gi[7S (IU+C8a?,72􃢙/<S Lٔ" D`HbP݀ M +g K*##py: NôqlNM9JwD/ճ_ijB$lGtA6:YN3-CLKԳ:Z_A:Ak-` _3! #jt(w<ҏʟ\wO✯2sFCN6=%L2$`n[IQ?Ȝ'/D\t4N[܃Dm+fZlj #_粞^DdʰF gLaIu:y◭OavLgԂr]kZ`f}֮֬;HjٜRlG?wUjZWj#>,]bZrpk=Nj5gh#tt_D:*Q6kȳSSsǟvA-2/?z{׈kx j2h`w0,j,4_*jl}賀\}gEt# UJNWӠYqpVd;]Fp*#5gbv!?W"b^#K.}3^3W#ӊP3 EQp+nX]癓o*dݽb=_Zh=< nNF++rxD (1;R5+Yb?>w\0tNRP1_1 uz.Ok+3~cϟxto6s aK8\;AFՊrTP&?i剥K߼lߛW—mU-ˋjxdr"=9N9+H&MJM0' +n@;ZNs0{(ѥU@0vA}?3cM%uԨdɳ㨩lR} /adAx| ?R;5)ʣ'Po?xg 'W7"IcT4h캎)>gRA.[ IvW,)cqἤKy8 ~ ys"8a،c;Eu²a}RO^9j4,ﳏi e>{-a]0GxP> ӒGj2trY i…~6\Pʃ"gdډ"4۪Btz s(:[ v\&/ V:dBЧ57w6x/Կ-M#@:S&6K_@ i^ĀuT]'ZoLNDbm &ĶsX<- {n|{!msҜmkF̒n&5K{.퓾ʕZ?aôH]ZCE&P @,-D 3BH"AOemaO*ѭRu 7ϓbuSZA|2L7TfjXV9ԎH-j1AUv6 7 ihBl m@LrFY^y,_-,@_p m%DB":>R]z,ka?Vo _gj-x!1~)"LZefnM=;u(?@d'6] @o˪@"Z.@w/s)KZuYrZVJs@S[F֮S: BY\U&k^{|w>rNeqAS. C~O+XG{$p [j7ўUicAh3םRG%sAP^Z9# tpd MbN* XNHpy2қD1>YʌijBoR^D" 䈈֦/RcdBPTp@O0d WaQ͟6G\emfZO.cpwϰəl8P TSޮ,ix14[kʊaӒˏz p&ucI0j`>W~YYw}^\6T?eK>Leo="=uaa{VRl7by2u衅Ƭ"!v^=k(Z%6:"p{}iU%o\PC_75Ľl3NƠ;fk]yJ?dd!񿟚 U<ԣFA;^6 pldWr`a65Y TDޢkO\vhW3ʣz1>D]-U?-qE=g.f(yکFf9wO|yAI ~/P||@($AkWZJ d:LS$P|D?EISl"}z{êΑ~h4MQCpy(*gANK^%zw)[We&kVBxb]&}wyh3nhJC/Mngr @3EEAQ_#b6# TF)-$pEPù78ۈoj NK}+#Rz>ݛ}`ũ DW$*Gό5tԂO'(cK%JXZ5\zk1L\B q947~^pgz\T5sKDz{ N;ƂNS zѢ=Guy`^Љ%4! U'\=⬍s)&ms9XZ6<mh6gOI!6M @z|GELcQdetw_ުqDHj%r-5%ZͺJtMQE"@h̕cV.Nܼa1z-SRړ DwfzլdFnn]KPņukV#\<]]te|,jf`M!G #B65)0[y"7R:0=8c#(\ڶ)R*YkiUj+м(F/PWo77u\H8:;RvS3LΪV/jԔa|Epۻ6i=pwP^6f V2dkk>}E&ՠK,}ؖ6aGKߒ,#QO>Pkߨ{'h4U4؋hj+Zƫ˃A#@Ne'LJbƟ6x|w+4wCSo_eu1q."iێ+<^f;iE*,/nHTx֥YY ) m(g@Dg:$U`CfKR=.pIBw- 1vq lq7<Ͼ Ȉ{4YoB3"0bIبK0S+Ny P kԢx:c 2Zwa@P}n.N'[؏RLP Ll: @zbtڑmhY' , 0g/S7 *4<܅pkZE ⵏ+hcR+-6=!lG3`(Zc3^ObǺ!oPlCtm 5*djXB}hqZctNBb_6P:Q %ҞXaW]E YȔ#_T gm6*+'Z5WmW9xAZK/lKj_uR(~juz7\ll>B \m }PƘ *i liUAO̍D}uDG[ S@,5P7< OBWl3$qp?)^Gu^2 3g $8FJ'9o(HX}aR8$(8:f!p7DV l\ D9BM#Nix.s^BpP0{YA,FX-͛~݋؍7p6{_4d9ۀf(ظ @OhޱYQov{?jx}8PdKULs" cz= YERlYTD!(hq'}{ܵG u2 vsN7>e<]D->fvktghlK@ʸ`t3e~*MH !}ލ(P{X@U_db2ҥ :2V )~~g|n  )%Y \ǿ/gpۋb_qβ7faCrWz :G^'dUF\.iξXB#^t@I <t0N6te' nkKB%KCL4?z}" ZZ퍃R}{BA<2QJ9+ 늦sEKѕ [kƕF"ք>.[ R ȭ*MFm8-֛<M0mQ`W BU,eߴRU3nQn!j̇ߩ R2+5>gI I@.p τt sa/4~"xL,oR3WGӻI|=z ]e!}բy\18IN߷~l#b%wmM~4>? 7x j\^E245 }ʷ&(('`< XE YZ