sssd-ad-2.5.1-2.el8 >  A `{U]"f{Z|V4qUmGШ DhOɩ BnIKЙ6| Π:Sq\ A6/,Ipԯ0w>mMҝIvF7VyXB]5KѲ&ZF{' S(ډyGnY^r|@ZhSɇc&o퍝uVɱa!7Y_I*$=*pP@4%ipFֈNE×ϴTAo(@)NV7ʌNs'hSK 0i9Ct*/{MtA6I@q:|V1KwvKW%qH:~o*4pB˞3=hY8lLwN7Nf+,$EH7âψԮ]zzCH-r^ՒoEם0 ]Ȧ_vo?F5"U7q`&i#^+;􋴡C2s7881b19e7ce9b432184152fea03fb424f3cad4a681af100c740b319df7db580927eb2504e0af70513b795e79a1d9d7d1b0b3121a"`{U]vbQX=n22"}rbqPh(2!bylp|HX2؋/ 3"pQqOX7̔w}Xy ֮#l !*gYm'3Ƣ.fHȔ.w ?ޓeOcg<{|y[A?$ϔp5"bUWF_ jAfǎ|$'a&s gZ,[ 7ێŤ#SMXFbg I;!©a0lg> a.=I8nQ33{c3Ǭ/#l16/蝵EtǮd_Ln4i)XRX3[6WڅSFݠ^> `><7mnj&=}އKʢL_mſ~k rh0Tai,AviNɭF.6)ddFMy߾eJ<&E, f(eTyl>hUkd_&xgF:F= >pEj?jd   2 3PV`         b     Hd BB B 4 8 =( L8 T9:bGb Hb Ib XbYb\c ]c4 ^c bddeeefeletf uf8 vf`wh xi yi,JjTjXjijljtjjjjjCsssd-ad2.5.12.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.` ppc64le-01.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxppc64le'&CK8=OYAA큤` ` ` ` :` :` `@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.1-2.el82.5.1-2.el8 .build-id01b6cc484187526e9f73b3f16b2847090949c92f0d4e65c06a1d9d486c7898381bbdcfb2eb78libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id/5d//usr/lib/.build-id/d0//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5d01b6cc484187526e9f73b3f16b2847090949c9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=d02f0d4e65c06a1d9d486c7898381bbdcfb2eb78, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)55PRRR8R RRRRR RR5R/R#RRRRR"R1RRR)R0RRR RR2R!RRRR$R6R RR RR RR'R+RR*R7R4RR,R3R.RR3=o{&uV97d[i(,z .!z"&@h ̙E#-Uave/nL|+mX QPgkdJMB&#j/4PK*oSa˒jV &ZѲSu#m>_OߺJ:el甈=nvSV9 k>1pZ[}@ƪB|x(?#uBp# DhsX*@$6Hqp4K8pCe>NъVPmxx`"n܏2.M=Aii"&\kywGhZc~a,\=^9Yw'ʮtH*#a)5jEQ48pCɦ`nb[Y2F M)\Wf 2&qH<;= *j ݽ[؊d55KV.H~ ш@)PM(;%kT`N]3_{/=L2& 6o~3ې` wne_ mB ˖}4|3DK$tV"Kww@ʅ9qѲ?(N HAms>c8 jJ"'o24ūU8  eG_ϐ|.d6e@ DI s ݨ-]YQYS$ISӵRB.jM4 2jJ4J^M_̊%O@*39\P䤜cO?)h+W"*.|}:4j[ P<f bc\&TCA>7Z0ݑc;V"=hrov')q!P}$1އgs8v_trn"jԠ8{cM/[WD: $+&W"GTrPvb_(9U[ 8Ѻe"PUKɯWs.DZfzk2~ 1sMMx0Ph35mfH- dmdLzʛ]椼uA&65'7A[K14:WP_s̸ߔ]'~O H\ 1fGy|} i;7իΪe a-}G2E;4jHji1۵FMv;fӽ/=]!7wS='[YQ3| ^ \sp+w1=kqő\ԽDžㄢvLxD&dT] PL{y:}WI6hK pWZ ĠB.xBxҖ"Pz#SG$WC"/mkY? d"-.)=#ǨVJmڨSV{~DtyQhOʋmC2>M0t`bJ#T\x a)R{q%Ch_De3hzp{s]WLqwH A?D5cb_XUz_R%Nơa+w&Jןմ8J\IRSx00?mU O 7+pLCk%@Xo C?- Kwv᠟*}p*L+cjo%mԌII/\GJtV%dxg}} }.ɛau8?y~rGҰ%||E#f.2-Cp:@vT"KA:%gs)2 GsÎ)O90Jn4Es0=BbpaQ`OyֵJ/.J\T}3bͼ&9aCBXw]䵠 oN*SX?ƽuuZ8?;l'<п#צNFfkcxs L~WITCBe53d]x6YPAڀ}{:ms;>éKĒ&o=$7Z1H<ԜA Hj~F,1+`pB(W Ͽ HdQ{+?!LnkH],/,ѵv}{V.eDT>]qAj= [Vvkf Kj*{25s-Y9˔9qL/ qԩ(<%ybT Qu 6diwމ䵕!3yu]}Ch@ϼIgf\x٨i%=苸lTt%( 嗊<FD+^T=02"~H 8 2@;XYݔD~hMI\d T ȱG>,=ciN"ߺMU߭Kc! /P1e^J3/ܪ2Z}iЧa#$d{ pWQCty)A㾯 K c8t\ܺ /]:1M)%L*0i=(g:gٓNqj=^t^ &?hǓf7ʯ[øL<ŷ5]yhOVEԱ(Z3#c S+.Z!э)8&DW_.3cŲV'f{+ MBv,\2'lrm>)Y>AWM;Ʋn㦬gĘI4LC,.-{-Lzj_oOj %-!wkmCy>Uˁ]lVق4͓g{(P>$s:F2h'Cfp3l""P0[eG&'ƣ邢yD4yFH`A,>XbR'o[ ;nJ6c@s T]ϏdGz#aj=veشBpwFYlp!~Ә[WA(tT$V#j~|KFHR9mB'°1ZY,\ 9DKf-90Y+.a#\IEUۺ& 0J :,m:&8|y&\n)%T,S wG.L<3'%98&>OIj$F vay0(؊K{:]5ArixFnڅӽF3JL=&O>bq[Q]V֫() beAm#V> cWmr S!H32O#O ^rwİZeSOnToo.ãl坈nQ;Tk-C3J(u@ЎB,Fz*9#c_eo{W4*fee! ?9j"wX`y\_k(b,E}<52g$)qdaޘxDN86S)CfiXm `= Gn8H$K,Z"i_댓G234J2F@1N8a7w"}ulp 9Nې?kR8LtyG~;sg%pVd]dmCJ=(w/زni a(!'">.NXfJj -Om9UQ#nWPЊĂ-u)QCb1d{0WN5B{YcSh]eW>Mf"@6A99t&Qt;8gvd8c~ߧdY˘R[Z4L )Rd"\pׄl MlA<.ݷ IXElGee౤TߢjFѰ5{PO7"3Ͱ,ߑ'TNp3ևs 4:%0XnSWC*З}5^IZup"G3s{%CoW>77.k!=ht,Nu$D 1 4:v#8w爐:15J9?3 QM9 Ê}-X(ڔ~0D8Af@g#/WX<66}a:qU4nxzƪ 0ڝA(/#=^i S}0OZ u0x/miKodJe;MN?܈X1Us= £hs$Kæ 0Gۼצ:&MR§O@D}?5V+/*.Ġl<}^F0Ҥ*M31a0J] nMּ>&ԜR+{GeYXacuHE$X<w팥djhce*,u`0 YlϴQ$o ?V/~\юaX}?d-vRר:_BF&IK.z]L&.≄ pͼA r%Mھ\g"tϋ H`3%91;6e(YWǜJZρ {M"nմW=5HNK)ی o{12"3ujTw|Lv;#m^F "LZzlGpNj+'4oM!䨻{Y#p;87l }T",[f:BI*A3hZܠwE?]՟<rt9(Swu3.=01 )D2jU[ Wք>YycQ%tB`λ90t~rm ܀)`%au["eԜ[#س/a+% ?zjȚ9^+\?+9;IM^|{T<"05w.53zzZ̷^!:zȆz)W4&Qo +t-H ]̊`+.q8š Фw*p5ǩiJQl@[Dqz ²us>4*dz D߶G}Sǰn,Ħ֠ˋ붋:X ׀qA,::O#* 514, mM^Ɵ/b_(>4ŋ ] ND9c[]vdqV6SHkQ]C~8pQDX"@lp6}}څb.(Jr@HUREKK }ɻ4 Ыx:`@:(wu ԞZ3:*d7 AH TEzж9d"wANNU؅32j8w̵[v+5v)>rwblE2dk}z|ȶ8}r~Q+, ԅAE)z8[c|;GP~csm4tw]<;X yV 3Ѕc%5{wjTt%2 &j l!'v}S}MD]j(jqV.s'D+26쏈UShx>jf;=hB}8uJI3KeFf7znsȂ}uwE *J6'm0ok>'5Ma&0vSG*:u;Ib.Kl 2V\@EGXpOPkfGȮ߸Wܖ={+N,uez'’l8LU(D#}V|XڪoAKfxD LAz$X|W,u"П+; G@謹s5}''0o ĭ V4%?'vR1xccG@F`úӆ@m)eWr[l:]-(}f mS{_+IJĵo"UflkOC M˹=6:\DX}Mgc@}rCSEg,bb19O1ٔlO9c$q Bha4uVQ?Tq/>ȨuCgΥ &(P<;qdhoE˸eF9y.kd@f-BF|K, v@qs=, S9sR4t6Xg:V|)3d}^~琠,X g] #%xah3ZtXSXP\#e3ݼ C^lo}[_! FC;xGx75^J;ASW?20cN\-BbvABt-׭=Lz"陇}y`.ϙWRjz=$5?ɪħ6+s~_zw ذ/F1]>9QdTRdJ_5mR&;>sI7љN{"s%X%GV;Ўu X^޴Ri@~ƖKj崰"/<&x}Uo˞N2[Ym 7o'ԚyS$XVתHE!2 rJxcۣ2rJI{# ɖ79XjNrot2877e /oYцMS2~wTĈ=Cf'tQq`[^Rr%{!{g+)Cwre!n^ Tٯv&G٭z q] I8q"i CLc% RXݐhoHǍə/lIB0gf|i%r2|=+Yy'DZ-g2˫#Ce+m;*kobq+'i-m//C#^\! b f8mq7ɘrs!?aC 6Q`xDfdݘ+IT pġsN8!Sc'm'i(&U_lVqFG/E}g!6ϻ ,DR-{d\2H *1fa 9n(-y%s8uqr_lVAB{G:딹^nL@@WX: nLoz^Kë,zR!< Z?)3'ˁtNUEGK 3!W\q:}%[bgu *@!ؒ$Od4ƒhQߐ!a.4:Y'vjr}vȴl`kΩ #M*mF'8m_mO ^'C:?W{ ovgWk5Lj`'8H;KΆ\Ũǐ0t|H}h[XdM[=>1pLhuj\Zk)R{]O/vc'\ dvA#S# %3=3`G&HslV4gj! 0a9-(W)y4 ߢUw7NLEDZrE;J22!V;|ZF)A#&ZmHY+l{L )؜:Ū?&dM^.=j^@c WFfmq,*+Uʾc]P1gƟe2=(|ӝ:ٸK@%yQ2q>&t V5]$4d M^gZB{݃Pd~:$c' Io\|˴ڍpTgЖTS!bϬDaź4M!pCUZLk;DQ1Uk 1,(Lщyfĥ) 'LҬ+ Ɩ/  rh[P=܌[9_ ^hą0S GI蓌8e B}ěȊ kd;{b/K} YїwÆ>bqSOpw < 2޸yY1ꬉlg'YG~ZS2oA6\#mS3xA~fAeqac] rv]iTn%?zC`!JlC+T/߷Eٵ*a-!3(jmOB'=9 +`i_L( 6IC,cp35 ) *U!s0㔜p~ɝc8Yy\e˶3czF@U 2upi 6B kyF]w&9U%EptgՑL=E!հJO?N c`_[~d nH^1ș[̓=98 aak'Z4}҅6}IcjOݘ?7-z~zܗWaU|Eh+ !":Y2 OL4Ff޴Tz85w䈚wÍ+.z3YbEw^fT䑑q]-] )}g6ıTA5_Dc57M?+6qX¤Ƴ6nppsmMh;%<"bON5}a/uaO3J^r4SE'v]A@t =9y(c ѡ c Tdl|cTqᣱ]!I?}^Ċ]#)}D Coc8퉰,2Zh߉ASb@\0$V^ȯ._b/DSעeȃoYȨtv%Kuo$w,sO=Kfs"fJԲ}mg\v3^%[DWr,ծl%^^lG7T FĂaIVNZV{?^I8o:xv  Sl:Fp +y^Kb~@>Xp濄JrDH^ ɣ༜"imJC_ Zy%JnfMr&%kD6&i75i&KH,3]#SN5EXvvhwƿ+`pμ#ER6qQRz{٭τ1] vf>*ub遙խ~h?#-!BI/[gk-`xz1{yz](HQr|Y̝*MR- GY\q~ʿArƳ˰`5- Ͱ٥oF̸uы\-T<6rٳ_O]!sĝb`u#f pZR=vmM/]{o}[z*&+9FkZe8f@x&-U]2>8N9 ǦNc8 8pޯE݌^x?uuYOrA:_ c& &b'DK/x K~c⇤d)obB)`~pK/g8OS4N^QK<$(,%@JNj[r?uo`{Vdrē v"({-3)>Aݔ2 9zDuctCLof#@0X轼'A;`3tv._uF RJsChvQQozJ): $UMRR E-L!H.|qs+/qρ-&mEU.dB2#H$hmݛ]h.:Ԧ^As>) &XlxR+ qww"o 6k=#(tVO D;r;+_ԼV㻫I=sXmN{$W] |GRzbnKlsʃfBx[K/[ 횛=c̟0)et([<.裬l[N5h )Ei=757K*$3Y$ WZgbrc?&=V `Sǯ6 ߣԝK # vx|vih"פ9iBUkm)>uA1' N5{˔(JDsG:{dq& oQ5#{5iXب?9 @֪Ru(ܽ qI^GeOAVm?,(yd[MiqV"n4Ǻ) j+@HV>!`5Gt1d5A*I%q`5CjcN״r( >]Cezx ߀ZxhP>¡gF\\ӲT)k\NO 좇\?Cߟ|I>Z\ڜ+rǖ\|{c{tCH?ש q5u.,G@r 84KMGIb 礨7042tT"=kI=%ε9j!;* c/36{:3Q%LV˛78$ٲ͔Pz$3P^%iB9K"R[?Ǿ0KJWw྅`US)brWxˁZ[Er!#vҪMZ+ՐymAEbɠ.G6c`z}6VA(@ٝf[!vZR l9,U37Tȿں_aְ-A}W>Z5:"`M81\ėz@lw?e]ag0X+k |%ƬL5Ƥܬ n"*42s ٧}p;u3WQW fcչFev5j%P0BGqY= Xt:ۨò\hi6r2¯}%9@Rʲ`$]M؏'ck70-cQ)9eb,וBqVEpK,vMOtH ZD =}{+:~hϯUAh_bqa!=E__y}M,kً=Ԇu^l9=G<,շXp{<5Ymy45Iq@8:P@8%d)pߋa ~[_t~un8<~z˄?(˄ i9ޱ+NU%}hIY,pVY3¾-W?p8!CJ1}bQ>GݠN@cZe2XaB#^?n ݹp3צUR'ZP,CN&2 Lg@JlA9qg$vΩNDۣb,Xa+IJhT20ê:y~&X0zOO>OYs$TI/?=6=wf b@޺c:_ iToxEj#$$ yQYi-wgpjJ:T8w>TȽW#w-_g{C•iV{}ζpOl\x8kppxvWʶkKKHWX_&vYD4H$Wo:ɹѢ{@] uʚNg>MPL2RG>Ί\VE('&9  (VsI,'-Ɯ[?/G5&cGrA2eҙNcIQ"N0B"fU8-MrҩwtNMC?5qpw!=m218oo˳)b)^F}ә:8D< \2ٕQT%6.@x%#ڪ# K(QVWCk"aVOY،8j(4dG:ѻZtP w c&lYXϰ$dz)@kzo\m(` ~kd]`qjypp7~3WV`v/ps ѣ߅0\1xdS?aT}g#qid"j<>E3Ц'b"k#:zB\0dLAFn bc >lݸlKB{5K!|!4=B?)GokI _" 8{J"\:x\, QZ͕KQJPpBOz]n'$@vJM"QFu늼. 倐e^㐈G]La"hESz2dӛEKxb6 qcaT0P-@HKoX^-3[z>Vc}Vr2SsClLd+&yL^2r ޑPϺSvfeElHϊ.{u_R5 \E*I6~巋Fؔ^hA*Y'j#2cyyœ[m_:#bI9Ͷ<' jKq<_~ 2Kz^U=-Ƴ'iQ >&ݨg%eD9ba穱_^uMIӠoHf߶^m:F`3M(RTࡵ7z?RZ0ٶ6hXtEs~[紆 J֑FrJ1Uރʖj3uU|t7\%m4pG^#1 1k^̬4-spƀ]!?^ECWRZW`:]'Z_n]메^wT:K緳|JwK ב!bQpTlK38(䉯XU^EN &S0H(NCwD݌UJlXwhDuF(hj*zPwvFrm\Yr}ۛr<7l[7&-t:[a :UX :wYh 8-d{[1A R0GʨsZh۝ֲJ#nQFGHlꢊf&q xHjR:œb_:ǎ+ v8䡳'5T:zta/0- ("PK%^ a?erJ gP? jkH]@G"V N`[\RdsPH)d4Z[|T%B˷ y@Z+]0҈82VKӢb* :x]7LZyWݏ776!%F8D0),0)XWad} _J92jhKȸ|`T7#PPZ D-@D \;tDd̓?_}أYQk 5>XU-.L<FOBH]Xfp)jѣur(;S9ZWl0DldP!c~ ~"6woliE}iK#WZGnc hm|OQJ!<cȴˡI%J n,Wati$X9aWh5R,ƖX&~oq,*ͿOFeFE77k؄>ahђ{SbV~cQ>G/fZqm"5IѼ<]m,Ծ[;i+zef9nЈy?}tsT|)1yϻ; XoɦVɄH䫹K|ieL2 BNWeLT*^屵'I;мOl&ц"P Xm_GTwlwɡlp%+Q-}e+\'lx|Hl:fM  J?@m)f*c>(QI0)[;MXbd'p}]ap2K.L$ڝƛ/|͎3;$Fn-DM<"huW@%,k {{FΆZU %lK$`-} $띀2(Q;ŖyUdK.>֡b8䵛TȗcǍ*X~ޥ2:X3d qJeטqV,s-ĻY?'ӚI}/s`*#_1q鴭_tn6TU"ZN;m|>$Eixzh;Z^v1Hyz`4,Q1@qc7$Ok[3(   9pq`A>8YrJ[MGEjKIE(#Kq@y<,5z~ d75+T𐜇{ S!k|a;, $S7ݫo%v S!R/kѭ!T(5LbƛlzCSƶ@l󬣔YHw CaY˴ bB?}<6pm˩ G@$$ 03`~Cpp dz2ڧ,lq4t_W  񴦐=VKA36ZE1*$B 3(Ë62.UĶ`ᵖG"JlX*@*ipњB?ͨQO7Z`9=νؖd?9LhX6UhW秏: ir##/?Q8_@N^rv2T}0`C!IiV+?V"9 z4w|`R̶7O~KC>8>lOe!*u c"^r(SQ՚Mg6zo-6/:- q&Sl:SlEr2#˷KZ7EN-l&uH؄xJ'_-$QnHѻ Vu)-AoѴlTp#<ϋB\%Nw!"z')D$.UŕE_,)^ZN6}qdjNv|ĈVe!?[Jzqq ^llí>b$Nk1bm `lˠU-q[32A^F:0Aү;l?k̜?c=nif X݅ Z.$r@@ ?" 󄧧WatFqГ4oIO*mtTF]=g_*J]/w̤,?$& -I\7L"t)Xa2fnٷÿ#% f?{qih{,cEP1n QB 3vmHx{BY蕐9 (|f**꺼պQM@;Mr@ PVlzPk1Zi :wpLCo=c87gkAs6/8w]se~9v A Ik?5m!g﹒ѯ.?HjO6/ov7g'n=9eحoNQ8,^~#6RȢTSxX(Bub)R6i #ܻM· \^u38b ARDg V"N7dxrcGzW'r@qepJD[+ZF |˭ tR-tB{lsԝ/\fT!'zݥMJ["MzJ!|NOJ2cg:9o:dy<*EiiRMR+Q5ۡXBR$7$@s5=㍱x`-Ɗ]vE|vZ9\o!x̏d)LIM<+?e3+!ڟ_/bLu%,\_*XZq<4rW8oa{Pq2"I.^o|Zڏޕ`j8,ֆ ?>rSc7Z+w>%HF}´e;P>I_aU;hNم'><_'oX j;ޏaS$GJ^W=K*aq7{З{BQN?ܓq&-!b2 T OJ-\|ձ2N[Ypa4 'MږM?  hӭb !?sMydiSqS4n}_] `'7]0V7^ -$QV2[}#{Q{a垥*mZ\'_/phK [-873U BEU "f:3Bƅt;CQ\hN-G|wet4ҢBXn _䋭Qsko#h TiZ3a{o^fHM O1*hMRYJբHp"AN`p1/fµT]Qpyg.M]!{x-+v([<m3nc4/(ee-o+8@XĆ<*<,Kwd j,v5WK#Px) >!2Ӛ(JԠY~U"9y}}Y?C-A46\d2F`/~;jV~Iң0N) )imh$t2.$fL=X1t [xKz M'wtm/Ivh²XNVC`Hhzuee3LHVS@nGlhU8[ne1o!y`c~ D.*&]\Zv&2 A! pA0DFV;j,N(`ؗdDɖ@R@sˊB \b-N^$A`Ͱ{|3x.@bӸ.HFRqE#{W0HqN0'Qq#ՅӭhKy\tx#uq;ل!SKc` LrAYB,4޺7K/bBcpcF;Si,~\S(|X#/ĒVt&h͊Zenl Xqbm;i5܂q7Q6wL2aқ4"m䌰ΞiSؾ@~J;s <7 װtD0JMqe=4qvj"Vm4B?qdĕ0j`jrbg[R5'E?j";*cQm+<Vw1nз+M|YM1/F҃c,:B d;B}GiqϱԺS.O#fX^g%cտÜPؼA4& dD(U3{$̙jž9 rЍ ;r$:AqF@JNhdO %c<-O4x7(~ BwRqaXlKMe.^J$%hQनV$/YAvX9hsdaYJ$R̕9M |uIUg3 V'ܸJ 5?G ŖAt8fE俧KCc6BCH\h=+g=p`=KO7:d:Qù/0&Zw!40~ҳhVP!0{X`|T s REQ h́ ̑:ɏR#W$dfeNjAUg}L ]en)ŵ/'C<|-ę~Ƙ߮ )vl)S+8c9M@4 7,\紱~iizZEhK |ǐ)v0ls lC/^`?2 U",f[fLLy4;e="~1a!8G=5x,Qߤ /7='6X؝M rG}@!n)㥞8ˠ>@5 N./H0s0,\ 7'b6ogxCfF,'@#lo+?!y1}Kw)t.ô$ {G[=cE$iHK^Jzxachk9ZGژns3]ITs]+ޱ s) ߴy^+0 #$Cvb4䋅#.jhXtH$rV\QGr{s4R7ȋlLg0ɨs3BfRVrwfIYS:wd|B$VLޣ>^BA3&Gidz/k![݆| :Ӷ=`x #Ocʵ]DPԊ Uܖ2#AH3,B(ʽi|QsեIh._8Gw>t| gO9F=@G+9cڮȰ*x̡;R3m YA=&c$ϴA]1rcE}:,u3+h~1BxJpOLcЕ8+`=~_dݒkg錤9&+hFӛ`6G6٫@V5EjD3 _V|,͍Qz1t a\56dZ|^+)vvn(գ?" w.޴䄹f3#>Q!Q[+eeX됥df kK ȱѦUJO#ʟ!.cN:GYM%{B G x z]2͐X;s2}?3{hv3Wܛ/y|\(1l_ ukd"xlV)Y#_|hץr%]qvc+ZԒDn)Q. aņv+g2Hs@&ՏQ:s8@ O=P(=aqp>up7F xKoKt؇xVdřge-ԙgF-mJ#xoW` ^q*Zi \8 ?@rnQ]!_qQPX8߁f<;NdܗM$+1?'?Y&#k锜N㧬("-dz~_ވ{(sfq[$f8 =Ok+]E4:4/PJj+< lpޑk 9mx$ι8אiImIۜ R(ơO#^F2/d[\b\ ]+Da4Zg.6<B,1 ~-~zwcɉ? /=Ǧ0CN[gƑpTgF}-EA'ڭL꜕`H G,2dD&edʛ˸*@߇WNTص?CC&NWb 5\Nt @oeB0/+x5h@K7KmZL.%?&#9+z>huQ-l<նaP" gZ&o:]+]Zo(1N4cs1B4X[CtZ0sqڛôJV$֧Xr%OرS=G߄FʦO8l01/OH;LY/t)$#փ S Y+pCJUiCoh!1C8?>53٢Oi7 3..K_u&d4.4s,l|RuzF좂 0I$W/zC->$@L/$>`dN2 +K;ףh>!zMFlUE%I֭yN=\FKz:nږ+2S `ޅO`@O8U!UGez2,L>ö,A9A/dᴱ+^$ w'=_֍XOߐ @-s2Nk,uUϏ+nBdۃvd)%>f}A +Y 7-(Q;`57YmlB+27]bv_`#:^-@:7&RCgӼl=oV~0_y*W޾ɌSszs@ 0,б R'*~|glZ1_~*!"t D<ryuf4EgƔ+FzG\JR7Q?\+/')z[UQcKZ?ì~( :$5yYޛnGMwy={)BS~3>1&ƺ<%g.b/k Q3*ʚz_ʼ$AdwRCUysrApƀbO`)]p.߸"бO7]!7:HY {G厣dJ*0Z%\kUˍ^̋+N>o#J*l T96u?ILQ)nf#"ybx8~EE(vC/eNI*S݆jq~!0/*@7CDRnK,LEXMT댠myvA=Pr\F_ksm J9J\k]\ha9*^s}s 2DX/mD b<-] /qCX<=xze'uwˊ"U mo(dHң۵n˳ o"'1K/zϧS/KLt?[05(qSJNsML NjBAt:QM0#")Ȇr.c>Haj75KB$dNNԙ 4H^pգ\{:]/>M }1I`Ү;p֘cbR/])B KU\hɺi@4mVJ0<У{H?ӱ]`Nչ8d?v ?/oEOaR#S8zN/: ,qć y͙ܗ+iH=R7 y[PD|y,G~|}0yɰhMǰA SN/){x(I uxR n )pH-]] Z.\LQ^T3OIne* [n ?ˎԷ:MtXXЖ_uj7o \+Œd0L`+(eߕT$ VI= nA,'y#*p~srL(6ePI ?s2 K] XWh:cPQ4(wE;|w 8|V&!WW{y}T2@ }8@rpnxázOhQŊT*@u%]=|rbPkfK1N_ԅLqSJ!NҊl>`],)q̴m ԎhdjX'u:䗤gv*:tpEV\9g?Yk|FӴ HL_ ˮ:zQF/ȂS;Tͼɓt=6n N%@gnұm}0p--RA,O5n(-cgUehڦB7Nbs^Y,@Fdb觩#l?c$y+="Y%5EC`ZZZ:yRi™ğGT+0~*n4B}Mʯ$Gb8/pKemd5r*@냮pu9/ȉDe;<$N8mPt!1am~R&]YaPg=ۑlLa?d}Ͽ{DN1I&̀}g0MkRO1[R܉E:zOݟ8Ä0"B r!!)d⭖Y9uX{ $h 5q&R6oIh0u]4C2bxscBحW¦H,agEPꯁ3Q4RNggT |/@d4em_EY}XgD993t:*dp9=~5ܟo`6,vNpU & GL "Z'v =^^IW_  GM\=;(kcv -eͥ"8iQ]ȭ[Io a)Dݸ3RD9楆Уi?E} WM^m\D|uTa # 5̽<:t~b6C.Uh-{Z-UVe#˻0\CG#;ۀ/d.|lbr3=Gh&p%-kjǵ`d;gy($~=ƦDΣ}G'-X&1 %)ki)'qѽ h.Pdft+Q G ܾ2 z a4xqzh`%ubџ.|X E;Cz-]7d~/Lb 3v˗ΆHaz% ƁڽhR \T*撾5EZ׏-Ě˺GOQWd?_r-LMؒJ4?j/yTJU~]>|َf )?"JZCQ+zO$՞P㔡֡_\1y&{O=mL^x>{B2 DotC{'A D^d7x=PsxpRe2cviyX^1vc~a}.6v~`^Xe&66 T#Hحcٚ#Ċw ~ۆgOW܍Lwm wMM6*hQdl͒7 wWu=s}ھ] xvRhyՕ[`d+zdϛ2;Q9vvZ6vhZ dN?M% \I_ꊞQ]3Y 5:ȸ0weE~,zAqi(qgoܐ@H1>B_84WOk@f7zߡ+xjd5Vu)l DPF|gߥmٵNjpFxa7U\AjK50/A:*Y^6 aǼ O5:v|BZ]B)jT/>l %mDs 8֎!gڟ 3 Vǀ9@C7'>c߼kϛ2wruFpOpǵ*Yuq4|XI['x;GL$u-MsC +G',Bp=ddI2Ƥ495 HxM5[_pksW1ӒD:63-z-DmL|8wZtJc ŵX,$%qYI55yK\:] Z n9g4;Sl(]] Ni?Q Vto2GP9c`j/U"aE395]u5䐪4'c '(-GQz KJQ${*mT4DcXG:4z̘.Iz*3@jC@,ޞ%ak&ѵz&6EditH3s%|zAN= 4~=h]81#T(XjA{Oq`x}D9bwHV@MCk5 \~fQ*= Hr$ 2]#TL'! 9J;6eauie yPbRM*r3bmJ“u鐴뤂(ۋ>YHZO2N 4& V'p`̓!`6yl=k-#16KD˻M(u^ u-)6kxy~q6>io#Sʚ.]ZBCvsytqFbr:ZsQ 0A%94quR81J0ׁ ь& Ti[Z,+,2?QByȊ>HA8kvH4$2B]3EGt&#w4 ÅjO/'5IɽN@H$sm8ǾS$]-b]rep+{ή<0sSȩaAcGw'AHH5u-BV\rf}XlxgL(,DW{~fJ'DM &-(j RHу"rsn4J߯BMJe}>r >ѤjOY&1,Z$ߡg)l7|C>9Nfn4+ju<䩞6бe{`~R*:D%tҼ^7TKAf|19x6ߦTqIxODaK,v9aDaG AGrn`ܓeM`DfgB֢eiEJˬ<.OQZ"*P># Uk$*lQmD:RGv?zT 2I:lYAr)V(; g" 2^xC'y+rk Trvb;)'uD[T.5yӒE*~{nRG=JoKSFAHϖTR@:{*5M,[\8\gkbi+x4!z:X?N["4E. bMԁI"j7uqMv !^50Pnlҍ9JNѝty c$6jߕġeSDwMm0G @w~#(1ərgXyr[!Ɯ{qGdøl5Bx# @V.blp\R zY³as~_dxWy8oBݮJLT`y1'h {0Nr>-<'=#ojRw,D刬1!K` FUj CuI#1]y"`O(AwQ%j#IU"Fkf&ԝqza0~/G49ó]s$q9TuɱQ)-''!4n-Li'kckiϠ*{EkW}vzg?ctAS{d-ٖ|Sb;|peFnWdΦDB`=@1 ?R 짙֩Q#u>pyS(H;b"h; ޻09Ve>Ñ- rwDSij/.eu ;$*A łej Yb']WXlS0~ lx,hMpk.Y%P E᫡?[ I)Չ9T_fw_8b?oIG.]h9]7 þM`7g;ɞXk?Ȯa^4m"~ >Wܽbƕy@6-x<={KK8g2脱ّ[Z ?%"ej6Xe~B !#2 3+GB^i%GIR7J)*O鳵6>"pBҽUl XD(6}VA +E( Q]| Ss%FĉA`;4xIsA;x)f/.397%XcʟjAuYn=L >ࡨZ}R(vOO-_{6oJ)XGڙ&/IPu(K)QezPl$9-S2@i 璐6D:!FzE'eNaMe'|Ɖ*q 7vsWw7,MHr*ygˡ2{)c(ƅ i$zlr j\q}-x*v:e_hO %@)w9*J'^: {Zb"kts _dǏඍ5[B> r|ߤlM."j;3Jz-MA#fU X 7Gf>ʏ9b弄1p@ܝ c5Wg972e0߈\ϝ59(n`(C@fs[L,u`KC;~fl;rӵݦƔoX1 gN, U>:gvE]N%&urp/4&~n!ϷܒH[L}l|D+· %V Qօ" 9\*ݶM_[]YV@v>S04]E5'!5J}H^?e@j^b_W֘tg}p] 9&}_Ikg/4sx2K=@TOxr,TOQ8v~/}lqoޟI2фu?7+Q|Fl2IQ][5@U+.|tކlN575cM֨/Q&SY_ 6K_XL'jX7 vJ+CLHGFg}^)Ӄͣ<^I_ibQlo2/}MlR^#zm:9jA+-Sv}h4Wk<0b(.RbEw(Ii+|w%#knC;,{\P-tWhmaw jʵ7[9R&];{HW- KH55ե}HBR Úkm#>Fo-(t[jlP``~5uq#Q`q-'43`NDiniGrtC"2G,N`s^f 7[JQ*6#gnw<[xWk*Zx]S?ςkȬ'hm D$x9LZ?^[/-ֶҁ-dͬDB[A #gBzZ H)T!p b {F;w{ b .;8. x }6[=zK'-&'*'(>2j=3(*afb{1*WT!-i0=1CqdQy88 4qfbpx  {8srX\$' m qR(YDžmJckqsyH &j\VE Jmӧ"%l9 $Fv,RfMMFaCfY]&x~lۻ#p=_93iMr{^#4X;;Rj̮>d}s;}=1ģ d<2D_uR̼/C, N]rܶ_@!z_#3=r%B缼蔂XzV="P"Peu%S ݽwЇh9oV ]oqt?o}!M_"a6`_U~Җ#}y^%h1ps8G Bk/ａ1 WT\j5!'/<Bp\xcwq2V,cf"?sn:mgSBH FmGi-:&~)U eF5:|[kjZ6Ln)QxGAk"uW4<.o̷%9V"6Vko#SK$8=` UA 'C X̬}qQ13ppW|xUXQ AwIgW( xwYiC4:1|n>3VԎo+Sǰ=ӳ Pk?9?:*]yHp߿h-߫7sKl% ѿHk\#mJ ntlm$ pJo#~S;F.X%:Vuelh#yV fp/~1#4ZRbjH{YKot7e<7# 5J"cSiT-tUR7e9-{=OJ}p\Uq/xhR=;K9rk)V! sCVF;#la7'KHfV 6Q<켽#k}PN:J,P d6D'BEq}j} 7_W416|dkA/󷢥ڿ%NS)a!c$+x>DĢ=g'KR玗ޭ SхE.AH{t,(#P귡R@ewQ%x V5nt bY|)UnOy~d=41ָLk6,~m3,l Y"b9(#䒰wk'WUz3̭SFU9gzb3OI !| 7 ] ͕2t5a k "5%U~BDY;SY`3;Qw{- ~4 -ʾ:e\݃&nxLi% dQԚkEx/h&`-kAU+P؉~n>f,!=]5M0BdD粤kh@qqo.y]%=u9Ab?`xvluk{t~hQ͹K.Gkҳ4w8[\iŞcjJ(Q+N.&q[g!VqM(;;@Q1qMH?<^ES[E䳴Ҧ[(0]}hEj]0{/nD6@,9\xtud ՏAN&~"r[*bf5A}߀ 9yRtss2 ZZxoQƤFJgqL'8 ޟ0pUۑЁL8Xך/JM$_/I5&z!gՙ6'OXp 3,3薪$u` e:^!b/Ú~ XPp`/eWuF0,o,Ko"`t*'C:ZK}*>BGJH Ё$l|@to d7ukbss46)@%a0ʬ`'pҡY/4,>n*ȹke\`q=UEѰ@8d: 6ӗcZm&>G*O/Q ;6$:P`-#U6UBUmնs4P ^&49gRzVS16Ft=ӭ=Kciv}ǽXOU`9[KLgX=gه{Кi T_Rxf4/8ؾ%tThB袔d9Wc*?txGsiǘ{wjd 1Td8p(VbgvN`IQtH=ld%D)ilWu*%eYŶoH1o,S#Nc, ߾ÃCgbEm #ey'`0z7 Z(uW׵} Roh)tdj N<7E>B''!0Ijy{@9fƶnХo2s&;3s& jCnt:ghvj ?ޡn ",b.z䁮rغ ‡su gcC X TH *L2qNP9)sH${~ rНmK"Ml_.<WpsLܥ-~msMh۵K Ia d7'ziۍfO.beegyĽ[_,֎!4` 3Tn{: 7>ʘfOޡE VojZz ؝ќރxcgC vX7&j^butA4Zn>[f~+]&HD”j]{X)ιZ(;LJ- YZIhZrHFj{&![1DV63?黼AL3EEKDi=$q)}L)xi{ߵ( Ohϰɚ2hgZw"yQ4 ϮeUgo.aw,X險 BcTEMp M?|:PV3Ba hh4BqoP7{j ILmK_-f$S`tz_2{Hg"n SH ^>['l&*'w/q(<<̼)&߿+#2cNS/;^Qt] AY`WbZ0,3 ^ښeFVc] hܿ3}]?*yZ6R|󂇫\,j) yu[,%M<ߒ!E}\z뢙X/zU{K4śGoe Q]Ċt1iNJMhҒCJOp+̜ClNsCJc jxl BFp)S0Aʌ!>Qٺq|IE'{~8Bp2~,C "U U6 4hLo otQG@l¨`{*o9"Wn:-y} r;]ٚj-+aqt},'%O(\cN"$':ت14.a4-̛(5S/R7ۥ#Kldc0ȿ7e}&[u~j\Z%f.dpe,('i~%hExvcٮeuׯ#$٤{5@[L]&/aA &> ,puo%V$%DHR $BC$SYȋ޼|n+w'uIA&`wSMuPz sOf}HeIٗ2*2M)j16a8һʁࣨP U%Y+iA^@@ Ͳ7S].1I/mƴsʰ2V6nYҝRM}2Av6 O9#NZZyMjskK1TO?BUTJ "`7ؚ`ώ`.qs>ǽRq#5Ba L kg;oϮ*7v,M`3/k[ @-^&*Jݛz+ȵ.>eۦ F~gNZ|/N>;Ete'pGpcps>LL{B.퉎@Χ㓫fmv AV$|\ D'8lwhq ǁ"S+Y// ?JE=˳14/H se_{f4M@gFsRf ZEQg X F`mN_hMT(SDjf,םQzlv]>#3$9!4dXJzk|Ah'&5ҳY \: 488%܌k%wdgC[=pjE1HLaN QHZIwu٘x7ƛi|ȅ km@٬Vn mq8G>|@ !`#eFmcz\qa9cTW2#IÈ!,!AacUQf^ d_7Hw4[8ᨑMp+s0!3)뀃R[;M|If-"@[AUS:YaPB"S"(ڱ gh0 Rn+6bB-V:|!z` ^-n=NyIៜc.8)D UJ|u_`L wAuzj\K{{ahg0S2+eBNУ\sĕ%c^o>ZJ1U>:7P< Q7n5|51)/%#H&.XSǤw%TPKY2ԷvM(Iה>."r3p:DoD]tP D#CEa &]퐼:.~[!{ vûYh{c~z,m p?s(\:~5hcGv1&HʘM nOT}jp.3prC>ϒ~ygc8"$+LS 3xի0$R~I!/ʫ꽀IX)E{$~'(9mMċ\`3y5Йeô$Њ ?=.@Ӎ[sP]-=8lo = FKu+-R>4pg'xZqNڞ"n^üK`&ԕR7pH{} 3 AR_ASkxu`q Ƈhw 2"vwzWo-&DZW=D)U82؜Q\kG@*dc:J$#cL=?{JwY6",^~O-ujxO%ٔnu46|屍6F}2aЁm{j4txa+YCiߏ]pE/l$bKW;:2jb`2 er?u0Myx3I{dQA WbjX4$ﺾ2 w5d2lP_~G4#^9g}|/md Q{c`?Qqvm.o2\[p*պ1陦z;Q)Omy-ph&y8E/$DWXig.<(@ #P܉߸D=0IFS ^yI<>U@fb!Bk꒩RC1ybs.ت)]1ttr`\F\`b7|j I\ޒ[+НIߥ!zAE{M/xU؇_#]T)8I,)v?DxD)&1w~>@IݓOp%kW}BGj;gz}xG-c#n&m? %|M# }ۖzq/Ks+gs#xH!Ɩ]wD|@yT R7(ѦE!-;fj!$m} 2Vqa>[ :==""5STST_< 98_5 kmzD|`8ZWzWlcOߓu[GEtًʴ V)քSHģPoʩ˨}Vx@HJ$H:ޡaX}3עCX1*nr*G)]Ӂ˵`!2 :S_*hL5%- .?20Mh(Oh/(zӆCҘYXos/o7$w)俧W[xHzu);֑l/:' UT(@xS+ܕZYD k[0,{AÒPZV/:c,2gs܅ٔ~]u&8gg[ ,Cҿ}V :*VcIj&ީ}zh\ l\scƓoàUڌreI"r̤;߶=e؇U'wڄssk416ڳLa{Xx5IT{5LoRgf6.'r@w'ynzpOŁA)kj74#9ӑ;1`Mgx%qnT>UKv||qa>a<+ZѠAjVɨ=w~D:!pߗ(mOx`j?MD{fC\zu(}JHpЪ'wf~;m$Mtkϥ˳2.9+̷h3F3[%ܶ-tw˕e[~z/}YM SIgfیX|r]}9H%*ֻN7p]Ϋ&) ۦL1>;LN. ^5ۉ 8jV#5PŔ#$瓶ofA Ln7]h\yRY῎2͌(vpP >_Ge}Bّubh"F[K{O-엲0_7g*fQ NߓVB2x=2~ѐF$]Th?&3ZwlfhVs2ݓ(1b;nPhh˗ԓhXn4 35#4yRc|=o`MfDiw 4B`rlkgUT]g z& F8"IM0 ЄZkEUF59L}KZzq"]$X2o-sUDk%p2#@Ĭ%.s}t=޿´^ُ⅏<;iZ> -ߜ36doLog]ښFKX1V%1Ϙ#w@X!w)?@X <&4`b#A1V!C8M&>zSMJurirN;{#쐔G)5nGLB ?|cgA_(n5f`ll12$_N-RlJ6H'u2o΂Tӗ>{HsqrȭXoo}?2 ̥) ״WTNِ<*{{a䏵qLl 5%GYpIZ S9^biW1+ۜNWq%S#@ۚ`7 H'm.hyrXܨNu :dVfK"f Δ:Y`97!B8~$RJ]Z;q+7_ Oll_#6բ\"Kh:EoqH0e~w66_qF;0ӵZX8 ŒvQYy߰6]ˬ 'k>j'vn0GjC~0Lkm`xYLHbaN;'n 8-/Ce͏JRb}$v׊+3 g,Hi-Y&F[d#bg6X9Ҕ7V(_-}#O~L4Wj!LbWRhV]j.Dx7g7ڗ8n=$q5927װ?6{6X=+aJnJq_~խY؝KV.)#nJgy2"{C1f 7ϓ`fQJ! .XvlRv-h ]}|[eB^p d*{a!( _ѷFDe7Ӿ֏tB9!oO sL Q_o2+彝'ܵ~5_NA8^ڋLh^%fW߄9ؾIzVK[v%\H`NXH"Tb8Z[7n-hQJv-@Ư +:ػ6~L7AwQd.*'1fLqy%=/?m\tG]i B0X( 7^6YLD!1*Rv@ʗ3>Y3լbxv m7z% ^m=4/U`zQ{'4gd--5d Kh(ʝetLf2iLE/Jzٚ"\+M%{Bb(>pfsqX%`NejШp ӘգZwO>+T\M:tsTi(} o2"N4>RdNv&c\G69jn 3OnLj}5^2Gq]2='|#} s19<E$sM,WT| Ku V0ve24cW*25#YMx #oUO , @s 5_we`ݜ^5͌y6vz(J;mn\֞xMQj:+ 0{J(g)<=MHX4~Bbo -ei9 WI @IZi-:QX L7LD˨XW)ywnB-U@fb-[?8aεO%bٵ@!jNz\HT'̵leb:C寁 pEUbvx$3?F6*{Iq_ܤȦ]f, u1>轃,2Ý,-~ _ߘE=="͂U~I-2Np̦:ł>ZKM7Sr~ ) <ޡe re8}gƴN GGy'x̶,o'q0f*r^x;V=:4?Mh? 8G!n GB:!Ѭ4] C6f9~uBC0br /?UBNUPi?/ `[}y5Y)% %35kFҥ>ʗn (Xn5ᇨrw1npX wg3 ȋT rAϪsmP( T0/ !> c$ +.ߏwHVz6bmJ&DHi[j Y+Xk6,aE!8p6q|^XD&t*]sUr)<6 D)u%#_S(YB l )l+J }iLl=zߙ.Kָ'\WޫaNv-bɲzGx/n!y&(ibut #K0~GSl0YYWzC+ڈۃ}} ێ}Eo~ͤ2M.dky@\_/ )9DP1ҵ٨=fj #\qUӱŐ4KVe`rlz>Yӥ95SG܁MOdþ&V;Qsߑ/Ko)~cM|W Ч@̀6%͘4sS6N*2cH"\$77dl-/xvK3"5lna>-@Dfv@, ;pάs!?R7[i #DT =QJ}R;kP**,vR;ehz:&{[l,zSk XaTvZ/Y |\v&+T1ZP~ V7!$BS lw}%H_fP]&Ye:N<50aכGQ- Bn vN ^xgT/}ڝBX!Oa|lu*OM7e䉛o'\k^ LU!/~3xZ?,qQz_a+M9kFZ@ȯ˞lTKQ6@J~B& (ARp-iCz.9ric5~9W27'݉M' !b̕86c{)o2ȫ)(>G@?g] Pm4`\>! ^҄DEäBsMQY*)'[NKgE4G+(ojfT>N9c3  ?r#Noec_exVˎ*g5~QC@:R{hU|AnhRa}$pJQ1KI: +5. Xw|yFEd&*ylژԡĺtswCFzSx5 ~h+pVՓ+=*577jDY3E^ U.U@:;eT2ku:|S"ڝ vZɂ+u-*}(~뒩Ӏ=l/,|8'*t]< 6JS?`KNWڨjXi^ajˢC}DPW~D_Y2ׁt+ݣnѿVbPI2TEM/J?G\*#ȏ;UX* w9!5_Qz_c)צ˃+ Yf';)ߺ}Rޒ4>$.cFl*)>\@*_hĻȱE#IA(H o-lLF?\F _ Hh|NcK8GOe[A27{yUM֛k\ WJjeDzYQSɁ{2e3epDZ_d6I\_ޕg^$k } Xe/!­ pIn+&' A27 ,: X@Z 7Q. =[F1DYml=0\ 3xlCعb$UD㐘{,ױ" 0 m@I^փd$@Po4H ?;&ES,'{"I `u۱ع8iHE}*T+ <'SDjhhN{6C^Y;qJ\T\*gfbonzzns E{X'9!$rܼqgSL-nF #\ij腮/S)I"`JlnA奁P]F(KrOjA1Xְ߻>Wn|Sm3$2O۴XT|s\ϡۜBG1gBט=GP8CQ(W4_Tק;mo6ew/= YG[J{:|8fv'LDL$BFzj?*9.˟.Ӻy ?OV)Sm(y YD4h?yn+#$?$ 1-ă|e(0N2W/MB'qC,vP!`JIjkNG&c@ kTP[q πT^ :D8mt+.uovC( Z0ɫ_ 2}soao `VI)y(To$h朱U;BC4\<Ļt[q4$*8f)FD ~53DkP7Ƶ[ mvYyYY}"UmMQ]ԓWj%xES߉bx-v 1?*֕ m[۸b֬'VX㎾o7;*TEvt>>yq:!d)DUEyk0?!Wn9wv%~JĿt_\Byڢ %'gBo-gOo]pTR`'{r<|W#Yr<_7[߹ k-S .QT5Ro>:/F-۸HQ 4ODޑa]C`6ڇ3zYV!i52u}[JǏlR$xٓHS/kn@+: L`o7wQ*?,k_^`BZ FNfHxWɔӮ_-%d+k200g#2L_C\?K:kAh2}6P$Du-^ZʍzVU#KW VhVcsF]e*x283jaB !CZhnT|" ]'}-/ Y-"gV#SQQ'/DDZ(6kBWpQS *BǽiXtC{ZM܍&C?[@c_?'7)G؇5:@_%8 ͖$(~]=E"f?t-vjk(;49xXweSEraxQX$q'Жl`Fi/Qy\^b Ynf}F搨 Rn1i ٕR!0IjۊJ$۴V-F[鵌3f1+×|y*r;Q;E@a1$?wA~lW7` Uy"6%<Ը .<7?;,6m1M]:+ghAAmtS=sDJ6#+ctH|n`a0cFI>%A~L[ {?+/)6s6dŐ (){h[lBztbK|GYM;Nz2KhpyqA,dLZࣿ}Ad?uYZ^ko6t ЧL~@r<BPFqz}T8xB;bA3 Fnvxµ s%ɔjߦ+l3yFCsPZ'i. *ϪF,4J#? hf+naoO/(X3i+|*g STى0ڥ݅ E~)%ęGp[IZWĠ 6?a4r+p غ|T 沙2\΃U\TpܒkJ#'' ^ƒa|)Nz#k.ʻ5פ}ǖ7=np襺:Ѵ9Y_&À7=_X"܀7j.K#fœ3|l(/S 01ZL㙃9Py +_F!p<)4tXRMDiA']"ޢP乬d Dipj,rA6Faz?Q5),Li nDDN*5`+JG^M/I9s~ 8w J/Qw=R9,,} ES/XAMmdN^\fd]Xdfae5ˍ3 Qq̿B~ZPG-r*NiO9`vR0=\:dp. Â>XNF }:ыnCV^SurtS@0W vʫn5$'H݋0>Myg(=rޫG3I/}RŃL%WL͎41Mw+ rZrqFBhE8=bE*@?uW )L4sz[Ue5#!MQ 3ncM#si}3:K4w䪢1ֲfjfG(sK[gdeK{C-`af'L k$tR2K\O/ڰA쑽 [Z) U"_UMTZJWX/&bC'w{{n,Ć #Q/KG@5@.T< "`t fӛ /T$\LO?m7ݑZU1.&Q 5_Xd婪SѵvD8p#)@h+ǔBCo|+'')B gF N_X-_d<_?G{#P:\d/1~=uU({Ā񣀴b f3pXzI}t: W^6G1.D:pkߣmF+)7YJW"g'Ǚ>08$rky%~\tx5* ɾ ]gNkgj,%[./9 ?3 Ms@;?up̠ ;?]mLxDz&f8l6e<,ߙ;|̣宙s4)kU]PZ6^񘌆TuU]mf^}weEn0x?=|i*r hr7y zK*~{4txnwC;K2ght >;~Ju9 x/OG(`!ϬOk0<#VS QϥR^5d011=]..%"eaZi03f*crJF AcR|,@RL[8v-oox ]Cj4{ ʇ&Paڧn:þ ,3r -KO,Hk]vҲ7! D %j5$Y#ۺų`ۮ|dV"dJF߰J,i7=|^&Y+ʕ{ E'M]ƨ+o4 )L0X΁WnS'Lgs#l\,Z|I8VdB60E SH 1,{߮y͓~XXZD jou!g*5{)avmޑSם`nJllz[f9Lb- To3綮ij)P]7}s֒/>\48eQzwp# Xu<ߔ7s5~Gxac>2RGEss/XX`~잰̘?&y{}uv>Hg 6x{2VEoa6'֣ #d W#;^]nV'U־9x7,uR{:Q&!_3zY!1KH~}!tV484aẕ7J.Rs=4Ci\ѰH+RU(؊"j.i5<:C~-8?ёy=81A2 ]OGܞw)a[ NWaGs+ƍ{IsMwKxNAwŝ`rE6LR$< X؉hAA7`Vq֡5SJ={tX\pqpEPp&D:BPwިzׇ0cQ*=}h{D1-0.i?@]1.g.ArS&Ȕ܆M (CĘ `PQnExkVkw {p0epjؒO6md%ն$?2 W]V&8!_?85ts!"QM5r{dFi—esޢW J wHZV:UىbйBPE%QF`-FMg.?Ӑ"xNed\Ri@V=5]4"G%"ߝ8 VyY$^E2fۯmA%l M]+b1XHg- t ъ|t,x L_kCF (E`4U#ܳ0Clqv$C. Ŗ`JzDžJY]g9hMpQo8}$,YEx u1gj9 j*KoЅ0 Ni, ^&!HLw3}E Np.(#2<aMC*M;d-fŘ (ޟ̎~[2tx*"~ɑbC>&|@BD(ENQ&0bbuu74Wu%w8ZX.ebnꄷӮrgYY(`YdKXdϏAĶ[Pl_ .eD,K2{ln k k!,GҁW| CfA0 ?6D_آ ,,}zߌ(3۩ݥ)[ {2 r8tkXYwF. ;#M@尧HT%AMý-R˭e 'g)xSaIbES'\' YA!#o] #Ux >|A֫糋XPG;ᎂtLu;X.|oWˬ'5!4.8jWlD sH6ֈ:ᄔGQ6?lUcoO^3ƝNroͨ]Tb L~=n"۰>\פKC# 4<~8aAuKOpb?+tW? EPB#caoŸZ@H>~M热Xaheu\SxoM5~Α bW{!:lp%u\B5[tyG`Sj%JE~/cgk8,ie$$MW[ ]j`vD[s^rIrJUwAȍ[17n; 'dѢ)+K5u=ŽKqCK$c6،6:CW$fC˨"6rk E^S LQ%*뛒<le@Eֱd6*"^&e#3~ǡ(k-+?/w$ީk˝i\Y'0wL39%X1T;e$7W3zŤE>R;`/>O𠏡E.nx\: h{VbHTو7%MtЪDfWw k6yܑv\YLR<Q'8 Nfl(Zihec`硽APx]ǸۘPs,ж]U l _1j3U+&ÉP'~Xf%k`5PVop֎MU 3p9:h7 `̖蝸Zпd+U_z}dAmo9xu[] /XHSXrcvъK48TFzߕ@,X$AE$L0ۭgV}pU_ bV `P_99JշSIϹF.=mNPYjs.r=ܐ^fP}y|2Do𬟉ZD+˵W&ppï^ED#ko;LgLίND"%8h<)+.<*ҙ;G ۄCV|B:e [Ϩ[EzJ+T.yObA?ެQ@<͌J>2r(Ygcf"s]qntzl- D?!ѐt\7/ie LoƂ^ u$ Zq(h%n}AqMbgG|ƌZy=Rjz0`-)ogS} صk |1m(Oa3!:eU:t9ycW] =SUC_`O=J2m?U?g]\XjRxAz3]aqgL,k}˂i󒫤Ku4S@'&kaj8Dl@k󊬘T+ BW˓PDǟbz.:_)uh|tO+KV$ֆZ,tsh/  K%u$P;ëFO=zjsKm0'ۼ:[<iP iUk *=t:Br:!qP)(۩RU s-UaiN#ḁ hܚ)TZz_e *O<DW9`ZOeK@~~.PJ 'MQΫdt{Kѷ`2PKӭTYɶ?zs'{x5E~Ȃ*Mk)q>$aC_L%tԒ'{QU*YȞvW{JN,'`'"Kt?aͧrw_՞y]G|6 BWRǟXlxk {h!V߹JA uWNF?tZ{hdBA lG[jB}k9UrN4GS`O3q_bTi l:MG p6ȝ6ւ#"|4&1~ 6@*T0 T|*~|.s*:=IwAtF;S4;D 5s&Qڎ7(s$@yKNU!?j Yt?;jp><~Xto֛f,}rum[-e\V9FM 4 ޻5֋hLY͙3^i=e'> ZzYX a%7]@&g߫M&AXFZlL{ OPJRP9~4*YGO}A >ņuq(qzv ^uYG UhQ1gi4/i [6tk.$|} 7hl^SÆ{IXON%cLbue5F(i@bB'-n:O`uTE֋ȯ~!#֌LAZ wMD k|U0F8c7c})Jg,ծX(&~,FPQ<ꛭXYJ'r}T-.7=w 78<wΤom#(ݧD~d6f[i#71`Gg\NrfQɉBM8Z/t{Q]Ċ>}j /bxT{U&>Q1/`%#9E#g+9 e.v@mJzIT9hh$ 3 ܎I^Oco)D% Jh W; ^џ.f∢>\Vq"wlAY/fƯ~ɤ{p%N8׽瓒⯗l7CAb9yhS09! :ѐj\q\ Q.$3}(aw]x|z+Z\CmBl7HB!ԪtͪNڟ 8eb4\VW2,G(]K+Ťi"ɞԌ3n[I Ҥ>SB~F?N>"/KS"^3_552eS\، c}y@•O Q8 'UV0W|&mFn"UYEc:>BفYB!g慽ͼlh&-+:o{%;+9UfŖ|MW#")|t*rPrn!ѥE/vorC@:౛9=lZW3C[&4%ĂQVKG){_ _38Z\LG67q:&@EL{WBbQFf,#r|Kxk~E֟1m#w<;?Ќ4iTOV閶e$D?sF׫|Z>:F48?jc"`8kU kTp d)OddCkv A:5;b413|aSECaWDV-.`q.9AqqTC&| O[`D,y0r.y;[XYT=۩u~wO6`dO!Vg U /0&Br`'?daO }dYvʡ @r*$0tkTf~9mĺ83pٸnŤJ]{MXM33q|[n=/8`AF6ntOF(N4__27٢ F2ca4uAōe]ŧ=\x^9jI->YtFfͅFu{inil n6Y}_RҖ(>HW .JR`:' "0 y6Rw=k%Rw6DIKOXR!ycSɼ7T9+Bܵy"tKa6CO *m͸I7wpV>H!b;dv^^FA>)(mzY[=F~^@ȫ _[<1IGF=cE<ɞ82@b"S~p'7BdHhHֻ'6{<{(GUΒ+w2h5$ib,q5yyC^tju/0jrq`KڈQ;u|Os`"u^[Cp,Y(D+'.J'Ov]M@ns:xёBSiӇ :eRxKӸ-J8m{RKhxKp՛1l!|Ċ00 zPa޹z},TҶAfFێ{5^ԘM;h.-vtrI2"i**#Pv~`>ċwS[¾-S̋"P'x0zb]5ƻ.&N PZ0 1zT^w*s$ ՑKqw 閈b \(_z!7^jګ&n-{kvT|^EH#9~`?~9FD}X_Qof6nj*;Ās`:x~#Wh; P fq^Mz3ںr dPhvg22yΙ%i vIHӝ^G1^Ȇ-}}x!Mэ%lF$~Av(ׄanE0cIO"tqah9wL z1 O$c9\%ۊ{+1A39*{gFu UjuՍ q|E.)/UE@nXrMţ,z8FcI2S%)++1g]F0 _f`Uu0/6lU IGT$e^ܼCj94]EqZ: G.D%(;wPFHݕβZm?i=y|E7۞= Sف4{:@B؄Z'>`'- >|F} b7 Jl75Q&0|'OB ᆈ@f%Ｙ xtJba'+ *# M8vwq(c!*D^ȊAoU MZQZ"k'rfi' v!βRTJMK%(Upuš iK6ɭ.c7H/fǷl5uc?s ^v}J`0 g% y`l&/.8L@Q3>Qܟ/aڀyzfӀʵ-+򶡋W,4[<4.SU4|r4mj~b%+(lTdi9Ņ^+_ѥ׷Ӳϋ)ۺH(|!Hq\FAXF.𤻶n||8_ނT+-ԲNIփR>@S BC!p].9-=Ã`eZn/ J^3ml _UDŽЛTh<4hEK{[.2NuђU)gv d?&V53DnP835YN`:xq]_5)?j= gi}7}WXKu,h7[쾶  mPS+dGBV;PIPB= ~(lj/)1<{N*iQEt4[.do˫^@HR#~cׄtL!Tjq-Ur9KO',w a(Ѱ8O4Tb7 8_c!7#_ËRnN;YZ$Ɉ\j1OGҡG: bڇK&h4Keo#D9ڙܑbҢY@c՜'LY)N#6*l> {N buډʙmE#^Fp %*da۹x}˒ob3æ+y`?W}`䐓 Slh.1Z·?VM,7|O-2W"饂$;w؀KC$ BY|*]$C;Y{\ c{kN\ȱ#֖rZWV[Ov@\*#|.XIX ѪD#^s(VlJX VB U 2a/M(D.\ܨ7vD$rᗌhjC?-8 ΅LS3cO7 u1JǹG 2^~>\Oҙj*3̅IT/"K\2o\d>AQk$ F2xg-0$x|7Rdf#&0Т>126qEof%o|32 8 PA:uS4dI3rNq=}dتٷ ?[ە^fOt Wnھ'^5AP#} 2Tįҥ%XWf ށ%PQWC8r_黵n@چMʍc[}3Fk-#]ku+90 y4ϋtST62%hB&'%7!LF]62<8P;d=SB0P>IB߬Vڨ&C ʩhkg>x~;ɒ}OȇϯKJ[4]ugRӾq$)C#TV `vα$wNk[IxR.ИҠV ۻ0.೿GB0(ZF Pox<]IzDdD~r!aԥo s-L lӳke/teI;Έbd3Q(wXS(r(e㼁=fp(O.< ae+jN=f1xSUNN5+ĚG<^SJsy/kPԇpba|ڠ ,5|(LJUXY{*%w 7ISN/AQWIX!A'f0ʱQa˹iB'GsEe״a2L%n`NRr+/WhE٪D{9gsGzZ06ਲ਼TeaTÓDf&|`2 hR/؆u&J:%oܨXEt!x=[f_v $D%,}I0+|^b+k{ 9#~BS4 ~߁REg${Fi]o3q.0Ŝp+|_ѣ_{ \"VKy%]94EI?Ǡ0N=9q,jj<[ $ zjK Ǿb^E,f?댛J!:l$qOQMޢ܆*n;{(46n(vL_aM5caalֹO):r ٽb9E~]O j1d{>lblgJ|${2y1ֈ ZWpa"+HOV1Y콻]BMKR# %sNC).{x6)KB]Y] <(n~ ~p Nh!; kKAbJG,NA$Sbmu{YsiR7C+{n]-Fz*`~: `P_%;YZT#z(kذ\Gq;)}7=GW 0IBӉY;$єj3۴ c4e[X? C,~L.#*!0^82~Uy{e"K>"S 9 Tr^-FFVn;XL$t$3 Ib9 ;m8[BSH:9aIRx6(qQ2(9kjrѫuFFI]'юO& Àgn;7FX(K*e'Ð1̭ڙVY*?g kt'Bn΂k *W);#Vs, Ŷ,јAq^\fF}]%YBygt,9ѮOG۬s* t ]4fcZnpFg׃]VpF={Tfƥ.U6w2ft:-xhA[[wqr )1}|=#2fyb)Q#jfPT- 1ž9"1"ⓨn:pFl*y#.5E&a$qLNpXW+wuFj d2M Nf5&Do/9mW`IXI]Yl̄R|q] POf#8G8nrcq>!@VEawo+V,-jӤ;gur>)$~0Ah3CtpU:AY1q]H)*~H)6VjrL34R{Ji&Vv;XVO?ЈIe*uhZQ̒`mN"{T' F/?JݽL-b.ǧO7ثe+MN,nSt|9Lʚ+1vU1qYO /'x蘨lRF4!HҦCNu`! J^OuՋor Zs;NṖ-cd+U:3n@O']VIBghұu$@25èC:mpӽ[nDP8LPNJ :{kI; rq#w$z >x*_0i'+e1a뱩"lhJ\N7n؂ WqAOXNg;y 7ϡBi:v Ē=-J\ O2^wKca3T_C,WBKۧ6?kĨ3rH˺IB^:^ۘ6p@>G0I ەYq e@~50"ϟ( m7F6:_!sͮڼ.?=v JFSml/yܜ*PЛBy 1UUĦHTW3 ײb W~Yxsy4>Lu70^",c} H٘->l*Wޤ_}f[? #8d8 Xxh vnk;/`}56gj.Io{[*OQaeךX{^yHL]hL̂1pKpXaU(%z&s c -ZsYޘu)of 4rU'Lb!B·UտF=>HQPnXy^sqUcbh TB/ po Xm|12au!˚:=Yw rg[;9ὧB`q:Kζ %WO3_{ Dߗ`XС֧[Ss"7˩ha#,ȩKYz.׭5l$͕kuZbgԱT-N *./sXΨ.į Or"`ۍKITh}Z| |Ku.9LeWv3ϴ[i/BQ-WTcEgQX %ZZ_0T ޔ6)mL,u6X7yЀ N `{MEf!"+56D [${( )'M赟[%d @?6iޖ9UOYE&U; Kbғ#1(i)iC`5a䣨NuiS:Z 3R0Y:Җ@aoO >sql;ݍS.͐Lve|grfQ5q ov&yoY|IjKPI0?\_509N  ШgR+ &#֭{.{}?1)Zv4dhNaAWx4ywї>I3rKNIeE[w.?f}\W{g.1@icc׸(k]q} I?#о=cy-3:=H##PB dk{21P4\hF?(D)2#.L3(ӯJ:Lo{ؘ fH֜Z3C^Q 3VFZɨw^PRΖީ0&y~(6dHև!"kjkFxpiopheUz؛.(l FMsۦ %f.nΜs^fϡ3Z4ulF KOp+5#5 zzt{6IjKW~>$T®ɞQq, /Y'5 QX霢7* 4TZ[,H5X.*2#j[[DEy2bYӦ& /96(e|ruGw+,=˙oS,摁viӚ9^6D͈rŔ L}Me+||qUg[p<5bZ2%S&(! gUrGbE` 4KOK!1^z1>BUܭm ԾPV>43D ^R2/G%Rh1)؊):ܬ/); *y^BOuƕ6ދu܏T}Ɔ1Ikp>X$ޱW7N%/yӴMsӘO\4eByU#?>a )ПCS7{H #F}@i['Rv wmx-K7G2)8 +YӞt*FQ}mܡW`Pe[ zDكE^魸o'Ȓs_ E02q IhTEmkp쑊kbԸ;K))TI2wbIqx\-(3Y;ئ# $swU'~2З%`AfTxq@S[M9aoTp)Ҋ`^@~ib<:48"0TOWJm&Wgw4qwcCӁorŮwadg0(DJyN'ɌpP BP/Ul T͋T<=D јr. SgeTp)LFYr!N3 ^ޑUIRjECS]ÑU!g`.zaqK)1:ӏ(V!O =GJdK&=Xb,-zlXxhk|ea;HawJ9ĺ*fw1*Cv?m QMin/7Y!گ1q Sյ>GfջY}гcC z/Fc0еV}G;ϴMX.bRߵSK#4iNq"Bkv7m BV6zsyiJ1ԕf]2/PQk"ӒV7H鏷:P26d-D9MGgM)#GeӦ䲽&yznP(%{e\ى̺ G 4ʼmD¯2ه;mqyD{e(lCO\;Y"," Sɫ]xUX/=ONvURp$@*:NuV@KKN+98CzEC{C_mbB)PQr$A zcw9VeSp.lqI߇̈́ڬY}N#碰ϲL~[6oUa\Y$x]|PE`wҧn5BS4>KUrI0^@Ӻ) =Ch9'oQlsԇ+ )m?;zg̜ P~ ;X rR%`|Q {΃O$J[0-cu`;#e~h$_կ$*a|YXD3cܔx PbpbM,$?H+%rӗLkU#&o8<져Wjn1GG& Tu]P(lgpbYUn.df[s8Z|\q ܲoN|@B~LÀ\̐v%ry>~bDŽJ[4\VУZ~ծNID iF:8\"4 =_<QlW_ YΡ/ _Iy k{/lgh<=V0h$˪{FrP8qa`r;jRH[6UƚlzcE\ x5(D|AWIkO2;*I4CkMz,vy Y;눛R(/ޓD_>/CLi I)Hɰu$ȸ*Q%؁>kb`Jg":,U6%X6PQ $Q{3yS![-Ӝ^u.nrӵ×H=$EQ VUs]J, N6!V:<" e_ (14-'f%e'K @?KR`uX5*~1?)E^9 /q2LL)nf4 "hY^pE˺o!ɂѲ%e&d - \!-֐;1MOޓ%-Ņڀ=߇!C ]*kW ! *]h5vaơߑ5GbBs8ĒX^2,sd}vd/S +=t єGIv{dU'n_ /5wݦ`5p"NXe: GcüP"T%+3׿kg~%ͳF,9߳*G^6Xe7EkWqbON M8@rLJidERI4a *.As7OtdIA~U㣋}p]:<.grB7E¡CR #Mǩ9"$֍R \<' .ZNiXI Q2N~@  WI9J )gZ?];9t*`y<07Opq9ٻL5ѧ1pU5K12gy*&B7ٷfV̢ S4C:2g_$(?0aE)5fK_i*[QW&9lEj;U5AXFb]`ބyq El'ڃX]t\s_0H *硨2]ҝĬZ\t2\WEz}/w<'.bT2i E><ʉeFkX`  S6D;?EP eE @+ݏ"!9h6lsIs>ՁpcCƖ ՄFf{ƫG5}NAj언@g TYg&\=*`ؕLބ@5@u7-"n^B/ /xK}~5&hSӒ?yU xqP &rf}bY .PƋ<T>dY-s6B*]eSsH6~i(O: DohHK S2a:{n<1kV\=z;>g~d'ϋm0阦R/2f#TzҊ6U {Mj16zv;"C@Z&MuhV+GS1HsEP)Awu4҂!]'  (2\١'mQA*-؆mb#6aHҗ<O_eZe7-u%bMt ( GMOQڵ!dG<%*&50X#7/ NJ}t(k Ҙl4kEu%x%\Z`#t$Àk@^Q`if;q ((RՑ.6hhW+9Wx#y!7x:؏gt-$|)Hnw-ykVPZhX1\[ ;ZO̰by7 B8Zt<ԢRK|- 7# 囥4HݲoTGv? )YLABGF W?#C{}q; +zNP Q0Fb&LOs2a#铊̇@'WL@Ake2Cf֙я0Kl-Ujɻ`VY&C<-˶Jy=uAFSA Zwnz1}*ޓJ^iiR`kB^>M&dgFM%1@j"i3ڽ>x7l؂F9EPxfNm ,(X $Nk7|-?UMR)f JuR~d?T)S-bfQd=¤du -]Ǥ߈hޚ(&8Lb [{sI"R II} טlzxP_s.Z`pmow>(5RfBu&{ՅQ-|= h}b5^qvK5TsS?c[RvHBixLA zIYN&"=Aa"SP=|Y̞;rjI+VCWqq ,6 _8o3~8r_F+Zeϊa ]!,(p[W*j]ZYJ',wOKM^ 9~~ z)Fy9F-rm$OgXא $qU<KgXXc+7m+D8DY'"aFVnX=ENY}=51Q&WUG8qhʀSz9񣳍@A2nEaFFjd{Nv!h$yHCƾ(vUGȟ?T&S "Q5u7xa D %Ir'uhK3e̩`mLЛưCy]R|殱$x\F>7U<,ߛdLhE9 u![>IH254cBDؕ{B(Gsq$n5\ #l\|S/d{#2Fq/JP^D]}DeϔQ&1V4`ѹhEgr˯`S,W? A5).@YFR݇E_ )ۧ";/wrHyᗸ[ 7Vh gDa 878f-?Qv=~g@L*gA' c0g#ŪK dąB։P# )Zv6/u X^t#vsbTxס%@ qzsRDYaƒGW~+rzNU2BFN'?H9nKqJ$aILސFIXS"^A&uatHO*iڜ8VYEPv0j6mXC4յ4-f>Tޘ[F-re_ n,v 権P%7ѱ5Fs>[X4l> ZK7W<MǀՋ==垇QF=U栾r-ÓyzCbZ쐼_-ghZB憳uwq5=ӫ 7h imP"U<]r.N xAIs:e"l:RPMs7T;h|ƂXShDz+|Z{?|]<^H։n܂X:G1C25H]%yb+~ \}g8}zzN)@i*nku`gadE &2JrH߽MxWu2O0݆SGPӉnհV}ZB1GE'`Th2>Fѭ HҨBF m̃!c[O-Ja?v?mzT85kdEǏ } -,=qؗ`GJjO*nNB,PpO *'D]edDY Gp Z` WӣyS>d=.P{"OKA(7ŀɌOn `\xλҖ/aGmĞ-1))m؂e> >?d  㸃g0†m-*NͿY=z px8c2zF~i`IS@4n>5pLB -,1tʟ]O]\9%jA|=_"!Lx@&=/x畀ŅѡcF {Mԟ᜘r:՚ik7}6ȴ\hA Yd']%P*c uUs@[@Aۧo*"Cv*di8/B攁/@>hҦ-ʐ!$9 x!b5qYюJ}Q ؄mW%n ! Ǡ3ysj0hr0Ncez GH HjyCGG]QNtf + (A{VӸzrPasRStR4#zQnW`8&ۋ䯽|1z;&FK}0ͭBQt0p˷;ӧl p=aJ~׀PK3SYf'ɤ"w}@τeL DbW+.]]M|nH A_0; h#=6 5);Y[z )OA_.7pmcRPo|t V񔓼.;'Rj\ըIÚA9L 6`8q]r#[]׿h3qߟf$Huocm%DB30q?R:{둿~vu:7{ ȼXS -MHn_@JȚ"4 ȚndҺGU~[% 5OLCJ"!~uKm8B&4 =v5D83e3!Iy bDȔӕusHi!Lx:J9G ~٠2*N: Fcu JP\CGwm[@.C1&g&7, JG:C*8L 1,$&ʞmW;2y-g&VIMFo9UvqB*؀hvÜʬ1uKO0xE$/jq~ 0C1^ A5:ēhza}*q#Y[fKj"nn`ᥦR !r]|aݟTY%Y͠1 YOg<6V^=W8X yJH Cqi0(g O@\sǃP3&S>J-4"}e=+EfpkY!DTy"3a;έi%}~68*z0/U tH +3YŠ!js¥"$A++9*FGىᔌc]Oj,+Mka P&J:$?jaɐY5y_ЍeOM?yjׄy<-EӰe벣GD;PFeM%5;4:z)H-g(g-.ꢆf7cAM|wA7G1fш .HA^cnHJUJp c4ϥFz~ )t^_cO$Bme/(2m_r ^KXEfք# wBa@+"jNs _K'X:~ҭzD݈ J-Jn]%/uMr]{\oHlwsH}1hy׭Y'=UnGe&DZU=7Vf5g;ur…ڣ!fex7 ͽ\*]K7@L֤r^Js3j/˃'%sMLGZ]ْ {ޱ鱨{ ۚBO#4\`!<#H藍ZtO᜵8WL+[͂A4:A3HmN-2 vpT-ꭾs 0a6@=PHDLV H>̽R8l'hHŬ-ijgU:VlFCp(B6`D i>p$98]D)K.?E9о=i,S#@ Tˀ ֵx/ dpI  g,MN'u:O-z&‰V7 'fߍu#&r7/@P)b(ĸj#* u@ "h][H] S7`CJ vb=qsnث_5K]IR \K~Q!dp ;HJl8~?9E"wdY$rZ{0LztNZ71?}r~ i.2 1~]I pӦH{%>2Ϝ3o}k3as{v;zP]LGұ)h]@D(e)%7-U4^U~CT, 3}jqƦuQ'=鄫&Fx1n[#<Uem8xA?c9jwn4[A(sAc$cQd0?D#v}[(@Xa5#7ΊɒU kF#;j{*JHO|rlpPn[d2A$2S{SՏx-֋ӿ~)[c 25|[SzQݥ1%nFCj#z~VcM^d#FYetJ@ւ.$ ]uuTJ t:\ Z:ȁg2)uop hy]v[vlE?/Oe T} 1c$*Q/nC NsfsAE3 v%&-m[~wDŽtȮ#q&KiC3>:/mqf:gZs~47x LN:62O.N"ZfLBuS;]Tg ù?^_uZͰݪ]_{C"e}a՛Jp3*0Ӟg": /F|!x 0o q&o6+1xBn\r$#Z㸳ܚSGU\~lEM:Y~7hWf2/3#9USP3* 08au$S.aea#qbPi7_oAɧ3zO+g`^zYKv劏+w{ʻɜTRT kEŒ 8َ=&] G*oh6Nٱƒ0jgtB,0<׺ɛL9炽]BCˠ{xi|(|;ZNE`D$o!۽IAzes1`!E q:krs g='+ ({Td(u! "@=SfbjîaG?2?C`K!jf`.&W%[twܵ 2_zxm'!F!ۥG7oxEI i`9Ql(+Mطc+e(WYњؓpY']E"%?6,tUlYĸAA _xGdrYɎGtEHՇG˱0)p@ǜ׎@Ckjy_*U`Z_#c*G!z(Jz]$`}b86נg=+Šz_\nN*jc*fg:>!jvSV!=@#EI..{o,#WM`!)'TJr鑝!#͕h;m[<ױj6g9hCBC=hv2x4nau?!O!e ZO `04u `&2Aevã#X0:3uѕR7+۬U'kgtUBGMwb~[İBqg[ yԵF:Jo&'J"zaʼVw@xIMs~Xt(5hEhx(u-B i .,Bkt45NW.:e*GI`T"~C o\C"W-bSc.t"^rhZo 19FSkcpONSo3+[RH/kM?Y00\* z3? A,kt]I_:f9SNEsHcFŊlDv0 q}C:z^xD!6$ >c7v,nͭ׫\hш-'< OtA2 ÃA}[KFbJSPdYE3Kj^;"<'W0Iw C;x)i RTv>fWh!M05> x^ wpN3.28LqH\ȌтXgNlXk\]6?qg1ݙ:Fywsqvv̘8\" YS=W/#8k+$ED&`LbrP<ٰM8ī9M8P'HG)n.U/faP@`AB2|Yʥ !wZJA_J$-H&ڵ3B;WA l)]?~h񃠷 0S4C'}w$ 0=hU#h3_k;  ]`I)LGk&lfMg.QNۘacF $I]dkmM>m:QxP>Ƙ p`{FK\Ám?t=8;:uoF{ѝ@M wvŞRmK;'w爆bR !ك"$R4!"ZlG_[Bk,tބ@fk[?J(2Νi=XyJUsf*ަ}RIqJdV|g?Ak8a;^9 AnvNfEJpG׈KH "LD13#pJ-'YM(]7AĈ1xεp~TV[q,a֍!TNH&N[AIda3a3}~[ie z.Z|Fz,Pi?a+ȷ틟uy}%E>w{, AM;uZ,~41Nzp枪9WmZԆ:1 YYI]: j$_l$suSPNW\ XKhMv@! 4*W>9Cdيi٩c!ȫ)]KEDm@)b@h4[%6TakUKe'bbƶd36(#(ޠxo˭e(&AoӥۭR@^k뤒;,X־pmf%N[bᒠGWq2 ˮ0^%x0 _FmMS nwJ@6 d ^Nro&t|oViD.`Ĵ;/bK6 b2c}Υ.=B/3\GG6f6J2E.d Q1pR='7D(yqC__t⪤ L&\ Zwfͩ4ae@ˀ豔4[)o$mz犘 %ζ‰s=ӌxBZ9^!`hX(6f I߉?.V XGlduF%g[6÷-FpQbhMǖubqrb믡CI>m<*yܦDq׫0YB lcp(fIj&>Lyw-(|>=h'6YE)4ܫCĈOL7BE~`sAwZ9o&&.uZN)>?}*1ǢE<Ԯۅ[ o!F9gU`t&"CEdlۏ8܃v a5LEmyK1X>b(2.((\-DOBJu+Awsk5~E wtsE&_*_jWa%@C2AGݲoSl">mGtvY1J|a)9R$n`i8[/Aa%~qٸc#8:+%p"E>܂Oܧ"KiF׀Q.c܏*PEﰷ9^@ !_jhq9aM n"Z9TbGY Qkbt'*27FnT~e5}|6 s4X'FHLV opM@җ0O޳'PR$KOv%WQDLr:m:׎:Fpq [= a G)8RvOϤo!}rKz.hARiيJ]/Ăl&N+oJ _ħ| $5':J_GnVqձ^&Ua*YR^G "ٔ5: τ8Sy rǞ@akK$"/BnW cW"TM7 65 ]lv`JXAnm4=+A/J~mpV<_m"1Y%M:W;dinӮoJ3'z͞} y?{;#v| ̪~VRzE$ m^#CvcZ|胖Hu[CRlE+3x02 VuBmj&5x̓2 Afe0$ﾂa\,H?Caڗ=Iz$`*I a5N~-+~f/ +[3ē /z,d;[`b2\CAWXG?ϴ i}/RTY$75DzUm GN&1&ґ>bQE>BB 4!6Iߋz\ %[tq*AIWC 21E%.W8޷> C!DT94,dݥTf{µ{ 0ؽw۲9J>ds5OYo^3rU2@ڮhi7M~>c{0ȘҘTJ9!~G/^6$gOV!Ē (2GۖATš™'H"DŽz7 ܱCz/lDP3 aW5^z!1~&kBTȒ383NM?7oK=2} |kf |P;z\VJ(phlhR +"eIK1С|Nñʪ jq;(e:*0;%$cw0q bHӇ^^kw++ KWxBG'Igر%4K47z*TmXqB23Dד~&`::S%s#b4ԤJr](8{C71EC ܼ" J?;PbaFgH=fEşÕPS`n8<ayIHۼ\{ BMw5Cb|2 &"$`as:PhE6V m_yZ\g8 T9|:9ZX8SÄOcJ? '_AG OD[K"/i&;%XDJSǡc^kc2V֨)S Sspt];YTΌLit`]])XXzmr^jU7ncy]YétF|x T2a_l>0@/}q!dgvĴ+l.$wB ^FbtWoj.owRUJb ;ſo>L6 nۂW2X)D!(Y!}ſ]`v6k󝒦)XaE .ۣ%@}^}}. '5}Z'9q?`BTqNjo4oZ$bDINǷ.h:b. >A򻣫Pk&#YEyUjixo=F `H(V,~J>aQ(=䭖륄z|G)Lj3 wKPhc3Lѽ j{u-xrh5J~ s>T*\]8z@FG+Q#՛Cw5"ԋ5ΰcpaɰBJrrV^>x>z;-C2 %0 2}^xrjI3 0 P)@!˨ty&A᧒ ͹_k4ྜྷI(ic{nMTx>!LP1`*>.B!V~JK1oFX~W@=r>}m?KA}iIkvFBV}Zٯv? \+uC=JT39VT_DS ;2頾bc:bx )ʼ|F6|V^pňvӊv抍n*yIt.} dnLKt QPgC?9OQEP$V>R0*In!XUrp"ɘlC4^,!He}Wh^hf5A^C,j=L ΄?7RRys`M ]~09ԚOStďIAm` U (IˆlŠ-n.6XegYS6qXx£uK-.0cK_[!s}M-ctΡSCc 9;,"ӄl}SwBv"ΊՑ&WFd[k4a&ᑑ9֓9^MzJlڱVwDk[^ qюE2`v٠!eK϶ܵd$}$P57]L718uqԭ0OWiln6M8) 3MwGʛ2M-]8G\2zO_c:\* \)dHdK(6Z '{Oj覈m*bo5ϞWnݔ?IBheFHEsŸv6f?FY chMoJ.ց/*Yi@>Եu<,6#Hܰ>ΝHpVqB1XJjd/9QG?հv&p^Q& _r#hO?Cp~ |A =ΗcsJ݀jvRqM)6R hǫRj^Hq p% Tk=y-}Ghќ)M8hcy%G T( 9-Wt-AVLv2[,FPU\J ,ftCu[afl)%T[G+[,I#*B@Ija+ ߌ䇛ro+t.@IG:2:9B1,eNGmFGiP38C(h?, >잺vGB\]e|&G*k3N7Vz 6xꤱzwKN"8d+UN_jՄ!yt< H* ^HNI%cH {#PgK*ZgjȠq< (>Sn. [s9^.`N=R1a@Չ;ӘS;Vf;sUg Nl%DU2}Oh~O"ّ#%:[;w!h0)?:5DX[[A%"N·2]ܰ4xbʆ`%^H}"Ry+4~7 &.\ 'RRzס>a&"ֳDn@*1 F=vX3J2qP鲩_Ex%_@H ím@NPe7U@9VgRjFaTU}U"/|`#DK|H'JAʽ:׵J6u@p+vXQY^ 9_@]QJ7U\|]plcsEclvaM|V$P\象iyc=N8~Y|UԈ$^ ˷ C6 x%nΥi4kEVRrￖd'&m?bCpx.ZT E| ؓ׭66#6 j P Gka3iA_ϸswzj&qf\tƱXԴKAfCF $PsاFWyɟP{6sXGw7W`tD`@\8@6K#oU4E2-☈G0fl-]%k,a /UtG> R¶(I2E8>UuEk`*9+k5O;_$A2G0ѩ:bi\YE[bIe><[~pD͒ i7x܅=Wت[~6,L ST 7`a3G,X"5S& -kwRQ~P?e]fiVf\meAbnh!Y` : O(ZWMdk5E!n԰=Fc:C$yUO|MtiB$eL2ͥ.'-iq&Uv( dk:w|$=\k?[$ c(ٌ>Ff-n^0ke RFicӓ(Fw& ,Y{2_|2'vUR-I>b)=d6IѨ%B귶4%aq5;^|xש[U㌀mgܩL/`D<;t _u!p?w0_F <X B /4v*/629x3Oy/G >!(cБ -poo[ ͷpʘ)VцӛG}(DL & '1GlWіMdMHIo@3KX2ěyB8[P7{́2FZ…t|pz^+1n6Yѣ}u]O jUڀ?}ӌF#ck/sbзaMDR>J] CJ6k59ZD%5*Zz[m궯68Xâtg5ȝ/EGq%&N,"EJ갰Yc1R?c&}R{{XgAqxwr᫩~\آemErW BQ*IKS,>5t=eWg5`4ȁjAԔJՅzp/JTeR(A:|lq<텞W`z}Ww< 4!^v |S!!Q@ Љ)۟%c۝%/F"|h>\گ=#q);>,LQwxqGx&ɦ\ޞƸl9c_ˌ!݅IX{,$iHhQl)j\Ny/+ ƇG2Β9:t [pM0>t/%>wUZ`q$â'{ruv iIhR8S*r9:* 5^XS3 oe/ŧ͋:ç`Za 5B=Zz$9'vrJ!lOixF槹㮌8}Ѽy ܣ.\ XFiY7ÐI ~]S (hSFY" ô |GNMm)gjmqr3BY]R*WX1zW6'VmѢ&c v`Fׄw \AvWAV_Fp<#!a-p' .'Cģp١.١ @V[װb$M'p G^lJa#+;bXWLFe m|zYӰ%/$k8驑%nP7AxOeFR Duaܠfd&qGlF['6R A*ۮaޮue7Q5*^=k~ⓁL$HJW:=i#}PdT}';隓r  ׍45ţ#/7uWtPɭc\6b|gߝK9`_Pb ɀDx2^3*JqC]&CMAx!y(i+W$<~l|} *|7nZ'<2 Yw?觼eB4IXޮ@1=)7%'o{*!fhj, rQ:u!(~͞ǔcmhQRwLϱ[I@d(Pڙn -*D|+ؾ o[)st3JSd£)x")+>~e J 'R$I-:-m2JRTK3|u8?..O<:o=G_>.; D\NRdZ$C J1ec`F*ЧYj, 3?]  ͅ3cAI%.+9Ղh;ACCNhZX'vz&䁀_FJmLiP=뾒7Rr2k~~+"q-:&o?iL 1_hhҤuќob򀬙-S+ "2,'r_E==u yP__XH@ ڋ'>ن]$vu?sI'elI2 a^k~/A9BL1ٲ}hN45LF}T킓7uUA##OV0yHmݷ0,EcqɯUB(BNk *;&b4c~ZpJ;v )f5`xhOΜ sp8cJ0ڼdKcs@2{cPU5 +iVYYq}#S_񉨼9(/_`Ǹ4ӄ:TyZ֙OWQ T["ݩʥK+ň U= Sk&ʪ(Ͷ[mA<~..^R(GX?5yvVε癛+7IDlrrέ*dk mA:{0FҼ89V5GK!^_~M;w]ZtTD7Dܐ:I{x@Z3PL_;m\ٜKKiyKh POoM6a=La-$fɷ Qp+g+Uw}Rmt&qJo$Fdރn|$ԛ]7{+r%ި+ݍs?9]F&zc r9E;q!ƤnrNZ3IH#{J"Ӡ2+!6uX./e5mv ҧ 3L#b`'jK͍QQf''DI[J3C_f=!(uOBa y>RM_~ Džw\sC6ԍ!S%TXv)GО Z&lP֋+@g u HI:K*[JQJ֛c͹Bl, qXXgF p~ "a=:2VS0 CZM.a_|e;f uUS"3r+h{薕=< R7 dF`6v ӆqdl*5u+խDY.#iYq!(-Pf:LIb}b;KRWƋy,0E%´煑/;e&8WQ3GDPٓ<V y?I=FsR;}1uWY–Hw C cvySs`~ ȃ[4 B| 9fmHJݬݪ1  _ARva#`Fx($n?[8 Gzf6dΝ|լ`~%OO-q=*-7NrmK0EE#X,X킀ZnTN,*RgT3 bpרFѩwB?07FXR9%'}%{(s5͹VjCD;99.+>H$}kuO]&T߱d=NSqO0/Dp 'YXFD9ZʈJGYaEL?z GDY= fe!v1pV헚(?TL܎t?seא> B/1&kLZϵiJW +Ë{z>:ⳳJԝC\O9oyx3=?럠MҲ[6@D8.*l+ShMOng2ޚU2gV3%rsQEޕv:>Lۡk8ubxTNE}z픉6T}:ƛg<.]wmFM$nU{,f> 7kj 'ePe"P\v@NC3*se?d>3DMԫ M{ isUc2D%ަ=1#bET΃٤$^y%uHScEo}^Ļۨa+kԠpyo]ͪEYgH >% Lw0z+ d=1$(O:KJ\Z7<+]&\~%7˼%\e f=gtPySen"_WtRS]6uXeSҢJ"M.#;6y?.0IYoAd<'ȫ^¼%)Ă`Jٱ"B~6{w.6/BSOZy}-KqC j%W0yuHI`1n=O% qZxhE ˸0 t+6=!d:L"øanȊ)ux-A)2s+-Wk7ɘr;UKD>]*^4[d7?~ݟ7k+j_%ulw's:)ꂟÑRKkDpjP'GAIŗNc8 = x"PqԂ3DMl7.2w F,ip_[xW]Oin 1\R4p &vH ߸ݪapx>dC4sR {xDDrИmT?_MZŚagW9‘ vS#(my@l؟|?:Rf090~+^RRUMGG QӒR^ } X{|ɄG/leqC?|7ϊڦF=ف`L.pCjQ6}po~e\ǚS# )8q ,w(D[VZt1:Ll_Q4e%E`yM82k -b*c29TɈax**.E="+U`R_@a9 X ӫh8z{/XJ^ \]*J0NcLj>;K4Ch햛Oo%vkuM`1*XQn|ӋN BVяrWB C%t볩]܄G|h{l2<MBu&zU(X|2 {ЀϺEmzdpvK# H&/Yr>8x2T. \ nύ#u2XOtOr-Pyƌ*A ЇVEK#mouV;x0 vkςF?v'G[Zw t xϢs1 0WE:.9Ɣ#/tS0"+O_9@̢۱v/ݒYS}gDFPHB.folY+Й Ϊ{b\Vi$*q6¤DpQ \N+Y? {E[;=Gʐ_4k ы_c0 f*ms `RjpwȋUlg'@k"~]%knJ.*]=.=&STuMiڀy7rO,YoKC,P]E@MԔ(29c!HcFWzXbtC+qګ;׸>tpM"B޳(Dypѹj넲&tClK8!K g3 ]P&K=A󙩑&B[}@Z)jAA{t> QM#~sp CNp>egS~Rõe]׆0]}mB*[Ͱ #0F]F1=/RCZA'G%!bACi:y*U`N , hbqwE1x+MNl'S0+A"ZZX犿@`-tfX}xD FXj%(!۟)1q]8AFң*m<WV{4_ rK@$,5"!9p31Ǝ*@^b1sH`@3n3RR& \YaLGg? 4144;6@a4Te[Wqc,ڸ S3AEQSт/I`/7eV_0K|61r|BLq/qUpbj.f8ˋNB 5$mm&_(:txZQVV\R=uV [ zl3I)( tV,c ؇r:spkfV3NLgs"3NP`یn̄ tG"D2wc sG'{} W\ձ+6_=4E‰جq?e4?{,uhY4 [S Yi4ݜٸ'= =8$fŭ y%<ީdOC=o@)0g\ Pl6]]ATXg ;?[_ϭL]u;]Z-=}(D\h Ba-'Ζ {GŦw}8 {*I?̺  z ߔ_9^}WNˁAq<߃_zR 5-BD4whhzt0ַ λVd? :o|d0D7ŒD;uxE ?n6s^ۉ=e\K-+d oɯ*T~ጝ5֓& ECMᕌ%sBh8?y{ܷ "\’Ym`uQ?BKW2Q8# m ХZHyBC9 Pyڼw օoJ$Jߑ['5X=bHfj2&åϯ?0B#ypsf(cEi2}<,w&Yx:G^".Teэ1qo-(Z; c!q&t^q`'渨N#I oBAП;u.!N.=g JE8,9}L6kM|C*Kd[HaN?7޶;WBrح h?#̇#lmݒ2?y=h*;HI"qQS[oCֺ[S 8ey2gnwC=bz]]ˤ n!|~b&uR&:(ὣma8\=Ƨ#ԫG7ڤ|fm32m}Pm i]3l˯UuQHi}Ay ,̠8artIx7'RjG< a1d|I򱎷sqz^# uB 8z61 Go3'.V\Aj*9Ot .w.j#!/)'VBj.r~s Yf,W\*GIO)cHunhL`((X,!\T1}G_[f|s~vfu'MX5['+XQ`b$qIS IW,#oL^O0kpJPe, k7. c sR,*tMS/<2[WWP*m@e̸1.M`^OBBB{#A֓ 9^ʕӅo&xgio9h\q MEX**u Hx<<EI6_0< kE H!nf$j \5lbcmԗcbMRǩ l,FcpG׳Dۙn]U]HYܿy/ /POA?@hZG1u%T0E@2VRU}8n+ !2e)qQWkTLBcfɗRCei3.i+4q=+Nt`Of4%s ]4_=J~ח705#\#UB|X&oEQOŸ+M[EoZ7ƣMVLDņ 偃ޭիep SgzEn<&6|Shpru~0cHۼk=&jeucx`Bڔ^}a^]ɂ'giŝQ#> 7IY(RpS s<Ӛ!ʪxɢD-4#DF5|mb6 icjKp!Z@Q]Q1X,'NެNuEuP3t^t[7vw,'Iq=v}:BHtB]ӟVXKsZ1W`k8b ůtV,ܑ^PW\ C5F^Iyx^%n g8 -<OjOBP A}_l Yg(5"KeM''c *O%R bX%^ZNNcbGB/( dUa;QGNܽ-݅3iCTĘy1DOVf+jw'&e 8Ғ~C X)1+w 8 9FQ2uRŋ1i__sNZӪ>,խvϦD64 v5s[R9e>JbDgc_@ݥ GN{Ձ^n/ƋIhV}mo~8?&=M <wLvaméVh‰3OWbȼSdVDۣh]׳m`LQ8Ke NC ILQawS#ABO} E8‚i[x((-0^˛^. 6m)C{ u/`yi.庙lR(aŒbK3/(ƑX-_!5S+ <q!^3hx13_8xvNu<;|&j8;*=9`ƀcT݄E/u?@|{TN>fFSpS /@]-ap&hH':9}jUm&:俎/.^*J])dǮDhҚ5LR!ID \kӉߔTڊ 3 xm*L0̚+[i rn4E yIPWh@b:S2 +a`"ǶV@9W,T% Q]'u ڂL, o m\pg !bк4bX9y|=ܓwxX)7 qm3glYOPd* ﵳcVl#,x}axmn}'!OU)'g0Bٽ,VCS~ {UDV|p)S]'딴Tj #~`&ɏ- L|d.Q**N@[!ch7:.XCVh&3bt`\c5T`mHM}~/+ wqn隼<+46YwMR9qFG6KLyO/O8%M{n9ݲ 'yj^Ǡ<-",M >=pXS߸0C]((P>D[oh:[vKa0[Vggey\Шl!`M,O3vdTK x̪t_ FoM'B|%DMHRMxꜸln'ծk,Nn('PT#*ݎ]yjkg= Vop47t`O `? s*HԈ!lB}(qNAV,1݄8,'yum!/:́Yn/Ώo&$:C3nEV1F*xYa{ `Ϯiw#3! ;tP ShJ ׫2$' : /`xKѓìOlq O{rq/ΧK2*v̛*>2L+װ⣋n̫Ƽj|ݓ6!6y*0>vKcq}e#O'v6\6Ro!WϤ2ui+q]Vsz^dvT<LuWC-T]ɭp];d`.6BU d/pypOá[QwN{;)t($_Ƴ!8JY6aGI0/ߥVbWܱ7k 4iow9)4df!(kI'Tlc߰KtY.E2)`k { 8M|;kf/@0)Ջ <׏ŗeLWZM!R%N>N%B~cqۅ=9DSW2Klƅn. vl ~MLKk(i2}㟼S]=>`B{|TpGX4U=zURcv0s'TyNuVCу/]&36z-ViĊ7"я;"&$&۵JEɨ7tYbBz+"tAh. "0 s%KeL:wZ$S:]¼[؇^=Y].Ǘ4p|)j?x0{koĿ#X+)C;%|O1>5\f  PD/7DSd zE}1ȐeVhqXE1Śܢd)HdRSRu|;~AٽjBp38fߧUs öڇ%r?mvxF2ddjᴆ *(wc,! vu ̞JߥU0qqH*q IKy 2*Qdfpnk8Of z7?1=5u.WQ?ǔX`Z^@7mL% RG&9%LJбh_^3~ϗH[5k.r͝ȍkI6xӻ*8j5&2hߑl1֛Tyа2|}<) _*[4 f(adLÜ;dccHSݠ[w7s9c?0&,].*P,mjMP3^I* /p)jKDSAS2qE$-Gx^ə+Etw" h2bp&Tϯm8mVE-jzJEb He!=1Xgj{۵7L굡P/"v"V[RP#"H[۵]{{tٙ\ Lnc\.Sd -)MQN[X1ul/we {26]h-%ec:Oy3C.d ꁊtcԍ/0oDl"BTxgx7cnc]}sDHk8WD-+/yj/LLoC*~5#R3]})M/m@; C'm__9EbģX;jEs-9洕#\]bHuCrԫ!tp$&ե8r6YO$'K}"hjjۇ}Aј÷g]/;sHjB̳،EeQAL=I803T1C϶"ؗPW?E J׎*+ǹ":h + Z0>O}x=d= g 93oy:S3`0Sp.s|Q݌9 ^j:@*Đ/5N]J`q0?inj-&WHb{:삕a w`10 "!1c[azu\KyEV*@C 7]Vm1/-K;kQMVT5$['+J|$euF̃?+Bl8ϦEݫcxۚ:)hZ! ÷/I :S~@5Gϣϥq1ڍ6 LT攄l >VG -U{VٞEQD4Ȩaffȥ#\ 7Vtϗ*Ƽ>a(]xG8qtE/=,3=uAFmm2eĿ|jHbsdð>ƨjWr*2@V[&R,7o7.`;^:dEv#Y#苡\ۘ7( K m Yn ͺa15ɻz| $O~ ʑ|(F!+o?Fkӱx5hkxjBANQ~/u(3_1t[,׋sCa%(I6亠(xrڄ>!#  Z)`P6fR׏wT^(S g"yu"K.,<@MjE/S}7\E{Pe3*Vd{s;5j4=4r?I67htqWǟ5[I}GdB#諻ᄵԛ:]Gg QJ\YVmp4È!c[:_w,'-5I۪tز{17k^qwIҺMBuMʄS-^_ɏRt(yCX _Ԃ Q;<ŽZ,CfPA4<-W}uAqݧXs*AwD3a cr^wae0d8eď U 9"tӢ׸;nd"h,byT\ :2މͮ+жh`Y ߡUB_ʧH>mBIS?}N Yj/y6oݔQ}EhvM8{RC[ÎjȒYL¥q 2KsaA\*@DJ= nE;HZ]_L3G :61=Ơ%x(^eUsFeΝ7g swf`A;#Fۨ?5RjsmrZMaoH9{ñ_Krw Q<1^役CrB0Wݰ @|R_i 0OB&CO+XLG|*=ۍ: 8a}صO==*jo5ftG]и8SxՕC<9ϛpW=Ձj u!?:AlEh#9`{wLK MѾ ^eaT|i/[lv5x]˓ᱥ&1([Tc/x9q$Ѽiéqxe.P]t8*ryi}Pz؛2y{n-&JE t'l5̢[#0Vu~o|:,3GQdzl}^a y25xPS'S:Qj泽)aּp @4K!Ki[,f:  f+#sG(pB᫊DSA[%s 1+ld!Q Yau38,NiX%#c@J vf$l*ݨ1f.E۳ C<8F ,ty!` -v1p^/zXܣ(/ lj68o.#O>E,d!뫻8TK_$]a˶iT ʋ"h1}qI)UT?(=ƶ.>9.֡5'w0 ?''PQ;7Z- ϡ/ԉ#걽g)6~T9pF2p+2x{jqG0d5dЩ E#xDrj| qj-<cwNt8J"8j]kڟQh&E ͒T[)WELڜ:8x\E,km b ӜAW5F&A'Ϗ)hTĻ~).Ñ$LdXr,2$dO*9\,ͣʠHCN8n 2Y6h L-~f[ ~dr&0d0rb`b$-r6!mJ"^; Pdlv-52OONy.|717.cy}`yR7װsF.mbeַR;*YLK0&f)LoT#i&"u9 FuX;bl@h?J Zt#IV$;K?W )ozsV8gfF,T~hr: k1\XA9l"bK--Xxv=֖ѩA9c=? )o~V .[ $/ܒT) e"VH;]c1cC*{ 9^5rɓAH,Мmh}o*$2M,q|Sn1}3Z_ Ac[kBD9duD.w;aP_~(8;yrm5ÄQYTx6mf~YC]^ VPaaU߲a~yF(&u8*aYYP 飕M [5!m`a(!H6t ?BkP6pb8`ovSMRrxyt{G2~_ e Hѳ9mdKŠ`|HnځUwƕ TזMVgc,nFi1;JEܠ -EN|-h5o7-0Ț ~GoL4[FNVakLp-@6}hH5ůP"̾}ηԯ7d4y.ZRsvo\<(buWeN]ųc0L5LMg0>~Z2 B7kmU<:*B^KuHF sHKp5H \ƞb_UR {y(jT, <*k+(!vLͰԠ/АjmjſMKq#G:r5$q@l_߮ : DБi[iJ.ʦi&Ra|ϓr 5}}rL1IS,:j"yUv ]2I1Fh踩c:5}f:e{u;OXDmC?VK?w0J46_z~ hb6LMHߖG$VZ7, f ;NB)$U«+Eт&wR>agT!< n<~8Jl"KF0P@ΤQIGfGzQ6+ nᾩpcYĹ?a *;/+VBo=lK#Ne 2v?3b*Q@5Sy˛|ue3–4Z. `x-+i6`H?'rxDA:T7zH[UH-^!=:p3Ҙ F̷#}Ko['~ .y 40%ܨQd2 63,7Lޫ=-J0T rn&CȫUymّN \ 7 IJEM{^ i60"iNʌj!"vx6 Dk[Ƨ_rzfHд@;֟)'q}77Tėp4u `A~7iVL:j,:ϗAzsj ڏxG[5['Vx1r'ͮYGˡ*Ji 7c@\_\gt?z{l-OuK\pnMؔߪ*; ȴ\z^nPTRԳ5/Ac4F?@.;VH&N΋]S-E&y9ܨ^O)57Lvj:`s͖6T! .Dxi=X q?.mmEz·E%)x*3O=tݾVN<EZdj,2Sr Z ְ֪yR]q U"5$JItNyǟՍmy]vtPz?4^E/`鵍Ӻ 9sGm}ch&]} :xWY+,,"LU)G$2eŌAhEⓥ?ŕ(O1ׂ6y/b{1]!gW/8r.Bh墨#{DvY:ADN 24@Ȟ雡ty<Ȱ"˳ZSkjp< i%j`$6RpUmZ^B.J(*ˤBlgyAbA8HrNzﲳAHr?KnL\Q&%fO&Iq3Y+ 68uӤ-|Mel*e}F ܌=AauK(L!wU#(Onףjuc2$_& ho ZGpϯe].)f kXE rո);;W*&-{?O1.ᘨ=OӕvƳϊ;̣̅#pLtw['YST"'%.8Vm]ڎ (ZvP:ճ;>EPՀMн{[qx#C=1LxTiO) r_P(a@p"GwcP- q@c9QZ}0&4Ma9/ڈ›&q5f7XZa|fKK`dI K_E ŀnyVE UKJj͆,*O{()Lu؟%nFpxZzfeh+!~2,TWKGcO]>{ L}th 6 K[D!5An?.0"n.Oz; $\5ks$uJrЋѝ^/_+HU}D90TK_oOHkHYB3v|bI#&n/iX>0\F:$2`iUv_#8[LEgF@R ؈CR6Fg/ֿ-*bv,}F0+^3#}:(7˴OtT"o1ci{6zJ!Apx.GBܨʺU-%s}<[DO=F;غFuҴ«I!{9}bp$` ʂ:>:@|YY1Aruᜥ،JeUj!zkCCuOrN"L\F/X9\*Zƥb.P];nD&uhRJ-ھn|f,s. hdG!!@O,% `i~7 7c斏jsb NaH ը}u(z",M孼w}氡'%#Ii EPW.\GRV^B/-3Jb^ E:}ɞ`loT5XmdV2Ӝ3<:{/΀PSs^ 42|#9Nh۾s$+z^w QZ+5b /^H)do?:_ #S}㋙p dqtA5JIZ.6zar7Cwe#BA˦߃58Y2ri G\}L^K>~0q2g>n?zr*ڷl ׶k/]pc"Bd;ݤm&TZ^$5O*@4KM%-E1X#e)K R&uߒ0xw?Ǧ5ܟ42bgN?=x%PqsS3[p8xr,'N:lX*K/4;xfR5ҔTV5_~} k*Uxg ]}qRզ{{b~<ٽg>͊bX[)zɤN"'f,?$Нl=C$:R/ )hN2ݖMBlMl Ұ&Ny3:NQX- R*e M3M*ּ!0PځQVqpUx^Iŏ#MJnF9 =#5@@6<\we~ Ԋ54Gթ1zbHT#R#[VhEQ҂XdHG bj_AӐ`2gCZ4w׵дqnqf!iU%5P߬VՈ&eփ(Ч'1mYhFC~y^/*{)x7D:kWNj}Vԫ$}NJwQ'`꘳})QҹG٪>G:{hj 9 lpaFdzrYU^<]THz>@jo"r 1J%N-Y6 z@5N8 BS/Mв1(+L}i̲c!wugceN@ys"dZ{(N.rQ$]9T)>=aE[f>QQ0MN${R.0^[ n&;WK =YLUx??_h @~nJ"B:4ᛰ4\YЏsN.7O]êUSsMq=ݠ؆܇rGX%(dcߩKJR)^CCNRͰ/:<Ԑ"W IYW0~ḩkAJ6"[g,c7\YblO/R'|TaکǨIiKҡkan?PI 6*J }KZR);lAq݇×SX&-MxP.EF?5 wx7Y]&fzF= z߈Mpޔ-$Ʒ2&W.┨XkO+Jzy HR"M0P_'UmwΚu.g6JU O3V]u=@6Mzm,Zu# ԛg 3<^+E/S|ˀ9k{ RN0[pcwO[k*.dm!\ԁJ`΋-"OE&8z_=mt!f V3b7N(RJ6;;]N(e؟+t,!vbb>ؕ4[Кz*z5zwg`%N78w H4-*tGxOH!"<0YoҙW7u9E߁P󮁺]5%'%#)4š&AJg7~:y.%\{K9H2& IBSywUKU aP!P7qfy&:@s卑A'lFK#U yri C% @4 Ċ<@`*AvQ'uz yߊOc9~|yvslB!n몊=ޒo1z_`?=\'.N:+~Qp]\N\oU w#gsH3}]hf'e-v%ڹ$(Jr!wRX/@ jhO]$G2pY^r fVIfQ l,ZK.șZክhY2dqv/=9$u5b%B{הUg')tYQk")l#>`ѝ΅VeRorj4 37A4Iqpo u wN02/qf|i-&?rߙ8/['!0EW2b8R /d)3P :$ȱݍQ[/O S!ё{N>J)p/pǮOW%7)+W+ƙ!\B R*4ES #`n^]xA(u*+o B)N,~ep g7*G(.V/; } /Oσ.~J?GMC' [u,UwYI"L.M"=9p hX™C]⹋ն3'_ vُ+./ql5SYd#6=~ 6k as@⊫_IPK4cCKhZ™P˵ `="Sݭh,MحKs.NwI ş*S_Z Oe9EoYޖ77 }PvKpDw#Y ޽֞02XBArWr?}%>14 GKoM0ajfogAbݮS[Byggy?`dV Hh8 (+hnr:gR ndjنa3ݙ -By7dJ+mi*"1KBa+PdEZ|3i就 d;mXwv?ܴ1,6ZnZ ~+LYܵ޳h6*/eUdyw}Sk Q}b=m3l/3EQ(ۓQJl;iڡBXАQ\x_-q#}001$ R-[ٹJ!'(:pB*.l$.)>a5t8V%o~Oa7d]I`6 BNr@2&#uF^{Fps@XvY:cfW~YaL4z_`-*Е3>*踱|gcZ0JK$xVSTf`-G~BE5 X&9`uBI¸-ZC C2Lp٦l/xx`{ǒ%c@_ӝjUۣ/J& 6kqc]C]4#R7Tg8/7:4͌~^+bsDYGYg̶HZ@12Ք8ndS$ Y )c=TaAޛj*fVê#;.}W͛PN~;*;aK Yy=ׇp)nZ2V~&Fg'(cP=X{s121l+d'F qC<˨~ǣ0tYSth2$._dNmjALL|8>Ka[_Yak(ygl-2G|4eJ_"1e=T6r)Z!g>;^| 2dr}pς%-*w:/-Q.)-i.j.ŦXXᵩ@p*AqG{]ו."ɌC]ޟa AAw 1 l'} !#6]טI׃Icf lE쭱=j5pCOމ[}cyfvu Qrb 2\/Qz?o,%1q =͊0G.#L1]*@}tsAѯ[+~r՛"pUIJpҲ$$-KfѷA?.Z2Ͷ?U܊ֆbu (:?`yBQuIt6~FyWAJ!.#/CCFב7}VSlZr*mǙHO t*MV񉛍h1~od1EB_+K72S2ӵ)F~>c8tk?'MGSn,"i\J:qֹE?Mp 3nUݦNz2&hԺ,Mqg^=OF]-*&8X] D|P'v!} VjH0 yPt>UBjWز9DD 5^7ԙ'\E\.VnCe؟*4"z?{e u=oѝՃ 8҂lϟ22M`u`脁޾˖5 7 xK 9E(a}ԑ=;k٢ $)5@}Jח(#sZI]SÜ;䄦= ?}z'{M6iK]oY9RY&vۣ,y xyy'.c 3LųT[Q#gh|ZQCt=' C'PHtdffRGM7I]X;hhԀIgؐJ"=eH%Ď"H$"Iv+Qau^;d0}ufqyi%bXV7/!ْ?fw;Jtˑw}PDtZܫk_6|;zr]x EPǧƝw K޵qMu >#Y΀ng^ |[R,؉u-|I}-Yu:Z63`Y!~|Q@d0 f;}oD'ox` ~H1ɞ}as1-fW)osʪE-4EtrgWO8ڧCvA.莡I "QcJk%ƻ%*yoTtG&9h^*o~2+T\ =|WmfgHzqcq+-="=CkZiQ8/5Z+d;rx޽'wؗˢ:?.4q4zf1(滅ʾmPkȣrAQF-ang3jk2;d~:a=Fo,glYh=KUbdT 5>ykdݔ^27Zn"纼S~٣=]2'S< K`̪)IF13+0+?1xYsAj(Τy fR8Fp*eL80T{8w=7)_ŝaߨu>lvsd9aAiUU8. m{Nr:(x[z]7#tv…];)'|R},Z6eRHkQy^^`}> $ud ViǷ/ӜJ/Gy^R/@6cu\d>#Yk: '{=瞽~gerY[oHWk)CN&nymW0Ce G~)Z1fY>5|K+ b}Q{P dvt--S R1 N) Bj02*1 >▖Hpce*;ni:Sz{6DV/'s3ɜ] 3Oc)\_&\)Q[Jw?>,`ٕW!4Q5G3˦׻i7{.  $S)FyDe{""$waewɣJBEg|WHͶ(rd>^VԉSZY]rm}_ C"~Ċ9:%8`0i@Z}(ds f.s@2!F|ɭ{֕<] ( `P: 8\O0aî.Wk" i! S il΍yf挣z>7m|Y}{O$)0 -CȠjOڨbb8bXM]-OZ+7•[ȷ瘏 53qcFTQGp&UCV S:<˸ZX]eUFY= rk]$f=UyB[; eY3~iշQ7 kc˰$:ǂ7OuT[kXKR6Ss"b*Ft!>tl%i+9٨eu+i\!D'=[\S'("007|`cg("1 VF_^F]^@tL"țB[hq}nb;/ =u ޙnrT4"Kj?`brXNv,n=߱8|ֽ02_Q; kr˒SIIⶻʘmkSuTk!7{su{"ڟ-N(=aS^u/x^q?GZBD\9IqUK )H|purqcbTM [NVص O7Twi.?|ysHyU4;.-{e~ m]9 66]8D"ZhuIe:-,kC&U1w$&%i+qAcX6R3޽2CgzOe]&=a ߏ6|/N〺sW'P(O73gki~Η9 W hښlo;6 QdN=@"V͋콼gu{zȷ0;Wwb-+Wn"0SE8?- 4'^aY.ў) Y%Z j4@GZK0tj&Z 40z ޚyw)[6v@zآfKn % pQ=u-֦,u~b4&𵱺hM\|K)/ OzX";%=O#S[S5VչN:(Kj$lF,`?tz{Z]v ھHg0ZfiP鈞<`x5>Hсsn6gՉNB>ږK՗bD Bxf?OVT6O蚜&lPG<_id1xW+Y9sa OO}ohę/jQ1[p(+uԒ.RD;ӌTZEM>˱`oyA5.Dsùۑ}W$(KʀXF՞ _iu*%k+ޏ Rtn|-,A%FP:)GVx%V} ^'C5Ci,'NBO.3ěN緲4()GK"ѳɠMta6[- %x\G!繽ש'4f#SA5 sPfU(?!k9z׎;wOۄ\~az2|e OW, AqHC"Jlȵ+͘7.ѐyBvoV Zx^mJ[/BwU0pT[zI$Ze^Dv m8v& aFJU5~wЈcT=cPg䡆lZNSxRzs&a}/VeUgN 61eWR׽kk!WM{6G٬zҼ=E~Xτ6mۢ 큕_}/D9$'|T$Rz1-Pusec2, <%Q9:~hy%:/8p˨|(f!9` ~ Oa72h[ƪTuaQ 1tz(8g+kkF֦s(`08^ݣ'r&`LXPw`Eڃ=vSHSR ž*=f)|ub~. b1Z 洱e:v4\􃍦Bv6D@(2j} !oH~5c&l(ƒ T8ɭbcd=ZlXԯB2)`. OGljUhr$WY!F([FjӼPxdP]*w!m<~dA ^ɎgyG$># 㡆+=ڂ_y^OLZ<nCy3ɨiWt> )[M*ܜw #5;I7ygQU"dwoL0 2ýtT~$tBܳHcMq"=Άu_ZCbmȫﲂtIab=Uu-~9fȊ+U\W:識Tܫȑ2J.&- %W1Jm& *3= msI˯\D{w{8Qɐ$tt"EH:1GfוaP$?5T dϚ|BAxoQui$%0>͜`JW<0k<3Bh[=OpPr5M[N/z tVW!L2Z 9+5E_%*Q9RXpđ嶿[/f7Ϡ+u[UJCy0X2y55N.{bx,7/PfP=UC@Bё?ZxύfVtկH:yN1!b \! "R7gyV7E)+S:l[^Z궎`SϱH4եN&nՐHVٷa Qzd"GUƬ@8z3\v7#s,8>KE3Pep[UwKlTTQ{X}LJ+γժ&bO 'n6I㽘e gW]7~.>QzEǞ"<ʘ:/ 5y%CqLq5$ƞ=.*p,]^jw8e[DW\Py-TBCv;~6WAZ%=~i.X/+#j $ ǒA&'꺊'[Bs+v6c RaVt톪& &DGBơg3XXʳRF>Ԁ=5\ E,;[ xsYg_SoD y4t*2sPe@^8ikcAz^P=юY9 T_x5)[y0^+uIT'gC_-!ᆩ]o GL Kgp7c].ք!,͙=,<|;G,O#DmQZ{'LgTC2a5Q:țtKMkX C0]X7|tRfPA=N *AHQ6lC Z[@RBDK̷TW*,YHӿ@hA1O/3-U#ΣAti/2nDKL3&Yrg/1TM:YgVXgpσ]\v>4Lq!s*]v Adǻ](mAKrqͪ61|t\YдόvVU *rh@69yX>vWg>*J4%;/=HxS%e )f/Lı#>ƤӄOY'$PuTl o:\s0؅ SKUQ 6Orٚ-҆rL<Q& -q5X1x۲$>p/ GЃyFJJ؁PM* GDM rWXGsB\\ ~=I`Le8=9 Gt{MU>XU#f?꾈gL^BsI&Xo[5=;7$qݕTTPa0W 'Ϭ)(;dfJjOdsz~siκdR7V#1D8}7@opeơЪRnqO`w 뒂̻.;10CA=W] "Ilr*&+c}닭y-YB#ad|8tg]2.)c&B?ċ, R"xK>a]GJ 4fA'jٍa^Բ/-YTq -vK8h(27">/D;|wv%wώULmrFCA,0lwlP 1&`Nf3bl7]BU L\F =Y,26sBM?g֝Ɍ!N־/W/L%+q31AMiLDsI|aaw'#&&.f?kLk?5-L)T~m&eu8NمSӷGdK̝%pIé:ƇpP>Z3Wzc":kCB9">ћ8fIXXTufo눅dlDRp޽y - ڬ_4ZdLh=}P@^J{$)Q00*Ƃ 6 hUük"#?C`6&;nyRZ.(L#d팉kC2rРpdL֑k0YBru,;MY':]Ł5*~ m7_%GZx'`CU }k?˄mCnR=Qz[< AϚqD6xevꑘr1fej_M"TX7_QI,jKFRJhXR}K }070>^f7PqDC,ˆXY3 )}BSս&..ԪOkՆ$ixxzڑ9B=xOȾ%L5|c񒪸Ԉ^A?VԩTͤоZ+hfTa OQxa8~ jHzL9F0>,j.5V~LBh<m:vjB0]Q[,a) ׮Јr*Uk5;O7J7mJ8,rovfm!/3e IkG ;YO?L,o%W@05٧וXf~ JpC& 1Xɧ= zB|d4o х}[i2lGw VnI͖iWF5o.F;[3vz27$R!?]ƶ$[8/*DΈsWl\Z* *Q"Xtad{\0>HG/0ZI;D[Rxt 8 V-ua XB쯉O)Ϟvh9OSa?aWVFruJF m"{趃ՓMնnKȬTT@zzXls XZ7*mx2{Ǖ7 /R¨8Md46%-%۬ R )##NE aVl8PquBsQ2%PyrO hE0W%RVc\ !כ(Ҩc]"̧38Dp=IynLtU˪;5 c3l}3e7M H)9_Xybte۩+̻UJIqşD`LtX!.V; ƭ`3m:9׍M*}wm+e{ɄOgwiV[pٖba?]^P䣀}NX$G*4.`/me1tH Ot-Q^R.W˵y A9gD^̛(D-TE3K5vI$79FQL]9[4Ra>?Mˤe 쐣1$yLڹʨ_l @þ4'^ks\~'&Cm^3302QgvwWԭgU7GEBH瓳*RZ~V{]G:l +6l50n%OĢb;ϱ+.v+c܃b(n.[hO09P ]9%y@#gVD*-(io_'i\5ٕuk@E p%,&&3 'D]JyR4 ]m}\ nU-*BTIxܻ,[û  i*l4ףE<%8mߓE+?>!n1-!w ]Rf)y ̺m2-2sx>ո;ت:#wjwXphEQ8'Y(I 95V: qj>{݆GY3 *{,Q$P}PD)m{y-UU&; ,VQHRzKFq?ȗ SKz+,}B8fP e*ji\CYjS `n´^/8o oFMʸZ8H ܹn0V_C'4×RK @ydE؊3`/@N ?<=t4_VG cxt\1%rE\&`دh.9*mOahʒd_R%mlq tT2P 603-e[cP<H xB{g)@x6qL+eV WV*n:k77Uo?|ǽ@ ޡwͥghs ']l-:OM,ɦ|!S&gw ͦZs]+cZJIסF|vC|h\#(sex(SEwhxd,*CK,5ɞNBK5e}x#4o xэkSr{Ò 7!M$`Ú6@I߲:D툝il%F^ -TaRaM ׶kעv)o1\J<ٶH='Sj޺fzdJ>Q I0& ƞ>_fR̙OT*[S^qC>`i$M7'7LâєB]p5jb$)gE. u;S5y3$ d5eG[ZqA[S$\з0R> KŠ⃥@] ;䝐MuzI#S *ף*C2D'{NoD3N<3gdxL}hbs@J $Y2k鬾 ^n8$%yjotF{n7mm,`ZD"e~BZ7=MsU1f1K[-*M`t+ՒMbb= xCyFHW8u|Uk1:"tjq24%CCa 2 j4;+=<+5"YW-Ks6]!8Jk7C8ˑ?1 y5ڨ17.Z?8{ maͥY>-vJ@\SAA"FcJVUw$q5)G79-\+fm:: c)K!q{ޤ'4ɛ\}QHj9OTK#8_ K2m@F4j80[y/e$'ݥ,istsBJ 7G1lH\#ؙn߽bELPh`xj8p .fVsjn *Bp;=ct0;e-n ƀY('-ꐞY/0}=&x!&$Gmkj'Wzk:ϪҵPjRG9h1+}aAqނ=2">oz2M^n8LiBC+wy^8GJ{^ y‹l,T\_r!vKM _A}F+H@H݆{k@cUR2tG@^~OK5+R5gej xPaIi9I`dA"q~ <^ME!@tTũ3AM,p LQ^!2 GL<[I=$%GP\b$4t'z& o{3=qv5٩TzS(萔֝^TIBp-P!vQ`' ="B{KN`PùG⟆#e\ag蠶~2' VFkڏz3H57ַZVk^́JHsU&gxE1SpW^[4if0(aD[˫wQnuC>1Xe# `n%ȄL"큒 +=vd t/øAڮ Og{Mv Mhf$؂c׀@i2Ҽf; l|_6MM.7vSO;Fk}sXF vuOmɦBzKmoOj Q:)t, A$/ˀKK&;I:*Q:O 4艹As$It}՛Бw.[Hh# #B = 0tDXJj')^W9򳌦rM Ik1E ±^Sm/I.MK-h9R{ޙ2,^~e$jzwMaP>ﻬjMLY1OR"RrU{@dUFb:KFos{An̲ޗ\[3[<{#`l1/b^>G,9 t y'$f~xWFWF ry{F+偄jxZ/x:ʭfۃe 06p^R,Pbr!:S;1= KCa*gst֛ 3dߟh14[{1kp[hq4;Zܐ91-TNn}8]u>b`S-cӵ GS|/I5TL/.f/Ir|,=:)=r~J\Kz792t qk$CU75`aF poA֏6ϻ`3 =$R p4k*Luc5-aFvVfv e H;A)Ʀz4ҊSx1TU+dM .\6ڡtﾘ=j+%e!{)@ǶAvU0{ 0%Xkqz֝(4UԂj]V3tN4?0DE5"(s`z&Nqnl6߅%[ #]RpPסwRD3]]WNZG5ZXCne6[>Q Bv3hr'uP?M c'|Sh?")aH!3 h5]<e%N\zR)eV֮5`Nj=K֡3JVXmek[H opŎw)Q Qewzė"ecFn2z+ U1o{TN=hlˬƎGRAc`RNeb@^AP7m%Y5BR1ޭ$s.Vzk0>^1Tv`(5t+7׬% =\}&6)h}5a C_m!`n:Ғ1g8S$O*iLЕkc3lI> 2 ē]k'#9ﶨl6<%*<WIM|6#*Rc)<^)qǹN!r Cܖ`@+4e:w!coVSsG#̈1[XEo|&D-o$ U%0^"acჅG㒳F};+Y=!aLmSɢs ݽ D$F uF@ᢤ۠8 2yTp* Y]sSf)_m?uK ~c0dF^r(-3F%"yX-;.w߉$T Mx͍ehzK|,%'K~W2jj@MTO/K(Z .%}":&dZVVõQ)S_\51OFU)EWb&ԫDBQq[1e~ՍRXØ31a 7n/l$a]7Qe.n;O9t ]ޤvB}{&mϤDBIߧ*iOm$bE4yU5.2}pwJ ݈]bH&X*{1O D,NYs7A%5Ȣjpod۹آM~ 6/#g#ܡDi#kd^tl9z2g $Ç7s=f(*@~ib9o83cRLTB7i4!G̢˧_e3qLA,{2\TX!黛fuy9R7alhVl8:'|׊CE@f,@!7 ;_1v'$ϼ\ϝ*3|r $q' 3*WN:x0hh ']3yE}AߜH(6RDJx[H]qTj66UTtyʋ&׫KaS1PA&5 "E)@AX^hCJ4 ;R 0RƧ׸Rq蔑"WMn-rW"Nd A9N|nݬ"<@VTdrupK6Kx>{6&beQ!S4aY1[{Sp> gN %:;YGN)N mδFŠaЉ .fea ? RLqFSgT!z*hKb+ZKGAʛNՐ>;{zݥ M_\+҉ur6ꇾg ?oK4{D.͓ i랉-f"&ߋhG1r5k7/ЬqyH_({3;Iz0nY"MNV<0gdtKƥw =+e)sT)rP(G[Ei1Dst$"͹%t&ohwc@[)]zƤ(Bx){ ɒRƎK6pł>#Au/N5 5#e)A.B?qVI*+XX2h1*af+E2h*JϋcĔ^/\0Z'S-1uCڑE KkTMSR`A`9.l/:ðm U,$+X\tlYɳ}哟uE[?˽ nGA A>-~嗋VYZS"q64<ݐ3}|w`/E7o*z40MI#7/Î0-tC녷Xb̡}z_۹_MłV埢w=^on654w; xͶ:{_W:!;o&yOKoH[zJC%a2GK)6Uz"Զ {S[GF#^_K4=]M Tyc 鸍*x4WR+EP-"@vTeddWB37y$ͽU9qߐ> .o%|6'e 9%}vtMɗ'L6hЮ7l2pL(n^O (hJ;^R[+!y]q28fn&XCrS#h/g R {>҉7c+%\l̐8F/NY[,Jg'p1 KbaFR;솕r!KīM2(SI;fc̠qezPeG8_N቎y x`@ c-˟1䶅03ڞ*@RY[P6'Y&S=6>?L~"H\w6nJ^سk|wouM+LȹWw@YVa5/i Xh3/Ģr8(8&W2$R-yL",G4!dYa0SظEV-h r|(6tymcC|pz\?}Hp>B[UR묡'Ssba^ҜWB:L!ň hE*ړ6e+o $&d`2w)n"yzR?@-:/.|xi Psꈨa{ٰ]H+9U1k8__q,wi95N>."4Q\,2SPlݶ!FgABپG)}_SY;EZYA[E}(siq| MWefΑ a+=Y4Z0nƨ 9WԢ֝XLrSD1xWОvtdiLi8h"_(O#fڲ R$ƐoAܘ8!y/膣gneޠb/+Wb[j{1("B֓F7u]͡5}IP[țU(^H_ >TfPIo]+KZ y{Hy6w ZmU^}8$i,,Kʃsh$q%alGsE_\ ;45'(n?u.:gwJlQz6@Ec|yU)dX5{]Bi-탏lw->fח Q_ u w<^eς( zkÂ[V&gݒ垾Wo/Qvq ~!meJs~Ve8x8-ԝ,-u o.$>z6bp!3yU2])\.$t_hYNFrrXwѬ l9IyҨ`8LݥYo+LwC|J84v/}Jm_anI=kcHChlB&oN>ʠ|;^k2d*IkA};?}Y]u \g(#XN|t҅|wO.|)aiHVMhr<3IF܊Wك@A؃Q&npO I^yLh] a2tt%1WjPAB9(xiݪkYI~2#$ mtk-R 8O z.CQiGǹnt{)VKtۂudv[bS *+7rY5ˠhN@AtѰZm5P[ er {3L:RdOmԛ!hJͨkE.ckWcF+[|Q!r+4 o4Z8dIar S/ہ|tȉZSuC}՟'WȽ &hW&р]FDӒipX ӹWZ#O~!!kߝ-k%6VL˛ne'tL:}lhoKZu!c Rn G[0|~_:=|oZRZWpMdwH0wSSJŧvFjLG\1ͽ} O1DG{癓,uw>ꔭ{W2&<L?cq QQEc }gm$QɖjgoBvo+k 7@1,x- q;DH}n?Ο ]n|0 խIkE \O{߁XVtpCL[^_z{]ګ6x2)䉉g2CD93>0wW;s<[;SHצ0 ɹ|D GŃZ&HY*huHB7зyK)n]RO?/$/ :J]^0)JZ*a~4(uqm pVߗx%.,XFōݨRDgQ1e-?a\Ep8$ !}%M'# B[>wHŃM|$Z i4kN<;ځ,i$wn 瓉B_~V~*:Q/hSּWja*n)c+_t9&Ԭۧޣv?.n@v8pzm'6]W_'[rOLG9ut%ފ6Ȳ$sR bk vt^p(h͠!W+j[]ҁ MlDf n0 {J/q%'&7oAhU1w*S#;cI=H ÷z!lD|-)rF|%dMDN]IJ .Pk+ڰB 89 [5e?xQ"hkC *rtâ̹ZЋ5R=|+a#iM ֵ>go64Bhta5)pAaV"*(qBYII|<0glKmMX.7-ִ"7Eq4O@t%OIYudN 0>p`"+SCRC\n7u~pO`.x%Uq>]2+a kʶbA}? N0+s .SWy Lo]K5孇o'S7~Y y;Oh=h\|ո:f0]!q~jnctIX: U\u齤VW;w~2]p^l#ONGgIgѓ>̉/S[\G>4F\dgYXoQ^$cT+j $tshP<}N<|t|`HcpnK~)@,.Bv ܨD-JA摩Q $*1Pֱa>MV""^A"lNo|eٷ4'z==9|;׿<@C^z[Q*ЊY#jscJhvzXz/ '*])ا.a1 s}Xf0ңӄ "aFdm,c4HkzwMl3[jt#= B;UjQJ7؝awnS= 䲸E^4 )bA\|Ѥ۹\ԫ\h[kP)UQaݩ\VVMZ #\ȶs< XkUD&ΰz^zM`潱CLG`GVG}.+.J}^|~(惌f("8ۮ>bnG$0,Q .t;vJb/`ݩ2,E3 VKo-k'[s: #t%,KvޗrA.ln$߻c{l"^i -";dx@IoO QH^ 5Z;Zg2{k^GK=D^?+bK/!:Bϕi%??|njj o a" [f_ZK̤F7sVjeK=)9T9U\DlI#P]5*ĒX:ϗt$=D4xVZ(/Q ׺T͂JbuAY@ɞΈ!!>]hrzgru$.JǑhόdk`3/P#I6Hj J'l`ʸ-I=Ԇ5!˲W73* N[0!0q4ƑlOyf.g=@`7ufwH+􍐲s{ފyѱ#'CuŞ*IE^X1J 7Cjc$t[Ho (\:kIcܱVdsDږ2e;̃0VFchlSSOת .kA†3Mź\6gL@Sy-|Kc닣JKnlڎKu+5 Oi{\Hv! hh["R0Geaǫ` KS,#@u@#8jѽ,55=7S]K۴^ObJӣ7y"*_7joҀA,ˌU5}Ta8suL8I,άZ&9Ňf(n,WED1ić  7X1i[7YԸah'ґ"JZ4N@ˁQ +Va҇>I&tϥZV,UX37 -5Fp㟡MB(瘝LIw㧇nduN0}H+;Jz ͬ~"M@f/!7,9| yT(Oq (~=57Ci} D'Ԋ}Au/z֦1mkέ,üxyTMuv'Ed[ BP DZ7NضroiKC c#)=\a9Wc.Ei1vrboyj*%Q L n臍K=ۢPՆl%pȃcWm%%\(]Pwhy,1.g2J,0C|`E&nCxlHYmwFk}B=ngLt3/)_3E,Nl~Ju?i:>uɫ̱4ts b`7iG=DWBn*yާ0ptg-垗F̒ pY副Kx9b7M 8A ",#:4EÐ ٖBqYI$:)nY_Rj* L!iP]aԸ@%^4Dv/M]XԶucP:kzqh(A:Ln{8D-A˞ QHݾuCțR@{80q]r҆k_ë(?thϡJy^;`OJ3(+\rNЇAQa4^":4--2B}_᝝$ X}`3k͹%umi]sgQ &%ME_gBÛt cmEr^UHH"" /++?$7qA0~ދ;e;RXw ?E׻kcKOm1g cU'$(^C`0%@~sҨ>"!p6F^uӳ὘al?ޢ㎮ҏŗV>D=6/bUcNx@MOF.A s>V ۡJ:硇DnɃ- ZQXDԄ>dZ >S [ O )5k5AWcU9<ѫ}zǔHN^S\>*)1ym&KK'з oZo^[OhH&X~G'VLxL8jr9?꣩sOu9MīM,$$G,'Qfatܦx>@s?%[ pƹ%bB> ~Gů4u/>c1g%v@Ʈ>B#ɇýhʥ;߅AWl+[+T-K\}c*b,kK ,gsCSgc q!Q8-*ijrq'.]}@ĉV3pĒ '{8L2=\ŁC>aySidZoLCԇ` Ǟ%ϣŷmP2pi|,)mMZĠ&snaٺU٩ rb%}m&.Y@ڋ|P~tIl6Ɯ{k\=b6Q܇T2 -N)BFU U9^qsxZ3rS/VfQcgQ)iLTs[bhsFΌ=BH9.㿓%1jCgeIbcXhjA XU >q (]w)aɺ(3QNoڶTM--3P"R:2I)λПU̐49¢J -)@AT*&+|ko*G}z RV3WpowLHq,lu QQy ]oDɤMGAhSS]u(M:}v|z'3'AGVyϖycja8yؘ7®HX~3=űS@ZW]5ZEE:x$YY5 L_3* ƗķF@h$5ވ\4)[q`VTv6E.NjvE|0 {b<4dRmܔu5 ;oQ "v;[:oucl¦jҬ@?ͷKUĿ!6RYO~I&Ҍjrb,_.@+ 7ۚ_1q;pIf=2;NfFX"Dt׵񃁠nL'p3&䆟5<Ֆ{^fE+i!Kmݠ h#fxPbgvCnKUkB+ cJݹw}:傾z s ?SѨFA:iIɦ©n0Pѧؑ&4#tDi5w),&8eNnUNHӺ\iMg笠ou}(~=CFBt>b@N^7F U v݅yG<6^H Zm976WBK|99PFGOPFOE6M!a`̳%JF<ٿZ{LQfZ+YSk DzzyI#qniW3=/"R2>4K)AņI qƧV`geݟ?+~\LQgkF. kfNr( uRz|<ԭ/|X$Z>8.60_MT<5$񉕡~!&<_f EU3z$(~ϐ~5s u ړE_àxɿXi2l>!~??Q:tn:tb*6^xF_;|r;!twsևXuâszNP4}Ѫg0*Xpf@v[r_-O5[`44+3u)V,B6ft~}BiL69jypKCc2W^ Vo# |[{GGtЏY3 3QdY.&xF ەM V?չr5Zm@ʪuj&DU\GQʑPd. h| FXCfN]rΐ庎;8qԔspJlJ9WǘKa (&hu bn#D܌"ؗRbmMVJO=$A]G0:0FQ$雔 % 1ɋCsʟKީSJJ+AwL`.Kמ# ڧ\'tJjmމrn!6 X51} ;e䐩GZ EB~ʿd<7 &EML?w߲Z:̾E5B핷4>^^ԁa^Qa94^8S<z~hp>grlQOt'tտ=;sz݁ufޫ]Ӥ=ފe/sd 5"nuZ:0'S2R: 4j nir-O@xUޞlt1H/@-',lyx V{}O n(OzY.#K6yIJ8Ǡ g!!͡uӡjL~uHG-`}D&=|f~/2!sBrhqY|="5GM5eTHXgJYu4'}(`d^cc*\{~!~"(BǼP"gBM??RT#HØq6?xj[%QoLi]iw͂ZA~5n vueG M;> (V.W~$+ErY,LȻdgWm!)ՁàTkWf[̾J )6!ML [r \zvJʇ_ J"ENd?pXA kΚ{{;kfe&ிP$u2mH@;0JU.E @6;Z"b K|.̌F0lH{a ؜,j 䂕)6o*9²+At8+gI\ʅfA2KM2&5 pQa=# g}$15F@mVnV )vH8TBKϩzp;sϩ?`unCӧ<t ON̥V[po]g003 I*:m%ns`E-}V?[T#5޾{םhV ~Al1"ţre_EPbjgܽo+I ܎x%kϜ1GCDK\akeKFIR`:"nj"ϧ ^޻CPenEv?u|I o jߗPX Az5DN2*R"7:&:y 5Ɣn/paPyg<=ߐM`{# ׉vR(a4Az"V*x!NޡDNZA*ZaQ ׫vItL0ܰӦscvQLW*_6rO&Eʩ>BR-?bs.*6 gœΩ[#q^ 6;QVN-[Sכ- <Nf GWM:HR KCH6RґzW ",yxLlKZN`CooU1 8P0`[χzS N/kjg9=;e&*@!jܤhxT W nBڵΈY 2hbĴZFT;Y( KꆠKc2 0.) 7 f "J"JدV, +Ac#\e~h"4o:g$8eX:lQ[,P[!zfXk(&  Fs-,2]z_uk.<՚IU`,"{̰β;1qr#L26g0M=CPt(a%F u״G1 G$4 4:xpKKeO+/m ^wl9O9;(b3>|MV0w/(8ynӟ1@#1/*RC\ ΃ʈ{A[o-/VOM݋OEKI@!ѮJ"cSȑ2A m<\?7#; !ך6>7GŞuƬ+="z" vpCT,~u:gtkyR)΅B%ms[`jj/SG֑<5)Ǣq8x3Ts uI5tN4- )P͐n֔!'  u YZ