sssd-ad-2.5.2-1.el8 >  A `2U]//y6l0O^pٔvׅG(w ͵3GjÒ=^{cnE/f(1ҺH^{ ź={'[{GeclshNה*l" Ff䌌֧ 3<z 3l rpHFDQV~/|DP6*9-< ע%+09\u"{U=# BN DB)~"J&/G)8yn#?%=]Wroo/;8X%wAh `lȫvFQy F9dNV:; Aw}ܥV(عE]V! %4#Qui 1ּ7ș¬@Eyl,h7$m\@mE 5N}"eD35+5[FBe WϡĖx2ZFj@cm*q-d sm*758ff8e21e08f6139b1d82ea16035a94ae20347b90c3e9ff21f015577d14c8c2a142aa6a6d74df0035e6987e8e0383c93607c883&`2U]3@r(gdq-E¡$_"Q #ЍTY65ʍKDCq `MwکpEn?nd   2 3PV`         |    D  BB B t x }( 8 9:bGeP He Ie XeYe\e ]f ^f bgdhehfhlhti ui@ vipwk xl ylLJmtmxmmmmmmmnCsssd-ad2.5.21.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.`ppc64le-02.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxppc64le'&CK8=OAAAA큤``````^`^```N`N`N8cc9a0e6b87a5045125350506327e9bd177270dfb03492009510040b8c69871590c56c58d3705aa9d4214d0311858d2cc0e4b4fce898668933027edafe38bf7d8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903e4a9803b5747ce509b71195e0fe67898d91b3a52d718a91460150b453276a048c536fa3e15117318afd22435811147b6e7c8281fad7c344a6d1407945b9ce83a9198c3a019601ebf1e6dda59a276d9dc0749ee5977134ef3025395b67fee830f../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.5.2-1.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libglib-2.0.so.0()(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.6)(64bit)libndr.so.1(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.5.2-1.el82.5.2-1.el83.0.4-14.6.0-14.0-15.2-14.14.5-2.el82.5.2-1.el82.5.2-1.el82.5.2-1.el8sssd1.10.0-8.beta24.14.3`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.2-1.el82.5.2-1.el8 .build-idf7fc97575fc6fbd33fcaf3d9c368e7640caa5cd1fcf7f8f1a7f66aa6cd23efc95c235dfece27895dlibsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/f7//usr/lib/.build-id/fc//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7fc97575fc6fbd33fcaf3d9c368e7640caa5cd1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=fcf7f8f1a7f66aa6cd23efc95c235dfece27895d, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)55PRRR8R RRRRR RR5R/R#RRRRR"R1RRR)R0RRR RR2R!RRRR$R6R RR RR RR'R+RR*R7R4RR,R3R.RR4NSi w"!=|,uG/= '9ǂ;!vM[M1H/@׺ugV|DžU952Lr?&l)b)Ӂ2˭0j ʾg?oR{GZdJ^! MFL2~L<[gK]j!5Ҍ~ҙ ;md퓝3(ˌqЇ y\IǰU9g(ypqh3ܗcw_ItO]+'&]T] `vc o|#Lq2h:5!%ox-X 6ѣؕr%L]fo"k>yz_ ds@fzAb.&11~D]òHt-i()p(W=a zHc]P>%+\D` 9]? xoge4b7&`] ͔ a'cL]'.aW$[s.Y{*[ X_ͦ&%|$J= C{gw2%@f^Lۿ3"R݃'݄pm8@,~0 K3u Țm ;w" #qEHMAv n79yTh`Ҽ:B.7D[rU#ߝ GTŒf nɳV =nׯ٭'ٯ%Z !^}Nmtz( `JfjlmReH8a'TrO}i2h ]v-@yCB2#!4CWv9,K™oF&h &C#$ߺN;*&Čbza2 u!<WyɁR/Vé(#<Ո|)nN.Fp#*@ G}W\Ç -{3r|Ͷ%^6Yo|Ak]'/$QX3߭apoW霔^f{9py_7#1ɲ>I[ZY+& ܃{HpM1阪pMA!I=Y u=F~gM006i1 ~LvZ,15#/p &YS"%y5y9.RJ2MG2[٩0<yY|UtA4^A$XS $x.Բ_1wxcBC[11~TSSsa쫝K8959;H+\ l%֙[BTR,M%k4@p`\ָ †jr&[!<㿫 # ijUmA`O UU$+upa3duJ 3S O&07;@nYPdum*U [)(\ߐ"X|x5źS/[y /5N1DABӀ;դVvy]dr 6h.;VS,x>$A6o/m"uzWm=`?|vgmm-Fh yb^FDP.c}ظ@ F8.j`7Q"lIhfDD>0dK0q䶱am/8¿Le_8?{kp˂pwZ^Eh:"hV}m'*3V.3SEf\;pj$xCϨE|$2ܱ\6NtxY6lh^`r5ŏ8H/N@])n& ;=eLw[N4>ExOCwsuB.@)Kz(FH1DcPg#xz&E~ QkyWύQ|פr^ % /m6G'Us,4uA'~O_02'T >e=YZDV~ Vz\-q5AMtK_q/:=8~fO|]^ sd`(w9e ?-㊜ ǨuIgk*Bkkp /o3!:J; K-kE)3K= ,iH0NjJo0s_n.sq8i_vp%46 0> 3zE-# nnd`ÇB(pDFǶXRH'0RJ0 XĒCBojhE"vbK,Q<ءtZr}+@DbXW73MV&eOo)-kkǷd,0hvr_o"9rDDG3r=eRu?2y#]g7ć $1lQJKq|!(ИVM7@Qye>jQ^*oݖ`;T䦋7*?\BLdtH[g6ҡpk,Ȭއ'_&leY3kRN܎'!TO.c.DEǁ6(CÝp%EU.bףn>I_;.sD'l'$r~-]S!3ޏU^xgMOfqR(qi*Y<GMYSzMɔ=*+O6T⢵dύ) WS'oei,՚q۶o.a`&{-CNMUU ϙзڷzj 'dZE)3abU*%z@Y̠3Ԩ_u%ބcӄolc|Εf5RgPe=k+l^z[ò3YT0O0T>-w:+Ľ1Τ#vF.;ZKY!N+S߮/WkǺ<ͳ"EӬ_=n U\U2|g  ޫC@t_F@xc$o(h<3A\AZujLƣ E mwiLO-etP̬^ ˈU6P`3rГ5ZV$#_R7R h$q,רh 3aX>˜.\ÒۮUԃ'd;eIp':gc\ם A԰ Xڋ֋Fw07`ȋ7߂iUu%IUSry#Tüp2fsW{x|_7<պm |tץ#w[?OYzq,?j]53ϫrGkrW4:^~|_nqO TX_#k7|yjx$WsH͕wH1{BXxj~#ȧl7tу^1yP6mVXЭ-ڞ$$v8)IUYI&ݬnL>H3_$dlX/5V?7[':h%X쟹a- Aw[zzYj`F5@-u؍*-f %J>PD{n/LY(JP/(le}#7)+՗euA],բNѕ7}"ySsJe7FYGE W"[I:X-TC;J8S\ wezhvn9 7owA_СD~xL_*{:Y: o|q]aw}z!NyvowIy5X7,yZc/}YK<(ӣg]Y7x kLDfޕs.r9%(l\d qީxj΂PNVE50KAʘURM BJbׅ =Csܸ]FH (ܴ kPY(Sc&߉g6ʇ/1Z fueZ}S־47p u [=C/E a\޷z"cí6L%CQ䌽q/H廏>9*U7 RkKGj~\77?/^TEᎸX8Ģ Ϣ6xrc&%wW&\ĸbE8#X*Yķ~v 6A' >huʏO~}<8geP\sizd *Ӥ#.+KC&_#Y@UE>@Cm`* `Pb2I:rM>V+(V֚sQA JkIK.{9؞k .0q-Cb6fUv:c]ȡ2.0o vG ?.Oa?Un?n^&+^xe.yLw\[u)q?]ߘ3>]MU? BU;~"fP-cAwmN?J켹b1;7`|O:`6o3蔱Пc;a-1T9g3Lm>Y: =2ب\lNSN9ӧ WוiM]LR0ިT}E%!T=YEW|u+*r-v!1KG eg.!8A161D(ڙH];<}{Kй`FdbE x` v e+$̥0*9ŮVQdݸ[Igj28˂1nF.%@.tHG-Rtb+Y#nz /C]ypF@4[Fs0LS桧G)3.* F=z/ȿũ"%`yCf, -;xiȰ<{NJOw4VB*-]k7$N]"2)q׽wN\U'ixJ-i^"/mqxB0Xs &vX- ǢR/ 3( /F>:P I:B ؃_׳;ٍ_5Se"%?Xi} A_HO[f %ձ$%;Gu4Iu7 ҷ3F"t3*˩j9cCe~PNJ +#=v|K1iS1CU78^MnW+#gQn=s@k+/{E'[ )D3pa哨 昳O+-wiz J?1F!Ǵe 8nFgE$_w}L]b_}{XRS݅56唤A'wlni\F +-j贄&Q^lCɒlJ(пՄ1 >EZ\5ȼǗѳڈ݂ =$l83ĐBeMǃf $n)Z5CLb\ 4U+dC.pTɪ]>;kAJszI[;rdEaR6;g.hi$:FPβ_֋*Ϥ*|.{z@ߒ[f\PcL6£+Xa|W;uAo>&> 9f:@}%즯$|f v&#W1m΀mW0&DˈC|OKR;գ:hm >hW#2rK|2B*|Q58i4?nWӅ ӊ"5up<4%ms0pB+#=v_$0w K]a~Ƀa#ԆbLGbj3%#65oƌ UE%<>zF¯Oڎ+=޾&#b5.)a2e"x˶ݟ8/1 .ؘVKmZglH|n)4=} wxRuXZ8u-j9vyjgca_kZQBna:a:u}s¸ȑ4yDe)p6#MNtmg{\Ruߒ7dN{^x%6~L j2]|o14#^r8s2{S<0[ xD?6QU\"Fq22Y#l/ h%C>k|G K[U۬ b3Cuc#$GR8тYCuѳŚ??vR8&p0]v!u,yW=|5(\K+0cót$$n B rjpJds4L>.LaGq) @V}Hq%BtQR4PX+DqMe2dc᱔w6Bۿ$Ѳ@ܳde'q?3.N58 gF7*^h.v3Rf+DIt[Ps (~)S-/-wiW^M?Scgάf}D{_%UI׷&8.Lz-~YieK+ΞcbS)bf]PJjgl݉B`vGԼ-=[m$f[EW.颬Prٴr!zX֢|W|eQswE;+F5⌵c9SoIdGJ._OvDeP#q@u1GWJb 3nqɃbr50IQfa_w\o8B rＥ@FșZ>+Z4OչNn7B*&c7Fe紡PT|}أ"'rEYoۚDA6;h-bn`3F{G0Y^%ٿ{ڣHNM Bw ?Ճ#}8T,ˠkf4deRD1ѼaBxdfBP0+ u&r}[.g[-zuˌ; /eN}_9X4De/v7Q-;Aq!hr :'$E2(?Y/NKN/êٞ a€e@uw{"RͯNC^F#bviR`3 uhR7Hi^%T7 p<N`:_1*Lm8Emwtn9ޝ{]Atc$T19~v]/+w* +MrecGXWT˅sVvݑ'xI")]t#ET^!R%d68uX=ޢd;i*)cBOC,%%k&fN ňR#aN?RGEm, 2.폯nЈ a1i=ǔNMBy)ӄ214,*}6heݭ³X|r=)qDU՛+>.'Կb9mIZh:6|մF̦_֑ Fz bU&&ɣvwYؤdtB7_d 7 TXې՗ t/P Jm+˛~d&월(*wJ!vDԸ;qY`?]Mp\gbs0#Go/’-^5ʱ{OS%`@Ӓ_[?/y+t]Nj8KTP4ŵ8avtt9ś2mǪ?q=8'r+i9mg'/BTq܏` u"(f3 Pl؀qԿ $S |{xzn68[ڥ-GߢD.ݟ yP 7,~2;֫p'SNr3i79dh|aߩ{i[GCsx1`PKP*5l$ԡ; ;8TR֑> Hސ8Y΁b*!ّt9F={?a|mMP댨IϺ BL%nл/?c 3HC ufe -CVXӿ.vIsRꣾ1Xr>oo6E!{)цXR]^?q5H+O1<1vDͳsx A >BIh$ PERƍRUbfq8&3SV ,U%ܓ0iyCp&)}y^=H}-#)EDjz`,fb̫ނ#'y-^'$xFґ`%d"qN/k\43/X+}.J)zV)$,,ӼxEW"'qHTmYC$iK L*?f^L`7}~,1q#@:- 戩-TXi0"w_vIB/A2@.\TzYTUkrE!J<١{ c_Ed8 GhG4YCFe}CX hK>"6t:0WNn'v)dW$uw)x&&:h+P@MajȦE.i-~VjS{QXFKo[vty1JP`n3qNT#Ơ,YpW 3Rs(^sXjIp'$O!VY5˼^C"wMɩ3D,NBL8t2ɇe9 &)"Ǡy65v B.k+cqRDA£L2H3m}U8Y4'oЏ*"pMv:!Fy:bf]fo2yIM)(-?Yb̏|jXEr7B.)t %s2}c2s& U ֔h_e$Љv@E;Se|Uفʴv2`^fb6j~r3yJZOݝ@J"꭪P2v?: $q36{yV4jSsưSa79mrh @H|2t)o?4/mQFQ|sAE*T)ilqgF hN5w {f+)')īq}FA/>? O>0OtP풶1|)%ףrpBܥ<ʫi❔hҽ 9 R!evV^^197-cBڀKh,4?nU\mIսc s{Jn@ ACK?ͯOd`xfS3*\&k]> €JOɐ'~qCi= +P7^>Z!65\.υ,Π[Ն} 3nvϹ?-eA;8%dzĽ#a KSM wֶ&`\Eי_CN]c@%^cd4e+bOܠ#i*zW]zKye|܆& C]@kI Z2XSk4!Bwmo_>:g$ ܁wݣUA)*Mqq9-gE}ainO ӲE2 u3Lf%Dd?[aP's8\ nOj1J/ ` o rO'FV T_bM(+Z)6 #"ةRn_Z?qW_?g:*%퍶ġzƈh*G% JǂG7?%~X7dHHµlҌ[v2vdU,Q% & ztFՌ .bbE nzH)~-v9]ZDohTz"b,fv[@q,ĽN$DǍߎ6qx(UF#r ;+?޻E'~nXiA{Ⱦai+I{6r(K_ vDht6\KTz k?5vN͓IrMCs7&4A~.Vm5s}RZ|up._C*7wЊv;8RF֠!&N? D~ ڴ /NP:yٽoA` Uط3l-vaeH!صT! +D vnRmI|ڞ^d|q鐖:R͞z轿 . _K~װɚZF A\r*tW|5X-ex#f*~3xBr:!!˷T{4l᝭U s8V<CZ{- h,xw,#{&8RB6 t.JrmR=B K^" q!:eڙ,R&c0zhvS*g9`X^Z]sÇ|D=܋VXet٤e/cslu}JNe3v̹(VdYZ݋h)2dϙR35 )aC}nQ*Dќet"5r$ሶ|Y+:7R+%+?xnŎ(PͣAä6V_}$ZXlFgʙiw)7el!`E^m+hĕ%% n_1EoͰm6~qsb2ŵ=$M$dӕZ<.ݖ:!SuzRCS"yk.7cM> WJLs:j*iDP6%MY'!wZ?igZwrW!`L=ECub%+wI`9֌:#KLƿ>*ScKH~y:\÷L;.!Db909֯Yn}1L?&׮s{جŸD`+ZD{+~-O;i)'e .VdpEJ*ā(v DMWcu?DTq$X .mLBc!z&{TGSVNs/!in-#HɼΚۗu[ d~gVᮔ@s'rN(JؔъAKV58p0^JX)0Ox܈ktPR@1ϵDL‹fP73aLVD^T줮N9vK, k[ѱp`^% /EGFo̧~Cja]lWKjgq2)BǔrkG$xgfACUؔ700eiFefwȮqõ~Զn]n3i7F%癯sK0#K_MR]uaFj[܁A'ՑW$}e|+u !ޕr="s{A!oc;;gz}6߱3EaC08#km& (>Ϙ deQ޳' [zIC$$,*ߨoi.=4FA9"7Cx) *Ly>WLuloq4dp&R!5閤kfԩsmVG}$*8b؅CLJBDr*Kr m=By`@@1?#ۜ=EGXi12}Iֻ'/_ױK=*#k>KϾ"xQ+%ΰUh{p}iuzXFȪSeX Uf;i6VnSp,I?gώq@ 9:97]ܯ3cn8C0=ҊV r`\k2oXj߻́ z.7pgs+b"GL(:k$ -jM|:!ɷ{av:IKIz(lB%BV64 p^f]]vES!rt%8Ȣ.peN2& ic</SO, /;5R+BF s?@ w)5pI%PAsl)fۊ>ք@cYyV5:^C7,ĒNZ {YTfA2dvM8qTA|B@b=|vHeLbY1BXa6{ouKK9B"I.o/Gj‡k_(sp,yEa̿Zwd 0|9,0y| LuT(/]q!nȆb?֕l|l,lĻ>Jaj3"%hZ^#ï$%jIV'_fl9G17Z @gCۋ\Mޔ0$\z$$gA=\ w:5eר`Rk8QAfpB2Ip5Gx}'y F\Ptc(ȹ ' X"̥OC]1R=PnL"B/>&%Hxn'fhS89 Kr1M/G.l̺<N!>'^+{~HCHbpi֋qHd) 4:rc-KE;ĕd{ڮ8nG 7lxgNOIuQ2[y/O'WdQgML//I}nĉ #4)n+l\ ,8`NDS2\-c@C$73j̉.B HEyYݦ60kt>.;T Y}!UJ\i n6XʥꑹKQOC8hHLw[$`=frz;HB83pI`$Tgq G;Š?ړ;>K)bӬk U׸vX&Zu0lL3eD%@"^ȪVΎ,M%¹N/*( ^T*Fٙw38tnHUo7eJOyoIrb/yu Ǒ.D]/AbK/f8/L.|vpK^o] 15Uly2q| on-З;G_%@M󃤎VK}̑"9z >7rI7Qc3 m%{ҥv QBi  A'=# D[rqx{Cfy>+8J cMࢌѥu!\Q-NwNLr&_{Qjx%-V݂XPƾZҸGU4_'RtS(@ !癔M|~~ş{fiP? j&:Wih,R;(+:lB+'F,9fpZ8,[HkS~qL4_kKzSDDߊ.Ũ4|~{&䥍2GB W:0~$hk`=K䗚@^ĎX2Ej Ǝ5s`[dmn:(܇[L[(SP:GOl{V#5袶BgaEbJ&7Tˈj+M~)p…L&H֯3{\ȟu_v$ kVNg`lܪa1!dǴ* i 'K!CL?ZD ByӟTL'&|[WT3V-M.a$uIxtvW2w^=O8XA^/"J^ӃnQ&C\M:Wl`/p<Ƿcmt!^c}^=<'$TCgD|ؿ#ݺ=K Kpwt۸3Vro3|zO'@EtuVPZF.k_&1aJ\~OC@jH3AYKN |zsܮ/8,y6c)#[x|3l1*uB J)YnYh@y^-[~ F}6(65,N}摖_b ";*p  Fc(hc$WS-Z1q, b'1&*ݻk 5| T*vpYxn:PK uӥ ^5 QwfCCZá'Xj֚ɵgM}c\+~!}ۇ$Ǹy߆5ӻ}*S0+x\ M79U7d9ag&ׅ{&>qIXqNP"7.EJХysb} $NtnQoBhlw ksfx>'B11@@'dc \Ԯa 4k= @k-r4:TCRrqvH<`G!!vFv|c $<ǰ.a1i0%o@0x͛D&hCu1 zJgORhB:[hI<iT/ JV E!ը=ZAu@aOCZeN$+ Zy]6paCuz(}U]g.L7uV[,n bsomgCwɈi&GQ?}ĸOgY3Dm?뇣8m1%hCUa{"ɉvd ,9HN=T;(-\AXXyyGNY㧅qkVq7j,g-iZnF/CL!8aDo vqr /}8-ܛ8^ܕ^>>- S (c<:+e]#1#%pDO>SS8YO1,3G39ϧaQ%o:Q_ZC+Z5T|CK#lV)^"n aH.)ݑbj 53#o0. ':- gveY$H]jSİܲןүb& oG5Cl]lv>āuX }* fYd()….D;Dml)5 Bw:P~Z @0􊐁8Kb7T>{musGZ X7t".1[R܇WHiqFo%4E{|ixFСۀi*}2|9)f4u,bL6|؍dKlG׫FW@Y9̪nViy'E$IwFt6}4A=_qzAA4>0dٮ+g&N@htfjI 9踩D?Oaeq1yZam#2G؉rTF;G|"Oʠ3HȾj$ج X84&1!Nh13?3+[g}YpHݚU /$&ʳRM:|R%΂I߂Jy8;f{m\Aeut3Exlw rO,e3ZO5 s@BUôㅟ  ¶8JB"+R*}нE1ļyy̘oݬl'vM Y!vLHf㑭s}gE^.N|n#*k 9P\z%/FT6 x 8*b"(b}WT1KN*-Ɣjђh!T\^t]9b{,z,eVؾdHouB.xO5B .I\ I9y{zEite2 lpھķ`4K"N߼LS@rֈc0£ .cd$'B26{M`VgJSRj(-)y;rTx]ә6Ӏ@8 dWTM{a-/>߼C wohXmOkj~wPx.Fd_68DZpq*LVkP ՑHZoDRw}-TFMEnWS/ B!cP~S +7ZʏYvr쬸klauyA-Y)s6^Z?Jj I×@s o6%{7ri;Q5Ա!}j6*s~v䳔aBW!1U͵{%_i;R/@JmfUјQoh-y/e[H7_)V.B/1@a'7WX%{(z](*5(Ϧ;wZ:ܡ=!LM7c'<%_s!g:zymU&T ͉Ud\m#{'Ƀ"鐼=`c̢2"D 8ȳbQD/i6Ѩ;~Cx[c@<00V->yݫ}>-SPTT%6V'KƬ C>ەcr&_ݜC'yjTWq8G1t-2y~Vf;7Φ}.^ O}&Y D'MP0~tHf3 5VTM8h_]G;Vznp ,q^f]K9-ޒ/S3Uwr,2|0 BAC'ZvS?q6.cH.z]0ɺNĈl\O`Ff1ws:-׌R(#@|X'Idu uvaf1bG/!50 bd=_~ QxYx'g~C?7(Ǔ<#b#glx{d[U]2mBܼ!0]N`yG~RɰNiqҒ>[ojB0kyQގ4K*t6<70gމ cAF3}繽H185:Ѡn3%ᱭ O&\fijN~T 9аHhbfO yOC 1 jK}ilgWe&7pUH9i?BOVO+ϕ^_#Y% zAC_K(M-Vt%%=Y%IK[Ŀ!VkՓ8Vi,/Y)aB#~&dž3%٤:>݌] VPe7zͷ0׈Ad1bR6lσ]?@Qǻrꄥt\ډejTdpPvq:JkA|"u-X .cr00Cwg`Z+'_s>a%ϓXsG  ;[ P-Yh~<%W,$onzc64(U~&ƫ/uo76Lԕ,U6N$GIs޶9 zgTN'f^GtkAP9.NOX%(kTu?\>cyGhBcDDOE_Fr$74>K-BKaɽx :y@5O'Pзy?J9起;\kJI bwle 2Qjb'$ʜfˡ*m}esjKֲ1*wFVViLS^ V?D))e':y\ӐU Ffd?50+s(+p΃ fxe'l}Q5~e֜kTX~1{,ofI[|BrJ2P6=}:J,tB0⠰ jz [ϵ dj=o&#HI/b&B)V2ׄ ܺwKVΰɳ` q)c򺩉I4ʷjw*É@"wq!$jůkb.EQ.ƻʵjG`/2ƮNoG zi26Tꕝ:ѬW0ʸy81bʬ~srZ"Tyњy Ѳ,)U G)F aur8$LSL&U}HVBR&[CpȄք;Et%tV~ ?@,n H Hj&01a"j@m48WnQmDbOnWuAN=8ΌbZӑCڑdVښfvyז@#o-b''}@.a >c01{ߔЯLyc Us:<άu*5NuF`f?rMO%\696r| lS`LSg ^7L ^Y"ܴ(gD@6߇pD2U a^3ۉ|6pSh6VJɡ (Vޣ l xdRwb{'Ê_RrdZ(fꠗkcI[cjf--3mփfBi6iaP)TB{=LskBq0zua3[,J-]FZm_iL=#Z c?dtAER-53[%qȋ'vi܉ee++ ,>'Lwt8 Sy/IpQ]pE( Z>ိGE ޝ·tTpQ1ݩ,f L41m'9@CSlJ؇1#M:']SysUOu-h yD55gx7H D1$~_=w H o/@,@7q|A&(RU`hܱ8dnPXfһ+Pu~Oz.-ŵ_;w9=XjY qqTC/ L$?2E"\. D˖*4|;Ҿx 7~|sܖY]2-Lʿvd|CKVE<@5 &ސܞLp]zZ _TdFFO=QA|tqY'붟_Ʋuxa8D8%Z\ŏ&=a 9 ձ=a.'68U̠|7m/<Ҝ#>MFk6 dGǚ5!ϵ2- 1DuoOXJDbI^qjaw˾r:MwAp5yRBH7 >!y6.sla>\1FrR%LK/rD{5FJB/뉄'P[Vө,rewvZIw q`fbJRgJ0lx¿tAa[J@|dRa SI )=39+Kx`mU@On @3@2rěoZ!qȻ0Y=4[]ܖ{^طYO^.=É -GGi56['c͂o[-kS[vQ- @ FtS&;,uv lxŞ0Q%{C ?ryйd'1+8oovk'x+wϔz^!5f$ 6 o]g;QmcyH $~ [Jfg_MjLB)@V|~go$kU ^&-=Cv=|Z8Ekߤeh ~<9HRl:^[;x+xD%lf|'tA¾kԀ=imMAܕzIn.UJr$| A7 a5/ʉ/yt!IUM\9qBR(޼jp#{l]Gdܛ׹bۖApSGeo>Um&@{HM.>ӡU,}Y=yKrbd82ʼѠ^4>3t`so҈nNo+I~DoƖQ~3 "tdV_7~9t@Lޒ`b:_.5Uh҂1so)gݴl<;8!f 8}c{<5#hݯgv=6<^5qM< C.#?/YW 8;X)X/D{ W0CۉDrH|S)oU6NFAz$ufٱet$d?L 3d[גJ+6H>23$g!n{Mrq@Gӧ.Oixts Dcw. Ӏ >dž#J/l-հ N^4{1\,/Hrp [Cc<3h[4?xWeP7ѡ-˲ʽHA~7$U%\ĝ3w$_+Sz*Jq֠È6m"F(AqC%"q>EpEL\׿}n6m N)kKi3H0K Aw6zd8 t&"tI9Fv٣(Ҝ<=URʣ?׵㜘V #m Q#Jɂa˙CcK/Q1l<#,~_$ .7IpB,G 0 \ m>w)>vh`g)1^f/$o+mpʺͰ{K`5ɮ {9D݄E3@Q,/. cUkD B |aSVx fW~V 1=hIC NH\p;2]6s ^ M|rL5 X蕢k;t$iVΗӣIсc2,! H02 p>)C)֔9DK#.LkI? )>%.oV=O%>qDͯ=U=LcL&2~WAiP.`j!N'TaG h_Y>-@yvaS|wjU,!UX9 (s+Ǯh6Jhe*$C;Z^s*ju52dP|i,IsXk m:vIU9yknѹ(hQeDH"xFځUׇU'u l7}K8 yL;m&h'bv%lՙF.i?EF&,Kp?ہqy/3'9nFe;T57_2O”#\6OEt#S!{ydǚ㽝 E6M H..p̪1DIL֊SX% w;K$ EP[@ɟ2F$yO[̽g>vr9("#[Ƌ1.lEO7T>.vxZM<A,٤.\!#Jy_\t+i|C/{:R{UFOVE(Ja d/xm34LS1d51f/}~#AD/}¥VZeӤW$S׉<|:䌔:QUe|:lLP2#Yo2H(M1;Fm. +I^frs; $ĝۑG$6L ZE?%pP}&l"T$(ې@VsQ_K)dgj\9xзjHT,JuPDE>Hg:NF6F*S_UyC<;G> ]!,Et䦂Hީ}H= t-gh4L Kk"0o,3lmP$UHz=ڭ> v,Tt45PX謚Sܤ~J"~'10 d4+<ldZwdν-w%rکw0[,d@w>C)%)sݪKZ!e"=h<f;J,+_OCJ'[פ`BnΤf؉yk;ja:1 ?h=7*V4.@2oㄴp2cadǞلx_tt<͈:Rׅ .bXn?+.s͖ҥikE@SXxx! ,f,*- rNdDMu+҈ ߍV֔XU(Dm;- 8yFJJd]( ~{mra@!bS/g631,&ppҊ-04uUhseZkz}4+$#CU53bW^RU,#hs UAV*!fUS jZD'LR/^6mA»>+2W#-KTmiL|Z"`!~%b瘢"m\xd;C#A5C,GuVW>i\ Ƴ0mdaG.ueXuPtS gp/Z$P],6  -ֹ1ѣ!R ײ,856=Eb'E@9%v9ѻ쾹JPܿv~^f^eIVDg,q'o8ے#Խ3XyK%q^\J7z'YX] z-M::Hi{禌8t )YBp{o)R6?RLC3l>w;9zTG ^e}q]OGژA%ja)rЗVKl3˨`:FW|ltJjNNU 0ci6VƍB[/ioE8/iQ~6{ siIT8;zMϻn ›n.[ki%()t?Š0Z(:ӿwOwrǕ2z{ wZD6?^fҐŴsq?Aimb.kGD+Q~֚=i3wuS̠c"qsf+x367#rX)o*pG9Ynlj$C,07DB3mڒr > !dS`n\A` '[FҗB=|3n89bx[^suZ(4Jt5BOl LɑE)U hlZ!P {Q[caj+/6yha(jFkssz4Ca~x4$G螐- }~ K©̪ͨ1t/T㽮(W l67CJP˝ц53ٌƨ)v+¡{Lz\"҂IuVrO'lȄ =v4D5B3LUuF].lk)?EУ䃗6a]<7[r$=4=`R dPqKq'*6m Jt8]{[%ê´cdW ,1l^7uk̓AYS dy3b6ܸ)CmJ4ԯ犊g<%=x1[#rzp00em'(*h7SxtMmp#Z˼.ԕ˔E?- ee33Q}/NfpIڙǛ/WM(v1Ry7tp*+^~tV&PŽc7JkƆ]+ c yۚ#<UQ߿rwIX]z%:c$YR='z-Sk),4 7*mR ə02:[Z*Y.w mxtR]}# * ,5a2HƟ>(Hm\ uúx3_@o~$֮˗zjHJ;Ii7Oq uwG=w#|XC1q1txn@Ԭ~tvh]5)Ep9x6(0nGFî(%23fAz,Ku{!T0fG=ɺpڦnڇQh+G!ȫʤvRcm۴j;^`̴۷1-Qhlmkg&M\]0, LtVp5%;6*>,L廯3N$Dڻ_kRKb|O! Bemfh\v"HK$U _lV7>{~Iw5 HǬ9\q4tUhFL +{ab8+MQ!ʕX&jUSE C3ٛ5x+<3Ygk&ӕK+-jf׸bFQս.?{+Un7*&x2C-fiešKacGɒԧv9S}vY13F5434?7Զ tA}6Fރ\PǺwɆ&CJ~t!N+`O 9C]6>r}iGE$.ߪVJX/3HU vE.]0?UC盒/cU=rS]WWɑFb/`ǘOo. 6m zCK6]HP.ή{F#YȾqJ:7w?;) M#U 8\6YBUL6`cOȿӄ&:2KaSJ&n@>و K5Nސ3IMú,<9[DP?]j#-q|:Lu@Xkl_Yl{{cZqQe}gdi h ۫ZC՟ j$uړ ܻ-w[g2~7:j3g %^YJe;-6ux'_VwvI~̷{r'? s$yK璗>%܅uF~rGDj^$KN klQUu騾I0=:1l}kP[jJ_ÏxzowcWܶrhYpBP^8Bg"_D '.2/S7 ; 5*tH 34n U ojKDhSDYEhQ+x,_R,X Rj'6/6e wⱝ5(;ƯlKgŻ~umdD| v+7޳=i|v) j0ޛ?g@9fA_˻ ;ucwsNt j0R5j횳pR EH tD:*J{h e\S*{yU~IKI3bJ|u'q 4u %J9V!/9L]= qǢ=8dIiȾF;XبS]iZ':p%sU%L9u/6" f/+PpHޫ'" I7p_рxdL@*sI">K 愁 IseX5XN*vb5e(_t/6t`ak<\Q&AAgP2QZd{(Q['17qlL}W^kqyoBF˸|;%#)}h 6kxgFi)]4O3'; [(.x @<1ȼJp6%7'OdCh2Me $37Ui?|0 x\JdK礢]$d/qZڲ<<(L ,JAT6um\AaJ9Sx$@f]uJvm oZnNW?6{qFpE iuEcB؝4Tsʪ=fw+l8Z6FԣdžN > WOR{F먁E''v֑8ye:7Bi8W`pM4JOhYuP_k"_tZR =s)iTr5aU:>例UDJJ\0-p7]pq*?*&\g{:( 1ۧDĜR]ϲ:verNsn *`OKszHzavaueįeQXz"4).p;4?TQ=o놡ڬ]wI(ϲվզ4)ӵj㷡)% .l=\ z'E]V~b1ww5X=M 9r؟GScK߁D:K+nmfb ,&tk'Sm?̩b;#lX_UbCϑ,dzޣ\鐦eW JI Im ݬBq1QZ08m+\ qJo'0i^ ߖNSu,G&Fã+/^Һ̤E73qJϑ/K[*WmL8Fʎ/N(RNI*6CT-FD $Yt7uj%_?/^ׄYib `NZ/ z͌چ!-s<=K,e񫖊Q_d7zh̓7dh|+K1'-4?jYMNO"H6D[pbGʏ}x$. `q ]ĝ#{[d9aj $KeEC~wߛ-DX2;C5wB[ڴg)IvH@y8SյU?0F#FUF[j"N/HB,߫0V,V? Ea'P~ 1'D;żӿ5$ㄜ4ӛCBé5o&.7EJΫvGT[ڻ\n\]~FZUsqN `MbviVL{|9/%\.}RL1bӋ>!ka:>ԴS7v6 ;u݆ۜ 4tj;YV:nct|H߁ vm\}6ݖg. ${ ]k)\$K w* -cJk3,;% J&DhE%bh{$(0(\BVo_5ʝ^ k&`ݔSx# 684P%~MʤVJM3e3b#208mv(<ݿD- m|8yQ%sY#Be s,!^tF>:#R/GFV?}c`CQ&p7,,"Ҭ %h9*Rid郘ooI{\%ZEJ~^ȗܜo+AF|4{X]d\tnN #RQ9|s>1F<σ >Ry}on@B"mDJv` ƭHOYQN)u hx,[7t]!~6!̖Sؐ; c ^!*ari+ˣ buS|A k:XO3޳r?VDxdCT [y@X=EdFk"o0Tڴ E1x cx|ziB#pUGr"B,}]^6o/vI9Ca 韴Ш]G:g&q.$ O,`%YIxsk0=hN4.&F.SpDBɵ~:$ŖL KLi(EL5H^jޝ׌Z wũߠՂd|~ c 0k{a2Ru*6hB= zCuIEbۍ~,^㊈Y끴t;8e4z`VNɞ/W4S?|V/v_򤃩0״S AYzG|R/Gֹw .o[YQcnEe?r*e+;!WTN0-}w>0X9I;æe׭ȫ22ZG铒 KKw+BdFq\B1LIuDBfLN1Rc𳌌~H ӛ7䱿M78X"NK<kf^&JB SbLJ\QXՐTT'lO7~ Db\ݏ^ߥ&&,Y%8: CH4{pNoinTV`B~˕<`^#7 @JQ{xƮz'1`:vd B6 GG<}e=+?bD>)mԁԚ0%U-eugv'$vsģc-8 4ԪV-8)*ax*b$+  i_a u6VHw;l:EShH7#Γx [3{}4T{;3׼g \BeY ݓwgj~Ơ*#-tF+Dg_\zdjSxDRfh cb5 vdލ}B.CL3ǂJlYYPw4):: /Gea΍R]GIͣ |9g:tPK߿^.Rz F 'ԡ^kWƖ3߫T2nk/WYC Zޟ(sְL(o"VFi  nK٬y:9ޫۡ/Lix H)AkrF.ǷPծ#8ԕ-RёZ.ѪnD5o7\a p̈h&qDz?1c@@sѱ=}Ь- f`)VKnč΢g\S1& -b=6v(Ys\VlXt+89 :ĎAMTt=Vq(MJaΰhY,>{8<ܠ;r=Xf09,TZ\3k t[LbQ$s?^%̚5n23lDj1SVcuTpj2U"&K=c_Gќ \%UZ5,rrxUGlF1w2=qW+W5rb\n" m.$~B䉒Gl%Ak&hfJt!WioBN%HޕD)* 2=p=VI`5O,dt蟬\V`i/p 0F|(fm;+P*ƼγiL S!8O^H5*oCADGZNwv8B1r2pe/| $ QK!eF\: z#uEUkMK4gnLb0Ϻ:l$Xw~7󗠽F pхYzlĬo1EКx o61oFuqFt\ H8۫8j4۫1]|FōUS̢Ӌ\Q^k-UmsuX+g2-a$m۸'m@\F $1 M m{7Oewu($ i 8kH85IxIe8O [/?fln{yki@S?xٖ$@nߕ8?T $C`:F*oPLZVXm6<:yw[nm/RBZm IOw:uYM Ftj@&b~2uwޜ(>Ym7۝8RG*snz A),A {عW]¢5x{kYq`"e?vTLd[ GpCLOeN۔(gޅquO%#`K9dB !j/ `tB%ŃQ|T\5szɪPx6H$?cvc0M ݘ.Rz;_1pM2\z L(s>Kpl#Z]VQTʹWs\Q3/yC{m@PY8߈jIB;fHܱXD5?=V 0-_`i ݱv!f kՈa" \`R5~^A?k{:A!B2v) ^BaCs j:>ҜɽqH"4F/E"SC¥%ҼFILR[h\ v#jZ~03}\$VS XM".d#3;N" aX_$-1od(/( uJXEB ի=~%,SJ μ/i [ #r^nLc"5-mk⃰m>VF6DVД@I0-N+Z W'U)$ח!GϗN7[u:9awfeH3)ي~]kIHB*j.PΥ_Fk͒9i-cI }/;/;eU^ ^BGdN\L<<쩡0 ȃ" dX2[r_r&TV !7~;D 7vu6XB@ 0UvsXʻ >HySwɠ?e\n6elFaj H>1}Z!$ yWߣ<;3Fv7B>#9+ `tݐaÀrVæYUyp|J_~4bՀ0= 'ܙj_-n^Y{a`:.eL!ψeMz!ӹ~MGvZfUIiBFrTl)TԺVajNhh|PQT^mDݷ"{Y1 l[eZ!7s >k4kL "VD) QFD'bzj0+Psjx !`Z5@;*63r &[8Yp٣ȍs&ЇBg%bHS.mt3{UXA rG~ q{$w1HF>Ӹf򱧼TBBԓ'>ы3Gt5, @.܌ W~=-`t^aHapO щ"2+ )&V]w.& 9CH~\HWYJ`P&4)\X#qڌ'И6t[96`&d/O.Q@<jF^VfRM /qGjoQ+YF%B'ܛ/G#8S[5^wa~#fL*uTTGmyC48Jj_^]L8H^/0;z) q %1hQ9g gρI MDYh1@;5x1$%xKv9a>K㡋%]| =jPx|U0GDB[m'\d ` "u`ӊP1H1I(=.0M5޽+CnZ9Ifg=o]UsUZBzl1obq&!uݬz]!2LĦP1%xUP;4ąͧnVDܹs&ڒY@q: 7S`6`q(Z+Ίc^MGf -簛2n̞F/va+{jN4s$~}%qF+oўZ7 wj}.'ӱ9:<^4"᰾89BDX=2[ ٣sO^G[܇6[׮#|[FA?O'`<, rBTo5j*$!j`JP༳mMYQ׽Su# ܊xMpD"+!; 9sdTPJBMҰR`]*J+w<=tJ@i9E 'RͯG(GAkAs6V?FcG!&jjǒ E|ڮW4*5v}. ՠoxBrGׇ.ν}82=e3>k< l؆= d U5ܧV$tyy%> $oeJ=L 1/8Cܝ0PHgܓ[|&z3NǀQ{J/R%3)v/-/ΦrNH(<կ-c5x9fRҜ.Ga,, ׋:u`TX dI6-ETBLo@`CI".o{J:o'u " ?oz9| _*bj3%5>O~ЉeqEdJPEuW%VwIK&+=# j"o)k9Y<)1 M<,+L[t_q@N)T`3m Bw<L{Ġ *e$vߩMG}P K4OH U0r?8P(\KܺIᙆ?3n꿦qZD;iPnf-z8|>] C.n+o|({}G%3Ƭͱ1B.Y B;HS]jSʯ.b?]fڮ^a%[|̺un0?gtP`e+C^M*P.f!l:Zv'7/ѽtx +X"JsM;},2~}%XhU#Le,PZ,'˻<1'o\/rsK8Ɉxӗ,Ҳ/p>9ÒD{"[[z'os90-|^6qpNKT,oY [<4 ~a_g|_ڨߡZQG}=Pv9AtJq.f h]9^woR#ߟىL-B]A#:5 XA]O>Ic&ESi7aleN@f9b R/bM~\݄0O N(mi D2G >`xvWZw̚<3#&ﯔjQ?W-}b|S_Lid' >&%H 7ELXNYW-meIahʚ񧁣8Ln(8܏@rY@ jEN_/p7ւ7w;/ƍ͠/w յO•1_k'7Zd(̺1!eqzٗ_Y9 Z9km::R 7a&8p' Ƥq ӆNN_)Z j!0h\N3M-Dũ"Txc Xm;uOFV*$S>{ı3D HwuF3Õ>rLor!Rm˾hAhQNSdsS>M=[ k˚mٲ8g/ GԂTS;u\a-vcP=3~&b[z\fw,/ 5Ǹ!%5TdZgVpCJΘt]ψF6`lљlFsn+`Gi+]A2n4ߎEʡ|xGKX1WO9`WT^ep4װN$>2G?z@Wsd|7 NPw8:oiBu#F pGk^`߅K֫K<^3w8w("wjL@2(X]Վ DBfEKMe`p<0feTh[k5oؐсߥ?P] 2_wvĶ9bI/#Ί >g`(17ؙ) *7Z@:z@|)UirT %\u0sMdJ nsHˣ\p(" 5j7n@O%RE48afOݖO)3# VD$1!YFmziNJW8ss'܊!<@zxv~2k5< IRcwGM6o~$i2dZ0^C,O-B&q@YHr@< td/D%M|h.s:hZfgNlE& mLح{TjѨ+o/N j_yS k'Hgr;9=YX @:8d;m'iKEiLˍlL導iFrRik+"Q9 muxTa<@S\Nt 6 d*Ȋa\5*YՊ3!"(B8Ԕ [&5 \Y:'YLTA)r x,ק+u)?Pͪ Yu7[aǴbxwv"Uj&iiO[E%}Ŷot?eܖ7ăa#S'+YIՖm1l*VkŝDLQbIX+;?R4FO)fv<4\M-mk6qr}hpAc4Om1'YeqM(b#e-2ǧ׸(}93?}+=酫wtLz1$8_qW/ff7<)=.&@#BMzTt1@Ue"C i J`E@}tO9!2qom>d smO(SHD){c %Fc|Zp?e\v1iIT7MFC&ܫ_!:ۼCDT.2ZٹEjgk䒮7q;)Dt"fsV*C]>J$]$?^i14ꑁ29ev]x͙,SZb\D <'Tc uITTR']!<+BddyevBj v)Gb`nB1&/qL9H*oKd |3 8X(<;*|=IӹN߬mi J]=0L Œfu`JHB Nº|E4#R< םN&4nH<ZCl+S 9ܧwOR@T˧0~Ȯk)ivABT/,v #uLl [Np|M<POA-@_Jc4E´/Typ|d6s, 8Ny[XQҏVrNb(P[CJ3Eglq?i~jFM1kv+^SNZGX])pʎK@Nܞk:mUI]L&-sEEG"-yݓ`s+&jK[-YM PU^"H&'DUu8z/j3 fՑ#1FDg%dU4(h#Pfbv2R'8WLQja\x[l !\Ak9N ͒_Y2]g,őmNPG7.ܕ NՖ Cd1* Re6'cvw*2f+T Udݯ;Lwl(nlQh[T8")6-Kڹ-HchDYW\(` ?iP/B,H]'q^[ RW1R>t 4Oeua!D9T_.LӮ?Fd,\թ~}xM5t[d( &,f"sWMh-ʞdH2Q J!(0!nh$\C1r2Ν?A%ڱ[RlxFNفcc3H6Bs?<IR^Μ)WD߃8ayN+җi \R1Op75շSz #IpxZjUxx섦 /Xa+ז$@98o* ~jIc?wf\Pק6.5%rf5SM@<rjPXuƛq ]$LxcxM>MF+.no}49\R햨l-rp$Ħc9ٽ5i SGhj ~2#Cu$)sUkvkȦ՞}\|c-V2^%!*8@e>]0v(L gw,2~{ yy⿂Xg$%OTnC?ex%KM3t_C4yUFuXvVۆn %xWRl},1tg&J0pjĝtҰ5Ta֏E"NXKU~v77_6| R{}Pr^\7M/h^AD|и۸@wG) qË#v/ܯʫΫt;Ŕ\K4\9/T]6?w!|/fj60`pj1LtUajF+ #Co?ԇ4u|,KaC8J q"ƉA0goi,Z\ޭyj蒘Vٵu.z'щ dn ~b2}W#%}2D/;k᩿V>$c0p "ޖ#Rۏ%}[B-OJ&"''dl)wI8뭔{e"P\8̌0Cr!Ôov1n3,̤Y K8ӌ},{D2Trr;6HfB$eRtDTCu'E#wl̸:s&+Cd2/&:PZّ.YT8-0/?O-s+ʫ\M-k8] *"ݼ_X!>{+8Q'j'iȍ LT,fR%[ȺvlPwRó _a.Vs T6iO<PVmmRmh`fQrp P (z,kaD |f%:ਧ]⤣qd}L>l{A "U웶3g}}lx[m W\߳zP#SeuqK̭Y s\Wg]^ \u>j ]@лm0fk(ᐡ ҩ茨.Nq`)FΑ?w>%zO&jS,HyCž&H_r֖GEiN0>z4{[41s7Ǻsnc%g?)_e^I3a Pttltfr2L(h\2p?1v2Bxc@U$f[4>iY}ha֮!WljRbP5{{v-_h')2i*>V6 "X\6*^xL\ɐЊվf LܯFD3͝SirC_j wc&)F8Շ&ZW-9y`@}{'}3RM: y")4BT> !߂cyw< acK kI}+_A/EPM.2iwO1gd4_Gڊ^H%e }}3gzޗ>'V7V#v*F8:!;{'Aʓ X%w㼫+Ͼp\`q$6rjN6Q%NzAt5 *ϰ9Ol%ya8 Ɗ'M>.Fb*X2 \^Dc,H3hXߢ0|fyn~z=}<7[Ē'z&KpWW/;bQKT%Xv+ ҾO D ;XIʲO>0]%8'Wi!\xұV+f^GM0 PxUT$'p*c JZD{ {Of:͚z{=Gŵ-"s;/Ƅ 7+Z<:Nk_Y>n"~7\oxկ[(.!e^sT)7 P_hQoj*w=gaUVC(z-Ď۱HD (~el36-'6ɘ%>0 >XFS)! Q:䵒kpU-E4> dj*&x2;E\TA{\s}U/(ֹId_Vzm4cIԼe-I%TZnHеso]㫩E/#֯A?HS]̜*?$|F.&:T ӽ[T3ԷgpE6)z f\ڭk)0MA?2 1Ecsχ<҇Uw?D]^5$cq=!1-[d$M W)1bÂ;{S! MB$bQ;,6 AB`8MT+}"G]J5Vhğ0eec(Mi*ciP&f|Wu틶s-ƺ{tk7Lso9i ]L͒VdCs%;1 QwȂnbqT*nBgAiXt)I5(۝z/whRa^<q;`UF v̢8![53JlM!_Q3dfqmm"wꖏ13U3 %`wH[bgW0hZaBv4,oss [^Jm[P,8vmlGޠ$k%ifڔTVIW7Wf_EgXEW ֝[S @)\i:=l:KUt p֩pA*.nc?SKTځ[B0:E_9}MK -Fy_*Ýv( /p8y B׹A"Fo/IpS '7z2is6a S4?W|w%{_#n3lG>J 5B,u30M}c_h>hV_#>Yv]"Zs} xϊ%=B}(-:HZ Em!`fp0 v% s[pG.cAz&#.1HUYͰCvmG;te(Փ} &mĭ =~U+D|ɮɘ]vuU9IJήJ_s^##4h:{-ȺQjzLT_OF ;Շjq#=M˔=xF#PJp[_,ܡ!4湃!RKņ}.OM}c H3䭾(E1噖#" Fc$IǓM|iibiQ|94QUH1AS8Ik,g @Sʲ*Ւ@Mm. hNKr8ȯ= s͇;<, ~uL<{mqOd -S_s f֍xԷ=*T_ {%8:v4wݽ`J8A7;rd?w]Mf.si9(k73L%quhU8k/3zkhavfAb0F|uMkCA 1{~ΏLT2iKudMP`->W{48l\qWﾓʑ-K~yGuz 3\qKMq0rosoș\\bjzV(]ڻ*h@,b^K/P{ӚHieU1%hwh-ɿ0B},.͞Ep< v{&ΆGYx[CA·B\/T/OS$j1eP : H'C7ܑ7D޼ԭF5w&w>ʐT{ :[NX2zj,]Nrrg%`r3 bIR䝩x8.NṊ˱u%f*=$zaItu2$#s]x؈&X]bʇ-MJa w̳؄$?*YlT<B uQqt]~O݋O|%^T/,6sǡ|Oۛ*X;ZOnt /b/]bD(LJuBz}GAPڠFA֌\"͍7hǒZG߬ 3H(PR zy̜TZYZ Y8| :  [i}GCAr/ʀo3ip2Fݑ QW&(r= ,ɵJ', ҅1"!ݓCG\'_Yp,zQRpBpf՝\^{FW]z23&3@ iy)g#eY#k]3>] ?A`dy.ka,\c >fu)w?EU!r̳jg8=BIRx0{gi)0>E)ʃϭIY(9pitDia 7N®S!pxY芽(%= Sd2j^y~Ԣ{ -\k;юA|ߋĝRYM m8`AD0u͓8Zn2U1$qlX#W_EmHACUTebϸ|WBZz,҆"zǖ[7[tGc*%ț3Ro޽v+"(Ǚ^,ѪvlgDz}Z;.-, ƤSD$I}0{w k^v[;'0CkШ?|1|Y}b.;Y QSSMG8é:A)&cA4uіoIXjlC MqqQtA䆲 ϩjØ)RGR$VoLsBxveGX Kv,(WΒzF'JL=gM.\l1?PҨC<|xhgRYtIš8h`BL]XQʳx ށ]?2 #HO%O6MH&Iu;k̈́hϒ.YԯBD}ӈp&H`}\l^^UOw&vc3ͭ^t1%v#oY!M|qC((]s]l [g7 X}«5s$2&{{J%-gj//dVnF=kf%=_2ʋ_YM[۴B>Xydјe!U%5.plBle;SYla"p82o'4p޶檽PAz=VUFd/Q&]LbFh]-&z.rX>r)3[A<[!HH`70,I/qզ(J^Kd8g:@ITGXn!# ս{e6#i3m #A/]$Y6͛Mvm/yk\/Qu9)DZ ά?ȺH ;idw*ZDKNjI ̣ fঢ5cK'R--A;ŒQrB~BOe<(m :RS#cɁ;CP¿# X L r+,IҊ| VBl4ku}kWhYUsAS5~06(?=B賊9) sHS৫ID_3nZF4.AF9;mEw~%)Χ B9/i Zm`IT|u }斟^v _y˅0 uTqoo2Az&Lifcڿupb"@}'}~+~oM-Ny{By7S]YSyqB^""G&vehV:Ҁgߢ-QMkINL6@mMe%RYy̅Kxvm꒤4gCC2f㴳?'O[F)RdP'~EßT<34Onzi1jdfܑmkkBWY4NkK2 AZ>/kpdq=H\>,v_Lm̴6#- XǙ5x-^af|#;%'d\cH;L9|fv@uj[3h,*~,zfmnG1\L2l_0WOdo'Ð %Y`0Wc<`؉JiuTm۝ac }ڢv]XYii:"y!3 ;F*t5L`4 ^n)CR\G@YyX&e- (0_n蓐Ac (!Y37R J}-RȚ|ÔO.vsGj a=1+?pk;$gxH̭UITTZ(Y)QY)*J-S6{'/8\ktOFxWx`gS4QI$`_o(Sr*A(ND CxץdU:mYpU,[.K'4bf-~w=d;$q];7G%x4^5&v?>d7]$,USc i<:a;|!o T ]9OPJ saA']7I05nkK{;ax-?˾֞lAv&FF /#nM,U BCmvb%<ك^Ce.FveC`/u.xTJlM~e#!ddB8\1H] ;m'wfd}O21k-w.)@`gp:&;zNZԑţIڍ, cOwKtmcP s@X&6b@gݿ9mn2Z'G[<-0Xyl''-VP`y5Z^_R3LI3$JJ>ov'MS*O_#`T4< eX1}:e`xe@ƴ}}i[AkCy{/$NqJky"͘VeAIsWl'6';;ᗻ"B>וs228P)5;kcy\CD Pr%aOY#payqT >[:VΞGlClJƥ.V `͈_74S7CC-Y: hYyV/ |d K6E)  ʼ3?LecsFyڌ~34(Nhp8ӭ6*{a{#z|~1הʼnܱoaQ[t)N7OOCgV)7cbDmxf!]3gyhuU ,PᄦT^=xүu Y?BVr6`ktXz\¤_!L B aFە-K—ӈ NV͋ȟS D'^}t0I^z 6γGZ8%d^ϏH oP]n Iec+Thxf _8^?PN3>§ҙjO+T] @o^4RA\~: %^~qޥGYGgUD :YM~Rbc5$Vyp>S}Rq㸲돳ϤH% CC$Z#~'+=P(;dzsܧU0R[;{5>G;(8zOAGSj)װcATzjȽzQf˙fCs'<܄[q"%E2cֽF՟6%RHa A4%_*jW$ *sT"{gƌS e'ex_oFLEsZPXd/W sR)2YN~֛Fv5Lf41nf}Y#1sN}My԰KpN6TETM:9aU@T䭁@T*!:$?X]z=?MZbjZ ny? 0}:DS‡ΏQ<_A/K휣d8ѝԄr.# liqw'X,GWTʿ %tbݭ!rR<.ߚ&6UעoYw5K1p lm)*k{ ncĿ_/XoCFύe-~͠2UٚEwfCr%*K)|@U{ROQI- ep|HׁkM%ɰdY߰Ȯv[jѻ" x;w0aP-C-s|iZa.wkڧ*&2̬9Sz%gԈ;Vq)'u:Oɿ6G.3 (\uASseY;OG"s. ]uV=R;'8\IsB Va'~ tE/xh>1Rj܋,E=9Q+魅`4@+^5nN wZ:7z.,?=D@vZ&: ne?2zV*ӇyzVvhgP^MZ[UpFm ZQ/R=J驽.Ӂ!P_vbʡHrUWsܸz|ˌ䈫ZDV ~P jɊ$ZfW~[zQ% QW*2ݦZ6 4-K qeyQ|KIxC?I-8IǁF`f&)SΓ PHN3A2ouF:fM̀{-45$8OSB% _yu"ѬnsڴHك~-chԓË3I&$PR힕o*.SrNMi3 GM ͮCd`!s 9q;"baQ$$b1UE:*sOLݤ{, 9p+PގQ"Zl0@bi6MH:2^z|i@JY=Kõ/kr,K.1 &&ܢ1vP,HTR⌴j)y2ݘ坈`_Jds@ <lڱQ^3$ޑoV`hv*BgFAz u ?rb٬Cz<1- QXtk>h s^+Tk$ *$S:;Z? ӏq܅0pL-Z>u.B|u7PW ʗkAF#-'7Bأ90 9h*H>eg^}n2l ؈] #S=) u os!UuG2yoK8y s*DBB,L]?HH|^#whuEy;MoԞHHi VI/|F=HOBaDq K`]jrl}~;ЊD?8 W(-@ZL{9b-kKc@.W!վ yE+:2~ JO%#F~ 1`otǪV8ݍ'/XL9KÍi}Z[}EhB8KOP\#If e@\gB(&XQ)Wxr {QuDmI.ˢVA=~=bu{s'ifՓmFa!p}e}Xp++J;%e5E`gڻÂM}hMCBOO=+e^7LlR o/-e @44vz`D[COA0nҽ\yx٦6;Pm-6Yw,<2ibs8> kb-f2c;p1Z|y]h>X5!K͙u 1 :v-. 8Hbή#)YW=1^s_/ԑj(6ղ(>?rfusRI4x?O4jd7sB;RHDo+OIVe>Uٍy;+,?l, f}=ďms\ cia,8MkI s #NJiFdy~ܷ({= &_)ıUykaJ"AFD$4E&cqkޖOG'wGHbd0 >R݅er5Hcy(B0wf`U+2vt-[48JES0'іYnʉG$etY?8bz7\,5ԬY?U)Dv|q\jzC}LN.URN8Fg,u(7}9%?o3"^ޯ; z)QhLXʛP(I'_FbBFZ}P&\d"bAPU0l\Χ|~b of(mXAs}W&Tf$$D")zMNsU\䩲ejZC [DOdSrJҪ/3r/:a)ɀ,.7^2N7m`XSTq")`ؿK֟ҽU5C5M.z"R<^^ݭ\Q(;q w5Йa#pLq7xUTu^wC2jwT5t}Qns* -~jdwgxjcԸ' ĔZ !i/<_dpj>R$'k=0Nt1uaeݣMY3*c]k/9n$v9W+_9(īh4^?fqYN+aPOJ)ل:8D8^H(8 ט>t,[{ugýȀIVl; ԥ0URt_էecG!W!{qќwG52xcLfcS7䎉T4TehN @]]=Tܑ-7Ҵ?S=L-W "բV?6`Bq\YSVotG!8颦P3.^qMǥ}j??UʀULҽMVHy+_,.sXWUJ5̒;#!4d=9W/N˷uഫr HIY7{Y;3)>:KvAwKf|(\߻hNp{xJXߑ+/Ƚ̙d񉟭e֔I֏=ldh{Pٹ1k!g(ΈsJ uǛ7V稹.ɀkQ}Ԍfv |Ϟ P߇r4q-?3;ap~ݼElob^͖&Ci+ĠLOq<=ᄡ {lcJ'D>B`]ֱGҕ,gr+s tp.)ЭޞR$`/WY)"~LDYn l Ĭuf\n̴=YrU* Jn; YZ;+u{DAT,2 [e1hpnZ 6m;‹6NxReٺ@δR*lN~V1@L,ÿ {ahXi(帱rWYg =;>\9{J_t9i0*@wM:&>I`[!΋b$WhUFOL2qX cVՁ 00X4E sj U1bwYYdyz&.t!$NG ۨKoI OdO;cH\B 7rZDi`0@N"KH^ߩ[`7*r7xc4a0T@zVp Dk$\h_]ʞ9aaK3o)u!uka.+Wwf>Db5Z] !',mXHc9HXW燉}8=ښM9EkK` NJ1=jW Fc"\") ] ̉ bGђ}$ېT8 5'Pn| `U$#4 & ֮|^Rס?焙_߫gj1גkhcqnGH,( PkTuv@~+ >] P+5QXO@2܇>܄law׉0|QAۚ>'D|Hޒ{xY҈e_s>9 <\ܳldGQО&PqFJq~!ahZ dqe>*NwL4D;3 ذIiUz5~$Vǘ,aK2'k>j4(|dXH~2.   Mk:!YrقِӦ03 Y7~_մDâ:pS^rhLBۡah!(.`u0\BECrfrgP)b8P 讽+!;`q/؄6ǫuy=`][Qq[<#t'O 䠶x>xOO|?;Ʒl*8+=eG:Cxv,IB 8" RAVzvM -hrf8M oǷwW""eQƠYEv |\#B>JUwҁW}oOh2& *I*g;**c}fsb€~S,Ķpe᭖t9}  g!-%$v@x;Z/IUNvMx~jUD=DX&cbhSuz٧XZBqTcZow/OuQ7 ܨ4 ²5`;- jZuv=Y%Qk&3+/s?dTP?Onfz.=xDڗF;6u48v03T) _`?P,M=/AQk[v(Z™2INAxK@0[{BI7fj-3 g)떴+E0txftќKNwQ9ÆMk q+ %$}Qy~e6NlwWBorYj䖤OOhԆt]0Ԭ3Ndxrܫ=&'C2xXP}qG9z!HF먘}_@-rň$>ʚ!/CcK׹&M@Յ,yjV=h/eϩ~Fʴ?|tӬQE5>҄3su3swΉhiJZUW'l?]&y)5U(3ߍK葶Q8yY͇c0H 1z7I?}aMX- r7_˙vtN.ck/6*/)DLoϏ7hئ3=V@}scGzΙJ.+JJwh0ic^]n7zW%CF7@"r(낾aCzl#TC|zn@b֒cEo=v6%Nګ H ( ?K8Q?>w~TwUyQ''ở˺r߯n*.҆4?KxڸIald|ˍ{S`zRؐo/tG⺭BzE(@gƨ:j D&uɓ.E!r 4~ `X-L>;[ӧ M^#Te-+JpvHܗFXjo3Ö5_5A4- {v*JU!C_.0]}a=dԟ"͏e/eOi3"lO<'z9F?, 4fqDl?"v$Am"L!Nw+[FǪ#= `vajsoU8*\Q"o:34 ٶyW,j$ϵa e޴ C,]'H#lYH!%H"UnJ҂@Hj=&DnuX-;VoN?K7Ǝœ>ajԣչ֏!a}'}mȳ\:qC#դD,Fn&9*L ZBy/Yʿuxc\7paWe%!F臨8 EHzOjz\+ 53O#q)PMt&My4Y'Mާ4+u{|E}w>RUHX^q~DBՃQُ-%t}`{܁W~"&]T$P/X3@uـ ,?ӸN(,$1|jiBK3-CDdз(v/rӏ~s8D1m٦*X,<;0Z r5ح.cχT?09B?{ί@vJk)gv PW: [XSddLI֙1x}ui'=G͈z>vς:o11{/d<=2}ԝ 5:<|-='CbE'sN~t*r ?ѿ8|xsuϖY%0:%-0] "aT6-%26߼5{A*W&JSu>hwXFxB||i`7 &M\/m~P=ERy(DBJYO2+R5LuFpTXiaO)AGUɖk"*9U.HZŁ.{L1 cƄDŽBN Wf;&Qd}#1 G:xoY1s: DΓ؎ ^Ouy҃V:|ⅺT5sdH,F%G[+MFG?[8('ɈS̎VR5{}H &)7g}UD1 =:?Q< 4:*/UC@*$hXySk{K_ִu4`#  AYo1:`E50_]BGD:$ؙ'R#qlmv`uюzF`lf R! >R,D9qP W3ZnNB;Co86W/ u=94 ȴ_Iƪ,4%=g{ sT̋ F Hjsrc4LV;nSb r@11v jxq({ 5Aj,-ܳ ,B ~AX3*)O@w$l2jnln۞#/O+FCWN¶^V 6!ɡͅ9*7z}t w|g>ׯYb<բKԺSF4=6LUE/\P ؠtN7s3iflNi f781~N= aX7 (ì&p8,ZFcWrAS/Kp7]e\Be!f`v !c?`d`y 5"͢4q0ce' hI (hUߵx_-&٘IyOjfu5pKܱ`7NҠOgrExU_zM {A,W۵KV%u~%wX^ZXΪDQr??gH 3K é#x}/zc3"+EvŰ)t;ԯzdE~Tjڝ!9<MS3[Bι>soOJdNK Hw:r> shS[m%wK`!1~2t D?FrjhMC_>z=zOvLr2tXcQDr1 ˰Lzڞtx.N0n(t@uʗ`fL 6HH$=,eRf.jeyگkfS#ZQd0 (U0z7K'*(.1RF/)98{݇ `F oQ*j3m |pnέ3NTa29ῷ7g}ƞ5k*'ȭ}pY\{ *wr`C5 HtS;NWB|Tԫ਺VNG$g#򚽋ivFqFL<ϛzo1 HE/Z#_ɼgop$Um='XCdNQrn`CfAF"7JӬ*$/;+$(kiFLNc<%eNTŹ+2}[P˼$>crIõ b"I=~]h0LЂǭ/-wŸ)E0\y&]\ת`ڽ=Ĥ`ow_6$o_0 3 6dWnNJGGqRM۷ipU*1-2~vǀ `PMj:R |v1dooriQ9Em)K23g{Dr3+Hc"dAȣrդ~ϔT4k ۸ڞ(LT#URspm;f._Ω21KNC&+I؂R2T)f+^cʟHߊ!!·Zx;.w7$PDK1 cuZ_-]CJ*jZpS'$C>F&GaOoӃ$Rܿ(SkMDgI@w@)I_v8~mwe+>Nk`AS_LXū;̣ ZV,+G[}+LVd!+ʷVtTBY S>_ڷgVW3vIv C"[ޓ(`,ISv C= [1]֑yo@RJ!oqcx} )EW|e p;KK|S~/TkCCRwGdqmΘj]ɚ"Zִ ,%"Ħ˰za/7@LRY hQB:iun 2CVC@Ql>O4⟩dMw]?(Y7.=d.?[n㪐(Dރ0@)*LmhP)2 ]A6 ӕi!Z܇)CEpf[[ڃ_dG\ItonEK@V-vKS{P]g̪-L|!ctv̈#var&"]c^5܇Cvl䂶V14(蹕9v/pɪmX9iT*zYaC{@5΋H 8t<"pZn,ڰl",W݄& >+iY4|!dÖQ\in?|VS`K0/!~S3eyj֒lq1׊g1߁cȷp3T/,! V;V fDv>BGvNW V4u0gmfmo$!eC΅D32ģA߷h"lf.z{K0 NրV`F]P:rLssp1C@>"W|Aep;i$"1cU5:ӫ2^'~v3 ]xtw@Rn t2aٯX&-܏z[Yg?8ÿjL MeT&J#W+R/R(aªy"P9O]B3xRkŁ8!8]ܒ<=]uQGuulWW(Dz8bSoKCGh?t Grio=6 4Wflx%i:i &UOv?sy0eƿLËfՁRVq%Au u|` Zn F\a}~fG%+, YKc$-C:C_0u'HKИ7Z(ﻓ%9a$o*bdmtduo:]7O5x[iF"v}m^""Kt /"smuZ#llgfd{BihDohi;El׸(\D_SVs=ZۅXm  Ÿ̖raf_'!|L јfiGBD,wznڑ]wم-‚-"n& &L#5"åѬ]<^lzZR4`QF;-H7Hqkfpȴ"$"%WpAE:d6FB]WɅE: /w""|I{LaЙTcn>]S GKMD$GI(K>3$tGGX-{.K;q=X@ZGÕ ԤUmV} Cu@ үv8*6o7p .6?'in6X7[`ww3HȲ[yaw<ūBxAֿ!#,ߚ><зR \߁!G><4ݚq  $w0@ D.3Xu01&OߊdMdf)W 78*WhEO>NZ}qbꎍ_1Vqbfb==gXV+cJ ! 7wJ'Ou6}Ԡ2Ou]he{rlELZ"6=P6Cj~B5}ΐ4%]հXC4gp_P{(]r?릉-NZIpzg(cE%@FZ`SWC]ݻjDW_3j_ y yBnUl2Qa]cjST, _Q݀ )+Kuuc_DP PwJ h=# j(f B"[2yۛ`QJȓԥP/5n!&Uɳ=Qcx~O5Xt$gJ-Q]A@rN{5W&S:SnI5,'Jqf|P>BM*G5zb2b}D0ltBy+3{DK hps:M+-X?_79=1<zCgbPwQ林԰qMA+M6V+h߹>)W?|WhM9g`R Is%rJ ^|}utABwmn~n:HV)23%ApxNL\] J{K%^0SVꭒX~h}g)Q9X_[wD4I Ǹ:н&h~BpBFyʴt8{r\Bc?tEtZ]/P2F6Ф ?3&Y K8ș4=bCQY] *u·+b]刍 xOs)$_UG}itU065N!kOWI\vqݜW 9_d۷II(%t *y 8$WE_:"+5akbmS %DK,u]k %#SJo9i;!H&zϰGņt"謥 ;u|BBlɫvPQ'uB}mZ [G.(=iP]|Cb ł<:<:aL+ <}y?G`t"wZSZ.Aui1xb4nG@ȜS="|ZN'rkÅHdVre@vci4Ў7 [? pZm% 9:J S_ɨB#R5BH']aF2d`AK,:Kj |`/Gz#1W"m~wP ڹ)yyzӖ[4+mN]TіI;uzꌅ GH$~@kfwǩpqIF$0;ִ>@z9=MLHpUϛh).{/~1MCL]'sh<ԊO."Qą$ G' ZsF?W]ݛe("@Q]|qSDgTk/ x_ƍ%w4!6R;9yn,4sL}›s{ a>F\/qϗtH?EURK lq∱NI6khl,\ҳ5HH+Dxa!{JVQ T S<7y& aGbV#c@wrVɮ%t -͹xCrƦ]dä́c4|͇kJlle>lk ;v#Ċ {uGsḊGi5*[b|,莂Je?!-DT4OZrPO?3PԦ۵D]^9B +볧 )  }>ngCֱJ2`jP :%?8V?p0(IIOkGG>i7& &#äXcc"sm5(nti;e䶱}e3%? G^?Ż}3TOU"RC1K;F&*e/ǯs fgƕI: cƀD]b#NzPs)sy3hP5_8 @gm=pdϾON),'MIQe|ͥS! h+At& U~}bAn"^c8xR_: 9̶!k:K`ŪAS YR |Y_:DճNXl s6A%l JbL۴h ۳c-h<yi.6q % Xc_| ʆeֵy,( Us-aeն ]MKIv*)sC(95eNoʶ (AoBlM%F9?1XXyΆ !>CՈ#$~S@7jT$JET K2ien b[ >fB*ҸeeRLb{Y)r5`W 8b%]E>dsjߚT3D8Gv@qL?km=?!qP!i>iQ JDoT/$V )(<^$3BYg/ߝJ}HD'PN6p:xKKBՁ_}kbV~ pגqX_p6d0lH] .t2V"܇ŒGNͲC&;4,y};v w&k= շ9Nv=Q$YshDfNCCXj"N\@h pB'cVfJ}'i#,o~u&c" `D`۷HCp8]?z*9 (Xer&>Z6Se)ːVaƣ[xP>y%7w: o)} -$vϾد|`DƷ_ۇ&qð̈?*eEҫkW׎P[O&F*lktXu$pR3K/+8Q^E_|aH;S9.C X΅xmP` *~.ڠjmLc=}ᇙ)iw6kh0qA8z}_TXArjA=.%`:xR)xs5&[fjӓQ"ز f @jcFJZ}K ]60I/ÊC5 ' >Z`x>|C0uo?X_3oRo$u ! N%-BPRr *RX΄|W|!m,OwU/@Kv.Q(pP𓸾 +f{:TXm;'FпԢ#8P(μZ9*ӑ$ Z ۳1_kb/<5HW 6r˛Ɛ5ERuy84{AH}nmIOðrQ~{FD :Ϯ o,纴c.nR68ue׷>'v SuE*9(Ud`zc5A")-=]bL۬2 —O([[f#S.nQ 0LϺ7(.d(Ȣ&2<ߢ3R)4Ei8}6An bÿQ7,JӇ!JD#&ʬ k ?i0e1L."̟39AHkf$q[}s n?F{ᇷbȢuh㪯ʹ虤y3YeC5D(E)_QAiBZ,8Jʰp~X dN;yR`= u ^5to:F)Vo8D ș:bOޫ1~OsfSZ|.$tQ_52[qZ=W7N8/6CN WćuBvX&A"$ñVOe$m/D֬I82}w֐/Sz[xx %z<-U}#}z ӷD46Eܩ_w|?0}]?hYXE=7yX算݇q8QnQ4(3E]FtƯֱ5#"0M/eYCRmg’OE.A)#S$x1-IJuUK8y$eki :K~YI-VG~ll91!}QW/ fɥX&䄪I!d-ɖ0tB!r5'p;k% >ۂUIHa+=*e0߭ 5sD#\)%0 , XFX16\=cPy^wg3o$md;9tI% D`Dh5ɈcM-8$!7p#2H@= -zKc"D6d8%pa9@}/Z(Ʈ?ч .^S,]JŲ"??}nvP9,qiޘ{uRb~̎rzCe+e[Fo F{!'3 ~9OZĤ)ƀS(&,Vr~dʔSBNjҵ-0+ݮ۱T"EVY}mAnY|偐 >$v^,&KtqvQ|`o[_W7K$k\x•[#}B,+AK̛r953eu1SL擲zQDry3nS>v5W:+i3ko`'ي8QNk5Kυs;k;K |" RoY\+|Zcx$ Wql0`.y/⚊Ufb[29[B&0galIFq+{j`ɈFVNQx[htp[*Ɇ qy1Elނ ](hBNy\.(XV=|\tsG [\@k)V⦸)aM byF9aAi#Y1ZWc0Ǎ%PE#:Sp }hvͶ)|ޢ K@gЫP:QjqoJYpr{c@b𜙇)V*e.hin8(ĊbS? :'HV?NmaGpMJpiٓe={ŨBT:L{ cT3~@M2lt`˞Q‚.5A8O mvryvDu."_.@ Vp%fZ'@{Q+*\.X%t߾/^(?)DqcdZI+߁Zڨj0՟=%pt8_rh+{v"N=uCjIis45ź5޺h׾, Jx=+y9f y"MAznivm _,˛/C^pY3=dTW( ^^B#|o[);E/;FĬPeu,\?&ҋPD! "rt'EmʔFϖK_(~ϑZLM(ɼbrxS(L~RPtY]`stDM>& MBs>'vFʩLm dk2_ a;&uS U=՝]oшŨǬZZ\ԟ G=0mI'ib6Z<VsKJ 2*sF7oك^TINtbX .̭r/jY&-}}6fC8XXcAicȑũ&`,8s|@^$VY`2?'k>ZchkPѝ"҃ !d bR2Bm b4N?c*pC<,:_*ug'f7J|%dD 'qNߑܓ?ݑA'r։^eV"x{q{#"1.Av<9iUŃe93h۳@Vez-D[sbN%;+|L15/cTBa%zC@,~aAug'ϠPq}jV^0Mu~Ĝ Y| _ķɩ04pcH\ɧ~Yfwe@7N5+>%ߡݙч>?EH$L]PJŅƾ9CqBuCfsFɋ'M=7lܚMN[Zу=.Oe߰B@3ÐSK[ 3b ISXG±NLA~9«.]j&Z8|ʼj6MxY6S-|8g3NlR^ԕ R{瘠W(5R-Iͬss T@;-E33ő/A;LՍd b #1š}~5a_um|"Յӗ~%~ԫm|%V.4"rlp, cJS70w3_"o vk hRGX];1ݹ>CdB ա, OsMERlĒA^#a(Jo~4ůM@ `|zx2EL|[F~*}JvPBK>MDN;m]-@!?DNk.6~򓂫A RnjeؼyŸd\} eU"'U 7Ma4>3<-.!|hZМ,圲6p(iA&qYd<mT*`(n~s?+$q2_wyWgXRȊG󵔖ELeGY|nղ)5;k8!㖫 KLpԲPdpʌ`6^x46A{wƙW]&t{=pͭL&t&;3h#;ս4U9K[xU)(+-L+oQ,+awrdNO#EQ?aQZSUӔ8ϝv^_C.F3N,}o>]Dh]DldkpPؓ+Znm\닛1.![2@ࣛe}fUYU?'z,;RIyrLY|Mg (H_N#-{eb*v&V+r Qb mZ` oh,_ZZf!-oLT̥\7kS -N~;CF%+C\KMCM3 <͏5RGsĞXz$vQH{>axHED4ZͱhBTX$Z(ga෵C̏ܰs#;VR%B-d&H)(^.C laς5bm:y˿ANVZZhʹ1x= 5 T\: ;씒$S>{awRYZO!L`N*քeCR{3VpbK*%*ҫ} z%UwiЊ@t 2:+ڈy $qaY?n8# y6y®#fkz:Рn#IancfrGgdmqm_! )5lI$Ewm$ ݢ׮Q#<5"' kO9B%FPMn|GZJSI ]V"EO;er"V8<clF\Hnqۉ=4{kESR󼄓UZuБs~ϡgg,waVL٫!Ɵ_?жfy}n^JA7YtBֽOH`~xof4ʈ}8-钶УfE XG! 5bV-[ d%vXG-h然'u$qK[^ʢP {Rqva?r&oikfL/p$,DoAl/n>Z;&a8=q]1tdpS*cqk;Bx.PWZMO=~}dסcg% 0 SpY^$t;TWig/-᯶.S *9˸F186_Hd`nXnۺfH|\C2'EZ|QF q j:DYƅJ0J/'X4N)4:p 'OwR%ܢsmZ]mgv_9%\4 dj ʹ,= J=M Oi=` _}d4%.O:rrLE3 "1D kᖨxcX=]jjk8«S*&oĦXYHky{iH)&l{to8y环aqX'ˈK¢,<Ҁ~XGܝx|?7ʐKPp9WS#0 :lL m0t@MF+t?=fIܬB/h2咟 1Ptd6CWzQ}ܴ4 ,+_~Uk9n@!-Pl/]xY8{4+l|q~C/+h:.mP.xY!) qU 'ȹ&@eHq!ڵk:+:S|;-nFL 0A=e(0qu[1b@~Iz[5 ΗjSV1hiv/cJTllN7;{*cW@sY}+tRN[;prW-&DjIJwhqc<#6LANEfe6Y"{3@BKrF8 8G~y(p?>G܉)Um jM$I#˟99ިI//]Ő,b |m8ž"ͭ #{ $G~}1:&y5m4ovaqh1:F3''}Ԏ6qd 6lRK'2\t|<s .eoҿӨ?>F ۟DL+f50K)r}Cte"(W(},' CF)Cg1G(6l?AKezHb}(u#]>Տ8(I ۅD +sEvJEFXcgeZekc MW8fPzwOˬ]?' c`y&Q˕kg?YA&K+\B T[_G][vII[0Je p^yU!:An8߿Uxum7s-9 Y Ooʫ_KOlwY9 #x,&A[F`f"{"•R&TIa͠:IRte;0xu鶱KP7Hq~NW]xLytXN~Q΃` k[Wa~H%G8S:ָK=whtۢ%TQWa«0m;h:ǮPQȫ- 5Ua <,aXҳQˍ30w$8tc񇭁s+]ܟ58B2'a JeJ:EL ﱁa {Lg#$\y#/+[$? |t{cQ{8vha,$3Έ/(|XH}?^(nD-Bc& WfpγtA;Y?0d8_ʊJYjIc1jqS,NoIYtg+IހrZυsE+8zQýEQTi":z'Mif~B>:=Ǝ;c=f7z7A,ľ*xJY6#B*4sqPsEBk.(vrWҥ=3v b-pM34&XegNI2Uc.1*X|ĠhL ˖<;p}&9.ByTa"G@yרj/k5y,X.1Wz[J˩r0=ǵX3b id>"Bঠ& ƊRjy'Qۘ(Γ#sVt̵EX;@{8k˧\l, K$bѴ$͡GD |dOdp6_gGv~}-"|%% J 6vqm|WMOrWg9XZGo},s/yjNG V֓K^ zP$ p -f^(*M1qʏ?vWiL6s,0>dq{l7 ͥ)u-) a\2j4Bm᛿sդec1U1jz">heڝr1Ćp-?&Mjd#DteǺyk'2yrqdA`Gv ViCDfMF@ S\tׇN7p]DX戬woc_FxS>6b4+4:IQӬX5&M&ߣ>#ʿr}9i*XuwQ\'l6L>ۨa7!7a: \H#} 4* +G3~䂉+Ax!Ӻۮ)k)eX=~cI ˊ8fS. H䚀6:^3*>');߶OѬ=w>jLJyk3{7 N^pEp]i$ 5b^MffbÇ5d()FtƐz! g@9쫝UߘZ*n.{NEùk^>SI6V tEah ~5QCWCc\QSX18ªWڞk3;-SVk]k>@FnZɮ.`(n{Z^O>6/я3YB-c~H+:yoh/oȰt ԮO_TҪ+=8M\_#|s˿Ũֆ@zpݦVϕU> `#U@ND_+pyWwQ5͚q Ay{L &\8mC#8S1f7l U"PGH鋺%ml7o?k^RXgw{̢?5bn~%+pg%RKԡ/KCPr/HX PJ`3+N6]i NtL+>k?pVǏ;eXi.17ˢ@X7=2 3WUӥ$wz?fvMmȒ= /Id=(k~eA{ҹ_Z *e<o%s7uZð2T Ƿc?q $( ܱiLHgHD0P` > CRKauq.8㭂*}]0隚ICXL$Q1(S*~HD-.?-CA G(H奰No1bݩ`g\zsj[rÇ} 15$)YdNm r&_ =Ho3(Py5 ٤z1!Bs|$c~L@2g~#RɉC;`VIEIBmր?-ȟ+\7LBoPbzp@DgU}L_3(:LGȊK "ʓ~MeOopޯ8-QfP&!:ڍC#r2qTv%D5婫~}IJhJJ$c=5{Ra1S[]f(~ $\#h'8iQsW8@st R 绿O\XZ)T2d Y"O F^KFo t Y;Y-7H~rַ)Ċ7xiM+k3!U#lhw"I=|:+u }EzSN[I _UӋ+wq%oNC43)B4 ShٙH.;^ 3WfHzU)}N!s22n^@u5@Gۮcԥc tР d\| %UINHA⾎UhQ%A)0 ngtiS:Nuӱv_pR!D`-|US@l4'k7Dbir h黂Rŀ?Ýk,1J>Lxd<-X*^^ȀKhnTb7ʪ寂T'>!yqJ*\#Wɢҵ%~ܭs0Ot14)Eg|TosJnCf-4Rv† IyK"؝pe! Mޯa"^/)@lB m3YvCU6t% .͚0WJRv]`8O5y ˴bAt:K2#f9LI h`q3<}d/%B)*X[_"Py%XڱMF!2JTn.vhAnvjlOeVVe$#Yu e dQ.U7*]L L,rsEt7ks|2,_bI4ur)94ZKPnO" ݶ-v_h,^FDO} (6s"&̉:@>0j71DRg/xo~KlEgrky=LĕqKߺ ,Ӵ(ޒ5fs}9vSe<n?n櫜OTewb&$OK?A(+qc$ (je )zM{ՌX}Ƃk*@RFɅSSmhIlJ'U{* ]ҧRR۹P]jb|F&Fz:$JugE,-Y~~X͊ŐJDL2 f,kG[`id TV铝ԀLon)e(2`ZhkI6N7Rpe)Zo5)z8x/9ZmH↬l"#9WD&1xÝJS\y?mFAG%~ݫ br(T"5g>d*9&3C:wuOX2T9w>Y6C@;ׄ-oawyBIq^3OFU[ tȎWЁ TvU˾#cН\t}WP)0E߁6xV "|"m162t+&,_!'O#_% WC͵ $w})^,440:Sy] m=S\eȈ(@(JEA}Fj^ `P6LcvZ̶`jT7weM=m c!lIv,\<.uV;e -oA$77+cv?2$5}^mP81د7]1%Iٖ[r8 t\秎>%aΰQ,,kKC ey& ل7EU4xh9D`>&!98 IR`H+a;d.+bfq'z%GU ?{,HIb Oz3pb .ܴ2\(919ItjJWo2p;50a`+уͳenn3q*Q6f/PF  "f-^Q0v#2igtzqI5y]CjO |3JfQGz^j\ N,X趃;4#daVCҝFUz br5U.tg4^i^*<_ĵ{[>]C:8:Nl/:R;S>d8 ~nY\^8P 9;E6O_'z56L519`mY2B&#+lxYj5_%DPIR5Y3:p 3ȴ771Dtmkkb57C{=պl~WJW)%81RAwv& D621xhB0'IhМ\2AxT*Z3fǏWJw= ;CN;fUQeG:]v$W@'x/ U[¼j4B;KL9zXXdpk5."D9*ĖÔV=e3<_ $sd0D^rR'#ZwE{]LKO ۏxz?_,/;r}+(V)9:3iYIJ GME?]#O6Y>Ʈ[;_A5XLELJ@^[ƌRPBDu6B rȭ aENޏ ,\lR?56(HP3v' s/iuX x?bx#,qoi;bFiýR|>刂pk@t\jt7+ ʊ1N*jV ] ~Ȅr8ߣZMbNeU+ >$.WmO)u4:{@]μ|j>L*Egএ4,=ۗ};wMŽpE%ڼ?éy1;^U4}J8e'Gx'DZ2R̃6nC u6sUo*ll`RzmW:Rf? ؀O w^n%B#߀I}GY(*T=!toe=z_85;=$%,SAt {v3l*V:Iud+w)=Kp|L*vϞ~3ھ7'sHa?>WՃ=_|=f*O9PdP_.ĩyߦ!ڕ ώ-Ԙ!ѳ[=BuFv%o~ryt?EpȾI$4ӛ|мCSqċ `?bxWjo˦l8}=|KFӅxʝ6WT`.1nb HbvsClSkO aWVI܍j25T 3R$3tM;VfATtPQ-Z5̱\wip's<ݮ/+vFiCh9i5h`]]눫ss2E#oK8Ew~q/YͶ\v‡ln-lM_h$XK~ƚ0Pـ*&O7iOXrwZckrv7 (dzK0*v; ?Yg7};ci~SJY:FpmH flX<A\s¯5ӵpRĺi:bO]{8iP}ԩ1^. ~L> V\^ụpJ&DGByDd'dQL:z+hXpWft>iDiͮDrgzUW2bתV03_:[T 6Lh][B4L/gӼh\}y20jؠpP G aLg9pKv|)(ir[Ub+qd뇣i:=P¬,`^gHĺ1 މ_-|4DU`ֿ}#AF^a&},6Nƌ{ȡКP:CJ6g$ }HTŐO⽧)#͞yo1އEy)G8dN߲0mN f➎̦Mz,d٦X4헍Jdzw٧I \,WfM#Pb@sZ1.kw9رd+1ۆP [+p˱-v 2L5a~CP ٻy 47=b_tG2H~ƓDw̹y\·D-G?;J\/@NVFvXX\]:y qA<e0w1~ZPz'] d̗hiu_mzBswOr md 'ĠaFM=s#+Gv*5~\GFm@!9wZ098N*Ң4F: 9,` Y;Y)DS(6ؐSfGxzcf'^JYv3N+kAM^=@8c0S[ Gzۣ[E e tCC8C5~t/}>?9b*QvS}G+EBBJƳ;և4e4YINsDИӁeK e_n@3(sB3!Cм3^ 7r#XCc ChdC'O%mVd#JPG>k$7u h7]dy"D7EUqˣZ0X)dƿv:S] >.#~ɵdh|Smٻ>%}xD*X%{Nĺ:Rۂf[m} +K>=@CO1|wq\G[KzGcm"yՏd2c ?XH`\e02 D\}K[LBhQ2т\j0a%AWm".)Q"[itl =(CniK %?53Pc$sD0(C h$z]`;gMMydڕ`G,wU^H =5.1v*9Hw"B!DY#h7ۋoNlv j ʲ q ,ߢVon/i\=.[:,H˩G ^ՉWf؅)*5+<(-T]>vU'/Q?zu7.L3μ,6]OIhr]`t-YoBuaE)Ψ]l†'*P<2 Wn_ӑ5 ueUC`ؔ%yP6ILK>y/ް r~6<{PrQ ZQ1p(f'  bAͳg;/<: swTUkNQۼ%~M )"n5>7TӅHS*'R0 ˕^4,;G"Lde7+)\RN˛3בmHòPF)Jqx 7W7=56ЫN<$H{߾69ZRN%QP恺6-cXU\7׹P<%7[%XtZHVSh'V4T[[eRH1YmZϕO#k$hI'(ۗ9l$ꩁ0 [2Iu)s(2[p]! BlF`o w7oa'h"x4s4H4(IO0s/eW1F~w_T]&zﯯ֌4Da p}7Yzno)_ $6Es} !s uiU-ZᧂA8ъ.>d8xRmH@Fଙ8O۩FMwZp6Va`-*}Et(3~\gACZ Z?ȴBx AI=WteܣIq{YӶO YxS0ZTjԯ}ePt>JՅQC,j*L/:e㸎eK孳g/\IvM 7qD:uJO=l/tZ^<=^^ uȁ}ûy@a`/>lڀ`% `=e-AK. .ȿ`tA;ujC%+wuH3PpZ> 1W^Ǯu֣Ԑ":ZP8XB6,W\&PDm~Y]dnwVNrjVy< ?l+Q /@(^:B5$NvյiӏIO7|@ȬYV(PN̜Lp.U n%_!ڝL|I/)?br|z5 E>2V1\i1KK6@t!_京')8 >|Kz5eoQ]#5!@ =#۱&Uas+MzFozXP;(#9Ԥu]/}L(nxuR]ON I}PDBxr XY͂kD48U]N&dK!Z!*62U91WRAJJd+!|&\LǍK37}%Bbɖ3q9 USHlh6ZeUsz{],C72b?{E?LOeܒaDjXY%1Il k7Rb5 ^pDRxP!T9[m7?-C%lvQW qcXlZD:\4 IJµRy/} ZLRc92^wN]tϺw@G H(fbKlTDzns[! ,%C{P:@XΚd˦fVbN]h`b^z縷thw|]~J&`XMRydtrh]+VxKMHL7 N؈2eq~)Y1Ηxx| )ڣdCc쟴A< n*=L- ;eF.J?o=V9(G Pa!%s^sWK ?&tPi\X=L9|*|!T{Y=ӽQU==;̓51^&@RKe$BJ&=uo'9ބ[%.:DF+ 2dEIE-79Ev֍[iK!,n9'L!X'Dt?32p2虦 "A816W  xJamdߏv S_?jk>ra㢨+/rR8KG\כ"vA [Vї ^SN\)HS{>A^n0DtkТ$ǥIlꢰ +m]Vyim LjʥSf>6qҕd}P\ Qڻ4}}KL-6gLj?<2ҹ)+ۅgGz-7jwRdWq$yqŽ4r~S s5df4!%\U "-1gPؕ Az@k?sw| RZ93LU LuXʼ' fֺ?90F2aXj;Nf(#%@@?w/gv3qk(d.Ϡ zhnV cc4~ N[tm7Ɔ}ȏUxDKЌB1n>5}献Xt{5Pt4-{=1浅lPs]ut`z^Ͻ;@Op|]ݙ瀅ZBt꿙)Js%_r?^:uO2Vm+pt3mGTG45W_CFC',KJ cHdlg3A rxrJ:)M˅R[2r:M.,z+ U̞^ݯ\g`֫ꂐmT[uaKm|UZa[ɐY:b #k?YR 4feJ!麗tIBO8۽7:ܒ ۈmrh _@/Oi.my{O{ /IDWDu!Dţwfv\ޛBJ(J:Dx\_6[3y C)};)b vjӁonLEʳ;EA(Ԧ\sԹ..?|V& d ^W̿g!r+<G˳(j' tn`\_9!cs-^z2<,Lae[8VrK,4B$9$XW#BtV4S=41XG?޸NcO|dhLLN*١"b)1D,ͅf84d,tgcObHTpfdǦcXX-`}/̓[)UaMTER `^eHW5Dʐqm.M qZÿ&Hx`MLOԥJgeHDnߚL Z]-?);bǸ]NxKsGyeCMVf3֖RGZA*6UtzܳGPRnΰZ p& ЯG= FR)1W("|;%+~7pCswhi2VPmο@'O"~j5$Q#e٫@(zt-;Ї;| Bܓ,D3JWeƑEMXiNNC[)ҤC`>*r1 ^,N5[tf|7*6s *-"y.7+aM5-ŧLߦRO aaD Y fY48KoV59eZv[www'WbGa{!P䅷S-GgJB/f7Q ݆SbgRy:2Û`AԅtS1Z\eQXHPHQϫ:#P>'MIu)AC֗JOv9pH83-:[?Q]A>DwԘD]tY(r8̦/#m]xt~]7훍]v4e  Q(r3S (EzCH1=6!r:/: aIՌ<UTQ{)ʻ 2N ܰ{6g4n dU'_;nLI:-l`YfIEe—Vc(;$RSH%3ǰNxb>ȻP(/2.)"[q&,lJԽu(ior6\l[#p ȇ/յ$v=O{կnO =SVIJJ\2H朢j^eHvahE/eH.JSh:Ж}G.Z۠OLqX$l|kH6@F|@,I(՜(0<%S2Q0U)?r<4*4˹<y:`wsǴWFqˢDg;q6~uC0g?˶ؒoO&wo /y^:UÙ3,E(saؗH7<"1#0-Q-8]re@v3A"#Nܸ\i툵>q:eaoWB#%D5%Dmf9!Hܷ4 Kﭫt/ ޏ!(Wc|^h iMٓZdLoَq|wDD(&G_AN+w.b 8s(2)g(e%Cf'#qGo/w x3~3 iOL4n`%ҸoKFI\ނS,<ĽO+3L)vj^'4Έe)vR,MŎQ.])T;{:ȦAQ8,3=M~+Aj BE; JHd";itͥ& Z=JD*2JޙW6m,zs=s22U,{zkK.x):aA3v$al Bc <#Pm:kgw1$+@Bz!DW kBI I8ʺfԢ_be;V8],=ܺ<`Éz?ӲPŃ|8p9[ 6T6Wˎw!脂-8_̭5.*|00TG"~y"+^<|wn0#sW*ut{/ AI/|Zh,G4Jw/ G#]LdkoXbwu-1Ikv/r&00RH(d Iuٵ>HIdimvOIi#{CSDͲ^#i?}RUXYĹ_rʕ_fM)7UU˪ck7JEbQha3eye4p8. Z= мH+ԕ |LۇZa;?7xovY !C 38ͿC{.TRT.ݛߕKMEOI2U!}Zc A)0{S] Na9DQGQvn};tN+C!ZJiY -d[y+ʁ@h 0Kx6(N"pe#o?x5cU)Reh|*(7O*7[oG08hnUo@;94+0"]- u\5{QU8W^fD (gBX'\2}4_nG|9l9}l#LOjSz~H%zHUM ];FAgP <ĉ].c?g2֯f> ogāX9"eGaڙ sPXj;r(5Ä٧\s†DnK%1V`o%Tqէ))k?1<3`C`ZGV‹єAĘBr%n|fut&^a}A]ճ]/Y[EM̶8p]A6RXZtر¯-qF~JHi|ſӃ$@mT1Γ14+uc0Sv)y~WjUĀ1;'%"ۨ[O1G"| +h!(9wQJص+"f|EڜgFDH]ct@kf\2&s2#.bʀb5F T+MA7G&Tl̟뻮H#oc|8̴Ha :{S {G%f%gmK LSZiWR^hyX#@M{?֓!H"?#߯ߪ/iT̩ZۨI# XDkwJDMDb\`ZK_]Lfh@<'Jp ``%{d塴PPLaQ~*H`Ry& nvqῑ]yk8`#`7dun9U|V$iBWzJ tC«`SVM{U㰈nS 4 2Dn5^ZLI6ۆ8\(i\J*A>|x]TO#?3Li$9$RO1SȖ H9!RSh$gtzHj'/`ȣ,DXRFB/wuGP~:n_>!*v !SDeK̓Usifx +)-Ӽu8ĹΠY.n>2Ez*O]qJ&԰R%;*bd# J`ig^J+pi xdnW3[,O9I&_Rs%Y6mJd]6`!̪D?Jj@\\셠c Y=ze/ܚ˰4tn%l^bo4޸+r4JewCqaIBx/~8ףݬP~N&{T|{~$ciߡ"NM y2o!ˤZe2Όa-_>J;6MsX%J#AՆ!_݀la;$<'(bImwTËEOcY5JӅ6P@6dۈBo#x5jS"mLw[^Ë{|Jfc'=XsdٜtkGhLJsToSݪpkBM6jQ}cF~ZmdiyO v `ܫwyD;r<>EIt<9i ` WݎRb3pZOjP\L2h蕃Y[|1˫5J;`"4N%x[wNa:B9L]>UwGSk4ۈ HC TRI]PK»ؿ an vXȦ0=iSOeF5_`?Q ?^q]^ɣN}15lo 6D"`9a`"2m;w q$̛N)}YZG'`q}գ?՝iB@ɨpdP rKmOXsp #_ RHzUBkXζ]g+utwd[pr@?.;ByY4ҖPj{1oC:Dlн]b#YSʿXpn[⻃׫']5tvoZBρ{*X^?&eJ6ryp[Y;'(rAޤJAk?Ьe]ܾ7yAɚ/R<\-P(7Uՠh0㹉Y,X+0ѱf솲`8l6o}܇ݿ7GukfG3%k; r>?Rkq)E3ފU.~p.+_a=rX24_azYM9Y4[}mV|Qx[3_G>`6H D5L%;%rs#!f}b,,6FaYHq!;Tƺc8]Kz}]m,]A&h+kp_h8|m+|[c9J XeI j9&_N E>#ðN0=(t^0 -{N2ԱV|j!]tAJw)R")-YH"$WFMzjmg ; M52 <>=ԗu?Cp=Pl t&|G7ط(~|Jw@_w> "f+T11:R^W#0(aFx=nQjmU]YG[4~!g&&D`91i0Q,nNcaTZAKxiE~pXƲ(e1Z~xnaWa ]~4Fd>@E됝*6Qi#Oݶ该u G;U.Eg)Hka/|Lt'kWSi:֚ ԻJy#I8 L.UnEz@DͿm9ExzHl1BmEA08&SXO6e;F$L0Rb恐ɚpb>LG zɡ@LV&R5APٕC N.S:_ { Iݕ3g6j=9KT gV.(˔fd*]Yr]/i> bGi=-*wek\|=*Vw6O z )cKb>J@i"gq~$3+eƧon+ cYF#h]VZLC-2tnbQt[X02`..N. IOsFX~a1=gHERhZAwCrhfh(nM'%|(F4 $R9[` h= ϗCcA0-ZcvV&a2n~*};E"}␒sҸÎiF%rK FRj?_-YʛHs߾d`z8k඙'g0w[LBBJ`(YV<3MdF\#$ؚ J80u"N h^SkG_yқ8) ,%RDC+Ћg Z8U&}@$'Sy=ZD`saU"Px2F(@`uoHr&=?\X)KqKH꾑^>ќo h8SA*=(SP"iv`Y#D'ÏHvZ׬ -*nCl6׏<\ "۰՞q@It^+W2JO.w #1JvXSֱpf@0&Hm? LlqJnG8.1C^D63e>KX5{ZzoRB&$O $Vzaes X-$L-G9TĹR2U'Q)/6Ք/s"oa(y\P3ro8CbL|jm2KZ,Ns%ZRנ]Sr=]̋Z<MxS|K =X8]9|7TyUK;bd27Qd7N /GZHTYjDFp8kH@E\*㆐!j@)Cv3L&Zn1 ȑv )Ch=oEA־`+C| μAׁ9Q~u ^\_-H0Zr <=S;3(5< aPU_u̽}gtP΋7F} `6eO”*V$'o>zsDSv@3Ltb2d1GjMIlN)04ti?ɔur^uT8 n ub[cz/֭'B @m+U,I~7)kΰvH塻8! m/j9 G1c~(h)CuP\,Aw]m X.&aC' BH#X 4؞}y*<~v#] Ke5SV%=jPl ǿ9] y誰\GvXR0!ײ݁lHu1Prˬs#䔴ѦeU&z.R&mLBߚ+]0&uv1ƷDž WuΦq nvTS#i8CIp[ݫ7+Wl .XƼ-dE^UAl2KK $jzۿ*He?";;r6^B?,XY@0*S̈́MZaAǍ}׈\bh(>cys,O1mǀ"˽|7*cv7zTˌI#>]F?oIhJ䄈ĺqyD2tfZ@,x6{p`i>t'4~oZ1 CZf=oer>qtTRtep Mnjи` oDPfPPNys\FvI]lX_YK )svb)= tCi(1 `),GѣFUV~݈v0%e=P#D#oDÂoZ[HR[ =Up:&#B+H҄v {d8]mL-lNVS֖e% \9El⑮ w6r2BqVcZQN(Y9ӛHW^4H b+𫝐FِvXc_%2LU-1d""pNU |a6}cA {?])I:.~ Elqظx;X(>'#P_R˻e$zP ;\聤ÊCRJO|Gtaw;G@ejR%E| ΄n/b)6m(S . C$\5nYۊF3"O?-)4lͷ 9*ܹ`K3O|naws6J>*1dVR⫻`{Z?ƆW0ґC۩yNN 3Tc"^(Y/ 585υG vZ|xcŬ20dg_ f̂hlf1r٭V:}Pi~=Kŋ|C8 je$:E fΎ#?}n=8Y4:jwO!]`V3v;Dڦa<Y{0>CZ; pfCKAPmXaN:T D7{Cȣ8DLM}~o-J9&T()Ut$v_K~׍?zys-V0|,5!ؔiYL#%sɖBV([6'R*-iileN6 A-[s\u#40ɜAEaN~N-XT3[~ } @4 ަKQ A@h5{R,KOT>OZVdH-y!D7V=#DSc-ɨ߸NȨ[GBeYݗ,:eUax3f;zXt^/sܹDW=gmK|0͓L $!2< T,᫁UHšc *$QNy/HpG_^6k\/ٝ-i51糝Z}$K4`9˕_ v&V%`63ʔ!cmgጰJbhF]z47iD '91Fӣ?,b#/G{Y1 +-qOWBjВ98p&Q 1d+'MjaYX" EJKR0w uV#f"y3pPhvDǶ4V@$$:{ EC)I[Ffib=tv2פ">{=\iypu?ytc,Yg 38ŽiD?>8IkaL$ ʽW'%Kb_㶯]'LGN.oOyzkn0^Pl6+W-r-{Ԝv)nI b*Z*,ku(=HjY6%7E:>st9qű>FmÊ׹XY*{Gה9p!L"Ì?~PUǿ@@;DѲgti ?Bۄ@uT%U!|娉x̌(a`lCϧ/Ŧvc23RCRC$ 1p\@[ RT< 0ЁnW\SR*&NRZh4`Q>I@o}Hh.ot2g>hEYC`3ޕyEI{' H - Q[Cx@1Ϫ}0{qc4e0NCP[x (Cs@Y͟Rs"Ľg9(FR9;Hs:p PMb"TKir>`/h_VjfyYHQ,ps,akC+GעFJMuxܦ,/A/^E:9'|GP4T *+h z%󙉅qzdZ "NUX5q2Wl8o+0m} D 5RO[hKF|#8g*L<ڍTا)Ge_I.T'TW?QGCObD]{LS±<9餾祥UoD6In=R*P0zOem?6Oq|\Mq%Z n͖onKTN8tq@zCiMYA,&PM?4f(j(͙rSlƨd-\s;7eaDvw3A_{ٮlUb|Q}G¾/D9NO:S)S*{Źl\<3R "2hny)NN?'v 03I "\tuY2a啻YGPT?W3hO4m< lUREV,6F.Yy3S+fg ٺysLc0-%1M1;I e{>{KP^T4:ȃC#Sej!Qs/JBR꛴10>J#X ugJ^LFv,<[o}pUN#%lę:N2GPi/ #Tj6h mrF^lxSSqnHJoP (Yڠ9۱&Xou8rBD#ApKO95{o y̦[ƃ !WZȦ=8 nxTKLdGI lGͩp }B$G%HƤ_(lV j,-WmPVRD|K+{Vea cJ$Mm黨@'w 1rQ"Z [ ۗ' ] UB}dz7؟ As7pVkibA.S-MN 7d-]S4)3NeeHX13|+¹5%2o ݗ߿wQȔjK\RhNY5 CD3Ga,K[Kν=3 rF9>X!vǃ#_ӯ%C%cUG^:o817W,Rac?Jj\Ǯ{΄h. vRc;.+s֔KДfvADLB >3j- kW'&2E'0Y$`vZ{{Va;[61G)mxD9[#z^LzczWTČ^55X tHt悷$ۂ#< ^O21N]^Oٝ^9P"̙\Y衲#Սb3ku.0r͟>_ᄆv~jMaSSBI]E믤nˇ>Ѥ"oǎ꛴N_o0OY: "!Yyև`$FB¾dUE6G"T&= N`pxFĥ9/`9sQ4Q|ԤߵrO<"k*-5nٮQ4)X\6ʊ"Ζ:}<]xeѫ[o d$]u2҈|m\PѼ(9)X0Kqo )<ᴨTD`3ñ6AJIse92" Ie4 wzGUqZl$pQ`FQ2*Ȏf猵7LbѦ-! dXIYg̤l&klBG1dSBQB)uQg6r:fQűWMaS>W9=jNΏ?ȾP OmXfw]xY/v)| FR,b n}o 3#_m=Ryn(NWT?_$moX2z٭er5K;V*wxѨ@^)h܅ j]Fb'ց))b6ɴwHֻl FOxp*ohݔϝdP#]VW9JkuS!VbB&]B@,D>UM S$9h?yoY_1z[ 3R0eK2;Ʋ~o&A/ۯ"!~qR, |F3|{PYܥ #NݥW& jU[hCD%YRW=hc:`= B _kxAGHKѻ~V!os26] )->x l)Kt/h.QςȡȓclWۂ|#eO|L%_m߄bP ||j+JgOᖥ*d N 13kryI/.!+ e u!:10-C@qT 9T: bGJ>UzMqBH>rT~ =bڛ@?oVb Ÿ-i\Eqx4{z3[Pi܈V{3xY=po%HBB$mi6*xA ;'SB=ogDo؏.֐ʛA:z2r F!@?}~U÷ӡ*=n޽9e` μ)7V6tͲ[o.14kz3W12%=} XZ+Z2>*csĪ>e"~-rQ 5eɔU*I.g Ԋ͉>]ܓ`:2hՖ5q:EuG=fԜqpt8!~~[A.6iXumVj.{M.69ȓ{}TY. bG &u"a!˩ K7՘B0 w}I@붦^9\ۥЉmn6W~7'v!hw&RfX9@7FQe~2[a!Dzfaa>Mq<{+qWpNSa;+ufs>95r+C fp%6\{W9]oqߧ*[zk;u8M YpeFVu~q`Fub:KY[b'k5oj=\ଁiZmtJ͉6yY/I(EӾOQRvs1c M]DMk~"#\PԐFd)YB1H\4[~wwsYxv?<:]%&wԶbD(CkT}0Z iւ.";/QފtEju "v1V>%WxDwQ6gnw+߫y5C-v*\Ɩ%ils τ砗&# :i60RB97W\JE#$ռ#B[f)vI̷27W3 ܕW}ui{/taJ>]sYBz~T.v?ZȣxzZ߉)F戸0' `Ŧ1Pش'ۧ㒐XIJ 9ȩaO$=zB｡IaL.ߕl|W@mDe ]z6[ +uƕ|X-4k6 X -Bu.` DtֻM nksX Wrcs1o3?Qij` y=b+>c2?C;ؾ 4Z/Ϯv)o'K 2|9ᾀ7ѥNcӴ m$ij?(VݤmTC,^.*Od}6x':xs{ `Fo&9 * fu]=V1_Rhj/[t %C%wDl/J2gov R{e2_V{1@]@([o>6}>FʝGk⿹) NbULiG|Uhbv5F\@}ug5^#ln.G-dMMr=r;T_uT9(ɑFkF(t$QWC()n)VOULl)Y8JQpJ@~Ks#@Sm+]%ZSGsokWΊD8#<ƵG؜T?8`LwA mƠ@F3I|ʚu7pjD :è)kw9[Cƙ!n5QKzJ1w=`;ZK3s+UN+UW=2gFԈHάMgw/6ZG$p:rٖ.DuJT/z m(TϱNFw |Zx0CjGm}^edE<|n#s!9%GԊwAk]Wyc^_ҼL@+e'L@u:)O7؜Y7ew{ Gzjd lX 1ZT.B@'/@ľ;~p) fN;+Kq0-ɽ`6HN'a'R`UIJVG=AH92TkZ-'W]<_L9-AdW'رRRa_8PfJɯo0(D԰bVEź} 2BjW^xgEƇjŅ?~gua6bBSV H[s=v^:2Z HQVV[u?At\f'DwWdv?VPb|;\SU|4ʎӭ Fd*@P-˜#ApBԇ'?F.\q2ԥҌ%GDu@ j$:v)|,S< }I_0886"z蕖 8''oÕB  څ r4dsSXfE>ewڟJ H/-5}ȏ{W=܈Rf2iWr` ur+D~ď0=ƛa}KUO@pecui.>3s(q8rh t_עNlFqB8=z$. E"%0E6f=iUMwK=@NKpYOɝq9=;׈|tBFoe=A€!Ia[sqk`[otGN`fަZiTǯ`8SiVK \n<_*I OeOҿBd!എBCЦ"7Fh~%je@4 u86_>:1ϊ.ƅKZcvv3NVi8 $ĺmu䡭BA"!umF0GvPl&ޥ͜Rn%\@̽SZ bZno&8̖hA<G-_uVXJøu%W]P6Y =PФDuO,nOGOJu.95̴BU)ΌR@>R8ҼYrH-pDOMO5>*1 I38l&vMHQNI}C{3Qh'(Fwv А'e,pX9/XkjvGi@.E5JYt]U /ѻWn<0nf gs|#օڑ8]W*ϡeՃbrީ\;nDyv3 S%I`۽} .fר4+,>TeT̸䇂Q'J3hsm4q؂83n^,gvgD!d죞T9GɃ)PPn֪m[󭴯 A\֨G^9H'K8xn-vD\l5 YCL ._6%V(R%Ϊ1qF wOXT:վ fIȝ ʨ>Yw-[;”IMܯ/%/^Il$5݁6]+T(hˢ «Yk(*o  _2NXft*Pڈ9;R%hr/&/ hK!r}:㸬dE)R֧t C>ӻruu]ňk=jC\5&^NdZ'?#kjEr\JMؑEH'I#0@va/-xC\6 ׮LͺΨmҥ[HH/UN5tU9ir]&6U {%88" gO'9`]t ;oj㉂tDCBPo,bqPTΕF[0ϼ cj pX| _SΏ8Y?>RfSzj _";9T5mv? d(ުcf4hM9@MzsWlD @P |Dg9*-#형x-{K[KEg(o@hOdd <<1Y'~pbnkJdڹv8x2}Ŗ@ڊPbEAfOVr7w? =a#4 -p;!Cm/FDA ɢ#tiP'zK9U=ǫ٠_K$-*(ޞ5q "L)_E>Gbmpי*b:?'G0~PRN_G!BQ1e5;0૙kb. GT7VRGǖ3+B`^`躴Re Wby%0xyW83QUV '; u`P6 jJ:\ p^׬,OLMEA:1Ndh?z,z&/\A?QP;7vbE Oѥjɧ|̸6 $0W:eQ%S-) Z92?FGh&{ב1Qt@~G,˅L%CA|}r=j˺<_TkBtlJ𭎔gkzDcy*?DO@fhW7M"C_J= úٶwiwVgX4r*fEE[/½9-~(o;+gX{/=ڿo6>]̿Kk󤉊5{V"m>No?7[I)P<3Q-9eGq*0E!pAD4Cމ6tCbN9Cm Q!8bׯJAýՓ-O  c> |wo49*۴oE|xTT%}ݐ^? 7̔۽~c:95kyeo[Mm'n[B1mLPt|^E(*ZN9bn;pZ 6b$؈'qxWȜ \!tXdbI3Qp tFw<*Ć$buexTM`k䑏PNhۚZ`\ ،bg]Y|ow~/HZ\qJ2v8O $u(b)ݏV)8h⨢ޭIفj≙ROOLδA2S{Ym9G'ډ0۸#¡]&mb0 &}7RzZ>!&XM+pu_8Hjd~Ɖ*ºD(w<޳bjZi_k3M_ f|tՈTE"7m g?h=mRyvQ6>>*5VhI&sV W=8LEzqͱ|>GNW(l= ֲ=;$͛6f2:eّ3Jl׭Hg|2`jѯS|g qb5 3>{ a2 fKaZ.Iyɪ=vV o#Ɩޒ aHN}(\ -/ߧf̜0*֋\m]m e(gZ/V0FZƢS^ ҇KPϏ P=q!6c"vQS+6vuq/&+ԩJa[ʽo4(CY G|pM$MBRL{b[Ruy>7 tk0ux!pc%7ww2]*Z;-cW_΃1f,~2 {ljG;˵h:IwA" ʌ;Py20[<3\| =-P^!FS8ejbz yy3"¬)Ƽ4wzer]Ik_d~%1j ~9$jaQE8;[v><(v)g[z{A4hkmc0io)/D6`g$=c.+W}Xi˦,9QΐLU6s`0κ~Z@gRբ<'/RM婲mABxÝY]}y`_zd %ؓrJoo4F%x|K(* gUwݲwGt; H5]"0ipjȿR efj8fBb  Sjb?O l wU+8F"Z5le?Iv̐Kغܩ6 %WraY*GrҍNy{sϱ !M|h>+먟3묊\g|T,\7 Ȭy&K$QKQH\4-,T~Aikt/N祕B|n#jw=HN5W' }]d,eH̫QK;_붡ݼi3v\T1Bk@C0X=o홡$yHU͐*Ѱ%-6XeeHUt{BU N8ҺlU>ZMt!sJ0sWE|rHfO@IYl8ִzu Xq"Oڎ6J޷͍Pg6ű@+VSaa)͚zqvzQekl1ܰrL,m$Qo8{L:!y)vL:uBd:|O4!ghn,>bdP藮XBfx$]P`vh_0fI6ۗ4O:Vɼ}b*%~kœǔRV265>Q`q*M9.ƫR2\J@ayE@-f E/HMt"ˉ}s26ژ}- [9Lֶph9ӄO4`>3Ua $,!IW|$.&rv[4I7H#W$#upSX4АaZol"Քט-M$[`nR=k~\$ Kjc V7* xE!R(\H\+00#hL<CndI/1X<ҭ/ Aqeu({wAhiʫ9)i[Ik#Wr.WĘzf U_cHTzv!_mľb&RX`J^]@ka?::BX/h=Ҫygƀ?Fe"r8gF2\q>A8#h~3иShtkj&9>e*%QNO]!r7b05>ѺEk)$qY[vDg I6xI~ \ 3H~@Th G0ux V -$j\V;tNxXb[s{lYi@''ݫ>ys;/.ft|r bڋgowxil[%/[@dis-w9I oKu18ئ2.FAW4XJ.^wT>P[`Q۴P-5{b X߮,Qiن&)e>7:@A7fz"+ Žȁ1~ۭ6 H$l'<޴ʩ 9=U$GY?Aļm`}0h,,}MCXӥ?tP9H XInFCНz9mi<Wv#[08,Vy a*frEXߟF582,^op*x^mR`SqG{#22}/.Y1_DWg \Q.2vE ր[VV*C04=^-d#֬mLnm$(n"Xv־t3酓U`B ! Q_X!gN-h4#|Y^~0z >nlԀŤyX =T{v l[~QZ~wOȭ>|'u_-+Zr=?Op|; ã&=l0TxA RA"-U+.b~KUK&A}"OսRnxlT^pwfELaL\!a2ſ==x ʊ.s~ nl1Za Ԫ9 z!(Df\VٷC&t}($ PLU}hy6dfH@~:H lG$4[҉>,pzMO!/s1[#y8:gwpx _&aF3XOmv  AS fG*.=<gv hT`ܵc[h-,뚦mÒBAB`0϶Y3Є6o"ءZ#)K|~r?;h`̘4w=}хc#7 h,-Hj|#FHOqE]ŷ(-LҷL!ˁj-CUߡ! úkk3/ z;#uINŪaKRF^멍|8 ͍Z@trr3 Akb^/g{,39lM j>! 'nMD(MZ5hɴ2բ.ޡ ~Ԋ_d#`͵) [26 lV~MS>(UGl9&ʣ36h!%-PPWjyT>}lb=,V)"@14:˂\FH"NT2D?>( p0gE{ŋaiC.EWht%[!iמ+E8:Slx,KљsaODWҿ GpkRX1=lnH$<}/Lؿ5S:2M8:2?X6iy+ۓz+S hmzZ#Ak}{޸{Nۆn0@ :_rYHrg:5($T| ⟟d!8wQZOQm6?S9S]oF߈2;JlK12dn٩b0f?<ד K/3[r/ x,튵rbt>ܒŦ[ٌd  %w抆 jzS.)elnvO4߃+2xWO3=xͫ3ɟcoLS7L,y Ć> eNtfB۩uR 5@e7$Cοr3 EZ q2K3ԭd q (X⍰SRl>)a"Qr4jMdX4*(SE/|n{B>> [1m^Ik#U^^`d5s7Vq 52` kpFh0;0ժNa3dC?r$6g7eqoZN^\.LX8:*~{ruɡK o#YcPHml/MCKi-̰:UB՟h69H9y(:@ny ,L>SUj뻢:T)4%/tUT,G9 Lq5eX: ݵ|糉ETH/+Y $5Ǚk` 8=ĵ3S&$+vXpz/cC+,msuLؠ釟j /sP8?S2LuOMo8j'n^Ŷs k?CXc*Pf)ޖ 毠־ا&.Ǎ]yz/޲7[t)S+ybPU=vB l?w4{yOPJ"o-4[.1Գ/I؊W߹1 ܎&nث\/Z<8" @&b,OX,C<zFq13zb"c\q3Xcڝ( _Oc{ $dZ\@E.NOn .$mjNUq3[ 4/o4{M ̢EZ$>c8 9/g= "܋OI0I+ P% FJjF<|ie ׾2L95q[򱶑.!>JnŇ#!([-~Ywk(h҇'v)V,L(5$ϧ̶?"wh5pv-; %c ~খhLֆ?ًr2stɋ,QrȺG1, yhhL%1D8Փ,X [o1: ҝM~RP$Iopmǥ`{͔TN%#JiLۏ&LvUF ?˽O$. 7>s;Eˠ'-M7mT2) wFg ìT/Q*.[N).0>bgI ]+㎈}mWuxZs^ub4l%ݽ=Fݘ˟UL)rե-oy45MXTh#äSW6g-oKHHFzaVuT_,yzOaN9A;jOaʼ,Y dKӿ,֧0oyDX0u};c)sʱjB~82,CeolHowR7S z Sr"QJΘ w\B18 $# \Ґ5/-O+CPlg5`y×Ģi>.!DL:%u$_2!C?3\`QY6W"rE]q z|aW)~ Jeh3Uw_ac>ʰD/;7nQ. U",eT ] ^]> U8,7/HA#1s8%]&|˓ .;&kt)hUo*s72`xB-6(Sx(VR}MkG ¿;v67Ru' KϥzY + 湭B[eEa(Q%aD*{F ] 8e>ػkNQjIJMʿ^u Ǫ@~f?kK0ef* vrrn/faw\7h(T WhY/!yw6^ qLԍOW_{"mia* _n=̴a&G L +QN5G_G{@L&HYKN$96W]O# YC@g8+_R3Rjo;zu@H>Nn,xzhE(0 ţ;4h zL,@ Ukpb|ܭy2cfƱA.y dUC*g5hSTH`>%7|Sn]J'^PӡgUy\G`}!"Pr%, 7`~$#bB谾*#IhC+s5N4:u驽Ҝ;iN7#HЋ:~H)loz* V$_ג{W%T#spxkV|3$?bMoFܐ9o ?l+}Lg. s'4ʒB.XAQ=<ˠK~wFH9ObDMA-"fG7A,$Qktr>z9kL{ӐDw24;Y>5%FjsV-#R˿њЭm%2-6nz]QK1Ǧ[v4R#.jG< j1(Qd2`kXRղj B-۴3UнF>`M1f߱tS :R?hu:(?%pjc%A2 OQ)!eSܥVa"W&p|w҈J @eشEbyatCNΧ=B tc$uU׵H{'S@Qs5Kuߐt&;]8ywVr'Ϗ%.cֳy?@0N"r!z 5ئ: y}kF9$ Xz _8Ǵ?5}[U*X:&8<*f[c_iG.'#(P`&."n[P:) g~%O!`ÚQN=xK]G³ F14$74-u/ ␗L p <'xE˪yFiT+Yأ`gx)`CDHɮ%򍩝 q) 59mDhꅝt( (S ! ;AՆ}Q aD;J֔&$b' L|Vxh\ nūJ6+ßc{q*'`#6Yp# oC[PDȌM. 0I.זZ3 jai(YˬYE4=:{[o6!*%v.sp(&!RnK̎mAO C(MڛZbB72,܅ f' 42(~ jF~"h*:&$O*:*qI6hŐS¬H'Lij%Tsu)Ώ 9W󓠀`퓝ι&xgM{rNN7) _r`))!%b"{T R%[6ҒY,j}M4GcHuGYyd@L;:@k>Gd=EXTkTvq$'W]spD|@*ڏY!)M磈d0Dܣx,8úuE @Qʝr)w>.`V,EB`'K-+o<fe\(KX.݇'KvÏ?d>Dvgu|S8(gi WB@zl ƛ~+ CD FE䗎?^U=%`UԀB L2FY/?I-"ƾ\dbg[gv\RKF*VhBvƛ%P|%M495+4٣fTI5/sz!M 9,/YbPnLwTt9ZjK6Ix?>*<&L! _!T{0\72@;e"oQFqZ "עޗq,Y{dvl0>'g7Z=8ڧ0}#K~P'"pAzSd_~C*;sm{$#X9oؠэ[M[ P޽ԁxx#-`>%hfg!f;gF\kEA_,͆5c6ܕ`5TKCNXE=vG_D{ ;-u BaW78y) NG{UDeYᚻ\ld+Y钽kE.si@OO@L;n#MKg `ߝPB#ڳ=̡Z5-Wd_vҎcΚXc 6/ZJF1 ܁;[?|Ƀ;̕qeP4a4.x>.ivn/֗M(EHu_ R:+ʾu@k`Qd\TCwS LH Z4ۼcmJ$s8$ſCQӯ>eTmyw5ch2X0eE^$%^Ɖn+z=O++!#9b.A2õ/tPAF` ;~_HR$3d@R@v/ts>@8rΚ:Yam0{"; % WK"W҂cڡ9PAb%*3ўY@Yh.?@͟/=X x͊9 X6L~2M(#RDz,&u}(#wAje}Cq?G:m+o*}8W;,¯ hY -G^pG{IW) &NɍH%sri!. FiUQ yBKH'a1!1bkx@P? qL6|A6, :aZiCӗVΑ:q`4-(lsݺIwſOg`~B UV`2E;2_bjÔ3%QGqhu<=$DN}аqS)41rE]auHimy7SMk{s[7 >}5S h{tnc-L>0NP=1-ab%t;߅jA "aoKC{lQh*BLC@s 1|\qrgy}v,*iY湆\|JlI KFFљ? 6D֩ĥIPip}'I}G|7P p=ߟ+}TV2"4So?%K`@lb79"6!&);ͮ`7 mۑnHL>P}n1_n-5F@cڦk;{U:Fa &y[ẊNx54jђnJ'>1jkrτri̳ '9A0Fp)/mMf?%MP6r!<܃z( XYhg]>E KՁ8Kj~Hz\ V.v:V(nz0Mb~[Q(ȊFV8%cēhlfͤ]?Wq3d!֢?`Cb-.GR_Z!*لl6_FlGw)9-[Bܓ)#'VCO:FMXx K ɤ:G+_bgSNTdQI1(>c?&k}C'N.eBs~9ٕIHc:qUaݭ5JTp6_ՅQvBg sX މgs /;bDBvL.Qa8 $NԢ4f%PMcwAx}1Bـx/VG`E^~&&ѳڮ04F,ꍃT޸A-ٜ}j+¾G@hi8='ܞ]A(%Y&К)IRnNcꃅR8ohGkLed'm+I1Oirɫ &C9iO="M PS e wb2[a}!NI"p|N v^.T)TSbC1|ZÂR*{oc3{ ƒ_m@y\Ush+Z&ȫa;Ƣe 52 ͽK}`BZ_5ar瘪ƞgj}R%Wu!jfle?&H~b(M}V.]{h.jg|;`zG!gn8'Ptޖ%tIԗvC0x@༴pvx$_8}|iÅCF˜^y$ In0%th76dj^m:[b_qA~kLTCm9A1LRpw[wINۏA-qZ;W}(Cc ZH2ݚar=|93;"CjDQNakCGUx#!$G bSFueMHZFY%d-pv&8 n "}]xX(M @Ppٰg` h+J]JY蘁TO_$.9РB%Nw4~j,X!Rߺky&= &Z$A6WSM;B @ҝ,=+o`Wud 'h{wםܠiIچ` (*:"2 ߹5m98v$LH)(Å5lj[ЄrYAOL$\l0:$oa43.=z}E}muKvu;i*׎2FTӞ2&#»"r9Gw jԁzm!bXהLdXYyNS|\갃e?H) P!w&^z@ׇ(~|uȯ'-X~ԉJU tןtdٯ(] 7F^viGlmJ`<$CWJLAKۄfBUaazې'/ɱVBɤuiǺtkA 1W TfZ7UiG!,Z~P p2MHL=!Mlq,D4',*$U[1[Oa͵#&ɸ {e"IZ l*zHYvI]k U<)wXA֓|0ÀNp-"bm(.GGY3b}jm0ErRDk:ui~K<&[.9}OnF}:Mp0$kCm^DR. ePlcE'׬w[ n *C:b;`YiU<5\#Owo2@nV;T߃ ^9B@DL[BY%8m }:v]Q)DSA普tdʧ˪3}y=jg-9 iÞI]^"3{Clg]Lo[5 YYkVTY$nYi톖C;(&4 +Ӥ 5N KT!h=;Y$'m(DHJ20b5en?#S>ZDɘd9$7ӑ6,]}L)zv湀ӺR՜WV 9Kec6Dou+WT\0ӡP_[z6^e38;wNd_o( g̋_{Tw)7o֓NG5+JH;unzѶPWBgw2UycV,R3ovuRFI0 zE=k$mGSsVRV6ޘ('>x}PQ xRw+ng_gв<.UHuhY'I,,}d[j1#7&p9~6w>ЬW]<{nV#d/d0,K;\k\_{-4jIbp-jug2xoJ|y  > Fxra^zя 3M׸Z$ C:l_W?ʎίK^)K͡y$d8FO]nG9$F7a~1Fi1g2˜=[RXsJ+pp;#~,[3u8t #$C >*;'oN$T}Qt%GF_ㄖO)pU\®إ0 St+q3Q\3CfDB/}̆ { )m=#X[ss~B}Zgtd*Xs9kCGM0NϯL5 _OTS!?{R^F 8~2wlגp2 s |S֦6ӷz!i:]*~yzɑd/ށCV,-{(-ίM-&liK93SzeBM*~YxhNtkVYZ4bK \m։HRLSYp~^>q?u%kad}#39%V09vDd6YT#V)\OzTޭ}ܟ^Fk_A0(,z&2x-PGIȽdkeg]]P!v3$+-uj}E'AbxD0U0-pʍ!&lCA?e'yY !!7}aɔ;;M`X{uҞ#YRoR>O-:z0;;.OE%C'o 8"Yk)kکt 81 ɄZSP!!s5X79.Mw;͍atHE5U-CW9xۖ덵K҈1 Z`P"s!nwV-b?O&!evؖP5ڕ7<=o$m&FB[UmY9,]ln7mpAˁ0_o62ݨr(=@u_6u-yAwBI= cn }yr8 otpoB孜LҨ Ze6xAsG7?nEr|lB{G?BhWg6 /69FcT (t`6@N3!7K7 ]se-Aѩcƴd؋*W~ChY SO5C߅ri_^1AVu |}2N5Z|ky`OjտCβLAʺG@En[WO:/ب=޸Kw(mTsT^ݱ\]_; UKc$Qu(q 9<Uӟ{ڣ#.w 'ֻ^{SG= oX~<8:M|M |j,q}'=qZ0|$spɂ 1vɲFYɜ܆&}YP΁yp9\ *UaN^C?XS3p'>Q_-KNpvzTK'ZY=8X`iV},,FFzd`.IAjY\ H$i!۝BK1%\581샠 !}P1DrW55# 5ʨ2تܣŔkhQ{0~/UOG7:$2x*Fm_@"|9*3 ȑ,Ģw 4t,s)7?~$p7eqII{Y,y[>;]@ZhqB>Hko"ѵ~ }ՂM7 >WWXRMKF-Qw&b\gr$Xr5<>unMN#dрy?1`$Ǝ}\qw\pvt "o'rh9пMyVAi'su";Hk'5nd3m42?=aƉk.jЀwf2NPyZ~MjYYĚ=ET=]NAa6.\=cJ՗LlR7LZ!n: HőS3o;'&uwg8YXNCz{砸kH9cw/{*EiLvR:%;%ß6ex}{H,,DLLfp6Š!uY"[zZf}݀Ԕn`#KqHh.E@c!0~v1cdhE1psϜT$Ɔ<:0}x{9ℱ3]H]W+7ܬE5HЯ,q=V2WǓ ; p' Y^;*wڃ! /vR\G-%]"4%T 1L41ܧʜaa DZ>d2rsz~5h< ݻX"[B7s!4.&k S:h3{SZqkx׍CVdRW#qf:qډA uM/z(SNaR#Cmy*C,"+IcuӒLY}N3X r5!OsGqrz;np]4 ;nh\y\/+(-8;}ˌ NPa {'e(*mKx q*AW[(#P'8c8Rv8D{J^) eKyJHZq'h1cڠ萜*]kW=HaL/CgҨ8k2lt Ժ #BnU|09WnG-.{*-DqNjo5ZVkOTyjH0PF zp]D/H-SE I^h>H{&d$:#Dc<> "#() d{WxW/o!_$dx3<2`~װ$ eЛD^XN>Q݆&WfVG 8g| ׿Tت/֮?1fHʻ3m/֥b(1*{9ufax>~Fg1sݖoa:Ḧ́ RK85 )u6gb h [uPtaT)Ԡu^$pPXdqMbrUKx{))LX_۩hϫPYS{-y=Oґa(мF?4&'vK]獄Wj;b PFUTy$֋g O3j r-}/kBFD=SxqXw<&!>p̱ȠHtu;B({=YxO.ު'v“ }zuےh7 -^=U%=k]Z0˫pb b`ZL}/I5<ۋr*cd mn8@E8pD#|Z0RD1qc1~[._ag&V5vD @߸B?g_U2DT0P^m! ݺ!nT;x\PUp2ela) E!EiHkr9@g65Oy{( ,e{/R)nja_wOUX#uz,r425`j9[ `ctvd1.yQfǨv^XOO`ٿ!𜳑<|o~8B(ɘ[Ϯ-Uv"D| wJKح3o.@Vz D/0%ǖ}/Y u(dT@Q}Dy''e|ꀘAiψZS_- c{k6yx=ݖT;,鏫T9i1O eGW>#jm$\Bw|ީ.my;L@bѡU8⼁f播0ؤ||vfL.v1Q=֑#^9H])aXB9Rz.[qfHʁyjCsAUgfdy-1>#UWQP]}^\Fzl}BJ74cW 'qf& xLu"qbع|0f3  0R&wzW#$ #Yy j *_#E*bT UͤyD^^ImrWֽOج$?+lyh R3OnMD(٘!q!/c>&9Kh1Vtc( fidt*t 3Ud.YdpA^(^]Z#y쥏M1⪿4K9}ЖyQn`Sxk8NL.ZQI ga@N)hAW 罼kR5N*s[t0@ Nq,Y!22  Չ*P@ӣ:7? %D6qÕɾhx=zpsQl>>nS-]%as !V@4-dGD I#%ڬ%1MG17 pk9rCʳxpPN;(O,c5a)vrCخ.ֲ>c/rm'쎽bYG"@]Wsp-)r7XԵP҈6Z! 84q(o6t`H.:dxVS[ 9_HdPp=ث.٬/, qd)-;<b24gwD<6*1$,ܬ˸T2+`L1VݶȖ꣬ r䆼I_EkX)e?v?5؄ZoXSցe[4?}ZG]{І;k-9'"~ע-dSIʛ@[FoKR=!ѺLd쏛?$p?FdJN8QBk{\EP%"ċ˧~qjT "z{,ާX끝`+.w;}\\LބN,ԏFI]Tr8aV^ΏKƌFN{O8UIxNѿx2AQOme -eAZC?7,xh5%T ҺMW9i;3-a=Umɍp?VB]0KCL+f-jqX?~s&ӸosnyUk 岇Bu_ί˕Yl1奶p،\vn̔ pkj-cI'bqv)B@uo?n=ķ%jfI:OrF ɆS34UG04כx3\}M!͚+0U(/t2W֋uRI|k[;` 6TM|~& JhB].qiJ7eEJ~H&kAcZ0[M#(ZWͪUXn,}f:+>(%m R],ʖXDE!^DŽ)<;Bjq|kee[}Vlnl 6ގ_rqfn|`⣕ִϼ(qn|"cl_ڿAEkp83]f./Ў%)!|Fcf%h=8ps ,71555D dk (w,D˼Ig5A⊫m&A.MmZ޳-[&D7bG+\$ k\oWϞH3;^$"#T7*lVBͭg8+Wg>-A :t,o0tѸHeM\c@Q4HȝFض %'lZ~ ф4L&H oRXx ˌhƀ[X{CF"v˵Fb" p@} y*vJm3A>Z_9u[-,(ۚVOxlit{d#rCao5D&q.o}a箨>v ʗz -^n6):Ƃ[~7O0w]mWs#7Dnnzg0NduFb*1 mG_-b$*=jC-O|*lfJJH.&d4SpA1rogx88;dZ[mc=;70=ðJM*Fy&=A?[-#wDHu22^r $A ȩė~%ئ=&gꀭ]X+@=SB;Vk~69ѾX,/GԌ TW%9Դݛu**g /ު.:u$^i,6b#)ĵXYз5nfˤYbڜx?45 /.pϹKd>u z_h{PLқ"'d+ɕV@ñPho!jsJQ1U0&(lqt`"c F >}SLkQ,<w-ܧD7u5`˖4*ۤ%EO#ٛetܘIoGEz!@6 MezT"WaB) ǻzY[Е'Li#HFb}E]x@!=.z"t:5A ȵOan=e>+*u Dm zHyFT=b(֍ge`0Zk8ǘZ^{1:`o0g y9pn6$2quGmۤswm(YVȭh"s'[f\1àJAٚ0Eʉ,%ͪYKSudn(V$khPROґqE浹7oK.uF9{=uB(uBʋѰ6??Cڐ++b,}!g f"k 1 \a6g#?a/Ҽu8kh^6n$x&pEHNhc)iYNzq}0eIPdJ4LX>7A%syBie0 ≃k%//ѳ4 m.Sܥ;jVC/g LwQQцwMq.(%xf 2])񷗗,\3ecB3wfv:N )ȋ,vX:dI#6IAΒӾ$HHVA'UMȸà7>\ű-,w0'U">S:iu^;LMǾJO.X̩%!W Hڼ'm8+5hNom M(%WrR; [8 [AGr>fqi JJ;OL1z ~p=Ep?cӺ`>krGer_H48SIMK R!3Z#$o<)pO',LFn/f[NdbYCP"'t+2ю # PG~Z|0$ $= 8^Aۙ!l Ttlo\& զ 5@#nWd tNչ3E3mHÙ2MM$mxTԭ K'zֽ"D(}»5S9 .[cQ3],?<YO2~7Y垾eo}p+MzZ3H(#d.RV'wv{n/]k_Qн!,?hB 4Z2=~CX0۩OꙉpGs1s*@r*b}uT43®7`nʧTO&|-imVRѠ^ C@%Os8JW}9N2Ulz &Oi֜Zl0ƵŊ|n␔^xM)/~?獴QpPtluv OovnOR*u5OPtҎ, Eo@?1ɖ mSx-a+ٽY'*J87lIq,I\ƍE>O11灭xbvM kDwDP&dz9m9ҸQ3,"ASDf˸$Zr,dIGԐO4n+[h^f.V yWdؗ* ܉tH_Fwf _l"CzM ˕a6]/$k.N`υ9&'RêV˝k^1|z v MLyQBr]Xl d{H3٬j*xT)(2I͵/jP|Ʈ6cC?>0>莞yB8ـ.m\j4G3 1iC/RaI8FBaerCl97)&lMv[2y.9ȚOΰv$8⼛ThkC`.?@^rRCK%wK Q@Vz^rMR>^5KQs@ŃA H8)9]JhppɸcNFEj{!.jc?.j{AXwhHC>ǂI/ٳ 3[@}E<=f,0ڀ WszZҟB2 lHY-xױ SEiZv0W$Y-U[ Co5*=O]'*-QP&IИ,bz*XgX7D0)k ӄ3mU7 UIɅk4@H U&̮K%iΜ)Y0C*gvT@.Iv1 [-ҵ8N/oAO_A1ωHv#F@p]KRhKod ~x TAЪ˭@e"{L- hͶ Ƹ\[/;55 0` >r*imOH &=`;zYЃ*M eµ@U7ŅImhHN:_xSBEQ7'@B$5.BN0>k_A}t31 AmN1cMzPhMrmڮPk5𺺪+ٛq].ғ|{Av%#=X w֐9L :6['qd-uwK+rpL~ Q IZ7Tk{jN*Jd+_7 m[:R {.!I+*꬐Y(8S_T9mBRM~iEp/Ny5]n p9'ZXc&cͫR (I ;7q+'8 \r 6]iDb wwҶr! Y?*q4'3x"`u{BܱPb> &N Cr`+~Jk|sSD˦ڎU$IȰ<: `Y`Qn (E=9j>vvmknX#e%2QbpBi&%LhT={.HSz~k顁f>=Δ;dҺ'8H˱! e*!o~n;3|pr|5J/ %<ݱaʪA⟖Ɵ)T nQ\cY jZeK朴GZKʡmC_~85_>}\Qp# a`d7aw6 q"&տ"6G8 Xn VoDCI{%MX['$˴xF'^ =>Kõni݆qʕk#XHx4υm*QzYACF n[xo>iqN}8F4?^ BKCtfaK6 <Q}2%.#W ^ۊyP+D]]q2gaT,Wo,gJc%'/K;R`oV*C, }SmJx˛;<c}G`eA{Ssa;p.FvS#MqfiEǯ( ,kja]k"؎\ v;-B c?gؔbj^mղ]rh8G(B: l[V ~W:(S1GU"p$s}P8d}|[Z뭩 [O#Iywp0:y<1/!X ymyM*4Efh P<Y#\F?[St(3[)-*t %=w8j1I5',)&3Nj^q@3ZI!'yz?0Pv BIZR8U^, jtjq/GĠ}NOxZpGZ3y+klA v ތ͹P$H6e֢3JھUy~-ԋxo ]'flh7bgH]mU[kOFir WرoYx^D4\ rZb~-6K1xkE45h AmScCţ1K**v/ƓGL4 @(Q:Bv=jC͋얾z-% P_`yzvM yRb!t+\1D}=bLk\ ^؜@n|#JErARP*]GSM1MWY22&E77? }BG)2}*pa4@~k6;_ N (9h0pB5% q 9B FUT'L\I6Y^(G=Gn9{jˈ!ɺz֒htsI?aҲtTǁ;Gx]cCZioN^ּuP {:7-4~} ꉠY _7dchuaƠ2j _7K݀HPqNpRCA(jT5`&`|*ҒEWB@^ 6xP,WTK:,殔ʷneG$OH4ޠԥ4{?Lwҭ{ 3$]蓃i)ӘHo$|2,_aH=l/#1{rj="}>\!(4>7Dy6(YQ!8O?{c& uخ>[v!e3@ŊMꚶGCU"㢈)ő+( [YE=2yŒϊ4Mmbv;0.-gCҰ9EYGj%*Xr %jMuMi IGV ꡔEePm׮k ):!2t}FymSA_#<_a/xrwUV#..lىB50<qYx?i0ljS&J ,AC{۬!03g#O|:$ M 1֌< Cߩ21>HO~G6{b,^?ʳ~y8pH׽^5h-p&BFժSm]Y>*t!{Z.V0,fx&^բ2X-U l_%CĚ5@O8Tqd1.7mzNA5цy,:l3VGR~f^\Ä092Ty<l`}Gf)WD UuKLÙ$ӀQ K?A; Xq2Bo~T;?Ja`@F 5!?TƏzP{^Nu0r %5oyi) I9!&K~̀o?"S;Mπ7-@I,ҹ/ Ơ©HҬGuoq=c4ъ&i*z4d%!_("_s A/5?> AqE"e3%ݡw+pP-#6cFLR;>W!SO ÚG({ɓl9'93'0tb},.OΡ j^Ó ڇ1JS vCRxu-"_<0m|ԇ?;ۘOk,;n@4Cl /_qkԕ f|6 M l=leJFE#hɇ8f͂1Iu,!xp- qZ+Љ[%+L+O͌޴V\(qO8ow8PɷߴG%\ȥ494}tVB+%`8:=qڙ[{ (Jz`7fJI7ezdchN3tb#eq;ai;j vl׌cT6lR̐8& ;D ZY\1ѩϷ,oI}94tWyw4,AY AL/é}6#yh؆oEH!{[ުʮsMUҁ5KB"2EZC 0نaQFcOp[}/;:vV7I*`ze7MlROt1 \GA$%7iFxJ>&jTixi4?lFB+ b xJ2lb|&\Y[#V90[aX֠In) /- aSMD#1C$O3Pn