sssd-ad-2.5.2-2.el8 >  A aAU]+c$sM*@KGZ+vL/J19Dݯ,#F)CYO˘?[ty5px0d-15mTMg{jYA'ay]>ȞK16^eP1s,CFbo9m+iuv ʾ6عg~?gŲխˡ.S_/ڦyv\?6Rq{-[4,PO3| &RYHWȹN&j3{Ɗ?K"M+`FZ/'IŇ*GvY67X#)TB'HO=MsA2R 6DBRʑx2L9Tҕ%WMjt~ռAB$^cRH896564076f86261719677aeda67f8575ab1199bafd48e362bafd4fcde7d07ed49d657c131407066a43ddce15bce742b8f040d5d4&aAU]-#[ƋZBJf)?sBs+`_)?Lh$C$;|=\cSZsTF8* nG򀪛QF[71t-d{TPsNשP@a/ՠ+]\iI^yX?V[R`8dUMPx53!51]68JO "~פh\1\N~9;8kac@'%z9cĊg:7miklwb\T .KH=_@޾MLT|YclϦu"fLܨ;K|u0T$*CzkHXr\>pEn?nd   2 3PV`         |    D  BB B t x }( 8 9:bGf( HfX If XfYf\f ]f ^g bhdieifiliti uj vjHwl xl ym$JnLnPnandnlnnnnnCsssd-ad2.5.22.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.appc64le-01.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxppc64le&'CK8=OAAAA큤aaaaaa.a.a`aaa02f27be51eef01cb612f1827cfe73b5e1fb1c59108671fb28d6019f0b7192d1920cab72d365e6387e928243bb3daa7d0f4847eaa29a9b2ebfdc0cdb1d61d01e78ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9031a33d73692b2ba7ed1ef7c2c2ecb44c059f092d23bf5464a7533bc8671272fa93dadf7a75e53c09599f603834565a95390be3daf5aa72b9ca79804fd0c61b5f48b8614a0cdb413a578df1335045bd9393c110e90e0e5f22a9530bc2c80a8dab5../../../../usr/libexec/sssd/gpo_child../../../../usr/lib64/sssd/libsss_ad.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.5.2-2.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libglib-2.0.so.0()(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.6)(64bit)libndr.so.1(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.5.2-2.el82.5.2-2.el83.0.4-14.6.0-14.0-15.2-14.14.5-2.el82.5.2-2.el82.5.2-2.el82.5.2-2.el8sssd1.10.0-8.beta24.14.3a@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.2-2.el82.5.2-2.el8 .build-id7c2d0748956c29ab9fba633c09864d887792b962c9aa2b66de052e7f53b36f5dbcba4f5f802ad739libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/7c//usr/lib/.build-id/c9//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c9aa2b66de052e7f53b36f5dbcba4f5f802ad739, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=7c2d0748956c29ab9fba633c09864d887792b962, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)55PRRR8R RRRRR RR5R/R#RRRRR"R1RRR)R0RRR RR2R!RRRR$R6R RR RR RR'R+RR*R7R4RR,R3R.RR/ةSD p@1Ӊ1uтhe1 beUiq&3;{g$6ł9Jm3w9rZgJKM&*CO*~gvd_=հ8E>EY̸ڛb 85MS_PΔ 8VOC"N1WWn0!Dҩ%>N> 03I8KC 4Zy[Mʌo&0NV$ V]!ۺB,a!Uq2j6'"K. fN鮻:Лv}k3 w\C%`t'f>cJOqO%1پ:fXҟVWƑַgyc/d9V[ؗk. Q<:&`_7mWG@m J7(GwU!=XTg7<^H,#2]ndXtqaf̗b 34Qةxx"2O3G[PM#n9|tYcet}nVBNmwsVCb5BP-W2젺O\Ox&K`E:5U*z`.1iRE*!p<:+3<+[]:n9U$_hi% e>q bYrfX+D;ѳ9+xm:" -8T0㼁~L"`5NjeQ||h X^7/&q$X[vMt~5T|w_{EBIwM˂P/8(^a7DiAv+9Vj~| qhW}^Ns-t)4q׎mkRs"k 6~[Bƙ-M5c6b*c٘紒t b}CC ،t$Z;_\uda^.NJڼ>>oRw\O7=ͤJcv=|S5QemsA\ C  aVc /2+E%g6'M;[0|&p]$^-Hxi"'4eovx&.({tAY Yfd>ʳ2M`>J{^*Q8Rw04x@$ly0A.QĀ`N^WӰLBbQ${3d@%rM w3d{wԃAsCG%ܭR ATәz}R~8#(lc]-,p3;$ [i HE )™AO^ͩCԮs&TSv nZΒ$xNKb ׋UKnyIGZ$DqbWʰ-O/ud {:;ώ)~,h! K۸գ#pPj3]$WՀO'V(D-phJDvȏINKl&y8 N ,A"=rK? D\ׄjP6%ł "=e:_:5w ing30գ~8 !k灒~|'"9a$ F9^* G-9PM"N^y T-)]3F$E!Ź,:V\wt:Iضzm~C08)5{nKi25//3]SV'W4!*ÜmNg驶 jb ۹,?QhG_;ZTx;]]OD ͔6zzxmT`.Q]V#^wjբvoP7 |F Of7*T:m$R0#l5hzM8UsֈJ́:C?Żd&. ?;AXʷַދ/v5v _L"#[|T-SE); Cu1R:黚׉3}fzt 0G,9&E2/LKXPM(pȷП<ݶ '_Y b :LE1Ydhq;*\Лj A}J %E Ce(eE*3Ektl>)b_oW^TddT'J:%˓7'0- a!۴0\l$ҫ@茧䬒fR"Ԋ+F[D;i̻]J|7փTz{ tYFğM_J+r1cA.p,݋W*[ _AG}EI%cEqkJ;5qbTЃeH7NU L$:҄rk8Tk_SXnZȶ JtTv* `VU[4H<其WA@6V4A_is 6:J;E/ءY*Ad+ߦ1k_ȥ2^c6"<Pp =@e >ʶJA?eI<:KGO1zK寮;|NB1~Kɂ pfRv^#ԚTɦ$lk؅ qT3úǦWN ŠD _nx *m^"r!:̔_[rв؏\DTRM`40?De{Dg*sEO&:ƏG~{2^0C҂\k26Yd]}r 0l*pQ]tFkR{nqFjLN,))e~NZl!Y:a]VĦWqtJYU Z d[j@W̦i-#~ ↣3b]!m]ScLzAŢ)$c 9:,C ܨr1c*ǍM-bp';G#o( V <\x9 HKK0>ÔzrX⚾.H<2r\)'l[RS]Xu0j  ^hYGtkĈfDݶ&cDĮgvmoȧ/X,1dL7Eh5Ƶ艹6 J]mXT g$v.ֿ^#XdcڏnMbuĐE^FUv\R g .db.qw! Rv7,v MP Y΍M= 4elWVOIRZ/0{y\[~-O)zX`P,BU}IDՕGwelM܉֞";% dOzS_zຨrع-Fx ԃJ\VG\r*nXu"O.ۜGɥND_x5[!쵣"p6ؾ+ϕ1=†DT ZO| LĨv%?J R>/VPI[~n UJ@E&൲~mDPSQw- 4KI*%&u׊vHU%mݑܹF [KAZ?*T5U3ug"a' Q`"\\L+Wzg̈ոߏ+!khã߇/Ӳ^Al/'f?+Xڙ7s9 l;dlTCա7?J枥 |bȎR*},%p3OPKt9Jmceaڌ TٽAQ|)Q@:)@DYc4/> E(V`SxZ,>B[Y?ᴘd2\]3hᏝؕj[ǖOݣ}\_n'N.zD5 p7dPM@x h`fۈ* v3]"z[ܟS T"I}{%ɼZpz(˻a(p*4u\4vʐ_|X`@F)h\S\CVF͖\xB_˜jBulA ;a,d)!bk!9JtǺ4-k$@R 1?hM 뉝U=~~n*!ES18i LCu͹è/b9sn9ŅTt-/(U.h4ɰfB>Ssb+DZ[= 턶*M hEM#?vD;j 6vF}' i5]_!No3~Ǟ e#Ņnw%F\2 _4$# G]eQj9"ϫݢgSV_PL YH"Sr~5*q+A<-oĪ $1X)6# :H}'ITphjSǞjx Y9UZf!26A6.ys^Y~!qK?\ebAz~~ATy81"g 26STyθ%`$`W*^OeoI|jyEGwy]3 ?ClIfޅRm6UmghNXt;ehesii2v'7{BH=lfŃhUV_(hU: %Jh(>}oF@tR[ձa|Yw3ZnpORw$iz%bȊUSO1&; R1ΰ/\”vTOF;~ߟhivO),F@WW,1PYE\Xd3CB`j0d9H`o4}YU|ae{NU/qpn6F֐M^^$=z;v|,i۞gBt=2ϡ*jˊ IB>Fp#un5\ AN@MwCRº% ϩ͙Cм1ij;,* vGF^ nVRpe[5\d^:K׆AI9'9qACqcN  Ox;΍Y/6x( 8)炟 ¹\,P IqWdᛋt)N4Vx1bs >)лr#B@Ē*E8J!o;P4D%SڱPjk!]+Mb0uE)X>7YrNlm 5~YP'F̋E4K\wȨr].P3Sbuҵ0;g50Yg"(8yE9tMLKD!]C.}k$ ``/X[=>9id?k [stc:N6$&$Mw Cj`WTx<}g.ⰡrYie}}y #) B|RzF +d hVXzo ZUs!pZe"'ZG,;V&wvY *nIZjHHB!"j=e?w<ư!P@?:p^AS$;P^TzڥȼoT9 ی A{7a{Ov}:-a0/PO@\;8j.73E6VX_E܈}j2Dw}?2Z-irr.^vF6llwL7 t>$'Md>mnh=߷[%6w@R9E.\ N޸VAp4$Ѳd4b]9ȳ d};G@sd"I02`Br'8dF/u ´l}ȣ|}iO ]ot2%_{CQ!'E1ȉ GG3݅"g _9=MO|XS3|}ьXwFQ|!??d ;ahБT6m۩t];&NZ@8rl28pwY2(/)B U_9)ܤ. .b{asNx{@sF H$\kC Wvx 7F>ƌabVD5?`'{!R ͡0FY$-mܘ@kƻZ*l!|~@T-,Pf+Xйp$wMzQ)ld/}[J\5[(<ӫ"QKcr 7&ˈyi=bC^$]oޜgHS^^N؈0Yo iM h]m78En aBĥ5x.8wqⴘ59O{E'\cpm)Щ輀f?(%U/c->#L LGp>\d)CK%Y&z&q;fX("zvE7=9ʨ-a̍?fXc&fZܙ~?ϟ96 :B u*נ)\qA_'8Hn`zfyOj÷m~4E~'51TA),zNK|"y4b}\T̑$G'C:aғv0/n'<Unfy cQbG ^Ded!M3 ^4t7z6 ʚ7m|tWu+[*yYv`szg=uGζ D x) Έ+Yqw蹛r!+ zلf+i7-*ztc؟PLm`J5,pҕHg`Q}pN%F7"ޒtSg&8iUƅCnQ d)1k؀_ p-'i8]9QlVzHCDA2KRdCD`9vH.q-Gu)6B_+Ҋ 4c\@Čv_wl\[P Vf><t ~m=bUGUQ+R7YyOt,GH 3h=lmJ Џ&X,xmCt$B.yY{Nԋ'ܛ N|jr * Wf2L,+`}C/BņIAU'S2o_;a#>50܃ZMVHO(˩ m)"+<S9gb If]@Ĉews7ǝ6(w澍1 `QyOXB $Ǿ)tң 4`ZxzvGiPN}MZP,i"!r읩\9ӯ{.mC;ӛ*  k*[PZ/'OF' O 8iq򩊮?B^Iϋk@L 1o.?zu\kycq׹Y> SPh`N,oH;H.=tɽ9isfθu|>#6űeG yCg-,.**BF(hD yQ1[b@μaƇ}Mc!LE?ঀbia.VSw!Sd]'' `RQl pOboέG/@RdF}:׮ =k/Bl0zܲokՂ-u8'rUt?H16?P %ⶉtC,\%rTQ\@w!GnTdg]0bFJIJeYĒƓ"ROz=O 'D|(Y @r b'%VQ"߬^Z?9%Ѽ‡>^hRMĜBT=Iwd7`_ ^M "r3_k4g=,xPםB`GrL}J-%\LF-@3~wq7KыΒyMf.~eiLj{f<.-Ifa*[s 8JnqrTKf(1(~DbMT&voaOqyl(5XPsu eԥa+hK~eE8fe˖DVW"XTDѿFuS:Q]%]Te%Om QC2iBb9?*BBkU-5Cr=kp@Cj|].Q¸O2G0| hw-PBW<_ݶ /]>eݼuK~6/ $*S6IL7o5i-Ys5Cwi9&u\TKr(ҩy/e\@B;15lwu]mH㔴|- []WkpXU2Z&#E9~DDKs[RӻD>G"B_%ߍ^+,"w1o2=sߺZflɄ2LQb߈d ɴI[pԱ `B\(ʧNE2rIa& {yÙbILS:+)4ڂao'|_ oaaָHJؒ[f-UU ,skq;Nse@^&advi`uחEfofMb9joS/a.σMqJ9TwDckLd+1#$#1^bVvR}A3N qKw ,k,`Ҩb]2]) Kc\`GyXw-1QEzAd6 >}u~m5s &TOf4@p V')HL<ш鹈p#+ty$3r~r /bOIqqg0M_!,ՂQ,Qզ6K@^S^#L8>y1 p M{ըAh$r= }Z9T!5 A}//y3ʴ^Q-gu?ҹ7{uKڬAvv4I i14~+'Z[r:T#lp63=7ұ߀o*OHwiDFp .<VxS{Y0a~[z u=U0D=X-Pmk`+ekB'jPcPdI..89i^߭-p[|K.K?l eRH'ʆk-#S"cmLVn7vA7wxMꎮTɥe_x4}:$oQ,8k Ow`v)yɩ܀QAh%4Uh vKA {Z;Hc' z5)cAVXB[۵ڥiY$7Dq &M؛ p֕ ڰ#jˊd3ڞIй<=c6 _KtkBt~C;{4[n^DojQX'Ǖ@ꇿm E'ҭx,\wn 7ЩYF0'UڣZz8{rʸ|yy}I0,;5+-_BGEgiL zf-|GbF r%F,A*bE!q}e(mZ=]o_tt)Thg|TbVtt*Qkx3Jkrچ}Spld/ 7 ;!ލcYu^_#K4ׂ'$xԠ!2&{怏>{|O`/Kpsw8Za{O"ugZ I\A>RU?-O //1C8nw䍷H#yF%gQT㱐x$[lUX(̮'X5PVB`@!PS۽`L+J}'O]?[ *־LL,MKu1o0N:Yc rآg)Bjq4u8͙B12sStijE -"Io%^Q*zSZ$%L@;8t(0m&}8ѕI;~՜: v"g2jT($5k#Eorٗ{u-p~K&-s%$1ZTiDj;nHQ<ȏD9ϒ|,4dr/Z],:_r"e&nxZtVLQ$dŒ7," Y3n'a(OdB+pUӪby잟wyFIɃ1ˊCrͱ73|+x_L|@}a\`*^:J~EI Yk]{ֱzHɧ, ;$gZvYV.%[7j=VC͚& xc,b.UvwG&K<+ [Xt3uAQC ]ыt5o[bnEϖݚ{K *gz꺕z ʏL:s d1ScE>B )WlQ, kY%@=qmS5.KةT=^SQ5)!]n|csҨw{c]||υú2GKwAƃ0jmwPܥݿ=Kejrnqr2bJM??ТtFȡg{B5b-ڥxWisrLBxO헜yo̐isO9( _IF _G+N9NJ+ʰ1r \sI=1B3BB4#VfLcJNAG!avun3ƪQM'ǘ^)yyJzܡDD[;tչajg櫂SyϣQ9KAOե`a@vzMu~z+sFt%Kp%8%2ZCM1ά򘌢2Hٕ/}$ D49Lfa:R^M|DnM@OiXU <U,#{i/h⵼3]AZX Ⱥ z򾲉Rj؈ &N4(MCH\'QG e󊢪v7:5eM2\`t`4Ȗ),L5:Th#"$/n*ID6*Uµ @qݞ'u\E^B}M.:ᘿ=]K?m[ #'ቶJ-@rGF%|<[ȜaXw`Đycy #e u>@Fv!)*R bhu"yvNVF5l=T24=5'5yoе^좻QbΆ׵*f899_A^Ѭ{eO/؍QKΪ\d:+°uMZL\^PP irP=Ͱ}7Zi\IQE#DčGpCIL]ʐp}*ȹ;G1)b^G !O( m8Iz S?ƥk 6p qV: i됄UO65蒤oS\̅s=ܝDie2 Fel5pTp S|l;85 $P5,` ?l%l<;-ti[pGs9;PRr‘k*ꇳS0A#k9Ydf:lT%bqzWK,:Ft,p }w~:kS1",2oWInaWE_ ,5}\Qbjww&4[&n#\IDRsB>Hv0qXgD|liz7w? {^L]ԙݪu8:Ix60PA TBf!<=UPZ 4M<" ma]/P7sEOQFltY똭͡HX 4Pl`U d{+ I}{Q.6kLwk䛋?V)}%FC,?~̭W0j}n!pZ*o-͂ FqDfӟsW"2{)/rk!>8eLgS! G+r@&Jqd1l/`?;8}@VmSWPF".߰Wcwl@nz^lPR J5f̾3b|AVVク>V鵏(&1n*qtvL ~剃C+(Љ1 eiDm_)OU7PO5,fr~c)DޛU[-/ۅQm0ݲg)ŭ0 hjn~Y -H>T~%6].}&m5 a[3Dʟ7sQ=3;5&Op)H1{3ȡ !TARDN wytHS%;=HLT+rKSX^ʘ9fQVT6ג0 he+ iIʙ>WȀ?'Wm~LlY.4:?ź{kfMU|[Ze;%}Ɯv @D ΍js]5wOEOGFe.o6U޺qTbfX%XXyP'kW_FXh8LR26V&Tqh+Gm)[4mWy/뇏SNޑL=1Y%Y=@sQn* ڌ{w0UaDu1F$q y-i4$Sڡʮe7Z%eLal|S`}@VȣSW}3S;M 6\Rq6P5ew})9OayޱS')I,IY5&$/m%RRY􋭂A'p5z`cSkn:CJ3$aZۛ'Iё}BB8?_=u0nu~%(GL9<5[-/lI&aQhß=yE}Ҕm:!S 2C0z[ G>*:oC"y?sBR0j\K cj5" XD v}J7{0kG Ժ4x|*O‹fIBEUi5~Ƒ< ~Hj'PjZAz6MVVȜ+,HQ-V}񧁟>Mc גs*uIQᗷz\ӬP0a3 iD׿{vN;1yl]?5K欆g`o<.bpksXg{ŇXXBacR}w(0}W5(!И.B6a|´)!nxA+{^3f19;XdҠ?aOa'XcvnvMt,"ӱ߀Ve-ІYx}Ҹf~PۛCX,HmV.QII*^0NZY?kCžOߤGu: \F8bFH #)195El(<O[dsQ-e' DVX佔 < SL_6ʟ@dۋX45Q34:4LG[!J#e5I+dMk\4uOL~?_L,@`ţE^Cywy(&Et>92(~޿I=@ɾ;vU-V* J+(^a[ɛIzS"^=7nn<)"]*LI48gӋn,Dk+2 O'Ã%Yv3FuVFpb(})v akx$f:ԉ0"ǰ*K,9N/TH|uu xR;]hE0H!Xg_ %PgDRǨ[[#fY::-4ֳ CRAp+alsU#1Pj0ġzF%`1?mWLx m |g dJJ#6 m֕ݱ(9pGB./vNKjH*s#9F*dNoZ]D%FFWdxƲ Pjbjiy˥iO)> {TL.̪(a2H9GNב] &q̒RV4p>n>W&v|7-_ZK{A.en(osG 3֬T@POJ|7=j_˕CqJd9-B`1jc!"R}4]QXWxQɆƿyk{V#hnHoǟzm'&$VӸ}f=c!WHf4րsX@nk>OV6CR͋ )s@rz?\IxE:(fOԪ^.kZ$PtKQ']{V1ר[ƈ[ZJAͮ2C*1p!׬R5BqTw7fX'P-dꦷf"=Kef~ nY' 9܊jnUɤPs|0vKd {AjzogTk.7EB$҄]Ea2 ^g8"WfF(S/7sˆpe)Tq~ai}j yg!;m̂d)tg1GqwZ>XKϗW;6vndvV-e亮A c/~6:h crCrJ,N] 3T5찙ePˊPMRTL*]JyJ`3Zݸ)8 yߐ,v*ix[meb yL/7=?VFC1(9 8O!W^=hFioS os]ߖw}o*R8aY\t1H!fzmMXf)v3;u#WYSBí2o(+KYBPIͣu #W&c݇I_?G|Ӏ GoC ;l}Yzvʈ")9IBW8`pj7h{TlW;<}z~IPϩƉk Ms  0z'^ֶ Gyf.,ܐs^ϭ8Ԕgi9Cz{7vm{۱%zkcIuV#tX;w#B`q˜m7o;U \* Kݱ/#{V?/yV;k+2.r/\ *@Ve.,7'FS$lN͏ B# 0O)x+z+LT2MWI碤n lws"JlnP᧣[ F!oWЂ^/IQ8 Vewa לBqL+qi{VbxiއȻueoMCZu.[yVśH.:>b'/YXCqg~v'&&VQHL.uo(LZ25Yxpez=C/I4:5Hw2خQY]/mԘM'&ŋEVl8 Yˬ0'mD "A3Q2V/~mW G>61/`Kc]+!MiwMg%3HU.7EYؾ qZ5mHyg; T>Tqh)…LdaOa02| T. Wh) '6~26rJ8]l_ Z7 ¹m>xddd0f{>TV.s f>ю>'w6>g?uQmF=/"QX\5+E ?g ]09#U=ba0}P4AZI$Yȿ7ݻU/ް3s2IӴ8/watxW;KM:63G䃛eGjkWj(aVa%UYqMRUX9x2qڊRliÀ }#I]"U.M2@g OGY."YMVBP5ǿpkl(W.e6YI[aHnTQtbԙs'@=qU N9x+Ѿ,I~ͫ<UEsI6ב"ߔoGTMKJ^m;nqX/h6osqz*6'Y]Xo%FB lPB\0pu/xLdᣴ 1坒stnpˮ eTEz1|1khpsOبxK<_`ZTr>KW~?}׈fL/PEE߄AO{ kzqIUR;}9ߔec˜M:RKBʇ V $ bMybܹ㶶:tƞn6t_w` ^ORϚ3}3@,:ay+Hh6[a6wТP;IRA]J&yyyatXc9LJLŔu]dn8LpoLv&!195 q&Rт9x`,vGC+ ,WVUZtNpB!1f)V~$ # 6#(}T#"wlOsi!9-%K`>wWy<&/ڞC6tk{6bk)bI_(Qr]_;oD>ĸf6Co` rRzAOk ~S G]˕Qh?я4H\<9FNyl~ eA-UZk݂?=PlB.249hFU{edtch0lq>XT'}QU?pxh֓ʣ!tZ7UA%!4jim!4B3vyH%m#̓ޑ'ҋEWۀSgbt$rqoʣ9ojc쎶R52~`ʹ7 v.YLj<2Jc߭tG{jw_aׄw띑3$&L VN5&~6 l=?%O `{i񠏄i>m;^c+aeFPFa Dm\_Ч-pCYӝ4B%_F^qe} \suQDsRpd>ǧtG2 "G_Z-jrnyUG lyp!IM̃b ?IuhK:zWAxւAS%ŕ]zz֊OC`E?g2E7jLU~]eH.?ra؟Q8/44DJՈ/l0?\ĄQ_Ej=ӝDeǵ{'[5.>S/Cns _F(k'FYAM K Nܼإ1ħ$E:c~MF澂%9&V (H}-%s}pL?kx t9YiVQ,gJGM4&CXƾ|ZAn|:[>xEeo`f6*3 Ӿy_B?W䘛e.&+g$JzUdgXwY}Pd\k' &ngu641ٖF^Z!|}V`hv;U*='y+cp5UUhL¤c6뻋<\&&aVa"֞[Q+2)vJ6iYW?+CP7`"b7Ov펖|*Wxꭓ(#Ԥ)E^HL-5KUQ?cC)@*uߟ"ѢINilLUN5e q*mԆ^"ɬqzTGSʞUlŃ}&˨/+c"I46#< yRN{,v.bYOS{/X$~g#lP h7nMDշdixtal|4ꟽ<.zz)eE~8Z *+oqڏ)4P=K*^|2JuLr!wL-) m e{EPy>e(RszA)`qڼ,,kT7'W]n2pqI·JGˑ!3M%* "\dcZudnTE?kڗj%<׀T;&QVqӛ6s;AqٺZ@Wqc:߉Q"ٛb*󼠼UZe5cMM'w63kG'(Tz6=Z&~st828)2 ~ԯ1 蝇aH'SZml^ &)"~$pAGݨ|l8>ɐCgμ)s;qV /(^!{LӖJϽo+˲9df8QA9T!c?"y_')ꓛZ);W]μ:MPc%B3ORF]"֔S"dǙ4' %?^aihE s{ k/4u C}lD9=\J\Pe/Sw>|*ѭxTsd#E mb4hgWSx̢r.Y#{}.|41]o(3IW JE3CBrҺ±0Wf`: GX^%B"1I_IAŦWΟxٯ84?MfT(8޼j,]$ =s^5s%.l/ %?5K \ 3( Z3Mv/<#X Kd+bYi k.7T3zgp hlD ~aIJJ)W#ThTs̨ &")Ep0p fb8F|ljg.E7huuUrJ)A7HLV"`.CJ~Իl7{ c^7Shc!Q,NQdzYj|鐎Dj-;TDEQ/i!{H cGc`ZuP?4iY=:LX8zX`F/rmhmgh|VZl'gEqV?=59E&=AgD!A+w׵0R_} Ji^h9Ç, Z?H"'hڳwhX=:қ5 J d㢍$T%~w(PBԔZdނrBM/Fw⪠V5bubbkyv,,_8i?%p1&^@s2m@>ڮr2ac3 쩶hf7u [1r :P;e.hZQkQ JhJr=k~=˖9V`&lҝ5^7fVBj]X=MN=DL9>tTY'vmriy…"yRp7>rrB4۔P7 Y6@eڲEnwjدՄ,I~)G٨_ĽhehMw@>UJ%Id[;.Hu(Ru0-f Nn`*F͋*;-R; xHwa [ǫGˬ}V,qz j) "bQ9 W]ŀL 6}[ȟ7w6M3dܣЩXh[n [OKK} OոCqtw¿ANE:ڵUL*|S^حVԨH6Hdu=P]`(o]u$6Xu{7ZmO/~Ge{o_խV8n!Jwװ gj/~u%oFJƹRB[\5cuAx9r_r!<#5 1DPwNЯ?[:Cv4ÝUoeq{8SDQ([]-4iC䉰KxHo3PޅK@UJ$H+/Y:dKMsPc,׆ Ih.h䨑mטq=9d᠛|T=B*vq.\ZAAks/zN5''P]jI0ǴG 7Fh+3C5M㙤Jzj'CbX?*vW5\o`ֵT(B+x $twVAi'/;|@ ao'O`sKmde?\PU+ ӁmvL y[!_}x9aco v/.T: Su58+nq>uא^>/5G5uʡ<`SvG d?  [S.3xis |BNBS sdo1F&pm,,Vr'8s@b" (meZQ tTذ(U?[|Dyj& of~ZF @5*4vI RvהD ! v oSh'>N D  ӪH}U^aڞd wY@Y z榍26HYrǢo9^쌧q<h ia;-\6-@‘W8HzmX."G m|CQ;{{`goQ_G*8#v̱i%oƒ>ZT#|B}nmkx{Oח bYrԦͺ:@p{[N;ENH=2#{.g 3󱠵rI%sF?8Ő0]KUOּhIJvm6^y7Ƞ e8 Ed363}I}E5" V~3"8 L.h@.\,c.饞H1SV quZfQ"L'_lF7pqd^boߨ0ѳ 4ѝ@0 HCC+p.?|ڻٞL[Z r;%WjqѥCjVYvN;ppTSX.jZ* 7׍2mW|}ɹk&Sܢ?ٚ|`^y m/, QJE5%N&ǽ(H̬Q&Cq`á %u/@]ddjexF2Il6co0fJv`ᆙi(/1W2CrHrN]6,`\LVK_sX0v81Bњ\C`7y^>IUIspEdhuJ@iU{B|@RS…=o`{?ЂT >LCFdk8AۯzmK95 [q!G14(؃n;D/5&ܣ@Nj4H |<~Žc٦?@%L`[埬QhFb!C/ls˜vPۤwi~5qC/B +P$P{1^jTC;~ NoF8P\ ҥr݇ujk<59Nb̿_w$A V8ED*Z%gF 6T+$ H 0lƜ!+&n0C"G> sV:mD H='nwL)3)K$." B c:XF)$zZBA～ 'I-{f5pF?g)_thk+KJTw6cC߽ {c%jaM)=ɺIKȨPsuؿc| LMwa88ApBj5F'ϭ 鄵z^k6|wyUzK !G-==4d gCJZM8ǣkH]M22DO.a#rLq&~{[`9H7+z%Ҩvߥ29u5 55ǬIB|;ޱM'B3#ewIVSc|m$pp 2$&ihseN^ÚId3_U98)Y4MA"Ү+tU9j2<|s:8fw.kb1(ֽ64{}~O)e!o~m s8J_Es@r M:?cTp 5"΍`0N-R+ECim d D;៟@uQbtR֌?rŐ p"mnޝ$Uxj26*k}J ^N2]k]UslL7^7'?r˜*vjI&#hk09Kc2,SirPUI w";lxT7y Tp3Ssa>$Gwm/7 ʵZPGsO*Y1aF.[*J0;Ԙ/^?Q-l!ǏAR/!Nvw l!DY(*<7PC9S"4"J FٍVjϹdpp#VV;{UpWəIv">6q[\g ǂ{u[~Xvv|2{0odt[+LmW?v=ڀYо0tF9Wݖ k"ۍ꾭i{S%9x0VJj F8 1pGpc+ YXY6MkBI 0L{]NٳȧԴ Kw+fld$?o†,ڮ qk?2Zp1SR2Jy,LwW Pul{*jl<,'+*ݑ$MTw.+, Lbci2\ UX?fˆQYq*'J}e>R%¨Z8lq+i:"͜hh:hEL]08*#Oh7D:UQ(8<=/l~~lȅR# L3OAˆ92C !=_A%h*2۟L BF=?TG! ZBbONtN1(|uʇOE|AJ즤-4KXoMo`<Ќ>I=#-IH_N 6MWL=V8 \!{R"[`w@.e_4 GKuY ) 0! ;=ŝO }ZOL$Ĩ@Z{"V+~%QhC v/J$vN۶ΆJ(*}{dwmS,|]Ճ"gB !uV֕19KJܟMf} ʲJ1t /YqM"NDHӳXǷ <.2"VcjwU~6]̚mK~_Qai2'q_f>|ve# D9AgŲ;ߥ͂?e8Zz Mڻ^]U4!{Dj (0OŸʰrg-$?"ANh,vqI oV.!eb@l|bHT[w6 J{:YnI=` D_R=^'8&B,6qv|Q*2=aOUu8~wi r%<&Zh"ɇqVׇ6YTX4wY:Ɗ/yw \ K Iڋ$nW8s&8z'. n)&>Y <ޓ Hz]W^5gjGpk_:jw'==zקRt_V%!qL>rCiڻfd]`.cZ:OyL1'bTz6%.=>O{WNw|p.R ѷ95`QVZ.5a3iYM 2Nym6*Rt TO-3=(wR"{,¾yJB.&, %TšcU{{/: ߋt/^ƻY$Ǒ׎>ox8M}"Dĥ~ *ͼM[ۨA|}L3Y#~r.E>T5lrL4"]>c|̓l6k|6u y:qWm:h|W'piЉAIz-gov;]@LA)K"lʏ_^<=v(Qliz|oY >DoBHWiyh4|f☜;2;|zspM-t.$"{Lwue~ܭ+BGF^w Dw-5} ^Olne4J [~vo[d HSP lm3`(+s'F=S8U@^'4Ƹ)AmzII+*B+-GR7jjM!FSo' 넯^H),߰a5ܐ3@ 0}ãxah^lY2F&~a)'vi` uM)~RF_TT `8 5T?wLkSZhb֏Gێu84y*Yg<2*8=vzX^iq؀B' >wO*p^тsM)GE j̘Ћf XgX^_2ύ0ui[FCn,*7i9 r?t g ZZVc wy4Zj:$g0:#CVƒO4PzyD6d-ym{›$K_'1AS8؎pF]b%U2~06]o2ocjx{-Y p D/B/.ǧю@ze~~kyKU/02:gfH@4hBD2%x|4lZP# )19$y< s^T ВC#S?6ģr HN}!%}{kbK%4fY1WY' 'tŊ HG1I9zkaJBBeR v'# vÁAHZ!0v.$nTۣ}F٤BM^}p9k!5G-8ݩT%GVs&`X*UмAS-`?ڜe\i4i1[: KIF0d1H=dƥk 5zu;+ Voml !9;+Ah S\EyWrR)Rk參{v/ Na`oLωmu__ڝp4g/`fMXPbG8S05(ٶ=]ﴖT Lo>L4r uqs9hnD;EOEۙR ,)}2 V8C]1}=^X{o.ӄ"|ɦ!ͅUׅ~ 6ڞyu އvlȕ -32jD.2 Z`p+U.)0;fAsK(%u\k.ӽ(E2{#MZf{$sx̐Njp혤^,s1I,/GC/ +d#lҭ6aO&hOR__~᎔BvÍUFB$)jbBD ӆXU].+ ښnh^܇D-GD-~ cu7@t?:[sR\ *v墶 4|hB{EՌkO]g'* .3AZxw͓5[I(n]57Bѣ|I@ĶBjDX`%~3KGpOoہŻHt ;lAx ˃p95׉5bgsZ G eX8͞9`<⩄^/z#։3Pr krLjkhOnF#ZG?0#Vكl].IW ?fFԑpNz.=p:jY3!GdlQr{] ,hpͫkc\KlYdݽLʜZZϗ'Ɇ۳BAFDnYx0Lޙ5ꀢ!R\wnNM”fܓG` `+J AP7ҌS(C}*ddz+L5+I|Wa^+ L*?oƤ#NFmYyi[ -sEtNVn՝l悇|Ap#g Ǟ'shݩuԝKVmPD8Fwu3|%@F3\Fy[6@(ZV it!w%#~i(}CR"J( ;Be&7,T*?巓YjX`Tßy?E ᥒD!O\kj(tt~H&vxR?AzSs"+0{yy/:5`I#jmם~+TJ$\xVdvѓh9Ef2Fz}N:c#FR6pII򥳣ѻ*=Imd{zê&xt-@+GwZ2}o`Q\Q JOGQ̎LoWK;%^>@A8j}2)Rwտ)DuMx&4.a]:n+ &5 >ջӫ ;!]%P4}M._ף~ckLeDY;gF`p~XnL(6ȮOLC`A=x S .{Y{2'O)6J {HY1!ZMڽcX6[Ĥ(ekMw Q5Msk.5BA"(wZm9ArEسQ*9a_n/)I"", 9ӋUpػy ;h'ϐԧh%V{KBhR-K4vU.â'B\Dӟ%QQÆZS@Go=/co.NPOD^iΆ@ mq l9ʭcNֶ1B;.S? { tPٸ` ~T WD;JϼCء VM^`"EcWlF8e,ɫP,Ӎϥ6:j$!0D P1rkt fK BoL{"tRv!\[qʔ7)!6ASWm-vC,'V7.Y_l-?\s#gȭۈLTBi"E~Ccݹ{!ז1N:#P5Fvrx?fN7OjP }t"?ߔz}:@*dcJ;lbZj7K1iqp E޼?О9bQ*o^}ŵ96X5 )^o& R>i.F nقv2R. >o)܉*c9݀c>+=17ytJU_Y܍WWBlٜWI5ܷK7u%߿ˤ)2y _/5؋ɐW4\yu( uJdaN8JԎ߼p"-zk4Q[f]F\*uc^ϵnucvCwՎg9Q`A`CLd솫׿.\2!DxOeBIy߆02b.#)Wb`bEeFYg((?欟L.h@ƣ:"ZF)|yo 5ClÚpi.z.h*caYz83ݛG۷puKvBz 13̶zF 0RVbZ267wN}aE<ʅ(͋Ce [(|0cP]ހ7I O8m\r\ϑCMSv,mtF2i]7<:'>jI`X5(EKp=ZO`|[n1M{1VAltbvbȅ]4X`Dg:]=i|g}*h9ɴlD`FFgkaZGGNC%[H_HO3mtZìòI<ϨhG(pZƕB.#Ps[DԨu*g $ss^gpg`4_|4ӓ=n^7* bVRHl?T;b~vq=)zu*y%`rl=FΙ/qɓ%pHA|般/v!AʙjT,u&⨘ǷbxGa7ǧp84!a5YN^e`AJ\6{B^;;<B9 t 1Vv?tiI}Qܡ fhZ jڮPZ~"$DvFˡc1\(NV{u!UƏ փ~r9G 3$YGYx^ ]}-X]쒞S_vtnrYiT^.rGI`dZJ]u [o`턎s}tqPBxKTe&ʜbv'V5d˖Xi;X ?vf 2A:;/%ɴ %n y9\ZB}VŲ7"]yZ:' PƅPϪgэ0?U~zuʘ\%'q9S%#P3p XoЇg[JW.PU7*Y8{$+*2`B[$))bnRQdy~oB" tg*`GMӣ(B.nm[Icu;O })2jqjulux-lߎbz=NIRmg=HGd'$4ꎨE6Y%AOJ򼟓VǣW9@ u~y^vDQSyNbfp| д 3XAlRj @[̧M FV=߻ Qz|5A'!. ƽ b|=j]c =vPƽlI{cÌ` 3:ޕ;X`}0E5 7_0MNOͦ~c Ws)=Tz?#rB&OxE ;Gj(_@)k.h qۂ8xt#T)~M$$*۩jK0=9S7C32#)ʄ[#"[|[Nu ?}'cqް |t-̪9vBBOjӭPGU~M';kP:K-fg 40BۉiCR #5>fAnaS˨BoNȞ>iD5NN e[ USp7Qge;̦FO/0jP7y$ ϴ@zntq#{HwJ8]kИfZ*%g1ŸOQ(BVEяLv#dsCH#QZo[F؊rF.r=\M:df)cI!d>ASzkP{ hlۧxm(Q @ܙLJ(X N9C"˞˺Ƀ.=ws)n+Ԃt{a\0mSGz\Xk 뺈HY91Ӫ>&.Deҧȅ:.܋)ۅĮ6@D R'#Gߨ :,).*4}:[''=npz;YoO_w7UO&=&N|̶:90@ ;0"=Bx"~&3͑ފ(t &/;pb >&*k EDɨQHAoJR!Bt<We!)|} ڶI:KQ#IEzCҲ[mV|n!g0pܐNxOnW\ e6B<{6,lC"דUJ "9.-;oެ5` >ւՍg۴+B~NĆ1L'aS,$׀+VfM4dP8kHV=6W}p/TAhcF!W -AR]d[5=~Iz3md[cYJT[l?=&,Jwػ]t-~N]g| VlNwQ-xŋD'6BXU ayEok8T*E+-^bir*3|ɮ&;N~|p7DD$ )(A%y: s`?)wV(pm?VΌ仏Q~h,Md4ֱkߎ_"Q?> 779 aٲ1_a2:* @4Lm%ii4p=uq0 _\jy7uPWDP9 $n3tr,Hw|yqC6l'j_,}T}#ӽf%F" &Ed3{s5C?\LYGx|9Hu;xooQկvOS*7,8iV;Z-j%/'=E+~,Vs;ߖgeFI(͸t- nOSvR'Ԗ]_XAyu߇A܇R&Ґ%hLQ/hS?,~/opP%f?KBܜR+. P"^>Dc/O{_SG]H [rcT3~#k hjSM'oqk0aU}aXK$(kʟkx%!\ I0嫩iP76KUNovQB UƓ ѫrZ`}7J jR"'YMvՕ+y=Cۑ GvK8+\Px9e->}_4iƤ%~A8Rqy^{BO)ވiUO L ~o{L^3~KC, ؟a4<-bzAa[fAo!|zUSƅZ@P_^}tp)\^)4b6 k,US͒bћ+w#bSr_tT[*bx)S (> $up>rjIQPzs-&STKS~D#: f$Aȩ n%+o0BL,Xfq< o'UgAt6/66Dkg*\_^Lj\yȊաX׻yeDF:֛6eUY%u }NɄЅg*/C̶g_X|RH_HYxGUc ?qCD03-Tؔo=GTKw||ȄZ{B0m/C$VFfʦ-cYugnYeS4BM>;I5owh 6˟%n@7(7JS PˢNVPEuXMc|r @_1@Q6տQ1_1qS,GJH[FY^ſ^2tVT@ܠv$.ҩ *OoSx [~b}HJ\A*T-yu3b#'"A"OsXrqRl6B_ӵ`caeyUh=%4׀w $168d)Kf7u Zd1H x؊GL; ?K3X zU<>gp v\\?-p4m@X//2d5ǙY Jȿlv+.Gǧםikr:< ZʹbLN|04>-FxuMiї W!]EMǃ{(vq6&JpܫbYep(nb˭:s~L{`]vF v'W\Dzrt3YTBNJF0S)b{T#ts~4#2"Ѝ!]e=Ca48,CS3h>kӐ;ΎD4gl^F&ɷEU^EN (MMF{2tGhe^.K^N4|EYmCҖ$8I|[` NrJ?+ݝ#bZPv~=䑽Ǧi`{K'9^"-ꟶ"` GCO(6sLFf+yw˫ ."֮BAxRVr~\>CNc<཮d!s5͟GM+Ѳ!GѼ.Biol$?7m֜cPC(iwv9FQyEiTy)V AѸӠ)c5PƦI? Yz5ڙD`^YT tSVEE" FE370`^s@ܭnQںDt [ R&9~+}Wy Oژ*>h4ot[[G@{``4{c #'ʐFԬ n@'w<=ۧ9TURF"J2W`X{.$LC"Hn#1/Fqv ;yE*ytwrf @Ƿ},؛}fd''¸!Эg[Zزr]bMF_Y|=rLs&,hu^EJPc_7FKJ5j띂M*9aA Cl#:?5fy,cqܨAL9hbq?f Xx$V-G3hȁHsM[!f:b4Νe(jsn 5c-'1i02Jy~v!BZ+֒@7 sD!J<sw(VҲ~"c?=lwt EӟtX[S 2 YET!j6-,^9x y {NS"Bx#(Rc`?{Ve-=G1C(v,Vd+h1xbU8ì|gNe-M :jJ]I8I'A׏J1u} `6:\nclPF-=>PXUA%nԩ÷`5HUϠKs A)Wc+´VqsՆ:lqP0e6to&d:֎p ))/8@S$$,mxGYGτeI3w¿zF-V pid7U÷ QԒWM2^25ZE;¹CJ<,Bۇ}*=ģk1i%Jzލx38 ہ_j.C9qHpKds1#U'/2B٘\F n. +8ht,O|M -_NQS (Fftqܿd4.ثa7h/ XYoy< U;]x<С.N[YB`ߵz B?ٽ?i儛ȆiU}L; yQU^.K:4Eĉ0G%/-k[3N,Ev} Ju>X/L p_'_wdHy7~U=ע]ڕNMiA^[Sp;ϭWG6G/҃f{aNbrs 6 M'tf!R4/ai=]DvP J{E[a{:\\̓_C/@Ċ`(ĂI*(6M{Bjh+q ~ٌQB&9{nN`bS~2g+Wu ,Ajɡ#g_ebPb'?blSSFóO"| 9 X.L,6CPlexZ>#e\hfҾ?via&M K::dy igômkנ5c^twiLfwNr &M@H% j.z@1LqyT^J!.WjJzP][@ExKJe/bf1/U/KpsVS{GW9ܨ"dWsmDXȬjo))'(8t|(aWx{V⊴?.bZVA\y.<݁Hq=[laʴ\7xGTƮtEɃTsZ59K Q0dM~mwCM)^CgaUB߀Z#i Lm(&;%w jY(PȘ{k-Y'%]@h8bɤ₈GjZM#+7@AgP)ϐF/LgEO}5of [>kQ~L4J7Kjp!r_SM+* u5o#`˟!T ȝ= -XWDd'HmC A|FP6 ߁Rez#Xxۢ8mgɟCUOORJͨza+G`IcvQ U~`#Ks1A-))5K-KV=@c;!wc>SF8kI쳂M}/Dh DWjur~.ERurЁV$?.~ B/ :.c|K=?yGG3Ы(Q/>hhAa xk%T IDAJ,)[1x gݿJ. c9 q ZTMѾuJ`e8 O,nYh=!/L)pGstC(qau4NnpTHyKOYFO.\ OHxe([gpkF9`췸{b"3I)-0DeJe*hA-xb` y wP*~tӷ:]N^:&Ëm^n쿏3 ~ [ uwNǥ[Ġ݆[a_lGoTX2?eTE D->B,q@QzRY^dݴF|hzJ_A=? sRͿ'vmQ?1%OuX)Y7Ӷ`4# l'Ȋ eУwU'OUSD8_`36taRݎMH#/7` qD`,~Vq"eP咙7\ȷTˠʜAg-pMuB 7-DW[ j)2V939Z3!-͈'[S@U;PvԪ ‹.('ohk(. GAl(qP|gqLݞXUR4ޱI@ⱖhT|WTcJW$;uMm_gʌ[JRf-3Wli'}6wR; ~+Ԝ7hIH F^{7a`jds}| '&eN X48B5M[[ |gYX4R5?vb- 0@^`F6]%:{5n̨q1(S2TAZO0FJRj4alJsF9DF3cs-X2^%]5WYF{u:zDqm뗝6Z'\lyu Y4PSy |/R${s`ibmH"W!B]MXYΌ"&qq7guR(W{@&Jnk&+crV`ԧUtEMPѮZZ!>6dm\@^7 sD<-W9Q}]~U6jZנVI.ƷP +_éeҍ4ʁ>7,a->góC?ycHYXg{- s|> ϵS>̽O8q 7SzwN0_tgP$( 4ۗ h~/ R6ѬB>TGiLEɴԼXw7k^;U̞].pΙӄy"MVcCf{Zeuo/DX2KgWKǻO^z~Lm1k7+%:K=pܛjd(X1ӑ\vŇW&~WzC=!7z@zS1h=X˰K S? `ج*]:wm':CɧyjA-=G24&/iL(: \V7 $29e|XnpM'L+ݾxשŵ2X ƈBѕ$Jb輳 RњXu;s& !D[5 mHB Do#p+._7.%m.BxTgݧ̱1?wVA;nv}p-ӃVKjid_T>+:gyO3ixK`XXC."2{>#lve9jWQS޷4Q_\f1}Sf`V _ہR$Ƞ'D]Gn2Tu8#lait"I-X-T2, _05j'}UP ~Mx2YU|>dS@uoU%%X1pًyvJJ$Yd?%UmU-|XڬI$)CIƭ$78t-xq 9:H(beq ɎVhxŪ:A\]LzNd&w~b_"сm~@S!ms5G-?ٌNeE Q 'L;܊@, oM@uEUҧ0o {w#c%7"=dU: X .Adϒ`F2r2suyS63lj6q+#7BAurV BeiЖʶO|RzP #;[8m&-@Kt N6^(^ҦK^ OjEHm;B11iگ|po:ρ,8A5+繶0V,EvUџ:j}{zZzWqCU8e*Ȝ.{"V&g/XpX592#!K0 ª2ZvS%;tli{uZUåNB[ې /%atƚlkJGpOo#s#P ."A` yO"% ^26ˢ i$л)(lS)A8\_|= =ح/3S1a香/ƮXYXlxXuޠG}-쩤lBys+F tFb$^>+<#S0@KA8YL.|3=)(ov =F}.0cQi;0w˹!ʖCeucH,s^8 =P=1'-Jԡ.t|k f{ܔ.j::.nJYdy|w]'wN(&)ڗ" ~xxtUrD|Y1V_UCl +{[>hLA13PngbD"$FkW8IAcUE"Rj(xYeʅzbU,TKljk8=]6B/&T#ssh WOqa.`køhCj.%IG7kJM#k^l"GU _͌1 TGs" (9N% ^׬r[! KךO"6dt^ {3͙Sȯ/cOEu(=1n>-*]2W7vz8lR*N>)Kn?͔)‚Бu&C]2oW )1S:dmGԄs+%n_,GxbYգ`߾Փc1Y7֦TéZT.)DGJq.e6P^/v-1! ƶ_ǾYN3d_<5J^0#TX=/P= TpiZJYv3j׼6s2|7YY9/a4UױNó|ȱ - xM!(ugR䰖OqtQjVN eͯqB[(=zm'Z2| X΍M;סGCX0>o#)h64g5<\0E(Z)"H*,:\48X6A9zĬ9v<~jA7"p~VҸFrtE 0ک6~D}G{ E'Zq}RȘ!8}}asGimn/999Ko3k]|]M| b(?&F9 #LwQ2qX!:EW.Zftޓ 3U48NDمow<41C9P4u9g:r`y&ۑ“_Mq c8">oHDN 7YwJC tџ_@%?3S5F~0+ @KYIʯ;ZU98Bщ5 $uuSmi]EԂUP$^G.T݉ x;*cvtvʎSԨckZZy &d,)st{*,=C!13!v3ܮAB>*iO18Dᐢ:mMGqUf)S˖5E)Ja.(aKsUrSEĀVX}VgB U "=N.~Y,=c׷p;U Df׺(d e*~F=1ʌwV:Zl &Kg Owʚ]3y~: ;kODE˸ٓ9O=)SC-nwB.~,`d-5-B>]X\ъlB إΛSqvb4ʣ"*̧^e*OI>Jk+uUQ[?d'vX(Χ8Q$2kxL(bʧ*xǟ@ŬbK[IJrOV] v/U֚-yY-:3 WIa+Zim3Q?!D|5XdqZPeJ:d)SB!Jg_b"(\۾^R= z/X7Eb'(l~UQǘ3 nˮ"' tIז5K[;Q^*/ƞkє^Ӹ-b4PE@iXyw멍q~`E=BVN')Xt˫b͜2Gb- .kڠHqAT>zW}AnRd0r=#ݒJZ\[D%)A*lGr)ȍ#@ 1yjQ` cFaa)`bZQ2=gOP>40 *!rx /X-.E豸%)PfHR,=/ ҇{cb uu`;C <4 mR >,1E*~vvW.̰޵$ElLgk5Zhs]se P[dx(Ms]`8{I{dR]"=nERZ*l:Aix'iƱM!sE6 #|anKYD V>U3B2}tpE 6Mԍw&AzD{&1<}I)wacV@).LAu-N<)_e86waj ":ݝ, )^`0CuU2Am\k&&jiS]'wI=ԧ+n7G?Zs~EytGH$`Яh½Swj`6k0u./0DP{<˩SyjD@{IFl.[:ʩ/,G0ƣƎ%xXoODK/y1Hm6Zh]yLNZzL x[-CpOsʉq |܎]<wL>c<':ѹZoCf06l?fKo ^}2$Dku2ENQ!q@tƚ m^$L??ic~<*H}`bmQ =!{!r W6ZW|5Ⱥ*,ҋ4L tJBk [;E1`M B d,$1TiS@DZ~*;G+A"D1# :Y o\+J5: FB++7-ox8 D+߉bR(mGd g7j\rq=cR&jeBFG9Pn1&+K*Ȇd\ %%FIiSP5>e!?ʛIoz~maXvM1 uɴG ӉBR)RBI0{h ]bZB^yC- &mf7\[ L 7?(؍,LIH+!|7V/^ }&.q B12^:v"T('+tbWXWw*Xs˫RKpOso&˖>n&a)ŋQL ;,7IE2 7{ ֩(I/!K+غ &H8&I8m?7P~#^bv$(+0pi+t8ĕ#u%qQ #$,{qＲjvo KunmM6˺UH6"AGjzNpӒ?w[e_N.zlgȡoqț hM"/@⍨6V]At.t?!JR3}nAr ol5[& @ua.=-7bZr}5T??;c~I#_nܮ<ҠrSY# x Q2V$FX㶄C5Ԭˊe(7LaX39O?J%b v >&0OM ~ԉ3hC܏ȶ),> (|?ƃc3,7N O,%^mCQ9A~L4ca@u%*9s="Mho3I_bqwk~ivh̳;i#=$2MRoSVb'؋= C+;>W1_rXU|UPuVkgs1m_p~F w0 c>XzH^fP;>YÃ.]6 d6pt?}g6+8۵|A$_QRi\25ٷ_;)Z;*ciG:ׁɸ_vwP68PAAFR;Bl?T[sOύҍ|Kô֞ʌq.`%Q |kê7azYl+2pNG?.AݫسNcOyqQm+rzIJJw XWI]PCrdkvj>I![\H+Aٟ1>c$isov?ea;l<Xtmib\|j‹rԞv1jbˈ5arkVQB| }tIJ9_1}EW}q.y I椄rhYOS Cí8dKZhH R.$/)wۢͅ/m}?d@`!ri&|;. {r[o]iq ;5&m06!pAz3!Oovl7U:(1W .|Zx4v^KtXi0f[ǖ$P3< 6u?+^x{q3'Wg+DEifPϤ170zi1@ tޯ;)A:8qzACdS[D\ۜ&kL|=Mhk0|d2R^ ɼJm;½]4W/H/g=Q?`= whw]7m8B=hdDh&xd4/rQd*‚7.r}TʅjB`N܎d) !x#8#pALjöJ50lS7E[u9!WR_J1f:޴k@ B -jIxǯ}Q9@gXa-a"=Twć#կ,ݽ萻[>끔3WA+VDX,&ҭ5ϓ)/oF[jRtzՏa C~ɷ=xa 2ڨj냫}FD Dq*rU|:@.(`sk(?Z}Q4'\dkZ/UjsÛ?  t7`Pk^#Q6KUeck9!5R{2ɑ.p6yS>C1aN`?=+Rq?\#Nb1i(b7x?~?(P<ߚ/'TUkOB YbaSʹKMyVAf;}j;*u` @S y5G ڇ˜BǯPJz{ Ռ:#?kv܉i3-1ki:,3~n 6&xNt@AA>iZFB_'68z/ ʯ܋hņ `R 4Nl%(rogjǰ{ĸFqE@r Jq#VWD=N?jXJ !Ci}}}4^wFZ$:7A@**wP 0l%QDi,m}\E^G$M)͊ojZ!D$xXU8kd6- 5f38(v룙!MtD5Ÿ1fP v v;b%P3 QLY}?1(ʯ׿(sXoh$ѓE-_p5`CDhG֋A\b-1t~`iŲԁt0_4_)$#g}25p ~0b\Q -M_ ՠdu۪aW&3C“_ !V-'q [;R`)qi0F5Cӡm_V|C##)(XE1?3|;`OuQn=,AdӎioXZ/IML}vA曭j^Rh gʦj< G:KXZ#5f}HM0[eߛ2Pާ|=.-XJj#ׅ8HarCn\Rf"H?\l1t;)> En χI0H[fR%n4f]z?;;)bi &g.+d?`$v4:nPb1_t*_+$*uf|Cg 5t! Fn批.A-"S{km\0H<`zMV .h\sZ\XZDپ9P=n؃]=\Wg(}g}g越_?,3L*p#$iEO)&wЃߴ\b>9֑<3 d r e3(|^K|ܯsu- LgD8^l-x뺆([^(=ee T'K昋-%oYCPR=T7zFfn?dJ)32o%)xFpCr`3|?ŷ} A[x _.t^/ӵ98A:' s@~l%*wiԽOI;uO?^R}, 񠰐F6 tUWr&6huj%VڮPHi搜m:;Rݽ5 bTmiz h&ʁYfvZy4ޟ,6sԽ?e]`62 cGNj#mM& O6d *;UU?Q{ R*LPiA @H9pat+Xоqp';0w3Rcy=Z& kY4פT? &x6y!81}qOLC{ڹ(‘( {i*:K¸=fMlŕv ¦^Wr d.Ъz~9N)u$vͿFόHN3hFB2ݏ᥏ v*a=tISɤ0łӔ-km$^vUJNmr/0îa"9 ? t{0ܝ~D}EwӡAx)k87+оZ?3)L9td$_`ss+ǪI{ig' /syV OtVuhxA>b_}p }1,lTU|e[\72Tvp3lNHv@WO0C+<ۑv9oqnI!XLٸj]w.Y%:]ۈNV# ׭vFIeS uZGm(cc雎z@l CF.tOե'vNA͐HGV%?ք{Ѿ(Q!0PYuCW߾_OH!bPk>E6оrg2WU \G9$~)A9qM̄o^x(ʸFRBrYʋF)bC´'u ӡՒ PiuG0emC[4e ƪi3Gyi#&$H аh|xkWD5m. [He}]_g3GQ̄ilVjf/ƔӢ/{p$Z5YtXt{k,P:'69z (gE,Ԁ#,z.]qu*vqű ՟pH{:4ASL=-1 nP*}Q S>QBk#Q z?Bg}?kYj W_E0 ܴ9H&9)ふkYHk|'3POtGOq2T9^T/5p^N/@]Z8BǞXA{8KM#XNw!Zv:㭟sf@|\Lכ'$`l ,+Mx)yJRI  gf*asJ&vW\<ȁvu㳂yZa:aL\fEfSh<Sn4&h+H_&"`~j̈́*̩8F}X:p*·_M"Z BwnJYsoتbP,T!oc ͒rlHC!$8'=EXF^l0+,(?NӞؐA" ıD/yҽRuڀ/+9IJ$s[ K#5H {2ơ:Fd $OabNR]e#sPnU&͙EtHsv1 K" aM(Ɂy@GF3ҁ'8ı3yS5u >)t'0p(5ۭcv7$@'؄~Fv'el]ptfc9*&s;zR`?ܾJ mvädwCbRXG6/c}HT?CGA +W >/n-gy޷t,d6R )S;>Do{<< nfj%&{ ƷaPR.vq#١CUPt JK>28TU>= k} h?zǍF<+8bSIa͒X[v7H{l݉3.nvO%ϱ(DӶƖRd9m 0CUUdPETV>ȸ^ȜHpBsH>^9#opޯ%t - @Ofi:Ǔ>.ʵ`^ -SiL-=I!Hù4s IkO?|FTx?(R=!ٝl\,t]_ɱ*S0 /Y4W lS]49 Y'Zp,bOLJ:4(^ xZ4[a*l\HE6_.K <Y\'iW Mv|ߑB1Wz5 -",*ba{sܔtmZz<|&0&N;CawQ;$zglϱv?M)ܵurme8g݈η/݋EQrJm̧qXȬƀ!:Y+V@|9Gw0ȏa*_0U y3b>zǟ"tQXhAYҗ6l/ ވxpz e{,8Q.`[0sD7[ |Sb #$f1^db]Lvj^zL~MVHu;![CS7ư^ `a.28Py;u.ړ]s ?ԻuE5Wp, E-k\6Bֹ %'<$__Oyād(,Y^s SƽÙ NzZY&Qg9HPbpKǙ5e eKi1{kU7fZ*8߃68?92u T/\~^̉|,vzXվN QH|J[#:0/0Ѥb%R+)"^:0t'DB.N)RT*`mJSZr/g.1uЅ%s'>Q.cBH_&*%`W8'{0yQC;v4#F 1%Q0{aR2NEUU3 mi]f+݉k}SuHC ݶ}ӋyMiȕEPԽ~gIdF ˿$yg~km~\6SLA=U!HT&6rm/髯l'?;~ dOqA1EG໕NH[xcS/Z_exSI2.s-+:ujLKB?2L+84Jē j[h1=C4P]8IK'-gح#KÎiYK8 cnz2]u~j Pa# ZhZ:_;#Uai94~R?diYҬe|5-_wO_^T*T]qk9=Qu>%>rNJػT*  (YU2(]*Mh"@{{ghj_ (5bt;=XIۆA5K:F...ӨǸBPMBʐ&| w[:7_TR;̀7۲9g6doxOT QSţ+. ^hMֽ|gn`"?8sG]BWUma.^Mլv?Ҥg[_JbrKKs~$Ա1VCId5̾"?8 7NܓP BV)$Ʌl.7ҹ51"䌝B+?\ Ľt!ơH)RY&ݎxZt dLHhB>[r1z+ ڼ>>@!D kV&,ةܡ,7K=T=cVnÑ7N: J3J 5""QE5*O-^#!ֻpd% 먿y #+.4_4oi}R%c ݁fw ۪sF<`-J*[2!aO'7h~'SAu -ξ gN푏u*ةĪm\Xr$&8pJkpFu?75'3aX؅TMR[otq=y"` }"ctЈ0Xb@{1dvݟ)Vy'xC%33qe7OBx=xX-;V]KޫP $mReP7XtDu ^%.dp2|,@]0V6mvxV)L)>OYSWQj܃-ͨ*I یI-RH7ꆮ>/]yR]ɗl:׀w|*rIx/BoN: 3}"8PjD#?9t"itʨE2J)B?Y$7DBrUGww)~#bte j{#5^bof|'a/=Ge(Xo0jq q3JUOV% n pjU,R[ȦV!;M3|?ejy&q#W~le״dhGB hjޓ.|K,1{ho-Q`S5 ':܎uNJ Gx\2aGۆxǠ fx@lCRh^Ƣ i?,Ǟ6,.٩%=OsrEbޢf )!s>QUOt^,np*+$`v8Mc #a$Cx țD.bj('MD ڣՍV,ڤZ @hh8َ6|Bv1FyUAO@[)ITlyMb9u}G*Ԕя[>6a4}dUSHPro- r_~# Q ax mBPC~#z~%ZgGY|@:xd%ߥ^l- `% u+c*g SK퍗zh2`Le6XPn$X,}Wȫ:m7cG)L2dZ]bە%zOasp0bu%cL/ a4vS ߐee?V5$"ߴp.U̲Y$iϲ0"ӇD8A;aʅyy3AgJ:.E#4g{/v&OAnÞ#MtԢAOTƃ8lJɉ.1LImͅI`vSVphEHDwEfˆAӂ~CT`H^rp}LRgp͌9`&f\da9/a0\i< σ{!g{^L "CB`1*əiHVHsS: X%5J$F<ۖ+`sI؈ń77Mu@!F2ŗY3#{4}F,ЙZ~F0y58!-Qq8![*szS7*^wI4fDF"]],PַF/)&1BNdr*[{)b~\PѦ\cOj{$t׈Nbk׉0VD5Zwސ Wvb=t{%"NYU)BNnc .rU\!ˢNw3{-EHI8z1HJ7.le^-Vy"~QEMb<¹fHL}afp DҟezuՃFixwwn'o]f{Fod`Ugz9~z!j4tQ94/rMv Gn $YCb١$[^F蟡(ڰ7tp.+-sxe6 B uw.LX0iaXĪª63U)l<Z<511+2Rr\s.ƃT6<)uOyAk%HܿMoqEL 6j+O5ux ,[ |-u;[H9Op#ܷA8p`Emlۙ2F/ ~Fd)q #!&| qC G6$8%ph1VOcxV#Ū .OVB}[wj3t2E)X肪ᙐ!! ާ6PT0aˋ3R YB)͕wT_T :'AJ%cxmbTܵdgiV.5¨m01 pۚw bj沜Y&펧* PE `_<1@m^JLIl< ~1㍷}ֱaz+jIs= 5GsrP\`ɸ5]P4"qNw!CFO%]3L) N?j'&]yFV-V ]CX+O -U> syx̎M8x8ToЕXbx%9[Ei+KXP|Ҍ!7-Ã;N^:Z>Me͏Y4*N _TA[_VF̈%뵻ctWJ +ajZ ! җ`K<pfJ!.!<ַ5xJtQ:˺ d̖V+R{piWpܱ;u!j{8<`eE@6 "yn+^G\Ֆt+m;eF=(UMWoh[lv =w] k~ժ&J/|Tyh d66uvqZ<غ?5$ϢM@Y6-AV8QK@DuDIf8[a]G;ԌiwQ;INSǘaEݻy:?.Eq*nhRCkȗ .czw5*<3׻s|l71sǞ76I +_'NL}ԣjd aOr$_;-Q2-l+ޘ-=?"FONJW@7/ /y2T*ѪC֋.AͻkFTV|MHBdjm$ð&.?UWqVL LkD>i3a A`w732+Ʋm+.=(CB4J}ij 5.P>m1:G‹&JtgWt:!2̌Ulc> @dY\G`.^Gz8w_%VR xdJAuvX?U@ -(>"'fUЀ&M2Rbۑ:l$\CXٻoO HΔ`6~NiUf' Btug]PXwNE ⥿%z} pSǷtn.ԛrC_ϽJms^<[+񒮰1Y ,{}#˙Y`0͚_S5|ۈ< dO,匍j.sB)VÌ6R LUюD9ݸ2m0ٲ!rr3 WU0Zq}_B* DT2KaW S?ݭ 1CX)s`kh܋1ֹOAWNSҺcsUQ3!)͌2[>MdYwZIp5g-MXyMﳍ[ d@ϻWP :Kj!`)΁C<\؇7lY7kZmǩͷA9HO8S't툳/'[D4 PC$ǔmYbHk5!b+]XĻOW|_^l~86'=@5AĻV.&g?X2{|] TmIiGL#r*"Ϸg1yűaXX{ДⓝV7YPy;m4)* oP; ],}'F. :<mcqLc{xH9:bʲS;Pl%@{pV#ϕTGbZUq|xp 8[HI=%^%k{@*|59WE$R^Eyl6:SF5Ms%xTKJTQPu6z|!u@}M#@`\̒hE6`n#ac^'<ͽ9Mxi'$ X7RͰ^d*#٪6խo,DIڼK;'RBWn_%&x.*zq'{P5I}gr\G sWoW.d˽g(c`>)ԒtTA/ddE\(w,){@_ MĹ3cXQ*ǘ5#oSh0Ħ&ƒ6x2s6랪v2$UAB/,&SA1$Ǭ+I?U8*j'b0,!Ѩt(]w:8O Qo{+ުT>\RjO 755BsRJV@D*CA1EW Za_NuHHӗ޳[>KXz`௏L&oa-.hmF O4[y+JYRnE M1Aw@3wJ\1vs-Ur{wLC9m㷫-ح#A83nщ$<^] U\x_T3rLa:wDfk[{M3Ď_H]2nu'L.ݍAor1YC+ÒZ~R.♖܋m9e҉,D!цpr,T\@4Uӡ Vw\HtV_VΙ"ob?H.\#p#n*FL'z?qDRKMSʛt++WYX\P1uM.fm[L,SEo]e4ƨЭ 5gn(jgȕ3j(LFw!,b66w w -kaޤZmj^:%riMM1yЗD+XTY+b>:/IˍM[4̈4)j Wzc엾ڍVk]WMnRk6J}Ra\YXmg} 7ՒdAV܀XG Y{[GHɳo!;?p2](1>G߇fY($o%f{9\x3~qem'ϠzPT` Éyn-Fg~-D5'>e{Ƞ[ӱ: _C+$[H愝s~SldEJz/9 ]1wAom{z\x>~Z!OSTf{{U=UK#/=LgiREeks9{,o͞ d{3 CdFo&98r0}y)`^c<*⬔Eo?%E'Ctc=Wڇ[1ƠFu~b"TՂ5È{qϴZ17888HVaxv8݄HEB\ 6{ц{v=Gl]+ ^KMZ/A悮 Ƌ#x 6oе/{,,>S3i廩ѿ.؁scΨl:F=Yxc0`B 4dlg4*^ʵw+:긲Q -M}.f"X`$2J"~ʖ)`ie W 0@`jGěCkWExgмGqԮDze|gk ܇Y@7&oi uȭgx%I8_FrUĎRL(vU){Djد2H oe"?Qg:[,<Њ²L?|ֲ|A×+d=UQ p52])p|Z>$^P^Ka38|_~BS/hB@&J1`irDgwFp|S2JQG8[dE'*3pFzT n7[?4EqQMk=o͙Kc@hfϤj~-R:ծk3vjn FrNOe>:U{wmH 5æ"CAKcSi=d$( ^U:/XHpp $) Rb?*Bi 2hO)c&RI]WyWZuGdDh/xWQ-W|pN< 5٥+x/m ,ડ$BLa8)R$ݽnO|2Hj&ry׷vYxr4\{\Z-__ ><߷Ti"J;pfIp0hJZTjt;L=>_u^WX' &z(7bv-'ԠBP!3Wзk 68Э N0oRǽZӊbDUz`wFs:Gi'=lO[X=ciKx6M"{ 6T^>:&tl {Y/Tȩ[V9䉯YCõ.D/`dю!g{  mH.V7vD 1+y\%?8.TW&idȬd1Y΅\g7=Cw-B:i KEn{6k`S@f[lX(@@GdԊR$}`@,^z"*= }r[-t6iK/nx#YAx![xCVXsro[W^QDŽ(=Y~MلEЎ*4#4్m폲4, bQ<@hS2 ԰W;Ҧ\#Q;Qڸhkts a1Gu^ t.whN\j({B}O^1eQyixsA6lyx'$+Yb a]3|u)r?}\:~rH|!Px:2#gb֐mE ztė"I0 o Y K2- #NS1H)nD6jL?H< 6IC,g\nUNə4-G'X^,nȁ#xLSVr>v=~O^'Sݚq.LBw'sphLWZ8@N6pn@6J zn 2aKWcI5ʼn B[8 + [.3Ҭ_"g 77Swʓ`L<Gф )cʨ;C!o2-d wYQJ$P).ԐM߻bP=m U΀o]r3M`8O(laC:0Qa"uЁ&]J^O[a`lI+SxBI鉮@ӞfI@ţη)fmlسyEؿ(R-z~Esz $ υ8}zwEw9|OvK =3&H'Zѝ0Pa)F^z}A؈9ď 6싌\d.4Y˃POM1W%kȏ7>BP7U-B.UkydAk'ԅkVZ/+7tj:&EXft 8lS]>OxלHR% ?& sO&%x1$IjH0xލEp[wn˭߸ T Y(ip42jNMjN.46niy"rM L^Sb5W!A dl5c `{R/JnyFK<$]KpU(_[,y1 9!  g+T{捻/B$am%<.78FLۥyȼot4VOHFh0Bxx?eܯq|CI lE bH\d4"%𿧠~f?řj$VQgaNW(A'fZW`]v>P3ӡ?|6p&h< ˎP]j۸1e#*a&/hÀ]>  4^e)`k)4Rmq/tphY$L3P21N"2~o\&(+}Ur=K,10bPmK:~0mP5 ϊ˃766t"1BB?rZMc~a ˯f#:f'*X>ͣ{i/OlPeqУ`_uEQkBw_.w__I@䮔zWlk} /4`lcZhS?:{~!/+{Z;$R!9Ic֖E+G 2xY}s<|pڰìKt$i3@**O'?[s) |[j9+,86.ca Ru}E&BKYqkqݧ)vkA]iD"+ugcq'hr^YA+e1 ,ݖzmx5ҳߞ 抜dmB*%A/6EPdi }{.UEz[9Qcg22zV'/R"kr2U^- O Y:%1J _rtH(ndށW"dթMV%e:3 !|P~G s\>j׷pOඝj? |@zv8=}e999dxv Dd}]ۭnj󫾈pPpnޜ`MqGXeIan)-Ӱ(jqf2nřiI K!{oUˡW.H5Y5Ds 8Rm),r 1; !4[fPc)e{>M;zW=8"ܫHlcmbj={[A1fp;boP].0gіw,M I#]5 DxT21GB$(/))\|g.V$}K@\B~$6]Ǥ`㼇sQՌ[u(:هd˺ﯹцe#.r\r0 섽а&TpMA&j!_iۥ "QE9k oK։lVlzAՂ6taH6d[cPR>,7-B!}͍|AݖvD"9ӄ!o/-RjdRJUEHވ\]\u!C>`ߢ/L$-Y¿ ?Ү-eOSxbWBwgB Wr!u7f:H V-\`.d.b|M4UjzWg1]QcVD6ն.V]%X>kP0L *+ B* Vj=6QzK|\U|CU 2 uw =7[AanY* 19[*F=HPwR>~_)v0p ʯBН7Лxst祲ػon$-tɎLXNNR-E1.Y0gO t'P.R^opd =vu3)|/Sb.sⴓ56d=Xx HEHr TM x4G@]:1|d)K7VH!}6zZ&jHZIpߥ֤Nė`4C ݃́F _]^q c!AY$;9)M"}oۏ9W;  虺z:yv~77]ċ: lVGc,.h$R7au+#s\/$#Ӻ[bXtD6 n.M MV)`hQro?\6e5d#ݖօh#oM;DX>@)`w?SSXEY4S>(E `$Co _hZdum;i/7X, Az>˅jXaJ ēg'n海HRh c8wiYZPf<̈́:aeٙ!x᥏A,iTOfM&d%,ǯ]l cz(odw`ۀ!j|?2s`Y<`LD4TJ"^ko55@Yl !5 @! KmSmԈ3K4O}'3dJ v\2DF`=t[] w>D k8c bk/\\8ܝ|Ee-|?q8{)}b|weXfWZ0,DA $P|@@@vA~s3T  #0)Sq`iib1HNkHVd}T|_7e`<;(D5 c2-RelٵW-P:9BQRBKET݌0u]X/iO 7vMכᦕ.ibCVjjִJǐ~Xs|LJ{#DN(pqLc[BI+r`4?q`\b 4r񢿺9#pGz(yV,4`Sʁ{`Q_ 2$ 3Ȼ8GC;11WqzjJq Z!F`{C-3WYuiԦWG8T7(tJk fM n< VVւ{DhϾ:{ġ}洙,#I V6XKw{z8<78l9tE(Ap./ $fg+4glQ'`_O}+m=B \: )璩_ D^̳ Q x)t"UJvᎶ̝Kkm2Cv\DOI` !`>~љTgRȱ"x*Ka2T!^b#QGO&\#78e*J36XؤJ yEռwav僄Z;9x-~[Wf50)Ua;{N.n;Zd/0W>Ge`wzR_z)1bkO|u&[Ofzm҄R6 )0}_On(id˙jM7:YݷxsmW>~lĨcv4 Ri^uCi%./bݭ]蚳" E4LRHFU.Ը7/[F !(\鞂ֵBҫ72w؏[P\I+>t@/ɭByG6ԇ8(R*+9?wy7&e3ӦiXqݼ&ˈdž# řQH! K&sX_G ?oG;/<:DH?u(-ldX} $n78N_V=b%*H$ 26WXdWT+]zS17]70ͩ&v2C's`Jy)Fy,CG\Np; D|cō,v=~;%7 ^jS/;}Պ]rWܲ\fQLwd|!ˬأFcKScSz.6 4ꟵKu) ӫ/zY'pM!rР ]ǁ4-  uB"vgSf7)m/ #bbR+TL Sj Yh,dSWH7@? "aq^׈a?4!;BS\;:Vw>=! ORf=Dz]^ =[y>̋eg3{8n`$_y-wWjcQRh̩Y"^dop ĊBʈ&ΉJ"l6wěZ~-;v7uaܘ*A,!'ڎnoїSxcE67[OUWݤ@)v󿉼q Fݙ0ԳJlho S_ʲ?7&;1,M[)B !X?2" D U[RYek)B"&5%_"wɁ ]_riI\DAT< C!*'7;i;>FY/ݧ;}ahe,~!cL-vȳmf6Ds7g]Hhmi-dj-lvWmBy\>G<]?i~[P8]ùHE$~nL ?vB~ˢ=T=Ro{;3]rafw_VWjGտtŠѴ- Y뜋CU 9 ͞$ٟN+-l+{T7b:5鴊\vp|MT=5lDОYY~'{-H)N&g r4n魃j;${molK0ԔΌWv̞`9}/iwU@YXZ!CªMG[%"$ziG*K$|'f?^}2~tl曤Ҋ R[%xPU=3Qs [QGvF*\6@ѹ9GbBs/:e|?I]pEH)ϾtG#qMuy|2$? KșJIYM,,P-am`/pM^ 'JR%T*JUB]R]q>u! djP@۸:j; GVbpe\5$j9>ѡR,&ږs]R0Ӏ~HrΎ:է&&=nzRXx}_ uwe΂毺fp wNj]qNf чVܣ͠m~ p@nh.vO<%qBŔdy|Vf8*kyKGfY!h^ںr&URg~HP2d]ER >هv: `zԠX!SjɮqUDϗ'CcI.P!8ވ-xY.<~`߳EXXH8f~siO|aiPcBN-,@\ rBp3|l,<--^#4)n14I<y V?=gAlȭ<^nw,1hZ>&uM!(0?||Oz;1,O #.ÆXHsf`z#mpxca}yL@=Fa.9> 3S~SRGI6Uh. ݫȞKͭQQ$ނ(!hfHDWRuy=gh7*k/#@H2ςXIfF y3a:qd䮕a?֪:Fb9Nqz6>e ayg'fKbR Ѡ C zO)ɕ]V;=jF)N/9zI fUP՜\.qCz0-@ T[pW"~v(po4Tyb,!Ґ. 4 Hmg3$5 $Lv$Z^y #jYKmQ'Wb%>z|+׎*̓Yk;(Yٴ\=ƦG&;)G)a8^d~i" 薆;3hYkQ\s"H  W?wwqXh&2aT?/_FYGsnf^>Wb>'\˪㪑:aᇰlͩHz˼׳Kt YI[ n ˶ M #CP^BVvI jㄦYLD9)OXrfZSLiRUUQ(s#埸iє05BQ;824Sh%b*SFPTh*Ds޽@bxMPpW'ҡ=- ҳi"V pl(NO@1 O^GEi.0|DS0'7*Kj'voEy2K6iz|BUZCh!<+$:JvKMxN2me]̭`2>A}l3INQnZKV^ˈtƖF⡙DPZE1 NHĭ6;C\X!JLsss&%X&CJ{BӇd^N 0x:O W\r3L[>1x䇝[%r 91#is%?\!3\?[t]ϮW~P5T`va>*tYWCZ^45ғKMڈ2@_8ڋWn'3&? 8/.A5]jb3:XY_S+Bg F62r( %dgܿ~HN G0G9w W{@ \O ~ #/vQW#5a9^ږ& -D{KK4_ .ur|dj7ܓQ0K i2!l N)^}(3,8*[*Wt_ _;Y\*kΘOVm}~WAxNMVrIьDN^K ($OhDZi-GX 5-9ְ(d}9N n6uh0/kS:c#F7uڴrpƵcң7bRdZxCXaj@NGa%x^p? >z/}z!TAMky'BY%G5IuB$Mk2+ct~ťCsIe /> =%Tz 9*jl+Gs'm?7.%}P ͥ)Y$d`7:BxERdeTK{KTxS,J#UJ.r\&4Y ֱ # 43aʙMc=$h_g3ʢio-ۏ?.J>:3+_&4no<$2#_U+#Ӹ35*ܷ@KmG۫3x3 \Ju*OПop8-SfG&G<R._&- :]ew`ecO̞@uDrmM+$VLH׍Iu$oޚQjbc.CTR#b%|$C&> wǝU_:O R3_ptL &Lwtt&њtEKeuCKrDƈ/$|Nu 4\ .B<ή)#>T}Dy[_|ԧƔnI% XBt-O 2}Ez=G,)P$x}[Dq@ R/cH(d/wQYZK*)Ya4ڦ8(Д} C% 'C_R;k.2ϛTjL=o|GpQ8v * $gj`l_/FR1yBL욫"!#AWE젿z% & {bC:M(_!e/8\%v|v8]}w V_:FT@ 7m?MLlp._Y{;%k5&󒱎C' .~|FuEA+>0Sԯ lY$I#'7t:(Ǭ~2sç7 X>9g㺉!96b#៑8zJ#vks2aDGC~HYTW((lx|o^71Aa0c0]} !&%Z>.TϾKfiu8^ lzXMC fHɑ]gĠ83Kς b6As>y1'5zoTz3f+]p)*HjJyHS!b t_ WK;ˀsx74,"Lf5sZmحUu= 9rߐDU 7d ='iU0"yu P +%:rR5;KD~ ~J^OfsA(jV`q"Z2iHwшt$$CDM2WU͝0o=c|PP00k%K\@s]opE$(_AZ]OOc i72L[#e_-P=nAruy*r1KCaqG89#;o `D_4^^͞7eu5i-(S{ bɦ[? 1tNt WQѢj >%'ւ?0T=@ZЇ[ NGxn#7rp1&cf`VK~fe5&TuU^䢆3b Mڜ+]T7\|dS{K8N|0azq`MWQ bSAڱmODØM9H3Ey+Fl}ƒCӽ?KAP m:7mOs2d㦵-kD}Tin :@N33` >=I5{:9lo;/ZT`Eǥ)Ԅd!&,LySQN"U>bNU[hF6QҖƃffRq+sҫ{3bF2Ys'rL874]lmȆ:eMA@^{䛛dOm#jD?tMP~0r' ~;.88ckq]rTj=]c)LDKs&KLG0p)5cO t3ʥBC}8+kA꽧mU'5Uݸ$wn-p9A]Ъ5yBKXm欯f#V-hI/;ܷ2/YtӾWd 1=y&iD(zQs 0jn4+U v|BqY_-1N2R=zK sUyWN.'~onΜ;Пt( וWzNo}iEeaj \ƻN1̈։b A&⠻ą0br7je[Ĩ45^w(!vlٔ}r%:lI45 -J0*iWZh]cʅ m@Y֮湴mȂ&Yϛ P\sO~fnTEҥ9GPup>DuvWΑl4lNKpB[.p{8%ay6^əTp#Ú -tvWW8mzMp!t*R+]'D_?T̊W8$КH!տu?VЂN\R4r"Hܳ'1v>9UIBSM I)DX܆M}&0`XYMԽ+@,矝O7ьn˼>3?њB{5GT\(OxINSK!  d=ɿ4y6Կ a4zmӓ}3Ѻ#4JyV p߆YУD|(+.1NָB1Efe \qOe)Ж?/P7V]Uˈϲ<tKy[_`kIS1 %~ <Q,{Rm[mlsE4PX՜_ 嗍ua7|ko"c쵺B =u"Y躼 }&_Mf67r9Ggt_NkCDx5#ո3k:6i]WYsLzCDWZ[H78}}]l A cN|PRX׽fh`lE QnT]Р1}CѢ_MhDe1x40 LA<j!ґ: *c;<ܸb^E"L6ٸRΝ63VUGec YHn-%n'ctQ)l塀=< L Goȁ|CwQEju${>+FFb '08k$GtWIM'P@*_e >jJZ lN: o}aA'xWhwKÆ)qj/"4H{Z;5YZu@d?̯]Fn!+B/ш!n4 ;i?@U'[xUf}Y̏5f`V%C3$E[S2߮w#J`0Zma7dx*9Al RtB Y3_([p3L.{U_ϛLR ,{Uhn0宇6l&'_~wۀen.X:["l7CqDw6 bH>q N2ya`i쯧 ,~-I.Jb)54rhIֿ"|YINڧ#hD)XWf%҆}62PQ8)r%D~|WF穋+*흜lYU]uAMGcٹ9^K v Xvʓ AyqӤ 5&Yg/F}6^xt'C5;~5J@8HI2_&3U=8*]^jPӫj|8NQ9]Yjа%Hp*x>7RwiUΜ(Y}fG{L"ыu.8F.o&{t o^kw ouC?DSw/7 -4닗VgKjBdIO߷@M:& ҉)$2 -$0$Xx/nBQ07s Ȟ"%?uWȉ4vӂE0E2܍篪G20M#9=hd&pOOt}ڝRTRīDX'7A 4] @瓍1%:lrKqGN)@أeŒ_p8u1@7A[>FCI- ުZg aصEotH&MCC)#c0Dd+ U3[;^?wJB ?OCb,ͽ@#X\R0=Q*/ֈyѲO:~"ز~= :$nE` zw `S0̽RΧp򄂲,[ˌ46zBLK"@C^= D O|eig4Zdȱĥ'h҈d$+؊>ٿ>xBbĒJ(t,cõra:~^پ#$gKCiΫQ4C}nup"_IVAÿ ڧxeP(ԩM@)#YJԭICڹ[JUC W$&7><uս|<iWo/kFZCI/3EM3#3uP>AA9ӌYfȹy2PrXd/|24 \YP 0g¶wTfR!Vf )wӞx\=e,`Ly vvaI_pd9'#9?48Gc|93t@|ObMYxƷ6T`Į^G~2s8/{jb-r姀8JQ(qo :L*#?W g`A!B=u٭¥V`5Y($^@\L7#ێJ)ԎWKBL.Xir9d ih}Vh2#ju-7$@qǽF^0 7#jZJU$*5/A>mvA W#<&` ?s{cy#;akq9 )S7A/L܆b=dxRǾT=otz¼u?p%¼0*S{^C+6 7jZn֣#=R)(3ŒӁYm–۾ң}^>E]c+ Rڭ3H*oe|-ITdCux?7ޝ=ˣ&>@5A`z!!9jW⦏=#to1;EwШè5]]#f cXQrá b%j`-V$N@3d0Ёp1fʵ8_odu n-CP8I:G~=71=(}4"D_ {2 ~rg2L|#Zc7U흞P5T>yq8&֯{J1'Oܟ2*@lKxL,(d#:[*Xa(.ǍHj|٩6X$y_ Ⓟ'Rlq#{k₽#;V(ɗ|R @lp<$a^1E ɗȡ?Űa]?@BXU$l~!}l Wb?M"A<` 3]qM%S;uCocb]t0kﲁ윮U0TcG`'1EWʤ ՜E_H$ 繟ЁHeC̽Ɨ}|USpC` V cy&}+1pưkݎ ޏ?\WRi_$Q-(GQ:>/2'69se5zW1mH?]R,`yeWSadU7xu EPj)tZ֧s[%+ &":9T7d nM$=B8D.* ޖOuy#wIm,\d?=H$ fmj醻f+htXr)s8HmRaܭ[THvtۧHg T?aʻ*1WkM|? lʋ'yHt JeXɹ mJZ aUzLS5pMX% ^Y\GU˫Up:m8Z}y6Ƴ 3=8؜XЬ>I'RA –R** h%iP3hG)?amvYHIUxhdtVYFVü)qLM@۰Iӥ[>?.’彟tx&'yFB^b(X鴛!6{.: 52IJͿϵX9CiEi$0bG+*k8eYtZvݝ;d(%Cb{R5 y]1_ݍ D S|ЋE~jQ/5KۯGBZmՋgl:|ey/4NJ- 5ғ#DJ;O_Ӊ"TV#~j`@cf%vqErP'N"IJ x1q!ԉ]Pmx@SO`Hp(9fvRuZm6 |@ $JT+[V͘h oӅ3y#T*g6`藘Jv~Q+HW.m+e08!P JY/%X2oD9?CN孅fҺr@x{\VfD䓨dԃ ) &od(# :[LV? T2zafRe}&y},؅H5X@y@Ŝ:#o騀 lnŦ?5G>-d[HvbR_fUЛA)uֶ9$X|)^yJk)jOc)3'?ji>7Ir#ތ6Ց'h%ؒ9f3>uC93Lo>$'SUפ֞5\=~@ 3w8N]u:Z bIT'1( 886l!K\N<rnC*B-*;3cfq{lg 9~9!D*jf(C2?w^a0iTW $2^XUJ燚MKXs>?H=7. cҨosPPzH t(;=tXG_x}2o+dK1J ≌I"\!ĞFR9B4CЙ(=dDqwչCpQ4T}ȝV㶀xD&{uzuxnxRlZ b-ڮꔂcQ8h0PZ^,*)3*4f;0@]z4k|O)Q2?1>,qAIkebjE'[]{kqL!Qoo؅U^l*|]}cB]ynH2 e|}h/'ƅ~VSw&x{R;5_(b)vBoXMR>eFbuJT/uP[\×3{S⟦`a-k0EyqQq0Mlש׃/֥DtZhfLnJ!EI'O 5 P"OIԷD\5`/ϻV@ ;̋="Һ-|7FKBQr?bh#mɽ]&GЙA~QyTV 0?njQrw61% M ӅFSE6yD/s+TIL^yc x 8gDQ>tZYC#G4V&(*GZƼwfFQi־`z*Rމ)^o$,^;X՚2t,v1ߢ˜B DQB0˒e'^n#9.^--Gx }CAsϢF.vcݪJg*jj/۶U1.D}N#MO,n|ւ&?|ւd6* / Sv7WY\B Iĺ -qu6Q~eU4eۥW>;3`(0$2n{Dž:Nt>i:l10r (ӭyL~& ȯڡZ3<D6rNhdD-)kA\t,Y$۠lf{\enwvbȴ?3,t\*$sfGd.tsm)^aoVds~ hS hVxTn/ߖTPmF\Jyk$T|6lhD?a2YAk3 zPB~hӹvo ?$݀fbDR,q |Ho ծ?z0irt~]>ׂd'X|м(Bp,C@}G0A枅g0x"[%Q/~wV:PUp7a-NW?& Nͨ]ބCoGӵBUݝŨNcP AT(D/f-BNbRyyGԻ( ®Nu^ C²On 6n1FDJ*}̒f) uw 'z`'{fIZB46 2I+,W1 m68mC,go"ʊs!wGqS}xQ4ڻ&.;|11&ȪEpP3yj+ɚ_-.mPxdp[beQSExm̀aq,{x;VҊ; :t/ H[D$qcYZ:Z%Nh:2&~(B~?@HCIU㪵x#`mCG%צ= zXM bֽx 2/&g[fW􌘧1Y1rlPbW^ޗ a=d'6+D^JՍ>a/Oo͏\M`*aA6' l{ЎHз9$B(Ǹ3|T@6L40dN5"&6X)ra|"Xy7T@B]`az,_a pyVo2-]F4b"{t /f>x"i#~81.F$#qſ$ )=)zak`FJfX%!hS p9tL" x%[gb҉Ʒ9@BI:CsbY^V?PWHX u<î@TNdI\2&B Ǩo'Щ~peZ˗K?luF/&ܭM.!x7uptOalYL#2k<5} 84S2=$$oq . c*tdQ<0`aڛp~21Tyޡm5Ya!.v4c=v-oA¬ʇ )6_x\;Dz~.25-J1G:vPts`)4z.޹.sdu Y4fFG3⹵%;xg)a 삷M [|IV 8b,OQU5/{Vg> tE(HQL{<_Ų[aA׭-eLF0s~D@e C1uy-zݴobUvMA3~ TVi]$!%L D/@)vɀgӴun,5J"5Xp.k (2VujY@jTl^s\g v¯PDE.5 t ^~xThW80'GPY>@14`WS Mb~G[SP7r>ԕ0+n:GblsSOVȊ!WD}T<2ήH͟ǣ/KO:U$wuZD>qoDXtAӢ?Qs=?Dng[)"C-ꚌAC8+Où*#)%ۯ6Brc?SYmW\٣Đkчw?9 -(˛j"](s%ER\FWr3b&F{k(Ur*`_tcA坹則Up;c_ Ɛ[`ʣt;3[p}\S/ KA7!B Nfe&U4eĸ. ixs7\AJYN/=gQ3*{#베obj:kxw\rWqD1s ܡꫛ,#ĉTR3xž-Ϋ'R5#B.ibxJ';u1re,< Cأ95O~F#d@1{ZA\@*`:]S:<ЦB6@41(|#o{i {4[v::G~Ho*=R༘!; ^ z_m#,,_' ̾4Fٿ٢[mq]ȵ!20Kk@P-|m#!$ }kws"r*}+)!q%{Fjb/92>ܩ+Eָ(@2cc zwr`(}ʍ 4.A?D5g]2m&h5X>?4ג|bBkWO.OaaKAL0(7aLc%WP#Ie,SwAdi#Wc 'lb=JgmȼP`Q=-l[;lu<ƸfEH2?n*}%5jb$?,΁몳3~}1 {5gPeT~hm2}p\lHL:MOmb-qͦ6FkԿ|\?b6/2Q&L?;mjx]s$%Mw)֋N;h!mG[Q* [[;I[Vj HW|,_#;bDyLΠvmPqwRfv7OztTUIEfTz%k*vE7F, 먭̷fuO=P1 eM"DZY+ THV1-ɇȐn݆}?d&Lf'@O3?RbM]@ij[4뗰= hBxr("/ھ F~-:/Q%2 fuk[U߁N^g~S%cB;U':H!#iSX-r{` RR O/*߂/q~|ʜ&l|(W( -͒YWb/}NFrC6I )Sk8lBX癞h*+‹=qgP%;P8FGkˢ챺|y|6^CX%Yӝ!V{ڭ{gTZ*JBCLI~qylt~ۿwyz)yTi{,6)Nʧ3Kke<=X7Lc$ڞ qE=  ށc7R5QļlۓٚcV$I&gmI˕X {1'Pw!6'UUDy/V4:'jo8l"!#88X|\UȽ?E$b'4- (0׉\;8-wVZ"JߞO%`ſ 8%Ț`:V{2~u#$ETkTK/b dL|;&ʚݥR#n8Ѵ@09ߞ |5+a9C!Wce*,}:_$t*JkƂ?s]=t.,Ev̾pGEZ?Oi4-m/ޟ`Zn k`On֒x I! 7GJriv4Tܮh~T$ЫkZ2.O0 Q^͏u& ? ɣƂK!"Rzt?‚;p~"I4ƶ"LƳ e@{p1Ulj0xmr@@zJQI^2/:,RHd'Afƥ6rIZJaơAWcFJIVŮDU(v?% x1Ԙ!)@!Ȅ.9~[$(6ܧLcgXz"z(;ON $,s֑q{*yUxٯDȲ]#֫ 7rj^2 x?4#LGN 9֬JG ^?ٰ[a|oZ+7wlTI g>LD0RY1ڊ hH`׼qO2Y:.+: hBRo$"X!XF`12 lWS誈\aF zi^'3hDWGWV]=N.f^ڌbwg!,9.w~3ne61?F**ET`..8ѩ犒,\*Jo# sLD3z784y l {4#f sEtt#N/*/-31+h ҘH ׊.Kȝɦ)K'JB}H;8D]K"4;{"e2V+`h5o҇1'uV;a[e+Fwz=ӖT _D%?^谖ikP W\Tp/3\4|Ky5]$vD?5v8AnT1z+jYb@vυr~:`%^v9>֞F~DGfZpJ$J#sc^9#eub\3N>m34--^EZ,71J#jg)Ec.tN%vVy$qyP@ Cst7EǝID-\,wh*nk&"E%^"WC9gJaNO }/_XӯC- 1乿]gAÜ9Mm{36K"(: 0 7d7^74hFN_=NHTnC_H1?2fE|`~86[M} %ż;W:4#d^cV 6?VZf >3#Tya}C'b?@ТEP$ʌ$6񻀭[V л$m6݄0/]1ؼ`D Ͻbz:E?1Pl v|V!9F0v?lDG>Q` SFN(@pZ!s\+p^[S̿vYW9Uc&zhVv}vhv!OuH'H.h|B`0m[|+v۬*ًrgS1+~7cdw=D&Iȩ&$7$uG|A]wM:o5rYuEZ$P\=ҀP$WEt֊T|8Ɉ]1ngJ}-T*C=q90 C SFz NJJBD&i]X[IJ©zc3 qovmAϯՆBk/켫`T50QFvixO=-,,&ULD Ul7L ;B^- Q)`{w^ 1Meֽ4M(79Jmռ'+Ŏ۾HĀ0v^ڹrI6і C{"-KU1Pxx,b09o^wsaS}٩ڕ-5ܟ{FJto8fHy)Kr6H`r"I!sDO4Jk' mqigʕm8B8l_1_%ƞR\*hci%AġT@ۓgLt{4X'X[` m͍#w3C2M[SCPjQo}VRS–x! ݗ k0B0n/ROn `^oZitl%b} KuwHY9UT7v//t!7bX:~C2k!Y8~&5b>Ԅx">~=?'`fQQ♈Kn6Nz}~z s%\b7BŦ(+]SB!:ydob7KW@!5W6uhԤ Xk젥SOD(@eϾ\_tr;yA0;{k+[0,fQ\*%Y%n)sEQG;dpg)6DmocgŴ-[>& ~(`^L#G?#Qf\'_B"նm>j`|ό.-'`۹!d `Ao"3 4xGxL5]8n$:\&r epU'F XD+f qaa&p}S{S- )/Y}=ÜCֺ_( La*oV#bI$yz붧ȎI}Aڸs'}fШ:lVcKZ{~|;~-6et`<(R)ȮCp+SA}vK<Ӻ.%Ycxח0@$]B+ŏ^ ˃p aoB<\C2}W҃9X 'Vʕ%0M4 ,9F g2]:]!TT&80Wȱ:]!g(s. >S&-WDE=Oru&˴1/)%=l^:L<A,ï;UF61\JW{4:/i KNG$ DchC&xgwcǬo.N 6ˉ"i_w{dӥ;G2Xma/q!oa' )필]ÉMMGQKD,5ƈĢwkC^R1ۻҍ+A=zr7v3Mɡs^P Jj$Z5j+ocyN:PˊC4Q[ew?tӔJ!EGtʃ*xoA_,x.W!>i$kL<":M[V%/~]ؚ[{*U$?*͛&Eȧd"N$/'6;lEc\Sވ/XMU:X 1 ̎ #Wܷ1ܴ>s҂)ۉe1p%5 XczK,Mm\#=z-WIퟚL)Ƌ ü3ò![)R`ހХ6]pNAS09PFq%ڪ)]8H^yLeL\[v+F!kcڶՂ8Ҳ #jdGe:v  RwM`2d^d&Yga-SRw7Cy~9uVoFtpmumNKQ]X" 'ڏ`vtVw"B1’i$MA'ǒ@BKx1yMOݢ?kG=5QIf?)-;Nhł, 9NBthl ۔s6N;&KE! 0~2XOkZ60-j$ X05R?A]AY<풬w.,3b|rdzeϐVa/fiv9n2#y&A 樓-|6QGEEt ܦs^ͷ mtsOGg\[&Ob!H0='!*H"ݏKzxB~ J!sLϖbo28({ u+>ٟN-똭sCh층NfUa95<xAD.m&<'b3@ HuaZ\%kddZ[CS_t) &ahbhDQ>K^(_ꅾA9e>Vn1'ic{˂+שFB.H+@h;Ea tgen"HNh :4vh Ga6Z)ql ŜӫƮ}h"q#D3C`[D&S) V\t)ۦ}{[qx0C>\60a ֲMkҴ ,@ay'~ϱMd?ޥ؅;B1Hs)0T]w,!vQW8GZw!㠌'#0 3:o3.ڋb_xTϋA> ^UdJg^c' <{c8 Dra= qj\z}vMt+hNHO"8 d Ym,=gלhIS;VFj^J~D(/>K-Fn=fC-0/JP5碈աO9[P&;=v}vqo ;^sntOG?G'/w aIL@$C?vfz+!'z! ^|2-dĘƉXa5!aĉq_)]U#ϱ+ C+Btӵv$,v>.9K-]*C5 N)4B! x$*.+'zy"U&cEs3;1i5r~|1@|XÀ:lGӠdIN\QaMg4R<~Vb:8NB6c*B$6KI9c>*Bjs&ce(-ߺ2WN~ li} s j}2V='쿴j>M [/Nh_3<IH\uJpЙgDE䁿fwdǽ",6N@\Ip?$\#_ x u1sy($-hdQSE_VN+kC($xF v>DCewx g=魜;RBhXGգh L8!o6rl50%b1mݴQ]\.{酧tv7K 56;M[C廸h#ӃNd3~Mv=dhL=NJ1VObv+kDԓo%x-9[;u@YPT#qT}6Ȧ74֋mU22YDp׉q;\>^@m-WNjFՂgTE|hs c2wPw9gݢ}]eFPh4 ~+K1k`Ue1KZu50cws7 'p>l܂s;F8S',rq0H;"B팂)t2Uu(#nIwi,h vYJ$t^5腹|1'OxD]%)h^/bG f5}fv>~}+^uz VQ J|D]UV?h|m7} ! {7{t+ZTVPU?l!=> #L%4ZmG/ FlJh<N8U4| 3#&U1vӟ\iqDɗ=-)& o[y[S"aN%9GΏ g&  2(_\/amA,C+ usg$ڰrJ+l'p._?i0],t͹g`|8WNQvTpMـ@=5jHqKPĦ@Rq췆y E0Iz\4?0P^&{ F[2sZ|QG%xT=OwQbt:L[vJ\H|ƥ[Y!Cș%,؏ t*X/r(8:ёq9r^5f^R]fGhH /g.vSGPƅ2Qu3Fgb j9 {TQpa-Ї3(@DDCYb~qޝ|%ѷܽnĿ+a ws^8Rzh?5HbhlV^ͅiu\?vLPڂf{V ,# ~+ !jҞיʃG3|184uоJ0Akn58Y8okB-VK y?)fbxVTϓ#%2ʻ#o]]-Gn(ShHz`O(rⲀG?;)H' !"T\~ Li`'y>f+pH]%RI s|I|[ (Y1u& hc\Ov%ྜKyK3o q,#_/D]=Ѫ,B*60I£w5x  *7Ȓ$}<wV]х}C5=02~1JnuVYNy hcءykOJQ_CL_گ\U _̜ rUu15>,!CX]"֕$B1Toق(q]U^`E>/+::@ cptwufᕦ>R߅gY ߺ$ݏ^:~=EaT9 lբumVT~tZk?c H B3KAy2;C t5"xN03HU73/l*s/J2esB F&Z<<P\_z-`ee{E19tPTz>F dj'B▹}$ɅG)=5? k8 )0 WK.N'ˀV}U=.B$'^ҰixcVt eP9pT V 3VhFu HӒng 5ol]Lo(bh{4. .Vǘ?5g6"n3E0"Q4՛ T'3U<a߷KdHN_Si!ÇMV\fpz`BWYg験 }f2d%S: ]}o/rIl{B/)u% GAl>[Q9l QQA)=+"mOҧF3bd&vZ(|ކb#8e:3栳$gֵ`EeBNfIZ:!~4#_ uxT}l Fs~meh]sQ@3`XY՚U߆9yhvx214+RglElNSѥqVnУW90qaU/v[fJ_9DHP" =h22_@;e呵q& G03,ծ9On:'gy"w꘻e?G3(ģ|;6Y6][WikRMlUڋ0_F /]ۙikDL_%orӷ+H8E,E1q1uv(Mnb.p 㫭2[SL&Z +[":L{8⋨JO{b앏$^v*fbE}1:)<|YߌATѨb>u׊R7ň=c:@'%W^t t{(7 ;)4jvD"Fޠ;F=M)p|CA>@z*L*c]QYAOx[t!̔(nν2UaLܲS !`xCy|M?QZKiՃ-{$lTgʤyTB!u݋JY!F~vfW HoY6[uWtcTA >XQKEQ&e!"KQt_lqllο ͞"))"҄JN.bi{[ ^4{,3 VdO\+KFgx&ٛ D4lt2s_daotFV_UN6gwgg.jßddm(E1iOb`_lɑ W<ܲQ{>0վ/oD3?6D4WB/2*+3@Axr;p5vXy,ndhBxMNG֎L7&]u,. ϽuC^V7d6by #yM tvtdyKpB16nˋ7X_VϷj{dՁWUNrpP?q^}w&2\4-E}ha|ȅ+T~@+d'(~8w'u@i}hٿd"C LHZ^Ȧ5Ka\DMVrWDAFP_1/T\%cJ_Ysjp]&!3CgF[ ]E*_SK]5oPjxm@Z#zٹe(&h.!ۧO46 O:'T!{\0ֻ#;Ҡh$&K\ pL=ݶ,2,e{ ܲUi/J=m0yxz$Ik;+F!*ׇ MWaE)ttPG(񡬡r8݁%`%=fDzOJB%P|kB\IF$ ^H1$Jey7cA`K]:wg'~Dn1"b >Bݕr>2`ժ44[Yccǥ,tB7J[\/~'] 1'CKtR~&BΏYpG&YnIh \6n}OSC0HGo(]ITb%rH3S b\8otd{Po.@-;54߲Ǧn"niftz~,M.:TkE?iDWLjw$d:(2x1~={[C{rc2!S奠Q B@x)GuqIBT LCwI4Qܝ[5 t5 }߃P|D#ng=[P OoOivjD0}N)x>sQG#iq@&c/x[. $2ᩞ4϶!~]HTذgJ6ؿ n5쑱{t%гL8ZHjؤ QKl;S 9_ >}6YG9'b̙(Zy2r~ecjT/\DZ1S^*KI9t9X X_qyvGΠ8}G7f1bX|=E:Nyð%Ӧ/srPח ^ۼ&uslvGǚ `80AIXc' w$|Sf:$o( 4X!uV7,>+? Ⱥ0ҁW_wx&-0RZ\C+c]5GF) 1ӧ0&t85㞾 A,Xx-/Xl( 2b"f6lcϳ:}4Cڦ:+(j93R?Bg%5$6dŶV6oxXƒ}4LZ ml'އ?|~s"EäwkWO%Xo̶_"p[&+(po>:2kgj ~=+`~h~]9&l28wKEp>YcvK),%>KkǐpMs^I(nb E@m51@Զz|6V*99T̶f~+2/05Z &1 L|<YJm=R .qM>P& OK+z} Z`=%ۘ- } X\!꤬?r:>p)p3<<kӐxp)AQjϋK?,WӁI)N'*t_Թ*W">jO0yVs "Ưz9{]:(SugJ.RM"kسވA)Zr1w=3w\h`I./6&NN+ ◡[+(my!JD5NFLڋ̪ŎWԁEMZf F(7e$a[9-L(tr8~] x#~_^Xyf|kd0Tޯ>gd!%`:?FmmMdՔΛ(ӞE%|$$,[qaTomY,=pryՉ蜂&uQblZP.jtYx:yȢk768:vy[hd8Mk:sdOdЯ[DQ}(bJ@{['jFҡo#g3r))%;3A3Ac\-^o2Yg-BUNI68sH`.d= #Ӛ݆'bFVx0CyN8ywݗ9KPiLÌB _'P|e-2]T I]TCPfey18F]Rj° 18g['do&.EW'!y `@ %3ɃWoa\/UFB,jv R8 rv`Tz_'R0Eo{g\'H9'>Ѥ!i(ǭ k^1f{3?wL2c$0/r9Wчfhb~V|$,zcm"`cɥRg7w@wgTUYm[?CL$ R(:]oXn}As|_Ssc3bnZydZ]pءĵ,DCpFͪ1ȉ>DjoUTO@ @KjЋnZ\,ySԈ!Ew<ฝ_;Gh]gcJQVxHgxP~Oƨ3dh"bO?~  JZ0KA<߱9C8:gY=] 6'ni@l8k9 ѱBIAsMy}"IPO~u0~ m,+q]Ti)*8n\}?=/ ^DCR7YTpsߪI;!*憓4 RT9bP}$%ڋ |kQ"a`_=s1ƾ\= J(S@MF/b7/po)mjpb29v+NsXFzHJ r& Rgs@86ܙjp}70v+ij4vXE"f>7,sN.-#_DU}7駞TVIP/]hw'7r NH"]u~Ӈ`)?;_$*chLU!o.rj9W#z`kM3d0HOΉH&$-3#䑐Z>iGL'N)?'K$70DwxXӿZKO m<D$.fcc٫ ocF[dEj\Wk`w1MCԏ1KaUqe(AjĒ[xt²cI0??]]$._'OWџ:Au:έ[)(`$-V\qI!o-OWզkiQ71Ob78q% kxs(㨗aWzsPƙdt-?0=>!*Pu= jqFPUStʽK"Yc]ap% -͓^Oن},o9>{I^IYt} "#gS M?Ŭ}ꃻnNގBplQtxoF?keƓ0_zXtн'XqзNGCX]킄n/W`j_`Dw\ӗc1T%UX:H<0H8nN8KTҨzmXH^UO'^Thb}QL漈HRB+ı)QzlDia,{.uXVH{%:5|Ò4 ~}s-bZM?`U%oA0-4~bI:X/5+T]k[9Jg\ZNGʊ\Ns0=t_᙮Nkx aUA˵o W@'Ll\ Eo5^wS^I >1Zm$tH ih%*#UXhZX3baT&*DT[OC5=* V}5@ޓ\B~ 1S6&_%o ӺCEaWDS^T9n<("r;b6eSL!a"0ƕenT̈́NMtT@$r#.ȡ.|TxQ#_׶"6RA=qBZVfI.zȾɴ)BQX#Nb66aWG5\G֟`!|9<: ƕӄ邹V0MZZsf^ZOQS8}rnbjll.MKo{pX\k׉ ZiTq. 쏳P8UHuAڮj"&"h &IQe/,6ȇ}#z-j/~AP.@V/v,~_@[UkX&(lP&Ll+Ѩ@a$먫W*[5O.L{kw}tu}@~[x $5?Vh!!']ȫUX" α I3N˖F"qoUtG/-n5 A=jq׎߯;=Egwڹ n69$ Dj2%.(ZQT4QҐTCt 7!Dbz76ሶ ,&ZXZtdtZm]09Ӎs.t!i`gi9@u<(:Ò?!ɖ+}ǘ|ֵc=RFm@)aN,kVVaJJֈ6a R"d/5@ڨ׏_okQ/&*zإ m=S5wg_ݽߚEIxMR;iGBf-Boz⪠Ih>f^WIouV~HVSbwT[3ƛ.Z蕷Xg2?櫚VBKQxJO0FJ A낄 &lJAhi@IGV-+LfĬuG Wg+l~Qس[Du*L X8fp@١ϭ-3* ֊derQK{SK1/w=G#{R=)1Qy~cvjd}+/cFA?g1}nTFvu3USA)~$]T[S L&. JTw=\P b{z/)~S$R8c;lf zeq"ubȿN}3 ގ e\);?s7M*:c3pDs|?JZ3(c%@5A': O^{Yaw5ܬo%'TvHgE-H )=(bI6',-o![-wV+DC?Nw%z;;0rGa+XrBIdS)| N􊖛(ˍx2IĴ1i<[\tE-hMwRп!0BUtt8>ʼPYblc%P7ZJ22I]!xrv8K$zFL9iQMbM@3M~Gw˓6ԏ{k|I<Y%ILAX|C" ' U@:Sɺl 6WNhYo? Yb\%7ך@41XqctEr8M_QOY;z4cY8ǘ<jAkRy(UahTej8bF梬Š󣇶ƛPB2uAAgӯ "|Т}~Ԛ90E>U|~1ݞ<*b=\jf'> W?G*np&$KI,EOZYJo'd9>sAMƢE2]>)F2c. 0Rؕ#B~ժg$?{YRV;2~ `l@0p#lt"`ш6 HYerԸQm% "d_u144Mg(M#(΢~ #cӈ3MP_8~l򂶰?ϳlި]c|KP7;O>Z@v9]oNG%gc>dSQPu'ICpl&RkP:f҆Kə%}yfqH+w2`e1%` ЍP"igoDxm(%G܆0du©oJ"S^so wYVx ]>_VN6eۢ;Gf5Cr +[LXz5Җԭp~Z0#-CT eQ`dI&YTKmf׏CA ;@&8ʂ :.|٥S 1y-[+/s&M _EP?g@A#4@;=k"lqsIQ^YXY29B`pqIj3a.C#(E vW8s-QK̔+۲:"a\_6IdLc) B.\=j}yfE] Hk5E@c`w |2أ).Q"[̀K:l':!\gOD} R~86h%pΟNٰ,wFuΪ́@wS~K ݯt4qEi`dMry]sWx >MkxDvAK'u0|8@ JNJ#Ca~VU3aolaΔ؟ߚNg e]AZj5K}17ԏ/ U_)ҔE@oeQByuWiQW[>,Pl¸\L4 j=Qم`<(trO銊T֝I:G ԇT`Ͷlo&jOk)j4'W/̒#/.ԋ\EwAM?i;ҙgvW=0TĴs)SщDHWxGWts)8C_0x`H.?P`sQ™q ˽gmP~o)}Rl)FP"݈bk (iK9 >t쁞|nD]s:ݬ4|m g>=i؞*© 7&{D8U:ɧ ANeC,}a?550Mr5ѱ&Lwd $KkimS`A | _2<2ތWZN  Gh(>N>渉~oKM| 7;Ϛ؀YEw"v:qD,Lʃm'qC`ILFyyP*d,`} "gڈƗ)G+{ -n]#~Iֹ"~G3)pYT6̼hY]wG`lsX477VS;ÐC4)9X0&ؗ=g)YxGL+.rwWXs9AwiW5M|v O|P,:a)9W}o࿋n;| 6n0a2~ +?[*f4h\z/O&rb s. rWCs2ouE=;ps,Z 9R2@61-/lJL4'^)oZD֣Qe,筍k:$wm[jhA^xW+;!`,t % ڗ+ҵ ɟ|J604[ݟ.f̂#2?N]ۺ. z>^.jlK G&#D[dIȠչt LY8/5 &^}A*݈C(T7]*;3h iu~FV\.|А؃nψpg̯K*.6z4YIvֳU3?|ɿ@X9o*o>jځnq2Rϐ! jמW!HIuA (< :T[nx@>RHst`|96HZl+uz2;#NYN^Oeƾ6m\RideN"+v/lE{$\TYpi[HPY<ZpzY8w;<(gՙ#Ƭii~r7t~9fO AeaE JL Xry}s"RnHr˂J! 3Ulrǝ|"|=a@6DYvʻ׀5NhM/_tȾrCswzg[M3;zFZpl_Zse@e'#?:%杼?.'g*9ڨ H۾ ribUMݑ_}X\?[>8-.v.r+&ndG. PFDjM|!xˤlS UTi%m)Ht[Txy1`SIh!418)]2~Ӽz*綂wVnu SPɘ`$a:*{ظ uV5rMx%bА1H=! lhG BysFУI Ϭ+^&vi,4gg"BޞD ]ܑRu}=i Z=z#>@4AJz;f3+f:A,VlS4-/k-;63\YK\4P Ok!YIfۥ7rk'w(3gѫe8^)9xBq`wQ<}8yE%NػOhF`0(Ҕh:7V.4?2=v^M$OOQE6k5S-pOի]NK6J/

PX A(G%ѵA{:e|B߅\>}#W;wĶ}A<|">LBzZpuq@: Lޣ*sBJ"_Cx>☑Z1mFtDie4Y)'.بlsVQbz}AAs#Z{wb.lh$k| h>b$ RO| |<!aL~CxF’'5DF3_ECpk%sU/-fAvpo<6'fٳ$ \D<)O័yh#"LF7ك^iҷUxe/,,Vr^)|5C2+'f-]1L:9;nGc*a3 cP|{30\H,wgba&!4R gp/EJzħ㻂c-ڟ4xd}CEe3cj,ޙ,]jWºg|*'ye\1Z _2}Z 6`Q$NHXʧ/*ˠ#?LT&K𒏦4̮UtcR!7J㾈Ľ `C xD%`&Suű`զDi |(ZKLbmęE6lhգ?^,MG<ƶa 0WhC c;3u(HY." X6 '4]ָ&--CAixVz/>%BR`kl?1v@E"b24G} v63DapR;1+#y.$:\ .1/_>tj}>_8;Pl|=* :bU\0̊0&&K+ M? ]eg뗿8F sw }~oqpA'IQ/x)@A.B KI:եa{BvVv~/WS 8¼ I|(kC+_p 5V̡ * V<-v 96מfdy4nmyڅZY\) y:(Ƞ~B*iL w eTN$ZYGaGZ$_ݮh @}s)%kA1z0vj\68WFUz;]{oȵX}bܴqtGϩ\wsX\:18k} bqz^I)dJI15Wb D,֘gN4xӘ .'7+I_mxﲚ/TjAB뽋!n:;|&Ԭj;ĉD롿T yް"|^4; 7Ԋ3A`O ~S~Tl#yU*ꆣt \6f fMȔ5msxݽ(n a%-?ֶE zMNLH`=iI͇5>YUEC)TKЯp&K4?ۇ 8z~n:,KTMqжv>EoMh{zLq&<@C->%1ؿȹj_[s@mǯl/_kg(_5+ܿ19|nYLDU%m{m?9Р;G}gB1G٥s;{g;{y YU{Lj '|1vXi9 C\n\Z%&t}>'2pRFA1A/E;Ea1/A2 \*: N6=VGH6@{Y >jčLCGV(',"R<]3qmP \ӆY u՝Z PWW-}:9K;&(W?eKF|K\wS Z–7l \f*"PՅqu nf!qoScT}V2af, fp~Jk&jT=- %VOT&"T-ȧnD=ٔأ䮺uD >M,xrwK 1cOoFS`[٪15ԗ:=~B&p 9aYך()}E$ۼATGP}l@i鯃ECFykY3r ˺m+YgE}JR`??bǸNWx7ty"xlhbK]:t]Cŵ_µPgj yϵLAdc|]6r訚o^khմ9eb(֕^/lˍ0-bRAC9jpә*|؂cP%sH}$DڰkTFc@zZj\7|󂻀>g|ɯ)?ABqd?D2bIZDщhNLf87ojkv{Zor:<%m]-UV`K+] ,-OJ`z 'x3i4@;"S|#  Шiby-{ˆ`LAMzTK.Kou!Yei*p P ܨteLPL&JF/zQM Q9k8*`sRB Hwb[Scx. hMia9P`Ij$Gjҗ%P)퐳m"Af(.Xd~$նҍUEIΔnms N=PK ƨtNSymubGK6#@`NP#8|>;/BEKE|!r N%nxUp.e#XB/Y0;q__ٱy`BJI ̀q(rP R?KPI.t6r+[z=>NV_Q3bbKxc8}w7M{ۣY6[(mGߢ iaH#P+dƪ|O>bf'±ǒA F[Z6w@-o\YinJҷdh~`܄pΒr/*EAT>{ e"Sv/8z4GB @KZ2#›gb)A ({z;TN,~ 5V8\鍔$?N6à @h&H 7IaOXm,@AE2"y(F%VGvb |~5)rN/ }0+Z,\lLt/3j5>zv;:՛UfI:(Fz&xo4W<<ʡǺ3S)#0sҶT7!;S ;"g9CyC@ք%_[}\/?> 6ϻd*gZG7+LݗEbo?K:3LYÀ̗&+So,K6_:"4onB)6Xh8F=EzߣyB@3+wIkmV!>YmVڂɮ8Sըy5Ɉa>9ʼ`GKڡ6O8k}icm 5/`8mW)1ȯ])JŌ4SVJYG{Qm_4˧ԇ`K9pfsybK!f.&khbR` xMЧWt9-=2o 1aGxvul;[9Z Wt@⨪lQa:Fʶz.ƃڰ|CEK4Ñ\BHk:L\9HKSNW&*z=$&mIml"r֌UOMD.\PzTif~qKNGڻo HK$wGuLvFrvo/hmq W2p1 Gʸ ab[ш,Xj?Pf许ypCWavV_t<{T/H{t#~i;pxCUV~l#̔# ^hY;,Au>r`g]\B\pm\iԙ5a][nX`H"&}C0X}HT \K0 v!il(֣_]ЛU,( AmUeGؚdWD&k/W hoPm1356mIHY7b:X‹mG }m1n5 A#s;*}8)sGPnOQ/aqVQ( 'ؖ;}?::2Fu}tjR5B"l;}<qͼԽQ>+]h ^sX2WkI&Vcbo?6޴oB?j\9΢ӝ<_5o5y~qn;`~vi%"I뎡H(0D#>~?jATN%? 1iR?єsYFu ̊/y!`6RH Irĸi|i%7 ?.89`DM?Bor "OVN_b1#SmMh饏S8fkE[vs菨sUFȞljמMR9k9* U Vb::@rR۫d),r-hSsI@yZj#bEUYTV'KE98!c,Mw@O^pU2f7? ! ?X ohz𖀤Iywzb#ux[QǿG΢U`C݈|R!Ez47=lkPk,s7!j8+)"c=*>}mO3\-LCEM5 X(WV<>! }Qo'ut9nõbBT~Li, TqtrHf~:J|= (=! q?}j3Q[CN A\/qdgx85sJ- 4YZ+u]z9$rg6Bޫ _՟P;0}߫qb\ o" Xc:kEGۋD4{vYQ]zUC TS-hv,ƨ7d3y@[0 0omdv)5]qzaDAL{x\6淸/:`ڪ_ĵmJep\CG t&]09eK&=XG1k@?z.B -(azE]h-:GC%6t>'q$ <5eSu$nx%F^`iS$PsW۱nqX-`&g;J/eg␚i3DKIPD"+樦 nNBߺ1mz[k+Mع_G(ĎESf{Z68I[oS;^2/ہ wӤOٿ>JQ$€񉮶{&rՊQɂss6m'ӯek[x2P!^Ht|Gy~"`Wr^qfH{Su D) r)>~øpCME6/c/pRYX5m}WxfyX_ -̷XvAV٩ˠ# KQD FaaE(Az,邲+2N3a/AUDOCHR|ykcECd続)J ,d->Sت< ;|Buf=Uk11j  7&*ӱzoL.; WE%n.fXj Dk"@Dr_:b]\|VHkO׻P EDm DQ^OM.U,4gLo|?4 \G38ճou*.v,)Cߚ9xf~GhӼ!@thҩ떂9. fs~bhpqw{.|Ňq\:ٰ^^jl@;gAoRDpj`La͢niSV^#P1 "ALXq4\9Z]4 -{{cT0B.TEJI_q&=Ә"zհc΄[!ɂ<:E&<)ugM5̭A~C:_(6}>C\:a#3lzD.%(/4N)\lbͣ[D>BiEgEleJD9p]@OB][,S%XuU,`'W~vEMi ؜Ap+WjS 24JX/oֽ$rko. u{S0 H`ajF~g`qI.#<Df+Ѻ>~@.!e6F8(|m~^"2z+MڗX@5w6VJ>1룬S'i_/%+fq` {r+H%_Z+erB5ijYg3c<Sz5x/đ{JgJDN[OсQh3M; q_$!nh֧SϐF~",I2)OXaZyBx=x LJV:qv+(UMϾdC"n}>h *+*k c*L Ht.XNN^+VX|@Z0EH' k~)ʤr)PΆfsW/̖fε.ZZ=|%EQހJ2FI:}Ҟ;ԋmhf nVT6@ΘS&>&ُ7,-ʺ|fbk@F2PI|y,|3ClvNrJӨÁIX Og$*毷TsSC$շ{ ~7JB"] ֥_X+n4"o1K>|3el |kDoMҲ{ÕCx .=-f9n=;dr&Zϻ!nDŽ2Vt_DIj;ig( Eڦo6(+䙅|jcϫ7"AZ(U$p35Yn3(篴!+ƽ(*{{?u@սSE5^.,d D2Fm;[{g-ӮFcvtz`SAcINwJlP ؊sj$.zsP׀A'ib˸$Odv%2.k7^Ѭu%'V!ʘB UVCH)|Xܿs7 3طlant;xp*eM~e̸y l0LB\$oTskprx\cț~u˪Ď{{4cSj%G9 2:vҡCRj|8rmV3V`LH^:''#:qcHfT,a8+ }>rLRq&~tw/ח7\z4 !f&s/K O^g؟ xŘF:i&+$f u6C wB,LH/p]zT6|)\BG52G˙xK),'_GrQ,)DB sf9kgGc1I0]~gXrꃥoQtS߼x뇇~Hcj+KPԷ^b&03^"}j}7 "eu!jG&S\>=R|b~+&?4˰V2M ]eޟ|Co IJ AUd "'Q6~qbG盽!-:T6컶qR &V_F~T,e> * ~zic|@ˁa5#s\1!1wFv<ʫ+V#)?5d]%+=.)P8 C"uȲd&˥6]t'ǭVO])D4pJHF4KB^I鏋Wه<{S0^3b9$K@WBU6;.rșGnoYmj0vq⯶9MH,q<-8M "xY8Wn|$)߻h@`xPp+tQK\;t3Ϛm\{H2md{I(^::qjè `w4 vn.@z_+_7;xG>aI׀Dkq[f%b|QNv3>0\NTqs_/)}_NQ,-J?y[dK! I!(|j0@$wGzi׬g~?97 Θ}6luQ ┰?+)UzP5CtnJO{(*cVGK:#  {&=o./h}.ZWHȟÈ%*RI 2dP+쐁@k6)LEB_SIJ_8bbzc\c^JIӽǟi"!Lǻ=.1!0Ծq\ /5Bl9v\WϻC@yTYQ;cx=ZFdT(e*kF=[nZ?PTd֗p]2j Fޅ6Y]H̰۠ގzJIK:MRx gagqBN,|8nwRڔ4NVv]@:W{CUdGA_4~I~3}6XWo  IT&[)=gJ(.ܥb>.Eq٨eA!OFIe hɟ:v vj |2c„7;E}umj[r/rj8Yk5gI=)>J_Dփ&C-˛} !}F4)i,+lU5A +|2R; #E +t';q-Л0>5s}Pr4+=K !ނ=>%nfzW늪s'hlFWdKdNjcj|pY>\6U fBvbSJZ}+_AB= G +q*5a0A`mlZK* b \~ ʗ- ֵsm܎ސW6 {X'59 X|EEԨZ`//E@sǂ4ăŘC(= T$ ZrKEYQ5@7Va) (RlB{Q5!&ðg׽avu9*(Dc$;5JVO<6  G̏%;z.#2E!1CPBN'y=q0bIqa;CvHK}0dQ@\{h#UƱyIL;[=| @0h(2w(:S-._DU#80ZUIa ͎~R=65CPZs\HP\Eha7R+25˕\k#3TP /'Ԓk65_PB##K(%ZPxz:Vlrɇhip>{cΕ#7"L|2IMF3+G+xcفc#|T\1Sxyt2y#Xn #+c^iO 0eBb8*KXhJox3< m@W| D$ /ōB.ɩ\2dg`VZ߄w ݋,I S9J{T TR" -dycXLYo`!/.7渕*Le<>{ LI>Ttmt澊6.ǘXA xտ6]N5Wm"Io鷋6hq^DXUi!)D7˷Eg(|Ң2/@ᢹ{P~}cVG/ Kf(,>AD|m٨uI}rvA송;5ntcpmCcV$;sհ:Kg8\i؄j9N^C\aI#;8v=@c&pg[D1FUfS´;ީf<]sE u֋ps"Ay19=)GI<7Je[YӒԃsLzOtgA :Na BݤD+fWWhnvEvfQ`0 v)Wk֑Z_[K{ӼHV !߃%&4\٢Qk5#f^=wNOݸ; 3krٖ Q2]~^08r}G!iަb dxc`8p~S&=Yfܕ_\ X{NɞۄCGyŠKJo|p{`EZ8rP jd"K.T1XjRwJ[3QY -cŪY*F\bh$hz56hg~#c\E߹fJ\"@p@lԮ"@m1B쭇X浑iZXEZ50 Σs^q^"B z3Y% k@kęV3WO0bYIߔWz;i!C2!ah1w8R5MVG0> ߥyC\zׅiϔs&)Eq5j,S[)$A/F^ e؋y׺EgSiDnyvO)k$RqB.Ƴ]3H<Z]8}EFI3Vcg >`&%ܽZo˘ ۣ*;⊭hs,jS̀1ihU i1'1tnq ]':H%&$Y^_zތũ|*{5֐"нCFLd *vbH\IBwrfCq! 6@e$y""'pR>\Qc|oX 7Ze>~]PPg{Y,sى w _1K"}r6{.[֊lRs18/Y/QАKwOCENӁ*$ VGNU[,] L9Cc '@r7k UoDž{`Cds_[fW+3 mD'y?MJ`O_j2rAk }&G!i#Xk4WmH2M&).m{USk'}P޵XFq*E2EJæT8Փw; 2 Be-U4[,X:.gfm `|E=6=Snj'c"zvtğD2>u ,_:rvl mp 7uy V=ev%N d;sPH?ߌŸ}mR6jY%\ M02\m-)MHA vɅ%Ǐde6.#;M5(vf%K'Jêց˷~x;WB36\,B&q캨"t0J.-ǺNgN/t3rӕpczT4!6h)h6ؽ&[>? ? )3f/@D#OGc|@?x Jhiѳ*d#~V&6Dֆ.kAr3Rkx XL*6Bפ[`Z;\yRwZJ_ʄtVa`z+lZSض>кt";lV<K QGlt4ul6ÙqT}MFj'cOe@?,kmdJӻE|M?TϬ4^xN..~WB6&JU|Y|ѸwnUjB@?2xxq4Sѧ\xB0MK[X׎5 6Zh)@QCvv4pЂ1k/ՌNu-T^ٕG/E{j>{VPAoS>b%U$-Ao͗j i.Dzń9omQj_zdU/WP\?c}ߟU0L nD x C#6ԂW/ʶ Da( NnϼVC"EZ#J{uǿf-~D!jlɧpKN%)u/?y'պbG14ͼ;a#{%tHAmecb}`+3 3y[EyKXJXc` "iKY㞁4m,1ۡ&cxQNZFdV" ^6kL'u;>bYz6,bvWx\u@0ՃMS4(׵E10.ɼT'A[Xϧ{g{ e{OK{Zvd9m6X5[ҕꆕd+NP;r䞼gRД0HNX{Yu˥c]{ikj) PI}mBó7z Я_ 1q N-#xA9UTjs' '8ɾC.MHip璩K?$CM mSnVpK(U&KPE׺2_DBq!>{Ti-R>;aC|߻ɗZdD)6#}MdF}cZX&m/mʍm#X:O'Zv ǔo06.fo+\Wa =8ũXyWu3LN;Ud &w,^B%mZdkKPh!V"Vۘ ʯG3-kYׂbgBgPUB>]{(j^w INfSНaƩJhq.i޸M|e@N:pf(ZIzY @9nPen"Xƪ+ü*qìL/a41Ԫm3qc \'bTAw܅DmvP@[x4YlfYS'| u`*C%ދ5z3TG?ˬd+ uhn3oVJPUv$W{s& 1F 5&Mz6s@95E9L="ȀUUpIzi}'ĕ-[-'C,$]ΌЧh!=:@2K]r+!G0l΢_ޖxb88d8E:n}HR" )FxdG?q-_b' ּ5Ssors.M2?{B y-p!Ou ~ $ w 10I{@/Cs"$hO?-j6H+RŖ&}&K9`r5\Mfp_<pyIʶ9a~8 A&#> < z&?b {90A 6HqjPx-e37{ .>[V]ˌGX_ r4['_a:7m /-.ZUf?rDzΩ8`b;J*gXma> '%rҙR3OMHXd^^d:|PKQc!ػnѕ3Ъ-v5„eQ 5| LdvWVxDWRu& GO" _n5+&0 &(/K\]t,?C_kmS0{o8ZJбwMa+Xv :K G$SK:HfbQK>"ץ/; ZJb3FQ#T>:CV+"=[5 e"Ar^88uZ{*^mHC6rͨsiy6Pk:)xDҊݶteW ]#oԥK Q'p:jS '1T.IJ|A12/1;'nJ >aEt<7 /oQ;Wjk47&WB"ҫebql50Vh&tUu=7w9̖|yPÎ>`760W 1 D3>6gp ADvdm6lyw(WKn$818KCƽ$'❪fui DaA 2nmcA0.K;bÔ7PR^?n>$_>3G.0Q@{^QC{I%$~5c7$کsc Z5W:Zz T@i3 ٣C6k&هPER0>}wyeՏ1`77t|0kOaMU(Rq%M@B }N2OEM a!q m4 dh&w/L_y7z,rO ޒƯ =sa"R*viGk9E 4\-bA9\$U>%KI]ʟ ^NՆ!xkڧwv&:i}VIыov 9t{RI0 HD`΄4$W#I,te2k،/Wfx]saiN%,E0n^xw|qA5Tf #Y*t2kJCk x+!|t;f}7[91Kv" kNފda5Lo.YAoG}r=@TtsEƄ+G7 Nҕ gs !dBa~p I gĹ0\J*c Oov_3Lu Szp~j ї|I%Ib>(Za Էd6NkH$`.﮳3rbV||FovQ*"k2V3;?FWO'~璏muU92{t'AsClkXb`6@Mi=#kWNbҋd˶UӷzXU-v9PJS_<zvy]94ёEV7Hg?8ls>T('/PB@u7*d6Ap!Ϟ/pY!_.D\*g 48DX7;Px{boA5 [`ų*/#EGWN6rx:0zG,Gs[x~Xk^F?/pb C'=3`WAջ$gpeh:lbEɄ6N>[v!$5R3nb3dQ(Z9FY7D0jjO?=ִfen[s[B_誖h}W8 GfOyDӖF90Lӭ p߂mb\: mm9B7R7Viu6ϹDZO>e M$m+n^J$cO6V 1cJqD]</ My|T7+185EXi&|>\"źCr"R_AY(1Oj<(Sžj#z˘̀ig[aSh Z>&륔. Fn=eW2c%!.(r Azk;dGӺDmC C%+VOloXN>I@46, SC{Ad nE|9=%2eUxO89cG;"CzzUl =r)m$z*g*k2uߺdΜ|3T6F(B4$NT!"QgQTL9[0 ?U_%MuYwdd^ CaˍHYvJ]wM/Pr6鸯C֗ms Di~ lP XÌ/v4fkq…EP dogOOf/4YG>gu>]' Ah)P!Mvo_ثOs5ՠua~G{AHV5~灆RHr/w5#.1ղwl ;A|yo w_Z6Tk"> y$L"tYӻ7HљXieT~h"~} @Oa{kc3ivs2gPP۱hiBX|3ϸB _ 8 ZoBx7Gmijh;J9ݎTx|n2W-: ]JDA=zaj@Yng~񔺆TYf@}ϭ 7˃GdSE %Ŀ0:̈af;Z9b)oҥ(u=G br'o^IP095_nLY?(bt0;裚'= OE.5Gb %Ñc_uT q|5WPDh J A`J$#9 ty0)]rR * K2G={*["`B ?Ŵ#;wu>omR"*WXXު/wx:w,(Á ey錇{ ,ҳ/f4h}5~8yRs٤z|]JBr ^c$*! 'AhNu g㫡Kq$\p E8kio&.oIF:5h zBQ\gk8D?L@WNj6'8oVY$R ̌X) Ռjߟ~XސL$|sr5`#rLx^~A|H%ŲjOQ 9A|U-4ZY'6~zTØ J{,p}VHhS_d%CАjQ ow &SMER#-;!0YDzCޫFX/dl6SF(n)]V?#:xD.8tH'I})Xzth@wMӴscE%9ME`_-_3T^HY@!4{o ev^I4d/߆^e8&z9#ڰgmb2j/٥N>Osڔʟ3c{7hB;n 26}L{60oZCR~yi t>kq3!aEY:ST%v9k%UP&/vfju;H$csDhCEeH\"Ӧڇ?A39_=DUY[ fA*rB(i'gcɽ| >H-w oX C+IpޛE@v}{3)]=Oen߰Z'yJp5* `_&vF@dCR-$0XfD2\Rs3H VSbj4-'3ZbfÑXh#apYY,:C(c;Ep6,a}f32QySrs%:YS'.sWm)Xe+]\APJU{-rC`I*ghL܅(anGpkM n1cM' kP*PcVmhAЮ9u(O>/N UCESS7Oc7H,,c1u l*y띇]{{YKA:qsN_ c(B#@~u s/7D2Ti2@ɔE'9V5Xp&@&+N3+AeF.*"wyU,,?owe:9p.UhsU:yIJp8oc7̝%lw~NOx @6Ta97Xt6 U)ڎx d9x: GHtt|\M=cpS@JÈenQΠ7yl;LY 2j󩚢`L4VkDV? [%qjsu5 1|l#]!ܡIV0Ṋ\]IHᶀRai)Z/OYPJFM!@G+WEGN2|Ѝ㻻dm/$f*ZaYۘFSGC38JhadAZATb0+W4 ս,, 38OٷИI10|Z&n&z2E\ `򲏚?' 8Ul'Wt褆 !i" cJ#je}.e˪TGGeT/ZX#9!.t /`bC2/eu}v gl!e(~&6C)|= 4O|N mhYyePtuN I(MTr1͆2v.æ6De2'kFSkջMT",ݽ1H[UbsS@c-2j濮(F2rrCŶ:-"9o0++殂+:l.;&fMf+/2dB9p!(ݣzD FJiJ4jh.uԅpD]MDEi+Z gr=髴 _8[>JZ7e:XPMt;C"@r6R;UtuNq}( B-I+)o4% eV<:ľm]] Wi;4ۂa,Z8r7G A+eUTy#|"/+iK`ގPW-\ś%Ri/L׀g6G(`0PSqs1eqPluKfql}񢹕T-*P;V4,hE1>|$Zu L;*nxZ0#n/zk ^oŵBcrakH M~ǬW#ߩ^\{@X 0SԿV'Zq]\G}]WpTAWSsv<"{TEe鿩7hLf-@Y3AWx3&/esZ1tn?FW%O-윲2ٰivWn3l  TY%ճ^u6{q)gXfe{ЁZkF}T lT@iԑxCd%Xl {R4XX*jr؍zV\sPzFm`0`o %{ڽ`7e엑HX5~ (S(Z.^oudp>5T% HCa2y$~m8]d<6X)|nݏjy_3fi{-?>bC Wفg$WI87Vn+L<1DY52_=4Aƪ @\0}ƾ6uh W#lVXNZ0 0>8: _e5 ~pJ9i\!1LaqP8N{K|a*wJS4# f#Q,g{\đ3Gc6Ⱥ] 9+?m#8 "W>h7n+0UA|y3rPUStbmO#lNQ2[/LDYVvvS<:bdE31 (Z1}lsf1GT2E)f笴/z,m?Qފ8qƖ|r(L`UsS8E)1@jzXR!&9} ?Sϫ Gab9 3=9Ͻ-v<&fVݮbK&nA-|ɳ*j7UojS<'c:  }4[@krC١\CgYNtjrHS!JWL ۨkg4$]n(K:Z҄^si{@ ^DBI!瓏> ܑblgf\ЪC^ۻ5v,ŝF@m?6Qa}N/ A^\8fմyBvތ,^忍f/nJ!*Xo70ɿ ܌#k(Q-5^ A +2Δ5lLziYI&QYbԜݑL>5cD4Sߎd{q2&a4-F`0T{bΉ4uU0 4t+z+#eЖ/*oIр \xB- (E#

TSYkroydqXx7-Iqh!5d˳2?x:\õϓ (0=yߔ~NHl;&$xԫ߬8`GUrR|\)tﱿF4p˂9:w#(;Z n>ȩHQNց^Ъ& xʜtvƑ` jyf)CG`gSv5{'cXf#sK#ɂۊizn6mMT/v*Yۊb9 xx7vj[dfHޱMK~V=(䫎Ch>\_.{{|߯Yo*d l=:\.ҜɼRrbaaM7_DsO462?:dWuw"=΅n߻{%(53on7&8z*1Hk}.ٞ E,ANǎ? E'p@SAduf\is~KNw\%Mak\;Xj`~JO?p&P {L;Obcx.[A?E밫kʉmPk\)3H #0J:bT:Z QzVNdwmk4K̸W AX`ڥtw\vHͤ釭V4ˋ W>qm"Ro=I$L Q/ra.G˻+ocgk͍m`z?v~2[uihnjtAMi>N{?V,ش˞Oϣ @E {/Tt{1SCƈ =REx^Y4(aV'0,?BS9|1Pa.s~F&c˚cx8XSlEγ)f0ybGA {=bycŒVYݒ/,/!4fuKy$q9=k Y{bu+?X)ָzM 9DP 1hˍyeP7vWawjk r?\aS9'Th*e- -?ÔYN ZupDx&l0@LR6ώ0/%#k7p}2&:FT{MZVj ֨~i!h·ۇʎ+Q?vˋ8k3}ϴZT K W YZ