sssd-ad-2.6.1-2.el8 >  A aBU] 9r3-b{ge]պFN ѪF 5+ie;V;Ny>z8~!ѧtwt婉xR*-Qb3քngɭ{5'S$eX/K'mᒛeʷO@_d)X?uK>7^#f xWZMh&N:Xy B&ubg'qEL Ĥ"Ĩox!V0v0&q!qtxݽL҇`x "tB h:PR!-jxPXG zgZ3x1: _qԡzҁ\܁oJ#bgZLy+PӮCv W7{ֺ*2Yz.aG@["8XڛgQൗG"_,;P$2l\|>.S> s)E2ו|x+rk1n#hGߪM)5y(RD@9}WSU{=XA:5ИuB*LO)=;aqk뵬'׃IR^cJ3$;NL![j6O>&0fI!-0Cto_)Ag9Y2chµ_Ublv ))llRt s U 7>ordlD+DclHx ,$e;:Bb߃ڀJo [Xzoy#h7euMĖNnDzܯ?'KD!ͻ YX:Ĵh@dʡWpwfknt&< px)2e= ^lt I}h>pEvl?v\d   2 3PV`           $ X   (XB`B 1B   ( 8 9d:cGmd Hm Im XmYm\n ]n< ^n bodq3eq8fq;lq=tqX uq vqwt< xtp ytJuuuuuuv vvvXCsssd-ad2.6.12.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.appc64le-01.mbox.centos.org&CentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxppc64le&'C K8K@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.6.1-2.el82.6.1-2.el8 .build-id0ae85722d16658b154f79870deff48888dce711ce9fbb28f9f86b0e776fb7446fee2e3a081de293clibsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/0a//usr/lib/.build-id/e9//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9fbb28f9f86b0e776fb7446fee2e3a081de293c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=0ae85722d16658b154f79870deff48888dce711c, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)55PRRR7R RRRRR RR4R.R"RRRRR!R0RRR(R/R RR RR1R RRRR#R5R8RR RRRR&R*RR)R6R3RR+R2R-RR? U0P!ꑟ.Aѳ97T|KH@Y&1Dw=w@k,+e (H|_״B +Wfݟ#lI,Ixƕ3]PSƶoQ)Bn<ك?75 !ԉdB*.]hx۰L\"oxg,"%R&ʤXBľi J,5ǬIn1MR aa& ?\VK`yDaܸVLX8kZ:"v; [o0m2'DzuLI؏Ju45džf}RjJU1P +`IC!#y1ܺ'_B!1VqRc^ۓE;!Fl;y-b1JtJpP ֿ'>Tўvmq$LaiNrɭǀK?L#%X7C"$T'b%QdA(_2岸M.E070ͬiԴy,tlC/ dCJ 7.PU}O1wp Amލ (pr1Rb\=Daof '[{jzTO מRH4H߅JaT /# R+;p*d$h⯮e\thmnoeF){77Q|J+a㣬zƬal5fsXjA"Zv PF|ݓcbPbQH2k= bue6 %yk}BiuD{+;4Y2%;rVz۱v ,@Fߓh- %u+`Bh@#:eeb99PL{cƮf5 ]"r 3O XM9"M/ C^tM;!(Bm'~b:Xc9T$F{ȉя^ٔNX翱 i2W"vzU QJvI&%;IM䊻 -%yjO-,֚XkNivPBF'-}$|~~ 2W2?7>!Bdͺם /UL鹗~4MhS0!h>Dn-;Ky# &Cjn1T&J9gDTR[qHao}֒ܔV) }kn#]ZH`+~I W&`$ i-:?M%UvZmFaMWo y0|-@EMra7(h찰{^+6s@/>"UἯ|#TEsܪ~9ŃkRjڰodo6ŤrV!D&QJJ}n}pXAf}kb%sy>!G)8xYaB\z fP@?)VLlgDGli^C`cw({ jFց8MxDVۮIN0W#.9Aw^F4:wҭb*#iuy_Ec?qqz&jXZ3U0fWȷiRd/ܓ3'3 ASBNWVv aY֒z_N0TkRX ǁ^ :y)\iطMH䨪iHl%\?BI;{Dˠ!c"ỉP8Gɗe%F;I;f1*I3dqiSWC,"#hONj]I5Ǯ>3;s3Lp" |S^uDTr %PJs>uHЩVN&lPlu_MK [5rL\Y?*iVͪ_l7?-@|#"A)9BjmS(蓌j!uY- ACyLǾ^'RT{m$kTOd/UPuuKosK/Ű|+/`w+95&l?r)k9Tg5Q D4ZW#cG"y.,@izSTv]/Pjm:@9Igɟ4Tԫ$]C|ݛ+B oWÌQӤ9JvzwUv+Ч&n*qjvr֘9Ya'u4b@UTas|+-8Gc iv0^s0mP}fq^y5KxD[d@ w֗NCϩ l!0?a1=d0PؒGs؅#V\\ PIEkb8ҁ>ņ:E<[/SˡR|!L-RVEMg>tN orܷ艹~EDb'5uV' G8yCޡ ^Ρ:mWRR$-g,QdW1`e;I ӺRhzC>V ؕʌɘc}`:* lp~j f5dcdOݦL!9eߖ9Orb HЧ̔0DAú 3dO&# Oe ׷01T6,`1Lwte.rv#Fϒqm ':Sw_T5Ho, uQqE }ރLEl'` ]UҙBddrh z 'E65A-a6D6ɕsP=#AL(dܻZ-$d*Ou(dY9#v*k9LkYUd6m }6'dNC>3 .W;ݨH*wdG^<5oW8yMeUv;wEHGnEm=9.-휢OZ!`س WHb2Zt@aG4cn`J I1,FmЈoU0 y*U02҅Cz{C9Znj=O '+k݁ Lo‘#m y/B-Xc8p}8 Rgە=ÅZB@UTnplj'[I b ] )#'=#faznqDVG!yXYuhqtfL<K@|FYOP 14ds1)ބPP`D2aoUksȇ%/j,5 4N=zZ!7"c*ZUcaܵ '/Eu؇n:D^6;8GM+_ׂg=ÒKB*h&gO3qt(Tf#p +>ZµC{Uf$x(m4p2^ӄ@ٮ{}g~#<}ow{VQ )WצsҀ E6D3֊/U ෙ.6I~w@Tr+](0=wANXkP^( Z-12ԗIn'% !-ut}_X"ԜBѥ=F$I-s;W +gXbDAn y8(3ϰ)p'ׁzd0[w M_OncjEpC6 U]BKh©14 OMÑU/pLIT.JvliJ"t5gkMf%[bʃx8eN;!v6֢{cN0{*tlL2 KY䛠/P#S]Q R#^6[k"" )0s7iC`SQ³ O0i5xO Vbk*vISx]ې1f^c`|BBg砗pAKYp1>kh󳟶k~3D&$NV{Ov:k3E6&|{35H'r]Hڴ8 fzpCK",m>^c糾 =hyOYNENryrbRo6U<*5u|;._ 7s`'N89`'n1*-Ki{ ZyHJ+_ Љ=tfC85rƸ֚ZG!4`p#="}H۰5ɛz;](~(~4hK;eX*Xs ӒikbhYTq&oF'5wXz fƍzL!gqJ!ۑxED#j\p$* RBB`a',C-'MG*`!{ ĭ8Tdq!ff_UMכӦásrpJZnxj B} N0 _0@\௦ xzFR^~ˇ;&TڡhLPQ.E O>g!&#Z7ݒl%hzh㊤램Y9;+/\ z yc{'/7 gY3Qr!Ɖ)rա.=qzԷ^ m۞1U,I?A\SƤZGF`- 5cr+4z@ZJҺ^_FmO&_:o|HI.,#-EcPT8 |_Tш_w5x?{sJ{(iO߯S:mv╬oN>oDJ(Y}G?ۏʹA3=q r$|+d*2NE ZQd_^5DA@U%YGjf0 D`3z'!X1K3wW+ {+F~j!WY S[. zA>x[@[Vy(QmT/'ov(7P-Yn4+ JTpj|( @VhZFGV1J mQUĸ;G}k_\/9ȣۍ>^SbdEu=ޓ<;33pnHI|l!xAݽbOύVvAqF*Le0 қ YOpz)5瑊qMQ4*C=僔l{5eC VV8ov{(yr,.MT)S_o._WHk9xC[]8e4?5F@9֮v8N dfQ€ \ qDxM oiIϙJ͛[p7?]# V˱$xg xPSqcTHO{K\+E4Qy7R3[gB0:}H+E!MS{'Ä֭lC4[ I9N ۬14_T/oG+]:n `3@ )B`mCg|e\:V;9B(Z.s:Ś B܃I@6z+ޑl@J%6v]$9\m0tTF[qIP_J3|*c%1 UfK4OŪoZ2)U=̥- %CDvhp OaYx_@4B)m gg~ol=tIn#i50o( v Ƕ'LAMp5b&{dݡ}Wc"ʨ(Lg[LICB9?)YQsKɹW3}R; <2,MJlrqLriǠ-N!l7 5IgBPđC5+\V>Z[ԧ)EHTY /a@ ^f;X^ٕ)P^q$}^Z:~"]UT FSsU~ 2'o4#Fm۳ \@<m\%J\.'Č%Ο gqB?vi۞CXt|k> /v`/T݅_6 eT̐DG<ڙ}уfz=yr״ PA xuUe96 vch$-fL2c6RqSӋyy= sH8t⋝JC2wZ̈#Ph {B= /,CB%E\aE$e'?qt! 0&)Wjҙ6TXrN`$If<(sGYRk#mif8zPS;DT>N|RXlM\_{F=TI Hx9pwrjCa1DYh2OBg4YRg+sM2,@q8, }\ZH^]$;63)IJb5^mZ h:2PZobz驞l\GW![߳fKJ;,ЍlέN "Vmw';C?UVpehb&d}7dn]g5d/VC@<[x6m"\2JӅI..Q iXIh*F2,FǷPm6lhߔGFK53}^|nbeR{Us%w)YjZwF?ue,5,-ڜq%q~"60m鉀QSD{Hq[EyO8~zh%#@nDr5luiD\diF0A`{MƝJ>w>8ux~ -MʂcSLZ C7oD}6wzRoˮ"|fc¼b/2L/3&zg4E:^V#"Wtֆ2ePN.oeKyzGBX##'^;rG ॗb@^[i 6`4XNx0;bDpQt Ve-RB]xӬl@ LJވMzyb[L/(ƅYCZk}c>\h|EeO[r)kmdDIwQ>:% Og&-A,eC4}Ju˶TNcv#6;;G**^`(~csuc~tw7807Fe}1{0`S>@yK ӃeNO+L0y7);8iM@J\؟m2鴎(T漷RPCl= ȅU8dtഈ ܗYޑSyO%A膢KL=%>VKi9V^3Hl9>Z;\p=ѡjUzlmYa~/,fe Z g; FnaT1:C?u) 4˻F ~Yc#Ws}cj|"sج0v^KAm&鮖*#'uq\ޢL" -1;Hm b09&ʙzC.ZyFATqgsZ+WdWNeYfԝ/%_H0 Uo5>wfVXjF=fџ O\!ke&9nYsz?"</wv{k`]\UnhR2fg;B* ]S j51\i7 B]aɳ\rs`fۛ3)!b8;rf襜r.}/f٪MF`ñB-⾦rI "F}`Bl`~e}*,4__M%3 WMrUiR%P3w^ #g]U[m0<'J96i؅UzrP_L7ɗAwmjQi!-AXQR=K$@Oa~ S*l Aq4)jL_f# XOOz|gaWW8 # <;VF]:4ov&Y!<^)2Pxd2va-qܴP+^3lVyd,Gwѐ7HES,Bppaue+gv n*z#[Kmv^Z) dcU2?GSe8 (XK{?9_ib:l5p.m- Pv2t ;h\hTm줬ϋj<^)<ĖQ۝Z;;/c瓆쑛\a9=k[ą&ߏz]F!UILP$e`8JIoL AfkP(PYWYzGx#0 3cw-NROp/9IrJ̶xruvRo2hL[tl=WVpƨ5( TYz'0AMt+mU $*6oEs04@@3Vr.*ơ5.حٵT^B/ՄrP ,f( k}3nd]1C-lLo }8o7x1 (1v|:. syU!B */V͟!%Τ>O;<"zY-d!uYH(;4Lpr#qHQ X1ܽNz+)>zfb.>ߥ!F9}UI'fX):qE^[ΟJb%UZB){yz5֭y{mgRm8pWLTr8'~M_D&h6; !5P Δ"PVu!ԫH}~%NE=)>>6գu1ָL*8|8$>-P! Gs)NS+ߪF M|/B;]͆FvZK㋉~2 $`[Wwmuг?I;Si.d#1Ky$oT;p4")Ev %)FkE~dE=Pu21 3~kewa_͕xz@`ly;͞džUFT$]1]oQ 7Ql2@ktD2[@z8#\?pEJޞ+ې|\1(qO g|'<WjDI =ň#s!1A`- H* A9މc'GIa`P ;xM0 d{/sq UOcH 6[3>Hl[[J*:X U"JCt=㺅TWʫ{s#NCBT%tir a9!Vhpcoϧ+F% K-/ĩH/cZOWBlM3Yg/xe^Q,7yJ&"sbwQ|5#-tF]XJ.(;ʪ^ż1_"=rD_%fx8F=jmrwz=gά>-к4Vk0 Ej Z^('? =jBBYŃaMso`f)I Fm#B̀sW٬y Ǧ֮wH#O/Ho!'y1ZU8 mXaeWALGŒPCEk;)|,5!-lr$uG5k\C:mXH%:؅?k.b^8 z0MUO` OiDUɽVbqTD#g# kRHVinpJH>ǃ Be/1rUILx]HܩXmH1uJ}-;"ϑE'*A2:Zy٢ɵ V% O2Mg{!]'Ɂ>8{l\w>\5lmᱳ?/5zrMTq0@),ϩ&, B' jxDVi-r *rrz譐7(Z;,g}2}ڱ"/&ʳ+i3}Tދ5Aqr{yB7j=gǂ5us-;;Zm4pۉ5 9cMgkl+a݀f.X`4ޅim‹3dkv;Oc=2?rTC/PAG֬,.w 9;:$Η;^8ᐂ8> jZP'p2"84@zy~>(l[Ag{3wBUXC4,l{U|n}ruqEsRJ\gFn&;6M%K#Gdfw8'Qm,5C!nK$5%_d\SpW~~6.%Eġ>M¦GL.3* 1oO,Na+ll gI\{~0 ܄gP> ?OH`ȫ mه¾/k+m ?A0)о &7O4*R<( j}fT[ qa/sGx~V=e2m*lĜaT6혵W/-R̜2WAd_lsiCB=MbwS ,X &A(jtNlQLz"*I-q|n>q}HhYaHȆi۝ Qv~ƺ 23_ JdV~|A[ī._[3/q_UM?\76%w֑B%&|f8?GmxZU7s޶RԏZ0^hNFW~uhw$ |&*GC|'NkTK7PkE$Yd&@*10*C7}ϐ%z| 4ӓv#gfT.ڲ#7'Os-ߩPc/qTzhgs6JAb07)o  X)xq e &G͕|^:`pF-f-CTb { ·"[,(u 0TV!9(x28SծlTn <,eǪ-mn3i;=;r iDsCX='APRϐ}]Nؾ-6n?$щ@ݦ@rcYnZehRYpzl˟R6/VbpJx:X9绫D9b(k d9%AO.T98,M&2uPpW~g$OJ}/n3.5Z{qk(p]ڋ)5;S^p(vc&LZT,6SM98G,$1ӄZ<\ST^Yr~!@#:dzl>rkPy)%'w_ S?V0gHS!K53*_  _Z[A!ղ2GٔNm,#F0eY%vRYTr#a?{Yui!͖Y.B}NJCY[-"ZRrɆITY/M~* 󿙶S?&[Iof-+۹A PR4x+I'@|~ـ[6@=>ٸu\gt@2R>1X%3!Pǵ[01/'eXͻL[/q[p}+N~<8$}7{G~ΟfEؠTà;;?®g]m>yoiR^tj4J z} " "B46 3C <~-j,7l6,kUs^iN[MHvH &i1ضcgy `:NExAO-?Ҡg bw$!J7Y;Mx[;/vs_qg Nݜgŕ6~᜺n3^_l$8(\dt TASA˶SD;f[I@j:z¢q[g$+xllv[.Ұ"'W‡+mh~97 48P 2٭Uã:'sm'K%x\ KdFSAE(CDہ~<)]]Sh4}*3XRb5,Zn5f۲NrH.~vnP/0=ADFi.Hc1[h/imvC{v9^}@*2af 7zh(>I?H}M8#;"u]V{\|tLE kW ɳ e1ͺChK,@&l),8 8a@_9ۿ ὠQHɶߠ0%'r5u쫗 Fo)8`-t2\eyE~{{*/9kԍS|RZT0{myU"XLW8ʂچRO lS΍BkF(}Ix-$Ǩ"oLqƙD@t6ǖf:9$ɔJӪK[yYdMZ 1TkDw>r#3k. (Uh72BE@FfuFL% ؆ED&Ӷ2Tx=d;uz凳Rb6.L=~1%DH̓Vw4Xzo}lK!5֪KW3K)Ƌ&c+çAi67B  l98}ޏldw[,Dk6NQ9d?2౻$2^?}P_J:_ ѧpkF0aYmj =drM>^65L´ސpWK{k2$TLiufH0|Ў TZc4XF /f0҅5v~f6Pv`@E}0veE!{5v|~̵+vTq|l[^%)LGə3ێBfH3SĮZfUqmbKtmqBXZp$Jep=g bL[D~?5U!.GީZB;v\xt`AMķt_뤖lA[o]0g"ݻ5 C&ߪOs2C> n>VӪWz *QFqԲײ+YZaH1 TF P/JΞ8C1Sy/F}h ~ u|sc#GSp +ALc7>܈-3UVYcWTDs|:,G,,fs: \&D%گsyӁjKˆ5iGʔnWeέlvl}>j[h}m/GY㬐Vv0ϿN&TA,tekn`~9L.FN'@E<.,wD&&pK@ۮ1T'QBHq_H5԰Hn7c-P"8Eb.aKɨ3+׏yl*Ge:sLm_?a*pOMUܱ !ͬza JH?.6S>O QStiƅI}t;D3X{ҵ2(<}fh}Dz0gW$vWْaE"Ժ+{wR8 }'RG2 9UxJ෍Ml؃!sw Җ0iK!i]1sL!-݄9CK,o@L4_z--Ӿا-a(fM7,=/dc9w@DҺF$g7u>9/=m#6(tx_wa n0ޢ7vtiAЃa>bًx,̺Cv${SSIp ỷ^'KE!!2$W_o)"XuRP4;F⎌' $:8Tf[o7QsX^{"8 +roQ莨uQz k IRH\"):>8PmrM90Əp%^.NHcumPt`9G&Cj?y)aȟ79:n|z ȤCik4Y n(Q:͘v /TӉ(4?bNRǡYHس7~uMoC.f='ѩl}<_z/͏ݓ+*o>.[~6Pi(A\aurZlLspz֖B@:}l/Cޅ+xedrzh Q/6A@iN GILM/03E4LJ2(qeе^7Zz1,qw{PCOw oV<"DShRb,e Gr臘b-<-̣_X BJn}OI >e͓]$㑑vyUEjƣfLɿb2ۉ>xsY!uz-i1Z}G4<˶gFO1ƘeBA=MYEJ `@1u#1sZ8u%9e3"P8v|fY_b|u&cΜ, M{{hAer n: 0#,`:=ZNg=yPWi`bqpOHM ;dD/'GotCW ;y:5߅4q&``k@^Tŗ'ٕH{}FBP0h`*nns(/jZd}9Vm]z)(Ebma㎷Q:y׻^>9s)⮸"L٦zʋKȍ`ҽ:.Ln0 PNy.2]udMspUtI4sIWQd Ed<]8vm WH-z[fTAܝ{Ny]kSH( ZtxV{]6X'9{nRRRqG#naԽ_*KK-jVI6.ȯEFI'G9(wcIp/~07k`q#|X-l@9@rhOJ):aKx-evGn `k,(jњqI/%g3G@> 7X{cM5yvX5x۞O5d InN6ꁛ՘/`j]St^.@2tݴ⊎p|l^V=K^X^ t l94|LwJ€W{]s :%*P Ipw .|@mW)ZB;w 4oJK#,S)<Xe[9Mh-l7} P377-Q>^RyaUBɼ Cޣv$xa]i zdHGDz$HǼ1o]#ݎ)1٘ZГ31,|mD4ĕ12VX UV|I _Et8/\8h$yE?Ĥ+,=LW *Z*; eiAF,F}AYz+yMrpk,kѯh#c] wn?wt=cFhi;RF!KG*%&'I61 V&7*uu i}&Njg2)}h4 Dc;L}.B# pxDe'PYJ ab+6%X %F{Kڤ#UQ.[ į0ʌ1won=@{rkv+K6Oǁmb[~#RNG<~_sY@sV $ļ6 WhWrj3qy (;9rWf/HjhV\߄ڇ>P[lo2i0U]!y𙡈U m5 vUMLey竀q֞Yл{ nKc*_~[ýr.*bֽBցDW0ELW$_&#F0 `N|[u|5NS ՟- - qHa$ o2,3=ps(@=}G"mTP2NLv"%9x3Ȫ[bC7)ٚ:[ V q5vX*;ە8bhHm?T; 3[6AR|j+H1{0MAuk8w5y>vr/HPbsFA$xN&)/3IKaG0ery _V8G Зэa-e^œֈ D g97l QVNʋ8ا蚋$ 5-Y}F>4@ m| ,t85VO)¿^sB&YB[ZauJD%1]r&&?*2_59 [;b _7N\nyꚅc.B?Daw ~4J3S2Ǒ5$/T .'54BcVć<-8/UUZ4%qy$Y;B(owط,~3 d3>gi'Һh,vI_G]iLf8L<XM*`Ra~_D'&bv"u5$>uS=2%MRGU MJJ7&!dQ$2~q^6/xjo>]Xr)|Tʒï1sG;mK/}' j?Ɣdls7BȤhvP~Mt1[2{TXiDgB Ԇg,|).>MM?70cɉѬ!lk a5zbʻ0z@|#萖*FU<*6RxtwB2ц'@U&f7"CHzCB~2%Ŷ-/qn?#TAx"f4/e>v)t_(g ?-`(uP3k5Budr% !* 6=@5JXUMX '^>*z0G+ OG8/{Њ}4fY0x|Zl~,՜؂q+&my{*Tq: HL"5թ) PcpiFEb+xT,c[~?vlF-ꁪ:&99{u~{&j &2Gy8V:w0hj<:r(EGbϏU- 7$m ]ֆ_G IGZt2O%NB8 snN1A( $G)EC8 x^ej4~-j\zۭ.%g?4`k*yv"8Q ʄ=ii TRi%lqLFf~/7;4pb ;j;mruHOb2]@r̩L Mu>±-ʭBMh.^;^M659*GT=UV6t[$jVMo综+=OcZ"AO:K`&)P̰+#[ s.kRMlN:ƕX [ R1P"rV<0pԵU'PK:d4-GQ7 mK%5d X/֍&d53ݼԟ ⻯ю9qc 0TߓvB :1o9+.]VKCmFe%C[ .-y5YH6iR? lZEo3;DpmZ2Q3ٓ6uW*~X* Mܤ4ަp\mcxquQx\ ^’uzAõP~XjEpA3K@-|,+'ڦ-#g Zp_'d[=iSiޮ>Gυ !5M!y~q=~Mw}A=V\1LB:q3vמĒʦ Ye_OcH z.S3TaaI(5 8M !Y"ɔGʘќiNo}76"I.StkHI _/MV0=s=#?j0thI#%(>M "FX'T?r[CI_c[]e1-ň;+1?={Yi[|Zϵr+=j ن: l}7A1¯6+ *gQ[z$+ҙm{Rf45sn&TJN:!|'&fYڴ@һ3~P>7`L[C#'V)dlGwzs4Kh7 F bpeVN&OSƀtNsH\,ŭp#0˄")+t -h|YIʾ:Ž%d՘TJ$dymKQ}}k?Sp?ښw>a)pq{q g prGztDK?/q!cMi *!z1Q?KlL+aefXX6]?3VlJց:,MoQYM.Kd y!Eyfag' +ס IGbs+|E5 X&6ˆJ;Z?W:]MB[#|XHJZ1$ڦ>Cua_lt`g 0B|#MY`ooѵ:V,ԓ 7iE8ȥf>Qo6uv!H 㾏;Ak$T; QGf@V"P,+h2aO>ž{p[@[G%uĻzXM;>jMlʓ19̷ps) ^޵ksc}VP1!sB94z[s<l9fP?]{4±U/S:7Sruh5.QP0'cOߠ#'UGLo6bNp@W n] lxw2=1BgL]Zfd$* <&Z֘Ӝ`]J 6κ&"vR+nw$>IX:^i{4D邓6p8.[ɟ*0f½ayBJ zMғ> |qhΤf^g>=G CIb7yD+ j2EOE f-ou1}H.h,R's ]F0, GlV^(ru:UOK *D6S 97vtf>^Ғj%$\xN*K/"ggd<( xS$7eqՖ~=,ڤ''Tc 4p~GJI6uvu,oeT!d $&LD{;Nx&pі8S>0p*U ~T^3xV\|=9 UYgu|!kva2XyŽ$AZyʨ7;k9Ġ3= $_@fcAA8 >"MꡨȄD부RtpOT֤~ڭ\^8e`˪ų1}.< kAxQ򕼮*!CVz㍄__y5g91kys4z`Z Uhv󛸋1cɻXuozdZ*mCtv ]M}2F&{r^++ywufrË$q7Nnlap3`Dmg53St+jժ4o6嘼'*X`=1 2ԵJރ]u콂Կ4;wlK>3h(F3RDIrHE10vJw8;p`.ö̿ MpÌF$w-/#Qtwt{ra9Ui9]lW@!~Zjx[ NJ GՐsMSEdzC \VWqqHgs^azv&bU?!ēiX^2܂QPe; q+H:qBq4sa :8YKK-2WɍYo'`-n>`5]G)f}I68f3G_Ș(bF`8jaxgsήBemg>QK(k˲q@mꓜg2 dwx?qC-B7䘸٘Tqs0Lkr'BsC"jOJ|,"y]f1 Rs4\X`255P>4_ 1tn/\Z'T L&R /.@4Na ݭNlqPޠĒo!ɫ}Jk.{FhgʟH ܳNh]Z\rDlXGqKX! gl SER@!Gd+K H܃2v⽬▨/[&04Oqa mM{?[4jE $cɘrIPـB _2a|/!A|Iv`{ьzmmE # R#դ=C˷:8sՔ]ƓÌ}$)|KVAyr !iz|%I4_"0^8$-B=ƈr͸Jh$['UdLt1rY@F<܁a^4[IOA {댴)6 m+]Rig a Klrǘ!n > [+ߘfcϹHJ3.No[ӆfmSIs`JJ8 v!nر,ݓ٠tBlo>]N-duq&ZgWl G77kwzcn^}dĕZ! k%F- #\*8@N=9HNq.}aZJ[|y`d*4Tr݁yV&;iq{Hhٻ;b^g !9=c/F7.`]ᕂHN|AeFqB v߼^ޟgd+\*|V)XyJ?6]&6gTK kI K $o"vkvsQl ئ5 Hg5pKr푩vMPor%}OEy\jgʙ{kuXCۯpHuZC OW"^rA^"L4#B4VwSBn(1 &ŵ[:Ej;j V&p~x#a|TGuǯʨZ|^ a*E1I$vVХۮ*Μ0Ab KE[oǝB >7PFG"/˯ʸw'[d%-HOpjN4Nj8+g YȯqF#M>SrɌ{o194P~,3*vĚ#H'\($I6?4`y85Mn&OJU86&_ z<ݬ⁎ϣHUvl.G؛r_󇤌5Zk,+/RE/5DN ^`vCAmx JsE.X}R+2)m]Ӆ,Wzsr+v~UH": K$]zzj #B6\=>~wOP?.]c; 7EGS {n[ßR.y( ,{X-4:1Ven4HiNE{?vU[b3\UkGGXbxxO*!ߊv E dڌ;Dpg!hL*3crGQ+uzL*kj[$sRy:JoS6OcI?KB ;o -}[|]rv)xlKݨ=#"W>#sl=:q|`q֨}Ύ*3vܑus)$뫋K_g*ɤMCFH"td=?=Le!w TϠajG H5_ǺczeeZ %^|VZ?", 勲jr{4 k 9_ %eܗ+;ג%J 5?1酟/`KJ஛''i}`[|vI oG{!Y&c*wfb~,pOKkOn-K UMyyGE$%(%jZWB[=70ڎK7אHy'8+ʋ=h_b GCG=s7X%2p'OZ´ԣ~B__@+k[JA@/VuU]B COFf܍;Ya,~r?˩. 9o4<&X-5X YVpx |<; =v\?QSA;syg( ):z"|aEaAtSoT4ebQiW4P~HΣ M ro!K5QȰ;e`P xQ xdhZ A1[@bL? fhRB{dpY2̻-[[ ͓39:{~ZZ =(ە_%C[ C+Q˶MNrxfb5\[m^7JS'D[0WTFo'T2੥k庸YBe~AL{X }4s,{]jh%蔅2E)]Zv_pƻR_m5dQ?w>+l+\gdIg}Gm<֧.6Zd % cTZ7Px%D\|}M Q-Ѝ@-9\᰽&&wgQg3} [NᾂlhFN9sTguޞ)/u !@ :*ڈzXF\U`kYUI[S0C.ѓJei:}[3iVfxZHl\L[A/dRlj<4Mk9mwCȣ3>0gњ9QܴSWBOyqnk8 gi4[QŖNuydTiFJ =ĉ "Bw_{P:(};ͅj-f= ]Vte bKjk5p#۸b9x z'!oq)Jklam4t4Z|CDLerqol,_.FLq^[xj כw9lߵ;:V@C gt/My]/̂⧪)NMëJHq^-'ꝀygMk?ގNT9W2o"9+ Z cD"V K;b`&NfWsx>b"PLΧDr16qO/NdyqA:14YyBcD5s?CuY" y(bׯ]@=rv/컋gϯY晵'lA[RlbuC8naJ7hH s5"u}FVO=a /sé*7HH>U Ztς&1]ynY@f͕'j1ꃲ)) Ǹ=r%Hz#KDTN`K6?".wю""qe[v ?~ J'@''z%ban@ZՆ L1Ou] FI-s ]k2R 4p_ ,?i R9osԑf (aI"dLe\TOs m Y|jmgAI = lņ\C#& tl@Gb%˴k1iDAUlO:S8m >{;BW;;:$~G(9p"ll!@pU=f:-~ká*\`z~}һ,Y/ʥk2\?6tX-ᄼpN)5JL$es9uثcLX)ѺD5`d  βw_q'o=Uܓ8$Y 6- 'wS(_[ zhφbD 'wl@(dھO笿5 Z'nլS~ Z.;(>* ;I; |Jm5ޑh/.s/'ye ibkl5CK{#+})+ܙurYij*UxXuKnm%:u߭5A}D\uGP*ĩRv2.c[&ޓTRt+Qrȋָ,@V*R-í.ѥHlFm{)UѕXjy^]̘4E4[w Ug!L] PN󇠌Xh6lurr&ϗo<ߟa-[V|3e,(%0&A2P[&jg HχުuQmW`?| f޲7n#:e>VԼ5.i?I 7yדgKZZW}ؑvM5]㮌4qK:,މWso!W42}[pԇۏ."AyGn =ZЭ ևjoY }SeiXku9)\(Po#)Պl-j,\&z.NQ6DI6 lRw52+ 䗟^=gڶ`LB?ȕ`xm ـ%6UvSlޭHGhXa@ʎ R{ (ngڢwWnmnSRknUT_`i%ձCyٕ56۬vJґoz%f@A),a07N p ?_$R'SIN6 t49_oɩz<$LnTOՐKod}j?fQcSn*AˌqZ!6(&NuNoѷbla6>WOQx6o-P )Z\LD E?)]^.d@G*!O~wҹ"𖃺M^K%I@n> U9; O>ozw1jzRi۸Vj ތE͝z#;c%:јnrʼѝ|o΍4n|w@H}ֻ_ -DPSV>9$WU# !CQϜbP\D~!p0uƔ2{*V%ɷIm0_0SoMDŕwݳl۰ݓo0ÞDN24|/\P^~R੾V6&]6 MԚA!8Q):*fo~{'bn#n[㕼:L:VZ2F+F,/h񊭾 gcvЏ0ڿ$ FD/(IZQ^duvl`xkVe|}UOjګv\X'PRjbĐ,q Io 1wc ^aC-]t|'qZ^(VJE)pZ}f^N5٤RW=@nP23VPɔƎ8$ !~վȱJk_&H/t"Kk!5љWB)E4Dw:W5yz'GݶO!Gc2^7j3+op~IB4{bL):ӽ&f'Qj)I31p}d;8v/ݠ7٫H }N /aвAM:H%;28bn}W -x% onπc5W^E[ǫv"Spͷfbax; 3k5JހW ˯́Jşbš;`e(mY7CRag}ovr|3D +V=%?W}bzS ?qa9iVGOch;o.B =0"U&1ͨvuPTgAEZXяs_uJ9Qb#5he+U%M.5ދR-&^zjRjvw3%gDz]ДT(tkP/6LE^ k-Qi:SF鄹*7} 沾wu$3\{̺Fki뒉ƑΝi.#nHydɝJn6:dJ|x' ѹ^H:L8Ӻ^lM?% DopWוұ]e{vnh$#ſ]E兖.ݘe?Z7džʏka,i2N, DEtJT@o~BQ^|.G,Rw ث]}݄Y ~y('BcqB&5k\NkԚn4 K -ᜌDמ'7o[IH)"Py *'4 lB1E .E*Um%q| -`8Zbx̶:6 mi }y9& C=@ ;iesD-$3 Ϩ;rh5}XSI roFv2f%wOJQe!IoS+JN8&ܜ?ig9B 4{G!g{_ah#hĈ\ιǜ֪81f聪WN ALK~$; E#Vf"㛻{5:~זDX0(&j~ZגB>9D4 F#f71SAiHz{@Ni,8!ݍMÓ }HgcYbNs65k[}OA!>`j^<Jy3{ubwCu e10[޼v=0PYm9p(/(rWU2zgBa-SZxQE)vgJBH0̪?>L5cw`E˷ta,ǨS37--2%ؓ=;j_q*tEq+24" 6 R)iX`ۇ+jX9rƑF"zφ _СuuGέVaRA8M9[󫺞6T/`$_\2țnЫ'-t\VPEcWZ?uiWq?y]yYWўrz\t,e]bU#:)#"LWbfOH}&4+?R/(#%Hd wO&"fz_%<#߬WDWDI'?}$D#Q_mA@2:mXk`"&zqScXrA9 鏜W< \1=m 6US9pED]>^2 J.VwdnP{ %t{ NB^nÄ9NW:P) ͷhk3֒.Gg!D@j}{c!AC[>̼НI}04APS~sɝ8TOFWݡI9K-t'l}~gAh[ۡ:@'s \z<ZAX\; F_hPn,mkme76}-Fx!=`3>"XaX8sveJue"yDibV-V3tg,-(zoa_rLLoQRUCU"YI4N,S,y"TϑR'MSs~ (ƈ|HIS\]do|*e*2 1D%ΑgiRJ+fK5g lPRtRUArC=߁'0Hiz}cZ sHKԯFՙ-am(M CRLps[]r{jvo2TA4>j4O:3&3#[\o9ҺiFraH!JsgF%v->O*-+6ބKjNBHy[ŚȔH{YM|s\b]#N~4'gͥF"%~+S ^tw SXz<# 0S2g`4K'gs5:QPKoуvDyiM*I$s4l ;[8,׌NfeODѷ!"Ho"c[_[g+eʮd’} {K;T\V>q(f͠L"iuE*:Q7ucf\̼2? h/~zgi>ī좍~Yk_}S_ oZ4`恊ϧ{aOeXYA=Gl1lT`e}QA]꿭=7>R}c oOV=;v YmX~ĕ<v'F#LpG;'V)M̆;GՏA1; b'0hs TkiY ;+/f9ٷ>(ᔊ_׿ENlJ9/Wa/XJ0O(0Qo2dju"b%5fw;ծG Va߂:u%JI2YX>␴L,mCGj2u#t\׋]0UGz{a c|ŝGg_P^Y)@b@7)Yٍڜ"4s&_SnpS>UqA[E!#[9yte&3UyeM?8*ґE ˾}&xh#/* P1R+Gig{9+ִZ7b/,_ M>fQP7"`k?G]tX0g411:߅-4)Db:y PBd}?*.[7h Ծdt^Cx`B&>Lt·XI@F-,GQ xJ^wSS.(W8\7BG 3.@ayݯXLwv[,ɫaөzC-c%D4mG /r d3E4Y P vuSSŌ1vX_R0ʈ LiPb4>&]R6)[N^[ltēWF:JP.=zLC5fAiٷ/"1vIf fjjT;KO i 4Й+"*QzQ?>xL8nU˳]D'07)vt8BEl90%8[oFez+̓-wf"N0>DqU*)3&܍aJ-r^fj&ܣZ]'yRL+پ2oj!R勨1A0!*ɗ!ߧPPj%915.Zt?$:sB2Z#ht-]GY i+Ьv Nx*8 DcBV,1R%gĔTc8mdtaP):E rKP j-L4g(Y'8;,ˇ-7<'ckY%imX1n*/ߕ1,"Q3=$x?& _#S Y^p&v- ،CBL{_2^G K.͐\ܷI&xί8߮tUE>Jpq33; AFByJ Y(scpUt[ !×_+j8JF<'k`뉛T8%/Ci>pa DDP$`mE'w(#w^fvIէv&Wo {}|E \M3P*|'*zwޟcWHY ߒs)TyA=bEo^u?1隔 yE3rp8G@XGauk[< h02]$ I6rщ<AˠE%#X =FwO`w Fө2&?cގ/U{}h|VSa|N}BbN{y-~mI Gf>}t` CFZ `6p !E}l]ޅ9s) ? Vq \ Tتm߂gU0t͕$%'ER!Xl@4eUVR_9[ȵ:l`P'‹G5 7gQVsҊ^fP«sO.vaޢ.QnO!,:gl)U;&^2$1V@ߏ¢e  skAieqYR+_3 JHʅCAia_#YL 7G1b6:`'j'Q$wwĜd-"W<2QfYcٷq5.G D!-'UoSo=ÚLHZ똒&qga.*с5_)A6w,e'WeR(\7He&^`vA#"՟7>K@mMdz2*8HRDj~ D_te5}sx3e d:|y:Q4Nj'.t7w';9a_w 9P>[Fi=դv8}H%W5n~-?|"/ۡ wxVDf^-b%te?'m&rjk! 20$Zͤ78CU𡂡׳bdҍZzܽљ"SNdjlI)e^Y>A??d!+pVF yK Ig$C%xQwsO+^a[^GV2USǴM=8ćH*$y.2.5uؤ/?grKEڹ`f t{(.֟k.K>_V;ݙުႍo8*+Ch/Kt(>Y38KdV-ލ$f\LMu;z겜ea'ݗ9?Ī "`X7JlUbچhȝ/qbZr蓟GЦ3qx52 WځA yjE8GD} !yL=T-T`Ezm9A%$-}<3*9'ͺlNJ7mܚM^l YK3KS|h8sbpwty@+$qss,+ PɩOuqF:T̓5* @C3(A%^jpaVC=Nnx>~F]s26FP3t P-ںpmq<\ni-*D<B_X+_6H}{wmZA,? 5|5|_MP!J-E3PZ=$DnGjF,ʁ^59:qOL`6ʹC[y'Aqvm a{p+{=7#'!ucIWI[ 'KGI#L4~=Uw\>Jr!{KUe#&q kq/NkNpzVOYu}\O̭[VhJңg\c^"3<؞a =*Փ5eV2ZM+J BdkpnOBX'8*RI$.`签*!6(xr4cЋF VPe)į$vW0u򈦁))*OShTTa/d(iV؝xŪ^)vf4Lՙ:W àMbc;6N@ _nhȓޝKa_7c<#fj Vϊa v_d]q)b@UYJ/Uь xDBL$ٟ.:)DG& D_.!HvOy=(Fޠ5m v p޲Uޡ!a6--ԫ.pHDA/֮:Mw [b6!m^OOV064u Q.X{9+daBP;=>J4;Y#tYOId1w[׋3b쫧j+IEDR df-ڮêGdD͎3+kly#Oҿڨ!7ԳÝN:À9:֒c+U99& [/JCwt x&bepCcOt.4)QYMrTU.}LPgMpG#@TPlG@ [_|+qioN >-lG#P'STM cgS(ZM?RB+9|-BV*bc7e.XaŚP ÀAduuT&*n)9Or˂RѺkvU0iaA_4k E8i/l'[N̶ KMW:(C 6 4؆),xanrPRIE{WYFy #5a#d`_HLJaY.C r Š"-hTvOֹr'#w9;@ą| >ZGD)q^Pω!>z/CKbpR技+L NM٣S&a76 DGꡠxR>js+!ڬ{nߌ_{jRu9NgVmNX?\\V7@AucjAkqzǪwՒ^\Myes0Ow3a򥴍Es,I6ׯ3 GCpSE7廎}Fmi:_FJQ,QȰ{X!az:fCemZAjuk]AhW͜XH/_:K?`|y](݇ywJ<Oj3!ju ~wCjc3PPlgjVmUn@BR8)U|nfcz*Xp^HGX}s 崃Fi#sEf-,q !s}GOjl^B I-x?p I+&$F Q[!cAD5N-]k7Iĺh $aNjIǦQ_P Qeb> L7)֞+#Q])E> F~sb/-b(@Wbg IS$3tW Sif3f,400m_#HN ?IXL]+M>|Ii/Lkޙ< mp?~xǹj` ix&_0Ukv#{%Z!QXT* .(yF^p8vqM?v OP kvY vZhcm'8!sl! 4+?ɥ@sHLC q  #cZCWɢml3+՛mQIvZ1"o*j_Z&;ݸڟTC^ŞL7z^8i#Z|q.Q0Pp0G*7*+{կU?ѓ 9|⿄B%xFMĴ/⹏Pouku02xjw ##?pXeU<~l3AV=I|cGMՈ牮0Vǟ *1ٯ1)F$X L:P޿Mh[z9n(W$; tqu\]\'?#z=ꏯD'QȥaQaB4#Ұx’͐# #ˋE rMKkBdK-mvY!jbcaKYLA߽sǛ3ȥStW} g^#8Y4^>^SUƎH<;<tn9OZux)3ڄCT 9ٰU}5&PYLᔰN{jKs?dBh2&x$an 8dyę}jנD/`^nGw.({GVauC#$~b&I&`7 γyH8Gc Wv/)-xTp a1 ]csfEI3j}) LksXc:Tݝ KY,E9E0Pr`@i%*dƉt-`[ z)A`*{`|+{PM+ :gf3?1 >c!P^\sJmI?aimeс}"m a4F!ե҅:^ג(zKf¥`X̒L`I #)Y)T{/odgs~/a)[UI j/maQh9U0P]Q=<5| j: 2tutu@pq,>lci߷aއPd%"|n hQ"*qjX3t V%wèxHӏO~{)y5+^L/5nN anaMsz]?+h ^4[7"dэ@ܾ%}@%(a_+n.7 eNՏDsɽ/ =ǯTTL]JEY%*s]!1bM~?! W  TݛS|噳=ךs P0QqoCI"~m;aо-Zt4m6/q.I ['%HwÑtFま!eCZCnS ;j ߾<[[~ݡSn$!YnhQ`. USNi͌ߘ-)8BЬjV#4#FUΆ9ΨT7g!0ؙRӪ:,u, # #b) [kh/hN~܎ÁJ-ZRrn2VpEF@7mَɺAB<..^ڋZ6QY%)|aIl,'&(m7$q gԇ XmuM23†N/[) 3M좿\̨Vp/̑;V3&Մ=C0>Ce $_&Υ~C;pC+f켺^(\qK-30UK 0􉉫z?.@Xm94o1ޒğ[TZډҋT18t&#_W]mASAًVtgd ML8[@ ӯKdܿTsUiw.Iy:BWݥ.գ׭tN[4'nŚy<˗ VuV!%[:yҐLjc%8*pTmz=fKcb9Aoc[Ӡu͏HwcM#;y 0ǍHJ 3btKÕ Z Ta]f@>Y[H93/= pj0`]l8(Ȫ3Z0U%z TэNr9 -lW>tPTo3E{dt~8"阙$C8|SO5MBwع0]Dm#{ o;!rnߎh͈E p&+@ۼ!th<7Ql2@D?'ޏw8X[Q慡<-B(A-hRn?6y l}xX6Б)7ՠh,H|;EI{(diO hޛ,ğٸk 5;/iSnZjZQE)[ ^l'1~g\ע!H73CV'{+*F* } V1ަ c j֙"oZ#ڞ9=}Ѧ0%k0%=LJ+YXuH]9gor(+4j7уɾQO(h_ERu<%kqJV ^I3~+Y_zdu$TxUݟh gaOm 9=GzPN`T `FX#\k6"e8S&8d s5hEaw %?~hTAZ4P`n w֒Ua^Q[m[7l X7h[~;bZr쐽JeDhGːŅAyjr{K`P !9v:u{PN G3gP BUDa~ĐzƛwlY&#q" Zg.%xU};ӁƫEO̽m!o镞iTS ߋ.w RꏅjDkbp 2Im\f[I ?!ÀYt[X>Cb9#qӱ޹9l鳍(Ј,aqiGVPDLNJvi[dqAW$KVf)oUNpBi>:A8:Jbaƾ޲z;Nф|o~p%u vnLfE'5xDmT4UG]}!\z7hJPbz!:!*/ Mz/"K}߳, _${EP!Ӕa#Hgk¥ϿdJK3h4E\ixpY{\2H8#a9jPyBi=Kg-_NgcE\+.MUx [ OTK97WKv>T8<4Urisqů<-eJy#)н7dVtf'0͂lW2We_r ƾY,WޟgEuoޫp}>2[濉<عO9N5)!% `'&Z8՚@" zvڄUq}_E!8v l;X1E0i,,HS/"7Fv';ߴDx!w7(%cdK q{s1Ի2lķX ;?U㷗 [{3ZN_ ~-/f-pU$N0D7o|I1s0HHXSWSv ry1CXuzwAJ३/++~X/+k䯵PNlKR?i[umAS4 ɝ7iIA>q`!G:lzVUSȕ|p *jX xܲ5y0! i2N+N^Z šG#!Ԅ(5cF=M& WM`0N*d!%ոcNj=۪OL,{1<Ʈ[eρjeh˖`1*],ٛ*3BQ[㲜&ԭĤ0f%yZvJ/aT[w &]/+;cd?u?Uܞ+Io)y욏3%uϟ0]L#)7g% b0ēh:t^p}Vm)9짻VBlnNł Sx/ Ou5`6VL \ DLT2i~y m%5jZ\^ﶭ3,l(iL15/{$:ȆH_7[vxחy0W* ΫU'{zqjbh%'ׁ+^w rZkmzyw|g:pXv?$> hdC8@iL+7Q8qa{W;pZuU='<(k.F"WP7|F.@L'3k_tkV{]a8b' Rl\f'8-]D![A/^}2%S\sYd@bv t&vb`re*p QK!KjV&<Ԏw@շ%kA[<^OPSTK7)<}EOjz*y˕~A~0[!Aq&}O)J!`SX9k;},C)OIUTݩLYҐT|z`6D4v@-2;Às _X!HAl;9k߲cx<%9J1NA$@wV n\}Eo_8E鞂Ѭ>#,X95`@~2)-9 CT5_:c y$8uOZFV.=s.de#uJ!+ 2vzCo !u/BdQΜ'쑇|]d.6t 0ެXx`x?^psAQd@IB]dw71$CP2ٖ !WZORog%p,TD=͵9>Țf4~:u-P2쒴y3*8li$z.x[ `@'jmbV u|~f41"dmf +-o.?ΫO)_|c#T ڽNږ݈종?KuSש63mQnt/\hod[g/pl]*sEhqF=!*=!Qt{ol1ǥ#S3,&b,Sڛ 8tg<QqzO>ʯ{y4,SYX~-t}^*01a q/4яl"bM9 @*xV,;&[-Үoщ'l,%|?J'SiR zͿ!euxmeȲ4ޢ]KsmCKHL;mڅh }eB9_rxA<13 ߲T 睶yuigm<:(rћ h8Ҡ/yV\RbوuP6X⌓s٣kdoh-젙Q_hd;sd-sCV]U]|{/Fo1}p0O;Sr '5=TyߔxUDn 3sJ,[ dw_͹&EISQ3fc6Kad['}RCKת6i941|k ax?2g^ JP2C JN]`CE2!A̰pjebm4D pe4ytu3$)rhMh&p xt b:0S|ǝ?f1X6jD Gn`t3xh#{@qm]oN| ݜ]3C<ǫԝfH  DǪ?ԝu[o]-U 75oW۔@ʆ: u.kP;!<0 !NA7ވ()|1o쳁Q8یr>X# whB ~\3uUM䩇 }Vimn-1Iɧv6NMd.W!,0%,Eg%[V66> Ob?<"1Py2Zkx:!V^e͍#VP0eddzv8 ɹYwo`z_IiUxF,rQ!v-A #<V;X#}Qwph_ң*[8^:&[,x-: UȖۥ'{8IX_O3ڙ}5>vKۅG^뱨)NHPk'LcmEÆGת =SO``s;>:d}:&Dh| ol.{v$3g+9 B*f}Z&wa?)ψ+?`25vv,4hDa]&Q-ַk#~KvzXWjq~;:~AbUN4E_` c4{~Q\ClG'ueK[d7_W| 6F I'~WX)GJbKQz-'9Eu5as{= 6Wͪ:p˼2scw-A];H]\S`ak 4K3t7~_mdb| Qv73RHEBu)*_ {R_y CHi8m5NDPˀW%uuFCnG%O_lEtBʤaJ,[=|^RaIhHdXO)Q ͋^1QibEʼnb)e:qC̘L/uS*Dž9/.AsrϓPBp8fbs+o1^a< w^ָ9c7/Ǥy\pbk ~8Ly&˲@Sҳ..Vk6y&:v-}W՘.3; qog~,U 7.uJPkx#W7'S_;Oh=DYh4l{Xg{zbx..DvzU4m<^! Y3<&1tC}XZ+W鲴K'Ϭ^Fٴ@|{ mC r/e@H KBj̪ᴜK{ >!2v9ڮt aWPgeGED+mwڤ%۾PU Q-ybR/Ӊ'Lם_)kf,N0kHTٰykuRWز}\oT&,@n\UB kKW-V&]2*7H#;$z!䪦 Z',tJv|n~D0߯2ؠm9U^`B-Gy{jJb2eoQB>9L]^\;Pr饅=E g4R;_?VܪQԼi︠M mo;Q˾qJOԈj,~+ݪ1Ge0Em!%g}{Sr6g^-bYne٠$h`0QX 2}'6J| EUh#~#oҖ=֡ GO|+2ψxSM gѓЗNΤػ*R2Bb 'AKD4с}V࢙htLY3jЄ($GHmeYe`k4tK[ (;neY@Ϭ`azSHӁA"E=f pr9oCBV"v=aޕ%VZԼ*F72tF-5M<ĸoX/xg&h=vʛG7FKXy9|uƺ6̪1c$o ZCjH2Vl-I;͛z3: nA_jUQœ9 3RxӔ#mQ14 +Yw5ɞR\vk/ N#~rocF6.M1VxnM"~)hErѶBD=Xcn*`հ Ohm=HWGx!6,wI1nQπ7O9G+nR&vKuE f1KJpϰ)#L"EL~tA ^Gy,nCNsˀk]R6`!d[2T4֍{,:cս,˟ԫm6fbߎ5B=@\Fvܰq-bSQ$$߱_].>?ڐM+j t[uIUӆJ;^,Dδo_LU$-j]- u%糺͠7S<ބ&~8:rYw@PQIhn週-S|aL_"+1O#/GIsx` f #e=ϮQ~v뎌1'el%g 0VÎHXs_FAQ ՛kTQU[дKShBJ"dG)ԯe-sĽnq@}feNH.wBP+"~ISC) OXwN+C$|!W?< :`%?:;+SPj YT1E:e۴2x A暂!'"4ui]sd YgG\ZOeV_@6niX4+Ul7U LWELg,ӹzey]!rN-// YW)4^L6 Y~6ʲl Op^{$tV /ŸFlΡN;g$63%B9$L-kYnW63su3{΢[P;T_*8CׁĦ`SD}fȉ[=wysgJ5MsYoFDA<`!( moaxmjC5:gm W).6eҳ e x8]8<.CV#T>"&q}4a3Zuk1B.Ey@laҗWO^b= /j+`1Ʋx?NrStm zF)n *T,bcY` äTv%ڀH(4R#_@ :?; 9FgLʠuiUϽ^'51GI ^aai;7\V#!ެUB~Ee.VRØx'yݢwZTulGZh?`-#$Pʴ9o8jG mGuگ$D IU89(ziCbcH|l0J,u]tdSPmevM V sk 2h 4 9z&D163x IFx",F++z`lɦ{p.`e-]ۣė rs|\&mDnWӍAՀ}eEvN=Qrv\S2̗|c )/|#p +MZpqwl9:ri@k޽tNfK> W8פ͙V+x_ %H4Ilwrzu?_ͶrQE$ @ĐxtU#w+Kgʾ[',2hOɘHt~iU?Bk]~=8޴;>:IU?RLl? g^7WfuTϿ.:uv\kѵfn .1]m%&l[mvV5?'DFts<ƭ$fl?q3v'K#o27}fɀo ,|TP 73adEĉl^HUy^E @EHݾW3HC."R]OXtrR3Xm0Y֡<~T= .'Q&j3x".wUq:T6;{[&:/ؗ )ݏVq\\|ɶzY~.;=14lurz]CgXg#<*64ea\D.XI u`7gY ~xنO{:&ᅾ'ߓR%w1ŜĢIcb*XM3]9L OC,yP:TؼB8H䕊8WD xJӑ6E(EG{4P|8,{yb0EuevoWPԠVkڦp\ }Ak^Oճ!=S{rPjI.ZCi P'-Un) 9!H`TqBx4=ڡ\nR u] DJwSĖM~VLVp]z}bogiӪ!>m<߆ߚ3e~)FAAH[o1m,>aFv*!q {l{ȳ Ҧr]N7f?+oK9%»zN7Zk# 0D&}Niu]"1N+BP2O2@`uRsI׵N?1_6WsQLcpVkoz Z %SS׊vϺ6t?VaIۺv^K]WpǸ(gS>6eiT!sj#v{<[]tBDNdclkc>c,qБ0$\WXTq5ͤ̓g8y0_aν7%7*>Y$^ళTŠV+Q/g;7Ešmn S+[LE/{q (=*‡\^gͺOŲ@-Dt'29~Ya&MBbwd?!]HR|Z_5p<)N0S+ϳ.5씂zҮl 1!8D,_EBj 8`s<~2y&gWzDqwd ر݉]ٞԽwD*ۚS5 2']daN+jg:pivU"R1A v\2C]a3T^aC.T()Oe8V{y #!Mg;po:#$@zRrC3(x„$dbSTnPhU,Bx |fF]?ҟ)%䣷Ozg.*\qed,h{I{s  8e6h%Z j4@3N|jjO$|H:nx)P>H&-/oW3庿J7cWܚ$e )yʪ'GrkOiBt3pORgq_4^\]C5W/W@!rӭ܀kUrd c@h_:$;/]iB_Q-`$F YUBxc`ݹe}IzMΡBJ:K)^l.[70ॿhz;Teshjh2_يG0,?4 HTfp}EV8BOr\i+CDaY*NYկ"1|q_EQ]"PS'] 4%ܜP4ƝVem19P=VI< ԛ˗՘ɔډeM tv ׷>xߎPv@Om I5x#@j%ݷ?o֙sʥϞ p$~#~ W`^f)#X zʹV''Q-8)'7ҭڟM=~8c2ΚqT*uT'v# :4\F(ө䩗 +X>*3ƔN&xo<|W"U܁+K<'fRa3U3 |$M,ņhc&MP!W Hc|$㹊0g\R '<@z5 sP5_W)٣D;6`a /%P:uႤ9Xbah |ya{Igц3*0ݤt [e0b%2wV@*R*?0Ȓ2hCIpNh>Q|w;\+MHxk :,#jpH݁b1jx0" ^<۪l|n Te]+-4|5^z$P"%Cs[+&O_ӢPB8LYqhf@MVf*MŐ ! _%$&j3ZBR1qA[=er*SX(`we)v/mVYAw(_@ qfw: ñ/H=Z(mAyGbm/leZ6ir^M721}H'0JGo` b+<fMK(/NE2\mdiŅґlU۳`/.21Һ3_Y5gk>?a$o䀹viPɔl+$dW\ZSHVo-?mK;fpl\E~J%[ZC-dl_+pİ;FA(j/^S]*nx5ݎ+EMh]V[Ŧ6.'_f,jhn߽혛d b0Ok\R1KcR| DJ,x˃;L&#3%7>_NJU?!!r0~c`zF+(*sB$|h"a iZIЮ3k ZՂN&y P[|]; 36 s[u =KW_JH8iá{F4e,od}Me L|{!Y9W,iK' C|yŝN)N~x5$pJe 5U2|$[w)ȁ*IB?N{| -G {n(L͜3Ҕ0mәUe`ϙ#IԴt#To(;F*[a)a *  eI07|R&%ya1*xeKjɤڑ¤_o46mϡԂs:d8( 3Bw\(ITHpYͷl| m>S&F~""B&^i!*l7xց19'Zc5X.AN<H Z[RwUǣGQ#4SٞOU1biBw<@lGDݨG &@ VX^pP0O[x@cS7T $רFMiK 8VЪ`̜ |N' xB ?&jÏer_24&vht#{VfH㦠R2/}$Yuؘ<{~D._!8CNn$&E  XO F/Zj;%.Q43%ےW,*$TȔ$9jq8U;"zPpZ/@8V7 5%Gl? [І% r?{KaK٫o<^XD U9A]il%}TӭzQ ܅Št6ª1|@W $_c:tƾm5E Ǎ|ng D &{3~eCFYs SD=?jT}ঋ /r{F4 h0<;}`<\-Ajm-F捼k"{sU*zk$.NDlN~rG@Nlx̅ ; O  dHOI^GãUqeᓄn9iхRNK^kǔ4>dՃW˔+ZYhGnϘZ^p|:=u(G$0̶V|f5ի5|35"_]9C |K΄smsVy UB2fӳ[$o/3?-̭=yxCO7Bbt}z4.k-uBkt^itImދ:<~YŃ7#T8dXnu2$9af@] j-.od1%6OKJv+h:q/P7g61`Mה]#|Um ƌA52J"҈AAc|F7]UBci"u%TEf=:oMS13K;᭧PŽxUeL{u6PAPG.%0Y HHF-Wͤعwr>0!VD#"áN(y-tSr`I*iN:ImO8`0뻸x:QupGʜ L}}HҔkHᛝmf }5uB %R06ڔsz}M7HmQsJ7eq7:~b-F%2Jc 1|"/ .yt6R_b 6QFwY~Sf/Vi8d5G\qKw*fZ$a?]9UΦ0yoUD޲U%—i6.HoX OiaRP>#3{ tU7S{Ӛ?yU\.238("!P88H{H?,IiHal#9v\4RlX\i57g;9ƶp]G߆ZIyт49CK`IwFtkB /0 ~uޫ͓C>5 s6XRΞӢIˆ[$ RZ,"jpJz{ ]5W㫫QZXEhGFV_M>2&} ҙ9:ȭ ׺5dt *'&1Ѻ9sNzxh(S!Nx}NlV0?wYo!Yux~q.bOYoȬ{񿍆IM/ Yr\ҫ[?9/3.iZxZN{y{cDi ;4&(g?_V"2WINyJM>(k̈́ =G9꣛W"(#L?i9kpfK1w^ע'&Et ra)`ȕԨ:/VnQoI~:̙ko1NOϒHS[;n zl=b#?|Fx?UU+^{ް a-A3ޯ2`E˾gxV;X7)22B0#H-IysWzb^wxoɦ'}:$Isw.%xU £qS1L_Tj9Vz9YyPV,I]4sjUSP  ?[q4|geO3l?b2OʽXO+nF#> C/ WxCj QUCK_>]+;,}cD[i6GIW4{;ÁF!U|N7zNoxq}2J~EȎp!mW/-xf9 ")OAf*;Kgl}5>Ur<' }N/?['ي{?hDӖ*JSZ9;9澉G!$ .ZM">K%Ț{(%><߁ AJ!@E1eH %Gp I%-Hi==2%uru~ >߇ї[ ooJ$mWGd8Q 5ʼnk3qIx곉t 0FY3Wdu33`741mzR0xVHA(M)M>Ci& \< K)+UǗc_5@[ kE;2KcmfF5] / MHXM k" &D6tY$Vr˻ ș5>&6 ā^3l}[!BgKԠ48W0 n%kz5~Ł6YʮsϸY9'8й^*vGYIޗ$I/ 5#zVԭ>v{4>UJh"`FG ܺG>r:('h̷k"ZAg.4I&݅}6oWfmGERisRRoEl\}!YN&B)xÓ;u"w^{0lG/z} ! =ÿ7 mX'5㴺ۢ3N\d+Yœ [k^#EC݀[ٜ(cA{P҆x+gFg}֑'|0|%5XL+143+3&NI8hx|jLYb+4RTR͝:D.SP$/1a7D]a<dtR R-7Њ@06P([Pkm즖$P7xx(Oe>ƂUOsH+w&ol U$O"1FB{ijs/,.9vh"]~!O捞&A@[n̥A>wpl֥LYy7QyyAky-&hM% mm%cz^#Ba;<R*vf+690xfKޚV'w 1 ~eäZ*Q}j02#/[ZT}gWX;WC_CÐלLW,"}P#* %Ǫ^bLgG9=8 6SNf=ii6䏿4;]zx%$d+#V ;n߀}Z\'6ӉֺˠqUuvg=~YjW>F,zlgW+wVRF: -CQڨM\1F !EN=Pz1'vD5>nI$( buFi3 U^ —.1 Kf-_^%zd6Q,cz{6=a'wofp uؼlN+EM?ۘCT_9[Fډ0nR<nG1iڊ@\ =ep*/>ojEromc5zvNTd! օJd:~G IP`%y bvX7c$㔛Y8,xߎ.v~ciw$q@fφ#$ Kչ9#M;k^s79Blwx˚8=緲Oa?4nW]4xsI]8"0Z hrK(JRN}W75+ݳ:(*čUA"5e1ϲZH%2<慎&)9~7jbQ$?kE3i,=n]Xly_9֐9J]A*}9~>I6 b2MT,fd(丮;MeDN.Jb?Jz;43A:9h,䧛)|XF(>b\QDľiXkՉb_h'N,Z徭Z#$ xZ4$/4g86S76iBаNH.]uR2=Ň}`V'򠥷^-pIJ`Wk `ȡ A!ׇ58-C~IqrjY.!yQOEքBXQ[!'lV/#xoⶭ gzת19IG`g?`#։Vǭ&Λ}LWY_Dd/NĘJT~m \9)`叩v|'+:}*?Jݻ2֕X> U"!gN}Fat78Pָݤ.t}e(yW?͚egwEU, `'XiO샰ezfb  Nq8?ά a"\>!H:{k=E\ɒi}(1^5ml+~h j.G@P;. qr&>6aK+z5#ڙu  o@q'x@g/\j咸864cT֘M=U!#å,UBtB1xVG*˗@c*aj17!jH{EܤMO"#9; N]o, e ĽGEH/P ǿ~=#˰aD j8^ћp06iR{c0d/E?OcZCJ^kw&/ Q٫N> B_hnjs|uLՅGhb kf & Pq#!ۄ*%AU-Q˯VL7ti)fVEDRdسy :}]1*QNRz^lAe0?b\Y^`@016k+ϢuC&ŽW6/Bm64~y.h !6XTEύ&(./ [կddv ) 2i)A*wDenѭ9ΜMx"IXz!WEYWU|j'3K/TحYLP qR[J;6)8K2"g˜8x-sC6rjrn]L~7]ަ#*-\0Ȳ }dО/?bAv4H׿$>qUQY)[lȨ<0u$]kPZr~AUOI LXeWe^?bmN54Ҧ 7G.6<lR5vy05eH,-/1G - ǝCOĽq{y٫1Zpr< XFijBWz'F&ұ8XG!gK1ס׏DSHHV h!oȀK31KrŐQ:ecv6Өݚb/`Z}E\qr&5nBpe.RL^˜Ӷsn_\TM?ooc2e|Zr` 1z)_N-wEϦcܥk@m`FKJHd5DI,xpMeH?U{K" ˢT& ٺ>`vx]S=z}S+M,TsUɎ2!5p"||Lf@o^M[[T6)pT(uBب:AtR0nF)pB|Mfi뷬m^XIQsϭwmAyY.|`QVz]FǼWT&vWDxBk^.+Z7ޚGukN^<es_?lN~jUR܆HV pWGtx6$9˦^-Tۛ㉖0֜TL!Sb8UKB|eM_EZa}$w6QнL!R7sS io4f:="kԃRX?S]?$I `NL8L݂@K ;Bpn>5N$Ԉܔ7T)!4@`/G7-Mw+yn Ӻ7V,Z>߶ r>fzw  P8 (j0bA}c>vJ?UKc]hЖJO7=JZ:kWDb&daa=:w:$o%(vx11``ypaƇsk8uҐT)zsNqomh2Y7xk+e=`] &wLf,ne2ljڪa*٨iKBUpW%N3K 8^dT?@ʨE3e ZhxAa_)ttR{aNIB{)[ BO OSR{}[$1ilՖ;`j@M{ě-U܇v=BHG (e7jK) ΀}r4ix.չl;Q'H,O>Ft\ ޙ}pVM> q3x2\$W "7c5wx 3"V&,ﱒSHtqo?0T+MbwA6Q_a@FWJG3@!"ACz8rGzW &g^w\ݶ?`Ӹ_e6DgUhy9guwBO3T}t) ,] Ϳ+/CHV0bNg!1=fNy!+t*w=תiNE6"N7$HjaqLbŊ:_ɖa~ZbnpkYԒoLA&(B~L ץQXfh;Crnkng \¤+|:1V:`x ^.]:DGi}U[:2ﵺmgG3C"~;b Q2kJ4PMϏhN 'з^m0wbC@ky.6g}\5B`sbƱEe?b SOҒ 1A`^=cW đ3-jBpqE/Trrn.Nݦ/'X2M`qz%=h5Sz m2R*dZz?GNjM4CF*5zwS V̩㯽?\'K`jJjmL/XHlz g; x(쬝גn( B?RiN1P> UȥH4KGnvj]Qg  pqk)<}E\mkȰׇRet745 .ÅމY[W!S\ *?(|a_^{^.c]a5C@dp@<#(+6a93LWAEm.9-C$D^hTE@,h﹵0:bO ˣݤraݗՖy>XZgjd[S ~Z_:G[Ҁs[R^IKVG/Ӵd*0 7b]#)5oF\U&0[iäy]^RQ?bBBr>xhup]nNBFxh~6~d-O# P[,o? < D"~:`*Hhu'uzj}|O|n4K9&D$ 7ϿF~ᅑ;I+;& Lv7Ƶ_Im07]e"/F7A?k\-.bѪ@˴xVQ(:[1?F3l:/~pI#%s4DSAW-_ߔ~QAUɱL̓v> F-;eً'/u+ݠwJKP$?Z^LtO3'8ȿ ϺH[+*&e{ |r4¢_z;1J7 [x |z=0^68Nƽ#<W,Q9$;²Ӧv(Ab{8y[-Ǯe#0X DZ˂q0e詴s`: .<gNXA챝 @p$s# ||1'@h%iК.Ij*Jس'TӅů(=O"wИfb6E\Hpd4[AV#!!{2si$,.5S"[> CHp˺.Z?Xg)C :0-ڒ>mkxq BSBR-RW1.21:s3Lm6wąk]ӖV iK[⍐dYgVTƩɕ.b~2 '&9[ ;:!`lb@o4:W:i3tjUp]n/R$0IJ_UєN0Ojôm|VﱭYdz(?IGC!')tS5=!u`MƩIO'< dՊ?: -Nlz?_',Rfn堀&+O6mw$Vzʳq`Y͉Xu1)n7 =ve.}:oLRgt*]aК3C*cz1sK_M\.@N2& A3'=$ܘtdt}`%{4~i2[*g̒UJkv[K>V&2" 錵ҁg <"/:~ gY7H ތ;U.3{}1]杭;~jV}aTd,ה9vs1 pt &ɾާ^ft<@U|+&Pom!mDMRPiH@Qs,arj Q*qqn/ Y,rOe=a>z~3o$hC)=!˾,LI/V= @:Lػv2|Syʚ84}u6W$_;I. (~42ȏ}b ?'i*{U z7h#WR6oR%p8 W:2^" ^D|6¿ϬDѪ|Qğ~9ug?R\-_g-*.yr?F5:ZJvSWI mx)5 gɯ:BH3b c~ б(,wA+R?j8W 3]D=A+Z[UGvFl2lOŒʂ8}s`=7'cF/ЊX\Ȁ2v} Qi: )n/ZL.O,|>BbP88 utIhoXQ52b a GY{9)f?k9Ư^ZcɆBbn}oh/\A Z-tQ5V+sD?m?._$8\^Nʰ_ @u`9z{ǎ1AH^,Wzzz!u|xr326Y;r!8oD /3!:S MVb YPlɎ֟}r4,φ4᝽P@ԅ"FA}]“\ʇtf~泯`T:{5B{p}i4E?m|c+h](Q)aD_jyZ,=ʹ#,;S,=IO/Uaiqz}览 gxy/!?9(:5'maY*&Gm;S-BY&Ku3Jk[g`?8  OrY͓C$)tu[/ʳ7,Q1*>+Lɺnȶ{wɜ@/ ;}_$icW'uDٹ=Y%܌ТI}:'cϮC O)B5p>g_a_ژ 1xa{_ucQt[Y +]·8F*1jV)UW@ܾ(7ڤHꪉ@KXbAT8j^YezU)o\jY:",-=@q S3*![4TK8Ȑ،Lgcv=9D&;0M] (fHAUR_8Mく Q%!.~|C:J^ԞE Vl^Ħ;U1՚/hǴ? .8<1"}ґo-"'\Wϓ _ceawM3ehwB[GUI*(!bRȰcAr6N8FF-{73}}ˢ/EfX>Hɪfä́ůVH Nr5skށJOpHa7.N~c|7Jqr;vKs -pm{5>߈OhA L!фHy("oW1.m>/VS, 뻲&)SI07uoQiF',០KRrr_7LQsO:80IwmDk67z8mQO[1kAWj;$3tl+8Ii9q3 /W} LxU &.8n%^N zdtYV Y_0Yˤ LX7PY-yIJ\ n9~[lyWՓhy[?bzfĸ,=Y*va@ɸ~fLk$œ`1hh_+rexak_v6GqtTJ69 oh(N+q9dN4ϟv:#Ol)ʏm6/Y->*T@^JX Y ߢUG ^V1Nb=l̯5AO j24a,(}M{:Qq6hOjƏĶc_עJqf+·f8z(>Ƭ.TQB<еkܰ#2k3׺aXv*ťn>3"+FP& A[mx+R6{:[8i_uԯCX78 ||šAq\%d o've^yei_H vMUM8֯}:tw>Az Uܔ㝒 F!) HSX<Ao/6Z* /[jd-5h\m/Qedv^ȆLш3<w Q9gp8? xvbZZd#Ю,^~3Ckk<ᔃD ǧKu *\< !~DCHX=^><Ã&6vw4CܹKB&ŎU /%`ݺtH\Pw ֘O8_iRrZܓh'&6\ʛKl3. al68C{_k ] )/MA7qp]i̾TB;ېngp=m_4&[v ç[k aLݪҾNteK&8&h+ C9B Ocr]JEeFFKOT-l<C%85A2%Z.i`A$_i(uyH!`Un.Un!xҭklNv+f-_ٛC@U28b1zh/+8$ L$L_;2NJ3p?BsOj!/[e.J]A@3`X~%IDX#4J`3K_BPVu!,5CU$lU&>;5u;[g -(heByDdʌ! 1EX7n!GNJwQr WG>.CN;cK& dCl`42.4xom%A:$dlb Z9~ !6g_(&U9ۢc\9 z?bƻXIu7x:f DtU~c˱J*ĭ~=bb(C{ѼI(/CzU-}>^|x Vkb c:Q{ L򚹕h|Ὰ貚P嗧mSt}bj5'X8䯵mJ+1+pP&0H/B6~=0Ď| O@Do$:Cg@0*\~ rGYW=+s.;"ʃ,.CubkCUh\1 $GF1h`G/fi7B Yh+9ճ6 .-A;gxʆM֋_՗^> vfASxTv+F+⵮;X=j{mWv2!.tK˖okK-+hqJpiE4h-xR9NF(= km4>9q_53$DƁ͋炛I- I;/YpAUyk({/g?:ѱeܟIHyozw=0Ugw2M&QZ^9?QWv1}<= ·+lz4"eܲ7eAQXnPGĦUe`)̳,#0{)UI/NzkC%$yD9!HMC2퍬u_ݬKP?.)-xaT:qVg$/ׄcqiQB<̩ i)6lz%kJr92_)EaIJ2h<*FwX5Beí:zyYhxZ:($;"+[Ua[P#̻2sX0dL(4=aI4΂*N0C#hRhy᭛ viDJ?0qi䘐 f{,fw AHi4P!`iHOYC ܑMw\Iɓ壤aM45@I?H*w_U.-JsL0OR(ˑfyIWݣJgu@aH$ <_$&q\` w짃LwԕS! fcފڍDe1a!Ňja,H9OQRMT>cZTU 9Ԫ7=@H^KA2 UC'zŘb0{+E&=-v|$׬b<~kɯ:3zqȠ40DG؇!`jw}1~!-U(E~mFk %@t._Ǥ{V rNL5N-Yrn^4'ivn:!'_ t:+8/1 q)j(+C13wO9v "ʆƩ n%"jb$ytuԂxE<>pfiܤK)wa7-UD;!-,Ě7{ (AML%c$3:-I)!Qo${䤥9v[ftXcsڊzAƵ~Sb`OɆp 3G?jϘ{WdF/H@Exe# ̘wJog-V }҄7r=,"G.[;S,Pu.ѐ;> \ˋ){o+=Cv`3,TcՎ:[]ǣS!IyHQq{w)`/eAZzZz}`.|HUs|* qE\F4d)yG2|rDsUü ;cnI)U1 yX3Oy>^u\9AX 0&ʣr\ʓ~gg=_C|p g?ĆF^A3Rhb3eD ѢDpʙj _&- {b8!~II݌R2tٞ0s]jN?] 8a7"!vG EGe'i Zx=]< yRT" q_o CU/odT_$Y0gRt2acНc=)F' 49ނ8}i0vى^u|Qv:)ŽקƥS!Ԫ&C"Bl5J~ny |zzk\ZVcYa6 bk\8@_ gfGר8Is` #n*qb!ZrdQCkۚpsK*~+!+(!ST?SzKQ,P#x-89p Ki>N^XFxoP2'z-J;a[,187qѯK!V'1xg;|c&WĨ I %Ca^c&~u|5Gh6@Ty]Quum5{vX g635!ۭrV6] [.]܉nEl*PZ&aZ"3G1QPZd[PH\>Y~>s+;6 ^Յ]Aڄ!Dli%^ =DW'H˞H/ʫ/d_0\U6gpd+#E`O\(R\=kO'No7_͞Ն1 f[V,o "V^(Bj1k]6A($`&C[~=Txza3Og"J"edhvF}nΗYX8NaZ^ʙɓC;c;ԶhY w@Fk1)Aڞ ksiAmz|C5f3O<ޖxNh ;РNqYؗ pP5.D(y}4"t%"$.Wg/I(@dd(x#3,6|^-j.3@KKF{Վ!L[TלIf@ϡaI eTȈ*EJqVs|xS8?L  *}z>K MkaMIOe!P:Nf?hK-+h0IH EUOh]t{KxX%{Ig|>Ror4Cc ڂڱu9ӪH< *nmhNjqdVz(h&Z Xr")NLt֚bE '޷b\qݴ ;Ϙ[a^nYoz8z?ʯJL+N0I:̫d`Lw*6u&p 5 sd#&;@Q0_6X6+'RVU Jm%jj2sfE<'Rv6<9cECZ*#?:{*^5DQE / - =1Lv ;_d*}83m6'gߑIOVeeAlCp"cL$Vg=}e{]1ŬG@; ʼn}}auXbC>n8K%k{"DS!uL֐M9H=>o4E";QT_YOsB*/VgKt'I'f(\LrqӾp9}uhss} Ҥ7Nm`l0,M,=,o>w!>mBr-5EqF=bF:F H N >U0p҆Z^1wNv-~ɁglU_ڥe7i^NM$ȁ5r@A$)h?]TA |0ɋgeS aP~ M&gTg4Q͎A!&pF]!_!tؘJU# =M;OmCL(ȣ5nlYFyoDc's }濬xԝuԉhSo5wq7R>QTGNR1FՐ]eO 7,ÝX8ܤV|S$BC_ɃcKw9"w3/I?9ݿ| rX޲ZjF iJV7zn8qnf!EݠJ])ƭ` heW2ڽ5=؟i1T&띙p`ZySSۭU$Aƃ }=-;"\I83b\j8K)ᨨ@~@b=`F>'h=sI^kid9$?Q:>[>.B*ڠ$"r3K*8ƙ6-CYp799u ~Ukwm /R%,/\3}ܜðu^BX64S"R_sarD$es2^~R7|K]u DD?'b$kOeA_v^vk0Q1e:•Ŷu$Lw) E:CHy&.\op}x[Q27AƳ#STU%p%N͘H+B,2G#kMsfCԱAH"/)X{A 4ԥ`@o0ea?P>vA&ʽz "=[ sUKo"퓳7S./tXc3lBe8PZa E*}>,`]=h҃b3 Orp$)vx~'P8 @>{/CL .v?bz/y<U5 +Gt tš`m2R;}Sꚳ \=Ren,W۞d^HBy:!~}¨JZ zR}+3yXAR!tdލvhpAOߝԫ?6:b-%:qԖ 3nIЍs]Q,sT]e[k;%Xֲq{-]}qO+ttx7-3f모)%Q魬rhuh3[HfWf``b"B= ⁣^[-X@ 3E]i5ϑC<'027-/&f-~gFudꉯS`rLjOѶC)+{H-L'{?X h'!%{/SA m gtw=J) ΰ"+1A2v&e)=+?~0W~Bw08һuxy\!.wtqi԰5IH Q'6IFx0E!i˖/ĩJ 19Jb!QiŎg]S!WI6*7-RU UM\m>e763zI`/!8 0<8􎋴*|l"U,vyk8>T5%pMpg  x*J}1wH: ݇YD((>CY'8Fh&-n]cVh. \._f=B'*{rkgc# 2O-.Mṅuy ZygNs+[u2K- nۤ2pV+M|/x%|YzŊ=>  E(>˻2CL]׈鏘(jC.7C-"3JN֥u#38QS ޛ ?Ɉd@B Lsn@ĩm9^b\1hw=t/sCO1K(sX cTcbz^t7; Cu鿗Tô婲懢1HPϮoFc; zr߮iťCVBE{yaQY"b6cZDF̷DXn%uw@E~w>a_F3־T8ЙZN\"d'tSa?%ޘXM"ؠ&<p <iYm,o+(*1X&n.F}>ׇKo.!xt;Wyk< |z8)'Z\wu\3m#t),skx9Gฆg>< {8RDX( sq,E)'7nYI_&V!U9e-^  =w>9V+cdǵEs7mۺqqs4)\.kH ߷q\h0ZB쓛a{" C?}W!3pތD_ Bx(l&#Zris!P"<&ĥ?;l43wvma-tics Gɾe,us:IxNT 5Z!Y=pq )&xq+* @>Xb/tHW>T ]%b0mǮ|nȤGY9F Hn!-&wG^;1,Lf({Yq\JkN%τ ;Ŏs1a冐YQbc1VA-ͯţd6dmsi h`1;>Jj3 G5Pwo&Wܚ|CLO-t2ǧګ<&4N $x" I+AF^Zg۵5XMԎ_1qK!,uCn#CE"3 >nxˉhE=p{kꍌBw(&sFG M{P5ݍ@k޸RG$~Q s>gPmJg}IN.TOξ>>obLRYwyFם19*M"C6O^F'5@3g&A#؁Td6P,,|+sP)A942i4>OPsG2]ߚQR['tOaXXUJY5HRcE^.ؘq)݈&D4">&>SU .`qK,\TnPɅuKMÞL+V=G%^a4͜@\2ٝt4TM> }`~hK9kk7sJܵ\ӲwN@^BW@R;|ZUw U &Oz.qe #Lk vkQJr!=Gqjs"㛮mihV>(f~L#Mg?wgC8"79@V=)|G/YƮӠ$㪄<²\zxW]{pw|܋Eɲ\N9dh=*(--<<6^4cWFAnSkuW-p{v>'iKEɜt)C{'.g,I6TCN>: q6҃ u(;PrhZwQA-IgA62PG:h_](RvD@Yͮ’QZЪy9n}2]"BqWMCͩVz #Xۜ/ )Yd6jr[ب8&?I`>?G50"NL}ZW~(C-(TB@ y,.I p{X/1o!`ۡ볲aPOm:g c'G1b$_TK9>L@2{N2 -BS{07yɘ~vz!8o%I6-E"4v3g籦r ҄A\\7_svb4ܨU%wjzٲ,0SBZ(Pce~7-$"+jFG=d';Zp݊[hIY*TOa {S߾7kc7ׂ>+z#awԸnjv9uBS]C|4/.ԋGa8i=7Tu\Uz};LsFd~:*zV~f*IY&1Y?fO_ [v} |wP.ȫ5:')λK$X[\Yu~Kd5c2A;j;zДFT,dW_< .,KAs\5e.;P2 uRgzQ<_i%e Iu囼+).<]yM-0>e*v 7v'T ϗD%9@m b{DXwvWi}5 ]:+m&8r'UcZ9iS *ad}s$(ubC}ȮU7>%ߺ69cSOH`VMM 1aYe|@@GA{ oQB%Mb!t54yP6)ZǸteχURՂ.|*L_wfcY̌:RGʚ9*vJr7E 9Q {M~2,&?%и%bK'F4,q&g:^naz'3]ˊs ^.xA%:>6"`~ cF=y iݧ8p>7D z{Wy!ԍ("rUsg+dAy@ IcVTzMtY \ 4Lx#>^5MdAiY@RXOVb B{}Gy t<:29s} LȬ5ΔU ӃFr1$n߉3C9VM؏Oޱbʌ =syBv8'=.!xMPb'af]#%t!kd)IA:jBy c㵍'>Dhb85=_/[}VJ*GD %VO R%:K_fr*q/S&37 .R#z:v B\ x/M v}c| C\@,G_ğƵo[[Ө4_ɣlOQX'a\"v2`A eF}Zt䘎xdujef}\.\UAoQOy&>x@(\:)w%L:ha5n,UvgLg7Lzp}H/^/uibE&eʼnkz %.i.Vr5jԣ[ * D BSO<P@fPfhX:|E9xy_9vAnHeC~үv<)i0O*s[ x- eiW5 {HDIű/ļ @δpJ\\&B``ږ 3E(LOz/ӿKjP+3#?9ntY`PLM@u}ޠu\&sfՎ` ׆g>%߳jˊuaLJbN"6Ot)wC~0]EQ"\-v j-`Cnz e.~ϝX/(o\:ۅ%7aUkS$''B3U+#X6_/oNjCº/PU"euF' "_$3*ΙS.puevh 2v#@t1D&y UNǽ> G,s`- \Wq@w4{HXzVѻwkg]_M.~"!%DSCXʦ+Yu"sOBi7_Ft3?ẼifY=<ŋXT =4oa}&\zIƁ:\Co}Y+6<_Ks${Y @"/N哘׉xX1({˝l/*h?њh$vx#)/AHްTk ], fb8A:V<&Ibk1rcoi Od+pW OGR&*>-M!ƃ]} ]f@`T QA4Wc$B`Ȕxra7BLKlOpl)yXFWWbu;S),j5GXEb ƉૹE1,[ 5 62fPM[B H7' d ?hgWGvh+dQJ,3`#HJ0G]Q[y=`edcxu7~ezlWJVl-ԡg#AT/quQQ`].s-vðQ u%**4u5WڭZ\d] #ˑ&SںtzRյ1H=-'ƒ]MrU&6?Wj4궓v3,ion|1grue`_sGa áLhA1Y{qF)$8yGɸV@eU Y8Z`ދS IJ~C>LبӆE:):$ 9FDlGHSҗiwǑ$ Жuf1>׿UۃŐ̇NLҍjU'w6[tMiڵ Q]ȋ/ I]9=а?A?Q.7/@lX=Pu2  ߈;v.wc4YG׻jj@Vp/:^sG@ԉQ%W=im]1DK)Bkg3(7حJ:P\e^ <- X 's[nzth+Bb*{JdvN7guomd |W ୗTiR8.2KDhMҕG)caxxI ^D/"wttҿFjY@߇Ez ]{7ḦD gytVSURcH!h v=եdt8~(qgw(Ω`!-VQr<|_ m:˝`0$3~(gYi؈#V^SsD pdMȔw-ҡs:ܚjjN1E>_$Go` VN;63e#>1=0Dj@t5M8xg`%C**>ώrݎ$eNy3Y]b}`s1s? pF$$/`C@GhHTdlA+bP)&Puty+ol8m oJnK%BDtP?"-پ$ }W7a6%6O@Mb Z(IMY}҇9uEd,Rt,poTH+9gVݐg"U ,Z?\]+Ee4E HM tAIYsπl*)|{\fN6,L 8I:&W$}EOSwQ7T3XdJ*wrmtc?QW~:6D3"`$K ?wz^ؘ<}l~{XP S|COc=0o+bTipN;A76)j/窏c\̢s5~o*DeK\ 0^$L]Y7M&x4 M,7 UXϐ+7v#ӹk`&eU#9gx.DUS!^;{<+n Z=y܄^ lHu]QGL<ASgjNP??`m@o^2piIECG^뢎>&Ǟy003J烇(#M186!KE9\ `5}|(v.AȻ%L>uMpH^Т\c0R>(ĭ|XM9.-5|^1ܷ1*Ng`딶R 녃+EBƾ+H7{tQ`qJn_ݐ] ;&A P@~T-QBF,iYx rBH~_Lk6 jd -98x; m5b9O1-6LtD=@$YKf0>}9`EaYKޖ ^& nX %1g$S XCx׶ڹD9*oJXW{0Ǟlh>d{R:X|gLS=ONRunnZp/bJvW3] ԥ5 C\լUe'$(5SegOtHXq4\V~=G ^y*/uc4j%4jk`@5`f7iQ ml b:S~2*aנ^ф'U/Mc*e.$Y>~)BXnyIQYTIQ{YߎxJjFz9EF? q$/\~q~Jb 5K"\`a4pvZ-C\WO|c8ҙDh>T-נ䤖s6nN"VQ9IhM'J; F6kb_Mo `wQ[)FxX$/2lΦ \9hH|d5LɎްZi7_n/\B##(QkΌJFoH(a\gAYsf@Kgw: v xx7ďK}L5dHLEtǀҎUh%ώjXDWN*5綽v ԛNwC1z[3?AԖ3JuTB'ԁPѰ+f-I \n'ӌi1v"yQpBN#yi.=Šy,A;SMH9^{qi]4^ &[\obUJ4!Y6k*-?իa+S > ٸ׻|D/Ab,Y<;:/lDwc C)GF{lls-꫚GfH!iĥ ?y/CⷸiJb2.DZc,, Ӫ/n" %Irskr?}7r}` AByD ąK)W{;%TK J@!7RDnI |MWlaQYkRg-BbVnwU&p%,dŐUɼf+[@B*c)|Js'K޶o O9'H$w9kUr'w4۠GDt(GH۱ǧt馵>V7!bEzm,ɑQ}gEsjqgPԂ8s` &R f;W-= _:D}@$GǕabM.e%뿡nlZ6(N dT3橜ۏb\9))z>YDmK&=e0 1b"aW_w7tx_ؤI"&bҟ`rC/)򽥍1~O\-)G֗6c7;K)h3(=ƺ_QQkH&?5*iy=]ռ-w岎-fAdrOOiOk?ϖ_yVɧa1RyFPeR #"y" I#0f}٢X+?5z\JŽVXD* Lz݋au'yg%Ek#W3FwE D .ìfS`ѲeЇa2 H^!Y5`wSDbqn7{EGNׯM!U)J)sS">vRt0[k8>1rܷxQOs`J$?E(t,Yiv~x`]QwSXlUVeV¦h`#7sؗLke+V5giŭr+TYu҇$/ la\%8V.O5*TSXla'x51Ck#]˄Kݭ=CRg_9I.zfo!4Phm isf}CkSl$܀B 8OdAsQe lhѷ 5x-a86rSѲT'Lsu4۩_̬1~YE/>`(p!BKTP|!7Ԣ(i⳽>*>0ji_ᤒl?#eb[ דMvNo[>'P8]s.QF1Du|*)f)SG=w:Z)lE;<e߼[QfҬ㓀^9u8Wrbf˪xem'bhBIbBD?㲣D {geՃ7J,;c5]ꚳιdiFt,XtVS~ /f(6y.4D2J!d|u-_Z[fz^C''t\Ɵ2d `/ a4Y}ٙ`T#j/>X3\n},Ц"(mƇ3\c`5Vq]sP7ཏ{~R6:3V): OfKۗ(CE 5TGL\2?;5б[=b|Pgcxdl2: ̪OćkdRKkk NrȧJE M8g Om[9q[ 7 ;%]`Tw v"Kb]q#Jn_+ӱ~TLY,ZΞj#f>X FI[ 8HKx,6Tb+t-Xo.n uktcp 䄈_{M~fʏ6?rch9 yjYeu[./?lu,%BS+lqfƖ ѿ&RAm)p"qa(F>0"jYk?}ĸpKlB?upU^otl\5OcKmQ`"o] 3-Íو+ꀯq6V0}U'P|9ֱ\U5tis]) "|65:GdP9(:XHt5Q7 `M;PtP-(OۭWpLȠ{XCRǛʃN)rL!K /Ih-FL65ӒDg$1*ˆ|H́^sDu}FԎh<0σ@O~B ӭDqL\0xqZ7!(Bysdkz4w(ѠmF}EйT%h1}] |nj[6, y!h2( R%wv U Yto&՞PAn 1$YVT9v< O AsKE< :- 9ffG:xp^cPWhȎκKY~[1- 7 irC}{}*8y*izռ{6ݕWFv}83 eb7:]rHs #ꀴLI뙶Կgp뻬nm)严GUN7XVM!BnWo} lx=.-YzP!2L gDG=И碾)q^f-Ux]6I,CLez ,<ũWضVEqF$,} |2?;TFf B6OuYIO=GR|cZEzaxAUCZ[uXѯ)QȪO'.-qJϏXKnTa^_&YG)컩`9!^{ 6U-& Hjg7RL"+F)T@U:?>t)kS҆~ǖIQ)PkkTg$v aTDKݹIK kF*pw6mk9=Ma7utg몪%Wf [O$z}El!( <)#q3jt5hPTZo(1u E(,FȰTʛ%y1Qޛ 8ض2' 39o򨾰v5ݪu yN%I ,_w%),sC^쥂Eb C3wҠc5 _d_td H֭c%%4Ͽ{Qm TR* d?&g}{nģVZH%v1EjNf&ٹm(IhhZ"sjV3rc9J1rAvؤ,ﳃAUTws<nk'E,ڗ=b7Whe˃jŞ5IܫKBSߗ/9i7L`^J3w4WWZ\Q-%/g8أg6e~?VѢõ0ӝH=Z.XMQ,5Ƞ2z4KZ ΟVJx5>a(&',?xs.B:Jh8H I£iP0._|/SӀalZIgdIc'Tqx*Nҝbmd%ykd#kFm{<a+3' j4mӟNp $ynzx>E%["s6(;;o@ڵF%c?/f1=Z k۬وnɠöbfͫ:ރbܒ3"_c_X1&?Ch6j칞'WVSYu$; 4թ:2R4*uYW=5aD =YD$M#fuxZI 5+ 9F5X?DU]6_וZΕqUnuJavNn(nDn#H)컁.FW!M/OӶ-ו]%:JSmݬ'i ''@RbuRaQy#cRE}şG#8f2HeȾ2yIT2Q|OջR#÷IȊ1RRM(bm>0j y0NՌ_ CZe:dZX8հ=]aQy\Xu`\X#qI[έUYT4lQK<0oS l>`{o?֫F_6P4ᇐPxŒ_:Q$QpȲԳ~]$ؑsM0z z&e]#ś}p}y`[4e2ɰ,A]_ir7J 9<]Dn]6K5N(T<^ - IR')}a#7B녿 o 3j:g3^iy w#$, [?SFW* (YӯRdi+QeDkvȿ1ap3W̛aJclD qΞ!,-bP5LH:SB9x|)͂}!eMx (姿VO[ԍAT% u |i/b (uj(P.R\ޤ >ȥ#Fe Ce42G+r)QN `;YJjœ)B/!9Yˇ"ODDŞh@ށ u;uANy1%0$@ǾZ6F kf]ˈALpڦr/HyN6~ήER`,PL(\1mG %a;iso=f`z јh?_ovSk?mof=͙V=H l&?Q(, h!<9",'f;ՖCH8CrHȆ|I"Pv&LgZ6,cqc"@pbqcz$Xq/ը$Lo9H v_WD&oݓ:gA{XMMTe| sLnU,S¥88HW7b J5Yv|No:;nwš dwe /!0Xw8&{~-sN&٫Vf)*sҝo6Lž: /| =~nMZpsEЪ&t]V)O5!bt> 8c!񄻜NO ]sXwlrt/>Us`Mէ^Y V 1C+A+gMS,,nwz(īƁFNZ 3 B,ĨK\+DT9FG/ҌV,MU7lk|Q8xCm-5i]AGAm܍UO;,Q!gT09I0]eonR`,@ J_M@kmP2\@bSf8N"uuJ6O:ݽP)$l,-oP2Z\2)A^N 9'#%H0+^1jl\C$˾C\Z߲)vW?E"yv J [دvo9%"1(`x Fq1ܟuvKd;J02mnrMGp&Xs(+ʮAz&E~v"P̓fNeQC~|? wBDo|ŋC(~VXDI5% JQV1%Afk,+wT &ЇՕ'8F1ԜLh.|Xw \M2ﾏPI{91E6SqHCp(^O΂$x3IylK+D6V?]!P^@e>bH{4dcb}M=LtFX}6-y`{bKSo/?O$ p@蜨b ́pOVM;γ2b0r6Kj2 0|ͪw?_WaG3Wa)EW?Z`Q۫ 03n;|0n6ɊǍ&49 gf @+v/[r,0ͱFYoWAV~ca 4 h]PSHW#-֦%CƐ|] ddqS۲>.~X0rku%e)f wyd[Us/c~X8"Tn/ sH#i.R)lFEn#k2;=0vEE-vTssxWwW`ܠ SlE/5X?3Q,97Ab6mwKCEJfQ Nw49kQX$ȍĤi:$hDUjŅ;..|OL2& I-? (8x XYhW]di)="u"lpϐpB[Zbo(w]1s%'iAĝ1$J|c\45FBoHKګ:GDSX_jt5 vDZ9'eBWGMڭ>͒}xF̒n"ii w_YXm@z$PgIqQctּ~tF =_LIKkԝ^씒Iq50 n ƝeA 'eR5{G+_ޝܢ)${2WAyگEc gj hoTZB-VwuOt<$2'Y\HS%]~ɧ*e,fj[[2öOҭyO_Jukg= nzovZZ];3LpW7J1E! A2Q!s2$h롂;{a,DL^g6\ɚ\rCY5dpK@yJ~"R֤!b ŠL)أKc9^~@h DN`y; r8y|\gkY1d,L`+f8k#n`8l;ܕ)0I{ N-1&sXʂd qܭh r ءƐtxDrmLL [#cBkzIT%FWe@^()*_ sH7e*M{`|HޅgJ%L{(9ϔOeB\PՉĖO7 ſ `˶٘|Ш9 +oEss6s$:Qi )^\/bpJ>-TvX/=p |<>C"kmI['ިj(jhO@"XegC9;uWaQbe? ~1^wHوl׼S֘oָoO mI숩B%,(zA2>ZzG<j*ZC7l'S'?jHB4 fʌׇA+~;((nYECa#s.\)Om{XfzI &G:d1&ͱm!tt]ٞq+7qs gf%=X@!3[$'D 5WrN/eUp&ҿϠg4E=`D&̳ S}F$rȚd +zY5.{'KzpK "Ԅ 6D[ZWeJJLnhyc`SN>I $5/K~ # dCf\iniВei\ؑ!^a0|%@<f*>>y؆3~ ^MhIYE0e7ܱ{P}s\rʣ|*Μmpi)Li$sW)oe>ijVM>_ܓ2F:ʌDH?T`-F[@C>G=Qwq7F;Pyivf!xIHЍu,IlmC%ULq.|bjޥxJV-NoXBi~p! ^)m&z njI~ ,Ytʱ&dډގPBbgPdBiz h2JqQ|V J=PԤ r1?nX]"&<}Qv@4S"ahlhun@&HI׭l/>KRdKn[i:|+@ֈZ-k' ۩̫HiS5*b tMC&#Yz[AQۏ%ch }GkK9_.Ol=ndiFb.yn+ L KPH8`î'; +2Jћ(Tzrq<9X\EC(MJc]6oԝ3Se}irL g];/ﭐuA9ZxȥJMP'"^x/9¨ɻʻA6v2us>8+Li.>$I7誖:H:Ň&X+8`z݈iwR}OevTٟڸ@HQ EIXs'U QZ6i=rX&Ƙ߄89&^=PмR]X.` tPiʊA_M84%]~&񤛐Dhcd4=P~: HAy7z(6+|f 7Y"_gvqh5CCݞLR mwLI~mҿJb&+Rhw[ck+e#`Ԗ"0 U@Ho&Ӿ(%eX~3SXF y!%PU&yDNPDZ';TX{FNp#ɴZհmNe s'Zˆ.abhFT!I[muِ8ME ҮMs!M9[ǃy 'A|hK0R@e`U$/Rhߊ813əF|9?/7IϝP$'g3Y?L#'Z2x3P,7ߋg FWgGr4ndOJZw;%\{P5ֲSjb<1O19=V۩Pdr4 l~O/R:vmԠW8r& _&MyDCns1㴉m 6Uu g+;BvBI H_~} ?njVa,j3֖h.$X(O#Z(8p);5rGWU돴:ɺ: C0|S_7|j"#_Ef;/x93Qh6D3jH)#x5]PB#x"U'0l!qtH9 a^2vo, OWXjĻ>|",zw6~>1i}pR0ul15ՓCM}[!!/#t_ʟÄ${݁qeFE>fxP[T_+-&3Y7K;\z`NWߌ|ARGDwN}]V\OG8XO%UȄÅ4ᄒ|ؑFzSr#x Ӝu$0Ia GFͪ4(}`j%d"z [IAɊ~6H#cI:Y̟.m*2{"V>F06<,x1ZQfQL]ro7 BIJn{nPsQ vO3A!|_SIi rvwml ^AJ}hF5)[}x^׼Z`v_>ZąHy-TLI`؆-&'SQ9,]'hk1."ک,avx{=߭@hR6}e5:o0a7cNYEATӾX*:_7Ig66zMnjnmLJ - ςJcdyH彠w/.ߊ걟"Ϳ0DB[{~-<= a1rcX8sT!',`F>eX 30ӂ1rv{' 64aLwKk}7&LP]ik3säK%Wݪ㼐Yf?4;U(4ӝ`7JvWd![ $03\now'{ 碴npybS:1ńt$n^iֆ߂#R=C%Id"fAв- iq>4+A6Z~DźeyPC刵΢`u)eYv ~n5c<8#+WiLͣ )9r0[7p(O$ɼա@ۨN4a5w [?. …]+'0HiD|GQGѿqaoWeKZOt7u+(!FYzS_ FdX\ ,f] ]ÁRWzE1NyMn+0yFǝ m= Ti>)WB@CD 3]hBHIl{`U}8m\=K ;I2623OiV8ZLƠ?A4bJ3wѲ@w͹}h,ڨT܂=F'yISFKcៃ # =՘&P #Cck1+ɍZ'dÝ{(jڜ{yKO" ƪ0w'f%H'~&M((mHg|è)^E;[^4ZrC5"7]dRک^͒ct췷rpw>K:]̀.;wseyqvh7&WJfJPc%8FuL ;~XPXo 9^rb}5:7Rs+5K@[tO4~z3",%͍!T mH.xY+( 2; R=ծq7uŖC맵^xb)&-7ͼ6)N_' wF>rl*ry3]I|:4MM1Ƨ[ =O2)@^WjDS@a^;Kw@#:N/Я6q8ﲮG/eCLP_ұ\ˀWW:B^*`+`E %d3"P4E=1S#\e'{WӖfP"+awɟW`0ioiN)֛>b~ŭ^sf *aݡinb\W"BNXDD|v*CݒgȠjf<`8Vᅉ$$->H[`=V>Fj=BvFjRq.xBJU5m{,}ra)%W*cTM?@fݴ eC4`{i鹘e~MJh_? q?nܺULt皵bpN >´sQ~cƣqo99 iч {)z/1yp WFK \sřWiZ Ɣ=x #@$wDwGdjݸ9&GƣE֠)}m\-^)Uѐ{|[nk0Ld+> y贾n gɮvt)fzgu5R=)fxYY\eLV@$"=rop6h. oftwu8-Kf6kNeedqZpvv"|/VE ڕ*Ȅ#J [dwiCjIM 1ְ8Vzݜ֨\5}k[(6A33DD3܋\uж&s'_+NI|2Q;5\! '*Ny%qft,x͖RVΜ&-8b*ܲZhf.;, $ nYb؞:"4K˼Ҷcٟ^~e#lG|'X칔/C);VR%o/X'՝2qd1MRrVB&=, 0˾_e{MޙKII狈 1NЍOMGΏ,*|U/'A.&1WԊ+ 3EǚVpܔ-gbZqfk.Y}HVm/k qĩ3v6ц+Ԁl'$J/] Ⱦ-1 [ s3"(a"yF)˅4xe=ȢP< Ѯ Wut qus YI=c+uq ͙Xqˉ>^݌F#P@&6;7n>)C@$!Ng81&*8_ 9(ɡ\"5S~_>bHhD5ėC_CJ kw:( K0_Ӥ31όfv\}Qo/5'eOfO fSdƚNw, QgL8x.ٞ%9va6xHhx4P'-c^//EdBkyv2p6؏SZ/t\Duܡq~㑒7@sM 72u+p`Z3|#w([fwl| "yubxFȸxwEa!7JunWTG olM%n Rau䧁P/O JY_D /; Xv|!bJi6*`tu6L~&CI^6l)8Vg$VGdXx~ZG$^g.:&A+%|C Z}rNJTAOpLp!z^ 4f(' ~~5".ۿ0Q q (3F 7B\ 76{)py^WKgL9"`)~W:@wΊss8jZ QijV / ?~6gk|N*}Oܡu0^=8q%2z_'TS?,_N:Ǭ[۔{$!p}}Q/si%5B60`0Ӹ\KRBcdi ݓDCݘo G0:[D~S\~n<%U6TmTϠ9H!~ V\%8+;Dg 6JKۀb8'Pw$JK{I9\ V`Y)[$oλ'T)sNKdZf8͹T_]RKik1.m*BU8R!%T[VD˳݄Z *YS Er0x]iƠԈ%)Ѫ+h2 2\( m㣢7 8I`X:0>j+[{҉)lRs.M39MeZ-m!B^o|X%I]]&(@ (7g5G0N| X_gT|5a 9_2YFS8fBVY~ysiM;/nqlѨrN} 9ڧqEwv^ٽVf1"s1[_Ao;جjLeηFq%*8Kf}\Z1r4|f^Q]Fscy@<69N0T{BN' Du>DjBF/)M[Fˋvut pV[Rf)\Ϯ(T|*Afvw0JҾn;$LP E戝T|KSt$kGop]$M:#$SOxބ_+Sq\}kD{~12HvYhl!Xҝ2sAHAۚ> Bhfw1ZADb' GLu[,p.|GVXEiV G" lr4K;SÐV,4p:A/.+o?U&WEXte7:PósSќP4%qj4DJB TlpsXy$o-1[%Ex"Ub_"޶56 q9"h<. M/u}C]j 3x:C_iҝH>WfZkcpqL)$QTN0B{ 8լ") OywukaVhzw(m؉mQ^7R@ Lʯzdf \b ҥd?#]4נ:f}iƺ˲w9s,lGXbc.Fu_"X qD ; R@uAW>"dS?y|XtPVq* c0=TnJuō]zwQ g9;)(c&{9\G7 z! xϢnZsV1ke\c)aglJmId4DT,ui*: 1RT]h{qc-mt񩫋Yf?S¡%Q/.8QtVxfBk'T6&$x2F%M\X+w1#ZwUH3gS$dq93򻾰 <ꚛ`$J4 O@%c0B @5Zʶ,(L|2/h7c/clly?@5M[H)3SeUcva*+{Rom@g/#P6OHg ;5Mǣō9UCgҎ沷.mpa_Ma]`UQh7f=M͖FW$N_0Ci?b4ufb3m4/53ږM@U*k%7wM|sl`LRU( }}G|3 |V3K&(z|fariKJ&ob\F:/_9C=|_Ĵ`KEa8&Grғ)FK=yl1 \g~ܪNL"&IkAC~iWd۳E{s9rŊdʶtifd ?auߏ?U]l*H!m8@gl dw^)a('.?qIv` R&ČQI-陔wû.g {%Ӈ.9Mwcs̽#~43 bHTI8389wj5^{DZHl`>a_հ4~+Ɔ_g!|f1dbzw7EZa71Ǐ+^u0̸s4 S|Vl?"]'(nry`3@Bnvzͣ^۲/rw !3%m)䔿]n$[e]n+CߐK̲u44a=Bժv:=DZA@ާy[J[Ρ(u';2ꃢA?۸^^M)sp~<œgWb(1]'eƞ-[ { ^BHܔțԨ*|ig؝T J\.jZ"P*_zfHy(5Hl++QHCsĪd$Ȝ ];%)D^zKͯt2mP#2L ca`NbHȮ,|k9߭;?i&@%c=FEWtW9Gi5{,\ǠtŠN[8Xʇ[ G|FT\mk$va꫰PB  +ނx e,TPhkLSJkiFi 'RRvጯN0Wލp?'ZIяXVE׈DGM=])9j,aU.t NAۜo8БZ\cjcx/~uZ-yb FPH?ag>Q}}G1}VwVwN릩+\65ҽ|}2EG+N%ģTlV!MCj.;ew n%MAWNEL@3 $+$>d{Ä x DJrkZt{ SI>@UCGQvu&dz^ *i"WZY;19w?*҂k=cɧSW+L2zK y\E$:ű0=I@e\!m\XPԕؼ]했R_|̋Zx[B~ɨ\#P:BG Tm \{w]x뭔bx 2#-7\$:1 |3^а 4?*c$?/Prhb NDeV[Ӎ4 V0gU5c f#E T |0̲e/6梒ӈnC/[ >񙝻dO:L:F s،ݮÎM+bl G=#06Elp;jft8rGV \؎ ,-;Af0dfD |Z@X2 dxwfY{#XFb6,OT*?!V`f1\[LvdĻW"矲Z=RAd,g .jsCP>.4*^j(wâUg}U{,\t[0B%\L|l)"gy Q 05ΥӬv̨-cCul:W*bFT9᫤١TUfVDd=Qv2ڡ'۔G5,Z:G7JCN#:d]K0"e,3؂I^!RDjR@!뻸byEȼ@_?/5pn2JKO?bA=RV]OrBtcmYt";wЁْ E코rqJl6^c<;G#acl68$YNyfxSEXNQ=J ѶoO1Zz:ΰ񇆐5 ȗCi~Pq Kzq)$Ӓ؋8p.`+ss3iqN%q2*2u|}(y-@ H/m~ NxW'D5mC>]anLd F)7_[|b`c]4.VCh-ؾ>w֏mL]y"tE+l] vEO9źg}ts&8vOx>Ajv|wܯŨ/̿D)*-,4d<}StL@D<%F:cK8v ~9F$2lK7l;|:'A:k^yF;n3" 7y<ReA,g'VS4DNgiКOm֜oS f@6mvcld/5сu"hUX;Wq\VWse(+rT+9v.dbas2GԻGa6|mU]Wp󼜕8s~'[&(osdfq/tG*KlSEX ‹L@K4kڊֺ>Yzf|G^T1&W<~&1,6=YI#@a D]f(p5ج:P \{-b21AXaßqEJySi;&:p,צ:;A{o$BdR%wфv<^JB^:y`?v/qHCqCJA^Fi"(Pe$VJ  >|hu}]2bЪ-}YMPq0ie\xB3!\J+Cܨ%jBwM6p NrRVU7@qYG]N.00_`֒SL '\x|%,Ao>>10MN(9Jڂ~){8ŴD%3Js͗noj!&y!ne|/e@dLb}H/wEJ%NP{<_1غ׻#y;$s(7NS >'d.K1Z:x ;+ ĿJƌZPj i.&,ϮE=[+eoϡcEOvy!y0`l>8/ A`7"XWlbꫨ1_hC/ zܗ2Q]Q*3M숎ƫ\aIpݣz}]6e`{]]?"hF{;,^K*9xoD6Wxf@ 4~|@kݹ&Y"}q%KNP&Yg3ra1ï+j.AddkܔyNVc%"cIΔgӋwM_ Q#XHp STF/|_oru|l| E ԋQX'J<)r ۍT8dА p!gV:փR_$}KH$Lolľy/‘;a ->kZ0Oܯ(< $rqKe!Œh˝ޭGyk/>pu0Z1}P#DkJُ_pۓPõ=dOSx> m[/yqB=NpaE=!DX` T+m YM9Y6SJs%Sr!. PJ6;rpu9L䧛+f٢9fX({Vˆ|G}f~pދ`H_ #5Ӵ+<>P]~Y`3m71#kra؊lͣo{a7 n>fB^BRH#/9/RI8kU XhU0L4X`Gd5\z([ue7~Haw0*#.?>79ni.9Fy_?Bq Q| OYgI:lR!0eڐ܀:>hJWqjUlorzu2@; 9 ;ߴwZ͉Bhth5OacMCԕ]@ {I&9?c]R;N -OAKEkQh*Xw 4w/FIbSZa'p)j3a* z`!K'cI>O/|Mco&AkWO[i6?""_s^)8Ƿkmpb#1^-C)Y@WGB,a:ހʹ]~.;QDY̹NEa36}h"g0(a#RDn]8߸׻(7" hIk %3UF=hKk0e^n|BUwAW19ɞ+=ŦLd ZM]N& 4҃$hvTc̕%ga՗b UD_0JBv892qE)G(`<'>d%*Uu֦.*#$A=ډҨԻ)kOht, $/E$Ϛa#Up7\S&;K="Q|aK+l.ݢ6xX-/#Bh[H7Y<toÖU]9݋~;3:Rv:tyH"i4My4tLY2$s,b,W6?*GFVJ,ˤeq /-ź| S UGMz+MFM+6+ZgSrjܭq1Q}ԋ99UUC豟#r* :g^; HV/)_82UEDx~hPʮb_8dLWM.%u]Rc!b+q=K$GJ C#5A."{+0vCE_6;OX$̶'@6Hx0tI5+ `?°L-#l^Obca@7b _$ tEDh0W#0"^-GCt9Y8B`؃62 z(Rt0*<_z>kX5Mth nV;!"3OIh[O] :C} րPv*7Ĕ NtLT' 7)̱dٷ(hneLɱsڧp< EˮDzYnR]"u Y=U˚ Gy1;3+L|7._?h1Q!?SPS{("jL?HI/-W[|+"M|"gnkc._LU^w}Te#hydI1@uO+1SN|~"SۓTzK>8FwT龷p18?0On=}qk6 M ݳU^7Ƚ;ꕸ1xOɹg3XE\^?Y^Nxۢ(fj(Z]UAKR[|!nhNBj&P0N.x-^!qo{,^uJ,")MOq{L ]6q܈CZ/Y|j+Xb`uEr.&$n#m TIS[?pŬň1,ث@fvP< GOuAd$/_k#4P {&ᘗWC9ςLYǐK`px<;X?ELNC3o.4yՕɨ#Va=+dj5srlv-41phL-;8tN4Ķ x^H4Ns2G&xAA 2iܑ86jJ.&z,-P/2dŅ/M3}ָkpzf~'<~xtɒȍJih2x瘚GX?JIQĺrg;Gh4* HPX׸v'#T!9V/e ؐXC0,:sq`Pά´NM/sGabՆP7RTdbr9_XV>ʪQٖb+{4cz^5al?Y>tR IzR:GVD{ANQ 7(QR@S,\Gh,0HN B,;<H}+5(_ R^u|C(ҢG;i $Ю0sE, (VR͙To2 𓅤Wl'<骈{ c ۙ)Wd/Wƣ  )pW=Ju$zBtY̖9uޓ}&씁p'.An%CY_/ry9ca|F@P[05cc wH;ѝDQAJ-~= 2I^fkgz͋ؿ(3;Z Rr,k+ݔmaQ&uK[1εazKˬD*3Ж4>7:^i:Q}qHq%`oOPK9?xK&hbϧ*| AmL% I7;Ϗ67\;{O4!̄IdA2Rn2FHc;*xυ㝓|)%\1wѹ z#]9[ ~IaQ2i%S(*) KE/ziewhiBj|;i1|5!,ilf~Z2 w)%d;$,I8o[pdJ@sΰN* !eqbOyxr A8ԉF&;ٞJG̈́qrnM,ۄÙNywXKzÓ|4*j(u{J# EK[LMhU$=]u̘lz9]P*aLJ"Qa6k:LO7k YE@pPf`B9*^o FS? C::Q!D>Yw6G?8v,3Oj繵AxcZ,$(9a&-n&:haU^s"/ _nI"4PM1'UW.6T9ih}tʺyVt-/+v4 )G1^b<4yk=MM*oրkd~'}t-&j8P9-nw[%zDB`H<;崎cb$pk&U\^+K/ mᢳE?9mH޷ Kk\n;$"6ʕo%?ۤqp2`j΋ :@..BCִ0dk r\j7s&LN~!#Xxu`Zu 3Lb9DE›8jP۔`wOmʞP%xRm?&NMs}W1u:<JFJ_J*ù:tY|Upy^oq{қrU~%=4YA[$zR-K&F`7H]m~}ˤL< -9 Tͪ/HܝP2 ŷ[djӣnqښai5ɯMٯ?HqD}ax;$̷RU4QDE^S. /dGF&G]p]ljTWLoj\0!T()5h|xĴM-ׂq-n!).-[a9Dto~ȳ?3ɦo0P*3Xb8k7v+H&aX@itE]MN9㚑Us*AMU⏔ $>XYܻ31ôAȮ+̫*|ĵBrl D^>u,cJ0#+J.\TKFxTQ X9bmL@sH=N֪#k"M,nM4 I3j(1 ghٞR; a%F>#1K@IyK?,IlXXn&1O6ˎ^>`&05kM44қD)Fb9o` C}{gy%, OgҮA0Z+ ?_K9q=Tb(?z^~P?@R۞B/>9GNB1JPZc_h|~*d-׷dMRCmSޢHH8 BqOˆ  &uEߺ#$A5b<xw t>W(Y:cLKW$Hx)^_b!i״MlY3,>nĊ!#]/i"s/iptn mYFʉ/?0!XRR,CD&V|}\b$^FȽRHm ۠ڛ?F,`yۘ+D9Z@؊o-qoy}BŚNxs@Mi8Gw?TboEc]c q)VE2;bZ!Ȣ[R\euԒ.M\8f8 ,TR۱!{QLf 4Ǧ OD\HP4ė!Ȅ]cLXN69\`90 f e`pQR!ƃ$jb_o'E%EzG :ؽN!m"cWW<4ePgm42m\%eZZ ~ \g`p; @tki/{P_Xa%0mܰ#l\BKdf 'YC|i8'CNϒ9';|0Ize-_G=1MT%9sxT~ijցeхeMCy4*T2W!2fP;K 05 j.pN㟕$x[v ;I8ճsXׂ=8U&MuXͱLz@ + : P)b]۳widAP1j :ϬZB>NF& ?̎w#;0 VJBۥFrZ %-4G@w".kQlfUiMz!^36Hr_bz;lRٝ@eta}UL_ tWEz@+tM3g>c̆9pc+a>6Z ,1x ! @dB=X*j8Ùb7s.4iNzz\W6?% ƄYxu#ŘO HBև@qTB ULlq/\{vd% LVRpEqL,%\%GJMNHI_΁'fKi_Jo: XY \(k2 8Yw5e茑qoyLv$9du& ݕa)Bwk',x -B ']@uUW*Mwfynan%Rϕ5lRS$.ţ6]M( XXSAA~o;8rM1֠#Z^l6L@Fa |H.w~}wCXiY8JH`9l6dB)K*j5q޶He0G-&`rr Ҭz(Ab8]t{!XTtL!<^њZ,#ߘqe`?/)+WG!<D[|G Īnp:~KЄEGѾN¿Q7xl`tZM+;ڊ#ZǓ4oє{:>4ѣɎj{މ7[Mz CÞ-ycdy߷i-@Mʪ$/N[O<&Zw05s\mm e;$}wW37sX hKoP%Cɓˁ%8uO aBY}8b, G- Î0[B,KAIchAq٠A@x 8> 75 ܫDX6zy٣GAG?K[^Qj{M-O W݂)]V -ԍ|qW-kQnADq;}D֑EaJj 4Uǿ#G ~ q$MO-ExK&c`a9c6#'B ͷUBm[ HK|`B8}42y JTXs,ZDUPDכ!?-4moLS0z40N}ppIy^n)('fሜgpg\KIͬ1SqF$`ڜe=r7(zzռVUhPAY#Hڌ_Lig: s3[*#I& ?נw73v:\`ʜ`eaeo.MJP y,Չ4u{|-V`]FH0o֣r,X3.JRoj@%:Wf1ZLXg;!S+µՖ:͢KvFzfB>s„q*KeC2tFaGژf[M77mFT26is&R~dK&a{ʵV٦ ep۸PHB|#]*Q3_L|2^`N'TPZu\PZ|B>"ftɅ)It<-~ε㵬A@K)GVD76*_ ~7#z:>1&V,,y7+q>4cC-bCu^CĐ⹤P>KYLPO P˷/H7q킆A $4SXSØmT8h o/oX;L!cGePX zDXN[M(^PFc%iRFZ6(a?P=fѡua?/&=<ݐX.&m5UEo7lR>`63\BtUwPBL q:LO)V!i;|BЦLgyi3 ^SPs(c2G:M^htM`1!+FZM>@njѫxFki!tYո![P6}6iޱ@$28|c+} J4@`E7&/㱮z?g|e:`n"ǐw3 k6WǧhԔDr\@3DS%3VJzi4 P@|L>巢s>ި[IY:8=2^1H,_ZȚ8oTAMk>rx4*tnci\ T0B{WIԃ@ OFA\M} :/22z|2'1SKR@1̪K7!MucQӁ{T` s)`Z-֐-wU6/ l3P1Ve;y̠Mvѿ(cFo3p-%8+MkV);R 7lk r01ǶΌ,: T5G]"rUoA)9xٟ},˿d^˜--8l6@ƾ+۟ 7vs i3E'!^W ܟ}u>ӎl34Ypx DZ$F0K/ޭ2[ژ0S+T–]NqC;!R{Vrk;=pD[<F -$Pdñ4wt:BJ8ұBVO)fXѢVZr9>Wi͎ĄDdhAdfqWM)A-Q~]:Ѯ&snWjO]%Y3VG8:&3ܡe)1Rƫk>}yv Q-qW'Eͷ(7*zfh-jͫCdѡ'9&y*N5@VT Lw<`a^T{pז84 bMF6{r%C%C}>Gyn0@V[A1?]PkVEYLF"ع:PV@cGh>s-V9l@zOI,^ZZ̈́W-D+/-5e&-,_ɒeX[ Z*G٣Ctm:y[~2U %5ї5v-|n$=4 E>E`YPZ2BیXQrO{;U@bu $ >_q$n>*=É۟t`ܱ6 Je$AQ'lre>F©zEsN-PFX竝H:At˞zݪV87.6Υ܃U>Z s:or(8miz3o V5#€Zn8B'PANV-w#0]_S1#[8k ꆎq߰zfp"[Vc nuQQ4-Ym.nV57AcϠY<.90q8u(ݚ^&Ւ$%Y$gf˫@Yx#.cݔ|czS=ͦA(BP}YFEle!~&ϸADɼ% "10<V ^U(VV% Zt>$#*k0#EO_%|b{Ŭe`%-Qp*Xy 'MyD`i¶uFwZ$ۮ{=O%Ojly;ũIJs}CZHA@K44G f0N{]F!ҥ.-B!SC J"U)HGbF䕫S,BE#>6ĒI{`z}Q>/ NbUm;i2d2u?wXܡ]0!N!"HqM7>LkқIJ M?TywN5l:\[YVv40aVOWT(7RQӾdeAYU&^9ɒD?jSFm^F)gZ+pQMW v>)+|gAA"xF,1U% S$gPJ*vE| Aߠ?!FQFy_cOA_%2R 8O~9n\z B9Eo@8n[ QZljkKy'9diyޛ 5A<]{ImLTږK5Q?t=}X6/bXE Xt!]H6,@s6\C|ҠItF("M9l8uPfr¯|3powluCM|-HJxȗc 8$,HDzw.LcGyB?XLnZ!t`xl;MA,aJ1H+0vcXӈ'#_1 W _J):C Xft$Mb  K dC\*U]? M"\H 5Ĕ VӗRZ>+Sw8 _GaƵf e51mn\R'%EOwÂ9˔e/:Wrv6κ*IK&8EEHHqEK~־ [Ҏ<j|O=hj'%sO#o9olp(<2YV^] ϢU}\c޽$2r[3t<`!S/UTDs~ 8ɕ?Թҡ(ւ `e |=9H,I `M#jq5E\Vj6;tRqb"8'hbXj~-owgGd0!U45p W_LJֺ!$JzG "ozggMWY晃 R {fpD&tY;݊gKT'W=WMѿ.b,=$YPEg0iX<)|1 $-g1U%G&:[N<ʘlj.{C%\#5Y_ /æ~"JWtVN&Edg3h.1?Om"^mRe.NGoOBQx G4!8:>jª0HjnO2XH+:Ve0Cx{PjO\@ęAJq߭=tzzbHE,. ]^K>L)Ng 9ħSSjR@AM&5N [jc| iiN3SMS9ii9NJbc E㕥|j|7Tr xX1(oV=92Ǘvd߿ors%}Gu㏤j=+KJ}Crt?zRi[!'*s~!'%S_2!r(C \\0^wҭA>971) r,%*}ON^gǽJIUyV`̿9FҶ;ϻ }IZ xZe:tyȸ%*> KvL!8\l.Mf3 qCϾhZ |C3+p}+ MoqEZa&,Qq˝^=C8:J)^]#DG'u0n#2(U[ldC[MKMbMdSZXhpO"qpB^E ?TB!$! յGshLmdD3 uE>.L*mKX G~ ץ2،cugo$5x3:r(C4ZFk۲[ԞSB:+Etszԕ7+qf4JPSd m( /~U*B6A2e>)Z[$&OD2G <E|*d~fh}`y6[1VןmT 3]T~o{2wS䭀pm[g cWadSQf?+g*ilM15JPLbD"D{nȌDưOs  ϙžr,z!!%9c4T>/ԦT3,#êN_[>:sJ۠99=9=,ދGQZh VdATVvG |kbYt>T9\<{n^j )PMEKLL]_G$s+aCWAMnq.6v`yT+4ѫ$Oųɂ?`5=uKYcxt>6d>+kqg8?@psId`3؛7RW#1Z͆ s3b \5w3P2͛{ Sg s#ƥyiƁ?o5cDw5JK,ֱ/43^6܏9|+rCJ({ &F5f1[Ŵ1mZ|Dž LoaigVU-d%:B(UfPͬ|ݽ3A/q_G3`rZaA6](aS1ՊH6&IZ ̤Yk 1֐'|@}s8QFLjbbެ3S!`z(eλq ־88#Īw}Il1rV{OسVJR(ClLTE0a'7cgǠ46MbDltCB-`{C3fWY@E%yMvɖ:Hbp!Yj"X`ql+sq_\R' SAڸ; ˶]g048\M8 spJ6|`]gu Wt5w(.;L{jUyXOD ٍ¹Q3d~KЂN#'mpQO->K/:U͙EʲpQT1Y;SvfC%`sUi+S0W )J’F2@|@]c DiO%Ѓn6 +y9q@x3wRczaA_G/~GI)!$R,:S2o??VyI'YbU_7rp7WtAFnN JV&yfq(ߊ_5pޗVvТyYrtmd\a, È=3o \);piNF]5CgA|u9;cBHFQwDҜGFޥN#|^)ImœmdL:% '9! ݆Zeu=ћ27nXXoT݈o) /ov95f %1N]n"hw˥EM]zJ٣CS=RR5we\{%Y]bաy  :bPGaw@ z:@SLծ 9gM֣;v냘j vWEbD+?{s\/ў7";׬rHfm9lc;H?+:d{x%@DK-Ϸf7iwpsQ%2NUϿC#vp /%٠& Wۀ8^w ~KXvZGez=˩[s7h<9XT)6du۳h>_^6 Ϋc?D;O~B3=T VD4I7%aG &@D˴+PdfQ [z(\JB$f⼛B9b ӽsS:oN8D#,6mblEm[NȥQlt ¦EeJ*T?L0}2_I;*L֚} NdAz}o>Sa&˺%H!Er((A7y~ZRt^& QZW Et!zeBM4CcXHZ7e`؋89%F Whiz7OT lë_˛;A `YP ?ch9K%r+Qax\Fm$Vr67&A?7KN)WƐo9I%v"PF"eT4UvI$"|x)wwUuJi fvVL!A2SfR`hvmKq*nn7$'f8KsKXnO>[N RX+SV׋Mx/n4&mWL[CU %q24Q7\+4pN> hSDaX7cFkpel*XtWi*kqRg#[IhH3jys,tvP$=njAh>}T&Ҵ5(ںYs@ :g:{R%t@ZwYZ}lzI3j6 wG*Mve.ѧ35:ݞZ+}TcPLRvFU4B*h .4G2V]L!^&魺nĐ<s%#YFo%&ovPߧ怬u^܈MM8DTrKV4#$(DĐpfd'(eYV#_pTB "nl; 9YTP2_톧M1#V k.uq4KQz .iHP~P"Zs]Ν$h!JG~lL 'jё;Y ^';XyOb\UEPMQ`HenBa#0'-˫y?4Z5 T:YL5TT 0!(d1ߝ)APJՆYHL{vu4kB⦑11Klz񹲉mcz' Rbp$$b>4 ^q4^Х~:1X޷ Z PK#)6kYRኔC3V R"c0ٞ>>8h ~2ɺNt=IHy/؂oVBcm B: J_wfLMS_(l-08`I;vhy0>CYH5N`ap6>M>i/ umAM0ǦܣՀryUJKa}wD#sLʭ?ڂj#.:1-nTb:uDDXK'ޒӌ $zf&8XYT_3@Uo3%Uu?@Vm@$!7/&IAPJ|栮E;1u4L9CD;Э}yo7;r _kea8h[Ȓv/> |Iaf;ƀTqj=̄0?}yC*\"-dO(`ԥQ? )Na05{l4nbTXc{De&\ilsJ)Ɯfp@& `s2No>TG$^X@aZE+g:;tՃ}nk73k(|k2c:Z+_OTm.v$ZTR9x!5q%.10~g'ga?pi&h.[YJ_R@@uZ[sExCA\ ?|(ՖAat݉B4rRK7czK[,E8I-37G:LjR6Uy L_љ X}+A)S]+XgSDC'G[@-"W& }؉u9{ JGKPqv_2#At]PǬR]yQP+?,#%t1 3n窯2=~SV #e_[-L4^"-lH剌d$rJ݁e_Z/0ɊGÞ2/WEsx^Ki쀯# T 7(:pp5:uȆo, {+GNjQa珽j897! 6a4FypL!qkb7_ _=IþF~8XF+;a(ƷVE4ԘW ⁰5EVW?s~s`pڰSȜqQt7FkuEIwP>;E{f(M?Ikf{n͞s+^Ic9h8z ,4 u\Ľ'Avow#Uzel-vEGA1IG;cRF%HE\mj FxjE)Jb>\If=lgD)%ovkM] Oni!J87j+H̬.8@m5l+8?_K(_zfY2:?+}} ,T7/bJb(IYLZĥ]՗ a{cX [jZTU&,ѭ.gg0B*0/6Rfi/ič?OFW״)LK78 ( %BfSL]v  :#>fX]<4d=ST҇/)JhFp ?mޑPХW˗BR`<ӡ<:}&^FB[>>9a[YTӖ,GVE,Kkէ5zZ1Z6[hFuK@OF9!X"lC1.u褚٠@ -=p6f%[ mrő8D& 9i?TM\,4E>.K/,B; g鎊SZawdGV*zgk L-Tu% : O:͖/C ~ 54^"rcz \uf˹-18MTe)HQ%љ*hk{US|P3g!>XñRHCfw7yd#ʇ% ©=5Jҗ}P`| |M[^\aKeq\N+@bpl]aLF,6"cbzNtQ;Sg*RY(;U( 2lx1k%\fww׮&ȰjDۙd@̉oE V*d"?v1g KL;YfarMPmJG2QW 7Oq]ToO[|ΜA'IM=rBb^X:paRO)hO qታ:4HR)=DR+E: 'ہ٭hR:'ޒ΂=j}]CpGw$蒘jrb/ Tn@q7۞Km;@*rp[N1'#O",&1>js2>0$l h+t!m }, hRR$-錒o#+fZf38`[V\H!ͽn:>v-=~Am.rz*zt(c)s!%34k|+I'pT"չjNN?41'Ӏ,pruzNc7mufc3#wOmD8OL~?K&7-f>eAJ%Ռ), 8٪e_%=dӠ[}*sτ'R(ƥMo/'7,2+ɞ2:VA0]H$R4:x@_GnISkrP ޔ YtZ3+Q[$zw.9+tҐ wnAKd;:Ic4H\_xCaZPfR$KٗxTRa)溪.*>yԗҷ.e5旻6獚@zw{% J_Xz6Hp'8b)0I7aHgal_A1zWp1*}Π-cxS^h2%T4oa^yM ".\tUc=]UBUU9⛰^PK (g9 h#pc~A־Y'8[lm؅f;AMB7u-v>5FZw "QD=d>8'o#{^ pS6iEh[.H$?`itU=P;.ijħ?.3Wf~2 4|=c4 ,fq>7^]R0\"QrXѿa$D)_ԢS/NKgiU7mT,BS{ 5Mwxϖ_#>n(״W_dk 6gaAno?_&}4\/h rC.T)ZI)zEySĬ_S~& B?gFX. H_ݻ( rٙ5!]m:DSJ䢟aTQƦ^oxC4mB:L2ZC\iAO m:M{"3(i3ʰ $&}'e0 NG|#WIޜϷF!هtT 91a+|LUrT-R Q~ ϔ :vr ]v&RvT&'`.q붤©Bן(١R q9?~+"&RGra~vQز-&lPTѓ9;9kզ=IBBBXu*㧇=fR҃wM.mlǺpkl ̸Gx@؇t{arlZ4C`JH1)Zlw%lXr şN-O5ڰnKX+cYȈJ7^Ȫ~\GZgԐBucc"l;3N5mқ'rv<C}F(VCy|<躼A9tkHb9] ﲡ[*rIvض{OrBAOօf)g@ϕv!&VKM-v_1WH4yqJu3DR'Lz6xyJ r8:]F6z(VgFj2 `A1Ӂ'g"V]0ð{\E^֑(Hp.;N~w10&H;%5jx `7%رm[MI LJ_\jͷ)a*Gy蒸a ~^YBZ.jK2A`,t=Toua iS@vujvjP(؜aTWN-wS}m^\#c@>zrlgƛ o -[m֗y8ާQ’?0,}n-u2亊={q&lip+ϒ; #_g~:FS҇~+HzJbVB>n}}>.T92(lq5i5 )J&,&iDGPg$bGKVg* @lxULy++ >>X%Yc-2 @./ݕ6͓0]MDNm}*F{] >HԢ|L·d5ifخ(o\@ZD!!b^OZdĎ3YRQGV۰] v{iFo~/hWwxd>RTMA8 c#wj14m v5j(?EJ:B*D3+ᰗ!*".{Hn:qF{2hELQA9]jZo9Є?P )c,wpC1X#BM5H+OW n> )>:>{ vwJ,Wd?*ecaI@[ܠfZ1 ?5 Kn"[s0c69;0!yp6Y ^;DV NrY>kbL!7:X}e[]UU c@ N<~O*Zq%4v%UJ:.'-Zo3|;k^ w;<ƵEUAioZ:;$ yr5p1f,&xwAl|/eȾ(04{y}mX@=fR䶤en;*) '~I:7  "C'd׷u&=㠽vǏ%r\, ml8i}θ]L)3Y5MC1wI/?Þ>3(s֛U={>lǎ/dl;.Hr %Bc ;0 "7~J5(\-=!bbkcO]^Vt2F|Hlw%B,u^2Pm=dB(}E YFѧӜ¤U`p;ѥvLbwj^MU:r:jȃ&L#uں7 q皝si MsAҬ @<@*3S" dϥ_`WPn  X Y/# }Y3}v3bksV t3_6"PV-^cG:QnIƠdgW<QopTcv*[V+fPݶj79$m[5P`Wnp_". #>dp}[ HT͓sSH&g!A"xseFVk0U1Ԁ ERKwyE"3j3}v.F߰SAȅeoωPWުE odAehj q* ȥcf%*]-yдIu.ˎ>FRT3pNN^p#,2ʴaߤ絰G6 tRKCQl{{f9&ddF4 &$bQrmRւ7sh*Vsܯ8~1&n*%~8h0苢~l$;Z} uZ)چ  zԎ;qmi¤Fέ37(g"`) s|LUv,Tv3b$ yWsAc)yok=Sj5̆>)'A_mP)7wJlEQЄ.eˮg3]]\qRwA.UeW^G7Je:[)p1נ%i>mݚDž#a^߼tuxt;oJ& l:<~c(9# ]k{)2 P7Hb#։5">.2Y5rpuV@o+fѵ!d4$1Uk2}j)-hILΪlkUۯ,d][Ss.j;h@ݐ-e/Χf|.Naqx>ot6 wCǞs ukyƯ7f֜guG.30~F+})ݡZY3c?3p,6A8'0I)_{Qh9>F;>r$u\J-r +Éj|}Y DCRƭ㡖3`d{sMkq2Яo=,Pi =-'ta{[({UzCPڽuy?Hȟ5N8J"2 7`Һ r#A-eYI`bd(l6OxHs gZM~U GH_yXf\KBΈZ^GpYAw'O|0"^Se@ Рm |I$QOC4*QfTVM$|#Z)}<0Qe5dAnSfȤzm6;I T"@+2#LFfkL=/!+'BFM9j&_i#O_pa>I4|f^Fױ'v<YtQ5LȬ*˿JyOJ+Go8+Ńp)WO gfF42z_$NWZ u$cWqxƘ)$Pg~#&د)a)jb48$㬫\*R`'z("`]qJ:@'{s~y(V[fVNw;zܓJ,S2&+.^hƙ76.1N JFbE'\{_AI݉G͂pӥ,&*c #.l!SDy!Ɲ6mC6_DČ'ꨢ"8կTm<3Mt葇%K2:ֱ:4 if{%k:=BMYs(>aHޱ:uwxѼy*䪌Aiu S\7:1bV)Zɘ,M (|'t0*Yx!vGe(N["HM͘]yWyg2ԿL)O^QarmIQjL}X1#fwz/j&;(!u eOLKtjw0+բڲDnO ԉ֝NG0+UkeX!śIԵblaf}cQy_|b: HןJU>a{كzե3ӕΠ+%JAf->nl(| XLQ88v\}xApC8S=Zr-&ٌ 1cW ,u{ؤr"H.f;v=̬0e$ Ъ+0q !^Rc@l;mK{!*TP^7Qh/QJUSq%88oˆiHܰN EWhER(7k<@t[^֓ӡc r>ӈdw-ܞ{N /6PR VHWd\?S0D68m?\%ĐfҜ 2< lyƕ@up(` N\ g:+x A\Р't `V"WR!?dh (,Z-ܡS6˰ #WWmxd3^)qj ?^<)3mr Gkbf4 ,tix{NGDovA\R],3OZs'JW(_5EȰ70?jωߠ07}0;ܐꄨvlsZ S0Z 2{(,9wt /=A)gg{{+NR4";\Xb%=4l.ٜAc$\E=#78e0I*h >V%_fe^ځBdƋ:bTqviOs C!co_6t]TX+nK%/ٽZ2`CG*gj&(z^=dׅ2Q8:^0\$*>Lɓ4I=u1<ҁtUYOI!2N<60+3z{?F>okb$1==vTw싁D:*Ry6ocݙZ tEhuA4i $hDtd gL2 )"1˵r^3Wx]IH hqIkV[kl 0=濗<jVޱ҅AFn Ҷ! 6L ]oHNRh K 0ڔ<\ mÝj[gvasʾͦ@{{N~q0wc xϗ u;Θu "JRZZt/u,!Ē̝f4PjH+[|} ~cQr-  @eU'^P{)z`y`bK]hiy(J Ə N&7#-b Ǟ:AP1v<;8v1CPZ4X5~n|K 6@3s;5"crCBl>)WPz>p][Dnf'oPwKУ+ 4ր݋l7b,;i(v߼ ,WHpM2n,Fl3s҇ );Ds¿<[gE)" m1N@hX73dϦ-|4F!êlDG[0,p$bl ;\+0cN`>/wo)4Zɲ&4%)`Mh;0 8;a$t\3{ͩ&0 "M~<պpAΓ>extͩr=% n {1#JꠠWAL\L_ 0{,\a5!1mm7v_E$9"lxHo%CDtL=x>-V_wφ[0*IKIG5m_]`{Iژ/E0hnP֚g+ q&Kuű$8wzDD Z`LxFN?x CAN^#O2"D6Czl;x>in\+뷢W0B~ )_F3h[BtHSR@?@fs{:Td9Sɹ|<"@jhf@ x7!UOÄePՉ옞n3Ѣ+2?9{@ZPdA>jS8է O'~ۮ60_E۴~wQBk>y+Z g^179o ^,9/8|ᗥjov;vi}L:}} p4y3P.;މȍ1ܚS}=:AoO(XX@%zTpTpJm"6\#I0;Vv;lVkQsώ|ue5`Vb&9+b܉(Y,ۨb98wpcG +>x(IPb*uZjo\Ku$\/y8$2:ox!n)9j>J9/8D}6~16awL)>s澻 V:fϟc0Qfaʴ@ӮyIKYbnݖqED@!F*- )3`{-s루Q#`~h2Xt5ШD?X)wuS˶6u8yb-, jTzu[TsyJ)MLp'!}v蕷gICޢ\/qD,(`l}j+>r/@m)l2B@sZڼs`Fr{l9<h8t %CփJ}Qu .f÷)d2 oIn Qeoߩ&xo ޒHN.o8&Mә3c-Sbe Q+<2rI探d܁]QO@_׍>XQA=bO'8≞sz"XB),u@ϑx s)\.b= ^%AYKغŋD2n',ϴ7a&]< ,vqe>(XyNڇP̗KY.9`xlU䯦DJI0FZ%i2^ dcݤ]4j9E:d;R]K'by`_.='!nAD%X2cAU!U&ڊ&W(GhXbF3 $scғ!o 8`dzjͭImtիf[u $a_.G+|%(_,[Ψ8UW@0&?qwa߭i^@>H SE.%}Ru;tuVʗz%߳}Dofc2IW *-fL@?=^3"/tq\50adk6IKos՟< *kBL9ϫPPYZ!<7vxl~f _&hJY8.&͎򓹚LPtԉkWtnB7ZI%)\GCl6#uNxllAv&ӂ MWLmⳜK;| u$f-{{fw|`&zI] w~w>,2 yRG\'XeO|$ȲAa*5\Ԭ Lkh9Pٟ%bXG|;Эm. `0H5Zv聪E ݖG + \0Ͼm߲(I2vtzn%}"J-H>OT27=L`{'Q4Llg?dF؄&f B< '$}mT7 ,%: @҄%¤;-N(v1Fpog"|@#~}w00?_մί2VءvW]*mK9'Snw%d^}}«VbS0;P66ղ y^L.ָ3w (UmJ$΋VaPVj*V=vsr;ye J_f-4ʇA\ 0AV(ْf (-I׏7n sF(Yfs%jmDƿPYioE7kVPO=ߣ潇[7Ӗ8qS h9GUEÛdмdP؜w|[%[i[dۅ/6A3?z|t7&NQ4SW\b{Ufgrq}Q2Wlt^,O+WNRȈ VuجM#97A#. } p=XSʝ1ڥ;vf6(I}0rP<zzuFRYzYO 0@*ﲝU's$4AZAxr}aTuEmN̏F]v{ȥX)5[c1"0D`zJ-6s%M*ڰx,!#tR+׫7uӛGsy[fc=S_n . ?uiEheԧtdEé-Oh0SK=_ `t"]e{96Z4-΀\l9UGS6O,á7Q'T'xH:pMB ;WhXޜ;om'uؘdЉ~F'^Lw1_|'bmx# JDe#[l 7AldLY{.̈́u-N嶤 @)90jED߅P"*{i$Hҵ_?8E11o$g߄@2xxnwo_OzMa 2ږuG#EzC9qG[c,ٱ$AVEʠMyA()hr6MEsYF^<6yn'zW=nB5_*βHCdexasԅ%ORofs 5`JJLi>Ej8^4p~H|6E\6(>y܌@x7^fݵ};8Y6$p纻xjr:[$?v]' o=UU& >["+rQᱠmGPʑ`n)2JՑJEzukkK2Rpƃrz"v^:@=ʼmN?m4ӈ['H›nTo ^NWh1X#r`=dM53)&&x+GMV!G2- nqKFCMcPǭ?Q<}_Auq"~,~s/K&XK3YBBpް̱W^^Հ鏎VN&vdc~g:]w =rR6˨MvGOJhAcernਇB(@ P(H7 :tN+Re.|~T6B܉ w_YYֲ@as>@ 7U)ZC /wҨ6ka)݆p k [ӵWw 1}%e8ٲq.A <'x#` 4-se<ycq#ά,D⳵+%ݬK p W;c-wh_ P;JҠ`ӳy#X FƅPҭqr0~UZ5<x/_/i%b}r Xv4%W}_mWB{K 58䄅"g((A(B"q%]3QYfa>^è]vuspo%̳2#IA!^nXU 0 tGcOI9Wi(K{`vfl\-OHX >(i|mm6N^D&np 񐽝ρ{ Ef|?ڹ/x=Z@& ar-G!uTԋ_-%]zP4uyem%Cu6SSx,!V7햩k(FFrq.ܼrFn %|!^LU}l\e6QobvTer*$!" exc yXǒc+Q ";~Bb wZ3x<5QagW +*ʯ 3u6,JveT-e}^P|5V@$$X>ASպX}ѵPjp%BJLTsz/IAz2Lu,f[G}||ʧM&9L^o&{Z@o3A9#&AƂZU P2e˔nQb{m5 d[>S gv9aќvӲ~ukĻn[vf3'1r2P#Ar.Dz~DEMsߖFC"eV9GWDl^)W,WJ~lMZoI"Y v:AIN5~n_j%O9d}l+g&߄}?[M`h[*ٽ$x17}%FB~Y{-c<ʛ@1g ߶qm:+89FJ* ֒j_}aiK[=+tUJLcdR_4.&7oIHgRA7П钰{\ǣR^jY/NٵLk;"ȼ ,dIy͋,!HA%m۪7TV +ĺf >yka{z'=$A>Du\V`v~;]UvZeWćRzFH*G"Q/D$˺B?iDIwCU#*;9o+؛b_"E6+vЕ)jB>ƋmiV2 %m~QpޠUK۫d*6 1Bl: on0\ <a]N F*`bsã,RA%րMazm!.`KUVDE:;떁XO+kE_[Բߥ;Qsn`]WQǶ$~Ǧ@ iR Q']T{IZk8/J{єf @WRP|Tv䠼Aym';1RӼ&ψGS~=9FGJC^zV3!URE$q┃x ߒ>5 NV.+sAYz՜W& Eiu'rAoS^K4Kt ?BaI~,g{9e⊅κZh\?~'vV8V5eY>gǫ+aÀ_1ŘANjUl˾4 <2mǗqBSgruy1ET-kq3B|xo}nBCLY\`ZEpÜ'ʃ2%:XXn;-Tz6Y1C ;5] .*N \CKjȝB g%&l-;TZXnk&8t 7ӻ#M: =ΡmKgSHu5I{P#0%*bROi>B[]Uވ$U˸WyquWc5Ie)~iŠ_Mxmfԧg;<8$ 6sxЕ* nރe6_6sBe5- !-eР--ǃץpc|Q0bFٷ7i j՜dG0s!\VITP٥2rJ*OswM)LS5"#XKky V̰mf9 3ׇvz j*"ju>wyT攂%4X7ѡy*_n.\X@%~JF%!43[6;;J}?6&}{6߫PUΘnS~"DT]ˋVx4~]yX?g|7D&>8ӷ,SHNL6'V [F/3Xkil=U"s#D4 Q^gǪOaLl?'~lQ伈 7_TȮ9\ GAbc ~'߼1owΜ wns#HL58$ smPNϗ̙lfQDА(W`.RBCԳ@Ħe[m *d>aj7/q&IauE։嘗=֖ -F +O݅›uj A:MrE7Fe&~1xa}ѨgQn|xdy,?[J쬆[u z;}6Z¸oƿZ1KFՅS \hH)X+R[x);{FltBCJ|ՈWU8rgRH_4ꑥju<}v`f$[989I/!*Am|ѳaA,fi,N{JiǶ.<̇JJGr]T:: sW*.cKU|jeMVYN%ݟ Jo0Fz: \BUw $7Vy@lhn ]IrV ouD\HB s&,/9n^;ёx='zWD0Io W`dE|4_ g/DKmR puh:DSQkx/i>ϓ4NiY.rzl(ɳh$&dPf6y1f$AǷWk&K$`ae{\M̾1w>9 FvA$IW 9(W) Ə7 |RFTΔ`|7w/q2Wpvh͟j=͚G={6$Tx)G+r)71Jр>8SgO={6cuUUi^ (s9w:jf5 X7ց Op *)wV_dk4OAD, "rHU)fy]F<}G2sp`{y炓k0=5.E)823:O\o0NS[|,d,"$G^,k+"ذQe8Y;Vo@DNu=[ŸR"f YSV#z-TuǔӥU ۰%@>ѐ-ʜn3NGt9؂TIߐEo"mEjyJ F[Dɛ,%.c#"Zy`R6|BXѵV(T&+[؛Gr%BĶή=3^v[.뵉B ̸$7M +@WDXE\D0w)@`Y:M/ H05-=!F9]Əj(P(èIi+\6JXtBpCKl`ك ,Ϭ : ֯-\Xc7m={G0 ]O\x;&28#Nd=2G.EPL!(! `6{'<zϭŠ5D;τN co\Kד*HW S[sF)+qdT֣&;&:`Sm8׸AШ1+f) sUDQ%)VA]6ʅR$:ۍ;׸{͞kC+O)Fg;Η*PsB#,z|sh'wʋ*#'NIa[ȧZ ˩iD6;z)XȠr[r*ֻJ~#Q*PO_BZ)dl}JmTNJT Ul65-zyGӃV3ƲuY?oşypK ښirߩru`N=-xulw*'ĨvD:=X9_kಢ,jLs9\.zZr5@^?]5Uq&k iG6O4YNѼz\Iؔ=np5fYjmSw3JݎAPJ{?YuzG4Mluه.PveD}l"+3z F-7.+v}ړ$smXSz(Hձd0=O@Eew2,NMgI.߫,./K Z r5rܼ3]U=ʱEkb^Pw4}He>d/Dwv c,S)Qp-7v2 q-M:S_j5h[ĪR6mpf7g\>\]l3 ~Ӓv;|BLiP @D҄ɛ_n8$9"TH7GY5oe^ t E$e* q>q;wvnV*FIW+FFF_:?9aZe>}R/9%aE%ڝzĶx$ ڽ.dž }f65R9: sMvCmB6Bg}WmxbY뺁L O83T:M5XMi86n9rίD܌gR3/E][VݹgVerވ.]ξw7]_gb1ϳ/y eD'ϾcǂE4ATc #$k`K||A%6Iolg]iP>sN[n3`:=''Ǯ^~izp _MN"|rTfsK5͈KpIV\sݡ綴J ;a7sAuوƨxZƵBu?t?*ioŠٿO't3+Ϻt ^&QsSOV6|D[?MM qFD5hݦty WII玱(`FZcx48Q6hg}Z%bKv4j?z-Wze/ԲJwơ!mlMMF NfӐE۵1F??V?WOP+(wt땫cC?q4;$}*ȪЁVgN\Cr[1!!w?ow<_:q8RvCnvBAODMd%6c]?:d=L𡤘[  0MCd?`$>ڠ)CZ"Fj@/2\a&P5t>A7P B 'N\n$۰$L-n*jn\%qP'0OKQp_xJ+tZRBtZdJ^ 1a1ޤi\Mn& 4 Nb[x^m$#.O&x^~^ޔZzS_&iaK2/a(vlI hNF)mjl|&i#OO](2pf^@0WҫﮐUAE)vőmcWRv .DC :p<^9| ȁZL~ 1Er:jeY7m)MMUsoPѺVX )QI?lK(ÝXضmޔtԁʰqO]a%59J/.DsƧF<׈ xa:}k;Q=R0ލ,Z#MlΑ ^)gM&]LTmG؍`)[cgbP"%N>N ә[Wk8i7R2lp'XТº oAPtdƊ!M1&t0%HyI\xt9SUƧxjHue=V XgC' IgOqxiI!rbzhP\6OfG#,`=)Gڤz6tؖj $i^0J0甪Hƍbz-e f<ل t'vP$g_9M9z؋xo[XU뎴^{?'߀#(o΃sur˛)GḼ|HqQ, X܄ &ir]^t> >{ {`S.hMᎰ8.2d=ꣀi p;?b @Vpp]S1g!-aϚ &=L] K0ܝu>o o<~Yk6ܻe[z|tgǪYCi˰CҹR1xzwLH=z,Ocb!9ei`~`_T 4s%X D:a(r*XN[4R$DL*e5Ps1Z.bUv;>1,@pC!p)nJ"z9#3=~?-_b)/(Oǎ9$rn:vWiu1t  5,?b<Vi־Poܶ cČ/wt<NG鰕aq:/•˓,OK$݀eǤ%8$|jfTNXEFWcMϕGi5 ]Z֫пbʴ#[ahSLaȽ3.jYy/4:ۑ"g_FD;TCnB;7TZY7RN򅺗%\NhP‰I<6.nrF>ŤTQ¥7I5M=ҳ `BNfeTyjɰ4,^څ0WkSߒV'oUj4u?"?{aC#yު:z(CڞvS,n3x~(G@[޻DU"ܺ.iU_=<_Q$k^3H" #b("=E"#}[eXw4p08:u@*|PNEgWtxkUvFf9)#If%Fc>(3Ū2&>B|;_K4nAvp~ٻM.x- a:W )ЃM.Hg<_;EJJD豎"ML.C2V)y}C 1bd͘%N1Dh)*q X m>I"~s1 "'yN!ZonF9u(gO; P7)3jХ{i"ݲ|pTnAa*V)r1gt}ceȺ%_E#[>W_IA>Ga۩%K(%wdO4ZyM%:ɫ3W% Ll}yNT8MF;=34G;(GGQGH2iT{$0&]n:`оz2 iZ{9g#p9ZgD22ȶ[/A]p)SiRnbB%ll͘nbh x/0!k]gn{S[ߥlkc9]X|..cۡgH%>H:˅(ܨ_e?VHn2Iq.޲16U<߃fWvr}VWsh2Y- BpKz B2?Bڽ8n#^_NCКLi0g薺թ'ˢ71FI Xs i)ȠZUbؚj?$9LH)DŽ 2^fIO YqSL01QIɢv[-$, w) ` 'r-dF1 2fWgekV4U tۜʆ,ʾ1{Fdk?v/kf)h2~gN#َ7b}K ZF6Yj{#KljLl#2܄5iVZxT$GH#^#p6Fz8)yG@,{9p㐒䆬DDeYF|rG?"e< L"p`sCiN pb*."]ƊD>?7r4wVδ*q}q$ KLB6:^EY&N/k_i溳®{o@F&X`۲Ȏ~te4'$ȈM\_J䦺[ k ZWgң'Ⱥc9XV*408c:ԔjJ%<>oﰿHat diS-eϧA\J ))_gHJ=]35TU?Fx'nxU_4gm.8$iQÁznR%` X̰NrkM9 Զu9;EaIq6WEg*0eED,l+֗ZjKH^-|~*^_ӱ)8H,?wx rd~v]nW] T.œYdL9"[N8F;9dAs}he&&lWtt.ixPt0N;B 2QV,lۚIN8%q j0mQC#)(8FSL6!rV9W?Yh@Kzq^jJ\,:0SJ׸ )k6+"B6kԿX Y*`Vz7h qbe3Q=u`k;+ML)׃kRhVyInm'K8=7L"ʇK.OK/ǘ8pO$$}f| Et >9HS:%6 ¾ h"K7eJ^dqF tR "3J.rx'npiCظt v7 u!w˕ٸA7-Km Fߧ+:cPEhFr6ܞkFuCy~AgvB c-xq^ TlV)Qqhs;?3mWz!g @tx+60Ml) 6EBa ޝNN5`%Tm 5wS8ĒB r^ h;rfjh0zoFyI&ڛћ\r'(b}+OM G྇B#Mn("GQ.K> 4T^C 唊SH?]1ʘ 7eo)f\ ޵&=>'tP$Հ%y~SR[LXmmFx,w!oH壕n±Nr;"PJzQ&vk}40I$2@Fo̒u^-LKW烙PѪ1ܻ8mf,F*g_OM^OG12>[SI10WhbW,N7L)AV[ )WގQH5nX8m\3a)(T;Fao]QxuЊP5\}xݱGk2 v lO¨(>}nZ-K`ui$Hi}JL[1eg'"QЩţjIN8vEWC4ONt޲^Sբv0i,Ѝ +{* +ȳ%=nM0BݯMzr"{9%!Bp6faX"-(Ԇ$ka(:{fzrاl(̉ήnÍwډ2g2rIG)xa*OD7ӂED+ fQ6jo\6xpZNgqloh4EZCt<7ID."w+JH"0r5d0w[ȍ`Pc+M .H|u{yqF=&" gRcUo( Z[򷝾3E&8lTt09ke/Z)+E&!pK _ Y`w_9e <5{Gz+~{/]>V;uxt/~@ G1EFprm6{UTUbҋkݖҖ.>jOVkUZfK7& A8rb<"^;:,ǤpmΨw`fO8ᏐV^iYh+Ui\c`֐@I`RTʯLN#vz ^S+.+_)ϔKVΔݡL-A%%8"fkk{.gxzG3 )R\<؜%)CN^v- z/Fake0tj:=ڨ03vjcS^g+ЄBM=EۦFůQu C\pQPc*\Ѷ\UM:=]siг'ZFh L-`L+͞pl'n'5flLq!BGVqj<'Kꚑ;VR6Y뽫+Sa7|2y;]TB;u3R=I-'Ohj aL%;\p# &O˺Q Ѭzi&Ы3wU8`X%#ɿkKx ns8?Pm;[>j4ZPl  sbXoT';7@]'gLsn52FNvv)E\S';YiЎ_]T[Ӄi2ĩP;HGRC EnJ:y-{{#s[LVZ}Nt:#,H>Yd[2<"Usk#˽@mSY'q0^e:'gVG Y4;O=)5CE6(Z8`㱕ndM:JsE7F:>\j(NЧKo[.EcoMqe?Q-xL\qkco6qalD-7UWߺxie2B_w[7zi)뽧 R[d/pXW\\ƸۂI$0ns nm;=FNR4! ێؼ { oU3Kr Hty_*f{TLW,sy){g}N}TĵVC}=4H?n2xF.:6er+p:maNd{TMC*C?z@S!'ːI ֐}C'Ae6Qxyoj L!M!$mamz{AQ{KMt~~ϭy/V*C)nbZ3#qӟcxRXL~ pl ,x0&yӌiS'obYX吨38¾^D ѺCa]+L_H 'bR?Μy)Uo  G:Qeé81Cқ<ϝD5bP5|M ?+''āj/CApfEjeT,Uq3r=`zmP\Jm_+dzݸQ[n- 87f;WM6|f<_j.`Ofes\~'u%DnSy VN/՗1pR =vs5[bKZ0m n}xww;x4/-ZKr#P><999>l6s}CoD._0yoTtzTtoNOMu:mw7;'v8\9mwFIw?u7׺݃nqw;+7עվ\ RstxxY -VJz>*rsZm׆K3gΞ}bs齾 }y07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!hTr/AOp:IdSt  %$۶ YZ