sssd-ad-2.7.3-5.0.1.el8 >  A c U]U@v%;gLy*E#} ^xEjN#ŀv놚oK"2dT9sgM3 h2-G,Vk[I +ɔv\t3= р@!W.թ=Dܒ5 7UYC93cl>"jk*|+~@JJ{@d86zRr#79f72f3af971505e14a94dbcb1bf89e5fbd4a3351f59dae479e6adb1a78a3d0f92c5829712c6cc35266cb5efa7c49fb549f46136Xc U] c VΨaEYNe~zvJ MlSAwΊۅ+"'BCӰjW؀ckTAn?  yofPW$pQuޟ!rA5yK49D1*J/H9A R+y^e&R[Eo!`TDŰb˰ ᤎ"WL4jIhjdh {# ]@i?zxNB ;M\p;nev ? 9wt57lKe!+# P<t6Ch>pE<?,d   6 #7TZd            L   DBLB B   ( 8 9:eGH Hx I XY\ ] ^ bdeflt4 ud vw x@ ypJ(Csssd-ad2.7.35.0.1.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.cƬppc64le-01.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxppc64le'&C`K8L <O AAA큤cƛcƛcƛcƛcWcWcƛbºcGcGcGcGd397ca35b95cf32512ce24ffabfd528384033373589375f938db16b26bd59fd3087dc625e2d5e1a7dd02f4baa675b1592c04b9561c389c1c79d05a295bf351c58ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9034e54f24973f62864ea2a52ca27339c2786467f78eecb375a37bd8956340e498e20aefe1b7b2572e175d283a4f0bf02c6685ffda0233b9a405129dc88c6e490874b84915b9f4cf29157ef9c9f0ffbe690bc66c7bda131c2fdd6b8ea5bc7db95b6cd6c65a6e08eabe8d716161e9125783bdb7bc36b6c4502a7eae99ba60c2a5394../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.7.3-5.0.1.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.7.3-5.0.1.el82.7.3-5.0.1.el83.0.4-14.6.0-14.0-15.2-14.17.2-2.el82.7.3-5.0.1.el82.7.3-5.0.1.el82.7.3-5.0.1.el8sssd1.10.0-8.beta24.14.3c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.7.3-5.0.1.el82.7.3-5.0.1.el8 .build-id17be9075efb701f9e459afd002280ccb4d3b8dbeabd0f367d46c78c1ed7b3eff84d332b76893b3libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/17//usr/lib/.build-id/f3//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=17be9075efb701f9e459afd002280ccb4d3b8dbe, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=f3abd0f367d46c78c1ed7b3eff84d332b76893b3, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)55PRRR7R RRRRR RR4R.R"RRRRR!R0RRR(R/R RR RR1R RRRR#R5R8RR RRRR&R*RR)R6R3RR+R2R-RRO;T.L"#*ޗXL-QM{tïB1\?F2Kh|H'{RqueYGqϜ. ]MJ؜{{0W*i .YErF"E,"-yUu;Մ; vq/4 cHcv mȂdns]ޒ[@,K DYN#>O6kڼD?Yga=.Yc{%tt{VH4^Dn4Hm i$nm@P2`Xn0pZ(xh^-\ڑzvl?`#nJX-H %I7Yΰ[IYRܻ#bq.:A{>ا]Oϰhxdύ4 1%Gbb *@hAo =؝'dfxVބѶ|yNB@W_W)7_^LB'F0W `UG@4{H H<FBPGx,q lE A@UL`2NRJtW~ toB\.)C,@Z ixI9c :#ڿBĆΊ-1\HɽD<[~E0.CyόSN%Km hXZ} `Tm3:PfH&CG~;ÀRLrϾ9lS%8s/8DVL",_R]Aɠ 8~hYT%'$-$fJ"v+Cgd1V/χ5 m ёɥ$,cE=ִ))xA*H aȇsxndEeo'l fc~[JGҽĎda=# ӭY=]*;85E K1*YN&kHY AkF}K;5/ ȡ_AV KF&PYJo{MYU戎S&1?u\H!H+X{eϓUz]e#eUݲæ닓4GeWS*ԥf;Q]mx|L&$% 鯶||ld34&<)JF4&E4N . u`WpAFyg1G^ZM h6I4c$SN}dsvkawЂ `JتM2U((TBt,hHO OtؚxJ{8[A@*P!~R=bݙ1_"wٱ`4T/2T[Nn$زR ߭Uo~(woeK>Nۦ>ow,tvzNYK*b3*}a\G%VTP~XA5fײEJVf|ʹ%F-al*^67#{SztB](\Χ(gߘ4}9zlgʐ| "^ nj$Q6Ţ^].T_p&9U6X"N|Kv0ܪ@>`; ?Fa jwUHn/,@=5RW\%ЎUA3pgDvv`MrQBGk~\6d4;ճup! 4 +Lh2d$>fe9:@& FVb! &o: :} X7khVV(W@YFѧqEص&KcD P,Ufr] 7Tx˭s~`٧hB#U&ORZ~7ŸvRe,b[We8 rpv _,&H S^}w ĉ&ږv9]/L A6& έs5ר̿7ݔvD<})fbc1!vyα(YG_GZKWwgèn,%Ӳ̓h`2̈́H`bzHww0,O_%/VUƄT0NiG2aF4A%ݕ!0Q)P^h!-1FpAbd+ }Nk*j$cz+JW8⡖yS2ܷ ]B`mi'D#)ajd Rpz2lems='S#d ,C=4.{E7r^-r_nmԡ?B6JeWRq'<[1;֏e! c=_VP%=X4z/7Su*w_0k aCbdm"X M㣮ʓcAm,"5L$6eO^rzEs$2\X *|]^~|^0y@F7~߃Y}!H)TC)x1TBl82?OfS AG2z2ߕ֣ oo~0WpCuUgg"(MFc7]QQe'N-w[W?>$$35[ᤢ{(5Wwoމ 4V"8z< (FEy9nqjeD1v ;c5᰺o ;H@5Gz Č.;amX£T=d\zgzӕ>ier<˟CY+`%ĭ}Ij55Eٙ@Zj_VE:}*x08;=|G,cjYv0v.~K+M2f[O&ۥb9Bq %f\S5{jwz3YV?FQkQQy$%3Ҧ^Zad +S{+/pߊ ɌhO%`'<&6_9?wV刅"_o>{4[ yp%Ug]SNs䨬ҼtصݷSeA9R3^?>>Q]c +4 (YVu}OD!h5 ibf5MN+䝗 dM(w9t"D3 I WCi."P"O6\᧎O=%U9 `c yLM֐4·DHvc$iy[Qƞ$)&8P!&昄xW*&X?W 9 3pz\<*[8P%o XIS,[FɴmLڦTƄ(8sEnIgQ&X\=]ybR~tk4y4Gb.GྲfjL!sK]]n=$rP"aȈZg.-b0: Gg~dJ Ŭ{bʜ2$؞ )ڧb;pqd$ǫALJ%[ ege9YǕVчR4Z r?,‰MMhqlfd8jLqG{̊;(;v(G XhgPv6Zaگ,uCGy:F7 zZ.,]A@VA8N9nkS9H}=s[4cgnl>Wr˹d;WߠS\XS:^5I XRWȭ$zC~sxbgF$iRIQWϴRE-aY?M6&G+_U]1}֙A<BW^E% DU )O1 8;2G4q >8fBl}vI@[t *4ql&IQy$߾:KQO)sdL.fZ"ldOEc=0aS?j+jK$O{EJ6O vx@u2!YWCw>^БS^ɒd7*@z3+ywFOzz*epeuCHz,) 6.0Sfw e=o1Ͱ 3]O{ީ?\DKe,,RK=ƪpNm(!e-YؑӲ$䘩$sfz_s ;'-}]0ܒس;Y YGY [\Hȉ~tdZ"Xa+U%PiAsC&[[y,()z)r G15G5NvN?(9=@TD'y5.Vb*N5%N`z5;j_ʒfU2A]xĬ$z/CC!+ * LMߤLw,-PD: F<~Ԩ(EԞY'ű*j}ra5(D%B "dI3ғl ]#6xxF;F|b'B y2(^;c>`mӰ>/w\/ Fo`_ NfIyk[Vx^BcZ<8KG5 M_~__9_=*#7vʄ'LY AcgUƿ }y'irY*}AJ{R9h6m@Bt_ >U`AGH hQ}_Cf#+ȮϺ/HTXZKVԫa[+$¼Kf<@J :"^de/V'N+-2TRV?PQ$;.Q,,kϑ= {O/s@ǥ5'ņWBJ!S厤"'_;A;e2j@KrPc6~v]hmDubP )0ܐY$:Ly4ڭGͬY s2ef0sN(i9ӗ$p `_pmH ڂ6xٻx!:t>q)%tPZsJ'^}u|K5_> ,3E<&?lCާdbnU6tI1rA>62;-dZ@I5EN,.+3LFApfEڤ l{D&ݴ(_{s7H_{_iM-'K7#9C6u䚹>%5kn°J7:[7oN!iK](]Fũt4X/Qa2wTI]{e;P3r~[y.d8ǪR "u2=/%nXM<.]PO}Fiw(d'&kk!2 y(`~)$P:ŽW%nvȫѧV aP"N%V;Q2;'F'Y? ~xntS`|nY׺13utJީYoT8 :݂? i|TiO4 Bgo-kz53X3KSC4!M%: iK¯wWJ<1z4I&2$us_8߯=̮b~G>}߽ܳ:T_Rf:]^q;CI Y٭xP&7A] ɂ*ڤ}'/&1Ǜg7^B8Yc!q>-; rB._v/ښU0ޔsiYUvZSVB ͖N,h,nӋO~Ȕh-Z !81EVdue|~ jiM/!.9M~i:iv} x'H'LҍyAbc )%kI&Vj%/B(J#z6G౦$BaY?;Ѡ(zq _NQ);9L& ,|FUf]vf>ūMѺPgޕo2Δ%Vo 'n/9ȝ)u*jS+IA7K|I! ~SH%{.w;0ϒz~?%eYS b&L8ѻ´b:RIc򒨣 ǶMi,\\+jơnw5%<(]h&7PQ6m!$[H{ܶXU?TݶYO# vDcC vpaE#.q7 CzZm['|65IMs`W; +#DaB) "[ze#>)ZvXL8FsjkK(+";zX*g Ə馉 >;HӢ敖 X5Ǽ0},{W\g#E$JFD1q79V`c 4}_=H7(S%{7cN'*Գ|kd?fyI7z]as9XrY$R9Żz6n}2240CC+o Z_T茳O+TUZYڤ0*).}= DɢG[4$XpjբN9'7G$i*lZ@sm7iBtBrN CX;Ux6-ЭA;gvӕ/" ^̋Q}F.c ;w4.HH>N-scB,{kXuoaM%1!O[r ,*(C{tx8LW<"ZZ3K|‹ô(]}S K[Edzhsw̠Kde.TvHQ\~DM5z޸|,Vfh:Њ)c aǽ ԧ\S3k8mW箎[خ"_``D{wS <.Kyh/B Y'4YBGTFhQb$a>[< ۵'gɫU/=Iϸ<_jD^`ePy(IۄS#gKYD6Јٽ]ɪ¨XmsxHivuz{HX E9LK, )&A}ykz@dbgϫEnY턙M;cv N0kGDHN0t}+<[l^8jȢַs>/('nfY '_+/ÃZePF?><)'O#[$)r;t0A~~W9Y+R`#4"98?sY~{t$+NSteNj;s7G=.;b<lp-TlcX/Xpk!L&v"\7% }R̛Vz;ش$sig҅u_&^̀Љ X|s7(T}Ux^AcelgS@k ؟,Pw,ә SEQoLIW{6C1F""ԣajlo]y }FXa.mIgVNZؙ뢿e`4Zۥ+觮 ~bj+'4LeؽPFGf,".BHT.8\&zm'm+6~Tܚs%^ï9Fƭc*;kQ4`g`R}huF}%SS ;~Z\PJa)Bv+zۡ- ̶Ol,\)2@vPiSZ/\?cb%T4w{ʳ aHl9Y6 q7@:eoO)/g^DHVpÁ=TbUXj1=RdՎ1v3fs 㘞Qh Q`dlW߶-^l>8!( 7 ; P72J!#T+mw% n+ +P_bzf M@VGPņha\ ɋeۏ1ngYE?ΝJFq,6ͼ4WվLay(Ө>tebu>!9zRu{ OCQ3OF÷SxӣNj^hIñygChXV GX)fZ'ذtױZJWIe:̆;T2Iu&d'PTbN<, }A)r@g)o3x]UG` MP0ln Sʪ}YJStqWZHj%Jc򨅵 R`-ϳk63^Ѡ^ &C(cmᰪ=vr>cG(3(ZdYE0k8UeFa]K3F+w]J ㌵}xU+ž? W:d}{!β8+j!#YDVo:U r/tClECںX5x~Gb)g[-4*DdsVrl )걕>_+ީvc4].8ץ}t>6_Y-,(}i\- ?] 995{^V< >K/FΧg^2u@0O ՗9fA;`yz2kеj^U晰)޲CU²ZNy}qO/o hotDh Dƅ]8Px íJU}@( 2`mFw? ,$cʫ]\7ZJ~tM/**U,p~O&M&mQ YC ]0pBJݴ~J|LS=?nD_#rmg]7y(: VR Lw<]9Wj=Ч ̚1kV(p~oW$.ś0ЬOIqABw)䤤A9pWT9åZkm%Vʇ$2kH8젬_9쐩 MX }4qiT(1n xwieMU!]vGIx2i@j \*j# M{x0f Nb}u'[n%f.2[t8^tvh ʚvL_p Oj` r4Ggfiru9is\DbU:/2.L43~%1&Ss2 cA"U8(n`!H-/<9&(N/8Mb t@P_񄟌Db`|mB-akare']&9H 4m:OT$ vpqKE<+!u@'XF*YST:7A>F :.$HrvtD󣢛+ }Ƙ-Sxދ< t ~|r ϔU0@$ʵp@)rFJ7+.<2g;ྑ= &`霂Ӝ!XE54;dITw@h;<;J~Y˖_8zt}t2DYE}ap fw|R'@^-jvBۖ Ƞ";rn񔮅O~(_:eb`V A )^\J!bFm]Y1P Ul`C'+O̵^{i\F#1RP[!݇nl2j{m;ʍ^o8+cER-ܐ5L^\m8D)"F'oujw(( _k?\ΆB=[留HtӬ4ͩKGq~gcBOe{Dʩ?!5C<rN▄UAL (c+ɺ ߺFH_Wv 櫝xnq bތ@4:(Fo$xQSKl^EQ(Z 7thj4Wcj{uuDcQώrӴ 㣲7MBD NzPqO~SͼD.86^]gOfTB=A -O7C67o"Ɗ+H%-c.iwZS~'tV0%o1##,9'/Nв>uuط/JD;s=j_ɓ2>.rI}Ņ 3ipnɥ=,k%_撄 %tLVR4T0aV HW0O^@`;! _diE9M;2\Y'tqW^󃫇^kHI+Iƀ^ v鹖DO953 6};+,_C>#GQy*P,ynF j~9ff^Źkv/U8{{RY eⱋہ\qrhvTq=Tkgʉ2 7i:o(AMz;vN Q*W]pa=)}lm@-v j!Y7I2-B88r,e?}Qo'AG`-WP̜yybZه04 #$}C$^p)QbZ5Ъ%Fd@Jkˮd\Lyڎ|7 _ (@eXc-~ݛSqcFU2"JH~Dq^a3cH%5</Kvi3G}*d!pheCJL4BFfQ]/-eV*O}>!JץY.S.ULbZx2,'wjǬhcRLɖx KN \;ή%){6iT%{&W`R-6^3a3=HX&|#"}M%ro~%CpBHԜD[aIT$˸nb+sy_` C.akD, 4 eJtS^vk]i̧C?q٣#*y"r518  (_u1(<3C~|#sFueD|Y˂T}`-Zm HDup+H~*LBŨ/֕hM6z>,4eICIc7܁5VHz zќzҳT223yn&<f҇(FbY~h>/ hHQd@ò'GUX&P7>bdEcO,g@Jso8^]2>9z]Nt1cO[s<XؘBݮ^P[gӐ$2Jߐaā;k58? XٹϼUa2Ldv@j{Hv>e"ruj'O)cM.Y$/Ÿ[2TMo0P,50&ynQj$pYS<ը^47? F&>С KN:pDs*> ?`*Q;U5o?3Y.x!uK@@vaQZ : F.ʁ5'|ZJV<~Pti}@ʥKfA챀:ۯ M'ҢI=R'OԑP+}"g%n(.7b= asP#r;:OlD0Y#7h 6sd/h=cGnKPУN A6pD2c.pwd/8~:ޞ%LnUm+̰`<Ojd`( ݏ;!;5|E 5JQzk1s!/GR9 x;52JP``F y4\/  Hy[Zf L;|mSz?c zb Ly=u08!Z-Utj$7/ةl X2H/tX!]ow#.ۛso0k~9ey1 ߦg`s٩e/ALS_\څeTt0YQB%Sue%wז" OU쵎IXF ;U&GKd^ PD),;kueazJ%(pv+x% :B,T%LĮ#EL а֦uC}jg_:wYqIspiҰ}f%0'JSU{ tuyuy8b(A hW2DG['7ZΖ|?ۖ3fv]oI^uh=r7(źw<+k(7 <biؼR2pEQ=xĥ'4D's(sN_ gw}ZF;L*:WZBAS~*izn2ukb,V -ɖl+'؏ oLX9~M S0Gvfw@H?Oi'~Y^tOgP3*4 =23 ƹ@!CuX5&UU$֊n07#<3$UEi_[ߔ-c2F5] BչkztY^FQ֨hlذ=duRgu ɳT/)a1i:%j`I? :SjN?8B>8f҈A-57^0əI25^AQ{'xXL~ ϱDl!6)tC(;>|fvAAx1/@D3 t~vp|hM V vosKHݨ9S?'jUҼ}4\J?CP4 R)9CҼwJg/p*p(mn,=3sS-$jK[?uS/ufKHgmHOwpP*48^l1T)xnvetú%y>>'q3h>D)~>;qߘBuX{[~(}E!WjM9z>s=KCQUpoBN'(HWFAY d7xZ N[ Pm)srvkɐ ^{ +κ덹kLu 4#(#iVӬEi;!m}/q׆c1Są#l <9}us=y'IycޖhHUE$^w28A ?d ^k4Dj)k,44o+ÓH]X}FdR):V&ARErXECPwPtiܔFT%%8V Tu?ٓ*]?n؛VdP8BH3`5ǰ BV"!)$WZѹQm,%vMyJ5RYp˰k$#ܐ:9USgO>)vN(?>􇾅e?QxBw7Z%ѣRFKÖ5b,)Aw=m$&mNF￳?daAX,#_~"9!Ŧ4 8;b3~a\i=j@>4^ lx%P-Fn'wAS`4fUKG˴*(4!F81U\?VX3a+CPYfY3JFvPGEx￠QFΧ#.SCLj?J7y ܍6D'yde_)QdRW p?+/^3 =-$h&?bZfuQ14൯>o)euqTPE0Ɖj0ohK$,bݭ@Pc\\%YȰ"]+7gMfs\g_i˗T}H|C#otIДȏe BRz܃8ﴢ+ei @Owz1aS=kqql0GcNw WCߕ<;^iHr6O_>J&0m%r" /v:UFSҍ+U\Ua.+;[DChIQOzEg.T&TJ=07dr!Àw308F*}Xy /rO UnC iW~J, ?RaS=ftn?V%̌UNGzHǽ˩)ccŕ]!hyP8r+0wI0ʮ jp~x!_6SQj7,9v%sI6sTt׺ odN0k]ԉuw1@e;m* GaFkȢUJ[b!͢ l&ch(wyĐEG'*M*CU5\w@E\Y6Ei-P7Bo6(OȦk)]쮛3Q_}rCA7#D:|YTY 3K#CY+MNr]yyF,a)fs:Tc:%Р9F9͚93Q9QO>zaH@t::F6fԗ5/PΪV {G㔖EMqTdH/QLw#zP\' gj^HVv|S)Hy#8/w e6}ODSJ,g L;=@S'l=pIL xܘ {VX$ p\Π $!SмI,-#6.Z|j`3kmXj%~ɼr15ؚ ټ+F=Ѥu )a }. JOL&8?L~䃋#8޺cslZWhND`B13!LtGɏ[z315􌻤 ⊂V}ֳ ^UXX˷%KX{o0YL㳝5П SpT.,430wq>}W$C#ƒx1Kx>dYEы:MZV L4=UI0ңp4)A3UgH7tfm*I{ڥGPR~6t:5/5-v7mFǙC}(m4Pʾ%dl vXݽgj)ѥ-?H'e%s)u< C)P9I*`8%qʴX庺  UzWEŷ֖ %B߸Y0NAl1{<˒K Ҽ]$bi\]$ӂB6+*(g|' CR.这̳ć|Ux-wr@E\ƧK20DB}_<`XuU "9YٔY{[;L#p]3%{6wN_9; ,ux.n҅ }vt*ꨙ-LTE&O$U 2n17 $OORLqH>_};;ED۩`}!NL7'¯N6ml_^,@nywQ*ƌâp Bmu8q8^)4i6uCᮠӵ_gQʵ7>ǧ9nWw:V.g'JABNJj.k<5 :lP Su Wi@=nt]2=؄,SB#w.P:b5oUԩ䝉C.=VRO9#_&2 ` ´*q%k9Gc^F UaB]ډ +%:섔B:a ]t;vHޛL$l9ВheN&DBP&"&~i;SMr!'}'3큭}xȺ*Ƚ'Ayԭjp҉]jV*ڶ b6b-Zٗ~N³jᙩurJXiJl^]7^;2yؐ*wglI #Q9S\|-#t_hhJ.ͰuPh߀2t=tfC\gH~8ɡdr7XE7'Pa!m':bn@Ex??kl&w b}ҒuFKs0#z`ԍ&(h Sh% Ì"[-Pؽ#7hLԌ E,jT4 SH0y4_Q~}%& 3)GC39C,&T HnsX]u ;Ide&~W蜵?7Z vrI+3ƢAR_WPɱoV̢n Rq`LǙ~U*218ᐂ9z}6 R@c= /A$ϥrHe꧿V%z6 FѰInRc &$$ Mg(;\"-]# x[ 㜋A;Y!ا7Zj=D|iNҩ:>^Uz}$捸FvQY* ۷P,eX(1&,V;GE[Μ&jwsbNU">T0IڕVXV! YVRO*3-RvYkL o;Y ANws͏SE~a 'N!AdKYʲ?W:S]#}fv*1SIrǕ{:%Ui._9Gd~ 3Xk4(%&1#m",Af7'Rw­ #h7M WiRk =Sآ#K-*+YfA k^VrR rߢ/Ʀ^ƈ&>Ě7x$C6x;Fv!oEV_yM7gYmvs9*Uf[&00?3-di25hmK>^m%?\$ufQblk-Rr%黾"sR 3k41tA3_+7(x%wEʊc)Iy驈D/TWXn)IB^M`>8 <ّ; f@d궃p@%3ZAAUP(q2zcp֗*l{yY-dYݻ4O2tn7#Paȧpem2:tx92zPI5j~ƪȎv_mp$U .8ziE>A%G쨭WD(0Sה,YX IpBr$jAw ۗRyG3 ;i#R~ G)tIH%+ \eDf#cw&VD^vR@w#be~;s̲<4z-aw7`/lv[EgD|& YDz|щ km,r2 1+z?^c7h+ch. -&mE%qC .o_`^l&ˣe(>^t)Rp Hߠn1 "{r|L`y="=|`m{M(\>[`>2=?lF5A\Q/o/OemX@˻o|R m'\qz|RFӭUvpT\#i8 Ԩv 0ʢC;f NA\Sj<䌏݁dž9Bk~La.qPi-Q,w#y݋4' TyӚoY `}Xq MQVѮػοT{J\ &:AL 6gwK]s]@NL= !b{#"ݒ?lO!lkol(pc)8m/vY3DzjO1 Մ$O×zh V҂GgA3!u;|-Q^!:&rg֗(Vp +Tf=Դ˥jl}QjUnӗ;afmBI41QVFAIFԞ͙Wa"^@6U3ibyH{HMw5_7>@S5jL?L:w_}i2ҰidvӁV;:z@DAĢSpk6؟\nz(0[eZk! _ 9)j<"Lܙ!dNYV}7Ϣ-|S]ZWu予%=G `rt: |) op)h"MgVQ 0?CZ}/.]쁌HoC19#OǷo]0&.lU.U~5jIBk6 3s;[P5Kn lbZNZËR|)R  j_r]`QԪ IR[f?@ ɅZV]ki祉fLFHCi]\ɣ~$K[uP7%+O8=dEZ9:0^ VV]INe^)15an-;>yy0.+HwUBO)eƟ-eۊLq)ۊiQ8/>0*rϡ<)e[llUčG;bHALzͅ'So0\y/&N?uc|쉽ww2TLESٻ G7Cw/0eTx$7o~*)\y<mbHJFB5|-tFʎ@tM iJ\l ԮZ– ug}BYLkwX6g.UMnτnה*jCs ։Yŕ3[pƀCӇLf?mܭW>rՅ|5s>W|4 D>xQsh؁?+ T ,= ANH{3DV^_bHCo ^{i]hn(##&L6L/Vq06~|p۾ -leybN)\>cRٖ#8 }<؄jyJ}964u g|kI L5x >ңך[!ů F pΚ8իPY/7"*{X5@'9yaן_NIwq9~V"YETޤ&NjmjZՃCՓ5zCO ?>Qk| S2PU6EɆv?&rǝl{ 8zi\FKU| tDY0ؔx{- XcjNV||!QLMZ_@Gk,Zv9MG׽ߑR9DtMET;Zb 1ş;H}Ƙ\œ}ĕZY4aP fdDE.TrE}b6F.:\ |Xbu嫽' |Jq#ʡnpK(DgKm_Vy e|S>߭#0/P&hy㊜`śO:Ck}? [D]^-3lkkBg[&Mr/TYq8"^Ҭeh1b M[^%3l*Yw{E4+ ޿" [hGzAg{Yn 鋉&9!Q$dw@ԬW$0%uJv֮Pʻ8Rr"{Qڨ3奁*W0i@,Zg)RE{CP |~89M}鎣xE&?FQZelm{z_XLɽ,k/{f5e/Iݞ̓gat4ǯtPMG-%Eҵ]с"L~_Rj2GMpk^lD!x?svz10?yd]Vb*@/=&anS-Ѐw!FQeXQtDѬT1 ˩ neRL4.v[HO`]u}}Q 4S=Hs.PNY-P wNO@ P #fW:hvF[cyMPN@>^H ߣjĎQ V?R0ڋ*H/f/x"!'BKO=mz.DlqiMC T h-hԵ^qe'pܞI,eʖ֔`e7jea8q,K.>6o2'0IuR$\ʢW378|x\[[K*Z}]@O_N'mvUx!$g6?,_pЏ!siژP|8cTI >KOynߢ-s˧m0][Wۊ4 Uбlh]:塱qۥ x4O6Ě^nN Vi˂nE9ܢ=կ$7/Z/Gde_Hec͂*Kn4kQ<aÚc?tNɠ-[] 6)bt0ZhՏ\a< E7$Jtyap CdYRW݃9HKbŇg-/!VToMs]/t> efH~ՓpWÞi mTt|AJ;ˍ\yq8kkylYzȀ(1C%f<xd)㙎C@iA.2Df,L%l GTQ&)lT#pc%ꋟQ̸^[zGX͢V5zѝ-QN(]p6Aۈ3hTٷ@n7頻c7Ș/.=lKI߉fB{'FSɏd?* #q23ǣMFx IJĒXFN81:6}?+JTp#X*G‘a`g:>&^}.q5պf|wAڭ. p/ecHzAoQfd7nRS&8jJ-Xy _z# :MR%; 9&jw1;4&$_ݓ4Pk>&a [g)+bGr>I5&⪠͹ه`yy#-c5~"u u],@ r ّJ(VS.Ts4ı,2ʻh1 0~uIYMPw8iFD0F9t[۬yQZ Gp}@%-TA"U4'Fv.^obçmiZր7?3[?K 8H]C̛P 5u gRO;jou\I8dUr/4ZUokg.Ϻ,I~p|9D#xܵ4_'ӭAgYFZdK.c*̹{bn05tr;2̾B)۫`aC]K_n? #%;&Eq ױ^q3uJDsB,[~ip[ze!mw+πs/o-MjUʯUӒ+-wceeg)J_BvΦh~G!~ DNʥ+AlݙB#&2*# ;UqֺF|7c`繮3Z(WӸhP>ǑF;*'KMh Cך뽸9TA;%IY"*wlo[L' LJT3$#843_"ΘBpP]!a*\@F+u@s'P>*񑟀ON tD]b>06!gTȊ!}6^&T!-n*\ZfGuAG Y?iV90pU+>gW"O)um]V7FY)졟-v (OutṶ]Cډ>㚳 nt-'8*I}TDž!3tB|rwZ0X_n%ʃ+ J=}ٱ*vA[ "f_5P՝p{}e;͞`"j=+r~ fP QwX*-sC@xBG=nd[X@7u/>Z]K31\G'հ0vVj͉Ł$VHXWL xO򧆪u ڃvQFGQ} Sg]g`Tw+_8n&oRjV Yuq=P#isX/"  8e`JFBot eOR [qV (6ᯪYrjP?<=kX%>a;x=q;e?R[O-q=m.v^9^f~`mic<;/EUyh|g,ULtV|`Y}"R/ yVD9ł$H;V!-rLR'+_Ry wk Xc$kh39ƧAHgɁ1iAMK"9͇2I2騅Snh(e3K1$$:鬡[altm3X*mV@>@e|ȮQ"2zoL"2bF,G.٨_sjĦ!Oh5P)Yכkpֺt;miA;uɴdGk7A&_,`4sY$GHW%B8).&lߕH;d-RRZQ6OF;]\!ɥ zYe)ePM mHVKv&8Bq!UwHzI5AmE(8Ұ.K iMv-d!?Xͼ 6DB9 F߻pP5㨺TW8reKG=.2-l>;B"7H'Y_}WԐ)SgjnQ4͗,p_P0vv|#m%M.vXcfw+*"EF,۝z Q  IPE%sϬ, `6mTȥFZGLI3-acM;i:%.enL玃#њjv\B_N T|ek@ku{YOs e^\I&g5*ul*xZlIƵ22$3tl9Ll[f!n8ҧ[ٟbpXQH0ɑ"EDc3V6" Nian:n]?@$,<ޏ'#ЁO74=cT[WdCv䖧=;𛄸aYDQk֚̐gJFޣM6 A&ےio mf,v9Ga Qvx{d(_M:tH]I/|]g"N C@ȭt=<]zb$"<|]cn˓ p.ɖeȹMz 7Z:-Q!`k)7Q㤬V4|ʢ~?ω&Dqd!&;{#M'O҈\OHYh5$ʍ~E4SIz G g3 )]YCnR:;8@PC J&)ZI?C)ں^.g~PMڱev(_V7;.:unl|Ti 0ĻR=U{\%,ahNs7_M :'t"޹ 0j9(;OSUe3t &IqhLty]ñH?mJO I I;E7f`5J$!w,P$5d5$뷼H=8gxWsV/u"dVmmj12mkh?NȞ1_ 9\bGo]EIJҐ>GfqҌmiܸęnҮKx|*dnv,?f'I?"Joe`kE6?,-Yoӵa3Qlϑ=w؅%$RP2ULyE:an\EA?[ˉ;ÿm>ad^ojTI|P(-DFsP\+f1( zV쯯qWLRE[VSﰹx[!Y6 Ac2H_7>WPQEϵ7G,Ņc Fۄ SX1B>JLt*uN]kA{lw!a1)'E0 st!9&;%d9i ;.gf⿑")bY/듦v}7VŤHC[giS=ҳnx宽,QDk{}ut8▷JU5 n=fWh\A{+2wS^V1zHhY$nB;>'}ݠ-mŜSZ0vIrz}ڭ^WlzFbq ^1 'N)/w}=`#}9+i$ '|> jn{rƲ y?;Jk_[H&炙qXiG$YT5\z b!{Ӿ(R񧉞)<#B$>2+(] ϢL8YO\>%2<oq`/r-d[dӯ*i(T G#iW|ȸ00Yx`%'pkq'Mi&"~>[[a3;VS*5Tݘep']RWSD5#-u3 3G~͸;Z:D#$o?btTq? )rO< NؘuT)Yyb;ѠI!7HHǶXTT{.&dpŦѢڔIcS*M2 %^'ҙrr8VuC} z|NuYdC|9h"'1yxWlDB.GJdKr ]Kqe"6v~X%k4q`fb% r@\ĒIwGRDI %C5g~aMs3zi(cw`rZ.Nn 4BGC$'nusP,)ng%U8^E9=zn4yNZ^gpEZl;NJ tEG j gdAcm W TD _u#]ey9W"^NSa[_\' HsX{GRh!lhisoVyiH* [q۞N޵޳G3FICؖR:ϼ fփٝTo"ݦЮl[;Q96| r{De!$1pcw7Jg yG?#"Oz~OtF36ʋ&ر^dL#RMבI^Z-V*L;dZ0]_uxx$!|%Y珕 7ڽ dn#{2#Sgdž 5?r)Pcq4N()BJh3!0M0C[(n \26Fm7c='xGZ`P(J\X5$7Jk6ʳ!HRJvxI&kI!׹;oD2TJiT6GWQ9ww^ױ %a۰ pxc<'Ȱ-VZnzIԍ|׷&=QIP:|~$BT}yrbKݾN/FZ7lʟ dCi4iw iԔZ*td.ۨuDܛ>n!O1_&K1(8@Ar 2'HF!sTPCmܕUV81|Ӏ}3-}3JaRxnJz PGqof&]8>8W#`hc}n+sꢻw?ֺ5㔊{P@[-jypz c T@Ӈ,C]YjzU X`{J"FvBN9(+6F{#&l ~ǥ`~/b(rSPslTrx !gy,];xȣPZ6X$Fڲ;4~ 18j]r< 4HƝYJBu*t<QBgx[ӐY7e ZD|G~X1b'Οk&j .$ӕ:+}EoϰH62XPnT4rI")7%_ۄl XT\T@fm\}W@ҹZJ T!"7iK G!U5HT7]ס̷s*=%3(|kI8rˋ, 9U3$P"X@Z UUjkBN_kA!~3g.YK%bYel+iggV6b SwglآxCE kMBXTinޛEhx(,,-5 q˪qUe>gN\]^8TQtɼ|JVf~ ~8|g{,+l!Ʊ+Dt)AcR{đMIEJJ"I7tp/҃Ķ #C$WX +{G0ơZQW78CK3r^X5̙nh_'B ;xˡSétmDRe3I(3[:0#07I"`m5fF"lT'U䄇xKloqE"?&Q3\) V4sHJQ$5ٺo2(~`?=<]T\!}(fl P6?AMܩ ?HDqFMb;j-hx:L7ݴo# Fy\ds?V*2h lZ1O*ff۲({Rdpb2{wqT oX*/QJ2v'}N.1 pޗғnMb`fPZߌH@^nlGyuX\C #^0 EzvnIZN[!̵!(.KBVyt=q}/%<.Bh;RdBz# #ns͈.Ub7dI}O0 ,|e[Cx&V4!.6PMLǝX^ӂ-U?@*/*_D:l w,1sbK8@eHJSc0$!_e=ҍ#͙PK\!Ch2{GmYK/gi4P; 1/["sGMcW"}ˌ >Sz K1WADPkcah-qt4i̳H@NG.l9q# Y!`݂J >ҍ ( Ca9 ] SWA !ߎ ِ xITVZlʜ@vbuBsnۏu.C~ǐx 'h<ۅ*o*6 b7^ EE JiA’f9!Pi!s"~ARN`.)EN@Jc>X yjC0K[:45&n;ڇ 2IUw HDr?^_7P59aדQv!$A˥MChr&HߏIYN xMOH^A_C_Фe?E6gvwعt@ń ~c6ɤ6 d_ ͔i d~6 GYRZ$#ѥ"><'Q5Dni*U/YX5].bOΟ}6015NIh2$@Wz&@?ր'V:voĵw_:܄8#VT\=M/w"D֫Ys9f6 /ߍY\ug3D`QrALnж3VH!3&N,ЫjW6ۂegJ5L%G~\ ~ۀHtYV;޲`L氇L.sGC=O6Pq qͯ3H"󑧝+2uM ćՒ dK8ʗ4L5T[K\Cpl Yzi%aH8mc-x?i&)vpgOBzf&i.sJŠ ,(^^t!u'ȫtZɠLsA% c.AQŇ(}ȧz짎ʓ4C)P0Y\@!}"_y dwmHrIgF yNp%r J-kv P{ۇ.d[ dE] >;mT(^x!/TJ8 Gܜx3Ck Ͳb27 Qre*kdXSTH޸! Ipo1:f}n|ݘ9OwDGhyg OD7U Q&„a?e~FWzѳX$@` (vQ]`TtTTb[@ˆ)NP4-_|ͼo& aIŦlFHsj$nMh(ǐFpA-dcB8`;K Hq]%@X%]bW K .KSYR/QY|NߏT $Dqվ*TA8%Z< oGKІQYp)0C^3̬TO"({{ rh\}~.LMat-%XJgn==U_`d|隻\G#: AQOp!M' , 8K^lT?skܵc"\=UXTcW0(K*g@[^(M*lL CO}U Nʡ{zSk ZE6$zfekp9Yxg1 \>ɓb|!]y"LQPClo5{=Ow*# 7I]^bOc2پ D5ʟa%sånG;7rehIA=ۊC5e,IiO<^@kN @E&Xxk>ĹxxF{:`.-.doFz<һFƠ^wOkMG|dשph_(=~f¹E,t1÷АΐaA-%'=g NY:_Q+qإEoDJs,]P.RꙔ+ C`6YP\PcPai<'!]ta9z &L&H]ug+C$䜮-wܰ덢fXVލSu΅i SeWՓ>_my$Ӳ~W9 l!xF obԶ9X{ ]h ;7XyzH$0M#"px~!CytTCfa<ɴx:&N膳%'HTjiTwAE"EaK1J3uh(M:6ڑra± 5Q+R2ƴ7hefҤ>˿v$gw 3C[ԅO[z bX[8`;!O\s5[izE6sTy*DteY) Yle|`RY/Z!]#=)ݱ+ 82b?h׫`d֬H޶^v;ĪHXy#%rV!p>/S9g-NVM \)?Tf7U*O -wfG9wB#޲;/Y U\\$IǼkTr\KxXp㘍8"@F6 y'wqgЅ` 敽 31`ˋڒ(=^^E9j|bR#AE @ :u+ dnv2JV/Hه sE%Fb@=k&R8 [pn)|pXxħ{!yjX| 2ܣtM H4,ğ] .Pm]!KWro>XA&Y<4tZ㼭~w3+>ĩbZod=߿ZGC Q6߷׫#z S% FynYbXI  '{_ɴrmtBOkk2n`s>OP/jkϽשJ*4Zg= "^͞S(ş̮j]&^8maCJr_pP~Fx@])G7e8y뻷zWc ۲SV -hoyoP+ `B(aQrHt%終ir'h4wG@SBP3sYHrƿ|:35gs~ɨl3y&pԜctiw(dy %Fk]4 ;1OڿZ؊ ")qvELr)Xcs$KARMM ">{_ZgNk:['"[J/sڣ7#E"pK$Fʵh7'fmsrS$#7t I_$S<dpPClLKB ]0ϔE|ɖWq{ <.bn|M-tnLn4u9%T/5e"%uSM:$tz6 \Loỵ=mxpc7㗇wf=s~ d{<|-[ң KMtW9x)Lf"P= Lt "v,r/šd}N[ysW;3K:{8z$꼩c瑀C}ɍB%APabSJ|e O@PU޻Ŧ4R;#%xς˛&l{;r@%M`D{|r&,΃ŋ}7:BDrWd]1ݶ0#^"%ڧ~`P | ZxW9NQ=ף&D9߅5f)K{\w$l25n.s@QoiV3~3Nq+'?Btg;0譡Z/HsZӝk4ttieM# 內zBUQ\vSJ,N}B}lI>}]avfv2BƿcyqOP6 W,%e/k|jB'l/|e򴓛jj=AElZl tR2`+R08M\_n fU< ir=cp hzQڢWTV+N12-6Rĉ૷aӝ I}F(|'A̽)z( c ^o>N'J7eER?yy۞.Mk !7;h[}ޝ5U5~i3 (fF<$Xk0-Y$w mK!HY:Y;UIG҈Vza,o)y>9j?1z{Lnsw!!'3uґP=1Ϋ9?1ȳH^/nGJ%ؾCݳYl} {ԷpqO" ~-C4x|t45R%NI %7%yu+n(m< "6h%0cqXNk^P7WDr6J"Tl:bVCzVos`pbMf@k恸r%r#,| py\"ZQKPZ"b_ݜY|)zw] 2 u2;VEc9d6OT;:/p["ZR \:w(^lg7}g4‹۠@̝"R5LO>Z~s_V4?e4c Tik UO<}4q9Lopk4CՌxLO2Y0޸2r'*M;GrY 9dEa V ,J;}˃JƙE42>&Jt1'/[!"œB%~ /&]A ؾ?QNd09Cfþ@Ȭ97UPɅ]= x+zա_anUٖ60ڣC 00H7( vP{mvv9%UNn CzQohqZD٘-MjI@&=粶OGn^^b5bL00FW,׷a\/+;TOcS'~8Lf8N4v0yMAp1w p OW1\U6c>"GJ6$=pKlj/cnzBRT`>/#ݼ֨9#Wc`@ >AM$&+jt6re!$˨iěg50QuOU޳|{ ?s7Y#ƘTcuF"#/O|$V|rf޹TRsX_DSYa^n4p푐a%|[Fu6a:<*x}y`c5 MofBI;ζ])I>c/ )'Lrf+(tvJNqgKN΂җi ~~=g3]/pm;j,Gjna25GXQ%f$焋C)xakdOfBB_gUnɯ@W|2 ͟aМ#ve|XBݫ$ܡ7*CM-p!ξuK#%9wXٜjg|Pa8I6;l#}che2[5YxUk{[Yq'5K 9^kl-5w zjImMqN5,=FW$mXP2i't W=LK =5AJ{P$4'?=W^1o18J<_F3ZwaD}E&$(UO<\S2kϤ ϼ1t}JM1ݣfWDkhmp?@*+AII]%m {x.@!9\uFٙa7|Ԍ7&-W3 W\.#PHtc>=iTbFz6k:ֿqqqG\`h&i%q`30 ~7'V/]N ARQ &65ʊ9tv"Pѻ\'-vgJéa2s-6K/myVmq@A΀g":dbҟvW!*ULM9Y駍Hp11#3CId @SGP^.8Ot듫wkWN<#H6UGV?[SV7-޺)0jj9/˶ed%VEyW4M>- FNwX|{arwh増?[r2`(ȼȁ#a6 ?M`j oϢokfݕΓ;c *gq')~iZrߝdNK`g{9S[f?mTL~ܵG !r hdN JMzKXt5zM9͘d/ji@5qEw_"}hRSߕd&( ֶq ]'9XsSM7%E@l /e'Yo qE)uilתYH=&"#d_-$L[s% yNҵ5_/ѕ퇴ΕqܥN+px zLI$@dk'vpb<2^ Rqa#|a.]6[m9^3ǣ̫TIڻGދy5%f/"msPZt$x?)<1p˻)*xBeACP=ZXrj'eykP0]&hGUoJQii75Vi+UGsa]) 5/NL~ -IS@iw:pi>NRÖK' ӀlG=Ybix-UNOj]#>l1xՌ{sM֟s,URɻT]>V \xt9 Z6E-x~{p8@`=2I[Jm\M2T pʼnLpGu#7MCh羽wѝ%\]|yNy#_V{+'")wۇ„ U83]@*|k}]>P` '1]! 8\?ϭ ̒?*a4uѯO:WSC&rxTb&:GAR?¼$regԘ%-vY{e_z;nO=ryUg!Ev2ɜ{ߞ?<w꿩{v/nN޿)ObR6`Kx58Q&3qpEQm[ 4úOrkiC-mud$#8]D2R0–0 llxlw"h tclUi&8Sb\4vc"|$@9b8EѢn0EBȓڋȰJuT*tq6, >sJ#=G dhp\0"Z;͠\󭜱ߡlWѢh=V(X/Ƶ*25lx>iPLܥBx}Q ]\oH‘&]JC -)Tw >csjlc_)n$nޕk;\r+mDfzsSq}K= Y)1ukϚQ nl ؼ(F{'e[:OOhw 37_~CY#H|%Lp͓}}e_ZsP#}sԼk+g<+BѸ;4<)G%{UPgIYXuI]2 T^vj`,^d$Uh#15V*ú\Y0]Q3WΎTd> ?pTRW (~v :U(pͫjUoǯe$vR֪UoyD#pc4BZt *T7OIJ6i^aQ|@"nC ҷQei/1*r&̲z1nظ7y2FZaoFŨlx}e &e&QH!Uոt#S3޹.VVg`QKMσ:Uс2^VrݔH~jXI 5 dػ%ߙG㰇uIGDjW# ڦ_7ǘdZڒ(ybkz֭%j 7ALYe-RQ{,sOF Ce|Ĩ2"φK[y"",Dƈo|.8^(u:Q^hoӲŽyjT%sbJ!.tl:Wy I;Hx7LHֶV΢+P%l/Sf%"ϏmŘbR`^è+hC*?k Lj)]U99 .ci -rM&vRF@iB ?—*s+@7M` 㫟ϣq`6'd(hn g?X\g-DwݘY\W"Sh_=P6rj/~vFPwnp٪rF싾w +8&+HTM8k3YTɯkY?yj!ˈ xjgڵ)ׄX[``% я{I}*'cWmL9RrR{XX2ٌ$'!Ѓ6;.d@(; :PBk8z?Ha03~F`ZG.7ʻWOO%YRn vH uw_i=ƞkyxnGփ:ba`E3nIq +dp&N9LLʧXD o|tgl%z ڊYf:TO;o[팧ǫ4 Q%mq@Tw> "y>G>k9 #H JǬ/OFƢmb x[MczpOlهcSݕfb_A]?_.ۖsoiF&׋sܹ$o ۝ HAaFqir K@v^{kn G#&tZO1"./2]f">C5w"g;71 KlK4ʕ;kʹz{DBW~|1<ܞkNU)Ly"--^"+0|#.k}PuYN l{(N>>؅T]c:aoDu| q4őن)bW׉H&\Ir+l [R52y?+0Jyoo Ra#ԣT6{r [ց,x 3/ɰЧ.-<&6Cn h|pR;P~d5{HQڄ.vDv~3"Nss^wg剎tK`/G}ީDNn`M)g^ :Cn3D:F&kpƵ-%tkd7=e% _ͭmx?[@n aUO3I}B/UWWfmßxkVmV5>335cd0GRDb7=5]8{*)tao!$o="Mw9;R VxG@?#'n-:2p *j̕ZX7Ʒ[G>7{`= ;ƮHZ@>bFU1; /ƿ0^HMe}lF~c`JFa/CE *XO w"_edep/z9o G'tcG$3MlFk<ԤkafO)Yzό @M |-cѩucGN,_4fͣEo`_{\M0N6MF)uuvz7d-ChK1ױvsFh3k& Q뺦a;yUM sz'Ӫ43N+o@I/)\q_ El0V6gQ ?-Q Y4j h#;r,QףP{3n犐,%ؾ'6ˊ^:;q"Jkش2{&4T<ĤdYx?PNa$qqJ\"7[5hͿ`;LZ*͂96z]h>s'Ni&v|xptAE3}k.z[*v LMqMH d* s(ZDyj r2l_˿ΦC(@AS'" w޼2\WF2>b@{{,7UtYs=bw]z#q/E1_E{3[Q ${8qpi"ca y0!"5|nqGz ZW#@>B + FW ޭ""Q@qaYC$ [JXN:qoC&sFô%TBsM_$M'9x>G d >ȗ3q<'v#IK2zvyP2&Atī{D ɼWʈ"!6Jte `N@=,`/HO%WjڕXOey vrۘkGb\+mw?BI 5j]V; H'mF}rv1~)%dZ]wl壔/KΠqdWH<sRZLuH(DW㧳{ :Qn,bwgh~c{CJ&`1N5d+FeӢsL UH-iI6[4QаۉF0*Nڞs\nH*k5ccH0>7w: 5q*7J7b,*'xaw=f :WΎUѵ6! 7oѷq'e15)'EF[6x&m%i(9ɉ"mȏ~bp,-+ey8~f[a2 @n\F^EqJ8'Cńm/ :tCBҶO|rb>:+[>r=LXTCa]!F w-WaQdiO%-&*4,׹{V`Z퇸)]&/*yj q~n^eL%b5lyeQT!(hG$W{^4*U!.nq } > 6<[wNk;6ԓ$~ӵ2YaduV1}e]#+GJMkGđ'xMvz-m+Nwdc:@D-L¬Qʻ{R ?ۏ:?H^m#奔DkPޖ؉G/@z!Cqܜ~J2tMP.Ci ܉\pv2sDV3hS5hF@ 3f7rY3VJ@Noru}nX*fNa7r?Mɷ DqF?9ؽ:ˊ AP78J}_};Y@IjOO6˜J6՗sq9@d_Ma$F8ErLa7Ÿ׉`&*(%$>7F S4 F03;n6=4t `+nŗADMC&Tok,+_,ӢSYҬf=ꨖ(2%;Qk3_'a8eR;oKS78e/ 0Sƽ;4"$&`IvnWD^{p带a K"k06𯽳Me+84(+V/: ol {7o u^ qłËX^lQ76:>bQ =5C4by- yhjhB(<; # mUΛnpumdaړ1+cGC - Z% DūHBb]rpnU翢qZzo 9 ׬T1jP2!j(GfVezHMDygub|îa [5 Σ7O>QTh$KԬiIE#nX.E^Y@f/{qrQbyD ֫6St>'SYڕ,;otGI֞{b׀gl V5&F|/o3jt&~7ҁ^$KurRɊ׀4ahT4/kBK/B/R@wˡ:Kb|ĵW]6E#t;I %)s7Jx?PQ9٪h =6y?yTP WLYZҵ="j{jϿ56K}<=S˹{F>VrخEn4+B9EIUJ š`}b0 78rKHȠ--bk7_0F|ms2hf$JTGCxIqr8^ Q( *h߭o[/Dg4aadMбɰ]XԂ2?Q^k|]UrU)!rG "Nv*hhm}:q*!|LdMǚ,Y*-m3dRҒ&\">,6PjZ O3 .? EZDڰXiuD%uk:t"u6%5!SNq-=-.t 0wkR >D?,{iO=:",X0' R;1ytp _H3J,k#4j\XmG7 } !,˘D6~QΩPI ~Iw>v:Y߶8ͷ*T8aĕHPM9+ tkkmU>,5S02Rg(zGKƉ s0zA Nf=_ckv!f3xv& yf; o?abAsIӚh(٢p0HQqYhj$\$ S\ 6ˑVW?UOʓv1ym5*1 TR-vt 6-گ`U="f;9$l񦃁j a9^S8;-o11rTz'xAg_"&a7:q<u 򳱑H4s'8'2T-;ܵtuy%Pēbd&R?6xwʋKPyIASxuRI^Dyd;0e+X|+J80vXxAQ:p,"(~.V9a ct)"{'\y=^E",!p8q8% cNBJRY2wy'hjюnY_1Fl+ʵM/`ڄ` }T֏)Xpn.Lc5_T_Rt?e- !ޕ#2wh $=;>.\g+Hi C3r]<ĥ-܁}UlT@Oh(Q,6lW0ORᢋ;^D᧥}B$s[2ĎT-gCoMNvl,!$Km!sི]6L(CyZ˜>Vߑ'џ|1H0)?dZDq@F,_$׫jJD\̥?tX╾ qȝXIxq?rIu٨ X>;<'(}nO[R6eR n^y(sZu6[A3ۗޠ V["-D Yo9o CU5ă*'JƂl+znF7|Pfc&O Q3w <F,Tץ֧gtS(7Bg煒k4 MER)Bhҁ(8L 莴NIiX!l!zg"6dNSX:ŶwVMS _β޻=y#p Gwr$3 $*rK=8HY^tgJ8K[sM_ȜzÊ XU;|9togӘ ah? 5&iƦ5ҙ+!U>y7U_{)*A<ŷc {!= &0I+~]L2+T:l4~2j=qdUZ[ʇ~ttėHu=Q_Y\DžǏfywrǷ9X1QqK)c^st`ԱM' S$A,`V/V%n.A(m&mJԾפyfxoHr{u8#fqԁH{ŝUf#M+?ALM'BC%E&ϠҊ-AZ[Εܹ:í6Cd9A_^%h/@G\M;C$+"t-, ZL8NrL ULv4jQ-BNLmqR tg׺)Ilh"&Cb9Y@pzK#ll(?4׻siRd \A2gq\.'X~AT{ Dccgnf* 3q'A""t5 R\O\o?ˍ370a1SFi..sp_KnV$~~F4;aBqؕAT#sy=]E8oKz@&ZFsE]B[']2e9|3 TXVIoݸ1GF߸:?D 5L̾lr0!P+pNc4b'cEv0x=wߔ,P '7ӽBHfK :}=pnp%hZ$s`%w\k}6uCLmG~K䚃{-6.F _h\ԿnK" ,T1 ^~#l hbԒV7~2w8?R"/ 2NƜMe%¤$~h. r 2`/K*<c|M XcPkjJxGK]V"pdNHk[6^~*W[?;wx5Xt{u: no)7Ki d!齫>V@hZgK<N=e} H.j#`'0hV1V@Z˪kV]2 pk z+։+ \X#4>7O[ Ŏ#?=7W+;7q ?l)x`TT?.ޤ!`$L=b1/Fiڭ&n?3b2s#j\lDGʛڝDZmw,IHhF>=`pF]_O]:8tK )yo96Ra}X{Nw[CtӤ+ϻY/D X RCy1_ey$a`ipAO!l yq(qmPl).P,,4h0[x`7"9@f" ­n6VV_;~b,MSd=G|wl%F\YDz3^"K}1N zƗEƟגq mDI"vkT<.' 4&FrmdV F2h~%5B@{VEIo>uExȎ:jaz l4<~ύ+l@T =""m)ULe+9n_MX:aQE>JbN )Y+@M56co^>|+̞rfԦ<9FATÒaʚK"ŜH?QN9>zCu_o[KD袪@R/Z:Pg* ] u: 2tuTqtrw,i)dr^4ᡒ%eiNY+nc أΕ/ '\wkÎg7ȃ0eRl-~6 K2+Q-uEŅuTy Vy ɚ¾J>$m~ǹS7 .:h#b1oj-J`LGbcs3R(3?3|$m;zI`&sEhl<D:sc<}#(ZWçB9*Hʒ@=CaH^n>Iʊ律V?@yNtUAnjozVo$5R$Ƭ}ee7 1 6W̲ Rr5V?ѧAT5lQSƧ)- ;cN2*a>É̀C3&䭱 L%FͣY4e)fkMXսxl"vmmo˶6v>9,rېߣihO5: m`bsF)i~r0Ő\xㄣC?Ţ̉S_%bDzVQkA)3h|'E;Km%4'| ^^vD/s5r$q9Π-pl _t}Y+D~RbNӃ C)5J=΁h%dn@lMkF;#\֞Ы%En"LV)KGz_3 ~'_^k1,1e[E,~1}f}.)dqs`)V"ATČyaQ "m ρt$C*L;3ܤcqo}'N.vօ!~{1jP&Y0n&,w)dɏסAuQAǟDqmc xhqIgC3O4.Dc9$%W?=fq;֜CDHP OOyAD J~륪h} Rt,)ó nϩ %Co&Qчrim:"SZpMݮ l{Y ^^To :=ݣh=s6 p]' ZtHČ[U_YH)qDYX?f,7[ߝA8 Q~EqTwVseIWMP};0ڂCr@m9yB7ETvxeCݥa n/6ݵSxbxbM4IY 2ɿ"aB<4 PȡkqrH8D, O Uf\EZh~_xM'cAY/tH15T.w4"GGu\M+0ᓂō0l.*xF0Ip6 &X8lGm^<2vuq 9H楥uĭ=SZ%1ܽdxtH@c rt$HVxO) {s&,31X0KifcaL}r|3PfgW܅-Q_*'÷|w@Y nS:G _ѰCH`Da#m =+nHG9 fp dt# WQ"SHrc9ă~+\-,%KR,k|IDSF.'wk CN<g2NÝnW[$]UŲ}e⸈dV5^ΆT<9bU=)^b:`,EW(9NAs6n&AȨǼlkX0Q,]8|8%sfH5ϼg*0ǔ42.nIBƋ5N}ۋTItHv$~[2HhDLse_ `|5`>gߧLgU$_.JX\~3CAO+.ES(mzIw{z_jvAŷɑW(AtƍgQQ+[k˿}E2_^jͤe!& U FJ6tEKgpԷJGY#:Am%_m?`Ӏ͔^o>)a--a< PRb aJ˟2h)[ad| X괔mǷyij:#]:9Q,hw07́t |LCK6~}%*[ W3S0_-2`.ZG ]*y>!k;'0Q}[d<%:м?{ep@:rS &RNNü-Im 6}Tynj:HHiCh~P~٤Hqh`i]R Z-DֱM\䅪=N>2%/)&. ƋO"Wy6k:KLuFx\dž G%[^>+@qY텎Nd:eV,P8εX9|\ e6\GFvϕFA!;[B<]pR~(R-nb o^ `o8o77/D*i ǐ'Jg[ז5ua}xmV8p7OW!Mմ2tnMbW]|%xsۅ{T}5փz)/'I5w= 0dx?X18_=a*/%׿a@[E,q67GpXeėĻb֍G˫漲czN(BCm{!#7>Sh7UŌ#e_ϽRk2iFI,̶bjCh!~NΥEB'o .ӊȩae" R?ݯ Vd1wX|q| Qug5ٍg: #t x7O5W5Wny E69[d"IM2IIL=f|ʤo` H>;&.͕/,|spxO!UG>7lD l R{ (uH gK Vx'bp__N-oHL>[4Z>tI 8 &Rq.`IRxFuLY/b&xfr5 foV_JE݉:G2x"/^ ng[J/[rY4  OО,2sTHlSgP ΑL*n9I&+dXڪZu8] ,CaΨ4!_U$I9+aZM`[#Sai@7nLc|sf-&Xrt-0icPԒ35F<}G-4^GGyoYT$%ahtD7X8ӮO|udɍ&LR3C(i'N?_W{Ef6c.H>m%K`AE縼UIGq$OU*TF|ڞ-e R6C'ޔ.r$O<'H?er> 8<]d}lEUX,zJg|enb77{.1/I둃W-M k56bPb$_,D5Qߓw~6;Z`([=vE:HZ]i65{vWZNA%~_.ʢq-01b`=O) Ǡ}AN_mI &#_SsL4*1{jm6U05z F[x1Ԧ61!dֱTr$-6w5ڨ]O1 =H !Nn$P浐ڡE "ڲ-3J 5%~J]&2:}!e!VE  6KLnz)P& `Fd=[%fbg%||S^;̙mz}vSr I(DHѨ•N]|<-0Y`,Iq&bSVUȒϏɪ פUZ%\Q~D^QDdKasZiE# 7|?Ci͛lj(K"Y<|ƙAj' 'dji7dث&:55g֮2Ksܧ/mwף|$Dx=ovKߗz59\9"T m߂+L+> p LJTߐ|WZcL? SH^]Uh:?2f|cޛ䥘Y3ĮNy{:xŷr/ю wMJKٶldkT&\_}w ۭ)5h]3 [P7)+2;60%MSVrAvL !-#(gu%}a $i|?MT؂ e7cQf]TP|fuۉ",H#j&Ok^\8ԮQ5E/F'LzG;?Xh .ܭ/X<8u f3 Z2o'kr@oQXU*. '?;ƃƆCE9bu8HOŽx'b4VԼ_IOq=qy(J%,Ppi|ԭn>0GE&ݩ8i6^:+[,P'L~Kٟ{'goϔ2#@5ϱ= @d&?Qʢʑ.pC] l[CL8q  $x0pMхn41c VSdu]l-f5I:^j\S笓-|J$_' J%>f˚gP8ƈ^U&`GًAToPvV|Y*N-E~*Ї\Yzj}w@s XϊW]2@Aa}~Jٳ`9sJG[a'o*:6&SY;xj/e5lLvbâU:YiEr0|P$ Yo 95|4NbC| y)0dJw !LID~@!j 67&\=>4\9P(gEvReq]dnQ︀K`@&P1JVXkQ=s8xWYQ3F/x_׽]*zk2X ~=kKDzD!FMvY0GM¹f9#[}[)G*Ud:~}Uqܬg NT?项'||NBketU~ &)2/^&Z j*3+)lR֏tD&`(}nAKtG'y8jYl!xueUgm b^į[u+!fכIRu1{Vljh%!'i>cz&.pn*Z:\Đ]]fX3ץ!G;^;?YSO]9(ȼT뚗,uWVzΨWtJD;Ѣ#q,)9XSmNHH.a V誯48.s =#\oY-sဉuBJ4HۅNcgK}_d#16 @o|Ʉvpx<6̃oM=5}-:-O?ɣnW RG9!>>.KˌXtvj!D5Dcjl5ohzKg.-(F76\1;MAxtCQ_"Ris֕d=a_gΎs7A3fG~pxуTBo|9~nbW}㥯/Oxe(Swp폏Hy(sZ6 $y{1nIJQc,+l*9ʫ1xәW/XIْ4V KCPY/8:JK˩Yـiӿ@~gFk:DXm&ick$kA[v{rg6aE,`PUȢer>b +|6ӪNVFտ)%<(.WWb!^& 7ԃ@>ET;&jkhOs(Ųa򼱚%+ǝ[! tCp^,ɨ"r|Nb{A<ڣ)&$W @vMi|k@ lS*K9951E3AI0V :@&=tH? ok= k;ް\O'I.s27=M g]kT-#Գfm\7W3㺪@@b[F}m^x_Q)χjKR%Z=ȟ\I3Hzt6?gGN=`4' d07luKDA=3uO`4Fqczs X* Gp&((^? u|oughQ(,WQa/ Ɂgx v A~{Jg❾dD1>KTvNDM>hO975="5Z=o*^UsͦH'JptTG+%P\P@PS9CX$%8~jfgb޴QG0vS-dH6 amTou1pp F8hgR(TWk>@Dv{7T {%͙Fdşs1v9 NiQn˗o,ՇoQ]9zΨH%Bc z^)B1 ⣻'.Bq2?yܜSSeӜg4$bzH9А5f 'V8=%*.ܟuFqL; }Z!(jEh8G} .j S#w0OEYBZ$ACO+})M__G|/&n3,A q]s^3-)(xv1u2oL**9T#rԅjxhz82Tf8:av YXYkqϋ/ᲩwY:tꑯK, ݵ}~3RC êPh1tdߖTUM RA:ֹ-  99%.!Okzqa #@@@%ZЙd'{WelvtVQdAL[#> F)吲tMY8RDZrdwT֌Zk.=wX}d "XeSG2 ȷ@?斄<פ(וc=3$ciDc58hvqIל=1Iݨ&wUbMuPrOw.#T)cjWꋐ}R5!d"EdYM_sZ\ AhjXk03@CtQ|8.ߵ7+rf>tr\"a2A FE#=^b+Fc{!Vce< mxxP-)3^E1IF TkG.ϰ7!Ѵ$otXFvפzs *B`@\Goǚp{ual"aZ .'G˖73-LRg8~ `%I fZ ١Ag/Ej#Qf=,OU_aՆQȪCߪm}_k8b-d6trH;lj "Ea '#*V)慯7mL ͛OŌ\@ꦭ`w(zDD#٬*l8ҘcW҈E8LG} ~)=%ẽ­Bo ێSeh#(~+*`nI^ a:{ H%fE}*Rn1?ltܛci;F#B4O dC'm~Z6,"޶B ̘[= vd?"O2dvM9H&P;üVWݳL_NՈ0+tXrX6EoFX՜Z8@+?yzا X$66+RsuӜZ}v2 Q -[?>9~w~FtC㟭6>^?ȉkQ5/qH ~WyV]nG.%Z-y^62V]bhO0᦭3w]%[ժ'Y'IEn*{9j,P'nQ6> j[oM4 JN&W1M Tj[17|dLrs:HY;a;>agBLO~ &iE=eJ1 M53v.DQ2IWg.鍤@LC)pNd.CVX1[f8毯;KhWaMe'l\M@Tn9EmxUԌI Br="juR kqҔ-$|VRLX_L\#;\>,1_>S) bdOA)ɭj$qqqq*qms)08T56LT|P*i_kiWFS[Paüū(wVAAro%t)@-GP!ҩ|Úf*)f@iE5rHfDC!b'ԨA )]m}մ-Q}?З;5J!G,b9+K̩Sfn/Fh=:%TƤHV[{?AFBՓیlX|X.DlHNl`ӟg;^ АY8C/->{Fx_.AGxEP 7/xneRڧ3fnlB) EMڅhdcrt'+c4KZĴ 4zBxH!Uubvj_( Yb|&s +,+[O$"{p J=m'Ƚכ}NDB5!Qv[.='xA6uJDI14q-CXc!$!Pđ~`8٩ցeY&ac{qP22xƺO[M?ZaapC{Y\gK%UË\R`8*[s =E0d="mf`Yo&YAT, %vўly ePxc~fZɏ鮱ҝBY_An&hRl4o~[yn1X[f![z Ks=YmKo(Կ z#Fݐl?ں$K[5ǦGAqz BW6Wa-"S+a1Qq2@n>~v&}8Sl v}av_tG^_f|Щ/?g1.7PMԬd! 런P'[қ0PۃrK#-2" 4F4" Dm@=^c#9݁e(*6= 4bwlÅ[7Q^dVO#|v z/w2!~=k R3 V/gCv NJɋfM*ǰ@-Fx}ǖ Վqd0`FYy?k=i',2P;{(`mp[-{mD: i]l>oRS#@ovъbKc? Xp/]>P+iI̞Xb #]๎rd1J t`/hСB,2594 -li,Izku}f?9\bP^RT"F5lV+Co֊L[N6sGg Ye"_EgttA[k̅4&KF{{Ѕ4+KQp_nAqZK6{$뇝~P9 |Y7e#.nL(b`&fiU8Y  a@ ZnE`ۯt?` d\񘲚}r p;d4@ip-O߸wb Cl.LfN7 ɋs,J\WJ|!M|(la HSCEKŎ  imOuF(𡖰s5ؔlj7~w(]^gB7TpTTLٳ7X<דhP(XU 5R7fNZ\N`9vBҼ**9>gssA` J'x_, @%":O~QI\n > A`T0bp" zn˝P9bK(0#lt,M5T3 iݧǚLP(1~)k7hE싦%G:I!]՟= ~d4?pmڛF:\[6o2Ρ#_hd[/ "PK'Km2jI/6Qyo8xMnʤn`<oΧDfW3J#HiUckfbgƟ#@aɜ*f?\mUHiء7<%1i~[OrIN )PuodaSoVg}Uiu5 ,]iE6=+> 2V|_HsY$N[WXKcĀpSiYvX9B9"힖%^LÀ] *[яm5$}I 7P4?W^Lv'(c֧ϋ5uceݚ~eɊ4)ovFzƎ26("JUz3 }U-/Ľ 6eG*aI `7S|{@0ȿp~Nl٣OhWXg*my:UZ{zhm "eI 9hἕ>9jܑ6BB{V{( W~Ę"݈yBPomf9v g$Q\P?xȃ%VrQq-QRvkɞyg30 ס& C9"eKfj:*WRK>Q:iazz|;GhLmXo}(==AtTo4~iB`x~PWQhhjvEq)C (-qL="&Hpv|{RHWW{#5Dko;մ>EײgLvDPA`dq\&8 l Qnt=5PQ!bAdR#mjڳ[߇S.@`3åjMMWչX'4{k r}$I-Cɲ} ~}=kDXϔ.-&(vn9nO;9<@~gJoB)B(pt(L,Ϭ>SeX*BW6Sk_2#~⩎iΏSJȭMv1E&:^VM^Q#!dk}=v: /)st|L~ʀ|n ;c~v 1N”X),| 8 I^M S؟Og݆U|D t]՚7 %w+f,85My$#=mѰTJnθ6}ڋ󅝃Nttg3Awsr(!%FB;&p*6f+nhL5L-9w(oitkGbO'gfkpkֽ n0T1fq| ݨ\X(#qȐ.],>m?] y4S;{&!pޒF/{#9f=0? ʶMZUE8lE^"Meh)ٟw SZ-oDUDv;['? pKrA"2sAfYj+3%"A+j,8UK,udSg5igTmV ~TUۤe39x 5i_c5]=J)svn꧖`n2V({~ُuP8d9a߻j1 B'Wwsj0˩g#CQRkK AL'Y0Ju),| W᪒bc&u׭EnMB‹t;2]m[a z2hQB3H%@d8PL f4kuc* ?MV%.Su:k&vt0U3dke{u.уF#Q#$1:QG{peO!_[:t/fcԨril xX%&ƞLS6&)_fFV$o:qUyx2l+g9SĔ2;2Ezmvg sKbwv?in*P}>K4()q*KxiAFV #Umta\?d?-}Eq1 #yKYY徾"X .4( ,yGM-V0?ld!HG}P +k ѯ fP̩HsK@~ Ŝ_>15 &d2y)7$V֖+Zh{UtA6m]x#9z)w1QI^g$E|O,kr$^;buZGI%Đo]!E}NكG Ve'AL2WAdK$\c^"|yOtˬ-|k늰)]>qS$OuPWzY~5 \p_fcJWԙp<8>ܬxP,RǠwD>GWgM+@@]%~:Թ4Ȃ&jQAz.T~-fmiҚMf&yRW-6eGk5.ܻ@{U"pP+(0.%jT)dسn4bi4i̚^[9/z{pJ e-+#L!ֵ@ r(:>*E6,(cb2lN&C;:)K_낾KNi԰]NPRϫQw`Eϔ{iD%i4>~䑣arwcx xý>@'h-c)8۸7L tdn0:PFGnD}gm>(ֈp48iCETPsI7Zk\@ YH8"FAUkCwS(<>8 Qwl3xFsxBhNTz0!bWVs vlEG +.@A>Stʞƹӵ`_hGYnBQ^JڒǶA GFpa{|@oX 9od= mLq)(KQ7)H8*s -r>UDx)}.{TŪ9OhZe[Q+,AL=W6)}SRxcډf %kKPM6d0.n~,6]( zOҤW}j7Ȁf+A-p_5,#}^zmt P˯x*Gsi~0]2mGg2 Xer0~ 7)@ RN1|%CUr Mۇ]t{96$=>k;E.u}ECk+UR" kv8syR>R7%*#,Py\ʋ˹\p8|ͦ9KtdNjWpJbN^5wgOkU78㘀>i״m"kyJRcT4zeb9׷W9gP h#wӓ%PHRiɼs-TcXatj*%G0y.'Z¼k_0s"KGsG;<f tZz,wI3L9 ' v PGu}$/3w -,~Dе;j[cv@#~X6B opuꚬ RIDb{SSST:nyHMY+8ZDݯ4)F;ZA¥-*\m4k| E 6,=`Ldϔm]A/s>T۬`qL~{ӯ3 R^Y/pVkܠ&f!Jч8>[]3SnҫOS{C7h kEU-YaD:Ј8>D|Ah =%GF=Xg0fɏ i$>:کUfɼR{݌D+Uz60[AwWazժh8.uI79D2eЂȀy(=c+j?.\e6H4ԓ.`+(dip|\%-LccӋm\Vi= ]j!do` tf' o\ׅx$bM(toR*RZ=;X$'3xxQǞq1K+h2}*+x4Gձ@Wyk#'{US֯LpEpHz~?Iث|qq|P-bMtYD ͪ{ib}jHlçdFзPTehv ~ /TsTW22*kpY4%?[ss.gk;>*E]G:}yF`Xl I٪9e~G.[pzgqdϗjTz~0 Yp,@^~?(BAo` o0w b2p2*FNTQi> &BpΐZ(`=ph٭~r2သ5(aUp9 ,at=RL|KTOɰ@58ʤFRZT^©ڸkiV3:{ 7MO\]_eⲰQ=k>&6f_ HQ/ߟNn,.h] !bֻP9갅TN!y^IzPk`@03g,7xNNhmZ;6I/L6ۥ̵ȪLFFY{2*k[jNʎ$MgYZZQ8N,y2ʔ~2̉%=CDü؞6FatWxdL.fG@͘!T'pf{ˆ )K]$x鑠hK24|6-dKqbN&埚m6@ IeՉ&9XJ(S&hro_")Z ֈy㘩pR/e9v6Q@"5:ۼuak?aRqtث-!ULWD?yϫfr ׸hm0tjQDytTBM"Tdcx=mB+cTQ>[gdhʤ@w eئ,@tWսaVI~ yndu7 J qUeY睱[lݛ8×񡭉fM0_&siVk"@Oq>vK~qw ,z\~y+iەqPJώCrœ{v00me&ե`VzBk(5w4O\ xN߾ڣ:*$"gL!}D[u7\*PV w*(U^ȴZE|4&T"4 @UϺKglu`H2O6(LPScy[pX"8aLT,=HiTK}zu\̾t#"l9C~HDKy 8I6Bə x:yŰL94FaJj461bfO3rNUPBpM.NEQMSr7&Hsl<z#Qcw- #X@O*}=N8r*tէs 5F$7oǠԝ k?Cm&i7aeX05+ #6~\qR.TktilmP6 BM>{{BN[1tְSHxU*3@DfgS>jo'/"aB@] SO]TE<wG[:4ӸdXuQ6䡋 mcQlNr,iwU7>rAJ/QPsY+qE~\GJQIF=z^u8y-{A<^#AoYs/*"vIT]yD!,s弼!&sguJ3)Z@TC#d8g_7sSϳsz LyMdPNTqkEe),br`>M6t9[veuH fB+^홿؈ {r CQo{q {$$,'3X"xTP`0kZNjʢ-~Z'azyipȡ7(@=\ńDU9NktGt;Seվ9Y|ȦnY ~jo6fG Se g|f2h}Ji0}*Q 6?cj8󀉚BS[:+7)06/̇utv)5/H0cX oi`Br4kc l⹹4xz>'s FĈP|(hɓ}}*03W bwƄp]6{8Ll,47U"4`ПⰏ7V)LbU}=O;>5}+YK(֦c*ŔsŃI|ѼFs'EN* QɄy>f ?2E۠1p X ) a:U h±Qqvsy3}f֔xw8+D1?a|dH:] [9!*6C4OL=\>Db@CS8&Xx} li}罽zt/Qm=xk1vA2DB+skLЗK3S|~Y/n@=4;(Jr "=' sFe Rv=tBamLzwJ耂2"͓ϻx4raE5}Jw].eu+;:zD)#B*BK R`MfU'M5W@g3ȊLU %D!FAS''2z;!5f5J~웶MjBokaA9]ܻA,X1\>)Мx >Nh9D2tf8FKYu;8DC=vBR/^%dR6GZ+Z ?d))iD/Wt1&UjW>Ba%Q(ۛ!Cjpu'a/6>g.Vu/} wJkڤdh<LYS[KC1lG`Hi# -*&c'PS )| wYh&yXO~ 6 aNeoiQ+[N%]o_ @pa^1Q=',TIf?W/wVp7{Q5Ĥ0j+ y>u{ dFv3J@p$Bsڽci0yn BҼFTM<1HpG' ew;j= IZQ4%zգf*[N=W}Q2 z;+5 i`Q{Ĺ*_q*];N=@/)|\EU =u0}ǎmve[U;Bٟ(Q-7\s8-LFٙLWcYl 4/2h 6 qJ,:ʳ~vtH#ėBX?E8gj4tx3%wb[4RlBMSq1&u:0,5&AS'sVo.n.lۜxP8(\ujzhW_Q,\**b*‘u"0dN ;b%7%ֻ}y:y@6^3n˫I o!WĊbzq#Z+/XM}:@,Du6.0zGo0JiS4,1rtMo$ UdQR tޠxr64KH9lk{O~xl0Lg^1ЙAS?<'δ~->7/%?!%ܡGYp D1'63n3,D3R d<]1+:SB6ͺE#ڱa7e9sSU@\T1/K1ӷ:xW[ U%v~@.T )~m$;oB= 7HbgkZqeC[0rF'BOD!s)ipb IBbAXcε- _=T1*" #QwBUfU7RSyG=LG`5wƚG:U  N9gUecTT=ݹz iDZ^5zj%D t|I:](rv5$E(i+Rq}K}<6:+j  ն1<< :6ԣ+;_{(>O]KbQOfYb7/a&ג=۰L2nқb?;te<] fKh9JsxkX"KX@fAzP^ɐUb_MR6J?2DԨn8ɨ ) UZ:#|-iEP^"os6'xD6*?Nkރ3z,ޖW %p@ @4 yt%?YSud)Z4F5 ~Or H*zH)񔰨$o j` su7赎-:{suȀߪ}YCx?aG_AKV۸:ő)W[/~Q8JSZߴ:ѝᜓ/ ,$"A;|= ZYVؒ+%жsRndc=i#m 5" l<vfx,>ȯgc1ۧP>t-J^q *ŷ>;.+/F4JqdO[{wm<YEx HdM;&Ӝq}յX96+R'f.Dx30,|;fkphqB3Xpn9L[ ,ZfTtuEY'˝ڵGA <>- SBA}4&xPgr~t :d8ytOgř-֞ڣj;RZB87"J:βE-i{xw@ dTS x+Qev^y y{4D,MVRj9ZXX1NoO*E#Uq? qչlx͚*BEQ^ l|`*e~]k$0 +XiEQ=F.Wy*f2Xc=_w0S=+!|sjfs@>p'gu,)냣즳Q}w3Ӕo&<C-P}ЪYq?n فG%m6f7ag$\/*^Ba f[%E DS7R` BP 9@ԓ?Rr#{nW)}l%sSQfG"Nm]>]*@T=s`[>g7$ {JJ5^b'׹V0,<ޤ<R HD}6u٘%Bٙ(ʋ[E1&(x WfNw_/ѡ[~qV_T'Ȫ#px0NM#ROs]<k+7b]2s/d:k%\oH5=D 2/}| 'k_ r12qj<,JZ).OgzNHp %Q'M|n#>It}bj늖v*٤yuLG9rf46Xc:b4FBkviP,' Q o _hCw-׳*h2eyft[LS26CM*@9# f6w(ERwΝGQDuwxt|!0&Kcu5S;Z~mm%f537o8oda0ꛨ'0,*+Fr>pb7z Kn}]Jp;YHWBo m{TB*R?c&j`43ҍ6# OvDHf)<**}QjHX)\Fн޽? ybC'/5FZԞEAP+\cZv2uhZ+泚g5t^qF-_*Fj=gh'0U_a2٤ fJ}i;쌌DOR-F}V28K&8 ԩgJ^";|'«za㖝[mI0^ G_pS[at $?iw<ωjSi,#yGdoWM{ |ml^4kV􂮘. f$-IwyKDq ax>1m'QgᨗR|Z:1&zF&Dpag}&rq6<=n+r ا{w 6+>!,NGP{1dPfC|`hg|'c,~+@,b_.F1Nj@yJsB~)h̒X]#fk $.@_ⶃr|/ %ni3jހYq*dV[=j 1kTi{6HÏ[7uuߚoG`q ]Kn*hb!D%wZyg4_4,h^+}jB򾱓AnVQ1ׇ`EXm@-/P V MiH2eXesm`H8cEM-"y#*>ƽ2\k! ضcBV q⳽L*uR!1,We.Ӡzш3@c,qnQ  nx(4Ɍ ~ly8dBlC19?P ˸ }:Y6PǺQϣ~ZBERD#CqrUAIt6!]>doc6 .#zzh 9^}ǚucEadbU IQי:^c4v52σ5 ܣRԿL8Y+J7Z!n->bUs ]_7 #MD n;N3~Osoi[p3㺡\ߧ6IB rۧ$^700JΣ[ 6^ QDFE g%RY!o^X58MQ 8AM֋m2%9 +Xpr[V<šVH'COɭ ù ۊ21_ڡִ,s1KR?x5i;Bd=G%U3l9fnG#[ʤ-YWQ-8Sof]~:C`k:kڒF&iFstԎ#Ixz?Z"0+gEu-(-g_(FX*QfA/mY{IT"0>!t a`>Tvopl=pT׾v$;2Zs6qf-O'bRkh6UYAR0:[6%]qs?t@ͫ@Z,J̆hvo2PVm䟺( $YOGI"_ѩ̋ %29.R&ߢlX{F "`@Nsv_ܑ4Hs hd՞FDp]Y03t[YUӊjd5ڬ7fTO%V A?ߍz+6^\/ĪB}ܮp,ovfˀJ yZEP`$-@L6\yVQf~*o.65s#."q\W ?!'uJ:,W(_pzntNCC]WJ(FMe\+| b]`W=8$c 5N͘wrw0>xQ.h&7XuK'T2Wxm t|z[?]`BI>!~׶Iz{-{%9^_b }'(IKf-Q7hAߗeC+$K&Q5B\njM{F5cVejSJ.z`@9htD\5jD%TX%PyxS9!PD]9.+mhsEn}B fE a@kެ܋sBHҫIA3gAə ?$,IVsu& C3RAWܢ7 6΀-/>`HU|5$dF0KS[6 ct@|:֟ɣyU Gs PwBj K'1}:=)tg+KgNwUlFw^גⵜs@z|Ot`f[~?>"[uRNh\w)k=2\JdL’ZYMD~sKW%A}ӏC;xy>^o.ުՓE60/E Qjba;қ$ǥg@ . ~?C)js=sglGۊOo~Z=B"i,DR?=[" K! \/G @rîv KSt#sGv 0s)Zx" ۢ!B(wvMPbLT8Ix˨{BarVtUϑen=Й.v6{|}e3@^}DfQ?J3JZFA~؟{Vhe7YdXoĶ"#Q\_YIt9=((+ٿ3 "Z& |^JrHE!@€d"s U, y:=\Eiov`5 N7>]\4́Y-Js u`3 *pC01.ǫ*g3>Gȿw-{:Ta|q^0*uy!5diM61B%\8,'ȫ"b5C eūL6GGϗV6In3SGjW; }%*EeYrvѐoZX@tg C_c uS+LXk?' K+KDW <'̳>6fir`. KϱxReiRj 8Ba"i5h_߰sB*@m#ZXsFJ]&au1>{TsMD4KmV{cL!5@wF7aJg᱀6[g:mO5W(]{ hL.#ArӅNJ4HFxђ5>@7ƯBU @"u~`qn9;BeㄢYX [xN፤]{JLH:ȫj\McCbb)t еdeCDӨjkyqPJ,YE8x;U!3 1uN))0tj!ߊ`Y49`fJ+H wx؛r{]\fXPʜawWܤf18 RYrd%Y=z2P寴H*HܱYVfpK:'|~cVHkMJi-W4n(3^i{z4Af'Fm.&K"FݞsKRGǰdM  ߧr9 ?št],׏?rϽȂ0$@[CpYqƖ!T4]JD۞$#i^ Y["<~fZU=+ntĠE' J(GfWbv׮`QPcV\G;M`rfTAy$U(tvMbK:1>P2l%[ݾ/Ez/H1яi5gpRXGje4=kD҈o|&Eoj6ߘwIV-6^{rW{-zf;%o4&W' д;eӗ(9ha?Pj6Ap J|D 8c0 '4ŃeKZJX UΨjW'Xuv5%"T\WY'#3h9ƥhb]Tq#e(."#]Q`c ֡,"T(2Y,Ir[X1nҮ=< Cx( Ș&1MLq:NgnD)o6x8UA]?S,4qaI LgU"259m|n\Hz{}ڹP!?PWD8ŌjWBVꎵy*G#nӳխP;^c 9:eVX0c@(% H{~Zax`6וMFהGJJ 3BhUl.~^- -IdqN+v%#w3"1L:ihE6e1 qEX"wއg$F<Pzi .QRj&e!-xf86Do<%:Uh3z#ygO$]} RwYNS"lo\ |Dvtaw:u?% ˑe81ȧ|, :K2oIdlj"R.t6ta04שO{ٜOhݱ_5 `I͋)1y X!y kFeVI(cͼI+9㖘v]J[*Ȳ, M/&> sv+6 @3K2Gm<eRPB@K7E3j&%+ˍtfkJ}& hN#A 3',Z@CڋsBW.qRF%'w}f8$CoT|hV+8/"E!";nguԞNz{@Nث_5pHOu8!iR][[ő볙ےY{0CHIFt3w "-XQy}p`d٘6 iXݦOK5Qյ5Vlc 4I~c&[ @ݤ5ݠ]Q>&WS6W-_0[ oidg;g+P0S،֛w_ǗAb:ʼcO5D)I'aWv|< C0IK>قw5ٟ|P NBç *#pKcF\I_QBI2-Q$F|^ 'Qe\bD}\fjTkw_*߅ᔲJIOo_9Tw!(VSckKEa"5w4$aJ/5DrxmG5GJFI>ƽ`Gn$0Da8 Cnj& h,LBڻ"z#3GSp2Ocliԁ)y_njʱ!g`~?'I|½Eqg%.-uոE0lIrU~ֽ[2t-~ RP;~D6 -vوY Po>2TJJahurlFhz4z-yz1N6P[bmF|4c+W>``e?V뤷z-Sn--pG\^NT*ȉ3_Xt,L0혝183,),i%R5&1sVڧsB[e߻`O;vA`f+@"Umaf 5R<pEΈ%yTH'pk.C~^R1 *~u`ҫK Of+nx0:럝Y ;#yt+4tKXywK+~C@GLLl&~1:P҃WCqlYKq;Iz2mHֲ*MCQx.GӬv8X͡_'G8E@du!e3Pjw^ҫSّ:i&N$gL@wziiˏd0 7(`jM2w~+3j+1n<QW,dxpNU!UmrgE&j1y?wE`7(_|>|sJ]K`3Z$/P, \THfmP5͝z ;I<$a˗أJ6rObg GS֘xKkF`OQQN-""vy{٨r'hbevȗ4h7P2mm"j! )%{y@[jn~4I/"?x'P#G=5Sof;/Xq<`k*JkchY+JK[G|qp#i [D @d ]/MyoKsvo)OeHaB%3+R,QVCgAd^Xz> 09}!P8xšYJQrf V\lZ^"#7 h{_9T1)f 4qΕpV3evɰAjLN\oI 2"w#zJ!!j9RmvkGN><_'3Tp[˥bJ?<'D{~t V'wtI@`"_9rlY},me&=۪<+ToFBg|r T>2}pl4W" PiqjJ]PE$ed;=z1/6##HkkfyNiu4&!\B陏 bk^ri /~c ֶ5zn)x+ &Zv/* epw98B߱Gػ+h]ESr} .| \P 1`YUlgxSjbM>k;0ƽaWn?4m!u}wmB.虚Pqپ8iVn|uykۿ3uQWaJnABwӼbv憓.?;X4?Dz7lo2%dEc5$gk ARM2#Nh49OԸ"b5h$dq}>6i(AȈ3f3 ~Uə;xcsNl5@5cVJR7ܖH1]МwnW>"JXܽ%!C>Y^Ux^L|v'w(Cx'bnɾ"WFB .9 1K (FK(qZ1Cc99" b*#aY|:Wi֩?vw5'yKQf"MN׻Z"axQ K7ոhHh#=@6iEQ+&lttβ D \3bh2Yg9UCJf @d' FR-Ϋ8J3<*܋"_bdG3FmNÖ>^_7S"a'k@_.tlMhX7.3P9Ci1Z9벱U&Tt P\UhwC`${ɴ:fCG@(30KelBB* ]tv ՂMKy` Iu:5%nceUٕD֩{sEYWq4.ײv;,iz!rIs"٫uXD (UơBڐpbCޯb1`c}W ^lw7CQl] }"Lh N|ډO+UI;Y #o (;y S( 4rKzYb uPT:VhZ 6+jMϡ2#j%;M{CT[MJ9TBTq‰m~/BlI0un&b6=|Vbێ jmh~8Fe#| nc]c2vZT>4<,񰘑@K#&]9Q&n+HꎣQf+!qzikFs!5qvm}[}l-ziI镟'UcjP}t~%4ÞVYeKW5 3w)VG2WVl R؛p _gnG 7#? &ݳnZz- Ěd.u56 ~!NShׅc(o1V Iuq *Z5+ DZ0:uH  "8*lBS Zi˖W\I\>,ٽP5ur79,eׅN 9MB>L#&O,E0`)yГȡESy1ͱWOH-3>adNxjnrql'9[+*>⼘W&Ï,LW[1|L{! 3ρcݏYP㼁4:sq8QBbE~RxBs`J*jXk1\u..5b)l, d @Z%Swŏ$ @H\F>+n9K&帢egc(tRN ڪ%$=/ZrYyW9μ2}CEfPgUPnL=©ᨰ[g`Qs&j2؇.ҞVt<18U~*9KZdUrcܛKQZvhyh A;xY$ FkR"|ū3é܍ۿ.FU*zn9 *G*몞Ң<:ՅysVVJ*Kk&1PǮ jF֊:i ךy1a65p A):%pvCTmXk7S)$5Pßp8jo%Y ULi"pp$@y_/tu]|fa\;n S_tf41V)ݡIRGHFA]~R&@mQA-ȕT]K\h *H⪈]T(4 Q4QFu1##e!dj;+vS3ɪ<5[]͉K`O|(1q^z5s:Y"6fB8^<} )U3x2n2SlNK nxUj &m75qΜXV0 tp2OZNk$H]mRY n_,`ލn-j>M)P `8U!4 C-j;I薓xpIZ8)Mо#;n@XO1*_nY>ڍ:eEَU@{Y1m UnP47n%UUOJ&1>wqQXl/׭UWlV~8]֋A'Lǰ)d do9iSCmySOi}dim#-ҕWlcD4qaG<=̝?ݎ&($ReOTjl\UBW=Չ򭬙$%`(*֐bN9Z>p-FB?oK{zWCfZ2y[а!؉85P9=rVpA+av v̾7T/,<VpwZs̞?"~ PSzh9"2Y4B%D9f7 }ܨ݆9I(KdGÓLV>ioEvK;2<տ?i Z_]ח(;AbbDY‡sָvUijh뇾9q{}W, J8]uYGVxK `yƆÏCr1#~\rf?ߠ>F(5#=e lYtS1zuyM;sU}qS3]lR&WS8.땏EipKƮS7 &Z56gB9];NB5!Ԩ]x2ṟMq"xJ\f cc'Nja̕9O! .wB/D[٩#kK9*|9J~SbKSFUwLFii9Nɐu{E=~]]ƚ>-tvZBPkÛWT . 0ȑk$Խ.{dNì8O0` TccH'PeA!j1+ˉ(b| _|\/Dn*UbPF+YgΔ[ O"b(bK ;4TjWۛ[ R3Sղ_'}__o}BkE*07p]HR2w;JMQ>z&xPz\M}duswifc1#|]J]`+)IPM*0=W5`k6ޚ&(&䶀%#(|%' r Z5QFo(fxMi92B?W aPqs*&6>o\؝?c鷛 Dk$gVn}2/JZZ 4>>>NMyMweʨs1jqt<"D~똙2t@-?+K>Dr#aP:lUiu W~5Fȿoٜ]KGWi(zDB+4  a}p@ 7>)Tg'|~-A% Ȇ# :{SH'G=Is0<)|Y#,GH8TEw;/F#xEt="hSqL8~_n=똇h]JA>i1 ޗif!2BљV28wDie1C?dh;Mf*9, >_aBRP{Ճ Kd-ƢJ1}pGpςJַ2usCΖ,o{J#ͦBQ枬[d8MxdPVvJ 7` qE)&峃_ Fe__rI'kinu>au]"mϵ{=j {$z+OiRhps3BQ5?tؼڔhb7s*U+xY$c6,?ImUa5h+bo׷V\gnw qX _&ij"̞oŷuW5_w߉43Ҧ"y ^_du✃y,1 'MHe^KЁY sU*D zpt;CxB5EGeL,OT6Q;pŽ|3i뭽RX#քl&qu9$>6>̴WsO|v?G_yA̶qW"D׳>rt)STPa\#0i̱)WBMhPcWBHO%&^5ʢX`@EވXgV{($_/'1yYw,tLzi[1:y7@?\eDPF aw ()w5< `))&zK`4:&JgAB+wJ*Uۂ~gDހ~>؃ԸbɰٴITZH˪˖"4$?YG(S 9=?70MTba3j~zNtK;"[n3RUqI*1l5Bp?uAk's⫂qyU/9Bq쇺qwaz|fK.܁^~)-DG.yS.Q;Ü ^e8Ruƿ0Y,Вr6nھDP -AUQ5^,vB E.K%Pȯ {y'ooiPN@+"DFq-ֿldϾAC-AT8QDH; |k 8E tF$a) 2';̕??(G1f_aؕÿزV33dצJK ># ݔ8~@_yQt2_D]*.,ЎV9qKx{?/{.RJe !l0JPBwp f'8CIc._cYߠ~s/|VYa} R+>HiZH6h8v¹"ɦQp1y,yQ#}W>QQ<NorѴ,ySxg8+&I\H[&ꉪ}{ FZղ ɼE掩f`{,34es4R2{wRi]]^ll=+i%9J$*ѾR:ȟ3٩rR^%Z(iDRkJp#E8m}:3uQ%R/Lp3+;֤DGQwXà!]-lјT;'3Xz 32jt{j!݀6c I#}d>l&K@|X2?*GPd{/r{-̕hԬ66Ը嵤l^qśz)>Gc|8qdA_|y A¡~oRb} ù˝j3\aڹ6)}êCԥITwµo!EP1p 8}׊ǩ6L,0֭,G1,ͥ d5ԛ2q5nt4eSqCb}Rbt 󜉤ta6h<wq%9G5:\>|2Ѡ&pTQ3]ÁnSխP!i ?CymgQR-t9>}ST.1;J ed}!JUH?E$Cw_5ob7ƒOSqΊg+1,$Np:85Z o1pwOV{Dгd/0Ҩ$:'xl3q M"7F`bK*X#5~DJ78w[AcRiػHN9'vK U:Sas<"F?Gp0ܩmf~/]cLm+eb`ch"z inFVq@ZVudC/8nj1#lWK$|~GX ߮yF֙S4 <2܅mec,G5Ÿk u O_}~%I]4"ܡ{‹{kMjc4Ǹ Mz5auZlrVJ28祽4=mi2BQVf [/H6oR -1B^Y\):[ ܣ κ (͜0杋 ]G?ZeδgרJ,. ZmI< [MҳWocEqW tS ZD}ei& Mb6_7g^W2Yb@Tp/S[J!D)*,@5٫e8tAlj?(s+-6>mfzaXTc򼺠+0~c}_?.2{X]u|>?{ km>(zw%7F@Ɋ A :wKa!߅yk숌;ԧIV@];D9'bX'w*7Gn%!SP#D2e:6CMdވEy^y10*JfIѨp!a>{!1&uc?& |,UuQ@Ge!*ys?Au ͑7n9MCʾahgoh (_ؠg}ȌpP=iU5tA Ҷ$?iTvN+*:IB>>;K$ |o>4⾋K$h§.}r[gK f <06W$.{бzy>vJƷÏ[oݨC715o7s$}U=7 WOp'Gb};cJ"]sQH2"n JG~2Zڌ'(OE@G@b?܂7MEҘwJWeLѹЦ|Ǘ2QQR*kzn8Ƿϕu& ߈7ԯks;}p'p O>zcgW&"Կ/3C8$+CX\?'vRmc!ITYtqڽz8 0Fj,+O?B%y= z{$fΛW}D=$ 2:?>"ga?£9lhax|?O=1g@"rR l7WMi_{L Q`e#)JIHj RpȑBuSje {V(mw<~Wwoj7`NkJq/H UZ5^|.E?b"o]=05v|A-3UH&WIy0gب/I&OҲLGC;Ώm[ 8GrLBBTs;vv/ ;1,Ë#hžp\֦$o&N-qǟ5$1ʢ3,!"8RZKi *vfvcTiyFa`}6ލAg& ~f͋.T3w4oݿ:ҟd9j*p|NY,Ki~4.Fe;y SW:{"0AN)d;Mˆt~ѶbґڏF*`&z`Sh8 ү-ƌN6T]ԕ9 e<\ $.LoSqVKA4G y9mv_XA(>aL.ɡcH\`bc(P?6ǟpG,j™x<8"5.Pk? χ>'(V_4)nHԶܹ%6cBgףHIޏ~ ^b~HwJ\id lZPCn꯻ jhVmo0 ؔatL\Q7!՘0.G872sPTԇY~=?JrHXj%1FwaIp<Ux )Lf'*xJHwpLHЭ=ASf.~IYR{J DT #MLh/B~DŽZǠt`IϸjD o̶E=a]b>|}[QO{L[jJ&kwEUO"^vw^Jڳ&W7$V ESoij'߲QnӭRCLċIE]eٕ[LR<_ѱwTt{J.p7NSB+bySŰg{w1/VFhAe p u|͡%0OrNV'j*$qBd x F8\TÍF,uo<<@I|6rvsYCtP[` JfR60Ep3-Ƶ]~Z+ӭMt/[~S^%IC0^w\Fpȏ@C$з>'9z) mS 1- jM8@MwNK M;!Qߚ]TɵVfh".ekl\S?!0+K,֤`fd2t6yhɀ@]#<ˁԘ9I=k cwnfvѤ*<'C6Lvw-7|nxmjvh, ICzQL-yQ!.?~qWJT&VTmh5xR_!*N\P&5+A+lF7b;U'YҤڣlj\?萝u6碦:6ieP$P[eseTE6]d0)׉p(C81Ub싄2A",qE L,`R(zK3։j̊ $e7> \k:buFPt}z_ӪOmţN$ڷP{> )kHL}6I!bygNլediA@:UkrN c\'ķwkYU)3ԓ"he3 K-"8Qz ;&2+xaI?xd!w~SH "(ye9UBQp^n& HeAP&SXFF24 yKQƉ.;WW V"1-؟3rJj2Ҽ Iv]H66SndpQ"1j0z㈳M? [,(QZjٳSmIQ9 +eܔ?/@-J\ìF@/#ؿo~9g+| Û0,Prnڻia1'}Zcݝ| F;ܑ4&iaѦ+5D$x,"ҿ $ cNT3}ĪK)_s*j+E~NnkBgՄP;q{e[2 F3Wi7Lvg:[>;oZ2/?+&=]hu|^K3Dӓ?/=N+gbym~Y o,9Gghlw JHC38vkaɔ)T20Ciֺ+ ㍒@z>Ğ݊`*5.tWPWZ7I0#㗼 X/zT'?jXHLL̪mnr^{`{uK"Z(Ux[əx: "O?o ȫ#+U'mO+P2k?V\Yr`+JQ_GolU"4JU6c1^{ښ*aݢQó0t^g/[IT0\,`^M%4A=_d`R|=/]`s"MFM:)B/!~x3axWrNq\2nu8Ĥ]VU~p%RQ1|~U,II0Wsܫy M96',>yߺLb; q3AXe2Eid$u&Cwdo&Umfy&|XB#+xlL"d`Aե/J^O1^vBfg)n4Ϙd+x n07+/vHIVhz7wq,QR|3 ɉu[R?ZG6*e(:u0Uъx&ITyPnk ad8]S`J_h`sx1GqBRAX%Q㾀rQ|LEJ'_8FM&|W4>5)I렛7E^Sf̚dD! ERű*} 0J`? XV. Wͼj[o"ADu5;L2bȬzВ׆ (َ$@D\ l(ٟīa& ŝ[]lV6K{L1~$c5A%(Wwd rQ# |ܸ'AՐiߎNxaDN JWFomg_Md<<^ьf(X*$lPKVlW2}aNhBj.ЖߧZag'1h/1(G65x4XѸ{2qr5Rre7E% Fsh~,XKs ` _|NԆNl[K๒6J Z ؑp&mFԱ1ųM?xxڤِo@&Xpvu-gGU[?D lde=#(H86woY=7k]lQ"!hcLEL u}աPt:ŷ ~2scP6,&%{Gǽ7?љk xN wQryuK31c,iEp'Ta=Ζr[ȵcqFU)3Zhn%| x&Y2T_B,gS|֕»0xfhrK5rY=/3{Uw)fYYeEmp3^fN ށ`b3H酁lƔMU"1J! ;>CŅ&8/ZLlni,ļݺu%QT9Uo r@: +Jj鍜Hˡrlԙs)ݩEZ(s~YB=6 ,%EκP2l*BsP M뭼Bm} TAԈz:V>srdOb-`@\^ud]OQ옶NL<(Gl:k4g"Vjl݇jɳ \ta)f6 QJJ\5L9cr'pÔ&9Z>L*샇`mRq2¶6TY~ /^ [Y Re.50]=f`3"|͏4IVV ɂzI^(\hq~*;d1!]C!;U_9ʴ,褍^'@eۣ6fg8 OH-e[Fi0)U&rq ׮ӆ-bO.kh#93*58fP٣*`Ҹ>v`Pvi6)n|*t $6n8r`~ZZJ&ަ^N,Z*GFb{!i@|mV&]wZV&7=,aV1;vFfN QȴgƧ=?IOLQj/lW ̳К tBrN^D -1? ʹ8Kl`ȰVMm[e&Z`X=鳚6"XtRfEX%j?QM4UFU->ҹV_GR6xS,_-rǷ _MvulP,D!HMDGTZe1g:665,*xX.CE9w7[J49*BZ78l]HN0AAKe"4-1AipzjŠ]1 Xf%\(DTɱkT81><}9#yydN>}Hgs2ޥ)9v Fr©ʆΠEJ)=a8+"hu1Ȅ.Foz#P BW=6`YNg\#Ep=Ju AlFJJEb{T "MgHsCg#K /-1{s竝kxK'$K)렍ez!e2/{/qJ]!k|!W,a)=0@ : DLҳ?[DJC Сh"hN5Tyz2u)էJ4.Xʓ̱kMO- (!W71l`|6NrVEe5bH3+AIb;@\E֨ t?(lJѨ9mzWOUm A;hqx o"f[?CEIm CڦԻGt72cM`j #4QnJj;Ta1,'>B +"EZYzk/G]J۲%4)懻CqucQMLůo0'J$@:Sc+wۣE6< hʚ${ѕ1te`ܵ$(80DP "i։sƦPAN+Zb[Hn89T{?]g_z9(R%`tH*eE-Z2yFB($h@??&OVU"*ƞE"Dg/xo+ƩrR:C\7Vt{ʤX <7r0 A q9bKu^Ȗ[D&((5W.J5ˎ 9fk_I'uyx:vw=ƣUQ+~s!CF dnsݯ|*& :ܩމlTucpKCsRg]ni~t 5(W=!C*k6;- X6H9BXjc@x6 5. G0*":f͋ېKM~'|Qe*,ʝĆ{П%N]ɾ^fVNT 'Qh鿞DJkWzZ5 ЌQd ZTN'JaUz)T߰%33Ͳ2 "[e*8; Bm20%Oo2yMƪDIK\̼lr• .f$ycnJ[js 5 j;V>͒#a^ZC6@(whwUUL7t6.  Fc/`Ԧb4@J7ݯ3H颖}03/AB%g V ߀g ~54IlyVm.;ziSP0!۳y"vqtmP|!h!j?VB ƅ/B])9-(buB άz:,(CIr009]8/,)w|21gߜ!|:x|mz|)c<`1wϻ_J!vV^07e_/IF?|6^Nxv+OR\nJr%d+vP1};Y^S~GH:)Evlc$ / @[!n ~HJ>'ͯ׼ЙƤ;{6~1@ʮ^ 4#2W%&HpRNK4阋|[Cx_![ {{0;aЁF:Ȑ: "`b.ABF5 c^pIDS=劚s]'UͭWdx$G?j*=jtm`3LcNbQ͔]Bw¯O3(YQ~o.+չNv+JJS`!Q~A}~Wz@jnAF¨fmLRS ה4kKXTI*7)ptƱ~>hB #mƑ"4iΚkwORܝ1#IZȈ`4O)xhiv/x doKfՕzo3b81ڼ ~A5eY+s+IXw&))*<΋Z]yECk i? cP8v%|oj/g8Ѣ߷}ϕx1)E\VPW U;!%gɶ¥ll|e C؟{ U=6”kb9w\r| 6 婣ݑYn9cEl09 =ЌZ C5L1mv'UJa~>s/׼҂U­PM À z|羃9 |’^3ѭ[{z:a!/wsr"{8߰bm#zKu}g&iwsʍ,d_? Q=mV3ZX$y#d̐s<ky1xRjƎ*y)'CrkJۣYvO冟,W3%`+ L[kZ~GBSIPRSY@=$LW:A۹Y 2xsD ghC?]H (A um|&<B?Y}I2ߜOr(1ǡ)[PŸaEG -'!~v6/ɴxX̱b rn$2@xj7.s(+,۰zp9%Tfeu:0 39!hVd3>ͤn53wClbaH)Q75\P]bp̵J=FKȜМg-a*)pMPn&mBk1HQ{&3 cF$rz営KLLfޙ\xyU?nD\XĖb?Sd6il`,,).}|upϠwDJUoa=%i w;zs{IXQv @!HK? |w6OjVxT]GZcƒRqB}_t3}).xS'}Z>^ ΪVM@x'c(po7ogptXϕ3)Ii܊.uteƚƾA7S:G쿟JØ^8!!JVT:?V \ŅDWt=l†138t4e}/m0/~c_v']W$POdN?=}UUNQ kZ#bpmml:)m: SM?@juJʱy lcKXd1n3؟?U#7wbRX,SÕ׬j}(:hRx*YԕvՌ(7 `)WSy&&kbz`Dz|ȅ^ ]pݭhk>N@u8&#" ysViH#nU'i)6$ovVm~z~oBrUYqQx(uL`V_5eYC2N{Ľt zd.]<0ֈ#G3\yC3ɚ=cZ#OgsV*+pAv1 Miҙf FNxLH} 8Us4xU 0NJP{h2m]HW4XVeQ40kE GJjCQzv .A+n ^fM[/46E4{u?I} ta!׌=0 4Azs޹ aWJE)XųmWŎprX\˳u8H1A&g 'ɋqŒ"Wr7.{*k? xҌ| R׃BL3WJkKKܩ~r6w#)[8[ Jz+LGL|80H,wxP4Pk0Ry˩;;Ie-d31$MF΂:0q05NJv/ ͸!CDc-:ӈy6Fd"@(ZdZChPo|h:؄`شHm4gլpH`F6ڋi Ĺwֹ$[qk +G7UYEr1q ,R/wO Ι SOHObp<Ґ-!}D'L*"} 2><~CD'5f7z@n)-BGUM1&Wj/k"QqLQ _EMnr>l-2={Ma06 .~ ``F .r"=Zv..|$ޖz`a{JbfҲlf T< u3S,2ViSx 1(':#j緻;D1N)J`Ҝ ȫKlYnvYs[]EՕqywϘQe]m; T5ƜOF.F _cJ+\DFiBN;p'n;>%æ3li[_p'} }Fǟ ͓,߸)05ImPmIy/:҇evZ[{'_ "Ov` ]8 ;,MSJp|ȻD Kc~'$9鑇)@ I"A}a2aQشN5Ͳ3h9wM[AE\<#>]2^yz&-T*P)Մq\4N J~̾;f ܒDÈNÉx^Sal{UWU:֚"]懆CaXQ Upr 0} QA5%AmEov]w;i[ *GR$}EjoUs 3(ES,6΀V]I(EUtj(oLY#137Ƅ h :ϪY^JZ(,ٴ*dzQDij{ .CRE7DHizNѢ1@z09rj ,}r)qiߊ婞jkQ0z{Z-)hK|:ds~03w^q_{u;A6M-tCHtA P1hYo\ZPkm Cm h3F=p<߽Fu,7SǙTAr;urZrzEP4zlp6ka ktmV\ղb<Ƭ44"I.~dž? Q#500igG{X=C VBd;V ~KIVqn3BI%r4dYh+Ֆ9QUW5vA5bay b,lց0Uu{~]匘ՓڀCN_uEeP٨(4zG XfZ-EK$mŝ"2#*L*%]t@xc꟰?CwcXdu!#rE'=m Ov=s[^L)ɂp)ѭ('P#FKޠ맻\G>h`7aQGѮ/xQ"ZY fʻ=\bbV!/ǒ)* ebB2A>X9aC\…ju]@^WHQyUgm_ {?C Q3i²e 6 C{$n\]:{?)aR)\^P71%${.fCbVVeLIv&~MRI?.dx=&Lǥc+r[_/kVx PxcƉ ͓)r)"ǣ/^J\lpxD.;vŊ\LŦOJiusPf{_^7Im҃']pN\[?9x=c ᪸y/yqzqm\ⴡ-7*j87RI`TޤjM΃s{0˚";BH*Kt'@`S8燔ÈM#5iנ`?4*YOV{g!oV[]e$)\{-z5`m,gCLAQ+k6DV#a3ixMN6ZuKۡ1f9F‘|XM1K-bg52U3O"k)AGq]ZbFM=~ Hpj}(jMZenfHl{Tײθ/5Y=#הKh6{=m+ЀBŤ(yKLc?޳IpFM4Z)3 t=Jqeg½Y-xR F=,){0QLd.!vtԦʽv9!,F "I974+}BU^ 07%*:v7QZ%vwHaIn*1w[s 5D}qᰰT wo /)7AF;f[tcY V@BFCpI^l "{TC@JEtow3ˎ2, G1^v2\?{8ytдs"9iGL"Ar5@߁Wau f+[Wu#Zic ። ;>1S!fJ-=Ixa's-(hk2psm8!rxo꿹6o& j2 џzG"]νuH"ul%?׋ Cr2=0Uh̐5`jpO5%ίtdl>.+] rkypAf9Jz]>>E'#cGBꊗ3wфnt7R}A,.h|wm#sr:)*X|7BEåT D9=D (3 EImH^kٌ;v #cדנ"F)hHl/ vx*Z4)}v'Tn 4u u į{/ F5a :>1ׂ*6c84  y祻B,޳8w&Z+njLe- "zvCЃq"Br!&vc}S%!FBN@%h]d)|IFq9cZ:?6oHKA5ʁ. &h&+^'㗄#1fc-Pb=vx}>TwЕG+<,] gL' etfSMDný^4t߻X'ePy#w- MQ\}L-F^ˤj.d})拭I\{w{1p abZR5lC'NΩ}[7?.&kNdrܫn^^!t, gUgGVoΟ5H ;Vn"-lNo*n?Cd9"?!1KjvJ-|!R9fj+Z:y[J1KYT12dHXqT{_ԢhzAZ𾈃}\Hvd@-3d"g触 $c?^do76`7_φu_E.يQaD `¹ujFHwlWup/u8k}mc#B?\Whєħe&uӇc -pʌ@3l3EzҚ9:ڶr}g6)䕒)vPuERtYz|VxWpޚ$4R Pr=hRB[ζIV $SkVAAz w~9*'i.z[L !R!Y9%YDȜQev/$ZF?#AoMlyJ1>0^M L"\F@Odwl. `QLZ/ ϱ -MԹ3ğW)9bi1S{ӂ ?anye/dЄ V5ste,*3L4&5 TL.IFoc9+(ڢQnIm{D`Ú~iNΐ^er]V"&v¢NJƯlc+DN/`S{~By+, 7+uʥrX7xu`mxDA=fxƿx[rL^5ST7Jm<0c6- -FsAYKEV+/4ĆgW|e jm}̒;RC_{q0"IoӖToQCuSQVyb'zl] Ѐ P}};{;); O6bnulH4 ~8xl,lEdſ;.yo' oBzZ}̃Ghq2^r+e',n%<\~񝢠f .Gi`,LE2='#mnwmRsdϴ?'wWgNpOQR>+ ?.m,L^>q0'5B=Ri1daEJ'uqH#- I3kTTZ_,T]4G{={G+=͡ᜆd_Rs\N]3>Js\+GJhs}8xdO)%d<0*X7_?槦~D24mJ妫4Y%L'(5oD堧f'X,Auv;ꃭFV' _)  ?auS IqKo#}u55/F)h_nL3e@{ƣl9gxQ.]OoZmCϋp?I TKۓ2,;IavBfh^FI?RH2gu;|J4.qta!:gK$|o 9z(ڀds?ɱwqzWRj& lRۜٯ73 aa%ZIN ;E9^+ s|\X B]}gy_BR ŷe煣*: R;%nRIvuw> m"p}]W/}ENGU{(̈uWB(hU7Q"6[W{aκQK.__FSeFC҅]*%?-xRVĦjCSw|>IZh-:LiS2i8CUɱm @ۅf4 z~{d"+y|$W3}RSѠBurbokdնEhtse4I<Ǭ4dZgSB:!Õz=ɛ+S'%k`6i├Bh?n7G3eiTڲ57XC@3|XBy}f2NeK>vsF%2&G6Q5HmXJi8C)FsTv*`>3t /QM(gN?5ͫm  USO&f;T%n;)Td~bK3|N LJS2*,5H2ͨS[ltծӦ;d}7!h#tY&JYy3&ȺV6b4 Pu3+sX$7.t}|%'S Ɠ QJ-U`6d;69C-mǨt/Iٻ,$àǹ%k?Z0mYlӺ@MpMؚ+I&!sVnGգg==9) eŌB(cTt-8̰ wCQ 7k T_ޖG*GYpjfo3[jג&Oy۩ Hk Si'͒FDEѭ RI|D->iʏٲsE'el$=ڊ 08 %m9$doaf;^lG@Rb~V^Y鿈$$;bAM[UwqUqz7|mO'>\Y ^z~r}R7WQ^bbOA0ÀZ58}^J92ˌ]㗩fAs3xb`& rϧPrLJ͆ ik"$_$bQCzmFP Xa]%?}`8bNP6SmDCEe.SP v'[jلy0QS(vUIUR<7?}EOWUשO P &4PߺfE ga,,CQ|paƚ}[Y-Kx_AY#Q=RP>;C%>^0zaمv~,a켗hV|)ёnoE&ʹt*#`+Bn~. KQlDEXcZMokhQH9N~毌 mIہt9|"ŸzIspd Ԝ9'o-a I'B'*gϸ{=O; VjOe \d:2ExnOI+wyXLAc8bfjo7z@ѳ} Pc iČ~ X lGg5snMzKE-wm:çalsq&%cNGpBX+Pԭ\J0D Ȋ9؞,$EM[*4 xnZC+%aYw!A<Už'S,i4{jL67Qڜ]N6R(g$oYgGq7 :ͪ(z^Zp{]}S}cΞ}sL\z!<"C@ F02@55q|l^X%聛5s-vЁ&-g6(ը9Uvx굴Q,AR)~2Iixg-*|9.VsRJZ_o-?ڷg}^Ҿ 5Ys^Q}ou2^OSYmP,s)2?#-CC~j(4|n]!}̰IЩ9  ߔY)_ŴK^iiTTF~#| ʢ@i\,1xO`)ڦDއ[[A,`hzpwߤrbvrڔ_XXF@1sH0/-Mc8^8`#X'Sf#aRO: lIそVnWcuEklH^md8ZqT(R% &^6ׁ؊"/QqLDaeO"75?(ya;L$`Do~GIzgi1ӽ_G0=6⊬BF|t+6&6x֤dU>8CT*e0S&,!9@㡻zHoCnĎ1zONkJ嶏?ád2I,M˳RHh9Dm0j׿%>ZB6x#vcDh.E|lKF9Q++}gYcb[M . B5ϖ2j~¨4xq5_#xӣ;o^XBNP`QrF{k}\Qp3PB EaIB.j&u(0HEOJ?jhOť d7rJ K!SdDPnztRUQ*N)ma,M:%*.P'RXzL})w:SM10BnWj ^wPI](F‰2ܰl +U׉A:HO^ZĔ4ޜAx/OfBbǹawBKUYJs$8f"vb3*Χ~j>: .j~pl"÷IK > Ն+u_.^>TםIJc*I֢%IR³`O/+K[ aVn@hE>n}ײR?kt<+J#swOnAn;P/CbݡW0H/tw.{G<-bIi]ZрEmFW=P?-w΢;\]yP\&3`oˀdƖP6>M~on}r6uneVG7kap|Q'eY>2}N[ wā(v&Ay!74daD>+UH:N`^ۿI]&$dzQy'¬j * B9ّW5}+ƣY̎2d49eU Y-}76E-a֢J^29%Wp~:j}?<|#Ks&'O@y$Jf?fl]K[ I.+K72142NQVׇL7F&I@M`SqgKS5nx<'ah՜tÜIڑ % i`PH<-"J7׍\erM{[}Fk+6MT)nlpڄy$JS%+bٌR>=$ϺJEs/rqN16'>n`(wU6M_r8bv4+ȣa$/:z˵?#}*x5'J84 Hyx~^B+E1te pUVvvǚz{zrTd)zDZ* [y1BE@0?i7'c.O\#`N"ljE) 4zl^kѓsym+ :/!R|`{I7[i*)&p%I0Z^  (®$ɠ='upk-ّŋvUWSɕ p+ "c1 1oa{Y&0溤T{M% CX("p.wf_tѻq:XHuHN(fӗli !a>&s$H[dbE>^x3R!WW8,%r:Khbd _joApYKD2߂W>!Dy{bj{ Hr?Ws:zq#N_qxqp}3G>W`tSL3[|R տ;o"aøHnȏ"^@0jHD15[p9dq+t#xjH& 61P k>3WA+^I ~c:1ap]F6hPzX!6g")Dlx]GL5"/h~7;F]}fϖzV?K2{£z[bǦpí"[mYh^ E3ؚf_ r8_ٝ$N{ V*m>q XEǐM{7b.>] J["3)edgE˂,(މ]` k!0_ 2?75MTNqCtyt`RvEa|%5FRlJGgL&򼙸32dn;8 /LCeA[5]G;UElшYFTzy|ivWƒ%MDcjpPѰWsYMbagQJ SHtSlgӢٿ۟!m$^j9?:SZr7$ϐ9!:xOw"ގo!!wy#Nh=R ǬT$zeΧrQ69{G7*Z [=) d'v<$d%pxwGUbуO YbYK{;Jx.7b`ڄ3%DIƆZסƼ*K>O3eA`) { ڬ{Ɣ.EVes qyʕզat`#5TA|B`zP3TuqI{nP`H2QgU=ڜu.po 2&"t~G c-JâP\Sn$St{FnW!] *?XCA~SǎBv6EsY{X6y•Ah Uv͌VBM狜5`Y)ľ#hw-p$d_7؟g lO۳~IXYpY뫔!VLW$?]SF ZY?RosMqX|: 0, 0Vo9{9~#0Nmfݵ^ΐR '\d@zsQ6F_TNo2M +Y39A'yo)2Tt$*!u@Y9bI>p9,/|2u+juǶEه嵇x8|pqfڼѻ s۔q}hh#qX/?Ic俾hK}t7 1cŮIhm8oඵ+ xa [[Fk@J{\y+4Lcɽߏ,1@/!ƲˇшTt]?|:Tm6^˅ww͸u5۾"[#kUG_{wKQAw~}Hz>]0Y+-Y?p3%Z .E%2>aZc .O${m5)_C9yB02{H 4$^>J u4JN9-R!'#(<^ey4I-xOUz?NXj^__w# ٺb &Wzq+dܸUECK}!Y2/dr|*a ( 2r>/uCa6\L&x;@٩;F| R R:BUK;٧\쭅H, <;sDĪ;`c.촀{/ CivEa3H{bņq1ƅ 4 Xhg2 $ӭc;EIZlDx-}%],&U.aа'K>Vhs288^8 iYPŎe/e؊v?xM%E팓UC0h5v"&jCsDe.$jح'>P*H/sP&l 죯%1`dIr*YY ܹ'7 c2tѡܼ$E]*RFؘ8K/XnM=#`޳bb?ݟLޅ%mLUZj6'%]D6]|tp^YSjm@oC564v.ⵖI,nPKn9 nqAH}x吣@vC҉uwRX7y\ oPSgf2fb-FdЗmJIӱ&MK^hm VX$.ޛ\ -iaMQNѤ|ѾeAq{V%rVUݣCLYF XFT_ @߾D16 ||L{RXS*n87C\rP)4cCbU\hZIct^ ?> LRe44 &y*8r:J:}@'͡^e!J\ͭ,dײmbhBku-,:Gk!|]Ӳa. R-M) R-DlgnMep?\]"cӥQ963tz[C7>r+C)(F$t1Œ^X7HENls|n=e⼪M"IQy{fpf"2y/^9jp:)+q/R t,`Fyezcɐ[A,|;{KO6"M19=YWgRZ0o}+sTXvM=4ĘD`E&FGԥ?T,i֠ 9ZC2+zh+c֒ Q '=.FZrxTOWCN;ٮ 36"dyAiX| ?A3:]@kB~]x`'υw3Ըb֯+dZf,״AdDOΈ¬M26"iƓ-]㼩e o xt~|m cF8V+s͐}A%Y? QLM;wu~K(bqo^">V@>|Ua$[\ sN)Y(]/{ɋ{q*I˳+; #Tf^" !u鏡AsH&ɴ全zݒx\Z 2015Yvk5!5[ZHtu}ǨZؐ0rPcRߕ<+~#xyӬ$ 0{hRTыeҼGISNb[˫Ư'TxnJ]MtܴowGT} aW':U2ZP<ԘݗbDr;^h݂4W^m'>,Qe_ʁ1rdeՏe8VCVDKS Luو!  R a:75X 5>~vUMNoQ`Li0/V.AG|)u;LDx<1OWo`W]cVم7Ne%GqǓSފ$a>~w? `>XJL<M h*6*Ez  Y_uR[jG=Y,ǯWƊ/SV?YvޯH+<_7Tz,>jHK&6lWhÓf̜ۧ@ bOq~Bn¹g2YJTS.ť' ,r*ұTOx&B9۳TXv&nR pkN +fmMWaXy%WmIG׬Gľ-6M,dՙS))ʥWoU؝"QxH fK4䯦UO|8-0F8y1pJqJLP!y3MQ9CP:$ : `LwhȸuP! #sןޅ>uG! 5X&lʍ9cֈ{hXdڂcx{z%XTshx=g1L:!>CpXirs[Q&\c0ACXExbEDEp *$:-*YZye*3KĞ63ר*sI<|oV_(8;%e5U$"ԣG:*C /C?t&q!ڶgɳtBC (h#@ߺgs4t8b"NJG5.R lF$G *cqĄ"ংk7E 2Ez/7L:뫥+DS!p08DŐN[F:9_G[4egUg'۟-cv!t @=:* C \tOS VXo-zZh8v-c3{-L!!]$ 2 c͚(Il[=g"0 ӦA$Wy3oHtv+ b& ŔXv읢3WOOP\$ՍBŢdY]H)Yn^D2cŘ] $l^0;Z ]u(ұ⚉N@ 2WeE.zz\pdFߕֹy3^)Cd%JYK;R4!H'Y[@ I)'9*<uʭx@ _zYca!X,D;OTtGoDr6Wo"5}6[5eqp1DY5N]PoF6Ji7!] L&XX\sW۷}ϙ:)7kBy^ \3gAw)1&7WcAܯT+ɳ%d4PL}oFzYzϨ<#}(vT)u`"8*UWØPqBRV3|C.*ay8?<")d@U +nTN'! YRGHKh:3/߈,VKpZ\]oc{gGѤ"> U0ij׍NfϕLqXbxyL͑"#ީ|7,P49:u֎Wc1Uf+8b(dR l[u,q==y*70,z|^F,a +\fFBRkH_P,gMxas}FŲ64Y> s2*0 !1w!;-(+!=I1Ӄ5sxֺ݈t4YuK{ Kҵl}j8rz'x^Y*.0ǔϺrl:89|A@'vysC#ۇ hf ^eDоIJξ'({XL$6ٶʂx%C\d2yB4=ۑKGJ\ Lɭ+~"B/e=AG3͋vV<=9y ;sGehQ$v7@{9 /V^1LoƂ“=L̷)0$SXRyǫF5#Oh|GʙK褸dꌬEИ,WRf t_)jL0 _ JY?S!Nv޷}!NoW$_5!b("[;zӽզֆʝ"e "^nPK&%4 |7*zMDOW&` 3{v T!BR_V+ ?H/&$n}(>5ge)CiYe) uf0J5}QUKPHy&:xG^mƦ,7=: MeSoۊ/(V[sS3»b6ݒ}K@ Pa֮k5q]=@)T+#aLM]+y jC^%.]l PÑss5Jkʙ.k\Z~t3OT\?D&_I#a|C`#@ץh ޛi79Rus,>zu?&ϱFU)ɷ-~jKHZ %QԕiG0dVڴgh[b- J\f]&ͤa|;:&X RFEО4) YB1d6 (eW#LuUl]` ^sY!pe^'dyzw/7=Aq `r  ¤ƒA1dOgGޱn6`Ӌ@qӻ]$C pbU4Bre|̱!+3^FkHgJOcO*Al_11:Yc,9 {{1 8 J%KoENz胗fxY1VtqScMK),; CRnJ%_܍IE`\,M6-c&A(1[G b2[E%̨nerò:'sЁF[8(+|QI ^TN~Wo虨= &SߓP35x$_a\uAzOv#rA03"L$G++ѫ ]HADbA/[^){R9vNG4Og`G#GW \-.?LO rr>QUOKZҦ8)&#Klf/rK2iэͮڨ9f;\sA?YŹbrKk &8]tj;,S1i(iUNל E L، (&& A۴֗ǰ6c}J)EV\k?v'FPg4Q(L=mr1烙zb֞ 5%Јy oJwr5[&,ZU6"xͱ3TG)54piS56TG+?Rf?zT }gI7i6JKB0|~ cb嚣FálbIehы#rڑ^L(RUNMceTZr]/()1۠fN\/-҉'c!i ZBP Te(?4B m BO".3xj@*BX$YG4e>@襏:**V/%B Ggh QD+h|G׶~678Ү۶=( sV_a oP/ ?^a}CRm)qTd0}_*x_͘/BF{IL80HVCZW f۟1c /,''J[ڈ52@}Ǔ!R6z6nEc@:Ǔo._Q"d0.31V)FTMYveILNo&vviF2^U|31{+S5,5E S2Ym"WW!qiqhgX` ˺bW U!oj6Φob'eI*",!f[q+R.1׈SvMj?}ȱi4KqY P,|Abz/]Z&əNO0? 5CKxJFgDks[:$FvDn}Cv&* ȰzyHT+=n(f)XW:5\{\Կ͆Tf@یmb]GARSpXy\.8:9‹:8GLFFѨ"PO߀ }ǀx]^(510}PIN mYim8tK<~qQiB/~^&!)IoYynEte)֊A!Tٳ ɤp)ՅnZW&"JԹ2*xčJE}FJ'_yjDKO bSCl.?I?mr≃q1|wx㨤>0aSo2|aG-JofCFS6VƑm*_3R@Xv<U]:K8pD CXɿEgܑ`"#Ҥ2!bIVL񸘒Ih ޻{jNj* Z02˲{(Cy}dk\ xoxк(QF-!*eLh/-3YP1DIe~˲ Lh'q3C${/{UM g#(qY ّM"M+/}{1׬ g|}z>Bѳzᬈ p)9,ZQG%!3 9贎HOI5'0 >ε#'&ؘB#"EUXR|X7IIs&ʂɫl%rAn k(y1=vbǍ lb+S(wdr~gqDE1Smv̭Zo )c@(,/|'}9)q@RqGL̠ϊ(z4S D;kElH{gƚ~'룏apQĜ' lEsorlh]U.V Al$ٟ^-_!,5UC6uV=qؤg9'B9inK{U(+>^_$ٻmbcJپL*Dw<ov\~^n%u!9ykl.`emiY~3;n܅7/ e/+B;V"օI &"=<{lCZlnHd+gIX#~#tF鲼L}ڷ}z رvnó\9QTl;j4K8RA̴lSuD֤\gdm\s>KO~U;jBwE'0*TVPar9ajk\+,-U} #*I&Ո]Le׽?:vܥ, u 3N@BߵNdVa47;=~$G%H CzH"ݚEt69lݴ3݀n_U&.3 :R#pjNz"UC}n8 /`sXpJ*PϖmCMWyC+<%#eI!+wmB4Yl37ߤޯv[3՟]nݡȼXO\9p}0t0 +ԙlU,F63LjYHZa1n@~?JW<#ǁYڸJuc:7CrEᒏ^SQP.SMD {LvY L&;'kϔv/gc@-n?kw a0)Etڴ?= eޥ>TyrNHX蝽 $C17n%!Ɩr@Y7”֛:Wm4& <*^PK s̥sK垂LqfԥէAȇV\S+=S)UO̸ `+20_ l" 88{T*&FB)'H{5+4N;>I L1j;" `o9KFOǟeoP*PܬsϠ/Me)qݠaETkm-wDA4m vq-p[RLxy_.bu{mO/zu2G!5sb4\G "r]lL6G,đM:sD2و\Qmƅs;C+1vUM2$-@INԔ=pEdЉ1m.A!"} EZP;'-9<}߿[ -a8 *Ւwќ+s?s(X8.今0cN/97qPUy׫ZzL3I.YmaԂU;U_~|&&ɵAUtSpp[|6G=+N~,ϛ:hY2xİ̧8l' n+s!:ĺ<l deJeeO,Z`#BϺU]ap}!۲aS1;zNVoMG܈?ÂM^d Ks4"˷_5D/F}}HN)[*{}<;y']&ZdjHzgc)c}j9,XNDQ&m\HM٫f!(CJ܅Gha"d(UزZQ*z˛}f}NjI:1hFF*ecp& FFzN(R1Kͽ)8򴴴{uhkdQ.̑?)93?0?Ju դ?!o.|VY“e}%Er]e&j>c3qϭ2,CXyZf3yY0B_%C>B/euFgyISdOKx>+q7[̳PEHEalf~\/ ;fsuك!+!xȠs@eW~N37nT(e%#e'y҅-CyPh F<=ͳ%t0"MUZ{+ - tvL.NE8LFq& ɴ< V4&H1O)0V.l%"-J)J(;c(XOYn]'Ƹ/~Mll1܆1S^tNߐf{rJZ/١r6yGY9:p63!uOoLum!jRfZj{&{դDF>fC@WfOQ1Zm] vu4bԚ׹N?r2P\.Ltk,]6l"re lçy}v(m<7h`lԹfN'K`C-pYeFf^ t!Lq]4{̠rxt1~N ^WMz~=E|1,m"e8g'ZzNy /<3(<"D*Qi GpymxX4%'b 䩶$}򓔤Y((Xt$^wd*v $ϦRTanܤJi &~!Zg &E`Shiym N6_L?VӤ|Y~ngj' .f)#[5]3G J5ĩݖFeBQ|a8 / q!f6>ER{OKqĈsIb:f$zQq{s}{WҮ!V8gI&Jl<_ s"0 sr]{$¿pZ^BTqN Fώ֤Pgs%[y=O,EqƠo&p]<׻3D~NXkYU4|Is?48]p}.Tu!΋d[ں\"Xߟ+bIFk)|Gfl#j]N8\C1 '3 r3+ )/K$~T)S,w4'G0q4ĻGi up ~ a {%|H45*uO nv뭍C,gMpLjkYO3^4$ƂPqdJ7*H]@2ߓGQh0q790vP"y?8lX@=Ue*1IdB'2T s >@L~DbPYf)&lvAA8ۏ1jvލYV٘xTeDACO;ވ;G;+4Btdy7'z9mfynu9c CYq nv:rT 'j2nI4Y?7Բt9 ;o *ziBm}p&+aAdcݑa C ۫&}4 Sԡb̅)қI/1 O,*MhH'((vj9 %j4?$x0_X"% V5ߖY4lyNQR} jVNe`"J4-1Eozkw0 I3Z"Rop҂O,dxlPOwlŀe/RW9F;]npSLp!2Ԩ u | ߷VpcMru)t%SjkF{;#Ujl$-{\D.KmLט   5x(XjStKC5,2>ٯ0Z4ᙾ[*6q(e%I{]{61ےG.;ЃcW>TƀSU.ߎ;? ,s_Y!1_z5XtZP=p#+\쐯P{spM~Oꌄt,Ku1>]/Dz5ȇ}#WfHD;yU,MO('VR3j8RKs֝nʣnDvX8qJPد_]SL`rR0Rqt ڵ̡eaO3#}4wQqk .Õ("S5f\ʗ-# 0 ?cɘldd TZFOvxHS} a 3۶kS*Xӥ̓z+ ecqo ,ƥi0eQՃ)k]d< mwZ jZנXre&'/[u6_R]>f ;[Z :]<>Pqp(-k@ M.(4k|Esp!GI0) B\PAҬ4ۙ0wA~<+3U 'Ų%Q2\Cg0W|,}$,f]}m"7"PS/7$%]~z0l4l6m$+#!z/؃3j$>#O25Gy]SK' j^>whYm8"9'b &`EzW+ɐj @*%Z @PhAIo?҃aÍEK׉p/}P\]?O\/6Qo\!ԉwrYWLx6vb%@znxuf*aqLmGSƋ#FGl)$g9v.d9M =ꭾBٴI;ZDV% Y߈u)rE}Tb*m{TxJ}x00*,[DsFV$|4_f^Z!letܹ/]!]jM [M /qUUb6h!b*ja$dOR;0E@+<}`puo\#G=` )+N:( j۟\xiőivD/H9xr2 —A^ـ᫹ O*_qۄK}j읅9\ 6VhQ%NڷyiiT+@%{9 Їjj;W !]^8iv}>wƑ$бA:e 6C*q) YR7.JlI)kWu5妠21{NQ ﳚ7(Ս&_Ή{4'^jV[NA(J#g)UӐ<3sQMdElR('fQKD0(~BxLI$ǨtcfM 5v dS te;*&XcG,^WFU^ W:8T%۽G()2-.3͑< |g>{=f hyt]@Oq: AG3S;Y&N(o(;J:ΑAh6EK-76Zh=~z4冝zV@$N2mb0^)d|oVP[zNZeJ;+ d ≐5($0,d[ܫ9?]JƂh+tyCabלj1>Oc$PS1(; P qs-sK9~9ۦI]s3{ע WmߕH?`!1S:6r++,@,wH`b}i/)诺 KCǖe-.F,Џg[2SÁ^| e9l"P>GN`fLũ9Rd&>1al 9xgQn˪ S) d5b\ZhTULYPnS{w-JGS}M's圎S1G8ԫwt"A %C@Cb\RBrU~, { Thy,>dƋ MRepϨ:?jU1Y׀kGnͩDSjIs; z?0q&nE>t1r{_G4Ĝ@ڢEEM1Lt{!~ Z>/&ץT0fC@ub)J8[V_KћhB\e#)a?N$?\ &J)^"Oe+^/L|V{W^вYo5,u>*#FOT.rR\"~NIPי F+׬w".~(rL0 D`9Nze%?K.(J=ipߣ/[2~@3u`2(ŝiv3SDEgѣrg;.c& WZ?٦ZeiIo zk毠02u0 n@Vor^^!Ů`\"gD-QNw傍ކVhH4 Q&?k/6s">N0Q+ Iuku SaO!-Vn(T:: ,cBt8iiveun#;mM_ߢ*>0pr,f7)AL/];'v| o ;v&[BՔ ' 0ġHU%xagy|pa>t]Ŧ/K眂œ3J6eވ:K R#wR~л$_ufujňxȎ(H8 |ZΛHGϮ+t{iSrQߟ ]MT4vM"▽,70Qd> P/@%D"@ )Me)9=&8w*vW݂0&Z;9zv_vLB%"r`?ĝp\L$Al3!ݢV>g~7w<F>a)*j2z  ѳ引;9*oyp wS VtQؠ䗝n۽ˊ PQR_ƈ6gHd6&@PM >FVV @e@ ZNb-m-߲.?\$QJ2LR]m2d"rTOhj)[؝{i*]NP.Oj\@%1cMkO;iPG$ 摫|-+k#@K5S/3w [ίTW-lR$Pk CAWF# ^#~OM"!`awi>dxinkJY g.'>SKȶ}w#oX$c 50GaʵX0Ȣ,-8ÐxdaLsnlUS`"U`쪠cn7*_2>nx(/>ong/6˰Q!0bUP _ ITchgtvK.06ϴm'=cUc:ey@xAsy׆&a? @Ѧ|e|#Ä)*YE sP?xދ"@% 2[y!-RXMW VwR|ތXK`h= aq(gf ;. ̑LqdSAQ97(+KdDQ}a _5>б}M9r8fEN,fY1NE2Lwܳvى UDĠpa۔|IJS *OCNP| )gO2љI[a6yJeAx̖xq}jʵ_xyZl"cVFL΢$A48)텆L/iy67}窮urt)C#Vs[k k YFcZisHZsT@sP5 f_@U&9*!; ȶ;I,Qh06Gĺr Ey ~wˤ:ĕDΞh&G1dtOY[ت&L`>T٩xnW" XWEKf8)(;L0iW .ӣnow&rxQ2^֮|=ž(e0Jp9P'76ѡBJiJNƶt.:<c|V ́U~?5 F7;-Cդ1ZnZ*Lmr>8ohPqJ_l,#~&d J|u4;䩫n[w;Dqlmy&BfЊI zueh>jE_t#.66ݳWPSx#m.Z-l K%UlȊU ݼ@A譑"J^6\녝a&0PS&X}X죛^@^Fy.s+?$+7Wx;QټVDY ,zQMT?Lm8hq7|IxEGsUPAUK8e%[]C56qC`m&kk=Lg+y$'~#j $)D[E|5|sDsxD qtj)E */;"hy*ݖyQRvc0 ~rz%C40eц <nA$>Onhׂ OJ-܃{-7g#=Zk?'9m]T,Z<rl5hd=O}5ZSǬG5:9doeMuڬ}:+Ev1E,悍σW.ozZ2RD4A3xT,'1kkFPBU &;LlxOMBVÙx$3Oؗ1Zhb)\AܾR.p۽^PFB瞏M 4"nZ/i.yaO*oV>BX;Qv"B/c0! .'GdKhuy/Z'MHW)\=f m<΅.\S+j%B_Z©CFi@{Bn$州V չۮJ>>T95sR6)-;qA1֦ mzץ2(RUv@cA e1`Ý'elŝ?&P?ٍBhòun(_odJY-T^f!Q3[H)0jtcL9QR~C%aيS:PC\걲D 6,-[ 6'@64L5Uax}rV􌕥fhn nSP%R)QlȖvc1NSij2sGP|(b[uN [Aկ=D,Yv~Z3w t(7 3~ FԜohan*Y߆" mGAtӚwLBQ/(Ʋ F>ܲфc NC9.| D' tˋKL<Ը3R=[ri~kGd\ԪNd8_R+fZ LJV ūnI4a'[$l~HU\FczZ9eb?y6y)vEޤe8h*J{HpS.q=mܳw6 SXW@ۍJ9"D&~ EùV= _b"Be5P҆K螒xօ?j'̡~ci@Fz#?BVB>1^@_=Z%ۇF:+ Ҧ"MK5K':hcњm2aڂi W62M~e0vBpjP$&tU.l9'Qn1;O.0}eD2P #s,evM哹=}UhBɼyRJi n5?ڃg:V@1Fc$k UF,Ɗ wA*q 4Ģ OT\th#A!)ŝmFwV 5A,~* U%b|[^+T>fƐJa>R@i}lɂ ,fK@?&,dt0;v^p6y 9M'Q 4u;62!^T\j4rUdݶeQ,Q`4[y"mRχ}0Bj^B՘]η"w; Q bQ]4 %-a)C̬HoqT˯jݛ`zccyO/d>qSq+)u3zEvqE -x^h"y<=\p1$j>3p-"9D+,õ]>?(Z*Y0N\1G<8vٚlIC9;/Cĺ`Ҋ-jTz׉V,gC wP?AJWm-<')](9=J!x5kSӻmCxNP+`#^\5eTg$O3B \e|Bf<ڙcɦr&ѿ\PNQ婉o4y֞^lD/SI"2R/~h.ػJ ,MIW!Gʀ3䩚04j4}0VT6+&9A/!"k=rе}vʇ7)A¬~KGG(:L5FS[TPȠ]9J1/~=}B( Atmy%|LBdLW8 jA`։Uf`>@P]< R JFi7HAF!KD8!52|&B=7wGIu;1JC*>D8uCw^ʆD6:)[V<\ҏ6]E/{\.Re^､RG$7t婸. ofFfr.=8`p{@NC ~ޑzlh:BYi#7ySs`$Zt{*:N70TjGӎ (NlfBV䭠`0ʻ1֚⽻uj+ PKN$]_1B>VAJ/ԑ"qlG8N8Tvh€R@;GVε{*hTԧ,-ڳ&|(̜l}`_ޱl:Κbں*dY}m9k\0nN7h=^6?֊3R -@N(m~ڬyTfݑ)ն0ᒟCӌT3&"')}>l8Ȼiw}{77N Qk?%apI{<~@KSL%06fǁIfU\GgTh뮢گDj U,t!frŨ>/+A~'cjtxPFR6@p\O8vFOiLݗnR̮{2F` }⢯οPtT`;xw40CRӔ9w(aYj! 7p,&I\rʨS۠}٣*^MBgB"61^\ku=o߶ato7fVk'IC1<3{ 0̢wńhXԜݰT.–/춃~@aXXKkF~+j._5$|J:9&s32d]9&Ųm.odܬ">YJ]ŕ!櫡&ti-$3`:ȉ%?&hYֵAG0"5 MTp"jYrȆhʫ:Ko7aMI+SݡP?S%5nol^ 6_ qĨ1E)gIvJ;I긝Jy[~lQ3oUՃ ͫ.SfJ2am:h'kΰXZSD rj'z$A )S㬇)os>%s(TY3^3+Cl(p%%Gr:{-fsk#쐌(0.d19auaOLU*I1;Q5 \)nT|s屼qCiњ`X^p7usiM4_N: O:R%{NoB3,L0UtftPoע?Zu!ʸXD f;I*<قtNqysof^@:WB V} Z 42OQcʠ ^Z{&x x RA Vn&-oheb.H;29U=,1V;m`cj`?dIdN#ugywfjD:fBϧ/+Vu`J+ $E R0,!`϶M3{sfܣ uŒEW-gi+kkop -ˀ˝ЎhbhLxMl-PGb:єDg3vOf*z- jNzA* Z')HpƿNÿY-x`0֡ٓǭ]}SwTVya ɕ!\LLuAMJW˱y luO-5_tRf}.q29fq<ü6v !#/ RFgiK Rhpildt #CЈ씴)V>DDUqD&-x#N2wC ZÍzي'-/,uFF v;;]E"]m k-+vy%vq4(EX/ʡ+ijeOaC `鯰>aVLh/Klu 9DHeз [vj73"k]D v4EesE͏.+CqOrޢ0BK*8X ϓ2+:hA2p"fA+NNt펐 ˡH©ydSc#':JUǦ'YMWoCfK{|A>;5funj$Qآ\92,jf^m yWlUmXs@ ^#EKy/l&t$ʴ16 !Ny r^P>\" 0b$8pdy!. cFpf%CIɍJ)G1ZEEwчsyʅ|!)mF#8p$o ͊ JSJIQ?urchG[A9rɘckKi/L%az3WIͿ S5C(;D˒h50DR@RC-ґNtMDM(i&G G"3Qpbd&ODb/>XT'B=CrCZSiNz!f|b%őjڏ/wRzAӀs'lڷ)9Ԕ2a16(+qγ|TZ'( ykpe;u'>W B aC1Q62Vftf'&tv'exv׍3A 'DzX#aՍ.5оϼLf(BXx$KLp:bzSwOjwPjp%G|G¼1j$Ĭѧ!cM\\)(8=={ٓQ61?f0vlNt=buF%0/|?J,=E , b29xHD6P#x:A!4~`wneG3"|PI=ց8)V#14^LLǍ=}{]pRI1&T8ðNH18CNr,ĥ5zW*>28> *NqW$ bnvhML0MpCc%Iqd;EDikI-Q_4Q ytƬw}ت_ldڧ`?cdA[[22¡>6x@ö4=jxA5uѬRVA_#$ (#zf]ʔJ1]PAzZf>G ,&mc\dEF O<^\n:ԷD#ɹ"pjC1Y|=dF%hd ygFjZCv3I6qv2=#pee|@K%Wr\nЯ oOY!! i Zۊ@6R O1Ɍ:+! ΃S2%\]ki/L)uUia f6}Ui҅/w ׌ؐ|c.9S Df/%xA57W+Ө=)_.K-_X}u"[DjՈdXťJuVZ1rs._v1(J*[d\$o2Z>]Lr2W\w醵q/dR1:.^swAF(g;\<Ǩe99YxG@9q.kXE0H\l#CZg*up]*ޗED=O[U vQ#jD,'19}W`s+cyVAk1OC# )1wϫFr>,p*"b I雅uGER72Hu#޾I iG.Sgc⢙X}ÙmFar Rp+jx_M2$Q3`VF +s ( tdQz sN8,=R 5h I_6^4/&/btm_JAR V,tIVsK8;" ¦<Xzg3xJ=e%|7Jr7#j",+E* zԗw3#fWx1A!$(í)k9NT2S c)XTn ̍fuYx!;TF2H& _PJcD^P[T J:lh9%Tƣ;P# >LGdtQD &ʶ6wJCw3w{H*Uml vNcc ǀ/2l1c? tE"r octxq^ʴXpJG?:PFvJǺ I`LeNp2C%H]R3HM9O6,ruBgβ|ZF×̐,1iᴍrd N y#jRO}\dwUQR{vFL+xlG; )1tBݼGO}G냰g~Mdž%eC_H^!D/}7}(U{aj=zէ7gk-XM/Xǵԁ4~W]^K5S&Ec4L7(ޭ'>}kV#myδe@+3ʕٞ$h>6nHsB֋D0N?k].v&O,XAE;$;}G*lxBpV(w\*:چ p}/iĆ O%*qk$hތzNSc ŸR@C&۟떱 A~dwQN4?bCOnۄ<$:w9%I^+b66)Y~h "I`( Q,hX9A{S*˘6ax{XvX̎ CRM*!:ҿyXvHzA^n6kN,JĔ*%Y8=H 8Fr6لLU{1mk dz4x$FZ =] lQ* 5b`H@7=99fi8uK}~@d+%q})-J Cs5Fn&A9tH3G3 ukg9X b3y/ES<Ք.o(= w #19D&Oir&O#&7^(RFм4*E9 *؃u@Y% `Ƥɂ {~TF'f+l 679 e"p9`__ݥR]q)]p8ϝ[bИ:&0α-@v~տ_v]Pi4,ܞn;)Xg?\*1S2#?%/{|:qb!ub(nR-axSkH#,@?RE G.%^̇.rʷ7b|^A[~bqӸ/$$Uf{(ͭUA!RFCH}a4 G7)Vk@s}5pl2PZ o@'j:a^lC`BOUnSc\LQbp B85CG<) 3Lwn& 芒z=haUu͒\Q-Qyf%rfmbXhbG| {r1 ؁L_?ުWM>mx*hwج(+7;{ҬG}AVOX}Gw JZzr(5ȸbi;a լ: VI F,nlO^WAs1Y}iUKzyT>UTJ9^TsoB̃AQ|h 266H9#Lg^tiYn% s6~McW o&x3wō[jck< -[s*I|*>*Ӏ 29ԓPB]Ք!R\<q1Joj` y]#rrГPOeVG[n§=x[4*iBձ,8͆.p^lU{ ,́87 ?"qܺd K/D7r+wQxGk?(ʡ,>(*^i~sqG /zh{=M\jH牑.@_?JD؜Ѹ™QyDzٲhG@_]7eK9#:9܍*IvHƦ(˾j$$/J׹sZS}2 Lj0 Ntb#5=ŀ,]O˃i c3Y!vL c?>T9맘XS>%OrOi࿈Cc@jLk1"8!#`%mAZml -zqpVa%$7-V.^ a!&y` qWo[jJe]e7:Kh$2-d=*iP w_iU;-ݫJZTuoۺbJ>%;2Ei!t撹 3ӀdX_*w"yGs[gNeݮcXti=:&fzwz&4-2E7آXVby^ߪ}/t$k?; hrs4ipn}KCtUW䱌O3ǻmUDMDj0W-WیPFJrD7"x:e3GýʰvDe: a0 Xj7hߟHs4HXy Ddkx~' [:$fe=\5F#0H$̋jșb{D*w}㔸hV?/θ7̱˧uςw܊3T ˷%/h)4#R2SW3hJ'lHHpwʳjhnywL9|rY 3F)(pl#t-Ku['7Ml8kCuԅ;YѼQ2y ^bh88-ϤC} e{.=IxZB0H)tXg;\N4G,SPǰ^]]Os\G}M]`΅u/K7\]=٧ {ɡ&7as8Yu>] 6M״e}ar* G؎nNxf;w:'5vr:'[5y\Yj9Dc TerJ&ɊYj-e ^SHΘ1nL&$ItvvpJX5/n ̣e g)U82! ռ |[T{jinˮFr=7:>F-7[z?u3Qt9v4n<皑|D/9v?~sq̢ke7ݞ\H5w\XWKF豠@ bhRr,sɂ~Ͽ{vÖ2?b5dbrHujÙBbbNN;cȐ 5xwڪS]JG!Tmp'jvQG+D_[đ(%䧓Ҏ>@>wDOIEcSΆGjUQV^sC*|3*mop~`&.p_M{AT"R %jqHF}2Ak^nTQ&"3 i"Ca:j/ ˘')&hKQxAXxs)x{; 엿Mua1XjcohCܟtpEx4N=9^nC6`ttGS-`7@~ (sBh5Shy+ vBS`9=?Rj Vnx|nm);=i4V!1Z[V`Ai/]9~8-ݺCtd5_GkRh1fWs`m-Fu"Gq&Zy^G]ZEI3BI`V.Б."9Lvb)W~T!xu lϢ P'lcn5d ]LYq_}j'==979*,xrf E稷L6aD`_)k >:!V ?HesS>ncPO&^WWu~O͒{(6Tf`}ga}t`ԇײN|t)$tw ]N2m[45\gm\CIoVpz밫MYx^AY&Y>HšUA)F ?$؆4;j2@{nzu^Q/Zځü>܁oą~'m&آr'bX#“ io~ImMfL RO~}||E2k(O8S)Ӆ#TkbuK''. vN3HN:iZwr=_čQo$+C-V1g+٪yoe}ɧz &dH}hM:9p1\6<X}F|.H7!бKe&9)FNRe7~ oxSm1W5Wל\J毸:e7['m|c" kF@xjDpCpΟ ۱_Xw0#՟;8Zu8QP)0M*hoX^A*)Z|V}|r=/̓iL'Ö)FVc,֫mւŜUOyE>\$` &L ;a~&: Լp$a[ :q0Q3Tx}*zBfR#NZ6>`/"ЉHh2qKp;ax+b[Qk: FImj}-uS:ݏ՟2TJ}K~|Fo.9@umYBs`?BO;XBkT=fgP7Yb,Ba.(l ;CҸWqUij"L 6'Ws=a` $qZ+V/ZtpU IXynjQRp}Rl(蝯[%E10p١o*ٶ$kgY:*p7\=DuRێӿV<{>fDICMݯFSW nاx>%~G#>7OEsO$%EG>4}ajEBἍB/jy5Q#YDs_\].i zivqVj. UfZ4}Ccы}C7T&;zPFD?/Vq_$8@_W{$$K]/@ Ĺjڶ~7+.8>n6.wVf]vS/r*h /wC6'T^ǴFc qҨS)*x[oH3,Z3ߖH[jtJ,bIkp)XJAM TK [pO|VpSO>mjA1"q]>lM0F^SovVR舛jn){{ @V*⩙JbF:~r)|=MaOR~nw m:N-zs$bw\KG},S=N>{z hd3:?0:3U6u@ZjeXm}|O'ߥ?iN#X?9>DG%;xh0"Vt9|KoH}ƇH3GBapO)R/|{r!_):e߃NaQ|6p[_o>gzA}16Y,OJ-WS`At7UֲMZb{Ux>|f7tȼM\gmtI =78;z@0h_JmR`+|tY=n>565`x{9$C 6/Ў.mCǨUwsXi].1Q=-cM k~ǀ${0`Jnu隦$~6ryAntV&?X"_U60C,߆-uٳEg/a:gP3 \F-݄J2\"PP.gݖsٖx ΑHuh1lK- ͧ9WT279b̫zs+'&I|:GlgoOh9xzrWޞ,O6zxWl ܲl>L-(1I#t~ǔ"$S C`.!):e,;{'GJR >-#d.&Je%hC0~D1D#Mw+;rA-Z֊| ,"8>>Wf^)^)+fl,KR}~;>sMNN]W/]P\W#=gr&*m_֠wWK>ҁCϥ rjqq)kzxф*8D8S@XX$4`.,%~-K NE}uY-u:tҟH}?dm8csIAZ.V׊b>;#gڿzg(LR">j2P CE覔 CbN gS̸WNhKnkUm?`5o#u8 |v=SIz} 1 kB-1]#14x!N807TTõq% NJqװGK?]kz^k5gs_G@ܨ쩐&1{|.y.Ax T~D4 v-7}7m77p@6DBzJ~",1dҬ߷4ۚ<5 d 8= b1DȾKY'4Vd4gd$ƌͬlAN$.e} }3#Umq80W -:y#F/"]~OnεHҶ6nK}OO^8wLJؚBgN^|qa_4|1#Q b򏏼:/#n!98\\O>w&}D ;G+ ?[ɰ4!XU3|(R)7,i0q//Uے1jqwjYf$}DaڎeJ{J#<'O1밋#5 /{[J`wbw1zK Y8z\9lyTr crǃ/xzQ3?,# x5Ecq<r5)+uz;vf/O G*ef. 秮]zalH<.,TE)ZVJF"a[Ԭrij.,a"|.g\kA彸ՌM Y;! .saJ"_rs)䗜:\Q@VGcWE.kIk6<n5Q7gfi: Ó#'ň( ,UH\x=N-\ Fd(HiF%scLQf ^,> V?ST5g0tώɑ ]3#od j@am,<}x#po"rp T9b`$#Pu%xHSC}r`D|}XJRٗd S8;:y@KQXW_(Pd#0uĨi_7h{&ϵ.h9CD͒i5uMfC] <4^:6Ҹˮ!C%Zv"u_n6q?@ZXՂ\GGbt9*G3Tm_8jL䞀>suUZ2d-:hռpy)EA'JN S{,@&ƓIe6qD& v l5 0'f{%;w@E:JŻ#jL?W!;ݱ8'> 1I@;p0eMWt'"1^kH'BQOaBA?P_PF5Uk4?63!P,'ebbSw(O4ェASO/(Ifћx>V"xP½ô*(>y3 &NKzKa1n2a ^oh/Dn<_/2*km25Azj𗳹P.)R`nߜ^8T]NVr VBU޵pWAK6tXgb&c:r%ך[8;&M{2I8fk"Lj.\A~DG!Ώ:1WVEt+5&װjX-"*& Q;9XM҈z 'B*|hG}H/7"%)oc\$<_! Z鏴r%P݃P=גk`*N!9,;!n=. MzFI_H#<)zz2JVACl5lXר2,@AI]NݝI[7Gs \"|\_l)w:Ԭ!kr U!RDnv*dbP EMFNs4B [4雲M Qsyn?c<%Tpsy# -"-[p1'"Zyg{m 0%kQ$LW87SJPmqmv{f# jO\kcٹJ4 ^ajbq!gߥWe<7A¿\@* \Լ U2~TCB(FMJ[I䒶Qnq Z %f3a |fe~m%Bac;* z}I-t49bpt&kY>7u!,pd A =l;)3抲@:L将hFA8 H[?{q"ʰ2[!+*`7Z`#((c gzMSR5x[|ty?lYuAk8v* F48D'U?ޯLRVȨGML'uG?&m۪:pqQcc VSx檈R#:#ӡ#)VAϝ6ʅR$:ۍ;׸{͞kC+O)F^RD!V m"Ogfϭ1ZZ Zj $8Mq~eeL[61^ IZ#/qӿFRm<"C8T7u]?<׎.@aZBfTH>zx1et"0sn!At4 p 06n E -Y&[ ѭRHn2dPr&-(t2s{lNZ7%1 ?+P/nѰ3{8yn|/6=,Cc07OErd9"~ަF"2h:nK^VzWq3 V*1k"VH+Œ@) ^jc@TE3?hrЪyFX.a?'2/@BnIA[3-X;X ¸GÑmN59x8NS'+kV<_\TԒZߗz.gk'%W^UrKg/FXBpO$KNIŅrQ @v^m< Hv/p/˫aw myMGm3x\a,FL mOlS7 |]7i6Bg斪~XǢk) G-/hN+Q/6jKQ~Vpw.ٴUٵ7KGFg^YM׫b5z*B̹/wHSНxt̹3 PtRO!'\}l' OHm%vBε0:n3`:=^'^қ ^f{Q6EHyt{+jSsb3C#KրǞ lC>_Ԧ,eGy#R]f>q8i"1tD RnwٯCO3;xZf]&|a î㝻?^kZH7WdӺxlc* !AoVAݯp[]N696N[tNS.vtS%;fD%`O$Ëd+Pes[j𰛹 `纬GT|ZƵBw?_w?.wE+bPoD14~R}WvL=)Yƞ?/gXOyrf ?56n'A6SeDJ:wEF[}6Sţ.P5DS8;43*[˶Qsl+B*={]-6 anbk2l2Ju2ۜ,ڮ]&C[@`CnZ\=?Ay#ҭWN 2"nLǍzte`0"KCZ;q 1MwcBYC,W~&dÝ8x78uqm$ 옂$7Klƺ~t,8 ;8h#CI1!6 a>0W~$,I} &NSP DLCE-ѵFԀ_d+Þ;&\Mޡj|\nVS%ڡ !%$L(N HNsa=HЧU%'V;j_JLr7V53L51qIfs7EΞm3i i wZ;Iӵz#}ʧ ܅Y!.#( 8ծ+dUPQb$y{97<ֶMޟ`J0!&"ZC)EMm[esSSk)po ?!%jOR/pi7%'v`K2leWaXtuD1 ѻ43-f8$GtX;FNNr``w2Hj2`sºW @\z) -1,5eԿw2~L 귔}XĴ$G=s:]øh WsN  =M 0:S3а q +{!@ڙZh5Z< '{qp^E\oB@vxC#&$2e cJ< D$g'zLQZ%/\Xɓ^2f⵫"̷:ђ3e/p$s +߰&Lg [s=:O[\lօw/.HHJyΌۜvpn-, h0[6@@(ix@˱Vc6u .F>mJJeҭD<햝`ID'Ǔ={mPab7~n8n‰Ft`^lȂ>ihafQH`cDQ>E6)}.P_0w'HSOP3sbG|,)r0-:uhAejM>XnÏ=gxؙd*/orrZbc!E$Ldbb)3c22ʉvy87th\74Mphe;6w1$&끼P-㍗NlP⤶҆m9 n \0`]/jXQC |PP6~iZvh-!$s֓:;9%<a 3婅bnE#2zXp+2B84s8#Hcӈp 5i-by񏃣ȩ# ejI= V/'4.+coD'xf,G}Ku|L O tWzn(\`y&5>w[oNKS)OF&qXAY`!6令͉ 8J d } Ԏ\S&_Ҧ+Ab&-ѳۜ%+LSWWϞ8ڄyFtּ"G> yc/4*cQ!n XYjVchЊ#Pnq|[ڋF\H_X5XiթDc(XmD鑏Ӡ* ETIăgJY }s  7/FWYRYy&Am5(sbPukSRaq7B96$27H[@;s>2#-:+iOx@aGxB>v4!sCZLf_p!d &2vHcϵzum0zM̨J\gӗ)2:yk|<\i/<>~YtN XOaxLZCש6ifM%\mt8vK\yVҥUh.N+L;)_@Xи+Y0u n;⌮֛"I(и-i-reDt _[P Vq|% cn6z.TZpboG&?7񼥑)E1)U pMDpMSl倹Y,ՇymA-{2l1,KWm}vavB< am[͸JuGTp0lcd:#[՞/ʐ'&b!ă[ +X{Yqq{JDཀR[Wpܦ8mꋱ+dRk&א=B}H2EHRCpXڸ(Z ]|GYHʩJ7omL>#X|p8)¬$#h6b%bX5UGՁ|kI-(/{7Oq5!L*_!zI GY6kGYI;Xw=1ebd2?$Sk2wЗO[*vN݌y\l@Qk7 ? ІcϞd(g{\?s B[?*rⰜJfTSr攓X u3žp0ñH/* ]ʼFZ,-˷.]Zc%(=]A :_NbЎ-&Q"֌7~eЙqv඿=mjv,6e'2~v[[⃤ӹ\ e3ki&#ڜA⎕wؤ%4'#xFi䴠jN^\#n)d CVtD0pÝjr=dJ8FuN<]Y}5"M"HoĪX(%wH+HAo"o T.'xu2!'*x&y-h >O]mO~Y8T7dms*(ڔ::Br ʾ@HɠK5?:Q>|g;^s߈a.e$Ռ}lF4/K gjI~(mND03gM.8$iQþznR%` X̰NrkM9 Զu9;EaIq6WEg*0eED,l+ZjKH^-|~*^_ӱ)8H,?wx rd~v]nW] T.œYdL:"[N8f;9dAs}he-%&lW$_A i0jhd;o< Nnzkv¡\#U ' h@/:."K]+QEVr\i ! etbfE\f狵4[@] 2WV,l0l }gs0Tҽ)zpmX-fukhοĩqC$zjq|_Niā{&!)S>ѹr'|t9_sL'u l}K n;d &DPo%(ɒX&9Df \Vj  m%#FQq 7EoP]Q njc8Br+ˋqf=k~[/ vr OWtw̡T͐l=@<:_{~-SJXq %D.%&`lߌ%M7q7N4P2;WT1T}Ftd41EF2.$dTFSU{ '.S*VNA#1rQ\iv({hL72dMm_7/Ld&?Hr'$/ c}CKm]3ocMY!Vg:wCZ#"M@^1h8>a܍rId:7%σ ZuuJ-U#AwO=ql\rd^D&kw2 X'bPa(4xGMĮX(x %oRR1.Ecx;ND!Mָb=D#qDP3 xH%oiW[7>XՇG- |D &b$*@VkwR_ㄭCoG%iDbNjf~kR؜So^v|,%Y<ԏkn!,Qt0NN-5/Y-JkƢ ȩYok~<{QnL\0*ʤ!'y^b_lsgnF%2^ۂBmH"3'!}f"ƜR?x!s&-wy, ]M!y<z}ڌpStwOtRbέi{w2.ڏ ϫ;Bc _w=kF0Lh@ǥN2կքIG-0HaӗX4q ()V$1L5]QN톔DQA$յ5٪vR@ !{v=UݚH {AK%4y}iaK:FՕr0]$)b#Gae\l+۝TS~ޔZXodcZqdA2o*>(`^i(t &Q³ {p"O<=핥X'ަjpDpGG?LSs`T~"쭾,"\i0PV~5Z}P,Ń3ltJ<݈צ}C 觧.1M"p<桾[6OWjj1/Єj_* 3 sx^*e9Tƛ˓K4c8)-GBuD.J.ȁ9(nuWٰ+xX>_;#%1 Ru׃ϹKmd͜м9΁$=eg5n]2ɤU$ w]ur#~5 n0~;V&U|̀"R ;z!rrO ^6up+ܨar+42ҁ oKgeXUIGafz1f_CrW&60@ׇX6vnuh0EN5\#%Y "x[Hm):R{D^[h~6ޣۡ7 -I#}bDEqc}K[lIu]WƐ嶴&\rf*`f'7\:PUiܪS`;|J xS*W'OM<} =s9ҹ3/9˓g^~q̩ϼ>}j%BjYc+cWQ8 i 85ˡzǽ._!P/+5AUF?/AѩsA ݵ]i% Ρ6 HնCL#nHG<Z1 `Xc$Kxn'= L,gR\\,3j64E’EZ 9̆-9ԎGWp:Փ6t9SMhtz.\2#SqKP KTrY: srފq1ӫf:gZqQ1JyT_(v}e85)-u: =?1O]u'NGvL c[^ T-DMtV6b;)6HAr8c}4^+~]F/sIH&ko*(4t*U1IZUp܁{a,\v naxZb׉ɎTk0zK(e>% d,\%_ld0!|r+ 9z l綏*tiyzb4 Jjom0em!GOgUCuRZ@ȾXn-U`\д[RkdţYҬMWG + Y*7;>*q8.v(}ht54ֵc?b1ިwf:n3T/y"7Pιֈ9}g*'qMDӌX&+5sDSݞ MTqӏd%‡:EaN :y-VF.~zF$d՚Mm.$7a3-0/wgPNexaIkY-g8< QJPDߧPr!X0bV58*)۽dRPC@>]Y|cߺt)}k+c'jte6kcF'~#_%Ky&.^(BUOKMmwHMm]=$5"~۽dH{j{;[0?qp QMuǶ: dBţE'5/G߼z}Bn72 ]L^.Almx_w*T(U+q{t_q+ ҏ[d'LˢMZG{z(D ܵy[8x/2m \UlT`S`ܩPe[HzrQxyojSN!$mamz{Ao{MG~ִ^ח,X&v7H%7+-?vz6m:? L+I=>II~%'bhXŒ38¾^GẽCa]P, c dӑN@_;}fViY\(D+PGCPpDu eD KsKC{(?<΁07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!! UK[7B "tbNrT _~  YZ