sssd-ipa-2.9.1-2.el8 >  Hd U]y,&` ٘*׌4+bE2 }[ r rtJ$AÞMI$ >R.bFYJ` Ûd bu!\wF.|-P 87 /O1xMv'QGh du>ahiA ̇@66?j,G_?N1xE=b8)c4s`9 }HT8_bOj?&Vٕ|"` VdX٪T[vv Zl3,$cIfP%lV,YKS5S򉕗N"BOݯH$ hO\%[*  İpYU}ǞBVjP:$wʂ밷TC(@_ (~k8vˀr 0{'NcKb0H-Љ0N/פ_29WX.Gu c$6i=yM4a820a4d3d9a82b06e7b03d721d71ded036986ac5513b84a65d611a9105a50d0ad647404ca2941638fe992b4f8d80928269c951f0302047c435bb50067306502303f5e393c85feaa8571d8276124e5c70f76fb874448fae147681da09cf90c8784fda44a27fd2b5d01788badf5a1435e3c023100fe8e78b1f18a5cb81604689d18fc5a2b2ec47214a8edd67db40c83ff5c00e7d15da83d52877c2849022f9a054b10943b0302047c435bb50067306502303f5e393c85feaa8571d8276124e5c70f76fb874448fae147681da09cf90c8784fda44a27fd2b5d01788badf5a1435e3c023100fe8e78b1f18a5cb81604689d18fc5a2b2ec47214a8edd67db40c83ff5c00e7d15da83d52877c2849022f9a054b10943b0302047c435bb50067306502303f5e393c85feaa8571d8276124e5c70f76fb874448fae147681da09cf90c8784fda44a27fd2b5d01788badf5a1435e3c023100fe8e78b1f18a5cb81604689d18fc5a2b2ec47214a8edd67db40c83ff5c00e7d15da83d52877c2849022f9a054b10943b0302047c435bb50067306502303f5e393c85feaa8571d8276124e5c70f76fb874448fae147681da09cf90c8784fda44a27fd2b5d01788badf5a1435e3c023100fe8e78b1f18a5cb81604689d18fc5a2b2ec47214a8edd67db40c83ff5c00e7d15da83d52877c2849022f9a054b10943b0302047c435bb500673065023100decd3b8d766b42177edb4e321a6bab81c33c4566f68984e504ee1a00bfb005eddd6acfad38710910f3ab1a568b7f5b2c0230526f481ec3e3c918a968c2d7d096af902064dd2f25f7307bec66685d98ed01196d2879d0fc20cfdc14518b2c275ef8d90302047c435bb500683066023100e5a03e61b3460c4dbc6b6528732578e8a948b11ec6a83ddf75b5d3f89cf63f09bdfa8bfea752fc364a09cec0eb33b618023100cee15eb1674c17d11b571e4d1bbf802c19c5ca44827569ace3fd8b8b986112125e76891ab5489620ca35488bf7879b500302047c435bb50067306502303f5e393c85feaa8571d8276124e5c70f76fb874448fae147681da09cf90c8784fda44a27fd2b5d01788badf5a1435e3c023100fe8e78b1f18a5cb81604689d18fc5a2b2ec47214a8edd67db40c83ff5c00e7d15da83d52877c2849022f9a054b10943b0302047c435bb5006730650231008e3474c25255fd5c6824358eab8c6736ad6e4be06489738dc5507c8bcdb3b95d90280e31d24e6ad1359365feafe07c510230247e6b337fb8b18cfc4c81e323e282b8e3bec0b88446ab1200cd1feaee0fc14c00d6135e3c40a62a81e04651cd5ad32d0302047c435bb5006830660231009b07fc0713562f36ebfea574bd5b0cca6302d3360f4938faa6bcb75c18cd3bda95af8296ea4250c93183a22d1a57525d023100ffea6acd07cf163ddffd0271eaf7a2460100fa3a832384b0dcce8e2548d4b846cbaaa720279ed4db0dea12b2f92485e50302047c435bb50067306502303079471cd310bf6a2a3f8a3d3dd45890df2ca3bef42f3662688ad6f935fdee6cc310320ae03b19c6a20cafde361fddfd023100c86aa4c1fff47781fa2089d2d35fff6e3e7d379a58315b64421d3de2e3bd60d8ee8794d872c89b69dde412f34d0a99a00302047c435bb500673065023046e471270d26fb27b15a787f296f9c922c14bdb21f1e3194b558c386e63c97b157606a3bd2fe6f8c3739d979821c4479023100dfab0cfbd83a0cfd8e66305acf8bc34b9153046d187adef1639b990683dcad7a922aa9c6ede4090cea31f5832cfefe450302047c435bb5006730650231009f554c8b0dd14fc1729da2e39887afd9077db90e20a0c4e701be3058b238ffdf7e393a1f6c5f8d3533db8de13cc92030023050294e1ecad9d338ce50f086f60e1f79f32546f94041d99433a2a32860a5d46f91df180d7fc33e76b548bf4143ded7620302047c435bb500683066023100e8b49ebe58fb07a34d7f42851606b6b4c845c0e3d6ed509ae94456b6ef786622fef56f5402b8ffcd5636224d07143895023100f051062143bb3ed5020a92693b4f8ba7dce6911fa2369faeb3f804c0d807986ab957391ce1248d0c4f0c6fe7e2fae0880302047c435bb50067306502303f5e393c85feaa8571d8276124e5c70f76fb874448fae147681da09cf90c8784fda44a27fd2b5d01788badf5a1435e3c023100fe8e78b1f18a5cb81604689d18fc5a2b2ec47214a8edd67db40c83ff5c00e7d15da83d52877c2849022f9a054b10943b۔d U]0TS/ɲM7p*owƀ*;0}sUУ恄Liu 鹶w&L*㙑 ] z s(|9 ^[vZ'Em2V侀QC,!y88Do[T&3m"lW,oyQ`RQ}ˀ|^W'>=贀!s1f9HѴҌ~qpZPktyv9Y霼Y-:b}yjR(g~6zm?<]ЄFaQtp ks0_'@7`X~@ ~1qY< c#͍' ˦]ۨ %w[S3dsVSo%qe#_?ڕ{S 7Xp+"?8 3+Ton')ErFN&G.S' >PD<?,d   4 17?  ( D |  $j8ELEKE(89:hR=G HDI|XY\]^bd/e4f7l9tTuvwHxyE(Csssd-ipa2.9.12.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.d8Mppc64le-03.stream.rdu2.redhat.com CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxppc64legetent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* ~K"( (AAA큤Ad8;d8;d8;d8;d8 d8 d8;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../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.1-2.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shlibbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(ppc-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.1-2.el82.9.1-2.el82.9.1-2.el83.0.4-14.6.0-14.0-15.2-14.18.4-0.el82.9.1-2.el82.9.1-2.el82.9.1-2.el8sssd1.10.0-8.beta24.14.3dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.1-2.el82.9.1-2.el8 .build-id84f245a0fe92d6ab98d223634ba7e41e365cdeb4ec4e55bc2400930a3fcd1c8aa43c1528a6b3eblibsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/84//usr/lib/.build-id/fa//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2ppc64le-redhat-linux-gnudirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=84f245a0fe92d6ab98d223634ba7e41e365cdeb4, strippedsetuid ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, for GNU/Linux 3.10.0, BuildID[sha1]=faec4e55bc2400930a3fcd1c8aa43c1528a6b3eb, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)66PRRRRRRR9RR R6R/RRRRR#R1RRR)R0RRRRR3R"RRRR$R7RR RR!RR'R+RR*R8R R R:R.R2R5R,R4R%RR>R R R6R&RRR,R4R5RR R%R$RR>bind-utilsutf-8e292d807f321c386b99ec1a6bc8afa40c2a067dade760ccb6232b2f582186470?7zXZ !#,E] b2u jӫ`(y/< ,qonq5bTh}}" t.'a).Asv^rUqYIKxTm M JpfMPAc&.9IhS2ϼR\ Iv)!Pze&X<nQİʲj&-$JAr (D1Hv ::05pozâpy&hK$WG~Nu i*dt[NoOi"?QgUKnRϕg7>,?Z6  "3%*t$?&IL"\2oIL%"*KT ڑ8ԗ-ⅶn?OD!OH>9:npLAe .bߨif"wárVZ݄6%tmڊ0|LtKT16;o /Pk3i/Um`Vݓ}.0+6%4O"9kLG4L19ґ& i4>1$#ޜe]Ŏ,Mz}- 6䴥cRd_"D3''!R(4f\qSLO3BSxAV!T8ThbEFYɅ""ctf)@n&Ovڅ扊hmqy w±:rQ UVyy}󾡠3ucPa$JQWv+4pyۨՋ-µG`E!Py%q p@eoNv)!C"c(ipƨV3A>];zWBeLӻDU1J WM4%H4UHS=gʞ{h4bC9K~0Зٍ>G&,ˑ̇C^v' AΑ6a[_+跭M+atiHuscONWE*"@&;eié`~"*dƅ=^Xlo }ЊIbC)!Pr.ơ^Ȕڲ{'8>0%j6[4#]3ߓCq5*恪I5DE O+62:?hFDe[W,ʋD}fL2()yˠK i(k#ݭr"jMr ,s̨lʟ\M~ϯ^ =jhCiSwȖ722e5oJ 3>;% IVa$mWBi@h r W+cpoڧ1.vgzh΀fsJKfpP/0Z=ad<ɭӮٽy?:4K!SOȺFr@KW> tR-sQ8{rbP&tVZnHmHgYH<NR.PZVL*MKB3j0%v³: T4LZ D1伃D ,u*Z ^s}[_r')tAƲ[L[]~tm!OqjfKmHjLoH} 1 $A?gʑ5 ᱴAߖ|0wh5_L܂Y.n" % 7(a]pU _xU;G P3v4ljIԈa*K k>'JջM˜N#$5z8*tZ+D( z|jh~/Bp?R1wlb@z\*ز'WdQ|գqi]ʑ6# [쀽}79MkA#цKu%YЗ][,r'd )[rXrdi٩R2r*W#'mϻZ"Old|+Wݯ:7xѪ6@ /\3srҚXoa+_m 2h3x'A#?5[ +JҵQ4SapKpqE'D3+F3@&DRr-M,S[:pl"!h9;j'˘oHXP7 ?7IZ-<-#W'j_hKind{l8bZ"/b^[Q<]XhDžcP+jGdQW4Hn]O*Ӟp9Qw[47?[Y$aWDZwo&ߏø#Aa¤ {Ox q p(`aܫFb0t%MJRZѰz/Pzev9_Vaίr. &>S6>J%e4u`XA1/ H{^|Yb%ؘ!хp[AsjYOx ԗ?R#S&`o%iyW^\Kڍjt0rrA~sS˽'93hEL\pS~ E?]{hzn( G,<Ѱ7rUu f`>Fuh00XI|UWxP`'P [f RG̱tuha< FGy1#Sh>PAW"(oԿ_X ڝćyr&O)ߡO a=|G*8.VԸW!]³LZ?A\`CXȗ7&x L"v_u u=Ly` ~ū-[5v(O8?fj갾a$EFbdU]/A0}\N/4h+(Ѝx:in 6ݰf5qdJ84pҭlW b7>ʛvAy!kѷ 2&xZ nڟboեDQpMD9OVѩFB[`~.q:3x."ts 3xLoIr}2! _Hc[4UatwtpEg|/K<ʍ@X NgSw 7YfpŘD +mfqQz~8^٢XMb1RdVGTW%M.BEWyWl;Q~(нT3ȑ8PS-H L&_t;-G,agCkOO,zz<FZ_qOiiҪbJj|!yknn'OK Tv ,o.^eYQDb,}ެ 7]2,N7S2`?ĊVYJqOkHa^#&-w| o?#nU47#k Ma!#iCE釔+xQ[CU`/E_3:"3QMZO:|(X"HsF8x݃8DžHvvW@ewK.̒>2MU[#ArW =&e4/CA4hxBx;l Y8@8LG4?:Ƃ߶ ?"~+-R92E{#WAb]1f(,L!쇛Oѽe#Chٱp7U̍`9:~M`ͫlY(!4*li3x(6ow=%eK1ܨ1pƩ2 2|Jx*+:3j+r^:Ѕ<:󷔟l >/ ?+װ>,Rq۾bU~;fW ]:j3/HA#߂=e50l(sy ѵD܀V7ai LSx{Z*^cXi%`oOpKYヘ.Cb& Ilun|.M,Ս*R!@|kiM M$F0o"l(h \%n@0L )dhdZx{/)NT_89:o(ONX- GN:@A0GqH/lL)C#pF^{}M4/@ 6J|E S_p@Ah*a`Wޡ\[dZBwGMM n~2E}5Ȕ5ݖ^\Fc喉ftHXO(a#^n3k(<ߔC5\2&XM߰ > @kSQًBFb$]*޻9G|ݸd -yGaDkS= GʅLC:vA=s~m/o{c@ |ObCtҬl݅!34|@RuiѻT9-q_D0j=tA_=~xBbJ;VXf5RUݍbx]X }~<5!2AI;C 4D?鬈!!OIY⦕?t\/~2JmքҀR+kq"մsVl~!ap=*bts҇aQF0`΋%  ,+l((h逗oz{DXPZL@`DuTB9!E๠&Y5ZD85LSC]Sp~vsP2ާ'v'P)Y_ B.C gҜR胦]|UH5ü;OzNsLF<+wAhfa&l?4!uRӲ>?`SXZO%lFx{EԪzBYyp:F/xF\ɱ4ނi "@)fKk kNND $ӎgfbծQmQ榪v;..|4*ֱHirwfJZXЉ*orb\u6q$%ҖoָX'Sax[F¥J! J3>iAd+ +ɉ?!;÷ӁM (Xc% d.:u4;5]H [F+ (eTTam%o(F<' 8"T}u]E %nB]Th+AvN`EiK﫧a摨a]GDif%$eȃHDa7 캰#U0Iu1oR7f^VV"%.8IV7%5s ~Xk9HU#E%Ž.|RWN3,=вfNJ:{vyR'83ϳdZ* BT'X?=]q3E1d9 #aJzg /#G_}l?)nfKr NZq.!Cgnu+ \q <8O̴8t[9¬~0- P+h<-.P;ʁ|-~~vѿ\\-Z P FIJf@m8H*2ؙo{ToJ诟ʵ`Ifڛ ɢc-FODei;`&ev. 3uˑ JrD1xz?<ԸdWdG?mWty|f17D,H9ܓ ha|MT=T` &!D^Épݐ~ \Q,{`7%!([չF1ET.DkJcLI|>ZMhs!8?<ZϬCFkk {e oo{\T`rkt;<8!Z:hĦ0a YH|i&}i'sM4Ifcq Mvem`,Amm }~;фdܠ6۰u0a^8)F7s}&ݵf[*t~Ψ30Kqż^v10+ǀf|vo3JK1V^XonK7jVts[Kkwu-pŧK)-Amӊ4w+ fd>ٻ?$OƛpUР]csmFTRꌩ kɗ`\Kv*.H晗wr(M;^!nU=.7 5s(?z :(£*MU6qS<'Ӵv1>9n3t}IS+_/Fl9% ,:W˼U-Ň1=5]r%[1su@@wNW/zҖPvii!Sb=Ѳ,h Gw`RC3ۀNa6;, OP|G$(V0P05Y-4 ]́I1d'2?x /|lhmze p:=^6 ";j; bmRG?ba '~J9mb d1r>uN$u, .7Wp2MKE{1#[H@~CxZҥw]G~xfC+NGn|TkTfW>JcN,,C,:s S< I?! rIP?%4nIa$;c&3,#('fA:s0_:nGX>/hGpf\`B_ b"y&JFהʟK/ Dmʗ5V9m 4@z|;p6G@^k^:1OϿ~]xFf I%:C,f{G<|JiZ!kofiSJW 3l~O8/ҡ2hm7O`[ c͊:j,&$ zO@N* EmJ;؁d&a9\e~3bӍD(c,&o5Z 7C 3i'+IٔF;'̐6FP!X S H^00X(Y/.NI^%̞TMHG13a!烁 -so=,в.7{FУ$STmpZl*FZL9qٚ2~?(ṰɌ1X9 n=?XOHso;K+EJ蠢xhV fXԽ20CzL VXWW :c\0{ }vw\|+m落Aop,."|6O(Rj4op[odkJ^ A/aY=RTOL߄4Q 6LkSF2X}Ż2 ƣ#n_aF!a[KLY|ſebzVIBoW^6?A3~iv[ia~1J5VW3d꬀H[7-q!D#9odiGcxaN ͫSq˿:aQt0Tg7c' ~lf QdM?yEL0`5.'::?gr@.ۊZd I$jHhal2Ü8s"!;[0@OGngABxA٤f?CDUA?O8%G$Xz } n />|)>^:ҒT?t/`A e*.''mƲC{dmNO5~+F/X+ ,`]5 <^FƆj6jHxډam !4iuѮ5pXn5p7K?S{bDgk iUXh׃ _|#~k ! Ȣ|& =4u;#]P}5|ט v:O b9qYjcjsc6[ƚ+hs%^ʚ;}YIӎ^*Z]=XߙMuKiT/}7zx3YO59 ρԢ2k] >~됉iX1HTfΡI#e ?J,09O,L0V"U/}17ˬ,+\lظ[㔬g.s8plTHYa.RWQYóE1ε08f[ظ>$]юyu1C0큩0TV"q}ԐQ^V~6FύfBs80㜚&O:ze^–i _D,O qa0 t@xۿJ"C$kqQ9Tn 2Ls1i>H ?ӣ;ī4J/17S"7!N@iKEv1WB+qӑ/eȥ9ۃJ``dA11DgUUѹf8\#~`2ǛNhStQr:͛ށn(+#Y 7o}Ӳ -wfYps#b˪QK&yJ墉_CaO'| q}u5 sGJIPN[bSZ^vUpk ,d[= ^M1;wQ]] S$LBdY)Cj޻yy6V[zA^":*=5l.d*~Z<@ȕqz!@W|gy0bJ#T2Q4{ӱ{nSoԬڝC3vB=2Q)lA+CI@kF;+O cČEq& VYb8p? ".㸇fzyS1&x绶xj*Jʾ<*m'WrkЛ2LP!Uk =p%(-#܁,' ! ~uvIz]s,&A|B]Rr`%bDA6PP8U'/Rx_2 mzIiQ ܣ|ʥj/"jKeuZ-gX*]H@evC9 y ƒX@zrµP=2rk A>U t.T/7;JE=HB{zo*n0-[;^1h<ch\\,wy)D2fMK LdzIQD*Yo8a~ς }J# u0ŷz*d[yC3ft~ MF;Cuv2d?򭒎R_ZO%3tdYGTP)"2GϕmP:pݭ ']4 ݂C, tֱSH 7: xK ;/r9: <5XRu]sE`O+=1>AQ~Yxl-"]Kti&#m1Ng%>C.m]^׾>[pi\D\&@F:9h [awa4 kŸ\o-0 dC c^ɺ/:DKR=b`2`A%ΏZ7sj;_=m>ЍTkZ:R/1Z[7+:y$|CCakVp<qri4f 8$<υt=_2uK'R 4{~`H?<PDzjWtƉH[tm4e9௎Si`jg:_,*v{h@)b;m -cJ]/#CBJd ,IZ*Kz8g&eEZR~'.0_=y-SMܢQVb ՌL%IT;w ^܆'NTO_=Iy#XŀN\\^s- &:|[Ć9 ʽ/] `+$6u]0At>ɎAmւs jXgqI*i66r3㌓3ĿӚ-!7d 8Ӵ})kHF& \!5`F3~}@'IPrw7Q7 %g'cOCYߝ^+B<А>]-Z.u{^1F ?F |YBh1 qEK2]!-bO’JweYxG O؍(#|s^*gUcljO3cB0k&,z3 8p;A :>l#*EA ؔ.+L"PaLCѯP%{n{BfFq_c!/Rr(OT8cO2ShzƂOH4 j7.Ӥ& Qt7xBl==\${iR 6"\; Wnj01kmV|`0'.\o5jX4Q{nC3A)Vm Қ~)o4lvBܱKqz lH3+:lAkm& )׮c$(,x}yftyn2^1n0ˡmR{hд"߱]>/FŽk%~V}r]4>s)6wxn' 2B3̭f&΅b&9>we#qVBX_Ju4Iz8FFh/ZiLsw~n.;->."@d=qi5xmeW )$M*(kپ Z|~9EY/ԮAK[XU$;ߚPLTC K| U[ِI7 DE9 N9-_u;i7z:|ouCWQݺua]c$j>9t|KDz{ֵuЅnY^bUɡƃg voX'0+U e{WY PWw=zTծ>Z%)tφs,%JYT!ǻUaD cF!鞡KXOϼhyu 򾯸}{Ǥr\RaP%M$w:Q7xRo&~k O<ԇ-+P펇 q#C \ :"2TmV^oK.]v\ (ۨрP,dbp0OueB4f_AHƥΑB<ư`Fb[~~xHIі:eޅ.( i8g '߆L5BuOO)b`,zbHJxo?X\op$pct|Qї|8J2ܤ<~]81W究}w ?X7U21IܪV]Lp̓kL.Œ&\'C~5ì"70n#hEq ߍ %yxpudOK.I_Lps(+2hU:iaT8+a].,KsI+{ dp'qi 6z|O1!OrړT}3\NXm{34)aJKhr:e&UXt 9Ild Tm !.ͱKӲG;{R< 񹀆;}%"3vM uihdCa{@>j A#C+-% `0lE&ŖُqO䘨_S؈\Z2mF ̳ߝwŵ[4 7Sˠܼ#N=YW'#K>q5$9w7Fqeyn/֏"Iw\w?6eH2Cx57m;sSRsEx.ei`hv%Uġ= B ` 6>V7yqƄCݎ%y{7U D_ pa^˜A"CkfkUx7 2ITGPW 82iKT38ÙH/>ښYs+#Y'ۋhGϩ; qaj^("P$ fؗ Na|uIXVeN Z PWއAtLm0 /[1zuI*']r6"ZloKH_[n|Ї'DZbjrnfeS&ӪH7O߷L:0k_pEComrI7"ַx+{XǑ#:~Onq.8P&ߗv> PrN^׎D9}mL]5IQYS 2*-A%3Oc[,X{00 @?.6"Ԕ(_! Q"P STŤ*_& g~K)zJcvJ9"2SBQBS6菤lmz6$h itSBB]4?9SD@yTRYe EfF70r~RH!U ZFƣljtbư^k!T;I\P-{'xQv 89m8 ȚAz 2LF!psUѿ[㪟uXBvu)#Y H 'HYߖgɵۑꌀ8UCWψAXǰ VO@wa6yQ۫(dt,53HTBQb8?f'aBJ&+0) w5J8{BDX4+6qrˈ5_XAy"324i(L$A +.D&u[|/mRrroK7d*/W#+LĮH&`9ozy="hQs eIW~6 7s2K䢻[-buݨ)_% O.ՁJjSu^d<Fp6y+'۔/١-h'ohbʑfѮ}@Ԝ J; ۱ƤJᒒY (ԭ$4⩶Fw+x +Lqؘo`>9YI2t tZ~e0̛E12GR.j}}?4^9Ƚ MAvOΖ~ # jH"/>l;>51*ʽ'zqx/|}&35SV6f90}W]A-C(׮@nnR0X[ݓkl+.3hqa9I)?$w\rLX~lfъԘ_ ܴj6bEրG?xmװ~ݑD$ncܟ*A5DZ?dNVWN6E7Z1S5"_~?; lGdM+:\$V24p&( T2= ~ DضѦ=h>#ygCQắ6DJ5dtN[NE$1ZF{9ɳYȜ YK{2a9]Ň;8yȆfl%1N3*W*PzJR>Q0'FRkܵCrL~B`(ƑZQ$oB"՟S"@XGE28T\J64@2 Q}ANC-3mOʯH*6gxLZR ?)b LCz\չ”lP*L6/Q^2@*_Bl$WYs ZCUD@߷քMڙx#rų5Xlhzsڸ)S,ߛ>ϤsFcAhű/ OǷY[Xr(OCx\D $Gߎec䏨9`h+X1&2-z+tXvLM;[k]C ~pu'__WY REL?]^mi[.};`]l[!0i1=eSe}@4 +gOpmI9(7P`p op}?a 5E6^6CVox!OIq "I< n3x'GLh 3z#ْG>4k5]&&ȇBS8Zi-R! ]~2*t=^mlKu:wu%8FIS8?.%Ls /]K hd0ߨ\$JmDU>O0?Ov017ψX[`6R}3:w ,smg 95#T#ִS#Bg8}cB)#lWlP?6WI.a4Hr݃%|<ߗN>6NfY!ԐEB<nXlW4NmiQtus"ђB#)oGҎ)KUo k;܋Dݷv*S=vWd(1~y})uH2lOop?DQYme ~A%6PM|-L.lAOQqufLeo5m %Ey Rs=$; ýyObJ;&(ѡIξraߏKOb%џNcvRuĬLU1"*p@%1$Ulwu7g0̗β[ovi4FxT@AڔW:\o"0H{@$n,½ +dpllEyoe ZN"ff Я1TCîJ(_%#`J|& [ꃡKSQ~+:y01HZ1tQoN9]?;\jS%ށث^]/7+؍' ujriKU@4뒒EX4QBޗ|*DSؤljwQY$*uQPӓw!}S"VT]b Z ;՞+]A}_)31cdhr峅:iY3 Lj[%y"gfj NSwH ssjB>O)sgTFpoa&彑X,Qk'༠\MẄ}(TAL +F@]#lŨ$"Z5_ϕ RP#Xl9E)č_cVu0h6vBbF`lTiGzM l5xg4mDok9!2`[pΡb67\h$bc C){tz~O%d%P͔*,;B8Ds7&2w;F%!=P.'9᷺@ZMQ凴CI[i8{c0^8/k~𵳝bbIXTykF{rm8G $ X1[ꐓ>sHUEf&%ҞciS1!Mm@cAz~;Z|.,K=}P_-(<(,븃 <9Tݰ#!AIڤ7n,T 'մm,|[2qbSsC ]AtQq ,zݰԌBtwy6⣭}l΂Mѯq.JS2 zx!4tHմoe1wd3di|t.yCO[Q^w|5}4#C-/qWJKؑS!<ۅp$ ٫/@rHS8VtXCu#.ʅPk`md2#K`-iۘV *YD%0!unSf#Ut@+ 7h3>gMT[sb%hZ{,ej%G%A&شm$R5̙''Rzb2t+;hzF!v~M @j(+ȭ=a*żw BKx 8kr( J\[^f9^XVˀ!52eV7燼,lm(^!JhL[yA9Ѵnu'f74>tELgW-> =IYϤGIvUn4h5ϣO0 Co,9&ENi?A|Qv&s3r'1-Z~: jt;tB-fJ;XʗEd|ӧͪ Jխ$l.m+viq9Jz -.mv UvI\-=[q»\{3OʻB)۔?(C1 |{+Krf J=3 S(; RMv^J޷dJˣ~\e9uǶk_G1l^<%+ۧ"5Ѯ2 sǩ$SM k*%{g'G?[7.t\N/ A~`HL:eQ_4_TP KģzߦPuTfnak7l{zm/EL9 iQf|uIy;&1-ﳅ@2]2}VHOZj[߿ݲq=vmr:!p.zİC;0N֯@oYbAXW&-fp3Ϥ3rE9d)T^,6Ao5BlO KMWG.3vm`NRP߷7%G"sR$EC!#nV&3HEc_TGbt-w\Rf}\mX4pqٟĖݰ9ncJ;)US;(B(thL oHfcL 6f { H?pH;ۋ$&ĕ$WF2.PB"} cƒ?IJ$ yY^QxǴD\M_",YH]Ntڪ*w4/oI/߬&!x @䝪r:tS5Syla7B#$|wiŃ0PlD$x^Jom j7+1*F!\՟9A$ MUGYAS䞃Vw^q.vpթ۬m"W> A EjLZ`:.[픜č} H7̓~d9^m"s/[+}=# S#wSgd(d.p!Ra_S!BÓ+$ܓi{G4ѲVc7fݠ'8r7i7nF0W3!x{-!}j+q;4KIM 1뮏rl?)Z/Ku;_B[U U=Ow8\_X6ky.#7eR;(uuAS5l4%ro#KXK_ !Ǒܠ[x6{yZ[2xiXȰp1&#%ۉZ=AgPȑJnSQ옻p"N1̯TqRJMdo/JfK-O2Lpv_JS _[2'Jw"Ji 8[- -y? Gx˱sƜppXS]e@5x>8"\P.f7?XpoORW؂6>2-!pFGbNt QSZ(o|s7DB`|PZMD'//&* /9@. YK]},iqZ2J16%&# NaU6ɍجz[ï.N#DV]f]Bp76A[gĹD=\Ƃ>pjMWn]Uȉ A}= !VUgkL?QDP3^';@改J 4;'% &Ol+*6Y= U1Zr}@Cq4=F@Ah4 1j>{RaJ3.jL23B=1^)W8`r=4'Rb0?<66E#3r%ԝW6΂Z͕x4SdIrѩX !xCs52a{} $';JYs5gN`A4cF5{Ce0w8׶k>N, 8Fb0l1b`qRx_DR=>6ל CmyMz^(!M MRwLߒŊG=98ZAP7 {KY"ո8>!mA~rJ9o1|@<=[WF[{I^4{p\5u7ˡiEԷf^&4+Psd ) UOR{bEUi'N2e } sDN]}Q'|x!!}Kpv wJ 86`(sEc Xɔ 誎!Ύ|jlI"]).-#J̬GS-2PeA:l' =F*TWڤRWj ڀrDh2_2J:a*GsbҚΖ+/Jjx 6 DuԪҨE)3}[Hw>5ؓ tLƒL`ԟD[%.Of҄&YM>Qb݂6+gtͪ<ۨ[~ ZAZFLᡑ)J2Rp$Ό<\L!a02:nZJCOhukkf'+xXHL~&s"NhK[1R<=Vk -$DD Zi#Z(]o7]:ߖSG5s*CnDLE)e >Ί;x7L7nt8]&]ȗ\P(MzvŒQ2hҝ`?za18>W]vq\IQ˶YYʜ<ޚш!D(ER|ȓ<.cMJpf(']v|=Ie3DKOSxO4pn`l }g5>TiZ4-,S)."8AǠCZpSڣc"vm] Zw -!xo|ljޚgRT!tPUL{v6$q-NP[wʩ}@3Ќ**<+!fTK1iX&%{"w厂bʗ¼TQJ(i~̵D'*}h~ W F v5Et̶CN@{!IbT,Xomhgev*;ì|ݔ9b>9ٿ|P'3o:."5!xu4,r*"@g`<\#kI kR2|C#w;yਇꘓ} !ŰQ,vN1T1?W:Vх~zL+ig]"E޸?C\[OqIu\ӛ2S~ 1A V/0*CkGUS{l?~/tG7x.1M˸1v+a8Z`t1 ﭥ{#KxS_9]4}AVww^>^6G)ܺil\;FG2qT`ɈX aIxs)`KKhp!;~4ID08f~lLnZsP!ŤxU.*eed fn5ѡa3;8o={ jy]wYNqMˇ+q̙B  yy]+ _6l2+tb9ܣqy%c5jcӲU g,`BVϨZ'{Xro8=GqIGBH~PTB{oL[tiߖ+ e +`.^/_giiquAK8aa 4h`kѝl=C-s~ L ,E-&0,ƴR;]{fxdFE&Q( ٙJ a6 \-_`UoB:K%.3`WMO 8\VϋF3?"̇:% m!j͇&s17')CɅeSXFqǪ$1\6O6uIu>F{Yɿkݛ%[BSr~  C!uS ˻lꦘ̯S+_׍70n \?'K>J#ֿQdxg Ӎ܍ YbUJ_@2aE=ޚ$&zw?wz נEv?68 o;w3L6iU@ Sz~q ߴ(!JT\لvNظ$]-shܢF *BM ,w'k$@:'ŐlP+\(2'C`vVPn%Td^E؋NZWa2ec 8L6?od7&vIm\?S}F J`.(g!W&$|0)=N74Q-}p2S棾SrnK#9CΗaec#R>_L>%z2m4~"ν¡7l#$mqe .oJ&(`챿 +|(%qTwzѨ =EJYOwǁZ:?QqГ" ngŸ:>cUbF;_poԌq#gۋY{l:쇻ğK=wp}gJ4+<ÐWוX~'H9 )B`Jd* j63w7ZK扰elIQ 5eһ1)iT3i6 ^v5)b&^ [LJi|&{*1[.v[+¬UhSvf0|:xo^*VepnF} O"WkłS<^a3J& `ΝZ)L1ԕ}\S.߶ue҆?(b31fi`iE5<[?s#U]>sNK.AjIj+7aTeD:2{ۿ }ix_;Iğ4B(P "vKÐ. B8TNf@Ȏl %DP3W9t@A @=2@{+ckZ1 *>bLh"ƾLq<58=,L:KYVOM;|}Kv!|CgVC|Q4_:}j wΚ\GU['Ne>Ξ՟%W0}Z8dE{GF҈}"ؒߋ֐Bp /Cð镘s̜ :|-t<'BU, lsF?}a|ެ۾oblSR+bP\p?k?ߝh帗IlAgOp飁ñqIOR᡹sHdb$DҍVg .jJP  H gAPbM҆=*?ɂ)l|rmmTXn,׫QV1 ٫J$oLJB'"OVv&G?kCKZ*@A[=HP f+NdE2BIA k/hN-n̰MhrBA%g(AG@F!u8Ⱦz+0EZu[%̱X]cE!WLTK 0^rꭋ[*bN ' ۞): p p2:0Qo\+6*se3”<5JiʧRn &Dn`ƒEyd+K{$j*DvAw= Ihclx!?UbVEy >_loM6x&!d=ՃW_J%VYb^; POR&\ԔGCMP{s% b2"9F5 ugӈU}:*Od?={IΗ!UjU& Hy%(@2ܳz/dVhC~iFµ!}]Lf#uf]-e`AD7Q/jASURyKXh$U ng{Nsm־WcWxe!#Ӊ.1t19ޔ)PrB)bF14U i:%o5UwN~ bǂ}2"2F~Aexr9)<15A<#p;dYoyiK)H92Q(/_zUSP!pe;K9\-]xsP:m~.W@PpSO54{,C@P`"N  b/z88jFBvC\E0P;Xx’2\ Z*Zx5N9vNfX`(+(NRwg]yV'> qGm݌LDwlWZ`;*DIol^nxAF4G|O)狢@ºSwΏG:U^[c{jDN+Ya}fBZ>ڕnּqa7#h *[B(jৠ"]{DѫM07z75JqVaW>(1r;GmG?QQ ?K\o10@>25 o#Ʀ]B50Vt9q"w.y+pYBuLg8qŨe*ɯ{q֙PS 6kkk)b)LTd7 ݴL:uco$kb}*$|V ₑ'.8lI^J.ՠWM52 :H݀D%6%5T0.Ń[/20(JXNql\J1q[RbʴxOigD.Yz"SdY+q_Â`DT @Jyf5=4CLưE`PrbxJF&& x^u+ l\Azs-& >:"q nbЊH&$ 6u Pt8H ncaz[JNব6E%lN$D9$G-L'}OPw|bP~9ݎ{3Abv6DZ)LeyCk7f_zQބvyl7rJvO2Ch! )<]M KW*m`9]0)?%umtqgho5"usL:0*8V%e5(JhOB '޼F`a':peģpA__UD{cIs+˜Q 1׏u#%'umV5quk8st$uGOG`j[/zo-^W!To:lelP.w! 2T%kG*J#7%RȮK!V'P+Ʈ?7^%{:U3x4Nd0v9~-T&E 7k7 @2O&k5ErhZMY 2H[w|Cf1iK5{`JmdfOdZ1!ޠ-pS?aU #:]4Hѭs8m4Է?惚SVӻdF[w!X8զge+8ײ!:b&W=0*lA TpwM妘oh#Èh}W1>c|~:E 6xok+HK_6WJ!rQK#k͝Z!"u؉fœR{ڜCNJ~(!MB{JGǻiR,[QZI\3z?hM/ ,Qt@"@[byNN?i&GMuFd,PɚRgSG f|:48* +iJ"hoƭ31k0e J Lk3s)9q92iz5!pT] `0Sz7B5J%>Sv~"{T9Ѝ*\u ]/&nOP* nvO)MKL4 L*U[ l |Rf&^HU6ȦvC9&{EaO8Q$8)Bd3(-|+JD'/`2ŅɔP;VP(Pa}=@$CMaYWSpouJȫ NvL!<_HK/C=OP.w5&.ЊƼ㗅Hք@fqP,#[];dYof ~کcڿVSO#E,wfU u@ ]M?&֮6j5׭8f/-VGO ,u{:5-.5E@_`%~PI(}$d격4`>n(sG]&hv;U = Ndʎ0YD;hc۬K8xc%,Xo3k̠7p0 PexAtǼtP?5->bYܛO it%văRgDRabr)q9(Z.r)g>l m 8`zEqy:R HatR^qdq;Iq[f#[g<3t)Fޖtܾ>0ymR@E<h# 8k:جJ7r ї VTpNV ʳ&,&Q}L.[=4Äef#4 Lu^i&VTvbw_i4Y`+w.̔rԎRkD^_ .U >H}f?Z'[{"!#5GhnV]pRҳ x'kHV]zb D+@_Wu|_к+ bE' .X|TWC6D!ijkxǓHzuv_Im7#Y?GE7;mAЦBo>4ha39F{H~ ̺Xh}p5Nk܃c}Xu-%3cxWI}F!)Da|3`$J p8G2Wl!nǨީU+ܙ$?NPVjtq_so9o O_g ҠzƞrwSA/kTFɆd⹙$~4O:O peF+f>nЦKI;!7`yA4vEM[ G]1.qȎbFݖA$$,x_/"E٠=CZ+% \4\oY")yX3L{G؜n8,& 55)~Sه,/DQPXzfwm y"Z~cM RZLWous5"BIjr*c,ȕ4[>(숣W#n6Cvͱ0iM$*/Q5U=r(ϼT8XL[>oNIOrπ"nj u^NTrPgj ?,XRz`#g.UbпyI4qʔ7+OGq"zBQ T6p )C>O*#+W|M 'Sٜ^MŅF?]e#,DyEpO2u>3ĤAtiމҦC* ,qj*hM7%0pலӂ؃Fdg?Ɠoz*usjcᩤKv;'+ᣪh7$hr@?פ@3X&`t(^qdۿɳMa!J[:@)(9˃ܺy11 a/윒ӈ 3EUҒjl;gkV@xt]{TP:~TtPU;v|Ͽiu9Aê@&w~$WR"vFf%E.uM_]&XH/!:_4eAY6ʶd0<`#5ڡA&oAQwנۧS 4!'$ZP1>"YmK³ $pM_-D7iZ_h`Lb49߇ r,q_u'Z~-sd X) Umi?? =ncS"~!rǹΨ7YՍW'88Q \gϬyz^Ȣ2,Tyڃ[D6Y͟yKq9) [}Pc "Mڸ jOmX=\3⧑f~ː&C+vq|\TqD~Zg7B/'pޕ_H&WYڵuCFXwȜ m-=gZmONpR-PTEǧȨqmjvzMxc5# qk_𨵂^e!FKJ:'䰑Xq?ۺy:OQY$ $C1A<S-'E)d)p[cQd&3R&dX+[Џw!Я㥆k(e+JqpØHIs6vZ*eم(b9|?$<~ ^H7> !rn-pDt \OA H/Ӗj{* U #TlڙYhF4b{uJ؏0ẓj%K*p%br_}֜rT1Pu.kd\j@QqLe+ ZT2Yكz_$7Fz-0kb5id$@qurjMt184q[9nQ(m0mrpxs0Xb[O YGM~c;{E E=P* -f.-+"TŠaBTFQЍri UAb[O1N-ӹȐ -FN^$0<Fы/u&zXTVpjj_#7/'jo/*0p Fô[&C2{еh&_#~S_'*JQQ,Heܽ͸v\ADf#Ѱ;JTYDX-f΍]K9|aǷyJ]P5/]sE6꬜vN{q9d67j:}gT;Iȋ;ޫvӈO i6pJuE 4i/N;+TmMƨF[xVJńX9[,Q5w G-j,HКBXp|x*oz3!.'SFݨ`,Cp*|bYeЎ U@kxЀ~_ݑu1{o! Dm ^l =5s姐Ut*C%:N9BGٳ,2Zlߌjx_eOh#Cq݃7?usҸ2` ӯ1a.g xJh~\ Fw`a zo?G !Cq͈X`*᭒_#D *ʧO:C?XVvOy`HW隥g {È@oZv5Hf:q}h3ԫxx c^;kGl [sxd^^ ^}ŧ_@;A ;M$_X@# %.u}d֏I0ae'}g2,1Ѡ*Á:R]֑N$'5rB w/9tO>Fb=hYՁJJbrus+c_t:EEݫ@>D PkRyoeAQy/6olxc ;^roPR )ʪ] ŽS"yD̑;l ؔLjp|]&Z=+yr1u=ߠ׋zVM$ߝ/mج|H5m 6s&A|΄KUc| &Јrr1p>9!)\e'ikQƙIor>#"难,V`p\dTQgb!8c} z/I#wt erd&/v\{'q,jBn-sʌ fU7T4_ l^e閪*WvuZu7jJ !_R/o>dF&wj?[#ObRE˭R3[vB$NԬ\nS_W({ɧ1LqW~JLF8a3(׋(]=U+7F 7[aKw f@ Tn'W[7}p|+Dio\a`e/o ƤB͂Y&a>SȜ( nڰ9Aӟxg^h 4nW=>}êUW^2h6DXV9À@niQ2.k~>s jMe㮝UF2 2*QMtUH-%KUG$rpHDnčc"?g2] 4#֛o }J{@Y" OQa W|J,}Se+X55rĹ`\J:0\{!g$1'#U@o-;Ӎ4G6՞C'ٜ=sPDbu| k֜7%$fJO-1iS>$6Wkڢ YOd" K%c37DѠ[":%MYǟb8!T V: >YvK4p6T߇E>:Sa- Z2pAi]kTrZ@H⮢D "jϖAg);NsG螄'4ߊmWk3Nur4k;LJiҜn(uh5U5{h1&^| K|#ei ["\ģK`mЈVv9_YY5gJĎċq#:f0$B_)I˴DPVV !V,p'-Mk =sW/PEEsMH1@~;;~#@,H%Y)]7^n&}(h7ap]b<@LuvoՓ- )_[!3Dʤi).P]5An1 G61[E]2VWbXg oex31fwiᔠ<+^cCCKs;jWH$ÐeE:m @w7Y ƕf/;Cb-_N/TϴiXXItTM/ɑed 2^N\i<͉uY< FkTqL_i/q݋o@ ɋ։0zя<.= ED$ke6T4濎f#>YSp\b/>vyH78Π j:jz t #<[ =uCMNjđqB&E2g}Ĕ( ?O.ǠKapd<(U+Y(td[[/L%֖Ip܍CA6.k'5>tMzz:#ϞdG$q<Am'Q31p(fvTjMYY^H 'Qlog 27o=&]U?54`V*qhz@Ad%~D!S@G*Tau348&W֗b7p]]d2Tgxb̶a^Fը 2RB{Rn5LMe62ו[{'9+ fY`sKLEOvBշ&!C߷̽7YaCBvAb=aAw45гE.xסC£2. TWbEa @?5J&H?,vtZ6aM6HtC҄iӳ>b3áВ[wC"(xbH/8)JgC?X)뀓:*N GJ:gm+9Ϗj˵ |FJlm*rsMgq`0! 85SȏF!3JҺ09+)Ӎ'\:N-Ȍ/ߨ2glHdg+_/[ 2 _'te|ޞ_" D n96%J 7Ab?,OF ܭ+CpQ] tl8Bߌׄ [`/uȎ6| ?Ļ@MwZ|~ YWwElnrDQFY,wCVF'H$=ZE/qAh;rߛ͑Lol,+eL ~)a"caso`h lI[ Uǂ ԿzB5 >޷ G `t;S70֭BD|q‘`dGonN- 'o?1ddK2;_I&S4#N##2j&EK dn_C"fO(׏~u ^0u焿D1+xH[©(Dϑ 2Ղڿ/@kgQ-HԞS^([Mf=uO98[Z[ F670@KJ{ǂMOmih8JEi  UÉ aޥ^qTnDG( Ixoy}F pq%&虘-Pj#]l\/)~.hx&1L8%G2͂m i?لD5k. %b <%t=PQj!VX_>m%%ņ 9D7T|4p idFWT*Z#:@N* D Gjl5Jc6MF)^$h$UE|̉3jz>1kFCO@vsrD8s{8%ugھPpGdVFbciį4c:rL,S1 Ww !ٕc-zb N:{ggDi1wjIdz+5-Hb4 lZ]u? Hϲ舲`%U`rg8@l}BYD:;6򜻽}'7f̖5!O#0_}h?Z9:l 35a0yf7ow f4R᥋%i wL6Ưa8 Q R `!aihV]rnͩC~,6܋dW%T~j0:P\1٪/ZN t_x׾P_VFҏg&£$^E~͓JiCgK~g(J^l:1h!W4 8a)t|(RHqdJNlyol 0Zc)Yl 1l^TP vnÎ C}en-E_Zci>fÐ @Z]Jo_&jSpq\~x9["gDH5ƱuUA`焟}/G,Gy[:\a >M q'!!; uYXVߟ*i\ÛsQ@}UWYfIRpkc|pQ Y'߻Y8䚨H.*VHg"3q  9بP #~C#>i,2TL|P2w4;,< `y]21F"+XUha"T@(@'Tܥ$n~8(JlCfW/^Ԗ-1R.xɽ8P8ql#Vp~{9wF¡ETx5 _At`y#OeeNjl}?{maiᫍ9?~5U-'۵Vnwdx4#uYWKTٲڿIJSu (^9^zDǽzS}0':{EVgBșE,d ;4xPka~-0sPӞIrjP+zdBD#U> m׫ȃa=K/|qGl$ x^k'bIP .g#|^+Wc' lXD_H&:"s*% 'eUx^DǵdB&".`PY,P@iN)9ӱW܎?~B\jWak,74G巍XLj_nl Qg~U( W?kY47~&gz)(C/\a)tlv1X?RHŒ\aE]"Q顨1JFhOSA8`3̱,7tN]Q% zٸOlg_y;V)(s_t^+KSb<\RGs ۼGiTƪ@NIod.{.Fk1F/w s+uƒ[2p"D#;cgLʧy|4s j \z?/Qhx28sp _=803ѫ?We@UQn>=gEBVZֲ7ZArs0\]yG5P*\p9trWuL*eN4>v:{rgV:+bw>ɻDgQ4w6Ktp'Dd<ڪan\7di~#BI'*(u1srăӪ`;Z٩v 阢Ob|x|.傂EaHVLKUxAOdqWM>dxL>^S B%UEc7⫅O˴mL: di:5ֆZTn>x٫/"*P5f w ;s)p| !qE.dmCo:6vwܾWoV:W/.3gD_#Ӝ9]5i)pqBTܾx`C*LXu@"dGmҲ5?* ̏\ )m@0ouc* \Cz؎b.\b ޞJ夥\yӀ$P G%7Mrk[s[iRi!(H`e #YIKUH1-ڙl 1 msṯE4(2'EJ,=@mCz~fˏ!i9- v-%)G,? d KL(,/V^01kYՙU䉞-Eo琶3xݪg5{bE]ĕk=Eچ><=ijCw$o'k = crBt>j6̯ԑ(,T`~kSfo&.(KX- ,i|9^B1\#[?Keby:ps}~3p° DkZ '0Iqӣw%[P_L;r"XJ}Y[o;Ԏ˦X{bl@R\n-EJif7 r*O0?-fqYnw'>xpl?w̷E頲r^(ȯnK̨ +'pb^T׏T/TgX}|msVmXG? O :'n1=:|uNsl 6 2d' 5V!,zɊa{cB[^ #`SЬK) IBd?Xf}w.MeK+{sEO Y_pxYlP,k,sHPn4s|.goƉΉ [GWGRTI˳Ƥzhd V"Z5bxKYINK _bvi) t/%˅Lұ̶"%0Ƙ4bcxO-5ꅬb8m_RoRԵ5pMXz )w=ZY A̹"كs Rg\u#q6LV\R1}RaF2)7Y +^qk&? z:.~.$B>`͞6>"oޕar UUyDX6Sb!r$E[*EnEgpm, K?aHfic%Cy84HH!o]:=YDKij<}Unںtp)D| 5ByCY>؛+8JRQ=x6P&+)G\> ﾣF8ؘC*#J91YpjbN_;WsB_!Wk:>1ת9vS5 )Vf,yr!<{snF\SV7p4Mʹr}CQ xSu.]B! '9}ba'3ܠMoC0vV^RcFj4s>R;0GaAYrAZx$4T m%pw>%5U lk?# 9,gqɞmiYG}Q+4vL%zZ'ܝɶ17>Q^L贑[NJۃM* LT+Ly{3|1\ToY/9"m^M/ Vx&!Fm?f7l0a| UoUkh<5/b;]i 8g2Mո OTY|tBWʳOtxs@-sr~ou`u@F aI/O3Ng֧ض4hP$F]^XpYyJ) +O/|vl1";}Jo\tW l!p1ETQwH >nt=ULk(sywpp G[:~LHVbl=I<р#qoj E4V$a?oOr(nhb#4\tgodJ0ꩫ˜aR9vda1\4\adٸ%/=يJMY$W"^U"%X+Hd+IɐT/MA(841p?l߰xXmo\4>V(i5|%Wx!ѴwĪLT#gXw`[ێ|IV.^qE#WRX$A͹ʼ%hyRyKG[/ G9ңbtxhO 2O)fyJϬNhMIw@"ҡ7!G8`MNdaȹmZT X,E ]tOo~ / ĵ1vr) xObiOYœI6գ1#W D pE)aP-@+t!y?ڭK/vY US>Wd-g\Y&m"Q-V/-y+SO/W8U<3ṫۅ$e7W۽ 5U7DZ8M^ǫ1*]?s=~C ȶBUh,;hװWvը@xʽ_#@+ѕ ON20h3ӁeyhqrT\e뭋+5 aIj@800(/eƏSBNs;v'ony^P=+o4A%)v)cB=M. C{ )ńG58IޘAZ T;.Lc!rLiȘӆǛo6\}>#39f"ajonK'0)uOн e( N945Zx9;U\j֘Łr'\9:JQ#X[UG`Oƌ~_XM%WR0o7Ri% b@7_UW2!$$Z,'tYI.Dނ@JIؼ_?Pnh\#G"2v`Ў^8u<%J؛^;pHV հV tLRbk&D}嵚'Xb0.K͙oK; 21M>My4feF|Cz$#4鸊[n]sޒ˗_Awk= aKC7uȠH0>4H|nW?҃ j$%~d7>[;VLaMO8(,@Ш+|Jt̄i.&82=knJK1A{]BoQ+2.xYc}vP ^>ֲׇ(&; Mɋ= Ȳkfxm*KB9"xЭx5o6e]G?k{|SsxO%\b6r|L,XR^ЛRKһuCP/EC¿7X~2߫$=#`sCDѧD/%P)$2 Ss#2ifUeO's ?'k b99خGq2LsħIw+vL[4 fPK7 s}.ĮSLI"9g=Z^_8Njrwj?nH~>ִek*'& .]ZËɺM(b[_W,X7\ugW5ˑ& k,,H<!L &1kK)1*4_B=WD.;bu1j4*Q;i'26PTr䣖3 Um,anV _gvPDa5ҎI4-sRd`8Bwe*!puAO:j&a6܏75.q p\0$Ɩ"@E~C +| w}\M+V ᙦV P9x+M;kɱz֍¥yUX'GT_n;,A]8i%73 gllP Ӊ6},{@ f(Ȭ_0@fe~ n{;-_U XڊOgڳ;U0[qP.{xϿ'Qzʙ64Hh!:rג_ ־DP3Ӡ8Gt"o0CTlo ,Z$]c'kB3ěw9q=׮%XQ^=ӷ<TaĔ6+scƘR6' Xh`kw;ToN*`m-RCXQ5ZKXK(+>*NR^S=*`qӌ?'XD16е{5 %dB,`C(='H=pG<-]!j4Y}$1F;dA_,er,elMơNly䃜N-fȻBP!B_>TFs[n\S>]-qB&4N dIq IMi\*P\MQof0h"V ? 9i(B@_:t.^Ren-y&u-qjMQsΕ=2!2J!H_%(PpXЪI]S@9AG[zŧ2^|6H qpR-!`if|7 G?7?G ƩЎԀ-|a y߮LNSmhYce6 Dy0ѵNTo\yX7zW\OuXc?RmAomL2;|k;=BB*`ܫd3b#t,> s3lV<89mY{*Fz(55fL+ PeIMIMw_&c? ( k:LD_,AYy`ܾn@lUPKZ얮j#g^\4%U9G\ͮ1lm( hV"wKB!?0I5)GB `F`PÎO*O–&;JϺx܄A"HUkU&H`]UBa0󘟇B K³!.@ R}Ӯr"Ue:ɰĴFrS%y Ad<ʩqAzMOqϜ@若"=Z9e7Ki렗1#H,;aWIco{w6BI:ȲQD# GQ͚KJAP^b3~%=/D-mV0@m:mfw^xbR}[ =*#`/5U-\F* N[3-%WOm#  ~| 2C2h~l:AȮk]>0 *$Ya!zi+[m0~j͒]X)x^rL`C[V!EGϭօ‰[506YPpgRL҂ˬH3bQrTV7 iNV Y 9 ĝ0w ma}XU F^3(N~HdNMѯ<.R}g|2|OOVbRlw_+h4JJcnEVt%a 8Iʒ \zINnT]gzWVCMBUN~9#CrA 3 W N|~,6"6{ cT }h 3bbaO&]쁼RyD'rύx3xY۬'EТP>ր(fkaU,n홼l]֛ԣB)?T=b_MJB+zjZJ0#pi,gK!Sv6wv\kVk[8 cIFJ↞ʻEQ/S(T=?+ckFNН`ȿ]+~'(ԓVT|y=/Atж4}Ȣ]mׇkP?MA ߂؏݄/`#AY3*Vf_YA\.O#5W݁  ʑʝg>`L6P9vsWBO;[bIVPӛ8m> a}C5 9~=AWGD4 :CdɍI &5cml xhX{@ ]ʼnp &%ڇc((N>XUYkL.Iӷ"YY>!jTң@1~MHqX=Hhk$X`D+\F0X}杶< 9FTiTg%,3z-V)ukE7$avg)|6˽YpkKB*NMR{ S=ቃy&\,TVPt3ϦPqO.JN0IPcr*?"bF1DVSd\)fviHR1- ?]flh1.xZe35/6Ifw|K4)fɈ[]E檆O"E#? cR + \rgND z>4;0#\$r<٭ ;6LYXq)j=ȟ [,L>L9p9k\D5[_yP2>)P&!ʎP4]gpҟIa Mjj1CT̵Ǐ,X.Ma*MK ^kSlh db]pzH ,ҹ~1`aHp7ٍїh„C()ۢaS@՜cыo@UXS`‰h (60JB޻x{z/h*lV|7T"S3MqHuwdД/ Sv$PM_ l,L;G0Ƙ ˎL*bư|kď<겆f*asCCۡ;jٹ ~SHGbW&hE9K00n݊YCɣ{E 6S'QHVp+B5=# ,AaWx\>'w8ygkl4Ȼ4{IhCFc˭Oƌ[k}'ww+r=Xq\z#IC6nf[(^p9jʈ\xK}"vI:"=\eMz*P~! P<61ϜJ߱.U$^Z}'0!璽xQghsvL]4tZA9@G)h aZGa;8>4R ?y||Phc^7aӡ|V/QdP>,ϋR/2M#ofp6q+dU?ԅ߮.{+_5s]iNK|2 "yb2fW6Ҝg}`x͒IxURӯEVZ6_`7ǯPX"AGRp~3^Rm9>ʉe  kMg6"+KbuMM^7u|"v#v = 6?4s ne瘁i%Hӧy\}hի#N1(o6c찤%D Yt{Ϟ*jmlLUv!MMα198>떪3ȋ=D?Qk qW4%D+)Ú$h#ӛ;r, , , 1)vnXצ;Khc*n:D7L߃%[9E2A_7 ?LZMηqeI 5Y'x8.8OkN .eLB6VZC3)VϴCJ&I! lߤH[Ҍ;CƁ!2+:YrËTt]NoTu]xBo ü{WҢܺJ= F%qkre8mm krYpy-E| >nfCŌ7r.(%B+OCc`vD^%ɋߌ6ԣI2Nv"ګ5/߂|, "4!Aۂ:U_s[K]ɠiu\#gbiW*@@7_y0uD,Up_F$1I pp6AUVFoL8sKΒJYrNC ܤaє Q EfrohI{䰶 'W\fh|!N;K˱mRq@Cac]W4u/ז0 =7u`*Al17͘XhpQf;Y: '?C.`m)HQf=Cp$ֈfSݲ=O=)_2: ((`Ki/*ŬUy,r/ G KgDyzw\ťEz|Ce9'Y|ljzxed۶O'5s4?l ML}Tw3bVt9\MCR,F@A[:ۣP28wKX;\{ lUBHkd}:Lx`|~{1ǡv, aRGsoyXySӽÏYj^XG~Wv6QW#TM/>ç#mq> S| }UkWBtW&U?dR!ᒁ< $1wFK׻а]A%e7.vTuR IY;Rc 9'9Sq4iBɕpkBZȘrkD(G5"0cFfީ35 辮Hu4!ٜҕTT%vĪ~a?R,2gt)O˘ro*B. @1dmw]B+AFF@)AMK C`RB-]]tnʾ᯳~ia9I7;Ass, ?.V/ yK5T[@-,1C uuѰD"SyWRiW"Tk:YS%dx΂q[:)ՖIRDAH1EZ~Ho/ 05U&ȎTļ!Lz}?ZP]`U)?#+onmhíB{et'"w:ojoSm.h`\ձ~ #5I*<؇ʼn}C:5.v(CLɢVk`" xmf+F@Yִ- }eʻV͒=KÈ$& dbs ]6_ [[НdJ7"t(!D)bDmVN2ljIms>BY [; wU ^- x %fQu:\ʕ6w"kj9.%F%ԿkeKLl5P˺& _U9Oi2YC=74t %rvP[dwH }hŏK,xـˬJAyhY-gPL\4Bk`o倌 \T & j,w`?^P M7;[t8(RmMz!ԗKuHѺonRB`ЩL F8uSkÈ\Ab숅~oDG{cƛ &^pgAuELژƎ8wb`,l{zEK j^;?'֜X%\cD^2&S6~rGP~|lgTGH5-aknZ=G`tǖs*Wu9p eQY/Js w8m! `u(E\@*Jg-{oBeƟjPª3nߌ)Gdl.QFa;2#baN3?! PbNV4r!+-[C [;7M|PC"^`QȻ{,hUH=Ңk[v(sTȄ<(-,mP2bAx} h~= ׬C"/HFZmYlౢƲY ~u W^SכW a?H&s'Ⳝ|+眘#h(yw\VvU6]…9VǣVzL9k(8h7H`3eQOdfwZFRUm)r, hࡥQ"mhV C&\9'ȥyr5<bp@-I<ޡ& q(Zޭlfzū&z{W*-(RTC:?q]8!ƳWf!J{3e`CaÒRH?8]~{ )ő,ebL 5FN x(#ضUy?&:(+ 34+OI|M,o;^WBs;䱉BLw 8q>ƻLJMD^x 0RJeށK;2)[a(Fmf7n'rׄܽPϰp&IS9AR6@'m.ԥd$7(2yhgr!ѾER>e)ҍ+hqtaN qK Ub-0t:t_ UcDp6` iA oFYB4Ue NU7u"aPΘtۖ`9V/Clи\TAbSXXS +۩U\OnVܵia. ]α巕Z|a3Ѝ5Y6Dq30 ߯P`Z'(Cy H' & cwg5*2]ghj;ɽc@=HYӖ_#HoV$%Va|_c,h H խ͛FU*~Wh3r2㭲#8V|@g e%#U[2 `1iG8pi"QR&ŗucF5&\Ph(: nhy; h,xWaU_<%!䊁_]&kxkFU?H~8 a+uzeit\З̟2u%ُ>!gBVܪE; <$X Q!ztLfo3W7#l,G'j!܃ #pw\T2B׽_{Xme(Jkq,ov-wlmU^bBqca';seSpm(4srāC/t U~ylf1HxقN`;5: ձ)'gn^/R0Gkw ڒE0ipIWEm$ohv]'$Q@>~ٴ%x>#1YT,g ǯ+?6Ŏ):$&{wHGEoqKXē/V2 Or~'c{} T^j@r`l_I:A8W(X\0P,c\v:e-!pQm4>`vkA MUP421ѓbhIܵFFp6w ~8Ş5du[CR+""hZlA^<J̣,lNˇ1P 4٨3?49SX X貢JβBytMW)#_!lrTqf=/'$2e0K-D|-මvo3de͕sh θwLr{b (j*\AO:cVф#g-,͢NWϨߟcGfg⾒o:I?^a:m} ? ,׈PpA'oF@<:6Se 0 L**h$Վ_X65"ܜKoǍa1ုHs]+-lyc𫞹?KﶃjocU <48)_V]zWVW\yUCoIDND kʍ<+Ͼ|Omk"7kN.bu'.\8Z!/fW=\mL* 3zLQl?7{>*0.<^gzT+ IH`cfwP숣~pb, tMֱXE)+ 68yꭨ Nr' Mk4LN3HHțiy$ЌY2cwu^J6@2=ئv5aRyy*ac\k7_̜Ǒge/I&O$:b(y 0~fvL>+"*h_ORbpAEOl0ŐW Ѱ6Q0W ظ ߦ]nqYXV] -_̅ yW Ǵ`\ԋ,,|GYZ\$rxpaO~yK六̰RuO$hGXxS"_d^w4DjSx@6"4ģ P]hi0.Tŝ#\Er vl)=ÈS9}?loY[],1PC9n?Yw2x*9^Yw%DpkqhHg֡mrvQȒ:YM0*q؈W!3_r;%DSP rN?VTZ7e :-Sւj 묻)bqb@{u!!(輋G>vRn"V/)  n0w,~ m*/|': &ҩvy>[EM1F'A8ϛ>6/h!˶xS5@_I 34'U Cn)tՠu:ۂ$HMbV"ԻԤ@hr`FQ}wE|mq̸Ykt=| vxC24rJ &*p.o!^h5E=qxC]#:C_Ϥ'DBw |՝@ĥ`]Jt@ϥF,C&v2KZ6ʸ"^G(,#"6 ~ W:9@/tݢ %,0_.g"Y9VA@Rf1(åF>Y q [&=a|9 4u iC-ף%m(ARR ka1`m`S2ŵ3>QUF2]5ӛi(8Fz_ S+pTXj.a)s(,J#K>?,ٯ]*5v\b(B|5t"Ș#\0V@W  Lgn4-YUW}x )y̴CƩCj5wzYZ1pJU6:^擮sG#xs8pE>90`l5 50^$G]YEb9d`FaKhkwoGw{: e ߾r8/{aQJʆ;.1qWWԪL>Z*(iro[yzc_쭊4ER"*#ⶴd^g K8^1#T꜇`%~V/X3S!,~$动=x~AK.>&y Wޝ\HO/Hx;h7ϣ/ut.  R)I5p%D˙JjEgJ!$B}N -mMݕWB=iw`n V! bқ 4,x rMt3@5p, X/_ 9 vv^įa% ?s:N5A)A9g >鐓v5I,H>Ywt-ad{rۍr}YĪ&0ֶBu˱W"Ϋ;۾a&kr?w3欘:ãi6:XԒZ _ xd%v- YU:2ful᫥<O`XD_HlkA wkDG"hZ0M)mv}{Yh*0vzJU'{MrY8-3i$q2|wKs !\vSjf3H  U\9ᮘ6 >V^4șdh_2DDS*휝z&oUcVHZy0N^W3"PAcu ET KNUmYR4Gmi^V0ýxsICsĺK6_LKOL<#MǓ*HN$ރ2Lx~E_ZOpL_la`?Lk%k bCGrDc-N'm$4YD[M̆zorrz?9u -U7>&+YWݩUrbщZ?&vyk`W8:(6c\ν袸#f6OVd kn@Y)0$\Z2< d/9*nBv屻! @Gofe1=t vX8RG3Đrv+gH@`q;UdUQNoa_ƕ;, BG&äayLɱ=!l#c<-1r(TN׮e>2e^y.0,#ժR[V wKJֆw걣`BHtxwH3L naMq,M?c:RK'65 )F2֖EP,' c$ %=iHiaciQ[F\U{ssZ*M DE _I'gmih=^ u3#fַ4]"Hwo-zb,m1VXl2u$xuPh. qȁ2Q=Ai_ɃU}]pL(vЍl| ͂ϯnzjf  5c$z:[1xbc 8})_-y\ υ!ᒐи>b*VyIx?9'ĿS{LY]5᣽bc 'QKw}wJ$9|8:P ͘oW0R~ԭܨcO3t":%F8Z{h־4FU{[fYh4ⓣViYCj:MdS*y:,QU6L^ 01(MH, +z Q-zc`/Y{Zo䄜Bj>bȦR#ajsLw@`q), 15D hn56aR O/ʂ cNϥ7;M'D>?ܐ~X7<+-{3YxލT6,+5=N;\(k!N$ >1pUn[IVBGPn9t@a Ntҽng^"0T%G hXS㾣%Qer=xBc:`t#TEQ[ap,UU;ZɉŖ&9:Gƍ6=&Āj'n0Mqj%o_Nƣm6S6OSGs(ӬYuXnAw.-)6x@ޖiQ?Qve@ۈu\D<(kpAg.GIhFI^\Hg&Mq)9ԡ)𙷩_g]fW:f͒*8gV@r}|z|\0% YR1AAtL_2ϰ5"ty(1Dh?V&_#!v!W]Z{s4 nH%ʕQ?Ni–IkWz 9ًb=ZqD=rP 8`wYzdU‰{+os,DcYJ+K`qVO/H U (YܵKpa☳ricYo$b`G[/\O$ffOPO%:pHC>00NIyD:%"\.[KtBCw bc*􏚢Hw*Ij.Y Lk=.];r\M4]a8'/,sweJ J֝q68 h`>` k%i?Dx%9ua~[v8%:ЈrF`]{8&/S(ѤĤBZåYk]w%R|]swp56j_yy֧|0nz l=H[f.`Ukw'ܕ xωpV?\%;"\6}|3ϻ|bŽ3԰;ذ`HJYU[o(2z \HIe|O]9[ q0\)3#i**֭x.7/;5& Jcs0che[2~q]&O>6p71neAYtUAw(k I2Ql|JѮة݅ ՠR':][*&׈^>h`w.j当#d.eUn?i 6b<=*E1p!5i0d'нJVwi_)wѶB~AQoۉL ٻ#C ,5et]j*8.l^W/pJ'3TnXX>>EfXI|y㱫/>Bul^TB %cSгBLTC'N& ;y> `Rl#yry&RׯYGmjvĠCI3~|D҈MynfmDgoIݔ)9nyY*4`=l*,mݳ*M';\\h%[p7ǹ0BR׿$3˰&R^}P1= >K*S[8lsL^XPCyU  h^K_{D6Z>V~3#Wn tXiF{^?`x/;+BB;I[[tj88yyҳGTLMDTq =Ն0;^AJ9*/c# !H[v1}ž.h0u%ttȱԜf9=$0ie#]E#u'7%F{6tZ ,YC^Re F"=H#qz̳Rk|of( ay~^߫*Lacq,($͛*ث!LmSt Yre-z$_^Tbu WY.W?Lm$&=YOU}1 g2_u䅆@)C&T +Ǜy4W- ܢXٯ/s]QA;l5D/٧h@9=ɴKڦ{Z'}Y2oTD xad&-̶ ݋H9V[6-: xo+ҝͦ'/r?XczDu$uqF}>Vtm2'@͒-?e9B2M#0FnE;ImYUrm~5r*my)b?Ӭ#WV8hvSwAE.N `W2VhD[siMtѢT~UZ(ɇ)еL.( Šf2znƾe2\{DjRh cRJ)($QQDU n치4lS&e LJև?Gg9>zAo0 &G?i1݂}BNڍ!B.s1\=EyRڽRF\fOwJ1lnAYsA jøs~9ި*?QK &!{N̵;-(@ŷIdk~w-Ye(0+VoCPC'?ι DtlScukf:*f޵XO.B^M%sY BͅuϪ/'Z>sU=5] V @W\ѕ}&Lq_ Wf}~.$,)ܯ2d؎?@km]+),Y:;4'3Y31E }a36"R",43̘4Z'34nϜJ|9 6%'?S=HM*ǀgPhXI|3?H h1AKB8}s"=j>-Gj'`ia!ͮZW ;ySh}]YYlGOosV͛9f~nHM XҘ~ ֺ #+ٴۊs{%uv"+%5ӕ h(09ov9;\*KX7ƒ_RSNf~'VZeH61OdMI)?d?Z7`V)c gP|ec;;>8ê>m- Sk,{Ӯ s`~j:vF$UVH{'B{0G% 4#jjJD|?4k~)(,8sbNmı-M>2L_O5Up/tW̝ū \JޕtIc|cRQ-SkP |)(h~Ealg_ eb?-!#M nSs!>l<º렙ڪJ[7"9b7RTεsc|̜!Ӕ:5O)d`9j'tfy;YR~g1S6c<1q%z,4'S?UwG}Br̟ܟ`^b_[J퀢e~\Di\?V=Ak}tG D 関 P0,8s\+c! Jq&ShAOE*$Z.ȼ;}p9A(䷠eԊT7rt1 zB* l=%vr~o{uGM2bE'ДSb3!)g 9 1b\do񹯚B##`7m(H"RԥGeeB<N ^tzuw+rt0*JU[%2E05+|PҒ&O`h:9jJj^n/ H <)Ad]Q] #'uj|NM9UШM WDcuDBno<D͑7ҙ1b{UIyvI䧞SG ,5mA)4t=N$rb&OhLa]a˞J[gXwx<TѦ9gUcy3H!n%RNҲ@gqB--Kez),nj=-)0 \^UI [Y9cQW]W:I{#t[P+ I㘧2]\z>5 $b`vmoAō@ Gi$4Y /fW%~$V<:Ye)aR Fs$yC)/䩉~G,Wbz:~Seru:? 3iGE,iBcm!68H-w0X hbgȎr6Ԏ = t57&ܙBMqs1kE˿w/WȨ^rQ2YRSU;FXĦ3Ǭ"'U(?Ehy ~#F0nn$z3\`)Q"-,'} r4 lygaԓY;˭;E̿Y< h5ƲJ}\9*I#߼qX=֥1ّܵ0A?$/dǎ64k:f"` 2Po,5 r/Yib ^|#iRwŐH]INIö! |1H(׉)Y=v ڟ_L*|:PFڻוXx/Q.[pGRP`HWx"z߉9|>NHn 'SRSr͘]]WM55 g ƻg)~t1$C4~lMAFi޿w9*@*TM\L_G](|mQ% l \dI'AO+ Cfi8U`\ (Vlߓ0"1Ky y@W>-u1_h)k4$ڻ4fBke [xlHf#|O࿮<0W%KV;l jP ȅK2^W5e4Bػ>h݉dp0dx4RཤyXCf%)QBn: 5 Lr 97Dj^tӗr'KH/+pCrZN!W yguv&6'#@f,DFD|rqB7M)SAZ| 6XScRLJ9K}dr $tHUGlzO#yطHcãiޝH֔,Hji-t)=[4mm3%aP $er>ǦXX"trQxwn:xE 2 7*XJT Bw JB*-..wi׭1uMAiwCԾv e^fSY$zќ`"+`߃ C$5 {V t8vޯ DŴF0.'`"mdHI6v},hYZvԌ, B\r߮(?^jVd T ۈz49PcЛ'90O"TЄtx'NF $=61Rh^44k .45#Ԁ Y)ְʳ+:w2 h#%}Xk>r츳OKY"zcP<-Ȫ4gӕw ;LxŸp1=Xd ٻ㕥 $c\h# vUho#{osyyܡ24QP6FpZWEI!K_?G">N >+M =MU=:I1:F?P8voFgἔ/W IyC]U騔]™%UIfȑ}κL旀[v4cնa_iT^b X/ɃhI߮[͈Ƭ _ /P:]ElHcWDnϽu>_L=@r7 ,p r˳}ǑYffPrjѵgsqCCūѐ 5ZLǛXNIrPDL _JI ghpt6lK$nL.Ԇ\RV vDþD ?~4 @Z!!qH_j#9']~ %^&^Ыyldb.$A<קI~'Ѡ#>&UyL&0IY}_[߶a$ \27L͇f@nG@Gއhb9ˑD} BvG5_"tZᖥ*= W59& bKk$F|B6wߪ.z+Q}ɀjI|`lY#(3}zU+ŷՙhR8RC!w':";6Jj6A7hz ըQZ9&1CxbOmS =-Plo!yAXe9^on(br.#z \vB3Rf$e1.<PHpN*o i*(ow9|tq8nm$.әaѦqbBs~ej"(r-s]"e Ts7,*tkV-NF.0j7T2EP-cmnOijjH6 $beUx48SH rD?9,u,Syt~ek [l\;%X T e2L>UO#( bicOuUuRݦn:i+A8;°6T!Z5|r%U?#ްZxV"V w," ^ɷv 84' r \7D!9vTFbn^Pd̷i0R gW0o$dv Q"udwͪ7u1L$ęqx q=:8P&8$)jmYit0iNKqń\[o$m'dȦ/9AѡliYj;h*[4g"V:6nZ']  G! {^ |~)[,\2wC5,1fc$9^ X<>skbB/usًd)"?ɔIܡ:Ǻ^ ep-6k 'jnQǢ 6=v4 Z*=nnoZ? 2^5&L#LMBN̳ޡs%)him|(tdsz:> KdQMt>1zM!k<,xV)^3iE^ 0JmG䔏|wi4F/jqF?N*X4Ebu 34WtzQAo!gTȟiKB;{pn3(4 =W8O<r\N>'Pq꺱$IK.> U6D'DL4JFt8"67!^ Z X r=Wie؟߬ &Do#K̇~N)B^'FEqE9{PN /K8靈җ&qEwn\tAI)Jy,(PWS:P$ѾdGym)/mpvr.~Cqvu4^E-EVbKɤn[LjZߛ߮+Mf$<.IQw2O0L.hPŤ:7Eu2C~7Ii{S4Q(GrX/|aPRNڿ6%{:-e-0'' 11C %Wh^-G*Vwӟejƿpg=vV6;-H&gNO$F':+GD&gHBlIDy>,l+ɶg='+ HG !STh/12XIța%}a.v@:ٙduNW_d1#!AAmLQh Lj&_1Hh]k]wsYzakZ|V&[3\mzLIx./s5LU*{wܔ}GNdܸG^a#jk;XąE/B{ƇpсF63^/5!x].]SCZgm~jQp/&-d+>1u{7n0wiӌ̨0xVtv!А/jTatydFۂ9jDEFn ZWTI뻣 |И\d]rq`}dcC$;{Yh1mǿ<w&c5Ni ߁M.x|/ܮLYr8}i/툛- Jfˆ&jUƲA8Lj)$P N= {ln"W::{[ׄWD:=r$(FUV(-k`'f"-!Lu&C9Q |W.vyă2"t>Jbv;("4ohFp'vjfBi(x0ۉhnڭ_x:ěI8V cCk)@}`|YN}S wa'@Xr̿vr,~o`I|apX' 25aY8@ 7`(pxO??o~T8 seсΗAg{mFM/Dԛ/5O+W6Wq]f"B,ޟ`<hpn GkD :I]552juhk07WBM.7+ɥvOLF&(rTh_pxd1ŭ%ܹ"\ZaQRx|0LѦ9~V Nn$qN hڽ SNr<_S@9|库{pI^TO,GOz-܏YÝeTǛP&ZKEA~[M WU?jhr.=xTԱ*D5N)tM0*Y _h-T2$: _ݙ h>bwTc߷"R:;+uk}v \~eg *v+' ֵCmܭ=6 9W#G\Y]={M$凴X曢XzGC#WJ"!LGHpݶi7[xKO]ug´ (}عoPWÎ2%e7U@`"pZ\5IwU]_VY7]k&@TA7O/(^54~_ A弡 E<4G70˒H}+y1%G$nJX&[h3rӨf+\'.RpLW~B4č<-|殷W!lqKlY )kOZaɲqïL#`Z〭5HȷJܶv[e16}j_-ǟz}.=v Qy+LJ.(njS5 ('d_ҷKђ$T2&xgB%HH %C=~(|5BgPI !RȪH2A:҇S:3lo4"I렺$5JԳ4Ps6ߎ q[' P6ޚc//0 6Acu\ T||SaQ9?N={Ų# d7u"3?ڕРjn'v $]6?NE6D*j"":9ilinǵzͱYc#&yjD "/O5 3ܩqhO-A& dG $c#60G+kmH&|wNPL~VD DxH9퐩NϏz<{ =l>U5)bѫ _ =dF&d…PVYe2r٣Vf+ybM,6+ }'?DD/+sd!PQ5$Kn$ dndLk}QeVXU ։gk> dÓiէzʦ&y|ZUePq9yZ s <~gR|B?$aOK5Xl/ QV(kco"B~-%QHZY"[&Ҕ=vsڈsΕ>)*L٪ 'a񅁱, MO8'K j! َH#rV(W uĻgc*J~(qz n]}nw]ҌCu6 $Q˓'d!(Pbxw˸ڈ|q2l%[ߒk , b>8ϒF_Yo ȰZD }@ǷǞPgI#Q/k./F7Zj+|e0-1zqSW\f`Ke`P5]肮2u!-T˥m:<9#gkw72kY%z7:}Eee_bR)^b~@HC3;޼sM*mӐs@XD+S;_z]"LSsm9 6I C1?:4\ۙ[z߽[RBE)\ܬDXU:%P>=Ͻ\P~6˄^K3_PYK::M*]1|<6/qC hoV/OHG9UpgZZz997Lt"g^u>NxĮ+u."jByB- css OdSUONF#SN3 6)E紂&a)#hDķ.5 g~S]Ep-(#n ]}qXk4:)a=REɐILލ-TC$,wȆYqd1hi!V< ,몪qv2;n-/y0IjQg`y~Y}T+/8U2XhJǺX55NPXQz~%|}sD l[Tolm*G3nsؾ]٬wE% Avp~䌥ff_=eM}(AN6XgF 1e9Y`&[_':HI6?]=:f]EGA RRK!x fwg?[M3*b7wv gܢ<iy5ZR;yn<ݩ]Me[; ve4-*w^j&ʩ1)&_}^$}ݾ6i_5,)c$X'<8Do(unutF׃ջԀI1zK!j ކmS"L o 8vhH]Yȑ̦M[ ;>h Ԭ~"\2/CEx k^,"<5UD6koS#pt ȕn9H'A [}3% (yނytE3,#$HNZWaA݃Yx,zN&F(;+bhQt9G><}'>ٶ\eE_ Mk@(O?sHggZnq0S;?%p;WVQa@*C:&bS$OS78łkcK187'isJQG62 8mީjV5zlo38}Fǻ;$DgbbCҢvP5&¿={YoRau9I8ԉFFPXO N4* !R5QP]^rG"kb o Y|LŒs[jX_V `Src:@X!]MLm/fLr`-Hڷ/Ov6Jz\FClҝ g Q}P1m  fZ[]Ep~{=[J7"YOuN8zedtF( %C?}͛7D(zXC8s@6u;Br߰L@JE~־&}_Z`.G$r5pYZ@řVW_ عkn>H I|h  P,eF2u@5)WUlE_5s(nj>#A-^Q3czV60- @9C n 9D;yoV2>V]=}GjR.w"+7m,if~ ?T]2emX;uUX^)Z%5cI:YU/J'V&`}S nQfh@g$cOTHnz:o{G.Cl$Y9ą }-7U sA"9E:h-޲]8F r1hY*@ yiDreb0#q{EkAm))iȚUCnyΫu"CޝP, Ҿղ~&U|t[zE'J1"a2H K"0q.r+[Mq TtL|( ܚKO a_ aBͷPZ<'AXѵܝU2pɉz M@\e .k#Cb{~z_c%0 /1RN?^>I)3p\ )}GO#v)H)$ޏސvZRX9WBA a }4 Uxeo97{[y Rέpw,H&n wE#=gq@dRCwL/7yI4:K% qO3SLTi,i.ٞ ]ߕM9N3J[=橄rWz=@Eg5UtHc1TZHT#̼12yQ,7Ƽ:n)aDl}1YO;!X-4솷4ǔT#z>e[lDxMFG6`6g EՇFp-:B"Q`rNdž8 A-B Bަܯ/p-3R8s[g"mD2}-5c_(QxG5 )0B?>fzYLvwbW(ACbX^Ɛ8RYaSΙ`˕ )D4(( 6.r=7B+v-6x6AK`?[Gy{M QMGE[s!=bzQk&Ȣ~fBP/a3X"X1:HږX1%l)x}<D-K6 cUD-sn= Hθ2b] )ZGQ3Xfq! Wo_ xy3mݿ&EVW~67vZY]4?Qa V:BZfa4AKXjɀw {;'οn&.9YނE-bvzMnsPqѭU{ &K}0ɜ ?!!F\Hs=¨z88 n-F%+| cN!nGF%OJa=;1c^~1@ҘX(B^@#H F)ŁJwHLDkgQ#sk<QuSj^30a,(| =,Ohfʈ޳{IFXj-U>mX_;"ɸ<+m;Y|<r|Ey DDQEdu h/vÀt ՘"27}sUOuA;LkZ=+lT#hP\HGCp1pmMҰ4jhgbP~t8~wc,PHha- JpsWH"`PYpZq]*Ee#Se^ "+WV~ U}%D:H ryC(|Н@Yݺ8S @{ór׍-qmt~/ZBm#IFYI\&DOw9Ҩ'.IpAaРrI}ޔa'*<ʏ|PDwߖcdVӧa"Twf̛q1kӿ 21j ί?Ԏ gBfWwg&ʽkftu$C^ {ѹg[[9?gIc+V 5DUq#p?NO 1a=y1 ⫶f31ȒC|Se$;/3-$5C7ϼH}ٻp`1j~馺s)ߤe~`euXY `CZ,bu,&x/V6JaMv8GV[E )m$!QMk0xf),u6OL§J +Ea/ͽolQ||@bbIb(s*OA:fAsZ0n_`s uzҜ&zG[}ڡءi@êO$i) 9ɝǧIh ۦr0ҦfFdvfqB5a[*A>3(P^{cQ '\qqCp6|TTu!s kFўL}ٕ4@ قf̒݃?һHwd8[#nrT1+ 'PWfDy\s*1uw,ߺ+^kXem7LBJnJs9I\;5v\n章H8kPct}Ű6MjYRo z5R)+ÙP$K:_7YHOqEX[Nq۴tRb'VfQj\iHDqbILM"YDFVww 36 y?OOAX%;s3*]ȰgSaN]r!lu1XL=2&n Ի{[[9Y=EM4NHKǁ[*0 {) WÁJgtTZSJbO )ȃhBPqT'$CBӷpD}F-J Djmͭ*YrGhVqn @F Cndqף …֫UQ gQ=`DI1H^6=nͨ+7j(5@IJלQNNlPxa^{u~ Džw{ \4W,7LI;ȮyueۈG0c'WZS4!J׋[ O@ pl_qeGRqb#+dԂf>O_v^އO ŕ.RB9%_sRZRsoL Ki ”.Y}pe֯sh{ q^P[dJc RnE#Ms:VS|u)t.f\T5ivXZr1c;wEv(Im9= ,!i"}QbJߤJVbH+0(j(gnJ r+#F(C-l!=qt!KKX=',7$+{2eP{@CP;;ח5|O >[ӿ}$cLM-lӅf}2! -Y|Y }nj?zx.3҃j.#Z@R P" Ea>9j↺խSpw: FC^lP meNĵL]$Bg90e WfS_0v;H0xjwմN'xwX 7Ԣh^&(Q6J;§ c%FVMՕn\t*e >A*o\,_sH &N-0"$%- yp U^VB3b(@))84(-a2̯4* d/&{RF|wDd ɦ'{M 8n!F#)0yϝ"G^A S nsT7*pX27,B7-}+kNLZt_gƄujeۗ**%lG?RBGKDJcQX /KbpR>+ki3XmwVWoKO4E+?Gvc4Cʘ7 jm@?z?Vhψ h -[s?o@_m") Nv`֮".&7.mMY9N^FӋ#9=Ҁͼ ,vI`T]E)"xwӎ1EVP,;f/c]Ϯʬ/19S0Ul8K =brρ!H OnQ'Yz0 _1s( b-@K W?9'H 1;vo՗ռrp3h /޴WSeY~]eS'v%b La$DĐc] `YXT ,A~C1 fk:~xW|5@۽ u bb= ~ɓvxZTa imljUU'WHXG gN]Ȍ-LJyi@:Ѹ˂"FDŽ ;nLJzm QX<7"y&WM zl]R4|w +dND6ˣ"k*VU2/I _r)pEUE)_3{&+ų$uj_ &@!Hw݇<ſJs]QO^`@'l]QW8^]78beM]y! i+۹Is5][--In}qEIL v6?|׫ #R$<[wi`|QVU$}Ur dDS f{02Ii Լy/K1I;Ž ¿?П*k  N-TnDwX% nC.?Ct93 TH7+%#>$]K F8Řy$yd#> &Zhh&pOИvHs7O%Cf\ 䝈|C'P^y^N| ֢~qM@=gŌ4g'J:IL[0:iϫ&}<,xt"(7!Ammr%S #)(7q/ )OG;V ǷT nx৤[C9k$NOYϵW}Z8XyL^jQˆb ^dIOWڄl T# #_P)ۨ_Awmi!Hh]BŶL#Ds䈧kC #HoNO/@rm{1*o8yQDOF+eQ/˫U_1f _I߀Vv)1b#sxO#0ʅt[^m$?,:(ne6(!߸XnyY^Au,2f>vLq'xd_pn\36;1sT%o} |X:%= G[Z?@!3w{CC% Nő f2\is{ ,2z( W) ;+ޥz6;N.=lwNp} &=񑞆mdV2羲_e[BOER2-C{<d4kXFTv?2Z0i \ ;q\"2vVrş(oY϶[@_c%9;:ZpJ%;vޯqz2p}feãrvsܶs|c\n>+V; x|ۼhR 5c*˶6e87!?-QƠM~|?_틲 Lu>dЌ h'vwMUKC9KьS:Mθn(rv#E4^dMr ٜ%3hssU[2v9m/Qa~߃YgEŠ%&/b<:Zz^ L dTez$18Lq 1yմPg/Ms/ M5`h ~i+l9*;:CȐA*ӕk/= Ĝ"2cA}v>&ѾMX %`!J+, Zt4FWnP+Фtt]}Te5%Qn[ !}R0tزDCsMgp1rE#7 aj;eq5qo9kA1`ZI!6d*l QDK>Pg`,&Շ&pP(O3MWԫQ`ɽF7݂\ Y1= =Iy¸cH5WQK EW^6w?nYuzK 39;Va?2eq.e܊F[eSOL;P**OaN#O5 kRQ&4s͖!P#KmE,.JBWFߖ򶂅: j<[±V\0(_Ҟ]SV\k)-l+;N|ԾaIgquom Am,Ҥ"J!4 h{lA 6KZ˟|xg RX*qŷ>Q-uA|EmLtd OQkz=_hJRmR̎f2Wjh:X Ŧ@8CBv쌩_+}88L M!A[bbןv.Pu[ovnD9Qhy_$ &ŷ|6Wó\\]bBk.Mst>ѝ\\&f~'s٘xU֪bOh=}@⧴׃D&_x$z~U0W "K C)(e9F0e\zIg}`m] ]OG ~vu~%0S%oq W軎Rh,eխ,hk`==ύ<1P\d/('VFHx^ؚےҞHXB}6\t쉿6s۲3{Cʳ:d ].RtS`5 TVJ\ViD:Vӡ0 s1)EwNI6h3) MNluܷJwbRp4 0D`vP [j#./|ϡn'Ǝ/)l7/vQQp>_bPP0pnjuQWWe2oSG ؝.+xCQ_+tYR%Y G"ڀzףGoJ2`>>]QhX!J]PUDnYk8ܢefhCљ2umQ@l^#$e5J'zg"7q`i"oRίzڐivB-{.فv_IWS) '6P,sJ'Z{֭M]dK Zno2rXnrrE:FѵcLh4xDXIco_KތC>=f)X&ov-mb>"jWb%ϛx@U܌\7 (;@QC,lYS": Zu\xknM-%ߣ!ߣw&EkyE=#ΔEbU+2s-72nqALmEK<=N$J\_OT2= ;h+fΟ!AAU4e3SPOTOVK?`RFmeTB5I\c/5 ]^<nl/wp:&Vnc3CRc#Y0+Ic'#,oQp¡кo"ݡ yalP2œ&7<% aO'?п0YĆB>0Qܥ"aC@&Ta@9ϻo䯱?Lt#ϴ{A 4kCG#wjY~r0pQyN̗׳xC ,!ٌw >5'8:Xnm d?d&Z/VE iuV@7k$?V% Εetbpd!pZe$3t^ Be+Sv@'.i`O4ȥϝDQnqɸ0H/<6L>H5C%6|Cmr/0 <NMDXk8umazrj,?虓˕8U]G9܎G  jf H2#P?\# 3 [@ "JzKꮜhT F/uNwɹUK3zdwgJo+R]KL~K۔ax~X3=R,i*/XXd)zofaw*, 9]棏Rf\Qrem`wwJX_i|MghNB)?N uGޏ F%@A|I'Eܘgq?V܌*b9 )ӫX DwCvAx$֢# ?I&X[O$]CdkXfP9.sn{ƈ{+F߆T4[72Z8LG'ؿc7~^׬mfeM(Jj c0[2Le!F]w>laK3b Y06t G \/-N1Mؘ6Zx2sU_=У 8-\醆REΜih&br 7共h!j(rGgftg8DO5Re!܀ÕNCh<_=l4ll={2z"FN:j,Ӕ`"1i{PFkNAU{szUHDbzPă s@}qe  aE >n,B+<0*H-ikΤtH BddѥLX6qR~EgL_Jyc>㜓eǴۚk|_YUq 쾒=&d5jA(oT6ǔ6Gsм;&tQ?Axy]|TU_gd~_r諝װA.-~M|s5I$i"2mAo&TE 2'9.Ksv#cd* ^> kVD n)̥h A d%TӚ~yig[$[*IRK: %8McI MGpU~1_x!!9"y'+ڇ.+n5qQԩ~,u[pdIӷ#R2'-gl2oLآ2 <%qכ?g ,3`8GqE ts^g -:Xԁ?rШh%}O%q%Wj*>ʞy靸qY1n۱@By%_H  ~nk{ v#Q7 Eh\z qmFv CҚ4 2G#[f\_wQ2pMx"#PєCZ[)Jm_N/oJJJ`cTzpXad´Y"&sHń#8;Pܫ†,L,I(N8RqRY} \d@wE`zEؘ88ELmi-x(Ba&U庀|a2ATNʦbޛFeƘUTۣ 8|K\xdHpK9L4N,{b]FU<߰c+Щ&&kh0Ùo§PUzYA&5lدXַfYU49s˽k}>i0pq2&%ᩇq#PHkK* \]SaMlQ6 @d;WSdK9EG1dmOMcvPOJ~ [byQHtSbmE -!>9 O.e]1c1eTAPkUE 8t/Xf:Xk B8^Mx0lݡ]Zllh"/\Vd-k!T=AjإZ @ Nl]d`6LQ ʎJ ^2q h #D }e{#)ɪHm ̮ɗk,XފPM%MA͓y/ma'y6dSH{ʏfݜ- 1HDT}Pfb2\ pYyx<̨>u7WJ]vnC4^P?,XsB螿WK2:vi6hB/oYoƦBr7/cP`f{ vϹ׌دtH&\`x+doM 6P9cuERhο}}ԙeyC :͌BCj׾FD9l눦ZH0V_< h7wiNGs4{-0գ R Q[yAnTHYu\lt$Or\eŠ[-}ÆSmeBቕV y@jMy=uL퍸1%sikNLS"D0ŨU@#ʒȗ3?HrA)+6,Cv1gg&K;%,NO/iQ"x '۠mMބD/^' [˜w1nG1F!QE zg%%1yvtz[A@[Ƕ}H[Hv)/ޯґvEUͅt11j%q2Sn;66BKd!DJ͒+!JFMp0Ν?^:T㽲DN*b~Fg@|?ygb{| u L ~h M-<%1N7%=`bfCUJ\ -Yo2Uݝs?+\5tR!;zmpJ2yŔ)ԧB;x؊5UVXg5JMɟ 瑁xG3{  ) O )y[H 5~<:/*;3B\I 6$&ݕy§zB{E|rlʓ#2nq3ԉ|[$e!nG4V\32kj6nOZ_}ۄiz2~ꎘ>0wMv:dw퉋ղnm]OOts v ݻ!xYQ)DŊpcg_#+zkVY`و7%chIa%:uAfT+$_UME%d.~kd<"RxLȠԣ-e%.؏6 {ƈO#} 'jCpƊOP$_a[~= 7hy- R!5D#|oϭw#OΒnk/hwCZ5`׷ϥBN8Bnx`XITxхӑ͈4(_R$+;w rP!?4#GkFt{^n)r;a*4GsTYQZ'Gw'I.hwx LF!$xĪۯ7؇zhfC]ZJ`vuGmW# q{T1yZ3e.JZȖaՙ9ֿb@Q[0)򻗂JU.O[ %q&[tZ࣯S]MTx嫸M |(nJ->1%ڒ&=Sʻ=P9 ǁ>9<to9qCwy-ijTx__J s: 0,M˱o B*ɟ6zfՇ;YhtMjvRbxs_P2FhHYpѶ6&#,!@P&$:ʕF0G׊O]2xp??ʞ>k9$Cqrp%h=3 0gXy ex:šw)@ΒgH c=!]5GDU5> LKsMqK(D!xt-k/]gQM":_1&i7^8_{aBr^˨ߩ*<]Bw{_s\u!oԑ]6ץȬߌ ;<9s9L1ŰwޮHG~DXRG{B؍2V_ɴcyybTI(/Dl% (_f?PҍʢIAƣ[C?ՃWs„f},ڷ14 އ(ǥ" . f -ypj@D_3ͽtpmŒuJ~Ǹ+Qp|U|aO}:Vو%>|ng*?#"NI݈p5 jlGd8 ܜiP`Bp4$ >w3T&KZ7_<1L20g([L}o{Dǿ*g%}P Թˆ3RÂ=eegHVҤ#8n9aiad٣lf$:,q:uZ9h$uHܮfC 1TbieSҶXܢr~ܲ5čS,&IG܌> ;Jkc_/ZkW}pFIQ^=n;vGLxn)Jq0u+O<Ņnކ.p`)8O*~Z nj; ,e3+\C+L4}S32{~7BSdnx)exnOԟͻ'3BzX^k@,j1MЇb  ɋLB.J"%L[n \nB ,b\-~cW-Ÿj>PEEu߷ Cޙ+\l;.Z,8Nگ{RW뺽؂ I{Ux#neL]:J$ʇxUN;j.Ѥ^ aޮgG\%bqK}ןьjR@V-cښ3>P؜'ZPĬB׺`EV)ݜ\%_FYWh! "3~E#kkb^o[ֵj9E=,b]fx7$ǜ~1l?pmH/)eז+swtQ̝yLMn*pt/wP$ab %EHl҅!g3-({B$ H,EASD*;~r<#;&mgg_q/R*Y/aaWHq ԥDXcdΈ/!q-qm2zPb[4!7{ c۞?ȍYs&&" 17to쭽y10@cmb5#ǽy57`O;}2H:3LՋ2;LLde#! 4Aaqޮ}':Wl!%m܊Zm{'xt,{Ώ1u l1 M#_4̰O$R= IP-ZA}( Xׄq9\5stB _t-Rt΄(2YB.xHWK#u9$7wbL)\\ʙ .N :Tn*t.5qq֪xE K{}JymA/~ '僢h8STa 2Ќ맜t6˔ T?[ZkPon = [RT*X,KLvR7`/Ӵvf̛HC,<*)oyaz/inʔ'l /Ԗ$W[Ű ^ٍcAS{APMYZMB@2%{tB0y{0AVt];5 $P`EB"S$S8En1hyW˷QN:;< %7鬋1Ͱ6 Cg/ba(g]l3.J7!̀|f.G2=jKKh[|pw>)ɥa]muWJj%NޏKo&Իntp%kDtрgd{6PI| Sv- |8|d=RD:v(f7 3ր8/*~*}ݲ)mE걅F^]5?/ ZJ.,-!,iRi HaS[ A~g XE!Lj, i%SKL2nV%Nli0/@-Y.s1g, 7*sm<\k+]GrftPت-|ӳ|Rʞ:TE#ki|Κ.D;#w{k+0c{LB$_j@ rpZu1u(KQow;dQ5U2'AGІa.ڲbEUMBoȋkj$tudz2 $Q  8y;KRԟ̵pd Y.f4J(v;^=wrBFo(knꑾ˾ccL:\8BsqYĜ׌,7l]b͔}4WJ}dҒ:ahQGך tJdi OotQ3X4맩?i q /#N0鯽9+7~7/&kZNۭ0 թ(,O}?ZO X얟\{UkAA㺡 @PX5v[[2hXޟ@Gюm30q lj 5S9(|R-J+*`褐JNj_ـNƀX02ɒOuiR TRL0W .OmB*sߜR Gsaaf+Bω[XG7(w?ASTc ]@kO2]@RQT[aZ^rj~^$=L׳g\MzvWU>0|Vu|Pj]H'ek>oW ]i)Z R!ci5:_fQR#Lg%+m`gd ͋Xf$kr,_>e|_.FRh|BsEa|** k`@$'Y'>VZ,rC)}-VimW?a屌']mV ɿrc NdKfޫRF_tdkQ&8/&{L?d|rlj23/&=SZ'*+}T6$!0GQwIhPOq u G|-Ԫpֹ=0h8n "?q#Q0w_J#X L![\(mާ7KU; 1F[sY.ʳm Alѭjq:O?WOOnye&:ouCUIUnE`_91p7I&-|ڄWMa}]rLT( 1@JnuBB;R%'0#vI&Ej֋;ni-3aG]ĸܙ@,RV KCݲaϡH3wv<&lV&@GK,!J-Ze"kbbvj!'$ciErVn # 8O-Ux E(:{W 7 ρlbbH4gMC$Hl Vǝ{zBd>3%YF`#i-]S3v/!KrQ}Ֆ~nDAZ'zkzt?Ӷ!crkϒCc_.}Q?gv>"Z7r7EY8rE=4ˌ]O>C"\4i g}8* ?&ˣ0Ŷ[=~!y*$n=K:܃bɭ[!AkrL1j8Nј4hnu蔫y-RGȹ ,fEƆ^j{f\p+"C;~X1HOG nx.K-%4(ICݓVYO=~L&joc[}hywo ~Oq$ z9rh/{>cs|r@蕖ae8f.yb|qRn7@rwi7uIAK\jm[E0 U][OL0.U Žo )n;m͘^ûC_^}quRYv(o_ ,mL]bNnw o ]ʈ8 ,g]C y+9p4RC zeM[um@)LF3mj,b3AF36(FV6 |)ϦyPbn-q56mÂ`DX1` Fr'sgiU(ȞQ`R$?$3Qt49GO7ZuYe=x6ωa]H3IT]&f3]_e*ؒrȲ8h{Skn;@eݫ4zC U,uD|?}?Y g?8tQ&٧_Ke79)_WXq(']@[@Fy)k葙-+=5,ڎ]D02&rpX9+^ma)Iq=gL| %Q,n9upL9Ѝ=JKԅ a%!S}ՋS|Fܿl CӤ5eqY:#Q˧BKiOq<2v@ jEQ/%|+Hv]y_}R̝j,{_Fq@߀lk9;4wh) V\56!|ͦ*Pc (9h|*7 L *[幯S"tH)tSOc9+[yB?F&-=QA|/w|\FФ-ջ0?\b1:'P@"D'LC- ܐPZ0Q)Y͹ėK 2*c/Y Pki$xjOi':c)ؘϳȤ. ߷#^>#B/g'V_-+h]J=  pe2F9mK[P']U4QYݙ'@]EHy!^ZQ P;~ӁߴAх:6%^AgGyӦM͐L"[5ZsF`L)voog#c7cwk2~mN5gaꁬA%O8!#\:3GONeD&*NO43ac&u)[=_]$M IJ" dSFo7=x k&.|FCG%wC>Pδ;o?zh6dCJ旉z\?{+.&)Z@;CQV6`NKh( FZְGPR0tOp{B8>Ơ̈̄sH `X1W­Ĩ"6:"GkcҲ;;}Pmq~j|Yq:.x̫ݸȡF:hC H+Xፙ9wϩ!on 1݃P2Z˔;H q]zވq;9CՎPB$p* &^Ljk?%c b큋M)S;'@f[Ry0H@4B%&c+O%fOX@?*>s 2Xޓі?7h-5{WbsqWa lUN!`lBS"=NJ?FCG%$=REH> !|Od&Lz(̟mCg Ytyh*JGP֪}܄W0zNLa |W6ҁ*Hec${0Cl  {6~Ṉ.O+I*bs2=Ōʱ1w]edFl0 = kݨ+م]|(8Tt9A;ཋTnZ3WpMOAd3NG r{3\?Yꑑ ]Pi`DS@|J׸?{n.GB|sy4>RX!4gf »68]ڎ0F*,QcBZ?ݩa H >7Q/+GnX1&٤}[п7o]*ls\¡!䮧JW %eV ڞ|Lx ֲhŀ\WÕqf*VD-~굙_z3pg'G_wܲ# IRZ |.2pF4N%FrLwY`@ѻLP!gH8Yu`\29lO: D&qw)![,:Z]k yث!,6+!!6? Ddi$c礗WiCObNv] %~w9Vlvܡbs㕼L%elVnH yf+Es*B$o}[ϙ±kUXCCy_4@ЬJ?iERҽLRy.PQsgr^!)8'jfK0jI߃s>2&*T*3~OIkXc*@t<fˡđ)Y]zզ=(Q{b9~OvŸ'=aqzc8W1|Zn^t^ܭX~][D!oE8±Kאx5!˱8v97r 7@4GR&s{P$.H8En$j4oDS2nnSQ e#LX%|4/LqHnȖ;m@-gϽ=L߽]}Ov]h2~X @dU-Pޡ qgmfM*I!pSp5c 27.M4 "3~ǫL޳E:-N'.j@8)G-d=ƒUg9Wӷ՚dChqBؼ z+""q2%d/*,#:sٝ];z_oAŃ3 -88v #Dt@**,j8X|GVч-v99~ar=C ?,g0" +~v2KV${\ɶ*Һ ֩iVDڬmcʣb&rt%>]}ťYr)cr_@X[^)VX+QޝP`&q3ۿ2b!ҽӑQg8YRyF`x5,]_e$0(_2.5Gɴ[F}$;_AE'YeIb'O ŸR\43'86 Tp$MֆxC#K*-9VgҡIp8 ~S#9FNcߟZ15GR8=(G0flHXӣ.$m"8 bt1Fs>BqG/H # kS2xY8] 2៾鋇n3Z^-<,g|%@cQN(:_&2֥`b!+ipmʩH?qԓtR.z  <.ʥ@[bTlO^"D$M.+nwdM=Dj:ɉ˩`9,TMk[/ z ZTWS_jys}Q,vPyrdisP)AA97&vc"f#olTFwfVӫJbGG]A)86 g@w;t({ p^燳0)Z fc!nr.f/DSZk"O&L >^f+,[>sjjoV{;x&/u&MV$.@R|,:>);‹fr:64ʾj4披N8OFY~ɥd[ޞ(낺7LC@2Ga[āo54Q5/wh$Ŕ}^ 4,6[rEY\kc!*jD%en47ZXt7e%^ 3IxCs̺_{2q&C`Ɋ xBwmIz07:f.b],a̭n [N'SWnqíy'j  R&dַD_'g*p /ޘp )ˉbPS3 kgþ'|5[zA܄zTC'.bs߽Ј!ݣh\ً{󊱵!C%pWԨ=y~R*2(n˦1thݜT R֕2D[.Etn텞d^ |= ʜ[{rO bd Xp5m[ݔqcz{d *uC/Κk/Axo1S >\':J>0?<yWwjhB3!1/Ϣ̋};* 7DW!k`ywƝ\t\RFxK ח\.oݏoOzn8W \$ʨYLg([I3w$OOM LJͷ-Z }tY@ƥ/D[rГq2M09a*Br_ɑZ=Xҳ bz-L(~#n/ cK\qi`f <(#&M@C]bߝ  zIHTc X)e]V6r ײ㊢8%ci$8/#kjmRԮ^zU3WWxe׹xx2w;ޱoV`(CE[WDv47~Xuj9f),L_d1UOF^=-rb>3ܩؕc6}Ik}6RCĈăa^uC#"4wSq:wI2JD|Tw<@?g^5|թƛmǝ̘b@9rA~#,njYەNمx;O;BPMލzD#8PL왽U w2pÒ#$H' Y:W8+4DQRd)=O 6?-f$~7#);lQk0Al& uB;6h4dNPtd(WoRLUލq[{Oqwd &ebu/Gj` +YvwS[{2;Bɔ3n?m6Q5s3fhGqMeGl xܵ z:5- un6 5hQ$ˆw~\*ҵoFsA9{tC-.ސ;\TX,НQ^mk_[5Hқ-Y`TQLU'9< ?sF-;/pޛ7NeC>i R{6@g ilxhb@K`޸ FTÒH'R7*T8c^kc*,79''?I/Vlch~nR3̷Np(YL[a_Q1̾X^]bbVtŔ^\dLedbRP;cG$xuR3%PXqDˤOW7 FOyL3s|;ʭ*FN^,bpqA3AlwuL񎗠x"lj:ql-C5$~\V>p!ImgtZS|`!:G1 ;b3}L/ޖ|=$v@ EIwI S ;b7쑀88d>P8)-CI,fg5,`DmBF *Z6ĥ[7,M@EUZyzXK!^yq&xZarvwmo?!/q"<"c4hgm+O1<"Va#Lh0% =^rѷD6gHP\`]x&.$:#}ԩ?ěMѾ?KLeM^Ks[8FX@&q/╢aK0 *O-gډA64Hi}m+|J~! !$~[bwlb?U(%nԅ''pkg-+o1ؾy[q[_W⎹!4Dz`_Ud*YB\"8SB&VP\8݄:۴9ThX㐫 gn4{$k9yH6)qnRۤ%Ws굵?KjSoSrpVD U=Z;F\aqoD51FcpH!] W.΄ds c+||y N7ugn#x9Doႇ`Y=,CR#,,TDoᠬI>a kt7bmSeMe)6 ,_0)s2mĺnJcjVb"yt.x2xc'&$~?'<}O9w%!=$9_8MF<YK TtlK\'  +|RL_-g3<\ %X|+to9<*Ο_z닯N8^M [ oc;ya/:nI$H.CяYOMG'23,uf궤ӤX=,+464`Ta,3:ds"tE,a&fa$b="C+|,6퍍=Cdjw®/=-nmx5+k5W@勪;&@Zy|.3.M^_TiNkN#tԢ;vXWW M]D:;)Z ?|0ҽ')Ha "3$dI+b}AC:/o7`bc|B{'2_l&lXV- q!⥭i)Ew2WE܊ϒp$QOu΋2gَ.HԊY0]ek8  `9uh{@QR[,]2跑" s2RHO׻%(0]:؊ MAr1wn}`KwADOmj%og1 ⍥I` }gOZ <] %r9@ T7MYy%3?+E۷qRj 3uNM!$#2bɪ@YЩy,_!oR?AQ/NWw>BDðӫBD|mc^1}rEUW:ܶaYkdIZxq!:yaFD)F$kԓJlBDq[{G.ɰ7nKc^Fk}h0ٙLPKsuXTFЖp& 1zf=cPrT=CO3w *΁hbӓ>jaSS7>Cgb4~l&QSUasՍadJZ$"36{710F8@l86i Ņ\g2G?n4RMjx@RLaKfFj _D, sC", l|[~d äh_bm,u{:_^/QXvJwdl@HE8Dnی3ρs%c>F5*6&ƒS{ݙ3A˄zv0 [5I0/GYS3Ɉ(NF}]tV*UDi;4l50X)l%6Jp(Uz'9䲁|3쑮xk992t<`~^u>8+aiBuQ Pf:߬=P6'gr'eرٿS<;բSKb`p|!9h#” :pnMM9`;J诲~?ԉc[w-!C,]!L:!.;uAxݐ 5}Ω"thW0Ki#Y1׶玵6%ob9E&%ia'YG,fJ,%سK22ht[ƻ?HRh*wDTm,>|B6m1ǣ[IOcTY 6{ًA?4;]?Ϡ8^s<ǭ17Nrc_nѧ[)hD*8 '$mL~ 3ᓣKj% ҾV6AB*F㖷c%Лo ɋ=~HkSXIB DB<%bQIU>K(,E!8_uw+Gsa'޼B{Bc'P.dׂ>;Px75Ӹ4R"i{f}}"O!AIH ŪTG >; r?wKe- S&yuj@۟6/1ZGK~eQQ֠\zCғXK6*Nזu.M]j~_qB^ìɥn mְXFDོ)z[;-䤘arsݬq Y7 p4nPQýZ9E75Jnhg(P #:rSl݆]Ȑ8I?AnMY 6b_j8q\v{.몠0vدWS/e؟"cm)/?+ڬb"C]l D2dCEN8P7u ҝfV͂'ź+Ur挎Tk>Ӡsf}> ;DHBv?AgM4,`kM2oaP6w+ftT<ֈ-\ڹ :rsA@P?\ %bH42H+&14x41; D@A 84CmQd}GR[3TsV&<7 Ǿ[-īQ+c>]h FT90)2 Yc_*_TeJp\U|iQ|2r P:\ ң }`: I:SaSCivj{W #e2uFZٕvEd<{\0Lrlc%GH"69ݸ'N5CzDi ^| o>:`[N=}\J#)Xɀ8(H+!"`ۋMRhk\!J4;Fm n0_PiZFlj W:\*K@L*@tuZm C["W]\YSoF x-Ɲ-OU<%/"gO V.,*Syl&bFXƀpc6RnOd6yep2rQ]V2)?Kxv:T󌺤fU^]_Y{|F=T{}bJBƄV)E$;~{˭+A΢И=B/Cٛ!zy!cԴB8r.V7-BZ!@Sƪ|(5]r/\XRȐ=sڷE;[t4ۢz~ Zn5(F|Q,1AԐH9nU,ƫJ9Clow+[f )EϦhڑ 8%;p._>f'7M(ҕggf|GVld 71Eyv6 c4Sc~< t.bB]t8>bĊ_+TS/ VRH€l ^>Ħ(!z7'6s“ Qb;փBҬp< ^ x9D,}CBPpHfV}$ ̶i3vDRcRt)զ UH}bDN7!Aso5Ӛ/[~we-q]g._c/XyP9NH-7Dnx9Wd0b[Awvۍm}5ra(*f_-iDt 2+*T[+5QiP⛫p`XT.0m&#:Sjb uivB@Wah!g/7yd}<^c஋Nc)]Y oq聵eU9t6(VhE~߰L}4߲=Z: У ]:kث \+Ǜ:urb^C*D0$ep'LC>p7F/j~fK3 [dzaT@jջݤ5i*;I)X\U3ZVtX7p0q 3[$ŵDhjvJeqG>=B-A<,^__bX̖e{duӖ/'IECXhf {W;v^րc~bby48KE%Y LM'ۖ)C^"*^w4ᝌeQ - { Mϩ,> cG튐h7R}Ol)8~AVֵ[5WjuuyUi0 2]p15m=LW:8uDA,s>yܭ!LXgRZZ(g,T8Nʠ[i +#̟, ]YRԖngZ`(G2m1t3d!?`ɯ0Q9X_qM@vx :zL6lobgn՞"|{,$eI@s0LH T]t## "J~x~Bncxw4y>.֦`OXF_E6 M$ DnA` <2eU]yИ$0 i)Y"ap`j{bKY B.o3t;Dza%}EM0?,u co77=;5s^?>_6`Zlcy&1a}vwޏ<亾(.tjK -Jp=3]n%8L:؟t2 p=Ȟ Rbq%5 >2,1,^-Qv ?D5dD \tuMv90\$[ eIA+68Tyx8gv} 6NK3(6&k9#)Kotw۰ %) ` 6i!~ ю :Jqk}f7( ĤL׉E-i]gk4b}\GB_xص4F)VX*.zyL;*dp#>s.{!s6uZ[4^Fn4wؔkYEMQd kڛ}֫J. b:hM6l<Z]b{%/ i;Nf]z&~Uw8>t O.jGa"=wA!:D$~T͂v1`Sf_lLΤUYEr1twΌ 8 Acv6I<‹$F79*)qaDc'Nqz(ܙP%daY-i#\<^Xht-=v-mG$s]_3HT#f;]IWʁ|84ϑYrH@b2"EeCx`WTI[JۇhnO;ShLȫZަŞ JQaa,޵YV|0vVyPi(GΊpS4j?9THb=L\!dgJ *%=}Thɩm_s%:0QA1g-5+V|xl֨'׽WFl2Ә)4uʥ }k 7re4߳--,pN9SG<-yOD(Fpנ>^^<ģƬ_2)܃, Xh^L6qv!!8SrG:Z)r%XyyKR+bFǯ!LT/3AС?(T^)i 2ڢ糇Z'B0W*!$_s$ dx$7/\DۜBL}S.UZFגO߇t:IKi.m T|50 9;Z-8fNr?à PళE@9usC1h ,=śu_;|lc1Nƕ:3|.D47JM8Q-)b t^JCYC;xnZ 4D9)tG4ᘂw;VHʿFG֖s })B'8P~M7ݪaGr)$8zE-zKF|{KK{~ $!ٌ +{UC+N܏c,FSA O`IюOc㠥 ` |@s$L;0|^5)U1m xՅ/'3ZM"0DkߐH+ >d'w%ԪUxd$=0QQEW|`̔TUYk7d2DX팡#^ B%1xTi9C>\$fn R<;AC~\9uؖOE+`fDЌ/v"17M_Gl_LyCKŇWi<D'=jȑf5vr GR4"*\)l=50x#ͱ>}QBXF=HMu%:_RJ~lT:T7~ #FI<+x0%ˈO+R/| ܯDDk417 ݢˉ1O,}wwJIispi΃sUFؑ]2-O+YKv(|vqhZ F QN&ir\mxմ)bWWdH*7CRT|f{ҫWA p*{.a9k4??oB?4p椟2 d9Tnt\rghܮ0PSϫ m0 p|U []D_ $6np lSsSK7+\mf;i{4!cfh+wU#[et<K#ۏB)ceBpzL+ɽs?D ꊷ6R4䳌ѥ{buK]ŀ,7ɦ2Zpj}vǠ9R30l:·36:kKl]4 _p_WCG(c}l ^!q[| WJ5 Tm5Rm s{3 &̣(peִ8B'gg%Y`L.(C]raW1&yB%`1 K!R@p~'ߘd+5;M-aVߕ+cDI^d2O#,kly\?Ev|11]x׉FcoGK[ `wHss_#KӜ*չ$ +μ0}8Yxd:2(jtSqy LռFHGlHAR݁\W5ӆ)]=mVG+쾰q06gŕ,Q37~o'6Q_7+,@'p7qbWp^ %_!_/\#\ | ͵.ttAIдk0Y |qd ܺ9y "m}aR_ Fh[^  =HG†Z,z<ڛ=3T8zQ/zm*73!fL1u01ӥ3myy~iJ < UJF}{ V(z| tyaWgX߷&脒.F*X(.>?ק86W mŎfQ.S;9kbflSiH =Ҋƙ]"l|8V,˨ @YLHrA~r&4?à>-LF^; DqG %t_}*sq}>˯>(nq ~D"jnOo5G:u[O997B=_ ngL]:$HO^cAG=v4+D.U3!ےJЁ#YL mx$_ +)Xt掽:cR*&P+ݡm3 >wUZ*]YZ1=,+m2έx!jP 0KLyTG lMOO BY(WZ ƥ`gP3L=ǥeЖZDz })JJ}g,O3B>5kb5X#vrRڈ_ݝnO{  4zY}gv&ѬeȵJ}Śv sgmZdV \IwQ;k3US+'p9 y+KQmz 쪎jݡ_lw/+QdNUJFY^[kaՙM_DA S#HsPH'#NB窅5[ͤU n)nbŎi<|qudq+cO(n.Of@-AGyC,=@+Yw񹝍U;a=kdG Q֥o}@| -r2-v&h ݂$< T\ c J猪uا*c/pqZ/ZXM.MȺ[*ͽIq£,%r`yn᏷$7%4`J/GDo7jݝ!׿ !{z)rВm%>VI%rI0E tUF i$ImWU1^ ;<\0K y4ٌYѭ>5a' iv E0]a*' AaYZNy_U 0y&M#R)1h>R l7'JP1gD;^YY'ۄps @t}܌=#tʅW5/;MK9XIbVc=2;V`@HY* FfEcOcGبBK07z[v}|+1vu~ciU$h +45dϺ;MPL#D?`{/nћ$z(kMa]HY9MyyiXd! !3zCDZm)k;E2%QtBq:dŎ#c'3% D`7ޒH?H2KPesgrRE'7ļ#jy0ÐbOŖ=zҽM ɓl6p+YZ%iY柡zQ6o[EOAQ/)˾? #ү9o7{bel֍dG7ѹТ0>Nh>C N({mRw87 1a +mC0}C@{[g!w!'$""4%l3wZ|`+%]x^kȶ|&˛ ~,` ZXv[yM.c9Ii{ V̠5W=:i&PYŃxirlx0r Bc i O} ?edz.z™ ?hΘF}B\g~ұMϠQa-PpuЦ_Ubxr<:8<O`ֶyZLwvSjf{-K<(P= { $˓Ex,/lUUFD\]w\r xǼ Wr T)OF;=J/2.OKsU]R zZe &Ү}6-$;f |Oϛ3Loc*n}N.`TSa(X<qe@6ܫ*OH&aՍ PỲ E61:/ө,S#^׶YCŽ6jixDmR6Bxc,PaaAݦe#scOl]$"g 4Q)gXiðqL`A\D)PTN/I/:42zMcQ.'5~<[J; 3e$TAҍY+'#h>s瞡^&%&*,TcMk&7$wqkO:sBb}/3s&ao3edx14A1b_H R }eC0¬vItsCZn(MJWLRG{IAdӅ Co,iQG$/ݨ N欓_m`[AU\"=_Ediri l@8_*h# Iu:s1V0$KLWyEFkk zUR IxHy\T0f(~IVj1 gqtl~<@N` ًS{G8 WgXPՈd[XNr,(|Pfi3vGj]6x"YQpͪٹK&M8 5b8!)thjuQ(+0yNabҞnB= CzS[Jr*nHp?`O ?@V )i67zܞ*1yU8߼I7HJaԄ*䧯ŨW]`~]e(WL'm^mc1(D! 04U^?֏XԈ"J@^(uw o_{^8ByX^{7, ~C}rw?}v@]N_ 'j5$r}dX!\f'>9'۵;}*t&sZF%S(_Fp\mL?;Os&eQ3iIg6W4+`?3G"YcCY0J^i׬{c$i-3倻%T uj›'Tw-?\:oQhu"+xya?m,p4uC'A$%g)U 9{ioPxe'8_w=N6n=Im03?+'/[A('UQA5?Yʤ7K= h}6xB?=J2Lݾ{pA95YGTw5`:3{c*oUȼ0g*T6bm9qjkû)jH);(~0n8fXM(EiJ4nJSn9#&dV("Ac81 <<ȹ+#>k LɀYy497h(u [$oŽoι1͉'uE#[ʓI3hl/~/~4G@~Ʀ1(ğwL4L<ٷn[bˑɓ(}*ڎk)ъ{8(ђ A,.0 hdzק|2]`ࡎ|KO@Km{|# =L5 \|]7_]P$XO\acAO;t QA4!2%Rek@5JozwfggC)aL#|Pv],$%$JR@%!BI%hBJ5t6'6-qvt#pڍ xPo"q#}$ ZŬwֲ{j7lgi;2y*j`:}h> f%±Ob{^юLšv/.nYX$J1L% ڸ?~GdZm@h]LGRϦh.m7 S,&q'z/Lt:B7bo} Va޷-(1@8ܽaI wfֳo-Bdxi{=0Ƙ3wa?LΧG_)iY(l['5`Jc)2&$O{F1gA4m #[b6!I[CxC@gnu5q:1_2>Kʦ(":զ (>Dsph[d+3riu4+rj3_w綌ٓK4q[Jgŋ9A8-甔)Qj}itMY5v_T弔'=-V~_kgfB~(D:Iޓ1 fH۾`!p=&sVf-.b6ށiyW F=a,Fg(T5:lJT&Wk;ץff̿< DuǓf\},m ̽΋{C-ND*‚ VJۂV0J{+b~c)yAibD>PeMN@ #&B,c*2\ȫի dmw#ڤ+k8:[g@@^( i4\vF~X::)ƞkY=q8X -N]4(6,yz` f JmKd@P'gqB [tHQ.z3n6?tN='g?{()4Ñfp;|'uoV K>F$} O}ʦJJX`c$3(]= O ~zfm(;8_B%W(o04# #o죫R8Ƙ]$g萙{kB;"qUP}HIhCG &B߰3!=[JG)af'#&cIоfF8qwZf],ܱ[:p~_?N&^|l O/R A%²6tO_\-̗;6 >(ݝC8I:Nw'{-Bj4,}m#ņÔPscCYnci$ia0p4 =#F#ZsT"e]tah5Hn6IEoT}:OỖ(e;Yܲ~LuKXri.1YųQg^656)8sFUtEv*yMȶ@(𒳧  a9aM>^UMl#~8ԥzDxJz@6EoX/@=Y6gs{+ܭYc3* p8vQ` IMHtϮF>=$*c4a-JRR_ [%0DFy̵V3OJ `kLQ!tܐR}O}o7]";jf~xHs R2sb&Ɲ" 9gˍw#2 ;}fJc|LBhI-hto<۞n[!YS&ă`8Y2{S>cZWJwFP|cJ^ܧ~S*ںKecI$THs'"\ws?(7P[[r&Sr=ZK ?Y|~~l!pbZpkѦ.uN`x'a g-fV7[560*ڡ ү] th٭IQ܊nMlkͬl,kuQ{ mN1ڻb YM ipdD?t@Ķf;y-hV5w1n£IUcrrDY2[V,pM' "8 e@MJ;4Zf߹jVڌsf {Z^\]!LGUijQ{KU/ujnb3]Aa&y"O'ڶC1m];9u%+0L% ࿍qima|EZi,1uC"CɄ]TD&R|p?ᆃkXYKd<;#ju ;pB˂ RI+:(,G<mߒ,J\=ޔDꉃnW:7d* ] [զ́t*Z4aj6UCd7s ji}?>Fw ąlw`?,tw, 6*,)mA|/p`{U> H.aom*y70)npY`XI]_09p)Wßz%#m5h]eՎ$sፁHy|c-eȠZiAըl{ !)~HD +q!Ci N)xf(/D,&G.b jw,L菵3Qa ,Z4n1;Ja.6kEfI.Wu?m%}@IXu%6lHn~auNV G7,ONl!P/u2'1L.Y.QlT&#d\;fYn &JQ99N.}W.+zr$r5Nj)Fj!O67;[f@.σ8 c_ʸٿжl޸ݽلtxC; u7Yxخګ[4yzVos۽B(yMh-;0P..ʳCU̔-m{bѕNSlе\-ˆ3MGݮe jJ t;*Jbۃ򲤪p~"mc^ :/A#@Cbo®Rkj\DK|7:]Y=NwC]mY~0ሕP7T~ DLhe?㽧 6W.7۽(noi8y%h,tpZXEvKf$7X#4 '2#HF/N9.lW4QOQ=. #aHSm3L& i~肅LT-1oߤ"F꒷SquPy1ƛ5v5CE,s:]M!U5_ysu6 <\1̃զ?Ku?BTUZH4$M@4 xwj[)SG:^ ,HKn6 ׯۺ/UwԙyfShV /6#>J1kzQP. ah6 gǁxŜ1L%AW2Ԁ pj VZwK? -QƬ H܉cu|ELo&qK7;xDxLMaY#eRe`ȱL|# fT_'Z?PH:).!z"uAd%ؾjEyx9 oܼ AY D(Ϥxg;b*<N7wcwp"+uAV( yb̝/'wdE1H`! UF?G)?kejWO†nvVdS5>G%F0-պvz??xYFPe=ϚF;e7/k&GN kFFb&7Nj+G'pH؝KeTlDd ۋ,+wH=p4;ݦ*ٍVXy)vS.SAXعvY-j&x: !)eXf|R* s}u˛-*ag+h_w%!O/ vr &b[%sdCFp`V%[_A}E÷  `i|9%hX9x TLt2'8c?fd%3j92'&mن3nLJ ?V ..BhU 8>\^Dtt ⻀{z}㯗2rCW] U@븟E5}rL8Pu0{x_KZֿ:=Z w9Wr{HФ* *LF?fqjO 꺡ueP5kO//N8*H̗;PE&L0*dݛh *eEe1vt@L=W:`"ܸ%@#D G8o ),ʐ'Lt=lB,t+؛vHHIJ$,;8ޥgfYpGM{(㏭|θeLN7y;ó1 &yv|a qMWڅL~JGv{E 湿wRl~e>4&Ti"GBg$ ܎b`X"-V&1/5|#T 6oĭ;H)e31(F'tO;~&K^SNj0 \:&,|ÉV6ij9G<|bݑBA1Y\-frD0asZjd@Ęؗ5B¯9]}չF%^8)7UMMBZF-ʾⵈlǝO=_Rf FIf]?FYRP ÜPm^4|x} {=IS{wSy!30Lt,`db@h`#~(FRQ{A2!M\59ѐ;C(g1L/`m-b>:Pֱx ֜FS>*sƤ׻n^q 7c+M%|AyְCjy:دSW(fl +άHƇH'C #<ݛ:` W^3kn_Xe%U-bFzkF`Ew󹍅K8-՟Y1NQViǀ#49cƱ--9t;da&o2%v >0=,25 ,\3q9}\#O\US/eZ4'@9ĈӐƶhxU/}ֈ0.ZD۸!0V.?wG8:90@ 6S2Al>z5+xh2 AhnGN8߁=".0۹X66ob! VH\r4a~ݺ%Iؐoy^Klk yF8oVP 7ao@,Ypۭ- Y-3+ ~_Ӈ%{X>[1.c>mIG)bU.s!wt5ib'iʷ(QG\}G)*Jӡa&pUfy;.vypb^cĠn"&o}Աs*2 K|1:e {/d=J]UN `kP@ $=AIΡs^x?k{Uj fZF9Q̱f NQ`x͝ P(&Pcɠ7`|Ze})t=6Ƭw8lxH2 >x29fBD6j?3˨,cy meގSe[2}$H UN$Q ܕN;'n@sAN\M\z\LY ڎ\V{!ҙR @~cDpHH0Bߓ|MR[4a9\Dt^X04eA̎owOXd +srK7j xjn69QƄ?7RcuCz`# 8_߅ rc [PFَ&3\Z&6kpͲsu/lƢ7l)@v&`IGHI]/(S8VeT$I[ZK{F4<be2 _'6h .E{;~4,^waPJ%V^4 n:ɋpys@23Nh ӳa=_Ќ8ٿ\8^yN-+cѿ7ODxyVqvք/BZ7(aSjKU$ʥQ'c[L,q>oY՛;7ta|,ī ŊwmojYԬ-n+Ver2x~PQ?{y+0v>f~1FoZ֗9:S޷P{ DZ-,TCJV'l5|l:C3iǍʡn-r5\grE$B0^N|5dı} % T-j!dbx8]3jˡ#oNXN?"_ԣ%)XfpxQ;]J?T1 @eN_I>2x*/вUU0aP`IAN*JJ7*n!ر]f%7=B" yd2;oP$,sY:-n-ǝ\V$?%=u:hKX7TE Fgy1<_WxoȐԘgf+⊼*=)!Qb(e~&'~L>5Zn<3+%w8yiӢgƴ_q f29{eH2u&JYfi'+(^IZXb6 ȉ^lڎ\o>MS{c4'J^y*:۸ɼUlxTxE2TU7'/{\^C%-[O ^GH=oUUtVZ0=vӏV}(g_t\!7Ho6;'묮yGocNH,cw^}T #n-SFUq ;"g%Rb&_d:UkmK4/3 m6R[^1uL.6E?'D( ͸yAFnG5bm3.W3 gޔ.f@`U'ўmV/*dzwް&Umₘ f/1*|56I"\}յ߄&Aڶz>,<{H۲ :+6u0llk=J\,.vh_fwf]n!ްv7QUOS;*I5S L/@[g; '~3¼r[j K0>(ז1!a k SwAGDYlCo2?uReSxUr\x%;,&E<q|ݸ#3&$Pt9xO]PK KLag:,ԭ& V!m}9_F{dzYMNzeUvr6u.f_!9 ,z֊~F;w\Ի^]:Oq1_Q. _蝾zه"sc*MSpа{l՛6w4nZ:v+_3T:E]ʧv?C7D=\ % žM+{ @ LpYɝ$N}]ʋ~YU 3 LqˬlyUb8z ,y'jwYMNz BߊIts>z2E1Q0ʭ,_,0E)-rAx~QL<'oX?$ [&9`E;V$-71'c 13.wgs*73ULLP}1ZFk 5<ⵄ7gе |3~==rOꟖrk&D*YENhWԖ_- eGbOs־,)=yPd1avm\ suk/0bQ* 6r{Ҫ狵Vc\CE&q4Qձ) uUI9-+J!x4۸sŖkt?uG, WV ȡ~S8Z:˗DB(`C'.+ZecBeIr\s-^Lxν?HYN2-ȗdȑuIjK]v؇3ۗk8YْPǜb< #Ⱥճ^j#Zm JаEK~Nupt(Vk~G gWTNjbx4X E,#۰n eɞ&NZ-θLG$@E?cŵ .m+)}7qVz6M2ATs2SNG.`r?fg:mFα) HQ9Bި,* 0̑ m(U\oQA'^v l<;-OuH>]ỤK@ 4(n5H#aZ*E3 UaǴfeR/- 0TP#wpuGs+[ ccmTI@iL-b7XE`Aa"7zBp_c{WBVN6&q{SJUhQ!YP8Q.Rl? ΔS?4-{,)<+q/VPS2mn Ⅳ(|HL,r3bwB%"whToCϔ7EFJ_CʲY`t؅^.f .AS9\G(R>Xv}q` r'zV[h<}p>{Y^ T~K Y5UHk?2ψ>Fg.ٺB6U':N݊vX+M/{4tS#%Oq>C_ ݀mX~3>/ߥ [4AsQЪd•(5pPDKXXFEmc&Xaе9`BV7,0| j,!-E 8g[ d0×ߩb7/ܚǯerh.tOWV̊^PT7dʴZ2=l)\R?Y+d3+sY!%FqXQÁDg)׈S9i?F1S2* TB@<]N/7@xĬoaI]ǥѭ]e74;{)_L `({C#1QWj!Um֩M $!5 a6UbKQzR5\0s*F>TpJSr{7艹b_,FOyY^7S6)ԃQSjuǂB'|YJ3?Wx =s %ABC.m96jN2D J*VoyiOj u}5-Pwh:}ssyY bږI iBꂸՉbL~[ 44w_B *uh*r {(`to@V-'Q^#T f,f ?65"\Ĥ`T@ܟ@A fmRj&[D99Z^OʕnLwr&`+u){af 6P9-}ap1f8b|/mJjRԩhf16y񶳏lQ@f\hF"U j{Ua?WH]q눳eGl3: P-Ќj|smM[A L)0&oe(3D6e ӛW{kPLiѱcU-CЭ+}B1ީA9!(M=D9l'#+o#XТNadiF $ z'o(Հf2w97׃$^,~}6 G07l ta0V p! 6oSђ q:ӧofa^<; U{ֱ g$]% ;WvbdV`JiWSx!C`Rtηz0zA(%Ag+qMw,z^k)@=ϿZI4+. ;SYە@TlʻkC8"깹cAR`iØk5n/l{`M$u5ɭ3վ^;!ŔOtW( m>i!"}.N"O`Ʈ"GKJǩʂsQÔjJKvC:͍+WlXnimKBck=k,gWA#>G}R{m9Z^gZnw#a5FKQaZ]田pverOkAT[;$xMDFf(=N4Soq18C IVxa+_֪ ]sCi"׍~x md⚳lE[m֛GD3 M àVi19;r]{&`eu/%f*  NW >^Ci^͇ #3)#}E+ڛs5Ȑ801xKOaJ\t_#S7cїHq&-\GQ8N+x-,?9|mۯL+p ?]UBjq>-͡_ѯ 62>LW7J_zmΧUI+]7AI e*3/C}4s8li΂h iH,B7cJ !=+g!N:+?l_k5VbGgɪ [̽Z@dJ} 㺑,IVtr3ƻ&G|)2i^ mz̡찐#tPEC2AJWY+Q$RHA,$?қib@۫ '[XJ=d~,._WDdJ465'J˂!H >-h|J@hYkWOd} UDq>1!Dg }2x||*r>*~W CWTWTs$ Glٌ*DxL <3d߆ZPh'm S`d#bLv5w(dvE*MoAm~3Gv86|,> H5('aó:!>\G41igHv]A|Qi[U\d˨8ݹ6 \S/a;h\K$_Zܕ82pfh2_З]%YW<yjUdl@S]u*B^ Z,2:DO=&;؄gA мҐbv ,,Xa|j\dyYN ܪE{:ϡC 2PnN|K跨OЍ('A5y :-XM])Dr$ _i {&JJW9Hi]QqрP:ΧSȽd).z1oWN'Ӳ!njVHwLü.e>5ͺ _B`(Yitf^k4$q&*# F=pi+zT8,uir)XP/@mN{Qw$^tq)#C9+TC,"/,l÷틜l]!\KySؽd9m^M1D׹u[7&߇vl_.Ð H2Wzix(ij-GF 't/y_ď;0ak]AuRw4[lQW-BwmޮP(W O.M"g+8?K_)A\"PDn^f=aF ؿÍ2{ţ+Aup/Hh"W3)VEtx^t@M-G+ %.޵|ߞx6r kƭ*.찈,eijݛ򚾞L|)&x;'J1"c~ S`띆eBXU!s<;<$tvmϪ[XCϪH\m%OHaDeH'#2>y6)5lȗ$Dh 2Õ25>bcJFk~CSkjpXyR`˜L 6bf/~×B?sNH8 +GMᜱYb{Ibãg X ׉E3HyI7]8C"$Ǖ7QV;!ׄUuKr v/YK|-* ,w ^8 L`03:+h˦IOt*ϊ צ,KB㩕W9wR鿸o čPGsavf/k:;{YK8p`Os,4F&2fuڢ+^.j&ژ띶(ɉ$pU ,O )mmxYoQzvi * eָ͐Ui9imhdqHZ#am? T&z^p_HDsSj~K!ib`?"I! Ul@BMNԙ "^$Y#Ulis%c6o `u/XҞMƼtMoa/"}[oٳF. Mt OC^7~7:l-qSS7A+.(Ug(ffԭd38dnXR^_)h19O!6@X_WxaI,4>'KqD".!ρWzb1IQ 1-R8[DVS \#@Q<2! l)7DF ـC}g~&@ a. J g& /}{Om=h I(!_QO utT~+#gpQek)F5+tdx@>j)|U6Qó! :uk1<gQbKNB2twfJgo ɗTm,x*YɄP[I6fRubs1T!fs^U>"0>죸 0jvRa* 4:[1wuQV)Qmw"(Ӵ# $o<N9hHx6:]O2njsQimm5dl+BC |믔-oˏ]N߳Uf*e =2|*`%kpXQMx>J59`0`(\t PtQqALsX#vDzUMm49Q_wܹ ;wgsV֏zRnrY 8MB͊ۧ%p@?EG,SMYFj KD?=sBGo<4*>8i|:1//Rَ$A~~0 HAJ7>YRhK_[?sU+B4qg Zz7L:0^q .Rbf_\G 492q+f? ][ ]6cBe,J)?P\A{h@a.i.SmEf-!#~,sv8w#9e$l̹(i\0czzE+.4wIxl|}~MVfGM{w5(Gj 6gloE|HE17aNl`ycVN pz8sݠ%AHu)yAj#`/=C$7Ko^H߹RArmOr4kyeeiP!-;&fZxݞ_T] xصn硠t/F( [Vg)&S Qo$gLH*'N:BxC$~ZݞȳV50 Ѫ5P-jz hkɅیk)M]c Mhc憙);\҄ f=Bl͑o蟋|2gs5q:C_`V慁_ ҩj.kG: ͘z-/Y˞zP%¢Ï̕ T>$80uqwit'H``$- Q@k C1k],e{GlLھ{?c3'2]+gw6+j+k AI ʊպjo/^F*kܑ3 +NuU nAezrƇDy` H](EqsK#d؃-L!YAidWM-w9Nߡ\Ld9=t㮦oX#ri萜:MǥcLf& la[@"Dr-mO)}u)kLƒC޷¾ BkEl9fZ+ZC: 1Ȩ*l,6t5Y4 }S 1Ic|6`!6ќY%r. Qk:-Ifx+V@m߈l-Bi jIja+elԚD&c5R jüA =_c^9 09@*|lp|;Jd \ JU§ nعnf {2=g,s3 MT$MkLtPqe\/; 8I~\\zi ݅<IT/3*t6ۑvkZPhԨok'gc#fʟ\dV ɭ+) `8RBYA@B%Lv˖47H+ r/7 ˰&2 o@wnׂfdOɤ#gqq'Ρt-go"3 x2Y37aJA1#N>YXGQZoX A8K:g;| E6jm8|_&͐ Ծ{(,w`yiCPHseT9~rkؿck!j],9Z;BR@*cv[Sui+x2>D/k}=4#&ikx0H,5ͳkQU3q]]'Kw6%C4Eڵ6˰^%=@NlY6eeKo7͜C̢u6 s0Ƣ[)­7K;tl&4BO$]ể٧gޝ)`EǙd+ }9_2(E<@pc|G _,cLRuyvgPZ3,f)xt ߩ$m0C[i(۬A׳JY%q| +Jy09cvLրK> ySeq&O1c\.xnq4rݦ>}\<`RypS2Х4e Yk7oJd_T$RkKw4 qPͼ*NR! ?N]qdNRG2 0d4 \eaJOؐ[, 0+2`{QċyymHt0]GwVI_k8ӃEH49f_71cPCPo=+9T7fhLvVcN܌ X`lx}d:p0¹6hZh>zl@kZ﯈>$"O$fAvxQihWUZv(KQ#'~1B&:g~ jS!lZ2jS&\{sT i|S70 Ǭ.# T`Rt;@ַ74;^M;:Z^tGi}+y62$((dUΜ "mW]DR֒_vwHAX83}`ppƟ;Mq_(a/.8/Ui;%'y3]C_#>ƒlMٸ(2VݯO`8+$Sxm߆k} Qav<.7zOgo2.X4nƛDΡ98a1\S8LQӈ/] rQwMv?XʄL&~Jw;Dֶ);.`r8e3N\ bnۭ/|`M..RjY0/O-)Ƥ}lKA3gQQܱ{q$R_ oX*_;VE'w>n{>l;|9u#LO&p@n$,[4g Bc6257cF`=JՄX}̲civ_$ 'hJUYAugEGO5.zKc@ zĹ߶TPȄ߃=qVNٻ A-Bt͡!e?wv'%k)DJ(2SL)jK.Y@[;YYdǥ:iw.9MnmՅlsQ$ZDbg }p {؞VMfLi6SƸ]R-Vz"Y>8%wKtÓ~J8SUMt *[ӂ>:v-פ5f4nYZ]3^Ae˷S?6x*}R.A i2,zJ81L& c ]3>Ak^6qPպt6c삳5ަ, 0tn2=iʪ}yiM85[X[AՉ{;ka?N?C?I(.gJw458v5Z5xȣ_ؕ_c-ۅYbf, |u{Hu#hN+5i/ߡY۹{ UKk{.JV׽TcKªbDgXp| _ Dh^hn[,ׂ@  "QKR\{$>X 6p'#(/vڬHQғ2UR>Y3m{IT‘_;?I,-Hɲ$\Ǟm^ O;L3O W{ SV.*_"/J?EE. ~yשּׂmXHhT6*R2P#xH# 'dhhX^ VJtj9ZؑK9nȞ$wxJD6'(}›L?\@cy]WHdN{炌).3j4&KD=-`~пPېXJ_iQEj2FY$|3AG΍Jj&}TTv ) ύt-AԄ߱nm^l"+TP[!4n1.qf7r WGE$-#$!%I ,*j}/ucm :2:|:˜` erk8h/;o]t{S`p0u!gq:ncR7 J%u㖫(Ri0,jbl՛͖LUWaō5W@7)UԋDG0x ?,uUFys'Wj'lzVh({D̓PO7q{.o*l~ 2ϗcK%Doclc߹Um:+Z VXh`brWug]R-e> 2{YVFZM1>Z1 6tа^8=1F_w)}P֡+pd 礽K7c00Ä>R9}"-P>aPBO5ԫOӑΒ!`f)ChʎgEu{TI&O"q A%!%dV ڹPQ:\ I+ܜ ^x= pYZ5Kz=h7)[@U[ )RHxj[Um1hF埄-tM5sXPI*ӳU͓gZ_FEΪl O5~3cƜv<6F~BCiS_`Wg|OV4Q6 IGWӼS룅?֥%xOȍ=]%q El ьcv=@$~_,[2)kj',#=KJ^ N/ h| OBو1 *A1'sv.󆃊MXp˟X =ylXREepE: :+A(ȏG+4_/4X7K ܧZkPur>#Bq6z/| db":L,' ×*Qw$?rYkbW.45v[e-+2`V~qoh`n ߾q:Q 8k$^wyH<6 o=a`Pdv^$+g{ և;p=I;GhAN(:3t(_5?\`@|z*L'~ IfG=/)Lm\ެ=m㊻Os/gKtQJ|3U7t?4żX+B! V{*!c6`0ظ$Cxr!CPm?ǔ·Zd 4)kJX``QYMUI=Vk4]4m$l0+d&FTT!# }@]LY _ltgy/!Ke%o%!. ?*~1hIr4 4M XBSD*8(i2->]뼓 8vNp)׾m9wveՒgQr<\#ESem6 W8w*0&=H8aמ%"ιq@O -'SRcQ2kk:Zp.I/ ea\ӵ4RvJ u+DљǍ\ zXltyxk/YP @݅'o@ՠue'w%,lHH>n[LBnLP0cIq~e'(0bcW1`DB>Pu–j؛nF ~u%`?m[tl%)y}<ϟKr:"ȥi*EARյ}76sYB>8G_ZMa~hy v>ept<m5 \tTpB/y9bPx9U  qAFM|7?1vŦtW9Eֿ˰  vStTOp;*&"|E]-(J#mޖl5"E2s{l= O ;8qiZ<%BJri5ᄈা Y~}ekAg9B:NuU'ZJj=m? UK(J)(I%ieBQmGJ'mP1y^'ss۠|Aj"E/yo.-{X3@$a2lS)a9x& ; Rj ,X$E;3wIw`1@k%fΥ2-;?|R!L-0񙋦s'm͋LJ Ǩ03,G*Њ#NZ:G=#^4z#t8f '"[v9S\&$N0[r_~ߏSyوxm^ 4HbZE4#Mj+aw.{PW'Ԅ-ƎcOK-.s<;c`2)Xѡ~=4uSקZ0z /g bg_pyvN:W!rJlrz+ig/::ݑS+E@ŎH X;?sOl2b\ }X9`HANQ4L[d^?{*4]iIěqDj,`̼Va3٢ PaE_p6IA-47ZvT/!/a!#]KvNg򠻈dCxiUHi0vNf?PFPܴO?ʫ~R?͛dbv 6eJ4qԧz VMi4+/Nz'lυ^>^ȼN$7Q/;ⷂbiaY{, R u> 7 ,eb"!US(HiWLOOce=X-C^ +`'x(Yo ӕ8&%^f/ASY:aJi&hAn)PgKرq{O)OG#{؋"_Lmi2^cջZzvoqۅzo2FH_/dIcػF26iQIW^!ǘ%$ 7[ˮyؕVq5dIr5 )Ǩv. ޜy*)Ŀ=I*/#'Hd!T` N3g2Rf`݉;VRI ~*\,tߵ!=,:?wXl\߈nΣ6B3Oؠ/ u ќZ AN?s@}b%N~N7u˧~W8;Td|]ܮ}Zp9=Qy֬9 W`A:Z<)+X_epo=\+wm i5ͥ4KUBEPA7[6ؕ}8R `-_P_?^qM` -]ƍSD\Y߻Ŷ8ܝ|p$޳ҩHiVOz;Ecov ue8+)Q6ZrrT8|, Evh1!I a_pȀ_:0jb@6s^aUhgl#w5fMq~,8rEW)OS䵸4Rp;[dʟ nuwУ=;{zOH+)hB7hsfj]_wglŢ_ T/4[XWZ$A/VArģ(%;yr$RzP`S<|^4kS8a:}ԛ=VttK&XBzBt0j`e\c2 eSbZx9d* /6!tFwz6aH^n.4Qv6RL4;#LNUᄅ |r7\EcCU,Ӎ{=h -|@ V3$yٜǩIFkqqru[{b)˨h[&&?PˠIԹ!b Ղ_Ą\TChEV?Ӫa@P#7PCqZbH!y<9'~&x;e,T뼌֩A'ᨑڑDogy,G{~p x"ܵ梠{eR" ۰\,8.SJ8gΐ@;5KF|1`}ߙl'9A8,(2ĸUS&=h~r Y`ֆ~!F Nm=9 y K*&nY2B\|Z83G8dyz sSKDxY?b* rDM9ujRO1-LaLAZy)7Y(_g.[;aG$=F"Uq1|2H.4㹵7l^ͺJڼv:)\fp an)Lek|D$Y~22 t|#DZHw\qk kH Zp20'x^gȈ ˱ at| aP- Ik@f"9cfSV2)ЧM k1V&߭[};v`jn$p̽}(=>UrQLu|ݔ8^i sآsP@ylW 9SiX-mޖ\[e-kA $nY6bY5*.h{!LG7Ub=ܱ `8b& OZ?73 U<0,G\R~1TԸȐ%HQBiV1Jn"jUn,m7bjhp7x Iaf@_&?Ocpƥч9?휆{.~5iPj04[^&W箆X@[HȤĥWr)ƽ!qaJT W 3>U)YIP[*IT7L |pc.lE*(!$;0}9L i_ch p(k22#1O[pοQ˒B,׹T zTwBa?&4Ӈ@pj ewF[GǬP#l`ZuA1 i߄=Cr8 KA90$$Ti^OF] 4\-2!&*G{YJ7+Jj"dP`Y4% /.CMDNZ.69>a> ]]ܺPRD ,#H 9 'B1jQVzEs,h|#.X G2l@Z(њqRD[Ϣ̰i _t8 >ux4c> lsAalGfEU CWnLGE h֗Y1@j;`cD=y@y6&[hf;@"fYJ)òd`-ć+Go`ro$zHQ99m\HcK~gz= UPXCզ';\ a/y8 yTQ*-e5yg8Cn*{#1տ $8N-G5ΰNǶٚ?b&l|#ܵ$j"-zX.ۭs{)q91V셱~|̢nxMc4{x!̍LŎN&*ȵܐwnt!MRqduKcY >nڏSaNvHhȈLmXM4c]A19tPE%]3NG1 ׄګ_44wNδnq(cґn"d f.Ɩ3ݓ3ZMߨBu,llѺquk.XUk4 C=wqm Nrv ysu"3iq1:O8n XJt8Dc/GpLd|'487ϱ ˈIwS⎌Ďnmi({J.MG!K=~:4&O+ b`|hpKΙLi6(˅a42p}dE˔o;r PeiQ%#W:9-,á SN VڛP"+:bgc= M( EI߱MVlj!n䁮D~bz .w*Z1RFm * No΄g3$5N=m. v/>&C`E| D|&})PgBq$hnH^$|9Eʎ"f,v&?$k9^/}ds߆c@e|QX R0#/% X8¢)~3P$Y V_t 9 C`: ab YķuC}rFyAߴ?%u,,<D}J72rGbeР:13e=zpD6I#(;. c`[aiy7qUgAp <jVRmw*Oh:ד\:ŻbxUa*pN7zڨ{Ҁrͱxl37g<2; `I;yI&| J52IK.]{jTcT?m̬хq_L{lqemfbK7}+IGxLCӚgs h.. H(@:cZfU%`Rrbw|V *$S4\eR1XmTd9g3m{pn$rrtc7ƅF&mE`F-*᤿6`E*D͎מ( 'bFo*taT7o9aJqz cCBM gm ˶Z);JY_[տN\Qz;]d"Ie$9€[;.(Adj TP4|x(#QViQ/t*gma s 1>祢z4NI]so)u+d6E*#bjZ^= -)>5]͔(3 Q֚. n{y_C>p \a>Qr1-aNVoIjuơZTP0ƛNEr#x.5LNj96.8KVAP4TȤdZm`YtBIm|HT+]'Τk7esE1OM)f?:EҥՓif-W+/ڠr`%+Dq{)5bt NŪf{Vйn8炉Lԯ0PzV0ENWhW55<izb֜K׋(?h>;7N9&p!"eb^{d%l: W=GRN hr\EM&q(8j~.oɮA \(>yRd+D]Am$EKDt~. 4԰qCox O[i/k30. #E1-Eh0WFDXJ&돯57Jhl|(nDEaѡ?Y sLUۆ6APTxX5ԇ:>_B1v}lÎ2([b,.vi4IVqn b(dD: @*LT8#}3<}_w rзGD͋X 1 wH1 L򋂁PtHC`?Ou;ܺFC*9X=t"mv@HS)gu6SZe@]/yׇܗ\3_ū>a;c0q؞peA3Y?w4mmPMt)VD:BͧFycc_Yv S6;X>Ua0xc_ O($q#YmttB2sݼ#΂QeT_)5kKbͽh6Z4K]?, =C}N쌥{+-P :KbV~q#+ǔtahN[cKE`S\7!niL'aU_1&fJ3& '+<gcJ@.=*~`S=v>أ` Y^?n̛,}&J,ʕxlq?I[x( i׾h M2&"GbvS:G`ѳK4R#NaNlr]V"PR_(P{76m/a&@xXwY}4dp&Wك r59Aq`=gm7io2MT ~SpN@֥xO uhHRDd~.OoiKZRؠo(>Q7>m7$腚:TGuV*B *9ȩc$0ULIcN66n&p|I0G |{wD:EO(WQɽi )okzD$ Y_EZB*cZ tD%2㷿b1 WDҐ[!iWrs?Dr/#P BȾsឤ0Ѝ`µKL4AL='A.)i"R4@ zQsq=Is1-$DkXꤎ̎52c9m}xY˯.mɪ'+O`8|BziXT%/jK\j*&/-Ede xmaMW@dM 4~$pjbaS5sD.*٘. sw!Mʡ'I %Mcy&`f|.^RMUiLc=oa-0-[W-,|EFAcGnY2iISNA9Ȫq9.@ Yh`{i&KKh-q3@ZWcI&$:Wx&@LωQ;Kt|z nlcUYJDY [[Hʈ|;gGR7:]p<. sqhH@sbP!{hI.XҡKÄ AW k+]\>?l $%N=u5&kB@,OA;ٱ<#z~ZgpdB#gǰvP{oQe>9~.[M<a.[N<1(D>KhV{0*Ƙ6Av;ZU oۜ:0/!cjP5LNqAZRkI %2~c1v{N[f^g6$!uc{/%f30);K$;s cY:(mnY~  KZHjXODmεpd&bq|PbXB};Qu11]r2KUo 3H7 OT h1[p>64+ox54q^%M+7}IYFe<ި$SqE*(>WgK{:xrY0h`' H^(֍FeʤG=L✠4R*u& M4<ش#%8~C|4RͰXlV-n!Cbk`:AFMJ9H…PujnL7Tg{< 4P)Yn~_s{VE[OYyIbL("s<Ĵ׺[>p|Q|X]CFy$ r2uoUt ATYc64- FpN?`v`U9Q$H)8r2|)GI}_nvȭЬBT{@7^C\0ĪN)IRBw.Իc}'IDBWzbAm\\&CMzRE-~bjɀn3RK„}HJi1TRsXC>cg"k?oifB0N|CV6OyD6zdSB!!7K> w\%go}TT|;C[>{]]>ɦwVў$ạg MpRA[$ 7^qPn96-@G=~[ z (|^S#7H9V銮 S=՜KutI(lEUKuapgC/{&e;OӝI3M* ^V[HAEDX-=n,RGT1yq'װqy) `t`~JڵXQ^*L-B4N2r1reϛQ:'$P m2[S [ru8o:u v#gxK,dI.蛾AM6=sOkon#a׻R)/'JfRb&ON8v \dq$&N:%H]+![UN!*MAyr0JeaGWc,Rh !WC (nkw)jT%WSOgஏ/d&Zayy -18-5, 1PEɉW>Uqi#mGxĥCr͒Ԁ6cB=~-?xrߏ4En]@KҖ~rI#Mr)$]f,HW0ި:l]_wc?[k|:~br7sm0wM4<^UR\3E;83 7S &b~ .lg{:%鷲 ?w @'w36Uy;VfչdJG+eo3,Б')MN7=-Q1VyBc0$"'Vtug=P@)r[K# ijER6̩1C姪.9?b\J%jҽn8F/O/KAd|B9$'ϪѨhނ"`<^U'y_`s;A ttrU&dl04h.^#|aT2]-ڃ}6tTm@č8ۺ*39X4 +5Z; n,W9j_Eʛ;`Z nUʟKD_zَ6i/YmeWe[1-c{3нg(wMl|k,q/$¯T;UrUy.9nxeZā6. zt3b~y[R@+HI]3[d:J boyKZ+C]ax S1Obf1 ^*~aBL, X=_BpE^b%by{q]hXSyFlƔ*:Ňv*|v@Ȧqϓ ԙu Fuذ2*)V`]drsjgU:(MFFi$:ai{9YϻRr nzh54ʕ_[\XJ+iOcQQzWt h`_R ~h[[ՈRPF|0:ڎBΣ/WTbee. .xm>bҴZd(@ Iv~$?LKPJԠK֒!0[|[yD@*7l%QZ;`{ Õf! iP Oiem,[@991KaB #q7Z5Y<&yq[2N*}}< /5/AoaCKt876)=%l&D{e*V mТԿ6"rm>';\ ?m\0uX&V+db  K埁3^77u*Gu~[Zw467#` ^rSF|6[]p?dNCxqYX$5 c}l/i3$eV=鸬`^r)Fqhhbju`+"eTCeUc"%RqIBghH-Kx0ZzxC/R6T}nhJS+`l\UvlZ(+qd:8sꞧn`)P\Dt  Ǻ:F\D~Q&~YGvp6g("*0Ca'! ޵] 4K0T عZ~1X-E%\8E'~㾵e^ˍÑ0wxcն˱>yxV@{J]a[~_VcY7"Yj.{bDe0zOi;銦bz퓑.AXS뇑FܷJg5__"!lXJj"0Uv0zCcȮ Hi?4A J«*42뎑ExBC1e ُD8d-m|@AA[݂1g?/} 㦎L(n61US79cΗde2&;EԢ"Ӵg-N7iLWg; criBM02oU怗DG0p)[K`WxnyjW@/儲Vh&h*zjJɤ?Ptt5]n%ݛ+}~ı\TU똶=uKˇ)07l[^/m`.6kAJ& u0QH!w7#\AD1N7d#jAcT;d69oď|0!&'ĕ4C \k Ģ$-fBh]d_t՝/Yc#˳~^OM"Ck`% *-T-NL˱ b7=N?hr&*ĄѴԝӵখ5ǠW80c> (RŮe>=HoQor9FCՠ oYw/q+ d!.Jt#o`~/Dt[P'X&* D :*$}B7l4I AP$F -{1|8+)5|y0 q+&<_1`sUg݃+{X9dXP^ _Ghl2))EUEgCŮ!, A}?Sb&;?JL5 "GbZJDye//D4ܽ~ ]zjD4 7>\]x 6csceV9=M4ŴnB遛8~;%s6}GQ2l!+Lm hb: }ݔ:` П:-xZ\˱Btd^~O[bv@C szʉE^Nl:e(EϻYݺp]*Z#Qls53(:rC~8ܧ- <_1f(aWb 8N5&#XC<>shea N9u\TFPMց.>?yK:4UsܫhZ ~<dN4U3(--ڇ4Z'G e3kXЄ2r!9%j'Cxƒp,my Z‹ҚLp 0^Lb;;i̴;$D̉BڀA%vs&Ĵgzs˴}SL^FUUƃ o}}~:9(_;*㤖yySBVJ'K;5~@8^_{l?ǢqB',=cmT?M<: E oRf\}Sl?m;f%)S)2w:J_d ΅{ksX@ɠy:*nI~ײS w(($HV@As+:vXП\xcP6~>{#PG\(` |2T _8BZn "PaN>CLNŢCX+0@^f`;a*b,`o.SoD! ir%I]܎6б'N.|12@ K72ZyDwLmqP eF+bP4gX)@D E4E7 <ɣT`IF %3 qrс `YdQ{rSAm ܍44 WeU!"h@70++2 ڽj=01%G{=b Uӛ1u#O_ ^m-XN^zvr̆\c<7I-N K6Z˻R3$x9 NvhbtU7Ȥ}]w6իbP1~ NӱjO>̒x׺Q?UI_2sž>sN_0wEc]zNGʑa÷AupϿ@mD0meſLF^(fu/F4g)Gۋ?'׊N_g_YHIpHhSGbapiM(=Nz姻y @˵p}zG^\8z~3\UXTi:kQ&ဏY炇>v1 Q;pM,ߴ/9`mmJE{|+&E|s+wFn$VmڬUI)%J|6lXO-yҲ>D󎲰j= Zx?pGLtA,Eq!Ў׭f)=?ʑl Z]MCYz!=>x &R1iڷ /ۛfn?.cXgXQVeQp7г?\CN7S9ӫ7l"VAN;`M= cXv&70?m kW~X)lcW$KDBafJFl–07.F 34<~*&3Ǹpl׃U&'?/OyIS,x]%:kkO(XZ~hjl8(V ,b6Ks@~g AzhN9~e::@Pw-d6Pc>}Pak3[0dr|@)O>7/Ƕw/SR* c$"#ȇ,bO>MZmM~2Wl|DGfO@ GtHFE+pipZLa]e0aaNK.*ӕPxDUdJuZgxtȢO7<|z)L}sz%agխzR/G BgD|V(7ϓ`hUsm1;& < NZh!/ 'u$BO#} ȡ&{Gn*ٯ-pNO n+WљEھuQ,X}N BM`>?WJzyl, t5:_zCBMtqG%XΤNc8٪$z;6Sg"RM2LRZ?sfSF-폩͡OKy2zm) pzM[ k^rIi,V4J~uڋi qc4ņ,n5u k@X׽tw%QEMfkgX%l\nV=>6p1[ٚ>³ Țt 4XuG2WZa΂zjq4=YR5Vr6k"y3Cc)5ŸHt)\"ULZcBnon9ϳ21.76]H?vf:.\%oya t$;D@/$`*(E/"%j,,Xڛk'd1+ <7eCE\DĐxB̲|!ჄՋ6".Hav|xB\ Z]dc[mVM>zKİfح*Җ£"ŐR\Ed`<&o*]h1>W'==[1= /6aFH_x벧J\3rVX(OIU/ b04Q.6^ y:ܤm_>A˥M2 u?91w_a:d2WB 6mgyktk HdHs.سmU hJ1R#塬{8?#'N9 ^נf\,gZ0In(dUk/꾙U~6݁M7g+o*[{eO~ zMRI1L.QVhqY1(R Fx$\ M]i~ٽAմNLP|0ida Zan'pfhAx<R3WYajRAS-9/JXP-ɁNҙhl6/lMJ7.hyf=Nc̮*t:񿹤9) X4Z*Tf|w$hNI"_1S{)=nY)P YЮN5BhSՎX=Nmѐ2z2r/hL:Mol{ lA FLЏ2xcnjMzt1nEn&nCE4f *ܞ44e]q(ϴsN+J3 la~iԀ>zj˱#qEO`yy?dž% ~x#Г6%g4Z\~N@gsƼtU7ř?)PWc\ [*V>'o }c؝;/o[ ;+6W" c{(tlQ BC6J cA\):C2Ж/xn{[R$r.֎Ϫu0v/R)`E@ _EӒ[&ԛ Aq< r_F V JฃpK':tzb2CQPFzH5Jx!)W`<" >(9bMe qʝ ڨՋS0;~&S,εVt"{U` UXlBa:EL(\̱5j<$q˜̀V Ů,tm L\`Ξ* u5 w9T[?7 ɣEg=,b. 0FH`zvD[-8,n!z>6hxCzvAa)ee FeP&'ʾ^X(򼒩VGBuj( W24K=QI(/yVW$#I`8#N F LjzrAm+GC!ρgӌG灇!<"9*Bg+;ƺ~z/$jN#o|Qgʜ },' o :dj:$>ӜTQؚpWuNs|$'nĞ(!5X/Ԓ_nLlB(q y ޻9 c37V2#g%| Ћ/ACM!nI WL[T.\5gJq5M~OOH; $^ۭ3.mJgߊczS&BpVAS|S_9с7c=|3-K<ȝ&P*˅vbs n*u/L䍪xֻZhc?0sN>ƣ"- "Y y=7Kayxt"rᘛzCN}(`ey`VWe?hw7!b}aq,R<2~1l̺ Qtt*\Eb5< ]aB~/ /\FTPHS՝FʩZOsI6>xZKЖv!~~MJ^wÉkt*)bu1\. LovuϏ;i) pȐ|iwO* bvv>HڇM, epʎ?khCíO1tM-ˮ#ǿy{Y܊`^*kfWҀM]n~aqfj6Z?r u|!d{$.E{PM+7l#MA+գ|lћ{2o`:'Q3 =TNhp&E0,^7X}[7:@!|"̆u:-gpD B(l:0GUFFѽ)Sa%cC b 2 H^8tX.vבZB* A7aP%QJQ˩_eRQ Alj_*IT4X5?CҦW2iJۉaTQ#H :Q/&Oa(,WΥfMS&F(H4=rfA{}Pw(gI_nrnxcw(Y.5yor4@Oh8 |\n.o=k \{ET[`".w;xj!F7NUlIg8`m=)Zڴz+I,E ]MZG|7{g.7ŭ&|al-~;ac=_FwOͻ 9$'f'2ịGVf)D3H#`A W>Nz jxm_pTF4=I&s â-вTCbٓoGx+bJ5IMb urVqⲘ(Ba'*e41m*֒jB2򞆩.AT%<;b yY$i i/Ӄ3®o̮~:G~5jLT<,~QmP0ឥP`-! /rM>x-øT/@6952z yx3Q):֬ĥկK=ΛZX܊n7JBoh]*&эeAe\5[4}#+ۻ4rr:T,u#4&w v{t>.KE@i_ Jl z@u'Q/HK$;Rn6 Ea/7ضOni/P3ƛ:nBy{xNy_NK0`RGF>I*K&A/Z'WRNVףHt/Vsw|j,Ol)O~ǰ| Ӵ¿ek!QD}:CCnnFa'Oi[w?)нVr ohջh5Xگ˓Lr!>Y>tF;7jC%Dh;H#i1Oa'u3AY^fHs&8cW~[/U١D XCQȎJ L/[қ̥Rs֍Eb,')6c3ɜvkN)uo~/HILױ,+*׫CWS(ܦ*T(#PP2Wʫ|6n g?yWŰ'`t' ш0LP\3ߩʬUv./,G`+]XNDfx?Ff"LO rc+vHuC:%9 8'*ЍKo*3zGK h4#?rM< ^O+G{jvnt<}t{i~AaǬ_p?WJ8[}nnt`!: }cQv_\ǿU/&:0pp̌| ׭ WfFf\tKЧn:HlO3gsGK#ɜx8$LZVz=xf4/6Lm? < :uPG+"41߬%֧%ۀ  ggM~@";3d* h8KnG撡.q͖E4k!)@xvf 2^h&^Kx|@9+ K^nَ\JǷC[oe \]$:5 ]8;ڔ P%r'6$Ȳb,orfel^x²y|W˄ FujyKA H/$;ÜSWlš6l0fWot/ҢGnFɞ$?=mwIihRW&tt;mn9UŪ#wD,p^}//Kh7~//9y)+gq[xò(B2,/۷-$[_q. 2qbC=ipII*dװ]ͻ^!z9)d(x^%iHMHGOﻥ*0Ù&p-hQrfSS4_)矬9ϪuRPBi(90#fyj'1]s<$UPdg*xDdq\W*\XJ,"D)%=Ɉ#ӯ`wH^j1 V3dç{ aë[$ofP<懸-1P f@EhA5BaiĨ6d2mb%b)#+K-q\(Ny{y{۔=~z̤SXc 5[Z]ڏFg9$V0SoЪqj S"7;fHf$!"4.j%zט <\v&FFcY nMO%Qdr)IG~Y/ W|^p&r$EP%L@3:Cu lk%1z?.5 [>fm~jK |j,d@^|;نH'/3PcGmB iΉ/(1q];1Ȩ!(_I3ʑg*N13T+7Esk7/~ԑE 7=h/1OM/ y00{=F‰پ43x*=hE#Hɛ'4_ Y/EH)1Wp__S1bW`/ڎrPRQge_wLYDcԭ';/YYx)&k0,M׿ː0;dZ7*Ay>sN|ntH4O,iA1f98dɠ .&"Pf^jǢ z5 sI r췱7P=͔/ahAsh!FJZ1pNll/}" i8ԟv?LtA3 גS N܆VAI8>|K`hHUkpJy͈ma(X~ŠMJQ1k2`+xw6VW#:0oIAk9;Ɏ6kmRﵦLiWe632ևhpNMǑt(ls2$o JY"u0u0p+ (P!甞NbK+O wP%ӢLdpW)75yR.Ph4% 'hR$(j4~0,A>#k=D rpu<\B?|?F]rgf%to -.JfoၨK }m鹨|=QK9H0m`V<#|x&I.h<&5LbtM q#[L4k_%u6ڟZz0]Ep>Pt]::YM%" 'Bܷa/vd(^.9>?2S'ϓ @V ]VmKTt~ C>GLM۴cw؅( .4 E=ӆu{0ܧ}vA,))L0>Gǡ?G "ӣ&g:܂,J,"dR:h#S9rKDe^ h+؋`olJ@ 7 h%IY}O@TR4W]ڥ^Z3#Y\dzXPImqS.T4Gt]|YqCkz~vSdrdFH<8&ft1 N44u?S 4g2@"|mq2'WWaW=c 8B{VPWi_<" $5#!Oa$ Zm N_}P1/bDH|!|0HCRC .8=WrFp<F}$"wugm'J*K׼]+¶w,:\z܉r7jSEz*5`TtNӯ'Z<]BXg dЬ4n#ɶ` K@yc`KL\'h=}Y1jb qv..8Q]0?Eo.~4{1[:Qz ~0v̑h -Zi?ȅH^8hB.cN^)QpߧF*w#aњHx-}-T"`OCrM8o8-e}9fx顷gy#oG_`Y9>w'?xEoӳA^_v:d=7>S:I:7yI[Q\H |,wDGdܩ]=%yHPf5@nJ 6QO)YkM7},=КGG@  EVaeTO8QO@){Q#F ^q72VIdȀy(mX˂|Iw}%QƨQtz~4i =^hդYHGɸan39N㩈$sƦlpuQ؏彙&/#1D']\(NuzvR@`YjrJ҉~[ĀIn)ZGF'OD3z_([.tLw$(Ʋ }(x*ʀӃCŊAnهTF} U벏4f(myդY>Nkd÷2RMý#ٽMv]!MBOqr_ gq|]$<~ЌC dMy䓄i}5KpuᲕ!^jwvFlڋmNUe |Kަ<1.0ioj,z`(q㑓lmM뜼s ]t}ſv[Gcc𹓳&^t78x) ?%(OUY8' 9&YcC!;n'Ee_Ų^LY+Min|( Xі[ۍ[H~ЉLu0QnZУZE&gnT;2GD Q*@V2J2WO~FY/6CܩL{nC `5ژbd  T3, R^th%'b{jɪ\n(v?.뿛nzCՇIB.R`:rʹ[MHzZfdS=2;m, Q>$=2֙y ȗ1zA:=PYe',%)&5J?e %~;]Ibh\^RP`{ v*2Wm`6< ZKOI9? m&9ih^La4#Bo)mg}Z!Pux"1dA qWw?:xx>N7>L=X@dފctpˣTd>xYVSs#5x~V%d0lp|wt"N -]W~.՗~dž x²V"8D# @,V fц~!O֒` 38Jdc<[/ROu܂g9;5,,R\r\L1m$g~%37A9|.c^T?eϯrt}"lifK:1Fr_L'o, Ny#1M-#֦&_cxצܘ_׾&?)0>jEJ/ມq&2.w_|+2L{M{+W^T/O7%3ZMx?97mfc>k< |{.nn,=b%3\|`nMo7z/v֯l/[ΕZkl%y*[7%j,wc,yezy $l4M. $*\99XAlE-&p}b}u\hAW|.8;$Q4# wր7)jcwhɾ lePwV~u߇7fj":By:S~Z[W]ڪ]:ugݓv:;^eut9o~]-F`hWK%/Nd߳< .)Փ͂b_ a} eYb,ncZFa9-'k]V܇NInɸ.];F'qMaͽ°7QzGt7FR]f(2 H{d| }T8xfjcayUCcnĔ]kN+CJ|+hxg'_>&UM%l .N֗CPH5<]8z*"He#@#u|Y8"v4CJ(C\Tk[~"/@P ߹`MIPDXwgsYvzAD~Py!ܬPPHR;o-;BrJ tW/܎j}73]}E/ &5Iʛx `e7hfюsX+FCoKqS2E]uKW7;hqr"% b % քx`ޤqy+$s|Z&H.`G71ޜ->pD{^8IT՝ƶCxջ{*噘ŧ*٣Piב8hWj^hBwJmv;xvH@~/s?'YtGg^[5lhݿsՁ#:0wxv#7`8v6v/ z y H(@Ḍ-G^LPHa\,nm 3 MPdbԄM*0&\mt|#KJ 4}tgq45:NG[Ra a˖˹UTKjEzwt㘮~7k v0!Ԍ>cwkb=dd0%R͵qzX\$?"4v~6!98$:z?CC|HAc tkQ 8o/ȞJ6P]3rtxL2p"̿(`8X%FVS*[B1TX#F<̈́;jXS?lY }:0-9Cܐ+>+;ucoyAb׎;uг0{t6,|H jjMG"ѾLĢˬFvbN>x,M1׷'?,KH,BtynGɀΪxCYU_]ܤƜѤizy 6Kgʧ}.vL]ԋFkP#K{Z(zXXdv c l.T㺣4rSE|QM"?[G$ ^T4/ %'' ։tB/1RrGBHx4gWkt]Ic=2jZj娜2 !]p[;0a8O{DE'(]A,/=KV|]q%(J+@]t#iۡ 6j\V6"!c"X9(uJp˿^xWh i" .|A-`N +(aki޳?ͦ-7F{'q]g7 < {UYL# L7RipLU5IǰRMB_+,&xw&sm m,v ᑅPZ`ZZtke?<ca x 'Ѿla. :F n`I[)ӰL$*^MשMiKM<aIgJtaY G xA˾wJQ1>w w(Lb=cX(Tc8 $)i>&m&M±*2b.bn-zGE W3zbs8GzdΩ萹m8\=6LUU/ϧ{<|lb)pJ6/  0"KB z;1%Nۍc!3nj3OP%@yy࿧̧~S #*ftqS﷔+qe_ õ⟆%F83!.~Z$[h ҥ_ ebt^ge8)GIM0dE]-^XCu0(S4De_֛v||Dq$A!Ƥ|`}C@,)|QzЌa,QR}Z}"&9WViwq0 9-'ͽrS-t]7 GvG#D=H` 9X{ݐW9a{p` f'yBR^z+p! δ J_f2*Nd]Q 4J"`?JfV4Exv",w^kQ@2H˹}9t9\AB^.LBQRs6e]rPs#iUo7Ļ՟~ B=3DԢi|jQl`Ru-NEմУ6ͣPyԧs$\$T82bn015£9lR{q x]QWW כzZJ'|>x3"JN2!vT9R9(#- 򣕷zx"yF07/ɧ\m;b4r[w{%XeH\P件i$6abv0(K9*47+oxΐ}#nY/Zpx# /w[Iy|P bq=ivtH [56Td&ȫhB i4P79BZ7cz7qb$n$εoHUX{T {Q|/HV@髈~yt$ţVR5Kkԓi/M-~L=rO(%OTQbz,\(NM0tlam=] =?buSϰ`%bo'$ ߕ$<)"iRyO:c9QZ0~sj )k8uvBuE[aP?gܙ,E:GVdߵ^3x[AtF?+/d ^c{݂נn4%9:M(G slY9L2fr&|.-UW"Hsc4@NzsACT~ aYpJR X Ofa Xz! @MO$a$#i7nyn2 [=6+whaw|,5XNLFߣ:fb:xwzJ6o+ :0f}paj#|˅,@D@OlBK|iI\V@@)wBUW7X I}G2f=% \j9ӛsKELd~P)] 㘿hA Q‘3.:E_[LJbf Cb JVF4j "*$w7ϞLCunn:R(5Ym>c+Iˆ狢3T7/ K/Bʤ65☀O2O{d:ݥn-#eŧDp'4h[=^G.Pms AZ5P:[ R-ydi1+J_9Q*A3@^z&-+,$jd̀QѝP0k;cP£x$4x]&P tyy%XNKj6LL)K¿$Ln海VC8+dqm|c芑c8aj$ceA#PtZbL5$ElXVn(^+F??Q/yڼ0BCVH86E四\E=D w_`i5"1tkOvg0*r4ǝ4!/490x7`v#"#y`^]+EuqNLh6iƭSDqaKx H zPӭCD!07gSpSX* !Tġ&V$l=p ! F ߣ|hj?mQg565sbߒ~n@|(&8i~ىD)7N)zhAM5.u#<3饢3&Z%"ɇuS P^2CHۆp^*cS H.d6Dwy&??q[ &a}筣rAtG'jFdgvȿ}zyf">⋩Ag:r\V1FD9 ۉdkƀJ %`H:hI̼)86Wň4nϐj&t/f~ۄf D` ޿Z-V/wK}+>%bjs 9=uܲ]]Gحt#I (OO3axlPu757_jpg-,Ӟ65KpQȨk24mGKLG3:+Hs mo1[XdbϭPi8a'@/XDP =2cln}^zFȚcߨܗ{0kFS&ۧҀ qjRgo^Ue!'D=Ub[BFAZZ:ctGGdړ(Z#fEs\埓M>Bvų[胄 1 (O?NN`]lu#noX9wE ~L3d;ЫV 7n{VGN'C*{q_M 좀zqpNلa8'`B 33D%srsZmB$Q{ HCe.x5s؏ZS)J}dLLY<Ʒo/vͰtpL*@:b|be睊[pOY[U0yx$#ѿ}h}:OreTqE CP|(1R6|YPuhV U)x%gTj!po@-2sAGbʤ'>b_3>`^Cƹ:THFwJc X`{P^HGv=0$20׃ ]SN $}ܾiz/T+gQ/BV|N2h|!{tB'IxcH>yyQ£p¿=DdC&z!M;i^+O^C4}H{nŅbe"w7_|\$G@hPnvp>c$cBIfY람[~YK\/ ߳ +|U w+'Ɔ$R 0ɞ̧*\i brd[7Qv~kǬUoy"iD57L*^' wJ>h,םp@[|> oF~\ڍ_B{bRL'mZl9OwH`'ZW *I!$rg[= [IǮIlY܋A<ʯI%t4^o|a457E7=u÷uj&w\5[XzP)yQ=a%eIN}~8dQ &3H$ uȞ XnJy`}l6<p}T=6t:'IU NZw9I[*E*TiK>><11W~xYHyri˜aiY]"E<X|۸)I27E(>'u#40\s!tyN g?#ΰ#n[_z@nH(yXn;xe5Rk5+ ߡ}"z":I6(L̕~,A.K3$z{Dtq_CfE mPZ #  D!5!RἋVX0~b|D A*Be`sJ|uYJZA% W˼ lV |@/10/bEK\h<$JC_uѤ-bzy o&N-fe%pJ22iG'xzh@D+Bw {}ր:$?ppvkg_0vtU{3|ڰ}bk/{F)p*؛Dsv0GZu'`^Dž YZ `g'w.z-ay)抲i35 zdE>VUt1rpGh-h}ps=)ͧEP*m(c^d4^(ϵq.f6(J82ߜU)KR|}Ps"@vWrY1Z?1;pW ۊ7/c>ٖ[\Fg8cY]NrrH晳 AO ¡lѐ1{& '*TnBZ >¶xcL7W`5OBΖL-ȯ|a# "6 P}F4lWI\oUHIsVtzsCpA {3:P9De3SiM}bZb[lvqn~Du<֛L>f 7c3C~qZdx*CªECzZm)na ɶ;0)w $I H$e9zX.9Jr`Nx4E҃_Sq@ur7v8toN6/-Fϥ8eqf"ړARK+CNj-K0?sV@EЊI$mh|@Js>WxBj9= AN7a=|mt^T]3:U°\Q~=G舞HziT1MS!e}ʉ&pexȶQ&54Ahփz kIz-l .N+һ,:E@su\k1F3a}4.3k ~d3<$_'dIۛ&ߩt~08/rǓJR93i ac@|Wq $d ̭8zهRn$JӮj]L„;ήGi7a𛩛Zv-{hj`L"vd{5jl֐ b]`ǘlRx|_GGodKc%J%#pHħ"3}P+FjLfž.Yr{Z08F^'1XO +Cq($G$b^*ݑI@20p. xwQTzt12:󅧅都7f6X?IN.3 &h&6ುh*hueW}^9vBXV|$C +MkZpw{;/G9=1g -s_:A `|F7NH?*k\]|"n㎊Etڵ݂y-F Q 2t ("^v3ml/`; PbYNcZ^Țb _ s#=h7Bi*gVAuevS O{TabÁo1sx(_Jos>_T;pfG ~+uyvlY0%;]" \/b *ʱVRF ½ 9BۀrvDO-ݕ/Ӈz[;m ǚ*ڄ-zƭf[>*JWVOZjA< T0e\J2Xŝa Ig!x(K(|J?@Xdmf/ZU}7$?&Qxok-][iNUʖ꬝pU &ƎХ5si=>Is@ EJ)҇Ӡ/fq[:%?F=cvϟ.uJ&|.ny%B_=4f"N{{FkLgUkH>-RAJ]U ¦*ނI>\G1q61El45Cuc pY R3t\۝Y=.K8EّfJ[Pj#^ޚ}"h?ñsEv*;E9Ck,I@ QyF)4[]/.B;Ka\2 bS]3H$֪?} pvի1i @i>khc%I{U}3KXc&>I،[yxbyČZEPS)"JkO@o>N:(C94jt'g;c x?Rz̢b8+jygz{8S+ˢ{l"%51yVPvM+ ::ua{Q(~ïLjDvg?@:ސ*|h5ٱ#CiD&Sl򿇦yO,=x{Uh7`3k}0 CU ЄysCi[UQ! қu }a bs{:2&b֞CjrcsqFJ`<AI$/s<񻘭9eOΌ 8-*WrY'Tsh4(D#)MuExrxmMmm:d!Q)kPrW[~8鸉C\4l q-wCa2m[jCS8(?l.PR:-$H(a#󟵎~aP#QP1YyVMv|"r''7%oh8"BMIV:TPP 3t]:u8*}&b 䖊*kl77q_PӫD~<m;0$^۫]~~`IЂf { C/Dh􀄪)'Vdž?pyV/M٘b a#Uk(*8\ysE6y)`㣶 6Oxc ]o#ZmU'rmZ;FN2sT\͘[BrSgߊn䚛}A}4:PxI=J? q$Z㘤mv/db 0f%jue93>dx"utNM_ Q|#zpS(Yos9#i}J}nlbd~]ם.@ Z1ڌTPCa[T9Z/FnkyY#(TRrAhU`ΝXz4.c9-~;پf .@>|q|\qS׌~7֬#5,>`^ry> pJh5 sNN#A5jdۻCVwnve;BYsHRCs'}Z֥yIˤ~yb%Ch3tD gzZ/B. d9Jǧ]P+䖍'Bl(n{Fen ULxK_kE. }gm2@CX'H1mxQ,b0{%@'{H׭X_2+_z9Y8<pKym@yϱ:l5{ME|20}+ {}` JխQ@ 7hABL,k~0\s2ld7 =B GA+D8)(t1τ-^ٖSUݩ~R7XdʥΓ";49H3PG&sda[-ohi24yndzzªŃLI9 _&zqJhhNd@CB4u+k2 { )L8)1~`K|*s׆C:{Vzp7,P`{mt Y:X3J=2)Rߗg+T`"`)ٱ_?r}Cs|# aqj'Q sUq&ެ;7=u(,ץ QR HTjFh%$TNdWBy ie0t9c*k?{'w-ѲC[ȸqYCE-X6!lK\7 8gBI(UdЮdra~ FjƲƬ;eU)(LRяJx$=u|ð4~T|I%\= e);(O%_wr_1 l 2kWq2^6~9o [b&^@sqN@4b?PMdqxAU4Ŝ>z^"+Kd&C Kl`PNHb a: `)= Ơd&CҪ(9Ih 1{\֟3Ӛ8HT-d*~AU^6f]π =^S+Z'D[¢vJP-M(|BLNYn13CtL1 c44EIw]o{Io(*!m09Jl-DƽCoV%6k| Xf?p["F{̰Sڰ{ed,7;/ ]h\yN{HQ\O{ U$H'Z b38`ðe9ԤO@)ٍhd!r ͥ2]p- }ByƮ><ԋC*#A'M@gҀKYs<]+F9 G cF_C(eB D[_7Mo8׶?b 4{-qZ˭ _q>w0xR;ѓL,pMRA?]rwsϝXcH[, ϼ=2$<:Dn={TK^/+ Ðr~T@Sɝ#kfÏEM4jdXPX54n4.OZwdn&CHsXKo#'8,x ?:;G>Pf,'Kd[',t$Q >XNS-0 Q\!fܵrXqB搗\h}n[R0iaaDj#K0kke2 m_BʷO/SƄnN"0I\\;@ #I4 'ȦѴKwy.*/FU[r_J`JdNAs'%Z b' -nHŊZxL,}*Ωy 1fPrϵ`ݻ)5fpF0' .nQ$3z e1mXw=/BʆMH`~3ďoQ:_IY׃XeQkܼs2RhzH%Q7P@N~6 r+MC|QpMπ54Pf3xaa}e Zw$_֏8R> l&Eqkՠe">&@J=wU6t~G61 *Am<ხ|{H>zdw5B@W},+c-(Y*q.qqUo >y4Pv/Ϳu'ˑEŃ"A![osu *qK*WN31&|^*1^Y/<ÀnELz-J+c/?BV =YUZǣ|9q`lҞMp 3"JFJLGS#.qA$2#XlNODMd1ՆZ6M nES>EYHOp\8۞ئf#ŗMѻ 4ɲEf&5jVRdy1+f;jd,2Lj/- oHzG_*>ǻNl1VJUUR=3 =,+~E%:%3Jо, *y~q7hΑ9w~hS.-Y'$IP K^P,!, J{m3YDl6QB  p;Y/i&"_B,]8&8Oݞ@Mz;.Do*+Q;*Ě'yQߨ{VELѝ5!6(`8]$?1É +(kaŰeFc+cvzIL΁L+ת!ԿUȃV$LEo [cc4Qۙǩfɂ%$'ۮ/2\..0N3xbV#g\d~Î.crּ62.'6큶>zNJu EK/JH9F,Yh?r< 5S\;tS!CNUP5] ?!;ƴB!cK}+oM!}]p7)C0&,o>Y׳:Vn ]P> Rо r]Sg/[H0^ Gbn/mAg@z;6W<1H<>O.O?E ^j+ޅ߮M$8abP=~8U $f33_ʊw=v85 -iGKE**4T`w<\I ~ۙ@ G c4?x:ru--޼9;*YY$P9E.We|w YT`q%1-j}?:,zq)*Kh䇫pO_꧁~Xӄm$ tiC52B$|1+4c йr,(Wn@NWb+)($[oSFEo!.M'yШ|,b4 0=fPt B0k`,T_Dhw0vsQPd)[CAlMA(bMhBT,m F^5Dzڟ%@fLK{u`µm:f .@1>G_&"~"+wB!Bd XW)]DžK&E ZTCm7 tRQ^q9ADI9V-F22nOOW/)''$L-QI֌2^e!AFa jFԱ't@Zж_Te^Թv>)`yȈ ,qXo9KC$Q尧UY7л4g&XOD<2/@RnEvCI*TG {P}A˻;ȹ$L|< ˕$ SbL*d4L*#4 X-W3#X_d1=kݲ*{T$"po?{~m,{8@VEˬkM3衟Kɓi6|Jq,m_Ec \sWbJD7'b\Z)bSSK$s8Rr!ИO݃lx<*#zo#L(L Gqj}/K^<Χ4mMϺ&s:ɹMְzwp8ZοR ?/.pRQ1sh4ג.K.lPUn-T-Idl.wE*5c} u_@jWF}2rn^ce ˵~NR]%tP=1N<*u`Pמ'b~S P\{#~p^^jicm,8鈏Tڝ}.˞a?I«3ONM?ǘa h>]oLh|ȴL8uK:K&R: !4d4*Y:@c-ԉ/"6h8/ i = 0K;˞rv._rqB`y?AuFoFD\0>Yб߫wM!T2o)`G5 _9iwu m$k< ;@tOKM-U⧣ק@ B%t~! `C`1%ձ\ e-֚Îmmy/UOyHϫGnYZݯ&(K;|avVٔHQ%礛{2 )L<}~9=0-<&ϐlXO F?[}t:Xr׻@s+)D@]KwNG9a(ITuGraJ5d8ĩ nLZGjU `@J}-l|dۀhHŢPzkQ GvI-Uj5=2P^!=jw2I* x$  8$c>C47: pq,O";31HC,asp9AZؗ! a%;, 99RYN5ET(˝_vBG۞'9`wg5`+5Y[&$0Ԇ!],\i:KFJCڳpGyM3= @=ϛ߲ѱW܄sFPkgw[%MlY6YBXN؆ny@7+$c'\P y$;!M49fk[а-v?\H Kl><߽ Orىڂ fwߪ=<6o(ݜnI }2\G3B:XB&_**08Jxb8Sh;j-[Wdm_K!kwI@3TJ<@#qYA ! Utd#@>V45 ]3ݹ=(@e[r\)$ZA Zw\0Ͱ'tYGk@vΙ+䢴%1.d0'[0x0?XI0gu޺)mpAMI=">1WQ?@KW-^v-" =JV&qD?o_AQnڶM7O -UqAZȠ9E]/*τ9JȲU,4=0$n8+l0_FʫU +8k'6>m $OߧuP@ <YY& yT#zlovBn Qz8v۫niنL/B7 ޏJYz_6+1DE~Iv\z\  )cSTUWVoUp KQp33B:7ꚻZ.k9R9|{;f]d \p0Ս»u{ W^Ǿ;"SA!wu@/Ksxu9 CIFt9:}0Db,2>i i#WYbeoBLY't}R2p7 扫岾csf@]tQX t. "PZ3Է{<)> _ ɢ7ڒS3bcܶhsfs`X$(Y$we\A?!-oB'!'h Z |qR88 &:^l!QWFSN})cF=r_r853yfI̯+XՈM44AQ{ub  "(OVA_2xx2,*x=R4+A7>V~*Kp? {;xS C9{^J$ mg&#TAV6#S' =$3N$򿪛B;8FA〫pB_|ʔqy>bcLǍP'o61znzi8"Mu1Hwj.*KY=k; "@M踙;L+ƈX"xg"҉Ra?>&}{'*fE<6N&0\.7JEN%ř:cFS-"C|˾ZHbon2nAkyk?n ijd5E$2?1N w)5|5D}5<1Naij#D+ѱ[p4ʖ*/V\"ϥ\զ J#qLj9~8bb3JrVXJSi4!^fL-((rW4G笨 E_ˋ/8bP?7E f;pS?d0lұA0p\*PI_-3L_v]7A@@ؠ-|sF}VɵJ&%q ~rJo(8z]D}7yFʋcn"XcTBBdh_ld#K$3pI 2q 1BoMxlH1mi`{Ѐ8{d# W`()k+ fNˑAH$ ETJIW"UCelitZ;9&K[:G__XtvFsi?X)ߎo"cFG3ukyO\.Z c,۪AZ[< >%tEJȟټmt3bܕj8AAPy|r0z0|hmrC\%AH z!o-ICb6TP+.!-Yͤ)WA(;]U>Ji7G9ܡq:`!qxr 'd'sN18)?SCqh!9VA`@DȞq~ ESuT}6O\]c\ˏF%eio&PxʳR2+)ԂN& ZBgP G%3 dnylf=R5PU)l`)o>)?K)N WǍR4EWBpFY&mʒ8R&߲gq)oO8 Cjnʈ|>FgQ""nDht/煁#aw~ٌ;Je׻8/DAc]f[%LNNg*+)߭.b1,eLIL qdƒM>2NyN {'ʛ I)t'kZKRb[0A7pM\t e:(F$<2c/ۑ],"}Ed 0*ܥb= FH2h:|o3mnН o߸S_HYԟfiptD Kl,aO0Ki-xm!x?ZI,Pi Lp>`D~U;=W5 w~'s7%A St5j#4@ ._+J77Wdk iVrJN9q8ەV%d&7b.x٭x3m=Y:X(H$,?O?t p"S?|rH\cH g./Ȱ<~^/E6{r͔MuzG ~x{pXjHD"Cu2vBFd>3~\w$%PK'F{L?-{4f3kVw)]kԯ OD1.pFl跰Ѓ-!tt[,(kPǏ5qOq«pnƈ8}NBVLD7ȫۻŸ5)'%u3J[qA w+C4z:G{6/G}\0yG f i ڪCf AiM.UDѺEv2 RKy>|^3(FlON1?wPʔ(Nm(Շ^|~L[1cVC m:A XE(S>K@S(CTv~,f AW?vZL9=w ˔Olce!#Co} EuVԅz#>*ʥ.kHAdH~Vs%M=M˒84YJ_z_d_,IA>S+ﷹmv,OAӗnc/8#;21uy|H(,J. 0!:ͧfq;"/+rvF-nek]r kF#a)y-$t8}Txo=jZ߉:/{ Į[ABXv&z`haQp~q]Շ+2$/+4!|+C>/TRRp6iIQ"]iXBg w'WzBB( 3Yk_hiK =Q Ǔ)c,Av&1:%|Jf鮾bDXXMlx QwlcluXPj! iP"LBw/Y=mHm;R n[)RhXjDҚҋ [oz8]a4sdNYit1_ x eCNA75⫣k +/.2(b޸2,ה VP!#gUo+/[2Fz #ys-GW.iO/fc_O~R蔼4G!XS3EzjHfcsǝb {֓F߱Gĥ(Z[9U*s2*J [7I"J(5iZb}95w'س~!.:3B WZ2wסmAVTGܼ=m5e(e;8: v똓 <{ a ]Iu,>'c8jWD@SeB&\bA!}e) '/cI:G@xNB ?d*m^'םJ%s)5 \pXAEfɅLQ.47 ƸH4[t%[QGplR9RQGf{Ѷ!ƍyZAª}wfTSs^JUFv@WrLf@@Oecw.qL lʀ~H&y[9[?½G Q^o#g`-`]Gnź2tw@sTXda <8BjM?B ^3=E:QUS!>Iao_3\ GnP]7AX*2*A좸sPOfIHo7Ǝi(<2 NƳrcz@5on.9(=uCUGiiW=N00@|.@+]|/]_I]U *txu/O Ra֨ս^s%5ur] Pi9Ms݅y+Ju!En3Qҹ}&ؔ3Y %ؾ(d+BQu߳EL< K?陬Z-?OW67*Ugd̫  a"=o3puUGpQSyfڪ'q <-.qpjo%eg?jsE{ţ&7,Yhl@ ƒ$[@BhIgm76ʃSQpDfX%(=\,o(ِk]=hI,X^wig0S: Z4OԦa'C80-֛Q!лWՋPGʢ  T}zB AOyՇmܯƙvZ)3{3DNٰL/8S]g@ MBdslrfNH/)i:) (JJnF:T4eM-PHgV%Fo k8G8 /3LhZȢ?\Yc' #L1%k &*qC4+;?N` iZ`@ÃR;v_41n*bu3arXZc܏D) F XlLl3ak6i ?o+3PR`eB3|:)G%(sߏx h@ dJ -1 uy?0Z*he:E Tೆqcxe[3wRC"hZE i*Hr ɩB]+}:ݧ+Y~խbMx蟿n3J ueޤ%wԞh': 4"cO8ffMV\z5F B5-ٜ?s&<!:10ή_e{;vfO_\+v0'%2_oOaF7gB-&G{~ wB`E5o{* %#{–B -jhb|3ZeJv `ݳi`n!Qm^Z]{⫙D e6r)txk͉,)ST%ujlއW3Qധm=da4m($:XQ삞bNtN$0!9f ;)݁P-UYoOt khad_Ru伮Lr7oJw \TEeO >(pgG} FWe??:t!e('ߞQ+) oq0 JPN${VvzYIS:B2()C5wVc#98{3Tԁ)6d7Ww-f0ײ:l'=!NQ9Q 1J"3 u\+Qѿ4䎟w&GYߨSo`$D|Ȟ?P@|Ϳ)*r%;B^$Ȕ'.oʏ$ϯܕ IP$o`hݕ^)lی_߱ ^XYܺ[ndSԝfDtBKA@ꀝu}Ъ ДMBE5^-d'UQ{=TDQȼgx-tiax]*1}IG[@$,*~c[ch,q\^k0{= eJ'F[5~=׈'} j<%7 ZkCm$->ES]ƈ|솬3cۆ(m+چA8a N![S[mHĥxIheüĩp^!ulixԄCYpa;CB ~s7vͪlQfjb3_b6 -lG$#IdsCWn Pݘ_o(m @QP}O_G g־@WM*8 e'sZ!ȲD{9X3h#m0DŽ5GL&EK֖) NvZim|+ef q;uݚ'[Ŀ7D^i̙ғ[ާYHB=c]i~,xc*וaE F̑c:>>hw [ʅ8&]%k'+#ZM y%y.(N]go` Xv@t ;( T ԅ*T@Ul!\2 }M,hfL r:p)7d)z.""ԩI3 X J4b==C r``#pe81n:7V[ vMV^j"7nA/}GnpzSVQN9IU3۽ ւ!]隸Ţ-,?)u8AO\-=x/s6<J) iƠ.! ';6[#0\s"'1t j0!\Ъe!nZWMNX-9YQ7NV'$mU[5%PmHP%c;RFCfpdmeg^+H-ʱ)tA Ԁb؂T笇8RNӳ%yWƏZVqD v]zءTd_"n>Q2r f\ӧ=4nb)N2y݋VPOZk ރuwZ'º_dm~̾Yu ۉH,b MWMk,kt3<9 Ɨ>͟`6limlНb~"S:!}@"MacOB^ףӉ 98+:G芊+1o WݿRCFr9$>x pcW{1,=a@FK]5(zIm J`9ap4NXk `Q]}/; [69WkGԦ0|0XcxACA\A`2l+S99\QM<t˓}5/WV9nݷAb0 hx4HG DǾMU'68AonU:h\]T ]Υryo8SX*K%_qmei͋ U&ڰ&SMBC$x$ySmJ[Ǽ,ΔBț5x%Tf@s{[9ds 5RULX8jSB =07't6͗1|=[Ծ[@ {>X d/ ~׶΅~28bCFW]g/dC>DiP9{qRk3tEG*# ˺O !tӉKOH 3rF=;//.1G^b[$ǃ*l}N;XGҠa[N҆xix4qgN㌈;G|){Ua|w\dڵ1k}-eL ֝7ml1(yì,go`|s^2!Kr¶C; o9.ɏIǀbBQ56H419`_^JcEjs1Q.\h"JHkP|'Uy] i@1eμzlojsnS:i +].UȮbLN ;߻ ϶&k,Ӟ#Ki)È[,)mMA-f/Ed͎S">y#9]T7f#Flzm~3_~Λ;^^GIXFY#QҏL3",#Gyw+ٓ SCEeq ܩ)Ə)ݦxS)!ߎC=R bPlq貫C/jҜMk'ygM>zW [)eHGZ߇бF[L<~!&p!XYȝzd)w j@؈ػ4" ElBI'1V2MN^ W>Q"A! Xأ5?@rh]*&$ɸYQN),Ԃ#e7r}O}t(qkZ.ʹ\VZ+ ;7O$J#c՚U}W\Q0(Ys\.;=ƃ2eD4/, 2]WeO -!u-˻;[iR*GqL_1S7"\BVJ^FC}~x'& U4j`Uz!P(;"M%_$p³>/aE_oāAv ;rG$ɸ̈PM]iB}oM}GMI76#@O@%-9׭8Ѩ̫)Hb)tfF6,W$sy8 nh&GpS8`{|ţuGVk.l{e"Lr?% a( ԛ2J;= $]r=F;MYɛzd ;cNp ֏5~ !^#Bv, ] 6ByٮTeߖ٢$0AJxv ~p\ C]C:sF܎܊n,Eu=:LDVv4JF$I}]`\zu?twcmmᇍ4C(}JaCN]H1!r\[QtpC^E!u9s0n '&<^/—I<|6zPXX}\h$WХ:`T"cO(tBXsa.jBl7ϚLbHy W3Q `؛$X>:+b-zp~Usp`!8zaJ<B4J4~ϵ݆jhh>%tC_W^0_:tJ1\Ҫ.^X[O>رVe=?wwGNJDɬ7a^x) an{zLOa2lyCUg2r aDmrm$9%6t $^L` E{A pyEfD^1r_^n}ţMd3ynwhߥCCXTۊ&0 "h%!P NI|y:lP%edm<&bґi*S,Aiy`$j%ƭZcF8CNQ^yͬ8tkY(:eظ֘rFۡa,P٧YG{Lv \=LLckrVGRE{C)U1+D (i\oM@"?R5Śn e`90@gCE6 ^_@AA ݮwFEҰWR'ݐq{cCp [9OPZs?c7*Uh2šEF6fN Edϒ\{;GؤZM|pA~`DvH|1@Pd!nk J%CvQT @*׼KX\OQ-HMYE%u;+T;Fm#(?_DqM zʹ\tXhW Yp䐩6%a ʽk`]:Tu?- _wӘ<n\yX+onL9[mkR`x)*RYߨ6)`QZFg~+* *j'enIK@Mr4w.TҼ1-^K} etC"8yh8m "5'zZu$'K,z2("\S#aA\&v4VD9hY$"aIX0#(Y%_&%JUSpLKw2 r 5>?BbA(Y^/GqNL 1[{/Yf"lY9džw^6Ȟ9yP=^=Q]e2w?4bX7y=kj!wY]fm zZ('ǫYRhɁ{^Bd ,шsAd!,&j^/xכYGތ.g}pHMݲX3];wj|{BJfOMBC6~s@+ z⍆+R8VxU!l' hm(]JF4v13/Zp=l4WXnSա0) tGej<`=R.se,cE3mާleXx[G>G B:E͘tp94{MYg$ e˗X mm_UBPN'Ef;ZO n)г'βE!"Š#h^6,w " ŵ1~ F7ICuÔ9-[v 2Rj,.\.]}.+/ Ŏ޴mWȁRS+rU2Hi( YB쩄f8jj%߄S2tєXzm;Ftqۣa7$ς!3#=i+ۉ<ɍPhN8njO{|"Olr?,}vkU~ jX 9*727?lxHچf濅hMCI3r}vsPxo@.aJmss_ʊӽ3&-9Z< hM7 ?u`ЙNafsE&ʗDo4vDkcV\)Ǖp<٘ܝf5ϲ \ =vّX[쟀[+(#C x qYuYҖ}ep'+2<6MJ<נ^[פX̟7vxqDTҚka%2Ȥ in*5Y\~Kc}RC?grl mpgZ없|d{>] 4_P`bLYGP7ϪDɈ掉f?@ϳS˗>A=Tn^Ҍv{mç"Nxhg/^?FܝŔoNA4J*aA F? o(c{F&gx tB'|!\<(%x{~CFDu<$6tP-wأZgbm|}2 ['jU=iOZS `8!QK,z7pgB\XNMZ毝*׭ש>MJ#$z Pml0j#uZjxYIUSf8{7_ݸ:dhg>V=T ꬫ?#@Dp,F݇XcYY#3A[u+i`(;͸`8Ϛ< ,UJ$y4,ZgO?2)Ga KHWJẠI@W0)ġbOg& |ʻY< xt8= ծjjhhXx& {?sM$VNGx%䴑Io6uET]?#(9ʇF:܈s@v%h2dpKC ~H¤VHe.6l{3RHN3#4D/4vt!v$Քo w9gyR așGB:ZXx82WQlpw Zn>0>7 8]VSu6 O;WPKV٪ФoZT66q2$ۢj~=kN>׿'m;l[9dQa7|S> *oTQ'naUn6^m33 q12z7ޠ5is6 UN̗{! mU#ї}:{hWf #?ʓ DJoc; eڋmB=weDolcMMy%MQzZ =a؄o"G>H=$DRH7+>͒<@nҤAy] Y(O Xm V|c7; ]5bw=Yu~{#!q/Q!2ߛ6E>d/h"aFNR\ kW8rwl6OCI~"u{ ̯#[ͦ $ާګ egDq]ׯkDS ӫSWM*WG=Jˊdt?2wZwp6 NrhNWSWQglW-ZɉSejIv]<.SpX*@K5S;v׊6߱㯾g3ZkgTTp ;;zt 倎73v| 38'iiJn(ڋzkA@ocЂ\+d틒GS=7ྻFF~]\ 1be.~+Ն xNCD ]jaH EL01Qwwy9raib$ ҍ|}McnKgOol`).?`{o*d9^Kg#`\hogc̲hRT9Ne#Us%Bі)u*ʷU%uvu݇uh%zvf/2Q&gK6-@MޓITuM/7ǩc- m1|NO:yreZ3h]w.wGl21˽7kZRU HKYR LH "BU&$JLK%+X}`+ iS_Y#$&1{3 "Q_aITt _kc?+5517)͚/3^u?\耷HlѸρ l18rKBl_Oyw$ a_Za&HrZ5* Iv-, m&NCWlQ5=`$.`3ͥ5;hX:azt"" spNd$Ɋ=&PցdkI,7xǺyW:*ꞆMCjUY[߰*!*GKTe<NH&+h[mHɽ^ COH:WyΙ͆&;Tl;Nd3)cŏu@"4Ej M;M}|th&PVoaK .ܗjߜro_[ȒاJ.lsܘqڰ&ƈr$CI1˱ 5WpB1zf+zA [RnQ~*dF\mM\!tUc1+z4H-R<>tM-_ZOl执=__.}0 UTRV] +LmC57;DZaQˍ>r|"i gu)dH ~Aӕ,;[,`c>KAܱI x>VV(@~ {%M4uGƎAJ4ɍ[uWh* aU1RU$hV x8]@%]ui9fݟjS}ĩ&Y2Jj4av :[ xK4w7K VN/:-XArGZr[{Ekuh/O'EWZU$T#$5&39A&Hj"'*fPfoG栃*X#_Fهf.m_xx1*MG &?/40ĩyeyy%6T>Б]r9XR?c>c-"f(X_ߵWj j&KxUv>'΋TjG_/n؝w4trqtCfflXB{i]kgFA_O"Wy5;L({ATzu^U+S':;N$Jal54^.h8y7`yvMKk9[ DQ>R*emEem((8p\CgjiXNJ[XH3eY֒~iߙmsXBr[8, (Ǡ^=jrSe"*,*'q7' x^guV{5?xJS d\d~6;}5iu֨iqMnDKQR} Uks/n<+[g2t* 9LZ {;[7)=@/ȊR?g$/r"sjN$i#}NREfdJ%O%9~Pn-QXˢ]" Bb>oSN3gш%{c"3M7zJЭqƕ ҟ>x.7&F 5t)!1pAQ` Z?By34!C^F>mo*Y7 h@'VUw6!|H*.<wT^?˝JQDZz(ei2ltb!qro o6y A 2d=;)ib5!W u<>$[2CuA BErV˫ҮXTF% Tq N{>bф-6?Oxz> :lRjw)B hAoZ3 naj?Rزiʦ}M]j [V` NYꑔ$şv;Y,t3Ds)goVmhn{HPuhԜL֡4V"șoMmvh' fM ǎPf񳟰3H f$+N5'SÂ(=ey!@ W,CR\#8 2X2!q>L72 P[l?~1ܜV~ݗxaRBK0lJBWP-u:2NoiYsQj,3oyE7%1'47sHʧ?XC qUxL2p2Vi#%CTV40|o+K$"=@tgeeOqq V2⢝)^ SAEVdu[@N~>,+8$]5 &JjDt^H28a /$r&CfK9*݋$Cm1SP9w0I&B V7dE֫s`O] wH;:]t~dJYe%> +95mfclNN;Hbd9]n.t:S) rIC6GUqg3b&8^ N7o!E^W)/&zKL'J_1X3nTxE3lO ~f\x$F{p9Rwr*rjpP|VI D6wm2 R㑝zς8W\д_Wj"VUO+ؘRygWI` 4J_rQ:}vIg $rW_؈",'yt`r}2LOpRחHڰy+ϕ To'BSؠ-5ž`nw ʡ|R`X9w' Ӈaȋn r%M06UqT=l֛hX`R2lP.C,*F#u H[,:kQK+7$j ʒ)H>1N!UBg=ILRKU/|A M|r⮾OOQ+,7cHRFlGԽ ަ1U4onN=jCmlt*ꮤvFb[Ez 쪅yb7C q d]YPBv8i!կ-8*>-p#ɀ7o?* q ul%A`w!!{$Iln[m3G35hNЅϨ8D߷ROZjWҙ^͏B=_֣v-QA`m98}&S^ JMjsf2:ce[\Y&]`y3.TOa䧐 p]R/Harn. *3s}g}'c}r:Q+BəwvClhНG9&,SWy!bdT\sMfAv }sIDͱSKR9gUVՏ&A'hS>2ЦLHFeݳlС>t1B$\iCdCY~gg2dF3L5㟑Gt̂ Gm׃nGK@j[M/cpq7?Qvs8LFR DT^M:-F]}]LE>  b6+)jՀ ~S3醟>+rmnK^Nf5;EDl+{#psS"&:%/&I%.Nf:gqo&0b'"4:D.w.a|QS TSR/w' Q 2<퟿p0 GJ(Δ (Wi>mDQ#W,-6m8O NtAX+aAi!_"]4ևl*u cК|yߓ.]@g>+n9I8(lJ:`~߉Ƿ YYA@I?)kD?Ia4a #?I㉰G"<EFn 5|l\~B;2.!+ ̷|~)s]GԨ+XC݊xr*E+ 5 Ȁr\gqYjG!\{5z5)o:NU6$bW2 ooޑTө)A%)VĦ>8,jIҬ^z5|)e3|*;$g):7nܷUym+oH&@3 ceMtXX͍ݣnFvD+W8I diLmƾ'hg[b/',8pPue̿e s Ӟ)Q-[VXAGqT%6NһJYŞ̀n\{Ӄ=[Ev0}%?PړF;@λa1kT{jW<7qZ#Е&?)x搒F@_q^љ(ziE+St~,`Pa^ 7hX;]Eho})򇼼kFsh ^S5:<'vA&)$EVٷshy<-Rmx"Hs [} 0VQK~\0 X&|b6k1.&pvLJ'W:`nr6 .DPRo2r&0C9E5Vpsrg_ځ:Pz|b/Q߹l䆱vuHzl@Rv|f\&"mJ;dJKĕ<-;pE Zs|%x1]YaYqOD4I 8?{g\: xRcjdeϙ :PeầZ`딚 QPvꗖ9YLJ{9`upk4vg,N9^@I&W'~VV@u OL%t]?sɔ@7f=ejܴbl+ @@p)s͌Ȏ0QmG"sdDPe9or!s=%*iGe:ekSA+R+ztFa1: !Cz/dٸ<`2NFpMX]߭GaW'%t5{yfl4Ї^ :hpNt.M\ުO:f]$𑟬Њpu<4Qʥ80P!ZN5yI)uw*P #WT%}2ٱvIlĂp$IKT6lj٫cH0Y-:{YΚXoya{sRo<ˆbkZ/KULB5X"eь2[X8,aŦ]ٯQjG˺/degU}wWށK `{ (W=(P̚\fJ7+<uUK&GX7*}kg]e d$Ψn}'}B]ixo)Ňc]9zP~#-# U8=z thfqiy'9J`|:WbKO'Ea.D w) )Xƴ5|Z;;!=7Yl kh+>WqP.c%[=׆WW$lڼ΁_xxi-:,T|>E dۃ6?ahNfjE:OV=878:򞰯|]!G 1D" {O%j[hfޔn3QN{s߯h{g,0GxB-|j“y#)ά{+/Y#nP|)WjgmìwK1Iзϰl' YWZr =OvT*/DZHLFY\0nqr.ɻegEGCiᦳ/#PeԌ/Iޖ"s @PWJqpD7[.,GᱝN?:c k@U:4}_d}|H{UH˥4q6t;7˄`U1} *$t(K\>_X4oގ_sIF̗L!"PXPu퐞f6uM!vR_5} QMG1f3N2u*i97}3=ҚՈD0= 1$_c(*zxJ,&f$էpAkaY=cj:^*/~i|cSdҟ,H}׆_fj$|OSBpVM$CmJmv5Ljg5@w׹M]̗~׻Y17aeEV; :GϽ"t h֐ne0^LGZxiڝ@ )ՔxKYjR26 dN>h Axx~\c KDNwƱdWcc疐"꜡tA aAA xGbS3 _MC)2y^FBMlub+hU`l ̱l) ³=c(j_[ݐb+'FB\[ IՁ]ވF "7@3 (0 " Jn(CS)xr25L[=4RKt4]Ɯ:< H9/dVST%㨻'܂n}, 1ɧj*$p8P4\ont)CçhMf– bFfϬ<m,."&^6yՒ&JY,!hmfXFL^Ž22X, 4;! p3/EEyȧNPO~I5H:E.YMjSfP#\TJ<'0q73F~\E$8,2j(2҆7j# RDpQC EK+`_ P^ug]W2c>䪐5m9 S Ls4zj?EM#;tF5tU(3R RϼoO)3{;V$G")`S m m 1PT!q3UTΐGȡx[%+x&ö8icI6+z0)M /^ޚ*XCfS]C1d >RLExl${dLj7A=1I>%|IÚ>H~uksud_RHOCH GgPt:ǣRlF6*K"VRd!^I8*/-zZB+GsElCnL/5f 5-S*1i{*>~- ֔P'qkL9y->`hΪ=z QՋ=lpj0FVIjȉ34$uC/U在%-{PSm [6l 2fN&.ccNl§]e$1a,.&Be0PR*g!4;R,Gf4Z]Q7A|:~B²qb<.10:!AB>I$ Æ3yz˙!Gxb;X#Usމ:D!X f\UP&,F9INRԊ1۪!Csj4z|ݓ(`2qJ/x^Z:4$c6ѝ|Qnֽ2y3&!2jQί𢞾ƌc9nJ$mše찆BLoxq(Ww,;OJ\$ֺtz GXD5GjzM~yb/yͫڎ7LLo $B-또㑐B+,O`q$Sb(FZ;zaj$Xv*uv$KNSu=jm\zk5'~rz}5@9ɛ3ZL ݁P&>լ$-J/HkA j^j3SߴiUgK%|V|r8ga&AdF;9e12?["qtf"޿>Y<~9 ˃$F] mxmx ' .nu,6ue59ׂB+kLYYWfOtkULGFeziX0;Xc0}`ҽ'>4\_ ΂˙*k]|Qril+[Fsu-<+DkN-+HZ_he==I\Ka=kRc[5tw@ w}?IlѺ%L-10|N:LAl B-"D TCش(&כa_Lo~4!'NVGHHa] $~X6SUAS H=4pe F2--9Ӝtt"L1GWݴh{>:ksV}5X/ѤݒyuS^\ =XA[%fRlT)Taa>f lWHR Y| :4%0]FTXzwϴij ؕ—ɻ?zRs8l!%afI\v%9sDYi%`iWGA(.lSXS~(|c{;ˮK#;xSeVhz%ցH¨YSVqIw6=בm r$W(s39z hȧik\|nsy}v,Pl )X2śyw~~2[Y![ڮl#= BE 'IJ+[Q토8Zմ&`.uG^.T#F!}PܽwwLaar#8lmY讲=V̇by7t}b]]U Th ;'PWA2X?F(}` 6Y9AJNR9ٟKağGBI \̷;utt$l32Tjw򙅖џ;>~Xs;r/)'(,7L> .2Uci9ͪ}Em>VG{XQ{>]{HF4NZ7>q[{ Q,IIwLKp5c5(凥)UVsF˚.ʲvITM :QԾ˷GZb?=Q UASZ \\>XJPؗb>*榟diT_=!S0I0Lt5O \8Ou|je ekn_V=r+mh1 "B+NR': -I]L7yvS+eG`M{ D3UIB1Ѽn+d|SKϓKLIKa'JJNR0%TӐA Vg947X ? .gw6WN|LM)_ԯK C !dM ƌan FTsSL9HA¨9max=tZ=S(j|_9>@nAEXЎڇesYzցC懲PrO@br);G l굥YdR_`)R)If.P6 }K|1,u Rl ,f Gq-QnEZ&\3*^xr#ya2ZmY/"ђ̬N-!6tUp%Kj`]۪h=O (|TeAwO ɳmvd7@BI23 ƾC;pLС Ӭ7$2{(s2k߆f2`r83~WiSÕʀX"k31+T*01?QXu6U>idt/Ă)_:VSP^UOsB4*@Yhyd\X0VZ8 j1DA5χI$: '2Rp'}!q4}5O%KysAԩg%(F2X2Y୦Vn& / Dx-1^]C2yZ8S"JU-@aQeOWMci7Y?l)B9 ^?W lyL(![[mۼ :)2694;\%ƒU W ٞѝ bP=M v B(+ Ę:1 bDvٽN큱Q-DH-sz*#B2'`%#pFzoiAQUP??!^1Y 2%]$ n\2N'%q)(hݩŃ3^0QpWF-0 &? ?v&Kl{[$03Q b&FƐ$t9ZE9f~:_p]Q6م0n2jFԦG#/Q&pa՚#J [|Nd `07TN`E8GtL"2o<6鞿Ngyz4U\cl %1a-17[zRB`m $^4x JKLEd@TƠ)-V,kP܎lԝ ^?/;6.:uFLDYk"҉AEL)wb!Li*?uzÉP cX4oh1WǕXfݔpAB'< H1/UâځO:M`UiS\L',<6JSpyE+>Ģ@)(d ^Iuįٲk$KVk]}BMdNǬ TlF8<.j~vC$ͷEC r9@5N8)EkʘQ2 iuғi* hӪ YN[t$ES`6?.=x:wS뗹*3mkNn_dDSgM\1ؓjd^Zj=좸?wGh|X-l+ T_樸.^&IM0rO2BFx #2Lcs6!sN, Dke]/ͥ;cVj\f\*Ȁuu~nZ4Hˇ/5]Rҵ?vTw fD00~5p Bsf o\T4ʤJ.=4z# ,uD|89}(Rz kx]SwPSM blc~FZ kG4PǕ 1ń؝iLOcfyi ܌k*wd=Z8Ҝz& Zʚg|۸- (MzxV)SRFGzG0!݁x,5/,V4Q ڤy+ymJEAyN1_Qpu72w|QjI47=&x^0Ad8ui5Z),.h[hk`tsM*>WNtQ%TW5Ո@e!dRߍ!7@G:[~e-~yUAevGW[EP9In^ r"Rl [) $ ^2TC21nvP+GWrX 1CXtȴ/qxRx llJAr烝TlL],\ 2Ax:ōl{_S Dž4ng"r2ퟬ1.x|2QQ38k c19Q55NzZἺ1C?5Aj/ 7c4SM2N4dK+;?~8>D!K)}No3x}8EH:uy9Դ.STtUF5uC0z%uC.AFQ/amNgb/sK&}_S:0)ZF|Q ѓ"cT%IdׂƟcH7Be+(oWMV#H X2rZEN{;nNh#)<:\-#,]Rʤ'NEae4~&'Gtc&Fl,F_hTh &`jg<:Fe q/;p2(#C_Њ2voZ?e"R@kg˹tQR]Z\|@]I4g ϼ&Ξ+ЬOJQv[O/q9 \+HȖMFiX"#b.!ſJ&l/%'wЃ 4Ll5%MZ]d)*ޗr{%9?\kmF5`.;a>e-}trP:8ƕ-#8z:kPǖ Ł7v*>eZ-OV I\lr^4-(PtRЖkO FÀ~|:WHR8dr1!<]}Sqxxt=̔៦˷w?/91{ N+NЬE 9i@@ [ yDm9.|E}aPpk恞v}3fhq R7o4¢ߣ2ωqL TpɖTa]ueJ;lD{ ŧ~VB͸u$O8FcQvV W{ޣʞJd6E$sɌ/;-ʫ"ر7t" YZ