sssd-ad-2.4.0-9.el8_4.1 >  A `U] btȗey#R)b^dŢ0x/ von!wrLp _VL GLH M YW gg|I`rk?EjׅEYSXMd!13hoaёYٜ+Y`ÞTt ~"nJ)0շB9W2.w^v2r]ެzص-c ]Y_Sx .Nçu&p"iHqi[ħ*V51M9$h;Z#%6\ݲ34$(MhGʺ3 Bu!iU0ӪS aOYFwtRYz 4^8]@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.4.0-9.1Alexey Tikhonov - 2.4.0-9Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1949170 - pam_sss_gss.so doesn't work with large kerberos tickets [rhel-8.4.0.z] - Resolves: rhbz#1945656 - No gpo found and ad_gpo_implicit_deny set to True still permits user login [rhel-8.4.0.z] - Resolves: rhbz#1945655 - SSSD not detecting subdomain from AD forest (RHEL 8.3) [rhel-8.4.0.z] - Resolves: rhbz#1945654 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-8.4.0.z] - Resolves: rhbz#1942438 - Wrong default debug level of sssd tools [rhel-8.4.0.z]- Resolves: rhbz#1899712 - [sssd] RHEL 8.4 Tier 0 Localization- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.4.0-9.el8_4.12.4.0-9.el8_4.1 .build-id1eae79bab22489d206a822916003000468d17abf3bc2cbafcce94b5da168d9ba789da88caeaf810clibsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/1e//usr/lib/.build-id/3b//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3bc2cbafcce94b5da168d9ba789da88caeaf810c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=1eae79bab22489d206a822916003000468d17abf, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR#~*.~>ޒyǮQs6Tܧ^"z46TLMMR⚁=x1KM/SX̖U4Si{^򿾣e 8R;RXg<J驈+qoVd`߻<ƣx7`xfv?rarTCi-aKȻ| ĐH{U鬽ܣnCJ Mq0VnڨT:Hg?+RֱvqB߭2c\T5Y I뉵D5팹eðZx8yDκ [E-Žb C~I@vY̛{ .Lrz2]ov 9вڭ`hna#xΧ78vEE(DO`5:TH1 :Z_Ɯ6~ CSyCץ_bQVj;GF5EPCg-H9[FKq1]y$u s/T1Ko:6@NACK QZ SEu=Fw,"K/hWO0OjYVS ʟ <<;%:Zs :FaYL2Q53-ICWHLՌ@&C1S+OS!oоdj0WD~>᫅"a; =+҈iT20Y[:dA ޲Kcwe ZQɵfF8,`oF6s#frw&ҞPK"U~S1 p>|jp sE;Ȼ~0E+-&Çq;$%V  8̵K_,0 Ъ?n?,:FVgz8iIL#Qŭ>3\s[ ((]y*sIpb8 #0%u{ P~J3&013"zP)\$ w׆5Fv,1upw@{~sDҊߤE74yLZ2mDVpWwXJz3[ -?g1з徬v>y~ F)QQ*ɵBqK> ݲJYtt0?u+B߶` ˇGc<S^i}H$6!3?licvc6?lO%Dc/CkE5]vQIqj6zKzQZ|S!tyqR#j`ى)A,)ɱ`%z޸5!j`^JwT2/jVyTB&Q7yDSR"Т1{,ҚtmhXw7k{ISϜLLVhHUsxW3cK-[=XV@Įcl~-EɔF v_.] s!\㊸2VvoθwA|p0FuK}Xiqz|j3 -ZF"KOUmHFhRA < _l nwF ΪC}3XvH1r}\YLSft{t7 k5һJ 7ww~eԊHMc`y#@6Le{XezVI]Op+;]PB_ O&0ۗ%U2Xy@xW4[ Τbc .pҦX9e:MpѺ Lu[.A<]BYF8!vV{Uۏ 5^|`$/%v`P;Ѹ%/ II<6$̒.򞦢a]<U~y:Ys25J #'t-W:a3v:\~1+D._8Z KA# 1U .&ThO`oM߆3wi(c;)öyP18^'TT ŝt/wK{saۣ$Zbyg"z/V͘^ˈtJ.;RI2CdOE* q)r h)V\D&p[v7W?HpW/XYSabHAt%}0X r{Q40`lϱ=fZ5,ʠmfK3#UiSܕml-0c˴ch5Gh! *[w%.\ ͵T#ocO/sx4 85, \dԠ7G{i4o7u+ H_ѬQ,!9red,'_+|)&۳69.gܻv'SsciC۳ b=X/ 0:ۨB:w!eT3SL|tǜSL,TzͮtfpyhZCy9K̵)V>{6E<|0iȲxdC"8͖$K\O^Vk7ݜ>9{V!O !{Ԙ\9ӏbl47*yb 8 ޯF9B/NGcc^:Ԁ0 n' IYM>m9LǍX~E` mes5oj $sn+'`l[c^&7~+6;1(( V @_kDFf<܋0R:["1qQ@9R_fݭt3F4^¤%糖8* ZbBt#e> =Njlu8M/Q4ldg\9L ٧}N&swQ! !W'#G ![~PKiT$%_1R?3jơ|^܄mD~750bF 1QVBИ{GZ2_D{"7ٔ*=$Sfeݳ'ڱzdyl`bKNR.OU_yTVKL! ޙk->H [@[xnGp2 P1Ich oľr7{Y~(˷oBdL:pJ'0+o;u@xֻ'L0`YS῕pY~n5158NnB~*6 s0ti6T˟; kS?+zOVTI>h=@pM}^Clҿ/ooRkZ? >8}6e=` R8o 6DdE4vada (~%?_zvlH= zܶ&VGJAy5U]& V [HAke=tYtIl;]E%Mn=l@&.DʕQK?*1<5^2ymk'\J0$xoK*VDŽ{;OKÕ3!ze),fu |v>M2{S.ȳ5[]xBVEg>lJq.U\YW=Lhs Fk^=gX|DC{pЊ "5mB&g5H]4V*1[o$+TWPReѸQ?]J) ~\uOO.>\GG8R avPEV`WW?)BEZPcGn8ƕДۦyIpVNVJf0*[s'GYwe8u DqHĩí.8;Ta$Xz8۴C+YШ )S;Kě}䄦 7c=w99mIb KrgioW*4&`W@ G"32kf~c-GiЫbW*r&5\SIXL;;rӍLEI /EnՆH1gu0stKFX̼| Źv8D t#eyuE$f~M*C?;9\>8#k? @>5U'F5d_׀m^ZʿT`zȱM/%4#}yV2mOLydYԷ3Uv9FıGPqCy!!&#v4Tꄼ䗶r$,s2'DivV+rQw>)#C9tH[ ˘5mBf͏g`F   % -xWB:CpoՊ OY(!_H`p婾K\ޣ{bA+q'~=ŌApjI~u`EOF?ϒ%𤺣jŋkyR313fOI a`‰7ɍhYOq/TD90ыxLAVϭA'Cu}IAP1;y%~#2,25ΉKL5:AQ~me7U;Q ίpT>M?&zn\,sQ˻Σ#=m\-"ڟ4ϫ}h՚QyMZLf,5Q{yɔ̵-Y۔nCjK9Q@e1/3:"6*r~09>T &5.1^CeI"ZǴ$[Sm*xQ|E.;T`y½el |nm/lee]J@-6RX].h0@'0y:M.ejp6/b˪:oi6 R!6RsgyTk7}J[eJ" \Q8t*O5[uv3ELE@7$LV KLr׮Sp-bӃM9т(WimT ڙB Iv^d@*0I7&l>(VD"J9ʺ/28#+Q` )SDў5 D=pN$p/M^~i:~PܴttwgXqMvZD{ {؇"᜚b+$pW1GGcDV㟌=#-c˩t:xHyͰ׷<)j0, ?:Ռ`-h=A^zéN>µr+ K3R .qhXsJFx{?*-<bL07)ZOdO}u=dU|m^U..EAopOx KH #LDHѯP/5 "Myo-Mp Rŵb.T z~/5H) MYz3>yО>utt sc)%ZXFl=1aL駗5i-fœHpmJ`TS&L>Sswe:M> c5f.t#ehRkXef(F scCr ?xYڿCZcjH5-<SH~a` Ʉsƀ-B*o2S4r<\+YwG.3s^*5[#TmrqSAȘUzX', moi-d".3u޿ V|~\Q2|JN~ TfzVuuQSਅi3bM^bK'Xgv~V|(,Ev| !ǫ@YT hAa6{' `-GP"l~y$( 6PF/QDyVWZ\wXpK%7#m~YqM \R^WHՊkc] 9o*Zo;o-=pc*!!c #5C.9:]OIZev~ot5CՋxO%ՠdgp}@W;"z"l} Viwg;dߥqF|H84 IOh..ɟj+\R3*T%?n$~Kcl0⦡Aؙzm򇾧 OC ۽wC3ĮtW39J[h:i6 B]n} CZЍj+|:vhk5T8k#PBWt̃?(mO1R b[T\#hjZu[ k+[BIpc(BSH&utw傲7yp>C8m }H1xҩ6!HZ.zo=E_r\8QuÒknO }o[@e]n&}UQi ;q`>DNj{-`En$Є]ⱜ0%P=!Vrmk+-Ժ~P2xenF6S%s% @?}ؽT{ZT+@xꈒ|k/rYS!C q!: Daj+36I8ƐK&"ƃ$\2W–}Tz-T6"L˴7sIfDdPZ3OƎz-ro֠A9 5Z\d$2C8vU*p+9x9C=I&̅#M58'kQNv!\؋0?*/rh΅&' FD9̽*ϸhŚ w>0&rlH3fx;?TnC}{i\JRYS!@Z CSQ8{z&'W$9 )[r@h JXbD?I-m1󝕕m \qQOg/j{﵉ f \krM1G>4I<8]B[ݧk^."{+6ՊPx{Fjqd}1o#V05xGƲ>l$jׅڭ6Xn%M Xh{Ǘ}~YFOXKJU&lOI+Ra@isee9igvEkm9,+R!a5£/+, ~f=_gC^WkC%xNQp7oZCws'IR\\ZpD;k?ު2o5:ϧ=X];X9GGl%EV顰 I% "ra܌g\XJzF֊?JgH#KPVl;Rtku/DNK׹95I Ȁ-΄k8V?8c{AP+]?!}". ԨJv3&v902|ַLn|I׾>dsiתdҸ^N8^I!ao-k?Byeu M wl}i \%+iz7ʟ{ڭD'&H7L>;yTᜃ8Y9Y}y,(9?dHS--5n[Z6(ǮyI}kOӦl9EMR5|Up%NSpouk^eһ_E:YDC޶`o^)l0fﱡ81n@ش6Lm^%_"XҢUwo ωa!C8MqW|x`[;pax! (xPPĮ! 0:)Q\9w7z, 8/"T &"0gLTˑ+S܄g48cA!z~o5 AcIsļ6/P#N Pς~FT.SK8NBt=xXB1M޺#LfpxC%aXEA{7 CG? 8KjQhd *0Q+ĕ;G2`Nť*X.NlP&򢵫^SFǫ6Zsb)+qĥQL!MnX=i+c ,2 H$6"a ''SyCk^N{9z5> s; 8.uOۧ5RiWN J'T_Wm',ÌN`E;d qEj,\#Ipbf\Im?tljC5s CAfPIpW1SNLȃq4!LAP?zX<6Ff"3INd_&V~M?:IQ{&n_ʕc GxCҳaɥTs%@.}7"Кv%%+WYu%Q ?0ۭmy&sy+@S<9n+7LDޫM8#Tfd͋S~3}yeoVܻX`Rou^{F`Mx%C_.ߧ+?w`⯼ES7m_[SYZUTU#aM.vޗ1gjkl $3tc4l8=q7ƭOv׈y n6E8[xtV,7@Φ.1Uįvtd\(j/CvWjV1l 'CҔ({Y})fhDqǷbyS_5E~7Yː+@$'2µ82W8DOr}=]&j:L"[4`_` UVKdӘV1yBhоF!)>߸WQ~Fe?iPPُוc|^jq6Twg˼3r Փ%6);&je.}+Wb9 {YN+ n3Fa5uKRQЪ+r⤵pʨ1Qmoe)W%N| yjD?"JRl۩=U TaoU9wѵV"2b1PAG 1 mW2/JCXm؋Yz0z?rYfH.4>-Y٦%cnK5v rQ=F nxe^Rg4X)bEkuVYSA;Yhz6g9ky}.ׄm]/(\vȡs#X7h.x K#/ Xϳ)Nĵǎ?yFHGb2͇fǒc8A̎مtRĐkRɣo JV;ғ2l ~1L9m,J-Ec-=7ypmZm=1}& /lSEU?ɱZ/CAeݟ-uQ !0 cۥui_h:"Je-3=rݧʅHZAjj S p4Dur,OOD:&\?iW/15Mגх-kφ.{Z:Gr`*Z*ͫ.ey_qn/{yJh[+)][k%.OgHOcn91PB/q<1Vc~iWSNˁ0H/*1$ْ0{:tf,Jrd$K\Kp}? FG3QM DŽrbh[_<.=9NCyJ\NJY䭛8&k*A1/ 8y\+לʪ܃wXK<*:Luq|E) uU0Ŭ<)ju'53Lؒ= $n,%?k/yK d3KN*Qc+6Lp /-A4]1RPMZȴ32\nf\~UtTAYi*vAU|. K,LH/F"qQ/|ϑŋ7Yat7>KIDv 7.|}d?GӧK(yaɡz>ߘ_A4]?!n7]lyU619!Yz+jgaF[41W -Jc=Y .a"f8*~X͏ռ/N*= >kW]eu.w%碑AشwAml $HuyynR#䜌ҨE$z蘼m-D()iQTr*ǽRеOY[Yо?; r0 s=ؽ>) Cx^>$LL VGs}vJDg^ [dd̫9=TfYf<9ь[5 r qȐVaI3GF3[&u}KJSeI&|(XDؒaz<^=c~6:l`j[ \fB(qɪonm:I)d0)3e3#PʐRe(Xiƾݟ=Om\ܠ3xB igSvytCxݧP2:upYފ˓ S<0*4МȈPfTk@9jt?hṠ& *w?B+u1jEp~L@.8ϱK9FVRZ6SYSovM76HVô?%c% ;v^味%X"bկ:S!425/dڊl2Fg8E\ C R,ѡ1^$!JqkI"ht%yh"Rjʑ$ XI5@^$Vfyz}&]AJ҂4̀:"焹$TDU'Q ` F&W+?Nq?EQgj\H}ϕ`6B.1Z`Ԓޔ`$Fi;r'6<^9; | qռA;U ]nl-=<5X\o}Hsԩ<"-Y;| --/?!PeXggĎ[0"f( .ݠΊ9;/L3ʪ%M##q1MiSzڇcT:D4t~|QF?1W|7ZXCF9 +͡c쁣a3|\}ZvƐ{JmN'ħmP[àqVWn8뉙R4 ;i7֒zO>~Rc[ ,sx2jPZ}yXe#TSvu !Rjŷsc%mGGWO1b-`HPJLDjDy`d^)`vkIMѾH۠dzȪo(ej yY[ "~O\;{x) _+Ԇ`McC3wDP; ^;AW4㓸0<"x! ::-ɞF֙CRK\T3uXf0n>|G%V `F38bu#Ng<6m?W" 8FQeDG:?]͏ )<5?Td!;_V^3\JnV Bb CuaJu(L@qc{Ls]B̻%n@z#}(lmKLbq{: ^6}s,;]~), 4zt^UȇKof;x4Y%P)KGX-/V~Z&ɴDI{Ox뷕)ialM³h+VQsdгFXc+hŘF3$@!!ҔtxPEIzXl[dzzGb&ۗ|=8om Jz$2@ʡ2I1HtrM-܃F&`r[#os(2;(W*%`g.N$M,ן#kV<ӎDϏ $l96P{g:_41KHH8"1Od\66E ks:!EpkAX2|!R>" Mj0U9_kkA'x#1^)i z`u3݇X_Sq`vSjd&,2 $t{(Ff&3HtLJI Dk1nlج1@嬊2VXf-PD= m|;v230 ғ*ueuj8ktAuKpZ8ox?fzJaRj\"Ṯ}=~(UDVu<6XmMzzNDnNk,hkMՅMZ٫&>Nc)[H1:0Z7jYFMC"^=WdPn :$ P߰ pSruaTIckFJ{gXߴ5.z>e |Եe8wjMQ4s,7'Ua|:\ Jl^+̂>܎Yq) ʺhTVK<6'߄)"<_-(izc:['N/4QsƷ}h*R=;K  wt^W n 4׉:]F_tѬܮ5PcFrטN׬$½NHT"#Y e0Q@ H ,@9zx y5U-d,E&)D%jc*Q"_@g4T;񭎜t]ma4!Dh_)J)1{׉T+hNQqriĞ8ԥ-CQuK vm-lb->flL袦vgO4O좤p(7+0YyY(И` ~6@I}e'Ep>|I7K3&c`g;{&#[j> I# rPx$?^Qh?$(T`C'Ӟe .%?% N=2q /=-dzZg k1'yV> +_t0Jg*Xj9D{܂)S6"+)qUW.iȮBs1W_* J ,La,t(|KnI-25<2s4z +Τ9ԍ%B2$ϭa+= A1@ ʧ zg#^NI@KwYGױG}4'3n4t8 i}ҬН# of,Tj>8 VlN!F2 }tTgӰqכ渷zxEv$MrB eboDOb5>lh]]=0F*֢sԛ( }kIA_[,-^5|+j܂̰8Jh}Ϩ1طKlH@zlshP|(YJH8hւ37A/(H3ջehN; 1qUxF5{9*]~KY9>e7' 1J"b R'1,9mxc<9W]``uYy4VN `bo>.\o ?:(wjUNF_j;UܳňY鿩"3N]@nٯxxs5~`W[rYQz>EMoҫR- ,퍿OAq)v7fc 6yZgUȣkK%L꾬5"އAD5T䖖'м GC/Wwwk=ˢo5t  !ҟSxy Ė*O.3^ԗߎs:-?{ۉK j/܎mE1=Tsj{V&hր 88Af!cKH(:bTvn|W2f7̽6wj6a!J^2Qp|3PS2XF ,eJ¹9+KW3 ܏ɽM ݇sluE^XD]?a3/bҜA'zPMi's]WT{k]"{$wwd];k\j)}x6P1~5]u_"mπj5F!<QO޾ǐUMSqоλ 'axlWD5H㤰NtټbZ܁3@Ա^Ȭ2Ѷ "9־6FnlEPv3bpx["ʂ 2zH  o[MI(ssPe(6:j_4~6G*axPtK8 XTbf>zoEC:BȺ7E5{!OOzR%/k8%ޅx]K;E`IơD,!EXATRPu/&\ ff w? o,K;J銰v\d\/8rH?_Bg3 ]S TX^P<`8NFpVSd/S6ѴDX.+wޗpiIXwK_=6ؕD/#hNH~Wd q9@*yn9MWollE 8{$ ~Yц7Wa߼9}Hv0%R S:U@L~VeXٍ QAe.vbaq}B&:³J"B$:8{:7'2QHiAz@ΏG$fo6{+rECM:H/%]b0QB/E:\M/$S- 7뀸nqm6ނڣ#B)*ȎuKE3Fv ٳC'+so[7iVrYpyJ{5;-MS1?*j:x}A(?wsbQ JeIޮDWh@Fx]@xLrx_&u d(4tywTV~Y[b,1!e;TТ }߰15VQ*N_Н`sB%ϫ.] J">ޖpxf}P^W Fɠ<&22?:.!{E7W-~01qa;:pu@09'Ep:h]m8s&nS:|6O?RsFx>nAʐUǣ4.W|rWDOW5ko}eRz҄3Y-/oXKQX6?_oLhsA2vUPF\0nuͫooPi,r옇mi>M \b_&3y#GC^$fX%pKnhTvVՈp2ɄGt нp91gE(1iUT[5F@\My绸94 CN摬WWH;5Q'O KLP.sJ]ָw GŗC6MWE^,sOc +v4{w9R;ߵU;#7B׹]N'x*- >:eZM[QׇMṑ|GB7f7bԯ~QXMH UgƂ5h z)XK@+'h{Wϧ𭤦F5kFKza5ƴJ|"x(y &uԿHO?\59s`y7@n8bZo|3]j0=#g:۔D}q/ğI꟣+IPƵ$yD%}!(\Dymg~2<5<j)w[R/N6U.zki[' >G]Efe#&Q g mqnAʠِ!XjwJ'{eY4sZzeT218Nb=W'HKO/9'n -V"#NWBD : Dw9pz~d=z[K'g>}e<Ow#bc^|"{V0dC- [̧ Fmj?S?˱7\B)fnBXz]0jx> %Yh4;_,I;*UͻaҖS 6o+l~r<ƙо/ dlg BsvW1޲f%E9+q rlZ'+z.ʑl'[掻Œ4"DeQ'#OhߒRv;uRVhghψe݋_^>Hny%{ T͝Ssą[cvjv>BջR/95ز{ɔ施ndE=0w waGm2| JE4C 4WǏ+kwʼnEhc|jUo#yX(Re/e_YY;c&,PԔ+.Tujl͂l0g-y3c{Br?+>]m2#G@ m#07ϣgXjFzXsCqgd2)[jhfPSnEQa NS `g?Z\9`u94Vc˥`HSSmfy=X}nz郲eYqmݩV wx[cN,נ&J*n2{2?uFu?Rō[(uJ̃}?G!C6^Q"Xmw[n(UZ>{zJ6dӜ*te3dZ=pd_@ANSƦseO"3?rv/9XTOsʨMX?W8Ӽɉȴζ=63av."x+'%%8<`VZ WZz?%42_@0L@?;'^{x'߂ixjfaȌ כ82j5G\8R.{eʐղ9=ghNO%G!M'4n^9Rv)n"0r43(bZ0ٯUד'x{/'wǺȅҷ|Y vmE`GfKN-Dõ*k@,=,b_o&8hAc#r/M7*JɱN E:Js_9fp?kCp>1i4 HB+4NFpC궝dz˻I_=Nt~m.F H(;妐Ȇ>9] "}qAq!ΚAc201UĦ}"06Zё4 b <IARtȰGh8)݉jtx^gS.N.T{zqL5M0~a55MHIWcVs`MP|{ܺL@uyJ/qMӺh>dcNmv!\Ψ Od…D3<Λ 3v}}Ff(³^nQ.Ɗ;Y.0$îgB804R';Js.aw߬Ñ~c D Hc6]]u:omKոPBI]k_]Z`+QNv+ϱLаv7#uQk uQbyR ` h=)ȞR{ϰni"Ҙs7?}K|tij/SluG($v,J~8:C6ּC%~]pk8]ov4`f10hQ |S'`,(4?++%>)`zug2arČV[ȽXuϮڝwvѫGAN\MP;>MWW>1v ȄHq.׆%)FGiᱏ%dZD VU.42aS C/c3O~/1hu^/lfJc P]T1xÇC~e$r"JK;cQlXGۃsvtH<Ep:HA*DW1'|xtbޑ]~d'&ȵjV, {Z&aV ! uL| v,zh|;7$r14JBTSu?R-oJ0wP 80yX8ȺΨ Av6 W0KI kʹ!M>92yȈ |TuyDLA BɈq%:r1)0,#+wv<}jjq35JSK.;2\Š70뒜Eь|.-:7"%AəwY- ͵| He,1ľJT>4 j)`S+}ﭷ6[)]5) TM.s3(uy4Q`Iz>qo9+5>yA*eDdΙ&D; +Wxz9w8*JS%Z RҰH0=YbH›L^cɳU[UcbڋCw6ŝ%G)Ji(GUV`E;p=*By{\.%I d|5׭DcpDƎeߗ.N8+{P L~EozupL!E_~5#Id(eKV~y nBA( $RV={~3(`J+U*=muVW?~CG*9' mޡzCٓ,HcpJPYvso|ػ3ք)X[G~c 2R2N8c=C 6Ƴiyߐ3a^Q-ү - uUwo~Kߪ|Y#2˔vER>2eFo>bN-z>JSG)QnW%aH偁wqrLN}.ćNbexÌRԸu#ԛ ξ&3s&gE0tjފu]2xW.>Awx+% q w(o)t?,t`s(DU&Θw]zJ )@0b29% ˩Yt Y.Se4)g]z@LJf-aH]$F!8^AҮsZ7@8n,Id'ɻD!rbXϷ2~T3D*ӂv;49 (ccnHamZ]"x.%yy'76} Bv0x g~^|' 豩K%LFrd5ڕgZK=<?fu@f+wB_,6I?V; Vz[;8e v\d/?Me\|* ms /}C@F/l]ުn7a&̷N1456pPީ,ƚYZa.)Z p^ԩ>s.    3{X(/= i,R=x]%ʅAgCnH5&Yj^E# 5rC8O|kY܋=衖\̾?A)۵gEx+{q*lhjwj4 {s {ŏ (Jp[i; qu]C9 Nb4 רúFh~옰}YtAq` ,L7j~tztd4;4?jzL5)ދl_8$+/u?Q.W̹?k 0#Yû66/evGXv;^>F/Ux0@eUdrEEE*)ھU%eiL!VN6|˜ա3N*'coRtRt[AFv7F"3R:,!A!+ptgմjr/z!@6A_@r"٢x }ggD8E:1߄D>cam#q`nP&xLM L5I`| ` ؾvlaE+A섴ЦFĄGʑ쩺 G<&f/3M1 rW&2ـ8 uyvm 'fF惲]CͲi o gx iJY0J-K:7Π,PiYc ?Kqڵ޻o foE;xj= 9w@(W.FPچk?` tCCS"T?1ѝ`xd Sn2!?/^3'X5Z>`rR*G9eUx{^ky;z? 5~Y #OM+י}G]f/WY03lxrz(#;yn϶LBc:/>Ca0 w'/@ª2[!/ろa~raD:+ MٷyESltLdScBS5lIlIh6vAqND@ +Ӂ.Sn"BF<+ߺwhR9QI& =` 2/xyK)3XXF!ΖcN+bA`BیA2G'S5VJx;fq/H]HOZ(lLOn$U˚+mD^#Bf3}_$9p5BmQRh08㔧1Lt#Ӏ)9 %tZWAk;d{zTl5N+*}@d^0l\8X6%{~>puY;>)))Af ;/ɚ0:UMJ+IȣGY {l,4=j#nޗp+hCxkNl(`GrNjfbH`n2"eS7Pzoer"浕IJwȞiWes_Qc1@fkxsK =@$YS]pqYq-ͦ ޽yfd=&'ΐ |^vX  ;Ԯ܈אe[OsijdX>l%Z"퐭X DQ Gd;[ݷko,tٻ&7]2‡νçT~%"|$" Km}\FsNdBO0YB`uuWdW?mØˏ#~I.$67 TJ5kB{jCTSGΖlpF02mFsהBL"/dQ,%pl[kv ugʝ,8,Jdb Z_x3)2-X6qhߺ<\ʬ0f20E|A1-/ՙcKBF lVK4guDB\jVA:WHvƣK`zYΗ?O. Z#HLnvΈ$UV(bl{Jwɞy@98"8[Zh6UZ[~ʴK V4>:xCkN0ɝ ;6.Es|ؒ1^[g.EsJWZ8cDySs bWMjв!YIGVk֪}u}8.Z TlU| ,M!`:{wV'ZRA`vWrXa6ٛDnu_lAp5  \ɢ äj$BrhQUox *u]_M CW0CeJxbf Os<7O11t4zQꝘ!9+U^b2'jv E0̈6u-:6fvi}6WX݅2GHP^ٍLw>;mZ:0Sc)DWZ{tƔϙXGԦ\[J$?MٚL>n/Xr'h`\X``Ք5.flT!Vsq4KB. OtuѴ=Kqt C,&q\LuAo$dori'bPsRޝZ` EL<Dbl<7Н]Lzi/o1quJvcQ8y Ѐvw"{CՎaFc" SWYP+9ϫoRKT?]dt ~IAtY\ ,` ٿa7xcr"]灚NvӃupę&l[ԦF)F[ɓog[L+w4F?B5ڗq>ALg6xҖ/rA8rP[1zROo#}&bGI<•v@G?,rruL[7bdlwvDȋg2Zad(93B)TɈ6m}>C%.F^d{ZàX5 S7e3d؅"dD|6.ŻN#0s@ߞ+V#;ӰuHtE:ΐ&KԙM:j߷|glTnj:G9>z{'&Q06fk+;IHOPy\O=ea/+dqQ%;!-׋)r]wَd~O=ΝNuz~y=DMzFxs#4)ȓzIL/4X0w[,UN7a%?1?+!p@Y tr1V6@] p,Z9ԭ6 ڈJfwۄK?)sS]G rChSpF=^`L0jj.҃$jUc4!I'kc-o\x)8)ԧ­rI:z*[}1"шCOq))EL'M!Av j?3UQ^[kPuQHWp}]p;-vɴ(~69Ka|.Yv>}^!v‹7Sits/s[,|2/uCr(?E\#˞<Ĵ' 3G@ΰS'W.uxG҅Ɇz]<_!9d|濔_" qrsK,6NCcƣ%GiMS7]P ;i)󊏪7$pghA[`>#تigUDyNm:̖}gY$=bDXv3~O?0? uzuBrQ*_W$T:GJgӟ3#&\hc"!N|a+k !>+?Wn28I #dpSΖg`ʽ(<3ѐQ-*iN|ܝBy)Y8$S6-2Q? L(1; .-Ԙ%"ߕ`(EE\ݸJQ,ǔUV C&n}]n^Fڰ8LR#tsj,x|ޗw ۵Ɂgo#!>fh"W]Q p}d䲺W 4,Or)AHdS$x?&_4 {*Rj M›yjD׵}?sϤ}k?b jmA $f`gq_$CHΗz BAըR^7/[MgT_sD9-lGZQcjC@Si"bZB'Q _b WRq;kq8^L.\I1LRozw]c_3yՁ] zQ ôBy;SR\Bo fL*SobA-OzP |JhBeLr,BC8xii#]5M.T.ڪeaяx˅.loc]Ƿ/gk?n{dcA1Wڿ:;=x e4 I[c<.y;|jn y4(xwEG't7LGTj.,hjw7Bȹnڑq_vA)&JҕH5m2M=Q%EČp`BBX=H֑lhE=ea\Y$+L^@5Isas.slߋHb  E' GU1ưWp%24 ~ 3߇"IJԱ'ߞ[+R;j#Z}`o-50QM溧զAoj\VjBVzۤG$&FKbUw%:ĤeUZ%W2\ |C } b>y+JUh15MJ5PyUF &|+ 'XϘ %C mZ$:U@ޠ1'pTy,i[7x.1qGۄ'0zo0(4=rH?s\ /leI:{i\*u:7 {/-/w8^ 5Ge 2_3EM_G5=M_{N8cyilPbz jqn·*RHͮd(Z19i/eaYas :G!lpDMZI5\š٨1>ڱKX@  ߈]s:n FR6)f4P- C2ݺbi.eX-Al'=HA)'yqs%e5p_: Oe5ӢlI/F u7/5sI!WNo*m")+3IY LF ?q0&r3WO$WMlq؁m+&WF \Ns_ϐ WB$ c t A 8 D$KklMh) .|LϠ7?qtޏj:I&DuൄQf8?JR5O>z6U=_O=6J瓸w:X{*:خ trUgrѯi>s40EC ˥m_]"tB JqC\,Lfט1R:Tަ@my\\1>7{j&? UJr|';:TW?k8s'Q:ؖ,t/\ lJGiï-ҥB8V=9P ,aZչ)Zw1o/CEY沀%֦ ߏ8-b JfI0ޠgyp(P}|DGVݗl4?;tmj˒T3mNvgق" ^TH?Bn'{c/t`CN$9kx<8䒎A:smEV Z#*42RlѦL݋@ f =@ ;Yd +Z-]Ev0WN}o^EH(Zh,vQكa ?Ĥf/4fιݳha"J.@'J? lDƤcB Nr[r^-l $:1OX;ܱج(;{/uSPt􈚉Yl3Zx9+-Hg[]9[#Ka .ذ$=R@A֑fG^˘Ѣ_F![v@Cvm9n>VT9ڌq)9# {Iqj-{|ußgz-ڿ,cZ1m$?ըz <)@&?{io`S&%ZM|;{ T.:K񸞏 ;fw*>\Q^@g sB9zkM} %g*fs^1]>y0"+WF y >MZ9,2-C(fgk`(&4]VPoIe"3Ya'A~;}L?bgϸD@J㛶#C+gMomՇ1p+A ]*$3LCgƲr*5 ˺tLY1UG*9_%C_;^i͵9wvTP |eN\~WlnXQͩaLVa"aI#*n:l 7 PU.q*WqZC,~\ԧ\i/=܋@ i&I>\E4(ZC~iƓlZaX_\7˺J_}=i i2iXb c)xsEqVAn;L7kgr2o5LV#Dmpj;1pXq'^ sBʆQ`W0oc%-+GP޾6At;.mmКD b̈~O>#ph[b_ilD6WCMMf*H6^g6RAv=V1dTr)]9by&$uut5ؔTQW>#aiy(#.Rf> ͶcdHQ(gq) KwW5t-hF?U+3BXOI0d/*Xp ݯN>C@qbt e2׆\zV[xi1-KOF[l9#lQKN1X{2@D d_^qMP+ĵ{Wd%氶ɑ.D/nN L-)HYlhGۘtt: 3 5 `PLiQ9P7b}_$΄r'yċn}="K&r$rr_Ԏ&h5\/gp4ڄ:zPgҘ@aw!˥8 dGK>I#bGL )#s,I;w1Ű ߼}\48wtI.-{5Ikȴ|~`&j 1 7O2p".W`3$ݜhwo)].cCqx {[f[ &HEBR@EқlvǓ<@Gf_>sWI sԥ!yFy( P[vPYI1=rAB:͞@)%8[R]B[dE[j0Y|фIoG[, B.,D2E{>\*gfh&`yl}]} jDag8I>]%F`KtȠؤ]b]|`نcW|6jH+jNtUn"݇IކwKaU7pІxГòH"da}< XR2go: >`BNllJ_B9y3x VC/t:<1^;PjOćR{JbJ AM95LmI[ogHݔ3[9ZTA=m:p;g;Tn7ydg3\tmQ+=kc mh\^W#1z;E 0(M!Pc=5+`_>5Z 7x׌\hp0/:_o㧦zmYNxCruo[IKڙg)Ki"dLWt΋醪7rP8S)ȶ3}W|'2O/unLZr:VmL- ˷G Ɇy.\rf:[>n-kQ"~&-D7R4OMT׆P z:Q5⍕(#URjčj3 g>i6J3 #wKI%NBXԈ_Lu#L">JeswwM^k-{R` %>mlJA`Jw'\7SYQ$p@4(oL"UHwp=ۿC*1BzSYdnEC`#{վߡxR06~B'&,+T` rFT Zs@NC鴑S8Z*rB ObYA:=uG_s6%7.WM҆oQ] ;z)jZ<߼q}~ndn;1~Ue DCWkC(3c#&`uJmʡx2Pw6k{]wU t"W鼰)U"@Qk*-q ɟ[@ 5b%_Ih;WF&`O<y H,\at`UHFJJ޳8aTXQ^>c.ƭ;U1zǗ:qސw>gRV% ^<υ6o=IDMOա=H .q_|=\8z?_w sQUhw YU,.im,7N>PILz˶ጱCHT=Jȇ|tiPjC2e;Ϝ}Xax&-;R58 A;T l]ؙKOzEn2,!V&op: xBU١h6}$FoLB>:5Upֆ씣"P$+s69/&d)N =R{ Zfp28 D^{=׾-1=y E+U`  @+*2Đ&Wkyc< ;Ux]1٧#0<, XwOH>&Zve%3 Jx#k󝗯KsOy+oD)Ȼ|3hM;ayg. L׀^DSv>V̥.nß dwčEd|hp$t:;m*1h \%檖~ʱMk2WJR t"ʸ ƸyZ%1r '/rlo1I[ؙ|m)JLXk @OjrK,p_ 9r $[5 њ$v"?KuORXErĹ+O֟Y3&I& :Ժe~ո$'A?Ѿ|lȧVĖʈHUF#?]P2760޺WTK* rZtE  8ݧ!ݠ~ʁt.iTƝ/] OaSQYk\5k 6hreE8qzÑ: #!Z A%xHhRM-;ʰӆ-rӘszhYMh̶VrѹV_9 [ 2$Pr"ȐSgI =a/( Rg{SOA|6~5;h>_ g]b"wk<m"{S.$hghM ^$8ݗ'{f3sE6޹:3u bK'5(_CH]h_^Q4 #%Te6CQI8QC5l9q{^\XF4=?Si%#ʪ]6_SMLŦga~4J(mSiڷPյcgk6,1Um>{bxj RyӢ$@\\W RcOkg'Fyޯ Ώ}G6F a LeMp-ń>f=y77Ү:,zhCo"9'>z$c֏X~sR3D'1qR[)Ax',v^H:` yMႻuchsńR,@hQrÌr"=&&םTV&qK t\|λL>#.oxgyyʛt.HRÃ4 i0GA;f ZJof>;cMjb [ZP;NJ"E9*l>oeM︒;䢓 ?ZIz`0]d8t6,q]#wod&-_H;V5c g:C˛U,wbW$G]EW Z;:q!#d!Snq*J4Ū4lfp"z`xFjo܄&,0ʿpam,AzfC`_bҲ|~Xz(X80)4 m bKz2t`#a`f*LM&d'YЮ]oשz Ga@ ;|H**}bku% bPf$JnLQ2<_*+mmOUj{hy*gWبI,SnFs K$z`-tpۣ,Wu s#%Fa=WmgDBɦ`RR݊$Z8"1My`_Uϫ\Sˈw l\')#L#V?^ :w~H6nݐÆ?GHօ(<ж殁o;^j Bze_?qj75 JGɌ&*CD$S%E>'Ҥ}74d@F=@3Z=nuY:ㅏAuNTL;Ld>6?d~s]\b|VS!$Ϟsg~plğH"pzΎqz9{_+^'[1o4{ 8GʻmPeyp|aP5Ǯ';@e|kȌKџlO}z8aŎ&hV9caQUsuaa ;7Φ8(͘^"Ft Uvhcp}Տ$y] ,wѓEUVb50kHZC`O  H/4maS(Td;5[5E֋<иKwڇi<_ip:3:ԡF';KRnr# =י; K.g3 vR-δL_ZxG/wzD!X[fr`m{7 - F=ㆬ4zWLeC3n4k ?cLx}*U=hIkӮ8( eYi,5Z껻̥"4̀ *,Cʴȶ^9`ČNb'뚨a8+}*ByU"„t?~TW鈤^P@3}O&Lx oщB\x! i!Ƕ:g ؔHߋ^z,P>OO(,Fz?Iss=VGQ٪@(r`4=ޚdٶȎR'\-PNjeAaeJs?q *61MGaJzd"-+c!2 芓IϺ*1Q"L3TM rͨ~F- c8SQGn۴WlX#j67dN*:]M) h@vsdg =2B1#-ı_Z7g#n\R`1/.8G3kO8;GK 91 N\dKt'ˋbC &U54n^,A^+Fޘ%3Ix-HOm˖sgGTR׭!ԝV$53,$f+ vkR!z.IZqj߱g=ke ߼{mflI:exw {,c :yQYᦊ2ԃF9d'\nMU !d Z<@ǯWw3+Nj\5WbQ|f5L&8hdKIN UiI5i^޳sZF<ֲ,5 *& qPs,kGrXl<⛅,̢kq;+Gj|yŵjL0:NdaBF"藵PDޅXzODOIp!q%-ՕNV<`9~摣"aI @7o.c>6!5%UK;DocAKb|8gVXO֐h&:o7W핊`҅⚆y\m)pra\7醽<ɱ]$.ƭ6O~Q!]Ckޜ20'l ĞcUgi 0r̈'c0 GKT:9wZhXNħQȺQ)faETz;he& ײb:5%T! !*p%T eɍJ5#r8ZRߺq]{O˳r%'r:Z(_l>/|fHȶ2YL48 'nsPN1ss\T#lS!M1zswlݷo~V}Ÿ[V +%51M}n(TXzL6{ (a8ToZM\QaS{ŴܗLE:^$mfkR;&*)݅IU?zqh JUo2vӑWb,) EXC#jtiXu.PѦs0a4C!dG"6>a]C?|Pe(kUBѨ y~U \f*\Znܻ͑2}#iaxwȈh1.pwKsW$M4՛F&'-;+6KGgV$\ K8sɽE5n3ћqcb;3 PmMTg0z oֱ:QQ%W}EU dAH T:m[! 1'l< vV g%3M!σ_?.=VWW'Gق0'pW=(aUxmUIljפ8'E {nq M6D07 _br.s+lFN ]CxՄqk8}μ|t <^"?9B{g\=+vA] \Qݲ#y-(QY&s(\XGt{Ȟ:S |ޠS *vi?#q  d*n{ѕ~k,hKߥ]/FErEj8< T7U k1T*´ǜU4ܯwESPEːP$Κ:hHԞAA,99m̐i? k67ч:@ЙAHg^]QS'ڛ@Uc P*JKY'U|$#x]b>uJ5[S>@Ϸg buƤ.tZ^+_|PoJ8 ;{1 m@64yl"3EȿvQҖ OK p( pxzR~V\PȦ(BD~ m.vFBnF5Fץo8gLB=7=tD1G*XӴL8OLDݳdѷt&$L_nRKeY&2gAEzKA%9RVEB_TC '`;2(jG^*]7#qBDuЀ/:ZDWd .}53Twc r5J}i&i/Rw3 ΀;Nrn1$B4e>8rǪ!;A#6E0kԳ>&:h}/L:m$Lx[vuNSA䟡 r L["y8L޷Dxʳ)G"tɥ &ě| 6{>8J+2gx|ĉDV7Hgs+ X6xl-(i4Qc@@w6qnkyfߩ4/AϘK Tu ,4 hw'<[dBĎ-@PCv3nvXTv[(?LJF?Qܼx12`42LT\ގ jfb`&^pD2n XkdTqX=oDyW/:D*h#Y4t ͍V r\_@P DŸhGAgQ]0lhjPͦR>h&]iWcfSѝ`AB+fa,S6J LӪl#raG-=ʱ+l:K0Hz1WR7/ΰVW I+;,`QN~Bbţ%nig2M{-382}[ \yFG.BåݪUkhJe 'ܦv#oK'СqCδ~yɳ>/T= buf-{] Xƴ[v./Ͻ_?Ѓ2XMV9O *1!}I|m \Ws7b߹wFxMZg/B;0'5ptAϻ0']w;QÚvNQ# ).^CT6ˌ6ZQߤMdQ}^Ϧq4*mܻo2L92IH>m7 ~׍ U'E؋s8 `X1Eѕ`vm֛opO@%("d2rpH68g)弄J/auap瀣% *(<8?d*&\Fe  agOOŹf7I_7JG}w=vDziJ= `,|VFT*/63s#1--LFcl.D}ɶfNmףPi*eKwF~(PfMAͱW0f36vȨJ]uAs|,uki?M{rݝ__<%s_B<~4ښ1yFp;|(~.LKޖ}uI۷ N`çª 3| 4[>m`_6RֈDQ ]>`/ٮj>?&'1ՓeFwֲR L)w79B~ |YX]=L "@f5V~CW`l&Kأ̈́(P)G?Ém4N21.0#)yRd} _ޡzC>=ޏ EN< Ub_Uh{ T2UJ54yH1duti^$tFnMlQ ȣdP4F̲TGǂMA-bFq:`L gG_bkDwU_ygx~-*YjF(E/;]ήt9[Ϣ@BU"h\soW!-;hT겺ZHi*6mRiٔF8+9L*ʡ#}Tmk UwA T%;hCHdHsFs#pD. p SMd @ӟ.iHmOǭ`0 ƵpZCRy&Ӏhx`q _9fKR85=:gSR_u?\@n{T{pU9JZUSTW݀ ?ld{ 5aN\ q.bAyē||絡߶]:9Nd!c?NaDq C3,U2ӏ|Y=0yM=TCqh=7+VermR*sK/dB겪X8}7@a.RȥBM02O0 ,z)yٟw@:(rG\.Y{I?`=-E!@׭}mݟ7-Ml`U2S|Sh^ ̃ C[MNϭ~҈wDBK8xk-ef*蔅A{p*sQ!]Br(J܊zunԍŎENzeU WR(gR!ˑ' ql xYBYuNWf61<O|DiWTV"[j|M 1:iE9X@NxaÏa~4wKN)qL^F f$ H(.=q6[ׁ|ʢ bZh$R3OAEG JM$McHz>cpaÜB[ p:pAJ_a(GZlK>Yuifkg9@=/tnp1}<܉`C"%R5)J~=Hh}7@mokcySV1RΜZ-%s,B ]!2s%5z5ɬNuOGUg>&XMfpɆ =(Af`F$3t>tZ/7Qs0 k}4匯l¥ Gsc֭XC'i@ͤR^5'_1,>{#bM<ߜkL4sT7|LyC 0O4f&Xq!`w-.zMPfSNj&j}^/Ԫ]N-v\5PUncHh\Eo*clD8ޜ"BZ(",6u&T)Z.`k7wŻ" 6}\[zMVfpWuy.*4CO9ehmU/[;ݍ/7%vml״嚿H̬!pT_`™mث D3hCGW wD,_VP' fwZ~LBPk4,PAMra}B겵1#&A 5o 6}Ԁ11u.^H.wQby6U`pwaҡAnƾOsSJO)W7DSh&Ŀ-" X 粆w ޗV֦Xf ) 7jz*e[xY1a E%Ǚ8\A?H$tQe} .0/ve-}97q{$Mz r΃9vtʬݎ<TgN.U%tQ/8S&nxcsDA5`I}p8 Xvq Q( eM$S֭+4L\Ȏ.1Ɏ;h2Zm31 ywҋUT"SvZ(hQZuFa±꿠[mTgm|3!8>A,uUG0%fK7qMblٔ`IJI R(gH%Pi[L 1mo.\$Wb X$ @HN篻h #;[KmWHp2\?Ɂ#WϸHU۬rC - $0.;ӵ l,~749 W?Lܚ9: qA r`fMXEC=Al]d8fc'. ثfEo^i}tY#iyE7Z?/“Tn c!o0 YIQ=ad$H|G%jwցŭ e))}zT52qˍpat .URp;`(ݪ \ P)ܺ)h_kBoDB~ =p` M\>"ՙrjFAsskېMj9ܫ RMkf o$C#}t`vROr/?jʋQc:LQE榮F$"EKȊDFK5 ІC}&@ut= >O;UGIzb2\xX aM05 8ʊǹ?DsI }7NhGe}+\v(1.%'^ ØaynJbZ)Ā0: $P-#>txfnFYb>$u}.ڧjc n{3d=1~dD5fbhYyDw痣N3N!L-kҋzWv3S)ӍDu`dЎCӏxBF*ݟIZ@ce˞ *IJF|?̿~qK8;"L} [l)`Xj>ɤT~<&4;' )&uY]/ UGj$C[ !+28wK͡dkʭS&O1VRXryG1)jK;qFGRQ^?0H<: %2 %PZrIw:͜ z"SupXzu:'f$I`}Gbl?o| ORV2!i#J']1obob -kLz{ KGk4FQb-Fmkab^nirSA^KBM(cgEʜ^WEsvɷE~H_u&m{9{c~Ǔ.[~s_ĹsyB'/MhhC0WzŴQߘ{ E,7 fqB4Lx)/9&>%)n`ijÉ|ݑ1{[>K jNj®[wp9D+HQSUYYF1Z 0͌(s0aFFe=~HKTw`T98n/?)grѿ'Xv%.yӯoR_Ga5΋ĉ}[ӗP]e\fų/cd\dvpA*/"YDK ;Xeln$)suYh4[.a'W)dv,x.8jKG[J%-dd xOiQ`~r:0mQ!8}]WVnJF;Pj{㐎!7;7% { ֋M|,7sqⰞdp9WJXP, G(- j_9SG(|%g-Dm|O˻#-t P< X6J8D+%9sp̺h^}aP+YD%b;DWOYɹ 1o7,(p@}o{5>lN$oҮ,~+³G*\%-r>컺cK )*ZVƪONdwn uI;%8ӎm#Iܾs|PL74PJTb5{-Z#mfɟ"IQejJD鰫 <.՗aIk0mv,(p'[ MJ'RԗpiіzfQڥpUOtD! pTHw!cq`ME"wnڟ]+6Ȍ2WOT|RtpIJ,+7Wp}rew!!_|?`8KOma/0ᥘ"ѸT NsԹy؁&T%v+͵dRXhU}Qv:3 -0aHs:NC_/ʠ/Ѩ`*uoP|oZ$7ڗ&c+D1قJX|兢تȕ~y;+?IJG?z&q=n}3`!1Ĭ>-{{'eĺ |G&kJ4ƂK#U ~k?Z0+c4SwjaxN%),ȸF**XuBN^{:A^ѳz4QmZje s*:週%ܦV)SP{te#ה_]  kA/h8ڑ!U,u0o*+b?!. ~L,vZڨ:@%:ZB@%B#fAm/XOniUy7y+(/1˜VZFԅ߾Tz3nCE} U= xeriÏ3B ^BP[ho8B”D}&JO !#nyyφ4u" +2ɇ(0ce27̟s< Zl/ʋ{\ 0MV}Sg{&<[6NjzXV,h$hJ6{6W5A f ;Ԇo2nrH߈>|9YzZ^F&e2jS>2ao?~&̨=AG2WdvZ<en\P9UUZFiSVD.QɥGr<>Ipʉ~Y!YC#,筑+%^:>6{Dv8EoHr>=c)Hw3v303sk@HèTN T#Ã5I2t96]QbQ&ȾٴٲrLVCw.g!XiIS-ZxTm|h/U=qӑDD( )L? 4j:j~=ϼeWPN~d@; MѿNuvG?d]{05OAʿ&k10ŕ7},Y IGkEsNmNR co=~ÈK@ȸ!}k>t,RoKHoktQf'0 "uUq [(sO-I[8yM$wdcȗAZY7&]2D!­nSf>O5 F#UB/wC5{R;gԱKDzgU7V顬g("5?K404,E`5q3 NJBů-uU^`Gtz#Qomں{yLJOb_ySƏ6Q}`3^l\.RW*lv)?v(a2dxL>YSG*J}Lbf+a04kߙywo,qEd|\ܜ#H9$|y?u6&b)\.;cLFVμǹp[\GW3r9 n0׫ Uh㺤Ax9Yhdd]I:]l5W\}0l"0W>dwO6W"XJ@")kn u񬦏V2n4JK=800v76Đqo&g"0%C.wl/8l@HUs0uhZE*",EuyiXN;$N!я}mEiGOI$ Vj6g=R՜ߔ@3@O˾8ڂSR:V˲0 G3!UZ V76gP&M73@a/+f6Wv7!9FAQZϸ/CW)L]/^f FIU.&F \plHC}^ۓ̆IS%OI8m;/{%n#t}| > *3 =P1 >&:hK>pf6E4ۚؾAϺ&[V=!p-&zRtXGGf [om*/-)EՖ?hfuVmߊp#9|NFuW{ʦ4O˿WqlǔF?ſ,ҍ$ 4SV3VTʞ;>w嶇-,wru"@7]jiTtl5j67I'kidS1}Νx8K }鯐 z|S3 o¯3P ұ?K_)wQ8: Gz[ E[w~F.s*yPX;ZY/%]v& B?~wK&CK1H7i.\čMՖ8܄r ;$Tܖ-:d7*EYv?ZVM]$olGj]g&cfM_Y{:㱃Ym7VCtT`Ĉ 2K"ο"[#aRYFͫ6bZ&Q`Q\AA81~7nj2xQ"RE j'iH/9ЄuFe Ş$Lt9|^/OMu d; c@gBFL2Rwmy` uqN v\e^WϺGQ j!tڧY;}τ}ϊI$ê?5sEe^J\*3g?A<pNTII1׹_aB@Y%CVMgRzVjXzuu{T⠱# diq: SUIbrf; ð! aKW+M=jnJRPE%Ԋ9Ia]{C6E͠-˄ qX^r:HP[& H»@>|6Q8[8o[g9YPȴEtnm)q:)fsT"K>|k HښRz-8ՔLam^˱G4/ց[(*͂Ѱ.kmŎD#,=hP%і@S(%50F/6Wnh|G_㧟:oV!Dim@RP3C_8~}dhz$% 9^3Id@)XKjƐ$+T.c4z NYld-cowd[h\v;ic|kZwҴٝMGCl枘vfYRlu^<O{D#y44LUPzܼ\ !"=q$Y斛j>s*(eeg_Dvv Bȥ('{eƢpӰټ@&W9X$%(P6뜜{@n9NBWnv%,&ѵ aIza3މ.SG+HȔ *73X"OO I[iFN&ENh:l!&涵R v6+e"ē?;.^(Pj0 MٶljLPˇ"(G-1<㶝yJK|[H88ӕ;d5kg%lZ $urMPI.ZKL8B}E&=XUbWϑK.YWbO7 ҖlX HK\YUIgǓT ;2_ԒU) ٸYVtق]zp r_vfFt%u `4y4q,{w}ȷ#-BVffEljY5o37976YoOdl!ROߚixZQA\6^qAPOݐ.mb@9O$^z#qa?vKHD T-Pl^=z~?.T*S/Prhr@ )- Zgz5#*l6@%U]_llCx0k KMfiKbݑk5jwعZ<]q7!Q4\4vrV2$վ:XFQX"C6) D]vߋSE@&B)˽%_ P&B'Oj'c"⇅V|8=MEU5u3k/fkBœqLRF@}m|7h˄yǷ )5wh$3"1te]Co6"*p? a+yfݹ m|OA85jG(dEw~ TG䩨v)V`ٵ~M-~BVM{unY5,!uݎ:ϯ_fPpp -BC=%s92<)z&:Z[w5,5->_߯d`~il_(!M+ltK76Tjv3nnZ

Q:s ;FQ4uCqjۓ*wU~u|nS?" 2(nӆU 4B,hL$&fJ"ϑx|&,Eٴ!d6ʯS#zi{PNz Sp5yT;MNELX) ^gпFm`qh!0+6J?WSbN[O* Scߵ>>`&B.WJ$ A4/ʶG^\xcVQ*Z$P H>=Hvpg<Sct wN?cBUUF1ؒ3|b]qjW/ʄ3 %l{j׊^$g7*1~xLgS[`~(Ke V4T{=lUTs„,VO8W-% Axen&rܸV'Z8ɽ2!EF ɧg\س+XQ_EΚwB /\-RAK0=bքPssBVi ԑ!_>*2+gO-ݕϦN%{PCwwqtꃚҾ`#iL WkݚҳŨ-FFx$g,1[TyZets-E ,~ߍKk@<輀nSo9 kLmCKƃn}y)5 ޕ$Y]Du%'K@j&_Q53G&W"%ҭopjb! ZrG+ ?li[E+Tsy*lxlPMW1cKy+kwuu$ԟpDϊ Q M&22i cB +\9 pJl@--C!6#Wq )!nsڪ+Uu{A]Bܭ ]?P35#2v#F<"9KJ.uH넔:R]јr$6ES'BNuڙr>n@cX7직E KGӓ *aś1ux"`7HDTLP҃%)_gnaQ '4r+%<*C_P'\$ \V0 v KreF[*1&(M^i)W|6:4Ͳ)T|!ȡn@TdPVS{x[3(B8DO:2YsOKX$ծ.DߝGs[;)-\U-[do>5}aΕ5L&QF˨JzQjl wX+uٗ[ dy,u_ڽKDlKZlh8l@%Jd:AlаM%䬙k"zgXJ Vt3MH9aJ() ~pj~L9G_< ;,`}¿e@Q˰ +\&8<#YU1e #Y̷$t,4MD\rewuʡzEt/\`ZEtYW${6;3 n⧒_mמǗLVqUe9!X %S7~TS0>-a .o|A1dYqc9(X:W8-O?A>帟a 33؅<`@BqxvBOlSЁDcxWI7FYPrb/u,$yw}G^"I Т+ nU{;NL:iyǞ,y֒3JJYE# ڎ})3P=\t7& Vv>H̗{c t`]TtK A.UwT2'S+|[K ZCQw uCG#[< j{9j) rV@^!YIF?\~S)+؀agá ;;XB3;Xl>q]e=6@pb$tog%u ޳4,'%3֣+b|`J^}B;%T쏮NFѩ 9 t{CRmƹeOOr5LI e2VH\G7nG>o#>_Kz6|4 :_M `^3gV+>xu77NJNB8j@#ڮ޺ԴTP_ q1 HreUӿ_Zbe** {awȋ})G#cro(߰[y2QR:ȜiA.2Vf̀s|6j$5/7x4 q\.(ϯrLڡj^k q?(W.T65_ 7p:bJK#YX郵V?Q1gf!j [KͶ%ڶ [T&=pT_XhxSvCXv|ˡ·,z)d58Y>%[C?ADc7XcfGa#FXzVHE~(7Dr6 uKN+ܴLᥳ)MV՟<4{v!ŐZC ]pvS A)P# _<,0q~7q{g˫FH!Nwi[='EA ObpD&?OH4sz6 5S⍻v5+!1Um 3pD& G>`\ BxgxȄ E8Kh1"ZŭC' ud(?1_.tl R3T"ھu!6k` LEW)H\E&6fܓIRM6 JpavI9,j=z3 Ev#};$~^\Z-i'VzaQ'803n@"7 v:UV4a( nPirS㾀! AK. sȼ^_Ҋ!MN;欁&ڱ+dyȡfI6 J4ĬW!7nB}raay ·~a4U<<ӸIc>DOGBE >G B)K+[X?Վ\cHI\DPa|{\lpG\EvB=§u?T\pƑxO HBJ>I44FF?H hR{'(j@N75ŨšK$*Gٙޥg6@nN9:[2d tcDӂ1pSX83ZY_2EPR+2$r}g!nV7_W @S<=&z͒Nε2sx5&}r;D7\=(ty2҄_xuonvjϡRD:dz~ۣ!qM,o>_JW5z"D+<: ^1.bʿBMZVwguv8-46=])rK%4]qйN,OKk'TDoپ>5tbI$9/ѪX/4KXGP~Zn]ĥ'AE.xcv_bXB-~w7e&iVu`rc_QB3p ~-z|Ջhzuov/NӦSv\!ݧ|J"ҥ !ɰ*"(#}9NvuWp~B"DD2MOs- 鳛(ٝpoq܆m~Ԟ If(r|QO`#4]\Æ.J Kڗ$qV(J^ ?ysCʱb)y W 38~ {H.+G-c_Ah̥NW~\SY,0rD"zñ@!ȴqY_~YpB E]x&†jk,]%=9y[~q-usץO+zp}qB#J d`yNzk\Kp42=.Y\g>xp1 .>j`,c8,TF *)o7&dUPUB ?޾g`=Qb䢊,d.iE`3`}~BT_b,J3T8%|)_|5h¿k 銔6um>5Nk4pEu 5jܫ2#v}aWXVQ*5R.ȭg)g96hѭߧ]%ay1!'#Mʄq^Vp!?|';P1Fzj,VG{[ C\ %h) 3N/(SYF[:Hh_6e;+?up-X<1Y.A;AmZ+tb8l\jzg>Yj(snz2&tdqyxN!btn_:5|k\O&&S"\Nl[^%gݖ't{l3k} [Z5][ ⇅[B:Nbf6NwWn7满pc+ݽ Ӫmx-.b9?Gus^7y$O]r 1)R 8׷EHB Crmm[z2sx{&St\[rtqp0 /dbtb;q7@uHP>uTB2Z'\a&%iWb@VMuߒ<E`smYJ '{sCs4T~'T NhQDK=.͸FxxZc8mjwq9yQCn6d{.["(+m(TsY}\vʰDߌլM͗sʧ(g??\x|M'!yНg4\6x{PSk()|R@ cWipғ8UjFb1"U''3C}rѢȎڼܻ(ږ446NB ۟3# +$sG>p$j_:iAhuӄ,H6C!).J܋fXohSRiB6X6%3z[A\d[LFm .= 4iļ s^LG\Pqō$a)&Vj}?rڼm"7j0>DmAGF;zf(yH$%iXh PNy˃4O<} \h֫[t,腔Gxڧ=0R $.WAt=2vێ< +Q .#n~~*E~{5Ws.`@Ck HDүWŨjW!z5;FD wʃ1-K,ÚT[f<딐)B*qAj IK qy$F5(goBZɽ8+Ԭ@[ 'Vǘ*xKJy l%oe'ΎZ4C@^ZVyA` p2G'^$#j_vM?G ݛ[pB'"rS&l 3}$medUTC)I}}:!Ye^<ABľlAn6hSmA+jpb&b%}~(#[Sq[p""9Ym~(&vP'J$U0AX~N 믢ܳlOk_}͇wT [ЙB=UX9+"KOvU#'k,F,t<&,K! \.8ߓWz.eu(!Gd;^Ec#՝IU*=ѶTMSW7tFns &R4̘A' ]GS=iJWnJZhs5 ;[lQu9(J;VV;- 6.-ٚ1 T"_|_97 bce@Lʨh$E!u̯KAV'?sr?Za kE-UI)\wPw5=װ\>WS/犱 "Br|7<(%29,gΫIHjG@7"ga4{[w)?BI+`9obUT+D@lk2)!D CeA] k ՚W"N׾at|X$`% 1CH3팜ѧ϶+UYBש>e;'oVDꦶֈ3ŽA0iAN2;`7ۜʶeM"'"N9[NI [.cH.6e|HAzIJ]n_圢8&0ɿ3W# H(+2gvE?9> ʵ=21ԘV_#j&~jާ2nl mԑ}7ƫpf|.p*Sk`H>.̎[#}4ge y@(Y5_+ƞ|CRC¯W *""t@Q-:qeu͇#)1KʧY%N&iΊNOx5i؈T>e;:;42GZ9rxoj3gѪ¬~{b6™:ifpIdbAl7Ls񭴜FGg)nc?[O~~} $ gñfp ոH9xs/:|3 oKP(E{ԃcmFƵˇs"ͺxN|[ aB$!V+[rȼ[X=hk.!(%W}:5+X6/1{t4/}U["VA\Dz&½\^-GeaXKaaYoߏ[m┕] Юɸf<44͇2I920]zqT/kXˬ2|Mou4p@ى0LN@L q+|͊'W\b%kmϿЙJ ?/܏E:QW LlUq֗<W{p5y'3I_xz7.^;ı vsKp!c-=DŐq6fnޔ6&n0УR_YE:8A0]8Cp W@UX:6)H- &"9Gx=+LaΦ8zkHNZP˩9j,E! ].ZR>*BY_uz] X2qzCpQ1|6LUƉ KA@x/gp,\N&$'<*g'Ϸ.9)*K/Q3vh$W.Z ZT]M~VIhr)' fp麠xaC63nXJ^ًM|>bsy ey iuLPųgFze~TZUl] nڸmy-XuƯΣ&aLN3M5\cfթQ @YSɁy* xx*Ԏk"͇_ag&h, xzƩ&{;t^TB<XI/͏"(0'(h~6><_qppC"XT %< m5byrLU,{x`\ƦND)khӐ5O۟'D۩Uiҡ ~^+ !vV&V$s,Q(٦XQ7qFei˾ iΚ#+zt1 J`PB:mvga}4c׹:? `@M OJDI<] fHd^GɬـٰᬖCca딡n+]$oY&\HtIX.-,;ׅʃK3 e׋,e5zĎaQDg }Oo#=:L*6I+@Q" ڱn=۟y|Bu=IH^.FOVr@^䕵>43C&7wF8?Hk=,4+%S44<ʜdɔx]>W|pKz UɁ6 l5"8E0%z n )=7VW&uZWMzlF*_J }/J2lqcsX=rҹ0F#h BcU6 +kk6`"ި ?ႃeg Y _AD?Z)C*`nu[ YR:sqR:_0&2õ˼T~wlݐ~B"7*f\wIBmLOe!4􍬘 髸L\m8|+IwP)5`06iydO7ߦya'[is{b-i8M[ep5H F`-\VGzxbrƒhM \.) "e/otmӱx,Y5!=NO08M9҄J о ɿ-nmv N`EgCS/0hu眻j~ :W.< ^^9 zb#nYzZAakءu>oۧPݬMC|ÅLCqk=[޻RX`S, רc>l90YW+!˿ 4'K8wήzfîk8xF/Vn Eb6Z:-# wQ$7 y&e)l]%p>M.KY/Nw^Spu(݊t{ mÙ Ǡ۬wvB! :k,5nҺiBK[xw~9v,Ჺ22}LvPJf,ArBq Lh?T"B"xBA<}'ӑ7>|15627ؔn`ShC xLuQtL!Z˳\> 2WbV> 0_V<hz &:?*OkjF4-en%t߅\o(Mh0{Z?7YaWI9!H]UbW-8(f:Z nRWY@z̋իx,Hrؗ\߸[ ] &6-~o2FhH"`58.-BB_~B{RUbNH"i)NY(Czre K/^t-~Z qBܦ/+7g E"J:۷7:fTd1WƛA=5T>Jouw@{>RN"jv&B/( n^*5|b3B bab!{W`Rkc`9 ):HSjf1J_#u;<o; 7%- _ #늋(VEnqq{'ySp9|U#KABMxFos,wCvfd>2&x~Tb^Ơ}jzopkD&`J}Bj"^Kۑs@m@l|bno 0kc*lL@:fc'I̋BR>:>Xb/>8P}%S|Ķi0PT)VbEl6A.p>_gV:.)ò]f`om ́(R0j$gu;tmBreozgWULWg)NRRQ ]K.N;x i 1y0:I|2W SNh(zCklH G9S_[jST}dקR>"2("gyn͊)\}~n3Vp;)y"D߯%dy1\j!쏯˘CbyO5;ӣa?O0I㡺JދwUߧJ 4XmÇg$Whi]ef?| Qr٘&nQ%<^"3*Us.+yn7Ab[atn}Zl1az( K_(WG)Ms'!GWaO(L&A|H.GOvNۻ16o)Z!jƖ+$9e)qBQCg8kjŖz]&BB/O`#O@oVp~)AаNo=t%br Nqk 8/.66Od"$,Wr]+B8f;G ̳Iyen;cDyZAw_=#voZL3 c$;b?84bn |H Bv7~`-nj'D@ {aDO)8ZT'x9M 1>t EOe=…7>FnBQU`*E$GĤ jKSC5 ;1iڈ_R_.hͫegߚw t 9Yf7J'UL*ܐ}&C7C.dwz,I#Yl/yN.`B$Y~|ח[Hu|$_0FW3Rvq"d˥4)L ?֟@;; `%+*y=M}O0D8Y䪖!wzN,h/tWBox;)E\Hft;z֤Eh4Ҡ9Tu&v/31 12: fh$䣼D&ZhNRXs9p5ë=O*qo{U*o+A%fŌ02<[$; L]1 PG`L儼Fezit,FIإ?&uRvS&<*=0b$ݨ}lS=),|q(Y! 49 |T#,T2D 2a /רurk̶ 8vm-=!MCԄzkRYuWR+kB ̢_zgX.Ȇʧ 䰁}D;]xKӵ8XjT)dMj?Y+Г^o6eJ<$cPŐ;w vL65R^|f,ps _m٧Fկ2&X.Zs؁6J%#f38efzع (z6EuefE7 exTj5+Dԏ _ΈOtq =39@(EK\ BqDr<&,ؔ۩Fnxn46y͖!_J# g礴xȽxW8-  3Rf|A5v* 2/eakpwtu3VAt*C(tTV1)j]j- [\5[?cwo XY/g/ɤdn u->pQQv!E>≻Aꓸ5Sy_쨻( &[ǔw;ȐJM#jc~#Aj F}%b1pS$4b,LUG*~zHہf'F9 !MūnVST|^CLoN8 4E̦V{FG 1Fwp fjJwg&XvyV`]u'ywL.7 ]w#oȐ0OiX.FE `d?zᡒ)yIgg7Z!!:18R(.Nwϝ^+܂hkZv[ScmMv% 3LJLK?)bcce~,%CWA 8y@4؆^2<2[/׸ԢLh{$s&NunSyeiCI!L 6cE!؅=% sEFj Mit6%wo޽iKHw $Sk~BrfIU2>=[X7 );~LD"] 0'y}ni,;1sG Ml5'CJ t=g!?bf d-l2ptK !ȴXi=/Q6(ktdž^2h/g( 򧛴HlZ6 0p(V:y;ۈD% [1?{eT^fnNJٕ $O+n75׈a_bW~%燮lUn*46fAj OG jgʓ^ 0' `B}%yeu9R!su8Z◣ 3N3"9',jdDRIW 2n QඬN$q}3[T'I5M[6nsec.#T)5 1آk6M]5=h!))ɹ?ې5&Qbu>\l>'aE_Hk)OYSXЩ<.1kT-Kc)1UKe3^*S6eMXr71 6*D6Ln%Yްf^wp9Re݊ʈ.$~i:p.&B/ `A8M,K8z~"iOKFr٪u{Ո|k~v DW~S^~~cxk%xćfυv 1e6T%$_We6Ln 4-/}%=Ik@oxO#) <3ދVzyReM3Eo2Awu6.#`oXWBk1u|CTTɁ8qQ#}v7"Bz00~/4hpi=淁ȝP*)j+06ȮYcV̄G}܂aMO-ԓf&6yqN.vK |$d4h g몎 G;04Mei*um7t U(Ը0{3ApBWmq|oZT^q:BeUAiʚ'~7?$4!b_no@-1'$;v&e<횗p0鴥A \O[c.;O@8 fdSiXR: ǹ޵<CG4$2qQ0@ n~>ί-͔~cBcV!7g'< LCM\b"Rd`uLrH4o|c4tB,Bm'E]eƂ2DR1<6TdD"ߤ)#:']˗Q >7a5AsҸ*JgCl\&t*9NAqTV,śj25|,:L:an+χ4ܫ 2%pќN׎Ih XR2V"7ć/\(gR@Udn Sĝ#(,{a$2[n f̈9Ǖ}UrВxo?4ub9B z*$o!Tb: J{ʠ~ts= *|ab@u\\ . R| _Aa `هk[Hy]mݩtwc5.5޾96MB}0EBpӇLCKgkf"ٵ8L#!nk0&,8wi q_6wa;Lg/Ya%1mU~LkO'P^K;'7ኢ^PL)+.₻6JkvXL9 ^Ҽw7;֎NxB gqkLc+Z/A^-b]-f5׌2@<#`/4{+:|U YYoU[ G vA`;vvDcfjn2OdB<Mpn* oY.eȑ?/nb%;hz@Z0 wϙzճ-اOzxRȇ.(BDP u&;.XgK%Mn9j;3IdoKU3sVxl&.|u?To Xt =ˬ1]Z|>!``UZUZJUw'D 1^`aDsz7A IC^w'0&֤&*`OI7ѳ\sG*H1#).M{#UZ]@JQ[1%g.?c?_[^mzAymV^.6:k_jY=&lì${c-B I,Clp.ժl8¦4ø\?STV-c6P2CL^]#)S&ȯIe`[/sYj@X;68jRc&D믜Jv^D Q1.Ҝ0P]t/Bk+!?߬ƿ;-i/hqbدIlW-S\+Cgwc߰ R^I i^8 Z,F!u :P&bf:M%/OG>䏛jX.TM5c!zWv} _+>]\`Y|  WLN`jQȯ˨E-ITy"&}g5ugpq,Ȗ[4!@fa*9K|VQ2d@)%jʤGj*'ed{lyӦ,tܒ;y##8iY$6WHۭw8$ D U .~#=chuC9ژKM4l{X:'S(RvgWI0{[zb_P" 7-%e EZ$}W|aC{EG"N!N4}?L` :yej_v'V+ԄgpA!<:XJT' HA.#%κ{8cU%l<#4[SsqGn"Er‘k%N?3ҁ3QЊ_ c^DNe XbC L'3jmCxneC.$pUۙ N*t 2#GjA$z/w*{},=옸/49oDhvR-(XV~ə = 3n/7A:J'|dƞPJީ]!>.t"K"ٖͨB[Oz85Cژ꿉t_H⚊7:$6%$Լ ,Y @`|Av`xw^0xCʍϷ_|z!'O6~ՍrO4WJhv aP Ju]:#(}i oq"(.6WC{"-G 8#[Af:}@' I3KT ɀųOG+v+~8 zhmѴ7<Xy?!Ϳ@APA):1%Z+_ӾAuN9Wtq_4^;&"E(.qƞ\hN$b}5U5z˒k4xr}?Q&&YEݤ:wsBc*JΐB7 "j6& dp]UAVڨ8&.pdZ'4*hE_(r]Lο $$d[ӹ9NLӁmӦ@<1"0 oMhРbnjʼLonSDq5pa&vxiA}–rCxHF7.d3liº# ^U _DX]N҇Iă<^vW = Nbn lGBWm!vlҊLr1ZXUO1wQjSzUF hS>q} |ԵJ9{𯛣-k61U<5CIo/+5<ǕyWT1!qO#TczzIBe3)h2ᒩmӶn$!ҍ耝2 D\yF0̇Y9}*]0A sǓo.H&|<3ۀu= YRHZY[.KܑsU 4nKJa ̮ K H)MFI)-ɣՙ$4û8z'e1C5湑fay͗Xix;Bd 3,Hq> U?f-9'<~ dkYa[5L U)@Qa|LYc|/| Sn(+Qu!` n?)DĨ Y"0HT8Ig] Əf3ﮅD+{ˇ{pL7;EVxkYrdGt=I|51q3MDQ{Z[#85*k{uX{RO<;02Jy-\kM{'CBS\"Y2%`T)IS:D wK)s~:i 2]k[dGA%[J%9bqx(22-@T7D¡C aU{?2%xHOq>D'rJ9k% }Fg'B:GHsʡEY)LXnQX <[_+uR r"wGQwȟ',*k\2[#K3YWT^'wwS~{{T2c"\u-N$d-{k\˫ H ]y X5ٯ9?5q piRn ;2+E|)c- hG6m(qlw9玖1Q#%/Sûi c/ܚ)ODU™{Ӧ*V' -zz}a1:`r )Z.GR~?rTwԯL+IZȢ 9bN&_[U!.헧'㙈N읓ڞƊӠ;ȁ౐'FJƴ LDL0*H=>Z%#Aͣ77kF-|oyF"\FqJOM . '#_/tX K_%hح|4G| =Lr 0b^4-W ɁXcN ß jB@?/=c`_"\];QFl;}>IGxDJ|˾qa6O>E9wlldo}_x8|^~;_"!r{@iX\y[wJncd+el6[T'^x(hU: -:"xF-QfowIzB1O}6R[ICey0ȸ>$xP6(e!c<ЎTKer%d1-xP\Pp,P e/韞 A>6?b{ĺؒWF#W7ԲL {q+zYjPD#d|ē=: Iy+3j Ƈ>W>DCV2; mǦ/vZ42f?]K4nm ' .ȳe9p@k8«CɐȬ 4-j+7s]<{A>w$ߟ#ukZ>Y,FbO=,hsH9cM9(?pxv9?)f@\k}y6䫏x:@Py(y̓lxNT`!.H<45>5nS&FSR8<փ=BN,3OvاNQb}Jj5m{3Z 9S[3En uWZyJ$p3n|Aj:)܋,ri16ӷ9"L! j6N+jP6pL)6H6ZuEcP -~˽U$H ˪1:1u6נ?ethYGzdܱ,IO0ɭEfQ7+E0!cR9ßJT9~B58;X%xMPS2^4Q_reVo|\Qo-4y3*cM1#DFu=LCTAǬHs+dO_ ͘mVC{r3!Ǔ|L34,#cٌ՜1AGLIPẽְ8EmH-6ط@g5j8H 9:XK̪_?>M'iJ=J`SCDo `'m%)֔-0o88EҰ{|K.6 |L?x]\a'#-`wV" He33n鴄RHwՕHܯƩ=r)bԮc~hDh,jP|p#`Vy Y춡Ybjlh m.-éɊ)I|A"ȮIK? &ꠑ i XI#  *%KYg=U>ڵV~YXxZ,F_ zadL$8!"jl!kTxS3rKeEs,6 o$ 0ri\Ʀ"p*/ysrdmy$Fu/ #0 3@5=` HK)-+Z+`'^؂@?dy`ui)o|V1~bGv K=y:GO;^#](xнwnu0`[I@Y '\'24Tf2l#CcF|* YBi0Ɲ.aϷ!%7'$Ah]ӣ-7*P~I;4#olfs*HC[PiT0"9 /!kW0>>xEDnqHsQ>bjGl`Pr[ҲL8 DҨ,Q៵mHn|\^* ;ܧpm5JI.=.N2ʉn1 2V;BI?h̹d`ϗ]n#tϳׇMg*6>)Vx)R+AKEHh{%y` -9 iLAl"6e'o. qĔfj6;R8c5|~6#@Inq5G)1tQk2(\e7 2O0b4Eh<,w] LdDlL 5mp~ L_yY$~_`L^I!(Y8ؚtAqv^0NU}5YbIOv&mҼ\̟f]촤lkV6nU z,hmCY\b2tы9FW"r{W?ēϴ5C _l!I!29x1lP?N8*S:1ڿ֐<]*<[s|\;鉃cޒC1)꘨w)hX3'{/(Gf$T'9隟SNPӎs8ߐ7z TpVŕ[je{..^;G"_(FGI0{klt b/<`?-ao(MՊ5( $߻g(ghCU. K0Nݧ'3 rMEK :IzȬ*@</Sh^N c,P KI5hެ>fH\fxN^s+wѠgvh0CRSoP;.qrX;nDK70k#MfA߿vx,Ѹ`ӊ+o!v!n-VaĞ\OjeWfVLFe,"s)q=/qw؎qø?=hB5lV2+\#UkȽDYV %.drκ->g'f)i| ^g?wnA=Tz zGȡv'}0%Q3#zo~aޞt0]Mst'HGU!}0OF! )=ZD7i> EG27-yfa'E|%$iQІq<\V' :RC眡up̬_pyKD ΖUAu.$&G1z3U? Zebw ]I D)quc51?N虍%%< !8kr__Қ+ M(jw<pڱpi]ZF @?FQS<f-6 ԰m[XOa% }λpe0%D h%(\48ExZA$L~'^#C7㉱+ FГ@Dd^ZGe8z4&ƵF/0k[yV<5k]DU0mp B"Ne>GU% EFXnb.]bg|(+B?-qmrJکkֻp:i 6sAZxp Hڍ:u2Mx?z\9o L$x2J!A蒤bM$'sV׻K1:Rj\d)R.Wb8~]MxclՅ@ڡ1YĹ#?) 4c~/h|Zە4w!ȾYL D^H 7O(aDg+??J[XffldžL7 3 [ݶt\n_J==%MufaH'SW-%T8VzVYTihpɺrsGe[4 ]T-wȓ:%d3Rȉ45< <;{Vf0J薊6/#f>ӣEoxpjɽtɷԌ* 9]N 6s7Ȯ-o"uMn(!?zkk>@̎]u4<x;󂺮})ρ}IC~jR2kMGA7gE4zbgoq]M&Xe )xR })J4)Fk-x&IS8,bp v{oG$tiC! EDpFei6H)3 .O?/1_* H Ff%aF{Fm(4h2FPB2~:0NQ*܊ZYꈤS{_7|7^|bI:h%$.CőQ#B+q~ڔcSk*P6d 3mA(ibgfsJp*xxdM%Pz3W&JΤZ=.Gψt9l#3;W:`KTB9sYI53*G d"'bN;rXwf,ŷXw nA}~`6eS$Vgd{:w+-hSy:Bo RW:?4= ]ÙU}Mm.49Jx%C[(k|\kL*7)u{ e|9_LA#gYY#-4@DL2nQD? 0]J$)q̨Y>a&$qX&b"h;- l1L.Ay=mxD!M;aHM{EnVf#$ȇ$`X'YPOa46՗S [m,%{ԲFA^2b1=#.zޙCmGaiI`{Sib:.V㪔i /ޜbͽg96R#U7k & ߓv Di Lk#EW=`WBy椊WQ~x32 KJ[WV,v;z_,prvEMskUMGStX1< +"/@JӳI"0vbmJ? :! <}qܠ^W~s eRP Jc6ܵXS `<|>vXCx&}Qmx3#4DDzǷ)k TAIhjHzne8$#6ZstrANލEagyEhJ&ۨksRO=w- T޶z!T9"Ӈ`Cp,cèM<' շLwUC63S{=tA؁+8!efǍwk&zqwD"H[D`#8oyCxOy$ŏKLϮ};G`A̞ qeG+]%D~rdxi^i;b \z.3"T rWTgkhB<"ېÀA  `lbn9j*oP'{ O,mv6L-o[ۓ3ty]$ra8jjWz07ԕ[;pԈtp6$F/6T֗O?eO8x+sWpB;^ ˕'-FCrQ@4_4E| ̓< K4\#Jhg]m ]f?V Vi*3NS&3s{bu-!8 zDWj)B+su)??M*:Psa} MѸm-ʗ*u\R:wp<*~<~Ġo44ۄQfHUyuI9kF# ~򭡓 Bʂ\W(Wxf5'r *sa&O!8Di ;˂!{e?WT ;uRCY@\}:_Z*^wQ0"`/^[oRLN A결F ~yfKުr;g ?#6-gNaMQד uL_{݆ν;e1$zrk V̩% E+1FЎx&Gj`P@y*6'! p#ȻAP>0]`Q~"LK>l&\.o+Yj9?; v䲝%:cƋa㖦 {Vf_$~.^nQ* ` "jӕxIM-34dCшBu,m_x.Jn<10gm]^LLAdkKV8C}P7#yxVU1UGZO}Ml.י(HAGIU`Nۍ,R}XʙdBmcg65R܋'; GBA(E:47;벰 9\ s(qUoL AL T_Hawp<Ө{ !:3e^ q>yP 5 c_*nct~spM`CO%GgBPzqfJZ#ҝOWsdSYklx߁Z!3rZ~]0ptљcBcvE\u"\k I;c4ɮ۾{[ԍ=#!xaäfg bSNH{FC|Dt2|]70)liEvJC/qlp|ftyi<M87F|lȹbn-tj\/N"u0OMȇ7vf[Pѭ mz[ ǽ#amBN sdY ƿU)mPDW]J@gU-< TzEq.ێ_! , լCZ+-dz0@<ѤBn27 eORA62 $z#&ԤJ8m cqCVts:DECUk(_](?O)t]g57Q UF$]JN`;5;=}N]h #p-cv5D)OW}4fQ;6 oZq==o,2`۾pTlKۖu)=Oe7(RH͌-SH}U[ntcp|M.v?yQGkc0V:/!Ct>U α^E퓘bؼG faҢ9џE%}!xOLf0F-tOiiV9Rèvj'r̞uR/?V΅Ar#wSj$kFy168/hlQw߱,v<^S{ X6k "B1V~mlN1cGCMtj"ۺs|5>Sy$دZ#;D]L76@Qr]A;D-]<΢5|?D5%{'k+XNsUy>h2u}5 ohO#'e aHL6A83)9q5ǹMGj^|L?P 28a&SA֦Ћ"fĄh!n:L>3`A1OA["B=H,s~qM֛uȺT%of!zB/an ~% uEXFZv/Ƈ@Uw`Y`P¿wY3)c(r:dix"`::A|WK?'׷|6-2 <9_&qtءiܱ`<W&(u^4^߀E,FM/1Ml m0O~9_0>,HiYS3GY{1}#W֏$jc s+VG<1y[U{VGjvAbS|_ZHB# >p']4c1q:8`8ܿWC8odә%֬nP6sT a>ueS| |#` 1~6ӿ4pC{NJf6!k`gUqi6pTK}L7e\!n](^ϕ _,M8vrGy/ bT3:vsFX,}5;WN (}OEUK=go7v F0tVm_StR(fN^HP6 V^Ú%tУ(a Oj}O!{Ȏq%TT*' P3(跎 go9}Rاy/sg3Ds4kh% <;|ӰG"z lP2["SLnP| KO 9ߵ0dFa(6 mGxynqܶPPS"7_A| sm|,PQ0 2E[.2xvӭl-.~=e,f#LtoSː"L9L{Bc`Nq$0} [Y"*Pщ.?8)g5w9MP g9eh=R _[.]j.-])n<2|A%K@ST4)*ŷwOoVd*ӕz bbC` czh.a26,V8?pN7aFxfQv+}EjĹ[pEp0ul-P5TJ,tRYF*X PેA\ji5s yooά+w OmN峟 YM@8%fo\^?B~q%])~;T>_IrcD7GSv0w*gHZ: 4 vPoF *0}qpרy"/1q6ߵ8s΁T|5&l蟛g, Io3<}.D##ldXŗ_zR eB43eHߙ.ao*YO 4⹏<]]hLAXN2jt}9uvhϩH%KhNL1r7 …/Zehv>Ѣ-Q7#Dt*TYw;KBسljGÀ+zĀ35,VV(twށ!`u_/o1,+z׆2+@$;r`1ފc"$Ğ#'d)#Xw("w;)'n*^3')39%6a"C`&K^q⅛szO+iovHaEj>/2JcH%ԏ ܡ`V w]#*zn׊7dhky0kiaC*\EcqAL|$[nnJHɇs&N+ұY;׵,bdFgi?)AƗM\5_+wlY`̇vDd:G`BBT0TAf$(\!wxLN:payM"SxH\b֘0XvjJҋm2-oؑBȡؒ~|N k3=՜GmX1퓤\jM߅7}ݒ>Z1Ȭ9cuYK|gCE/|A{ߏ-sS$^e8ٜ9ݵUB?ܰ#{jMkzaqKawO w ML? )ՍlJPd,6TaYn3?{| Q("i3uqWLBQh~e}6s.'Cg :$lG(,} 20SZKn>a( )jC'w!koL+o_gF7[@q!d-% [8L3&5RR_MS(%j7 f}jz@]BJ#cj>TP-EjmDu?/h-qޕϋ٤ ʞ G֣~]n˴<&_\;,P4Fy誰Ds2۰hxaZH  ,$E[]@Ҫ]eyLǔSZÝK) 4t0i";Qqcp["Fo|bVP,<}o5HπDVK*@;6!+`w\ț 8TbOWęՒ6DTjv PJBމޱuk?.L6p3ʖDݝ)Y2R 1; QW{1$ns {8xOQ` k'y).}aXH)f+m +۠i*;y QR;XR%P9\ˮ7φZ*5SMv(5pP=zE_qD*rtb"*R^pЋWczaƢ`S<xKSOEQJ35./>,y@9E05XgU&X$# 9v lY7qAkf^:FGl͔~_~فЂNX٬B!G"qc $gsW}X0b#G''nEwxLqK˂$wVa,{ ,K?4YF`B7}eG#c!q䭩tX\s;@"FY;܇`u}v`#aQ)+u`gwPׁDnkb,-.AK;hFX{E9ĭi [C"(wG 7o$l|W}Kҭ{NjIbbiA9Ok q_j,YOٖnāFO<7?Ӆbx3{kPDΣjxmܪ ,&wH ]P  yEdAsn=rIb12*p`ut%7Ĵڀ3Hۿ' NKC4EP qsn d kK9 `CD7Mq଺g)JP@nҍ$Pv7ŋT|7+۳@[u2זeNRTgg6F6a_? "1& |݅oR904lktNy[7w&j99=:&'m2H^Z2mK"+"Rc~۞8%QR~ S%w*5uEcDdlI5`| h%jn_`mbUs9q듍0RBTrBFB,%Gg7#:x󽟹[T fs=}g(%#%jF:H8ќE)d9G|5mDG}1Gp,_rPÖ兔݌sRC0ͤiխo<)(X񊽗qc~J7[ L]2*}98 {S~X~`5"J` PÑ"D]dqfWR%ptCArs%.a^rj&OWRNFh2aVeeDy~D=2 %&%?!9!|l{nd;k4]Ȼ}Lf]k#= B|.چss-Z2iZ{9Kl4 h4䓤nK&77pK+=K2.>]/1>Mnc,2&ND|_FۧR}kn%lm|xU!'fk/1](t5M( v'\~A/&oVd5''_a~+pEݬ-+!/@e -ƒJ/,8"paM ЍFf2㙙6۠Kޮq>l*F*؈1^f 9ys/&*6o&M RDЊNI9򇬅7!mi&ӱt伽dԩqhےϟaA! xѸM'ڀGQf$zbH\弚[OR悔U3/[yd?GT9Bt:V^5-^eG95s!tlf8HEwc7*ȓ 5YDDO{Yۉ'(Cؠ "GyϧM#ڞXyG0擮My(m(<3V,_jA n8B /`= 1"%FS) !GW#|G"QpR;d석(k'f5sHʡ$Wc6LIޙ.P!Ob72Ѽh{z53h8qu?ξ,0!Uj$Ebke>SP*#O-5]Tf̒t㚮 Ty[i w1U w~Sca)]nZ=e`_},#765"͠'d`5 ?@4"G'ÅT&i{ h8!dVTYBq6F~͈ owNѰUyKN(]E<2uhDy]ݱ39+;nɕ'69ȽYANG8C߳֩a6 To| u¡@v])0B=$#&SgS@WF1)al6 ^b3;RvMb~jE^}9}6JUW㵷N;{(7b޻;n'O.?fklUe.wYE 6b- dHjyՅԻe$Wq`Ϙ[\3zըq;@7aߙL4Oɲ#LmS,tB- @gPv)V6q0$O~`[ c:BA eɉ{A KU2xu-ƫֵ Oy=zTFǐ銋wkd۝mEW \pvy Q|An#ݦ@P4Ý"`.À 䠛&bi,`׫\Uχ P8sBb#m T;%[<34>|ΗhgH*H)1r軟a T1HүJ7S*(`|r6=o!tQJ)ǖ޽b\-n?`hOvlc"4qBTDT0cy0@̑NmF:RwalEN2ɸnBkw8UTwb|~7J+WWMՋ$4Ԁv>˹)O$mCvڎSKW86j|Yu9sLD8(t3d"h|g&g0) .Ie_&"NNK-7GtHĤ.MQv]¼3$"i[~AܖT!SE+q#&DU\4+%E܌*HsV4XO`wƊXV9obl>U vjM_#lARca=G 'hh#hh|=OWf%HnbgޅWwi3+.n^Fzl;T}Gz^,s8MxV+ٓL dm}39/5aɂ^RCVuI]pC';z3$6De`y8T0ܷٞذ{ GVGIz%GBF\R: @(Z| gdQwO^aF`~g8q-y 10ѳfnv\AlWǯߟfw푷[gSPo)#rctR n7| Gd,2'X|8;I:PH603^\UVj~Y.O8mur[bF g d)p)k-E<3˄8s6wj u5}}Zni/8`}{X S-vtZ@^f hHExZ!玼* 8}+9)iү*PiʄɡnZjp[N@HV²;wyӯ4! S`(Bc;&T!Fj$@kN LmObR"Sh2c7+?qeIbÀI_!n2;3"/Q9$b>-8fJÅ`b_1UNLV 9u\ν>Y\)Z˘]_t 6m?NQ<ex6ٷԇpxcJJJ%Vn(v.䋜xM ͢ Sش) w 8r_ x#鴥|6x. :s%W1].9^, [6gf,E0 ɂ094SltRb;eot3"jRQBbQ'TvaB* -=xV&\Qy,nuk<-bViB糙H@HOIl_Ӣ~oRD&y±"dg&ذV &VA`'PiS˅߶>naTJaV+'L^}\ic5PwGv:|tFѶ<㋭L^_,ӆ?u5_=(,b4޿WSpH]a: x4YE\}P]c}Qrj`5ԻV@Ɣ?G7B1tS2{0Q~Q(}:&x uzj 0o]n5X$Lr$G>fPG%ph'bL+B K: ^˾ˈ)/}l{pYkwL,NsZmM>:M$pc $S4 =S\8 ve $ /jz6ts؛.uHo8wrʓi<x1HUDS`SmLg|Uuч`-]f9`6O{L̋l=7W/ (?ф'D[ieJ00W%]*Uaą3aDo)8ҡ8wZц飸MqhZ<*FOT(E/}`V'<=r&({37Wl\˒SߙBL(o }8f8E,7A{b0 O XY zm9?idʊݔfVd2[ Nbk)ļM [P:ΪiB&w\0vʧ7;WIG.B:)[LqӤ R\>3p⧠׈;y7F'y?yЏMVQ%U]ޒvSedWj]l]7g'a">#.yqȏǼry MÊJCIG`OWBrl0%  hreM<,u)c~n E UyF@NHՂSM ݍ~.EA8Vv jTU48ro8WGw'Cnu!5s 54}_ dá<*BhEtagV\+G_m Zj*wU,Hw؞7[G#(m`' ?_Zk!u8w  [IZ2@lOkc>Y g!=fkP\oSxk-'SwIvME[Bv㝍[8ykdk=y iGX!ؑ{u:H5D>G{z!sв?I4-oY''>8$TYMl~<4L#ZJQ<_Oi4M0jr9rvLyc7+g5N +9՝7gJlnȀƴvQ %rB8~:u}OxY4YU`90TP| b8`;R@SUM(XH,dN{Y$Ǵ;(i{q*n=Ny)oG3%0p9Jiܱ.v377YNf˼:zyqnPf7%{' J*DRm2m11Ӱ\,r?j8|_θ.F[fwGnm߼ :06qv[*G(ɥYufUS3|Q>/<ҽEu@rXChKEGrYר;P ѓ7 LTxrr>SQ"?-18Ƞq.+t(oysR8dniB͝Rޟ: go|UABjn]mm=*!% -Z,{H#xx5}'ku)5&l\Ø^C̉ /$6Oy?ɓ#WY7 jiP3x@a30a $鹡o x69w?dF=|\?:]Vʆ`l5yk޲Jc?>%H6Vr u\=@0^$kPmFE6Mr bi19hx̤z+l'Rz-YfDbePodv;)Y w dfԔVC{mJ߉V@_C )#!Ꜥ 7Km'\$]rZd( Bv jt^RM-}'3e7A1U)TrU+b2dݜ4 g mx{8Ԃ<=(m!ܗuGhSO[dF5P3+,p@+p%=dׄ;4 W!CE2x} t@CAݳ}LB, V@d~OňG#^FI }j7p=Ky45nV[0K08׆;, w`Ҁ6HH ?D_ ¯$x/թMN֢eZ?/S >u|3ݼ:DyUix"yɡ=,_MvMl.+8Xgѳ^0{ya8m@VreMD/i6BҐ^xѱ8$Q~mYxkq[ eK6aA淇E9ve4?}).Yf$G|C9!鸇LSy`ۚ@q$pjzC74lIqzr&!qI^.'ILNuoiZ YjZϿW`BйNn]o *0`T PcU"3'0դe6'P0H)w':q݈ڼV赋Cd3b5IYPҵP %19 !j.rZ@1aS SH|Vfِ"55+?sA[P Nm<ӭx**6瑥w#0hv?`1axɴHravhyP:uZKYe .r7WkzmRq7]/(Djo駱[#)C*KEX=Z4$ʌ @-42֝ok@,3>+vTǒrMg~Q*P=UUb @+vqÚmֶ[OtUA7 )Oɱ Y;W(ڀ 7%w Pe/'U<!+WEv'{g k޼3ӖAzl'y ?:$Igio3*cZpU'?V8k#Jz@~M~s͞g@R-4$5r?˓y'б{n%@o9f C`{t_H~S7S7?Ub z?R~\6:!'^khEKr^ +r0XV$qG7x:)kOXKihq]Ҋs?y=BHi-%Rک8 qA!^?j" ','zԛ4\e@[{mcCHꪧ!zuƿFAey' Fּ`X浍ENàX=.)PnfCj~ZT'=SM݁f(/sVSq0_|o֑aV-$TE>RNلhkJs,PWOjK,W<`mXM%w; | wύO5 3=ׅ) f=!~^ ۸_vȜ^ H+|%"%5wz3cd=B˸Qǣ NOEIx:~!(r: 7̚C{h}UI:Sڅ;FPy4|gQʹly8"ϤbF.Uqui=K9\~X1i$$&nU@AEI7cnةے\* ^hƀXj3t>8GOkvL,zXlX՛HkxoVVme$ rJd]!J[(+a=J6Pqզtώ"-'9p m4aʛe4,ttY^]"sq?/~E`{4Я8ir /ic!Zʃr&+Si.Df`:xAδ)zaz'ѐ Mx1 O)J%[lj5-yNw96{B:Dbw>OP{5bfE[Ưynd >|ŁK/7|ޛTKFkόi5OK$& S_.n*bP ςr]*)q6(ٶl<9IN"*yqK6PI4 ThI$Zf?>]l-9+=#uŽr(˨LbfĕvYc+J< &l 9y=o!zel36J焳9{gf裺bz2 wd=͕ԪE^e+bzB(F'U0i0v91SW>A+؏h҃'L.<ȼ&^Z$7TչAi}USEXU  my+KQ&(=Ney?_AíMDzꆱ̢1 pg^>ևx9Ҟmg5cQѼnbBBC5,_L ΅(fbddg+Qٖ4t~pHXLdgpihǑTha^N2nx&sKL[>:´5Ɛ*AۦQ]G1v:Ma4]WȚDH {›MƵl>u쎾 A4}tO+54"tĴȽG68xLI Zp\.gۀrz@q`\F.xoA`OlOoφu5HN5GxwDky1:72 0Ȝ3ԒcJ}x-z'A4۰P⟶%*0JNn5 *3BN=#F9GGw -RlnAT`z5Pl&D #cWV`emvB Q:+.cR')na#E5$סlu\Wlo,p$PA5+D 6ίú 2H&%_sL۲-31׏4J GOC .~,e3=~5C+ TFζ|{TcVm t돉U x]hi,ƛbm/|MBE1Z)a (7ibUa:=F׎\.!Z4=CD0μǽ{vun`PI` b{v-M.˦?aJ4.8tݥΰ)]x6NF-d:mnAnWpgZXY'|> KnesYp~ *RJPy:l ̴Hڀ=Y6۽Aߠ1B,jN@wJˊA3&ک:EZ"1xfܲ&)M]m\Bp8Q߿v;w:*"oXd>wQNYh0-Dn)G,cӦ07(&EbwJ@cگ;ԜGYhh-1Q YDgHa9 Ĉi,8G6IxuR>,rS &kn!qiPnAm kʭ^HuQZY˘xy.*3( { 7D(ofT [iTD y- kF=_cyNÙ\Gah0.H(*$ܸ6q| XMGD.T>5E"9S#c[~l1)T)Ҕ|-Sg?ʀYf|fxPbOd79?Iɶ 8LY i{B0 Gc{PQ6,շWVBg~R3%SucY=enJ28{>kg#wH#`?U쯆 VhÂ,sBN1  lW8; E Nx&&a 9O;1sOF.=\2nGRavKHvVtL٫Q2KY|.SJo4ۤ12R~3LmׂkOF܉0 y.= :倂؛)pYvbL%^13찔5vfӕ-1+mz.|]J>iR% ܅i!ܧ.5Wvqg}ˇbo,eB ڤ 6kCes~Zmemvlͱ'1mNe46z R$kY@Y>i NBe?Ŵ椯KPsKhKheU24H(6#dKoč-Fg\,kAW@^`Ȃ*H8PG$5zFьֳ=ٓfr8;;4됨v<naj Rfp_H|1^􃶱oy?AYR>Ҵ7 $V>jPl&iDbVIXPG%g6jNE\P-W(Sβ[ZCʖ}漐ބ[uvz{| V0A/y˼פ/M=NXl:-=%f;]++ FN'6L&(_i`&G!0Ŕ4;97ullUpхD:4A}9q 0o_lKa}0|߳0. 8øVi77 X)Zq*Q7FB"0bZML{׶h vV^L}_[3qmlڽu"ڨga5MfC6]$b$Ű@(DUo]8Sw >yOUiuAb,}Sh푦^`] GFžU1 z_>om}/+[F=! {ۥ̶Nf^5fƨh3P@s%u벢|اC R(:8:V<T(OP[6 :Si/3M ,xNrǝy~ãI]n?1g;L?-qţZS&vhr0xZnl'D4&`{; s^Tbgt߱.2&p˿hmJSH)..zG^>[wɖ/elg^cSj GwF}Rۚ'9O!eF ]鐯X$f5Of&iz, -;=WBI34K0,㖥K ac|F,v.יĿn)l6n[gM?⺏)L̽;!^u.IxBwFFoն b QZ@ߏ' Rd}(4ϧSxjU>lN +yeTDw-DU@& *WvvC:xQ[7}JQjX̆0Z.g^3 vO]ڀn kj|rKLj`8!q7lC lk6mwKYSB# eNfoxpJxb%٦\3Ҿ6z K ̛fMy1^Ol,1Wa\ eA+h[eY 3p|胰,'xion]0] Bŀiwco>[\//8>3h5)."alݠzdlʞwSJ쯬0 2&?_IjK{){p~+d $uQ0(DShHjMk6+hAG;LI4͡d/$ÃErnj5C®H>=1GφItNvhX [CEOX sr c3o$w0W9ktqi'x ^Hn*y'R> R$%:"DQU eV_ʛZmsZzI 'S۸+m^2nA3BÇ445;<1_"/#hy=_' T6%j8yԚ..6:hѭ#L![G\_WA=c'<#㜌0Âgz:OMSo^-̗kpj&i^!{R_"7hxAmm4: 2ۘw[ab/fД7xK72+352y۔eB߿T7M9檣R^Qw!>渗Хz5%>rHzAgNNM~ML;): )S_#$ɇ5`HL}r"TZvt 6RK?A?"E"ܞ p([seLf?|.L/"s2jWLbb]EI69e܅{t}။E*kx'h+mӗchK%_dպTr*ݢԿdrXz WF"eر@]|eP@ήҒ;|sPFXeB[&Ol.1-4Eh$Fb".Cj?ӝyTe}lf&S; DlҬAڏҩ :8 %kXႹ^1{}&)|}ޛ|txG>-MT /ԓV:"v@ N <6b]SG40񉩁#S)HO, /݊EwX7,ȼ@pېԥ/ BD5ԗwŃzj@P樣( #pw(_3 m @ ߊ*F+~*¦Mp0.;oQ$Tadw:t=S&{v0i| Ix6-W<.G{'N^HB ة7zh;`ܴ,NrM2Xuz_U;l)dJ(poumP2rFg7u[Yd?Uߞ0l=ZwuPj+>d?Vu9U0kf7V}lmV" nJB#cR&`y[JPE9 n }(E?$,BGRESOj\>J)Ko 6]QUA&:{C(HkAg{28Fzê['MqDZ>(K<%A%6Kآgz%4¿۹4di5Jȴ2nĸ2־(#63TQFxBp,xK||EtZcPJ]4ވ $P qL:H:ҰgӚʳ{/{=ʡƻk{AM\>& 1B:`NJq#OM$[<!}!b,P]  7 e;Ɵ0vG6;Ia&6Uo[Ysu̇TvӐG3|(fkE[}*QrllS+T͑fVa@S.;}Tb$"zH<詤dGy3WJ ԅ.Uv[Юn:m|ͨfN& ģ^0x #/_;!AwɱGS9W=dOe AЊ!AsdgiW1x ;%b~]!8얦6v? q-~/ v%7f^l0{ VR>xOFR7myQ}'GL-DLL 1XQqo>s)T!~nn8WkċTg#biN i*!O2xd v_SpDN=ʦseL{U~v)tjTsw2W߳Еe|N,rŅ)Z%w1ty\p'@+`ϰmg'J rT( 1 v`;,'&NK N{T 39n < ,5ϧGe„x>%cnx{=+R=3RS0FWbQCC{ {'FHFc]c`J&~\ &su߷PV\m@5q(zlۧʗ,LGK hFbr%TM<%(ۆS.ei.X,{hqHaTwe4L=DTN"s_x8 tFwzKo f0QVxr1XH6Rl(F*a J߬[ч^xVK@ HrmrJ[^95([룋jrdy`cf(dvBfbb9"F|_g_PY@7i:LCkg u/AðxjH<`_!FZ)¹lRA$_FG`Dm>AAH聛 xw+Bo Sfvj9zDAoE q/r8ڥ]2+HE5ХΫk <$f?8+xEc\h o/>YjDqS9G` $M0PO~3p_A9AC[_:/WEQ͟t5d}8XjˇK˺;h"I@%՞> wAR+Hw;x)\ԠD tr$ z9߰`j[*p}Ͳ,\C_ ,C,s>s %egwး=62|-gj+/z&IE}ylݭVEzN`c crnYo o`g 7.0&I(\6icP72#3D[ I}`Q]NcRcSQ!.V 7 F=[NȊT2j\Փ$jw.6f *~85^xNTm֣cf9?fAz3FxJM}X\C`AwM`CdqadA֐ ے 'cݜŖRXdwFĿz8ߋWqADHpߏpSvMh3=(aV5bD*[(\JȪbΒ-u =ԎN[͋9^y@j] k=g|6CKB6dnXQ;8o!;(ɮc[y3F^BeCxn*..8YWoj`6nʿm%@cuqUZq&xgdUpxU6ӟ̷rAP^h\S: :?kP$&Jm/pn偳D4(KվR0 ̬qY_K9fҦj)|-(PVvHǛ&Bd Ȫ˙ߍb MgO*/n~dzSp#|ܵOT-gcr"S{W@]2:ɓJƆ[Cĸ ̗6՞֙j >ʄ5`!\AM ˎ_.^4JE6߭ TU&hZ]xiap&񻐽نπ2\N.bddDObaDj}šֲ7oYP|aƍޕK/p%RÌx7H$Fi 2q2X`9S/cz! l0KP"' -E ^Z{slX~k!iKĒEyJ4)AC]% ,VK JE?i7 kVax¥պGj>t  L-"fe-|g ntxajM\DIXgAIDN@f?æhW;K\/W I/MF@fNӏj?#V9M!/x cv N^z1-ǻBY h..g"ZpW=+J;a݅쉳X_6#^PpD޷sEIPd5nEzk?Tb_Sk[JS>Ly/.PB&9c[*DzfDd_']P6aO.qXΖ4[>| 3 ĉQQor=2ϸDFL >K!m ,i{x IB1nAP(M#׫8J2aJiw~~EvG'h%ʬ ]:bPL_AZ vtrȴ6t@zDɫZ1|;I|^'r'K@H2W<B ˧MGjtr6 ZFMC=dܷlsYGdh^uIHSzݬF!4=r(-xa (3xևgZk*;tZ2!HvOZ=96@(-@(zBZTGecbFJVBP~<{Dz̟$&CcsN!m #@0aҵT^%š[B$t"^{eo9Mm\=$:6 gX ]d?} m6GpHu<_N2n4TyŶ7o>Oe37]ތdo$9L1 ovћI=靽ǜ.HRʳ;%Emhg@^Lc'X X45]T+ OffiOWuC$BÐ'e2b /D5fV@FwA䂹GZ[NF%s捨KӾ8D(9zIFy Sv u?RY()DL>YRdFɾ~kZ-A3;Sî&Uo >Wp!VL3;_pq_;PU|틠y"tjdUe[Zb6YS~e殲R 5R~\P.'ZX;R+eZj&zNѡMvByl_^T5V nc~Lɮ.N;9̌V7{]aHi䫩spe_G 53Z9YmS"YhS!U¤dkoGy4,Rϗ@  @#EuΟdyt~y粉i^d2bkA8'ai@j0;ZrZme($BJ})n8Gˇw'9Qsc2ľ#p p=}2*Oǯ=wL%`CRTL}Ӳzߟ?,Vy冷%).5&N!5j09 ́12,F|: :ˢ{OQRMH"c) bץ Ue[U+p89LӴG8LvE/tL:J>顭R&o>]oa?Q`xAI|7|.;ɗ+ [K})ټLn7iA8(MѩL!ykM'Ak KG/ӣ5=cPeD9NGZbۈكN~Y}Vpjhb!Rٓyo&H V B+SS]S1LA0 )^ v,tĔ1W\1v2 k*Z˼T羛ӎ>X . x~9XlR9 4PtZe*e皃s~Jjqcj[A%_ׂ6GygD)=UZr&I ߞCN;Pqʂ(' xo|\8@7"v:$1ɾ Յ/1x+lҽA8G@F f)䀲NEZ-0ޱA,@Y~Ʌ@[Dl%1^q~j\Sh}M}ضnUjj\ATan9%|f8רC)Z2>rbn0}&O!!髒2T-7Yr+ls߹1 U|džFekYu. ܲ j^oRV9[o~nDewRZM*ùS#)"K㿠7 päĻ)˛6:E5 [z!}AtS4?ΨӝX3[2Үr m[Dw$S  .8 @@jh-fL QlHٓkmh2!(R$^&Г- ъ vwȿww|UeGA^ݻAEJ#ǁ7qׂRl ,LA&N lT2NB/C̃ ސU#ꊬR +L''(#* 8 9i]g]GL5s < q7rd'BeM #Vil(^S Es1\ Tvپ<\*\h~7AhDYK?GkG@D]sqy9,0n#֞rх x窀}kTyGfϖf%0yc?Ϯ^>+B""LDHfUm戌"34.9ɱp[{xHDZ2%M7zB_fdݦӓ1L/K) L<<#^r*M'l?lz ;پbC cStC pVnQt({ǞE89Z<<2*q]k`--b+ONAFÓ8D&$)/@>Z}h)".1cOvbeQ׵ YVˋ珟 bJ7]ؾqWej2Mû0;/B(N eerZw!{ƵOp#.ϿWXΆL8"Ko;8s:ϻ)볯,M'iיNeר& f]ID"$e E7rV -m0CMtx Oޞi{VYya dGOR$!4r64nK5?"*eM~u]fjCQ k zi]xhUsqKDT󒱲׽~·cIWֺS5BU*ˍ 5@/b #Nt'7;n]o iR[7֭?y .(`!JhծAYIc=Il ke?nl}E9+My,UQha뿄GUiPDݾ2j7MT48E2 F{IO@&i3E_R@,9j}]fxij|};/`8ByI io;$^nJ Dv̫s?o.-nvZZ0H{UwKgn$p]P%st)&[g1b ]=3\14F Z6\?ݍv *q4 ۓzve7XȪxTLB,V/IwBG߂fGܟO#@jCNZdMet^Y>ۿc2*a%ğ0Q?H920"AIkkpa#o<v7"$X<޶n*Koڳ&-6p`M.P>&l64r*aXEEMȋ:p)EJ )P~i1MoH| b_;ONpǃ˄a pu+k0lm{ n^b?Lcэյ^98T24ܼ'α 48p+yϭhLB'TSy SLT\"VWmUoN{k+Ⱦ 31b^? zCtei£]hͪE 7Jt=.qQ8ëّPg8?~c-IԼzs뒔W4|yg.C]_H^@nڎGnH#*>X"N}V|$t;7'CW9op Tq&3ѧ j|~>`-mIjSX}`Daöʻ e4[cnGaIZs4tAWs1M-jT:cҖqKk䔇썑) Ƈt{f-&BGo>6 3 zݨFLeMG[MC|1]ieAf7uȜJj/ L+5)ZB37 uEk Y'-#[WDo,=?'3 ;[4ېˡHt]lDOWH2^`gT{Z@z ^'z|*[wzvhG?^RoW2yv9rhzϾ{[EҐ^5΢sVʣ"aF4tp3X /2 *WUpuz,R h tk!ԪRH^Y߰3<5)b' 'VYш.L=tbx;,﵏JUb\AKCw $,[g<2պSgG т8ʛabt "8-^ ezOƅ*A,)j5Bo88c&$Ӭq^}ɸkvu/2tN%ϐ5oU為n{D/ѐPG(aQIuABMXY7mG=&#@*[ I*UQa Khz-lx/);}u"_:Gx $+'HHZ.Zl/ '?ٿ!CSPP8t7n8W'Kg:8Tr:BMt+Z}Kwc4\=.o: do/ 'P/C5sad<rдC5$!yi"t)b$zh~h v|kBqloں|ÊP {pGh3"[ZîU.^_V¦n `z 7ppq򈽀ؒzH'kq*v S,<5^'(UxD/0i$SUKWWRWrV.~ &6tUЬCa#uU!v1CX"F{/ zٷEK6l:xRB{_Z ҝu1b鸱qLkӸ%{oiqD.XMRe2XU5!}K<@}]N)AQ<.*Ǹm; Iϵy؄(l I(o9lyz׺Ap Ӏٸ}rХֺ)| .m5{znnA>x4OC.%hu ԢxF i|4S25/;m/>2G[iR${U\8uSgx NiZ~C#6mN}^KՈQcxȖNB+؜#nު WI@c詶%Il9 g?BcJg̳>B XV4;}GDI 0@l/>ӛyohVsiL(O:p6mmX&$y1oeM`wNPꇁoVkwt/JK h;]8[o._<52LP%a;~^8I gU.?7{orxɩk@[Bx  qfzOg/Y"^e0J\pmL!p]:_MN 3e5>M='K_ &C@bȫFjMWhߝ rD00 ){,.-.։h:'=ks V!s*twu)63їQ}d!(۰ Jl"!1m` +r |ݟ X7GuB+6cxSӚOcM,(qsr -YISi bexc;iüe3 +M.5cHpdD~}F%TcsuѴmDUh"P%ՃlFnޱxw1eXNrH'2n|[iO_1;p%. ]WS#/K OH)Tn,n8SA C 5?r}:u !4XGWl`.B/As95Y/A}LAiR6MCbf5Ik~|tryp5 9vH3~(Cې ԮN$6i' 2fyw @CIS[[k͢HS؛J{%TeͮmOYp۳䄋6 3Fڈ츥70鸦(¥R̴"#"|9DijDz641Vy? 9|5=׋fn|Iՙo Xz>Dr8HY:8Ӣ(E.)ǠZn6-S؈U*'.DnX+!xT긡 m!B_lZx Hvg(xޓ 览s**" 0Q Yf9=౜/IΙa ۣ"cGb/eKK& \u0@B0^)My#fY֨T8h x]j'^2,Q |xݥNzC}% 82R;`Kg&iPv\%*pPHHڵSQWݤɽYuw6 Vȏ"ŋ6w޹cz$İu3|l7J JBL4p<7 c!t@ilԛBV$hةKOH {r:tD*ȗ;نO/lωgBA ,L+3"oA\ed!Lя)=˾f8#*^} dD]-*`NDqj+Ҩ?Eތ0hz 's s:9J|竞dҟS9^M  (b2(^8]7*Q ;RHx/T'CPdzPd21Oiq&ou/mC3PD^(cll^.'coueatKvdJuiUjnE:d[2.܇rJYxaԅ4x?уefg|wI8P460qhaM`kZ? v> 3zآfspJ?v0s?Ǥ;6͌TF,BX+ƕcoqIi毊> ٍ/b-{r2) \$s-!T)fIc .@Y]rO=xv&vpE\WMsY%Tk|1<kʅ_'ieJ}f*yn QAnBXݡ <5ׄz9*vK]&2c~Wgr{7M0IvG;wE8r1O&~ 0 v NRQe(G}2wJ#Qju6 &Ҍ E\P"m\6נV y.NkȚf&S5mfLǗ1*7Xe|@S4vLm;UeL.w~1]U 9O +C}?MmK^2J/6mmWou^2+vpgq ]|XS ,5J_3!ɗ֨cEȠϲQ,ܒ\mR`wc[,f{k^AEJ/e7.ՙL:c1h_c-!_+ ]m,=`reasI+>g)iǯs# +3H.w?4S/~jڲ濨bCus"F=אeE@Y&4_FaZKQ7).O4'n?1W|cV=%j鵮" u"pMĜOj^E5P}EY7~jY˫bP3,9I&=D^e?ΠTTxѐUbX&ǥuPN[%.#pVڼߣ$F慒q~=p!@02jr)O49[oP\(VM#v)Cۚ۬wYK_pZ&h–H~TG-Gۭ޳ jqQpGNo5 aOW*E#H |]u4!x]f 8nmQaa18#\ȋ* Fͺ99e~9wRcH&:o%m;`B.}.i?8:=3Ruqޢ ёt}= b ">դdž|;DK:x{bU ~BT\vjrq#'ޟ/K6 ǢïTE &:}Y&1ZT2Ҥ;ڳƮQ6:ik.Ygv2oOuqv0 $; pnjz6Y9fWE1irVEˆuCc6,?Y)NٍNZKfF wgCݞv_#㩜 zC6$&s{́ Y-O^l^aۍ7:2|OkQS x86M/1ZGҝ.&sB:}\bbzhmwb=H^L0ۺOnc;ۂ͐ 3mT(σ(z1O)}hB9!N]8/?@^"17bF|ÁXeMahG}'AęhFy tO4[DB ͭ 69-u} z}+ tq@D~rm*lWiՊF̲a򱮬rp [%o78!>1$U .4iGVyu-QNj5T^QO~]#?oŐ/Ý##Q_VQbgte!Ы{b'3!-A~M .2wb^kCsGF[b$zL{VMv;^$;dicȅITu.'FM)|G]" xj[vv@m:X.b(~:?~GlrU#í+q0/ogR2{wW6!*xxl4(<: e51GkV5oD\3G>O=m1f04na{'Gb']CF;k~aʽ zͺǠv fQ^@ݶ: \3cea|[z>R}wu 1A45. cY3O{,X/ϾѐhiM]7f! .cJf j+I-#[},7Sd`|mTk\LU1#1Uj(fMS|kpuay6B&?uEvs,\qy!ՙU@wG 1nx g^>qPWI8 BD):Pb.<|N惌ԫu1TYtlp}֣D|qR9g)N 1^I*لR]okӂ'LÍT/B]}N8aS~&%6G 54}KwI2YC=%6l[(K$Toz%+4R8=vT*+)^'{|L,sd[(DAHٯuPەDA=)8Gu6 M @cO2;b4Q`i, 0nA"MΌioqE3%me%G`ćti~ąm(HXq>Scx'L{hCs!]0Ks"b&G-,wG܈#n M<_Fi߼El9U2H'W.KmF 8Ueӳ8۟FFŢ {IF6&h;8MB0@㠾^v ]00LRP<7aܺ.cnn}b#-˻'s/9tif"J%=+yLl~W羳׌]XN;.L x;7l0h0ӮEJTN\ b"d#%'iw;{ny/ +~YX Ѻ4l ."ni6pY]-o=Q[ίa] '|)nDK!ZMd^ ubԈiZU-HlNi6M˺ 'c̟;1+> yi3yf}7pX_(ܱ]uyc%krlp]n._8h ʦ֡CO)L|Kz(ؽ;f& M1YIhh gcX)|~`|/"^ 5ejSoYn[V$za@U+ p@F C[G KU&Xq `QDY2f̊^ *^\<"'Fn5oe||͕]r]*:g%b9?* OLixʌj|8\B"821Ez}Un^7z fSR8o%6> \qA )8*@[N18=Ï[A*s8(!=,D&eUղPڿ6Y\JY,oie#'8+ȖsJd("!a`JO2`[bz fsUrٴ :E$:6,QCV xY~w2M-6 5>ւẐ,ӼX$3U9jQ=Pn1>4^yaL$`hݮ(,#3n@9=04D`[m=1O|/i C2ϩѬ}/У`"Im)dpaoW<6upI)fK!Z,LI8ɤӳ=`a#g1a8^x(GJTA=oS:B[?/;,Ntr]K)ΑHy_$R /E} &)ިb=b4 cRϖiUstrsSKߡ!ghF/t %z7 ]heF(bW8[s 2 0k3٧"@N)F/Mъ+VevqJ]\ٯȸmeZٓ'UP#XsGZ\XTZƭ~}B@7JBңə2e\;Ţ\гsCf#SiDpS$7퇉?z]}t%A7u uFꛦgzqª̑33?PX;*L3'2-#TSs_ B9uknt}dSKr0%U?vBF>GO><"2nZؑk'/eLR*tj:Tx;Gdk'/nP`Ah b+lK-ϻq»1l=@g a_B =?!j^F=4OzY~7!wDtK Ϸ%&K >*~}a> `oՙ'+u-=Szm[z ֵo4Hl=utJnYv tuD ޅ\d҅ᣮݰ1wm8䬬H?p!Rȓf܍HZF`{Zε2ٔ9-ީ{?C(.,I+1љIYєrh-B]މ]g]Bܓ i镟a;/,s+x8|Q(gzō4F|>i*$S-em-d7d8i|,JL H(YGwN[Î2B$WBED_H]Sc@+~'b_PKnbR0Fٞ$PkJF}{ݾ{baFzAd'I K Rg? ŸffX{xC73QO,th*Z&bU eQ*I|kdj!vEK̓hNb7tS;u.}WgXV(VoԁHTm &U,!@;KYtuDR1s\=7&ы^, JKs{\Ga1:a6OWjPQ*S . 3z6\Z8z&vU*iNRfd.}x Q o݁C!?8OmAs3n%M^XR<3,۪7%4LRltdp~kaٞ%JvKR5xYpJ`SX\lJ;QfHнgv}w޷!t%))ސE_'`M*ݠPQZvNpJ 0 G%jS6: nZ:mDL&dG82Ɨ @y4^+bt8@NoH"gg.'1N1?]xR)' E- mO@@v$ /: Uh h%<|3vx~y"B_/Bvi\5->4۷3j$&ё".*M4nin@(4*3fIIxkC 7 +}m~9`4b軅BY'9'=/@Q8d& 4~;0]FBMClTik.pp@v΀usm C]#6#9x=&! 0COK@hx綋`j8;]2pR6E y674f6Q,gVԥF/u=?<;H et6`K{EB<8dRI*ģyUaО<++QlBSQFeAI(( Z4 B_/[nsڵoWwAͅ Ul&8q|- e/|yw6NڣSK@,*?(thYs2NJ6 &@Zr n`N)d}* w&$%+8pʮQFfPSp^ jvo}P > >ûjr\U}!s%,ݤބd1`8a.BCOH<;.?Hy%ٺxZSreZ$܏88;cxzf:P7$X_dpc m¡c/"pũZ]'5V35g?[ A=KPdA8C@9S]]UfRDor :?2-.(XS^*oܻM !GMPr`[7 S:1Uj"c_8Rvx1Yd[iK~b2C3dK!ܷ D|o V{&f *-mto`~MN}x]Bk1P)m;C,e00ag8iVaxy*(EuEVeFSk-r;`׵if(6a6h6c+ `ˠ&7$D㛋ETarv$!sU:k8Yv1|RIኳ+wYqD3_s48B?:rS"q%=sD~*~K7'Öxa]3K@H@ 5݀Z0+ [!Qt'`NY2ݞw/l9qg Evi``2'*1p凌UCmZM*KvVYefQP%jmn#^8@߾zԬj\ej_"f']QW6 ѓs!~ 706&rDHcop& ػ]aoshQ}EQp.KjZ޹=s}"rp)r1`r](ӡr.]OI㿈^yih 3ȕʕ&%rBm'#ٚ61gͶČ+V =Y!cOۭPwYQ\%*j»u */ ̧憑g"4/0`٨:M%۸T2]ifx/\* *?ԟtpfN2 Y^g69C`Us^<{{ÐNa V M%DrDU պ+gog;o4wI70f||$6R7lX< b*wPnz1lK|dW$ZY{D{VaP&LqsFc2z۩ަyj懡V^SrnQzkK,Nh+4T JcQ,{sx[pc֜j 7IΜLb@m;613%`\=%.mo^gaFoqHU7j8&p"R-8髾mn@Qy5w3z]*JYn1Aj<# "R@m5i<]3_f|Yi:x |x/Ey㰍Wֵr8X]zK=' ţE6nܑ9sҼs1X w]ԕUR`V鱇߯jʭwY_FEn٪v3Bl4 B[LD q@o/S2XPvlmMw= JvTRŇ$C=\;y; bge5;܎š#=re~#~v&7pW&>^:)R[K`e=%/ {e⌸:,+ԓ0Y`3"r+Z)iaoE{RlV#d䂆 Se9]d~lR9K)9 wx- ze.ՑT %sQ?5zGAoM*Sj\<>wY8~RMxB> 9lURӞI>"5.oH|yb Sπ!(/r]e:V \PNn7ZFngS;Zv*.]3Y/WbH1^Y rvIi> TͶ YUa[F?p=&8O'1w-+B20DŽlq^ DAⰗY3GF,nk-/a: X$ TńuKmNtTZSZ#)5/GxGF$t+8 `f`_e3NSlfg@);7c+䳠%+V+ZM[Cs-iXNR_?$SK5E5Jx:#{y>Zgz.W#R2lhW s EU]MѨ(賊kpEP ;^Yk\ 1A:9bwԧVߥ2ߑuêKcm m'~<[~L괁’kVdhHʃʈ YQ6^"1'}Cf΅6{se(ClT1:kVῶ 2]Ίq5u+['eһA8CYtHչٽ^xxաmjQ Kwz=pVzƨNl?!%K_OOzr"K61L}{ݛ0>Nu HcԭU4E-N}k <3r{gi_dI6pԜ߀QΦ8%-+J43_a%_:aR=Ӵl̟u`nX䑇OWy|:)?F.iR]TFt=Ewe`t/8y(RI)QS 8aY><`%< w#R@S,Egql_` |x|v}b_ $y w@9eGr Ѻ=3J|'KOD_ 9@ |==iWl֊IR[{M[ƚWi$ ȡa"HF˚K(l?z yzG!2cutA|L^2zѵ\ec\6V9 >K/S:(XgC M 5D_r }y.F8L1NuY .zb< Dsʲd:1 KXj)|kG.bvj#sFȗmmdҙE~ZFv &"a<_P) ބL|Ϸ]B݊+WflN/eT0H.\GV6 0H $ɥ.pU+5əqOAwFD7Mkq]`6"&|5ŞmdM_ d+ DBb GG/t:>"' ؐӵa[\B1.cҐ7ϧJ bWSoKw8:O#S3 \Țwz;Ɛ=p?\A0k[WfP5e>MP{et\_ MuRx:ҋL3o%` ‹ _⃉8ȏx8.`KI*1M@bjƟNg#A&m ݹոj }نo5H;_V9n-tǩJ&L>%-* Ƥc%לxgߑCFE]<2Jn yҵ{ӣdLQO۹ɴX>6CoŦg*K j,qaۅ ^y͓7 EhWK ̟1W~N0BE͞`Y&q~z+aG@N[a?NYx"KT5uIqb UEq5OX{h@=FY )+;+U<6 -J&D<F:Ń渚H.NzFDh<*r~TsG55 U- ̳G9%TZR9Qu;ֿ g N bp& G56rEWr_GB_oT0y2ATƋ*9jg@msLc'wҽ5 x|#<#.n_Xݪ(.A,c&iZ&:-YF5E,Bj+ؼȰdFUl}Ur"sp~MiAl$J،WydfsW,E9;;K1'IME\h& l~漃l0KQ֑j_PC~>}j+eIЇ?786S xY1ې;Kn0$&Z*we_# lȭNw0 (}K%:p5_N)_Gþ0Mh%B>Whӿ&gecu \;z&yB%5>xo?C'"מ{DVuL(FhF\~\I]P.0.K>{Yn:;J Gm"HCΎV8F`h{w߬j~(fFEf|ww`S|Y b susRk z{G'\`x ]4{d.Mww4ƥHE/4ye*/ȡH̓OI|#iWrg6NMUc1d  .}D A·=9셓  ,0u#Qkdɻ£{oFٟ XDZ;6rW7p2#w0n[\Up:};Ʈ D>0j C{-XD&,5A(SX#"g[1zs bF?DC@&AOqUMk[]Տir~K5 QK)0(҄(1߽4d}_sgNbiB>Y̡[ï} &*o;YG[s|#fr8ALXmdq @ 8KƗɝ[x=<{+c,;^6BQ{x)@1$+ʝ5q§,44'p|N(OGetf2s CY:tNNFRx^K^:l*#5gb~;3lfvzԚGt`wx܍3iUrIUbgD&⪭ Es&,C. va(@ِ^<ǮYf}ȘRR-G8)! t;qb''&#MyyĪxPiHH1U|8Cl񷗟q{ArHJ5G1HˎS[0cM(HJԫ . `-^ϑBy5Ѓ%f t#t[a|H,2hb 8j\ʞ=x d /aNeE:P&vk[Gc:Jql7xX7JYh".|j-$3̰ѸpA ՘ c| ;Qxs'1UxMṔK &$FHm_J_n0 L]X_ސ$g4{&I}sbvkā5O|y1fEG~|0ИHMwTǗ@" @ JCp5cq&66b ;. p |q#Y9q)cb2$.y'.nCd՟wݧftJpcۅ\`AAmb;rKB#Cp?%{}Ft  D,Yuŕi6@0bӣF^TDQ8-bH_n9Y=Hkȿ kVUMif܂V-A)䉅D,:2zʠjE'2-jՅw'"YkZTLF13A2Q{]zf#yT^[4~}=+]Y;w+ dz['EJn$O?Bʪy$܈ S'y(8ơs\;r`Lⱊ*PUG%nW!Gd(8rzdkkWTW[J+afybӬK}ޒz^qQW>my0` !yg^]Cĕk }&TWL3"E݋"`ֶ<Ïa< :xRRfC*3x'+I-fbpV زa:4}cxs`FBCHv@$9,h})*_qep/^R1%5I$16Sz?e W`{^k ^qVWe"K< Rrp,Hb:ӵB7{|Km8#G=--2}˭DRŵxR&nÊh{L"ٕfٛKK}ҳsb*,?nٌs:J!yGmlE ֣v59\w{2+Y5ݫ35fࡅXb0alʜ>&acPpډYΨGvc\_B1'I(!sPқz681K p!;Zq*撜 }Myoe@aw\,h6+Z:FUM)P)F < el/ 1&I:d.}M qiU1L70&ƧCT_Wbt"KO!t`٬]I5m_d?d)_86DR K( X[㗗xS:'9Z 'S=]Wb(!%u . 5}HˁPSt;)um+ZP8<!zIsvTʷ%MPYi QQ l guk)J6+Sl?3a:YCyJ(彩:pJ)[`lzļ[4F\sDB'g(w~켃C*&p=&|&p)0bdH, #p4/~* @p?b6 M\]eo pA< emJ8+x}Be̎wA)brUͲkO۽?[9mUi:*T-sF.(O]ȭxP_XI2ƙ rn`zP R`iPd^Y#q]A C(bN;50oi"jQ@g?eHp8xCor"?Wb[ uU| ҠأQن[IZΎÙ\n> @4j_P0cQQ_W';fiazCNH,` $iqL- {k2F-l6<bYNշ!"_K,[%;nhE 3Yjb3sue%uE7-GFȜQL |%{LLĖʢZ_#'b0/L6OiZ >c\2Aemw (n(@BF kF)J.])v A0sN&"s}޶ڰp+ZKlt%֗s ϻjSևIkϒB3.S4ZЂI @}.A4 h+nkcvDS @ S=庣e1*" /?>/asi͖:qNc)pE+m9,_EѺdsDm@@!SEawӢBֿ^^0TҲuGZ {<'Q"@?-6ߦ$U!>3&-HٔHά!C+"/80jؓCA=+yKt2ZB~2(ӮγՇyʞ P$$ᲄt@'(' OUHMep(9H=x$a{f#Ӥ_;{Pz]^hD58YcJUw-R1Gt>޲##b=7j,($ajp>k_GdF0>F$tHt^tA%x(|I^#,79:/-&e1 W1ѵ?rM0VVH~@Jv=#_.ڂ[ۑXmIK~DdARmn諰T&.=1!,ZgfԿy¦]i8/W2BfX0,%ytga98~/$V?*.Gy-%וϭ}(<;;Fm{[nEcf|X*X] #o})V1]iD ;U{ƱJSCؖ6'в+>i=Y+N[f <8h`yϕvג567hY2I`)3Wb} l_\34ie[#me[.}#ǃU+N Sm *L> TbȃE柼 -̢ 6VWZ5+H_5PЏORvX܊ތU$MiqdZeY hiP,w/J-Lr2(%|\Flw(sJ!TJ&h'*}Z#ҫ\Y^O&ԭflKx\(!J8# tWT)gلe+yA8.ل5޶fa R$7yU<k%E{B$RDҪ#,e`_#^ޙ Fo3~vQ\}.NIK)gUЁJANnJ d-3x kt*@R=z l̺3!Y="S:jfTtv#!oC+ޖa{IVSYhqO4O8SrJ ٹиylV @"BN!N&1G~$#VɮwRQ l E=/?M,d[Wo ~2KP?pb1~e푷iiIxs` {EdJ:ڳګNF{X%U=n3ؾ:wC`5?Wu{@tŖx2#+h a5&S #j.oEgϋbkŘ&r7^ږ  2lϣF$I5Oݢ#+JPƺsW:JB?\> \B3=OG0I2",Cyl(gei}=tgMHR<9vTw42b+)S7&ƠSC]:nT\ 'ۼOh";ZCM3o%́㪧.[p 3SZf~{ L~Eڜ,fc?vm [ƋRғbz",dFWu<~0WCOiS4fB%nvw,Y͇#ޙGٶ1)/|>K l}'/pRQ:jQZo4oܗٴ~*n  G*I.;BJ0SGymDKWUp O>Ox0 W{Eg|8K+0r"U]z\C^>3ȋa/10Zyo"9R^<a}M ^`\<'tQmFYp y 9&;:j͘#hJ={}fפTGn4G^!$PpS{,*rH;N \<lt'.0&ä2I0?w7F'O=(7pf0E-/ MW`&ᐰsǖ#1$м!ELCmCă3B 'ɲTʀ|Iґw"&@ZkG (I%R[[(' 6M.yP?BuI픮(ӑ4ᖊACD%#wqsŒxW8,2CȌ3B]YG^,Ծxh<1HCk8Ӂ7Ĵ5QCpH"ȧ(0=>t_ApF]}™}TֆuvB;lЪo"Z120O|'Mߕ/ߺ1nZ>$Sޮ lC]o.b\ވe40#[E6Ha<9dPrAfۯC-F M=7n,Ҏ 4prQ%w 9eq+fĪ|kJ[y)>$Uz%WY5jÜy![6ҋk$rP;q@K)i\$O.)9Ylރm>Gپ TvDv,KKT 1> ݔʨ~\|<[j}&HD[U7j0g}.ߺϱ!pTm@+WleF55m!p٬#"i3 <^09AQB= <ɾCI-P(`/1>,xyWWm hj0r_ t#XJJeCwwfOiI 0X΢ L6iTÿ-+VHe-Y`P,ށyU evU1=P'x 0Ew.W iga@4\ׁbu S0Z2;\tOۭd߬O~:ãakrz]AaiSVt[&N=tx.rPҊ`#QJy0BȒò~t,n* C.x#4|ib"M|r G*=RC ?Y=G[wZatw$Bh^&fIpR5jBU1]b;vg2`X['dZHXԐKS(N(;Dˁ榜eh0?hK &ϳFj@A ʼny^L,_mhUmSjK’_kjvO^/܄OB:3u㱦ݯCBVV$9 t`BRU# ,;l2 x9iuFF&\y,n>in] kpR1 Ahr\Vu#\Kg)V1[q2## xS5"5ҟ fzvd;S-ȗ 躌$)$vr܎Biy$c* $4B]̰C%ÃDH(2Y@5G t Μt_w72](zsIj 7eOͽ_oԮ &R"Ō׺S=={9p뛀oNhX0ObNx.CP!"e1L#}wlx{ ͲfI*Hwp, o^`r'۱yh bFRF kY"0V@4u#LzbywQ6(%V_%Otp zjI UGiu}VmʶRLD^ B}Srrz^N_ͣU`cg˿=hiYnI>O'7Ux|K=<&VRXn G=<1 o0GSy=dO ; MѤ-@֟`nڔA4 4{h&И<CStP))5v|0ޯ'2N,h~ݾW:Ͱkx 46۲8XG%;qO PJ:Lgw+n' ð}w%D84$1KFs~?| RWʹ;h/ݜ~SL/Dr:n7>Nn!q_LXH ߙkMЄk!3 l"ϣ}-~lmfGr|*Ԑ<b-*拕"#dұhFWE^HP҉=ɝ&\bofT"xUq旦;#'sG xDlK[}^%RuCG,PRӓr)CW5~_Qbe\b Ӵ?lkX}*Z=OJ.8ܳ83)1ny "i46&`J\zBsa"h-(hS}U t2B2@YK"^Μk:kϒx7$;]FDDr ",a\}xn)S; ī z>[%Mr#D }`RD5(:c{#"@ BռFaߛ^q]]IG:;SUŬ$Pg;%?pyBP^6{x9A?hF//v!*/ܻ֙ggG!)W.osд\) pgY866I^Cِzrok*,* 0ѯG0-8X 5~cLP.] =l)W0/8Y'Ei^@|;w5 eӝd})R]B'! +x›rP#\<>Ru-1NҴVE-f:×w'P}'zۧ(Z_x -Od )pKckb8Ƀ7B5b ?N󌙆w(h'Y9$g44;b&Ka+([_._$MUU ߶4n0Cq;d|4{O{,t,t6,!mKt>b@: tHTV'AAx̔~c8=8ʒml^WJ },,E xU3}6#SC#}.eNe6@K|uآ\h$]i$>z:{@4*IִI ^m3.xr:Nvh [B.C9UER,=_*r:RŷkX+)[~w!R88T/8ɝ]RҦQn33djMUלޚT :b٧l6&G^eAJ$N0gV䐟c>.JAW^%5sSM p.E,BKkn[ O#ئlt:β?1r=#5jEe1D zE^JoTрvp36G,ZjW%;4jŷ~G-&;?EV{qshڗ8zgbhec;rIEO% )osҨ=gQ~k2wC܉"<kkoMep`SIk XV:B5.Y +dr(wk`n t2,=g̖ )7"Q{Y´9fiDP&KJ'utkLBЈY"ٓ['Uj}Tt\5"*%jZȠ"I>bAk&KqVIα\{j:Oä״58ؠ׺ /* ٠ddu"_䖱ŃcK%()Jڑ99T11EE52`!) ߻[0ݰ= xO9K|=VIhpi5 #wE)kNdM !gQ)$j@ic92',+7a F̸l2y{c:EJ%Nr)IN@[1Ic q]j;bA.<`\(.g͢\mU=WpZcB :ٚd@|սm' Az('],kJ2hoɰKrk*g$s8GO5|$Ĩ3y8&EMNWM "b\t R'u7?Vo,mck3BujTY (`!\;@)AS\ǔ(>j fڬx6[H؊eg"b)6wʜxm!pITZD a)5h ΐ T,/n&nP.Ӽɿ JM%sI,{aA\65DCĩ׵%ncy&/vFX[0=D]ЙLN)ɉcԹsakYfu6we6{TlXIXFC8t?s D p5{J^"KufYkX u»֭)]kAL8tfSm @:LL3UJ#B UT͠*h^口'#^mu,غbUPErhx {'-/llU}UM舆a2j :"jjrlBGn {D?d4!fίFֳ9Ox6LfO@k穼g09"+#bVXyTsQ{mSm_N 1o5Qb>EwK5]~6&1&-$]Oco%CsDr#$ۺ(My i8 U OX“~,= NhXY~ǫD"& \哗60mBӺ_&ۘuyL`4cڤ#ډBhdv8Szn'u-pkXϳ o҅+5!!ʔUYUnIbMqC e?(6Qt>U"Bߟ/r,u˷mk* Ǜ ^J'©'[ 1}>志RUHO&73g Wv-{-R<0dիҷ>qN ;G _@_=>lqLaү'd?W ˭"SM8ZFzIa)5r0uhة.V!iz߉?'ul>gxKL]iLc !4Q*%\rEpFr l:`qDx_~؋-:^KxEbnWČvHI1.u`Pp՘vPAcղ>Z9[UF10zMZ[ڒGA&  1 M=gLqfA6lG8җ-@LҴi 5Ltvr{\bUN7XC]gA@w L4UTC8Uz OkNCf= ȡLmΖsgajx:-=JEpYrt&${48]eg,JT[5?E >,V!,TmQ3Z֟bǐC)Vh'TSi\BILߧ[ATbAh'63ǸUj{c'2y=tF3@|͐$$clB5 g=eL܄<dD%O='l T<T"Kqm!RUbO,aZ~[n]C%NjP3? MOziqYVN5X&.6"ƑC/T88={dmgiT6A^qCzG/5Բ_4 ɱt r+2g#1 -óqڇbw§duLƜҘX4^vU[QiGD_xz۬岶˳j@O2F,)FܭƉ/rb}3,+chjb'V sVPPƝ}Dȩ|Xf ~U8E|aAx 8;̵.?]FEzḒ RsHĪ\4S` Er[pCɴcjNC9O45./.wl!(w *nyj!:8iZAqFQ<`OΩ9b9Sw3Pk'\SsLYEɇ'whB(z UT[*#rKϾf@ x3BQQdkrĩ$m(G.1-E('Bn'9NDJt[+K".-[PF "rA, xcxe:r˭ğoTRb LFMMNR"kŷWbe4+SL&NŔ-]e'F05]rTyLb(3"*Q߸2|Qv“AGEIv j(5Yyt}8O?8IF(R >i$J"ROE^;sqI:e0Cwj23w7e(6͜9~#1W[ 5;Z,b(0%i|~?P&Э&Kq=JJy6%0Q\|Dӆԋ{Ť9lJT<o2~}%| %ٸ!MȲLuaҀgSAsR9VjZ'~·O 8W>iz LZZn@ @]ƿ$ƀs:'ڀˀA?ߕMwO$xbQ锆kk~[d kLΜR5?eKW9L[v0 #Bt(Rw"Y&>khب1`~.ۃC<,@ e&ɷ̕"_N{q=kpPX;X~{MpMlPq-b&+𖿋H!AT?A lș+ U9{A% "j,pQd[_7jddՓ(KG5[*c59U>*gشɘ Ga0UV:w܄bftT]cqIW'ѕWk B%ߚ77be*3V0*1L!JK\K#;zy]=qX!yߐ < LG@jq\M?dnGM*Qi1NUX3Z /%r__m>+8ݦŞmL5s=A{tc;L T3G~hUkOd㣈\U4VM>KsY0SNK0%ǶGgZa,.3HEcig#_$!hDCk|D_yЗMa,ev`4sCil=j%2Zd.T;THRxNd+Üᦺ`%t^fa Ed^O}*D5*yW9>ޔK)ӥb@@_V@1zm_z#UIz-&^L %O#GTz-Y=9srKJ]3'zhUXv,_Qu:=4Gsb/ }%3jc:(+5aG/~/_C{a_w t4%PO}LMsu[Vx>B~M٫8{I^0?t5뫍;! OMDFcQ!q2O0l.]_ l-r DOǤSxu Rb)^^η2>1 {U"ը;I%?ٗ&,C*k8X);H6Q#O,}=wQ5B[ FzZ*61;Fd;~3.ezQHlI_MIB*(1x^Edi $%+@P*HNl"Tr>s'v| 6 Z;p䖪讁G]L͒I#JB'3kvJ Wzpyb1/3c6 9AgS:HM7bsy#"A6 րOQJRgxG4\OaO{)~ZqSIXEBm|RXHI)fU2%·W/3S+%iAY8N[&Y^=&YJ[V _7~~( j:x#3L[X8J5_Gr#4845-~+aD\Ш(oZ.A; u",ML50d *ttZ{u+ƞ{hKc2kt~N v;PSv$ Սo ӝ5hȄ9+ѧ ~iJMlD:S<8}nxc9XY_T_ s>Pǯàt@rV3A*#3gOnLk> Mp~}r?&c9A[G Q^,0bago 1**PYaD1iHi?bL+JgR!Vg 2+RpQ`T85`NtѥF+ը8su,BΘMic5 !yg]@ L\46w2&d YZ\%mDVQ{WTWwe+ݺ3' &~Oe!BD%>:e 2 y[G%;#di>j!y.JX>0ZC]PޮV)i?oGT-3HȑQaX 6۵*vb25(7#[CCYDow<ah$jH?z?AXᥟ BT^@+cRe2bY SODhOBj6BčC- MFK >W:rP̞L~Jl5uYZپI _(VZ;KɢTߔ(%u^ :keӓ R8!GJ$@SDz;FlCNj2 +V ZLWr9P_2Sm ! EzyOQk]Rj 5ԭägnޭt^ 07yzT<uBGCւ[~&{vX.~«gXnd|ɲRv2Ȉ(6-&!O2 -i5G֍ 4t#`\7G2_D'V v RJE rW)#d^SJHד|JawO}|zG;u1#ZbU{C m)UL1Ɛ gpb]F ^`NX9J@- Vx;;O[Ӟ@O[pmyڵZF?tËPgǼx lwD"fF6E1{VfiW9i@ A;ȃK؄kď /6s+g/Ҽ 9G$ ʐB~_K̂W: R $z[+)X26$C:P{)Kk]|5\-HEȄG;f}j0/-2)l"@`eg^fj)yr܌'=OofNQreڭ>0[o8wiG/‚H07>l9Џ~%vyN7b,atb?!DMCdGwu&9hcʄ=;?C0&ǭorV|D5<m pѠŎ -X<_W\e_穞|4׺~OQ҅<6D^#5mu@C{{w̱0 嫠o1d}eRWg R]uiYotq_lQ rppcwN<$E=vB H9؟YofDǴ! 1dG7eLàb6%4JF|tJM|/ ٕ}㴭>(EC$/bQh栳Lmf/a /1z09'}=Ca2揚K[Y\hđ::X+'ؙ[n+1̃]b|֣Ju[]@Is ;?hM/1A.ـ:r3 ^E4TxW:X 0dӆ[EC 8NN0Wx\:Y8ЮgMCbd,SyjiJ0us]d"U~Q4lqPm>C`6E ˥75ph4Qh(Bk1[ByN2w+%NtOO I_mY=rJ0MB oy\a[#4VA |:VN3w1)D]o_xERp\|j> A  YZ