sssd-ad-2.5.0-1.el8 >  A `ç\U]H3 >%Ccy6Kq( sM\eP#~:s 7/M+@ƽgI8 4:B%NרG2>lRI-;̘kWq&ChX|u |Az !̌PrKҪ!mdކ+~HVdP%̝H*=l G: qdx]<Lw]jo{zh yOkkԠ޴ i,ai8g'~^=m^Bph[_t{hMGFjYh U23Jgyp`ukRG6EVW]&o}יJY2zyG=- 2V5C>0jV(]7Z8Y1 e 9H6qEB^\|U{z<ڪhpONHv[33G<!K93rprXEMԺ,xp ƃ7vaf30e7a9f1ddeba6c27b5ef7fec271a8ac5458b5644ba7121fcae3c497fe11526430580eb7e4f9be466ff9199a1c129f0332c618bH`ç\U]TZ"œ>'܎?l:Y>epaN&X/L/v.RGxRU^Jrhqh<5{sșxϣ@^!tģ$DMw4RKbp6)o4))[ MRpssPCk$D\dEIه-crkxIeG A:#bbF8 fIMFTacQQ3,IbIxNeXv}3<< <Ϩ$5̡Zի(8\w'Ď (ZDa0r= ƄxK8$&jܶgeeZAd6|e-5+im(n 0>], GҮ.7Dx`DU>,mq$) (C `l?i#?r֣+?WCpGB1B^qn\'daV  >pEe?ed   2 /LR\         x    @ | FF TF  (89t:brG] H]H I]x X]Y]\] ]] ^^ b_sd`e`f`l`t` ua vaHwc xc ydReHeLe]e`ehe{eeeeCsssd-ad2.5.01.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.`åcx86-01.mbox.centos.orgxuCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&tK8=OZAAAA큤`åS`åS`åS`åS`åS`å$`å$`åS`1`å`å`åa59bfe47097ac10f27680dc0a910048cca1f2ff6f0fbee3f03efd5459173d057b20763fb2ba966645b819fed35326d3e54a6962cdc16d3323563d6c236adde248ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903307a30a24b7405403dc19b988aea43cbfa1a5a9d38e8619c87d5e3f50cb158f47073421cbf5a76096ab47a835b3d625aae3323c2784ef0235df0df97c28777839007ee3cc9003d19736cbb02f834b7e6a5c8605119f82957d75d6f7de33f65cd../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.5.0-1.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libglib-2.0.so.0()(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.6)(64bit)libndr.so.1(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.5.0-1.el82.5.0-1.el83.0.4-14.6.0-14.0-15.2-14.14.4-4.el82.5.0-1.el82.5.0-1.el82.5.0-1.el8sssd1.10.0-8.beta24.14.3` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.0-1.el82.5.0-1.el8 .build-id3f8e1dbf4ede7c18414e0ff3ff6aa444e6694106acf09d245d20149e48b2d4e016e0963833ad0314libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/3f//usr/lib/.build-id/ac//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f8e1dbf4ede7c18414e0ff3ff6aa444e6694106, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=acf09d245d20149e48b2d4e016e0963833ad0314, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR1țG|Ǫ^Vz&>7HQסܵ:9$u&\xʱOe”H:T>dW ;V0uxAd7u)V>9L/#ybP ,ξĨ+'Խ>m te"^!1_Vgf{rUO~el2eSs!k2>牸VJ얈"a∯Ms.saw >;6_:". PO)EBЏͼē:wӜ =$9 }vnȷze9iiގFQx&'5uff ;k#낡Db\Ly_@VvA{Ac4<(ߍg,Jܳ#e9a4T$,.=֝ҧSke'o2nIL r TÞvsdr]No`i{ :s6Q˵Vr{/޴>Խ:Rk8*c9F3T)JĄBc{Mև]|j1iIa|(UHDHECmТgJGWm5 hwdȒ=T] 䙅\#Ɩe iycm))n=$8UTmKZUc "}^Ǿ ^gan}5^\Qn߁=p@uN.o9MRd MEo(QfO掵^pKDߟŸ=D*}zQ.]<i+֪^B2v){/fQuճc.p:4.I@'ctiS0߰N7x/Y p!Q kS؊:ዳqZSWm]39.;&lYM-XaR?[Tc/4Dq52 UOf2!fm19x"Elagv@2LٜttE`dŏ6 x8A^/T>e.0P»h2~yGy'"5CЊ5OSI&48{*O|) ,Urr,s @g!B_58;*g_XLdZ:Ӥ9Y !yPQ]`fYz/TTHM_N/!$XتU#TeR|$l'ۀ,6 ZGfo-\E8<{5/Z/!gBSgʑr7J ٱVS&Hk41Mf#H\z:1:|bcղ<Ġ>}RYQ<(qÀDK.2_ڼr Ӌk.r$?YfM=@v'z}81z$ZK֬9jT kFǻ/u~欫6i[hOѦKoQ<QCge{a<3_Ǖ an(O> {*ӟ-`".\,g(bњJln5$WܻOLkDT+{ŝ<:4,fhcGgƓ gJ??!J-Q1Tfn{jÌ iN+bBv# 1.tUZy;r-8yϒuv[s%x-0^17xmY'(d"lOXc <@}g`ͯOP-XG[V9p9 :6ŮeKZt%8k GtpP,V}_BYd5q Hro[}M&+ l龸 \xqkFx~JL8CͤT %!1#lZfA_ xA?%(>q␹*K_z\I/'IQ2i7\* 4Y(6 UDw[s:JNtش  ε_=^ߜK ^D?_M-hyf)(|]Jȯt&C@mixIrƅLV|Y N6~8rM,L %lV$1Tӏ&LV<ZX-:;PRqmcqيV4brBR|5KgӦ(OAעx,A زp. j(ڄzM\ N)%SdTr@gŠ)|u7Ʒ5Ga{t>V)|j7FMˉ/t=^;=/DsAy48%!W8GPEV3m@~k: 7I]ĕ LR ֔_.<~7K h,Nm j iY"Z;}H4`4s+g)6HC*)?VLs2!m7H-֤Y$U=2G 4MAPU2-*)- ouo:A,і0+B;t|/(_uXp '-P@Uܽc&ul8X'20/(ZǤ`X:wJwӚzgUqF-?=̹tam(I]^/2F+~" '-"xIt58D: >ȒvCAV?5ZהGW0"R_8*G2]ޙo;6uRڼX4ᤀ]0Ռ+];e ҟ_Ò?uf$3pJSn5$Y+Z,d[ɳݴ>ƕBUkT=׺^VjQ߹28移Bbe/jY2'vb1pT_v ,6d~‚ pK j ӮmYRqp~=XBlG RTL}oyٯ֞ 0a&LtaL' ( aXe"QWM G_e E2HQnp%, 4 01^3[o "d(h#k㊍PJ/x1uthg-NgZ|~B$l-Bk/&$$)L14珲^tNJ9yiln eutbCm .4w{h'k+ np2lV4iX- }g(;9"fHiX [Bs_"i4'.ZFSv*o ZKHE(OD`uЏ,[,b$>FDڅ%؝ooX&k 5#7h!O;x h/BZ*< =Z>cdGd0tB _ͭs^F[q.((y;\nQD+@ҷ\_<#^kvHoˁ#Gy~J$B-* Z(4{; ?[9Mqwdk@Mٯj;G&&ҏfUBS~c('I01|[]->{StJ C>[6ᛤx^Rm͑nrlf4O84Ǭ=OL@< i^?^xj[+kOÂ;\c|)FM1߮^bcyޝ4f:Z`XlDk=x`fi%z=sb:_[~bU^*~s'ȉ-n1na3g Mp>nvUo] }qx~U[@uA2kn)VXmBu$4][L[Jl&(1,B^܃`* IӺ0sVSzx\&% OM2o8[ʍHqY36j3m1V.-wh|\Uxi5"r>jМ6&@WPu6nXEڮR q^*r5cA#/ӜQ 59mɂ7a[5{:[4l _䀭찐 -Q^([G-S>MPsq+:7‡XgB%r &1H~yd7EǨ^~R}Q{X5 b.eaqۇ)"x';"GGBO2 ^zwڑ ZȳnB,g(3)b1H&2M/}~g4?iO&hG> T;ZpCuGgkc2Yg!㶀X1Nf\>ߙ?Y8t4;|XbvI0j~n}&MfozeE63Avučbg& T%I\sQB!;cs iTp`N%=HcWKI.{lTp4/Mn!!Xu#9E_yԬ] (e4r6R!` ;^A5nJN+T.^%X8lԩ:tiz)v!*q2DEt JtB9lMh)ǡcQ -^kT-c]k/*o@ڱ%`Ӱ4T m2EBC1N{).4@衋9`CQz?Ma?`LjV fI?_oVυz`ڔ;ubG0iu4#g0qvPKӂwCD B7JHEyX3RС2B+MS=B Ge] 2CΒ`J5۳6b=nt.'tcNՁ;%,7aجSwgN;N^WsEEЄzUJ8P8,X!܇ d"Ħܵ( øHWc-e6l9 T%FRAM|Bm҈Y{.2L65mPC=z%877.o%GG^uʧ"ϲqSzussKrY%zW?9&Zi=ml "''uu b84LFP2Wm AbFQ(VB5Gc{>|.K$w6% ׂU\]7j54V ͵A;dpo163v1qḙVq᧊+yf&Fqc&9Ǘ1q8Ӛ&zf )t^;}yp=},0pg tBf4{#a&&BvJN߷O% $TeuUR-{:UA_z0;JVYI<fEj.n-J4`?h/DNO0M@1*AxMKy4+Ooݾd_(#07xKj;>"r5ͭ!{ Vua!hϸ&5V5eq%^<,]m-ݵ2$̄6k91g|q4gYoQUf5qA1*ɃcjXg!_n_Oj{.;/@C-GoBdA,쐢靮l+\J3m7'dIHl^B=cޅ+ښ˧/(G6=`3GZ*Ȩ1VUM29>>H,<7>~B _\ Q $^Ϩ\S57軭Rr;֮SP[֒]y7hav !@X:2򛓛4hv,()6f)'QU.nuT),jgXﮓ1꿉M&]䖐_XW6'pl4zWR`}uk9Q6~R.z/rOzk0w (IB<+*}Jn/T[hfx@yKwDڦF)Pή$-}̀1*+k@8gRJ6g~Pwg@=t;49ǡd5I{0T"Pfڒ+D#7-dr +3ft R K']H~xpURO+Gj`ɂDV[ϻw\;.> wcwAUy*w#jM۔)M|y(TZ0E 9A-F¼2!l|JVZ}vրG8=gڧK[˴i7z9.d\ Sm{˚h_faVuZ~û9ENlǯƙHv9tMClIuAJKg6:"94v]n,GeQuƱ/[gM!"_L:jM¸oϐf ְV)s}?/Ar6z^?Wې(_Q> l)ޭLV!.c4(thkVHBBn*'F(=WaA@:5B ɺQOs!"~Y|s5Nm{m5ۤ%eoR!6x>zѤN]݀ڨ-0B`u,>jL)1ŒѣOt 0|™sVaqV!- d6@qWu|nP;khT M]%?ҳtgTmLtL ~v` ҵd\}=N/e;hm- zcmv4mI%S̸2ՙ1/@*EO,^wg([p2:0=UC U`)@o Vs@f2Sjh~׷+mc\7 I :M".s圑z9lC vTdoJ^LdTg#//NY[ENƷW̭rϴ ӁVU'UgPFϓ &op 7,n<¤DVY'KV[=k2xTH#Ћ 9M{]5:? 1xcb7icUW*jdsᱩx)uɉΐ8!u8*ӈ^y`KS| ڜ^`}z%ZuUSL-2>ow*:x2m9 <-1 64$O 7VܔVF;fi3̉Y"$uyw  9#) &!Ooޡdg,۝uayNϻ!k'Waͮ3R!iǯ=/Yb+)lVozhmDO%4W0U 9C^<)ǁEa'|`0MbX>al%HbՀ݁7P'/TSt? עMTh0<}ԺD}Ii؇"4p;^e_;b(V6zP)yi_0D@l4 wEn.YPQ,d 6 _b }ol+Mn*%tGyԭ{jAnKnuB( HLeh*# ׹\r?ysgY\"roDS9j'l+eYC}!ed@9ܽE7H> |:\C ˟#EmM[J62C:[:K| ܿR?UG!hsHkFP<>_Qˈq>6j2SX(r| &~AS&=hX{kB xX_#?Ѫ.@ 5?m{Oe%ľOvug"gBZBC ^Cle sLG \_'3ٛ۹-ݖ<1B!oTֶtpI@ZȄuP9 $)t)tɪGFcbXOk P9*un~-!Y㕁̡5Uu@i~MTdB/4Z_*\'r{RYc]Nvp݀wrq;Y/.[/|d& XtL~83ٟ[tCA7~0EޅY죪B_,xot3cKHO56QHxۘd#5P8MCc Q1Qf=*'1uc\{H"Ѹ#>+)mtsAʶյe\ȩɟ_Yo%6^ ֩,~N*䉜BDSf3J`o;"Y=]Q$JU2]o`IEY4hUu/˩TrB fh<] 7Ac0ExɹM者xJRGwR͏{v%+0rƽ+i(Cl$ZNtb 6:k:#h~?*Kq~ߠ8ֆNe5cΥoUqNXuJL %Tnm*dh;: V zR)`o&NƐlm-WIha=x_k>Aq7b8YWqD?J죧A_{kl9- p{B>\ך^ӈ@P5牟;Qtx"Dc ҙr|DZZ&A36}:Q`T<\8|l-mSX)#p~ƗQuü0{r?XC*nVP4L獖zT9C=вCsFb+Rw2(;[>vVL7nWX2+k]F[ JbPzK&iGxd.[0"Lg^ʛ^ [mؕB+V`$)ϳھD!< o&bGHւ@?5IqGAf,*a(Yz2gmM A$hBF;O0 Q<}&r})Cjt][p`V 4|[ 7q@JŰݕ[B9h/+u[|Ojɒqɰ\3"7~7 ج?bIpK+sFrďq "Afxۗ Cr4=ęZ<'u9ߗ^D[фpcj6d#CUBlkU"#̞ϖ=?15*ThxOUG& VnOʕf&ZA*# 9ŠlVF@܁~܆V~$;¦ s0teS0:ra8lB٠|2e-V TmYd2>q>ǐk7I1؟퓚aP8MDw̄晰J|Y2$y a61iMsZZ4jaSn@17Do'j7Wh,p{YaH:^ǵ^BkFGOh”qH n?La/$҃;t4z2X9ωvY7G#zJfL%ryE-}ȿ[8 ޫH_."C ~fhoAR":%SєYHb;ljg4{hzx}xK,M1{YNV#O"St|ɦjP;˙a+ MS)@2Zc&0V]t>,p?+eyMz/Ng-27b,ˤ9U 0/&vua #VDlGfkdG-R3F UscbT&_\yzG 2оdiu3joPZ#ƍd*zr&?vۦjh<(LIj3޷%ȄpT:鸴KkT S?#qA =H7_1[t'24h)28&y0$W?=f5ntj-U\ط)EH} m2.l<zh Kʅނ c4[;u"IJAuS}Yq+-6Zic!"t" ˚Tu}nO9 %?dCԄ;n'g-+-p>]XpG+m :ĵ 2벾(^bGvX#\wj?#i< IگA 3A_]|l/ ɪypmkYIɫ|JcMtPNFŬ'yr ߁rLY%yҲrdw qÇ8rwCotp+++6T\x<8'Vͣ},0Pq 8Qz8 @_H?TMکi. Fa1kGW#4j{ )|+8iTVV9Oo<0+@ڂ_!x>8 *Uذ/DxZ0iѧQwDqzlhJxIJఔkjBddtq1J5 PT,T]ӑٟ$`QmM% MCSf7{unTqτrC8M޳Œʔ| kC9zMB u#}d|W 0)f^UšDv ѹmIK!By9uL8l#`y`XR] r!جJ!4)k]$(1";`/?Ma {~ Z۱o_ I|(!?&>l3Zȴ?  J Zϥ4}z>{gԞPZU؃3j)6N#XoqX'8I'!yҘDu綃D8m/Y{ Aτ􍑬T2P\S*[<} K'{⏑;?LGy2W$6` )by#!iTzb3ftipV`tL(360(MTl|g-e_v69gዶDW_ 8 -l!֩s\ (4E8y:^ У>CW1ð?9Ry,ߍ>-ဝ=4+ ^F #YR8{x▓V9(o*Eѯ dq҆;ɣ&K | f, ֈ= X< @6␫=$v7D?k+hUc:.iyXKzxW?L%#QkJw52Y;RCżSH~CL֙M%ֹWYR*]݂{`z1lr3k/Е6vNXPmѢf "m4RI/\ ,W`*Fɂ!rͪfҵfN bdy!L6xN d8c8%Ԙx+sevՌmڛQ9F(:x!;x;.i"n4RYLIw1$/#k2\nA ۼ5/mES~8~iFuSbap^PD>ț諧6dVzu'(!]xC󬭌]{#Ui=5WxYfYX8! wka~JY@}f5֮,{WI5]DW8bxA9m@νr fw'.8`yCgV($):":- H=D W/{IܢӫuK79!_v3eaxGO\c䗺6p("lze ӬNы* OlO$`6ylF hg Pv+eӃnR.f{1ow V7KҾ󵔎g/|:NG H% X!P60Pa~ t82yj]Ez"p'v!`S߁ތ^ߕ]9 ԕ#)%~?rDfFi`梢㯋mG?'X]ئ @ Xk Ww}#FϨh?[`b }G#PdY? ^:CshϜo#-3#;gnx!bY!F|yE C3vr .cFSƖW_& ^ACD Bgg v/}4<:GGفxrNMɖ^.lcB"9Er ow<<Ԧ1~'tXЉ/0|˭Ҧ~ϖaLI} XjN5Ƙ:ǶKV+'$;?mzf |ȐNmFj2(U|kH{6 L ܧ1vmf- ǯ3[p+U0uk!`j4coɗnl ̌N*/ KGFJn裭%_ [ܜ9_\' k{gZl'֓ ҇Yb2T뾖3ō =WMαnd"vaӈE#W{tykm {A>@O"VEstQ*E!74Ѷ\ex61'%ifG=o:p\BA>ǵL, NMhH7y1rml [(pZ̪Pj:RAƀS%xVACl4P${gHVP74<ț=xxpި]igFV\tu%MEE5IEL3!p̍%bڼWȅ2*ooR;a*Et_OYCn^#RTDF+:  l8>R` W_/A B7C]I*Kي&CV ͪɓh P[7N2!RƇfMHQf℞oHδ(,/=&G"9 Ni8GZmGJe.iQ:K.d5&સ+#pA*vLϩ3*iϘqV8ح;CrW~/+mSXWR7s]Mh,B6/$D]4 (.05cG;}hٽ! l뤼 ZG")h*(u8B :wMlt?3_Q%{r3,vngexd3Iڞ lepCGrpy8R]=wAIVVJk$]FiO/!Dg3 +5ze-Ⱦs4ɜH3bDɅ^ˣ#*@:f+ $TPJۅܖgw\|lH:$~T{LW {@OcV"](ln!~;iI*G0.ngu&yB"TvXc:Qt.I~TUofv?Xnى\K՛UUﮐ5?y֦iof5ß?Loes6GN=e%jW्a~MNnjĄĂqLm^ۿ=4-gyU&d.B+%+·1&_xB/M M}Ic@k`xv֫Te((.3ӈ& BOƵs>>&=@"|]e6d:yZR$roQ?5fԶn#>4aښۙcSy@+00ArlNK;,MhAPm+a֨Hrdۗo78Ryj=ʧ8'[Qrt9. \l$Dq.jd}5'uUNivl ܪfUIR< V]21ֻDEq]t'X&3M*|:HwUm#yJ7) |I}}#ɻy_de^_0O>Bfև]MHGHZ6-8z_ xd"QGKYLX؝ "4C9[rQvꔾ ^32lz&ӽ3#!+q ugb)|\"tm_QP{TWIKrK0RGYUHȎHn޷$'% $\ Hba^B^WkO"VLgT Sdm0N32$ta/)b=)σw\EԄ\2ǟ`scB_f$%~ߥyE2Y6{".7osfW? VM Ż`+`c. ACkFSՏD ҂Lj-n*Q{%>)zɪb-k=bVE]EW̘'ҦȰҹ _0 "*s o?{D_ (uٴ佽OO31`@+rlVv)tI$6}k)3@MGͽoi"ĊN,'GZ HMhq஻lhl!bɸZ u#^(*²չ˱f3=`Q?xhax7z3FaM" gq& &YٵɄ}іO&z$B ѿ4# ȈkV,h&oǓi(V4%Enޓ{x!䝩0®w2EID2d Ͻ=еA/ىmC[ 36k!ma}gn*?oX@IAjW=K%gWԎA9| ǀOЃ-Tг?¸|k:I)3$[:-?W-g ֣\ |.} Юo,j K˂χ3}ɗ捯J ~y($88 aa/1ItW;a [c\0iVBaT>򃔶MY~VEvH>eԲ&4֬͘MOUp`id6a# +MatyH,ߙWae4\ڮ13IYoKkGOk4*-q$jt mj1!.%ؕ=fu(\mOrIeѬ8 S!͑8чwoVjFw+ox9Yav{VBP[ !{}7qpH_4'){KlnL#$5 <6w1T焠T0<')}r ^!'myޛ<NE U3%wxlcp}\D.bZz,(9arXaTR8إk;nvO.;Grq <>12)a-[2U{#X OL㏩Cq] HF<]ACi@#r,zІ&j_SF"1#O]:o#9YT*0)(f>uәFQbO*`5vζ:G'dӮqvdS__5!`G)jH{!)" mx3CBwMY[`Zce yj ՝YeSdB(Z˿-B !;yKɡs=cؗOtM+ZMU~m`˱牴nD!dW0 #g9P=H/qGXtgvt+.m[$&Qnc:Ã5;Ñg k^MGʽ$ gn\mbG ^T l1XNQFkpdFJ_}ҍŧ<,I!eeWA ZϿ;gW2$Ueyaجmq@ .{q %><]k__,')R)a CP☊)L}1/RۘOpOy3uqa&t}.L`ތ?O0!RqC)/]fv+*"q~`vNwMzz'0*,FRR`BEĐQ8]OVs d;t]$иL;/I4Wf+SI@ӄDFà$o')^)܉Ѭ]ٴVu%xxiHi _lòx ,/KbL_|o|QNm< $Rtj篱wFoc_]VVkzsݘJu;0A5fujyv NjQD?/%(Ap|dqtاy}+e\us_py髗yJVz ;nظ 1Fu]ww[4=(qC3ؘ!yIy0:qyYD86_&ѭw hjPuKm|w?_l8 g:K7޻OuW'lhIK]M/0n p"9NҬbFﳀ ǬhVx;u4嵃=d*3_ƽqϓbgց $%Ug͙ʷʐXYx5)UŐ^M5΃DNx ^Qt~NS+TqW nXI$y/)\3&)H( xU73$|j"fUˋ9<͔Nu*=,g#)&9eI`Ie޵`}6)?-_jP8Qke_QOZ|Ps8 }6@6;$f݌{ly1c2|Cc֧}<}%})Q bԑv<`\)F9E0rDZqW=y\kۅe9@y5l?{QPb K3o֜ya ,FJr,$ 9jODŽ))EjXc'rbimyG ě3I.*xt ^YD1Tw1Xh SQ B*Dj4̫0uTɜA(nlH~pR?Q6Vk4 ^Pa?؂y^Hgh{$Jt;H1[g,#[,e;J="a=n$G]7B4 Ml㤯aSǘs]e靄=[Nq 䥬Ɂ(%$~Lp9В_)yJ${ͥ9QN(bZ>@EcLe=r,@N}& 5c2LRgyg tI4Lʇ,[kR=6P (TrlhBI2ۯ͝ 8|ϞhG{׃ *w ˔s?UW?^8I+FY$5՛x߹\Hep#@ kq؏F1l-J /5ʸL$O^V)pǛR޲|.  5?7.jI-ЙBê1Q#/A(sYmL5&Z}3ZA@\@*Jlb!K R9u}F/7jn #S>Τ̌ʿ쳑dKECb+ldu_$iZDWw暌-JaZ ޡHjauyuD!!T3j#%| 7K_bYx$9[Tr̐$c_> 0q Jto;F)TKVYyb3y?HP\d& Vآ\0n36$@p,X9-,A r/@5lF<=(lXw2"5ES9䣺W]_{c+vC]k r ?U0(?\igA^a:m%J^/ )<857(c}?UPJTH5JtT>L 73y$w%&j]Z2F@"D,VO-T E o9CSSa?7`pz?=}r0+9vsE/?pȲD6ߝn@!sNyAF˞4u I~ calb}ܵȪ:?{,5i _C5;$>ڇoɾ-aE)Rm3 kf[d! aں^ `=vߨ8iUb):O^p#2N0=~=eWX 5gذh"8qAmjV uZU"ZcB!MnO>Xj %װvUżBҎYͣ쉪R~IXbtXӚodeKD,|tݔ0K:%: jIٓ3vۍf[4x~\w\;R_b#`vi è"ƿ:d;e;^ş셅eDrţzf2AҗX\MWW ,3o-Xn, א-/<,ZNe&d2=oT_P H (/] gkv[ͯx]Kr]>QU,7ů'ކ |+!բMow/ɦa}@4, *'l~V@7:mZ.sq ,ͅ^vq OCA/27b} ;چkՍ%:,m}$uw]cp{I-Ye< 0#L] ̙];aPD??mm;H!s/ȕi7oˉϔhߚo Ϟx6MG"qu]W)~i]&"oOZ)`#Ydq!v8M2ewl7_ĶZj8ll]c$h8_'~Y{sZUA-_09-Zbӕ#iQ=g^|7[d)ao!j+8)9C_'A2W!ws&3L3>*4޳K`Tq??Hں!y?Gr0k@ַDG뻸?*p)-?q)^G%)+>=w]'iKs)xAs;|W ٪ AҜ);*AU]kD@_͈E?IO0[ڵ@-J{R7|}0^ q" Q}d/q,'5٪"yү/1?2x ˣ^?^X cQF)4i%/zv &5ewxh/L;마UH$TaBiI{^;h ,-0970$,zHe3UVv(-yU1C]Ix9J‘4%c]iU͛Y99wNÈ?kxTI׋@K| /#_ΖqWL\ieb:<dC]s'Mp:7e&sJ;DƏw-5fPo~٘!Q7Pjso6(9$׶iWa)kyh6KQ.Gcm$iyi0|zEO n vIk1}ĀBEDP_.MjA;~njf2܄ye"HP]; \ZX 79gI 5~_lsɋ+ (ҚQ5V#LД@;5#Y *,D83=EYSX9/֩fl!wzhECe cG&Flc&^EilxLj(o䠡cAW=aG\<$1Yn^^j, R:<HeYIbҫBOψw#4Ѓms}ݏL}j з6zEM+=HkiIdyCi4ύ!`6vˡ7t9В\al70GGk kv^Sܩ.C9d{1iy*c=զV1ɎzM0Oof&.rdB-^O=+Q0pm l#7j;B#3o+U{.14q,bSIg1C>Nak0J56;:-ܹ p5DlQT[5ҭ~F,0o9m!%bpЉi8'#uL|rϑ7+ҩ7;̹}XMrҷV(q8~qʛQs})t;Z'9FE-La*GM=NhPsQ!VHf912|w`(KAc=?!\3din2D4-j 'ŚAtim_åzl%quY -NeŞsqnw.NX. N3WwтȔ?o2u`/;o3mo iXucs#=\m(׵A*&ޏ$5ނJkXhc}w18:\{vZu$z=E0J/J9aW!'F! :$GLiOQ8Xy4֚QCX|YFQ)z@k[Jm)}b7D(qs_D -kdڦs5Η{儂b oRBDt5gɾchat~0{ ߓRA >1/ vˢ0&:]į.V86E0gfѪh^d?r]/5aRi Fje8 -؅I)?DQ*4*Z:UrLjdu̫fud5d=ȺnC.}㙅RGP0骱Hìkg 6Y`ca+v 6Na*M_C bp{C)ei>H'#(K&:i]:S M%5 SĨ!t7sU:Ghkp$S!m2j 9zMCOo =o?gU4'#ʌ3n;CDʹ*n#\K0S{>;'_KBv3l%9 n H2(="QSF/=Hٻ#ę[4t&-Pr촆'9&Rm#1t[x-̒Gx̮Hed,~!u,p':, ;t8.5HyF$-`ѯs3GBpv[/`CQ [٭zu~.u%HtF#[KatHf[ U7n42DEBW҈AGKokc$>aW=Awn~?´ϧ.qՑs.c y+G ^z41}ۯZMžy; ik^`o@[JߎgU#^H.@no g*% b/\!0iGr(}ࡽHgy&8 !BdwzXw;J#Z]z,LP-l?+DcBԃՓt#=+MgF%d@!g a]:<,YVHp8Xd3hz ܞ4Ȁ`wаZ8Fj>dΓW,lj'~L;)ۻг0sp31ք.Փb4$JuJJU!OOu5ַH"H85w7&of,0U̹7. =C'X>xco~fY.P7|M.!fgPo4rGvϓ9pA.Mfyrn>*G^+#E  ~"ՖĢds T_o>Kѕ폳2idl@PjmXq崄Sz![̋x$CPr(*(JlY j1O^S<0J@2[؝ 7;fU_I )lɬ?tD|%ir ",mdQK*\5:[, qf^[=4'Po)MW n;,EUzԚ|?A4$)LQ#C"Fgٰ \I2MoMO -a=wy{ZzsIjD/mlBzCIhaҞ i,X5=P ne`W k[&h55 NpEW[˯H,^(Uď&c{! $_-}Mq ՛ԟ / \ >'LllWYWva":dΡuԙ+ qs?8K1$ܽұ58alm2$.H&y.? 1$,K/oUuO>VW^4D?:99Ӣ3 테 XkjY#t{m5@;Cp#9Bx h¦'}*n }U$ O[h$wBJƀ&O2vW1m06ؠb} q0L\i`SMG0t){cz!f@Ow>ˈF7d1j#&ec.Cd> 0}Ág=-[o #4rDpjܲDKJۘe$0 C6;uUD*ׯ~=MAmffSi.d?o$kP64֟'rH )~t徝S_!MsumFu!WJ2ax,XP ^iټ_3.cnl$!BODFPTK^$MhL(Tft`_}cpC('j;`S?R[Sf$sKd"A3&sX}ܮQ^)8ۋٞWIa5 ?;J~;1 +7ٌǛ|xW_k߭Ƃn!9)l0ݪ:ʥ6TLD+ Mnc*M 4Ditw{C, 'b ]A݄HԹ`|BWeZ:bdhnfѯ{O+{JA}$oф=}JwY@⸂$=`PLRe GB KJ?Έ*-Ϫ3f18!-c v m@$*>]Ƒ[1K9ߔ3{Z!ΏsRzoT"P=>O֦䏕a ဆ^N ]&C=hwZO?.>JCp jy-(O>h ږ5Y`%/q,!%>ؖ<9qm8mb`=i8Œ"5Z^^84//5t9缴.F\GO)J lte.zDԐNeȶ/ BuQƒ[L+ӶDf_XmvALk)gB1s.*Z*%L wr90MvDzp^^e:#n;lkS,P(#AD8a>K4OJ~ԙ\Zh65wts`AyfRk>(L5+ WjfҞ9n/`\XTx n`m$oSVl} ϣHκ5˱pqr2L7R$FZQ.!d6]wJkq"j,)%0!_>_;$]́jsWYV qu_8˹%`{2@؂C~i:Hk >b2Z,ݐr_ӈ7gEDے\ۀ}WV:ScC>TRerK\q5k#&Evι W#J@+aS]f SyMΪA+l2h6kӃ9mcn_;BZMuoߘ~S"L5Re]v5wg}<T e={3+5|5JڷDVL>mwU}@@wq fY~=6z מ1ڪaܑ1Yo*u _ݮ:[+՜d]׭ϓ+}L 3A[%ȴ4yV 3'K{)ZU5G z(V9C%" bϕWAT:d]DEG0~WɆ?Ȏ4=TTPfu)"T&RUD`1hUpv3,RսiO1{ j$`" ,3㨇 8@2sLܛ]nI5< S&hB8Wo}ĖMGOxM;QLu2(_"T|=D5iȕ*20u~?w6srbGMXd!8u= IZ￬{/EsN9χJ_nTM1&־09jnqlwjKsư$j٘`Ui-3Owk~ ޵mݘF>$ﾓzGtioҺ]p[AMdīO30F^12|Ę܇]>LD@\$n[!>rG|iULyT~bQ7?&9만~7EoKRL <١h,"y펋ejO]>.n0ͫ{|c4DW6r`_X~(n)W^7bT@]XHwCn}={52 o?pM#6f"[рݠPU2~(aRo*F\}S TkX:[gkFoԪ+=rǷmJl=U[`XT_\k:{Rҫ݆i :tqwRho>ڛlΤ5j>bqf*qHIE.c4ϥg)Xl |ݧ>>t5]^n8ֿr6  ɐ~6jLź1%g_`}uCƜ3w6e>&Fwպ+"i w.VcHZuV4^:x60R_&vYIlS $L VhEg CEmw u>T]W~@;{t6sKlx߂ |Cg@}8Qư w3(/0}aMB7ZժO=m`V$4= [f./ïg.KZkXB=0mWb^p%E;< 9LE7TɈޗM}H=4nVm (p};eˢtàum#BC%֝gn 4T5 cƻ́cӣ{@k8tqJF5݁bא*XR-sMݍ9$`tդ4{_,dv&n̋s5M 틲>u˘T&N)hsE ,B<%)gA"R”K__/S~Ma$4nTd< 3_vNwDQ!}58C)u*xO['N'SlNӽ# o&`њu9sɜ`I,5ͩ"gH:< /ŕĒ|3jjeh-om-^1` 5Mq&wyIlJ3׋wDCZ :4@IY-|k e0GӠ6?CcY|/*@6םMfҷr*bg_ D J qqgE-2^XFi- %0> >Pkqxxz6U2# n^, F4G쀝K+i3gY<00'$3x LނIVc|uUY_[r!et ~ԴAۇrmBOb eR1 eDĺJIHp6iSjg'{-kxSCrY%#ȏ"JD/p[6TcJ[SbiBb yMQ mcX{[| piֆX@TKyZm"Q3_g:i~&M A5z{O-u3;K{]9 E^!BcaRpm&G-ѹkydU}R=5=CBP?$OZ;eb>`֋8# rKŨ 0_+lF&F"9bvC:1P)PHK G|ŚLK1g.tsi6#/ hgeOsw{ h5Xֿ!! lHۅ< )cHɻT;Lxx \٠I18D~IVROCAA{kAC^-5h~EZa+mc>o͋@w ϧ̇;cRC (o}7q|łZ7f[Gb>{Js.9l=\ (aVEv,1W mCj߼Mڇ6$nC9&A浂6ڬ3+udrBύsJʣ]"a8\t΃m hHg% 1#tݖVpo=0@T7;zWHv17;Jkn\ynSc&ksxyXOfdNiƏy*߷IħE)l6E02m&a;t A!DkweZnm9P%GeHߓ՞oYQ _\A/n,LN݈ɀBis' 2)D Ν qkGbGGhl$C1]K. xh6}ᢅ[IR#1mU./(Ku4ֳ.bÛm#pd{ 4|_J!NݑgJ̶Xdg;v%5I(7(% 㞡fZcϠ'%}4׫'<~^#+KeJ~LuHi Fw~V &X+\ F(GQ!B:zAj$DS >ߴ 09R- EڜiҶL\ěN %JB1Kk3-U=F$oc-jN9Y?#},fH!9(njC8)L;PM`p@j?:V),̺ROy^#4*: \Q'&^%fW{% g@t[ .[=K @mt?a[sR|2etZ\S>.1TyrjF\_V~tNC!f qBe䄈OsQˑF: Ib6ҜWxfD m(xYhQƅ3(W25BVye92?i3DmF?2 guc;PyQx,|-Th%SZfEXj wr57y*ޫ  A^ሂ{=A~LkCʹuUH~lwH8q*a|{"U9p 9WFE'!'X{/ 8Q\6K@v&AH"&N5f]]N. |0|7 zJ=jTEGK}Kc-ڣ `=9bLgh88i * Ʃ̩f +1C8A-jXq'ԠqE0(h_Xibe|rz;R*gq{eoˌN5gT ĜN(p0W,n{HPjкOlzhCz-b`X(o'-]_ @4HF\].ebHzyf{Q~~/禰mFL5zU4K\o7ͦCp˼TM.ݕNt#"yt'u:?F>rV'ftjqq7ʁv(-_4r&8i0r  .8tDn\MA|]Sm lZ=ٷq'^ e3L˶SMǨp[!X8KgB 8SMwamUrl&"keѺ{bqW&^v\*Rk6B#fc&! l(Y1k7j,O'oل]"[<3k҇‚ѕP=!WsWP ' .h^/>/ضV+^? c/%ߚ Qv3)(AG`3;6kb:%, QU}ܓ%”6v.1Zsͱ" qbu/d5vQ]3[?G:|lw{(s$,(06FVEkf0ēXyE^)ԯM{ئ( N(2hB]9|u0=HwWwώ4*ZT,Xlo6蓰  Mڿ; eG W82Fz,ozJPGʻ-eUkS(o0"mEANzJY[,EKÔ RRT^Ôy(Kt?d0 -݄[t7V0O\+{5Uw"W׽Nؚ!Mܸh-G\ f"Q~R'd ;|Fstub OARl'e,f$ΖR,efJ80tB)ԙKGcZOl˶݈ISd1puCt*[|:GʈyqӘ_RCIUvOi۫.Jh%;:8i^aeǧW-"AwHJ[YN P zrdĖuP,2cQR[y]7 8rrDQ{$ȠRn }(’,^oQgE ʉ?j/TРDR܍ b"[SAEW!NlrҵؾֱtuI3WZnfYlRG4b4*;g!ܕs 1RJ%o~G)78&HBЩk`fgaX +['r(o{|r>;ݷ OTp f_Tgܓa=3%:c(`DOX5E,(]mO ۊ$5[ eix厣4J16p@G޶P(#8@s(Y l J:eg|&$əQZ9{+r`DQmS Cd5rpQL/M1 |3!AGܝ޹`bZr5pl69.eڰQ9.PNTAhĻfA>tpv|tc_5T@sv Q dv[TL֟>RBI C相ԝŃJBq=v[>4: Y7b3h -n]&;Z'vʿ,^P"^:Ȼ5 v{'{!lvppWQ|_z2cLP\;ΞZ!-u|{J[j3 9WKAPφ=;E[~u`]FB'(wWKr1SPP8ˌgR%

SS(3OYMTW7 cm١*0D ='ٯl mlנ 8(.43epP_j1Ws }0p܆_,U!pkYb8Z&FG~KN)W=|>ktwӞלn}Epx{Č(%Gmɓ /*6a{w=yepoI=0)hkh7@Rpɛ^l+b<~.p&,P\ nS\F#_8NS*()Nբ` Z$(Ϳ[r<\s>cl{DyCKMl҈X5na2^kW֕(fE;qS4 #sa9\LщB3ʓ;RY{~i[wfPE1v~Ru\ O[HbacKCki4G}VEP7[ I,ẂY~Or$Zi^q3b\ 3J盞JN/ٸ(G"l<3z0$dFr)ſ61M_q.D8ϗ[#]lXYtw{'=3JژĢE3㯢1[廉 BuYo ی]q5˵m-%zT&:=WY>Q}ZqA]+^&` 挴BDs!1UDzCOmdCµMc(c|hݥF؅'ߒT|ЦJɯЄͲB"S˓K"86`Jny$!Y&ܜO계)HOHK92k:;BT0]&7B 35|3?YD4Nt!Ɋ0=Rf?ވ[l &\@It*+މ&'2)>^|ҞbI2}!so-Rv7/ߖB^m=v፬V)L NM'}k&Gۋ i0_mUۀh,l['+PF#f]h]s/} t߲W{dI-C&^Yrշqi}35L˓s "jbM!Ll̺DtҔ]١X[?+ Q(oB c{My]: ҫ]Ba 2rr鿕J WAp{(:+\vk{)S b6@`~(3a1£a:"[go|t 7 V*8M s>NI|4+}idxk8A4ˤ\;mV7R+v|DlçͭuarAR6qj+F۠Ydg08+(!ǹT ]07HM{s :7Emœ|o!"gxc~AX]-,8wqSОAUBke.SC=ȮzICgOs3OΨ6Ir%25mUc5|4 Ƃpmn byLKz":j%hmu FN:Ew>L%Pe5,.={֑.) o2>m5.R#ą+?&a9\ k+J8X~2&Tkd-Vv+C2nIcv"3FRHh^"P[A-s@VyJ!bopSV㶪]1]aܥD/!@|rwQ=aE!S.e`KCт佌9mALy(w *u+Kp{MXwb\oYaV¥XV}(E*iUHb$Hԋ=jE.;h؍"jEl9`{X4/ǩzm׽iџ,%vlva>^G aKOyfW+w,_892RFSl^muCXO`0;Y5 aE?=hnڪ=K 54H/id͘~Cڮvg౬P#(5uz ?OO׍Woɮ9}յg'(!r'/+8V]E4NL\06:lqӚxm>+57*ڇb5gDZZV@i){1rL8no!]pI]MS457О3ofWNTqV׾Hʤ`o+Ypa"_EK8PF Hzz!sS~cTQt_K#XaAϩHUF☤1#u[-3Rڅ5BA$7*p/Ao2KTh<oNH61a z(q\8+j0 yقWUP=相H ?߄`PRF_ ( ?ᘘXlyua({*G-6jWr4m6/.CUh92-:ݻٚu)D^3+-ҨD xђXXP yvI8Ub[cnv3.Hld>#Q$hlc+ɣ#.?_gk ޤ@Z2Q:EJ +oy1" 5t{h1A }}LyҰ^]1E(?=]VIXK{ r"К" y:_Ab_V pFႌM8{Ǻf T}+maj:崱/F0Q<'KbV$y tmzN*vc>V}kDEg.5+v _{r䜡+SRd]8Gxn}GGoGYL{<攢)1wexryї9i&@:79W{ɩ!}oH().H{2bkwl`GH7diܝfɗ%uz OסּpZ))"~ ǟmiC"N/ęիBݹ{8h|)+lwsUdnHC^AxW9[md By_gys͂`3"#qVM=ߛ,DKOA[3Fr[optFC|} 64ADޮ;[- lpK6IATZNw̄>JAiZ_hQpF0>LԣއFz^E];V 4t74 T1b\,N8b>5=UWP&>$bIcf.uϽ^B`a bLNݡ^ 539;-Fa)4;r(ok' !/Qk*-0-Ldjh2r 홲8 cljoe=&J+Πx%pDT'ꋰx1&g㵒9+&WtGIs.nLAcoIW7WLF,C#fȟ-ckX;~T 4sʮm05loҷS@> ,5姸jj1ȁk8]v@@ǀfc 8|'id$yOu1^a,# mzVu +oX{E"v.l 2ɻxh$2~!?DG2FT)CsXM*̌'Q=hc* ^p0#WT2|ס.T3/M *bD47i{wO[Xy IȪ}%(7,^{;"J1%17 QBa2~!&?')IuoCY@! sIcE Zz-?϶\p?0[PsL8'JTUbyR4ړ?_A_w^ G*MX6I۬c7l6{ۊT)x.U5:Jxc9<`NO6:JC47}Nh>p]x En$"mp#QwX%ы(,q ntjn90eI" I?Ն!b K >Y _; &x} co%?j8~e1a)-ŃrcyI[3cuM4&Pjn9z_OVDD\նcy}gf5]Bʳc7mXoOxS1k hǘYz$OSۜ ݑ)0? D S ZOSa@~Bt)#UzXkAsdD &v-`PX;3X~:Bir򧢰Qb8G?Ti>ύ= ?Gaoa 3& Z>ҍjdOXhtNHfa8Up|k,୉Ҋ<˯ko8zXr1# QThx6 1I|)8NoHM"MZf!"QGO!YA3$_b3-"e)&q\_ќJ)p@A@w!ݗ3Ŋ\&1DWC8@QԹܤʛ?]|'Pr@0_N&81ԗq܇o|Fڑt1Ev$]4>YZH㿎(i=KpQoX^y9{tE0X(uP ~wq}&2*?:Ijm k<1x쳖ە8!ŻWQ~f(:pwGrx1B2޵"0D.xk?RfsFpUN&w }SQ:S}@a:]ڃ:";6= Cq$ ""Tmٽ~o:WVնJNҸ+ Lm4;iԽjq . ژ Mj⤔xi"nfA>>]Klb՗-%%s$,L_>v=j=,ϸ1舾 Q<[dI&N8^ `SfCF>˘ݘ@*3nLؙ{CosQ ɪ+Enb9h%`*M"ðwSH+?Kތ !(-ts!h-TedѦqZFU)P;hOc;B|fdM_l~.fZ eq-&x`Νo[- Xe(K>u: vŹ簾o~lZJ`auv=6Py+Wkww Ć͘-ty2X SlrKB  8YIn+dִKI| l&|X,Z!wh_T%w_0<=msDx9ƀ@yX)dJԝvZӱY!VC͝Y]L~Tl2̠zi\fwgt z`; wB2ޱ5$1r?y+ V)z(qF\κ7]"m'GAԹ̵c(0VMׂ u}6c#atE|8 [[z%ޯE({t Lnc5G(u׸W&Q|"K\mxjg+66]zQr8ȵ MEAWv:ӕnsv8>ȕ;\ghf|"f 6/KA^AE/%G'.GMG ـ3f>Maz!ÇV->$=r@B)'s**9MlTw_C鹈gVs @ f"lqOqj< _ܮpﾋq_Zmc^Ξ-5x;aS0{r"Fɇr;E#fQ}^7fWT(&H;QxNT p&ӡo(6C]e&.u0L?{4P)S % 6bzS<"I!dZ|h m Nޞ)_`(6*cDܩX!"ywz \`xgօ:^U aeEXR 4pOoZS?\ةDdvq4R1N/?%8|,#ҥ"4QBmA0FE{#^]avEo| ;5] )VYC<Ǹ}o 2r`L0Е0zG&ϖPYܠAgs /T* w-k`Q^)}hrG(>3r~2<6OA"A9W']RuɯS( ͈0ME(1"}TΥv)56؆Y@Mj3#{}26[o}3]O7V`uIG2b},t4N?i8o)}U=SpgS:eEɈ Aj H0B܃ +OAtP nb,ɝG bOg9wDl+4cO{Q$ZAǣ ]6&k@Q5O^rrttI+pjHn_/DP:HDEft dLAהn0xytKd?CW?zX (dwgCH""i>=CyTVk4lqm%zdf^9¦h3.uY@EjGKДp|S*"g};Y;+QŢRXzq3B7&b]qJ_'rXLҬt[ZhwlHq`$X ui6ˍh 9ɠ7ǫ[|ʌ*=Āhoc0%1"IN 2 ?]Li G&Hhh |>\{JCeH7śE|Mm?^V7]w3o`^٢絡Vq&>l?8Vh;Ф=}KĿ]*nhU96t_(Fl}3(IaU k=[t^I:` ]jZu.] RL9g |XQ&]n,B꠶2) dK{>tߔLBik7e*~}LzƴΟx UbI6aLG$c"JF\NZaTZElFstGl;xzUQSUDm+Uxü:E\YkC< 28Q"\;]iA՝\j iEz!JQdYb;GA!s]4iS[*+鑰Emy%j3Dئm)چ޲Żt V@ǒV}Myoa!H,k i76Hb94?NfFQj#K>㑃-}xXhH‰fFCP 0Owyy%O ղkWk` NWf D[j>>Kh\s_0%ey&&Gx0rH<$P/ Ou.i2`t)Ǯ7\N`QߟO͈тZy@rE 55nLqJr.87,ӨLP3co{ޘShq8oAe;Aـs8xnexU@:x sŖgՎQ*jb(3(DLKtۆe51B=H&- B䷤bD*KgQ9ᕆ~q̃.1gBLfքsPxco =B9(%3bJW"I̪M:[ڪ` !;ÊjCZCmskԗCw~ܫi7ݮ/njk/~vV;!D}"HEWsf7-Oaj)Az/cY(5Q8)- _r{j/p@ee6wqs¼RjGQBv:ΤKWkM{*L{释 }fSltQ:g} )STF]LEPPK2Q SQR4fd@ #4LnT;3ا|Q8 FH &وZ?dyTsGjڀ[z'EgMЍJB{&=g0+KXL|(oQTrK[L3דG(S`ﶪl1Q)+x!m>t{P(G3|kb9="Ri۲ VLY+gXKc_T+h Kӡ-Fy+e`v?`6>e)D,POP*}\7~+q;AbtU0t0SVOz&goa=,>VJza7FU%ELlfJ={ LxA0/$dQ>n(n7 u_}.`Nuzè~UԃJ7a$e|/?;i`A't`8Fw/K>#R ՉOn 5uhE:S5K&, ' _}\̦ ѷ%Jݑ!Z%{'haȷJ)F#5`S)b!+hJ9 Խ 2YRmLꙃk0PmD_%ruS:eOCuBAm i^Zrڎ+V{ (҇9/G 1ǽI)`4# r)_PX+ ~7/zhi<~֣|m4X.TNN8=DJZs pc^_3!˙l %{S* RoN;2,u|x :\LaȊ|_T2f5 /s;#FM1+赖H} =z |D_%ܽܥٮG ՜zP*1E>\l;N]+y7+fm &3 @&bqib#bs1kK 4uF` 4G4i#Es\BbHf&Z>Us6;cFN];$* i2ˎt|QgrPÖ L G ʓD!7iF:4.oAá'j{t}^ʇ5m:)[4&F+։z+h_fBƧ]]݁5lĽ U hV#sܡ>,Gjdpf^=۹{:Րvhs$5 p$[^"m_ ff/ ckT`̇U! v~Gin׆k,zlMf 2}n#anI/pģa@s :?p@zCu e|\ ޽B/M^B4=)x=u] AhiYa44N4{,~Qz, sHRe=_[<Ŋ[64KRAu0mMpIfį.FdL -D(" x#]z72=YY-6qO'|A?9\M@9[pM~Yea$]2gʩ ,]w;_Py3TnN ӹ[^L3mD5k%/LC2ݓYEX:':a.0Bpôk\?Pn4܆D4!LN&] +BH(2AriNkī{LLץ^6}\J`%2{}:}9' 輖miQ_n;&B7R]_#Cm8_yei/>WOLe~ }-fY~8* Gq5S=hjI $uSY$`dߴ#Op[NȐhSruͩ1DL. tx@L#3NO D:ؒ#H,nϏ2Ho6.r/)蛡 ~UO Yj"g#UM'N)P=Z(h%TO5bP?By/h6iPElW$%ٗb|IL^+TɤȐ(:.yZ<jxm!.^Yor"C ޮd\W)C־d9D?wsngp:k\2E381BsPe6+>!.DtQIh4 <$E|Vu5y9'x <\`4)^*~EAƯxIz3?v 98,l" j!t %I&RMbղQA<$az"#㿛n:5!.0;t_ ;8 DkյS͉[(OsZ*סXq\?h0thxg=`!k ud֦ cDBi0^'?v+39]46}ju={B0.Y8O2'=wBKk-y+6gZhэE~RQKF>GgJIoԮ F*8pX ϞY16G%*4+w0 a453 E=CvԐoR[*N`Attu} fQv |{Ԏ?x ;8 Ȏ*O]Pn^%:X{x~z g:~|Y$֑tb8{(l!+(`h2=UiR]?!¨p?cgCX@ 86^Xi[GL %a,nnЊL.^Gfu]B|ހ'~`GdbX'S!xQcތ1AITڏ/Dw?eW'l_#:?f%pB1hwdlgt}'䤜sn'H\6BVɼf((Das 3ߢ믪JHgma9zuwX;0JXQlx14NQR.L}lE"+Gt:-4AL[[5t('EG6|L Z]5:ٍ#_ qe::`_q {tT0NN#ύgcTҔLg@:Q8h!B<]]_Dafg2rp5 ?'r}v[ x,y<7O=  k²{'o"JփQ hHE zEö5dW^ D?ڞcrNusl3krGY3SN"`TaUh4iUHW=@ReFH 2 l1\*V3ෑrZ.i=`]z ij'Yc㉼f¡42'iSDVUm%$zU 7_@Q0Z:n{yUi?3C)= ̰m22{~%S2LM+JnU`ۙS~<+~(]aaT|AM*|5 Ք}/Y>Jg5׉#-<1AHVW6o[=OD 酣+2iLZ@ف#4cE#^ uhYe 8 bVΌQ`Sj)txQMw@ͺ|s(L(? *P8VƤ4ߺ}`s GDГeȚ El]#T?3 鷀P3]ZZXc+A;B0=,iE Cك_-ɡ% [w%cCtw  sW ^֊6bNi<ƣi#!dNTri锓Zw8#wCpF s ʫ__Ԣz>ó7h=+ɾs]*oݬo$ܕ~,.(\*G>h&ywMh#|їl<:0X(`Mt&E8\ncMnjm+Yp(W2cxe1$}VOEHsi> ;9-xHJF&hkl= 2-e]s5#RfKgD|nslhNx ld :${do4^^[[S?wat}:ܳ+~HXAi5ɚI>VAH'_%:'72L#v€3T-#NtOXbyRѐ 7Sv5Lr'x/P#2h/k^%Ց7U 1s:o ֗J] Q۩hip˝@1#7MԲyZ7m9)"`!oʼn6y7_.B "Iw'y)s1tZMTt䤅;Zī2$[Y,2ď"Zc*T=RZUPjxIպ&~. + 5LL/uz<|G$iZl9|C BjZƒ;XM2AȚ]_ ~|N@,d|jsP,mP;q}vR;0X2ngLi`#@QnI nzUHQD ц` ^ T5E$nPg"-$]` Hоa`0nhd,ԝVYƁk{ͽžT=t}?\B?" ^I3f_q͌D3n5w*LUIb'@, OV@h_il8J`bGX?!?c1$AϫqD]zTQ%"f>?(x!-7ynfNJsc.7쩒XĂ@J; j '~#c\V9MfBZfkv}./, s/B;-Z=-݋YLlܵEMa~ mVKJR;'/ΕR-MI=HeU~^ $,N{P?cќ A|ˆ$c _F/B=ov+Ohqm*)iYLjWM}r]oCYq,6 U19> Y+)qZS:ˡ@e(E0AW(Iaef),c/Zrִx95:b4 ^{J [ Gt긄ՂrJU^J βyrZie'15ZgGok{sm{@5Fwqp_ORzN{f"FxFW 2hB&JW\8)T-:{xD]nDmfqG+ZewU^1kɘtk$no0ҙ5O r=zs't'^yT*].hb ɠ2ZÊqJٴ NŃ 0y(#[yJ:Z4ϯ-'2Ԑ!VI?=Hʩ ԉ08d≖ȁ%堉3_׎(E6>~ lv`aOSf]Agɤ|!Kľiqmǯ_4M)HXjjzXZ}z&$.2xH`CS8ȌkZCrwZ/?t}'sY( P6%95p-9Oz_(11gXh0;.p_v_'{fp^{hsN0Oe/@s77RMr3E.}lTɖy$RxڞKz#(?!vKVV Z}VьVz9S> GUCxR,+W0Em ~心/Y4hф5jW[e+tgM6{$iUE%vb>krzdQ3㣵(P"SE)2;gpUz D7kn3޲}--`vL6S_!gqHāvaA`yv.D%p?\k KlIH  e[omT!˵ KnW/(5DGQvrvdQ؋FG):bsHTbqN#k4Uv<߲<5]o5\[zغ~^ܪ2oJ@ v4̝_5 t?] W01DJ͡\E)ɺe7pﱮ@U<])TڧL Π1TZC>SF1{^Cm LוsȺs~┉ d#ر2[¾^P%\(!~rAJz0gs!ՠW󭞴Ӌpiɑ Ez@U򏮳L~vfw ,ϣF$,&D592/2 7Q6)is3zy:+ȓ0A2lbK`؏+(=/~U|^4dw*ݏL ʏǷvꍤ T.:C\]?Q ֵG? *)B ĞkM2$rBg73pVI\Z~bU{L9 b*Y焆eկ'VQ۾veyL"Ĩf0*5䩛!G*K?`izVz_ْR:nPO2W%exh֕H뜢+s8M ra7@WC)j i]òү l>\WRVsMږրg]Z:|W3ǡ,Y a9U?@W_XQZ'}2S,7ԄDwHmz;84gbh15^p/+@ʾƐWGU(9hصfoVY*>N.j{ơZlDq+SBYI!4:MvxtXK:?H9Bk;8Pn ;f>>t}exw1>d+/vٮ/sogBHK??efJ΄0j@((%QBpf-Alɔ~('3&316%S.np !$8A Å]c3u`E7B@yQ?_G Q-QWfYPtvJ(BveQ 5=!˪kAwBYe3px}$D81n7lk8'U՟^#ѼhO/ 86\X< b:"->?N*}3)G1&y2i`@35ex{sn.XTGt TYo \nu(6V# `UKZQ'&<2kY`3pc}2chchi_JMtG߆V'SDlEϱu #u)e2-RB6 աJCcќm/%Ȧz:V5XEEҰݠg]?`~w HL|N(2I F" v1L\pWOJ4ƈEjF]d F\18ӜVlxO;AuN;Jk tUfIl -ZUZ5O015a7WDJ1ŜI ҪG)вlzjTESS+1=ZrKqV-SV;ASi[;@,żީ e}X* qK[ 6'z>08. Y&?op.IL!MEÇANmGY^B`-u *ű=N .zy42~pd' ~^WuB'%?|-`Y B5f{$܍n@5" ;*L/u&< cj|0Z"Cwl0)S*j,BLZ,,1K 5եЌQo8;eOAlFh1 L HUoٹ] o5tujBqU ࡓCcpgpA}4hB-!5SԥvDPQcyZZ]JAz!yk.}|gg-0ڋ@+*Odn_^ӌm*@}t)WS/x~!Yi1Q֩Tm?UAi/|XA%] ^$`i]{5 {G·9}2S6Ŝn#iB퉱}ِ'(XU?xX׊rUXG7J-׼/Ņ qyl-xe,+?'u&cS;W H<8\(&Q{!OuG^Zw w]L>in햇5Ѥ*ŏ-Cdޫ4m493nm>Zjkxu?Ǝ꠭Fty{GqӿkW)UO_' m*n.rAG*I0(dZ(0 -pho9 kMʓVl<ՍRNLMgN§>Vfl_$;+Xw/ 7jJzJ;Pa[A~hnհ{v/^C3 ),4e$J_C-`.`4Abbt46F5R-v2S]Db#NK(zCi/\dm3y=7Ӷ2C@Ate2;pg'e JDcy(u~؉ V]靠Ctz%&TjFauJUKeO EM:3AJN^}=poeHS#i{g`}1GC%LeFyHR=s.ě,!JC4)7s34{<98>IJx;>+#" Ԗ_$13!U'pQׅ"9$>"fhE<3/Bo'|O%;Ʋit8A.)MM;Tj>[Q =-^ (BbY5EDo6k0¨>cXʞrt' ηn(QX#N $PG@Ҏ=<3Vm܏9Zeo  [&#FO6ojV)n'ydѴhE6 771ZOǹBA546SSM/.xaWJxhDskׇAQ<ી*YkȚQ410dO=>"0=:א oo$DlNwn,s:uS$]MUI*|C(; Vv-t\W.ID\XĴXlA[td$D(8lwmx*2Mg*RQC谹ݿE'Jeyζ qs) T!&궩qw> *Z|u. 8u1nF>({i7Ԃ42rVaf <&YfZ1tD¦\Jw-&ur \KOY HWZ* ZQ7{kZ{'e1A( #bx+CgC<#?^<`[5 +&icE[1+):HJgnj6@֏u~@)D0 }`2dbIa ­;W[뿘}`uEz>_x̥"\G):fE$ cӌøH\Wn W$63O[O,L<H4 T y.Fתۯf@&Y@V q:K]DlGV=0+/52;_P^=f& SYاiycOcO3d:x3ؾpbMڮ ߲?1K^h3Wޗ8B}l|ਉ҃#=\1`8e N&eqYdŭ32Ṋ̌ol^ނnRב#c)澉-j~*NEfϿj<5L$pFA w7˟>xg{xaVD3\LrXMkl8ܨyA)PN u[/xb%i㸃 5\%a)Λ&Zy91YGOMPeKj_W".ՀP5Tsn;[+Ln_d,7,SUde=\0Q4nm5:BbJ`鍨hñJuԸ*B#59yZS.]-6>Q1P$DQӅV,E8E͹1WqhcҜ~0kMhVۤ; 3m{55 bd ]y zg9uBPHw ,V]&@IQ`;>ǚٳV͢(w)Cp ^nۮ\sz'q=[S4D+%̧x8 IqOɥn<8`7PuNx](}L/ JiF8 Sj, ]Ca\PR/|PFڑhD3Fx`]:u Ps/ rx=AyL2RWφm] Bq;UZ(Z+^fZOs4ҩ{\ X T cIN졇t _W7x1?GHsg$%Z3HPOBƘmE q]$|v(܈a0‚60wNFŸ wiI&l}ȭ@-$;l2J5Ac7ncg4m˿cZ4 Zl(3Bjv 'epƋq%*ljC7p?r8zbIZC҃FnX߰Iγ(A_ևl`|CC<8:Gz?,}H2SjYYfZ|Wկ>6@Yk)T9 ~.//&ڃ}c ~Bhb[z^1OP,^ёH^HxsoLAf|p)MLVjd)x- ˑ '$?Y'SVC@ՠVWqu%fŜUP ㈸PJ=5-`o)Ilj#6 ŶU}+ھsڨNX-Ldf_Pu4s:P}eH))_p&Xϼ ,όlGLtm$j%BL'FZ?)BZjKvٓ"'GSaYE{7_ij̄bkEHLBxait3o9w<[w)tO}h 2_opdG WcTDm$Yf@`6G/"GoD=9cݞ҂*=05S.6;u]av-z`8\&|+ˑ{815HU&=ŧDyԵzjKbx$!פ=ȔաeJ|=jTʔHuu]2IںلTH'8'3K@hUjI;N )u# æ)}a+`9 JݲIѠ)ԨV鴙~"d^?Ӻ`wtϑ ´ %wUg3@|;Z`P7,2 :)3c&CcEuX?CK ^rIyp+= v m|=bLM髞EDCWя|uYwpſ1m4۹XuCE!, $qdhs`6Y*vڷiyXc4w4'dpUAEzOǔ˃E -JNqEN"3=]T G}_\/۬󆾊h)5|4oE 7H=v^/f>Ԉֆ"6Y[)A;rP\( I~ m}mm2_-M@gٿ$?I:0O{6#ϒKqb^fXD?>󌯡xU27l`Th([c@Ī.ρ7*F CUI[O'U/U5_ /v6fJJN<ҦI~A/~ 3f=G؎ڱ*Q|:IY=c<;03]ǺnP2J䪿,"Qouɿ~_thW!]X5myzt~e2!YY=hv2\+R;I\bJeX,VSkܲfۑ"v (_0=-sXT2k.ȓCY0B\uX-H@4rϾq M~sv.H;púlH-Y`8c?rKCU7L7n7O!/{OOTAtv(hʕ9X}ۛ+/Yn&CF:dQkq1VmBۜnaw\Ӂ?Q1h-QPz:Eg: 3sN:X%u G!t1jl(Pnb??ʩ$81s?zOdňoQiJ@BA,6Y@'!?45$eq`$^pȯzvYt‰9Y_d73x:#Gqu. *!7MT)έL,yDqE+W0Apf4IY-tX+9=[o75 [Јad] h?LT&Ae+r4SxCp| Mߣ3T߹P&@J>@D,h ؜ka@a%:Ҁ{Bm KSt1MCÛúJ'\L>L3$媄4׶w QO 5p0 $D+̰Os$$]:~tW]P>0`wMiEV!+ ףLDg}r#)yĔ?dcM$V[cv-e'"jh^/Fg,d֐߆L͔G,EJ_ 5_4(bF+85<(\CJfNފ;&%S&6bx+M d3rVwE*o~a=tzh*J{Uų1GG(l3Q~ C(${\cX7BZc+= Itp]1C)KA \8ܒ)2uiuqy"ղbڏO׍wYuK<%+H]K ]WZdJ?xB3LduW ] "6KjbzZaK / t+ p8t0K Ӓrf//{71B_yjpOUݠrI ֯Gh`}# sFVwȵ JoA{`s.DW\Ⱥ<+CK;J EcHK&cMzTȃC^Z,c#p\ݑdeX5k|5R@|6+u{N$%!6b)%BڧRNYCFwr!޸JJ\ݱ`a]#{Tz9ǟ0/YނCwlI"ꍵe&Ǣ}w)0 jpܱ>D?p[~̗&(><2CwYɣtJ;D<\㢗ȧj⍪SYXY_","5^̉UA4^TJ6J2hwߙmAA%˶2U~7St:9˙OYHڃeJ?<3<#~?JVy\$H3?ߵ^87S`ASҲzL(䪀FϚS^՘J"@8O7/`"ےf-RYH)ʔQy2_0 Y&σ4ƨ=*+%?fW/Crixz3,vu2g(L&VZ}&=T2OZMa1ɯ'wĘWTUxx+UО#m44Z n]=V| Im>*f,ronlmm7ꇘEXbģ"6)B*3 GGeYȦ3X'K9tRJ;Ǎ7 nhWK6ߩe:ӿu!yQK!OYDyi1-5 P1:/DWAW9h^>'ITb&Bɡױ ʖA4ZMW pxh#6$^``"Oߟ14D;BCtaEĘ!!KD8r>P/kEm(bF KI].a5Wd;c3PnliBK+PvlFE+"$Dj]W#27]nn2-#25- W~huitշ/wP:2t|õ{v[r`h Z\]O {ɅYTźo,)SJj#`l-Շ%Ls6SpC6}z2 y_T:Blr" (oN$}*)e'MA3W@Aÿ1XpJ5wP=kdsm\/S+1ItaNivg\c1S6P6jGIr3hMD|122cukGը!/Q Pz" hmcw'b rLo7Hzgc!cax htp $"͡]bD5UA$*}":'p?ץ$AMfw:g2u/%ē<8ƌja.'ae[Ux폛T+ +P|'ENY?V(Ktd6 wG6vd ou. B vA,UJ1GLJSpupwgЉ(@L<ț |ݚ,$dnB DA3E敔%K>{+uD'Ty"˖ L0m %^/=H,b!w6~#|>I>SHz[[F+߅cr dWHMqKȐ*Yy}EiߔHYcW ƝͺJXj<*Wg FG;M:+2eN>GJpǮ$mHgU!Ze먚< 4s2Z8rV;I,x:l; ϡE9B=zL( 3f\, 0qqY 8h {W͹" !:u/ʣB˳le[F1U- ڙ/k5eT&ȂzQ`E֓YElrfT_]"+@Q(1E7߲^™0`īՄx:xJR}+ ,|΋ &`V5wiGGg{f&N`!wajjz^6Pȓ*CWJ < !dۻ'BގQAeew2?рYH*ڰƘ\^c(l%[Ftm=8Ykcyv,*4+Ҧ0ŊґZ>.=;l<!c0ڔkXުײ+SiAYG"vE 񪇦Ҏ Ggmހ 0yOD@\Q v8!Qqz},5 09n0Yh{[+-ǩn ~=tŮbs҉^qJr˾MHݯ l1J!,)4tX7I(H/",xZ΍/;1ql;+bQ3I.<Ug[Se.AZNn'v7oٷJd uJ oV򛖞fg2}rԠn||xb[x7~sEfLyGWe'=s&} . iS2&nh̞&;R smqTw8N4>CPkߊ~X#^Xh-JZZ瓽ZfԌpӁ$XW_.Kic76V8K]Ano0m()!XxteMJ:@o$w a~t8P57fZِ6DAGvt+*~,Ux*ϰc//Z6՚pN $籐Ϸ{~rJ?bi jfVgb@]5`;גZbkVvޚ2͛>ͮa. sRO2ŒZ Բװ(ը t_ 0qĉ'`pc=#+w-[_";s=:7¼I8{#^{*x[ wg׺n% َ;V>R}/{82QgT*TʳށD(SMI<^2dHgjDD“U-_ԬGJJ3񐯅ܦ O,RsՐ s!S- (*~3= 6pUf/SwgE!XC KK2i(eNwrͷ܁p/Jqє_Pa& 6O>Z˥a/D'Cy={ُ u8]*֋#ÀKx x熣+,"M:SyJ?hORS걄k0=.bDş +Ehtϡި?Đa:,+ͱ$;7DmYyOzt7ifR8^OdNwnxsU1f3Ezl*~%t<"qbs]ODl@}p]5[𒓕ptG@ 0~T_tIOSnG~&2NmlzMghmX| q LuwxMoK7^! _f0bX~-tr&՞keY p-RE;}/@N|%E3f$?3rQPʩIYуx. RDR j# R0vr~^^yvM{%M"Є*kRJ<4H^'**1΁u ]-]EIcZ"vݻ5',e ^1C4^Ww^~T݁i.4(Z$I{k`\MӺ6>vDmZuj*ѽ>@cK5j@lD (/g:KJ1MɌϡe;B0H ˳1IQl] ~ac*=>^R4лDY.єG$lP(X S^ C0xd3\^B-FɃG0h7Teר4ݭ0#OGk D(vqPÿxG<ߒ,؃7Jx?m`-fhXg3D&7~ ǐ8 2_WpB/^B5H׊pp\7yIos>Cn 𚪠Zta kdg' IWe% % 5UknhڞJ߼ * t}Ѯ=Gj}={Gg0KDz 1Boi L])+&z'ƥ͸^4F@녆Րn'3o9g)aHѣπdϔtĤi|J&Id!t훱[͍u+/|4[3uH8sHb UVg!BrNqɑ9\]e !H3-+7º]9M=腱P͏7xw_?3W/9*-Q.#2<)Ԭ xC5o)9CZuiH#I<8o,WF2F>oٶImtSO-K׉l:m{ajpr[r7N`}E+cꟘ#*ƪԈ|'I]6&,iO{b9^WοrwZPȑL{󧜻'v{$ᬍɰUD/?˚D;~g8)>+' =!"-:GA ׼&wqU:)c _@#d[ advAT]3\{vrQgo\><~"Pل*87ՇHܺaC#DT6rN4JX"]umT 'Ery'"If@gTB… ϟ ܩ;{f,5N# YmETgB5-W#OB85+/_~E!J-[ژDH Ap@~f˹Nb"X:?()VJoQe!~HF"\=!n|t\>;PQBq)᱗c(nŃ`²0w|ܢMck ?=:@z v7,WN (oؐ7(7\(?p]]quP dS<ߩ}IHJQ=T;y>acq L'ʻ hHKm}AEVCtT&:aUOD@EcX=:(Ur3 eJȏc]4!էldcQs_ݫC^h4V.U@FP9Dn[;*mfN[U!EǃD:\c%cƯǁ'%&ii3Qb`/4˿|LwjuX %hHGfdm:c6G&"՞yf,=>):BP6kzFt^`Ah`Ϗ !yzߡL8piP܆*Lx6VMhc5KJ*_?_XsQo]g +#uRm,T9l3z]ƫ*_8yO= sQv3_v|R}cA*<܁$CP2Iek/f@ Êk[Amo\RFe?$DlOmf,bv;J7Lu13<Zrmڢև TY@Ĥh} (59DȨ{0[#jQ<ʤ"s'Ivw8EOs>VDfJyƿ xOe=FphS)ܔ4}\Kk o"iMS59Yp+E8ȧ6AŚꂼ߶*^܄'c\B:]>:yU|X+8~X\sgJ+1Ul yXjNZS:?:M"gÊU'E߲Y45blwwP![dw"|>]^2n 896 ٹD0: n5O9]J"G (ޢpZ1#4^,}:)Z$ H2 8ty,kjSioӑ+a9fPcU菡RTe t .m-Sre;;pG*g-^k:@CkgIno٩TЯ1EݰΝf oqACsNY;;V;fx|iD91)82PŬ[q}Xߨ@ltcCD~Iw*Ku`ל|G˔+!$ֻ-WR AjBRg4"ZNrq^kr~0p&O˰2 F-=+#1Rfżԗ>]? t$짃Of/7j=UD-_a‹YNC-ߏ7^cSO Xó\'? n%vomw-xѭLZ{s΄Mj _UQ9n024WeĀD9b5>Ͻ?g4ڕ 8FYXnt0{2dHYRv kelclSBisN©#T:aD6LhTLFf$rꝃ& %Xa۝8ș{H)i6Rɨ(~r bLe%!S4wӷ[}`!Bp]?'Kr/;2%19R[^q!G螀X  쨇 ,3ŕGBT:Q2駿0S"ym VFfFMqf]]g f8f"V|OĹ*/ϠZ':v5Rxrq4Mhu2عǁ'kVTĺpt\Gݝ94 |jV6y 9oG_裙M$A/΢"0lӡ:'+ȅ ZbK =Ss&`dėY"WciZ}ƥOcOYl.0&Fz!'}蟿?CЂiEs6<+ٴ߱M ~>pm%{|1jȩֲMcDʺ٨(`*h$+tM'sϓ5J+HHg1ԍSzʷܾeEJm@Hs}Y3r/HQy26Ld"߲gC%S8|+t%n#u3"\Z W*gonC vk~~o}kg/8zޫDd.i!S4K*qq]rSܫ:BNծ} sڌUW& 6'* 3XVg2vVAU ㌩{:]a\nT!Σ`o,2 ogBPY3f,Eɼ14pX)IC[ 96=r2L@WҦHdlZ{#}Ԇ[֕V0< y.}s{[cVLbGQ(.z2oǴxP'9x7>rAD͙}d9̑_0 cF@}=[!4SBsukK~ƫI$;YrKr;xЗA%5cA7BbùwI( poי:`Nª),~$}ii"4a9ϕq%PkH 0zc{\ٻ hGZ%jײ}O,1Ps \m _z{Q،\ 'GyHyIJSb_[T~~|9-C:(*=b*j<؛CWHA%4P^I\}(H/˵7eN&hyrp`Y/T.m2.uau(+_H7KQ.w3/W>*Fv PiJ[73[ER d &JSC2L WTogާ 4rW`L"ytDvscs[KeۦBwДE55zWGg\Oմl"LW̋MC07׽ƛ~6xlsY>P렣^Er+@FBr!'64G5e}R)) 偁wL*[ g) =]SR0!<B&+U3$x%8L)̤l ?z_{>B`Z!!E@3mlOI+ʐq:Kq&φaO eIw`A$Yy|[7YGߢ+*]ՙLwl[I4`Se7_֗h5b4roN >¥ L8n'X{ՌSe% dj.L 5? qӛCc-ۨ{+SϳXB<+YAzc M?z'?0WeH}n? |R8Hk駹daq QzgiqybpW;qxw?4B. C$5 Uern*P(AzSp 8/ؠ~qI Ef Zuۗl5s'[(6 Q92'`%P{e< R;T{GYLꗚjKRPlT:`qjlа뛽X(i<RVb<px:bX^ɿ̩(A`zlT%WRS' 5 XBG:hcKuFwSPW0A` %#c.KJ1(=VxXq&% qKz-(c;g+;ElBH56b8"ZhsU?=b0gcڵU۰Ywh77c긟:\WS;o>{:_z%uO"3N[>vy-!;؉1pҎ(W;X~]KıyJ37[x{eq\ZFQx+ |oE;p)2je/g ݈|ޒ1u[lAl/FM$;- +j~~5>~"!`IOFKyrϻ`3O‡;)IP~vId#ꃺ {û'ڪ['%dgG}qL ysS&ŏr\c!^ڌ)k%mA(V" vp`C@}乤fonK IuoS3Km;#SS[] ]]a,AIa)@1V]\x= V6hc"-\y! GSAD(|dJSzݖσ; ^ĨK"a -]8SJ{8̼?Ɉy$(ZmnocH'#t}4TJATӱí9sq_ZpEz:TX$?znz 8%?Jd0NRx62#Cꞓ X48a~:f%N~0Oi L~rL 8A%;{\U̠@.w~S:.lPù\c~ ,3A;ݡ&ůi4m_r]2C؟k-ł1i%QT*ܡIRݚ9Qi6B`J3j!k8uI2 Q.`r*z !*#Tm)OQ[޾(. VAWsBvO~}/ R`[" |!hQx/8"Ώ+8  {Z^Y}$N1u+yԩ![@X׺BO$T#9`~TXw_9Fv)Or)1@szS_DmQqW~1|<y%j2ETæqBR ds (Qlm(#c޿ lWB{Kyd:ўs#q.2IUy (^OBBM@S5J7pbz-[*/<5϶mկ|"؅\' *2oܭ釶@"J>lg9PekzОKKk@{Wa6PmxѨdIDLt 5IMJxE,rnK=@+jp(ێ(q%~2  'ϯyD0Z#yI޼QdsmT݈Qib;F(0u܊T޶ 9(K$Z!OϚn968ӷ5+Q]a6;ҦEBB\ZJRDk3J>{ Osy tNʛ1QKТȰn^g]#-k9A0Y%Y^&K4_h@8|䜵.1O2&kvVS(G+Z Ĭh08D|n2jv9/KG%sb([vOW`"ٻ_u SR> #Qϓ _=;g|̴v^%.Qk+ 6U b.yB|iB-Hupq?K2nx]kQea+;T?(\Ȼۃ ,v!PFC֗#{AF!w>xsX4CQrox-+.>Mo6Ur`ɡZT96{UoSK&\ҳX_x+YwHCcNNhԬ1*fWӲ$D;Lf3x=ҿ:sIKĤ0i|_e5fDzLc\ E/8YABO K3[ {9Hg8}ETXDI7Wy7.d!cD_3{&2dTpoQ,R $Ua+;I7m~o l}zAj4ݵG?R37\0afLݘQEhRŐ͕z W`EķB$VM9!D7\Jijh?ciBR hmE@i"]#3oS,0wĦ}`ݮ3i:ʤ\t;%cRr¿:f2=RW [`0& UloF[jQ[=F^Υ7Z  UzF)0t[[W RIp,,2x.~eJ9_.r`4) 7"cEG lp,loQejy{|S1dr.}++F܋Ue.qi7{"%V/ac}U45 e-:W7*"\[0:-a^1>Rtȃ:뤛4LmA"wؤ=Td{ U63%crp L(7f6CȥukZqʱtd2t,Sȁ|E .y _ s!hw^(:髤e֕SԫfZEN1YznMGۖp/%T߈DHeyZNRh`V"PΉC$FC~lG|^>bBb<i"|.?4*'!xJyoTWJ { Hl^Կ>|uwCg: e7TIhb*2S\xnvI|'zIۛ^9hW OŦ2y@gw~ŵ:V yY O9c_x*OmN*C& ]<;,+)vw>F{{R_k23QU^0A#[5kN`5$̊zmԻ9.VՎG1C }ʩ,+?+::jhS3NE?e2l6ٺk;i7 e&y$ՃUi@IVs}?\mbz܉ȌDڬ8}\fVX̓]〾507w,զ[ ʪ@^iGD|?%8zA35;r[-Co>x52xbm _a)|X>2WXВQ%\GXr}_&+ژ!F=IoXc OK9ySoâ(p({P'G: K;H>_aY\׏:Qޖ6hA)zp']p qbuؚu I"9ց}Hs{;ז|\9SE6*O 0Y ܴXYG=&MDz %50QJvzSw׃,MNrƕ}`QtP#̽y#bEXQHE5(TNbWL'V'PѝFAjÑȈY=$ B8E!_nRiZsMúƮgTpV UAsd>]rf{~`h['`g3rW[LC>Mgz薖W߆1,w=!.gKbr:&(P L1lĝo_yF`MϊHwڑA DXъ|"Q_]o̖>O<,t;ܯk\iu e\䯷LH~QS1(۪R[XQF⩄/j.oydj5U&p vr ܔR3 4z9GNnY~[`6`z|W,4`ף0G)&p&bkVwE Tq>P]W>MPrKae>Ba*b!f;+7aj^JB~j!L,;š0t(AIq,J|,N (;xeWNF)52.o`<-)aì#^9!LR8Gո4}g2Iie|[X?e1!LnO[,p=-}~i 7ôns.+ X gŸQ0>`*=oBe@7zPCq-C)Waݩ!m^Ƿ~C+)Py |2@;JЬKpl̍R-@#حL&O+4BMGhtM*b3U&(:A{̇Î)`Y F,䢽P)R|z~]8VŚT`)q #j*إd(& K^(keZ) \R#n}Q{blS1^2t qY ZpRPqwa sԉZvt9;cEs3\\s OBƇaCnuڞL7bj!+q[\ֱͪ-=lauΘ/2\]6$11Sե--3 !b@'|苠 F=ʏI tՅ?bdz(NYYDǗ2h*>;Y%DHe&GK[aۺ$MXTyXvx57 S8hXY >n%)6CS"L̜ PjocZyɶaZu\ ?鄌ds:9^*4K}+TtC1Ļ\xYʼa'Ma9LlMS)ͤ)pO !b /\u[-#-R,O"Z5|R_k</y@8!ӛ МGFS4#V? ]m y|˘Z# {SGo7SwoA~jd بiw}:1$PYs2>/ʧE 17dv"P}xa[!YqՊW^d|O<&,QDK/Gݎ+HiYJPJ+',Sv` !Fp028Y; A -fhMĹ%-22'u9,U=gir%Mޭ58|Ͱ`.D- hY?GvbAt . [r>j\9x.~`Qh|^Vf0R#zܕ"Mf3(Kי 'S3~j}qn.g-KFˮ}ݏonD h;BvS'YmJ Aqڝrt{L)qbWHƞXjY+j|.\[d]A}>2oa*R^:bD+寅ZFl%mŇ10:JՙQm3 ,wgzG|HV̪~ΔM/ֻg?pӘNTq?V0"N`>Lk+b? ]vbe7BR\Q&RBBdaY:eB3Mӓ#0:,zk?ְA}JѨzI,L:(Q$f-JJPeOͺ(\$~"]ʈS5]Uc̢S&W pZ~d.Zkrj 4vf|@ e57GSě 8aJR ]4 AW.f-R'G\ZͲ5TTi7 %Y]YJIfXum(- @*C83]Ui]cR>.ϟ_^U'*:[)D[.&gȷ-c?EqD.&;U?$AaD{-+#\2LrK`Nc,"S ] ~(5it.ܢ~86LRCPKV{daR ]* :eC?#˶FC 3D<: {8c}']Ң@+jnD` p?r !9iY$dKzeWjf0\k".dtmwMESI(.$] @V.utu㵀P(}u"*y;/J=-[s.?#a=^w*$G!}Lav࿿`4]/-OɯʣO؇By~FY&vUoy/X%~)JҸ#I؏(<,/ 6X,lC-:͹nܺGaKmpEW`gT-ĥgc6i MQMmQmzO(xi)3x!GQ/j&\P;e{{)m>8kf+xv:oQ1.Oszj}҄Yῢ!R戼{E0#b5nGd c=C|ņXhPfS>li?ϟg-,—itgu_vNh!iչȴu>6-:>UU}{cFD! Ctw,g Obla*eL Ӂ)XbK5XRޭiQ_)إI`-4Yh:.HsV~ c2<ˏ;K:uM)V[<0P&NN$M2IZepӰ-'_=`q~|\/(Q//|"'~\)qeoo[iJ}O'.5eup7~up!?V|<1xBcb#ۂe&{Cj[W4'=`,B vjO)oP]7e|X٭M%EPΜA^GRzxnJ14~@tBmԏ'E:yJ>c+HV?<ȉ0ԋAr J:] FKPeRWT\FwRVo÷sEtt-~@`eAО4-o%uKjn@/)mFn=rN5uGSŨ&ς"bvj渝om_:g+<7*@BϑxJaao"D"d|R1?&?"ZeU-_S0:~RY ؆;sY)yɦ^k2u-pwõjܱhՄTZ`| £vX**{ka_MYU?Rb }N( [! _sK ;)kfXԨ6H4m =uĺyO\- 㫰b?p\Hj/QG0LrLZlb7䏏X]Yv7Jb:X!W_?Dz}: HNmSg@ ʫ)-+D4 p,;͡ezZK EV4R2W3nCw,9t$H`z(Vz >J#^}Qf[{|3rRћlG5rL?eQw(1T**1;ݏ͵GP[x]>҅ %ƣR܀cŢg$KR;sG "ui"9acWevo՜5fw*e'<{:QF>gPM -8m͎#b3:oW!jиzѾG4{ $l<bsa+/S|<1͊ogp`Nr1&@㮭ˬ#LO+z)Z;}M2Ej;\P􇬃ۺ(ꩀ2m(Bޗ&H9)@[~RKF88 ȍg87pTO A}( JcՏbjH) s$AKEESR[;7b%ʁ@Ă'Hz(4ǀ.Fވߎ&se*St7LOj+ωw(Ψjʡgj_nnK Y[lE 0rjΗlbgMR Yّ9þ2IZb2;j7Yj߮"}' By~+޷5x$NVÓV!+ s;h?ۏ es>i-~їOML+ߊ<Pz/Pӏ=8,0#Il6QMܱ:`s]VYd&V>{^]x-o2KݵyPlgɺFUbTMHaz\! XjeµfiSV :4=騥suCAlaP [LB?u SeӤ8@TG(ٵ5uʥNSqYN#OHY 檖7Tt t,и^ekz~humʤ(*ήK%}8*^}xV/3nQ3RۼƥC,ߕGˑYQR:('eRJ [Z29\xR Kd$(jStR7@]xx;`V܆%dg&OqPHؤgYß0.57cy8pS"EFy+'z7k832;w`wT.eq(O~ܥ+[qϱ Bx9?+rɠF04 lMED H~͏S2lM 0FUh_ЂQ93"vɷ'R3&:޾F^ܫМ8 H0C?4vVy A[Klh4k,Řnl={°u/W6kzW>.'qve`|n{&RJ`QП~X)7ް34^\$ϰӖS7WXV/CB|LZ騼؎:،{)YFLjMWB+uͷNcp|Hy X.gW< n@- <^1^PfP4buCN;SIʠ%Sn??IGv^%;e h!uQB)pzy 2{Y4~ç&x>> @aЪTFm5%pI ҜEE+N8{ 3&MsC_3<4wt~2v"uo!`y?5}94D Hk 5qHj-륋aV$IEP<}\Qch08]E#Ywl8OQ^^Lo ICvu<TKzEGvp0ŏm3`V/TfS=XGH;0O%FOuTꦂ'}~{*Jj;xt)ٗշ}tKxbgY\CʤdG pwJ̬km &CRKfČV=&+~9Kht¢v!bb~g? ܶbڔH*à*qnLLyYj:L\XYՈCSC[w[ PԔkm5}pV(`=lz#@yT˃ݾ{ngPhgdT:(@~7oAW޴TGpJk`6@ ܥؕ7iW0&-k!Qs(9ϸB's5|y)%ݜ_.&fzPpxEexQD&)WIlNuczI( xA Mq:& XI6?2bf8x,ҥsIvq/G8GcdM.Pmb5re:ʩO=~Q`rMzMOтLXIgKec}N$j;8A@˗aʮf&+E2KEN#]tk,nnݾiI5¾F[ǮD* 1i>zz *|805d-0n>z̤qw|FNMйanrGQZ&<82MT M<i^XHBLf Vc0 7szUV1T`Tt] cz͚-dU c_ 1)9Tbj j/I'oI, ˲Ƶ<įă+wE$sM z;GH'Jewӆ2]jrg8'51usD }bj { pNFdeЎV~4<+GNG.AZCL'cqx4Jɀ<2qH`>u&<Ы~d((DGMg׭'uh73,WGZteu:ktE;`2.:J( 'jPkg[;T;}lN30p~D![‹g[k2/@HO~tvK3n<67 \Ni|[!nORDҘ<6 qeʛJ?:,? !z6 8?75/"):3PNLh,C(Z|8-[☯qW rDT4q&@F<7>YSffb'x9D%7 l+6-M5y-ʑvxis.SRj憻$gDȴUV~=V8\j"p~[?AK["FhFNoK <%-Z_v%)Db%hZY6 Vs!" Ê_b,A,Pĭ䆛Qel5qJRI3:+[Q+H$#2P' ª kc FO%AIPsmf Xa]y魶t58Ch=[3|}9t_ƔS#z=aB :ka'WOsʗqDyc~BSGup+S7oMDk/bu|ccυ|A_=ƐMͤw U䭁u*]I:qڤ܌*=Ʌ)6p+^+d`jP (Pi~TPOɷ +g,1<ĸ_qQ흒BYoyoզ֋VZSn( ͅ$eIעq_$HxH*.Y㝓f|\w~໿А;EKXYϖp؎!MZ ڀOVԼi=+ws!])FʜӶu5@&7 w;g  .4I  Vq2u#!200*,=BbF,fZ-Q18Mg/>D'46"y484*O&{3+rT[Ku*ܢ0$! }#жh=κvgN>JO f hAиp$Zv!R n@e6WfQߖOҟ!>EcH`[ekz1.fpVjRg'TsmxH3zqfKǣ tM| YT sO{˴˓pq ]RiK'RPO }o|Vk9w}&TZ+6uZh~[N~6ҢGVָHe}Gv o~)jꖁ&ĴT1(y)srs I^OQ\Mk HQg@_NνhQ7#ھ'MXlB[=ʚKXO@\fك*LvZ;lc;|jrysg!Õ@x_H+ ! ?%G rC H!k-^f)nir7GO8D".%W}aL92s| [a<-gR6ӷFw]. IpO(gn5겜7ljEAƲSZނdܮ ,PvoH#cvMn{0&(NмTJ\ֺM,L,̊3vSqRct>Wu/$OeXjmY ylF\*FtfDjC c~IK+GcTT̄i#N酙eDC&q(tA(LYNP^AeN[`y196shm@ ̯5-x1?#!$o_p[S0K&I8N )i+O;aQш~r +kҋ T OUJzGa.[@6a'q9e3AMlG5Ww(w : Lm'6jsoyyKٺ.&HDE2sgKg=iֻf=ݸ@Y8z?,Vwy T,¡L9ȩl2B|on#NЙvDG~gLU@٫9k0^uhFpX)y]RWgM2rű&r^G8Њ3zo^og8@@{AoS.8)R7o, fӺSiLIbKUܹCre x X@5iɀ!q&,1+?CI|s \( ۴!^Xð mo6[4ifo"&kebTZToR&:O}ٗi~&5C:S u! A(\0FL<4fKztI0dbd\j=),fT`R3;MnNO~0iG{u?k5Ks geJfDf]uIlC_@iA!]l2.,yUΓ}lӿYmkA?9S MuYK;kkRv>s|k^tv+ l7in[=VTw~#7WҕOPnͤ֞Ҝ@Ll*2-j lILe۪nc[0M4X73$k+<}p KghJC1e+ɛn ˷YyǜiVV@V?7+TuȾH%֠K}i3vp_5[F};__ ЄJ+JbbBԂ` .8VvꑳB׊y#Ho@P=[6} h0Pa1?͵Ѯ`,pq@wuA: YHF+9AlQ?!?m=2֭Zg xUL>24@և@[Ȋ7U=v:䥭}!;XDC]:sNJ[]D xmÑӈ+LMaSl ^%c $ VTK|9281"7V ǚ0Pr$Vs FQ GJ0jr7j:Pm.wA,#P?d(HmGzUj!@[b}16䪧brR mK:VYNT7NMzs~03O D/xo٠S.+!_XymިJ)(?UeE(/}Xz+mYZm其ss#3X=zJy:tϙ5V:O4Yϸ\M8>T]xh&}bN'8F&ƻ óRE僵 |*'t,F,,]-ubW-f1Q;V?y"I G5b ΄GA?2ylsIwn?Zv]} U7R ʗ⤃5[Ns>yBºfKڊ\R󥕞 :/[²Qg{]6σ)9<_MPDfMXC66Y3v![zA]RŘ?5y(5+ytط8o\9zb2FT#By-7g8Nfl Np__?2ab{gރ= (޸q{q{ВԨ;i%ƞ_4 ߱"r6& <W-Iݐ–!UgEqۏC-0)TS*RCз /0}IU ́,!2j}@i `m̭PO>#XA_PuEw *-t!44q엿DYŭOV9<DJ3*M|Rҁjˏ4++W/Me焞i#H|l ZaZ8X 8՚wEޱ r2n{Oۼ)_h;p0A!nvG;' isý7?W\ѫ>^ Y"\84J \۳N+2$ !JHYjsS !cMN*͔;- ,8"o1.x+0}k1"wmRmo4_izC]Evݳs$I'q%7,q\"s?5O$*d&iџ/g.^}Bkt-?:p$lIGiJt HfEK(~,eB oSet񆭛h \7M@}/?aΞ|> a ' r҆0dK3 Ozz-UI_JCV u*tDQ0xkAPgdcb>7%\ ah`\yz,op|D j? c>DP3il"?|B[V%Ko֥-vƹ̄yfTKd|@pc˳6/) |,\:T)⠙)FL*&BN>Iֺ@Ys4f7-\dT>)9Q4[b`$ ۞5Nrd/Q\4xL bPߒ H"41}۵]o.s3QRJMk[xJbBFw,| Q%C*٨ơTۇCz9s׽0gfΕ[Jq(UJ#-c`T{ZBo/2l^ cOw Io?B, [xӡoͻiWjte|pD? O|9AP 7̃XjF+!Aİ^H*Vώ߳Fo(.4[8_&ؐڪr_:*cێ!YȑHT//תS&Ra僑(B%";(s?n̶|S|)bT]܂JК?{NbuXd>L o8W#!!.AL6`L93b[$3Iw= X@ Y7 aV"dCYzGy`yy\IdCD{5]md&eߤyupo#n}p J_nm|x>M|rԜ3nmcv Hm"ew׭lUrGbV1V*!::Zg9]_Tc^N iɇKU*\P#I$!~@R<5x#j;^M4\ abLT?9)&,"/ !p㻶c@FΒd0%_63CP1 1rn$l;78&"pSDw3`fǡ(]4:pZdYRƣ;)ld2Ӷӓ VHMH&OqeMZY<:pݦH q:M^v8>rPqSqSs_R=o^(@;cdʒHMȴ;6An,Јj8惜w_}gGyɑj:׶81ga]'#7[IZ^fl df^/ؖҪ 1DYlns rN9^M#3C=Aw2#C2888>lߢRUBF7Š'H~e]z8дʵC=jfQ/[l{p.! < &):f'~ԋTbqn~qjK|,#5z^bBR;Q%O0<՛SDƢ}"i뜪\nX Wqpk(&)QҶ;ĵgFjM2n'euAߛw o>.>AQY6hïb0BK^bqj￫[H'CYsY-}&wxT+,zsт6+hQL@BTj'b-q>Do\!D8^wYZw4 |HVʾZH&UY߭S%vzqYؿvus;P0(k\HHYFio4!AjT[w\6Up!Kň?n変t߶b.6] wj6ș7Fk[cI-|Ib_Cr(;[_o{\iWnЛR|"Q+o"'\/V-zM 2, (nCZyPZ{wh/U3n{?:6(̬gU^~)rÎu"-Qo&}0A{bF`bZNϥ<'+, $ $ZdbcGJ|ڦEtTb2, iS]D$}b$q#*M~?ќxŻG4j^gv<ܝ{<?&ZդR5zɵebO<&k7 _' EpTI lb!£0 Koo^zʼnˏ*Ǽ b3"\AnOo@$96{Ls`(a^~Vɞƴk뢳~ \n\L7[8KfDv/AUqjk:~a ^hKM]r3Y;y&ɬ,h^A1hbC"IrQzMNDOygz8aմ@Cg""1HY,Tp $ˌvujtH%32@9 B`T?M)}=kv7uAKnѱzr{&B Zϗ] ^qMFsRg?tKĘGnE6W A1&JG:>6g*4O2%8*Iu?yI+V2zv&xE %#}X^dc;:`JzYߩJ%tcO[6r046"2.mD U/@mA?CP`9Mj&]:{/P/3nYbh_l% N=7Vρ|H'G<1Lmqg(Y2CD#Y7AĿʮKmj`LD.H<"b5ʠrs[)ÏRW٨Ņ68 rqgʻ+|x˷))oMWƀH{(['93#ƒU%®ivlFiL$dm<~/Z.uػx[ 0w<5Z/4Qr:_VdQ*4ϛO9At>͈>?,k^{o$-ToK" )^"A88&L}My8%P5 ?__U;sW 2o-lw~Grtڟ@(;g4NY!nfBjWCxjFxtoV Cq`PzCgxNg7$l~.-II@4ej\+E#֔ٵqƒt]=T̵MЌ-k'|+®۟@Xcԓq~`:ij,#n*a7fVcVm>t'\ đI{ڔi8r5-K Io{Z]8୻XILHQ%1TH+ ,nkKwI?'!0M/{($̄A#'º͔%j4h\$X# M`WWQܘU7>4䦋(*<}VG\o|^3Hb/MA8=?)ybP:w㮗a>ϕSfFؤg@ntu 5cD!C Uf-i=k@yJ*H!$L.F>4#)IQ0U:JB֫ AaEwS;-sB>ߓ$D.Ma7 uvi{&2Bp}&* 0=#(p`q\Rl|yGËSLzЀTaRlitĜiTH}M8t hWec fODb5M"j7t-t d#B:|0(ez dGB/Q\z*p)+F]-Hɟ9 iP;g<옪o؊jvÇ`%Rmj3{wT3sAAR;J߮=6rbRidF v.Q0<kHLWTeiĉʀs"BKF^#[gC[CtOi,y51,z-CGFV.mowZL$ 4Tz·ZWjw5_:7,]U#YkO3V~wh4BSudqN5}(?9Fajܒv\Ll,?v@Efبq,8UY#'oiq9&'8[PƗ.`. 8?2D^:PH7"qXхxy쯭,q$.h|{T!nd,Svr+ҽ(e*nno]I:]6ϋٖ4X{cx(OeJ?JfRnm=9R!>6c Юu>\JZv8*T ;ĩE`x"M)̱Jto~}]X $XojY8d0\vĞ fJ3Æ6uUf־[Q{er79|&߾w׹v{ɛ#mz6m\9q0_u^g e.#|9`c!(0(x9 瘽`QZa QxoҞcj51faHa4ߙ7طDY snj\%pa@_ \ɾ~q|Nb#Ͼ*NY7dXu]ܭ-e|)b㰤֨>`i>/쬋'tQX,q[25s!`cJsG6@3c.HJlW|BجzNv_d|)6pIק2FzVaQ&곅ddnAz$KH[oSXSt4OL%JІ6 fO_bXdmJ^dQG C_02EwpZ>W\#*3TD` I`}~~XRJM!H!kSP uKy+Ymrw 0dDcfO|rwWs5p}rcnuGnq 3I&*$闂I/WUH6UնiDQJNש*Z`5$Nc}{ _$3{gދ3I)@aJ2/7T] nxHĊE7r 3'5菨zP82Kcx!{ǐb ;oWJA⌌O疻,^l$.7$C=o\[t"Jӯ`A{_(@h3[?KswLNAnfxU-t$$cH7d\$Mwȱ_bj>OlZp(`"baU凭ep>HŽk'; ^RW"$7tzر=YDZ[WAXH%``^Ke< aD'ݬZpvKeIΝ d[N;WTpTCWboG8vnD%PApoJ3igedC$-bSdY& BƯAOc۸^1}G){~YSE Cf1=ȁHvndg3G\]$>@DBCܥ09"Fyb/ҁ0n9)cDoNuۂzyW򠤽i눡G {2 _^paA&Z*} cyvՓgBP)0@GPY.VɴNLO&A/4/K ^QB\ʍ܅]4sԺW'x.$͇jǫ.k4,dݸg7M1M,y݀uR+E)~%_3µn᝜rJjũqƠ1ͶU .ZAtH/ڼ؛.ScwBqOMis*/C nd[`H)+Z^'c]x6&-a8R7}Odٌz?݉)Ѷ柿mP-b`>%UŦsJBem8 ]4vտO RqT>-H\1\ttTr/e^vnwfW2PEځ6, HE8OO8=0kvihX`֬"0ۆpTTKbv7̚ҝ?uMY\szgDѿ}4$D0eMt#6m4$4{O'+&f y(eX3阘2Ԍ#kIXmTX⎢eSĒ "Qf|IvxLQڗMNDhQV[mDOųTz[3p$ Aa(sFsmitnp@Vf\||1^4KL֊r7 x꣗7yw86XREpS:c\=kʿTM˜!Z&'*w_=gek۟j$\}@yB:Iт]{BoTP K&1 %$ 5R&(Ļ+I?9/§pnلBn mmLy*>E[Hof,")~un3"_!X&ԹyGd훳;fl$FAb<`tS-)`L10/[ o=ZN&&lMPG˞zj[rTR⸟dB5Ak]bz-d]8/L?t'j#{ s]I%Aʣ =MR p$X  &+=VH9z;EA *[gyNm|, IC~Y%<;3Ӓa;۩ :d 1K㊋]rCMo〽uCRxOk0wq!`>/,H9YyH+QֆI B÷D8xg @c/+VB{=uj#Y-i"|ߊ'n=18+(I^彥ač롥NGL/8GE2oۤOHuy3~\a%f &oWܬKMydڄ`[m-TU4bL+#*]]zu;|KU%ωdC|)/ޅXXfBYC-m ̀5rP=X),JW`sKT$W7r$ze.&gݲFሷ^Cr uζ @iK>N !ZN WSa^B3'.b5c"1R3xukD2H霬=*٧`EDdWmRZ,q?j}`BR ^c) /NKi9jedt EϘI~2vW# 9C>9'%~OLZuH?]Xdi֮a283W"MA;oжSٝ j4ePC^)ASr)PSUyY.m* =W` uӊ #Dk~u~E/Z|b[&7+ijv u*^p5S-V:qyA"Z[EIR?)KXT;d!fk(|S@%xy6x/ :We'[AbeC)DX2w0鎅. ]0\W4(%7J_W"adgԻ9j+D(A^>{GU5xC>H2j|9hDRNv&cKMKyЛ)q.ցΩbMtm!IE|T㭺S c=\XQ mTJw vahy9cmm)Tj%?UUciPRS[R=z@Y݅_-Fz'{0Dgh?rly&Z6AF'ΐV+<d'l!JwUC!AXҿ?2ЀgA/F7Uَ7pm‡nG-ް&:c>®;HgHz"9eN@c;^)r8S}\^ZhqHKxuKaN vi^>Xdj]W;6}A$eKO[?$֐ jdL(V wLz5vDGht5oHO? H~3b$ ,|R7@^8G4m%:o_ÇglyP aUYSN_:p'_\MܵNZ؟rhl!0@=XE"e-J$xpяle` d HOWi#!Oj1|+%'NY f5b"r~K}! Lߴ]"zlHFZv\Z)`rQK#E{-31W˝NH7#} 븄S̾|)Ύ./g4Q߅m3=>O cቌv΢T(3N/Pj'nH_*t07) МZ-CֽȌp@{렾6g<8L2b7UܕXc}%$4ʏb iC4p^`ՑotnĞeHiczOh7SLEɝpI /1{з=gsDŽL&%XD@0g}Ira{^-?]D^F厕.{%:W,(oߌF+$3Ypڊç^3:?+1m.咔li DxcaSxO6dn/W@/-ffRcD5V0g-!42Tk8#lGzm;Y~-J& ^ ~)U=j'ϡx8J2r_3)f|>I>9搕6qrT@(EJK"#8`ߋJo,b/$ ցZgJw\0")SkcOQob/yl ؎99Pw^p7NTU.TIf{e6C;&}[XYM>^ImO"43dB`ؘ "vI8$ZJF.Yj= ODd况HhH{E6QךpVjYjH@33~GE G,/WRgr@ 3pʅOHy!F_ԣّ^\p#@waFwX oZ$i}n0E靂P/[Ԍ.;3&if9JuB1XusWSʓ(Ή[Fq)Vʫ+> }s5ho},i:~My `(ukQz!'sQ\O/Tͨ1?D< z$ӧ͉Pٗ$YF|eW Pױy|lal7hvJ.Rcܖc3 \R~gX̼¡1H$QVKzU[8 W㫢ERYzTjW*Ԝ:c5`t9a5c5Î#dQTCIua6\010 4,j~`WWiLEu (Xk*J_#ΐA]N4ևTy% _TjPeοV);@2 v"rH|޵g2=phk]hǠ7A5|cf 5JNp|c!1 Ѧ{n֥UM=qWܔ&n OAP0׵Ybmυ!'kP#'6m]-l5ExCSUV%z(Yd#I0VKpc/cԉDB”(HK98zcSwUloUUw\$KP|. ǞRs8`./Tž'#~g<]aɃtH n{YW#h7ޱ~Oh*8#YٵɅ]&YC5 Sp08wEKKOjO_˷%$F9m,.hD=軙P93i)UO ַwzl%?{6L_ vK0AM9sIPaJА}1q ΟS8l`QQV\GNH#@#uʳQކLT{D斸% #e}NnWV(2h9M,vEk* o'7ޣpK. j%YˆA[{Y4cg$l/{x;Q29Eb^ xP4덷 mdtG K^*KEHz9㝣ߎb¡I`g(SBht?lE`%AXJnϜ#k(@$GW(ݯP*dkw:zXD9I&?z*!rD˘ů-B\dxsz8XɸWЪ\S?%t;$RՓѤ^ ƶggZ%,5Bm8쯻ddW KYkz_O60AJzS7aLPXVU!kɿ< XG"·f)瀣ZDp0\!ZP^禺Yu.$:dnf,ו(˽3,!=&G9"*TܭYĒ[UZH07:&6?\ b{4rͮaJpM؇T-y0)mS;G'Fqqi,MȖ$WGnb}SѫD %DЁ3gqrƕ?)BBw ͽ'R!Z4gYl23b,p 5XU]zC\0ooSu)UiԃJOT0 }^-W N8ⱪ2`KMqIGPF/'(: mkZ b6z KKR䅏0Լ';M"i=83$ _sԈ%jPݺ–@ $2֘ P0B۰"9n4` 6!i(U"ס?)n&ͯThԇGtsC;k8d\<$< H'Pcu~C~{>ɔ;'t7n~ήk7'fC05OWk YQ=*Nnt'xo|oVj߇>Xb$ 0.n>R̴kK+^O[3s5, \[v˵k) w1t:A Z/df#TA0ٳy*c6RQ'ݲjNI8X]u}t!)nKz٠vWIl {y =>=W?m4S<_13-nnz+;O@:6Βo9XB,n4 -?;wO>t&ʓP]ci1M~|x$rkf"P( ‡XLaCԯ-d/u~,D\I!>DMWMxjfMk'KBݏη3 Tj:|`+. Ou:Ga6v{ڶը}Z/pwCB[Wc ʥ*nؠm,h ԠuL+&^ {%։0QbBK!V02/Ƀrק9`kWI I*aZk:Mz#}h$53˞1V6!pVP5U>v+vxYL%Ev;Vqj${_Dp vKpA?b˴ϳNAۍb_sAF}yƣ%*DU74U*&՛ړ-"82%"s@ln[v_Zq/TX?KmAniZɩ5X"BݨK_%>&]8P਩"'#=IQ+J‡Tm3j RVy&û)8Ȳu+.\cu:B"͜جh e/)K:(Wp;*(#3hGu\J6YR8?9>@%K"T#x4"̥l8Pfx쇈q-ij .*s/X0c##ywk@}Sl2( 9:X|%$ǫ4PЫt=̯B&Cgi{^2+A4%vRӻVPϨ'w"j:tOrYa lzd 7ۍTׅ-plZ/jS&* Co^o=2[CPLvd#pcF+;ɀuJKnc/VgLNP ȩ/a_ 暦7^*#qGZ(|`:vgan}bYYչL_/a}:N@H`RqRMJϹK oP@`bñMB\%]$A7οqMqi!SSSl1(ǦS0G !dd\#9Ӊ]#ybMC nSh}類j;g̖R"\l!@"41].m>=οC,{vr]g &K(u&CTÜI:/d2Ee,fQZFN !KnMˌglVpԉTMcywj¢O5 ]gRA=Lʞ:W排:"UWEѺ02fA}f1(yRN+f)G^lo|t*%9duF|6fnf&Js:3a9jDDM*FP@nu*FYNx2HһѶ"Ԏ ].Es7(\fpV~Er GRQ߯w8k1g| \넠snvÖG_[KYY pABbfW&˱Op{`Huˁ=3m9Ih>O^yN >kmRR]-Q:5y~thW* eWҳsʧ)79!D/K~0\\wJs!6+:qdH\^&u P(e2q.26sϿ*OnYqG\+4>Ts"$|?!+T#>M'Dm7շm>HVFqL|T8=*NYG$X Jj_B\E_D 5uݷ_ȶ՝V@]yw\s6xy gl9 CHy%] y1 +76̿9i;_w|=}#K"VR5d[EyblNEi5vnCӼځcs4@F2Z;~AU̶ V2EF( ϼoh_U}%H.釕8J928(`kIԘ)Ph6EPUt)q̄, d5K )1N X nPv oXK{,7ә4 KAO>9".Ni \ت|a"?Jo Q/ Rr%i+\Gi3Pw%iN̑ېK=.5}u<^[;I燐#Jz~_.9#Jm4O| ȴ)\";ˁww J`?{UJhG;r}lמ|Gnj@o(f{.58m6ϗLb;Usb2&r>Ry!͆y:V~ҩEgZP [@rx݀_}_o"j>VxÙEƮ:oZI2&H{6:1 7x,ri/&+ ̈́͡TAj\'fVX/!p ;i.1_`*J\\4ĉmNDc3PېH5kΖ"߾!FQGW`*ZgX8y$jC6CAįA=/8} ;wqvJNE8?Î K ,~j}r_:_XMtf)$~+/X(R]=/ )+rGT * `l #b`Tt8cժ?AcқA ݩ-rBVz1v:&98|"hQ)v4P#gę= JAh/U׍)EZܗrPg8eP8-{$Ww\,  StίiݫTAY:ڙj+N707(f1oѵEZr3 ɹ!sRr5/ Unܝt#OdܦE6?BӔXWˎWqs6*Q& Fa{6zbǤZOz0@K[JXS3U3N,ϜFI!S{U$4v.fomk9 #poTc4^̷l{+KgxVu7\VYa͎|AmZ# )#ȴ.n%ɤ&]*fJ b9#&#T/{N 0FON{gKq)DmFit;Ƹ8bv sFW0cWC;.5l, KqSʁcEo=MT`?FWJ `8l~[6&D?^Ї dnr냞!EX#dfK1W] X=*.|=I$p>i2|x4"# 7&FگMI |Ȃ OHTo~%*z6O1CP\؍h2WX0#{#NO'.otBz9^+|6aYڏL\Cl3)́=yR/ Qnѣ M̘T.tuJLklV;eDҹ?Z|5RӪ&Y,@^/ E;CS8ì!~[sjK M+Oaя{ˌO2NoQTJMX0<~ZƏa%T%*ٿf?XXz!K(zYX%RrM;x Nt*e(wJ:P!SxaIMCEfWƉ;5ZM8+j3KLm̯}T`~sZVv,jDK-RFxղ<.}tx*4pi&"u*X4yG1y~9b}# d yyz"Bp^B m;9(LH 0!Ѐvfqci_nHƱ>y!zrP~Swto}g؞[ ҨiE3g2@)Z&B䞫, LaD\IS bV \-MINK+D\nyD2[iTNU0K-[-gO)sxݝW 0,dømѶGT`J[9Lx # :S\7a lCG$W@زO^^@CMiUn:G=鶍9meg9FG]7wyDMFUohm݉+Wq|/:xAFT&AHQVѬ2s>}w d6^c 8DтPL߉x M 2JEW =w<- +eV[0njfa1VY # FŔXa *_ Mܮw'OyMAxX7':RR7b$UÆTR^9y!R0Z_wnϡ^ Ƶ=&C# y񾌊C-8=sljÌbB_:,%24Q5a<[e{QCғ . 9֘/AC*I1XP]-v28{dRvTӃ.7|m}}=kk;Enњi*$RA;RyV il/rc5QYC !x Qi#c L9h.nSQ8ʈ%% x>/VuņTqJ!:&sjwb @.bRZ}ԺLV]:Sd=e&F׼.z!sDySP^R2!m$y#GںbiXeMmzk {#4@ţg]C0-,@ߴb< P1ɽi-&Cc:C"lY?Vhٗm?!WauW1gh ,x>e;$H3 Ԟu/O; ̟)OAgjdI$b_~e}\]&K\61bp UJw~f'3DCm1Sޡݪ w:DKrgo_^ŬZȦ>RQH抜(Oځ"kp$[}qKۤ}㳬kHPIZq-`ݟDH}_RIN(o2awITWIQ X肐 #(PTytlEܧ|%8Ca"9'0`Aʏd  ZT S`.MxXV*Օ8?6YwԄuaQdBǢ6 y2k2Ff -ٝ~k<6-<\M^q-Ea$] 6̎%(~H'J1I?G4 0˹/sfVqG'z.XWuHn1%,A-~3H1uu9|^nC rGg@q_U # >k@^<&!;BRӆQ5]CQDq | 3 cuã,djl_%@7<L۲= UHxz@OB97'hQ2OKd\F8irR/ta!gz6[#NDY)?rsTUM44=`]Uy8_#TL '(SnfdBȨN?E79N rvJ)bU/m ֶFh6ZDr-[#Յn]_ 頲=<DK/L.-Vnr jb“"e&c 8UTe"'S vcz߻PROg0 ֛o'} q6?i%d v@fQ׏ֶ G>*8Iu/`JtD`rphTޯzH]R d*% ! p`%,Y\X.:;ӛAFKQ>Gר+Y)CDoBm໇V'uĶJ] "'"=9 t P䠔ϖto8erd<7]c3f$#- M{)'X=(/qm_rs5cS@g /&.ݐS͊Y W72GzWK°:d HįM)åXb#!3#kJ>\tzUK'(A6K݈B;ρ d 3F>o:+׆%R@<"*,puNqyXBi|ǁJeA;HظQ[p3vK87Nʕ^ D Cu\>c˜5'9n#s"˃]<2gkϭ">^N2U<~905ޓPG?{RRSo~X/FHj>ٶ;̛gDXZo|QR+O:ut6$k} ~JQ墫BSXO/2- i\ >!qĕ'1:' w:z$Y>B/Vub9u0"@Mx I\[Wޝ]T ƻ;y } N7@J!.af3s% $놘CT\T N / :wG8s{E:l!$(1o9}k.3Xy:? JOh<h|]6*l`АVNŚ´v313oe߉:A\aI!K {k,K-+x y;P4giN^"݇^>efEy=~wK߱@퇪G }҃C0tv] mr2[; &~—>+qK$jN>~ yAwN).GWK-pgk}.$3qJ׏`ל-4b\Ք㋟g ЬBْsSt'X%i8iRڇ0}cDZuχ:;㋒X) ) ݅&g`HMM>2EvJrޘi NrЧʳ$ԻN!o̧>[cJZVC1Rx Ysg:o,FJ ~%8 O}yOaOP?]/XqmQ*#>5jQ%H_;n)UK@7  cp`ҞAlw\xޚ⃴[HǸh4%?V!j\p@狩3dXbGD>N"Rc0Ҏ /M;φt3L6z,Ґ1:nj@?Vw{ДddDxqɜv;vv}k=!!gW') 9IG c@4{`]ΤR% ƾ*xCM1D|?Ll 0k;4!P7\yx M/yLpN^bD,pZAc:Ttm?A;_/ a:W+r7wDFzdWpP2uKP1.}K#V5am. rmNpx8+bMzg9{Zfj(tM3% ;tAqp 9Gתj1̣RYG|M4R~V2щ1n\%A9yHxKN"oc[A~82IYVљ*lk1;JB Kf1LuIr%& 7BSHJvwv2F &D #`2<ȟ4tWtqkАLg9ا^*܁Ž{N\ {@ 7Wmqy&R_>g2]~RQVнd_fb[OfF*\|G*lR1Y8{5z0the!@ޚUdЅ6\N,Ef-d(2N21#!|ĵfv{nKԨ7ϣYজlܒZvZΰ{ΰŋ0mPboZ~Wj7hUf٭q0)kH~X˹'@T\򅲵REȦIuJިsu;/ BƓ [|㏄iKS*5o5`uCŽBJnOӟOTty&Ֆz>ZWHDE]GС lDn Н9~Ms+OQ품G/?dݟݒHN\6OXp(O53]+?$cՕ2E> hpmvai[`] BfA/tjO}t ž&{V1i3UF0-;ٗS`FeB`FN^*d6qQ~&wٜ"ڱZTe:~` ͂0Ź1/$ȈDQ4/0v9Uʢp ,5hdc0UTY1j @fOJ)rye"+ܨ#֓Du|ڗsz*"6c-$T .GMxkgjP84ac`/7`g `2gE3VjX )Ʃd _R/7kcr>ͯ%NF|)nmw6zP`YF.+ "++7ɁL/ܪ_UViV%"öaɋ+;`IAvlw Vzyzm QYbHOrЌa5:` `LH|uO@CM;;(g\\{u@y*5sI pʮ *d Y͢mqշJٿ>)_Oћ|!V7HL2-6`\9y#&urV4ak>\)Z?˒ES+kXYJ'D4ZhZŀMG8<Ef'{dPPӁ1|\z#*o;iRrH=2IN|":O*fXjwW _l.AX;A[ȓp\qeRIYK !ٛ S/2nk.[" ݝ ``_}\uLEu~~z{gĶHiDrUIy;pj;wzKa n`y{*9p #S2MxG-6$\["W Мډ^;$]7#ɩ@ /@:Ê/Ize*/!}aݶ Eu *dèAi*䌉 "t3Z^jH&io/mD<,\"tg2̸LFĆVtpJJ >cK V2;6wlLzhfP5|S2OI=vgII1]ǐO@;ٮ u׺o],lo~ts8Mr֍[T_uFŲDX~*іuf+OϤXtt<3Qd=[m(+TIf>&v>Bgo楙?_dz3g{rxX |DNK|L^Qz;F-PjDV!vkclW{Wb`8C wEm0r{yA}:?YŵRPwLigg^䐱3ں`Xa\RDBf{!![gi|,˒6h$2t$[eׅ D|{1'jYTrW~Gh|F )R=φv;*ǟ_4-aQb#`zlz>DI #L+A%/b6]Rm:px= CfCSFg<+ 5Jii0'M h&Poڤ5L` ϛ f#wyM7{o:F%u:-E*I'ZU#r=2G@0h\ٝc=f,KwRr??ԘWl0D|kzא¯V2;B] RK0u${uyb(7G(>(Mj`@o}@S͌]J 4 k5F_Y(* nL(cW"/Hwo+=s QJR^3]pM?%G-L!7nMlVXRJQB{`60rYm 8%$o.~kgfIk]zcunQ)Wc+#r{ HG>[2G3ځ0켡m dḁUgŊ;Ds[{Lu 4d:y&綺Cg)CCV+eb v$UTx-# J_ʅC/c=e1gHM&VՅ tU +~BC9Eqyt^vTbv-H }WTH=A/Jv/Jm*PFUE {a#hWûR-!!JZWBXDejS!n̽M]‹]xJ6䫈 a8IOk']:QG_u{ NgR3"KP2~oL:0`R8CA*FpO'$'!S|5NK'#$-qe9wo:YO_͹,pbI9˅j6&fij!B$K˖mKӶPP==7L./AQD`ث3.H(Hb?{9Uý;i42` C)*N]&9ʂ74 /Q# :3Z s`O=袦PIS*%P5,!uq9䕤=JAb/\g_}L C'6IʆTiMV:Zc&l&Voi)0ʑ9<@1wmX4 &3r;%8B-^E_6"d__;Uuvʒ:p[v*j$VÑWWFOd8}]#-3G?2I͊ա UVl"?-I [mgY|jv%ܲhu`]n4NJyjZ/W F0^ 8tlۤڻs@ WWŒ*oFjl*|Q!Y/I9` ?}HT+^HF [ 6BxA΂E)0%ĦB]zSB"Y+#l{=5O{͢w#zra<OIi34DDﾇ)ѝmR@~nVYlئFpoD"OMda6nӶ9e #XdlU[aBEQˡallsht8> 3[q&$kk,+n N(lѩ+ҧ[rR<۳94߷a&Z$EV 8ka7 #~7=, ˨hƤq}(HݧdDB;! >ƪTPswS~r1fʺ{@oUP,4C.a2,r!tYZTQs˔Y;/xS] q@W]73PaحiTU->8"v3)l X̨8ꅩ 21Gt&fԯِW dy+FXq%)P.Ҫ8Vm0Lӡ)&*[ A]f)Cء8?Nr $6Gf8͉+pgڽY0ՁO Ľr{G<*0|goX>*| %q0:!ۘlS- R6R{Bpcq{;mפbЋ[/_>!3= Oz-!Mh9硤sc]E.K7/&G-Bεnx4S5JpJ3CBh[A%|SO'hוePh:rbi4NP[ 1%eT 3Ci%έ㥸 ̝0ci-?, ]hsG".H&"jy؛%B罠QUŦRΜ~wp:h.;*D]\mp!wݷփM@`<M/h8] 9uH&Zi(B3uL%ӊo:_neZ{$|'!8Xz+wwI^wE68,;]6 (~)M6ߍ1FpJǎ B.9%:x%@"KMԮpuxȈAHT aF߮Tijܣn8hx޿Ϭs CX4Sc90W ^֟%EO^_0<NpĖ+P}."RRp3#5l^n2EF̍Q˻AD Ĥ=zλ$m0"WIM˂h EH&ϾCvɕeƅYVt4^9a4TCݣJf pED>`Ebr, {xXSRh1Tz6?^J q[ L\dgy%xwV;`ZCv;j,#/ճU~gޏDZ8Q>E[Ƚɓ[{VKm6ȡ>O<9q=nd l,,HMDg0[dT J+8=ţ LՕ$\,I 5!&ܘzݗo]jS`Seޜ`wO}iUR3A<RsbŇA-!;F8u<ʾYyow5l;8ŌGϲ{Λ,T7G~Nqfc5r+̲MИM$]jp+aw;/fz":uɥMem eaӠiNKAĶpVR02%_iPAޤZ`akrc+ߖ0⃄ r%%*S̨46߹/p9FB3.%B4+U#ziۜva^ɟE]Н7 Lqpr|4\C;ؚi>3*.!oJfyFgz"6rh&-P7Ig dr|ōUƃ>[rǻy"YKnD!ReA&)gaOp^+nA;ZL138,GW%*-rr:VKU0P@݃"*9XX?|nLݫ hQg#:b~N NP#mNPuu.cztTa0r+3q\s oo qcC_N #g W9)_k)+2d6o)tuЌ1Gb{- +*9Yj,Q"4)H uQD0v \d` XK"5Y5)7?^ێE<)vzll.&5n9_bN1E/A4*\j1lswv9mGcJQiZh"_8m1l4LJ;P ;$e5t*[O+wLXcE+eUuQ2Y BxܧVg}oHUQ{D6/TDj嵮P a|hCHL7m0Ω`NGi4kyG[l4%1EcVpۊ6f=:bt: .9Nq Cb %Ar""GA-{.A: ?`>AZP'&%Ӓۋ&R`{>/J/d+Tw[G?;7Up•&axOv=lpో1f HDC"jзJE0N·0WWR@]GqaE`ktjuy1Hftwq;s0&CфU".?FkBFA8Jx}w[K.iVc‚{@>?tǔaYc:^B\ 'y9f![G/lww_kUC؃ISاC: /b7TR?兲f͞n( av}l.3bAc\Dhw ea%g淅1l0L{Z>2`۬n*GK!(`y2/按1DZ)"j% ^B!KϭCf#gԥi]^ 3=‚ Z)Вuaz3mde{mJ @.↘]1 b7d%tčj}G)//`~`)]Q k`KN۰]NНA&8?o|A{<^OBhdhrLhmF0x !9 {dbG 𤜲s&Y)qGHg5{c3.  !.X",[DCyңdɌ}U>anw;v0gk+ 7I>\F-F})(.Yċyvf~_0)&Р:×fjW,UvǶ5zYWp0X # Eߒ6$L^Z>g3P>WO&|/^m),5C%j?9:BP5iֱK1r٤o^ ?D >dcPv5ة;=44s)j-+$\Po\]L$Fd1X5)f)^ 0$|;DTMVar̪%fzޡs ~'<ݞc_>xDQ{;)Vgp":N =k}%Ve #C!ҝl\J?F o>e! Z׺V *Fuv懖"76iظt^!.mZKaԩ[T&o0ƅ-g=^* jڪ#o8䶃A:~=jֆg\ `^0$C)-?`[d]Qќ > ]CZwlr3o[vx% a AISwA}:b Í?0H$ae]D@}8C:NФǪ^Z;vA+r뙬K]E2t½M]9{q]T%WuD+V~^߇Ԍ૴sгQ%?TZ@wԯ/M%BSD 6dbE8B~{,mдMRgIR>~ E)A|ͨV͙)b<&p<O,9 <=`KU<2lz0ξj4Pgbg]دZ/X[FJ?ݸ35z ]Ʌ"or[Dbo8i Gdu]yJ𫗿j'9_f9Ҵ*;V*PK.[&4 o'>hXM /syKUE=-:u#fx/g.no>h"3u/p dywp*"m"xb lm>t$o,1u+M|rd;6#kM*j\o4wKFst8~j oȀr^f )߬ɰgJgR)#q;tC-g0' )Lf>O * yݒsDoq@dNj᧮T# i4lr@zb'HUAhc:TKvq4j(3nPM'so;0] 53= ^i5MBvHzanAw_(Ǟ{Q๹DM2={)dةNN 7ugʂ1 ccLAvd&g+[R̾SIK-ݍw_C'=X>7Z2#ɔB5Ab*x6](JbbD'/C(+E)Lx:gx n UkOzv`b'Q-`r潍@*@̼ [j kN_];C!Ւ( RQ&cB |ZQZig9n=semHy#4;0pmnqQU-_AH7wcJ|B~Q2 H).7 :lsOt"OxXfIRiZKqs}.,b6Ϳ틩hL-{~do*$c ahbrouK+`s\!$N/" j%N #h ".|;b$ӶH̪3=)%+j%o@:ͭЊƒųI%qXn=uq\5~8~+1Փr-hߪnܢݐG=3. -3y/?`j`aXiP^>s#s\hs()*= [ͮ+iA8$Sd4eNdnbP0Ē TN|3JJ!h k=-xwGf)pZEDNΘWLʆHD 5mM7$UoPb҄@(#(,+޹xC)kSq4د`RݣqS\ȼf2HS4ieQ+nYŻv84|v MIcseUI(3Ɂ#Xu޸ zՑ;߆0uLd6ٛY}rxx_%*r5O묩) vaAMf3J+aQf+EEw/#8yOP!f0y}4;!}$ڜ0gCla0Ok@eѮmsr}&`HGYֿR"(3sc̣#kVo_{ҦĪb\ۀe>ߘ<pP?nC|rѫ/&k?t t[| CߞGճ+uX @85tӊlaZU_"J}kL^6Nϐ2P0|9E9% NP/Oð@9 >sTt^C۝+f2FnOl?Z0( vNYpRtPl/c7]{Xo1g5O'JPmYiZךD;$#G/+ŰAwL:"z*ZFM>I-jbGQ{W+VH釵&rKuPk|頰&$H~zX ֭cY-ÝΖ!m2wyĔ?oma} b07z[ wc' jcN1f}Z [\F~!;&ycΞ̮N%ki fS:2r0,`df(f]\ μJ5X\(qX3Gd_@R*)u ]upOFgE%ҙ+y@U}ڤn:xHs籂cv;B6H%=pGdA*|9 e]"+V]fůJQʛ̔Tc׵oRQtGba,"@=1GI|Ld`h="6U_.f}v!;T{G.tc(Ɠ8` 1Voѣd ?lØ%!}ѫ9/$`kJ \z^[~o3',An~T!sqMDзL6٦ZPK% 's4q9z6VgPIQz'!t\ h Sˆ3nZ{[[JU/cub{ 8ݩ5Zp'I< {<\̾s|ߔY=? z?8"1US}؟A_ElE5xaͣ+ͳtTު%55\ℕ>i.iw. Dm#5{ɓ!"!  7)E"jԄ?fOM%( ñu1eu@Qe2gW[呒TE;DjɌ] a Z]^۱_}O.YϷ4et<{SڮJ$)rt?pgr, &oo ga}b*Iװڽ0zo͊S @iAF PSiSSRK(LYw[]u#﩯a;o|'| &2)P)J)<\kh67ipqS^ewxXgR|z^3; H#Y VFf7Ko2N&ŗjb4qGX,4wo,1rYx|ﾗs  9pA(ʚrhG}I*[8 l ΋N&Qp+!1\in~UZ w$qT˕);eX!*8FZ>=g,}-w09 R- &Z%NsrRwp3M^*"CkUľzx$(3Z&Ҧo^^S ?oPή|j=ՄMWjw~sgY$Z,-0;96He5k񘇡,nQDiCP  =Exv{le2:1yٍMBPkY[q⫡Rqͱw c[ 4|b(KӂUCesn4AÜ}4ϴ۪<&grf;Lo,2s֎ҧr /s\ j[ąQ 'L7'Nr]mw9J>MؠsP8QjU520o\?[fh2QPT8]PEcCL>xop8tj Z/MY/s(PZ'!~ xĈx{E䉻wQ L\*]C(àpAKU}ƒù\dWL;rԏu'>/Q_.f\a.cLxNv"BxxjJ)ŧ -SR  g W 4s'h@CP|jTRIQ~'[Y500J`zbtKA)n.Z6ӗ|KT LJ~q ϛQɡQPEޥґ1Y4Dմ l#ު΄$,{+<^3AbQ :SGP9CkyS[0F?`:wپݦ N;V^Dc=\R"@a&'vQ[?/mmqLk&x YFTeqS?{{Հ-<mz2/$Gj4*Pxrl+>lK{rw7CP iu0==]m a~Tv*l2 gsPң&TL?6\y5#~,x$eӴ8d0NiSFVJ:B٥OFˆ vga, XG;-ky2K2vmx=d|ȍuDm' oLxXIrV9g)ȫ.^&a| n;7xe.ַ-6&n0g,t7Aȗޕɋq[M`pkk_m3Nx/hz RV^΍{25x ^=3^̷yreEZjh1K>mCk<0OI\DX,t`6ib.EG?\ф?pzNH足1f*^z6d Sl8Z84o&ej3y ],SgbH9q숕+̫;.5d8K?F`#oz(VD b8&Ҭy`ײ".3NyV nT@ 8qn4BQpH}-?"*) WRBYuܖ:V^1:HL_cl(h ?oTU+ bl׻Onܿ_0|&+_&+lPF>s!m>y*V^,J|Q,~DR~)ivj.$ W O/'هtѳ٢">+ܑ+L{?W̟AlOy?e ۱X-/(..:nx+<"`"3ޯ@r+ v-᜿m $4v9'$70OO0]W w*GґtJ[¤gZ~;+m=FNwt{>; >oJ`+-_O&Ew$&)k'_dS3Iv&&gzϚ~{sL:B1{$bDj.ͤk&frNN2SVXbYמ1AMZѝ1 LueMm@9Ə'͏i$Aǟi3=2B|NAUq' 2 i `o[rLɽj>vJ1i7ŵe ,HMPRx..}u AD[u9Qa|hy,# G\ v@M67Z`)1 n(Ĉu?鷁HM@=QFOx1yMiΜAG 70]6whpO'r027sϼE;8اP"h X {xJ@L&(8^?8͵4J~yq=3[hClKp.)Bf[txqBe ^7(֪y妑J.ur1"^ÕY#N%*) #R x'5CHoxE2eP[b?p-Jڟqr㠹q#N]DO|4XR_7%D찒(.LT}b=A4CaQoa=x!ok2HNGqY-h3{:HkYߐe^B$ '8;3_ ^}zXf|0>:e6>&5(O>ҊW ryHS32a@biJkwAtxQV(+k{V/B`#Q%Dm`1C:" 1٢9Gr&<"BJ%ۇC|ؓ :o0k9w*wiw"EJ>7bjb%&9q AJYJ-XquRn+e[zE2P]LukN8'Hy--CWbf+6PXTUo\V1 qH)ke?TN.mӲ0kmgwwK F)X\;-ėW?RE6:%t]r ۗ%(Q(դ`5Gs.^TV{$2~-r£[VTK G ΟN_p ֽtb>)F=||^Ƭdz*MB}UKx>Կ®FWSfOxή Zhh=k2xAT:k1Cd% /w2XHF!݁.q'N0 H`ަXO9qh?-.G]6]^Yf*qsVŴi,}pGۈ#fv;Q!9ExDE@:>,fEHז6|꧲,Dt}VmvgVsC۸no(ԊlWrC8gYi lykMRrvSX^I\F|`FVaJ6%]2k{k\^h)Ӽ*Wl UBѢ|BJ%ntHi+fTNb1~ K{s 5 TvO3$8(Q0U)BVӫH/%ΕA_PeW5T1Z(L-0l}Ot[L;cxr5qtK]M2g i7-|HǵGZa][.}IT IĬyLS ;$BoU|EKR锈j4{` =ym?bR_a4[IPQ4>p}ƘNБU)=bL+<؊#T*PͽxlRŒ"f VEO[Pڃ(XNѸTYҴ@M6Hw%mU"ttS @:yq/Ԡ=Ov%76zdm>_gT/ l6tYɿѕg@W't h"~1I8[}Sf٦($Yx(8x1v&s=!w) +3Q§Ww!S*`sYz OFr XCDomN[-lcٰ`RK? KMk2urEO 8Y\R(q-#9 c{ iBp9,xWk_^Ue hD8q‹_qVI=W( Do*jUk$HM|Dn/j3Ys+r~aoAKpj Ox9 >:1Z+< (JT/clV"ebdRMN!vc7~ PsՉSb(GlY<~"S.p¦*M{@SV@5Gsf+sFX% I?=)op n<| 1wmʂ 6z6#3Rf|*~22V9-vv>N*M!;!@ w»W^K'5roN׬QŽNiԻ|bsZNy(Ҙ p<^G w$nn˛Ngi=93-ɮc8]vr1a,"Z_F/Z<UႽ%U%DcGa3.}BrC`@ԇοDIAh)jK*DSQ>PަTo ;Y1 ޾>zGcV9I~1~dLMr@lP3#f{cpJfpdOm _ZQ=,"ʬSd7 79N՟Zj/Yl%:7]jg8<"V-p\9v <t=?&Of8~[&)zUcIoG ߙfeM.$G#'H$CEb3.:p^C*Ny_k:]6c-Ev_ 3b,5 rsS`WY G)7Og!\/c~G!Dh5qdie 6AvAL8O} |= WWy=makـ&bt)%飧nPUډQtSc\89FtCSSf>3`oߒt)(>s(VK`z$սaQ]& . asg_3qy^HϢI-Mwe!Vu ۳UwvD@4c)X愙a$LD@5cn3U gKY8˯ hF=W8%ș(z7Bkjc6z ԡBBɳ4P_pz0ﴤ )O,2ag#̒<+O\W̡ģ_{WJf5wpeuB~pfgѻ VyGQ9ӽsm 0?%b:ThL5¶V7K6;~&@:fʢ )^F4Q M 57tA hyrcxDq?G5-Tʭڠ$kxѯN'$&l[-·XakLLp@O i//c{In6hp9/\`ˉVxfZh,BQ& )-$ VNüЫpu%Aʋ!_ru4)ނSCOXmX˃y`S'elA+$s*58 wұ2AȡcR 7| (ÀJYXΏ}(-m\A#+nrbZWH6<; 0#c="-v>u!R'jҬҖ)rA{ɾD%Vt} j ~fIWY %f{6啾9 #hU3(yxDoyཝ 3.1 qV2's}P [ YŗH,]y{ypp! klqG(5w]29LQr8=}uob1Hx\ع4Sh#!MA t]0 76T abbVѸr63<2bq{*.$[mJ8$q x#٦xB~XS VUtzdń9ҽ!l}l|ZMh:%7[@)8NѧP'BWS[~)|Of0"x :+HڽQa D]3|; -M, ۨB zΠw뼶-J|SO0vĚ.bg:䌀 %2jEִU wjmќ)T'r'#08*@y[ʚYA&*܄R]RC"Tr (asݾ^ʞbaxu ̣G7xZD3oz#c޹),gNdk,ywJ{R`cUyA487pB[P^OXԥg{m;+17^qp󻢮N^< VC/~k> *>8ӫT'XYB?1gb8 ~cV_ Mh-$E'myA*K}ڊ^)L;Tąq&nAu:"fpo yxFn^{/GPgd%oX<'{?(ڋ#kѐB貟J eca {N2mrXo )DJ;Szo0jEr*X,jrf}\16a2WȖRLMLJ2E>-mo) cTn,oPu:"Z2 `" '*¾8pq{ؑ8Gԏ11 ޓﱘ7rg*"Փ^bH+ѽ͂L<#w]xSRKZҗyV0o{Ȟp،b0z|>]0_l.aS۔XB f}j|fw5OfuMr,h#]?68U OX@xxIcLm9j&gS IO&IN2ێa{_Fa¯;yU]6Y" *sjKTND g($5ğǽ5P>Z+WϙcKm\xE(FkՕm@0Ԏw!?e ۟(J}{K;X]GhNg?ԝ?cP/9يAckB!܂q;,NN"Rys=E!#{fp%_H^Kn@@X8rngcm/+SCGJC ^1uyv3)q?tP&l9%J*͒Q[7%UxDo9;>tBVTܗIUX\-~JḨ~yq"SpL?b\^Um{>Ǔǰ/3C vnDAݯUQ67y O?RyuҚF~''F~rhCW, ͤ0;:2sғu9svzZaݏ7ԋ˦V/ x'dgZj')7 " )@>rg#[?ik[NZn7n= J>CK oy?;Fh@~PSgCDv? ~H賐xJr/QM9dRَ@6v|U&>ͣrvm&# u o9H0p3z&.;vg GKQ.$Ih wгA1s[-yM)@Z:`2D2Nsʷ൐08r@.9=]4s軦4þ$㊇W*Y\p4 /sP7o}J/ǮWQ!$Ǽx -|9.]yC!]wd$K';Sা-סG?DAI7.w'= 54 __\!}B[;AH[Y<M&~cr* ġ/6:o.mz&8 Nдm.QG_FW iy\?,cǃ87ȯW%hI ?-T}M;ބ"igf8R?Q C](u#v\"iB{,nA1W|޼,H N{Љm#=ܭȘjq4S(kq7 'P' -v"ZBqAi"fz"#& qQZm/OJ[]lܕW;,ְSW# X:;ݏгh.B}gk×mmXORŜfl@;s_#'2"]uo_y ^0,I-v3c&:i]>LYK ދ4vZ5h˰S$e4W+DfHi#ÙѓͷHUs!ɴZkޗڪ'cIITlŜQ։C}^V/\|Ye@9%xoX]\}=T+UВX!Irt$6dDrl>Q2FCV;u,o7i֠pM\}~8 8J(,2MqrGP ! uwIHXg[%H QՐZ+SZ!oP<E^:e-@}7(mLo,$=ā 0q-:Խ> h1 S!nxP^ 4k@:HW{l>tKuY"FU w(r%o.ɥ[c 2?Ivxp:%aޡtXw|\‘<@ ?| "zI#ޜ' –qN8KxdO=,≉57[$5~+c 11\Aq3;}Od|!KqjFz;~tSfۥfNA]Qw}!j>I|{S4\Q1@ftMPڼ aKa̩&wڰfߜNVLkB:DŊx?;XcdUxN +TD⒚AɳbzgSqP0}$X~2d>;_AH{a8蔻yG,$nc< {ޓU&my!(J BTWc `QF{2ѐS/FңiǥS)hybdQ>hKs5+ F;FL9γWCMP> <rf澻#`5u }YT00v`m)@an~gGHfwu&^Uz}.qvj*ZR,s2vGI쎐]Y(NBt~z(*Y4_7 V=ZV *ceɨb0`C`-i8rtIhk]KEDF'͚i|d jՀu/@t,PE^;A Kwu^BW/ҔTHHM f -eYAv5Nfyc  I7#GyӼD[Uy2t2WBAt6ȆjX&;aOkuE4f*Nbjd-i*5fջF UtJ~{ݚ(c-[wy*JðRbYCvT&zmh Y{~L&ej{iMkZzvO{İâTlmŅ z_]QѾ.+rn~B;Y>NOd2)lZ#))}+@T>L$P)/[H08JgG\} }ߩj+ [LF҅jᒷwr=:^ϕ[f NWܧ")H-rӵ0?j'|s7 5븄DN83'sy&b{(WCB@ nd.d!A$LLF@C@Ԫ FtNK)(-)XĔMĄe0+Ed>!$k7mH:!{oaՔr%ii_(;`JPxյl22h)CdBjWo6h-o/Xe꣣y^-jѴXz}dJ;%bYa bQRI"޴?u zxfn"*b"^Jζt y}D xOQ{WBBo8Q3mPpU*Gu $I"ywSo>{&!Z⛏X̭PuY~*­,ۄcCK}۶kܣVX+[uOցR]5i4È˪8ZӰ'A6[2leM9Aҋ`koH`DʴE/# ^a!U{yAJ:#z?LWj}yU 9̞5+R MPyK;'5rt!m+ 8||~rK:(,aq$xMْ Rq$ AcH6PX&^HGnOgV-ێA7q$k9|ɨY~p딩y=툻Ue >5#ު  {4!GÇN;'_HL'^ܙ^dIYAAm=0a%>^fY 竒1>XC:Qō.E8~Q/%y5yAR<=JN]\p ;9 .,<{UOb#љD|Ȫ#zLGg4WhN >c)G v@A򳛑{QY!dndk7?GūfA;!8,I1MSd =':Bpzy@`o{~PRVL4ag+c'wU a̓حgb }/# )l ,~K2YE6摐P& c񜢨 |Uݬk؏M!_H b{ Z3{!DgXi`VBBۡCtux຿6C Pמr/_~A# 24JJLYbouILl|HPpɂkz¶`훕CaЈk 龬/e 8Q # %b'}%{^ltLf{LS0N|:< E7x}c V-t*/BL[1w*A P~z{¦7 2 d:Xtuu Ykw"[v $hߋ iI ]lv0Jr> Iu*PnVtL;ƸL"f}o:nWѼ/W"s uf(D FhYG 4Y^R5PARp#o~BR^]xvi["9Wm2xRlj㮧_U22aSC+=-tǻ3\.@$>V 9ff"8qĬrSg'L,kbBj_,! 1@@lK[,{`O M)A%OLȆY< E_A'8cGYA>DJ}?\ 2Y|b[n.r%*%m㝮^UF xlja>4,CyO[)NG>^~vS-19;t{'pԧwTE0Ű#Biexat 9mk`s4|T®$H§ ^W] XV_Qh.u`ly}+NdA>e:(N?3vG\\ E;.魁+_G]1 5'x00-_ƫ{.3B1tҳ+_>O#ԯL#ƙ\z&*^ d)T#So韸 '$ 2*TE9_..7^e h6σ9\!8ֳKҸ N X MQ<-]#R JP͊+`!+[]2!]J -Q_ ,~qN )/X2RTO9L3R^w>y,RL ֿ43 PD/%;cЀ>2".F8ǤQ2zLTޭh `Z.؜& 6-ɮ5?#oۥ,Hhg_>b3S>VDGaƐ`>Jr Wg9F)]``zQiy9o* aXk2WS\TBK|d8:MNMlsA;KʣVa"g@K3,ﰄ]8 ~>P Q_K_.j먮a0Ѩgf&._:pl/fxh OG -Y_:kz&ʗ_wFCAף4#tVްvI}%~c#MT{@ޱaګol;X($)? 1=QtWJ[tf|1Qee.vi.y_R>BGT !bn /K ?*Gp4QwT 0/>~1e]:q"dȵCd\_q"9'lM-yMܲP=ҕF+WDӿwhUnG}[歰K~@FLc[_.e .S$UC+bCDM$adcBNA hY ^qCO~/ќH2T+˯I .dհ =A4v/!L 6M p ZEN<^&g #wD`vd t"0- p6 Iƕ  ^'la0"2ZTJttV>(ک\ hUh˖>y 6L0=C0 G"zcTAUʿ,+**+~Bns"٬9+-Q@C"ؽ&w˦mW}־vH O?2ޛTD #h 7{7ѹ~9hEerr&z\d[ƖNǞ\"+w :+-o: WOX/%4C?eU8yQa)[&@U2R_8~eKa!۲!D<9-?Q,@~P[rЎT2b7OgiJ-j;,7.TRٕ1RXꛐp[j4;u}sMbUI ٲCklȜfDIO;j*} >j\"^,hR_=93I8{?gw'p.eyY&r*؂Ֆ9Aܴ[prV5RR<4ƻW #hX;݃;_47LsDs!%y`)ᇆ W{^~,焦ZҜW.Ss] w$0uıIzT@ͷR( JYХT_wGw-[sZf>35>N3JGM=]?SBfhud踄}M' wh!Cɸ~ ; YZ