sssd-ad-2.5.1-1.el8 >  A `6U]iT]ȃ(y ZE%ȐJ<3f-)]XfBJʊZQ0d=h4gIH+(17xQ iBQVn#xKTdL#i ;/OPtT(,~੝Y ~Mtu(Le*?r$6y$KrkSy 2۽OAe!d j!18K]8QNc_k kxu~ j!sA:!Rp_ =hn25  F%#oG H~R"]k ҷ`aOu,+rW ecQ;P[B>ǟ}`HG!U1d'!;lsZԗ¾b[11 hߒ뵤7)|Ks F,۩Ez)Š>0æϷϪpRb닀g2 -cBw~IYef (w?8j4NDpEj?jd   2 /LR\         k    ' ^x FF 0F   ( 8 9T:bGa Hb( IbT XbdYbp\b ]b ^ca bdHdeeefelete ue vfwhl xh yhRj jj!j$j,j?jLjPjVjCsssd-ad2.5.11.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.`5x86-01.mbox.centos.orgxECentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&txK8=OZAAA큤`"`"`"`"```"`@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.1-1.el82.5.1-1.el8 .build-id744bd89a9e20de769e16be9e9577bcc95e24f1ce8f79c823bc80fef2dc74edb62cb17b2f712012libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id/cc//usr/lib/.build-id//usr/lib/.build-id/ce//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc744bd89a9e20de769e16be9e9577bcc95e24f1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=ce8f79c823bc80fef2dc74edb62cb17b2f712012, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRRnug vP|_mB 抖&z`8~XuWkӍ+!N8 Ò幤vtJ*D"DRe uLm+X_DgS)>|h3:!"نr0_ϲ0CAu4`]|NJVÄr̷Qf|e!FT&mҵMJ;oLFtKK~ټ:W(e_EM+K=})?WN7pЕӯ !)kۅަDA rb9kcXX󎕖77dI2u_ r"{ZyL4U8:a4ۇ{@lxvx\"'gR]V yAz: #:*Şx':ƭA|^Bv{gI'@@ze e8e C?Ĭ{URl*SGKayKI|,/Z?N^4sTaiP{:sv{ ƨWG~wxAFM/{)KROjWC1 ޛTFQ}CsC5 %^(~BzJAe K$'NEϕ㔯Yf4)nX]+~.VJ^MJ #}Sk.łs~^@mHv!%瘾5 PjE9JM3V6ըKkޕ|J|`.#C'EjxSϿ^s_EҹJo^Ȥk9/ogƬarZfkHmM1&*N[}bXE`gkSz ųRf͹U6q $)!;s d c=/2P'!xhu=0$Q$;tO۝, _'`U%y;BnKfj>%71hdC2=%OZ/C']ke\ZVa$pQ1㯼N= *lEo^^ 5QE:MZL\]y4C4$9hI%Eoea *zj2" ۶$9Z2O+?o}C3Tg%ks_&oGd\ `6xiKq0?KE$_Ic0 Ģ_˧`Jg#` m Tex|mBMK924`a*#@݂Z処_OqeN-48R3(l}YݒZy]O,T)d+S6lYoz|2[**@Bev Lo$#82/}fV:f˚*Yi-N(E~_ CO=R'^Nҵ;dcf7rfV2-LA IxccT0^_Nf-BY~5 :*82e66'?z!1f(rrM˿L4:U^K0a[ bkK_ H(s}.F%:Rkba!v- N n hG.`yGi;tÊZUO֤ Kor5p-7DݭUDktTV=x`=sR? -D0qGό0OFX7sHhm ?(X?ݚ:$~xZSa|ٓ)QhLgr*4aRw|PiV)RE0}t(\gg+F;ɱ5̴(RG&QdY, <(UZ+o bWy046}6L2n+݂[ϵcN}+cPh]C5H7֘I/1~dU?[l2 -CI'}}*gԒvA5 Cz XA߿֕gt81 &3<wcemKpbER6Bg-b-r$45mnTn ˏJ)1y^F'v,c,ԯMe O.:3{CfX&6vʣԼr)740A)&^+V"aGuL*.?N6 C.Vpui@I}QfmɄb \Sp޷K\6|iúe 4֖/2Krv!D A E FH ΢ @CO@qc*"|3RJ@7x_@l˿n wkHcC g[$dG8ŲzWbme]Zq\VtDӜ?-?(Uo3m=/GsݓC4l}[q(S"_.Mz: I|+Jn!anNsQDŽeO3)n)F3G6)䦁)RCLyl=iK񆛻@p͝eb<]/""]uihtPg?|M|/X2w&~8~$(} UX!ŅEAoԁ(xUo ZVNoD[\<:t4i(W\rxwsb:gҀY׳c; 3[w82>1U~**^S:tR-G;9}w+.. f鉽+n]7te(Q;,! r=!E`W!?-qLi-ݦS@ f uۍ)rĊ3>;^R΁)Ե:]9;/kߖv =PGa^occYb\݆9H>=Tϋ\lCq}Q-)FeU ^$%$_寵<36,'2?j+(sH/'ǛOy䬇xio 3MKkC*vu !u`f`!ǮVRȶ[NXi f~쌁y4F@60{pMpQ_4Cvt;5B_Ou )<9~ X7 /W+1djeDGpJgZ+풓}([\:Ha9[r+w2XN`¼q&W7wv,FJɸbЊpq##ڢ Łݒ3%cyЮYt}-T"P enTo\Z@ uJ s5)\@3gl =_<ը7'Ӭ~2QiAS?A/gƞz'ȈQo_ aR#Yr_Уj%w]Ђe!KSnΆ+`1!R&"AOB8:[RFKO[V& =U4 NcuE A LEђ1s'T*kϭW%~.QcQ ˧Jt\BuvzM5{,Y=_9]m AAJC8I#QJH05MΨA} y-6 ,Ϧ##>lkGWCPՈ*l L[е^cFJsqݙ+-FgqB;) 4v|jHۤ{Z:+RH7Z$v smګkDG:@e19߿:vW}ޠzvaO['b;Eu{sx~# ދi˙פ| KwрCʨa(e^j"Ht`-Vd aǩЏOWnQˈDŽ1Q!_YGs#"5XyeW@O4}ae"PM.*(J/n#cbf{uEc(/OC?) Ml5YW!yPy> zG|YXmSꥀ㜞}yKa)+eJXƪ/N4T2/pHL1Pu9%; qx H0u~o >d73lz1Jֺ-"LywZ[|@M`4WlH@4$Y;}rH<|+{IEG?͌(j Hd/%PM36mO< TaG.Y׫bFAt1:j( NfcL~%5ˍ\jFIT(!QZ`WAJ&g!'bg󾵦1qO]mtwՋ۷ֻ0+f5sFޚ Pk5D ׂ ]UXdWcYL4ԟr* ]jM kF63p6c*CU"{k[OԸYuXEQHԜ@ 8P^GopM,ܤs[@BPwKec?7WCg )qy, w7 ,q.tgh@ .TBoISMGm40¾ר1C?{\L<2X$[T_ x>*z)Qa ^|ݗ[켌/sr}"&i'PDΰɺ 2{5=? |ػTKl@P i.,yCj / .)HhGFԙi@;T}s.D`l" sq;B "aB[e0IBAy_mϽReUXݦ>}c?}"r":P\ׄ+1HNLyz.s;So5٠G|U{Gtve@^Y_f:Anj46ų7~b%O$VC~QL|*Ih~OܹʅkY+7V_sRuHɴ)xFcNڃJ"ҏ|N1%Y8 YFn-75]F(G-b\k`(v),)DZ 07VxlW vUiBl*[ k2Ӓ'Kx ۤ / Zcg##9l1˭&HF $UVl7upJwS +k"=mddq^yԵ^ f >X$~fQ*O MmQSI:BZ`=_x,n{HGr;?J)=e&A+t}쳋J4jۚ[+Kf!cQg횺\j6"6$u((RĜ?>s/ij%LAt-:1nah%%og hYʚk"0(W!m[UJji.4~a><_\ ,80-F}+EI6O=G˰9TX92#!]X ~`0"jbqo>slǂSG|mܣYl g]$Bϟ!rXyd;7.Lhafbû4O^uwO?xE~}frV| ے=Cno)TA'CC,4@-r_ ]ǖN wO_\v*BWkBclaE@u&g+ϣͲ.X2&\(/7مEtSb}go% Y \V3K0˝XMqvPL:iUH@jQNnK,Y Ъ\Q?Yi4_j5[)BNJ1Sh+(Dq|ȫːp~Tp2+fEDBnqFE^;h*^M&wqʧQ>NcOvW$‚!`0tqz28Rnkv*c;p9YQz}L"}mNPc˔ܯTBi_D]v]aꠔ}S c/柆\F; D p4R ie"I2Of8]~|+h]&! N#)f* Az¼yx,Gȶ,11' *5z#ؐAvs7ݬ4cYה.͊q)6P@)7) Pi5;NR˶DֽR*J\]2ց}oYT^Tq~Zj3ఞVl~IT~Tl 7?5)$kpRꪣ=1(}L,~]cQGd| zGO\g%߸8Zdل-\a`>+\~٧{j *!?9 ɭ(qgHRx8Ld 1o%R*kkޕ}K7 B:p敐Lo+dH2*+DYxvM:PTrc2I{g֖P7ѷZ,TG6 P0kW7\KKӅsvC8VƝfhԠ'7?^9mcswBP`E=ɵfCp+=o@k!+(ǍGYȕXǯI._0\޲ir&,6o{h$MIGfY[^KqFO{X4}fpooIڟAWQsPjkqN_bJ+@$7庽ПV5_B.4DX>r9o !$6Y ɶ܌5U@ zHMYS;%9ic9Ӏ4{[HϑR!2hp`6J$W sG Ü'}{h+:^Ma9"15ѝ"uI+c1JMҭIa\QɄ=> M{F&cZP,sj`08nqD _H䥪ZdyO(v2aM-8jڨ ɮYdhv|"^), \N#߂k,aNiȼUx_^*`GW{2%)4_ ׅbDNzݺL"(3gݼ 54P(Zlb?;_$>}#Ջ ~%k\u -"T)nvCÛu>m @Rn@*H`- bAɂPs.K 9 s$`-gˏ=WnI0)(aa3yWb C.N2{߼mMADFb -kox TRe*.eԇ +(a-yfP =PFڠ!ֱة]`bCE_YrkI09^dh'7#S<ʘPKGh l@>}⚣8vsI 5KdG'CORK73of"De57 M9h$ =#O2Es!h F% GkM{ n+Pz1_BNgnfH]-&'pp(X mqwjl|*P9>VHum.%rekdzQ> gzE9JZ>R` ~]vKUL5dZ{_ʷZ *΂q۳fqG˵U s!2;{,e25Z8OYt95LD×8E CFdݫ ?f;5 YM 0r uAYw'lC_j+EܪX̮ur5Ms^`dk܌&H\\" u#k)k%. ؒ@d:M ^Y@pWl3=zVkn z뺭ડ:_Et$ه )R]};{VyEA FICA5;vKr:%H ?幦VVZNܙ/R=&h {VJ;k:Qή@}  M)/ ?*RrW΃ 1*GOXD{2 .fUhrg[t}y_>JN<ʖu btUY%guaF/Jw@ÿ*~> Zq dgiBU~s>q̇$\V]|nz{  OմEIɵ|b-2x(I0A\(5ԯPFVA v:L͔-EwP Sʭ2"u^_NP,1mN#[ &lj:l5NO;9y͟8t$S]E ޕP1d(Tѳ0$CYQKV e et!ɧ&ڷCEbbrX[tVzܰ_>~:;kZ!4s^u(Q<l >|G9Q5d k9S).,̿ȃ]xrc2Vq3T;:=8x(30'`Wu;Oz"*xbB򦀋o+-olg^M8R p5.Zdb4]W7t]Sv~^2z˪qAF}YǸSz|4nzL  Tp_w)cΒPyC=|ħ-g$]y8R`Upc [PQÑ8-Yksk:zu_²x_@f ZPゆN{w+R8H{e cşH#AP`P=ѽ}&4 M2]\#XN jX0+7/IeKuF@身DQf#_grp]OUx'wßseKy hH]GsOX<'"7ѣaƔ?W|GAZ1gahpy,FB72dSߕbX%|zz)IYD\K2EVS" y:4SA]bWD~ Ԝ & f^s>=)+oqX\e?MuE5Vx?>Z|`DcO5r YDg$?JYLr.aEakK6:~[5>!{ZPi#+jy]{oLÑdR[Utw=u|Or:[)nC/eUG(#Thuφp7TB}$8q1pe{lxH1ṴAG $nj+԰ GzN x/N }00|A0V)L&9֓kff ~"͖ϼ 1sʹp]kQ8"j|On6ÈAx}gU f`I.}=!>1i xYj;y՗N.BtxXs4**U~mMi!+}&v-NF1%hX̩`b=)ɲ:MRK6'c6x%TU`8-[vUd#ÛTpvܣ_`~R+I"%.Z:+P4A:U.)"I{W*B;~W$)n2yrPV_2s^$

**#Rbю6b"]gNqkJVMS@t.j3py3e~6 Ͱ@XuhNmzn@փ*oRYEobÛj}Wx;lJwNt-14`>< "}a7|{u^=.xO4GmI@#TxQ`Ա^O# L S)9 -hHBnPgZ8"' ʫ|]zg1f8e%vq'(LOz*c.*ۺ m|G/9!hT\EZP|޿ƃr~d|ΉStēU~J8+\4\lTa9ŧ-mtpZp`vX\^X9W[5=m ׹qLNC'S9#،m!ڲxvs(0xK?Gjױ|N,3B٠50%䦕o [)I emS!4]("=+U֟~C6q 3d, avT\1tҩm])#PW6~(;"VTSnҽ],UR./A 0 ˠOs/Co<߉lKk&4( *z#!t/d$gʇpaҹ`4*HCf0/<tï4 (zC%ҎGWLSɀ ##2P;swq] :nBmVFmg(Q4 %Kfu/f΍g.4x1wg䛒sPĶ8ݎh."r"X80+vJPmkֈ7/C'vgڋ/D^]Oᇋ:HOP8;D< jloTPvф*lߧwd}ѹA `fz@mE[7VDF;@)`|kP,e5=D_\b@~Ӧ8T;L=vŗv:tUqDZ0MF-L9KS߿=={SrH|7 ;e+00`? dB"/q t WjQgn *Ͳ :J8گ>%Idh3%R,;%x:=+0@af6 uOZ)i&.4Q)*rϏ- CNzy2m8j@~_ԵS,Ae%IЯ: 3MSWSVZWzqT;ۙJ -=n~؋#, פ 9Ie>274 jdZdEû&5yӼ! @DԨF $1DŽR'86FR6lN@jfZ/ZMхL򃈗{q9j?bũ_g: R!;&y@,ŹG~ws lS6g&bs,+f~=hfԽTu^Jlw}g&Q 3,~n.h )A7mBŒ_=f}!Iܔ@rN%4rV{lgXٟZb2Jκs ޷Q VWrܛNf{77<4ڍfP 3IN [̫~riS-Ҳoܘ)~i @vlsYI2G˙tJ|CZޕoV}ө2r+Q_O4[~N:cpKVVCȬB?[-tYiRMS`y9S8QOiM`.;jm$f9VE!6<N뉡ᆽ @ &NA Uq/8v(ܸru1Nя_A*qb7?9n[a"1h'/Z Oscuu)ck edCҏH¿Կm+Wl$ YrT(%l ޹ސ8]5UۮB+Ho]$$ÐJ ë5BN=2Y 0U*CV+|mWYNqu C(iA0 X{p9!=xN'Pɴgˈ3|8V_Ŵvo[`t' N8^t;Y3S,1af# R/LHF(W^Ґ(Dӆ-8*_qº#iDיu GKyl$?[W,;" n.#d1kؚS!O+p"(%}_/}M-۬k6ƛx$P59[yhq -]A;vֺPZ:-iVEyÔzv=?VV2w i5DN[׈NC(9߷8cEKio\f&'Щ(p]5mB/KI-GǮ$1U/d0 gW 1>e.fyG"{HxffjӨ p_uCJ@* h*iS̔wFGS3g+>CUBjkC\nA/ ?WD&LYm  s`zJm\Ra[3eTDsKiFyVBZM=}?=rnvP>հ20shMF0MjVbn]f"UJѨt`wʞ_%ĐQõ6'@i=ə@v^4G~<81*1Tcw!/Yqq?tbwTOv?H$}ʘޗxF弩zt&XQ4INcpe|M!dRGob ۀՃ%'h]zxO88XAOV:(VDlq{M@iP(( b|h4oIp 3=g# e'l_]X]Nfh< Z5%gZ/B7I9^Z#+ɦ6uWG[EU%olPEyNd6JKB,"ϻkLAn^mF?琖MCى_YP hwZkÿ\6ɥXO3C>vW:u}9X3jҺb:1en9\.ɭ RASW'ߋ/`:qZdd@^I 6[.%#V P%W4iZvqrj Pu/תī[jwo*dݩ]lzviRitoI.Ə|%T$r`#%\ab?NսS*#: SO'yp_Q2|(p5Q x ֚h ꬽ:C*vc46TY6P7"wsf}qLV]G`pbTU6s~cزYVD6RN%K.! i5Z312]CL~hT֮R>rhRSA3>/?xNvasMxZΝm%J#eV]kRd:jm!֭جq`w.!n;!tBzV[%sw_gihf e_AtY V% 2u2|c)PdSC˞x=6^\ZWYNrQиX R{.MG`/:Ŷd8(CL6W+; ux^KL^Aޒ>rW-1K4-B4=O2;!\AOؠ NLU{$ou~o_=8jֽ{0}o'"wy^9q?>B"䉚aaV*B* ;2Hj qCw!~iHoBc{/Tҡݱ`~mZ˞:?V@7هFV( J0sPqfF?V|u*_bff WN.Cc>NkB'89X 'XpOcɛNq|'}'Wj%+Mw"8Qѭ.tl=)NU>9V;=*W\"ױpS I\IIʼϾxG]k=t\S<\2 gVjt,2,I="N97S ,LDyw^*+HWN,kKWjFPyg7tZu\H 䩢g}u?_0WRԉ-Xibf"Xvrilz_3:]HmQ_wHz5$6>Cae `$Fj "Xb:Xe[ Ü#ROyܽ\ݡƂnV-9Ϛrs7{#Qbd`ΡSpgCzJJ u"kɜ_xt+H x6hm({--9 tFT?7߂DV]Hd$e[nqUĮOB妲Ŵ0pQsُ#FOg 4}dI#ѡa\ u!ܘ 2sHVGhVlgd1PT"kAtx(""n(GcR(}9V.J|O eHD؏|Oz˥ LtiO - 1~ 'VyG`z֭?Bm>=Y+qIV\YЃ̅rd!pm=qP| b xs e-sXO N;x@LQ*T3Q i ;cEe'= D*¦F`Eʇ`,v^F>f FI7 ՄZv+^C %1SOM8l^'"0 hAaeȑPHvR>Fk/W[;&9MG"3[$qcS3C蘛"WYۺjոa)ATV8:C ⻬C*m?Y_#Q'G%6m<4 zIR7^.6~V03GjMz fFۿ}Mr+>`Qf5㟲i%',N z,~noDDie|pI^;{7.X]kalH^ <y?QȂd, :/O~.F ?[ˠZǢ!= kKn@$¤h&&\ZteK4qvF0m藹ܺ;h= XF$c gloB! ͻ}Y ^ JP=@&R. ׌?L&T:7ĔڷV*]ʼn֐}ٷgR >; VMTs+Dq\oԻ "Eߐ(a˯G,߆x)^ZLTp=7Q5SyME-&IBmۃ)m`5"e<\ ̠'gڏ 1_N%ՏM# ʘsLst`SoM- ^4F[X$GW< qx*ڝ.^)TR&"#ZOB a 1ҭ߀S<pHww7p(19>ۂgFC'Mw8>`ik"K΋̓dey2-8,=sBI JzCXNWծ*f@sqtC+ˇ$GN \jvtf296D{VhA%d/Y FR[[^,c-P\_8P3t(vUE,} ({CʭHM_^&Sf5YUޥAxi΄v6;a]v! qC JEG!00μHG QhKG:q q"Sǫa ~k:;J"!yp 4z;l't) i'A)( y|Dp%DP(Ñqk'C'` ._bIzuFF*~@#L_Dh"2w";W5Lgv $N/lq6af/ѰcNa!ï y2[s.ٍ4Px%$z9|}ZU[8dßI3?HvR험/J.Wym#КgPkϠi` 35\~Sqh&s#4lSYӀW6GnBv|r4mڢP&bs3K=8qVI &S)B> V nsxN,RB{bLt?Ŵ'-KR{TlT3\3v0&4ew|c$jRx#<~4Y5Q)F(ljr (Bp쇣@Z^Qdwm71nvwq+2[w?񇮉=}mx.G| ̽}:CsVX[a]_(}3U*.@YN6VUh ^6)_j$ðt?]`.B,f\CA >딪q/_״,68ЍS`fFx=ĴiPC q̇yJg}d)۲D(|]n`rdWLRb봫1gf,g;݋KؗV]5ݥ; ]Qfn9)SPn0??MR.q06%1KCb(T'"pT{ WalrxUF ٹ/šZ-ϙ̡x5]㶾Vq/}i-}wpgZqi/V?q !S4^zexz*Cc?;xFČ(rFW93GD *5ָ "yMߡLQDS)QGj`aD0:7yGn[/ }/Cg_BlƭL,WO@Z;mQ?GUՄ:iP3#C+Pd!@#7/AYf!P=R5jiZC<|U 2PWTs5h7C9JWĔOR-K*Uzd&5ԂB1Sp%~'JVsثӤ4|ךN^,3pu6OM -KkHXx> A\sTm/9;+5MQ(ogNZaJC)5qQvVR>SrQu:QX'd9 j265+nݾeIg w{'tH anz$VKr^BH2+ 'c!6BGzrY#QE%YܜӀtW޿jG#n A6m/ls>ƞϼ3r^y&֋K+IUj\Gw Nj4߉dK}Qa* 0wׇe#Gt7n9EDҸt2Ho-Z zT'R-@ Y~Ni_/v;kdINC;%Htմ}{Ip\taC c^L7a48%wьwZ'L(4&('&LH;ilO "t\3Y+sq@˝IοpD2``ttiAjK)deL5-†Բ7VyCoVa63uvmyl2X~T Uj_@m̐M7,eCv[G>1yq>r%/xy"tHf!)l{ɇx%zXH@n lw&XIQ l{0B^#A0OnmLK[8׬1L{z*ߌ/kOC{9qhI[*aEe'f+OA4,굎GM8,?q iQΥ.Vw -7fOYa?_zd_MH,`xVT0%vip-QqS:w_;nCntOͥշb4\a[I_D!y-T٥wY9U4Ds|,@FeSd$plb߷6zê{|< U;f1ِ+xANj">k,6Sgw -Y"PFT_R\~k+Si$\Bl U5Ȼԇ:~}]G EYܶɍY# d`<}*QLAeI{},oNlH)j0g0 X~4 ~jhyIy1[n38JqY>{aˎEPqWÀ5y-(QmPFA^ vHtVkfu#{פS_q&w[MwDsWz}HgM\|ečRiMaLA<źt 1;EgMY`uski.*+t!pY+[>: Sc4. 6Xn>G-6 <E&u6腽#`?+&.' 5-,O>">¾L˕B7n'g-'h @!-{D'_DRգBF9 ZHmt9]@oڞݮ Fy>SD+7z.C{'.@.<ޒ,-n%u@^y!۠{V,wH{[p)@RrjScN;_3gf!+wx[\眱vRGj+ $ѫ8ث<$ŧ<"P?Bkr`4+z:Xwʆ}(;:fr H0D\4DJ<[ 9%PEG/L)螯 kbO5I.SLT?3Ž*{ʜda_<<ʱ{zLKe*י v~ c,m:;F)찄[_{Zsܻ1 Z4iA q+.^ D! ;V`Zm- rJ?i#u]߬[9 l3=$ $~C'.6`N/z/Ȟx؜| Al<Q/X:vKCuU?8˅п:q795"-X1FӒt93KW)G7QrE=ȴr#ԅ£7 w,a!lwEg= zVMufV{gh]ז9+(Y+ĝյe)WK7Vn0Lvr%f'/Cl;Sïu0cXZ'9\oKaͿ0`u+gl|Yˬ\f×Q`))C2?@dyΨH-4b#[nʹ!صWv6٭_ObV8~H\ֿ0jЗ]&6W4-1~oUt&jXE\i;d%pUq&9U`0AEg>0b4N#m: 2E_)Z7i;%&m]ZF6IYY]{3bq k2J|=;j R/f.ЪtMC޲z0^wwם-ɘrg)d;_4匊Ԝ&*P$JwuZ"2L0P]? R.b3ֹYnEbai9x[|6;A[LGwFlDŽ:)+&ZQ4}4tWhV2)T7E:g>g5(Y׾z` 3Ǝrc2(dD??ׯhD7)FȲ|})3xܾX$Um,O6T~YA|S}ޘNT%McJp#0,)OZ=cx BE*X¹Y蜑eAڱf 00Lc1#l~>@F{q~Ǜ[YO0cݕ?fL6?ЄS|l)M{)SrL9 (Af -3pPzZ\R j9"P]$hˆV&Gdˌ<&ϟZp!.wDdߕ{ )OnJSf+⅞F[c S ?[VZ&A_ aQVLaDCڤ̉Θ[!Մ ~;&XOYxݳ".TK 7^s|\R $$x( dƍɞ&pK/Az;J Mz%iZ_"]gW$Mm5WzD;Up ɻ,ϠE P(i2:c-?̘CyWIO`L xb PhfsxKI+,YN!@j7C)#މY:,c+d/my]7<3.L!rXue ՙ"ыIe˜w`9 K (|KTIN ]z"fk,G^n";f3#Bp4_I ^BY[;f Q<L8ɢ[Sq86ʆ :l9բ<엎%N 0/c@ޏ< #}vaX8)uU䃰bntKiHd', =kc1`q%Lxq"塇_6r[O- ڏǙ2=66]³gCLEnr@t80tW#7:iL+1Mi93*}!= &< _l-6G:nEKrl`H®Ј6I]@0B- k#[ S.҃KN5 ]NUѢzzL{xrxElm;H6/U\ (g"%A/CsDCl=[U(1mCudDuu \:%ln}]Q^0|2w%aBX1gl)_F0LJh*K~V tK8=Apn{a+a#6Ede#OO (1?RĘ:N<>`3Oܵ^a >zIa%-,ѬJ"Kh=J{qJҕPX.)/n e 'I'6?=('53l@tHcw#C8Ll=2 [R%'w K 'Ŗeꨇe6z+ySډ;"{L?eBI8q~~58^2OU[+na a]f5n$S'"HZ?-72Z-xS]T)>2V`MCt6-#"0 -񢊈v #:\湦HI76x֢nIo?Dq$ӄ.M 6@[hL 8? .9D2'RJ &P<;ѳ}ydMCEyB["FRk7(wQ#4싯fآ5 p QK`ɞ5x:7`mj=jWfy9~u D M ?iR,9xBl\KҴ_S⭚_yqwS5;[n'(R4X@­.;:GDs&]iYUcކmKp\\4ql<'PMsq=Kͭj*9r:@1{w^Y-ߕ|!fY1 k"ƶiOVI_)f(uqbVRbLMSaO1!J Amz4~ 7+0BvJsôq~³5eof`CPM20kj(67(i,ӷ' ,kv@X>5ljiA欸ݠw5HTQ6penG+?z&j0I܊@O;鮛۴h׼H7`3dhhNz[xޢv{bFׅ%(7 ?^X hʸ 4ΔtqHyϦ#xk@:]&t'gbuF 7"{$UhQOU~`_!7w|ZޛWUR_QA+BWgIT߉d D'0cXZ,E[x,AА5dgDM/{ J$&mIGF[~i* 0zpI4ID_񏟒ZzF.a~3dCl lh,L5TԵ5Mf LFY\פScs? ^o:M -ppE.ɸU\Wc^ sK[5#|*s}Wn]mrabU᥶OjFy6;pP IfX$ qY"[wly>ëa"D3 aNi3̲v?55ƥ,Bjq|zWjyӄ-x䞝^^=tbs$Z|>~ y ֐^F:_Mb i6(`Ti~e5蕾V@ -=4eUCOZh>>|@"Vwh&~R:YD 8[ן?ys(/`ce.{ U)QT`ceAtʼnh/~RЧ 鍅mp8)(fjl@;~= hJNMRJv00a.0}'O@)MK۽tl=B%W5 =@pzHx;KƠlmίiVo0ϩquk^m֠pԃچ.ζE^*8f;mQb^lWC)< c >QL>T pּD˷o.֠m3]콌O%Iw\뭿șGOÇ]iܒ #6OQw s|-® K^Pn%.L궰Q،YG߁6zJ(ϕ:'QJUo'dl_?N_jڄu/&& ]ZU>R曌l%ƒ%4N_(h|̇[Y@DS${/zǹtPy#WLw7m_gW=ڭD@j:r_ <A`%ῩH<7 RKóx* \m~JjUxl̝R,x 1G8g.{oHziw VQVtPЗhV1Lic|T?".˳F*P<_l/HfAb?+4?^`w/a?\ ZgMw%୸p2g3ƒCbg/ JPW/2kdEcnzG:TS᠘u>na*c WD)+nP=XVvXt7F.5-XϾAG>@g5H@Y(/dz7/[ןaO.>>tm^4 H!p0BpcR弹.VX$,f;*wq0ᜊut.:r)/i#EȌj!.A@+ؿ9Ct:P/F٧h!ܜx匽ɫ_k8iϦ+G w\4 CUi3 ,Yc%eB!$`:&Mt,~29PKX lD;}]Im!rxO/&.;Zz ƂF\ aXpƥOgLWwN|oUu٤Oaʌo%% 4O:ϻ/X[1ϣ TZL03Ͷt iYuP'k!NշDUP[E\ki ]{gxL6/[wF֡vg cP2w(Иُ/ ߽KɶBQh`ks`"%=^ި@֊pD1;#8|ugG_߿j@TY,#L˥2{CSnVL|$ n.o &nf#q@ň '؁IWޔu@XX&ӷ^I3k{'"?a~U*#KV2"6I"CLd>$.D7 sgU ObzX 8P|܃idSɯ&6\v$89H퍰DZ">%';_?siF ŕr)?c4RvUZ a% jx<2OrHF|"\ qsIsѦʉQg–]_W",(A?$z $`1HR( w/kL~B]JUn#HȖ!/5D -T[#- OZqCl]i9xhXRT5!MϳZi Œ k͝={Ǟ'-橏Bmdۨ/MY }ZѳTȪk|s03{~Όb G%J: M:M7&rK)ّy& $8i6ghᵘm:ȱ1ǫ[b՝2^ <ۃnzZD<%0t%履@k%,nAϰƊ|K817)+0_9g "˓L–Eǁh&ayFW"RDYKxfgAEN&U4?>%lg羁}aNS pS#@ qcDNB1Ufϱ%1_ ;z)q 4Y:+IxerhxIl_*s-0*^e?bItYg12t'{fJG>M:Ӹ!՛v7.즧)b&/#g fE] 9A=}=n&|}᩵]9~t W#WɦP@nWxCu AQR뷜@Iz(?6t+v8~|PF}4) zD}LzZIVB֘YUuftfqW̨6Q{ɯ!^w=jo/SYg0n-/]˴b2:vS )ۦI"} h;;GߔG wm6P4Iɏ>T(#>-Lq,]6)5#c8^٥`ȝZhݬi/k0*1m0IZֵŃͿD;Gshd/1*,ꅹ$i-]L?H\ZITlY(f(8t2ʻ[z=A1;ȳr} R=eL9UddyJ_X #-=˸V{Th$K?62cZVuT#!, s6i=ֶۚ6-] W8c _;K1bg!w=6|gH }ܬ &,h"O蹥N<@?\ONjT(t%[4g1x ,HtvIͨrdj`;%u7^Djz;iFXGַmPQzƵ}רYLJ@ guP5ﴤ˜/H؏r5{8( fN] sr}/%* QEZg.7ºePSB>vc"78Ye^>QMDİFp ,<: W=LCwi<5%C[) `2ʚYx^J ):5(MT9ʻNyO3ٴ#Mz%;*&Lg@4槰QiEiJ59yD1ayEp̛4Ν+S:sg8 JS!A,(п8[t:=$RwŪRg L[kuD$TP1^?ª>?:esg hP)zҧ"Sy CJq1B#@b-G^'Zgn!9fKV2q&Dz#u͍1;Zb:?` )Y)?yLDҡUv$,zUSZS^ZGB#!mv]%]4!i:cU +|p-m"6/Q2P??CG}c,>өa.ѹ0bY}~Zտnh !U}*\@%4w\oZy'GBAXK6uU&=P=-/ܗ^[(=6=L`XJ1|-\SݮdGJi]6;XvhǗ=#pwqn > Er:e(JXj}mԇDoBmn_ˀP]IdjFh<9*|V׈lrIsVp 95>k1&jn]N<E?gsZGuEl"lN+0}YRԂGbS X͢4.ځ_<#x_@~cA%7ϴfa MӺLϕ7P}KY'a}FD)(`x` :jo͎cM厧wvsz]EIJhWj Ko1;WRV 4&EG`vkt3G|U= ybys.0\+& ƂflHcN?;Kgk7\xO(ob&ۏ8FIt0kd57gI+cBt #G?f|(5&{'?/7@LlLʄWI%BLO;g~o r+N?C3y7<;u/XQWrG UN^|RJH;ֳbePc0 z;n8H| $MP]н~Hcd%Ch}9*۞5l6xLG.s?z9w}.IIi`7ket6S1=5y;ӁឬqɘB qiʄN2Q\ؼeZ"2udBdL8(©USTsP˿4N; (@[ScTc( Ms(HQO)1Hwnʼ^"Ar6M(xh@Nh KW|c?ށ7vBɝnͺ}eOP!͹/R#Ds5 )!sg2ܞcTtwБHǫ&E+Jh>sHW%͖aJgQz\!j]\s\L3[N[)Q~R Jk+%Luv_I-UBsp 0egpxf08&'ߧ: G2iٮό8!-RiMc}˵nkɮkoңj~3W*|H6+UŒx^Ntv {cLR̢uѩ,(nql֗hW\A$ CWhEa:ڕ$ g;ҔxZ,;$L)qЧY2YA ߦ8 pl4\8`|ϑL51W:f'kZFN?xKƫBz*KptERj5]׎Dߊ(DO\6 3DVJKp~ˢΆzsCU% Uopَ+؎kY|ponzG&"זډDlD/χ6]#mD"QRD/4zD% tD`qգe](sgw1Rn@>\̜C)(I~sϚ$TwRE\j_ؚHK'/(mWEĚn13W"Fe>$` 5.8[K`n|  t;>r &ޞF|04{7+Do9~+:EW[->i&:YOjHR qHCRA ٨h06NZLQ2ѹDZ%ǷkvWx#Vc>@^$ k^;D0OAd_]aZ!PmArhy<i2<`Z)O]gQ`h߆z#a*c-B*@)+! Zo/D:< $.mL$Yik0`^4lה$z$2ڟ7 C -5Yun<յݯu>p#hJۡ"T{v w8y2OJbpعTIOI\RAIG^!#>+G %7*w \(?mNgh {wL#&Jy%IYyby4윢j=ǫwOT9"{BF=B@\S` ;DUl( *m]* UvZtr(=K~3>VϣLɖMQ[D uDCvSjH& LY2 P9MEɥ7|Ĵ8`*] e^#grU lU\\!vj̊x\. UjOj ZÿJ_Y8la>+( j0ۊM=r2re;5pD|_g]wqJԿIjBdJB~he& dL#QVl"8戨}Tک5Y]C.Faj?"N?Ͼ*iV2vu~nq2rM|$8 si=j,YB ԫn2,Q": o=._>1ەȸb9Z$94EC$ʎI+t0W@+Mn Ƹ@4zFw/Pjyn eȖ{j=O64umXB?{]^%7nͦ63mCrd3@0zTbI9 !^Mg}Wd&6uIip4A[s~D0Zۼp"t'f)o_fH "IG3dɧGJvP}֢1{{՞Da)7Ino:ޜY_\-J!9x)`ك&K7NգanK_M}| -Lp Q?^*v>yw"_+O.$ B7iA&&5WY%!Q:ƥ.4ya\c8}k(4bN:G3RP珆FDwDM7{ Pb¸ 6VJc-ة,RSF#DNR@zYmMR觑w:gdJ~sa= ~F%(]%-a1Rҁ.@TX}' r߮ nMOs3> >%)].r#ƋyFϝmU5Щȗ i\W_;a`+z;v}(p$0TUHۨ[N/tŲE.\ -<$;PJ9LO5zh*@H8|;# 6V&z*3d3=mjHiQn҄eL_r܋lW;-!u"uk- sAe/ᡋ8-`#'_31x(k> m=]vd Cvu9eBi'qK:K@c~]FiZ~~ѭY˶zl1}kt J FDa]NUWWt&c{u" ޠb0Ԣ`eY(86$LLMvv]NQV&(̰1z6v&I]$yQRljmjf갽,!ktڝjdotTAс&G)GZҟ\A+«m`&_"B=kb5 }y zYRh(7 !$ "&kB[(m$0)3N rt\.Q z|/@BU^ x ZCަkDRno5"[ŠF^}ڇ]nF ";w 嬞s@BX&&?JD-N$:L{7@S5D]ÈA5eqM(0o ۏn:CMbg#3 Qzm,h::z< fd E@F W)nBӯFHk~$;Ru91'>V>nn Eژe;f7ƤEsT™CsG)Tze2?ZPN|_+qZ10)3z=DmADeQpB r _{Pyd|~@ǿ:οy\oRt+|O@lM'. 8bό*Xs+i^ HAvCEb+=c!7D`{xC ۂ׷3@R1Ѓ<`jR4anu}A`jtiK f\DR8C@p՛Ydۈ|GbYs$7w /?@O+&B 8dyATMnmF!WГ|n "β$1ހwdWܖmzi>٢R\e\`! s+C!%Q3$R>TmX; vgv|!Bŋ>f\bd7Q;Z1ᩴ֘NPQ0(G2)χl\EX3 wi8 ]t=Rz)Pbr9i/D|u=oղFYC)B O޶\"4L+M`k/~"qew\\\sbYPZ*hIH**ܥoҭ3'Q<^;/*¿<t 9niɽi *T?eq/,2~)[i2fvvsNzySxﾮ5 C.!"W @q]hXFWMv<佛$V앮!ǐ6UDomYVj/5b)Ymbs0?vdY+8%p 9/",E}l-5kCZ_%nM 5[D3D 0 Igplw,;?p]#hf"c/T0` {j}Ac< -mEBK>E*# RUC'CM*Z=c=rh(ޗԿ/j=g*0~I ' hM":~Ṳ n[~_eO9^TҶvB`J,PcJl&2r=7Uzȥ#h=ݤAZ6ȷyH~< 2c1fpwz0p8f RH wps~I}!{ do[Yv?,Cp p}Mԃ3:vcɻb{gמvpY^^H :% ĔoGYwI !К˰%OJֽmO gu6fO7-ÚU:y(X_8-}Ri^ 4)_X&rRwqr8k0q=;g0T'_6BVE_8T5;S!|o>vx#)Sq|җ&TEv Q}W5Ggk2M^"fF`уi(QHeESHlSW| N&;uV&^nmEm;9~lCwUQ/B ylPQPH)ϓjԔUHMBy/ibq|>Q9,/uyu/4#U2yX |/HU*;;&|EZ-uHz"d7ߔ&,|VkA FZ ip kL cZih!OLRåB]-%!ڜ[O!_Ps+TGyߌ^2;+HM5. 'Pӿ#넒j=&.$T{M}H)ƥGP4։24Sw Y(T lfg|GrJ*E& = "f/C_=Xt?-9y,Xư0' I,]B=a۽G^Lwٷz[%z )9@q{ b#tE[Jc $̽9:O{Ϸ皋DlIg8X3z?:Ga&m&?wl  ˝y44 (u?a˖Q 3s;d>O/n8T&s8@N?raЏ*Y[G%٘ Qa0uL|٦;lz7sFŦBWοO*4Ոh>2=Пsr3_Ru 5N 0;r-M k&L5E>Zāp5<{Y=UYݰh:BA #D\}t򰩝%zzbf*0 P޷"r0'/1O O\cUDur_1dBOPy=8õF 6NFW5Izj:̖v0M]X'K1}a/9eW]|rVi^W1D/ί&AlleQNbo}J9Ap9B=#RVʬ5s#]h@QK5I[A PQTO#+[-V'6yx0<]$rXвLYihh 1gjM B$\eQ-> oO >lQ6|\zw|j_Y vȫ1 vx>c*PC͵yuę9dQSMY|eLcbd Iէ|.~k BR ~ЄAD[¨Kr$_OxqRƘߣQ܉PIݝ]s6^X? ֚+CNEs3h9kp;Ir|V85d As> 'E ^3{XuY>#+Wvco4|r:#҉LJ+&9-OX̞@'>D&kbSI{IEN ||KiC2ɸOb4{B,rtvD/8odu&Aplz{vIiƃ ?kXh$o"U+ӵR]_.3c}DK] #upH %cspJh-XilupfR9YtKJKI_h@ODMUJU<; Jgh0SP GX# >2m0k|u`Mg^\-=IQN6 io1)X2z b",u䰜 W l:hM0RQ`J =Jt5^/+l?m48ჲ)cbXܳ){c v d?/aM6rO[_-h( DL\1J/ֳu@H^-He_R,H nCQ)Q:n3[ ;Bg&Sx\{lt'ma]xtGrw&D i >~6!aEr"j2Wf#*#8t |SVԆSfcb~>Ѵ99#xJSM  &t?vƆ>T2VG eRW uKL*KUW ]?P7q䝞5ԫ)E,.LYdqrm. aVV탱a:sߪ&;̖RE[Qwp$W׌LAQ.fdWD;=d(ωŤCtcQLC{*}XN`TM$-INl^O1#*K\VD;K/9%ol NkiJdI|Pޟr7u]:Ow~aAV&F{[7U,[cmHi[u V#y0 *"F0̎tVD==I.!@s= JȂ7;[}vC (DL7P/IT em0F>K`Cٵ BNב 4 ѤiGQ40"3'܍nC)j;"?1%0^ARQ; $l3Ǔ\1$ȫB;MXH"n|isA[B7mQxܽMGt@Z(w#& ɱ*PͿvulXؤn;,w8^HAɘOfYy}F6yz7!|e^|W13,}=k'*Z/_^K#^(hM)妎4Z8'|OE1fhg@EaJ*{_W:oeW:@`:4kS_=V֧׽w)6wCw7KϚG]Vy1cImuUE1W9(cߡ>(3興k2w5`9-zHl3ZEwSONMHL4*ƻz ]Jy5 Co4 5Yn7:W†/+L].: 3sw;X\,$IޙYS6Ћ*OLœ###.uU>fBcpL}[pNj>bUpa~#"cEU&n d_:/[UHj5Hz"< ulrt2F[ Gk͚9 K`rYB ?Sߓυ ѸCލ#Ii lK6:(6nMI +/ƈ_N[:t( 9P- mc- c>=Q"88l*TvHXr@EHNk Li ^2mv ׋/R.Ӻh.+ahr WdJ"N>Tț`ȬBm}֍eMNKΚn80bH1V>vtqxrMCwZҳr"XE{/׈Y齫z+7ay~cI+ H\~5zWJ xw0X~8H ޷JN\JC'5[C4T> ߯iŒ]LcEP~*w?HGz{ǯfI0&(/h(+MѤ wx ҧ_er *,Nl6j!!8y$ 91~Na`(Mjm$/%𪯹FA0y֣UotSC]/VԋtʻYJs <نj$1;Y1;>!oU}˫%6ٻ#4@fH2݀PAeP \Y$ bSn)yHL ||R^"C= 71,5_$^ \~,s\s>7 cR;~!4̗Ɋ#gT$LD`/1 Ը%&\qK%iB$U/E?6 {#,fRu?rͤfNʕ찜BBIRQ.D6q@%ԗ[Ab7pߧg_5<[x!P+/HޞK7o54Vi; [g,,\oJr$w:>dgP4riT;$C1#I@q Sykw=-P~\(G F.ŎPMT4TDDL,f(cE|j梔IaOR(yQleLDbWlT /9"ṿBİ=0oCB J)3VL>))֨'B| [EO9 b)Q=#f?sM *rDIq5YSP)`F(A)nuڨm>io}VG#+´L8bi.ezbT~{܃<,3īM9*>³KQM*jM_(<3PhcK~}@7^|ZagpR-E BX@ (d=ґboTy29>#sqb#x.nW!oo_?Y6i)̓chä .LaP⫆TrX|)v~ j-mi ŋzm\Il ҟᴛL+ǺӚИ!(&PaxXKHYPDHTy!m s.4v=(FUS@|rC8PEVLۧLfloaL˙ KvVʝ1H!+ɴkCwp/ҽXWwz4"l1TBM|z^D`.B>xSNiey~@%g AJJ7 Dh_{̋=3P+! ߚ}S]ҽ&NCԠd+X+YͤH;nOWBǎ NΟoϕ9SOeu"47f(HkWð{PP<,fu|1*Zn \9ߕAD_G*쇰|PsHJ_Z-,S0ĭ$6!KDJRX3fyV@=O˚@s4E[-#w (qOH̊hiYNM41pM!&fvG@twVVÜ#P9Ӣd6ޯu!!, o} @fVVqpFlR{Q44<̀i31IPڻd&Nfm+b~dq\&"\𘮪aK~N1L+qʓL[We`2SE; NYԐs0n.oy Z7g1⡗:-4H8sMPmLsJR 'f;_VzuA)JFW; YR7V_@#I.W~wB\MN'Ρw JD2GBc@Nh# 0xn MTskNJ5)?fsmV3`I K9=5hw5HS=fdTHo\#lϊ@$J \lޑsK[+=p[-}?fM /VҴlP_T̰P6psm<??}ak IʐO;Ddd Am&.2ַ~QR% &nWT]mĎ_S<`UC@dymH:'YkM |: X)WX*'?ĥĢڏ!ju.6E8p2b.+#ucF LOмHS-/!SPOyu%C F<&yݍ8Xa}_>!L. yY(wjwe7?QNe۩wqe.+,Ym|Q,T^\{ |4:cYB '8iLy#k.7m6PtVƙn!Jva 1$]zqX.C#:6>(_kiG󭆂Y/'L'cY SU!g`nR&k-^Ft{} 6%%d r&)*'iΈ"o^:k]N30q0 kC DݒqvY.NG+Q8Yjya!YPMW&*RA˫ۣe[~mHOuxnd@[2 krda<(tq]4vݧj ߹/k/i)rD oT/NɚϝWo[m40]?"KN{?eH/.}\P2x{<ԁ]Ag\Z/R.K5%Ul>{[ccMZ|:~;|]t\ %hz:^;('.{[/ꮅvwlsKD="i|!b֕E#E{lS+^h+mh %Hx7 ?<=tWꄲ*J)J2DFܷP)5 v2>v@M0/5CPSNN;'X.}Q I+uٶnȾtc߲R&ѱɌmG!egL^\OO^;ѵ?Y G󁈠 VAPl)$0!QbeH>Z~Ҕ/0q7i.-n>,aѻ]}]؎wfRaǛEmCrPU8+ BWJW<չD**B8֠hzdwfݘ0%qB=4wQA%dYo?i5\<`y= N;OF~o]GGJ& >+<Ɉ622:>#1fFYSY{z2Y .f P])acs˂JIXP%-VQ-x=L҅{&mf)?wy4U%N(ۆOٶEOj2`ky' A0WߓT SmήDD~3r`HiT!tpwn`ImMC}<Ա 9?#B[SRcnW,FA0@np/ $eT=5)E5 ƪBue#tRdCyy%$8bɯs2x!FLV/"F4aS M}H{_גeh&AwAzQ $BdF2MG\MػsW0 kEeqM`<7bs-~|G8치j삧`:;̯C|gTaT{MN`H!_?me^ nGzf[ ?^$|3y] {s&F|˗IN{ tt(!_Om@fcQ]mGvWy<%3-q~{PwV5T \dhc.2\44S^Utǀ.\j8.,bEeT·`*b'iyBJ :|,v 8Tجf_2%V|,/eگrNxAU12 z5F̃wCGS:и\&!ww (Uf$XH~Pn܁L=yOzW|㩕F($:y<]k9ޔұSʫIF)Łc~N}߷O摏W}P\/&5M.Q{Or6jIw ]nu FQǐ,%O=yl+3M>YݿFm+s2hDᭇ%<v.;cLAkaqsFȁQE4~;uiד ӭ-|esV'ͽūV:_8N'o66w; ?7a#4N,ͷ8}.-c҄& *c"gDA:I!λ+- ~nk w⦄e9bz' >ˍH6N)/"oo+^IsMf ɖ ,m.GI VT^h--g$_y˪+&15/~"l+SK|_@&A3-;& Y0*~6He7Ei9e>gۖpB}FOݢA|mc27J\3Gc-] D;VZ͐CT㠪D`ؾ̩>b0*6u\^]kX+7\&ATp7VTOt~6PHr:,ڀAF ;kizLj)?/q>v,sM\ylFY!]vևY]Kc{l#'@뱈SBfa7zCB#q1 EVt+$ـZ{[HH )$9ln $2j3utˋhD$%o?HN.X˖Qr u8LX(n"`=ٗE1LlxK*y΍ Z &)O?y՝1+ĘHrL tFP$HdܺQ2(|~|XŰ~"h5V ݲiETsc2[9_tVf-fɳoZwpw oX@-)4j긩 >su/c!d;ҔMi$~,hm8kJDԩwK2M%}Dj%r`y2 Uh!7 <}zE RǃHpdaǔsEx1^/Βr&xJq{Ek"zAAJ&K)_Eu:1[B$w6&+L-< r}}яuU`%VӎTEK]roF|R옫@/[*V-'vPךj)ߌDh2Pc{ bjp;Te2v0v}h~茧| 6Twc9O*S=[DKS\ ȿαSdWOjv̮)J,p rHn;L$Q X噛ׁ:w9XAS)np^j5J(i25s8?۴L޺zg!)gKo7NG\vD1ձK%s#fIh(y.=+sB°xΡDNl7%8uhwBB~sqwҼ*iĆ+/5&J;L܉3:k+}!FC3P3PoχFFN3 /R(Bs31W^C7># h\ =s $QefVBu%S9Ldiv<\"Hɽhھ64!$?_e8s01E(QQn\GL- X6b,5l0$7aؑA֒O,7+D|S;/̤?STߞravKht!E䬭$%0FB ѹIܰC Zݟ3oXMy_+s5FnIU *J L0A#Pv3՜5+x% 0|у%EXNuO=b¯+J8SSi!ڽf^gu]yHdqD<,Cd45`~7$ lYCϫPG)ۘZC ldZPTJEuÝΐ>Ti1{^b!E6ҭ6(P}OUMhAr7WQ 8yk?9gW&%OK5f~e__ F- J_F-/&( F Ht8$z!h@溨zf8GFh4?y4]HRLƑx&KF96/JtAɫɞמMF8%|oR&n^v]^7R,7۶q8gX(4 %A|j&/iP1Fw4'%N@n :RӽNfP!=r|0 b^1bJ`|)?oYLvaqyG i\3>k_\nZ|;y:6q-}>߁bݡw'D d*~#b)@휈:Nڞ0| ?0*e&?գk~}Qp83%uT=5棠%Zd)D#G05&eBZ(_³@𔮱$?sn7]_1J;Wǽp͍}>)ؼI(.|)h~aD/6dfi,aܩ:6Ru /{a3YkdaD|ÁOpF@T)ZiUzOߙ] L0.Fb>ijns9"dȘ3B\M--n6#ؘD)hJQ~#Lq c"ŏqvWdŶHWYA KvaB`ZDUs @-}e\U8Cg-1|OcE1Z`˼ţJ c0"/Lg| pJkTA6O@ 5A֔J>Ȇ;`ZpQKHk::d?I&4Z9 ͊M=A)R8o'2d[P?P>4W$*Ѻ /\,6WQxv#. +)(Y,Ի?JjÐ96v]^[ZCӶĐJ,D|{X~ oI5T,E}/rxDt0n7p~,2 q/.}GWXs# fO =$*$V+ˋwH9mC*8Zpa,ٕ=@3J&ݰYG{d.RM|[XX utϴ5xiw9) ;ЮBToҳY^ȹΠ=%lOe7^^srOX5!S |@3tI1@K/h!*dB@"7c.v, y+5Oiw[~ޢf^@Ny {]Y&vbƀ&؉QQA{zRB𦧛,peQ3?$vXhNE)vlh!)&Vb>95zȸq dwe.BA?1'K'Oͥ<u@"XvU*鰛~tx CYJXH _>~mHf,*(2'<| v~Oot>R6nCJ^vB>HHyj:1Clsü_~1yä734)p8;[S8ƛ+HBiE ˩qgq*ACo2*0c|n.rqXfR/\2n0-e'Ȑ3 7N a{v05[c]Yv~o|35tl m+CYjLpE~(6U]}?|]ȵ6|ԨlF1唠\uߦ,6 -9/c K%io4=M~)a{,yb.|?T vd [)5!FEs++_ʇʰm5'{s3D͈"_c5ɸfx߿HT9XA"V?E#kSEԖZcW1g%|j"`#X`Gv ]oKJp-CTH_X4[.Yܼ56p9&e6XP>7f-:s{iJ:àtϠylTD@ZFrVB~C"ECc@Y K$pEq6nfEO}c_xh3#,'zy_b"~҅_Oj%V$Qbc.Vi?D*-[X(!h3O~'(U‚uO:q#Ѱ&DҁH&"K\|KRoY+\Lx(2kJp4g˩ѼQ"~RdȳtӴ|3ˏ`}e&`6H.e鄕61JA@5 d| a &3vE^F҇ӕ&!4c(# 6 ޔ{!#M:7cbv<|0q}>KR:u_<]{ Y&l Q+ƄBEItK^C4yT tPnA%=b3榄b 0Yj+":|SBU l1I{O^Y7\ಹ_*|-D5  OFurZaQ40=\,em `RQm|P鷣8f=&ʥ"MiUzySӦ=~#cefx]?;xoІ&~a, +jPLdN UI _Oqu)\{z_'4vrh3•;c}rKa]s15Quw~I pIilDi<̍`uYos vXAHER2:(ߪepV&ϲ(9_Hw^ӓ!|K;y#n#ǩ~\Ֆzr>${?֛$q e֭i7+ It`I\d4S#*1B1SEiy,%;ۆ,?<g׊ld]R-{ymb!nS׆9uj}QszT<֤3V,~M*8@/Z|Omoi_ <wőx17d$8" Z\.Dpjd$Ne 09?V$R}?bwc;仺# 0[h2>h./m-ljלƃ=YAPOLZgy`LZZlw)BMLѶ4;w^0_UZ*ʪQss%iJܿݳ᭬ uh~ ̭-$P׿CutI{@;d\ͰtyK@0=óٕBmX5!HT?v 2lm밌O[;tL .|NQht#wpY/"H0*^l6=jnc_ :Pҫ*{|Z/ kw|4\ tϿ&nGʔ;f250Ha]RniHE5'sՍ_ʬuKj):c 'O9iU5Q%Q*>1`4k o$=Wj8@;%(%xp}^_#+:тluȱ/u+CQ ;hC묙 Znw|$ķQw;b6;/vEӐ2()f!&nu]W 95 cDkʻ.jAmm)>wCs_9sGh%LڰLN0/E˛;h HXWWzF7}20 c<:@TڀiD1(x(Zi`q"DuVvPxoʞ* [4uS} ,3IF`ewp`XMblt\a 8\y*rm 3y>B7S-O8S^9\C.,(ٮ'辮h>JJx4(990>:pFqҪ [q{ ts@\{uҴQ~=|ܐ --sG/ToyJNstf/+e7C8ea!qS:@>SڣxGCH>D2Y=.aϴ>Br *?F] M¢O2kq鎉+L>Z Or72Z,gewID'J|PC!ÛAIMSdE@yadq06AػtSYa64*7&І9RIGc$_x uH(s dP]3 VrodXvs2>6냧n\nBGA lIi3z4 4kg3i]ϱ6Q'O0է^ީmʱ Mt5_S.D,GQB Nf-)tw;oxbͪ:S]< CpTXZYGpE})<NH{=nl|咰7BZ'8CYr<>,RV-u9(%6:rqiaoaf&z-sr@ם.'4ܗ~B&I) @ۅRNF+!QSE@$ƕgkyvCKbĺ&==M7;<g A\`.GPEY&7m^M5I/teMz>rtYig犑ƀRK 79,]q^gtWX L+Rji>~x"\eo%x2G-SU(VDa 2W`CV9HCdWԴ[>$z A$c 2W7?I<,:+SgzB)d.XRPY t#rd CƯ69cgًz]+.'݇ɽힰ(TI^ 㿚>'-Fs/Ԯ`m#ygDqreK˝VpI9u.&Do.qrdܭ?MŜgz:ۃyeOҧSd9dlL Wm1>Fk/w6p^֗D76S;vew6?\5A Pd俍1Eq( (Ԫ̲z?#RCJDUߖD 'f6 0HVWON/ 5:!p ԄVTwleVG쨐 ]PfRgu 5EaŮa9#)"fXk_b}x-*$q'Y۵ nO*DL=ԛMB d~VMY|QQfr(S,^^QYM4w4NeռY|l g9a_ݜ0fvFx̗?Z@qip7^" 9qALnjƒ3& \sSa"t[E O ;mEV4Ohz>P,mL,  ;|7A~np>4}y+y c`D _6엹PF|uY,e2mXElwSo#W{<V%6@%Я-hQ.]6}d E{)ƭ%6O,W|QM~I:Ckwb>pM"Ð#ԎM 3ݖ-ȠXե#=tDK>3cX]u}Rҫ=fkNbЭ^\GM` < SzE:nQH@}!#C:㒹c 3<%w~PhH#7B_k8 ;~L&o=L4XK_'M4 Hydz-tF4"'$D ],\o"v\+\CL?=xpjy<Ǒ^7 dPZū a3bXˆhכM9*tC5Ff8QOa3^3Dr2rUXK*0,Eu=I;:-Z2fi8cvNXqEVMP&ʭ& ƦxD  V.C\A }頚7`'v8 ~>3x)t~A ]vS T ^L:HjͳFJ8ȍ\#bRV ܿp_7˾iZ!h&ӕ.%jiu.p&"Jh~7'tƗJ/)]U2qV1`8P ! yx?C^Fb)Ra>{jR Dw:l_̐_YΕg1iKjU+M:Ҏ g<~lQbߝPuV}KV m6'n 33Bdbk;s_򐠥lFjFs'8(HAʻ8u@RՓBP^|Z3&{L&|&Z< 04B=i2k`׌M{YC1EPmvpOB¡qMd@mpE78&OJA=E+AOEC>N_ݱ喩:aVsC߫%IBi O]bZG<=#͎u4!8?THxѹYqӊUe6Ss6_\-np @H_^\Q=KqEsLElWd)zixDr1,%vGq}\V;e`x-Th}[GfJe0a82_+Mj6/ WG6"VJ8B9$ɊW_ zXZ )l3EHAt+p&6N" [PvQ M *?H(YvorzᏖݡʂΣ+彗(}$N}rDv^~}}>$F4 < So,՗us6.*Ifb/r"+q:_I2 $зo榠wd}f!,xI ]= _dˆzq_RO[-1aH⛶7_ho@-M 7X+}3W? 9{a8 jaʪ[ab>F8#'C\:kMv4VF;*BaXB2s0G.9KLO;'uG>dw<6i_v| ۵BMGUG_p &Є,7@tjĺ2YIzO󃧍Ooٮp.ystYʦXx2}snv Kp}zj"]3vnݵ 0 ŝ)WhH KbFUgVݽt;q%Z#胉 l['hSiGCL!ym }!H:N_Ynj^!ɸKΨPi59j. x^,C5q=w]WmwuPpyV& 3. 9GP,fpaw~nB{V`ȣ^eƢOHA\UA-H KS'bJށʯ)@}v^ϐmcp"vQK%KnHѳ0M6p@|O|Sڛ࿖k[[0㤶ӗ?.hLEȤ$kRUSEJiOnV`IOuAbnhaSSŽu Z=񋞁^ī6p"-EQA*qeIFZwI0w,r W{tP^R1>52@7](ükK#_M5^e̢ z cR8~_ Qd5x8~ۨE_PcQ`ND_mMKG -l|#j6Ua59 Nb}p1,KHn +9 ``m0usl<=1ϖ5^E%Ktsx8UլĴNb_sq)'xLpa9L곂C'Qj (f„^ n]>~Lxg+9yT1o@wl[[k!ex8`CHPKZ!ƂCGV:!> S8w &= ;uHywjuܔ{[/3(ͽæ h.B%r"Qkگtѫm[(ʏ]v m3HZ)FN? ;{fhwTzP@xO_?ͥ8Z;2}^>j=UTxVU>^<1d&j?QG5ۮY  ɣJmZ!|C!9@!\%I,9B#LJGa zJK;y&9 7ǡy@8sďJilv k#t P_29 oH>%N!40-6)R$ǔH)SP77hCѠ|0h:V@@FP*s.zC zFDjp&7>ܤ{4[(DsB)R!>OZ6 )"hFA_\FJ俆9LYHGym&9RĞYZk q#5lxu1֦IqC?7`oņ}֩Nd8@\.uېz A5/ڌ6Ϸ~Xbi)?xI.rimʢ7՛meR0$~}{P`)SO1-t r(=K?'tZ.u d+oЖԒF4VLW';VhӓX"y&L~z"œfp(Ǹ,g%[輙!^EH l(ƕ_$ sl㑔]wq{PƾsxWAJ6ōцoxDN*;}jȁx 7Ӓ#s6\SZMcP0΀ ^3pVc+wRYu$S}:ZE h!7Gpp}ϰ.DGO%OaB POI6aoxO$5B TX<_omوY$:,4qa+rʃ_ YR1<(]HHmF8B{ -Tm1/,kh*Kg**!Td^?w Af֚酺'H弴)o8d+"TAO zK Fy tgzfk&,/葫98;ˈǤe&s0YavQ.Mƙy$Vg:Gy}ǧ)mԕD0ć)9?Z޸/n* K$"cMEY$mxw/^oжީgD/9h2*![H7SQ{<5/09]JuPD >qgC#hw^`Xr& >GoCHAߏ ,xէ;´_D> _@[ʞ#rt]C4lzn\V7-hN1պ7$ۀ`m´"r?$\M Yjչ,'O^;I +Yu'$$~.$sl΄T66ZA\SMe>2"q7),]r?ȇ:@Kl-Z\aLە3݅ K @8dldt5i#"?1Ud([;X3C[:75C[]uVY[=AX/QJ;KWYR/Mx.:j>Y}5Z?ʜhԧ`@2"Z?vOOE7ס"Ӧ%ΫP([+*\R)cOJw܌ͷì\#8CAvt@"+ȠWFͩKp4v; QF Rni0e1Mɻ+QN^UXJ-&i45ͬ*d&SQ*VJEC38=H5́c=BLr&D]jc XMoKʧo2vsV0sg]:\Lhj۸_.@DuZ^~瑃 OTco\7%f_"%M#;D| rZo o,V 8i 6r@7[>W_O]с@%~=٦w@]y?8n'}p+Ա"@TýDCiZy˸C賞+:c:wi_/V7Kf\< nB޲ IzOqQeSnE'쑛>Hv;6>zcJϊ iGrgq 9ZD^ͯM*Vn `IOvaw6&L5zw5.Md Qpf{NT,ubNmd1jO_ ~ێn,mKy9sv~Bjz1}o$uCQ;:sd  $_gWdvyK@I\v51ArQc90^&pӻcLN0#Z+ lI>ݱ ,+H(wAAʹ Pmxr^9Z@H2<F>F RS%]G6jnϴKQTJ[ + 2r(5PTɵl@,d+;Of%fU1qO+;]-_=ǘH|un#; +%dPhg (SVҦ XDR2\0AmK $ O,*>XBS:DH8OX[3yn}ʁng_*_ʢ@k%&IC ZNuZ /U #!{T\=s64T SH Rs@HMrN;JA!YN;VS#"6|"ߵ pDϋ/ ~\b P),n‚";UoApi;f6ӪRxx d3u?OIL|56nSA?0A(᷌1fMi߇*n][/P[|M󤭬gyT_)F֛OW9gŤBcUxj>ek?p|"_z U[Ր9z]FOJ%4> RHۅmÖa&NT1Rm$FRGFFUQWZKJ} :c4l Y՛ls7WW3 PatMp }&DfK/MJ ]/v^W.6 W"9 b`<{uL ȳp$|/{2&&RSѿQIsl 8ZֈH1wnqݎ'܋F'xY2Jk/S3Q4jhTBԖi3zlzqJ4ԚŌ`&m ç,jM>'3HppՍY(t"&_In4`:i"pW=jД#ʦ<#l}詔o++b(Ktn{6. 9-t#pBׄ.v174r!%ڻn`0\nN[ȀHK7Ӂb4,K Dw%8>88.;*T,WOҕ'4 Q.3"G%ΘOnL'63uwliꂧD!/=Śs.K3oZ+& Mp,)jRK_tu9UcpxZ_2{v0SBUM(n%Xm}~GkN؉.9=dc2wF -_΃(e* n.IW VEH]VS?A4"5g}07.!2l?bwyW4ij;ɘ7ʹ8C0B |~}*.N:%tlߦ\NqJ⠼H!:Vq0jqFI; Sgaod?bbgf蠊O\ V#:=dݛDv [FS>@JNplZIy7|4IuL! pMIp@m~ԓSA.o NLbX΁K懰a-vWBy)6JH/韱r e{Դũ4_p͡Z_}'GZC_K?u] \sP+c:\PCNNy: .R`ts|PSًwd7<]pB4Un_?ͮ \0G͏B&+&]>ɮ1#< I ♬Q*n!@ +tb/>ǎљto5q!>IiUV7E9t斊 $~ǽr!2tjUȓk=^Je:ϏFdD.)^1~k^&TTן]Cy/?'2XYypK3H`^H ˔6V<ru j!h#L@j՚;<\U1( /&Yf EmLǙPb&*A8_%iTbl8fJٔmz ]ROqzz\?E\,s?jd$n]!TϜMcXIO7V t!0M'ja<2cgW뙰Ie;WuM{)vp93Q(Գ!͝a[)w5|v{}Fĩss/瀇ya>}y!rvuW+tksn•O`)E=Ohg;,yO{k) rֹ̔FY d5;m 򕦒 P !rx>MX`49Mzkx_^LEoPPhXَtwa4~" R v7{KPiFk[׈{G ~t}d %5A8߭J#^}<3x98o\\³CigўtO~ ֕u|Jzےk(Tvϟn^^xmr) 1 lfU_ኜwtW\8G >5PkKDH#o߱hyI_Ic/kFWM"*Hn=z'W jUְ~pBdGƮeO~=b99ֶ3O!"*/L Nү3 F7%V~v|&Jz[T1A!Ukag f<83#jM$Zv}v~(xhf-4κuNPNH- 7THڢþSh'(%+35j>F@j=Fܜr9ݽ YN}0ޖiJ:Y;GPÜn-zz䓋fG"('Cf_"}pX ̟_< yO^8.|ڬɩVX]Ims :OXo. m6B,ڢLPмz @S ǹhGOl / y.╋FiHګhU$HkxԐWVT:a۲yyKmeMGrR^uzk9,|UE{iYӵ̧XwC C[;v(S2rT][BpK"uܤpngGAE8&v1tIK$To~[Zr@lg2/=E-}HI6]Vvc<j9V* ZD0F%*5)I PE;( 9 S1*=od77֜r1cfX*Ǵg7(ONj(0+uh`6= z%h-;B$0xQšrP1WQdqaJ"{NTbdἎҜ%^]^v<+ۆ ZL"Tc> e>~}fn(qr?lr. E4R JU#ZCBerP?<[WRsegj]8b;_ eF#|dVF= lA˓b0#_#QZ7QZFnbm7f+@T6Gy扪0yerzr>_%>ޟ^n5Z;v2د -k9\abeAGɬl`^|<8Pwd9Рws{ĕʔZhG@l$ʫ]n/rh]ݫڌ;$l7XfE@UVxGNyP,}nܲ^2.]6ᒂ7d dA?f#R 4r䎽`KhŤO@{9Rk=<6=OCɵ15^ɾb;"1tƍƼsS]>glq;W+;! RN.mk n57CGe1/n/GPL߇1X9%KQ? lH2n| N_=t往5 Wxgx%k| v0`%x>YX1iiۭ*inh&t )_ x~=`!KgkJ7|0@ZgRR`_1=_H8{C:K=RRTsIr?싎H#U,NY@5|Tn4Ч>(z cru2mD!WS'sE%/dkPE:Yãy;B۾;54ҕ\WfvHž"7~9%:q 7 WVijRu_ <.y(fcQ:C );6+}Br@3):OH68޴DB3x @g8["~{f9&,5 [b1Iw?JEwo ?)% q_M~7Tp#]i]7zQEm0=ς(WKAvjC2H92+R1=7{Q—ua?v[c~No!<`DTZ.EkdOGRf\4Fq]mL1БjAN[\y8Rp:6E\RYl;mgؾXW?UUfW..]ի[aV&A cVtm &A`<2)KJ9>B$/0d $;'ۉr&Ƌ1nı~<Ή">$/xw: :ʦNŦb/)nL9l!y Viֈ) N-ÚXދ}PJltwHe.v}Ox I-x)KZ0I=Պhn &#d Qs%[iߚsl}_je)8;4|-6?EnVe6O-Y8b"R5s.@'Cm|3 G68#&F?U!1E,'j"Ak%߳o<'ɀ5<4YiEm$ur4\$btT֜DOt7*/,a3Dí*T,NSyڭaf^Yk^i,4+Qa<k6ꢻvoEJ\ (l$ӄKaㄜc+6]0r:>x=E5|6 UC+$ݽawʑx;G^L8TᓼWF]s`t*47&ݔqa>O{{Τ6r0.;pj1+w ԂeE$3:y= tH:ZWcWj|kEѢgCw`r;15GF|d,[ +%8yC/Z+W&q"+\s~Au; rqhrBmts9PF~ܜb\PP @8P**G愀..K,:{b盔2ϚPW ʐ \ӎ%LwTd{X-66t( :Mf2oۦ? buց sϭm ##2 :FaElѢz OWwǢFTu LH HAUKEb 郰\&f 8/3+$i+h'4]K8Y) `,ӷeUV\2 F?Z/2[C3"'Cl1YL!;?V?ɴ'}|rY:Ci%GG9@)!$RD79Kx^Rzmo|;O![]׿!^gW^ Γ1ڽWdj^1TM{r0vw^"ރPdN&7{wr2fEFʼn` euVXx~pX Y;)xokG.HuϴzD!TOZ1g{nzט0#6*$ich W=.wt6a0C>T}+[\7\i&v|@ /7qm&9<([CJYt-dbr4YAAc&4D700M(CT;װ '-Jr]6dfzǸk@k,e8ͧԋ[E: "EQ!S;=&zYqrݧu ^e5gA"b.sVTkGRmbIN<#ɦνQfܞ1\*?ϴW3 CM_ZP(@mZ\ȹxny77 EcZ6XCS a 'd\i}HnD[ 6мMEW_+Rc&OB(D%cvofN<) =V6^ /taؚ0|ћ75XzQ֩QcsN^*5 ?[D͋NuY3x}lRvm4eg;~x˱f j8)^AZ-ylw- Iz@O T_0tOC ӫ.]?iq%?(#/d!?PS;*teDŘ[A=l7u~{G%\q5kR1swy` qф%KJ-Ѧ]is}4Uy4}?* tXwoW|/ECQAJGE}? WIco ֨yV*MpB:%1Ejl&Eҹ'u]!YG=q9.$Vx +ʵ!6.v+5n6z }~ľKXxPzeOIͣLJ8CW7Ĥ9'3vT1ո?ͽf-ㆧ֏iBjb- w׾A#+Hyʛ hE8xyY?_ 0p*hAh` JGsiq1GbkXũ3oY$':,ŭjp.$ =0,ڇ:]_ב#z\wq3Ԧ= *U 2%4?[ B_43^#2N; |¶>LH /q8ki%}'<JzXqv#3!q;|``b*`P^h,Uئ/ zl[ ؿ׵v&ȟ(/qC@QH̼{um$YO"x>ͧ^'!'S eQuҐ6QPu%o˫¸ơoI*ҼԀuW mAth^J&"[#DNy$ D, ]r&}rI8@rj}=A|pp^A1*Aꉓxb"^m`;o#BT4O2c ڈFHSTk-15H*e2"L삞 `ڧ6|?v]pwd| u\b ^tNrE-vΜ,<ɟ/,];]E;6 lQiUn! yDdPT|L/`nZ(@zkTDbi4a{ON/\@@+ldhb>cK"NMv5,uK#(B8$,x>b'Y9gGzD=6<p{t2kX awl#!ҁ H% >_Y1K쵆%Qq˿s d<ūLP1kXWKaQ62uYO\OEP{Br|Ɨ]Z(LJ}pG?r ]A~'Gs>zpeu霯r'*8Rۼ5Tם}yv,z)ʝ z'[ϩʪ`}Qf'j茵T7ГyAݬņq;7bI ;gAxNoG+GpS_lǢ%*LCDTo,{UPa68Kc rҶZJ &AE ½=DL63kk 3!dP  xKyﲀnI4x/bA LO\{?,Oq\y<ɕse|v{-t,隿X0J;F2zKneOZɶWGO%4&l1_4nkN'Ҥ$SdM™݉妊)AY+W.%o,ɫ6.V>qDp^g&gԢe:{`燖k/)YLlBg3yBJ;i 9~%%$|p"8cLi~6wִ NY&];z`H"B/X QYL7KRuA5 vrCzBÈj;F- %u!ܡ%e6.J^(زn ǝ4tw1W馜%-)Cr/]1[4!ꦢrY18~1^걎ҡrdoʹnX0 ZI6 *(+3i@%AQ)5`<8zk2-p<Sk̩3Z1"jk͍`96Yt>sB3 8Y ܢԡ O~$º4m8 -dq9"4p+:Qw+ŃQyn ҍ$E?{BTHO}^y1⥳UwQsME]vxf|tEP^-vZHըg]⼓ boJ~-(*~3/^^"Ή8u:  쇨I^0p1n!. [6HԢ8X`1Nt`1Fm®ׄC`}ц S+ ӴqM} BB>vZ{P3t9=y[8&9G_Wܑ}G<ȍ3p ݟsޕ(<"@|E"kBgBQKA׍cQz; uBf LV$4`ĤS*<|?rR~u.P܂9ɀ lRxu4*v8ob{+B*٥OcE^|h3f["3^M [GOַ$?Aw"y`vh5<Xy Lu/JET ԍs*MZkB R+Nw*[MW TQ-a &  @Wݡ~5H h|PMM!$"厈%afɵkKʙfݫud<H%3zػ_c'|gkz2H `efhȩ>Wڇ:z,EZA!UIԸ_Sd\~V=d/#_ Fqk/ zs3<;9q$8/OeE -nͯ/I%W4Gr![Ю.\bZE/ 4\{K.V#cUݒb} tZYABJ_ cDG:ϛ`QI8>-49*`wBX_hxK4KoRcy2+r~+϶gidM v P}AN*CÖs^k)d"SߡpЌAzsT3yddw4UQ!?yc05:bq#`̕:`Eн!}٥}|; ;ل]! e>vconc%#դP=^=t4R=P(+rH|ڣS^!tz38wv[XKZj;$^{p~"OS5wu? ~(zkYF_}eCNb<\J-Z撓<ЦdeY᱑o{5'X[SrԼ8W^V>YAKnka95eenqx y)Fy}sQ\kx;Hݩ\\.T}f}}˙sSD9&mt(hԑdCXQ&?3`p4$n]3J'Y"/EjFFP` ?ޗO bӱ{5Rwt+k+or?`WB|$;_ ) {d Pv@(BG&.[;fgNGrZ ` NP4);Ʉ=Ue/7 sA]5sl]&ZoIVt7eM$'L#yzuR^.5Ig :yjp5He Iu@MRfytt&H(5h}S?vDm_< KbgDI ݴs\%r^ӧ})79*1,9[}[kK oҨ2Rc[=:8GPpELltÓ}}I"H:͘VJxo1sfEQt alca)qȰ5EҸ*,&uVoQeN>@Eԏ2 ݀4/lީЌ_ǥ25';,N6Dʣc( U#+1ӂXD}u{=Jv$Ľ3_X[Fs(q!׍sn2cP3%xĔ 骦R^.;SoHlU}^ÁC'q4ѕ4ڮpdz)4<ĞH\!e魻͈|>Z/yR\eHD*L@kl`=ˋZ.#٣ @4RkKGg&!5޷Mm<%]>^&]$:y*WAn&zrPz+ ڧl{H'Lw,ۤt.#s>T)*wDc"B!a! es^Lj*U@J[`dnOL$@ ]fʏbr a2q񒼚{[snom7lҬsÀ7Tɐk.W] Ю^*-D68UZq i%xώE>n^A! s+QvP'@ rsUCy7%ͭ `fr$ Lb 㩷 d%w/Wk#&&}C!HK}#js xaVU 5Iqz#[od@`:Yy[rmC-"!5S&vI0L7pnkhkRVԬD~<&&9?[av\vX`bڴ _?=9s'C|y,bDUIĠ/xN:NV8lتHTzv~{E˶0!zĆӝ5έ b)xKaeT4mr"9 wЙ')18f}?ZbiEev$e,"TyI'YF9x-N:3C&pp8Gǂj+1&yH5ϴJ= g0 2sZ7k(lg:;V` Wy(Mk3Hy%\YN٫CHEHؘ_f8|ZY1:t h'r>%hyNޛTFP?WVQMUH*q@8DR 40jA>Qvg~|7s~؞KRZ ڷn֓dS=GVW6^B ]T"T q "(a$W h $*槄Ea VȈZNK[ޒ[Ʀ0޹W+|vq֢?u\32Jp[f &7bꢙ VL Qb`f{* 3e/8U-,oo/ OR_IֺRq7!d*iބ<؎p<Թ 1Eϼ!>W*"ju9u}`T4d߇ "^'alYlɔUFI[֊Lցz⊂ u۸Y{ }0z%{ eX ]cv]MX3"&"Ɏ :T̂qG Rm3ĭPjGI6H*ڑ.<8fR'2-;K1W5 CP]lYӷ=ռ|/A-,&a$C 9uώّ*϶>JhL\f7+mlj8pnUy|8y)ŸfƪQHYTZ] Ԟi1ocV"֛ut̄c0qT לmGY)^jVL--'ww8椌ȹ6({Gl/AѺҖ#?U-&h_\^lk/-f *1`)}Sb=oơczWG}GRSWX"fUB){{Wx%۞8c,_&K2&+v;7>'19XE13|Ђ4;A}-3 8s4'e`0L|o ']`pMP)"^Qʍܤê{=O{czp'M~9!ٛKwJx* ]얔I&БI`ӭWOl'UTl Euf3w-E4)JFjxXIw`Y ~ԎF3Է9\Ts2P[2 "7t I5S2$\V4b]P3џB"h$JZ|To`[cͭ9Gň r kk$@ɳW:~qH -˵"EQ_~q@ǷR_U?'>5jx_ć+Ϡ LC ygDaPv>~KHn6CH:.W$X~pĜA+1S߀:ڶpc3M rF -M*A' " {V =swI ǜux$-#S*(wO1"lٗ."$~Rp 1W8N ;b8OLB240, >ߘ|_W <M4nη)K`s?->!p-FQ-@;7`J;V i7 {(˜\Xh5DR z\gK҆P`f]N46*sGE p5S]9\2}œ0۲Z8mI P5=I\/C;[iQ(c;:$&Ec~nƒ%î,\#aH*L™hC S!:;kZHvTrR%' R}j RK* ylem\hR)uC[)H  \Y/tվ0"]ԊZ>Y|_ج5Kޱ3-`_5Q$,v n RE'Zv'ǀ+\-+xKiCL_/W}$2ߠ)S(\>1Η݊tu~7 }',+.li6:4LkuX-D2ퟙeMk=B[t*n-;hI7]H&Ek:@$G'HGAuSo[b|EJT;5 P~ ՄG1Uz5O_<eȣP?ЃN7cQ]gDlX8|޳r)jE*1m˭IjA&BRrX*y$V1`rFm8u 淑nm|eLmw0y-'eGnev@U-ynI FuȼjV>Dr@bz$ Z+WÖS)WÆlKKie}8pku)Vڄ)Eb`0R19OHS_ q H} k64`7 0HSdM*}5`J~Sge^O$eV`&gET{GEf_i  <{L_]"zm\Kp4B咛v4~4@ `|nt=ޣ-!уi4j=zj[~M=̙$rVm̀֋t{n;g\hSU8 ޙ+_lLqx+3L8b@-A>o )u\C)s#y l>j^ 缆˂Շ/'M\? >Į[ ƔbN/]ϡvi, &l1Qim6dNf6~.t _-ԉ^ 1YUABOi:qڟD1Na 2)&[wաj6J&j]Ea;$@o߲+tp`? E (*ҁrG!7-?-aӖ68PA]F: {ft ODJ[y*5 J6dЪup "ÖyHQ*@m 0ֳag DCt)"4]>tSx > ^ǫOkL"n='wWv#qDWa(*~.b*%ZK9r lS&xw`~Gs:L8ٳAā4#%Vag9Ż -m5Y5N"FЛŋJD!!KSZ$Xóz![۶, YMg;zD@ &`8{oIU џ!~f׼J f9(f@FxoJZhGm*cKW!O[f,֒Ci /@죽pkqGS<> k1ل]n tfqO %s߂GX5,ELb_o`կ4AF+TRZY@ϔMiuQ5 :.+=sm3m_+F8Y a#pG ŢzѾ7^流%ΙMT+?6 MZz0#/!lŚ(@/8d`i] 0͇Gu{LtzSDʻQvWv.h^àXHo71ոQQ WzޖC̘=\TN*S{g8ݠ~ 3.Ci3,? LFiš =ʼna-Z$ja&tTa}S k`o]E5؄6-g{VPu^]H3-.q |:+D$6 m-$Bi1ݧޝH]x5r`Z#}zR;RW뉞 n}DRF)u?JE}V A.A2 OukKB9`tcLwozвP0. W,4o <Je ǯkWyE<-n*ixx#;9qNBOTaҞ;AH®a!iavTV&-`hAjTq3DZعXWtf|8wMfb?ؙ?Q7Si(m=GHrЄV U^K~sV )EJ l( @1PJVvb=灈?ýאgl_qd-Jr#;ҿښRΈMI_ۦ!#PI.o^V~tOZOm$w¥P\h!e ľƐ"^GWSOYkzVy!ort,Jw9G]+FKo% mbWFQ{9Nc _AYdKz[K5|+6 &7Eth?VeX*b[8(/35af*L.pD8qɑ@kb0hFes^νQzl&2 -|]]x'/ RmρU*ͶR5?F6X+fgD>iq'q(I;xk]O3k Oǹ!>Q M~~~|]E6Q]AeЏ>D݃fo> : <vؘgEqџSe$Ć\XzĬY#u^p>eMʏ>ι>UEwE:LbtkTPAk[ 4 S$cWNaE\FT{iW (h 6A%`a;ۨ&I._q=M-c)p QI+4wJY8,]*DL_ETfq)͡_| >Y)2>-c>PMI3Wܲ l}4`)ܑ)ҒZ cŘS w${qaK(F( ac,75n)e4| ZWܒ%84ǪO@+8su!Q&)k_tZCHzfZMBRy LbPGD }o] ~; *_&͹w"VIKIc !k'(`I֍xWQnrLytja3cw}wg*KCǹcעYlC6Ms߲wlxgb/Kz;ڞ! TUQ fK.ҙVKek3aƖZ׬9kV2*6'.`OpOD,Ce"nR"@i|"mW1P=BnV@evπi/ ӫ<""Si+Xxc"ThwEacBÈ~bMA+j84@T"ǜSZ71$`sO QS`|f@c>҄<}_l0;ECa@ Ù~qPn0S7A f,ul"ὣjt޼vQT`YyJ.VY jLnhG+: QѠeM>h]oLPq2R9=ր:vK:G grY'T3 n:W!;aB'+`~"+Vw/; gnTRxqu~,#}g@^`Ϫͥo,p+B_-dP w&m\l6q[LxܙD_U(63@4[=Y9G3*N(_ǒ"rXnAO:1q|8eZl@v5rpcILv{!O>-^#2 i9A<CzMއ-:@+Z)": qwF*D)CӧP.g:2G^P8y=t<|tEXCAZw&0{/`,٣T1D 0vn)p@>#^ϴ1kAsrM%BǮ ۺ6h'ޖpX*ٸ-Sd0f"Yn Je_HJ)qN:7,vpEϥ=K+3Ъ\HުӆNwMnReܕ KE.{yEF`^4furq{]m?gigf^KTF|"  RZ~"9gB^v9aؿpD4;J24P J% ?A;?6r_Nۓ'7/11vW@J?)R%+b*݀^aʇ'ӄ}e^8K(IQ*'TG$L(CrJoQ9B댇bvgDk m ~g2 %{,AZ CI`o#*WSM.2+ :'.{DxP$Q;ZU[Mro#8uJН]]PĚyX_k6@߯У rE=lpOsųݹWn_tּ4`\RCZÌ{ӛȽ"$Pbh<64Ȉ6 $`6 *m>A __ ?P_/V<tUź%.Uãçk"o k/x&eM/"1tApX~R/J$SHoʓqa2. ݲ B=ߜN !t_ĵ`b@yHQhwemz/W `Â]¥c<e#V𘡊_۱4 Oeޢ&S4Ns8Wb9Of%!ri $ : H2!$RE#!h4|VH{)]G-snX2rZ2kT.Y"xbL'R?ˑjO  䴂E˞#,k []CiU]x,lnУW}"Kpn>oBT}31eH?y%emMdL:K&uD BGW"gDIm>1UY?NCFsO8oy9D 4`:b#NE4EĆ'[?휵Y-#ƾ0u7r7=}Wg;?A+T=CU-`)mbbvd+ϪĤًu\c+ K&}I[Bz6ß]dGd~Y^R. h xɎ{K-Cgsx}UY6l)ħvs*RI+䰺b^5k. $;u ~r:&}/y|.p]}O*Gu^Y5RxgQ8Ҕcޙ-Sd"TG1ݵߛbG EZā'1k~Cvw? :n[LAdBUwo+r6)8個ym*,`S GWWk^60 '4ܯ3U5~yXF':=N$oBF0DA֞_q@)zw"C &(Km/uxtEC0ڰ9RIM\>fks 2.X:.|s2gvC(f`za9݈T! ܌$dI$%DVts,%t5!&>Ht!&ygbwam 1$3P1=:Ţ"uTfi9v]Xsd 6#wwl+ i&roG|ɏn</sqӕ9}B3+b@{(~:HIn樥3F%_Hnj~=nJ{WE}L$izZ66]֗ԇ^؟MJi?92r۽I"bzݽ,a:hgO%ղ7&cu݌5iٗCޟ)!ylcCD73͘EΊAu֮#jvv惡&/bA =wC,tMLkoyfRa +KSE@HT ʶ UeȐ;t3jFYCcdqjTH!N4/i%4ڤKG#߄ ;A\yT?1+GSE,Ô/k;J ý.-ʱjwрfϠ\c%Aߛ}gAT |R"s^v&2UTTDgG,8u.*q*%8ұhTQYϋ8aJ lm\{xZ!~Y࿴?v,\+ë~p &RM3 O/-s/$Rjm>R-a X0nJ;AP~\1P3NO<$N˸<4$|EҤŁZ~ɡO 8K[X%VvdFr5Y_#8ˋ$N5 #fG@bG[22ʼnOA^j­;PP ]:aX3Әdʋrϴa1Ej :Gs;#$ӈ89,X[QztYdEL]Vd( 6;"Ω {6b/X6^Ÿpzs%@ Er-E1<,TD鄜Ykd iŏh<4?LkB۷p.^RzkGd*bN Fe6ZyltBHu 5$/z- f:LFճό.ҙ#3S;i=`8dnZy,A³z~_#y= ŦmH. N8%|ͽ)-(:i?gl[`(eқ֏Y#ػΧ'y;eLNJ)#n?b؈<1KTȁ] z꫌C,0r;`-?[y(?JŎT8OL8 Hc>CqLS!?|lT%$O x!@) J=FSDBy3P.'K m:qa3BݞT q;[\䪚l¹|fW6 i6 $:i*԰H苄@&հ@Z~@~MZu ݯm= r\isߪk `baZ*evK+FKH\/H[GuQR)+IހH聏ȵ` UC~[j& f4|{SQ8%pjxú;<@3TJH-NXRz_Ag b? } X-x: Sʽ49eLLԇ¦#Vl̋ŧdȗtÞ,ٖۃįg߯RF~z?vdӇk%-`sMU П [-xLmBо *^n cNtqr~تk hU> LpnLb@dDဤ"Hl O""_]+6Lh=Cٖӎ­U1쌎Z ˽P2yatQȩ5̭MTWHP{D^D0s~=7`oNL{s7!T!v@C_ ZOsihr/t9,?K^w?")̩w**;fFZݮc9(S\s5lTH~D1mT#-rnG7tԏf:OF} 44Ov9{h 4h-Vg7=8&$_iCxKcarQ=TD[}dy%u5FjF%E݉E$0c-5g!y8^fv#eXRi{]ݯpڮ1p]_O w~lX(r5,Q?TH[&*fi #Z=Pob;+1q9#MS4ޛ~mzJ前`AyAkعVEAqV9'LA3-l!zYYbO1ɒE@ PLm;qR-j.ݙxEڐ1o)Urd $IF#ےbyD/Y# >g]<%>%ec!/L"FK2 kzLZa0.Ѕ9hܢq 6FkOQ1"3%VyN9iͪx KMg{j=@^:n*(,Z<'4?/g\@= z~~L3h]YVRne7I5WpBM:Aц.'eeҍ1kAflFf4gu$\ojE+‹Qa]_\9Q+a-PBbA#DgWm{rp ,"m.a{Ѕ. !.0͜pWcN~!tF^:jrF)EyYIAqVIatc@NϿ,&8w 6v>E>tgYX-oP$Av^ *hkR|N9 3i E3a @dH0AƋWsKo ,%Ti\0=D߁z҉U}<otY{BEuTjb~t3fhEX)p: JH:7<5~ؑOg,`obܼ";vZfL: ]9`Wzԧ벸'Xqz"gȥȼfI?wk9(['8 d6yvgc#d8͹=e,lnJfIFGVfs8؋WÒv#vvg 1Sq/13(h !P(ϡEΙ9R XU%?&cL?OfBd ts V#[ M"U@< |Y_6<0mגH{#|NPjc&6>9L3u}$t[ wZm"EZZ![LYp[L捿umagI)YT>ZZğWZwY*A McIF2{}^}:zs:H`[Q-G`#pF!_h9WԜP^8٫wc;Q8OC_۽#ucAB@x_]6mIjfi0}K:6Ҭ *G*ld^9'NGKIhHw|Kl}8:`QjD4@]5K'BTo~ۛIGJ?d:ߘC{2s~;u]M4DcJBh=Nԃd<ǒtڇT h֦۵IV9}g(HUA@I$ hZi?mL,h˰Y%8d.H&d*꽚ж 漢J@{X7Gȕl2dQ 1bǔJtƾ:.^u_q+2AۛIr>B MjzPK%X2<ɗ `SuFHsU6Bgh#ah(bw'0AHſD6B^ Us /NIpyDa 󊑭&Y4[!'vt: XPpؑƹ|_37Y"yO@(qٙ{6Do?.}@$ 9Tt\}GN }}}G0.+# RP''2j,iZB;cdNϯuuV1տZ"C Nyh 䭌 ` n4GTV;s9sdZ*;2q5JR9.}ъʼbM¢Lc0|6MɊVؠLٞ6bhf6ڭï%kQB׹'LziAp=^h;h(w$t&8k֊l :Z~ 𬱎WEEJDs.\Rc(Ҁ *ֿr C$PrCs\HZXyΠmV0{2!o:Iq_M` ZLݣEB&Pܠaj_+'D5u3vB9B TJ03&`qNk1JM٦kqtFC`̟f\/a"QLѰ2.6mE=5ܛ]6qgyɎL)>60wyiR:./p]nvO=L}1nSrxe&W7xl38$]=yԌDgHiW 2$Vy nj"r4 5[F/o}rWiPNP\ S;-HQvMnR evC2{+ibi5Z%­`@e8nÁ!r[Eޣ_nm:~>[OK{:_B VRr@jϾ,} 0N0*HN#e㧊 [حS&eJĞFGsV8e!f~,@8D^\@ էp\n}^x$EqOnWE[>8;p1<<$s ~:h[[DW*_W.kE^vA:b3v˪ߥunjz$cM6%2W伄wk GD &K.X].b V\*AR#;(Vvr͏Jq=,=R0NUEFÃ[s.~!V#Rq*/܊mR<,bҽ쇥%]yVlF3T֭O\ A X,Uw= 豃S&ZA[pf^{ ӃD\=zq80(I(]縬:s%syohxZ0kXD*(g:ٯo֟Tϛ<7,͈zHh\g|26ؔw@q:"ye?Yo۫ ZluH&бJW؈A 6 4wIZkη:-dlRyVp_bcmJe㛟{t٠n=N"ܳ>b|ڵ9_5g/L9~΄VSS@=AP`/u pZyy&^fkE/g 豮R!&yw)R] J|{!6\(nHB6PMQh .~X2VPCE7PC %yzdUzK Weּ2?i)/-/#RBk 8wT xJLz#$~5AdU2]ǃ{a]ӇY?)yOEqؓbbu9&"!,]}d{#VQL4 |$Lp_XǾB6@?<žwB(Cq89L+=@W`ZVĬTӏ#2>]P^Kbm&]SC5Q^Bcgg{O\,f08/N-w_t [Ni9o:Q ®"PKa/R/\UxKӧA[Uij)Xx#`S͈0E'Vw\?b{(:*nO@0έiqxgdO1#!fDooL& {j=sw]3y̡9zZV؊)Q́SG >YH@ *j5_E=8o/\_ꁃqfÕn=NE=hM:3 w`ԗꚱMˑo #9%['("sU*T!ųk_˯ G:>^@_Kw`7l\_K ve%>mD B_{;vky샒O4pt\n&t%k3?Vq+yIF'̤sPKl_Z=d.υ|_0j?C3U#/8,TϵD`9~ %oCȤ=%u#Pvx G䒽5; ǥwwLnu{^ԱyS}B\$ eUI27)D)RJ2Ϣk}`N)@V= q~B>Lf !e]R|`1p^'o ;kiQH3R2 2*((HpͷOjEHֹ}:`Cg Vb thn-z¹#F\IEMWL)v R BS7;gns,~04ɝw+0} Qs80Hd3v@h/{Uy1SׄqT)ZewIsm}aRmw;P2vƛ4V`JUC `D:;mh؈,͌QI 7|}@K>--FDʦ$:)k2Er퉒<;/r)aM<`scs"w%rP$K]T.7f! {ƺ1 OT2,DyJzOkΣyJ0ӶbZmGdq8Pr$&A~I1hrT?a? .Npm6I nE;-;7jo;K>**cLJj[Z=tsζ6xNUC f8<-nrEcJ ܨd +=7I=V(7oɪe:d6J=Z-[̫=!tKc.}<`l[g}BIo+ʰJ9" 'KJkZ^{1z `荭= 5Abt@a)kvΙM8WFq3#GČV ۢy*yw뒓 UR lXW,5nSEIdm6TOp@wR xwItd00fnQ(:ѽAjsS#j)BFZ{PP7g &0PI5I>F>o+QhXNDZeyAhHrt&hQZܠZsa A6DKylc831\FiF"<2UT8|7&@߇XۂJ :h4(@ G4O#;*q0(Ac٪c,q ǴMF]֩w2^߮$7[ixԐ ^w,9*߲ K?*ԚT$-7X2N>S'#qEE^783~h+M}])GWy=ٴ{[XAVpt fҴ1{m@#aJ{֢CJ@pAOv]5$4ޯ0R9=oj; K9`AcVJ/5(ym@Y\fEҩ5P noȹ-81O굄#*x  E W+vT%N9y1V2'Z;ES$K: +=Ӥ;c;A?Nϒ(TZHFDzXtUo3(`>̧CIxoJyM BDsT v`C]yQ) D/?'BN$hEq'P&A^ p($SY~u "9X&uŮ>ͶV|f '㇅j\PHAcx%{ױV8}uk=RS8ĀCf`YBfJyz'1Se٪ Q#kj;A2֍u_z(Mnm iEo ʹ 0n@Y!)5EdRe?KsVYsJ*͵sEAag8a;~90ɩ ˃-329LU~q7.)~#~U&*:zjB*Py`F3\1ɡ~'/q>pWdl4n]S£Cn5#iO.vΜɇ[} ,v@.I8Y<.LǤEa@^qȼè^*o9-zbkX/"uiȤ!^OMc .A]sMu@Xrѩrc]>M]{\7_CZ7ߦldK)I sKHԗy\ <皕mNMbpDJX wuDx{%PRC69Q.&B* FimƗ|w$v*Bn u)3DcXN0 mP{ڞ:U/VWP%ܴ?>@*7Fp4Gj)nlB ;iLBᵑypT GYfUonRʋ4gilEx\0N@fl/K&\t {^޻B⿭Gۿ去?tiǣ3Rȗ]LBLHm̧yUt-CW*4`clwawAJ(~Bg`/)'EВ 1]k@%뗫TAN ]+u!|Naxh1 6CA%U]N0.[ ʅ)}< @;U"XpB "̛d5>0n|?3|>=\n46c;^*4--{M lRNehk|0&<.V H6^@2˜|n|YQ6MaX^$a}E *R}5T.('\ ֕H2ŻNoKof[a7*͚M:M@00f>`Ō7,% "*q$r`s0U[d&~֒uQ[/xbB gQad"a"\FԸ99/_wfA=$ksxGSxNje,o&n<iYX+`u|*WNYx5JVj7BbQHV ԡk >v餫f\Ч0ݺVkDe$Hs_oބ|s90wD>m;a 㓦X&5KbJO6DM%uؤv_Jן­ }ߨ0Z>}Q&P ^/~U7a";tLcfkn?hMN(WΌ.|&VSkb"&&ػ?B*GzSBZ]ܡ{qh-> -]$_ WHBL߄:ۑ.7B֡!Śp`mߠk꘵%>Oqc|nY+9hqF⧨H6t>C˷ ]q'u&v>EҖ,Od87bQa̼j6`-iu)-Xb: Yt2Bo{t(ͺq%0Nk z>%:%N BRdu/ zgPriPe$qA^'LTF l `a+`}+vzTcSLQ2*m 8Ue .շ]w:29F9^!q5&IJMb8XwS hTuĝ.o2wl?iHSxBzl^ڄZnAͨ,b{UoJ@`Q$ѷ3}fQf49JwE-nRo ځrj L?] 8'2 U7.jw85OT3Mv:)-;חtb64^iϙ+Z,?Wƞi."(T/V,[s)mê4iXup_jd꓌Ȅ8_ػSSpRu< [ZjxckEikӅ#sbJ֎ujš2"aTc.>vִ?K^]/\Kk!:9M~@F%3#WM `-7I ziD@M#lOCi\ƒ|'HF"ݞÐ$/ 9sɘժFz?:ɕa9i X+cXJo67'1:2jVg|XB  DSfOrT9"%K,`Fӝi cp1["8Oə}hq (i9p#nIl${ThZtf嵸m[-}0@QLǹyD Cyj^XD,SN#??1NBSqfq\/]BqP& N?hGWȜ[̔:K̔R$#ok E0w#9qcv./*yOoFG .^ٴKGZl=pDX#8Lv^F/;lP׫曻%gaz1tڏJ,}$MY[1A=;>$:Vyla)>?!^"ׂ4hAzLJ6)J3w(/}3Z(Ї:L@mi xl?1)1BXiKlu!Aiu`W?vc.^b(7BoscxL^;mn-^:KYpto8RbOQW>Ez~&R0H9/`:0 S :DҖ)TQѐSMYori=nGȤr3M#S)ruQEVbCwF("#t%>nYFl)ttF/&!NB4`iGev[ۜ=Eotau~ !Alf%^ lscl,vU!tn}( //"/tu Yj}y q]ELL@ZնWjޜUl;!lAp]u,`]LSd*ICn\+3 <Ž;+iyd./{bdjN/ /0i q\/:Ōeރ #Y]ݔTm`y=PZ*Gn'caɺ~puSgX`u_Ke<>g INOsm_7ss;~LbH*ecR!\D\ #q;T"X~]D_m!#%TUWfdge{?K" ,r_Bb> :gq %p`m9ӈmeRUV *Lutoq8Jm6;ČGRNe1keQ%gڤfåshcrkFIwErSA3uMC^N1Q&ݘmc|.KM~Y+ul oN}`ctT>0uY#KKW$.-99+PlY?Z&9[SL32 GMzn'rA&\MދN8`%bR>,Pt),MB0KǞ'چ6a*{#>lrMкT#) ;뮢͏nY&9QI 庂FR~_LDw"=ْ>5τbWUoQ_B4݌9] d:_NG(S4[{~7,s"y2Uǜrh[N6ԙ̞J TD%msR?#KY؂:>r?IEPt=bTO3/ $/RAU} Cjm`fyWfG5-۫A:|kE3ja'cQBxƍ5h}n+OCQcJ$r<\Ǣ;ZwTUEM "e*3gHF}_lr93h3iHhr JPk,ܤ?N~ ʻ X"MBqBdF9 4*-C=F3)qu`,ԡV~Mg-/޽hlHkage4}ɘ(}Vfh|O{ݸ:ȗ UXa+Y3ЍߍC*|P^Bj)4.`fIBg*X(ASc[{auq>1|LpzKwp7g&E @w0ig7˴/ý߈ַfKG+6? `LlZ I-Ckl 2+mZ!wKcDQ#q 7j GxgĊYߌ73rDؔ 28!#*v?uݴzl4:Q9L֜;xqcQӼWRVd2D$e"}RT|Tr# I;SC1pKwm;4PCI݆|i%49'lYkfBxW'6ݤHHk^)]"(올+bN^Q[1[5dA/[|^@Rh" ,-yGhcL!|6}w>yUiLD5tDQEQfZE+RLLqkǞېQ7', .7րۏH!Pl{}tۤ" *d ȱ*v kbeܙ-ھ e9ct&>N=d+!מ2%Xm*Zm3Ffҕ$8j(bM[૽ YeXCdm| %QXus 28ynoD8l]q׋7.΃x>7hļSfL/ :/Ώa]~:[nӬ}*xhY5X Ѥb$Q\}v;2S!sfdYDFjBJ|wWK7yQ-`]E%V2bS?Qڈ)ğe4k auBH"'/ONFNr.hws3Uu㯠)/#;RYjXo@W`KO t4GHzO&%c >u- "~8$*N7?;aU!~ܯCsl=Q;P((YWw&?1T 0+"%ouhŒWs mbp]1et}ݍ髕;uR؟ H҇~JvaNlArjIa?M85INrðr.|t &{:?Tei^dcX:(XERI#'{*f^QŽ;G2/-\T,/ b+g]C:LdZ3>XžEkYO$[44ś0 )&y#UÐ 8$CSLA/-j Q?p.' W:dB!z7Ĵl:TȵxM| 3%8P1/"KFD2Yr59Di2kyӌ: 9u6騵{P@Ңh$sd'ޭ߳ u1yFrz)@Hh .3u Bnߥ(ʺAGoԠC'd4pֲ{~-*(H'(u] Ё}vR{'`-G<վw鏔hRI}A_&Ɣ>åpGJqTe5<=)=<ߌr;@e`Ֆ}`{CG}.e*Х/4ҝQ5^uO-Yi Bwo8Nt7N&c.v x$yM@Hg K05irU(3D/e`q An۔UA28Xfwr1MS#!ūbȩE=Zڑk>wz 'kME<&wm ?Nr䃅z!CO*c"\C ye.1|4t\W뻍%7r!f#Vle)w+\O%f _IaĞ#K1Q)~cRJ'Cv7X8ʃ-./}={Jý*Mtw K-}tu)G1v@[߲Eg(b\_SP=H+`*XsG !Zmw ͞FdK672m4;Yp뛢1بME-EMFC.ݭ6;rZKL+<8Ycuq'i j]=Oԏ$x1u#wQ2sgvudi )5 'ƥ?ԝދG;}3R7[f=:)LrWI<0<#ۀYSxm&1|5qRO#HJ # $`4V 8yk] 4ҿcքZAHB FVb(aٿmS {c1˸ cvnrЎ4[do U*a=54o>gbEMI2N?P^5OpaT=pRY;hDᛐބz>Qi^̸gߕ+)&qX"mJf8#x]jP>z`Nœ壬Ch!_.G k]9`d׀57CLJDb38^JH,==V\,}HfN ͂mR9! dE`J+agw}I}\*57qQMBD"Q7ͩލɮ58#x#l?(çO@_{\G{s1_叻1TX#d€w .G&*]ʪ8)E!2n`و>@ĴPXK<)+ ̢Ɔ_5F!M)g =p0:.ڭ~1-KusȭHn{(6Cld>!5^Z3b^0jK8MK܈'Wh@b >x ta 1^f`Y?t8j>FC{7B #cӢE5ŅbПVWWUCj8ڋ.olWO< FyevJlVkpY@к3UHo||\ P ؉QAk2Hj2l?e potԷT 0uLLyKEb^oElճtE֒M#<#2u^* 피sQv.7)338@1Ή(hHk+`pS.!f!rI}Ǘb2L-ycbs9KH6 _|F^>;NjGcx4 ǜ==2nս4R Ky^cNĹ(ܾJo&EB!jm#ŵ}&Cz@ej g$+EɑycN/Ց,+U~[ E͞+ȃGS5d>ؔK~:uQ`ȩ5i/z=r2h@<_߅rPWfs`!R:mZ>ح k}bҎo@| S%$ VϴQK+pp}Xi7\~|4u"Yصn=tHes[.dcS\y#a.ivV,OYZ7qh#$lqGJۡ״~Urf;.yRx.ܶ`su$69ckgaSQI,u~VFХK߃=QH~պm8q~ Mfw"F@چZZm;Ѫ &3S"OX-$8ӘܟGvńHόxJu fi#")*q^Jgsa:wr㕑&5ӓ6O,ĨTja){B0;ē4`ȧY21zUv@@H$"c|0gK}EVE xA20T+a@=mX?1p6rT`P+oi#9N 7yF)LzݙC%-p.5LRrHeZ lUiak\ x- Gd8ěOI#1Wy>e22sG8ҙV;ATɴ|&Bv4o()A'CVvn>_0k~qpBn-iC%Wfc&*[L p̳Mdk$TŦ|4ߐd9BF7|=A7I*Q!HO'Ȟ/ -%ed'ơ6HQA+hgҡ=jA_jMMJqOb匽oRL~6sQӋ{{e MF+woIggJt7ZKISE u\t9ȭM넳K˗YruG @ ϑp|@:2НZLUԞ6x,VN~,NꢓcF$cl \E!)͟aP@K89عxg#HuIsB ]/T<[}%!3\Kv@OH/G.K՚ta Xj/d-GKT5,n][#eJִ"9D:7hl5^LDͫj%,`CreKe2$r~{)%'F?^#=sկq*uU>iPTu;Cy%m $=gI?@y!hA@kx r.s1boD=)'Bl\H}0:IW1$&9hت/l ^0,+MHmu7(jӄl+ZSÒ|C[R0d<61aP̺#(3(MP-5KkA& 'r/6Y:s~SϦH""j7+[~pZ$Kn N;T&R- 9X^n-C&.i]*MٌI+52?_^S>q:-"I+kt6A"@!_M~hg礚ϋR)CH54PdFLNĿhcvU8OX%OuօJ)1XTHSzhjoؽF0aEksA;IMb;ddaP uǝǘT< 7%Qb/R=/ؤم3vct%x{uMBw[RBj ;t uf*< eL%(4D`2jpξ[h zK{YHgU0cjkDo _3AsLEnqOˈ]8|ַ({=?JkyNB._Bxzb$#vee[ȿ>F?(Dр,_63ڈeP[YI*-8[m4b:/CdS_# n|C{<[kOjzԔ Մ4C~|4ܤ)p9hT>۽s( 2N{DU6!.>wԿʰ‹9Hl<tuR+ʳyx>z 'UβXʶL.ъtSu:)rИjc:BBwYzdlZߒ퍊 o\t5*6"UA%ь_s#_#‹;uܰ~}sW 15J  mv/@9IlF֞Q{lj0I&::kU/3 ZiԜ-AUuLA=-, F1;[g6 UySFwpD_@18 *zMlz!Ţ'7{7%ƊPC+j u n{q=K]:4*L@XI>)yua=(2|(t<"tbՅK\* N>ų}C37(=Sȃ,q ^$&v yj!;FnH=u}|w٘p0(G{ ն6)B~s?jP%U*3#b/bb4y ڑ.}ק|WmU/ AC!K#ڝ8(C,nVH3C{MTzA*F-5DQ"e!fhmnO|U@+w >;: *WJ=? Q뿫ێz/, jhx'*DF )eg&FCEE98ѓҪ;skpb&sGJ@}U0ضO_m W1ԗf]c)/.ĝSXC!r":M}<#9fpI@~5c; E5oߩHt0TTY3eW4 z,HXo1bPQF.:xtX62'1">o{'2"kV)qcU5#` V e.wm5(aCzec0ᡘnS _fӮ9_zMqk\ߎXeJλڻjK)akZDUwQ,.X1Fh!Dd bO89~H37Ђ5SV}%C*3hiC Q6[˧W!ZIzvRNFثF&|:7.хnttS 8bd9OwGړkP#\L߬ O?igH,G,\A3%qׄD!IRx)+I% X.G6.T23Y6t寃-ۻ{UE8 WVYi*nşf~s5553DUsg+"u$DZF,n"b.<Z.YLADp(¤DL@DB-Hջu +:hjcM~BhVc|Or[΀ZbR5%:<.\ 3NK˄rlpU%W=Aa\tϞ)3%] d&E40lIڸMuԇwB J `#]aõHłbUa>G7!Z7PTC ٥-_kC0 33,2ZrX݀6ʒb!u8Xn|MG4^9Шs hg@>%Xf+\Ω ǚPb/pcv2@̞U(ݴX1:a_6d!\-NE,upsf@Tv#IϘ-Y#.u [pEaw\n]X~׺FɝGbqdn,^^Qo nzԄL*,m=k{:.E=2mmnOF(+` !Kp$"tdI$/.[y0!W[wx6aYZ[ rxEbN͊НQzq'sc r^?6~Bc|2x&zUwjc|{_Z8ddg.83]fZ`j> Yc')GO Ym|r"o,/9gѥZrbxTsZCü4"!P1$]4`dLQV`R_-%V HX!zkE(Σ]]KKP`.9^e-* fgs6.BHx DL!TXhK_:D]eDXT}_R;bQ]ؤg ya#x%`eE~nh\}}^c,ۑɯ =Wd:BnJƒ.68J.) ϡ$G9$ &nAә>KsSR.|=v"_4L18eRfclȵZht~D[gYr@wV]Xj(7)p*}E5gL-D]`"$.2UYc[,Eb ~W` T>V]0<9:w|Ԁ@J*({j"tz-MF@Q^$ْ Yf=(9Naܢ"T0ܨ_Ry n֖Piicr@Zص{EP|m48 47#z)k7r¨1/%V4axvu9 ;5l>{?.,G*9d=MFz-EͦC݋C[]O!Ӎd %= pan0HN&LƛA@kܮ-6Eg..+gUA/จvl/yW=0!xu]XBbWmf\>ĹL(Bs*2d-SޔL3 I?G;Ӑq$87ylt'=aYP^vާ Sq[,|2ԭ쭦>\Fhc$0[c=D5?@s$Noi2'uu`NWQU!2Mm;nhx>p.dVYߝRu^Nr3|z""K}Q݆+ U*)iC^v "vͪDNŏ٠Ԉ} c*H›G|Uƈj)t:}[0Ϯr6޶= 妫8Uэ$v+JS,\㚠] a(? W+0)2:0-,3+gZETbᗤNB`mWI@Zb/> qٞ % ^o$DFL-$3NYPd\(mz Sb4Zc C]A1~^/)Wo'1y-u uLR޻3+?^c钴'L lN3iKqO>3 b;-P'55U=-mё؋Fk&5XL3d;` -;es:(-U;"y+i-U ͏8y)hzֲ1^ާy6z!)%V'}(u-K?a8Z %ʼbp'p)3RKOٵFDgҐl;ԋfQt A(>I  8GϛҥaKi[ yBޜbf^*J+cV (d=zJܚ)0)pTI'8h[̒ p &?}29 '΋u!*h]<2VuYЙ! 6BCBw|A vۢe :󌳜T #3XqShhJ¢iRCC[9zˎtlYikhyv߉n\qqh Lcߐ8j.ATtJ;{ 5dhfΛ5g 31EvJR Mn#qo%B 1/b\۱3Q}-huՖ0re_As EC:c.< 6h )@qCx5jw~D,:D'{@@smDPԨ:7O Ig͟Vsbiu,0Vpw5_"_!iV,ip33KTҬw5a(m45L19z@;Gp>*8$sM*iٵr`= S,8Hi;ϊ̗r4?O.lգpAYEL Kq&WS\|&<#sӡJ/XHFA ,hrʒKxzֳ/emAh_s4İ+})Em"Str ZxK(,ڜ?O ]M GGÚl*N%fph1FY&+0u/ FNKuJ^^trFV2߄eMm p: $r08aTJp/k ;lW:PYnl}b#s+vb?S-Bۉ] 1'gDI!:ʎ^_ȍGD2z8rȶEТeɍ3݀A{X sW{ u rYo\Bu|؍^ӓf):Yr׋.3a@1S~p ѝh)#7|8^[ya9 Xn2ej*.t,SyA$ b/&cl]yJOS°~ {#q[#J:jJ.ἧNP>).E$;yٌ3w{xcKmˆy?XSB,l|UH: :yE 8n@wwwȌ݄{^¼9r6o^,i\=+Q)]9/H9`sQ/OSݭJDDs $儊RtG+Yhj'Gy6%{Ix}G ; TT,*3h1,6`KS=rX3(|Q+ceebBgд0vQ*aζaets`iC*pbUzye߁_7Ezڶ3-Mޜ ]Hm%F! $g`"ӹ&[gTLt{r$oq?I o~o?b.iq3dUW X`QT Fl2l)k/ 3.2!p i]f&|K /4~̽7 ;%Kޒy0pspOP"ZۈXΚqZR68j9ѦkWnPA i +8GxJW ;5LY PvZ!q{B2oZ#\s.E3JN^pD7 Qeg3҃t "k9 ɲo|D}?Hv_>04.:Vϫp/|ʧqmQd70~-675r{d_v7:i"&A1+ Gn6g 8JŀQLq;\qPU[@}>LR @?18L{&ZFypWD"W vMDr3),(ESP 9`El2X}yN0+is lV62_ևO3Tfl32J 6#CwzF|.6！;r7@;vóAeTR`ҊI)VֱCIDU!S,ݑ U8Pʹt|벫Ota7  eQRZ*D$Kq5'kzʱF-vCBL@zcmtwI<ѹXS@+{XoTgOHϫtqmxiٖY-3UԀKPt Ը4W|}F0(+-5<ؒJ_ʹ\W~xuͨu;#J9c50-nQjʷ`~8\?8ko׌ w @ƞ%3﬘g2^6?bp*]s%;/԰Wm婢Lqpxtcj;*<8 :Q᲻ G4,y9#*K4֯$yLH(+UOr%+L޳4Qtݨ:`H[ S &}@׌]2QrQK1itq]1|qjAåq%sm*ȅAnrAb%pWߊY9 9vjC(Ƣ(<89J"4h[_&g`&*(ݐ ܝ8sMqq^?p G}PqS>?73LWhG)">GgYW(|:/E Aׁj[''EYr@VYfRfeC:#ؾeMO4uÕC:xm8,-@2H_ix wGByQLB`'_z.6S:^EzRmRS-Go{iZyGZwl>4sÇtt]K[Z39rA;.S`S:T{z"F0 MGoHV)E:5V">6҂:\ڸj: 5A9! :o?Q>^0#Vwiq+tB+\p) k:$pPўVAPP L3/v(՜uľ7sM10x<߲@-RN^w~VƐ815t$AY0JÿuǨ^Fgz .Luo)!=Y>)J\ Dr+95&}Yd1<U}hV'vC乮6Nui5w+[,Md;J6qq5? AW%⃦XBPshRy6Ts3?PkU ѓFYiIP6/Es,Zn,9|l?nyO ;Eq~{ ,F>a"oUz(KYɪXK\Kq7ģ|ʫs9,eCEQ}ԌOs?ҲomnnFR@jn₦ɪ)au}U0pǟH$rSx|T4M,'(-vQcZ i~aw A/Zd{\}srqC4npP?.r| |0d0Yr?9=ú=D6`m+ch^ws%#Tcdu:8f9Ǻ9ͮ:}|J)v0>*?w@}K,44ɸХi'#~m#*Wڕ -Sm:yaTZlEsģtԡcDexÿ|qHj@J)~m7?<X[*/קnB_zR$¯=|}aHU=d%HҬVLbKY3˪%s @Z/a#^lp[j)$g%|&Zk_WIB#KIDF {*)' d4Q>h&C(&5Wpm(s+|!~-8Cwჶ6zNs;4AntФOZĝ.!?@D$?5&_;SfNt 6qs/`瞄&z#9z8H )F,N1~)uSnl8>o>ȣKyfՖ@n3 FպrH흱gA*5E$dעcV,Ʌ]l4\dxG 5^:ɨf0PjrtaIfhVs%cRQaqŇ^u${wJ^/tjy;DмF/ 1̏s\rn3̧TBzQܷn)puĬu2'SӞ~SO q<+ILAg7'|s~Ye?Bސ^LB4a 4WuHm i[G_>9Sȹf'S95!m}Dswx3̺D.Z3dá]9S'#儇="n|O`hSoMA@*]PBx(\>4(뵡D;=1p߿l8/z17u+y\I\% 1iܒF4|AHFL'+Kb@qBq٨_?Ѐ ;o J h%ceJej/nG!;"W-7E}!)eTdxV{84Y]kéۨ !Ξ)JsMSԤm}k~:kDĔJ^6+ʳQ<%46҈~z3,\?~@e3cgI~em=pIwija0.mJ^N-|B'jtx-.ggZ0màhPO({J}GyJQA|ڙ3IZTػd `rWa#LS!g?imM% _zy.doݭ0jjmŌ' 8\bvWH:-S1?`u ;'!',ňRݏ-jFMjw%cQ;?[&!@6j8ݠ vȲp씸ӂ~#ZIn2f po} 'yӧVo [s:[,Dƚ/!)(EQ-~shڐgy-Fn Vwo緟S`1y01M9.sO8s2o|RZUFknvq{e5sgp. /ƕzt fUōyOzCTa]B{Ys4Z9([m@M\'y+dng&ePҦ2q,'Ӕ58~jZ~(Gpr?csmZ֟TK2omQH5o 6ݚu`+ 2ɠ;/b]_>NࣞZ{nF e ۟_YSڽCZ$Dͼ[Gg$~-ΞkS Zdc վNxcwR;5h{?oFnJJk>VkLcZQ[JPP'G&lcTC-܍,=U>omcz5fHbٟyxB|b*R>g韨PΛjd1NMTY)AdEK9@akX"!}nsSوJۼyU@tܻB$4q֓V_└y'8E]LPj 3Ƽ۰"YSN"N?rAPf"9 8*<_/9@xNs?En}f34-@ⶦAIe -y6P /L6K?ie;sۙ Oߋ( ȅ4ÑGaAȀ@+3KyإFNV96Bi~J\O:|5 4 68R< (sԞ57}0c/O8{|vVS*?,OUL\cxBV>II >Ok}K?9F>\@ߖcXę"!cޒz^?iIl"v1W yBg *|)ǟXqƐi-c1H`uڜƋlǗAďL 3ńK楙aJN4E-! RmȂD} f-1ȈUTlfOʹs"0[CT?hW 6v|ژDt5|a\椐Bh{QN4g=X1S m?L^E,_uHYXyݹr]i!"&ײ)..Dt>IqxĬ~=_c4@hz${OIA7'f#!vc@~GhDvRTS\ PmG b5@aaeK^S3 nv8]L6zJP&R,s#3Gb_gxƗ~&/D‹ D2+!ܮj%؝O,YK/o|@"6~~WVǡ PXun RA ?SgX#"޻Sop `/̺D;ԧI9>~\YPz3X$i${MO5{\D2G@)zBꮂb@FLSXN45 Ϣ1 ,묚'[moq1x8ܳ>RS?{&9e̠TPEU{KX,')Ǭ 8wx`y绫ա=@JgLb^T$/]5 eyJ35iEeߠ8w%SYNGN(tH%Gw>%ÞZE2~߼_=oHp6)GbPN;OLE-Rcح1JS@XM#XhQg<>˸_,zɁ|xZVG{q/8qp]KaB|uPIaMKpZ1~8 0涉4<!xB`CyƧ Z#,KS-{k@ǂmQX' oYo9N ccJy G|0kVϫl8Vˀ !:)HAKGm^{AL^nA.//8?o޳i"&-)aӃmssDqo9vrte]ŊvGҴ`ʾL 4$cpr53кYa)tx |SHǵ$1C'7Gu5{_ثuv3r9oi/>T̓ڜ9*;9[޸p)!82~\A;eIL !b()K}> x7?SfFMJl˳͆KlH级A-޶[+RzBtk約j&b4,t>-wZ/= Co\ nv`f\=Og܃:޷".Tb|7욽~Ǽi}\1$ܒ}@V,*b6GT“qߑ! b鲛rdVg5wt8hkˣAdᚰ#Hua=~dčXd=P[!&2ej'\t)!}v}S< "K4T!=HkqtT빉n]u zM#  5ɞL~ snw.I4!炽.Mpc{dc-JL0=9dڣsz%[?j)G377] "_4ל/E@&ӑr2YUJ_6lqmXboe|R,dIGFOpǾ;b[0mٺQrxQtNwz#!TS|EhisN9iq& _{rZXPQJ Ɔ:@v\Ӌ\QV(Mv28Swx;v%rv8^p 'qŌT0JB 3myg@o z[]b?"5Tf\ƒ"OƘr oE#zy3%__02"R zEpL]H˾<o,}A97|'hc B)'+U C_+/< S#\5j'MfGowZo/ԲLէeӦL]lCqlxCd+={i*2V'MhB͞9 K<ɧ $WZC8ӌqW5@aNAW蔭'N,GSa䜙ʊz`N 3OO~yŐսAc燗>W]S}J"P8ŐV-Smn⨣x5{ G4 Y}glbg yTcg&::!u/{[oku `(B TaD6C* }UfLTVus. DF(J+QێWj2#RzV8Z찗's\l ƄD3FBR|uq\.^V1sjv&N; c-8co Ǖ (..cZhX$H@sl^ cc69!\>ybGFIp9w-:ч.0梶kqFF~=?9a4Ӛ1(D_ F'c^{97IY-SIB߹w΍蜞Ԣ;KSp=&c{҂7ȒWy e7zG"[j@jy]M~eu1q)/Z;̍$ޝe-%sH/V0qHK-_DX $R䲮Bgzr\_+tv7(zxőXF12Y؊ -}!·'+/q^Eu5s8lMב?7Nva;}X27>ulaow;b?{M14kX*N7`;pW. jH 20&gZ{y7&R,@:R fޒy֭Mlݻ>VC2Z\=ԕ<*64Uv_elqy07^YDv |}pY41VE-%M8+LS=D+܀*Q뙬}4-us-y,KQh:兔 0FqcsxSZ"rm\u:" k]k\f!*/r^Mܥ7I›(v\p%x Y~R?5B(<,9Ѣ[1/qeyRv% &G9y9+a p٢؀MzH)HhaS0=;/g'9ZVV) aM7]Vv^Hvk*ƭ_XUŽcPCꁖM &SGϗJI< <<jW %c56g{YJN7 D Cv30_rĻIK ΀rc׬MU7ݓ?SRhEC!iAIg Ry$uLOY<D dr;^TcIf䯿 O\^Nq3hA# 7 *s|'hQ#ϓS8=Y'ifj []a5Bسꤔ4d?\;fjQMָ5}/U+(zBfB`F¾ سCrEcw.0..hթϾ;WF{ u@2:O{7'w3t!atz7gcz?DY~Bz|+p$IIbH\WY@vǔ'XQUeL)]1^rz:B=2@dca.M(_w#Np|7쉒ߦR# #2PG7^]pp /;Js=hH*"B2K+/l^J;1: 2$NTa/) i,M6.Yxr\Re%l9Qf/G˛eU|hVMh;5BJ01{njFRuXy6<{p/[`F|>+/,ꞂؘWzmmۍ-YCiCvZ8v;1N:c:[jrn@'Exx-<T@º|k(j4TĔ' `b;lfvZbe58%6 7H_#WYရ&~qmߚ\c2"p3\Ib 3Hϟ!ԡkQ]`\V\߁L$E]uB)D`C`Y;dj-nO|8&p2d ;_Z}o*zӄ :R$v{KZBzhM/,24`Ys>v iٵoԸ|^9.0l+l an㳫,XS7-lGP>N %gf4K#W#ǡUĤ>O4&_MYgqaˆF" 7Fe]l<mZՁ>٥֎;=#] &CM.dSUa]hQ\18VAw1.Sou@ >O=gKbmе8 w >a #hC0OLXlnuY褎, *@JQB h'/_XWdP=4Ɛn瞃 0:DbЫamzk!ڕaJ",ӳRmnP(IXI%j!IZI`ÙqšضX};՘a՟ћkm;T6 If{ +{rSe$=skT@hYh -jɉ.슼+]0>Hq"*.T]B"m# ] sAZzZמ~jNV}WE;Z\njݡ"HRпU׾Ne+` s$?GO1(lXmAf~61-#a,w@]$nԩ;7"+$E= Fڄ| (uH!Qf$SBdJs7!Ye";a3]8v3G7/\olTxdLJ2Ǡ iMR nM>k[Lo\>.HZץ$fEs˯ufh|URΜ8>c9 mN0p"}<)Onyt'TU "ױLR"2q7ֱ(RT_ J@[M0?/~G?RE+YPyXC^Z@W0!~1ZCu_|C0J|h*})e}Y|Ob Ϫ/bin>幺SSLN/ĕMT_|MS;+ח"TQW #+,Ek"c!L&A$"(~lӠz'!HR0R\ɔ%+ ']4CkEWnM3v+=PܾQ>VOɉU_eeF~ԣYU;Ӷjx7glv#JP0v)s ("P"-!"ts+<'/Y~T/N""bߙ  $uY'J%rEpg|` ^?#̓nx~xܴm/f⻧&oA- qY1t\Rե|J@hV߂UmEt fxWEj%eH5ę$U0mNv-k.0'CK"tDfRzZ݀C~pf~nc:ZC>1IZd,`PZ LSPT[`k+^jHE]IuJJ̐qr 4D/ %&Ҫٱn2KOZ-w#'A Oq]vPXM$^5`6X[?T J"qdv]pkCX+ |d\#+].:u5éd6kf~kz)HY33Ņ gE>UW $7wsWp; ;䉩|LF$SdDx@W͆OJzt=lڜ!q֔1G6dci`Zzh#Dm [+iw,|;b1 [2r!RRdyDC6RW3|\kR;ƌ]:d%*9{&[@@9a Bo\ Z KU `E{?҉c*E+v'>xq 9poB> Iih&$f FIe/׿Y˽bR|;^C/cⰴܓ쵇xf1ak?܉mO6:j걩$z"rIs4ꠧ jُK;Uj~gᦠxl9n|a(ԏR``Eh5c}4j1ޑw+H0sx4x ~ͣZ< xj h?ATL \%+̜'/T#G6ט:K v}/7_w YEcF\A7a>JX `LYZL-8Xlwbl'˳]Fv1/63t)E/pP*M{*hRYs[1?ȸ _PTDN<jǚgDEbB퀷KPGL! /kfƈZK/@A9B7_ei,ILO롼B9u͐`*Kh=p& q RiNFZjUKڸ,Ga2ȅJY†jF@j$j[n! 㹐4O]{,yp*Az|0IdY9mr][3o?ZFеG|tN2Rռ®v3n{/?o2x̓*]++V"N d`uӹ^J(?~|6u#ˮ&rw,8`e`t,R7})8J(RWOs_/Bk`+7:32z@hro@vοaqy3;oV09J_ L2=#Noa 5}/bbρrw*/_MNN-`Ʀ<_ 5V,g0Јli^^'Ǜh#rIQ~mEQ`-g$q9;crpzI?pTJi7Eq9pⲻ{ YCԾV;D#2 }d5 uZ+?6X8~;6/v+4* 9y %^' )+{0o:Z$mz`2лH38ov޹_lXݛI#a^akcf9'p\HNũ7,'/|@ӸB?PhiSKm>#H)eZ.lپ6Ϋ\g ' ~|@'SeH!(tpzy6P ͷzG" j9=PQVrؔI,Mhbo0_=Ĺ:B9 +Pו/ o@{ mwDŽI}]kea 8qTP]S_'LC,!Lp9x7Mz'u}<_]$ Щ|x ٓpjqjLYYp))LqF)_i򀗯QS:+@"UkQ3 Ja1C+ۜwɺQ}$طZ,)Nr@*V+Q?%22hHr(TMqT'>>Lښ[hٺ=▧U4L]̉Ek-Ml,+ֶOEH auH`GR)Qz9I`BvϒBf/._:@3bWKyLrgLܟXO+:RuVbw#~9;v֦qjLyJgr5? ,%Y#Qud֋ՆoiY;,fvy0ƳY!]&>P _'5CiT .l'zuDhM\jw7߯ڪPJD Hݼ RR &XނXC"|K U_aщ;0tw 54vC*0:/To \Lat=8ܗ>@-. bbWC{=z:LsXmw0wwk;:%| H}*1q mV Jz?\{] bd:QlcqaHUH`c;"*k/HmB-fr@ k{J&mbj&j]" td'CF{w Xl~I{\6oSY% DSz*H #L&6`kY1r>jU2eY=O)bˆ`ۑKAK` evŔh& 4J[aC1$DhGb*|Aw {gy<^X 7KTaR"5Xᩤa)cU1nu;D Wh v@ #Iv3В3|r!D<8Ll*]/{fhPs \FI4 *+p:jg͋_Q a^{ '5K$}(Ÿ0ptMU"FJQ @p2D]V"K;[06 佡 mLM6WzjG5Jɜ&'ɷ5P )jSmI`$I 4iAUYy`PM-hMi2udx CЉ4_5v/I}-M(*^? v&s1$DYeՍuTK 6صQcw!9 > 2(:F̤B抯7إΫ bdAԹFYblbGvƻ9eEw?.'5-2Z R5 w|b`ƦoB4V׹{t_XJQEUAvM|F+ DZ*Gmn8ЗVOнv(s ׎^3hC$h0앵I75~FuRwRmLtPX#]WB2ܿdY%;gȗ#ZBSY`e`Xs}ř(Lzi1.^'ւ!.0I"QEj"#Zlıo$p&=s:7Sk2I1({9Lg&Qp_K;[<}.2z׈Q9AޅmIAflb^FoׇɝMCUwE_$nzdn1֫=R  KAta+noZ{u{:ye9Z Yu{:zCZ#VHSE(+T5}ʵ,:IXy B:籞8_#k'*fa›oYoIü7ܢ8cj79\P:.?ouc) 5NSiZֹ+ᆾΚbNK? ;g'8s2#!IX.QNAۄB7 FŵϦfȨS`CS5˴d?ׄuGTEiQ0^Qw Kc]STmdF,DIpkڎ.e"+ }Ӯa/e ".>;$l9J?}@  k0z%`ER Y:2yy jnLQ0~W%(=%g i)>c}zs* k$ajB϶LNmru0@M]MMiDr)7aШ1觜Ė&ԈԱT_?w^eP_a)|ŝYf8ms2[r_e. M6!k~85Fuj-Ȭ=_ɭk^i(yxp,1,qW]2Oo=K J[S(^9sVΚ6;aj|01V*r;cZ 3&Wj@o~OVa+?PEu2=\;Cu ebϾ-gAQ6E2" Pt xp Ot潤ZEң :ꕹ) @ 23%]M t(GC"ɔ!}jj̚Ӝ |ϻt E"ݜ]6Z >}Pz~Еܧ;A+FPXShLw~1 Th=NLknB7y^kl 뎳P׍2 .z~Y*x1@`EЌ_H+={ȵ2 j'}+}nq[! +x=gX `؋cAuHEәEcC6 \if݃M+"Ri*UMɹ$XA7e8;nNlcJb;Xx [s ݫ#j_,\Yĝ?0ի%`wnqXޢiO1Pzmޕ }! SDuLZu'5{$}eQ.,sR/(r9uNݧV׋v&Dz;<Ӧil涚Jb&y mG -H =! sc`ӻǘgwJ-:^Q j cx2X|S@N'Vdq'$eNY˘s}ehJ)D }b'bv@?do֑yt!9Tl,L&.).GX{GO+\aȋY 6]@UĝV~V $>sjm{i5oWS fpy Wy ҭ#eJ] AC 佢qf몬|kVUW54uAJ"$W=q.\άP9щ)YJL$^ Q'i}inÀN?#~!LoA/J kM8&E4.7Zg|{ IÏ$#UZnܸ9cGnĮ7M,',i+:!?hݭD9y>Wpb|7xݩCs;L~ Ua%x$ʒӸ1'4N6w<cWy(r]4S\HV RaCy܆:Qf") ?M0S|g%DAg5_NrNh jA6a0v%JoHZn4j!x:gYUqW6[f9.Ή2}ͷ|K+uQZ_É)OJә|FFɁ.vW`Mj=@  qMN*; \VrUm&$ks%2؇]o* LvG4A_"1yOPZbBpF粀Vgh׵3HV+SE 4Yd47Į.GfGtb(`IZJY ꯓ/7=Fם5M9F@rdM 漗z^gm^av`_| QmЏ 3W%$BM2%reWFswePdq՟6{1y\" R[,6`KOQ's65a)tpX`իf0\x$tqzfvU˂CLMDn)<j\RT 2¢2 t&FNf6 Z~5ePw`0 - NBQU"~H`h^@3w"sWf[ [ݙ 9`)R.?@;guRb6ZRh1j>@ipˬd#ӽ0lgR9h6V7:e~չoR G&f` "JEq(8Zyv!] qCemMNY]PߕC#DbR&FB豓\,P`^pR;wz.Dgu81u ݅A߽JｊGƹzV/0Syk&6; aߔZz>P#ZEL~*8uNu~dU(?pd)5Uf4O2cF/暏j?HGJ]bx!.6.9tI*/?Kr8_Qq@\=Kb%L7+'.ׄ xvNZU,))s&rAt],8yXyiv]ܣ\wu;GhYClrKڥ͇*[