sssd-ad-2.5.1-2.el8 >  A `{U]rJMKuy&%s̆lMr -oX# C;7f MqĊ3ޟ1`o<|R 3^^M9QDm{b6gf~m>{,& HGl{ЈY:ǏL9]2lj9J{@||߼E&zAnd7h`sd(VoN\CxlQLgS]sWOQ'`N-y1}Χl%%(o*0xԟt[C# *fʣzؚ`;žth1z U"$hP}; 2ehZt""-X6e>ZYof2710іK.kM,  {6.n\}j3پj7]o_sae7d36fcf9d7bad9901d39893292aea3772652146db9daf72f7db044d46a73f64431107ad577416ff49c0c585ff747f8dcc0ffa98`{U]=#(9G%ߺ/ Ÿ3j~ȱξm*<i EBj?YO*:2ބM%*i̐FQ֎b k:Ӓ! @)pж]{ gqШ f{u Q>hGX~F#[Luޮŏ{9QŵD~E/j^zKUc &e(`IKIxw8PCL_DdatJ9;^ߎ|{W7{~j&}AI'pE &UuMY7't6˞l7fcbV!ÇH̢x (P7_΅oM_ 2>??9 `w05Hu3(y8gya%aQMP%*$QY;ؿ :%w(ڬ.H!;$[1ue;@~i'fCM~R7=VDRd𿴢(Dg|;1;`>pEk?kd   2 /LR\         k    ' ^x FF 0F   ( 8 9X:bGc$ HcP Ic| XcYc\c ]c ^d bepdfeffflftf ug vg<wi xi yiRk4k8kIkLkTkgktkxk~kCsssd-ad2.5.12.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.` x86-01.mbox.centos.orgxApplications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&txK8=OYAAA큤` ` ` ` ` ` ` `@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.1-2.el82.5.1-2.el8 .build-id048380fe7197ed0d417efbe667c600225b5455d11a586e1d54bfca70bdf10c811b033cd15f0ec8libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id/c4//usr/lib/.build-id//usr/lib/.build-id/d1//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4048380fe7197ed0d417efbe667c600225b5455, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=d11a586e1d54bfca70bdf10c811b033cd15f0ec8, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR% cF(O2CR"Ͻm(ÞG!{rYb8NDECւqtr˽h9|yc;K~bwٕ$D~ l4.ʎO+2ԏZpZڔ^"!MLs^p^?v]@]&jyR7DIPZ66@O ;3cE=xlFŎ"G[ΉNB Mj?[R 8.>}_1 n-e2 NP TĒo6HWѶ [|kKeZ~1D* "`JL2\UBE,å#w4S~H޺h #vֱ-[iIHJnD"-p~ΗJvjf8}^<M٢4Jt- 8HՅky m`";E1хm(ޞV%c\>ɨD2 /ߵ$tPjo+O#j˾]*Nx ]S;^Y` *qדY!lTe^Vu>kZCCW'1~~cj>>'+ê8*3#$初AE^\lT4g7tq=D?p>w=zagq1 ^ro=.MɏAl~a5OwJǃW(}FCmB~#NrMwt±hzކ0V>&n^MI=A~/+7m8 5d5' ԒuSj4p+PBn %[\D XL]"=Rگke"pȢDU2{J`jbT_47S% ;VSO0&J?j֕LB?]!!"PMX!g7(d4OqlI2XXeje"k dw%&8Nӑy'S.H [Co`M`KfVm%nhaKdFit#ԮO^t-|31! jOj+LA?|&Wp E#׎~xwfίgx1{`?ˑcC")'1F$!W%`z&Њv^, Tjkm7^W]bр0)Ҏ5-VWqH> |= vNJ.Er+~wT3CW6X Ŏ{_ xrN' L6Z'SpZqiE`lևlL4C*#IFYVhN3I޲(ˌ-tr;D0%<T00N~N#(Qm@ :\譵1 |)^flr fo"`aD~xd@K$O34q>h3ֲ".Am#/]"]&\78΂3IH mN-? >;-̥."Qx}E=c{cւ<BVV/y y~l'#|9hEJ/3ڹGM4̹ETQ 1@L;qpe`y]:}k8T&'Z9`EX ,ֲ(_$O݅„w>m] M #F~zԡ e"RMmǬ?皂M6I VXTcf%-hŀ~aY6#'5JM5gEdPJp7@ /RR'0ktVƻлuGӢ" }bN>9QOZ2'0Da2hsjC`iHbY׹2k~\害N@}*Wq'e7=ekDYwߏ? Ni%dsj fdX]E0QO>]e:\a(Ɵ.UΆ|O1!IR~dGrǣ!1#*~V_ʵXl5] ,r0ʪ|>pˌ`e䣇 W\>;`2F/ܾP*(~a:9{{ĎBP^yB> gDA"\C6l~ؿRwIƬQgS ?a<~* `= #Or(4{2X4B`Ȧ5 6TW/+Q_l}#i{ڒ/Wtjh"~w i]ZNHLFơXt,>YfM 'f݌SpF\Tfxe8`Ijg oifN Rn ^~ d $S(Nj I?foT ]g m<xkEచl`wJ7Vy;^~TS7{J) ْ9H{*N"g͆:e\ܩc.R]m%:  ::ީф% ;<ɏwXR%Pbj& 8gf uXa^sƂ?9_+@ 8Xּݴ ¥0Lje_(֛PK+=\JeI!фw1ա=eS ZSQ6.S##H!{”mӓTYJʞSuR__^uΘ+]Vn ́'pb}.U'ezY4D&6m2JQ#yMI9H(耕g(0  !jqC/᧴Ry~C~^@V9(<urC rqIZGpi s4_?Z)YYCpG╺JuB1!V1zUfg0,_B{w>P@L!~*}6[+/6_:9 m}읭jh!EfP}lŸ1jv%.w`ݦZ^VCA{LcMzDC~RE͌sΔ7Q-|6pER-fl8N"GNpK 9O#8NMխJOE#.4h$]|STZҷBEZz [ٖ#e),,ft]z |NޖђVj:85ez2RK , *c;L nP@%=B"1R 4޵=}o;TpJ>(klu~k R6dMoɆ*ش\]/kaDYԕ7> .GlW;PcEͨq\fTsTlbiӤ`5cRMKj0r H2o8\luR=Q9LR,/weOMQ߬Ypc cvmnK̃j$ƾ.++a൓8x|kEҫ@vE&jMptnNsNLV%]3sS1>!.F?{+q%}LPg+ANדJ-\d%u\үsD=\-.6pM %;A2bM '/?F}Ә y#412TO"Iň`r&2Atn>BE6>f%EP MG7\RrՈRެ1F4`G Ю`côcQk+$r2ɿ[%׾y w:ePwzRJIG4Yw@C/^U3yƚ[9PԦ&Xlipf:J,-P>u^oֻkϕ-C έ^g8c "-- Z||O@Y|3ש~̷u^ႋlt_U؜Znad/T'6 ݋yyi"\=ahCy79HP;%LVMb)4SfNF'6jhX%9&?1d7Y|Տ?ln3quTyGҊha>wqvZֺcVr-/0byǀ_iQ# 'q-_͜ጱA0f!Ȏ#~J}<' !72m0Z]&[18M\nK_ N%8)l({)^:Rσu2TKWu_zF파_Q˟}&՗-AWIΧ #UyDtA^1-ў:Յ7J)@w\x֪:1ie_0eu HYjy 즗z-梙*yRsVsYAQDoZ}N#IZ`⫾l8S@PkDHS|{RLs1uhMq-L4Fj,׻y~RKG Fu QT\n Qc#yC%2|;hUt8[NY}ݸ%[hB3o&Dti76 HA[TaqҫmـSs܍^ iz9uCW)kgkA/zMm||K>t4LϪ[ƀqWe0 & ح}ڼo(ͩ oV續ByG[kFLP ~z'Ni77TV`T0LS}$08#.[Ulr?($zĪ6)G8.7C2v(=%,/̰lUdZȰw 02f誙u].URb`\ĨRPS҃ Mw cm!1\xG'CN4!An(ûk K";@D!lsd' ֦63.ܵK:( c֢hrӳ~>yfZAH/:N,gF"z|3%ǀMs] UrM НKbt~9-ktQXs{sr5$uA*ssAMP}i' 9DC7MڌU\/sA4HVfhE-{[OQ7ӣA#3y; :m֨EMMD폏Q VsVO5:`D|hCızm>KݹVL8c-ْ Q8exsvaF.AhgE`gh*mM_Eh*IY3 dwN,)=JxڲX.lƷtCw\l+B^? /W)~S*OGD6F)CF* jiyE GH!5B.z[OZLf=?8IL%| I\f]`p:݉0B)ƃ浽3Ҳ@ 'U'&S՜5>\bM6>fwoJ8]ѴKm 緂]4-$7 94v(+Eʔ۰EudWl(=OPSbK[-Cx$筴pV]M?5-W܈}KypL~( _ҧ;^2hav9sYdm=rQYv&6JßIeGB3ʦE3aUlH.rNYo7(b}6Ffi| ]0ͥU!ž+8Kt463mlƒZcb6p*I%='A!7{Pɷtv*̗~>9Q1"'\4"/=᫡D' $!Oph6ZEWREgZP۬}&AVKG1'C5/m̮@SۨƮVb ~ջKs'1Ɨ/ة]bi>' Q 4$o-Xsy5b:/Q{LRҲ%rC ;oN{I!}^ K-c0iYdK)(!}h=rn V #gUSp5l>)tR0hEM6 ^3?^~e1~GMA1C_DPx^=^ o:1$ElF-ERǞƐV.䂛%,8Ys@9Lp6NdCٿ3R zk"ej %3=@;{y@Kr%yHIquC|ByiZy͜MɱOpO#؉0nl9,Zrހ%~ YDwƓz3dgh:M:YK-;ͪB1m:' vC5& =L1tn+Z`h СHG5hy" BMzrVȾl8c#oY^Wv\m?;7n2_:ycL?EƕSh! d*TvmdUr?׎ݰSτRoB !{Rɿ81vVC@脠Ӯ X+XgH rpSG%SU <KgFN#5OO0& u-SNVr"*G FM¤ M/L*;s@nWJPx= YĩEs !.+%(yŌo㶤;+,wO!b|PM?e ((YE"kб'!)gs6lRh>ں{Ȕn'}? E0 рu҈9W`S!>LzdS޿QA\BsֳioͶlhΘ UqbHu84YcNdG?_:Xγ"%^759t5j<)yzEU;"Y u΄@ߒWጼ Vd"^42lmFUS_󨷽WiMv|EP42Ն5]AeF/9VCkj9.H k1Xt6[Ynвz_D`\]8=;-Xkp\x2 H,qv9B#~{ť^G8O!8L]KJ[/fi% ݖn/;r0F@ƵضY84/FQIr}`!϶Qώ$bT!Qol{(ʇcN-u67SvaOqx;R ;~ ǎ+c@#Y" ʌ3ۡԜnvM<yR\u~'U<`]oQVn@<5brSʅS=DO^|.PwR _1:r c}M;q~)}zLI]9I, "J^l9"ct='ӱEB鐻!|ˏkT, WF r9qD@] Qiжأ` dG \y9Ԅ[UF2\\B:6N rd)~ͯm&y9 VIj'*s8*=6׏)bv|GzЀ,Qb.P"T.ZRzEqq7J|̰k5ni CB꿒$ Qk\k ָ_ЖV@+bIYHD}> /ο)e*!Fgܐ.NF(ZW]r)^Sl8{ ú \޳mݐ O5$Yoj-q^2q̴+^ vu5Ro?2F+PIoBt#3 ~zګY9IHF`3D?GɈο'>kI6$*u \'a1e-`I,-'-P'NJjKl>gRRrϗ= 7= Q>\FÑF$y<ۗ<p+¤آN{}m+{JWb*=ц]]j ٦ət(q 5 }~[hE,ȰTTݪؘCZr{ d z-T0l81%aPa4Zq ~NMl@wP᥌")5E.oVn!5#8hUOzAq"ִRKrrmniW8OS\h ƠayCl1l)D*s|<779UDCRŒIa {Vt my| ['[ŧr߂\bB3?&ؙX6/+ҟOsXП3m;KO|PA[edQ3ENnddF%c >?¨ȰTp?H;iXr wn|ǀxֆQEIHe{*\ݢt%P6@)*| ԯe-q7=xǑaZɟ8arMan-/rQp6+ @ckB||f `t( &##X/qU>rUΔ9C}82W4#g=`h:HO0#eN "G&?>5ʜ휏>"`T +#GpI;k daxGQFxx֮OaP`| 5*ڮ_xn3sķKG cNXZ@I ?iFTRf թ+]:l0g`fON^A*Uqv#l4p\wϕ #6Ҵ0 G_N?n0]8K'3yd/N[W4t utMGk+z ps:q'@h"**0Ja #u񮛞#Ϭq*"u`\#P &Vu-AIӾ^ ,\,6Tdc)I#p gh3NH0 a ̅:f8<MHdB3Il8=؈iVP{OvGBGJ:yO ={wkEpʁv1o"xŹ;)ٍhӨil+\=ft '<(9a6cl\7 K?:ؗl3 O2B}p$d!уIj{Ly}<@knbp۟;3tJ'BY0\yeS=oF"LĀcԱJ&X&}_ߙ3F5Bӱ;;HJz:l>B&kicr"j[\ qf6ޥ]MjͤOCziQy&hA)ڢt(ΐSޅ3m~T.Xt$@Ol!x?ipRRl4#}Zę7(i:mElaQ^@C>+]j\;) &u, Z?i hhŻXO5gv<{{&׏nzC8P0 N直.u;v%{w,0ӫ P?f2V^):ɑP.PhZE=WptLMSK>+:kq\L+ f;zG=qE$a`l9:PI{uSҗ(P E%m6vy*n=&[8~^S&^4M].RRǿnוnS`,(/6UIHk5f$,t^KZLcq6ep=.-~&H;RX?\oe+Qc JTs4[˟d\,!2c t:7ڷW0>cZ`cJ:̊61DMNi)\s3+F֔c^ioer+߳IJ΄Tqpǃ9 VVXֿ|:nW d|_90oI7݁.OlAp~9Iߡhߵky>GCN7k)ق3oE /{Ä#9h)6/3.!, ̿br kR^TQ1KK$!Hrr1g }x$@fA) ȡ!Ew|?'یΘW q Ld>8rYiAgF`Ӳ2,{ +IJSkt)Qʤ^DTL`L!q1Z.u!xQ;vL*PzkiMEԶ/kیN+bO:Km_>UyhHwh73Ox%Tfq\Iϟq,7VNbȐ~U%:ٯ>w|*""I{EiNXy58ZXFC2?,0vD*~z!\I]j"ܘA:"UDx/<#I 8}!y\ P9FyHb4Hs[䢹L0^u@ދn q4+U*}?IdQΣ;Cobx[tw)تZ;oWvgr]V\ֽ>fj{hnåp>SP'[ߜ'd2:0^4H )7?B-l9a;|Yyn"z8ujdy0Fˆ"9}f.60t:]8f Six]P /=nE)Zh¡3M?O܄%Kf*/۰!s!'i<pr}6WH,pe|uo;i(0 zVdBߣRf/fYTGm4-%TYes(* H}_#0U7Yn'[Lj8Iۑ\ڇ麡5e%*h۽#& l]TRMk^ZP>+[3n 7dksBdy,1|fEB&O|;J8vy4!e[yMXpꊦ\<_Cf'#ȣ}$3">qAM g$ڧP nnR=I\`+YGgTk1Ϋh~OKI"V|FYF=ϐws!]vZ` X:mN=TTwC77# 3pKAxnK;105?LEyECR͙?Mؑ#Yfx;mHCGgp! bNuy^&>2M\G~ a>Fb@8h y_sܫ0H@H %ء8`\ܥ'DԪIJzd ҀvpO3 O%'([O}vMSz(U[Amж%+s3`:\V *3WOW[F8n=JZSpJg꒴S 4i?S&9sHq˟a*jWs?V"ȣ2م=EFtБ'\p (-=pmG[*PWwVyY 9"ar2W7^#c۲e"=$R$}#2if0(yҋ7sU-9 Y!BgP\Ҫ䫐S@4o%&H} *C!ݬqgkmؗ<>Vnh`w2DZٜUXÎL9VpٞZAኖ떓/??!ň!_\mpiܨ製O_Ru{a,sr놫*~ @M9P!/z!n #l薱q<ΈvX+fyi  ߍ-@& }`cӳ1D0=q4+,VX32*SCcUHt[&$ >UzEHLB+Aހ",< wդ#&9QzHfq6|[]mF V(|>!3註pXuT$d CFlAd,m3n 9lG/c"Y* hx$[nkV=s<;XxyYNn!{di@q,i9jzfwBPk= l[0iD1=Jw.pYg ɡsK (is֔G>|[;Yz~V/a&r*=Wy,VO5:? W?U5|X*޺8haRѸx_TTi _#c0)Y/()$Z|p99칕(4luכ:45cB_'m0'g{szulpb] Q ĮY 9z+)XJNu,5Z~4t޽ e9@/ y^G*;%ZqkHW"#Y[|$KO0ӂԀŋ2dj7ڕ!ß]Bߴgɍ Q/.ɒbP3HߑNI:\$DcO;"\Ad_x2}))}.EbPgCW?.ANM^+- n~\;U~bN*0>-AwUnCqxz!d:b%r HT9{,1+4Q~1݃0zQaF{{߸>F.:Yox$~yI@n0u`ْ7,LX@E.x=Xa~Y`^l T,^J/h:3U'hD-Lx~s2L.$R3{20E 2mj6ljT" Z/Pxˢl,&)ӂ̩So_FLM+SB_N %*ʄŅwc x3J1imV(~T醅sj)*x!,{ѡ=ߩe/9'˃@"_MA!%2¾rtE׻,QUFP v99HWBm qc9s=6-;ܟ]zn?g$=#6nM(?|LX}LޗP?T}ԃ: OzG_sLK>A>_ɞzitx}e#ex5U qgo"(-9ҨrE|o[=ק.˿VfX5ͅۏ A9ITh rdaU18Caȹui(+*?TzE v7&JܞO3,\qC?^DŠK}Cwh/ƝZS6=:@0DDD)©ShXS4ƫL>c%;2QGk`vI?Ͽ^EX,Cx&{s5]p~lޔ_ qAM2p_5u DBg|Z!ai>EZJ?}u؎ EaHYo<4&iYޚRl>dhE5'ETf[ԌO\{'f^sZ+6 ^ `E noJ*ēdZ\a2t3*Ȣ.eW-9]Ȥva6 oVKAs6Jq$hzq2wq,Wƕh ^+y7^GZMج72:|-lėE:G ~ׁ:W̿fũqxʳ1 |R."\cln?c]kĽ壞؀T?_7gkf%*gEѲ7>>t0#y?Yb]gz:훆0"P:~i#d7$YX \0MTgDWZaCN.51'E!(10F^޿A8 3'\Ik?N6m%({Е ` uB͋"~UJ7wEYͮnwjWjىGet !3X`#xȫ*p_ H<2͇Y^ݞXSʈlj[ $llߵ,lo % ԯ6Lm)_A>N=ugܬWrsYס[{Uˀ!r;UU݃өsj|;}U@yX!|V]*)0!E>fQ9֮՛hPګDZ#^ ҒOzA5KZ W>I##{3&O{SR$Mr845X3$Zy-v}h!isXnJ.gtU$֘˳{ ~w;C좐yȸn= /S" h"H :ڞOQْݻ:2ywĊb7SrHv֫|9Z(TN2W'bв0&LuגںEf#^2eG, / ;w"dyiy&"AwDv4VbX;~v'_ u}TF&1HS1RX^&uU# ?͗t/OTg+;7?v/JaV3[U/et$CMo!m'BOn$vڭ`tb*("MO7IoyEY5zVnup"PbΥbd /.P'9-E2ނ֙,]hdpam$JֿZ$rh?bq'k 1n0cK 1SQ š#}?P]SFH;TG GN{` 8fu "#SP#GVG4}!ѫe?鉡T^>4JBU; ;Yj@bsxHBR/->-!M{-RNpt4s,hT"V0ЋI+\ \Т@GixBґ/bev~;Z%?*;U0+Xd(vK3#;JAl=FZ,,W™K!`i ^oK> QTbj6'Q6-a*Q -Qǧ2{.VjKio;.RcT9Ƿ54a4ֵv?&rb @HL(up x~Ngi-sdrfV!ܷY 21 :,HfR 'KBKzgܒP4nnx@$vaԗ`]XL`U (nOno󐿕}f3“$ 6ڎ̺qVTZ6ZrǴH=p\ަg[;/iHl;PZp7?gc;U?DxZ(l!46UR7%I_1۞|/ ` Ya3j]×_L emkBgSY]\+f[8V|q蟻C'הXm{WZ? M60pFc? /ik%wy&xBX,lnovBcqlv>ͻVޤ.|kZ( WguUMF߂<'v"v"|/D .QjS eJ&QN c' ۸r@a^ 5 (祅"v@G' FpkpԸ8t< SrMH݉6Psl)4"8n`} A ҽDGFw%,(Q~&Ɛ5'ndtE0 h!Ox7K9<GZzT] -a ”^,M Ƽ/^*띓^డȷ(;U<7* EC,*r{$Jw V8ժHy(n9(l+撦SߌnOtAwQkE-Tp>0o'G-9lzwc@ {[fuxgwɭ*ҧC"DT˵9vAj^ʓzk{|ьOƴol\DW.^a$F4Aŷʯd(#$t9(v~GOm4d=a֙Ud_E)_C2Mᣀf6wS_,;170jZJDm<$nW \4]`Gf`^jr%q mŻo̘P .Ou:0:ٝA4}^7lYG >$=ldCfҷo|̘Ί]1X?i1օH|BV6&W!fek?yPJ\5(18c?57UǚT4`Htѥm3|+I&:6Xb\m+Dv=9nD i9i}G/]<-H3Bч #1}5&1Ez{Ц^lƉO'k$N2&hRCpv n8`tm!cZ&f3PkڞR[kf *}w|N8jf1dZ&/8:hA iv7Cqgzˈs@VA_u5a"B.J|P' m|D|2T.#hRհN?gMqK3_=e'#u&[֥_^;ivLrQ-'#pԓ,Mq`D"<}Qe-xbE|3'78ſ([[VPf@<_l9JSˌ"Cyx%3"[/ۿi,loq9 z)rF?0V)ipI!"ԉl"a.~ r6ʣgP9{>ވB(C^X0猄mL7]^; Q@oheF]5tE/ 4Pv[Ba}EwnF:CwC%$(f2wmr ];Ҩ3y;EPl-AdyuLc62q.kSSJ#`93Dƫ(aLm8[UFϋRVXj?(,` "r R58gP4j#=yzTVI/:6A^X^yuī0G xW&VgA5AM\lvVrVƗ{]쏝=)!g>Iea|%+q8DT7+~KmzND p8eR0t列VpL_w;L13]X(peIwT jf^ewRN8e-eЁn[#rV\r\Fkmu1 {LJT_ؔt FV eds ڹ|N6IL|mv\~RI淞Jρ@% ̀o&"UƤF̭z(R]}J݃mbp?mwcrCva<`+(aP(/\_̗֔ێb>^99Y5M㌩PGO "]8at7P7k/^1_^Ξ2Qc mP-OHH{7تSեy%/uliX&B, L&iUӁJLJ]! )1W3+H*7! Z=RL4A4W7({yK0xaLKpn@z9V_W0B԰)e{Ȫs-?kG*p֍ʺ]aiS@ n؞}N*YHhOK$]R Xҗ 5GؽݼNN]aL{YPzY-eӡ8Y{^֒Zvz :|k.6h.r *j:{uw@%fǴWt3ݪjX2f0&K?`#; ˥3+L<-c/pGM52$ك=;VX5GtK V hP;hᥨqAhW!'F Nʌř0Yon*^.9N%8B!,P;t>N]Tr-ڙ()Hu62]j4a{f/kwfZkơM}kGh7L (J{W43 ,ԝ3evB)R9,,CF  UV6w=6e8 ( _/[t* -݋t7-_cܨQ'jCE#Z0~> ұOrH ʗ:ҽx}1'1ʭ97[]s*r.8:ʸV;dK)U.dPd%W:ĕs:?wWgy(M3.LfҾ:"pKAln{yMb~i g|fagGJL)h95.'8^efsV36k8ŚA7.‡}U7ФQ={>4 >DWw'L8<ĔuѦཛpmV'{z':%36mi h/dחGD2$csS.EјHjbdR$186]8B ݃ VG~GP7A=ek,c$˭ۤ5T [1,;mveۊ~N3w  dncy_oEep8R#N4?ڜF(%GgFYݾ6me^d˾1:́$qMc_Wcp7B6,YeۍO mK`gIz{/x-ٹ35|j= @q"" iFm>qF\kY0Bs Faۇ^ɖk[nunm~'؊ȟnc 0e{݋`QF45`4s=uU-N3Ղ2Eb&T٦efFk]3痰"ݧ d*)7 2(#S6$2)d:T&Wq}it ;2ʡ:zKg=|Z^F.6k =c`Ԑww,+2C'e/,vI܆0Siٟ+>WbP86#"^$xو$A(οHޓGQtu558MJH5GnM[-=kU 4>.Vxh@<qr9aϜ C4gkW>Z :Na+L2RyI r"9䀦xGfWhp*bhN(B*JghHHi:aOSDZs1DJQA3LD]Džgg8 4@8ݡV#ТY )@cE9L۠Qb'1]Zl_6Ө|29oW9xІ]A;̰z(ԔZ *^4Y 07CkX^aSr}^L],K#+.5-8j &PB.1[sF6gs4-[2OLH-i_M)RlqEgK=6vX;mզP!SC3AЈ] 8y]Hfj嶷DahCU,kn<"fK>ޘG;@2׺пX&xJM/ʞ;dYMA<$V>{;ZpQUtE[?J/+|eW)z]@~ a7| !@ ރMu"s}Fi`_ K[KqAi N:F08XHu}ɳ)<4yQA8l}%v.\$Y ` ?ЭԚ3_??Od3@9J q5u54E#=-DjlLN\Gt`2&k:zنɶ/4s2YFgnMe;^4 `M,lD |*+> }jiҤjMIjPU[VCXbN=($>4 -ݝSk|yꄌftlf-mFM_sn}U"͆▰tc9!b&0Kc{|*{s 'XJY,mVG5])P?6.JX]=#1ƹeteIocq^&)d\&v6=&1sYVvk1olyx%CX?1' \єYn#Wr=&`x4QJӴ*!U|f Иs]c!)A.w&dVcS4R8pGk䩐I~Mr/7\xI+EH%GGt]/ x)K{j΋\!x >H <*ӇdA'-l!\O85y ݬsS$ˑǴ=g K=ᵂ+0ӐYK@^TN 4psͶ^,BQ6 99L ;3W[|0Ϳi$f4]F\MkTlFGSsZW'*7#2NG?ƽJX(ea5Q[†\hF*M8̫/ 0YK11ϓiK4&ya{ 僖M 굔/xkAaWKi'5`2`=afxY`~5~ѡj~=)_YŧM1ܝ` fƅTxxy>̻"&Z|^xc!OSLMdQ=ķhL!uW}Eԙ@AMP ȡ(f]TݥգY a@Ʉ9'$#&30 T0Zp{ ]Ә3hsr`BU+d'kSCx~J7< @\z8>h_ d:lƿƣ(3f.h.MbGV6@>)@@sqҤX*c]ʼ#TˎbFZj嚉&5#xLfECa%qfdEuAGڀ# i |Q_@͈/:zv-o%'!$f}KZgxH(R侐3sNfi@.,0DzF㧞bqf٨+J%~QZ]GbDG牥jNҘ:ҧ h+X^j+E:"y;U_\5f7.ť-A/z*igȞf&w`5j~Y! R:kzkOwwE rn2fK'Q`C:CYDn,EtNb,ejU>J/Fsb]iWgd$"1~Oƫ:(NefH!ySg 7pKr5MZ+p0XL%% .O f3@D?af(bP]Xm8OoFJ>Iy -nhD~th@6f4"6_=':9*?I24:ѫB݌5M(LLo-eR tP{  F #ic}~[oMX+`s>Ҋp2/-K]&3"PÖtZNW_:-]?WQFrf p̺Cه} '8NYeݩ˔g [ ͈R tp\Cѡ.wdU6SΔ lH׌]aGRҏz_Nmii)(Qnssq[|p_v(U ^4d2M閃ϬF*z9*W2KuS{fcڸ˶k:7/X^;]yFRכNtN}W4^#.; "rb$K~p~BW)ײX$?쟀wMORbKZ}di0z8QE9?NqizE;u~Q'cAHqE%"DRY5wG+v6bVk )blJ{*>ò!"aPHW^owgIm#3MhTz1iY^%qh'5~UK öxq}rfyNPovCb 5;=t^ʐ=GMXbK:5qG۞,$0j8,~uL ?˜ZƲro8m˸jZ0T_P2d&3*>քbE?}}Q:郈f)AO> {5lq(ʨ8:_ UlRQ8Ԇgs64$^/_oB'YT|쉓E1ΘAVt !Ԥ֖0{{pF'r3hQށTʭbFiMrh':سģm˻v 2- ]F, D;5"(a:`mX3fKC"w=C S- 93"S7ִmG:6Ʒ$I,Hbw8E7< 4jCB}Z!ף_Z3[ e{CMeMÞ_g g(YiYswpބCy/bZ`eLVD9WJCᵾL]'Z9}$%741޺}’m2 1X vΧ}X $uD[N(u*D7ubKovRr.,QM1%ѤR,YJDz~>:m(h܍H2t$O-h0.e86LzD7xEMHE.y`-C~]rJ6 )nR=$+20et.^5(} [<w(> )ގU^SgoZ6 'o=uRϼ)(y @lk>O4 i:R҈{: cr?_S@\A726g5U ֯8"L!Lw]aI W u|[QKsx\( Y"#o"ys:?Du{D;9BpAm* YW*r.;XqKti ^!=k(֞l|u`mSJezD8l@)-(5-$^6A0YLˍ]:_fv4ZdKedΝ.t%3D58舨DA#m\DfP7{oݑ"K.~h-b*?>i"aqsĞ-uM'1EQD] &`KhdM>ĎNewc[۝Ǔt N!\^AB3wؙփ/MH͝ݛ($U<ʹnyMs0sZm |Ci}WحJ˾CiQrUܵp{8BhMH2'=I5!?S 'fD<*5˙]8oل=cNy De`,ī'橰\2 WܞJѹ JJ:64hL pX^jHT%n%Nçv(ډv➛z}˪ҪѶBXi .)ݐ‘RQEҫ}?,B՚Mӣ]5ѕv#r.yUK?ڥi8igxskY{?ae8y NN &hhƊ)W4 xzCw3n@b'y2PabgȨ'b>խ)*Mބ>Ӎb$6\ԉw_KyBm5~bDHz_bI%#Jt׸m¹Zh \9C PǼTUٹ 5S:iR<^'.FDU/{4&Cuc4YLeZ,u#[c冨7WUHLQ]0&JM/hO_(fz%@]CC^c O~P=<]R)<Y]܈^i4j?-.&V&l$\iUXUը/)^$(zZHrR1@N<OC%Rt8uo4R7hd3Nn3k;OCTX, BTȚz6bJE+lۋ,gj4)ms&,qhۑ涑ځ j'y JpF0v4DǶ jm dwnZ~S.F|l wi~9zs*yd^2Dv XQ #$ \vYPIThcN]?y?)4 Ϊ}%פG^\C1o?, dF>,3R; `K-ZS7ՒlSMLSblB~3G7--\|߁[9*h.TF`גW{B,Lp5.aA{]w I 7;:#/D>nz6}C<-| *?{f>@'rN)dgy5a`:'-|\L^]b`ܿ _ݘ㨹Gx 9 CFinP_cA/vꤧp!L}N6tL^eIއ wN&fs;0QLjBL)HZ.zH\Q]|2^FI~vc>?g$h CGnla^]WZP3lpG{LcfJ1t,Z$53D'Wzri[:i5X9dGk3hĜy&1x/=ӂ8D  |c_ӽ9lno`M,Qɻ>zT/Wd׫eTc9+ǹ&2}wG??=g$CФ<:#})RYu;6[;B RdOlm^2 eb5X9KAsN }K! `h/@`v═ i8:Co&͇3:=|$FNtum5}~h0zb f@v 5-fBh̠Ӏc lm0x- %Ѿ 8C/]MUg]jf+J?BI8|5{m)Jf&SpWAQ+dǙ.sy2O{lH ѿ+)ߦ7k!);إ>tMi 10z'pEj7='] b`<${DuP&i? {tIFi j.߂D%S35/=A/ѕqF+w&q<؎H3oM[G(Iz@_BKouր!:ؖa]|ݷfҭ7p+T#PBfes|SEF&b_D)9!R⛢/?oWL-Ԕ)@Ii 0"CwDJVt2d x܈ 47:=Tm4z;./9,rKj64xЗrx,(ɐ-JeHċte9hM\T"rR 47uUБgm_3SGA;Oy'џx-kvI=MIK7RQQg SqTc#HCã%77Pә9P-I&2ZgkD qTe |,r~v5H}y(|>9浌8__!;.p+j~QȦ 0[dhw#R"!k=¿BYta u{X)'X8LJDQcОw68CI,>=:ݕwʃp ޽2jsb!y'8z;{o*6\ƚDd*82O9):_ҡ+:go6aZOUzXH C.(J,*,b%%B_n!xRyʸtiŒh!sd٭GFǻԹ>fH&ưOt8K|Eqh wדuuG!UD \h*bǕ-s:7Eu%{g,%gӉ-&C|rGg.<~?NG6='Y} fFǯxP4t]ju Y(qdU3تi3_f3$f"fI\H\r @ߦ8m!nħu nLPt}OU2⡿~E$+>Cm79U X1Y{\Z} оHaMK7J=+*{zED_#9*CJcQB0q%oyk) J\o;kR#~X1S9!2dSt':NDZg9% u災 鹻D0 䈍%O5~/qcFI&U|8dcYfwξk/t(@^E.OH;r5pŋ^0B9gy60NUthC=5ٔ{I8܃H1|WeХkp'_S7:lF UV53+EH6mW 'o0H&\>Ԟrb,[*a2jv,.\o"jflf8{k[0=ד8 (ZMx6I &6'th@ wπ õGRLRWG*aO ~mM~Y(,>'cWQvavߎݳ? Tc4YҏGW)Dli4"!nv;o'Œst獇h}L2FDa[!]^W*6~ٌ$) :c}? e|OQsar3U.:i  'Y!*r&&!hQJQ.5><5[rF<'媫4BP,re+!'Pvv>>smiXO} E@K"EᵬA'AN{ "^lYѯ |5u9v%~T!MCEZ$6< t-aO46uŠ6P9=y C/gWf:dpQ>{{Qx^c+9sYE|F GE11C ;yY(/ X.|Hp,H XbXٴ}1=0 %o?TP7%vofrW3KvD@ R?ʎ1[6_,hgQ8#N[>|&f;DڑkuۚO  +sÛb6A8˭PvcAӃX H3F +dcɷJn4Dm9*ѫN3庛B~~*S5·SGM%+8X1g8l!!׎N%R0@ - JMJM6mQwo#MVr{?Y``1@O>' @ZsA4tzʷGLGytt$#8ɤ7+J@G&~ƇTңP$C ?C<Jf|xq1=p\-kf].S%>)`Rҋ叓6v4~|zK}y "#&6-R\nOնV̊Q֥pӕ[O~}m+Aą h\r%^q|7l }wDȾݠX "fx&mTvWFl(`8ԱVԠgb_5U#lqx"e09@.є1Á^NOENFkepx)4JY ?U)!woflBWq۟|QeTk&iLUN${фMD@8u VU󄼸2G.E߃’ pωՕ70Bk I4g¼eOt"~pOJ߃JۮΈ.ReꝝCOMflN!4]`4~,LI8ǝH!) wNخ:}€es)_ޘJo!,+hhH~+)qt^"V?ūmRUvS6;8Obs/_͵\F- P[k)WT5RpbWkIQf,a9KF!a˱&oV/k!xG%H5f'Y`hUD3Ӧa4Ϣ, f$RcmZcVvNwK64%󈧳`AFAek9zqT׼*n^J6,XO[ :45'^n F$)_ҡ5G*nnD:"]#+{* Fʴk Q8yX>*t蔜ȉNH;s TKѶ*tRcNM J&ĨM7#{dvs0ltWFXEZ Sᝲ[ȿmäg0Y$ՙ"U?,ݖ@?((z\\?W[؉)Jqe$1n2M4w/09fw`a}1~/m3bZBq݊mQY :^_! mPGg[p(gZ]R7"b\:+yљG0{6T^X8lѻv ih`]ȕ 5JE1Zbm҃}CdЋ#>sm$ sy&l023^lf3Q[ d %Z,n ,]vZ_v< ޥ _ IHVNN UM3! pM*SOx͇*AxƐu9S@xwaT# YÒV2)ʖ2M^ie36e!ҿ0֞U(0 :Q, g:V]7wG\o*[}Qژ9ޏD"zop ,<yǘb4+#dHpE~AyU} Y'9nx&F+0qh@#4D±e!a@/Ay!^0Dɫ@tUḙ_(۞A(Z[~:v֩v=&_wɈWp-M6e;`kbMcʲ \gRQ@PArd {mhkpaAw`BM}`QD@RҤ4m\2ZtNhkU>*oJf:Zfta ȯ0GA5ы>TJti7 %/#iv[1{q'QR޺ؖO?6~#;J7qO ՉP|zt%x5;|a+"*!Trq"l`MI `LTcVi}MhkE88]ck AH{ 7z]Mf8]̶D(-C4|-}ɴlb>mhEH=.'[^DHkm9Ǻ)܁%vZњMYpmz x\];aG ?SFnltBtD$@(wYU'{ysa6ϲFa3JߧMұ|xB_Faj6L{fL>{*Y.^IS[#”e%@*a%4th.{KWHu*],QhE+$D^p;.'0֓bbJo~KK"Fޛss0HH_t8KS;i)^b\4v$g4 Oa|_LyfBU&l)#p! `Yf?A;!Cj]k D|F:JDwm9[Ez񥊤<4җ͌FgfX;S`<-+y2"J)˜"`UHz.)!?`NOV}֨jY B|+p$z> D BVEHgzee۞U1]ezH@GJ4к]+y9>4OºεQQ!1Z0ӥy!`!1o0۾?|| tmT[ܟnK_A.>RSN#a\k+ߚn a&ݾʱ @ 庇eIry-^*[Nm էqy߽Ql=V6`{kY~) :Yc|{%.+kTv}(_2PS@1`y[pDLKؠA31O uI6&!BH ./=&ymzvNÓz=H/tds nR5E,&/zkZiTC(kB%#ƜU%nt|BT8{3uGt'J ؑӘ˧f{Av^shRi?6Zg05tIn"4u&J$oUo ݿ?3zzeZj3)BT_l ю@b/n[;{cXm jU]rEH~}N鿨tLǖ)Li-mJMbQc1~34r aTeLVlI4X> ph^ZL߈zkEq Ds__&1Y;YmuryG(PvIw˒vᗭ44䈆vc =9#*D xmDXc/aBoY?e_%,Nrow{9HɞU]w@mh񾣆v;ghr܁l?'/E-c/j|~PqEdN}/FœL{hc5=F"xX]\2yMg-]gYŸ4 J׌2=7AGke>ab$)YＰm΄Kh Y1Leߚ` >O2_B&~CH>^>(?h)&R0`@mD31pV ꂘD^vK1!ZKf% zJSXS&+MfViwX+T`?q,><3S],I#"ٳ^a @b:ןNк{E ֽ/c€^qh qxYV;W_q}lmv,i/ד7 t\:_\1f > e_dz] HC9.=$_Y7' +*1A.V$5JN~;$mKcހlڤr <3wCrۏ"6r)<-ߎB&Ηo'n05JQP7cՈ;_PnjΥ܈ɗ#J<&@+OGWįD_/ lj|c;h9`Tg0׃RVM7B{RjR'_ۑ{ mPy*+lu >_l++g]ɱ-]׎lF$YQ& tAR 幘+DRfy* Y;7m"uQ=6)-ȫK otn3Q >-e)6^%WW,4QzBVedވQ:9,V9zzIL1~ xM:VJrk_EHR8ūݯo+Y,4ھHN)hzSXKzȀ-ZgE[ nހ{ay&S 8 jɯAlC*V^;⩃)| yULVJJDȗicmjj"!oLg5¥dSoo 3鴲H%/w&C4šOOPyk9 B`iP\*Ǟ18X`vGgL!}lzp\* `ωd9A0C*7ygnߺ%xi>IJDrto(JN<"E;nA +X`(qĵS؝7y|"B8 .V<~YYC|l&S#YE390s 5M<apS !sL!}z/q gHOL;6xv64$ /@z;J F!lu@,(Rt>LGG,|;H#9(Kk̴ NiyZ+Z9.?TKHξ",viO\ >&kE8d=!Pv@$Q_<6J{W.)?Љcl<Źs@fSS0/-H\@MWovtbgyh(l^6|PM?gn^}0J@<m;iVo@3L !䮊?qv7%N$vlLHEE! ("\QZbY5pmJ; zaa?E.hul}]>*1HuVaerBKQgȌ$׷6!4԰ڬ')ϬɺEcԎ]Y1QO,/]>@&5ᴽTOۏ<іŕ[s{3H3f1N^6wm5W2pw^.p/鬼ݣWRG ר~3u> Y55*tA;aبaQ1Ǝ^GBU[j? ;\E2,P^X|f̜7hcULY|wIpkNح_:&ɣ\(]VF546Ng`ɺC^FId&eAPPR'n~yiSY*bnC k-&U0 IնI8|m~C?٦M6Y+sA* XSdw+n,SxY=Ht) Iݫ|!:ZwnV\{F䲑Rm֙{#ٜhJ2jɛ1kl9;6%0ړDA "Dk)H㶓 jghDPdްa=ҏP>{R}daU9P *̓]=@D _cJ·ִY#_XFJcөdfrWd ױ(bD>:}|kx1Ѹi;h=*${X >xԕἘsju֚CA0iW~"vY}WMx8eyw+u|9'_ͼh|.[6)zy>?E\6t%ʾmaO^t SEKBr_4H̒*i`BgL(:5 uj ݰ%ɽK('#~=F K))Ns tUU՚%l@FY*|`bZE{cn||נg%'.Q`M23.ϡ.a/Vʙmum"}rh[\-viLpiڶZiܭG|8k=ͮ^S&f~ )UE"gtd*@N%L "YM E V {-mqP紱)Φ7LY߇q ir /M} r+> ؑ?[!Е\m7 -~٩%L%rqWL R/Z2Zb/N1!&{EV]Ϙ@,5JV댇w(4ofܱEieK}h@==LA~gA@mX1qa.\!@!\(+s0u5O %ff]xq -0}hCî҆jDUf@d۠VEtRӄ.m8Ýn'3i~SEd 1 SZFuVX2ZG,k0Ť?;6HJ`N@[Tܑp/VdO$:z,WUkmm|Ǝ Rג!Sp'/˷7O*r$м?Wҩ),N22:Uop S&%A%Z ϦKlHAɕЀVFtd9ўi0TO?P_Jp]`ɞYFHf`nB>FTݭ0+M"/E0DA8 QuXdv^/H&ɓwacTZ)hiLߎtڡFɖx$UWf0 2eBoh$SvUH 5"P4rh۪1. WFCϒ i$6к8 j:}}K3.TVV\2t5 RO怺 qޟzɴByPjsdpQ =+Ҙy:5; -|q,m3YoXH36Y.;+ei)_~ǽņXs 4=r<ۯ)xur)Oh+=/׍3%BbC2IDX1¯H$lwD܂E?LКlrx̓MG=>7J}f"{ۚ+yg]c!+ LT怈]w1'6n[w`v$ V])61f?3){s,”=BjnQ( }8k V+f@}p[SGfHN}kH߶lD&bpwAavOE R깸c!eMyAc5nP3H1./3„B_ŠjcGnQh=&ۂxJlylq-ČlI^ތfqB4qLVz\Ky2N6LүY~FfSzIT3zCsxlIXSGjp/3m|%~#vgxk9 g%D8P>а0̭!O\v,Zb~V[Gc_QHe^:st1| *bM+McQKbiNR$>6rX뀺C͘yóf*%_ EuƈLKPTvэcA.Ak?2}"Y$DbgO6GfPLpqolIzf 4;d{Yw fxUˣh94; pQ ~^> bMmOơg=!\'lSVʁt~k\v!\e{hae=ڄW+J4Ύ;]}P'L˻"h_Ѐ2z(}xz g(=!< 2gk*$  H!^ HZ1  N2>UΪ٭hi ܒ;[5uAhI,Ov31;+_dm6lh㪷T5ri{ 4yq~ϢMB#dm*_ =Ieױ xfHqj~aF˿o,_tĚ]@Ԡ{'1Ŗ1D>E&oBoZkC(4{}f᫅.}sJGjk۞3U=[ݷhtdnCGLf>.83#c3 5BY0ԡf dQBtp-(aI(m2]H+V0PEzc.kpfTq+&%~P}SX2";/v3NhWG2 F?}Fam2*eJ`]qt~nJV#~VeF 3;҄$5?94.2gщw0Lھ\.r=--|ʖ OLaݳ\rC.U!g*a1uVy:Qs O lńk{S>a c1!r~pY1>[Treln[_*gmHWzR6 9R8RG4s< 1sR(PgW>lZ{ '2'ث $Oiai 6OoT qC D Vgצ6oq*wR?fMQd`7}^ln|!Z$;zwo/^a?3(=K`$ٿw"7"ĆggzŴ2ҍxg_q<$s_ӥ0f vh1}# p?̦4r"PTV&a t3Sg̀o[6C̀]2Rs~Z!廡T U\px?) j|OdnR@Dv]4>*Ż0)cnvEFowER (kB7S;)dN (Bys/F1HY'产r-40LCk =e-o=c/0_ &i3G=,C }$ӬdpEi9"& u|D*xȼ}O#@Ͱz4HBHfÉG6>SQ/`#dcil H3oPqK ?4D×D 8Pp\HnHm+F }=NkA' tHC >(ܸ%`^] H?>;%jcBf:L%Cnˬqw%ϻ&_b{T͞9G&r Ѯ @ ^R!N!嶷jg͊ffAl}1gm k㞨XlG'U[Q|BqKUY4,GZ֥Fȹ:r&v' ֍{볊,`~73k j˩J#VΥ<7-L;=ڦ,t#)o`r,zZ3:7v͉pH̨d7Ud{iVd$PX07~O<.L4O,]8+趍a兹y,-瞽$JiL4fw}8 La"J$9HCPqSOqba}̌X,JV-Ygg2| LZxGչtެE\0:K8$+ݗ쑜<9HF_2/W Չ/B~4? m; ӶZ~U,2,lx¶UaW?GekbѺׄZKJdSuGWќX<ҞqoB.Ɖ0.)P{h/7T#s4?PMz x9+J`U!IO^4yIoy)_,tv &주MUGhi -st`-/_| lC /қz 3l!YE~Y2FK&c ӧ!︑9ݪ:RnIgkG wN9Vzh"9h%wtz`gZ1 u4sgQU 4-9{UMm@5U~%0Rɻ{d;A3L>09i-~]}S'Tt;a6gUi14^4AF*Pfb; Ie:\܈ A|{\p?*8kSv9BRiqf[͂=s;HCGDf#?O^':ddz`ٕ+&ސa݄d!DbE3 ;iQceWw={T@,b}Rgr\1(U)|E }F$ѕQiq\wog:j}L'9N߀c߱ |`.^.hλ)b]Ek-'dn]Œɪ†A7_OmJz#Bdu-q,1Y貘i` m{FފHԹPWG_Uڨ2ꬳD#PŦZ.(n;85\ƩQ`QWD>>TߠLek˦bo uS[0~T*m;Lh= z0>_l[dʌv< чG>WA:OlseN!Plo Ӧۤ+klAϱ"tpW@(?ۅumf$UC0gCZKWΞ(} *Pf'tC)8ѥo>sBa}k@c#-yTPW.tn;9OLS)W9mzY_*iT5 կ@[R;4ɖ7&"0S[p3n0ye 9O-x|Z?ԀQ+_"i|FN71{ThnaނCŵr \FsŽkYN2][ٛHCʗ4ÝVW'm5s t~I攁`67q/|PoMWAReё_y-u^!ДR(e쒪-<G3HlHx i޻I@5UOMRJpc^ p3w9dǚ ^&VeQ:\Tp6'[eSp|- ^-=Rhtv[!T\d'$/r:` vP0KCz¢LZ3-ؘ[ŠJ*)Huf?y͂qm$dgk`x3/Ltij;OD.b,ڋ?x Nj^h4n@XDP8R* jAVnkThD"5L^/x:gZIajs0]ӻI'hy7pftj6Y02rHKhUrڝ?c^S@SҶ|EP҈Sa!дVВ /8u6A$T%:S3ŕ]M.[[`J_c= 3ea:Q2UŃb4qĞ>J"IiZ-'瘞4`dGK0g/ _$2@y| dױ (;0[0&;댭Ka N%k _șSD}qgl~K˛+%T[WL#=p.^`<>&4+pt.HP,% `9W3X[sFa]ZnE loFA Xe:R!ո_^7Gm ֙(FswHd8sʽaMG#{d`DλRpX70TeTQ;[J2:+,ՙE631.PF}/rٿ7 lv) h4Inӱ(Ir}1deS^Lf Xq@H.1zv{wֿa Cd=$|O б!UG\M^oPhk֐$r%MboGxV+bĦɗXZ5N_j2ѹ֘9M t1NJ*Vq*L?olF= еs=|yjX}d-oK =ұgBYZ.RјN) 19Aݤ(8xlZ ?t녍 rS饲f-LVBJZ((xBS<IJnN$sn>o0*I qmS\Ϗ◃To~#\G e9|>=;g]'{Bu_? _Nkwg^,?@`jx27߮e<|[Q:N_bc!=svtܙ8~AvvaO(nY?gQӸĵij,_t|:9h4@Hn*ޗFߋcG~ al†z4*A %Htk#SQ}To_ΫyB z,i9u$Lrœ<y2¢Bsdnׄsߣ=B`ux!^PCQJ4MD*8[Ҹ^ /FWPEq%ֈalm!:$rz+ ( Ј(8U#Vb\tܬ2d 3#/ױw SYGF[^F<`/Xz[)gYF}KC=ˎɐ" D +bȮvdr1 ;Pv0t[H6~--X"uu_|>o\@,6hl1xpnz/$4#pkA4񌒸=#ysg߈ w3` 68ZGK1wPu烰φ*8F4n].My(ƨ+}} sy= TR~< *FzSOa]O'=ŜӛfYR&ߒ9l٬F)g&2xm"DW/Ȟe)Ii5dS#_G4r۝휋hJ>bj,7vŢzVDqwfuF`#N_BlI6+7j ʓ.DIv٨/G)pj~k֐ -,;7hg]p#*6VLda&g–m,jHFK|#ӖBxa!v9?(k# iF/8 MǨvO 2i#pճ h{w=Gr~SO>BHT\{&HWbzC}M} u؁QF꺘vCIiY&At?ٖ;d`7~ɪ˵:n(~̓v  z,!uܑA@Ƀh"%mt{5O ŀ{).=ۛ%pݏqzL2YȾ1p3f$ Aʿ Ƚ*r TI\1YT=;N֫^tHN KϬ!u`i{>ߺZo=Ҽ|.( d\]9PJǘV pHt+/ l~YA5:Y'+|ъw^#MVtJ/fN_v "pc}Rl N?%\%VԁЎp+%P7u@7A+1lKQ(= ت}BڇKQ๚̢' 5ݿ:VAχ͒ }]AE6Gctu]l6%0i (>*D,c(Qw|Z7&;*I';0elb>ZPlmw 4qhw1r4 mJ^y>dg '7g7_W潶{"4."UP3zȃ.ng٧m In^ZJ{.0SxtϷUSaC#ox*y 9]l \8\$]WrN9`M`7_]'i{K}s!wt4ՠpox;~sfi6^Jp(l/}e0G L i2ܼf/g f”Y_u“J  QE2&R۩*"'J4ώ ªM .!J!}{_C}Wmmn[B C ct9iwV#'p~M.4AM৏($+(# /OYJKJdBۑyD#B 6;[J4zav.9:g./SN]M}"P >/lF i]CCP磺p7]܉D`(g\K;9 LŻBv,{t_H5nL33ض3 AL|4UeQ5)⿉8 0 z( Q[fo50lo}|U&hC g+d XK]jΟ|) ҾWLjsh'ן7BtX=o0\ %#:?<]>^Ij'RjʹԁYx114&[I>pESC|d[6vWz"VI5^~1RI #!nȤ|ɺ$DVOkj&uiuۙ_Pp*\՛nSIa7>΁P,oImW+P1EwHXY$#`>63Z')r˳0nIi8*]tDPu킋>U>DHn#:2DJ+pW! =/ 7~dN-!uPar(ZѶ#H ͟vVnaGЏ fE w92դ}IͿ%E!X1{TrM_45mKZCǻɼZ>EtيռFAc`kU蛞f=vu>"RpͼlI}y)es|EΨuKR2tٴOtELB0v}d9GкcE|R-l܈}|;͗Xwxk]q,WWN޲ yPLmߞڧ~kj UA$DMjh6{n3\'o(=>3 TRX6¼)Gi`";'>͌=`G̕q%X =ĶvQ[-U0H0\(7nWy6=voUiKpa@tx¨Yej}Z? 2,rzן_k_nL~8M(kSѢɔ`ͽh7ks mO|1DwģY3TMk*&6(Ƹ tE%ܓjZdG"Z$AIQO7oD@YU[`fo;%AQ:b"H3~ y'?K,fc"ܻ9na<Vr8bx?9˗~+BP}M$قff}JKh/$Ѳ{+ ȃYZ@GnWTxu >aZCa@ ocaX)Ϙ L&hLןB&c|O]#QԺ%I&J Fb|@|,eZhN ӬEnQwX W6r}s* `Z[J*kE g>u!lLSGQW!FXf N|\-cz%MX{UV,D.-Ƽ; Ϙd0FJ~8Gգj*V8ӎUQX172۫^/| \wGPaNO[:?)/E(pZjBOs[azd X]͎ XuVs 7yӒ Ya|.hKn>>6r!d8)hIz|Z)%<TsPeQ@"|HKaOQ<=C }ROS9PBHDH玱qsou)"N6 ?MedO;!Ŧx2҄bzF0F3OO:%(OVoucׁ|4J)ebmBK vLkr}6[2G}.0Ex+(DJ> |dMl@o^YrS>~@!F~k w9hD  t\@%`5O}2U[`L"p+TQ]c-M;ɪe^ؓ31䅁#GåÞJ͕QX?" Ճ' @rr Hsfn$#q>rZ\/t.ɕO"ȅz[%oRFzVl@AO I0Fr^ٜ;+Ao]dȂ*)Pd]X(zSIϧӴ^K} J擇շꃖ鶵L[~iXtyᔠ A5ȴT= b J۟GKSSiUHnŦfR/"NNVAś Pf5'If}7i!埻wq£F')L ]x*TSBz 84$b= )ۢFٝckf+UsN\4vZ.kt)}kLDugHR1P_ P]G+pCW~N 9hsKLfiv5PzLV6 1sH1\Tnc;٤_Ӑ#;GHbO1dܣʶAӐ2ClMK/6KRaop[Gyt][OQHu^4^ew 4'a)KR&|NS}E}6E1Y%ȏv]6K]D,`Z GOZګMs#V& sp:u nlب|[Y݌t81I x8'sSgl21X"ej\䲇7 L:&Y}8&K'uwɕ!WE/.\T9b4SVn ȏJ^})Y R&5 M׮4a4Yڲ8ԌUx`e|*%z`" eo 1󐦠흥u֪kn2kV:fU)0uQp5Q}74Y~qZW} qǵ2P./^1pECqLXA5ƚ8iUʫ*׮4 ΋d7&`ޕ U!pa^)AR;raډZ<#Jg@MI|lu00/AG&X`>,T75P˟-{- M~tMnP/ "֔&݀-2:YϖbїtgyS%t*mNM#=-R40jß1 D3in';Kn3T~N\>&O,C㯹|,9k&Eщ\K|Y>e t)$p'Xy/nI`Z|h]aQ:GTZ>/)~w" ;M PZF@TPb~^.yx**I`°16!Ѿ?.fx}{C@'VƮm_[ Ǯӳ`+6<Wz/LŚaħ#uqtĿcvlzܼeFj, vNjVnAjCnb6`y/9BsiMk34ϕ/i *|vїҺ'3|^R0O,}K`yOgI6l˻5 nfؼʧX$^!n*JdE;bje]W)^0ieߪrKy_MKpVI<IbQsC d g9e3uR `%~ 5ğǒ9<Et1UlE_x9L9VºDKE2a֐GDnt<ɳID MRs6)@=[o󆼄EЁ2kAmgV&;hm.I1Md/ѭp>WCfAKpCq@~aL$|7٫0P.rLu-yД)щti4gMHoeo=#q #DTK2dBɤPM/9nQ0Vu>s)mչ )4~οH.I0냢%xZ"HL瘝Z:ZMu$6MË-;l;k旊شk0.*hi+㿮FYC-s^б:c~`S@0ȼ DFLwJ8jNԑ{_' @P!I&fT,%]!l-ͲWxj4lJfn.~7פ{%TLP-ː^7Q78o b @r?QDKD;d,Gy"mVe#44KWC%M.օ Dr kI]֙ر;P<e쪿G;>vi^ 9[B?)X`FdI+'0y3YG Q O?us/`Sl,d܍_/s)~Af2mx$Sĭ"_#Lp]_ p*$`d Nh>~N5;<_Y/MݼkP׭sTJl(**F!X]0<_uvH/fZ )M2HEUPͨm^P}0OPq (wQg2,`ޔM].߽7sWV̬4j 6x9Nwr%`*p\?1"|0"#3db^8?܉?^6WaX`SO*GN%@GL^(zcT#S%c] ֵ85$1E+2\y@v3U߀ \:1[i_v4ږpE@* .=LORS(Y1jMNnʎWB5Tky31sQ%%im'iu -KC 6!}5cwpwq=iQ9!#X^6'Zu75f#f(᧢gd0fH{d=Uq'[?FoO}4[? ޣ]ռۻ>jB#z|0[p(0Zd ǡ%Ob}J xiW>HTId":]V X~E(4OVlx@UѨʋx #/`2@OH}_X)clro1TW'D*^ ~05xBm495^o oq-Mwyj->~AQgl ӂ\oq4Sm%03X IvꃁhE3KX|F:p30\#na?.޽m3rG헼pt$K{F~s )ֺi ^Mfgoc_Ycvߘ<ڶy04<֙>h^q9sC>Ca׺X Lf4ʛݨ.ƊZD) 1yk̖t(/ !.9zLC&Ul6><~אOPnP'Ўhj|T|R\}aҨ=pk:]FcrFPUKDcl{ <}ܩq/_ԝ J%A0Qc]ɼsS/v5:)OQOyӹ^Ǥ4a_sRVortD;Yك fȪiZ'rCVlNBx^ͱcx:k 4i[qkU? rsXNn:UpT5vn6K"ͥdNGJVtt o&7qWbWM8 -hflc*Ay"TgI-SG`bЈE+_A38O^@>jAmXrjtJ<ۇ?pۇ#r#DJtZP r ̅OPt[pF~t_},dK1ᕅӪ[`/).[FNv7-Wp]CEjnC)zӗp~IԚ1Мs6a--rn~|د@ׄȚREA,tT1@n;:cÙ n8о\V7.dЅ1!ʺ[m[ʬEV$>wuG>\ߘ/lW>&WiӆcMF1ʬӘL`Ol$;pc.1-)sKm]C O}GxDz7\(t/h l{QFE_${I^@6!nA8TwO/']-۸%EPe]nF8xgWO:tPѾm[ҁ+EXԹD]쩞 zàQ0D{;f-^G*P¢V~s\7uȾ]Z sjJ7-0a0B'+$'Qa~%-F6>,߽\֐p ښ1#ƅ{4:(&׏(;sF&Wܪ0qm²MmJ**Kv28 oD*!i.hZ }9ӛ{d6܉ͫx*VS-ƨ տ18;Km?-&s"F]8C@SlJbMr_d*8jDz:KٲE^Ǡ-j7(Qpv3`~2&ݞd(2Wwi.w۱OP b2 vWHHUM{ y{jh><  MR'A#z]𒰰Ox!o'(h(C,#*/<(%D](8z2@ WY`I%?v=5!rAT4̕vMioa[G?/$dfN{x!ϫQD8}\JE|`fj0Ʌw^K6\ 5H(=WJM ;7vПP& Y `md?uZۜKh 2`h{n[P~]D, Mh`n P0E=v㭦 J"T瘸QRiD| 4l~N_8>Hʝv` 47$F"7]Z&_Ab]G9~V.e>2 #/iWk:Ck1D^fsu,Ο޲ @aj/?") s8Gɏ*;8mL["DS/3*f#Yꢙt^O棥΍,)P5yt=L= #&+r^:`18¶qdXPz\YQ(1/f[[ tDtb쒠O~~Pa'mmd[NPG[ ymؚHi!%!^lJ=ۄQnu̼5]n(7*,K9řia1Kro2IĶ ŠdEIaj,cĿ* 2/Þ=[MY)ǻB\~WpTvSOg;o(g7;el4Q2KP̭* ;Ic^ggS ؐ惘 yQcW( cGZ<Cr;9dG!*95"yAכ1n֡0a'v#]?:AR0I\%1rl*fey(rVlH7X3oeN%yVZB)Z°O<3Ta[ b}mI{@X`(It*Ž71 rq7^؂_2 &+[|3å*p@-\`iK#{HiTugr7d_?涶 pJkO4qagl]RA~rɁБer7  |X)?l7OhH`2Tm&Dci_jaFd#Mf!pƴ '?At p g,|w[r*>ԡ+ݝ_;` &P@ !`f2e%p.PML6~h ) KMf¨XH^zf׫|uR>UȏGv,^k'ؖ-l'$aI/wԝj~îzE4GXOs_({i=n|qEʟ_|nh ׅ|!UIȮimpZeO`|;ӺXڬ;DBCKOv(IZg cMIkUo>)<(!\zꟜ:dUeesw=͕׷ Z2bO=gLeezHbO}юṖM0zEs=%'0]jDR[ȴ. G]9e,Ϭ6'EٛɡƤ/PEx% .y&d|TZhT*se L-ǠVB\LqE2.e~Yg2pj=1X0+ZME pFG֚Og_RUC ,b3b8I~!GɁ\3H 5_m]'Pܐ]<7#O͓5=\h/G 0Z@r˭T&k]m"*x w33}ֹqnhTFҳ''7'> wl#"JR6iCLe`3 FDZO8"8x j`R)E[c,fdI <#_ԧB"ɫvHYq[Sc޺Nk%>mch~@h2r'X>Woz WzMc)=`ŧ'Ytq%m/t!v33kFs g]sbwP*$>Q;'s ]*s@ Vw5' fQY kKI~Rb[ͦ w1N5 rG6-[h a#i]4 eb9 _|U2IB5mUh7ʁxSH==mDʻ {@C{oQtA:L|BJ^DVr k{`RxmRbs0sVe\;xirNRȨSӖ"w-y,~xȚzKl&O4¼ :̯ ;5_> \D87=ڑj 6+UgOؔ\Eh"FPI+!^չ+ )+·NJ:&touC]:C%B[ GS%جg/M.rjʂxTX'QlF<}Wx7̋dG!Tmt ꤒRgDRxw;#'Bn&(Шq6x&)XOFBo,oY BIiڸtĬ)x yb&ᨴ(3F/hq镟i`9esnU3Oi֣* kbwjD|6ғJ#m(l>ulYxAk"~:Dhs%݃ѬFo3ݳ$'js:ו؅KS2-v p.U\4f B*1NS6ʼnw{E?,!L񁮑?X7"0B%h| ܑ<6e<{6"_]`%Gc7|YfgHӟ oͫE3^LJե=ٗ lKbr!41F]AÈAޏ~*imG{1fνDO!0{w ?ve?AI.2cE4YV[Xy'n844p]ڧXy;`.M NQS&T#wPZ/ cz^"S?<^Xibgaz7laHw8Vnr5^uZ_$C(d94tmeC}"*^M\c.IEX#Ds9F1ʻ.w剟,Mj~?-5VY;D>sB>nIwjܦx- 4 :h"j a> (/9/*2ϡQVM6xH3$NJHϨ]X%^yUOdcH+v+b (#H,WSn,'6~8?P>_1 v`M}HQ66(G^¶ehF{福li|dPJ_5 =et=>chR8 DN q.eH+#ZA`_M\7Xx2񦊊T`+ފ($x= J1XH]!ញՅ?)Jv|1P[xF˗Hnnl N4K >wr'}-: pɰ Ls B߿ n=8)nvp |G >K |Nzm:`(P+Y)) K%PeGLXr@+Bݪ'O i_{~N? G'$" 4 fq/SLb!zXå3s ,vRs%@8 ^ŞY /e6ojtwUIob{RF$UMYevVfArT\S&M_T!Or}/m܄˭+[ԠCiQ~1(XΌӳ|G/,K}%)OysGdH^8~Qbxt(MDr6+ûkǕ`SR@7$ͅ-N^PFľ^-"oIK`9E8? ACjX$Φ\cqZ U8o#7立o " l&͎Rj[St =}ID+n`r?k.J̅ByjÌ>"JceNik3 ݸnj qe`Wi缴 o>n9Q)CF5{7x Ḅ4R=u3] CPTuoxf^B~jC~⬐fM7,Nu9娨0avtsQ˒|/=WeTG7ctmը i,4rTv$eX,l{[V};F}/ԚcZ*a.ǂx$FPJ(!#csHb*L@o.zBjNyק6kr`3$WӵFKrMǢb%N$(6ÖU&8{HEԙXjO&r!,WூnEN0*S(t>JHl!rUy+Gդ u-"i=2w]͓[iF ,E􋮭VWM Fx].VTtt1"*T =t#sw*9uf8&W` )US0uZy%e*P@qX>C0VbJ`g6Gfh ]; \{;9y'#1?WmįPʨf5OOfʧ۸@/l{Vgm.QYc6Q=Ue % +`PMy?,w*K? jVu}Mhik&E ćHE-It<_ler|< {4tBޑx9' Qx={2!.@`/`J7-\c_<6Jھ&uoQ~rwUîw@g] ɏ~03ʘj9M (h̘==H݅6$|ELoH4K[jEkfa7PSҞm:m +8Cp'{bC ƻGiޮT$LCetMy n,`.0h{CQ*$^I0+@[FB${jYO4c j2yIP}>p3ⱚE]CX֙xկpm^>Qvbuх󋆆z &vw#a=!%Z*q)ito`܀8 wѱ` ]*dC#]suW$je^F Wㅎ>,.Sa*  "`L/=[]@M4Me{?ntN=;x_w`֡>)N.']c֮yټ Ҭ!3+ʻEz~zZ`h֞Njxя *XFե[deưk**UBdLN8q(ҽx|8nBOݬE\[ƶ.5 ʩ-)$Un$pEư&XSSWZ 5%[ɡ yRB%$c-P0ĵEyXDQEä#pP9ڳwh1Ї᷂?٭ک;깄VOK̬iBI?8Oo=d`(' ^?Fb/"pH |Qw 0-1Dɛj& m=YBHP ͊KݾdKRdr}q-i o2z;+&{JGgpWl&D_%w$6ޱh4}tfѕ[k["d#5  N*9o]¨G$Eͤ[}ՕEkiK:䔌M2eMD䄊xOs_>iofg Ul+| Hiٚ%gVl9{{TR2/i]d^# $u Q33$һS)CB ÀGRAHG y:{kyՒiXVbm`9)}){ -w둩{*gip)do !|[Ӡcs9^)cEّA:YO\NlS/$(@Lǃ\+d2X҃ Q~I1dD9#ROM-0eUcl2|'3 ػ5,gjdX*?OaV ^X8Eur[ө ߤ൱@#W)|ڏb^\ЖZog_Kn $޷wC<`X0) _F!cn(˺A[?jep; q@2X@tvΐ𥩀$K PSdK 0u/W31[fvXT禥P.,ۛoΒyMVWT>8VT9DjIƘ͗I,V<<Чj{;(o_~ 0jV$Jw(  4W-W*c" E<:{ sx{RȻ@oDZT˛!8J !g vN<Ϟ CbƔ,%av`8E\1#AD[bj >b+橗騞zzExV" Ԉi8T*H .Tk7q( 6j9l4* lNPeM*v8I8ʖ#H`! 4Y) m H6Y=l {"qڒqH$Ӂ;a8w+VmQ =f7èy4u.І3C)Ik hbdѝr7Q){ MB젿L7! HPwزFmȱÄOyhk˖3LQ0e)*iqb)}x W;xh3Wbf#0hC9^gc>[ez#iéa0.o_| RAd{\4k0ݐEćJ.o&:%ѕ*|Zth.gz0OK@ZB}{ Iv.tR̩vV0CD9鄓]],X<~O^@cIE!jbW|= F "i\`?qAwuwdqh=Ay1MvCnz}_OJe,h|TQM`L:pl36}hzW6$ )cPE@{ڬ13TM\Dfh]lv /#[}PU"5IpCd/u4M۱%U29bRj\2?Ib 2+LEL޾eZ.QD};爋׸,7cG# !8 #?.b+~LѢ 6)-`lxn9JQu,gYҟ0a> at Npy-6%p9d$_) "~6b+9Gaϱg%ey@f,%*a4 M~}[jh?9\~N82w qGAѼ!Mx0 ꧎DIAׁ?:)>f-!njG'y QPU?1}*yS8?󉉽ѻ$mƦ iDr' i8Ѡt(S)Sj_5%Hhݝak1Lx Sz=4`I`[LZR?:PG8. uN"pOh7'/R.[ȧ@FtMy_ranVZ>|NDqiPsF%b*p۔Fb٘L8AZ0 "lZP4Ow_Oq/H;TMwM/5zJH'RϏI]o[U ׸\Jw1)7#.U-%-B-o(I o_A3[rZ'ˉMXX8ƬŶY"ա`)_V3a{?ַQD1\NRm/94@' 96`u"0$}vL,*'n+TU٥.Z!^%l}g:i0!~-Ҏ%͵VDMoQWk~cDك#Yk%<Se#:@O8xMRTG֏w{ tzl's\}DuЇ-vFfcf&k4ݪs@D×_BF)(79:0c0Ԑt+p;-OpXD\wfr:AOP]! .[ Kf~T*+x9/\M9Ĭԝ"Ȍ1؟.uRs? ȣbjba ?v}dF&zi\޼]!^ vu#Gːc澷 ט svT;:D+9C*LàhݓF@ g[Q 6U}fC}Iyhu\x]. $R I߬WQgtMaQu8bR#dVZKt]qʃטR Mh?,nfʦOk 2ס"$'bEXt;?p%(y8C[)܂Q ZR&> X6u\s|UQG5t&[୸uRh١ F?0X"LƍQYh>҉Pc[bZ$=l E׎Pv+3,I^zKn^εEFg'{7<;>ר aGLw}v!?M/@ Yy>,z48l2ja.f+lSM@Iڒԇ5|(UF'緲l^ļ7ey՛FKhS%Q#C >% rZڭ3Ko>XhCf{ÆR "y;7Ԝ!/Gbڝ[G0/Z2Xd4iπnsMD9dIa.Em%x!¼ODκ` o4}lۀga\xK[ g2`0)PYSJӘI -+eؒ.΍g/j33*/^ٕz 8~C]t?S,:w͘Z"~ $@MǮycAAԾe|ZFԉ*]c嶄=&sZ@(/3i'j`ps ¦J<qպO@?UcAC3Pœ,=.DS5Y^4OJ&T-d/lȣ 3߬kVɣkcEz-0dXA֠k97%:ze w>61=~D]}L Xoh 3چɳJ~t"Ǘ۬pL5 O*:wdZ-9JPYeqӗ.u5.-#yj:W X/)+-, u`/9&vك=ߚ{Z뻪 n?#g kMl ]ʧ."Q;tp@l0I?1( u E|kTu>E4켂IRY,iQ4^ċ_NuQTx<܏2A'v B9[&]T%Y͎ IՅ?@*t';1B;=bkY20 3< ZdR "~(qIUO 6KwRĴOl%5ՌuQb lc?®J Dfǻ^BGwY*fIh YҹBAr#2uY5s,ޱ8cעΗUDUɉ}e~N.HJrIPAΎt/W=n-J̲K8%VG3A1z731ΪXVڄeǰ =mKn-UΜΫ\ ۅg?**pFnw!REګ1Sj߿ZtC%GHGӞk￸ Rs^FÿbTF,Rz 5Xzp [D,QȮ3{)ٱBd-"Q+FOWi rzq¼>4%w<2Y~,DMPbIoI+cvM6ThSO  cI#~Rv@ &~.OV:smȮAVA 2T+ƭ fwKPw$C:p?q̽hۢdhW?d)T6fzU2\3;DֻvzxGuwH?BYkӦVߨ|ې̤2fn!+8+X;M4qV$Qi:| &u mx?1 L=jMvw|E58"L' i [pJ 9N?91"Hf(EfԸ hIK|S^p$6ّBlb02/>7oaZ(QUÕ`Є o%`v-͘Tvv[m_Ndmm{uC)tN7nKpI61%Diw|h"X?[NCd^aEk^ ӎ"8tU1 {JdzҐ`87;4YETsˇ{Dta)D@ Yc:Th 1FEr puۅuz2Yra kz?L\_¨ gT_ۤsCpH6rdbrV4Aw)t5Q~ϋo wc+=<^# ><6؄FB:b6xkz,$wLU+?C mY4bn?{rt #5ou. xH4)Mr0Pa{XwgFd[pE(f: ~| DV+gz@H}a/_ͨf#u`S-Vv0I HCdwk 6Bq0 GXs6sO/c,A׫23A[ʟ4W6uDOw1UVH dټq5-abAի]2K 9w-`6ߕ G0ɱ)D(PN =r'1= Q &֜shiط? P&JB끌 ̄D#6{tP4]/- ,^lYv; Mܔ'P|l"7 !ӓ:k`7n% XL}5(^#){ͷGLbY<#oL*up3RA#7&P6 ]pͦL$,.Ja@z ӥBt W޼̿ux.N8a*frHjr(@(\IE,R<'vadey]Lg *p `1$yJSCEjo7 y6; ,9.f(0%m\TuNF΋YzJ.E!ue<-boǛ 4:DpjߣRlc\},R =mbZ3jNK&ڋF0DMep.RNBP"eD\nϺҶ mAK c.xrLK RJqpȻC7FTEGsHm\xKa>.tW $J!Zn@G_Mʷ~rͪļ`p:P&l-4bǏ7YpeiYMx#һyl()пA@42`(6:@*@!Exm/z{$xT x-ULnCJ6'ބ$ˑ:SK6N,UF_wt{8av|眺OqPyN~\ inn^^TMѽ5}$xm*t|^cCuD^k/D-e w4ʠ`HXSE즲U  \:\3.zS7I9+%kܢX9x!w_FNQMYF[dZo\oלwW*qO܁$Qk>2i d\㚫QAU7"ȡ+gB d9}U y+ht4`8I>3,c=VȦ}܋=^vϩɇmV!kR%\XOٲ-jɏ1 ϒ=F4",L+,;6$ =~lE\hyv`` ;ΧS nj5SO W ˥{- \t#NAY+xEDg*д6BԽ"7}Բb<`eFK:u&Wtoc1xa,cO P -XS*5CGESnV_6 9FPDdgM#ٙADF։phyKtDwp( C~{RJ† u*as/qzJ}}lYf dUnb4 C@Œ"""$ 5**w6MūRR ƻ>!{4tnr~Fx*H|1Zg0GUBx$Wc];3Jv|/i ?殆9cï8JĈF` +0jQZ,m~~F%yo0 \bR+ULz!m 1n- Nz:,$1e%=W iqG@gj fNCṵKe&˧ّt1w 2?b}uХ GBPj2zV}jײ3ɰ٦.XvloZK"_c%q l@] t?LPGm+ckj{ZlآphG2=. ꁣju={r~:9(WPb=_J-5CD4?N^WHa7BI~fTnfL=4g yK@GErTї"c@ 18p؄{gm7_*$3CNޫ"ss{Q-EiK0]1@r^bb]򶰽ٸbe`eɑ{qֺ~5  6{ %`e "KV~Pak[K9"/ܨ=k2즹+dTʠϹBpe6yK@1M1IOF`vm81`}x`P /6nU_@ asbh|2;kR8*eS_)cq24 \KQF'/;;׿>FK#)D&FXk}]ݱ_Ʀ\7U67i TrU:$sk|#؜:%ܲw_ 9P;^a@H^VKfZ:r@L$kQOwQr=Z:i Uфhl; 9r{e&fF7=)%u l>cޡ1 ?>4p7t4zႻݷDb̹{b$CY0pǯ:)Df+n>7Fuh@ '[?8f4 h$vOQz\0aOO^}4[ w!!syZM   GAye{ T>a<5}xDQ ?uo| P.OzW8Jgإ>2s턾P!;#M % _y J#!YYObݷiIRdMDT-2*jꊀ}h;[JOSӀu ?[s@|8h3mN49e҂˭c+;gK XA/VuWiɻ ߽j_1-MHݫ¹sCT! Q9` CȘd&SX, K%ړ9_4%VYM=ctNɛ,(btA,ȹ`ݱ`3vl("&2\hUQ>RXW[9Q΅+,{b.yͫy&8 mQZ1ukD7q.90 lCNq< @!jFRhUi#]$?B㡪Rd鯂+pmr3PՆB`P0-Ҹ ew9u=qKWlsp-Ng,ٍX?qBS6!z"6CsDfٖؓN C`-#ͺ^ 'm o%Ҥ\$Fo p;4zBqSo&QW?p(h/1|h _WRf6JS|r[dZ~jm$׆nZp }5m,Rf|jiRܢLiKj׽\ A(rv,"$F؜,E.sL(Z#U=ՌYbIaU!NՒ1u|یR@ELk%(5l1ߧi6p#Gڥy`bJe=)7d*Xߵ| iŅԺ K F,:p ҖSl UrxSIߩdPhmd7b*6:G.q2hB ;*ں)_߳{Ħ7K6=ى a媅b9 (xhp ? ):TvC Z"GLcDėI4xFcT,=vtYw$`Xu5{y j5k_=Y|}24jܩbOD\x^_^@y)DژX1VjIEUg|XgiӮLL*(lHH""V|z :h8=ƘаyAN|~Vҧ]]Q#i5@X0厷rx׻ nJ [4v"wEƠ[8AW1WP K)Av% qIUl匯_+`))F}=b"ҢXgD+KnHKEţ~ lꋸ07]Ee W͌;wNdHZUjfܫWo,x +ȴm^tdN)^$ɿXbK=z?#Z'ʓUqbOb>YT-4B9dŤC oxҊЋ[SNBWH7(\S* IxR%%Q~Oݍ̕3[i| 'AN(B#5>)pQ>Zjʖkb`6ߘкx'Mo]ҏ2vN([ܰQ<= ˔lc4?u׎x..&CUnnf(6 !S d d?ݠyn2Z&Pi'@a_/Tl刨wZ,/%R\">yOVmC[H-y1'6,i6j|XP]˪&otNYdK/r]63 RKP*)grM!(Ќ/O#ha5B[;h?#VA>QڹR]6: n3t= SrR#ȅR]=#oK]r- eP^ c|t`CZi -ƣc5/>ϱCdͥɱpLŚ1`#rƽ8ul(x+ۘMI&UC[߆ 8nFTSMtFfxؔ,/,Y gԹM!nH/=3>ǹ!ԅx]*OW`IgH߼+K)UAf7 z\2jK;LRgv[PE'(I\SBB)/YO zOSB:G4d!y輆U5eUxt8#Qԍ2e$c#)+hCY!rr= "F* |鳔A 7f Z fAm4v:c }[ +j[HU~q%~P9kQ9]I׭{Jhwp^7zUNʈLǪ"֯!Fy!Q{5y0'=u&qt~טI_C*5D2(%| m$%|kqUĭHYJBxMTJ9ٚ5V7xH1!$Wo<_טREAX 9bV.45b#WƓYчLn7^eq,T y/spZ>J!o7Wd\< qTj"Zjւ;uUe9d{9PH33(um?gi-P]i.ت( $՜ C l,M„|v!ƭFFF[n6#'N.ybQe(Q mBA)vv"Rg.@(. iԝfJLΞ2ԅCY,i $=Y9XYOS4OF.jʌJז;; 5H 1&8Jr o%MXV+6t_Z{̇_gQ@;<5lLنr~|7ͤ;r.cTOmKN=xw?ГfEJo5DrzYIz;|gosN'8PHW~/c<5=_^nW?C|r*9B~rr8[֒QPW: <+e^TA. ـ,[Gϧ9V3?!E$jOHϟkoi[DaZ@F7L y],^wÜƟt%GV6%(- ډPy~C1eYt#|aF`|G>6ounn VK[FpHX1W/" )j|[1H=44^r/s)ޓ4SAWqk(HB* {dރ\;:mb78G D7r7J-HP瘍84 v`o.%â~%3xM<'/]Miyc4YtYoE| x;1#>Wg>b]9rX5``Bl}yXN֋gbzR͆VsaDPFT0Y*FYdJ_Fo6{r+P8Q6UW Xsr1ӋS~5'7[+E/s*{{bm<4P@0|ĈtĊbc0s28rv 7=)В's_ ɗgdkOz/F͎S޵P4%ëUFgn6 b5cot.޳$|3rԂ~Aߚ)}S)ZgOR#Z3Y:Nm7n]- C9#p. @z/FYs<ށx5qSc(IJz"?$ #/Qp  8g]z-w={Z]63 l|Rr- t:e^乞՝gVHZݫ| GHEvOAhtmȺJf{*M*~hacg%3UBB`A0^`Ka5ah&uܣ:]=/`8%gNٷ]#`Z&5/mBmJ9*~k^F{4_,z`1 xl;ғ7k;0{eK 0a,Yo =asH#CϏfW1hb5UU[gb~LDJN J{Hd"-D1[Ѷi S @I:#51z/0S-)1mR/Po(xPz\RGKDĹ'o 8g0} wv4,Nq0IW' I:bw1/qE;Qk3e/JewiL&3ڧ?Ѓ[0pZE"MFF7R:3cˉ`oE>.F!TvN'-jlX)zRw+8Em)FzL;~"u؝im#%#q).KL)#a!5[tb_ʸnHi mg?OrqڙmԯHbGֶei_ + 3+B̻X2bUrdXҹRu#{wfاg~aҗlZ_ QG-o#2}xD{+N9 "SNX/ǜBW3-y  }cÂ%,HD81"x 䢁k>Mic<'n}Ljg3؝ź۰5Ařr :'DQc2 ۵xPkH6lhX3e7L(:/{)2Gʍ4&vރ&Jnl%qf VF[2nx$xi YOS}/&[ȓ+Dj]|T9"|w J ;9zPl5J9rQ[GO`ЍW^1gvZ'k^#c1?śE*E7!pqC3( ۩qDV6~Fq$2#Fcbܽ9SGMvލ58޳^4^0@nCXm3$,$Lr:֔z<5~}!6-GqQ=E3eyB 2dĶ?Pu*YpF։ktJ*7W6sLϟEKÑ`u?Z ʹ>M|gZ(KqEg7 0_}~Gtqj|@ڰiEXt?瘍hAbV2np/) #T{]1l "}u' =Lb>k\fEA.)fH8 ?C"E睷Q~Wz)~$9tLWj]j-y5gB4W')r7.=g }-˘Cbq+rw  rc5O* S1?)&'yV9-%#V.< ~d$&؀]fO>epDt9 JyNLݞ,MqzsCsi h`ZɓZ 0rl@)yN<6z뇧n?ڒPGv^8]!€V^4j)"h&ބg/ jZ _ [saK뿴1$QmZ"b9m<&['Y\L;NI.43z҈56,i646[#nEeFoEƦ%@) ,;g#4w&ŖO%=5:gA6 -ȯUpd7΍Jf nDͯ* 65~ 2J=-ă% 3 -8E(H"(<ķR.\}ͣ]`ȍ X[Gu-3s}mZ\I0FQEGg7+'9SߤR6CcIu&/8KTӂ2U̴I8doI S.*CW`HE'\(]3g g^hUrvX*Gd2-Jy3_fVѠ2 S䛒nͨUNcNSakw9!26o~;C"e#+,=Ȗ.xO(r:~j n951oJWm䱍F$Z+y?:FA4ؘ `8zAB`iA;&"O Ok6IF}!O BʾmJ`;@G& } G?agJ)aMvw?&SY) \5|d-d.U_'^8VR Vr`q;" >+|@]UC_#'U#F*}0^[cohPʃ0`TDA겡NUџ[B pg#4T;R9z %۵&鹬MF@{@ҡkbx!m:\\-X kyhRvSRͪ&1ec{/f;O5AY*$]1|a_N~StV6,aΓ*-K[|TL^k`_<^w%: NF~#Rs9s}zN7jcXZ;m `8m#Kp`4Eo4d-}xٲ(g1Y9&TJ(Iyrm("q,I?!ʧ͔qqDcϷ<wJ iIyY&pue˜B^:w8?9hECC!f 2[#ꀤs1GS0ByưzvRy#ˍ<d )de^pclN0ؿ7VuJc ~qCf5U .r.0Gٸ^ gczQH- $.< 9Vӱ=5`gsG&ARgL=ʲLfڳ:HufKlq"rn փ jJ8".qSF]v1|T:y^bvI%bCnI8 eu!qc<ƒώS,C^me4*!"x'v)B/vj.q٭=0K-`R3,to<5Շ,OEmvЩ@xo~z0mBQ1;t4& Af&kO}, B7!g2L)$中bήx ~"Tj(,)u܁oUU?n)~6Ez<̞4i"(CK<@-^GI,97f7h1k/&J)D}o/~:C r0:+r-VVip%£ T??nkܒR& cGًVە[r|/c J7I/+|QeRBMgY}>zG4GWHMUi|&+سp?+Ժ N'aAMS.@bl5mԲfgt+IU?bUC:W9n9׺{wZ>A{-6*H.tn'[]ȋ9IZ&9.#ћ8⭤AX?Bx=YݛUXqd@1iH1! f:=koedovr1u.FqAFQJS|̂sV爆O]!b.Ld0_M!v_(_.)AuB"}-^OM0B1Cˌ]Rc֝qn0s<z5.A\ >]Ddd8b-׊IKP7~ „9KU79ę8 m8ڪO8"`X%ΆJWFx,9$n#ؿl#gwi\pʬ˄ PuPIz;9 y5!LfSsPrqk*%e-PT~ҙK{/ѫbV#v&R%wah d]Nnq譗VWK>9u.6$$>+JX];cZZ)!Mz߅X^YZICuZg4B 7K֌cӯ3% O(X-Zgb+ztE&eG!5ϺnP\4-AHEeW>]/YҝI$CK%\%[\_ځ`#27wLJQ]qUnݚH*bFɸ,쁅:w"9d:-'x'!;4O);ɦ*=й ">?:NA,HK;=`fNjϴpHBƣN䄽~XL0hȖsX|S&*f@ѧV7bP*aL M ^j>>-="x]jBR5t|t#CѰAҤnq{B"XҼZ{f3l}Ϛ%'>K@P.%A34}ԤL9(sy͘*]KjJB`w1ހ[PڡtWAZ Ta64[WSIOa:`rcBC_]nH^?-fi+s&!h 8c}ti2rf.1QJ`j  (h2yBOk9+!,MᲵ(] {6[PHb LX :QCpC*.Q`9Dž\l{-@=Sɂ5iQn{od bm eӅJ7hiGHiypK+xuҞy i?Hݰ /U*VqTBRw'V^xz':MR&9GaBj,/^KҙSeě u\p(ݿeT#O97d@}Ek7QPPSm$7*-;'xW\;N9X| S_ðIڹJ$o$rb_?kh=0Ɨ4C}l_FEu<MBQ3׉w?xi"ӅwlyQɹ&C+cǕws^Q`/ngfk 4!nCfGP<x#d``$</!aM|mԮn?Aɓ%+g7n(;o7)I2G flIWuk!Y%B^Ǭo]4 W蘬ٌ!̲kKwaµѺC Uu`۱H 39ֈ]k&@Z'-2OIY@;\s=#R", ԑhhr 'X>O6㊊U\+QLk4hvP^wSl^ߖѩNʜ8nGN!(bCޛ۷bU7 Y'l02ozБ (y35#X2!Pk 4dvb.?G/OXw27U%yQle6Bm|*8/Sq%щl6>BK$hLY`p(aSy ׶: MfS-SOyQFSѵac !)"3 #p񴳸71a:2>@yQ$J*wCifzQYħV5}7<EcUl#Dz#|KP8 ,/d8\!8,#L؍^!=oɲ|q0bRvq"q6skY qV!r%,UlƢ 085lCX:!1Muyz4֊ɳWx-%>vh?BٕbVjM]^b56޾:5Id-C ,~ ؄)RJICc(岱ὀH`o Fo7͹}b /UO4m:14RJkNgu"&a3^mfcjz:*Lj @U`t*ZxQʌ7OZƂ[$^8)?8+!3 _1*EQDM]zdx"l7ZO4̎u4+zXTUW#t]uƪ0'm­a۔ "3 qֈ0 :r?=\ng? .OՇ"M _h@Hc PF2 &rZ}OOjkߍ}O7y(uv ݻGZ(G%0vϤG|Գws=ivϦ/ϳR&' Q1 r9gƟ9zfmg2NYLm7t- 8+zf܌6<1(( 3 ndJệC2,  S=Kq µz?J;WZuxDp2p֋` ܃4QTeI5.Qj/>;ҫlq/{ʆb?`urE+!ii6yd >,Hk@wb,g W{Z6+#u s`#?9dO "*ٚWX]:F3 @u)9JM{ 63mIS&yjJnA(sN<~/(ZF%P'U~Thbm6#1G%$Cv}-NnO7JoΔp OuP,FH2gz7F; Z$ ѣGaOWt2A d۪jؿYǼw`9$۸-yvn|z'1Hv6U~ԁ/8o w1{;4z&^\5sG({aD=}S `b^U?W 4]KbTBr7FesS{ڨW""\w5ăbkPͤW'P xoVƮQ\~+_HGI[^ mBJIsZ?r"%V`pJ$8^SaS(-zN[qlJe30l-tum0. Ϊ~kp~vja7GdL _[Evg 1Zf*ԫM/td/6wCT-ew?ÓɿY 5$n 5ΎSyk T[ow#^_WcxJmrg,?/+iS.T1 FTDz`Tk.":11+ZO :ѬV$@s:Fʘ`hU" #,ޅCp"Aۖ ˥)bu ]n?A`g/1X!dk7ܝ%Sll*Bł M6[?bǼ}Lucc$ʻI CCe/G% w8Vsfq%QaS-_Dy}^7P+bfsU&R86Kxᒦ.mx4S1۞ȼQ׬χ KkBӅjS^yYY g;'NӳQdӪIdǎC3!aӣ&hc$] ܶ?ۤsȾ5mݝqHj CZSbdk@[pA))a;xkf1kRɯf66xYޗq gE=G@- wuoYm"׻zeH2c hY܏FcLbE/!ד?Y8c{ZP;|>l4 wj5Jykͺ*'];^ .&M"K8+N8VzF ʧے6[wFy]f4qCo]Ikp5V̛&{5>8;B! bJPg1DZKCva^oU.q>Wwќ!*o^)"?<"(vZqFQX#Zه\{R唱n`5ͣ:P@w nNFlD[YBv~'Ǝ,iکm߭jJ g-.R3spȷ&"%1v[߿V9.şHJ9,vKVPXMZaH1IuㄲZ xTW =IVDaBh($?d,VMv=Jƥ)G(sis*;Z!˭od tz_J*[/xsnv/4lxi.! <B5#f?;EBKXs&р$xߍ -W+ƼwSCRwҒ9y]_rKIazeȱlwu:eB+ozxg-&1M6*&C%RV{wPW],~I!)9!ؓFḶNXޅXLNjz17j~Ayh' ppg `(%!|b((eF٫2n,.}:9~sw7Ǖ?Z܂GKгAʫnmL40qnO%}٘Ɨqw4+S=:LR1*-uM.Y"JQﾌe]Æ'P#!K5L?ItMp50kt][`VZ, PlGr:-FQZ ԍB[7$ #K#>(92p#HL;xcKDY[5/ni3/v [Ta&ŋ5RQ 8`;lj״$`Uב=p@Xs'5W׌Ӱ%ŝ[Xrt>=af[ ;ZYj *'^ ѾӖOÚ)qSlC)L:BiY}^\]ؠ@wuPWQg󎙦d SS< ^$!9!LGbVKϋtq0p-Ye_ mwym%JzlL6VnhD՗2Q!Edߊ5ݒA{DH>vf Xqtwh$9ȧ^|yF?Y+]_5xꮁB~l鎓lF9_h(ǹ8I jOVso4V9B8J8\u_a٣8m6 l;@" !R5jxBoJd=J$|bgxq]]׿$V}?"Ӭ@ `o .{ #>,[ WK'C/tڇd`s_:crJ)C"(\dп .&d-CC2ҶSϢУZ_K?F((7mK4g`$3>Ü@(Y|7:97u Mv0SV3AVKZC4 ݌R%$ l> 4Y ZM!<= 7a=S{%sJg<3!H 9-2!pJ25۟y}d_=b5B9! c5VV[1k jڳ0G59 ^@E_]FT%uu1iNc?`}(W۝ 9dd]+@͞ĥOB^)pJ;j9VtpAhk^)j OZ÷&]B](D_ߘ7z:{he݌ѧ7_vF{9t 2jKcgKs@. Ј|9Beq~Odnln/ĖXNW\]Ӣ^|1Y5pg-wWA6d-=(7ĔqTЀbsBB@*e7j^%c4U 6.nm +ct$nJZrr?Ž\>CF+LUf hE!26mjk@3ThCaA) `*޷v"(`0/.҅!2{5\枌hW&,vqvKЪBw$@N9 Pt ԰4-rؒM`XMi]hMUDkx =UԬO*<C{iPV 1wk+a&TBd*ɁX&V{~ƨ}}MSS+0] PhczsNJ=xb5M#L} vAMr7>|se[ԑtc{ܭ$R1 R'4Q{ >B&bu/n4tJOx0$o$|Rt{͠>Pڤ£> :$#<ʀ{%+e;K~Uȷ?{7"i]T*r `n^C {gI-Psr& A'Y@TM H Va^kRsPUd-?%JZ#Ť`y|{M~+'3A}h{*ܑP?C m΅s)Vߣ"Jn}x2_4[RO;yց(j~ٳԀ]XxfFF zgȢߩ,53VƷZ֥Sg o 5YQZ} _vԩu O9E^W Dnlc~otyy(OJwJ>f91ZF/иPjcUKfu3E2 FM A CȺ0!!%{7 `#0m z7fC&75;WF2~2~䨭C#9Ӄ;;NXI6&00mv0H/JsJ`Sui5J9Z 6u_)}u*AQsfTD08Eor<<|NA%iC-_98ͬ5ZGcV!>.-RQ,{H*hC Jl魥'X< !OɱQqQEKV%j{׹r0pA6[VBTH3k~E%_;u¾S90rxJ3*viQ9IAq=G5:ßqB Gw@>P{u֕l4c/tꢮgrR@łY+4Y׈="2eMVf')Y\eSе}wTje)qOg郰oLeG1*u#B\'nH..f>QgY$p^^m|S5iYѦ!G/' '6w/_= c#sQ6f†/CLȽEfU~=}QQ`{9hi0uS|h,n}Oy̲rrP1ogR1/"L{jqxρ+(r~>Lk^`+ 6.p+]6i4O LGݹ, yRp7Zxs֎)z`|Q]l ]mXة䮓1s_-u4[q\AcAK3fEs"|usn$T;7"nZ | IQ.=#m ՗;Nϩi lxq$ؑu,iﲅkPhwͰI=6UlO?HU/ģǜ[4v3 MrBqb,f.B]<*hxuAj^@5lC*%{przzJI5R aME a:FZ O8 a jnEOGKw_vW*LhJ Bb<9ԺxnSJM"z/#5>b5nd&p?s'|i72&MEm+#Š<ѻ .)@/B7$LvT-{ZzElڜ#E4!G7]-|EnLƩm N[QhBQ/azcY%՝kiš6zqQi=/qgr5՚&pl _>=4k n2oԣd|XqZxTjmSر+jZ2Xi(E=/I6l<{Ô# ލzͼ y&PĚ6XЛ㗅!!F8M5jeH\!j'(M@=3L"ˆ`ݜƳ~Oʱ=sp RVH*ƳSW r{Mta!^w(/l#~֥C$?* BV(Fb}3A\~a)KDь3Ri x}f4w?1qW)\Վq9#~$Қ3nz3w_I8HVvZq*d9o֏ d6td%-jFc=+^c.Qū&8Sqg#@J0m u=׎Sx,"lpV*\F.>b֌ttһek:n=D0sH 21PBcX%8ơ/J அ)ִ w`OR9Yec'O".rߔ\O`hfce? _0߼QJҎCŐL3  -~z:2PPBE$*E(TY= (!_̛F:\c$9$A:cM&RBj$dDTeM(.W[mő7ѕF#DOGY[/F ;0܌x,B~l,K6z-ygZu,R>u>Q*k(&ezsb(EIBr<=< ְQJ@*P W@q%RB!@#.$//ɖżi$kϯ{/e0'6| ,p'IMF^b '0*HBn3AZؑv;m?! /llO$T+P,@QNI"!2Ƒm s*a\luL2nr/*0ҙ ,@3ӔJӭLSǼ8|(s6 MJ`$9B/\ռ -N4~\! ZrQڧzWIcX"˧\7 a8o"EU!ŶU0/TPg*Q{8͜_ YHv9j53|ӔU@lŴѶ- oS=E1KRGѣzPmG5r&MרxkW>GbJ@tM~,m^9Z ,zʊ 'g-/EN`1’@9QZ)I6k4&uA5GSsȢ+'.C@z^9EA ^O <%ҫ nl6goƻԷsdaX?#@ O T^ ݇YyXР$Mgj2q fK'cb涐h:_hue!{)r&QI+Y}wMj$ N>=6Χ)/5}tr>9>9F u] 9l\#BnH(zgzk#fxϬfel {h 1Lk'!ʨ34e|5ۻ8tm$=eM쭴 *k]c5|Xi̾>,֓s!9Yw}g'@lVP_&m.KjKLFZA:5C7N{3^:HGwr"U &uq ex{R! d!M&f&I'I/5Pw;pT毯%+m@o,OXbh0_\ӥ+gtbuM[Y$!8]1Mb+39kj|4D&íe#SnQt4CdkxZyl'u)-#M0H/EP?= R/lU@]iҴhӜ/rJl֫U xE4Ui:I'GoGIέr,Cp'YjA7r8 ^@֋#IT~`Dt}wJ"l*" l]H`٨{q[\>\әMO5;$1(@9 8M~Xlt MS],AJA ضp[pnfL \=u0\YkQyHxKsa6α躛_&af=y>N |1k: &eH'`I|8D5șApJj?{ꏓ.|XUCTpX,_Q[5(?a5ϵھkJtVO*eIX#{1z*F2mvchowX/mN2li)B)2 3`]mP\w[]1?.ȚEgG)*-"O43vdm!?yrZל~C3}#55<ƲUagHncq`2?Ꟁ!&ʀc(t (my ,stɵ,$"aRz 2* @z,; 4-T&Р#S]Ël+ɎEL8r@! uᰘWW#JĚBb';}v-Of:^`;/~1bA[Ŭal;!fbB_5RH@:0vf+>9HYr㽎+TP#|wIdzZ$${_!^FI'jM} c{KS2CmWq>Oe!ySgG-|hŋ" GG1Lڟ0y$% r|d[޳`deDg8Y뾇Qny[Ϟ iP&<괩2*J\ BKdqO\W:zΙnHy@/MW`KSQ q8<Pqha$ʄ; us xx`al԰hy¢h?I?$F@HSQQ!fdbIp.iŵ02~{*QWEA\|Ygh|-ǣ O,Fe]S Jh4QϛЏ۪jg4(IJ&2^I.["422^d YybWbQC:Δ՚xʺN5>5C=`Do U%n:k |)6 :c|~Z%bFKx^{1 ɱ_>ηKnZN B{y'JY7}mA޴^a 5aOPY&xi$7Ruʆ-8:ːHW΄>ݝˋ-|fEdԽ!gMH[۱Y+;&ي/*uWu~ @fKoV $ް+` ,8fݺYٟ=)'ikeKFȊFp`o,z-@@^NzG /}rl8eШ8eד$̖W hc}!P$iR|^j< 2d00`mM)BZ[!NKv}1&g9t0/0Cŵ|z>[!%G<&֚fqVl i쉙JrZ8X[XK]1^i|9\V[Z7[LQ 64"qM732ta_qILl҇eMa!zTt1VڹHkڣ1;C^>p©3}j@˓jNC #?]x|~T0Jx TRgHsLkr Kt?BWڕHRz^*ۗ'vAo4%'LF<P9վW)oEeݙN#<3΀mӣ2>x\bXG?L'W-.$PnC&B#%Dɥ}ޮ_B; D%*Y3ֱJIǭGxoDrfce`LshެX^fU#7-lTj{=h|Yۿ\™E= 8&pZ ;$$&.&t G8GV@4 bIZyfo/-\Mkt]p}M)^uK~ytdKoa_L|^ C]}e720" 7`֣p@Vm@qI)z f?tߥ]|clч t>6%?> V)@Kd%;W4N0~?X!Hm&=jߣX$ƴE"@ Li2V螊M@#z hȊ;]+/hX@#4P7BeDCQaX)]-[Es0y&Dy*k-Ρ0ô@RvDO@BH /#öeHxRawS+nِQ # 8= ;w?\֗vW@0t8P:౅!!/K몀 {)A/ö:gPnʇLcpMc\=[L~-d) 'ݨz쟩Z2}2O>o;~7ⳏ!V#G9DzPYuPn tP4/l?񐒑I\w~i=z5 .E[8)Jw^k\tCG?%]O~O6[ [vǛ#ɩZ[?8$ՃWTrBt[/G=ʧlLۇ.]>WAiGy ¶/Y*ۗR# ;H@0kp-|5gF@NS]^:gjm@̙PdXwX}-`O{935+)h B}I3YE \o_S?;co#.v{. G)uP|!5z6 4uئio$hNe DЫɐ#`'h#eي&BL|~E3y#f$󶦸lؖ\3kS{O'Rbsx[v`E58D)[*p6W~hI4r%t6W}GK;]qB% Dz7󗾧uPNM.r GǷD jLjюbCFy⡪ʒi9 KݩS2!MDӛ)2La vORG8klX0!RO8[oM[HGQ F6<1+9xs ԡ-\͡Q6'!̗m !'@t@I8QP(W3|"6? !WxR2aLAC /oRΗ&"֊"{0=eevt7T;i< &4 ?&%YmcKEI*d0B5|\v=*BNvr*%%y#K)N܀SY-Um ]V0] }$q .Q 뀷o Y]hIQ<ˍrb{vN'ljWDY)*V#Z|1j80T76 rZ=d]1kr:} {2*&;,UG]oK<5.b J{3(tVQu/k :,XڮV τcs L۠tvϊ,*u0u^Rn_ji0A}WRsjB t+\3z:mI\ĸ; }Ejyz1k><Ey`{Jk"\2,L[`DۧB$c {5%8qL::v SZ?va0R>cxZ8N Qբ au{ Ѝ:@RG_}9|sXNU(^f/qm-˷3pHc:"lq8 Դ yq@ƠH9`؅QLJ2ˆj-|=_&FZQjō,QX[>Q_qX ;R~! y3t7$c1qW֫+ը5@C}I3*e?8!TCN4 ōTdJnC*0 7]92⠊~7ކҫ G%)Vͮ*}GI&w:l4#?P>}+[փ\I4N'S `I!2eb.]Q&ϼN#iڑl"]m܀]{D4L穊Ǣe 14&u݀,yc߄2UnDŽO X/Z`QշE4Yҏ&zG.a?=F !a)A)Q)݁0ナL$FѴ$RGzAi MW8m#Yu>x͕|.[˜Zenx!oAu0PAݔUʮ]]@oT2yuZ2iHG^bFurYuvxc | P/yjݨ|-GzEɝ} }@ǒod:xw)W/ڬ^H+pFh5 1& . ̱Qbh֕)lNȞWF^WwؔR71<5lsoF~v-R4GE,F8#3>] nU|97YL,IIx.Үu>-aְ%~d@E&aKnVnD~( ER n a4y`{Bm^}tshSI&WgI)Oh[zk%EB=p J,vR'/(m>zb8TF4n&9Cԙoc/aLH@٫ƴRЗPX?̈'zvJp̍1:I 4 p o,G"gJ]dT70e qǼ\6~״YQ=Rs(!y4]Ҋ+>snzC&S{@R (i2x+81D,c@|}Ք,kEKU2v_hk\h0RGJRD^,AAaٔhl~0n g<ϕwWĀHy=Iݧ@TzȼV'ϼ2.(-Nˇfc&ʕ˸Dj@t.W|&]PVR\^r4Ïܓ^2097.bOMOHPse8 IRz;멌ԦLs2m)w(|Z;ZhO6 5cʽu9G討( aS J-<Ñkō땜Q xM8}"=dM6çԞZEKθj6I8 5:=qL8CNVmzMu5 MZٛ^>%)  fʪGgLyb{8)ꕜSPu$O#o8T/ٕK/1j_A~fq$:o4#`|V^{6 GHx; 'hdE^HSVQZ0%J/FV^+R@ye2yRbMrOe7LnYn"]VԒ}|#ۖYL.R,9pZ G:-p G{WJ`ExBVe=SPf`A#u QBx3j6eF'uܝ"H nń,|qCTv QbKRh.oܰ _Kz; C#жKۺd #o0+{ (u|Y^$`GFbmA8/W4ɇTnmRn]+b=#ğO| =X5z[jZhrKe= ߏ7-)QQ"u.TOr׾v]} 8g滆[ixf{ Έ4,.j?FG/fmOswmev׷$7W|YQKK(f]ybοH#[D7ddf~!>MXOfOu>q)O #ObO!ZS5yp: O0^kƒ܈е{ H͡e^heemZՓ^;XMw&AFlof7e*ԩ5Hz]*/"bm}գ1Ua[UPilߘ}6gCJ,gk2+5m`$l_Y4$VZHl #VW(Ѵ1:M8lɍ?4P+<} @*ѹu%x 7 ݡh@xMgǶK`ȅEp#WųrjY:%lZO# RR2 pܐTalMln듦fT=.oqPE1ZCbKUWW'#V_bz kz¸Go$#z*gLzKe+Bɀψ+2MKa_ڲCnd:1+Ԗ.$ŜwWK~9 i:団xfmy(@,̘,|jߗs'"]l5a8m %NKYkz<3-Y-DsNfQTj!<6Q ȟ3Ïp%=2\QmdOpz.ԣDܠ-S`)xS3㡛xdRm1[Gc>uit1U8TtQphf8v均 y ;+qn( 5Zogg柌(C ^pJ1.a{|s]FUIˌ?.ѿEqNL9܆G(>&Q\A辉TQtms. |皑n|oi?VQb˜6g% ̠,fa2{H:һF0G&fQ Z6D[ZFOXG84ڛR |pVb*,N[M_czygaװƴOEIq-k1󢧲Rr"@ zƗ禭Tn5Gp0nBt㬜 o"It*(>[L^׺v~Ќ^zkү)J qxTBM>.lYѕ(I@\WjTK)@;G_k!GlH2|C}8<`(CoeUV BX]Fko!Fymz3ЍTHATZ5;fMW4vOasxxc33+м`(o"fnUtD9&`uTihQd4з?%ul/TsW< $aX 3~F<Сʥ\7b,\UoCqͣ[b_E]r}cNr\jriMR0]i?RM*mE}y ?%dv`F@م-"5 q`XzDtjI?!c#)My޲ B#j$a*Bf[v6"ۄ3֠N ^D#f iBK2Ă;Zb(:"Ъ喆n.LY)his-:aXMȸ|Y/}b e#e35KXULɤ耜k'r6AoVM>.u ۄ'o[ulfQ?m^k!dDhyp&Œ doc NS7ARr\Nܭwy,[^&L +hr^)knzc@hCE >5O&:0;a 9S Z>mi !|~xUY輻F5_8K˛4nߎF)j CP๹^/wYdyl~q_BX5MY|F2#Lxo:kҩqEԭ#ZlgKQ7i#u  FQ8mic@f+}%b8U^ϛ!o{FH*(P@5W0\]Cq3؀J&)uB"!< K[b CD68QkU6#,W,Y <.<$, SgVX$dtXzEؾ+/NjΎ$1-[ʝ:Οk-BCs p`QaPqjY2Xe#b\UQ@oG.EOO~kjM䙻 #Dilԙ>TD@\8ϲ= 4!cF6xᄧ$ _zWCߕ)\ZcuCͣ=!>z$HK;gŇU5 x /9Ƀ|L)~bX׷*Y05xR ei4nhceOyfCZ<ѐ]s6Vz>8x?m,FHѴTB2116 )CݚN-4 𹗎|aVO au)3ds7" q{Q\O vj֪ #JA)7 +]W&X{˹["rDeǒDD[eL쿐 I1ҙ+h9 N#_Q*AuP72{24CT{epL\{'w]2֥E^}͋_;ٖ,(nm>Mͩ i|E_Cٔ0(ʆba5hsŒiK4[gV&7gL?jzzwsztB8$܎"IU]ġ\7jO ;|&},`ӠҞ98>:}/킶#jPP*u(j3[3)b6UDmŠ*2ce$V,%n1v„x S4&p@:%P)Nm1CL5%?}dpѣx*RZpTT]!$R:k_Ư2EFnI {0_1hafNpqݠlA8zMAQz {26\xƵ1he0^E]B56[1hHCi_oɪ6r׏pteq>3OWK7wH7AEKIo:t23+cL 2n Y\yo,R`K-b3yM ɢ,vƲSDR//+%3>i'|ʠ˹U?fncĄPIu7Ys\67HVR\qkhQ141yr ,kdv%@;"=s'YfRPu Lpn҉|X'=7؝俦8:w֝0Ql2D|.Sg}#'q&u^8MƤoi.!jw,؏콆^0Jp- wDUw$e^bBRGv V-(J 8fVbbR!ՂE?dHw2H33js-vco(呬JLNFʣoHbqqz0=;.h ΗpG(&N,ҩ;glSFitV\[oX c_e_$'t-ow~[c/=4dFFJ2℁%n8| zz\穓ZDJ 0awyM4!s{> ӟr3;9i(ۋhBH'#d3R.gLD%=ӑol?bj["{r2Rȅfl |unw0_ cnfn}n# /5|=JaSxXi.5m0=U!pԪNztP/HZ`uV[l5;A cS4]KZZhI5%30.4LH(׳*(}JrTȄK>-j+elj4LLtk*~A:84QgS} b.87jzT]vnhOC0J% lTqi1esѨ۽zHu/K>GM_|.;ƒ~qZQ#.gv=AX\g'ܟJZ(E~2H-*$/Y/Z}Evs^$@se/ѕ%iǀB\cŏ:TCEU!&P]é &W/-i  jpY#^\ #p_)1.neP "KV۞'c>W};~ .@1_B[b~ص (%`qʤuȚ]ZX;aJ~aB\ ,Hx~aKQaHdIT0mH2)m>#GjspIM ߴvg󛹋jTv@ qc=hr0ӗH(3Bq3ȡjܺ=M۠S *RK;yISY6CsxH`42u'5V>ܩ|WIr6/&qW0iOT |}jDg$eEdHDkMVij1xM+:>p'z~؋ 3ATOgNӅʊt|Rh6L&7L~O?2O5 i Hc::CKy†ʃ_J{lؿ$fK~ C\?0""0pyPh GxV}rSu}@cE\C~n0rhǹt*-WëEj}_bR: }z Yĝ7vK`Z\0xך4[͞]Vn;%UAatvZTLBKqYCNWDkDέyQB"8 hm m+лV$BOyo׌ysk,2K=5LM00%&|K$zM,VG}q #sj[ˑ+-ɏM![g\z-ËTx}R:!EN,,}|i_YNQ¼Zʵ$4! ѩ2@ {k6l~NLY%>`.*q k ߇TغǺ\Ӽg WP/1Dc BJ+qTD?`$o;fVұqkPُYLVE+eI%'9_[1C}B4625-VӠ;]D|.d9.g9yz>@$XW>iA-p\0M*fo_I "{>\fn O9%n+ X3QT<@aJ)ql^'G1% ^DZ 01hKfL+uڌl$4:<"W: 3sIMt[o0q"jfxPpk*ωi':(0ŎcFaPz!;=P՗ 8qOsu%͡ij:o5A9A0ೢӐ9ʳꦴm#y˞WvOɃMݮ#  f條p ILKﳝgEģL gL,sq?|mTeRYt"[UVշΟ m4r;i޹:S:+0n$fJ`2w/C<z34wěC`Ul ƌz2'Hfo޶'WeV:4@i張}Ҍ/2}QY)A⯂Yj$VeK)s}3 ݉0ITFo֓gȩ0Zr8Ok{\(1_ؠF& Jiwy bNPXK2[F?4< 8w6-H8e6fJ#;;GN%<>p4~6|2X*|90 jGLLkt:\J>!})w1*YD0k'+| mypЯb:A^ 5-rxy7zEc1lobw䕌 qD^8 ;D!~mLlN]0*/|)ֹ en;)f#2Lmr[`{0VzXf/-qκ4d?nMw5Щga;; <@bN]W}$ф7>tjosuYy{ꉭc9ڲ;+6,pMv,8 +iHGYQlkthQ dkMPw^g/ bb~hjyy{9S"ӡj;9^\lz̢9?)aݠMR߀LϳQWݾdc="O' ?oܵgFC)g ltVɑt|"0@~a6wGdըJ8ơ'F֔Q$~l<.պ$VGC(B@!cJ'-9><#تj6 KQ*!-M)-t_7Nʨ*0XF?M џr/ROy58藏Fr3ɾ%{oNn]Nz G ocr)O ]+k_.߰`eA$qRD4ͨ?*EqC Hiً7R6ON̕z^q\t=T~QyVd'P R1\v/$D*ݰ8aVf6R6'mס^)}Q(X/).wF}= :ʹ5-cr-AWK~lTUX !lb/N@ f<9supdx5X:v>8m.@哪nC)KpF]3UT%, h }f}ѯ_x(ux|o27dGBNϞN-&lr5r0pTD)\x*rؘyKg" =b$|^ A2Ȑ-?c\K чcC>+T n˶+|R%aԔSHy.C VV@+oFGA2 t9ixRCaD9 q5?sxJ%NR p.FC7Q+ ƕF"?' d_>H5DhL/Hwm΃R&?Ch^n9gX(e'^XHBY6[YjNקfm ?÷ϤZR#2pOr>eK(5qГ%gkbq]7zJɬT[WP ٞK@VvC()՗{Gu"55 w>|X(פ??t3Ur=TpJtz t&OwE$(<ҍo|YQhub(ʮC>P/h.>n8PysmoAlU#-> 7a&rBMZC٩iƣp}nv2qfLo`]ZK38Ul/IG&Swye&sbƢlWTiP(F*Xy! Nn` b5R>"əU$ch؝B4+8kdlg d!\m8]f33!_DVӜHK8j@]&/╀%=kG2Ux,9~S)xV>*j@ٟyxu9م^@[  dRKZKW>%0KY 2^W057՜2ش/C&_R&]O0)WwkC+CHt/&2^JO.)]Wf ©gWhEݽcv:̳x]IJ2Jffբԫ _"H# k߻k+Md0u?3Q7GҀ6?2%hpI!͢#Y6oL e 0d*&鱧%Tlln^6q Kݩf_d!nAUat )yzL@0[$| Lvj VqQ0X -~cӴۼ}'ES׮[AcU'PQTL̶ܻlb)Y'y(LbdZXl[} I(]'[yW-Lqec ߥM,Ò!7 E03_XfhZ-oS)*, AetEzZ/6zbNg>o/3?tGT^D$"CqoZ,K]vNEذT‘џBUw8L@T9}.7X7snt U )nSad D^f9NA 8|Eb8AyVtTt SWoWqḨ3t\՗|ɟ}1cφ0vsbX 4$2x23y`sq Cš;{õ-;"U,OC2]PœG3GQg v齞KOD&@j419<&JVE3ϏzwVd B.E.^ KGkކ~uEqLIoW su,/5BuyC@yyQ4 =IM E[AܲG7 G2쫂SInGGdz$|/mk:ߵ0W+RJFKhjl"S&۲2t&rPuL"|A-ΔcJxe|wvμη=yn YyN-i9=vrvzy)]܍xZ"OmUti!7hAw530\hzپd?8Xa45GI1Yыz 6:7߰7Bih-T* Q 'OfD>tgIePtE"p:o;iO5+tЁJrZ'= ZhQ}B{5Fe|_WlJ-3Q̀$4cbVg+=Apl\!wB P[CJ;GkGdJo*hHJV~kVY`EC] ujIF*6" rInezmb'x1Q}Yd}.œ4^p^9&e:.] L3'WI2RI`:Q,ќ>j>T*1rrِ]y`xH%EO:ӯR<|֕ ?ѾP)0|^ֶ1BA:&H=0 bYYeȈcr:묦—[O*Ky6oLK$ۋܗܞB\c3ToG+i <OV?1|9q 'Ůƙ6[HddRӺwb@P%,A*\Wzsu[+šSt68@WIۙBpj9,+PVv2Y1$4;Fp{{9 nJ@*"g?X[1ah ,Da;#WD|=Rv{OjeG5Y)0`UZaqN[&h LR06-qׁfŽSM~8.b qFKURjRee';x:;J; i0LN_—RJt `vH16X! ?6%ra 2)m6I" Aô?)40^d.B ss,P8fp΀ yCJɭ)xI3Oth š<^0(*E-:לj3'7[' V#a1PFBvܟٹPWFՕY·!wUkW{ s < m(~mi~Z+j}(:sފk;UmdPI9pGUg;pE4C:+AE虪qFJa32<, q&u{& '9Sn5vnP Pī KNek:k\ʥo8ebVAD>W)2YA # pL1xQUδf!׾p!-<Ri:y LvZu",8绵y!膟Vۧz28;X8_Q>g[%S o،=9nɍu$95I4-7 ]-9l,}YP:1m$֊&(n51!lYT"S闶r= T}g[y2?uIU}/xv}s}%\'ð]ݎ%R6SJ9ÄdK޲ Y~px"\9}4 @_1 0D[Zä?O0 \2;kH1(zv42?|w+cQz Zz RˉkWj{PUasuȘFJONUvN]BWkX p4TOɵy!PkrF M\(XW w=:$緺Bsb<108g"WxzM'z4FjU$=;wD,=u2;}?~ LSʕS? cey!_Δ][/Q$EnBZcr?+dIBjv|֊㜫 دkUI6v@+JоD}W| 64feO'V`P)+L |xL:bbQ>#9|1i#T,a3$r~!Rjb*;*9=*ƋGo|,H:*r HUoΔ޽!/f8^i0q=c\ 񌈭H@uZg)=m@q= pUސu"\bDpGDU'A7$9KEe9̈ ĿR׻6%0uBfh/{TPC,F3 /xb*Q0 %YWdX(a' $İa@'jY*Śz%R[AFWj0d?2ςXLw0((7T}7>)pT_/vr|B|3 ho=]{"+VE1z=a+WFpƱ*N|PZt}o\C.|v*\a:goN 1!ob=ͯjTaΛ_nu8 }JQHX0xisGA)0!*2B!Y3#=WF@/i~͇-= ;Kz9P SOXu s9+v]'i.sjqmf[UTN@3X.ͽl4X*~RU[Qi) ˫D:87fć`rL;t9W,NJVC$_Xk i׆|%3]MiUvC.lF]bx%!P|5|)\v9+sGGnb肕$V4Kyp9Jl"I*(V=; DWk_گfi0b4hNA"O; AJk_r{M#*Kˉb:s($ȿ)ܫ*fki%Nӿ=.^\p#/J0wi >u{/W;vh=\y%H8=~jCdWyړN.\`o'v;w\}6|E8ZҒ$n*>ouobB\7:qE_8ܑxT{li0 JٚY(>+eHCI:OϩD)=ҟ H p xps9]YBjww{ O0>I<îUFz-0生5a_CP M*zpc 1HS2]%*N8"`?)ZͨyÕNfqAVe7J8oGsB^[AIE](/@W ~#[J?@5n8͆脘* (j ;mm;JF$<7y(%L)J@_<_o1aS6p,:+Y8o&BArI[j$xYT- l6#^\״HOuJۋbD1z8G#ᑥҫ!"6<'#J7g!UGvt\i!{h*Mr? B glu^ZNcND#6\ԣags^wd!pyx,#9y*4 B1I8cľ9(&O:%Թ#eIVʥL hGp| ៤ ,@6Cr*Qɵ蒖3!*!J؁7 &]ZEg[|u {u ou0 P{y]LXB C4u%g^[!3@LcdҮgP/ʇ U:-4o+ g?s79dK+H*/Աbdj2D.Y1udAw3 nu˜Em҅:y v᳕k|w^ v0L8~@ID wyesLfn%2''RjvhZ"3GJ©+5∽֚-K޼eZWR5cy)FtNܙۈ~qȀsQwB5㘐xyhbOfzOBRj;c>"= \]2x,%@vnoO~Hn(p-YpBJ+@/|ΘahP~RQHNʃm2>%b vxO՗j%s2yV@gStINad/v!'_d5!rG *x8?/Yk$v7y6)Vܼ|; ̌@B (yڃ BcVen cDZS{>T҅7E9!ݼȿF{Abn |:=Cm3Џ @?FfHc SOU3 @p)vL<~˯>(8)*v0jީu+/ =Z>[C&d#9ϼS  yR;Qxk%WMXL/E*꼠Q'gñ ZJqM|`q ٶ1+xQur-+CWB n䝵-;@" 97Ŝ-̄B šgDqi7cl2Syx knk v~NІŜm0Ԓ%]^@{||pw>ٰ,:L&gaWRR%LU?{[2L}o18}dEtZ,8[ݧf! A<=9߰8AE<9yۇ4U -h+txd^_@N`̻р^<v7Q}$-Vm6jLmbJx),QVX McU"~b,{כE}+`ZQ#T6u}[!Pџ%lcL܇&%FkB)aؐZcw$Z'bI#_hW[q<K,ueg~%I<(?.Qݞ(懕nʹc@eufD\'زe=od&.\l#gTwUtU]ZLϨS ÒhGhKڗ7l9Pm-A8|{. f9[Ӆ4o_-/l6KMJe(sb?rҋЋYߔ \` f"|w`gpiޚ0 څql;&ԻMHyS[q A%.&ڬ0GxԨww =f9ilf ^;+я\ y~^m+>Zij2qrKTKVռ9%|R"G٬aeea+10 h=}.RYlJ+Y[tR( 5ȮARo cF*iQ/ :LJϓlHuB(MXͥ_t}s7V$MKbYJpA1wյV@pv@jRvaDFOx2] pO)[T>5ԦT+ii^Fr?zgI%|A-ȪNWH&~PKi qh:tcTԴecKDU3MO0Nqnb`x/` 8;3 ^|ӻ+lReRZT4]cI[n>ndl}tNwIyBC;jwm(2n#*EO9ni'(|Nm$SγL4$x:"Q L:9RVB8ws i M4ZQ\uJ?I(9ZD 8*Z WCdyQmoaq-5',9[h]'JV2W=ά|'ɢi޻P>\peDGxs da* \wW}@]_Z{5j2M2ՂU7Ttk$@>?v-w#x#A9h6h>SX*Rwѵ.}L*`/jRjeu.bSa@G\|k'!}(3kA;G"EZm( ?%2JzI>jn&"y Z9(Qy~_\]AôxX\O.e U(U0)x hT^J@nGF"^pKOXwɔh?;ﯖs+ϥ!%]]Je*;$Rer+a"*DNiȫ`Y͌R׾6ߩ3rYUh:6mL(̫l9DQ9 , %ܑ<0G9ߡYdu֩P?/I#3CLbjՔ\EC?.0&([RT` N%!51q!ƌ֏{ u-o,[P< <d3FI6ʍz>TSG˅NF"F/"׃ԸPF%N%za:YΆ孻'-G/JFeaX= NJ\\LrDi#wIQ/BNeT1'"U\h/_g n5 ^Y ΃3LcuEm{8K>͍vdq`d-Xhh) ?쮾 )zyD]'!H=1jp+`i;PGeqKF̚]>DjFn@* 'rrg6F/rLx- \4ˁ}3OAR`UR\7r]e"$hBGWZ.vd?`Y{ڜȕA ؙ}>xPPeݗ8>?{f՚T\z֐7Jǡh4PNF'k Fl0aKEkF 6qW$sWKto>M l lw$kBqTi hkgpv$So01#]M7rO+GOL~7(f6q4$?/ԨT_t"-\$Qr֔x̽1GU-K|H`Xd?'hڰ9C0~TЌfvs:Y*E %empJasX|4v̪o_DDFmĜ{WGKbfI16LUْ ~0|hr^k|?@ǯ+38 +{hW(R>I{EGrOiT=i6}u<&a$&^䣭bW?85zʵРHm`,4QF;CRh=Oē~w޳TϧK#K1Aޔkˆw(D,8)2rJΟxbu D> X+/817{q0@b.g}\+L'W@##JrJG'Pԑ!>2>J|VՏt'&*+v"cֈD٠3vXZvݫRE}{nxΝ*nqX'b ?{hQ\NK~\b9rG%D_3zmw>dJN(>X[$:Zu +΀6M# m#!br @Ӆu;?~",B(a ! \?y08hs`\;ѭI ES+Ϳjv& AL}M<X8%HK/'ޙ,N)ƆR~'ެõ9 YG%i\~I i;bDzWpT0KR3+ B=UHUPTRŎ$`|]!j4ܵ}mj FF/.a3lT@1D UOsMXfVfl~042:ϰ̃yq;g j ѭG<߈% DoYS2K±d 1|=$[;(6d__^L>йi?H[Api'iԛeC~|e5̍S1#-&D 1mHҤB.X4͔ι|vzuF>{"J1K#%x|eu8v)L\IYۡ"-勞z*J ]} <S'E4b8ɦn˒r5mȔ?ycwhN*Fp=]V>".D._F 솱䅨zxʺt2 BĹr(Ʀ>[ t >(Z8^Q !DJX\z!eV+T|38S>vH1?qR M]Rh@ suzy>u LO/yr _yXT|h^z=q 8Rto7ג1+ 2ʓm KW:iѩtɂK9M֯9ͯsf1phLel쵟1,uHV#ܙ.QIp j@D@0T|dVz8&Ê ,4-1++'8d,~;aʼn8U{%ꫫע;Cr!ki&\hH/i5x uᯨlH!{/n .NJ&Cv/aPTN%{<|Ċ_r#J׊P |seq)Z W#L`;k8*fUwSL-P5\Cf'%l30MmG?uZT(@(#Ws&B 0dv\p`ba0M%@B6_3C̤ySMպ,Ek$\yĕ"xR]D %mHWx?0YX "8HȂTv)Eڸ٘+<|'jGTEr{6 ƔB(ZD3wzC?!uڈ9a uһbC~4)Ӿ$^%*.ĤFeqW/SamLb{:"{PkXr/ػ7V5fcdw== &Ûɮ=m:v8Ŭ7Q& ɈRZ"M;H i"bO40m k}V64T/DY G]Jlw<7 hgISZc"⇟VAqӡ`"&kN xJsݒE[ekh9T0Ch8w}Wo}Q{D٩9I >?.eeL g)!hz/ wlT5ʮ` exnmg?,b*\2GM@;|WsweF^ax\(Ok `KvxՆ5?}#ڲ0Yy*ATVS@p8rxD)6K)lX$B PH[yg_Ol'H31?3ѓ׶M 2Ħ'G8 x|2J +(; '?\u3/0 яK ";\+>ĸKMX3khR? |r FN2IxaxJ 5Z| G K$U@<2?i =%:|}wfuugV׆gHEzerc;xV}p[S$~ //Q+`*=0UKHn]h(f`U$yΦ]95a4!g d oB[)t>><[9䠱fZ;}2\k.7/6b/?"TØ>Bhm+OPI&5he̪ D͖ ZFu3*,:λh}bhA &b(:&([U~jw[sT@&v1rdjXѬE1+l;@;='|{5>1y΀4Ԑ✟4~O[O&\hάާ<`n~M[.y/$i/f QϨD'-|Ozi.22vf>tӼvҭmiVCl/ CjT xrԀzV(R2@|Ž̯WF粂]/8?BT8͚CC6 % Pd060\RH ˚Mԑ>|w)K%dH*gK rd>eCrۚf u~s'(I\ZW(H( *{ znS?i C'mi"O@ 8bO%Ml]G)qZdtYE(>džc$`Yr_]RUmLj_hFm9fsA*Nne'srt`VQʄF#[^Kq)#=$۫a8iXNB'Nmb/G, V7s3AΏW]WBcޝڗ0*5Z@5;9^)! Z{>;W-%k*zڙᨋ.?B"K#Qd.*$ |]LPCӾP "Ϳw (n7YWZ(X/Cmn}7݁ǙVGyljjvƞvѝGL *R CC5ks|:Nf( S:8 Fxs$zNlj[=+xHzdxa N6fl,ge2{S$" [# s2Fk;1ۦiB#~ˉr`J3J{r "eK]#W/ΥYZ+葆 t/kq~~EvHi X$|2T^l4T,fh%9Rߧ1~S]֜[xUKZxQ(˧"0<_ Vi'"*xAϗD,@1v"4fyDfii4e 𥫻^ q!vW!bMD.|Hn=yNkJk7J C(t?F[{:FeL |Ue[s˃x:ߪţ!Nkި7x M=CNҾHnV, 3 U]}kGfbfAx:T%qu**bAR$9{84 0B`swu\oC ѽj;mf𜦦g3VN(*i&2ZHN8'Bn|˓ԵbX(|f8yPrlŠck@G<)c|ٵ)נv?^btˮ|Z_0;T[/d?4e*aєnB[mc5V싩$](!D .[v҆0!j' &fno9j‡QT]J$ xg ėB޸۷[A]bg;ĪY!1+Ʉ!-%. 6n S iulpAK>PG!)Q|&-g2i.Ń!ma]Gl_{Aj8l//GPPo*_ΠQ\;lyb B`j%ڌ|mBY󩂹y&b&U|Z2cHqѯ (υJ,e*p.R'ELo,wC2v,^2 2L!X_sv,θBXӏ4K=+A1YH.aͽ 2WlK5`ǥk3wkX]#*;Tk?ABVz2Z~E[`*ܝ5fuco+@myʜrC]j: VM}]#krw2n"dwWTIzgu'ќJU3x mf ̬⛫},g'oMIf:g+5Τ%Izh:XSP'ᝡ2/t8Jfa.T;߱D<*d""ռ1NDV̻AL=)l!1Ҵ( 2I4\)cs8"(!n'/4ȧ/'p>bi)Rj'Ju}0{zUM#;e,.rq_8Yq&N219Wy;SBXE23"E/zڿ%^(u&kquoXٙ2-C0.AS}* 2$!f^`I`-ˑYH!,C^;sxZ& qM`q)L:18̢h-mhU{oz{ǜ!)Oe0eZi2ݯR_LIXg;U*ýя2]/n^5ȻryRB`:LmOߤ@:ى\y߀nBfpP%~=jC‰.4bf< R/^wsʹN,)A`R+~4֫{ f6EQMoNMelJ.z VܓAi(BN|0]Ϸؔw'mK񘺛2 K)}PYL? b:sE\cTUhF:UQ䁺6N#,KM7d}$S%U=I2VG-8g<]* 3vb3lu gsH-|31_ﵜ acOUDKE*M0}o=W3l. SO{tR,[x>"IS!bj4QPJPʗS(6Xnuus1Mǿ?w)gr `']9Zm>a tY$bƁow$*r $Ӳh -4^HT;s""|L1tb=Cj_6yfF[[Z7gG' B&i=M('ɜI5wFзD3qKb/::+JVK8coU;T`-rp>Mn iЎE*U4/"zߙ0(0+X8 0J L'xiO"SvT2$j)0qY\.Icw9Pn1~!2bo.jTܩkΊvbnO;lwp1%|+O=))DGK&+:DʕVtU10YT+ wB AߜiCxq,ZWN$_粎x|P&hK60s&uՃN!=o A|N2Pi"#T7at7v/~y]It9g("Dbn&FA&?V 6ƈA~%p1ps T6lK(JHD']FIג.GFoBid-; ހfM-5gVlEP1Z)4Hƀ2PDh@uQU^废QyiE*~qD>n?m39t88 E۱m@{wn䥆GcyqKmk\j +NM+~>hLPDbn_Ȣ5P\.&S1:K6#hy" us3;qc^Mv0[D[>%<ї"g5!g/n{z3Ę޾j# pٹ\}'6^~\S h&nҹVs&~ׅ#ެbRu/9VGD}c D y3(d6GWc QHt?ThBK+K dAE3(t\}kd,p 7}Hc L& BјEOÎp ?6W!Eƛ`=)D x H[ tr)3LVREyIsԊȹԷc`6`t"#\} ԉ <+(ZdpMD?|A %ntü.uAsZ>ӫU+G' S=0T;޻(curЅ*iO+Mϧ[W]ƺJ9vOO}ې_Ѳ/G)0^S}fڤv!Qs e^J;&mmQnƺUl{OЙ][Wߟ ỸS&,|Xq+E3')1܎I~&E-Ǖ/Q8Ťۊk*ϧp~S"3P e=%뉋lW8lM/k.18>>V-^c$}RŚyZa'_CC˩K%`Df)#eP>~4=c0OvP)YW|R>69R+ 4TyOwAZchՉ%bV'` 71IbƔ2=좜 )r ڪAPre,dFِ)&&D9$ֆQX8](]X]u- n9ei`ޡN7UD GL8% sR.+n(& [F՜6]zKڠ;Po;yj $*4E붵s5 '½N#ө:q$0V kSf@v*Os0HAq9/?sLY!')uuT{b~g4 -kj!7$dx.:lzйy 3z4g}`z$YVr}2ڷ9WpRPj7L#XA=Tq7|,a46 ?}l|ePpf2/#>R Lf\.}=4}M :0 ɦrd@x(%7.Ҭ!g&1*2_r$5hvz>#O)T%La?ǓOu0JELx fIhٖ8Texن/h4 -`!<D{MIq RK|UU|Grv蟔BvfYJq˿rV5K.mO49YUrN_ҡ=Mk )DcgN H]h[M%/VG^J>fOk׏'pYQaܪf NίR#OQ)M{k_)i^{zlLZ|1Mڠ+ E el煗KW?e3=#eIٌЩy\ܿdi$!GhQ"Fu%&x`e| {2TeۨB5CʞY[$A9d5*)igʐ{LB9!6zDGe /"3 PđĮ Ns]LPZ$'Ծ=c~چNQe^A|}ZYe|?.T;Y=.ۿYSm'f5ZB 6upX JLj)Fٞ34q斦+WmŠDHYDhCOТdF>їDu/晤Bz.e8Q8cLu㛠7B# =HNI d) 228zz9(RCU)I,mF yHu`b9-acP:/_}9DS16aWM~SxA p`}}g[?` %LF*O DKD/۫gSm{y*Mz~ ZÓ1-3 )ƛs3nDTI؋(g9MJ32UۍUbGa![&k‚܋A!m7\2%\{ C I[fxᙆ5$mjc2AO<,W,K KpfarjL Љɘ߿Ru|l#YQ*/x*҃oκN"$$&`sX]a %fVJSsR˽. Xv7}ϣ톈)_6R&NlI0z Z4C,, *-j]\dnPD5$Mɔ&ʘ HE&nl%14#jzA g2d>.ʟOx-o 5Bo2+&{m&;՟p@"4阺ޝ^BÈ߾fd$=M2v)`RڕEVK@`a<9TFI P[2WcVydX܌ A8n(!9w%K)u}w[^4Jk+WZ ýCr4w+8Izpa#OEM,L{K]zj CO=j#Mj MTRփxR8^\dQ4Y^UD@)6PN;פMxaWcoS 2ݸ3b{6:zteEqu%)B>| 9kRtK$Ig,r%[Z o/~b/U!Ģy~d6hdxyDqj6y\A1^ԐCү"凅/{,TN1"\w>ı)Kݞy364Z9d(XNK[k$\rV#o!=oybOzfB,-inZ^sA}8>J!7ۓPi,&0Tk\v;Zwg6*3uKKLAa$ I{ Cal/}=rʽ6o*ۛrX_s ZR*BuN:%/HO'wlX7E℡!.pnv[Oü^u]^뱞bI- ]ۇ5p54QބL ElQj \@" Vֆ挍dig)+$Smc%)2(YS=P.Y)[P15rM-! ɴr9h[cKqRESVti jxea{Qܰڑm< 5qm\-{tf 9iG9qƝ<(T9 xg6MCbt(g|!iQRJXw,x{i v9:⹋ ![L IR|VbѣԅHU,X MQ"XE)Yn'M҇C4[Ckl(p̴ga"f"+B" ɁIgT{ЌBCXf,[G^~lƣߧ6UcU,Ih$ s>q첢\!`7{M-`.RY)wT_Zk/?fio8ImRّf(^k;H`/Wa ddI+ D/+A!R<8گ @G =:)1gзf{'^mҷ˱X~SO֏RT=_PyW#>A/0kx4-4K{awi6oYo z扜QK`@/ҭ˧L|d?P,,si=; K \P./sXwW7^Ӏ5!Dl_ iBWon6VagxLo aF9;lWReA(@sX|vY. @VF6ilch s&]N")@D$'-B-\^!KIG%5m@pGSa>^Θ90:t ު3A=DBY8Ͱ9t{H!28iq nm#WJ)u| bԴlB=J5Ixu=e.A+|uQbW3?HQe~urz~¹di{*Q뷹!9"#JCx2SmZuXNh!BD)׮h rYN.𿬲",Uo-H|mAD+LȃnriD>}l<V8(q00 :us}d@/(OYT>:MO O;)bJlObXѲ?Sk5Y*RƉAF+E+:Pt?&%Ċ]V4bU徨j@hCG|5puٷ>}6hӋT+Rrx:y-J=&nܝ,fW<g ώG5,֕5v#"[GbSoGeLCDmU\1-7S=ÝvBє0B|+и4#e11MGO'WGuϕtvI`7Go3R:W8 E-KHhGe /k0B7KwX+5$>"P/Z{LK ЊJK )ׁFKE343񸖦R/;(/L.eL ~,4j`x`g!T PMUbaѤ(Ȉ]0f.2 RI}B{DEZ X͢2XOiK3x;u9%RЖ%ȱ4soOX}uC0qWHwӃ%aU=`\X8ڶ |TR &,m.| J|zTK3?\vϱRsN: E6p7Ь``& DP<~aZ#7ϚەMe1HHR,C+RKp8q쓰_mc 774%֞x;c㺱fߧ$VC~Z| ,=b()yf.5;P7شT.FNGGת긛ST|㖽L&-̐*ٟlvOQU񩝶mIU+ߩLZFsgdXY*;\k I|niGNq`\"+&[R,d]hÇ8ac$[8t~{y|9 }:+j ߓR*cd."PYpgt ,'rb,0^3'p ,DKoP;(d⪥x\h2WJɪSԯsGc0߫ N@w;{H+^[:`s# \^P5^BO/U;11cE)x΋/JbՅE "o{RD(7q-5pNb?x ] \Q8 c  v716k= @89$ڿLL3%1hN_BM콎[:Ŏ"XѢ '@:YD6Ҧ.-#1Rc|qs`?Uk*<]Nʟ5`NPڴ#3sU,GeFy&h yݙ>,z&jVV RF{B`%;DH#8uܑ0t~XV?)+q5WSSvӓn狊w]9j$Jb< WUg/'VCbC?Zǥ'$A]:9ô]k2 BΎr[Lj& ]DؘK"7 d<+{P$+>ՌɴuCLv Kܜ@>R :tèz3/[0|}3zDn!@_?Z7 -AJ!<>Oч!Fn?^Ȥi_2J?Bsٖ9Uuq8UbQ۞*CC|` ghsh"fiΏ]] HZf&P@@]9ڲ:ֆlPo aޝ9VenUwUh?ɫfҞU7$uIWwK;hҮ:9v3BQsQySl VGcзQγK3"(ʕxw<;fb.AKNz/R$o(ւw/V1If򀱶AGz5U?dY42'?/@E_<H}bx3>XˑP'7h$ .~ YD6ezGQIo`Ff͒ #JLm_C]j, JXҿ Ć5ιU MhGީGa?A4"V: 3r] ۏVЕr !-{X_jIVz%z]su?:I𙆨u1 ĐaUu) w~qmzk҂f8`˵UaC*QùSb,6w_PhW x @t\j$M^D:ѭz{V&Ou+͍ve C;l ZS\824i BV $vҲ"Fbe0tqxkwsAee(ן;mB|vSzG x*_1觀]Lҕj{JU _EzGSm@"Р-}k1MQSS(NJ "sd]H  Z|P82H LS}VŃܭ_W;[ s4пr|է{Mwvg \HfLc9f9˧MdhGcjmÈ&W|ʪBH r;3݃d0udfxL;*9"a57ڝ{nq[b?f«(%|Zc`\і;K5UAkVbwo&_dQRt2;@ )ۻa]9\I mPrf?D|ɋ}]9]ghS2R ep*ovr$