sssd-ad-2.5.2-2.el8 >  A aAU]#4Θ]˛WߞO$bL S .yO\ƥMp:qVؾ+ FƥjWqz OvE l:I1u %7G ѫ8DŽVM$̍RLɻܓz4s2EY{N™t^~s: h;K_>?B~ӝo3%S.ٴeG8Yf#l Iձ8}ᝯkJ&VgQ˘O7`!n2=}?w"jt\@7cRZ5 É{-!`iL$2a%f@)~o^ 1{BZ1<[C.g_x^ld\tab%=oIOKpkhў`y[<2SKDŽ.)baR9~(נ*XL/ps (L]p#\)=ac3pM >wwfǾ6x25D!-;sQБR{hCɟuLp覨 '` <30wo.WYS+אrosa&%0TVD,8zO2hq܏b(NaUՂBp*<}˥GlY_^RbPXp:B$ȗ7Ά:m#^2+U::~>pEn?nd   2 /LR\         ^     D` FF F   ( 8 9D:cGfl Hf If XfYf\f ]g ^g bhdieifilitj uj0 vjXwl xl ymRnHnLn]n`nhn{nnnnCsssd-ad2.5.22.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.a{x86-02.mbox.centos.orgwCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&txK8=OAA큤amamamaOaOam`aDaDaDc4d115c334b3e6029869d3641e3ff2bf08702753b085d317bdb540915ee4c3a0fed766aa23a1b5554af82e2221f3b72d5ce6659c1736c02e8402f1559ca100508ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9031a33d73692b2ba7ed1ef7c2c2ecb44c059f092d23bf5464a7533bc8671272fa93dadf7a75e53c09599f603834565a95390be3daf5aa72b9ca79804fd0c61b5f48b8614a0cdb413a578df1335045bd9393c110e90e0e5f22a9530bc2c80a8dab5../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.5.2-2.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libglib-2.0.so.0()(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.6)(64bit)libndr.so.1(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.5.2-2.el82.5.2-2.el83.0.4-14.6.0-14.0-15.2-14.14.5-2.el82.5.2-2.el82.5.2-2.el82.5.2-2.el8sssd1.10.0-8.beta24.14.3a@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) svuk2.5.2-2.el82.5.2-2.el8 .build-id2ffb83be35638006025344b76ae5c7afa60f2d10493f905235c6378fbf54dd42aca3f094f9dalibsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id/8a//usr/lib/.build-id/fa//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a2ffb83be35638006025344b76ae5c7afa60f2d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=fa10493f905235c6378fbf54dd42aca3f094f9da, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR`7ϣӲ~0LK߬Zje.'FR].x _dx U֏*?kD%wtFn ǣ1?_f&#>d,Ȩ;{faSlf񤓣EԞ"U}(4a|fɜEH]f>]G?>FZ%TecL]kg/XڄfOf+ GIvQ> 0B,#ejQV\<}3S,Uӈ¿0,qM1T)߉Lg@NúSs )? mv{+k{Q $73YNKɽ4x/A;zL;A^10x^ ZNln{];MM42h[!;k{ Bue{e"aSPܛ29Zh{~̳~xK*ujaXU ͽ?-LW|SӛX~-#7"# >d1@8꣬QbOu̙:׈KvnjKOC%@ٝ@yPm^ ,Ni(%c)Zԫ̢uA_˕M|Ki(wkUDwC$]ɠ-Vs(ښ%# +rHfU{G0im GӣK-Ϊo߰gbVs۽{8jpұOiݯh+¨4i,P@ "BPB)7JPr(C';pq _iX?pD tH )itÝ{m#b':qQ0&! D:Zz1ǛVj|?Go8d^f&o:)=J'*ڎݪ{hP[F`F;g8q;s8))R:$.C}mk-*5 9$tqn 9` D4opP$ީ ."Uy6Z P~X#șwfp_$ar RP1^,^HP jA^wų+'#2B&41e!2/NTDDZD/g}C\'T}RXVkOy{1[̸vWxiUSVSW[&r6+y?- xEt hcOgo+/(A n.=RGdشx^__ 1 ojV ~nW2IhA./kPB;$%Ӗ|I*\Zs =Go*#% h" ЊX纼sz&,UٍJlΰaJh8gܝ3iwRHu0e8nH+2cʂ@ HCl%v@ 1KC=X| n ـkcYdʏo#vu`,::JZ'uG5 DK.0u$u:ƕvݺbj0V6C<;8L?{lvEOU{JKh$wgjIY)MoB@>2Ɓ:єJA͵}^qݿ`3x`5{!6 _&,ԫMi3Xc*x%i,9hREnyɞ)%oR&pns;h;;,»D:YDF'h+M;Jtlμ`[{ħug|d]HpJ؀s`#pj,@.E-Gr6R sׅj\n|A+קN>A.5ʜ88jED&-Όw83Uë,7@@0vfO h݋VY WE'، "!ِKLG&MÿJ"=)[A>oUۋ tuD|lGgs;H'=Q1蔯 Q7,Bؽ&p34u-lr5 ?u)5IWTŪ% "<&-~^]|;Dο+hDhc OB?ΣcyPX(B#U+{IYE*U2 赊 5rѣY#<$m~,U ƴn;E#TkfoZ_:2gk\uD,k*}_nt juIuAC4 Wo{T6(4LSU-ZqŏȦǸmF-?5KS8?>%}W:C1YNgC}J#'(qm} >@->.R"{mKe13Cb/݅MQs:ps *"AKn<3kd{({ rX]L1فطih&0/U"TWj r s XmH[yWj}rm$$o%h Us) ` 6m=ği:=L%чu!.UC Ph\ x\;;λD*©B5Dk_mx!".jl -.(> 3m6LD/eiF(?դlG ^2COڦ]d6)2īG!%|T8oN-+hdg[R|{))|G@֕>ua?)c7df!uwtGj+Me0s"[\eӨ7 ++i{Ľ]+/!ޜR,d첺aMCk](جXt5Gd'ғxOG65+} gV%dV 0*?ЬDq U EJ?eǍjbU&}Ӧx_gZ?$οШ1Σ*ѡF*#  πfT]s2zQLc$ZQ˽E<:(F4xɌ*hXW9lALh_O|_.<)]a MU|x<| OSQJ x1wĆdV CBOZtɔH"fm$M4L/8p *fB̳;EM.^{#fsb:=>-a[$U?s俕 rόvAT26 CDpUq.pA=Z=%¨IA6d*POÛ{s+rv0X"35'BUj]MlVJ%aPG _#7pk{e3.Ň<'+= ˹ >aK샻z_gV[_Ъq]\HFw0b*v y@#`MLDvw+AA!G8/IPs+//9hʀ#gmOn ʵИ ЯRJX+y<,.Zhnף5@J@goP2ZzvTa&D \>\g LZkrDR?CK_>Ŗ?qxT9#FXឹү:s4\k08[$+~7{20U3b_G=lSU' GoW }clf~#E!{KCVAVzجq-JS5CZ?f?pfn$+ !:BUƱ+]U̔\:zqWM2BA\Q2]l\lOA+T+h8c8v2Ir 9߸P>=7nN^7}y "҂y& e6I-XQE?:{F6Jcʡ,h\|JNP==Kn- mw)ױp\mH"ȻN.rw.Xb6Gʼ0H5Ãa2Qj~ #c(h7#Jy H=a69_ 8q]G-D`S!eG|ZC }9yY.* kL?({ݜvr8uy7}LD˦P@b~mFL|Vg_7λRc[nhk: ,p>ipQWV]oO@C$oٶ@0u vD;#zZb;#\ߢp zG ?KԦO=Pۧܮf%gTȖ$6ETHёBoymwTg6K%g2޷( Zs;Vq0,UnF\iZҐؾ+]*6H 2+*]en#٫w=߮FHj1pHj3@q] v`m0ǜSu޾H}E5,@F:/Rt?qKMa]a1E od7vr 6-!b?>1-h!"T_m͡ Knve詁Cσ#H;HńL8dnVN¬<`hs~]ingaذȲ.Ǣf}m8tMv'+PkOY\eϷ[Y"dRΨTiW^ߵfbC ׷&N"ފF]^g?0j Ki%K^L|~"Hgb|pٺQє^Ƒ؁[q"p͆g"v4w5p@CqTuexD#6 iVVpLk -9W ZMj@LҸWjCRyNby:}F,2%Y^ϗ T, Eҝ ;E=< qv}Kt!bAUAK՝{Ui6__ %A_iW<ʋV 7b9?M@3rYKES+jLLJnUwﾉ<Z8ܠR+!h;g1eKx}4r7%A$5p?DH 䁦m0h{B/l1ν3} .S9&:J3 ׸B䒓rvS(V-zQKI4=)IW(+]a=ȋ`~[[@$&,pE9e e: !{HșySeMM͙&1ϋk&6Hӝl$(TN׭X3C/*NSSd-?).Iu4f"8f脊Cz]Vɖ$_I3y$֦j7`BwBΉײTOp1=fKA)jn|WgaE]4ypi}4BNGUlqd?Y"{4:Y G^ſh{%26)WΞDe s& ˔p|^{VHgS_NQ7I-r:Cq"/F/nGQV\ߡ 87r*)/|ύ^ Ey2ف.~Q0f.B` ) y%[`VuF] !|Zzo&;Xyô"a7~pPI=_ -=ITć }Q)d骵  Oi&_;h> csٗ싄( %o42I~|HT9Y'&NB+7q_ Hz,-2inin5R(XjmQ;hݣ!E䛓y^z%L5$*qHoE[ }Z gHn:̈S5gn3woP1R$!9E,!`-o u%!v69S~#CD4c,dduo5Dz3^Bwc% gt]3DduEXAccxcKPNƮ9C!euHn0|wQPQeCqm`y,?@ZԧI_P /];ݣ#pCaEOα{nFuy ǻ8Mmt Җ^ hM$7b]{k&*џPj,rSsQ/Ji gvAP_sa [ DryZ4e^sƭO˶qlo,z0̶9i@GrZqěG 8 0ʣWKTБTꍳ",52ڻ. Z}ǖw67䇂Njh}(GKL OKR*=85`P.7+=OCaU*TaqI(7c3:ezLm5 0s%tG+_l߇pdY(.gZ!e3Dn 9rgĦfpX1fKEΆfaٰ&_}ԦTyY\92*{&;?,BӥF0nŐ́dat41E-y;|YtbպϲG#}e{cn5  5mgbGzVDaw,fr!ZX),@@> G譔HCF#֪e%Z]V5m1L,RGu\4="scN0|K(k]>]$PTp3gEQ5bF>ԋȟoPn q o͗(ͣvOg +8iDIm"CәHLJGytBN h2 µ^~lجMIyJ:1!f2Z"j܏?SHhrsyv1&QGHOGbQ^¡.2. Y4}3$kגƨjdt hk2od5x[ƻB%'X::vɼ:0m[dy/TKaׁu?3e# QTN"V} h[* FZ>lĥ?ϲd(^WY7o]F@4h"{ )`}0:bt93*Y$G0@G#{G[@ŎkjߌˉS5MbG䏯{$ߢSaBz}VBz;VS+w /f8GbG`"m Ze;H Eym|:o:_X|PlY-IOf(YanThyg{9P_Sl [h &q580XQ_@* ӤZ(=6n?H*s=5bQ>8kN | $GI1KZ$쏨K,BY6hMҶtsu;w=PޮW3=rrEղ #{^@M D/C8Wk8xlæ3\78s^0('\2Ix6vlO@i.xg!:U/ȭD YsFBg-]nz*|fӢN~rI!#J[]矼>VP,o茋@QW"֢D_4VOs% NK+mLBls~CoCP<نHw\ EVV%øHK`WވtB 35v< `0FdoѠ^K܂ Ia=BEiZ|*T{SrBa%a Vf~ƹlMFݔ@vI\R_I zY0݅$7zPH 9KcR>lQL]MCQ1lx^|= eo菚R1Nh[t'Ebu>*1ߺp{'w\#:dY%fDMh&/O3тyѫgzCz`y4~ Z[Ar=^K._k;es/AU`/ e㐋@Um}mQQx5#.-RDYCܞ,R(k6*a_CcV@qr;HbH1 jٷD ∌1v%ٟ+YS?M=du-4`2G &d$@Iz:K\-Ѷksw,Y5MAK9/&T҄)t{5X|ozWGd9:F/܀;I@'82_ֹ.cN]lK OO+oR0N#IE:uv2 _j xB !~9̆#Fl8.(8WٺnӺ}X;[*L :tX-nQ'jK "ti^U)> UZ$PFg<&rZ #=G; l%2OZ}DcKtҟLփKNXB?? M¸Ӝm&+\B>tT4tu)mZB-QNzcoyбѢ\g 057;Kά+P T!:6d[Pދ.KX< Q))=ʇnlV2,{8T:7Hwy3mmUCP)0֕y!/æyı9%t7~{zD6e8[ M+頦c+ "~SVy 9T$ (BLرFPyV{͉͌#>@3ał\&>[d" $  $PTMNȣ>f5I/eJa=yd_ỗBk3E뵹4+s&@>ok&œ*T_뒕kE‘0]U!Kk#}yW(%RTmg2IhG7*chc;Jn\5n[f+-qPHY'{! Ҳ #=p} o.=vΩg,V8gJ*6uvo>]M(sPaTRy"UV!b"oA|S~퉘ڂ ך Ur MpS g1Ғavwa:)Cb!R! N }ʹ7 ܈IDZx^zN)L;Av Jk"Xzy}ShlᨱBaPK T>Z62ƖjPlv'Ve(xD}$.0fFեV\ E9:t7dOa2?m^#(Ի~V>yQgKswr GDgwFp3:2.y-̹X1|ŶwnМ~h$f=韹WOq4p%y˪qq'@N8]:y_un%h}^!7M|VJ trFt[B0S@^KkO^^G QKܲ=$ҩ8xWD9o=4>Y-|&9c_o3x,ovE%wtS;#. t~p9U< ky&SM Wq<# @A/76Il>҆]@ [r3ٰ$Svd{i=GW= xOE] ^g 1̅N͎6!< er;%ExwUf] ̯k A,y}[d lu 8YVmvj*6eg мlL2;kX]J-+66H58Em{M3gJ Usz_LF eY@߿!sd0Ű{HnZˈّ~4`<]diJʚ4>t&5 {YuDMRr++?UPr5c{P3b(̢1N^ Pi7w's0C*Wr6 h`7o%+Uή1.mWƓ6$.kިθ@/ #"(?0>K%hy#`.V6q뷁upOzJXc%#MoR[\cAZB{pEq9K4*:68#Ha)k-w_0rO#qde#~QPtz)x֬/cO[󶠪e?kB`4;?Yλ$+QيE=dV7@N#>&B$UiS"SwSitjZ!d28 Ah@ nUXJg#M꿫LjX)nq}B;XL~Lzge۾%kĤuTlw8m8Qi" ~_ vQ"I>cz]%mDJz 9.0 y,tŎW "iaֆ)-)&QڳR_rm>FQ.qRI%1C {Òb\ I Ot.Уe>%@% S;o^j"kbz‹EA2 : +RӍny=iʼiQ&WrP'7jX|GgUQXnBqbiRݫ+zW2) P $% A1Js>$ܱb]uK9'Qs,XZM Ja2kF\NTR($m@#3]~9pjn4wS![fCxa"K+ϐksAӏ288d[k*R2t^ۍl h{e 5 0Xf}ȴ_X&w&i ޳z-8zB8yİ/U[mt :t$"ΞY}"Lgs㦆~6ɼ\B94' 15tNi Z |ԹeOQКmН#8*ta*SzeL_O](Ted6vl-H쎼EȑfE:UVmG")`%L$hO; {֯gD*Y1_xQj`c<ޡ뀜GT_ݘuA^#lm q>{ ,㞉X-_"XA: SP+xt|OaS}58ť8T=^5l5Kp_(׫10jd4 DR=|6}7tb]x(?$Vyn+Y@GG6G`Mexױ->7'p}r>t2 y4^=5&l2̮]Luc$*ԃDAZ{$.ҒG7^ɸe Y߄N0P y:ur_v/GWm+Vn>,ML}7i#uWɷҢWpϬ,M= fy,0jVP[:Z<0H6)bdHD `8z\lcYK, bM?Ԓ OabcX:7TR k.LPC D̴CN@`fZH(j[>R_/&gZ˧@;9ȫpWd4_@C ٳn[\L[9l+#mNJ-xM`nͮgEح+W M̆U[nmC{\;rbiQ+{¼TϿ>r]E_n[Y/)5m,"h5}R'48+dǯM^Y;2Fv-;7B rV4q"[_hb9wŁv)-b _'jP=R#GɬFA$*+Ʊ$53'kž-|C!g]Y@?A[Ɖ&-fS{jjf@ս )v>鎊H%/XTt1~1N=qA^)`58ds\JԐ!{q>CVz (y0RI5q@JLto& fZ1>Z_a[D&>3PgW*D(E9Ԡ:b *>F⌏hif9s;< i ͺsbe!k6 GZpɧP63_8g ;9|Nh(y g[낂3aByh'kLr~ۊeHڋ0 ʷMr#S z#wW":q(}]-EP&&K0nh{ړ|[BЈ0e-E*.o m#VfXk׺q -`,ҷJs?C(s8Y N!0N(]*Aty ʃ햜t**+pw+ Z糎*6-@$x1r\? !LYy, &Fgᚦ3.qhlo 3}bo 0I$tMlKX{6Г/^sNsջϞ,LgC|ϥRGDeSYe 2jcMJco-H0uW -a%K(k6epJO7m;P9^A뿧oƥXzOuߒ`2إK.n8lqn/lsr,W6$#Z:PcL5x>3ۯ1șBz/iB/a5'%9+jU=TlJ3c;ξâÊdMSz==D #|?jG<"t$[*$"h/I!̈́{@$^l#PX@J/]\ 'K KKɻGJS[mapO%_`9o[60T)s &~VąIYҽ" v睨PU~~Aw_`uqFC#Eĸ#u (KSR}>}!t@Q\{e,S?klB⻠~z R针|$MnJx~ jOE3mn!9NNϷ^9Z;2ov,"Zc5s張 (ɣFfʉ[G,"`[>@S|.Bx_d7B.qwe uƒs$ء\YEHU>4en.<3s# ;=]JմGoU bߑuQX. aY4fDr~gDق;5,-Y^z1Z|s,Bi?n1 ;}?B>pe%h0 qYØ|{4 ' lz|eOzVVjs79Sx@;P:~SE9mD?'e`/[BH}/ D YV5p@ gEL~>8ycp2™Vc]9hmnebK"Ī ¶8Y51EW6ޝt!CѨ^`q;u>=K mpqڛ !id0y i|u(ꂅ /KCm4\Uj=ā fY) v< M&2525j$o@:#O$3(-&%J0H١[Vs(t2t׾\w> ͡s_)wA_fD9s~ܺ[ R$Pe_6JG{{/V2ߪR"y[xMmqM|л9 u\DG Dg!dt=]${gyj ,n䠧9$:wغ.VL>C@Jٙk0N6AH^s r¶lE'jPt3#⴬I" vH Ot%^W^j󚮣#ݵfk$uVB5bǹUC?To?6_f7ybVlH`;cZlcubZUe86דRM x13$c1r`h*tļ zpg=i.?M|lE6wN>H~.]oqjza>_2핵SYL_Fq0,é{)J0E4y XjԬ\9\u&"rYZK\108;RS.DS;<O=TҳCp=-cӽ"V ,oVGx]jcA9_TTmrHRJ6[xQP<Ͷ}U" z MZ;&_gSrPę6=G0x tbYT,HA~Nsۘ<?uj`rFQn:C|g _ղuqm7q< hFVLe_/JN_RLO_c-tg[WUQDFo2-0ΦSs@qH^Y! 2f0x zn6 OKbJ"oEmwGn|CAn8YǒK*`Y)Z*,<K]v.8\>} s7ӆHN~K#F,ov^o=n[ k g:eCayl|HA]J9Ze@N,`Z?֬La F݁/< JXm[R1㗗&Ěؾ6};bfYJx1=I9#ˣڍ{U úZ[Ma08K~g~;IfK''8C*!$yTwӛѾ/KƆXd nC%@_Ď3;/Rjr{=LU7_f6 ]r-"}IeI -Gq853snEA=&r}P.e$VgB&aK69mB/1$"I}q[##S4rxťq+, +f4Cq}Zh*CG;>IeyM:g9wkK3uWEUw84=hD)p24uv~WέɬK񉠜%OmMZ˘Ԯ2f9(4gѿ -UBP҈vGW<8¸M2$4E^/lvj}k\ Ґ'K> DAN֏|Y;Lm=C}pQ@ʸ$p^P~5<8r~1URk1$$"[uk _nN\ouZtπ϶F4T7|uz?яPo@<Æxo}v޸Yu,&c,{dQvH9 FDozդQab|= ֧mx[MJDa1LU_RY푐>$ ͐04_#ń*7uzů̗#M z9^yߠ3U_tѕ =UqlePT 2mUGշ [{}Mq Xw.bz\ºyM%ԃoC,+_ߕTT RO_/tEpT6 kW;qφ pLLΖlʹ )+ʑLcQC q;/x 3Qrʧp84z ֔n80`-h54CwwQR>ELs6},}H3/+Ǧa)h]LO~sڡm| 0<ڒS%w7ian,AK+/P|̦(=GRȃoEp?-yVUA)t]^#*<4V戭[2nމt]V-ٺ cBGb{mTJQ)Է[+%NT:n x?6aS0 x'j[#)# g}KөaUPܷ6[TqSВE`cΈg0Py%W-i/ $1.Ü!.$zЏJSnGϬV1+!¬-c|6o˨QS2 |گ^ɑ +dZny?h> ``NiS͖Erlg9q >S2E>gy*/ŃZY&qW~y?Prvkwt}EͰ~>`U?ܦ= ݘֶMe3=*Y>S"2p;襐"RU.Nz1=w(+]0d?K%,m(q>dp .?a)nBXY'-"_`[St쁳..dTJ_u *i7O&>!*߭[(Zѧ!}xZ?]mt̓ Ɗ]bLWe%GOޘ΀Z)z)3MDBg)/`Q/cq%vOdt)HYz3E^CUA3%MRPP2]8)+9>*6g)? /ҀA,Dm_9Qn|F{Md*z7),½K*rrUSIFN "VO"=u1W%_?ݍ&CMYI ,پ͎;umZbܱ\o+*BpD@}c|ߨ ˴CeP>'H ڙ@q['ƍk٫bRAq&KXcgoVkG/C$;-Su =W y{\sz#YsSn5W2)$&_ܱYi"b\;W*r oᐵ^p 0` ȩeU-"Yܦ%M\/6 _^ո7<+ӝCn`g`Wg@ðŶW+c4qnyYz{nv}AkdEIF;eJR.eN?A$ țRGÐ.Ac*^#)7L" ^Ӏ#>#3o!w a,Hnî=qCN QzCR-OnH %VxB/k/XΓ!|e`^{0vV$Phap] A0/Hٚ3;}=o~ܯ/1}{89 $4SzQ4r}Ba)Wn@ &LOO*4Oi{j|Sqw] 2&ZuSӘ?:F"Lg,2^"lr q?7xь$9,"S.No%9qgiRL|2 CsR~?㗡m]qzkwR•N'h+G9k2m}| p-,$:rn (zdb)†X<&u*MU C!579YHGh{pi+Ж5}@-`gB9>rp:tĢ9dLpC.oXiSh:v.Ц}f; lc(דǺ,MG:lݓEq])/.K%;^ aPPU Ń.{dR .,@2pH3ܯ9bz;!?b9M!pe_5/`eO|`f 6/~#VO)nU`akf.;vE\PŇgĬHs%O௺L-(t]9<(<}V4\g Q>_fIIOAl ̈́Én5G- PeǺr>Ks? Itx7Ux-)k+zS<H$/l{:3YQ[̍FƴiTQO߭2ƤAi.jC< j$15iDž|6nv3pf +܎N:-ԵDap0p{=D=PBܗA #'~r_8Oge8~hZpui6w8! [Nc| ͤl)v8Ndmq}&$qJl (ȉ|ef3.Ee6h!f<5\祣kI6+ 2mUydߢ>܋D|!/Q\Reܢs\~ 1=yJ17l;R<%7d9f.i!( ݾk ~ILI< a ?ME΁EzO!բ_f9?YUa3ޜ8ɏ@YkI*yد-R}3m/"}TKj>e䒝 .rmBUˇ/ ݼq6tN+N>mvbi*"j)c[b8s@O0hXg-6P XHh'36>3ڍ!)1́Bx=;*2IOfB.pXGu!6|: SG lP&,֍xq dZE^Дck0,k22 MVal_: 96\qKs&;Q9'V&$$֪ v\5@T$<.?QDb6]e]Rnl9J`T &$?˥۪4zy)S|=kFKZa΂ÐPkK>20"8"Fr>E~ړ߂K q!R$.|cCJ5['0_gKsPT1Qeehrq>$"F|<_4#т0֑ ʅ.sZ~Lꯟ&n*z0![uOXjLY`pA"1ʏ~6Ydؒ}S >:5l7mV0ڦ{^y$A$QZ xD=lzX,fl!$<Oۍ ZBd4*j<~F5srIWGʍie?y&LD#=CGX\vPshZnDՍ:9^U`̨/_3mZmά11$I=fRY??1%{sdF&\GȖ+%31|Î-&ZAzۂd iF9gAri&*]>Aʞ #tJs݌`Mأ]`E>E>{4Zl/VG/`M:|MQUkjm֝7l|xxqa#fD=m'Ҿ;GoQ. tx$Ҳ|0SĕPM=6/ar&&Ņ GSiNҲ JnP834?fjk6pQ9&ΔiyoyfTPҒ3 tHFqMA2<&ahO[_ ~943h4h++G6qyϜ\ tƎO]Qy2ny_aDVޝ1n=۔(`jZ>ڂ8AZ|fG))c&#Ò)Tya8|K|%|0!SC2\- +i+X:}?DД!zǖLO6CЫ:7&"tuKZ{X0xP/ُM#|G뭂3-$iX|#LG h1P BXbves.iP` B+q2+/ؖ8ٖ̼.z6sbhQzF%"rt>yҧP4*,5 q (ϼ>Q Xx Cf˛6xBRlbq8䭰r>'zWAopj2f.ܛ b7Ms`'3g~I'# q rFϑgvS걭@pvW?6P4ɽC)cٖJ!dג1}4dA8HE΀]"SՑغVk^->_⭴Jb,FX2ΉᄗC p?Ї1 d\:ԾuuOs ZV{>{صB*֟Tv??BzHtiL#0H > V9dLJ"Rfib|cT _Znp QM2%o*{Vִ/dk#)D!Ԩ+M)^d_-ea![KF(aZcdq&g{miM+"j,g>9gWJV'ޚozn֎rO5Ley-Sös-`j_oP`f!D܇=j!ЊQ%ۚabcg.'j[Jbb#ͤJO ˣT4mK T@齮H]UO#톶x ԩd4R(2fkMVo0K+P<pxWmEY @v]zYO#}B]W@>*r>lݞLvSݣsuqr#7P߀r\w TѺܘ-03@Q`v}]Ɯe}}mG&IQHaXI\1 `љ. `7NC>&X"fP=KFr`=S %0D[h@Yy@klw]#|P{l`/VP:*r2! Ȟl\ǡMiI実#Jx1S`^oPO(UCa CJ0R~|Šr= oKj6-I_\W(}D EQJh`+o8Wn8rnjf=d,|Nbk, sl2i9]`RI_y[lXmYTA9wo ڊ7k5eUň[]ױ9z 2Bt[ta cs]^B9̆P5˥;%b,tQ^g}L"s{XO!r 4JQrNV"˛2S?>r޷I+ċRۊBZ' id'S|L1AVNk0~,)` 6>&=;9&y~T/۶C4fj^uI:Ѫ-@6_"sݕ|RE,fň(e u=iNpRkU7D@{ӜAYy4+6;֜.#H/B'h0y+mb,5^Oh"T@]\H: xRc}a84⽍y 9G7Chm1s02@4r^3X!K͈+3eKZ1є=F Iwh.w2QnDig,7& Ov <ވ۫T n?V!&)UAGA?:c3*pS8T.:4a/u2R-'m՛?&+1eb%? }^YŔ[VH1=EF5u qAuH\T|B[V~^ަ'Q<&&_u"<,:;Pʷ۷^[9ns+D:mQ8.}-: ۡPͤX2.O{FQ,h<bYe@pe!`:qRPUH ~7Gܻepa %xwE+{֨Mz0uܕᄰHRJZqedlI/'߫,#/H&Ƽ-T/rOXx"j[rҳ tx4Bcm,qXP j*}Y {r7|}!tM)(Щ7%!TPmVht:6ZǀGW5:TЫU=`.y$⦴q)yx;A?AX`"O5 ^8IMh9~R3F 7b{!  5I[^*" Sh;&Pxޣ%%HtC sM@_`ϊ&5&mFA ӈ5%ehԟ0iLZ˫ϡnPĸ(~_e.uvESBSGQ/Fsѷ?\G,:_Oe?7KAO H, L+|jaoS W+2i9MHp65r= o VRrϙg{W a6a:(X.-"X.Fw$裕#g&.oQUW Hc ը?:orT KĕڂE{rV)\/VHݢ⦜.|,S a0Yژ ՝TJŬii!hX~}D>l-ֶc,;Bg^%J*.$I Fnb$w" -?! ~QݑUUz jL{bD)RymÌ?ćP:W0 ɘ{ |?edt >O; _^D{R5kzό <=W '88)d# ET 2Bz_oh1Ž e8۷T\ մrBu&7&=VUAgx4;QS>.c; S<&۹cx\Gqoz!/],<~fH S1fk݋Nc50#3̅.FAp8f"l_ @QgDfS$^  xIS=Btkt*l` ~sw- 3h 86\~jm v"3ϟq;=NC 9?r HWY2WPʹM MRk ԍvO%+<q&lJʗ>.lemXoh]Ur:܃g5=jKx~#=;%C@r2)W={Nm" ^kSgHU?m^FM'n[[ 2;B+¹HLd9xw5]8MI5LQGL]uC+,`I˳# ߱ýşR["oZ5oi0ǃll OlOmnD?s6+[^ yEx5L{fEk~viA(3VD8F~6jXvpAj^M MS=AqX@ohNWہz`C6TxĒP'7`xgLX;h+1V.v2u8ܑ(q@i늚~U xTm/Bq,LGmsS!L9j+T3)RYjMl6=sx' 6.Ѵ?l`e6Vzv9jIJ/gJڊt9-RxZ!`Ɯ qB~W,<\.N9{ ~4W$CY-Q;4~uXA):Ғc܎GyZ[3j9 UJF1$wMi=yŢdcbs '*9ÐQhh_cp $g~KAk9}p3n.֤42ܨ"yj:AՐvcGz-Y\^*µr.opqQu Sʢ@2`/oAݤ(Jvr,[;S$>ƹmmei2W&q3g1$`?U˜\>麗Li3/;mMcb7ǀ# 64PF ĪPNy@#l%["'{FA1^ITAQC̙nfǽa2uuuzs҈jBrż>c$Ę@%P S7:|{=t͒ Ȑlm}~|Eocł2Y~tH:FQJ(Cwif S~ڢgzcrL;#f)8aB4ó(a(F(-0=1z,%n`@Mqc]|'[ Wi14oRr:H\!6 $>d2I@sMRX#< o3MАKNK̊=/܏(.i/9dζH'o5rb.uE% { Y&s`JD -]?QC{Uwhp Ѐͪ"ϟ}/xQGZœzsw賚j-ۥj;Z< CCp6,_;XQ?:1Gp!'|Xŏ| {_@e1ϸh#RkdR}(5Z0ѩ=vz "ܻOɔAwiN!_0B,WVsu2ڜI,DHӦxW],_h}./쓳xԺ oEE6;[{i#>2X}\Qe_+$Aܭ 54Ioo-B %t}+ّ3Mߠ&y5q#˸{rU+H^K:/HOb֓*FTL/F|p uI H?V}1Fw&4,C592iYY~,v3NŨ*nq/tU]N:%h a$DF~-zTqxq >O-AN^_6Ȅ[/{&Z밀 nel򯵤.Ymϫu,V J'qU#v4lCi3Y{\^Owxs,ʎDej>iʷuwYvG*5xìP>'~&jͮ1R]֬WaS F}ъf' 4Mc]Þ`45⁽渮4dدBq^<>[TZՠTI=g_Sڻ,ݜ@^nizFC=Mܪ&$e5v(X^ .OǢ^d 5o?Fhr= yrƘfye_Iؔ͡УQՀky4G]'cOrrkɑKHR;@5|w7zkO@J16-o?V>{# ?ʾަ 9V1xl=v =q9{ M|L[1 jIc_: 1rw iA @ݻ j%E+ϬӄU/xA3ϵg2]h?IL*eߋ= e=o+ ?U=p([D3>JVN$QJ+ّ_@&M>uj/͊aAmMia?؎9U^7s6h:O3]ӏIFs:rc}&6j]O!+! V|6]H͂Ⱦs DCݳ`8!=t&@k"۸&a6jQ _А^7"Yġ|p2{YE44|ג"p@A$oçк:8pVAj5z&9"$mCp1Gu7F/usQZeN?Z{/`KW϶q.hB|>>A!-=2=o!*apD+-~ qZE6A'wdxBo@ {; sBD, X)l)CF91% {r ^ ]3@=*})P* Ҧ0<?ۢ d]vc9'Rq큳:;#Rì6ĖwG1LkԈsgA>>sb~STl0}W*\:N|&O?>8:j D4c?J5_9lC1٘#a< dEZ?ud8|nr iɜl+ 6<@sMwǪEdۡ#'EK"w!;9[Pؐdzw1Y󎣋y ]IX+'wfJ(M)dzRsl s&:h1;'* q5Gɶ_΂b^IUtp5&y:phWD~mi߅ /A|̠b\2/n"QIjܛ?wox\O'^y !QyC] svb8H1U#ؘL"4m.JB >u_n k&6[oFĒ!1T8k!ȍtu [ۖ*hH>JJ!(8Źq@KAjg|[_*zh)]>oSWa)w y8Go t/19HJ NrfI\b^I7M̟g ,Q 02~5+n@ aA7rW (:~- 56 pԗ !s\WeexqڪrUiхdT+ QQp/cE#=UwPw:2*RHVSB gR`E?3,f*F,mQM.C5" }A/?.n湎93zBh򺅍&T, :cE8;Z|萔Yt_kW~r{"d|jERL@7C@$f79bG8hltL4 c\P\b-֔[0_[hy%̏fE6q+zFmqRfCQ]9y9H0B1DVѸ( ?;[JuAfF;(-]n׈!? _8g:bst4`fҿM-q_ d &3oj!;rT 3*'+Jβp">1.|tUϻ%n}/'ʴ9[ Y>xmf#{t *K_+b&C_qx ᢰ)/V̘ &$GouN"NKM˨W]~_+`$]" _6E>$*~ǼH(17ݎVPsxsVtN\(uRKp얰% &o'0~΄$d68C"\{5c+,v:LtԪɧ'%Wɐ7kv޶<(la"/q|AS;6] ?+;tz=i&+vίI" Oq&ħlcg68' ?f‹nlm۴>NȰ^6ɚ \٩%KP pj0QJC->׾wH<$L5Ҏ5 _!-Kiu OnW 8O@`ZXU>[/,'Zss0d؟/UAL ABQ1|ҧ(vu C%EJ~K -/3C~d)`1{u- ,?& a|DCh,߂h '}???H\Hj@`ܱv넄ٓLA+.:~(ŕM0+fyuxGz#e!F@ k31CnK:vtTLC+·D2hEfFD/#Z('bJh@dHS|-z~5 +"Ncps~)} Ta5V^u8, t!F>%ةXf7*ǶrXid")k>6Hr]vu`ݔ_ڈqaz(Cz- ]c=ֈMk!6ek|+ aJCܨ~,m%63(`+I(Эa9T*|{@Fqx'Ly.m05HqHw/7.E#T.#Ҿbr4t *q'IG )iu%0lLSHWRx$OB֩VbkeT& ofĺ|8;RցA1Lv i-W0ߍBaRl]m]y&^?nf_/(2#]kdEfV k/֦NmLc)=p$Ev1{qT߈TĬuyJA+H/[rn]pfR@G]_d?/ӾKd@ڊNVrbÙ@@RZ"h2ؙwUIq\!ܹ{\>3nk>.DveAf?ɥ9%i2IALڐ-s|R%a vޅ:B5:*iUܘT;w;"o's@ɔCZHm S,p]=A/ 溇=t KBDqc|i Tr $UN)Y&9z#/%AM"acAG I52"L+6xRqMY'U*trV{d. %QÓ "ot.N)%l]!|&؋p)F(Τ*\tXF@p O#YVaOZGn$Y4ŽC,AUܜJhU7f ~7#vP~cf|eohvRՊ1~Zo XGAx;؞Tfaa#U$=?A~b$mVPoGX~wh` ҍтRUoOPtTgqeYZ l}#_JZj2p>%G8&۞_f`"?h:i򡔷}0!5+cŽjݶTn׊ϠMs5KGuct`%K `lĕ0y|j/3ǂBv:gG"mg9u*/_vqSڔk;yWWҡZkh~Mk92dx ~EYdm?ܒQTuq`P@V.0%.ymWqzX|Cr4G8MTP63L96tI&ToM|xزNe1%m]1L 5;e$NB[L^ 0̡}vW҈w*0d(Aʕ1\zpv2WhMFhj)>oGNBK;)k2Ɉf*CnW=3FLzaeH\U+鹏TJw#@EY7UWVD$xkBnag=텖+R(G_<#ˁmDHeue>CwHA5+#KUDjK:0pv׋ŊwT꒳P땳 fXAw#X_iQ՛PA7r6JrMx˒,\u:?,q{Vq:ZW\]Bl вy>>h]vQo[ n}I^M^5"֒|d}AbU!$Cy/ytX>]  &|&VBH'tH|71IL(yJg+JB?H|DKLWWW8O?ymH4Nzbt>s$3\Y!F;jz ͬezѐ~hFqϵc.P$UrL\nofQ:W45l b}'Pf73 S Zӝf1Sp ^|E)FO& 4(*^al<6&>YD+AJ.#'PW8b}yk}?ҋGY]΍F#~N?U +ގ·n> B.~Mϒ`k|4&(7[dSۓ!9H1RJC@NH!MTR d?,Lprﯭ&mUhE"bρ\okEI͔._q#djǫ\$yQIQskQ 2UO䝭~c"M@5'e/󙫗W\> 3a~Jf(pr``jSjhDMZo!*%*NCFx PDQOsLq`i!SرҢ DʴSQ'"] j^&?NOJnp'Jhh`e^5̊~$E Z2$LT JMN-#g|kFh: Zf^b"́~}'~JߗG*ޝr~ sAkOݠ%/*jRalNFaVZ$6FyY#PraxWs7:3d|)-OMG #sX,0FcOU!l֝8h|ብ I"/}4G_ ~:(O.-Bǖ,!}Ph8hCrylл tȄp\Y'ĵ{ ڐJ*/%L8дq 4cE,l(=2Ȏ1$w F/i))Yi#'gTe 5x./2ceQ0wh|!+m)(5>Σ[L|44pu5ٲFdzawr76T4ꊸ5c76^/xֽ2F;4/dkdA] OjpZ5 ~RVx>/ QTL&t)dg4A (i.6F#7-"G1sTU#XYa|}ZQ(:7Ni[5;XF nOO"' {&?3ע[X/0Βɿ)ƕ,DYwl0DBLFNz/=__]`5XABhꃖz rB4H̹d*v4;?[vD8>rzw@"#;e3Q`i';Gۤ"7Ga,A01!@Xrېy/M4@336'i~@LJΣBE $m RiRRKXfGe:_7=\Ifoiغ y74vdv:ޟ^#xw&G%'ѹĪi~4I' +,C{kguzr32ĢFITF1X%J0kX78|B.*12ܫE.Ҋ&#)G?w 9ޥX$[ʀYgF*__X{q+yR yx"Ԇ~mP2їѐLB_--uL=kpZ|o60+z^e鷨'&yA-ti6]nծZ2Ӳ0)P`+f':IY'o,MGpTK ܁}OPJ;%Uw wϩJ 6 mkbi)8o vw9G~lau>4"'N Y݄\%W_ cҸeuh >8IW>In˹VEH/ypo{.|Ss5-L{Z:t, A:> KRL[/XWd_s4t(mا‚UiR= 23\uhpiО wwv@оXJ"&B[0RO<| veoI:y3):-M*t]8¸v?]qxF-ϹskJ@.u60$a'~Mi5h;SPPYx\ 6P{3>~_N`F5 `tQ(zk{crW oaF @b]&e X vLE` % l_;m2U@ S^KQ?#U.l@Vb %3+D!p: G@IㆁPKמpF:YG6gpK]Ӗ[=oLͳmS /-(i2S,η ζ~ai 炶!-s| ']z3$Ƅ^&;_)LaIedn!1lJ,w K>ݶKޅ9}Y:eb4T%uM$,ά5R>QO3`oJ2\Ӝ1`pKb5%ZR1'#aV/ގb͚M2 o)OEf}qiuJ+mQn.>N`//Ӷn>:PQK=2.EMuR6?VK{/ (6SfYr(^ϯy"77Q$޹ О&qsVI!ݰe071v|J!)))#q#'K9 DTK#'=IR@z_/D(lRv5y\VF .M_6-o@X-pw1SiD@Ylɩ⺢~\`n75<x#eYZ ǟ)J':x lS-)#N[ ]FqS8/#HCW# e1y Kˢ9c`c`K 0/o|Ϻ]X7i&{6tKꔖiCYe{;O-<ՠ88BGBg؃Wj\rOwG3lPHS.F[~ ȶm>g]kwLeYI_ )^tMP9pX($)_d*ji 2,v Vl ՘Z1M `P ĕ O>q@Sh2=VN$2g6jp #WhE ' !xeN皐@)5hF}))Ul'":yK|LMy"쵪uq=0F{wU%~[B{QLVmM~ žى?wS;$CpN5/"fiWZfާJһy<2TH3xAh-"wf9t|Ԗ_I]R^~&EGt|W< 퇚1>O9zd2}9dPwWD qIV)}MurDS+:']Qxx-KPMٸBScDei%ӗT 9SR<eJe5/eiQ.Ky!X 3f 1aN >ѓJZ06~vxk/6]c'QwM6ܙ:Gs@[j0t~B[tC34)/u[w](ڿ2Z?H#j"6~}-:ٕ`>K-U,abgx]2T`)k5yFAr׺;\ځc-*j*O|@]O͜>I. 2ءʔ i}r^)OHSFg0c*w2.;>VdnTSd0!D꜃[ Q`%[tX3c<\U)GGwfwsaNJyX.t@ b҈4|oYQ:@5H{d[__ .r&}߫A 7cUq)xkm2aM5m/̠$5 իr?,5|@/iㄐ&|Hcigy|$8tC4W>A)-V\-t<_qɶ%֩yl yۂdfq#.C!#",Smh=mD)gs{Ln 5J9: =OYIgy*?#zIgRk1DJD0#x+."ɜ|v)R$ Zc@dbR/A@aDLwaol-0p]g|ɒZ~_>+M,5n+A`)pqAeu}fqaB`<7D N+?,'l!j | ٴ}<*DCm"@倌2Ӆ]@ߟ6'uHLu-[i%Mjw3/@7s٩ECq16Q%/y^lM+P 2 '/Oyq6ZGJ_b̧»  0e{9A"ơM1?!`I׸r-kaE!z7;9 p,93-b$3['^ }JrCJ luK\Wd9ߘjRIcZ`Ho'N^W?0sôK_ēۅD(6>4cJGڀ"}9.9ixӍ7QGzYrD(w<%9;NU)S1AE[!FYnh+,񹐰r6YN&#jCu;P[4UHZ[pY7~ʴ%z.m1Q di@)@f)y` f>F9o!sdJ;|Ɵ؋ًQRcSvnҋ@Y{BD@t!b+c:rYJejEj$$lOߎhd$S9 Ô^bA m=ZҖ;n~϶S+Y>YC '6~+hwm};RPA7XM;8p4PzY*__dQťfQԜLHo9eF?z JZܭCj -p=6>f(!3~ 3𑑠'6>T $OT7)jI +[޲Y %M.MAHyZJN%iAtk$Jp$ZULwL 1"x~ΙEV; Ķm  uލ.0vVl/bDWiΨ6M -~ߞQʣnѹ6j2 ဒxҟbuN1t”$`cn։*%lvz~뛓gX&:I+YaQqe?4WQ N{2eb=E6o?H/X-ܘ8zQis7:7jۡ:4$' p"I(NfED=vv%_-R,KN h^B rXQ&Ⴆj֔AlF$VE+>S5CZԫGgo3ͅeh($;)>i ؅ձfOjQHσB15fmGPPe^b&rXyH̯aezwMH#yߞe$Aw{eDߧQƐ`#]5f EMXP6)4 %pW T8[1jqiƣ;z{ 趷iOGKCg')rg 8T_5EXP|fԷfH1h]Y'c͐*0b:$uE"@ m%ih]@jtn/_]58TαVAdhO}$=S~p. &A,&Ԏcպ'ZtЭJU bDN5NTaAu3)3JOY" P6ZJ&Žn' Wn-XTԹY%qɡbxr]͆6uR*W)+PK͝],<&E)?h.jod7-M=W/:DB^pָAT{iWtu%c!DT!1D,hro֮EO%m,O-GVRSA'ˑWTuࢶ/b` ,J "44|Klx\^v;3ueD>S'aח`IuOˍtzHDLɩ1ЙCoDYt tLSnU 6eĊZb3㪦,['8ȩuף)2}Cm}|o ' RR®+pkR7hD ޻6ӝc )Co? De:b '8. rEx\ Z۔G)P81m#R=5'^пBgn0 ZZ"%0fM:v)J.#o[pl2NݺU*]lw޹a+ [xR ȑ+8ءX06{.eK!rMkumlZ5UZ[^Mpʚ)^=&`+_>xE<Kp+`9B>R7v{|=3QX"G'5i[;xTjXsN\|[ fQs29#qP4{FӖ4-TtHb"fuxi+PN 4uNB`9꜒wm0\ `v ؗY>gzxBi܄x}ux7TBHb%v*F8j᛾9s @F.8|Rf}6j`v=t:^Ƽkc݉_"`#Gc]z:hb^,h(0dh $ֆ6|FuZWvNPJ6T-w+p4&a=DC< =;Q*$_1l`#JjH -fs>Ҙ_,>uN26ӀM,$* x^mV\4Xdwn*YsR{'< {M<ڋYor" h- rޑ+k?@݊Sm^DyW;K g(:h1ak ^lke\%r>á=}@&+Aʦ "jWЬڈ" ]p M:߁X<<'i-E" U_0[ԓгb}D(+0: m&[L:qp3& usېTtGnm7r1C|A`$H8pjԅ Y@(Cm;kee΁_:G%AW:bW!@ڶSݮه9ĤȸE:ga*FCbH"[ls\5n&J_q;G4ً%WN<ͼ9CNi .hюnQ>ZY䡔ePsSw [!wJogO;T 9d*2,5fm_/2)w&_L_[}Yg?= .N5-Uu H*5x7Pqϊ/W,c< w QA8bÛuuwӮhf܁p A9prJj"R߭+(UJzl @Y4/YC^@>j M-AHFt]jy@?e0RZMBeи0&LWti~alڻTl8:䌉rR:--YNbU^pID0BXT%5ڴW4Hk2 V84ٹl=.QT9H-Mųh5I? D`4oicBǾ[w\)Xgl:CABhh$x oP׈ VkgP}+bxK@rLR7 ܛ/UEygks, 4eDh~kί [;T 022uF?SmBȆDd5W`zxQ~Aݔ;7n. BZ@XAN:M1G=M?y}c*^zQܼ2h?QBlp]^ˊuXLrrMTF8[KZU[̔&:GoQ%  2}lU3xN$ iUi&Eib$ 1sQ8s b"\?i.Gf;Ovx)J=+wJZ_/`Q:0|uq5W0iqapDlypA\\^[v ;B1?ŖY#ZJOlJ̀A5?Ø0AW^sz8k\&7jCGY*dx*BS)r0q XuOr6{ \{1)+'ўS:t,#>8x?Qb/s s4R@3œC|YEzjH3quKH<X[f8Ĵ'ƨq*ͷTX>Om4fhٍq++\?\ORG rf`6lc 'A^$F.[{85MLY6l!s/j.5T?;R-2pHuW<)C28ƍUE벋WH\kr*afAXE_k 3 Wp2ַ-"t͠ckC>mD7(QT. MK܉SB q?jbp6<#)x9⠿ wq0}m,me7Q_'r7@=yXO (!|ÎّMc,$~A6x"PtI[MMXax0UwPRxժVyNJ/ CLŒ-{Z}Zo~&|`#s.?9 Y&U$3osrߗv=5)Jc䌾C.ke=όԜ]Y {!F` @9%u|өTFaaVP┷٨LIj!(F-kL ZU{GJb"&)/rdMvm١Lh@)%k~DyTN{.ś؄kZmku,O7Ʀ":ZI4I4L1:|Ijsvvą-,"EVBV)kΡ|8P)=G2TjơN4n`?!_u2\M Yx$M0H΃.ND~1Hީ+ -ĵG: P+qR[R*ƴv+s!'rݩ[=/$ Dwŕjl5u3[J^ ʷ(Uo1D C~0o"6jVW z}@-9 k @$H/xКP'/N6qU#=vVrR4LFZ1`2ĐzQG ]"}f//%g3/H#S=2iU~ t{H+D96\b{?#"ƴߓEUUmטT:ZQV-DcwMZ`m-{tZ'?/0Cg@ (^ Ƨun$3&QͅY'" ܧUVYҧ nwf_9P&Yh" f4e!&j -5{;FJ.*}0@9'<{շ+/Te|i3b+>]Yg]^Δgo@w%\U JjMz`GhJ^9Hd+.*YH'9\ҡ{ ]׏@e1'z/ s\L/>ipI&M CX`uIvΉȈp 1԰Gm}[nvs"6à31`:t2dxuK8TXWBy4 @YA oypFJ1X0dē"I#vWc} }-aүe0dn&Bf];dG9%7Gӫvd9nhx' A|'Ztj{&} &/V%twrv]h?2FëY. Oȕuy#d'&y=0X߱\ 2\b|R`kmP~/M yQM=| :tr?=d;msrs-q:?OG¬Q rG&+3Mi !a#!K]`=E-tR/9ԛ6hT7\z5 %#zLB!ZXzJ:hp2aY RN~on0h4w)cz!9~-B[]:L0]+2$9d 1ԨHȝcM#h=8F4 3f4NG$Q*W V^t2f=OmuVFUY=OYߙQ xlYq]N"]U=։jƅpZ!f߁r*zO6]Cӗ}"դֲ$ BY­ñ,Iy$Tkj 8EU{l *I^ꗜrPr q߅#8]!N )g#5.i&)f|2>#8a9TR*j('BR*c?(6X_ޤ@wgZaP} PGvc$&Y%Md>'l,\J-EإЯj1P1vfS8fw$^Ba4k.@rw: "܂WMzYwIyŏzAWxxI !!JHf.6+ Q>wϖhKRE ◅z+ގ݄-$QAt2??\1DGqŶKv//\0}maͱwө'`ۏ:"HzNBb=R:G i8oX,hbk,N66&Vւ5&yijj r *vR9Ӽ]ыj֡W3[s J;T}\xkB\TĴF3Oo!F2t c)Ęv A>^N2Y>^ {> 'w=Z5U9}υqܝ{?M.])Y]+0$*ńxh 1R;Gr~j8齌-71p€[bQ >0R{п'&8tMPG]4a&TiQ07eKgTޏ(s p )tlO׮=/[G} <+nA{LK?2R:J$9X4ZszygPv6=6&]ST[Ô"cM%NN@l)qi6:KHa%-ʊzeJyݣkΝ-o 537D%Skm-A` q0mPߏUc@ACa#H;0ҫ0{$1 HZ9*+DJ]·y "7jDӣs:1dP O(#_z,Lɝ 30'r7tgvhtb!XSl&`.&S%^0vl^Pf & uKXXS$-kfC$e$K+GL׭ܰ_@؇ ~?كwڬ a8MJK:r%Y|lWF"_;N+"dBRȧ#X)44Hn$qsmCYuh$bm9H3[qC~!lI":9Gj.Qo\/7ق;vտ3RE/U.G^ѤGcp|NԼ?7Zi'*U`4wȦʗU°QeW 3#ZēTiC壿wR.Idg/ gh0Ϗɨ bsg PUNFY%u^;ݚr :o:4 ω4Mu~j ZL׊<AUiNmuxejyzoZ ଜQ[ش( t]}dqc$) xlinĿE"߈ojҷ7nwGEw1(F :B IKoMbfx8e'wh;n1xEFFNH2PG7rZӸL]^&>eid 0"E 9 l8lթVr!.Έ3#?7)n+HG(]:ΘՅ& ̕OsY7G60^O w5kƆ:~d<2F&ZI=wϵ{KiNup BO!߰$v_RD)blFgdc/tL[d_SJ!R2Z.:ap;}_BdQJk 2 )Ub?n!YC]Z_htt;ְL?a!eU[jJі]E6R~u[!i򻊑!*t| SinUyg%[AT_N %dJʰ}0u8T%/T[>K2Fx0'}:yagSп #,غpFLcz?gWOIǩ'EOY;L å7-HȠX7%{D~9H`q:/3<7ܷzD+;/gY{}0kU*g6bqYHT6-{lqc 5cM|][o5 t1B6Wc\ kFɼD}nU9w=4!Z y)9)+,wdoM#3tQfJm1x7r {Cs[_ *Z 'H{dLH?2d2 s#6-w2R4M JЙڰX;˚3Afv[KBI-@PU±>(h>r{ZDPJ)qX+gE. wuϝ:/4e¨L|/iĸf *ˬ#Bs -itz5F/(eZ+7 f})u 8:΋&J-xшzYRL`N~]3$q$._ A [ޙ{lcVӏV L 'l͍q"["Gk_uUD)v )7 ѭ5(rMXsie,x #ww}/n2::Ȩ9^$JJ/2#~MO zUBq TDRjgG,erհ0i>mmA/ܜ[Tq>[ڔ`GHyN w[UY9*<%oEސx.LRjhI%G-9˭Fp{Q< v"ޯ/[Ekt2(eo8cE_"VƪQfa,/EQuy_q.B:s )NK2uyfu6G_e1#]ׇ$gq9Q;tEmBʩhC>:'4Jұ{>BmGAO"0sɻC:jY?kR)CrG - 7e`X(Zl+Vb+% MZ>Cgw mϏQpb|WSJ8)9P8?ÆV09{,(~b^ %k$@lR=1;80D$rk3IbF@?1}fƄ* vT~' “1˷֜o-'eLaLjaTyW$|C拒NzT@cb[a 7TC+:PO`ۻh>BV/S^JK8C >@X4]CN˸/ѐKUe'K\NQguM^zrǴVGqmC76"إHT 327RCblޟ쌑x(b޹fUA-ӋWnOVYywvLy-"@.z݇*0,]g/ɅWDQ>P#rGcHcq數bǨB)̀2균ZҌpJ/'Z_N{"{!T lq,'HY].P~ė5hƴZ@ `Ie-ic-n^w<5PG`:?;xB+ٶ0> $/Rչ<2r  dpdU-FtpFu] Tjm=b-mgp—Tƴ"m.n&t %6>ӲXMm: 4@B",Po[#[knV -TdM1SaxUzĄoџ!m΂lǟٸXʣT'hc*mDfإaḏX#ʽ;qs&K ׯ:@HFCm#1m1pl( 8?#w>ۮʀzκu{+fKFXun١ KHuFx, [XSq*ii K٨M ʅg YX\]0Orɩ؄alIcH($5 *E~% \sJ 7ݹT jѝN {mY涺lVqS>}͐۩UⰨJ$GZcQ&9Eb* quS`=ɭ=PfWօ B15SHμ`i<򱽱+ #R^2dH՝B]^l|>U=0ΐ][=4* ]jxѰЬQ FѕElG~%(J|-|TZڹE1Wǯsq{0!<.E.=Z(S<<x{7[wDDmpwG^h $:^kGזsc6--`f}hOs^'<0|lS<Jal~kSRͭ]͝2~Ȯa$4GWteH us ^T/->hz=̜8Kh25k34|] y.ǧqN/v\_B~0{{8(Ή᠅u\Uw:8d|vuʹn#MڻL!Ɖ͗b8bFW`މhxeH\_b)v}a2.l>LSݵc q` p2!hV°nMODHucL%=A sYQ4ӡUlEp7rRnwocFAQEɯ :й$[i`>#TqyNP\o C¡™j#}O8' UMo8*ZktDeHaOk('앑^е=!_mdҀϧmG#C%n1U;k& wẌDi}J*Tv(#n"A&<-:Ѐz,0~"jIqG1 >SzgJU5t cjuF {(@$+u޹(H@mU} G8M:J͚5̐wz#B18bt'*?6oؒgAXaZIWⵙ4GP6zmT51 >߲5 1l~F]mjgf K.FvaW5qS2RaZ5c9-hQb: SA>Y^uR%1#\#|!9,kF*V!-& # ~v 5(ȿ-Z &&#II@+˱"{至ALA|]<#25K#HӨ18 K˾&fdz֠vQ%ks \ㇷnx}78~|elTa?5@o)/M3v@YlY-Kʺg&? @0vs}͚?0ЍBpW?pGjy~~՜3hn-z-I Luq >hì~>@z={A iȁ ؅ l?#PV غ0gT]rNI&$i3rlt4 kl>LB- iZZXg`#]BL fc(Qu8>uMAm[9gbp}ԯX~Š!۩w%iHMrqHoweFzBڸ%Pً, 줐gQlɍaљ^"|˰qqh(bLj{jթY⳰|Dҩ 1Ò!,Եfɞm@I.ąԽ 6i'ie=ju\~ ;Vs.0 4bNg&XpO@$NiEpqH7 t bl&@qX]> "2\!IJƁ bQ!-iiQ_4Fyzc7tP@1^|AI 8ӰpL|=Ddzfqt>E5r$SBd 2L{u(| T 4P67ОɴO/sO$ȱZɰw3KoXreUg2%ϑ; },q!9gK`9@n~[NCۿǖ=J@({)2juNCYP3yLC~e*/pe٢!`'kWAY y {RP/v'`+cM PIĀrzBΟ&1/l0\P s!mXW̸KOcQo޺Yhua/5kK5/ H|X8e@CS`20hx1 &^LN2 =8r" {V=5V>5rHj%+xJAG;|P6H$WX l (aXmqYvc:nв0_,20 I *}!{W]DSQ03lqFx'(wܘC^:p1%\50DJ˜,[>(ȑ5H {6?5D]LT)`n_w+:(6\HV/B&Iy +ȣKCayLgvt@)oKoi|B.N J *(5 /cQ Y" 2Fnz?~=Cx39w :5Xzw~ClaaYcM(*-ouN|ȸYNT#mTF%_n7VMFtY|鎳K8 0۰x̄vH{̟G y(JWO:: (Ztldn-xL 5exx2IV?"iQ8;酥*|49u[.>i[;Zv.Y81c;zVrRhRrn%әǓ!]VuyzRM|7}!Z9;w徰|P1ij::8>nYj*cz)=#Ŏ},MӘ`\ "u.ʃ;V,:D:]-O!9hT SJEbB*S AIK׏WF=ǫ^m8vĶK֐"g(iVʞWjJ?;,8&3I-[TGO"p`3ƥѪc4M"ص*meS4Xi~"p=hIXx:ȳ.S@RGs䮆 ӑ*[eh_Ux0NՇMATJDOIN ð7nدG^" zI4⬘ُsZ}]izCb9x> $ R2 +B b7ȪZ\J^hCA3x +Cpˈm:u X@~|D/N_D?,Zzx48 K)wuSCβ!9hgV&B`Gedgomt((Qz8XU>E%~uw8~Q^{6=2P{Ȉ@L2źYJF[zR9rx55ƀDmr{1G`Tt;AY>tA'qZ@[U[t:GEADA곱*޶ g9 Kt}#IKB86vB xw rk7'Q8 c1O?p ,XAIlZR}UϠQIApx)]<.y!@V :/ӌZ֖l_roV\_i x\u$݆1M} J>iH+XsWT1^sZ Eh'#r/ܜB4]|PBp`X6x‡}M髕@G'+R#!P%%V f`(l6D. 9@1^CJ]L83w$6qgٶYe>~R[|%sQƠmOlc~Ţh:zdlP|3`TgYЩK1.+ D蘉R|[HA0I O ߏ|⬛'1<9$Z#õ#9 ;v7{a:r=fo7MX:`Qf,YP:IYHTKEr^Xw6ǡ´u8/%" %>k$%ҡt;s1L.K`L.]/p cq𰯼_旣f8VʋGՔwl&Fu8w$*TʪNɴnlv/Ұ/ 9 eUL% o=Ձ,"1 vdוteOc q"M\x=J9k"fMR|v 1*L.i,ǹE 4sW*l7k 1{>:-iV(aKR*Q`d1y<ǟC.d|} [V{i^AV]Qy=afa-M ѨO`C"V&^tч.Ne(D5ɃJYQvIE RC#v\_J1E=! D\,:Ī =ؾ\`H^ PD[XF\$(X# .z~䎜:eAcC,Ȇom8 aoTU>>,۶)뙁h<+mhbg@9@*Ꜵ ca7,e6I%pKu?πdŜUkQ6Ѥ)ztE3&Q5rph!y7Q"!e"ݫ{Pb:ie`3DgySL,E~u:ﳱnx{[-1I,wON@w`R.o/0OUҜ4W[X|t4J Ff[ hzy)ÒKњIen%%‘os$t]("6{YCrF,*fWN=DMZa{5GEqsA+^˽Xλg|6C; [ѰAD3IҀLi?Ϫ?ذJӘ Զ_%4wc@M ׇALCN?Ҋ a= 9 9cӠ2uf?bwU#VaЬ uQa!@D"e4RIfL_4V&fcAV ee'y&*3_j*NqXԓ6TѽVsda iN;=(Fg48a 6JZ2ȿ:nNet: Zӱ"ኙ<Y’9 "u˿UCeȫ8bռ[ޞ7S+;0p]-\jKTZvHӃQQOyY;BM Pi(,y@x# OF?Ot149,i{[D7 MDGˋި{V=|g3ޡS r/9AѱFb=7%@ܬGsi #rh0obʥv @ZcCX#κjqF;b!pώ= FU4A9mI+mL-Uw+3tFJ_=|M!Ŷ>3˽VNKW ׀t|o^A%Oqz5ofeݘC--IN$+Kq~VeC4W)`yc5dNG?Sd8}4YwHϠkӥlrfqZxNkTsǏဈ)gpfa]~u]Eau.O A?Zc*bBZY B&gbp\?X˜ 5G&6K/ Nwoe#>mu1iL@ʼn5l}( T4EnId\J3YfϦ5d!Rz\Z@˺[@U {rK{6"3uk`h6;8.] -#Ov!n)$3"h'fy9ХXȄzuKmJC>G#}4׬nF۔e볏_Av0|{+XR:`%Z",y_z&aλ ˧Jq?ș$Qw;G][kZrxdp ($D]Z*f Bޔ) CϹ9 tI]C$kPn{y[j׼GKz&rjB-g^{jL͑xD4d#cj^n(22~c^"s. iQ]fM'SbWH9lѤ/V"Ֆ5I"*gj:}HGNCtutjֺ fks_̮{Ab$}dhv x~=3Qp p2?du 9莒8Bq;5h1Q_[K"293=\"k?ݵnڶ35g#8qUg^caӟ4T2#$C`f䱹yw:ּ&8vpD[}[1 ]* MMm]{7Fm!ӗjH Yڟtl8>%iׇkdʛ&+KJI&U^|̄ Iq9  XHnD_C+z}菬}Ű-6HG4yzz:c<5MZ$`[ՀB&ժI!UImd-Aj5?"Ҙ#wa svK/[VH$&AGHrfTBeu˻뤿Oʔ3RM 4?}_0QbSbbiM_5^PD eJ-v8tVyxΪf |Ҿu*>N%xaCNdDm {yBҨ ObT3ޤ +C9SObV=.2TL5v:XۺGl$9*=BF== 6K2^zCًU(t\dnvH/@:ʉy+[]5G+؄at1 FTm0u[#4M; %'UyO_|7hWkźB=2*tu"3[eS&+:TwN00g!dXjе$PmD!jK@IPmU/׈ldU"4mSJO~/Yc-A%08l2T=6p7 {O2eklSLc ÕkeeaoD_CڮY}TǝOaHmG3igd 2LxqcmB7־FR&KoM{;Mp-N-; 9 Ot u2괙c/_J.eOH8y m6u~g:¢?gr0/}VVaXJѮY)N6'$(賺%쥆Jy=3YdoPU`2{p_􅚶7VQcN{nh=QcS7 KM#{kPX#MQ=E9-b5Yhq܋tEj \!2)i):ܯ'P+' vxTk&agq*:_}ܥ ϑIʏYoc_C{Xo.b䫝g%C\wZeЩ~udH T+aM _Kgd, 愍#:L/%PfmᜥOP]!dzoH\־o2b2B2  ^OwߜEl|6:f'"HZTwϺdAoY<Y`͇#í kZ0N tsqйβwci& ./scQ h@7xklDŗWbaRbP6C0[wj͙El7[ػ(,*؈., tZYgRi }.o1˯;:|Yu6Z]~tPQdG~UJ8[qqȎ#{^g&AF9gֻK2},Iz=Cte9nH[#z> gy !3/&%Gφ٦ #en(9c 3# uN P:CQ`LRaL(EX&u[W#)2Oެ{hE2!H-K++p)d󸯓EmHQj .11=>`,qYkW0:fcwfF<xhZ4i$S?p3t3ӈ)-L#?yw2/a7/X+ Wci =H]]ei9͵(պC5I_>Tg#c(\U*D5;iucҖ SڊRb/hey߁C*J;컷e1ZdcJEaWB 07tEXLi9D, 2 >6αCa/FBچKV{3ؤIF͛\l!NTG|AR7AH:R }` S0C!"Tԧ; (@w-Eђyݗpif;(ݲmyT@-%(W]31yzϒZמ Vqn9˸i5=GpHڰ?<~O9]q_Q-:?9Jpz4@q[$oisTSu)lE++_OT%F }5<;bγ_\,H5Ӈ eˋ~u^"ph< AJOOtՍkE ;ًٜN^#v^> LSO/\hZiS 8,c<á0g#pc+Yq]ybGLp9>3Yki>oxipWae F2ہXSn?2 v9?G Y}VG+.\NR/FzRckΓUYi'/V~9VE+w+ZlR:~ *>/uG<ĪuH.;P=x j M53p퀃66QhhbR(* /;VqV㭨F%I`ξo'XKҞY=~m[ /mP1d]&VC}6N#Q_,j [1j QcxWg%v \Om)G<8{LPP!@@C֐c @դlJPA7L .ɥը;oPq05-hMr!\{hc!ݵ8S#:*Sw6}b`"3%b 'KZ*wΰ'75sԻl3T4jI -vW5>Aŵc여ٵt?˟n&[0H72dCdt+J\j]t%Qc2P&`c{ (nuDz} {j8 ;{] zžq35w'Wܹ}S1˗!-̶zZ# yJGC3UuAy܁NAs)eKe@Rvfa?VRX&fYӐ(z`8L"6IF /|͇Rw@A*p!( T+& ʜȃ3}VނF+\k-o 0"+?IZ;A#o _`oHTog@uwcsW_ ",#R?i_J9g}$8h&xm85bs3 m6kK>B/0xr?k֦G97{Ii \s'9]xwOLꂛ``@ #1AK9a;lGyyp3}y=s:v3Z1N `Bu}:/R"u$ L.$010͜i&cW-doh@s|q{6t" As& LU^7ۍ2>On1s#*o#ևt>1tgKʸ][0+m4twSk*!L,Z]b++ņ+`i=|2;Q0"ʯ'b( AWL85lZfUR$"RT+]I}lMC1 u=G|gM,^4AF{7U={iKwe+¿':q e*r0 Oa1'\ދEI:koY*mH7Ic4kUah2XD?Ʀ58\jsZxX$% `s+?Nkq!M5Ԯ]: _;GA\AD%e.XS^C,~~g+>p=룏J^SK4ek͸pvၢ؍)[P՟gZ !2$Hq A9tZH>ށ 2Lbz@Ud@FuK3PlU*U8xiYu%Ftގo}R*RƝ7vi>j%z7UoDbnu] RQcٺL6zx@ c}K- ,Y*Rpoh*+D6Vȼ, Ot[#G+nri߽Uv?jI pr]Ӽ"/5rDmo^ 'PVӥS 2* 2Sk kEC1VVUd&oW"| [ |]>likQVDqGn>> "Qm| );Ehi]]~XQ@{սt?/S֜=Nn 0}dXi1Ji*%p21/xA[[rX;Ԙ,[)wOX._R䏘  "U.c"fɄK K"A݊E%Qa7OR+=V珥7 ]ΊE͋eah9CcO+Y,=U#- ?bgRyI<Hj$5Tj,t>5OpAь(NZGAƩ6wqvW#FrT7*髑v3j̺RRvG@(o>-:3{j4ǜ׏ds@+6>T~Q!nÇ|YUĒ=+~O[ߞ̶IZ(6fLᢓݘc?; J³9UWNɲ)dskUTّˢ%a$!ooZRtU#/uh$ekcèy V؛+;R\#+tx >ߘc#Vx3}?Y"1G}*'ٸ߿Da5Bg\F|!nq Zg@$Gt,hs!m_e# \VD~ܭu:L6٘o|bZ1+mLw* N&""5p2C=zEA7&Œ&p~/¶(5t9wc36`ײEaO?Pb. y' :L}f{q.cm5b  *'vVmz01i*)c.#ͺ}rڪś;T,/n*ԓbV>yrp:ywY7`lQup5 J.Ig6G2`E}2q9xI(HkTYtדaG)J^Y)/Σ'ӴRjK*;U10gP>^~]]:Vno`n+.@*|zkiU:qjy h;a?`gi#AI4Z٧P#& Ve'%{̬eb'/ߠ@ ;P#5it*OZԙISV0/N *hz]8NSg6| 6,R2?e?Ky*~u]A"uX?^ [f5T-hea,c#EbXpk*0]RBRئ^rl݀sXjs]\ƍQe6iy-]es3#]YxZK3Xmnxoǟs1kI kR>e}YhI}t& hRu={*4i 4 Iz ˺=sTH|Q@s]uuVbZё|ZmJedm]#X+bd+%c=d-6xyݪ 5kMsFއ$'#禺Z֤i`6eGMC {{w³H5M]47wS(Ӗ_  K^H j݆;-V =/_.!B#aWOLcBm}j?u(qӇ'Īz/)87_ &OQs'O\Vi]p3cyЖfن/6KHyQҬ2S  {L PQS>2Rp3]gbyfg`{T :҄ aE M"Zn_ViѣX{%wKaY{{EcǬ _mkǮ\2JppwZ LlU` 4RM`;H ڀ1D4Kg7.\EUF"N݅uԗiROLi/^6=-&Y:dP@{$p9 . q7%WPbPC}Xʚ-. %AWT-t،}ӫtY2qg J/US*ANq;@9Tip?Q_c$H? ^O{]&m}&qsXו(s}l-VK(&~D~Tm\RO)I34EއW?瓳 *1$yW-GDKc A+kLAPa%:I]R|AVɮK&c ;(ȣ#xN})[QtY#&X>LBVװp a#l4'2+tD+ubE_æqU6ȶp:&0 V+`59ja§5UyJ7`u{lrf66Q'rGDμM>#X,6-|V9rccĦ,/r)Wh?*>+>X! Vһ1ɞ]1RO"ͪz,45Kd*P ұkBSbju֪ށ$.9A+8SE!7<48: $I-+};x r a5A~Gd9+m72m˄< N[Oq^5PP\FUֆgmÂOl'\3X4;nNs={U u3 _hcޗl;uPeS:T!?a2Y*aW}fknY-^b32p1Pdw#5fC#J;x_7@z8''~0-! ree{5C͟#GGg*׳Wٹ%qA~ Ks0Mmu}, 4=-E`u *+u;u p^(pY>$a*=&vL2J`Y LZҬOf?swH#'L ֛JzS o<ĝ^I`kDR߸aIۄ-" Џ%#r&F̬5"/LE`8_eM!j@y1kA:Ϋ@Ҳ,!5AEΟ3B^yߢNg].p#yYcdG&xh["gA)ꊒHwSܽd0y(*=a^+8A-P2Xu6J'`ʑ&P Iͷ7yDd_ Nڽ^ ~ ?몝WA$$_#{1512cy2hRTݼVk2a(U&_Se!Ϛ >7 æLQm r}HSTB ę4"G _9Q`lڝ}x!!^zƕ)d%Ͱ{J0r PH Oq+25حK-4HT{>12  mc="I%Vw4`,Kon + 4ns# ];Uh ggF&$Frx\Ylw m`$yG}Sܦc%BVoHrhU!n/֮'"(jwE[R}>,'~ 1z,-msnfwO̓r'n`LTy_޹I^`Z3; ԹLt;_Dq?m@z,9ԉE4[/Ir 4 /auwGf吂 &%; Hrw)^C|'ϙ$gi)**q( q cxKid+0vYVJVVzD4B&W,Ay!ێltUl=~&LrniXEC4kõ-YV +YRX *%Ç]jz2VhOIetso:sIlf2 ZTJ>]uNZW]r'W9 W`?[LSLӝmx1m/xzkȌ05<:SP!SgNTr;BDqXJwb~|5g8;mK49rvs#5fv7FjkSh 7[rإdy%xUQ .ca+7;ZQR!O,/cEHk='p_YKlT5Z )]ԝL<ᰪFT(m9kisÎ{BC^E~Vv*kyE/(sL0 !u~ĨB8s8ۧ0aw/xjmAgD 3Z@gRׂodAŶg}T&d!ۓEEG%y;rRea}Lo< V$GQ' ~*GDŽ`.aJF㛶ust [ktD;`Psm`}|#I0\ ҆W%=2NTUp " 8 0O4kK͚@X\QQ -M4Amwn\|݂8';ĄK ڂܲ&ݱJb$E80GR컈4"WUԱ]j=)/ӹ  mWV1M_m <>lhr Q31qR7GBN ]Yu6f؀@IY!{ٳ ;)B8y=d:+r><U9z֦{lg7PN!SYN>^!@$;wD AD46*+UL~w<8Je7 '1.-ø||i:7Bb_?W%y*+a+퓆:-'7閑 &^[) r!)W})`Cvex&IIXtLxf'2rRWq⧃Xi@ubi%cs`C xWEٸcw>i:vw4~ǻ8t2޼,>t˶O7Og"+N !H~C3 ?N\yȐ]?5m^XP[#$}.PۇODٳGŒ~蜘i}hyJkOtMLzx~+p2*dz:0v>=F ([Bak߼3iHn=7zax{b; чxf9[1Y>I8([5vQ3C$\C= <x5ՅĘ<1݄bŰ$M7~3r6Op bh`}xo]LbNMХQA}r "FrsT#ʚJcZKP,B/!CYgk:K$ ެF>,w^L!xÇm&\>’〤O%A“uv[>؝TuN4)>AY ^yg$^ :/]yd羘xufQF % &Xo5`Ҽ(%tVΣՒJUa݉wT(3(U`\5F1Ҫ?G`_c5?xh3VF. ; į]E2Wν?o?RdL{Υ8X=>rV ׺rWh𞋞/ud1,wď(}-;xf^<_?&$ԙ+8 [R1;y+M*CW kG/H& }VG8!vQV/wpg2ȇRҁS39YR}!=V^ 8P9cFe_ mՁ0ɵ-Mk@VUSDݜε5C#p#.0NػRb_.LOX< k=Wy8'&wJltLjjݹ))qތf)ىR&Fɰwqj W؍د$l 24?5>vVRןQ+>n-˶Z+6 Cwؚ".6Oպsܵ45\ &(Sm}c*h-] eݮVK%4OѕbQ퐑z6Kꮃ-5`譭4N1-*Z8=w2WNSY"iSC| @ef7&v B@>La nfO,*Ս1 }IYG˰Is30氯Yc%)~&=DhÑMB%'~į3[la%Q%8Fl9f&⫃ȉl*O'dh/uU+(1#,VrQkdgMAV|)X1+ 1lY7>r̦oݲGs:Dq+hا IK\x$;G}ҡ+:Ql1o0$GQ);w6x78 x|:wP=&,MwɱeT8M"ɩB EUL)q7CCH1ܨ58Ϸah~,> aC, Ebq]l- {o:xM)"원;.W"BE=ƜlSKIj\{-]<W6 ʭj6Њ6Xq fP_Kf9齌9 kߑ;i@!Hf *okIme:ȌmE O oi~PWʠ`SI$L!8GM 3c_WW)ZKO6f'Lg4U~dn`_i{ 9BVD9eNhɥ(wz6  Ee_O* gu{bixVv, $SR9L2&iwYn5Yts`+|?o2Jbmʕ{k`9i+ ]$=mf[K&=85wUsF*D oT)H>EеS| koh鄮dU7Z;ί@CeDqtlA*ǚNJ)>~3k@-fy, UB+#_5SHv՗]S~؎ղPMrS~ sư z۞] f:p&l_Q9x=o=$2:&N5r6uڧ?+<֨նЇk@ >c [ոlQ=_ʆ]bMqI+ZC6!)p~rߓCr  a@("DbByo|rbۆH\KH&C cNf|\fYKVǁ5vVBɓkF_8W\A*9+kb#aU TLy_*(S0ҴkbUU&R (CcT5af ό;Et~޷\ma.Kvy57 V? \1mt:^ԱPuBKşs / x|QP H'@6eūdšJNK-3>Hϸ"SjL~;Ju) 666ZLuo̥K2j*<"#JT8v\Հ [gmXܹgBKCP^:֠ N= }Gܞlc-\oW4B[GС *Fc 0!#Pld-/D_$ `owr+[0y A^f-/ Z~՟iwzTFNF8rDYLa%͞FTX= k1=I6}ǡ+~|:J@ĺgA:kwdlhbRndjhZ)Ds]Y+==r ;ִ೩׮j6ŽEi7gÐ3#p]2dڈdJ..::A3+goG}֩rt@=&7f?q=84DF+kE|UqU<q619}eH+3Dw"7[y6酒h~~D>{5?  ~$ŏ\UhʑuՕh3W(vUuyX[e8~AC 0{/o|GD0\cӍEV%g =Uț+,Dnr vg!;VE9PA9P9m*cY9 pv܆6.z*m[vkKGX^ơA7BlWlnRp: 8]MNZw/+$@Fοh1NF?GP\]do]}DRe.չŦh8Ic<!RD8fQ WlfS,KagL`o2iA9&/?|!NU%4N^lhIk6čHp xj>*ٍeh4T 򛡼lEA›ݨ~6M 6?(&PW49xnXl: QSS6?OWrXwWv` l k%ƀq?(,#RQ\1  Z] S˗]zHŔmAWZ{VO/~(J+َ2&7HeJԏ^7D8V3)uK{lT&ճ1m]7QO)kV:]I:"c({|YuHVRnX8qw y_ TCkMOpHupXljg ?r(pU|:ecSf[{ku_Ar&C\xscHWs> nDW2tz3Hhi7us ˾]͘n1>_*k9/(SE3zS>^;`>KK>ϮOԞ%DK Q7R%J0Ԕd/gש^248XFֺ.o݄Lޡ>[UV)q)=[,ym-ӈ?8_M`z}{8"W6X&hi{l4RR(ǽ ݩ@O!6LꞱ_SيMg[` C x_p-Yqb{'44d( Uw8 rh t tE*uScj8ή=~zGU8Igm(hXTN7@E:0Y[(Mہ`D"然 u z`}a>v[5m|ʽ$_d lR%i_g 1(g]3Gn&>/(2E1' Frv4SzYXMX kmğ jMjٜXelpǙ̓Ab)xxTM3_FHz+"DOWV‡u=xcޗ̈́2^׆,?pcQo,,] %ζBd') B'M ~?e zbc`Nxjv3?D#W3Zè_ځ,|إ&7} H1,aĽvO6d1s˴ rp:%p1~rvC0oϥ˃ϫ|#p VQD9o}Ln8;4x&]rI~gE_9KK w Idpw+w<'5嚪BiWSLEN\֣B .Fl9g;C6Ό2!$ [Bvܪ=]%ri'3H<&KQ{Vh[k 1 >\ҥf}{,~u5glR`c2_lO*͐bآsb%x nA$ v?ޫIwH3toan,k(a)t5ްE'_e45]ˈ3`\pfH!U]NNp'}L3tytfrsyT&*'} Ox鮙ON{ F,Q'm3 W+-Jckl{/WP~|j[eJtS?"[ pZMX<LU@P@dhobpu|tC'M B@#H WEi) !_ IvD̙xAd7^ݡ>k6Қ? R?kOFWj,= (מae2dh;eW!!+.?i'y lkaְaSSK@I_ [ @R~zoT8:$[e|evݦ:%*`8($ ,`ڈ)f _uU7ɱMw%X#j\$ar"r_VizP3ǟ_*MN\*wA\)ƲuwPsZ!)7G`̄9 #ECVM>)nld[NIi3]/Nwfd(a7={[@Td<{/Q{LHcnH  ?;C+7 c@w$3˵gt!+k7dV0h @ =lH:/VraE(h.QxFȤ;cHD,>Neu6,!3WGun\ FI)M]8Bt/Uf*JR^UWd${a=JRA^CZGzB14Bshzvw @~4 Z,_=!xG-wWȉZovynaBz6Y0M~{i4gOrBEqch,ڧiy + ~{6φ$^*KY̸l6bcƉal b]]rغF%OiS=R~X5.ypb9D*$D3o{a|[~Q؈ y}%m.5*yo_ "|w8g'e%&,I/2O146K`fNI֨<>eb @,i!QS'w8ᆏ`ږZ r@H,QwthItlAINTeSg0ěBOF+mhKF@pU :ȜhȾCuG0lC8I96l\k I;$; #yeBr*W쥣rr m<^4gsEv#HV(kJ7V ({h5 ;aNdx8$WglP#p50 4!ƒ܆ [aO/,f[S𾷅{:-.8/-o~3I?(^1P2![sdxA 2YRѓDz`umB"C"HG4mGh{4ޓ='6%E"&Dܷ5ӷW*k4Dw::k 6JG* HMK idy:o?ri G! 3)ï.״gk S-{wn#7s ߝ#ْt u]U=_TLß*mx@"ZŽd ok*U9:vK/_ m6oЋ?mZ޾Q޻;qi]l!ZUy8:@F< ?/X`aM"<_OVg'Z? }1S^GKg{Octl;&yX:zVsv:$[+G܈ՕB`Ϭ(|% sb/')M#rUG}pۤA8G0bYc׻^=Ct]imaD}z1i B=c:j*Dw֚ Y57պ]y)/;+]"-Xh }6r 88! (MZ'2eIV^u:u) kc!CQ{OLy#ɽ#˂\M9YZ=ݨkO )^°rzAxlHRCK&), ϱ59-wSnޛ/4^L?6$k}l:ZĈKˋjFJy%B&;K 93-HV\ۯ\v+x _f \[~zhA%lSV1\^"zBlrQy_ 38 k9EtgU0=9x8QfL5iɨ 0ӨcO RMKw$L%i5:~o"\ d5:VAC;n:% #d zpi?L z0BXY0bM Fn uRa:oڑ#ms٢ 088CKq7, j}>% Y9}=!hA hR_L&uܯ5$>i$b^XQūr]Q0:_#-X4{G=//yOj^%SB":!@8CɡT\q",-(ۿ+|*F "iaԚ@gH\G?wtrmtx|M]]p.8]z+4 v<@eq'>v}JՙK\'خh~%b*"L bOK) +}BhxO+7Ekջ]B3$ۚa?c6&I)622H26;Z5O3(sʒ,p#G5@#5kyya#GF?nH:y5%QO]kCij9!+[ ˢkڷ6.OmrGC]ϩ$ ~K{?_#x2NzpEX%ӇF yhjD|46U5k!YsbԶ?FZȘu ?]-1oMgMG*{RZ0:]eeЁrI3|@{yTDб:L`^ .XWcW~QG}#XntYIRv V Nkݍ9@ISF {&tڵelێVrFƊ_kq&>t]I.xDʧ τ0u:8݉zHM{KBQNmNbJyREIv̰hG1!T|Br] !_q4"ͳS2Z`x&2d(c$̫ DO?^^شuPPG&N@mn$4]L|M󐚚#:l'ޝ3  rnD괆K( O/"GjHI\+j5YckzrjκgֻJpY~cH,kՅOZ@L<2`ᢈ%ĠM<+"dQ7tk?.gquv'C :\r"e/e<#쵒B/9U{RLH,U*\EɭRkk*cL>}@hYɘ3~ta +ſpOd`# r؇S|M49Vo̹Y|F`A5KTV!52n-9j>Zb.v(Q;LoLAٖ,uehgtG3*q+ Hu=ziʒ'V-A!`7-ܶ NG 'Fl#nյN=V#b/gid5w/Fuc "Z(TxNuZQΑpmIT 2?YxԮ#؆GN5ZBLɹ>hPڔ <q|&~/A̦Mꢋ-Äz]Lg_['~q4Gz#j^?4 l?k͟n-,AeX޽R0RDuptϳ]ݐkF QتAd%Br0(!*]_p5:~]`$;L VUg(>O[@ s1Rher>Ѐ^EUz@ %.َt>JEZTD\u74Df4Z)nJ 1yi% A4 WS K 3&fsX>2Q|ws.hz+Eްs"reoi2/9̈́:QKAfߒc突H6"\ESF$y`QT N3CeůW Ƣ7ҍ%H!ށY6 j -JK *7)F|(VXa|3oݷP h1P lFF3)-LoJ^E%-$hywJN{~mZmߣ3w'FUoPSy"l(<>׎<;9r6lϦ)'m%^$ 7T)vG8UvBorr͚B+Q!(!a2i[G!9#.?zhj]) %YV$aa״͎,a9y*`d[HRTrE(wp)f3@%*{y_|暠p&G^+)BwӄZȁ2t ;q1USKZG5VmL(I) P}۹%kIdJ21JKun/k6*r<^ Y+f/k-Aĥ2b)ZBGpk. Dp}TK,L;LïˢHt0v0>Q?}1Rx$$6f.@|`FFZs%HƬǁM3J0gfGs+}L]ȫp^O4|p+)tg$X}̑R&VAֿ֘Y V2NFMX2n̄Y(s[mOo*盨m$!176 #-6δI񭻦%ը;eQnh\uaw?cw'5\EtOpͫ5MؠfϽ#槹ȲPsYbrɦaMM{F\evYϥ9z;Z$?r ۡWɟV'(^#RINzԤLzk"- /!QŇ+vI|-TD {˫[SP5T W ;nscPuk!brr0+֪ mѤ;K45zWg))g%|dzȽ]Z# Z[[p6M%z"-U!q|*DzN6t@f2O9TIu@?:^+I6*ߙՎܤgv:^2t;㱦eIȼ*0 nS7|f)i =pA]NL.4[ nNfR21%nJBDJ) ǭ$CujjkK=C9&\=$Q%6č B CA:k{I`)_0t11`H6HzOϰ똢@'}gV)V4-{Rs*;ghC~# Ps! B 'W5IQ탸Ȩc!'zҐ ~`XٖmHH^_hDflDٸKNF1o! ~.RF%fAqt )ew?J\AM2hU=8B /7U.p&P?hhS5%m?Կ◔-v0aY+!1r5ػ௃y@C c(Uj gBV׀Ky}ᗄ%"3!'(AJ&q!^j..)oCr@3nmc5Y?ni1&ȞwtȆ<|iת* 5U9/ jWU9~18|߁Re׼?"VvS_RRǮL*akg1\'>@r)|&f(ݰ\M6X,X6I%ܓNHAxcSPҢxbsKEQȽgxęQz^\%vSRX,Ӹ@"DxNټE,>KR"22p襳byɞeF+J^u£z#X(sH:Nmq t6DJo.Ľ:Er9^yMgJחm ɶQ#%?np\މBinE< 8 0>i;s37m= l3 ]Řײt@Vt'o*POgV:{ƄtV[F'w{1 'i2'ITkŮ\Ui_cK.~,)n D3!qLb9^_wR+9O[@:\IEeV-Sqlق U4sr45I[^F*iЖỷ "@Xi8VdRdz:=Br&x j3y ݡPLEd=te|5h (772 c=pT47Z2g9CmEлB1.FJ#TB qϐ3̜'5y!TPpxF88(9~ty8O{5KϾLO .Zy&e _U Ct=ҏ1>?ȥl=X&d熸@oޞ7OuE=QU#bc(k\p;}&Π]kXhoxU="F@gPӇV^ 5 u2;#jz'AϞ53[=,sK\~@RQD&Ggviu& o2('sd&h`UsYT-M*K(_m~(xo)sI{^x'pOz5yT^=۵AlʙjJ*>_}|b-]h [G(&>{6*6eoj=pB)E~7%M|_Tw]*#vwo &>r٨zU*f1t /D ƉC[3{Mt$4ʉt%5qtѵ=SZ\N)DHt2sw]P+mz˪rg_J[oR|Eβ

`/jTHjGNBAҠȢ|jv9ܽ7d HUAU>0S B'/u%3b<QA45Ds.u""%y%h7[`b)XIWDvQZ&Qy GGirJ4"@Fy`di/bsL{b_CJ͘Y_Pio4]2u앿8aWƨ ϛ?+B62!q aZ?K]H0+L\[m՘w wڬSu#P- M[.xIW1uc/Y0:& *]3KI"؛J/(f5P1cɁcи; 1sr$-߈s5zWo@9 du`2xQ{k^}{`% A@0@zHZhIu^lzƲ f.I2}Kp"3ap ,x6S߯^r€8q#*i;)~.3SתW_uo-]dЃoR1=csIBIkcu-~؇#10efWgGز-6h*}JE@[Bo!}p'4 vel0 u2ߦoOZLΣũߞp m@o^uC p+#>]܅0:lJffs?͑-&G;8h{Q.`J8 {/Eb8$M$@1-ɃyiȡǬ5Qv8V(QawAGt۟D"5A׃,Ru}BʍaA:^.4aiGpȇۦvW&9SMj߻[spg751wO_Ò.-as t;W-MMRO![ -1?+XDXyIeM _dE h@\zowЈbi^]\QU銓5HFXY5ʀ@ͮ}6f28YꋬӳUKUZKi2Rb_]IJf X6,0P~>9iCb^)*Ȇd1Hf{JG|>cf*$պ43dƎ6%t>~N R xj<.eHJIEnj[ኊ.nձmaffMЙaPx]r'6?=de̢7g֣S 4npT6oSTc?FZ S0W<ּ8$%s*q8'ih #gtQ_<~ֹ<"xCؒW=&`UC_! Y4Q'-x =K!F O53R˩TpVk%)MDKv_0TO"^vH>l; ǂ5SIUy/AddA(J墿HɛdSLϸ<&-,l(yz""?@gOȧk\iuW#X'⦤kkѨߩLc<څ"!IJ.aIi3Ci=I)Emp*ľG)-Q4Õ1\7[-0;pq7!P{}O2 pvtT#}2p3d2+oSX$N(&g)`VPCE- fRn RO^YxnI/ڐ=mC0<(ioUM|,k0u%?{KT/ ;zTĮM3jF`ziJ6Τ)G6 b灊ޡ~7psxhOt;O7pxs'ЈV#1.Fqx& ]qti{P %-9-c= dIE͞g6hΏ ONlJ c4E9"΅Sk>W!9;gAv@U;"[x&g (Xzg]ːn p߻҅@r *) `.ڤ7.@zbVeHR8gMh:h' QQNeAN0`ܜ+n4E% 62jrJ]Ӭ~sӌS#[\Y'*\'YQ/SCɢF6<>wA Bg wA%'Oy<@vG\F14Z34o;UNF> hr)lba}gYP LJsb>;-T ~Urp +eh:2܍ qsQ6A  O 'jBTad8hY~+ռ5n$y5 ?BF .ڋ籞>~ɖ?ƣZov{otPnѡeH$AzXYcjF z-Qs,+^0/1+uZa @#Eг5&^mW[2}l㛇iyХ|\ ڟqӊ֦F*;N~cal$ͬ G^ 땇R^orLU˅fmGuR0U@-΋,ݿCRŲܮ^J􉳰h" ӏf;̒HioOtË;,=%t ofS55F}x c/e̋卍F%U10g_94"yUAeg|=GjYxVM1f',Nþ2 ]mQxt,N(3\.E'̗Az:'Q"H{ez+̔(-O 'oFvObn:4 o?M0UrFkR!j`J a_\va#Ė@luo(G ү!_ZBF KV@ y*^[Ҁ6o2E4Dzac'*J!xjUCV#ۮG[S]PiQ>\'t񎟲Urzlu#1yڪ45I*ˊ"B*Ȍsl4Bch;32,y9%[5Wagie ~Bn2|vd̲&C*7q 1iT=,ȈX4$=4k›7X.*BPHȜ1FO*!@KسʊD?og赘xIf.iБ 0>~qI2&7u'/.[B.t4b=ƈE'PUIZ gZXHoWO:B`VE|@hS dxWi?_3}vT5hg]ST~KCJe8xJ aSɇNa a}JАFcPY ?8}^ tjWRC]{^<6Ű#{\}V7bTlyUÇL`SRvY Ay;ތ /|썛"sQJ?[x'2.~0 yv@% ɣ`|hEUbr!CpoCF! 7M!'l/!T)&Jǁ0EOOB,H.m OWʆ+,P:}͚-a>w l3mD; #xY?(`eAc2M "xOƤmE":TXgs٬2dsW?gr@$L$L:tN̈́rʼ׀Pdq\&t=@с2UJ ֿe t'mݜ\ϸ 80RA6d#H-gw3_g:? x)/ҽ`(^_M[>dy@|6Q؏b!TknwnS 'vMc,TtQ̞NC<0L[cTO=b:nЎMm'1\.z86]=XTQ%f+TɎ\J8J$VС)ido&`|}[J{xR^\T#6U\N.$ն_~E+u`YxA+!z$o;Cǵ&%J;#T ɛ6R3FvW)u 7ŜQՃz\Jr>*v&^#L+ʵec&2yƿH(U`у^{/lgEvXwc@.$=4/plA,fɁٌ T+ :L_ w~-Vk{ -XP*,Gs\lIڰ˘ " X O:Ly¤KtRgs6ke54滥oPz`[WcşM }WsISO4Jr0ԜMFkt%K6ҥB jbh0wB(s*W c16Z ,EbDPSmb(c"o.ȓlܓ#8~%GE\"LK@f˓Hm P ga}]we~P S#L7nL^Bx̺i5k'kUcԍٰlNT :x$P<ҍ2;1}> [pܦ:~rra8$}<φIta:]QST[rup_=M1k29 ?Jm { о8ș/'ЄVɻ`iOmͭ>" NXδw@>`D@,l21 _|h-J254T?@EqhBEA`8rY)*]@⁁O(q[@lj/;~eO, DdxɷꆐK묙s Yh~n̩!wm?%]P$PPBˆО>pKԱ60Zdw raex#J˞,XtռMйVa?\S]Y)R~ ?Gp`TTR}ܜRdF)]3Kj˸nl 8{Xqx=TLІl`~bo} upY3x$ %UL]qϔ;FXLeEU暳~R]6E\ldVSW%oEA\-o/@[7yZ34KnH ^rOI$2V]8m3,%ʏ(4I~f}h]ALw+nFi)Sd3?$BoX)F33qr;} Nv&$Whn-ڶ&?pC7`FoEKP8NCf^~l>KjQ:bHM5BXodsOO‹\!"!@X!Tg9B(̼f1QWR/]yTsR!) 7Š1Otmc m%_ Y[=+^D}Eޗgaɇۼ0G!tk] wo$WݳeINƉY? 1!5]Yr9Jԭ :"cft#S2 =Sn7,8WnȦ2]T`?ҷ>Z@Ht>zv>ȉoM`l|[lP:-,rEeg!\&ktC%1.#zcNjԥA4lJa?wY~wqRR$@q_囮5Kaɧea#֚b!96`>}23,ìWfu?@d;$?!<걜{D0>OkFLSKby͸ OARԦ`#4ktv3D?IDK-lׯC.mN5R2, 3C 5EAF&gVn4[YQ-N>Ib6| \ {![NV~iVHZ*3a,b ['-S_ƬljT\:Py_MP Lx 4u>m) 2jp"*R6Ьb[QZkK'v7R[VNudQv1@aF y[Cc-dO ?- +x+AݚgIev:p"VrQw*3CvGZ7- !",n:CW, h㻰@h; >g;%N%9ErjkHgVNYǪFk*Ǚj {{Չps@K4IgHːy E/^sɶN݃ VC2ָ5NPCʡ"xɅ%)VM{,.-ܢw^b~|c Л,ΑLWgns[J8 aq {w~}H&^;~Rr0 ྷQA; LBH[1cqcu=7f0첞NA&YLi' $>Ȧ\@/.@#u%XSӀifB.II'ԃ;𗪏y¸U >L1 =f]k Sq#Z@\q !.13hw mun"S>B+Q'>Y?tbxq-S W9{S,i5ҽsR9<Yejcptâ癹yAQ`)MFA?:3bTWJ E"4pbo=O XTܐS[jljv]|O.qc3*.{@@Φ1ΑřUsWazw,:l1y޻ i4F~csL,Tq,5oQItXU~|cN[ %Zld#:k9tl"x ȡW):5w)v#&+% A!2'Y16Iܣ)(T-1ޣsYr߇)c&zF^.}௛VkJˈ=5J)=(݋?'w /ᣰzW;9zG鷅4lW{8Ru3tJbC*#<!Zm}~kU8ࠇn`)P~AI.oSрܷ&lP3a@Gp ^?pejCVug[QMoӅj., ]pN7F xfXoM }m\"-hQX=lɰRt݄ɶgpFj 8碈A޲B/?(NRURHM\Nxq}Ӝ,cg+`ی0݌%1,z` Y6"MINuRԸ}_2{kUu RYdh-.N:R^8jl怆[,\ zj=~6Fc쯉w4!sX-Ӿ[(,r7$H@%@QFv$e {rhCAGSZ8٭#>5@4.|sǛjjcF[E] Tʰ6_ 'xqHao cmЗ~DPj} Ftޠ; YyUcn`ǝ}*J%頍%H@CWyUe| 1Q:HQ6uLkW.~>J6a"ˢ*2Š> U[xQYOoXnz3o8⠍A3%>ALGuw٦)|^17Bxy ʘE8s+O4.Ba4U!%]L26Bȵ ӔulEBx*3:^ e۵.6~M!͒R ˒Vi]``3l=%D0Q wnpo'׀u*k,xGb-hlmUE<70|9JÈ|ēlX!?` wp g2f] c^d<}@(JU6f"hɦTdMOch޸C0SAc )^=]/ՕvQWacM''מpg%d 8vތ#>~JX$r%5N^wA//?.Lu3՘}O6]AzXtn`% Rs6<{d;8%F7/(:ܓA"YN@`ղ\!a ,bbD jAd7wsA7=5>˔Vg nk={=%}pТ^AFq/CH ^Z:QMyG}*Ĺkr8tZ?+\T"jj.jo 1Te䞑3(@ n*^kF(9b6,ɡ} @ ~%߀6::j m?/˅ 9HOs| 2j!DEcEmrU m р}9,HPest/IJF8S!f=#kȋrc #(/H.>1)LinpP. s&JBD"rZ G X3QV$/`d\)x  b?vKcfC^`od='ȵL&='T@eLC42]jF_X'5Xy04^bn Hmb=3by'r4p1Jru79U;$3l~̓$a!;RV沜x@cƁ+v12[ x  iY0PK,}hU|xuHĀJH=x RXˎP{Iq܎$› ;փRl)t0XȼnrD9@חmF$mVZp:#L,ITlpOwڇ4Š_CFZ3HxF'~*2V12vl_RfYVg Ӣ@ʋUM,9d^/kOfˣ&c|/s%Rѷx=FTxM7C5VRϯ>d9vi6t+b_1c+4~7SCUb.RU[ $7 rְ52l׎n@ F kT7yC1Z9LzF@ljK9qi!`gr>7EaɫΖPje5҇6yi߈V8GZos}i~;Շ`>;:m ᄾQ۽b!gNW>!ụ8na!C(IԍΧ,9nz"BUF5VQ.AbJscR/J^w.ʲu2.zQ k_*y#SזSv(n!{F,հ3vٴ``>HN$lB m4&j$||Wi(ҟnW3+74v#Pݜ$>k:`d*˪, ഑n;B 믹\61Q1+tÔϊb]~%Wgv93J= Ry2WO8z/a{ܜ"L.0%tֆMЖYxAIot)!$#g%$vTL;. q{ I-igo4lfv] .wݽI~f @hiIb$IJ׉snA&7w+/R ƄhKA-Fy`("ҏ8NZpsv@)v-N`}xpoBݩcHv/0ںNS{Y&86:F [. )']4s(Nq/SI7UC:Q9\eiR@, PJ]!j׏܃rɣQꮯEk""`^^ ə0x>ގWm+4;˥1,f[ V"`_=KX:X)# oS(y/>u5zMq av_wGN+}hNSʙlKHXSnE1v-]bBȖ0$E#Nqb_`XeCgj"&Z cutG.Ot VLsj\'6cw.p} VL<OY,ti:nYKuhcG-a*q|P!e{!Be #\x;>`o-uw4XMgy}O儔e>S2XܵM(䠲%3[2+G3aɽF^d)^Ȩ,H 4R<pzj 0(J'_bb;)VDI6²5<*4A⠖;fB2!v̕ߞM:MT޳F67>+O6$I&R6sh aS:EJo}u? T^;pC-jn*o6"dG\TQfo[0k[Xb$驕GeRju?+>VA/\*h56}tR D{oJE d7a!V+ج(}@9̿@c8S好 Оj;|3j?=\,O1oď: DHj{_ggT+VrQgg{f$n3VP%^0roJ%'}r<;R^a=VѠ>@j77ʌ|:Xx(O.*Rv%K%.EYᗓ``Fxo7Ifn&b欒yEis5kYZګh=5<8P]Sn݉RA[H8mN-u\K>u]+I.ȩ^.p4>a:+3-[,A[0Sk<ϊj+VDe o,RVFZp8}`H7Gec&Mpg[̣P>r\k_q (ӣd\QLS1jQ+XPQsigr뇼w?!)rX?IPy='SU}ZLJꆞ({TJ,34Ja` g_ 11v1KᑕnĹ*:cC4S{$5p9( # 12"1 HIOZ#0q9ݝYƋ16z~>@eKp3; IYV Vf藹/Uq+RICdVeW!Y`U6ۢBe.'TWdz+R&y=M=og0 [Kr|4꘯<UgO73Kn/U DZNpk .ɘFocޤƒBW|8ޚԝ*>e⸃Lb>܂;bm/AG,\c.&z04؀ eVZ=-ݥ7|V8 @4h"1d74T" 1a}W:Uw1ۘMPv'fa9GwʡYE9`3Gz(UĨ'-1!`<+8<`C'/LYxm͟CԊ1yJTzЎB+78O>M4@=VV @a/F^RqW%ɟqjUh lfr,0yXGA"*LEĠ0 bB]MϘ`ce-w^ߐlh=SC2? ZT}>8BOyo2$w p`ڬct=в A֢Q\SvEg݀hUFV&!?DB<[ TJX%qodXLJ*ל6 d ĸjm߸ofʡXt? _+j^J8g)!-v#69 2y .7fa[. ؝)~Gp"wj\ ק&ށVsƚՆg~pPH]4]0$ZL$c>;XLqeN㇗j DLN~%G/8I:(GPpv`V. 렜`M/n +r(gqȿm >F kRO?!M10wL,u[tƧ7V7j클!sҷ׻m_0v.6Ƥqu?rD>o{̰-Tx%D@ܾV@8ڎVۊq]s'탮IMAh3}%(zgި`X DP "hZ޿{A$*d!oPvV`HG77{5D;trw᧤4'Sp'근dw#=ujI e4gd|[Ɵ;C5mFU^;)kǴ *",̐B)@Bk959}h 1F)-\c*ϙ里V@F5M><]8NG2Up7е2n$- odZ[ZVȹ)Ϛ>WR(S\4X7 {DHG6.M>J^1n]ݷ+(bLYU?$7aޞq'Q!ARaЯ4~eu¨u\ qz*Ғ cвH%lD _߂c1;IXD:32\ϓ|͞& GنbF@ƨKG J^GdyL.BW*j?plV48֬b5^"IFn5FE}J-r|Q8DF M tP$/Wzq ƈ?}z(1d6eՆ' tuE/c.(n 7:>k|AW›(lI}X3< zHqޥ݆gb,Q(Lsn-4#HwƕXA^nbAc貆N"M|G^QوڳHcH}g 1]Ycɑ]r,x9m8.q ~G8ظ6K7Ž‰}&qp2+N(eH-\;oL 3cI֨ks>^mQ9K^Uv<:_5T ҕ>]`H_}碧$ፐ U(p>(%_B/*%As/oOBh_sQoq<3NF5&|VO4"?xڌnA4|W nH~{9t]g{4K&5[ěZ{ؖs‹66`1n3QbmnY> \~94zD6t<3)=M7|`I'(˟Jv~K_6ENEYmb /ͮ l/zl}ҾVc˗ōt-f|_p MMv<3͌Mn+h6ԞCK`ܠ|9 z)fgq(ˎmFOS&R T#dZg߮%L\XVl" jpBRvqsO7gVu3Lat`2R7|씑ho!j`^ [t-մ>JyXC~|Ř!Ybꍗ\Nm:Q_I6|x5@6Ҿ~UN_Slv=c, $ҋk iпծ5"!Dq[}$\m:Fğg뛛 + )F`L-${v=C 80cj͠1ᘙ/ s.kGD$-9 gV}$b mu'ՂM96γI7R08`yAkm u4oaIjHA`0%Bۈ:ˬ:M346멌y7q@yZ=Hz|IPQr^aw[x#+-ޔ7uih>q^g:.J 3j#p݃8D:kxf-&nag/YTa1[ņ\U5sm(3Xh E-O$_ U2-eof>g(V1 3$x qv ~ZR["/Pw_Mnyb.Uxidxm,};$g{UNJC*BD;ʧcDRm֘aCt D76f,R`p3EI(ʢT gD; b>?-ؾ&$ŦrUElPZľc)yL<`tQ@x܍5ĹYB=)CZmm"N'nyA:sU/O.IQu`r$8k#͟|h$uHkU:!=ԡR>P%h]@e#N 1;,ށШ?'YC?P}k8r oC* IFrRtSP9xT S7 o\_{x<ƉT5 &[^:s/RkQ-⒞?fITQ ;62oJ7'9 OHF$OɛIԋ6|+p覬8Ŀchh 5o0 ,\旜YA*rmv 8I!Ėʅg>+ RG "?2*,_N/l1i+)ܔb w*}lWƒ%eW|8QiTJY^jxn1Wq{hC^zra1,eUB'CM調7lztl}L! {܉WFNj',4۪TTC}p.Qj8 @ؓ^ĔWq C5ƀW^%GWxq¥:U||9B'siŴ Ԑ,4CB@LgGդ<ɥ~;U~Ηbk'_EͅQuްRlj6@c(ا-b~E jB+̆#rfGAx\~Fi @M@|}_8rd:C~oڶBnN^ es7Jou1`1ʖ#Alpd7F D4G<޾Ƣjmz CBEs>3ly DrxEgI%OgWJHQ!lY%7] +qs|![l[ң}ǵK.nz'QG$U.M s1  F'fK/W2FtNq*)ߩv%|6d=n*;eӑs4NaΕ5#K,8t9s?ADD|I!L&- \^Y!~Hz0bO9F0^6GM eMmkmTS_ }顦RY%:D80R$^Pc9Z(QuˇCrb %uoݪpdD<$`=叠T]5Ʉ?c#RPP3&} f?Ye(ݤ3_L@y.Gq[I9twd[zL;Ɨ}?V;%Ggԍ47e|N}ӧO pz!StkBR|^aL63آ8cqmr s^6KFkJ/FN%.Y䠤{"N ġL+Bm7x2l.ͬu @ƘtE$R +Mpmoe(T?P'{>L唨"_ J1cU'! -CV(+xش؁5SUi?d >Fܶ2%ۺc%ni2u^Z ]wXMig/5*͵G(4\&XS =^ngdf`TyL%ޒ`αZ˿s YbNj$UmMpPg0x FNvWq ;hjU%e[e pEa5iGbhA pL%<=ͨR;˛DIl7D6X1S\2+Lʠ(TjNыطJYt@k]kH -e_aϸ< j5ֻ \@|]r]*?^cA%nEUqPKH& p$Kٓi߅6෿}:-~.hBUΤ2eV}c &kiDo0BQbx265#4_Ȥ) .ըSn]0E9vv.R:, s5uzkj-ۮNAÔN $m~  6_FynTзQnu9'B8IMo*ru> >sh,T@|cIԉM'_t:j" |9(+rjmDbL\yӆO#<5gf"oXᦊG7\P[ mn!I35B/ R1%U& hv^$s賥kM~|=7a]%mtHJ͟2@HQA,GЛ5)|O%` \/"%%hްVS4 B]r@@q5Gˢ,l} Q\d‘׃#p )>.YPͫvMﮄtKҒQ{$bI$+{9Vr$<,\w7h?:P13SF&7`0 Ө()YkU5X)&+ Ftj=eDm偽" N`DQ*L^ ].T #.ucGk*$_gXLf<>\OwlX`~XST 7cW/5Xe6۞;Pה $d0k#_{[2fspJN1m/Wߎ%JgsIЂlY&ksq4ZUWf"D97t'|: G{bR-d|.i j!ߵrT@>V)72dHQN%: "-ț(ڠ DcMِ[%*[ZZ,'|N\ F&t:$n) !JA_=sQz`X襋q0 .k9O/;g8|}z[hv+"˦ZFbҳEcc\LV>|zl62MZ9(*G֜DN<)fwRnL5:0oo_20p: Ǻb+h }7;_cUӸ0gz=+D4VsttUc'l i& '/_2ɆjE#_S=v=WŜ yH@xE z0B(59?*@5Ht`x[Q$v9?RwAg6 TOj{K7MUVy\/t` Ό'00&qN Z5WhI>,X2vp*{ Xc+ jX3nk ``U{%޽t9.N 1@ЙOxSrY+uP'mITu)򚯫kPc Y½ D󕢸`H>_\GY蛌N{|ژ]Q$Y ?¬I{!p~ |6]21!.-zB|:uG* 9ŸEqMH7TmبO-߿l]j"_b>뵸S}8x2)Z -*&JH=D(Խ[;DW{v2R RW_̷NԱ8ϥכS|?+Z-h8 F41EaaF?ٵw>d*t1pըNF"? &xD>T:sARP|Q*vk9T;~Za15ć$Rކ8N2xiLfR &p(mo?}(ʀylR.R1m1Ҙ4@+SoQQ I (@-R|;PX>MILCLe:Nq'~YFeҶl#GqhOe8iоKYb=XJ>R@F lqH$N7qDT>o"L4x jEp ++CLEWCPt$q]-2u8fFC}Nc쐨yFI|H|#gڻvҫQZFs&D zmV\eIY$8hSjH3Sd"v&XgrD+x<#{ W߲awQ]Wӑ#7 =i',D=36.qU*C02&AMn ^구 7O߭ڊ!|磹>պ 7T<*`:kY;WsaNcK(3nHZaL 7mP)ͼ5@| n~jCHTiqK/u$ ,u+$K\\"Qt0'忮bi$r˙$p=ӘM, *V$ XAr%?3jS3|E@B9AG~kl|?-ܤ2JZ7|+fmLA*hs |p[ LTڡÜl$ S89R ħK'B5<&68"(yːbҹZk*#7s~Vg>\o 3Ȳ~3a~ӬME3ASjjgZjUo6|HJHx-z$e((@Os~3xf60^7WA@$vUYq)%vpe#d]v m^y/wNRq릠)L:4};kנ7y#>DU? u9Y\)%@×>{:SS3Jyqt!r6vqW0Q$"C݆]%. &M 65~~cY㣧0E!fʐ{9>:2x@Z1#َ{tL4kZ[ Xi q͂5nIuCv("͡;jï' #ｦӒYd PWb'Ӎ:R2WGsp̉Yd>Xg?,Q&^g13ͺçrCڔ b ?{)hEOp v%-{1Vs*a<=-wS4Iw.umb O4},W81glc9 տPurDqH%ٌdǼ4 )7rM6b4e]?n \s{ "<|:[vf{fDEt-rH%wwA :` $=ж":P)|iiς=ߎr> }ԧgٯ&^Le^!1,Kn<\X]ړg [L^+2BHy /"`Iq#Zv'K20H+ 7:p r}sjhG~=ڜYz?`\"+d <R]Զiv^Wln'yexiy9}MIm/!|*4wɀ 6~{fiu~ /2b(ѱף#=[<aXQy/ >We\[斨+@@=bYBb-P@Ag J7w=m6󎿓NJu>\KW4As{ڸsY2]+ A 9 *0L6/a䊬hfv<4VʨTG#SH3z1 Y&]66R ;kqRZW5)dved>+r}Zz]sF܍KFȴDͬeƈPva9X.sy*W֍56JG9lXc%Āq۱c'j?f2&땽 $fr '7,M{jgܗu_fP@d:8ZɱлۻcӒ6Fө~( 樨 )0 P}X`H$+ĞN䶩.9{;׫ZѠLGE=$\\w٘;cp>S\ѹ2Y" 4B :Hu0@{{/aV4.CI7{@B0@yǺ9^Ę뇊j7W jqDЁ$S1G>akzTE5B'Dž А9j57/LI *~##pnv2jύvZB`%jHGgd'rY6OtgW| ^jAH'a 0N]Or/zÅ %Ejnkc&\ΎsGV.Kr%d$б &R+Y;(i[FB2PP$7e@56:Y_lX'q\$3It$MTb4G#lZHM^-+BhAe#zrT?&L52sAF3 }A-[|ag֕CWӬƒ6-<bX@d Fy(SQ>)`-G97a`%A<`#SB #V쉃#?6RƋLMPHѠ""xS_Sv>DjE 6{'OmCl ,?VaxbLxeddt>ɓlYwY_c~lKԓP`, !x;i;ں"q=z˻GZ0Xpw?RzOǩ&h? qOLZ܉sF֌Z¤[98 m#Y1LG#Ȭ7@r%la{#zG[IvLy{$(gYd[tSi`6׮!?:HztSZWT.Ď{ X;udB]`%ߙ ]AB i_lR9c2솿v kcY즇SxJͲ짔3]wYU{&+}v6D܁|$PW$Cveπ*+.*ƭv|TQ&Ep(ImC0$Ϟ |&w#ߤݎ_7U);4|Tgԡw^r2cثDڛ_ФM%:QɅj'] Z zmm} -窥Ӯ1Tufn#t藦HgeH}?Sp=K4[?LM-=ɺSn <h* w=XTio釰[gxxK=uY$̫@bo+-̊,GG:~ڰ P= =eFeL2$((SYb HrB^!SR q+^Jٮ9 3 á釕L gb=^0ʈ"/A&HӭKeg,Y]4gپ-{ v5\ߜ;0| =X">Xhا nvz0]N: j|u'fMZГS iɏ_юPgfj <Z(%"AFS^rTu[]6|阮P :|B=_omrެnvxÝG-n^?5|dL~ Wyܿac [XJH\ŰƝ?lBL $r 7a3v;޾_dBSqȥrsVjuA=HT>;̀~?O705Ë4 35Gȭ_c։+ k4'T&C ϮCozQ>s{%.aS8R7)`UIJn% XvH9*q}+Dy}g,KSYnvi>-AZ61Z]>#MFzFJy0Iq>рj¼SieonȽڜ\ՕaMhp6F\kJYUbN`cQ0i7_>BF8X-LUE 2od8/9mojZwe9,Vu׎ SsHi˻HɿRG%o9:Zt;߯>cj U fNґf{t*n:إ7DM10dNb}Do {7v3uR}kr!ӬNe@wsk 7&a3,2Xn~9kQYqo_wibou#ѝy}<*6TÐ`g՟qS#aV(>?*,56ꜯ߳H׮M#ol.S3n`)Z`I=YԸo4/޹겿`t2Q \; qd\3YT.Q%q3(W;u&RzbC"\BK 4B:F5/A^ic6ϋ_$Y>x鋝;s6@`Sib7H eobKNd] "Ӈ6eO $Hs;vl}18ٿ+>XƛoqYF"A٫pSC3Ymޫ=΀kL Wi( [Ȩ.+Y0bЋe+ b֤>\gL:hçnzcEWeSԵ^ru9HgxPPt98f_+=T|'!UeٶGЩGZ}g, ɮs,uڐ~ͻ\=t\Yex#bgGD)~iYP$}! {1R\Xgz gBញ-cW)0rb!꿉#ēgVuq MijΘf}cÊ}[zq_waz3{[Ä.фv_)1buEᒕuSjEULSP  :.6VUR$lo{KA +̀Q~j[@T֒ݳ[86H!8AnluôƇf<GyZCH=5BIM eyéwX xi4C}Is%g9H>J X'|[]tC6CmMbhT]HmNT]p4)FyFSe"O1%'W 2Z{ }$Y>ڵE8<쇖{Ag,iLTN_w_&u e[5U5<5yG%FXal:-u^!U7QFVj(_EPua6yRKGL(M6~ pAl=&fmO] ]j&|~J=nf,iad2)a-T-~eL9WKK)/hP2eZaڢ44+-h%v$j'Q3o pYD]21Vꢴ83)8kxHU4z0PfmbrT$q19|n!sMGؓ2[pho*pQ)GsO"]S>o`Sh+8Ҫ-ҙWT Nߏ|GJ6"0>L42DV&06Fהe UbZ [MF-ތ@x<ﬗ4%gRg#HwҴ]?櫨Qnt +;Քq?ؿjķirf, FC"Gl/R9&L F֦SAPUG3ϲWYP3llk=޲㳀lx4'Dp{- kd>&+]Q'/ҦtpqpҚJ 0|ĭwWEPeI&"[4 in@0gtś^ pߒz(2VOVw/FV!9YCٷD68:H#\}ȼaxw#A`4"Jg D&\ i/)3PXtko{u/dmgzVsm|*90tkQ糺ncm&>eH&xځ0gl_m|V8>ì=V ?XGn)74= 6E'na.PpX*`SC}nQyP&zc24K4 aeBF Ec[u&(F'f}dxoKԚ\ n |mQ˦7=o9%ov&C梑>RhQE)QBW4Qjwda$mᲁ6s *m{b% zoў:fkV3'/oG!P_?}aI;J#|S&t/OR W);Pp;2I\,+${~]sN__|E^FcNޝE,yٶX DI yP]LrKy>-t"YT9W r=xq<-O&?~8>I8(1mfVQe *e%*>3`#_ 4C>\/J'm~R/iCS>J!:\(7nR8Aa9@mEu릻q2{:yޱRP2l j ~%1\X D)v@dLg%F^u7` \cmƁnīH]qwS6+p) n.~;ZAeBwR{ :J7e{wz2Plr]]x ^._*wע ǯTu$Wd$RS&1Uqʵ#h-}Ajz2jNnYgNDMj.Ň 3_ubڕ(5<*BNq4 nB9|nȔPV &ezZ]eufr=mWtdںc}bMEHGL&:S3?O#t .Y(: ѩXU~z)0B+pSȫ63b2^l\):TY&mlKC\;+Z&洤L\FoPg HPS8OFQ k +`buK=J- s,rqor;5v}]APӹvΉgpɒrazBpFW7{Ԯ͸}Ӽhc Z3W ' 5$ޖQg=-$}c;lGe5g?RoHf@ Fm*sߨх%w]g3A&䌥#iu4Wg0-@8A,VAc>~ 8O.PxSuqvf'Y IS48l' JvF i@ ٿ뒦ܨI7'cw2uGjքrCgWR[xTT`6gĴظԭ>.ʮgir@{޾Eb}tMdMW' ?f|T})SylvU L<Q5X>S\U(GN0!<2\ ~MW6.M78(:,4 o֡`{qYFȑ}ҋuFi;T5jՍ;JbSDmz7'mfia z}dW= B< >>ȀjTWɃ(G61KxLHon/.CQ`oL'-vR,z tn pqZԒ"A-gi|{ 6V12uq@ j2b)&.zΆD̷[nuYA3I˜!&Bb|DJ+%B+.nbnh<7]F7:H'M]:*"l&c@lH7${('А5HE9%2P=wj X J}崊QEzpPx@OxG狴sRJ\b""5u#3|>}hTiAmiLSӴ+yŵ C.4ȢK΀)!p>_;nxI'ժU 9֗;+Ҟ [* RqYRg::K懂;W@߉!8z@x:(Z-/&߲!q3_HR#|5n0TfAxIs<%84`,t?\iU&$hX}5m#]UxCG;Gg&t.W_h#SXwwv~<[5F@7S2v}̝eB:D-7Lq\ö{Fһ;hiq._lz_t>8qajMX.*d K4 L˦ aO8t閒6 z~\=X^X\^UzC 2Um;GX{VǙHQ:"?{Ut6荀[^JL)N1Uj\s'ZlĮ O牜z qFZ3$DmdFo4l6/PMc)T(b-yV|S\gevCGKL-T7v!yQ=zq gv?Ȓ2WwSI0rȍc(lN( I&دV5r>ÄZAh6>VsJ LC PX^=E6 &EبT (W H BBft#eQT}P>7qeXumY|2=exE9̅U*}nZE8l-\Bu޾}CЬK!m^#>G,0*m"d,ڦB<3cC&V"7B崦⥇,MNv>&r  /DS*>9SM,-!-Z⥅$Ezf\"4Q[VGmCcPb[0Ԣ 63:M-T 1B{H@N )9"~+MOɇI=̭eyrM?By,Οe嵍!b sX|S!09v.ÈŘ7"}\ Wn8-{1r X߷KeYH?q֔E!%epǭ]%hpI6c/xj@tjjbY]H^6v+U@7jmm aز='ze iYҨ.2: CjZ>X xśQ vuzZ,RlZg|IE[ȝ%J<9}Z|bC#M;Gr !;H50, ~P&֯e#|cxVˣlE}A#h&' ^kv5 dҨ2M?g>в s j?H7.vvS?nwh%cz1c"0YfnT.L~` 10;>T:CFΦdNPz9?B~\ð6Oс!o tPdZ#/Ӫ/~,폚+p+)kI;Xhw=+4ؾ#0d`sJm,b Uuf,gV bzǤ$Y3A14RO.P@bIՏr}ӟM,ܗ:F;t3a95䫌l%3EO=\< lo(!?֐Bnh/y;2* "14pbwys(wϩ. K| qO-1)r1 ؤ`T3}o;34 Hr!%lc= &CnK5$лs[;D3ctv<d&ϟ l-R)~2|PS;]y82^SoL PiKr%oG9ipKR(wf`HP \}%Y DgA]%;'%NjFd޽=-rfwQɯr+qxBcZ$'r!A=Q,q0jpR}SDC9yUt摷7]lxNa&u 7Ƚ2hg^9*TgOFάZXަ3-a|;+= BZceDb)-HLJ{XWt϶>U%$PVaԬjk; Gkɿ ñWA7xͦQK*џP(N|cO$IG2PѡQT.ؔn qMiLYlЏVl6`"M TH#0ٻ7pWx=ejl3@$+ =a UbnYoZ7l2KZXVj uڈl{QPj~ֈR sB%vY b=Z(6; uu!!/xͻ~Yp2CGѴ VrG97mr0i3E xHצ3+E73]Ȁ%\Iւ(5:ޙQ~A"u|9-Z (&|E38f`j؊@+zYӄՙں!a!Gr 8^ =|%YD~\,kPf]O Y_9 UxnoC",:q)Q,䦊ft]MiŠK,wA:SF3kGI"6HM|%ꐳ:*E ZnМ#tKRϨaba3(1"|0_ ,JU0D6NIS.kU4ٞͰjh>=v#E7t8Vƫ$JJ rh^\ƹqҹQۥ4´H$DSI&ڌEx_Ij1lJ|j{ϢƑF \u܌|݈ w "kgq% 07J΄&V;IWLv;fUFQF0 }: q!"ڿ]lp悳:|.l@1"<7`(¿Z V)J>xCt12FGiƟ>Qƒ_4v̯BU{im$h_˶%o\_YnK%-SYvʗXRy2dlf0v'7Հ~ eA[e(Of2]GՊpD ?Xj[#In%ӯ0q°MMpb`=E X_ϐwcjPx`#} 2~͍ Qعg+g)$u*e-W̊|BcO ;(/X9 bӼ4^_.XN@1W!_F`j J4&GPV. Ⱦ&ș.Ը$AL Wdcׯ4RPkëAjoC?j+@HRv*L$+c/Qx6,j-yv1U6R0%xs0#)K[-F+I|?#iqu,D[/ ] !p򱦙r7>xeyEMTKL -\rKc]"Vҗ6ճJYMAYdY;$)8oATb~ 9~w/? w?˒-HWO3PZ ('rxȁ pyQQhDe@u22}M>XyB뉴HY;Ij5n^enrݶqMe m KYN$Y- _z,n G)7{0)lč$ܨmeϛQ2v}(D׌L9B0H»Mr591ZN\z i|TCRY V- .FNQqqu3;ExC gѱ0 !os|6(\~8B v<ȎfY 'ܨ')~Ouzݢ@T-dw׫X-[kSDÝaZ$Ȩ3} 9;aCL*`Y_~!K ^|} |Ҕ?N+W§iH}+*̢=[Jpbt ̞V)fxZ<:~HXQ }||XHͬF@8L_ UIHG.=+/N$w)KBH` BR"(Pq_Çl#rނٹg[Lj s3R^T1Fvɍ y1NBjϑ 4i뛽H| wxgSkšY-Xqw]h:Bxl8(K+~/D"-ɗqi9nQ,TdKuN G;ÛXH?,ψmkT;pʄC'YxMc|eHNMCW*Eg6+.M'ߪ<hLBc۞*ϬA͋υR,0된R 75 Px=]HHH]gy:b'-;˜PT|8a9 _!p{rym60Df^*$7#:hvGQF M) ~z~dm[.6}&[3Š2MDɛ}Am(X`P?uMd$`{F50aŋ)u#%cW`ll375% xT ީZ(G)®)߄VTێ1$mON2jO a߫^*;12=$)_;#?p;sZ1=ؤ2DL`7WåW]#^Q*C4^6ЫfkD.euS@^%!27vM)Qg8%E,9zrPA Skc&Ayi]-iK=\Apvp}ekc fDum&|Seܺ1t5lO <cy೘"=?NCnj-r7$DUٮ.7C%$Blq|-#3 )H[rϑ}[9]І,'2UY<m.k^dKq7PUE4Y! Vm% UwNgUv0և"*5%]TE0B#-&z3N蓤G_K(c87徹ft9#oC7<֟6LY͚xVg.dO} 4hF! w٬'fR̐"H  _xoEӡV}3?dP:K+}y%@W X~tp@g#)Nf6s`|IS˖ \iSHyma#0چVUC.0|}υPmQ6-Xg'˴%ψ4 " `/:p:'KgNx> k@p\`j0FU G1'i>U|9a+gZU3{Y#foɮDH NJw"P2 2A]! Q2)Zk*:ba~dkX-~y{6J B̰֧frU/oZOE<ك[~G^xlSbc y/ MG;J^:Nt*s&\]W>q{0KN^.m3A+]x:kg 1'\61|WmвP-~dC/XaxiꔤrA9oϥ"qJj%N`*\Q>)s*r7׌)gchf[^: k{,>Q(I;CjqHS2c@qy*Qji(D5,]9q䍵[`}\RdLRɌ5b2lK2t2S)T&xN.&߂F73]3cRRrЦ|!`ka2S!"`0Š>E "GV5Q,`] ||cp~Y?Y0~Ѫ8|k]&P.m_֡43%Mv|?WD,S}@+RxP%Wykb\[OE)jDu,AvإcA؊ iRT Z$fW5,/!ϔ('x'n7V=vOI=gS䌫!z~=lqayT8nJ[fj>N:vX~[?3X18DZUJ>&ѷ`Ѐ8Tj'g@ 7o 3tkuq ߬+ޚ;w1߽$rЗqpix̨RŃtãĴVbO >,0kgZ d*o3y'QqE \twi$2=n̥ic_]Y1ܧC /:zhWpl'aMjԭgWjѮNvO S~^-2ʊBAb=u= OX~ giN,zr*!.SwC- 8I礟%`$vhQws->5' + ߊ^o87MZ;VW/Dp2OQ3PΪō]XǑ I#vΕFB0Az\R#'G E{B>mS:.)1/J޻8l8"r,cO vUU{MAH'P:C/cDllMc1u y ݩL)PĀCdMAZ?EQ6RU9ϑF"h}H΅d%m_n<.k[-uWSa_]SէdC'(S-p ep1?O ax+}ڱ\dݺfoqh f1b&qjm.B-EǨݰ"&jI>q7p{#Lɓ /)'~ˬbzQ-?rN֔NWdm bJڝl?̴I8$ŭҙJ.1偰=& ŨQ=Y"B,q4[X }뼅H5ʥo m0Ňa, p{y'퐛1d&K'Da F_NY~iLD+`^dA?K9 Bb4E#Hwsi !ҷ/~ H*KleBPVs u>YT=`cv7IREۢb,_>c8In^OC̳,M/}D!j4(bz)HG*#iuH|"로bk51;덭}K'iG"po$FPjP%xӂFSȳ\օGjP)da[Y#Nf_u2)~fU\AspVVud 06>4_-\M|%1^  8^̔M{MB7x_P~S9I04# ?Z5͑j[ ׹E[Q?z"b"oܯq*BI6GXO#n2\B$Oy~P4X24NU'~7&\Zw(A@s_,OFYR-}R;+(DLHهuЌˆcp![} yv3*YhPKYݣNzrݛ5-<_j70ijG1XXG{c uUVAi]u}Q0="ByPz0lVoJ3v^ڠ@8F('̢͞*'Y#L XT~~0sJQ+3 F;oPF'Q$64=Tcad ܌@nVzj)ڢs _պl"R ]rnk5yIR(Fvo<%3:u1e[-f9ˏ&K(?J$F䳟;'-Q,IMM>~;o"KVXcXAmr"$yo-!g%Xgtބ0t+Le= ൚BWPfVWsTefIk}44 A>Ɍ17(C>lQ.,9LjP1KIIJ>1k[ĊPp6(~ΒQf|ݣ]ŲjAh]s(<@IB*INMa)pf:BZWy[]׿j;%Bh<*u MVe h"Vgb31N4A]wx]2@/)"L$U;omD'hcgF̃пM@!V4W_DY^lUkY6C*pK}XPBQX$۠JeJJUr-U~WC$ RxUQETuɍ?v[!bZ;[I)Owt_MqDY+mO A-X2=6|aʭZ+ao"齼?}v_$K8v_҂\6MkJ3Ugmf#tݠ% O=Ӊvwd}eX¯(30Mwxy/ҙ-]^}cLv.7]s 7kP%XWk4%U?Qb1Ј<(5 3W|H5=s0$:w+{RX⺘}}wmaʯPךrʨ=lv( y1BF֕L<}WXW:E:K=E|<HE'v֜[Gj aXFl{qxaq2ՓDg u M>6$pB^+l**&WjG^نlgvu=(|ܞgJT=Hb&PM|YI^Z~;柬?1 %IR7 #KTA !D+R3#|.Y(:^4/hW%'a+脆=&)֨ lpͲI]Yisimv3lK#f1^ROD#WDO4 {cE!LP@|9nKv [t9<4)_ʧ[0@n/>)ME̖hf:[3A'U}EN`w4!=QLd.]A]x%e|<4cj/aD,{R6NKɏ/1'ՏZj*V{ xH o:WROkbO*כmM#$kE3枓 hHN.nbXvZ4m X'QtTŪUA!\鹿yNiA]T)a] ( hd.2Mc/ޒsWWߧ&`,۫}1Dtvvs)D.eE +M Ĉ=N)dtv32M%lmjxI}#oU- M7(fi`,П&AYub.]'JBG\ pA9#ɢ {$oe&^0xHNsȄn8G6+nWG+kqOI߳QO>!{ɲl\Qɯf<@R9 -XPrRb`E6O"gTAvk+gJnT=,+7VM~“2' p9I5*WنӮja䚹EDX+aEl\6<@S0&,K ϫ*t5$nRkn)Bg :HєId)5€֨;q(5UX)-54ŨvAF9)AJw7/TYU1Nuw[ /2̜/CF> (#S>Sb ݮxlR[\֓Gߍ6IEl(gj /fiXp⷏ʺ٘Qa̔Cr̡B,%E /~sAqQұ6xH|q1 DZW=?K}%үpC F n/p.eI^lS3o`>=m>wlLK _vx͸6'}lĿ6Y2Qtoɽ!2d͊,Vmޅ}/!\-N~EiEY6Qo\)+,C~^*8O#NYcF꜐,B>ȣط=sJ9#:q"JT|:a ք8?c Bs>Wjf2n+.jbBsF淑1oMJMk_`(ed-2ϝ ^-{Q^ AZQZ|7U- `u9l.o0 ߐxuA֎S{tn9&ߍ@w q#;sr m#c(J)w5B*g$Lܪj Akm$V`e@Xn$3Bӎ7 6m\6B}{[V5*ǔx=cHx_\F 8kGmeUQ._*VGZuNF/ٴ <^#".-.ӻ9)i>R+;pP  s1سâGbcy$#@뀈7Dt;T{L=b:1uz]g^@WR0^LFo{\JAr1q@\zbmm qr"4= # ;-C:/f>ofo{[*o[fa/& 煣p"Bt *.<؅<}H-p}UO _$4T{ˣ5 fK.=8jJ6,Kڜ*92Jˋ4^J_ٞ1Dzi $ ?+pQ|2{300"G|?$f,oJ?26.gi>UG) pʣ־ Dٚb! ͍}:n EWP}ƷuBEia0jɒ5ϯ:c¦UחόPy{-X0$;yqGs5ux؈Y]**7و nt^ @f0{4f[9 j(yEdžbBp2Nc~b|a\Dt>kc٩誾yrNzONՄ'Pc;3)ï_,f59h0^&A3XU)Z#f-DYS&lVʑ@q$ Z1/9e%TA2BBdQXjFQi C'c-hmK`i>"065 ^sbVvsG ȁ>*%02/5)4/hݽ'OdW\=9`~MU9[Ժ“ B-20z6A[xN6r6uEǦi9^εžh`7ܐܹk'#^֓=3:e7E[Jp7c! =5QPӧ2ҳUEr1uR3ıIS^>X ]KsӄDDN8E0me=yTub:4Cw^>< E)$Jv/]v AvgVuRNƯ_I̿4~7~TgxZ&c|T $t2rwn{ f)ү91<(a6ړ0 XvMW'YW[b@(FF0%VZ枰dz~:m"N)HibONP]PfEU?~CXE"'kßë{|ؽ7U>ЅkY;>63'YVwk΁dUo@[ԲoDGcOnn/bngY?99RbR4Fa~o߳QnfCoV߶AbN|ЕTòΧ!qoPdM#7)z~ivCM"oKi~Y<ivӡXć͉T,ypԓNz%{>U6|{0Bˑ0Ӻz )B{k@%O37 Hq[ C2SvSVb\Gx0jb|H 9oޟN }0T6U*vP>_Q>b$%|:-Ԫgk[9 f{=rbWb۲uU9zp;:tg3O:Ĝ@]@yy \Re4-xtpc:S#4vX!.7^4} 7(]cM荞jE; AWZICBm@wUeL,x~5Z 4bPe*?PcrPEد&{n5/Wby2SQ4@?w7xy6d6,[/HgN䙕Ea/2Xxj&Nod bHMk0tVKͫt6D?'!/Is@HQwgsbp8!XѰ49t霙a7}:%IՆ.1wV9S4~U$p*os8[ȋ=d0E?Wւ'&z+*K ^*UI.Ғ<-sS1TŻT ֜_'(n"Bm` Q|n?=>;͛Wΐ%OmX(WN+5mnWk\D}(' C*eLX,ָXt/)KsȗRweb:DEE<xn{諳>;42od"*|moo.Ѿ)x+R}q\0%#K wIDyN'ky c`Gw&3Lo)춿K6ϫM-oM!8 mdtgHajWD qZгCkk0{RJ|jn rcdN@ѣW9,uΨӕ1Yf.I:#mUiEʻdwcGk,ix0ܾ' L=7e|)$55#Ls0wMA(w*ɠk12^e"vuc]Rqx^ 8Wg<*IHv{kOƒ,:y5mu~r?:Qi. jKA07kI/ora_A:15()En^鎳eiX j=J@r 5U~啸(Z*fq@*EGXK7\U6;ӣ;#:OO5aXpT^ i/޺w{S5#VaL"n 3Y_WthYsPDf<^Au$A'oS⊞.>"T作N_" %ujkO2nTIJa啣so;ky+䠐gE=@Q,Pj wDh \@}brha-&o|Dx'XrlT rJtNF|=iEv7(<7ECOyBEm_0{fa~8nSۧ=9J>:\Qi'5]벢.Ƕnw}9uyvaM`TRK:`lX$Q7BO[O?G4bKLVwhG>n;;MI{Vkhg1ĢniJ"k=@hzpEme^Qm|8V:|ea6aK>ة ~ }ctj!v2}nGm~CdǑVG/W+b<ߐ2y@6+WՂCo4d~5}-j yōLՙٍ2wD#v7b !/eX;'F/ h@w_0}Uu1vg}$i&¯yN& w|*QoTHB4XM̶+ʮN9@#䠅am5TGѭ{gqCByx383`'Aa9mKb*kOb]18~_Yp~]'Mys'"Ra661[gu02 h".*NW (ZI_f[n`"$YC76[?&_-<45ujsIgRQL<̍S!? ю/D#/{2[@H[bqݕov] M=튱g㭗 ~ܐⓧ-Y KOR- r+GQ[bQqL-`7r< qtaF b7u‹fͷ6A]õ76M0[95bZ(Sc_a\ ŢL=ⶩu=hHy=gY2œiVb( JT{GyR,^^/Jظ&[aH4BMMKʻd=@q!^b;/:/(U:iz=kvfYZLBEX ;ğrm;`afi,1,tC*w-AJ]C* 'K3h+TbP5<ŚCCg`7 T$wX9UF\`S]@1X"1|l黥k}ܲ7}UpI>5 mEc2g&mfAq%[z% Ry0$0$&U˃~K6lh(rVλM2qˉE)Bk`HzO^*JJbЖE#6i9>aK] fPwwrU:ɳO x<%+!]E)Cϝ턥'e߷^W1SȍS2+5<O'p$y⨷~w|<\AwiumCS9 k`*\H+^oyт.?ճ1ښ1]S3~$ݭYi|! hn d;[04T_""Ӣ:[`';0~6L+n"()U d p'׿[!",d9)W^ct"Z'J&)~vWm`bWHDZ5 SfW'&NmgC@_ЂqϢ * ]"AK!^|HjbSyY]lKTT8T'-UܧSL~7f𒊑xJaO-ְ;Wׁȣ(8R)=֓|7]C :ͮ[7@QT:XGw'tHS3])hpmzdȔ;?KO!4v%CQUh[ ElMy{nA 5{!s/}_ЪXBK}.^>7a:ԁ_"Xbs3>(Q!tS&9͡iy`'H] h|ޛs2/)B9-]RPq`sf$W6vYoG׶Hix`c5:U#O?o ۖx?ɔZ[<>&ŵK> ;Ņl#SԄ]DII2!,;/>B4+CK>_[筓'v<2V(0L3?k..h)0Ycì`v{OE><3s2!/s]EShNGD-mОs+6q`"}rB?X6>Lz2 ,4d eͶ/ԣ;-**4Ȍe6N LЇf{UJ{I$+Ѱ7İTF#gl2.z{jb:Ycs#Ė1ym}m)"  YZ