sssd-ad-2.6.1-2.el8 >  A aBU]X)!;[On- :=0PpP'4ͲcxXk(إ0VI^'haZ59 !rx3ilyLlbmI{zUtxsg_..0g >JD=Fu#L`n^/cG^_kbؿꅫkjǢ/2/U}xQ3h~k:qYtug\tEr(kY=љeG[P;[+i-&H} mH}}V*l&RCOֆ>qQ最;"c#ـd bӑίhP@Rx-R7+.˂mZ+^#Rxhʇv${gCӝo1wRsw)Р*Ǹ@Ѽa\ RF + O1ۥG=("żoOCJ>-xQGY*ud$nS̀7Å 'Q^]Ey3v F?gW "36fff065dbb42a8e63db9c01f4945fabcaf95e80a31f4088dff0c63bf2606eb49783e15731ca4d06a5f8e48dd503f6aa7d5926d2xaBU]tT"0#j*m DNma*6JGy()%4LԬAsFIB Zݤ N <'aƟiJ_?=7Bn֡ - :RwL(9>®v K73RsL1H XS~yLu7l{$o8'o!+u:Nr NK UhED(75S7㔫Rݦyl,^VYj#Bmr" >pEv?vd   2 /LR\            T   $TFlF FTX](l8t9:dGm Hn InP XndYnp\n ]n ^oy bpxdqeqfqlqtq ur vrTwt xt yuRv\v`vqvtv|vvvvvCsssd-ad2.6.12.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.a9x86-01.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&`K8K@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.6.1-2.el82.6.1-2.el8 .build-ided6f44b7790a78e817da77c24cf8788c72394547f7405f58fb86bdc1054e93fea61c00d6111a9115libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/ed//usr/lib/.build-id/f7//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed6f44b7790a78e817da77c24cf8788c72394547, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=f7405f58fb86bdc1054e93fea61c00d6111a9115, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR;RRRRR RR8RRRRRR2R&RRRRR%R4RRR,R3RRRR R5R$R!RR R'R9R~Ƒ%}[.{#x^Rj]3R] CH W̝$5n)o-:H(}Go+g$TTnJՏnJFw@KP6KWnP >rՎN+n'Z+ۧ2u +y<;(/)V~סY`k{Q>v Wٹ(M~)5K|V#bu6|@EG|Vpؤ@~~:PE|gI\ #O]u tkKwfg'ta_2 7ktflY])6d] )+9BHdjr.fF;B"*bԻ? 'HGDA_D"n4M%i>6ĬCt6{$r*^#0`6cb=.'֮ya}낲<|d{Q&ɩ/ |j[5}ϑm'*aBˌ ިILprὦ))7yE"˃A臀wSx0LnHGxS> |HvKyZsvX/c jϟۭ_Q\L{Ƙvw X]]-:2G SXh'4eVgMFӀG[H܎6Y]/@"*+$1 8)$\cZ4 dBgtdg?aԛymT4s!d^ D_u$}-R?n#؟76́5'p^%Qi?*}<Fe*SRBAv{ՏFT)ǟxK5|Yn13-]M9x+ O4MW&c5QTt/P_ Xܠglw ]R]\2 F0VDЋc\(;x/P$.pc>Btrig1k#A Z=گ#[`Ϝб~0$Yp +772 qN;r .1ӃINo?[5`SY$߶nV)irMհ+h*۪<|0(NsL'۪ 󓩧kbK 6!#Sq#D=qvy]Q1@NK(*@q;}ydT $nXIq$smQJ 1as]zaOe]sΑHe%;fLd o q9f@"uU\X$I3< /9gAo &LgЗ{*9̾Ut/}FE"=kEÑM s$FUza..3ծsb)X񅞛9XL% 8&+rhd3{w#JNPˋ& zX*eN~}V1jzO ?]4@-SG|Ecb{I C{E87f#OUc`yFUuӂO4h'EݑKCw}gS 5k9KL'@pMTȃ1Ot L+QOi#"C-YV՟(6H +SYJ3C& ."SKSn~qÖ8c?$~Lޜ@E 4s N2uQRUnղYlX%dϏ0EF@A.n)üX=f,\tFȃAQtv5(:!{d%2 "Urepi?0qEKyF`&xw}=G[/az5:]_ɀԲ`c_1H`-{ S5 y}Wvb0%Ԥ2,wyTIPcHIT̸ʼn*2 HAޭdfӒ#nD;ZĒzf`"G=^"}n`ܯE*NeqK I6 R~V 4jCY9F2]Ū5š$0Ġʢ [HEGIO8;)]M|-%Үwi#&pFdWbI8>K-f>'__|x^d–%EN/Bv{=|O=UaR[(ă2Y4q9@(g6A!DК -6vC"6 =/ʄJ;N*O)V~~g(bc"$;A_bN XFswm:(3m#ż >kT#ZfLZԗjMV/-Fߕ!=L3;ſw6]n뛝gXz/ZY\]ؒBSvTn}a̔.@TD~<1 '3Qr:0j҃쥟7nW|[MaPQV1}bGL^St^>n8޹ᎱzL|?]dM1*.NӣiRqM0h3cr++0 Um\"-SS;;V4AhC1*No%b66\6ԐW9+ {E]y:K_Uf^:Ok!%Kw+N[3S#rn)r۳~ffoBĠEGqep(*ZGΌz5d2SVS!B<λ<UTbOݙǒkp1<%3 i#YYP T_:Qp~_1@Ūa!Ia㴻NY@L+;rq<L?>p Ob$?(p /HJOA ø >#Osy\$Jc1m*)Q6%l*u)Bbj82HϢ~j~u]=Cm.y[4mL AˉncX ]eBsawV Lw0LilIQL#BE~Zxg2#^8S`(kiar Xx[MGwU~9Ke@%e@WV-$;Q)ku= *rÒ 8"pc"\,qW;L&4W EKB-wGQ Qu2| Ѭ($ӊQɃE0!niJ,kqo+h hCDKݒ=)YXwsDCɝBf଩>iOXQMԇ~ygzN,i"SˍRL-QPB"fY0(Gtd'Jqtn Kș\rX$2?#max`Lefeٟ8 TɴpI=l+a1S4޴Ӟ-H9.ߝOC$݂l ,'c!$e_֣n!zí0wmy|+{hށw„8_pWC9%3|*Bf[Z>mel{9Hc̥FЈ>;NwMvJZt%5/y]GdFCut]Zd ؝R{M+{ahZOTqmrs`);Sa4'vty) @rZ |9Pf [!@Eц2dE~Ī?퇬q 7S/" C JSRʦ 7`ZR8ͻ^j$`"y'պX/zȱOňnι x?>ȋRjKuJuwQ̥mꭓ$r77Q9:j5REIWJviO3(]=_2؀D>2$o* 8ȒX "a.ꜭzUqR؟ xWB"c_7F6y(AxـEsr*|~﮼&,dOL\[_!t%pam7`kNЌw;kˎFX%+( A2@ITjPcZ,hI&0ReVzXB6XioK$ʶȐ~{-14 -.DF46mrM+y~O6)3T?Za"tg]̺'%{.|~LǸ y!&ժCY+H;&н%~XVVhM6M1f;4oveLڣvez#zQќ2?/Hvl@AgE% T朊O6,W)pgJȗA\ϡvY<d1{X28Hǫ; ( hd4~HZkt{2ی4S -믆,,W V62GRMarl}?hFZ̫Rq$:Mg%a(k44#-O{ݖZs|fXX%)deJE'9Awї%L%'s~I(=5੾ڹIow3D|:_?`/X(֦V_HE6+>bl3c|7(L6Bn|ܘߔDqh Tp[ߵj~P^nu q'hEa'nE`8%`XoHKLS˔?KKz!4CQ3FEoI`l`iڥᖮ=r8_Ƥ>EeIqd%WN ԞA?6l Ѩ Wܞb&rU ٫rz-p`6wW}tꩂfl'~u,o2=h\|F_Q֠IFQQdʕ c59LϞb gȓSGwru0EG~N"x1wjvFbdNk;Jz7<`+g ȜpJ3 Q@jyXSUw6e2UB:K^p'U=D\U"3Z-AB BJj_X5]ihvB_s|MB [`jJSs>lOEiqihV d]MGH fY]FvjKPe(J7d lA4\ܐ.W.'>-onMwT8]aϟh5{J6&IN% oy-^۰mP!e)^w]Xj9<aH1]"j%\8qPC<Mm/X'%U9yaïX.c(&M|/7Uu b}14DHI*/q1Ҿ h( k~H6ϡ˽ Rրȩ?q q)+RUݱ~hD0<ו'Q6ge (ݗ'T8eG{ "1|}CAqY՛U%0_b^kФbeJ;OoJ\i{$zr~ (1H֪wp&7a?`N{r`]l-cv&C%6a<aq@`#KdX(<;ym&dOmw}T e)ɲX2a88'3^SGaAHD]QGYC(^[ZC/I/W~ѫ&V=Ճ#e_r=8;#8*A|(hžO&}=m\S&Ā wrR137/}h1 a7u?lǶ 2vshx#(WFQs." t̑*^N+6(njh(P#K7f,)vubZj⿐d)j JtfޓJAc ݩ s}#} )c,#'&f`xӴ@*Hzm}cdxp$^ONn5v*ʬ$Ҏ;r2쀪`hZQN̡$' pCcXCAZ.eLȁoE]KꊋUY!|ž@;0îJ  v5c_Aۃčsݒ5G(N$]uj 6>K_o1Mu:aW+h%8nCJ/I!eZr ]9*7 $|5Kt™35kK:DcYZCX9~d ok"&+~ٙK𵰮O؎h^j+_'A+o3٦d.!r1 J{ߏ 0z`f7ni< Fҟs) ٝU:cT:@S $=>q\"Í,R@Wo)- CwWd@YGLi0qEЎk!1X aym Q]tG79bK:@U?/-Wik[IRurQG 0M9*0;p YTţ[yM4[ rkQFe ۴:*+^sǽ-0 `Ql=(Ck s@kݱN]#RURsßHՁDx pt6aUHKȉZ|Qj`*1L\!:TAzk4!RZͱ}ꐥ @}%/Xv#/Q޻.![gg1D?VlפV\{:QJi=Dã62)^dx!;BO@y}[<ɔ5bs kp2mUMu0gD'$p7bY_p1ҴcIҌ1ä.QM9y?ozpt1mj$@1_^ toDG;:/`Z&/)&mBB"Z}s?VX}zCG"^ > a0)FUDx:V~w>:- ORԥX*׈g(?nG=:7)Yd> Gñ$ xemץE>@s.]wɴ)Z]2,i>vc;[U,H&Եx* |bHd4-WmV*j8 _ 7M{c*]I&U֠WT~a5uGF4:P7Z8e" hަ; +~_?Y'Ę[ܜ6-7t͹05>߆MZ'a#Av?a~q/H/#;3%ƺ*1Ug.&( o TւQr6m-u%!+e{c-/Kfu癋KېLheZy!&De=3F^ľidAto4;!Bn=&EJ?"麄b/[+sKޠD 0\~>>j36j}fxcA>=(([N 啡h Xibt'@F<+j(|v*2{/h|(13!Y OCVW_NRb otAJ3IʚГHr 1K"۶(s $ qbhJ!VhĤL2FKlɻ7? a/VL5RGiT8%E_c Q1^$QYYuYB5(Brx濫g:KYBÈGy`OzT뮟JrP}",*8tZ鹋M*uu`/Ilf`0e+v\ l|3/Xl+CqBm7t4@DLD:]\-Y?zT1ʯ+fU>1}3LV99K{wGL< vȩ #` " [`2tsitbF"` ᴛF-Ϸaݏl___xSY턂qB4zIr[pTUкzpZh8 h5e8u]ͷKDkx{/QDHi)Zu/?8-vޟ>/ض~11kT'Q"FeBd."] <Av3Q=yqN;S'e5HбwEiƾr_H?/ TIPԘ鉖?M4$},uԚџMX:' }Si+5;I|jcL59=3ܢKbazway؛.gajދ1UBL|@ J&Ze#@mԚ9JNײ>"\_N -zE4lBLTEBr[00O@:R%dR.+ s r÷O;W\d(Zi=~ރYȅnGH\G 檀XʁC\X& h3w)IGӈ(Q^t>uޖo y,QeY9j4~DfVG2B*p(rv8_W (&u(]p4.̤E=qfcv &2ʢt[~P3ߕ2)vCM~m'xKE8݅lpgQ OſP!1m-xΆoBv#SQIu Nkܢ S m )CAg(gx C GaVxiyeh gKUyl}z>/5)a|xO>} =7VHfȰn@f+㶃nalB33Ir|nsU`ߙN"܈2L"oIˤO{L0^Hi̫tʆT0}&~k1Zh؏2mb{m2fO[w3'VűS,9%/.ߟy$޺=Q63O-Qq<ZT/__Ck*N7"TT$-L,z: 'Q{s6ޢsXrR/--_L`i)< :xvY<+]mV@H4TsIT{z68a6Z'^~)R2s٭jÂ=#ayZnn[ :]+-_jԝNِ=#7!KzC5iRDۡȘb V?4'.W 18KNSϪ_]\|͖ES`Ckfn(XYw2@pQ PDAˣ蕵d+`dW6gW5&Y3Ќ Hvls~%MO/9_btz==уlUP-1Q0xlDϾ$\]s77𸖖הMvg5 9Z(F_5\¢Iju~TuiՌ@碔wQ@s0g=?|.|w{7++q7`f:w(JơX}p<ޤF ;ƫxS)7].k;Hvհ5{Ǣ[ī tyA|}] n9o e:[NZEe$}Ĉj`Sz2BZD1,$(,ám|N x@[XD /Pȷ٤%8Dh8O΋PG w-Sĺd2L--FX%& Ne.mvh^4Zׅm l%^S֠IK6eb悐pgq94Qhń[*H7^#|+G/w7R~\{)@I&n.)Yo?gAe0ƣ߼fajZ TgNCNU$&`VV;ܝ~5HG=\$QÌA,42l|41`_O.I;m<_Y}z?8Fj%QngA:(얎K]!^:d{ $"'74"^<= %t1> fgMU.uءcSZeT mwz:qiZZ5?1HQn\gIDs ¸Bn ]|w6P8ۨ$:7+j앒A:I +$jZm-/Fm{,эcż4h[EQ A:1y&8ZsF])}L]2OA}p `ddk)#ms+4Xѝ~9X'謳JKEs 䍶Ά )Re`Kg9=YܰK;R[,CϥmZ@XZϝenIn[Df4SiK/<(TDj#R(ϓȏ!z(^_?pa 7rrajQ%ȍE 5az#LwG8OPg8;u9}jH[L(ЬGq(J\n ewXʑؓwو#p^E+oMzbw >G^c|9TB*D@ ]CkQw{vw(.0>ӞdlWgE4rI_1E$)_ 1/8yƁ'1p ytaWYi֮3˙2C)//',dlJ>5l܀iq}#@ r;dGo\uYfEp0a/mef" o-?MiA3+nѬ9O3>&KkINWQ"o#{tZ*w)yBnkZCEG=MtZIF.o-^6[oE$?Ck.ĥvoYfmCC{N'/4:y2b25 -0&oqrnbej%tMz1|g/}Q+SZfa/"O)GRT%ÀVCi@̸r5pcN170jn ?[F2G_eJF6?8盂nh@kIJ\QA*lls{RGqot"E~~ kS-Mբ֭%W9EO-፵Fx)UAtwS8Fdk(swAu ѓ)?ADsFW7q{J=0@ . !e{9Jk^惽A5t-KT}鎬V=)D̮ u>$q- =.9voJ>]) R HxηܴU~thXҗR~xO 1tۭTHO-dϥOOڍX!=CYvӁ-Me1t[CV-;YBYq$OV̗;h,ˎgk13+nWJNY rKp<}bEYZ*>yR/v'#%nrVbhL D3紧[ y9m]9k(U0IO00S(seIM+ yXك[)GgqzcmM==}vGWsH`u J޽Ք=\n@ӹO`3 sl9 {+c3GM'a~f⊸,xTta>%o%eq (=nj*7wv#c[ߺHqjl?%]ny}Ux7´fA&"c¡7Mٖ OR:y^d=Q&1N\90cXN$w=w::-,`Sl'T3b-J)B`q 1 -WR["ct]:\Rpޙ?s||DB_i/tK@}[u<z~$z +{ Go} nG37w.S:YO =*d 縬|cѨ8*r\&-"APu 7a{P"8"x;z:B͠fo^s\Y MIA  ?%tSe9 2f [e_Cn,4|)y B&TP2,P1NLb7I-xɓ[{\5-x!yS=l}ǓEl?@7:Y!f= qWwb>K&5IJ A:p"ؾG OJ1ϧ'u0Uֵ;Ef3w͡;<gxnމU! ϝ;}/.^޺ <Qbu⦅RC(5smS ߘD)Hw^MȐlzv񘯯ritWXɲXA[|}XD͐,i ov<^A5PdtQf,zCCP~mFS捦*M b/ YQ3*{pf_~o^l]l.\W~b'MЧYU|J>$*Lצu3>m#ϖBCRVriIV/yuDyXT=.^o{J4lNbQq?xb*eU5jWhaih7U|4|ٳ5ЬImgd%(!G؇gZX={`u82<˶`m9D =+ pO?-ma: g2@V *7HsTqt 0'rmuv\]a'ի(Ռ.A Y!H055% FQwv? p,m73R)kD$s.`vBlMΪ2nnkz qdZ">GNO;*MQ~z%\lWZQA_%φbH Kn'0Z@xaUB XXk|d%=" 뉺8QL;`C X`# z$Cgνw.mi[H$cG'}*2!0m0"]1/:ONL3w2GK:+cX=G򀇵.([ȌELњ[4ܑ'P>O}`#-PDV w٘Ŀ@&ʋG'dt Cc[ DdBaL=?tyjY#_y&;Y)D=kb"unGyhF]wSQ?Ko_(0OQ# >#xɊ=;HH; ,լ*:D @`"BXÁ%2\:sӟKHn"iCa>5r'XGd@ΣUP ѕӣ#jWc$J*9온fkgS]l,c2MrCE@3k$½1@ѵO=j1}D- P>@U&,ym?/fXATQ@s;Ke5ҥj1(.](o-$ rpJLI񲬘MW#aXۯ^JNka,ջd=g_H˪q[1mʮ}ʳ,Pv6( 1Fif[Gύk ɠј׃)_Vޏ0nH-'#áV24 E&9}'v4`^,K*kn?Gr>:3Z=jSͯK}qv:wzqA( 7^乷PsMjړ^9 q?Qwv償;| z7n$¦a*#PɄ'1qf턱Sneդ6azPCoxqsQ愳x5\ :3!oka ^,8/IǰCru\_ T( YoTq9X*s3FW~-*C"r~A'Z_GľF8W̨,h[^22t1tCEzhZYGÁ|ZhΣ<`ϊwk*+mĸ#83Wo7ɘN(N2<'F67ʬWrf(\{52lgI =otXړ [M5nj4@4 i#7q|<(z>ӐL師G,qC[#n 1!um\XJR2mIGŦ Qv:eqȞplVw?(R[>5x%XBMI/wc/өKxBH]m.I -FWcK 7,` }|L4r Սnyx (:h E)k@L{{wH̜"4gt+:"c$eM.&2"+x8%uܫO%ft;$d!Ǟ>F N̡Q6S9<&[?%_| IJ{1YT0:*]5zf~]E9p쵕{0$v7q4#gv1%)O<.KeK[f6mP BC3/pV> :9G._F'pNlq U 2˱Hs[|P@Z(^8 c|4̛U-E/`kT&yM32^|oWyJd8-9O;(?Wȼ95?*+a`I0{׏})W}e?Ej KV%5 ˞CTܿ*?&zEx.AMm0}9o3E͕/LRr#TP ~4|6:W!hv=O"Y"4Rn$&K7,?8V G_3[_6wx1DcmSbeV߈7 ' =[p/x",7%Xbҿ$ʓ)i>G`rK"QDѽ1W#;, C9!3Ӽniz=V \{ʉLi҄GO+)N.אt~>[Z7VߧVíW56-A&'Vk?"YpQg =K%L]䎒O"@R9[)<#_,܋-IGŅ9&<*}o} I cr'Nf?^Xl TuU7F܍__*a_j^ B[h aBjںWAw&l&,D6z̨ώX"b(v?|sT.QJKE0u39C1BZ,.^Bs~Q l^}? K0xsIn!Kqy|*@k6 ba=jrcHJ.=|[5:[ 9i'2߂O3ЈǓ"LU&2 q&WQ{Mc]4l 8|x6j'ӟT1 9_"74֝hLa_{B;5Ƒ ~K9rvs$sueG%r1oV*:Vzǖ)ЧmF)M@5['_7uIdKz=BH)I;L_6޷e@wY؎Y1sM' c^!OT!{ Q/ 0|n1vT x1J8>?S^DHt&8gz`׾؈uDk,H7{L8M r# *V )r:(=RFV8' IWzZcGM YVd衔3EU.X6I{^ -hrHLL=Ԟg2cpz'a0H%[~aZ9 k(X<miYmsT{q]| [cDY 9?`wGӫ!n1n 5D)[u*N'< TX4ԫF4=E ~2#JPKYxHxu1mVz|ALǤMF׵ Q粽`l"YM#o{RK57ze,N'rEmgMnJՠϺeI¯z">Kr{u wֺNω"RGҰķȂ-&NOe i)o_Bw>O*dB`: ߩ{t%] BmZm/Xͨ`ɜYh]KYd?F2=׻L+aM^A@9sVoZ[Glkn9DLʧpqd7S"s}绹(ݼ TCF7wY rm/1A*D jtskeW95hx޾ 5VcP>ȍ@4óy_c•VnCBlrԥ_gz)+')"yEzJӴW@̙ÆxuKo.+)Et_ |MDDH{ 5C1mQMyp|F/;K@%rcPFCcojսFz1ș_3P^61r ~Œ I+Z#~fx{j%X/FCv0GDƼfAxh$YWwu աdѭMn/=կ="֙BPݶVJu}zނ.ha(4ȩ) +TߤwԀ㓦ZDn#;@̤uo":WR^aӥX/}j,iݕ=DmgY;~LNaI;5܀-NN\mu:@Ͼ}}~rh !|+\&mgf#*S'6S _9^#L'O-@ةFt!ب~if:/[f0k 0>B'zkseq\>Cy֟=~ ^`TapiH|ubBiI@[05?V-U}yJ/wwt~9@$XqJ%oN1 vO!ړ#ϫs]F.QyeB]C&9qFX}HarQUJQWOHMO>( TFDdBcr?]1#3^tNv@O.PמBW$EJו\~I˜yPuW}*& J_zrӑlaaSYձҼSJHov>U)OC XT+p{UG-82m%4l )TvY0]$PJc}4 oXڮVH=9}J TM~#í=lq=rᗒl 8f*@$(Niu WNVk ٩plgg(E; wZ][ysQYlCB3f\WJ[:l..5@oq;"R VUZ. +9.̲7tDuWO,AX 5̀5uoCTt+>K֞ZdY#M<.?̴526 kmࣦI$.YT眽_((ب/hz!g$Lw4"-d` !yPjrSho=ae~Ka&b#a8$WMZe#sP(ڕ=ݢp >)Qc3g-E9QZK=2`KFMa Vx| PxM㦠uDSXXÑ~^p5PЀSbwhssû.~Q{Iq1*bNQ>0r3>o#) G_>W0Fd%< _).( #I hr#JP}ex6-S,PNa-ekau.Nmx\#_] 2S!NDԴ7EZ]h93vD4dIQDFT 6g婍z4UK|4 ֡G%0ݭAd\íjާ6a1hd}0`}݄|b\t_])K) +Z= :iVcʢ7mAIJ{k)~vDzRK_Op]G MU$zxNuX$&hY!tmDkpH1ns6\lwcCrpH^^TMB@cn~HOP?^:6^)tSXm+pcUP"l>ijX5ݺIKPv,-BXrV2#k[#օF0+Or%؛Pjƒǥkߋ\{^MD玵a Z 2hYfTb1+[#BWG/3QHzfgxpkHRX[U,a&1HH#_ZCt_b.}zioIr<(閰NUZU@'>I2E5s9sI9^C"Պ26\Aؼ$d |Ku9YIxwSF{ xێDQ=we-$ka9L7m/EϾQMhͼ,AL#v867+#?NQϲF(V?7YOAfw$z U?Ƚ۶߾QL".0ynBF_T'_޳8l+!t|FhgrIz<šMC^?+pSb#v%/ 1Gk//Yidj󄉳AEtZܮD7D|s o/ V$E%qU-U<[ʻ1\ԗ$IlJ1Urɛ 9s[BGpu̻P4u^KK+l^,Z$L@t|ERF\q# IkxI|2njKW+r;Ԣ˺Ǒ$ ܭ{x:Z㢡6]Cg9auOphawBcu0f$h(,h ׏KLƯ]?njIf/I\V1~;%{N&tyTg:U"qT-V/<{tad"}JeF/ D5uKH$4a3DgCkYo9(^dU%ihNo!Vg51ֈrTɚ0VS5mȧ~O59 ˟|ςI:G' &4T}/"|E7wEIg\:P} 6XF6^WЎ턪%eg"5ꮀɦ](3l/h;#hO-EL|^i'+v-*vrӔ:?%Q0fQDu͙D_K5>Xg׹8zPJK_PuU39e4UdZbϤ՚DJ PdIK9._rY7QG!@ΜkSs(FFl-x) /:B9JD3dʙ˹dn?cжѕ@'e js5W䵎? =4۬"jo&3Ȓ(x7n62=U6kck& <1~VǑF  ,"H c`tL.x14׳]C&o.]-(RoW~/z Dz#u)2vwIp>߫J ?$MScYVsĩҜ%`WԤ/a5ߌ&{1/'ٝ#[bɶ*p-Cqz~ ,3dcYVE@fadBo`:oj=yͻ%/Mɿ30Y΀L  ԍ]_5ꁃhh!R#(Wq1:;0 X&y= #GPl4$ʎvPX1\`H TasUu%XؔD΄x_SU$ccTUbRc>/Y͢5C_`IVq/E)@5B ]qX~fdU,|vrW j(9)Cuf2h +XC`R6cӈVu?b4עjK؀kwvoF.asP\t&2jWJ\7t䨌uJOf^34JNy +`*EJB|D<onڂ5!=nY9]WrާWGea}rƠ6F<߸X6L8uJH1 x*ťR2OC[}Zs ڀ/M/F#秧 )<̻]Mɕ/4_Ι;|{'%QE RCu-XjTa&T X68ߤ%hgi߽vV>+F01TUd?>f9 nd: oI"fkf-2$"=o>zt]y $rvGfDOdp`V{#B^Z9C*OU$0I϶NI_T oic0+EY)M!ty?3sL4{<GXUnƫSwuTso!n5VH.~&1`Ea(3usҞᭁ QsF yc!<;_Ʉ0T͚vN>'3Zĥ\ Aa$> ,%CuPKJI:.Nʖ"c4>k(Y8mfwMq}X)&?VM,gFNf\4Q˷ ̵75qU )WKc7,~߼K@78^=Uuڑ>Kx7DWxcjH(N&ʽx(8ds*3-: T%71{d֨?Xx(̲obE2M(q4Q]8~rjRU!"U:D .Kw"[^;fȹR䕐JhH{MQTfDq=&R[!>\$:&V6ք$txz3p<]7[ìi;2WwPe1 ^ѣTL٬xDYڣXԑuŌo-򖓌r G _:,pD No:r9`C[a}0dӸ(I156C>m[ s/|!EćgsiB`[bSG[z]cu<3 ^ؔHZ%O lC 1\G6%f`&g&5-hXqOB#'9̎;ܽ,%%휕{gwEx tMJ_)7A0`͢D'Vd ,e,#+캍8ӀC|Hd m0lQN#AM+\mh==F:5ށ#A|>7_9|@`1V9O>L%|Gr(EPܓmb:*ݵ8MU<%# WY)18 h ssi+Kk~B4Ɇa˿j[}H<+Cid!FX$-tJwoURKN?dm?lA`#5U-3G{=QNRU,VW_n4P;TZDK ,j/4YR-^=)?Hvd8}n9?Bj:WzygV RLd4;L">sSzGGq)c )t;wdR sf)#ij^+3iK^]ok -rmkU,%>DE^9:0cG#N[@ogͤ w8hb&amED Bl/PVi<\z"&cB=3\Т L6X7NۆoJ(^T紦faBa7w]_L ttX\褊 5P E!6yLhA[_3+p L$P/ڦ h ޼V(~SxmU0憦|2BKFhqxcf(.\*Ȁ_ͧV"-AJC?j鳝 &fT̽K٫[FcW˥$n|t_VW>٠6|Ѭ`) `&5ڏ^^3AV%w4mNO_SuL㭫mm0IČoNfUH0֗0fq M)tSQiMJL@rXBg_O$2"yɛG7iXkz/\&q y>Fp7SoIc'ػy.= >s4L9ͩ^^ٵ(F_n .XBpx83Q]\{cWrP-nl@%e4rl> mS:=!2<$qѦx+acI ZK9dw.. ;La ~ۦ}? H̨ 2'gfm`/>h:iE|XS{iŴ>c;1:|muCB};道 &7:R>qEl_+_˸%JEr9gkp8Li̫>5~6/*ܤLs>b3gp'J18t3 9.S~ۈ=.1vBՌwqF\eInsIH~K?;ފ! W0/OzƚCP;c9B6-5 l9E-uCTp5(fQ&Vqy* zMopB 1t!:@ch7T1kx&{e2#C:sQܮb03qJo@t:t l8 zA/4$mkt}cedfQ囓v+9>G8;? lX[ir{3ޢBLC²l=])C- >+`>mF[)!N F!A,1 "{=nR> >] G{U*Z7h8·.L F֓2n@pCv]wD*unŇ> 1")Vam k!CGY[0?=[DaC$<<+Olȿ \.L);|~jY`ŗ6AP97{X6!jJZ#5îݨ{6v{(a&n?ݷ,U. 1,2t2^2 $1 9XJ@.*aM|k$['O\1NA[[ҝ:|x]Rϙyܶqw]Vd0E|K iAQQ`Ȇ1G/,<,DcnR̥GftUZ_7JEIXlbGr\7{sF#S4%(փ`bU\Դlx5'3҇æ:Nc SH-j zņu=+7l#g$cs+ο7"ŤyeŚRxiZYZ`ZNU<\ ?w;Hi6 uݙ8Hڙ'Cb+2Xl$ͥВ9ikh7ntXIhyQ(. XSGޠJHx.{3ℱ]A{ :+鍻Hlje#2%3kLb"Fl-qC hS4ۀ -8S}@(9h%O:^'go c;5AqD!_DC-v4#IfK逐yȈ/L,#^zd"}VW*E8X]}|M,I7;pA:XHOaOFü G#:bn6;uRGM3Fd MNKK^KJz!7v@pf緿o,=DD$aǩ }EqZ;p* TG!1p?sopت4wcds PXɛo$S9VdރS4޻*?K6‰^^ণ}ʎvqI*P5@ҰT莐r-k;MOqs=V&SM LB8oۥ#E@PL"WEK|K,riRb@k,^\Q =I' Ȋ9bߵ)S#QbS6PohJ.)fKJG×cgnj_"lvX433 ΜᨅNmL:̂D+X1]גm NK܂ k`t k[e= =VKcU;/:^C39uZaU^sW7lQۣyqnE`f/Ӊ6?$-'4d4HQ8Om =<6F\iXXg9ohUdWyvQ(h<7CI MmGmIǘsCxRNL9/zv=14][ڎ}MIEɉD+023R#b7/Wm`U(&fJ>A1s 9ŵ3t.Lc2T3׍O%J\ ?1D-ƍ7OvA^=Y G~"pxM8[D.a%sǼzsk_-pwYNS-_G;jmbb=`;#Օj:篵8HQ 1N!wO $iưA]so6^Ѷͻ6[aQ!U͞vPh_RT?Kwcy8, @v)__Ob8|}hÃ2~9tY3uɹgL,m# S|Lt _0,R.Qe@Ud5I[M0i G))BJҁ+, VOTP *AXyD%@z,&/W4+۷ c;=Gt`P:AE}I+&#{-ݝ,b$0b[z(.W[S^z-MQ\3O0%qWv Vk8.1S}uQKp7]&ڻBB5mVL8ؼQ:R՗#'g%FjTw\,L1Ih Rh9x%HL0',,%e].6@\ T))L!ſ|]~i-)򥱬U6wF/' qih9: j* t/vL` #tA&Ys]:#s1j."&wjrHAK=V?[REʋV/6Bȶ݇]pzS3+' tM-n@GW>y:\ԆVLݔ162;fLm ]j$;ii;zINF5u7U|4%*mA0^?*2\Òբw2j9VFSs q+B+$}6$u> *_v;5<& <()D7_fG#I}a{l%_=b l x-W,}=f0˲q{Y3g3$Q/{kЏM¸S6^ZzlIl?@5'6 \6wzKIj?YRHP$zF'*Lڹ*"D }̟Ĺ] '-̴D;*|;0$gm`wgŲ3D_\cmr.m75Œ? y!U ߿ПGr~tM>nJs' 4LPOꜸ:I-XP{mnj+`;Rj /ab;=F NĐ0liъ  o> 8\JxyFoȐ{)wO 2IHnQuθTӚFY(OkM|lZ\/;jdb#e ]ER6mi5ΧN5 l\6^&|}ǻe|ڛ P"VyF/Mp֙q7=5m(c@ *)9Zgك:!SSm)iOf.~S1JRSMգ!%ϧym;\maDv 3 _[ߥzZn'^wNit2tZl>*&|KE spUpR[)q ;IOTjJ?z a:I#(4jﷹko4,o(l6Wkz{I/C~g  c5LsR_:=[h#Ux2aC=ݰ/? ^+=PdeFNr2`l\I'}2*.N.fRY~:)ޕ'*-jj]*8 70&C%FڈD±FBʋ,@}6^(k9 E)C>]mf+G?>NݽqjUs`ꡙ4YIWh, vrl;6OZ],a 5{F~vqݎD Nrz 5N~_WTN̰T.y Y/.|/*̖eCAqnSOi'B kYv4=0n){ȁմ-Mˋz Y+ZU;v=ChR'9yEu]9$WK`|S'V(JX4N8C8E#;("}Y+\d&%'C:S JݭKyFjW(j5 br dJڻUK!9SQO=wDZLGSeI:v`ysKkn9~ d ?W^-F4][vԺ֟Z@"%'6B1 )P5+AKPq/WJY[>z5 TpwtUﺝl9⮦  njiE" l|)`;4v: {{kc]yUf}u%$ x(*z88u78R$ŴOELayG#(::sdA)|B F'u_a>k )@3$:ND>GFqM&Ent?(O9YJ|L9O,%;㡈e0aRM]h7}_",8Eש4ksyHC;ޜ)`j'-4;اR7@Dn@t)ܫ^7.|xcG+?K*$5ݛQL3UaK"|f\EJptΕz RXuƪ=~!T[[:Lk\wdqvG%Mp[<藮zÁ2CJTsko=`JcN֑=u @wgh WSOa%zz-٫ă+@O<ЗHQϲrGH!F(;['%i%2P`8^X&9CζRe2ځkm%?~`,H Xom,㯱O0grilȮZW>iɝ_Q#l~,ֳsv;%*+YqKj9t0H|2mY0'0.|143JVHZ8~ڃvH"Z^;7qctR4b|{Y0n&åC(*PRQuo=n"~%QGX-ؙLH'i#YǴ<Q|煊n HIiWB]T` !xO/۩V+^'0P \e$z-$囲 #"Y_FȡfYsʿK NXt1M` >VNZ%pU~HK.EP)n-!trfpsCĸ PhDbî ȥ>$p#KrQ .`]EINOɢa~(uޑ],a2d[Nͯ`2h4Lmc%+ 4ƮMǦ9Hq̙*FSl_gˢ.)3BMыaHkRg]r2Coa0T&LMɛe4PWcocy<6D5eů ns$K!L '*|Jnqiq_1%oDaraEXh6ͳ: `&]7 NWAS-J䤴яOC sTR&&bm^$sz*o w/l(d83nZmX]ɨ =s,y$k9q Ě6"WtYwɇ˙v!ZJob|JhkmҞy}MG50->3/ 4u ew1H})=ܧLc`LzD أvҤޤO@otuN}԰AgDME!=" Lg-"QWߑ:mE|dg5'r.xxKV.M$ُ.Px{C_3oVoYGwՔTO`ڿlσu|n/lB >mW[/y2Tb )vvhP>z Py`C_@fT<$y{x0;w,.F(Z7@?2ߺZ7VE-Yvc1~F|//`p̻Aw5*k奔^+M%$9XIYU?@F+鼏$jz{+5n"kͯ *R%6+̔ $i30ۓ5ÙI0GMlhzC] :ag&kā<txlɱRX}_Ҏ(4?R}(>PHw21H8HZڑ1&d(+UAZ ['?!h'C<;#yU-8Ri%[Bx@8 ʁ#b?&wwYxa< w7Z;Q5'? w0ɄI25V @2 YQCDHf@qP!|^1b(oANJo fW-C_019E @*4YMX7/SvbVҞ zZV4pMWT p&`?TyH$& }O-%RꝵT@ ,kSaLAuy~BZW#zԺd~ڬ)Qf`od61X>7UHI$$pө#=&΋)]QdEQ?kܽG Ԉ Nj 5^F:q!?|Pp^[yַ;lmr4BfN7bZӄ 9ue%8/C?(>4`fF+G.͎q2ImP'2=:)7f?y8̎C?u''RPbRaד l!>TWHUHcf_x]_Y K0]X|,`AS%-JK(8Byfp8 _0EΏME|0O6clLMAe)BV&Fc>!ʾH6 smmx:;'? GmOjTMBu(A6J%s |]J48 X"i61B N#ҡu2 -픫$,h~9qT?l]嗃8-{ƆO2 [ib/Q=\ѽK WfjnRAWA[ 8n' ɖ`g .fVMBpXq6C q ~09 cNF@ F'1_{Y'#0zYm԰k"z@!+c5(/^.ug=ŧʉk)0)`UShojs0j,!vw5d/sjJyP)rQ4{z.#BuyVSa5dۙJJ \T'r,2Yƀҏ$CQŋKl9420gHN[K͋=4|Wpсaed |jczHI"oeAI.Ďq tL(,s0<6%KtE-WW=[& 38?|ϸhc pgL:3H;z"е]]Ӹmg+C !-yFE<*]MըVӑFf\%j̪g8⠝@z$oh}ƿA FҖ,1?wJ!4N4@+R!cLɎ׆K֚-.I$uѫ`eonq5&E*31+:IQg+̂}= j:}t -ƍqĭhh>i,=K0Wu}E~1*^YbdP5e3m|X"FsW"7ja(\[*p[2eyw9!Ǻ{%}L۽=Z!Jq琉 V=m@R&4U216tt è0Wd0-5lb:@^+} 8g\'1G}ܣ淦49wnwo dM}X6?uT3D ]Hḱe o"'>o5~6e$_YCKƀvd/fTז"D\MڑkIK q8cRf5B>{4n&H4 # \o#*?IT$p:[tQ=sG_oi~Y2U0Wk'XJ #݉`xy3}o C}i R*0{xIԳfcņi>a4L>r{$ wQW0р0^Nə;2@G@BlF!DwnvZ|VG ;C53}4* ?E!S! }ϫNI^Υ5tfYKY b➹.xs`u[O*!߻|LL/ t!W`w&uN(2?UZqٺh+OM)=7޵#n\.Os3ߝPBP&E/(6Wn[ dlj G^oQ'/s%`RܰIFm%b_C=%bX4ly 'D[QZMb]j"MQ M;eߕVnC9eCa,#"=YiMlIwV G'(mbLN *;Ǻ/5vչ\nU] s{K^T0ME dʫ(ZS#и{v{^-T/5sq h gx7wA~E%6YpCa|t۲}jHKqZߚl {T/(U k5VS󳕖8*)mn1dC_/ (n}ʸGu z>t|\v4&tzRi}@'?u> k#5Ӧuפ.N?0Bi^*PJ(b} >њ^>IIY¯oҞdj-LOw泌"m褙 'kXEnDe2S2W%?2~ӺŠQ:)*?uqQxA5|ZKfI'_:Ļ.ẁdG$!՚Vey} n%JF;M*uzw; P4*;0ekaJw~="V+_]^ {>/);ԻBd Hb!VG`2s2mn#<+Uٺ&VAx7Mwaj/U/r%Âtp"Cƹ2rZgknCr ,Ӎ5LtQ"%O %6O .Z.Wf㉋)A,"͸}HJIk)xȓ/|I}Rlv<ϱƊq"V' ꍆ XB[YQ&k}HA^ǿL}m_B?CUIo  ~D2B~/'u7Uvm.5Y15r8uƵ|v0}2<./ЌgM"e "ߢ^ (&|IsJ9)ٱO:tumkd1c8#J *o3Asbw1%U8}Mg+ApMt¹"U>pog,-ȼfnQ|ai|PkeTqb0skH9}K2iNHw IU| ݛb1D]LOZgy6۰-#>؃\,v?biV`)|Vyf8 4~5DRTRWɼΌm qC'ךiz#s` RڦT fuX $#1Qݮ/QYBd|:i@e3t/| _M{c;`g6mNVcC3KS9ݻg4B M\A?YlZt76GKv+{kz#ŀT9wZkfZb,ǭyCJ f|2߻OxQyO2fo.Ϋ9LASe{;]N4K*(u1vL>uMj(Z0xDx cf8v4{@*ׄ\!*}3<݄bf/V<-[:_:SoCQ6mU,N eJu"Q lwǕXvOYq5WL;ex DGϱ5)9e쌥@#1Gm./O7,s9yY|&^PH[S?qP%bَ\. ѿIrֻ-}oMC QBzZ?f"-k̶YέJժ^>ߚݔ!Att p ]DњawUD0%{̚s'saՀm $iRIjڱy;&SLeȇ(y!H>gOLP!$h1Aǖz&?ևȩK˵d/,i+`/2ႻMi|^SyDÎmߺ$m"$TlWEh"DiKpwy?ڠ<Ny}E^O2YkI2}Y6ZK &u8'^?mZ@ U$X 9o~Ĉ0 j#Kn҄mJm\>}Un:C@i?_K1)+tbcjsFIW{LqIŔ/*Yhks!${ oqz2I#tX~)UoczCWuר qN?aJ1p0nu7 U+49E_f]q&7߷.}o]LU_Uĉ+o Og)bx>TV.eKz֌/w 1 rxQ.Y|O#mPx]+;s/Aʐf&'R.p]#ړm0=j6YҲ{F:EhF5KacDݗI5VLud`M@|<`3lw _񕄙8FH p.ly㄀;߿?VJҜτ%<]b mf<*_B` ʡ R:DLg%ΊBF zkqͩ!IQ|ۓ0TI0ZgdgO+nDk؁j0n4=1k&TH3k)gH_(#ɺ[;qm;\ &KG]:D%M>W)FeHؠOFnM}=Kd갅x %g2uZ:JxjF9>vs҄"Sܾ/2}łY*zc !;$/xXaC2LF]R@'ɀU~-«?u'`r6"UW <I];jGB Jˮ6Qa|/Y7zX8 Nnl)ɔ ,n?eVAtM#bZZ=«Aukt:c}_ɄV yTd$ɬ>۸A8|G%X]q+і)Ԣ$T3_L\[8=gcmDY! D^$At}O1f/ CJXBC7s!`^z8H/ _oX9"" RE軘"b*lإx0xZ)cBg"vW?₤ĆG@E=a,PkMXe)D4_wBؐ>NQǵiVR'] &N4:l~y>jlhe -.j s6مZSN  kFpXR@n@ '" A,41N6<˹ft . z߃p0K3Ӽ8 m #$yn !:a}/0Om_I. w\*DS9}{l邭9y\E9QDž0>7>z p,_;+xǣ$(cJgH<Zĸh^rmPT1ݖ1+[1Pl2D=IVrglhI*}GGG;E|ȧ{ 5٨Z!NT7L}L\ F4Jj>\ p?b85kIs5}M{aK`Zφi`]/?oMGn~ aK]J*͟(]=n^BA++mdQa@H -< n{+Fχq?3C.\lTӈ^.ꥤVMپe}}},n\Z#ͳ􂁼iu n6 {BWe[y G}nvc0Qmzmdo1ő1Zl‚'LG7|j3kdڷA e6J~i~%d;L"Ɗ0B%Y7G`oCe^T#cQpm19]5k#+U|^^[-;}ϳZ,J\3KhҨ56mCP*sfV( ~¸v4 |}e]M0Tzwp, ; kNJ}gHaFkc?(n7c\c[&P@)mSLZ|/3ةsCHKTGCB2sgNƥ%.ŠWy|q#*]f"t8=~(W JU]tV> /6E{/U]&Z!'yGWY$Lɴ¬~VMcDBa $^0UVfN`ReXRcM2 /?Uz_u:);j%(v"HƩt*Hq m2 &augHw>\IE88ԔMb+Ҥ%#*3{d} wk-PC4-_ Zx$'Iel\zw4gκ vX.`Déeo|ҕ@5ܳR v.V n䶗ŴZ6%+zTv|x1%{*ASo^`80?>>8*U&}{L-5FIyֽCLܔZr ƙ%A=D{A݅M:n=N&0}v@(]}< &1{Û>bpVCkt5X7oWM6$Ƽg=?Pw*[GwlζFsf.ܱ5ﳼ?ռG՟]=]sJ[aECdE@T,iL2RD+&Urlr̥ X1(6n=;[=38~"$)Tk(vV-*Hx@J0&|ˀ'iCʲ#Ko%rYYwc)!klP!JmBOC6'Z(0X:eI~Tdj_Ư#KTCGK Vqm#ټxfǐt/2w3+B\zw~3ֆ3ܚd IȘN#oYO1J7'tG>_jYL YʈeX\ <ީTαςA[< k,n٤}'!7R|o(/뎟;cHw u̩uX\tk~dQS4doioG>g{PRBH+TX /}3 ¾FŁLZcg֣^jT&Ղn;$X\ ,tm/&Nf5 TI_VwiDGUc) ՜ofYE>8yV⎳"x wæ '#$'jD 3PXgJ۾A"Xdc|Y/n2{ xJY~\ʳ6n Imi"ɀ( dv*9F~Ac&=bTCl"]] BȉGRI`:nײt ּQF j2|Rm9@l//4?a`h. 1]9Q洛#Ћ,$@lR] YT#R>troʺ΢,83RARôl}z_*;w05þ§"1 O.t2u+['#Q6ơW/4CY _P8&i&Pi&dɕ %ע (c '2|%TK̅*%(?%{bm5s|I;M ʝ܈%4ZCHHpne\L2ҋ8%q(ξ3tXk.pǻΑ Xdz%^q@W!! o}hVpBXzBYk|5ЊH zgd$bP)gE9eQ`Dg/yAYtq(E3en^vZ& p@[fȃCd 22Tб:>4ho+HP x->1a g?>|CouͦH'2 +5v1#f_L_rE0WcGkpt OZ!Q ]Z0F#TBL2-/6v/zҖS}Q@4ʅ]WgMQJD{NO$_d@݋Й|sghpy = G ;pk+$yZVjӱTٗvznC»GZ7~s-mAF: _g5#j8jp)F4K#lh.k=R}g"K)z&pઠMlY&!-` W|d!ǭL₹($h? ٦~>)(WR1A5\W~zLDNx_#xd*Mo]0wlu* ~῝ f-^4N#^9tzs{iٱcc H> ;COe"fS" )d38^`~#S}׀6סë`P?i ]$'TnV':-s0ԬӱDjR!#G7~>]W8Yz 9D|냣˂f.fN|Rj2ZX& g㫹,:{?XO!@(M\G4R)#C&@-{d1ˁM6OR4ژ+fwN7MhM~>B;'ːclc7m7$^aFeW/ZV, {$IUuQsbJQ;D46h%UΓMq5\Y'{$5Qiy0z \Jd+Bl9\(c ^۠ޜx9?4˺tüWG)yWR)[-0=dO`5!{V^w:Q۶{8"m&6VZr9`n͇ k^411W2q|q! =~ OՉlŀ 3v ѥQr~q*k'I՟3YXȱ>gn A HS^ޝD,IyNj9#%ސ^W gR'B',k'04(sl`1'4Tad P^ H NS*>vP4tT5M 10 &+c(:Ht{_ ~ZrnJ=[pG?*S4T ]z/gD#5zF/y]ɲGU  R12PNb6V~ѭﯗn/xX[n< |9fUԚ;-cFT-7$Jݭg# )+* c!0_*ԿIJoHmڑ7HM(\N8Q?${τGba3<9\i'bUnzB\хM+#_^Gƙq wBoQJI[qZselHf)yjȲ6KԚ]*`FrK缊u?ǐ)r2p8M"VKfZFGǁ!!IЌlhZWI!R Gl^MS)I}= N'O ֹA5|~rM!<08{yq5)e J4%llޡwm@X&~G֌5BjdgQ$61:"_ +p<$/sJ:9:å˴Hj`P&H3]?)u+mAY÷Sd j1 n}`; xf%0$c' Ab:L?U%GϰvAL)n=6TcM+C/_ݼz((ș@|կb7)͖g1DIȻ{7 s 8/ѧ!#5V'@}PUbV.ΏqaYV qE#&m`&}y@6(@NnzL Br[ UENܖx 3V wPF@[5]E6K]-$@{= mUi ]}GS ›X{Fnl/]BV]器ajq\s~l~:Bp5xӱC(0 YCld,Gd-ek!R.&: JY.)[d4 zRU,PDI/l%iV'iMU#4mţ1P~lW<a&̓vֺ)dP.à @4w- I4uHop_=~aWLmFQv bFLk7I֧49־$>6 ;Ӳ&O\wqf'*a vw JwWc"9u6\v8{ei }~P^@m&1D>75 , +%^ZYxW=hJ 'F#nDټdHbc, Z[DOMSXoُ~;ŠIؐ@X[2-VopK4Щ:˵_WGxZ,$U`<݆kIs_~k/OyO h[>ϒD Zhxq+ &왻Vf\}CvT5a?WF'>d>4jԩ9#uj-*y9|CLI;SxZeN0]$w Ȁ⃖4_O.49ϫ<ŌR5jciN5ӷd NfnJ6hi,]hv`=J~ZEZhˣ+&Qߚ' !4lf A]hTիمz]:Wav5bϺپ8?t[jUe=w15ɴK^fEղgD+)VKG.9~~R|D\-kvL gԥ\ |޿.z^=TO,%(BZA_)u0b'.mb4BP؜3pA] Q5ϊu~ lʋ%8Ert`&3hcU[blL"D4 ٘>=%rA8֦GyZOUgaۺЧT+?;ԮE3#>OFd `-ߔLjZqӥK&rބvzs<~UGK%0!/iњdKfb:3(r6(PgBT&5)tSB44Ia0ON+CDND^=* :/qt=T ݴ띰gngz?\)3~=}eUq ,?K:?Gy)h2]Ʈ\UH>/e x QH6iJ 1N\R e%VJX'r;D T6 \V~ϓ@C_*%ryfNkCAyIYwE"gn VmPRIQZR\ һ9-vB+a )geA#_0st{6Ӄ]yWu^]T6%AP?wbP>.n[ . @@UX)x pJ"q=lBIό0 zWLw: 7#Za)2I <0:.܀3jF_Z؁$j,u!OdSҙHj  䐮Ťro^0S:ιv+@t邌Rop2:T  q|1XWz%s}T#'=ϖw)k2 7?aw%QZhUVsH _I ]ڰ5s\sy% h9~(AӁ#~ cjv)"q h˺`* ͤX.sW]s2d)nvivFc&5k3@C gWEFͭ۩3+;s(_+j΀!䗎h|D6 .vaLˢGOjLֺj\߳*bt X" S^s!֩(LQF!̺HytAڏ8!_MfftL@cLjGX ;io(&3 8^B; v]rg$Nd$m)G.JHR!>Nkk5M c]DD$,t$&˧}cUo) F.&ȯWG$ "z?ٕ n 2(?|;yFr &*t+(7fԒ#pn:}eL-0.e!rVaTc.tJkŌHE|(|(zفm߇dy˟v+_:zA}7p@kW 5.%AzPȋHjd'JSQ(uLYy.ϓcɒwVo! n=IၕIMz,3t$X7PVkZm84{ڼ%t}r"+9aË ,K,7DkpM2.F12)hSx+{u$"0\v-u{eʇO7}S|4Y<xir*kkLvU[3]BH ^Qq`"05mܧ%R4RT|Ч)2^+"FQ,oӵ4n&H֘K8&+"tKT [`&Tna|nB6EyhsAL(ΞVx9ϹW}Zn%x{J񒔮:K}'p 8{ ?<}D9n'w0, al.z" 1G[P ×V`JQ/[ZuR j ]ߔ^M4ARǮ9JFHvL A JVT=&B69LD1u=qsȑƭ4^QLKZw?uL]W Z@[!OHuaqp T"਎s1Jb@:wy3U@cGsOZJK"DJv8aGI?T6pt)Q}Z*kuCf|u2b}l%}#=lV2W@ ъ,[ 8՝`IFsМ:8/߉Σ}TH`RVU5MXj]0)>4n%' $1gͱ?:k@Y?4ӉۢJĴ]>chw_&kJ>G1 ,3K6= 9F|tw [_>-(e,Z%(2\!?oӝh[7Rئe/TC ˪Tk0EHC55L~NlFinV<(Iy:+Vtq;+$N& ĩ"å&QY(XrC Y P1EA.\ŽQEg\+5ʆKҋH;JTM5P+ f[VI~?IOwRVrV. ETz'G&qW8 IM幦|=,{"F_VTM^Iׄ<+b/ +y̓aeyb]OδiX- *Geaq]g!dB/k:!kHw?7י,Ϯ_✅pZGzm!@@Bn Kx%Q PVtn`-ْ%˱v|1xs!&2Q_a?0=,PKƺ+B?|9uRvm/FPlթ:֭7CiH0?$'5{(\OgBH>`oٞ:lc'^9[Y,xPqa>owlEA|) !O*-|#JSM5fR@QL~[Q t32doZḑMa]iq9"e&гN% H5QZо,* YMVdCT(|qV FB ):ƜspٔXn$=`I~Edyyjhd8 ^~ZP^ha%AyZR@PNKEbE*~)Xh,1g)yĀc(%FsQ(#UW̮Nu?ld}'\wum_ԀyX͡[YX*XzU4K7h d;vﶶCu+ֺT/b 7vYpt=W"0O&9H{wddFH_U w궊~uYő )we EBtڒ&8L„1OWN4" >WPڹڂN~y"$ޑۋ *xp/n(d:L+|s.#ȉ9C&]f[?Y E@E zrФ0^S;璀<sY Pymcmz9o7 +A9 1\ nSȀ+ }(MeeKMލ: üaLAOݕ]&Rs?}EQ,VgxbIKI1?u`J7v,d9Q&Oq0HQᒒp[?p{< dPWG(-קŸtrŧG8)ԨU&VPT ZBb>-W.V1Zh !PbZq%3{٫T{<}j16d6e%?cE̸eWQ3H<λ2s&, _hU;,Gn"-E! LY @nZ[)P?wl]ҎR΢H I~ؠ^9J8@ku]6BMB;ϞM#-::jP37Jl׉f95L^U4ܭՄr"áyZ'e51zqVໟ|fV/P,XlMxC9|*;0b/ Cτ^^ \eF*)Oɝw;rI KpXg0~'1M#N}KUU%*߶ԋT7' Q{h;0G{~suH$H`@lNۓ[,TtHPznl!7XD-5nP+s)R \k(Y!\\r({@ao(8>Tj0P@&T,ĥ,bˏdhX!M 46YH_~eiY@ˮs|?zj(+jV eH?5zT긲2wka7WO]@^OvAX7MV*r<~pRq.@`8&S]mn%X/* CD|}C/2lw_0q׹hF*`2Cpti8( WB?M؊wgx]*Eb4q&PC܉ SW]M8^!Tz$ڡtTg HZN?Mph#KxN ^Gh[NektL ]ezk< rЈJ(],vdZP+gR /wilH\e؃ KF7tur(î9 t{{eӑgپ=޻|) r`Q1^rҵL7s,=Ԥ-(.gr1c^`3 ]Tq-c(ì=YEN9sۅg_qٍfjxZνk5vA'g,?#ĩ!ʚ:YƋbр,<\HTL˚Q#wľl聁wҬo%MLgFI '4߬@ E_!mhsr*-e#s{}W9Xu_+PR &XJd&iEFLxYz3@:͔v i&:+J[~J]'LE3ևbB걌7絛ƶZ6qRf16mƶZgভՙμT;6V:t(TBKiQ 倸U ڧٕymg% 2DK>S".d kt;bfaϘSRZ,}niu8އ('\=4lX`5^Q>Pi:qb!`>0SY`H4HŃ,MpGߺ1$?!5lRc֦˅LԄ(q)Ppce2ӕr_+B?P@f).^w|\_}vʒFpIwd`zjHeyV/oj6+?0=vj+f뾸>bM^DhлCvmwhhB vܹwD,yF0.ca:jo[s>.d ]"Vr& 7vh{K8t 41yuGenVMXEo|s'nC0o?w ([9Q?+Y%(JBl>;Z] `K{= (g25`^*-mӠۧOiJ?WsQo1}xjp> lRիt/}bM(U0c +K3IfaVr;%m](}vK_Ek<ȣpڙZNpk_tth] ?FMty!U)xĊ>FвJI+lI+JS]?̊a尀i mu GZt=dKj:L Π5k"M2{x,'9ozY-ߔI+%\Ϛb}h$ x)PpDe .e+Q&3ro+?i*7p^ gwurj' _l׳~a^b]"?/&< ]<("֞.~c-rb@ɶ5~.$A<<9—}Q+]#+'}s[#]yE&娙F/o(Q(aoߦv o@ZV=xկsӁuKm@LlmcoKt 09 Gy6}7Iq[*(f"^ 5XvrŁ! tK%UՐ&,Tͳb0וK ]&&j{7 %T*Nya#8җCKzEEi(:M*("] :{wd U r="߿],&YBЦFv2P2ep~;/W7lJ6K/[㱷VnlZ9loy&7R2L\τR<El ppYqBNe|)(FU3Qy9vp(>C\bY{ ǟEȌv,Q[_45:vg Hi!?j:?6acg],%+!^7e)r8,dl}ǒhDHs-iQWYp]piH3kqL2ŷj#IsHpSyxONcv{ҠʀZɏˉYG!8 Ga%887 y8l":V卉 d \*V ҁ7*Wklaeޢ\S}*uX}ID5{0JĶEFN*ij: U䲸4OVܞG!OX mۨ{]6^)QD=bg3^AFf9HǤK1g 0&VhAUyZmy1/򠋈ƿe NԈ8)~~  wȥSFzvӬF;˴ÃeNM?'8!Sq&AR\KΙigwCevnxXLU3IGNkI c-Ư=dx o3Ux Ϧa a9Ȃxf ^V?v#wCs0dݤ)*Q'*!I.6K`6Dx8թ_ծ &h:NȌlւq)xrĘϡ?x;.LϷ %Q2Bk hVw@<+p0Cu1 ;SlWr'~DTu`tl2] MW9Y%1y%.7,uppsXGĈ\~7ۏ F1o=3-S`9jpSwn xΠ1 ND}rz٧^oY_\K (#4@O 0XmDE8nPuv4\L]H;{/]] ;!//LdN͗zriNYZ ~G?2ǁDPM*'f3#cTy" H()iAD1cfR!kz|"gy+O66Dn0͗B#S9pݛLݑ o\D GQ6Ak@D胨y9N䜃ꇉ]|uӂ~X=K3PLRѪw֔C4oЂܶ4tye(~Xn{8v=b(j5XH/S4T.7)q毌^ʬmۋ#Qdl58|dT)Gyw4csٱ: :)ӝs*-'0X/%83/7BEC`$3,(9@„]Uauv. 4w Ƈq!~2\ʙ<=ch]^8]Q('W"ю (Mk]+^i$oSxvr2QKf&(+!(;~{ddTD`Rng9\+vy)B+heVKu33A A!*=G"7YXXibǛҞе"b4VKx-v G- H6Qe? [tUp~~/ QU__CV\}W%'&8!r&QՏ`+Y-֏3%@*FA+W(RѮ_/7ϝmnE0vKr|ZM T)s|2HB#ߌa+;nZQ5QK)(_ ȋI@r7vpXl"BU2HzZXK_(vURT]@N>CMq0\t`uJ[!ZZ!`T[3NNޘhlHS 'N :|a15Ic PڡgE5"+.$9nwjw&sչWK^_yu4὿N=^aeM`SOΖC͇qT1:߭evpnl(u$٢X N }_ޠMYb \nESbC߽_qtI48V1˴;TeZR(5$ʶBǞ9ӰՄ8'eRinx )1VU:C>rОezK+WVg骫pGYz*╶x*!,` y% I|"0JGa:G6PSk(A$2~ .$Z6`5G V=&d߱/{|]v|QḬڧ`ZY/ ${ɀ5-O0NTHP';0YG ێ%łVFRAcHk'UEW> rr:"aI~:¬DSϓZaOy7(uQpm]iJޯ[D^1$|al7` {}.FcHɱQ]ȾE͙^J6pXsr`S*(`zOFAr&O5Im `=ȢIӸfMS1D`~$ʬ@u\X<2#Fo@l})4kqcS]lhd?UYB2T'pr/>8*]U2 nY+@evSk-p__W;<`i-~%ny,6^=ItK0y(J6١ u]#ig< CQcFj-f" :J'۾1=N6mQf7)CHtN^,4ִ$aHpdu,?sh:iWc0{`54b WƺYQP`UlnYz.cE*ƮY?zΓZ_+kU=N=X 7gwNgATz.ψNdmAj?-# LFI׊;Pq_8-wM ƙL:R ljT&'&ToU =sowX5r[H?~cF &Z՗d)۩>@Vsd.4ˆrkHMAZV,2=ZU7*Jq_yDivyqHu s(lߦ}ښi:K #5AƮVd x](1P_gE+cKCO/lH6c3 EV_{L􀞆Zk` Vb6O^/<3p#tYi|X9g X CrVAN- 4lw30 ,m(;'0+}6+]G5+B<7;fʟ[1_ QsRmt+C8~kgAz햃ӑ~qh2zDC^=ZDA6Rl圊n1|zh9--= Ns"mBdxv. uUGD`GVбis BW/Dpq`L+zLRQ#{})=ztǷMxv\QoeK8E?.h`{9t׿kwտZϓjQ#a64 >?4` T 借L{` ;ZjFA)A.ria׊?l8BR_݂sz xH'Pgmezn6NC v0ռ湀6\=uQmF%իb\[Gu%=OΖs*4qAՔ4[`?*b\ X˔.cE˾# r>Fh8 "+gaܸ[fIRpOZ)c|Ë}cbxp/0=Ilf؈_ۖmbm 2NߔJfheO`xQPGϻZM:<);{`t }FI?n7n$H֖lbP2~;Dz ‹mfhB / Hn[.P P?Mx}<LJb2:Z^(+Dy@B t9]-Bcضf[zΔ&H}gq,rl1D vUI?+(b).E8Ki@ b~WЍE4͖b{VOGܵL/tzxB/R+XY9ZkTK4"RR·mx'.|\ȏ?gc:)"YbBٹdLiDyCYyvqJ>zUV\sB;8ch52vG˩IZLQzpeavN?./0:}:0 @̙®/sMCHkeT¹!Gn3Ͳpʃ8XL.Bxۑs4`^ 4~"J~FQU[`k5?rSɰqK(j8: BEWݐFNjEy7PE7Qĩ\BpY_?#ya󝗭l0Yʫ41gN2}W%NDʏHzZ.gnlH*pOd_ЬCG!3\P^o|K[Y$NtE'37=Һ>?ÛK|IPX+TZYmZRR_+g) ]4_Cj0+pA4b-[5 uTsk0oQI3.syٔ[΀Cz. ˌG+a<j^π~YUBdfeuro(/J)E(ոH*rQw-Uދsn݉mR Sj}!ԦxM=lln1h%LzJm IuvOƭ15G1u9K3+K-Q`ZsY5JTp+xGC+IDT.(\>Pbb;P /4l=vP7駙Iq8=5Ԗ8~f=̄pD~=wv`yDp ;8Nw<9v0o9GPjtI`ehi ~rX7$^DQ[{dPbf1LO=2F)=HUw "?bEOM ֓cnS%gWo lܕIM2`zI=L*VGOauYz$\"6ȬdWA>g=gIu<6n`>Q|S取i3ވS7)0Kֳko}R K9j:rkM_2WջJi_'$6M\qa.ٍ1msj;_?67&AGM"N d*֑Xe.5WBSE|ZcdJm}mIM%Mk'«0Q8 Ͳ>Bmt,z#5_fNK:#*=Tt@ᣛ@L!-KK AXwm^:#9 s_;P{'NQW@%ջ ;6Ft.hvA7{WSͣەӆ P%: UXtTg)t'+bk!bMfo Yf?T!ύ7'/d kT7sEJ>-l0kݛ283.Kba(NRT2^X&e%L8bni7k,בFټ~NS^>FoM=9?ˍS:]9l^5M/X?9G]#К+h̜ؔIJ9562G3؊z*-|^ ZyptRs,Ģ#iq8 li鄳 {vV`{$UF)Y'ǸeF\Nxlzu7CIJջ^ɋmޘ&u'\.ߊ#μ˓(M"v"w4mKd'pZ.vK.Ȉ?FȫV.+ˑ;2'dQۯqEy7M^7XRҌUPEC&uyW@Qn>&Ů49 i] &壣_1)?s8.:i5oQ DE棽9}f*@ȁ{"X', H~_ё "/!7|@jӠ6C$S]+lclj:xPO<ץ }?e<(\{gE? Vt+)ߍUfЯAR#(S$Ci9f: 6 +sR , h"[n-jY\O b)N-v^&' S{${ƌT{‹pd^v&PVw*fGL4zD"tXPw6c3P$"ӯ WpHė* ܿγh.@X̮1s#퇵| .p%W#DZu6R\bvt"qp)-~V>3WGw3D/8t>b ω̷z@XmA:dU?4(gm} [uꍞâ]]8{cMRT8=`dΈ#Bm{c LaEMWqďD`>Gއ^ZͣN6IF;$7 KHGS3aSz>KSȠ sĥN{sd>=( 1Z=7&L_[Xm?NDHʶaUkO錙<@ '.1pDŽ"`<҅ۙ[݋*`:gT95-p;a۴G,I"`0Ud?l9DPz2]\Y#( Ɖ/z n>YhR-o.tK(V?Wơ }% OdaYC9"'˾;pUT̙{z[tI bgLcd۝P4ZA7"# gûk>Ʊk252tu7>,ԥuQI.J-;m#FW+c獖,c1e l4lGrR-}".MC S`T[֩b8jb0e3fh뛏<+kXH0fo5w&vQyn\|xJ+-\jsSk'X?Hzl)lx H* -AWףnQ6r$Zt%&)ka>imp,跏!WMq S fU2*c@eOA] U Ɗ@TM_bG |B6< jRxSNڻSQa$恈8dz0a1sykicuY̢h|;)nP GgL o `ͺpdeaTZN+ehW龐qXVa,' ՌP/4 ju}>P4>\L O-=Lض?YPoi/$}M70zkvAٞ+^A]u~D$H>7~dzB~D?vEc] #VܚQc8 ˠ3!SPðAln<}]a檅n6?L-!lg;2yAiч9i95t~$rZ&IhJb1Xے]8*:y`gܶ*nI}/ϣ Aj;9j4= !K5oCA I&OKUޜ! ãڕږwkhGrhyA3*?0q,N.fHyܶ8oc2'D#N ÛN1gF;i%ɇpQk]d bkhYgT0ܑ#1#;umABB`Hh({^{G}v\]GuL GY87 }5 QԉU$שOKE_BS ţ9 yPz̴w ItHUkWD9BE@I?UpdF/z ԵM&T*yKow>Da48< ?wLɾlCte†xlRBt{0N?\Ya2]~tsNAI܂g!MĈ{sxș,Sj3[cyPG耼sF=yJu5hHXk8 qSi/:祒؆0R͚5<>$wrh@Ҡt.u$0'(%~> c,h{X@mun"91"5,Q#bd 0o+v-ϜB[?HqI7WF퍩C s/-I4C9E BJ<|q0r6Y''! (AV/U˜ոIp4Kxio&FK8/I^tWD06j i@Ro\!]t XYD.J0[Q`}:,k(uQh*rYm휚~ ^^eSm,j-@Wlbg%l{jQ|!d`1 [ZQI?-BTX׍)v~י{%[N]Qck[ɥS%+_<0I%GU,SI ,8S6A*H4±YNͺ>srQ=Bg"hvd-Ἶǚ(Btx k3Z +DYW5Hٜ@x/ iC80} gڬ^yI9PcJ]XhB.!aZz3~S}o~D L(:|n~B # +#ϰ.l?.<[JPNH-:ۂkb+ J AoEpW^/$΄NHsMb,Qbb/U!hyx> wAԅ#`Du@Yԯ6uoȫw pX:ĔB:\+̶vR"Q/2Y_2PcDYQ&{:Ɣ4_ %m4^vtit=˴ůExC"Ud>ª:}@_W|#,@ m4 ~.BѢ+9hmV\⟀^+uCkSqNen-;pX _dT\rՑtx `H _y?YxOOȋ1"jw/^Bq4!E/_xX c(iꂑ iAƉc< U Io֮$pc+aЛ8L ΣE'=S2GYA0Wee?]BNK0'l?͕}Ƭ-_kr3T׆;{v܈ Ȗ|ӕy>3/K Kc>0pu>'|_|60fޣ8N>?bOh~dK:V¶BL~^!(\O>^edSK bkm3 zK5sPѼy>Ryw38MJn1$r+Dgr1Nɯ 3匾H=QЗIY E8ind%GQԟ:7/JgbPQXW seHR/8Y әrDK!924-FLBsSoJzV*3B3s0W:KGe=]So bsH"gG>o(S{ʛ()#*&+o rDN%ϐd5ZS۪ZafUw:xfU>va,9WÉgnN>ˎ(GxS¿cDםyϘy[ x(e_u|~sLT<=":O@N 3s|0YXiV :?h,!^}4xY&xӧ8} ZSl` | 6so0rc4Z3rzo^'c&l; GadH'QOsaeJ퇚I[ 3hL|1E+w-cñgvW95o.l2X\h: +kOxU´@ Lْx8=SD eaܾjl2I Y |b >XI XSa6jJS(LK wSJ(gˡ]!ΖX4sT<-O,@[I{ n.[9UmE(q(Ü㒬dH5'd3zHWUd3ب<j{xs=#+j;Keoɾjgf?8oV4Wt SmRf Vz XR9Z~:P)~ޱ"u@x .%/G7%DzXV\[ zdS6csidCTD,?y_eVhӰ:^{>F?=T6du%H X:s`;xU=gyc|R@"KR:\5N!wBفE.%́A@j8oc()"N4J֛JO.Xz\ܷlTwKt&UǷ/5DFj ׁϫ6:XXF8vt%?ӟђ[cػLZoDu ,G!vV Ytļ@L7y vuʸ?&=kǵ'홥Y釹X&}Z@'bw3+b29Fjaf4PTLxԩh.#Rb ]@9p`ΜYdF6%(ڍfJ0 9"ז6+7ƻK ^5k\nzP['ػIxxv?D% gʇB淑FÙ @`/RƺU:貊,{%14@6KI?X"4(^fnRD*YXG*kjNtŠ N TY]KjQ3P@Nw:L0zaS @GF5AU j<T[J`Xtv3л'ZUpy Q:V[]]XKgKM&}{Y^d>go42H+2 < -ˆnu%8!X!z2 uA&JA8,CEgh_~;3gP:87> bbVySŌ;N83QxbY>IJ@Y-^,[App% iK!&8Ka8 f7My_D ym߹ID[5oݏG>[WjJ˺ω+Tϔ!x!Sm|kLsylJFJle6Wb"__., %԰U*G8o{;` X2 /90뫭gYs1jfPU5hy9)^ .eD.g7b#82O\e,ŻK>!os{4` _{1X!d_ H=X>!d%MMT{;o$}l%~G_@"]dΰ.{!ǜ$}VݎR SObʙ"gi x XqjDwRjHGp~)#嶶: m8"9/BsjE.aoSk R##)jg x A;ޚ HGRZp\&kzP}JZaf킅: 5w 𲱎!>@aեa 7,-/mS׷q|hݒ5n=,lNɞev-k2ILءw㠽M[sa4'Zrh;_^" j`^7rQ;k4cRݘg 8*CXk)eP?1UãSGbR+~b zW]?mngaW{Q@p 䙆 9@Yw3?O [sXM|}ؑh^"uq/3"ީmOiMQUW[M/"Vѥ}+d[gREuHƄUvfB{s{B?h\.d&ʭ6b>3dCϿ09KMP\+9݌uq9zoNϿS/v̖V1VVKJV4~RM.Kӽ)ѽ`Aؽ)DZyk3շt Cg~4}Xh*Wv`-.)cZ2 G&`Y cցȹJ*-wWٻZي;~虂ETM@5ɗoۙṟKj.ۅNĄƤ̪h%F5صi]eY[;hVq.;^~Lpv+!RGqdԏ^-Yñ m*}RuW /hjh$&AIZ5VSCKWjv{*j!X="Ė;"| d8vYm瑬A`vA:㝸EH|_3(̍V"M@Ak,<70Va)9j齧Η}[ R$zX2@$Mxf(:g\3 \qo KkY^~Ù}"y')=CG9)VtkH;ViN\r^ !o2-ZtϺn3l;L9gS?(Rލ4uY7'pT@D4S Sj\L"u3<T!HbГ51? -Đ V-cc;|{"b۲30ELVⴎt 2=ZKƮDx[-o$M+(0*ys뮌qTkVD*z0xjWx:QvGd:n{R{,kӟe\w"$s5p{+KcY=3La"Dɰg^6* j:;:|,t eP}@*82i|JSp ۝g"Ql);/]+S.GbdP- 1Dr˪cBnۃ&!?Ow 7)3nt#p:E5絟7,"u 8JqlKxb5d 9iY@{JiҌGc{rQ8N".Sp }-gK# $򛌇,7y3U'~tuTlVKM/f@ dFH6MIR%HתmXT\7ֿsry[" &x\Pa۔P7#Pb|@[jU)'%f ߓe}J)2$D9gt|2 CO\ qfx%0 Q>vDq:G CWJO;D\1M@|_8>յB~R R4Nkz0p_MUB j+(I,B;6h%M 8R\ `5{t#2r6T~=ܻ?f߸~~(r-G\b6 0Rj# @C;0;r6t׭>W'1fw) #^@*qSmK8]QߚS"L^ܿOH5J=j!' LkPD2t 1Hxl#k ˃$9p;Kϥ.-Vv84lsA"Uz=Lċ'ʖt~%ZJ0c{6[}9P"N+]:w RбZ3 a@SpBtwoȂXXmGZbJ0ɩm]::Y¹n)F#ˀ [o+4@Gܫ]3=٣ݤ5GaXE ]Î Bj{B& I^ 瘎iRa?MbQbC&[@K(CPi' U 0ym+LK =OQOͩvjڲϿ)"3@mc- tNߎUhԨk#.U(]яJS=ptCυuқBpǨLdGS^kլe5$ImG0|1O?5RU=0 tGf ^]c#7n7AU~1 ؽҁ4 N:^@ \>K tuћ`;E|tsN~xz"P;lrGUViN-j杩)_SXYud(4[GZJ4SEl$#=OoUWhGUO=WW7!H2s_`0{kP,!2mh[~q5:x|F&&|R[^p N ڎglG A~{!&YP!֛bᏚ, +?FHb3MHiG>s^B!)S:zͨ'OaDK[Y{ϕE#. p[buGˆ:ɜV0 >a\h-$)o|{yfwtz͞v|J]+c Mjk>S?A}"EaPZYuP>Z#9g&Qhv "*YG yBbqzY‰7Me3b;:9 ;1q(uzDT+K:ƪ9q+>4 ?!sٻj4>dLZU%RF(|]@F.4Yo;PusOXBfX!a+lNBkQTZcƚ﷊oЯY%!P0;fM($biaŚ hCD_*ٲ2zc- yg qL%Jʼ[('*!M9gb%Ew]RImMďdaMVck^ fX rXӴ c$] \NB# VI'9MnKjϴ*vDYZ-Z" 7_Y$ks,TBItx:jUM)F~{2qjf𧃲Af>#,EM/L:PBށ$9$hgf8$ӄuxb)Q2sO(ߏNn-P}e#.G7ŧF>US ^ AYWp"UoH7ȴQYrlP"N+Dnb -ZjZ>J/L2Z+k> [#AY8H .0Et.Μ y>q[k<( %;&A֦6d{&S╳ͫ+*L$׌4cϝ)Slnn5}mUnCjM}ڊyB߁4-1E84MjmV_&@ ~GbqΖ)*)g,jV7}Tz+x_ت~f.82\$/#5e;*<4z_ΏSy X{cyit PqJ *3%@, 3: qosi[>̠@j!Bbu5QH]HsVȯMG&87򙴆yD=ө2kc"]ɚ.o< 4PEp %F'?\ TLn{CxZ**AV^-Jyt(1~Xy- ,dfs u(dj$~Yh3"Ldc4ѻw dS!aFk\"ERr6joUpr.OR_DH#,@woԽX^B4"Q{[>Sqoo Z>ݭ?yS`בh*y 3rZ3f%zz~~/6>\/CVӾo@4_.ZhZCy|b;'A.4?n^nG+B`2 ؔ58 bScÊAj\%j"~BiSQU3Ba*aqp5x`Wmuc.b (, F9\]E~cb(s=>nNØ6e" JwwO>FA?z? yٶ~ xiDo%)B =Xseˎ ÅLbԢD{Z *3?i.u7cd/mc_XÕ++eh󗞭t]~{6 8hyΌcr-7}l)>kDj3 R b$YuNa.-Ӧ`qA4yAn=Kd`f\3꽫,"Uyb uˡp5!Lqj>A4<6BYQ5]&KLHK<)_h"FFCXՠ@ꆑt"/r+^vfCҁȯ=+^bM ^ݬт9rSP<..#ƆȊwrꞥLbٍѽ}a8nFRa,{o&`'gv`5}Ah X6wlRz6OGE'Ѡcl3XA,xM:|r:(Kծ*7 ZD>=j/$Қ}5HG|,'Xy|ty|kc#.C:/C=V9:$V+/Wunf0Vh̢);PuR׽ǝęLqJ$k"ER23Ρ6vIx](rɉvkFO#*XsULg#6?Ͷ,Nǎ53wGpSHY[ۢޙd['FɛzCn8|=ʱv0Q}>d,H{}s(fF0/б6noLrg 4).d ZY)Ffb> k UfmmUzh v4!8o+DžTGrա'gE 3=3ݒ2 :M Ct⺹3 e6L*l(2jH,Q нc9̏IߎsZ_>,]F%fZBF1IKk2Aۤ&ifsf&i~J5ht F[k}-F EOfA'M'd;%[&ZAJ=Y~|xP8B)ԡ[ ݸ4E6T;d;&Q=&9uͥy3m]9oN9^zF4B.g@x I3 7./u~ywA x ]k>nJN1"gͿcNOt;V޲ GdA>dCY`1 W  ,]_} HEeoSˏxP:hBqDo1?;յ)ԭ /P?c q^E$g-ߓ_x[զ!,\ql{ 4!Iз)%`rp>TNQ#Bx]_;z#{-/а(Z ?3L&qgD19bɽֈ  :>(û*E"؝k`Zl ~mX^復 0g2\T[$}˚Pyt~!i[(ܨu $KW:}i1LMfv~߳P>#oy"]@s&'}M*CO-WtF \~i̷!L'l!.3i 'bX5Cۮ!"L$S!9b;NV~'Ir.#Y$j Agd ӜYjF+Rf+$U79ࣿݮ'0̈́r +6vgo- m g{4Y "K\-g;c">Eo>p^`'N)&3T3[Ga(MHR2G$:3/827 'e]9;mlAKm}̥)?X R}2o&Z2g k6,ޕtJMb j.Ƭ"}|D=g}fueք<i i8:E#= QFsY SU{eeUD\*?cs)}!'ԧONJT{ƄvU]6TiMrO<D4li-ZNsk"@8`%LplLÉ/u԰wÃOp\/,h%=OO~|ʎ=v) )sフcTJhI,( bUzr[qU>Iz1>CtLpJ%8db"atf9R!~ @N7Lm,&Y X?g4aKK/X@Ȕx Yἱ fS;i"\]68MX[6$.&W:I]E Aմr+vr*ksM=7)쉂gTfUԧj[ږѻ7˪%ߧIdMfŭb saym˦) Egx3EkPxZsm%(ʛv}&7<;?on_ R$0*JvFZ$'{"+7 g3F. 50]NvhG((!DVUm`\P4Y ɥC#K~=8SZ Kv_0PM>"ز5w'Š{ 7ܯ Lav,{NAAuqEIw\wI?= 感}UFIÆvb|`{˾$=ط_@fzּe OKk'.eÃ]Sb"ʂCf2T۳ `P@0fe 6 ő+fck^'ڜQi=Q \S+V=)ua"e,4띋mlUMyC:#htiDZaQrV8k0,8n46.QS%^z7c466/GRlOgK?wiWػboߺQl S:l4Hqkc6c??4ywP*J(N h7+AՈO@C:1-U`bWBx46]cmqbb¥ظ ,jFTyipȧy"lo&ca͞aV :`}r͈#u3ZvD.xjf= IR,(sA! 5C"#e~Xxc,:=8'V=k{V(?_:7oiݙ2O?!8ֽ"2f/zœNԣ,ۀNCyB|kD 'Hf:H r1\aKǿ@)}w)l֠;azDzYjZpea|bY2Eͷkw%$ZuMpj{Y'RP7vRVﺫ ?W7M O("9xCv 7To?CR^WH<+1UBɉVu+SMZfۮn 2CF@wOlp7%{ >9ef'2tsU :´W, @;N!-8z4YRi^͗"Q.qC">!Q0qŔ=\+<܎@# 6/TU噐i/~$ՀYӁL=7` hf`=2=l7w%yiP/R0^*g?%AsY-Rq.@(^Z0]T_C ¶"č15G %'&p٣ qWbY)?W-B{/d0Μ8>ДLAw~~-ͯg‹{]ʫ1 vf܄t4v4Mm BڴΑ0ꆸle8eZ(K"t+8p )Zχxf%u37xGaf!T ki:h' G>~EUpȺsJyC׮Ygъ[? #FiE#6:]oacm4#IR wf5j1!7H: K|4w`plUӾ@sP4"]RAp"{)X ,cg,oB^E8JI!b)uN +&캹4=%Ua%@I;JV7[U@պ}PG=mT,/cӄsNƥ7}|C/jx̝(y 煹8ۼ2ez5:Qnj@˻#ؘG; 0A)#VVd83h6k8Q dIJ WyTh۷bxp᪆ dRUFcZxʏ>~Ȧ%ftvE!Q 磩&{DPd\tەh\ cK @$9GQ$ 1GnH8yMto £ \kZ[)s[i;kј,vyNOp/0LT:g9kURDڀ&U* sc MG6a!_5+s8zԋ&LDq.ʴݾveZ]/ɡL) Ua"dY;N჏첽MA~P e P8}QALP^ zjX7QG_Y6H Ξ>p'F /:$>bEZȗ|xPڹЧ6.);.Q&eiR[Uo0cԔ pSST Q{3@:q]aA r}Fk KbԺi*L?9]csIY4,.9XYGyD]-\? 302KzēY)i+`\]V1Nv_nRf.!p7yRp۫0;NRK-ꇫ{nDZǙk&-)lg5vyfMiY%T}}RnFᭀxD1uώںy_Pr,tŤyj\UYe]n'opU uy_R4xf1:2eྍzg)2#VjW2/s Ty.َMGD0,Կ9TK}o뀌;?E*~lrukDHAxj 3bXN.#Ao>[TaO+)5n5B^l,Pe,{i]C(̟_;Io1K'jUU_MݦrI~j(q_òvOZ|0DC _8N,֌5Ow =kr"INzПk[Z t[y"E^mX \Ѣ8g(c&GOtC;-m^ tvX~C'\ #+cL\^†"/Ǿ@&7u: ,؜^ך={A?(h^ZsAлOǜ,"k<+0-;>x辂tu {[<&ORJ(ʇiHL?xPK\ǔu8wSl3/zTpLPO}? 1utq#|hq|XYMNdC$񙏖X0}.V?ipr W69BeNBo9%Y\W(܆~*ZJpTkMtΎS r4Dp">[غUsv5ez-HxEX I'\OA,7ٮHzhE7R?G޳#Bċ,\[qF x$Ѵldhts4^㇢[Blcf/ `+Dm44 *9.vį1޵@ޅG'Bt(+ʥ:Gղ:A"Zl;5q1SV r2߮~WM{gJ OMqp1CL2m OaN׾]Mm"m{6mOhuCR63[8ծ!_S!FR Or2׻sjW2"LJlA~wD'V"7ħΞpD6ToH ^h&oh*/ E0#BzNU]2J>%DPNwq1OqְO#:JCBl uGdd8F.S;w(9wNvINk[.4;"{Λ1קP=~4o aN6 Z/W#0Fc\8ÀTKrosՐdZoZPrN,&ȀZi "r2/0B%49BT ,yPTtܫ}mR1IԑNaޛ)1eVPOB 9L"̧b;A%-z RVo@k}$Hp?˪Йs>qInt=ogeA# @x&> 9a~"/GJm:gUZD2;'^{&W$7R{$C=c;\O!\_20ZlrQ6=؎WWLިL*JA@Y֭-^q(xs\|1u{ZR<>p@ ڇȼs6dzgAH3c 1#S)n./%zSb+~݀s] QF͟'j3؜V+WU|p;ؽglQR f6!D}u6?v1 P*;&8.^jo=*g?ŒVaʑmRwK%ݿAb?*&Wgl8-- j:NN3"͔+ o59pFk`MT~)*>cĬ -PEdh"J~2fY4qJvyf_lN%KI;f͵E;$7Zإ̳~οUrI2BN2Zn$z*sdu_0AAJIX$>ucrb 0Z2ڷ"4\9ۅB%78JOEI"?7@MPƮt I;s/N|?XquB]Z.ik-p=kdUHn'i^U#p;MS<$qnc/!xwO|J*  EliPNlZx˖('-Bf9٠#ų`"n` ӓ1˃du2x]J.I31hZ[ ph캹*.,Ydg"ƟtL|[ܟ 諍i7 mQD d}ډ.uPqR>`j+9D"J؛wrYStӋ(V5QuՑF%zi}:/8Ks0W 0-fJ4oЂ ZpU~.NӼґpK~2O TB.P+9M˄-e#R[p;\<)d:Xh~4:;Y$Bx:z< l{Ө|&Tv ǓdmK1G_\t65rXգ9Ǵ&/v.GۣBuk#}ker75Ⰶϵ hD)L.'eI!)2jAr60^sWCxiܤQHUF' 9b !AFMWK)ɗQ0STۖeE-x6~}觙u`K=Ěn4R! ?sUgc}`x;JWdk$GeHz!,\)TԌx+v! w9<^)-h' e3\D ;a}jffĉ.]Q*B~T|p z/C."ˑ'&)Q}zt:')%ğ( 䘫mme!+I$NJڨ輐FWl$_$u"]ɩ)V~:ن e:3aI 9jJeMquŮw'ȯ9ȟXC]{:U2k3y2hGq>Sie^ͷF05翗aNDs-xk/Ld[F|ޗ=Y>sgȊP %'=?;Y niO}yә"@-+3o.e{wٕpZdEbVXTr$<[d1Mx`Om8*R.WH"pX@WWvS"@0 1I ىm6S7 ==^o`&z1=յDɜD)0˃nRj+j=˝[$yg^v%Cԕ!iI]^;t+ NWArŨ[054Rڑ60kH0#qgA.NEeAĬuD57ys,lE$ ֑]Wk_o#2p/Ȍ]J%Getߘ[N}"_1[秮5KڙdN vF #J6o۞=+ S/d)-d$ Y_gXg*c,+Y=r]a{q8`Ygtfxd뛘QptW69V'7/V,/N82ȁvs+M*3 5ٝQJ:\dY'## *7Og.J5%~_kX _.MLxBJ~E"DF%*2AwT5 eJ^`S#l_M,q==1uK?.|u5/+.EAFֈ!6(.3j7l#2"1sD:;yAoBS7TYQnt] Gp [n}qG^`}9kZ042ɶ C9SC븓9u%x"6YjuKlLds檙Qj(6f\.:.cYc0!Vu% +SXɣ|I񇇡HJd쵫1^ْ(6p} vU'DA;r ZS{+MǦѭ/N-]nA`*6hlm ʬ|]C܌b%" Bh1~e zuDYK ƺL!]aPN%_e@뀠> Ж)Xq3+xO*޷d By#0ׅ uť}E-4&Y}f3vYTct3tVL~PlX+آhk4=h~5',`T!,NaWP^t4$~n*[h6,o{[~#~~BϝP>5T,a40n:Rڥ$_h3]pk|.yKi{ܬei;  EC p:H\dc1c$] Y@-&uXse/f:HT;` W1\^ E*5իd2BQ{sZRת`+@ޅlza))j z嬣|ܗ5OG z;0Z:fx+Mӿ]\S80lV_i; X6 O093ED3(~(n*{3~lt3D qM{'yz#*\yrdnN(QLPzI ~h~3sۦA3c v+Х6_&I) k] Q f!tYVRG .p-b >V\ȹ̷߰Ǫ݁mew<rfÑL/^3LܯosEi?{uo~eh%yޑ搽6#ίή+*1t: mHd|/iq)h_ =f [34fkU-/Qt:JhG',hoU49pą^ ְmIdHO_1'ty;V+PWOXCĪӣ^ Vw ϱutB[EådCRde&7Zk6!Uzݖv4ajtcg0LZ@ FP(~_K5g?6ԭ v()Gg/N8MZXwf`W~.3Aêp|08Fp;muq!bVIP)M#iNxc3=l} j"!TA3 'C^0g,pp5=fs#nO$qy&c*.Z9mNf|t:g&ցDWZŜ%$H2Mt&mJ =[EHVhJLT7e(!72;Ƣ-tVQ_\*>هXc9W#(`>b$UYx Sotgm V(5fU HdV̀`!+f1O9}xw` bSӷLsxK`Jr۟`]EKꈌBVCX?@9S'PI8+|{67 wl,vО}7Y)I2\$U.@pM7yHLϺĶ_xsJkc!<}Q0_Qc+*!ۓV^xoKĦdi7IMiG|no6VoXSNRU'et=*U16,b庹8)B:g.rUuMW``bF@s -.v(%&wl_Q/̨h_-`_LLJ='U\sqfjZEʴM?NJjْ \T~Z׆M/5K$(ss+`W/iHǃ:yHl5@TfY;rIޠ( Ò Ifz im@D˅Ǜdž͘;$gLyJ&wVv) 12ۓCbѴjDn\9 8xV(#QU#5k#<˃򯁔g!j*:vsM&}wLK- +#ǣ&iB|+GZĩyO(B4-d 9a\DF WtF-3Ft'U 26"w4 6R._w3x}MO@k'4F)S6;i"a6xS%WU!~^y,LyU"beŬp7 㶙وY?;&8}X}ee0Y܂LNRLo]\ޟ%05N} p#MNi1c, Y!%[-NBJO.8/`oTW(5D@W^f dnVp"J,׊)Oٷ+@pF Ӑ2[]pȦʊ?2iDnKy~ٌD$z)]ѐzCaXRDl 'o/OWSE߿tv7Zټ_ü6a33n jK(1ZڞAq0)c #mQȗK\i^ +ҥ[CX X$PviD媀4p/^zJ.qJ#{H#ƋD3B m8NJ=dMgMJ̆mRTp5=ڴA\ƃm<]OtEԲ8f_dS SukdtLܛ6r97wPĻ)ؚxZy6Ҡj9R$orh[F>)W3L'ي̜ r-!NAtmtlv5:^uSHu7*ժĢ*Y%΂9S[ zؐl5l^"!5c00kH9~/BTeȓܝ~c ]dHZ=B蒸>Et[5L0T8YD±E jgۭ]3ڦ-#ɾb ;+ m3O9yp o=>O<~IiZoԥ,v므^w6Wc^A+McE_@k%5Ps?yxgNf/9 $!B՜ }rÛ@F|H+Qx7Qʢaf3C "?X*,\݀ه$k$¤Պ('j +%2ʺ@N5h jǖE*;V:k/ELtv_ 6D"!ܨ^a KH, 2W'GOP O͈e`2[Hfitr&֭EԸR(S5|{T=]݌;4M9)^Ǫ9}_jO9RM"EPݪK|E c4skAm3eEk-fEڛURF6-3:!՟ -Fi|8W!1±W~R5kT1d6L m~ 1Y%O;\IVx- -B=Irna 5Vaن6+7P*a5p-kNiI47]JD\^IzJnɰ6lRLj7+udĄc0fy}#dCYrCV[Fv=T½:Ie1Ѭ-̻x* iOZqBj;r gsv|Qrsr[˯ t"2X%YOW1ELV$d1ڼ trUT\1boFhsK<$9=BʺILj^EO\C;dH;,GtI5ӽјD%Bۢ@ۇruV+'NbVЄm`uTM2xԇ^ .26&AcErN1QtX՜i\Tt/'u0I}'}>>Ihc]OͲ>]uMrjSm08i.ڬLſ7OwZT=$j?=$%Yx)0MۍZ}( ;O @"%!Im~]R3vc T'ZU5knU}j,e=P%Y{? 07o#H==tSd{3 s4ζMU[`TJ;}}HuibW;^Dx6FFaFu[,XNOE{nX],PoDŃtѰn:U$~ޘ3 pџ/:.t33B0 v::Imio1 p L;ޱMs҂<0;s$D.iVAM.YB2 E%_Stx`nj9tEwcs\Λi4pGљ$1`x8@(Jch9 8բKT4ܒ* @=Ji;@EI^e HnJ榣 BWX7V=,UJW$W'=CԆZLދcQA=n}xH @'JvUgG_[N'4ǝUI7x/f8 J$vÆoAXRzfSeF#NB0LX|;V _q߉PtrFg.)[T=1uostpVI͏B.? 0#$$ ?A4*g0wyk>fW) c9;WUݩA>:1s>;xkchM?]n"2_XGzF~G!)b7<}i\T6ѴFxp6Ót+40.6i~%5ęKmNŶ4ҁNDӆa ,rS9cud76 Ԛh<`bjms҄1C:lN'9.?(FHu4 ǿxprɇoHTֻb<|cJ.RXTҒ0ᵎMݘMxܛ؆>0j]ֹM-Sϼ?6Ki;s} AjjT'=$Be.4Hғ[TB3VHKOR]"E)TbnFq&%<>HZO=-uF~3DŽkv 2+qhIfe絥ʜU :3ߑ<T=auЪPzzf)z`I1(Qj< 9bXQ㑚I;6vQJOi8op]Fg{'Skz0Gg>9J~z{Ö/ vό6.ZZN @vi_~Jh@=Ҕ?N[AV8@oy1U=W}BU!C4$U:Fӑ$Э;VnCzz6Թ?3tk c=q!\ZC^5$MExo=-1|q)Cy(5t "a9j#gIGnsyY3mlQM7Q?NjfHk,S(.s$8r0vUO蓄6RJN=E_gQ2FT8)Jco #fw*k&&[3u>:V8ym/5 BPqt!mݞӞKZ` e 3AjFmV({GU x eSIxjqUk䰔C:#w/f'd//[&K+kL*weNb`2>[c%nTHk,pƞ-԰ ]YVW5V uq-|RQCvr?[Β͸ɶh*bт0ϯD/Y^"?A~Nl p!mEF"6C#Nh*b M+sBW1ګ@QpQ98h^&P(7JxiRk.kXZ6,%>P"'YڐaŊm%[Oa#j|Q&Qfm?+^Q>L1@Kh[Hӥ"WZ]pDPe$Vҁ#К +>&s%xd 6mq-ɹfPAs=k_x}atD[ XM 2:$/Iğ6K&^ml7f\2F}?G0w,NjKwu{P1))?ͥryQ.pգ8> @Q-|!Q~ ecN5"mdOq#z.|yvר,_ grg偏%WetB nIժd$Gs6Id{FR:DC4kDg@" ̧éK@m;PWeIC΍JIk2 {1bҦt a+-&';Iy|VAh), | $+WmYC#f!^:PXo]&v(pj |14:Ud7A, dR.'|B:qlaboR/r桫ݭO?a(lCJ/@\[ DXϖ@Vr i A<ꬊSiEnty!X'h/D٫z {/#M'7ReĔk8c6`u5܇Vwh z | džV"+E g2kiD~d]-ȃFx ^@ƣNxi"2_ vۮO1u5/C2Tf<H=%ji.Xl;xU>BM2]hTv*.kX'CWa~1g|ʳ%KJS@TK̞N{i[? ا'Y]+ab ab1&>b$2D\$zAxǠM]<,aoi6O@8iq n^|\u0).n']bAͬ )5`vjvu=* j j˂,ŧIkIvKY=DOvg{}QRG柃g(\؎>o@ mշGjC=.QJԏd_X8Tk3,!>'RW Ң-ԌN?k,0*[[_ʉF]O%$lݺ )^4A,n8<{]]@ hM5K9NE{/ˏ$(}zZf\/:0NsS1[9$K ^qr<'1Eڛk\>v;=.͚oeD!C\4֕Z+9w׫!JU؛wRܙn/c:d/NUj蝗?,P2m)"~0]`Wd"’/_FZ}D.5xr5ڜzif6CiS!Fc1ZJv=bjִߊy~|ăyh(~"pk:9ڵ DQGtڪ€#} |~KxnX(kpZh.4j5߇ #}Bp Dk|2SW6LBLo0#73yeN>8p$WKR&@+|F Z'?W[sOVX}#2_ l?.A4%`r_4\~aAARBYEgɢVQC};vZLÃ6jskeYk1%PP~nTʁ0 ȴxf.LN/7XՉs|t)\A t-읆|Ww%E^Ev@}?h^E8bMQ-A+?)w2C`#䥚Pó[/۴1TKʽŋ ,l!\d X]@tP,'+_X4{U39;ΙX2KQAVrM{@ty]V,_of`Vjd93 noN@}%bc]vX8iSSP1M6ИB{YI|-n̏D;'=sM&/MexJ%(~1&K_, ̦ +C pP-ƢyMFK ]8t(װ9/? Be^S'aM9 [K홷`Lof,Kۮ7![?5>aEVʿ/0UirH{6=t-F oVU")B^ÑOפ@!7ixCߊmR|#ֆ+)Oɷļ5}\@(Qg6Q`(v8*?Fk[k$;L$ă>B 1R}yĎU>1PpouaHA&/o¥R̚D 1F{B-l&Q7D0 $!p#(i&IAxq -,l{|PQGWgcyN5h퍢Ûo=4󲸣>[`wwMB~˿_RIeծ zS6b߳)e7HA1PV4˦'U\u5qn&P5MԺ>ؒcu94cMS5axk Nur=$ffP͙J[41u5ߤ|}b2-=`ҿQF%:LV^9T4{e:pUVPDZ:b^Išv/# ,p*5xG) (tt>/1I<ي`Z ~y:v3yln~N6U^UqZ"79D ;K@kD%IK!PK>Gk&np>ufGྚRX =r$&47_ OĠQ:]t[qBo#ƣ+)~ۉ+i!ޭQK>XՌ~݌x_O`.݀/jOl7=ût7m9_( ?d[Ϻ]g+wJ #aZl)(qܧUM)g EjAev;٧<$T+dۚ(S6ZޝqeqAvh+|?/P 'F2ؿX^^_ue*nȩEE4D6QsyC~qXIR=_kw87v+kwTrqm+bӜhv*t'ߘBs&P)[*H&>wLş$T 0|_ W\t,'&h}*G p:po.ks;!\1Q|zQ 7XTՋ BltPv}["QI T:I77TLM>XsNZ-U X*;Jn 't:vCUO0 Yi3|;gQ`4^ V 'aEE P |Vθ`c{n^,iЊeWd'{5Ml;?,ESl,DT؝Rb_*sm?_,#u)ܲ~zOH 3 -HE'}$*p@#=E؜+.:ڛ9=l$Z< t9+Bzɽe:m ԤJeo6sn>P Eb85 ց[X" ;i6 R}>1b)Jq%.3V-]%?Ҍa|F]-Uhۀmul, 7\sf'3Pmlҫ^ ry 2QXf*u$Gt^q*V@)s.[.i㞙އb7WwUGLH~[i+xIwwQ)B՛+A> `oxOV[D]pU[g]33cWY$/TOj|1gӨqKqAoW4I %:$v\[G%; >iTsv̫@{3Yi\ z!G.-2I#W>.s yo>Eg2s1ĭ=j g0B;<Xnh]b;9HP {6|9ɦ5#1;xN~hH>7b}ި22}/PWxؕ $:WG3u|t3ѳ@00q-x}TH##]U;7‘IguڔʜYAqiIzcT&ǩeB$ӏBƻ ;"v|sgD|\=3G'%漧Rg闶R]Bsp(p`mukS- 2It'GΫW Im'2Ƀ}u, QQvk`K):6*?xW&%l HՂc {i+di&S # ?ؐ ֆ=%wM,3\- 6d>9 PQY }-=`KvH@TaT}1>r C)Yjއ@Eл\-\~& Ǖ}˒Nf{Nڒcqt)C Ng$SڛܿJ>3oPИ:qhƓ,L\`¸"V,f#3QS]|+fIe| iK`ߵ^ѪGpv/yf]$51D-dpxh㔘Tŕp_۲ǘ%s9ƒPCxI6qKGfeIr~l:_qj KNZ1#<.oU\oyׅqycF}cDB)"+\p{8.?QG^bԢ(ݖcQ8dM) fox[^H ˚wUw=\G"4([zz0Qw<z7Sa4 KjUm8G!q{R=`mY f+=z=FG:{@GƖpomW3E`$I;mOH,=j]AV5-1>iW}T@~|[^$ܦBU߀`ڹo&*%SܦyT+)_l"U&4X~`R X/_杰xjq'7ʈv66H5ΗpӤ3ט,щ aCҗ֜ aUs4Ox}V4x޽# *&L }p`+αUx,(@-7 +3Tnz9%pU6jQ 1mvP[2v ,YI:L8΢l硙F%<,2O.1rEˉyhV&+L+kxbTP$pȋ˒7&Ț],ROtd Geu#q `  Y>ȃIrX1 o(J 1(k$>_Cdz2' vD-Xݑf-W=|(WXH~rGUG;bJbx+CO+q%@:Djt 3BԍN<`)Yj_Ч}!~[񂑹 V؆z^"q Lck'W^V +jR X== fW׏Bs`/R`9MʕOhVlD0lw/9ؒYQ6| YڅyQh*O.he1+c,sth&WB~89{6X<e߃+PHzO 8ͨI wl[Si'Ƿ6 'K3C ~_vn8 j+sO`bI@;pChXa;oUV+csu!pjo_bQgss K)j!~Xi=&E&b}Hʊ"V GTd M3I+EmHzWRSfPTVY㴅d1=ꇂx6oZ=ػq5o_T}EL oe8H?Xd䡙+6Kbv<ԩ>_0]1ugg ҉'W}0'n=FN ${,֎ T+l"|6\FkpzP\V=sTQL]ia5VZ!EɄM'ҐC x}z"'WsӖN|G2wo6|lbxH|(5;M o;N7{lx3|s4(UvM*J֛"1Gdb1M)Ӯ{ȶ` &_)ｌ]q8<̟EY" 45-W~I*jnи%ֲ'[V<>F t4t+ᛰ [@Vf.}n+œMK8 >]Kz&eweD,nrcZSun~51⏧3=.g ]ALp65h,yi, wbH޿$c,ˤcaޫU4u!&?@%yD}C,8ے :ܩ<5R"d.,E)ZR&:F5 yG_':7 rve4-7m6L3J OcN3 К)72_*?t.jvC*N&%Zs,m8np3JQ]<-a5w?HU`GC.kHfɘ1Hȉ,˛6*Zgg$G/)zͪ tMk o =telhj4. !$ )*o \+Syf7ݜC!SU.Vdnϫ߉\γOmgxkB /rI/7#L2:bFfǕZ^M>稈E?zvxs8>⒚:vTURy@HSJ$ K Nfne-,+*ρJs 6FB#vVP1&U\Eʰqo6vi;!v@P6L[(YEpA>t"ke=Dgq.hW5tѫpRB!6 0k)X\Q P>F ֺ@l踭0/nD!Zt{rl]{/|YtL>@1<-*rJU?iE};.Q}Q7SLoN0|,H}n,pxYIãr-!s2@˥iDٌ3Nm(ZnzhKlUDc/k@X׍bW%-8 yd65r۵ϐ-aIwdC V>wXD(2+!uyC/kt ori4o OؿlWD+7x*E\uLثƾ?%] n%u9R??=MFZJX&#&'rNpT;? 2Z| *LM, EGNLDnO XbvXs[_ێ+F3(8:??H,TJT ii {oPS8v `9S! юJtZ +׭DC-N,Ⱥ ciadV" պ}1aRH#4זa'e9Zwil x]ZWZP#F7Spf-9JFjҽ;dQS<`b5um2\#K\bYژk}t 8"g\|u JEMG(y+9u3cF@Cyk >8."ZM хi 3~9;szd6J:0f1$dDԛKPP#m%+Auc$c;ۜ~:(xE^y[upBݘuN `cK$H<4K+bk:I *rߖ?@\D xu|yn1 ilp'|R/uɸbjkƛǶw̨0!xSK7m7y]cav9^!OIl36۲OJ)[U \ʽo@J狠vi9I 1[Pb@̥SG3uϲNű}Js}.f ~? ŕMTCV-ߘ s3ςKS뎓Ap[eOt bxe}VJNb:(E/7\$jHv H?8 ض' WM71q-r]l Ucye`*-Bn'@ ezAE{<@8F*k< KS dޡr3Mi>+(ShTwڳ(*mጦOΌ<=Vw!Fލ>Nj,qwG-n zj&l !j/8tbm$)GҴ?+ p$% <K *n 3MQϰwWʎM8Ί&c1ER}v-| 9u=ZlD< !N LĘX(„fM @  i VIhWވbJN9!&(OR/`+Y$f;9"O \f.N` Z/ 0JR/\!Zw>4j2hXr'\MshIg]$i6u,x&ݡAGfқ8]RԵs+ XoC 4b<Ÿ4z4ov^jABl N8 rrޮ #T]H2,PI0'ԢtsX_+[*FG[̕C܄S#_,sD0LcQ2ˤ348j!"K/;M22L/n,8o0 m'3(A^Qyۣc᭝ų'Jy9,8KƋˌ8-NTX-OQl&Z=AAõr4ڂf ioS?Vtsw%w-3sȫQ :3?,h#͋#%oU־jˠ;H3R>G;aڞC8@{]l9yAdr9zx eݸ lwLWwc\)"R~(=@U]4ϱ++Ia&L!Z|rQŎ AA+8:x Z1O 63M#K ʠ[Ip,P1x6]\mLo\yŎ2G)D$i B<džcV5nA1-W6jjP;G:*K2F'9utd M׶s 7'I>]Jqjӂ ΓISȕcA>m2^zO]mNӼ,jteg#T`Dz: B\ա.dNцΡao;s˹5C֪1J pV1\(|ڬT`>6-J Z O?&pa+no+ z !rk/@fRx+ TW_.c{y C kCp8d eXpIy)*Ֆҷ6\NJ?mBmPhiF2 ,75b/F9 [~LFeSZe!F]l<[aN5=e;°yŻ}J;0k5:;F5ju1z>q~b/:Xv #㦓L eoc J'6xHA q~ >nb2`nm؀K7˶柛pU:ImCf;,4~ @i4S}K-?kY9x^5#KM$vnO[ss>a%M ȁ](YIdev -M9dO6c6JalyE {k0Rl?n#mU`m[5d3:93(Lxέpa, pfkNK#?ys2Mt#~9C :]#mPǺ ~T cхTߢ9eN:-h~sq&aǓF +RZ@nS8JQjJĠALNKfRߟ܈. f”t]Z6{d}8cbO1r?ѠQ|#EUbSC')q>rkFD7|NakbM] .O$U ࡼ$^sNW<0tIHɌJ !̛ N3/n'{[ b~4cwPxm51.F!}Ck (PUBjK ƀ ͓2 B^ HB/JUTˍAKqaYl;ShERfXjɊa~BHyEn4R(REò6}Pmb^Vh;LFvl[SGƌ>!K #Ko'k/~Ny <>%Ոfg3rcXOd%{eq LY 4%.Y{ u TzrOb[}q~mVHi:gfsREصES IHEcwa\+ SFiRx}mca1Lɗ mg;fAMrLOF/{),/b;1p^ֱ].2vdK,G[{;׎=䪯ȡ#O^@XEPlJ, ɬ cv-$ JT$txS1ܖTT.7gyT^/ _o.I`]n)4}E!S`ibx^/8aWyڈ->Y|-9%ҌWQJTvgayzk3{rikU%?h>ɫh*ډK:{;8#zmP#i'*C$J~ u {B;M&.C&2d-l_xy)h.KQN!`4"pH։tC.bi}6G^OMȋ'͉FЪմ?7`B1yb/3ƴri, lh^"LbTGM~  ]AU绬Lh _%3υH/Y{{)Jl)myíX%SY~ͫq1Ư.1jq;ZQ}Mi&;6yJ@2Wcb>bWTҕ|G=KOأ!MiUR%f?R^W/u.n]x o^4=knYQ:{yAȡ?^hP5PcS%1itFV?K%ț4ƬʨUȨ`yaW>$WB]oO^z8Ì,QWWjc+%CAa-xA_/r$E@QDZ+FZzWe(_@ʣ<.B5x\gy+ UJ9? fM6J{_8uV$tII!8EJ$`h{A@ ۂl,YYϨee89,)Oy$q$?=ćɑ^bE3§bB }BnJ̋Ʊ0|E*Y-,wl.u:k+ k!~mG^XAF0wkF=RmؤL@i0O-(zA***1OQwZf0YUi~ ~B-Y֙Ef2!1A.#A h-+M/UHC^xxZ)/&QG`\/m4pBK6b+4*kZhU>E$<Zp#Hj *%Fݦ%iW(I[iiv?b_)4򓑠_IUxɄNt-)MYihU.f??9 :%7yp_EAQmx/(I͝yq-' djH|:ZŰMa?Brk[P)ATϘ &( KH4b@|<køiN ~&}6dI& ɩ}uW\8,[QA֫Ht`Q/OD>vOAݽ8OC^sMtnh̺  <,vVD6Y$=S\*O*\X;=dPΉyn%3mqbT{zdd Xes'y%fo1^ gs2A+y=U` o+l16h2 XxڎNpäu %,τ/܊.(2KK̓W%Fڪ +-tDñ (?xzoj+ F3`{CF>l<0M̵IHj,Ѝն+j x_>H0N4xIqwOʧ= DBtB4S Oy4 A AɁ?1/,-^PfMQ.8[T#._)o_et zЇ^3 zPg(056!pLJ 3P>Hb2,=l~>ÆB gB 8 ]-yUK|/K?Q|zwvPF5y~(~KlURE`s5_qogaa Rs>(|6v?ͶW)[q'Lt (qaV?Y:ZPiPՑRnYò݅e+ F?.l~c'V Ohڲ- P{0 >)MEyȑ?p)&4$|1a'9@&jyyuhnU 0ִ,jTh-8aE}ݛ:pӢoBxHrC[:-OF&|#u)gkóZ{Sf\8pӱ}8G[~Tcvo9L ~ cz'n")[Ж/X ;' 2Ctd&('k%]?oAXWV Ս|b=7< Dbv\A9o QLɳ^faA}-M+Ha/T}~v|H aR>{JT3of%Ԉ3,x ݯT5 /Y/Dhz.DN%sV#@Z݃r+b˞']x߸+9N)sJSm%E]d= bu쁼/`q9$/<}RMjnDF!&uA{pbdVs'1<ڦ&={?).%=3Qs ) FC{ nLU^RU2;FcIZ{tHȞmNrf~wU8HgIAsheMpUWBFۼėA܀JYzGt+{OJ?YU,~ B<6rLBUqdpt1U$J Њ>rSQRzjh n.!bkG#Gf5l Pb&R5r. qDW>5.+Hl$e5SeXčLXiHw8-#R7l9.xL\+̡RT ,esO7xv>f7hqLHTq %珆DEKm2}o=·+ǤFNTSK*Ǜ= ~f6bIjmG,g=f~y^'fa~ LEIxc㫨Y>u9Y)-Ar{Ip7ssˑhmY^kByC O5&m.$%*PDgTco?ei#ŝd/NNzBޕTzѸ#Om6fh":O !|V5'YP:Oo֐V&t][1jv$[Bԥp=0ר^Ca蜈/L'rg;IF ZAGbOv>ZH%zW0An"x\kY4B!eh1NSHW;Kt;b6c1m˟vd.(p$*(*&Ia  *9 c1V"\D]}၀i pjڶfO^/+ێ'X4L&#q)Pѫb$ JL{ Om`~^b9:k;O::5j!e bLNіoJ8'ߡ}",4 cn7QWU ?S+B|}!dg r&%h);l84m/ \tN㝰NZ'F]"s&"O A_fڢJZ_J"T֍/fܫ(>Azr)^aPxL]蓫ɦ}A;1WzJw,dA&_Ho1aiNAon3LHERK0~n0E<=ƫ,4ˬuq[yS%ҵL|Ky)JAzyώVzo#}|gy ab U0S*bɂaFD۩:Z'e#pwCV_!YxwiJ.D&9R8ГV (Ņ E\z'yJϠ|Bje 20)uqLD\  րèU`bDr9XW$TEA͊,/KzHy$-30>I%Uf1lM71rXD*3bsɤu3xcFUߓ!C{JLȁ<2zdf~ pz߹rV>!OÅ4),Z7SpqS_w@xn;\؛=ip} `Ғ!_A;sibZ/ɗ`17,3 fN3]RE\&HRi &p[Aܭr)l2BOTXukEKp]hf ȕަ*^%^Kp\c{xOXA813m(n|*$H}ZvD{i<Κa[IxhKc+aǷΘ8(ECt8qT1uJTY+z E@+v!BՖV}=M;kDѦ8QF9h(rOGg]FNq}_vCl{D ]ug,xkwX 3u7A*حG A)Nh <EOHtb$]tʊ[m<]]f'@Rk~mvuI4\R'oq#W,E6ThڛDǶޑQ{gM:Yi?oVv>E̤շ@H޵;;]kP񩁔Ti>=ʻTgjx \_;ITL)`=FOP״1z}htNQN(,@VP b/,= 9sX:8 |Eë <:N舉I߯y2{Xr Ry ;l:a p,:Nk(_IQt6p{b8q|jO'ĎC-q6y?m|fN&yl?GL3ޅgJK.̵wh(fp5)(K+Yꇺ}ii;_3xp)t}8~eO죇Rh~Qʐ٭9F^jMcOGz,j7MV>(xףw/-ߓ6x* ԗ9meܲ#oUȏ|#}٨mDɢC];ډl[qrUp>9AQ6W@ɠ{-IL_|_%:S gsc̛):à[hG!#U\|YmA278"6:ZjbʑsTw( W8zRĪO_Q@O: ߯E%5J𻍺>M-yk'/x rn dzگؾM [V ⼌J96]=;2V/>αBUI jAKdpF:lۓڌ2)v4fumN./S+J2΍? {wB1l e̓7\4RW!4Ö9FjZkhv`@gcA>~xKx?AlWҾ|>WмB"tA/L i |U}s$tyJ`C̺UjpRZPRDus=Έڦ7'{E*b[ݡpRA0Xീ#!ָuY>}9yqh`FV@Rpѓ;Qj #{jSh c#~{zpFxߨ RL:x8ǟAFjI&SKX1'x=w)0v2L'5ɲEV3OQm8c~k%wg\>hAeR_ Ӗ9>݉~l;*ԑPC ꏢ 4q_KQJ=qUY,DepM!裙·9iƗNdb\-"HBI%snzTߡAE,n$ٳ*b͌95R lYNE1$?8w;kE$xVI? 5G}#]8q1L*|&Vg@Sll(-<.kvScM 8Gs$>:'hj6ڐrd gDi@LRn`# ތI+z9őo졠g8G/H)MdhuylfLS3y8Y&) cY*;Q~3Bjb*#>TUv7@" meH/ݯ뺙v.-|ȖA% ?EzWaU8 D\MԵ:h.3$͙Սn?6pbbH΀h8*ހ_;O#R ,DR<:]{1.mX۠j`_Ç.[N]ʔٟEvfgq7bJT@3=%ߘ>$d"^0He{􌦼L] {@Er^CAj,?]-SFVJj:ŇIkz\8z}L)8вZ/A_5B<9בLjnq1|f-{n#g cQ2D -Ru )(]jBZ'+>5#Ehá]\g11>Ҷ]Z].tVWz+8B}JIE(#'w"$M$C/RoSb~ 0nWaK&'ѢdFṡoMv@idUV=l5g~\ZYg&w/9Ag\4'68*l=)H-_XA+ 2H6:񱊔cK.gh'vAJ(mX~.O~ xD9PAE.;e@஡ͥ]E2*?ENᥲa_8 S4oz I`l/J`ٗF[-e@T8BHIl\bPZDKnpNٿ&2)aeXd:pɻQomQ*p7'HSi8T$_xն Cl8茜&uQ 4)}8gqdt@iAH":^A0{)|0B ?"hxl.E_p})FAFw }eX?OZxs6 71:`A*Lҩ #`0>%T)W[G؂c`"u1.h<сS䏄$ DP0"೓|޺Y 4c)c&B0;K`ʬ0?wElxS픷C5>Giso0Ën%*O+G,!0(K{tobu۵%ʍ˷4+'K msBAw1URNIZkM^B]TS()): U؟7#t))j?p A w s*pof5I;pAt-qF@(WˠUP*;&2𘀬-uŨiښR;Ԑo>(30V=>w%Q73݊-0VNN`]U=r>et4[_ql&&q.EVx &l טJ~ mZmyiG9W) MN~VBk+% 2yB (LPEZ?/xn0cx9 UL)=|a?7hь#k,OHc!3:sd#J7AOKE}]S*3QY&I,:*,xGЅ Zc+5:M+}\^"f [..'S4ai&[Urc_(0z V%n=\ 5`{$-:cӀrZ#>;?W$7!`L9C2j O3oյ]-5y1$-SK@MGe9&+MP,[cFegkS/CtyZP S# Tr.{ /60a.O '^hlɔ~žo2%af~9YaѮϳ]A;HɂBUaf5IW-Yʛ GÎRk'C«J$ªֱX\89MUe3 -Q- 4I1˓A,zKzW+mC"nh}dH'&dI_g<+L;sMW3(.  @>xE#S3Ą/em)ʼ"/=%\]ԛ?yC-8Q|* )%C6?Aa_DJG&or$DpLmnʅdV[~gҔN7c2_&r S49}HƲ2ZƬvmTXqe-厠c35VLwkgU*lo XG()tcޮ=zM@ w-EX0.\)ĵf^Y~e3V|A5ıĖFLDRpxD<|fe(]0<,LR+~N?[$tMKK v`ԓ]qIJls<l}hAyZDƂƹjTBf IB, dais&fuN`۞@N997]ZPK# 9Ml٭?0ZrQ:n9"6ꡀ |i_É@EGl>wiTg@Ǵ{sdJGkX^HAbv MvWd g>LT+J.gy ss° ;X̘&iVϾ2.4>&v\) p.TD$d&x9zh.(HA*1>t%g- OEyFo1jE]~]QJG{j}LTuѻ7!>y֢ s$\1=z.TT94$avQv {Ҕ)@ms7KgÏi K֜5E͋Uz|3X'- .E6%@bqy) P˹lO>%Oާp#E9[ 1r0hp))/ߤ^P 9Һ8# ԑ) (kݵ  h߸Es;k<9^r!ru,zRvHjR)a_ÑHV^B H^\@hA8,/Nmct'멎h.RK,2  a~ b.A@ŏ?\^2S&Fdڷm(7,YCb{ o4մJ2]jGX0v*>ރ+w ϟ&8idh D#% 47P yy[#?MWN[CȊ>?W_&mF0SJroOq \uLx%$RhO_oI9Pfrt B%zG$5/ BbCV[Nߢ tWݯaV`m:v5cwHܳOVvxI$I9yE'I$n"f#b7L#^]*0@{ۧӼMpd6F5ۼ CQR?jCm/ qmKM)J* <wוfSλ+z>?^&w4͎XdQZ8yƛf4D)W&#*W8ϰ 2|`rjy:/wZXP xf@B$;.⿀ RQ4 Wz@q{Ck-Lv_Rͅ-4G5`KNa[Vy%'}]J=,[a:毰,<{!:>u`pPiPZ|Uj_vw Q X#o[Ɖ!@G1bsHbW S(#<yM)<śAwZL^Ix!cᛓQi- !Ȁe3~gv?JeXttzcIRD-JmkL*>;^A#lT_GU4n>B,rkF Dvʲd|k&hCjFӘ].e05o]=]K4Cf5?C؄.8!Oᓕ{7%RyFyU=+:]a՛K@ B%SWn'9B}μ`lʭvm)`;F{E9ǩb8XeA;mo{z Ӻ0z1!N?p[Q XT{{7$[Xa+hҝ6\ĩYWx0MF8Ġ-~T%:UxOĶDϮ}D4s 뛱h23z6^cx:3s,B)g[>LS=a7(g355E3[=g!š3W#-6t ̍E4͸ܤO a$D*t`^x;ZI$zǭ7t lj3DFQ6 _>q^>Kj7:w r@ZnNiA[QDEp(o /m5DdyPV%CR@#*V@QgUC@s$8 vZA&fK d5kQ1ŃSHro@ Ui>&(1PX oR\XЎcQXÌOV)tNU!897nnıK< jrp͌r]>5Tj4&.QO~Gr='hХkB6N |_\i2nbb6̼4+>r'|cZJ4 ьVSG-D߸g"xyMĜ=w~< HfcNX _Y\)ͬWYl+iT :~ FҜOqMXDdUV%Zd>k ZsX~sL2#?r< dJ8Q{>$;TdSeb/N +h%cc7:nXΝU/M edr"[Px0fxxj0_umZ(7'o;nLa9p5hvYNkolR{tV3(dpRwlJL/bbw Zi:8aA?8cRWI4o;RԠ[!5qRU#ȚOc6\77J*Os{Jor&ʣ{aZMTEYAo>jAQ6FcKc4(k/H"N|i^t> -O6܊bruuʹ=pޚ$vu "b-U jpcUS<:=}F'l9P ipLz7t7|b0ߺ: Xk_~A|-BG"#/hL/9[u1N݀tF-@I0ܜᤈL:H!J@:+[Du2]ajJ`F->-if‚7.y\7q\mXUS(ҲB=C^#QgI7Xo,pmr2tOd eQJp^N/`=#l烎V<"yKS9hf)B^F!T;K >e$N!MѸY=6lֱeKUx2xduB>F}D7$۸$tBYվ}*9ٶ;W*_f76 3 geE=vBV2,r)! F$E(]sh›ճ*P9IK&)97ꒂW.9]VD:>(^zs-KBe2zg"6ΧG~Z1 j0ThS@j owrZO`ՆkSFKhMIƎp0Ozȃ91X&{h.l)7G+2A3w~|dsZ:9&5]"ަP>VmN&~Sj'!(=x GS({apˆP2 R D|BAhD*#&"q0}y櫝7T(5r{~~#ंuدv%^(8r@!]f>sbe2j T03iD;jWQlȷ4+ "(cjcD^5xamʔDY Q: 8x5gDGը|w:Qĺ[IRF4'} g\lFe76 C|2vm7!)G/i 8!,؟&$S45v=pT*[#XROM*uG0×J׺o&DhI{>j2. ?!}AVoo$HD7]=ڭ^/d9j1V9?! \hU,f;JqS J))!11|Yk4+ll06+v)]b}ۧRsk@JO1 U[S.RR<2^Ca67&s<(u0Z;ěR C_>cDOqhhGݢbuutac7PHi7(}).Y.ٵtɊԑS``}W" )]csꙭSye&rVeܷo턵́/z! >? ;X齭IO"ks<%XN 'N}NL8<Ӿj 8^CȰ^۩"&;s0}"jE ?;>vfo-]$R ]+ߍ De+> ThAqk< 1vhZv"0A.`AFro w`<#r8zr8`*,NDeƋ*#QA0Kۤ$#⨉*ѓ 2:}n7#qV($>9mu2IaՖi388 @ m/ 2Q溕 5K{tvzY.>ִb֓/*w]}*\ b\՚B'[oIېހ9SW^ayS"&ܨN%rE4.M7ڕPEu(ႨNvd4blDPD`UՇý򶡾Gzzbkƣ埍#Oqc'I> XC壾[cL0Lc̃ݣo= @_rn.K#" $O 䒛|Kq8$g= yVyxx)hG} ӣ "ĕHpdj}B Udu,*iW]" )H%Tvz:Mcvߔԯyآ?ꫲ4务|Aq~bd2Rk*D8p, /qLDE%/a^YXs ǎ%%#Ht}SnT] ,0apX!b1C|e !c?o?H׺bطQ}e6U4mBVNmgI&ߏOx%<.SNF$'\i|5 `B>eRg1\uH D2q02X<Ŕ.F/@4<h|G# X".7)^ u0J],V+; _SʋNF"R L(C8T?{(EAl2dUs%he8` u*06bnT$WG<$!uJqPh0d$>Zܬ)2-$5b?LOO4\ 4gs ,'˓ߘjB>u=g>o+rfϩR[%^`Ic邱^}4ӜكΩy:rMq* Yf+ Kd.I H<ȡI{n@h`bc(%qmp:5fK"ꪘ-qtن3tT=+$auGcAHMF0X˶ T* y|Y{.#`UxJS1X\rp{dɴ;Zec6͡b< 2cMc=҃^?3\O8&R!k} 9[J-a{%q!ys[{q|HxȎsj{T-Kc9 e>vKAyY7Z-+A7:B\GunT<際85T;1mu?/4M^c@<'Ck wCn)޶6|/e؛WPo3"ifb4<-/OG!yerІ= @ P-:dPe"QvyH9dByhZ-ǘ>@(㕶FPFOK@VIzljޑ`3x{ΓE)QS/m_^4d0Mz:jtX૛EԙvW͹1Pp~$; rpM@gy&IzR.'{Rut+B,& }3?Za6Jشgcp!JO%ޝ\_%C$! #"Zk#'S>k 'B(ݏ:sB8Y6  cuӁoTr1;*T]Y:U1fjhmo06?@cpbHU x$+O `n# lPI [jf:+ےhp}Mb p}Vؐ~a/"8OЄ!,8ǑCDyS+=|*ou$s\4wR  JبK=]b5jyzpZ/d!&Hy.BUT@7thNvRW)ڋL[vd>@߅XOVAwYz`9W]L?*TQ:{hne/>b]QBB'bK!+D#6S8 N-}&P}tצ2&!.&KPP.L5ye]zcիŋt_ZC?il4'6$J0V%dދQZzZ2,8(t-KtD #|hjȜ ɧꋀ*uď rJK+2_?*sg~sr#iitwb$rA=."e-F/oz&.1ӈ"%zh\\M$6g~؜lmto` x/2\X''!daݵ:nmsf*ʏ$b^xQPƷ~hp t)!!DHe%;n9x&Ń,䐡XA$1lV i|Ѹߍe%Z߾:kfB}:h:gh? {Ff0_E)r~*<ݧ#u=Ng-o޻zdTjI 7+)KNrW7SOe;%{%<0@Zf F=%4/Xּ7洶=S+v+5.H l&aszLAn!j <FE;5b9=!YFRh64lq 3ς߀䇸R;'Jt1G#Z}$} 8?-R;kҟĠa݄TߞuH`rE[xȄݹB% [iO&~RZՌ UMIAs5ҹ= N{F@:*/SF,Ӣ)ްdn8]ׂ8ۍ\8JU Yvo/SNK\-k#1}-E7&pCzxtIk(oiW,.` r4C\@-Vo݈߲Ǭ;.{0)CZ=Z4pf`a̘\P)؄x_'n8Y[BZwr q(vWt l_\/ z_fA"5 *>@+ִs{]}Nr! =xŶ$b9uj,zYrߩˠ8S _ dUsƲ# ͢%ĊQ 6AB' fCZ >+(,~7>Fa; sgZ_Qη^h (vJDqwVζ&ns8C;[qRWS H` '^-QTKU n3J,)}ӫ‚X~: PX!ve퇆uwIek1gVg ;y|_/q΢܌3AW}3oM>@ G996jq%_PHP_rc><X.HҚR[boE nV 9M r]!>\h:7_kb;^lyӿ/%8m:$:cx_гSNxr-2oHݵ‘v6aWOBo69=ʧyh9?C!1,]v'BY3d}нU}}3xXAnQ(ZLk+w;E`3 H4*=*,XˏG_,PwlP / Vثs7?Xc+gt[B9巏~\InNƃJpBX+Zt[ДrD]bP^3_bemc0vQ L V¸6>S?c"PACeߔqt̾r0U' )b"ƝWO|ȥb4VDu izVF"{32I6l(٧1V9 _S+6޹jBN &3L5Iרl`c/;x-6g_lm+ٯvq Ǭ`B$+OVRZ\@'`Zy6yaq|ϸte'B{/:f{ɞ.,PQ,yQ eA X%Ht os5YDV  hF\}R(rZVcEE^F/bFs"79Uά߱Nt!ؼj쓅ײjTSp55sT'zT><,Ce%չ<} vA#!ؼUnؔ+J"`eIP9PGpeh+ NXy| 0O~b m;Y<0׆ƍ.¦V)!pB/Qte.9f_UqQS-MO8 o&bHKG& q bN 4Dp|ю2$$=tyxaRrShCA* Pz$q[G"tВq8- lsWϦnrSxV-V6*oKaE.V}oy;ѶeCFm00["P8?4`-IqTݒ# %+dYDh}{2o<8*/ik%N5WάYӓ }~FTjM4!ot |a$؎;zمrA!GA~X9kF}j z NwlσzdEfB:ԛݏʗ( ^:TF=RJKw9&yK,6g%m+%6"iv* NOƊ<_'2-V|21Kfʿ``vEΌR-񫪶:0o,ffB2#վ{qU4 j ,dy瞰QvY+)W:p{U0/H-'m&n#ZL"uIrn5CVFF-N. 4ϮZ |IHe&qL݉3js uPtn]mدUcoִ:+x!b;Ŷef0w&=8TFxeߨn9goDkkE4XTS 7̮x},FQ+c|6[eFRSXkj46mb/}$;2rOp;$`(pQs3E%0[f'/I(ʘcS52K"o(GP)M17?(KDucyɷ,_*Z3 fa!zRv;]b.e `nCBiנ¥^Kc }X Kg^^TbçxO)Ml*1Ԕ= >ܔ1̣_|>xQ ulz|lPv\φ[!LI_ yߊEI6@j!i)l>m7;Ymư'Y؀(w.?82zp1GTR*^Tʊ}x9gs`˂nK3On3G,d0yȕĚ"ba̿h k$nz p E>7j4&~Fh(7Ʀ^Q_j}}NJ+8M}5 &oj{< Oיa[r17G'Im@#D3sਫ;-HlOpu?<:P 9G('l#:DzjPi &f\}d?Lay9 X!/q }ûvbŸpX%wªUl)p|a7KoG'DAӧ *ٹJE[q%At4RĸX|[иt3zܪ>Y/aWbu㵆 )2b^&Bt6P0@\bi2:IvIߍaDjp,, nZF0Z"[ F`7<ʙz r2Th2s:y'긻>prˀYZeah43[.vo J؞r7+c[f+z@ -`0PPܾyLn(#T/"Jߺ>0-G*}6RO8,dzV(+Đ}oL8=/z qJ/m'x݈6Ijz &j FQ+ KK1X]A@U.MݎjaE3F"LNk0`-߬ཞ}!}-xH,L$?^JQEQm.XcH:FٵqzPXTDqgmrP alLAopmV\vN\>k Dp: }Qmicw}e&P{eM%l)ޮARF,qg/dYY\xe1"6 m/Z~_mBQeub[y͈q-Ҁj՘!qCT#R F̺զ+N?O H"U)N"3Vbe /=' =y {g w|'{W$f9KfL'b1֢Ύ~mS!MW z-\׭SpXRۯW蹳+ĵ"hnzz)!>IV)! 8>ڂzIi2}in ggK->W~BlXX?8oDϗ>t,nT/pjb(% i԰^9xgAAxs͝? Ky9~n܅&FDqg6_K;C4*9P.֢ _C6KM^'*spZ>L&6ѽWC&0QUW…_n!l)lI?(ihjD\ \%Q>Tciۋ_6o]dm 1QqZWa| X@yW RbX|yr" d1\1ˤ룏'8Q>8/"Eh#{犬i"~ĩK~ƏkVC^Zm /j.}씁ݓXHR0bAVKSEv񽱹2|,T8y1]WݢJ攖~` a?zAJpOLP2 ka4^Kk|hGn@JfH|sՙXB&Iz`)>f+^H76=يZ.{43jNΨa74U93hqOFOAm.Nzvt0A@azߘʈK<2{F5g$}IP[ʮOYvgtl]UK,)qlN}?Yk@ mowgzӣ+1{C4𛀇 ̈b)r|O%m l}^Rq"aC@>D6t,t ĈQ}̻pZH͠&V\vϾŔ7ЙGa첦؈QpLɤD߭}3P3dž!@5=D$c,ٷ ~. ;'i嫈-[Kkȼ,ϹX&1i54F2Gd n[M~::sן a.a3!2f@Iz2[lPZεE]P.0Mv`ɍFN0ۻeXNU~A8'+_|WkL2H2Y Wq;gis]K|[`nAJ>E|դBxp+o,-F! 4F[O+[}}Q@KPJ4ͥRl۠8>t5nVs7lF5>o?0gmhTAG]/ye;fd͐p+pb2 & lEF,>.ظ a-ߣ"$̠+:jvX~t/:vDJfx%u|ç1i0D9uSџ\Vt(+V=^8a}_JM+ .)栫 <3baa%VbPw SSPҮmWO{ɖ# /99ǔ &@8qƵS|Dbw~J )(S` +9?% G8i39rO2#ߎ(t\6攐吿fS ljI<ЫՍbY T7}O5^6\Lm>vޅf“^ᙾgلo)զ}Q:bMʏשMY&s0a= 'Nq~S9ɵN8p(dȞrƜT= (~u {+Qa\紮hmܯS| $*J`6<&I~+,d N tt.Π}Bw^_q^=G܋eM4t[M6y1#* R[Wo'f*ew^`.]݂fo洏O'$5 |ng(<CUGՃt:Ig40+Z!MwY~` Jca#zu~m%B #vQ3ֈpy޾5:T{f 3nq1.#pթԟU:KxîGՋݲS'ȑ.ӱ`s-nq}+\Ee@Y]Eh#w1,ҳw@6#ݢsJZxJ{\0=UxylxJoБԄwNpsYu*؈!dcRޯ7g֓"!GdWFy7}'~3^x]̴Ga%R7FORwj o 5RBT/C a8CrXDYCeɞn0ip(ۣG'4iL(^ YyD\b^]Ҡ3;e%|":STtA5iV L:zf"%>y,y ljC88½78hatj` i4sR0JLf;DA~ c0e }iF}xsrx7}_T bO;;ũ{=. H:MHn4 `&$_ËY'R 9e.JD$^-t:~w-H(S?EEJ<˿?j~>ճU :%C5p ]⤳}Ewo_fe 3N{ $FfK6K,~m] A|6w}*_P(*N +҂mXiDR?{>+ m%,;4ٺJ_wb.?J^} c_1RL\I2єZPXҷ 301pQzI؎rV%`?kt?Pk(䝽C/'pIB$a^mjJӻ3?jOq`] dw+an S+Ow( HLիr oSo@aR|K*qeղ F``8r, 0)}}v^e$M;XO{cMS`mX5Vnݺ~@KjCt̕ՌNmiPW^֮7Lz˃VG‘ni aa}7+c%cTp!z  v/-ܬ`aYR|q4"ۦjH U G53~ Pp)Eh46%7Ihfle8w~7Pr# Gqn %Ke:ܷrN9a3!j.<{>&.[^'},(a.k_Rϣ LD2#vQM5{w{(Cr|4(z1aX..璴S~#.Ht#|rge)?tSq,GQ{7>/8 @N䕽 ̅?Sm}lSV pW|#Dp3>f4|ɤ8я'cL;72L NLh++WIFg]OBgZxmJHMb6|.b j{l/SA$~ȴPw'Y|쟶%bHjd3aɣ1Dx?Rju{R15%Fx40X@T)sqDO)Gd'XN!gTJ@DSL5MFf> \wŶ^pc\|%Ec5aR`‡S! \_P\͡XA`ǥ;7(JqQNكVO>2z YK*?v(Sfl j?`rYWaetʜiB7(2A [u"P;X;ϔ[8ڞDeQVY?QB4k _4+,M f?/VEw7یuRc^;r5E3GFG53lY+~;5+X%"9\g8(LU!biп2QD&q>G4U-% kE/K2[!C$_<)m@ZK\WN;-.bl'O;- ~ҿoۉU@؍{p2ց)DyGN_de>rPSN2n? 3OkNf3)*[WgDPFh8CA|$`F;>/kma_ 4}'w )V<$^&w!n^iBl@6 sW$%SŠY:;`+6igaۺqRW $} Ag - ԾԴ5{J}e C\#~. u|6s1>v aI ]qO4m5~oC1WI9IE!#1QkW6%|̰yC$ca0tNb(y+.OXt9iJKTB $)U4S@eI6AVlLfFD80iW\rO{OZ-; 1HJ%]4=nfh%啁˦Eٖ#`z։G2ٸEՓ'xE?WPǩ[pGBDeWL(z.F5dмw:/x+ݹkˆsě .|^-ەp:H}A_ f6Lܔp 윦 P^ Z)vYěhuAh8^ERDLo 'ԞngrS.)`߽cy7V!&rzǂO[ujlWajYE)IW@x PYwE61VTibifԬG$aA7p*VRf+([{O ;IY7ZyyH%}ߌƈ*)m(wr/.Ռ x bv9Ynt0PWÕ=tz|.?ƺ3vWx׏DslO\촋0ldA6{{ =fZJvI=L'tɭ?Roxh܌Me} *k<̏1?9}`Th'&hPhO1l"H5RT=,µo#Kyx&Ǫ ^'hAr*+yOn֐S5|(gQT~ r}]ZFF*3#;,Ӱ|2º8,*#VdN4akS܁a|1vEG_@jۧ0S!cqg/0b #ʄn0wϨ_gf@V_JGFZYc!/s2 I&m|>*H v*YuޫwLhR0qcW9]jR%8d[ҟKf).c\"ݡvG+ _u}!puZ퓬'ȪǼիD\x,?N%kS5I@dFP洓2! /Cmj3<4'0nʍ^d,#w|mXY <1\5[9̺qo[`_Bf{uCeErh28iCˀÎ|DaֿM`8ƮWgW R:9T3yTu1m[Ɍz[+ OiEXI ɱŘ׍"fTO뙨L",ߘ% oMya=9Mr(?gF# PLL0 Ehא%9^$lc4JG+̘E/όl䖏dΆE䱜T7\Bw({(*%m0i$b)p_Zʝܫ6 Ո}+qy#b-Iڐ/~ jCXdH^bh{53hSHo5a7Q]e=x8_5%m_rKa#?Soq Ws_CEU'P fS"Ȗ. CF]_6IC6\#[fߩ 4D҅(Q$9h 9Ȏ}sF  zF=P} IICi%$Xm͍]u u3_;9Gl02b(YKfJd[_/n&v3i.!4v׾'NKˎ;kڢRX Eë(7>慆!0XGD'H< 6-.4xC~Q^n [p g輑灘1f_zp6tX蓯|RDD71U?SU*^_d`2(M;@wޒ(h=HL !ߤ59g̔w~F:$%,BL5UhSX32S嗠<*C7HwAa71cKYgf{\yf;羒ikGNgkV0cj䆼:ڟJڪKAŇQR+ oW{Ye*2):mH%T iyn;N_:̇UMc?MxIG^XސmYbg3#ێ0LŰ,sX ~jQ#+B^S1tZkC| Jꐙ _DGIM *i~e7@=]H0}osKMi˖ jhHqep+Ӭ`   7@,5,~u UTV.zҌy[P _RA`KB@Hxt6#r8D_3VI3nO[<fb'5ꊩBt@ズC[=Cu`DJ{K q8 wbhь`0P"f]Tţ7Y1i?3df*Vfkþg OJ9)ۈL@PX d hlul2OFO]yP7|:čsLsE4+ƛb݀jn) ='/hQyP_Dtq s;3<ȭ7ȯ"MayoBfE~nh і[+>X`u9ElwtV2 uE{)t6 GO]dar2t{3gqW7hl;655lr(Tv~Uh" A Ps~wXY Yk:8(6|;aIҊ*ׄp'?Kb"[O?Uz@ )Ƴ{ r?a\HXjRjEvclk {87#Ì G%a0u,.ꑇnM͕SYfֱЛIXlҷO#3/LJHikx:vŮ$VGƽSnj!7e@PJwU&frd)ԏdqlDWw|N ?~'0 pĖ"߰mDպ3t~/ǽXoS[ç%b8PqC7ǙizrvyWܻH]ٚ/Lf+=y]us{0d8SRU삹20ƵҕdF3Co!v 4La|'&{\8GF)Uj*M)Hmnɗ쁔Ҹ t}#>z(osd,i*F>Öuj)0M#jPr}6T;:[^8ݠwv6vʦm>Pvߧ c)^=:WNbt zb(>"Ճ8~oS `0;g`ڑaያ@u+UjsEq0o{EiJ:1T&@ԛ6sřpz[Q40$U,'JzuO ~9>$|讀JB1I &_7fDLkÎM)F]46t'_l~*Bͨ/{٣t%w<&Xv:=aY@coNXwJo'jl 9`ù_^ )\ `}@p?03 lơiDN/MHhB{ͤ ٔ eӈ\WNJu/:k)#)d$a.R*'x$`HZ)rĞ*PG|T_[\Ŷ*X%cP˕/Nj<{O⿱plqLBHX 2ue~ЎPm,΂ JseE_8'2JIRY=TL\X&̻(|mlH^']uԔr;%`.NkuWy.t3Rv946Iɐ뉶pǻ4mf}k˚1яy*}?P^ha;YZca!n~'wGh>KՔrU^@bt3a4"u֗LI |[ -\>h7DOzl76bbBPPuA 䑻9+6^_s72UWo %LRY|@%fԴ{+e ᣆ]C Ũ8i8"EGXe+N97OLѮ#QS.7o?c*3#5yod7-;lTR65&M x5,M10gp]moƵ2Fowd罗\U}0XҺbEICH퇨֊ i~r)ܰѵFpG\l DSr/=wsHk}c|Ɖ.e:ǹ쓄%{C%زIW"/T5! !֐zM22]@^_< y>>uxFuUG;0]lO+3)yc(*s%DCg(.B(vTx4<޾s HE~.]Z j2 Y4Rs!͠,s>A/0g٨+FhD2Re]L ~G,Y}?"04dZ`Gi1bϩdpNc')$QSp7Q\6 &@uJټ[|C_쾩&t4TױW^}%UT'9@qv2O90v{RB'"ȴ񯛞xa>ߣc 7QI;t -v <łѫS[aȔԽ dyIz'|49h{ʼn2pcTQy2[WRN#D0p~s[y="ۻMNIA=U{_Ye4t hO-+u-&6j-9пqҕa}eA9AS=<`m/H:V/a((b&Յ+sibsfg l,~.YuHUp~ݕp>DϤLx ;#HQDX1D}Q$Hx[6ǚSJ5`[<ڧb')2x(x|/8>l(e:|Vwu eH4i qS!=AIׁod} /rm={Od?}&㕎 !;7NZ v.׺^2ǩ4JګDbAg=73ad>8\w M}SaeVr%sLE wh߶;1>Q V=PUhk܏R& 5/j&'~ƒL,0V6U0h}wKZLab/; 1y.QJQ1"OL=ȻULxn-$˵-oH;=Y)=^PWˆ oVH2ny=./F2Vo;=\Xj]N־3)QnTPr:&6 PTFAhBMb<[AxY@4K򀑙TUI{F w'_fȧ+|0qP P*h}}GC h6[!8X]a*OjRz}].!-jVa Abdrif1Un /MEԒ ŅA+?Qx:sZatJ(>&3ϼo}OQMC^sJm%@ڗF5"no}@bi- _@_b0 0,ɘRs"S\1rP[p[.&u5}=Pw!-m*qkÈӍ v9ܡt&O|\j4dyFy3C+: B@7}G.A^=4Zz~0j6d O<_EHb#8ԪǬCF(yVZn:r :9XLHj,a*~;i:atQ(Bu[`ݓ}1j1,n_Iꍀx@LJAC9ƞ]av1{$KDls,4À`Ș7tZdBnvR)O/meR)eoRV;.M{UFJҡ77,"n'sP,5pb*@R`)]zhũf)]eÉ$l@Lt_-몬0yY?;pbĞGX$ׯ6#\F}’GS;к6F䍓^1S sH%A(9 X5imwBH&w-ևਰ* dx{>po\h [Sja"8]~cfk eR#A`p?=oY=M` 4V<GHБYck#?FRLYyzUGEGn =&Z 6e[69 r*W0|TGJۊl`Ӵ3-[,[`a_pA#'noZg Kmԉ5F{IM"z ؄34rƆ@5|g``uUvKXzwh#.% QȣCCm<1IV|0y7Y{ kbH7kR+Rn Hנ[wAsL,[_Dk;yU]ܐԴ9)a4ԓ.`_GR|ν:݆z-zml&nT"{/,TU۳yt\ˢV8}$o)?'L*2aNE%|[m~gR}9L!-=0y,ߒ^1׎tsΎYNI@ܨ/?*bkRtOͮ~t7L,}0$5 vVսg7?n,s meZmLfB,^ 5ilICwtFVŋ[Y b9%8<!Tg6N f e͐:.b.k9`Mr3(/өtg kOUS&ҹ^Ծ0]Zn=ۮ! (Q'%3nNwo) J`sy/xyX"9P^Rp+5f&*8,z3AYQ5y+Њk%0DtgN"Ґ;HIz*^%D OZr=\^z(Nڌm9LW)ыu<Ҷ$̥>:SeIfO3F&k_*vC" Wgoa߽trFPc{>ϙ,Fn1Dv( Gq=VNXN>`W2ItXm A[rν7!͖}D2cQsww_ ͏؃F}[0HR nӪ)d N햴 Ҿ|owtevdj%d0}jh;4ږǯVq%Jw%B$HAs~}ݻ#X_Ί5rCq2gy:Ud#зц;mWb1m@N5y2)h\Ghܞr|R FRZ8F*E6FBϬĘ:4S( ʭb05%b]?SLܳaD g3T{G2RZ'${$A"hG&:= .M{V')! 'y˭ {OG57J8/U~g kkI/iumn 2ZkGwҕ9)[+ WM<+AˁMe`) mPj E gW8pXށκxjUy*wAKZ .Ά6_>%ҍjҮ/>'JX h`_ L橶1XB= n+ յT*׊;3<' W" AP_OF0\Q U wԇf xٷu]eo˂JV.5>8egӉP;`){9Ic/I&ܯ.ѫúk:i|[ѡȽ$YT7ǥ)ⰴa[R >{f4]6U$}=ۺ-w7̵$b.\CO$.vk#ɸhڐ'ۆQG:x흝Kc64,ZKHw p:Y*-ڤ̃!rPd7_{Z@b> *Cpc v zM$m VR TˡrF(,8Cq'P2E=V| =AͿFKz]BY脀$b^O:|~r"E<-|t:y_fK-<`ȗXg7DW&㌼,`T}RuxHqoND`4xMn`~uP1}}G~~3_k ŭEvl618N2^#<\k&)Wlx Ӌy0\0OKO=zZkX(>L#׶3Sޛd kLPܒ2, L O>_Bm"uΪ;G^35-8ěXi#u9&m4E!>> :Nc} X;J,nsPWOȤ=i)(sS% /a/gɧnS:h_H{0 dBF@J zkm .FuݩZoEDs8UcF56 P* w~QUf'ÛmT3Efp {o->_>4`*JL& vlZ6 -ʛ:?3 YԇUc]EAKz$7$cpp*Q R8޹O>2kϖ$VGݬCO8qλƷ,=-xulw*'ĨvD:=X9_kಢ,jLs9\.zZr5@^?]5Uq&k iG6O4YNѼz\Iؔ=np5fYjmSw3JݎAPJ{?YuzG4Mluه.PveD}l"+3z F-7.+v}ړ$smXSz(Hձd0=O@Eew2,NMgI.߫,./K Z r5rܼ3]U=ʱEkb^Pw4}He>d/Dwv c,S)Qp-7v2 q-M:S_j5h[ĪR6mpf7g\>\]l3 ~Ӓv;|BLiP @D҄ɛ_n8$9"TH7GY5oe^ t E$e* q>q;wvnV*FIW+FFF_:?9aZe>}R/9%aE%ڝzĶx$ ڽ.dž }f65R9: sMvCmB6Bg}WmxbY뺁L O83T:M5XMi86n9rίD܌gR3/E][VݹgVerވ.]ξw7]_gb1ϳ/y eD'ϾcǂE4ATc #$k`K||A%6Iolg]iP>sN[n3`:=''Ǯ^~izp _MN"|rTfsK5͈KpIV\sݡ綴J ;a7sAuوƨxZƵBu?t?*ioŠٿO't3+Ϻt ^&QsSOV6|D[?MM qFD5hݦty WII玱(`FZcx48Q6hg}Z%bKv4j?z-Wze/ԲJwơ!mlMMF NfӐE۵1F??V?WOP+(wt땫cC?q4;$}*ȪЁVgN\Cr[1!!w?ow<_:q8RvCnvBAODMd%6c]?:d=L𡤘[  0MCd?`$>ڠ)CZ"Fj@/2\a&P5t>A7P B 'N\n$۰$L-n*jn\%qP'0OKQp_xJ+tZRBtZdJ^ 1a1ޤi\Mn& 4 Nb[x^m$#.O&x^~^ޔZzS_&iaK2/a(vlI hNF)mjl|&i#OO](2pf^@0WҫﮐUAE)vőmcWRv .DC :p<^9| ȁZL~ 1Er:jeY7m)MMUsoPѺVX )QI?lK(ÝXضmޔtԁʰqO]a%59J/.DsƧF<׈ xa:}k;Q=R0ލ,Z#MlΑ ^)gM&]LTmG؍`)[cgbP"%N>N ә[Wk8i7R2lp'XТº oAPtdƊ!M1&t0%HyI\xt9SUƧxjHue=V XgC' IgOqxiI!rbzhP\6OfG#,`=)Gڤz6tؖj $i^0J0甪Hƍbz-e f<ل t'vP$g_9M9z؋xo[XU뎴^{?'߀#(o΃sur˛)GḼ|HqQ, X܄ &ir]^t> >{ {`S.hMᎰ8.2d=ꣀi p;?b @Vpp]S1g!-aϚ &=L] K0ܝu>o o<~Yk6ܻe[z|tgǪYCi˰CҹR1xzwLH=z,Ocb!9ei`~`_T 4s%X D:a(r*XN[4R$DL*e5Ps1Z.bUv;>1,@pC!p)nJ"z9#3=~?-_b)/(Oǎ9$rn:vWiu1t  5,?b<Vi־Poܶ cČ/wt<NG鰕aq:/•˓,OK$݀eǤ%8$|jfTNXEFWcMϕGi5 ]Z֫пbʴ#[ahSLaȽ3.jYy/4:ۑ"g_FD;TCnB;7TZY7RN򅺗%\NhP‰I<6.nrF>ŤTQ¥7I5M=ҳ `BNfeTyjɰ4,^څ0WkSߒV'oUj4u?"?{aC#yު:z(CڞvS,n3x~(G@[޻DU"ܺ.iU_=<_Q$k^3H" #b("=E"#}[eXw4p08:u@*|PNEgWtxkUvFf9)#If%Fc>(3Ū2&>B|;_K4nAvp~ٻM.x- a:W )ЃM.Hg<_;EJJD豎"ML.C2V)y}C 1bd͘%N1Dh)*q X m>I"~s1 "'yN!ZonF9u(gO; P7)3jХ{i"ݲ|pTnAa*V)r1gt}ceȺ%_E#[>W_IA>Ga۩%K(%wdO4ZyM%:ɫ3W% Ll}yNT8MF;=34G;(GGQGH2iT{$0&]n:`оz2 iZ{9g#p9ZgD22ȶ[/A]p)SiRnbB%ll͘nbh x/0!k]gn{S[ߥlkc9]X|..cۡgH%>H:˅(ܨ_e?VHn2Iq.޲16U<߃fWvr}VWsh2Y- BpKz B2?Bڽ8n#^_NCКLi0g薺թ'ˢ71FI Xs i)ȠZUbؚj?$9LH)DŽ 2^fIO YqSL01QIɢv[-$, w) ` 'r-dF1 2fWgekV4U tۜʆ,ʾ1{Fdk?v/kf)h2~gN#َ7b}K ZF6Yj{#KljLl#2܄5iVZxT$GH#^#p6Fz8)yG@,{9p㐒䆬DDeYF|rG?"e< L"p`sCiN pb*."]ƊD>?7r4wVδ*q}q$ KLB6:^EY&N/k_i溳®{o@F&X`۲Ȏ~te4'$ȈM\_J䦺[ k ZWgң'Ⱥc9XV*408c:ԔjJ%<>oﰿHat diS-eϧA\J ))_gHJ=]35TU?Fx'nxU_4gm.8$iQÁznR%` X̰NrkM9 Զu9;EaIq6WEg*0eED,l+֗ZjKH^-|~*^_ӱ)8H,?wx rd~v]nW] T.œYdL9"[N8F;9dAs}he&&lWtt.ixPt0N;B 2QV,lۚIN8%q j0mQC#)(8FSL6!rV9W?Yh@Kzq^jJ\,:0SJ׸ )k6+"B6kԿX Y*`Vz7h qbe3Q=u`k;+ML)׃kRhVyInm'K8=7L"ʇK.OK/ǘ8pO$$}f| Et >9HS:%6 ¾ h"K7eJ^dqF tR "3J.rx'npiCظt v7 u!w˕ٸA7-Km Fߧ+:cPEhFr6ܞkFuCy~AgvB c-xq^ TlV)Qqhs;?3mWz!g @tx+60Ml) 6EBa ޝNN5`%Tm 5wS8ĒB r^ h;rfjh0zoFyI&ڛћ\r'(b}+OM G྇B#Mn("GQ.K> 4T^C 唊SH?]1ʘ 7eo)f\ ޵&=>'tP$Հ%y~SR[LXmmFx,w!oH壕n±Nr;"PJzQ&vk}40I$2@Fo̒u^-LKW烙PѪ1ܻ8mf,F*g_OM^OG12>[SI10WhbW,N7L)AV[ )WގQH5nX8m\3a)(T;Fao]QxuЊP5\}xݱGk2 v lO¨(>}nZ-K`ui$Hi}JL[1eg'"QЩţjIN8vEWC4ONt޲^Sբv0i,Ѝ +{* +ȳ%=nM0BݯMzr"{9%!Bp6faX"-(Ԇ$ka(:{fzrاl(̉ήnÍwډ2g2rIG)xa*OD7ӂED+ fQ6jo\6xpZNgqloh4EZCt<7ID."w+JH"0r5d0w[ȍ`Pc+M .H|u{yqF=&" gRcUo( Z[򷝾3E&8lTt09ke/Z)+E&!pK _ Y`w_9e <5{Gz+~{/]>V;uxt/~@ G1EFprm6{UTUbҋkݖҖ.>jOVkUZfK7& A8rb<"^;:,ǤpmΨw`fO8ᏐV^iYh+Ui\c`֐@I`RTʯLN#vz ^S+.+_)ϔKVΔݡL-A%%8"fkk{.gxzG3 )R\<؜%)CN^v- z/Fake0tj:=ڨ03vjcS^g+ЄBM=EۦFůQu C\pQPc*\Ѷ\UM:=]siг'ZFh L-`L+͞pl'n'5flLq!BGVqj<'Kꚑ;VR6Y뽫+Sa7|2y;]TB;u3R=I-'Ohj aL%;\p# &O˺Q Ѭzi&Ы3wU8`X%#ɿkKx ns8?Pm;[>j4ZPl  sbXoT';7@]'gLsn52FNvv)E\S';YiЎ_]T[Ӄi2ĩP;HGRC EnJ:y-{{#s[LVZ}Nt:#,H>Yd[2<"Usk#˽@mSY'q0^e:'gVG Y4;O=)5CE6(Z8`㱕ndM:JsE7F:>\j(NЧKo[.EcoMqe?Q-xL\qkco6qalD-7UWߺxie2B_w[7zi)뽧 R[d/pXW\\ƸۂI$0ns nm;=FNR4! ێؼ { oU3Kr Hty_*f{TLW,sy){g}N}TĵVC}=4H?n2xF.:6er+p:maNd{TMC*C?z@S!'ːI ֐}C'Ae6Qxyoj L!M!$mamz{AQ{KMt~~ϭy/V*C)nbZ3#qӟcxRXL~ pl ,x0&yӌiS'obYX吨38¾^D ѺCa]+L_H 'bR?Μy)Uo  G:Qeé81Cқ<ϝD5bP5|M ?+''āj/CApfEjeT,Uq3r=`zmP\Jm_+dzݸQ[n- 87f;WM6|f<_j.`Ofes\~'u%DnSy VN/՗1pR =vs5[bKZ0m n}xww;x4/-ZKr#P><999>l6s}CoD._0yoTtzTtoNOMu:mw7;'v8\9mwFIw?u7׺݃nqw;+7עվ\ RstxxY -VJz>*rsZm׆K3gΞ}bs齾 }y07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!![S^9C=.v5*Jf?|ǁ1 W YZ