sssd-ad-2.7.0-2.el8 >  A bחU]]DzI1[ 8 Ueo:ԑדt@۵%Zo~2j18D&q)Ci;뷛bte 77Y |ǹwJJF"AT>60Fd⮫DU!bTeotHL@M`F!:K 8Z]1aԇ1@OFFK>oLs)U  ^\7$]rVS+`#>E]Ga'GU.zjŠ -k q=$M;{}#V vv;L>^+Sc"dE3(?hw-&uq?cCޔJґ& nΌ5cd9d8862679cdfbddba6564826a49714407688dcfaf3b95378df8ef025f9cae4bf3ac1e443c9c69d441b92534c29a95cd81673cbחU]: }>uF;)W1f8N9*4C:RܸvD&7jmL;)Վϒ!0RE]q͝He3ǝ}|M;4Ųձ<mB t'862C vTxt4bmck8_BeMȹ1))5Q5 )O%+J0D3jټׁvc7`7X`z^7t HّSNA6L'I' GM 'c >7rKc._!2̈́>o0-zr7x=H;{ץлM`#X0XDpeC PǕ]•*ʊ憂m69WvJ8cT<~dpTĿWWerK}=redV:4xRre Fɝa|HOX*ߩ ܁铛0>pEh?Xd   2 /LR\            T   $TFlF FTX](l8t9:dGzT Hz Iz XzYz\z ]{, ^{ b|d~4e~9f~<l~>t~X u~ v~w xL yR TCsssd-ad2.7.02.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.bx86-01.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&pK8L <O AAAA큤b|b|b|b|b|b>b>b|bX mb/b/b/b/30796749d135cfb36f17f21b8393839fd05f8699a6541e1b6dfc5153182a318b870d5e2d96cf367f73f5d7f3f60bc2475a7c039febe56c06d4f01334b89fc5ae8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903592e52fb8140159c672ab9a536992081ccebe11e9a07c6828046502a2d090f9decfd6a15f456811b2122e0786a304a85ae5fde3cad5f53993abcd68c598df0814aabd964ca3d353076904b996fd67432624fa71a00ec9e2cba039b843e0a8643350b529b8bc086dcb034609cd865dd500f8e0851857452e2377f34153d2cbd2f../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.7.0-2.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.6)(64bit)libndr.so.2(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.7.0-2.el82.7.0-2.el83.0.4-14.6.0-14.0-15.2-14.16.1-0.el82.7.0-2.el82.7.0-2.el82.7.0-2.el8sssd1.10.0-8.beta24.14.3baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.7.0-2.el82.7.0-2.el8 .build-id6237a2558a643ca5a2bbc0d66a0bc45518246bf9dafe99d056bf0ddf8f8a2d0408d7467e9225fb70libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/62//usr/lib/.build-id/da//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6237a2558a643ca5a2bbc0d66a0bc45518246bf9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=dafe99d056bf0ddf8f8a2d0408d7467e9225fb70, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR;RRRRR RR8RRRRRR2R&RRRRR%R4RRR,R3RRRR R5R$R!RR R'R9RbprZQ_~m\C |<_8|ܶ2py+K 6]hepi;(il*T)jں2ѷ $#DCa$.GmUEI1s+myQ)RD } ^hU鱀6dż;\޺>i^HG0bpt6}[Cg/^P8ԳmD9J U\"*-"H?ІXr1bJ,{ b+8]0G`3L ֠]~J)9kALzkRa@ֱ^av1' ۓ(` Frgo?ouHP,Ppj9 x_Lb`oDYk0ɦG"7kym4 jm,#"D/;X㗫'{ >CEG.Zd豊7^X:SL l¡W\fI(,Bl["kv'~+"wOI`ήn eZ+BsR LНh"4Cf 7c$ɧ,6,#۝6jy:J8gf*ʐײ7Q[_ˠߩ3rZO3Vs%+臻EknU&,Uxݦ'Ô1Ojcr|)V@D 7+VGM@u5XyE8Vqķ"[b㩅Az of.ZNV5\eȠx}UC6a`u8`.MKI+!lq2' mMk3LJ]H9p`뻼?Q> \چP f>*Pmc242˸@;?R ^ޜkP&1@>[*:.&]Hc΁^wGdn`o; :CA8n.gP{iGŋSMUtiJ7^t#f |0x'kVH6$;j42[Fk, w<?{p/iv`M`vtܸ  $+W^"w}T#ֈЄG~ƺֹ gn`$e6FzOc'1ƊN $ylD1b"n~PWP3ַ;ѐ{4v?2k3>E<ȣD2麣P"T%MX9 f3qd {hWքm@Ү *Y>C>l*%%hI l78i zйh644r )-R'Dh֠SXT~xQʿX 0 fe*y^-9ƒ{I|ѴNiwaօ:R&X[h-Bx LpBT>%O sþ~uorA<)26- UbvsޗPpރ'@hvy7x|; :gRr= 1LO-<33K6@ \czL3Js,f%4uƇv:!X0ۃ*", ^#wfଫ+S{ çg7CfPd+G'H5FM$ `, OIw4Vv#q^[̭)-oM'Kq%[ :c: gZk\U]O:ߩ1*0`ua/N[B"b- .Sϥ{Mv6(xΚЮ$Ÿ<,w+aL{Oj$v ySZ[c]xR1uvK{_Z ܖ#9i$7r6}` ad9+Aߍ ն|Tz%gs[S.'-J>ӶR:*o~–bVAnI<ϰ‘Fz0O U$Ru@QK.(Dx2Ԣ1 u&:xwTߝ4؏̲&S CwM= K%6 :a=.~ )q#UKT< w|Kt,i24~s< YAQq^ዳxk[u=כ h9R.eMm<|FyW^V}kZ hl=9DG{Z{h J-?50)s.L0X3lo4ןQQHژѦY?(I6Ј$tx+ԣOd*O k/X7S׌rwH=kf^| AO4V$d6Yn霳(JaS%(I7a0&U>A3]n[FG'$YЂ? D5U7.%\lVrNX_e>0 wId;G'jb:`͗mm3ms\ٹ@`@D&| g{.cHwO!GbOC Bh7ʏ*cmL(DkNx)>}RXn<`_HR'g-5i;0CC͙T[fw- ;\l +nXY??|αrxNq`R GcAmG  UTW6I=vI^׵yS.}5=\T 90ݔR T'-d72V %7itā0Qʂaf[J2 ޓ5<>'Vdnzk7 >Q6C/IF̲17P`+ SI0RnQԄ`&/Y()g>-||Ϧ_/HOFA' ϒx %gB%@Uŋu7nud2d`9W5dO߽J[n.21ŕ̨C 3Izܵ~K|J{ϱJdkP̍oTmڭ;vvd[ ߜ!oj# hf `[z,cC,[뻖:L@QV6k)Q{M^6rcOdl}gQ>5 ũHWx:n YqKC]ysCF:􂙊g6GF1:lu33fa?G2ȡtz:x\RPBvKZ* <:/X6!+! Ht70*(jYI:-|ueH'g?kn) 2O4h;ay$XhW*k_Ѡ+{x!untO ދ)J\𪋅O1$y-4怳N4|aݬFK>rSP{wr'O\>m h:Oڥa w #.Xt@%*@1YyXnFCbB?YfT+-CU!v' b_D$h+y,u}$JJ ;|B}X^=G "Y&a 3  C<]Mˊ5k fy[_yu"b(i;._PGuLZK`mȶ-vQ ť 0]TwQo>AbÜ㨟pK @ĭ!bw`mOTϬn~NHH'6OlP%P&:9w>^ZUz3mGz43b~x5Fz1׼ OQ$cc4'!!xo UxHZj_^E|9*Υ!2xuKaBC1R*h qb{^dG#őr*xfQh!khTgIU?$_>?~ ay6hEێ]Uϰ~T 02ٗ}V෇p*g :0rVWd>(fC |;݇Dn ǺA(R}d`eւ6#$I;(lb \[<_Q&U 15<2xi{0 &p'Vߚ֥]-j3O$7HauDZ45 ƧR& 9@AWXM, V>Zϯ-CTe1b1`ua~ֹֿ|[zH)d?E,o hC$;kN^k8mKUIõ,3a\nκ-cBbuS𿯠Sow@W)I~@[+ѵ^0G}nIr)rLoo~֧b^QQ^} c\B-iqu>P%E_MK nĜ;#b ^ P+chTYPdA6YЧ{>E>'f<8p[؄yW]BYW(̽S؈XIqŽIN:a$c/Di~n^:9FMLd\Ă~Ok y'4l* (c$m׏gqGf+e^ylx_XN-4܀FG.}xQ[tWY"=c3;*ȹ(Ǝeh]jjt"dg|Ltof<PU1L=%Ȗ+'{c)X4V, 5^e7?-WKQ\n/v$ f2(Ĭ o0|ԢHF)[Teou>fz:~|)ojp7[#$YJbnri aܽXn8wi 7okǐXrS1'5_^3̩sÇZ9%-p7 |RMgp:Q|s;1?z* SRAooIfy" LaC{UK/4]j߀ F@`%xpwjS\ Z+W -n4u1WqkY"Q1#~K? [4ek`}~\_ ֞KpZg>xYN WԶ繠׿ڦ_5rZ-bңWsV8ק+"O)[$6JIYd0bɖe/G'&C {{z׫ÆvzzEwߐGnLd6r@1\R> .^C6=6ekPujpIjF[n1abl}a/{&B:ΰq(bR="7%p=ᐓ4,B<*!(&rHrAVVM8_V:^5s2<{uE6ZYE掏RUpdr2AD)l~!\wOBe]EK9 sB*:u6;li ST5\(daybLhAG[1QDv3 \+=d7p_|uqp\5x `o BӌŸ/nZ'6h$":D?@Qg^!_Q\GF ?kdPI5OBL8cɮNEṤװt{!:E̡VH>e DxBEkTwb>!)x.lUbDc~_r;~{_j#?M qsВ?e:VJCuݭ?^|'ѦRY6k53bLD#V.m_7/քF쫧-@prQd:lf3}"ڛBq%*NV6sM]u+^v=+Gkǚ*բH~OHӤR偛 =֕nFyC>-8*Gt9>xgT2OtЛH=i XDtD/<[fUmv=\1"](ν>mWȲ*e7!@x:Q()l7c%)xƠ= ;:WӸ}+AOq`i3F#3\+QsX_^3̝Nlo[Qg#2P0E}«4+v@χ?i%ɣ$==<sqpy) a$FڜĿroU<|F^!(<[!;%aQg+ Y5{V'~Nn*)rrSc}Mδ{< hݶQ+\_sBP;s'FrrM!R.ǣ qlUݮ>^ 1.\КL-oLu#sZVm iB\D><(Mkp᳜ӹfgԊ6MZ Xlr+c`8=ZY%5`A0*r͆ߏZJ -M#D%+=[^熯ݔP,0Ͷy~HX񗊜*QIYY|(\}{BU-7ߙ@jX7]pJќz/7,a\152p٢7dzV:+z 7K5?j^*v A8~y3qQ brp47 v"C|>- aCt=fj|rYWouyHcO l\x~=aW2:-OD+h6kF`cH*Acy"UvKr 1iC#6&HGv[s8  arT>$:J'KNVKJ>~U!Lp/"B( I+ܻcHPy* OK=<ѧq}B(By3kbܚo$y<ѬnԘ.enL6:.FmgcOљa>LQୠ؆g0M8'.&L1T@M=G7QtkO$wDE r V!Gw֨i ӧ+d`W柾jB2!K/ZM#dFiL '~φ1(Qާz|*̍Q^ љ3ɓ;'l6$YOߠ8a󔁷w/HMFHr4.:w噞lvP *{ׇPm/(o;5p+}teԅbXKL;Lj@yXb]JW2Iy}TK> A~l$=4ub;kʇ~"h[U4U5?:zW}coEi2m|bci4ypZ90e8Kp6(*kreհ:i9!7ާFVHgڠ0?V"([O6f|AҲϋkqM}(gttƱ:߼MyjuMdG 㾆xyfNH]Y!vp#Sޝ9yՇ$挭4?*: _HmN&VYnjfqufE,95stY-!#_@el ^V)6KAaLFƺ)hqWԳ5Yѧ?Mo;XA ^"ϊ}]-TNSv'(ETA 19ôE薴F+isdzz17^fCRK{JDt3hQɛOr;)͈,MLei65sw%ap|?elWPQܚǧPV |bg os5 -;qbX(rW?<:ku&Olf PY~8lr?7Or!7bM-Au|Z0r$ljj}<~_v4`ºً51 llڡ̎DT7VWyuB t. ){Y*+f(cfiն<ŀ{v P^S3‹AQ(k{VBMtn?!'-wB)OR t@ "i"g+^}6܈!74k x[&nU }}KQ8bMx -Dlqv1iZɅ8WбM߯T=_͘c³a6^Ϋs䮦ut5yl9r/1s1]]T R.=AגE0 |5gWmU-|>_LVwBM56؁Sb(lx#&KlYGpP#bA5Wq|;8NjyfZ4[D< hmyAeJ+\*r\ҥ;;YMآ(^>彻g@'%&aa& (K.J|K0J%aX3b9DT I'|$q6s͖hpᥱO~B'tEA&y=Kç|,ȔʷH@/aQ,]k v{&G*n1 v'pSûDư"7)ݪV5J8% A|f>*X.z%$n x%:o=&'`NAPwH4uAjQ\p`laƟa,B.b=]T(Cˉ>A-xsڙ#𗻝F䐼+)9"czNk*che!d$)+<I{o)sVt*T'ViֺLQϲ.Xöŏ7{\;82 j\/65ҋQ mtHU̬ڣJcdH~4?i =7d&$6FvW젇c埚(*veiBv즹K$t`uO=Ћ2cЌj/FJ(, 9¶-hR @wviCjbQO5b s`.GnyfmW-JvK{&ғ2daɻ$P' xl۲CG+ OКEC0=n;J4)H8gp AG:Z8F\u (V51 ੀehVEqUױ5- z()Tr B2sFHh?2 |%JvN BK ÁWU\J;wu< óX7WqISO !|Г atKUI!x<VsL^! m9i%| XXB,ʂiO <8<-\t|x[nס`!p ~UIm/i쁎V95hxO+pRkGĻQTgpd~l΂"l\[9D)(60a%0s;r%btҩ׊pC-;V< pƠ6P 68UZj*FzbUh{Jqȇ#H.Jd]75v`q qDR /YuJ}!BӾa(w,kwJ_"ⵉjVy 0iz\YT$$pۓ*r4KID܁*E|(XfW>)LZc 2Rgy ̋ER:sPO:xhO` ;:Fbs4>Zwh[~azC>tmT&Pڰj)˹}M#}*qH-W{LD)O4NN)$g~~Ar,jl)8[va.3GmVefu4EJ/F*+aO\vTm"$Hk?kj?FR3(xv0\/}`,R9 !: qCMW6õŘ#Y"eft[Ad61?;W'6O2p\9h!hVs@HàBA`zji-dNJ2H<+Yx:u- r1U$Nb"A\*Fڴriv2gWՉv&u%e牗㦦}&eTЗ`JνVQSdQ|O1q[Ϧ} 06(7&W( !\ x&8p4>s_Wt'GOkF.zZs7CO t9?ĦyB>dȥվ %3JiӕTETREWv:Jish8Bھ|Tg7}:?|FхR;%bb V (o7"vw{evUb#r w[mٮ7,Zl#\Tj]Fhy,!n.9Ϋ@qr?6tų] 't#aML톈l[b"ЭlT'k 8b/TE˛}|xOLd񲘊sPGs@_cl:rM$"Klyܿ\*h"O+=fa쎷..=PGIyY|PSL|ߡa'K()nE|}<ްTF ْwqbuGO(W톽h5ԙE7o7=JG!yQ@[1.5 0i@:nV>(cn}̠"A6omE+>Zwec=]aX0(D#9O#>(Ky M~ 9S`}:zm Ld+\] 4|ihv&^93x}P3 7uÒqEʡ ДX##ԉU tgNy ׻d,- ӠjDY%vVf9)ؒ2k͙P){>IRf [5EwgbQ|G}<ˑ99s|xtŜ~#rvmw+@&A;Zձ p,^=Crp2$k~NGHMdovM8V$03+Es&dtzѥ%O÷^Ww:||hⅤ'sXa.>I/rn"rZ\m\>P|&2uQ[9rJF,A&d(0xe?#!17Vɻ65j5lATgHc%v1Y5=, Cvm|r+e2zvJYWWYdxk+OME k)b5˵? s&?N"a ՘ǭඃ:…IC<'`Wb^:}YYZ5^Ͼ¹3(W@6@mkhOγ29V:V$vy] j zST 6bRj8;5I.R-p#} m\V&"N}:du4e\lnNiYnWzb3^{EbymñXr?Idب͗H2~>o፤ Ϣr)d psO9* 2j<1,Dˬ6"@KGfFD㎷ . у< q=Rh3i ;<~cp{bFPvȘ/bGSPئoKI{*dE| vu習;YkO/Zbj2$V t(G.\U+uq>kkvK`S0bFg6zZ¸i t|NpἏ#i\#>{`:ӯ;Nd ў۴Y[f(l FmZoVl>\ SRaͫ3y,:eāvw4$"ѦgFk;;骿l=8c0.eFLHٻО|lA۹/L􁮝Q4WKbQ#NJ0k b&<DX Cu30@2AfKF~tˈmLKO)\<)L+VF(ieWCƻAd'E po$b²ݑڹPk@ +< %ře|N? lTKew{gC/!td !rcnAHhHe/#)w Y'Je$j QN;4> ;Q"eYA)$~]i^i@cgo" ~pUqkOw3ťsbD'T#1^:WK0 & \hTṡ񏕢si=WծZO͍a  c`.FI, sX}1gGhIk!R!UW X톱yKN!%x2V NqȰcpy \h&NHXWVUufh{i͢@)c`ch%7o=߰^sp]֓zuJF hLT^芧lCԫzf;O.؎יWe5PNKu`j %j̖E!rsԯ񆂃!^ n-)Vǰ#\q3]Iw .h y;;[75^>d#Õ.LCm:?Dy BLWvx}s"D1i`+>*ӯ0 l:P7F,ݲkSeͼ~6+ϸ};>X$_d叅l/:9_4 Yj_+d0o06|۽Ǽh{* wT8ADXKЋּBsag֟ /9O]wpnukY?M[*xpՒFA$aXyb~D/kI1 g^fr_ŝ°Г! }x䵪yoT]䂙Yy%홴.Z<E?p/>S/6sGo-G)`aA wOA+,l{*~Za--uB:{~{0btJa]1Bj^;.*zם4iA b| Nˌ(z瞟 Fu'vKAF> ,!ji"a݁GXMe7z%δAx FzBp*]ȈnXZio<\rt[Y-$|9c ͧF 'J>P{rXKDּ,< s[}_k%5i"QpW,oGHHdQ+>:lM#x8,8_ Ks9>S6D |(-5)/7OH(FzH5UI在`j@@jQ.zKZtLTRR wZ*l|5\Cns,t1&X'w  %'hWj$1 N>~l~y }$Jkb9o yb- /Lt *kgN[y_ e?G#rG#>,Y&r;_*dӯ1aܢ*Dv dI7>RdT{tm-IxEG,m2}EX95tdKPE۵53}83ͤL >Dm90!\NJ FHKf_%hVNES%+iDB. iCDm=LSM̰E-)K+UZ[HAmK@tj'O(m!nsŇed8!I zL_uh4Z`dNblx,Cu]C yjpYL28P} w!h r?b,|?cD(fwywxc$/>1>,if' q󀫿/k+Gj`>Z\VMwF#@ac FԄj1@۵v')DZ?7E["ݜ 726?Q@!nRH1~vb$|t,.c<#؜胫)_^2#gN赚-@rk;]n6ȇ~^\n^&s[d{xË=. ҠSK-苈I혱~4&kAHD97HarC U-,@pɕ#9 CuݛW1Y5z󢚸u,{"%'1AАm3Cb挃Vetf%ߟb -QZdPN_#Roz=-U 0dwؐy@ƀ|އng oE]Z\SUK$ d$˜0K3'NE(v u;J(U3UnX^@CixPcJ+?\X!E,K&_g>wOLy"uu^6,E$_NG,Uzɺ*9pɃE1afԥ3FJmA@8Yζʿc`!<&EY~EDpJО~0v C[%y+# 1<_MF DWS!܏B=۳ڧMɟ:jzEy1=~psһY̼kS!~_GlmXӿWl%VƓ%1;`~o_kw~TYkHVX'\_1HLd3;wrY6A(X.w6Y;t.[D.Nl jT5N RY}} C5$osFpEz;ׄLJLiR,r 1jb(狧yqAwoy.miG`~U}DfOD8z,]^N2=nD D(bJ ĎJ,cPH:Ȅe%*2R͸Ex־"}Ғ2:c[U,j}_۴l@LeO0?4 +mM}>z8?RND@%i]^:]e`oPjg'b½=6@9=>_[V4eU K̐͗OfW;)Ucp$_6l S@PP0Pri ǥv7!,rz8vlA gqd⽝׵M]ݴ)uޣhy.-Qk˞ۑb&1P~ Hv^@̎9YKU#T+6x"Y[XP-e$o^rgRS'xXN6a<ßFS3[ڒӎ oR R,ޜ!Wy%8 A{L?ڠbG6PN^s%`>+}RHN9\ڜBzWu~9ŝ\/rJze\1)mQJY~lse6LrFND\&BjrZn/w^Y73QGIP36B4ԱImo3'@_ 52J/h\v2ل(f (b=әДj9}e ySt:cy^_ӂo8**'3io̝ ߅IxR3n{L e'G#҅v ]ŗjzOIӤr)`<__jrh ۿAZ8 leVbJ5*@_bTW,XxA^,bJy|^ ~V[, BHzWPiuZh6|Xu$;[>9vi%DPx-ln` r6o)^7juPdbx5?%zAS Р@]d`hG7Cu(}0"v U;L^Cz+9E|Oc3O^єTGD~Xr %Vh3np.^bzgFOm?EZ.n3ÜmQ͋"첅;r#֣s?e+?j12tqz?ă4Mcjp7&fNm: aόvt< F"p{2ٹU11y#W2BMQX*?tԫq[fDE6 .%,0KT?F6 hgza}ƍ[@"T;11{D ݁{ ;{HZYM@fw?zXs*d-89Tj-hsFNWg͌*ެ+rMR.6s@z\ҷI`Ը`r'X 0%%yוla}RYG[rg8`Ԍ-ZYE.]8/&y8XZ6&t0 sLD w>@83#Պ?6߻ҪlW_6K>׷f*IS}"oFAdJVeWj[0O\ \`.;(c PAFAT T]jkE a{9F&ld@K^w;A#C/Y2qϧ$p%Gթ+tNPАՙνl>4{ؽQts'J$r {^9Az1均8vchTEqTftDme º%9=\U|_ID(_ڌUF`zOVG7M ?ٵ;۸v=qQ3GiZOwV{2@讠և-ui'zɺ'Pj/rlx gQ|fK2 ,ex TTO+ftH8CZ=sD 8C;ח=|<NˊZ,BYDJ'Ϣ'L /"ԛ@47"cfJG.cg7H)rwIVq)6NO:*#}_PeºAĝ{")O 'ԋ2 gЀ_;DBkݿ;<[ha1tz'A뼋`sZ}v@2WA8ɋ3wH`Z]qվ!r=u8G$JQ[ n*EDvȦÌmJTpq+^Z5m\@T Oeɳ,H-\'⸡5]י"M5* XrZB KOiìL14LL ZʏK\z؟f ?N x-e;"~HChs"J¤ԫ0`*/M aIbmgM[QAԀ2CO X&:?E*f G07YwHw1 5sqhvUp)fH,9Z=W~vMFtBĪiJwqIDS)2Hig~'#~o@:z ƮCŁFC7 =UÔ2007@!͞L}8|ͣZDX@Ąs5aJIs%Umy? X;qamM Ss /xxUE0{u`ܣ, z2H& .|\Xբy= rgTVJLޙ7cт$P6pFszZ%f:+`xFl?9Db(ۙ{MKDwḂDzE92R;|JXzʏ]-dvď $!%SHr+mfB FCO^KyDW ܑg[Jۄt֏Z0s84=ˋUypz_<9hT> $,=\/W&5ei|S,@ٛ!Ȼ4&Y?1*/Gΰen6ǿ΋eb3׉0-YZ4^@vuu6V-2m8:Pq/dqVXC$ԋ~ qS'!)d%EK6XG4kdǗ0zFBs5/,:3)X$ T# 4k@2kq!.uyīB#B%eg˘IK}^6+<=shg .rmU<`%9A}♁(拫Yd .1[ڣ.\H啾!+sM~ \1.3rzj$(M.hwStzQS=>E!G̾ y4hOKH+]0{\l*DG\T@ ;WFnuP'HPÑj fxޮYkA?72OH/%f:j3T|@WULMDtKUg=(^"i&D}Ggc滙 kg)Sr|Ih0=.*RoN?M"Jf'6ayam+@>ѹ#Gu/=bPiq@IF1P gɕ*%{[A#?Up] g%.tjI[) @ımQ`vC;YU]. dfʺ3 "Bggn&ɛ:ƶPDY)E ! !j\7kO 8 5G/c-3'j#TyH q[VJ!2y95R4,փ(z UۄiEO({Nfz~S8uRʿ;aYLBp~m>RɨKlHµ'rD$C' 9* hm½\A'C^ycE+K 1:C]RFa1D-TUn hy4Y*cUwM7Ǐ'R}r&UvdtάoI+b"$*;=\~o[Bej[\\4(F҇iI?xB,f 3bC\㾠4@WѪ3e2(Bl2Y7$ Ch!r<ֺ~{<2jt,LUM$bke9fv!k[UyUho?K4s!44l֗e]Y𣠞F)u 5vOyH{f!G2 {9^;rNMc[㈀RW!;K* H:5+ ՁҴ(\;SyH{mRiI8]i'??`Mj#NXWț)JY\Y䨥@@kN f+?b@G+uR;gSM `}WsָFfTw{8p[JH>n2 cir'3m&wͻH$ao$8貼/p%-l8J~!q ǾsqFɅ ]GMJ2 ŔjLB$+գB65'Mtq1=AWP iCBm_4%n,uC1J=llAG/bp6MoK7傻}d@q)\7uo5LfkFDCJSâ׼Z! H9:![wLJ:°nkur#)]f=9!YtuK o(g\g2IwjuEރȎJNZk{6ZWbFdj!)rBu iqVH71*;hL$*BgLn[w+"R*9GC+vqoLD5 D =nstVg6 l+YӳUm}_.wܣT̥ ӵ!;K.xN&;W~2C!lSHԯ<1i=Q(A)ߌswv%*1!BXM@ :ϲugm;5R1@Tvjq)62Dc~?BUHd1Ґv4H?m7&xY5&،Op ץ F%` o'¨b`7,®Q6LE9@P :6Kɰ'߈:V\?GxZ68-{y%hH;=ܔ8=]RcD˙᳢0| k \^H3"hUۺm-:s[Խ'au {m8 (0̖s3h5 ?]igCY>|ٓ=M2)]9PpG &iO]${iG兪ĺsoɫuCm~Fy"8#@j^'a=1^#(_&JIE5/F4 lmpLMTw/Nlj#:Y8=؁daT1;T~v0r${Kb5ݜ#._ol]3mvCgOG?A.ĥ Cn%3wee?ٓ/A¯L,bg ]l(4(Ϟ^:;fj1|5@4X <7((?Z Um#^°`8XZmS~x_qnIݲ!A:I.HZ99Ud̢XTQv ,#r;#3DDft6[4TX|aU F0FtykگPZvAa6 eXT?VB ~6@#  e*1Nji!-Q$薔o\I_"Nwl[Uf,DISTQTnEI-* Qsba_. `+cpo+pܒ9#J EFAJ㻺I93t:fie9jsܴIX!ti@hla]˺Fٳ%>)xčB}U<@- W5߿Geu9uz&(烀TtY A57It9y<㹇 Q}H&۟_4wc?<cO;= u, W١nrP:K8KhyE A-pUBERwGX': N@{yz.Ed!;BBǃy^9!Q)n2MWLhJ:g9$1)"*hh>/Hz'qy%LedYM_$*7ex2]tۖ؂31}C ,v/p.^B >5.e-^#r"u"4։/F^1D9LfNji8`Ʉ-l,B.U Mjf 1Od+MNsv7P67Q=iV ui{B/>[Kʩ< v%+}C6<%Ugmd͡Go}Đ>3$SRSW]bC8`hmO6׋A T3NK>By{)X;~/ &@GH,&0T_BH |lćN(`$i)P7} elc61 Jzw`,UO{hh0:x,':zA{>=k^x F=C~mN!oxIʿF`,Xaw& >>vvoI`XLOߙ*>.d\iLd5NC%MW|nF==,}:9 #'1J1'﯉̫>x[Ůb v;e8.QDC/09֥t=Y H89~V0J N3&Bpddd,$pF4c%@>Aʒdfby&@qMW桥MEDW: m,¥+r#S9Yau6*zv"QnjR}34|F8X4\&LoCV{_%%7| 8rT\dm$gUNֺd;HmXpE5Iq:CɟQH=%te+v #B)z s^^d]h|`c:Ï9r϶on/ d]tNh}=~=)1/gc)5]ܞWYGJο,V7rp8m#MH P g*ЫTzE$by@/r.w+NNYb2M`vCqVj"lɯ 6YEV~KcZ3t n``}n: Dܩt]+mXX2ouD|M/o6ۓcyŠNd C<6ҵ/nP"-ofNf4mkyɔ|!ʽ#3miϩ;.]SZDlH7QmR+)oA?5vᢿ6؜h(Z"+I~_{͌?wĺf_KHXw>6!̨3.\0_x־Dvt6o!XD;NCփĉTBe hi"PiV|MyP3-Bephp@nfVN=N!A4_0gN&%n›%ܦ0-K&$(Y{ Isz8J>e$b&ny YgF^H-&;e]EF"˅7>\}x]! XE!EmEiW{Do`VQ.h~ AJ~yng+'],\pQ2T0$$ǫ o*ZRB Fk"{:OLB Y+pf"uz;J}Cf4~O%f33KL[j  /xń5 )* M/YfSFiێЭiYUZ) '#6_ۆ.E8?zC92׎xs8һY:;UpH`ЧHWu'@pmGce\5}w&kLz+/3hx볠0 ip?v W~:?◑PQj`|9:ke`))M2Oob󟫂lL4fӭaP[k4u406&WL Ds|Q1_Ƴt6HmQ} ߊ#--^b"o)0>w [- aV\G'Uu.hsju-^#yFSkcLp䉫84-糘 1L #pvqR5ݹB9@1?p*hЎP\Tʴ ƛ*2D9eחq@84ðOQw%f>92RG§! 6ړ ~*@v%ȭuZ_s/t=UUW/F%Oe}e'Û4FY"άդS ;ud,- BGCխ|) XM#$#.(QtOP>R̗^ X)9E<ǡ+|mh<,1n=$=-ʁ)xy\Jn+Nl֖BlIu̿H#t\N*Nd aZ5λ`UcxfAp _5k G`:m-f25kˉRKF3+v+.J It)xvli͐WhU4ܪ;zL0[8xUCNSy'ڑӗe:>!%r< נѸ ^H`z(ӋNVZc phw#O1l%k5 Y}0&o.k@H;%ʞU#76ZV~ fށO ׽MI/p)<$)$u{ҽcS+fRݱ]e2N^S%-Rb̪YI=J'lRd/'bh͗6Y3sٞwAY/x3᪖w)=`u~j]- zv@iiP ᭝䫳9dFeWɵ#G`̡d^.kraAK&5 ӈYv9dѵ[Nj2j]ߴurO5mVH/'?9a?˺nFOdr?GVF~cc_~WLk O`"Wo0T/@ ,{fOEv8*#[iTR B;R_v\si2 tov%((:6P!J΅5Ёze͞Z\AϠDu3KiEK3AYOAI@_eb9ｄR-,ȍk=#uہW=O7ɋ p#wrysHTVáZ0zMW}L?ɔ֐1B7EP7[E3ckuVۍ?٣b"[ rNq3&vӷSg @`̬GY=Q^w3v4a+ұOroam/o;Lh3d|~)e+؏ I~E+ǓԬ;"5Ufk_DxXR65ɺu2RVi ~/s*)y޶m="?a\~hv<p󺈊KP$ٲV9*|Id|.I֞uR-6_D[2WmW t-<62x \jʀn<-BKޡ+ڴgp)]аs+6zgWȌG Ƅ" ʲ|_9_C&O6r"Y2ką_}@L/g=Y*_ѯ-7CYUe[4ꑵ)K@o[U&/tӬkGh߈]:\g5r]vm{ۣ,IQtB{NP%HCyO!pBbg JAwL.m x=@ y3mWInxƳT @tăwڡX 7?2phUi/Y 8j3\TNœRZ֐(e.>~ZZuU "/( !X|LŭPWc&͛\8IX\4Kw G3b:"Ͻֽb'yohzl:Aۧ2KrWX ]eR)3y l/L'_cO/ ZeUlNF-T@yM<4T ߐC╥^vXȏZnFTsaB3vLo ZҐ#{X'[*+<mlY?>~aWxwG/!gQSET;DMRђ W2F]FQK)|48N $ &Oo?Oo:AGr%ǃ]=n,)3lPL+('=ZSH g1Bbx4R'sdOEަf4:޳ƋGF.Cx8x?QՊ~_?H*[DD|.:kxD+^NqPіޖ]INS){ti"GkQ%&OAiȋܚmbyk.Wb}+RBHi&{+ [MubrͰކ9jCtBny'xunCi8}NSc?X! 8Eol&' RṶcSdw [wx2Rҡx[cZ 0pdn~LXh|wq}ɥcڤg3kHGݽ3s(;- 2n"M!:+m^Fr7;CzؑO_187< * w$C9yhmL|VrխU0D&~0M,͢8!6U?q&Xlh:@NÌat P׭7fqW_9酬t3+سm؃OLM, k a(~=;rmB1)I/z"|&slEwߡL"(7@Ra뎳xdLN[I~46\ڐ:IȤl"Y᜺p̣f8̉Rf )wK0H4i?Q'x6zz Q 2rP&%:PIGtOe^j[>%}'i +S![3.2zv3{dL܃&6ގK>?}s?MohWhhCO:zX>αi8~থxz3Xk{o&pZni"}̂PbWz7K)?L |g:qw \@ 6[1kw).GV@Xm[>-NN;]La܈L44S)LbqUcw,aML`\vgQ灡ܻgv]ECw<69y¸x8U)f2)UJæsz8/a[JJ/CBBwB%`}o?O!+vQht*`K\祈']f*#*gK8{"G:ga@CS4 A2!g]R9ͻ94l, HYɉwxU]Sa`&;M{# m;c~ ޥ9W~qeȺȁT~>k]~x~]Nx$Αbl&Rlj.v|QF⨚%lnA g4.zuۋLմP~_| ;ѠIVU+ " 3j_gw%ܔojDunJb#.:{;@u&_h~ 5h:6C(n C~s{߂6:nn!dm|.lh.nSo:5 2Pu Nn˔j byk}̣zDi6<ZWSr_yfBa|OY?UW-="~I͹)5IV>1d#2ԬObܙ3}&ՀTP5 :o5|$p P*Im$xӑ4Fқ?z- nOd{ur6L䶩]d1d1', nH)nmќ/u4H1t-uc;H-(K^S#8?!GЮl_C 0/؋pTYD\\. j+S-# n K5cY=W|] s&+2|Nf> O )5q! #n$؇=Ve@Z0F;!#;L!onJJ^I^[maΫ:GN]W$eb -v+<_cG^,HraG%Ҫ+TIqSX,:X}_hTĊ "5MM[As*6 8'.lbޫn14SE03Eu6fFھ|K߱UwYɻg/ku~.!_|78#\q{8| `-*19ʑumZ !1>rbB,Tb:I* TdB+ DpjG]O)UvCXvܴs)M2^+$K*a@D?g_RhTڲ>L~m}K$ޠ~c_ZzpVI8%iYΝIw]ef?OxOO^ʟA-9D2A h>ƪN]bR{7~VXRy@ZҸ )~,YQZ)j]4j/hhf8־9Zj=sbaJhg6־ @zIK*xK9 vؓY=Vy*S#;\C_A}k$>۵530+whCHMi5;nvq%/ݭx%@(]DڸKoȿ )$5 iMytBG5,V2I.vYvQ,ss(z2>J뾃`+ٻrǯ@'I8,(.5>/m H! ,6;;WB_moel%JIܨ%$_M^w6p3*^Kؚ9ě? JLwP9|'H&r z WwM1> !4v>-@u}+È rkNKŒ".LN"TJgP@ʢBRZQ@!,_Z<g}"R^?_׸݌_' Z u!΂/]š{JPAVL"]:3b [A(*iv*HvfW)B1#ߴ[4*J.a$+}T6:5xa)s`[$3{L:[O;}l)S 5+\Gp˥A OV3;#"~4}iyQƮD2xg { xjM5UZ_{?2^zGکy>/C:Va@R6.7p?ܑx Mo,J=ˉ'~_mLM2Lb9r5 : aPAMHec_2'WȇY䈝 3Tr-X)lD*9;( B.)a~]K,Df)4o5(D(_TmXCg:L5l4K:3I<gP@ۦ,gxWӏ*x,TY<).Ke >agzyjȄ$+farpP-iH&{ &zd&`u"aMݔn.38A3Arza$6ǐ -c,AU 3]~( қJ#C|]-_$}aV`ϛA{k;A#vHZR]sP'{.gB`H @#Hg2>"i|-k809QsXGW:=M{ddF1RNg~!$teY6z`'{dQ ^LrrRꇍJ)hYoLP+ҾDk'OcHU;H~},})x`>sk>0kC̅O}4 wCc=R&|G` _(. Z_mP3]g%{8xH҄{yCg1z0*f:8KeX&XkWpMZbb+_&83 :2u5 3! K#?̟)'p⒂i rI7YϿ9C#Ow8H"㣰å.]@~bw6+L^z}2 b-W+;NQMrPH^94rtV2{W|(;ؘTyd;߰N^і,?^t ,\FEFi^: >{8vyw>D{Ow\qShM)zO(]Z1],r.CiE"n0-ZQ``il H'ZgH'ѝ`%3Oc<3ی?7~ mN֡oelz:*$@ʎ[$YD99XN,0Ђ\]0-,K&ZbB[=9ה ςnBdqw:2-y^$AXMq=ݭI9IrDʌvO뉞J? 0j4 Ph`S0xȈ7c/YUc4sVVx>Hlw 73Q1&S yfE) K,KYH4 eS൙(y.A"kƐ;,5.o;]Z#"a۝t5)N$,UXľpǘ5ALg*ك|c)3%} 7S|B(6e0\*%r?NQCpŌfvKuXlflZzO UD'૚$wU~DK~@|`XɝвZGOLJ;oo$^udꝹyi0ٵ%0uJdnh[#긵-$)g){%Լ~b k|ÐV~JS0/ȱ?B|߿ooc5iW[$v|TnRպH׹Ƅ(Dě΋ Sņ)5NJ|)Ss4~&%_it7PtP!bCw--*w [=眿0)i?PK fQLAC<0ua]a3U*'ssP l)UpXSՏe} G*ywb9d"kԏE ܞO}E7 G U2;k% X<7F<4lijvPzd[JFͥf(86 8,\ϫcK( 0 \|Zei] K7e qStŋz ,W 0AR7u'{4VwN~? ʪkTHڮM"5}iJ2_5)eIO%'oJ=a杀ܓ9J&k#NyFr@S,w;حv Y.¿#v'0Ac9@[DTsfcs #l䋚IU;xr-5U;_@"iffՂD[ˣLOeH#7)[+kz7Kك .<1O]J,ThV 2pS ʀUafYk.6迶\uv4q+ ~ö$1?ŴB֏I !+/)~/sFBk߸J'm@i.L,}<ˮ&\|x{ SMvjͷ\'|Xl3^u$ڑ,B!1Xs+D1Fd ?RߔD?iQ ~JL +˅̀^ ( +]c\=Č9zkq;r[Y-4tm,l/2tfZufkǸe\eƵx(Sڑ &v3KO!K@3M|;r2,ČV7RcFqv=T~X[0,~Tk3p-FQ*^cIϥ)iTR=Jt=){J%D߅рkGJزoa'"Ll¤Z@Zf&Faʞ`qI&'jϣ%pwvɋJ5=BWNP?پ ;TbښB"9[xAauF V;cΫ %[s'@LuyR Oel{0N9. x - ,L4)[E c =LJ䕛.^頪sd) OkJV881Bw"olO+܉++oYsM8-J `m`4cob00$b9wgOZ1$RЋoicXB+$l=ꠈwv,_X:Hޮ7qCKsURZ#}6>f2{~p' \ DW%qqr &&RZ p&s]%7m)ok_Sqm@mŭ|5Xm-Izzц ""Li݄#-[2Xj y Jp ěeo5do 32bR @m]y§qu?TƩNF&ִJN?M^öOC#Pr+h\}հ&Zc%%gw_fO.GzD&XDZ5 CZM]%"\tMLKȨCn tߑ(bH8PkSJN\4)*7F4S)+r[(|mƵEgYI溏iŚxD$Չᷔ%on%0cqa{W%fdWQ[.cf"D=zX]٫&ڢ1;MHb`sH+t9c%dƶDdHyZ .kZ/Uߺ@>,=9n~K `ht;X#"gUiosk~ h5^疽hɤU5@,kκGRoq[B! *x"E1Ȣ:ǀpP PTG@>VA vM_FFXG(A |`[Ex©mCzMK+zy$/VWt?I_\h?iP ) };ӊk#a\; [# mM22bA,lQ/ba6MOL*~itK0+\T:'N:6Tcv]W Riagy5X,^W~^˩O_E<.N-pT !ИQckTpЄ );0FlQ8{ -ѷ Snu 4Nݽ5bo1={(%c}flP(p4捃/& k2'5) 6?Kby84:~XB<1LkzFM`퀽f\@j.Ve^/ʠa2-~i7%l9XM`O<ʋ'a~^A(NȊΉpfq_e;jgڎ4p^" #ee~3X?͜k"(~ ,&nV\}jfV$%n P=Y`VmOAgeg9$(7.sQ:qd&ylh&AFh?Pnn'!%!vAg=sB.]cvw&*Jڜ5ȬDjWi \Կfogշ.2PMH ;i/psjd0HYTg$ 41,Ce$86( N 47`g hl6qp/VB1G,=Qf.Nqf /[/V-Ft.؋KLo Rk;XV&}&/x1B+%gߦ_%!`џXIjjrxLgE tf$Xɺ0dDp s9"u͸PWF ||}];B}uˋ=8 T;-m~ziƕߛJEK0~34wPgNgXWI:.x`ڳ^:d[>FrgdвɃaКpB? Yzw2r> @j&*0.L|ǻE?.^K}Iu`|d8~mVMP4mU)Bq.鿷@08lX5Εn<)T\J㸄H^њ'դU/:0.K,d~V^'G_s _q9mڕʧ̆rD_4 sxqio@j3qhHcZqVU:.%G7FhQ;&]^T3AE=%hcχDseXyª2~٬) T4 FY^E۝ۏ,[ج:XFWW^12k%_!FwQ ~Aq38F64)\0{Imw9iӡ3ų/MƽW;#>RΉwKȺqh+ &A)w-X5`L[LǴdoWV[)>y0oKEp- БpAcС󃐚"%nJ-kN4> %rͱJpf)gݞ**NG8#%V8[\PBDͶF4LxL6tIf+;4+Au9{$,vz* ?'D[ XZj_MEL'w4 *c3%SNxޖss o36#{ tyWI_{,V*8xjrhD6nȫbD;J>9e$V9XH e,0/(vDRpOrk {҂ ] { UxvUtpr#@u\lgՋnv;9:0bx*'\PN$\Uvty 9SW.҃};1 Tdͳnڃ0XR5$,6$ {"̢c~3\u_J7JK[~mBz3P&GKI Fb,}IA8k$~g|ڕm%.ʙ9BOz(矂 yBqM"1Ή4ir5pn8uZVjdq=qMOGQ$D!@Y|w_ߒvQ/G>,RJ6M^:D#z3}dKl񪸈-0bFΊ+xH$U?6F%xU5Sh3>|w61_F*=].3nWI!0IIxg(:rX%V.R@TG̿6.ҋs?]K$֩M (ށ+%uBa;9_מ pJ!o:_%W :3?[0u'Sh-]dkfX5iM7Sř/Ś҉@ʊv$tNfH~ }7K[52ّLM| Jh='i/~WE- NNN:Бdh].3Կ)޺|z]e- 8=K|2pL`dƉ~gǫ),_#'?_UC',;w]]:WI􇘘SfB}z~99v~Nw@M;hYϻjZ:XJ| M#K!Ej/. ]~&Ei (6_U;vG87{Q B3g]&[Gl7\u݃ó!2p+1Y蓌6po\x fk,o݃]! Wޯ#oi܂'HH$Ǩ-^-2[dz}[NXGx:.eOnbj![XFi=M3+Yh8*<tu÷Tۛ_* ~3'fUr]8sYVK{Cq?¦ooΉYE\S)ZA#` M^JFCWn(szcnZ5$ٛmݬdwd!Ry]{yvyNB)`X_K&7~@`^J {Xʲk6Sg/Kޞܕ*9ejadjRZ'iyN[;~E&͝RqB* Rk ճ k HF저Z\ׇNmJmxUk^WpH*]4pDی~ϫDHwBe}`xE[O>g8{LݮQ-ҁYS (Qܾ27Xx K̈5wk* QyizFPOFB*eUI@xDM, <~d^jb+`KGk"bEz((mkesYoы1:`B]`qH .̬DQAŀJgSdz<*{S!+woBr),Y8e㽗kvQL:o,T)]S9.b?eО#HRYcg! DUN+ϙSƦ¯ !3OUHo+: 7oA U_y' `74 =41\D"꽾N)XyOE-\/]-[?|:-yl/2[G}e$^:vfJd1=sxCb=!&Kžs#Ag(J@6TאuM7 hƅ[+Ta hPd&8>)WDR2t) ɨTc!HW[т%ީ  l S㡁qzaDeY5ZwV|M5"A I l (/[M73H[$ n+ctm:.+qNmg]0Y;Gz^GGe8 %rES A_N8'Gr/J)sc{;smp.:c1u} Q ?TD0lY0L6ȸLcW`A a]ǦجAHke`=ō9_%VLw|IĠ9f_7CT}pUpgS}>+1%$-%-F>U;Ɖ(=ZA Ay((Huf"D]Nծ"ߡmX֣ ۚU t:]֟]kJT-sC%a]CfKdXC{2 mrj4ֽ؊2f@DxJTE}F*Kr*[v٩asqCqrSX_>|#1,!BoEfᢎ_ yh,HjX$O\znMQ1nyKC6HxV?h\/ғC?lXۉCWPe儠j]c)gx F8XNR/UA{>eD3ֹNG\>)#ci& \ed3t&!܊ ,.|x4ur<-4* D4_ 7`Ni[+w Д8pL?`RN-9,ن¡ ũ858l*hg@Ӈo\@əJ"fb^Gv 7~kQq WY:L^\Z"v7_"ӀS$MH u՛aaa *,a#wb@Kߗ`"7!OiMpqEIҮڹkAp>vjf۔vnȳ3w iÃbd NVԈXI.P Gݳ%6q֞ rFg{:v*&ܫ\;RspN!Ÿ+XW;'fҼJφ3cz *7PuԤ1j'X-)e5=Fڎ~odfwy,#|Eg]W&CK+ ]/~K.o\+LTKE?9e٪\(.1J~=L@_ٟWNK>T){Xl6Oe>N,ZtEܪ<‡'ɝ'͜oP @J=u!H㌀Yl.DTK -'m߅"3kGթ/?ټo"tq`, l7oje׽ʲT`NPS9D4kq CA&JLNӜTH񼋐xy݈*7CDWq]mHL)h@5m5'1g1ȸC(|_.RpQ*?OXX\#]HQP8+Z"L5Ϲ11dzen7џ9ሟ vp_WbHL.PUJHt#(P-@'rx43W +HFh r0,;ɵ-+_+ .+ZرUѠU$p \6EV&_-X. lPlm:z.R,ClxE"w8V{$6O&pN1_՟R0"̀}E**UIn᧤fHEի|Զ)# N pj1>- mal䤜PI !3:92s\$( p˷FM?üjD}0ZeŊIɨN.B}E`  ?DҾuA8*x4W>-ό ~.vި1٥JوbK2D>;A2&6r?g3c͕e!9؆?ʟ=PkG8eLur6QR:wAOմnīȸp )Ly}x ]{qKlZ:j҄Bu?s\OOrZ,-dP#eXeʮ`sf3/Gqk:7C65G&7FSpr*>>"!QPC^$x ꍘZfӀgg ͙n]($>^dGe_;#0O_5,yrPk@%sY{ <WkR&^A.X &BhяA04f6ԳLjxo!n!FKuD°PעG&c e>ĚYV+#\t{ALL4i;1²=(.AOIgw).kTcIJsAcKO^Y2xqjݪM㹕[TY`YO>aWN 2<_k0یI=W|'n'L_ |?_r^n^с . r$ޞ&,tCP(8}PǯU.JX^e2[zs&~HET8NT4&1-DS8ӡetH.P|3Y~82vɆqsFw /ZzE51S"$K`."ұ h3}6[GBM$3cǒbguV@/oS1%o*eMDI b,Ѫ !ŏ:Aa~ky}0OLw_DSq$Q淋pt$fߏ]! ]j4 ; ,T`S,,o;jB^iG6'&?xdofQ  dv=ɹ^q/oǾ(̊hYnaz_d&d7-scdԤ fqXdR^PfW):dJ7]3k4_LzI]J &_bI^ 9Y}cb(-Evf%1y@0FY>;>@]^l7zs5=Wa1gbsvXza߭ (=J? uN+22W,v@55JO񋅌Ryӷ)J[|pf [0. ͂;2{2&gc̩6s8JG[O*4B k*WVun Ԋ:A͒d[7J>kѬU,J ª1߇]n!,=x`&pK)όovc0"c `ZѫVtɍSɩB? -[H!WRQ?0}pZr$!= =$F؁2/  ;u@uQ!=ZNO?c" Oe !oʂ?cKB6 rt1'Tn@ϔy :]1ˇF'+?"bO Q6-{~DaK ߣr\u|.rwGneUhZ p*Ā?(d*l.*jsVlR>pTe72($^bҌE `miƀB oI`\܌]C#n"hu'Њ4> ůd%E;/;طF9Ew[^ .sgUzU ;dnB9{Tfּg AH ۚ:i{J2IEl%H?7&m)ZIVc9!J bx*h?k{07B~ \#lk۷mOZy'9ߦttZ-uR >!Qe`kn,fwm/V`ufh;tqӑAG- NfAP5%*XD֑`*fGѨWc,gSbNz)Cr 鈾&*ގqw Քάiю0! w r]RxUo*]]Mb}3dհ <+`).~_Z>[b_ JXO ~%q Uq13PnfT!QR+m2zBDw~a/;o<EX#dyNԔ97+~o_26BlfR?^`ԨЧRʚV:Aâ{1u֙hB4??[XMHrQJ~1٥'dSQǺ&.dıN+/+7.EE C|{fOL+;ixcO("Mp`IQ˫W%4Sc0bbc)M0` q L֡*gKMMeg1hJѯxDZ )|C"o:'ӗSL`U{ ;Xl_dEҁt2EQLPR)Ý QGW~f,ۉ'wJtIg933τ6AM7P`iRʓti#u8K-Y8sW BQn~ϷˍN 4gBh0@>ўeCj_cZOBr3pP*;XZTќ}W_th1)6`lYJ4R^6231qwb|eˤϾ<}IQXx 8БR3ƢҎ]t~ lF5#fyvv4d /)b=.,zxG>Ll=_+5|cN^ 2AJvKs1Sf#3- __ Q!?_fF8[sf) {5+!*3j.鞣JoOX7dm O<}jйG~{j!f8B h+0(MwO 5o6XY= 1;%7!|pF %Hфqi"+`$S䔵 3U+QVpqb=MdxvH4Kj,~s ~zED*O)5T3U+eӾ=\+7}@/ T8A{$_b2^@:Z/G"^"LC^5Ki 6FV t]x{2/GW`F_Wgͤ~JGEue J}+`O?u%fq05@fi]?;E+5OӶΘ64ӸfiKMn.:Dݚ/{YIm3)SBCbJ|` $"Nx\.gפoz z8C;n^=X^Ö@;P+T3S_F0vs;6^*_q% l 78W`}ʃOyw(nzN`M0WǐkrN$ָzC%M) ȷ@6^q,_=|RUYo[#wH(d1Q1[qQ?s$P~ YIQ4: Pd~yTl&;X=ZI 5[^8/D%ӸCh5ԫڥz)]*JiqIfo '#"tj*N;fF:ےN7[q9kbj' PSku.䲨Kuyg+O*I\㣿'BÇnxw|u@R=*Xc*^ nSdȂbӭ`0yPP=g)aZZ%*_FOIO2cbA2mSY0V|S'EJ<=S1jV'ԽtxfLm-JӤMM6/n)E==_@eu_pn$&gػҳN#S)'M4Ii̭,.L᪡xjNMQmU̳uGWO9RuydY2K%ݪ-+k ߲'ZR̖ np&IrgY̏ijCw8gW457zAEL aE >ێ֗Klq|x^7h!&5ゟ{]5:\ɛl;J@NtRԂ.q=.[?nh[^/jt {Wb-crKɨ͡yb'e:w q` >;IK3ᡡ=Ox g'CgaÈ .O*|ob8NAMH *g`08{ qYESNq n< 7vr.K40 ]Ik0ak [dy<>s,3g m[mvYC/Y^XZf߲T-J[KǃO ӄ Na|>y:C:0h0{mR EόtyXΠ4wJf{E5 #>[pt0B8N PLf2BLN:ώΘٵNþ4 $ I׎4ɴuEfh!G,pK}&Ь@SEwA=`ȣD`aںZ AJ=@6CJʹ6%vK}fQe4hA6E"1#DžGCp^Psfܦ>=]wf t؞3:2_>KtRݣ)IRjI aY3r!bJzC(5Z^i>e:o!r YL>ꛩ2Ee!q9NYkx(! 0& qh*){㕻>)3.6n+v=4[rznEcQ]EMjcCp·fE/ Ȑ۹ 2v"qɾ&ב"7rЍ,+M͚d`-@Ib5=QHRyK*7aDdF $I$HPME; @j 2ѻRn`f"6 PDV%X.2\!YS3_' OCM:=l9tj%EGLNYMj_ x~\i#pmSo& xcL5֑VGٌvTO  rlq 'nOtvu&=l/X_D ]0,8CQc=Td 2a-r ˬL1gb:oZj*3v2sl,C*9C_(ݯ$] M{ఃSNY!MzU0V Hl?bBzmgn&(b9j4n!2T>FZ&fR{|̃纙<,\XrK=)d@5S']keGuUQMji|4vd(f^v:aiy~>Rȴ_c>{> 6*'V?c۴1:YzM@d1 <_عS}{s)(ds Hs%*u2[/"E?&iuZi8⪇%+SM7,2/B:wX1e647A,SeCx  ЦW{PzO }Y1/P,b]ɫ:_%]r>,hřPޠ̘|u^U,xS6ݷZLlciu*EP+pvQT^S9.Z+uf.yڌ&Y.b ₧xq}IB³уƹouy~Ք Yonh-7.C G Mt}okP.َEj0Q׳#Kn 5RFLY"T<-*"F)nVQrELXF:ɍ)iDhgfv>׼.T2뵽Oxf3Guܔ@q.<)>l\BhWuMӶd'ǎnIFQ98ԏ+:'C~ŎQ_)VtYeGg& ^r/M™[‡^=h_kb:z/FkEW ElwENoՃKp4Pt13$m3_lPRAD t8uož0 &o3FyH̛XݸZe\Z23o7;'f^vXwW eY>D'a 7Ǘ}AIm/I@.LQKb l]Ox[LfMO߼3a?9}2 ~Xwd,ЕWM:^'D9,ЮtFQ܈oΠ6S3i(`ӂiTUrZ/hlZHa+SϑD xQa6D%E ˷M./+_Y֗ n6*2,RJߌO4MMþ(y1TñxШiݗ3 Hj]+bRX*uVGw-dĢ}Yy^ &9 Qܛ唄Gff1Cm"my2搇`ra`LDӖ7J*FgD}%|ͱ Z6"TYts6yDo ?GT*n'plם,ZF7(9&{^>WHaPs(kRQUr Bo?U NQ"-9٢9a.֋- [Ӿٮ&]5/F>h0dNЅň/XjT'b(+j7԰9θ9hf]빜TH] /tO5pJvHf㸿+:>t9g5DFd~, ~^޳g-iw^-ِDYOo[XxQ4g(@͟++Ɩe@oj֪w EZ >;~c=F`-כquZ}ۑ+F (Q"BGE/f0 ȂZiJ{i58iځ7N ']CѶڜÅ4'=8a/Spr# ?_%w~0g'}xF $2!`e*^:9Ȼa :H5JVm5@mnZ"y;NȞɗha}&&m&AWL觇(MD\x~{쌿r+=LheX}~sGHVWhN!ڂ@J._a~6vZZѤ>4, )17Az c`fXM;V9nbtdq@1gtguOO5ww%"id`EЕ˚9q܅|SaZw':3F07iJVC)R o/@'SCzX/TCh<ɝGqb,Ia+h$Kmk'xոt<'|H=CByf}K5  jA"h.*z 0JGnO0mpbiJzwVy-g'&hdP{S`y]nV|G)X _bbukM)h^q#^ж8Y!#zK};i[숕iZZ-a܇p,*kQ@k$U·b$".~?$`.eP IykYhYL>)̆(Jm&xAR^K!5(AiVp_ -a1-wsDtzgj6 B`r!EeNv-|'C,y?ڍ[}&2* gB*pFo΋GzU :{x[x\/ǚt64.Sy/ Zߝ_yY9\({7f<ڝWīB,4<͝P%~Ͽp*k—slgF2Yxe.Y&[rDN&bK!֖syf!]r-LKR2穠Pr9M_{/N-W|#rcsЎ{s#)1U9jic /l{9QYllΏgϔr҄U\"5>:ERʳ)F%ױ67UF:?rح|+AuK] 27ú d]5P9 v9-I]޸f_GjyEtT-@䋱EV|tRp]ebrS*=%o*#ldu*z.ʾ,tF_Α)@j1 u1X>7W'Pt ƽK4xg<xtG36bc-9erȻК#9D BsG0`ЎPyXX֙pH3cX7o]Sxk#^=[x-cI.ߝǍu~qV4j7w<2\l8J֧ bHQa5&FuI[VqfDC\q%:M1LN2FE;vrt2OPqZsxRS߶G84.)M1}0zՉ y^֦7xF!E[B F:Nx$=-^i7h:*ʥ [u½Ԓ6v ՙ4YJ';)HıfSDVӫۧ?(\0bh<(;s@X]K}mm)sQ1=GMimg,sEy*m)h۲ ?;Om ̃$db&XFp6c.90rhr!uQ̗XUZ>T$|ްl[3=$fC#/S t=G۪iq߰?ʃ'hȑcXl ='B#m9BFNgwMqO~5hz7V80_-osĥHOhE9E +!uI;Șl6PhbpG2[9 lmӗcͬr#ȉI場MGz$S0)YD9LS4**:Z$؁(;IxΆߦ<)8J#0yIG`^5㎀7Rxzn'Ey;aci!('2RR o?pX43'׍z^_@LAc ;,AVDMݥ!/kŷ14Y[96̻gf\IA>R?f"DhP[FgMwL#$-Z)+x`j@{R镮BmRs[N CΞUSn|cwo2I;T1c7J97%[7݄9n, nbw.eA%m+a sb豉N)oNuZunKo3 C4X?=@9FXaQ=̛Vp7wPm!.zE 4$2I#Pqb'Xo4yt"!H$\2>I ~3z yHv;zvXJyA|j >|6R꾓5Y^j9Ot|eLCWPn;s'DR!s3&ejHLĈpYoGFjUũE i8FIk y^d$XY^:Mj]v[F| @&,ӫuNut2mGW7& zǼOg/;Šr08ѳ=z5$ƴ5 " y5bCn{c<,"EٚIˡ aSZE4Wb.$w?yp)&DQQn$1R eED*EܴCn!8|^9E1ŊY/DdYU\1nˆ/UMn8[NvnWc[A9G{GMH)SCH4io߰f/.l;6 5_tH!պ.;k,G5\_YN&f5p-UK6{kT2p뚒km/bZð~BUdT_>og&SѷUF:Pm5 w r"΃ lѯc)kbRDLVLJ@0̎/U' CT[[tb $0hI@V3)RԆ<67H'ݘ$V/'kFC,?lzɆtfEi MG'}Ԧp4{RASQ5/W:Y5FOjbYܴ|%OpvEN~JAfORC .2Kp YEBw[g]Ysk2h(24v·9 *x]9υxfz#:_Z|Xwmo_1ոg\eY4[Upli4$ e*PSt *S[ MNAXanZ?P&my/u ;P+ʭ =#%5(Am9.,v2Kwȥm ޝ$$IsU߮<̲'G!"/Ρbk4' kY@f +"LC9El+qǎ /g]+d4EۅP|+&}HJVFiײ&#+e = 78QBb@v׽RLSŅ=їZ5>2c%Qi-[^͵&h-/ bHшtA?`vYV'QZ# ޾@0430P-b< @hT~H2dl@ySP팾m&D%wssUe/&aQ؃~htZf܄WMw =ſ^ۏo׷ QrAzY%+6 a;ʬ+Ӭ1)zbNwVVNSWu!lf!{PQ~[.n5biVp}K,du"]>?a-;HhN{\E{]"f/$ ʚf.Ÿ$zmQ04[+ ۆNW텍 r=*𴳏Ux^[LMg7 䚵y\>;@2274#T)glveO?r d(8{sJskahn5ȶgtɎ2rl'H-\*"ke;TwCFjKL\A,tj~MqW'2UM(T3ԝq .*9ectleE4]=__հSM[F 4> NxR/[FK%¿:*Fq>EHOEt _ۊ s~r5tbK 0!U@񂵓]ZG^|}z!!f MT F]\zl-ݏ+%oyFL DKr,6qm]1Y+j Ӆ'k],}{a$Wr ݰ.2 ?w`W+_ݚ^1sO!D4 8M ,nӭD^8w wBG1QH\RJ4)ճx};fr(lj_AP/ M"^XR:M%WK1#MPC֠ 6~A"珠mF'|"VH>1IR*OrlEiqF2bLõlG܂KHHDN-qpF~>3>jwA:gD'rR㠁JlF66EIXfjӜ/Ky m!qD0e}FS3|QqgEIoQџ0s8> ղ0J^Ge!;,Lm1Z+ $%D)ˌOPsl_qTL6}:6ú6~V**>T63v5uGgkТ6V; }HqJ0֮]$,|ޓ] vt:͇4%C!dP"^D6<KT޲}aTm_͆fs w_T)sˁU#Z)݁ ^v:kw51N~0 LjԀ@s̥-o.&%Z9'Be↨m{*p)&Hpl"SI v5%؏PV6 cw8BoB}p;Ug׎ R&9Šwb`|S?N g o^~ᤣdsm= (H܃J[|<׻D ]2M>?ON4qr|4/ƕmJ$=^uRQFolHCL V3Kп;\L?3r_-gK> ӥ8] 9mLze)' cVUՒ v"y 5#tqav.ֈ^iN 6h OxHjR嫇g&8O8khC9O/;Vx%/h=ӂ`d1ճ|=^%"5wϖF}];tYޛP @C'$%@)a{[$@|y5_YS#JO%$q_@C19 ڀw}#%6B ='OGFW~߬c@W+T-0ֿw(X\̗[Fu.Shݫ}2_8o٤|!j$6Ჾb4ّ17ߞtX#%Jd 9Mp=oEe,X "3`^SAp'y$"zؗNdg˹jԋ0^&VI^97CF+D.AR$T3M.0mO((_qzz״GhHA\pHj2x_`>w~pbgByzM4J:e%*19BW${0^"dۯܤvzET>ׯ*úE'̓6i! &En|wt2ǛxV)jtmuA{G穞LuܾTvq3n!ҷfQxb0Qq A+TG$b8E%((+KY}Q" $UxQ#$聯FȄE@( Iϊ9Y _p>< %\5@0lo[=y^*\ݫ35o)x62?U%&Y:-35p闶~4&\M 4s~VP9}a!eS+ \{|G: 8߫L2s&}Up5z @$r9@e)z>)累Nbv+8郼tb[r/ Bj/ AG2kɕ#뙰v,lS2dy 9ERD2${saW'Np`#6Nw>F]QjH%4¤QSJ{HAQ0suoi9z}:iRzjzKyV|z`F_ֱ06b58z0s=$9ٖȍvt%jCįE&YٕMBFLoˌ  xZ&xFaH6d|g~56w7BTd!KOQq.Xf GCY>Lݾy} }Cy(j1Vӝۧ"m]*_ ;1a z5 кQjO-e!QJSfZ4/MqæMSt`xԟ߶r1{;kM2|mb׷(+MQ4rXDbȪJ43=7 >t ]ő,43Ɋ ]Q=alɗ.T3a&D/ U3}p](H)?Ԍ “xd1Uם Rd<& ,<&tV)PNQ'36f?/5`I!ܐ['E`0cxm+ej'a)ua Jy2Ĝ)qa-獙6r7 YL}:ټlGkFif$"p)Ζ%? *I`պO}׸5c) uͅ!%liL'ͱJ%Y)}OXt3՜_uIFn4WGn &^VA80N[ul>ŹN8օdZ2dʩ#@I3H?=0c,V9yMT䟖E-c%G:W$wPڀiT9uw7_Jgo8f }#"iKu u=g-"4ri-f3<0sFxu<,R>` UЄ| ]:h\މ˟8r:vB&Aڅ£IKk f+?H ۈWʣD;;=wk+2)GQiҵvE%O_8e˞1gł ?7F;ΫݸY| jp 7e[lӾ.*k&]AXzN3IÜ=%FY尌9ڴRڣc3MgS۸TW ^9^gc zR a]9U W\v>z{-8gl. bo:gE/5YXyگ cLBI\}8>ά?q&7[]Xe\6W}b r^ErȂ-W9s⦶*ߢ-^[h<() |TM6JrF=@;9#w¦:6.Ohq''lrᑐ8JaGyqZN*MaI^Uэ81JՋ{B"s6ZW|̘ !:).t"c\ae*6Zn)7>Lz8.['t1p= t(w-Cy.:L Р^ iqX |~HO B WEq^L' '_"緓4W3oE|} $MڵpHcJK$nK& [\f<ʏGL> Bj,E 엛fW'Upt@o`KmpdhS 04cO.zErzR;棉rzB#cm~}x2]ytlX.+mvKUV%psjһBoN hl[;tC.fi-,Hн\Z-777|ixr)~)# Ds=d67-2azb+evA 3nhȋ:07;;g_>;6kb5bZo{N4HkMӧ~}T 7f%;mETV˨\jAɲ1kd)Aħ̹k2$fk#+XvEEA:L$8!*0.1aH +7S았\A^A ,!}@Ʌ|f&̕o7%q%!χGq=ڹ\#L5zU@lJ3x4?M'@v9`gpf#o$*f:z_&Y򒆓[ v'gA`e0L?ŃyM 垨8aIa9{n0.i=/E^H\V\Xx֋ ӳ\c;V2Qh[P#߻u۠.Z@=֯p#_L Q-Β! E~=-/)a9ź2^(Xx"٤liu{ov9+&Y"  S}wN׺AmO5@*3Ruz>Z[fÕW]$\)wp.gcme3չ/eh㋸:O Cbv&\Tf~ong"+C7`0X8\j[٦l_)ɣ'y?s  IvgniPQ5 .'}w/xZ\Rŋ6x;Q$Έ{)HGjYH2 F | _l >mfѱ %^|Ӝ5Ƌ x큈( CKC_mAٕS1ShVΟ f Rsw^O3~=Bx?T 2M6îJb=S4 Lń걯{&*vVh5e:wHߍSFReWmݩmPĺ Vf&~1M9ޗ_ӁU!) iDATO/YM]!#ɤ) qoq!!.% hXS(e" .+CmY<sc_w3v A}dۄxف@ɧ'ҧZP?v/t월:؊Bs`Nd܊ 84Yl u1iC''p8DFLlTYžW(P>MX!=gR8MDFK-:Pjo!|$4bÙF +\h 5o<˥=qc$^?挹"͜Km*qV](]%SA?Z{-<@3&4g,?FW}uY% _Dx].]ui'p *ifnJ*;XYXTCœЊtG'G?Fy'R0Gdom32i.wX% ˢ9ks a ),޲rBu )eX =!t -m?$0aK5p4#LhzuN.;ğ!֦eE~ѹ/Lwb/jPb\R(8G'Yo8@!J],zՠ۴hSo3]TiHk,_TEtԺү?NZ-?P][x@AW_C (\sf𚈱ZɂXKD[-{K;\u맼lv4%A$8uf /T2nSI6W tELT*m}^!Tqh8.qjf]XW"M $X vX{irִ"[Ɏ,}nEۃN }뤡?h-4(Dv Vz -Sg7KG,ūW%}*E+0?F_ͯ%xw+?ju 0w995 tmN]V\~`^7 sǑ<1MMC{3vVMb^.M^R YT/G4V"XD2GƤ>2=F#f!MjRġ>bA9-A4Y$̂4q;/_bȼe͉Yaļu9qHtM$`e!ҴxŦ_?- UX69 #t޸DsO+6{qo.k4#o2æX# A.˨j(l|}Cr%*GT')jR4닕@r(PԝTϽ+$}YHx<,6GvAAP(A}dJE\ױ̏,:Jm`'2ȎmUW?+P3vzS[L#dSZ|d!DtA'ZFOYCAyKOO,ܗsv]`D96=S/:8$.Qձ+_5>huY%J24E8:6탆n`(ns]/4u(e0>GZ.-έ}+>۵`Yb+tDDY˄AapogIFξlnlLǢ-$+\Лl ^q_fU.s8C(`w \ʹ<ugʹjm>AIPx|Ƌ2{$+~vOq8mm{֭X^'/]^rLXxWÃ@#Y\6͸sU2L4F0,oeAQ&t#8 Xy"nW+,*balCŠlq˕v RX(O Oʈ),i-_0YCx$Y$5j tAagĄ.L9 HSsH_f9| e2F&y4: A_:K,OL9:H,6h|9(viw2&8Z\Slr v1Z2Y8Yẻ+%5S\~wY{ɍP胨e "%Dw:~UC/Dm"M[L"ӇWx4ԗ:B;}EfۂѻXS4NAu^3#BJ_j&y?M^A?*üGĐk;2XO115GhD' (! h7i+jeC b_GèWNw#rEy*d.ȵ8冷hj8Q//* &$k`Q2>gxh'@:jd=Q"+n>^ᥢAx/6D3 (GiiE:LL0 2H]?SZM{h&X]dA RެIax, 9qFϲR;4r`WL[WӶ@̋>+4y3rhcPpuG>?~*'aI/v|4&${.=˜NQ&=1XZ.Pb].8Xq˴vN9U r`QeҎv%$Ek"E,Ԑ] "4OظyzL[sdQ|~hL~'}ރ- La}NBh6&xTaH),1m\昒P`=y[Urޚ1P]VgnI@Vh%(mn{/pBQV%֖ɏT8ܟfSԴD̤V ulq,y,xK3i$@pճI;UiH~)pL:9'8I@M!˲GV 8 Fz?#8vC®g+,qPUA>BVO+ƺ]…ˬ!P)yi}|uH86ݎ5Ϸvs6oRCW&ibʗ[%}B;y=m|gX9GiOX. Kv6:šf*S@B^z"?Ut~R@+b*v)VA3dcP*YOA.}mkMh/6Xgxo.U`ߢ~# ӡn&?)saq<@oPO*?Ͻ J&~1]&V+f%ZU*>6RԵw`cDŨ zԿlEӗG4Ŧonsc- tgbv2ZX1|n$yOk*D9y`:.# `o7K$ÂKo& $^H:F6/@"T n2Ԗ?g; 8^/?Ib_e(WXi=wf֫C6Iɞ1w`45Y9^Sdz3fMlelm0q?zJr]fWop}԰G4 56q"ǦpCŕGaKl?U/p?"V(۽ߟM{I[r'\3>. PZyVmr]'ЃIuU P-H6Pe K$>/!Ob9JZ>;wXftӺmXQS,6󽙑 DsCC ((l̤{=>]^\f)nyPCGlƳ!>Tx0%$&m Tx\eK.li͠oU,XIsQIV9rtҕg,..ֽx^G3RyYT mg_ ϛGJaAߖjT= #W`Yp/NR(׏M}QΟa*_b_Qg7Dh\]maO\!;G`PƒOcWZՎ|O#JX2tLZB&51yȷ@ :OaTO0/fMF%R19CK ԜDZ]~{@_)" A]0X 2Bom5y[Xj9PqsjQ=yW娎+e \t^}HP^wtAjJjaCiʤ]RiX&h_n _wq=Jj肥8k*0TUAv*^>^e r3߶ELG/ڌ =xGyV/3{vJ ^kk#_Nh3Li*f{~a.`Ie rLkbX-x% PJ=/3 ` ,nW6ddA9qi:7!@7V+nNq1sn?Uy@C9LvLQDsf2 ޤ@ Tϩrlo1$/QU4q:MvEϲ 1PKicPCs|/U/PiKȊ6b%y,Y+5@= dY]X ovz L 䴚59:ݶ(6 G$I'+hY66D kMC&w`O*z"vDa@dԢw=Nɟ@%] BӸ?8;>ٛ|Ɵ j^652U6hP9Zvbx}: )ZvLS}_*8b_]4 3wP+֦%v'Ew_o#w?7,ܽ.1xW& @@/m^Udh} #[8w@]=À>*)]@GIFHѵ'VhM0/,qPp~oգn*qu~>0cB؍q$N,(!<]Gȁꡞ )I>t 8C>ruyNY^MXCa6GOJs -2uW,sjD\Tݿ*EmXxXL}Ur4u,Ro-#ˎ)p{RR*!X-(ԫ7GPz{O\0FE7rp#AB-YM,998sl+9K 4r~0H:/hLbD&K"$[\Ë]o@yULz+4L oJKrVL.ٽ=˪I:cZ3<n,NzݸN:~Qf. t_LUb[yY& q;.a!% \OD( S1Sk&ٯI}hlZe<5/< F~c\_[};=SU>;Գl;j_ x} q*ܾG`c~6%KH`uLb xee.A~bh5/)!0ꇍGFk ~~%!.$7 Q^>:< 7vݜA{+lƦ.U{4 yf2q}C9xzpe<-v}u% 3K6z:@$g]Ցsm>i.)OGq3k6M\PePZ!|^lj ~ *f 0\wH;m;]k%96{[6FmzqmkާF_Ox#ͼٞ0Ƅ?Y2@;2vsOs`a$+>靬h#f)Ar F .qWh6'4 7*bNٹ~nASe.sX̀8~ žkileЫV#h~rNߞT%-XrJ5_ʼ򖓘gC4{릨oTYpɈxwKNm \$y7jbA]O>k#<*F\U( {Nnל[ӈM̓P(' }?-H29PW W9)DG MP jx8A*ҡ~5%~1Zrm+MY6Pűi~UJH8Olg˫W졐 )zkN1-6?w O rmF[D.zީ$T6jq5vxnX񪓦CO轴0r*AcqI|ht/z9X/JjpGw[O'  %6UJю8sZ**aHAl)Heed_ RdY*@ H^xit=I'ICHsu|DMô2<ڶ۲=Ψ6`?!J uS N=J#ZwI_7(A;GVTJ02]?Uh ?D*Fи92r!sEu7re[fX[T?uكVs\W{2 +QTvBi8'E3rpHzvK5r#!X 2C/"|H3^#o?' ގeΖr3JTB9~*B2}|0ŸCFûYkvg>y׍ RJ[28?P~:wuBOJq5?A"6@m(7J~[x]Qt GEf4ipqDSeU eO(fA9skD' p1x_ 4&ؒPiT ۭ|B$ti5f{zjdj#R6UK)y.`^2Dʼn?dP,n3{p-.ti!Lӷ#N3LP!d%;4䀾Vf}ZǽDUjakNMІ_V<݇_]9nyiBϒj+p@|XBh3glK.gKx9,l-5Q֤ hk8)$&&XI5RgJ@Ne3ʂIvTQ߄ukc/dKt%G43t }ӱG@͓ԷMR>nlc_%ݭ.cv*m|䜉`ZgڶX~ [j&Ҽ~7`aB_fg`OGHvSUr<.rm²S_%uP:w+t|*[`ldś]F5JsMcq7BYya|Jloqm𚪺'ZjT3T0>'Px1^lUE Iՠkz7He,k<3.,{E|bXf!9&8{PP Buo¸n/'傐 ^J@?79Suͭλx2\"ǛZRgf/ lFT22&yJF/.9m|de7/Q̶ ;kK_{MN}2Fh)Fդ#i#}; ")(ҍ9ĻMrc& RfSH j`\Uވү!ҍA$ڇطmvfh:Mvk3;=zZ&A81漷)Bcg\ĭ˥9q Vwa yJ t)Yy)sw`VcލJHN 2l qLKb 9Dߛ2VQ˷lv!v0i)2iJz!5tAFx$Tk+'GH|I(A*ѫAB %a "H[HEJriHsՙ^W'8)^E;#$UҀ +Hʨ޶Y)f6ϟl6M!"?ڧ6Ys-y9p1LeBU{Dʇ)챋XsU$./[s\răe;+O:oL9 l6$ @>7ȑdi3Z%56lC68@4>? !|+MEKvY<( x2~"X§CjQXV˖ltp=xw61N<>4rճR3{u MSݍ=q^KX{"U؃pxLAB\7,蜩T)*R9kl*95JޭE% `aPQIklhk[*UvUa@#$8ge6[oƻ\Ф j:pi&C 8C#laĒƸEZߛ24TI?{}ϸﶟ}/ݙ81[b(yM-xL>sltƒs8u,MȺ8" <4 nP'7q smokoR'/`PN-#h)I fL:ӪSdJ2Cqx/ i޼Q}gQ1ڤ,D筃 ~oLIsV5xl|bŽNNv 9kE%Fϟ8 w"#?N0{ GkwAeC@VGVRr[xCmó.]"\M y3@g,|>ExcإԔo qo,#/ȃk'z~2Nr_J hH@Q5T ^\PO3SPelH1>w%JH6(_`qUgn W..zQ_Q3#sY `N yviua Kxh^hgs_wq-8M4=E 4w'bp"BlMyz}xkp)WFd{t F-M<|Y61ۇ)\UAaZMt@՚~=BL^a&-&ߣT?KzV}^r&Q&putoH ݍTgAhl֝D;N@ ϩ 843 xE "ZrLhSxEP5('C'®q-E0WIJ`EۥmE N!F#0K";KI5Z'Q.)~KmB!l|.㛟Eha,*Ԇ p9$ʿ\AgA9$ΓHԯX|߀CB_]l5J~``*yTaMSζ;De8ӞAJ ;BׯtҹcIF-8rEy=NdM[,ɃB3x%ixR867pR[yjrGObo^Ob?W=K=UھVˏ*2͙d 1[׃>M;/>L.Q}?Ug62}hV@ %DwQ6kQ_xڕ-6 cઓT@/T4r '.G72WL83Ь=Ude )M";OjbpWۆ^p٩eT)֊&}]y4G1 36o#Fhp˖?ԓgzƋuJj|'Lo˝!9ZvڟqA|k`{HiobEW<m՜_8fQ/PO>z$rz18,g0a*1y8v+ IؒJ"*d܂D784x$>$MRо уwQpIFE`Wʭeؘ4:q9v!m<u+>\,R4۫)钵NX$ZeSwM3fak"/cH^lK 8r1 3Hemվ6X-T Gإ̾QmR.sGv1y 6FIYa(ԏόnh]F\#D:ߙS.7:E_JL9a1hvC=ly2<5ɝ_:oYnwcrKL^ k0Y}O^?}EVΚ6G7"DBG]7U&ݣ5i?Hg\NKs tI!ccRhl`j jOM=Zƥb G9+)M4ӛ̚{{ƿߓH63c/º>_S8K3 /!9a〉!}z\7U5QE(nZ*elx Ax{Z"%n2؈0úKW]I〳ҕ]cVez>"oHȰTqF7{ dNmF)Sf'_ݪ8mNx,>c3xxOX\Dd׆%^ܵE'P|qy 2O @/D{Œ>aDuuQ1R-!YUS//sl,Y5\;<+u6!@\*uX3EQɘ;ȷ xE#i3kI'839ڟ6P[=Nf}h,#uisre]eՄTROk{I–8ׅ ̿U0-fe~:&oJn+?Cu)G1)m)EY8wEjbcm[VL@$ts Xl`3d5LPr$ C #I9t!27WU/v=tM%8 P{O? !oE3]֖83-cʜp {$.'˒AK;pvJl']]/kKyǛ4ϫ@b+c&fFS`l|?ބTt׬)o@a qϲbs7Rҷs9Q3@;be6b禼m4I&>`O2شBtx=V!uun q fs$qEsUPnoa@RQ4z:q{籯ildW3'4XHрݾq7ж{Y&v~R(ǘOLz|2u%^T2zd;f݄V 31=_tRkG6*-M߳4kCU Ŋd.w팯CMKA>4enRQ# 9bJD ٥:dVi-*v}xrp& aMȲc{6d=B2qZ2I^@UKO- ECTX<:ӻ4Wh&B`o 1&:ck]&-NZgmHo.Ɖ`pcOt~߄jUlCa#$8@TI$\UZ(. 1nĕ ӂ"Ue)C!y,^ E/=5DFZ.Ў_u7P/[l '9G]EV;axYzhqbbsͶgx+6c9PI"B=+s}כI8J__g L[t4 oK3qT2悷1"xߵ!)J Nz:o[øCwyGȬn/ώf^gmE`x$L o7_NqZHvbP\z7~ћ^5%dߣVw];:G`i Y&^Q# OVL`DD R`Ca>Tߓv2HoxBUsݱ'N5{ٱoʌFBq/^y 6w%=GrR]ZhU@+i5EXePQi…wD cԥ< x\ 0aH:NZeH"'r{){sX HϘɏ`d&8 SVw&xt3 Ҷ:-KɥT;;[:nPqi5f!ad)>=E-$!@iv3 I],wj[M7(@ѭ5oT$uahc,ZI`q"޶h}fnMʴF veG z_rn @G'wSeᦿBxj`*{wT坲ٖnب^ D#bYMRمe%B`Ԏ`7Vhugjy0_۪Mh{*]OsBg,CT` }VuZ )ϸ7΋ɨH˥2*^]:fdȴ;=YU(]<87"Ɉ8Z 1*`b`\`4~.a2;ǡ>Z:^,>&"{#3$ l$x\x H_x_eЯZb4 )xKkZmu!KYU7<Ԙr]+XjxzC+A9;wVo FAHGyf-쇹CE9 f-a4H7:(H~w\HD6?my,I`%es.^6;!lbmr_T6,YHOC X9E<vz;cΤ֏F:uA@?/K-;wx#pN0TsgZ鍖aIm:<]'U#)F \NT\C5UyL \Wz@(uOٽ$@mOfjð6?ۭD\&!m.S[Q^B*er-i)i Ik8KYj!?liADi xBM|`x G;aww38 Q[Fΐ~ xSL3P}z 1)q׈D#5Hj?K;M(]w澗q,7KYƎ\># |kTL7]^4.>LFO_lq흚9a]nzʻ;Ų,^J{xT&,xxW7$7=%2بAҔ`0hFJ+o[+0{&Ag ;]Z0agK>*+قJ;#lm6:KэeqhCt\O~zk=^ChȈEVE5d֎(\ljO4cXJYA1n'zB m8U> ԋjͻoc*+$*e+`U6-K*~dXȒY,)vpe& {!87 iuPe$(#ZRC54$H=񜜝9rҪTlN$GGzn'NTɻKNk0sb;,[ Xp⟴Y 8oNCg%79y@[\zB}˿LREZ ›r 2,E&iʊBJLLT\0N̴hJޜcmn;"`ӾzМBM)0UU㷹%V ~;, keP"Ԋ]dؠKPo!o rϛWS<^g|a/'QpɆU/Ygx#[mUU"4KYShz_::R|R>z"q[ @c׵zf ڕI8vՔE*y,I`uy)avINONbZvYI;V!-:!a| H+:E 4y$@0X Vur\҄>/Oeh@zPA5A&nOL!8ΟɡbE0ҽ*Tj]W7͌@1܊ͨQ嚞{ͯ.{D<|vao%j;BPϑa&dN9ՖUYΈ\a\g"t8n^0]yL6.HaK76/g dja9G֠Db4ܼ2zf7) WF3TaVZpU5x{[@Jhē/=s;jw,CLռ,c /nr"Ȣv|Rƿ=#bc!)H'㎵H` KJEo Q>:I;W%܋2f,ˇ[EYM>\H|t= iMEw+NԵ\18"S6oK1$H [\ѯuL'4fGB1YgK⛗@wG[)xu~.ΕpM줳ck¹_5NmpqGt0՗pP|ϫr'h73 t~^ [,)|s7PѤ4__E$Qi]p CCf 71j?R3è}:;.eDk}}~E]Wʄ.lX9KY1ΘÕP 뮋P1ɿQfNWN컉 |\:1IT~(]=^$ 0J}RDu0t*ZB:bcUE>=6_W``/:p.abz_1B,lf@<Ĝ⶯{"|'p{+h?`5G!o` ;9Bd Wxm͢QГlMLI#'^4EWI]FMt~n9ڸu{p"w.a?<ޯRkݍl_un^ZMuC˾Gc-Z}2?ϼ7&C/{j lF2,HxV2칁BN˽S+%zX |*쑷Î-@NN8%>bǴCP%}ʦ@!_i.7`νìVʨ|_Io9WOP!vns71yP/c;ZߔU LYCρs s! ^&[ g 1rΡh߬d X0@~j+f%Xsv9ayvl,J_BAe4}_MuߧPxmvcg<"/4@eKNYh ȧGjgiz E8+'Dԑ]hgͫ[ilc<-Cqb /&U,)=Ɇ{D`LEo`t#KӳV- '.੫Bi8$'/ 7Sxګ]ԠN,()Ō/Y!atn{KN=,a(asGnPkx:O'Y.o+BAUp}"Ep{L[B#5F oг,mLY@)9? < y؉BR pST;W- Sav B_$Wg`3rXg`w9d%Lү05n^ef!HvMS}5:Na5zH&؞♅V;'_]Ws"X X ɗqVE @ɬFm7Y+vR縜 'TJƘ*tğp/Fi)Je<rKY[䤥H k#IC dK 6L䳅E_@AᙰNJ_f)(fjWݸ 9Ȃ磜XcDARhh'>wFV}axsr!Gn|+XMm 17JK_GڅP5n*UV̑"ZFԫKugy{"YL-amb8xDT^tAb_6 > n-yQkREԇ̊YAf+)O65^q^IYE*YEE~f0b2Ǻ*H[- 'V.Y/s9C%jJ#40>Yi\n<{fr{my[RYP | (Ely!kE+m>'(҇7:UʖLPw^c?VB^KMCo?69$b7%5R0}Uw&Z.e 1+tgG2z<{k]݊$YLUx5,D0bS8I|'A4 \d'au\S''nNȠgMxU4PGM+۔KEB;bjÖ IF̆0(obƃ XrL]Yd|Ҕ{]p<Ӗ,׾%IMAY8]IJ^&\T&Z^W8 +*T/&©> K}7ES*.6c,@},I& իGdJW9/y̩2>бvPv1=dZnq.i lJ 6S΀G%>OV-`-7x~li6/H#Vx/|9bMUK旘."87lݐ ;@Nw n^a*~0bq0^쩱F& px S 5VPwbͷы]"p̳4ݟ)g % C\__f1ÝL׳^OOZ7cf#E/c7j&9/7*-ëlLF{kM>+g-+M~AG$`䞠oRWkV#׭tuߘKB#1Qnp;%$H]BpT4Kp#u,뤒^l[5%`3f{X^ FYO:JglC31 -,SHC(G2"yEtA{H}qdCN`IS4)$9^h; ;D>U)拤mً_|GF,tnM s\_v nc>ׁ?;R«3üI$\^u#aHqef*YoF^Pc>Sl#貹U[ 5$Bv~Xg -oD?- WMl&+c76|xLȎ0Y/#xdMe#.Qln*uMāS]jÉYt$r7k#X֧<:V?%t Hu;_5*nibS) Ms0;d6 T6`bŀD\6Ӊ hJ;cY59H5}E&)8F-cv[Hӥ09C@fW9Mȏ.E Ina2mK?qY|.s~ωAbj!SDulQbzK͘7]PضXܙ>]g00,yAILM " iiiOjQm = N|C3:wt|N>ϕT%ZFc˟X!;?b<̯@JA}a_}sY+&26NxCz@Gtг/{9B2"ȱ~M.澤`w@SU;DB^{MM.AFeQ1bM bS!8 J"Z3H1H:f$y!Vn l2|a#/lPʉ_t^yPYN8@^)(}D>vNyC̍9&:yKj޳k&7.Jxo/s ؙ1v`ǙcS P2oN/Ev(^OExÉrK{</ϼy=|o7QMwNEp43Xp"LjԐ-FovhF ݂'DwcCu@N3Y8QX/5$AC f6p84?N!R _gaQ+=/K,D[͓BPZ:AҬى>HONy'Kyk`\3 sTy,I0\)mi񸓧]zJ`۾{F/we֌핒/!B[]|EDrvc0NypoDW R@ =]C;H1g65TJlV@ZGzav snta ZqKR9_Um5{H9b _g),Vi^x.wMi t`B$K߽L[h;V<=SFV&҇cgoӂn@T\}5yP⽐+. G +L?h!|^7w7Jl@'$<"TmtR΁7R*"-2"8oq] v@AcK P@b:թS8j~r٘+Kggw"(/w'/ݱ 4v,B,)=o},vWN{|: ,vXHujuJ"\i58W {njXMWgx^sZҹ1TH69󧅍S\RKxTCqӠquWDk~i/S'^p#10jrňn@Lzɘ #+3ڞp ?Xݩ9oX (M"CEK0Ot^^,4¬'rvWEWXF3u\ 2pkǎ03%K] h5F-)eE]eDPdy\ ݇H,!?\ c2 {, "mSFs, VpȐ.+o |us1%v{UrqaԊ!ynYӹF\@K9MT ݭV 'hqڔtO(DHڈ3P oeDuG(ԛ5v=- )hmRJqSj ""{WH/پ*_hI!\smTt!8wY+;N1p)Kh`7/zxCJ}&{T=t"XۊJdt^ԡ~f@i/kM2']kmAĸ@mJ4SZZIJS$J+"6$ J? i.Aށx^= (`Vv)\Y?*S}L6876*zbSsNB΢@ `FPşcEZ?R|劂9|ž:Dc]A*ُ 0eBi @\-`Zuhs`Ocg|4JH:m4>>RbΆ]"Ɲ|,/K LD-΀WwQYXzs* EPYK%v>rֻEeu~Bވkɳ/^O^) SlVgc,ef Ut>&q kTPԢm{#~ $m)L0Uj0Ϸ 'E1/EsQxT/@Xt`@A!}Z~_XZ $o G3R|yCb];F#lz(_D\~>ƙ7nDΫ~O;_AEzMZWRXBQN{g)Id%\ȸ`It~_N$bD95\ƚvhgCB,IJH:;Me}Pt+ѯyIw|}?Z +,ۀ#{LgVFѢ1'aS :D0;-ífUQ,&-[9|zD^yS#?MﱳC5i~X=]XD mT\PIa(g7w QKJ/MB*\oxcl5My@w9Ԭ"#ƻ}5KbrEuA}/R8on*g)` DL`~+Ӄ'BHWfeǚ"j.1qAO`DZvO?F(vihaA>u C{h:mKң+ hPoظgֱN:EPpCa)_Dx⳩ZS ^cY?z_-o" Gq꟥I1Ҫid*HT/A7_ehĿZh,-njgx9 |j=vvA}`)רtRB2`g/~Q@q;7Xw(kǫHD)dkni]$ enޢOߙkrփ6cy0T-lօIvde(|dԯo]4K%'n\!s"l~7v`nVE6`ULk==L`C3Ӱd7WfeKìr[n|IDX~E;u'Ҭ Л=}Prp/,;~Qq;O\Z5) %,GߵS/ ?X*[ %]t3EѣkU^hu F<ؼzn%jkDX}4h$dMyF;Y-&(k$ 2gԧ{y^?b4&LD YT#[`>ږOa?{HNNfڃ?Ӣ%g 5? VƟcmE;j-0Qj^ A;̑!`n}V OƖUk?Վרj ߁ݮqt]/&tq:wջ皾a6-ť Ϡ->3PXXINKjOk! GөWm`/iYNCGMo9?xVx\dA >c2 ytuCTH{D7C~H!MZvt<PBNxxmuX(U`t(+l^dyͥN>oO_?cwM4oyTO$&p%-F i<[fRgAqؼ㍫8z.eiwlrΫvMꍭL_1cko'jLrLcDŽTӦ[\"ܨͣwx|9235tr~֛o؄1DvԞatTw.H)޶& '/ډ:v8ٔIyفE7uOCL*!ZGތD>2| E܋Y:XdKn6Af/,' '6o#24;pdzoY<~)Ȣ}`D X8`.5xJ\?TMwfe|MҜ|_]FqSPH7'nV?4Gw" nk}oʆLv1jvr[Q7&gċtRn+XbJ}{kgdb%ptUd' j 9ads*𲳛 |TfMbvsڍ0n" /kofZFXY2}!cq_uFeHj*Sa 뿓vo[e5ɮϙ6&ɿ[Bojb9anZO7'O ~nQɵq;{{%]H-/p"|gD߷`a.aILJ#iڭiX]|!k`qqcС n*vLÁ^ƪ[Қ4+dYT^iŵ϶_i' 6 Q#@Kyj oFMU4zX;U=|"Zk(X^{;wK>h a94_k=1Dd*D Ӱ'1|6{ʠ'BQ~r%E` Ҷ\ k6=o,O3n/7& bB'׾"46<^+nԗ1|vcngh |U3kbј^!meJpU0.HK,PnF3\Va3ϗ2YS:X?!SVFL6/M[ 6)!B,4_ v8y$sJU&[~+VV/T;U-.=/~xK()-?s_aE0̐ưG,rk)ʰiChKlWT4I\<)n* 8ޓ:{6U +9ɟ8p *x:SrI1 H,o$?*/Ѳ<ypq?ws`ʓ6e, N&AÚZqGl6%*EnAA*o- sCN>xf;bو(xi؍ Gc هB"qƮK4:>hi.v͙&4W`fE /Z'[Ug1Xy`.;M!5'/VnU82I0 hXGu8ei@%f0;x^ބ,]i:S '|tXR[1X¹(0]Ke3C?Vzѹ3S~,aI:Mnğ!I-ZcQ}NM3+y#Xږ 4"fM}d"b+-+RmW^WZZ Ha8ЏGUDcN3)EFZ\|!Q.ɻޡJ:/Rc>M׌!;g=mgAmhPEfxZl۩> nRV9Um N|[s,΄݆),gU׫,z|T_R^,E8T.Rd䭢"q# 3FMZA>G$}e1g#tܘ)[ ȝ z[[%=*!ן-Ȭh/peL x_keoB5ȤYX4Y3ɈrQG\%%^ !ZP?*F6_JG<"^?CO-e6f>1 y@gvB<⽈G&2gJ6@q#sGo -Y:ݺ|:gFA?4*Ҵ(!Umt!鉇,(;޻: 41I[ 6L Woh q(}ޖqK|,721O{ JʢGWRh-PӍ2j fQC=yΞܢH᎛;sa OXxM):Wa.- 7"~T/(Ӛ޳2%y;⢼m"vjʃTRӄَ/q?BB Ԝ(,Ц~ jR{<_3Fl×6Is87?u> :{ V8<}h]B/h&i-g@$#ۈ[YD"a'9ڷ9r(Z6]qFaOVS2=ܞG3hHbRgFs;l ?Uhd▧]GLx# 邚$Y6R DMe `ӉAJqa\kO~:3rE{ Z, i k1 1*obc91i h/x8FW OҴ?\\ny g〸яN|9#c<pY%4T YftF,Ϋs&o5 ()6+wse #<3Ｋ_rp"W+ʹS]4\_*%wKXaüB\'J+,ZiNeIZo%ȴ@ ")ew!Z`ϳ>suviT`_ #SZM@'Xo;$`ʘ}ٝlG-\z19m=!4P8@u/\e1xJne}+ ‘V(6:ZZ&!C~$효|K+s5e,n|K(EsIh $5Jcw6{VScx'{?)A[29'd_uҘ83t 2atɴ Bܪ='C2.xpɠ = h2HHJS* ׻Qe4)]F{ۆxcHXL\1C393,!gE9r=:wkP#T'b̑=fl?''S* ïwO3r/;CԨVӦT[(1*ۼn$prG,N(0x4 >WР!tؒ ue?W$嬑t0"K}/tpx]1s]ϨJD@n/X!+|QZ_^ {^@l8JjܺR[ 4 ꄆAc}:=2Qy3KȞծ+ PslG¼8Qwػ/t+=K坧&Wъ\1f:we>ѧf5[{2ë"pјSsa%&lp^ әHЄ! (2ȣ'6}y]<3ȿ']c鑈F*#R*aC9515=lnnZ4 Te;X%|+Մ|h:FpNyAui:G[̒1 xAhُ! + KzH' !;r7iϡK"*[U8)\w)إP\Vr\ƞ/Hʷ=o<=(K,BuS OAObEN$R`Yl0Aь"D1c!~0|Api>F=D#cwX-S&d! ) tqg\2vVNžTTmyql g7r5\cJAPSs;%:# Ji#>q~KR0̷#5NFo˵"پFt 5'.HN hW9U\$:__|<;js{s$ڲ>xTTr_$FoeN޼׾a]ŇU\=k9m?}iÍ(^HZ{t:و#=+0Ŧ:M&֮ی0 ErO-5q'%lBۇwљ!kco[=C>bΊxGjmṴ"9 " kYy8#7%USO,W=̲:tMyHɞV]X| -z"~GTݧsHƽw8 2׺HW<,Ӟx`kpq GeV5 qb& n\Qr)s9#TbnAG9.t%DX}]tt]AD{ lyn6Ɗ#W,jt!:D-gCLf1s)gH ٨08d ,K*ljAT,X {%K/IC,6Cem9ܭNA07e96F츞f' pr lcȋryiYvxi2/I1XD%&?^n{B*WONqxk$11O @VAbCn@:u!@~2J;%:/fC s"ݨIw*,ײַrdϮS𹤔`MOSP@Y%=E)y(UV+sWef #߀ em;R6uηol:0 o,_U*ı U(0m"4(B6Ǜ'Sҋ7d-Q樄5Y_=Ҟ2$6|Wlf=w2'julN,›M%@_,Og5Mੳiv>؞1{sչ[BAQ&Ewð4C0rv0f*Jp軱_R0h{U mn69zP4zmu3OViT3{}&S'g4VOaz0ۤ1VOd6>| V+ Y&g10(묢^vV9c0~_Qc/]9F[i+'`%NGʦ[PD[9Eo|Y (X]I4 c5cAO̶(K3,V:"}+LoB9N/'HvhMd{7B,q2F\ YwD9FHVᴼG%HF'NxPग़5<%YF%LޙVfҲ-S↓>37zg8U1i1f=nҽ8|-=#|Ѣ$h :bSK^=0-S !u^@K:z^SZi?T6|:*>Prv3 Vm1mgߔil#B?FphYccl# tjp/D\-jr /2MΔ vgWy=$lL2nLI$ gE6{"u؀| e)㯀Q#MoH>!Qw!@60XsY?; MD&/0þh"WwRτDwϭs$s`D=,i.ưiDAqhеCxqERJ}bFc!+xipP_ܮ0-?M~fFK8 3ѶjQ\4vٺZ.qrλp2fКTBܹe{G1>7\LS+\iy<[ߕ0Ũ'GrIV ȐLko-}>2b#twTO? +%d DUgtzM#%i`vyby"H$~raBA򃚻w]K_ս7T..QgkLutѿ% dc[[fw*kdwb9)t5;U0i[F VNWCa);$ɸ 6֫Ң=2Ga-H 1gdD&p">]zr+$&]ݳF`IvBd/ xoUPkŖ)سPP̸Rq] KIXwjTn%EK2ZkK]˅*w}%8CLcP s |FXΘdB\ޅ{IBoi30}<,ӝ*kSr&K S?zH.֓V""CZR{uՔE-Jjp5a`yf`>6*lF@y)Z;2L(A?B\Y̗W)}6CoP:-f7ͯso)$%b~yƸLi'k ZWW"fhd#-y,s ɐ05F}P C)>q$% DaG0qV7"@i# 25㔕~? v%8I}`&EWmJ7Qi8,,,^&W BcaҞ)Аҋ%ňĠ,!-Ah چ?lX"Xzy[գ3 Mȏ܄(rscxm=&p>/}␴\SKաQ&QgUuYU2;?njaAHT QQZ7ox~l\!X8CakP\kK2PIF.l w^ [O+U%6.SEdP-: ds?xw^^<~e>1r4 n4ޒ_*/aw|nzFO^1*HqC>G*'8+jbؾQ(s㥏{jüF hENt5ukRt'WTucz9l} EI+O!z40ela`><0RLlu/zFieg7Hffq9{NAZasL[ uO_lg|=h1 |6$D:jƊ9> Lwy7c\GDo~f۫Zxp<r儝Agẽe`^E0csd6l 3L4=ݿ%]"Ӓ5" 1L>CLqQ׺}hlqQ>/f]09f[\1 ~xfV{-}UssXWEѓ!<ɐ-}Mu= kӠ)GjE`ů'RO v:=B( Vf@6Z1_f:YMƺT#ʳ +~9a9JYiNjhq2.dz]h[\?Sc~DPz5^`O6npCf SNF4Tx+{Ca4S*%&1Lh_a`*h8!I {Xhm[hB%pA|;q÷D:¦6ϥm赤CYK. mG>Hd]u(eY4.,oɻk4Z,ɛsZ*`WJe0i ack)΋=!X:#!V^_^Ѓ5s53@_CGmڸ?8ÓeWMݡcR"][X mNg|bhW{|^?11@7K&bCK˺+®򵟴)t1@oIb@mXζ@dLId"~ekY2vLM6!'k/&,nDw;<cX*! 52`2NN*&rAlv~a( 4h 2t2>j6W/n曏{xl -QŬuӂG k#jRTOFWXGb mŁ} fCϦGDP8RDN9x NҔEkƙw܍j5ù^$1Wvx`/,gؓFA3jHAHgBuIk̔lŚ[o6^SuDܟ nT5H?lu (>e?"Z&v庠vxxttNfJ-WΨt,&b?a ؼm=]>Vr2@<ğ1ޞ=h<, ֽ TK7Fj!Y/mD8JNHkTp^.Q3Kō Wƾ@i[Nȍ P0/֥}PAy4HbSNXrIs?HqAw,WhB(] P f> |C0On48 ?c~l(Z\d޸vxv?-ܮ+%ÒijBYatˌՈ*<- iAӘ1}n+/SD,ZZ@]WyLmpJbRqX=U͐@g>;!VK kj@n/m&ojE\tH`E 7!1k,|PG?ؖPD<`P.fhlTˣoR|# HqqV=o۸qXg)r Ԉ꠩("5B4? ^7ŇV>mL 8N!r?'^}!^Ȏ6ЖVMμ,(kg@f1]Z_b.5uٞqG d i+u:z't F& Mc 2ha'ElH@]fqB|ȸrɜ6"-lP }Ƣ2\rw8%#sVOyvvC-#֒"H%lގB[}czpdofQÂ@TOW$7?NI( +sxϚ',ﲈqپ|Te;+^ r` T,Q˸[eWUSmz8RyiIl7{s ; 䒷g}5_e%n_b$+  0 ݅YN狫]¬ša!mIT1)<*zI{]c{E bUpڃh;gb⣆MGB,M:铟xx r׼Y;s[,, _qyD K$TpkFMǠhc9tvU9379}Phmz-:d*wc)]fhhK/Qa' =W@P*~7 ެ\;?av֟3<-Nj NP+3I V\Fp&aꉩ('fR Rޘ".UxlF嶐pڢтqGՑB aP>?Fh>Ix2]A,ݴ/Nt9C>Oxw(hz ("LIB:v.j`^W"z@{d WmDBk4L#8䲉T `mS^4sp"7L^%`Q)*3⏋l=ck:7[|u`^͇2e gBF8%O8Qx&$YU 顾$pd2" *NHdUOzm4;ެ+OՁP`a-f7 iꐈ* J6WJ aG!A̋=(QRr៙"X8[HƐ~u=QUG1Dm/TJ6}qAM،.6/Z/ 6Jw56/omxj ۿC ΤW*`LN  6(Atqy_#{E5\U3d$i؎Mt$!HuӢq/kU ۓ BI; C6hYT~M=(ØӨC J]F9 HoOCAP~w`LjJEK`Kxc`Q!W@F/Megi 8\NYi"ӋloTqk)Ӑ''nOpёO- .b_JxOy i?k5l^΍CF /eSX d")@O$!EUaJhb"H/vrHuaON@KJh m:/ĝO&$&[\^q: 07Uk^{gZ8UY}(]qM䲍nW{(WR)\N"ǩ&v)y1<+~I Ξ .w0nL *6Bȡ L،Kon 2h>쯺X(y_%?}83?B/seRM;^B0g4PPvYͷRή7w09 5(JR'ovm*wOюNPpxƳfʥAX >w&Mq fhe;y/M P$3;|v|̉f麊J-U̕S\5ƅ/ @ x"x |G5c=6> Y77n䃶If0}qص ݟ5A@}9F$h#w`g0]yс7I7:1zEʦ?#[F050\AC IB8t h9-aG_5"Y}ڼ{;VcIuZ=6I~7K`ZG8Ŀ,}~OVVl`k韥r)M゚W/:La>G,XdNX %5rV:,67ѽ/:SE2L\j; ߺkeˬdl:h['/+;‘g4t'g#茕n8R.Sn',ͺ `% &vg̋[4!2*T5]+9? 8MpEdv*í M1Wy$ڼ҂{Qx0)ӲPH)iߪa*msTYm^Ye$\c l=P55F s_`Կ$QZu}DT:ڰU5 Pf/iSmU,watK}Mx n?]Q@=F<霱9.w0@SEZB.lUZքIpQ bV/2^'c \cO:R `9X50#O5igqֽxcL4E~l%4PCXNlSA kT|]$PE=?Xo//P=zFmSe&oz1ȏ00ͽʡmmO`cVY!7M_="EynMzb _{07 Q /0ލ@]yO$L*C& )˲cDa"z8#;d <#1oR v-7=J-”ٹ=5iWIhk J΍PtoS %*Zt9BՏ_[4AH"䃥reJIÿ4d(yP .n[U[pB-1ck_LQ@DsgcHXg*AQBҷ\)U~kz! >4)k R@E6NO(w~NCZ%ʗfn38aW`1[ۡS1"!gEy̡a aQty,=Mt|g䷟BH,fvXRqJe1&B0g+'3ٶR+鸖J4_m(4(bS-l(e.5̸ ј+(E1fdq!\Zd׷L.2oAz/QVf vgj5!`k:p%|*z u=Ht:h` 4c`RE-N'hD%L~&a*_]5 j(#5?;U0oHE\ U^Ϲˁw-}!a"qAf6C\!5n} /WEg=6Tʴ*`:IDJ\ۜ1iue-.} WӍZ&{C\pAy@Z܃D ;ggT/[dFBʲA#$dpD޼[# `5@̽czX~]f>`7架b7Vh|o0YT BLBa7]w +UyV?0 B$uǖar{8j\~~:P#jx[7 ?)vvɥ껬_i\{Sw\4ݲM8 A[lWl@Ɩ@"Pxj|H XVgF!۟_U-(wӾx13 QڏJ@ŔU:x}/U4esױ]e!+ . цϿ\Iɀdᶴ^[C1dI3t.e;;kWɔ>&ڷ^%В*ܽrH|s\D)7V x^ˁdQvVkXjJ.L[kѝILȽ`By3^xuG^]Ҳt6~{nx.( hN[kg #~!BtKc35"҃4-쾆 |g^Xb{#H[tf/NrYNӞrt/֧mrǔGs9?R>O^[53$1Yޒ2wPPT*wٳm}wTAL7Xʭ{,Gj8bk:`Ca0) 0~1m5/CQec^1{5;>v^.IԾ/\|zjO1IILC'g\J)ooV4M~8;b(#sp㢿$S@yUð:[[l'?QыZ N8coOih,DXA^VmEw,~_ŰaÖ[ޗQ e2/֊8TtDI7I _|X&q*s/ :|:NBz{:nCAg dD$>=iˆ2WP^dQ LM?iz0چcL)T~`MfOF>D8#nAiN;M' QD0[k&PȒ # [FPÕRch kI `淝PYrNN5פ\q.)L1AB N:VHT Xܗ٠}UR) êH袸#(UAMC(^s\m Q$e <<#V'R)#m~ՓvB,s8yA; vXv,!_1!x:;YvZp `R[Dx~nZǁ!T2;Z>q߂(sbhZ3޲$r=8>*@ŋcS[n TsERDB- UDB3d U]МT`T* 1?gځw.\V{kIĒK\Cg~U>5s(kMj.u;I8Aib/o˻3NwqW洅#)0K4kzѭԦ~$˫@e2ÌRCT~jռgld>EpE.//enDgX UcUBX)2|S[QovVo"'v.T+R :cHqcr0W֛Pմ^@ 3a@a ')DtI2?n9GC bu I#XȻEAl˖d߁o6 Az L}tcPA?q6MExK-#&Ĵg z;Һn{0Vb;g 8Zd7]W*F+0`]A{rw-Jҋ+ {)mo)Ԍ'R*d^Xh:>VVSfr@vtDzɪKs?44e"|D]nGk`]J~6~Ͱ$Favx"hob^`21tb^yV>Ku;sAwG#=z36D16> ,Q[ ,:(m]q>4i}E=f7!mqEҵOlx`[#NJb뮚|q˛e@Y}hh0\ $^ #Kvfv}sLFoAy@6;{*9)tk*+e gԠ0 ؍AŊG"{0̨O5E$Z (`֨szkGr9llڨ TQ"E7(m옿Poj_r'wT,<=x ŎNnΡԌyRAbɟI4T\޺9*Ak彟8ԛ9/"\6#6Fq./>uիpFBV]3ƦԽQڢqJuQҴwB$ |UA#SCԂ=[nJWȿ+pjM4s6v \U0@iAf+HM,-,bQ&V U"eoIGHK'K풍?2Cmsn+t*"e3'g%O6MPyv'krRv<ܺ7GO2[c62A6a-jQNQ& ͎p|WB^Sm|R$Bbع-)'b.b ۣ]݊873fY I=?b r:|r2t1Y|c1> Xil*2fلN/8Ga'TcާZ@ak9y)Wkt; 9悠轀N1`5SyꕄX׌6fn11^<({ah9!xmu&FL!uuKTXQpDqV ^g"H'ьooi1\,=#=[Y 09Ĉma@$_;hsfVWRSU+95?9ϰkCZŒ'g@Ye3XL#)qb\˂ԃR)-FDৗc~[5BKܡZvvK!0%u'FNq4^=X H re}H3:,y꟒$[ܶsnWqSG+\v}OohzmDA环 LAx-d?MD6 d4нId#ڵ?>SƸFL,|ϒÖ-֯[}4%37^M=Ou]TCmhJb~" Ґ ,X?!zxlgjsrCf ? 'qPe;Ŕ(vcHMڳTPkÊa\_VXPb3bVi lݺX7L۠SZq|i ut3kD k;QɓqD0ue`Bf]x; sPO3zѴBܣ"_||N2$Brݾz؝bd MaSNYlSklt`.foÅ,Kfkr}3]ۍω#M$H(UQ[_UZ6)d0mjEi -ل:é-Q.'zas<̓>SfC^yHS@1!!> ɕkڞv((M-5>&]@FNMJQlxd9ÿ0+e:u.&$^uO+0o_A Ix͍_:3"(Ə|^pfJQwyF]  I@#ZH}i[aEr/94)ebxvJ= Ūvv͍WtVMXhJP=\eR雸;U{ipK1|AҥNٍh-P]$oa %3G}x@=1<:-k^oknA43s/&Q޿e5DVrBOs/g4jjpKb|" ^+UX.ߒk[IK}=lLSݢ.F9[1v4!̋yQgZo"Qkx03oZ"5A]6Z`Àb7+P~% e5YAAQ5nHŭ:` !HzL ;̛]Z]vo '9̠-M=|j24%Ik8i"Nx=6 ]o׀Mr:IА|)f`,:kiABP0L*S2ÀH?oCNБG7QXO~10I;Il'|(z^p!7)Y{!9Y5֝ yvqKR꧿&SuG}9w8xFǹS?jd,7anJT I]i9 s=s+~].aMP5RG&Cs!E!c Szv4.mRlF>7+SyಥmA=d4hs2E֕П3WƧeWb(AX(2}*)bԬdv ,['ά$xº6E:WǓbC%ƁchlYjϼ%0 l*EړolkM$` ]Cg۬ATN8-B֦ |M6~Xך4 :2OmESmh\qoPEho <vUk{Ǫ&I|hL|q]+9.jRE r;o{BldIG~OnA|^k@jr\ET01Vl^ݕpl T7F^fB @:ݚ2_s|uU[jؖ#AjNw& * ҩEI~AVJ,CZJ@g?MPp~ɓW#PVvǏ.[YG:Z=C0.& \q;sMθ:Eɷ,ba0 -mG3 oP3-=yZKcHNvɼ2qM XdUq3Rf'Id}؇T;q* z To~ CU1@^=ۦm`gjНE.,Ff_Z'BΔ,( YA;Kv9-N>1Yk? Z^Q՘*$0~-9;.aS]>+5ڻEZTd h8j+Hc'yc1QD'x }z+}E7Bhd =:PmoQ /6 Aנ}z TUe ik{#2_+z$Kzza2<̺>h ?4Qc @~┙Nw*MUΩ}Ћ3")UV^xb 1-@MϚg~:uS/} yC$fc`%4_oU~h+WYK5ۗ-A;tnȕ`V 2VdBd "r= OIBƋᄕтQȤ ^B+`lN;͖(r#/Tl3o7k7;D{;n"@.;ʷHQңf"0!b5BqKJO#f4n}2mBcA] v':꩏u+֚7H,V[$B+|?e$.:pxjg*gH&A( uU))AK h^ +DE$f ڿgE}9&ѶߗL.lZHDӺ rf9^Gτ4ŧ*-نPX/8༌%5\qK l+|m=hn>$7^[0C[5S*ce"3c)WfQr;8qrBwy3{ѥuyѝa)\S*B0֫Fv&V-'F򸾻pl7q~Q[RwI,'dD.-/-XQrL2ua扻;u<0rW~JL6d6)`*ǢRUqTNM=lMl vb9U {֠{Ɖ]i( xxx%i;$rIUζPtԅ#DQZ͕*BOPG,lS区 >ZfS3層im|rZiO8Kto˫'y߱".$᥻ښF{Cww ˥"<srHzlD9ZB=9bT-@NFԀIOqCSmbLΞ "Poǜ΁b3GvPkc'9lhۘY }| 囻1L{"CKw EyCzR]!;_9͇7T-c;EM\HVH4)zIg|M:$[bn-9$-;mL߆ѩ,*7s.`ľ;Gv+8z[\6pQ@R爙g[L휜b,Qmaxly=% 8.{;M_dޣq-&ōgc~F+/YEW/ | vE4Xk16#EU6}r8ސS@zYbm{QW$?%ڇ*FIQ5wŐhYz*w(}կy8cdY0F*N*F:!o'ɝs{V'+Y|7; N? lGa{"+ R;f'NX]S)hC7'H0d%ni{6%MKAaS`aϣ y`C#j371,^JSR)$lY˹_"e{(l^#]%9Bs>)4Լ*Z:($F1.Ddbs^,KG aGK5KO}J=v͌8)Oa!:)u( ,>S~d :? HԿ"B[`cmhO 7f(w>7ύNy -g$VVRWbhŗ("GSo S1j < GG{N/PcFI ~0R NH~i̘ϥ%Ryy 1 E*eVn'.L*ٶU&Fh=.#1*sNlUNؿCM}y=2wOlFVfXJ_u坅ko<_\P|!xH&L LwwhM3]n$E'*Hsñ& ] QH2l4a#7*$sbaFCd F%[Oʿ"0t=fĊC W  nywz!$OGDV]0RN̉LQ\96h*&<'Z" = 辩yu~>k:}]y^)F]Ӝ>s7NJF1*G֡Kۼ#_ _ͼq2<`[-~0XQ Ȕx% KH9tvj\o9VłqNXP<.fMإ'lo^ݣ(@dcGrZl6fTN'î*4`̎h f$б+AvD} |W~~6bha,ڒf/;r{8?梒( BÎ[iU%yIvN`ҤHW|Bߛ^#Kyx4 BMlE_XJ6>$q]] ㍲˶^ M%"1|vWKE%%[UP! s:NE֌TC刌fN}#PJK0܁umoQDV"xC([4{Q| 5А~n Īb1/?6zST.`/]h|x]  3E%r[rA^d!Xi!+S۟ )!8A&:EU36.^#tVd]66>lq4!ݛ<ɪ_S&g u`g @Z`y&>ve6GEl<-d$Wի&ߣ֜ =Fŀ-eWH$IHAb;4gPxC#~|7@*GFpX) DEdmrg,[:2sJ!%b;u_t(ѩN5ȏ;&$>|9W[ !Ty!rmW}Q~FG0ʲODt7LsͶ+fwY'[Vt\~V! ԅ'q/nAtCFDv/mF`dB:GX!/3W\i`U5SN|vL/jx Hd_A= ,\tBjI "l|2bU%3XS7Vt!ضMa?N*fo!=Xˇ0Ξ}h%{1UEd4Vz9 ^]q<hl S 2PuèҸOķOR:baҀN69y3m\scSrn@1pkeMYՌy BKT9HڥnfqGh @YU]%5&9U 7~_q:U2 E+уjly.Cuo3OypPz-|y*Nq=ꮰ;|KIǿ5&s?`g$}R(Z<>&7Rԃ0BUO% G-^!+c!~e\w#k\VG<ߨd3Ek?6^8+X]4joKN%|I{}{Ro BD71 | Nje+΃~'(qNgTX\nO ~,$(I6~o* [D&|B}lY/U?jw *1Qo"'o pSf }G%kU0rǯ3d0kL&r 8w·iijuқk 'OH4os8:H'lH6q^}CmXaP) N[\ ewDC]ӆ G̃U΢T W@Sqcf"}9ۺ-{30P +acBP8B{ݏQ*Kb F,u)Z9l֛\%FbH ^yxv_ haPSGuPDݪZ[kHsn%Vs($/sA] WLr8۽ZDlç9.nׁKLf%_j&޵/E0Ě%e[LE ?'!qH#ey^Z!3Yz`.6/~;*q_Zl2dRnYxыzGlPtrQq/Q>|z3Hc;E5AUN\`+y5 {&K*Ga0։İ"qh+)husT:*c>;%3PG$v 2 ՜JTblرW^aq.Z=R7}njh\ޘ>C W_u]PX~#j Gu"ofĢ\8r&>NlF%̘2j-gV9~PLxµ\4zS\zO%%v;3WA63:춻p+J,MWz`ҸPQNc8ةpy(&r/eA!p^&@w犿YY;vYV*hRAaC9ސm\H' '%IkZx;ռRio z+뷚<(W GLY]np 6 &56fvپ:|a\?Vζ&HpW5~IEaUu>J]m)3%9{ *}Mvpų @>Ltt;f?|} y4:H :#bz647đYг5kfqln>),ST`@jAquC-p\; d+Mo6SNZIvx LT /a(%Rיa|쮴=(×圯BboG2Ny|Z t7D[ l ''sP־σDBI|O>i> ԙwfu_,…ekxf`1*bw ,Ȝ@m&Շ-HᵷEP'.+K@ 嵔ы8ҋ$Gr0Հ:!h ~Ge[{ -U#3wTJZE)3 g|)]Snٟw~~=7kƏz+ yL--ܶ@EXcG4ɆXpe~ZkF{NqDeES3_lū;;w^F P(nydzZF?:U)ԐD5xҍ\'?@: g4lRы^M+#0f<x}7q?4ea٢o u_xː:qxv$+"_ktug(Icꏂ-n%2Fze.Z) %uT.Ced!]s_,uw; 5kN|o,g]1l^@@ =XX 6DI{]/W':e9.LZ;Yn.^A:;kXn-}XOiBp'(#V N;jTa(X}(` :{H#܅h^{Kw`Ӻҷ WAQ!26K7PNusŹ+@MMIw(Kyݭ$C:MDm [#| VD, 9}HS=vCIfsK_KQ(<?;He("@S dg&PUGexwM #>q ސk*B]L] 8bYc6"%&IYDmK9f\sC^[Avn=.~:<ۤ7#Zƕ )-r1YB{NJJP%Nv<G[㋚E4?z{7W,o;-.pyѬ`gR8* ²F=̚cnJ u&Bѻ EMd\,uS3ԖDZ$ o4)@9}2>3? FYHez5)^.2pV)"J5tLȬ?"ohhL; li5 + YJS+a^ӨUxךzd| M[ kN3xb1H]^N$pT[UƒIؐd b (^Dj`V?2^ݞ-D3ʤct?WIC06+5Pjik6aߍ?4B0wB7;%h;=W"0q9v^o 5c|I^ 8(!Vχ碏4ʣcJJy8.D{VB2S ]("DTVР3$0[lR뙋Z9J"m+U jQ(JV36ܒ'~'T]{1 awm Wxz "m(ǿ4sH W~`l8EOOMJ[DG DY\MCe]P) n 7/@o[[+oĎyM~KWȎ?@ JƻX&%โ7j(bv/9'C'[3"zyWoH!;61@ 3"i{?(\|%)h/A,ѝf<-Z@LooOSusoYm> 0󦎡i7D3  N}qFY;[#)N-*d^ȵ,Tj+A_q$ xtJy{rM ;zZcr,C[as<i5P",<O6ԪiJj~Q4Oz߲`@۶siH=SP=:nW [}V+#ont$xuٕcP߈k56]6ķ;ܔvF*YLV'L",0`<@d$.= w[o,tF?,HfF搬'hh:JM l h ^d<=vP+n1 M(EVp$6(/p![zp|{ .Mqj잳 pdzJfa&:7acu4eMn1F! hI,UaEnۆ7RԬ~ W(n/ctZ׋b]#IB@*wFΨDB;{NzQnS h5M%h4GDGo>[˪5{P 4R@e kvRenk#+O9L?%)hf\䷄~Weẍ́'e.MX'5d)߶3}'Juw3->B1mBcM_ߟ@>57E3*ȃPyiMW$pl70D!c$0s͓MTKƉ!e-^?E!feF c*=Dyg Fu,>w|*xS_3GB0p<.JðZʐFno[U갿+kU,|M`T! +pX˩o`4ȌP|p_1C@Xr q+r$ #^BH=ۤw_!J ! =}bю - }xm|oR& Bku\eJ~J U^Miޢ[=;Aİ[=HB!6SI\R:K}ۿ < ˈkl&[`k݊0"Feo %ŔU.sQ?X2tgDkb=ޅtfDlY'^N9bjxTr:n@P(믔o":_1@o8/bI L5*}+LWg؋ @XATz/p6%C֩X(tB!)T+,qX%9?k~'5F FZE RT!it=pP*lw^wcq^mVX2҂@[՝/&<\ Y,X\LXTj}^B%{5 6o @%a0ŜpWWӁ 5XPwq El{,EZ#.O#r]BqCڌ-eUNpM1%eLBZ)5p!Aߋ7/!uii$R;`' <<)Zby@'ּ"͗EsNcs0(m\ !_&#Zk|œ*twVR>$sG)Bτ* Gj"}!D5hL hש:Wk`AFuҠ1%@ y-!F/fk2r#xjD+Z{UMAɝy5AOh^!ƺxʽTj(w&v"CRBMU^^sF~rZ%[mXy=ZH2hcZ2nE-^h`J?$ӝnRdQ>%0PKH [ョ]lm&fc3"rA/ScQk,*0_Jб j[y_`┐q)d$ 9#}yKPcN`^buL#q#1skǑc/^NgE ~LTG,L1ׯ ">j=2Kv%f qS*#~Kr_Hyy3P26K|]YUy(@\Ų( 26DS lѕ$|+kry/w5Љs̉TZjNЧ􌃜WG8z9BFXG`G3 Z:(xY r "\jÑї"U!"jQ~S V&}2 gU"g)-,^[f˂:;|h2=| GEsh5ɬ .[T OޙVdX7(4E\DWq۹p(Ts2s{H1@Ϫ- #+<&ϼRt lzfۭ-",?· J1EI<zu‹Ė@IoY:"IXG_YC}rDw*/3BEKg#dXՐSor._ʜNNy63c$-;v*5jI:+0Pxy+ `oѬ14 ^*LR niꈲiN.VsnjM#eOtkQӻu1BT! E#_ /EF_o5|w'(hHNX}v i*@dDI]܌ -۹S&8]}v4r[7Do5a֚mÁMZWn}M-Q,Q2I8'[ݔM^ _d] 4_ؽ;Gjם`Y^J?: m݀4[ )hO38A*a/vǐ=cs7Q,иz*R ~>.odP60nwy K)6kZ@i%G Woej F&FSAG+Rc0͵&y[-JVIE]z!a,rx]J"߭r9*细l'vEVrY DjF~̕Po|C㱀ￕ!-$\*1zfK0tjUIz=oupxh>^mnОhVnXJo X ]"KK6 ! ZXP9MU(zm(xª/׈s#)eM#eAο ܏@k#81 ŕl_T?S\5 @Db?srUT&$G@N ͵OQi<Jk s;R\e+rk`B,rAMgɺD#\s.Jo׻YԦ<6WrqN]F$\jDu`:#k?~pJ} <k:MOh .grWa\Uk0m JD̽sa8jCFʻ~ fL ˌld7mB_j 4d%scI̼hVCzną,:]kV[N M.R½2ۛHAudvQ7V(JASX˹DN=LfDvA=<>\<+VJƐ5Z^^0+]Fz GNx;Q[?Yo/-`}2u,|圴|~-YPe[Ȃ:jAxod7C D d]31fk^e7jR.ja6-udS0=L53Jy9&;8Mv,䛓'&4HJ8[Jrpw"k\MifA7 ]z9Vɍڟ wWrp+|= B05/} E&p׈;?ۙ3,=At֝^1[,j+ f֤y:YkfzX1Z0^4d adR{&BoXޝ.ǤoW`8C@7,fGT7_$$ð~+j  s@wCT1W=RxAz[8"lM Bupn *~Zܬ^?!phm1Cb#$]ЫpUr87z,:a6] kq1Nx9p#Ɣ-DftLЃ% 0UK׸=ԐQ$Ϫ#"x4=PAp%-_7 g`Ir]K8 '|L+EcޤͦG [m/ݖ A'}Cx$MżH=i F 5ljeĒ*:%/0m-ri;tխȮ<-Y~ޒ/[LF. GT0PlWŘ!Hɘ㹥sa`* Xnm4eJIk)CɛepmD6Y,I$Kk/!nV2v:SuDwD -?<$zd4Ac㛳VF #_LQfX]a]~{*{;' c&~F+.Vz'zn ')elWQ<#hSv)|U_ԋ`Z@aY&˽ө@*=D E,+=SG@}4#yzv곃>\kp50YDP*>xSnbJ+V'a A7b2iknw%* ]Q#֖߼3t#ǏW=Tual<7pO="=hQZ+9;8œ,ڞŹ=ֿeȣ}ΉSr|U12}3|Ojۢ@:i0 zqGL IF:U */M@^%z]mP"@ 6#^_YG8 [Fr^J +?R1fi!VȶP[ dE07qd18f'i\y؜jB+TB4Z^R|~^t]Xh+#Cw ex顃4zHːlW@Teq{E('N wO|F8t59&{QrMh831du#i">]:XGce[_E\7o{I "շF$5h!3M;k5*햗28F7jWQJ&1OGNk~U-OZQOmn D!8RY’ȜD.Ky~vv=,L9eḧ}%s0vI. ZПZk- Āg_SR]%-ě2v/kdp2P!R3&/b!`3=,QkPkd ZVO(] W*"HN;0xo"T-܂!oú=#>:tpq0]<$Z(xϕZ0; PMFB/z٨|^6߾B,4F=ʘͽRVMm?>e"N4@GƁ@0󬯿8dgx9i2GVRG4џN2oa1oULPě"􀃂c^eӉN#{~ܗ]-Ӡ*[R'v:z&㎭ ϒ)2|=(0d?HBi6iBNX(Q$.|A <|?mg1eJf/&{Fq %v3N+UŠv'|cI(~رQ$qD`[N dQ& Gl 3]S=l⶿2h '׿\xɉ5G\Qؚ?Oa4GN:P"`F1A^K @XF9Y~0 5oC1&A1P'$OvՎ'ḘvЅCͥ)}䒏~ΖjL 8"n-NXy~Z#.Yu]hw&7*GԐ٥vAA4{|g`L;(Oi0RMz EZ6b#CTϾ ؈('A> jMM[]/^G}b f:3xFZ*DFS-Wqpku\%%V9ρlSP`׃ԪƝ78F)㔄ˎY=sQQx@R-姅E3{ ttBsm+>a'8pBO9)@mM'&Ӕ਼2E8QNlD@Xx%wӥR&nM,X%bb-dJ+/kVi ˽n->: +U=%(DٞT}!4O53Qz]${^\x 1F@a]-/9þM]:QQʊR d ˌT-М -An?4$q\,'&I+;K\?锣,6G Ԧ9~ɢLM{0p9͉@3}ߎoae; ؆<== ̔_逦k!.KE5=ЉdԔݡ?N5hqgf>!ntc>{ylyX-hX{8 '6B ]&I*Cduy>J0UeK:&sƉ_Iz?"RVqh3R%B#lD3\B]LKMeP]c$+an2 !GwIly9tM%mSo lerm3^Am:UtT+)x`'kzP8Bɴxo:,^jܛw 7܃jd-` }}wvR!UV|N\iLyBlK%) ^*9݊5pAU-Mpsi #I|4efnMnGXkdKbTZ:رy?P/x&j{`]Y5N#ށ@jq txNXG"|bŚĈZBw57"9eu0 $2]C}$ 0jS#g*o##V,VI$:T nQgAr]M:&P b 1DU bQy;$\ի1>%YxZee︕2ȶt:",ʺjpy__**%R$^gOgV siA^0 Q?b!?Y6] <>Q݃[(.XI{ Uo!]Q`2j4Fza$x>ڇ-h3V#m{ BJv^ρQ vjgAğ~$P;|*y{9U]aE!E+,H5GTo vL^@U_Y7jDcVTgCaCvJgmy׃0/EJ?rcT^o,}G.ir1qŤk>@x>dQW$8q!tSΓdŧFc2{1h:Ἱ1 eHI*{ L/SqU_0r+'rꮾdy.԰̌u/Giט S'ߖˠm&Vcf=s_ASsjGzaRN oްmj~/ϊ>zi~_]6Ϛ [_6|?B&:|YyJ6hR҄ n,W|TϠ*`]6ɈSmpAAH| {qaRhu{9` "gmaJ3V|JW+-@yI/B0ĘS# `"/MJ]EhiBssTMrC-]l|ޙym mӓa G⾿ryT FkkK4J^9Z%/g,=c\T9 5ިw`QuS\O/GC{YԂ !0id"ċRJYq_99 kp)Tm='tmN:̧he ;[aQ!@IѨ`UþduŤk9燼3%p;6.ot &8/YGDl;CWB3d_o;e$L/B G"Fw%Z\ab/uw?L0R= M4_ xC F-1v8= >4 R3q|Ucya`{`y%I7n!fG=qT!j"4QƕWS"9y!j*^XlJNd }fU%#[2hɤcV|=iY\2L즃M0usR!{;U~4l`\j|/V^;D@R i1 r \MTַc-3<=ٓMwAkؘc/(y +oCvursZWPC5z4)'$"i"Y V(vfJϻ7tGz@+xS&R_iy_~TqF-kN0gsp)<+Q4Nbir߸X tcbQe <,< 0$l kZ&G]G5Fa XhM-ꜰ릲EeXc;"<Ns x:>IDLb^ˢ':ьw90!:u[i"q*S'@L:aF ?!t>ɄLVXc_޲4QswGku ypLw+ rt{"-Œo6 *W;J% ."0FA 9\K y`J8M-MY먲!E-ReDWMb}3x0'B>}> 'gr я8K=۱W #[Ŗ9%6L ruCr?)Ͽsuxd|!K֤ؒ~=_htH/?*4ݭ';"/كทE|mtC% dL~v1Pm_z)3cJ*h>WaC"=6xfi>'32O/OlyXHBZ,t(7Lb ȷe#VdTQ#1V=(УrYDCJu$ZcRCG 04IfKʆyգzFWُ@ui`ar<0XYf\DˍsyknȞY^,](nIT!jS~UC2e `pVYͰgȑno5ixd[Hy0jLQRxamF_ūPt~ð|jHE ]r.N8L7,L+AUqw%Yh9wx^5Y$Mj8p/09_Î?"5K.Zڝ|T I(FŞhe[#v sa$i(% &"4TȜHfڰP%g$sPS J g̎[->*+L1#6:͐P~͸}֚Isv#Rq"aS hg*オc&3;x뛼rI8)M64.賫 z4dyufG( x.Rv eQ>)kjLs^=w%VKseL<:_"/)K&bxUsjU93Or5>-P%G 9Ƭ3LZv/6`ɵ Pq,R> jlcH"xF9MN1[ vZ*}܌$eI0J8>Q3g =7N’*t71AgL="T9`< E%z ܛ ]V>q[LzRw:YC (%R.}␛8֖_{| ʪ2v[JUmi^/b1Du9<6":eo LVXEOJqOEʼnPs;i_.QފXG"6lzπ/A(œC#DmAS R$a$ǵ'czT0F>%6j4;E8UL?1KZK'etUpGtaC F'H֭rұ=4qG*7E@ <aJ /q*3cw*PizZ3jw4 nJvNh̑|ھ@#,$q3\ߵj(-gNxZCF㭕 Xàlh׿Kh"2M{l`q5ⶮZ:`@yiU=suoA0ɄL)^` D/7ZZ ,AqN^*y2Cq?NF|8,ӗw l*316k95(:WFk=.'?b&~降/#%օCP\rr;Od`cDn׷ O| ж{Q_U6` .( * ;b&B#!3P_do-U4ExAMi&^'DCIcu6!#y9/H6r2$pĻ$BЏۂ6 VNo1ȑ9çz҃|61HD=+ J@]92f\_:=kic&ɋ!&m>C+ ر.-im!v:eCR2e.r)j׹^6.c4ɾbDW8'!9lJ)bba6DTUWN i,V֗ث FЊ+vtGYly:c$^YM1 #~b}bmPI-o=t$ Y'tcSm #~\-;q?yvA0-rflN\X!yF}>|+G:h34:J+oG#geRc+ʸ,?!2%KFˈvV3V䒳6u_H p[Өdw?CYK#ScYyГaHdQhGT{=/GTu..~ECq^58jZOoJGy v͖m}MC Ⱥa3u$dzݱw<<~OZx6m &*pNg"lbUrp[dF8k,$";g42b%K[<7^ =O@C5_?$w۪c_T fVxD#ߘ&!^ٍ?Oc^*=]T>koe"̯rb3G ] fl^\d.=<![~mU.Qyd[lRt'цv)<T< z6"ڧj 5Xf Ezu|y!wHNFs}cޗ)Z'p?qPg++Jϲ+m"^X-gOqq՞OtQmb/%mt\V)W,A3=JЍ#qD>\p7tHmnpwJÐHMއ19VW,~X*[ZPmt8AOI{kxzfZ; 0'JoωHP~߻KjP FM!>eJd[:\K}'ju15sP7yH5ju.0c?ViXehd/YGj92YL_yRUοMjv(O,e{"܆A4*}A-?6*娥Uԥ.N @knε&w8g(ӱ 6Nha9 |%M͏)(wUmmͯ裝ttTg}ܘs"eÍsO-Ɋna?+8΄-B Uo45 [+nsIJ:s7PF(VwNE`%c%C3?a8rfFIl<*&ɾ:1(IKxbRƄ̨Z)Z;`G]UI~~բo8s]W{ ,e,׏Fi6餷R$glD$ܒM OsSL}LhPR۲ ` 7Vrls[ȥl[և܄t)ˆ5r!M2>:O]$D̋+|쁠\%,w h%$"h $Qu)/[K|| %\loqDO4CO&ULj=pukY]ʐR[VA t 6VN+ǜ*Wt7αǺk >,,B{[vFzZB>'Ɇ$4]"G%ea 7ߠyՅĿu^J^ڳ$km'+^+ *DV.rᤒ ?hb$Zl K'p7\Nr|aGE&kC.{r,Ad?u2_y3" xkJ/9w,wtLI.VꕪX+NMԭGXo!ZsK!v<oUr5Ԭ\+seа r}# H ~hX^ ^ 5:I= n4z[ c4݌SLޓ7)v8Jd- jH@h5ՋC6x+bQp^H \C撏 J@1_[XT*fX>"(Gј{[䞞KH%SLI<С|'B}=%i>r;2'gsp#6``E}dZX`vL?."Z5h %,aN+U~VcH2~gﭛET8xhlbʤ8s A`Nlic޶Cu&=/gXK8)3 HGu3e[cȟ@wQiEC*{#("LgWzp3AscykSU7w% HQH}8/򉠯G۳]rx%޷te=SbWn+wQn BQ,^TjӅ-DEʡnEQMRt&dƫoVpQd%ሸY,1/@ZI v0!y5,JMkpb-v)kBu1Pb!KAxyn>c>#)f~΋:XߤtJUٳ0hc:rGHt2ܰDjBˏƸ„Ht*Ũ%L|^lcXrȁg  i;Rw3UpW&qT .lOw($>?J O!N_0,LNoj@1JjEb],|U=|~^]iZK޲X,WfjEˌ6ćI :VL:@ $juVלEﺫÝȜOeoƭF E<`hŝ(e5~84JC]f&c:^'S_U/naնZC|ƗeX]*7^o=#HNRXYDi- jB ߉Qq'[Mƴv:5ہ0̻EzfH8D1ςTK'ƭC^kOl\Ӈs,޽?N yWi9joo?cLDc/uԗVw=Tnh-ppq3fzP+XeP Gc;_~yskxQ81K .sy bR12R9Íke'zv8:洬 J2pǁ5[Ekaܘk?>F;;n ـ{lZѣ*iS[JtY)w6[J=!oF<2eqG*~q{ޒ-w'ׯw}FVJ[9U|DC XZ7r?8 >Ay/,[<\qV1ɍЙ9f%)RAOvU qw@Nh?D"D2tr ; VHnt1m: g5Zіٖ g*3 |50lh3< : 5V2fs߀1p.Cd(546Vw!DC㩱ƸR#rLp[83,0ìbɲRn!pTpf:o+m+k~Iw-݊φ] X8 rEQ,fDfwʉlCw?*ބ4흊bB /)e}W'`gX]jŖ^?d9W1+ gj--;_V7\k!=Pq{0K#sd:oXS ~w=Q^pLT~ߺNdZ1I pD QٱY'opH07A_dԆ#k]r@^8E[{@}Ny7rmKvq\%M`;J9? G ^vWȺ{Jσr46Ca@/UMUpYEn[PȂQEۿ[cf'uϋ3r./[h~}6V 5~\ s)~1N%@$Ȁa%Md ] b^}?hs:I~悚}vPO]/KHq"c:߯8ZSF*ʻ#/R@ׁRsT^:@as/&q9AށEؐcIh%r5J e"snR]|,Hr16%i1 &OC/nUT@V-aBJЩ=3h05Y  NhAm@0?Dw8KgY+(bgdMV-O%0}lђB.~/.bk/ՠ9|9Mlԣx?`LjI#OcGLs 9;PULw뇠|HSR~ӊ M/IP$*k[M<ڐ/RtYcKVYj6扖;r4?QAk/!6D46S%&K 1獹1(ϰrdZT'VNm!7{̋Z('`+RH|\f;/BMi+ @њ:Jv:g`6AA 4Y"+AduQX:!_D] q*@x\1U_fTY-2۬XUWbS1jc7NsDL]m`QVX6 XgٿUZ_A-O/ x&@C 5x0q|u>5$BOy4W=l5$ʳ^xGd66, tp5?s.XrO%ݥA 6qf [XxM EZ gK{t(8bQLC +Y[ګ?~Cx( ckw~ (0fyf[:lh{#<:$z5XI8bM\;sPձsp ̜ wTMw[qA$P2E @TY=K%L&;ENxgdt1=R}̣Hzv`MJB6PkZ pCfCvU.IpW- 'Ep6Oh:=o/,M+䮵8VkA r!bv|W \ 0#rel9:X>eF#+0RM>΀TmpW DZ\]\0KLF9*Xs2&o)!Jo $QВqA"D, vC i2X"k~nkk2`44$4JokK[s!Ux*r|`ϖ!+w5-w7: *_"os҈OIs^(o ˜NEbP2y-뢟 >1K~mģd5<et).v ˹"zCH| 42AWŠE2aAU5-X TOR{ۘL" рP s|ke;AlJV\ku %OوW-,+tR̉h$ڑ헧iTBK8J{} )2 $B$*w'Lr`DL*q>c/=gn .-=@5Om?3xˁCh* xzMbP+{:Ln~J_&,u_i %T ФY,1`Ak5Y&R{Rד`\bܸh+ļ5kSt @9{lY&G`w9CZ^l.G#HqTOi GLK-%GQHab8yyHX#A"WP|Hd@k9VqFui@;ų uG6 !$q_Ā]q#5EFs ϵ݇ǮbK@ {4p!O6e½"glRkT]gl~Y:-DUh|2_4nhFjxjHs cBX }~-[ c!Z(7 DG$Є9,Cy0&Kdj6}c' U!و& 5a!uնbzs>s9苳ԵɎ0;q(PgxA} ZQ_}Q&.rhNÉNl<J7I_|sN4YH 2N`!ׅ2?m4jL7Ҁ^k">6Շ6?~낣zүZ,m|y7ɣxމ"ı~wڥ?N7B4Mo

=Q=CS5X˲r*PGfƫe챷 >= U ,8(#f6gq5j.`J}|Yڰ|ި=H;eK=XM_O>9״i `p vGd߄>k?꧊rkͣzvx#{cؾ-7E%~]ITsҺ(h??BwOF`<41(Av2 W(_Rg.j܊n* q zt S@S]MBwr}su2Ad&̒v%\cq#v< DʐzG.oAWkPW9`  r]3!~QAyFUT-89 /daпk,AR 9nj5nPhX"qCH}}#2\9N_SdSIuhb#;UzUzp BwY.t2`|Э9/5Pb9p'J]+ jT;r- 4~4DeǺyq]</5YO7Y 59ci:\9m@)ή>y}PhIuov|e'\@ 1'|y]xdtu5x")~Y7cQ]=uPjbhAr DfHf0E钅q0>p Ϛo@g-1Jg`_?b;6s"@(X$W1(ʼmѩDHzg8V%%1؟^HQ]0UvF#qoGx݁dK2^.!s{Vi`O=[Dj;|T5}aq2o W=۱ }On7Gkԥf|̓K,\ەTŠJBQ'=Vʚ;Uۜ9iꐕb93Skꦧ6d{rRɯP^(0;0\Z)Ǻ_WEڟI=[~ڕu(`_S69/s(եB4JߧsאY^ޣ y!8#@#pΝIb_%kB KP#)h!C%oTlbo h㇣{^H#/!!y.fI q%@L'.qh{3<pn&s\$Ix^TsO+ho9,eCuBFфOSYpz eT[Qq D[YMDMisEcB6irBl6.Z&@Y䮗 L:$oʛ+4IIG1)+#_C_Muclh-*~m'󦏷RW4_ɓX:0Nm*0и.[RygT}p嗰"ݯ">YfY#t9]<Ϸr~a1e;P+R2w+|sN%4X8J|nAͱ z ֘T7R{HZ a& K¯,ܗF!]6aw^=bx18]ۑaaB'! x[=(Q_ "#.~@HZQtTuB6c_BYaKk(<܆ԇ O--Hɩ[:./&(S?^0%g:ݘCy%.2sqqɼ[d {d;v NpFd~aE֧H>3N|58~y(-c/7BFjO*W33!tI^fੜ2nϬt\j&%y@/VbAt˦o:hN{d8&7;D3N##QVu JS՚ڜľ>yLBsul4ر΍~Irg`γ2(89HYBUQԸ>cu5)]^?ȷ>`!Ǜ]1JLa7.f]T|QdJ_0S~#vWAe?&?uώ/9YK%8Q@KՇ`Q&b~$˞JLReQ ߡ p hQuPM0hjg%ZhN=^ 0o{Lq tPL6;ƬDC}#V)6m)<YSobENƉɌbŸ/L1CCx<2QJxiM[]JԔ0&0-"4p*&9]_fg'iwe4j0DclUz(…~A2)Ps\n7^=Rwcո;(ԃhOZ=~g2)fQ(@"0 aIl)HiQ>bbl4q2睎ZU?$_u%1ա(5R9ֽYF`E]7E=HcEb&6,ۜWmZce*- -ѐ9g&[O=% T +,{ ;A$4R$$"-|t0-wvXkُLutt%"u4r4Z37Ӡ+w4 $eG8 1cBV1'P(sg¸`iɠxPl:Lè,SCş@S4(lV"Gk`<|Ua%0!E]j ^!,5 DkJ4$ ðH;uCzD۠dijdwTGXYz+!Fh8%38~n.!gF*p8y@Ǣ`>yZ .ʤnƾrO{j´w2RR|+Pu)׾/m0(KXdpċƓnJ6Ckhӽ[] /e2D(QMZ:df+hcAH(v ~&_Q j%t[o3ڿܔJGtI#S9qRL#DFe ~rMTu`Ao 7R4#\mݩ t=n hyDqz;5 i$@/ RͲLM,Tm$=/&Yp<&Y|jB%llN{^,oD3{8xFؾrģ 1$b IE$ \P/ŗ߇igTZ/b8{n4Jtp4g5Oc!9 k:k ٟ5Pg\΀ +c :ޱI:okmx=|T*ulۣ( JTM#UG ^S)sx8I!ST@R@ CMz @:R9l -̕}(G¿3d06%|l^|*k˅94?+q)\/Rm-Jjc#F>y Q1)gW_+mWXf k/Ka. 9k&9 ^Nݿr[艳`fYVl\/bXl$ߝǩt*OFunZ'|tNL8Qޘ±_9YᄏLMStDX?%Zj6&Zog\;l>7K'W{?A-g4q (]XQ*HpIف%1 }{3IKؖ:hx@"Y-@42d\1 F\+ĮTHW#;TOE牀)Ɩtfy!KM])C|]Э:Omnċ\y7r9$lWGAq<5 .צb%ipDvQe!Y9Zc|~sMcڙ["9YiȂPכDSM^##+o~ 0/Nv&&B"qDa(%זzNoV:uGI_ĦbZN[2Innam\'!H>XiP0+4BҬ~qKZ{"nY/:z#Q֬m##fa:e{xDW.G/)5/O:s9AyًFYcF2pBnK?Ems#t숕{Th(STw)I}To栥cLC )@K6m7a(}2"Է Y%1|y0hs$RZ ҃ee~!2E`&նMj=9ʉɫm$Aۙ15ۓ?l\թ'˓͟6(Ui',9y0r dL]稄1 !2P$X%A{HN#=lY9ɑ,GOˈ=6|pǰKkb8@ɅRY` _D"Q 'nʎ7GPK"_'(N|jƕWJWJY/2ۨ/.4 +)T&vz\;}Eb~9Ki&GՈjٲ{ &/yۗ5t༯siZle\J&^x4aJ+?'/p, xy"8 KI_|#!@-3jQ_=x&{VgKy]>]c#{e䮱CD'3EaBLj`ZEKG|y @{y0(HL2 +DȺͦ=-pmzɂR2u=r5,gڇ^ZzٜpE&7{,{*찉{"Kr^zeK@da!վMCo]jMMe[<  г z7٠4+Gl70 &(/OM`B(DȸDLo|1D 6 ǥ-Y#Y1Ie1cu38F(%FĄӣ 5}Yu_B_LFHmr[G<=iG2+iCKNވHߓۢs-AǁMR}ӳla1&鮐9>9xjr_mb= _3FئG#/ĽK[HN=)%Wi6gϝDQBJz'.u2,$~9>M6֠qD!T lpZ|8L >KնdZ]0Z8}V3?I8fإcωSDmL:HMb.XC!coB&iy1Wym/[FՃy«㘜?^T?t̏'Ki.D.^C3X\,d\cMJv5t]o=YJ11u~|jcW^R/r kc֫ҵggؠ$V;5Ʈ\} *{H߄i}ZPy/.Go5FCaN1 EduR\ ,%WT(!"Q(uvZb0ƭ[MTp⪎)ksI1"¤3 +n0:^uS WuE- DQxk;56So*فW),FU p ݳcrdBHAǛ2ȅ=0PFrf ;Om4ۇm8-UX-XrD5m]IF:P߼">_ƼҠ&:@=wNNR.Ʊ9!֕$7&L(#F11j>~x,|FeGjM@1ڞɦ1sm ZQdhv|u]zyPG$H%021:M=N埍4kj8a;@Ha wO0V<ёf+4mfb*bpځ>'Ϝ]jU.f̩:u ᾇh5/.\y fQtBsK C|R:0{; %뷂d1![ ,I姾^]d&P@'&viϼdNwl,ʼn*HLp49xYU0&mdZ*҉<ŶiSlP|Ǐ4TQiMڵ:- aL}+$ @hqXqw3TŸi @ F+m2=h^'p/0> 7AތgFn;nXE` E&:,},׋ C[L}M%,bl*: iJ)TA&u7綸ly8U)!.\0qywm)U~lҾ]7֙؃I_%}ɵV3<γI_Ӟ AY-ںSZ hhQQN{Q8?2?JFͨ &5,8 VHGTN6qS4^I8djQ_)RKCH :zק*&A/ }B#nƵV#z zq/1TϵSHw4 nx[ϵ CD>Am6O (>˃$2O=b؂U}Qz :IHv˻l3nt M>\$Vʍ5Di ԉ{jUDP۫rtE-5L'6PPRSwg2ȩg2[J/c(5kȚ|Dv k:[.J0ن-4mQtw:7́H"M,ziE68\^#O 3)\ވ0v#yEr"eD{9crYu70)^>!CZ+n *-NquT!Tb[\g[ݞkZ{E-Xev漒$7M +@WDXE\D0w)@`Y:M/ H05-=r{BgrPP(" /QVm[ܱG8c AXB!Yt=A_[D {nؘ{ C?a@^6svRK57Mne=p|uX;"Zd>M]9 BPBz:lN8yzJ ,gs9!QNæ7x0^@A\@3倈2EHĊ ؍H>3 F٨^Sqp V'!]=lgVGb"gB~B7M.%f+vS9%82*Q-IO}r0cI۶jkܠnhX3r*ԈtuʼUgЅ|sMra v5@*xgڐJSwzjʃO]6[[j$pVJ;$&jmksı{ڏ#7Jm6n,4 fFߜ/6ZqfS.fYViamWaCs}fo#Ts</!8}xn]|}-ϵ PmPF#OnL ,FCF܂6 -[CCs˅oqVCFt+T-'L.:I?& L5ܞE6_IB 0TD4-~g ߋ b`)!̍|ߨe:fNHk宨 ےU!U{ߌUL.ZJ$c;PJmCj4r / v[RL N@.?s0Qmpc[SiM:$F1kG̵aN9pmP#se1T;TPX9rE ds?x~tĺ WǒyLG?<t8r 6I%;_|28-Uj1ꋵ֔.2U3erΔvI.J,VWfxth(2QQyA}hS! N`Pi.RWnz2a˳NF9giP9˔3lĵT}(gJԋxZ..4Rߵh%ܝKz6mUv-ѫљqe|j}X^+;sƂE4AT&FH @G||A%6Iolg]aP>smLL0ءN5>:~W/jI498~ׯ׃^TM>9R*d9c*] iLPR=5g.P+)h:5 aYQzԭdC NH ∨]?:Q6e'x*ÐSŹL{^kiĽYe txnweڀCm5 5-ٴ.ᦼ'3}إ HHЛaPg!22r9\.VMk)ꔋ_T} q n7"J0k;uYܖZ!sx?~J!/~ Mg?߿TqUju?Sw{hzO7COۉjкMBY/cQ}3QVThpK!lF єC; JĖ청i~[p_eJc}W}CCؚ n6!k1F??V?WOP+(t땫C̿q4;$}*ȒЁVgN\Crǘxջ7pgb; y{E!7I; '& 2 PRL-g~h!%U 0zu SG!-PCKptQmi#5e Ww:נlv(suH  S'.7mXno7[T5~7h`qiͥd/щpEEq%k:}t5bTvZ\k_%VzoѴEզVIjHn &̻qދW'u<%QLZ bq<]IRA?h/oJ ~-kg%|7lٴN XMLhԪ ֟ctKMG/+d[m9!c/yLbr l8iމ/fOhgo{+2S$cqU#[}ݺЩzwN;.Eg4=40h?6;PF[裳w)4uUI5ɸU:NcڗR6MU SML\\|y #GgLZ@7H4jtݦm6t@pH)wau 9{+ YTIޞmg m'ô5Lt%jWPPkz8p`@X@SXT.HV&PJxnVT5E uªOHړԋ2ܹmMI@80ؒ tkٕ.`V"]]#C̯DBn-n?}o39Gw,9ѬǼ%!*̢u?DkF Xo:p:n28ogJ8Bm ?n KM:L;-e_?1-ɧtpaϜVk%漗xNd猻p *I܆67 F2ƙܾwΓ[u˅ 6R536!-fldd>jmj'Lx #2JEZ;^9rkŘMfBK們 7,Hf)T8Qj^,HhQa]E˷ (: uNacːs|:S;$Q\<`]f%٤LfN]Fݰ˛JvE8t o%[}]UNƹghDV" ;>v{ _:'{I(]=qHWo]MFo)]mTjB].΃w,ԅ]=DYLn'.I"ݍ 9!G}faztvV#Dm8l%h}7pV1h"DOpt+mx9Ae&X+IyϞyT؍ߟpxĥ8˛)܇Ḽ|HqQ, X̘ /%ir]^t> >{ {`S.hM=a'p]̃e`+z o;G)zxw~(-y8}!-fۦcB[5L{ h׋`;g#}$5T ylw:z|N3Ecɬ!AeD~Lyjki[DHL=ʧ124b0\?CqB p0k/b|DK=%X D:a(r*Hcz`I)8>Ubճ'6aѻj5h qX|rChGVmU[\VǶ8f@ =qfuj>""Fk3Jk-Vj4bz4JC.,?FAĤRV5G+s(uEF߸26qy =UTovIy[ TAG#T`3ǰ>o\o EPD * Ў>朏HgJZ^?PX+;MsH%uzV3b;@j6Yx ls}ljp.^z3Ҿ#%p >LNd`(?Wڋ.@V<:],txuFCS9a/q]9y3R%gp4! {V2 h.ŲX=NJ?Vg?gj\%Q}h'x/`)Ndb"YF5dyhL5DG).9V6n)J9"|"åaQ֩Rr*:M[32H1/"N0+Ɉ4A)VM1%*;ou ZRq JMp,K᧊B2EQtKrswKty`IFio]" t.p~Z!AvDɈ6'y"c6clFyͮ "dZs39-Z$#h ȼb;c; ppgڿF$5`6Ϊ-u{S%>O<{EocVD{*/=JIE RAaİ5{!ՆIr^kGLH DŽ 2^fIO YqSL01QIɢv[-$, w) ` 'r-dF1u2f[gekV4U tۜʆ,ʾ6{Fdk?v/kf)h2~gN#َ7bƽK r5|>|D&RyBm6Z]z{nBCښ4K^-bo?Oat diS掎sSʠ@u~Nh.G%w˔Cد3c FN՞ϙGR*dl#z[|a7QrFykx ;I1pZo۶T,z X#+3Ć\ZSm]ΎjfiRUљ LYQ$7x99#K6JR:(3u ~JWtl cϝ1$悮v?vWc-[UW(H&KG0u-ӫNHĖӠ9Ď'F;3&r\DbZYKɰ;E%9OE os+&u_~V%';=Y7N$,g \7&mTPI 13QҪ2gQ.- '7EKa3z#LQj\)䥥$*G 4l;-:7Pm0Ne2P4ֶЇ}梗Q@Yqjvbf֜Hw)WPmN,^a4dphôq%.BZ"ЋR3@WJ,dс)*W%H5ƭgH'݆XY1Ybm rŅV2PD.)[Gg\i*48t/dJ\7VKY%1>ڽ/qDw2^Z+.<ע/|&1qIH6Et >]W$A vdau4Yy %p2 ~ivz8}Vh:IHE%9ZBp7wB[ AňQTzl\j:MxTWnκܻJtܠYϚ_Kkݶ|vCS1s("x3d9n5|# 4T^C 唊9SH?蹽a1n9d+S͸ YkMz| O8>IK,';pR[LXmmFx,w!oH壕n±Nr;V%=HD;еW g>Owp 7C}f`:+cy]ݷRKhUuPkS{h6;O3YJIIrէ/OG12>ڝ)$ĉT Q+4+A'q|d𛦔 m~KQގQH5nX8m\3a)(T!#޺x>GFI[֍k@+O@/pQvQrɀ)/= c?}ݴT8avI!6To뛗%$DI@f%9A o]e 1<9ӡ{zM}KVähC7r*DsܙbǶPAcbه1'2;Ի7i'bȜ`]$py& ȥdfewH&O;Uhnx;DLQnۣk1miVIL&Kgm_6:ݓ!3stmzv*$ zl]nϚ| PqiLb5ama R7bq4oe$5M\7JJ@{!';I A?~~DS}!%?QurumMqP>}]OU&^&rR M^_EBؒQawu\'.5L0 9Ee&%FoXFQv`?1v'p߽7V.ۀ8 V9Y %;ks3/O~A@XtNqH)N rqKeH!Tl:8 =y~rnDCU a+K%l8itj=w/CwmWZAs RGP!Ȱ?xf-8E4p kgdyB=`)20!jO˙.Lqb < {dք{s7GKx*N}u fΫ>9t3) TR2bR2\\f})G*V\TR*G0ǻC(N cJsKD>HO"ESs*t]ѤXĖW-fg QSm6]͹GN R>Nmbf_.2ahetQ+A l1Ǧ|!ɚ ;f7Mi-JGLsw^EC9`jÃnrub#"L3=R6E{Yng{I0)8 9Wl=4ٴ1 wH HN遞#'[2Ź kZj.ͫkg_[:LdYrѓYՐo]=37?[K t{yO>Nؿ>ǡ]a߻ݺ`9:xrD:N؛'a@3/~IIc #Wi^k%w1Eo :"Վ'tl{5L?gS\NVmmwG꒻6A)aD`?iN6n6 "YfS2"sk $˝@SYEq0^eXcgV{G Y4;O=)5C%8)\t9`㱕n)lM:JsJvz0t|'P|OlA.]FߚxʼnZ-?]t>ƥ+؅щ+cWɒw^}⥉-jD}}lbDSR8uS[{O9/I=_v/#|^q~G:} O"a+8uCoS&kݱm~$iN-/ٵ}aQiI7^v_<Ш[) LBOR)n6Ks ċ}2SKqvם 'JJ\k>WJsى+hESr^1 wCދaoxh ~7[bh/T;w*E~r88*V>\6.hޛsS*I`X^AoPp152n!K+=379F.čJ^ G϶ kkϮwr_m*ɹV$L>Ww)nziE%e*;t121N~)Uo  G:Qgݩ(1CҪ<ϭDDbPsU|] (gā22 _k BX_Tfyz5*ڠZcڬ>~O/VwF}zfY*/4ߘ)x_U6l9=/qZS׉x\MŢ߻2X;PW_! %6͹l-}ZD*SGkI7*lVQ $juȺoZh