sssd-ad-2.7.3-4.el8 >  A cU]?蘘c1~0 Beޝ)/j{uUb>cs0Sur}z47qm^^Kߴ|V; sR<_%cWe;^X Zޫi=\N3yiqnC/eΊ:8d9'b Hg<X4;f܍7zF.38f 5fϔFo"h'0N8H\kP6%")Tw=\U^˰֟Lm+ixSquAU/JrBfI-yԓV }q!=![#K),֗E4ti~F7Ī]O*~ɇiklHw[ֽ7p(~ VNyw}ٛu{ \'!>.p[$'娾c9m8 ᡳ5YL]+̖Ffg͙Oܧf fA3˜0+ԉ,HwuUC-@LшxD&pED?4d   2 /LR\            T   $TFlF FTX](l8t9 :eG0 Hd I XY\ ] ^ bdeflt4 uh vw x( y\R0Csssd-ad2.7.34.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.c(x86-01.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&K8L <O AAAA큤ccccccccbºcccc1a387a62cfdd69ccaa86b40b5947052b04eede31a73e845a1ac6a32333121d58f84405344277e627076d149318764383e874fc1d1d98646ff4443065bb9b789b8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903e44853f97baee28384d6214e84537d8d1d1e83f63dc1f5f5fe9c3e6e6fcddefa8aeaa21df28e9e94807897e2d919fc0b6af1358fcfb5b22e308cd12fd350df650968105cc98a2b9b14d84f8e76da97970cfbbff7233abdec20ea4fd398dcc15672e32289572a59a8dbc83f41bd4e0e429c131e5c5421958b158dd76c4737b1a3../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.7.3-4.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.6)(64bit)libndr.so.2(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.7.3-4.el82.7.3-4.el83.0.4-14.6.0-14.0-15.2-14.16.4-2.el82.7.3-4.el82.7.3-4.el82.7.3-4.el8sssd1.10.0-8.beta24.14.3cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.7.3-4.el82.7.3-4.el8 .build-id1ba958c2aded5500b13b164ab49635f361f3a6f7a4770ef5b16e14c7ead2d134ad307da736e9a450libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/1b//usr/lib/.build-id/a4//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1ba958c2aded5500b13b164ab49635f361f3a6f7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=a4770ef5b16e14c7ead2d134ad307da736e9a450, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR;RRRRR RR8RRRRRR2R&RRRRR%R4RRR,R3RRRR R5R$R!RR R'R9RUA|A mI42KB61?p8 3PgC8V;Ep`J4܂I`{++ C/2tհ+4Mw)˯}~ 1p`b,=&\>{FL5Kju:mvKNG`~ȋIrUrDi.cI#;;f#Y&Vh5!g>}ۢoipa& 5HudQ88?%`_6Gv L49 V=&{ĹL^֒`ɍfSI[*+IY>JTNVIQq,hw|G++ƶ@ay៾-[$,uBq)؊֦FkcNET ࡈ&hjo <Q\xgc@Gjn'߉STsOp䴨I 262. a6OUrmU+8 h$$(2R1z-"RޥƒEv ;}OAh^*w YLj80\< \2~ʔXZ#-U4!Hd>B^dA.dwS=y+Cgmɸ ޚ!ql.a4ZC5OC7jպ{H +KNU73G`MTPocߧbK8*ڈ~4o}ZvL8BN[s3u~#̞j]ʶK`=2og=EtGW06PJ : o͟n:[6p1 @ WyWJ Te?jP$~ :NTd9Ǡ~q!* 52`[ %t&հb;pw[>kEm#\6= ]$eËbLK51 wB>'nm`#eD*c ]0W‘O|ޢ޳//5մl_[Z6g{ Hn1Lyp#*@nkG:)[յ1yU Fe~!hr0A[{8(sxn9R]TVzM|KseTu|~zB=qq!]P|[7zS5Yۥ*)'s{F$K;6Y+z1CR׆; D0,EdpZ+W`"P̫v(Ҥ 8A^먺#*pqޢeAOd8%yUg8վhBێ-7WI T$l0d7热fX!"m^&ai!-5Yp@x  5@p[sVp1i,xb\UjayHMb>PiU@7-"4o xK k($Zib7"ہ3h$Qr:7@D@ OJm L)uU!밉tx0?ψѓO?e#]3$]nؘ}?2֗yxm!< N0Ync< "<59] ơh(R#ؽET XJs, A;c/z$CdRsK l@5?H\}fI~ gEe]w"VJ(:$rx;xmg9 /AfcL nv,}'<"b` ^8蠥W}w F TEu Lo&-WmyC Վw?2 [9ryaB9T VS"[w7Du; 0`.ikx9\w-;QnNG:]ڢ/5fRL#ĕm} ɕL)HvV"T߁xm⚝^&"5T<<܄}`R$ GK6Eb5P2fn*+yJ6D>o]yͬhlÈ:Z2͖K$,u2ĭ)7Ga&@۬m==+@ȋO[*%H?"dފ$X 6+Yړ]NY/sx^^^QBЄ=d4/ vu #G'!؂=~^`i2t93Yth|M\N<'cR%I_H~%Ԋ{XP<vl%F>gP^:Z:L 6LpJwB  J"&@hOj w!=gmj?>Ȯ床A[c*u0CHlnܧf\OGVafS:xͣ%.Ms｟HNʹ!;(ίzJk#V]9ԆY`Ot 747 ^@m0rG4OB4F-LI/w d9P(䆭-;aƣ*UN'1h;9hojn r=>|+ CCVC3BiG(Ob {Ye'|mmůg Pj7{@|>;t3Ik+=+^ 3ߔ֖x;]Y LO&4pqY'膁M5f4Ș(49Hc4J0tp >st_mT1\L7}Q!ㄧp/lQ3u>QZH!ݴÀz|HQYt)EP߼f7_3|3$DI~BqYjHf`6e z5GCJj@Lb7Cq[)n/Xbt5 G# >\_%`%X/ MaWơ'-drٌ{5g/b LCٕ{ kϤ+ooi /p.Pzj5ӳ?ƹW0bBq8uuv (z/c)}& FO]Ct'+ˈ?HӦMe:뉊f{7d=UhݢsJ2t ?|Qu֎0QS΀.*".Yqs3B\B+UDݤ4MELdRڿ"QDQu#=4>i!wj%Q|GJ\F{;s9Z :fhPX[yRuU`©S˾Vz ֺlo,Wl9bi+m$##ǺƝv3gHV?hY;vtq/z6gόͩ73ã$zYv \[AygʹARɺw-x/0y{7j ?l'Ȣ4E i*)/ra hMrS~u ^#=ZR}-ٜ @zD*T -f5 4j0$ ayn}EH} kX KTͩRdBv\$4:`cȊ5B;,F|[ ,uCS*tqєrA9~RZ)Z`=0D/;pvhǟ?R}u82'D]+m>t"" SU2Hv!W#H?"%]s[aQ٪+#?H.^߉yԵ7{'2H"}jyaƏ hp&:VHE]E~oFsE۰ ٝ(x03sQ!a4DQj HyE q*ǐ^](YB΅d JZQ/z*lC*YDt* YH{QT( })nGFuI( EhxD/Kz;T^U6KӢQ1jǖ١Qԗru'K9և`7M3ZaAԶ>l'/+?ha,9c^ 0WVҋ1S\c!j4 &sDոܮ?1ŬVuϭTXϔ0J c%y6v?`@A'y0[{OQs7U_ X~LI%`c|,CͯJh)Yw#:!𖮪 \0N}ud= %F'<УYsB^VA$'jg0/ZPM{uh$g+u2՜4aDAog?;pќ0@vxK0,Zxx:+*$Ssrjyo?^:F!Gh]2%3ɋq1t*z=*ԏ%YU@22_0?u]&{U8ݞ&Eu|KiMd~0tThI/{A㆕„!CL,R,겠WP_x=?m@! *ن ߬GDC^"bokSQJêd{s6*S!2Hwm4sOEoQү+epÖI ŀ 4O< O rG.E#_7>B~o/epmZo1ϑ`9Č;t?\!i*װˋu Gؠ0!57}PYO3W^O)h=X޵ c%C!B͓ Gzv8@B6~6jE5~vn3Wg2$g]=2rj bzɱ {E455ہOu i`a)w2"i*ĽZgf5F䡇$#\=ݠ5:5|Ӧ?/:*k"y{MYssT VO/x|A]BgnzB?j{ , ls4U7O_HZzNu`|#yމ^&׷-!c AI؃ӥSVc0>}v_z b}LGڀS:cS 3 p O ᫳zp#Nr?28A 7-)cHyRI2A$$@WdLo#1g]u߃J zC"SN:/p䬄O ຾+gxl-p]^MxBe;*1Kc8譺eYG7{w0LwDA7Nё'4|Bn1}  y)io$[stss2ʷVblv>bu}FiI*0Osd6.,z >*k}jcͫBk~.j~KuXѽV]i&.FힴAPaMLi=k9o*sr@&{fps\Qf eѢ1fp~i 2;]ԬUs^v;ÒhAoMW^_Tv1wPT@dfKXKU4Z~L3}l{;/vw0^_(r5^JpXqtcOv? ɓ2ϴtq1L*@>jjhf%\t辚.UA0}x~gѳjaS"qj,^yt ;_h #u#>Yh(R |? ؔu~m 9ּJC_XВMcS>V991 8IɈ)\^[˚L53a#g$0A=h֋J+1!u@9F8}'z|j)ٲOUҐ,%)9Xfoȭ (oPM౗Ӈ}y& TkV\ToR+Aq_g3c)ytk]Gº/.o'{(nnZ~ y`[KSIR"(jM3"& n,Iu4b# V]aRI&77TȀ%N"GN2% rSUrlsOOrSKuaΚ "Dp󸀲^Kz 8G@eoϯ<`*yN~9xP+p29`?rHM,&UЪ'G$Sߖ{F'wmnKax%m)_Op#u5d\ROȺS ̇^¾\;R*Yi֋.S%{ zTCI;X8zP5cl紮ΦkXe۔,WV^f}ܺ蒗f46[7Vt=Rp诗Sieqjq}fPBTCmUP/!e{1P^q^B3:j /0+ ;- }l5os@5|k$7w4{VRiC  _۸nffyX kOU;G=hHL5s5@F4Ε *d>p2h ,  k eQ!ZѬLu]`pjl6}?j4{[s,<]2E{)>߂Nn.S7ov٪ wpǑFw'X=EZ[-m[mj/c:j;Jc.5Q爌ҤQ]tΚ,sK|z8XZ\R uɒ'$?v д\Ԍ1Z"߂NGfv׌|!# O;5M#lvVu>ȗ!pl6 g &W1g"IޱXG0rqOSk+Vo!,O{duϩ=E6T_n~3dm#Ttծ]mhFË%tp?0HU+rx_܈vi#'g%7}mw'Tn{X{1?˾_kU a(ӧlq_p(K3 I#7KJ*о'n&o<.MW\}Uz! L9.AuVJ@8&]Gh C?a>Ƕ{tW׬*!,kMHV ~!|Y?*iYk䃄<5"rD6 ܣ#sM[i1DeQv ^<$bqtF:/]_09 :$7ix$:yԴc5?3vx9%)Xt!LkN A0~) Q~%n_zՆx7ӧ@m646:֝s9"#Q)%|D2= )2mĽ靀eRd~4oyyV6 Z~%PRMHQO[~QfMӻj{1oB(OfVK ʒ0ju_hۙϲ9RLwM'r%>~(w]>}9ax]6ʳCx_v ydVӵy/+o.z]"Jj+%vc%= fv"!ϾkE8"sp#bԽKf"[3UhPC3<2fOIyǣMjz&]A>HÎ\Şc%i8(ET'V.Ę&6cnrB)qxޭ/DvO`iǓxTS,Ɨ k:^4PUqAA%(r5]IUPY+Hǽ/luf ?yV,k}Or.D#bW~!\r>4X \b6GM%'sChq]rV{ڊKD"1V[ l6QakP/Y% >Xk)DŽbZ"$tcE6COTJۧϘBKu#=Ұ u4NWn:h/mHHU#RSdJ >o0$Sșv߿`4X(W# ]R=HM*Σ\VX!7,Tj3kAt li3]rߴ?BG5?Jw9*oHKnf&QFKC]"LH)]%3l^mZ@K JAbVaB'iM7LۄBg TyCJq_q @}NbB0"֫05*w*~4$aa/@Aϱ0aāLxEb C 3Ns<.8hT XP{ VAltߩax$}f5\!K]zW@1T06wMȺ כl?Ԃu-Z 1NsZٛ _O'AfbN BvYgʊU@϶) ?qh{*5[Zw^L/8s,x&=PFf5~Yr*#Y'=[S[Z23Dc @|kIodmV1sf̺c0 UE7ɞ4De5i z*^:{TK?ۏJ+)zN,#?*e}{`UC@k)v䮙faVFf%,SQQtA,R뿝w0Q@hu-~Im/?4 Ї(kwa:bR=8HnÙ{8pL y>d֘M7>7ኂd;I{#-ul7ML0|/7 텔clA]OR74#ԫV=1Lia^7د^\vcS1?ga=]WxuY_\/YTwIV;{hg=^㺼#A1(hΈlvo#3gSVLb"!2Y'++UIL*D ?/U}o$@!/^h͆c$JFKUCbsϖgשYuW5hws(BS:U8Cht ~hX$Ae83p" Sڽc06-r@WG4G ڣ+"zQ=Djy wG\ i9۸aaRX"UYxY*6 6!LRmUq|BV?0pd.攟;1lzYr Bu=`ȿ!yUFvlVEA'801)pKt*['-i]x _KmEH:߶}^㋋)81K R[t" zb)$P?L>Uhyr{߁pV1sstuYO}R%|Dn:;-ж;wADջE& YKӦqq'|+ЃsP ]F3.NCU Q EKfIJj(rMN5 ='&LhRf93S$nM!ݩ<ڤ!rwuaIl. %{K!:taU T Gi- rEsUe: aTib6eN@]w(9>(Q<-fy\_{0@<_ΨHPW#W)&R%3p, z-8Wg&8ov7Cd"|Ft_t"/+c׸~uṫf`sV{{LKof*xBQ[@r0uQݲV?:fع f2@p yl<%~ž]/v/;8dAԃvv' nLڒ%tY$*q?YɠZVJ JD)_qX1"{Bs}F: /LL¾&ɘT3]'5fkA2 ~iC6k׿;We8N&C_54N!c9tXF9νH/H>85G4l35pȴ<Ŭ\tH^{; 'S?6X'\n"} Cf >A*_QZ?L`^x̤0[GJWy$ΗeaXUuN0;|O]՘|wPA塆Fpa !={GaO|AAl+%Dۖ.:?Bq06&ƋAY-ԾLc;vzBqщFGՉ-STJxL,ɭ5`q{Vzk+]; QHޮKe^roESh$sxЉS]w6Fq˶ISU0_tr2fts cIbP/q[ČDI( RIl/+EA4g#^~zV#%Uzy|t_צL `AP  T0"V͋@WK$%WrR?|wLHڢ|CgUv UG*Rk-Au1 RhvfF4v}!«}LUt Cu3ٙy{bģqG73_7|_*IWNiQĀhA55t܅t%H[;@ɰMp{WMW%44Ut.3KpRJ$p&@9as85t<+va4Z..[qN$[ʖXzHThQ-> 6!+H1$/NR {۰;kjEoZ}^Zv?U;g[9EE&/@P,{H$/B,鰕uW6'G9GnpzpxԀWrj+!,25¦"<'5U(E4NToUCuc/ta: Ε<6׫Rf)/}@9z8FuDAؼ7VCҳ|m73KWX~gDxĄ[L%װIgݮXdyzrtIa¥*%Q7:=k '_׮5 !ف Đb*9Ls`JP+  2z֖a(}2p4GE_&:.V'hݼ8 ó,YMXuvL?Pmހlz$=`{z!J Be1vղWL7IkK}L- rT VlÍh!+Fa[#r1xdQ;CozA]#~/Q99SDp 5 &bFdzn#r̷{-'YܵC9FA.BMW;F'(e|AGx.~8TwDzfW%xoL#Ld￷T sXCn1 U(/GQ'1N (߂jY՝@@@z -1 Mpˠ=<-I֬YvCuqՌJgn@!!9$FTNOXz3-4ƣM >&f-jH_)jwbc\QJ8# t]YPx=%Q؄P<.i1̹Y  ~%4B3|@95!BIiv yE Etf7zT0dص|g#.\^y2 .au;FzI_583O n7t PNT(?gyG-vG콢~hX=Oj A5ti1="mj#jE5Fj]4\9O\CɛBaH@ >VZNt, _{Y|yrZ\pI|Iaf!uDoU1N Ŗq$eZrA+NЕXWYZ DnגƹNxVPy.$!9ijuZz'^(\\̆^y6<2*EcݭӳAhBH62bI!K +Q1Eh /!<׾Eo[[0Z,!vVr'5Z)|atE0FD%c 4 Ṡ$,S,p+rkRȁEeg^A6UBx"**,pRuLAmt*q鱯sf6-N2 F霏{a/^?hD!FWS l˱A'RϛOU(Lv$JFJHOZ.D?!OAQiL(,i4{Kz>Q'KMD JSn!{1WP{7ɇ+jD(@ܫ/xMGlMRam1D"\C&oPxtN]7@A&m2XCBF@fVeKF? 1B* 2*E%07`՘xt?eY;Ap[y._]Hrj)/ǃ^,N!HBUz!Q }T8Lϛ 鐨Y5 L%+2Op o>4TޣhG5<ty`2+)~ m3> QX?i q얳p~OG~)$Q$yy[9%'Rv}#x 5VJ8RT5d0eJꆡ>LKXt]-nTr~%P<~ `new cÜak_߆,ܺR.-d!m v!ir& e9;@*ay.uDTXC\/:P'd۶o\;i#}y\DPuN#X=10fPve,g{XZ= !O q0kZX AQ*(t RᜀZBȰ-Օ:|lADȪ8}grߟvM!37醴| lsA0䳋;?EK&EŢᣭm*>y!IU3S|/]=~\X.2*8}kYOW@#̏t)9.N[fGu?|{;P0{K(L~p[i?4&3\g)*Sdd!,Ez5<5Tt+}cJڸ+:R>Ҧ6L2Sӟ"CTɹ&SL7,xr֡>.fk UR~7} {l|D l4u>M 1Ռb}>X|6zgm#Wb834lt OP0t3ZFˇRQl B':cctNm>v! |U[R\,?(Ə&R*e._ 챕jݪ?yTX51K <ŝ{ a&✸jAҩoMSzۼ. Y 4쏘+9HVO':2k8 <<݅İs#^(TᶥkևcuVɑ2˟=MV?5JQmt"Y]w??aOdMDHXԢ:QD#0?BE$d0ന-NB\ *Ƽ[Zn>v13 jM,Y&6rlj!^w\rс~46Lq$c{Zɿ/+_0tW4E*̑E4oPtl!{ 7u!C̽MiihY7J_eh68?> i骅PZw-b'c Tz(Г3ߒ\؂Lzvq^@A$[ 7]AGgS͵VM׶n{Y 0j(3t{ h\hG#^% q@HdJ[[ z5'ydQUEhƿhǏ~>b0IbepWq{Tks`v #z""kFPq>V>Q FV56mpʃD0*d[7HuѮ8nRTjJdJŚ Ϛ 2Y*?ú0t٫NR謰 &>3~~Vq;zb-Ru. ]L$+KCO,XrK=mS:8{Y G,Y\-]-kT7Ybu%+{kz)DҪCٌ {4MZYXͽ]7CrfwRg(Y E0pIwnz(eMX.Y߫.0lgaxK'9VH/1D\޽YƖ2ϝUv䇄?l`N ԥ+9潪Hvեk2~9HqK>T@]Ƶd={0|4?ZzO3)R+ky\PhFD-Wܳ9_QɋMN \= J؛.={܍@Oy׭b1]\:Iro3ILO jCwɱ.T7Hs kv\m2.Ԙ0$ct+>fC {bDXw|ǂDZ fFx=hSqo2Y EwZi?,9zSɚFK9-w;l|TB#Π9Dz)Wݲ4! Mcv_^a4+Iu1T Uw\K4+t-}F^fNмtǺ%X=/MIFT{U<;;,qlmr6vTu?Us&fN#-6fԑӵ^PdܸnVk[A}] !)ʎu![c"<|*V:ֲM; h#=}w!Yˇ݀-&prWm/72{"TFy鵯0\0 8je# mv~A\L{V=V#[,-|Ԣ/`b%3B/9 kG|U%ȟIDLMY6W)THi#jQQeY l 0WD\ fjNS%6r>ކJ[.YbWL$oT*Qo%މm ^08ϓjA }+bqhis ).EPv8Kxf̤BbI[æBHL];A7sr|}М-49F\P|wT5hGm ͣMw\q ޘ)}S]s};ON ֬˔pq'%ҡ\[7>*ya5k(Y+wo BA6j!d0nzH)S-Eo:BaQM]P<ڷMC>߉[3/ښXhkYdg!>ϓ IE`p\00v"\zPQp{,.2Ji}(o}.7' -ctA$C5;{s(~} _!b%C+fӂN/4qi}Pr>Bp?Yz<Fm#F>z7}L q[MɾޝSpʢ:~ФcSթ}=Xbmo̞SZG;.mT ?*V.dMoӻ%W8pPx1iCGٷw&15!cJbX#4hޚw[4feK:᠀Ӌgq=Aes8w6RUw}{s8Mm 5qwWyOX!AL\ayϜFhz~mG׊h^G7QG2{B[@q%̬ B#W7z*$ZJk+wW.oDO1Ge^qph/D Ǟ`ʏ ._Bᕱ҄xBy8$7,rgE x:o^چGя2ě%\} ҫCE0{xgTjT (?0e}Odfkm.5-QI}No眄H˶Igvy-%fKq[Ѱh.ޠIoؽE?vZrjt8q=l5Um|M\`xνU2Dk$.E8]}Z:emO _N:b췝H}c*3[d N)WAQa.K[mN%EB"uW]9]J>U)HfU,[*H.I9Tx18oiˆx:YePi]epJ25L >`v0dãd4:83$T|$ (*gYW,Kӄ2.{Pu(vI#h.#1QW IHRϣh(IWb^7=Z;"|eݹvX&GazMw£1ECv=[Œ#n1Zŭq2pbh4ó]tzU[eaQQ Ѣ=i.y:>x{bk]iQ> V|P1‹v6>Q0a6ᬱ"BԟIʱ;ҷ:Q>k6yj@iquBOM*!徃Wo"ފJkbFnX!\htp~xR+}QCtdeęM N͵!"ŚU{XاdE/ RZDHh$itvSHՓ QRtvf˳*榯iLFz>* yD.P>D,Ʊ]MJA؊bx}3j3 >۸O?X޴FtScgJ@aD_~Me*d(&f{;s|[n G*dY%aH+Dr@pm@ ]Uĝʾ:jqЛ<(BhzKμȹBë~:+NH6&OS/c*5c^-eOA )ݧ!1ZU>QlڨM'=DQGLc5Vp&h@V`(eO?22TqhI0w~PsuPTgnRAZ#fZGk55MaY?lLGYG._WĆANo*]!ҼG`>FaTaOؤ6ix1'%[,q^}muogd։`($^0%KtYL|0􎑸// aNЌꗌl]`qCFQa~Թ}.j5Fnsg6|pP8n:;t*S'l v2w HA& ˴ 2pUc?-AtsxZ2U `&b>e- R4d[ {TYS҇I!zA6%=P!5։ `OoTK޵BI^={0MFҘC@&e4GͧJ;%â}Xgʘ]3qmu^!Ao$.qNĥֹ͞wĠeC½ NybtPW̐6& (ACP|V3Inʉ.Ɛ[ 8R]yv 1}<6k~DjeV4lA*z92DOY}|&rTGpqNwE)`ΦOyV9kq5Hvu9M~/#}V6(!) f0)!, K嫣߇Joɐ9X#4o?Ow həa=u_5}kXJps*L VxG77Yb jaN,: eQ:G@k헎a!',ZY 8d2P{4P?qgVxZjoIk VS7H׬c)PItêpHr,d:㰘XPD9z$ F#6g@i2X[ѠB *}ɳ9j[󽉪NTx? S5`Voޭ,$B`RK0^nq7R4U>AqۘSHݢCYnʧU>b`z(' ?[-n8wȴA-^T #~W~%d}=e?n*١rj{i9͐*F*Ymiݪ-4Ӎ/]GNcI ق/[by]$.bT?`DzSŒ: uEp槪 d-'q߸LXGWxOJ ]/Ǜ2-u)N]nd@0be :SV<~F?#2:BD =&c,N7oK<&Ljc⑜p&QL~2ٲ#`Qr9|g_Z2Fd{17f>;m*5;r'92l}u ;J`_}@unC_<tq]#͠ݛjGK-)byUr*JW[SXP;=v(9eTܽMH>!ij ⰼ?ęN2aukwBBx^^Idz/ ߾)o<_!J@FOF4erʓ4NX[ hݫT|EZkE>h[D2^]JM "gg.d+IITZ׳I@IvJu8Q` .CtU&uQvB7E՗c?e#8>c:$3+C=2o %Gz w؊xLz)CUur'kO/W:-O@gņ3NRh%q7l5Ra7 uO><.wD#0fu!rJ2Hot 0lf h͍֭kbxfKc? < PmC@mń$5>\_pg+X̰ٷkISEzsJ*DdI,,a -p!遹m0 fla~OOG5XH4O%n\5*w-[Fce>9 ; M6˙eXgc罟 P',B0thJ\' ڴԡsԊq4隹MdoMg423kF_5th%OG9Q$<Btw埌OQ{\E?L $ *-4zJ*QY0hyCoɲᷯy SIՈBvpoTKv1Ӥ flKQA ~G[FttlfB'mhdD/K*ѩ9*.쩧,Νt/Ю oX-[l má@>󯌡Gj\G+)! TZ f}ѷ )2ʬ9i,̴NK]%,¬O jF}>Rj.3|cR0SQR3O‰GctWk|jB ?U^00uFV3l9A7,<ˤVGnt/G Ԕ2_QVwH}!M7ŻOVQLku^;D]=9fԘ (+e;6sH'qKR 4lQ*s'ԲʠxZ/j wJ.G4D ٧aͨ"j7"0vjRd9xؚFԮ(5峫W7MZin'F`Ď[nWlC&2S6Ӡ81U]&1q*7N,VFգa:"gFUQpkKzɨUH>\gzl|<|%hvp?vՆ39{d[a)w /ʛLKOdUV RVmv Y?~aUvb409K=мի tQ׈"au0 ]F2#!ȐoR+0J2ՑIь4P]ru^xJ3#c)ȧ,K g]w9\PB==PퟁG׼NNV+ 81-2U,`KČd]-SFHE X%8*И]%Dæ;)U ysB1P`ڍ`*˿_a-Zp y?9]7lIK8%@2{"JPlJ;vo8m.f U5Ѡ-tL; wn\gBƭ{%{\DɊh:נRQ ǷGZ]35g]6H6Q-]Ke>'J*H8v6StsbYJrL8Dd|6(v-w5HktBb }+rDI؈3[NL5_HP=+% GDQP,1RZ^5-BI. cn*2UQb=xbž]X5m|kce Dj)[S1sK:%CU+mdF^ʐx0Iϯؠh"X00` ǂC6}h@¿j.x' wҢ%+ Cf8X=2 M+SgМv]; AJ&"b xY{e6'@BA^0_TUq! PJ>Iڐ?΍2Jqф15ݼ "r=*M=GHWŞ-*L*ZsOV n$uE6Վ !ԭ؏vrYk~6D1Nkd){FU:Zi^M` t6YlSH)uv%QFD+ RwaZʎOUtryb:,193Ci> AI^(T͜ rU}\( <ۡ괗f0MΡ+UNL=xF 0ǦzZdR"tzl.~V$Zn㓵^ZCaUe p"] {'XjI|2姞3CBII D`)a ??vb:;KD•O9t)*j.OMw34~K[̷ L3TenQgJf"Q`a}{?-BJժB$/^8;;E6ҬqW&uWR~;5u5pYZ=O]ܿ*Gbbɨ o?5zFD4gx h=n7(5ԡ@ <n!]+>׼*kAO2e=EU e}VtL O`)ea=Gk߰j4@27wEDTohFl91H)|l%3Z.^յ"8P=Gus's߼(KԐ8ТN1ON"9QV-;#Yʜ@NiIFG)R2[ AD?Tt$U$O Y?&AFFfmDwGC*ZT1QDI=P_e2Xč,σ[! , 90CIG",zM.R_ \)Oy}U)|[ /)Nn:' >OZ9nc{u9&r[X*P s*51 ৘Ut6}P S 1D2BN{1ȓbӺMTٲEooshFGN&J3t)ZuP (nBVtg= %D>4ל u2_ٗ'R9iٿj8~ ވe(b"г@r m+}MfW[dhFP7a|6N)!H]1Ӿl!Fo(LЭop6NSjdC"Dny㰌9P{75 Ċ ;`E7į6n Y\[X!OL "ʵ^ޝE0Jo(z;AXL#ٚ{x 9&u3ߡwh?a'Cgm;cK &YDRW~Bw;b9@f^Tc{ava}L5He-V Qt] H XѽF`S e&w$"^B6R=IEI^ Eщ_ { qF2%Xm*|B LkwU5/t8Im 8Kbl#пVo&WcKӞM4T+Ч on "e8$.7̙X;nט  DB\j)[_(Q7hf>CvYn5:qd!vSo^[c5%u x1;,U',̛/_|z9FhLkdɝSbO m.O:u)ۙ< ;`kjײ ;)x|3zQC<U^_`v Q5qJHse,;`vb1\y^Bq8ƝZHlVO7}k2ҙ[L7e`t3 阐 Sa^Xҙ  L } s}zr^ Pj2L{BlbQw"#p/2S!V B<*Ѳ_g9yZΤzeCڄI(q{ӕ+7ed/iUwIn&}itVŐFͩƥG^IpĸV@7]~e@x#Qa.V/W*9n%4G%Od\5W"lP GZYIKP-|7 fze$Dc2ۜ!iXFv N y@3^S9h@bb q2[㓠drnZ)ah>FogJf7o?wbL?Qn8~^1b"VB2=_O@5 Qjďwl|0qWP9xC/Ń"ey>bęJJ7Ez B=b)I+j':089~x_>!|W&Vp=EO)@ס6.e jhubUc[L!R V*”ʈY=:.74Ox*5jYys .Fb7A]VH`&)^ B=dYT?V{_[݁d<)|J'}'ON^ژB/0%\ CmZ9*y8)站JPKNCi5-Frf*?5~dJ*!?+a2/8. >JLqL'mePEuX%K8Aʭ#3ǎY0B=pQ]JEl5G=> &q_i0K)㍆}7U<ob^ͷ8.pAZںM`Y}t~L)˕/qj͐rn3[#G|0-> Hq;Q]/o/ŸX*vI͢ZdMKmyoBaM, M7_Y+P 觚.3sĔ݇u9+4k5Erpd(8C? %ߊN;||e0aIȆ,"[KR.b[OJRq-[zߍS[ QPށKfnNl=@80'?v8͹%3l2]셤* b ƎJto9nD d~ BJo9,mʧ x!G9MІl֟3GƗb?6@c -[rfwo e?ۀP NlR4wC 7G,z&anH@5ny%oovWUP:}2{Yh'0/'z&Jw~>>x$J۾=>eb*Ix2L F$Tz ń ]gǮ(jJNM;Ro63t|~M= ,2z;I۴z5O @j5/NI&Tv8:Vb'"U8ЂEi [-#g/h bzbR,Ǩ2n]e~C,E?1rWC14p,h=kY؉P[*ݔWwt3r[RW+;BF6m-մEJ$S'4,"{HJܱG3v*lA'OyWjAxf>"x?>hLm %3>±,^u~lVL}>}167d[3vc4U"2uU8Yrw*IX :~aTYxlu! ')CPY=)V!|p֏YW5 M>bm53^WH,Q5r l[ {q4%Bë2>*kj '@%$NO<:f=!Wԍ+(҂o1_<$4j0&TҐ\Σf=菀s_o[JAxg-:,g=_!JG/-zE:-62)Q-dm22DMzn;z1za0d02@FF?x-Rp) 9I*z,ujqѬ2y;Zwmd[F @c5Q2sQ'~lOpĂYi $@¾ C;fް${sUYډ*#F?uMvmH۸`C퇴N`hnF/;eK`r6fmNpGrzg&lE7d9(`g~J~䊦w4`F,< X^h.$5뜐ղ}da 4XVa(\50-ͻ"֢}scP?bD|H@2 ž7A̋=jޚ:j87jTXwO]-HGS%a"R9Y})yJ ;܆+|Dn#|SW8| {]͚{R}Tp BV`e$G xO!QZ_)X)gl Zg/)\OO}sc+*qjL 4>,GuJ}gûq*6MFr* ͎Y6]0"q6svCkGbr(+|cvv.SfxV1 7GPR9>r}zb CJGrz) m$>„^>JEDi ܝ)zcPΠ`xȞ^՛cV7Mx.%)fHS~\+J`x򿊔%<!4p|1F4XZJ"\78jԢ~^enؼk7aȩ 2Y81|m "= a~c[gAHs |[Wo{ei͆g< /5ߜASwGz /syk5h4&ODfMxL^>~TM, L.4|׽]2̋Q5sM+kfHWdXa:&cGoFkinZ-J|g>У३>vk"T +3d٫)mf7BWA`Œ&.&l\\7%4>Sѱ)Bl80oit;{oHt%F1 \6σYTC FRM5٪ZAP,*-]> uW{x[|+njotI**oFF|:( jG,GKdz+xXPȡY ['&6{oPz/߿=[qH6(y{D[MB#n\[=L$noEtTɴg7ޥ$V)ké-ruJ Yv-#Lc؅J nE z'fEG+f1xMm.ist owWx  \<_"T8눱TӍGmEuk3bz1 |5s'^^+U;,r"YUqܗ9Iݾi0)C|lDN`*E:d`!<C3Ȅ.=oG:ѶA}B氄.kSjDq&d-4%ÐwPkJ!mHB}ȧ04:ϏܼЋO@asUXUKGyIsm]((A_іIpI 9OAכ /kI5L95#w"C^+K1'Ģ]0;Z3oXYG[a[ ͆Q&uDu6Hf<ݦ?D[\ZED`yK a1d &=gjۦiwbh ?8 _ș忙];V@XBJZCωYC1 >$g,y3 wR1pu=Ja+%AÐٻ0^P'NfU A iX'3hM@9pmn!bw7jAYV:.\.uF&eXQɷ$miv<Vz?<k}%g D–@U`ؐ*K|7|^_9AK;'- M:*)y0{­cN+ƣf,DEjP\(~ GkᛙCR@to!㗌k߭h؄"ݿ O2A\_k_gWaE_~zBdQ &"Gbg[ -^]/[^ll'ŏ"z Jx':kW F @|+VWNo'C.h(1{f?+t%#@^zښt2Eo{Rdr tj`?Dc#9Ë-~Uݙ7"Vcn1 Ӗ.7bÊoo9d]dcGGR![3h;A2!ZK+F+Sd=mOm3c1qbM}XY<(PuE6o#QیF[a\< 1֨S'6aơ# {T6=voXGw~"ADeu jF_>;rN u fm K38Y'8e0vܠ˩+TTL{v- i &K󐁌Rە!T$?g}~D "?CB N.7Eȱvjkx%umF݁U3YF')\w8V&&\4WR:ҌIN x:?/aDcN~U )kIOxGְ< u"ٕEWl4->ү@ED91 \0Xvξ3,1ߚUME/ [&;R3j]P ?VJKܻ6U(:ڟ #esYO5"Pqƍj-HW#ߊfθ-pc^3qxN·n ҢouAo** Ta?2;Ų_;f|Cˉkh!XJUY=iIJNjmAvѿ{#"?(e o3#t5q=Wk 꾾a 9R/ˈIQl{s_:D"''>EwfY>.$zr)j$ +6m.̳Ĝ#5zjp< ^y(m]-r= թ:Mo`J_Tiz tF(dk\<&Ӌ^b UF8a+h[g4"(5Mp6huhYNزsb0z.dsΟ>gޖBVϼ#y-Y؂+cNja:އV7 [2QöOÂv-5{ odm2$IMHokvjTK[ZdAL<D?gn.Z'dHdPhƧ9\:Jđ?5C WYl6ӪvQ' W$W>]+G;0Kᏺnj;٘nhUʯm#ik <*e}{BfԁteKսl|g#[N,i\4`r {R{ ?-tH"OKbDКdҵ 㽂V4h)|Tr$K_G5o^ڪp82׀ `Y0KʃOES`a<{i9TzõUq@ez4"^sDqD Cl Grbަ>t+WVg;Ig+{Ntp:Ib FHsrl曒-/yg,f9+c$@U~Sb\>` :t_iF]W+ Qx7P}Gu;k 6-݌D因!0_B)\xOA$JPU̖(kl}LDZ Yh]^3K]IO=Ʃ‚\;{.pm s_N1;MG}Anb+?G$ ܹDMeqW ZL8ּY <̯G㓴_0X0 DtE~rRIP h(/A?7k 5xQ8+DH<֢i bfbBu_5r#7!Vp3%/ |v)D~+QA?f}ZdjDV%LRGz̚lތeVQzmE "?=" +H7/㔑b$9:|{ prr0I] /H[C7"Rm(6u M,"<ۙ^Ă K m,Uզ UWC5pm zU.";5URIksf^+7EZ\3+-U#ЎƛVBG*I B 4:{5\xTԸҷ ?)ÛLЗ`OxM' z)0W;0;Qm#@@ꅢ^ol1{3g:v&*P;%pNߜH ǝxe<0!b {TB H; D5azeʴVlZ8+FATOv-6M5W/p :`lVzS2Ve(AxoZWQ{uSFTGDI|W1]w qOH۪͋N1MwmŬm0.#v4n,x.a§9reJL0Kyk{xf3@ad: cWSC#ja`$:ƺkʳ)CHU&KGڲC8]<01y%ԕ0z +I54HK.fC{$W[v 1?^Q$i/L0h\0b W&:AV;_‡v, $a⸔00p NlmLfY30},"N53yM@jم=8'/ݮRִ _^0?g3#LP0j5<oSms'p/.k#ʙ/ϞXvv_ LZ:nzGyvZް-{_<ӖiFGvaggo qSoCn&4P)-DحzT)Z & v)n{$**߶!N'*';-ԷvH"iy^w=\Һ{-b*XePCIZj"pyp#S΀Iv1V[ N3蓮G*NR 6hs@Uea魴<_[dzcdRcPU 1*S/91/8 ҙ\ f{ccjKs*fH;P^ņ,e>Bt}6n[A_%L Z#}W_+t&,nE,<ژXk2s`Z}F ݤk M]Ipz|(Iɪ&Udk'!I8۝. Ɛ-Y#Ia; .^4I]|bb *dˆJ4ym㑮ڽ8"7zoȮ'=3| Z8A73sرZ/O̢&-CMn(B,PE8vv|PLvTH14^q]+r)C)@ї;mЋՌO-ZX0 aS0悿xØ?'/y n! |RY@c5axۜ=_Ms(K^^ܱ=:Vˆ#S7o+nu҈!~[%$ƞA4]Sי3okJHyVxOZ];!7\'7J 7DU1(̑/@ uu%FJ *4s c K͹$j#)T %b#27^hHRoߊlC>F#(V.g0MvwSuuJBȂ],ثLRl! k!&и݋l5Fb۽_jGY)TJxb ӡs}>9^ QdWT)s ϓ;nŔ ۣtX5`W8mfPw@Hu D\˔=ma+Ȋߝ'OzAwqy3k[8i.n<d>c&3u.m`MLsT.մwW:}Bݦ1ɫfabu2 Pe9"s$x4E"v!KtM&يA2 j Rs?9U/bPtOF"onF" 'Q$,(ֺ~`4, z/@vrYU*XC!f+/N8s_S6fF;B<heŸUFD\T#hܣ >hZwn!;+ c+5dQ>bY c:!v |O1kC|>([NrKsND{` Хc;mj`G7p/naX(,J4OK>F\ǀ}P}( $s[Zd|~v:@RӀ#|WOxu#s &]JU96RsK)Y$?:.iJs|P\TP ټ %U<$,n eSx֗kU2\wcvٗ)ߣ*M@4j&ՀfYE*ַDqTu>-Ʊ!VH|Ie3P_ڜܵ( 7TTO1FRCqRJk_Df$?ie@L( ~Nbp(9\౳o )ƴ뤹8 .VƼ@j U6Ll.X0b}Cӫ\ 5姴v0d`JT 59Ӽc QҷJBTN3 $Vn/}G|-95ius%J{ tPb^ 'x.uwpϪVhz!ӊӣXy`:G8cGNQurIIVE/$/Y${4ܛx8nYg`.Em|;b:e+܉lRR o][i{f]^||$ȦJŦYH:g,Rffo"(֐?];\?Ab($#¼*[/TyZ, iR(潁V7 n6bu.f"htҙBbJ7TiQ֚0p-\<|l#96;|C򲦔ijyIlYIf ex!ȭ3SUwETcvƞY:#tft2,.,\Z#ʃ׸gt{*&I<$= آzЯO}}&Twi:^AFVЯdz>ل%+Ŵ|){XN4ec,@9~aizq77=Wf1Lo&IɲJ$hC@&c-C2(;I۾`w)yPe1K D)T0yY`&:L#3Ii g'IqWLdAyMPp?7R*v0ZR;HT<Pkcw,a8Pί* 9e'FOkr-ɱA݉o]p\) ZX4?#ZSjR=Gra۬fȚ'!p^.?&TZaeJ'@~9GÒÞjIO>z~\hF+efPnGXtQzrۚ,:4D52CƮ./%r.H%xa_qE,#Z=' Db#9EM8B^z-!5BBV?W=9ꟻVKĊ b^|nt*Ƚa%΍`)ov$r){BYzn |obepw\ DGq(Lk._x$a \Z6ehr` pavgrz-1F=$^>"(e_甕jZp|I 2n :.pޙEs3C$'P,~u<rݬ@KğˮFQZLLKm.* Ol*s[+(mn>Y=F@7s7q?Ghl9_\E-cBxK^91&Gd+FApo_oPM ^ߒjXoGT΅sQ>Owu˲fXy(S3dn~>fv?!,ǻmM騉%Zz7#瑡߹@U|0Kň 8 K2HlnbZsuQSO~ƸM֨$0.5HGZROH+8hgpS^4 {1Kskn!T1pm&Vl\5T hha_rK۩Gr`,鶮hՅ,u $P gDe_/\_Hե(NO,xZo r ^!ϧyKTRaeh/^zKwq qZO#+Q :h\Ϫw|(J"թmy%v vI,Vh1zdo&O"2M9ǠdMo?I"U[2PtjS首`6n,?BT"'$, +;ss3CbKv#.^xOb'"Q S]u{T:z/$}*q< 7 ,%RdfU#ņnUuN00uVV;>8h\aJ>RtHn\>Lcл1\ڋ8C6&"AA4yu,XzS>YgCpCga@.Gk$ЉBC֦-EQR/tSqZ`,U@dtǺY]|鲲8qY\XJ*Q] 5ujZR1}LQM 9g;~ l9DNnyf01q\;cE^p@*FΊGAg&aLW5șL3h vIBEp32`pYeŤ3i2R,&$ƿl` 6c B@j? +-[/G%Bx$ņ Z5cRo&)LRX3R,δK*|mP^tɛHj1e6ˌُC @:}WS3e)cEwЫ69#CL,F3F0 ww*#=Ծ-֖te|wb,86ؚЦjGUd=rR1;v HM#5!*tXPnOk.|yz ;Vk6.Di .00vp0|odJe.8iQw%l DӹxrlAq@W qn1Z0^~ԍJQdJq$=F/PН"Lpp>RHzL3)EԴ.zQw[R_NR؏6K|F7NV}O#c+l fA9h7%;C 4ꢣFEG/AuDY-z?kAy(3~Gfȕܯw>jKk\ֱI]"A0\٥?uv -)lW|EenTni40jJ72gg ɺZxZ1x*֢ w԰ڕM0Ӳ{w' xEz&Kk! b'^^be:ޮ1>1!Uj813ן(s{I^JMlcƢ,'ٌ"@2nXia2F[&Mt޺cl0b϶Bʭ܅ɭhեN\cjpWx㥗KK<۔XkS,H(Ѩpjie1 w%k}e]<\m0~/he>>^/߬<'Җ$_߼Xt/a\F<~91¶۩3v&uOyx̂9\Ai) ea!$Z4*#Q"v7RJTmгcAvI欟 Kk1n&;r! ~f>4ߜ&$c<_vFDH#^B"]' " O-iiWr/{H_ʝlV  眔wٍ8z [ldu:*^oM@쒖h6'^%κJa.Q #圉t49nR+0é?kǴ`0fOE0]%uL. /t48_"O$-8ps0W-`@&54{+ffX*Y 䞢xDS%ETU}#r2; QKJ~=UZ?n#Dj^CRj:z)bߟFUJa}O)ngO*8h@hgTtr%*,bO$Pp'*_84uޞ|UF5$7u"P:%F̲<0^aaMMy14I FQ}xUg4ͷz^FU$ןEkg;kEB:˜w٭ӍyH'-.f";oE۾slXկ rJ5:`֑2v'װRR }G 42r4jlج~pd-FSF*CO)9AiU>5~7sG B崙4;g| dEJJ5ժYްp]Cd/9~d67Bi~uGCe5eMyR+-;lHgT=,R_Bn gqSUÿwCgtعϕz@ZE䭴>Ya$W՚a#رt3ǽ< IDO_h ci/Q~Ƞb_3oOS~%$Ue )mg ~Ak w伹y!YyvR 9ޝviQO- 54~)ck5! [A!)zamdא| QG7ϫ~nG<PH_oLB!X+5_~dS&Vg*7p[=<fns–@&CLJ&@AzxQ<R PG ViD`ǻ9I XnMM1}V_$w?v$W \ 1ҵop >_HQ2[N{ {zݴ̄0<Ǎ;*|h&`?53&"Aw7q]!GNԲfxUJzL+Iqy g&CO&˛GYAM9 2b2#@.8F4fFN'm6tT*Nب *.-#tTe=DŒdp?qZ;'py-Xh/a`n0sBMskҽ9nA=q{3Seel 'V^J0+RLk2P6AzF9ᗟW>[2wY?Xǜ[\ߊÐn[t3:ƌ 6b+aUI˖ufXWS14a.Mc*VP] c'D?`ٴ B/tX* Z3|^M3]J7GGkſsd yb~EUaz.x1{oz`hl ]6i=|<TFĚr dGu_ugq]G63Rx'XLzӹsrjP0\\jPIq.վFg6sx7h>Qzu m;eG$DΔ/Ec&GZ11WǸuD>b1.P]dv.xbwq |C<u"bj:|Wd(G ʤ *?NzA?c*uaj/WlFSvۚ{6Ƚt'i<9Ȉ|כ C8QZgWW`4llJB+0m+3SPzhE3E;:O 8ގ~ud$J_T~fjk/-<͂ QAJWrzZli2]\M88d+ &4pkħ#ɨ$Dl#rѥ?HJM|ǛqMeO},f{R `>e)im?8@/+zOyt?(5 1~Ւ}(wYnң՗1DZo:]̫ckh,T؈pHdlӸn%` !ێwl9V_ lPq+cϟ(Y8{3ʦ @]=L2r-e۰ յzW}>J+9@ؚxFtj׼[!$ƪ~d/@&wH}L#0Q',}x<{;k[%ڏ88۬XWctB7Zdjy)Y/#D^3Lg!7 ǀ%3^c3W+3#]XZ LJw1zlLrij;T >Cne[0%hNLR` %\q)RͻExn,@ު\CBN ܔ4 ҘHgѬ1؍Z81VNM 1im 2( @J;ږ#ʁ)UM_"- "PQn<.#,VUq/x"B/|nx-Doimn3 LΚ>P #s7J's&TeQ*ϧ4Y]޹j{6gi_62[ RY',jjE I}6XIŽh5px jT)Ǘdo("}.cl8` *64[p:πJ12_j߫B+'m?=}46(]}hJH{Ls+VtNH*}h x&, _Q&ZPg}1ۗ%qu#ˊ39.kR^;{Չ$qzf ь:qj7ti[?6Bއ16_"-X1>[OxӦwNe;ҀYRzHW|ȓ3aáQlX/ˑۢtФ "~2bZˤR"1B"H7JI\<-8<]rMBL$1"׎IΚ7  Vȓ&)ZQ.j[L{] ۳sv)"~v"ʛťjxZ r彯ɇyĥg \P羰_D< a-dE=~IHq(n@0xݫ:bY",nl'kva\wAu"lb eyVK8j~+y0xD`D-F3m7]F ~@ } q3sV8/آbsi5%?_- V>%gI:$7D(g B-A v>/m+2Tp#+R8Q(o3ő`;[u7lv+/﯉q;:*Nmi) 05G1P_GDWk P9DŽ`j7>kp: T8G }kBhK#;W`EJ{2W%d&K鷢w;[Q\{X~u4޾,4|rnv_E(+ Rim内~n̟|ͦx s \jNF O"@%XqINNg.$J1_< s.Z\~W: $^²7Gvre-A-홁 Ɏ DV"&1VB/ VY[EP:1W8{N"P+u8|SW߀+n/tLS[KA(byNc9׷|T*;K**H<w}o(Z]xY|A5ˀGfʽ,&iEvnr=YR{-d:x %[yB(a"r:(6ZI2z1P:nм)_/SέU&8 Ź>\G9!ГWx!]n+cΜRumOD#sb' Y$W꧐ϟr]Up7:Jh½PӐe@$!,& &VTX J~)b93Q_*q_ADp@b;yP .5M4zqJI HK>q1>|,#H-T599d`÷6k.BOa9ؖŸi}`}hJeFyF.Di*#>'\e/2QLuɪPJ<\11K Bjtt gb ltNnX;Á%.pjVgCArrY+B~l&pO=da 7Y(rnS~ftTEM&9m%H39s?ְRbvK ^ q_Sc2P~o Ne'I]bYGR[V8pie<^1aAlM]_pnD&n{B ڐ1z}.c%u`)Q`M=e-Dv8'(DT6&we*/.zC";0x#t6)GwwYi3h!tXخ /8FVׯ`GR" )kR&݄N>0K~=h Z RJmMV |BMMiE緽;^an6oKTH]YZAZA9ixqXlYo{Hz3'o.{(g1߹+ T_Ar÷bRZ+fMj A0)&[@0>~$f_MXs__s4P= usWpl+;faAR"Iܿ-λ6$wԨ)ߏ%JJw/+~p$WaG`pn}RGVfE\D\Ǡ&v$o4b ^Ր=UFx9 kF2q}h9/F5!3O- #N6J!v)/97d$:A.ݢMĖדA{(j7u`VUr>dȫg " E,J.qSJNypu^U9NX8Žt 󐷈kBCu^@z0~Nü輟9f.<ȱT=6Pq=qAjHI̳e|׬VpNSK`"iRW}M{mfA3Aﾀ;\(9$5f1@ux|IݗX(43e YoBKk[oH,\O83௠djuٕEvj%\:p3wڔr \QEjz kŌYlgt^a|{\tYWSRBP8< cuQ&[U1u\ dT!th[=<^M7bk!DPpֿke1ڨ >('3(ݿi fz#Ro4`$t8e@n.Dm[{ )kqqQk(z*d{hE(S^0A"TIOiCOױ7cDdӟ= ՟"hOΰ<@SXxڰ̜Dǃ ljImN;}fC/L\NmWjvw [V<$L͟vZY>oܣ KbI8%|^dIлC)U ̃IJ2L=3DmXqjA"KQ97hJ臅~\(TI)R(ʘΆ m,);ҭIzd$-TJ^^\6: !nKs}+90^aEnic#F 8+lJUTdn_MgA䯸P|6_`9nؚZ;^ԫ)RcpU%Lŝ i4!"X+C kz~8se32PtQ9FcBڼMJ5|x s|$fJ`|9*nJ-=A& `?ԕ<ŋK M"-s\Ik䛈ZA#-55{n@މo@z{},ɮNKhS_"XP= ҃-,W^  >f|B /^_@  %Y9k:9 MÈ$;(XpTĊ'$Qpn7M~@f4]^|:`2gƓORRs2l!5C.b tviXp#@B.9]f<^t>a ym}蜪Z;g6ǧ6un§u/>3 %`wT]s: ]L~.F"SpB.&iAƍSt5?`XT8#?zz7u©xp !Ħ0AlVoo>YgUўPQ[lF@J58 1.\o% uw1se"=L%Hb򆶀/9,.)zxQ~ܟf$3 Xo%;S? _ȎLtU?3%ׇ45w]7F_}rq{93GzJ 6l6sy$eBb.$␰A:]%(n+#CzATM7A8ߴyx8&;l5f[)BrL6|5 `n݉W9Q#1'Ђ:u+#I(&LN ]xJNA'ǜmîJAf ,^mۍ$S͊GFԳ v2;I^LO {b p!/\Emg$aj^( A]t|\%Ƕ矜RUﻐ82~{kq^KE%nd8rc 4 u8]vBbHt)JAPXzy’z112N̋mAx. c 2˚Ke l ޔ:fu^_"Q(g+RنS'ѡaN0rHT׶(;Js8 7 pxe`O*0Vjc |`NgLd 1=) 5~<]]ZS숷r!k[-GK?R6!EoC\JZ^~H&{?hWhuAmcpυ%x Č:i[z.6>%$MvZDaaՓj}c.&oN -$_'ů^WNEz4$Xnzn$Iói~JnLJJ( D.Ohd= Lv-Ql&JnIY*^/fBVk֥bC2XK@GSDRDGK@ `0JMI}QiߣAk_ouKu? ٍl N4X4ս%k.fh\-HK5ncp'om G귖. /q6`ٖ~t%5bPn sqƫ]5Gl_1?V8pϛ\dLA&/qxcb]}tt|Ȇھq͜x6C{o<1vECznX&%pTy=<_Hivx#h'Lv %42X0\Ǐ 2CLé(+3:\H.*M8|:t]48nkcno9IsdOZUmٛxVv&ߓp^{_$P!j¡j~aTr5 h]nСºB aEӯY} 7!o;p4\Y 'T{j8n29q@"eH䠓ºCb|Q9, h)Fb3%|umIth8w_@T%*?bKPY#6lV7g2@!{Y@&u;A[ ÚV+Q'@e|ØyCiPZ0ky\;ހI9hsåPd]4-=Z<݆gpRT q54ǩIL;:SX@4mk%|:%:&UaQOtrfleuۋsPxqtѰ5TB-X 6Gxre[>p~*a89-iy- cf`Ռ6)l&^ Yؑx~(>ݵ_8H5av,>oֱ%._uT!jDj3UF@dFSԠqX`WpP)}}OK|':h[zH.Y-hޝV+2 iS{?faftFsyRvx9(]JpRa'I+&W`) :pZ(F8fJm^`r9^x PcxZ2X)GbqJ\+oۊvRwdv3rSuL27&ImAi5ݟ%'1!SZufʨj+0(l$̝iStjqf>NōTUU;J:7z/scL?;Ykĭn?`<נX2O;[)XiBײ9E+w4wp.nc 8,EK1ICEܲ5];c d9"TdX6x '#b  LfSlNEEXs?{kdިu=ؼ݀ёJ,Σ!Bx>K [# ě\5‘[6xIM!셟ApB{9!8|U-d򧰵G`LL5+#z"ߙX=z,war`j!MLJ?j"N]#1rX\(=>CB_!옆,OWo[z-ܶrQ#`NgmZQ)) &L!Ta,!9,"vN|gjH7n?Wj |;[q t=ьqcHG7ʠbT+HWԤ̎$`P7ވw[v+؟,V.AS!U}oq##,<3SE o`Znqirmá$ z4t늵U觼HX>7AԱ7D M۪NWVA5NVIP~6w5w#xZBLN'zГH2ˡbWWbUƈ*կEQ#p7"7鰶՟~:Ky$@܉@o-j9S~_JKVx>zJnO )6A<O#5e".U{?=:%ޅz;ud_]hE6TpA||hO۔rE2bXja y^M!m 6(#vxBN,NcLm"7E=XC j#&X¶y5`#Ud+NiD :aېd뗾_v(.Zp=ci}jDT!=slIapyy_űTk_8JN?`x[wsV/}iIܣ+ԭB xpG )6wWx ,5jBIB%I|.K= ;>YJ Y+4d0z4pR܉z)1o6jqMu0ǤrH<p8SxleFCgҪϺʆ&v\lPۑӚ۩5W`Wm `M"uʆ:̾2;"& 4`I'Fb%3V(W&Wf[ݟ5r'J8-pN|yWW'P|=:FK|aɝvqyPF!H WL>JVM\{?)iR24qvZtPglk@C$q¼#IO"[CGRRۛ' y[ℨn79*8u@_Nq-(ty+Nu /Ӭuת p4n2!T R)OIr![.wcJ/I^c::V,*>~9א7exI vcMqXcHbssG Ԏ_QDip(A})sxIZm3ώ.dlYᦋ w; pm_oW]Zݤx,IWL:䘏TXeX%umRJЍvS  zhF^\'e5DH 6(AU%>~0ީ &υH5Ó+^=OBWɬrGBn (]HHF_L ۟|B: SW nJj*\/5f.L̚FHQe*vV]GH|PxH?ɋ& ku(U4W&D=pDܶRjbx NҢ,zrL)^Q{r`UT8v3rVNWMJsH Oz]C10Z8`)EYkk_Q@-T(|=|"vs"Ǔ0N`86~5gt'% _4K (Ȍ3o3NNā@=[F_Xd6AِmISP2 pIAx`CU/b H`/0CI"G3t&7a+Kl EMҼkX9)[R76].kލh'WH[(,L鄹U`Rb.cXxD7 [leo|Uӯ;==>5<2؝ۋi5Ef4Ԃ4҇N|hK~+ސ̆e*dy\ ī 8Mea 4= xwD#wPvwi9N$=T.9ް5/UTkYqGPRwZ)ڎ? ( PV-g+bSbAQ2wGJ~=«VeTy~#Fվe@5+ˮ3{i%&Ȁ毈ʲEq j~pv5`bU&ye*^A H n0w{iO^%+?ptN:rUsaWW=Ǯp,Zp6,W)@5{J/@+o њOlcyXQHz ? .qi`]g1z&]DF-u$hq+H?fUF2ڧT)_vcxx=I-{\b:^d5+?ҜZH{kFK2:om`>- X1zT"wczH({3JP4N #eN1.J "?..?H?3NF\1ælbhMw"X9Wu\}/l-H߄D C0sUW|C)utpfo^ёMj9.!*1igekSzv1LYzkwpvF_l2td2_GNzJVdSRn +2>4﵆_Tcքg gP|"dy(Kͭ?E9nEr\ w#\G#UN&w-ӈwD!&4k{R~sK˱\:|g\\f۶%ܭ.3= mj[!@`GK0sLO98;MacE;8D 囷жx} 9_~vm3;#[Xϯ`4,\eDB@ Na*D?TqݒGc^4-GK;݅?TrR$齟I<YY$mpqR^x&I@J5o2&_&D@D#%|s鱁!Fe!HY<(5!TpȻW~ljI黺ww_V|Hɍ!^5?UDr"^* /Ά_C;!)d R2)|Le\ V1:L~-Zu>q [ϙ-;:[ׅ򆷷5tUWsIXJk=˖V\?lKÁ[gr:A.qw6U)7Aޝ"k {Yه.{4QvU² ?ZlфC -t G:VNk$GQg-<>3YC rnprw#{qG<`GZi hd.7~g.bBV:/gqY>m7c׭En6ژy6zE]K%;j"ClKZC?}I}G7U9&.Vn6";kLkF3Mz ޶xM+l$;{Ϩg פȖÒdi$E_V'@ s 9QJjD'/_Dِ6I p A㙪ONU@9t&/;P~o} t;ٳH}V3Xz+W{{)3zdHpŀ-lp ] \`7yi)x:~\r5[̾<0q /$lʦ'?րjQ 9A/<쬔cqn[r 9s%}.+:m$?OYf7rBR4 4hn 7ft2TQ)8C#**І|e*tLkP b9x$Bl|nȝc+=wBN襋޽vD{_ѳ|%4L:eru$>`?9z걀"*to[I'$-tM3(!&ӥF|`|!wʸukC6"%L!y!bXTFŻh~L+yK 1BQ(sGϓY 9 8L ( lGhFVͫ<7G 0<܍ 8qw[Z~E\?!(#Q}@Q80Fp·Azp>…3MWi3Ya,3V{EyjP{Z<+/< NEt ><הϢ^S*TZ jw{^%+m rC"dG SM9{!yZqLnM4 b] ;ATL¼F4:2}vcRY}O[|Ǜߩ,.@AE#&j.4IfkD{,hW!.gss8=ovB3k fMǼy. )KOoo& TGx {*+[w5EQ%7q9ς2^3+ ~P@$CS/3د{,O{qTlc $:b%pWg6`I[$ cLRS 3SlHׯ# Rw&H_޶W Y˳':8j'$i)%,?8ء]i\LuYY" r @4 f'?xZC^WVH C~Aarffvl0َ/iɼ'=m,ӽ;&0>hD-orj.ß H^{/ӜUv8m~pXTWOFx: Z@ժOC(<8HGYSKӁ+nY0^k /m̑*YTˬ8~'Ȕ0:E .8?# `+yxiNҙ8 _&$N5]t*؈"q:B%.>N: *$鷑s vR yCix;g^>$]Qآؖ'j B4q#vx87tZ\0`(f= [JjQyVW<w z42DbD 6}kqX>Ax_oC-v9zl<KgA'hv؈qyHPA.b8+n+̮Kbj Tܵf4-=99SԀX0࿞7=T)^&/MTYГ|APTB1SĨV(iX/ol'3R֙< u:`M-FXP-gnGpFn$eoxSԓb&1.1e&~=x"p9V;~g)7 /'Kra:,ppZ ~SXV [5YAnC&?JlNus7捋 .`5QGa:'@v̆C^n[Ϸ\BXs$bx! *%7a*!KÜs-Ձf_;|eWyoPm؎"! ^zH̘I 41f51FIě#8 #,bK k娸EU I$s wa|smB~ R& _jJ7mw9aW@E]O"۽Ӣ"?5H. 9J{"ߕ4PՑ՚[l!^2Ǎl*m~Ȕ 4?'~)vpﻪ] hq {.QbaC\B@A1ϏnOƻG:ϕ}PtISz"IG3]kO>p<4z(w0 횎j# ?u]Krw7`Y. !ޤHJ=b*NG@6,xQRcYȇT-iq'~h /fHr ]ZM` Hh~egn(HUXXՇoT"5yzd_=6ux\Wi[ ^#>`Hga{1cb`rߤej{eI5"]wab݃“]K3 SuS5&պHp Dd0%ͲZYTaϳjy1VUeۙ C2ƌ9'F6 8TqX@ʿ#1|w%&K+z7TL7P"bn3T")6gKNI[0b;gHX."f.@D*ItYi{o q!UēޝεV ,tȁ0\&-x M:-e? ógt&n5m")ZR&y9r b*}nM볬Pї$=Kx{םI죿I~EZE?<+%C/TM)p)ᆷK6h 'Gz~x0#+T=PdβԃuڧlI3Zq{ђsٗδcޡ57dƾ1aY x4!^msHg!fw. r"x F`ҎێC,aB_(4qٖƸ`[vj?Kf8l [ aʥЏdt|\]VJ[nS+LP- UR Tg xmy -N2[4~32"Ktw|ů_.,Q6o{Gn6lun~UD>C$Ǘv[냄FAa!s( ұWdRo_4ك(EnxL\1yH46m,HC\5-@ n ]SmZDoE'`hvGχKl` L9SKDXJVNd`ُl/YРWT@+ !*pɚT ~[گ"/Sw3p zJA7 z[& jc1ZtМ5 Nh֝@)F=.5jhGA҃NqR ;_7Jvwi~$>r- iTw_mͮsü lQ(I5ʡDvɑ)w;^R #OVT=5+&qHҩX fKL#9=@peLsuD:U%k<,O.`$DÖ'`.T1Wo3zR`Њcw#' WM$ΰ翋[[SЕ _Ӈ+#"W`ȕ&$;5P>^rv1r'R>SdB`Pk%{1۽R  S]<sC7zr£Qx!ٯlH&\of:_ZpqMJ"+`qUhcDq*8''v$4~NMLOQO`K 9`:c4bv2(u:`mu.HY"_&m.u zڼPYp0뢞lj`_cuƼ~ފ wE\SBR8vleƓ+U!^F~;Ĕ^$0#Ftxe˱Fn[n뉯Ĩ2 2z c.N_bӃ^Wu VGKv5}W7ϓl$~׃ ,ߖFa~NDRcKUb*Fn3kuӣߕ#L40oȼWL!/"xBD ,iy˰5l-c粒MjkeE$D h[ҋ{asfK XkjaߗaJ"`!z#i %沈Ѽ#Ӊ#6VYcGclTa0aFdWc:%)؉80x&yh#}(N-'!0KcP^:S'PIӉK*z8یoΘ,0Hh,)F߸cPqA$g4s;g('Y+ S6Zւ" f>z:-;cpꇐ2'7 J+w}E|p!}bo@p4uf/y@Cœ| yncC-u7w#gS3O]ˠvMm_C[)YٳBGH|6 ɤFPȁ]vg$9!Vq%:I%F&MJ`/ԎUD%z0{w$[?.407|)W+83܎ƕ1׀Lz=Q:0pKi42V8yas'<:[N7̯ԣ#r=?U0FXvu龜L.${="ɒ3o! Z~(zuMya 0nHw"ISe.fԢ4M';fne"ѼV&f!-uȋpAr%f1?`yxENc b41 a2&DON50f|& [T_n}wG@y8nځ-|.A#u~,x@^-.>"n^m6z]{FZe*Re5TtpW|ce>㻑T|3eaZg$G-4ϜT^GQ{}ƽV&pS?es# Zj?u(-^[4 %*&1*i0NE˴Cb.كCtEui*kL= wcl([RwHh,L! :AhV[,n՘G]_u㟬mFl'ur 8-/hhE=NGCM0+*n72erWct}J?5\uHv@ou mTyDӑK`ik07b|aYGpaF 1EOQ v ?z[U`dT+:Gr Sh&1ozc.1IX+>^:8P'sT?l&\7|r^5q7z0NGDf?]>HdZ\@s]rDNnB'w\xh–c'8Rh p;OA?\r>yџe!ah5)+9QJQ[?`Û ĽykޓxLKj>(@ޢa8ڗZG\^%(fR}Q=Q"!d)-~<..TFb(Xj$KK)>ZaJIZČʇyMuJj!kAH<¡@eѓEv bM ' BRDH%qE)x'ғ˘~},1Làj=dfX4lȖەUc{tBخ;yRBjI_bDH M]qpPk P`AXy# g'IXpEJ&8^m-Bj)&!@y^Wdm7W7%D 3E[ iq+@1>?9ƶq ^XVavo;iL߰=;qe Z!=9# 6w(Tpeڣ n<Ռ|ZNAMȒbLHn(1` yZ&󡜤x`XKΰaLO=6Ժ "ߺ~?"2˹ lvp$U_?)R[QE)\ZϚ,Y8~F1uYi368w%I*۲SRedN>Hihv/fa'lNQx(5ޮu|کwd #mvH}ׂG CiXf"GQ^sCFEl"В&He;0 ?V).]SW VBҰ* f:t|~Kxo6䧹#NlNE'k%d$p{N^g%}e䃲h*5E-M tOr\ k]5 S`¢TCA,ېrF$yM8 o.6<FmpXP=KQ? e–M܋*h[N,'Hft h=%$[ja+ɱO YI CNj.?^ ZKkH}@FTwӜqc_;~^ןҺ,n@w_L[Gv́L,U ~j~}쌯8? \bomrE*|U[i p Du&6 ^ xcsPR0&soqNZXޝn1@77 Gr kg&|lwgEx(@d޽1,6[dYR]yAg.<W<6ukX""%`/=]+`f GժM2EU`~}8NG]+-ROw9θ^9 2G:aujCS#]B͈mi̍lMZ@-_}[RY,%ts*TPWWsF>S茻dVS{9;(R.P˻s}<,J(\gRWĊY 6@SxOϬg޲2hk{I.k`(?5@.FُFլh/&&1DM>.h@NuAZ,}^vPlIF .ch`T,<'uPc2A];YҜW=T&U*]xhoLCyyˆo.ПHmy&9Ւ+#+1 OmGn78ĚzR'oӀ._9΀xSK#&1ǫ l^jZo=WRc2U # Ifc>tX<4u Ҍ J4`U`(Z .*.;&XoO^]zZh/2L8 Ϥ{|XiAxd\M K!.]U` EJחO [e bO& J.>[kP#¤7$*X[6lãG^a>.W|H,O%akQ^kSMVQV2&O-GXR0Uz;YQU{+sq4$CLȌ|9zttKVڄ-5׶w9VvnWXg=s=moXk% TrsGt*>`ҝmNS*ǫ'>?UutKXrע8}bz .76,i_nѮ4FW0#C :/҃ԑydA 6w[_JWKzAM&LX9ԩ 8&툴m$OodP4~Ũq;yf0TwEC_ͥ D˯|+3Lf{gv}5gJDVBr!Tcjgs]-!)% #v.-#%*)~RWQfUrx-5:Jбn%pP8 dĭN(Up l4«(z7(:s]\BΔJPs )_BqcPvrgRc@}eʋ*ԗsN";nz$(А ^[\\iXn67;:h@;ffi<#"[3õLwBh^bhiTX3r9ǖcG?Ÿ_f=J>7^@g ѩׁ>2s4ŏ:!!~H[ C%=dW#e]$>,$I %ˎ'㼝֘ Ҋ/kS^|hq4MX!J2 Q uToR_­ȳn%o?jϫScN aZCÆ-_cXED>\-<⽁vdQ 8,WŇ!-5`~ك:'.ҾA) Nfrf=['PḢij%Ҳ2FQکC{x*VUJw򠭞>#e-0?d7а6@;wk(3t ln{nK8p]h/ pZ.CxߚWPrӏ܌z㩅h2!ԋm*&}g3нbRv;'5.Z,-̱p25pS湦qh%$Fk9 Yң6z>=$P6_f(t 4c+5C묤"K^&UY 6?MןzVg9bL)o2'>u;^|ɉ1!OqrP<7זnϓ=|gTZNjxOiQe6?N$=&^- G=obyƈNBQ=jUg>rk62.qzuRW=\7of65{l+%h<'*raovh6 -r(vι}>WW&=A$MauMc1yYbY!?ARyE_mhy.s%e}ḿ\[s7RIH@TQ7,f7/6y\Nɗ}D,MDgKC[2ݐ@2k*Z=(vRɥ%P.{cCnȜzyWaqUpֺ.Nj MMڵ0-0#@ɗ$D`s:Tr*3u}adRN>"=݊80lag6cL|߸QdVm+8\TI!ze ?$Քf=ߍ.4"9T|JZُN;DVA`)gZdSߩuQKOY{dӔp@/~L>LPf4ĬCO{iXCx16'#zN?9kG*#?=$:O$#|6F97F$æ\- F=&RlAU CoGO: \w]AP*io׵S"SRpj{QK``l,9nQK5mJZ% &TC$,Yޝ7nLEl4`FecfX`QkwBܘyח+udY|BAU*T* կiٷ},[ÜXai[\ I;#͛LNA;3ݼ"uyI7:o ._[z0?P "qJ!}!1w{!LGYG"b3.{:=&/?9"x+{LV+ɧ[ÙZeckBv+1c?oS ec̶T$\6`פHjoyϴI kG^؅M~յӕ3GcDTos/铟TDO0z)BdKeo Gr`_45f"glyh?? ^AyU(it8XA|iyZx_YuT>|edk:i?[p{6wO@Tv*^ t&T8MHrS } ͂͐)/ʸQhZ8` YDt$ehDm$Ϫq ;IX2?^Ō*U}PimY]͎eҸ Z> XF :W;L1#wׇɧ_msa ߳ n(az|ٙP =!BXr) f6R F%i5o׽WN&Ŋ`ԡE e'-Z]}Ht:y+ I{L L~cSP_]e %IGO-:'~"j͕mBTjJԧ7븘u5p}?7]΅$SaL,O񴖿A6#X)ۚz ʶ)&Yw}(zn1Nd粜ͮ\104*`%I##鉮rjTNUL~UVT#DBtn 3ᷳ`Sq({j/uj^g`z:ʢ0Q Zx/]p^s95P /(le#0W}Ij$8JvAgwAAmYȑol@]m?iw6w@.wr%꛲Bfj6AU&])+%BUCEV &Ⱅ ,|…}e/p4q:9> t{xg.Jf mWy=O[8n/R[ a j_JM:rk'#s=CXģWF[ЕqrhrBDt;e͹;u:] +KCO'~p@ 2­|õN-o.Y,#߆#-s_Oj]oi9UѧM1轑7/ٝ.} l& ΣH؟%:9U*@%-$2LKF@yOu$vYD[D%pj<胘J,9u')& &W2|ã#7*yXfMcڍ L,W=APs\0MMSCJm7CV|XBcvlUMnt 7j [K[?ێUcx~;/53IV:πy{%}\\jXTӡf8A,=K.z;18$@N jٮ#BiElfh Yg<%F|H.gbݹ gmq:/7ԆP7ohpR!6#am%mf+4x=@KVU棔Í eP1Չy}JY{u;,FƲAg[^ǾomЮiq+= ԰ n8=Qme+N8&(Y3Tψ2O.<8;Y`w2&i5|r7z~X1Lz%bxK2CZ\ʫ\벊M|č9Ciħ4.q-@^i?+L1EѲA^ ^]C @ToS2y b]#h$aՂiScZ3hԽ^tN:]^hdD(oy L͖ o,"kίt~8Ұ qʁlH^41Iw_1! ʑ}xÙzk[EdryPuSWBn?[3))NߞsjNf%>[\B'Bh۾$IuԄ^t tZv-@ȃl9yf( pQ-+(5vd֒_SGꋕ:$|_'p5 ^o^e`>йWh؛+?y*w£b| &Ds`hƮY)nmtb|]aE JKRHXbJ,ҟ߫Z`P WIa ãi532dsQȔ]`!VxCҢ7*-;EdNIFh:ts~ l $ )-AET* Άޒ.VǾG¶aEԽmeyWgݜ3:?UB K{r@3,%TuxR9if>:J4k9k O@衙1Ih4Ib xuEG;u, F~օi(;Oюj' ~%LyAu9|'cU)DME%$_&:چ'&܆gFtxl9#DdG?!qAgw&J~9鬗ܬya;!:۴0et2"PCT}<{M攪˚2>jfu ڲ|}_zo"2N\sPl!Ϲ"#X]iWPS, 7% ΀zI Ho'$ux9YetxZ?z pœj|T$ ԕ.S;?0й P=(E͂0ˣDvtr4etNNm~;%^i p-Qp +IҊ\7k L6|lƝ!(H0:lPP38 tNdUzE2(X SOUpx'{a+T7~\ɠeΊ(҃N?{jZu(bվ+ZRYpDH{\ @å͔+B)nc9k.d<~4K +?ţa(;wa~% pl|HoG[W9 w*aQ j呂8 5 sDAtvX1 &Z(@LbSb6E6D]7 W#U|, mDz JK1F:ec$Gx&) pHţCQt-.IJ% y,l)&{.ߔˈ;fN9 :* >xhq/Bm n R'zCMtgt=oh>OYP3[5}2Ab0ȵ0ɋZ|a#m7I 7of.d}ǧ]k׷E"7Ûix3v#bgb =UN'M^ڹt]ǩRǣb"yZG;}ɅGGW5 ˔o˖wԭ,8/Ml>;. Cpֆ d<+|JDnГc;cՌ|܊\ l;Vʐ)8-Ξx Й)3` =펫Y|gɉ, wL-)Ԏqn]nsb41OoMcm58z1厉8hHv+{63`LFvO>$ȮMD<8*xUW=4zr6~wK]C!Hƈ>j%h8Lb(Uct}tTSF9c!aT YB:E}8,RZEsbe^vWnhU聸v>5h4մq!N8r+_zA=TԾ Dc)I IiV䅌*Aoj{QV*4_>^q|暈Q/L A8zBymVF#kXKGBDBFu$$5X/ė+4xTU-ߕԊ$t+*C6LI*!U=[uCOHЬ'\֜@ ,¼NC%rz(ͤ_+QZ\q[N7C|E+ЦR $Z$?jeh* vr<%8ei yIů6UرflSAol} dkp(8Q~i 5 v~4zUaªxUiKxm uSQ7$Gmvb̷+!$ɝ&0*Ό}~TM޸_FΤqS=jFB+gD.g{P{#/ud+Y9%. U9U! \"6I# ayKMlKDKi d$w/jJhx!"S*ik {>٭lMT8a!69Sjfj@.R:nfW#^, &^_:`(2,*w?(Y,;YlqHor%U0}Q FHo9d&1HHI#}].[0q̸@U)JcGg NL{zZ7r ]xK7>iV@gIv* ?b܀]Pq遝 I\?Wx@ime\α:vN{FgZ 8ѣx/{.,ȯ-sPS ? ͞G8 W`m5zM6 Z5 wY2^2ƏL^D9ȀAH5==W)|/ֵj n(^H, ʑZbŮH-9B Ef:X@J?dggN2S0)GTn;w5OKi>"^2Z>P/=aJit6}SoD]s*cbc$B3 /bvA~*Ӓ*qE>wGY–ۘJybJ"3^B׼)#zgo)Yh@R*6WB[v;oF%W).oՉnW/q^ 'b¤JYE6(8OYe 㰨4 kjj/UxQ/box^WyȄo)F}Ri)qurϡ\T{(w-Ưz0K⭔1ag%}bk SVӷ$k'&Z\YZOYbnj8Yj#b_o|r*6`qOہx 4hI:VnK#R&X$]T[og}꙱ۿd6 4$amY^x JbXB f:#)_M6D ݏm{>XsRn یJbJ?;(O,]1Zꫧ~mB<*XDhkw[VzhTVgssm^@O|Υ!W"xx=Uqiz9'UȲ[rgCJR`S61fQm03KWӲ~=m$p:Y>: ʶ%7+Gz~v=CVHÎAK*m1eRV5gUîKGR-Ǜ`'Y'cv"QBn>`"Z*U$syzMGkBgdBa b*ajl T>ܳ~R˛;)q"nrxLs>Uq[tNhm3ݡJ`U EMc䰯OB,TmPwc?}+X'cPɋZ|n=TBX8 gOX3L>'՝yЏrE>LݗЉ;9#˜ϝ ~ЯmG`tn=帏uHZ8 $RzޮGڎ \lMXq! '" ΛW:%p.WҘL$t`BbnzLj$TgPxPЪӧ(̸c8% U!Xn#: ;NZOZCnh]a=}b?IK B6(@wx&Lijp52$r|Do`DhԻk;5AcK^ >A6_ %Sq5x* Ɖ,9 ǀ,wedQnr9c.PlpkbHS@vD+cjCYoZ̭/gC. H |L4Z⑶A2Ŵ:o$b:fiV0dD?Xn`!}=)]kQm $C=[Q&^a ~ԐGĚ.Pa,%6{3So_ehux@NegRn˄5 ,+c!*u".4 x}waKY[EKG ha̖@iT;Mqeݶڧ,̓ן)eE Ɓ)K?pL?/TĦiϭV/Q؊o"K6ؓ;0. Q#,3SR޾C ΧfʘNQ=Ko5!w}, ~%lA8aPv5; B_xJЅVH%sF䳋6Џy Bk,zĎO^9Oa@Te`fxB%ls%ryYW(ESa8G]Y(&zTNpEyG~}D(v:TՅ%p@/>$ܔO]i#3Qy)L[4q n/ҁcZcYݫ^FK^o 汯ڴVXNw@:l8$ݪۂr [l3~H:h'R&YC2k}/:czZ ~C[[]扥ߴ´ Fj KV\L#t+y-/GY#UUo1ի q`&Cj|a|6`͟tP5Oh=^,ڐ<YGG9LPX ȘVgM r#[k%IeWTꌷ0Lr=\a )i?o0c5ߐ#n9 \iQJC4PǬ82v- ,8ѕ_k^ՐݬwXbMXb!襡pvA8}z፹S,%JJf~`n%CO*9YSI8fʝ^Qcr pCV:ε=rkj܉} [C4|?֥V5'p!X}6+AQrLT]P:i@w&ߴEmki_FXO&ȸnH_.<cfrIڝƳ|5&i{e}‡A|@H+P` .ߋ|, ]$eRǟ&(KMFpRDMGdX촬tНSXZ4n@Z,9V9 {_=J'~{h"$-:̼fm,P%grrDZʈ0ڵ?BC"K+odxdUWD KsV8 j" +K4eʃ텸~,3; R̹Tںa0ݻ cAMNzG. )?PU íqK.Ӛ ŸWSyU;t-4(żi@tmChu2MzyNYUY?;N2K*(AkVanbPϾU/%W "chWGӔ*ǸFZs;%Ne](omX/bq^A/UO\q{LI j(Y,7tVڳkt8ĺ۟K +Eϒ*Ү)Dyui ِn(Yw0El2l cj৺,h篪UZxD@M&\݄Rl0Y5vjZSY"}:V> wyAmԋ|ǴӼb}VœT-)@YLP`L $O0Fh߀h(5]t޾Meɟ3&q7ug:_/JQwC~T>{i.ˌ\O)M:~A>C!.@Y4{6Nv<U-8AsҢ l="f Sͤa\iѠFxqe$Ingfdg 4p7kl~3j -{qT~5eSd_}W-)U{1@ eTn;TU_GL|tEnx *DaG,^t,Tֈ`f9Q 0 .]GQN 7&' o[#V٠Ho ζtpH9eoRּߕ({5dGK@C.X/ oخ3H8+^s2,mයNh/TA7' G2PG}re!ଢpHQG"(((pA$,LO.Fp#SU\׍nSM;νE ֢uQWwW/Ƴ=r[4^^: ,AZV m&춢՗B9 E谑#}s r8!(!m5xYKH!j{Jg!0&&zfq*)?͠ 80d&#n:*~O64:,lfJh7VQ&+H }p'@7dϜCҥryejv/+=Zwɣ"<\5wjXV'MOk5]uKhIj9b?  K7'h6 SJOT+& rr:eC1$ uv& 4bseڀD^"u54 m=NW?H}y.(^"b.Isk5چJW|M}iz+r7$/N>Xݠ{%?'vuO>3 'LݏK<o \"T!Y[$",v}/tbp_Nz3rՑQFl+d 6w2co6ny62`lmM'Vdi9CTwFDIٟ̤OeYӍFó=E 8fPįzd^XtBgwN}_rr,?spΤl>vd(c4CQ7^lH66JԨad}vGڙӟT 2a-EP>?e&/ɻO^t| 9&iINp2rM)Y:&=MqP3+ T `9=Pz æ͑Ui|u [YS tz;@FF*|h2ce:hV~leo8r[2KrT)%:,\Xy!$[S}ӽoI3 ].bRwAi&l~@;)"O'LG; W:Z(J.lR }IG69V쌬Opݝt^ O {[p/Q ى"8beJש-%= ={ kfy0aN'&ӹ HARl/aoYTԑ,Ҍn9[㨧⁳ͪs@e PF)#\%nCl|P3 9lmx\6u)g X{ü%mjD[<3YJa>`LKDO`#6N=.};eYyu_?bWrs !L`CHkCZrcZ,iqr?"r.EU_5vVڛ6XHh9 5Y(Gq;cá~I>EX Su{pfҹ`_HNԋH{M@uuSjob~"c׆3(m@F-4QC7`vEmecO.AG{k,\GTeׇ(ˀE |(fAB|rn F50c 4Jz"z(yD xxl,d9råz6@ 1C f4x;k{kF1AыZXZ!?\N Y7n۔6&^qSKNa}PWzOa{!.b=݇TX$/4x/X+{m{=頹U5&D&KEx,ܠR+`LԩArx'Oϋw &GިݡYh "i=(''u T6Ml;U zȓ0+`g1q=cO`ìh.eU{4ۘ!1e)@B>So&=^^4mC.ӂ!J2j~ Un"H#Q* Xdq9h}I\Xܓ눵A,,Bݘgmv25!q0Xć"3D-#M-th~1g\R8 ,@Ռt8nTiᖤGICN5zY%WY܉8>Gm8@D" {6]̩Y&'@& 4Zbe<' =$Lވp070} )$o }qUn^T/ήUCV1礕KW>s(7.qhm$ф R5R7P2W "008oV`KDOB'[ӓEMeA7J N;9 rƚ[UyS\yݣyP,S3->JHY6n$@/M *jݬo絢YpS_3aL1w)x+)=ىZ7guDzVj`dbzY4`W%};;$+=o(Kb?~!~퇗Q)7ƾ\Ō%DT&9Et"lv'px![6SsGFU{'4--;L1# 6@bRP5&BMMHOA!|VF`YG}6NX4dKutݫpꗬE0G?&qtp2wnf7 U.eޕ\^ !&.%-+h8ꧡLM)Oik(rVi>LWݣ>C:X"ȏ !K HF3#JMFǯo}Sҟ"y}^ /|F'?>Ѥz=+X^ ̞#As!CźP͎͗>BK"MbZyעmxqr_"~JyQ﯐6֋K}8_spT$K,Z*Kvѿix8ߋE(+Ti|Q&E'Tjus.,=0|lb" 7N5f-Sg$ ͻVE` a3j=%(矺}ֽQ^U&.JTַP*k@Ś*JTcf>?vјpB O^mM7׸el 7-}G`2Z6<&xL~JwFͮy,k!)3,ko{SgT* KIQLU!Ͼ[.5p:>M./5{b˾ Rgl^Xaf+H#!x4grwթ'ՌQU>y6| x:D$H/5&vZM~PiEL;Yi5XMRfh>"N/Vѐv[FZ$} EW:b௯U.\2f"SN2{RZjL%.diKVdG+.(enqf{KmEooF-⏋{> ao]r- q] IV& OفJ t-RsjœCctbaW#{XNI@nyœ7s"ö D2eU`>lUnY;~AɿJӭ=bˢv>BTk $_!v@`t7L4h^pw;Q˞C`< MDN.yZ~݂ }eC;f|T`4-+ =~kZ/]h$d2%>q:,Z@-/#%+_txхn'mRnl$+ uJ=2ڨα ͵K/>̤Cs9!Ixu6 9198yӡvtn =~h[M$T+,?:JWG !_﫥ЎP᫺kRTu2jyJX 0 ‚>"Ҷ)D]nS=s2HU/H3{`]Šj ]by6$pxv&?kZ_7=teҤhWY<8*X e5®49ʔ* #QR]i}.gQ1+b4x(y= s 7MaQIWYnGfd&R bH A)J\\ۣg L:d;7aW<l@Ciuz&t7DzY#cT 5;ĝ6@48evVOc4< 8Jnu hrnP#~ 8t+l f=RZJ" .(G쎀\ן/SdR< rwsB52>1GBnPX]g/N~jv3e#ωX_F?WT1k SG=0=9t/ݼruв-bǹ8vA [K6ruV8<X6"\3jsզPg-t8 (?,6H+ 3%x%@ zlDuLf!ik>vUoۭmL3jlYi, <&41#nyEG#yA9qSzJVZ#U%NˎyOZ'QA!W'$pbZpˑ]7XjQP|˧r~0^?dLpnȮ_[ ×lDqbU|eZcUNՍr Tr134Q_n8 A}-Z'~+1APx 4j=-ml-(6Y>*}؇:MyH_WA|s3:kyȏDq6c-p%#kxOc ҔDFtzOs]\uLda$=9, ?sEAh\)"6T~zo UݚY'Ղp6naҚ sMAZrҦ&R0qrwj֝yN*,\~jѾej wR<չЉ!?|69}uoY"S1c_Z6hƷ Au~yPUq׭j%)ifqD+ Br򎄗t a^U1*\Wl]^UTQ̛ >W3eC#'[K[\3 N57ԃiYHASFUDԧ0NG)X +&%x<#\԰ !/PmaSlPb=Qh~tYaŻڿuwHLc!yқwicR廯oX~TQb{zE#rl3zc{FEțp*>bT$Q{Z.n豧7&;J/$az* t6 Y bwE߉$` zǣd @b23dIZ1+,4|lޥV.Kk<蜂Va-נt#ˬHf,7 En[:D8Y! mN/+cez !}{MDI#uڈypj@=턘+qNCC.-n7!MoD<{~w;efiR )"p΢ձգgS6a9 .V™A!I!rl#Yqz&}Wz2B0BY8oPxAYS$L8E`Cv?u?(BK&:9xh2zǷd  {{ĬM7]لG?d3pόeTb! xn@Ox0 KqGf]$}U˿X>[6't=;! 67lNqgmZ;~¾a@NBf>Rl=8&6HET/V>ҲF);фL|GH%O*&uM;ً9,S&'>)%~f88+>U ͢Q`!)91=ߟ>ǯv& SNzL,gSbQ;¯)F*$8$Զ^J{y_GkcmuC:=H%}B(cHЩ+F?=dTׁҵ h[azVc3%IjB6lQ{l40E(VIYFlH&<8&5C&8mOx^pVKSF5Or:2h/hi>1@qR|Aq^ca_Lgd<ڽ?d1PN$tX@sj9$!_]³;}W 3ߙ&8.rO{w 6Z`efXo LҼ&K0meT2nnBc%PXe p2m0o,UE8Ṽ T ƻT̺kM|Ōy`y MYLfTp<ޕ@ħ}eV#p7eLj ])9ʰv9tǝk\K Y<r8/@̆Zi; ejިN(Ĺ~&#op?1{!BZQdߚ[5qZ2Ol@+Sg0aF?G7%lYEh4n4;{F-Vͅ Ytr\̋s aՐ1Zj<{\,{X)ҽ>hn*B/r 8NV^Ս=,sWޮfLwl=޴ |S3rΑ Uy(U4ll?j'b3ZmW.0ԅ6aYOIj߱=~!T~rr yXѾh-4]ZLh`N!#e\_Z]o쐇5$iTj'2K'Z+32ToindX xE~Lңoc<6SK­Q&DF>MPd~R1;Ĩb2tL>KL":8nbNDāC+<[aNT['`؀"b>*'{}nP:mC;OHk-aOT!#@~VVzdf>l;?<IJOk>h5`g:r//8En[`WOyu/ d\+$}/- 8E(Y=`Mk7*m2deHAI !)]Z,SXKMVx]|=dW8,8rKJ"40'ò2WK6!:: ι+%S;C-SL 8wP $ĺ W_v-~oD\ ,A/yW2DTb1ݷ:)usjnngr.B=4wXٌ.,#[Ge@,k9>],q?PIGCE"z9*n`FOj̑!i Cr8no. [JG6%UQy J"SY312;gmAaGsyON2]6";\sh"bε>g+cְ$ 4Hzo \"k7>doz~% b34mmxmVR\wPA x٦l1BGպe80+՘ m?M_%Ql)9g.M"m'!SARTJlRSH&jrQDd^D?${5{ZU;K1_G7IU&`72XSުtT:߮%{0.b49=2!9?G~x3T9]E;<͉.kKkX쿥P>rEqgw0/׉ 1W/#ͽ! ḊBvI|+Ygnzy<O *W\={@h3踗  fxc7QaX}iq{_Ym𐺢#h\ .837R':Gph]ժ01Wg34}G!AڥP G͢j.y0Nqw8ڑx; z'oςe({} Ҳh'a!I#_=˘L] /ha5WqgadxeH1ӠjolXR2h}v1@ 禙"33a ds1P2#.& ,"K飀9֌;qpwI7NHlx"F5WG & 8rlt{Y` AYrg{l⥬o凯AI[S'd#7hqO5,= Fe,iQDυz͌+ډɍD&cw[ %՚$39s%c~Ŧ>;N1reb)P1us7d?{[R=dwvx+7ܹ+*BB~{S"/2F@(I褕%,J`nPO zԈ'el4mk5l6jK_xS:2`l8R4v]OL(+38UI[bZ kfl0יx> y΀G}hR΃$+REMJb!_彍)=v,''5TOaiM <cC_C'I4#_<FQj_3nO7*m$a5f 53)pš`XNȡTE$uNRƷ>J%s"!X4Ijidv>xR ,^$H6z n:L#(+kŌ^gp>`BtƸ]5--y}uoFO\qL޼9G4k&p WiA^nq lRaO`fNF1vEQ7jcΏf^?+*9nFYGz. 6qm\] EpUYSP{ԗüwUUo\B0{~ܥ!:V]ZT cRH1u6$./4k!8ruO)γf;ۀl\/Xe;La +, #yJeCN)9fH"a-7ho*tI"F^Q47f6`X[фh"'E|FBm_9E8Th+&ճPD#%5^ yq @oQSgc^aPyTIYP3 ^8z$ڛ4GdJ`)-;0þ*?=WHsGF)W'U=쫜]R17(T~!Wj9Chr8D];cDvi]mLv[?(4hvaYt;a#AWBޢ?|ĔbIGZµ1OMYm< :S*;ʙFb\݊t$kȯC4h:p+if#v18])O2hRvn,\@ ~N9H[ݬ,8@ 95[ `\& x1щ9WU'PKE >`X9 #䅀"zH8=[xe^O_)^,cO^yfX1W.zg蠄xW~qyhHllaQ&(xQxoH2eoeBse~ktWiA.($l.RP_4ȊӬl!܌ޟXx5 ʲ<7EIA{sUykQ˛0{LD>\Hgb}\u4H #%ӇLZQWQՓ<|ÓgoAXyyz~XMPIbv81'k!^x"x46K^]c_^3gŲN\iEj:}l F}b|g'R?\gSHԊ'n[{ !!vgVv GQl m8U-Q5"u,s;ak(ؼ _1J!IrkVGƴb($)Fz S[obP) yó^D3p!01{s9!jU?q$¥de:8i}Zi$-YXqT ⚔DžP{IP;$$9S01 Ŝ] y02 G'a#3>s7/I}nxAXH2(`ZuHFt5/ܑ?& Xu%Fo Hu/䡌 cl)M;B&h&~L,Dۈ;=ӂ`l~|uxFYWŵOh^!❾]ig.r{VYg8"} v=!!%fsz!Pootטq-6+ eAZi 6t^s-tKsvd@̪"@ V2̖ sŶbM .u$!@F.HWT=Tӡcjn% 8$3z,m? ^퇢*keQ:uhq"nd  }Gl%a*90H '+XaGCFRIq>C3W37ad nM" > |ZvjW@^ghAҰ9){FNYw$Pua{I& }ik~ { OI۵+ N҈2)Fωa%#(VKejVŰ_4U͵B(8'dy8=3`*id>d$tJZƂyGq6dCXS$.=HJwqυZn(CGifTzcWm甝:ԜRM2L\@lBP~(<79ODO!HF%͝;y~W=73,9[e&Pw6H>mqE~^)=ݣZ)_%…ÖR+*jX̪v)1dEnO1X?:<ʤBܢV>ՙ<48T fjF콋x&FZޓ=.vADI9HX@sȔ3<==uR'FP|H@5{EpJpDž ٮ.qMF||0|;ϣRT(YJ족xcC+$Yɾ$Z,e{b'Ŋ=ߦ Z "i%% % 3` =l][_Dˎ$~gF uͽ?6 QFP\r7=(ХY2F nDqV&['8Н6 ⌯X*RWؕ)FL+U}l>U7|V i9|&91s#nhg-Tj&}*6ۓ~ {dQڡ)K@}U 7Gm;ꗿY5fTh^ً;٣qQWEZ]PA$>w;pZ90S_L^:,?5F$%жƼo(;pO5p4&,dk0!Ox}a.G|dH'=&Ep!LN봘>~UM Gk@5&^`?e;`聦Tm$qB}Ȓ6' @U4lW4rl ʭOQx1{ kJU$<:uz l@"Hmh$c"8pV[E$v=?!g2S;oD-֔Y ;!Y\sN+"*g|վ5OnS_<+/$?vT{}_<#-7? BCO!p(zsB[CS5Q+$J*w#[?G`CSݞ\FVM=d1vnMC l쳘F/Rh2%^ Xb'yL`OzŜ!2"<>0d'3 *(&Ri:iYCR 7FesoJ4&`]q9}^Ou]%&+f~47ڶt?vϡԅmKmu'e`4ّ *cÚ6p>нs䗀}6cИY{W@^U +]QxN0nLȂRt!N J%"9cx^%'n)/~# [*jܱBM+o!T CUIAh 66L ``@1&47+0>$(FlHGL~ )T aLdTKc;N1K"FӢr]Wy6v0R~cMj%|Xl+ Ό3Щѝbd͵C\mE75w СS 0p{-u7'YgjEAa5a?r5>`֦"pS:| ϤzɞB .QqO@QxsD%'<}t4~Iu%i_g,&&{8|Ϧ2jvF˪9{`ܯKЈx{] Dޅn?o# yw oU1T xDmzQغG6R_s]hEWOrbCG7]LM,MI }EN3X8Iwuw \D1Bˏ;O2_iJ9pp*Xs<רqA;a~n-.kg LZEQLx]\Tۋ3 Tzic"oD5b4~R.L)֑'#KHVʗXۜmWkP*eedCLP'p+*iYY2+ ȜP/Mp+Sx2x8QF]׃62B,KS*ZU*/\Ʋ,`qC΋#O[V !LtL""ȵ7D¢PGo!w׼F ø j1$ץPh9hU=X#ÐdDտLͭ/Dۣ;B Ns7(Ҭ]%K6?ri7s-$+.P*DlVʓюpjȄ~]+rP:kҖuMUB6Ў+(4^|ߏ橑][MDnoLf?U/us59y8glr D t`V4P&\SBw{`kx$QelD%ͻNOȟfmXڢC~I6\g`" T25O<: v;la;\L amPp}y(6%.Uaiv{\ҟ(C:<n 󎘮H3mM>̉ZϣHC]-Lh\_hJ0= |  -0➨l³(U@h "=xABAʭGW!g*>o^mY?]^p^A{W㊞Hg@H)W`4RlMӇyB7a:dFjx ^w2Hȿө8ktQV}Sm܊88d ׀o>5+OJ ?t0h\d3IVIbb6DZ)z;]ۦkr Դ|GK";N}x0~c;\Z eNQ|AMGћ7Q:yca:$v-:qk#^ cݚoi0әe;q7,6KKFIfg!.?Yp,n #P u8,o/ juȚG|%-1?㞰cH#P?`ijoKq*4t^E>ǼjJ.z˹ڔ B">ݜzS)feLQu~8\krh}. }]7}h<"Pgnå1m?ai[\ @_4ݓSٺ6zBlBILv.:-?PZ77\(h)5M|]PKċ)`P_HЊYʴLŒ#`e OlbMn9#/Akt䢁^)aڌl2#刟hBqrRɘ2&oJCN]~G,BDXeie:ݔFDy7$[N E/0ua"s$``kMiA4>qaKҨ-bMA,,5/8\9G-+9|Q'Ρ*!Nv*ud]L{ 9FX]L0P? IAA@u+-zF "#BCuNNTb4 ޛh<\'yNU?'|F (XM6z(n8 fl*5D2 g+X#::K\G͂kaq&SԨ"%k2;<;m-Ks(ޖjbJH,cc/JЫeҨɼ +.<ow}7cղzTY*tɞYYx2}s'xWaʍt:=^WaLR6Vr:v7@Aӯ躿*"2_=bI?/$^cPѹ `Sk:Z=!l6zO7bJ> '#„,HrZ_V+(St& y@`iyo;EZb+{`i1oP>1s*'0;}E,d"۱#mŚcTƝiƂ߫Md}#RW'#u!~Ė/2#|%2:I/E(hU\#YK~$TT㻉FXQ=28;J;.6?>@P_ʃ 6k*|PAd\m{DŽ0h.f#hKT{3G:45 x6LՆ%mϲj5  k έDim.QӀqnz?F6k09q|nI$gSc4P|`0"j"d$ۓo4 4%=s@?'H#ʳ5 ^sk?p,(7R%01נ<J9:#dRAD=n=dWML؋ 6>D%m)wͧ!S/6V}Exg̝KĽ*DS4efTR9=YIqY`}<ǖ:c}D,&!Gc+`{J`.OCsGlX#Lbu5k:4x&یCY{=o+8-ֲgvi::FVny\p㇠w,|.AAUF4I4߀_P̘hVN'uCL"_:KηV 1"'Nfg0䁸ෳ1Sd{IzIFsy BgF(x+|eMlF%iTBb`[?oؚ18dT'\goRdbʗXU~Gp,ysH[/T))LtW $*Y…oic r񴝠W1>7P]yM}r]9'/du^U$4P$>RaL@5Jqct X_.t-Ųڒ$(EMԱ8WB'.T3gn_٣DX>c/ΌГ1VĎ%T-OJx/Ӹq>n^U{dimӕv\~d/9ڶd|z'*1餐Ou؃gG 6>gYJ(BTB}@ &"D挤`_c 2fDVqqڣ#ZMŇeF)7Ikp3Z, w\ X)w/UPlyE„ 9zIMcιO6*=%çG vlLPlG2o xA92*:v^b8=Wӟ,S:ćCuU4HӘ  Nݧ6>+5I,Gm$4%”@E,>.C`~, P9: haGs@a@ȃ2۬8h0{{A۬[ّ#jj#4apW;H/ ?)y]{CC9{W ,+g]0bYޔ ,|wP,T;5i[Ĝx~`wit%ȓ iqDΒyOj'd/jvu @J?ղ+Q2SьY+elO1Z 0Cowo %GmuΨUMhKks4^pMu, G=pcW -Clr"}0D7m8MKEN؅' tqUt'c5)oEmq٘;UF܀G/%?{q\dnG9Dfuh8&*(mDZt*6 %Nv<;x1 ~MyX-;#rԵ$ ']q;)o!C:[T$[^u˰)PĖBbC݋㓾(t3) # ( --t˶R!բ]{C l7;[6dAHl kytz5آcHy5Nf|Ja]O3jp4Xq7bcqJ'dk 4;XMڹ)I ( NAԷ;yn4^,>XǒD&*q؎xGFQmNDB$)3]x_ʏ?ԏ>.mJKh؍ˉklɦx;ڿA1}/T&JPɞ@d > (tr\{e@yjNHθ-/ i!֘)^˥glP%.!gW̐8@MX}{\k@ПMA(B[g0SS+yk,,E?D@=`CLKIn:-t"\n!\A#{SJ6NE|k{Piżi 'ю $ItCX#v,'lm 9G/yl/S2jo2QPg)}Op@]N& ;2'k( .QA8cP#KϖVYy|FhشK?`DW1VOWU e.Fšӥhw}8%<~F[L_]>a&PƳ`Wwj`Mgљՠh #> w++H(,hYvaZ> otX:SwQ h9 C6}DgkYjEQ cE6U\Losk4l?S$6 rX!+4K' ;G)(ici~O]/ pr!q2<^ "߭r(&1oB*oSZ_l.R*ȓp88;^OJi*%N9x?|ǒer/ + ꪟ)}ձ/fi ێ@c& zr{8iK?9xu6wBZ)НFj2kWDMڣImmmQ:8MQ^IFmߘ1{ݑ Zφf&Ayd1J\u/LʕR!͡1[zMͰgw Rj]4I|޿ ܅>A]rȆMB-  E;)=۱tM]̓i[3 zD&,z:ߥkXBA6`gxUp#Ds[,9>p#tRR`"W-2iXSmT/ֲiASqVac*)RpJMJױH1"θ u3BuW]Let},b7X)|_.f#wa v9u_wtbĶh"%2QCI'd[(9~3ԁrLxm4 g3R5s |~j8w"9<ޱ a0k.}as@ʑT[;|xdFccԊЍwl䶝SSU yb_T2 |PGk}v/F󭗙^H@7dyˋjWR[W\Ŝp`';gō3}, ^5` ˂?gns!8md<9J'FM2_cMIZ4 /(4v^JcJC#*t(Gy隇ǔ{:0Te>O:iޭ`m`i*O+Qz5p@718BoRҹ8,}8M/7@6nMyf1ńp˳@ͤpSng}L3|Ј07|:Ģ}}5L7'u8҄SQN,FEBBtJΔxݵ=: ,&KW:eQ%QFHkaHݴ-1)i]ʕ~&&dfhksos]~[շp;K;'IO KH{`@Z՝+PQ^5[m2CZ߻5p-0CBjrP=8 ڂ.[BH%Xd$rjJZlЊ, בB 31v, -@lPl= Ãi߿Iww;HB1Ht [+#3Wٓ] <7 MrlEP]_,wVSM?u=:DMȮ$ eP8cc5fUF >cc+opi4+>T^?7iyL%`3d3 gſߋ۱zx ث#z&< ĭUͯuWx'}9(jY=3 L시+o=}8Cg<,haT~wr)EoiSԤCeé xѤ"v E]On<7NE1Baaa'0 8x.~: pzlu> X+(CjvZow藸fqD,նb~E%0ߑ[+Y`xhHYNEb XJ\ L##.n\a]14NH/aαw3.=sk5)I*96NxZ9l*2NlxG$Bfdec~xuu[,\2DƦ<X ޅR.^ Ór i"ZEkw)V4_)G!NC#](^aЯZpI]A|' OٔXCCvG)!V'_PLGmlB)-V%!PhZ,'4wvth"PE|CoMcV;HLډ`cX"(Z .WcS;[)uE<.5)Yc|}Nk#v-E3E*PVdsI\; 3}6r.w߀q3&H5XMPR D~V9q6vI5Pk2PIf!8QzIUU2"%ߧûS+,7]N [8ۡ Bez`S~#߫8(NFSERv9![{6 j\2p]]12`)AM,TONay@ wJBM2-^t8YG#a{rË݂ān’ \M#u=ALE*&.7&C< %R< tdXkU`سߵ i,-{XbҦ+zVG^r\P儑/Y(x^O3ҐEۄ8Q3_pRJL24o,=f3(VJx  W0yY~tʑ@N[Tc&8,{+Ey_׺.<(:tGH/z{d@DI"uݑq&Wy -^U{7HHT{DT#]qT ^pd'=:3<íY6 V <4g5=&/ [dcY}d 7'Nl K);_ &;.uo2覱E<|VߗlQlR#䦥͇!Mf><^F!vH5jK.n4GM0ԭ`;gPqȜͭwj\uDw0dqZ(fdZO°>̞-k%܀TxmEV|*'\v)YX*T!T 'P.3DZAXE3}Aϧj00-v,5Nn'?o@2-HܙlneRL#M) 1|OwƖz 楀&eWI-|4h p$ſ]wBxuK8˰/5KJ`!ŴX:U琏x峸V)Kf0&*E7"%NDPy1NHdPRJ4z6.^/]?]ma~)3#;@])^Dx鐰3M` }31Rӻ-hc>YZkNC!hd;/JOc;'՟[_w/A,X&kL:w˔2e[ "cREM-|Y"A3no:~0U6%ez::AxOQf_6SlxZ rF1D(1SC\GȅгbJ0㼞swCǤ~*efWGy^(`ʧ0o,i,4kH(1d.و8لE/Ub'rbHZ$q:SZrw줻DaŞ}qq^V ^Χ-ޟ ~x)ag!H[_0E"R_cҳWXXS߄ҜD$Pd z !4dZ4v[Mf/M5?uM'SuH`NsK't5M<4>SilsdfW¨pd*Okob%jOK=[d[Vb'60DI޿pDŽZ&Έ.lUd ЅФ'L֟'1@z&y `᱉޽=`gSu:x[r%O_溜\Ya Z-=έC&hqʟmK17 )G_|g#"s.Ќg.X9}]ʴWơbU{ӟmT-pyD>ן Z7% QH/NZsU?(.yG|QVlosQzfR fwkαٳߩcj[fL)W ;En5uF-=u%ͱ @xA<.hu^]o#'ѕNUU2KLqj?:a}dE9f4rt:ݢy E#Y5|D7Rۓc${y@u<;< i];I ѿ+GXZbFY/#a4p#?Kka 5[IcA8k7*56^ _kER/nVi).F`Csq kZ-UK{t@ѹB04Ddys5W[Gב ȟf꾫0 & <edppkaQ%cCdU[_]pzD 01وߌ7\ArO pTѻws:5d[43$0%!Y7rB]{vyE΃)OHl$ 1Mw-Nвou$F[*? IV \KϷ7łb WvuyBG3ɾ>ŭof #iAI1K)Gv#E> 3H|2i?O9ږ8|Uk4"( S\2Z^x@^ 19cf(92K~ǒ#+!/*C`(g?`9W -,e ,!%lE!TNKQgA5'aҠ鱟v`>]s9{︫Ӵk]:$m2!$d涼UjaDhMH1jȄ{7"q'Fmn!"0j6c]sQJ>’Ie+*`{տDVM5:@)ٴ*o4{NMVNjW?,!D$4PM+">I~{)k䝱DXYQW] 9$ 4)#e=*+xF-]X=PT08a#7. %RѤ*%f%SʱmH]RZv/.n0yɛ#IpՎzp!zXHEjBC*=E^͌GXKx ܾniǧTi*#,g!͎=-rZDBSM ny؋So1DO7h}MԔ:h.췅?b8D %Q*ʡ;egs GKfO rWQbp{$UlE-2gOR)k2Q[a B\7JQ4b lٺӿ>1BK9f&JNVpKR0M 6϶ (?'U W/?(:}JM-Viod%&. zܜںCE8aiwCLMݰ *,}W*y O[QlܣΗ5 R晡_`aGl6,P^ǦQ*1_{5A ڗʝuY0 }ڠNxƥm@:egogG*;DME>߭ܣVP5kS/L`)*eҠYE( ̳¦@wHQHG7wh%9)3HAE޿lWُia&5)T"{VKjܪL<`v\_4T w,9랶{H"Tb.ʼnc\GZ,SK%Fbz(CK'yKCSwr#v@$!}kyڟ4 !uϯq.w؝b OǎZ&)Ͷd# j?%oc@LV[ c2Fۅ_,fS.9LQȟx̜Mݮ|F5S(ٽ`>C0>Ov/Cr`J"B&;AXQc>U[N"RA AQC۬B;\Ό8vAǓ.M,  'V98ԯ ͠0z5@;/:v%Ρz )vM_$0bR!EhǘFŕh㒡p~a]1P7 ;>(BrI*>9a3̠,MnVWKP82ڎskN*&]~\P_>zՂ6s :X]7@?-[uh^v-Fv̔ 8P|8oIm^yiٿhM.7jFb,iKY/! Cc ^O&$sDZ)N&Zj୷-ɁJ w @|„"_!m!m4~SgIr*>ƷʒR˶̡P>)Q Dqg M"u_n5z)Ny􀘹7e#=OUkUZ잇,@4i܋\zٯN|EI5T'D w 1|G4yqmw͜R8hO1'5 Ad1 bn=#_^k`-` 0p iA:c,v3ie'msۓ.vea[B^ZA%Bl1f%N=nkV@Edv񪬶(tB|*j:`el~:L2r'׏ŵDN=]]===7c&aҭl UFv+N"5bTh#Fֺ^+y;әJ~W pg#~'v9~nJ.g:C<`r)mֵ}zPrnJI'%"//{NF(P.7.TzĨK0K!&Le `i{+Ev[%ߙ?WV]'h4T,SR/vxrh[)|V՚qFn= ?xqȳK8@wp5' /r:w P|.Xzfr 1HS^n ॶ< D $WlLaZӮOXz0+\jUЀ# vFݳP$hwH쯄FWy PoFIףI/QssG~M)jHYn{=㹛cQQ29$BSiryz{|Wg'yx6hv_;' Ob }".U| $|qAuL2wg~:f H! TҖPy&lDnKfqcl7h2Z*5"u;nxh=4>d4fT/mIx]Ǖ(B4os. ST$Ѻ=Z5*X&zlVi1T#䢓ohkیAį=XjL<\g;k8)eOZ02.42We}j'm by_:r4)J ůoJGk} ET+ }pt:%7W)|t(w{ms [Sl ,Mb&㚵T'ūAݥ~;Ѕ4 vU9CcEdmJ[ҁ~ uA0[R=kaK]Sx:9*qXrzja-ZDJe ,[M٥F%i3/]UXm|Fɺa{6pմם: {蔧 D:&ۏb~ *MNc ] enj &;I@{.Ʊ'bn»=5#Ehx,,@;/6ʲ:BTqG׵hW_H'ܩUʇU(?xxeͱ=T C{y;30gN"~ex+?oe=2b7~!::Ys̈& +@rmY/cJ\Ɩ M 6|?[~CirľB٪Y! PBb7Z^}[n氍HZ,,DL= ۟ZC0ut[I( 'AlemQrIΕĕOgUUuMI}ZSXMBNQ{c;y3oXE}SVI/ xy @LՁ<+qdߪQd4F\o[SmsJn⧠ Psk6-din9o.Jd )a<5h&2K p0s0GР̬d[AP 2-ċhN8C%^Cg7k;  t[IdXL\w!FrJO`YocwQ^HةUÑYP¢ g'jVhPGxNC{vmÂҋ,r0%z ΰ9epY +B2)w虤Sv[Yh|%X}~4YMŪ3Ba;͟w<*9 وM#fQwCmƢ 5ё {;Ofx`` _kő^‚< O/)|ai]FI;aRHz ٣'4fTf `ڱ{ m"{AOౄ<~塁4ii+2jDӞ~fxxg" 1Y}&ӸdLS*@kwXb)T+?5 v'+#[E|ujF7ZM80c:E֥bs\VPgٻM޿`,ěmrHTts}\8C2$>20˭F,%>uE@;hJ#-zs8\2g`^;x^Go ,Ifcę*|Ȋ<  G-ΧSs_-Rwj;ϛv a!ڰh}ׂ+`mO!c>X~UaM;kWm`W nT}&}4뗐f ɉ>xHMn(h\ʻ { 'z}&.vֿk'D60o?L|n2:B Oiofoh^۫;6x4)+JRE ATΩ-q>tA/x,Gf˱\fM=vM9YVF:ވo7;ԑ̞St QT'X\tHdӢ&P,w6EQ_V,b"mʌJ"ܩM&f %9J!!;s>v@ü8Q2rkْ>i $hw/>W#a>14JVeFw3$NXJCÓ0ߝ߄*F79B=l/67\i9#\G}Ua_oi^wU "@,s'sLcd= )/ |;V>2ÃT>V$M#Ա H;Evz'f.{2Z:>*NYl|"ٖXXkLF Rj 09>)6u*ܡ^^njDrɐl/ tUrB%4X]F <\UgrE7f^? TBY2&c>((3SyCMgn oJqAM[~[F_ٜENCfࣦmB(2KAR~>N.8jPc paDb`ωj>z_gʳņU[tYj``Yx޿ueҁ/C[x?JzXҔd{?*MJ!+Q Ƈ;'4{H1XȿKo*AE1EV Q)p]Yķ^(hiS2E)]MCQ2>N]ڬEd`-Lc'Y>mK(0贛ѹ<6wOyaH{2µ2%{ Nʶl9FW |8ϊwBt78J0urDvK@DO]O/(A2DObhɡU"{a=:+Sdm}ӏUz9ѐ.*D[J7_ ᫆_#@6ǫ/!6Ą۹Dp9':9:uMu-c+|ڜe 1X1̗R,GK7 }@t $DK?]{]NaPމzڛB_V`]O541"?`RĴxvq+^?y s]]G;u0'[|vdO6,_cꮛ"br `yg|0ƝsDzs.3$R'4\ HzRl(/onVP2PQ*>)), -5Zަ44_ѯ>yk:괴EpfJҐ` [-ACIOD-u9\"%i'N߀GQÕq͇4_оI.k*kdS$E#^U 5_DάDVj B\!;_qPƂkN.l!`VYrj곦z,xDU!XFr hoT,C_s]f&̷$/E8PV,2@ oMnsYѴG4^keqFj ; Blu224/BA4'DbxC~EjGSpcK::|9DtܢJC5c0(~h*.dõ-+eՂ}cu'.D9RqsKc"R"j3*JRp~dHI)yg:H*W34812kW yՈzh"6I֌ZO3So+UX9^tc{L]# wV|"_ά?:Omu'ꪖj4"yyFM^!<l/v.dlšNd*b>v "tܻ0\l=2v,Y|M S,)ql= _#%: 'o& K1hTv*1*I#@Ґ,jegSS6/ٽ9x&FN/)Xoz${>|Ӥ|}]rxH_*<ߏ()p3blaˊ1/2-]µ\I,5O4 Ok/@ \Tnqt M<%m]]*⣈FPɈaȴ pQ4('j K3^T \X8!Y:_+{ԡ+%&>I⧲jQCZSrT4C3?Nke8-7cQLVKPBPP%NnR ( @#0{7DBћ]1[n!m3zpf[g]U ôBGu2.wrq4%JK#V8n4̠" ؈ڏ4F\>W&-d FԭX샤F .CE-V?! MUAyQx;~1=E5V%?QuAU:lhM:>%ecgp]$SɆs4Ԣ,&`閵,u7v[{9|@eD3fC32spQ{cVciUyyt[=S<J }n`JwòKhBkFr%[>#} V+ZT2hftsH(9|\*)H"q6y-o4頮+0D{'#x_'t?߁8տ@tޏMBzŗL:0N(%>N.͔9 զmSB`@vo8.[9CWY9924c;Zwi4U#:Hl=:D'foIztU'RŸPivw=;ɇyR0UX?m@9%4@_7'$)c9.]/ˢJ̧Ӏ9vs_ܥ^i[U^w1 fL`ɨCa,ܭ_Q4?NjNq'h@bńq%GoP,&UPqu,Ρj?Vh}?OB",AL5 GȽ,퉝WfznAҴ6IIyW7MZE ]qvp?M'BڃS=^8)Rysz 1$$Fs׮T4<F]vO {7rM9s&5>M/ S1 bwv'AEߞj4XJEH:IOl\Pl%yd 4=E.T~eR+rs3uhe \NG܇C @5@c !r@K@+@a`$YRҀA/۹^:F l(NoYuGR7~bѱ(u9%nY!w O<5v톦43H[yjڃjZ+OobVq;T<9Kiw/AreN ;+h.<#Ho*d{1aa#=MA1e&zIvNXX #{q\~yjփ{zjLڮ^,߇p'Ao_#? ∔Oֆ= skd)d+MƉ8 wvl89D mH,;3:+ً$zgYAX'}ޮFCNкɓ E/ēv$yAs)0S3pAiV&@DB-=HH/P>Up ꚟgZm5Y/\i-ҵ;9;{Mcp4|;iB ԇM<fՁ!;QW'`͔kH` 4M4YTn=_AtP#wߚ qt+Z @E{M)P1—[ N˼ZY;$/P7[PiXQy|Sxo[NRm"l0I|O}4dl8}s8RObL̦Tu)l 6qX;ӯ%6Fd` wd6i[$DwJ@~IЃ1߂>NSZևJB#ۗ8Ku(|3\,t+ʅvP}JuTci[mNǡB-(-qBw{yFsKvmG"]n$!ޫ ADlGg_rP61D9H??y]l{ٶ̓@zUu&ͱmМ.čn T$iU\ ȥ-._wF>!&TҊ+$5+P2O!6u6vǜ&tEM˩f|yA9j4&ߢ丷eV0KW4Pg}+k0۹@ {l[hڏtuhrk;3Y|B ^E-#+661Jm 2e̯)voU C@VT Tb:4/TMb3xI߇Q?$MI7Vzg캚+>T剫$b7` J厅I5 +85oUN/P4[3ciO :df#?POĆ)QdɧrՏ" A "?:J6M8@7Q* )P`U(n/va_m46Xqn-{J| ʀsKKJxz+#=fIyxW@T'F^.LGFtl=~ Xs{75e|B*<6x;&P>A}G<#͂K'Uވ,͕U\b-RDjѭ7[?Z,WZyL'T^eo~WD_M%sndN%--)(`k0#MD7 Xy7c|f:Ab+u`UgtI*fbl!?xk> \z?Fg~ S " 3I ~-aBy{P; ~ Vn|b[A{7}S}JOꯉ$F  tM[}Zq-S ɱP014~}~'0;XOh~^)]J*H.R>e?jt A2s.ȹl.ͷ_i6~Efe2ϲ[2B=6ݓѶf6q\fڂF}T=+Z-*9\I3n26Mwi(eloz(X1 rv͖sXUHx%6mJ):oy*9j2,2f X-j#5H^l8[Xvsk;y_UDe܈1gh 7)矍-5pI˱rWC+"EϪW5;_y*&cGVyQˁ23_%9P;jNSz > ?9ʣ"YlT/Epd<1!`CJm}b@ - r7/UAxH1EcFPdeso>gs%ĄKJˁXh bg||vll]QU \3./ZH<:! Bt\l,HRK. SĂ*ca[Iܤz,I.eN")1m/lR VAQv%)6tB]-CU"diUUipN$)OYGy.Vp~i/+G/KI{FaXuȤ(ڐYЄZ-i'5I>JdGID>s`XT8IK|Lf5x_%Jlk!L$8ؘ>U^Y%[AAyܛsIg9͢F×C$e48%0'!bm?02P =+16} 2e^w%7,s1zm鱾`/t.-GO}2Fg_J)- sqc:jgB_2|5gd6~Q"Yۍ/},9^c R'j@>Ix5qXљ85dxNKr_Z `0=[SYmYaQȎ1bl0Zo\AR$ysMHڧHhq;8gP>2 \SލsN yNE= 4h{"%mIꏻZx 5R_9b2oo°Hk5FA4ٜS})DC&npI| *S5gP(cԭ ŎZggtg v:cwoJO03J'(F[+9BڐoOF3H6?g=fxu4P`esyQr؏E7ы3r`EzɆW9xUDRV/?b{|ީvϟq䯢+Y,_FZӞX+du1REcEli ZTjFw܀[㳏;~$az];| [bKr2Y @^/{ hjBdp"b!z̶LMʗHHv˜ՋƳ[жb # + :/U[ڐIn:2!+D641p#u}n,}Bi wV=0T ɼϮIt~hW@=9;H DljrI9# #5<Ǝ-=g؂O|s/}kYϗTcWar 8b2xT,esx1o V(xO)a\)4p \ YByPC(096v&sPiXww2V+اGH!^MwceC} .ᱴ?*`E(ʵy >|͜fd{J)9X_ v Cs"i.ws$?[@y"cǖW?ݼ{/f` pRuTRgjDZ/z/2 l pǃ{ G7qO8N3(a F{ȩgD/ vLu64f5C689B49wg(;kؓnvoMZ#Mo,}fR%J,ӯ@qH'B4HL=D=!3¥Տs¡:yp(ļ5`})oxV@M>]KtB2ݏ7'82!F^k c+2\ cV1'2vm+9_:"7CGQfx}m<ݜz"'tfX}DQ Ө"]_2$5C!.1@8shzu6ac FœrskN[!2~[^oD5jYSl+J=Ij _T!_ބ킿MZE136Ѧ^3Ru0YM >,+0F 3g={Ud l@A 5GU g\{,[}U]~ +?peBⴛx|:Ւ_CN,tue(ޖn' Lb$cdLz} BBb+5/g&# EgA,]oIQp8@oAaEB ZgWbyqJ]mQϥ|0GI];)WW:Fͅ~Zf dpn9 vOـ_s6ے( `$S8q_c qJ>@x4Xte)a67i_"PʿNBkJS;*=B|?V/"s"A"B,Tݧ#۞ GK "Cdr]%BziQW0q_r  V_EHag&0A#Q+?rh!Y#qԛ!Ntbn&%OҔ&*lBljmUEA#/R,jNl~iy8B#cVmr<)7?KXu2i qCmbLe8z1+cW PeA"s$2{3mIxسv{P|15G!?=! yƹ?& ~7lL=w/KP+liIzDH*1rUޮup);t6]|ma ѩx5 'A6N~cQ8%b(y[H.bhU1`~! ;43 p<`ZuqQZ{g}J]+ HDD9RfBQ,YO( i~;;C:W8{g!:^QPmM~Od m.~.h>6l a:n% 2aL 4]v=c"JǓ%In:ƌ$z ɤDQh|T>7\V g*sa;o~_H H (=ۀލ[%Ԝ f[E(BJkYЉF9 *\Bxo-gcCSOZ{J[36Z osVmPe7ʻ7Jגr}'ps몙"N&8ͅI - !ȩy)Њnp  Xd!w}PQ{t&C%mK=f꟬_7SS*j4i̼/P;A *Nj~ۄ nJuy S=ت4=VL~LӘZ6G\ߎ~$T鯶O-Îhp{2Ѫ[!,5L)[M(%|XͲH_s9E_,s\D2l{oSHv'TJX+qq:PC̯,5FfؽQ#=bI+=G[-kiVcNpk]*&$qXIa-v[;Ʋ[H'z5e7z2HNHR7Ua eIخTD!eWPe'q7׊ cZ-q9 ɱUEB PZ5EbIhE]gWšV\VBʉ3ٳM}ʹN U8A(<* V@%Fk];کR]h^qGQC*똣DD!!@+&=R7D%|׆"r[cti sfi lbEowf^ ȗ~qz4k1Har#}?ۄ¡@xgAEm ݁c!"k\r{,ULn{A_%hol#>`Y\1=nC**Vʀ0/尾Nkۿc _yTXJz&~Ma(=+߿q.'l]p&;@]&J NwM>RN$rI|  VU=;z-̏PozHD][`,Yl݆8i+X+˃0~+絜/䆋VN)$A] F 8Tcp.D#zP8Q% (6%Ʈf~ł(! 4:x1B,c4VSZ_7&MIb 4q\9>5dN]'f?voXLlMH amǡ;|f}Z:P|[U dwYsA)$jDXCyv1r0:EҠ&ҾqLI(K̽V#,dYf_ϠvCks'vz=XVIy/۾ kU)L ?[ߵӁ :Gy"a y(7ago6le pABD| .f,,{-? \];jԇH|>)X4 m f~oU9nG1rzI M Kq‹5­ {'-&*N?-+JqKD-Yr!N3\,¸oK0(Эi`XWzO6UNBCZxK!펅%C3gK}sbfc<<KD23/ɦ> /41(e^I}v+9[Dz@~R tprz36E#CE<8 4'o1tiP/C 5-6MwphmCގҎT5OrrI5bc!dbQSC?f6usާS4˄',l[\w`NdN΁UC< u4*)av T G$ 7!q,hnJ d8<.ݠ0 ؍~ӻfS7N'Aι|1-&T'Nvu e3[˙+pb8"u̓;}HBO}2&{ sH tn>~aZR2.OR 20[q?6iH@ Gyvrܜإ#P; R%w෤1 q 6)_J?)K?|S\ P?*QKC@+lPUw l`3!a{xӦ2+ J-i\``VPrW IYAycF5t(@S-Ð =dzݞJ+)~:ء;X܀qy?Nu9 F?ذvNLq0m+C>w(E"=@ǦvuЕw|X!"@CQXys}=Zyh忉饙T[zGa*Bg6= 4bmB6-bukh?RE(:ZL2@Pj1Q|͔0Q fDNw߽ezYDtTAYmM_({}6"ێͪnM!/3f35ѭ6WF nKo'AVM?L| B Ip(ZC}`>j.m iR9D!k$"(؋FD|!czܐ 5돡QYxF8u3$xRTuk-=bHjL ȱӥBu~¾HQI}MZ?K^!Ԩv<ʷr +1 8GyRZ-ITlh0!3JK3t&g4:\)}"mzWV8 "–?$ ,psul!tz(|@.UC,lAO!Vtn6i`7Z2fbbrۤ ) *w=|:oK:.WFTV bۯg'R;YbNuF-mHTᄶtMc<% [8S%Xk(e޼hhf Ryqfj$n;1QV[*z<9֪E6EcӲZ3bUkWAԬ6N !d  YQ*36OyV8) bTn^Z O^GA9q$8Գ MVj).tb9 C) }͡`b"E`A@4eEPَ [1}?Oibb˵n$@Tm љXҋ/xol"7oL4qH*20|]{2L?ګJ`#G+/v4C*Z(](qeqb?P q$ c fMrl`:)$w`,( {Vknk(|Z!Bd _q,9sӄ(OaQ]XsRćr8Ei>\:rœ1o2jڗ(MoSV7ma~!irM`ld?l|NƧd}^5WL%L"K8 ~2yך' ) k&^_a~Uv^.ko 6ޱFZDS>9g;g D">4^cígE b'b`4'Iꢖ Rcdj|R6]nr&/$@y:Dj, (s`[}ŊB{mcU6}ؠ+XXN;d 7O+D$?3#zca*!-wUMAG~^(SÌ`WŌCFj~XsbN[fSN-wĒ5kSe|`so2h]əq/&,4 B{OT̨LlH7ȵhibS@(Q07K H.=A{ؚh9ˢO*D=_E(׈i9\u9a17 K2_7TM1*n]_HUwx /E>aA~ oS“> xzPRucx2 j;hTXΗɚor]خD8>rFvfn$eX݃ :냥7ar(JS}V oA1kR u ]8\~DzK b.BV?DDF\Bk/j]\fʠHo둶ٛ)S|Y]F\t.ߋcĈw\fC~l|5]#XėS0}t~=%κ1)EZ)KeHgY=P5nyFP-ݿtO]iZ{l*yU>j@ik@Htst5A_T}A)0ini^dTVѥ,\i*ŠJGn}?vfb)-bXE ZBWwnx.A~5`1scf8`+0-/ ̇[:a}B;V{[ܙ9\9LQaeL\ꃍRP ͋eaaϡ me<5#KR(b(׃sC(:,D>#MAH -@Sğ$EC̶_+OѵyL0gS?>30ҷxI& 0<KAMTecj|x=FLkl/6`?FT wϊ[*-KRFDT E i)C5N]=+bK*P^V`d~XksDN9 3^˦x e*[.,YMQ&> M_(S7*:#=ڔbQg`qd9 ,R^U>m0ҕVFJ ׆:.ý`Ļ%*V4گ?B3(j9` %c|NvlrYu4g4&osK7A7 : c3M==U|\Te ݮ¼%$ Հr"9ʯAe]LRSuqL "b\nS !X7994Muu-\ ˅꿼!Pغ@e .\'__9e>J.t[^[ ЌzB.1'oQ:0)!mN)YV4‡QBd-оMeحѐq/9Ї0/,"MT Dz3X}P>9(|3$rT!FVKht,^!9Q@L\ELeaCF4 :PǬڪ|uH]#/P6 };A?9ê0sQY5$b9ޥ^yI%QEguP=B}}#~8B+|Eڦ̅X$I&>r|l6}/*]NTH.qXՏRuG7z.ҫ(X !eg[#[t&6;B ptԗ $1 .cbll*`oA%JG71;h嵦k ,(Д8]Xe7HU:`uÎVx:V/ "MPdz:#1.s{.ƛh[FmD{?2n"a=In#/ E1RC JۙC@'s H-G-u7>{6Y<%8mmX7F fɇ 6J0XcIѣ6g=:^g3 WCBo #)k!P/1ױ0KܢbnUR6?S<>ր1~c{MʠYh.<$O.5c O _pKI9K3Ȝtx)ъxV$:3Z]VB0g^sq~0p^/,IO/Gb뻢FrbA5^@=L Ah9ⴘ E\3 ;\Ԥ_G0[jŲ39t3nvsAwT)g!8l;;C|%~$,|I[KFe䱡k}n9 2Xrs8K옎=000iS.j\Q|u iX.t2N-(pOnR?ӱ]/ dE[|:&ISGlڿ( ?,GSbj>@$@UFKlɳ' 0rDb>guXp ݉L"hmM '$=,"ٳŢ3#3 ?x+-byJBhjOT`Z)hYzⷨiv_ ̝PIZ]&2sug0a܄jQۦ 7X5xf$RA )j?kL>a>5<'E]0=2~k!,7@FfI {@(j`=ڱɚa\URF"oӭ3R_>8=>${' `ZAARLN7nSA:[ ih+pB#qhBHkvz|54q#+8?4ę9IjNjHe{W۹h#[X;2Ws w2b7߹AKjL7j3Oq#! 'cyVJ9 ( AYK)xzEF ]b0:MGqpBЩznc+:ZJ8h.{\s䋣'zc ֚>.H6&s|LVzhulP/0TG)2ɽژ&D/U_31>YWܯ(^ fܽ׎-D\ q9OHA!~W.y[+#܈cif#1,^X&7{\Dlb?UBUJ~SzUzl@Esx؝&;BD^s}.7m|ϸ,L! | fa}\o:;>\;y6D|0ҝ }B3~)SG׷;Gu1,/o|Sgc Idǘ7,xѝ<Xd`ɼtai`mQ;'풋ByHXEU_Ws~.`{"p[L3qv05:/WMػ޼.Of?mg0 )aI*L>#Q-0S|fG \(% Q(46ڧ +v[f5Ag}s2'x5W{)$x6X^<1)B@J h>-/o"N +:H " >!s ='~w~o~yI$r9XuXaL%g=lW*9k5 vIe TO5]^粩/ػw x:5xwH(XsW\Mxe;8/{$ <2Cvf $8VcȀ:Nݸ=C'Yu1R|Seb2ӹ3/)Ϫ"nyEL:+Q8M&X/t}cJLv8Ӊx×ք }I'<ؑ}MJ[Co,%nBnNK|`CL+;u~7XeҖ 3('ƕ1D<9ylմS=F`<*'Dy?t&>=yޯÍFE6:S:4Gdibh!6Q\0g):)Ug&[^zM°zdM<=0D<;8-8ȋ:T2[(1XfpYŌTXFMs[*MLGRQuxmpU֏~ fnּ]7Ș l_'e:j]vۗgg )P#*| 6 pF.C|xD"N$Jz!I)(Y L8E5~"K NB&2BCez q&N_Heۖדj|^ <*A0Q҂wA=DݙA$;+]3%I산Dv[Cp~:$.,]Sb(T` #!@5F ےNO.ԎcKVN[Z_Re+c\ g({ѫ AuD 6o2c5X8!C(`Ny1}i[֊S$۟$+k_љ!6% '(,(~83;1cFBL$ojz+ I aW}=?ۜ5PQmFx;aX'Mf3J[ZuWzO@pg $qY!x} 4E U=#ܙHW-[ؓD6d?&[Å. s;> 9ɼ5QYϷuGBIH=A'a0o 6bϒQorNoH.ъNbuE5,ti 0P tl>]ycB1>)2O~ >9|`2|8OiQ`c@ rQ1"e @G&ToQ#y ,BxvOWܖޙUI n/?&h?cH7F!b藝j:1cIYt~M# Dci.@`XP!`3~< t˞jW!aڠ,, % A{=!67fP%>+*&K\OY:h,_~ZF?jTRo.2|!W@,"5MD/ه6Nb]͛* U_dy5$׽ Gcc Pe2 ZI@Ur&vO|'IʿhF% Zؐn/i|g cMobqh,;Nsv_j-7ꑏԪr `>b^1`}!XXKfpƪ&ڤڦu*b2=CsC?DBb0IJ}ITgNἕ⠁,C!% Z53 K cLޚ%@/R#)J>'?Ѳu,pi J9sg &ZGho\raHm8 2fÆ:?do)ŒyCw#j2--:HR\>[r81XjKyfHUMY m(pq%t/wz""OcqC>fdz`ʏk3[$y iq;S}Y1Vҝ&$Z 9ML[ltjl8ҴWI۸ &pWPw%&JJ>{># g@=qS}]݊첅I,s` eXFA_`Wctn < (%ծ⎴}ьTW "ԴبGzh*V'k CW&mǤ{*d/\ D5ލV$0yY?$01#ky'+וI!@wh^q3k!q" hԛƠ*-'DMJ  ,`w.pT>@<kh ?fpa4h )JM3YmEfkHi s.sNeZ@h0_H?)aq"w0o©h i|WW:ع91_ptJɞMo>{b|APzpw??Q6tf__^[ZoKՁʝ{M0 1(4m˳kEb&FdΙ?/`-g "ro>#^%zl?; 2=tg@TwzTߨϠxFi?}Y "#G23s[;g[vtKaø\I!?Cq}J32OyJ)DSDhie9КR1nVA8Q)R}1w;M7^1;;NQT?I-mp]E'WL* R xjUz2Dϻ :o+'^x /@m)լĿ"k" Zf%2CRiJH?suㅪB 1En1nj&GJ$chMϨӯ.e"~m"#tzm5͎xN}]N'`Ӥ(#+mǂV)xZk%٭ڣ' VbW0_닓4R:| ˅D){Jqo#JYiU<_Jo}6@ Ƃ_M:86?r yPOh>3$Eǂ!GR O"9f~}^vÐGs`5RPLNW_ ~кQ*ȋ; isi"׸28^#C9$CDK66hmw͟,1,Ɓ|isɇ<: O 9Z;rL|vVmF}.K"GE퀵vQECBgle{"9e>F7HiEtn%p^FjR#P_Kߕd?ҰM]_7xpH גJ[R)! 3M<6"vnnr:^Hh=ޤj|NR&7a#B~)),=tZ7'QX 7d`(z!-H#jٱuxfM5)KJ׾4'7C6AP6(/HE9~U3q~lxcHX<; <01 +J;䠿<6!ARA?{l)(- iy`T*-G& U`*.R>5phE>'3AR{VIbA*m o/H/)5Onk~4L] nc7j09njʑi1ǝ>(vn*Jb8_\Qy?E/Rl!)8q]Ŏ3QȘ3X ww2TCv%5Tƽl1M=@`gHe͇kšT%߶oMB&${3j*ҵ̪W p>1N{2(wd2c㭒ָn)GqއrUX"8lzxG'Wy|>k`˵7*#nj|6-Ҹ'rg9?^)UW$0RP` ].p)jDrEnwZΗn;i$JtZtZNY~Jq~4 1-k8r&@zZ+nDt̎\9$BUd(`t|ӄOR GrٔӉT?f)* W wWdĈ!5'q p;*!d5[L,5ΎW,b%rGFV&(28_jّ! 8Hia0 F↪G rt>P_\(vYcѶksIONUGH)䯑!s{v&< O@r^s=j zKT'?uۓ|֟2/mA!/L7NԨJ_pE>}L'7um)ʳ/6sxWp&a_ztŸ@[B1t7=Qߟet/9cA1<\nh>! |~E )fW2ozYOxvn0AOLBZXM?ran{ms7V̯ǟ}B2,V=rQ%u7z;N> 'GkqIH҂tVbSo OU䗯[0L ǙFnb97R(*$*ӶlqV,ӻ~zp`+,rkl&b:׊|Y>y+4 w v^:B7bie!TO (AϿ-1(T9Փ o-[ӜZ1jStڕ&Y4# '-w"߮ūdܖ }.$k' ށ䅝q^OnE))Jafڒ [`ػ5wW7 c8WGYA*,j[ew*vZUI~~Rj &mE4tO e=fi\+_vW Dy x0oǪ:T 7 tX**EeB&bmb&kUY'j;qnV}תW DM6ȸDS?ep:ȭ1]H :¤U gN%e;b3DXK.mA2=X$Ku=-(^`njyUd}b-a% U*{ΡFeA~TWxqR܇>Gk Q|ũR!v<ʵ,5J!!96"nqdR䲄2ʼp%4af#&u J?._2 3k9 |gy[y0 +BhZH#W+]F y- =3\rN:⪦W`k3TS½rccjj5ǧNf=[ltPkDlmK\z$n5ZH vP4Q?/\',$=2?cYmnʨs`y+~QE+:c8op:E P?m9IS݈V5ETESPe(Eetgr-]wD#WD yq(PFy,*x{ iB< ~3nTOw%8FENE&gh}Jln@!Ț%6/TkG\* Z윲khs8 @#* |V*j$ /R2/?8T&ao>e`NwwC!H X>/,[àJsus=b<6<htc#}\rVy̰xd甪7{u4{tw8bH:} $}ske|~?LI~r\guzDG,8$>qF]9^G^)ʬ%^ylݟI*Lzt|ԝ= 4.bgrlwX^Buv,\6k ѪmS_M,Uz?7V h{NNp&3ϟE9r| AFfߛ`$7|*uvoiɹ~#vv&5?ۜ|j@Yd$a{"5~M-V^F$jX(?^Y86>x-ŰM-lH .! tk 5WAIkj Ԋ`\vWAȟORBrڑQY6@vv~A: ;`sΗXt#>wNcnI?EdR#ESP^>gMEUS=av)Jmӑ`WZpOy:Q,Sx%$5YsѡH/CaqzȾʨx uH9:6(Me@j;z3%rN&V~lI įISݼ\2ѦGGr 7{mc,(o6 4j~{ښ4,fnf=dmgҾ,pw0#sF=ʼRLXVZ~[rO\`}q'N-y L2:=%~W5 7A2Tk>f#:)9iާ RkgA26[&\,s7z%! ll;NybZy&)@ʆZYiMc;CrGI/;w3ٚ‚|S֚{X XLI4u3Ư1ᵫ8J&zOYCl*#7Je:saA.5sG ƕLCk:|B|YW0!p;xK/O 7¸0]߻XJ5跉$%?OUV :jSS,5$yA3JۇcC jmNܟ7Vq N?r0)þF=26Acct>H5AfVZ,a,< xIh͸ Tv ϒ=O',6BwoIN$\{)rmw!y(YT  ,"&aMTD/Ŵ8: xD*0 ۠p}-P|Zl? c[mSXs>/+ xϹF)piAp/^Jc3/9W⹖VKF-Fr& K:X-Xh6A`"/ =*G4|.]캶٣ :k2GE+ aur3/u98Lԧ}fEM?ɉ3Hg2 +rҲ6B{RC߳` a򒽩"RFjQ >ls>:OMֱ]`r{*Зon$ M&Y*jB g>W!H@07{w pZ~DD&7}CM/x'8ʫ*>}e=ŞS`GJO1p$h}TT/cz^I1<7i 8EEyυhe7Ej/ٖyc1pɦm/]jg$s~-= 5KnY|43 ͊op(yx ~"^@3M U6@-TAyEN +o[3hG/3,V(٥c 2 ,BVmCoΚ"Z=OgFm^&sʇU*6RR.b'C霡+bLΑ ȒJe0chN]Y{xܸ " ow2 7]/Q6^sS>>[-24,"ѓ25jȧ*zR*+7aԗޖ@$\@);e̹0L$FpIg4`ڌmG+G KNjm [o6 gܠ＿"ԯNZ,%v7pg$1UhUplpƤ<ޅ΁8\{'UJY4wb8-QqL0ZSf+_@JK]=S3:;c48Ogkh.) .C -Z-Z02D,Urϊaػܚ)1aVLkPoD̷Yִ w.K7Pɛ+ {lY,-sVJ,F"`D-$Bs# 9!orŃ;Tpzs~2"nԒp OjHz@J Q@Gp1b0[l0pCӸB9J64PSpkqֿzH \׉zߪAB4IOT"nmI2$KXN;jq / u|-siIQ\[_D}qR\Stg2| )uxp\E @PaE-.|%T.\?¼& rO. 7E6~9tU(hׯlmq%Ɔ~-_teMާ"5K[H]1mzn(tLV^6x'>h8U * ^E;G2v &0sձOus.NBrO;P4_Us/'i"p@vĄ H˭]?=My*(><+d+8WV 0#/J)|,CXӲso5x,e6dzq8$ht~-_`_3z(@S&9ɵWM6 M69Q2] gn}G#_U@tl5 gxpZf˶[<1ĻI5m4(S9Y@%EE!%XB#@%A$ ֒-zŶVCZ \xz b:6&tX+D9V橱X3@ P\i1-h 1N;֕gpx"OkFv iNn>DWbKLF~!6H/];:,湩P묗#SR`c6%ؠ0 :: e1"2-x]T 4AzGȢ4/HKJDM(kXϩ#Da QDZ1mYQDO 5BQg[eu/>zkђ磮7)Tς=P*VN E߉W>N07dkW=zFCZaNC_/igA7ZqtcB$jzPY4 ,"#6z/T[teODP]ʶ꺒h3DAͷFuƤNxH(U~k?іNUu|o&n_rlo* Ї%k⫔IƱO\{ OȺJ1BzBTqDa;(?nG ~2l0?xg؟E~jnl ݫAMO֚_n/s siAdJ%"BD di^U|"owp; 'po%3r5&T||c(jIƻuVםgSG}{.؊nߑeL('@7d5k?&w dm?$J p2$F?@55+c!*(MȕwM&\w+l{/QS^*ZoZ?3¸.(C@Յ9sAOJ7P`Jk#R?/gg#6.{&;7 Bw7!=oN3tW5yػV)d&^wՈ1]Y  IM'ǐ3`i^Ya+`MTuR[O89$˾HD#gDP=ǶkAD"|p ه2卻PAAdΎb]TE,x25`eZ7ՈWlhVB5+G 7;S>lsczu @in, _1&OCl7#,UX1C\% kow˚@½@*M0¬!M6iS1݁]ZYVe*<Uǵ8ٍܸk&ha],${#RcyI8ROn8EB:^;cq\Ѱ gU8Ro+Ao|HnR3mE61! ?JK+^bS; E]b vlh2cߘCPY㾍:>%L^K8~/^|[r]Ub›;^n-)#9sz9ڒ,r_(^>𪳹7-KZItȂ聚yP;<4)XM[# {$)C,&TWquWhzMhx戮TՏWHz!]flA u?/rҤˍ 2M%ZN:r\D4,W\Gܲ5i$86cJ@Q2A߁NQF#қ!kX{Y;g ݉,'bJRZਗ਼Q9 M]ۋ-)Z$ׇ{2߮WF7e\̾oZwTa~.]p q?%9E#EO&>׊KO`{\ hȑiole0wi~ONZFvcNHM{ ՍQMs}"ʭȃ'(l :2!dG?7UGч&Oy}]/vִ7/ڏ\ľclc۾MxN2PVOE3apy?sʳNC6n7` DSYrn9x߭pj'xUQBNI{zfbuTXҋ h_sw ?hhN~-: PbD]ΝuӖ_r Lҳ;Y77ڇAE ,o ]΅!ˬ` Z{a mem9NȤOq@,6BCߙ1u{Fz6CHxf˙N`eLjbr7TNnqpGNNd8E7zGoTo3ƿ#{|.nMcb.huyc{N;XPδ@δ{=j,(k/6"dǥ2#)Dһu0ڇ}斊$% {!:% .ZQ9e|~^-;f3[gh8|2l &wޜXĸr@R~>Ξgnɉ,,\ AW $uzb{0Qnaw%^ѭAI \4+s˞Y! ÓJiyo(^ob*=hhuQAOMfV  V I`&A&? "l24jazm MMJLlrR|BQ}5 b_?q 0}>ʧRџ4upxq"LNO4}F+%7IOnCJ?GJq{?U=R9Nh N@zA'0Xí7?= ݾe,b)mvF:TV@g#9OL۬F%%ń4#>/K@. z#LL3AkYɦAv-=*<>I3:d^}~ &֌l3^6:ФɁ|rt}= |y xm~)0YxKR|G~rzqNwy@NJ,Dq b~As{0 ȉ! hG~նq]Сc*c1^5&5WĖgp%JK/J NM)2HIShP^o$tsHu}_=PKtK5d.Ys!%ldZe~%j18Z XT6XoYXJ'A/#Y.9L3n7 qXzgq_jx]" M-b:sjBJ xW9%5ZX Z8%p nZ)QbwaMxOh\)0x|_)]cJ# k.xHPM%G^" Q*N}MX7] ;0Za(C!x%e ?) H{F'8q{YK"΋xp[tkn cn ZQbj՛Zq>^|Ob3Z6" 2-H?[%Ͳfل2)9'8x㴏Sد$hGS-LhF>E܅8Uw3kFjLκnrǙ/cȣAr'!ޔhiWOHQD=,,$еD.5}H ϷؓNmxaYFl";(;ݡk"(,Ӈ!DI~\kN5+X) M0VwȜ :xr}@xn Ibl5cGy1"\Cl!O|n`MG:#FqE hu Gۧw]ʖʖ'39 wQ`R=){"҃q17΋jtޤcihe4S7[VG*C S<ɥԱk1ՙJA1V-!0ѻ9,h.Ҙݨ֖5c@u=0uFtMSqq?9HF 7:+,{fi/* !oCC%:$l @`ʮg#3cj'4<=SoO'?=m?LH ӹ&wH'Ë.rͫ.|MM՞eLfM^/kл Fy_š`9ي˸5=MhlV ~")N ,_,XEp0F%CZf'բ:zLΖT|F}]cHOfb $2yŹZ $ CQ^OkVZpI⑳h_a3&)xT Ux„"tSʄP1KUKf\K']7µl*F ˶PJsԷA:>ߩ}~=> Ƶ|! .`QꑘdVD~~ځȠB<}?"vՂ󛾛˶y8 "g=%R?HoAiVoamMPy_2VXQq퉘d%czGc YumK[2FbKcfq6 PJ Gqkb꾄̙ȑ *8OxzӎdW҆^#.'EZ$ݏi[Lo'~/; gblM]!s|r3?/8۰/zg(M`G^{zSJl.';Y׉>\{ϝ-N\dXIs|lAB>p8H|ȗmzabxqfd>pͰKm2=F٧ژuőĄ=-%w];tػƒB=,L =b^<9ȅW19,čyA)MtK{Y)L<(A]csC+I/nM(2PF:cbr}@4YQ hcԯBb=McZ!fG&y3ʡZIJ`dbtD{p/?iepNv-;j7 -ajAy#Vi:TZ *6/ }&rO@9ԪR]vSuR4}j^\ <̢v '憩=R ^Wuda8v"kJoɈct;CX`O}L"]`OM]5&y+XGU$G ir8񲦫`M Tym}!( 0 i/(Қ*ǵkytZKYtW(I21Ig;'q R穧 D$WMe {~+N(^a}Jq nIP U%MwܰN77"7LuYX5w JX =W5\U|u({ҔRt L07ZomqA/qp.SB\+W`+~!*sR }n3{jKP9Vkͭfxg=$ZֵunL.A ? C+VVqd^QMkXpp5AN}V뿝l,VziDp^!g\?4RJt71OUL^F܌kGZK9(A_bk50[Syh֝k&PN=#}$/l@P"|?'2Idz<[7Z#.ϳ] MuFwf@J}8I%H Yk\&̩f=K=%K!W [6kTgNm.Τ՛9ie.S]Ve>/_Ƃ;Qj֐59 *@n)BuPLy;]Z` [c1xh( Aۢ&#t@o!-HEMY&mp޹Hm7џGgrS8aF-8KٓEz -ʈr2{Xra!ݰ1~€t>mrj:nʜ{v8E:,}ěrAA826upL PsEY &rXC4 Mo~a-ȟfeX-a-|f1UQ))˭NB><zϬŠ5D;τN o\KՓ*HW S[sJ)+qdT֣&[&:ͣ`Sm8׸AШ1+f) sUDQБyΠ _RcJ)ARƝkܽTfϊ!UԔq#Fm.+IB9avIM ?cG n.3cg3lXh(9o1=9_lJx;hcy{f8XcHӍxފ[az w'Ӷs -l Ni#7ú~ t W`t'7v];6MfkӞfwJd7;94I79EgXF(Y|U_ɼhs3~_ٜ+7xVlǑ'z靅J+D-e+.veڒ5x r 6H&#DѾёbԧ3HGQ2uC¶s$=|dk ;T} bQW/)L +f6GU3Vi--  cn}̦8?]̲2s†$- őx͸F|#6v߇!x^C*ߛqܺZkG0-ab3*F$ ]a=<ݘ2:YC7 Jz Om[fw " v-VtR[|O$7\2}u(9~M: kO=a 6'-m` [h=[t+{8cÕp_S-=dO0En}qwX|֎l%krr^iGbwhw~s .~ 5#X9uGAzG%~ -1y **˿fq @@~m`?Kw^e~q^[b5k)]]d8g)풨'\X ܯV0PeL-Um?ѦC"e(w {!\<ۯ\eNg5J{Mr ls)g؈koթByF"V*iKDl7;YM%p<&Vh?Q`f8[#7`Jۨb`D"&LNޜ@r[4'1B9ϪyS-bSm,'A-P1~V0'۹m5]vpo:jh{/{qxx䥳Q#,\ ]̧B`V%$B BS/Pނ6$Z8֗Uذ_#wQ6Bٙ<} ynhMHh#q&{wpA߶'n43sKU?pcT5ؔ獖|4'QT\\h(k+J;lڪZQÛѥW3/,tVl!y闏PJ)N|<:w\hĉ:F'L>6uvJZCmބ'$6D]~rg|PN`Cj|tG^~irp _MN"|rTfsiëD;~ ,woce֟ԗ3Ro,<93agՠu)^"%;Ƣfv>BihB(Gٌ)wk-e[Ө9\TZIs=0756%:mNCm.c-~~0!7~Z)CZ"oFj@/2\a&P5t>A7P B 'N\n$۰$T-n*٩jn\%qP'0OKQp_xJ+tjRBtZdJ^s 1a1ޤi\Mn&M4w Nb[xK^m$#.'x^~^ޔZz_&WCeHPſ*G"SuO;SB?vP7.\8@ 衫>i {Zi`"l vod67Gg SiꪒjqtY/zm&9V$F"ng϶ni4M$mځIS,hasjWz*(e1=ΜNk&O0v%eikK4Ԯ<ߡ ׈qX!Pɏ ].RGL?"&ܶ2Źjn57ZWU͟' |es ۴ \Û;p`%6`ײ+]0DF"_SZNT߈gqsYs:,Yym'9JC0T ƻ_E$r|A9ra+utdbq .fϔ Hq@~ u;^?v&[ʾ~,bZOt#Tž9y.Fa\L+ѹa'@&aT)ܙhX A zK IÄrwk lL-y-]ELEu̽8cFN7!FX 1@%j`̳=o(SQm.W|IKy/3U[chDw8TĹ moGDd3_uí}r' -.u» $l$lktgF]mNCZ[b;8E}ۄ 4?N\ GevT rX\1:VX#A2oX">W߫8i7R2lp'XТº oAPtdƊ!M1&t0%vHyI\xx9*S<5Q_G$w:r=V Xg]' IgOqxiI"rbzhP\&OfGv[Si C=r$o -+}?\KcI;̜a7 P -pkKY[K<\.sшN$E=w |0PuN P[kӻzR*ߺz9Rr9ڨJb5\Y? {,`N]]D$^ٻn !rlCC0 <ԭGTsqR;0K; o1 ctE /6Q%l2Vr"cevMWIu=60?77K#:pxX/jKd40($1(W>E/ L'9Px9`^mFAºxu 2U&,7QDMljVƌނ{u:q@>P'T+j iPP.~<7L`zYPb'%ҩ'c8, bgwSTDLY^ Y%HH2D tK>EjGp^/iǕrϠ 1Ji}OFזRmN|ƀRq|&ͩثgOm]?bxzuXz','0<&-!T43r_.6r%ny<H*^}e'HP F/ ,hܕ,:M` S7EqqFW{Ahܖ9s2"G/H֭W(`熊R8KFIP1_D M=*Bc-Q8# ][xȇ*JS&" GzLrL6O=t+>P0xS;!C{6- m|f\K:@S#i*C 6ԍ12ڑjOeP]e-{OWݏE~,ԸKT%N^~)έ+8nS6\Ev5k!>$vj"ҏS$)]!r8 \mRv_-sDExK.>STtv%J6_egd&b,^>D8aVi4f11S*cK#T@w@Nn痽xrK񀧸šsx=$_ω~ƣs\#X謤MΌ;2mb2pD;K'-H ;'n<.yw6 FNP\@hCgO2=Hwwğt-\9qXs A%zs3*̩C9sO@,HaO|8X$ƗO.eދNH- M.x1F.Ia/'sq6L5\yNkZU43[T.dqdZ\\yGdAşDXc:q5\@$֗GIais0CsBpxu ? kp*FNc"8@ 틬.͐eᮗsJ>  uF$#lb2u&,O0^]1h(gckt CX|?x Yˍ28;pӞ6wpc|X2pqu ] ?-D-A\.DF2B4pmN Evq;lT|] D<[]AɴfrZPg@'/IF.72y!+: kw"v {9I^Ck2lU[:VJ|x.Ǭ>&7T^b{,; j7WakB ֎: Te <,V Օԙ`bEI58fZHX'A FjwS@4N h Zɂ.c|Ue̶'B֬ni2A9 Y}mJX!9[ e_ S$d%(a Gγo0{Y jF}6Yj{#KljLl#2܄5iZxT$GH#^#p&Fz8)yG@,{9p㐒䦬DDeYF|rG?"e< L"p`sCiN sb6"]ƊD>;7r4wVN*q}q$ KLB6:^EY&N/k_i溳¶;o@F&X`Ȏ~te4'$M\_H䦺[ k\'ZWgң'Țc9XV*4c88cu9)9y!Ք"4.KyQ)|a(_.Ҧ"eϧA\J ))_gHJ=^35TU?Fx'nxUϙ3&vb(ah=mX,BGVfX '޵jۺ"0qӤ8L3"HnZsrFlD -}5Lmu$Qf>?tlRܯ$;c<]I]92 ?u~BuvF[JUQPL*BaN[2W-Asu3Očwf~GM堹f>awJrC飋@|VL>HJIOvzZnN=HAsHYBoL+6.bgUe.#!|5\D[N)oP"fF~ Ը2SKKI;Tixw[tn`d6imGa&E/m9"E㴿# #`Ͷ94dSׯS4547{Y'W7h5; .i*K\qDfĕ(YȢS +9U4Kjz[2O Vk"b.dF@ ҭfeo{ÉR++A]6SUS ξThq*^Ȕr=oBKc|{ _TWʼnex8V>T]ryE_zMc=Em r\9|>9H:6 ¾ h"K7eJ^dqF tR "3J.rx+nriCظt v71u!wA5-Km Fvާ+:cPEhfr6ܞkFuCy~=Ζ)@ [&r)aqhs;?3mWz!g @tx+60Ml) 6EBa ޝKNN5`%Tm UwS8ĒB r^ h[rfjh0zoFyI&ڛћ\r'(b}+OM G྇B#{:2QD]J#}2h*#ЩV~K)Ks\+ ⑘u9s{(c.4;=rVěq&x׶&2p}@TX䅃Obw1Lᾡř7DZt&ڌ,XzCސDG+zqi3IcsvT;!PJzQ&vk}40I$2@Fo̒u^-LKWoPѪܻ8mvf,F*g_O_<@b6.9Xe2n/}" tE;SI10WhbW,N7M)AV[ )K?'&kh p"۸g"]RQCFu|$4ƫ׀VDB_ãh>_S^e{F H D+i/q֡4"1 53}5n)Bl 7/;K>IN,UKr5d7( blyrRCIcцnTxX㬷P5_XA(Iyuny&.~eې`G^cNdvvwnNĐ9HLK.&l\(jq6:_nwkӍfSBZiZ_̘&uLP߭X+CjhBAgCw91v 1bwоa-$Ů+mcr[?.S kpV0Nd.R\Vu *4n)krȝdtg%xP+㓃&N>Ξ9s~~ܙϜy3/8|ԋg^T>5!,ڕ(4SP^/ʐBtcq{䠁݈N@|WKpԀ9zva_ڮRP̏jϡBa7$#~ ZqThfz0Sd1%a<CԞ&3).].bquy"a" G fCnjǣ+T8`I͜W}H{)sg4:R~=.éd(Ćd*,9OVoE͸SUd3{3N`w2QƔ斈:}DUJ\I;&-Q[*JmR+s` 9y}\1q;\eelˮiV҃Fc9 KoM B$A5 7@vn[:a$-t*80Rr.;TԆ70=GNsGesq:ִˋj4ؚSl1 sbToT;O7@]ǼgL\(^kEe3&w"YiЎ_]T[i"ũnO&ڸGCe r٢M' ]xWk+x{#s[HV}lt=B#lDjͦ6edEɛ簙H;3(ڋa˰άسhvzRj(%KpS(arZc+RؚtZeDz^``JO!D.,1o]5ƕLZ2v|KW^ ~㵱 WBo%K/[!Ո'q襉;pꦶ s ^{HmA^VG2$B5ƽt-D8sWp8o(ߦL~׺cI r[^k!QâҀ{yᗣo^tJyjQR.KRlz/e.~/ 66;O }=-W&ejbL=b"rZ-6UBA.*o^*w0T2pqU|S=(l]м7)T66=ozޠַcv#qkZKIeY\MCV,s{f$ns\;D6ϟm&^$מ]$$ڒG Use14bIԙ|FawS#Qp!0L.K(Tw H 'b eb篝>3R_4,."( !@(8uPϺSQc2"Uy[t'/Q͏s1-.ee^ ך ޫR2SkUAr*YN}Z9^UbTl_hƱ1SlbS JVs{n+;_;񵦮!>( rEwe2#wz8ďC5J)msي[HU7֒nUlK6LHꠑu\9yr8_wO¸'c]2qFR& %~!U?FOO)]BF2o=f64_)5L TqmpyZnNJO9sbs=btH΁07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!RPu[*{ub&/nAkҒ  YZ