sssd-ad-2.7.3-5.el8 >  A c~RU]k-u8W%AO93\9#G0koO~I.qO dkPr#ߐNo"Xd7谆םIeVb%E*e( nD+i{BˊlnP)zE.4db&3Uj?LzT&?eЯ\ۦ%lVe y eΝ=}yHڊ zʈd{SocisY%"4SbE-}l'Lui02RV8K>\86]upm S_o"ɭ(TX*fDеW=2(C=xiOF֖'>m]1 = 4*a N[~nC"9Q2 WHBuc=~|,[+PlyO;P qjDT,t8S dS |BMiZ_V i SN722a30577fc06306dd6f5fd724f4dfc412f49475fe41ec3381a367671fb091ed98f1519c19e7068ee6593387b6659fa187cdb34bdc~RU]F[' XH~o./y^gy)RIKGպp+1Ό"oZ⿂:q݈!ژ|C*d{ u%)[nփ:ǎ]#Z[nLm&dvtH?L@^aM4fx#`:-ɔMKc:LZ|XA!usCXuGra)pQ,9A2z{]8<6|R4w|H]%Rsb4~X5? کQݑ +<Bȋ4 i`1-@]1^Px}321)gizHsUʮrB$)y#Ikw3+OZ)xH!(Sg [<]| [=<|P,xoLl`̀-kIpq%0vWMtKGSʷ)Qk|s͉!',pYj" >C"ũ M \PAk`%@>>pE?d   2 /LR\            D   8FPF F8<A(P8X9:eG H I X$Y0\L ]| ^2 b1deflt u vw\ x yR$7DHNCsssd-ad2.7.35.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.cs Zx86-02.mbox.centos.orgCentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&K8L <O AAA큤cs Lcs Lcs Lcs Lcs ,cs ,cs Lbºcs !cs !cs !cs !4e52dc328e810e299b78aec2a9501e561b2603cd5adeacec91fa4de7afbd0bbfcc85aed4609f3a355d8d797b5e89c80f2ce8763003057aaa525e7ccf4f70036a8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903b68e5bdea577b0102e35b987ae82240f339e347600da09c126aff54349ce7bf9a3413b1a5ea9dd356459de91a42bd1e5190c31dbdb043501b68e5610d0a3194c535d415bd0739bcf0a82d65d11c279050fe31b0818565d36a7e466a8ed8746adc01fe8b92a8e2f0640a8c17c7530c8a4b4640b4f015a63f49feac323b9a374c0../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.7.3-5.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.6)(64bit)libndr.so.2(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.7.3-5.el82.7.3-5.el83.0.4-14.6.0-14.0-15.2-14.16.4-2.el82.7.3-5.el82.7.3-5.el82.7.3-5.el8sssd1.10.0-8.beta24.14.3c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.7.3-5.el82.7.3-5.el8 .build-id12988e33b623ea706a5d2f46ae3825b3166d51d11b72666f2ea947d25cd2af08a2525a49663c17libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id/49//usr/lib/.build-id//usr/lib/.build-id/d1//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4912988e33b623ea706a5d2f46ae3825b3166d51, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=d11b72666f2ea947d25cd2af08a2525a49663c17, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR;RRRRR RR8RRRRRR2R&RRRRR%R4RRR,R3RRRR R5R$R!RR R'R9R(f޳bC5[rhZ fr suREx*hu^`A1n$={~!>kY! A3Q%twXL=wĸ@W6c۲dRHLZjݢg4N;Y4Cq`|W0>FתNH (zj %m;\O28>ns1< jue/@>)@/R6Gaf7-ߝrw)>L~8~QFT=N C8Z=n @W>dz)[l*2\m~cr?O|$es/z-33XjԦO'GDIig)H-EZq(=}f*Ԥl18ZMWˤjX~ AŢ θ2mN]J1s/vn al 6耶I+9_'ne 96gLآэCG,SV~"_/p`kk1q"f5$KJ::k!|t8UaDA,ظ8mQ 4k.D?~VGt/uB >64$ˡ)ݕ,ɽ_[5@G9Z6eN2 r]7/ٟJl{ sv[=y]]GogG%Q`0c) Av{$|-kB@%{o￩P# sYo |3yf4 (UO΂4,0Fgt;ܫŦ&A') 4=C[mJ@ԶD rRcAUH$ ѿx~:<-0o/YIj,6+b%sM!.u++(!ۗuĵ(kOQSm/s)wn()ݽ}x7Թ{9 Ыgx}`rv4l]23q@w}k^Vr)8g 9֬eô?[B&Ɍ͉nbU&J"Ɛ. !u-my-?ӝ>'lu(uJDҏmA}.ŀP f2wHѐ4xA[wܶl_WOn0&WHh[ \'}٠f(uVWw3˝&gI< 1!RQR AoU_VGYZ&S9Ku9c3ڲqr WĬVgGL-4Bk-p2iЦG9E 8HYn/զ< g-O%=k j7([խD}_3Dy,sȜ2#MJ*E` w$iC5w2T"V׽r@PaSe:Fqq<O^0^B FZZAʡ]xY)A3txD0f=T&1O)""p^b(y5xoL,zo>M W֣Xy%6IN42..nqC;К,6Hk9-(_śI:$_  +X8Շ. ru|$Fj,czJjey։02b!6et8R(=Vj@i' hR ]U"d%hq?ӏ6yo1+ab7\-v zصh {<ҎT|Lz̾47 =OțAXQDŅ56'}t{ nk O<8ѺqJ?A:Wh@QtEÝ {@;oy&go=0Q$yòl ƛ^ЋZ{ B\@hpbA\ƣ2T߻ϼ-SYRwngJs]cyBNUKSCg"qCrsZnqզb9Wm2zO/ֈioK;Q2/#;^G԰*TTsH߷3t%kiˤ3r5.nڿFU_|aNpe3$z/goAդCGRVywsaqӉ9UF^>͚^=ۖrVL2t㊗mi$N *"=qne,_H*=v薢M\y`6x 2^5y꥚(n[L"l^Rzm0"PL: Gw[sHyޔq 惄Yf}陃=Nz 4adk=-:,x}UEMoaJin?O\݌\F[pr{wV G0!SHXr|VT`CNX&k,KSYNY;~HE3|hq-nק>Y$!I@E[R B]Ȝ޻n ,M}6l^(Kg 4\%Т1r5  E0:;}Idm48NO0ݑWZ >' qύeP;D#Cgf_x:X(T@ekI,q.A;YGKd=!h}iAZ5V}uJh\VX^$,K(ޚ0З~Sȗ)UD2Z A.3@ h(f.Y:z8&UIf{1GŻgt'`ymh ݝ6KN~NB^U%#uXd"ٹS i]uqqqIY" sSLR=HnjI7ҏ%K= "[ͺ}ayhPJ%G 6d-Bnq[z:j*4( {D-al*q3@ m8 M9*Q8|\n Gr9$WĽ?AN'uy+4{@NDp}VWuW03AI 2}>݅0=:]ڢP zz`YVp\"XtU :uB2LTM;GXIXھeLIMp#ZiZ1CL ?sҹo{9$H#j~# uv  J&Z#>Obˇ'W{ uFg+6kSt.kt4TD3B c*|\җ)7}@n8]eSPd~-8BZC[0bZDͽI*}#YCS9`!$NGBNv) l }#٥(R%ZB)[ªOk50Q:5wIK/Ycb ):̙x< ų+"{@ac7 _92En]FGܖN%o/Oi9aS~[+rQc8`sYj 8ܚ1q]_jWfo)aSqɮFC1wDĔ5@:ňM{ϾpʱW2&ؾ̦ᨾoL6Tr1 >n׼x(0g]FviZc0Ig{]e89_͏ pB0)@Lh#)Dc/? ]VY *֠xzmp[sFH0ǟ~͏`E?e4d@,'=ʰj rp<—#nt.5׀HI_GE*FA<^w~n7ʲmJoH B7a΋;6OEZ5[1UC3;4.֙@ttCܼ")Ar9n3'Ue0I8r吤ؚ060l922?[aܪ"6rRsH,k4މUR]/$}tr3Q@$YJ+)Y_w8aXxO>;$dVwеf% 2حGeAO ^͈0+aBIY7[}ZpA"M]U!l.w7M VO3ʏPީ^P8߲';ƛa!7CG\ ިq/C\9R>#Yg[LԳ&wsQqhQ$%!BOƇf;[R䷿UEl(k-YNa}F*4`/6ZL.2~}A_keF+θ 9R~BSqřđOaP=+yhժ^2;6ee&]WƷ;rt#jATȻS**;^@/B:v=e-M.}%A4O8W" gZOD7EPx򍷄WWK{kc{Yr! FMgBG8  JB`!g,UJ$h88DKeY)sm GM<} qL'dQ֞O:4)uf@Gyž /`I*-Fa Q*b ZfqdgRg%q.roxfVLj<<}wy't#L@Ԡ頂H9 fs.8|-24"olW,INǙX )AO(,%My>uؘ]wvǰzgm # nK䀤yb:пۑ9iΉpԜR'r?x>vx^-M)ƷW5{Vٻ h*Od̓Y붎@.W*yZ&$|S "A/}Ｙ@ڜF>.U: 쭋pldLDfc+| wHb ]^GuGWy] X^ ^qQO|9MEݫӁHM{TFFxJJ k.3dGgNK+b:`3>bpy8 sKKUS "1U99$̮tcdpP+Rtɑ16.u1EψL: ks̥u':LH]Nx$\9^Euy҂PvBu)yBtk TO0v9 ?E= V PZ)hkU$C鬴A^G0`C& $08AS WF랶4uU.8%pC?fgiDɻ_5Pۥ/ZET^"Tyĩ@ʢ)aebhՠӠZP:s?O-聇U^C\npYVD,\.|Y\23)z-i@].,$h)5x2+nl~=Tb=UZKUOz.Ѷ`_U+qT$RoNq{RbD vW+ @ϳ\Ch4\N-vڝkȉ(+ "Խ>-eVoիe(o1qKZpta˺K^&ZTtcR8+XU4%XDŮ͙#qK3 K[EfZJ:[ ;b<ESȯl1)` )"] MfWa^`sj%p$ɗuH^ brG #֍2nc, obW;_.*8_luJNG@8woLMmq>"۾rMGAv>ȿoBkN+2pel$ڎtEK(0. .!Ic!yah l G?J-;0 4WS D#l'9ŔysǜL^i"9Ě6/!G'E]Wc/4Y:>"J G̤j_%U$UD¹?w`Yj8OuerwrgNL #=-^C^^>CˠZ֩|"7&=*rP羔x5,N\CO)s.hg] Yv.jX7#YZ?NAy s{̌ʀ(ڸXNts|Bc*%ŷCo7+Tpؙ*x+R|m񟎥669\CdP_7D EFt-pHp?W\;ih|Q|^5+,)y>5UUHU_&1V&MN$BjܧrZ:8XZVQPDԿ\e'_졿@ f[?hӢm#AQ*rr1$)Yf 9d`_D38 v^rE8LҕI?u3.7@LI ̷Lh`h&"8JL8,3>,BcİpI 0SpB.f6pK!v6IBb̻S`7[ `[9cv$P翈mI*DFy7s3{yG^<+;6ILBU1 9^zo!͆*!Y1y|  zbzfXLGRpL?%^k^) bֺNv|CL>[]ǓU'X`q%5N.8+~\Kޤrb f< KKQ%J>`nBU"_a$fF|'B GsR CfYbn,O^!?' +L@22bf1&]̵QdglmyoYGAJ LQ֡@x|\¤#Т.9ǧskg\K!a\Ji6i%o(c[EYz`k!W8- \QGcItmمĠ`|ٽߌ6rv^Gv8vي:ڷ{d@A'N4>l#6]/^&<ˎ_OQNk)/\|{53Uja7@JS42a7GV5-Fu29|rvMR÷2 8t`CL׉5O[ Ѡ'}\&{Y\ Wb"^=~=~0A[зpiHTY1hsVzɚC[nT:H tµ]Ǣ+&u~#x,8*~:^c4oMao9MdD_;-GNNB/ᕢh7S2+ =Rq!]`wt+hz4@@-oj |\񥻄SN@Z7^I̅* D)C40DݼퟌgcI&KDX*-0sM oEH0#T\R%H5JA1<8xT!ˎb &_H/{}z!|.?61&>d\"3^Ed}A\cϩ%S}};DE23> gStSODNCW5.ax+s>،jqVp$FL¥2<#1d?."$֜A3`ʒGZb\vJsIA#&XLcO)j~L"eŗGEo\TbqfhWE#ɼū(6R&ZCG%AȂUGb6_Igաf1c|֞kUZv4-^q55!hxv?ޘr}">Yg(E.&Vbը*A96ļBN"w{zC6,rvGFJD\3U68 _Re=ˌ~܋^7ݮnMmC;nrcHT럵t%pS_vh].+l6 D$Ĩ8gG}˟wT9(\#i拤uw v{$ú\}h2~)1Љ8pćC5 wtIlY\4*ZJ(˜s;;keĜ[b F* 1F49"l͕dŅ G3^xW4N.6Vha}rT8Q91 lFQP+]3s(=}D1 s\(\sbE>휸BgOTU|5֋n$)BcCJc=G^ny' C1835؆,փf={'9A2JT&5@SkØMKNR}M/.Z"N BK9O*eNhbSK?4.5P: >^+uyPHd@&R6 ,ߐ2T1ԖUVf-SPsSqOkpSu|e:2ZZqmpho1T+,aݡq2zm”xИovg00ނR$K4G~M-!_ t6nX58CMadcObɲS8}]nC =sf̙Mۆ \wJS)v8!gt"W|HNK˚16"׾MD==Xd>Yv\ !9[~ ޔCV̄*z {Bfx#_Bi)irrWYX,R4~;aF›ۦu#R)uRS ָF*шʯ~r@]P+yvnNI~cT"GL$ tW3#X+(~U*\L({~;?M,|5E*j n~LQyDul 3P\q5g{U.h(A>DUh>r! 6 LbfS5%Ax~^aL ;gNÅ<8׋5ԒȅR \-׻ …%WvqVqmIpI2ÔT"8i5d N`aVd9G8+]Xtnxo~HWtnqWMcz1IAE&vᯂ:J'{q)r`"`0b U pl}86v̀|l%؍iݏ>oq<C3'wۘ|<`{vAmc9 w~*I fF&CwRX,m?/ /)2e-|=DU-Ka6~"r9sO>ZV";AvOЬG8OPIѾ9B| ?7ZHMxU. W ay,nN%Fxg O\@-OtDUic\p9)0{c y-V\#&&j3ݚ*G4Zπbvŵn5`e :ӝcmRJPQ +QOFmP651;({_*=c׸~+iSW  9A=͹ޕ۴l0liÕ"xD!=%e;*Fy3S=tR%kC8ؗ/qxEKTK_P?C' UPQjZZZgݑc @o}ط'*%`>zժ/)¦n}B^@g梮Y #Wr2:Isb3IyQ7]^$\N1PHL$!l3#tiL 6nwiu,jX%-s53ZIMF3E119V\sCzkE4l梢,$Af@/=6i`O![-P~>#h"NVj[{Dd#ª H%]kLPkNIs\oGi+>OrH}lѡiIKxU>eT %<oHy>6wz;9\}fΐnWρHdi*?]ƻT9H| [`Q,s4lWymi}.넖1mVn+X P4(R7(&^fGڸúZWSꗄ3IPݰ &9)j<a#AO8W`'uEn1%n3$??2XaL66g'ѣ]$(龙 k4t.\MiEdQs J8lӝɦw^gM;)K"[ am!ܽ_fL'-^&[V v|36gկD{qSn:iy_Vr]?P|*k }i(הH2 /h4CQ~@dWibD1Y6W$mw7 =>X^n›K|J%Ѧ]BNm!ʳ*ZL 8aBUnÑB\ dcwm kn !K~hg֠RTQOu6j⩮/gv.< veǸ'-F9e63oS"#ڹ7CCFkK U4TgjX.[jKI.)LϽA-7Y:]d(`>jF^ da8IZF~,8S#CY/85OE nI+7ii/FdW%o$^soӂF.\^yM4crx* oz@DCgY'Y!ca]t^i$8@sZ>C1;<0U7 2>.I%M'4(6D/#5 Ld\f?hB4C"L]h/vS9fUɻo+Ɋ }.0˗sTuy`"xRD3uY/+0{[I __vr1ʒ rw"T>pjJӑTd)/ˠ䒷HyZZ|X0yx7 gߗaDۃ^b%(k`j*%y/|PyfA|*{9keA`2oȥ| hj%-(%YA%Gy4 4uZjMp2H3L`B"` ?Aq:$UM=;=)S $T) \ _R-ҌWbac\62I8|[b<]㴪M_zʪ"lNZt0c,ORS+ޏj$F%hCuvQn{ yRZ)׷įWCQebpI/筹]ogBTa7paN%Sp7 HYLExU(~E}wI%k Sʴכ \e<[f*)N8aH83$^|KS1W Sٗ[{4pv nfM[wT[:-^93Y>{[/Խ3 P,hGy4-yKCI2^g)1$+-LrULz;2?ScZU^fE6 =wOӞuVk08ԋdɒM [Lgghqx?H"BpJ83ycLeQIikkQJ twa SGvt掴0r~!@OEF=a eۋnӹ谀Y%h#!Tš]u2ٽ)&OsR$Jc( &Qq󁴜$.i,saF6yXVjlm}=d?YdwSӂIbܴJeM{-^cϥ:%znw8MZ46c]9-}bUn iB@` Z&x(/^ФYs7 ?O*-kL:pxKǿ*#S6d+31KӣM U'o]@TٻX読ar=>A U5C1J.FLXvMRtpPcu,:hxw󡩎%A)#_<]DL$3^``F 8>l"[:5]14߂/xAo&vb54_.؊E%rSh~ vV.p&D9dd7 ra;dh$[ehR\E^d@rRCIΏfvk@DG7}x}E-,6՛n9lu Km|6fbR҉ZfNr7ada7pj& ;q}s{`@.9xǻI<--$E:qh).0(ZhQgܶ|khV=^b -q֥ʲPGT):urFg4<]v}IZլ0 B)+?Sӷ_,8R!o,{m4ON/ Ӗ/[!` ESl\۳W@x/dZ#/J O @!l磩bi6\M@!l޹  "#mc7܂@5yZK+{FeHGT%͟xBr9Mk.80Źl0&Lf3 Kcs+( غEtK%zmB5(<W$Snq-W?jxiw,h' kC&7{|i J%B-.:\d4CF#@B_I\[W}TqܥӺ tB[a mSTs՞unHnʬ^fu"FbT[,sR@Cvt况.X؁ŶU/F|p>AFPN.Q8\U#$Ta:[Բ0PT{l9]Fy͸ 5l@=SpIʿz1_uzSHfwk0ra49ʓj" *OZ&?p6U*E7(Jsb+ L"}ƚҚCn?gEQaPz¾tOf#njN܀G'Y67Ч!^A gHbEu9$"@9g-lCB P{]o\xi+I" o@TqCAEvôh*I?jZH)\ؖ4Evp<29y517]E}TJ|kg "ㄪH)8m_qBQׅ!\l>VO[#[䞖~zj]V8> =^sA Lvd­mr4hu""2HiY,e DiK⾭F(ԜP<|=7`PZɭ!k~5(nzsp 9RDA$X8h/w~H6V,5nǮ-!J߱w.aCb;sZMuo9zfP8+PdfPyj3`s,FuYٴ݁I̩NE _]30Aـ$J7Y(P A1PX?":6y!.PK~6bd>-B >EΣIJO`ZopR"04QS4 g$=buu[*<ИO7TBU>_k4RG6)lF FpiY<-%yׂ&)t鈻p8ԯCxO[P̑Ft=}Fp w;Ώ2OTQA!2hm3p1&sn ~$9};ũX?:;Hu*a3Cx2pEu&BLǎ.X^.|4{,2hZ[ȨFwUVFRFQh =Dڟǯ0KP;ZO) A:zrww,ѽ* [Zl\aCq$Ŷ=!9Nj `eAqT 6gE"QX HHkz'4Z/qSZZ臇iBt ;"Ih씔mŰ5JvȲP,_(&nڵDU/W:֜_iFd@BmoC-pN?ðF`u%">#9j ~InxfGBYo1iOB{sp QAC]t*wIWU]cDA`B+Ǫ"<S(Է>Q2Wa`!:KUܑac'%𒌓ڇ%E&>HCm>ÑvDʾ}!##LyJAvSICnZq7:6.:Cc8sT@|W@G.x/USk,l&CZXT!$z*&Aa<-]m)8y EAJD.Ah7}HP D(8w/2(l){\^_X%b`#̘S*`QVU/I%P]~-=m> br:6!N%W*|F0uo#m b+,qK" "UkS fR5WU%ܟ bZqy9\kj\ 2ks=o*I!eV颐šό4g?O 5{֤nЯ{ YO,u5vEz5>paC>;c'&b_i_EY*Yz3@a?C|t"!(b`7OcG3.>/$xC뇢g,6HF}6Gm/;9W6[_1=470 o)&'G?2qK_?Ɵ͉c-|m6[N$6/q}T5aJOTIv[; A\NL m( S⩃ 0RkN3-蛚{E׀L ' Kx $cg~j=֝f @/dO_!߷zY \})^ILu]T M#ܤ-q +kd^m#O|"8WCK; fB7̇d!0|u>Wj҂^YJ8hQφ,'F 31Y=L ")n6 J٘d} ,u {R~ʩH \n s˕nR o#J*gTn $ŔRQ<_Ek4iQnt2F\\sLBr?lj˝]~/)/u_ NYٿ$C*{I8@oLX[-M|L9[nAOXvrSj8Ss{ěXK6BqbEx(t/ vę"^̤aPLRL0HSI!1jO=-9?C?쁔ll,_-g w(% bTTZakFB ΄>񾪩mS$d8ֲ&F1_p%[^Ԡ20k4_ y'L5mP?Z׬\Ar :`XA )^{Xz;:ڄ{:kZ%*lv[ֲ UߍH_bOQX O,n{bߕ0&yJdʙ?‚Lˤ'J#A DaN lrC:~EG/?&-õ; # vãjf2HE]l9v]TS-Jh+?'\eG2|%+s Y-˖3z/݂RO?ĨĒt)7WX_)>E)bw@Oa"gv_G.2\զ-` ]/­D$$ *^qZ'|2I5O+T%i&17:!X]bp،dQ>XXs[9NX JژyuFҵֈ9|h>dJ31 6XΕ:L(icD=Hq3{l8wS?p(:m*.R\WDL~ڏr4<6tRK»?mjFCl4P Psn3, #lZ˖lMgt'vbS6,nay<˟Hu37XKbMjWa쁞yjͭGM"(.}ff^X)zؗ`Xx΋m%h %T&9͏/'sW_ p;hs @0ʳt, YA'ras,c&Y~G lT3 ]0Nbϫ-%<Ogbisk `Qh%*KD|;anW=xxJ(@mg _({l?tXVmقWV)#8Ú\Wf^VPTyBhF pVH .d _KWs=p|YhO1d}^Mr8e544*nڈ!\cȃMMͿЈs)W_@gWl>l䓤U,ch Κ}gTxGK9Y>J`KyX. pXJx#Cf-~ [IQ OQ@!e[xgC >`83:&7v:4{lp@ܪw)X ~Nbp[(Z-uX9W:Yn^`x!70m?_(! BЦzQ㱌12e= }Cm@'ANL }4T4QaX֨6)@*ƴVup0!(Q{ISF/m8HlH,CDi4VZІVSHOAH槒2ZNe2Ni3uZ@K?Nvďwx:5enos):,lF4]<;r[B*"B2O1N!{₶I6.[fZ1 V_WѼӌS=^cl=(ͱWM/Td1]19g/*;>b&HAiь$Y{?1]aWd!J|Ns>6nO;iXŞ{n)7Lz  ȿ + %qeWؐuef#RQ"}bKCD?ca qWEX"\`}7V3צK7닣mjWyKitffFk3P85 XR<@ lFf _' 粵y>C^ =+|؞ Jɢ e|n(}& i$r4d-p \`U=i 37jܞ/l࢛$-kSAa4]bek_Bz"i]E5H?^4bwTF/JHr;Թ(jl*c *#)x=HޙU؏[C|_oq(>ՙAD 8Zc mtXu~-!h~i^aw孲?"y8hΑR<7Mwo!|K0K2f%|)KAYLu L`W⤪f;(:e"̛HľH_{iN[ycj<:9-Ĵ$8 &C=b{zr8k՗d;Dfbg0}h 4;t"f$U1"5MG7HVMz༔7mH|m# ,h4K-LEAD\[2+=Tx+W'$M 27@M~ x`8?Cv1^b?@! Yn!P>.B2ߛHX'Αyd>Rڤ&RQ GsJ{?Ǭny WC-x 3 #[FK 8y j]3B1?q_Q9 H/K٪6R#@)MB(2"1\ZuAOqSD=[HִZHPk‹#_$/WD:3U?#`1o[QsK+uKz D|`5ۆX@sr0B_+\N>U8 ][,I,=#Gg ;TBL@B (672I6_FjٱUaLVz+>)X~];U%k D>3V>7?l׉8W˻y~RVtn`l*ʽmr%kQtW_o̐2**MOL47syWׄ>$62/=TiغEnC>1.EK,[+#Rr%{,W!^Q0HБItKJQudsL_,6r8v)VC"l鸢f]U8ЩtfǂwAŝu~vtmW,%⸚NPfqKrK#J9|UW jfe>|]8lQ&wZ,N})g|a" ~}ԭep&%x̙|1>{KTC_-WΤ=3&-GބYKD̎VXfϞdg sb{,~-_.^ŏ<1ջޚ4҉)r.v ۴ƥ9=*NB/2g-h)W >Z` ڊ.A(PNOY"2 IqԔ7߲fIAMkX5ɕ(FŜ,ŝGa߉>mNK`ck)"^p$8P/"~/??3/:U;ݙL@9yE1QB!vZhO2'.2mjIY2usf6T/mn )[  }^OxrScƥq wg^n"tvl#!ZHu aG&H5; ܜIAt ,Ji&16.t܂5u2[kv={E7։eҝ=-)%6F"'@/xN!- ]@$mIY4f~k/" 5\ $ S_Oڦ"(]s HO}vQV6iBKZB [?Qf{-7VU /=z@tEm9(gfID(Z努6/06}ҹ[ s'ވ6jj$H8Pl"<"i+>E4*\< Z-)o8M*.H6F ;:QUj z4ղ+>37D 2)t}HIXK$)a31׫L>REc S^@?(WB&J(?Q2ނ C*τ,$~n Uh_,i''#D7'ӊ(e |R a~a t }:_ ^B3V\ :"_VpS{>2yɅ*V1R~ms^ޔC*ȋ&PL7/V^b$TÁ'k5`*MHKjJ jC$=Hwjy,RCqU!EyQ kݜމ CI xӪY|q`JhU*ŗ[ jցH#'z8U)z B0z;M-W`Scȭ9STTg?Ｚ"W|ucgjCp}Qb_z78D>9hyL7rA_]X=XП_ gtW\My>u','@ M^aQF1BUyQhO.9,k锥3Kc5OhH 6tY w4u7 ],$SoJC]^R91D6D*`j뢥τҞp+D&.+@O`w!Y& ~pf+LY׍`bU;ҏS#O$uRM}O嬂@' S:I S@?pjNsORfITlnZC$uGǛOo.tø+(\ZFqXl<|$dH#"`;.6*Ҳ/i+ZTcd .`ku>.7y9;=9P B2ꥌ9U$8;uOS3YҌNb^3f4]p ͎ |ͨ0.< Y{]ȓcr8!yfXm1uJ #jh6n(}-ntۻ;>mtYfN2Ga 9.P-.)%;RbP]=o)qX$FS c'N\?+˜X0((ůB`LqIIqЀ^ 4E}1ۈMk)xB'r[E*! h|Kkٌ۴챕U}avһFxCg:B$]ZY ݫƅǢAQ?(z| \STOt.NtԸž4U9C'N6D֡eo^𫢢0/n pL}P'+xf `n{n7=3V22N+'؝E=u`.}mVٓeXۏl ՚J OD!w[UY6v4w#  ׇC>\BER$#:|%J/T")0R XC2t(ckO4C {`%T|wBY1A%S+(j8x)LNs=9MyjS<) QbB]&ױ(|.rʎ :୶y\hqo2F{֝wm8Ҥ)Ǒ?=1KA`+-G \_|]Wn- uxَ́+Z2āahjlx iQޢ:i,R*Q!D߃s빶 ;o8+D#ԈZeHd@ ,^8W!Mk<50ݿ*h0+$p aCԣOJ(\l ަ =yW;zaѳ:KON5O!5/y3ڐYEP#.tBuNL41 lj68V+nx1d^҆~eԣv-~M;QnetYy#*Hp6W-g},g/Y$7=ÛTAwAcHf*ߜTbl\i_Ziɮ*eEȁJ5|%FԷfm]^گ{IȌ$tsTޝyG}"*I ~Ĵ W N`E xݭB>Gߥg01~>b _ #8!=+k'`ےef 5#g!YZMHT-5pe3s}!͸s,`^ ǡ(?0C9ɫ ZA1ɵ=DU"FBRydA29o O8ܺBoC]Vܷ ]Cp|i6IHe[x28ih+ IBdnjP5^^:H|ϲ4_C(uTen@PSl^w$7@pfĴpPڕG~xe8[̓.2Z,fM8xmh9lCi[Zz:m5>Ni"_Oػ($E4ЪiDH_8kuY5L fvd,'Dth.kHKI'Ư18HPo\kUhn*X<@kFI~V1I: p_(@Q=41ar`Uw훤l A.#`dMNHb0¦+?hWiM9܎5h"?W]hE5zq >) gxsھ=&o":&5I[~ľ8ӛM XsTlA:\?s<̳/CcWޏ)Nuc*iw:n^ʈSkm|F) ɚ1&z|7_z{1d@se"o.C-&j xrn\@@$)ez44-&#Π],cHM4t?-}d&<3z1F[EX%~b^ubBseC 4d7f cwBAL2. c]zQ-4w1-!tghz&Rߕװ~EV vc (Sjza<FJED<{>Ĥ'0k_э jI:nz r .b`J:pD g7 ( 4D]㦈2[f#S*4B}K2!Ʊv3_&Av()|JW翭^߽iiRaIK.]Y !<%o,a(K)j7E:ĿީOL,ͪ* FTbQ^=UQpTaJVGw(j]liA{*yRH[_1YpBE,Azavb)*E"?`R@;Ds> g8s OC!~spmita^OZ}8f/a'odjw?gVR ®Z^|ⳉ?_W8yn[+\Qh gE.C Lh[n]^c$V%Lp^z@zW2 | X@ȡ#f5wS z iXowW9xgY8b9ePp?8nz 6ٲ Fœ..2BN\JOQ|_OhHd1ArH@=x63P9gn(Yˮ ({`&v T3084w=ixoEh|sIӤU TN&ճ??[[MER0#>‘AOfg!¯x[ 0D4bwϰTF B߅KM9^ xOE53Rdh Pa77y"JZحl8QzoIdpg8>7Wq&ĴEWɏ۱S G%=` m7U[EiYSLL>Ȝ Y,Zò:Al*N)K<N[ '= Z6-Rlc1PJ"gJ ɰOEJ[9/ʙ~0RmS+һYp̽XX(fSCÓ#"^ ;1<7U;r+zW.`T$T-9 ;i8[v#LjT2<_^.77-H&@F~: \*időƤ$4_*hXv8}Kr'?!&{$1u<\󳄍 t*eXwCGou#ݟ/oMC>q`t%G< `'$r4HĊ:-ppnoCLKo$1Ob8R!4y ^7>6pnjg*4y⪇jaN!{l߳J;(.x-7yj]<8"2sew).Կ#~@'d`S 1wSGP1ù+ح79`e=ړY j\uN-E*աdiښ Idwfց~4v8Ígc^ -i`KRة`t|3NN{hM<~A(8(;?2E3hm'VW~S>2Kݚkk!Oio4'CP˹mp;>8oц_O0č=9CiK͡/Ņ@&eދ!Y8xxyotD"mj[nަD!f)d]u7QR|P,Cc2 Vwx .GHhOمf&HKf x>ٌ /RL+O&SN" Dy<{l@+oi;W"*]-}Mt8@Ct/CŖptZ96DQ#e~.}( /Z6A>g6z$沽5.h F< 7#TE-d%{ic3g&e՞K/p2%- W`f:rvˋaId-*2(bdi2ZiT7Fw .-amQAK6ϢurkQ u/=q7go-9@8YU]Ɛ [M!vuExn룹2W(q4Ƿܸ*ʀG4c8BJz-oS<[ J[`Ӗ 4VXY{0ӹܚQ'( b҇b\i}Oq` 6^c(ju۾ !)%>5oíl S6bVzij ?+`U , h-+ݿRe?JY IʓOƣ,~1j: |_1KaQwʝG@ ' B}rLDAcIaBd1h;ygnJgFy-ԭ)Vg l1eE LE8m'?d)|'\@`k k 6jX'f! (͌[bRDy*%WBPW]4x5eL3igR({y`z=K>ڞޯlvHNI/cK͇Gm=X\nOf)poJ{s~]9Dh1Ѐ$[4D[6YKȟ{x,,-xUuPhԹMk?4_,tI+hM nJjo(b=X&4Tq q kP+O;)F{P]瞙j-Wy]WlulxY_zo~ n<\3Y z]㐴A]WzQ~Cob~zEp9̐xխsxjD CIF5UٛWZ}{Pp戯MX.`4,Gw{:.5^"R<XT Ō'=d2b-2 V9D3 ^Upc7`Q'/ej8{b*Gp"ZKp aI#us;g]QacSsdBS, ΀Z &-`ԩ>urn0z({J^fs[cAPx_X^(K"]޽(- RrЎlv#h]e|\|H䓻9m9_J]fF 0*m>oQ,D6o~4K Ȃ_3 7܃娬ܪ+ad1%1 *29N ~7lr1j$yXoJ,RO5b)p7?#Npw[%VuߠUq?bAUv.=\`b`eެy[YdYfY ׊ˠnl>%Ds= NZѭxBng(}[xLj]8,!†GJՆuЕUr85 YnUm[}+ǖz:XF~b]|R|QYәcCH*imA ;A)wt Q^RüE/?^72)..#{gG_Ybwtl}@a\5B h-x#ԃ^<6uK5jVK yj`N^D56 ??!H3D =XlnF3\x*C~a>oK\:vݸ&\7_-7y,n.0Z[>Ȓ I~ȃdvV+KW*4xRe6y㴰zNʗ9"s1,$@-*;ld}9 T!" [ sZڌqh"c{팶wFsa E;bv"{9Nf\`Å&rLṕQfM՜ZE;[L,ҬF7VH Lj\ fֈio@B1nD/mgݙ{e"_bz/eK:&:>?`3@[ ̖G k;[ ǞRk|x%31Lj'O* @NqWޕ a&,lL4%-o#UmrX ⛔Lf_!7I} 4rsEZMT]l_]d4'PwGT_YJ*aV+m8'|"Kσ]@a<Ce |h?KȆ*+> lEt`7+5uHmǀP!} a/hwx/A T`%vԘ|D[aUkc:G":)*r6J)N?ri[[e}!j"}w|*$c,pӞ71C@z!\n9F$"|)~MPv$TW&QNmc*!;ZX龞/kf22a W#@{*RuEncs0~FbFjƍ I"ޯb'tU){MOr(Bk+EM ~0d̐w`>e]đ7VG#$m:hJ5m6Tc7iYun̬Z%p{W0$iMdf;MUR%0Ĭ8뗆!k o,m\x*ԎiW?.c$N|kw"π: [AyH\bp.G?($o;?)Hڏ'TT5E9nC ÒɢFhHL=">A:o  X c Re4k,BV!#{.25WBSᯕ~t`W8ٟI; X"]4L^plڮWϖX+6]Vm=^ GvJ䅜Ky<P%*T @VOa24մv9m!;'̥{Qwb5\DMk9vYqzߙ+oOP4O@4p `/4C~ȕ.ݬk˳ +f o#e*e KŕCa8eI`QLRj.Z>ԞhIaB?VڏU,2=ueerZ<>-wѐD,]05*sh]HH霢AI1H4ʵ|߂.pa:ěL}|p cqQ\|dtyX:~yܻ^|-#ZP!l~UeNL1E cEnG %Լb嬚d\:I3%̅[71PNS/wa n?>ٱ~A}{0ܕ嚰'Hπf[9 VX,He{NoA|ҀbTU kn_B2_Ev:ＭoY{K`\ XxrOQle¿i{eo6 qd 4w (0o*D[evCUqA+`ga_"Y}E(½f̯-䔗v2Nx|k)m*e!T a )Aeab¸BӦ W79ca%Gc7UXTג_hHCjY`Y|7=MIn!~|LgV Wohw ƞW>kSDbkDK'cZ|Cs_J.$5CB`NMo?UHQ1 9 L]ЗV']쭨*LtzWFvxߣѸOzK4*O'<&J bpiX(*eL1awU>V Բ3ԜwM Ç(;tں> Fu؊ Cݛh^HI. {I5M_X*o=[&;LqN4\`cM_Gu-'n*dkb"4SiFI$e,(/` *z"k63ùѨ8p x MV gE`;)fx_3GKQԯlĶO'?r"WO0ipD  0à4 "AujhLEʔaTp Pr%ycq,݇#^&G\ӄUIz4FTt6:w+\׶~\|H|6egbs\s2%iO?-pR@v .&zJga|̻?<#O;Kz(S]0\:yϢ>B0il6L9,|xrh{DT_S&r: : G/ - Dikf ˧(Cv`dieGwa/3]-֫&᧤CΥRcĦd8 7=R/bNH. dHTdsh@ʍ^MGD#,[2F쳰Pթ QI $wEX.u7朥߼'B 7ۭ SȂM1[!YD5vì%xOۯokJ]d:N\1lI֙#"^FޗY]7.D7.$g ~W=,bIRGJ,A4Z)`@k"X7zMq/K3  [}3*ļGZ܌G_\FёrrxN)0Bu9!!6|85UfI@w}(b+>x |:aH,0=2Ṣ"!q^av|;ZӀ`ȩG(Sra'-8cuԉzl䫭,ئs]S!ńӂuG7ӹ(!&/ħ6D Oze1ykGԝAhm\p_®F& $-^y..ޘJr"; J76!V8+@ݲ]4 :^*uR:Yyi a.D)@Q@a D(zdLcx魗i< 9S\D1h͓i2>^~f 5Cmq+e ɣ@k)Y50_@ >q*k&cTh䴵c5; _̄`,d.7i/~B B!.4&{xQ>qKߞ@.;ղaRO*OP\E 8yy0M嫢ė7IQ@2C[YRS1/uVI }\ġ d+7AJx*P ٿ1Z:1b,0ojW&ɦ"ţ#"׋  *P{Fu5t8M,lPL(%Ãka3fyv[\1߱y=~;:oMP] Ey^Ih,/`o j*5GZ 0|i!Wypjh%[$,hf&>YpƏyl ҨEbT|T]5tRL'ngrUгDy}mz`[w}]l(l(hy/ES:7M͇pkA5r@ٍtDsW*g͞pRжuHpf$bWkBWNLËV,"9K>R\ i$  HMTόG'΀7w̜!q*S9"*(n.1:i!v)y $DE8+|9hfZ;Gsi[ThKhB! hxW> T?4ZRB5r-Vbɵ~P?mP#ljsgbRiY}$δ69f#j&C(NkvѴģ_.Ni.x(Bљә[-.Dv*g잃nMn@Svf,Buf) @`!;# ęB]VCV+)1{+MRiiv^&BF؉u!z5#,2ZИRQ =,@HX)nAŔnXFol{V74uL]~zo BXF$€ RWkqSQ!k]q~rgp~BOUvM1ײͿ3'sVm@.eJg"Q,Y|ڳbђM@#؜bqcŖF,q|{4SI@ lRL`11&l5o[~/cɁhQKQPFHvվA4wW{VOrKhRt:KHF(>)抷(S KJ2?d$kP'\AcT*=t&u+/;^\j>(V;1VM&@F3g( v ʶ$f&XzW pGO|;2ڪqSH-}0YBtP;О câWR#ֱch=T@\#g Gb3B`('|e Px0?;S7MBT? ֓ꅾ#heKF!hq _"a1n:~щeVHF;RzšdrwOloGؒEUD6b@A])]>oծWd1&k$ S8 st{f>{h21"ݱ8@-v3C,2$(.-r7].)bh'rNԹyhzˀ:;&jM[v;OCl6([HQ|HcR4jKI}{A̺YI \l4qE4|i l-&y$jM[Hag !ޭq*N9V&@L:ɓN[$ 41MUH['G纂,?oۅZVD吺e"}?4J W+Խ2=[7pg->yx.xޅyw'o؎E+<hQx(NqvVsqK0Iǰ^0;i >7[R̔/m/ ,M IaW[H\cDHovt0_R aq<4[\kF -T mBL$_j4,O ( X ḃcl -(Nƚޖ |AٸY;u5q`,OuZ'}ުbRŝ*<(Xf%?'Y)P"25n"H긙'Xg{޺N<82-H -%#'ݯ}Da ua`4TsnT%:!yBYY@D3P.ogJmS_}BT^ p/Kb~0CdBu+@ {>NYI pcHdJL+I^!ԚXIm "N˳S:#eK|K9`A+s{μ+LFKkDgS(J'r9=X\R-_ОlxCv#U1bɧs]LwCbH"f :2@?F*cvk+q톢&״WAz M?lQ,F;f??m6O.bHB[V)w sʰ6ɵ*lJ< jWj`1 (%7vylESš]{wOc+"ӅM-K{+2nڪLul rAZcNN6ܞGo_KۮgfUUg2hQ“PI$9tF'ޟ\َ-IK,nS *׵^T-(/ a}b)VQ-; 93,r(s[Az;G=vS?6\v?}T} 7oh  IF3tgl"3䩶F1k6d** Ni}aΗ$^bGkL>2^L܄1/X(+♥&xsm$qw7h;sj4iE< ay5Cn5O92Mړ_&l\:r湽_@PXAW ҼG O~es[7<˜ @0I?Ud.vvRRO[]1MU :go2BםՋ9޹&Y80i5LiQv| zN,W62/9! e AA:H^ #$[ݪ#c!#~J4"`9cl:Z*9IAzz9__^UlV7_W-4yјI IN~;jeʴ$І>iյhIsb)Z !+&c[eKԿ`wg8TU:pifkB@!βPc$/ ÌuTWm>YQ(#?]|@/R,}<9 rhQǔ^ڬM/~ )#L6~$Z :xd֯osɕ /@2k5 Q~#\X3! shǭbR>@(k=\UJ@T LhJiGj . )ǙA{0f"+ײ<1.cL^Kf?z?*UA,Ruy6ߪ$wJ4 'M_s&ym36#T#]p#*ҹMf=җ/Xقh<k5`;8]qak^ tI|Z/*O5'JLk&sc(ksJ @8} %fi jfJygoI1;flq<=ןn=CX :oh^p<" \=ɐĪ]ddJ{Ʃr,( 1-g8*H_ >&o1dg&tBZ/de-_lU?[䄷![]ؚ3_ dǖ+4v PP̊R$&e#<,1wX.'i y3ch㺂' gۚ:akCй͉pP\ ~o w^*,SIGmT5P_l.^87anAD!Nf`4lT8筿_7v'҆zU'CNK} H38(T>u .J Lŗ-a=)9(c˙Ns;p'5Y7I)X~xj)+58y^G8f:ZSS7G"3-5ɜjOfM/y9%OsOA!9>@M]jeXe<%22(,pX22р0x!B(ElE=ef!u ״37>յbGq7! m+&( t3:\8h\ "l)K8%]9vY@ώ{{,9}_ot Z T&ϗ@6^"BWzvx(ol|J#ҭZ:/:Rk[Vmp;5e3Bp}ng|L Iuꥄe5g@Q`1ƞ4<kOT୘2N^!(J w:qX Lps_\13N\[4q'64m߶skuR^Y㘶2ٵb?i|bݧ`3[zeԀKHQ3(xɾg*Mu탫 GfSqY4v)|bRZQJNX Wpeݛ#dpE!e*4FԪL7%; *rԶpe^,&37-)z$Ǩ^K; &סNEBܩB⮛!JyBz9µ3ۡ]C 5>#BKʴ`I@-2tV}\0e;IxNRYI)wn4|z@[t9"٢}ܜƐ#7@k4 D+DzB(뙾ηJ D!+Q"[?!$g`~Q ?s$=AxZ/ZI,VC,EL4j\tM@.1.G.*oX֖$DZgs<'^z.~̚3TS԰1KDA/>CQA 1|~ot%}ipD0 P9*p4s;VUhBϋ.Y)fg 'zO˿Lg:WQnhFI-'0XXNdF i3q7?@ ͜"`y/ҟ;2nZ6t*:\ٽ# MHG~aNO_kDxO! b8t t ୸d0{P=%"uZ)~O^(@M^*sN'%+TniG.;*5WhX4%x IDnm!xz<"1n'+KoiGѰ9_ˎjz>7 R &by^}ȉMs /k6qGMYri,ӈ%j6WV$jD `ygp%el4ʥ}2s$ =ez_0 66U7T%plMTZ'Kpw>eۤǙ8hrZbѩIݱ×] 1ADWI q~8R<;v%j$E;aݟD 5+gvH1%hYS?:KIZ*jt/,l~aݾף=#;qP򘙑r;{j/̖r<ͅ ;xžo5Kʣq' "Gn6 !9ySay>[!BNqGUR [S p.Yl)e'|gmV{{T<0I ̵vO7.efyXW"5#I] P5FsʾFz ]&n86mLP5s/6R[NRI cA1ڣmWHJ_s#t7"KA#4waJ[zn*}6BIM%&$.`ZuQZ~7#OkR.ucFֽg=szT-yUɷVDf?t08^Õœ=O4=Xth5Cr-,}J0 > ,p?Q " {cvsln,>BUM;M buς"fNI8Ӓ(uT #hCå|_4ݪsؚR8 Z]X~,氕zfMLR DKW|k܆Hfejy>.$>c?A`-9+vZQϪ\ Yxϣ+fssFص3Gp;^`8ֹ> 2ߗ -.)n J_8^,v\hИ|uG)&J>H5-Y?%ш:AhޤE, Lg鹪[(q8<8^RsX5lsG4޳%;zl~SO;US+^miP\vFEGJ:SYvm@<\ )Oۙ;a$$y XCHʃv:wa$7FN@ѭmIL0so#E`u`T8L{|<o>W#32fΉC02N2<ʚ\TnIyP`^$qY@ 1T _BTO+VKS2㤔;gG$3k-=#@<Tǖ8IJ5pfA=6j&h^D[܂gU? %$!~v]WQG"PLW,>oW N7T 8x,lcw =MsmţğVf(.gz.k8ت D^rHXenzU:KWXQbRlKlNt#W *E *CLtܙb0\QPng&}څHRj/+F*/|p w#gc1:Sro tJ=t IÕwo<@[t;-VAB̰a"ݾ* Um:wzJgчUުI zg}G|I<|/VvXR*CXˮ0RDU{|^Og}cF8K/~3Wnp r=;b{ :{ qȮhYf1^LK*6rWtߴC!'%'n\j^-Q[u/%Mj8\r'p]pjdȯFØ!7T|S;'̄|^\L=lCѥ # h??aR-QevGp|wT7!鐧؎si|al^>1 db3,J!yt>wf1r#]njyOߪCD MjhۀZ7aHe\ 6sJ&q~I1+Ua5ā|Jvt]-ذH=(tR.0=Ya]] o%3|-NtUBJAA';K6'=SV*Yҥ ʹ% ֈw㸥p,L6#9"LZ$N팦гKol¬O@W n>&egjL$ X,l >!5t3 LliAJ,w [QbjVgw*?ַ5*6wh ?Ix ,8I^TP]eɻ#or/Y w@e~FQz->xwfUZځo >BX^p߷ Pz1;!,"E҅@mo_ƱR\kKufio%>@Fò o(O%J"ךGZ^u,vUFWVk3:5yNb@d\>HOy3MUA8PL"[ j< -L j4dՖMVK+3fT]{)[\?cg(*XyzT⬡P[?%7Y{w _[gz 0dSBX( b;] {ywxA>'@$qr ]PK[~/Z)RhVO,:HiAR!lDOyp&vM_y"=Կ? r̲,O:`Wgܶ&M¦nV~3 : KKn%Ax[rxh0,5'})lE:Nȩ66e2T8gCt#4@䢴o4 jݲ_7 *mD`4 c^GwZ$'m3(b1K3.7c$0<ُS4!`x5CT|=Tf(eڭ{fФ)e"\TMu:V%d8e"&U&![LSf@Vg4gyJLj(LՌ4ojC,jcsL9dKt +H!5iΞWam"3fJh @ 6}Jpx+)b9B1*$ }W/J@_Hn|[lxrbAjn$%)br.sADt)bctmv ͏ش)G3,dPYDKzLND-4/ {s.p-@NamcMҷ raBձ#yi{F$dFɿVi*p`AIC<] g bHtY~-rK3$z iGv~EQzmw.<6LWS!^p tfOR /"o=$?W޸W818Dᯎ>q.TIkkg2AvvXzmI۪Wƌ Nc g3MYSM+=BimS#nǴt݁6M~܈~r,(}BG k\v.]}J'j~[¶-/i1 ]+{J~8nyaQ+EwCwU׮A1|ef^+%no+# X_qG>bmEC&bvǺ]:S-TB@G^4~[[(ϬN8{e>';Ŕ`I=I/ h2̰챞oP߅,XrSA!xvW&MP'aZp&2D&?.~{-K bU mMHbtBwNfI@*:t;NEAĢo5cm=K׷0eh:þ?ƶ% K=To& Q%zpWWYjtP@&J7]շ=*w#OLfz&@<'ڊ7H [L .;pV(E'?ٞ '<#(0 p7^b9ɆdH RFQL2؟#|R龜E8_C_'ev{ D.@8 Lx~`紸Q8Vw=b+qU80œ`8Cn(^R;Se#<0 #yV@(j;)4¬Sw/{2^.$E) YOz{8fyM5Uw_dD!021R;mi09$BL s0R걃z {GMl`q$!ND b-1QVuZHK|6vYKterXɴ FIBUGݝ{'.ppAgofH2~kD^q'aoaV9dj'OoK *Z^;Qc7LYniښ˶(݋de W㴙[&U15 /ޓކ})ȎNgPGT-=f=\0 W_E7rvt6~Sі|x7Ry.h_OC%'-bC%K9R~[<7SH 3 YS!-sMk1 ;iPW!yAWl8%$ B#4eZ?nVq MV"¦jJ[ De Ao|xB(?>)D팈RԤ,sS}^¾J"<mtm*08$q;"K>?2*=@l>e,g|P{ I`wUC ^lzP@sX1K$͇(:.}L=K"Bnw*ߴIdA(0 m&P֦D(mXJzmNTGrM&U/ٞ7g[r -&TUĂT -j t[ߖYԔAv @# HOk6;җ{J0cgbGh0[ `ntJL2{caF `ދfMF-y w f=FbݤV-0K7UaVe4$Zmbv;L3qONl; 箏K ŶvÜ7I3<~?45dge6^ۀp!L4>pҫ'D-8:-H`#mtQ~2^pdoHdqmM[otf[Buts9M* .ѣ5L͛FJ܋FUd`XV_hl}Wʫӈ-ՐVwR9cX{Y9hrCL|A$ $Y:M/H[}Ɂ>oY-0 aM%8T⸲#?c ?j0NGvr4'?vvTه/<' 8s[F0(@V|a*v٩y^Kn"'zQ=$3RnGx.dٳ3Uk KDCuKI|*r*^c#&܉u*;@#pښH+y5SN;սW~ákHI(3H9ZU(Wۜw< 4QZn ,#6!/(ƫ()=9TS[p.C"tÉ;[vϼEMEg*K^H،ym.~90R|sKB\@9?TG'f eXc=(%^:c>%be|\Uk4V^ j)k! Y!%魍 CPi>8xD& DKtX4=m(S3y WW%c~#Hy>[F[7X\k:hB]$*xv$扮g̢ E7:bXV``$C4LFJk=ٶ`kk6[Q KY>=>7mNGYiTxŔ,%?)] 9p S=`=2u 5$;C]D!_?ۃG RdYݖjw)|G|k3Xcj>E/G` k^$ߢ+qk2ry ʐߘZ۾/q it¥#GJ B:}٥9XWT/'6Pg&@gS[#zXlSǼz+^kpo єnmiԌj޳?r->&u `bO1c9dѦ8QtWeV56R@ar';?_ڔyx͡|NCr(t揫]Eۙ @ƫ"h6IBS6lC0/Ҍꚃui)S8LQ#*ڛ#^g'bC M <ޭ5} 41DK)>S$Rok94Y[l:K׻oiO݋u've܎eRO7L{օ0A%NƗ]V&"ޫc*oZVÔ@(֠ \FIFKW&/@A@GX#)"0k>5ԖrѭA|>f8g$E+p)-EonSTm,:}Ī }Ca5)"Cv/36H|Yu*I jpl)Z~Az9@c]$ 5. ݭz K͑ bedTsb.fd{[7֡T! {:s2d1[w5*ip ĵе).(~EN}pR! u}C HQf9ك9X"~~bggNRK ZsW*ehzgS5(CE9< ̀!SסMaU5m|bhmTZGDӪ7Q-GTRcks_22Bp1W3;{'#%8JEݔds,ÚBxjk҅b^3Ӑ)ly^ᕤvzV4&!}$o! nUhpE{L8SkN~[ k rA[YX,44x. P InhfGqLgcݶm)o{@c|ztKEYTKuCd w{謕7_8izolorqY.\:=f@\S|M]!`Zd.7iSD u0tpBv̵Y"3D1::72B&z wu`s>F}>nA a#y)`+]j]1Ō6ustU$7e|^ 7hVDDO㺗m"9]{_~[d6}:j;|4ɚ˗zK9=I]”Ĺhѫt_c\R9FaP8ef_^^5/n/LfE_ze N[ e.:8+ߞ={X0Z{2ys|eCS._LR!6a+g$$-$' n S = 6a) X܂%|4)\l4Ԟ!A)eş]1V^!&4 2A ?w:pٽ+L4R&2f*?^a= eZ󆪔u([;*E՜6W"~VT_[`BDŽO[E Y@?k~ TBY*ټ}͇r`j`Ą65WDBEӳ}*֘1I?էv=wLu7Vb|O|OEV03c"ݠLʸxtʮe-K1+!nMb^M%l| rxq#o}>BL=e +[=ÕnT4!3q`-M7CbAܨ>}Ip]]odW<} \Eο}KϜJPsiv3k3B`tF>DF]^07cuP G3>:ŝkmr{=ټ.: ~#{lN ,BOos$V)>]XZޱ\m| .iS;Y0f!B=忛a\D6rP),6I[ԶSW/X̱(|qL Q3TvCIf(Taə:l#EyUKAkɬ!T e؀XF=?K^,)~շ!GTz Q`Ki'&,n9$s%';؟^ 2Ha5TnRkt"3(iU/'J'#);o1kAwj V gPWBjIw2]cq}/9{^)pJEf籖8?P| -:l']ڑ%j7X$ϩy.+$ד1kۆah]E 9t%ɰMHʝES*0ͼʰch/ BW3etբLħ|/4$LU\s[- g(ݜB$e蒚IDZ5L+/3fPkx^}QX=͑J FJs1t ۦ;9V^aɍjw{r\DBW<#p)\|d<;pIѩ#cPjuNI\3\A_flУUGr'l3Ͻ IQJc/ouSNZ7G7k>F ڟtiUl$GTt۴絜v :'R2Og2(0EQ,*&8NMmURI@0?g͐Z}6z4Hi}qgvQտaL{>951[oQTxPԿ⋎/Go>} mX]髴 gthz S"tpl nQW7pn/f/T:Ԧ1d2/~C\&*lTY9_A3N (/ "7Ȇ/!iU~߸# w/mE뮇XpLrprC3=q_9,y|wMƼœyB"ZOuaW]2y.''VHX`:W1]U,A\yeJl+T;oi0I٥"Ew浩 ${.VRiSHyuX| ןB&m`UeYF~DNo)E ߸ m,;5cbygdq(a3F =q?e8I:i 0],jZ_^1\yE|S:c&HS2@`V[jscd! Q$0 `f UV_ Sc$XeU N/Twurb vݏCJ>/k{Y#!,5<9ӹ4:=e'cSeXٿQ .@.`ޭ/{یXQxk)BnQ]֖.[Ou&:ס𙰧aPbҧd}N"hl!zn2oIJkco^ύ~֠> ݅7{_&}` -Ln.PR_+?m8}4b ㉹04Z-.'3Z_zvd>asI-%@ޣWa&,r}k`N|dIȣo?Áߎeddxx*.pwt깜b"a#S#"@ګ/'zC11Fk5}ڍ=]ħ)TMQZ]!DAcս>!X3yLoC@X ǸT v ͇Ҭ;#aut|J-ojpe>")NAaL}ke\qz1W?}P#A?_.Yԇq+Ѭr<ƖIaX>ʂS AO?Ӝ$@?%&ᇰi5 G/OΎrP9evh`.8u5䩸`RO$_<̔>1[9`} IJ3T :*e3 =t魜jҤ 8}L TX\(|rFb! &r%aF ߙdZ)'`}sgpO298Ζ'e!8.Ccҁ= >:#XUD' >ide-x7}V/]$͈0WyN(QlnV![)9z)t8}AbMC=%HӋCa/ } ۍ1J: 9|d =N2ɅSfKTVFnl>Z)xw;}4& [okAPQ p0~{c ffpPrhoE' b'iU%%n%x'``f:j:}T5/h* Z?|n5DOIL?i&fUQ)@¥%;ao^FG-f}08Aj yߎ{(=# YeTwN2RX,+]aS *ym,kWd:Kk]@}m$g):Űl!/żQFs.ha& ﲜtncqwRM^- A (b,v SRHPbo<,k Gy"Ļ{, ZG0i$\_ u%l7/ kX0'`&K@ɩdAQߝ:6- tF_Vm9~.$Jl~(ӹ &=n+9&C+J-=6R͗:*'IZ3nڱ-l/Hݯb"(/H"hIu^o =KgSBQJc_ ܴп i9PT\2C*0ѮS?̟X<'TtDoCq~}od&e v xt# u<=,&7=<* X'A jr̭2'E+a %ɺDaC$v[1.ny}E6  z}sט֡9-bpj  ?dFtKN[;w3XfǏ nj !m1 Z=vȰ T@I["8 iC4`MaZ3`_b28)IlR!W(,RћQy+fl*̶3X[6#Je#7Q,n$RlLڝ5`LŰ,-Hq/p)hf#lJ@^%dˤɆ{e­鞒H'ɢGЧy *4(0 RQl{dheD͗]{L"LUzWIZ%MC Vp~r}pb8b~F>2krAofW l8SG2ÙT0RԄnV%mH/{;uƸ:i,w[O'St"W&<5R(]=MS!nwhPcf7ʳ/N:00@˙G \RTP^@Pz)_w0t| M1]6UhSH,@ m@4Yza@Lv%Zy~ŵLYl̚R/\%L=btnZaEO@gkj< KcjTZvXl{ %uS+timu"t/~P AoS<׬g G"o >鶟-oF=dj,,MywUQ &cSKC{߶ ݤ~pjBW4ETțJ۞Z 0*R Ăe"(ahߓKT= a|8%fbgtS I c@ i=3 mO[VZޚ2CMs*dvQ H A\u Vh,nDxԋO{J-p44"Sݐ$lp\?ʜ5.PE`a•Ng%gAcG0P@7ĆAA DG;f?koU-]N!ZiQ?gpFv# ;' *n|+˶.&ɎUyհ]^|$L^SG<3{ z Qj(L9XgE, ^$o4 +m=ϥ]j=ѡb3j&bCT98ѡAp*] )2dpg`E3l"E\E>X%|wz8 ?JXG-ۮlbMdK$u*ˇX_AhmR5A?1m¨)NJP7q cKkI A'dp/V/ {@Ta-[iۃgؒߺI֏ }F16?2P_ЎB>[NT6A52 NODiNI:)/":S !{Ȃ2zWL :8)G4.Xݩwc8voʦcSi uu/Z6 v+{X>jV~]j! e}%k%8:PU׷T\'2Lu{WWu8va*/<*!Kf%4w`n 5?Ӌ!"Fq\esK,zf2,[]] 7hx{C 'ira]#Ԝx@tY~%8`EVԜbew/HS$b " nn'2_rłΗ|MSǐX& hzZgdgyCimעR݁vT<%+Su?iE Z ҿߡ; lZ7vrY9~ə"zrP/o¬C6'uҍS gҋHA~h&leedI.uKq?￾|/BTZ=b#m{Tٞ~ɡߩ'RRcP B0Bѱg3Z`=Aadh(ur,hINrkPjK>HcĀ@&h';6PPr9 GUJ}.~`oL70\?]Η4c64 r BCSXw@Qʂ"Cm%G0;k4=l6"6A,װL"Ґ*8Qe RE萊m̧ya.%/&3 wtsiV7hλCGP>>m}֘K6X{b隿>~r2\$3 PMĢ 弭jwàexL @?`!"066eQgw: ^8?sCX\X-%^؅1z[w:Z0N+Elj#Ѩ•.mBpm_x \b7x1>4I08Oj4va1fX ś$'.6F9; y87їhO|L*zh{No6Dra(!o# $ ع~ϯC K\UtW8 d\ |z"/*:Kt`wz]'*t}}MTBx0VS?'{IqkiC %nJNodc"='n$ !`5 [+^s}fDXY4_z'ZM<ȯ<{cPAɈ¶i: fr^$ Ezeo Yӷww+ /) !HL#>S (_xtf!N4_S@[׌X?|4"i5JbVjl"mZZoȘTR_4U.vn uL ~=c>B"̛E^]zj5@1>Q']E5g0PT`;1yOG»Ư +7]BAIc&?:O9W6/\fn >[b +Β깰]lT5au;O*lE௭ ¼#h"/cì[nK -a.|1rՖŻ;Qz솮o- ME۞hóT5 h\;Ȍtf`՞)#ޑ^K1SY"N+dOfH#OpLʩ",K[$:hNv煦2Cp!8 S sa{O}gBk21Sᙊe1#ͩoq[yK;Y9$8′p,)VwQ7|h`:DsHjTsIs/jKixթai=Z7oxҥ9 O])AEtII32e7ޢ׮hݳČYdAt\0wJ[Xsӽ NǜA?)W&wjy}Cp'aU.t6_i\,*Pd(s?W?FV0w۞8[(86 hbe 7Wd5"wnCvyy&V" m#]8\Nlf=kN-|y? '0MTfSм_i} =[F,x ?yG>;V%1x#(5.H-C":f|!߫A]&)HWgǻQn@3Ks _EO}?*ᮌ߃Ķ[?9Z!E܈©8Y1^i6vq?" 4@XTOk~>>yԇU/pڿoRU ㇾf 0}\>>éf}{-u #"dr ܵRδ&ƦHK"tM'XqU?E5Co!3fW&SJv}~n"sHDŽ2[! MCS/RqnI.\ Q0usG#c 6#[4UY,hlU)˾9}++ЉpXjIqNIs&Vi3NXW[)lM|M˸HEt Н,JK9 %Bz%r[u\l>? PAYYU(B <|BtXiR0_4y>5Kww- 5aG*ݦF/pѐE5^|T?N9*'2ɄAu`ٹ]0#Ou5XuL첮*[#VRKqjVSfv o%~e7^.A TZa",0Ncɫ>v: 6i$ziJU~r/vqVRaZ gMonHIÄ$(F"8G?ehkdX(QU/0aD8ʓ|<#9~ovt</mO,}5aB9d~`o!E!e\yz]~^\Ŕ$ToL2-i_Y \{*օ&Y-U'/!nrQݤ}zODc>Zʋ#mN5y:/=UIĭ 897^fi/XQL;$ lT&M:cCJ z[p ;pexDB ɍn5)A8dxa! SdM2Icқ ri rQ4BXt"($}=XRB,<1ɋFNc}lbCE\gpy>7hj/~gxKC].{LD‡F#&B]iU$a0l؄SCJ(j60SQpӣ)':O_3yQ5\MUpz3Db EPOt?5rg˙}I!Y" Ej{}MBwKdKVlyV=4}Afxra!|k-JZa6jXJ}ׅ,L :2GjA.=Jcn ]@5?jc72Py(PϪ.LEz(tk{wJ} 6X"'s1N&}iβ~l(_sMV ;·g(A8ӣtRRiQ͇u#Z(J1*!RKajDvEL7"#kh7_1JssQ?GPaɻeZ@?] wX7dB\] w*tzi&v>,8:JCnX$T8&hCÅmU&bWQ* TbR|HvLR?iFKWr+NI%&GRq;gxn6џ ~亯u n|<`P&-N&|KELIOKqEUX>Y,ᡐ5U0(3 CiA218 rl ADHC=~觼bEc[QԦ]}9xOdTy3}\twAkPTs0ҩ¦\j&PBUJ$n֘JHF sCmOPewV;D-)XVM%Kdg>@9mT:X+0qc$*H!t71#tqyу +WG-J _W) X<(ߠAVJUHW7inFiihnp TVDfeS*Ѷƶjr[`{N̠@*SZB }Z5& S4%fME_1OAz4Dt;$oljܷ ` L#;d%`AW[ppl$z0P%Yp~N)­JyWɩNԽ4Td>*Sf.:k` 5alm>xxSӪӆ)vy 𢄊xq z*͔V~hcif{XLWA/'Iʅ2W?]gIxf8_#c %EJjg$Sm,t_ll9^b+ G{,M:DNF]\{?G!TW{8 %h¤e lƴ""hrŴ \5665ꦂVQo<;ƢyB fptɻqK$htgLL?JPS Rκ+}(^jFƘЈVi3dS7NyaMݷ~J$[SBO|0#LWI<6*Vn$\1=SHc0Wѩ}8ށťc:^h(v 5Y8THOD+v2E~!'ԇ)lLi Oa><$K~֛izw.%ynؑ|ɹ{kJ"9w",$@+H j= YgJ6#ov٭][Sg ?jr0?O8qn3N )R.캶M-;a!yXPvd:h9 ?pITjLpɔ?/&oۅ'|86V#. p{Mf.Cj$?>Z@BH~#z]i{ œPWU@ ҏqIJPJPnvD~.cv, +/]E: 4&3gce0pHp2C]յm;j_YZ;u_ t0r[_fw3lh .?@Z $nH&"X+G̎HI*P*T$t?yAxf+7z$nm3DzȾ즰t hAB/6.XW ;BsI\6` x-ID"h/RxGV-cVlU#Z/Q|eRpSV|P}pW2auggMXmp2 :=S,Nד"P7#{[W ̼R}S$O}?U oxiKNktJ'lXa&6opH4YEkYmYfDe׫HjnplCT凢CL޷MQJv+^3 '(b@u; NנQru6T9b QKN-@{ϳj3AN L~&v90Sr2rS՛IG!z2a(occ6ರyqҏimqOӪ@f{Kjx#܄ spe3m~KW#.N$@>'_vԬ𽯈AI2Y ,S#gnXdKl硲 |5sg2y8mJ(eV&Sݍox}P;مOTY2.{F,ֈdLCey9ΤД[fvPew8)csR =YOs,zgxvH'u3fCRt*,ň2 %g5Vq8 =^*"9  _2-/m4YIz^Ś ޘ}{mf %ͬJЗLJXQISk@yݡ2՜ HK 2âsc"9>E' 5!!~ .^kʈ}Sߍ ~D8@ѱzJJ#J $Dإ^ *vIRw4Ş *=T(7q{*Ĵy o>R/ u *Y5Ffޔ;VʐPCevq}FCq]ChazCJ'{2L޴2C̎Z95(9U8Py-)+!ȔďjqSd3@锈{~D Nab?RP\E݀ Ҟ@2S1LsrMZ퐦Vc]GOW`SW|^]kstvz^ @RQnxsxs!: jh_C +HX'OA9\޹9M6A:20`Cj) qwB3Ƶ(ϚuQ*R+Tnhm_D/KGW%?xzs<(G{-W[4 e9>}K_ҢZ8*%$>FN-0چZ Gg/|/˗v5Wa2Qf+򶩣ya{aZo@1 *-̈%C6ڬDGT ~q4)Fx˥IҕP/ST^ƅ4he56E(P& T;aGeL͑Qpzu׼3P v:2C),5xlЂס6'>l58UG"Zc !邰5V3/QluI}{:hǤCVoǩ`d+k>hL~N u2maiܵ0(1N }>o!ŏfk-->X joWgy{`dSm`P70i\αKr{K E,ǿek;#x@J1ߪKyE>E=aG1n[η(zB9բ$ew+?{TMm$;@x]yke)0]Y7;V7p+cF>8\x=ڊ[ 1 x$H/TEEn*]YۇUexO42-udn!I9K:ZPc.S]jEއv*, ut@m>:X?2[J]d-3H \4$w m>6>_o oe2J8^.;N6쓑!iy%TEXV>b@ rT?^0Bw@vf$l5Qo9nl klnGCM-XX! GƛkD6[ &-ÖYUG3jCd-I͡_ͱoJhJ%{uO{¢H-|+$S?@]s6-.}6@Q*c흨{E8:tΦѵ.+7QFKoPW^i{hEKݑP;AMl$ҫYQ1ۥ 'l S4ĄaZ.l;lWaՐ"F~mww/wL?uWG ^dh mg0#"sKJ\9e|O4ECPq=՘wX1de-){@"nk*HV&ewߒ0hkAN-Z.;&q0^;wL uEҍkTDeVJr5':}L_rS>,`ņ֌e۱Tr:LHM*}~2o6w&oxzA7 |y'"SL4Taty·'`CgB[UȪ!yQodc+D y|dT1+&LѕHf8w Tj%՗kR}0 f>λ92adU h_A!4^X 3M7gaw efšgwC .-6|Gcn#1 JOVWC z]&"7s>貦Us1Ҁú#jm|.[p's=;.H'Q Q}Ș%H3Ϣ|@B 2QVFf9[Ec%d]1f7ɷe5ٕvSCǁ_jEdKF ׼b"Ag~t%1E9Y{̗+/Na?Й3}"-Q]?T  Yi)r XN?_,OHW>F4ݴ֒`OʖLi^q*_$'cR$uD!)U&7N'>ŤTcvZRa=u[%A"W"VnKOh0Gվ Y,Wu2%wd618!-pjc7LJ*EBb%"1]=@:c}IIABf,0Bzj?yo{8t@ x60Nqw|XtV}Rz3z(,BcYB#vo J:\(JbfKЙe !`tW\>Cf5?Zg))%zQD!ymxr,5\ɀ*#(^ ;e5o}(n?_%/+c1p F7ih(d,i  "TX>bۈvώKdbWz@\uXwHh5$aU7_7GC`dz1$ݶ5$ k}UyԟǴy|H!|sKvǨOc+/pQ~?ezE ]`Rڵr@ M @0ï[g1kl5$$@4{^bk\BYq_?E/347mREa3h=2ChC|]ǻ_R~k¾H0=w6HGGI-Zzo|hbY & a?|, W(Ҁ~+ vgl>8) b:\FE`f"2_Db2tWv?jجHCYBEU4~ >bCh{2ʨ7TL3*ˮ9"(;_ ݧPۤͽ0<ߦ4*ޞJ(ǂj*/ՄIG|s{ϧI`^Wa>Kpڹ0Br*’M"z9g' Mw4n:vf1;:>*:%sv~Ir?r7[v6FS@޾zQ$L_)[, ћsw&6BA|`C8k`[ ;Eq4u* =^jr+ӀqֶKVcH?y0k!`B~uGqM#Fwm̶|XĦۭN/-䝃H\Őo?SbTtV u'aFcz!i5 9 O7 A[\ ~HOD_,`MqCʶ߁J&Nv "XmGD֮sW865L:3dZh1foa~P_sưۯl.$8]E}n(l\FaIHO\/|} 9= 1?E#L7CA(pr.q_B>Th&u +wj*B+O9`vǴErUGѤihoh4X1ۣGA1ތRdF`Ս}*޲ZM9!9^7ub~7}5GaTeW:Ʋzu CsWm~ץ_|V4;v9.aƐrnd^H\a,10_;P-j᧨{E'Ȭ?03|SG-G.PT{YwBP "8 ҳWe}kiD5D;3eke6kzOW: +NOc*@q'~zP F Ȉ(;>AuLo]ߥz"B53ш.Y.8mVryx(He2W G1(~VndvD`CU@n"3h;m k" xSQ@"q"Hl[$6yUE7Yڐr.2T{j酨=6 =QPk7x!荒KdmjĨe :0 fga3u-;~O֩刅g "hxKCp->~YP!{׈ n҂t rm|Gc_m4~~;^P19dpl*lѾ;Gdtفc*Զ6$]gwxpmE x?[0>};RƮx/Ң-3I_MWYo ]RAUHsϫF M0O0mً{4|G7Q'"yEa|hp\=S4 h&kGrmWp$\M?%;c $Nct _kgPʌxY!~0$Jߜ4'{GeTH#;e 2Z! CO⫆jQ~uNSq[tF*z@u ~ gw ԁR V8\ }W!7ǭaAڜ `bYQLχ% Z-mXrt}!+ 0W,㭿PQ*ѫZnzm! >1t"iC0 ?kZvi'F9o~|E6PIMZaKLiyZFR*35hF1MWGۛ!GׂmΎ_J=3-qlF s o\5IHEꋕp&%ۦ[n n{jHQ@ܔ>*n쳖@:~N2]ӷYkw hYj"쟯Vjf 6 zػS-g_^ :1}WO'Whx|Wva}/ns㇧4acqjY[|$7?dԋХWW|(ٰBbhF *FfB}nҬ'=@EsDN\\M s4e7TQ_1K 'tn‡B];*ҕW2KAW‘>Ri|7 jM+9%!b,r U%z /ڱlroY` '@֟SR`C` ȫYHȻ5~=AV%M7͛Kbs;xʚAͯt+)zcMFFVB _cgؕfUB9&&, 6bauZC _0uOUP!L`M&AܗrW2*|(BfGP`.Fx*p366Ixk#KD%:&~,u#goiaC EVl(6U(?\N<R~C W-.PًŸ '60HsrZ&ZO\\<TަeOd L_Fq;El&R{0{aّ[f<+`rTwY#5-|)j 1$}ZaSEϑcǓHVfC_IYy@7K9YGᕄ@J%_JmRN;Lg$!SvsejcƴClϗ*j;붃.pfԀ(,P Kv't8?m [QZ+pZ,ZP{g,3=H""Ku/ձk_1hYsmleg/L)[].NN|ze.E02o] ʏV 5GyQԦ%BFF(*.0 _lr33m$>Մ!3W_JpP3oqU"եר$@XC<gG_ P͊vc2`4h-IJܚoVLZP$cd./Vl{aBמ.Ҋ,> UPK!m6Hd)+`-IqEDDrq ]LA>vzeDo Ԙ$gӯoُ?wzP* Z(KPBx=O!>[ٌ@ u{~4UwBb{:uHsVupl ѯDt5}#%y졂Ol!9?AQ8Kpdžڔ@{ۢ֜'uWDL؅ew@ n;$_&>fN;wJv#AL "-eR*QACBSg1C %)g0 g[q%EBRvjkwvBY@DX>%~^$Wyq ILL3+T*>6v߶} R~p w@t}1J-"1<bQFt-ŏK-F B,WHs)Zt+r#R.ox{Rᖛ)h{ [4J?6;*NO{ =lhɭ0XI]aڹŠmuĦEOң[w&"MW9S )E4:z}&!4 $8Tbrk,ub뎽 ($pxXOKWe(g JL (Lw?@oe.[ZcuAJ5{TL'3GA{Y,It "Y|֭[)ĉ46:\Z'Ԫ7qό/¯u, ~h r%SH{.0txUDy]A!e^ ?:"N߷]noxw29;n_HҿDjn=TwBOt8zãB TA'm 6?{$>!vjS⮢ lNBg;]OvGJ;#nL7ڃSʥߝ 5jJ#H [v\)o!LAD H^kL9d1nm 0Kr˯Eq%Y6c6;_ 'N?r>zќ_D"2,2)|{9HjWٻ橽9{U6;qKD 1UtrZ \_#mH](M"z%EP*x 2jRH@.44;iCe6^)7htEt1( t2qto&S :Z32'5ϾK;SE%o%|#X6LC7*n1<$.0"/ol*hfuX&q#+u)1W`eSs*cx4m;;ѩlkUffKf_RMxmR t2&Be _Wn#X2VeZ yOR^[ZAIzb{@6i\4s,5?3uU9e/?>j?he Yw֬a৓EiY"1.,COF*r* &aBC!fB%Jpc+g_'6FAqV0R{ MUG;UQMSu J3e ۉ_k'$mk6IO\^1XrvKr10d\o0#dAp9 i%'~GlIl$61SE`t>!1z4I2d$>gdcealIC30 /u_Պ.zPz>H}L~̔7{TC՗BNO?|+`2"bcO VRd4@ŴF-sUJލ;A ]~þӏI)vmJ43! ~!U}dh{A}1?Ėeuf-KϏ~D#'hS;pe_jA+L # k"%Ɨ |d7Gr:^G.)ZMamOIosA)f!ϊDab"(*~4ZsW.9AߵϙR{x lB[يR001,*t>NFsa_bwWUk3q(B,3/GRa,vW@bdhu{A\WIk{[~g Nw8]TĀh\tŠAwbG3YzķV-9ŸPTJ[TzGIMN"'Ro8I^f _Ex('!T2g6jK.8l|fJ$_ DE,k6@_[rRՀ VkXI߱]^6{ԲII'߾:1ao|9TWN Va !MjHgWoVl[%(^JUo싛ʹ8sz9GM-G W߸4%®4I=ܤ~z&H͗װbff;3TieG2;z[;b{s)ơI7ki^yd yﹺ6XAV~YC5uAP;߽ttP{ $,7Q5d4: Ǥ!x}Z^tw o$$쒾LnmLA)/"|A ddL5prڇߏY7aa,[_vӵAWz__I*08(HIҚuY}Cٜ`Η_s``X;xgpcH9s윯%:u$y)u#;J󋥓aƵ* .,|oTAlZ\; +؉w):lS.H d[\ʩńAv*5zeL1J^YMJL%|}-f{4I݈`,y_4NWW5`o s7F*?p%CBFU/)NU 輤Dy: kd!s@heD20ᒯ T~t8穃w/Kzx_I_(v7:rbV@m:FQHnܢA7DO P> lOqL1fWL|C(l}V>qKbA3 'JwCFYh>j%6 O@l=fr7P܉4(yɏ,3 p`2&7-S ))z>AV`A"/LJUBڿ)_Y~[s*8fp.t~b9RZ7wf8"ҕDCBĴa-I4w]uv4w ق5~pwOta#8z3wgr/ 7#t1𧟇XE #o2G=`Tnށa3(u/T\r&g va:d aEBt^!U=1H|?v/wL#3Ʈ]yQB ^_v"-t#/BWVOB2O9Zju _/'F(6 (zxDhթ7 ơo#wshM򪴭E3?gdFH:qTOqmOU`h9 O4tr:ymFVx}?sR"%#ueşe6ooeR~\۾#[yy<AQ~ S[#GloS8P$,UxǬA@${.,H(]ta)涺 y@BMRhF~yABJ $}ՄC?炕0Lgx1S"D.COl>4K4!|C~eAAW3S}({؆da@2 !#<\⬯n:\-}ߞD}ջXlbzʩ!\S45/%"u"ݼilRnyRDnX/arQsu'XK+s}_;W9 uoJCOק5IqO F-[fs6bKVܪPYc^,g!8 n5{3M|:6C# !+c_%vhXI$Q9tfI; Ș$dO&rwO."8y/JH <>a@Tb2lj2ߩD'[MhQՀ_F]Q!bvJArw@FcvcQ1o4iw`Hp~ԾQ) w$޷ BslQyU~L7RAg,mUup wPv㛿AO|hVQSH LYW`!!&Q_ LHؿǦ(>#YB}VBPVPLQgzSnw@73{,7X|/s &S~Rx[#ai'm.;OV rx{QJX(ljJ0ڷUYJZ!(õR8~̲RmIi 4)i*#9,=.uGe3.Ady/x[_jF ي" kL2 PrMfRWtkw$/6Ȩ{2al}=?EG 5;`ntG٪<5Z}>ԃ\ H%'_Ch@6b?Acײ3֜CR -B5G)<3&3Z4ݢɶs7O2+ϊ|ZSƧ1YB?TVNK"PRNNu8ݷ 4yc.Vߣv$RGc  θ% >j'pRY+ܮgztt{O®OEըj -]0 5½omgW񶚗+xYxSk^4pȋ&4֪–5yIZB=p^8j[7[b `UêB)n5N+^bYf0dE E IAYlD)l +q=1?pS +^ˉN*~K;xf%\ X.Ii h5D>_(ɇ>ұ95ƽUndvlHm| 51Jұ1]ϸ lm$wA"2|nm6fL}#8. YRC6=I9: };zJSγ&[uuՏVrfyD+-3so'q0pP\r~N>#嬊vo*{i%8-ǙG=mF(0ė q@;#W1JÝJij B!$ b`dF Ml * 64WbkJo Љ3[v1>J%d}ZϦG3&3vXP&JP4:Stpa9c},gDC) |ѨA /V(l{K8s߹F$OOή(j|fyƱ'J \؇zvx#e6.DFߌF5`#0EC^Rg^7.ڧo֨@9kȊ؁qr>?uѠ1' ;APIbppi1y2M2NXR>z lʏUJeF <]TB;|K.~)[mj-vov#bŕwP$e IiY`(-5mհR'xڃTye曭Pp΀NDZZ Ӎ.(]nFH6y7~wYOhV֫tN&yUy$HT1 p'gqH's,um>h?3}k3qlp9U r{\GM?UfcbAQе59n@GL!@/tWQS2LǾI۠©aC,KBW򍵭[^⑦}|a*{  ӊ.&4ۨz i sR֕;mKX (`?d~]y򦍆XXKr}Ksɥ9X^.:z^ H?,_'ɩti(>J* ;-~TO5X=_E p?A6]rxnx뺴8PIsQ=7U }G(isLg\&Ṯ.W#zV431E5<'ܰQ3Kb¢<6hkcIyݖYӗ7=akrs aa7D\$N?/H1^x_KIk wR2Кp `1ҎTӕK۝LU0- G9/ltN_yK@䎩 gj<QsP2a9 хZ*Tx%>8E9P9jAu-=b52%ֹt$+2$ VsٺEoEDNCa0;{8"<ע`)&}3$\j/Y$#Y*?$ # j;@~#?e ]ڳ#GTRDҔ ҫPQ$kw8ؿZ~0I\v~s6-լ2#DԾ CG4FIaׯ%G ^r. ?+\b8+ s* 6$g6#C(}y"7{G@@gװd(:q jD$jFpm A6(D@Vz/|M/Y֣dGVTӐq[efy2lM2.4X2Z9A`96/(vCJD*a(O8D۹n&PWk"%&eށ zyvEXLjf}76Gvo,!>AfFՅ1)J3JPچ6DJPqZt{S>?%-5`ekAlĞq4NcVP-|[_ BwEk4Sk]wFvЕ(nO` k#74'\؁msLd po4ץ7EҴ`L ZcSB|J)Rrgu$I鑔(ė?XzĿ|SΝ+J&ټ;NC|װ5qÀIKSZao)1j|@bFґ8ţY/{8RFqZ-M.Y)$83(ӓTr -Ĵbj}lPO\;aK@87p/jIAcbz^I(IhWn~xI5@D_ U9>40pwrK-,NE]@1*5Jn$=s%M)?YbX~T72K-`d$Jn6/n?zC.-MV|7GRɶ^8'_oAtN% uV! 4XELiyʲ; fзeN2ssxO%j)jmܠI[ UcrPL:;Tgpl,"u60zؘ { ˱{T[2JcZHv)8aVR3HDcؑ^Qg[rṮ[%չb]NLY, K9:5ZNY@%PAJ,qIԴ:ȯ n{U)V8sQgÄkA^T) .ggL2d!) aҔWV {sbOD"!pr4< ?v^Q1Wov5-,@O_a~(!iPjf=:sDzqp k(HiэZK;/g ih#t"D5$]4ؚ;}la6`Xw( I)|hj&I(nC\8+2SL*ovYdVzHKdmWSNH{]%L wqX>E 993 MO&a##821iX]/}=C$酣b;hT`hgZZwq9q {lcC%0v^1KBehè-M^p+aHiDSө5/ɹ O ,U-;*+8eװ*B"00 B f$/Tt+?y% #S\K+0q,p\7o?]7vn:L9 shD+N30ۊ_C٠(B̒yԯ\{n` hVsA8!I !YNgHW P\B ]\'`~j*'.H/=b/VAYDWAGu JF@3\JK$@VϬzże$N@Q*^ f),4ۆ&U`'{ǪU;H{Ni/gM7~ ` qS[1xvP hfYxv[#Bu)Q}0)B쨅E-b}Q( y*Gwi ;)%9B@+`3DHg>md=c mrK_0@6ՠ"{ǂ Q6=4QlSJCG7[, 6|ϯ?"H`>klIhq%rXv+n7E~DEBd<8^"3&ڇT/0=})1w&/%WZQ[a .ɁiboLZ]+}QSM=NWE[xkNNZQA<;BXY3ŴS|ϡLjUGk5 |D~Dʉf9b;.Uaܴd')+y&H-o)&%mh[REG\RԶ5۝m"^Otbײ]ּTK 4s*Vr“+{ǹߥ戃Ӎ%oYqgťaurس&/=-O1#ׄv'bz̡ĺZÍw*A .+ȭq>;rRA[=a:0!k"_XN2H(!}\xB~ }Q k \'RQdjֻud,ʼeDq> &<'.Va>[ :1M'J/ e$3Kӡj~qt[c]GC*2"b0.~V8q0^jŞC>0J{Q K2|gi2R U'^ ,BZ_+%3[M:D95`" F#aH2mX2b:]ϩ b#_(@o"ў @1mYM!D{3%xN6Yh%ݗsy큉*=VH%y9"⑆h~`JI%G]䙮aBR_\se) 6cqGPwyuS6dʆr5ۜkl8,aB K$,.֡P1hsICBj=Sѩlqo _ւ B3-L!ղN^.FK8:+PNT%ӸiI(UՐ{jtEgPc9[c[%[綨HljgH}VXah+p$Oc>߮_yPx(`j%2%#vsIZE6XˏpC/?CJ*MJ"mT(v{ KE-ƾlSsLvAEƑ˅ۢ줊/6tQW֥BrOpxQt`Tum%)NI.a m}>켄FĢשhxl+u0,BvWڢ UouCÔk| @G1;!n-[lkbboTO 7Y4յd%)mE5SNJ נ0Vp)\lV uNTPzٖ#I$+%14uobqn+ܒMp[Ј_Y2d eΆFVDZ11Jf5AqL%Z}&;ZWhQ߷;dLD?V;j|ufcI_s c*dM5^5E7' N@6+~nRx p~]%ը i[OSS^'D`;6I\Q#O opkm99^ "#.1].LA:˵-_Wp@~O7 H{I6btuW=4 'cvj{+.9 7y03wpM׿m2 \`0THY:sH Hc"'5W $l[r 6-g60F(&Q<)4y-y ˥㌌%G8LQ:s6u?vJdF!8i&d:̌\7󼫖2lA3'}Zq}:*tl{~S*tQxa  .'܌1TQVԺ{,t7直֘LQqjk⠮O˰ P t_༳F;ecnVi% ;.kLHI䰞[Y`z8AF1(2aTL!m\0݆n(>lvL`#2\P#9*; U"jOߞ݀%,k=4wSS5%'r@ZVhgh܆ĝԍieܞOLӱ=8m_5놙jSK 5/~9D /StLh'`<:z/[V?iYMw^.hٷ^%f*3pU"*$FmpQmcx37Wd01#76Ry*&{rߙkClo kP>'gBUh@M _vY6, *Kc >=}` J Eðt&~l u,9WW+R2eÍdj(@"e/'1 p otMR6v!O*7 KJחVvdàKo3Oh]@giBAYXIʢUPץe`ˮUb f]No`{;c'e^[RbZV,04ʥ+J 0(ofYx LQ>eHڒ#l*/˵ۤ\BJ vH= vbjTN0Bg:N=5сQEL(Xa{cQmCz1.1NГDкY`#Vxږ9l8Ph7@($H^60s3eb<{7syX,?ZDhJ#䟊@w&Dj+*_t_8'ȶ.qHY7xN,3w] k6fDIobtbŇٶŘf 1IN/㶦 K?t,x2T@5E6"slya^t8;ݫcr"\R}OPm/Xܙ jUr,e ^Z r5ttIg5.M'&~3 Pؔl)W1qUTPvU?@A\M'TIO+l<9C',b \Ѵχ=]eZ_ Kx Paߨ 6̡_:H<]M`{ƨqQ:f5yV8%؎e,"z<+P l?lVEd8Ux!2^WnWEnIF``7,U SIU?Tf}l]ylVWY q \G `]$šslgR( mn0,yLuf/@I:-4)oO uηLChq3Oe^ozzmrtngb$-pLLT$XFO8:(hH44,(oۧ}#St4$YWTwh^vK-|1U~XUt l\ՙ;Yɲ h*O١V]"!v$pj_.TuWV!fPGdTF0 wo%~˽z4wTNtTǩaKiKlkBw)r"ۀ3g3Ƕ $e"nZPy]a96ȫz4~ɵ/eԣzAmv>iʞjɴA`kDd#+nm$g1etk7/wk6A{萆?SqExS.+#i>U cNc*C~vGrǩːG.r`ȌUTՒFXu iwPqZbZK\* N UbɑE㷺 dCS$^ sEP,mqWi>PIdA_J#rdP oB!{ڋ[}Z,㈐e=Fٖ@ 8NܚV>dêz! `-nm6'Qgؕ:k`Qg\QפDAE 2Ȍ5Ebi)0whӟ P5o2Yk`4sPg*@a<4x-,|֐6WCEPƃb\Vό`;LhG GhG.k,@ v|X( /^^#G * ?kėl2y,[tCu)~Yِ\{?YdRiN@@kIw$TiHpK. 8?̲*O_oqg>ShbGKbqe.HvuW O>ۧdl '7g*.Lax}/ ñv8X$]x U&E>CwB2\혧R{u7{CI/=VM+QMכfOGmMcQ=k[q!^#^R hGK6$ >ȏ+Q7@4v<mZ}i#OuY翰ԔWЧ[*4i9L}Y+Y(VTo?S0sWɋ_L&jMm Ŋ*-QRah\S2OsVQ&V,^ inJ@v-} p{gjbۭPˁI5$W >_.6wqk:ZSRɹp|~ a*a-)2m,U|ˏ-3-G{esݾؘ9G7M;4M C[ ZA^j&(M`0/h(WR!DXTq Eߕ] *)7wh`:4!Sw1xiZ S,T4$͹4~X2lK3 jFOe5Uy1/eK)x;FOThT⥊wQᰛFcuuSڒ0vE Ss:jo~㷂PEe_cČTxjrT#> 3P=uڷ:S‡29\j/֑1X6J|\4I, KNp <HW~\Obc$Uj6B#̺7L&j;yFFfہyY~ɱȆPͳ̍8ΓATl1xf9Ψ _霵TNS]ep<^rF1Á*ysE@O3wR>5|g8ʕR LċsBW8l!_QvD8÷EտS{Ԃ9e£8yvnJEYB~/{= DTT /J<~?F_ )J R!jse}dQR_sn4ez{ 9;e HM* &(j7+^Խ-sD/QqiέO4|T c]Xݨ[ XU0ș6oYףWE4kH W7i=]9/ࡼ 0,}6v8PZ[%{e`Z-Do"P:e"zZe֋誑nT \j4K5rőaSJUh8gGÈ9;Ay醴7_gM؎ ol\[Дb7 0\ZyԂY4{ilλ1?\Fna$"Z'Re*P_Y߸:v'Րlo![ Rƥ\Of A|CK }y{:BZ/ރs g,EJ  籖Tը_ȃ8zpTڊ5+O&8)g$H' 1X(9(my;f=xaH5 'm?pEONCGYw_N|8,ձB1WsS]ِ85Wbr&CB4Fw< ՒzC}7l1woNj؆=61&|^ ([ lb3eL ' ,|G_˛yp#;SP}7qIh< =zڸ>hAkkp=4B6/K/lAa&(ڔ# ϸFWl,>zjvޭ71GUBMi1Ⱥ Bܲ`sx&#kT2|C; F]uiHKToH$mw&!8SRbkHxNͱ"pA8ufhaM={6HI4RWl 2<lKR3$GOBEQRB!BOV間^ q@Ѷr A66݅UŞcV[K:Xݬ~֯wNxc=|NqVU0Үj.61:/PJ/o!/n]Rv0w[| bá\8um__d-/LAF$f] AO?6vp((Rhq~!ڝC?J:0TycJ׍ ȒZ_wDl:( eߗ_=PW),Za%eKC>_Թ3t 2H2,!XLFcsP [<% (wp;T (DhHVeQw6 -ћGQ*C+ "4UG)uLBx)!+׹0;;%M\S6oI'm|B~1 J+ +/3#j^613G )ZDG՘>N[9Бq l6:u)5DPaR5[UB'Marg Ez K+g`Y&uӕ:Ex?.pyP)xKU3yd2#[Oz1R/tAU&absdj4~EkimUIE;nLg4w͊7U: (p&r.IV`V~6yb'_FC*t XI${*HFN=ۿU9Q.НA#lM+{v:d;TTN$WAɎJ}KHJ3D|Px!;2 ?q{&# uJnMx Gdv1F#d֮9Z* 9ж~"iTqF󔫷+5Ɉ_WtQ+<+O3$HNl@RhҠ%z&Oɞv8]a&]At)|K&!Ϣu(=U!>9m~J+Hhϸ$++M_6!MG'`wwoa?Yfb8)9H+ߓdP+Fxm/_aID 0c @@cg»L%;]0/)S 0-? +z]@i;kCQ{Mo ~pF>'_eC,EP7 _#$DP|2CKRd8Zu-DT 3{zLL40c;f lj/,9Q=D#_7Sd@w~n(͕_HQ96xH/&-+ukKӣ[[ZDO^!xw&W@6M;GDK.Q\Dom^~ ޿ɫ t")ceR+x-Kْ='*\s >!wvřKiK@O&tKtAF㺷&Mpc>E(6v `?3o/_GLy,ܧI]I:#CAgjB ah=:$?o8U!q U;:SoT#=b\@u Pn@߽" HԊ>+gt!8½z3 G:n-dt«F/‘8R(F-v,?aBh]oɈ^nĻ/~h)ᪧ K#*~xxwX>PUYZaKn #@0t)Rj"6@,!e(֡j\lt zm )a@7 h1L?VРzmlv쐸vH0I[HTuc7̆bon-ٷ\6&W4=I*jJZUs*r-I,ݧ%}KU QdRo~Ao7\$]N`ryJ&h85KuaX>Wއ~N:{%|<11/s0ur%j+:{/וķ+_WR0x!;CjїL{(gӺFW1'cA[dw#Zc N<I9P`dK,hR9<v31tga|ɌTFkUgC#U䄦m\ ilV4j%Ȕ @?m/vytrՙ2y.8.A8~ ?P+UH?oۡi9 -bYEb:Rx`T#GK IY7u=yC)(6(:yXC]6M]GdRxoUAHh縶*xxÉ&(ʭ#`u QyȻLBoxI$[Nޢs )*}}T)ҵapC'i#_ӡ{.Eu⛾Q\¢<\OfPZ-t.V\$B @dA,.{ c/١ה?W#V7Pu-4c{k 2hLFK\;c~?gw#L0l;(<%kШtW<^&J;q2`'# hw$hc+;ܱ8"R՛O]I?>L6>0.i4Z+'֊6'9u,LgS}Jk+-4/*=O-oѻ; n]v-9ܚMʫ$[F]}ōR -!zi R??i0~,b(C&"QFjWXѲ|ytVt;H F@nx.@1>śƿ">L T_G="vF k~S\7]D ԍ6ϳ]6p"n"hʜ\9@np3_ZEhEoz#BZd)umN!Q&89Wbi]YTMPy|K#+r\'5N3Ppq紸mtyOFglMގ".2X赌`V`r_PbumwD \%:drҸ/ *2 IP7M4cYI0 Q3uGg[J&8paEmSQw NIV\fA7tGɹ it0{0 NO(\w`AԮ~H(hd//gdLQ ShZiO!{OK ѕxgDwTE+{@ϖ?; ?C>rEd#ָIw &w(zIhv^ёOe嶡~heɧf\v)uInY)ޮ \dTX2'EQsV*)t ثKF|tirpb4al^6LzAS? 繭a^+*`rTk4cnH$T`r'"Re4=_z瘜yZ<>!Wo莱&Wڲhk4Do_2/~i ʣ5{&z `2.ŽÐ=ք?_Sp☿ց&6 k3ff3*JQvgpwiL2S.eK:i]><߹8EB?+y Jx-OT5yr-` (|H\-7X)B!SQw7Is_ȿgbOeصvbry XTuuu}d.`#|4ZX_*4Z4r}I *__>Fȭ9y==)'q zkOî=G͢ATdVkךnyՉG2&v 8E!0BJt2|t tM ,2]W,̩e&]EЇEj߬.Gˢqݍ o ^KMZ(s_3 P\ol]`'m>L^cćl/ɘ8if7le.? /)~wh= vW\-C<֞YSĘ+i[v6B_)DHJ*1 &QY禉uv f(S q;te!cSD.UݾdQI=<m_R?f|&9zՉǮ^U'7Zh 3S_Mّ$m=lg܇F͜o,}0ӕLv;>hQ.sG;2B|%bBٯE;2^-/Pr1FO2/ Ƴ22CKubD˂ixlnOv|&/r̀ԟjaYj=ܼ|}%*bD)ELO9 CmQC|w;{r*ky%Kb4zy^QbğR^.&[yeG-/jiCWH\# >m,d̰UcHkX0_p\X/붐ʗ3Aσ)H&O))=Q篮"tjC>\K; =ǢpSatЏ0_ 2*$PghΘ6 x2MvavBkg?M㱉g?g\^E6>pLR yAt:9{` 3ę-r [9P#d$WD ȿeit cE-g{!7ؘ3{ Sh:-Tn$SZ^c_)(Et _ ? N}4oMF 4tg&,DK-ϥϾU?D5#_ׄLM,:յV)HVR  =n2D_AHI dIF |5"7M7HMgm41ق$rQT@p=nZsY}iooϏ0+^2Dd\7ςMsEP-c˓`Apu," UJV='0H[f"#d8h@8 {VPԭ7uc~>n~g0z' W,D)eAo6<,B;He M\6yبh|4}Rbc qsJ2A>fS "Yҝ wk!JBU5w*g8xI :å^"vB,Eӌ>SA.2+(̲E>(QX  =fE %&C,-"53?>>.yyE{QFH;-/pnǺHA0) ߐL~x*1F: 1TwdFj{ur !:) ʂ/Q\Msttx|%}uż*b뗌="#7,U8 fJ_5^dɃX9 ޳/@:_R,l"/fu_k}@#4yp׮EO˻ -wEAU,7x%H#| ?;tBUu{Ycs1F Nd?9OUGR,4xSf0ʿWlC%pP|-Hê,*"*Ֆ۶V'u88'lf1b~ס.'o$ndruڏnj=ņ$R;n=/=f+C+GȸO0/|-AI5Ԡ U#{@hU(n[z"qKh141ҩ5vAMpLyAa;On\2^Tt^*K>l|Ag_R 30o:?W3UjCᱠ$c6O'Fh&JbdmVnE\]M'’[.ޕ <3c Vڃn))ڛ^a+4M PEٹ!4ES5CmG3K_&8"c̮ maGb=&f@ o1^Q[DId)ޕy$jjV\ WB'=f36 bgb1x0q.mǖdPWZ1Y, Q-3)Oh Ƈ.}՞dCK& My8C>L!pbs_1*gG">R*?e6>R>bOz>\R-UYnRmQUfJٓx Wɟngr y [)!\ᒧ ͉(6,ڬ݃{mx$THxȲvYNmoDV]L~Zt#|`xYc%k#bCmytZ3FO v8K]RQf2\SMAg& 6۴Aΐ‡Jmv`;F7l8g-oi#s<]ISltr$R^`9%Tã Ç]M.d73F w [{_G:H v'P;;хBjDX`d?E{]e@<*: T9::q%Vƃ)T]u.gtL::Dt\ d|PX*4Ko͈U˭e] ̜@!MF{ʻY')|h&EI]XN -z7sCsm,ڮQXّϵ>bqKx<tPbR!ō* n9Uf_ ,xNkhq;pukJ-nL!{7Ϙ+nx2;[mrux@TӮzGur?R B$_)}A2n(&eoZ u]9zh77.Y(l_yw/^!˻A" vT%+ڬZ_LnJάm_j/kv{Z\I*h|{`).7[T %`+["̼H+!2Nk`o0Z;GQIpGZ'=ƀ'VsGӤ2^r#e^CAa17VhQuj/ .E-_3bRBU(UԗRgUDii:;&WXȬRbs=C rLdͭLz$dzEqzp8o pnsG4'P+PtȵA*~`{^_)s3:s^&|9  UF4ewhFLmug_*N}A 0CՄAjahChA]\Ÿql!X˲;tK3ERosU/%E)/8&KQ7T:CCE%s-=1k^?j*h M&#>L:g xUk(1-x`q͸@'^Ry1FK~|_g.TGq<!fƩR^,,OOqy`׌ Uކ5fcs)Ź/!~A@Uj?1p,6c)φ2W|$}xZ*Q $q!Ifq:SУ`Z@=o2 g~u*G2I1O{Sl(J4EFE~Ǻe\S\v@YHd|m)x`JUeHOJ,b"HAy9ihBF #R |G/(@x1+-,:#LSx5Bq6QObU]|w>Lqt]6>L{ _Nؿ+pZ-1e1t&&a/BD=gKpC?fZYb,)d*pغ 6>1R8$E+.$ eV_^ئ_:juP.6PyEK 0W&ZuAn(3< 5 f=jmV@}dhH6 3:s8C %6:_TĨ$qDv#s:sO@btiUͺ[<(c~"xfp$(ߵ$t1Y;Vh` 1>_`9ڡW<~+ ڴ)(\K.lKiZ!+v@&Y/缅u";\(:Dx~hz_Xd-K$WVLhIm9Kww]`G`|L {rM{{"/0iͨZ8#&oWB`731dh[XmF{o`K}-Moj5կ3yEx i2̓t b,ۆWYf(3GcQq/'e!hsL YŬHY]:"XM+"+i U2ۚqs\'k4IeֲZyETxc䒆X0um`+S ER!٢s/m91gK<e!^𱭗Z2Qn`_cxy=_Goq2CuێMGa1E3 Vj<@W5AɊh B%7j+S`8|jˇNm[WTY "|e],u9)仢 j1:{I{SM[ӝlͤ ϵ OЩ cy2A@? 0Mnft/l/"VƵp+%,!VXo~O.|YO2eb/[])݃,44ً"5Bf?K(HtQsq`$?peƌTlIE=\lÿ5YGB6~9wPCáEx>!6WU4/`jf'd:19_^"ݧ6Lku N {V耶w@)n›jmTt WdV0vww7nhYↆɉd@}W6VVaoBFWbL o JK$xJ(Jcz 32Op/\A/~՛}8v?KIj"ָB3p| ΂0KhQKt\gS_Сu*%:?ˈx-0qxҢrl ul''1, ELO2mݳr{`" <,Rh<SŃ9-1;.~6y<\xJ{D!Bί"=SqA g)vNJv{|>ϗh& \ֳaY. ה'8==FAu|r9 T_y.$?Կ+uSh>QM#k,xs fLm=n&ֱEwVV#සuߗlY 8>fsά}3p !NbͿd#)]RcvX[#T׌M8iWAJy{57`m_!^i EU8wqV k*5:g@kԎ}A:XWVG6K,pYePEI'ݓlj9,/VE8x)G~y_|~{/[6Z.KׄC`gdDU܅N3ޕUoOnawB\u5wT>*ChpN gN43ZM!*1b7ދ{:nRhA޼ֲ+DT޹=HUރhRXF-!!FG'ƂW',{n?"-7W[bS8,n5tۧiPGaM3WXs9HWlEub3p?5Ojǧ^ԗئTwa:܆ 5X~WHE|Lbs-䇩2 }^ y .ODiO GLvWX-)X?V?Bk(6Ed/NX?eLh~/^̗/(抸 "}7 #q6e0_uiM0Wn!.Y|ׯQ!%r{j_S2Hl&YnU7I^&Ǖ_]Ӡ[,Jݘa a]MƁT\t {=w2.p2].ZE%I^Kql1ZdbO<]{]> )±M/I\M H\J{򑩓u) )Q0!GèjJaw;/7-sC_{9H4 }87'nJcI q.]҉П^=#lS;m&Z/#U,/%#逷N2U,"EGHcTcɏ+#utSkʿI4AP.)R.Y?[tX= kKOL||UpncI\þN,_/aw`K=PD'*/ ijib~/"wy'olA3QR]=ԲE`^pw@+poP2'r,&hI5c'=|>G񭠹ˡsqɧ|ELB-N)p\hm=<'520V(j=BKÙ| fhUn\ry/ ~چhV+\UKgkִ2´o+0˩].b?:e >:}VE 픻2;?ۅ**;eӷù)z'/ @6D =bFHw@}u,J(ηv~yi/FhˠHϷ}#e j6YJjqTG*EҷbVX9+Br\)* biZl.r1QJu:M zrO 9p7̯rkArE;L`qy>@6nUK~me皒+ҮHBU"LG(6oL&b#c4=LuR'kp0Sp*i|xraFiMC#nuYzT`gx &4-($"^jGC5prRHp( 6%q@f5'fuYNҖ|s˩j,u!҇> 4J`F1&=<nsDp&ɼj'y.UjV {2zy{W+WJE<6==.[q/X_¬@5DTlվ|:L\`^"˯>}۪ccjqě Ѹq"/2+bDfNŷ&T0Εlbna䢻t\غ,7NntSnt٫wT=.8 XXr{gᦻ.Cב?-Sh`ҿmJ܊/.,9hE,c [Z)6)C[kaYԜ+V~W1Fn,rs7d4 5KH-Z:8f9I y>h?$# 3bġ.ڭ$ʛbuEQR,T0'x0,Y/SSZՁrvݶu)ƚ\4ҩ>=/ejʝwiU mu_}>eMs*CG_d'#^ehn=-=;fmsl%MWitF8]WW2B)޵X n3 f JVL+Cjr __6rg䦀9'/Kfjv3_mO΃J/ &RU.Ŝ3d<5;dt<\v0#$˗?3 >B{rT2S$O!/=֎-RVI \zb08{Jf|sY @!AEģԢ7v-G O.eFA\U o'l&VU†;ĢE׵E|%\G6cջW$`Iv^Ey9N%!ņ5 =WǍk[ĊO0i/cQSaRɆ2 `]lĠ 0 O[.W%q;ڨ zE^,.;%z+[kg0oXXUYHEtR/ αOP\Lm*Cqv[YX'U:^^fF@Y.!8K]G?"HB|e֚-\#:NF>ѳT#D LqJX0aN照;!? .D^C4jc&% +3zG(+^%X̛TR@ d |(tU֦xJg=("q1ׂ·I( %Sr2W]#Gtt@6E;o p 6%6awڶj6+kT1Q3 J"UK%c^;uǚ+a|"Wl+!P9 $+FW*eC\:| orUGhgS4=RGՏLm*%?j5];0ҒSMrrX2-I$ /fuˮ(:b4r++06T~J j4|kPl\g_6pr hCct]:j !Z)O8k?'罳LFP >į8{-H(""Uu(ǙYQ*;n]pL/4&< zx)c\g0"V)m1_(̂rh-2$'j|;_2 "0ƊkFzP;Ÿ{:!Bz&ֳ4a0MedGR9MuHftċgFwJ},owv(LVsC<$UU唤^)Q%!6".pF-Ff.|9zLɺɜȋϓ:V;Ն_?I+6ϲT82@7-ƥmp+mDZXZ+K+`E-1IoFߓq-7Ai\})ofqn&pdέX/=?j9</5HU@ ,X:ԛ=+>L?eiiÆViFƏ{wyD,C.z4U}Rso\1YZ:ݢ P$ #4η_y3~WCV1Һ/AU/#ƃPUH1Ԝ8PM%_'S )凁't=78Vedţ_xRkI֕ 5=+$"E؅S;KN]KJypH[*d,)/nKcu[gqzP᪓Y+NRJLN7RUn,G^KDϩ fX _~XI쿃(38Fz,QWnh|L, 4Թp] XZsBn$Jzxf@4ITW߱! 7 hE[?B.+)l< OY~PُGȣZ_| f(,PG?Hf}%7ֽ=ĕ6?K)ʻ~2mQ//=h? |wFAdKo 4DZ=r5N""(2RͳY' T IDX-Pp;1Ʌggğ wb /KEhNhcAqY8/ ӆѥaO Cla a`f6͘6o$sG&i`4t'z~h@Y G.B;P=(5e(쯹#9uU݄ tf8k a|7ꯥ,u!\ڸDz9rhن\}7r+%wpJj1ŒShv6g+]!iN}D|9RdS$1kQ q(ߴpa>qb* UsM^}@bx&6g:Qr8u,x>>J-C#y1:K!7 RIUePv/Dx(cxF% 5/H޸ZFI-'wda] NʢwmԯU S%.%\;yD&{*Ww"><p̄(>^ fVZ~"b:s^jkiδܨ&N f3ĪPP9i苸7\|3@4̩LǞ#l\y+Gy{4e}feUƬP[ (7iЋč"@o>>Ĥ1|+{02 آ5 ػ\JZp>t*:8a\IR5ʚaTp\\̪ ҇a.c%? ;ѡp8265c/xTTKnD*h19mIe\5h֐]+, iT>',jf(u_[=5oy|ܰM1a7SԊS+!qrXK7&< {ձRptӡӤO . vm@tJ>kxYַ]%JDkXfK=tXAA+hᵤ-1 ̚}AU;O%9u(XjQ·nD'I߀$PQ%$˹TOe0=b#Ǘ%Z"hF͂,a^jwgx$EGy鏪["GϰQ;d`>b퀾>s۩g Y}z# LX'wW7x+WȎ j"_|Lw.#"z4&(R8חkWy'm / A9oo2X uՎ_Mso8̍)a3p9ؤd Hm垮{E4$.=12釓m8(X~R).^BBF6@;)'a{/ښN )L췓L •z ݵNhCkyJwg78d2A'uEޑF-as^.z &13uP>*frDˤf&ZL;**پȄ%Q.k8"GN$XnhVZ[z I=+qU:4UkҩDd9A<6c"&> 7LDwkHg-)ZJ<iX$;OGu[ >~.c]i"h48A{W nJ%HUXյXmO)@++bMpz}[HUwC[x-\ƠbZәS*[!PeTz'˗pBU2N <>XRZ*$$SB@c4%|GËsk>֙ϥ~KJ0FQhD8~RK\HƺڗǩTSZcs2{{ih<0H-pY|]gNj tT甧[RTBȢ\eŊ@~8nG 31m J cީɂcmcm"}NqԘ)7E?bN@vud1,` GLB o+t? 2B.cC髇X<:OɁP^}|- &iN| xI_|d7F݆&S8?%St4s{eOo%oe< |l'3.5ۏ ?SaЗ0") פA`Ѣ=,v-ke18- YLʹxFZdqjuÇ`sӕd ^ ~[e,0v{ jvTbFA3^ƭ٠= HF{ji0.{@6 erYxy1+"HTj01 Ur'E =A'S 9C%^2!H-He,fQPqj}psf&QneQd67 H/W#SW (oۂgvb@0p kVF`>Pd urӜ[/혥J"X8~֎wA\}lrVD0'<Uh0Ւ <>UAMWښϗ̿hy>B6scƊQ1:X~D/9h2p&C. n?y'oxCy50fs+VLסmESW\=E!ds+7˰`>ܱpѦMT/fA׎ ! ;eAIYU6`&# q_q叩-=ພTHi1dg_\@BH| xK%uPo Ñ>ZT3W,)Si?R̯.Hn53۽]TJ;ƅK] ܧa-`CVpSdadIϕ{5p|S<)g'ZqU)% ,^ ȸU9U9ꗞ% PzڦNlzLDo|?+#ATS4f ^7`lÌR=CJ2j29M3q̬bf SZR},dfgNnOn0A@ PdiIXk@xIP @eSW@$+QXMR᠄AƎ9Մ~lF}¬>K:1i^̀WuЗcmdžKDe۲%>oQ\[HrD#7ˌo1䊥ef\?c[>t,㳶Wm?t6oѹ֞e973U*h6FnCJݴ_rȜA .1 =AXY3Y+IXM65-w?ǎmm ٗmgݐM a&0qv~9٩GXiE_X4\4\7\Tm8z2R ?ݳ.1f@Gti'K;e K 2 /FakuC\J6)_؄<eUfvHlo}qz;=BҌBjU(ɓ6E=M̜zIK]i[7YdUKZs;I4U "& ['[M[_@ڶ69ApLw-d23NEΣ玕Ul]@aȓ"mMm:\/O }I1a_+k!u+O8m ry'E\*L0\$hu8j(PJ-6<"*BT=Ρdѡ& ԋC984 S_y4tLQ[5RffHNÂfTb|n0пS00plyD$l` ؝0pm޷YaViu"(v3u4;wp|vQh řǃhF/{)&-^&&@;Z~rNxKIo.Ë~}mN] O8~G^r*-(I`"ussVZEnw;(|*KF%I&|^]T3 Êz$R0hK,u<̄]8R#v /C%'my_/{E&҂▞O{=/RTB*x75[bJE9#y' m_?pj w)~h&/q@] 'o`[>f")__O<$vɴu9Q&UOauqM ΈTc-,̽a5KK4bpj5P@r<%T^ 3ݡB bix HY7R:!t%g\`.AƎ]JV_[i0)PQ`-[rW;K?)kO196/e}y^dPvCJ~3NS/XT72@R)RmqKP[c)zF|h[J.)Z[8}\+x`s hnď+P2/2B+RM7])2zп, :Ph;tV8*]cWaw91ߙOE?.ti]_1I&m=QRd85>eJ_$3Sѯ@,%Ob RI3g*gl0z(&>1zB0~m{CXXF&S̩ϖ,+IF=f | ~ҡmn,;4a]ﴌuI q'5[\B7ȓ&߻U1pfzQSۉ*SҜz7&7YK$t&y^fkŕ+2+:StZw6a$xtIqoJ1ƤU1 J3Sz|>RM^痸vY&ouXvdI6]%-<@8QRrl~9OB݈XT"Fu*DJ9Rxp=.͖rZ_Yp' ҂3=Gk"g +w&(p7 pJCsn#!<bY2}k{/N5(]!(K.\M`p t lir?}z?JKOtBB6Q=!Ld4"rW}\%NlyQ:]7%j?[o)?Le lkobz+9hl$mOrUw0dV)/"h칯DJt3Voš7vP(H+SODgۻP>P6C( YL:IXp©- 4 İaZ6'vyh NoC̙i*W)_"M705)B+Bm)Ǿ*`4="Z , 5ҡ IŰy3&3-̸{E9d.= bfP4['gVAKT)֘m+5LI/c ^W<"_?CܿQmZ`&;@Ap~!(c8yjbA3 xqlwݨՀiVqpr^,d}<,ˮ9&ߩIjڑHf{㍉2TwOVN B:YjK!L0׳e/ɝ=ƶG]D阊}_FX3tβ $WHCZljqtKW[.1.t;&d:@;q<ꚹln+FU T'ݶ2>5n/T uh{?t; \c}TlS!uY_ཹq}سn'E(lpT; _^^0cʢHQx"_yOd|S k܁LNٴ |eʇӂzןrCҔE3 ٨$m[=A@%q1dތi!L@ n k&ݻ>MILm&n)4(U [|j.wPLaPiZջm ըC]@R[]@cFJL젤WKaDd:TʵQoPle[l1d)҄+Z9lZ))wМoN+tfb餔E+Kbu ˵1*{D(oN ^V}?)[a۬(,`ԍ~@˼u=2;5/qt#Aִ|9(kmV81) (+`%rjР+]܈dRe0L֦%p@!|e/oRnQg]Wv!R hTSp V'sf"wGiO<&E9ĴbS/qƯ=m}+H ra󢩉3n

@]!Ԝ3`.M1|5! OٰYCke K(n!SF)@5Y#5oTw~⻐{z|2?ZfLЎً OyuaV@2 bzm3bgŲ!@J_xf}KkakM<'QIS9"+L~nјu6ũL)|L~T+:wKGΡȷF,HcD=v 2%YފLr2&UA[l]c@:PP @4q>$ ֥%>K|f0 /*Ex5{Ņ\Rxk;Í/R;U8)DthqJAѥ +/e1P&5GI(1EwqNNmSd.L!bO$m7y35{fd`ӧa(ӒL8+A`W_GԡΐÂǢmU\&V|F~dYDP476o3 prEs**qű3 c^ԛuhXp"͒iJ9,In[tx:]yα-v:ӤqշC0knA2KcBy7jD:DB z8yN.dObkvT~kDw}E'z qU=i,{?Y|^>G. )Ē/Xug"hPy^j gQpx8Y]3N}Kά֐u^`-_23ՍJִ%8`W#V&t9 Tβ:0C*G,L+27FTv |ĭNvjIpk W[jr^u O_H_ X;7'q놩e/^\EXU˅~Ϯ@##%e5Ī{]!yLP>j&_8CGVt|Tr |K-3AZeC>iUaًm0 p4LVϨOd&3>pvݦ2Rՙ%e6׽Lޢ} ę{B+QK:]>Rɪ s崆:F&V7DoںmzY;;v˅Id~Y(5rڋ:aڟ yWp7$_ReNgHo(8X86\ܻxinvѝ 4R(~ޮRHwѧxVYhSҮ傣bvbvC~\u#^(ŝYM.5V#;kEW}ֻ# LeAWu|(EwX!,uْ6j>cP?E~UȅKցKp%4P=_Y9vcBƯqmbR~~&rUF[_sҏ>}Z-_s=9L|whNn",Ƞî]:r6mB]*l7=O0tu> w\Fx^(YPQF CNŐ&3G?F3D&&yXFj>YS*{Zi}HC{o|oV׽,8pkL6^GA\o_.˂9+S索fPۥ.HD#'a|E<˰|FX7p[dàJE_!d黦nCF 8Si8뉱c4s1W"nh"]ӢT!Uzf>IDzs=a Mz wO$FBش"A oGrVwz@`(3>1 !QQv*u;uW]B jHϬ]Rd Ѓ^͵VBg yaCdR^dә?Q -Ս6%ziMx<i<Ѕ`~ľ(ގpRh: L?S54PyH'"ÛTJpeH!LM!Ɲt '`VN{nUjolJi#Dfs y5,_ l9&QU| B}i=%~Xl3SiZe8R63o!#k_ݻ{Gu+3$ySI}ݬ哜뉋CWufsʷB'nHAh,@_g18UKN J!!_( =`R,f8s1"7GK\* %_,?i^jFyK Z+;';Р2,ksVޱ2Y3 /r ^3[N.nA̵5s@tzj@+~u#G6åkBa3j{V7Rex0mg|_j|^,bNq:n@/b|)PYLC?o3C票. MK{_œUÇ^Pbxs9)%QࡖldJY#M*쌟GL9* U [FSM<صᴖ&xĵe`(c ~L(" (uR}"dƌ/v4K# S>EI6 tƜ*9Jo\v)$!rJ2eܛQj` 3=KKǛbL.,td+#`Ki/ OQjG1|9|G&'.Z^vN.EpC0d<;tg7@N+_`X8ͭ5w8`rYbQb ڢU:+V\TWBZz~wb\*[`پr :&=J?W;-+QWβgk6(jQb4"7(j}@qs?b~:h(FdG nyM 3֠:KmY@ŕ6kp>5Y{kT 2`P)('Wpzcs2n{K)|1$T Ұ@/ ' 0$519-Ua_4d,FZ|b/)sv/%r1Gnx)hOSWz Xȱ4\P[K)&s8!(|r͒leH<8`A ^sΝXƎ448ge `y{x`sFǮ~z@OH/s?Sla8vKh;P   6)uP2'-z̨1W7 Q'r7n,a^WT=`N@W&zkbD1bЬ(HRKOZBHժOuu mmmio6 J\yk;~2g6H!Տlr`!4-Ó?P4m55 B15j.<'(G&Xٌj0ELYADx7}]:y"TF/#?KI;\~':4^i>32ܾDpu2$ H*B;4rQ/c 2+0k[DTLkcЄ:|lbjwQHٷ)#iBA>@/Ȭ`ZG=E37Ie&Xic@+aRH2yUu`wX*VV~#هHs7}RP<ÙK,w4k% t0TgcXV!Jݠ6ow֞Qv+iBI(wO.b%Q:pǩe>Fce%>M?5q?پJ 2oh{ʩ(k:Z֍wsTb ٻ pS u&;rKQǡ4YߒN1rMv)SURv+iqwT7"2@15JY4TK ۏm;2̀eeڨ&̥N3;:ʀPZS[~O)lmpCLM@4v3+Y=6lS}ɕ g/+.6r #X:zҡ YUޤ6) 87NC0F޾=d5^>"L8muzQ(=bw6h"VK(œ04B~rdW"LUΰIaՈGW௢QH9g?Q!(\mqxLdKS}s0yN36N$yWRn%em7A>.FUgB+(N GwqSifaLPh45 uL .빑l~#Ar7̸-DdrDQݻo>V,DPR1loTWԸ(TC͐*(1 ւ0@XlO*T!U[6=Ɓx,E~^Lr+ 99aij~AjK4lgҔ?ͮz]d EEy CQ`Z?UzOBƇ(1GT2= "HJ.ݿL2zC=I33!9;knj GT~H6} Jr{p YD32,u{l6:qOӝ xX+KM˾h#/ȟrndj;LE  ͑(MN=B}ogWW6ȭ5*Ѧ.(G[m0z"*C[&Hw,W䍶̋< tr3OG?L}q3a3dB@PYK~E/ 93G q'm1['$Ӭe( Fkb|]X1!J%ڙyLݯl:FED!3e"qBܿyXh/¶;1@F-vؚUlyh'^Ck;7 Ͱb|R? ^c;Ou6>T/-7V)@ -4 I5U#ʘ Ap}8)ْZo"O$gڝHpfDWhDɊ cN 5*=޳,x(O;򷙍waRwl$`/U &@ g~/eR+p؍a,0& #RƚNg++;u.Yh-oJLTj3HNbƫ5Qb.X0][Kn[}%AD|LBSi*&UӖ%S s yq5TAx_XF -lBV>e}튱NJ_2lSSA"vĔ\/"~-xϙ: P3v@ʍi$R'h{[؏Dr)DKG1l<q3e9w;gB'}C(jIbl:0ea'e"^Ux"Qѵi`NBTFC۶Y^!xn3+lycq }[>G /츧𦌳.YqUĻ6ȶI:ԭPbmR n%z(8L=tԳ;(U騛}m˹pˡ?s5.]Fh %)IC5hsݙ}3$Ua +5=n<~gHoWuǖЩ*E!s\sy)~PFГN/H`q6TCh^6<^ Qm-&M],T.xâO(# =al[:9ɜ: Ւ tt- ?4!| i%$ys2L-pjąe5BjZ ޳72"[ڒXP\) B'vBxG#\Йjiq壭e< p_"㯼{=BvrRa_/zcn 0_)N;fx\tUM4sG![רTCm#t|/J+N&6&uى\ Q 6z> ]_|B7 ['l?cxt. K= ,ﻼNy`*0Miy#{'VSߓ$gAU+ 35yΪNbԽGjo#Y8ѧQӼȥ|gOk0ΜE"Ze2DN.\!'3&QNOgba8,hҰ~+rҫ5<%n;ϔx],4 MA9-wVWZ|Ű_5"ע/}HeK$x LYW<+2+^@24'lDEӝ ,^F>v/M )޺M5/# )yn՘?#jo! To19N"" C6Bp&Cx~aPbW^910a@@[\ɜ ż4_SW<ͩd'a6gU"L P?OyrwV` -)9Yxd뉛2ݞ+rW`2ʧVvV3uO5ȖmAlb7պ? 5(_iA)i9a[{|U>ea@TuO!~a/'j2XLbeۥ- ,3ŷz."9@ZR#.IAL5sKgǺ/5d<>]S/A3g F.FoNp?b!`C-Q"Vz(Qr!*D_,iM:F34A qs堣VX(ebzLMz}=GdZ06ժf=I`i%B|0ټ!㋘#9;@/[U)12J&Q~-M'NVϻ ~ @0H7E2wެCeyaM]8&!lx5oZ?0?g4\xSI< u~J4&ys]Vj~(_lH [D漖q\ 'ЁpQ|Cpz >$@2Yu!w+%wz/UkzL[ ٣p'~]|#A/cGwO';*{;Kζs;,e91-P=à(LӕLOϾ<$?gWTI=PVP^v=Ii"…M#Lc2N˚WRZʋq-,KC `%=DmXcULB *w  4SGA$L%/DZ+!PI |T d>_$ {2"K^> .Dj߿5J]֌;@^+cbo<7=0[Gj<U22:n71FOi+=RʇQ09T|'yT,Y)4ف1ؘ1*tps#lJ2ҢbxCk_ ]YJhtKiOQ6 ۥ 0M5{ξBJ,591JVNIqQ ~5+ťϞa\~ib,e`jGqf+ d @ g@}H E{=[ZvW vlO;TQR"7jү߾ו])fJA5qP bʫ/_ƢwR=KkE+YRQ#4P ٚKɆI=!)=IsJ }Q4 8?"J g9`֫A9jYѹД LQ`򎒭ې->DxSVRTYʘ |8(77yΉ y7 EwbLUg ML Ͷ@5!mcc7 esUwWo43xbplӅVlBS[q5uCN O)̪_/c Skk^Y{ڈbh1sL=B#Eq $(BKf}9PwxjGEGD[bƇ+\pCVYt/kh^X;,ML3C-LQ&CA{qTvRİ>dM%4RC19-Kᕫ0':kv Kc\v 1!g,΢da!t2 <._E6*d5tȉ. oonմIcQ|Piq[ KziqZ/T'`ZމRMg|r  G괦-v$+0cl7ڮ|оm){w1(a Wt, ͪ 6tE!! B0g?Õ,Cdy 'q[`U+.D([kfLkK I+*``U F@W#X[4ƙG1SFuӳֻ, AᅋE`{fgKq9VGp&E;q}>_&$j?9 F 6 xU\*&J3rEcOAwꐡz#‹TB[9N`G*b Aq:Fac6_ `0 AEZ}#WGz:Fs_{Bb\2 X~(^MWd/O&)Wdf ÃJ2Vr ìgkĎS&cn{[*UXHV4$YP$H k?0 hZh)3&j). ST>;[։ao&׵asSQ`/zJD[CDUiwuQo'V]i^~62"1N/9+֠֗BQV2U g̙m|$0wHx_*Vx,hA qǺ (".*(OXJ AȦohK.Hr  )JE?"G$GF7Q&6Ѝ}h>X6.W2vydZ[~ee-8F70-;ݹ8 6 ccylӁg^°x׉}~խ=%z蠍^1xj|h]`rnSxΆ5c*mS/Vt8>ȧYy34F/6әyY ,p>/k*'hԫv?r|239ݵX-Ssh=$EaV WILTWts9v zBT"l}| OɸY>NW5h 5LtʘE6U3«jpGHaBM{g__^U0zvwWOjM=ReTxGfWH8g)"GVB,WeE@I9}L [Pި,-:4K1Ƣ1&fҤ;Olˡ g Aq^r`N4[-a~vZ9k9\e:a!Gs{MBp\5Ufv(8Tl j0E]d%&(&H(fՇz†WGjޫK'l-hsdrTu醨5{g3<=I=\\+,9iP "D(Jutgr眑3T[՜fPCJFk͈X k~ZGhq 7c{ c\ZcȾ?_MV*^u&PAt٫"_4<5R,GWm/A-.}Y`'(4G9\ztao-oK6P _X׀;Œ2$X|ZL5O.ɢd<й&fal\sCe[Qŭ|Ur16~)_[ Ʊr]1Z-PډXh1G 2BAħ?!@ӥ's Rܓ&\JU\ry E}=.r"6PGwA]dw.Dn͗;GG޺KMtYuoΒk3u՟#XHj"JT"R*/fd ~(}~(!_23l4PwWϖOt'b.6cLxi>Zdžukcd#5MUC8BBViY?dADXJ /C°׮7vhڟp:*2Ov҅=W>;V%c[۸bb;I1QOڛZ}e>SNix@جlt}R<*0 ypK<rbI&$A+i+ރz y&W#iKXurK/_du@jSEuR82m.];E0"E&fb7'e`uQ"أ NpH~/E$}zrxYEW<7nz] )Vhʍ=IMsXvd.G5Da& M'BO[_#'t_7ϰn]S:'IV ?. Nm\S yi\b!Cpl zAe85p3~_U4ggN+P3YtU-_:<=0r=>0痄FXkXHT8yˉofO`[(P8ABR->V`[5d;K 6Kl F^́G/:Hbw"1uvM,{6藺9 1yRgo5{-t"i*6Gm@nȈN g95( ^:<d䮞O)E (x 3f<&Ō<]{},`ww 2 8Ym!blC2 &l, Uj#-Z̀B>[ˮ&Bլ;{Qf~rϹò7F$qڻfa"$ Gʁ"਼vY HiNJT,csmǭ 1Yҋ5֖n|gU2-N玼̦8HxV [nd%7gPG"$P?J TQ*|HOzK{DHy92 qrkJ`a>j_7K֢FN1P#ሠ,b.kgZq 6>qff-s >7ќeHUF 1hʑ/{UjũT; ˼VAئ{W!-Ʋb?J'N|A_g~?L@XƔ~pA`Nm59//">V ^ݡ3= > TEt$`}6/㠢#'.,URW4&JpizՌeL(= XD6̗:^Mmk:DΛx=@:* mښuT5F@+FKB^Ѿ7ܖYXF=w6Sz ЮwqpԮQUk ;`*I!>-&rzh'$fuA^[0{|r 3V$'\cn՝wϖo.uǃ /\Rܖ&bϚҺ0b{KbA]5{=x:Ӥ ,1rLkh T^yl'^"9xh  S7@.l./z1C_^GuӆÞqָSJNꙄZCN,. KHkðcҴdGٰ7gYlmt21#^}xe%Wg+JHҝ֍PIuDQ8/З +aV[O>kq' %j8P?pm{xqq@Q:/xvz,)زz|uUm2O#>[[5gmǞ+z0?,pXeOxUun~OzvGLl&@vѢ# MqD<⧈NH!H% ^pZ#&w8 BO `;(h0`^C(s3z%-5+ %5ɧd/F]Ih/X\vږYik.+NmquL%Jw vHS} ͂$Gf/ CS%N.ϊS|EaFuyc2+TbJvliINPU#fcTEV6R@b2<ԣb)j`,a)ռ/Wrgf9rk r_L .o "XDC0R̀h=m/.u "!wk{"^sOޭ0$ GQg"qofo7X5r^peMGߑkC:pܤ=$ѺĭN!lQEivqt4 YJ> D݄|LhC9y/' (dQ zUʾ6/F&r8 I#A̵BiP}u01 ֣ʷRi9.k_S/V w0kr~e@B `#un1vib>{nA3öu:vg>ΥWmEV[C+bd¡m義饚G1vxx9p UaffJ폄@,KgO f_z~ɚZtY@- 0lc`Hjv( =65AgHcĆQhpBgCpx<_B |8[j(Ej~kv&NsVM zk|p/2,f_kۨ_̈uA'qXj~k0:퀝JMT h r"z' ӌx2Ga#'SHy-ʓ¹/ ]QA/FĚ}e;rPmWbw5l]]B/AwXorW)׉0U_-sh݀Ӂ<pK,ƺ'QLH^=T)tLĞF稲OKr_*ʂAcTD;4SR˟"MO$rϻ߲ J"w|qj,<҈ :E᝛բ˃ NA,g \עP5ԏRnzi>kbێQ6_)m_^%>*0ADJn^5P3 (Jv fWWY"P'({*!ܷWYሓM3rd*+zõX"=n'n1.:dD7 ]0ie.TUXâ!l9Ql_oPus(,`pPa68qlBV!'JI׍xxhv*޼fe[Ji罈7UU\ KBS3zQb=Z!vO}¾j>\SFF[O z$B2a%l=&d`VK\m}]DkߓtRӣW?f},|*98>lWj0\-IjsG2aU3]:Mɂ#αU0?z=\r nYҍT5imz3.##p\.[ ~4p8݉0֬NkA=1K$yJM0bL[778V7!j0)Zh]JÅ},/}arwQ%&Pg_?ͬHYUwyu$_6{?onXs;dy+4$8ihex6Z1蘝>#|ֽZ\6?qK ߓOEY^OIeﰅ(K༻` V=0#Cq)piM1h/v)* d{W>y-}`6֜E'A^vHXC\j)ϏK `vB) ӅdVvVr2ccrivk5~Aٖkc%@3g jm!=-+K!/z;K@Θ~TPЅ!HUn vrL Ƨu_+ ` W26Ղ:w{] ~\* bAaj:le;GOdWُ]FoiA u Y F\xsS s;ZL ؏ }鼮skVy Rا=8_5xNߺK"߾R_Zz=QKnӋ1ˤQ+MzlcW`ful"j;2@Bv;CL"QoQ?JcRuM3Q4ŹTxi?nsqr|S3Fv "vם;h>\p#̈́(#76JM6'AshQg.|mw|?dCɾO ,EH$5Tp•,W/<7'v2r62S´O]3.MV~7-|įRf bVhCdBTz\2cUGPK=,gG9aoY[%v:CFBegr FBJLts/wa־aNJ/)ލs^(Y *Wxd.+Ã宎'O`@j+ Ȱ|Kd`/'d1Kru>TzvC-'Q2x OH}k$2i[LŜ߷;ATz =1G&!kΧ,'/@/)~, B˩6Bk@@;k |4D;oV6h:_-U{!VF_x%4ْ;ibM|<%GxhPG$9l`b/v0Nv?5وu[lTȯ>b2fJX=i6PWa@f;e=xĚ+ӹuEuAa#)|AjHlOasp|W?V]6 \^6t$[ Ƅ5Ѻ2#PY[+B (w,:neF􉭁4[-Gcl5l۴$Ъ{`C.!ۨ6gk1uV JnERh.M{91/-<Yew8!Ar0]-ҟ3D&Se69{ԊDBR0l]TRq%Xc=𲻇aB(8ؓ{;}Bs[}D4> zY1ّ An%~S3˙NĠf>,cy+W8fy[W=R %qz#ȲbU^qk/@)I[  ͵T&Ĉ_gEǨ7msP.uaK~PZXn|N5bzS) ])R94ߌ,(e鈸h-`Q/?Da'2m+:Zrf_-Xk ~6J +XF_a Orlu#h T:/\1/l8nB]sߍwa9|HL{:ao%G@ .xQ{VLn@E( p2܄k>W|Z=a"p'w\ E>,Tr=.K39OSjIDWRou'X<˗`1D+C=\"A,ك[FIRvͳϓ_\ge򬌺(7|u$u?w$&mR_kOQC 3#gUk 6,Ǖ; ]˗^&X% A F.;=Z˹*<7$K@>2"_hZ4jL$΢ )etoVQ[+>]Rq2q|[iwr8}9R#QXH 0-Ԟ6qF6`*h/S#Ξ#LzA̓4ť&ЏΧ>Ӯ6qzբ!n;3q8IA9r[8VY?̠C'ׄ=YqޤNNş1ek+ePww3&^0p(X!ڣ LۇNӃ7N7xݨ)k x`ޚ^<<:tIiq7U'`$Prmg<z;Fٖ# >[q"x˻[ӈJ"a8=6YPjS8 >m{]b<@ՎV d2@$dU/-&VQ'V51QY_XtXOa_Ͻ:}l|Vfl~XqMv7}c>إwiJ؜7 H|`<$'og{Rx:InFI8pX0&8 z~uWcy| *Qv1fUN0nd:_m+:o̥Rr܎F76E^ì7]n L$6H]Bž0c52|<5'#+[O_j̢FXN9~UQ7i@95]ZaҒSXuX6 Gi0iqNĄmFJ~1-x.s?v]pڐ乕6ȰCBIRȉ.k۷m$?s"u[A_iN8kx^CH2iԘ[Ɍxa0cپjc9OO@\JS/5-Y6P"9&3jeE:~.R5>OWbId>1H'~]_\vפܛ֑_ C-/"iwZ1IN'nt lA,5'(MӨ=]3Kf)BLVqjv"_x7n=4Dj ;տS.:R;Zw.P{`G#d܉6. O"[ 1胪8OriAIXan9UVnHxd.zǖZ ɌJx ` @Հ9=ۍ6 zX\Gsςs^MCZpCP?l22̓EuΧ 2ׅ[΂8}{/[wYo 1he[#:^n4d!WyT^A- ejqgǖX. #cQ MqbNǶɔ(Pټw {ɗV"W{LIbmܳkuúehk)KM%\5[ɾVSm@f]I!!FFPjp $}@H&4y?$ՕDZDGVBhMBJ9|7%ׇvwN  sW+'yp '$=..=\M^%X0쿷ݹlwp+%n`-}Ӳ MlXWU`Y(j) uV_Pժk&zwr鯖qYӗ7AW8eSd@Ქ"唞׃V+*n8|vKnΖEpwx> ,`>?Y|$P{b|F1}jiIYωk)#Mzʆs <==zJ?%*uӪ*|殈;C77!!8Oy~& 2LF%U33n/|)׉#@gUzx\G-艩 dio|NSH;m ${֑+-8o[a2yD48Agp1;M#[^!hZ/]jvH \\LRk1,AU!PC5{-]ObvDqKn'uM .v-YH[v7)@oro*xavwکzw],.$7 Z׎k)u=:K`mg/ޯ_<XeG3K45+^|.TTeuy;tE)F0Moth^u +PeE-iȔ0I24SAӕFqS^@MR#E8 4H׋%$+ e'Xϔ(J0R]M+Rx'֍@xuxgb`^IfVBZO9>R@)e%Ex ;)lP-˧R/a 'ojl5_8[}7ߗ5CM݂B>׃WXRfY^}T;srgOk^ (Kr/Iq72d`T#?%@B7+W Cdv:+fl37rY֧,.E b/4ǡxrmoӇĹyo`{XŐmt VpIso.^ȥ:D26zObǣ:% 1d4%yJ3Q&R 15pEo#zS4ŽFn:% !$܉y)WnVh{]蚧octs1⤐\祬>1ᣋ93a r9`5BÃH2ـ<gŖTH'jA9P7ƺ\O֒㴢f>(JMh-; \8]q⡢< {m M#/R% }w BLu Dsu|=.g46- AEq MRj꫘ܒ6~3J-t+%ΙHlj/P"[j}ˉ=_ +_$GO\]Fɥl>O9&EtNc ׌u_1N$*Z/LnɎ O"ǽMs&,txy^kVG텟JB>n8eXlYtJYي]<*g(??O!gh ǤvQC̙TӒA 3YI (ՙ#,x1\ZGU\O:#]}DH( r_kUH`02vwA9(u..oX!pTTZ}\} !k]#iq\:yh/TnJ8.dUu%:HB$'3Nx:ؔOotX_?޷&ӆ#=+hgԑ6*WI I0+614JfG9;4 ;*IEj y/QĈd55.fnUl$K&œdLqe ,#P8I^ΤI䋩 t 7h^@nyݝ>Uj#k7?%0HdgvrCώ-,H\5P(jvIL_ ^"=ʮ4N!Q[e(Sȋ'^xWq:W[)u2HY@Fh)ȎHDx Jj\՘yXTMM)p}޲J ka/B3Ljyd= : Fz͙k6 C,&N$UVR0N67ᠵJ(Ŕ4i,|pƂ;]QeMd6ӗ'i%ݠsDid |,~gH qjIsEUrGAe\"U0n{rr"S{72{ylwS'ǼTX!ǎwfZ?Ynoӆ٬񁭔ݦXg#Ir<~Լ6Dݧ.O1|_YcP¯OC@VX^ѳYGVeq.8S󖌦ȁmfn^V)ظBs擐HO8|ծ' Bu`nٜX _󢲒"`x6:f!N\ol⩔'كvwTlKn"eTJ4]^3YPuhSaD0r ךX%v ۝=-&3B lVvh328E PXL.'lc~6'"\>?ͺ0,bHr7{\L4ъ_f3m W:u$=-T =[UvA>lrzB >5y*84u6_ f뮻 c~e,YK ڛ } 7Vc,i"dO7S†2µ@p#ўonΉI'(;Jm\>,`dfwQLZagyc&،O++YDm9y=S")=%'G?8U|G&Mr?"X4Q~bܳfkFN̐y%nz{CkE\lĸ'X0~*8~ |1%i3aS86 xDMm>OfyDI @:q1%(Y{ X:r]Gl+a/Ub|IymJX$=dqVz!Jf_ªq&{K%VF.z1Aqͨ:uig軡^,BKW`f7Gr<̻S!*";vz0/,4 x$=Il>1mo_dj=GIs`,h|#i^.NTKMN!E3@%BW9N|-{ Ĉ.U%UŻh‹ 4d)u"6 [ub@TZ`sb s:@X>cF3qTFR2$3Z bƊON'؎(7 C.5wڕzӆJNnңCe贱%,T$_(ӧ3cQ΃VhCA`1T!FheV[ H%I& Et4壺 73g^+=gL07"#N&r|6|ha{![O~z-tnZ/$+ U_׍T*v/=0E|98bv.p ~m^j3>^ vjc %'< }qwbvT A'괍Ö5h;/ǒ 6β x2*P @"E_Ս ym41Z:8d7Q]JfC(f2V qD `|tC{9WYPlG1lk*0~1cB|Ѐ4ȯ*`;"e=]mgWeXNbI m2 +6SyeZ0l^hH݀!/Dq;NSsdmZݔq;G9[z-b=jm ;TE`Yz `kWτREP߸>x{iqǂ_8IleU[]b@\S˿O !9~k5Ęq]C!&ҁ\}IpU-&sYzԝsTu9݌fyF__BwcO2xZ_4@2MjZgĉ2o|~A&Xoa"R&sҶ vdSq[=|x= E1ODDX5'EQ+I J=C=iֶ#|8ƻ3ZY^ rU\ƣF<-͹(z&!Xo4 ºj ^6'O'#B:~w&WQF(m&Ŧ8ix 68U Sqׯhv2y5z E[~SەBNDZ/ f y:S)1K\=kR: Iݭ.-8ž\}kc̙<ɱ{radj1p`b̗i]o?\M؂6%(. 'oP rab hOD1_(=M?3J!f7J2펣Uf9N90- y%?sCoSf E0ZRU؂(:9?d*o\]%wmYaxP7fa+M'޷lDez+"BT4ߡ]zāXrEW3Kbkm`kٸIIPHߚ8N %Sk5J&"5}:x߫hHFôW߅_exG%ԛxųFr767Zi"]9% 4gKAV(ZHa1#Ȳj2zR`Y-ߚmjb{C}c)Y5*L8Mͧngu9p[zXWt|R%\HO_v<1뙇{ {ٻ_,i L/PN>r9`1akJ:M;NX\Z=TvmYD֯7^Z;x;/.Q3voRh?-h !ecEƞ3"׾nUdGa1%{P80CjsSQ+o%}]6FM.q<^&iN50['f[K sXh5)`BvEvӥN{%7;rCk4O\\eIћTWNW[$-eۘĹZX X3VW{8k`tY'TP4fj8Am';YuuYĿ6\7V#]?VSY[ 6ǓM Wۖ %BI\kf'?eocM ES[=jZhI_}u̚|y9n]@ ,k0=XZa}&)CbU1"I@oP(;)6P CYc6zo' EtJZ-/"w&w{w P 4]m5̼k5/⚄4 l#ABm&iӊjHcɞq+?a4T#T FZGM̜Te{?e&ɖTqm +Qty1qpL_"/Ӵn.wٓp+1Ƣ7cl&p]Y K'oW}>\XO֤_f2$GEUh!6tsг]&b_ 9̍^?Ǔ;n$/k|܌WȖ+)\pK6*mֳr f! Ï`\hzk7̚5[u Bh &J%w:OձqxYL9lV¾Ep GIk:,~FW2vAF ȭ)Q^ӕkX7yjQM>G TA]m`b_nn4&!G뒳H 0i6D%n!M"^<zS@//4\H-ɿ)l]F# 7yPj 5Opa2 !6R?|FDZ+[~,5~w FH6G  ׎MUPGy'mL?/q$Q.$,C^^Bc~;eS!LJxӖq̓]R=ܴARRqg`#?TTTgGݡ\ÕF [iz\6V Bߍ>)6vLM^v>Fru}<3} qO4tp| ?4pM zR˃5d@BfP^B{{iIRg#$k3INU;d,KH$/ߔL֖1AيZ6;'13#3<~Vc7U3Hᖊ7 }4l){g/zwJ!ov(l]e<-= Z-7Г{Z0Cz@%T.Z:L Pߏ=3:CdZUPFz\n 1? OA$☾xPplD‹% 0&7ω*ka6QB\ףcN vȢT9@^!'냜wӻ}I8c3MVs^ۿCR Ȩru1hegYEEMGp/,thɴr5tNFEh*v&:-c&i𖋨F gP"3BPٲp2{l/$]Y ,ǰd ^ΎɩsP$Ӻp+y&Ŕ Z{)I5\+Kfzc6jՏᬃa~/QV3K?M=0s /)ok(gg\.=ktY+ڴZI,\!zl-)Gئ75Q̈́S1hnl* Zu¨6qH.{$=&v67 i&3ɳ`B,,uaxh50gfd禈 t@/jQ -dʘ%a p (IПOCDB"<L4*F{X&m}<zﵨ[e.Qy732%ۊ+KbzoߺPJe,*zUE>}EӲ1[ND&699rp)=H93ΤG?5aYxq2)^u }vuUe]+ŰNZmv yO^͋2fΩ*m9i kq"")c8\d+83 cHR@V: 7RY j~[(ԙӦ|j[ ; N˶D_i0!Ϻ:u3CNgZͤ;a/ L㓺:l"wWǪ3UAFe\ȳ]HւzeȐnė(Lg+ g1#EV,g29)$qBâ&<@8lg:BF/T'}q ayxQJ*>޽,[>SRS_":z2)qO6-2`U*|[ΟJ:Z O\C50ϗ(e÷?Is[|zyؚ<̝ xoZ *@Z5su3ޔv,(mnw4><5:/˃qqtf kv6Ｅd GqM1XI+ {LNy83 9HTU|ZvW騟tO7N!JČM&c4'CUZk7I<"mo˯xNى!Q/*T`ْ^'F{ !D3l]͡yw{n72U:ߧ,0,=k2I3M鬽fe#' 夞aw*N(^aSGXqť~RHl4*ϢvKuҴgۃ)__ {Xl2Ļ=>섉 ,gw<J`'ŅQJqO=9;']`1߆5䷿8ǤHGLl =foKj e 'Un8،b}U> Μ -v>v~욤mKC~쑡\U2&J%fN6GlWsoX"sWX8x ,q\H<4MBS?@ˆ&/16 W4:[#{{s_x'SBSuԁ,q9]U'dI}m*k @2*F]>=3{k2R^凋aaMC?W!N$$ \C-ʞedZP$-w38Q KFVdR{8zV-]q~HI@mݥ vQ̰o{ciT<,ܒ)*h\thwhWzB3xϺweDt:Uǰ~hQ9NxmuU*Y0o}d*;rΏW GPEf0L0͊t,+nt o ^9t`G40XwЁUcanD 0'KlO^au:x9d>ʎOq:$LF0TijTYA'IYm9,s>(Ҙ,G ?H<ΠlS_ՠGeHq9%O LAGI~$M }!F-%%0^kk?(5ΜGrSS{4qgewKZוvc+OQrJ#L@вau+DU„gn'v҂UNrޕx>]{%+]rQLjUn*m67Ck6` il|t1nNf}A}naQTɢc-%sH&ʪ7aAhԻyfHs:H1Fz%bepJVJǖd _Gn.Acan=+@AUpTx鎽w)/g G @/Q/F]BgTq7ZIQQz]'Gg)6$C|v\D-2gAC{L Poi<(_i'.5[6FV\.^ʦOILdZq{֣ yO*לTslK+fnٽqrobfO^*ȟ%ŭػ\&RGv\|nʬ^ɚA:Ha7]D'U_}{`!xBtGh^^f?.V/_a݉KԠQsi<||Fy`+.;F1jlH _tnY"Zb;euhU*7 7.i<J]5`/&- ;!j5@VPjj^6ߺEk3 #ѸX[ղCj[AxX]kʚyg#>l' N( 0Ԫ-AfyۉD-b[\ ʎHN;*x19/dP B 'RΝ=bM.Iu؄&[!ZKvU˿"S<S(#M8k~iYK/7+iA&ɚz>cTZF>gԽ 90_5ez$/'?]׌›e%`C8 A8kACe~6x)Qr3;(#1K.$P)8vE1(tHxCVcJ&]Hp [ҥ5#f٘mv^ОFW휆@X?M5Fmvgjng7ƺ˪%RPȦ*^x{Ep~+lox7L#\Qz0x|;ub[F?ҽֺN7#.CV9@H'q 균s6m8~{G!q&kI@,k 33V)uDe{{{pI0 ,Dr2h  {TPLbf0N+vjU$6Y<rz^?@G7w:-$>Ҽ̌c }U9đ ,Emx'T[n Y=|%%& g6+'q'\E|'PSVnZ jO5AKfJw7rZ=sJ1~ݵ  Fuc ')p %Χ=$`<\6>SGzڨ,TޅH?c{=n+Y).t<"AK> t3?' 1LO Rv$ 쐜#}? l/)A =Zؑ<7EJo:dխ5"H iַRoV0^yxO#h\g#P8}J'&H,Gɗ}[+? CUO>x ܩ;!.)!ifi`deH=gHlkw Qb-ζϛV< EEv+k- |ˌc#%V !,Lڛl%71XFuǷ_UA$B]̧ TD#& r]ZATY"ܑQyc }_aiŋ*R֩cس[g|AkmVjٰ }wUJ6 O ;THIy f1{~C ЯMMN*T T.,cj]6\p,p@wS~]߱k}3̰^qzAB6svGYBYt2E1E6cXNLoR:Q8S7vP/d!||ofI?)ڗG)/yTV8' W,ļylr/mBnޭВIP ,WϴcoExǨ6 xClLh SR|U2}S~o眪H0\=,`crYi sD? ;Ew^s)QcŸ q[xb2ZB֩ͽ!^~LBMQ1vwT/Ena-8C>-*8v"( mUATO݀=B|`f0nozt2_])7TW&xJnjXEom  \X)_GvD҈IGmߦWiI`)"pdI77T y |Qm#4s0$CChҰ;Ҧkޫ`), DDB-eR-)`tgi'>HԂ 3ȍaɈ[G, ;.8WnS,3(xzP!"0BGj5x󛇣M^o@}:0XDO$9:}Nialu/B&_CiIą\mJ}T=C-6LkLt5i0Tty_~}I?П\ulj܏zF/0ɚ\S+O"Tdy,ɱcE +4tz 7 $`ec=OL=RN2duT\z[%u̩@fY;1Hcbv vGHI3vj|] aQ,>M7|C)ٯ$Ԉf3h`=BQ Z 2LIU5z7wce`[ɒcM9qd@[2nLUФs`amld/={,š`Bg9k㨡Uuz`&fGi@PG)$A ;R~72"ƶx q?l"@=x R\})j#ۮPT,jr3֣VF~(>ħ@\ Wb)$a=D% TLT8Q6`M&с1_cڭ>Qp B Ǎ[ʅ"N+3t ן"ݙv;Y/-|-ukͦ}IC(aS5!vN' H(];~{KE%:'J]Ss(5 ,}8Yҫ8FC~ފ(6q1 3pLM z~(]ĺ?: |vE,p3ſjw7 ?1 W:կfN!ͼ4KD?Ekn:vk%WaS,x;YRfR1iNpۨt|YWn_%bΐb*'J S6K%  %wʙV YNw*^đ0snz;.bEZ]bpTT@ٝZijUMF7V(Фゃ~0|_j_6CE⩙JbF:~r)|=MaOR~nw m:N-zs$bw\KG},S=N>{z hd3:?0:3U6u@ZjeXm}|O'ߥ?iN#X?9>DG%;xh0"Vt9|KoH}ƇH3GBapO)R/|{r!_):e߃NaQ|6p[_o>gzA}16Y,OJ-WS`At7UֲMZb{Ux>|f7tȼM\gmtI =78;z@0h_JmR`+|tY=n>565`x{9$C 6/Ў.mCǨUwsXi].1Q=-cM k~ǀ${0`Jnu隦$~6ryAntV&?X"_U60C,߆-uٳEg/a:gP3 \F-݄J2\"PP.gݖsٖx ΑHuh1lK- ͧ9WT279b̫zs+'&I|:GlgoOh9xzrWޞ,O6zxWl ܲl>L-(1I#t~ǔ"$S C`.!):e,;{'GJR >-#d.&Je%hC0~D1D#Mw+;rA-Z֊| ,"8>>Wf^)^)+fl,KR}~;>sMNN]W/]P\W#=gr&*m_֠wWK>ҁCϥ rjqq)kzxф*8D8S@XX$4`.,%~-K NE}uY-u:tҟH}?dm8csIAZ.V׊b>;#gڿzg(LR">j2P CE覔 CbN gS̸WNhKnkUm?`5o#u8 |v=SIz} 1 kB-1]#14x!N807TTõq% NJqװGK?]kz^k5gs_G@ܨ쩐&1{|.y.Ax T~D4 v-7}7m77p@6DBzJ~",1dҬ߷4ۚ<5 d 8= b1DȾKY'4Vd4gd$ƌͬlAN$.e} }3#Umq80W -:y#F/"]~OnεHҶ6nK}OO^8wLJؚBgN^|qa_4|1#Q b򏏼:/#n!98\\O>w&}D ;G+ ?[ɰ4!XU3|(R)7,i0q//Uے1jqwjYf$}DaڎeJ{J#<'O1밋#5 /{[J`wbw1zK Y8z\9lyTr crǃ/xzQ3?,# x5Ecq<r5)+uz;vf/O G*ef. 秮]zalH<.,TE)ZVJF"a[Ԭrij.,a"|.g\kA彸ՌM Y;! .saJ"_rs)䗜:\Q@VGcWE.kIk6<n5Q7gfi: Ó#'ň( ,UH\x=N-\ Fd(HiF%scLQf ^,> V?ST5g0tώɑ ]3#od j@am,<}x#po"rp T9b`$#Pu%xHSC}r`D|}XJRٗd S8;:y@KQXW_(Pd#0uĨi_7h{&ϵ.h9CD͒i5uMfC] <4^:6Ҹˮ!C%Zv"u_n6q?@ZXՂ\GGbt9*G3Tm_8jL䞀>suUZ2d-:hռpy)EA'JN S{,@&ƓIe6qD& v l5 0'f{%;w@E:JŻ#jL?W!;ݱ8'> 1I@;p0eMWt'"1^kH'BQOaBA?P_PF5Uk4?63!P,'ebbSw(O4ェASO/(Ifћx>V"xP½ô*(>y3 &NKzKa1n2a ^oh/Dn<_/2*km25Azj𗳹P.)R`nߜ^8T]NVr VBU޵pWAK6tXgb&c:r%ך[8;&M{2I8fk"Lj.\A~DG!Ώ:1WVEt+5&װjX-"*& Q;9XM҈z 'B*|hG}H/7"%)oc\$<_! Z鏴r%P݃P=גk`*N!9,;!n=. MzFI_H#<)zz2JVACl5lXר2,@AI]NݝI[7Gs \"|\_l)w:Ԭ!kr U!RDnv*dbP EMFNs4B [4雲M Qsyn?c<%Tpsy# -"-[p1'"Zyg{m 0%kQ$LW87SJPmqmv{f# jO\kcٹJ4 ^ajbq!gߥWe<7A¿\@* \Լ U2~TCB(FMJ[I䒶Qnq Z %f3a |fe~m%Bac;* z}I-t49bpt&kY>7u!,pd A =l;)3抲@:L将hFA8 H[?{q"ʰ2[!+*`7Z`#((c gzMSR5x[|ty?lYuAk8v* F48D'U?ޯLRVȨGML'uG?&m۪:pqQcc VSx檈R#:#ӡ#)VAϝ6ʅR$:ۍ;׸{͞kC+O)F^RD!V m"Ogfϭ1ZZ Zj $8Mq~eeL[61^ IZ#/qӿFRm<"C8T7u]?<׎.@aZBfTH>zx1et"0sn!At4 p 06n E -Y&[ ѭRHn2dPr&-(t2s{lNZ7%1 ?+P/nѰ3{8yn|/6=,Cc07OErd9"~ަF"2h:nK^VzWq3 V*1k"VH+Œ@) ^jc@TE3?hrЪyFX.a?'2/@BnIA[3-X;X ¸GÑmN59x8NS'+kV<_\TԒZߗz.gk'%W^UrKg/FXBpO$KNIŅrQ @v^m< Hv/p/˫aw myMGm3x\a,FL mOlS7 |]7i6Bg斪~XǢk) G-/hN+Q/6jKQ~Vpw.ٴUٵ7KGFg^YM׫b5z*B̹/wHSНxt̹3 PtRO!'\}l' OHm%vBε0:n3`:=^'^қ ^f{Q6EHyt{+jSsb3C#KրǞ lC>_Ԧ,eGy#R]f>q8i"1tD RnwٯCO3;xZf]&|a î㝻?^kZH7WdӺxlc* !AoVAݯp[]N696N[tNS.vtS%;fD%`O$Ëd+Pes[j𰛹 `纬GT|ZƵBw?_w?.wE+bPoD14~R}WvL=)Yƞ?/gXOyrf ?56n'A6SeDJ:wEF[}6Sţ.P5DS8;43*[˶Qsl+B*={]-6 anbk2l2Ju2ۜ,ڮ]&C[@`CnZ\=?Ay#ҭWN 2"nLǍzte`0"KCZ;q 1MwcBYC,W~&dÝ8x78uqm$ 옂$7Klƺ~t,8 ;8h#CI1!6 a>0W~$,I} &NSP DLCE-ѵFԀ_d+Þ;&\Mޡj|\nVS%ڡ !%$L(N HNsa=HЧU%'V;j_JLr7V53L51qIfs7EΞm3i i wZ;Iӵz#}ʧ ܅Y!.#( 8ծ+dUPQb$y{97<ֶMޟ`J0!&"ZC)EMm[esSSk)po ?!%jOR/pi7%'v`K2leWaXtuD1 ѻ43-f8$GtX;FNNr``w2Hj2`sºW @\z) -1,5eԿw2~L 귔}XĴ$G=s:]øh WsN  =M 0:S3а q +{!@ڙZh5Z< '{qp^E\oB@vxC#&$2e cJ< D$g'zLQZ%/\Xɓ^2f⵫"̷:ђ3e/p$s +߰&Lg [s=:O[\lօw/.HHJyΌۜvpn-, h0[6@@(ix@˱Vc6u .F>mJJeҭD<햝`ID'Ǔ={mPab7~n8n‰Ft`^lȂ>ihafQH`cDQ>E6)}.P_0w'HSOP3sbG|,)r0-:uhAejM>XnÏ=gxؙd*/orrZbc!E$Ldbb)3c22ʉvy87th\74Mphe;6w1$&끼P-㍗NlP⤶҆m9 n \0`]/jXQC |PP6~iZvh-!$s֓:;9%<a 3婅bnE#2zXp+2B84s8#Hcӈp 5i-by񏃣ȩ# ejI= V/'4.+coD'xf,G}Ku|L O tWzn(\`y&5>w[oNKS)OF&qXAY`!6令͉ 8J d } Ԏ\S&_Ҧ+Ab&-ѳۜ%+LSWWϞ8ڄyFtּ"G> yc/4*cQ!n XYjVchЊ#Pnq|[ڋF\H_X5XiթDc(XmD鑏Ӡ* ETIăgJY }s  7/FWYRYy&Am5(sbPukSRaq7B96$27H[@;s>2#-:+iOx@aGxB>v4!sCZLf_p!d &2vHcϵzum0zM̨J\gӗ)2:yk|<\i/<>~YtN XOaxLZCש6ifM%\mt8vK\yVҥUh.N+L;)_@Xи+Y0u n;⌮֛"I(и-i-reDt _[P Vq|% cn6z.TZpboG&?7񼥑)E1)U pMDpMSl倹Y,ՇymA-{2l1,KWm}vavB< am[͸JuGTp0lcd:#[՞/ʐ'&b!ă[ +X{Yqq{JDཀR[Wpܦ8mꋱ+dRk&א=B}H2EHRCpXڸ(Z ]|GYHʩJ7omL>#X|p8)¬$#h6b%bX5UGՁ|kI-(/{7Oq5!L*_!zI GY6kGYI;Xw=1ebd2?$Sk2wЗO[*vN݌y\l@Qk7 ? ІcϞd(g{\?s B[?*rⰜJfTSr攓X u3žp0ñH/* ]ʼFZ,-˷.]Zc%(=]A :_NbЎ-&Q"֌7~eЙqv඿=mjv,6e'2~v[[⃤ӹ\ e3ki&#ڜA⎕wؤ%4'#xFi䴠jN^\#n)d CVtD0pÝjr=dJ8FuN<]Y}5"M"HoĪX(%wH+HAo"o T.'xu2!'*x&y-h >O]mO~Y8T7dms*(ڔ::Br ʾ@HɠK5?:Q>|g;^s߈a.e$Ռ}lF4/K gjI~(mND03gM.8$iQþznR%` X̰NrkM9 Զu9;EaIq6WEg*0eED,l+ZjKH^-|~*^_ӱ)8H,?wx rd~v]nW] T.œYdL:"[N8f;9dAs}he-%&lW$_A i0jhd;o< Nnzkv¡\#U ' h@/:."K]+QEVr\i ! etbfE\f狵4[@] 2WV,l0l }gs0Tҽ)zpmX-fukhοĩqC$zjq|_Niā{&!)S>ѹr'|t9_sL'u l}K n;d &DPo%(ɒX&9Df \Vj  m%#FQq 7EoP]Q njc8Br+ˋqf=k~[/ vr OWtw̡T͐l=@<:_{~-SJXq %D.%&`lߌ%M7q7N4P2;WT1T}Ftd41EF2.$dTFSU{ '.S*VNA#1rQ\iv({hL72dMm_7/Ld&?Hr'$/ c}CKm]3ocMY!Vg:wCZ#"M@^1h8>a܍rId:7%σ ZuuJ-U#AwO=ql\rd^D&kw2 X'bPa(4xGMĮX(x %oRR1.Ecx;ND!Mָb=D#qDP3 xH%oiW[7>XՇG- |D &b$*@VkwR_ㄭCoG%iDbNjf~kR؜So^v|,%Y<ԏkn!,Qt0NN-5/Y-JkƢ ȩYok~<{QnL\0*ʤ!'y^b_lsgnF%2^ۂBmH"3'!}f"ƜR?x!s&-wy, ]M!y<z}ڌpStwOtRbέi{w2.ڏ ϫ;Bc _w=kF0Lh@ǥN2կքIG-0HaӗX4q ()V$1L5]QN톔DQA$յ5٪vR@ !{v=UݚH {AK%4y}iaK:FՕr0]$)b#Gae\l+۝TS~ޔZXodcZqdA2o*>(`^i(t &Q³ {p"O<=핥X'ަjpDpGG?LSs`T~"쭾,"\i0PV~5Z}P,Ń3ltJ<݈צ}C 觧.1M"p<桾[6OWjj1/Єj_* 3 sx^*e9Tƛ˓K4c8)-GBuD.J.ȁ9(nuWٰ+xX>_;#%1 Ru׃ϹKmd͜м9΁$=eg5n]2ɤU$ w]ur#~5 n0~;V&U|̀"R ;z!rrO ^6up+ܨar+42ҁ oKgeXUIGafz1f_CrW&60@ׇX6vnuh0EN5\#%Y "x[Hm):R{D^[h~6ޣۡ7 -I#}bDEqc}K[lIu]WƐ嶴&\rf*`f'7\:PUiܪS`;|J xS*W'OM<} =s9ҹ3/9˓g^~q̩ϼ>}j%BjYc+cWQ8 i 85ˡzǽ._!P/+5AUF?/AѩsA ݵ]i% Ρ6 HնCL#nHG<Z1 `Xc$Kxn'= L,gR\\,3j64E’EZ 9̆-9ԎGWp:Փ6t9SMhtz.\2#SqKP KTrY: srފq1ӫf:gZqQ1JyT_(v}e85)-u: =?1O]u'NGvL c[^ T-DMtV6b;)6HAr8c}4^+~]F/sIH&ko*(4t*U1IZUp܁{a,\v naxZb׉ɎTk0zK(e>% d,\%_ld0!|r+ 9z l綏*tiyzb4 Jjom0em!GOgUCuRZ@ȾXn-U`\д[RkdţYҬMWG + Y*7;>*q8.v(}ht54ֵc?b1ިwf:n3T/y"7Pιֈ9}g*'qMDӌX&+5sDSݞ MTqӏd%‡:EaN :y-VF.~zF$d՚Mm.$7a3-0/wgPNexaIkY-g8< QJPDߧPr!X0bV58*)۽dRPC@>]Y|cߺt)}k+c'jte6kcF'~#_%Ky&.^(BUOKMmwHMm]=$5"~۽dH{j{;[0?qp QMuǶ: dBţE'5/G߼z}Bn72 ]L^.Almx_w*T(U+q{t_q+ ҏ[d'LˢMZG{z(D ܵy[8x/2m \UlT`S`ܩPe[HzrQxyojSN!$mamz{Ao{MG~ִ^ח,X&v7H%7+-?vz6m:? L+I=>II~%'bhXŒ38¾^GẽCa]P, c dӑN@_;}fViY\(D+PGCPpDu eD KsKC{(?!5΁07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!. L/xX3 H}+N=ȫ п3 YZ