sssd-ad-2.8.2-1.el8 >  A cPU]oҨ%fIGv,a?%_f-nmwKgTXDxc}%{A*(͑5kJ[1E[./~|R|t-3ƶBaڦ_ ιݿZdV>C:/YJYe''Kܭq:q!;OuMX[SFJW҆fX 3h̪3CEȪSL8F?e3?ʡ!!r$<4 AW*|(&`+8Z~bF7c Q܍Sa2VϿpC{c R#Y ۷O@- \->շQ];HCLG9O^@Ȧ&Ufi 锸 G'C;Թ4j\Ԑl?}_ayIee͕%*/XlR[%62XȏbƻG'bdԴ<9Vx <5eeVqDH|SymG0A]$7h>pE?d   2 /LR\            D   8FPF F8<A(P8X9:fZG H I< XPY\\x ] ^^ b]deflt u v0w x yR04EHPcptzCsssd-ad2.8.21.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.cx86-01.mbox.centos.org/CentOSCentOSGPLv3+CentOS Buildsys Applications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&pK9N>bQ-AAA큤ccccc^c^cc,cKcJcJcKb15fbcd69a22a4a9b6c1aec60a7c5db1f53ce854b9f956d9c19b55648a3ca614a06cd7c635a6547d5a1174f1822ddedb4de5f7481382ae65e524dd0bb4b3d28e8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b90353d0500f6f588e508f830a2e6e0114019496719f1889bda67f0e513cb0515d6e2c18644edf5d4853921335e89e9e85363012c84e8825e9793a0d6b648394b0f1f0377caf5cf36b36debe18af68ceb8df13b437eead7f374a1ad435ff648d7ee41d3e90fd1cec78ca70187b8ae65f6668cdeb61692c00823eec361a23eef5921b../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.8.2-1.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.8.2-1.el82.8.2-1.el83.0.4-14.6.0-14.0-15.2-14.17.2-2.el82.8.2-1.el82.8.2-1.el82.8.2-1.el8sssd1.10.0-8.beta24.14.3cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.8.2-1.el82.8.2-1.el8 .build-id5cf28ac22758e365c770b1f2f6d166e2d8dcf15f8f803029db6685b0fe60bc0bfcc5c850b2b1a4libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id//usr/lib/.build-id/5c//usr/lib/.build-id/ed//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5cf28ac22758e365c770b1f2f6d166e2d8dcf15f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=ed8f803029db6685b0fe60bc0bfcc5c850b2b1a4, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR;RRRRR RR8RRRRRR2R&RRRRR%R4RRR,R3RRRR R5R$R!RR R'R9RM֨ZzrT~%iQ2dB @֓$,[g잨<2G|"őgÚ,PK䌼< v4ܬMo72qxjxMIMFC?.;XK85a#BlÊ<2vhwE}2&K48jT+o29fƖ<[]A;X eQw)-x?Ӧ&:)?6HcvS=fte>4y= |*殱,n1a5~?+S šn@'O\s%-݆LJA(!e`m>e,AR5PӤPf[cjLw0#iEDѰ;B_HVaSA;$-rWmj*0>dq~(3,6!J放._:4 Զi+T鑇<6m}K`XbJKoa."a{+ 05Ѵ2g2BwuOfc/=iXT%2woX%2]af&AB*"EE)Z~1s"e1r.(Q#Lom\h05R2sWtf`n A sB_3^BƻH853FLF, M]ϸ'vfӻ<@3cBb?7Oy֫J6|sCԸ -5Hqa" -9- u/JXZx]cV=0v1^tmt=L{n۸}ֈ[taYxVof_)lf7TzQ&pƜw\.Z_:zQߓ׏8n Gq|K5>W(F~0vdpU4^j H`L`QNtcsv> 3 .XZ-W:6E .k%= ݎFở"+Z2NWCc7|+5|P]:=GHT=Rf_R~'J XZAң]d*6[vKL稂E qaQL=I?!ҔP~2g3'2@%8vkBADLdfyl4+< "gg%jIa5` gԥ0Y 3Cte6/Ueg ]UȖrsr&ib0Y(~9xo©qST-'r@}|f3^EH&oQJHyi:- ,dL %c ےce_Ȫ8׮2`[,YHAJRVr;o.Z;%(oHbnpb-uR&'BrmlbZBb|uԗ^esq{Dm$ \HөdJ-)2[.[}ąK+'bsu=K IAǙ"Gd"6 |8a»Nb>DH?!\D$`dGX}.zFglq*q!#׾_f;v&ۨysADCp WTXst a .={mٯҹg4^1F RL^Z!gh;gIynQ׀.AyWӴWϥz2WEQj"nLΉ[.~ ԉ!.8LC&: a zfn]Pq"ܐei In5߶ʙW WW5qGѽieݞZo:&\E'+}cJ^,Ú[y;o`6c"鏮dS)NO}Hmn1R!z3ϩὀ-'pw2}9&ä^9LyIȝgï. IAmyA2sӣ`DuJTTddba^>= Oԓ6xyriHyPH(d\N*.K}- bVkvC1ШXHlB VgOFR(YUU (f{S1B} wMj2M[8b~!:ގ@IUNOk߸;g 1+ Rޙ}k,&~)/WzAiX"?Wz7 I]̏و ~8o%IM6զ"zfV-rwgyo–嗛r9loέ04E_-OF.kO`"'u2Gm<܆|Yp0n᮰g<8`VJi3݀โ 9utʵy4] 'A^}r{'9MMϚdƸ)hX9Ø8QAU ^@?_?OJ&H01G3H\5}fwSLt- P$v$H"[nw wՐ]Ej=#'Gf.E+ةg<9^%#Jќ$#6h5zgruI}k؁%rV9% VokX P.չ"< fl5i%(sb )Vzp)srKYfgu} fwվ>}ۦBss.#:&0ȳi}vNc c)ndǹ[.7^-HX45gә&: 2^}NUjj3bV ] Y>]o^uqRMIbgȻ\*3. (r(BT{&u$C6n/o'¶sUW>&eyn..=5s#PɐZG S$O*JIi\֦?19J x~[;?ߺʒI!:=J5j"Q7E*xAEE|sv U 4QA}s.9Z7&O9pgS-RQc<6` K!A7ɷتx mşVM=M, f(]]Ӗ&K\sqeAqZeCﺎ;8φH C&@%)o/AwOOE]S3ն .00 1[{,\Tuf04L~p\s!)[7)!q7n// \&b)EQf?kgu5k7t'o%z;='m7{Wޒk2_hsZq/cIEE$wx7b_{.[|#h1ּU6 2e̗NaX/NH%!y7t$&nHS'Wo.^ $Yg]k赦4k~w^T;>p3w9B%9u!Je 2[{O %0*_;4|1J]o.DJ.Am&OvՎdP͖<8w7X6ϟ\#s)3s~M&0񆘴zavr4\6, Cdž<:U4iMPyOy/rt쇾U3EZ}o+b,q"w]{)\ei=ICtQJ:T+yUkŜ.n_8K_铕d­ۤ%C_Ԙ_Iωƃ;CGO4QήL?mO˯^Ł;a83G$x[u 8sfݧ%$S+I~p~#.Ɓ$ "5gOj/\دlU/d*:[~ jHB@Дή]nc0kls^d/R?zcYk22s!-h[_ ;=$3)[H#WW~lBG[{+8Լzl̬`EK>%CZ!'c+5%u; 8-x)-WwIE[Kxɐvk,'&@Tu 0o}axxr_jSի`)/㊒-C +1,c I]ݓ Y{HXAxZ.Bֲ=5 $@ ![t[7y.褼{!R:'w'KS[wRa`%8M`9'˭kb4yT*|u|ҰXB'IJO#70z?$$քI`U)i:amZB@`ǁub=(H-QNL1"/ւi#>P+d(O}~7)N]!rr~ʩCLyBs+t]MWnW>kh|B`zT)r Tnݻo<.d,9Xc+_mIƮC 1DkkH,d jgSo[ܞˤ)$G^ƒnQn1$`oKAxa8:{z-SrEq^qJ[ vԚg~Z808>.`U9RإZr-V*eJGwW9y8:\X,:<0>Iq 6Ww㝜Votkkw ]_9'&tgMlt ]7Ô8E/:mx2,gZؗJ )}"ހ}8K=[~Qfudbd6ˢ1SܑhBȯn!PUc^2kƵ܅\3$@Vmס:< ,UXYs'H_$N'Y(hޛfgм"y'Ty JR Y=\ˮC}fI1]Wh5];d}v\Wa*?\g)h ưuM'EBt82YU :N+b;Qdҷһ6ղ4`xڰx\{lz:?wЬo2\d|;3kCcG`'vvJ!!iuվR5^|P6ouqo䮩~8Usk%Y98w-OƤڛ!|g 1ZoHLLkѭH=j86P3J[,"pш~&+-\dX=3E#R[#gCm#1/ZWi_x# {%2pE qYFl PRڍQR HÀt.2@7Yk~6k;;{-@=ZoeH] ˣ!~^ p>t6hOgɔ |a-nOBiaʒz9y⩘ =.҆__8U x4t k'y޻/7 }4*Ifrwgp\ whw1_ô^ƪ_c 57!#̒1RV۝^ܟ_HO \ۋUB?7Ov?W>4.iDջxZ: w3>e*Ċg=}R2+AFjW&\kZdOYZ3.|SK8v{ J,i!ٶ ۱ 2fBzbznk[ t0Jnq[aΎlGgX2(K +`qZMqԫQ`֐(튵pU*֨*I݃>5Gu k0>qA/뿬W'Q~H ְy/2X̛W`N? p ]lM岐Uteеu(!Ń㮲CRPi֏nOKe\~E̵a,\obYly!"z3445# @O-5WA1~3=x4<ÀĞA>){vO9WW 8'HkQH9=oQ]ԯZ.hh.^$ .9#~89_ybݾ،׏qgQeǤzl<~:zvkխ)A!wo0aѬ$mY.GRo*?afxkFHZ/_eލW+B*&ȎJtfLU'Un͍2!HX2)3^e-V4bjڐ 8{cĝ=H;G Y,Lx! \{yՇC&NZ~pz { Z̀A6uD6ibSIpElO ϋ B- R>J Q!)%yьZP"}4q"-m2c,韹Vh%PRV{( d#\Kk*`rZU{2C1&<}W:;!X΀xӟi!QJAHw#ك8;" 澸_A *0Б 4b)څQ4gY&fj:t:k5Dȷj0-#I,|s /b\TbkΆa2lK$- ʓ4Y&V:믔l #oҬ\O>ZAsPAAWx]뛝`~t|0Z{jEMFc 6Q39Ka dd"pE& ?3N>``hJr᧫Lh'%_ p!>] tϖ+, #m#KV8)vKC sEA{eLHK#/8dD׈6SU@%n2?&.n>+5sY!S-z4cG5|NG ۬!` @`I3h}k9](!>O*/*vHoZNZTQW%8׼SY1lJ@F 7

o H=2MXЯrvM?ϱP^C߆QڲAŘ3ggorI;+].`VM.?,ψXj_a!WKFgJxbTa\zZ˽MW!.}4C @ɰu(. Ds?yƳ}҈F IKoxTh$\Z iEb-otoQ<'s% B:/<8A3aGIyxSi?@i_yBn-/ +fVG9jiۉM S9. Ov!##^Č%i'KmqOuu|#7? Mz+#rv5v Kq"Ho/zn`ٖxy%d97pXGcm$4YQAv[LZ*f)2rY r٠QzBgIAǫ^+b9]w*iILÛCx(-h5EZ%15M Uչ7 g=sVC(smyG%r&ͩ98\DϤO9K:1Gzhx8{?g ߷YV_ ]u;B07cw<ɗSG:j@NI02G^T@q:YYS8? qA!V&V`c1ZMU[! ${"9ƑȏH1Ms̮97Os+"JpѭoS׻/7;RwY/阯!,,ӜvXoCG. L^^h08 yўP<}lq LWcD L1ƈ#4y q%@;CQW>?d#jj7q~hKlN)]I\84$tU w kp%oE\i4$rcG]qu̅ƹao9vBke)Mh%c7 Oft{Ŷ Ah1J`hǩ0RivNۂ#0QRb% tKg´ o_fMqk G+S` d5؏RFk6WZ"YeKߦU(< >idl!c$IgvfbٓN882$" ႴA dkM*$҇<:2PCWlpCG %'a0 58 ETU@i6u[&{?]hB>{ᰫTA PA"F=2Ble:q?8Z; ildo/5%# =ʐ6'>tdxBrP(B/6:7-_`vAAhQ. (KMYJLyx[YAN9<֤7Qӟ3GnjcTmKUK$$:CudJvh\};FS0)r t ?u~f%e_V)Î[P(*4/-cjN.؛(W7FUl<=Ybþ *ey \>?#3*7)T9Rxla8ЮD0A:^UΈZҗP_Eܹ 31.W4h_x x6ը'T7R&Y6bj7nILcH-WVs _}タ6eubIf']՞KqRSQ@l\-_A˄/PP_j6BDϮy`4e5|D5ۡvAc:܀M|RdS4U#c :#pH xjGOW'7 z\_:u"b(O>zXM2[ѭ;UfUR+=DW !["j]8fd Ⱥs8pxqT|'l9QR#|rYWvu>(UCDFtr4ϓh_DPu w8 V/+_gD?SY'סeuVB,G%h!zꝬЫXQ\{݉'RI@E|=dT)6hx7~dq_k;Y ZjH䈃p!6 cRQ|# =E4-Wm`9M| |e?%+?*\Uȵ|ۓcûe>Am4 ~11U]Ok?F,w N fB:݀i?^cu2NlPn38`w1LVy3 HkDRb[(@CSsOjDq3D(U9ޗW;w! PzobhVݪ4br0 Tc)G+F:v. (@,\|]x9b`!,z|WyBz؉,lO; }n/=!J)E:x/Ish?iKAGOk?4򯯰$|9}9Ŗ# K ~, ?uX'f;60H=}QC( _ZAiy*'\ϕ(h$ W:ں.h t9{p빲yO-g@"}{/#2XeSb'*a^l{{-: p7o{9.j^c"I*0%05)| XQx71AwkܜE{.OJoH>Q$p_OĜ'qR؊%|_QH#eAhl$ b#ZGOPz\ڒHDfn=#gc =&X+ǎT6Hz p5s1T^jobfwԿC^ šSd%6.}瓒TBog:JA:ٹٲk>.n.V|SKjEp{,EJ*1_O<=4>}Alz'_@cBAQ ]%(Qpߜ?sMȷ,"ta cs uv1LYYG|s}1*:]ldu 6<޸gmj-ܔS_ צEp(D=>F4~/\yh lNy:udKi[;f,YwZ|7y< g6#4 DV]R(K9zG>~8-S=,~ !S<(898Ou jja /ie&aw> 8Gjn+NA%jmWsUrJl%jtzv8 Իڐ(R[Y=.;Ua  E x)YuQ^V&F&tnu^h+a1`,'m[t]E\Oq6^Ip.3@3!Cn);RKJ/frʨFbsHlaf_V3XCerqƭ'ZPޕS?$MWZgA(adKJYe%a; 扣q5f^Otvզ3.hCc]X*fEße ]ΰqjgR|#f￱ xo˒|4! c,vG#~I~&3BK[$Ȱoqdl^(2rҒ"^{lH|W<` 6E/<(ǖݰ߬qZ G7J11m#)׻2HA^řI*TWvj[8?m!bBޏ-w yT` m^/ ų۪lVh%4%cNdyriV-;uR a2( itQzV5N؃ES7 MdRYQax[?,8/bm' L"\{ |Ssm`E5 )MzNE#ԜɜKbSQկٝ6C'~=6v1r*'^.7OguKƜ).RRQkm\؃S:GI^h)#s4?̓QkXz_<"eM#pfD٭#t%B^t$]#؉2ƾ:B@z >t z,pRWC|7%鵻X"0GjgW~- Q;4>i5}tQ]T\:#c>p`%+.wmIT4V9?q< :z>~tUzMoxŢXEmAG4D,pGA):Yq&ARR_&Θ)f eG8Dd`pa.09mh8ie12aOL^isY,B_Ywu'T u(z(rzs~L#͇Xj,{rG,D) xBA3 Z_pYliQHG[Tۼ  M*'?GtCH{u'-ڻ\fq0<]zdޒY7vL~lIzv^ULmWsEh4~zxtߵF(o$L RErglbDN/#Sέ;˫'";ݻ{])"< 9+XJVZ`y4):>/NoUQ WJPd}@ϖJH^Yn:[ݻEjun9 Tq@qLKz`!JXWw'ZU?fw }w\wxo9R8NJѸ~;ZAAMuGb5w՞ ^Y"T8 8`bHdip#!}= a ӂR#?u0AˑdȔ6R,\}^018*JVSA v]Sne|Eכpx\-Dٯs^*g+U ?Beե3K-9IJy?=tҋHT+KI"J>̕zc Y U%Ǐr%Rs#piVP>eU ,OD.ח5omX&QdŇkhH|$˧c/R-B M&qK*oM>j]lck7s7faKkJa*it?S|m2[u$4uL6Q#}Ù$"p* >bZ,cBvE!_y`g ?--jF ȣ~}$t#о%&)K'v족z[J>ʊ' pý爹C6w}OO`UВ~>#k3H,nLIM?`˃΀ b9p4.ws3M?ROn$rl)_eP,Wۧ4Ѩ{Q,j($Y$jCW<3 D nԤvRAo?3!!m_]_mO(L &V#6qEvȴJ:/R[Tf^}ot-&x<2^؃c4t"Ϸ(ۂQTXĚP7^wcŵZFnPA~H7D aMO0c@=:OJgb"Uaʵr"XnYciVW8bR,\wcҞIC_튯ytwڛ3.|$4^ۅC ݫmYII 5 =fyf,v~c*)v"[GRfҽ 'IKYceZb)֖A%~]x31uAb 4=۠*2*v=&I)AqMXVKs m+FZqI Cj)SӇvӺVB1Ŀ| ZTv/X]O$%&Pg|t6I_fqMӁN2:ϰGr]|:"!_] ZLV,[B W|.x'e`Y5`ޜ=Xh^=)o)Σo0+ S<7u%?~ JvbSH;h[TgEW9+] iK%3Y?OgQYhR,'\e+Agfo3V$Zj'?S Mash7lŵN]m=.p9: E~LmSD$t7WiۯiBZ9V#, ,HV0: J*6PfP0k?2Utҁ$dCEsugrgPZLfiQ2HZBܸQ"#x O-ő@0MbmgCQ ;v Fx"^DpAl 1TjLXN2}kNHە zH?FI^Ļv-Z rbjĸ~&OVr [+RY)i(Jz˛YƲ\/$xDtߵ ^ M h'-p]?TqJê*^\Dh 5IUEǀ~˅Q%/,&%Eu7e742Wi|(~l$*It$_Y:Mb{WGar{lBGGu8W ST9ЌK"/f_<;_[M`H Í*T;B5z,oW|,=,75: > \^Rmɣ~BWCUH;=9M-ZhmC$3:Ӆ;wy)@Swy70R=⨞g-pG9 @ yvo-+B1M$LF..tlxB^vW$A@eY]꜃N | :Ғ MU#Ii6')$85Gq1OjFtx $&(C}\}ED1x#[kSb2CM Gnk#oUH˷GkBuVCw(eʰ]o_! Qəf 5DGK!z*ݓ6QZ~O8-b(+a#qdRU.3U EJRzf b*hZ۽<7g5m+v![Ɯ ĩ&+?Mu(g{ Pꓠu M~,Zz= \{pr7" E2zZ80eCkK4p/z~UfI~$x= `z-nj|Iy/Z9,UU-A{мme)0rBʎg>@i[PmB Gm4&EfsRghЉpPc>$'Qg  `!jq7U]ud1P @AeZ`}&{y?MkH8;2TtcYj^gKx7iN!+&{LQ/Gi뿰~etOf:qñ.O4kSUϕEߖ=.yrF|)uE"a>?f0iT%m:q0}pkLw]bwLse(qV)xU )w=i APuSP5 .TW}f#k3MOe&70ڃ]-6فsCU -ks .A(SyϹMN@D-l~Q-o di{mE& 1:.RL\o.j1]-@Oy%6_ jQ #W*y)M$Y$]SCj4!>]JBR֓:!jН cdfhnxnO"4"Әu2⪕b 6ƻB6 <pi':} Qx^_4.w@qG`(5c)3}/Up%S7CJ;rT,bDf4eoA1CS7> ^7;Y̔NA4t䔗pJM6:W#]ky„>yᐕ y_N*7E<}K~4dgʔB@+H )25V6W(+|4* \M:ya9W)o_mf5Q{7\ŷ-~JbٍtUuh!_'k.s4j _m_𸟉.nN %{Ս͗9`$ :Jaq1Ỹg(~T`jIe9򡪐x:)v!`5qڋ* 6 aTNJ"A${s`l]jԽe))fƬAA rcwo)Ap10A!SgDh-Yz":`s3BsE1*a]S7IV>hb~rt3X'E'5Q U [Իw˝6tLNBtޑbkHJ-`9AO^ H Չ)7~h# I'p p"-$c3"}U2yP縛c8V S #LKe%UYT7ieMΨk>ckJKw/+: 5!ⳈuQzmկxQ2s(Ɯ5h^wmVCz"~dݮ־B#z'SUb sg${KNmhhI`e[[yFx2 Mxʌ a.v&K6$>5ӔfqyVUꑛUPc}.*,}+80r\$n$H% v2Cі!$S _ Vx `4p3p{X[ }s6qQ]ɮZ4x|Ί6 gW!%w_ GeZ:IvyxtvDFfX4sBM4az=@)Z:.=aw 1u?"%?ŀtsXG.]tw-B"nֻ[G~Bx׎ ճ9k =HliE $\~yS1J8gd1l+&ɦJQSa۞!OUƹ1Znz,ŝ3T,o§ZRrVKo@[T> ad=EH%lS6J&}&4pebT&j9Eέ'т)쯩WJ^HT:3|ɉ7bs(*pV@/=CD<;w^Rkb7!֊ +_g}8]BXorRVEV)kc!|7CRqg/G|G!YVD>GǰD;+Fz]+Ub`vɲ9~,)͔D3rQ4ڟ骓dg6 1Ê;shѡCnRCB): 2ʓ )7Dm7r;E+i=ƾ'H^^r2ϯ/.;'#p/TvvIȋk'TdU4aT%w`'Ȋx SM$!兩F * SJP_pGES\osz8Y$Yإ1˜OPƉЬ[lCu9pQχ[|j vZ^`7pw.#C6bqr6:XygX+'F݆$KAp~ԗ sNfvp׀4^ _ A%_ZJ^-MRz&V;9n e,fjO{Aw+'U:д36wSj˫iP5)ˉz٭Z[18}71?Ǔ:-Cd~,HqDT 70eC !cޱ]w^]Qajtt{8[jތ%pɸ`0aCR!V$(xiQ^Z;Q~ҎH"A6Ѵ|tj&U;/U](t򻮃zKQDX3=$q-⯁kKz@ixt mẐg{1HOoL9_MoyKy9Dh-ˑHm`Hk]US^m[Macwyܷp^0b6k14Ʉ$޵T:ly`ى`E,JtdfbaH+.]zr$b.ߧ}ϝϱG:?2{|_zv{1yUGbHuA%Ȏ-xxޫ3c]VyxXF@o\ШViGܭA/.3AK7gߙ9U̥9kًo1IV:1j$t+A j|Nwg-;үϋO5?OTz)@uڒsZz3W~0i) +*Z. AZQ0?DCFfϑST$hK$GOH@|yǽ/p3љJh4y'Qr6)DJ!/KͿ$U\7'O0Z5o{t.Rx$ۀEE2:)njB!q/ٸv>m[lP47cjHdh^=#!I&yTdC#LE:.gMI ;%ǺZB/KMХ<`{U3go;(w2a}W;0I! tf fX _ˍR)<)=·tg9X#kbl' +\8Tʿ3Ztϙ3ReLbxa<,p{ę;#'-蠺pM/84y6BeSHبʡJ(s2wS&d o97W.ڒ4hۦ`0#b9鎕wq"G߯ вp2[2)&@1գNm=up I+NvHx*D}w rc3/hN "ڻp,Y6ҁ JֵJġWglI9j˨ʃoSG'+?=cA*j>LP&Pq>R8FY]1M%&Ӿ\s!rp7i~U7`GPxa_+_pH>4F94.msdE$F2D4޸K>E2nG73(⚧Y4Lj#Ϋey\  ^:K> :;v}W7+FgQn?CU u%-2L0i"YJBd[ZKiB[.Qڕf„B&._1fюn(GἒUh$~@ ^jߢKNCtŰW"M^D{%n'jl舓wgU>:>af;Ԑ]db[EEgdO(.&d(󳰅0!즤'NZk,N1oogΪ v풼>YY.t0'%t_TcszʺY[Ґ>b FZLo5!}ҧ%h{(R0n=KǼ0N?v\/&_I:G߉,ޡkإ}`1A7ɘm5(G]~ZH0nR6v0D L0=LBQ]qN+bƝ>0hM̎1 W3 F8,r5\Wu{)-5>-i@vn LluVZ{Q6,& &/^S`1vil88''a_r4-9@O*g7E;4&AL}Dl1_Ծ\XI2?@vmɃY?UD24f?]o#~^D:P[I3=׋k<ٌfNu"mۥuդ,-e޾!P}l ѽ`HߺibIۡU|RŽn900;6+-ϏP!\W`'OpKw[kb [.쬠!i%w"c^cª]9F}.BNFHvt9>PBO;d6AƥIuWi@Ə]I/Mt4p橾µj7ҳ#fԷhm'4U-~9C{4^NPa onv1B9t[ziaQE+.oK΃@^fe9Jh[x֏M:4zW4 QOXr_JU'Xʧ?mC}?_ng,AcF5>Z|F~)tW\LAi3ٟ`鿖nws$Vv!(al ^s=yIG3E.>4:Z^ןLPT33 ,ǶHH3|!.v8ɑM'|-/v3Ȉ+BNF)}9z.Nf4mXhBKn1|=.#@.Cc\ sl=MTΪ o٬ jlGQ|W|˘  22}EެuVI\=ҁT"4'T%$P{ȳlp  6K)D.`!8Z Q29ｗG 3SPI[8ϕkƲfN#L:/ Х@aglMɂeU9G0 99''; 9 4H&̉YH̘juK[_B4k~ Y"{q@-ę2(\G\uVvS=xgJqaʡJ+,˫(=gW;ܫ Jvmj6,\@7GLjE YpIc u.VfiOfg;rhUo҆W3n!y?L<?[չWCxq>¡@\&z,ޔ B ;R7-\Drmهo[O;]>ʅ1?߉^L~9߇ns)n\께}jc7Å nxA* b;' %moyWRaA}w_x8nߧ 86_In:ň+r`n:=:cz?ZE2߷@#Cuωn|#X04{UWβJ=}0±燧'TRhuyk&p D5? nJt9Bf$kv-O E:ͣVW kGE:D7d3 LWU UXP u訴Wk_ G("U4.l W16Ց\Nc)j&1T҄ކZfu<]|t?ou] A6ńΛt1qYG*ݑb˜L (FK,3<|$ K[%ʃѦ%.~ԸnO<;[w4"l9VVʈgZ 5ҹbK@j.D wusYLsi 2w/\t ЫLvnQ` CgmUaHCtSu9@WȽI-+VP%qgS Ž0]8 kى[p,Rtpa|Ke'gQFnIo}RٌLn(ҹ CA|BKΒaƺeiHQE^ˬEÖ/MLjyɷv!#S@ L& ar~|-X0$ ♭z{Ƣ&ֲS^i%tQ[67ϐ^7|u#1Id=%WO )qnHb|OE{at>#4aSh$=Lfc-Zu2W *hEXՇnz"- le Ki)̩{6hf7dž`1<: èNX!KVnm_>jI3n%eTL\L7I8wRfRJj"z=+Z/45 p{ l!_R:'m>e~:L8oJU*l$ieW(Q— %8tH?42W XD$f~l ^Mfޗ*`5PR7ڵcbarE/ !CCȐe?D?7&"qV6 Ɖ ktB6yT! hFNc/lrE- 2kVfDs.軅>O@"0)RยiV@ '$"B| Pq~.Hp`3<r ޚ4amaoCjA.m*2nNK֢q\<@S0BN ?jѥ~qح!)}Xɠ'FFKuGh46y8F^"ۻۑ@<K]M *A|įU01U6V́mYP0e#fl{1)F_fPՋkafNg~3?+Oفr]߁^Z(L9zC9Ms:wo]W-/b^Vʇ MD#]cg W=_!aftp _u(r%!?(݀#Z?Rs4_!`kUc2М/Z^c/љ{\a0+BX;8B~:d@1 Bߟ_Ցd >jmV4,>'oҮwjl/ kԱ8{i#%O '3UPl,d6<ֻ%}EGjScǹa.Ή;y\ ӝkBb=AW ( :2Lz9Wt/z@;G U)$OUA8׼qGd`8yF)dYfS (BO1oi<­G/rm1V=mב>8*;P{Բ.3@`+l >;G3_>s.4 (`=vB ~RQl5_%LV5~ P)M"#. C;tlgc|%QV'zϵ☘yWA#Z6s=PyDr#{k@HXTyQ]݉K@3F5!lYM(K#ONȄkEr##_A|.`FoXݫL:m5+Q}̲$ڈj,EPratWaVUQa7k\"ݘwӗwqUQTX|tfyslI'oIF Ơ3P iYE$TGS0;uṡ 筜w[VR6!*T"j棖8U^yl.X6icF7 \εzl$&˻=V!kM=kA' ͬ/Θ^gPɄPK)o!SFrF٬0bWH+'M+h7Z Ӫ ~zUZ}o,<נWC~2uP5QUSTqg7>xqJ(ild ^NVđJILT:}nQm#sf7м5.N[ Yz(JPF%dAH.oAjyEMٽ}KI"kJ=j"BCϾP4 &جd9XZ,[ͨʱi9w>:!>O39 h{l|է!AC \hvkPMi[:WwUp̞)Ud .x" (.&E$Pj>A7וks%\4)߯!H U%# noBPe;(Rb?`Yir@kI81@uRb6|@V+D֗s:U-]KT푅tc‹ˠ+GŴXM}CV3ɸ+e`q PgKHa^x:f؞*j9íW⇖tVgf֏IIp7QJZmD=#pX BepjjH ;Y %W XvOQr}&]QKpDOp>j.:LAGV.0͚%W3yLqcw0tz<̓HVszHbqл/B|*cRhnmJhO_px Z¡%nj:Ujk9淇8/#?PX1t˱ ZgJMHo.Ʀ`eFՍ~I@f}9%;bB.6rP *gjBut@fD'E/Ydn+AY޸W̱8Cq١w}%\iiU<6$ vQ$Z]_VYOT^{M~~بY?E1YX(9PؿfmWfCyzW If}";b_5ő>64DPjRǗ Zs\:K<}tь3z@ags/|lpzIOxJ:bKO~ ۘbD W= :sy8F{HK=o8"y5Z:^R KI fXӏvr]q pb8>``ZF&ɧmu5n }UHEF*}u kt[P S+dI2 VH[;3Jmy>q@Zxt[ϥ޹C%&aCa2KN0',6g )S+-MQ 1Wc=cD6 >ԧmZ'](&AJw/Š5\%*pmڌfW#hwt=KdPg4:bLA(8`#G̼#6+ΈM{ĩDA)/;&#) Wf7,Ћqobt1TPtV݁CɦSi'Nԧ Jg)t(k gFVW, kY RHI&v;}oJ.8)&GΌ' @huՠ6X :qmpG*Hk:rz,_,'+lzj*Z!KY-`' po3GqT.K5v r*Ƞ)Q>o>:] *kk\qI J%D4K4f[iW, `ON ?gD|u3ѹ@/B Cʪ҂~qyJde\ab 2Y7  2 L.tkrCjM^:&[z&A]PIK}$t3"IVARFfSw0%- :c'?+1RN"j`3ihA%ZԺSJڠ%j`7>":7ևlǃ3 K5?ֈA8]l(fjو<־sO S& &_ '5idIyrKGcM)_D7F& +\RUDZgܒ;g@Dl~VwQiαPu=sGyE4Qً7ıEO)K\!bi@ƍjOj1ҹTҘT9IdtL ew^fQ^y  ː5N^Aą2W5G}k"c- ,VfrO<!8F$ Gi")1Wyrw,G'ZP8π0”lZm5"ܥ.z5?A%o_Iľ >P8p?ҩYڝgz8SgZֆ0f+xFgtfvk689LFho}Fv 9HubJ#g5mbRzUtgnQoOV槞P,61rc3XvǗsUrZ!ڇmnfI2NkCgޗ0@8[0,ۄO>է,IA6V;'Kg29VFOTܱUİ}D=rY`'T<+TaD&YD ,9SllMvFj oIorsk rd]lS"y"h;fBGŋ(5`8`rqF];.6Y);1RuыoWC f bsL Ua}Vθ 4o<BK:G}\髴[W,t\Ⱥϰ4(@{W4J(tVz^RAKU<6$7xx7$}~E<~A\ߴ偁u^O >V wqޣIqc{cpR 2U2]lx$, |n\7 M2Ҕt#KJ-xԸ!CnMpKMmc8hMǍ(IY ZFB'4wfPBY Яc,<0jk4kxs0GavDH[EknCP;.q ŊU_ZRnd]S$3.p@!֘xQጸX(:@$,V-;,!V7/â"hu=?K>"2!Vk5ǭ*X2쫮 ]Sz,ٝ="mɿ/Kq\4`h$-џ0ZEudʡBnR؛kI~4߰ )o(P 2v{@R *@jKÁđ28~^d>g: D:ںe0[܏ͻZ˶n0hL3 q?y瞟rlUh5|~Z`?`QҜU,:"=|%H(&L+js V E//4 ڨ@͋ --JS#cKyXώY?eӧ*Ըd$5:"8]I 1k~vv/?l&]܂Y BiZ_h[mI+T߾jns-l)m?ӫm' yjjcGɒ;R6apC^}:G!uqꏅz6Y*`?@me7aemV^Y#6Ȏ8BM8b% tl;t~~G~: m&gtQ8I\I>BH2|֍HvD3 [+:lC;~$ocD)mdFoq-zY{o'cv̉eJ;)p1uY'a_iUhnvA|fB`X0-(Lc|?d~0̱w)9j-s_lAkɁCMHv.`*z~ɑC^ϘCn`=cRge(J0Obw-E^9" B桳2D#9`*[$Vj\5* QMl 9>xd;km6$]Ѐd^EBrT =PSZiA~8w7^::ޙT 43$EHo%#Bfd/$J.IF,Uvx~]gTB-PAU1@NYK2VO߳# ?!|{y0ڟ{s\G]DҸO(e츙||67p jV @tڴveڊ]f[9 ƩjUeWYO+|j5q"zj7ӝAo# = b\f.%%~`Ww1 SXSɟ sn?T# P~^-gK,^ݱY ^yuvy'V/늵Qvsy4/ԣR s/ƶ&>dyӡԈlCV:;*'r>YaoXD ,2oi[-u`*+G qhЫCN7H !W\޳FH4m6uX]ԧ3EuH-ZhWuW8c݈X] Mt֠%ی ֦6#um,uy趕O:yd / r):rnvv.8!'.+e`ʼO0jR0 2wO>Al4ݭv)YJ}Z̉M -Ʀ㶦JA>ʕK]33L2+w746l%X˲ K#V?#P!+곷QHҹw,=$S;xqsLt ;!uDU! Z1$le\PۆAyd\y@yᾁUf\ 3pKz* ֛eh+sR7l3ZDž3?D %AwKJ|GEUN f) V;KBa~ݚZy3^AS)Ur+uhƬzk r,b.;w(Y@wR kAHӜTgqMQU՗JF- [p޸3zs )hg1jP&Wk|I`!ylGHsz謧 kwM/p7d2]v/*5vNozR0aBW8\ap9ذͨ I @;ʂ91x|紖tMĺ{5< GWJAVfiU]h5yx~107'?YW m7ݜBM9TE^MD-=w"rY D7x˳u7&Im@Y2.ݎ}l`畧Q߱dתCx'*WW {i ~NX 6Tied!*7pǪQx4YRdi`oހ @- Uh'mLuϴ2u|ib!j}iޭMQiԶfrڍ~zCKh}`~ "ڗiWq!GR߯/sWd rYN$r1ȥaKKtȓ-|%Z˿*+ٞA۾:fYA[OboYNiމy߫0;PS؞@x7嬍7s]j*mGuppJb#q 33TqNԿ&Fg2.%$t|_[MovTixGzt^ά"Qz=XX=W}]R1Po(S=evT ba5_᠅Hk/C閸Z-ZIEp] ;WslKQsvq#}죸X&щcLĂ-cxⷋ sвq8 蘇Rצ207,&{d u=w0w422m7Lͷ^,*wxKuY-m)\VoԎNp8^lN{IYf*p hɶVy/wR'I%"|,!M<@9/i1m1 o RZc<^H"A<3:˄^-?y%Uc/3@ Jʕ9c{2gSDfr؛Etɖ7<-@ ]{W q;Ղlf(>WT+T~fg flOó2䳜SFАQ&hmx;^mUIWS(iPOۮ 3Q GD'4-#KPu2󉆼)[1*2pW~&>D?+ f"t~*Tkk'Ǖw CzEBz՗ 9˧^ M %M'*YHGz뇉,7Q;ӃKMj\Ϥnv0mDf}= df mS ['R .*-/R}PH#T52% V)ڬq!R֯TB>q (裂N(\[(`uS(]Fpk" =|Z%c~5!׾4h:)3- (isc`}zo1|^ \Ȍ˙˛STkixuX((?qudOPN!~b⒗ŐMYPLuxhh鶹vQN`sl7Uv]qCe Øm[LFtpC82jwN<ryI6!O=Mq0JB\,q%7 -~0&t_ U2$M̓ u|{So{qDU!$P;߭;+Fg NhQmSzLT̎Cj:S R8b=vKQwy)C[.AtD)3d cΰ 69~׎״tW(AMUqo[veUpZF{ _ݝ-Oqlhm"S/Ml4G[mo4jcx ܊1,g@l(U?dXZ?&-#lx6yxͣnG J\j2|YcX*甙|[0Yp!Uo!sD{KnwPHv #CI8wʉ5~4hJlۣ9Cj`&=w \/?05xVg&Pr kCY݁&#kHQT+qܓ{|Zt-T4FN붪T>Gv_*Z[[h>wl@:mLI^}0ţz!Ti Oq]x^~ߊLi)ҪsT]|oCŸh]T'8PQFF*zv%7F >+&k{,'E(q\?ĊO'H+RQϳmnÏ\j0s4&3^A//A-xx钳(v۴oB۬"z-:^[6>yr Xp뮛a'QZ5p(' I[bD)%>sxs?7Q=zlmZg[' ؘˮMھjaC(~x]m0i+}%_?1;Z{Skv%1ք 9keF|wPb}uYt^ `P kj_ O1)HQyxpg}*.}/b}Ln OM)6mZYAnfGnjc{=z>>EoD[qܐ1!gnM+ڮ JzjK=K]Tb,7dC]ZKnp%VaCͬ,wٌWBDTʘ&ad ^F[0WW´\=Z[ ^]<։9z`"B Y,]? ZfD{^%<{qQyη胠׊f!Ojvv:.R\>E}ORT;_ΦKZ遾~ cD>BWiEAC# [&~f#-F%iRzsVa:q|0"SD},҇U"P=\ ]竗LTd%>|zm) W\!iYn(y,,oNh~(Y? >]uPˋ"hԍxL6cr,^j`b{ޓ|Vc1~]F)-g&? Sҧpn _Fo^oC>JfitͲZ-ϒ#)7#KKB/6q]~3^q?Xz9FFKs@o=i.WSji{=hX0G!pZ\%2]"6H)f[W;d<aD#p: @x kT0n2ȼ3&>hԠhT ;*bԁ'PFv9n񵵩&YGm+ ; <7>'ᅓd{9>/67WP5.ٗi :3'7~S},"kRTqe8-][ZQ-n'm^O4bIo5dܵ#n@2;xilRѬ4z34?bW  rʾ~9!ܘd)]͚T[,5 ×8baoäKQV܂6)˂.DTF#٣N6wŸ{En*V2R?7Iաˇ|;L WC͉ 83oGi y 7m%1{,GG8Xv,{> j6I޾i͟p_HUt?7Ƒ%ݷ6ˀ7Ztx1I %ވHt%Ks#q*]h uS/w?WR;gqDZhlH9w&l@MdYǬ֧I.Fa*GU=N@ƭ] GSdTbNME"Ӿ[Njpx~M^H={nd,zRw9bj,\b5Ko0r(GB1_l% s>$m ϩz.v101x*5\ߚŸT՞-HX*O=vx2葖e"4oyԹHS󧔘+F|*BgirGL1Rz|{(öQY(3~ Hdf jjp<`|#H2Ѷu BT<ՅҊǿ˜;neU_ DW˹XﳱaGo oBTkDJK@,27ވ,5OT1#߆ARhil.b]2SECHy#HdZv%.@q wyMVW9oU_y ~Uz;0,&*(4>IFsMqe%M39c4 ͛'^VvDE?!P%5W)hWk^$o,+9}{޾Ln*v}*7dj] ~̦%fW@X}˪ Y] :zlRXjMgvopt/Hg;Z= 0dhu4v fz%YG>7Es"{Szኁ}M|4kFXa*7OBܩ2{{Y+G+ZǓeW7>Nw;q81e9Hq6!a\)OdbΎozw}DOKM8bMKBA2@L=x V7lҸ@}OœI efb9];yk./^y,n>꬗89 %4?,H53 }Ir~.aqǒÄ&[}{3N0)mo3v@N8|->uW-wsŪC8 w]AJj1O+ǏD1"TfpQ(\ķo[_rTLar\o&_U[WM5$9/b\PŨ* cR j c&46# u6[3kO1`1oÝ^KMs/c}fƗ(rV&zs[L SE}3+㜳+&7B":0A&2.nY#A%fSRvV Y͖*LZujR-G\+H֊X,Fl*N/slL栆1,chy?s/ǬY+浕[ ۷xǣ:rKvma`.LCBW qGK˕ o1!|%ھi>_zh-hdaޣ6/y1l e>I=^KN#oˆYx"%dݜhHt@-ѓP> # A 4G8۲U Ԟa3L{McO$>wVIn_D'STU !3Enrt|OOӅ:ؗ+el,c%$u aeyh]ΥZ6t{vhHIRww|^@w@^*8&TÁYbbG~S] ŢEO:"0kW.tM0e/'9}%ŅxE.D) 8qXsft`sٹxMH,tp\wZ;1W@(u S~]hl]E*=/`*ʨF' NyJ~ϹDe kej*G|Pću&V}n([PMZ$P:E霪=}#zɨ/~JO)vPQ pᳰ:G6y͖,Y ϦH~ǰ|%0fO4S*<5|ZPOv<"I>2E!cokVFbRݗ^M0 XL9dGIUvn~T$7/c 4 xw,}b\1hL L9Q:Qѭ;̷PvXf4)y^,-: : BkgcEY9YE=gi/"7BgkR c _8i$L ڳ26I3PE>]֗zFCߦ.xG]TUXf))L8Bq}ѷv,52h ?!VWb' n[O r$|Cgsu=y^1baEhnZ#">̴.ְ9{="; p# V[_P!,jH WЫ3L|쓇U{ux>ji> A~JEԜ Ein:U"1iti4`! ^]N%$QM Dâ_dI'dB*q=S${kQv]7{^& "ۖ'vž =*B)=e"[>X:5m: \/5k8E,b6LiXeI(2Xǥy1Wtlq^M@rl!Fs R(Q3Õ<4F7+ZۅsBu7׋ ͎"܇Sِ]5Gv0@"_v,>qdP=P#HBa5NY|bSr9W2{oD[ }x8Q ;)|8ĹaYNaYmrqBA;A]*Rtxyؑ^3ہj3&89 20#:/DĘr{޼;Pl֊Sqpܐ% xX1@xY ] ٣dƊ|1^"BkRN[# F$r&0x{$9,(˫mwv i;hcpcp@Mڪj&^6$:31m+ZV٨(U;K -_k,'HF9@Zp#[-M*~\FSپ_".wIYǐi4\lÙD0PIJ"NI. .4s0*iTd" 3C<ܸ, ~;f?[-o ! GAdɒkkn NrXCcmvtc3`6/CA{4c^cr7@/rQQ) SƛZzMu؍t4H%e^4<+`Z vYP"z7HoA-lK,Fc- n|b+!v1r.M#Ha"=8,v쨛3 RXǪTɨoI=EϥweՈ1.H;⺧s p^P&Y.]c 0ά\\%eZ6ߟǠ}̬vVx5pa\hDiV3ërI黬zk5u' u 0b?@DnIy+ ~>=,-*DR$#zXDϬx|=wu)ӝg4 2kRzj`}ˋxvοLJ!]Z $Q82,UJ0UƁZ|mI\(m0x scHy@'%l'btH??3R l%u?y۴IU_@"vE38flux:VKZCiyQnÃ^vc˛CZCzΪ\'0dP{D};3y0*\'dֈCw8$BԚT e@ڀ:-dd5~ .2xz@1<0FB׌_ ?Q>؏ĺZ(K-CoI W6JgeGPOR^}!6;-k,e v?2y|a Vѐ11T 0F+- 4qBS d{ǎ2cϥv?m8rNڼW;Gp9I\ޤ "ޡ*Q L$rQK)ٲ[Y_,l8,&6=dlR[o]Cwnڞ apl„]Ġja=oއnJ(UW܊RoU xj ř3o~Aw:c.u778zkk?ǙCwF8&~yGʶ_4ۋvPC!3(2y -Xβ*ڐQsÜS~ֲ|Z0bra: [ ˺pv_-h'A('Y*fC*6j!m,9 eS4qy3*a\_> zۼag^}oSH\E /qwFꋕ埸!.J/<猊S]B RL\ӗ};[9Î/4.WŋlkZ|e DŽ1\dq r_Kל}^7Г1eRIIG5w 8Δ" $UrHG6QD՗#;wAŏcebWtt`X7I)]U3by$3o jF;xP;e(,xzz(zQ[/K;!?,dCߪ-Ž!ym$a =LaGFj}ǗbCl,J#̅z fTKƍg{pQQUc\e^ g1Eh7sbP |5-ڗ0йpcڀc|YjW܇`} H3% ޻'flLOL|w>x?FP^yHf?;Bs @ГĥZ)yqf;K Ut;DcN]`DȴPsE %A::g.AO_ #Cw^\{8YH7L譝֛s >u*5t>Aq%t疇FzasܧnB4=K% 񇒳@L#J;2xVMqzqj^[kT,d"R|7wm&H~8zNߙҖ}YFL3O0 <;ĭ8$+3[Gٮ zCЬte$XԿl1 &I2<#Y"H+ Cy VGz@baN \l p‚ԊY((l5FdȂܵ!x?"u6۶ާ.lVB޷LpWgmxֆϤ9i5ڟL}V~_MHD ]!*oS3%6$X>l趎_rw(A#;fRmy Nn X gOwHmdT0:iڰ;A#cQ9 VBp6װV[:Td>>sOj6akJF&-pTbUaayň1ߨK1 ?7,.J lu!FM%]*:z" c|O*uǔOu0&33 θe]쏫k/~ȃeM :%s7Z&+v32^Pl&^ռbQWvq 8zfXvN` E&z#{ |x^*OAq֝ifőDžM%R*k#8 : a.{e&׭ u+r7b g ){i2C7y$ED4b$;'^^ ҷD2sss)^ iV|45^A*o-(Ao*9m-[ڍ7bDƎ{1UMa'+MѼ?/1NS 'խqy6G*!F@~E 9z`ꚤG wh`$8K&ѣ:|x9c,RjBl1o_(H#"j2}  4u'=bB1ggG6"pPx<8]cAjVO* B.3ON/h4yffپ̞&TW! h = N'[s1GЙη?pt 3~>я [qem ў$BL;DqY44Z*2n܂b齥Q'|(У=Â$`)Isn?I@@ œ=} S1,:1#_1x/[{jz:JQp޲'u)iC/ԢRUݷ,#Kvغx ٣13uP~ !Ca== .[ :*8vkXH7z(xB\<>_ 6%v2gvtC %CRk ɧ|ZÛeU3zݚ!,YE jyF1h.'I*\ b5-ƌG=A;EF2N8 ٣1giGJ߂IuÛ'ا U,>1\ ϰOC߉PިäwN4"{hREteJAm~|#PXOFctﴏfֆ*Y"{Q+%m?3C9'FK#l4&Q)evewg VѺ0J3 SFnͿ .69?s:VYy [5T/o{x~ΡSfB |qǠ\2&iCިHDR6^_&Wroo2[3&CbVbS+qgLjB_ >0ŋ1 ar"vK4)-8{u0QV@ R;d+iq^BFIރUK Hv!|ޭg)KKC`A׀7lh2ې:;q>eHT3ExizJ&Qp[$ƗsP>Whv$CKRg.Fj'5g/ (E~0&RP-E5">&b|c΋h%QʃdmG!JkV:/\C޶  M 2Yd- >` K P`Լ)mj[?-0XY:T Bx0r8DljYm/g(AI[YJ`'<?xԓn:j@8/tĜ-Xcz%}/1D8C? (ZՖmy* YR> :䡍8MvVζfFafNo8` $n7pGȈ5r0/'5/A%.2,pkOR ιdP[pÝhWJJT45}&Ewɿ%U0 Ԅ_t3pn l.gKN<1-g"'6p(&""2.PdŸb E h"5\"vTnP.Q@&;cKT5Si~{ovSJH [tdV2OUzk#bw!O,իqDBG}_'3ɛ|f*ˈk՘̙̘b`o!A O]'"<d,-{|5 AEL`,n:⎅UZ4ZP`oweIֹF՚#x2q'k$W"8|twR.>W= SuPc+Α<҅M_`!fV8/>f9q"D7Kf%fINt %p>R.;YU6CAsˠF/NNydi}%RQ|n[Cfi1}キ_\oRMIؚn!Qك;g%[~ /(z;H†)E'RFtCVD .DBuq@K[s|C`>K'rҽbxD-.#QV0~(O@ޞQkVVW"cwzv)"ҘIgϵBPKp+O6n_XS{ː.CLQ >:or"Ӊ݋N%ƖM3AX˃Ÿg'R9Y_RR}MⰤ@+v툻fֲeT%aMxYry%On %Hz}{@1,d{t}C=e~ý̫G$жY?*^eJ4ϖE;]`\ŋ+M\ umKànDa[pHk].K9䯓 aq1VX aܵ:A}ia73`ilp=gusz]yF-I'l/ ko|؊wN}fP3`@xݓ]*FA7RĂ>*n-PBv4ޛ Ol󏨛%D+laNrŽ3m&oxĦX{ՐZBq.'$˨Vj;d/a0@+hgI{YRX[?)?;%5t`X e@[؉~n|I9ߨh73ߨR5|td:-CkKєE5?^S~cTXĆt@Z6-Z Ƽz}Mu]Aa!j)Y4R.Y=4; ##i:bټ0P!j#[/w?v(GJi6Qlʲeę9j{$[^dc(x"Shx3c }fh5"q =8ʺSϱ\MG1ť/*[^'+V~ 5{P]6rNך$ۖl;$9ש17ry8}/5fܖ Z}5F~g/#/q<+Z$VPTnќPc!&/Tp9{8)£)8@DRxS J 'Fkbz R{Bl.)PFtm20vCkTa:9O=)eۤj# fTI7so-O0p\tՖ[f a4!N3^]@1;qws2]%skS_R!|B) fyd_!ߗ]d;IOn ,LfH8gk%ŧiNN41%< ? $ !2'H̋M -ۢ:MI$#ju81bxwM|idQ0|%jy>ԧp`2>_t;HSzK dɷjhjѱs/7^uϝS٫S1 kFAT&/p]q/\_.pYѕ؉޵U{ݠ@A)e/_? j$,b+钦ƃ!аK(k,C>m7٨r~a#:c$?-=p(@P]ح$ O{۾ #k{&eOw²z9}adz@to&үŞPM";Ih6(rۘ_RjU@Qz)u +H9sU'yO⶯7Rx7}p?-?QgwΦ7`{/ Mtc5&":c%h[,ytvx؛ #]W#h]9Hϡ{tCAe8ZM@'b ndWJ4g,Za ?x+Z‹QB6 4TqwV\6=Tc!:]#< >L~Z%)jkxN:}fPhn7(|@lq;_8*S/MMk9`g-jP~xY#`N f9dNpLJ.[WB)(N;|_H>״<]͖BuC%ɸ-Ȅ3<*'2 ŠTq@6؄MB$^+LIQ0u`Pc`dGϒ BoJs (TWI~QvJ#mn*m%p1h#E)1}sVN6!ןO"LMKSln C]Aяsꭚkxt_q#wnAGyrQաIPtШVwT(R2|1}5ՄUJU(iW9vh# A=R3uio++;z3HSVrLIn^;.QfgBA qG8i`YӾPeouN'jRyK'd.Eb#@%?TJFKE+;|=Wהoo0A^{QJ ٔ􌺁6Ӽ|d_^>ƦXZ٦B5 JBߵԈi,j=7O}p X3v_QiՖ)W'H^1/sƿ)>.-#!oG2# J9c+qB}Ix ;1Wi!6&|Xz# ?j(2?N/4/8,PY`j2"ZRqo XS5'Ɇ;zIgAϏބ't`bȣú%>GhM`.X[@[b@VZ e[ښ kiz`$Wjw^:{gGif%IM\W!p/]ׁؠ/L) JVti`psZ$=/ew,WxoF;!c*QdKTӂClM\GLUh<:$y-hbҤñA,6B N5;ON,\d{MH;ƆşIh޷l6n$~kpzZՖhbߪZ6L*RXkR;Sзݫܩ z]t_6"h A](; hecI2Kp }MY C㊷ECNgCf/aΠrm4%^yMlv`JNN`u*g,y7I$̩!a&ڞ'Ȝ_[m,# ~AOz MCín2MZ/@H;8e;j,'cw4^iv,t ]< #"1FLrNRo_mxVd!;n d/pݩ@Ϫ5@<cBJx?8}V'!KT87-:M\k'ฐk̖W QM].MRyVIᢚwg= O*ڿw8G݂Ba\?x!mifGO!]tkl+V8tOY1l>au382Y ~U,.Yle_{8t@;/^˽<-B|~Ja/rsq.,R҅'=Im}mn-&u%gis⩿kGi6({3l*`\D$mv 2l蟪\ iy$oCit-,atWys 򀤸RM7O0@~Rh2e6ԕjd#~J'D+&1PFk8\KS}6} is]!dy?L%0e[%ufȄ̎: ⾠&ˊ4Z8e?q"d76] u-Ӥ|ԕ** h?1pG+"R tO*(ؔ[?,GwTLf/Kof2$qo@( Gu:4F4\ol=0FF\.aU-\:8YBgq*WL9 W%TL#c=lJp瑄yS3}?/T(ޥu8+<.%ϔ89M=#8bF_,rSdJ.T к&rlx@K - 7]>g :ܽ2Zi/ܹlӓ|ܯCMzh:Yu~m/(I4`w3͓ł2*ޡȕ2;N!&0}KwZ"}Ri0&j=;-CDJHwOE{VW)v?oAѴ~3#Ԥ1 m,n&q7PH*p|b,X0 kHcV} y ^5JQ ?;:.lADL3P+pFW4_*$=ה)NX+v,xw=*@nb &/xn;v/b߄M6u4vO`a'UAxŖJ qeRPUaf`'9(D bfc`|ކO 2 b.J;'@?HZD]7GĚ$ l+{9AͥM1j}y~;\VB^vֳWq߾U@:RB|?{fيu8-mGxj׊1bHu|ςĈf,"t؍.} A~Y`׶914V;f[s.^\$a_ذ z]:g1,<: I2rBv^UeAICOl@kdJA8%ܜxJlelFJ*Biu= ^,&g 5FT@n(T>Ԁ/|y2 pNܺЍ݋47}KGj]ut=rKΐQ HZˎg,8Ț$@L~,Ц,Ze =^.|t8QasDw}|qAܐ4FŘ [Π:ca:΅૰܂~եW=FoMGɭv-KJW F%&E ^=+ T9)Qd5'ѐӠũ9tl_ ܧ gHH̫Y$쌿d~#g^J]bHL.d {fSI[_ _'>䌩z_>>Cdvelz"o$ !2\qK [3{c"I%EI5JisGN% GpԻ-X5wb_*i/9a*WH5BZBΣFRo7b6MI5);>hmh2[WgLl^=LIW} un+MX*7=8#Eq^^7~馉bwT :\޻!M$=?fT(á5nlD%"*< -=Hd}Ȏ?Ëj1zN91ɈFb!YOwW>v'W!ۉBȧoʸJ;̓'S#fQl, 4gHHOJ~F-N!b#3|ph/|,KHrވpQDDM‚ LQX/_e'4'A[ͨ/QH1-ۃO8žjLSz©:zBH6h𫣞y{Pﶙ83꯹H>p>ЄO×7V8'쬍0@A80$Mg䣤@>4hLlIͅ5}\ 7w2'u꘣j[kMcșsQ.4?<03&"`;:㣠9-7-Mf SoC]M8?{rZ2 c$=uO~ͼy*A vFz2Edہ^.Q̚u vmaढ|&wTÖ7P<Ie)'7:4DjîmRoճN8(qcϸ"o7:NQu=nķ@7i=5CZx= VhJ|(ʑ/K @;)3>ov3̎aNYf^vSRPֲJ;Ty6Jop5JŻ8䥌k8g/CG 4X XnPfͪh IIhΕwiNxfN/@SU37)qݶ*l=.J(pC!W5α |m$>!vS\u3AiGV 1bMaF(k S`f%DA}. CI!3TnsŰ_:R^ܥSf`=8_1F i`J n b*^< \YsWAϊ,Ca E5 sʲRp`HLi!²F\ܺIG 7.H[а4slCd_ĹE!KꒄP5N/8Od*}9zWFj4lʴLvIc ;#PxAls޼BY zXbZˣST-FU']u6dږhj\|)2=y)g%FX}2|*2rr0;S\ţ@ = sӊ HvW\o:qA;xiͪU qFgi&:?⫍6?n#d[:E9?_a6uj_S/[ ~B; |A#F?R&]ލem+o&.w[}vE/eH/-| V:.k2*=10ܝx>PnE^!Q⎝?_ &\^> 3%X _^C]¼[-&!j[7k e[H8M֞ݍJ%ai2!Q^-$,ZeNxjꋯ]3: iqiY9Vh_ICb/}gP:ol~~$c O".klEDLyDq{p`010*Z;i" ?>Gq+M1wx7CTuŋ.%72m5"TsM|/3 .kWZ2\`WV. .BD\ ^?k;,K?usRCע+ɧ!GXԴ(К9B-% RM5'iEG!1z SY#/H <`ojMh*$@0R-$CܕM4q{ @ө&; ΏNڇ)cZ++>3D|Ix>ʮ1nrʾ,؍W8U?IkXiH"enʛpIPiwP u@5(*a[iMֳ)ݱ C6?hlrq3p9ecƵگteujis=F-x$|Of;ZY$8tT,NS17ha][uiZ4v/Na$@l8ǽK:ɯmi馜Z_4 Oc*˖ GP |㏛TpU̔+EX,QѮ7M(6vA/I2YϨ_/Pb)bؔ^ g/ް}HJ"݊=ToDCT[BnR#hpaZl56cmA JhׅK8TޝjT&=!FdLxIDf+ {II=N6 6#ZD2@vVf1i*)Uu98 H_.}K5%T9 e9=~C1'ɦx_ T~jg^Y'IA:4Vk욦7uL4 e0Wϼ;A,a[dGXHAʓP`ʰs3M8ɐcv)s+Ԣ!ub|Jv 3cmU Gf!jȽxZ69p؁Fh4:+ -UAC*s9T4scz=S@AC`/1_F1 uv-n$w4H׉sWH(Rxv6x <uh^0F*(@zJźr #V^GJec㫚ȼ. B!1_9a>uyY]q.@iH/[f]MI3F$* C1^%-ny52GP]gƫbҋ~#H72AFvŭW񆳥 B5l7#?UTUkͲQ5q3<`nUikw KQJ@Q8q7ͽC2>7.Q#XWpT/$/gŁqDyA_,&pv "m_PL?_:1L?w*rҥp/*"ۦȶ ,*kbd6J4UXf)O077L t@&7}%aٌ~v2IX"x&3p\gevUqӔ,cGȑ62[ܗrzeNu\ C 6Њ_Ʃ&ОQFJGQ,#o5pc o$)t{ A7PݷGF[ H@E hi|%}Pgֵ)*zyđܿUߡ!4v; %3[̞؁hAYr~M3V|4?9hKsA@!KϥK!ǜ'*w-Ie1'ϔB|Oe4e2p;=""M_Gj,1 7:~׉SIsxY2;GACEzKԩc AOS?O0̚Dj \jlAűy:IJj^6I tu} bgEf)_:*hq`=}Ef_ YHr\6T`RLc BQ aQ48%D! Vy"p ~^1ob'wOT`ta-cr*|M)5SA'CO|UX*m"_m~f# )Yڇ!tmyGSZLH+oxKhKeP4vR_q9.3x lPb%ֳZK]/ytXg#2;/FV"t .jZ tQ0E; j^-;]G!Nڞ\_YcT`u-7i߼"KEMsPk;N:7mKm9f:R`֧>g38)v3%ihMe:]Μ_!a8m0cE7iswd.(,O3ω̈6i dָ R_Lv)~.[i:i*Y Un?5E4%!joAx^ `&鰵y3XLDע#om"h1kESBZed9 ̻8@*UL }f.22 >_+KbFy}̳Fv6/%vAl#mwvW_487ʌ ӛX2)0zQ Lt MviG|kZlr4bt= փljԜֲvХn^/ɋm75\n{8>pX]{ 7}pXY*&7e0Q/alȄ[+6>;4Hk*ToggYwutH*tD5I~/Y\S_/ mʝ%#̫Y"yɈ1wLs^x*+@z20֎D.\a2޷Uj>e3)SX*[)_+ xjS8ŋ0h6V2P֑u[z}qy38{;w晼 w-c\JwS"R{6eIì]t};2=Gڏ~="52?nj]j"$[㖇:LbFڥ{hSqq~h祎M6]/D&j'Q-@ƙ`fv`S@Yhd  ܏Ю1PL$o0gSdb:Œ1:uNؐa`DhE#qVS>M^n!W{Y9U8RЛ]oW_-{BffSQ -=G` M @xOɹ'U2 }SzEKQ/)_Tʓ&Zxm qT!Th#Yt6e~J `+o"Sϰ^M \ "_]>-ZWw/ڕK|m%Gi ON=$YonKAV?> vkXzݿ ~a@=r31hBE˚*"v1[kזPmW@?c5.WkʓCXrҕϼ0>KJkSԾL M /[}a ;pjȨ@~yNЯ\ѷ8荇{ X`0͛c!MNBd;k3To,Qj;B Ɛo[% WT!$Pjk9H2),K+ؑ%q3H.#$)V28V@9PшT@az < MB:NdLW-/P(0'͆FtݩEh9Ks퓀r$Գ0G<"!>k J(I-NoN,}뤻Rkɗt8߭??;:Ba0]ꥏҽw^x ^4I*@:Ŀ=W(ѥS=g=8'Rdz;2Y6(md`^s)g$=dMc]F+% [Q?SK1m$P,nlNJ_]$$Ni:Q*ZNoʊU3t僨_}]Qfq/qQr+JO{MGEiR#Y-j{tcq> u&>ȼ>o[lzƗiHvA"d-vFv\Ic5e_#lmUDb{{p7D'+yf[\1@$es$IUva?4ANڄC䭒}^M:zaa7 L^9اSPm橮w.N[/VCfc ˎAx&;7GJ7e#cq#!JYR zR[0er,:`iSAgb^D$/X,8 Ȭ)>ǰ`JL2(~g%.&Yk"89a 6_*gT<50-,ONCL}W8Pl;\yy^V3mEp1pfop-UQPgQމ`KP\ou)]FAWPs^a,'`Qd&ߞpSs3{2*ZӾ/08/zu ʿT0`o1(c[a \+/i>cu|1'v=א󏄍_Lق)*>NT-;1驯&K9 $ g4\3jsOsrgHZ)RgTZ>\HyYBPqm2/.9NMjg;\h1=j6ݜgҡχ J'q!_Epx.&WPl$o wf_T?z 0x=+9B;oO.Hma&.rL]niaF-+IB/K S* n6΃E dk[he!#ȢoӊvD`2G[R3TFE[:"KDv [9bՇufhRƵ*._֬T ;J8*vEJiCZN1gA! K M-)@Ws1t,gţwX@[i3cf%kPwZߪv嵻1F2 OE2OWE:U+ BZ ]jECk1I};^wmQz礳j&X.}G99տ}|\ݝ.1;ft,j֩f 4t[vPzR Lϣc)F? ۦ( x{/E` Q+rD G1AY:Tg%ۑ@]B-ۋreH_*|`eAH*bY X&7 <CnmYmp)ۿH= zt [NMW*8]l64%[$JJ~m_3`U߷vd/kY (m DmFۑ .pt<{3J¼Љb"5GY`*tQ2"E\C}`<3A3K:l: T_ܯ1/3gECTQa|Qfr4]|XSAEo5v^[)ƀ~]hfK_v`X~љB5M>r,_ >ȩ|]~n7MP'ԃ]Um4<ۛm R]=o(G2¸6JFZ$~Sv6K9WE[bx1蟯qňOՙR? //Zxճ| \7x-CuTshI/ ~wvۊP#џ& mg0) gu}Eϸ' XIx.^-@-o94>ys"3MLO`^F1@EnNdMAmN1] u[Ӓ8`e/v0b ޒc#bCRn$Thyi-%Ͽ'h ~'VlpG*Nm?ai A1nޜ&7Ln@>1-.Ll?{h*blkBJ1}%8mM;,Ƞoh]->gݰEMejaW-qQU0$y,Z$XMC Uu@5CNH\O7$/|ab b̙5 ƱB`:[nTH9転G&d8Q^t3V@KIYQD~iikzE5T,5cj1QvJ]o.4E:( ;DXQ@*ECNDߖ/fL܀Z~S8˽/ ;UU1-Ĕ?Dn[6;UNy֒(=˸+*}zǸk5%D|KJ,8>7d{?k᳣%g4$ =bȊ7FHK_;g3_&OHK҈L2RI1Gk>c:{*NǏb ]8{ebuׂQ\' N edfY6-DpaRfT@"oDgIt/ųLS:A7]ieKVv7'Zq}7pu$+lу9R4)X~sI +Ag[W B)1D#BmQqs,n~ջꡫ Da`gOYO:d&Xz|:gzOcM4&(^!bG 6`*Tpex"EUr4ٗs|k YY@&ZoEjP&R)& 6graDK%6 n},eJA +zC@ =be#@(HihF]tH/yӢT!pBg)JzxWHř`7-[8݊0ժYŌcP؀sLP?tᥗ0\Qvp3݇GAas܌iǕ=4b>=\o0c)-vuVI-Ja!& J4=qbA9J :c%a&[T >fERF2=9Yf qe{N>x,J8ζõ ߹BXW/L<'~LPl&\//5V l+g9gKsSB5!a~ aoA1'UXL]/` CUG_SpxLPèp[,騱Y`ɗ7`"$8[2/y-u( n %g-nV`،:IUxp2OD玳VBŖ+ǖY#! *>XQ(GbO"UYgUqhih!&(TKxyo|@\KYOi1(7ڋwf= i0pc8^K ?(;TXBd6o.ßr6Mƻo x[]x{ ^_bNy0/4Y|:^:_ҺЁW < V(ӊ"hG6 czPŴessxp!;'?2;΅L'ژy.l\/ū)"'rXy p)酄sRv<<KKs5\BqNEvdA[UL;9 K* ұgĐ8 ST,f@j~D>aPfOM$c%yfRӜ8mT_$\z YHaٔCb/Q8cEE!ۖ$I)$9#{yKAr<1G3nlsLdQwH;LŗbHR BA?tł9UU?9ԣփfRr֣0z P 0k=jd(}4˰t6OqvL'J2g\phhd|t}``"($""U~ŌfT|pnt(Mv;~T&Ud-ъm 7HˍDwy,ԷMS{E4tp D5~ゲ4 w+;C@lY^Q~8&^f p$䕇CJpi͔P#Eao`k6.~%%8xȁa˨43-@QЎ1TfØ-vRiW?z@bq,~ j&܏y<Dqrj>:9 l+&-n 2e-J]FiU͘*hSS-.<Ƿ,J#Qn7D=0ՔNTm`Og*npPEPtyhQ_"? xb~3ý֭`IxÑz鎪6zVF2!xڜfsc'ZNJ \ܗPX~ow !WSK)/BR>[/a9i?OngӤەg19Z .-g>Δ͠L 4!m 1GA;K Ec%Jv$SM-6P:/;iE^O>8NsM֏Ɓ/qȚz j ĉ&҆ [s>qoGo`P/9s(N~Pށ{#O7$J1&:v ;E;a*oB1Wer`O)ֿoт vB,>RBw5wN[kv!k @A}>ucPy,ʗr_&j&۵T"P<wIuM66ςPR5 L_> ʩ3^b%{ 'T_͙Ӗ\YePiJW e{ܫ܋ҐW*97$J1'@e;>? }Ÿ,GZ9+ADtdAcH@3zbWt6y0Bǃr:~ |F7%i2 ݇9C84#ݱL [Ze3-gw_%T>MI'"|ˉIAgQ y{H{6V P򯆲--L1Pp.J{}b]0=W?G̻`I|7@tKrt_+C"D􏴳Öj!,mVm^ dX hP2DM6 4ۄg̾9O-I(hg+#aOWț۾X2/^*)r˳"*sjOQECB'7?2[NvkwkMK[L zgUNHf"#frǻ(&Įo2ܭo&'13R-G TXJ@>_IRÃ=^)Urw6ϸ~>WĬu,htHC/͊?@WRf& w*~&YAc"ol*NZk|!ZkXt,/8g#Zadc$j^5G4EX=V 3YX廇cM @uuDڰ@4l̄p?è PtOCT=`yǏVy;5=wRod NǶ1#$m㶻TIT8 +m}^W36iI":Le)ʌc9ngΔ[@V@.$NS0'r,k"qzu3vjgݘOR%P[FkS" v3`SYt ښx#. 'rZ/fE9RbSI8]n <1@]ܠTrWw>7DDb[:A_s3tU2vSRAabS?yQ.'@@A,nj=.{u)**Pt19I6\1g2]fCdkX.IolLX94NیA;ViN&Zg+hᨳ KahǐPt|8v ֎zc{Letr`71R`SKdpkdAR/L$Xed`m?d&B%$ƻ#b<]enY07l8,tgشby"Z`C˨a.\jtUōUґ68q*91^)Ԁ[ "GR&YfJ&+EZ"18>BMsfNYiE(-\2sK>^:g+ PT6ͰɨJ'j(){v@|{G$?4|7zPQDC<+lg-VM./9yKO x1αb 4!]#WIx%#ؾ*s7>?뮧c^[[^ۂFohD(T .jW- ga%?K V?y!.~q2ZWa3 V8 W@QRJI 8+}[VU_o<¹I^"  3> z V[*|udh9oL#O/\?ۿE liC;p3wT, ? 7w6ӽ7qJ.|H0vu XxL#ZhmX(@z8˼-f;+&hՓ|4Rt`pmr"AX8OY"BG[h_!`ԙUcnT|\_k8.֦bWgN^\={n[;xIBɦv\(i/DeŵxޡǸ3Ȁ ۃCmbIaY݁7}  N7p,rJfӣ?, ^H(vW[+3ښ3pd0[_s۹F}7|dűs첾D:vY:7A#ꤱeB0Vƒ( @71NաUABfLC7 A۷=;/48 YcD/GvUuL<2(5yE{5g}9 >!*zxvX&>^e[E|DzV֮M58r3/z;>3#-G{9'}ZGeD ]:r,ئ;,dhfe}W 9-,f8|j"F)Ox4 )ʑAP;B L|; f2xIU×R&9uqδ֚pI;Z潮3ݼ=1\uQAs87c4ϯu7 &cW2LnjjBE%T5O<8Cb$\S].i00罁xq$̅`;(%orȭbx؏bP.( E<,۰«CTLU;N|RUk)Ph'!zͽs 2YȚQ{\$ 2Ԉ(.h˱rl|+idf>h]45;lO}Fk0lfnv14h{b0EtcK9ML$i.#QJDbodzS(z&oa[L[Y ǡTGO<۝-tDa30-p&R)y(w'3b v,)!S l ;AlåJE'< ^rxSphY*'Wrt8p2bg4e 5Ć gLq?[;ot Q%<4f@-6PZ_6$3( ]hT1krVss$2INGVӠ+`;6Z$13^@E=OLD:5Vg~ptO+k"!׌ P\J$SS2ajVsoK64< 7 mu΁<8~X!Sk ;QA@hG/ckbtgzδ{uA'HRIk)yAo^V"^=&#- ܷyL^YG6S1e\@6(u|r)!!"#lqn#p6`эWgڂhm.ՀцώWEc%߫їp`Gr߼NZdz v'/wC]p!roG?e1ij30હ3tDW^M @<)[;1ɛVy[S"Y mU#A .K(^˱zBu)Qi۲{A ^3Jw"H5dU_ƒm;%EyM< 33E ZJqԤ_ xʎt ZZ }К}]ɷ, 3n?#"x6$# Hv,b 1٢Q+]NEdO/޷:Y ʴgQXŘd\D•ª8لHGS8Vx,9r63#0!@<{ܑGD j-D8SW(lb➿+[N/dkeWcOHoY! ?ЉaZ6T.҈~Wm,Rq+r%,x"c3 @3Lo(4D1ekv\VUˈYykJfguڣ[(f!uNCS@gg1~f)UuZz"20avbE?l^}0S[S`KN9-xjͯX2K- ^S[~O2?/S3mD>plƺ|5@7~y=qqmܪ MHRzOjvȟbǛL`=ߋ. 9,V f-^ߩL6p 7EG[MFH.e`CW_L]jLӘž aX`,i1 ENFcKe̹hf@hga`gM[c 8?@`3])W{cؗm-7͹M2hޟCFHjC"ȣZhb1q+B-/o^)Byk[bRa:seJ^">31R:Q$s`ńHZrjɸYL7PU?F zgEyfNٍqga,h8Ey;ge%(Sd"Uc"텂G0@Cp@zQ3ьg1̑)'wwa2K HC 6Ҧ|pOb%1Ht3=G#/XʼlLgLML0_]V'0ϴO)O(9g1!jy#>2߫1h,пΎxLUW|H\ J5JOqb[ TH_+FJ*sw&< ;þX52۞dϧ8} Gi{'H>_vB N׉_gWO~I#ބ&P5aM؇)ͮ7\ Bksw IuCL,bgiI9 X+'!Bo޷x=ћ3NƏw|vU/pe10' s,SLUƓ餏 U;2z(t*,@]]@-gNI4$~W<3{JܧA^#yA}[RWؼa@U%RO[եCKԍ>|>9=`望6X3EC>Oy!QoȞj:m{TւBL;n7#J/mв]jt<] /_k}h@l|&1Rfj^Ŀ*`ܑc`wRWL )AN}7Y7#m_tKP{MWf{O>U(bp)x;%7m+|4]7G` E鳞 8MU nЌ!YqHx h$l;)0 D2Sf"g\^=Rߘ띱$ 0R+bL20#}z_r'WHPjO۷:LbۼNҁ.UJFlTjNwT:RѤ2} HwL/[Z quXȴ{f󑣛f*>[6iw=9٤OE43^aošUG*&3?22,e0d^bē!h+j6k!( |:ZZ<^d~n!(LHR`*pĵ.#t#/X8Sk\ApsiiHϒ?C(pbsgmq-bEn Z&~-Z8jNʼkOR3dtyK*[g\/F:01y ߴ%aZZ00ѝObH $y~T1^pIPn?.: ^5L'`(%ACW,xA#0fՃ \#)?/ϝf!-S" ,.;b3Kܯg/ʌ\׭B: 4ǀ$@$zhQf|l5_XxX)jS̮^qVjFvs3Q_ݝa@0BVپ1 ?Mtz]XTbo[yP rtzK7c~r [|wv{fB;iT0a= rnzd%Q&TV-=8m؆ǒ,-r %*W/LӦ#FnZO`Kød4:`v R%_,FbzN y Ь* wAFRrCOuJ$|~yєSӃt2^m_4J,:M{\J+.7<Ɓ.~L~E MF}`❞:=;k[ˀaEƝiT9TRaRT?ECz7~H5s.@T<8" xUz𙠅Iza/[-_hH\1twO'6\ y'b*Ô߂9ǧJ߂+ !J3ɟϖ()Ar~f9&^:f` %[wЧ=^E%Gl%[ ?S*7Y,`{$QN链Ni2z &s<0)oYs &.1Cl(2K=8AY:[l@2uss;C# TNvsn,'!B\NOr#I[벉i(.Yv5)'aYRMF |?릖l!J#9Cea-濐Ǐ$i*~aI(2f}VQv5a* JһkܗSUYPU쒮-n*۸ԅ{P^ "Knu k46|@E\[V0}&hYA-h*3CMM"z1WZQ/fi0ۓ=׬ R\fp @HJUtjrzU2EMS_x.Yu€-"0 *d(cTdw~ *jk73FJP&YTy6XgWcJ i0?,Y1y>.mǤ'`7!NegZ!`!ǓUōenH!^` ؽ 'ɻ.LXjhR/*ef]IQwjR\h8ɧZh_ {T=m.XNZTi5F񝺜)K~%MA3*Lj9;‚>q~M[YH%(ݱswNN7OF\E g=C:fhqG I-a,Յva+*+wv}$:Kq#>}OOF8 yJY)Y ߞ*W)4kp93V<UoAïJҤ(/OAHU7qeu}e[[ԸmZNO;` #. vs@6~‹qHOZ4N.?Hu 1~_{5nI =bY˝!j=u!2G-FD9b/ǩ@kO8xif'TR P&Nԣ.// ۋZɻVFZNXTp+];7_Z&'}b;gڋ}R)sbOP!C\PYZ6kR~apaS+hUBOj]s,nU؇ UueVL9Q:"JB:kIx8̠i/ X⃷|4%he]ƚ4gfY>nXf%.S)*h,}rwgUjCs2Cʼ* W)"$`:^ {QBTbcFozNE."}!o+׍[n'] R/qkn"ʩg}i", {6KB =.X5d|hCwWR#y+- |B`k6]ΖVp3Y׶'8eSX!EB*^T;RC-h8 @lCMPL;˻R2?)Q.X :J%sB>a@gh# cփں!P/hJZF̏$}y[zy}kJ:X_mvbr@=`VQT-\Y?v6k$0\yʒ@n33k5',K&QdI{t-=/[vԨP0H àS>_3fF)TUj GIȁbgfRtOS̗h-M aĪï9*cl>-V0&xhDMlTFH/EQ^п\ BH %omΈiz>845vo2(fysgU 3I-LAJR$Խpy} À7j? M1^>GLQly #3M~?@"؎oVYPr+"mQQMsߌz*e>+I#g㿑;q## b v>` #ѩ!VL Y!S([oRZ{jJ^S#4O PHM#Q:QOo5b7*;(I44hL"!l:%3 eAn6+-!Hw ectԂ_ѽ) Z# ~U+ s0 !淶p rZ.Q>5 pYMeI@oV$';E?~mˆ(p7Mi[e$#_c p S;2g=B}w[xXyuUf|%bf%e>xmqV枩@/0V1oAςړ] .8ћ}e)8 ?Őʑux,i_Wۈ!$3_*ךOE `e Zu (΄-xSH^er nV(JXk8 d'Rg@NyqT8~wkuQy0CU[^J~[Df{%/C-ŕBDV'vW-HD>s:5b/U(R~mim3<'z4Z$'M37MDf H/Sx]38k+ DHːPTOT/j!ɏ4ƿoȘͨGY~,N^ۑZ*ߡMAg~? R 5ݿ/랸ZJ]>K'цOc^I-)48xE!FM#q a#'%@qInS7ո+.cx/Y?+5`-ver 7{j(w< T wE1w4Tu#qXkmYFiBIG>^&^=Ex܄h@T kd(Le)D a2H&eJ9(8ڤD+p'3ywb,=SZ:_˄Q{ pEzYlXf^x˥^9Hvׇ˛E `zJsf~,ڙv7~Ge[vS0K3D,ypX?DdAkZQ,26EZ SULJvwB QcGsa <}[ ;a kx~o2 l9ֿEM3s re.w؊Pf/@ӹxy GqzDAB=5DN7?B`7[fW6?<7D.UQS8s<' t?u$gl%K2b;y.y;r7#E939;EvX?'Q˄ .QJѸpe/,V~4X։` J659+=[x^5Zx@"T\I5z1(?xw=9>L*GV؋MB9-|A<0)eeKGy1$ cHN-} vAܼ48iFBO4!_is i4%d'p&ԃbP69i:?̲֞%hx 7.MFړ Gʻuo NAPHn]N~\Vzk{ t&?ׅ)\ո8$=.w->._+tCcJRМ&>R.+lhT^([YOv&8$n ;qjc"[I6j4IDV?֨.$-EȄXUDnf- \ܾ$|Zװ?2)8VNHEѹ$r5/P='u[K}? %MI chUx0)UO+cZCUK,mk 8̎Sn#n@b}1A #p#%Zi)i,(hx3$BkhJrAEi$Q`uqDhL 9/qV/\AX=whXMϞkd/MN2&Ҙ7r(Rj'RrhܶkrSj82J?ۃ#8],rgQWߤiϿ&g*sÀz;!᫾ N/13O>2Hjss %L];|f'G 4 tYW0m˘tㅹv. Q][h2Kh-Z8~T#.X_3_S8Lصq#IG ?;[Vw.B *ITBXTF"9D "1u{9K%jLnay$dTnd%@rnu%@GK/鋌l(jO]Mmٗ{.*7]a&r[\Y45m?U+ƢOhPjlYF3ũ(?)Msi pN}`JȈ?+)V iX 9o`䂼\q2i=ۼU׽q'_+nju7浟Z۽ %u$$1fX1- U-q] XV$5a&šl~-il¸h^DA#J,M=[@VOtυar-L)(:mMOi6M 2p$TyJB#yi0$'ѩ&,窾:zeLU#|gtM)'ZD|} ("\b.E+I= ̉?.E$q0ٌ=lBhR\ʹ:u'#>`* k RY"h~,R03Bc`䡄aUAQwH unrk>$r*(!(\`)peʼvrJ&i١.BZ$%< *r,9q UMd&P=eX$'1~jLzVȠWxI! ' 69~3]T 숯Gn7 ZYWYA *R:`~s9,;FƂd|Iܒ3YoA_B Bgh ed6G,+.%Ri2v* ##[2&lgg]J3Yc a5ݍ΂\-6Lՠ:Ouc8!`[3'?בE76:!HC(پO6aZv:ǮڠN&cmr6bsʖ?]eCkƻIAL}Fc2ے ؐE \[IsB n [L!h˞B[ `Ry.Su( "u,K?|}fP;R g݃>n8;bmCP?5$Y[CXAT5pJXo50t$Rx9`XA$?Эd )^? E?zY ( i߃{Şl)- tN$m\4#ܜ,xp>i07:%S!N8vbJT)]ި7zvZ4oWA8.ktiǯHV4GO>b2(iu#Bo>/D{ꔤ:Xe9d'eWX!3u;Ѝ*xXnWKN=)5\`@NI2,"CG6\ f^dU D 8H]jc*0XtJ{Z\]濁͝k5Z1oA&1l`14Ֆ-dӴ*#ls1w숂 :3C'~`~10C6ϩl99Y'ٹP*o5iaQ\@fV*i5|h|`f ‚{:pfvj7.T;"/ϩ^Zk RV&X|G;T&kILwHXJa~}mE㯁rEFJ{hgN;߬>oz:"=1`7RX"̯6dh=KEδhgGO<`oxC0*gXuc}X8Stc_ @FOfiH^O:2G.6&-U8AECFia]{~\X3WOynb6{ ' FhK{WRvB%fF;U&4Mjp[[b豶~wn)!@Wėce"d"&חO.:-sz|Hu)/V<_;Re@]VWQ4Lw'sࢸX E'].X :$MךB%~R+Z{oRζ?.?tF2T,ħJ#m~YJ#f߃RLσ<-*3dXֹO l} ToBZBF_L6s[4Uo%bG.// j;Xjdy3 Ȣ[@oi&o.k/&n\%Z)i{BKqy9hpZW4`* 9vM0:fC|Au-1w BaQr8ZJ="~.4gyW/ 9_$ub2XfI~/sf m 5Xj^YOp==qbve%y4k3 L֊IS4nY h,gLl߲4pfvAVy։ѻxr=9s%n=Ch$u@d@_u沵`_ K$!AAرvHuW HXIAIMh+L1XtuXd{H&u`G-iiTH@c{'J +NYq] kH5oW>%MOczLRk :Vf4 w,i RZ"Qk杌 nlDiߙ(KOtKB_Oo1'W7oONl|>#\B\B Z4^ 5Z$TYc07)Uh,gpMDԤ*|kZxj(Qdwz!/8Z:^l mVKHu4٦O)^utH^(2U` pY*c4:+?^KyJ+Cv" ,Ȯ6)4I[^ʘc[)rc;#r4w}#TnGnTp3SJֈ͏x/"ݛM̰[1as '7j-3%Էr%AAyq/#3! "N)8*naoٶFH(C&`Ain,Jih] cY!xeAl0dmAH9lUCnQIVH?r>"X4ie sPZZaR7Qwp#L%oGgեr{R2džXF^3vyK15.f|]1ϩgT+%]4H1"5,$[,j~O\)UHՋ}Y!7ny/0x=Af..bi{6q|eN tED` arWtm=s 0\y qNʫ*WQ~!3=Tvjeܜ[ P[= 8 +5/5tbQzXYw;P1\5%>vjWNu;eERB{0Rߝ.j~"Ϻk冣;%FʓA "̭oa'G{""'8YjxOVzk*Co\Mvtzw֠9A%k/'J'wypB< v43 8F9>adR3ddz2:W2%C͍6XCWqp-HkAumK,>a)ʓVnЌ`9`y911|R Vz'|3d_k|sP(]\S֫C=pMԌ 4)z8R,!Y*r} &QBQn0{mjG'x5b?j%Rǐ%I'5׌^t3 j#o0rΓXQfEػX#%B5\sBfl7Tj;``2!f Q#o.VI2<5g0/WrPk!$icgs`L!f!Y0g?Z$ X.΄, `$WґA?#бl)]$#T[TH/I,5KU'Y맼½G40,Q&[4Q>!4SM+o^Iw\1O2'Ǔ:9Q Ne?u#vjX3vF>˕D^SWe΋xAȣv'5}U; E‹Ȫh$:&{}ZΰP쀙5v[@Xn!aW y2 [Fw>IeB`M8vʟqcjI$}>#_Θ75Kco qCƾ.tZo "(2vje>ɏHF? !a@KxμDͦXߒxoo.{WȴLٺ8tu6-=Yv}t">C |N,䪹M'tm_6eKuF_-{ fkxMOFz'Xb *6y}]1ry}J߯|ifYc'z4$?6r+X4 /V dz:;w">]ltu;W0}% 9R0OCH"Vke^j<Mܸ=R\^F@AΑ!8PCKj47Aoncs0 c& qZUKד-ב]$'"vkZuo "Y֮]sF#_缿C_,)Mk!ϩá_?)0E H.䌸IO-R*{89ahw}ՇY<&qG;mzb1GzS%jE2A9فT?>H奏H߃w}i)T03e/K>Hn΋4b= d.0ϥ6>XvL_/:{O/#4(l W{w0~dt2.ViukN=wmJ-; q ľ"Qs%nӨB R:~~^~D/j,٦@V`0:p(t )\t {%Mzf_w Sݕw6%X eN`TژḡrSkM0 flGrKRj#` QꈦȴRS,AIzobT4-ӲG %!告s@;7qTE%1KҜ UnϜ -3uOUvFSÁ'{ٗGQicǣ"ܔݐ+,.^sq t,.Aܪ|Sa %.?1- H?=m^`ϔ5]gm3*ڼ؉Gk@[w#3rvO\9C@ݬO:RƟ}YD6[rF~Wx行k:=6yo~Đ̴%~K0]7W!OS&vvPquІUGIhnd}LwN"jA z -E]`"G㹚 PxI3$){`m#PB.i4gn20Mc,5ZNA'}U/qp6mmq=Y /;=L'{9O=f{FA#4{zױذ,$"O"б !Uek'f\?i7$W@='uu`rtS 2X)_fUŚ>>3wi%Ű!cl&F=g`Igfk .|9x,5(R X3~Zc'; T- ??"1/I#s.JZ뾒A*w?P&Q2<{C [$Iv׻c6j"ԁWGPW3M0+ވqj!Sm;Y-֧úɜOBʸSBPlEZ9@6]UxMJCu6dl8NFRSι<28YdEmm4we@HOV:ծ|Nu+AGlҪaCUQcz*jjcRMV7BGjɝse6Fu{?n+ w4 Gk<B7FHh{%@ "T_ge+)Bn4tC<Dؙue}C3rK=I+ %΂S}kXe?t)LhrPr<0i+Ny|X{ݧ;ڛ +Apj.V}'u+9",n $OC>#*IPZߎ~Zj7Un\3,yyg>矑TT_q4Oa]{ L'0󫋈FmAs8^)! 9QױOҨzbJ"TvY4,@"8\GhIdAj3U<{ UP>{PP5[>6zhAqCl42kUfA:v ĆZ)j9+QP/;b W}L>}H;z e6DA;S$6L7(Ur/*\.+`ɲ6J5k7F/QY&Sulg$UBv˖toj=UK"2K1. ؑ R-ykMּ7om \9H ]ouW4 4e`+O;{Smgdg{C{W>^t~A!{ r{'C ATcHǀk$\M:0j9W+ys_}W f䲔R 'GbAIGEk: ͐f$dY' %C40Ɔ /?.tܷ{J@üxv,f<ԹlMav{̇qT`~FyM" MaV8J+gjĬP, k$BM6DA Zh9Lk"{ !s);VKPF!'AodKqڠ ^,jjj_J_v\ۻU}l&C\{K$u S,X٢.p4H] ެ. VqIqVQEtPSا1mD:ԕewyhv* a5ɧK"ݷGCYf;Υ̙ >t#:|ێ\䜀.y5 ;Q'Kye98!k$&8w?hxf1PIeu {I% [M̏[Ig3L&%@ȍ F?H f,W=:QDtXQl ͖AelLc%|Z,i;b>Z=5'0h]ͷp0(u h$nWĵ\j;"!c6f01N +6&?l^!V' gU3K}>i)rN;@R Jd ImC7_[=}W!2CB+6xERC&#1ᱝ*X+3z(t0w'Bd۫g,oHQ"^\ QHeoo=q ʪN}>_T-. LW/rJ}M{/ΞU &3rLP^(W^,p}n6Iը)>P*%Mݐ2v"(=oN RM1)AN&]lP9y.f*QqXkiJiMSE=M;>}RܜEOCMj,8R]( s`Bb2yvX҂ҏ]A`؇U:Y8ҁͪƦEJJTI\а68 ^^1 2;ѭ"Of/7^4$DBѩ v>]k/`зˤc$'Yjyr#㼌 ' zCVv:?fXi 1@d4-1zMϣSiW&?\h2JF}i=Iq_Oq#p}r{{0||$p!U~lעbz՗-/3P\DLϭPjmw͈F Ƨz/p pfaa@NWS)< -\w-I ~tv>~)n|69"! P#eda9\lsɚQ#iK1L̮BlQtziLCv=|Bweq; fH[A`aZvE[1 \BX{GxRgcwQZE<)\z:R9vHCRaܴ)V/Rъ26 \yeI ǿB"nO{:a٬Ȭ.^͙첬c-CY&س'Qpr5M\ |Rl e)gx"&$XB6iuXomw8!>OѝCUEɁn> Po9=o7Ea ™T7cmǷ/)ᧇoDTA'dxh>0sjV_VFA@R2><F$KimYGI;ERʱ%hЂ,0{UO)}ThC  R$ `C&e 'Ɋգ>m4݊X-ǫ|A`=zΧ~5owM4qY Me>T#nݩoXrig.`]AC$#;6iɯ."C.o-YT= ʿ?(zu=d9D|?qV?漸gcKmZV#%6jVԒ<}Z "2W*ŇhKg?mxX?>7o@0W= ]10 ~ Jl!X)~mHTlP  7]r",Kf3yXMI.ЙwFbƖ7J%}o{pc7ߡ:{!?,ޤ$g N X%3рfSeP,ZէnI&uF^<_N$kP^-nI~0VGAM1gUmC[tT#$NXdZDEmmR&')>70obT]Ќ+u20vfëFFe(owWtfv?Ҏ?9HZ1S_>=π$% ;R g<:w=6« 7`< Z"x:)'cPPxWvD iu)ocUDC- 'pٺpfU'@`bc8[y@WҖ葱{ ٨*0 bφ Y .=Y=U_jQ4S8@oW fn]_#ѹ(3E+i[*_p23UAS> wito0Qpv=-~7|G _<OHc@ڪ۱y|_$oCkܬ25PMw,cGcb)53{Px?z6y7WhBƾ-w3*{rUHDuŝjG8u]g7:K[ ILBkb8:MV dԘ՚w6$z 9wzȬ #Vv_GU0}ȞnBd{\)?YA&o ejX:T$q6ۂyJ/޼t uUVD"[iέ2j۲*¯{`A(J3#;ܕK[#z(, #1U4(K-eaaJ wBFi; 2xofR-O,'B/2N2jI`ES[fî෽¶Qsֈ8l𡱙$C#jpG̸k~+҃%6ѷ><~HvCp h֭r}:] [j*_o*ZMNi4~߭¨-@Hn9117I1z͊I%e Ԙ0ݟ8[gEZ+D &n[X# W}v?~ % kr%CPԹTf:\*hyƳZ9(kk _qPabdmny+/Q@>IrP1xeUXT>vpcImo_+Eť,XnIFg`?pm*Brn0zO4lD-+VW((G;/?.DXcXʥ蘗y\zS(Z!oP<3v#Fc&Lo3hCYA=p^Of:*0ZPspp7]!5' >U~P3'*Ax%lqP[P8W(dJ 32mʒOZ.7]1䳓n]"ϼ}I[C 7я9,d͘3$CSiV@%kXHPv/ΆQs@P5M )D#R!HK1fw_ޅ{wr- l~pMϊ!tZnVOU#&5{@d+>˩0ͫr{1T0 AW&œ [zS1_f~(@:R~^%ގZNw~KG]Tqmo@ xqB e]'rï9 VqLY5}+R~/ʮaĢ$L_f~=gw2]gL|9*\lpQ W5 aE Ra\ 緾A2F5; auǍ?.uEOǩG# E*81f(Ff5XIjM2_^!8/lAe".%1pt`Fmd'Sʹ)6^]>cMXrr+Ա>m b h`9S錝]=@l/fF}(ŜaMBgXζγ{P VɈV-$%4P6bjݛ)gΎ.-1 Cr~G@0a Tȩq{8z«~|#uoD~9<^e$E+tbcdZ:x<*6f [Wx!=y/` f,,!=e̤iJ|LܟA¾#BS lsNV5b'm)a uX401A4:xiC<2?` qQQ2M80-$za ]PR%I.<96G|Er˪ܐG [+e#TH`:XDxE௩n~.fN銲2%AUl, ,@p]x #zf}tY_4Jjcnm-t,\R/۲>B׺Fڮ[^}Q!;+z &8Q9+Jn8+ľvi8gXSQ􆈮Qzrc.8c^6TuUlʑWjV6|`n׍(ڂ󟡑aԵM%;'өlch]͵";w|yxi1 iu`^X&Z8XlfʡukަTW]]!ƱQi05 I *. hJM<}u,R_Vp\9ĿZ`qr~>;6"æ*CV\n=)Q#hΑJ#fM07ٷVL]ƪ#y,,v{B#zԇQFgsfЇ*܍գ ,Z̤͊tm$|yҦВ:ه#3*>BeVOR`w VL2t7`||]7Nkf-v82|K9d8][.UMY(;M1KF_lstC}hpO.շ#% chXnV`NQl"9Z ʥzL(6FWr90:(54^`DR-~QQpGH>XVrDˣ;DQ<qꛦcTc j(DM&D4-BnaP#"$}I.w"^,RH9~ Hr?I ]wpMeZii4$v챎U}ѶfDTseqK7_Q}Btk5^fb/lFv^X(w9BkpPs!f}(s)*Yfi]#k#S?x֥sVtg{A"Woc߰i^nV@yH>=OFn|d~@rw?cG+34ƿE8fgX}=jƯ76a >(qTƄU{*S?H-%+ЧiU֦4OJ;I@Kn@pl ؁ՎM_epԼ&3J! H%]: μ"rlVF+!} +1;^C%,fGw_N p?QRJԫv5f/zMyq\"FzU4:G̮EX I E}e +V-_1T(b5!Sf,OHCrz 8t1{U"/ӓt+P.xtbWzZ'@dv2FVnJ̀|]˫¼V /ac;{Rt{)$ qЪդ ,8#?i )Z SP.۩" k !Ǫf3X.!J,3q7xp Cl0G/=ҡJ6~ f#c 7tD?PO_L_8|y 4UW sƣx68dY.w*aNJo/f+զ+I'IZ2]h?fc&;ђsGl2(ep/!tV PqBW wݖV8k,58ELMo1zSXe~(V-~XI5 2h!p]f T\<.&'DboȆAQM21K Cm\F.:QOrVtgaX4W#,x@'-/)J_Rppc*[d1 PژSܨjFNWfuܤf${2hus*)=xQ?k\&f&N&tk0;Ɓ &W "adP|l<e(huritggx+JMd+;gt%kk^w}ޖ Bc߱CKzѺw);^xjԹm*b0բ P WEEHEhbe Yj@'\hFr!>t`>j[Y7+wa4bUރ.ؼmpK's 'G\6 mH*]֥mWw9Ee5^%'U`WzxkGlk!żKRəUOivRzW,C„HGXP-Sn/+8*:lm_lY/Kμr Ej}dFWAۄcPy([8*IE)5+EeoIZobNy!ObrùPr4wڣR:?ґvmz |3/p^tJ3NyZ&:WGwb w]yewgBxS.#87byyew0 'Ln,אdg‹{MaI&6T÷(H+ɀQ}yS0_L#H"ݾsӐT8ރ徂V}ȋb <鲪+* {#r ydc{#5\u ?r;$ɷu!29_fu:QE(XAq;tŢI軁\oZۤ1!8sx!T٠拘1-waeM|Dk6KOnT6M Z8&~Q&qw͆*2 41ê"moڌ"ͺ~[H1tNrl4FVq=ԍ}\-'T;E. gkvjȋᯙ3hR7" .i=X-[l_ߴtiD84l|yjx"Ϣl<pA'=~rHm TeuY# X~͢kxv٨v˕џ^t"hPJ 2W_$yő绷5k])N#,kHT[,Ǖ ֈǝT@`Wxc2ػ!U%Fy0qL>;'rMS.Gg[|ϭY.niF%*Ê!;JQ?V vWԬi9=z{+{ͭK|w +2u:Fyaj=E0B;p( #ɰcZ%FɳUա$I<'|Z׷d(Tn ^{BQ;a 6OxTEjaX".42c&Ƌ+!HMR)6yg-r" /\ܔM"(Rv7ILǔa5>{ĵN:Ωks5Ieט?`)&mndb@"}C?h-S['9SIqʐOmk>rT mD(>Z׼(?ú;KtF+R3fF8b}F㜗JSw|1Ev` xkF>Ceb7Y5c`ƶ#BhWdi⽓F||fn28Cu~ $C<ɋk.cxS|(nm\ _w\WL30PrCe;pD;)J1ǣntu9:ÅaK+S+;Im-N]꿷ޖo l?M&gWLݡVL{dV} Th~fֵ|>zR7VPn0#0cc"2`f?ķ`I"5z}k`͓W;3`P;,gEkkM;)Z-^s y IHٝF _=) *z,Ii#&6݌a/O6I$pӴͅIeacPf%7[],+䤋Rlӗf[]4SsaÙJbw?o֑ISOkD/fGz,(G5js}gőYB՘+Y.W58I;Spb&NNm JdK3;1KPiDV]gzEԛMxMT6/"iks1|X"/B' LbŎ*zق7.TpF#.L_\FUls]jw ވb<`at;5x$vܳ8yU(гq% F $6$HԜ`NlPQ lVZi]Bʷl Ft['erXݵ=uEUrHؚ-Gɛ#cG4A}pt ucSY.m0>6uj<6V)ȧԗnFndxP%~y<Jn֪rKWZMF~EAhȳ檟Y"& HBH{q"cm4e$=]bTG{;FG46TXGN-Teݷ"`=AV-_$ S@40a=~t SK~o^Z-v0EVŗ}lmse^ܢlFvE|GlU7^ڠTW=kZ`}٭A'b0֟ CzH6t``IXgj|Ay 8aw&RN:x?<ؕو\l9A8R.G-$;1|іhkv/834J*'šq:wӀ-,ʾ/C *+'Gh+-u-`,ɺ#v`t3IR@*ʾ[ o(2+A!֧>@J7TI.A㱲;/ L8ovhW LMV>]BLSdB{iz*O OF}rOx|~;XMBpxTF',{img;rE#@{TinYB?sT|ذ WWHUVdgvyD<5$⊣b鮢a[rK\q5%M%b?DȆI>|[l!!;T/Ta˲I$r4lԁ:aOS[R8JOU9g>` DuI+ z:IJpŷ?29PKt5|ҺOHxj313Nz8<1cG988iV6[}U!3LyI" &FS{{I.Pqܕ:_%߄2-RePxm9hXr~ AEGGt1m4 A, mR;Pٞ ieABML{řptGIҤvU6ۑ".PWxadiI#ܾg?^@OvxG'X bS)АΌpgJKٱU&H5ͭ9 A8`e+V{JFByQ9XGhmo?P]:o|-̑wvS #dMh!0E4wXg/ǝx~n-t1#xZ*~+=!cɆމ:rmH>C&#CwF=*5cRv,}ZTʗcjE(ntwg\؆vj )t >F!` +k0Z],򏛲ٓqo;k|:q14+ʛbE(_T#gDO\,R\>̘m YIs؇Nj'IaF")Uqa3VU$G-E ,(AUl{yzOh[Y;.#YU-/N_RHicN-zA?{_KbapBAi(A&Dh7(1!,E&3f2*۪ly *yuhrLR_ۯ iP]<#T`FxZUp"n2@ysZc ۘ`W+m{GMZش\^^[ѴZE%DNηJ_Eܝs;G`a*>|E(,"2ZG7h@ u^&J@]Kw|{!Xܓb+ :睂ܝ 7W(S}Nq#T]WJ*zODd 1,щϕ3aNJѢtaDG^Vwr*տ*eB#s/ҕ1۵r!_XdZzNx^Y,u:߽3!_ՒSDa"J A.doM!c~&bdڢa\gxqʂ TDm_3ŷ_Z׸b m'1mOEY31,P)!;JLs # Ц9 ҅*`\豅r i)x&^c? y/e 3=C7-$a(@xĸVFnOqrY Z'} @k[wԿm&Sz^`A@N:Q"y+webiDd%Ԅm4eb^'qR, PUj$t秊p{j1@p4#:ayڜc B-Uu=V-B3#TAP!'.N񾖰$hXAl3m滊EBFFǢEuB/ BC)noя1zzھT xDBVt:m0扁,hf.bNI/ FͳE2d. q?z|%q;2듆&E} w)9\hb{ Yx_.O/wMLA_%·"[Ki] j4~ Mb3>%<KiߖV0!rг1[8Qi"|Ƭ!iAk)M[2AR" !մ|b9 do#]U*l5(V&vjggrVyqk; =P/`4rNiaWm3jnV܁b@߹>&(NF!Tw8Q$T.?Zj Y_Q-@Y.R43*pX^ jR %u ݙ<̄!7W}#.}ٮX7ms?wnٓ:KmP H݂;"ԂL*hM6l&m,St)ܓ*Zoq4$ESDPV)Ѱ)DtRja®5MLgQ`Woy ^`.DiV/C%Kb9vg[y|  !zU*jYr]1"E(9Z6-]5och ,]QPl}2Ha̿yƃXx+՛rmeenr 밴|RBl< EKD̏';=i$x5r%=a֥BG.7%dd-23Y Tdbv q̷D в?3-ZN^&%ߏ/ŧ-@.ҙX2a ypFF$ݵ&o)o^ ֑kJ}Zwa{QǏo-eJ꯿D*NMx0 &2m2*HE> GqAx/+Vg&NܷuH705=6j),0?WZB2z/r",7:Z)^Qka%*,`64k?=\_|Y|)cmJBҶ ѱ>L%*{YW[ 6, 9+g̐.7 @rVuk<\)v/zL;?U=7*2s2 @ Դ㟁 ㈼͎ Ns.@ _ >xc~yamFXl76- ꘿)Xɇ#7 |"Z Ι9yFNӮ?g467 np,.x7%51XS ?c ޜ$Eq %kE*hf>:a,7 [Sa8:Ш,8P=59 xm_rYq6Yل1ONi9Pn,k 8"G',hg;Dtg*L]DR+)8ƦzgE;U)y%C9r2VLt Sn뀒o;imfE6tiQwgdx5?-9|C`;{ۄoCb{8^ z<eSמּZ}keJ+[cJJ@ q{G5X-Y:$vq8:UP=aB fYÔ)^u2zʶ,9LZ"d)OT̳CV3t&w:\1Zk92󳡌E-{ސ^s:Cj⚙>ݗS0otmnAn.o7@#Q?KVg-򉢴vr:!埋x]v#(z-.(j]eaGN`ɬvmvUE(;yƥ48Bو$:7P =d ]UEQ(⭝ޭOThg턏|5V (^7xt> K=ߟYNJ_Ln @3i&9e"ow^r TGUzf ?ђr:BvDt):5-01pR!6)/a1a69:ڿz~z-WDGTM0 byE}F[#)c<˥-MBqY3R£P̂wW)Xǜmi6d"UxlBEEeJjmx("ns~uB8ZS>+X+)"@^6|3<*g< gmw"7R^L]=xXv)*V"gU (NL o*#L=cq-_2h*#EdwG۞˓@<靬kbRYMՎl69~ɑut7lй9p)彌V]Zy7ʺg όPcGp?aq!_.Ҵ./@Sғn ҡ+*ė-foPN) A;8֢"1#+.[C~Ie/Ҳ ~[PkqL.PjPTp;<+*ɉ/_+@`vH 珵z)k ]qO~MC~:&BfȔ*@j{$ NC1{@;e#9Y.f+Y}16 ! {w#<={e8iO*eKQP@n(FA*P~3^*HY갮>y|-V?9%cP{QVtt0/Lگutcr6$a‰dϕF7 J`W6)Mӻ*!s`818'g/D 7E tv2E ~k,UiʓPIfJ/SpƫRDr>7q7NTQq{r/s7LNv't+B|rA^F Y=g;r}_:?q$f qPκy, wfiuy!gXA2`sڑ-(MT Z)_8O O~n3[x5Do 7qu>^V͆^d߷T}v? ir+ R ?=DjM;1$qqީG41L(T6[ Gx.8`V})T5?Zx]ʯdwו4!8~mf6N[g8|};QQFTay0̹^C)*w@!6W-.Uhvf M1Mʩfb s':RHT`i; Ol >Á s.+N,4 t%Q˕jn`d%!4X ix"Xq)΢3=Wcf *ɔz "*tUEf-{k?i'k7].偩3Z׵'Y'9F " ݷtآ!l<3 +QUg'~jXj`{PF?C3{ w.%lW Jq@-01PQzZSjPGM0 mR1E1h'pXڋ2lvWYvh}KJt[ r.쐬;|hk+%&*o=)>L=[i@4Fk[%8UJ؛r8ڤ_1 T~?r $9/f'qAR%.g+<-QOB1 8?lyz U{t$FYc.}/+{]9Xę9Ø_5b}\#uY&(8XwF÷ .TllVI)ީ:[x_3 sK? X>L9BHry!sUO:#,!?n}hU;^Q CI!a{Hk)QSB(˘}UX/uPQa1@D*?Mx6!YLtdk'Qpa83/mf)&}[xt܂5pM*J }Fct=`Yx"9gƙ~HNþX^n%~"Tئ6T.g,Q {¿f|4ee?i?V}Njƽ mLQaC`1<^2ynIX411.j!vgDeze5Ybư$dE»hW&{r/|ujC_z*#*Gn%`ɲ.GZ=9xA܉٠ 7n)&DH^Xg 5YQdw202w2jn&=I8?oC ~zv(K`r}R޷mvwTqߠJYܢʩ©Sm`ʓ=P|S6q!YW`'ˣ4Q<jgtHD@M@u ŊO%7Y%(8uL,S;+0f`^/0.A޶LO1(c YG ݔ n`Zќb 8P.GK@%%zJmՐE>43fL^P'/0 SRq7e!`v^ӎN &uK*+03Pic`+=\dWAF}hY,]pĖd*2.m3x=5/Smu L#HBFy;B7BK2iF}QHFy(Sd#L)ݷrHeՒ䁲]iS|' IQJ!%)穣N^i.gXQgTpl8tgcV(нo;KXpt [صq|XΔlLE~?OYslKLo̳֒Yj).΀F[!g]YP*: Ȃ-~љ╽AH1e瓒r̴Ze ~ ,2v+?kao ZuA`#$|R'iq\g-}1 ĶRC_za@B8W3[zzXDKd%xܯ;֒#(ĂWd4t P)!j wRG<ԝ~]vwܭ"Kt .,w xv ÊNؿn3B_ T tspkW6Ƽ9΅^G|^"ESO Hh3tzɏ摁"OQ?8$vFzх J0N'1">Ŵ=kt\:!SVg8?QM G[ՊsǏZfmI"'VX0,YP 7 ;c>uw`V5*c2@Ժwd0{(v[wSijT}8glѱ74DP ;p쿿4(.U; QUksv1f̡xL-bT^vهeD^D97PIJ:bhFSn \FQrA6Hgךu.(3Z/3^1-϶{K߁c^BY c@L%ӵ\#U>&VеRFQ/GYgv6V!Qesea@: >a:cݨk%Bba~׸AcI_[ +em EBEZ >[4PS dzx7ԽFz@f8 鱁ZdoboBK9QFis2R+0& ݇~0#oV-yTTYvJ?h ~2T1~5K@,)zPn :ϒqʳ\X2Xn+f.bgA`vnV )ԚӖ?y&gL"bvVeLM|zHݨx@ALKm*3'B ?sFhWtbIaq8Wm}3(4~{HQ(f,bTң=jT83DaQiU?_DnNߌbaҧTcՑ7a^OJf'`٣[7y;doR_Dؘ*As13E#vUBp+e?~O81V8@ {uEyPW7ea_`i<<)]d=@'ؓOe׏:W!Ul!)-O:Xe4GJz;>qoIvх7,n|uVao~A*7cWVwodJlQYOFW]j] x0d#nۆ:~Mˊ\B3C-` 4Fe[dd%I-_oucI2EC5d[<7UD^ C^ *6gER33Ef'ևk>KOUu+h^ԉH܃Ko4h=_'THGz0H+cfuV@8H%8Ŧ@*Jo9Gl,"`#^;}Lڍi2 Zt[I]*t#,Y˯]6V9 1}!g®C?0êićhQ QܷO\YWϦsu+;&gm{LT X]F匇~=:*4Ryb+Џ{ s+cobߖdZZp(u∪?N0\ \rH~*5 4r*˝š_}.42aq&3ήƗRH c4X0],2?(xizJz"G˦v[?ȜyW BN|~C UDXoϱ(i1}=_m?$~w; n8mGvU}{!\U-QWJ2,`pZjQI ,gP\7pa)NK'U}X[\'1L_tۤ4ϫZ Sզ4`KZL0Do.z **P~ b5Uƅ[b_&Bi}eaEIARʔcm ޼x>n$ ]nܣsEv:'&qi2n3ٜ=h3&!Èڙ0Cdɝѐ+=q3znGbRD,6( fTXj8w{ C0tvohk&U+z?9O3TnYJ[9A2lƷXRf,BC榊 $m9Uj=pƑ``fn\Љ1j?8p@Ee*$_bfB__vto% , q]|͠A9hAZ6E8]b_bw\롁8RΖe%w"z \6<Vb}_)^O?eaEn^rhRh袓hŨfP>$\Hu:F Yѷ= c/]&YMMJvDxn4~,xs0$P?j⒧I+؊cJ&-l"Zx&(ߚ0h':~Hjm-ܶin6- +=l~35r(vqt1:L0l}R?~[q/eb";ktS8 p8η~^a=~ v/U<]P4O\xPDr6uyx}ޣAZJeb\(?odl vz ާ#!m~*%{8t* `!W|c?#l|f!ncFa:TT5t1ɭ]}<$XP]nh cv9JRhh: -`d`bZ-PW0|^ _ANhSeog[I/5vCsEZ`<57DNΌκKI"6؍GtDF~ )H\~ntrxs d0{B<ҳܵo,(98Oی6ǩ9TaKǖ&E)"CT4@u> (N0_MPu]󀼯{Bg+N)uGCk/6q&p~ߙBw]1L,8,=7+FD9GٮyH*T,&ҧ[Ȥ*xڊhwDmO R^_%Tw*(b 6zMW po"ojks]±^-75o)-M,i~@DѪamG<*amg_}ťXl)I`XQp+Re!ːؾ_G7ћD׆e#ʢ뗶s7xThn{PVCJCbܜºfn؁Of=xl7Oĕg0l }A$H'@XMgj"&ߘc T]hfcƙ.DI?7ɘPo~ `Fa;(<ש JwqCɆRjV@sY bާO*I,cbv۶+ LZ6Huh)L KL`;zk3_fH{Ytk5<~ؙ44z6oZ|ǎ3"{ǽxi` LtHL"^ia⎨a_ -rP mw1(,`dkS"HJ&$WSVm CR-J< A^YncP&KLYHFU*EunUOm+͵l>4gl3`B~BW폧`XS>$ ETJF2/b HFlu3(05PvyݖO!?0]3U(> wߜL!3 t<ԃ3 pfLh}NABUyb|hTT8_ c)S57p[8Fµ3~96$&[`6k*I7l *[}rGb"#eq=+;+#2`֧ ul|6F[ֱ?z꯸[,$܊$ֵC@,_[ Eʫ^0}J_ h$nd1IZ MQcI}LPU063Z6gWܷsA=( WX3߇FOɕf>$n#EةV''~F6qjlh&~mҰekC˸g1[qy ءG a{gΪjD'z3~g'u1*5o VqC(b7ձG"n&LBҀH%E㑞0}nf (ψdjmG'iG{ iTC寷[l44F?Wq>YqnQ5wBB g^J`?#aEͤ F 9B6Ť}!0+қ=&l< lIh >ܓmYcbb"CzČm6HZrLLĢ$Gh5 y~~~M"ԊKW尒H1M2C~r~Jx}pv*nzF.oFs2Mu%R}bdt\VM}PWLdI0N1r%9bȽSQ uᐠ=e/i>zaoʆ\cey̐Nrt9: ?El(ia_sG8:OX/&|5oxcPWD!ܡ^ ;pްh$5rA[@Pev5ge8#`?#x%b`ZM02N뚹,:؇(g_=nb'KIcʶps ~9!uCdi\W$[3 ;PA[1f3m\g0[`-0wZA B$s3 ` DXsvQϜkn6x~ ۴|wNȤy } z .A1R+viQޮ{8lDs!2ڢGuƒ){WY( E dd}ɯ +I.1?`F\s  )]hM(FCq ė;ZNa|b dW;Vj#R[T84qO1as̈͟Ka$ldͺ ̺4㤷Q&"K@#櫈aun)[87%CGDEB0>X :t~ƥ#ɨd&[?_7ܿ"p BnAf1"v֗pǾCLnMރ*NWF(B< !>')lA3\p'SWCt#s崝Z @ H> lA o`GjP4Ypo,]}\i6LF'mĔ #0BdV՜6&&^ cY@rPzl{zF@Bҭ\>YG2fU (X7A%Uk1kx#`4t *kU52&j ŏlϰ 9cwypo'g酋D[mZ;+̞r2fhd 1,4jh̺w)Qv 4AGh7o[xAc_8!Hλ/J߳;xz.N40|)1Oe{UGk*z~ EA-{3G{&CYh_\䩨 #?h/P!&ädj[SHn챾S!k _kp;2p-yVDbswr2P4Ü3wN޾{x @Og(=pHm1KIBo]ƦS̖-GlOF֊y/SdGI?+?HX)+Tp0pوYkY#R1T2]y۸닅l1;cct v[]wrR[1 D:S-tH,S϶R`Ӿ@|1@0z9񏏋qP |s5/1L:7MalTpihM^6封f$-O*u[>Sֹܸ~mG\"RZ7Wc 3e6g:&U3yʏlͦm{kqH (,?/L܃" !oU&ڰ]MXj*` NS=Kk {ΔQC`_in͡ SVFq*}јg4R8<(]'.j]cԝrOIwj In/OreUfqqI)Dzc&d,6S:APO`f|uXgh8?Cy3\@8gB]WRy= 4MnM@km3 '9>C (~f 10S)pjLtU=0s#23l<4oGV=њpQx&6`Zn'`Eހ*gZD9w=;!ފ)ع7¸'5&ŵchC L?_#)6- ̼f{mmIaxzX~'kfڨjᄖKʔ"ߠ̼%pE!q׻TL v,1|ɓ^Ika' Es{EwmVO uuM3;[ِ |:FE{Y7gت$<#%\kA\5gnR8kOfwp1dTc>jCA5B͋ qQyrYȊ~s`̂#/2e0YtQ` RLZnԭ?YsieiΥþ˚ vI}>TB IJJKb2Dnq/{{"NFx2h}"!ļMYB8 kRE(]Lau.2gXLedB5A#1ʲL2DUF R%!Yۀ> 4`{3M4|g¾VM$5e ފ-ٟa c߻f"ɷ=in0熏@Re/U ݳes t[CϟvLC.thzW_-~K6 S3?L'@ˣ 'i7,)38|~VM*/[A|-4=R[PƯfz[Uk!y''Pg_KH`mQ?۠M29"{cA/C:@ kg{)["--.3a!׌#rcZV eT,ܺKV[ܬƁҧ.DmlR&acI s`eS=ީ96XYBڬ MA?Ț8f:aQ9H񷫢kƍ5Ad@~9Jv÷uag- \$*k 'DOQZEA~V$1E70#ԩuLBjrROs[ W/8{'4xIp-}!BW2΢>z[*׭||_PRحf ;xv0f wJ ;fQ6MhK㟝d{ڤDiK9(f}]iaJ6CN쫖-܍CLZs`rɉQj+sQѮ /b}*6O:l3kǍg +Ա._Xqf7ݨ{{öTQ8Mgh͚A?$j7=:y< 9i<>}s1ZNd#KoX8E?>:BmhE@'f(Y|jO,㥳`FX 2o_RXas@m+uȱ7Gd@(X)lʹ3ܤ[v+WgdYJ3 cVϢY#9.r 0@% ?|V(#!|'HJ 0]=7O8DVZyU"Ǿ_: >2Z/))lhתPD^w]~Mz*9\PX|V';Wa+U7tΕ=%\(KfF6ҠCv 2@ Fn킙]aS(8^z3ۜ{j 3~^xXR:. syND=RFz&ޖGBgvW Aa9K(%}AN8"al y)A*e9] !b%F{ @iKOF>sVoM&@W&MI 㸮#R5*`Jn^)pX׈h#9tjv~qS`v0Q>ybPDl9Ͳ.Æ:4sy↸5љ,mpTɜ~{0"$Wkiۻ~YЃHA ,:@-T+7[W|`M-q6!͹r]).}4uyrODϑW)Jr` E$ua aS*&a8׸m.~x˒]pv`@PP=`cV*$?t\A+ӴYakR\dD!HL_9rI!е}olN-w+Rӕm^0J9nQ4W(IF/T0W*ӭŠ22!$5)٬fe'Äya_&m]Swl \.ȍ"s;f HܩkzU%$pOISN< _Pm@(f&PgL 94Z:9hB/ރ"BTMJ̻!v,VVM8 EVcŐvsʗIDy9:l~?6@=PQTBZ g)).W̃IJs/󅇊ě>2*[T yILG]%ޯZfaxs'Pʋl.ǟs=b/P[WCdiX+Pz?"o$G);@x"M {LH+$$Yz]+(i/9@4p HCZ?ҤyjiQ0cMuPcP`wGQw*%oVpGQm(l?/#Grlt̾yQɡ=e@ =aO{ U]caR0<Rw=v0~rgڴθfFeS.N8OUYB&dfXBB\fy3DJs+r ;qaU%>D3w#G'>q?Njl%&jỄޫeM99..7ީJ4fCRR,񤣍DWd}Frc<>tTGdhpgaYk$p4z&#߿Toc4i=ǤRB DJXHwqD q̱; !sP>+~o~:GYcD=JMt$sA΂Nö1厉;m7I']gOf>$ݚ# lӰ89 pݍ}xc8ѹQ.28{h .ݥpM60 uf /pDX_ ?F2:WOoʹ!- <9@۞HaЬ(YRfFIԖ)K6,k GUߨЭG9H1SJUvޙW4ږ=zCЗ0n糳m^!dXL㚞m_5D`Y"3٘5`흐2+!do) O*Su(}R8?zMp >4JP[;pwEb7(S6ShPbn{p0q|&}ٯ,z3:9 VsB_ /A!qD}"&z$H&~}u7c64Q){*{n ,BNLY[0ݎ АPx }SdDE@1 `h;0тQ#D156}/n^[?`E[6\ө+`g]]l5rjj=G:8}sw( JhAdx5kFM5BH5> 0򍯝CvTp߳dsA[x?|dWД%2FV{Ng_)F zA` q:rsJR8]T~*%lG8 EPp gOڦ'xo%=dVAy6\W>@|y7'X}9$BJ6Id qmB4tCkIZDvU9+<4@dvܗvkUj $Ny{hB 8&p$TH7D'9׎̙EӘJa0mǡV.-][.3%  K]&4pGy[<'U#$"]'5Mx עK>t#`-'Nng V1)uM% ]V]DyX )"2nͶUJ^B/oօÙ ~~ҫkgoI2`^ޭz$n*9A&՞ QG3A&bQԂ;C׏"FxU]izz܍ {$8O1G"P\ _jULjkG죝Rrefrit6E^#pGg _u0ޤޤnPfeN4E 1^P%ؓn&k|ius;z\Ȏ|5Dʋzjo-b|2 # /E4zdսOSLܱ@Ұ8CeXy")/V"NXq 5P׭d S&bVpoX/JZcW|6QlM2)E}֗~/Os];pߢeIǍR 6'U[̔d+&}3|mifrtZ!mʨL'ҵ8dYz{)|*Q['w$!¨"k1dm*{%E&(ٳѪudA fG&z_NuCtEd{n N->Z3\ǝ)"˗Q %<lmKسzgi(eAUދJ]tWdU3I((K6jqrvk51{Dd9!wR snE9P񇔬7Aeק F֗Et}{S=X٠)J> gDg fا"u 3 RCk8fQs<4?CӮJX"JS$k#C%0`i6ⱏ 's! o-?z @~T7ڞX>=>y4M;\PBKT1S} z-\B.ϚE7N"C"1܂&@.0RGF+U]eP3ĢDy>')':RK6gWGQQ(%䧑 C_߷q'bElϫvX:XSm{?] CҶ\e53{]#) !5`3O^_7ҶF,ox?Yt|Sm[1 : -_vЗT[gb}y3lPcQUCD < ÇΚ}V֦-ZvGә56Wwl@ވ80TKp~&ғ]b۠#P l'KOStpEtv!KVP*}T5D]S$ɲ 'err&@mHPt=ձhX^yy|rkur|FnZ'Ƹa1NF>#DcQ)um+e2%[."9~&<, "fL×ߤ8<;j+эpl?fR{X nۿ1$ۥOOHb#L" TuUb!Sã UVe|v;TR\ś!fk-R+OaZQTR"J|rdmjlL|i$tpܷ ]F3RE .]9"NE4DAt2}M@un3Q8=3E Y/?yxܳP>S"U"i FT2({qǠ^rJby>0Hpy{w`5z}~_pqz^yX.-+Hqy.Cipٖ#:[YbBϦM})X%.?Jeʲ8~*Uf<5y'@aU ;9;4r>GPXޥC1,+5 9muAZh±>́> ҫ+15nKkZK! ժ:r+~,o̊ςqNQW)*뵍P7VP\CPdMK-T i+2T2^چik ,fl .{SiP O6#iI_ۦv2{Z*C>>?"{J!$#KOk]r(#(}42!_+ۓchU[o@I)@ Si>v5ftl֬vD&Y]$ߜhurCeagmK֏|ۣa8fTMIX"BPRJm`raL4PJԠq b3s5*KybI)gU }ge(fevsNraW1}ٕrDR6"FZ# |9oc}uJHb%EAՏ%njf?qL,8SO((RM Ju3C3J^pôYrn)z5Uƴt+)}!(]RyStjemn~M|{Rx{F:h0FX[o[(w; 1&SJqdRt.j%YUJ4:Kc}]w)aT)Mn m4?E}LkaҝW_S-~<FG ;Fm dkSRoŖ^PU=ûÕP/>PbcܼB=Ŵ G6Xj/aEhc&GZ/t͎h~<}5fթcH4{A ı|ne>^?# cq,MR4eȹ rrFROs#G_d6}\Pd\hqW"FO9'R~0}z(FUnpg@:  2;hܔ˫ίO1dyyA'ƃg>U6m:Qdd Zɮ<96?R 9+u7,k5 "x 4AV-NtLE%2£xȋ[82=r-`"i|fnYU+T@ "Y//rͿU%c-o]Зf#Epy ߓsgC<$L\N1(o^TKT|/J^CFb|յzJ ρS+|aoO?"Q3j wճ~ C7ɧҟ|=BÑƴ.i%&Dެm2c)x?O. Sfv|tZIn妈Hc]W\P$[UaQ9}=A=X'-0|pR/ GuK&p2 Q,{8qS! P4.fJ_Z\km]g ]SR"-ZãO ix" z5Pf-d1 ^BU |("=O&3rQ݈M_CXQ@z,A>C?5]hzeCl ը1y-p$76/3P]L5} a/m( o>Go?dDR1킃Iߠ]~]5B>c:j"q G*ә6>boT/?duGAW.-Nd wRF&aE|ŵ %̍MrSM_eQJ#g0W?$ȉ&9DS?KM!h+4T޶Wϭۍȶ wXa ,AlfUaṔN,X&!kN ?,(;jLnP18 rߍd0)- L0샿:d]`wL,J23Ͳv>4CW}{LN n24~6tT H3dUgIuLif%V޿X_xn`XI;AvR18sCa/LٵaF o ,0[@CMbgTލI0^536~f;XET '=Y`p3zCj z`ZqU \ NUUfΎxJeلNÉrpH tw"lUYfVVp`aAer0,~S.`ΛXX̘u#F"&ݯ%FO57ɴd$}eH#Ǘ켮o(м|wزIF`,49Sr89u_V׬RS$hwP:^DgD˶G|TpHMwm"8<DkV c^)e}kt;ɦe6ь p6mb(gTHaT8*YHa+QyrׅagYnP$0XͿ O^O-.Ks=aƒ  C|V0TcL`N}!-87īCĥ㷚x[L\g4{-X{M.$;fGm4>DjZ %o$ :w8ԸW.%*yp$Jm Q4x0WvV33KF'ܮQIMYGrGgB\ͽ:DV{/G]h.X]D:9$+(8lzfs%w-K؏ % jdVt~g` K[cA-7x)HUrtl_6Y\!Y$' 3>bD?^ye 1*R]tAr)S2EVK )]'^sB$*]=ɛߘpv{VhhU:bAY"Qβ B R 2n˻c @aj}~u]x)-K@Jt@5\2>$8o`(@j1M>֙b"ULhhf{e9n"U*n 5qoSz~M?o8V˼sugT\aF5ۋl}+[/Ą1#u8*Xn@Xg 1*0"wR/iIF19ڙBڣZSҜJS{q.qnIK; YM 6#ѤZKФ7DY{:ACJcܢloS/N-qؼ_! 21fY#К|u12_. q+$ؙR]R/"/*ʋv 0>)iXȚ 8n["YcL.%Z_q>>zdgI}eԗr.Y1g~ $)By-!}qs#Lu !FtqPhu[D-R 8ǷY@R^;{lA oJfb%80yx@4$X(}T#p(ц %ꔋWfFw_Į5- k@] [ sF#L?t5YeLSף M_Bi>./{MB0oG+J̈0[߱UvCyUYEi50eFkRt en?xcTS)P?akuOB[:.i:ˀT孖WC;ziglˋC )V*%:Yz%i '"3ndXrˬy 1j#7 ¸dXoC vkal (%-6< .ʠƻDG㋭2tVh> 1&E.\rmZwtT>.coHy-w#)]9cM8|qZG;s 8s-`Upuw%Kq]ΟjA!b59~oIBS%@xRJ(!| ۖDd-j*u^ F0Q4?~" DRGdJPL4lbNwf-3Sd㷐ȧZJf1Mnxt9sQQ)"༲`yTӓ\-2FD oY&c ek<2ۃ9 JZ!󐲴uh++n֑3g "&n'*hfAN8Za@/UoKcv4iidV؃fFޛGK-:S|k.Y\p|Uyq('!?J5s=h-#?зYl<8_8)eEsu>مi 8BRR/c<bhTZsf6p8:3 _K $Pc` ,N)Ўϋe]Q[U|!$ϝot$]k od{ BKKa:gSӲ$ +j<9`*{r"G􀱝 :zWonHY@UIVz7V_μVBReQh6n=KKqxk%glfi)WjWUn\u}>"|F,}E+,P/M}Zk&UtǓpyXD@>9 }@CNIF, {0ਾ^WO=^໬6:x.j;8KUTθ Gs@hzjL aG sDZ͒z$"7kC€.`r`$_U±@=V%%\MO-84: ;i drL ~h8!xƒŮԭ86<勭m;C$ |4vHO@^(j/]yFf (F͖!-?O.VSǪh"&'k7n#'}.d\fUwT'QUż1Wuȸ!N:^Œm6Kf.BSZrKxW!Җ[GWo^<qdzwGb26KCs}E$*scWE_&\L 1ܡQ D(qX]z |ɀLw$IWWudEϒꂀO:RjL{#H)ăth `_ă`'dX</h_MdcLChFTB գut5ǻD"6 cm&⥲Y \sGdHH܀9%#jM)z}K7;r{^㤻ر,cgp6'*0و\s=t6'lkZ{K-NDk0P.xD|P1g^ˣKV'X;d&?K|$tĩLg9rnPm gAūrq./Ў6p֩c HfG7Jk>n鎬W;L%,DOU+ZG"ȮGB\1BX,J=l-y-U-R <§md`O 1EMϔM ʹtjtl@TJVYZȨHHBLvTE gEۜpF@5OPm P|YTԺAQ?onba[@'Wb h8x&! c @PB` F(7] =GԌ΅.<DŽh }\Kkzh"mM;$["ZϚMQbM0 j(kmZZ %'9 9Xxv稉=sƕ3K8=׮ދzͫ"guޚn1Ɨ&|LΖoN]OCp@:ZiۙXc=#x~nDDNN !dN϶Eod\+kHӑ4]%lR=Jo>W0 k3~(#\I*~3jВk!6ꮻG_ )^d$m6-f3n$-ikYZ|ӄqk\V^\ЭV"ytb>uPv?WQHu"Y%d ͗%b 'Ea$w O?WH\Mzzh\Jf|v8+ b&4 Up %pLjѥZ:cŒr?!l%~BKgfZ<%؈ct3*MPNf(7X1|]zDZ; G<+S- OIEGԽK0"p\}4qJNH=ck(y^f2G+niX]Lp11xxv7i)[?yYz.LDBG&v:v.Z8GvX?HpLU!ư}=@"Q9v0Y"i O)w.a :W#1hF%ۮ[ ηJ~XoɢV)z*z^<K,aJ8zulEQϼ+l )W6{P˳$,:.eHC@A`N4s0RyVGV)|t}76y=QjurWG6^K\+)7',+@RCt\f .[>SɁ߭u#fsm=M͸i"R5&f0~˗Mb vRv#ZŸU4kHD^²: #H?"d %'[}c뤽2Vaӎꂛ`~aB6>R4' Ζ'P1~x)K>V*9c̿k]4ۊVwgjQIp[K/cA !6߲)LKJ/}{XR{B*sy8mdMG4dl%=C. 5`]3uհ"6s߿^ 8J^pjcJvM'ܰ^s#G-߅pq'}0FML4дƣu. ިxӍ0Ae8t.X0> طN%O 8wO*@ Wz+ҍHx8 .7ЈVC'@#`[z@R-Wc%|ý~HIeAU#f ?r쥐?){>!6g.}oDө!G~-{ٞ gCw3i>d]^YUY>YK)qf;ю'N@sNt_6-Q@PXޮrNb4th$G{X:@V`Ӟ|vxȍ9߻f!JS^"r:"6S?b'n#&z)س[{ǖ<hҕ9Kn?|-%jɴ;@lWlhK,ky0L wwzG^2CKکtjPzL8Ϳ}'x/>0ܵB@rVUz*])?K퇦2(l1eAv݂ѡmP`FĬvc̍EK$a әM(R"9)ygl61j}=q*f$ -C @}+i c fnISRdJQ-R.9O~f0XI9U :Bjvƈ,t)vC:c3$4,M9٬.6 @QRSo:ńѱ@~ n+@j_i]] 5BXs.kDIup/`N~3uYlV.*am64oGrl f31Ek]lUA.61BBNTDL7H;zC=A=+8c77ۇ1MP冻,iW賈 {6K7"J/a?O#,XuݳR@ q'%c`yd}SeQz'MZnELX몢Z'eȯֲ;З9i: *a3M2.^Qޯ.il$S\M~>rJrWRmxQ 3iߨY -5n ΑyJz9퐔AwOMjH.3'?Caf#WF>t&\qXv{[bӅcːLWLL~a_U\UnX&&AuK]pCJ즕rH`tLB%yK$~G`BnQcxy9X[:[EɏҎu6v!x4FR/#;2.`<{6(-B܃/rioH=GJ;97/W/ Sj_>[Eg)@\GYqii8G1i?LdfkX*'vG2­g!4H)#~9Ab%2.mfs.x6[6iGob@m#C7be}UE݆G !2CC[nǓq:l@;Eb9*VV Z:Ǥ.~Ȯpqz[$*SGZ0#K&ƝB^:Zᨹ8{B>5GfH[ ޯt`FKbHH@W2cbN*ћ{U*Ɗi=b\4(!qJ@,#EICI luUL@ ;<Lfm] >T< dKS2ET0-Y*J950 Vtx{n`ܟQSI&FW\iyYdn▧9&4!P9YYX4P.Aj^nG֛V嘠EASOCtC._ktoCMwZEgf&oĠ{ 0~21J;o~r*0t.|lj搊 ?\XޑyƸbOC^AEx0DP;aaFک/aFń_ەUȃ#"_Dg.Kqc}uf}Ydmy歵SLn,.`5FJeօg܍nx] W%5B}x -?Q>B&fZ) fq@B.o:@eaY0vYDLr)qRc<#N x[gɔǜYN{V-d@oH>gĢ̺B.w^ܕ r/.oH~=ْM^!H`g/Sg(G*֊jgߜ 0!yܽ 䉰@ مtt8d a֧BŃBr U]xՙzp֔"~w'ҙ.ynW]ns'@4"L?)^%q7 jb^CKR-!$݁k7T up ;BvgZyF / r}NZ[%PQ;I ]Χ[}r@jm6x`* H*yɟ:\dH܅n!@A6{᩼qZF^X_"st#w.:FX@TP<|/MIj.HOSj;ܱO!HUm }a ?k8ƹ>?pܿųʈt$:oEYAm /px8=Xwűs*1ԵhFZ2N#E~5Q~6(B/]jeo].Mh;>EKWzuݐI"m~D=j ;Uh^۾}5XԘr9X#KRN/f] Cj "cs]$HBgys(= @M1n3'aR At0 clVZt:ԧ)M]%o% b0MMiLN~ v+ʮ}9\=?#Qp׼kY_g glو=P҅+Q9<<]8^yv"aldhao sSY1TߎJK̫)VK=V?Md4~!ȯ|0@Q(YÅnETشi 4pPDL4ڣ[|Z?aJ$j4mGau4אޏ :ԬXYx83bd:я^bhwqEFW;#Om~kpzmDUYLSJkGvV͕6:4Hvnȍ%8+L_Sә(_z+.j: [b~{5 ;y":<{;3 5`FbwHJjd+ܲg LH 2vAfZ=;e)';@DЛGc[N Wƕ0v/?Al,:`19%)Eˬ}̢A;-Qg\kC킴v_\,3${9 'PѤ2n_0kEa 2_vfO-O4Ɨ_\#015ljd7{ ||f!at˃x+TG)=jyGMIDu(-Fe)¡Zv,Є9}% ',"㨃i;n˂F\ZW]S/zaDP Q7zOvUaI718veR35TX7 >FjG2m?iKiEEK}G<\8:?%h"쑜؊[g "^eϹST|؞`*zI_"uTL_p?!e)ć(Xb~1yhEN6"hep/~S. |E68{2&WvJ7o"Rz9AqI`iJ@@:#=ʤQN8jsdH+N3Uw˼JntPH ͓x<5:qU,|b`4嵝i`IQ,£Ni-]MiΠ?ć\tɼ,Eh]::8/ˉ ǀ4cG@\?;!מ|N-0H#񓾄 #-A4u!bS3d- ~ (V3?OY7=wo_1ۙ%o 8Dt XłS,?fV&=wWY]%re]z6J|C0쯠>TOBP̱Ld;ۚZ攐>Xw${&Z&yeN4`AfW1'/'ݼ|εu ٸ#wJ/9"M..SE/ es[=A%2BM埁\{ǹ5j#u,Iڇi &-6DaQH{֟($v @w7)|`':j|]-HenTe8 s I.KIyeEDjCA?X vdEP#&izʎZa&#t񌴢[*(In|ڟeNI1VwX~9'93PmIXN!RLL 4$} .p-T 6 "jBz(:ۺ)J?G]wYT{>vݛ%S jHFYH70i{<<\p `>>hn.xX"(9\-P3$~9U N_G톔Nt&ziI\v)6h?)?%JZ1kǥb1epV&$Wv&o `r[@!ckd*)V+ܴ[M|Hgbۯ_^hIM?  򢬺+>Wಘ |#كk {Vwwm7"c(h w6%6*|J\Ga~z7^˧h-X(,vRetW>vs{7]eݺP)ͰE!Wi*R5{#XGlR9}:gk/?ck}4@KeFɴٽ<X4ib(M_bGdNo#Y)쾩qBH#(ݬҼhC?4JsSp m3aS{kj^15; / D}[qd*LOpUMZ@Cp:T@W~yTRiAXPDyht* y~3ˑlJ3y@zn>ֈ3;ք,`m*[@29s.P>Ϣ'},}= AĩvG؀h eiꀡ.6dj?_(I fj'0,ßoa{\x%5yFĚX F'=tu)7UE%T$&+:JAhK|ě LXN\f"WgF7nBomK`BhūϜ l-%BA2ņ>|+ yd7l:;){&3RhN ; {쇁.*h_=>^]ڹnAO:Vw:*ddL<3U㏰DFu3jX d3zс t1R<{ xⴊ+eW5z!sfP.xkiB.S:ѠԖ[d^uxOJTs:)pHNii&Nv u%eLM+6P!z$UR5aq2`߬bfFkaN*}f!E?g9РDUDDjxD́0ˈRyUXz #WL&.yFnI L%W39B;Bhm9* 椭;{Gd 6ߋ sy派}{ qH?ӟ|89iNy{lu7}E<4R~I LOa?jkw)S%x+Q@5$ŧK |ѪtDǃ&gG6Q /Jj6]p,J$]JdM0ј4j.`h|!$_ce{!.֔nVs_os_)\4Vzf'ȈaQ"y {R%[Td Y~)QF&_dK qŰsY4nj! Yh"e0?%͇ؿ$Re&.Q^ʟ˸Vè&9\pgC^Xf_pR}2V2#S@5)zv7KF*1X-$YpgK4~x|[bDvduG)|+ MOBQjRӬpfvZy<&m\YSw9r}~" '< V~r#ZTёܷej'Q-oa}qyA0*ţ.k2ܶ`uPxZqz|lHjmPQ_+_9_641UxyΞ)A8fyG=ٖo(hxUu1s6GvTwa>b9W&I'4Ar3)bG&M5qh| KV8:/T ƕjKwP ⁚'/Fq#˶P)x1CH103GEbE IbtMb#\%#vi6G?th+|7qtH"" Uڙbfp{/ܔ'i F| UX `~wPִ`'&Th0G#mɫ疧a6f:wjo;Y$JE^ޘJ,f- C8-Hf&&_%]DDZCĜyFXYaq2do֨*9%YdrZ} ;LBp_G"W}Pq+a`Cvt],u鮎~[fvS눉21QcMt೤Y#&F?w!u齪zDd.>ݻJ;/?ׅVԃ35$b.4jIK(o4>:Vk"Ή&>6cRtTҷSqz,ks rX# ļk#os|ɑf3[! 8I†୉8GϋĘpv4y^u {%$q]ء*d3tj{h͚(zzm&X,HN%`0UBz|x2+aRW?_745Ulo^{fp8eo`8`f6(xKH8[DdLYf[[e,GnyX__r?ݫk|.K>5߄!s嘤mQ~d)]**~ T\;g5 W 7!&fmuB=4G=fZ2,ztX5UNzl+g$eY6Cȓea<ɶF]~#\)*dHG B3 !ئ?\PPް-=N/{PM Ӧ=o}&1Ҧ8ިѩ{yx-{A :>*'.7-z/ξZS3GhaBzT7㈩V#y1 Bkm7d'u, dsb>!_ω1_#^m4vB~MkrZȤC$z2Fpe[W X9wIGGog#DN@Q Jlo'6 yDvtw/${`ZeRd9qG;$)$G*/Jay:espS)gؓyaqTiZXG PS`WvND49PfVssY.qI{!scX-^ S>KRl$dZ77O3  g(4뺰T0>c1b¸ PCNôHCJ&;&|WDrhBØMBi΅b^Z5$ 2 I]|~q/=%+q)1NNsv4.>XҩJιԟQ +!)n&z1̄wwƮcY',(Jb?_:T vxxGuTȞgîjuCPS٬&R):\MuIJ%Y(E:xM%_,^/NZŴ JGoNyX4(1Ė쾹Lvmq*Z/rOI\p ()d`癷K>M v=Vdmz: >f`LiRuu$wL#+Ou"OtCit4'Ћnoڕa4x#NfKwdMc_6e_20s"֠>O -N]T@{@βh1.Y`  %" /U|[hN. բ5 OvzQ}F+W=k"5u)l!8muƤ<4 ҕ2iRɬ7MjD)[<o21ReEh>m6bp{lJ'peF́ dJ-. F$$sx`{Ss{+Ĺokko2ʞ}Rw#4cֱE-2sO%*кaKoLNA =p)x+VG1[G_iVLxs iRH:fWC67I$pMAªSӨ(h3襯 0Aܝ$sD((256P5+^77 *}yV mOgw<viS-\0*\OJ(Բy'Wd-2F@1YlվpQd}$[DSqMM3Ȗ))n !KPpo9B'o) [lW"/~~|*{J];3D8!kV;SSFRz~vwSzXލ$ ¨^b5+t4Ȟg9%Ey\sjtDT:JsyJu'P0~2_E-3?@TQ[g6X X l?q]gLCuDdXT,uϳ#A$z!%X +spc +d_V>qh=+haζØ5?y'^LT|3x/}Œh.K|HlL"Cs/\٬R&aDE%\g^T`/QgS5Xf$Z*Үb|$yi4{ybSasA-A:hslos)UqvG 9m) {/Z%eu{JW/)Ď[?|k}koFŁ#}'B~:BYI=U`702IyŜ!(c=}ߴ6:(/=HnKCt۲}Q@ oҟ{)yi.2|| ;Y ~{- oHxDgol\rsеPo L ,e8· - v' ;׬`^dVٔ]mҤFξ/AnRۨhfV#(Oݼu&07~S[@B>25ӦW$^9;x54`)wCxD~=̖<\4|{.™͍H`%8|lz-p7};EB QZ$xP۶ʑUV)DX'䬺@Wf[+o$}Q%CJF!( z1\ scseƲ\~qZo ۟y9VgFА5çXDǐ i PU]na;3!vSJpS35 YjjYgϠ S~GKn[״6+eZ$Z@úmlffݑM}a-Pbˊ%1;"bq#: SSA+5B~ Ɗnٕ䕊K_*#؁XӦ bjO(&hIŅ|?яd=agPTdJvɉQiiْȃ<_| qz6'YOл0w3֞څU)UfAp]U$AHtO}%kPLx1!Gw'vE)?NI ?I<% Qxt#dz;A16n;` J/<O gi!! ZW UZp?HѯEBU=v\_@<[&kgc e.DNYn*[;:JqE1â}:pq΍UKfk&gI! OdHo =W:k\q,ǘ81H?!%p]xEy Pؚ[% n3oXR6G<'vT2댌{e S Z{'qTz$pDT)/WGRr=8},Dito)GKSVlV=TÑ1hCMZf@Œup(k {t04 Qr瀢ӹb78k@靾{jBRQr̞ʧXà8QGeOY63EÊs CNPz 眭RPdqGڈ·f|kvv2XI i[,w)%aǒh\;|zP/Y*T)wnl'{͐(1z]_)L.43jL"${zW| XF*PHߛzÆc/ٝ:f#6[Ҋe;KDqq!8CTAI\xm. 0L%WD|j!!MaJX޽Ӵ^e)P# ]9aCb,mP)r&R !x@PS:-|D{ua-\ $z)RY<{"'ːLdžIԔ:rGrV)9o5i„1o^N=~LB?a#luV}!J%dC06ϴ( r&.xo۱ _ɚ @^"'LL4uïHf~8\=˓"ŵ?fW`XBa 䄍EDoݒ]S@Mk(6|]\P5=[|Ǐr uf~.03L=B6ֵdz u@QF/_aLUP"ڑYO6j ￗ:!)O nJ+Tq0  k;Gic]-KK2PzL,B5,g92 +tt*Xd?"Zn2XaOu)x7/T3U-:)‹e(2dq GgJ ,id pRs4Xqg o+.m!Yezݗm5&hPv'qp_07qo7)_@2L)'gx(SՍ?adžbڱ&iQ1dVKI+UQk!lw<nڤӅU]eg1Lz!ශbGHbB֪3o~=UHGeѵ).z1#q '@aJ},DV\5YDqIjṺ>G)^P2Q#mK QDuՠuue~&IC@ ֽ&aS9:B {wؙQ5s VVF+*xd)Ex&P}ѶvLo!븿Ѷghgx!ok^IG#~~HcﳹY~SՔ4^KIR`*mцDw=(z^R b=g#e D䠿ԃ0"-[HC DB7ƒ96Ⱦq1D;m0dK?\,7%@ե*Y"9 '=_:ݘC9lCyKy ]&0d%p>AU=+jYɜ sW2u1O:'RJgCGG[ImtJ K9 }[so>rjQ05|Y֙dE2]"]I~hf1)qx0,Q妋[:/u".c WNBbmim[Lv0GA596jR5 ˍ^7ߵ' hNX(lH]I7v}.%s{-1acܠ P+?V&Š*ts}|Y;Ǹ1e 9k*묓Ya|Q CnK䃭qF"5nJ|Z|g`x>VYH_;$d7hw24Y"]kh,*4'߇w͕܂wN; x/"%}Mތpqκ?v=贚w"JF5٢#K kvq鶫rͭċdo_B 7m|Z/}bFt$O#j)&z\%W%xt-} _f,-DzGUsKspJ >`P`haB?!]rR"Tir.Lt3FT#3Š dW-fL OU CIvA̛5h>HHLttcMT*]<&J3$z]AIq1%J*TJz|ş5oq˩Bu$/f:B+WGZz Z]Yj.,ߜwiW, vFGpsn2;4yL6jY%1F^@y.11LJ9e\m㳳l: Bx<{oxL021S:lyF"2CZ⮂y-|fKϔ6b% 3vŶp:S|sD/)ހ>gCJt;=ˮ*ye{Y; SO?Q0H wфKoُ $;)Np'X lZa+HwBhu٫@x-!:)7(ť=>"!XUD\0N7ɤ{@0:AkJr]7xXADo/v$DG8]SgN2F8&P;'!vFqcs̀/߄cKA[~Iya<]fQSzF~&4O?cC*skn]Xfn5gfHzKF3cc2ve HiZ1=]s`nC_4s}Fx YZ KDHƕS<-i~}[Mk.VfGO{ly:GQMu0 3sauaRAȥ`Gj"Re) oGu믇Q{D1w C8\@bl,镹\j]@GA7}ztJ76TOxV&pPP8>$#C[["AhyP HFtqoC~;ҭ lg42{rdzE.=D.w 2Qȁxl)U e/Ew1f<1հDo}=<ߐ< S79 4bWU p6oY[T })+|'\rT -̞2JYGP4oQh؆]^~w˘?%#X}VVn>!VA^LzF{ai\ ih*5s$I:4 s<0ԪKß1gD k`zpHhafa h*z:>p 8r=Cr1^x`@=/ʋ:mkArPr8]&cS]cS7]~^Rg8ʄO))"ƎʃkfH#[)dt wcϔ8_Nؑ|^aIA?&FL%Y?7 ݁6 Nk{lQPqJ=JI.u\ц N&9NujjP)V9qgD9iK;'y(@{<S\ L|N#u޶c-RI ;|S`N|6crNct8n Ni!ϻ68LsCǍxy)Q>?2d:7-'vc}IP ,[]ʹ5")4߯qKxaD'tܦ\+{.+$C$ј-~6*j~\WȮDo*DVkmE9uuAj Sqnɿ ZGl[CB(P$^gӫ(,tk䩣LOț4]PV^ ?zv;G `Bx][b L)[A c@W27BdN+0xwpX%qͰIUb ^@}wځ;&xͱF¤MoXunCOP}lUGH ¦.a6lK,$=О42; QӽhkJ(qF8οm= YIcq<=L׆ 27֑;4&^&&}Z[fQ$J{'pr5p#.YDQ*5D}ԣzJZ#Q?܊TKOv- SEni LiR`ΖYW5Ɠ͘o`םE.oA1;{/yC36 j Vz -b1!do">'ZPJj+>=`0zriՉجkSVX"og˗TEQޏU(` ul cssA*6Rg ӗS )g֮6*S("΃PoHeL$M7$˭ނElRW;'36s FKQ ,Oˇ &?#axu"j qGI2MƁ"f6^PoߤOeWu-]7 @iyRe#:.Ķk1ɑ$)L1U[SUٴ ]զ^']bQ: SRkub6E|{_ =oǎ=~:JR3FLF a^-!qm&w{ _|u 'Lƒ4RK{>8apP10E$A%c#8$uF,J(#q`eW2?iN)'6li~*pȁI""W`2j|찊ch[bR?_>-kICrрB7zy6i)Gr?PsKX77cգaTE#JtpS燌{yF rp_.)Xclxqz밫MYx^AL#)sS# &rW  V"mO&4[G6.^Ww5(lyE88̛9[0S5mЯv[UDLil}Z_RtpŪ{ԓߚrs 5ۋTHF 8S9Ӆ#TbucR;Bt@'iZwv=HsI$+C-V1g+٪yopէz&dkH}cY'trx=c =x$*ҍ]zᱚ#n^%BA.M^p k8Iy<23x*q!LEI\\u_sr){O^2밗]?'r~r$Р zDMT]9o~6 a/ÌH"Vpk͖JlDъC kRA[,  VHsQI|*|3O~=w [HY=qn^%om-ȊX,^%Ӈ DL0ÄI[aǑ4z^rn0;lKŐk̹t uKgwp!E3+a [#WcX؈Hh2qKp;ax+b[Qk: Fɝmj}-u_Qϗ?~?3[jQ][aVrc!ǡVPyeMVXP" 5[k3${Nk>EVmO{ȭ*-d 37Zz!^/?*0sP!79/.[kIG8Dj _&iw^3oygSSl5Z/VQ.e$%^s8K2PCǽNƮ^ R?"^Ԛgų+yN>4$.qȌڈ{ /W?Gp|Os0Be' n'cI>*mO,O'&e_tѷP8oぐZ~MoH=V4\H8 Oռݠ޾ njE [uOQF#!O5öjc`M*⦚[ޞ|C%#%PUb2;_ongbw%{^_/}Rӏa.m]P'ȰVoaeTPrVo#eIއā @?'ٌOLb>MPV=3hv*GxwO:nzN8Q &^>e#]F_ rRqߤ'!xp㍆GNV$ Dj ѷڭ2겿hV;M@`%ku;O suY=-MC3Kktyz@OT~ofS3_|o6|Iik-ftUhZRYjujQg1&"5qD{WX-|Ťh> Cz҆PUw.44[胸Q)5pykzW D`x$KI}X,fMxSR46hiZ_hŨ7TzW&ތZFz/Ǒ[(] *ʘ~RA)^Ozח}pʷJ}-߃v5aB*R VlԠ\(?%ef鐣a5Ż6H}z&p,/$24>&VƸ!-~WFP-͙0N|~17ooM "ȓN(A_A- c4}ݏcB˵5ҖAw4aТ-#z#j7%.%7.\kw+6iB]o$8л^ۋ2-ϵ2x(vwW*:Fo?$rfTV3ґQQHB@ɌNMX9ڡѶF^%g% Pοm##c@.iCywP/pw YFoP3eB>@ޯGiH@I>T[K(i./:~"_XF^Q0J iW"\\}̯ f5.tF1sLujK'˗ XѶ}Y76 k(Ziyb| M]&hc\#0x*-]JWֆ]&SH  uX5D:5d+qaq/swoҘ+A|hN\IiG|P?~X< fYF|xoA:='E'k06kD2=}GT;ӌ\/ʧ#q)nDYg+u?dKX2A1)u*0q}8-*P-@5Zeow!n]ݵqfG^"h2Arvi7 w)[*[voPlكu-C‹J W\;/ U&OC7,N~1V߲:T H}H. 7@^kΓ+3(H5V-Tһ% Yh.Ҙ֖A,4chu=XuܻƓtSqdF<:+3{fy/*0Z?!CC0f$D/ @]ӂ#EYۥ۸Ʋ֑pϕ #%~,k,B%8 HCP3HZl9ʊH&5w`_\V)88/NcW{0H)` {FtHW9t(N"?xe;`Ph|l6VK̹Lj2M> .eFG0E\; hx-g|0Ӡ:yo VhYgǭh0gμ??/ÿɳz]G1#E 9Jȳ&hY+6-<Ɵ V(RbpAK(֘@.#愖dmoNe>Qd.źoWIb9yla<g:+@sL)C?qM[ ٰWTDNOG^mnlX<{!S&Ξ(Uhg,O8' y0r L]稄1 !2P$X%A{܁GTNٲrb # O%)X ]{l 2ja O ʳ%! DNܦUA-Z֊,"8ɳC0*.Ͽ^mזʹNpJ:| F~:;Tɝ:?x4T"ٲ{ &/yϗ5t༯KiR,£ ;I)p8rcI$*( \c/B 8Չ#gguZ֥d:h,ʂ,HvĢlNH !'n[ĴH2[\܈ތ;q0cgڿzg(LR">jA2>PCE覔SEbN. gS̸WN̻nkUmA?~o#u8 {-SI} 1́ kB-1]V'G!byYY;l3R ǭ,8 /ǩ/sx+g\HQ>|a}Vn5ω~ Wd pB2!2e,+r& :,c#imk9X8 {~sdC$gȄr=lPc70 f(/L`j(E(DL" o| 83 YumBK[2Fb*pdhr^ Pr G2qkb*9ȑems[G<=E25(GK#.'EgdԟҶ6nK}N^8wLz~)鮐;53zrfSꟗ_mb=_3FئGc/ĽK[P=)Jcg_9Y׉>\MN(4!XU3%(R)7,a,_ _%cꅉ!ﳚ#6.˔FxNd"jcaGn:^-vb >{c,0qL syuhP=șG.z>şәṮ:S%G 'H:qJN8O&ql?ѤdHЮhWCp<5h!ӳf'O2y!(?JQ^=\%^*wG勳oy~jj`\}S2p=^fj8&4ivB\(&#Ô $ER`/^vT 9zǮF)\Vmy0nj`̀ZWu YGΊQ`(YX8p{ZkcѢ IeuOPN ٵZo.Tk$|`0j` &G&t͌d~)\#i$Ym`h{@ }.4PՂGT@5tS*$O -a9i/) Ji#d_:ؓ}7ZN(Z286'?ĺFф"ceĨ3&F-OSA?*Qm챚5SrRgiL\[낖=DԬ7_h]$oF`^9}-r CNhSCj=j)?rPe'RuXz`:%Q(:Out$!MgI4mV!?%(p=}jAU{GveNuYHu =|GyqQg`L+M^8!47LO:'#CDZEdVunGq֕ s2loWu  z]k;Zqx3|%bcqb (ܿ! tF*7CތgFRf+;nXE`:[D&,}"׋ C[L}%,bl*: irTE&omqi8qpSSB\+W`+~!*sڢʫ }n3q{j9VkͭxgP{2I8f"Lݺ.\A~DG!Ώ:=57sN<7|vQ O MດX-"*F;>JY͌$U/U/$WY@W5׀jJt71OUL^v&N#\z zq`(3SȎw4 2kx[/ 'QN>'}$/l@P"| 2Idzln5l*>~WC(=qSYHv˻l3nt$O>b\$Vʍ5Li+WԉjULP۫;ʅrtE-5L'6PTwg2ȩBl@a=յS1uѐ59 *@n%BuLy;]`_c1xh( A{`&#t@o!-HE Y&mpιHm7ПGgrC8aF-]Lٓ - rƔ<3pcRG|BXbNҎ *S-NqeT!Tb[\g[ݞkZ-[ d}a朒$7M(@WDXE\D0w9@`Y:M/ H05-=r{BgrPP("JxQV=[G8c AXBYt=E_OD Ǯۘ{ C?c@^svRs>7ne=p|uX;",}ěvAA826upL PsEY &/rXC M~a-ȟf"ʰ2[!UnFQP7@h-D&Un\wi>AGWC6[Qc򙐟sccpItzE !np!e%zԮrDqr'yS-{nҶZ7[c <?`0!a(M326v:eު3rܥ}\X&8@Lݸs7P X6*ܝ(n3ר-eŖ" \('<͸Z{Zr:1q#i8P[7r[1釭v.N5>_[:69tOMkn޹zuw cNSCVuت) >>j )l0blkڈ-~\;8ݣ8c;0s{.<&q6˵Ipr@$sśs΢ ,#,Hﴖ)2/RvqNVe/H߀[ /8rڪ\(ͤl_%.D[F2oA)46d("4:rUR,zxAh jXnHya'.f BC#Qh3Yǚ#r_Ojki -/4evjrtB#inuw- / cn}&^S]|acX ؐ¾8rb<ˈod.ǰ8HeG8{^X?tz_sMKpX#N8"aϭó)!_fAj-D#fn3-·8d!#]7&Kd_B'S`M)'=EyM$f!0TD4-~g^ ? b`!̍3|_e:fNHkh % Bn8_\VG|'bIچxNl LPF MSsߢ|:3j<#h,[_Z X p!,Z^aܣڂH[Ƕxޙ=yIj3cxմ,fFZTǒ2#T/ D?jYKn3F^?[5U*q&k yG64YѼz\Iؔ3=nq5fYj=Sw3FݎQPJ*{7[uzK4Mluه.PweG}l"+3zF-7.+v}ڑ$KmXSz(Hձlяţ0=AEew<,MgI.՗Kb@mvfuux!),;s%QOH+h[U_Kaڣ!˘ZD9F"uMM߇D*8Q&BAJx~Kq_1j0Ɲ.Ϣk: wB}c,sΰ4lkѶU lNomS e;ƹ>}="(f<%^ 6*28cI &goN-ӈlR!gռזy1Щ6tY?R+Ns6KElRwP4R½]^yy|gƣS/GXBpO$KNIr-VݹlAlG+nlf~[^/ûsnynhSMHFL mOlS7 |]7Y6Bg斪~XǢk9 '-/hI+QwdQӲwm%Z w璞M[]9j~x#xnJt2V577N 1ӯz DħWN2`ςE4AT2&FH >6uvJZCmބ$E]~rg|P 06fuzcoMMM\'ԕKߺ<+^f{Q6EHi:o*] iPR=5g.Pk-,V4]@VzX7^u+٥oƮ)#.-éN_Δ "FiY})J0$Tq9huqoVEf7yAx5s7;2hm@¡Wk醚}-ٴ.ᦼg[3}إ HHЛaPg!22r9\.VMk)ꔋÿu-E3"'nE`nRw -mRC~x\s]֢ rNVjehfB_F_ou[wbP?o'~Swt / JM1pOͭm|K'7nmf~jmNTmNztٍ m>G] e3jOx>wշ84ɰ(lsh1Sr<}%nreM8vrH\nf/UY:OYNKbz &Pp5w#h<i`D$A_b0cAV4@J O 1丢JcfQOS05(#0E\ `*zd 6-=,"\c'Mf5P*@RBATĉ+t1wۃm&i\m$$  ,. u< e:zt]ͪX<]ڬ5SժRM:Zȵz*Ii=!!@y<{(561Ji:"Z+A,T5i[*Mo7=u-m㬄p:-vרA[ -Zuszn6%8yEum"6#zeIٟ@LMߕ:;E,)3]mx>cz,=VW>x62=uyY:U/ iu/|̈TXZ& `G8Ji}tV>*K:ձsgԾT[2 o:Fajz+o9=fNjW6v6>ok'FO C]GPqޫ]wWȪTHl;x^6y+);L[ÌpN]v@_<^9 ȁb 1)u,~J)om*SߡH{u3R$/wn`akxSJa "Zv HW!ףdd%tS>շv.>ヸ!9:r1uv;C`YNGR(w͗m#ֽrX'ΆL,۬R9yCRSN{Ġ~KODLK).}A337ѵy<q'@&aT)ܙhXW.$3VB3ix2w11N1V2=߄b):FLHd"xIOVvG+^\fʓA2f+"u=g܅^PI6VnOM56| {uf7vu»W $l$lktgF]m΍CZ[b;8G)}ۄ 40[A@(ix@˱jc1u .F>7y a\~F4kɤq\VbAB (Za@OLu:+^ 4'0n~!%"p>U<",ݳauNU}t$|!"9%nl yx?f ؓxkM ʻYgA=6n0)JJY6 c+TcyNdҞꍫe՜C׭h0<&;q EB{fo+LQZUG/{o-|k`ݑk0"09x$}-yp㰥b^Kf[KIf!ǙxD F0ѭG9UȄo[C 9yA>`]f%٤BfN]Fݰ˛Jv']8tO[K<\w/sшέ$E=w |?a5I9yK@lMKE~ʥhf4zWJެ֗Ft)^YV/Yob-;AwsIxݨpO czjT M=EXu꺅Z|vmFLX9 b6Υud űDu\-ľ6ژ&L:5}l5~"d+N"ף1qLOjxw.x<ԐEt܎6H؄Yad? X<2*0"4Mg(B~mdH[Az#*P%:ww[}.\H+RmiLQI& Xdhdl#{#L\C]Ap|tl?"Dŵ_,e~RW?S./:xm 9|`sD,;m=a0V@̃p`܉zt;Gzӄh w~(-ԉ- 4!-qۦ`N[oL~$8*`;OkLA%@_'Qfݲw=Hg >}BFGcŬAe@|mv9q-h$S&R+nV! ǒuiy$xl.8Fdo*^bKh=%X D:aw.H\^ZqRO2D֍n ,cX 26v/ [:qj_BRWe ΄909?s /+`Z:3dbՉYɔU loޜ9;ˋ)ّ ?LRj*Kq%3G <*5[Rq|)㹫7μtȍ>u..G> ,ecQ!n 6.&KU| eq 5vW^tlc!yc'R]Df1N7R5ȉ=qtvrh#xX S҉w&h;EJ]멷/ON_x+\ 7;$-_ m70@ևG)^vfa}r@; KM<넬)$-%YW ^y oM{H@%8MxB>5!QrCZ+%7p!b٤ 0=vHc/Vp&O\|S# |+p >Ԍ5P>. ]:bxzc.uxuΟCSc &]7=WՀtiZ MG$BӋ`n2A?4JBf՛θ8+QIta˷%ENݣJ{A^1atc[e{#$2&Aj MTCa`G!?79U<)+ >pVl ӖY-xmA-Hl1Pm}bn< eԷ$ӤAuGTTp0Ω;y:#[՞/ʐ&c!ă[ oS;gG"V[޻L%*h N6U_<_Qkt3Hlj"0C)B EEH"#}؀[;ea_p-`gqdtP5|PN jWxk˕Ff%)CIf%Fc>(22&>B|F8_4n^p~ŻM.x- aW )+M.@5N둿,V0:+)q3CNf':r61̏Z%'-H ;'n2.yw6 FA|D#\h]'"gO2MHwwğ-\9sXs*A%zs JC9}I@4HaO}X$WO9eȭn .x7FIaɟ/'p595\y NNkZU4KTdqd[c\ zG'eAşDcD@q5O],,GIŚazys0CsJpx@ ? kp,NB"E@ ,@&&͐⮗$ʖ  TuFd#ln2u&P0^_]1膭~Q"N׌&8~;ЙqvmGv,ӖeB ~:[95[⣺\ M3ki&ۜ'nt +ﰫ i5J=hvEOe7Glu &ӚIA m!'G\GS`i3 1G wz+VypHZ)fRװ<ijwY?aA70ȡzcT! TV_j"[3\RmZ $GvQi}1JbݳKua2T:daTRF7 ,H]  ImA9Yej ֥5{0JLmN)FeߙL=#VGHN5V;@H54w N#َ7b~K jA}6Yj{#Klj##2ѩΊW<ta-ikH'̕uhNtRrB޺ܐrRh"HF_Y"?q]¡';@$n@:x(ͩ7eU9pha %}EeDVヤɠRv4|~ GGګb< $w2/^6o'(_1 } lSVr/ ${r[˹Tތ|k7[A~=L41yl?%.Aj*7 @tr)w1mjj'%g (Q>oﰿat אQU eTΧm\J )?_gHǚJ=^3ETeJɘ3Fvu,ǫjtg9cord')Nsֶ\/kydepV]kQQ7Oô;S"5'gf[W#X{Ֆs4nCϖUSAJ `3?ؕ\#8SThjlAu+ ,x(N&czՉr4^7Lqgwd{$kIC+k%3vg(}=>j7]m냜/*}dki9h2~гJ\PI 13QHWQ. 'T7hEKa3)LQj\<$G4?垢~6&rkgCGwؾ osΨ@/E㴿##`͞-5S/S454z={E'W7$jE7¡\cU g+#h@/:."]+QET,VrVOjz{L Vk"b.dFKqs$rŅ-2P7(DǫA[Gg\i8|/dN}!\BKuh2ο̩qC$jq|F/ތN)|MBRgEʩ[ d?>6)_cw"[np2(/]0!2z.QF/{Hgp M'R2!2c>A"rkp"h+!(0D1ʀMg!ews#YW{׭.u6zZ6^ZB=nYB!p{毁n! y?[گ!3lśĺ;"gr`+EZSC{%+=y3_UР%7WlbKPX+ S5]qi?aOo{:RǩxmoZ]+@ؒ3˔G@ѳ} a4ӏǭ;@a\yR=W80ǰ8R=ӑƈwE,nɸASU5[\N5.rGb@upP٣M25ː5ߞUȧ0#ʝX"/|Ïa ZY~sK}7 m6>8@8)0Wn Xc9BY>*dx<tÙS8)7D !pPc\_S^e{F H DkwJ_ㄭCoG%yDbNsffkR؜So^q|,2%Y<@n!,Qt0NN-5/[-Jk׏Ƣ ȩYok~<{QCn~\0\֤!'y^bZttL[PI^Qt(O1؝Q2'2;2Gw ebȜ`]dpyf dewH&O;Uhnx7Hꅙ5G'8^6c ,!ӬfM=)>SW:ݎ!391aVo4=;DwbIUȝm1Aث0lݞ5#xk &4vMX%ӣ{ o}h_H,5q]'()&$1L5]Q톔LQAF$յ5٪vR@ {v=UݚH {A(4y}iaK6 + :w1aY)*391zSĢD K +GÙ WSSYvW Ǽقdؐ)[}-\YUY3|*P2-6PL0gVExj4+K8N*M9 jř Pd[}3-XDT`Nt2v~kfk4]|#^NIym=tb9~~_H"-@!:$c ͅdvRׄ8 -I#}jDEq}Iu]WƐ嶴&\rf*`fO8ot^tY ב<ָU!w:8ѝ9M^=93zffIsSW_9ӯ63zO|'_%v%0V2v5@aSýwHO"ESs*t]ѤXĖW-fg QSޜ7k\l#|'C^61{ z\/Fke04o lZڨ Qy cS>iIdBMEzX#&Iݥ ;p|/ԡU0M7 O^+:1ّtMw9墽,t7L\*rl;dOn$@Q-QqbҀ5xQj2'KꚠVS8[krpV5仗(e R%^33q(0/vWnmn;Xv<ICsCHUڬd)]̅nqa"Վ/C;7ʫ7"jQ4Ǥјf8fQ^%wmƱ=3KS" ȉ~.xt ZTTEY9D6:XCWoc* "TY)0ypo.eh}[RkdţYҬMWG + Y*+7;>*q8.s(×F4,* suX,9l.1=SD:*97Ic;qb<8ISƝzy#˞Ս>޳evhnљ7ELg,{:Qr?i,|ʹ(0@a{͒m`0<cެ&QZJnިwIōFèӊZUdsqԢZM4v՛Ӈb,*jGqgNn - <~U]rIaF~]6?4֢Dt+?hkj:F=UHVAWjnܨjq3SKд8PTm@6sмŋĻo_0OX _˓υ޸x͉7ޜ {)ҙ V{ {|3=\#'sp3-/ϵRsyI <ˉw\