sssd-ad-2.9.0-3.el8 >  A    0@DpdpSU]/ p`]iS[Xz O\z"]4N%]Mv솚O5[~h6PB6(qB~+ ~YG];Z GyTJG7mL\:iD_ #JR t:UesPQN:Mh2$#e kx=v Im44>"yAdT8_*&$=UnsjR #&??jJFЕX4KA!HrNz?x9M.$Qavqx_5BYFj" :,ӎ燫7;N':`TU3݁U7*U9MN3>\>A6dSП zX87,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])oUa4%o]~,_DfY38d`lY,N@{.~ 3r{H5o5YT5$ZJ csh,|?d07Vw*BpJܿ*!=}FTv,ڨZ wuu!ZdG̥`$)EG!r=V.x4؛K߇eFh5 񻋙TMGGTI3N[]ϭh8A̔ʭKw8(Q>a찰1?-53ˢwv.huk * Ώg}B}b}J-=bg&p aT4npl5E%ڢTCQ+r#O4`*padY0!gQ>{! LЄ!wZ5sؑXA\H5#4,mKAfu&떫 3Uv4zN7x>PE?d   2 (EKT            < x  0FHF F049(H8P9:fG H I X Y,\H ]x ^. b-d}eflt u vwX x yR 3@DJCsssd-ad2.9.03.el8The AD back end of the SSSDProvides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server.do3x86-04.stream.rdu2.redhat.com/CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxx86_64'&K9N>QBAAA큤do3do3do3do3do3vdo3vdo3dTdo3jdo3jdo3jdo3jbaab4feeec78ac6d7b45f42fbdd6e08d5a80fb1d80a2b04690f11fb2b930d41eb6990111b853ce8c6275462046b4e8350722845ba7822b77fed93204b927555f8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903f1bb4cc4ab91290c7c3b01f3b23ebdf0c4dff78618ccd032f0ed4af02f038b61363084de748377e23ee445af4ce0439306e20e7fd378e71c110117773f942c0ee89dcbf8701956a302c8d42009dbfef17e00bfe3b8e1574ba320922ad3fad1732aac67ab6ff38f45e5b3ad22d53addc616af2add5a669a72e05ceed548c35621../../../../usr/lib64/sssd/libsss_ad.so../../../../usr/libexec/sssd/gpo_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-2.9.0-3.el8.src.rpmlibsss_ad.so()(64bit)sssd-adsssd-ad(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libini_config.so.5(INI_CONFIG_1.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libsasl2.so.3()(64bit)libselinux.so.1()(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libssssd-commonsssd-common-pacsssd-krb5-common2.9.0-3.el82.9.0-3.el83.0.4-14.6.0-14.0-15.2-14.17.5-0.el82.9.0-3.el82.9.0-3.el82.9.0-3.el8sssd1.10.0-8.beta24.14.3doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code) rusvuk2.9.0-3.el82.9.0-3.el8 .build-id9fd576796417c4137e22ad170e2244a27ce291ec5adaef119c2bd02655a595252e56cb9bb1ef14libsss_ad.sogpo_childsssd-adCOPYINGsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gzsssd-ad.5.gz/usr/lib//usr/lib/.build-id/44//usr/lib/.build-id//usr/lib/.build-id/ec//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ad//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=449fd576796417c4137e22ad170e2244a27ce291, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=ec5adaef119c2bd02655a595252e56cb9bb1ef14, strippedASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)99PRRR;RRRRR RR8RRRRRR2R&RRRRR%R4RRR,R3RRRR R5R$R!RR R'R9R^Go^8F$Z8`+p[}@L9mj}ɕld"m,X^S%ykn˔DIN{O R:UED7- <ڧ!l l:-=4ȗu->^OR[,VM/]hP_5}24}myNJ#)=zVSo-֩0)R᎐6c`HqrMZ8q#Z 8fkn8?y4ICB23ܣZtͩkbb3|I ,Tls'G/k}B@ kh^7mzC@,C5rrV $Z ݦ<߄i!`g1gӋyip+e:} w 20%V;d7$_P``ǣM'@fg(E7PPZ*!JzV bP y #ǀٔ\k^zL~ݭnUz% 4Y6LL//d:LuJ{Dނpd˷2U/[}6+gtPeW/`{X}}ߓC<}{ts"VpJ(=|+jFC$9 !sb6 M +ܘoxEm"hZO~sm`!!B[T[}lWOvVcQ݆ćǣ7ŲjzB4v?g,' OA@4K:q'cge"+;(54N2-eP!< W0_g|E/ʢDGM`Z1󞯝g8TE&T^̤}z``/U8y*:T@6]b$_۝9:;bуX[H鍠#n$G' hj:ILm68=fhHWSĺ+ֆӘTPXP[Y:V}MfoZyC/-U:U5tw kwۡGxT$Ub-Iò|JWԊo07j<ήi,B="IxmڷdkCٹ Vl9ibOM7/vu!Deoy`s,Үׂé /&l:G|-c,}zTJ P77!nJ©6P BX\J#ЗN{\ c.VY?!d1ˇcfݣ/Ya[35\I߫ȿe:+ c %29 .G/{;[kbFӸeƚ(Jn9_LgGUY\ O^zfi |$Y3ܨ_/ŜOyV@'ض=TΜ%60I@?"XF,_YuN%M!\8O% )JBnN`P`%2^J-{VԀJqO:@-[|ICedro7X&ױf/@p(J ## XFMKd5A $\UX74'yPݲўCwlfw)yea޲Ŀ(M :oyLd5*F=P dwzJ aP>R -M߁d^&A7GhVEbI4u!P@=cJCItԷikHYIP5EkP̀t}YV.$e& I İ|偊6s.UlsiLFk$H55bpx8VS0ID;BaB=6(%"Y-(i^gɓFx8ި; wdn-p˺W(<=*m< ,* ,Pbr1Pw3r漾NW":7+zr /\EMi 1笶8XC.yFz*&z($QR Ѷ8,%:9w',G \~7! /:%)OJuR7&o 2:c.Ѽ/$<ޙSh ae멁#qY vekMw%]_9v>j3'[+ gYLSüdRJKsnrjڻ*n N52k?y¯RrE+]6(~nᬖU #%~~zt a@էh&%&1p%1۝kFr D9ǢFj0,T?mWSjsDRȷ 54J?nOeZ+':@P,*r׊Q$ka{f߱IrR NM|/+I)ósٚ+U|U!%bW~$k >pu޺eAʇHFxgl!9x-BB:]jܿ@`S9GG(>7NAs7TFs|pM Y#+ %~#RIc1$*vcV4*e&wGNw!!N[uQ9")w u8g9@.{*4h`yzsK|oNf ZwSE0vˉ-#e|*f Ʈ8wr*PM-GXa>J]/V@`K-VJXX f;r׳Qɷ/}Zdw}R/tp3 ejb}].wY.g萍7).0,3Z`BNӃV /{5./lHL*J6T"IS@3zfDM'M\jmE'D  /OSzn mkIΙWA^ ᭯IB7#\o # 1T\SvPB#*\@3ʃϒ}Y lWŌ-T\&Xƻрgjg޵vvrLaĪΘ&2];^ ~l :n,HyYsF8Q!Ϙ5SpS9yj- "la^Q>[w>C6-,wtL?Q-֧`/;uavcK"mWIH}+ywKq 6 [*PLzdi/ZBnL-:7| jP0Z ' I?3atA5j~"#ʁKd/s=35uKL{pj%R>JlHZ-9e>t?;RTPK'b)ٖ|OqX-;`;ګdݩE'DNf* 7 "JS=脚9ؙmT\šV*dr+د+Ѵrw-gn|?{dhƣaKC@2)仯N К ɶ$u{T 37h:5y,-0,NIӆff40Gt/L^ji|jBHd9@"m6zPk:!S=Xu2Gu Et+x*!cIJjWޞ1:VyFwBm$յ.f2}"<K癶ձw2R菭l'#2Qєt"P(Br7q_-P0I`"ۂmH","FgrۥDrdœjoδG*J^s1{00KE(sQ<;bA5=!o0.˞\ȧBb:VnStH'b@NjwciNkgF Ǽz hRhX]xWG (~.Fj%ܬ1ߋpV"ɇ1bn74`=ostdtCqUYZۃ./dyG}yDZ{ϊd\ $}=M*q%1hj/\vuIc3 tn=/$uR\S.FY2ߣ xWM0r{XD|k-uJYL1[2Lfc :H5 =Qq⌁ut{S*hx:qit;@Ŏ+ҞSkIAB@ϓAoV i%x]Mv?˓˳N Ro噎ul>t']3H^V6B<̈́_}H\ LXq`߸mLek´KE1[q?[DktdWT}u37m޲?"}gy9?rs"aFQu|Qղ_|I\Z҆YQ\4Jي:>4vG: ܳ|/`jgcXY˭b =q*'[زZymXLx"cm6BW%){ᔠ]L{/Ҝ cw3kz8۩S5o =8K{*K+}W HΧzr /&x h`MF >OP`f= shY>̕7^.b0paJSW&E/D9.[^*q)s(ه R$d^wߨ=vWp| xh/aKaB @' v0CjP& -ċe%6nE ɨ.EK n<.Z&44%y {fkoJȦPyv{Z+."\3Kec7^DEMYC+A?0W62"g*&5Hg{0] ;N_x#X r7%QJ @BΣ6kBoQ=R%{o3,fM"žFaUi8{1]%lSkO< [';gc =N :(XBmD ,сLL6"whp;(dı U.!1x q*YK g)Z;ʼXP,1N-o'#KT5v}Q۷H[ dX H{D:z|{س _ z8=F6K&SsU ,-yl)nł@"R ԑ?Fp`LUqJrhg:3ͱ{\n((pq)(| X ȃs8oXq$؃ d:3gVUÑ^OPѮ*1-q <:/Vg?hwcV;0ORS8'V쳐&vw8 nGOb[ Z=Lۋ2R+-ߴ`F+qv]vD’ePTe~ChPɫBʣ^:$pM@#%H8xgSKqoh{={gy?u] \F{i }yИ,ߧ af RԨǪ+1lKXwd8~]0=xPI7w_9"c_inɢs*]/vRSisXj6?f0Bg@77xB9q:#girp"8Tm5qƟFVz} Q0ߨxTtJ%4? {쨊ARHAs* 91 *tIU(-LΊ [ ,M{-ŨBm2>h#Ce>m`c";i@;$m@i Zr?P'/źG~PmR<:QDP^ѡʁ|4~ oHE'B&h/O+ks<\?o果z $v#rnbqSd̊O.}ҽWM!1^QoT]G YVTewnZIϖ 3 x$yBJIr^Qh5Hj[cǜ[(R9fa6IbT?D_ed~A4Ez<5"P1uU->83_qאz@D3mN#L!x5&U3 ?)RԟPkgA(h~drMhJζncunj@;Ss1vRvk5'(Efɖuy\"QxZJ4J ` ? ],O FMm`*U>ѯFFq`s꒸iȾ^{V7 $1˔3DhOSWYp+07ȎRB5(G-06($P)@Hɞ4D67*X<}=zvx$o@i_r mWm0 K@=xNY/^ o Q;Gx-WT6 04" 1ihaA׮wO"\a+S3,F&2\wQ~+X7@4,{0*y c~jz0 NnTZZ-vrB,U\> {( A=R+Z&Ç o=owcl "(PStl йk(*67NP:?K8Rw<]_(Xx~33]=i5G5M"6^}ЩX6-, iQY^l;& c #$zE#<]O{ٟϒ5ʂ1'Rɇ] 8Lq!x¡0^wc|;1P J[~U玬 Svq}I5pwCZB#ȴH-WaD:{rB-q>n O  zNtl{(k_BܨAMu oǏ)MTg{>řЖvo((i=?%oJ{ }IO(2wpX*̒7TVvau1E0XHfj"@dTf.9ߜɪ8SPR/S5ίgIJWB4בF,@g'-н_2אpT;bd<⿁?8'ց^L}eS7٥94:4:5Y)ͺ[;F gս9jܵ0bx?4s_i я^/uH~>B::o򜢳VߙZ)j8 'm\N-{^ dB;إa}i(3X&=o8bz4ѓrD{#ym_XAYh|j}63-e7KإSS | YK ee_5O| vo#ێȀҚזU~L=t~kc7ȤQK} &=C0;͞ugD.G7;?PgD.Ҷ1ߤέ`/A ]EewȀfh2W8D*9VFs oI4I[\tX02ׯW"k)K(]n SfPm02f pPwWj[znH!?]ǫ7`r;X񌌹v ~K՘}ɇn#9 ?W< w}jrNfu1=Wx&WBC@ws>ˁmE|;,5yY(Y}noA=霦šs?}Xma3N@ÀF uȬ5ug럴G|[ILt,5ZrV6m-s&pbGgg!Ŏ Tt48 o >䲞%o'pu:ʢ1Ӳe(PIiç\]qF)Kz5oh'!V31)@ << `w[_/CypEլ7p?osYQR|&ʰe&P:pɓ٩{d2(gqfo >fsEK;5_\R M(mJ%󐖺 +Yd:hlRKݳW82&c[8n x' k~_FHwƇ=C -6Ct2h7)T$"ΝAN1gJ|;  h.9a|brh4/t!8uw~NTH,i }GK.*X^y٣tXZRS^bB !>[V;aokaPv'dN92B"f8i uμ [ć=ul6H,ƹ'=4/r1C[#/ f.8#`x517V N|w~pQTp$8iV4 Ƿc4B *+Kǹ80ηB+%g= NᘫUMNPU7NP< FU7} Z?gk-v>pox6WwBPskjMC]`|l@(,D0je̟91ΖGDb=VLSf鹹^qn2ohDTJhop82$إ `VR&H8K5d8,M^t#<}Dɡ:Է[ey4T:f} u'gzk8Pdj#ZOȁhk H],YNv*) ,8_̝X̀eQ_YA4`8 UP/EuTNb*>V9j^p~~  E2˛cC,\(,( GC 81!@xKI1 sH'VB%tsKfG52q⥿n.,Ղ#ztICQIaYQ8NkD0t*5J]>wlr˴qX159X %^pP)]Nf}]Qk#(@p+Q5%0 *ߊF^q~F9|B%̑)Կ5^+rLm!Lg>@͐kSO7[ߎĨXRq| yBJ(ӫ﹭ +ڟָٔCS7Qciݡ~v,1UGfd;%h(zpq룟eU3|NxG;Gf`l_΅pCk[)h9ty̎>*R#t , `J(!Fmͷ"!(.9٦a rh`+ ,_zFb$)fM؟ƣEct#I[CS^R[Q+[A۰dx|t%76`=]$\AL(˥n^6 Wm5с`^ZB ,`5Z6)8TXӔihRchVBcIw bFPcz}= *ѥU[`QQM9V鹨sN3L!Hw0u`\a!%ܽ2eN#|Ƿ4]PM] Wydz_BFkS-kG'\Vn gݾ۸;(?40Dʷq`GaGm~;SEijrpRr*GUsp0j[=AL}28j. ;ǼqS9!h1=%O O+4Y:fH/{ɘAB $i?F_&EȦ_Ѐ_mӹ)FGGQA"ee|QM45Yx/yL|FUmZKW;zq|M^kXqcL.jJ \2MrK6Ip3Y"~N%1g ƸĎG_Y1~Ӗp>2;4;w|#T !CRJﮒ1Q$sfI9!^z4(2d :8r&5căڐµ蒧őMHݻ|3bsz@T%_YTa dȌ \8Xߏj `۷sAt[D#vak o{Q3a[|X5ul櫂9Rer:AFIܼܳ).cjJ:Ry^\ʱ.Bz=4\]=\v9/#(DY=ay[sS:#5 dPL*.Nև5h?\l[7,> *¬8ůXY[\fZ$ {ƑKKrf{2Q\`"Y*6 /—mն]Mڍ[B-' 7ȆVf!]D݇!HJ]zsHYf n%n| [ jC4Gf9q>oj(2SQ~薰DҊe1QPn'+P~9pܹL+#YM g.TA`tߏÏr T\*۽W+@B۲AJ?%\e9N"coJ9ױ +Pi[5|no@ԑWւ+/ wm QKõ2\$sף]hKϓ"P4HM "(YԺTO h[e euzK#QUݸjnoҤ s1gF˃\UkЪX+7>ؼ|t*UW#Y瓝sS(<}Q$ I1J-[VM /9. 8a++ua߃i=%ހmvNE~̽YDm0 BZ3]>n{ȅhfs+V?6JC|{ r V"$@NUbbf25ƿf@fWO1TnSa?J b!4|ggpgC4¢W4sR ,IB +mDlJ3S6fޤ|9 UqB3ěYY@o7㦣MYAkD%G<|MZeg^Y$Nɖt}c#4 7c$HW68eB˼Ia ?Nl 3 ` ۮ_' r4({f,QHoಚa}匨 H2Vhf &Pcqej]\KkqN,ؚ_oK;4zp |?g)l,D;WTK:2ϚɁp >1x܍yXrOJTO!眷.Z8[_ZY?hJH y=OSP{%i. ptn{'(Qn9r1d)*"4Q7}R}Ipo)&f`Ȗ+#/Gn1;*ߖfU4z0lJ|z,d'-ސJ+.Ca0TOf8a<㏭K=\+ l.ճ^ҸBY}gx}j# V,G֣uV@l븭f+&dPO44#@?)t$b~ {=IA==LGKd̤k:qiA%m|-h9%xpaEyP8s1R!N>藧ײk%tC;eAg Q>*uCj=vEgPzjMf=  Ǔf(#TQ3n.CYMpHMZ352jAO'i-b]%`7eX?'ڞ,lg 儬ԡڐz7`'}*A?Lo qNBua46' ( A گL p*#G%KiwMM ṇp@̜Jw/[RX1N+чJH}Qq}ZL3#ӟY;ﯯBFk陀(xT"rFR7q'q6<ӵ+T>:^iuq|d1ݠ_geybw/Ƽꮠ)SP~bv/CAH_Ƽ-.,Y̅s(YAӇ"m5ue[4ŕr@|,{w^5k1*@b=P8531*7Aeͱej x's.ђ3қ\w_zcrz=z$coW(.7X:wb| K%$.G!3/Ic1Wե|&]74+ 2)dEc #I"e;JMH`^!&5|ص= Ǿ?+TEdLvnyNP;[+!6NJ4,0uGy3[P|gs )1w#+.wf5Ö}  #[ Y>CђINQw,D 5f[11 `h^mhД]<ǽ,[rt|<4<7w6ߜZ6zEAr|Vv[ UKHTh.l&>l3S25iJ(sִ_pD^iij>2?Cb5&uMjdDzʀ|Iwg-܁A.66j?,:E ˗88-*Ս!8Tix?}av&Z7ߗOH=8as-qr{tCՆm=`)X=̅3KIȎH3/UZ{\rlV4v,b/z]l36H[hi()Y}6E\o~a+H 7r0G3oT9W!"̋Q ŬTqL\R(ٶ.-Lݙ^zp-( 66u`#fpfV|Z!#,W\*eY_ "=JVt4hT:_~{];pERKdmdd7I 4m)[ȵGIHH&". \*FT~N+S-og~5WiuV\FW‹,OeXAVsPn{7yjyV;ܪd]\yԆ뭕s (ڹ(2 úmd *2NRRD%}>azs$̘1 f2m1H"YJKO|{5E ߊxƘiOScA\#? 쮔d#G+*:㱅/G= H/wt"泴N o*صښG|pf04[mZ[x32rylWeF #IC`^3f#`,il?BRCd|gV'F.Xч T_>w=dxxiJ2jݑ&W\5C|[SsvozrAxZ]<4uU޳~H~e! ;r/Q8مN:{gE.YHhW ӗa(%$;-62p<2cNdtccX'EK?=ͯ/rg꾼)=pWRh=K˸F5JJ 49Cͣ\MS>g:"B8h!IV>̄l}UzL=1٥j֮<D*]C\$cTȉ2nȲĐ^Ȫqf'.2&4hh{Z׻0`_eBǤdEfZ4BNOÏk3xb&zW%a`|/eaTض3l%y"4%L/]z2Ek A+3z_o0#7{Cy?S<`:0:SFFWcX> }(ZV o܌Y&=iQ3cV$ϒEkOFQoӄҠ#~I9- bà `T(cAs|Nf*MҭJ, wӒW 7͏U44)_|*!c_IMN<5KЍ*$1> )"5*rzYsx웞F=en tdtш fs[ %PFYé{%y*m!IRLևD-8zVUD@疢KDz#9g!-1a>>[rKýZx}\XE)jR D於?Fۧ!MMиÄzjD 7d(ToDb>8Ϝ;f1c-)޸ab. {\BȢuIBڨ(v v$| XA?Pb ~U>zb ߱w:.I17Oq%U\ ]?AZuc=}-!l^V6 HҦܳCDMrSF;GHew mfp"PE. n DNxxZ&DQɈ9P`tLԱ-nɘo!mJ0W{"RaYTT yŶηk3W`vԬ \R:x}#0fF~K4w6JUL积S#d}_!g'M5 \eAsŶMCaZ_=4K!Rym+X;DF_:U.ΐrTڬDݽ? e9mYu:ZY+/eAjJaozlj72$ ˿l Tvo<]W$/2C8Td6-֯t-ZXVfU_5A8AŘypi/0 stajx+vZ {S+e0Zh+f.0}>O19_7dYSR!f+WdhÍ짓`! .fOG4&J:hלa9;=f,1KkG&-1çkbP.vC8 ز,jVLhV;>tY)#홯tHqo? ;?>QgJQ8 -'&w`n\yS{zIä6f.H|Xȿ=Կ'T |N$50d, &y n媯&v&Yh?*)(Z8Vs!CW0RF966:pS4H59 O{#y᯼ 8,o+ `V1KɅP&U/xAǐ6Q: 9Q2 {/#XtpN o_o֗_#j[ !ߓ_B7TZu`4^h-d*lKb+V_ %X#DACtsn9~ xKM9n`MQz㯿7H,Q'1YU 'vE\f@1伮Kё`J@c6ۅKsVQ30lcV5FX%(2'9^bxS98>{{kwڢ֚6NQ.Nk]h|C9Ra|O2Þϙ`qNԧ1 {p%1\H j\A6C$/&(Xp`$o ,Q WSOys3(1y RxwEz0NUTD9@eh裏Ls~c\ӇD"ʿ6"caJ}Fe~ă0CSLL4a<7!? E͔ZQ̈́Z^ 0oS A$3o}n*#ۋr$h9R:ZF/\L=_%9E*{\QȓK#.:X8ܶ#^5^kf TVbα"kHM_u#?b|5x.M<W2a)8 #TwfN,JpJ8~'%oa4adSn7: cY.Rch]VM1tf=ʓdi+bbf72C Dc]4,IJ4}Ģm`E00?2[rFw#Qz1wk5TYPa*ߞ׹d؋J%-#WI*<0+J*9<`O( PYּf%W*Xy۲NKd]Du EB5@J([|h5Ou>)%Rp )ӸlV_ƮGt8Jko=VȚbc^m;9q`PNB겟Wv.%iT' |޻AH$M0JjF K_iKx\Qxf>2|P"s1@iY8]b$Z-d'b7c-0󇿃5DݥH!P{`b֞`/Ш=2YAYq{lR*p l.7r_'R!24,t*5::Y♇Z3/<=TKIVOPMn4203ۛcE[#܅S>Em~Y=,,Ui߇t x?Uز3ІY= XL2%Eg[FhWcsv=pZ<])աrY~R LyD夑;0\1$[ܖ|M<Ֆ'{s-ca=sa+pԃ0DC&3Yrs2)2sr'SJsSIɣ? -* _ԃLiZ>d`,)%:;"}oFG%hjQ-7?#Y-P2&'.Hȸ2}Y*kQF ="xoSl2ǯ)< JFKJ$K0?uJF|}-,5sQ/b(lQĭXM,1nĸX#-HEaC{&2rޗ$]G5*id U$x5fOf 6^k6u0j[YoŃ7vM$PYiou5/LQ|`#6K[؃ec-fڟ9PƱdm7'lQba[0PJ ~_`* +*iƊ.#'ݱk~{H鴅1ctŚɤM|fa+ @ {MaZIs)W|tGN$!tH߬nՐeˆ45w/ ji'u:|&2Fbέ+<@YY*UyPm= ^sRy707 (J(rXv")_l+S\Ei,=f6O]8 ܲ0&F~5w4Y/Q7P f_V$twћH ѕ+UOd*%9s?бpsFJupN -w=ߌfwg9)Õ+\.d OsvϺthcr/*gޖ2RlS.5؜gY"xtbsM/.ߟjWE!5&bˎ?"6Z0U:]>xÎLH٣h3J _!?/MC֫y8K +crdp~Oi0_,"+OG,R怭ֶ]<ݺpPc"jiY$3~G1 025Voj&M"MTUǍTJf'B=H">26ꉾoCֲi ډê rm0&ƑJOj qz0R΃s rFϐe :ڱEǍ)o|11R;s YcHtq.r!õQ8'[-i @cLxZ [3؃ ,[o-XJ)Ҽ9J$'YBr%1pk[\xN~#8L+;wJ/5ޗ )3qH(W8R!o*Q9yT!5GځdED]Ǯ|G(`6r e7A a Xg|m@Y5:6Pr\Kc,h-EmX|]z ؅Q YS2ܡOcӡS9M E_} ]!yчgi 9(IH_!6TSg X<ɝ}udP&X``EzUhBE ZeJ1M6ܦ՘P.EY,y?A9 Nao"/ `u)Pڴc\Zn&\k[ta~͠A]91 xf}ZsW4ia69yW)z e~rӅkPoNeㄴ]L B^t&VE Nv,{I+qWm|(5#ye.$(H~$Jz;*<қ2ROBtĤ)s78mh*X{TuYtx_I&3wPЃK0PWKWEg1D {0Z$w.[OPm g'F/9t0Lǻ c }gr) Ҿ!kǖU ҘkL*С=>}[d˥} 7>Tbu# KbӝVzd[9-6l?>&Ix*Ll6lmO%\O,hF_>u Iy*@⻻C>TN<ΝkDbǙ -L!l3yָ-ljh1<*p\<6W 7*l#O X7\aTS{+<o ;F3e)˕LoMRS揽 ;A7.\:?L_IEN10jX|{\@mG7qBÏ{:۠#N] *5H41iA8Ѩ=.ģghz>#C-OJfy?2m'˦aUO1b.,hŔ)ڝȟL ~y|7ZfޗfxDJdjC]`AXH].e0Hƴ)\] pZ8Pj zR'#"UigI:zgE8 ʶoŘoȵ׈bAγ^xUUJY+9_r W ryMx7Bvp`MY419< VRug1*q{7ݍ)>j> uh<)x1Gf>Ծܮc^/[ '>$8H ^t/z'1VT~`b_73ARaqi .)^mF(Vk@ 2ҽZn1_%zb99GG3@wϋh-| ,8dGm:+Zr)ESwr]`H*oj&7=+*v]f]Ag>i9+[RXWL}O0Ǿyi"܁ oԮw;BԇIUVCˊZ 1}ř,[;-USZ $3̑ DV_ aPWڬM4t.g O;Jm^^r?Ȳ>bWqX!]WL>WV 5ꐁ8gp4E&dx43&(0 P@2{M(n\`]IhnGkiIo,Ƣho~@utz*zql/ğVk<VjPr&d#:%zzIpA6!} Yk<ğG }eZwb+PNWmtl"4|e%VR'tlJBjj鵀Qҍft'Mp0$pPJ7NfD uz842{J=+vmq%plQqpȦi𹆼69EǞCU#0 d.ca+nQ'Mj˴rڒ_GCDm\Q}=p;$)@տWQtt> >8oCqd0a~0;)uR6 ?&"3gտ{ϲ M=fnwZ35YUikiҭ@GPm0hOҒ5Tc#uvoخ4@zVP[c,u 2PV0($}j׺oͶ˕HAO.<~P!G)>gx{,g,ehͦRO4KgA UNf_D}G%%IL0 </y%鵬C!glU6mo1 sj-x@>^*Hc 2UH?V٠I&>đŘc*4=۴*^qOYC1bDLˏ~3.qȷc(Uu-\.P ShD5<Q*YL#NAӺNdj-D.]~S|ea 8A^"G#۲;Њ`|GJ*eFN2?,Y;h~r4q5j7хjw5!#irh3Pc`y9.L;HoQhy525 .4NA&nbyD~8pe( U,Dݪ\woA$G ˭"{~Ҳf}dZu 4mGY> I=[jXEU1̲DxBp?ٳ'l[`8NP1|IUu &\FD1;fn>C ujӗ"R4Cjwq5L=Ɇdޕy :ua9lrЌN!8<];r1-B./X&d]c,Bks{15s۲{"N6Ϻ&?IO / к_At=},[5qm4& ӗ\}dRM@h\| h(LAo`S{<*C0Ȑ[[vTWrEۄ5 rɘ;Y[p/7+V_o;K9|*)Ȁ,>ּ<@Ui$iB@8lV}:b%>I\߬x/ccHl0ҽoĝ7/ZHȆx$+&z[K zt S~ | Q衢{)f]ȘX%@S6%ꢨBK 5{"Tt0QygO?a<@T>E<xbsրnN0 jM(6@-Quۗs$sArb A7ST({ԪUK2S#Vywd'AU#m:~tli- ڍ b"<Բ27$17u{ܻx Zo B'P]pw b:TY)qR 18旪TT7y+ۄ~Vۙn\7{g4`ңIGu]r?)t:C`#>J^Pwc? $ǔ'Sك,\ F]#o5܇Yx%>re`W^Ԯ8unp#Ͳj +ݘGQHcb1u\vC bS55Ũ#ƓIT95ivLM1Kɘ~4SFg?L R D`j4sp˳qxw>^5Wz]}K87g ֛5WUeyd% |WCt1rOOj%zv.^M^nq9>`[YFIJ $J KyZ2ʧfCgPfC_;4;)ToueD{lчyV1Z%\\Q.hQ*DgXpAuOG$UQOBuhH-}9RKO>KP4xI6U8TOWMo< ^u5x&"Mkyx ]="*QP0@vz͒2gcf]bXw/!_7ѐ7O^ Zj k}gE[-[AZ8y-̌< sGFC@/Rjl7'~wy7 %pw5HCScWp#c\D3,:EUgh(vR/0oŸVZZ\۲7Ee;! +֕U>)s lP*Lžr=|n".߂qD}ogsJy:}TaBpbŭՄBGOS"ڒLQҠ@xvSfڪ4׭41LZ~.ł+acY<Wj;*0ureXK4a $~YQ7>kȡq um=y|9y tQs=b, 8k h% VH0ttCh3_S/anBqsK䱉A whe{.6cޮ}0gc/2,qn@+ngTGCF, Y3m/gpݵI|S >gyQ3'nPI^8T<qNBn+ q  Ym qg0CϔCCt I(`MغopO9~Th 2?W"g@w9mՕǧA/yy.afU  t~cR{yJ`+A2)weɾYv̆LYotΗv8g; 8k$t Tp,9/EJyWϦVl_.*L4$CD{X>Xp!]}p5UoMFʗTϰo{aVs-Tqq'3)(1שP{&/ z jy.sWۮ~5{!ԌN.x84l' 6GfDj|#IQP \(DB4/!l.NsҰ'ʼn}& (]>cSNc>4x!峎Hryzqh1b8L_vI*N"֬4|@Ŀ^Bv%5a:˔;-g[ #N7M<=efZ͸%_mz{>z ?6"1mU]qbUHϜs*0|OxK? .{= $ 48 20tc.?KDzCnKcyuL^q2+^ʚLw e*Ns(? %1_|6ȔikH#6|5Q~$oI2>\lyk6ȪG1TZf^2YݙB l=p1Z_[Ez9Chf$C*`dTᦣaC+b*ٮjZO`Y@*-7Q ?*t5 jy)ik"!{Ѧ93̃+-]o9S >9HQ .Ih_fE!c2%Ӫ66Gr"xO๑ vP5 pk}Z_DƓ(K-aH%r\cY=Xk/T#?"2tX C0SA_ ZF@riwto?훺 3eC5Pq<=3<*'W0/nW`~)}2@b0OXtw- dNK:m`q)+epqq??U.@ͷAql?`'#Z;v@6 '_)::V!ͤʻRy=pj#o)tK0sq 3[12&-p4Fa .A֭>#B :.kz|$םgG2()N(&TUNysa.-TC]-4/-lAd%#*?32:Y]YWr2v7!c^zхv"U1 fjž!H\Q&$xg>иn1TMEEoy=dOJ~0K4=+?\Ggmieѐ&9X#9lwE~X7u1c -9Tw}Ã˲bY _.7P߃n:񯪭r`CyW*DPu\v{=[y 2Qz4ކs3+g6nd,th}=\$fu {^+қSR4/wW>4j֘`Wc=%u/5Vorr4נ uĿF37jL n*<#9Ito5ӤPwPۍZYa*>?AH1~/QQl}SI*Kۊthuӡ׿Dxn܋6AS aZG7w!g~\ay,%efNe<95_K]u>8 P*;5u*>IY)`t=ti8kTڲvNIV?]p9$J|u@%d(DA]h۟ E`eD?,xI/WޞzX@-4w^<QC8HoVXK2bi z#vۓ!dpS@qF{G6xȸW`DK#:f&ҝv"6!FFx睧n'SLQrm*%,ɟ~MIdf޾AzWdf ;g<Ȕjx .IJfOؔRGRdzPk'!aNHaឬvͨe"H ZX;6\t y eeV^go06kČ~]M8ΫK R(##1z,v WTC_JI @?-MMM)|Yȋ3f!8-Þy܊-yzsAByQ%\2K+ @IaEKg[|~QDA(LX%(0#ˁlw_ڿ kjmGvOAw{+õ_u}<cJJ],#h:ԋU^C Na7Raۦ&xؕ?[$5#_㸽Ur]1f/NN)էIc. | _,>Zʡ0Q1R_Z*?7[1>'1KYT^C/R|,ʸOWrw8Rڪk03ӆv|/tO>0kjQܴo2l^rg>AJh@Tkt; 0kEȒ/GJY ]_KEp)RˋPSj拮NM{K1<Z*:qvWOAu^djzQ? }}- $̸czZn:N;Oi}{e;1E{_PVBLz ;(#(^.JBK@;4ŐG5ϑ>sp{ j#9Q! sC$; W#iD9H/r;{9bqӯڰz2ᛈuuQԏ XF$YR ,C(os3pR/Lsre )`^)gŝAie k\]4[NȽKDke8N2'?G^6*\^$8t-(^CҢ8W8Y@!_#ؾ\cauS@uw <A%+v 9HJ=MXYUe;/+u.ZVe¡&/Hf/ 2;Չf1Ӱ)tRe6N>2l\y҇\?sk&I\fN5s=3 ;=LqwšdBߺE1%;jjQ?6QAw ,_M!YDQ«DJtK_o̳u1Vg$- 5]:cQTlO".&g噌Slr}-RN^vl2Aǰ #$r7r](V} +YRN4Ґt_,lWH@B| }ʭ{Lb 1oI՚xk\>$'KtFv|eE'rSpd i:Jwr Of=coqǭ>\仯֥.S+<<8bJE_vҐWDCCj yQD⻦ 0D;_+DuhAԓcUlXGvxm .oj}X[^jdWKg=f@v⑎D_=o ;nt[,2%GZ{vPm#x-N}pPq~J7SN],~[BY+4R_į^d\ߜB >ylzQfUcf9e2\fJ D o}9{n$_繫W؇39gzN ˬfJn"Bֻ |evXY$oU]\gnBclQ^&ɢ3Кz0:ۯA}z'uhΎƌ=C_x9)92w+#g+t<=3<_5@r "=( !X6wZɢȶJ9S(ZQl % _vmmlhզ#[%\M2 gn>>p؄eON/v4uc8&Kxp Q:ŢT[d`r^(uY׽!=N~TH1x801]4D"_QYY! 8ACU^C>%ȕO,?|Oo4R~ n^ 2< /+ SR}Pms4h' W]^^r#K_|ںvţI#ڵ,z&yXyK Tc , \%C;XdTrem;+j?gVh }SEl/:voWcƼˠ$F쑴c1'$`l~\ !,hۃB(w` A7#-쾩yyI9(e<9r ߓVުLVD!r+O/pO0`RU__c~e_~6.\vHKJyimuVdm0 7Ar#|CmcurD 6ej[I?8p;·`7E /㑗D Wmqi&{jfىնE=T /ӞM{9b >^Gk-܅c0HD `Ů'E%_H7)/JN'kɖQ+Lew06 -j/後Zbd>z'tAjz>fxgn@*}|AOf0jg(Jfj֊&hx|c~SbG[0eS-|N|ʿ~Η0YH Kox]!Gn^'5nzH 'X~U|H1Vbpǥ$и1Y/F0^3Z4i`˸ճ7wr4X婏ϗ;Ji3ٝR@t1Iυpz(e0]cԬXu;,,wb߉hHz$%,58IK? L`Tcj>cnJTMal;FW 3dO#7{"qeOB.t&+t-K#6%"Fjd=!-YH) É DG8֡ۧ/2g#S8m 1薨æA/Y0A0t!Ȓt C,4"n6GC.VsDiJ٧|\¹֊>=Rm42#*E[keE\E'>[r)c G%5,,TɅ8& 8;w7L2Sž09O<jqIL^Z_nF/DDsYvDd3mHvaxBuN-E&Đsq;-j]`:"#jEqӿs(V07exE/HLZ1G;PD(T;@Ή)u5npJyȳ(,,xJzLuឋk-YJ/oD>1苯,trzfQTWގ/Kп~f١AK?d 7+X*UP/UU /K]~7Ѓj5Pki+A ɇd3 2 5xA08q%㜞h\uAw 4d`B( kWhj- omwm 1@b B|cxVM&џWdsjk8{5Hb R_ Ӎ1Q6W̼7LDm>6P36g迉1I'sm\딄_Nq&䠏 ptIh9(q-"3G@K*xm ~9Xa1 =v-r{8 Lwz3?VA+r( $uJh͌@8/_eCŅƊ#w#w-.ZyŹS+ kwHф kY"e9jvu? غFU ZC+- ߲o43O£~X.A$Lp.tuo \noҦImM PyCXM74!qza5X7l@\9]?& cS(=vA9.ROvqG}:L~y2ݾZ21RU2MZ[#rCxZL62W{RM;"B]TC2]Q)A^K`EڞcW~fwH'b{K H%!" \<~gP@ bhq>T *LxtNwrL?<0 vތw߆_@olY[pBaV6x1/4#Kw>#\iwk g=gf%K?/\HRPI ڃhw ]^F $ݍ0[ZK6Qb(OBA:vM &uYtx ep">@#FgJdkWg2;Q70S4Mxjuq߽nB`_+dHTr4{!h 6DE;R%|PMKٷ@Bx-/]$$oL-YGBYJ_RoC_ɰ%CUJNu*Y-te_%Ea 1⫆є6LWP~ה.4Sd K1sk'tZu[UGӻO^;q;;}1+pb/:1KLɬ78`N"GX˸wǪPT;)Ru-ۉ728ڗ!On:^B[]Q.ݗPM8>dOy^z$,i3]@ndR fH("όn(4IncWiaF3 b ͲZ9(ʳJpqXVoFEvoXC8g w׼үMZ{K5%HeD `حTLۉJzdTxj0A0辂IMF x^`2CLn4G1yMd{8c6=#SѴ:z}DZ>Htc7zF'1ΝRm ]? jӖte `xQ˜b2swƤh݉W*9Uwp*8-*Vù9PW,D -q6zK/qS Jѳ :~x%0 Vv9:3SE kX_v*oXStҺP5ddU錏"kIكF'Blܢ%sqLJؐn*H;j[ x){'N)3 _c㘞VkDd\w*Ν2go $,#*CAñ,IzPr>h5= o4~*Dg|O]WHxk֐C ŤkMndr`\yG'70FfJD/ б]|$h$y}9Y1sVC!'خM lM R|Hptm_IU}͜rX 뮴1q\ڵUuąHנWJyDт, PIsz }ܟpv{FԖgհ $>q%[)@޵Vm~] A[tdy(v}y{}$[BgD5ʴ%*¸l,kn:Pv Pj|R&κ%O(:ץx)uٓP`woLJo/TZ9Mzkɼ`1{5/cB39QѴ2L8y"9b#H?]}`}G5`p1GjC$p0IJAHK}fLGzo'mȁ7r>"wW1s/2YV5.>q-:*t~O` *0Ϳl X띾pR4E}kMM,(\`;-+)ǝd\OPXAI M<{M勧# ?]q^oIJs&^gt8 kT'ID V]3Nlyg/D7aMIМeLEeKMUq؜n& hFsR!!-ŅO,iZ:SֳJ?rb28߾_3E: Э(GsTξf!Wzz9'KR鉱LqnblP*ɢ2k" Y-:R!άLP y 5TO5K>8  9Iv΍ viH71!$>}_Lj \B{Y;-eRYk%LK *b[GJhXFZB3`#0a 7_ mU[gF6|$Bl]X= zb/fM&OSr>(ơK,7B٥'ʓI~&b)~3'^N7كb׽W驘ROnqײo`6n[&!2)ɩWYVMS5{D{8-U4YkL2eո!+F_י7P.(ekֲ~}iuq{6Y!)aha${Z8ǥ}R3:BQAgږEC Cx\Ƃ7`gXg u0#~S'@ CZX _`833JPI5eրsA]CpvI[]_Gy3<\V-8zgKha[7&VCU.xW%g&7RL$s"~fFdN 6xZp ('@u洚 Am*4:Y3՘\x2`/Q{*$Ps0BYW ][R78v3*>fg0+j38urgYvK+cG6u]41 5go$ov~?as+3y!T8k߰q;N?cso7u/֛z.*"dasm:/!(̗㫷켱y YBܝkgvt;r]>!y.{o$J?kpq&H#s67adfnmk9ƵUk5$E zobVp*{KCwwEx 1m8(%21$B%tJMRzkyx@Ve >R*"xQ>}A? x0ΰc.ongϪI_m4ns<9'䲅ɳk =V}-?~O7=#.[ȟ%MvŲ,HRk .(耝ߩ02TxtTy*'Z˟4kZgK+ is:"YΞ:v1#]"y% Ԇn\N[U7&cgْ=qYA{WCu6uK (,bb{QN܀w 7yM@ JaN9THҕ1ޢ̞z3{"lhs?&cUY3 8WĬ.rlp -l.}Q뉗;OWI[V_0=\|r;W6dXOa3bʎٯhXv$g#iƜs(kN,]B__HR,74q[n1- [\HCgr>@hU,ΒLr rlD) %N9擇i'U6|fU[fQh?Rddva zq4^zKJ֦d,Nݔ`-;5 iI/4<kg]b(΍Q`(T{j#R͉ w3峃_5G_X& K(Ieq~oi ]9:ۮ0$og VÝZU4k9 6xlqQJ-sUs;A(oO87̇{NZvd)#ny=cAhú3fmrHh K"ks YLݾ{p,E!7!v#QSB(CoQ#f܋9;~l?iCB[2c 0eSajDɾg+X P]g0>0<~Xc&'58rrDMvT@WvYxU!/F!,MWxY`ϑȚ`=BrB3R(YGpO}U?O)uҋ,l Ez6v`ê[:P̛KpB6h JIYn=g3_`=Acjaܡ^̉+Ot_G*+mpN$p0z.,WasFtlR Ď ԊlkH`SsiB"ÿp7 ~+v a2Z -`|02ߩ$ ̿\XpHC/BU3zs~먩KTMY_+,?mי.t"A), zxmFJ9&}UM=HD+re=4.!v.^}y`"^$V`TU׸2_Nl8sfD5i*y^IV);3 h b ,k\ZC3M On@?hM[Xm1`.-~G0%ɂ09g<%a9Ys5,tú%[:OzTy{ `7(CzDrB>7ӗ|cUyQZiryDuWg+fbh=2xqsݡ m+gI.Lꭝ*͝CI-}EGg{n] &&iإYIV{{ZJpbc=bj ?5M\m-(e H`Nvx5"J}B#G<{qסr1MT@~&$M4(?wLZO6pq[s$a0r]T/gfRgٰ!vkJ݂|c+zYFB 5>,oԨ ˱}So C,!jX ,Ӭ_+OR@m7p/X厉jqN샬N109R̞ < qveޢQy$b"zmKeA4Zc*ވiӵ$Y!-Oph;xWM8ky4L«05eK %"# tPȯ)9JqiI'~4y'uMp2笅3B瓙.cba';aS03e AAr LȟӚ=H,FKl~ug1WS:VVF=e5!{WA]Zq!'l^@\%}B`WZY$'JAoQ!c,ʫ7!tҢ!-+D, c4"T] n hh" "q|#AZ|qL3vT]'ޢj.'r7!A*I\߶bbqGZm@s^vZ~,J lTxQk1mft0Akh!]A<u4e:' _OK +KϯbO֛41o=#a| ;Ar%G Omr's\ڛrpP+yf@ZIvKRnt3ӸV[O-'-+֌TTK 'Uݩ#Ius_0P]?(C5J8"&.ImI@+FP\1idד9xkϪ'-yjȀZZhl4Gꙙy@%".LKJ1`Rq*7 WjdeDcVn9cooHp~)%?-DunoD AY-., 88TWHMC(HRZhlsoQ Jq}/AR"RN }lC0$[8FB4e &t UN\%DUT)_3H}1^16thHv?˚Λ vC^%Oj Mnvj id7s:x )h?oy1jX OO" H:tjvT[}$HA넡%5 v$񝨜d݄i Ѻ:=^K&{Q]Gvqͳif/_^cnt^)*.&IރUٳd xjVeu *k#Pܞ_[. GQPcU9݁ 1=Ujqu|&'\efi\F vb9/<(ab˛:͊88pwH:b.%ohD,8+dy!M[thtԐpoAOTz.Oі>.Ԑ&],J؏/MTnلcIRE/ Vn5p,4}fd%Er05554 i(} )\W162 5e{dpȡ0*0:;;P_B lL+bc|Q'OR!e Tlo#АN6Kؖ辄͇m?w_,S}hG~ζ1,Ǯyh2m7$}XX݄ʥȽ/i޹0%4B15ʄQ;-@޿w-jX<I312^<.kxDpm+s{yTk 1U=f+p0*ҶDŽ{ LϕPch8e't1`0l޸3Tv }սɔJUv[&-2t۠4 o^cz&ڗ>\Ӝγ["I)\6vV+0*Kctx道ECJdZ, K`HFOc.KfD];V~x'2&m'q̸6ԙhD\ש6O[9˷pװ Ouԍ[,?0lvtZGOHzE c)-Ϝ5[Oq:wҒf5=J%EzkA&&u&J FA;Nt MJX~7^+b Ϡ+bl4%wdë9J$s3kʳv  xqH2VO+UĎOkkNCB!ZCΜ2U/x\tqB[XXk׏';p!/TK;MWYi <-^*w(@dQ^C0 7yBL(RGi"W{x8g$OYy6Wӂ]sŸy3`hd%a/G`_&t,vѩc{_U^# sza`p6w[GpЖ,|?Cĉ0 W=Y''8䛽IkZOuOuN]T[pʧFSO56_AMlqQ3"~\'h#?\fivOо wln&mr*U}Y[+Hߋ9&R8.-`/\4cK,exQ\ЃZݮ[gs]\J.ѽa|Q>P>LAb:=[Sdp0xkywWt-* OaQ2×C s2"؋1 eÈ ̈́ùzEt_~l@vϊ4>'dݥGA++QC3h-2$\Ů|c](?/T `BOveR8Ur84zSdèuv/)͗/b 0 fOBn1*>S~CA\5iI{5&:{|拾D]8Lz;3NR/\oh>΋rxpgԍPPw?xT"{-1+r 700gHDksͿaew {k`5cU5[bX#BfwβK@)zHmV`ڳ̮d@V?KO8xQmfo1) W 1[~_oq(<.E=e$kS4/Uf'+8<&-SO4 +N%{?kDrEaiBGJ[MDSLBTMAyG .K/yۇ#]佭Np o˾לO,Z?u-"(gFP9Ӷ08-$<#iH)DѮK:\?Fu^V~F:7IBqW~$`'{Xv+|L'jC V! қ{0NJR\|.. kWlg<]v+KK0Wƹe)-|⾇B'5pkVsĀ󢩥,$)K_w b;3GT.Y75҇;riGW`ăCg l6upr*it8תL=o!>g)Pbj! ,CPF`9" BP?7Zw0mlc} ߑ 2@q6x?>j~u*gb2.5a&mJywmaldkȴ.f"nZݞFTp $a̸,h#oLVY?f9yWJ;qS~>۴퇶ƟEEv0y](vQe|9@ͿKD<_4TLsmN5 7j,,0wk*6 G|GC"00\Qt]5#fX[F #4 Obв,vp&n&&f#=H?1Ox"{9EXd ـRo+,2+2}uZ ?=S;'*sֵmU k Lopxr4"?:ٖPv22OfD߃̍!&[u|PĆ% 3sojE;DtMj3tЊHik7u%*FOGj+}4hi !+|vWX<'ˋ"^/(m?q0䛂⏿N8GHflgi]Hj3Dfu(>$> #PC8s(UR91B\,/VXhdO5x%-$i(o6¥j{>H} Rޗ%3\n=Q(D *L9 LNV–9XzkӄDH& | fîHp`g`$rNDYeMgOD3R}F؝yDVRb%(zMz7+@;!)1V(72<_zNUJ91'RlHPgHDkƟ&S'Rb׶b g"kPAG2re_HRRDTiO&#cUtbӜwx"gctɳxײts+gs- ܔpG`wQTTߐA"uPWޏJ"6[L0X6v i61}ھԺ^ܦ5a[`{`RMrMQ~4Oayƹ׻V5K>ڥJhJ΋s{i?`SQL]m_EaKei>#DoW^b?m0pϱ5g'vZbzL b=SnHOj/ @gpעB^KrA V&rz1`;X=ǧ(μMoao)U)ɉǀ!VƻҌ ݜ@pV)d^K[%#ES zs(K̛cPpgd ŲG15%mq7V7c Uo)i嫴h ̤ʌT9/G0}UR%1~asRvq{w(A@j 8PK^uhǵ$cS0Q}U-(xT>˱ W6&Z xT4wz͚lߪz3_S< $h1]2Მʝvg#{TPN*:&^;x!Y˒ .ZPv gA79"e658N ~m$4MrkBOeF!qUD\J?|FHtZ4/{2WtR]lC3ڇ=e>H+Ljx˘FN.XQJZ$fMVw)WVK6bޚf7VUSʐW ?g(i)pxvhgLWz3|kŶG(yL&rG7LS bh#ĨXL0Hbr'lzYiJ,byUt1ϔLPR7_;*k8Pj;;f r\V5xZd)&igEQ. e6G:3܊v5e)h%F$ϐZ}{Kd')dNią,vv¬'؊\,q⼰I&b̎h-n$K 8x|ߪM,zC*ʇ_w`aO+%0Ր4̆G͟3$&V(u B^%6!U4b02sHaT.|(D mwnIEq_Tȕ.nk qE1{odgJt7n8m'2cpbKbag>$BVpX?DSvmJ(LV@rp ;wj€)I]4n!7Z݂y:jẓ$W"?Vy^pF1W ]EQʶQzңC%V7(zA遆)ϩa>{=$K$9C\C`/3ϊsSM  vJK{96PET6<B ;T(P:Hۦ4лiO=YhΠ܄* fpG (TX9yԱ4ld>u$qsaf('zqn-@,VPtYި*ELkuW!We~*:4:ŹܸTw%˜FJ_,０0I_^:T7HSVƥz S%RTԎ~㋦-c, 'kU()=Ȫ0%Ykm^o_0)xıU`0BuͶ#zU8WlrD+u"?Y;:fꬡa<axj]]M:V8 ey9xք_r&revTr#~?@V^Y9@NCZ): >nE:<@2;hH~ÿG(YՓ0'f]cNvF0N6x]hRKȓ+^?u넶zYa[nHiHA$PV+qĕX/Hȧ`oS"D] w?_[ODad / b-&eavQ>d8l*n`';8$fF7jG\vs# VyxK˄B Eh,Pc$JxkH 4Qh:{Essl،Dud* $O33drWHxׁt2qYكݵ /B~ J44c[*IDn nɔ6x߀bl1n4|TVӑOvRqhr W!BWg/Ȉ7f Uѯ 8dc%X'a K i%̢=w'~NgTuH/36K@`{D(UY/Fy@.S+_LE_d=詉[=(,7]tiL m>T*a~RikEV ) τ4&-zDŽ$0tqSQp< B+ÿb$6 {~W‰;Hjձ=yx[Nu^oQPJ[)%b`w*XFQ!ahIWj`͛~ƭ'(-5NmNl"@0|-BDF# GV l Jy/>PP-pVV@SCg߽yzt_ąkB쓌ήL6݃=ou;K8;Ҽv1:ofѷ?~nNRE'f/D=i#(>FrRT5 T&8xVa̠8&Ǧ#l54<ҍlu8攓FxmgVF®)(A]1A9l(4^~{ nHA }uY/(g?hO#J1CLlRg9d=7@Y?me+N @p7و>臢i Ƞ $ A:2!{eDW+ݐ:R]h,\!@ f81X2Q75.;fX yN)};O^76X~(Ov`Ɇ+,`6{[*Lo.reA[ijqOM ,YD$ySy,0C!$Qky`ySV$X!:#D #sIu;湅Tc0_PqЩoiR"B5Oҝ73n-'Ct,&q-nRX]eD K 3kbs/MB/z>4zQXK~?p6fZ7EmwGx4%Β^qϗQE($ݙ~S_牄B+nH:ݺZ =ËMs~}-IW{x1>*%srYQeǒA+5j3w( erR;NTtY R{W@L~$z&v珟wRԑX1@- \(umZeF/hs-~ ZgɡcrI~iI5ލtWJy%Vr'Pˡ7pn9/AbdC9LDGxπ&qה5mEr3 t}5.@:: KI|ץ8ߵ=vɞhx x鲶V"Eu' J7Y0pĠ זwILegϴ9<dGÁI4ӎ+_AǫmIQCK-ۤA&m a)prURR&U?9ʑm]khc',$$Sye *gAcϣ54҆εjMtpBTYf|:`Ɲ#8>ݚ +Al,L:'# ަ4a?ܒX~^>.v BxZ`*R˒K҅*`ΓP+Qb s {$N4^ZMDY_:-nGб )O3nQAP##;z񫒻6hmo:@}%M?'7 mPʃphYQ4Y|M g!3'[AJ>!.Y9̀ɨZVʽ~C~4lՠB!`;%z ke>+gY?X w2cIH'_.Hrܻexm;K4fq5Jf$>5~4FTUml$f9#A+qBL$q ughP~I96_9G54#O´* As ޵y7Kj[Ѝǚ**2eVm(3 ki|wi: OƏDUTt dGM^8ge.W1 74Gow}DvOڑޑ~q*mhh3"Dez9FzH:5\E㴀}'u,SkJiy6o0>Zl4]4Uf^+ˮ6=6YP;8Tw)Hiר2:UA6<&Y6JrgiJklUu$B1#( O͑{-]5ImU;WF7# :SwGh;qW/.d;>)6$o}Kޔ`b7 1>,ʔu W__BvםtVO̟~# ftzsU.l(.uΰڇ? SZJ yQ_kP1SiR`q˔!R{\zF !y2 nm>RL(x c3c0QNлgwƇD~!<ygc gyLbbê=>@Shj+qբu9M@fBHޤ2U6B;~ n@)̛"`U#Px jު~7#ɖ2"!%U[Fh:Rr M2%/l}"ǧX 0@[^| N=ԟ=! ^(K C*HtD64tI).fFx&? Wq$}ں$^5 $bPYs(L6~ȼ< %zR#oox,W.F1L@Fshb1K@{.7:lv޹f_mu; 887[ʊqſ h +Ve=ѽ/)-L+ؘ‡n`/jQ]$MQb$م)u0-p,X\ĩ. # u  66Z]TC W$徂їzs[cxp͜"mЫ>~<0+HH{ŝ!"L4g)(y'xLn'RLCal2o\⃟8EMY>BsnF0#pE P˜7jǖ dL¡ɤf* ޺`7 {( f`]5n'h;lbr ξǘ0 8[ZLوm1x ǢU\hdj3]@:& _/T/J1P8mDsKΥKԮe IuT,%_y{$ 6J84B"+WkݝV]22m !ȈЛ<>Ke|r.R@ [=&T K|]qXDojRYWQ# Zr h_VAiP:xjDu7\v ^l9O٤[$emje%aHG钆둲¿<[TgC2[[JR0M1ruCm܈{MO{J{z6HQB?uطxkzp|Lb~sQɺ[,["HC`ᘠeo+CƟ\]‡bv!n36mհw$hnHhH;#a%] eгB 6=7M+Pµm7ot=+7Ksvtٔ-5!c&pc #Xؖ$Y\\:!-.Ȯ㣂U)G;CѷK q9"࠾y?t`5rle:6RnwBWY]Yuhͣ_;F&emp絹]o ޚf=D\ZL]wt (!*3܉jLj@utec}\4% #0z+zX\Gi-psdM3C\v{%tag\j6e+6e+js,mZZ'wUmvn/1cu f{Y J# b !&bOGOK>G՞NwgHMʰ?B/-P}txi?x`4lwsǤ|3_@ڻ񕵖 $6&By*$fidƓ= 0(F4Ȭ34__qߪ .f\lԮqb~u#bXn)VÍ.^ϕ$rމ;ݑwAKio\&g3< z@gQ w>n,P $~?@}/;HXGcN34xJ'6uWY~tkIE'1XlDDb#۳`續N"~6%ߍ za\-q ˅-6XRdxдڥs 𾎎ַ%9i{) ͊BB8`}`A9뼁}jk݃Q('O]+|,=շBKxxXlyxiXi(VtQ/BJcѸa؅ZQJ'(w0 `z_95hT0YxѮ7g7J9֣V!ڂ&b0[-J[56=M)r[+15W;u@Y`clZI P=_Lq}m"Z\DpXS$=Pŋ1 i:,4"޼UCFƜyNsd3BlQJPǃT5V&kٰEke" Mg3uGtox:$ B<AB\:ҧ)i= W(50 2J/W#+ӌ~u:nmZ`Prted5r~JEQsRqİ÷uttmўRrr_ߡx\ C\}H1"4ԨIx]ElUvCB;H `G 8c)B6lf#Z-G E-u ULi)rp[:YxV0J5h5֥Iv +N>@i7_O5Q쳬VpƏ~^aSB@D_a Y "@~lD)M5mN<3<ȿNjŦz'6E4$b V-q8Ln9W1YsU]ҪQQ횑}P=4P[po ?!b^C, j*Iӣ}S|,E,6D^-}b뱞a\uk(jT߸D0-QIV BPZI C: kZUF[x%:K1x9?~Hd/͂S<ozv^7mqf> lyzwEƫ ?2T#K:iM_zrQONL&oXq˨X}Wi)1x?}TOIKaDS 8ͤ+S컻%\K*O$va24j\8NEŐBУyʇf$qYРa./m(wZWJgͿ9BKܳMKR(4o` ybMυ ODOj٭Xs gaT'{s.;oaB!%:Ar):D|mh1]oIXѴ&^D&$˖-,؋xḯ]+%P_;=hFulau^؎?WP^/m<}GiJdݝGx!=> = ?Nmb=R3H6CV]J~+a]A9juDU=igt֔[Q.~,I;|i[,^=e؈b2W;{2%:|6$ ƈ`U"P/?ߗ,|"\5;`c,جd>G5 gmg+]VKVKu`?=Yxӻ7Exd[{THzNSNW3gTHzb a_0]u / 0@DKVl".μG{'zPKh xh(pTbM?em@?:h@5vQH1`7ͨݴmtSkq#L*Bm|{Xj"IO1&C9.~ D}gx\\nL旰OFh~aGgwA!$i,AZjjEˍxϊ TEھ}__E`ṶNǧ:M"P|5g9\#Guvaũp4|DVKÀ#%5yo>EeBSgKyl  )a- 5!e}Q}y\,XVmW!Uu$~u,/6Q쳥l/( Ze L L89*Q(;_b_QktX"Ǽb+Ɋ \ȝs+ C2v袣:|浩mѪ ޭy=gJ}l1/uj;J$ٍp;(¦x4!9 gZx(m̗Vpuc<[4\EgZ7aH)Anszew6"1Z= Vm|kűb/r @; Tø 13CdgG"|\$IGWXH|'yQ}渢 )@cwg /Ú} q#\|BFMM!pdѽ;SƜŞ)6ï)n0T tډͷ7Zjy^G4%K6"k>3'9N؋!s~!_0^f=ZFZ/s~@HrO,s2*tRK]%H90UK[e]p!p&N֌X0Yc!L6s↊޼k<\(dͭP۳ZTcBҏnrٽ<_ 3|թOjZQ>>sh)?Q athfէn b~>o8ѴZ)"iEw+${qcpfuEzlR8:)8B6zj \[-? v\Py%EL~Cs}IOcLs{k 'b:H)qL'b>,c D?DQ<QBՌPNT|D0<|#W%z 6 e´A+xm&o9p޺ 2[!4g 3?W?6#Sx3~U*@k-<p.ު'g/u|mH{&K͌^ڦxNVeNpv$ GZcQ3Nx -Ox&?AS9hKYdPÖ堸6*L.HĿV:2;` Nʬޑ`)gg1m29,XV!jsT :XlHJb]fs_H[GV`coowfPQN YO7un{% ^F( .~m;?2kj%0Hw q _EZ7.Q*|l'թSY_w:?<.th>o눰.U＆GUOns4rJf.4L$aܩl 9Qg\$կ0Ü)ܐ=!(WѡSP#ALf)Syl|Hq 2u_%߀~;UD3u$ըs{Dy,"9{oCYG*DZ>mpw $t3T9%blҲϭ0 t=Ռv}2vYA0=CѼRx!"`T( OOjfpy8ٸ*=+)BY C+Mx_7jDw 7Y#H)Iq]Ҁ^Rr$Pp/AaAnMeHJ6|,UpA34<&+Fȝp|3-2LNbI/# {^n_=r y-DoujnXY4' 8๷~ ˵n_u*kg `oN>0,,_0e-^kh'7d7|QY3~]eQ3rY|gd\ِ\'Kxj1c#18BV+.Φ<[`(,i)Ghl*Ã[)/Irr*,0f)Te.|@`9ĎZUJB/Tcn.N{_ ]@a{]u F}sAqMXnas(yŽ'"HwT(3KrMEQ~`" |.UD% l߫w?n.!o =J1*mdly02T3yS%eĀ%I4E~ijqLaiѭzC/K8"/^.}*tWOnOlR%Y[0܆I8 1덀^e,)BCr$x+F{M ڔFk6>IÈ8@lZ8AP>~Б+Ԫs-hK>JUnՅ +^! <0aZno1If9-#[ߖz޳68`qnb̾ǿ8$[޿je\~B#7P s] ,L=s(uNl+܋7jd)*?fO2?^8tGlqh%䍆%@"j{Tx2[zA~Bs#5^k i~&`{L˛f6E8o :KILa O!_2H_Ey禶$V9U,tb21B߶85)O% c7E9G a{0jO;xo2 ` pK W !*BԪ%jiY-_1Ƴ+sȖs_% 4Iepl``G`9.3lI%@hz:#RE4 28uA<\Ms sghc|M$ r!IƜSͤ;YOv3$YCU1#0mH'^L㘢n|u*Inn3WS?1fBF t8J/WPp0)=k3yXTk LdW?ppp*eu"p1ݫF/ Tg7x oS#-.W8 .4I|`.IT '[|L &pC}~Fg"BlKF2PȸD{G槶qIChHC/~ВODC ?{}|%بD! hqeo  n 6 ۙ_p.!^ppec{! wOU_=vSلJ =zoCE1m-.9'+ۡgy6[|ε|}4=Ua^ެV} [xHF}`m[JX nCDp%"1Zi i5he H*Ha+Ym\hJ P }dX81<Al8aܰ=z!KϨoSaCJ=#RQx,RWH6nSCpQUp$E3㸦e3>bb^Q}eHN$ Gqh q&T"32IJmXgE3~&sqҧ\rIpu*b j78-z^ays]xmYWNJP rv[&?ܩB!#cH-K\$ J ݐ1>JNfgkƨ7@>Ց sI@H 6UPn;VU,q=3aoi-ر~6MƮiG NxQY-e8ߑwleYX8" ŗzgzx|4nk#` w9,JDِ!SP-!(u gQ! m$J{-8=0a{Ak^W?{q[DMaiF#j@F'C,܉Rgyq/+y[صkŜ# 1Z`O2?e(HYCtQ*e@ ҃*[, nLB-n7Z3t<-B) [YM# 8`1=>VA7vI#bXh 3,đl^Ot&Ql?+sFu.~=(O 2mn_,X3mcgnC/r%-Cw/JD$+ d{X1GυA䙀1̄5Ó7hsGNWqo*36Ml^a U9)k!C)P2ٟlsbOlɤ)ϑٍø?p(D4 1d" |6TmI8׺J5[+Ea&&&vg2R*㌘ĄnU:#d9CkJ8R?sL$i߮qI=Y"@Y-Ð ?I(yk1Y˅, se,UgY#c9xārk xFߎsO5:Z?4 sY=sIw4 ;)Tg$^`MnZkR:zG2C 9Dw@ﲆ{& Oz̉ ZE7QX˂UF玚fJ}@~@4g7 ?HҝI,KXw7?s:Ω6 />ӐZ2UZ(V+mrPxۆQ`WL~ngڴCjL2 W$)Tcr~?2uKoBJFރC ў'P@XaU3M|apτ->!C#&Ŗw侮^̍fa )6 ̗mwF)gGQ Bg՞B[1 h> ~iRI`/73&݌ݨejVl54Z]atB#u>'rJ `*݊kW9D{ #-VDbbP=]rsnTz[CdҒ^_DQ}q BT6Jtў ?uv3PdXNl}a|\ MUah"9C# E6:4 I٬/p@zH8֡U~DS1 +5-ItM ++X:!\R+RUb`9'tz0_cD_a1o[OpjVxB" E*p:1huBˑ>V40 ؜q}`ї1,YqTbC/#w% Ds7LMqԞfajP#Vy/fg)[3j+ﾳbT_;E>ӳ՘ r@(bQc<StKzRQT/JU0v &b{O|E~f|& VyuVZр>s7qǩ.B֕ wW2^l (A-1,; ⒲4%CJӄVfЈ[#l!~>rDw\ҖEoVICOf3 AQH$r܋Ƽw_6f$4K7$!!/5zUvrr@eq%ܫ ޳sV,k%"'jJ2ƚ~ag8NQY4t:~O=S2J?eKz:83;0N*qɱ0zek*]xvGDW ´ѿ&0f]ꡆ_O ܈"Tu"=Qn,( uǞ"|o0jIc}Vnoz4 r_ .Hhc~5Z_#7]]-(=i p|neM^ct>oeEj3f922`dSތm}tS"6;M +.dRl,Дb2筘[3Ru.[2v`E zA=n'mT]\E6qL}>{p 镨+Mx F0h|m "Є[P1m)@Hܖq'Li,[()^'sB1魥fG}".W;}/G8'*EvcBiKw77\gX*Y*j84N֫Wx3LXa_dze=Hǐui-Nh7:|va`3?xU:PDАE_ZfdzڒQ΃o"Nai eTxOwM+[7 EztgFK7ge)NEbz'7tWXqq}edB345"jxkNe+&[ϐ$g+tʩ[Gx]CJeFsT!<'cVuR>:.p մSzwcdEYzVy43,ֺHjrsI(@]MKUyҽ&mN`)7 5%CkBV#I\IM}-Q ݸ.q$f,w.&<ݧ)Eg Zqm80͡ 2{#V{&A0|:cO ӂ$,4kA2*BK>&fƣkk/(ohrw TY;bA)iZj@P?rh/j.gZd%Yjɫ;RK dzujzh&j=h m#CV'݈r"ۋ49tlĹr-ljՀpһ"/è7v7A39'wvk9ɲ:I'0 9" Jf::A\UcުpH!hG{TfpWm+ŠIƍUH3pq !Ebf䉥,ȿѓּ1 RE^m@-a}B~rOO"ٲfhS5oФaL!n>upކm[E-$a"~Ot)<$ 8z0MH|c-#uB_L2v@.禯xYr8ߎZHS)B* nF ,|_ۖía_ĥ%H=H@O9wx2(' G\ն=8|mn+c V1ozs|dā5IP{}h )[:qr:m)ix-p{|ume5FQo(: 9|tӁI1%s̬3# I hwPXR> $b":_埼/ /Bt:mfXTP(ܸ?2g6UhY$xo}wb.;u I33U91 v48\AWZ?cE/@hԋ(o6u<0ALyB %aWq)`6s? 3=TXZrI7쪔@2:]:Z)6NsWR6zpB]*zUXגw{kf" R\^V`+523W(x#(jnUqXD^oc@0eaB[γ+sll;%čK{*9ͱ 8 {7\]1ɤN*fM;Q'X/Pg{jw 8)a 2(xy-$x}75'[zGMwTZ.{=xh3vK{nQBڷ !+T ]YA |/qot>}gLd rVh3{qQIdqxrꔚoGbëkbyg 䯇K?2tZ>ޅsDDsbܞ VP>ahF@$dS)TqSß۔65?ʖJIm8N|S9Ə.=O)%Κ:ę盏!hP;kn<ЁHdQҲ*AcMHyј oHSjx?B~KgbTRT6_Z<klɍxza6eRUcUez&Ԓ 9 5Fձ^*dCP;:E"lD1O%|wtY]`1'*jYA__B~[|[(t )䣠;X"{҂3,%XBB?ݻRVg/jKZ2Bhm.ډ7 hu"q3zH }M`!)士>"p@}IPg! J%KQPTI&yC `KQ(oDc P7Sj6WfAuGA6wsUf}z=+.|#L32fmK52Kگ D%?>O/k }]}[<Q\KOu$ K? )8OD^VzU5̚pT4_</g^ U9TU! ƈV ܄RUz>)bi%\spG uWc7`K߁ h9em{ƨ]&w_oQSݭa̤ŷԱŕ:TؔLEuU´F~Mgx?h ?ah ,\W]~aimל8y˒DGՒ 1G],#ZLKSYlh!Y_]#z=}xP>Sc‹9D: @epLvmW6pfJL%@K@QG?H  4K EzUhs@)9\\vqdnIK;o[LfTVNv'}?_M}="f_FW+.#!䦀=mɜim\eˡG ヤEGT〉nL${BtS`E8eTs 96rg'vxA`.PU!#Ek9 {ܼlVYّǽfp[y>tO= 9M;w57ӡӛkw+hd}Ѥ<5d" "e _bT&Tk"t᝜ (gyG=NQV`TMJS*NM0ᘨrgAE`Rd{$TW>L &̆mu؀|@wl*x#!I@;%oqO^:Ǻ^ezciT1:.n>:4fդM7 5Bwz|x]ō<磵 9C 60)3?B=`]ڲ\lXz4AoLb@*zlzh bx'jʭ6IKI!B`}8< a`Oγ#׻=go_%F8郁['Zj/([(d Zvl4~nF͎vDC*YqoCY4LO am[9u$ք\CoHl<10lzNd((yqvt| %&,Myɟz^JsG{@ ~sה/#4ȓ0`\I*|O}"3!PE~*/m*87F;b2ݨRmx< V,J/ `X=^OSjݱFEs\_^˸f5(  I0RtSl RE{J^hM&;n.JfZdJk*5:; ,ze.JXSʍ+ nP}Xn]󜪥$ՃaR~q JY"2֌u-+Q* @- I5yPo"B\ˮ>66uksvM JFF/Qy=m;~+Tu/e*㇬JIFi90-OyԄKYYlS:§V"Dm 󍱹~\Q3%wYaimAUjǢpM5ZFt<^߇heX48nmx\8Φ}}_lTʯcr4W3Lo /3E׀/@b53haݭ ^wU$t&Q*@(f|Vx𾲔iMffVR 'vg $GPkXR*!uJ?g|ӕF!@}EZe3OT|_NGN!T|F]K&Wv&sۛޗf%z\D F'9.J5 / yۙjsN?g!I٥m9x 0iyk-1+jt jGXSBJ? .1fpэN}h6#ÈbjYH'2,d rNOOh IP$ ꚍih?|d’lڟ׬Gf>xj3к(.k1AsΓbto3RCb􆄙ưBHf xI(uu #nsF1Yϴ 췓@*b̩^ GŇ{VP!p7SAw!-Dݦz$ Ԋ8~w)2;<6iy8$q]9~/LŚz3d}qbSo)Ɗ?^#j‚f T`D,G 0N'evac!IZFЂ*  6Q $ĵ㵃En2ӼÀ?QUQ|FZOC@G<.Q]V$n#F MWNW3ŋ sD*y_үnkQ'(" iC쭢s-4u=zɖvZ>'dw&u߯,/(,yޯ+yo@)Gb-)lj<^QBPx.\ ~3L܁eu.~ѷ>R~Zή qPu|wҷY2ܥe]©{C$E *:XHԳ H)WHh-˪?5yK˨Rrn'tcVg<('G0VeOz V;Y>~ (o*X]*WеTN*_"+H-j(#g?1dϩ:,o#( +ʖy)5 %"\[F-s'mm{3rĈ[#sY3.|G'f{`'zB S}N-(+#bT,~0;1=ˀ/&3U^*MR;faLǵ9 >uԢɬZ-/ޥǔL+ffCw^ evmiȢH7) f}*Ihm*Gh^u6警1cwG~HdŗG|0EϤvA,Ԕ錿`t f=Zq47\g9)?vMb p"D)Q*C/J d9Ol"7 W*\);8ln>j*)1u-k@E&bOv/ b@yAoj؊+X8p75~/ݮ,yhwbiy|gtNsAAB}e.fYs(s Pޤ6q46pJھ xQFfFw|C]N‹̪s̸o ̨Z̦g=eDxH)9 $3/x讯)h^lXбLju|Օ(u4U2ZQ¨i޿r[tՉY{$tރePɔezQ2(fxND~(eh*׋"Dأ{O*CWf) Cj[.HʻDߜWiߩv%yj޷;FiQki NتTQܝjƩAĎrq8om@q_)t.-|}/V؂<o uQOi3#\z6egfb+5LB?<+dOm!g9cw MKևY73tĜ3Ltٌ\[&Mlm%fʳۖLDQ:#,8J%{0K :}AJYVH0?>*jz j(ǯn@F&5`'ϿlVOLw+'s@]-K <7;9]v'`ލ8´7a< Q"𡒴6J$,<G.|sRz$ΕZX QC$e3̝lwBY\@[jRCf!\ 0kί0k( o~UOR=>v Q½}(Zq)%f+͒AG- BHn^WHGB[`lx}ޱzz'8A% w5noRo0Ot,;QE+b#G)4v/9^ػL0I1Mr0rB . >eOU;GؠN3+k#xlQz,<:ZU%8ץ kouZ?Y%48\γp&z#hzHžA5 ޼l2Vyr]݈E*׆. La- ?1 ! yrئ0kco$;wV`<\#N jXv{pИL|4jԒhlr+[$MlY}z4(wg5Pcy5)fnlH빸ަo'ݳ\8~lBS,Z3_E}.[Se mx+\/@F/_]+ց (p @0/44p )/KWrdr"`ጁD̜PW9(/ş֟`ƾAOXi ;gQ^2 MTt7ւr/Hlx/u/nx5qݔ0{&7ܢ]Pi[=gk%Nq=%()PguYJŹ3Tԩrjx0_X_sgDTZYSp9{hYع,PA$LPH @ ڙ@+)\7Q LԈ+#ui.DMK~Γ[Q t'Xi1,wva&TOhNq/w[|"~p CYጰ(0z'Z@D{M!W @h=*Ar+9揦 uZf$PD2|Q.*w Iv2Qx Zpϫ,Ge*S7QT[_: Qh)8picQ" ) wP9$&X\UsmfpͶb#7 ߖ?ATwkABj"M@s'Ch-{B|s"`AɕfvudBQ07R>K;F`?eT5PG?Bԏ%ISr絺F[,=De >8ιicHC|[%.=m$u@:!w^,S_C2{:'$z;췸CĜ>v^OWnˬh6:KcP&fU /d]2 ` (9 ZpzQ^I_g TgʉQ7naз/1aD%TOf@JQLP |d Fh/Y[٢Qpw`!:&iY\<^\q$M;&%I.Gl P1(Vڅ (s'ŗ,Ҕbm7ݹ+YQ""X )T2̻Xu#J'/4OD y_[.UP ~+ ਣznknݝKiIJ|ѐp8z B!:9'!N`Vobb * ,Uf߸ТdiBEǤDol+Bw{ʻ "LH$zb^I/Eј_V\gR{hqt1[Sc $/K\= ",$`S>kvr's! GDPl g>rv|_^ DmueN\|X%(J(R;p2 P!c65{DhUE}xeg$p5x&JJW"wsjYxmsn/|-@-KjSUuӪ*;_$-uځGXT ۆ@6D]K +-&3\F&"IM0Cx2F~]L"8$x*kd K{^WQw-7z` 1O*zM o=<9eLx@03/1BI=6H>2@ gЄ,cE8X:?~Y :`<)+Rs/(ǰsounD9uOi`LK8 @F-v< ~+Ij9f_dp#4?)aoTs~!ʕ3\/ f)1\;[lE2.շei04F|FSJWD,Qfi{LE<%ʰFd y ﹾ8 ? ZQrԳ$56L;-hrHaPӃKb)hVyf[/ɶYVXNmZ2uMv8T#8o# g_\G^쐢ZW!CU :j|;0iiF`.Vwv-~ wqqdYba8^se(s):k>SE`+.~TT3T'A)V?`-w! cx0.^yI!סX=X780*v5JOVxv|#ʣ06.fk}R" a 5@# mlQg@Dw8S$eQXצ%$* ] MD3W%f i]K73VDTͦ~u"*( kwGN,]dX 3\ ΟHBkFTV ! ޾֪?]F^w)EnX<؀~&K{Y .5Ib61+˸V\L0j{O*^&ş Cݎ-FVGZcj=[oO&B %߱lLX\Z@-2uQz٨>vAaӉ\g򽞖G#64tG\+WMAf]ywP'23W:zȪȍ nQu!!G`R] ̵, [KzgQLUfIDDZYloVL5Oa],J&nI(]2ݠ "/Y1YPQ[׻"G]0IږI\!ҳn^>ٓb@t,oNU͋<˖Ww+=Ǒ#|q]TZ ki:Wp>T f^;_XŴi X^r|~mYN3#'G1LKZGltd0IL8i‘ T th}\ɹy: 䨆Ǜ~I{ dߗg-B9?磮0g wMWBaչ㫲N 놸Q0{&llw֩?-1H~߄Bʠ1bgJB4/$h)<ׯz*]hTɶqlym雛*Eǔ#/LV"zKb1+Fk?DzǪ ÿ^4NͷDs요[9)H&RL-V8VLȫrɲ協Z,l-GGD*FLrnX¨Bn.^'N䖦; rtCwO}U_8E3DQvdz f!0 :͢Ruc*xr72VkשL0RFK I daAHcv{ bVcp=|iyQoy5vp-ww֘R:h-3NM3vy YtV}[J zŸyȍOEo!A|_~=ڴ m=C+r9d˞q=lK<뤗^ގ7-\"Lu _D?57ܞꧢd#;~O6vj&ϐ+L?V~@S^R T㺵qS]b>/S Ѭ; YTe hN*Zio0b IWH"é^Bz1q6.ymPϲIv߿0rzAp,8>|ͽV2O+\eGɽJEYB>8Ч,CRph#{>JSL3ͪ^ulccgn)JЯMKنQN%r `Y2BܥNZ҅@֫Uzͤs0oonݚ/:qX},_U_ mkǹ.>l O2s:h]Z {" o>18]S똻(92G"$k so"32SU8XHwznd(s0=WB>z.9<uO׌|FöLz Baݴ,ڟW@^ZQU ye^#W­!0bʂwWD ,UMj\jA,@9޾tHdyqR"8m0'ȭibg:X*.bӜOӧ`?e?Z~%*ǥ?= _lQloGn P&o1KI8\Pmuɜ3;7IB,Aԁx/犧 i=2} 8/InޣP d"k񍸔s'$_Γˮ/״mm~zL'KOeΣ] #ƭ%$zF;[#8 iwzHhQ\_;3-ŀr98m>`K:ՂK:-|^7Vs o6)ѲoiKs[>] 4ޘ]@q/7kU7 leHNк'QrĆq?ل00k.k:&ALE'K7873j}A -Wl+J/'Es:N دt$.6Β~֕s: vkT/FZΛmg{= R`]Ft9aiq&n\43g̙S~e?O6٥BoCg٥ YglTֻO;ĚFLf2R}24_,s/UN_^]Wa!nn{ʘ-wOGZEl<Y7la~1hɹ|N8|܉тb0QrdX^or4Ѕ+!?P'b4@9A>KIܐ:Y u嬩Sb@|Č "_'"/.c>K8[bI;|[B@ 6> Yq,C5)εnsp>g5"jIGR1] `ϧ!U .^91ޞ"+_^ ~* F\TyO:$O9=fxjBV;{;S;Xu_Lw%ƭQ7BS ʛ.Ce;Q_10C>JQhUZ0'94Ao!ʐJ2}"Nfkč$ib._߱N/pa'`D{׸ Q$"Ҡʾs-PNns{[هL%=2ԶNiN{ߔu"[ FQQ2ua;ٮt, $T?w.01NS^Xw[)FiD/< WMIg] }nUH2` ,ݖݙ͵7lΓN_"6>2/g'} sjlk6;<oc|q|Jk"ghAVlsԩPZLry$6o1O=6 pi ƛ#I] ~ɘ:ܼoq$K+8|(u 4;*s:~yxc ZZM̘ 1Itҿv<~=yH+iw$kztu*;ѩ#Zwӧg~֘N07X=:$;poF'3 %/;+Wel^ǫkDCƘ7x:*cgOcV׽rFב!1 U̧-npxX5aE^Kx$ Q) ob86X4z4m3sEͬp MoIJ_zP:Ds"M#X#w Y pA$}saNiCT5Kѩ1>MUϜT}Vv-ܦۺM\K-r)kyen( YΫuYAO^ڂӎ9$$o).n#k/#ߦ{r6JsmBvaH&3U˯}jy&mcHXYej#1"&$R ]ն% E4@?c ) ֔is7dY/i aGW#E1ciU=~aM=.ebY*cI?'7nJ$h3Ffezjt`4ՙ?C)"OUO>W@4%#kG4K*D8| &*呥k7xW!Z -`:IϳSљʋꐘ7%.rOGWOpǷԟbޙiw:3$Y%N=,pdR6!k^4ř7S/+R|u۴FtEgzD`@6uZ CxsFr(%dm=c7g&&ϨuU,+|)PnŹeBJ֧ YkJH$ў#K<=x2a>7 4j=s^"rޕPy/`M_+>*R. @r=}Ƈ'8g׫C8Lcl3|  e>KN2ylČ2npf+iiaD58Sh-1ەKU=pYgaP웓Lt%/[0߀ tz:r Rԟ=9|c1UO7^ Uf0~A^''TX }ݰ!Q& |7J *lXِN-5rdf]pO-5xE.^P]<7ӜXUqLnqeSg䩿̈́yQ3낋Mf[<.n TH5>R}-Ky#"$f۳(a,XLr"tȩAjP>9r&G͡ ?5S0dʶMU@J.O}M6\,F=-mھh6[/@Ī3%u(C%&Bq*Y2/K_bpkUXo+P%hS>xo\\tSQUϳ,?1k\['^;SW `˩TrQy3n :eq^mFIe&x3u) m^=EWk_UY2XAwnL4c|VjgP -t)YO)%_ zbq ??WDz>L=~fftGA9S>YQ@D|mcp_sqA23^k\,Yĺ4==Yotq\RQiz:e?_Orn)]e"vVS9v4fG$&q`7^w_ljepӐD)."8Ba1XhN,k)rHT' m38(h_3G-70bu?,3[,PBGFO.mu1 >1}]$+ R?gE$$lg&p0e6erWӚp?.}R72PbwF ,ݼ*D"aA0 5]R9**#XG61N 0c?>^ bՃFTq6Y4Y[9p ļܽ/*VI`:?F.?AW0@' HF˩EsY) SͭYO/t5Ae{dܮ`MX[Êe`U-#+GvI&i-C*3Yl8f#NzחCU?NՍ"(;B|AcQV3̀8[ϑkFYDLɾ6ھ.](>JHSa!9U-衦[k(Wb0H;. ͋dfv ތVJ?CyxJ5(&T~›+ f_Wru&g_*6J$E3T.Ie<k~H);kXl/M\ċs;MIَ34LwNSD/Ѿi]쟱Ai|S˕黰F.x_LSE-{Vb: _MXdl=qtBI]byQ\Qb`M2NnB@ihB$`1@ڲmMՈY^81hZ'ќ9>U<[$:HSXˑ|. Ӊ:#Z"eD]oOVÑpXS@rg џҟd)϶MN"T0pHXqMګBSGNP4e*9dzΝ LBΒu逩s1A[5˥pHG%O.'c }X"M! /PȻ">8MD*瑮+bϟ I\HajQѪm)_5^6 "bR-z~r*𛵅 ][@ML*^tDS3b}if/Y *r8E\ hwF6;nHbA0@ }u<4ϥ4yȈmhPSxf)?}J\:el2` @\%KkoRm ૴'pݹ b%!XZn BEO%@v:<}pmx.y 4^;!rKaFא#m ˴TY/z{e'89:*h9IdNޘUOs[L(E yMoR H2&-/Q*Fmg98C8u4YZ` ;:Rq\]70mQc8H#8pR 9cG^0>AFlJ_K$XA:,VpK[tQ_miFUݶ`Q+U*&=nPtwgf(};)-i1ʜd~݇Tb]J)@GBGBMmCoU>M;gM. M/n xEkh"t1@[9PR)6M䏕_Fg]JY5tG'}clq EڑpaSYu$x!w:,št.EG&XՏH< le UQ4:! K)Ġ蘑eM܊V=e&z.I$.hN&D7ls퓆fRAkbaNnChNT/|4ƌ25F61dƍAZLDPTTb;|zASuՙO~U03,Ə2,žd2r4k;?kSxV :a7 f80|N`ȉIV_}$`$Zl ki"vCV~Q?Bc c<K[b J0MJ U.F#98# !y5rbGLLb7ͯ3&S1SH'= "v.<72QX1(=blȌ޴մ J=Am0&TzيԫȼFZgl|v0Cuƺ&拏Nr]͊@:O,t]nL %rP.'8KIe5BIq\~א&GxTT78d״+tlE7y j_0fM"!vR{蹖&FȃG a`bv)Ej(i?'L5 p9 >#{)JZ r7g1tJ~gS+?MKljz|񑐠vXw1Ķ~Ry 2?N-t7?KLז@C4h7: glŀA K7^y-ii< ;?qhmSmeP_#;VZ=A*nZWJߟ 7e,cPK)xܵL uS\T-Ըqjm3KݰKW@_ s`OI*'0M=F=- ^}:!@ ݚhæx ׃ {@ÍtEr,CCR1iFwVM;RSBFIވвXHm}Wb{RGK -f)wHj CRle1YĪXX Vy~I$!+UtMJNw̰#\_,=39ST; &L;2QngdZ8q&FC,9!$-^Re4N3#R-JDlĆ[̹%xp2ԫؽ.J:Vo(8oAsԨi[˺{#佾 |*/_)- {|+z u@Rz]9BgE6p&N~|bёxxhV<bsb8E|)TN Fc]Er5& @ԱB%&>"ΐwqڠix20<)،(.G3<(ߍaӽٰ`*zF{?&T~JR  6B^z}WaR d#)L]}qiʾ'AXri U ۗ^oJ!@^).刞|Q©:%øǣknb'r۩MF9a  '*xj|1ꋶdqD(f;1oGgj}{"pBj~, Ibv 4tR62F{ake 'RynV!:mԠ}2+N P('u+>kh@pSѣ)8,L`aloێ2jSpXa ZS{,1718-RkIaXa*PtO蕈Fʴهx;s1s:䔕1tσ_P(Ff̴m޵ֳ]8?jpCN0jK^fڒ8Y%4ϐ U@S{!K̻ iUHa*Y-v$쐫xx NnGaw'iG/: 7h/DPud7'9DXOqWU| $ q*sW6K$.D/%l{+ľ`}Cݷq#kL|vz#Ur`E%?6 ó c1-,J,y0GՖkNVmecAs}Fhŧ $ g(Mdz>E*^6@ _ $_;l ɘхX-,  ̧Q kWGW9n `bޏs'( 4} Zy6!BͼTi0aIe*bO c~lu9jaZ!M2Pw/W(gv-4Y_poyz3r_ph7DYhX<\8amFaiMdɖ"3uM {s:zd"T9|de6§N*+'+1"Zllu J0(2j)wZ\s]E7Ͻl-ar;Q: E[]x`qʒCX?kK_uF3M% V;TMV)ZNlHS?iMcjb LjN=p ĚD%_[wGyW-mX{Py$`̃cLc nSBUԩS, CQhat!w$ءZwFmƤm;kR|C/#ƖcD_Ȉwj+[/K\EDyw٬ _-C>j6C #!cjt3?>ԞC͑a)Ju+^/4}w]{UlFiѦ*`ַ3I 7HǮ-+oŎѢt xKbW?.^1}AXh`7rc`*EFpֆm!}N CLo+!P`:l4lǛawl&vbWwYJxm -j}[=Kjy INcgR3mTAL^t Ts4Jaܬ.dHE,"p /$'%{p+uv-eo2{L7u>ƥ84ǭO<E]u~4}M7@A볎 B{{~ *^bD,XDIR c O v8ҥƓOr^n-& @[1$2rw)ǾI=vn/.N/wxrm8нnuq2' w%MAEDpޤ kKw8: oGci|[/_#rGNuQ)82byyc yX)Oe.s MN,EINZ}؝GI VpӒ=Cv">^jY(l({?ԣ25}m`A_2O̧g?btBe/]"fnN+C;Mq^ZR<3+dz҉闭8>Ҵ tqj3+PweB.pVkZ'Yf[pKjclҋ-{ukǟSDG_*n7?V[}nJ'^2cuEB uQ=$pmla0X8,ym١C\4sO6N3=U*Z e]ȼA k<ЩQ@Ngcoߐ tH'̴^3U5G-k1 Vq'|b7^w)4!_w,d|cZ5kgwEO/F/ ̐TڞuFg"6xbUh+W!X1 Dr+W0ta2ƠIV+)?;se9S 0AA/sETQ,`,߂ЋfZ`aQ`1lgP??{$QAoyܚ49#@->[SU~B%߼G<%RTFn]_-\#5+)&6Sz=P XB|3~1z Y wV2mQr= y_ʉ$#ű nj/U{Ũ9qZ'&c|^9WA, r/*=uHʔ?o,:"$'8hc\x͇~Uߙ~%F RPPڳ)K e6JC0U֒L5~]k4aTG_!5.5ոH5FQp7exZm7)X%x 1x7$/P!M TAE"mv_ҾlRTPvyXȴH>8O.dDG|Sطy妙f_2 YU BfbxO.tlQL f`bg5 *\VkX3Ba+)J|#RnLI0.67OB7!6$wxM#E_9OILΦ0T-u )b`nt?@ULc>\+EiYg&V*ͯRܖKkz@E-VT` ŕdӡB;> oTmBunm7hnQs J>SGN}h0N(N[7YrY1uTgjr֖I}H,t\KQF؈)7Q%Cr[׷ݗg!e8P[ ۈ;~!W# Nm/^2upEIr%!Ayw*Q#$ІǤ)Fa%Gʼn˲622%q+XrmF+FO_Yۣ= *$W1DU\a+* !Bx^ϯ&]vraT LM>v8NjPhc ;2Mw']+Ξ.[J_'{|`$M_y.c :%f$iObhHܳ_N[KJ\[酱5^-_ esZQL#{n 秄NaUjs=>7j/}IyC51n۰b.q+ 8[˿e HO>$]ux8ɕb bc07,:9dZ+]6ai&eWK# Y%w볗 %|XO,iZ0Mnǽfs8gޑ:o^ {@mKIn5fX\YNJD.JngI_4Wϋ;}UDy;G dz*Ř6XCK9ca⠺<~] ]W$܋ϋ;ji /Ut,( @t%;*q(?tc6|:짳 BX "\޼ft'eyـ3} $x^>mZQy%4ߠ;fT it7g7v)n:nln-K6jHw~֓ b N7{-#(͚ћ>jp {\zRFU?D|w%HZ&o|(:h{JAB 'fსvrK>xW23,P sQs*R([R[` &czGP\~y~ĉ" R>`I&\ .$4\0&}uبO^h[j6pM &t*fS,E"g%=ðхu&Wmpviɿ~ÂpSTЖJ-|wE/5qR{#Tiy#8 3LJD}!V$Pۢ~W#Z|jM߂ ǯҨ$\  lzFz\>l6pTcxJR) [arLp88aiPZ]jhƂX-Q5e  (RV2ǨdzamĚ}|ݎ½!3sGKL+ i,EbʙB 9c:ǡhv1Wr[-GGD}a=t Y}h9K 'T~$=+һ[C ngvOkKtb n&iuXg{H9~LIbT<.1wToJUߕl;Сp6rw+7>㶂};\-mC0 % ! uRS %OE'8[%=x=5`lF ޢuP 8r(:3x~`r"'R}j+:f~ńVg 4 K{p7aՐ#s 4~ϏK̩ _]捑J=b`[BGε a;.DaFHZT jɒȒ5PlBu/B}<$|-&揪mh8ր){D |nfҨSK*]:%ZHek,9l S[;ւh d+ Dp5P0VL[eHf'E ;EW.=+0gTK^P!Ä擿s"ɾN1/=f*i#iKC_WO~ -iQٍ"Pm]`YSC[\hSp>iIX'$#xb9%⪝HWO\ ]J; +5A6kq^h?̫uzj Y{}Ae[HWzaE{׉4H̽(327[h}}ƉD-3si;]Z7)aDRjӶ8)H߿xʹk]k IPIt|sf/װUd‰àȝ,^wܹ>3QE"(إQ/撔NR8 ؟ա(am͙byxsPmƘ>EE>b퐨xd\'"*qpзG|FM^t)1f\Ή~cnZf#t(_/"$*ڪd %|~|Mh8wk3fج]Z9w+ 4w`n„_#a`ϻ޻n4Pe&V>ظ&7/\/{Yi>.e[I'LUV__O#Ky[ETr3g5SH*2^"}g3t4F'I7Y!DށYF*}um\ . -`Q]u=<؞"Śe7 BU̼++=Y"تC.dh0//Y,/" eиf=!;'H3Md. X<0hd}֍MB4!vK4@SFCҰt%8 ,L8xq[,Kt@GA v6Kcf^-]l9_I[تw8\&休3ipLcwBy9 >=SMV9#/pUYyvX+D 5fcϑ煣V߶Eőr,CQ`a)݊}Y΁.?(  N^{+KX̖iR?ǧ`K=:MSΖD;M9:斮RqOzeQf `}#75>u+]^˶&'T*?撂Sd~n / \byʨ?Ype1% _ +l6؝"5]7ӣ,rzh%{C=8ulH|.xP !iOȶ^ݔ $N^C9MHֽy*[uE*j'm؃WKB_LǬ4ɞn3\GٖqQɜ.fp$jޱ#gou|yiLg(:br >Z"94=Qs4@R!)Eh#n/@SFmAIO77y~#Djk4˷ aoi\ⱤʽzP $Y(ҝaV7BGŖ3G {N8 ,{Y$ )`Ϊ!(g{(7U* $!d;=Xl(]S\)lR;:!x%>|AИd+QøZٶ8Zhs#Х*L`(V#0pշ-3EW];swL{'Jκغ} ^ޫBQ Tߦy'K<`ոֱ܌ ys8yב:yxhx2%V"Kpm 65P?c\M L9LAOKH b$ *x&\W$e*йsE`Q'Ig3.*j^ /jlX=ӏEIOblr\RG۰ti$3V(Slw=g0ONᣲI7dq[GJQ<w7|{/{fXۮj̵@!@2lg+V Tk3/KX.4 !s7,&Ӷ![|  .[#k'(tMX Y}xGQqHoA?Z]p@OQFԿXF!Xz*sCgi_ 0q2n3dpt^\.Fj}E9|J'q*{Z@ج X8E.wAL`$ïjY FX3܂X f.8_2y_]q?@h,Q=sk";%lM­Wo@T53aZ{N^3j¿rP,!q [4-@} !9j{yDc#r+Z}Ўk_+ CzyF2|-$B!)֢GɈBZǘeIF8ְK9jOjڎ[3m&Vb,;>p"_~~%*qff_%Q{-~DNi2[X'cxwW?gNvz5L۞y(gPBB&dhV@q4tU.`nQLBtܱC46l49[;ivҬЖe@ mg b9$œ>% `w|>:~d[MP *Asay?lWZ1$@8.0?&ޢ:cK8#3.ϧ@28jўZF_G{q4Ǻѕ̲h◢H E IG}T-n; 7`␮ fg26N1iRٰ[}6X)8>fFsn¬>=u9ZHb }YlpΣлL7zNB/I15DWE.4eF T/XG ~uO.#{=F5RB)5U6`3~ؙBjg*;JK/+s9oay&9Gv]O˯;F!SsΕ(B#09bjM|l ɷ(K߉Ԅ5B*9.ux'=vBEp{'A'OZdmu!3.P}:I6WT2Y ru@Yg gTknw%%o@InQffgX5<~3k V~jʘ<{ E XIŞ[^/v[_D1C*Oṏ?A:PB Q"C)R'Ī[Pm`)JX6oX{{fiqQ< td74_X4c~k ]cЭ=1Gs)?D0l^:*o4THPǷ"\/;Ku,נ`T&fTg !شeTC,{flfmpеZv]LfƳg'nW5ohiM:(4ٰ{[vmY1e4-Rd8N>*QRfJ H$ P-s^Fp D;笴k(vytiR_s;غM;wtٿ1$l%>hln+7vr Uc^+')&_F[w^BlܯK$nT o/ۓHcY ZC)`߭*CO4}U]I"x>I&{Gm&Kw-@c|)-;QW&{W/dMQX)4M8gURo,ҵJä?{_^xsT-*ō70B~ٰR#Vi#[8d^aht* ޱVZ汒Xj4)g(ڦ_lLxiô-1u9'BV+w񓴂1{PZ/F~\:bic$k^ܿfQmJ$\IY+|)TaZ5æ.ţǘ>ʴCUw2zhe21{qcSIos_H6tڹ'$JK~+_"%ݢ : WEfA; T5:3; FL`VRG~C4D@yAL0W7@8E=6{Ȁ#BgIL3$ȸbd?hQ xl$MtNBMB;]* ޜFhĝΛX6@Cy4Qzn)$Gp.J݁,}:#j8aӉ oCbYV1#5/-T;LRM3oiD i?Yd]̀uF0$JƍUߨJ=,~ȿT[քUe(K>d-o>axz^?5FE\Y"Xst<32hKk+(+;ƫߧ9ԡ4"m0ۇq\[4k`2,J XLl2xnd.{Ĕa٨ Ц?'̨Qp^˜h-=rw: F/$>9@v؇OS5Z@&S e.x)=&5#vND`>~ T?M2׾,PIL>>lRkPzB(!VɟbEuŌڛ36*ނ$Ƥ5j(&-S˷cke8[\֟AٽT[`r}fX堧}cO_6ľ|N=>PC~F|l޴k4xfc:U'>%K.;ݰ7CpSl8]CaS? 7kS6‹)Jy`C_;a3E ;Ef^X][/;{Z ֐+\o1(g+L}Srh#m!@=FgQثU *"UU6R[ͽjYEw2^Edzf׶iՕHS;D|@o_f mcO3=h`Q:ۦ<z19V{X' m{uJ240#6.`/])l>Qο.f 2F=Ap+O헦TjTQ9Jab=hc$2 ANάN-CA6=o d_<o3"ժ|+(q9|Qˋ&7LDdփf6}qb㖫kefZYxKrz5n ə+5E-kOP.`Tk#FOK7'a_bvKY.=ֽdXUs>*$C?;Ӭ>tpa+"(`ܕ'hlXj/ȱGMȲaYpO51,h.7V̮ԃFO iQ{r>&ܟ5B\?`2.X(TYQʉh |?0nAnjְrqׇp:"'ع'iI¿Ѓf)ۊ*Po쓰'o}չ MD EPƙGx7gȹuCBY='_v*^F K?,8SR>|wC!/>@!. Ӎ%5[YV\9.@U[O:M̢-<2"i.:h2W@ygLNKc_+K0gL P!_Ya@[FF8F>&2뇰m(1"_΢ A,u,Q~V>#)]$B$ {'J cY`0\DL .`ӆ{lz9]evi{wG19b)"zU$ؘKz{Ebʌ{|͝}KTsz~NrgW[ni7 HzƎP7veQ^SI{戔ZmD 3fx [aB.XifCÓ+ ={WYxv#׋X AfطMAS YCSM| v9$f g:60IIZ|UͻЗ\\ͅxˍ}*-<6lM.*G]]46*6!u=u!GJ(L<&B$Cy&,'tI,srǚbY$y4*`%{ɥG4ĩ#3LPkşF 8IP]pۧG4WJ6C`̖7' (9fOn,?]ҦHqj2 cm Y6OMqtB`g6Ж^vEʣ7MHΟ"hb+=+Y{9P8E!\9}fC P+։;†v1Ül|`O^Zwawf<[0K:/6} t*CHi3w#hd]J3v;O35P1 >UVqnf>r&g&g@})L'W Zt BIm=b"ˡAjvqǕГ EȻJf8qO_ f2T;XvYBX[j37!4PsU[aW3^3T 2>qyÀ$3duU:vG_A_Fvot2gˊ? gmp73]uAgߌ9jXt;8ir1vQ!-?zq7X鉍wRgoXBfc%\P਎H[nXl* b5RX4_- ;/}<)={0.|m6=Q`"_8yd'ړBj`Mu(e$F5|.=ӽWOݱQ K{v. w&oH^U2p堜n>ϰHxov4oT^F:~VoN,'>B sX`c \Ę`7rxt?84s  6]'Rg_۔GkVc$cZb{5"}oI7<}ĐL"z+t2N863E)'`; ۭ@ Lĉ &QFE1%ij9Oɠi\1dWI/+΀#KEJNe-cS/$ۉ\[Xz6 78GjlXs4W$~<$*.$- h!WwMgFM껇u@hĂOAE@3ښ>`%LNPEddV9F^7p*n|c`Es´_ 5Xh|hvпvmP>7pwg\(6K1ϵ9+NP+"IY/f_!h/}{c}ȟ#GoA!NޔFMF_@cKZ-mHLDk9a(&F^PWT>tK BS; r>:SOZ5[Q(\#p 2q$m(zps[NxCĜZ"4QAb]P#iI_pTk$4=MB:|Kz, \G~PNc7~jiUtM%x g8))w:;빿*@@a- MGQ@e}_0`o$'pKXۦbVkĎ ]ֆ>0pg1hG& [>4شRyAyݯR_$\*ɱ8\~Yn8_Bk:\B?_N >CzT^Ӂ=fH.\H,h/]Ia{?:uٸul0ʣU-t(='z&cveS#!>88|2'yMj_0' W9?9|GD#"vv~~];+"#9qgqZlQ_jϘGT'*A]8CcOBC͎~$+5  nk+xI彑$tCaB9t e0H;A(#o1:IXS{p_CdG=r荔aq')ߢ.#֯u(#.~ s]UpkONrL; Cj.xѴ}oϣ)W (ע wSߣ6Ɋa4_v ,)e 3ns"Yݑ5Js~/]` EM]| {9qa1 2 _(LH% OPe:w3L$9Zk2K/0Tt)tS~KP6!G]. 8AL/ *t;6P󌋻xcmD: b~eYuO8_H8<'ZOČ#PHgu2%|C&3[?!pUl3뵕8Ѐ]`ɎD:ro 28qN!>՜uz'T:o6?0B4{MXh"/OQ*T#ۦ&v-=aw!JNC V}O'PThBAIƈiL'*mi餅AKAj~~sj[ /s9y*@Sy&OK}Hor w%@$ B[]$`h9{ذkbzqmn-C]hVB'E~;sD\VC 1+à5wCƷ;vyi PEWNxzj7FEn,|`\r2S+`#V6ie,$zH9~#0iϯ&K~ zIoġ[\N NNq"Ѩbo0xeNQ*M3yTAc%x;#3KQ\lAVXYű&J z`c1_%]C$1ͥe/)gхP]s.otP]s mAm?SmWL;Ld5=I !V1ŝ6Iw"ؕb3&kHԯBVzk*'A)aZ h$[ڐ&rdZYlAݯk,̝7exJ4-iݾ=:8[s6mN]#3=%ETs&\0%LOV=d v9) mXk0SY| nn9eöbXXY9{gFA>.dZ{wKYb?y4Tl5j/Yۻ,9z*7@la! _~8ML'Z}R=qLZ.QÒr:֫%D$ޥ.S8ӱe1ms.J&^>~"?5GZ ]Sv$~`6?YENJxhjcA੬(dfֆV2m *+߻ CL+j$ @.:jIJ]iĴbZz|`A2Ta-h9k`KmT&'5=.^AA_MD#Y?˗1OGϔfcJ͞'o0:cVq@pCr譹SwSp@K,, ;ww"ڲaVkuhD]!7R;>Ԕ-鮬 7Iej~Էpd"ٻ$4MD!gh%&Ul'd6}PB4ቐ4QH)*Ru3f^^Ӛ~[C{i*Q=H5AS]tIͱa iJXQ ?=^YW\|Z۲<>B~9>kGⶊSJ kPg_ 0ׁmAM)G0N[ ʳXvG""$N8dH di[|f8F*k(*}~ LkSZ T85m77tpE>ˤXtC2]H79=V-velr։t$g 7eG z[ >n!%O$CA|xD|pfGgFmFsQt;%JSNVTwMɆZ4{ sQԭgI._}ҫީ%2 KU$5b4vH9 ~vDmdWF^m44ꨣyٵtakL4I9uN[(r°nX޲"`e0f s"L 42 Xyș=Gi 4{QROu'Qz8x:]Zp€[}rTӀS%Tu}i ulCbxI9P& ~uᴕGI/fY"bfMf  ie^vר/CGIڰ|2dkxF@a~YkňA ,ߋ:h Q,VG<ԞL\8*iŻ-i\jbt#y!9c;:2!G摌{ l{81)yk +:!ŘqL8DA5\˻j,>计L7q%JԐbOV 6c>2c3Ixy)A"3 '"(N4gi>= '(;cH J)"'pkrϜgKr9B5 _o0kRzQk 6ܟL C b e!IwH=`#Q#S(%ƽˆIޫAERXFyj }JP_ o_[ n8 0׮UKxnWWU?=,1#{2||X$ȓ2/TBPsC 9@i=ѾU; 6 s)ŠΥ漁LK9銴gRσ?W?W)Le&-$%JoƷ5q'~}9b^V 0nSCk_e\0Xiޑ[(y[XHXtp6g)ŭILL~W?UڈI s)heuPՀ<(v)3e]K~7o 9E2{g;o&/ <) L]s1`Mtb;ۡ=LDI7[M"q8;/Ce|LK-/<qi11]dz lIGsR@mԧZ}!@Y`snk@)9(@!ڱ)8Ă8yL#c2RU9O'T`хvc7ˇnQ0QبHmTM J`2 y~h&e ǹ )u>gNHl^RZ,殨{ofrO8JA%3.ctÃAP]UxF9j}6 K~ Qcm7`agt%P9A/2aҘf(1榃 ej| q-$;慍P˪]Xd`B֡<l?3p~E\(%g*P9Œ6'HIyJew#ٺ}O苕РfʂVFa׮Z\y(1vu`TCkhFU{aIw EF09w$m+)wF̎@oENؕ1)1\(L[,4;*r%f <vţ'%~4M$5ߏ⎭4hV\tC2F/ c%.jLeBJ/:tݽR2Rߞ1@o$M-㛊\k5]u}x]]>sVc{dgGY5i`EFcgFr1i; 5FnDz1O>`/nd:ڡFk?H1:+WNP}92a5mA1_A":ጕI 33p~-4Pk|9NO lP =Fy%[yO!3īxb #;a_?OŘWWO|fAD(>oZ#LHHWh?n$3 *HZh2& ŒR#zuh{ߑ;vRw)m a| /h䍸AqFg z9c@b~-ӿ+7:p ,hTp>8$?,:>bl§ԑϭz gxyI@KYL5YYIox1{スA;&.EcEr7 @4!U7H`Ky2rQ="Ϙ)Rm2D$w2{ʸHax>._ʭ">2. )%3\rBk.zUq9Hodܞ3C>, Sm @I1:M] / &*8qM'`]X1Ils E|~oR/QUukKU~xi)yd9jn7p/<:\5*w\֣,ED!`%߬A'4H_% so JitCzZdR-z  *tf ߤ\aN'wއJ?mR5V%|b'-̩yMBjz9 DìLf- ^U^{eXQh7rU@]`~7}x'rI Hh uCYS;^uӄ\Oh<f-N-u){$3cRT\/F+nMwBM)ق(KzHs]`?H,<Œu`S(lMө@N%Mo/ bf! ~v>x0 zS' {&nb۲* T@ zkʏPS%B1ѢUs$9I SICOґRG7/.O eܳp+*k;"̩PN3 ATeYw$.Ս74P(5 .>eYMM~ćG#g0k`:Vt|l./vM3=+u=1)=nDRxˏ]j_;yBS!/N_ sceJ ]B]3O]9R[9I[yʯ ՙTUWRGe\^0 yb#5 x$e 1Dn=@|j;l3 eSP19]c O_t !!C*$qƆK vg0 xspL9@w"5 E!XhtX!kFv q 0l):M1M^ʼn5񚫮ҘSA׍|y`%\qv4k. ,t~gF62Hd LP׾ȦMq7ԼSэ1 2Z?zH][Gȩ٥M|e jb~WcsSg*ZxD?&JQdN pxϫ /S3q%̊aIB|1U_h>["p9-\9χd\g kt!Q"/[4*-_έsUx)3_r?)h.r?<;^ Ř+oT ' @ t[ɱX\hs)e]&uUlBj~2kZÐ s$LFjD{E$:\CC~GNdGTlJDkOB\3]v4X C_=BƋ!cLdvKUlRwqRL|w%TW8X3Lq!* ѼE;xEǎԿ&c'LmI#"dWow/eZ:ᑒQ$c! @SFvZ/%g0qKOCh ◳LJ'U3q6+܈eSȆL)-z eB>_E' \ٙ̒*l!A=XO!nvAKѡ @ACQxPy"d'+9/aJH>Is ’^̼γ;7i0|0c?FS~cGDjLT!˝X棵.c\|M/:0F>{pNS`h,!p~.,zZMaC#S5?G+?oAf*Yt6r| 6̎9%jJ2XzxvaP/]}$\^_G:wWwɨ|HQ~8}VН?R> C7I(F-ʗ[f췕 ӥRKqvI:. LX QxYA}nmRןҺo2oܪ!րtwA v)]AQvAϔ&8#h%6;kĵ~1D6j58bb?zqY3 Au(HZ@"hP c,Z u-j-`WiZcRg荛fOPiw"@$ShRi?e}֞mi>wzj嬤! =8ih*C,ƽV<x F'njK*'nj,6R/S|97#38 K팽VRЎ)ᛪʟ 1R,/"Ǝ n:ct4lw@p f cPP7${VHX>^w8r &^UZ~k0AgVe'z& j g7Zf1su$=6ǛJ`43;\۔Wwsx3qn voft=uLOc@,jX̪~jc蓼ˤ_<>&PaX> 'eQk2^S(qt{wՅs,mȍ;`FFչpSL8C?AbgM`|ÓhFg>PB{k yfxIx'JyZ[+ s ^:dh39|,i]'4z7hE60ޅ<9wn%oQr5 6r;! \ijd<>P9yC6wAAMCv;!_$ I[fB49jŵ2v}`|3SJS84w\rGlIG x՞\ًb`ft#~yՎa< J7"8n˝P5!;PYvUBR{MC*0'52'iFՒv.g `xS1ԁ{4ɞ o>jTU;$V/｀eэoŹ@"=`lPS;_ jfˠםe9bײJvzX ZݻufKt֟pWuƕ(K='+)׾݇3YiO_*ya _2f vy}81Pv*g6pA,m& _jv\xsЋz$iƝ\#-df,f:615Y 0^/܂T<)cRHh]ٱ{n[Kpz)b4BJ_ kS7 KA/경vtA/4_&Y \EN5 y|Ρ_ɘ;hP92RJf{su*+p`ZQq ۳$}\Qm}>3D" A=T7J`N:Dw.bt6ogMB:D]nέmX<[ݎ~"{2;d3¤1'6 ME^Q}UAM^@޾'~u)Y"ZӨ fO)>` _I w ZJI݂#tA+tғOé1S9WL۱L#j]\4r P_ NY r%4?q% _7 XSP6[H.R%(Z{%sJl3! yV$5=31Eo~fZ-cRbW8͠qNn~^kl뫺m -YD!\WrXg{쁇WS58'㚏#xJo$Dun[uMI#!g@a1 e^;2w YR;ae|pׁҡI3p2e}I|X&R$9?RH[+ZO;%hqe*RkɂvMoDL~6(xKޏ Fՠ 6xCy~z,grZxzfAZC̍ }{o߻:&ZZQblךv+84ΎEZǙ7@p,m3]̨3AUF;U<^?TsYQ\<ƞ(Zc#.z-835& ´%-L}h0d^#uu/vi9r6RWxL -)\'!L\ܐ5PǶU9.7 wLE$:d^Jd%,x;hu/]eTd4Q85yBяgU0LQ 톆 J;H7U%Q;zh6ìwq3TOQ7Yjݦ@8wiz |kqxYp2r<º2RŸgZkE!.-/1y{8vy벙37rƐٯj ED|ȜPC ~8MSgkxysp?ka,VHTkud P<*w1zމ$L|䶼7J*׷[W]0ALW G6L;ə)A䫃f˜|L@r ;n8|_ad܈_B|iKSTtZ=bӕM+c ΃=@ET뒂x0vJ\0,XC OᡇÓ"#siEpƑzDX\j)S X ɮϥ< wFB?(@L.}y΍U:ѾNoE=Q LCV))a0K@\ҷ KKcQVܶߝ {ԉqn1_vK7dvF~L-i=|zYm3M&s&[W5( Iy=^% z>ZgRl(搉̞=6Dx|5s(HY^< an8<ଥ]` _A?Xغvxj;O^AӮ N^Sp9t1A{wx؃@^pz ֯31-P|jD Vi7wUٰ3=tOfšhsԘASuA@R{kHTsحb츋 PYbzsj~l,"җ߃ Vc%)4Ƴq S~Qk9wEeWlF;| bًm :UnoO;҅貝г.\lKe \Y#Yz.3}W&Pb'܃jz=|>JҐc0Fu&UPԐl^~~C@DTfKbٱEZ&N& Y1qߜ[8;HS5W%&` 9O]KyR!||dtiwk)b3ShJ./[R?Uٷ4E8wځl aURlHE:7MU 2lIjT述"SªΰFﱉU|Mx6n#rБ[:Ғ2OU6:VHo[dLO/pA #6eݪRH3ҖMStN]mXqUK@0 \c%r)p?Wp6vHI[@*Y8!(> *hS =vv)z 3AQUrbt\Y0D?n|lHJ\שn̡eTI!*}*qז]f/!0eg.>w$8`8Jz[d)Y\wQP<Mpa^ekl!=h50:!q@MۀE&Vy 0-<](D}eC5=&ϧ~g5ikZy*7g. u!+ f&8Nc.68eHV Ogc?ڙ.Suc^:nt O0h66O@X7DBYbCVcTw=^z?@bQ/p}><_R$=Z[ o`QIL엺=MaˉYwjd׶ DƬNסQZEiS)D1ĘlS K:t| ;s5PEiڅ'IֲpI #F,p-F(̺["K?L04oU'sE%w#i66vL]&NCDZW78}7xGdP")s W Z RK藵Ɉʚ;pl[awZ~ɮ f[+E.Q@QsEmt u9 ċA5GEUF>LS_ot9A$|PT3]&ϟTMolCY~ӊ ![<2R&u!X(],3p=X5 OhKNE\[LmKrL?qp ?V "LA|Nhd ?)Sv8-l 76L @Q7,®-*34%Ы%x~b 4䣣7MjΫ@\.8}ݎ~PE|5)nyļ$l@x)]eSK'ӥ1,^v8U?V!03a"(>5ptk=PTtwHV=*$:g fv97D>^,οQE3o1)ӳ‘F%=l Aw:k@c)2{D^I3 ԆEQވl҂]c\S߭ӴZկL/w{h;s?6sF` !/ff|$\fwדJ}609&hcgL%}w{_UؗG!AJK̦E<ݒ/HgZ!J'lpFzdz3'Q(ww[h-1(A X=(q4:4n F#|N!~+1{;XI$աʲԊ^y 6w[R%㟣tD]QsE(X ҹڄz!Izvl=g jNs)^e'3lF_5)oH%],ҹѶ!D>NO m~UOxb~nCJ^ZVfO* 6{_X3 # HY/HC ~{Kq~E;k%߇|/-3D U?7fyebI%^7S[=vCש㼽BSmWCCg-w;jniϔ+;0:Q"$#!2/3$:h ƕaϧZ!0YIWmr,MYbgb5*!i>?fV kn놬4l$fvl23>M:Š`9R˥v1x3 tW$vzG5IH7Mmzʹ淯 !o\40dgGkȁ@JiqEo(2<v$^8B^< qR~Q(r]5lk䎺qr (KaאCZ+VPv xw ½}Oƥ67jMvNDr+5v_;@!y9/@6ʧ՜F85E%3zyLYif&"@%2̭J} ?РԌhh׵)WfY@`UN֙Z`ك5D -u"ʖ.V@֡,zblX p&Nۓ|Fa؇}l1+,] ʰŻTa9akrgn4.jc>hl)q٘%ߨ{M4YNME^(D`+xdڜe0.r+8Wn$s,p:B~)T2q W89dI]Vyc$Epsp^?OM2/eH:Tϼr . AE;MEP=Sf aӶڽ;@b]AW YfAm눯x:V ]k ^cun<(nd<TĐ;VKȫZI<,XQP_ZKA<oHFaPf_sh|̖"m"]tIXyg<$Pr@8>q^i{<ʼb47ݙxNUK";\ ja]4JRb2[H=!ԗޯRW<@z-xXؘ ~rc̷kGbzqJV^MDz/Wri;[*ΆE,M|-@ê12? - 7|))AӡJpf&Ccg%Q ﳢwғ$L5a=1U,f>4G}PnhI*)&Bs]Ȟ;{| QUD׾WI)t|i[L`7׉ FM͢e(`"l(3~g-\:Vt j7( A*X+wQoaт]>~힁Խ#h Kz Y0r"UEBm-鿩k 7Iְ 1d:HbVu;,f_y!-,#UAw8 l1ƀz q9-BQ=H(fWW[NɤpjkUhW;3 0\٣^UV?b'm>.DmÜ39o\4_3g_Q?i,"@F^QL2<$b\9S G,[ZrT(_/3UtVdz}Edwwst*2֫e G@â |M'7S% jXp@kQpص2 &7+oX4ɧ˛yt;@An_#Ű7 [QZi1iT) kp$;!s>*WVjYղTE\K3׷q0Ǻ=x>{`t!-k$FAٛ ϾżԘn_|7o2tA u(*"᧗O x2ښCR }jS<~%=Ztǐ LR8 VKT\nD9&L+Q': #>lvZfb&'i*(xK Bp*уb3~W4Qx M ~# !g]6]lݤt=],p>Zsб6hфY%z]gB>w~Fg'.Bh_qi=];UԶZUJAFoH&a* žK$h+a-#?gv%^3=Խ`Eg[f:qV6UKSTDTVɻb! 72 u"o<響U m:ZčNx$~ifE-#!Ŗ+uBVbv1;Bw!{ 5:NqnžY)qy? ƕh.kt}!Auo$ۍZZ@I( > |L>Nw"#@d( dBu]ݦR9pUH;~JEo}SKw`9~&eW=D3j$ YPij %6`Un0ߠddL1WB*lZk 4o-<1xh=x&#ɋ(W^9GߞWi!_,HaBa7s+̕xI4<'꤬,+.DQIZ9X;nuS5Zۙm Q ZPߢw+RtR?Ӣ#+7@N2V1|%Y`>ZF0I%8ybYm0 [q`ɬca^O%a=psOLaE@=тam N4mG7/y8>V+g}WMp3?RSUT~A. Sp$%~/Dm v/M^TOzExmOP$sNP MIX}4e1mDyɄi'.4MvkLFB)󛯶Ƴ}̉MXU(l$ $ؤuy)k#\*dc1V'݋#\?qiL'H6[TԊ|RZ ,22O6ܕFh- YF!޺(*&64}a~O@k]i-3\{#,];zV{% e,V[[eJC9v<P32 ;zEL7BlxzeN)f{G?|âe$, GKx%soXՕdy[2AЧ(ytm Myr }%Yp^%$_/}(_`f;7"'J7;W=@w#C=l{|&&FbOWD\ <"}N7tޢC*evV(Ni_uUjzS:c.} c|hhX=AK 뗆U\D(2'L3r}N-N+- idobuٮPaUW;T q]obZg$}|<ka,r=B8jD HGTyýՠMA~FGu)Ҝ(Ќ^cj*oxsVo zCʁE`BRtkT /ÄSGU F $S?5/7NO ~cu n ̢pVJi4Ȍ*?TPL8TKKwjب~:اRZ`܁3id\CC]Ks3C׹fløRޝ?Ij@܁ʟbyF5رZ0rnG(R 14un`k俘kwR E27D"Ƣqo?;f٤S#O\ OOd삞ߞ4[/[! 1Ih,Q)OޕX7dSLym]K&Ia֖I RziɄyj[}ӗ}SZOCl~L$UVj*/VuzRNRA& B0=Ha #PHEpXR'RLp]77(8d3,Nۍ"7]WBU@5MVWiD c.M:>֬`,a4FO/1`4F/0*r:PP%UgB6vd_dN芟zc-||YXd?fz@u9ŠDHXsl5]((,4M ݔe 3R*3yD ж;1BC/kV\aNº$: ~Bi,B܄Z B޵ -]因VDUjJ[sh}+׆h,QW>&Q͏O((MZ!uaNMyǨ#wɈs5[*z^T']O[uCs8Wչ#w?BizΎiN不 r وUl5'Za&ygHUS>>2HGmQ6ʼn#WxVtS>rgV[BTj2KRsD-5kiCCE}j62q/{  IM!XK /&*B xv|:|\ex)pL Ow hbߤ PdyKXz>"q||C ޼m b"TzsCSoLHa[UIK q ?W[r$'[8TM l7A,ɖW]:[Ef *lկ-Ol$.[, QTR4*ThM;7K.v#=Õp}Ƴ6 blL{f2m1S'`C0{|2}JkWU9'2@Fiw/pC8>(j5WuSpMƉrz DuÑ}pBtn .hP8A\tbeem4r'zjCKw;,HT3Y[rBTrؒm FM eК"BY)v#a+V{Yaj;ƯU1r=˳v&= cFC4g D>YP E~!DGi !8=4ewbّd'@6W_2SYUMIbKa.xnk4J 㖙3A^;Kmf lʢLm h+}ڐYr+GA#~4N;DAjۉxW|DB mCx#q= c%[ÒI%V!~iŌ GvN小/a&ƬKqV4+~X_>vO^):Ɓa|㎺CC>|ѝIFYTbO٥%R ,pY>8RƵIYa¼KUkư27䴞DyI}gѠ,l8Թk5$|5k)ـ5,Fav|GZxELƔM,!p,+y- ޡ\#;Uws!yXh,HGv*3m@|Y?-Qȑ2]<*Fnb9N49PrZtR]uOvW 8݁%a:cxVȅ[;0FĪ zb+3pƢ0%hVxKZ݇zC󒗫32bIh m&pݬ֮gժ:$PvJ8X<82<څy"ASĨmnBF lq/fLyB][\el-\z9&6PW%£HaXq}eZcN8@+XyO4n%*1Y5BnXy7t;7ODr 6ׯ&h{|ADRC*$99U+nڇFӖAwpܳ@/4?gJ6."\뼅iK,n^,cNEUp}Qq;nUPh)#O?^ފp `JKANɛi$o09YNrZo3IZP4i_@N`Ӿ=ǙrhzBy$Ǵ K3~TFFHaǴr,R?D&"^H[sjgae`~vTqO.ۇoz-%*P tt VgpGP([?jD2ֶ{tkj׷>@kݿk??whw3d\t%eBċvJDJ1)XDG1Ke [v1aZ] -0䆡X} 0e9{~*4;Zh 7.Ca<XOL'/>=1~QҀ^WuɉC=c +D[ŤM0SiQf^[ !7GEMYP*ۖm;4+Ȯ6&\MHxX4 )GLHDsix%b8AB>_ӷdntF )JP ֘V g_, eLj(|9iZ_D*#K B#bAG[*X8LF;+U|([^%ޮ}K E*)@쓿!9fc^BA&{BC87/>[=FY`EwܨO P=xxrG_KJ!MRrnmrˌHlCeŨ|!D:/)/q:4(PN1]|?Ł*(#QsXi/%"L|/ ܮn/zdhݏl,!b&BRzߺjRB?/T.aGO48V~NpreGQ] rz FQ 3p+Ob}]LGB:k%=,Ɨ_w "kܴCڝ/Y`ŝx~q1uX| $Bbۧs n⨊w-O57ef"@"Jm^W}ag+=2U=obՊ@j*Y5$RxwP( zaoܸ|Hi4I ?db / |Yz|F fED~bBk[kH!ud`tv[x&kݘ/DTB7/k]U,# ?!e6w,_պaIj3* Nd e pY9&)֪mF1[K^8Wp76Vg.3?֒R@7 f u"f6cs` oXJvJ`1A i>q0KML4deah 3wRī`tꀜ >^SN¶nĒcV6!8\D;V Of e }3 4'V5hCVɪM`oka1v%+xo|B/b}^ b.f@{gyDs!2y>]|vl [Sgɾ\E}{eblrߊŀ kp|j8I֩4&Y0QFkb%_|{PB,4P%@-L\M5iҡaWp5 o˚SGS񟎳2Fu$B$.k㰑y HG+fYu3i(VX̓d6@]Z訰-[EH1&a47Jh7i.95Jq=%2=_%%PU`a}RU'fV:yv) &Up'4+s,Fе"DIOp?lޯˑcR3B#.w,JBQz,}[0r"sG`VDgt5i;sڗҜ4&t}7Pt1 ACWQdCk/Tz3KE WTRQxǾLWw7Ɯ-s#G &ϥ2s&"P+]=a.6{`M=(ᒅi9ǼE0K3:A#ڡ G$_UPJL'*u6S "?*+X[Z]\ll8"ըH7C0'Z1;qvw.?ITx>$b*낚9 mgghKiLIH !<:c4Â>J>>ФE]gOVCm+XZ6șї HlPdboe>YOeh#B!)SZ*OC 8u:fT8TM= ߓ|{I}cBRFDJWq>\JLmmFhcI`ݝxu M%_u );Q`LF-X/7| ~U>Xs$AkkYkYsI;SGo?NAB%sB1H4Ft%2q +gKC]1qJ!'BC;kvAcU//nz6ï!o2.`8;HOD˙<0Nj/@?V"SzW0U>tjdh9(r :Km8 LvTP F^)ߒlwf|9i̮:k~һ4eWd^z22B&PB0W_'䑹À@Gj^~ w pC멵/ѿ7X(=Q, 0/F<_zE+l5M,QJ&Ow_d],otP߬C0=`+k=p/QPWuff; m R=r<1VRAG18ƃ5v{ P#8f7gu|xKVU٥Y AxsIuM7pH4!\rm~Zߦ=Z'֤- Cfy+aa{`:O>aƣUR]%}ERrd7bA>6zR w|;m?d!]E{suCf..(sM'@ k&56u?)'gʌ▮UKfC X]~ v.U)B!L _xȡaaͥ9(Uk?7s##;.&^?7&kНH߽mGxA1<$=Ơ_七bV2c*j ~Hm|?naT a69PJ|ءk΋$mȽy{S/A w%\]CKLT`MmyTaf}mEj H`5ݷ[n,m^h-L, τPGh7G7U[Ga GI|3e?yJ|?H *:~Rm9< 5\O%>?iktO?pf Nx#bZ_SH33L-.zv3kksߥAw}oK,9 \|Wc*)%gH^,K!h?TX)5l;<%2HD3gc%o0o+<6N*"?tPhIZa ~@{Ӂ8=T#J^Cɻګ9Tk Q߮EhxL.8Vʟ/Pי瑖ϺݹCFdJ6Y+y$:ņ[ @[?T,5RsRm]d UEb9H_H l&Xٌ-`\+BlrL?G=Z l4o6_ &T@n Px-p_T{M^E){").[ [quCPB8ۿ0*6ԎTߌM󂤗}s31NM;f^'^bĈ)y?bN^ + )C| j<űQ>-`Z0m Q@8pV\Q_"Y/HRNSG%!Vqze$~/  5VO4yTCYNxOV+POSCC&r ջX\ԨQy<Ɯ `0 Lq%1pDpސ73|(<;GR|\ 8,P}x!Yec^41J9s۠"˭ǠUB9O ʈ;kF('v +V"ĕuE&*="Gw]nEtCaTӱyԹь_?$h%gʸYѼ l60gff-ꃛ罹NJjTRcy|\`Xa9ˣW*΋gӽl E m[nWuHfH) r'1J3t:RE0;2.0X4THfCGdg!(U8&O^X,F>\rʖC3+7YK5!7P p0 (钀|ÍYlm6agNAMA˫j\(/pdPk/F93BrYM^'3F~SO@.P>@?uDo nHL pQWuMべd(~O5NYPHc/{}뗀b[szx4o|}eJFK|6jrd4'0͖o!8씵0SA]QSå R#  duFoPN)ogG䱋'Afb,4PNv2tW-ʤ]V݅ɯE&YkWtɨ.+=~43 jzFJ\tϼ:WN{ r[D*Y89]f5lpNc*ʑPdbSoC39gXD葭s4*ݹ!؏HF[gr4,i/|^|Xy$EHMڥsܾ=+P21X-bQu>ױ#EOKAa<[IlϒDF!½_$Pfcs6=ev%+M@ޛ>vz<{⛕פ9n+QFZLn?~|]aوPp}SGk5DX5)q$|]3+߄ru E132e%Muf|\oRz9iiV9m P]N ٲ/p>dLsch+=rXcwǶ5YS\e!"Ve٩) QcDZ鑎V+>7;EtO;4,._R@OtujfONh-!kMrcWpڟ3D]Vݞ%<&՝$ˮCW*2׹!5t ޿@Qb*UqUa8!:z4WQ$`axt+,P`4X{3ӯAy%'\^!{Sj+Zqұx-l9*fJ`e5n$7}^K Sh$JS2 ؓ@9~ݩG>Ѱ|Ӄ% `*_A&1?4x,?TrW0*f  t%CB2^hdL{_맂~|0AO"u9s naц 3gVy+=Ծ\E'm <Ͽp&{bR/!'"hչ{6i?xFod٤0 bHIgV8%upZRߔh.ۓ<1ao/K>HçF>1DTT-c΀ Fܧj@ujjnO*{ Gc׋և>B> .ᛀ]a*FTyu0zdc ۾gD YW bƞH1bb+:{s&퓦,k =kގ 5IW%aK6_e+5O4c SZ9><1ԺcuYu"9wdPaHO'gy5b *X+NNg3 q^xŲqfcM}kް٘4CJhu\䫄w:^~&S3>&Q[7Fg:Aͅ9D~=ģfĎzF/ ?H.5݇W韢y_{X^"gCD'Gt1" 5"(JgXOZQg ǚ/wcsƫE#ﯖװH% ^n G:I~?k1n{ z$$Nd{/W=A`긐6S4/إQrF#0ͷ1e5Qw5="C'`k 51wQZ 2&)xd^t\K%c޴Wڮa+vs044- 5RIfg"CUפ%ȿ;`+ችQwHS$ts98E.q^ EeXϿ>3;;#gqRLtqIDRʋ T{O#V@DUD+B(}shXL7q_)x3Bw{&_XA5)Ju{6rҘ\Æ|zR8gsH)&#Z:pFxjK #AWGPƝA9-!6˳2O~vg" ˱an@ 0ͥu8Io^{W!Z@DM[XZ^ x`SW$`+Cu5+Ottc1>#Y m.I}<_ݸb-{ZoWVzOw&kU2{nS6a{Ecj\NjwK!3SH ;:x@M e}"~vp ojV߇QyzY &qΖ>hH =}jyGlO+OW8KD{fyF+]HTαu˿kӄkIn6-!b`:T-ՐW 6(pu|Gz&6cΟKň\4Utjy( T&&.J1Go6rI52a^OՅP7ikG|FmjrKug=9@έUGjTlj)Md{!L*{%D+_hѦYE%3NWguZBh.C}y6Ssizi wpsHM=Jy;:w E9BɎGlԉgv;I"Rpdj݈fXص/ATW'qp㾿$",h<*IsI|@/Z5zR:;C@Lq&$42ޭc-lf `ЄFE,C} 2M dAL{hj]#Grg{h"qrxAfup_ ^'@"t,<-GLy9 A8W= W/p7{2\E^gB"W.el*I5NČ vi5]bҫ3@R>_XʰyIcϋlhp( 1Q Z#+-a/(.=eCj5CPO'_H%lEZ\'XjⅭI| {|w?l ?o:d@<5ۆF6;f6? NCV(G" g=7Km~/ 8Jy:j<\vi.w)ג^.o"9~ #ϲwh=jg6q&  Oܒ`=uڂ-"BCqlgYm- %Y|7СNK` v6;,GfbnkWZt(/LytMpmGQ@r$lp3pUT_ "[--#x_G˯6Ǎwl0 sp1FJQbvj< jxN@cy]˕1C 2pc<A1eٰO)ڹujQ,)k۝_K`Yب 08 Q6(YGܝplAI^HTJA`k/nSXKaB0Ai1 6NP* A }q{0?<37?|0d7^F ߳WaHJ% ejϰIM0@57?9Ώ3s5oh_s]6:qI*Ldgϓlp=~c΍t'+aD;"?z:kJGle9ڀć)/y#mDrK'Qh^i{ K.@U KG{2(5j.ek)r, ,ݴyCZ5BWX1m@޳LrwzS}12Ȏw@WDlNt)I;ADTWkEQ}uYUY,b4gƄ9BzGU(38I>LTEiKdn"_b|}/Tn"ni!+ӥȍ k8k W㳮8ueiѺ%OfvuIK)8LЭ #nbbT!-ϢU|d&}.k$*nξ{@ ~:(6w L8ʜ UƎ`?  grANAş[GG@ 9vECX? ٣!7٧B gZ G[a͎ǡ B͑kB"W2'i1@HTkA7:jͽYE-ȁbBCX(PC P2Xm0Хl^xjJkKs3||y+@l< -S:dɺIk~} pҚu!q?3!P/~S Xޙ0 .D%qHݕ!R6 fK]X@c"(]ښ٫f#0Q]4aióo#_C|FS6*\  0h&Bj{)41.Z\pvQw*p=nѮۄae2%aJZPZiGpn%Ri6SErO2oi$564 [`,$P\+d^qnP`Pgv`@ a$QZR:6M((8%ԒH NƘ-&Q/n"|p o1G Ehu;Rt5Ɣ/ {nys IэnR1թIDŽ'H*Axi$wl Hl"jYxxUfHp`}vj73~l[oei1RRD4lY?6vo.aàQ |^j< 25rkv'8^w/՝<>/l~UZ 0 i.K˘ oćZѯM%옌rr;NT\z7^!tA$1Cπ˕z餏{NVeP4v<$.M$ԛ~}}74Hcؽq"Z({~E9:x /O>I'DW퐩G:rШ1/lwAu` Jp%{]M!&g1V:ͳZh|BCp7*MĤ?+{CpH<fa2]'9GB|-ږ'a*9_%6wMw6gbJ ,]XQq~|kdA} HQ+4O͑_ 7,ȿJl7X$'Co1d:`OTĻB";f1En{QǙvzh"WG\ /qkbw-Zs' v j|~- } )~uIhB^&CsKx!ԎQ(IIĎh.{//W*Oۼ=#P3#U7΀Ҏ0<,c^P?D$Yh,I] KO꼼oxz8RK9Zꯂ=z-Y_2P:Aj-_EQmnZ,8?qTMHVI`?j9|Fwr֝-IBr T\6з|h³YEIoȡB^V=AbMTEe;0KOןЧ"IM9vэRoEpJRYRƶ/%@[ <俄MJhbLҚ%<ܰ qǢ(ԑ!.[>?֟7y4}Q!$AJw_H1)DGSF2'3υŬ)"gs8wQN6]}Za݊C$t8NnF($W0;2qh@@B/$?Z 37:{c!KЇ2_ PmsEA~𺄬@!&J7Y5Jjb)^1xJ^|ܹ߳®@ހr) ݉#O̼hrM&`lg.zMB}ʥf\OdvnS`̾d,xGFPh2YF*6%M: KMk!ڱVlQ`h}GQQbt@2٭O2!(Z<}gixT=a0G:;f#LNE )Z-񙸲rc_ UQd<ו4E"pAv} bC:^2QwŠԂ햙#xx22l\G|Gszr`|.sҐXL; g_v$Y ]I\, x&*dcNy }f81ghf ?SaN=4P_Ou)&|86FƇD>r8h5LOyj!'P=R;{Jji A>ĹQ ;RSr0+x}hEA+|ks}Yf:0^E]aUDS4?8sCKe'7c]DՀ/ <,&ܞֹoF'i-_A& B%PS017RHi\KHg9<}Wdl(ĕ<X4WJyBXNFB_AKJN'ZimƆ!靿n$9$*Ny*}Գe[lG-.ǰndw #aY.Z0Q2 2u3$nb;]o{Fj>D;Pd(Yq1*Fqb:wf1,NЬa>_Jc)cZqvxL_5P?8;}yh9!S8RK,u8RV;-df.|~Rd>29BjƸ$_$⦊e(V"oC<iei"il_lofEXNX&Sͅ`b&;4Zaj)6JR}7Y{]q@=_>2Y 1@и'Y9By-sdDŎΛJǦM!{pϵNȼ90I CiՆL+~ #&1kZ"3.y#Nd8CT i7wȚ{q/5yUϸP:u)Wo >mȇM-.CĻRKe?D0)^/ƤɕGOBkmD͉ \Κk,^t}O/vh5_H opZݰƎk$"$}A("FY^zIR5 dVw'@WΌV[HfGݫTͣ'靂1xh# erV&XfI9=o^DOvwfB,f5t ל-!2{su)AjMUK\ z%U-aD/MÄs@\f5ê[D =>˪r;_)@)%wo.@($V["Cߏ:YF/-Ѐe SNcJ:]g|VYڠ/@ %[^<|0 mlUZPė7==6 Hx)s( @zR[iM)rO轿}<}FT)d@JNAau.ƿd @{Ӝdq9e"AsS^~`!}m@^ Wh)nnŹR6 u;GP.V6YVz90ǘjAboaܞcV7?rw塘}[TGT28~i$\b#ydCRp: jUK ǨWoϲXyzXi1|hK"ʜ`TqRCLIRu1d4.wuk8dn[Ƿtβ -up#c^\n~zߍXA'כ ?'4 UfpXM -2oA r SUԒ'L`LF!3Jfnh9A'Osoh g:2^I٨%8J0 D}X8޸!X+;[(>D6`&/-yet6 ,?!\esk8+b}ʹ۱s٫o)wZzlW/ǿQk5|\~:*6$:RJ *Y0Dj61sR ~ײ O-P`f/w<ĞwEizrK&qkc*:^aQF('IvSPvUpH9O_hп~E&=r^UbwT]*oe1(gbdY:/z</HUhĕYMvu8M{෿XmYe /~->%kVki 5r:~1lV@V3Q8yĊkBWJbP4zD+켅pi5B%ө`kT"E*nbQӾp34Pm X? j4z.Y$D@h6Mgw%O #;s,LӶ(iς/A +AP`\ 0ɇ;G/Qr//(¥%[kz[ a>;G[a?쟯cz7`K$[를 CXg}@_U. * pnjRTd nUIIV^(r3~B+B sh,m_=0*`6I?di?j|nJ#0 P1y"OnLJ?p jǫ Q>L8J1Ų>/mk}> iLv2x&r(C{M7n%(jGPˆdSnc3<kHZ iln;J isM BָTˍ>ꌄ&9KJ{-J 09F|{ 3,E7nL0 ̡u~4^^0ZS4XS^ W.@ډЬvPZhm&Yh k~im.||;!n =UxUL쇔9>1|5e+nzVjs2z>F˫:Oxk57Vu:)BK~S4SDI^X&u&_slwwH7'&?+h8QQVU$ÎChNȂΥZTNbgWg17@:CTgjnm7lc:ݵdZ$(Yqxڌhޟ^LLv" >O*&0 @T)D/ՖmWUiCw:xjb] Ymp||n*/CF4[܋GV1[= ?;Y6FU2;oJ*{8|}3\+4֯Y_45 #;s??q=йGa_ #w3-{ \H .VۡCʟ1emw;4;5IIlkއj%AL|?W /?ƿ~yLcNot![ _Y9 ;A^2XTt'D=#l?5Ȝ;Pi&K޼? PGʼ@VV4P/Kxm漀 1 r Y1~zNOWbV4xTRVPֹJ\m}C'e#|2ڇJ-.Sz=!X˸(W=Yp0!꽴KE\N@=8\p ܍VZ=(t-B+nBW0ߣvmDѽm"p5eIدSdE$È 8rwR"E}Fܱ9}H X\;A3yQ-i.:ۗrSѲ[$XilQYjmmVlA뿅 q72kDJQ`-Bԏ|09Xz^iiȊ*zM.E '+LM֒` xXrX;s  i-^F 1Q,{G=L{a6Jᇂ/`Z NapG39t[T0"pQode#KNԿç҅Pf1`1, A@`26X=8>熶.V0S7k絤[c'pƝ>}uWĮ~U8XR{FKpEX'/ڶ  uؘ3x:s1ϦK` 鏟be{lڿHD8v=rֹӆG;g~j+$clwl2xE# [#*̰ÏGK*,F\.9>j5p`K] u»hIjc񯚽9׏F[CF07-,/[{*_Fi{cuF)!S!MDo 킍s_oF FdçdvsT!-"I(( e-';G}Fu;~Ȩ`TèY 𜿂J ڞG9Ye曺TCu"5|!嘱w 1JqƸ{lǽ5,KsTQ{={٨ԵyCi d`UՓ) r)ڌ3:X%4<=ZίF awArQA=?aD(NYgUrλ^d!3Q4Y{7@[5nkıԶ܋9]IOO:AMJ_ ɏgF~%M7 ݃~ 0\.,6idOCzrnÆ~yVaHHFm9:xpc4G: | Jv^nɅc;|)ģcBG%RO͐ɭ X0)C|N31KjH J"s^ x,^$" YaMFٹ~칂uQ;(վ4#m[i/5o%1 x> m-Kgp Qzho^#(ա`#Ӎa{O,ies #uGRn|g_~[Ipڳ5@M[D&;gbE.%ݭXE7ɋLTeHL"fwsy3gGG̉;o5M,̬k:PK~?+QRB@<"E6<~ٱyχrk6 @؟ҿqC_@I1gZ$R7N V&h.hPvZvYE>AyoY4/:0xaFbnY lD4Z&GX;7 RPzAD[[KKz OgiۧQp@?m0aM,Ǹi6ex` joFJk(Qjz驀DBb)n*Rálg}1(isٶ۽Q[ň `]cq.X 4ꐧUk1B>&p32wwTŽKQ|{,? Q FÃ/X9ߓ=Si āDУ\˵g3ΩNU}+Fu*=#p曼ʴAϊ~ ljClͣhv&zD~5wkc( &;A)V3q(ڿZX@@yrRoY%]殀m`jDA.:nL0&fGX?*⚺m[RkPcJVkyg*_.?iB˦ګ)޽g&}U 8YW*Z(Zϫ!$Q6dO:W616vjMʻ2B AiFu̥*g W.L:T3} ϓw fpEd[ky+9Y/v/9NAHF̥l<ơɔ 5nM'ebڼ c)4bJV{ơ"'g =If\tnAtgF_'Ppje库{`r*h-yh"=H;L~ҩD+7270W:BH6!muIr2 5/>hWȾ"*6U̝B}>mJ;oaT 9l觕8w e0l'4^ $n:P} ܹ4ǔG/4Nw?48>1A;SaB"$6ƈMh7tvYLj&7yf'N%EˬުqZDU?O.3)h/~l:r.+U3+$%DB}?v׿vZ9FqYv+XUEuz/ ,ЎE4W,I?VapuxN+>%kUʗo;m[ɬXj#s I KH NanN%KpEyjlJ` s?Vs8Q3 ƭ*StY~k>Sl2nΛgXt7_Lt1'O7̴څro%/?Zk98tY!siP&Q$N]dEn#chD<=bC<2{:NgXf!nӲe,M?_<:MG'5*UBY.Gg=`4ޗ K*C2a)=sݽġhk q _2W4bеֶ+[iƠ|Ԇ㠡 SlyFg;&.C|}gWo뻔2zZ=h/6BZ0)\5b䂈Z\dĩTP-y8bF:]X0c'(; w=F7;+qW+DZE K dMDt GYF?Jnp%W?v lAJz4[K0jQ{c$_ ꗦ Ͱl4= ǎ$W@ K*YPځ"$F#_#kfhCv[~+ 7tLRxp@B=IX,3Qi&? vxtC6yurO2`]Z-9)3áRО_AVT= }%`\Gg9zqd~[]V=!=$eQԊr_wr Y O]nmYhm-^O;zl}+Ād!ZXƽJM*1 :xTmn_ag /nQ_څ(SpI@Ҷ WEo%RHH'8dIB:#~Eٿas̬ƓO7qxkGȝ 2}1P[=ɩ PC/QDMh` s`;^I޲'P>| Pd W6Xؖ1v&>i";պl=fjCL8VpoB}jcԳEmt9hkt KIf 04@tg ~|{~zvF%].܃fSͱd$cs,<ӟmrݵC`;vŔX 0!hk3;LwW 5꫕dD 8Xp2k8!h E&isJZT{Gz[B-/#E aP9W*d۟ǏFz*ܔ _i.t(,dI፴@Gbf|H!u3D6~^C jm`xz,RV)RL2ʍRVio{sQ90:!Pd?. Z no@LY(~=l7Oo+"i*ɟ/DYf`͈/%gIpP6nS< /Ȑէ?u&$޹숇:ߛbdv<07FsT^$*"^mf~N.|)áR9 e:\hךSv']̬^rD38umGB|D4Uc7T-rpp.R?kv߼J E}]]vZi<ۅ8% sιg-JG0*TɳC,ะEC/u.\[+ZnY\>1?7u-WWߏ('x6s2mvTI'L>D}]-"#2<x&ꏣ_TޅzM0+5&UIbWI`tKUx~f83}q7rɻũ'mҞP X WV#Cuj7p OQ?NGx2g!"^aAHO s 93Cumqq|-[~@<ãu1$xUDQ?–#TɈ %t6NƑT#Y~{~7wbgf0PIx/X&J2Wna]'޻UJ5fb:iƶ֪,\`TwNWHg'; ʆ|8YĵАe oyg^VCbh_ݖک!gAi!!x%[1H R,݄?dvߩYA7OX)*B[Kx ̃p `-PcFHi'ɾ} }nyκVneyYt/ݣ|^.]2YRq,I-WqNTh%XN̫cT㦷0: $2 o1vf6Gpf ml8ЕZy<'_*RM0}yOe(=wA_%JeM sȹ+E.5sSVinq92Jܢ2P9"E%aPie*_A+tLR5Zofpgj%,bNc+%Qo+l( Y7g[kyyBo$lVr,AP<<r<1Mh4Q?w|}}ںR ۡ[Uz(";9-Vc˽k=/D^II\1zX7媍>3O5pt]QlbՆDv6⤁H@e 7*_Q[h )D{3\P;Wx3ىdeS,A}Qr@.nEC\b87V[]K+QV.|H9NWsᘼՂ 2uziB(9)0Sa{\8Lj1S;ac'~ˇ Rr:SS'&taD;E N(w;B܄ȁ{@!ɀ}x^q/.? CXQ%^)]8F_ߛGfŜw͗[rWXs53;!~ =Ht&~W [7249m}pQÒ7./[g("TMՐ2軙ԕft3Ow^r'rv$x ]Lx0Z y"W:ݦ}w^-0q5v-22\ώY=F6]V]]47Vqm-=M2Ed? y:e }"ܯIt%@$B׺ j,'qi &Z7CowbB(́:񚓖!\Ԏ- => @۹CbX9]ڬ"k~COS$%J4-mMAhue2U D<#.FbWxճS]sN`C]hykcx?ZtsLNFDM֗hyr_Q]ׇSK.~"kLÞkoP -,>=T|5tq%$tFen .B/rq l"n=A* 7 ^U8 T;G뺴WI  /24T Hib꜇-rhlE.@qb+߶^_\ZӦu0$*2l$ L T$7{!|*u5Y'[qynUd$Ll}fM- ҋ H[3.7Pa.' 4;Q ppx |W+$Y;P2;^zi-ͪV@03rClc"hA13wJ:H9]7 L7J̜xm@Jl&c<#,PiWЛR<]Iؐ/v <̔~BtgxbtPmvYP{DD. fd8nFZpA"#RلD~s@Kcc;Qޞ:"10⪅jF;K/N| s&EרTڦ`e:yCѴ58.ވ4 EK)B?XWo%jnaZBOأKK sT22YiTFE..)˽]\] G} K*d'~6 N]s z On,7ތ40IcPf8k:c\"+=2x&:+^p O@ 6<$皾s^#ʿHϪ%j4?BDhwȃ" D[|}3H,'u0:P GryADbHoI.dLF;94DUwNdgdr7!UՆ{ fqKN- L]XYzǨl .AOtH裓hHS~ע$a]̛]S̾L[*z7/b1olIqfKPDEDr*oԒo%vL3*coLpTt~[!V~)=5 E,y&֬qRk JT,5Whm0K\u!ț8*ۣ 됮^.A/pjo !YՀ]@@k+%EcQ \4>,cyrqqӁ55N6`Â*I6:f$F ?'5"c&LrT,G#tCtvhw6D*֋Jv\b8DN|')hFC dI=}SFќ"N>䲫H&޹E1 i80;܀dk/nu,.nyl]%6]ܛp4oQd%U/?:B\ zB!Pz`/yԩTv--#[^ FZ~9ΆS%[ ׉a"N{'=ݣ}l~4֧$2 :9C0oGvg۞tOgd+@M掁urMxVLbUS..Aqpa4m?+_Ԡ6JƲQ0󨧅tከ~D n; 0w ky>Ƞ$Loܺ'cwR^ebPidPE핲N4ON6)&؝9+fj5H'|_lgl\CX93ތT^&3P!x_ErGDn ?H9_`u `$^[d~Y QC@66Sz1/ݮk8BYw:eڶ% tRհϦ)I1׽kHBPQ{XMrP=a"o}@]3AΖ"o2{DޟLCi0eO ky*z1ڊ9ed@YiV۠hq˚z:Q ,mAMYQF+!l(ʰSҝى #@JmB.Z G7,xj\ 2\Vg(IQo\^"x*~Bߚ]ˈ>Bj^ͱD@z;jD9꿋 [ -#O+<^wfi'l' V}PL~*L|T,V"X->_&{%XIːtS|Jy;wc4! 8_wXDڽZ} |i903@[~ Y˿F@NI-!s'csU]:oa9Y#CrF'><4 [EsP{t|ohT6TUmTةuEXZ<B%>$[ Q./)Fosr>߷<&N˗ߝŷ\r<[F6.5"CJ[7+ f"Urٜ.;nHzLht>`V(OWbpB7U/ i {9iSQ6k,='=> ؆Њ*ŨT;9#<9֖,:-]m\ԟˈD`J[!rt!c>zXD||4qD{dw!D5`79uvU֫'[Qݘ|xT]!G)|nG>֭lc.%Tnl}M|T@:уObf i) -څ^-XudpnM׍lec6FIL̂ >q#BR_j4ȱ_gz%gM;iacClFE/i7Q:~*h噹옹;Z+=OK>BbB+ш@%>}"<*`\Sܜy)#O 'x4X/ C t^E|6NSuʎtxl+LS:3YcF X6H O0aBkiXM!)6>r؁ʪQJ`>J,irKG/ $S:dI]MtKBpf8,eJg$f2/wWR7鼧.\ J`}x0q"Sc N&}}XҠjItX?T6B]CҊdޑU l1U`ڵoʿwv'&H:E ϭ~ M+]q ś*qV*Ckwϼ_>/cJ誄΂6ԷedRjŅ rU\Z?a⩌TE M_[0 l=[ۮT!gOp7X*ڳ艄&HWhz Xzl_"]Yt y$MHѤ<>}`Zc݈ȓѳ)ȇ{Ǟ0AxǠ6Bcc7gE5;y`q{g1T% 1l ~DU(LYm,Vn6FJSi+omF] ԡ?wl6F<6K\m}/7M-ƌiK9b,+$PGTi(LSb3օ=xpd+,mmC#k@Bi~;kzK{@/xNhw6S(g nACQ(1$kcuwb\<*Nv}uFItzZ0."]Vw7iD^$0Z"[,!0rV.W8@aplSPLP~D,,eͶ9m-C|Rz ]wZu^1%DlL0_:0}w&ѪjR*_6;Fem՛ ʑ%I77dfg3A@AWZЏNP`ifXF`o+CbG(EsݍόZI ~>/;ڄ5!'5_wŵLe;.%&$  q >lĆAk3)aM+/b;ppe&L?xN͇۷: wnY2?񙬎 _%%k>j4Ec0 'rUƻy٫r=Yf(roY܁e%3_R5}Ab*2li%ZsT-R9%Lܵ{z3?m /b$|'I%{w4 @p͢k(ausij8uypYئknM^5*K>5KflSu)^,80 !9-  Tj;\};B%x\~ uHfPGӶ),(f^elsFq`=sqh]Kh6Sev#!nTY mltAn?l ΔѧcEkjR]Hgs) Yb PgYr<[oQ:Ta-#8Z/$36%[6jG-᧲us]:؝ageDU"m A_9[A%/O;z`8#Qj0Mš9BX2%Xvp6@i0 A0wRR ?@T~j|4n@M{ ^a)mͰNBϜ_ 7m\p϶v{a =M,9#Tyg9ﻆhB4k.7$}B `Qu/.(FX%EEpBOMrd;RG$X`QqCsƺ֠]N-j=q.Fdd_K|?`)=54@8=b[3?1g_.Ta>g@;B6Wt>0)0dK߱9:yƉ+meX\- tՑwZntz:]uTFgD䍷3Od* (3_(~`%FG9t ܹ[@0h Mܖ|bC'z [57P*mFT_1^KRw2ΎESܚ,^8 g-ggocf`;RI1=uA@D;)hpWoN/Bhȯ(TX07Nq$m@IV b?kn zyPlY h=L*T ?MIU (+,D`i+Kzqo ||u2YȗXHv`[؉kɎ (h.5\ɋzp萘2N&C5޳?"u0 7ֻquS­j ݜn÷@wgCdʧ*zRVVQ4-1=-\>IУ"։s()[7y"M͛?&2N2Z#_ #Ip#g^\Il "Q,~Nz&ab0BN27;ȇmY"S)X:j.: H9p9s,&v v؛s;)7q^؅d's+vtÚ%-t),@x6[.oWwTLl\21xb3 1B *IxoA z)cd1[ U"0`XlFLNTz3C4[+Y@ٜcj#QiW?iؤn(ՈXۆ)Cn-лNj"Kj0/N F˧{j_G2NsJJ xUHBS[7n^d od-g!!]Y80!]Ȼ) fQnW7hrrr<Vk9:4=86~":qF9A9GY4UjqԬ/R*Vj϶CxR gF^|Z͡Z/6J wbuxQSG0SËལi%kCPNQw}CqR#=f܊\]mEsbժJ8[K qتk}C߶\F2_ϵbcR偾b961vB Sg/LEScSg'F?;L[}a썳'7FӃQ3յ(]Sv#qz4Vj):+e!0d?tVҥJo(8:]x TW"U/'\' 8Ԫˆz*H}s] 뼯էvqxmv+鹉2u Qol}/Q88:q= 5]g-j, 0UmEàxgn%Lݯ ~OV z&m{>"|anp6o%CQ 7>]Мx&iԚ0΂}%>n^: L(UPkRHvo;G)ύ2TJ]K~|FPs2ki<%v;ר({̀Ϡn*X]Pب7;CҸWݪ5pU+rkp0H V^x׋jҹUf*<`5煙FJ9n\,CJqwR6oygSSl|/VQζe$%^s8K2WQCǽFƮj7EHsoo'VIry%.6s\62#vVqG]5az_<|>z#_sp3~P4G jj@IXRJ}KӉj&)+]M[x d_%1z*M4.Nue&lg0fPso2բ\0EЋťJm>z9eڌ"_\,}] k8II~^_psմ-9*Z+k.}ܦ-]ny!fץTqZ^`TИyjOz*o)xqjK~Ll4H FJ ]VFz Dag/К@dG8XLt"!o!55>H8 Oռݠ޾njE {5mTЪňhxsc=vM73pv J*⦚[ޞtC%!%PxfhX\=y~ikhꞰ'IO?fʻeۺNa ޸f%ɨ]>%Vo"eIއ{bl܉>V[VgtA; 5[?nn[O->ORƪnwB&T1^g='zȭvI:6jbT`ks/M 3Fr ":"@C We`˽p}v?7ׁay 0`/z!GRsyτrw.Ur7cN,^|s4ХWyZ 7*O1``+q)#2Jt^VY"w<9)},JP/A&h/kЙ 8JyYGX)Zԯx?5|GoN!^> c2+116pҸ.K6|= 6:4oq)wX5頃_1Z${Qup> Z׼{Ҏ/UVtw@} ~BzI.Bl| w^;,ةDq p~!J`3^*6%Eu'Tf3JUkFkQ‘Հ**ͨ Z3n\i y=\6Wħͪ'STa( z˰(|dzT[q#[MҟxwAM lQjTfۭPI,`TX).r6u|V^*Vla5|h^gNVF~psC4~_]tb1m\66'htez\}w.q{uh'/Gb5+..!QP;1jXGDJzXn>O"EVg4w xm9.rQF#]T$F&?DYdL !A@`ېᡀ & "'81-{uB`W6Px"e xTxѡ}Vv6u$Һ_"cR/Fѭ}٣px 0'|r$uMDo/8qvr7B~h4=]CUAxLV)8C/tŽfW{4A$5zB`iV:'xwQA0Js(x|lQ]K%7QE(l"T{5`bθvx5=Z5:}^TO乿.XfEwC17KG4q|G<ȇ"`` ]<7^ѓj֧ԟQP2 \F$- ـJྡྷ\"R.gݑQ$#xflale!FnAIPC>B] >[(ZO}p(l)[VβCwISI #A§eDKf6pBO մ5!`#Mw3;rA-Z֊|$(N|r_gŹKJY_oKB2| -caq*NXIL޸t:WHu_9[{O5aV%KZ88\,C'MҊsAV3 勀K"}%`̅w|F!63jQ_;x&{VKy]Oc{fƲCD'3=BTrP)eQs%4|UKf\K'̦]7n*F ˶PmsԷA:ߩ}~=| 1 <,Z:c'˓OBP$rQ|wٴ':^Lcᡮq Kd qV^}:'\ $z1D=p?*c9]8ʥ 2jߏݮ`&}،ӡl!3\䷟0(HoAiV#߷4ۚƞ?) d  q퉘Ld%czGY'4?V7e4gd$ʌl#A;N$.eՕ }3#-UmqFxz׉dWR^y#F/"]~OnII+kŨɉ 玁YictW<9=xfz)6 ]U3FئG#/ĽK[R 甪4x #:Gxs@CLezBL5lr%uFPE*EָF8L >K%iP;&V+RԌlvaNtvXǨ4s"Q8R$񲇸n v.{d21zKY8z\9wjP=șG.J>酟<ٶ#:]"G\%'Hs)<7tRN 'by4{kR2$hWzyw8_ G*ef&νٱK/R/rcKKkc.իѧؠ$V;51'.{ճ*{ ߄i}Z`QlƍLc0I/XKhY C+ޱQ" %5ya[tӛ334'SbDJgV*a$.t#)2Z$4 ֒w1jqm(Uj X+ğ)3{Aɑ ]3#od-硇4,65Hh䮻O5}.\`*G,;dT2ijo^nHKqcQiPJ A| zNr.Ʊ9!֕$7&L71j>~x*zFeGjWL!R=McZ!fʹG&y3u͂ r;F!FIҩ,]vM:l(Ѳ:v-Iƪ9'::;l否QYL8kJ$(p=}RJv1eNXHu =|Gyq0Nە&/aJLx'_֑m!؉MY$?jA`N-?Jce8s[ t_ixvD [4gJ2|[6ѧ$0q4ur8@W*t'"1^RN)H0bÄ ;~ Jk. ii,emfC]X&NPB3ebjvg;i @ +mYdv׿>ݧ4W!@&ț ]@0\^Wm]fS3ɰN77"7LBYX5w6 JX =W5\JLCٻTkHdZ& -ǡ:%ąnAȫmKm [8ʷy:{0iVĝc/Jtړ!H1elaVu ? q~<ԩɾb:[/jgGG_镨5PԿW+jT17o8DZwzѮMҨz 'B*ë|h'}H/7"%h7@T4d7Z+}Hk)g^%з %s-LSH>h#W!n=. M|JI_H#<)ѐ#*n0NGt9؂TI_Eo"mEj=P=k‰3`0mAkJ\$Ȟ,XhQ3&Q{r6"F2_8L+B%pf( _MTZ `ƕ$ ibYb"-B$1vϾK -yoT@ymy">+xˊt%Q=%8>J'1 Kf ʠ+.,k6枽Oק\.TWM[s_!Hg 2G.EPL!(! `6{'kTzVJ8.Cc-kxX ZCıSLO21$:]=٬6!~`?u8g#e%ztDqR'qS̘{jҶZ7<?`Lp=U%QDQ.)V.]<ʅRH6Juwq P=+ֆTŗSSčxٺRS$ 儵Rڙ턛,?i?<lǘ~\67~ Kfz|L7Vx]^>j ;$b['z7ú~ t >oNo^wlp[qͦۂ16'bB n]yrhoN[ /PvMyedg?v@P*o;9`؎#7OJKVR[V~]b %Ik$3lLc#MFϢ}A#UεOgd~weꆄmgIyrw1 VO},uK{=AvH!Kť640-Ylaݬ(yf[sѡؠaL؍gYVlUZxfcXؐ̾8rbpeEWfTKO7Y,x[po\Vڑ$smXSz(Hձd?aG?0=AEew<,MgI.߫,տJ-PS]k"38\&7LiD="ĢmU~:n.Gir,cjjo76u)+F  -~窝.q[F[Ey~Ko(c%t'>p3 PtR'Lu}l' $D]~rg|Pu0fuQc_tNOKξv7}:mpHTԽb5pӂ)9С¥{Ikc]\_,Vj3XtfYòj[.}3vMiه8tA4lNM@vjtl)7;Hx+*Ð\s=`тQ4ެzՄo+xϷeڀCmV5 5{Zi] wMyO 3}إ HHЛaPg!22r9\.VMk)zuunT} q n7"J0k;uYܖZ!sx?~J!~ Mg?߿TqUju?S"ݛz7n2=7agՠu)^&%;Ƣfv>BihC(Gٌ)wk-e[Ө9\sV˺G*={m-6 an`k2l2Ju2ۜ,ڮAMnmԇ4?Ay#ԭW. N 2*nƍzte`0"ˢCZq 1M;ƄijXLɆ;##qq|H-2\# 옂$7Klƺ~t,8 ;0 FAI1!6 a>0W~$,j$>Z)CZ"oAj@/2\a&P5t>A7P B 'N\n$۰$L-n*jN\%qP'0OKQp_xJW8Lѕ˵r~Zb6rcIGBkVZ%"-C3$kh2A:x]ĶFWЗ&FI2MGDk%]Lt&mK)) &ϽMxn!_#e 5hb c%1a%R.XJMݦ6'hnMpԦr~T1)1Ry+rho>WCeHPſ*G#SuO;SB?vPwϞ 8@5衫>i {Zi`"l vod6Gg Siꪒq4vcڗR6MU SMM\|y #GgLZ@WI4jtݦm6t@pH)wau 9{+ YTIޞm_Ik&O0v%eikK4Ԯ<ߡ a8Á9b}UALaQu\>&"ZC)EMi[esSSk)poV5FJԞ6^ ,l6p oJN:[av- Jk4r(^Nu?әҚm?@ρe''x08Xӧ 5<;'N]j":nn%lB0,JnGTTJٜ#-nTijUI'ص.GT ˛)燺:~HvQm-k;X܄ e/'ԣ]^t> =>{u 9osD,;m=a0V@̃p`܉zt;Gz݄h w~(-ԉ- 4!-q[`cN[oL~ ؋*`;OkLA%@_#Qlw 9+ `9e<a Is噥bs􎧦oE#2zXpK2o8N##cp 5"ìx j/by! >?{啩'D.In]m!PN2,.+cG'l@܈ ˗z}@RSe ΄909?s /+`Z:302zbIJd* y67DYoŝ`Uu?Ok*KJ~gVip-Tlk )n[J T񙌎W9qȍ)V+]zY82)?nԨ*z wѵBXT*CGY|K+^4buvY,%PC9b:cxLOksJk-Vi"'ȟ* ETdIg!JY=9-|GH+2t=ʼn coI. ͕x3&am(m>=NK 6r<G W $l9הcF*"Fr")sȌ|#x%xL6!4 `4D Q_oi53.0½8eg !=0U6qv=][Sf=0NƯpi dӫI7`<1i _|h,"ФKݱ[#.B ^vD_p:LM19‚]T̸zSy.RYy/$:ݰP۔"Q Q=Ҡu0Բҽrս`ڭ)rBS*ՐxۑFHiύ-hojFJOm%Ċz \#=۱&e`n`V&k "@FP&Ls:-mA[(!C{8<-f\NQ:@S#i* sN{V2dDwp`,=NJ?Ve?gj\%(QAkm p%'(db^ԦFLdSlMEOHp/.B9 \mRv_-sk.> rJP[52H1/"~O0+=5A /y1e;o5ZRq+`wMG8}\3Ɗ LP`̗AgFw=oQ? ?gż,S> 1!)\՝BnT/<dGnsR/ҡ׭î (1In M57<:BN2rIi3 1G wz+VypHZ) fRW<ijwY?fA70ȡz+cT! TVj"[3\RmZ $Gv i=PAUK%1ɂ0nS]*K f0*)YEUnv˛`N1lY,2W^FlDٚ=C%C&6#Mm&#$'ٚ@~~Ald$Y`N y@G',F #o;A\ɨ7&+_mq"em?A6HL7pt*OFC]X%9GE1{7(6segٳ*{} d͔ (˪5[?=A;ȏD\p( a sW(JshYm`ջ4}\f2Bd0XB @gFQfNdЙVe1[H m>@@d# U[E1zm|E[AlL/D`ar!9 OW${rKTތ|7[A~Lz41yl?%.Aj*7 @tr?;NtaJ>mjj'%g (Q>o?Oat אPUueϧmh.G%w˔_Ư5#~3U{:>g4I˔(1g,/XW9sZ9 NR =禭m˹^րU +֔@mGߣ&niswSET ^kNȒͶi}F-5hLCϖUSx3~`WsZ oPo+߳іRխTK*$ॣP:M'B$biGx] bq#ǝQhY"d؝m'P_w[;J)U iTzR\'~\9I[^ bˤA(ie`_(Vp*쥰E_(5TRz {i6ޙអk~62MrkgCGwؾ oqΨ'[CqvbfHƩ|mN,^5d㢇 .i*K\qDifĕ(YȢS*+9U4Kjz{2O Vk"b.dF@ -[fenP`ىWA!9SUS ξTq*^ȔBoBKuhοĩqC$zjq|F/_N)ā;&!)S.4Dѹr'|F OM$ 6ܶKLL/ްKQKc{ޓ5+BILr̘@**9Ԛ'ƵJ =QcRf4;'xpօ޵+ ٸA7正mFvާb1:yPEhZr6ܞk[HuCy~a=Ϧ@[s (f㒃U&'@7|=s !D * inoad25SVBJ?c) Dd-֣N ={Ȉ7ύG(I~Sc:hE (>nfQ-E͹1՛eg'"QЩOՒpۍ 72iFNt޲^Sբv0i,Ѝ +{*78+ȳ5=7N0ʵݯLzr"{9߇bPl.NY!x}l u Z+N<)8Dfg{(NAD 3l$;dlxa \b:)Q0C+f %d{U,Yg@ۑ2df=%&M~'s.8],I3ɻ-4 {&۳foÄ(]:V&uҺF莰x_8Wm2M\W JJ@7}!;I A?~~DS}!%?QurumMqP>}]OU&^w M^_EBؒuJuN]k.`rLJ02Qb.6 (~{{gF ]y۷q2@1s 6dJV_ wpy L` t (aljO@›SM_NȎHop#-<0Fh"i"ʕ UZɨXl5Z~KR<8W-G'˳ym7Ԍ~~_H"-@!:$ckbv-dJ:?@ 0Sz?qV6煨R1]d<4٭LJ3Cb#u3TZGڿEH"j_\x 1۾jILc"ĝ`s.Ra3A54o΢s`5; fOhܺdIH@S (Fk`v,=MU|̀"R ;|!rrO ^= leîʣ>խӸHj&@++{Xѱ2̊bhʿćhIIMl`DZ"*7lKȏn~Nap8rdil#uw$X7͛#w߂E]Pmtܖ7&IWXhNǵnO /m%G`_uv]iCp _>ᄿIy=eU'^EHVM+KFw7tR~yrzS'ϙӧO_|OG9}ϫOyA@XtNq:^)N=P^/ʐBtcqԞ{䠁]N@|H9zva_ڮRP̏ϡBa7$#~ ZqThfz0Sdg$aO Q{XΤtXj6tF’EZ 9̆-9ԎGp:VHkCW}H{)sig4:R~%.éd(Ćd*,9OVoE͸SUd3{SNVR)R3ǻE(N cJsKD>HO"ESs*7.Wt42)Ux BBԔ߭f+96IA ␓ǩM˥QZY8 ֣6j%=~aM?fðؔOZ#D4YSdG)VI"@w c(u(CLmxp S2NLv:=]Siг]Fh/ Ml/i&%g!-qmNMpdɭ)8r_>*.S\бUZ? Ҽ&(y,NA=U= ҲzF?˭J<O>Nؿ>ǡ]a߻ݺ`9:xryD*N؛'a@3/~IIc#Wi^k%w1Eo=T;rХ!vnWoD38juzWxE=zEܵǶ2LJ,M T/ 'nOp%'KkSS]%eݓYw~b \ k&d'Pqnd!W|q>vil Jm]OfK6^I37R/*Je]_\\4.C(|P6G#q)玳E3ЮVvkAi(bΉSQ->ugv^*1E4rs{1rFAmM5f?}-g$uN[)u㦎tNe']+5Iըֳ{oU3K;r 0*G_*f{TLW,sa6{Q/g}R}TĵVC+=4,Pn>l3MM.<6@ĥu׆:lI7%jce< ҥ}'{JNj\y:B% 6J,L7axޠ7pFh(4vjү2>!K+}=3b;} Kqc2ya-v.zڳ+O=b[LhZ~ڳ,3A:a|}8SB2!3LSTwZUH l e◯:=b_4(."Ed( !@:zҪS2ֈEky)t'.\pؖߕQo~L˔q@2 pkVQmۍ3k JRX_ThkUA1Ujr<۞U\Y*/4߷XL^fڞo5ٹ5%._no" 8{ VA,՗xTB5oݜV҇IB! tW`?ЎeoZRqRwØfϺpq,=e8 VjA҈|?\,ËZq>nהtl5 Rz{I~ 7&Ƨ&T2=Ax}ylb5r-jeQl\.N:}ͥp07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000b00000000TRAILER!!!֑Bogaa!qh F a YZ