sssd-ipa-2.9.2-1.el8 >  H ĉe( U]xii#=W/AO$(l'FQ:u F mhp c Φz QF,1t,1/̭7& >B/ Ȏ`j((39mă%~;{|˒q5ht><2xjL̶l&e(O5l"qwS^Ӥ3̳Z Ah27Cg9ʱZ[%}y q#1Z`.иab*|WLhqf(y@@nJTlKЀҵܳO'dJd+=s?['C,Ӫ~PXhAJ+ `NH0`JuW6VJ=n\s%$ \Ħdj)-y >GlǐF)=Z?" w{l-93J' uКrwċx5 s 13 s lǸЉYmı8;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ԉe( U]<J7A o?Uy^LуIc(R``<󾘽eW2.bkz*0J/ZD.29\DRᅫ[F-Cgp~G [%}5FOTHj10]^XY4lc !EAj@/CWuK?ɠrVtk]^]ܻ]h[Q 粴8} .I+X0^ ;&L>w:.oN(,A`jNIcʲ5aATw k8Waʰ3ZRv[)&-:hm}gNlRyUU Uu7DofpD_Y7PRsgmCʓ@0 l!<4d)\ښW泜B&x#-4^0coU66M-O8AND P4qz;\X*|>g\Dž]b9[{C!| z>`D4?$d   4 -3: $ @ x   f4J\JJ(89|:i*=GH,IdX|Y\]^bd(e-f0l2tLuvwxTyN Csssd-ipa2.9.21.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.dx86-06.stream.rdu2.redhat.com qCentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxx86_64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* ^K"( (AAA큤Addddd[d[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../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.2-1.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shlibbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(x86-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.2-1.el82.9.2-1.el82.9.2-1.el83.0.4-14.6.0-14.0-15.2-14.18.6-1.el82.9.2-1.el82.9.2-1.el82.9.2-1.el8sssd1.10.0-8.beta24.14.3d@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.2-1.el82.9.2-1.el8 .build-idca169ae1a136e2a807890aae52852c3c2df52bfe364df4e38134ad3bbff8069bc2c369cca4e4f0libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id/8f//usr/lib/.build-id//usr/lib/.build-id/fe//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8fca169ae1a136e2a807890aae52852c3c2df52b, strippedsetuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=fe364df4e38134ad3bbff8069bc2c369cca4e4f0, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix);;PRRRRR"RR>RR;R RRRRRR4RRR R!R(R6RRR.R5RRRR R8R'R$RR R)R%OUPn^%\H%w}]5~}ܝDv-?hmk&F4jqv_cb})s3(bqV2R8eL<z72i9>$7?c _&oXH @>cEř? T 4!.@ӃBϪҤH;G:q(QbZ[Hs %rˬaQ n#Ki;g@1VQa9 2vIa;(|4'ɖ4]g]rxOd:;^zＡFZ>/1o5r#~clLMjjeA%l4 Zb Vܱ1nPо xpdE8GVMdB |r3y6r-GRŌ w(ͩ i@g7``eݓ&hkiZm1܄rI/MQ,y/8\u#L39r Ď/ Q( uj l oNcm ZZ(̒秿_$RlRa(I%$ Xu!i=Xıxc0Vqh=Xgݐv0rziXy ΤWI7v҆Q$6*N8V{:ݎ8Q!!O5n7i!z]e9d[BF!0ε<Ȱt'M/aUhMlP"j,F14"h 4N+uqV])s4ɣc+U=H61 J队fHBG,h]gpMK3֦hd(Tta&l?:ILHƨf Gwi:0€o|)8&bޛF0LZw(J0nE-;f%r>ų5uZY*B:L%Y{CEiܰ-ȧOйdjTf!pm8c&:$,f-Dtd#'x}klRaĄk6;4-L_̱y6Zгf&iO82gi1Y# }MQ][tƻi':]Ki#OgvZL{@+Bq=eHw@dprȺnpю=*gQ(ja\w%/SsUnΞ o{-5ۃ5{n|p f< sqMW}jQ[<YICƀJrAn d>34GD4 /pKL1v!{j N+"ao|'mUevC5i>.nR.gEm8$} CNdgadD(̿V$;< ()*`Lju g?IURV61+x Vr Q.Ku,4Fxy7Ls(@яp轃|1h >u͑[)EHF j*|r 6A7chLRQ[a9dγ NjBSڅrصĂxPlsiO* _hK ]\1ĥr[2008g.${|AI.t{|Yzr/ : }-~$V {AYq %x"\e#q ^ܙ 6t ;\==.:Bs9z/^^6~ۓ?]LSv. 9OEmd"AR~WV%%4N%$yШy`KlqػȻhw>X6l`ػ4%/wuz-FZW 3n ,'?3+^Hv`l4JډlDZC}c&laDn^Ki(BJ?΢t4$ܝ9sWTFH1g1wӇmc#NkwU$[pGS$pgT69b ıHi[&0MwRʔ|gytAoӗ2Vtlv#kN s~\Zj/: h߅n VZp㜛~I=?O?;#TsT5l '?`zhtFք=.lvu^ճd[Ec)R5_y$R 6<.z)2yK54ChMQQ4ЅGZ!gSMr*|fDֽ[8fܟ|%+,7`{؃cL*؏[12#N Z>17 ek:#Wmp]17к^kGءgJ:=5(^~ujm|4J!KMSU9 !(-b+_y^u6BP^oQ0bHĴTU}#[[#o4R-oNvy`yPrtBar>cj5_ߞ)=LYQ@yiab6oi}5=}jm*HSp_%ZųoYKh3-wog)*W d}@*$}6YhBz$r0 =Έ3Ԛ~ߓOd}qngb[hd2٧MRʷW j!CSKK<[V[>w ƴ 2_eR4d9R~[TU̜31`aS w_xV} MuUoOh`[D˕@!RQ"Jw>lj7~_ULIL-3G.~x6# /d8C1tL=Oξq{E\P;J@-JIkdL֮36KTza`6zURga $=X"%`ΖGqSõt-J|q C8s7EnTMR.iK7_6RqtFWO|8QD>d X2ح~g"Ƌ|eOSDy=qD|+u//5_,0I< QV6vGCqhnCeZxrY0Ԯk B:,9@iMpPKILJ n,J "dMZY~_ޛD{u_1¿k !.E-LwUT0| |Nce-N=drl'?Ɍ;Ymk 59 fdI+|*zUPKAN F dLsnm A^np1 P)O3$[`'Z4Q5}i-(j8+v qޕjV|eȥul,E7hEߣ$+6 CaNrڋ;@@ZFEJuކO-rAI>7~)a":!hNiy1Пy԰3ic۶uY | 0r!Ujx& kb0i;}޲tc@NzN9x|b xf^+ 2v~+$F82hIpO_=m[opd^ QmE. J4a!@ȕ>L_I" R@r:˗@bAlC4Nep0`SFXL,6z0)a3^)t2zy*i C3 zvz{&q0Hc@\ $)x\RhӱF#RSdrF98? &n:NY]-g{ܝxا(gIM2:͢߉f΋G1305^ZhyBgq \ޞF{~volB(rsZu@Ba`7u $!b:;}&2S|70\2&zVmML͋ ̯ fJ`KzX{e!gfrJ; jw _]_/cf_KW9B3a0!躝Lr?X[_i獙A:Bk֎ꝠE4jmBgGH!T`_ZH[]T0d)D?ȡ<\GǷ矨eKn* lޑx2 c7uiWI&\|/T]&S0x@N<}>%*ح4SP05.@ ^ԣvыDŝFcXEwGN͇9&Djozd+iVr*E}20jem8wyc3}P)%gI}\h12%:_z(wydsn4a@c/$ȗԅn~^@Aܮ.Ptŗ֑VBY~Y{糯}mh?3vа@.)3iqNڤW^UYP<$7CţodnMGaë1|SыS`A#+ٛmG`bF?2~(9z3ԫaS*#DlȈs.l-$<1v_L]!IK"X.+uRh{F7UϚ{@"vɔV:1G[lD_]nTEqc75 yo'fDs%f\3Q[vY祎|>%;G=q} *LEXt+X\v²Uu*tt+فG䈱7Z!7oU~sGJ }NN }du8'4Sېzv.n,E˗R]e< Xs9׬ق e} ;6:ѭxa, .>)R/x|}/-%YI).IWY9[E2>ȉ d|7o_Mm=$ 1gBp%?Ս1`h9e)o ^OO9崐(}Lv)j"3I 0Fn۴eϐ)XS d2vTh:P2 >7Zo7e'c)4WgsCQ0#bm]3}ǰK/2턪}m 檖%|܀6|6b<ƋvS3,( 'Wi #0T%o,t9>OÈs05>$ϛhVcϛqOfq*Yl~,IjQ8 chz 7[y 1(^ڝD -%oV8Ж\䠭L)AkR&H 4z}|-?.g80 ?u[C߈0G40zU=\zGX+5vr8Y=jUVYw}>@ iPE]u).QVCw߭*dGId\hOTvLfΒ6#.= [խbBF'p24px^s~!gImSq HA.a%]q Q/ =G`K~~oqY{n|}GMp$NA5*oK\=.d%$_:>F7t(0TŇo Y+$lV C( ` Fyf:WG UCEid (maPO{*WwV$NMj!C_1 zH_YZ(sfM^"4 C遡Lq ( {`5F\0,#N! GF'gx 5/dwi2uT]ySZBFhg"ěcW~B0vp_}>J\AGZNuSx2p;AvmRdhoBl2kÍ8A-Qt%PqD@o%DC'=S*g{M>ܩjbw#I EkW2_$ Vvs{ikC$J2T/[5hޑ#N} J>VIih@Ŕ=D~ϊH~_()^br*xNe>֊ܙ >K8>"/L1HnlnIWr7r a*(޾0 Fp}1A{iGzKDkSB_.\ F2f`1 ̇ΟecP6fۄ=F矌 $W&tԄ#>JZX~9'Kڜm=_a݂x_x.5q^]Oë*c>ш4Pei6+jB$+ 1sEQ\T-^%eу~<p̪Hua_ݧB?rJ%Ĉ@Qi/[cWX*h/y#u4Ỻ'[ @4H܌chsCMߗs#!E1Pm0 aEJ/B$rK8[ 'Z5v 7HjB3;*)5Sp8A.Y$I?j+IJ D!U坎Eq)pd^'R "`YZ$$P̜wNu))dnAOiH :\'`ēj"AyO**]sJ]q߳ؒ/\^-%_Z1μ(g׌+ݍˈd,&MҌid8 Agz'+ʫD!ˮ`EL)qPT^V%)GKA7cdn.^yNb nIrOIh{gV:>E ?@q#$%À}~pT~F >tԨu/'OrbV!|Ie^!n8ޛ|wUXX ZuG4L) (0?#{f놮v\_Cw׿#?#+hGP)1[ZhV,{!} TM@dڅWAF':o2;g͹BHӨ^ς{'L]hTϧvDtj;k=#^arb$X*\pS:TYPiƪ(~_(\0i yl4pydzA }ueHZ UE=.WֺhLe%ƅƀGֆ@QHcQ=cqd1@$ zW%hPtĪ93nސ[!zyAjF-S!=Ra0[^ΊQxw!t;q b:i7<8"r[KN/ )Ӑ;DF)fɒiZsE*ƗЈB yEMb,j0 $ߡw-5*)Ż;5^zϙYTR_+K%18Pr Ks,SBXr/7<5?hI4ZD?Wd96) ͏Y]ޑσZw$1Ȉ:zH<b d8}ޏ *JBQ4{A: '}no+Q&"?#qV"^7V9KNjV7_>'->b#t.4r((bHXSN-nkD4]:dB;S0aQK}1f2A lm< =dMmE[*~4! TK-?Dя2=-YUJaҝ nڧoݦ;C,iD(bg5ʖyExn:":r$;?eg^* j<1xUg05@vk7Ufk)Q<{l0Y?~g' Khs;Q(g#eib-cZV:}RVgX(mzQ{mh~ʀ>$種ٌcMoǔXNUtm-QM2$4["9Z0SZ# Ze!Dte `7yNX@H6kо$)kpx rLdX뉞CxPCeԦ7/P̉> 9jspt:L5Iŋy_US{ex%tWɝrdP]y7)xV|v0O}5kHlGEFC*OQ~I XdSOŻPcY&>/_\ZY ]ţkFg#V ʲ.8cs7wDNУ;$s#i0R%&B免qU !bgK*8sfb~Nt`_+s\C'H3$e|m9$UlVLY'Ewkk*>‰e66|׮oHO;]bI5ٌ6RLS E.?=aWjmwZp "MaiHY<{'IWIm/;1hٺ`P@H> 5#K+YosZ9"rEoW̷&^@wr0$\q` P$_Liu'+kM7ce.?(>Z&>M;v>vא23>#Rle*pH9zZۇ+@&BLuK&ajԹb=ҏ!ND˜Hm^aݩڋk]p~ɮtM1C?#sD ;_Yjr'B疃>DH1er6kRVRw"r&wN~̐B'ӅV% l䢠Ɖ6"M_ CWNu@\q~UI'!ۨ-ķ4}M{&/b8y`#- 9C:ƘwJ >! (m1ͩcE'YMk=(si尚sVD |!;щsG(Ṭukt^_ˏ+_QO[0y?k27Jsqqyax0|{W;d{}K 6F 7zWj; ~ o?@3 2M~ П;CAN.F4;(%+Uw^mlwgFْ~u{B ͙<*xr)Hh%XV$Je[>T ѾOe*`+H~R+7bZV!^V0-EG.uR_qzeH`e|:5Lޒ~b`I*O.+͙&;=ٴTtߥl[*xX"* , -35mzic $ڍ*U-@OY2GZ{ r8 HQ8Dw.g_pܸߛ;E:Mej<(WiX bT QME?GG5jf|kSnx7X^lImOhoM.YOi7』C K'=(@~\|`d'ôS՛<*G`z ;:mՄqv_P]{Ü.{G%n*w=nv [xɇ(RU)=Z9&JMNVcl-;ـ!0Q~ڃ̆ 42YoZ\ Q" f)2qJ⒄܉VU,o9(j Gt{/w\ TA"uqsۭv8Ef+FoCGDx1\PL%!3oNLx: _pDPJ5*NxG@&`+8[=;G׶&.Q-h0{fy=3pR}_վQ:f fUH g](xö||D3Prs RJn7o[8wcMo3Z7" %ad{1g]` T WK,\ 6{s"H;60QorHI;wIYAlf/ܬRJDGMNLIak bA;r:. k@J I:G tk }8m"diU +|Wn͒z6%~N) !f@a4þյۿ]pMk𻄉0.5.vÍA|sD&Tjy+"IcnAsop{ ;$>-.9N*qj|a_+$ ״=B`bFDױp^tѪgn }wCc,9L&b4R* UfnyEkVf{baCcQԔ".wɃvVΰ'іE{6#b`v`@|οkpyQIpG*UYq<6a~SrS̜!P~Ÿ%TϺ EC0a($X&XBg{K"Hx)bHGƪø6`pWSw635vFThjy9{|^hW-P r Ѓkn5j?zN:YNx8տ.v>>38P[WemNك a%}!>uЗ{%?j#c|lo졫~:[ te" &j15npCO3:}VxY؆Q7 ,;>} WA1hz X>-_10KZclfl[ wК5Ѭ*$i~j]c-@a4$lK_2V9ߨCrFNy7B.fUIhr$Qӄ͈-mRf5&}i-7gNLYZfRqg],r8z(pGp^ѫ.S-M&DXd%oi+94&$5"}S,J tW]HĨ~Oe:[W>Y-)F^dwk:cDsR-XM7л~:2|ٸGX/%~ZS'qL&h ̑¬0'\:wq: IHE1!ej#<.yTvST0q׾W%"O v( / A-!7 oc[Lެl8<յ5}50M,84#SexLap@5=-%ߒdk|3o,ZAO/&=(BRb+K;Ge#k4y tt3X1 &(5bC>XL`3] uv-n@yKUjvx)W lXR7SbT|%:ׇlĔ#(@Ay6ސXO`giu`R`ǺzJ Y]hEME:%ke&c}D7 6k2y;bs&^B%cir#R26(}<`cY/ xdžHюhw@&8$8WP̳sQ™4V_XT5˞Lml \_SQKQt5±/nH5GvӞyA{ >^}AGb>k0d":ư6V ]nρEta^VKŽ&mB8#onԭ?@EUOV}d P_sD[d/@mNo Čę:1(˝J 㡼ke2Уalts+p_h=Ʊ^&`*Ǯ1\tmGT$c68[{/!׭LzlPG_SIpa>zݧVu`Voڞ{<πXekk΃8(M\"C6m3h,wr1EF#Ȇ0.VLmw!kПZu{9!q kƬ ֏y6݄@Jq]@9&j.q܀ش"K&f!qεw¿< m a;n! {JskjJﻯWhb9ihNdߛ>t<('&@ P> e^g[Q(Sp'l'h7@G1 qeyjTR#2 VQ@}cٌ1ATj]x9zEg%bP ړ*vRh^W=!Bj j Mӵ3?}uuv߯$-^ky[>LEG!.-Cv3E'.>s%vx]t2~E*}0Yjje=zTrYR JԪf\3bՙwoGS^~Em\$*x.&$m8="qi'f_xh ]B~5[SQfwsubhE *@w={bnr;J*tk3HD(f>Cy ū뗥^u6NuK*_2;8dڶ}hA ~^y;}3"U.Q9hɬq򇠟'dԾw@XAa܉JE 2a^5#Nc&M[Gn4a2xحvķ9ͱ=^cko]]ۙޞ dR<Įޘ( F 2p+HA+Ai+Ӻk9h3eSh{]vOL9@F[vQA_H^{oHNxY9f[jzZVbo@1B ̍Ot7fӅ$Z[8^/an]- l]zZ4w%Y^ɠ(iKˁah'6u9z;X8܏i&,O@ǚqTMGg]bZO3k j礏3t<.f i[k. !B^d:M)T!NQbz{wE#jG2$ƐjBATjl]̪%;;9}]h-)Age1K]cA~@Sw<leBc׵2\g57Dl Y1?KMiYI17ކR [| -"Җ͢ VTH| &؊@\t߳ӧ4O{csAprר_9#:T6Rac>B}py瓞!Wlz篖Yg|&#Eʨ|;[ &*nhVzo3~p%]di+L˨)u(Kꞃ77r& ZacZ5(3>c<&0owQ1^r4l[&؉?YǨF8!<.ո aDy}nE)Ok[ي8&sȫZ|9˄ƋG.-y-A(hVY5FWP(]9?ᄮw$ά%LFJhyۃ\F4C4!oߔ MI/^xI[#0ZRz9bϧ~dbWZ&@E-pS_013xUxv{ByP?!l=>%6 4BHq o;7@&}]Vtwl'iUFBf(E@E&0|n\\}ռh DcJ-x!mMXtebN>~NYV89L)Uv'r7mܾ_yN>$;)OioB(U qVs߲l/:\9WČqjоe$,rdn xVA: vB$gGڄY9abuOad\ÍEN|vwp'4{ߠpEt0%Dz$5K?'ěr#zZYk&_%tf.; ܩBe:a7- <%l,r9u{,\S >KD?&.7SչOUO*FiAm#3wKņăFqiS3+ȃΔ8׎=o5%EQҨC H{Cǣ8NxQ /e!αż24Í$F2X^y/6JF!t8!J=a:ZP:O_[ 2-j{yÒD +.=a*'Oή TѧL%'qt$_T!4lM>IEVw*8nYj1e'aQ=RNuXn7lwa+cʈpY>Ҝtu}2&I #pgp?zÁafHOPO[qOȨX 0 94px9m6;K h`R ܚTD&9'G.񕤯P4ي:~Xǃ;B£P 2ۇh;$0ƹ>D 򥪂\Bf^=>9{9L6V"?63V _Q<ܖc qFB_o5! F)~<&ͨ]^֏+wy1[%,)#JBb8?S8x74a݋2^@J@:G~.;S7h*QBKs'KVѥ{&p#\;cS5t8;$M]hxDOy2^?Pf9 \Gbˎ L uAWmiB~7U;Oq[e|퇺#'T=w#ODI[{k0kPXr1JEځ(_M͛=u_~k1 (}}YMY}=fnf, v\V1F@\mM)O]4eJ|g Lݥs狋O16:luÛ,uLOX2Ș^JK1b㥅=lCԹ8nv~(T ݬK|236R75Ru!霧^$25wp+D *p)fE(op*dsBМ<2^ϲM%/7C(sZ];涠7:`s"Cט ȿPfSSIgr;͢|!GG;2|F}Ƌ]@Ba H;՞Qq؛7ra&~ЬJ|H&hFͳN̮W4z5  ݾU^ (@#l"٫@x7|65_pOzKL^ۜ5Zar%<&pQ lrxç"/r 5峳Lk" QN<⬤r1{P*Փc.)hr3cb=ʑǺ:M&q"wc?*oVUDnnFgVԮhh_`i 'K6ܬn&r2zIǯ9KsU c- / lǒa^Nd+,&x N"'lĦN ) ꙧ~ˌ_x'P7be|/uydתFHc` w@($VULz^ ]yYVU7z"bv2GB{k.g I njfX?һV:J;=jbؗ8ǝhKGbtް𐺩<ڽN |E'>a*_㋅ xlFmJ=[=r1jӏ<`{.n;*x,3M[ۜAa>} w|jnEacJ}Vߠ2ݟ=C{mЅF VQ C[|ԉ!Dڒzw߿CiVs?L^.T[3B% M8p@aӁ/8LU%o?=NQ 3όlKLt6E M}ϞK@TXx}8iLHH"%8Ym~ C2TT*Anڠ{Cy驦Zx*^o-g*`=jR;Y ns[s>1\_ߘ4YJf 1fhԕ&Z)+C:l, Kc =ZoG=马/N_xNCֹMя^2`ޟ~3 Xq@q>4/_KC#tl d1z.a0ZrqWrl+/3ULqUa|Ӟ~2ସh|bvg[;) @27bl,RPVM`66E̙WK^~{$ gM]cJl"ؑjpSUNűڥ/ͤ + R)wE֝Nm W߈h zSJ^څ> GUؚ]wHo? r=ʮKM[tFZmvBAmv]y.a@[q+`+ <;J3Fq\T\_Ha#M">?e?>َ;́ü{oΓ^,K@=#%@!wb;ONv+Iz.Vﲹn75CˊIYBrMq?"E*-B5 zIʪ$IeGΘ L H,SLSP&P|DW]׀fD#dXxQ0z"mlOŏbPĒ NHK*}%&c M[ɥ8%FAc7(&2뿌ԌsZ&ݬ |$Q. Jb9GTmLb)khp҉/)+Ai֟FyجcP ;؎$0ƀ-}L ,NI8Mg2Sb?ng%;z؆ 08KSǽM g=Oo]l Dh8l\yvV^#e|~f OO.k-PL)ϒ:F)ܗ =J^s&Eg"soi'gr5\,#}=J_3^§GGC,}D'/\Q [0ʪǿ#hc<[9z& .Re,xm 1΀L8IJ\{I}ĬsE'yJyA0 Zã!:!/SC)(ø* 8a(] iɗO'dىuYKl@֢o[ C\>9v]I+4q jDb-3Ym0lj/IA}Sil1gCAƑ_}KZG(HJ-iB~Oĝi|hЫ mLwFtDц֖Q{_0[tߞv^> hyIg3&0hid03V3sjJ`h&Z;4 )F0nu#8=mk4nw[f.i"gj$T,חPeHJv\]Uj@EuUhDC>\g]r݌Dr0|G '\֥WN1l.=1N:k@n\(PsqzeZ Җ>hl{HOrΖn"d?t!P&RXX2Vt(R5}7]y}خ')А;>%YHC8Y|Kd˪R׾GQ6_G tHӇn͢Xjm.Mwc]~&*"Y0D=a$C%0J67FOٴ6ܙdž<{MQ&!eucC[@TMIЅkKosǗPڸ%)*,^~E&P? ;6|$.2i<2GMH7zm!vL'^]+oINJ`S[><;iOj I@ a5{hFIJToSE.򭐍??;[lp#" ~[(5xpaFYMWX)20LI溎XۺJ҈XOdrx@hGGX;q^Vpi^h*"[%~}e8U׌̒O G2z;E[{WρK}'=>.cOsN+((AG{֭r ~*|7ׁ+ Ўɠ\Ǟ\|H"}?ic"ΡxES+uA4i8Q{8h$Wq %5Ru^2@x4 :JKgU6%.g,ɚ.iDG?ËU 9_N!%29XFɦ.qRr`N3.u*$ Aa!{1yV&h' l0? o%rP3!$e-FFWZib2R/:5  9qoc|tKI:okfk׸kX]:ZW  /{n4Æ;kǁ|YScøE(f.#RM5ĝVXb6l5XlÈV)<")iPD~5f c[Zv=ޡz}YǛޕzʽD>_Ӫ\  g/>V*N&1H%W.Wy?*沎gf!`(soY F\lGY% 05|>^N.mZҚqu[ԥM@OQQOޅ\9*@m>1,f/{8̡֫* Xk*'FE'SuX zn#Tz[(`6#{2hY"c|AMEKU9RER7ge&<e[kX$>4Ÿ @ \ [J"DmksC=iS-Jy,WR1\6J]{ӫdsR(hτ;tZa0.@C 1&Qh'Wv7@7#%w"?pf7 4rtɪ 2n#h¿"T)`=Ќ&}m =<5ҝ<C 9hnH30ᕻ~,<4^Cl3?E7&J_,n'~ˬwAiqۃ7} %Ȝ $(&ژ1GtU|?9_^4 /7e@ۗl 1k~9h~"XKj0zSnB1uɏ9$1E ҭ/WO}رm7),M}ϵm>Iɦ.Z(AQk5 9lOo鈾Jy/nҼx(9Ohfbw6hi~[ko٣6*7[aR#F|{+fp+'Q[ʻQ(b'?b}~G#X^Kw݃XDv PgX؟[AX8ءBD7\WE34M!ww~h\>;!XIzqnd!l>ϋ,aJϰ69c&t~dǴ4Cm4 PO*4%B+}Z-,nٸCVl`Dʞq Fa̒D&,B!("_nT &8f@LdwjV ^{j]79TU hA-Fh~mx V;cyb J',{ <%Lԗm]tݝ$='_)j]'?cҖ>p]߾SMQRI8?6"J~Bdɼkϟekߒ(& 3ب %1m$t&a >>`@9ecf5^UEZd #S:#{JŽs$cl# gRy> mcUG je.y"T0͎zdhn+듼kߗ~WZ$ v!> IƇ{ sj$FA\ ~ʡwZ~SL>ol^A[c?CW+jmH<:I^%<AcF<̟/lYHpkmHRx7[ܒ3)y_мKܟ*>@ػTͷ]#-zdlqpC0ipcl;}ڪt3Z4`CljRW"]9-U.KU[%\).4&өSE i,E 0 xsT&١R{~ҫB6Z4˘pDW (t:  3Ύ$/Njd]w /wgv-b"w!NJ+j z= j:,N؃Jiq ( Usk֙'Ϡ|tcIw]>{UH9c6jUCkoۈ#X4Ғ ??#;.YhLˣ?@VG6jV̆+P[igV6اltZ$V!D\ bf]Lq(}1"#Öy{&鿊Η O`ƻ\(GNFd8iw~gkk:8^'(cgA͗F<>J>56ѡCOA }ZK`*43 H]{)͚>%1CǪo S,)g"iXeЮ !EvCf ,-ARm$ҕ;0*krXѝgHvs1j!L%;9s |C'ЈHq_j 76G/n/f# meB*lBp^p )Ʒ`53 %[ЕF:ߝ^4*#Ʒ$XcD2OFq |5jGGa0ol>guǎQ47m٦Nxݕ:s_*4bs^]\L%>JY0Eh!2Bd.ao!?%0܆j~ qcD©Ք_>vV#Vu ogclZ{ft`o8c 0h b˙*bڍfu֊bcljeCƒm呦R5ꭷ8{mDܨNy+:IFէGzor3$,㰍 N|HWGȟP09v "ã'ϧ$]d<.cL 'Ocj…@󭍩j'2^ޟm,:g,lY9o:=Zzc`$75Uk2MfNga~Iy"m¸蝋\ʋ$ȩr_AT"*Sd,n7R<>R[t2Ba镫[v"ҝHSqvE:smh%760=-cozG9^.ɳ:Aϋeł*1T㼊kr>c~v1 `EN10 Xfi0OlD7Ehw, R-W6JN#e#.3 ΞéD6s:v3IPj(IGÂeuؙ ;K=&xEY ln$Z|EgU%, ? l;c 3߬+G) t|6TZOBg7WUg./EH @b5{@7>b{W!㖸d" ω}ܑZE&_֬ m -V٢~ڡ)h:qWΪU74"\-J>`3B6x˗6m XG O)j+MXA=ay}v܆q}r@ÍB 4S;_a6t`qhDހ4_FIti,_^C`]{TC^3Ωvr mUӕ_QLil`(Rv%o]Ѱ6 K)UL J3_CjL#Za.SR"c=w~"o/_ W]ډfHU*{!7aVXFdkr|n@?#'rO-}v h Ec?Wov8cˏ2l{׻!'#A=>tB)`QHCY$o[[ۚ*8pQfIS F. h|['yА[Z )(Į2CPz*w*bUS%^~O  KK*q8aCl~!XE(@{0Dwk2V~n3ׯ.>gJO/ `o{Sq  ^aO3qDIpߚ|}B7_k V pimɞKC^aR;ssq֘dc>`RLG| Ջ5B'獾C #*K;TQ^j2(TZ`V >O'J`2F:bT@qz;yu:ؒ\7"d^K_<ʷkBm'sfTWK}Xrn. Ƴ uh݁fI^Mmms6_%ИU}!j$D"gȚ̬4@ @hZN||}cWbAE)Mo[0ف*j1(ب9PN~2jr[T7d {6|apKtR]x`li0A y0\. &;`R]gMӽ'frQ맩ĤѢ/ 3˙ IJb)N)rT{1V̆mhv 5-=]c-t$? qz%U 8fX!YIٰO"F `W%gzx =wb+ZFO(whEQ>ǠD8Et$,bw t#@ LÙe`?a${ ru%ȏ@57^~x,t[.|MH7=H#ΪƝ:C,"QK )eツ3kz]FdeBuq(5r~TJiŨb;[FFɸ _<: FH'D^8B3TAдsveTT[Vd u/xx}TwrLfBMwWHp=34bwc+UHXrJ bVM+~lbv.ܜ7K$--ihZ3cF7deqDrcy'-.g0eI4$%nn ꤋ RSEPcSSb(f@Pa]w/_&sDiդ[J 3͡uW[AU ^崟*AB$cW>܃BfѷI"/{'gS ǕSG̙@ԣJೝbo 㻹.s_.N(Aˋj*aC*[]PI)@d/型lԙϖ)\Qp>^kk~Hb `}R: ı\BD0m 8Aٞ.u<)Wv ޿KM)7p%e\~\3,V&I`*r{2/K ~oIyK,Vޡ7 hf"^V4d FyxB x3j1O펔 EA΅9lMەT4$doz*wT?鉲f󶑀pW5!}wzUl">wGWg zBd!B1ނEf·n jOg"^8 Q8\Og%ծwCDLfnFUkc 2v=ڹt6dyz N% N|rCBO>rQ^ x4M J2./ d@ Ck,88^sE4;V@\:a4xp`՗ð);.:87qŁLIgp@%-[d;z֤4ŷ`{10RFmVQQ=*>-B2kR4C4YnɧCPY"ZY+@ FMe8q?!g!騃C?4 `ti_T8( ]Ċ.$YS/YL=9*c߹ @=ss*p`,ݿo:/O^`zH Vwwr'rEP/@8asZz>I%4/f%"pc ǻEQtМAkZ/zӪRjx@^I ̖U]$f}ńٹv{y pBRo*[ .Tg#6!爻YXo7ell;8ّ_>g -KAX,QF)2vh7đCa :M稧ED\:eП&LQZ'X# NĮ*Ӏ]q iK8N2WTc/d-7Mj ;. J,@-ᠷeY.vb9jъU=R`2rkX*^kN"ϟ^(I]Jx\]:#9{Qc4aj4~'o/bCR Cј0SLBIĻڊ@ya̳g;ca,VyZؐ(5aJ~)Kz BSڃsPD؆k]^ce 3n|Х^u\>/ |(lI"Rdr)CM&=ȵ`17, ]V^:Ͼmذ+U#kw[WBY֕I֐NWɶqtAnn C+b2n26&sHRup/!W|Z+e|эe֖#Y@\aۭYRzrvzb)S% fV^vY3i"hGVI}T!!./NtH_rZ0k=ot;0?+}qmņgc]k"F=XN sIFib6~Fdmzo1O͗>Ooqե}T[ SL t1oVQ=oL8咑:PVI;'f]X 'g;Q: q"Z+~&L?B89E'.Vtj&fH$!g{fJpܣc;Ύ-њdhļnWGf%jƈ6sJΤ)@ F:(WKC4MXxhv=h[S7SQ.Kh6_ K&9^V{FPFg"U%5w5wSs㈡0֟\tHϵ9BFh#߆}!֩/%-5f旤*r%u:f;-ދ496{@ޮ _VH+VSX|g@`RZpko6SDVT#'ݥ:` `W$ѿ'!?eLp&3;Y 1DOh-Y\s-GէtŔڤfiFmpn΢XwMTh_Rc~ C""rf kՎח Jغ;ÏC9%wI?e:f=JKnp۫ }f,ja.OC"lGjCD*'ܦ7Z11j|ځT̿d 61vŒUM4*;;% | nK[(`1LU%GWYM+i F 3Z'~OaMx6E,(8e4D7OIJp6 Ȳأ[kb63+wn Z f5iS_P̂cID?:XT|_Tx1.ߑ{cpSCn3:T 'ژ0dcؽ&D_`5HRID䇵spvl=pq&mԒ-i|϶Dch΂ O>B><]I'ʔSqv%l /Eܤ̛RH c}jOaӝ#4`li9k*1,^T&,'-N)BƵrdNnt 5!:x,}4~/@S]0\2Eﾵ9JXdɏË+dH>~?u+t/q)g`?uY6OIHu TPrl;`+)uj@0l-r8T2{YO3 23մG~Q^gM7r_iiֺ6o?E,dOB98(P jp)qk_^I{OKڌ3ЖJWв" 895INޠrZPO(K"D%;(Wv}Qb'䇩6nJ2=NgF?%*MO%{5'iϘoS 7#fWOB|Yl!GS 0uS5W´4X%Snvt3O07l#"NliV3D2FrQ_2tE^QΩD'Lً /l.nMoKR4KC3SX!@غy=L41<8 T4[:!c#e '+ v2P芯W1vqX؟u\KH[FI}h(YlTy/}^3 T w*KpFcwO#̨;ށo:_/VzIHj P4۷uޣGn=w2DI^ͪ͡+6=]b$d2<\JTg1̚E}(xf$p{$J:)Bcg,'nMJ: l3 ]L9:A/:.QGSiY`@-[sxt m?ے/a gƄb9u&|ށ22tZɑS6D=1V[Qk!xӑBr4Â)>`Yuܹ2bW{7"H7xth%3 NJX5U}+w58cK5=jM"2x)ԒAkD">HyI8g/cWy﫪=+_Ld6_X-à-%Y݇p?MC5DiF^sJŕK$w׆N\$7)ތLȳ u2-x|:gqZut/KK{y\7Ka UE9\t3*ô_yߢs7T~`gFe>;@+yF1ź*zaؐq7P is "epamenϻE~Ve" @1YΜ0s p=xZ)L7wܥ(yOWi].axM*7٫źa-Sĺ?ʹq1b_W%L*H=*A6(r#oD4~x4-iU©M 0jʄطNYf>&R Mki{%"g^ڈL0ޟh]?me鱹A(Snʩu. ٤k?bma';CKuA+r.Gʥ4|D:4MIov::Z-ْY]$2-b=عr$ֈD6b!%\)ݎHH1)BDqٻ^Ej1)`ϴ 5R/hk\v`]$߻?.Ș81N.i6|g^$a A~͎eCAl17INBu""@7b(vXg-t3X?`y]^E`P&Qjgj1{DIxﷂVB\ 蹒{hܷY8| yi 8_/9L,)C 9r ,C6kytt |2 \D^<1o_gZv^O΃)aWLɋճOb\|ٯu|)!ͦT;v[8֜>w}s kF_-ew7BRɌ\Y"jaX} 1M@qF띵E cԌ^ӌAߜ2[(})h':+OƓ? ak; hZnt$Y1aAvcX;htѿ5w+)3`- .N_&75ʜyHa%O-V6Nؔn`WTiRT/P'G9?ΫN䅂՛HҗQZFƝ{T@ohfWԟ9h7B_v5l [zxC8KZϾsKb>ҿC4+FP;dEexUk m@ &l]y)6Xa= 3*UIsxwy;AI3 ߅6N.ـ.C7~~>b &C ZĤ‹}PJ[Q\TTIȣOHs%;c{>^3ZCԧF, 6?Cl|Q|zbdx1k@e>K_V*OO>7ާ56LY vˑ $Htum+FB$ OFўm}H"N8氒3Y&NasByWp-F?\6yP>)6Q7Opz{ M:c3ūdJ4tXX/6_*O,@ޱ,6 OC:)NVAEZLBdNsQ.AD4M;%%Nv|",3w$ 1yqKM#h8n_^Dt"Un%f$)ѺK A[ŢWҶG^;VI0(* t|!GqA#3.y1;, כ@)h s5aPyBgebXJp+~%`jw*^wdA>m0wiV-Ix69߱81ų/Kfk~{S_n~o3PV~h %>tXu29Yz2,7Pi+X"o7,ܨu׿> b O|ܤw̋/E`6uƪsۺ*6J@΂zi-xhgNxh)3 8Je'/}6};݉2`!^DjtYQ5z%w@ps#ς甠O9;.LB)KC;ҠY` 1` HZ>Rn+ZhzFCgf,`~[0ȣF}UA*pk;wFG7]jH7'-¦ tVj%5ͼjYrw-Ӧ?*w#E>BQ=T*ȐL>|2%">S,~ۧ q kٹOT*f+uJKf_JȕEv,aI+֬pr30[]Vߴ@[)E~5|f%L˞:6SamHfG5TX(2_ (S*2 VBGԭQ\* o \gcofkx[kY`AL  ,`p룯:<J_k7n;٬¦-hOa7S*F] P "A6bмOCh6}rjq35Pȫ\>:VAj+ ='l5@i'k/<ƗNƨ0k縡f_]v+|$EJ|OľD-LX(bІǵ}X4 e!$碒6BaHn@OMxaCy_6H7/4n$5K&TeJ6*Roxw+pn\TGuỨDc6}jy NLG^yo'f1\Nߤ*RDJZw;;=ޑE`K=ɒIvP8;y075ŭqM,t&œF"NJu;9EB逮K"a\9<^kɱ \fNX1q|YfrYU%TXJ7 H%34u)e 6{%2T{䰁^l便Z1L8 `gH<*M]ZIorヅ̯5st՘voKb`N0(#. Z.s]߸_}2r>|[7ퟖɪu|PڹBv7&+ϰj@mz_{D,_^L,8еwTzn$ wi?xA={k ʸu ^ӭ*vՇPcznuxj@62EY"7*),1A=wJ0ژhxR|$(Rx }>-[)ݒ,F ^g-iYR`3v=^,Mr1fx߱_ɤu׍4Lkiç`AkΞ y{ؽ)VޠҲb{9P]R2HC&| ⒪}knG;nϷŒgSziFv] ^maT6^ pgٷG0wd%0<;#f/oN =zα& S9]+ 6Vwzhi PT 3Į@Wֆ}tr2퍼B`.m;pS:"W#k"t÷R,5s0!޵|6-{hsCY3$W"4%glſ%{ܩQl^z+# $@xUnbQ4D+oubSK 6Bur2֔ȭ z̵(m#)욎=/T,=.q 0Oֻ'?全6o+ 4~VS")#m3U P aВx0+v!7YkH'F+q.()yNĪy;"!y##A"N64a0XxI}+_8$;1^zׯ_HR#MLJMyM+mc@+ u/>}Hs:00g'jY3}5ZJN/vo{g#MF7}3xR 7Vy6j*T o_ܧIkM@(m7,Ҟ "{R\5[t(QvQ6P7=h4-5% AJZJ‡X) 8N ͐@NyHS]cB5iSƗ(EtlyCCwö3$&,z u})9 9>_Ps:$",RaݻJb-6 rWoRp/. g6\PXm+ `=2uhQ˜EAQa(ǎVfTK`&tyr|7 dd[/M JĬK ]`=Q߱ TXpRDқP*h Fdocĵ'$?}wS M~ J.KMW/vKcvr&iQKc(}:b+0)`k-7* $ mC1?s(YǛWh~w. `؄V4Z$mWOA)x} 9> ]-x{g#h_ؔmA_o!:N%ܶ-/?8!ruu;[s^X[Vꪭ)*Mp+90%b{6~C9mq2V{“Jb4Z;Y+T '~T1Yps8JVx Զ>;?SNYgPԯؖc}g(o*9~xÇŔG^k9u2i`\% Iz~Z,aj,SPxk<, =,7P1r7E\SWa/ ="+2GL F:EĚFۢ+FͰ"d|!Y(!X0!6\ } :M:SNjI:aW#ccuqv{Uލn̮  5?XOUU[7Ç(duςE9YMRV'""TfC,7C (0In-TБM]2w[ˊ #鱃bcÊo^$g#+of$|HIS쎘ZCӁ"6| S- pJ2XL̚=|cp)Ep4Soȩ&񲫫B9Q3̮~>Wk8@F _q?ui ԗ{rx< VSU>p8R-xʛp#7B\R\ o$se8/zmMHD[k\3"_!2|IV،ߜ%]Za A[Xu?]W|$fI:c_#5k1c[Gnv_V)Tpm4&9:|@;pPPGo b F2u- ԃ dt[Hoi,j!zQ%M9Yؘyq A AH4䶈50-s|aBwQHW-"<4pَb,?jC}W<'ؑ,68>w/jG;ŶjT _8s{I.?94L1`om$׀y`+OTȊ-tQŒɾl2&hAJ<E$V"|kIY؃z$'N֛i_m(P$}!%5Gٓ$f&%aɷ u2ଁܩ Q&[(QD^fɳU0m 9%ESfi <3ThA-\fPsI erUʕw7 acSBԪ>AX,#HRDM3G?|X$_kTtj6pĞ{b_!ҙ+1`6 ^)Od/2zɰ1ޖve9-@Hp g^EHM!boD:I9uCTN]bc8L#qg|<Xt4֑f".Иedx:Ր^_p JpoiPڛ׌Ol{ܗ5Yט+9S/P 333U[.)*+=\@UXK~:;I D:B_Xo\\ARd}ϓiz[w|!4`Q&vwq^_]7u|G!0T|7P֌.pJߠ)&b7h,:%P`Һ)ͽ3"q3+ȭc-wP`AݽǼ :{O'd~oذeP˃_ʇu/)(L{$H䌵·o$\XRMu?Ȱ:Հl1,j|h"H}&Y,izp 2ݗ3p: w }%45^-|Y} L< *GD&]4kq >ue/ 595t}+pG،\I>Lv $g!Bѳ}P_%`-79l <}/ ,D2~Un_GzOD`; 5jˋOX,(brw8>LdaPRyC_t :S>Q͗y䓕6icmKרɗ}^߮^K N)kdBW!- ]8FirӀQK%J0bsIRߺD][5% QF<|N`,(1W0D$O@n!MVd8Ь85_bK+a u>>>6N!~phOr)mE$pG0$DD*8%a3lޟ `eR@$0U\-)E%sU)mmwUsτ00JC4Օ`aWamwhԫ;@hvPރ}-O4^&{Ѫ{"&6륱'D2ق_!}pduIB*CֲӎUwAP ɑWv Z!3onv|q?}e2K H2M@Ͳ ZoS :%琊Z5DOrP[)E_Xċh9W ~vR*\kE|V84pC"N~LbW٭kj8D>[87ެ) 9A0>J"6掠+NVX2zXU/m}N R0(JߎKT?p$x)9jRclX$^;!6QҜ$mnqq%!+h5$5Ȇ\:J֩Յ혴Z-'A諡g iRBR-&(x"({| S,jÜ҂8444Ut;=ZyZn_N-:!ԲZa;)㽾89vyC1vNl:ٰn Ea f4Nr^ wlB(ø#*I!֣kQ̧JhF}3 raidDyN7ԳekX英Up5&bB%FrR xL )]w/ΦŦkT$y2gyJAa0vIAM1/wU3ͩajlAFu ו짉YTqs$TSî**}"OBIҪG!]: v=Ӧ^HDZI{Q8uB.p$wn8M$W-W:)4\n 4wϤu2ye^qmUpY2_]kД)td1CU!$/ł„$VTbmݺFڿAW&Ao]x? J1 1l+Q;UhZ5I{)I!pz@i@#.] B bޕӢ}H¹mg&T{L,8&9P@!exc؇e6]\Xd@܇H|RNj1Ӽ PZ¡UΩj J&uk`د_vTA`sl2q'P~ (LI;MԟyĔ6b !HKp1?Tj_4P1NaS qf.B 4zMBI~m\4k}Zt>Ϛa$Ff5 *>7҅jy_Tr eQ/@RwxH?iX{@T/! wFҳMX9ڲw/fNt@1wM;yBWdm>Qyy_/\Ѵ{L9RJ[ oQ\UxC|q7.gg{t9q f}wQ`$ٵAűQ4WYIAd6G\MQYCVRut;!\n5{`K@F:\;r>GuE˃8E89hX¸+@LeZNL&˲~fY0@} /~]:~9/SI7{'&L c_siG/@A=oW2#~+qmz])"$&s q1uHaLKJl چs&HCxEgJ 1sXqg1hk IW 緜er M4ىDۂ zЮWt&Õ(8) LD0':'cDR,mڀx5fh 1b^KyED0ʨw{6䌿]xs Av<Ng_K`Y_+v1.ۆ.hu-L*{9l5`mr8>W2;Ǘyvxs(V]R!Kӽ;f\z+CRq^Uމ0[HS8Zڐ)+FcBwfTy'Uɖ] Vtc*K&vڝ4"TRWoY ګ;?[8Q3)9ٖ!Xpxd 4{ ttei)t*g希jo/wǯ0x1,Ӝ $\ލϢ) 2~*;ΐf{lö 50+h稙BoS&\T3kyW)Q(|sgpMavZϓ9eMmL YKI.%UNփit%nI=7wFwUN+x׬"e=leڹ(J( }{}I C7 נ931lH?1g:qi6ٶ V[g@Gُ$lV^j{|oz]Wi>tY$D\_ЬiZJػiNXs#Q&~YV2:oSB[tj\!塞>&V֏$'i@;٣(9 chu6Ưk -\fZz0Iwr_? `7⼋$P'U[xѽ}ԚI\ޱԐs`^㲗"XS#ۿen'9Xh ,r !#ub%Fs>{h=g'mUc}eG}{$#v^~zSMr52v+~ɨa\?t)q`ZWCX( Mʛ$@[.8_md,XXbrB+&P!=Bm֍aMS~+Uf%0a8A U5  f*f!¥Ԍ#!kL7D"|A"1+Q}}iؠ֫30MeVd(ꬮf텴 q[MO]eۚM5|C ܏,;)ЧL^eMrN%$ߎ-gFqU^̫l :]2icD=ytfL.necL#/$2W"=~*>6#>im8w={E&CO@eGXtNq S's˛XV gIgU#I=~{Q)-E W^pXٕBJS3e} -Ƿ ZŎvu @GqvBLQ݈c,٘0T)p!4\J&͡AᓹMgLݏ@ԖCiq,NTaHؤHӁ%ٚҨY O%x'}z^-j #Ht(pYH#T)L֣yB?mu|?c)CL3E2N#݄z 3WFv Y9 XeEY"|k>lp3a^s)ިAni_l']9ɓ3 J+KܡTӖAl+>'i[/mM?v'THfV?m5fq;FμĈ4HeLQvS(i^o$B~&Գ-pܨj9H xdg#Ujےѥh7 |`WF⼚n|&k ߺv<&1e[LKB(74MڏZ({ᘸ RRņvg[$S?%B&o\.;pru7?L"A\{Cf|c7dah0r{R8j?`"ZX[5L<"IF9>t/1 XEenHˏl\|C:ƒ/}vE7m&ܚ5Gl_HLck`v쨉_WW@|2$ (E6^f? 84FP" =^~WCM3xV7{(#z츖cǎzQph78JUfBŴ4Yj:IehuXXK930cVh͝a2`D)wJM/Gw7fJ,ʱ`!cJXagO=Ex>lRdE _2wt'2w!~U\zP/l]CZ] {$$0;YV-g׼ 9&Ji]W\ ;],fY#.14m@hKw Wɹ]ȝ7upxը 3CC$QwH4[@IŴhE虅 $)^:؊({]ٶX2 J Je=9Qy (33* U!oWħ(Y}PZhd-*os4"y;s^,oTG,33i0 *(g,Ύor.:[`Ds-)-ty1 ~Q6 ņH@XS%$ٔ|挍uL(eiɗ[&O4} O-xd8a}C&&mr ;6vޱtwst·Tra #e[ۭ/;u 0idk@@:qz/4mCE(P%$Qn֘T+vAT F7dE>T:okz%M(ֻ[o0rdCq!>8  ߑdC홵PB!''^3̳1`ۗvrPS(h }iS}_>{ _b)o!$`)+Z)b(Zru^-̀9 e4͒6{гї1,~6+k>ѽ42mэArl>N8 h[,P >%ג5G eh0W,zetB >]g(b]n/SNJsوV7>`]3*ή@sNbhg9"n B&.aI~ÿ3r mK >?)ZJ9l'V^:2,YI#Q<=hp񼬲gd/t WAP|>*5ܙ4ZNqLhKPmz7r`$T(_xZf\ ~'Đkm|*:UhiҺU fIz 6w"Nx\hԴi5rn/ C{=ֹl*rbVRD>IT5"}x`1J5lqh\ |se  *H?rд~u`^fO/Jo:s\d2U+M/'b0pfħ*)k\cߔ-Q w ;LFlI7B@^H#^ v⿰D38"?#֊JGg)~-=.S9`"QAlUShg,DOA*u.z1sR'SP]l8>l[kt6c5:&zG v 6AXSz5X2B_elu3! #qCeUW<{ TS;^;V3#e\`~qL8~٥r=:U՗/f{B'H f|Fd+ۻ{ ń5  k+sC1v@>pHz27-N]_S޴UYs UwwRv$s_Ș$>}'%csTy~9& 7)l%W ( 96&]Ni?V&Xs3& H2A(LF?K6XK IuxsQJN N4,J&Sf.]}eP "Nj)Vģר]J꘡602z`T'@2[#KZ5hs k5%6Rqr]GY<7FtCls@}r˜SG@H{gHǻg͒]@!U0}_Z5]:7|OckCf 5"v>i"(O9Ok a5({>iLvs;.<ܰJfCrx7=qi򤷣c%F;{jpb/% d~uvLGfD;&X1k1&(4rG?a&{Vb2*&A(~=B>i$&ʪPnXIX p)y*9B{N^{e m״)8.ȴȊ3܊>2 8\.W Qx>X46e)M?Ѭ{^Y=pC@^fg{ ג[M|%xR;fGxXeJCﰅ%<[k%G x`<|:9`RA#z^e۰Cn|1>F]pB;O>#g`Χ*̻D MspF6*o8+B_UvYOg]IwJxgxzUTOx}*kr1}{s!X|_Hy/^.j1鵺iҢF< ;,W ٣}0ehgXнCFm"Of3}s 79p8˪tTǠN|Ճ 6Eܻ|8{$1Xbq8 yed gYen<׆^U4¡wQIч\ld/@mb;5ZǞMagkM<l,a(}!ʂCpg3Y֌n~[njLx8Nc@z1yVJ6!taEuj,<e j_8_%:f?&N$ _~FBZ&Ɇalnq|ON,D2I -J8'S;z ^Lj&2$R֥GW:4S9 F壂AlF@d,O173jTUK+(/yrظHmF#5ى$8hd9K2̻6+jKLd~pQghȹRbn[Y\X5vܾ (ܞImap ؗ'52Ót{y;f=KRh7яSXhIg~֥.)lK8Tl*QpY!z肚[O0z O =Dž_nнd(jW? \=ySM_c<СӢDxv7Z"o%Twm;%%Yl^,s8;w^/Z00m)]O>d>g,X/fA2Χm hg?o2uu\'F؁^ˁ[iV6k ^U~7Xєь_R#gXsi[쫺#^?^ps ~li'kKG_ցi>Sxeo0O@N5vxcYC,IO}tr5>pj`h=x[)LDC|kD'a|նO} $y_㧜u㯃)oIVWOPrm ^.F5^x_$Z="^j f=qWJ U;Hf^z,(ԕ'o&o.\2>+[E (<:,o$@g);V{Y;ʂ _W{ErU6)?)w]W-ODh#95um7!90<'ۄGWCt3FV]l\gMH۸-J@?D㩀tXZh L7-KfFEK©xN,nOjmOS2)zPU {-c.l(FC24 *'qsgk)p} ؓyh;]486#D7rXQ O'igp199vKla@,/LJ6_ft2)X&aoZ9<\5o.7av4J2Qj(saV߼gX릻-,rRuuĻ-Q*j&AFz 5Sޟ ,q[izq7ovƝtO;IW `m2*=DbVF.歎TO&m4.9h9ֶ7{2D[ƮV,*&6r~e):*lCQPDFG)_0?+cH.vBpcJpb{Г{19NFL0iH֕(G1*p,)njb+kH+7&܂ d@qch8"n2ΒU6ND*M KuMJӉ9Az)1`]g/GV+&4mMm\Wk"Iilկ$6(A1k%,k%U!y~4 [k!9)9&U «j8ޗ| m}Nϒ]ODy1Pc{+"C!x{tβdO>-T ZVѣ)^5 2 Jzhq%DL[D:/\KaDa!yT/%1kտӂ{k5|8'mhd0e] l/"Mo0z"s⍆ {ꄆXZP]""2F_ۉM4$\~9ߺ8wsna.n;.~ޑ FK^i=ӻUg8#VĻ\:(j$a0/G؄iFl YRq'_nG'ƞگ&`o2?LK x-%7BL?,`Aj6_V)Tψ}\,iAsCN+|X"g3Jz,ItCϖ׀FWl@!M¿k69V GPC. /ͯ70힁p^q~RZj24I˙$St`Q0!gd>Eu~IQ c&_%yT1V}M3MKʉ KśyZ}V5J?9r؀DWEV%/¸.& gKI`]O5zE0@׻Zf 4z>w74KJD*/]2r;)h&W`ں$eA&-06Fu krUq i$ACy'O +l`urNfUC$k8sg ˰j25T܆:ɽ83hr._ңa~/b}R"&Ժ.©WC72rv6s=LCW»u9,w3&rR0 yÞK}:ݸb-v;(!*Ȣ t3:-W޿:{XM֊ߖSc҆ _HULZX!XC-*rg 6YIuN&>n'b-13wy0%Sýs ?Fb|.,qLYQ$z\ŧ@Y7{\eWRƣ\0 4 [h/^3TPEZ%{&M)hLe _:y~O- J4j߼+pV d|5ܬyj%Bo&ai'lsPEybDr<q{ae|ƾԨReDŽ%*KL4~Hn u5C>Kb-u_]q|4SzKNo \Ɖ@֪9VtK)ק~tSmV14um{+Feۤʡ<|Y ƆOunQw`C ٞBVrq^oyhswDHK c}*\Z+,ر-(du a|3K=G~TSi4QiLd<5&3?a䆆f(1cGGSXAVM{x6{F@Nj\9K⤿&B(!M|e 9E ұ/Xͱ'X~dm;ق7"1S]Pݍȏ=첦.>`~QPeg]*pP8}^Fv]y_!}goc-28Jדy 0 a' m>.4GTTqr#^{kr!Q< PZ: ةD@E:2n4u0kF,e!SfBªZLNٟQ4=鹃GBK;Fb6NnSq r_NF^@g2JM f2T=79QV`Q'>gA>FOoH)sT 'Wέ.eY\ >\v >bGHU`5K#?CJ店Iv>Gbd 'G:'O^Xˆ?Gަf34qm,yf -NxյR9M5+P_]K=#wC?%:p#ӦsE(IНWю n|nڰ7)OTX3$io.El^ KRJOQt#ꥥQ×+Uw.o:^:ckypxy&#A hCa[I46UB˃VWU<%Jc?ǤE|v4>īCw մ}!}+ !2ךXx6ҵCjCݠOQ yO[5mq./%25mzvg1ķ{sGX -L>$|Xj=!M,=V&)M$BR;<{%zMrTQ١).>Uo\(d+u x- [}*51iAa 4Ye3_-^ Wh+H%Wq0}i,LPNY9]kfgϥFwBG'JDVg߹Gvbz^{w3bM([ʯQ`ULN#zI,U߆h> woI3tMO2%8Z=' O*V yMc):F>}bKk ˭P}<gwsq `:tYs~ ?)ǀ"Գ+AwD'V -0Sv2&1UͅN?G{v^ظUz3+Z\s*SS@6qW4 ʽ#?fݫ^%@'3ZQ6HUw.=e15_ZcEFq}CP?!(w*15Oʬ '5CP4;Q]DZ^:_,o6⫩vC/x" svow߄ 'd13+6j*DFgѠ4+2DJuNՒ)h#7=Z ũ4t5_, ns0P'liH[RKww$UHFAs(.)NF;U,=QI$;2 =658j3~1 _@ɋ82ey)JKSwb>Ǘ.߶gLRL$ޠ:.*|l8Z>fq)D.zʻӱ.#<1SK;HKaM]#a@ 2A̼IDfL>4TǡUh9ևאQ-SRX2sn1E5`|?Aŧn;J,kf@PͱAbwH4af(i#V qrmf2$O]+=Ǝ!o TVuuLTI6t0|uM`MVR"sM vͅ}AėCr0ϗ.B\]1"g$ u9GKB5J"{WckWbҼp`TGDƀ}5 OY\Rfu#T8&64v!Mˢ^ R_oq6WGb;͡{NWH% {~6B}LȾj^@@f];K>SCil^@.ep 70[Ry?ÿMf^f${@L6>)}ƻ5ah _Z).{|:us  螤|tu'`>c,h cV x`0#$ &7Vf&Et]!@Š~Α)G<\bnh(G NMVFNM9z}k:o[ՏdHβ<.\7i ]C&%@Ji)ej:E[xr|N.BYQd(<i MKy]LhFlt8#2bcWj*sz|C3qb{bwi m~a:y(e?I4yMkXPz`<3+z =^(puPΦ"!zy7eL$JChû趙c ZPJ2r1Qq_EB)qf&0 VUnYuŮ퉡Ҕ'ђFS,Saut)|VGMy&!xK-%LER`4I|Z2A^CY4@l93 3%J.eUr/l ! u<4OOc PG@OeN(TǢ54L2~j:tsBaX(<Ҏ`::⍦IyB6jn$(ZLB%]QԀcujm ABpRL_=̓(d:v[.H7陜Y9C#yu?Ϗ //`eR!]Wv"٤~kHQR'4@zM2 E1쌌hSףלE;iDJޕESpy`%7yoaB-ذigl2e4ZѶ#{ 8Inbe~%S1*+$4Jdyb` T(c`./3ZTӃ^S9U}f8unHO+]3rPYxF+HO@MY%*]31rȵe`4N:_BGjI;,U'D\d蝄+):qch#`gVag^IBEfQO$T̔XQ5ORJxoM]~8}BGg$ID)xlʞ#dfAbuS) H#f\4ZDWFe墻+.:^2e Я翖@mN=>M3'Ad}oه]Eۯ-Զ)fY$iYVz㭈`"le%#qwsc褫g{ڸްSNDKTTƒCnwö y{Hk5`L'|m!b UVr"DliC~p寵qSZ@9˘xĉ;9wB[K) Ҁ@V yXmuaD ɓwP8qpCcfwzpaV Frg,+")Qѿr顳kfc,R)t/:ZzFSpz<(k/@yΞ_SlWZ}m,U'-St#ovMJE,Urg4c6#oH97h6kǧ x"@CT|:;\&aMP挹VʁpXV[Z9hnoYRV E~aUJD}KRU4 5‚lߺ~vZ|gv-YTɰkp1ޔgOWW󈗅ymHt"E*4mEׯӛ&>6ѧ~:I-?L!HDPT)kB1Yj%, Ga W!O. Xw^h~+ ɽ| zU׽ޞp|_W3Hg895͊": ah VHFaIӊf)jgKɄ|-~d)SeO+l{SM, 㞺uKP!Uhr)/Ȗwq,}ys*2&B3(ꥡk\hxz{*N C.V]л5'#~uϧvA x> Q`&1(&DA68DTlNJFjE3Z"]֞re0fOx[^Ͷ=|FV`d~ς(=fRʖ `wS]c^V +U  :6t;-3OI֢Fww ;L&vGwO8<'%*#/㚛Q6$yL\"* 49zhCy::HLꬱ1B86N`T$u 3V.{hk8~i EhttSq_Rlcݔ1^7ôow39 *YnJ-:?^`O@t;0u8z7]% 6%}nWU U4 m6 69+v{~Q}a,W7u]8}vP|om;nH|~oX=:GVYCe MvAb3WدAw/~8B.·XMmYIBHPEi6*\Ȑ ՝貋B;Ҿ5.|z!B.A ַqO}#nŗ}s>$gYivJ]C!Wԕrk潫Q}4`Š -yz{[@B p-[{Iמ{q yTZIKQ1BJh<]o}42ZQ {»v޾&鑌jg(>pv88+SHOf[ɬc9i_NK ?Q0 e*7kU2CGWB~p 䒑&ԉyj81(ri먉(ַ1N3L.# :wQeMR4ҫ_&2S1_G6/re epCY @"S-R 5e#!V4G?!'ck6k_YJ'8NG{{Hc.[~9&(q;."C -.3ƫ4D:G\޽y ޟ` |>["˥Tj+c7 xr0`%%U6!IT|N? ` Dyq{ #޾nѵ86覭GwDddݯugyD3oތѢ2`>7 BZB[׸;?(#{M?v@?ZN<ǁ$SIK>h:SD%CBlv2vB^SΡ<*z+ھ / $H\L %FeB{(ѻ{XVЯO!;Rڔ#esn>7GN%q @sŵ 2 k)eM?0e߬b̓xvAo֭yI">0*+3@ͳ 7}?BJ@8⠕]ISHq u4}+yxi!aA)9yc˴MìQoF U|`c=^hrBp ZD> 6kyâ]߸5ny:U˼L&sOht,՟n?.Rqaى$dǜ 4Ԓ2s3 DT$ĀIzqR.dN{@;@O(h£CJVXi(}_M rolxI 1NUS q߀͔ U+.ذL("P' V/e hEӪi-.Tf:׋QY|Wvuڊ>:3nݲio4#7z-Q|f4ܼcӍp} <EHNrTbF}c݂m#_逈0xnV w#yr/y`#%P,t܃0o!'-IÒH{fw2$օx2D- X\$ C~-H{n&!]AyoCBM&x)c{e p5l05c6OY t['U̍]g(I+ HVn.l+aae$ӧ)'TP5 wŀo(ĸ})I&.=n(BC٦Ӿ{6!,CK%U&da 4Æ5c'5QUN&{{#"b /(WTσӴAd^{@N"ь$wԍSGgL[; Z% ;~tcAiqr;nv[)<ңljݿA`(+VJf09'M'ұhA5{?jU-_;*;7hҧ۽tUQ5}PI/cnZ3XrԨvܧR/+hMUg*"7n^~~-)i;)oH/@5p,N; ɖn4cbɭE<C2N.&7PGlAh:v-|gܻyu]!S'D[YwrMgZ>œ/@:P7g#sB<`1BMc?#.n 1FƎY(Q1N*,ndUaA]jۙr#LTHd{+)d%0eLf~pA^WA^}':h}-;q$pQW,luغy/n@⨤Xn _:8聞>\hlA;2zqЀ姙q .XdSj%HVk. nyps_t1}Wc~ ͯT۫N)`c{`ctFD5,ھ)}2g!OtN? 㿕kcn+}~-|Մm'1)N/ߪRLe&* ,\k7Ok*}6J{5_]h*i(z*VJ>ǓaT5"9q_q 푦`$4%b Be79kgGs*BoYpiOҦJ0{H#>?[_2O> bw,y[9HF%G?1KC3#}H7VVpYK9B Bvܞo:&JDS| ȕuRWjvShGca{tJ\`JGE0~` A_}lgӡcڧS."mb %x꧹:k]z `>{_cDL i9|a/ =N=nnRkqO8Rb`ccě0,i:]~ R|qK',`zG=xs~&DP^=;I!)Oͫ?K*nt~}L,PbV[#Q|RSIjRNfvn,Q#n#z*]9%Y]t;k yt6 .ϣ+n\S"Er.mM=p.d_m`B[KYU1SO@XS7 )M f'\&!rPH7$RA7-WmՃ:=ZwD@\CnCx{NYiϯ߅U-p f6@@^hn^/]-??!H6[ 'y/cA$UIDIQPtEBd| ,޾VH`)3*!r9n; 4xMvq ˈ~mRlc ]3i}9:'th:KWrNp{nUY s4Hgehmլԥ4׿KyP2X<s+厯p W0V!ŖVLeJIWZ$XI (j*$~ɼhj};+ĺ;(N`~=4&go%%YE5ٞsl޸mɗq#owk|$ XЦ*EN'crTZFGI'pI%H`83">{#x;8ZMqJ>渢.KCc 0DJnS3/o?^e }_nbRubL$+ZRO|诱Nb4^,uF# DcƠyեad/G6SSoB؍ybLvI=LZRmI%bX4tYΡ)lK /9 1XS^#xnU#%fssr{iZ1ٙZ8RvYlRf'>7-n@:ytڈ1vĉqeѺ'PzE--Hw<.h"^ ;s1&oJI}ė5-xt~5/+f2ِ:PF{0X l A^z㿠ɯ8Ww΍ulct{*`})}n? 1x.yp`9Nك8/h&_֋ɹ-5X{m>ש=yt}S+75rG(k3uM9눻G=3ld!>t1ѪƄ4GTbqEԻcϠlﰭ ΝlЙEGO ElO[HI@}$D ([Igq K<'\|bR!z 'U 1%[B@.sBS$jx7Sd!XٚgemL~t K;bUͽ9?)pN_c%q`w4W a9y?9Ɠ~_wQklk!RlH'<3TgyB’/ ɛKL>I hlskkn]I'oBД8*(;ak)k} ~ژV:paS -?ΛdbH?c{|#b"'ˡ8ףOC4~qLoY\bĉ@‘شtf8[_1UfK˞" ")\6:d`m :d TudZ==!cPZ1ae٘V{9UXKݥ2dsߍ52d#H%>oݰ{TQI)jo޵}M[<5n.b]4ve4`~Z^#tsHICcR6јgKO=60uv;L9lNRzsU,݀>BBCpG5B/֎5Vy%#0/{ V UUk Mݦ,] >N4ʨ{P oo_v/ ȳBa:~`̯G}$цQ@hX,:)ж 뿦nɳ\bT;5J]71˦mZ%tKRܜS!A߂VK(]SCŽ̭  ;[M~W" ھMY}pUNmcsmՕC> J?g?}k,4BtX!7Al~x i"wLܘg+&[\y+͉ mvBz5raef"ge ;d@TUaY$S={T[r0~ȗjy)m^mSKDBz9-zIz&v9} c>{z?+حn:o-ؕH`P3֪K>CQǧ#uOvBN+7 gNRwŗWt8)8Xp'_ҽ *#qkwFy0L{n ]&gb]pCWC̙3 ~v V H_,קm1Y?RɗVbT0[:B fJnC"х{YzEB;#GnjhC&JnAW ^DyV  7>l fX\ [@k>pGSZ<}C2%x!\=lREQ~zϟTKqQNzw>փlEqDJc -_[!(7p8.H)m1?麎L5gMy ~ܹRH;''Y}-X)Rdk4X%żhc3][fw AKrH 4 ea&fׄ/$  4xgAn!e,5PvQyqPWvd輤O=ne.Ȅ`TYs!ݱ_vBSdK7;kDсmެ9=|PۨJh*>3{vzAnJF NDshokgksaN_"߼?|36:K.+wL h83 ԋB1௞ؖL`ǝzG k?ڃ8<[J@7fħv 8<=e`Sh]E2Mhg!_ZۭZxH{e<#3X\24" Fkj d UpS.K{;/ ̌{Sm,2U]/?JJ^JV?0gi, 61[-Q5y]ՁTWb :*jBS63;[ 9-c7Z4CVi, s`&!" ~r.^9}+nrjFDuޱ} ٞK#h%;?D76Y4NEnfOCz :E&oFw֏ȮId1FB5q{XQIIe(~N̎8#@d?Ha3, 1ڧu{N1E]'KHo2m4,pk !&JKV6+^EP돧ʓ~EnR? Jx c hmqPşû o @=cLgAhBE^eFt PT&P 2ayox21}m"> Ap~z\v~. nLuR69EK9D!V=O-.O̊?ZCboU%K" Bap?D>Bleɻ)[$9U|L!q,qT~0qyaH$Mja(fhZ{}!{觋$?]Dq٥@Fl9I’iI[8g74X 76i~ALxۚy+OV>]Ȍ>.*0@8Qf?t7Tj!r?a}ͻf׷#E~hgq0ic7w ̰ޭq>QV ;RzFTDڭ.xyv^qQK9+AI  վiB,;49Wrj1BɫHȽn`iP"U%-N Xҍ#BE}?^ MuA򪬜3@ln*vG Ċyi=]+Zf0җa{i'qR}}o G.~W,Jcѡ Aa{ aZdoW!߼5{5GQY̫HAi ޮj6rmqmix抏8ynjx| FSS8;9nH+L̳ʪL ջu@ԝסJ1!njYYL!*ӠFgSۿHCAn*rnpHr"@YvZv LhyXVi<)ʐoI+| gP!b\d`{T΅S:e!ۨb|1N~d+ ho`\4- ghۭ\QID 0`ARYfZ1Ml%<ݿ(߫^2ѵ!4' %ׯ1n)ޕGÄt4kƙ&9V\C}=y$+|WV J:H'_!Ҥ&6;;*i,2>XۡVo˵4f;pc$5i돹SK8B;XsO&C8 Q<˖WKן {ۗ6W@!bI(s~ u\ɥJcEݳ ۉᴦ1-@p1o+D{qG0I[(ޙ "i 9珗1CO ۀx Eݲ^Az̎q8ju(ccw jj 26 TVrl4@~%vVǞ5PwI4;xj9j%ko<>^FQ9i>J+4GȒ܉a`kV%#HU [Z`-CF!CԊ5iPJx$>8  7ۍM]qmGVDJM8+" sR@b1 l۽1=$Ǚ,^8t ޼AnԠVc<[|# @}'1\tKY*WG TtKڤ So(0xM\ޝ.a2F&/ϓC NՆ|F,'k=X" m&rY)˞!醞*^Njf+fx)m7l>Sz]Hg( P+I2Y/.xDΐ +,e.c"5@1ӭWl~7Uq*1?* zhlЀ2PRd:88ZAho &t$ă=o*/JpNېwU }/yi}Y& DYhxE5˗c7pxoo/ ";L+w%R qm5BaWih9)lRjliwI} nD;o 5!pmXC,rE O}==}؉P(@Էo첂ߤKg9&H]Wp[C]B2:,NsnZD6I)aEYp*M>_ Z*Y#`zE*=,N~Y[Wb8g**[4 LMr1CDoQ7=̡qnYD/KdPnƬI)\#$q0XgœA(ekS j ݌ 84c쩤cZI8`3фOu<meSA/5ڗtW҈ǍLn|s݃Nndݹj=ʏ;iuOұ$GIi\;p#=-^y9YZIDwfJ9Jc=h$sCZei,NvѶДoՊ!h<pUVeǢ2U%J? `Aޚ8%HD7BIRiT}5b쨴2@6bG:d1>6?eyV=4^gU$7wǮo::vFku#~$3ecw4A]/J G93(YK+6GLw4zzy/&3oY{40"HU:aN>?4&۪'}]AGM, R tDʿ顜7Yj_̧ 5j2rf6Na&_ݖEar0 (zf (mظ)Qo~xY_ (u"ɴ2-hѳ N?f-v  *a "zvBVÎlժOŒiˋZ{m2U\nt9>z}=zA;i@y:O#G> _H*0"a#t3^)M$[[\o4 bSVs6N$^hrnYL[mw'k8yWua ;ҐUgCX-)Di@Z3Y,F [8^N0 i#3K޻ j\ L/B/׈s%E)RW@>SwZ(CO)W2S[F6ۯct)ӁGn&S+USozm(vIǺ4ԓ:FO0Mt_MT .[qnyEPЏ| 5[me Im.0V8L}9ֈMS#'KR58q'-`=ìQ!5 ^ `f|4F9u^Pc{'<1n= RT@H17]$1)P 1XS6?HӀ^Ii$|˫E0â3.!0 xmc%cЊE T\[ezʢ𾇂:O/Bj%[2vCaUK P X`Tb`XԪ~^@%1Sfc- WHUgyTΔ@{^ Mx9he o y2'BaAq'ɷ?3sM#91q=gWn+v16t~.5U&Ѿ_-$94x BKS3meD.u|!p~bTH1aѫfɶ= {-Ks^>̕/ q}1A'8+d$QVܖlvsW~P-0%N*| _' ^cIQakA <;§fr vY2΍yEw<$mX9|%]52CCu)h*HƲ,6OꞱaVl2Fh'x$TߒJ:7r1_r"K#78Nlλ7>sZbb+}y䪺-UVNȠkA'Ϗ< %ӈi>1y<8Tڂ Fʼnh;e3GV%(Jq4~%0URfdets%gDB`Qݹ: Zu#3H09(9&W'Ez Hm TSNlg*+ַ6/>`z бC P:|x38qmW:[)/+\:Bs<2U*n >Zy#^ΰL ܾ irf&ଥBW9 vf[3%Tf~4Ԝe:u-6!mN:X׌h#!2Vqݦ@ieVan(˶b4U'.`8d29)άhHdгޝWpZf{j.kqh^=N]0*JH&8 "m U0wa*kpQuS"N?h!e5gooc>>?Fg6L&&9+=eOl93T v͟s~"2Ӄ=ES@^k$Pq+g ؙM.y-3#Rx`'iЋs>#b $O֜>=a, ]P叒 ) nX+vjȝCUT v4Q ևb]NvK S{ 'r/+{ocfUб(nc?QSO;j*H=MINch͑NU,w.n8n,^Т)a1ux.)V:1N>/ok'$ޤZcW$3K.v$Z0\?Ǟ ,CX1CΓ `m6_;5lrj*Ќ8|pZ9(|ېS#g'"q(4  orf)q 9MX1M{'O Ԥk`{[fd9B"pK9 ` Vj$ lu"Jk1EfY6W\D'RɄĬ/-Lۙew(B3av, ?o <|G|;q/_{ڠ`иQB5\%Еv_ZȾ@؉x.R&m҄6[x $4ݿ=u  _8".4&%(B3P-1!=ܔ\'mLEY3 L sLn&a)Ўﳨm1t/ G df=_*N-V鶂/}6N'5'_ ($F?rASeN#RE`U`lEh˄mVR pYw)y:Nj$ _1UynxCGwIPy״ӔD>nD7{޼L"}hEstTSaWjxgIw2R@rV=90_Hhk1 2 8W [#c zj{|.fV:⾊hH%=IBhS_*PTrh݇PgllDmzu=<1m_Ұ^r&\#=/'OFz^P~ /c"IH5i ȚLM>O1finLvQyGENQJjF}nVcq"LOQT˃W 39L<ȁK2ծmCn6? dGkﴵ!=ezؤ d)vzɐ+0Nގr4s&ɳb~,5MEOܙ  )7M--$B_^7K]}*\7;u>RA(ڏgB>XjC 9LmncGf*VŅKiH@5t@MWOPWt`,=5"`!BL.;RB)ܖ@x"%FENius^_IDa$Þ8[ tJ͂lBێ'S(#L[,lW0(^gX`)ڌͪ(tu)YQ֘9nBُHU6>G2W>legQ6o~fek-7!Qs^O%(>kSfEқWĶBUR)(4B;s: 5(>t'l iphCgA7zMPOZm@%[Z3]?íI6t3콓vJ{M&R WU c>h.˰ndVc_^fU2 﫥;!痕ʉ43\"#:u+JFqyBnye-C?zy*J_]&f9[oK_j. 6v ؁mdHfW !wI 6]@yA֔ 2JQ4 2c@-+]{Ta."~x L3RHbW3ADT̺ /9*l`j_zW^V 'N gEnWm$~ W*l&K156;1Na;(o9:/o0UmuSO'L8* n\=::B)}{@plďR%T 1 ,L3)Jo%S-)z>yznd3LaI43t܂"a$)^Pf5^X>-"/[?q;^@ o-&^IbD@+nu:jќסGd5bB`Gr HU{+H|dgcR*5#6LR^vVx-K[Ȥ#MA_B'u7w24-y<_1g(/Jn}z;vϦL~blJ´S[wpk:[!$:iw&ԹUh}MTmm+)?0ȯʀF-o/W=X`@n-Xzbe2:Sk50oh.{H2H^]=QݗU,P$[Թ ?rqHֱ]—i(>{tbcC)ǎ]*jX4(+^ȟW e~a lQ^o'\O@mr`8bZ}h9=W B18 ; >.lnQ7SLcєa!x/l6! oWlHE0⋹/ hS׮d gLs0 >,g w\UoGLe*O"t7 vPjhaËrوr&9K\AUyMt̆}6fm@-d#n8=Fwףkmm'ۓڌR.Ad³"J߶*<=YS9$`.`MWۑQNˆ"oqLz`ÜBG~kL}ko>Y)j:rU'Myn&p*fO| h'tU+iI66 \F~:<`I ZQ-Mts Qesp@ˬe乶 ڀ:IEft5 at)b3 aċ dž@fP5AشOF>! d [L]A?E[WL93\6ؕ4Č"NZ 1ѕya C8+(EDE22s+p'%Ji>C{Q37}mg琇-`?77%6&'#W`(cP>8%',ǀz c0'Եkw љ U<[Owk@--Wi%G]0Nc@l 4 Iiަgӽ7!Ĕx )sR^͒I /ŦMz'o? հ(-X0?@M-"hڄi1i8Dj,1Ogl6_4L ÉF8ƻn#K?:.Z M( +XD }DF o|TVHG3;4JbLe SBoPs_q7^mD;weM t\ ¡O/\`ν&bȀl}wG\W :7T\nIq(ߢӰ9 ]s4/)Y.{ J9tKhbRQ/Ḁ+H yN7$p 3 RV:á?-JW*{]VqpYjo; k: D-,{o (N7u4OiRXRK_f C$41>Kzc<+C"5,YćBz/-\iO `B쩰|#S(a̫HrXFGYgn+JQG<7~Y/'§x#P1u=3gy&e2Q!rU{%DU#U?#t+()kf'c*o(m#ezfXz<M ֆGrJ7ݽ,F*p2ۣN#P[S`TM˺U ;ם0Oq8z9HIϊb3t5m7Y 0:c8Iv^$lQ(:;z%sV"J6~R!LV?Zra1i*<`}Ru&6GB sƸu,NCVh?d4y sd'#RđTKsO./`pn&Z2-fr Bof5'# /ω]GE%.8n_u`ѳCIy)l$n!'7_"r%dym' EÜohp]|K8m滾XjdrÙCG<\yasz=KʯXe4FS"߰djUH?ͳ!v6c9XfG-łhޫv|C"@].8;JXX&X+ltVw,g'@2X5jW @]:{,Stum+D)@Ϯ ^֙n!8H|>v%cO߱{m~'r;C^] .Vf0 M.J5qXxig]rPa 9P݋d75!iWiP.I/SqWN(=´|): ǪkfzyEe2v&)6B2{-aoF/2j &|tE-At~ *G'3Ef T=!ECvN]~(SL`nK j't4:},J QJPg ž3tV.I[[v$ǻԜ rqv"Y9eFo٠3ՊStS[Fj‰sCkCf Bָ.g86 9vHJbթQOVu~KT'gsT} 6H|YH%oSڧ|W3z+1>q7NV*c? Bw^N֜8~ѵ# 4.ͩB6dwLҐ+Ͳ"tzPqME@jG%4QcX(wمEK43p ]Pq\w_ACԵce}cU fIy$4/Q6V<d8cB.d`r8ϝ,3dV'\taj9_ԋ1EH `*y w'Daװ 2#ӦBT#H8aHU'a. ]tR$ވCk1 t;C#L@tyIv/Soc˺ڷA)? n90!D`:sONHTz|t( c4$(-߈nFP\zg kI3sϰnEߙO `I_IN'X"~!K6,;6%3WJeq8aRkcK8uN}գ,E a_vߠw:dHW|`{ϔ?bll߈8:o  xxi+f+]mAzزR;|pdU%'|AƼ+k,-ɽw[V]=~"e%#\0I;=Ǿ6M`8-Sh*fmflŋ\n=velh [*p˲3fme41  @A{:NdoĂˏ f)Tq:/.8X<4 sY$}Ynb6pl\dy^.#񉹨GKH4]Dp#;~]\F& pu!ۊ>Y7Lq׆Y6 r0鰭 ʰ3'b ˒T.Ucm,'8 .fb+rF85͑ a ɲ&9_Q#oM]c wnj002mTǴXSN>FaQ{\" yjj~P`]!J1 Diҳ/9jzkXyb&4YoW eCN*'vESuܤLW[+<'WĹ%EŝQ:WUcǫ(Ja:CtoC62bî6i~mx"bqx2x3?F#f YX)>LO I3=ӷTZ */m AcrJYO z&tl]|}ܙ'0@_$F^z@S̚d6./IjdlA u]vs-kB54} 8״M簾bmwZq/-HMղn7|iʀ;󊸿0$ԍa oKq*!f{@n/Gt.(n$np|u8C؄LB gL-jA^.oZ2Zy,Wǟnt;YRǻZ=Dfگ;^y%iam"\{2V3fE iP(ivuG`&Eag"AF6`}هOa#箱[ʀ#*#fvw5Hrej5Vm`0-|\4P;7[-5s=Sx"1k%9{\6\4? q$ȆPa#@,띔C %砷X2Ɂzh%rX셗!w1!Rqf]FZrYJSV:ɮ$kSֳ𖶮w[xtA 'ɠ$eL\efAGGxjvPzu\)p$?߂5?B<޾cj)hΰ4kkzGBUIshk0n{+;h 2P8\bX, f*ol<ʒK=mRp T >1P~t}B#闼FU=w*J$W`R WӺ J&\4'ΗxsgfGm4\7(h2š r՛R0w*YD޽Ї$6~֜LZ]65s|fQLnJE>u?6ExNgўsCm %5ڭ/ K[Iwܟ簫c~2kKeޥFVruZYr/X'9Cu X-7*"c4Y=2дEk4ERFv^S^↭H!&ǃ9J]b 縥+Hkr4tT%, Z9LxYFiiIJ{$=kc <}}_lR?̂}WJ !s2 p KF3}AqXMH%ARЯCT(s,< >4ƭd9S҈HYLbmo1tY:H w7֩܆n|Do}aU*:z؄:$zs`5@Q71 Ut${*Vǽ>Dcc*]pF'~ޥ"dYg16`gqs)Sv "L1KclWE_w¶cBŝ_'`YO'#J=}U@b^ QHcqK PM<"2OK̽H HPGtS G){֕{bPцjA, UcAXmao%Ue%XFa/u \ْ; yz#B@w {4̿.Kn n'CE+ mc]C>IX񍃃c!ҝ+`gM]Q>X-EnaCZF#лHQɩ]}?2L ׯ͗H*S9BI,e q +>l6zzt׻>P!"]PZ\`TK ) )pn%3q3eѥZO_B6po>B|$OEF*ltG@o+uYGéaზFXS^XsOX#RcE[@- %3 ZlƤre:!foYJR(Mn䦆lsN/P%i#|}zbw. B"L3㚱zBBc0AQյPe7=GE3KRK 7d%']T%CXrgkC)=Wf}->P= 뛺-<yrDEXaѯ}0«C=cR媸*Hc7MRY_0SqqxGǘQ1Pؔ;aՈ{0x@|{&Ń)b0Nquo&ϚYaj`$egmX6_x6;W? v Oxy\~*p2>c#UsI93=\nѣ|4׭dM9k5sI"+6P"YN}dҒj knRU!o@@Sf4vru"LՈ=G.5Rp;&+JC U:]rygDLdby^\j1oP@"kFֲUxՒIXpCc#q>;`#rG0ܪa1YPIn8z݇Xkq_RŧO5u_g̸t hZN+dN',K YUY!]Yd*X;9/M=L5' aT;SXt()=8qꚫbEeZwx.ei_1q#f.[^T;sf:>iDoJ""GBkh飃sHnKo_R EVOBVe]=J?MMJP[DAcl^6¢;j Aԣu̓M$rdD}lhV5t:&IAF"X8fcm_D/%*4ݵ) M3D=6mGRXK[)H'kTJ&ЕC)3Nהа#CXn㲾w6@\dJDWcƱ"WPf1qj?H-/s8^Ś˹ז3J;fezFC+٣g$T$.&m  L;lJ)dy5P=p!f+#o=`}ݰA_, ѣ ILH"v٤*.V\ s$py#֍=cFYUkoЦgΨ09WԤ/]`bU~@؊۷8CŰ[LbBR|,5ȳ77.A/R9eqHByȵ#R8)|UIpT08aޟif՗IE_| RjCʳ3&QNr#o%liϢ21ܰ4vp>d%`+6*6{F;zsc O(.!e?Z\6`xyPkҌɍ(nq;L*}n ;83>dYfͻT*P}EHVeHjGbkg^FNnRnSmQ<1BPjttr Uprօs7} i"ZL5[04{@ (v+q Zb#Ͼ΂vRUV$[.vo-l-aF[TV ߀_m˂!x@ތMgXdok0z[5cK@x4)D&X]y(u|E&nI`eЪn0`ծ0A* 1meN6l,Jdh,2s}&VP;n ?&oo(e6/TMOk7xc0gqj%5xID{Lg9J&7POߴP[k?ڢ1hf駈lK4۞2 ;@]wDkCRY M2fZ.chwFB hYVM>Ev}HVl&w>.gqQ-J6QT/qZq7=nLjk?5RԿہ&9nU\AFWs(N9Tn#> T? MI QCT>sèGz,N!0䧆B}I4(V1نކqvp/!ct 9 H>j|,S6f5ZDu6 .W%fn&US =Fy$j:q}i`ݛMlfU# O̍g8K9R{axQ6PA)kBtl6fƳ =񏀉zDU¯oڮ6D *Pa4DJ0qfmQ6@zkyu}īXyTf{1 x>zu*oDԾ^l<% sUG ߆IV>HA},@h3w-A63wFt7]D=&V8d[ |hԓ~*ݶ&Z *ӧ#8:Yo(y!ڀSA^>GE9%?;V򤀐\UzlLejˮoT~yׅ_Q^U]:65n'c)l/&xX{nD C8.fa*&_ e!mdDgiviuOw ĹץSƵݘ67v?Wd l[[@CR1Gtyʒʷg-(4s{g-oL٧hm0"(SUVӢsh14<\Nk֞瘟r|7Piڧ!{l6'%9uX4PRK6fSN 'զNQ' yR#,]S4S4{e-? ju1Y_;g0"a˹A]~PTF^[vJ`8:^t:Z՚\ ŏD !&i섔hrr䵕 ԢV]3D37_ಠRY3Ž C0Hd״j#'LrՅc̠̚0Ѯ|d'peP7MQ"ޛFḁ̇̄p'ùn,ڪkp4 hW]Qb O0Gwy夭WhPa ߳vXT8jCI#TfD-8pg 6GȎ` Db3ո=OgHYp_YA$}UUUSŌv߇aϭm8d& vKϟ`Sk6sDJ|zm_VLS?'{\"BWNda'0Pf6䅕~A.kҥӞ0D_8s/'"L>yC^u(DtU1hUϔՑ~ġDx0>bsZa*nr@%/GKRu\"`3^oh(Wb mvT˜ngF>$d.=>psm/a%,a.Xkư`|Ü2]F 2y[w)qᘍJ5v.t:' qYKR6IV٤ {;겺[Ԁ'ga2EZTBfߓU.oyb;Z5 A -b@ Y)*X;ukŀ~PBC+96eNرϮXQs:(mo71vR;L#盷Ip9L у;Pc9oi[Ķ_H1Ix,_6ٰ;6\_*s5rRWVqW)!Y:{.* -HB: N5rBgwfAGJ&̧鑰|?W1Uҗ VctvJ8d&M28.ƙ̈́CҬ5_-Ɓ0O^UAQ$7GďK7j-kPލ5T\&oug֖Xz~,j`ZpL1FCJ܌Ӿ-[7.EjΓoVXmD{FS7!G CFST[qV_YQ Ct2 /cE|! '·!|O/Vg;{g~ jӆ]h?Gۧ[Dc5ģ8\< ,ed [86zZY0f}!^ muێ8jMO*)>C P@VqqЙ(6EyF]N(B^һ:ɾd4Nl܎o=d(!z 2y` =ei hi;U蜏T Ξ- 1G aS/u 2)i׶ˊilCAxI-9.[=@EjTP{}5 bte淃 Q;n!`^7/ EaFX; P|3]~2Ls y]k"MРq]#:|%| `ק$/ohSn('ӢIN~asP#˾?e/;zbB?۪mI`J䧆Jrȿ9gѲ/XA:w0y}?5-0TZNҒYmpRP&aqv4ӳ>D{3nP< T%SaLUVl%ʐ]GL_SYqnڒbhVs) 9b6/ b]ܚkLqmxww$:5Ǣ"!ؒxRn`osÙekc΂H)"Z,"[6޳s1#4oӹ m~ ?%rK%B;Z_K{ߕZ3FT$?5ؗ };U±9CL:.KrLsQY3?DRy )ߦc> KJ>B(;Q+:ES3ՙmj&xz%uW" xS7eGބ!9LYxC*LE y{O6kED`q*tg~%34 QU_:if->G -S۸cӇݚIrFx_bM:EIxlK%ڛy9KS-3d'4,M^=ڄܷWd[S/zl)k\އJ7rj+'zb>8,NB9DK}徔~ƂpP>)p ="0Y̯b-B3swZur-{[R͇8\XXfYZN,II# bXVv1k ^i@6h_UBSLkG_drN]o?_md"B7X[JnycI>Ka򹪩NcDo߂ДAL9ىIpZS2:%1 2rБ ֨kDQխ 2| y#IKLډL էԟ2fN1~E"0Ƀ$MTh}x[,)|eid/f{Qo'eNEwc, ;=^s b'CN'z.% '.#?t=!,؊+ۚޚoh%+Piۺ( ijMht̊=gxIwMWfиv34Hotx!^қWj$ ~YMw Nc)8OAkTJ62rit84+Om[ަ@(р.,mrfJ*Z5^;ᇊd%Ҳ6"T  D!"o ?\x* S[cBMF63 4ZfK?zr} O]:ptenԘW߸do@]{߂Kxv ᩩ&6jp!F ̵PjduT8i)HDhNP1rk3 "f!E`+އ$)Fi!W2] *@6}_ QdzU'֭7_e&) DA-GENcrX)`FЂXV gmN㛻۪l}X kyF7ZŅ7#ЙJVgљKVQA+8J{2\]q".|(U8 :_ 2J 9S 9@MA|E+Ģ3BΞY{RƇV |JH+@w;%HKpVdM /^%~;%7WIҁs?`l `=Roh }j:MV]d&mՖ͛\85A TuEmp6YnB!ĴY]G&c7w}ig$;΋-Ag-jPURtD^3[#}̜~VX:޶sn=H$PG# * @qW}c=ci۹A5)!IU`z,-D+N?x( Yg HcS-V e^@3wesK:i漋7>.Z0يqD'~(8FgdδH,Ҋ!gZ 9͖bsJp&yr>?w8YUu-%Ϫ{T& ug^A:.ݜNkx{/ya_ 7Ch>N&gXCz{$ʕ1 )_$&7:aj1fS/&Tӳoߖ9SBU<% ̓ r]-}.8>?C)95-66<̝ v DA.$qR][ڽJXm tsOK ~*U|@|)+6x MXLztd VQ8-Hb'ҥ lcRwNxZOUVF@{P#NbKbyJۦlT[0PpC^]nMHH8 ţ49`Y sN|6a֯GuLCX=޾38xxAnB*/]S.OZiD],4e8e u wмz{B٥'<. I+K7b|PQԤh1sbXM?s _FTmz_1aZZŝh]D^$"93D͍N%V㶬{ZTV!,|60ɏ}TϻAeqINP6Nk#IWh _ $Ϩ~u {<6Z1UwW 0|, S.| (C/\m3GrR;fp[Ccñ.)>Cd/F@]Jk`H]NPvS7r|B&V Ds*M]`l5@/&gZxpZ^+aiټu8G?RnlUA]Y9 5}igdW{RszYشcֻa*w \ -ؔm3蚑G-JE~"O⣩⻸Qi{AhmY F ~K-e2ZxwnxA-el\:7 n! +pchAf֍37++;iOyBW%/Byڹ@nha֭>~bn;C;|XX|_fOAT7e~3,8E7w'cXG[>HmqɖzI|Hr;WsE@&,O]))t.>.6L^1%# w?cֹڜ"@VA'^P CeGCHgJVJԆJ ?IU4VRcvȪ;v*`YINv YRS60j; 4+Sj3g2Ƭ2˔ȘښDi9xWB'dQSǧ{'?:Sq 02>\EWψ"\21Fԭe+- "\MVlB9a;uA -y|4z( ޵DIj]ES F9QPNނ T;B7|1a=aQC>[8lbѰ Nȡ ̑|+c>P/vPt﹞⫆zGF%]Vo۸m#d&F쵻<./j9p'.R\%YYşQ)㿚`+39^Da}$6+gC32 T'L3S\sNqjqpH_p'?*imԓ)nxܷ*ȟ'ځvw8T4 . ܺ#!UUd\s!F1?j^}!k"Q<iH&Vz1L-ɪa$ksO9 xX ^<ҥddTRdjlN Ԑ8Mԙ<+\֫MTj{. ]ivx:U}~YJ G_=V#Vx"\̲t w7I!JQɪA}N-pepy9b^ =ܶw+r([S˫% [~ߘ;D#sb*t ]K>gg.qd+R:*3H%ڈhJ"fGn3\) !>َQ _¢$‘1u4`wA3Z'T!G,tͬ QdKq1gO.*y[(7:(zi@<ۦP2-셢`3*D_m$G0} F 8mbo-c4 p6IsTw̵dU*{Az]i:T3{Fc&?8Σo* i)Y2]xƥ'Ol}Wӕ`A@;;LvsO,-9ˡ43.ņP8-m]&A}U|" nhDRh`FrDU?Gʻܷ&:I@/m "Go-GcC>6`7)leg[*KʃU"GU=moC]{o;`:uS 7uC#0x&UTw5÷1ε] U+u<'$P55(r5B13\#9CGfOqR{k\T7WM.'QqnP'2upk'=X~gVZX%lgTguFCF?.To+ㆵ0%X/FZ\H\"4m_V|V/zZ%Z瘀}uao "BiPb%lq+ZOV4|>bS՝. @r[$<`t.r*Ybq~ӻsN}aiY{c}kor":#'Y]sWN' dD)lqڒNډ)tfI0R[Ÿ]W?KB`\ւe$/N$>iC;ap>v}.I 藾`IУC7uƿcM 5jI )Д"^-*n~Sۏx/߻N:68G.bPwѲ>]d7Xh?~ jFf@>ǂKjEh/I^gm!ۯj3t4@%ƣQdONs)pBćTFL2DDvgY>%'nåT`NP{[lL)yt\SnRAA' R>zDV/ّ f/e̤$<}d\,:YKU-(fo#M .8 b|Baؽ&њ,ҭ ~/[ 捂8&]àX^@oEgO'yIx`C;>:$3i_©NM@Y7Inwq#$,^OM޴ J9TsaBqـK d3IyC8*=zEQ;J,v|TЯ'ɠ wY'o5S<2%%__?c:jN{O(-cAEolVE^wST̑ij _`t[% IU_50}1N3Xp5_b9B\=]9BfInc@nz ,csĶGUÌe0[Z8,×uԯPzU'=14_j{!s tX'NI|X_qT eAWȅx`Ui.,zbx.TG$wt apk`5Y ;u!:ldЃc WwY3ЊX(cӀq;4Ō ~ k@x6z%d{BG'OUp8~s4_+8^Jʘ/,4D^հ% yZKTʒԂAiqa4捅@vCk)MQS(0gzM)ZC3*ucĝR(5V\3Gݧ'j*vmi5k|-~y߻~F?6z{V"uO0[)bH󫽺_$©>XcL3Z֊I:]8}vpK0^~2%{q Vo7(:7qKPeJf0' ɐ5X}i/ūMˊj{ᙷ_r WJCap[F 4*S949 'ga{t'ϝx.ouybD8'%Xqp$:38;G3{Qn_~VV&J9{R*Q~'󵾝ΘO/2TFlzMQB#\}`-ssZ'=PGJwAZ[ L(';+I:aTŭ!Ia;w%hTBR5܈TĪԒwm}wJ^\.3zFVIXtlS\) =xul8H{>X]G;$$D91$&Q̫fю:Meݥ@ }Mgkp;$3#5׷,^tD~>}RHkÐ%.%>zXQDxZF/b];b`a!7i,=Q AjКrJ_\Yq-1#!<U5jXmfZʅTW>M+q ##_c򯑶{]], Hb,H=F~Ḱd-ɂ^O:&2.5k#+9a‘ #q!}Jd7 ?F"|7^6떒@+rP !m.4wa610jҺ2_7:2Ye+j¿~\th>^Rv`˜E\-ZIOZ~PЀ>&#f6+ti6+IƆWB@k + 08dW`h0{_)y^+-~65 ܋+Gǀ'l@~Âb5UBPp2 3Ա:hHCA^k 7͊F  [us`n͐0i0:8[ R [mgV .:P2' /<>G =9b2۸tہyAp9~ O,IW*o 6tXu>$r<81w.}P]P,!ߗ/M Ty'fzLdC@G##O_["M_8_'$KS1sr#" =2yG6!K-xT=eU?^m樁Ҭ7}(SDEO!.uhwy? + bYBxzr u!mUt"P@-Y'肎;IC"Ro|"6O&L_G#= .'~"8.A`PY<^p.5 &Ǟ~:p/zHn[A)&$\]h”<ōlpZ-h{[uar#ݞz H1  )W%#{y(Ps% *f <`cT>>&tC/ b(I+Mjz\N'y`)ש L^:tقiPFFXo%N{LUU4nRXSsښ4Q?(=6Qgc ?L‘ GoDƒ@eys 3N>kF`Ge2V9Uqc1jܡɆPva("vP }E߽)(aY^p?R))dYwfmݫ[d&C[u I >@A.bw1e] 8}P%{? }&O b<^ɹF ['+Ě6,\/tf1[4'ML/Ab"hON qaP;?@۴5f<[Xjlzs#%6Q0U]#9ΎC`g5\VI%j b0ޭ{܀-v޵W(߆[?$)We|5 IVS=j MUrK A.cu5?N_.g3w;D9:וֳ"ؒ5;J346PfGʏݸ=q O8|ѱWY$v ~%`ɛ_VB- Y?BAoAKMMos?^F..w#,J^ٙL\Jt;y r[6;RJa?Yol˩d!*(8~63z؆sZ݆׭2{ڳ\H︎li2s0kwjiBs9~ U|mIӄq~M;Ev~WMęi-@B碅,6\UfP@3Xm7Ȇfm@}ɻ^u98i 1PEf 8 i)di^cl,,I/whNV^Yфi1@4):n%7ItvN\4ZzKc7X9ៈ}Ezm *k6q_)VݰVcXXWgXݵ#;L,5<3Ыot(~`Gc=6Nv:}BVd*L%CGp3> ; )} <FT'::] fi\Rne2~d`aC;ͺM@hG/>LZ7 |:2Ss;ļ|y!o-HvG*a{}b Ӣ A&zTȁ1LeTvt_M+aEln8[0MUD' d|&Qp  $ B#$Wh2B}; ԚE^xv[k0^LqT.%ZrHW,RȅC>%sc _ރƾQЄvT(ߔg񮀈~~FD "dzI6}Ma= ˟~KADӹOedH04F'߭r~OtOZ:Hp\A.YilTIݜJߩLp$rdwЋ<3آYVHɩ'?+UKD8cYųOa׋0'^-%Ǥv9g| =QFqf~pLiʔd-Ge˨_ +ѐyG4~3N\Y1G3JT Yu6&nƬ@ Nr f=7[],FTfFD?ǐa:ʜV =2YԎnE _l::vO% O@G!16O+)H֦ݪ2lo|r+o32oNa"]i?3S$${~6ك;zlSU~l4giq?$U?n`.]wA]Puqe9窑H7X`݇*I૔NM\|\^ً. Qquxu. |Ec\wSr5PjD/ tI햠u2J O8t+r0C!{k*nǹ(~&Kd+A5JS bHn*hxa9` XqDU@åO:"{OMjB~b=MvHU,Hl2unx1"El>: {lPˑ]V"G0xHH5 m HUnRmdR1b\&8 ɃeP (sHD:xCk 2*Ii44B4tM[Pb_;/-B7%+ u{}5^$V_k9d=1Z :Q#7KXr%CI`f7Ot~v(f_>H9b_J1]膛Z`g{ze_:emVKq hg)C'yn39^+!q0@U 4I*"q+0u8C\1*P)4+¥5$ԇXMv#o9K E0gp0tcG喲I˯  :yȲG@KN` )?PY:BԺA<y$i?Ɉ8G Dn:nFtWGzvq8e_UZ^82)+ LA_|P) GH(:EF)mǐ}狹  C@2kw1{+6$@g⼧Ai.%}c# O[֠hLm?͡\8y6g>o( j> ޔ3W7kR;OҒysCNZR#gQ,lm(~AAqAyes)j@"x9N]e LRNUNfTeiNe'ߴJ&o>3tOXI$|EooVB..fO، eH|YM>T(G)q̊SA!N нY`{fc8jBsN?y58IDFk{2Qg'L3]>Z rO U^]|]IiCc !j#lEBzvȶ=bb Tf"HQ7#qiE=ۮ^Z[Dcg/"ۥ̕&-tȦaR 8[>F98~Յz̧lij PwWx,yMSygB%[ 6995cG;aӉA/N>7YzBEz9+"0+oj~}\K`Wd.T;-yE{%-@Whz y'Y޵4ɷT@2pZ[k / rk}ZW^>mQ5k)6wrO+Oߓ'.ݺkiD}\C`M)-nQ$nPO?Mz+QDn9K:J9Fw-ɋp<] >3\Cu4rr룉2`~V#!gt] Jvxbݜ "7IO'\.pEE%V9PTȒRFZ'9c OӼΡ]J3ֿ4!{l=*3ވXg>n/_;H]f݄Ҹ>*:xTh8t_P( 1>q~Z>ϥ=O*$ Qe $~93sDjvI b#W3տ#C"d++;hfz0┳/H띜\f~|ŗX`@-72?$נÙYH--yN8-*eR@ ,LA2C[Ws#ywZR%LN`U몞i+jXaՋ#W8IgMnhF` \`):oy =)]hbά*C?JI-XoKehasA v6qC.RַI>bSxTd)*$ESϑ$0DH P09zH?M :INn vGRxw8O(ʒ؁!9g!289STIon?*Q{2d~ڮ!+tō2kH~V/#ޥ0K j־i4 ًׄB,ٰ9"ɿhrDgLgF zH lz9/%FJ*aU\g+WJNzI% @ԃvכVz6UҖv2%U):tLa/:{+ Vin h Psh^Nvd1_ cYX@S;9.*E"s}JG{"Yq.CFr]Hi;G2> k0AvqK?GVP*Usa  /- %L/Qb1ܭ:C]x]ʫ%S/dbq} ƛXjָuDCGd']"P 6b;isB҃}L;8S͛ nپ_a=ū<3TpN41Ap {6QPt+6K8؍*f:~Ն˃ P\м_?-X7<1k,L̕V- DQXRu[وcP S TtP3n:G?Tzs$XbNhjK#ޛz&?t3)iNӒ*g2E}A}?:!={l]3!; p cm- UPBgv50I r)F}̩YmgfHtFBׯ\TWmzN^ҳ leNLb Qn?L~/q8?*\п"CŐ3O;DUIxeW@SEA曉ӹ@2 ]w(Mm⑊VUЇM jJ6t zy dQAZfA PJQX81yGU yD3T<&I~bޜ֎}B3z}:Ng=Sh9?4J`ud4Nypna,pA(5"cI 8#ӿZ..}RLkň 2SNR,4i[V}c Fq!=t;e>{7D{`@@^ޮcAz_o*J-n@c^'pl*P9|(rd6qmb]<7P=(J`X[-ke{]f*N{hÎ(LJrJƋ5Y4m|54o;ʽ0Qw{O@'\o9"dcr/Rp}wA3V8*YǽmHTFbOB r!9Mr8Ն h6!A 0zŹחm135n&q2K4AW|E9x!]GBMG=gOP)4oZ"QOK2oNjҾQO B|iDJPZ*#)RxUc̣wt!}&YbrEV1u&YvQi5YGyGCu(3Lg\E9#M3~; m96kQ井3Vm64>]DrDj>24CQaʑqv[~ c ,l~~pKfXnԨ!wx`"<k(>?r!x0 'un%ĝ$3C[PlrXm֬+'3$EG>JImCj8 pNU8Ca#"?-b1XIl+(W_Ç̍ꄱ13ؒg;4ul ឤBe 9"[:P^.622]MH7>[<[fc I ,J4M:[x-P5B(Mnҷہ6moyPu/hCri&ԬcA:;_l~&]j\35nJֱ #t] ;]a~Ė:IW< f]zg7]͠ݥ>VPf=G0.Lte)iwD2Nn"k]s `p0Vp>gqq9(9R$y26"Dk,!b#'[9\>;:36`ڃg9&Xj!k}vUG3wa 5x s9Cp>:E҃ qI(*r$^y弖%0㲫$u'Ҧf™jzA\ߗ.ѓ_/ЦAw9kom[yI)g|E픿Z{f%O/ݓI3,5Ȕ4鐗2샩q:z7ZM{eV Ӭ4֦$&{{C.x.{I6'`_Ml.W^mӶel:RƎp;a&[#*dN?粼i[]L2vSLd)W(hgv6.b1it_}i(4::v?DMGơZ[+LAsQ&FW#C} <=<+[K[P ~PCt@`FʍP޷uRłwG99$ګYߤ A0R-{ְz1 5Iڹt 8Sl WDCڒ@# HnpT#Ufd#]X(:IcA Rl{Ĺ@ 6eS}!)HN5^l14FVV- +WT5LRb;}s\)s;sy@]i%+;jD $7_7 e4JJ-f]!XF"EbqԪ0}gFCJ|?KcQl϶fomSdBCNbi<`fD'1D\gA׃t*;=j^[`1ͳ4\lpZVc a!O`9 Spritk9IWO1TaQF$0Cb:"EJVR1b= tO>Tʬ*#TKX79V~3dO3AYڷA;ñA$!^u4C0ɨP!OQX+s9d;5&VA|֛w6hQq,OEvK*LGH`_wTc`v^l7Z'L*Ҿ@ Ak>5wmf2xFȟFD)$E\{^;;J;G%8kmZqۤxT"shz?lvNSfU2Ob@֒$BI€ !A5O%^bEKC4(*3E<$}k&!@#[oL\չc.YM||ctU$=+1||̘ov<YLSZFmBr Oc2u~ѽIp{p5 dVYIa?;A ];YLaTi$uk\ФY| $*7LEAQvݭ٭F׻#KlmG~Ji=yT§.#}RT80`[ ]PTr]KY Ɓ@nD@|j/a]rY!EkAY^1SRYR}^ C#/ό,ӕ.QbZMpRh٭Π[*D MbpK0ksn&7Œ xS_0WW4b"879f 8BưϚ`9^ ڰ_y24^ ?:Ej}tA)zվ]<^)YnG bEXt/IK lkKQ"R3zCX6,([վ^ }Gp>6?%kMi =R#Q)qe?\ enj^9-]았藧H=B4h3P_Mϓe@l>ܾ UK %ޤ}|VۥxDo6[KZiLkRdF,a 8z\ R~ V7;f 2*'']ްv/}N+>\ʷkW4>G0t^usKMԎr QeKtHܹVDd""(<1' F)tr-m*T5IkCGvbaf* k(nI pAd*aYOb~-= ^DBIs KDe 0>ȉlݿ:J2@bo3|8g!-!4]۶.}ݞF.ߚǴnNkG'[SR:D}y=u)#nՀOfҨ]։1;Sq|L|S:q\PzN\I>+ɸ/ ͏GmǒXXGTZ) dy()&9a.}{@Sp[ey8{髵Hqei%q1Hd8W:=E]RxtAm@ ޿j leT-^i}Y̪eN(AoQX9 vpH'Z'Qu&2_I: Xo N|eAlSùΟ5YjZM<puy&UuL,׹#bniUY,ݥk3qtZV3q.P?1S)JTL_Mr1*mxmbJMP6-b(䱼$[N' IͶfq@}' >3U+R-2U0 ٩=ԙגk~hߨfQ)s Fi^Ț43UP˥wMAoGU_a;_ʭTe8|r=BC"a9EbmS;AM^oD]W.}k *0o"'m+_9֧Rq^rvu05Wv=d 1Bcj+C-pE _c(78pXYLIfj/`u*N!'Ur-(&e]fAYM `YHFwM3afM~w>h3p!Jjɠ-$Jȏi8ibPY# 捰t=RڈLfke,8#p*A.eaQ`QBٲ<廼d5$EŐ+ܖt 2BcS6bm 'KPAy~|ST']l<'nFP0TP&mcb- 7NQ(`%+=O2+ v~˜?b0Oģ>֭jGlPESdi`s8CHx|F ]nx7ˤ5(![SϹ%^BwTBO.VXؐ~IVd3+-:ł!= cbs>7O1ʲ Uv ;i?Wf5A+oǀl~ 6>AcKQ1qjBOh҃Q7˹ @WŧgmCcMĥ;* iOL}lf(*FUL \z-'9)W26nYuI&yǻ0U|Wt&:^=w{N3r)4Skۉ½ #p=90\8倶ed~'?ڂ5kY<(Ɍez ct:a$mbO,%z&ժF Ih.n3 ,e5 8p\ɯtJ.,{$D,ǁ(/>byt> 98C+=Y= |¦ā`6q1Lˆޘ0)e/^x:((>Ny]skՕ1q 埸J/fUя|YaAAi[,̿.g_SLysX|2J#7d۽P[4h͍6w`?Eq0IjuC649bXۜ+bxs+?l#۩mkCÏXpW zNtM1f"t,?SdXŤKw6VctvA1%rԘ~)RBi74ݪLJ߀L3}\Vc,GǴAmF0_?It*^R`Nv7<}{+-wEgĝH!ǬҮi/x >qt]6m0BaAY^ ˓*A4y3lE,X*K]R# `"7OM<)hć/Rht;~5hz wK"~vn&޾c=>mji-/I۔86 WВ$@snȼ_ fcm,\\FQS0ElS9˄(, =^TIUy A(BpTpQ>5,0~W)hKP e \!sT@E 쳵E`%6j![mTΓ\eL\]ߦ]sޕ?3< Mاgo ƹX!h {ɸhA=p_.͖h5O6Q\Zhxk7lKz\LѮBҳWVm3Iۺ'(zqM]vMUh*oȰQUJW0(53 hv GEꝀِ() (£-3eKfa@tܳ,{ȨAP>ML3~(%5)B}Zk-Ϫx7 B~.R}R y/[Lf$7W6V Sj{$<u }d NoQ O@5S40䔛D5dwmg(`($VZ{Gk$6Pa1G{Ηۅ7Fwڭ0\&}C۲p\f${b G j uFpȸ.yl?3"ynBa*jC6j8ofeD+0iR͢2U4%*PrA,~w@兩>MP*"b $YLq`[vs̫}3q o4m)M'|4Uo0 yeJKgEO^wa^903tALsDQИMm=ֱ@5E~Y`۬ gR<2+<8 6='2е` KyR=A3^$,1J`ɦ* d!:ubo35lzZ%g̬ َeF~=pc\1% oTgR(6xl8H":]FF.w~wwMY>IyNl7LAh xϓdӚ;m-7N4VzM4&PTj}OAAtWʭ}&Zg<]݇$U0Ol)%dz})E_x6h&@8 :;!q;`g^ixR8$~nl)8.B9-`䁣6 4fHw3t@Br-j4ԬZ lFnӠ ϻ>Ԕ_wxQ()\sR)9]mȑs^ oFvU)mɪWCݮH)4_*XC_1rF"/h' 29o4_FɮXaUZ"UюUVjRQmeh !" 侔t4% GZy H03/uӕcJwU9,JZ΃yd,RY^z5ֶ*X1ݡ1CpD1L"7Eގ4k3pJWK\ȆmՖUx5J4ʏDlIEJZhJkO/%4U̴+3?2SQrAǔq4k. Ş3'[v nY_w* ~IFb忶1Ŝ:TVy<qjR+ ޠH]:S0E~[jI9O3';:U|LD}Ve%~UaFGMj:8*D jզȩf A S;)ŗʀؖ HX53eሰF(nc X?uwwG5(P Agl)ϺwC̼6BͮM21h%Tm`|'%{NyW emd*gRW"'ؗf6[ʇ4f_**-~q$5Z3{KH wx@5;uT}k&#I!ưGK597BJgΛe&U:C–üܞ%AaOF ^g'a˚tѤ'J!|A;]b9"3Q w`7Me8x@` m!vy7}#mHdJr$.$f :~?f٘9G?@Phhq N*,*qĂ~? RH5hчg< O N,@*F-u6(qk'?8E ' &VJJ,xP7yawkT|@Z%zK)&|~ǰ.Ösjfٿqcq0_N7 n޴p]E81@K'I.?ݸCMm3T9o?/=3E7 $HȏqK@pkd#t6HXd杦<7F:vp cY<"iPxe)6tøHÂ'μfF1¨O9<ʴE"r̵B0U>_e6CC)Bc{+ 6/}b qT*&E%Lw*Bi*O0;^n6;m*a*|1﷏lhT^0wS Г?\?eb\NX xXD'ꕋ$a{1eUKdxk"ѣ-&ކT:pڪ\&Q@B~̋Wa>b~v=+vX|>6!Q(C~F&x}F[ݙXkʕ及T|"bӧsd dvF,[n")wcj?|9>E|?'[":ʒL lEh.,u_&w2n_@dra`4}`6AV?xʹ0L3CrqN궇U]߃ja\*A4_`kG*p .JM+|Dú㠑15^] I8~l[Sq3{x쟈D[&T`5O:u#xё:[ДoX8{9DÉ͑"UcUY͔us:K\fxQsð]m<_ 9S~D5wF/zoS^Bi?m!HxGakJtG3t~RJ@Y׊;4 nWFIK;5%v O pLYеdyp̓ꔜЂ,(dlU ?Eꉫ[ =v"~x'.z4>45v3*MNbio$xE:ZC%s@=9W2UUCO/lX~t| Eq m'1YJFuxjq(ؐ49W"DNrL~+VCrRb.?VɃ޼Taw~@5ƈ,dkHcdk_8ecZy_X:YZ4D58Q,K"a(grB0I%J.rF~szAij zm5t'6vaf1DR8Fa-yBMlwTl1փcN&\-t.2(\D˵g8;& Gds'+Fp5:`Yv@(xz29Is:'iq3KKǜ3[efP JY{-Q"#/ل1\[>@N1dȿuԜ5z-oQf:&e'u-N5@Ne q%KMZ*4Qwba 7N̻I4{yt pT0aZV1)"U WfKl~.s^oi?R!9<S<|MJ.il{i#@:6_}NY5w>:" 1Vy+f ~" :Vs]kU&?,Qv[HCQ:4Tg*lz*A !jv</ev;Dq>#.j'SP=]M0XJ.Nڌ,~&ז#{قl7 x'L`X@pe kI& c(ti* ;~ZG9B 8Uel3wq-rQ*cOa8;]VR7@.6ɜU>]v42>#0و?7Jߤ采`~O+SM(#wͫ!tN a)JX M;KM_QBW>jݻ*FʬtTۣ(Hڨm_^Q: [7KSqpx@PQI'ސ R4zOc y.tX̴up5E2ϑG:Ui0%M ,$:(|+hɇ8Խy.8UsJqFYeO|L7Y b&{O(O݌β!5ZqWC M3gzD^Uگ[{F4 [O*:أ S/UHI(=ijYe`z4~e r˻A*| hH=nn G:.<û#A,5cszݽQ-?F,҈wjn #s+V4;PFn*<kS]#<@25Te>ml]FA*GX4%z,XDv C6}xoE:5!%Oyx(w "u/ qMC 4M [7@m8*=w-v^ Nj0e)%2=(C3"n@~0{q䟧 #`w9Vl~9ۘ-*RUr0.q.'d.| {{r.hp_,vV%Z+xvzy(׷ H֮HٿĀk}(6M 9zaǨ39"8GT`|}Oos؊a=ϊdFW=EP;AuZ+CxKz Y AQS8; {Hߛ$c&J01Np22W0BQ̑/'E)+i0H(W 5OzbxRH7Ʌh FW0>[Pu;ʺaMJ`eg#}4;F6,s8\\Cb Bؼ57Ogv ݿF ÿ'7)-2+# aA3 :६(%|\,C֨sP:K:JO`&M?>vRY Fl-KnN39xg+Gs-5nf16ú/{: ݢM +׉@YykYQfg׍IFGC}ԟEE·Xԣ;X|0d@wJauW7]a_|2q u\iNz{Rq#COpmzه* 4 >KkrTkh<5wRY4yF tR8rct,?V zngJ8뵸qe>W/aWir޲ nv\HFfNXRe3s/?ѹIHyoj*fӁg뒘&,nWHMZ'd3`]Md}@eX 0&SPI쓱|'J[9вLK'\ۯ;;iM'݊1Rw"oF&&tԁi,Z bT$H40$H؛KGŖCv4\.ɉes6 m0wJO (\IGHK~+.z+Gjp*m9 .k{IgΒ/ގDݵsx@Z^xïV!bU$Ƀ$]oC*t9+'W+ˣƵa)#&ٹxҴm,$Jjߨܹ°RR”ٞ5]oZ^,*H2]YRMcZLRtœkMCQؽ|q |bU֓%l*̩kHA8{cN~>TXB;H\/fKcb)F=ySFcp>yꍔ-'c6D)D?r" 洪)N3UX:LSޕan˺f9iR!纸;0^5h݅@5jY>˽j~a-xv+,;F;נҕk _:Y/`| 9GcI4QW Wq˨^f y)&Πe#muHС0@QyPhlexmåA.oecMزI+7_= wކ~0=2Ҙ͡4v]PBKHX=! lQOJMeqdiAי$Dk @J8D]43g-yeQ͆-j1MntM EZUYl 1h À(|J;3MO ƕ/TY?ۋ4?S@&Ou󣏐 Zq|kाE؆Nju4c ou"R-"ʨiW\Eq d4ࢭ23sAjj>ѭF9CFi>)%+88:0Bȥ%ow"?sZErQśǠdW/늟p=qd^5V?6,78D_9s9BB$CukeR&67zYeeOr ! ,ɜL2>}ys{ܚCȢ_u[OrJh*(!-!^$Rs2g<+Z J a)"ɳQ!m5/E ~%&\VE$ |L`2nܹCZVbwL7*ē]Fo4j޶fR iNp*C[j uebYA]`o^ו ehRsҞ$+>߶4*?m&!d8ȫP>v̰@unD;c8rg d9d1zVBQ/`w^]̉[43UZ9 8c 37UZX\Gɩ(K_s;GpE0j)>ѷ)eڃp3qN۲ Fu8+Z2"(ugE -Spۊ3(H!!ؿ/;{l1ߙ4=>)ĝ0Sd"Z 3_&fYt|O\@{; [C8G(0;)T*=3Hy~.M9;Y`u~,S%׊$mʿuzɯW.겧@_„3p~*d=2na""t`m\`ed8P!cO3k+9m3}PgɂmZQ?zK_ړ S݈LX3 4|K_oLRU0*M$i~ZaX+PVu2D^} 2SʱLkr|u\ۏA0T1>lܘbw/QU擁fӫ^ߪ7gY*1i!bM w2@15>mT?B66ۜ:2}Yg?2Vx if_2L>SV D2WmWVHr/Ir|%]dز7~FHZO9(VzE~.Q開:l<`0N"ihq"s_h|ED1ӼZ-#a 8<~~R@PFw[LDÑ,Ox琦6[qUKyWL}g5d{VFwGwȲa)zY/ PDg-43-.l%K|KDbM]HrhCNj*:{t2}IE**uR{r.9ܐ P?-r<Nxk)Չ QKR5M*b ONtrUՑ&W# HfITl.ҊL`t'>0oGn)YPLzl'r[*;+zMtgV]=z7ON`\`e (6ת/ lm!GbbCTLt_&T#j(fʓoxNi̻:nOI~uFȤ$BȧVs߾XOڧtzM,D?v}ܳ.+tΏ`z:[r>wlvܦDRt5(ƫJ-k:DKAUeY/dÞ4tBI.N/X~EȺ( ;AZ џ vv6#czO~`wS6N _Ѹ"ѱQ{f-Lp|7BVK})O+:q;2Ƅ2ThmAX 9%R}~Y/ UAGA 艁m2q %gp^Z7fٖCr^`0]ˬJ>V^ e]`oPq }u :@^P1*p)GQ~A ^vPƃMA4M&ئ[hQҩxAmUW8Wn, 9G`TZ[)3eIkޫ,0^y󭺮ȿ# NX$#6jlx '?o،hE$ٛ)g [Mk-LLG/*vIC*`a[ƽ?%_}L5PO>CqE9%GMbh@K}Z ΟKv(t6b#Qe{FI ux5$0w|WDZQzFyg$RiNC`kCV|k-pz9Ia{b'beDťfRBkhhR+_ 砭zCPs@%abQXU ̘FfRkA^σu//_yj+3{S)UeΩu6vڷD]!'z#>S4cK<8f٭^.u1%UE0:c@aXu6.I'Þ8\ DߺkKAoCV_J@~%k$.dFqWa%Bn*YXr;sIhk@HX~^KH e^r09(dcsqb1/;'Ֆ K44 1FJq'""W<~tCr ]cg8T7(x~OЪ]QӝT /y5l䭜?9#;{Èp|3MFj0Fj oosRۤ﨑VQ"|N*1.}ޮM]^cz&bJZt[o;U_MW7DN{ȅ;?k^4=M{Vh|+%2P¦>bNpQB?wӴ;H//5 Zs)˥p I ءBH@ <RzT?wo㚆i;YofIRS m\EaC|\_½v6]? 5+z˼~pPc&B)?fεغZr+`)X^>*<{QMLŷ1un%ZaMGH<7ٺHA[޸z'%ڮw%G!1fӕ(5Ć&C0)ޝޑAvtq^q.o R,nM``D0"A-_r-I?d;6:fUf.!M"*^.W)!IMlEJA> necÀ494m5ā?{x'> /ֳ7퉆xX*XΟ.3J9Bj*›iϖ#Ô#6Q'7L6=aӷ7Bw#L$f$jIESTHSSkрՕ=Rwi nymH Ҹ|JgR]˱WokgbuД 72" ,@YܤE91_s |˝nTu(?o4nEn''?%+ӚJiԣs T{=򙕡Vp5jcǡ~)_zFzʅb?[A_OI&[nAA#EF}|񣽛NDB++:Sj +Ε"-de{@ {,_<f\\?#q!MUKKXwa ϮHc3<}j1;6: s u}WHY|+lq8,Ǹi=0[96r:!ө(xǿZ1zL[:~̖޺acp$Ső@.ORԸ#xd~n qw0ѹkֹZc$`OV!Ϝpj`Xxk69" .M:H#:ڂ$n"N*;vI;CGr|Z, B70=fXVI7BY2;lO7s_}_Uo(uzA.ٓt'm-ꃚ|8qG yl6Oy&B #{"ptUG]ml^ v; Zy W&&-H A WO b':6ȲVûLC1(I sW &>E.^tnx9j$Vb%Mws'gѽ $t%$qxPk>S =-!y I0=AH#KևzU(c W wDl)ėuq΀ ivɮ2(N@0JoꄃEfSֶ5pVhՔHOŸgE2c%;V~]_gNܰ0*b 5i>'ذ&)W{gU/l[|=[SԓQ>R&<fBLe=Udonmx/A/h#]! w&' 2<=q|sg"8+քOd"[QJk);2/%c1bM] kj=Oor$ڃ :-T/%zDfi YkiT4ܟMD\5=Wձ?tF¯e-,G2?!S_LBE罏X1ӔQT1.`]W;[:⨾+20?=xP Xh:F5,hnV= X &,鯁ٰHۨl`<6w~džZqѕ[30<)_BQ /B~<Ƴ T`>RyqCAHM=ԭh_Ŏ)əR=z,Rm>*ՅYlXV b#Sڀ/*)縵E7">l>u u,@pQ4HZ!2μs6EʡeRVCq!/YݺU]my(Vۂk#{.f+7dSR9 + w{b-! R:`4[& ~}n Һ3GAu6a|]UWwF^K' |_ /! ~em7Dds7kL䂦Vn1rQ"+E71b-C )ax,j.u![lH+ak:2Cq;IhiOqoCEHa>?A@l7cHD ޒPu_ |9+$z)ѹ 3IZ*`,j^ kɸl}/L^`θ#݃H-xiX$ '( ğL7єj1;הi*%ifRcv{Q^Zr hp$/)7{okPgCRv$|TNB$9d~0EE][GQ[|$tH>ꢊ(`SЕ|9RVHZL`,5pӒe.1)ORAÚx y?^F"?/Y 0K!ԈiR 3 }C8Qdua#)pyɺ ;KaB}Vzk,WjpځBMHCA(dqEn:pcZZ; QuQk?)OqVDӨΘ$R)/5>nCaf/PBK&E&+c1OzpbaC'KLyˡ$8%`(EBFgI-HM_b!nO)L4L ²iB gnH-%Z3Wclgr>;rބc,cxsM>>H:umsb@JDՆs{Ad& PۘE `=Jٌgɿ` [ ,źPVur{o> a~A:+ڱ['hci}cC8.|KtySQ6xC&  xHWpuz_ Cv>F}@#DAfʈ)F߬k?`_R _I6Vdf`P]eNqtyR{g/@RV $1&iq6VŐh̻K;8$e(N,i>tsjFo%Eʯr6z!xmk'ߔ[*d)aBJoD|p[QJBv4[MɜȽ:pP]/,f1RNA(R(~9*>4E_At:WֿyVYy=G;@Nif&Er>[fպ1RG&*bo iyVQG[u0Wq'&Uox][DSNoߡϘ+6U_uOh斓4'[)BeDWt̊"ș*sJ*z$Kx$%ntFl}ى1DHV^-q6b] UR>ƲsT8;(%܋kg@ ZQ#u(3PUCJyq$ṾxlE˄XSSzg^w0(h# 7;u,f,iq{qQ7ى$|u_q!RR܏XmҸ|t)`{>\p+(G}[V)RZi IE[K#v1 @kå}Z`Hynwj H&ȷ J?X 98mAK(WjN:G!Dj)K?fdH47Cd*AF~q+|cFOp!+894,Ĵ&k0Eܖ =9'OR/O՝0Ţn՗Gd U򼰯zϘyA*Gn~Wr<%NL-&w<=wKQBY7+)⼳$JGdQf@t*1/1p3mwbb ZʂP#$H3`:82DTC`:a"8wch _MkRۅF@䃱6v.)c_^a@W ۾մ/R*ҕ+|8>](ʈh|$kTW$ͼQt<)}HDit35Pdt0tU8dnd*Jƀ]8Y>RSa X‡a;`.1ԫ5ʩv@퓉⏮@ NYMٱ)14`|E`P"nITpj0OӱMI>P1n8e*eEF_cr_XWLFpjk Uovř_卄L=WMtpVA1e'EM6 BEx@JK _+H_UHgQ:I0'ٳՐ4uBȡٲ0f~;hkU(0.Cfxg%!? ैCevI~@0"@OfzZ!7TO ZrF,[׍z\-*rh$'|f1VǤ VlGJ}I6*j2"~?qiq|,?upόFf^](vC_d`{ie z8AbBż%.e28fVv+"ӷ>mIzrI+^]^YѤMmnK)ۿJb#b#.k2!Gquau\Cfk0!ne7t捉b#yF@aNKT&8ӻN$%\\E ]8C ;>b?+|s&2*U>ѶJUkW, 7Oc3 JOJc9œ88nr82Ԓ|kHxv(oQ)Jl\a-ʤejsue |~9My=_[5y9'Z0rYlFP*d d:$A8*|7H ;Yi\/4hR+Lc*D/ş5\i*Ua ( ιSmsatNvbosA*Ȝa¶:U) *nS0DSZe}ap\24t~Twu=X ӭ \8U_r+8Tg(Q=%XBQD[lfe\]Q]S&,k&2ޭq*jhďS'}OMKԻހh^.*FD ++؈hL@< #l%(9?U(將|kxntd"fc.ʴQMQ@FWF*I}1+5KuH y7w:̉"z6[~d2`"p3CVP@!G'zYS~G7"eulw?m\V @a` z~{ZI_ k|8Ogu2ѪfXDs&{Sw]B;NfDV#P>ir d{A]jlj !5'~VSu=h9=c5+}ǹtx췄-[ wN:m]-<8Dsa 򯨆{/6ø Ce1E{8Yp\@kWl٭8:A+сx\r-_CvaUxʌUš`#_[ WnǥYjz VJ444|'H8ZH({YzgnǿlSk^^dƹUTLFGwaSe|F0 9-u븏U eQY^ff''P3tK]30. zJ.A/$m6jɊ! *]; F/3vEiԀ0mU;ϥd*nS԰p>`z~"ӉG9ۻFTq+󽓸:͚Q5irEoN- KoH/r4p%T2eh(fJ 3_]\w` e:r2"*1{=nb^_OPPF)0@1YJ7Z^4Kc7N+,\)uג \U] ߈ڨ uIjZQj:"߱D"%o=aΙA, ~\pr6T[Jn`g+߶Fb:>Q*'.ʹ.m;3u oCo|m(GR)lSP! G`{Mi D[uJ~5<.e=)s%-6\Vm y[7FbLVQo3Y61>iǗFC*g+rL+]?rui`tj;-=osz&|dF5KqDMàgU9wolI #w:~&u1!:ܼqǞMp|/vX8\ež%B4 OM#9*AS?[+}S)X=Gi'^\QR-͌֎1`Z-'`5*4Q2ɒ݌¢HA_j|FPDr~8KPv<< (YŰ)S46X/%FQ.\|H}B<Ha^ 9)X3Η`?v}`!~m8N!X*`hmd%Fw!\"')ŴZKYArlQ4+ČJ1HJ~X*(;H=f iuo>O)`f- }R1b|ݩ;i=׏ދHRUľUOzѝ:DAڙJ(NWA8<#rZ iZh`vW3j{ZriQNEY p 0O3"k_T񃎣ʻ~\\c@`?*|Y|Ȓ7R{S¬&ޙA/>BG |6Ku&O]F+\ˁe mqScBY O uaW}Ylm+G-[dS/? x/dߕ<8e-[γ/[qW_\4J \ԹIZiL^\['pxZW< VfJDM]e !YSm-v|7;8F m8L4nYQR4C䒶7r~aZ-q~Αmps@%òe)H2 | ܿ0@S vx2okwG(`ra e fa%+r9Ӌ7.K~*W.G@,=[ę,/c}[MFz.C$Gb}lcH3~ Jo?KGro^b7Es٪Jvl/8F ; 7xY&^X/F]VWvIL6/N;rA-ra/]⁰.j Ic8sΤ1`sQ nl6е Y%=ٺnju8icL6ص+, Yd4 QwU=))PǨP*B vS\ >0/=AÎ~SQE 0tj;CR "jl6&peNc@Dd Z{c-4)vt D*0%.L#k) dZ̾[SQjՀx\p i^$W?[FU`-KEHH&Fn~U8ng Z?M#W VD RTkgnoB'ahڏ -W|Փ , ޣ!xF[3jrr(#I/A/D": `(ɘ %PwYe:pӪm&oy\9 Mw< AV: ;}kn >xjg5@Hrnn\hŁu%-vh!,W[el 79xa߼t"|obN_jnֹCIL}KUd30`<Î2tÌN(#N猄:6[h7-C#h;tFPѯ׬50Ӈ9|8.%Zxۍq-a U85v " ~6RkfH{l7z%]U+m+K}T*KBBXQdEC(7U>>W2֣HId*'J[>2du$mt,+6;!VqŌ+Ws@a{ }OR*rpKq~ wΣwwL ,1)!`U jJh75EhK s&̶gET|+{]e&wsHj)IfYV]:2DŽ?iNX)ſ[1TC4iٔ>ѠKPLVZ=@k!Ҩ晈SgS⺿ nTqI9,;Rmi.Aԫ}wgcΡ؋\Ťp%:W2}_O( I|'A~mR@؛IB(x9iG yJaTa+TnK7HLA=-(a Wx7}؈r#@<T OT ^Y^*S J6 ]7ƂzD%MWjzg9+p :$N ՕH&\}oix ;IgOnI=RNbHQKEhS/Vs4ܰT޺܌U/Rd@/M㦽4T8S>YuWbW Os+8%ءxF(UJ̽\6ClǹTe G1SSx\\Ljq$y=O28(Ud[E~d*p)GH,>0q< tȠ9+ܥ&NuQDdA=HfT9mf[>QMԦјh!!Yr °da,'4g.IrE ux_A:HQK8q LGԵ:,BԻMGA_ڡI p-^ xU<́?*1ŃA @Z c -?ӼK^70%,aK/,0h4jن9Ot"=˽ Z)P@Cvɉ~DC@pdq=V p.0c^c9Mp~ W&46.1!{$*֣U09q'YRDwQ|9L3qǻ"]8f@بF_֘[Jyƹ 'F_LiAܯYMABX<˰Uws53{+ས܅K:[3"I>6 JτQdW\Soi0T7O㡥sAWçs $tb[kSj|/~J>_L*\#¥-g^t>HA_uLv|CJZ L#+ Wɰ>Z-iBrޕL]sC]1{!!{C=VB+Hi_ v|=c--!"p bܠ^H`68y᯿L<%\չAEɿ&dj,H1At z0D=&+ ι;']k\7?c|pDxDK=??DᾫŊӪ4牒jZQ5>̅(T(|u8gKd^;Z7%af?B71Ao!8Y%6.nZ 4-Gxz$ r *hR!# a!je2+cRÙ}Z`{U4ə%!#~^ӽl޻Z2zKݱRު Cu+-|tuw~PG7ja NK:o@f.ԓQ6hY˪Q%[=pcZX"E` "hw+C|6Q!]98h}^" DٝD_$pE[ijn$PX5x/fpIVG>Lzg5!M޽f4l} JA7bQj[t+\2ãl[\e,/K*uY/qوdVZpI^z7k5L5!mtDL(psnQ 5&/oed:W~ۢ &Oro>U9 [19c:J鉆OY[WWMI `W豼=I Y1J 鲚(K({וV. ϐ^MjCED39S]Qy/Xw^C(I *;${gdh7#X^Ǹ~8q{1 ,R ~"+:S 3m6I>Tz:RY{QbO,_YlP6ʻBtW!+3dEX/O4u.#y֭K:}g{EqP`R+)Z *pB!w6zz,aadtB(&Zĩ By5a<ܛEMS#mAmzvf xXqR>w\Ddz g qVe {P;ͻ/Wݯ.\ڮU\cYcz]Wۤ>aW֋ٝm=سDs0QwŞ+7=eHk+.jCM#kQ*S!)0"hR1 O7'6E{q`cfUrhqahm>|{Q|l GhTrc*Yom(<$ #B [h++-7HK>UtQ>2.fÚerm; L\(ӱ 쎧©4(4N¢6sJkC-H|9U&R@p#J !Xu`B]EjV  a,>7,2R!#D:U&.d8>MB7C=WƁlO].vT~)FS9"%l%f 38t!$*Px ߝtV/vB5Vɬz"y-\{\M;kqE?镛OlCX96] AEdb哽^pY>z RnJF;;W]AflA)gXpF۱Bޛe{XfLwX)CrO&F)꣖XWur`aZ^ 4.-kRxB+ B@ij~-p\PV#$ړUZ/xUlq|7B>S+2/}6ڝ7SoG7Q zW^ݧщ']y/JziVqN;5cHRYlBj{MGO_!M쨄LMЗ!nt˕*-Frh|DZЁH$¡Zͥ?z=1+z9MPϰr-wb`´'c*KҔ~FrAcR;-˷8.Sfgɛ0O#&HaJ7p)CNw7!lO3v3XfqD39qypFK){z-U}լ6N' Vlr\ J{ֲi`@_nkFh[I=NGLC3LLS 'U=aSx_%5l¬ʼ t~/s甶ﷂdS,[K";f/Fw`B&r&e$gn7&6%MY ءyafL$08Bǜ8ة3SV*8$Q&:G$M7b`&⛟ԛA; Axk-Uk̵=,a +Rt1e FTclFCS |T @:()&ujrs7u4vâ}=)-a y! VˉmJ2f<64ВHyf6v౐u֟c%êrfXV[(tw?;*+L]T*K2'Ccx~ .V@~k6[^ X_4*ĢT6߿o?y L#,n!|Drjg4_AS fI=a)|**˽ru[Cp>h<Mu/˰Z#MTBZ2dkυZnƍWj0ۥ3@œ<}5`>/#>%8psTB b]@AfwV* d 셣?{Z? VGB,3$lE~atB{ G5)D?0q^G/\_] 7x+S(]'*YN"0똈R(mQcY9 ½*q/A9 0LGttmuesf͐z5C .YNT-T2@zIJ ֭iE`{dzV=(LT)5?n+ !VKwψpPVaql]u1w^/q.O;VpjNcq&l6ҝü>n#uֳ.*:ʀsQ-`>~$ٞ,vVθ,DhS%M^#9Rk7EQ .ۻߺ\ [?V!iKk&RQ S)3ipKTo`q74_YEta]Ύ4OA7 Y,Ju6wd*& ;{-5kV+ Z}3EKAõ܆=c+Fz쇻+P[C5q>BG e[[]YHZg)lN@ˢoDq;hf:',νay3PLDȅnwsh-) [$[1GKiz:x|E[uK97+{NbCka7U̾ Ջ)hw?*6=W RIƂ^OM'N%׭*_JL8wQؔlǷ! +8 x=*$²4iAϖ"ˆDtCݘ d}rW q}o%<dHd6gل SY7hcJX s?i@:pXK)-Qv][so`WNP;14.قI onm8`pش]qx  QS鉴&`:I"9&+%gQh"֊;kߒ2+EiKEȒq 鮰/qU+lUAӖ| )CH$MyVȔ&r0gqQO8K I=+NKCeFHOw*Zm,c0ХQ]ϛQ[K>o~ǝAc{ZCCfĵwnn!)d!vY_<#9ZQOw^bY꽬_?>9lB@ZS<|xY.`'DjTqk >&ummO2Ul7#Yhw?[&_jNh`#aH7sac([mMl.֝*\Bg ӣ"8].В]s!mpBEz[ ~1պ&WΠ@AsByyYhy(/_O='&<ր*;f'浭 V'&׌6\֧KTY1N_XXtg~FG&N+;#^-mB#JN[^[1NԟH c$e 3掜h>9#'?etnfdAnӹZɣD!x1f @% 0>q£_x*#12Ӻ0a?SzKsquRU8ȝ[ X&<:Deo'JۑfBL'k8g@+x~G넊*;ۑcr"cr9dPwDƹsaf\^}zjمbƋYk2|f Y-g"M Om1Dtz*L܉2{郞b|,AՅxI[U'5ͯݙE$3 _B7'`|MR9rm)lͬ>dt.Jy6Y|g7 .۶Llj_J;rO2G n{ h:@_#'?dJ4AML-?9cYwŹc!0W|`\2 6ք<e`.e£@@+y;Uvt=Y>6W;+@qfR[=_7<)ZZDwn\Q?6~KE7-hE+tM&MQ&86)h^فc^f-k~mfR{S iZ04m{7NW h|kSZ 4e9\PWu}"!Pl|čliF)'P,CѸcJX&l=tY}KĩzK{%siQ*Ħ? -d6BSɁ xRV17.9`Voh isb_H(mĎߔ>p˸j"ꪞDlhڠP\u"S0-zPUs $É-j&bز_ixѦb\JR?5#S!I"oKFbE;]w_ `'FkY|q[%*bp]8NQ|fs/*C#Ef˙\~ưr=8>M[2\Dd -zma^ȝQԔuټ濙͌ ˀAH19G~jCﲈ!fh+q4o,SڹIy\2S>g<޼+&Y 0'O@k~q$Ģ E,p; GB!( xPMrqHq@Jg,Zoea's;u$S% 'Xbi (E]t1%cR6^'B;Vs mm4uMft؛FU 2c.Kf&9ü:}M˄RfF+oCU{\Wi4gk4`Qt1yʫ^L46PtyH2s:) )Q n^+ L/bfh=Ь]A U QMGF3?HO; o0&Og~CpΞA\۸2)' dY6Wm=L[崿pB5][%9Z[dJd++rFRo\=GuRk+5PeO-Ou$b!89?6rZX1M]sjq[wTMx +x;kٸm~_1F(~Tw?,_U#.#U׿څٍ$E=2|)_0]BW0u>lɎH~ITxp4*F{O|V[ڎ#<48`v&|ݑ[LX@B}7SFR(JUjL0&7OD19#,Sz6Lr}C:A+:_EgRv RxoqQ[?!xkI4lsU8Ioʶ!6m{ *Eޤ0ĵAS1_03L/|:OqkaYws=0* ;k,RZ}\-Ҏl`Xz,!B$$ |Ua/G(|gtAE@-+3\Î@3Cc3JObmRy72\KU&)͠?bA輲:2/tX`\zWt='a,2ϔbޯf] );! &M_%vH{Ut.QuQH.){P$sqqŚW8nc85l#H/v<Ѻ&& QFͿ?-cb񑊏T'3^.MSj :\Jg{_uE>dza7$u0S51{_}vd|[T1Z%r{fcl|̺-McZnK=i] >I}KN79;]~.<6#A?Q4Z)}s-˵cknnڻ-,KJM:ߥ 'Wk~N 0|`VJr#<;4E5xy,х,,iQuaqbPKۛnL,\ٚ2ܕk K$"m޴S`Tsbdl3=SgCSd>Ў{mNy#_d(dy4#2"}żB;y,袻|s9&(v+ޑLJGB݉'6qcJSd t1:UdN` J=& ;\*=꽙?1FCq8W8 4Jj(>=>%}4w RAVeH>CrPhqW(uv߹14JO#,H>ݣ$ 5;]X ]wgTP̅e-5)5u{hS۫0+K =o / 2VV?'آPSFԱ^=0$T}p%a*H ] >}ȠH,-{ * YTNIOT=Ws ::GЇ8b*$)Wa ~`^6yS 2_~`q*Ol$; [b nɴpGť-Da:gp $baMb/V!8nuB`oHms3u[8*tvC1_{6h0kcWܑ<39E8j;uCYsJC£O]!QWwc =@8B`$`y ͤO9_Q#&;GzoT=, y_x{ފ}RZy'hP}n"ByPv}?DdVW(*ٸ="+ţ.w2!6_yMCv༒|" zb[ /_g_yPM j:d(Btl7!_8۞rbhxA֋cX.;8}k\Ǭ Sjc#;; /Ч['_λ( Xa 9[`V!ܮ s!&dAwꃁ ̴g]owk~lNTI42tp{o.GpL7."WG32=%K!tj&~L;^NvdZ$c@/G(Hr5#PvNI4}ᘌmpzaV캬8ɲR߉t)l Uja:כM|T붽uNJ]]BIV]1d*ig$xfTؾ>zj_*+G¼7g cbx E MZh',R ;LR=[yнpM~Em sF?a0Eh+O9(f6ʬ̺*D:z:Cw 'X-Ա.$ɘnF1J0\e˜n% KA.^W#VG|EsXS*׏Ї9p)""Џ :dž ^{o:OgBQo>4CF1'=#[s~$ReJ((6Ҍe,u"~T=-OZAW姌D_g8%VwTšP"C |SX1u\ ؈3\㒋{&^ .2H{."jgibYuBh5 Lmn(M 𬦯ǒUVpcwJ4Zы){iǮ2Ht/K6Zs4HA}x;-d`70}\^XУZ_]Wz.'^Bv0;["dtł Bd3.{ۇR\f[WQ{g~sBǞwKq$lJwL$%.?_ t9"͇wREkd)Ҵ,jaWS}z$mxs˅[[;e69J`->{u{ a ~3 .G캁.32yg=VGq`~[Htֵeq6?_'~^هB܍ҁ^k"?Fr6o5&P_Zyv˵zT?&~Q&祅\ɷJݫH|wcqʖ`*v*OԿIٿG^ԩv>%Y\6<]羥x8x|qΖ)y>`8 e8Bӡ [n{r%}ОXz#xX[]ľ\]DeNPY|N&?J"X`kRWkl5~7_ҭ+mp7#nqd}^O=!<PyUuSٮ,\_O"XtŹ^,ctzQ4A@2 NG3E^UU߇w ROj 2F X_:Tکo8t>GZ*FNִIhM5nmu◲3_f)&Xi˚ UE`Li&gJUOdE98Ěr}h |Pg?xdv:bagy;'څu3Uz[/Cf<:= şs  O0Ŷ wX7wRAS<^8Cc&y_ P ,peD`#%g7jEc=a"bղpBڅ̼ :1̎y'H9MZ5vV }`s? 6.q;$ /vy$LnG[v|H&gJPBF5B`c˙/{QQt=B*&"hAÜ>g47fAh/=\`"*WaFVj]F3(#yhcg^d)+qӵhDRBJr r`{pgFT<5+Ɉ!Kb?v/{:2-L$ܞ/&Ÿ>·vS.CB 4w~u M; S$ceA (F&ǂMt]~mh. Yn?t% =({}{ g+U/ n.7?~XŨ_[s!W131y[4D!j*3LX[nBHN6>c:\xw?bq#śzn i)b1ejA8v/;&z,fmQ0#-+np-0lwXd䅽xqjsێ˔ +" } bksՔxRӜw ,MϘYo,g5#5PMTODJJsQ*=fbaɩR~xIZ82 +qI+;œ6=YC϶EFjd3ѷXQ@d+MI_PrB.A&c;,-gc34=˷mgwYCN]zVBG*y-no_I[ T6Kd~:-Wn 4ħJ_Nh1gm-9~?o9wf eyT # I68έ9C", ьV٣+fi`K7[;b+pyD -cMG))8&Q i'}a 4TS/|0x#ŕʥg& U P3wT^2HGpeH_N-N"KOj0YhwDMˮJƊh!J!gIn[uvTbHxtްR֣Cdp|veog`SV$/T`PPl_Vxuנj01שS&=kU;umkV$Q_MBG@a?o$RXܙAm _xϽEsG(`a̹zGӥQ\gc*U'w|xEQ k.R@d ]vݲQO3` ,ðt~Ca+?apWjD%b졯v> MNCB=iQ!8$F[*2ja>$x*%&.tI;hb3EKIhjR*lsBE kXoLH:"w7M߁ӑj*~Z)2yy>7&ڌa6`g_^e%rwxM i>R!;ֶ+)oDA< Ӫ-rC '2ASco 3*N'8`͞l:"} _ը8]p"ò aٝxHU/tPPq=U "WLKMSB: tKaTtjQPH C2T$±YiBcO~a TOe%Ue{[ZUC=\")d/G~>ً{fkãr)F60 Y] -ŽBTacG[Ie!諔Jc+.@y4%ҋ(xg쉌aoBүo-M~kv0ry ?Ic}eCVS[`s !xRI+pd i cu%}h['cv^1.]&.m1 Y4eҫ*ЋựMUq*i桛h@vP|]j8" ~Z1zeO&N"tt Uj +.|PO'x /)\@Q6=1T] &ECbػ+њS%-{ʥ^lLOÁK|:l]~w{ æ<|bvš#l9Obd M>*h~F$Xc-?H~`ZKHL@B?/q Lm!h<+xpʑFsƷ{B3 j:n=.<]C)9l2kkݻH:'!T3F_aӰi]ß६z`LE߂0dU]1 Ȩ"AU&m#XENH1<|"#0g<)+R7"!AW#5Ba `>D/h Ͱ%p1+/-D^?n_#')ǖd ;e#ԳëJJ1^O ducF|zUlArBH%J&Vp|w;Xv̴ L[.肻8:w*hI nh%K4v6͚@p%P }tb̪XnDxI:&?.]YX T37] ;H'߉dȩ酝XiM՛<(=pRwF5t$x tAe*)˜U8bDƵ`*y%b4/gفA+EPeDA9HD&FˊMb:ji2G(p`44ędP{ 4Sn^}WLH/[\AS?']- od4CGpt%]vj{,BO+x\!CRP. Fw RѬIW**5=A9>`A:Xx֡}3k{__*Y _hIAy_ݱO 3wq}O#Ooy>D:2qd Z=V pC9^Dov6لĺk$NĈ]kMkϺ~Հ^V- cφdkY+<_ƍ8j}!f:jcy> gQs/iS;9 mM,uVD:4S _ {"9|-rf p7ՍJLp^25MR'2^&@NV>юu|+#? i5isv'^:>zR,<z$B5s=~lM76Qum%^ sD^J;U(AIhDziI9 9 X%JJQwѢNMV% Uw#봼P2?CNT<8Du>JSjjPϬEyrOt~8]:Z9J|ٰ%֜Rˏh8#ޯ1*r' ٛӎr凶`C~aʬcZR\X-Gyh4kiPOvmp8# V'bژ HsjY>4$OM16FލmgȚ!èzSefE[X0R!,/zT-W`~54Bu.n.YGO/? HB㽭YO V@u8?-lL(#,J8C9;%ȼnzI_ʏ4z>AouX>Y+KcI~Xs;eols9C:k GImշۤ'RzGk_'J'mff3YBtQbZoPʣc9z@2 h}Lh2AEI4a^WA+%AEl1ZU~X$ω ImJ|B ڸ!qS1-Ϙ2N$X/I;vFQ;Z~]XluLc!&;co9+3>3| ECn,9` Ow~~= "lY8&:-bB T]ӣLH9DWkXʷy D!Ӎz Xg>BӇGQ;fjt  ]4LdcIs!&J$c҅eNO+l־Q]C*8˖]3%l5@핸DCTh+u'=CQKj$S;,9k?B^.ɤdy9w?ьoy?0/إLg+ 0>xx!A(΋N;bp'SGy<6 I ޤ[2J=5eh&^O繦B}$ *;p ciLO?ja&u'!^ a<mrA^ilj nK{0>'@ өgmQQ߆4Kڔ[,cHbo04oX0k;cY\9ϓwRk1r-nSބ:gF0%אl`9ǕȄ(,jdFL&4*-KsǼgTТUܙe2Gw{a)-Qg # i6 9^c4qLǰG',FmIѹ.ia+(̈́z]Zݑb6X@"2biOՎά)(E,Ei1gBK'Y>uӚGѮrp%fw$`wy3#[[ֹA'# O^ ԋrY\5XL&GLf$v#jYI>9=L1m,FPj@Of5\@aĿy߭R@E ^2VA 1lQbil乶w9ŵfut؆!ʋǞw1d#P/o{>c8"-/+TɰzcUaZ韣'`_F&bdnn1 8©%1+OfYџM^\$>DW<`bv7@vi4mk]@&ӹ6=U2˻je/:%Vy?${3k9 [A*q % 9T:=smn1 DD퀟ek8ނk~O@'k Td+ M~`BF앴t )^*1R\Rn,>xM+3JhKPmeGiBjۮAFklg WLW35i,=.*p^}jϼ UJݺ:j)MTn\7Dlw/N~JneU۵G9vC,CпDx=L itp(;׸'x: pdz[M:cig/*$WF~ᐯ95S >=eQ;Y. G/b$,1ʢ/zSCb|~ᤷTNJf<,K+ QLxhսtxF'Am:h%bsόzLLpMƫj"j.S T A! N+ˊhO퍬! #Cf~ne\ z/iJUQZƪ) W`Iܒڨj])PZ33FΏ~|_^=T`wZw<\Vc &l%vYGRFU?W r" cVqc+"Ns"~O3D@G`=0 O x&tSq-,J^A%0aok.eG98 $?`^G4߰a$C&tuZ -]<ѪET|GgFY>r\[2;3rы|%aXj;%ӷM+p,QPUϮCk#ߜIJ|[9 _F'^)Ďߓ\4ljQLJVQ_ڷIs4-ǹɪHmmc,Y ;<4+fb Cuxz.z}uHlUoV9˻)"XC|֨NA5H!߷#Gؾz;N|:/'meC)`tYsweF…k qh ukV@Wogsh܍ȓ0aXNWRIǢSPD[/?ƝA/>M fR!4gse"S l$Ayxӫr~"J!"=6t{QXh?ػUK\sYt1gWۡ-a%r-Bl(]w4-T^"l9 BJ YQX/ -@WқDR8|o0nf٠O-EMقJ|Cm*^qYe?Ur 'BU3s]f ,}<;gUM9rYGۜQI=`U %Ãmo-8r-I'2\N hI/S=F40d.cJg:2_$"^@`X[{I+[gpMjs"ex%j%iyЧ؁Ou%'j`6 E(a01(1317 lI`^̀4|+U?v]q$H{tSUi| q3JȸYFz?#voS,הN<#NǸNa8UehQFe᫪MD wHnOJ7v nNLzfI^KzMe3Q*&19ťyԧB0ި/P3.%tsHQ<|(6wyo$@wILztLb8ÇJ"7/A⣰vCMDl.e]  I !^Cl*~tďI[,g"y3SƀmR{XUNTٿo~xA(?XTiYǀj A|CN npV&,SvQfJV)ٮ6ά<|l i|+27g6háG6 OO^sQ=-WA:dz0@񸋼},u:S;+Ŧ׎7;Ǡ3*uB |[~NG^<*qK1#8zL 5^Z0S 4:zaW@FEK)CCKěP4]jA8 M?D+Q=p> _!|R_L}tR0\l㘐)Ak9QOZ`gx22d&.SlI0/`:Bطfs'.(2e\ᠭ|M)HAJ>v*ek<¿ߣ 2NUeېTib{6ɋ=h$ ?]^=Qd<7.}w%l(=I!uGB^P Y4gi5>PNJN һ TC6 f~ > op{Ul?wn٦@mᐻg0aS8W8o`z9S=oA75x~O%Ʃ+@[֨bC'0r[sëS)]8]eז w[hq`~]\LLݩ 2]?'|:wF!Yq;%%ͫ7yȈG BԙR z[/Eb?6Xt6`R$ОCι|׃3\(叽5*ơ&I3S6p&Hx<+f@JtCN 䌢LF >Kp瑆,%2ݰj` ÂM!ҭt>Cѝ Y.8:29Y 8k@qnA2dPSx Oe|̣ݥN, +DY߅Eǡg8  _!P iG)2Wt"WÞoe;\1hJJ*d9$,ϱ6VSO$Lq^ ->v{,%`۹6{,w 4@몔Fnq ⽯WOuMWXAeU!u<08]pzM_stWOЃmg?`[8bsX- udh* #RQ:ԁɆy||ٜf-jĸ$0v՝ImSG[z_2>uOʞEy3 btlv;I)! in$bA),ztQh)K؃_}3;sڋJ^:oH$I@VF}/_hQ Ň">/#vQ(?$UϨwAS@⤼*q}#]ʋ˼^XWf?Z>-o=E&кmA 2y% _Xoo (VޜLd.ôjn[626kR :w` kCRo7ef[8$?Lk[_[Ma9FQEu͓v#A[<ޞ&H#g,!bYAw~QT8|EɜPlU|p CZǕ`oRIJMCyf nnI_5yTs̟h$%*, +Q<:slL-eKUPI(`Qbqqw kuMژ+H Bf ZJ*I|SzI|9ZzG&Kw&AuMwt$P)0t\c}>mۢ^礁A{?KWwFqSӎ<02RS" Y1-wF6O/}wctM)lB(XMUg|ԻVWj"h, vm(nu]*^^IȈ|!B^xms\"HY6e0vM@Ш]&8+5gvQ 'h<5-drÝ]fdcw 8c^?U\$$(=y D+hy(H$aQV_4/UW;nSUI^{_web3|JXY]Y߀oYepaߛ+bcQ9BB L7w DUegNoPfX;WC`u:Ȇv}(H4qYbuA =2ڐ݄"sA9LsFf*OkJmwU h l辮L9gˮqf)(toY2^*^9Pw|;X-?}gʃ)Fl,r7HKk f{j,dc`b̑DC4X2ݥ$DEs/"\VkxB1h+xk!fjI)IP' y~rJ24e6)$ Pq,hi:&/8tIuSSA+s%; ޿3tD@cT"+Ӗ0;aM21Ö`Nqt]it=Y+(fD|󁊻E\~Q4DӪ$_1oZ f7I@6v'Q*# έw,}үbK?8N#T)|da/ˈ{J-!f?^avEn= x 4U,;NC^l8("5wgz~ɴh] nz}^ឦl^t yg25͘"4">6hy?k2}ĝL1)XD@-WpĆ43O3] Q#(Kw)i\sw-@t1ɀXX^Hk<LEX+Os+r%nb&wUUU0xD񟺔t"RѻzX-8}EN~-yÖG?(q+ue_{p}ög~^sfӬ>ȫ+=IJˁ.scnJydòpQ$@ˇ^h> x5Z(PMۼ4*~PʽK~D?GHD)ƦkAsHԢ>n{`-QcY4H+t@I61eZ-51Lwy`1J[18M-O,W6`idJ$r$(Qp T N#+j/XG`bR BLB^=V˨ kga(P*XL=nV <[%\f' #cJ n?qJ͝izʘPq^b\L„ʉM$|0/ɏ"U|2S[(nڌ=h5dY\ޜ1sp*UR Bj~2gHIR% J9Vm&Wm\>a֍CK"Fly%>\;]ÛHugT^_ Sdg ȎD"E{ce3Y>6 FHY4 qoJBM+&͠.c皁C y@/k! ZC"fDe| pk&dȿ֔FW j GdBd)RQ^8򆢆;_JJ[򮊛-`Y\Pjd 5C¥د"r`$cp1{J0]:Rp_$y|eQG{{.5\^ rBxv'y:~t4$N*/dM0Bl@SM]Gt%Z>_lbF%5\1cyE[or|VFH2MjOSɝ?5ؽ 9wq͝71ב}AQI6Сp::*piSjݦ+Ǥ~0 I=E@+ޭd4"6Hae7|c2?HƦ@S~62E< f$ݿ˩˪ѵdNz .u9$`'/G(e?8yMU'{2\LZiFݏ9,ndt\ZxY^?.ޜ.QDP1y,N7N |ΪK]jk٧"NސIuBߘ[kF*!gq#0FېN^ *Y˰(l|$_l]z^ ։4o}i+9"8?hGn;-['.clnT `A&Ip(AuBRo:L?% qVibT5Xz3]"<S6xt5Ϻ ξ+k!_wc:MpWmC?ᜀInS :m_%I Y`La3n[Tm*9C|{YjafGj~_*/ҁF>De fPƌ EQ9YOL:6_8mn0|=w*d9鉑=I2\Q\2dVБIw)hJc`@LR6=/nldi +1Wuz3[;DU;vCAYEu QoW̩HuqB7zP2e;YP=D^+;n8cZ%c&&Y &gar64A6^ỽYMrWlנ1xD>$ȍf&v٪ $ Nkz8fR"\΢$_q/>M%w]oDo$CbCNSÜʰװv^{ G/٧"Uٷ_1 + 9)_f$@C.i4!~@֫[fm^fawE"]`= /OXG&jsly Z5-F/^X~ӲRSaa~1;3Jdvӕ( YLFDy۲feM=u|B9"b!Ω>^w\)`e:a}|%}vP䟓w;*0qt"-g5;N%YI@S@+9}K;?pl`]4D(l0@Cf¯S|$ĉ~_镸 xoה7Y{1_čR)uFPK}LEO!ҤL5]2ܟ"ť"|Jg 'YKZn鄔0yąiais ycic*Mͅ,%n_\ijqaͮ,U|=R PH~`\Y |U n{H.2 }XEVFb2LOPT2Lr"|ab8űZL=RL}_[ZNJK@/p£LhrnLiU#z,dHAuO~Xp^t`_ I«mCas~ĨQSM7dJ>pwPB382íBX4B aA{9 N%@=McZwTmo߆ڹ 3vC7N DD@bF{{xP0P$ o͓ 6k=!ΒLެHT56#W@@ڬvs?n!'MĪEllqOOc@->x3˴I$]RdDϐR#)v=񞴼H-2WM΍9&FM[<:YRV=C"LL ,;}TfKZ/Ӫ&JQ%hhh+8ig-N8Bb氃Vc飝[ `R0"A3Y' )m[tm 3$Z+z33ЈY2zoWFaZ0k;3f_w%JBh:@89RLä˓R.N#,b.$6,sPEq٨0'8{_;|O5=Q5KyT|bn†ZkQA.iHwbIZ5|f`z럞IR+f)e!u(LZL}qLBM;sĘfX0d#dܨJJJ0JeYP%DPBm7b6F1~Wy1ʾ_󤝌LX%{C9' pZ "Kojh]Bccy|{4g]N$d"ϘȶunyԽ !}?Rx TK? ,GCl5;m\iwac }i2>:$5AE8.';\PA,U<- A%Mri ŦKvA2, 'meg߻BՓlFOFݩKŽ,f6.q\5J((봉p0 ׎Kꪚ'|vu|`٪.NFRB AK?@CIMשѦ4t,q^MɄȥ4Bawkϐ\"3!9tͲ{BqrV,q28L ֊ U(>$t66,ZotH=0:G[>/@h:!2>@~#ȉqgs|I}Qad+|DXq]`*P DGr0@M8"8]Tp0S1KU][[d8BwA6wdU+ySw E12%MEuDH؀-aWFt_ v|ܙgä  nkON{&̉`C?W%< 2B::sQ >xq5χYYK5DAyx`hu;X_"" vxQk"t%r8mW?yh,E]be7h+Lg6ՙLYZ*%1 W]#ŗ2[:(Xdpjh7kg됽?T#8|֮FoiYI^XsJ#!Cot,!{F?"=h!E~-UCl4kG7h[ã{Mҩꕌ>`p.f{ጟyP)7*pڛ&),6ģܵ /<^6cǸ1rGRG*S@hg[eQ}j?O)*k wZ?݋Hvtmb3Pp+%n9@ Z3bǑ^C=0@>[D*9D}&bvM<R+k;'BܦʫBualB3+KZ /0Z0IOehMyGɜ $<4oxJG4Ur0[SeKm Xs$I[_aW@8fMd5 :#`eN΃(a_Y~RgG_GSR=gap!/1ԲgBe!Y,sEBaJWnKm)87v;}~dSgwqz~E˚jVKx{lgp]MP'ܷidszHQBb3h, Z؊Ӊ6_)^xFg Ú&@{n|q0N1EȟJ] 8)<$n5ھme=S£'c7|B+:xL\aG:{]H~WN\2?fEKdְ>P/­*xtݞ 8.64H¥~Twp;],T+%kK܍ӄL6Q <>\N`1 @Vj>eQ f0 k/[<ſbtٕ QGUTov]V2z1'>1!N6IDB&ٸfUw~g~< VݬH0S/~O"M c$SGE$xԕtLG&XK(iz&y@EK'Jƣ]zNI 2(jͷٙ49Q_ى29mt{Je3W]c/fIL۲{kF~ 2%ڎYe$hVx_|DYb5w㟸*V,4/hpc8 |%e3$.{Am=i3D9K*V}; {T< g_eֻn0FrD42©|Ɓ) r"HW?tRwQt[lWOAAI&,ힱzdF8gl$z`YQbQhsm/5xgovxPoJ?܅HL6UƳ9;lI^"q1؁yZ³HZ::T d^R`WһV(g9l/hQ¯ a/r`b3`."Y1^*P@^8-]Ul-6W9'.K6~)DPU0N[6P"* eZF"CQoK5I2 ps+% >o+ӻ \NҭmC82D[/oq}O!7EeQ#i6QDx^[NjOۅpmm^z֥s~>cݛq:=u%k %d^~E->œɸĄ=2=JS֍~4NaW0ښU5Gao:X3M Vkx"MmZg6$t PR=.\]ջp]7APV,m٠ 覸ఙD17^(M3+!_7d<>ZD0HQMPwY1vM%136 /G~RJj!XşF"NMJuǯJVq19zq-Kÿ=jg`fncU,r9D$Ԑ,[_Z$)vJ&ʒ~7v㵊4gB>$C#[.qz|Іȫ`C.QH(# zla8E( ,h^o/+O! q)RY$%˂"tۉY(&k(u'ޑ %*MgTMۇ֪OnjUϊa["Hvq9&bYCm#c3Q a7PlfEc~s%*At-PMq-`tƚvo;,;6ԁe>HT6naHF֥bG(ĶS:ٝv`~Ois2G<[2ݙgzZG\c0Vo [Ikb,u|\hY,Qה|o3~Y`-I&N!S>!SVtgMYC{,&ٌ3c1;.$ژGbG=R3v E~'WiXfjʺ&i`9 ̏be ٠MD'$LV<'G*^{ns=%EK7 g??N0A4i6L<%X=XJlWlqŚ4c)uJ {֭t_2XF8'[q‚ڻ?RH6Z  mrsGJzfH.{^"j^K{MXlEO)(jwv.* PtQ?)9nnzN`r+ OZ7LIxwN[w[ ʡ ('^x6s썜r6ߨFkUq&(!s9W]l L֡Ϡ1WMyR2nhb!xx7'dGЮ%'RŹY џ0 ,/i|vLkGۣf=mLNǰk0eW01cU F*4p \{VVw z0^$:3JFʶ)QO)Y«1gA5h9[ܦVJ•oC%-al}4d>ߐf ,\\Tvb<b3nGׯŠo%m+k䦧rpp)vZcqiu+BL6']m-)y {+ŷXk9ߋ%Vo<&_5*⏊ܤÑI\kpqE)%l7R;r~ԀԱQ OUDK-y!(YJ!cÝT&?u.宿>\~\p.jTLNAVA')$]݉j}?w`bioj~MKĊ|'Շuj`e$"L.y*[I8WlU F]' ֦ ?E9d"8Jm?pn>n`Y偐TRyЬ95n ) /; \-:sƙlpAd1; %Ys m۴U'~}@26,iOՆ_"9Ymk[[v&k^)Y#F 8w9<Xqf S%bh$jN? 1 q#q#f-f;aZq.>ӲV"Y9kcU#" &ũb ̴o{tx]# UR*E][cFzsAi˾Aa4jC4jtN\Lײ9i; aSĄ|~|g5 &Z̆6Fp[-b ܨKoIbT ?~%Dpt;sѣDxD$0gσ#bួH,,!4"B:.ߞיo n0X'!AQk>f&xomzp[a vDfjf{K%: yrS:V!^XwW^0d(xFsE&it4$sIرT!6`F7H*mEwBZtZ-f:*=)a^DGN?ׅc{ۊ0 Zqo'? llJ|&G{2 ȼ[^\IC:osGW4:*^6d]XYWb[|\F] yc\l[8>kv`;Y Q M 5lji tTz M=L6>2 4 f8T*}WpoDKyDk{2\obFH xFLPiL#t!GtNKq@g9Xow0(6vKgv|nKQѺC,*p5bC DKuNh %%NfKME:l<@#gœΒ\(fs$:MٵW 0` L)@\Ⱥ<^qad\ujKZrj_18fcݜ9[H"A+f) y`cBfVl U%_ TՒ|`F,х=*ow0'}0l޸yҨCI[Ͼ|l0qrΞ!e 8䚠OW2_Em_ѱCy@nDTAm,?^em=fT> ꣑*> 7Y8tl,/@at,h\ɸ@AfSʻ|Uz48vX1@ʼJX*'\`As8}@&Q |)d[WIX Q?XR9=g}PIrݫ%#+0Y )UgSEkYsLǼ e1Mculr2LR(fvɘࢢ9v¨z;2q lGüK۸<~`6;mWK~uN2IV6,3o<^4vh]6pE~IOcqz^~"ppꏓ9f֓^CԨh<0 Fm߬P8KÚ$/hzXE3˾zl ׅ ;%*mzS$}A[j<a &XDךo7M4[HRgڴTwԽdHwiTܠVcxM{8a0ٟ1*A/4.YmL]sg/7^~ܷJ&8|*Ջm)x>#+9$WzLb{zF̈́  N%u yϸH횶 -uP4W+m,kᲀMߍw͖M!F}ǫ6< H"k)2GRf~󜊮ɮevT0L! 4oM2(ꃹ{kԭG@4 XA!b=;x emKx:I.SE3j:U~(nTꮚ#R^p[w⬿ iX[1ʯAL5 }?8teoƝ~i4_UFRw/ţ((?5Z_ dqΞMئ.$)XMCD^.H]Өļ6cm&G{{E])Z;}Y {2Oh#3W :[y' XLH;gA*=[1vq<ʆ Ϝ8_K.3S᛬e8(@o5Q$.VK\Xmɜ:-wH.F-ʮ' KxTV4 ^8gFٽ vZre.3 ŌTR`@iE;cr/EEm˳_Ad^v\ڛ *o/eQnMsa@ XBbz '|Z_زTp]HWq( =(Tձ:* ZRk̘DEIgb2Fv%#MTX Vgs]O iGI;Ut-y Yy32;VJYHh T IoLHs<8+J uʈ0o3`52yTY )ux'T<ٲ7 w֕(a㞭A)"#wD׌θre˟m1}pOF!N "kZ=1V1X4a^qҠ4◭P׭K rF6 r& Mmf>*s$4i}":Nn[8'U+B?+K2oѿ1KwGaKiy-eZé@ubѽg OUiAzcq~(_m|BYV;Rv^3HKW7m>xlalP{͆McfǏg5K0mK J /۹Mb2Mh)"D$CMcss|{axXhE?oB]n=YTb` r{#SCc9EڲCC>}"+9Vl/uP kmT\8=׷F̺*&@23*PHx=(t +Z<Ħa Sc_#RQBzMfCz|h>MS٠'DwtYCnn61 w!?XeOKz"gL޻m!7kcǜeܙU S9ޟY̊UKYM~-Њ{,*`]$ X$#= d4ɻM_!樵z!xѥU O D#8 rҞYE1(jՎ14&m}vդR ̤ĉAN+ޞclNtD8dmՊaGmIl2|[(Lg釴ivWbnOPV+IB{7>m `h.",I̬BZ!tL۱\(T/`HvO4iW+(q |6PlbN{!ǃVA<^эN"O#nn&M$^jke3iS</~HUg'ߺk`"+\В+OuX74״ݕd(?o17nBK-E˩|~Jg>+s[0ўkSvJ #"~MtUz#u*2:3u ^tMn-{u1y߳>2맰x9 RfH\6,QvΓhaC1VC![J% y%O+,bCO1&RDhiHKRJiltj$C[b˕y$)_`ne #hWD9#LcYI-w0^a`]_QZ"E{i**<顁_;#x6K7ۏN((tqɋ# .ܣdW%=$޶%Յf۷=VvdC 2pDmP=i"o~['V]Z|h&%0Wa4])ƀFUWgw̻h@/zi"PHgUk`ﲦ;ޒ9d5KB }&"rKә9zEy͸A-fn5}J8 a=l-<Ř tqz~]VƄ ojְ$Xu]  D$Iyxl @څp:ŖL, 6Q_8 pgɫӻ($#M>@/|W2:Qr`4xGfݟVӚaʔK3,aO*jE= +YXA6cDe ^7Eӻ lހo}z^\/I1 1KӝF0 *lFaSzؕf͏e$52DX P\_hYOJ"HlB7lÄ(繒(XҔ0@'쾼-Uq OGf«\HCnA!q WƬmfPvG" -78K:E60u‘|~bJWd;EѼDFۏ }sWw m cǠQi2dl >aXr^֡rn*2I5]ګPqH<0~CI+05_[ã-v*3 .ph]sG@p華 s)&O.{4A~;q X,QE e=1;aB?0'9s4 cq*BMƤ~A6q@6>n|LVu;b١\t 2g4_S˄wa+t p}rxs vR\9ϯ4eli/?{}3}_O\pEt Ԉd Pilõ wyO3XM5ɷo8  Z|> ӊuq)c`U'=~ f`ֶs@\5Q6;`+hXe@i)+)I;ykNtOEoGZ<EuAM<"ͮyJ$ߊڽ}6ZԮ>/W’(?{|; <&;j0MބX#%ZVXz.Ѡa= kV"$ܔWmWz#콝O4Zrl[}Oz?Agw$clQ9G>zY:* 1X(i:*;M`$R8}l>L{]4%83{aGFŋnXLv:l'+{ļcl߾ M+n"cHb=%suPS'vg;P~N7 Z6GFM1-~!߭.w.20Xc` ( (Þش (Jdr upE-1~e]AJ%ela MG\gs(ϱV! ,*?{iH6@'?|vQ`., ?`AV19E㭻ڟ>mp]&ǣ'DkL0{ Z38nOBh6]ߙ rM"b! 6!<hr ß? !_ʩр&2h 8(>Y ,(C=ѥ3^__m +OX щj[7 c KO t}9_g ʴhWڎ LBB_ }8S"X0a 0!z \-(D@ mXj9b+S6_Kq$I%?$6U[+dE|JxAL5㛛yObxƪ0+dL^w%9&.7<՛=<7u۰FKM/Q^uz6 evS\ą.%7u#vJcppRZ*a` .굧ۢ\"rԗhWz=)-6~Js)-YZrqB侯*\+L>>J?.8 /xmJƪ}DYAa Q#J8V=a%8jm'R)Ҹ 83y@_ ӆ^¹=1BDZ>wK1-\n0׋F#!0| ~P/ [$f+!&t!`qbII63ݧv7p_âSKU[qiQ1v]P?{sMO@HҘRYVC5R>MN2CSpy:H!q;Y@Y5hUe9/E;\hʄ-Rrnܐ3Ґ-;1HtfCg2O=Aa FlzX:BNUJ֥yHO?߫ǣd̯RIsqrG vBŸ1CX&p'dPis[7/khZQ.$YsN:9H4EԱ ]'$fl5sJ_nk47OzZT'ęĝ/ڷ1RGRF5::euŚ:J`x|vXuwBqO)P#|QmGX@}wg]1@4 bd"{/ҍt(18JGL ;HjX$ ٘?U )=MbkOMsΤ^bW`~Μu1KUVKfrsNǹ[U7g)ݺBѭ,xI%8UIB %@Dq~Mqs er;MϓLwkA7 mT2"@'Vuq]-J31cکשW)@ʂsGSxbJ Be4W9;m."drz}0U7OhU.Z4:.oJ{݇ PE`^2!֮esSToqM R ?@tyAx˷R"%g/жD3EQUkcl^-] 4~F˱ڬd j6[?/r@^BBZRa D2a9ڜp/Z0Q!&\ܿI$]wgod 7QKE,XZrfQdsPyE{v;J [!_':)# kwYd:FYg;1}% f x l⑵$Rs>0-n[^ƥ8F43+[2tw4N ?;Cio=yy2w"P;(VK"UEH3TLD\`'E܌5DEܠOR="e3F;jh-'gVS9 Sx{ S`$j[J<-Ȁ(Vb\R9c[z0 |ڭ2cɪ >}-7Xp{} E咨tjÇ0ZZr^\?K$P^[?1BdG]`ij>_;, |F:򅫚eJi ٹU߂Q||GV;z)2OPm^'CU W;Ý6B>DA ߖϙYJŝZܔx8Qތ`>:~`k4q jxeyf< 4~q* P`)4?:4Ȣ)H)^3[Y7&-p,'٨nA=m[Pp}9{_do{P<p|R.zL+N5yR3֧8m5e.q{(&UflI .5*RnE`.{(t`_iXEXm֑L]<.J=&0 s:Igeȷ9֮/'[czØ (~3>me[džG9f}<mrxwtmN%ꖷO*3"ShLo)$hˬZ0M܌*CPzVl2a͆OAtA{%]1H[~َXXL rV]<5re/'5c$T3w~2a r4l.:p? ̸_KL5B٦߶4mKO`a@芎,LZ]sƿpTX,zp+_AwLO|CZf*o,σ˹3Wh-O] % ug+ڟ0/9Y6 {ȞOo.i?;,:UCyb%{)ÿ'KeЊͯR|yn^xT@-tcj]qfep+ b 3zqS9 YĊ}bO{W3[M[AF2P_&duwaVk \:!& wj)a 9 ϦLV* 3Ώ'5:pzJ,nl\9WԖx@geEpI`F6̴ٛz;|"h'ٿ i_#]Ю d}%l{Xhd;`U\(I M|_Ag? 6V7(*tS:;0eߕ~ \,Z;HA\Mq`lLÁ;v"5x9T`pquEr})9S[>yrv08`)KAfM2:ܔ爞)+9!9z$:A~6EmZ?MG,E{ц]r[H_:0iY{ycvw\w<qX&0Gծ>!á\|Ĩ2Kkf_aZl~-t g$|ZPg28K[Լ'xd9+P 8 {71mT^Q2WŹD- ~И{mn0-؆8SP e\uȓՙ:iZt~6;y><6AE`p!WҚH?`nj)4;d4A|5."\Q41+}fG M=Y;3 4~M(GJirW^@>R͂+POŽCC ?jqz),ȸhپr;J[9M;6#Yw?053a6cjKEi.` :~XƑ,d=۹Gq8UTN Z id .ǝ"R{v H>࡟yMRhHO[;t@2z=~ 'Kzݟ@D޻"ÕA3^(W/V {[ /ӵGSwKN tcF(mt-} lu2`Lppd{}]^/ =n|a̎y ,+0 E 8@|nm@WHm+ )l lڮx4ᅷ*ւ^ք] B]NjCRcX]n7V4dG~G~$;+?|Kk"W`qbUIPm'*(*wXDžj ΀iCoXmG0{՗\4'CrΩl;$SkNɐqhNe5G," FHXpsNtP^^ڹ`9Q^ʎx`a,|A|ZD|tEVa煴VƊfDF֐3 5t:!*D!&+݂Sb1^$}gLwrse,)8}]$omLA ~L`*#%HAAfg(6#xv#v?v'bb/=ӘsQۀ׎QQU7av='|8 g ۵'H;)hW #m5'bfG" p|aia"f+D.w$u(C+uΘM=a! k*idT1X1M۬,f (}b*a Mp3g9Te3&¡gx6h|Ik2 D8z7yKa{Ls<}PníSM 6r?!% +V(v㆚Z jtZ`fևEqf񷗛WcX:+ݵLVrrO) gTSnGAy.STu@n Jtk^@h[M"XjP~RfTmT-:YVG?gZ45T{.s`^=uQTQOŶܣ5z<[8`4A.~fflDI쮵COmZMCONx KBh: &`<+8n휱N?+b5XajUI67.% pSZ-A9MvRYjQy[jU58#ndLZ=apT63uRz `Ey)[bf*4at#ɷmgx%H6g>#،?9r'/%gK] G&+IQw :*ɘPB;0%j#,D̗~gtW>"\Bŵ2k{|>Oԁ K4c.u$pV^p}%D[_xc5wIf(\rHm^pόKfr)!L$PL:#B[ZWj r L=^+A|K@Abeg!4{kܕͅD[%s&Z32mɩɅ$|0ֈ2`0tFҝDƞt|6zZok+~Aי5*8HSѺ85 !s?P-iPUۜLԿ`<oI2-+q`' ivCxj_OPcJ Frԋd[ИƮs9G(Bo!m|ZՉ{0 .ʬw 0vXU&W2 Ay -0AhAQ}IOkUQ`Wwrj|{oRԑqCNrǶDK S!0\7u`G\k!dh|o=>*f6MsG)|pox>GLjjN׉jݎM|M4`$D+>|ۇMf=%69BXoĖ@1f>Mg@ؤϮ-P2uʠm k˄;kSf. 4J}fjOj 2hֵo&vЛvk ۗ PEYMs ]3J3zn@9&9V}8mQQhl.19cRlOQ Zq71+wBGPfTN=ׄvs RXᾖ263P*E8<_%?6zKl~- ʧFI(qHEyZ(-^ D=ISo䙺d=1 REH9FʤFf1M5մzAln5V,4eW#g:=dWvc(i~̕w\Xg+=v {3 (?TNm!om"S귺̡^/h5ҳwGe&BqW %۾-㗩W=Y+Ma󁼻XT_yxZY 54eYsIL[aߦ4a:jiDQPmiŸ:t8<|Fw5Ֆ&8damYJ $X:F-R^rpBԓkr-k "+XdEGVYYqTrÏCe @]@ǜԣvDe_N%M"+k鬽~g t\3^qfZI"  7?|$z ,Bt0KٲƝ$sr:خHP}c"6_Z%^a5G HhY [KjI!;o)gՃ•$bFro0"&*~6" u@%,ywv.VYd<7iTsKCq,;[л0~duΉғjEcMЫdZ?Tck5uW:J3a|s L5@QڲנcP+H3;(?aI!o9Ikm>Y^K j_7eE=;&\ ii{כ;FaŅ\#Uʹ>gL8,;t ܌mpuc-|f^4RN >ɇ̮N®~;,rr-nr=Ӑ\Kŏ%DHhu֏|ory`Do;w.]|lwC\"c\l݀pe1eبxDc8S9~V'WNQ42H;?N\<ᝠ1|΅<*9DC—4Rb>bLs((vdw<ȒoBKe,{GdC$Ɓ[2(P7~a|@)M'l~kȗM[MNy|C^)ۧ6g6ot*L7Z@3DZ"MY=d Lbsgqn7&<ނܻMͷN'pa:]_=d6GεxEי`}Iڀ/k@6LPK'ۄ^43Diih`/01[}9zGۤ`RSY^$FM-d=&tcCp&LՈvޞ]@͵~dd05 g##h،-ZþVX1fa2 R5މ$g &aġ.SHivPZ(6Q{!9a)rE:wv=^u*H\<צ6~%hfO.gr %BJ_o.>JC-`z@NԸ7]PTq9Zwa 1]S0zy#wZœ%0t'n-yE8I凋f@SF* QVT*cY*FF%N{A9_:g}ut*ww0$E Ht5i<=>D @`G!΂hiԪ݋Hc&V:N.hQ2qYFb,ۢ$XR/1k flWRS-\;G+AT3IzJX.bbg'GHRCDyKd™sPh$Qb !pw"sˠ^6ߛ7ͷ`훉J "K{oRyֿռmҿr F奘o @eWGV@͂EKe,]K\MNة/~llaS$G}mVat$@UFT+D+q:9o8/(*꼻ՕX_xS\5Ѯڨ#&7.VwOΖ ѦlVl(e~\/T.s(} -y+3-=сC 0QRǗyDP:Ly @*5SqVXel~tK(KQr"lj?@^WH-㯫f[?= B1@Irt0ʺ$8]g%EDY]H`EĹJ ›לO7j; &fz{#hU6:W^l #?ʩȨK2O!1/sCeCW{qRgTӆ`t|V- dhQ 5D6z=sxut8+ij'"G9Q&leF]٦ c d[>TSOWEUm6\E[V>y1ʠI$uQ`D\b"sJO򡺘1Ge@Ua $ <\2g}#;AX04h]V]R>7ҕQ㹨x;ʛMҗ 4^k?S5:&9}2E[h=>k܊Q˦&K?Y6 FЏ`-0}{4JQYLѼEWICM&F=܂{ mƜ C2Z1F0"*UY3*o49j6ŒjӪ%<](%gxKdz LsKBTϰb=}F 47'4;*1ؙٷuz r* J K΁SO 91@)[z;. J:f (p3uPhֶvXrY{lvBb$lEUq&~=&lr*2kNy9-ݑdw|?I/w$"E1xMH Ŗ@|bQ d6!e`@^yDib}rj U8~vk&K׺~9/IfkY1IA¯A{1f&`W wt& 7 t$tJH%&*"UK)>H[t΅m>Ih|`T߾͸&ӁîYa6$/{T6[ "]$kSt$3iq12lϗfUM'pvF^F'¹azVfeg00<)GKd:O/R/Q6 \T61*"](Y2g#VoܒКvR(?N#~%`rk؜O/O#Nes5d|+&q]}@Pv[8~N>J_Gxny#>V7X펲\rUde!P[w4 eY@{\Rep1K!o"5To!rPhH"Id<{P8J͐``qд_O$bGEx͗g:5"&p A. 5$Lz`+yki!E$+3pU}A&"cq/Aƥܹt̶'ӰT&pdeҫ6#?WO߈l[3ɖCNFћAګn0Gw.11(QݵSF' b`̞wz3Qe%|Du`#8cV>-|>"=alM2|R}m;ꏻ'>nuwuc|VW^s'25x*B~jyxe&y'XߠS'Q8J lNݶ` wHY~ 8}Ǽ_$Ev"VБ>c/1~  X9MwcIq70M(NB-i;Et튵g%̈x}lL/DVt'T#F_R|l]0gc5w#HؘgNxE=-gxn +xzEwh3t a Hu2!nH8uoesƳ.J6%פ6([3V.W"_&Jgoxrm8= 74PXJ/yt lv_=Sb\0ky~oG}=Hۛ%L^8#:;ADSg1nIիፄLC9 :(Dq i:(L9_`jL 0ܝquE/BJdJ'u.GO;O&4^娀9*pj"z;YU(=K(͕X6Pi| QiRYtP~"\ Vp7[ T|^'gX7<´m8ՙk96 tL%us $gkbX/,ZL(7bx]WY$Y g|oQ:꫔D2 B\+Yq{ۯhBq5ax{^S5&;Aʠ lktv7\g2Opp;{ Τd@sw5H٬2yMZ)L4]36 WoZu%8=J7 37PgUĕ-ؕdX[?ԾV&5 *>xloY0\U{R=6%:ObRsqb^AMj/ѷFaq8; e'S W_Xd0 (]`W.8* K,4/`ܓZ9}Qh^0{U'T8tbTPϜ^DSiW\ٌ`l^ 鷬X#8F'katqKleg #R?T8͛`a\]inG j#>)EװV4_yIAzgO;I[(2^sڷ{jH@{cUqS1ߎMN$r<>*cЋoIOGDL`E@5JxGçAms#m5rîZEXn) N6-^T| r9Uubӂ [L(szXG]Gɋ91՞[S"'ڮtI`C呌oFacT3[>q˧ U{8-|ȪFyE%M%W 6R'ьAW`zMZKpȎa7MSz1=T[a t -80_S6 J^'FVVDGΓyמJX3S=fo}2<uc*XACB?$+#ؕ34J\*vs][_&ӧ1oguRF!+rF4L%{8wRD\bs#UC||lSE l8'2ǡr;JQ$K X|Ӑ{fcX{PrqĂDfДDJunQe,HVXz^pǞٰMUϳ 0'uͽ~H|xо%\cT~Gp 6BSa87]y$puYIb?~܌N1z]e<uq^TC՝uvk?(*^~1LK($;b8Ch9xbʁQ}DK^dx'-jh(7\ɷy nNh2"|-eN1)RT\-u Ti-,mJM~ʑlWӥpp!$4VIQD w{l CK!+f.BlEFt%cX| ןz{ fDCOwb&/g#pI{2eNҜA +{c-mF=g ܌ƄD\woqd0-GA{I,3uqv !%#{@1`M*De\LRM}d󔧉s6iN*5!a'͕LxcY Qx3:Bd擄x5jOvw ôk) S_z+ |U_L{R{ZOk޴EuY).[$lلHF" `m$Qyq1YA.k.FjvZUj /:C`\HaFRSG}ʙI0@dTnWSwVG|FxSVa"?q`ך0HR4. iV"{/} S:6Vj;IT?+sCR8jQHNX O?w;՚4 |#zSìY M. ࡫B*ړ`sB1޿lq(@!]A:z;(qUz9E|c7pq]0nGi0\ū$|-ܤ]dc!)u!*½:V_V# Q[O3&I]xd'JSDdF-sd'aԔ }I3,`ҋ6{^V0'A)Pmn*+B,P,RmjB P Y+~\*;JDӛP&s8MU{XFJtn$XU<#RwҜ@EvIY=>*So; &H0G XB[ T62PIfм?#f]2xs2ɟtvs8sEv0e`J~>4F*D|a#ulQ(RocÃ@di!7ֹ&0?``Wj6X:?tp' %<2 T4eU6N2/t 9,;9*NZ\"D![:`uQ?2s+%`ci4T^,]phEpB| 6Mœ++za@]]_.X~q*Yn{ʨ9LאZ[H R3c\IX s` ʰzyRlzn^/5mV]߄=hce 8<܈`?k11U,}Y:ZO ?x 0h38>(X;^ҧ,`)\Y;9]G|OZ>_9Zئ YYuU i}+u s]RF~pUhTYp27mS%Ɏz N߳ Ni-IS8^$3Y~~mOa*o1+9Oḽq#:Ρ>G>-ߙW3))doπ7Σ2GDaLgK\7k܌D'gŬXy^8 sb H8|έ;E#D,q 6g+A1CӋ_ru& JӰ C'ϻLft~18ÁPDK}x}.}bYxv8~!X9,'>~wA{//)'w\ 4ƳX3)k de3s:.BXU0WnN7hP3sB}FZD>7}R|,.(mx= \5W^03j-x.9&Bʯ誁O~Rls|0IQ#8-9? qlPI 4lDb#4/k8`fm/y9ᑐHeM(mV!XX枊 ƪmr-^N򗊟 yToXjR0:&dB}^w`0tuw^֯#kH'bV8-i#,UQp`d}w H\WUf3E9u6,jd '%mGx`׮EWApe{ViZDޤp)fdv 8K48Te ox('z,u t0%(ަIUU`q|[6\W:&] ʚypԀInA6C3T{Nޢ۶Lj+n-ouN$AMIM2T?bwB7g X:@u)urH4: "r#/rrfVfM8 tqu..}JZU'E/G2H/P>øV<Ō޿o(Q}z ^t9њ|GL.;Ȕ :gl AeȐh avnqoړT^TtJԩ>EO${\3vΓ0u_mAG2(]QǓvѵyfg>׿^k61nN js -'@cOP?1L]#y 3'yhppx`9@$NOe_(˔~oM[9c,9JHH+BfM [ք;X,b&+ru<)Ez^#TlvΞ_PyS=5+2[ q]c2?W3(s^r,IBȲ'U!X2TZb|YGcC9RNqKXz4eE+%l9ٍRe}Ӥ,-9\OѻρS뜄G{u9Q`Q\| h>ZX{DվW4y3cEp^JR+zG=2 h"șdl@Z/6fوQBzAkfzGĀB@гuB?3UnzeS<p=JNL[BnR*Eup.XhKiCph=##sx6=C%prz\ cmI(b5&*F85 A'1QD醮@V/{|inĆ=e^[\b1Gs}hM^Q%﫰S"?*vJ ++cs9> ۬|ؓZ r摐BO_Ln:@LTAOh8#2zcR* =S>Q)Ƌ [ { >.-zڥdTAG fmF2^nR2&:iӂJ?jv(w q]6iA_nRF>5cH9>@v~dR{T8ȿ$$(4X8#qK+(y*^]\ ^r&h-W"bS4ZtpI~_7yj3M *lȘ@>yFGmf/.8y%.j=ubE[v,ˉU :(0L!'UÙW=&j{?϶>b(ڒ- >H],gCZ"96"-Zgȵ$LJ#Z4Wʄ Ji^Q-u/tp36wWjRmWٕ$.Ve0D;"]҉ekNI%F 6mAUy,X /Κgc#Mܨɟ%*ƒ#' GjdfE [erKr%H)P}71S$h寅2NoŵuR܉͑FуS / ?}@8c+EɁ;sum~VyЋ^144Gܻe1UUD3XI]UQQ[oPP]n^ A|N/z&!Ro0 "¡5B=YɋպQY!"&q8cOiJ 4=GOQEZ5=xWSSSr^? F&HV!L(d7K*ŕ+席s dL^|CA´&[;{!!|gD;8i"ެz|f vHn eݟ3b-JM<3s̈Ķ$8C孬?Eh8& S%v8ig Gs]C>=Ψ  gNB9yWs9wi\ycMRR )aֱXLJv+4n,ZZ0#kΐ-J# \O*kJFDou$$rg%.26 +r]:Iz{Puցj%Yܚ@;WlX Rm.vwycp^-:#'7IIH@l:{ƨvȇ[u:F5ΛךҤ*>0n4?1!6,Gsإh 0uv$Y=u"w A2NZwXoc'Wޞ;&+QjpTٗg}.T/óY{E"Z-`yIj|LI؎)sc܈"C|˱DEq`kԡc[ )ZLfv>umTx}ۑUR zTLV8wN`n٦Q{q`;1L%|R_$&>25iǛêLAsç`eVQc5#nÔ륮 X=1k ,Z3QeX#[0K,d|^P\t; ۖ[ ISuUԊjlw@vTlT:ggp3:7 ,Ju% l"ݫ$@Aǐf3ܬlQZÉhbG\ceA!\׊]lc nA?w=Yۨ}<0v̿|PgQOւiN8m6ݺ9XVEՖ?ެ՝(T{!FRamGGmyOkܳP Ìwu05c|Eſx6\аx-ܑ+O@|_s {.rSd<7Gw[nJu@@$F:D\=q ȇ#[#%*A,bԩoiUMZOc%8pRR~k&k Mg9 T$ FYu4Ҍ NCWm~ò{/0U/S:B$ؙݏ0v8knC=X+ #A|{0DP] {QGPBUo[V%@0]WRč+|f圄CS$IDl),yc*&@:|,W $$ec(W>'\/̝1yO~K2HasS4>cR,C!ZQ $ևI\vIK22';Q!kfGRo`l>̵giO$o?֣[&'\T󭶲rH n[LZ*@ DeR/@Y *Kn9|k̽xK͕7G$XFȚgK70!12 @lӷ_ˀ+U5n/\m^5(p6ɂz#Ü-YmV,y>qcH-1ܐxhl(&iR:(V@lkNٍAL".>2S m *!UcYE60^|Bt`lmuL{$uX)y&06&e?cE/ºlxpOb7p!SZPҺ|b.Ls?؆|A ^1ԡS@eVFڷF2h6PGOZ#N\dC0*[h\r,|»N rW@7p(Jp5Oi0x)a8\J-D1;CY& vt!׸ڝCI#lyoR( = s$J}zTedS#LA:͕ɇ잦d\>NI7⦸W5rE)qJJ?*#+r6'VLL7Lptk h\>+m]S_u; u_`KL_Vbˈϩ$ǘ&.8sϲl̔^ZoBWC4)e@v{(zQgQެ{-U=w0lM`>Ě\ߎ@kdz~2+D9 |BUpPqMo_pYR눤$dV4 :%CاR Ъ[We-l?v/ 僳\*O):ޒvQ"NCI>"QҳVd~mFyZ71ªʩ4G| //Ƌ6/2r)FjyLS9'Ǒ"*{@Wf9w/]@d f.PG[Q ^ T^om_gHԤQU@9V,ͧgէE ZH-rer/h|QDhVPF/?u\SE> vt!y| "Py)c*8ϙ| ]+Eϡ]l] ]33"^(4~$!*)T^&\,i4o}ʮߠ4sYE'oM,x[zоfܨ(-.b4\`fdVr WB p_C7}L r{'tPDV r b0,|i?La<ǘ n/b5jŗpEX!Kn6Q5Bqxe磧SX^7|3X} Q%KP^Z̽!Awwm%^Yc"4pf?Wٱ Ĵ/QApsO7 i:S6ReNȫG8%#Ktv+Sa߈|](Rc4H3YJ81)|6h۽랛l=ѮY<Cb06X|ħyx3Q,/BpGh]tu69ApXy}Nw&H 2 Kz #}^]HQï-GxBl 'XOCrY`[ij6lCԥcW( G_Vi8k *rۏ8މt(cb 5a02Y ּm -GhFVZ{,X&Ջw՟?z4]Caƽr`uPK:31Aa6h 7$*"/3=nO <҃W[~>M)>A5uYpE[Gإu8D@*Jq7Ua_ZC!JTT.6iNQfn33롦 |,ߓ>0KEܕӥh~vp>j"fmX"G a!Wt7x6~fv{ W@vUHQ-Z[U],+A\Ia]}k+V}vH_U"Ǽ13򣸔7j;8Ȥd;ie=P %IW"ȢF7ݳBsJ@!Orxs;/N͢3ec `# :}/4f[hPUڢ(؝G.>Ga Ց\1ޝgH2'siT2!'ݒ><`z87=&sw  42g+˽y ׏"9 YPA9̵#GW8i )HWZzZ S*Z#(L_k m["{BꩿgyiT.݊neӝR,AnўO= ʁ`+.|9,R~LeV近< t( (էs]U~X=6֥-v[@8.+շL$ຐ 8vVKҷ$m1nr)XjJ":%l}gSA1I4=k"*g>rQ\@SfS*>߇eOmR%j3W䗼KȒܧSQO1A.U ^ ڔvN΀uzjO~Tt6xiX~t%) {_Bw:?wB&R?A:`(yE ^H^ਊ!ҿy ^Z3|\k?1xߴK+dwS=@e=O(HpQo~>" 06O?~~Dp.{zYO\)Un$bxp?,﯏,pܱOaZGݓ Ľ秚uh 9:NQ3!5V\&3U#&.-;>D r0y=wޟ2]b6UA專gl ‰,Ğog꛿Dnz\-ogsB8WEV'@k@K#}7W=e,6@ \^ܹpo _PonQNbZl*(-G];r)yhZZ;[,'ґ;d\}>ӊRF8@ ճh|=IfFLO Bg[RRP=KyXy?/,,x{$qϲ 'ЃAw _&E V3Qˆe5t3jNx%¨۝)܍whH9ʬ+hzSM>QMAE X`3%̓\ t' ª\j$PUk ^nz|6)Uzm)Hޯ7qFUO&ZNWK[XMg;/{X3m #pnt<]-"JNhQo{1w0==V5\vtqOطD}6t=R`-qŒn]֎f|T/ 6~$-i޴n+5& <(/e3G( X['ɫj;09,@Y|VԖN8OOX)=PF%Ws,__N ,d~shDGzTR qƊbӝp}')ߒ^/^ mXc4~h oR\. zQN} %L=)a>q̞fF*sWAGarlU~M&xM}L8PpC0h E0lh|Ll)y~ <TE{T|E=bLT́ʓy9tiL GasW$A30jfOZy:2i-Wh0*bny!W"Z%/qLdx?9ء H׵S0 YbD8UENle~.:*[+쥔f;U^Ga@ݸЋ4Wfa6>p(y!Nx1vJ4q;<~E1!2mxwcB@)t#:i x[eh4h΅&?vPRY}%h{2/pC-蒲4 ?[Țwu.nҌNO$ʳ\դltSH0RhLMG%ӳNCG0HsEHRR긃aNWAJvCe2hL T/x$e /K,{Ta*U~m]Ό"o w!Ň*izwWJ 0VqV[!1~hNNlTJ 6,GI8a [qH6˹=:# _֪],mp3~J@B7ʿGyUu,H)\I ldFwİstNd LS6*srL,3g,Xr/hf nZ@B̰@Ӯ ЦrՆ 0ʁE <`rWxEcnagF[Veul/-SQq؃*PБ|.ߋ}"d#?JBՊl,u u vvI:G` aypC Ex\Í4ǩE/HW4ym켔Lq|nte5(;#(P!@},YɒjuS񨹅wB>);$䴠z av{ ͅke"ce4[\ np$eLƻ OA+ȳ;AfWhgBGӬC&nPg7dy2Yʜ%~0>)~Ô,QڰsXtWnH ,J5!"V}<94cpwb}#N09yy.;}K^<>\o q),ZY$hjaeaEvY \gą uAK'#DY6#`oa 8PcB\wS?7ew aΎtĞ%c^!4"F+ Rהp)B+T΍0M:杰&kv l[lіWV5iV`cHB9-p#A; V1xO.\\|$0G%iי-G{h}_ C<%N|NڡW?YY'?ӲU˥4373a AƘ]QECc+ς,|{Z9J5m_C"|dR:YDnEs,PyR]me_tᅒu;E`*埐Gjp3 HZ#>8>F5y]^s8 ~+)2k\?f# *LÕ.[^tjwK6S,1@-ZpD6a~xzLY&u.H{9c?O [f4ŢL4?ܰ|_NYw-q.һ;%T`YPi..F5'բ&XP9]>':`7׌Kx q8£Qdv 9Έ_P|N67@8鍎I8.QaMEص-?u9\V.Geͬ.Mm&/&Vm) Wd/ڗ["]\@ N.reJ<z32T4CU@=["۱q?jW*~Cw-x2_1G]sc2^냎h . $x54:xcS [ԂA*پFCE&BOcfn =v׋ݱ1~U!s"8.?j=s 8Oyh@3ɔ2N 6JL{fPT($"+$IH F90`e0>;ⵂՆ`<9]n{QK~^c~"):  ɑ0M%` \] x)nɶ0+.i&G6K["ev?1-"YdZI!rH~^o8T;GO SIGE 勴o]z\P;q,Qu?4泗E˟-MĿ39*~G dk2z : S9Dh]# A+;sql_E dcњ 1^zb \Sq| @4NH:G Cwߘ8}f_c7<4sO`4wsmV8dleb"i9= @plB3}jB$Z6*݈ ㏆1I`gW7 d7ƷȼJ\.nxpưZplT6+| ]Z$ʿB[FlJGv@qm:.F=d55I+ -m39E[.d^8+5_D *¦?Ru'Z޶N 9te 7(} 8M=aޔLóي'p ^T+BcUn?D}!{.?sNX|qkT2=pM/7߈&!FJEl8e*8! 6o3X9=j]fv~yF Ksy p)x⩢"%o  2ڜ^-6 I,ٰVo~2B9Ӧ~KK3c5^p-~jdHj}ub _cyoat-R[D=FHr:d5CJONL~Q-g okr'n%Ŏ{gMPh={ߍr]4tF~Yk7 M|fK9Yk:i0#$d]a]v, (ȯ䦎U"BF^ڢ4~ɞ hv oxZ~Ԛ%(,.]d(YA/m &C/grxH,/Wн_nf>-7U_&vZaImnp8Vo^E"lb{U\qB$HΫr] c[T {Z-')K((^+JzL&̀ބdl)d46[˚Tx`սFjF\bL؋"*PS]gHӯm ߦt/!xE^M Ӱ+RQO{dOuӤ,R'eQ,bynbGu*4O6`XjemNbfeT(G2k y ,;)p]/YAh8X_ppĴai۬Neކ辥&h/+D 9 mʷ'Or/٣9Lj{yẕVTH8Ώg<>j ? C99LW+b,k+kkXm7_B@8kxT Y EֵQs4{= q;۫iTCϊOv?7YYR{|RoBltF`'Y޵_]}΋xz4XfCyFB)P?󀊬ːG 4(j&:_%SW獄d4;f 9΅إ . TY~GgX)k }ذdㅊt>3$^ӶY{ms>n̑{o~N9E *'ulcn-Dh%<bKt/3{5zȥ^ TN,#?vKU|%AZ\ utv P kE)te_EevGٓn$z:A?nA?=_KN&([ `j;EF#@fP$kȭ:W*8:iY#Tv`|APzb`(|rsL уt4z2<`Z= WxxJcvQ4B{Z8nLQU"? s׶JFW\mԜ:waI/(}I#Sє}H?hlj{idZ2\Z~װ+ni>ŷ2jou)OSz?ܦkN*6~BlQ flH= ?ZL{2Y2c˓)+f4Z  {|@aB,8ڕzH`N&usdj q*0S VYUQDϐXhtrJv|=r!e{""CMXqLqPW_N&kē_:#TY?S%R|R%73\'HyEZV2Yhu\vmT&U\xsjT^¤ش?VjFH0B`]&+gCwzTa.B0,\Rt7<|ϺD~R.YP ÈЀ!jا&xZ<=6[>:(KB>%n$OlpcJ5LL|d ֆ'cs/ \yd}M4Wu%pf'C ĺzĹyl4WOV >݁M>V^r[s5~hy+nypOocuoNXbkLmExvUbTѧ2>Kse3LMZslw^ UEw9gޅelwH|DpTBb8x7 | !enસ_j gv2BLzypHfMmu71Sɭ9L6CQ,$ՓPy=ʽ8(VilK Uc2"Pk#HP| O0*&[DJnHzr>7I%U[XۓtGV A7/,K4 H(h(-%]S̔SKg:I+՚+^Tԭ9%X뤜+'J#Ǐ\3YXvK~okvuE_ '[~ 6/g={H|83DٖaL*jŦeV s5OhPKZ/V!gA qI iAe!xhB'i Yz+FqVi>~&Ͼck)\6gg6^jYX ANMbfj{RQmѢY$IE݀*Muq[WK(VJzbaӼ=oU bn-h YZ