sssd-ipa-2.9.4-1.el8 >  HeQA U]2p 'tH6m|>W:L}F_G,kP,o+N$YA?EAFNjxqZ=tʾinqjG|Ȃ,Jj.!̽46arr_w7QYQ.huqAB%X!;u{ܬAUf NWx?o*sڏIi&\de_P-[HOxH 0j T6Sݼf*e h_ҵ_CfYSa5e1nl?Yk[SE9OڣeDnj6J㑮$o {`'ю_/T\Pe%[󈠶,xۭx%*~TbvҬD{Oʠ`ШV,sZA P%+'9YѳpR~Tm|8>l/G)#ꟲLQfm5Q:;3޹~֠Ȉ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 U]+'հpP)Ml8wG%=F|N n_3H&B!r^r&? RS?_.査iE1ZfAX,oΕ #/cbjG7~ 6r%/ { ;?BYFm'{kᗈFOwM!đ{7pT2hS;|MP2^qI?|i ywؗ; wUp:6Dp@3ޮĒ'Gx q+2.)`D?d   4 -3:  * H   0{PK|K0K(89:j=uGHIXY\8]t^Mbsdefltu$v`wxy8OtxCsssd-ipa2.9.41.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.ex86-04.stream.rdu2.redhat.com 4CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxx86_64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd*( ~K"U(_ O)2AAAA큤Aeeeeeeaeaee+eUeVeUeVeVe[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../../../../usr/libexec/sssd/selinux_child../../../../usr/lib64/sssd/libsss_ipa.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.4-1.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shlibbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(x86-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.4-1.el82.9.4-1.el82.9.4-1.el83.0.4-14.6.0-14.0-15.2-14.19.4-2.el82.9.4-1.el82.9.4-1.el82.9.4-1.el8sssd1.10.0-8.beta24.14.3e{@eReRd@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.4-1Alexey Tikhonov - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.4-1.el82.9.4-1.el8 .build-idc6864bd2c51e0b1b2476db5b3284a129f3ed764eec3210c97ec2f1069153644d94754f5a341e235clibsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/c6//usr/lib/.build-id/ec//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec3210c97ec2f1069153644d94754f5a341e235c, strippedsetuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=c6864bd2c51e0b1b2476db5b3284a129f3ed764e, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)<<PRRRRR"RR>R?RR;R RRRRRR4RRR R!R(R6RRR.R5RRRR R8R'R$RR R)R/ ?^pN+vb!ܤ5=̾%t*뜀9lǍUk.Ļ [ay&@ǻҝ.}>EU"O0(1$ݩxV.$`6 c5 Ɯ/p}:|$昛K Ok 4+ב dz4J&*@~8?$Z}|aVp6(ڴ8FEFgJ8# *|+uǿ0T&=3}PSh矰R/޸$4.eyy B>?iNm27Fv[C=G &7PI|곒#4Auɤ]\FN-L Yu+Z/R=tRFrY#CP履BXqiwǾb{%`d%hVL)}&>M.ƁufA5eqqIjz$Gzڠo&韁ke6.GQ%lQzV$QOҋ"fg6,n݄3oSPb!=A7gl Q@\s(qҀzU˪%_vDf={ODs*JKp Yw^3IY*9B}CWo{P*JGxK S̨+׬7';T)`:Ca;#Wh4MwrMQ ʹm:_;ŘxxmX +J1!]56efS."x}yAളoPH2~=FSg]ؗ~bjL>?VoEva6륣6⻥0/獶19HןeoM(4 _:)Edkr uDU}L$U`;R$vVSIt"GnE&zO>p,@{kӗf(\b Bf6Av鹫ܡR) iwE13>7~-) kP[Z6狵HV3U~P"cw@?[h)jLbKnLl=88^ hmY>u !]Љ,*匲"벒0Ke|b-Z5O Nub88O>Xvc;2ӇE0hhOcI晷H& ?Xc-**\͝ \m$GSXpo I~sf%$ތX pm^z%MPH >Ew Ҙ.j*$s-:;@ڈIR a? 7b.|Y7h nU% ˧+ =h,;,sUT,':P_,WAGRg1\0`BC^ Js1k_Qԁ/+s~x69N|sexr(8)i$s(P|S^v#Q Ժ=Jrm WH(u:!Btoo32Z!86E3'qqP>t (-l3|îfz?17—Trjn%1yAL)>"/nuecz#q=Gރ} poL%YM {3ۜHxM)›/ F;RbH|̳bVWV&T,t$pcgmStbe/GYVMBM 5B:flIf.:HwxLk7]#*w%ҌÖmy&zsF>b 0^s:582٩0LP.-Go?'YjrH? *Dl6@Z! kaV◿7):/R &Z_AQ4m̑V\ "G<ۋ^{1k!uωR{1ihdJrUVK^90>*Q!JKl@-1zHNvݒJъu- Ժ>PwO BuSe$n~xqJ)|'Md_iG>Yl2ưB vSa1kMTds\ٮQ\B!0m3ȔpiIXҡW u_sY6 &|9.t&2 ўl3]"ۅ'R@I(Z"e W;7U^y/sZ`nGr>k>ĤƆfB`?9(ےu.mT==K)7mW_C@[6wu;<'`و{>G$Y&N١aFU=\9n3gd$.|\#em,KZpS| GC3hl5 Qz~e<8āE]v,n']c *<"& ygR_gFqޏ{CKW7(VqR_ 6iEZb^O%j/|8EjU|'ͤPFC苏P ?o9$ؑ%홆ꉚ}k bJl?"U]>jyLA+ђ8~qa~{19UjԩK:ly"4"(i?ō#q4}F%LjJ?F=3MDթ=WM8E4=է .2U \Hg3D4N t <8fF*Y8H(b&B+u:6h?G3#%j D/3Y>i޹svĞʄ'R_q  +:J"!-o>%>bSlϸQN-Ii ]8yM}9ɖ Cd9>d7"b.xF:2DF@1܃1b5F(#tVľ8 "z͒d_=ыku0Z-Y?B=N~Pv'si:jcG!.I3:d,8_=w,"λ vTUE4CSǤW0~O:0?ݙd|CXTg~d헫M8ړdn}|@j-ѠLyX to+8X/^JShBC9uW잏aeh)W' `- hpz̃&A*z5͘c- ]"q ]]3.cq6w')Պ2cՑ?|No[zR7vx^~eFh+7t@ĕ[d9 ع8n -t֌H"fva#C+ 圗Vߑ:feȘy`K%4F${DnJ~3sFS:yowDeq$ko8~Ʊ4 R 9dTp01aQ6~:1#3m?c[ƌ[)%2ôdΏv5VK0[dҦYEi7؜]cS6.݉HSFk\&бU"RsG[r.+HvGL; QFB %E$]$ybO+ ?r>C)۶F%{a?3T$,~!ۇN1y66~ChA A>@|Ol谎$vA0b@3|e K.e1d}PqqZhL1i5%Sp+7_lqoDt!g7Xf(=qe[m-C*ڶ7%q+ۇW! O*y558G 0)i{9طVwzmPN'3REQSm;`]PbJ`fz%xd3Z䲘Xl2brZH5!=P 9\ϵZBEN-=T Oߝ3Iwv[v$;k]HnMNi {b!SMxdPPw2yH11D__*c5eL$Wx'5K=yUI 9x:F$Ki7S+0wjf"X9 g?Go;RZ{;||B~+jۍJ\[цʙDs &M|<-| `{D1Ѧ_wn(10@NȥxrF<e͸3L~|ntsCtTI݃mM5#[ LBpNZRxG:` ]S@T^%]:DI V2`iǸ bص%Og>lM:WE0-H!$mnDšǠqeX=$՘\|%չ$Jd*ݧ],2DJ%?7"t0rk'ݹsyyPT)l);P6Slu*. WxLJ^9~w$'t40sn~u;~ * R'Zt=$MjHUECUCįFjf/ufʡ|Oȓ7PFP^[j$B:ȑu=nN|#kJJ.=PXBQ+ZC0jg*<9|⎓prRf5K3e?Np~omD]N@p0&( gCg؉4.?_%πhvd?X̋Yp3RB ;LG7jպd|_%GZ{]ć "k˳λsx dY0act)lDeehFr9m܆i ]zfM3W:Z;څ0ſʥ5[S.9B &+mVYi]#5#<μ2"u!El$T/NAP`J@φG'pb_5;8+sZʇ>c؈mh4&mAp;)^,|tǀўjO&_ȍRQn`"g&?dRR:0vujZCG?5z JGGefCtyX1ܫV`7Ep` j!V 5r_mJ:hfNGc {YW-{xn@Im1|g I riW5 HŊcl4klgTcAI5Γ[L t9vF['(Qe.gA'aT)ȽQK>Qε_y7 f/@hҵq}Pސ1цJ`62𘘯!;N؁qZ%+/kw6(YMǹ h6Ceש~˔_w YU145!D@,#]g rL_0O?a$ҚCDW^879YT.3t>&T |㰩?7ǩ]cXD7Q=T~/~Fh2 l7M]2QxrBlzq zE0ҕ,ny7&oRu:r4H;Ү^bmc#h##r# ;T6ݺڴE>Q8ۺ$Za%_af!߼FtT9yWi&{7z rmjgyLMџbox&lf6]rg.^9LM*V8NKYxvQ? ^L\ߓLk ?oT&](@kH"hhr)z:x3 /JoKd<@;$9_q*OLJmiJ# DŽmod6fNo=,:%_hJA#Zk٧( 抏p 0͂jqBh:۲?=P7 Mj4_P)ѐD̚,)/G<&7U1 hBPYJN }a OX43f) /%'|1T.b O>;.j Ԡb=)Vcf/ޥmpnȅ)~ޕQ-'}_6d>& 6r;]QJ'ơ)6j`~>6rmW!) 7\L hPr^emgpSQʬ]T#?DG.|TgfEWX&N-:)eZe_WX.*Ȕ3ힸ("_HM2sbN+u]=W|ߢU(.U+[In4)iTRΡdt)ޝԸ֯nIkM+r޷CS)UߴJr ؇Hh\t4~gCLX$RC+F`3[5a9WVyKFYD%Hr61d<˂sX KIC>X@!5'8p.ǤuO"Fl {1"퐞/z\dqA@X2?HvbeZpG*40jГTnR%V^'6,$KO^}9?0n)i4=M9攥5@1Lze}t[+/3)= K7KVXţzN'V-\@Ѷl[|-l~)\Qre%NOlQvB5X7vSSpAOAydt|`gA7`]94XsnfjzA7zD:\H=c_:^!8D) {u̝~FsV,TWmzߕ@L.j,P>R}d_ԁŝqG4լSܥ :_x~]r5T9oq9wtT *[ ˙Bk0Wov2_E\ Wj5Ƈ58YZ b#6ޱWRQكH^[cєvԑUV3H0<PCI{up=U$"d/?E? 5BhH[r$g 0ǡW&ED%f`.!ĻT+jVc{Xy Q7n >TL.Ʒ?1<캜 @헬aV˟_:E:\@MK@Ԕ ףqq1 lc5u>=@? \l3c/!T1/C WמpWM‹??|Mm/kHߎ;X[FbчT(go򗘿TOnO5,hX46Q s/=uQdǁ)5BB$[{p"H~:hURg*yy[GIN2qY&!EgPqr} sMU~GV ":meiZpZ^2KЇ M#S BF%nXβz1G0Ks}曒+a)[fC45zWơm~J@$~ 8bۢ.C! =b#mώ6 2haoN^d qk}tӌ+ ŠPE7%ma<BQ]m)h}sKlF.R=3N-Ln'˵+! |G%1[ WŏzSɚa(;T@J |wq5uq* =^`yMeeDʩ3;ݚC6j\lH2}ۜ2,N|ݞ[0;qX棬Rl.X]3; n_X(_!M܉$%&~x=f9 $tZ/whȨA"ߟT$? , +)A JU@"/-T+*44(mٮl%03Q ~#2pb"C i#Knȸ+˪w6[`̖貺6NAo7E 4b|(5T$.wRy-'iZ2-W0cdGB=i٨(־(4,{ZvanCcӺdUSor @ɏK ކ*@z˵K_7eiu} U/G]Cvwg3fig6XYάԪlXld}Hz'h)/w5XaK(`бMWGh]v}W v_ M7[dFϭ;Nof[,:O9Oߓsc)TZ=flEA/=R1)մJz"a4m qŃ6QPցBFqlu`sC1\On?Ma)|QU'RMyl|op7 uVʂ?RQܓSl𚽿ji=UB_<"gthgCvWVS 96B*P)+^#vc,7WМ*o9͛m*SM I4CbM⸪,00 %>i2P_gTziUA\e5ɑiuUz< W&Ѹ1xOoe.ȑ|vs!H,g| ,uH'kC54'gD XHq<104l+X́|"P_O#fvPg O5.\_4e@tD(s䆴69'ljVxl3Nʒ_f1(s'3翨R‡t%鮶1l2_pD%_f30_ dl,@ڝHv#[^ Zn *A %4A&^nx_Z6A1_ MTYgkc&-BmDh7xlnQ.Ab!q2߱Ĕy%6羪ls[nV%JC ZEMe, 07]`c[p= :7%];6FԔKHU?_hQPi"j&g\Q'ln%D_կI,jž2g?զY}F@ L%4.ZBsZ 3B R.*H'x~xJX(uS%@~MXꙒyk}O Ēh=4?ʛ {yե6ᙓ6؈2=Ӑ攚(cCR ?vd$rH٩rbyO z4yS_5h|5UV|# ,> U$S5:ٯ0HWNdĠgv FXR"md8%ra_8d>2Iy ;9?ܚs`%Vhh]wO\y 戕jOp!sbg#a$:YB%iM2L)A&)BStf,H1%N_3N/o)ˣ9d"(rشO;7n4leMv3IXkpG*}ZU72"p}7lG&E(k}t0f=(׈w{ضq#Ԕ=VRLV2x^QFِ9d-dz(X(Q'{{[\y+6%Wo[xOuD{CMLVTx3.B|a{Ff|PaD*_}Owmo`Y/6C, 3!,u' G ፐG%wIαзR+HS|d?p4Z&R7 ``f5R{@ǎM*s6JTBiϟ Lq `m_aP k.]tcb9OG:_Жң-bP?t9o5{p^{[J;)t:Ne6 IK;c3ʒ.7[9y9Ee!d$D&K3XԨXN10=ܭ>H qNІSiZLzF :˔6Oa4VMj)W޾1R|\n'lmk d!zxNӖr+_niby7*5)Q'331ӄ_c_4qχ'o1|"V<(U۸˂ߦBτsިOw[bb]ފ,3Ax5, |#_Y?>Km$9kó|ubCϦ-sEx\^o+p*u+tY}tyV'R}CIV0.:/2cu(9e LAG#tDÇ;x㚀$Hl*үs}~FlDQ<%,l- :4qdKt<Mp~LGK ~6r:O1>j^z "'a۬1Z-Eg@%\? Ci Č*.gK.TcR /:>bH*i @{-#K@鴢g@R!6E }luaEvzDIpJ1K6ڕpQ"%֞:[|,cVrO*|r.xy*)/M-YPJO~mJ %/mt$l`5-wfs3Zdnw9cQ~4PYr\L,ȅ;|tbRr]y,k'~%jm^+}+4.X`BdkC.d j3E|v\gѢ 绾d7,ҝW^{ (H8s>ȳ &iiOeFm_z,Yo`8C_oW^! 2GhR JT.Lt\o2TyM1J@:o<ě|>E+18EocXAgχ<ösVT$>3E%$ԓ o$3B BfppO ECfN([|[uu#uPfiSEzR@t\iu,r>mjV("aGIrMUi٪CO9EM޹/)x} M#ybp#} (1~앵;&ωC(d~OOt^F AJ/pg]NOrMjiL!.Tlr8R _A{N@ui '&XJ3E59g։"i.7ϭRIGhT\xj"e/C3bBb]u.󬌠G$ a#2-/73 ?;c؂EyQ$IJyIdOYG.O2B`r=W#v(}h訴;՞w"F~+Ɣ?kp~mMj TfڮvBRwn.t@pcۗh{)\7-05}mg0\b v.M'Bͺ_W ` U6{(|#.xA"967X@S(@EF ^~.yJ%Xgdթ3&la/x,3+ȉ7ԹEr XA7R:|[L^C kk]e[HN lHʥBU/PCkVNāu3 ̤ isF\$f9-Oԣ3ˋ}a ;x; 쎹iC8drhIѦ>ZvYo{e1 qpU(S W<؄wÝڴ $t4֟FV62&EEh%~qi"Fc2,DhbN,jLǎWn?zh'XHƋvċV7'4sq}z_@yc=hS:SLPf T&#!b:EG|*9xQSFvrGR2DB'XM^37H6+7ȭK.\͇1pl$_跪1ma l@h  ߃79Zˆ {=H+"-EHEOk⥖OG L±nPrV6'[.;Oꐣ*ͬbttUNZ~|f:jТe_}#W. MMF;ЋM638nÎ2;mzپ2WN}jYo04kNqu K!8 ߔ0Wb?V J~Yo(HUGnn4T..9Jˤxmܾ)qmZ`Nd^46\lX d킮@CbERIC2oM;X3:AT+,O&!(idM]{EPMg79ቃN 28R 5qߘ8wÜb%G@7ۈ2H]u~^.u}ȖS' Cu]G/dWI s%V%m +5YJv.m}ѷc ŋ{aU gX{v8;aMMh'_CKwe0棻A.m[{ ϟ21mWIxV7}?u5"l%b躚E@ F6P5.juS*6 ڱ(FJ، >Ao!˺S3[HR"wG%u}{B+~wSw`,ڧsz]a i]*xԪ#0yutJϔ=3cN~6џ @P5)$*5˕~o7$1>M;ՂComhv&"xVE:D۾vnp"QJSyqtc)L0K-$fFhycV]s,G'&B c}u$<n;;:fAUʙ`y'Rа_Lj5!DQ EF,!ĢCU3edRe^*z5[+;WttV(ݘTzL;> px1\n؄i'翋aFU!mJ!2Jt9GFȰ[@'x @L75E_hkeK)~VxR.(kGAG+@r%n 8 -cKa EJ%(A#NQH^YE `TH <ЛCr A=iwa~31-Ab&hN#$~飸KgO3,hF~-k& <-PM9x7[30䏋&~v' ,>EErМ0%[GQ!li(" OC*lp˃/P`U6i$e)Cz# çј4%鴖֌>t0kLbCvO${t*p7qo)~J'EmS#BnO塚dL Qu?3!4KDMq;l?>HY tY9(W!`Ij 1i~,7caT0ic,8<VБRז HܕWxnFk-P[cn^-g}5psϜ3֎5N[٨*hcƩcKI" N&ӣ"!앲#$5 %G4;MD#e^δ.f7n߬l6/WȓK揄K,Vz6QdZDAA~o9l|Z3[Jq-l_=ͽv$p`)_{Ŏ{`ﮬC* =m[ I2aqrS|0H|h4D ZZV; ֔qMPYvj_Tw< 2@'Swpe@pg`H|]< "X>oi6hp@8[䉂gFksW(h87w 6rOl-̐ +tV2i[2p t⮠~(پ=9|$TŧhxT)0DYO8ԈpRл}ġxdS$^?RtFŒ9+ƌM+( )󨫼QzԄlz4ve0Y?a+Q3|AmkW5, (8K6 nj#pM=2qƍ:|\E9e:)MV?AN.ODAI-1 +v{VysֶQq(қLYA?Cee sM7R/K4#އexC?_R2<^d !nϼJpyt\~w@U1ɠ;Z CP"Xv spdq0+?*א)e IWm5y@: R6(b|7 ?HpXil(fw\[2"籂UqKA2ZIܢ, Z)m(|%ԩ´ʨ؀VFSqW gTE]k9<~ YO,fMx):۩-*.[3uŝqk6b-E] 45 75;.o 1\Cm Kxn3078yS3G8D62"ӄ[c\ގo-<]m}`hrOwdXbH8WS0 |P:ˀ{3RjRr<}p~lZܱbah8Ş& *,~q\QX{JPq_4FY:H&"Z{"kvٳd ,Q\gdzTةEٺWψPl P{^MSZVt~"K45v*@0].KT?; FCXn7-%t͋oq$#/ 2ڜ(Xܶ /H>|)JضڈOCs|ŭ[mEOB$Sz:\5zN~O_ICNtGSoiX41K0zt@_}A]M4#3TO,t"euvA=3;#?JJbMj0M9^{"L,@n#Qklbַ-w2'f.8ŽUq9U!r&Sz61*Zs Zo'HѯPN8Wno ePTZN88{XI2}Lo0 lG`H. U4[+iw($@O ipg>`ǥ6H:_:aJab"xV&uY(J? 3"htY8AMu1:O.Z$bgmCwntP-%+)Hf7?셰Y6 )p,Ŝ/Ltށ3쒱B cͨY'(< zF#C3Oq4qS0z0 .,]OTBP}utƳ2cHgZ:4W9Q@ 11 ^&4 `@H  y( ?.pECVa[ "fl=uy]m8`U( c޹Q3R5)tnv6IT]CAgI,iԐ")%l7R{~B ʷ:sRhY>ىdz-ԝ#MnT7Ó~dijEQe%_1U^$WK[&q%oR/ H1uH@⎋ GZ \czxRpeGHFLZ{=Lb#8Vɴ_! WxttXLU#!Ty7ggeWBLE 6dO|F=2b'p8{f:oQzӔY5XvbT1sOϖ(8NuY⬻|ړO[FE[UW% ]S!o2C^;I2hrNKp)`:*V. &b# A9kXaWg B^)(y $i381PpǓ?]cӾ@ -YRpR]\e7*dfq躚`r^uS6~Թ˛(KҐF"u;w7yǥl+]l6PLhIˬ'WlO:BQ{:kxKQ;Z;teRGx\V~u3s:IҤqMʀJp 9sx0skz yL@C) 3e'VJ ttb:C_F\2Poy|1xS#OcӝVcb !0wa:ᗂB*lWc=o4dFVy͒xq榆,UExp<1\d=y9LۅJ~kdb!s!h7~ I'Ad;Y=&cUeoշfAnF|අ#%@o+ᄝROM-ڑ[ddVjBjcϽ RFE O%j11Y9p SoQ#?@ʁl rU1 9@[#kJ:32э3^s3(eD TjÊz샜 D*H^EyC|''WTYϛ+ }6YދF3T&Ɂ Io`G`p92oǺtnz;eחWKdȹ8ǣނ,ߵ%)/u|ͥ($X<;8WO!`a6WΪH ߌEG\yDe4sde"Y*wwJSy6mwU w}leut8w?gMc{5oտ)X*FH4";O0p`}Դ-}2l6hJQ !YnEF;~ )4\GVrrq2OHƑ-$ 9ps ž68 HWgeZ]'JHR@D35Z]=--HMp:'<,>B!q'W|!Bz}jDen߆&lv u Jq^b\҇d'BTT՗0g92 OGm :&'^!j$~D?((+@3dV 2pθ9?^tmu&120ڏ|% Je-̖~߉5@y =~yg##(؈r"a57!s"ZƐ|dŲ-ZŭBePc7\R\2t 'x 5oz ~kũbPN EcJ@">h,M)4:۞B嬛u(-ŕ`qj̾vW 8u_S\弑iE!=~L6`LEKP9eEp_k{Ј%RLo)KYc;'fB,ܔtY=uΛ\wA7 *-k JT]@ZuYK3P_"+)ztB]̴l|EQ7<vfO=L7F ۋ~"Pj=~vE?R~m}LrWCxJ"iӗøTI΋KJ 7ZM:1 J$3'?n_q^"X*b$T!a?;-t͎ @`G$$?J~@\)V%2!}XۭvgN]V398O%$dQ]|.U*I ZKf aV$a-%jAs(LhQǚ<ւ7"Z(GDqN=ޞKL:q#0ps}EI ɝ"YʫJ>WSTV[kp_;ULV>l눢7k7@&B^z;*Í4Hd0wo yZ {3AY5HmT[N@bGa[<팮0ܵ !QǪ x&AsbS&meU  MܙZ=ģ}7WVU8`[Ci m"@mClN&Px+p@DcIc?q0m&DRD~_(*y`=Ӥ5<3Π52Ylx}hw'eI"]8uJwD~ء,|u" Mn[HhEBi-+'y?b8N,*Ϟ'ZlR!y '$<{ZoE=3RT*ږA! ݴqrnc6y:~p9t"h/fsXhy Zw)0kN$Ļ2YΡ!O ۀ~,* Kves]6aָa:1Y)Q?Mʜ&qƻ5y,~osꉴ9b  %*=[k6jڜwKk FDOZBZҲ(,5w =tf!= rK96Jxj|w.YP&\#팩DŒeAX.Bf2:iS2Ɩ=uٔ}[P_Tٖ07aB'`|@Di%]EVV+͝[N 0) !ҳ5v`fC- NSnn*_H/q}]v܍cbM h Q2.%; ѥJ$O.F9qPFi^T4pMD6XE q6p2X6_|a\foqnN'uO(QαmA 3eLhRSvY!mI̲v|9&Sx'xF݈ZȆ_#@g@a7\m?8u{PHR[cShq5mdV,LZ8ƙ`'gmӀkm.bF[Xjn{N<0 Jnө`:r˟Ҽwx5%W[hši|u~U픿l:&Jշ;19jPwOr|xHj[x4|NQSܹ^.~\z|L pTv WW|%ho]sιwrOb:%O@U]5ON9f#q+۴.l9K@WCcHI K~Ej@oŅvkr{SX"q%Ÿ%r&c ɝ mn<<J0p+KՠwdEzT*Y?L26>(p! VSivg$c&TLGZv';ɵ$c+5zϔ TTVB Hd66{Zb乫z1K'"]'<(KQHmBog@ Pq2{e4{MPIi(lߓ>yDWiH@=F,8vXvo'*kϊ#`}4Í^ρ4QZ% IDETﲹժX6 sk+;L ͸&;_*Ct^\:򲱓=e ;u[ȨF:i2"7˝:1UFx ۽wu m/͎aښކm$NS\\Oq:s5 _HklMf^/a {41yOY| geGqrpBCLrN+l(޸ `-K pENVĐrV.DҰ'Dxk`{.}+ɈOANjU˪G ں K*?tWxkDݱrK9wKLAF1´ jY.7X?9wh= ɇy]9Ήb|*ŰEnF.2m`z~+jV5#S+3F˙ϵXf`^R}'DgdrYM"ÒNncTiq>y{Ƃ>d]}+άӴ1/Vτ y״jlX]:CL $Ah42_3΢C9eBqQ,̏tgGdL/_i^3x?ls(lb趮 2|Fs H#نJTM Scߐ KKQXGo#ɘoq}1.:Z͒13 o 7EI>w4lhD.9e]HY~m @(b *z/c?DwŎ%Yxy;O7O`F^q12N6>7G1%bPSޡEZ? £-jϋGInK]@D4:5 {kV;k?Z~JOF@-%,#ڈJBcfG%H$[@G,JcȊN/)R[]RkMoT6e_6JLYh"W.d&e طa4on/ƃk+8vk::n]}^; I-5e Kq x޴ Dr$ ߡJoOjgiT)jQ&Bl'iIK H|l2V= VQo9a)˚^%gMZB+jK86%wȅuDU^o[Z6k^pztQpȋo(7P{~ۻN~aYJPNq8}Eۀn_m⣜.wg^pznR(&Y$#&A';g^D+/:Fg@0b laIlwYѮ184O[MgNkxB-1d`5zАͤ Fhl'!!p/ƀ:WWX;!.x)[V2 a ~bh2k5zh]Ӡc'4 j9sޢnՈG䁿1 g 9eՇ~bOf[*^fhI!N H:!VSqQbAnA)נ /r,7 rGas:RFcWRspwİXx*jJ[gn8P+@(1hF0ɺmn0vQ+e#}8qaeLHb7W/͹;s_j J U{.!߷qCY-, {/6ܤb/w_W6S%cEL"Ѣђ(AZT?ľK$0wb<o vR{{%u=D NS7a KeB U P%dw'}WwMilZ]:2V@,T/lvu9\H.q;ށ(`,*bv8r (yUaE RY * Y?G Ypx^Aw沱pTtRӆ_y`sL/)& XB+;JJc. S↬*0 RG/lLJtC0a˂&;vPCY8ojK&ԥȏDăU϶2 F(dǍaKnqGn'/%fEY u,F/)Tef_S@[8 &u0dL+Þ-? ^j3Em@gᯇ:zPȏɃL[=%j%h]e /E6JI/ (Gt6"%&@(hs{GUNB_k 垧·𢄗AR 7Ü1TZaAolpM+!gzTCop:CJ-ςCXO’\_fXj9cS&/= w>r0CXSE9`jwcZwGc/:At)ĢV^oL"I/Oz͌2H`:]y"8$x}CUq/a]⢟ÈW5 3x)Pm =Q :!Xc3agXFCFɏ.O&xZ\ǰe! [tr͵^o>8|4Yi=j;%3-H㞽 0ƣSK}F_z`T&N;¤e(*7mB!Ht:oVle=|pԈ1B3 XTBkHڒxr~ y蟚77 ʃxظ?@)SR^}(&;\t(9`8=~Q^piM26mw:-QgwI ?b/Z~VɀCsDhe 6;c@;gI|u!ؔ2{#,sg=@kFҺT] ͈ F1&ZceT4a^><ڰtY~n_z{Hߑ$@=U.\p]М;K92JQ“uL4gݛ<lx_ ׫B 5&G\Bq.B}q"tjW:jcMKbsZ|O~R'Df" wjn2t;%D)gMЌzf&8LU~3 B¤Ȁ5wNrt-:z5kL U^hqNyA0WI?a8Ţ$gSQ">hOI>(4WΗ̌॥讫5LEwj/=ó43$j{ԕ|+UuIȲPiư%kzNhQ8Kky00e1":y ٢-FV,d#IrnW_/H\)Bj^$T9[hjahs{֠?-O7{^f\b@'GΗI6cSzױToP'՞h;dnӧ{o䭤IKd&$]G'vN"nm夝;JE D+XG˿gq4Q4j$(d8yI }}]O)Iқ|e1x̾r;Li@?Mΰ$ְroK'2#8VyH403hӍ*_K󲔪4dΟ =\/^9[a5CQ1Њdnwr6TK~v0cҤ!BT%*5$8[PWN}cmv$e{-9s5e| \}dm{bIrq*]2yfz v`ZjY6E֋0ei ZhfMW;h'1no CqB/J?Cݟ tEٖ֭k6V/$,D[wE )eN88YG6rɩvGJQH-!"0- ub(.7͛ɤuP>= zN㸅y_ _7fKO:me-TMCrm.܂9}EpЭw}ؔ.(fՈI.7O96$ߝP/Oim!^I&BFB 톿+p!hBIXDH 8Yf]wJ91|0dS7XֈҶӞsrT(s U}P}]C0ι aF4sj3I ţ@+R6L(jMا`h3ˏ#l4lq&Zc$T-ײIݞǘ=@aC#=eĢPÓPR ߞ$se,aUR bČ^'8Nݖr(ZW jUT$lDݣ5n?~ToAj5Wc].]?ENK@8Ph ZR(=;ag64q,ō h9 Ĕ,b^7FhQ`:s!Ղj8z2SLzGtw#YiM,) iንo1x&OQ}(ƃHY'~*!2# b/ m%i;oź U?䴡FV(υ!*!FGD L<'.V;$R+EI \^BC&.6oW֨Z)2Q+@Ryse*HF8dPa(Y _|ie*h0B\]Z:北Mj B5 |5\]1@1ߌazF\b8+%2|](<5^;|^&(ӑd+]ٹb |A& Unj5a U LU@X87e7˔vЀ:AB{X_'5I%Wr iZXO}j|eлz+4Ͷ3VP.#ptTC,Έ8*QsE|N޲  vV Uxz\ Y!.i]32 1x&*>"֥hG3wÙCeWdnR *O_1n_?Ngk!ǟk#0vF!>@B@ JFP};}Ô #+S3^bK66$o`gϵ.0G~lfB".4 z&1Ab}ftm~N%HnedM]Y 73N<_!dz= p].BJl 'rd>V!jZL;-P!~$uj˞hBB Rc=!MJ-!؀Vܕbo o$N N>dJf8onnΪgn "M?O o?Q_bnaL$+kkbHL -yor%:ehrE2",+x*U5 f7G,#66蜇w ٝKUo5*-S=0Ed/CD(Ys'! V" eʯnAͰ#\f{&X>vUT?dH ǒ bۻ W#F0]9xŏ %= 2?RY勋gX2酜צPٶZYVV\=Χgv՟}}#v M 2LiDzwg:&Y!9o1R ˙ Ҋ䋹'_>վ{5jҩ Ɲ-SSLKZ^dP*ŮQ7KOm13O:ɱQ- ^*fFXCD|p;9b&{\?|?sP;zD)kM-Id->b|N#.%?zf~v-fj7,3 $A<0eD' k'F,kޞl$3tavhL^I2XEI:tE<|nyaIRa ۭ ::lC"Y#AIPMCF^_-`b⿅WZJYaX+V= {ȷ¯jM7ľyBKnH6j@ @P{^@k54o1a0ܴIrx')1/pv<37,$f4(M~ P8˅ɂaR[N̼{S>2&8Daiŀ`tUm~w?KtW_EMʼj-ٿx=@ Vϴ8>-+RKxhc@@]g{o/i't.z@U;ָ-q_ӆO|1>0+uSG˃ [D=YV$ڞ9_C(^04])t)+-@out< _rWFuE]wg?+-3y}z۸0m ܌s;ѐV7{Xq!hć;"%!)qCuR؊Otap;2"F9tV916WСDY>V 8!uыz0V Gzpp/ oA}{.]{v&b~GhBnNz (AkޟUS( PϔWgSsvtɃ06|RQiv su@S=8=IJh`Dگ:4Q=G 7yH>~AkLVoˆ4Q(1t+nKiҝ m{N*Swzdwd(yabWΥ(:T%aAz⋈'ْ[\x&?nvaNU[4'zά6˻EktO}gi+(۳*H>EhvT:{cp2щcKBM 8~: ;dhc+XA#b)*u B 0+ =^/n1f-[dNI>Ũ#Q>b CEvz roǢuES;_Lz\; ş$ HAɱXEzy ESAxy6^p`rcQ- WN&Vk06-w1b0 dCaɞ>B(vZX62Jb5vu=ޙ^>`OY 啬fN2t_o,ۚZ6Yiޜح(MMGB b0v2gîV mG3d<SZu+@u1qEy{N"`6+;i\hI@Q=þs76ZErukE#G-Vf&n~t\G* cUœd^Qm>t2:>7k= \]oy H#@Re†Zvh?g wbt yZcrH| /5x$C吘_8IAb] ʛ:͈XZsh̜zܝVZ<( \IyM(hUy=gWIikAT6 LtMS+dYòTsي=>⨯ζb!aai* [4Fqys{4FԕiT'ïQqs} `Kc%oϙı9d#J0-v]&I ] u]wNű~:09Vi^!F'HYR8}H1Hh ߐ (sw\c]o{5VJSv79 sAo*4IՐMlTc\*0KQb(?$nZėa/f&wե!o=c1֟=2a} c E2߱g^o FG[,` " k+[]uʿmn &[S!˾hߡ!~Q OUH;tPU;Aͻ6O?ڼM45_/NHZw j{*[:jfNVN4iD=,1̤İ- OU^W-Z;2 L>s3`Hee- L6Q9 MLqƋs@T t1sO`ym >ڣLNbR?OбwUw[Aܙ}APcrXc"+pDRH~M@Ʋvǥ\ZQ (?̿˥'c\ –A֨!Zfb+aO2 ]fyN@RAϡ7H(8_v䯫~*HsYPZռZaz5s{ Ao.GO"RۨqHSPwFU K[^D  dOఙ7o?ǎss6dKQ]\zk; yt`2Amsq. eNF@TJq&ü2$NLQKAbWN'A;"ʘIWP1^@̅:L^fNE.bm]A8lۂOMwIË0''Psixh`6ig_l6̷Dlyf7x Z.X׶mv&Y)G\FDK +~o*,|nU1jW(7ycMT,b|eS~CP|&ڜcV=ۀҭv*Ό7)xC( |C~.)_ ۊiE%n%N_` kOqBj(_=%e<=U+j<P2_QR6 )xKu߿J VS&mD`<@nOiÆKL50>@Ԋ;5H":#/qg@Upl>S \557o%v-/ <<,\ 6Տٞ HlL?[TLiwv2j}hHs{ے]zx[]t:kX֎:oB+R'F57t^;%OAJ@ vEMle$GQϑd3JD2ѣ(xA"wa3 [ ϵQ:]rQ60;F6|KǶITך@E7߽l/Q{#lgO\r `$ƒ&RJv}DFlT~-E#9+W!ovsRwf~-6,7tzXbҏ(TUx*?袗k yt_Ny9c w@w(@T1ZްV8v ʀoen3J,ǂK1=,i%},"]{<+^hٔpAuF}YU[%Ю9U5L#l*:56Jh&%|F>Խ/'|:5kzʽS# ʕRF,ꉌ9JJAL@趁ZE[jFI{̙u]N`xn5h #O2̯"{Nrv&W`.A{حk%:Jh H-ss`e b~ p;D&s*^+r*s? J}A58hzM3ؤ؁'U Zb~۹KE3T;=VTU'ΐ1 wuBak":sN}=ȗ; + ]=F0g3,̄=mϩ `.(Q_kjcZd0BGLjn7U[t20a;оOI+Dn`-u|I`?Vfگ9|g+`BD"jdIro>,ݪͮ8><͍N8MY^Z| QNh관XݧU}e8W#EM#+L>iC-}H h{#%Ɨ0xh_mvFI$c7W8Vv=]kG5<TF1T$+,I.#} (ce4&CoLR#Mo(WF^ɦx,Fm4!Nm%\:#Kԯ0CJklrEb [r m< buc,\OKpCI[8r x)0K E[_hYdF?,T mo.ܾXfe՘R{MDü%C~zAu2+ɹ Kw R[#.;9Fp[cPlwI37Y0h=΄90 a4=|6]U]j'jHKf>I*v5%βAb=Sj;#’ڇv]XX7 ,!/⤾ұ(m0,έoA C/˥Y-~\X L/ 1,uY-gB @l8x< Fa /|GU0SI%ఒJ , 2(2Rz;bt1[0i" G<J^}"RkÍ|EmK1v'>kFSe|C4[TZQ;;CI}$N.Dѽ28l?Ό#F X] ? ɰĤ w_H<[QMo(#J4~f&-SXq%!QղGژ[?4"(Aq%~0淖*=-q)x dE".DᥞrNϘ=˘Ac5V7c52'P1l Lx))4|=D Hȳi M"f]eߩ,ʨe|s鈞9FVXo\~eHZ=X.ix]t%". !B?p=C:Uz6*J ش1-\G gQ^\!^Mk/T x ,w 1m3^ 4zXx+;Y_`ubxw+E:0{hkuXo*|m(u_r739q&H=勨SȮ%:Os-k`7y@<ӿcʦ:"q깾Tge.q۴(4Vߊj×k\E JLra/@T%D>Ⱥ FL M3 bA!r$ {^uN_}2C}E۴>@ aAkx+ pwoV0DVLH_W,Lu5r,, )UcBƑUG1W_]!zj L%)ӈNy{x&'W%0'*h ;dIk"gj:K`Dgɠq]/<kX|Z(ܚgטͅrwvG${_T߈j\U%m28Š3v)!m;vDÙ)/G-MWPi|^%\i!⶯ KWHIF2O efD[\PIm8HpP ó[uCtQwLuFe_p?1x>'`?uay.QF4#,?]/%dh0'Lb.ӴWkZJIcXG,3׽5Ѥ_$ en?{Aµ*r8cۓْqStFX|KCz"> cML-Ji"1ͮro{3ڀU@LYx aĊKU.VaX)?;NOI)(Qi \6kaA ?J%@QWp*K `H(6\uwٓ* FgF`$M$IFM˿9{lߖsbǥPpl^K̺%[yX`oNsrߴ0`?HH9YF`d^łEԽb Nڗ%l oDbCWp8倆1 aJzq9XIMjnʎ"?~dAN #~CnVz':(= "͸|$ݿ(YQ t\[L8* iJU]Kß|߈\t0뒊E3C(PqA xI3<`gtL3:2^_]IO@D/?أh):!ЁB]Pc2Б0A\+bm92mũ!N fmYsD0Ay2ԅ uJ<VD?;L>"`ԹU \>`&guk_ig>ǵ+$ IyFr֑)Ok;)nUobWKLbO]U4jtAjO=HR/nA]ᔘ.P8M+Ӯ+3źOO 3pvs%g "S"/"-ï3XbS_.ts mŜA:.uy\6¼'O^[BeX[KY+L7aOE\@:3;z,W K8a>eZ @MWDJ_Ѵ,O #bkj+X-0 %HJMSi$Pfʒ]y`gT,C,  y- hҊQ }Dݵ۠Ż`_t(NVe(?^"9i&!ە+찫nN"^0)u!'wLSoiV11C Ӆv4?/E74>o9nA\K"[ԘAfƬƽ{K\8D ;rr/i\'1&/IaZĜ(^3SR|׫r('3cç{[5xh"Y^e,VܠK&^o 8D0\L,mn8$0(A 0hyژάC3=&'dyPշ$&a;e]{"l_ v'x{%/ EH ,xb\a^2PgpH:eLxh} R;kuX2H]GM,ZM&|=j<ɦԾ2ǎDep>"qy֖aT_OČaփDP$ݧ~S)/n_n\\A*y)Jf~ϟT)pg G8֞àY2"} fKo1)ط6ehaQ`LQh7DCg#y`ysg\.g<#A.l_ NTD,&fNﲯ/q|f&yt67j+т[DyZ ME:=,,Q!r4*6jL@Fː+hk\9fa|$S>'Fw@3L/5 [ $K,5NE>NFa4[$Ս*!.^Wht4[|vy17'Qy!z$aBHN0@w"1'fl4|9l@mq qgftq- ^ю]>c}""z;FcL~*auq@)ȣgޣ{UcZoaZC=P~Y8!xWc`lI XԲNT;E-KlT=5m@'|]TZ(Tr8Wh9f'NRި-mjc]-:YB+D_C'ւC bM^p6  F7;d6.r*ǘ*oxx1(u`H 9h9\)? ո[#1gv:NN4 *Dyq]Dpic x%y'uXd3 ߤ ڬƅ.|HTa!\Pm`l;? kP,gYLs B3\W3q۪wO6M04r +ճks7mz e T y_rey5<*,,6μѕ"m[Ⱥqb (Qpjh0GþslWß$[jp*k_0f9ʻϊk8 *@ߺ#yF*Z~Aa PM:-4+U5WpsFJCTf-Bx=muA~y!/-_qZUh.7݅{ ?yCJRj$-gڗw.q0Cd{-=?)K- ҕw\&L3BЋ6M8s{U˱IMx*sFa|Hh$nl}]x"@?̌<{Y$cչhn*UUb tI0z#L>-D' iVO_<җ!=ς\,t#!\zIU$ +8K{MSHba0_WfQvTh2~Q_Suo<0Ӻ_vm{j$7t~r<$,Bn#z$/ՈhIw$2|z,n3<˦&7ޥd!%{Di2`N>VN]LPM9]۶t`a>Y@ A]dvm>؉_i٠_ ώ`yRapr[Rڍ2 W7(wd<I{úpձ'eVL=49MW vdZYGOϳ-0~FHͤW;\^GN1eYZ"dHqM-9l!>#zhfxBO1 ,d}^ִ['NM^m։< -|Cs| }FƏgݓ JyOPfyאTع0}a$zelX j^h41_"}GA] @Όa(C1.hsnn-i}=ɏ G&d8ϖ0u] Xw0jᖤUՊe]#Sw&6Xgp[yXQ?K~5~ϹCy@ͣ٘ڂӏ36-_k%:F&9zv͕5uE4m$#{UP4cIjFBǤRV>t#25L^gNQ3mCCW({rMaarW#FC\!&>=Jy觢[zzKб˙Z ?~>Di9X/1*rw.`bK<3 Z耥ob Oej/ C)§low䟺 T5n)WXv l:DRI5 @U៵hgj֬clZכFת*P~cKKɗe\Ⱥ|79l() [Lqz)PܧЋELDOpˇ_aӬ=mw&Lh/O`.7!?:],.q{a#"GV%X {OqzI ΋cknpd~i!ޝBUM HP.T$~6qoG8S§+.]1"j1ݓVg>b ξRfN)sB{}"P \G,XCw`Kk(?l֥kPp܊=Tc "qF\ 0JRYo!uxJLG,,I;R$bF3{3XUVfmJ+1*BXWzf[O.ũOӤnYa*w }_CXV\Dm`IwrKW=R>^%m6`'܂3 2*U&"Vxp/?2P0`[Er<6̓밆})QQd3HE!*Se+6_~H(,G"݇!%=eM )Q; Rw YgJ?\d€Ӳ +?9k'eڴZP$gݯueGI ) qX<~(noKKgp%Fk|u#*t.FhmK*r&U7=؛pwu'V|ď3qFK` ,>ؠ~*s!(g߼Y5٢OXrY:N^N7U,؋$}F\:41\5cL@f$B &{xc0]i2`3W84ӷb@hENX8H^ob _mrk^^3-KGLbM{7y9%0ХN.0LSJlpǟL?l+QۋiȐ_ 1КMNj`D9=!P68}36?8>$yšDRl6- =A CB},ީdG=_{ a1Ag$eo ~d,}]K&>+;yLc.?G0j4|D8#Vp^8B>U"psL6񾲨ϊ숁 ƋG Ng"$cE2??KU}# `/#X̎%R{# [82Xix?H'Da$Zx*`qsn֪֩4y,L 3@mXx_ Zk"a[0u|JGW'l a`%ʯPnk8˷14<ߐAt9&Pgl}tHӸ07YEh'+QhRV+!cFQPǀSuvRo9_!T1᷵װb@{{1v,{<p8ÿG9KL[/XҐVȳ8-9JڨQ?nxMmȑ$XIJ&}jt16cM`EF|Q7ڪR$n 냶idGcޣ8kk5!<4rL1);HLa>"#Pxzlj$\nw-%*GCw"GcnhTg8Go;3:FCLv:ȏ9얄#/|}੥4?Si*KTf `)?"dGj5½,*{C?a <᫞&41_xyM4A!/=~A+J+#ߏݹt 9d0qp",]zWEToh{>*>^jWgcCU0qg1.mQEN+OcKEuүO {0~J?˯mH~kgifx 8a(P΄{`:M1Q~.q@ Y& ,aXN ů19p-DxK D9n_">܃]~y׼ͱT>y}B&wIMe!47f ȅ gWK{qy6pAv͝Y <̥X]ϝq'EE>&Q^. m~\c .xrdA #gB T 69T SXfEza{ :߫752*gn#qF%`on9.k0ѣDF6U(/SFX7ȱ -m]7Y1"ΊDp0:]ƣc# I'%)7F&_B$NeUoLXYzvUM4"o,V@"W^L(.']cm moM_S5lu|M"ƢB?Hy'I!.ffT Pq,&p hi ~= J[fdUᄰ@ 1ȚaOIUXHC Rx]^aέ4)B MiqY^֖{tSM3y @&/NK9dR6a eq.TߣNe 7wwuizu$"p0[ &!Q;1.~o<\])~J\jPT.A5"k\j=3gL =<]_WQuQzOGoCG\' |*P,\r~"V!ǃ J(*C\5kxn Ěk}34ޚn,=ݲg#ԭ̇c [@/r4xp*"-dBУ~+K>_F"TLFڲ[Ɔٸդ <00`.ˊ)/ZAH]r1è<8}VA bv8<.!TnlbaFe>dVYC7ƿ ?sHԽqͩÒ TD&B[l«( da{av\vWP̱1RPaJn䕢;P%oD:ߪ:uy2qsu526,a acZ"q4O@xƄ;gmQ!y9¬H - x ul)1p`~\)ۓBwaqž;Hudv PZ$(an-!&&P|s#({  #rq !QZK^\g<aakvcR FE%G;X7rrβcWT& {]{ G.?7˦̡+"k5"}X}ӛ*jVUnIvѿ GMѓ{*} 2fݮˆүƻѡYA䩑:/n}*6L:u~Ie$BE5ɚwgR~qiBH$Ms/i 4PuRjG/>q҉SԁJF4[._D>7׋ohd+=Nx58%b<.)ߕTe8S 'TbaTtθhTXW*ŢP wlc/}$ T^]wppIW,4b.H( F;{$g!riv+R `݁q?v JpSZ4ђV|1hPi:Y%x[ =Xv2DWG4=fv 7X3Ʃd;#%RӿWŃ+83<icMo*SqC9l;"&V2Et͘d-xmTX^K b:]b)ܶエˏZƶ@V9 \<}aC uq^'.iW,R-qpErnz]%IN0R+TpN^r 2aإi`,1Qwٮ!o}rIj"L@g*\u׎a5Ŗf0 5qrqiFT@\̛xr4cVb-|{h)lVͶpބ+gv)-(,k1Ls fan"ګW(f kX+1"H'|{>33#P~rOxFx Pbr1[۞e.u%]}6}4q،ofs Ė0>Mm8E 9B1`n/򘑾<{8îtx kWW ]O`̈.pXiBttLIcGF Uȳ"H|jZ3 s8nz~U0k(2+%'nWfY(jg_F1Tk0*=uJtAd ;z63  N8-5-]MYKt!lx|2fEy tM?mIT0O;`m"rs-h,jiO[ZW{g>EG3xeADGt8٭M S$M 9|ua5W뿉=X<\Xk,~.KV0@Op;jז7핸RD`usje\nDi ofJSruzmXhy7 )a!+#&frSntXGzTF{.{w=VHX5ԒTX%jOI:)6}JiŇƷE  O}D'1Z~""qhND+099y{{l" ,0 AnL;9땫Nx}~lUbaU`*%3|1"*k0VzsPpȹ,07஄ 6;KʧUP$1t5>=!Nh *X-$`,L}'Μ_{.;R 'D<>h~ׅܶ$JC6I%eLƶ\bDVy'ݛDpu G7WN"a8? ^<&XGpA Jsj>gW,4:MgLvTsK*)󚏕 '(P.ec"#%^Y=LvqZRͬ "켔+k#eWF#73~zs>>^ >>&b\;9A[F޳Aԭ9MV]]O@He1mZ,N]1gJw]o“A׭]yC ^O CPa.]<`Im>AքEM13Lf- S'VEOJ)y.iJ(DC;7u}T9(0T:e5#} $+};s؞祇@QHLLYA)x|T졽6vfU3(v>X4F&tB~,QGWjl6K|HCcD49JM"uk>~ɎzXl[h|ug|GY;~U`?0[(7814(s1 s6 k${6l ;E*rxG]~^=rkpcI`|ug,e\@=,bӤ̶uP=e, -D|`oUL&v'yJp 0LB$FLLhέXC+9XoW<,0ڄ⿘c[Y.GsU=3+( 0TRxmzlU̿ n9ޱvS|O2%u շ)iEqX;z,APUF5h;ò`_DS ɰ=~ |nM+ B em5T)3@|Ũ GXsnK*2&%G0>+Wl8鐮.YOuȳ#yIVjVTߐ2uϋgedufD0gL~5O<Yͭxr ZwY]cUi_^fڱs{6,$U|V+~M΀{VqZf]/j"Ǝ'D5fxkx qSnJ>m]Qs+j^.];Y  >,%tTl)dTwHkJ2Y'λY\ϔX :)9>ո| {vK sv6mζv,?5sY,8+έ;'I͞;wkiV s5V.:~o$E0msGΥ.:YnNX_JMSlzwA3q&E$n;Hu73sb7\߭b, ;V:A8 IJõfꄜ0nc$'E&32iZ4,hjsR&ަ Z= X>-yXD};S`@LHjưe;Ìs=Y WMwXPbK(J1x ?cBq &@9/5hwɣ7 9,$uuMzMw+!1"`vce5A^]FdLc3dfA_ߛtEf2΍>d" HZ2г3?ofN-Iw$X~1g_S<+Cp΅#P/ *?޾j</C,!J1 L.Ht~ZG[h]hP::UMDh :@۩D4~yW%X7cԴ T\g8&c _ g_vT{GO M9硫g`~GNOJޒcxsrxg<}z-|Kj+Dedfޫ$D⤨AUniI$T,}CǛ7Zm4!]c-+9B4ͳi }V)^GwJ?oL'CPi]xF@^ zF{zYuNCTELEW#یaثZVDe[.DU@ ԂK/FiLv-6F i%PvAdFNor&ziAFD2&rؙ]?8lNNO.vyoiVN-d$s؈ ;[LS>u~W !3sls#q4 8.HBM.׈fa"`.FڢZ9w ]y!Ђǜ ?o!)86tuRZ] *t#]x9W`+` Kd܄I~nUsˢUsg=QyRPj;;($t@E$ u\ld,Bv⤼չmڌݼj|Pߩ&lF<ޝĿDNDU'>7c8+IUH4L3EyL8/ 2x)/GT57%lUSq,#rIZh}%ٛaSr?= FvY`D0h˧6=.ts͓tjRx-)͢TY8 E?`ꭏNP6LxC~ב&m!rFAӤCΝ*IRi+X1Վ. -[n4"/  o$fxk|5~UBn̆8pg;>(ږֵДÃ?opa>_!_I* )ᩘ)oHK9;>FH3"%]2iW$(FseD(Zͽ2>LIRY9qb1;PEgfm$) -V8YNVr0U>3."N[[ޞe`CPQ[L9@C_?XǚZz|u'To+}P)*D1<XUNF)TDt= W{h&],Ss!Zw׳r#īqE^hkĢ.!N&0!lH*OYJ MӠ`wqn3S,"egs-T)u=Mr4c&薧B DjdgΤz೪p!S(N+YQ%',X" иpA?D a4|rT2jw.F l *01d3m]=:/ms3zW$fhPnFPWn u2֢l|ߪhwԳxӉ*g@EX߲I%@7WL D @J\7 ['.}cD|iTW^2_# h ~:^^u⾲?X!%PanߨbpfV'D]dVP:f4=JEd3k}@Nа_i9Zȗ[fg%Ryj˓KRߊq%f ީ#?k h']n SRHy o65{(֧`eA|U'&S \j}#=e$w I6gtmMn:.zZ)ފ2w ӄKWS롫1; O*FѦ@UF]{ϟh>+C5Bm#"9EM>j} s$qj+-R6<pz-i\< A8=Ʋu `[y^ߙ9 8nm;ʝ6|m/#U "A]XA^hdž.aQ}6sX So=5%ݔ~LQl !ʬOU.U+sPXąmIK-6]{2|~B#)~ VbLr~;V"Ca=MaᤉGZDD{>u zkAnR`j ~`ΠjXRu+x SVCP"cvM hvm3 z"*0b1n12!>Ü 5+NiGp*hrFU'g@@)[6HboŶnsѝO9Wrop+.`'ON[`Ω9NM*CxJ\3oufvk,'ag .դro󄝔{m2hp%#<\k$?]vυ/WFS>ōUZduɤI.Б\̙ [yE8zXyMū|^wK]6 Y\ .V2Ia"jj2嵵1A-W4jD˳My(s[ylbσ %Jvv(@[U(P +hr!]o\K;Dhva`ch:1zMfAL07U~+>I㎸>q)]C]w u?Lj_<1K!cu$(==h+A~.4UmP8w F"өi+(@a98;DuPYL%#u2*ږ@z# Ezh-*Bd9)N6܉B1\e c8ϔ V^EiȫJv]4긠5C[ǚrAA^=mAɞxf8of f֔[c[!pCٖXDv';IeDf^T&WQy-"nGG69?svfSTW(n>u2fR KY7&+x=v(yubH[ϨJua RKgaPHwz@qyIuC }zx( /Ws̜)bc른`lQGw-wN⡩[LռӰs5cʤ:F3[<:/fJR['39y^gǮִmP؂p¯hbF42N(K;Fe._i8P(uQ7UKvb@w*Ռ6'l嚦*dFzXv@eՅte3q -kû,aܛOR$s, c#b` :-vQC.oИL4$Td m;ZRZ^} | ڴ]ޢ]H#WqןK;ol|\&׿N[U_g2z%`q#Og}Y<$}DY`A65|5k~غjd`ea}%5TrXA\ RݦsH()Xr3F2cj\*b(%aF IdYNSH<V1tu>:bcB\00V?~T2@-MA*,z@)Bjvblqi4BS '}--CP~@i,Vp(X ›mgifFy{n=3R͓4/n7Ƈ6CXDr9S{R2PfE"ǥYV$&k0[qXيY!d 5:΢ws8tq4H6I6ˈc]o(HWE0:g]5PSuwٿX>.d#Dh`T1mVi0`֡J3)a"xPqx# T˱%$~/([((C> !ހG诠Sſ(¨I)!nȴ呞3ZUH913Sg*hՄqV*9ϴח~1_Y#ʘoJ4sAԺ83IǙ&ZT)m[%Hem2a)ޔq-!:22%k‚xs"K:۩J9wߋ+TZ"(o#zۡ+6~ [Q9?HvtS/~jb|~՞3`6ɹsmQD:{t-s5U~B:;(1+]Pk|1[(TSE`1|^[%Bʎ͍w13n l6JG.Dh ﻕW&-˹-Ö)mFE2 (|Mqc䙂s .`)Z `/'׵Uy[春hW%CdK$1{ֹ8jSGEpYzmq[!#5;ZR`l'#EHŵ(ُOrLX$"K}:Oy:9{0kR hG/28 d2^ek0Zb9v?ߜM>.ge:fZ!vV*.cS)~\&%M mƳKExKI} .OE$x)}CZU sوP=0B Fr qk9އOgV~\-DAAјenQníF| 6CtvL7z5~F}SBa.Ic5A/?  èu+#6 ~|/T߲5YP{5&Gc!';y*ȼ->rʙOd4#nIp@ MeJo U &(  #AjҤѐ2*7?3mfSw_ ACʦw`^dR_euCK9iz0P9:@LoWS3aiȃ 1}yMqFK8wR*Z/T.,.qKˠW*CkכÊSR֧T H堵嵱~^)_'7ez1ݵ^ꗋ&tCg6KXu?>m0Za/?=¸akܘ] da3m 2%ȓ0qBRYdJ,eDMTp{ O௨݌f,8pLV/|-:@@k,'S SEHX7-k6ȱ.<?RǏr$$Yy K]P(B^Uܲ4]_8 M |(y[&*rėۋmqdȨ%gMgOhuGE&< jEgkeUOS~_Ү֨b%gb"٦ cL;vQ/sXNn9fze$3u~B~"J%" Cx}srfxR'ܨ8x4("HH#bzWHn/OAR e"č]s @K_#^ƥ4-;s1w9*f}Vͭn9U4436sç>pܵ_ uk~rsn\#ab*"#Ĕ{01ZGJ:A1PEkn&8ϣA'|J4ҧ,)M=Џ\w:ͣt 6kJ\5( oa[u\#g 0T!F'4?PidLb,E5;0+͋ly<}y10=o=_._@|>JHI&Bjdd*<5`ѯNo'M\w>m*9{\ѴySVZw@]PiMׯ`=vsF|w:"$дWVs?+/u-N^yJ`nɚS?Ь"6?/oA"1Oja**шڹZ»)=jݵ(S 迒j;aXW"_̖q;1N QʆoɏU[5Eaͅ\i!<κX DJck4;WB KV޾p^Gu. T򘱬,e 8I oA%A0)Z`7E̳n>#zbF_FjˬW"u{#Pi$Nkw kwz>`Oi$>6 :Bj[V1C3ƝB XHZI֗{ äĉ[ϝ;fp Z-X['ȽJ2Ke{VmkXb׹戭UVYLkWCAyOiIng_ިVzCEC{Cc]=GJ5P: txve{m'A %]S9w2&e5.5$ƅ+X=+403KA@[Oa5Pt 6)H"E>"+^mDmnyV52:o'}_|-!e0YU &({[ 3샋^϶KגHvه250p=! ł.{; Rrj5Ckz+3}xc67D;Sa~z_b&:sy@ aFn@mdV@Y4 g;nl)E>'Ԭ;al@oꍬ" lg4paiΝϫPp &H/*x;h/)E-;c1'w2/G(ꬩ`72|El+`&'']Cf. S''K μ(:4+ZlR/ XY%up`R1,DCu?F0h[aaȡ>SQnQL2,4gxdDPoF^a{e <YR{X\b+[;|6%HW3v/5iZsCl2Ї\{Hx/ۮ3ل Nq@JkKx.vȎH{=>٨ d2co3ȽhMe]( Z-hy:2#a5$:"z2ļfc'I~ dÛR{"Gc*%lc ̀IvyyO|ǴԐ6vbl'j\yׯZse.]#ñ̡b%N ;p_XjDl4MICs[]C󇲷)\lF ӭdD]dOAbYKT0@A1C <:PC1 w7/(6@04mRkZEin3hUm]:{<炣MMchEm)([j厰gz^y90ɿ(ki<4BQvpt(["}xnj&hK ܓ';u+n° 7#U}[RV+![Z<Ȗ:dJ3.,g`^iO.9we-lZrJh:vvĖP+EG]vd 4=azHM1}_( ce!7.ť\Bug'I f| w)1vu !x+_\X8&[~M밥h eOȟ8#ޟګ/^o'CowBxPȘlAizKsೈ]Z8h! \(˲,%eJZ'74+ԑ\*wTW@/;/w%e&٪L5 Ѹ@jc"IºXa.sl*)9P̓/ױPlzq)\x(〫w'3ƞsomw G(7F -u%aZ|yNa#.+1"ƿqxuy|ׇn' ΞZ A";OsNei̅+[ 嬃mx@b@ ciB~ CBJ(6#ߛ ݃ 1*¼h{Jl z׌]p^iYMrXd{TXg|ZBPvC 7{w//| wjâ>\\'^XΉx7|SAqBHɪyl#ok#~ xҠ叆? {#M<f@oԬ*,c#~H>vid颩 _HfR|&c0^m}BBROUgzi| Ы`ևeAKTж<&[toRDV[֟Qnde.q@)lz]DxH9~|pLYN@eOJsэ6돠/b\ oY&;u| {່Z}yuySיD *L#)ҺFg4T6Eo[HSc|S&`\É%ܢ(Yluؗ"sW ?{NBp黬Z3JaFNfΕb$c|gQ**(Y<,xEA@PH/x¢/+yFm< ȯ07=KO߂==uN~12i@!^Mk6Ǵ>YϵbeX ̏ @33qé*Ǔ<ˆ9\ȬrgJ %Bg.CRTAZ{IZ^w. ؐpV.ѧgSS^mB hQVyd>%m?23O  taA!6\I+œ ozFxR|-IH =7-ߍ~> ((m81HE"IG;DY# N}*ias>=.Bg)^0 I;JvDZk2y4˔F-q[Z'ao.>'&h2Ea)J (o\d%-SJ@EJyQBKlj`)@H!%PS;!ۗcKael;(W+n_.K >nΒF곎ܱRl 5l,1~!FCyO8׫ 86a81NFyKag>M6kO0ްJiDqs0GLni`^Av:7?0~C'棝-tlZCܡ;FG߾A#C)}Wq뻵KZc\;dR*,I5ʢY5CtbVP+|\(&B2=~$ g7j fk0{UsU8@KkX"H\M.6~(`Ւ7*~Q'A}xMf5o4gU #CJmgT*@6`^$n<l}ѐ^AA0-xR8(*Ri=ujmZKZ}&`7xH&3ŲlZm}Ix>"1d2mTrQBl[8=S~dԢ'rvޞ(I=/b#)*~6=8mr"IJ7f{K}X[7Gcaصu*mbPc~z3pz9:ɫ%J;g–O}r7#?)6'\tqѣ52ܲ4i|}؃2q-߰\ΐm9Ml&PA1=\K4˦uF# zD}8uerޛ z`n(茋F9Jdl.:M(#)xh~rnfgL!OJjm~|'~|L|7 H!1gkq'k( f?xo\2R5>ov c(sxb}h^nc-`Q|w6w %Q>רťv7-sWU S25d;"@ ,aӣ՞N^ɚnl6>"&.'4",b&~0.N)z˥K34MKqj'OC90 *C`=6xc LJB&&UB?ɞJ v 4kk.. K{9 iIIjIK-8a|j_ks3_2cdiBb(*F'$Hv׾^Uj<1a"AJn|/)?Y# -6R ={R,v-qճO횻ȴ>!~#Z_j'ΰ5 cu7儂kv\N}h(Kz\&-)v~+b*[؟9SK z*_irڿثP\#O#͢2^/iu~YtvfgPa*DlI]u,b 5Wș`A '=ޕx wmj@dO˖!AH@}m A{lK_0amH@ O Uv!gmUո+vjKsL)XcQqn# c`;>9Um1K:~ 9S.*l<qx-j+!/V뒕w rN3Wb{|c}KNQ(Z{x5-{B߼OC[S<"W.Z?KX7YyߵDoU SVYS萢 }} T-Z7#t|@qCzb=<{Vg%蹘,T[1$[Tyn> R|*DvBBJk5ͬ>Dٜ^OIpfUX6LګZ]>D=o8N~:+mYDa^fAuXd@ p f l,%w{A_?|)Wsô6U_tU*N{ 3^Fȃۧ8iI?—^~º1 3& ]-.,a7rttM/;oQ+unߺ, Vphj^']/quWbvLY%<r|V8wr 6Ŭ-^0lWSK}* I=NW(xYh~*րFH^D5.>fPdXJkv:0 hv> 0{h4ZykLx Qn:e@q 8ut&Rtx6O3p]Uĵcr,_^Kc$P}"L=rh\Duh$zßW,~OG:ei,N f_m$W|oQ5b ,K0L ljыiM0 (g9UOW64>ºTI-n.$ )-©h4,|>V9MLg* 8K򽖼4Z&bnnz4YI^ 5(*Rԓ_X5%{ڤĬvյ>H뼋aUzкАz4#H^ ) 8E͠>0/dPf~B#M"!90LCʕz  $Hв#%­ ܼ83$@4B_ Fhl+fY۶GIπG&C:}(|U4T8by[l4'^b`廃'?ڒb;+Qp m\o@2RÌx]J6D*{K(p5[Rz[WR\gEiUhW4M$d^uLX@t3V#A  X cu1NA[dhO.:}VZ< f5|ni]#ct "bq^X.4x]aÖG+s7 RMw+"l15[K2Q)g E22\ 3hbHFkx|^ѝ ~/ùqH6hGao{ܲFFM=^_K0krrdߘ6oOşjzӕ: ǼekO# 'Ncʡ?pOr7|20fRQ]sԁ.KY\:Bnĝ'L?OƄ>4SaKBlTcG( :D[9&8P&ؗr@Iny 8۝6;X{x̋;Erx*ux y r/K +&X\\9L$If]J^:RXL $' S sTNY@ɝ()СY%s`rr-$'>Z&OEGcpFVϮi(s_Be~blwNȠ. AerD9&_Nh #PQ]V۟Th!3H û(W<H'<*Dm)(宙 ue|S@AabC<pX0<M[GXpGB'kh77]kIF" nnAg3n O|1;$YMOhBW$5Աmbo2C۝\تwsq_fwh'1rn۽iXt*avaǍbRvsb7êluGv>vXjw"a뙳LaL: lTƊ_c5fq `}τx`nIۯN3 #{>#n`Afiy;RנQ2lh`rFqpg&Y`\^Ɩjڒj!))ck8ƪV7!QA~nƭ 5aT t7>qACH3Cf=Tx|/Qͤ7b&P67j?w oհBKac7¢ $yXՈAG; ~Yw |0 RMEԂ>Qr$ ;_NB읡:FW^ӗXW})}gϚNa>8.=eE)аEuJFáNKbo'gC!*U8N6vpPh`P:maX/]:9 6|ΪFyu gg$ΰJ|jCL:'h2VAڅ%Ȇ','}#@kGZyM(ę6{;%అ"0,%3o8eɯ9#H=W6 Mcf}.S.fQT%K~2PFv#[oGG 4<6j4/T|jm19U#=K|1&T :"hcԦno[6k)R2 O<Ŝw'Cө>U װ uRY[6*ѼL PcjzfNYeMCOۡ5RF3=]|4I5i pe(O[3~ˮY\U)f]n$E`WbLES4 )rLj&=ha(}A|f7QjC tq0Ջ14 >mR TbJ"b,#ڜ[z;:*"g&ZGaks80P!(H @o0 +p ?BW}"깧ط?R_S}62oP|N.EěO#uz d|/)Z ۷x1.=9&,NW?s[n8rOBHW]x1[,B=;z<8Wۖ-)+H@wx7bR @hjwvbQ;&z9'~9)O\<- [́v9>2 ^+E2-* m,XĘ+Pmy@g঵ikށV,ǵ%d{?,qn)JdYuqMYZ"dAZl 6&Uh8nmy%[knȼܩw90SDQخ Qb Е@JzFIv[A$SgF {\:@*Swj lϠ.>YFSm߃ dmȝU&Ail1ZYrp#"ٖ,B(c2qqw8ϋ]XHQ" ~9ʲ_>y&uaB wZ5&V҇Ϭ}rT(pw;i!3C* xTlg~9n㼥q:FJͧR[PώlpմPP*~4 Cq̦9Btb.!]qo 3|)1$z"]ƈ?˪ZR?C1AeQKMOhLsm-s 1+3XMZV*//*72p7UGyx" -g™: :I?+;Y>V(+:.eb t)]%@_yc?#nfD+ZKn%󋹷 %E҇w0sr5,< I^g]lnVfyM".k%Rwa ]"\UxQNxĪ`6`w>u攣І>αV 9II &@~VVoL 1ntרxj꠹Vu?3-kKW ,n&jp-z7h탦ԩ9?gttAKG[D%(8{KufVOZF3IGCSy(D{$7Wh{8Jq14+V"Ni=i3KT{~~P7B B4苦\xt%٪JJ;Q4BaON`"C)-ЛGȬ@rӬu6KdH𗀬܉.$G]|{Fl9g_% h-dF VYC]C˭ݹ%|. C^qlY^?Jxن3mLf|ǠJSlH{ -Q^]ΐAR\?FIڏ̆I g`g{8_ѹ Ѿ7-se`!aaA_ZyTbAi< (g.)5c  b]48@^@*"FՃ%E`^K}|H*:nܸ^gOZHZՄݠbXZ 6rZsYAp"/ !i+bZϺlÆ< TQ괒sLQfh5]K>3/i׻wDRo^B#9_H:ݼT~۵sHg3<+טU;~)B"NV} ?^. ݌c|?~O)ɼߧuW#:~1'zDj#uWAM^%IhAzxRr6QYn^1eh8G)9@ Ƥ_ֲ6`IFƧ夹Sce6S;gn5#TrEٌ O+3.uCS^[OFk\)jÉ}'[67n$E^ƣ;#ք_Z.$DGcvS~ьpk2>Tr?_YadFw^' _kJ8M$=%Œ~:p"1Z8T,vmN}Y.T#.U)V7S: hIRMO9ztxcʺn+~$̿ ) !/+jf?3,b!rGrK~ _?߈vzjlVT&켛cX)@1ݠg+mƚ#?; yQC/sdّdE,X5_Ks[ %/9= >ٳD49cxsDD|0tFaFi0(?n߉@J>y/|46&#~#u .t=8J"zv%TkfnIfAS$,]t~c`2S6,7ų% G_ov+=~=P`U2I eɇy q! rDw~7Pjr@7n'?+DĄL'J`~ml3j-'o4?Chb[mEt?m8l433! vY;1.6Iغwא4Ռ*h#!n{ƫ8tZC77]}Y-FŽWɴ#=(9oq#"tc3WYo/++Grcn\r7+tn@L.E ko/=;5˳M{~SՒnm Q, gn&W=~^ $&TXæJ->\UJw|/0rԽV\JD8z4-ijdN=A +͹hG\D++$u^jQ@EX>}iqO:a-FwG#ܛgh`35W#/4^V;ʞH%b +5 ʊS~v4٨PtYR$A]O"FBe|%0癿$pTw,3%hAo'b09!BR>륐n<̀#EKFI[Kb`+SgKt+UD^_44~ DHDXҌ!pI4$#Tԣq*e܁@qqYgqB +ӆ!߭'d*]!laON~Yo`o*8[2s{.6b\ذ;t+sQjK;QC~Gt V/@=ML۪NYArnj)XUH>oJ5r` 5+ 37I'DO3<`%ο! ^p WivEnG稼: *{ >8tfb>7VfZk 1n{\Nm?XIFW,t6q&?~E2m4,<"2⾫+@'CMtq=m^R(k<8`sT!Ym}ˌ}ct.ێ)J슶;RCcX;z=,%(9dJ~y<;ȞfH¿PywcV[mr&i4 N]3G9 YK~A\nkdD|] cz{ 7P|"% i9q#Sk%rm@2vkc-5d[u?;bg("t+GX.4F쳠LJ2#5uDstrgh_?P^֛-12%:NqcbcTU,P:8f|sRHjqK@)וk*>KT0b `O\&I%o5@>`nܹC$jel3å\K ooK-wfӴ(@*a^L ۂ Ipol 4uk%a[?9<!UjG{/AH^|ƴ ZXa++kqq N{K#UH%2ǃnp*MZ0UVa8t|ѳTw#?Pq1-F,z >ʔÑ-n>jY ~kS X8:ߣFnG'aLJ"Qe"zLTfr!SмԷAҢƘRroQ+9RN;ͳE1Dž[882M -{iuV\~<ڄ f\Ig8~Sߧ315sAFFCxFarnAS4ˮYҺw/>F(w*0ځ''\b, P'۾>*D++s?:}p(5m.,GTstNBU N:3$.?q jhLq"2&1rAxiU$| =vǴ\wT)׫.c(P[x!0i7`>w-YqMvjVo1 7_N`t\ǸTW3}^ε6 ɖ [{QnP(|9ިp-1~ 1}DW~샶X2/ȗ8J3.b)c`^i'YO~^[jC\fai[t%롕q~Hm:"glW~9VT w/ʡOR/LY1~bԮ6gqAVV*5 ^7,ܸ˻3'R^]- .*6+gZ&Ԃ[So&ا})UcFȂqr D#hv21&ͮLTڥLlvF2\\Dh&l3aQgsC%c|Ęo!ZF3|38IVvVcnk"w 6 nm dZz3y20OVT6#QA 3&6L Gz[p+틿9]ͤ 0-ӬB0lvA2krЧz=;bg@(K-bT3X!(z̻oBr`zÇZ2N:½ CwnT.u;9#LO]V7a6'cWX>LÁ|3yNv`G a1Lyi-8F/( )6x%\>d`S'3)7;\v)nF\Vܣ1 Н8!l?T ehʚ#@fdl.pxcȱw+L`VL¦$̌? 'SفOv/zb" Ҋ~me"zRO86$3zsnǶ|{/+ILc7$Py6ƫMx&=Nb9XP K|vpݫ O/:}_HF*>tˈ3&'] C$?4[YPʽY.6δݶ ǔa l#-h`J/ҀX@qQ,1y40 & ~9vY:.I_&hOs#XP ; x+Avd Vܧ+j0" !h(v- PLQ,u0g@SXlRp8=U2HԨ?j9ن-m[4>gC}\#synsVK_ %EdH&Ǎqiag߿%KE/ }\gۂ-0)mdl` w3hD^7W|(٫ʒ87":oCvP0nX/@S)s_O/ ͚t.k [AlHrF_ZsK?aͬ0>lxCDL4bW$8|쯎{thY |U$~u |-?8Fd." Ix6(+z SA0W\ymS.342ڥP:H^3#~{Re߻,'zG;Q% 2<&3CL/ȭ`jz`.j߿ug_֦/k4Fu7d WZWkgvLjdP۸7ivW!]W)ExEeɲPXSG^j}ϋ5dӴ3.kz!?5!bH>l92붸 oݿ7(J3cKwT}$62*؋Pz*gcyIp 4t>~'E_2S]sIܾ9 ˄&|G |N%hټ[O/E4X!!qmcJ-'=qq #ᔱ;7b:"= J2尿\稆hGS>{e6]oZ2 MX롔51J&eIʴh @R$e}Zc i27%%N75rm\"o(`}DTΧi6a{FsVZe,3 wLv;(47RhH<kO/"*%t]o)4fj-@3;67 :P5/)V05yl7t%"Tr(`mi3Kx@jzpA냻g~=2]] HFҋetό]ZIt=SIm; ݔPuamU<ﻝ^%-3&9  @})٦ƛl &M tu W9AeiHZ|ߝedc x6ᴬږ.tu6gz>=wЌT(|XM|ٷ0UP5 ^kBk6=1GƸ|z^H/j*8a4NhI}dzj@O!_޳?VRm;f=v]&&%`DkmR`d!!4@08kY/!I#uu14BgXӶPhI'qs˖XOT2]շp;dӅpJY³mj 2*)|* b;0o.~ODR ~D;Նn`D3GS4 h<Q ]l]qT6{"Ek=xcɞ_ '@Ej{%xWR\wro<>h#F%Wbwϴ )@0%:0-cf?ʼnA߶ُ{d]KMq蛑&b韥}daI/jII6[V2ΒRjs=ꉨ` 9҃ljA(W)b T{qcPfb1_dl`k;d15 rk"LGD7b^"X*R^iS8wf+=܋9d[ e395$4;~IܧsٵQ%BӴ5mS$4ƚĜ`@sK<,,"7x۹"(n3a2f茀t|!]R"ڛmQE-G(jXkX|UDŽB6rHr0X[6*MD!t+5e=CeqIg`+oyCo."D>,ՠeΘ_k຤._5t/4/\a]n&$zU`EKgUҾ.] ~&}0j,M hK`פ g$׊uHGQ?0>:0Ƚ/6zxBl`m  8.dv0>'ҡ!Ctѧ +(bYwcrP9sٮ~Z೎۽Ff/A,*WY ;"R3 %" o %$FD@ ϰN6eb2!kI$b3`gT e6 ,D93G* R4Z u8'47M(WSzvXc/RZP:C9-th=AXYpet#_g0 =\.EiVV>g-gi#GA]h/+3a773֘hݣ}ꌅ+S{g'f:,Y4`_MH?CE+Dg>@.rG'%}oKkWLMd1,{oO)ƿ +K>]LRKwy=RP taJ-X͞scJ&GK'"kћsդBz9rbkslKz[Sal\M/&+BwW9*C*Λ<hAuE^U|#sk%9As EMpC *?cY[+_~H dλP5"1~~% o$ Irǯ[z4kOҁ`)ivϺP۪TZ$糝H8.Sqd pʂi3<z.*qq=xȦ (zA7kގ ]åUԌ+W\1I31Rovߨ9]3fO:z g1/aǗO*7N?sw~=.OHVD`3`K`SG׏{HtIn1ϧ/ܑ{4[eca44; rellߙ{Ȏh/0~-RUeӪVY| !z.o?-t $6 8vޥ ŵe"<@Ʋ6tE7~?R1?s421%KsB+b.+W]:m(_Bܧ5sa4L;qY쎫fZ!p^d:$ *{6_]^"Jqc$֛pBT ypA+3*m|\.9q@[<[DR^^ѳ$cDT׻.d0u ٳevu@rJ. ƋdSq;$P){Ee2&>>5##qo{GlXa3cxBi-0߼ex tPBOqW[LXbŒ;r͚Q:E! J8Kݴ$Y$Hd0Bvx*Eu|ʲװfm.mtmzw-a <ͪ8y=jէʑܔ0VU$Db9=%*E\x!MÁ'dySE1 ژs1gb@0F7Î_Uij kbwh )Fk*Ncg\|\8Xԫ IRCLVL ;m51IҋBj{b3&|~kP DOƅDotwPSlTOLbH' I:g8=<5{G:\H%+VͼbVj*kw8LT9qk?(A%SYo=]O#y8vNB">&,W M]Tq%jTL p 1;ˊ4JȻ ~Lf(2c@C[_Npt0QuCQB0 ~ؘDLQZsO,Y^]zox^BOS698謹%K? @"57ъhԭ4ۑ h?ѓKMвLfۥlK $gi8m%|V\5X2 fG?\Nܫ(`SbcWРxI(1#zB_FruzLo 2ol+}?%3N"lԐ^K_U"̓ [ ]-[. i7vܳ@ *Li%Y."IȮ>"<#vu0֨ nDDQob*Bî K+[*b"H '~좻W[t B_K 'KWHɦk [] ŕлu̫' `~Or|vu~}VQ_A6IԽa%wg &θ}%C:~BOF ˖{BHx |9 @Ly,wGγ: kV2u )mXֲ9u^:9cχ{@fEQI# }u1fH B9FHRy$yI ggBgFXc$e4BbZ\|&?+vRiGg]1ݭA[VS !${F1AR !-b@ϯ֩i!9NWfP[q솒$ V!Wyf_9x$%~\ (Xʞ {/< oVj@97-HᢆT4yz5!7EXpΫXز;n:\ft׎r.Œ45-9"Fm$[t +k1&p1e[[|/D97*+V%O(6;ˎш֫C9},^ЅxY18ۮh*6$hT\MtOu+DB $9XEžcgh#Ʀh D%Bj(pZq:a.T^?vOÓ: H3[P5_jY~doC0I:ĔNxh6&ll* 2~o>|t1mrZĩTG3΍/]8b+]UHC4ײ*]W0wu>1Vh|Tj \ Ԗ?PvYqbRm\A ߾MӅ(w' "k*yLI;fT3~5EzH jʘ}~ݬ% <7Ѳ/mn֎DHC eP:}VyO"fB~%n@F66z,KNL 7s ȁͤ\ ʣlӻ fQפٍ>9 [gRtWW4,fݮ(:NS+L-}VlPg5IB tZ}-IDSӤS 2BKb) ,Qh8(%itg qzv^Rޗ(R9E6]EkǑ=^H#n4t_py4"hX@Mzni5dJhwU۷Yi.㾈l!orœp hkP̝nvFe?o)  w3}2/+xIj ɢ_ ^QJqYU\Qށ#O?fTJ%E E ;Z?24}MvEzy9ڌvbJQtS R)O*@ͩCx(NY װ[Hѫ"wH-ADF;ux7s'\7یR9^β1f|Ga6?@=WhѮS;9[̴_6rQl"X үޔY.n)mFKDsBdidG̓q()"{YSp1}nT',,7fqlCC2'vݭ\l(á~FY(Ky ns\_ Oݵo̜ԠhQ[%V:Fj9.'s&Mf":nS0`9t f%pVa50.!gX pڤj;`} CۺSpJqHBX RNPo4NM*UKNtg8( L 1 Wuɶ 5ϞH9#P 92¨gz[G6*xg-!(KJ: d{:( lMxbYsd"gzF]#%79\7O 7Qƫ)kmK5@L9Y^8YSѨ.mWl+JW+z}RAGa01(HQj_Atͺ2JEK}gٵ/,n^FY]&lHtzG55Ԃo@<4cߘ5D@ͨ|oC-ߦ8Oom^eV~=9xwYNKoI{R*tpp؟'W7Nv xܚ3}(mv=p54BI[! [.W9CrFd^6V@hKdIt]RMt۾# P+mMl`"-m.֓ޤuc&]BlL2& ,j^'6}yAфd6Jގˆ!EdSbZ[`EVWvGvD@ց5>r`Jތ!SfmR9Mn TI)k-ϼ.Kg@0J+0C9|%~*oXز̀^⭃I9RU OQ4rO»tbH/wȋ!I*p'B,_Tug`LSm01y'8Z "F< @ yepq8d!*N]sIp7X׆TTjJnҍAcrºΡ_M!мWG|w 왱o,%rU0ZF*KIP|^GF7AQx4 3UquAPDҁ szRw CXt |7 /h8p]I{m헝N^ӄB{?6vp'W;umن1Ҕ,͑VslNB٘#_ АY%Xyn@ ׵n@ SM!(0l6EF?zk%wbb]hn7YQ}k|:epT}n܂֎`>k~#^ 5.$=g 4ߖuP>`oYFx[yԉWv GnV']=<^e3±RubБbjS,4X|X1| Чn ?@nbWc?Ԉ2>V 4޿_IhO,5ma};Oڮ[tJ@F#aT Wtlƨ:>Sr^ >o2ƬԖYY"Sv<.ny{Y7SH,rY.(w"1֦3*O*$/uBÇTb,D`D`Vl])(``?U.̷IRR4P#"&|T U$!FTEXF 1$(:Z;h޽ڳ7glt \C(4|vJk |[N<2]]3 rm8yB)P3|JhEm2Kp'; ?QCʶtp5LE4oݒ6$J=4 `ޣM/9#~diۏt5pI?G#@ȪC3"^Ii>h*b<0@`}&t ^B)M9=XqG&k'[dE5Ѹ8f M_Ԇ)ǢC[V!YQv[Z>>oIh>玩AGS)/\ÊQI#Kit|~`ŷPpԇ#&U퇌GP@&tw@)RK("Lc{OU/ T`6| qCPl45*o R o7N 1v\"9V/磜bxL<`30(~Qա m(qM˥.u.%?DnGB%3s11I8Exx(/ቘLHj)Le98HdTOpr9ZLM)vya\#"(g VhE/{f">|0Q6tlK2"4,M RYpDe Z~iʇQltr ,A$ÀEݳv٪BAj7Lef&a~;$:1ő CTX`Sŕ=7ZU1ɒF"uĩR% ynQmJ{ әt2f@T"H f%CY۪o}%n#E=imq^jLap|?e|t+K|@L?Z!FVI7D".P;ϼAkb~蠖8Hܿ eGr:X8y$uJdH=4g֧jGYɇ,YPjmLdt^F2Q"Rmă@ B@ E8Ǚe# ـ}F`|d2\Ujē/wRtxsw c0La(uؗnt1v<+ǚ^fC!TN%Á˯IQhcsnx<ɪǴ@j"pë \٧ʇG(]e-P-\499V`[%l|=b̬ZYa /Fe%Iah{G]K+1rx$}ߊ+p J%m aab)bx J] )wD䱙D 0<6o4VQШڈ/OgF='LLzChI ϠL7 gJFoY4t蘜ˇ m@0K0'63"RvM3ꃺO|1-1nN>ҽ1Щk,̠Ja^zm=6Ըu4b^#icBg/x~Dr9~Ǘdn(3e1&Pz՟'݉ܩn؜ H+wºttZ:1< -[rhtajѿm_R-UTk*]y:/[oXK_cE-yP"'")˃esriƓ/=dyca߁+Z1mD MBA;Ij)$WVX*1ia8}Voj$݈Y~i 4|0w /1qԋYT94;.|-8 у^!L4Z596N C' K4BqjYD&Sߵ@dqw(l/hV|Gze,ЧUL$J'W;=:ZM񧑰N;dM^%Y LFFQB`#Bl2`ȒK#A§; `RfG1)rt9xnRYWRW~4bjpB9V1nC] b%|ui~0(j%f$rw0 ԉh\úQU0RLe2>c_?W}, OpwZ#ԗa) Jɿn*A jcV]$Ѱ6>qӾLMjyD~f?II'T9b' s@D"X)hE~k-J'GÄ-$Bԟ.('n*{^=$}u90(MR36?cdd/jE?!cԀ] l|BYCSy}OC>ɧEuluQC\YQg>~Zj{> {,+Z`< :+t.\Z(x.3 nҘN.zChg\&wT'n[b*:렢dpy0DNR ~ ZȔZ|`bYJ OՊpؙC]%^4?*G5JJs޷ۏ`qϻ/NOu#mnCJR !wt -zF(ݶn}] : _rP*mֿ,JI֘33kḋ^c\tူ(mӘ9#YYbw$$UdN;{$T҄g,H&-$=6pߞ;I  tMe~,_s8HEڮ-8utCsAmlݯ57D:VO`uk6NiuO V4]ǽ;l~ 7׉c}ESI/i'S7PV fݏ4_3F(Y^#_o=F$\{^}S{@`k慲QH$Zve"K _ V4tײ8|I^È6A%:K`bkl߷^E@SQػFy!rA!2Hz<1R>Se 'Pھ,na}M>pt/>+B)a;l:o_v/ԾO`$pGA t%^MW8'Tl.^/F6'Dnf~SL+\K.E |G L: Wc,Yês>%*<yT q[L;5郞ȳ)ۧg#X_gsȬI"[qK MX$gXB:htrKhiv&Y)ݚo rz>>S}W!\b4Ys9Tz75˶>;$971%5U5U>9hU4uj8 УbjUoB߷$&tø\ߞ7<9t*i׺yY >-6o7C{u!)_jE=TЩC痈g>CҨO47ܷs#SmDν:%1'9P#qhf[?gjͭDֲ$U1CSA*3ju&8]Hjzu:[ /}+Կ"fta+g(RqX"ut)C<M:Dd< x+)Q<=)Um_s.~ 6QHEvUJrdm](z1џ8I5}uQ=~ _ be;þBe(v$K섟'l79{ XEfZp|w7Ug e GCmӔ kПLLј:srGc7%,7KdKP(wJT3pչj;`Y}q+511@ ~ 5xpƀTTo* -Ky0luDt6yݓub~~c9Oߚi#%6R]ڡjS; ?Ћ ^dΪV=ňC[:DrC|u84A4,C̀YIo`$nSc_E3q^6;uZ@O{YWͤ;ԗZ\bI~[%\&Iz5P*F c e,mKfcQ\UgRUE46 3: xV~A̔q̀ :ف&Q/׾%]u wBH+Gᲅ_S0fc)sZ g$y6o1bHU=l#ʩ3񲂊uVx09*{F b!!Qt2j R&QRkE·R/ls4X,Q^fX}~6kP̑l+z =5ĮE5jQn'\Ͼ;jX>$w4kM8B .a}&w4ZN0uHW=Rcٸ ۷!|k>A9حͫD$p[`A-@>hs,`R:%Hb T^&*|Y{Y걞fBvYKϴ~ؚoѯ-mmMTX8:oX b"sܣE"]qA0 04"P2JM~8` K /i_"5R^8a2.#m߉^&` y>ͭj!0ZV싲[E{+ ;0BD GSYgmMbkISuڥgeaF1O5H>AU}L5'/wXpaSϯA~| ]K{x_iHG&>EaN+Y %/$"%J. QoPaPh̾/I!2βH7B^7-Ʈ>-[ͤnpNp}\$~It&c W,h+\}dn*-MrZQKQMfUG\the/6dН-$pB% gdGʜs/AJ+VD/,P!0JVF^wɏC{7Ֆ&J.3b -uR#|UbbbD(2* C{Ddс؎!k=-=@I]r}.& Y- ( &ZDŽ8߫yg|%\ʇ12d_QO/,؎c|nd)3b5*0sN'4"H7ĝgT)_ $SYpjcǘn"sS©m Xi8s5Vց%Ȝib G}{i)_Dg2f:T{Lˆ 6go0 4c$|јԖBdjs Tv{yxHiyn!%*+k@@(n*`"˹yb0p{>|`QtzZh/%5 5MdfS՚7@%PC۩MbYPPBbK5o6Adpa6lwb|R[B⿕v *W';?T9d,Rr_简3M#),i0p4R<Պ7~X?4`u~ػ{jYoo¸'2nLC[2Q#k#x O(11зfGV1~WО+K}QvXTS)d[??xJJc+58q=IRdf Ĺ8>٣dɈ,[Ϧ3s;_V@' )>jd)?}J1ZY>Nʔ uM}1Q/cӚQa丳޸NT쟐[pʲxCU*!]сv&'y|y7ڼ`_Lh$!KO h>Tڐ2RGuE`#S*։y29W^;!f :Wqzt6ݬ3xiD CR8Xb,C5Nh}]ӂ4{*;$Od1RFgj\}zwJ1ײSf)m(2J|/ V@q:*؆XmPjoIވ w-Wnmkb|9ᤤc^jEgJh(\Q?e $ J/*ϝAQ[ʳl%7".igqX{*^o 2S%d(Fx4dB;!ͳ-CMQ|QTE(k*?72+sf/*"P 'ʘ$-_qs 9]̠zxFﵬ (wD C6C>eiS[>{ lI><\mHeP㢿&PF7(+;3&b1 ͗j .yN,% /v뽚D ݇T~N}U"f`nGZEi<ύqkNiWѠq\*ybPC#BCݎ Hi 2CIFI$-b7Lqٓd8fsqђNq RLR%ÇNy beXU/זZ#(W+d[_Z+͹a|I$@~M`Aҁkξ44|AVE.77F!ݐ:"1 LV|Ebg [VȮ2dz.]N>Zrܴjп.!-14UH(+(&77OcP/ckʞC-z{G㴀<C}K"&?+Nx㵐%q?ж@t,;O2RvaWjYAK?h5hRZ_Z6:J A恳)(v _*iqHE %P=Z4d(/gD76])F&\jẚX򉦝_PJ1'@P!Ɂ_^|MVe)pl1HOgS*~ov}BҊxܲG"q Qv=DA+ ^"_xs&UZ>o'hEl$Pje uO6y4 6Ӡ)]K]Vƌ2ӱVV:0xzuHy]aM65rx`G$^Dk˶ h`ʄ)?MG֕|"H!c B@Kl+3ؠ[-ֶͪu Gr牗q?{C֐9B(3,B'.些/jpmQ|FwjP  вgdtL4 9+B;P?|Fk:<{Dh$ບ R;lo܀xf].~$5q. 0x&78x[ !/)ՎRW,˖M6\ ޣqEz;_8ShnğP7 X4k37˙d K̻3B~#cѬji<Ѷ3,r!%Obo?`aH:bd`,'I2Q|k3{pCm/o| /ff5Xȅ xWh9폐L<rjHкvY%S+|JfvLs|BV%6_$@.s-*%`Bf A嫮FydqX7%W}i'՚?jӗpw cD`rwlP6PhT E"_ė /O Ǧj"A,qjakQ!{K+GvvY!ֆS)I]aI՘ey%T=X6b-vb{x@ YERJ@ 5vNj'E"[x]?ŷCgM_wMRb>(lw^WԄ;9T.tvrMb;a8@麯B԰?Uӊ0YsХȴHsW<9Pxƽ`Û]-8E"6[?\Q:`?E# =qM50ޟf$`}ك? xP ghE}ˉT~:'W&Uyc\GҌEd+o)N%,+C,ƃ^ne)ErVmwL2sǎ khPN)IB~~>Pl4촒' S⦉˹^~z3L&BQl܃br⛚D~-c=g&[6wH/Ù l3 ɱqh$tY,oJL7Vg_u`dԣ$2 ( WD"4TV9 &ЫvX4甡Hnk<.^3"gi{㍾$ͨȚhjKE4ѱ!H U\omjKj^sTöAEG]~]i,^SHohR% ~ hHOaJ5ٯ[Sqo&\7n72Q B^6>H0l Vn_uɦNWgK𭑸B1YZd !uHuHzktUjiHDtpk+ӂ V^ƼݡA'dNc;ԯr#a?҃B4aHB_*86+'DmSZmA̷a/#~)풄y:l"Q65('6Pyw.r6eҫdu703_K՞;.,~K1kOFٯ]X0> pa`IguYZAvR0g;vY uFL)|KO !٠W# w}a8|#D1LTGJOݞ̰ZmZ{L'{c iR"V^[?^.#Uj(~#!zB@]وcRٓc S† Ԟh?qA\S^  ]R@Ι_Y]SCgU+TSt'7ҴZ8m$'n]4MSpQaNR Eod$mcB** Ĕ2ƏpSn vɥ3E}ܪ}?=4%A¡fǓY`CkLzt&C T2uBэObLZ0^+.x)l wc&$Ѭ*ѓ>X!>D;a~Mbנ, L} (JJ11{L^R1vk= 'EaV9(d Y!ޣ.7kRHvlU njm2 f&F.c]!) w0anpWhkYxӮn() 1+T{5o/$Za7 [cn#fl<q$M^t^Txޚ(.-ѦCa6~# Y([,nowk ۡm@}\-\usYboݬM7@LZfm?<7;=mmiw.m,60?|B6s:/;[N$}rԾ'+`N]&h\9yd#[q4Mu;/gJɕKtw Dwhg|/$ [ %ச5f8>fV،iNsNgQK9^~ P"]Y"S>io)GӡDXaBHFX}")ua-b㑲DkOUCt|fp*{]^KBjg*h.{NRMz߁T %HM>mqIQCE3܉T`[syRÈ#Ҏ~|J6]yg/:ױQ"+'T0B&{Hq>dbe^8/T~ tk$;>Z{6- ͊tWZ\WǺ}wEfej ˍZG[o'cQeR8?(u.f#5:+WvO?(V&m@_U σcr9 s|:oez]u8zM3X(]\dŕާ2OU\5a64 ԭ%xxv7_-&?orpI3rvzA%KZ MMH&O)I9{?w^5W}6f*/>h( imV/N 7#4.GMqi$f$Bf7吥SM~+PğW,CFAOX:/gW)0B %EJ'/_HL'T{^lo5~"+2 Ly$'ljuA ߲^+4BMD,(~D;a˗'?ϴIQ,JںgAi,v>@\b!َWn2_:$"% ?2DrM{..DiZ/;yP,4[Fg]Q5Q$ 'î¤Vi l0tY7\-qQhv>P? pT:=^)1m8WA zAE똖;9U@*Txu\żbߞ%4;yqG>?C*b> 4_U;P eE˶Q#7vי<js)D/h^vyV }oRӇ7⑋eB Ŭ߲"P!=3)4nlR4T}iui ] gaZV'zXɢ1;qZ)匬84pyA0yR|O/vp|,'h㦣8b5SM|",HӬaE؀nTT v|Cn,J8-Zkbx Z{]/}r4mR|.BN4b׬o䡛 {VazE 4Qt?Z|pĒ7ޡ kY仈\䳯S4ޫHFZ֩RȄWf~mpTr 7鮅DKO᳒ :T ~ʀthyud,m)&O U%+cXs(3A IJFFm$`,>m7!O\P޷!)[oxaGdyRרdć4~k_Q j0zț?/ xq=hjw`($H^g QS!3_Ӎ6s^2,F'F@ Jж,s%k+GjNC y[iPIܤY}FCDe<쾱6hctZl*M<>Ḳ#S)[:JOPx@l FXÒhd[#qۙT:WevuM9 :m\xm(¥ Exv~T 2P@FMھT!tKM<=|,`KP΅· „R,^?Rծ){[!mOP\T3ټ^q_09dh>.ZtfN 5UPi*@!CKiE6QGi3/LJ<ֳkG俼%R+*"ہP2We>i~8@tm@PBqDPK[K@nMV;vuk,ny@dHCR{b ?%$G͠3LITuKNZ9&#I(I6F]д#EC+B 7@F{>{$ǜ =M̆Bxlp^K0jt⨱=uP@yd|vf#}@A6"i3}$D1{]uM+^☂{k0WVPzl:EW P?ކʤ>,&hK :G]c;jIYڝ%$=( hZ!4zUt[(c.%Ooyq?'ovVؾ^ywH!USS Ϛk_^!nʎv3>X\n^3N(x!R'YN 5oM.Ct~\]BBs- O_8hB+!H^Sg ;j/+_l\e񻎻uCVחD8 kJV;g5]\ۙ^0rJc#'( 04Cp'o5q2z@/ 0*L'žrC]u% `Z %e1O׉@fːaGM ōPk C5-$Q4b7=˽!9.rUh>\aCmu9Wr%M;:O Y6AI)39 3c8/`طM]t!#59Zrj9lMr6fxC 6icwy2 )Y\]w+ł (U3PWg>1]fÆO_mUitTD ڜ)?ɨ8_8vk3>T+eG(@ܛ^̷?&Qaad!gZT=dY-K4 =s񳜮e6oi#f]ks٧b"Y(:la_6*Ҁ1Y'^V(jYƈæ>f1Fiuy]h-#LXo0:\U?>θF HQ9MD@!e(}KSQO ])T>L:6>NO*GQHy YF*>KQ -480 #vCe܁MSb_h i^.=!u2l +X3cR" \?< AugUWvVsacS:&/wrIHkzCP9(8XYˉU;ijɮ}{i(Զa8hd3k}ud9a>ipX"Qz)7:8X3A#chJalV-{,Po+S$/-yUA[]lr#dF,JJhDg]%Eajco'$ Do˻:A3ܛ 4yҀ@";WmM&|SG.3<ʰKvy=q6zW%3_Nٗ0"50K 98{#e~M:MdgfP0,J IQO οƼ-rf>/nQ \>'h5{qF:#4[CXO.>ޙdwX?4hU`t^ F9N-2rh{ZQRPr69R8^r e -sֶ8\ʟCOJ -xtԓnT& T^}x p{Y.V8Jq],頩uDýve(RmF܊,5ۀB9oµPܱ rF;֯hI{BF4Z|r^&Nb[E;&{^Qd~܊uru"1VQρK,[!$ X^q b!9oxzÃr GjkKBC9Ey6r9YIE~'cq?DAKs6(v1Co:ohoSkIvLC G5ﵼ 6FEU|pkK Œ[u}I' s& :N!l͸2)h,/a&RIdHC4#b* Q4[m쎭lH핌.z]ā c}~ E#, .O_BlP[v#̪^ƕ:eP#tצ4QFIϟN!{#\dDrLC*\3 OJ|0C s#k\홲Ŗ@꼪}1vb?L1\QݬC#sFJ5V+F1c6lK21!mDrɗ'DNesv9aCKF{J;/^LiJ1I f`]{gTo'~BvvJ]l]Xԙp&:6e7rW L@ЎHPl.(uW@J ϖ?h$DZ48B4uVĀ"9ȱdKEmdtۑ ?&9hj.y9u'Lk(f*3.TB(? AE?Bq0l']kjﵼ˕fjz %Jꄱݖ7j`11wB 2==/nWlÛ5s UiydIk#}I+rOAJ&3lr+ڗt5 ų 3Z C.|@(FMGy hHk+@EE%P)& ,o[2*RjH6K w teejA1xA@svu~^;0[VE*pp0YfAԒcUoW}\q9{x74˖i9s{B4Gm+~~Df ?kfOa&s pHegۯ+bNfCv,$0mxlq*6 /B̓#'_*V]#lj5I'Ϯij] H1 Q<አS)#zLL; ՊF4:KM]?_ky; ;nt+Iuh͜kv!n1GkA x~Hf|@]h`MP(j{ۤA~ =5+9ԁbZN^]3ےArI鼪ACiX>],5붬m>Z#s1}3d1ҿw37T^fD4C6.Qe|s,希ar|k>S}3)}{P;p_q݄E ?8mPӏE܁ 'py@o}X 4#>*E0\NIKziHgqV8?TLcdZ# `mKHa~`[0{}R ^gЯV1FcUy˩D;fgKj&yO)^c̥pi,D-jܘ'l-Q 9jeSU9,D](xbmq=rPe 4ј |}rw?!/dKVo$0]0RWQLlGG0/o-iPt4(RH-VO#uQYSjV(\ID1d(CkuPӰqY"1iR;H8u'Y433y9|$o[JSxH6BhScLU֘',@x Vf> 3 Ġ[BD_@`CIZjUpI!oh]&A_ gF7J~A{ځQ d Y"-scgɄ04WFήkRźKg= d '\].U{e_~f@ ח52ȹ)dUoGը{]v,5Ut@2=IEAMv]R\v[%k7e0ғىo$AΝ5dk/>`,|hUFQvbG 68Eg^2\5^s H \;.ǺM *W;qj|TV9hJn#Hsiʍ^Fbflʦh U] (-+siN z!I!ɾ/ncuGqTzM̆zS 遡̇m"jl;u-/,!+- x><;F"i@/!2m =o(eFY2,ŋTڷYgVWċ icz-O8gNsPnx[>uRMC=)N@?Bl)=-nۯ[lXsïW /w9VÔ'\@\Nx@1z ڗLxt{FU5in|.6aN' `h`8 zC&"d;5šLI66\C۷N жrfVQx&Oחӯdԍz9Ha z@'gx'*VMtW%@2cv Ƭm ms0Zf1EzA8o3 {a]61|9H d(f'AΛ)+$E~jtľCSK}a6⹞N| F 'brsv^1Wn!OSŀj1caP0 x+ͨ~Hk k~%nCGWnbeS"*pպm뉵?pl2;Mûu=>,?'%q!3 0 =a^Q9aȐB ~l8x\m}sOO-V`EQxLc\Vqy=v-(3}SCau3dyuw`ZY=]U>7@g]1 #owH*_2D#5@\qp' 4w|9f wsȩV;U#~Uhc 9ԣ3ݺj;މ18+# yS%=؍6cx mQ$ -K>f,&F <'(W!ע(:Nx!a*=Cu r}%8xK!Spmt .~F}ױkPz *Qw{6^7/Pĥ`P Ri&9G>qZ6pUy%2H=9DYWO84P,B]H`^= GL6^Q fBbYmzp/9(1T?* $cw'J`S^~Fh`4E5XZG[?VY@ ")Ar<7~٭JwIF콟ŖVXd]Tr`-Yq9E} eHOpWˢCwyd73)2TU9dU V +\bja!IiQ l&rqȝ&`\);aaCZaN\B_q\hT9s2C'pkj+)$a㲡ۏWXASxEg,5q Y~* 38`0.÷'ϋR˜+Ჾ3?*Gև@#ResTBJǛ 0B`AkCcIFq홨m CmAʭݫ)^ZQ3v&rݶGHv&uzw:γ%&Jvz{ҢeA+٩_D a*j@9'-N;~aM/5Q 3oÓl-_Z*S%5ashSMZ m*j1p8nSi3[=D?g[ 43@qE} [ G{$rt3ņGt-kc{PmD͸ k&BY*5Ӱhˉϫ7o#:Z'鲰_F[f)# Y l-|^FT2F\qXŀOgQ#QCuO)陊|xLEϱԾ,>8-aNg=?-~B+wel{<^gGe*B%%K!OyowJ6 zP9 :9ۀ#/]^rM,GK$ćEdT|HmrZÎ}\.V:`4dGG\4^/_XZ ѲOFMkUFNi x)O&ܞ4aw&答&S52&, `NG[bqOaٶBjD*F*Yחsk<*:G7ʡ}t.2SJ0~NB+x SNh:'@Y(p`Q[pןC 1ӽaކ';) /3Rq ibS:ϑ!GZ*҉PWmtCo]ATק%hZx}xjՂ<貫1`NM$?m:bW F dWܔ&VzVcͯSL5anr+A>|-|ܕo@T[&JAĭg,hyUUEu *91 F 78\X0 _u)rc|\+׸U)-swyT42 ֭@$*irF+"1¡S-sU#B(g AOiIå#+Us Ejlt;\?~؞ψk%OaDM!3F@3J!W}}f;3@҂lullge;)Aaj=QidN/94#?Q2]-8b6K%mGX4D;Z/iM(Te+GF Ae#NiˆB=Gד3c5hbw>٢\'=%QšAT![ˍDh} _*d*9G8][6 )\Zqfȉ̇Ϻ|L!ktgo/(@}JYmJGLC!+Ѭs^9v<]Ҵ]}%ʔQꠝ'rk C*E*./`#:IcF@16l>2vWD+{୷I9dE9VWә1,E,*Z+/,hٚ;(he^U Ғߠ7etx%w"wkDFR" GFNٍ_+oG&~/IۥĹފRDmu4A)y3>:ӖcڃLf^?4h%)?eiS=GZI-Im(Zgsn&Q|":苵@l>1H)^ѭ4^othD[ 93\V}~gYkdOq~tRMjiek-iI5Ɲ49>7$4xS!6"N!rPu˃*v֐\=mF;sE L[08-MkE`O?NCF;|Sd(IVnAz'Vi_8閽/w2fzg_䓎}<<ĥsPcĹUvOHW%-).AUwmOTE7U_@}P\ E3 L! \xa1H a-(2W0Q_z_;_sxeq`kʜ&3sguߴ7FmQ-y_OOU8T^!47?꾄-u݃NRjb>۰;IW-hgj}WC 1q^v DXĠRh+ypEExlБs"7ffS+fKG,|^lQ: ,Ek}paZeh]2ƒ hf<owf8 i]C[k~j%x39[$cksK:eYu2~& L?_~b󽆹w{7 CA! *s>iqm1^ )={e{H >0Zϛ&^\㲬~  xַd܃s.fd9Cvg |ܬkr@DRHTaUmZˣY lJ}|3so/AC fTwVoVdi6<|_Yf2|~g >{0⦽^zJ;!YMWhCߎǗ|yu򐯬ۀ!D" F)SȂl<&G Wċ:)0?UxRʫGyP.eNghmU]&L`al>ʄ+ǥ/gNx\/7Vig]:l)sj6+guiFTo5 L!tE>cxkck$ĚFV8`A%IDSjO~bt:ӱQT Q~Bk[hMu 74?(Y:AElؒ;|~N imo\>XЄT oYOtvFn3+d)LI Mn7[%=%ۓ /KSyj?crn[<ɭk{i* ɒv^piwp'fX%֮e(]mhĥ`I!oqU}> 3d9qx3Gmzrh#k8.˩!(0XॵSw \og x4ΑM襻5e<%v|8(&H*j.6e Fw#;@<UO!\ԒF ܕXrv^v ,@܉ e_HSkcI_y \As۠ Ye~0bkTEP?5Haˉ+4;A `AY,d%kxDn͔3F72#BZ劷mTϿ]i|٪ ,8<0ֈ̍|FKWz \P4%AJ{z'wݑFF$?.ϹAPİCX0EaT6M!psU1kz`tRxZfe[1eeLjzWzҼEzjMrBog7*q4:''q%%ԫ^&> fV>>f7:ng۪Sy[VFNXNW0n4:Ak|A~Mv G싓c:?Q!.u*RESK-`QK7NA51(쵨[/UgYǯ@%Oap.'` I+kV>K1@5> rn;F7|n PEC8q:¨a5UjhyxO?_FÜ#_<,;A-qUE!w2:;R 6OrBkp.̖.v/\v% 5(3 lPoHs/2#l'J/W,p4:ob%%UX6Q qϞ >ѱڣiY^Q`^lWV }q~Ar_k^)<4V:f|Tߠkxxڦ) @z'oaE(=:l_"^S (uU }*ß6LN]E q/o-#9hFv-1k35q]Ф޶S.o5 KO}MM%AynU̓TlY|NZ(#a7>8H`:ǻH7NhAD cq (E[٤] xΰ晤hq^ {icC]΂AlG\DR;}$q֡ROCXv$T:9+IXN vLɞHLb3صM|0Jp(:ά qbaa+fGԽ}"R.=uo m (]p\ߟ%%PuӘXZq*xquZVnUJ-'O}vz]8Ìc*4Vl5/VᖓHueHQ~acAY&| jk~ x x4ͿWϹ7Uș 8@A4 1TڶZ eySU7HeU)Ev\PE#2~t }GLt&:9bl_ơCzY-j d>·mt{HR޺8y¤:ϳDPvuzbvn#q. ~?h1 Kɐb7WOFL\~TL}Fv'b.vzR[: .D|[΅@G${_eGږP:Zhb9i:7AE2z= xW%Ͻ^tkGrd | FIYvOE"U1r+>鑲 r៨41H %VSy: l6+gZ:GԪcl)rG{sz3"\b MujC*,մ PjI"!^e_V`ZVP/]UH8/85f͠y)d/쯓.UNo1ae˦8+0JU $1Adt)cL1"&YޠANLc2vqdA]H豙M q@Jtxs? O"e25zKI|-%&Pr?]POz Q2e R`M'My=)},sd:ׅ78K.E)MD,Ř0]vRě7 r- ^jL*(,|- -SVoV\͡]pBXua*Qq"^AO)<+=eיs 2ah3EtxQ!n RPثcО4$Szt4bc2;IS?zS-۸`'OOq>Ҵ_jah T,+W4 (Ief`!q-nz)-wDҀmw2@"էLg="꺷PLa^siY8SG\Umu n#Ջ9^2 Dl5w,97pQےkV yXYc-{3S1 'H~ _G-ЕSEIXYvS 8{q05h=v]*&j|(ǐ6-~D7G7嬌 S^Zp _gVm ȻV 0iky,^)cК&H%M۶B&u[dc TG`. z&QxOCAjܔwCt9Ϭ%sF p6>_Q-$CUv;``KbĵhxP>o~קI=zzʺ@CI:ݤU }.!\KkŚ,%\Hh]愙i&tqa`e܇=ILyo/HT%ͽ-vV}1xu5ŘNjSR!:6]bx%Ӟ28ִFwOݾ5xqڰ ΰyQ|5!I @|PU*u~Vr*j~Nq(xqVMfiiK);%ԱLl{HF+/>q 8I%ΊqYJOҬ:Ͼ")9Ϡ0(Kt#)Ob5Z=B51~1qƐgԛvCq}>V{=>6E+POxG5Qhgl_7!{%$ZHJ`3:CdʼnI_'\1 O*|ݨ|Wo͵U#qbit{+( ].޶E$6O˄Xv_tN-e2QI8uf^)7~D%UnЉkfWFJ~(dyjiD/\ׄcRH\q=19'l)Z.'V7Y+aMge褎KɼVO@]'7N5⼪ LFSPYKg#'uXz2:,`IeG4Sn^ *hq֠ k9FBk۫z3u%Pbq ,B0z_[FXb><]y!)؛ Gibtw*N[(U~ނ33a$"ʒtu_= WD:) ,$ P$I|(1]Dg-3Ū_Re0eEF%6d4kv ˒<=Uj |rw%}ԹD?AF|@uԯFbAO'x])bCtuKEK+^9}&Gov:Ħ&yE@ C'db~мˤm䷥ ƾ"Zy6db%\AZVwgb{~/!E}򢓆{BWʞ@NvbTpinLjmafMELf3/iqoV5x켜2M+9L@`Q:f0ɿ)MkԦz#hS)C@(ʭxn_OqzWL;|G$#\H#VqVݬSg!T|ћ3R"UĮzW"5} 3攄uB2=Ӣhռ R3]*jbIWLN>")] aVN^0>RZN8&ju{ޤ\>AcE U }2ve§h,cu m[.}v1G:Ĥ4i{hec5HԯiFujY4@t8CirVpcu%51A:ɵ Clip\_B$?T>rG.JG>ߟ/TnP֊gCZG$sdefWtP?HPkz%Z)9rS#5`I07Rs(6ݯyQK5 vD| bU€{B?7=e*Kc@gnDV%yCjTY| B~d?ߙ  eӍ7֗YyJ6*lƂ"8-.'B562s4ܙfL+٤mzUb0ɬL,/f MFp=vOi狧9ĖrhM3 3Nٜ\Nd^CpXgM';ȼ< R2cFǪTۘDn->GG4=q0{IBG=v`VRIC!{^Cy3w`*zj[åV5”UX&ڲI]~_Jsk?Iy_'cJԩ%M1s-Q{DXihrP+ q E,qè-OqL2?O2;$r^13Bэ89Ll:0T N-hq~I'$]yP((KjrUeMt{U ed)S9o"5Id!h­%hN}o)|n4. g;VHpkLӏY)|.<0տZN, leR#8AH뢓uЮ+Al?93JT( pAzcs@{%e,Fh6/RT$>+HwoW) OHxZoķћϚ/0W7ۂbX씬ޘtK3ƕh`xKط|r?ԑ],] 7i#~[9@Ɲ5bJ:EF@_eM&k>إ1ӧ ڟ U0ٸ@2}>P;q"oS^e*/~1y*˫$ r_c/c:+l\N[5 )a\+3(1R$\O2@]_v }o28;ʜ $݁9, *.|عM,A5I!)[x;4!GN|pwKU{Mfzʼ&7~8q'5z:ⶱT#N.`UcMue QvQyo" i^sBGhNqB*6^{MO.~.yzD{,#T,D[ag_44(Ѷe$ )h*X@(ZHЮ{3)rh DڤQuRU+yNcco'm2lൾFUEѢɒԈپ-(uh1CUx? ʡl9)TXv+ۉ;S`E9awYEKzgeE5>bW.9KJi$[VP`r<T\vJ`᧯3q.-SP8Žblj!=a>-j?+Z:{(vޠ)|c1 MHHVFEXơ71+̧́&~ BX@J$+> 14 lgIzSՕ]FuDzBD[mǍ1wC19 WTg؟]=R3 ҏd }iHS /4WG]Y?:`6){7iKJpI u,# -@688¹u 4V^qx E)gHԈ"A8O@p)jѢbZ^xd&[.u7Q%}cyӰ~A /vz KQE?iqR*@2\[k:1m0ML ơ4bL)I< 0`*{NfM? YA -)KHhLFױ,9SQ:0.]GAn|& MVwF`V ⚑X?1_+H`Y*(OԼ_R]`8-uŭ{9Ah; >W|N{z!fg.VqhY~¢ȟWh 1,ccT f&V8`U+5U@C2Y+O`gFb+5!+Ơ${[1^jq! |<C*?^4cZكK PtufK> dCH*9rb˥IcR$!.*cO降/U>M{`t]rH*lAQs\^r: .5 ]afwi#w&42^a6xmC5Y>S_'%̕iۛHRx.&|IJ3q`V {"FUdJk@zK~(A5$;\he[HdWMޕb,`(ܼ/Xףt v ]dg?A$2N+K\ O@?о(IXMFX8EMfE|9Dm]c/ލ:UAyiVS]bP%T~_hfALRM(/fg;s^=pmಝ= ҵ3QJ s_o6dXjJ_؃z@>9N)30 & aJ;pO "\ 2e h]LwMWM3)$1"$ʰnN8KbɝݓM*U6ђ}=$BO[5BQgHB&cPq|ޭU l5ҙ{F,6UG^7OվM21ԤGJQcXEݴiX DdTcٽ  . 74mě<Ε{Y$D-kjR&+Vml*њ:`J@OWk uO;}e}t NQZ@M 99c}zOuT JG$`mEɁNK'KpK5Qv,cLI3 Q fnؒH:9DG_׊,Dq~=g3q ?Bϴ %e1=kx;OѩF[N ]U FbV\Ne݀&!IrgP7LU9is1~#w`jn&h^vp?0h4h[?L|͊&T} k.1Ȱ918^G W+. ۩ąJ`$uZ||\v .gm=M LW<¬`*bͮ,6cXXųE{|vA:@31T&UK1 ͌NN v>@M+o_ EmƭŘ5}:p/}mk㩑,"Yf:N/]f GOcB $ Fw.:n4YqSLħk".Zse=)_”9Xmi&'0áEŵ mV5 > vܟW/ʥu?xȘo2)#gTc2G۬yM`}'DѠ _ZD׆SD`^J$"P)G$D.5a.ЄY Jom1^JDNT hPNhxJtb`txۓw 0js/U^&aN9jop) Uɛ &qޒxDzwaAL`}\0a{$>tt*`<5,N,3K77Y ţտ} -!hFHˆYɝA|XMk }"/lL&"怣)0SR`ΠP %@ǣ&x/a5mA ')7||Ah`H|r^UU"7?ZBL.EY#wN4ۣ"UЭK}H;Ct\ǚ%gr}tBܤ!]|rl-G(>T=|)0}qn'o\{F&aŽZ ݏ=ѩ_o68Q[{e :#ҐI;'wtetݜiڥ@<Ȃ3Ͽ~bTZ~{Y@mL˙ LEKh>H"Vdpv̵EX\7vj ŒP1Gw@!hρR1ulJH- +\I @Wz(%=b=SeA$HoH; +j>tQ> ,HWv؍ M=` uc.+/dr0+ڧ>сaX.DTb}Nt΍*߻_/$M]C"@C .^~RGwDӭZ(ௌ́=S?V?S.΀^nACiG>|GʰX%:h:h-tX;GC1Xݹu>Tڎ? w[//IH$ɭ5'>ަwy 7ln  o񬘱YZW+xRfiW(fv2P{A *S5]e rV ..=%,vZ \TxMXXxs~ۋE5ep)D >^VҸaoі r!U B1!}ͥî DS)jr$|b6JcY&' *2z}L|Qk]v.bx^=ծDߘ ̤Ni{QĻ(ϋJmTV#jEv~ 6qu25n{/иO}o(ףhʐj(!Yf]P ?ML*P!} ]A*8ZԷ>{ތER΁s K<7QZ h8I4HsC()#(GIDfd@;CeGTz$-FŦM^5 :fEyM~oRNN}V{4sJLzpH02AӜKk/M<ܱ^{$bQ̯bO BZ|AB'kAKrK ֒ pX@JSx 6j8%F,7h!ˌ"f-|n &Rz|OnizV=}Ipp'3up‡!y<I&ͭWMOolʘH@_MgL6v1ܽ-Z [q BdwO"bd ]2=G.s@<4mpc*NNh&EOb}nI//yeA7(@9!и$¶Z6,g/7_G)1}m\9oNh+T "xe|VDb+i 42/gKq,Xy<_6RPQH_, `Rދ$kfhUI#>F)K'#@DTvFf\ G6eëTlyAu8WQI=ʿ.iBu`&.T(Խr_+XX ۴SY{|OCCN+GjT-dǟtA֍.)[f@vfFrܟ%VKriN |miOwxᰤ쒠>Yt{Q_ybB.伩[rݮN u 52/w܆n!,eML<% Fgq@jU QJ޲o.f`ݾN)Dj4[/Ķ^M!J˖EmfԎ^ QXnՈ` k0b+FT= #/^vHŷk|c!P"/՟d$6$?t IiZP~EKWH" H3{.+Xn9 (i&h\߃Ħk/4? rB!gˋS#2<;x(7|0d61T=eG-xpuPITew ~9XwrH7aWx^ǩofFrG}C-(߭Uao4/.&8NխԨe2kB^\՚o>_%RAx*qD_õek[o*8K(LWԦk]|"|9z ^sjIf}ȍ*o[O{*3~g69z d"'9OeEM"TNv;,в_,)ы;c@[@L+bI.ҍM"(ohFWu9=kSЍ5ogɛ*u1q앯 KFC,e@]Nxrj> ݲ>Z[o?5tݧhcfYB>2.'$a{U؞5"׭Q^lK@ fpZ Xo^TcKOJo ;wBӸӉaڣ8OTbHd},| A8 :$D"i c=J56`d4zѬ1Ecjjf r'v н%K^b{=yU\Xiդҡ4?-ɂ8wx k{ igmmt_bqͪq!y+Sno&UD!nv2vP2lg ,xg&у;߯Zs"4 2Cb?z5MgL\[R%j- M8m$_p? %+2 z@& +o4b6M:;"@SV]Ť3#Xt5.dP` œn #IX Xh?&; *&Do,Da):VUI$a=&Ua̿6*y(l <3]~H% |0oPd5߼_j\}B)vgGD@jL-."žl۴Scȥɳɾp/RܳF\'>bdwnZ$Ö-kU0]r>j#юS[V%K<ǘKpi|j5GHN"v1i4ޛ!R!;\VE~P/.r%z7mElU-X܏ǫlHz6f[CℍӬҦ֌IEcʤZ%=iҀT1~闶lpb3Ƙ\v*)gSdS nõ\d3ӕO SrP; |,/dB-)tlʋoXyf2N[cPF>)9?^,y9A" [TcQ%V=!a=|KJbyjIƣ~StE0S~nԶ%njg 1WbM>@1g=x^gvg*j YD"Ѭe`{SYa޸ԗ ASD7 AQ[(A;wUop-Y duoxm>\߇n[\5Vtضp6#2%9̞.~T?4/Q 5?] PO'&;27>kv$w|hz/pYt<ã. Җnl<3!(s[_yul' N (-̱Ěeo'[O=USNZH6Tԅd]'Swx\av23;mԲ/8/QKrM7|fTѣ _W{15gk%:< [.[~ =4Cz~i[L5K&')5g}vP]p)XH%ULAV R @ |#сEǪ,✳4rF c*d'?!Mj ord w!6]q}7 Eb .Ubudx3`'BAf]$Ā^b+mfYɦu!ƙ;&9"#DŽs.19IJ] +mua1@= kf~Rrpׂ7`NN72)etj]Qmg)9eJ|~wB4fX|v? MCUs} ppd~!Pd)O?Bi p9 DN9k_A]Xb"lW/mFS˿o~rvP/"Yk3)M_HQ] p͌]SOW2d#穉s(~Yܛ]BղRGXG}rKt+Y#!\uv7sԐwZ 15v{A{jIx_Nl^#B5{eTmPÆ]jr-狰zpKjX=XAky$5{͡24WuCg1 ,#FWFs2,J<p[d9E&Fl @'sc)@zNsٸdN9NAT͞\ Z\qYdspe<*z oˆXV[ve5k$4өWS-+(ۧ}Jٜ6xAFV]nI}Mz:ڑDF:]=px]'l!o X-``6B-D3cLaW 73IT,a1iQ5r2Ψ:$!昕 m > V,W麆7њɩnf`(>^̈ pbnÿ̀6s R]kxp[/phs=O GyƆ cfo`HL-%e2s% Z[nKEuISІ| 0A~.;)ޭ1=I|hnJFT,RK n)8hT 5- _?lϷaaiPie(ܗx:C-Է3Z?Vx0v/>3sf ?KuOl;LKO4=NLJZ5 E̴ +Fݫ6>j2orúA6'Aـfi>o_:H} $Oe#gLI@27> Ju^tZh8wuܫv?=˼ ʹ_vd*\Xt9ǿv"pyXzh\ѶZsJ Ge3  ֺ4MwE}tQ}Q⤤]&،}iρҶBP M:L3&p<4ԽqmeaG5XuA@h;x5 ٖ]DLOCܝ&S !TΫ#2LZ\ 7 蜸;&Bc?rugd/%5-6PAN2g 8&/:M~Յ=&J=5p]RX>9e[beF0y$ņfi%e"7H9'ovI KܕK8Pz_ҁ~'̕wFrr8d.m41[Da=6MNY@vCl "_"itf"-dUӯAY`=C>#s͏[3gvי[lne>&F:4!*D̖KȲa/" ?6eLv5buiu1&U']tZ9]215}r2-}ORCᒺ-M< GF>.hԱ'*<=+/G 7OXwDTesiIjC;^QZ /H<Wr's?I x2A1]2XչC~4G0$2WKo>608H6MA֓f++VN?IrPlTiW΄I7)5٬몷Xsjw^P8<}Wx5zCmQme 'ATd%9-f@3rTSH̺N6࠼1pεu`1^5{"C)ecgO%: >ŕH@UUJjCt6Uv6stITdߛQzagvDzפ HR>:9Kv-y!(`/1MdN^r a%NЏ&b鏈1J>p'eнg|pp2xϖV},@[B?aqQ{놷,%KpU|\h|SeTut#LE}ҰrWRFR J 1.(8z"iP /vBhjS H{Z&W@ -748MpؿqޏJ_q=-6Us4/[r-+|9a-+*"N{ W 5vfŸ83: @6>t,<|p_s)fm!> -^ְ0ȣd@sk4l{h#ΰ.}q5\X{l;Ai8g N,x9l\N7dg_gHRs',cGf!gVؓpNeYo0mu0i jU{0Ǫ ߔI2fR=4k@AOځZ]д/}:Wpy&Sf* ?rOYqK#X{tyc|d!>YrIh bHAy/B[UX Kvz)sEBZBHܖ t,  $$cVyw7!*j [@awu_]kt dlaͦ9.$yӪ$.EdxX@ښ|d˂*eurmUاH5A5$ ~% uYZ sa<[g|9x#PɴyV <'hLK.Y<a7G_#FYϠU]_58} o~[H+ؔB.F.N-ŭ )!#gY0cX?aEqC~|>e=)+'0W)GW%ǢK;94:̌Z??99Ȓ4+m*rNɬd4!{R.[+n M&= r֓?CU` ._.,n3Ϻ>:ZS~y>M&K]Ic4vXCqb-=BS,V RԠx|h}b)8ʟ2'dWɀMR!TXOĄX_bLwMX6.ׇ^[fuS^u'˕y@W\0LZ#}ŁGJ;fIjUf6ZKD5JHDv|:ϻ̔:kؒr|)V1(fߤC=t0zH("UXuʪts:6y곛i\0Sr__E7HԭD(s6 a?}Ӳ55ЩtKN Y-|(P=>Uo4D^tӥ|lGND^ f3mYge`M/>Փb= &[(,Ŏ!1,N*!\&V=*0uP96l'[z ld](/#$izb1s@.bl2ѿ+}~Y跴 hRSjjC-=))r Ln*'zqk8B壟l$@?Nzf~끆[kHdjfOsTo0ڱkӣ(XWեPeA€uʜկ#Ka&D`nF1x_V, s tplR ( iȽm߿1M$jd?SJq=} LCn]AQwGʠ81(Q0ԙ^** 5yB nS%k0;so!{*@nX;EE(F^$E j$tua{Zg17v3!|bTܝ7X&UVf/ 0h a8v"Z;ҍjX]'w}kS~9b ^>Xxp)`$ƾ}%o<| *qWs~mП8\812 O⛃R]YE2[o`5ZGO7_E}4|<\?7nhHjB! h0qDi9gxQf !x+y1nB'i'3k&M*:s򼓣0Ba4b}lU9Fǜ|-]'N_b @ bac*(GVΞQc`Qֹmyy(u&x/t9OI-c[i;ߣ`*O $Zj+AڋfVׂ I;Jʘv nK5s`E S5wnMxR eҶgH;g _`Cβ(ƤN#Dlhhy&Q\lb-H1.e'2./.e,6AL=4t<{uBa4qV2NOͬUŜRa`@Oܫq8sǜ ɂ,ik}l뇍[+5aWx&Ԝ)ϛ_{  qȱ7>N6>"" JIŜwZNKRM}o)/su y(Qr3=~l$aS뾹>p`肌a|A*_8Hl>D[B3QsjZ? Y4އ 2۶yL3+yM%{I`fNV  .ڲ0BrVɦ"z"̩hqEf fo/3Q5> 5!NH3;cqwĴė;p-sf؏pRv!lk` LHc|t cmQdt2x:5/ -CeuKnq(9%jcg[2WNygMy#, \t X fDx>{t,?KY /+G 5ǩc>u"ą7$>@#?.Lb?ғVv@ڠT~#8J{7a#KWB.?8( #K@ D`bx քt;W:Aܲ];Y|` {mR\vNPrJg<жcq_[eVv2j>>w3?pMÖzʂF?QGj-? tq#8)Ocgi}je$Ƣ^u(11BިgyGV%Gs* 9@jd-ywsq%y^gM1HvFMEFQY4%T38AMwXւ9C O7ԛSrnAwJj"6 sz`;ofbqӳXN?Gĸ9Ϫ#WO#X,᪆KT"h/.chj*̶ݫolXpG+޵!'wr@MB=L܊ڣ_כ~C\W~MɃi,Wml6~A/m4xN49 q)DKm+de}2wOR BFtcJL; Еŏ utQ *%`AnuXXލ-3\8dhPlZnĥLrfZnKc j% s/UrDLn⨅P6Mq}t}+4adr-Bt@AsKy#eٓ xS4\ЦI⁜Z Pm: ۩|+OܤZ~}54;EaԄoƗ֛5:a<)yqgbR&(6b;Bwr"N\1D봌O8)Sx8NXOJt1cYODn୸#8~J@VTN5S0//- .` 8wzrݩL.v͌UĦzIm趄XkbQ#r#B?>UHZIapaA "g 38O q|  89LxJ__+F&bt|vqZlPB$!X`&Svb+;n5 _7ET7գYG+M0Q}6iҡ璙4L6q^UVz1 -v_[R|*:-;|;Fp‣QS WcfE>l[[ogT58}aXŖ,8{j" ?E_?5:>Ӫ *B59sbGze66Gd2n'XnaqX}yg|Mqd֐e3 ̧]8./Ns 3HXxxc/Ǿ *: D_1VSSɮ(08֜dAL J /#!DXxI`v4'=o8w8[0+S5̠P3p..Q8ssd(~zGi ڸYXY]yu۪p QG~ؓ"g(v0\z(FxDI@}R:(v_rBl9$p"~u3VgMe G[Tѣ^8JN 3-q ¾e(DL*ajwkR%S balLCtMLmɬA_ɕRŒʘ6FonB*Z4}B$j1]ۄ94_xV/ɴCc~ U{2,e:GfdxDsnq$^ a;:t|1oQ1hUU/¾_,#êX#0p_FY%'Fz܆d!2[GB5o;6_ˋgl6w(qKf".7?o<)P:PlH,6|lI>&(][){by$.#Gg0s;cܞ#/V@AV6F2!Ei/߮ԹFF]x\rOruF,A\^c;>VS^]h!z;m}LD!/ /#Oʤ|ېӃ#W!HŒt;hO, ! VC6G)z~6F*vArL&f eWy>Z18_%nɫ҃5f4VШ=-),/b3?|_[:&ZH|7ֽUې Eb[mqNC៞DiU75@0Rń0WgΡs:Zg Gd }FW~=jeJF?%~+a+z57a$mJ\Qh.K]ǚCwDoiY'׊`\KIB(D$<@D[%O¦WMr/ ) Ig>2[e+:B˦39=mb:@H/12&>n\$r8c"4 VH/[ݩu 9 an80뙱lmI`\۫g4$p[V$A3z0ap$T(vI+(K, >=E4=~?OSqYܠt8(vk,d$z845h/>TG AWglži;bEXX_ap8UIS) pOEWʴcVl\W*L;ONlTz^;\/!祯Azqu)P6ΊUQ$߉;Qvo0Onsd$ ǝi;}fAF?3[b:>Sp#EL©ZnEU33 c=` +bCb\2PDD:N`GJɎZ+C0[!lw;#y}W-%#=PEn#"$0_rNWO4QʐߘC òDt;Wѷe̍:~1N5+x:RC bf}XTE-/u ؃ R50*)\ܝ1]EV9OUB( ?In]_0VxRsƾIDoPA^\ɕo;YY2%~Sj;9gfTJCF[t\Gkgi{{Bb?87( |t%")@]+yUx'fnt!/p1 CѠ+?m}<.DW"4;"C\`BV]I#7D\bE@6?t :hB.|b:1ʮC l1)2'L}{ZTodjtgzL{u 1@ KEN;yx̯\FtpB2T%XTC^=YD]7ivM 30wX/q-HX)Ɔ,V5@}W؁O'qTʏSbKgR?m'PRං,J&q&<9v̽c;|G>F'5 qbZ囉+U97Yjs>bx|o&Dc'X"#_E#8E2! wr)О~BfEc, qB,WeL=4i80Hlw (] P!ϐ~tOyBHqBK]7~S_9J (fiJ- y4cq5y*iP5dmerui{X8|tol"b4Mw5"KkXnqm'~|{*&C'>SA$Yެ'P d(q7j<`=r1'5'b.k=Ny% iON{8%s\uHT78h]! 'y5"/ xH)\bK2l;tȔ -q'=iM~ԓ2K@,4%mN׸j"*6|C?W|!pi$17nvA//L7\}oE#!А+DsWKUM$"R&'M [j:MG\[2qژO 3 D;L2'a^3K8e˟?_ 'ZqAlYT!I¶4E|"㞋bn%.K'W\f~JL)[\nM& ȫPIInUb\pg2h Dzy1㹊P'y (?1*4-$AػA!F~>wXE/Ɍ1`y:0 żN?\d#Yw"_Ifh"T&|p&)0_SW_GXp9;̌8L_ܺJǎ90b-sJ\Hìq0:n%̥zIFy2P[O=_' -J_sCCPo+Dy᤟~IM4`ˡO*@IR͑ԑ‘{q>]`$e4ێ"SEo%p~WXju*! V-r1!ᐈ|usn3T&ZnAԤwM 0) ]M.aϓ0$Bigkd4l~Eq;{׵'Ü5ԯ<#QB+HAR)"\`GI}U|\D18c.Y^/?p56THEӉP'0F>Ƙge;<!f*e=8k]׏m;cVD X˕+lץuW `Ivjն(~nAw|ZKiBJox]t"aX*>rN8t%+LT'F0)8Tg&`5mBȴLD'`O٫9 YNrwy UY6 gW⟊BT\(nU>֣@ -04JӁnfm=SG!d>$;͢)x^?阺uuI>p,d N 2%b2R\m*/8S˥z>.@xɩV2Jp2PK̲70)U77A9, j&Bp/8&*#g/ *rYٸ6 xHƺ भ.%ƴ},\XZI|duwagJ8O%l SH2Ϡ =mV=F@ZWiPϹ=lUNF]Ey"ZBjO=lf#FAזG[!fDZ 6Aj}b]_:k F;ŵV-"qO\g9cKP`?ƒŐ+hDDPIbcW%mI +vqu;O:ͣ"$0}kZh;͠]BV]U6TbuWGICZ8qVG@w"MȸiJaMxp:t#_-8Ŵ4|[7:^"IO)?I-&SN%9U4V1xz)k0JMNbIWCuFyLKIRܐu..\ύ@ C%(L.:ըqs"OV]g{VG6tM\adHǡ[%Qo9@kd3P DLf>vߌ]m`NP,uZbfcr_pw8FH,ɽ٦UVl߅-g -a_}C%vkt4m85CP  D{ϑ'L#ߥCt-oro|K-pj**.Ԫ4Rip }5zʃ(VHAC K)-LL>Y2K5/ &1$v \!js|FpĐ+4L[y@!׶:k6寵|&?6։ l6rnҤɲ#EY[=+)1횟|QO ~:=#%q;Ŭ#D 2xg[&/0!ڜs\=X)0 Dftx{hs mXF UдF>JH1pIL ՅPqZ 8#aij }5]skn)*^Z{>{y3<[I %]]>3Dp6ZL;`?|/S=Dr]?2{(כ_UFaH؊Nu]/gJ~ϼjٷ4p6<=^ {n V5~q<n:0]ʲUhvݷ DW^8iP53fƧʝگHfF77MENnzKPt (n ͍%* 0(`}MJmA! P#go|.2H>DZHg_:e&;BV6°3QVhu/:6^ztUHV+=0}F(cZ@h@zXpN+6 [ snuU\jFԢc)m}ESPSG¹=9ZJlY ]^M@t6ɫPw~'Mžqt5s*Q)v=ֽkgeՙSLCэRRhX/c%>/<8L7ػ̃qphJ`=_F¦Is8T9BMNg24zA\^eG3|XTkq6,$5ɞ$g_BnM\Ek.zyBk#k?4/'>_q R.S+!iO^H(P>ĄѺbeqW馿2<#|Mk? )k}n,m0Nߋ`Ԫ @$QQsq"~ `dkCI#S']B3;y!ZO$ ^QSZY±&8N0êU~0ݤ*ŮLu( d` seq`ˬI;dsȑk?P"P>wˎ B Lä2M䇝EIk\dS]4}˘>ٜB\zKh ̟:T6Tne!Ұq6_R5'YֽS,t@WCyvmZȕ*vWG7/¼CNgHpՁؚPPO|Bh)AOJxdEet e;ڞgeUG_5Ґ:"}%Xpiݘ5lá5N ,tH*E`l6POBδK$i1L uВIQd/%ڒRxHaȹ8҈r0-=4OQ^ж^йsO>Ǔ(CQiQTQe@V{2mSFS>awDcK>0NSZ ǨR9;G{AYΔL?"Y͒N-L]?eZfܓ2[_F1 z*PEQEr݋٘o,0ɝѤ|󐎬gx9dwR3 pya,LjI/M~$&V"#cT]0ސȖO!EA 聥1 (-{ Ν}&ĺ4Q ̚W5c}g~yyJA G䠙K >bcZ7j߃s z cj1%1%$gA\|tP--11-) ZHE,8!׍yQE3(>CG SJ[Mb-WjQՔNBM=}5V 3@;d5y.Ѽ G_~\%B2 xJFttC1:/FKwzpú@;أvYngvn4iX4/6)uRy(o DݻF?A 7IXY ҷ˞m}{;L,i6!Oح}O㶈e^7wTy#]aBHuepHMv(h;If5_[dDђB& mG(HziNۋ`ΎfvN">0tt;Rbw!^ KUU [}xa`~. {n Q9XqX=ҁlZ]Ǧ!uh@xQ]Iެ_`1$A)= cJ=M4@}Ix ռaLkωgJ&|R7 "Y _4PI-PBd?3;GY ɎZQaK^Ǵ{ι=ܔ LDP8 {6&'4AhZbw Ej|orrȣP|Gۉ|ȱ!J&*@WG$`v2mfN8KNeo|e{Pw'#+Q:[5K!Nkˣq]n ?{>$<֖zk:[irSvO /r2.p{1'ia0վl`m WѾ%Hb e8=XTC">{dy=54θG(BT▪سJMVѢ}i),^}xqI F\-WT݇6daY { :"r^L )t./yKz׸Ġ$MTŮ"RkmR+=nsrz !3aX8{ G u[013vF,RK,1!̨~݂z| L:,RDlq=Yrsڅ+/?Hy$z[*S$[\`xoh.Z}ہ~}  rdt]Dy(x̟BS,q X*"W셆+&iw)(u#E2w /5 W<'${]/!HxYV 5R*K]S, 7Zyu`=`* a~%cRߥ: !'T-9E⭭-Hșyan?Jho(q&^c {m[]Z?e&:3eN*rեUC8pd)iOFz}Ϩ^hr5WfcožRPWC b#FRPNh>j.<*8(LdTe=Mٞcl}+ScS]Ngܝ}čV3yy*k5bڒFr\ EyGh4g$0yVUuc .9N" /QgʂwܙT D5}H 6D*3ZD.)M;Aa?Smʈ=:H -7Ji h8IkHd}}Xo~ձ/`(v+j˸sh-wR*f,*J ˒, 8@0F^Z|r m8qFi+͎๡M/OJHؤl/J?YRI? TrkPU8O*$-sWoaK*H*8DQ ^. _]|BEWTĢaVA.0 A$/)o^;pn*DU/<* m$3B}a=9`Qgo/_/ҩ ߓg .9Xّ$9m:|uR"5SGFh=_fxϹ`mĹ4f>"y8y@v2?`>gbafGFBӼc?څ!df|C!ޞ>>t\6}csO)#ZfHl0vR Yr'NYZS+<K9Mftjk̿ӽ h]҇nr;j/% jC}[M{RYlHam-đatmșx|eʻIVHu\Hޫ\Dc^S &oWe _e*i NO&B]$xA'=~/l(L ns#K|ڸs}bA6/64pUӛ{]M9R"hƩ_IǷ YbQSЁhw1 3C4N6^DmTh|Uwj͘øI '֕1^,{[,wioP~{ï8ⰾF?NK/%šd :UOF?% ]*ϴ8'E* %6|Њ|23o2߭{$͋GEֳ4w12zwTؒ c!QTRuXq5_4녔|'k TPn}%EBmr,X]ϬV3?+_t)I)«، MlC6P\) +ٯ|?[| ە=$%v % X{~3xa^G vդZV 2NNIRa֍k?2ˆ94!bSWVĊiN zYsd+cd3Z}w#7RgWW `/p[ߋdPr m`P6)9-QhOY2E8`Ξ &z o` vR3g2ݛG( Z$)b,QJzHX96ms{(7Os#>LFk4o>_sqODr ͧ&MS=w13C姎(Xt_ݼ!]Ͼ${"ԉZzy3Fq1Ywi:╺l x!9+Y߃,ԯo-nVDy_y/!))mc'G6#oUiA_L+yuET',ӌEDDW^K ziTLJ^LK%k+Ky$w߆ dkF`RR(jsH#|Ia_pÒt}K9\`>B[]p8LjPthiӁUA\009dxa4x9;s XB>7VsfG7p&y[mEӛ ȳly #6^W( ($\ΝIH\f*vru^{ za|@{ez pۊ[3:38AyѻM`fS+ ZMfF} `C0JeX*gDG8~%Z iwg(cnԤqCyCv~&/Q![fA |9k$!hX @-iIzX&DɣIqMGB3djs+'UyQA9LcXK!YϩlPZN䓍Hѡ;۞fĄe&UďsQK #vɤh~!G&Nt45N)\=?dM^ZUd{%cxO`@} 0 ՊpX`YTDTg|護ztw;N=\D%knq~f&Dt WZF ^o7Alҽ.i)1#+ON'Eh%pw1]'Q `kd`S(8x q{ b!ٜڰԳ@Դd>nWqDGwZQVwX..xpv T|i@\8sbʰݢq<;2b^Ly7o7B^;xۊ(Z.*뎆:/A:N.򀉀&V<ѓ_l{ 5.m-dCc*ڭEw`9N_j _%VWJc90k)b) B=y{#7̎{&ș#6*LB4ʦSe94KClC Q7^,t,VVZ s`V/\1wJi7|Rqxy8 q3M]n "]grgǍK~i]Ce(1] z$S"e$dΰ0[p]k#Y|0@W z1fwo -sp^-g"sZK(`^f 8?dyUpKn !Wy[2|n}a>!j^R+p^+֬ [T6QH$o߀{.(B҃ObϝD:rʨ8)799##]{*Is=kh?];t5zaAC n )x>/ x0k[+༜mZ0kV{l2᢮Km)} ]ٷhNՄb1MMRcmjnO9xLcN2:8cײ}V5毨FK=B uS"s`UxX'2llۿ!VܴχnL_,u C!I,dPGʃWjyr%a%v]a7 ʷ7wO"ᓢ`B%TF |+3s ʮɍhjb#>D"GM;%/dG)ʢ̒߶g_]iKe''hʼ)G$UXZG/p1Zn0Lr}U_1"а8?~ߺeȕQdAz2ْq)wIXb"&kWiAnދ+AwFy3P#*\v#~RPNaj s)ev0ƙ&l8|>AUDˆLg@kX5KY6ܧ;J$$%<4o`ky@ELaC򮛪-=4rr33gLsxROڙ7ãJǘy1{,BCPEFM4-kҜ唹hIYs%:HTu pyM w/*Ҝ_Z\[/|cMvP;$9}-bv'/c~YOh2܅1 [O.=vT RdJڈDKD 7y#Qjw/z|"5jQ/8<ӄI'u03GI\86%њox D#QVdm@SX5O 08m<kq"G[Ch1N_, 1=Fxq-?yރI8(xHīnVq$K0k\pC1 œz E|:a{s?Uo# ls7X&9U418R6Wu[t+%A,NڮT0-Ƭ˒kuԯiEn1ZO;.qGji {Tc%^ȣDPJ3 F ^8ԲC) [)T>ώnwh %;fOdzkAG',,P>5]`WuԼ);B*;]0ms rh7hJLmO̔6 Ƅ7bn]_6ht!W-#XFK\&(Vս(&ԓ#&t@\ݤux9 reNp26vH`@[E;QZ$kMCe%`,"p$4ED|_L?bu4]=7xNUlu`'gYl*j8Ñpj̭U?1G2W{MhFiSF3_+NO\١ gyO'y9AtvDŽGX:m*HZYc=ҵdώ6$mI#4Ei{ عZ%j7iUGs1Nww5tdNOw U)HWâր;mSvNՌ1 5nIH7Eɢ߀ t f&Oa5Yr?9uʭ׶Q,x}+`,,ڹ(Tݘ;QZ9%]l慄8.ff+1 &i>s,a !Ls!Ӻ^Ɏy}\H-%$/?l& R2:*l+oPtz\:lM^G;Zg ^ ƇFa쓮UeO!E7]T$YѪDsm\ RiEK;cD1!vS2nO<Ӻv W6=Mhԍ++!j!9;pF;2AZygO}ʉlbZ?"K+$gĒngM /*≎IG1=Sn h{?3.5.47B7q􇺱sմ 7B*%T~h8=P )ZrfOuP5p j.Kbie4+ ̈h~'sEWDa`R?bA#"GZ}@fj d?}Ll}B#KMT-;T4lwWEIG79+VF˷-A\hz!_w_ZOX*?y|#=m'дH/z0}hevp|)+_bsK''+uVlҘw]F E.:!PGC,Ӎz_gNB3Dx~uثM[!^g]TB"#&Fgx@FL޲}7N?=&C:{B@=}>%~R>3Zk8,CŷE@ ԋڐrjy1Tn[+%(8$/(?Ż(qS}8H~y{`ˍf2B?U>qշ);WRtå,k朽4dqq;'rk15"=}<7{*^xI{\eEiarC _/+<=xCeKUjgZ|A ېYMƹVɓKL(IRڤǜ[6|ۦ`y~UQa0 ?$: }5-[Z0:u>_qO+6gZh`ͧQ]Xr1LyФ/ oy ,Uul #TA-D}F?<AaJi[N%,oj^wlP@A`\/ΈHߔ#MQe$S8ƨk$:F贗J@euOT2g!ϓK s1wM Nwzm#%ESw_T, =isBu=IKe"g9q]B.xT MTDʰLU֭ض+g$o7=J hil)wןX^6"p$$1ԩ%ssbȶ|J"24 klyRYkY+PUS  N_10ŤjSaLYF."ʏa>gT]7iu<ږkwOZZq0o3keEH[#n> wGS~ : 8L w<*#֕ ;Dfipf.~-pڡR|S![YT.-̄OC+7Qg+ZttCZm n44kACzՕ=A71<060ngc\gԏ%Z-qٟ4&_;NڀU=Ä<{PscˮH+\B)/gŞ)o èقg:`0ɘy.Ob\uU˭Y*&p=X)'/UutYB l'Q~dQ-܎LH<٣]WrxoJ>Шn%q~2l?9q RV69 L[g$WPPw Z4@->IRmZ9j'>׫ZY@^s){,z&@ AS&iQLcR"v_h\k00ܧx6@|_&W^G4LF;s Xy2H玵Gj*Ԩ$Um>R^-o ] AD=lS0ς12x{L)G+Zp}tt -JմH.,b7L"i[L1'3$x<3|!+_Qu|/){cE ,mr&dLJ$ݔ2CNxoc鱈':6 ĥoߕNky2dy@\Jk߫-}0V>Mo`UYc|܎Q%deUKiحdޥI 3', 򥷥h"=XCXl|脵}n ӑ'nZUl~^3X~DG']aMUɾ5qһ"tȺnuf$ê)>5/ "I$`ɶ`gnIt-*Iy̌8h,.$@p9 *lYyDG(e%&ITAvߓM]/{%a S=0qK뉤-3 ٕ/Fc(H{`ֿ+l] `#:#o yQ.(ëS^ҿ!pX욶g}cP D/`\ hM!r .۲BK>F,qǶsw;fS_&ÜLOԞoYdt ǙR{{oj4qnؾ9MeJ_ E2\HII Q˚Ґˍ'{x 20W[r ŃaxBGXPq^Yc:ab_Vs%Zmj+=ɟ/ 7jL=A3w^םм[[YQ6J'q66BJui+DKvV2rP@x." V^n.++Z-\saQQ?1^TH:rL|@WW=E5 U>S4oH7-86tEF5)l0\ BQ嘉>f3:RD&1;^ϑp.-o~bm}鼜 7U{UFcsld4a7"XHgVv> #6dƧFlsb*jDi[u@9av==謂eh"B!R{I4T⽗b=\'VH/}S(9)RC׬m8dt2lJI#u%׉5dۄ\焷ǛOT欁ɿr L]P柄z$V+<ت~,ɏpGW\*d(U ?9 RQ 3R%y; "H_/Hyva'-CL 4EXxCjϊN&Ԑzֲ-Ԁ }Jwb3ؗ"LZM֩NgQAS%tj5|ԀRh&/h[}`u}0r`ah̴JDegƼ7N'EFS?'~z̹;7nGN 1 ѴTh)-+GPq`S<U}R5 x ϸxX-oq8*ӧMp"H; ek&[r OTwE=rATcrlU;sDòn,p>vup,> pmjjXZ[;Tbb`\tx|vg1k7A Ű|/pDwna%P^&O0ΤD0sYC+ \*ɷI-)JBתJf&5tuu'kԅ2`MYo|hEx(ABzԟalT'f.׮#ة䥰C"4fM"nX<NA("${i5?df uqcL!60]K ?I;P0r]_U}O(UX m.@8 ^]gDJdl{2DZ3 .)/Y4x_ 4~x_қdY}yf3>Wtus7ɂE"<ƋaXFJt[?.}m1hd"Jőh{T_t;\ w7LJj,s9>^i-v:E'B/w Hmtawݿ܈ӲS DS)/U*SIPd^_Ml7]91RZ A1ٞ] *eMky ܉XfŦIXI VN}אက3OPpsz^e6Npi&WoHEX76z<5=]<+`KYѩ4v0K-MrQ`K0ĭEQC6ad{Vi)&IXħ_{=nxXb9 b3xiwET ҪQwjuw`{EA`:߲0y L=)&!!W0U&/}'&J[n6\pb-K4mױSyX~v2NCOcKpk_q;O:1 ,:=^hIzXbԖ`LJf ͇MVN:0/E@@ScGV\?cΪQSDnچR!j{ v>7t*tzv|O5Wfo/}렣R1l!5}Akڲ]97X&!%qV!֨K+nMDWzx|Ә7GXL"&/̝1? ;i:产}њ1IU˗1Qt4n1$GT؅rl۔g=J٬`9g"IQ46K Jdݟ\|r.ILmWECZ07_A\%փN}op5ە[ s?Kx( (5iHuH_T%Xoq EH vc?Aه9~sMΙx4 2ʣn l96Hd fiWCn4u3ߝOщl\;.dw8暼g;}1>*3GpICrAe.˱I5unjM `Z0oY -Lf*(qby` ;x[Zp-F٩T ?{,CQ?)tЭ[hVC!*..0x> źa*r}$yuΈOɐTc`һ< HzCtZO?Y,+ 5/Ҙw'v|GƯu-Ze + bC{}L,4# ?=.+ 8Hw\WѿV ]ɲB“} ,g+ASJ@oj͠bsi:~|߾V N2!#I o_sa=O^%cH~iz4bsȎN F6Ut.Jta1@gAA., }V# :]-+`bxAg_Akk6p,`>hf 'ZMᘮv~|ٱqKŗvJ̌9* H3VRl,EծnJB5(?덐D)k`7MfȞ7oj%(Xq;x+;2Ȏ&MjuhA]VGЇf}o`_Kgs1u Gxƚl!uDzB * Ę[>^7§) 4DL0lZft@6Ǿ4:GF[H4 c4qB^_/5TԩBM[?HO%WZz U:—"̾jJCc]l4lTZ8!Nl9f@o}cla }LdA"mIQ$懗C)+JA+Q'^_4֫\mb?V:k?ݒݏ&sT(%nZAy!Pv?nFd63'/O9uh"t9+& j}r ^C%re=~NwH-'}ȮX :/$'as dלmUüs8 \MH:5 Fll3.'΂z{1h!xD LtKn5ڃ̙SrFk܍ݤZ4gz?4 IK>uB9z ƫ,ؔ Տ@Wc3Y7.PhOǍTk % SCJF״a}* riSɯۢl"WB2ŅufBYy%\7_1PNw(AR=zڹƮP{RZ jfM- \b^Rdp( H0(v#}Fo:{.%<⼠́FyȮۿg= [Pti|BSYFh7{K tg=dBϦ-5ڇd@-ydI b5L[akB@[;4F8A`KyV/<}pm?}zÕF$рh,\d[t.9RgvDlO BVVҽWbFP 3w\ ;c$wq4en+ %Z I;?TI}zvuZ|E~(+>25;Co"H-҄`V[4SR3lDLAbj0K\JGvYg"Nc?Ͳ((zVh-?Pv:}>C: 9%= CV1W-mQYz\X^!ÁS\~7=K3woψN~G٧KRf2xvmJ_WJ_ x*0ƈvP)e5ad,pL^ E v6aTj0ޮA>{jx>oQj#n#;O妡h!g0 2BEvx5*ܮDZ P`++YG/; Ln7;2Un_(2@T WO]/R5ł=}:&)Nv[G㛬T,bxו]!Xt 3\}-롡T(kڋ۪ fTr{aT2s1>ja$+Xt]cHڳ Yb/eZjcXZUjR VR!)c-$pu*ZV6`UrN?-ϼ/h#8@k ,RxuggQfLsd'XZV;H6DS@7isqf!oyk?Jpl釗Р4!Sd}.~co)(睄!IֲKW~ҎdLĦXWpO^˦q3@{f~BYE:_#.q\rlPIm QGU: #8IA8*MK[X7+P1P<ˀZc$Q{B1 ?]eK=F N#5U~>3HGGP]p[ /`|G?sΌ0)'czBN.BI*yO&d3j+F_mߙzFgS=Gs< 3F EժN=1Xu3|CflzrBmc$Mb@֓co߂d2 MCȅepoZ$HBƇ]T?mIrN $|D"d.$w5?CP<Ӡt 39NV+'VŽaPk9+_$$ڃrF<}ג)gмׄNs_@̡(w;`,Nh'nVr* Z@L4E `h^3 BH}E<^ͦZX5R$3. v6SK{V?f쏞 hrᝊ߁X'&O5qSdhddb3#G LHErnB!` _Jr碂9`.R!ӣ|Awz9n _Cf1ɔ%3C%RgT95Ea~t`;'%n'BL `8ZzK;,4:kkeenhH*Mi<6i2Q\?Sj_Pҥ6Ѐٽ_VL=Lv `b@n1S"[!nԼ#āI.ݓ^E]FГ~Y=i$-i3N-:GYi_*,zB9`"K-'8CL,8! m*['!>p,ҖyaD$ͣz:v3s!J˥=%n shj i}EPfb[rN0J"Ī}hB|3LX|fZS?z…@J:ɶmJdPi"UDC$ݭ9gnǜW{i0_N|Gk@@''7/:Tzb' A\9)B9>O+dKn~=0'яiirW=pI=qszޭŃD9ۏFc:ŵq(#1F?7wbָJJHk^ru LCrH2Jßup%I8R 5lNhxv7#Ǫ6(Oߖ@tqzû8c!":؆G4\yDPOº+ |}|m_IgC|?*[FaygckvISQn= |=*t$^q-(i1{TįBBգ!gI+.Z`CE`3-k˃mdHFF/&/uEO/X]B;R?8Ԫs>J4QmFPIv1/kXdFa䱁A#T}e7W3R XESZO7-/ys(8 EAx {@ (@ DŽAVetC8T*%] oBjRU}5~D ph3nS9xQsgSc rtd0 .*I89,d䎬#ab*L A r_t|/\#R띷Xr:[!A鹈Y)"5^bk}qF?/i[/g+FppQA^1{k(UjUS?|_sp,蛀/ m}(]{-}J$a4l{I } k IA45ɤ%=pٝd)43xTԫvjLTt. j8'|'[+ːSzBD 5'bzd3ȴLdƉQV%63H&5G'鑦-{|_u.%TGW͘~n +>pky&9!cѮbz"sߣьX}Fɓ psίmNWxX-ڐvNDȂ-q=V-?U|à!w_h n™*vblu>nC%Lb' UWۏ4xhfpIϷG'X z(FQV D!Q"roqCEF "q(<1-Hjub .;6|z]"2R};K2s;E ó>ufiv]|J'o؁)XG?n{ eѬ)-!Ag):/CL%:2'l[O ሾ# 'bȾ3r-IPӘ`/}UsZQLܛVUfu90`^ j%sΌ"NrP('䥀w:ȜtP#gľ0 {Z|cy;T 孶dj ? E/mCL'.fn/PwxGKRA'Ġ n.$7[,~6ωk{rB!LF7*mɢF` GoDG%yli_ 3n|tQfxWa=Ц fn8]nav [$(RwdČx້(2'X|jĴ~9E߭s#8_ b-9Q(WD~a`6 ð[^y43c@Q$'H.tTfuRjP'N`Pw'ڷGn1#ͳi+O Euu(a25#@;\F)/tU&Ubo:MX-9S1 .IbCTnd {97L lk8nu>LN7=6&%.؝z7w,GBqx֠L.nKl9YԷILIg7; ]^ՐH*d)+`F> c+fN^MEi Qݸ$^吠ց8-Qona9|iʒ7$MZ9N)n-ct'$]t[?.Jԫ$b=+dr^غ@ާ~OUEL@my=*#,tR%"wE9]\Tw#R+֧II8b?EK)}Ovf656Ox $'"1Oa%bxuoctcMx&m-f7Iݨl "G"^NҋHnWɁsnZp/mAL"~nn4u@in: P ^Τh&eҳ ЬJWGf'`݌{%iN)HOҪ+OZ]QgbJZ!M2PRDW:؉W}&JfjoTRbQL2`S0bp݃Ȅ &v}ˀmgAk ثšJ;'V;Һ fM\:/k9 nig+ģF*󫃽:B3o `}E&ZK$Auz~&( x@AgehmdeߒN#<{# O,]a( g9D+&[_u'/O97id#qo7"wi#^?d[;G}y$LC^3/&v._ۦaeJ笸 b\I^L4y)pVX--:aH}fЎauRP.s (P%mHȳmjcSaFͪ+8|L҅O/,vz;D&2iu㿎_rnZTʞ+nf3oQ~cd|y:\ %MXg)X)3[ ƅh`/׌_jڕ!Ër[у/*Pq^pj>(/pCuA:uI\  % 02ċeZ*W9uƣT801̦'t{Д>RpvFpq(=.t2%O'|fD^ Q{Ƙ 0۔xUV۴G} hAs.VʡkcH/4E 9^1TLIywͥ9 $[L;'Ԡ98ƍ-{9L(#kr@QJwVwc}.dݝ>t)1ic5 B>DH9sݘנC+,2T .靀ty/:\ :HdѐI(zR6}SQxKrWiUB2:R} :+V0eGZE+dUQhwU7x-nDYFtwri]fBT87hd1Pp+(3f̢W"/)jq?}2WwU`m kh<(ۦlq3.ڧqIT|44i3&,㔂aw)joi0.h%ᆺYt* 8] C ײbF Q/K mcT Y:?y6(yEIqO0]$-Ka6Tst}˙X4V~;!#_"Mzj}v)~wAIE&S,u]Օq6Q\8ѽy#Q>(J,|pS> ^ޮTXwlX !)hf yC& #И^L)*O\w Jw.մvenif%#SycQ;UcmâxΝvMkН跗VoZj;Ә\ O7aK^Ms$7\ )];55:dd { {×:t,MޓIȾiNi5e{6;:[)1h<ֵ1͓zZ<.y: l+#P7 !CG/Nr_eEsR"J itrxN;auqLJ)ȣmxw2fy78<' O$)C"~o34xHZ,"ϭ560}x:VvcC<Ӽ-9+2!`H~R/qb:¼FcnTΕl546ectLGbC-GOqk";"'qb$r#˺$?kp<+Wnia fWg]qˢ&Jg>~vSgy~{}I% !)F/r&ՈX%0fϻRμlh30fn5_3KQ8B up_g艣 8IPz>&Q,D,{<}H#U2HֶIOSgTCEl*>_z Tw[]ͤ!d^_f9R0,\NSp؏'C}*طv??tcr]T*.ʔ_4hr5H"pW؈u6S%yNKG>LGMW ]p'#RGp.bL2>A[˱]=] W$9l&Xt,:+ۚ,-#PoPS b9/lbNIo>2Ac`N#䣒sc‘0Q0%"C2\!:9]ǑV|rpv%mhKҾA2\dvhz}NxJk-S6p< .HYk~XOĿ mP?+|i MR_y_aCPa1DFzCQ~],gGLB_-E*.tݐg--?W6Ѣ=_r}s ;S)͜^RTv#W</oh|`K3zo$˟Uqn3*hT0Hiۚ[9`w,h2ȽtH A+BXv۫vgBzḦ/Ė<>?qȺ9 g{xn!9v_s0RqDL>^x:~u{pwW3PDU ؃+U'y Bh\k;M=Ͽd'3G=U^2T'<+ENo>@n~I?bRU#hf>[k &:kR,JuBP/b<GTfiN(fJYsp*z`JCxϖ/8҉P@ț]i;6s}ـ؅? B Adi=5N\"_$rY:h-UC74 $rLca" Am>9FQ|+d% GB7 M3_P?UJhMgsi[EA2? FWpG5J oV:/n`_m,%.f3J)9m:V? Bmca FAJ(𗨄)3 h#i䙼.nm}~xl-P"գ._U1vĭ C?-i\A6QuDmda@q'!f'YG80zYOd(+U݊UX`~UA3we D 1˪ A֧:НnKm2ukN1#ᗛP(PLK* hwg 7s0]8JnzlաRr:RՉ/@D8>$@ەQ:P)ۦ~0 iVN=nhx Fp7ICfAafOB%QXўY0AP-|sض+o\KN&"ѱ?[S4ֳ1UEb5.Fwi5YW7*}uy,z,g|?()wke= &@Vu .^ es ] hБR|ѷF*H˟5AsV hc1o#M銝樇]F nz9-Ȗ!Ew,33?6#e&ँbv90`Lx>:sK{-&/[iӰ_A]^]3`}<JJ3M  L)}'K!&PUct;㰃z) M(1lU%Eϣ$"gD~{,8?-.(s?J#bF>={v*=6 ]6A#6增O'*jwXv'{i&VͩPc,2ANfWtE(`FlvaZ`os4`4mhko8Dױǎ lg(QNm[|uA٨O/J'aɡ${P5 #pfCDXYAM+ߧ֜ç8B M^,k\]+ q8,`i!&/Fxg"wzgF\voOwe7eeW[Ru\RI) BĚ)ľ{"6Bi?N4UWD:FuK@;k6Qbnb"8\zKLfw|vC)\ m5=J3TlxHOqя LWC6 ^ANmm_:&LST:Et`aFz!QaŔX~ A0M@Q*1\U , 谾#E`FҨ;w+ZGZOeeѣťH 2 |ulY3wÔTpks`b㶏2Q܉:=4#PŊ{IzI+w%”(*õy%zP=m 5o*uŞzFJ u ut9VPU&q!@ڤ=B}7p~MrY7gC\Ilcuč 6.Nˬ[@* p!>(< dwCH'_w uÕ{85|ߛ˲+AzPQ/wNA]{ܰ g Sˑ"m/~V;ax\ii&0X hߜz~: m cmpr3ш_ŽՑH'ژDi&bNh-yZUYu6Pl$#T @㫫T.,!;/ #1AFD~?h|G&i[ߠ р$cڇdU/trmۇۥGY&F*ʏU8 U*|y=pc((DhjJP^.i*(Ro, 㝍*;_ YvY jZ6ޢ?d?uͺ7@R7V5܂bj&Έ>?,V&.mXhHaCo|g^uF| Qӥ:iɾ@hl7`ϔym,%~x+8iOyHCHgh jN.,ޏY-MDzQDr08н!O]y RЀ-O`9Ӥ\s/T2 㾳kGHO9$v/Y߁4mQMuH bΗ E=rCW1jLu ."de2 : LK&w.?uU _ށXOşLJN ?H,sh+)I"4ާ*ipbg.p?]J"Ae I[, wiw<4%x;&CoC/X;wWvH9ֈ4oMR@lpb~׌~~#iل;P_'k*_6;5g+M#֙=U']OYUKrxB2vCߖ/܆$;Kֻ9999l oSCMf:͏&E}NY^4|eKl)&ӌoB5\(&S-0*)CnVv^Y??IamhS΀}]qM 3knQAL{$ !?"UWRF |3G>s~p3~5]c{ `>}~h](i2@:2HumNꇘ{bZ{\Y<\(7~bJ>r qe6N mT<,An'&6;Dޒwj-H?m)lƴN)8cI fLY'/@Gs+w"BvkT}M۳+`@K+8Ǝ~+d &6yIS^';5睳8 hMlR9.=do6.󭔅_ 8E^ (փVCY GpbPֿcKrʅ#H.^p}W (ȫ>nbEuʟs^{φwhA[Z?Ye\w'=;PrtN;'"wH-bO=qZqw.S8R@ɿj>׸{P`PJ4YmcV&_'H[ծoyyo+3/nρi5`?@U6K-ti B'Bmbʇ]]C;ǐ <KeL$8cs v0*:gyL5hl A$+'95sL:v>١uY#Hf=AMjs̍-QŒ*3e(`2L(&c"Xj,zYՄVg^ƈ } g<%CT sw 5$؛a,_VE1^UXQJ@((Û .MT7Ϯxj:^ A/=QkWAQ >O 9 "hbMb~GXFbт' _/Mb"xjDtWf;؃"bz'5MKoe~6^zŔ$ Gm Ŀ}*%_|RaAiRnk*\"DS?#'p)?D1b<5_ɻ+ Mja{.1)xibyi~\\z5is̔ј&̧uM]k21w#d@mHjUvɅd.3|Iߺ9G(jJM4 KeXa2>JWW@Pa :z1t3 P(N $:GB(cTަ*.NʠpZYQu7m3,jwD^Ga,bJ#ioOh]J T5CZV8\T4Fd'$ᰐ(N5aK;cថ%b6W0Մ<_%hE~m'!!5FDEd:W1d/ M|;4>^c\t,-DE(i`|@A\&ƒVnEF0?gQ$4kwP}(@}1 l'-STW/~*vsITn `J~l9jlUTo߮qE8'pSR4MHn1,?|v| -*|\U⠒,t epksP An}Å@@JfZ-Oo+k&ƫmiG"J# dQ~UYS0ѪWFVӍ/(kIyjBڱB1gi(9=Z@ZBڒ(i}]|91 !W156nnd2O՘sd/)R<ǿ^S:\ Z0&X;0?g[`$-,\$\""3"h\-3| Q34pԪl|~#nz>AexpŸ}v} qǮ8RU o:6;Gj3(^zWvQ[K]ku Mg'K< a,qv@bo#IԟhVIh:k1ɜ;lf΄ab(N/LZ]P-dv$Z2c+7SIn/nîśV(O305Wr4";/!^v .vrgfl.~("W*C@FSaT|8Q`6q6q{E?.KΩo1Mѷv Nkq?#<&j ?>H~M1lLXƽ};ĸxfCt.4az#Z/fN- ÑH4j@uQ3{4Qj=10 K6DQj]q7 vwJUHS(v}xOʹzxmB2:Xb꒻ awâWWle6הV ʞXOF*^tYқ~\cN4\HC=(yV^?Oߪ %M{p%֮?/O[pIJJr5wro ƱL9/Ԉ nPϜ-[_c C$CLsdh)qa+[ŃCMWPѵNղE0a1UJؠgyɘWi`χ9`HW WDCf| 0g&ľ|D+,vb;U7sZȇ;5_BX~N<-r3; Q7Ka} 0H'=w*[1Ryk]QP7&OIo hոm~x>.40uFhJ}~y(HbT+vRz$ؿ*Н5l|(쵊̧:e2XMZVgDt>FVq7tĺ)"KgZ8Qd"]o!l#Y,qTh.\asXjϵhYI4\6hLG~x|1`E&l9(`I ݘ&(NR %ꮞreVB $wd+icw0XG{schf!}EI #ƪYl$ 0?)[V`K^ [ƒZrpG4=uo~֓ZXMCZu,`(o]On>@-?wvRlU&Hav<=F֞vf;dK&@x2NT4*n+ūAZg(pFY<q@L(sgqwU9/$z E'惀JYuTxMoJ31*uZL|DsR4[6 yl  >¼uRtN@}&~ϱh&HM#t V$Zo(2~ PP3H=PU5 grY}"AP%EM| flXjLUdpK8`~n(ozm#@<# &6RL8,4{w[ D+9 Jk(s7M!\%fDS_I6COz;rF;4YK,=0`"MF^6^ V$bFufQkv) lSCs:<LNo;v [&0y-P1ޗ\))WNj[PZzѰu&FZFtTÅp 5= ^%=淣t%@kQZU9$:b2{|ɪ;q sa0A?P[*ƽ=ƃs/CE7|CJ<:f+W*lJ_;+І0!)[1}v6 ? >]P S2I{yJT^`.%|!ȬySVPiHy,\0.=Ob|iO5<zCÕP;%o~QH~[  w$':+ݒ̞I* j0Ϛ;sw|D2VЮJz_CQEɞ_&rb8Vb/@= zu%L+@147x@ACM0@OsEQ[ \@gq=2U|'64rTXxޫ!Zsn/Gٯ} }rO" (1:NZ]+8{m6m貰\݅"F2.[BtӹAևK̫:Wk96>d*b@]6| BjVگ&G-Z5U鄼hW/$(kiz*kdcϓtUNzN3j["%t)P Rg~kBK)U4czq߶[t47q*M I,TLQ0Iahd|4߂a]%P?1A @ >N I]Wh)֎wýȌ~Y>ʂ8`-ECe/'Yz-6 ~w)[ccuVV~WO'pѬw򀊮վSKx1 4pG Ԕ P<{Ri1xBϓdj~ykJIT%r ✏ngm1|7"]hE$DezrQg BjN[i)Ut+#I nUɁ;>S105֗N(dmj %r?EJ}ýjn)DBbaIsGLcxԌ vT:z|3=.wdP,rq]?XpKHvX]ec%6Iq [!D^V!Azȿ"P &M۪;6V>Hbk&[a]]8㢋sr߅c2 _")D82%;:IRF ʃcRga/x޶r+"0ɺ{:,Ppvq^%{Ĺ%CtiN :~|#x ug?3/aE+6%"eBoDk4:yQٛa-Njȋ?j@2|7a;٪DAc%jJvbZ:(M >pň^|}ss5 n0jHx;yfgVgL|yר3tũ%6%>.We<ݢ>'꽭^ ]w߹XI mFgE6aZo! V*B n,fo<ۥ(^ձWEG1HtS*zK{ 1s\X+H_׾+rZmə{Y;M됻ҡ:j4+`-gJt-2^nM3[S·S3d)86zdj3tu\фwXėkK9UT!dTU~b_B<L{p/XˣT lo7\7l63A ΧIWӤO>0EF-b(*@@Y+Ǭ4cQ I%@(`Cƕ2 8ub7NU -Tl@o^ly#UHMLHYeoΑ!,0 VN"{|L ?. ڣ؃BrY7d 7]|Z3SI&N9i#}[Xǘ5BLQGoaX׾kWފ6DGMe+ ~{$"ZO;??8(]p186S8ClI7zQT43-ۺ&& V|pzI 39QO Ɛ%P5j|Y߳MJ0Mi+ PҦyNP&3@dzY^ 52EM;${*oGIn≾ [d+_S" 8Ap^A@1H= $:Q8M+o쪀MyC!߱Z.Rg 0Ŏ)g0[N)l¿"p\[.0ol4:d(jL=Gpf]d wT>1YH{BJwAvT\yRðR VXGa!a!-# $GHOH޳npLMЯ7C5Slq):s ｶʣ/FD93} :VVnQ)`c@6@[Z `CqӉQ〼_M9kz/ 9cT [ִr4p2z}0Dk-{/É/owJWՇо;D}%-@<4UnϥqM32 #앷,t#Y[V`9T:c:&Cy% ɴ^^J}nRبy4߆^O!> }<vm05 x8s(?bx׺dOKtfWGξ6gY#wXk4-#0ۺMYg/B_+7rY1QTnźLq"JwF !|\Tsb*pn'B.V{Ye6~OmaZ˿0ƛVYXflw-{iiC`~L%l[J  "0 M-6;\16Uo"(d[;zhYKJXe @ޓ nH,/\ 5U9KxJ3kvX p;Uix5XL"BԞhpC3Rs63݋\([WzPt6k oQnL*n 6-C3-Pց@3 VC&5:k'CvQz+u(NDΜanw]/o$Ռ'Ɇ|l㋗g/pߴ+y½ﯶ:rn"+GP.J{d"Cjk8n~oc ڼ`iN AEOE(N;]@gZZlhCAj'l9 z2AGﲼ5^.F댽B}k=:Q*MYU.鮺jGFDgQLKt%1:齄ʅa2zY 9)CAA(gHDR3MSx]wG)G CΊms ax6TQd= 7$z&#@Æ(&/wؤDsA? igW!cǩcZpbc.Ǚv3\ƅ0sYawEY7S&Wu1)280 D6$$aKZ4U@TہiB$BT! LBNa"ؽ4U~i@BpM!9s c9{F!H?~L 0a k䌈8)jP:1N09Z_MU3(L(Z,&/"rQ 9'woƀz U)an &/A0S<^HX0fơrViaw*NUYqx;2i%:swCjG?P_ylv 'y`cR׻?kF^;I[?GRGjD?;PQ?K ^ Axݛق jL k9. 7ƔUஈKNbIݕU$7"vs.DP-8H+fgI,91I DrsOvT?o_ e͊f#Y&'=3wBv bMГw3POc ^ iOmG!lRegy,C!rC]Z^*:qxC2X`d`$bQW$l# pY.}پq Adw>*No7ms=xշVb TjU}` )FّQ$DτSX& vȄۃ{l#ph{3N=?dU?2 )Oyԙض{R<]WҎpS%ɺ?sWwR/҅ rzleHwaI¯00x":eb0L4%k8hM8lp'X˙g"}I[97r(ED P 9}-= Anߓgd&,V#IWAӣV& 8_ zۭmF4#86΁˫XH*;FpFpȴ]fkM~[p=|@d!)M2E)Q~/{l^K%e58=in4:d4i!2eO 3t(Pf\^ 2j<< Mc Vqzf>#^tw7 9]&_%G>U{ W?oݣHO> ^?BYOZ0V@J{!; qΝtA X y%OtWm +0WzO%0Bet\(;h@('v-4 /$}rV"Sh A{ԣn< zcfȘ]_@X#5`\6R}=h=+VW}{o-R&65<o''* 3Z~ք_$Fq/婛$ GI^ iLa fu9TdQ >X-G; Gρn{ɯ YPUgE'TS$0$N ;a-0b1P TUjyMaVJETy<Kܲ";/HGmjz5a]a 構/dw$V gsDGhB4ݛ(as(ʼn$7u4QQf͔=R̓ja,/v'^ 2vH&Yc&c$}X{al1p |s*e mk: iܶbiOa6L˹lZo3&ӏiko<֊d4-%ԯoi#;PӜP6>/T#GDb/$퇩QqO{ĬŔf 5>"g헕jC۠P!q)p}R=yܿr?^u]V"@ݎK&m-ph'BV,_"Ӥbm,O!:RӌSvJ@0@cYi9Q)WEuI?UY~qEJ\Aw1ظsP,LeV# ،z`tVYPҶi-4rJ`}C"Q';AU Kt.J:< a#[r_ٍEN26n/ k/mSr%;vp"IBLQ|e^ WQ+R;!@4~TރJx5Ȣ~E ݝCRO \5)Wd#]ۥNJ_`+ǐ oxw3_ਠ{\YRMS&*L~Kr, ɂ  } j& 1%}Zhj31N "du,Vy?<# r沎3ߜ'-Ϊ8+63hW *aZ_WP[''ǑC3ܿfwfߎ>ed\/\l'|>0Lh) WoؾuޢL`Uu=eWv$BDnӞyP@aY>1%0K]3tQՄ^=]a4qAu&8!cym}Q+0t :e{ Dlঝ(fH&fԹ%3IS]+O?#I+_<.wAP$vۭLD%!31*p2 ޵]/Sk.6IFk y1@ ¦5;-Wtv1KlO6V<]i2Д4뎐QH?O随5/POX{mscAQ(jn;Kă% ga6C҆< ch>g ^pGѢ}Y샏I1o?=:%k+ и -qݗ?LJgFY%U~Q> DS@ *H !~ǚ u4m:r .-u⯞UN)7Qn?@O#L|`K{֔:HRI]R;ȟJsj >&eV"e1p{!)7S$P ?0?f]TvΉ&[+^O/){e365!ͪ(KTY_mnG1αw=vHdRGF= -%ObJjiEk1wH~T:b2M]&}_:^&2 )6N`Dt*ud:oVZV0o^T<`i("fUYbK2^9;ddBgZKCifފeT皙g:95RoI"N>q/!m*#D~W3!D}:M!ܝ@_[+XK?k4 Gt1(3"%ɂAJT)M7?&Ὀݭ?V |SaWii+ Dg`ס<9'Y_l'd\Pz,&ǃxE,ψJ(YnS״A}zӲ0SKWi٥Y?M瘙1 ٸpp mB%wb%$ حFn 6;r{c].X%8 xiA%&bs2._D"br{IHc])s&d, `2Fu2;/x Sߕ.2X ٙA{l&go;o€B8ag䊙X{Hn9zmʁEeh10[5B(ڧq/م)|/{blL|B6ZBcl?g͠N}IoqŸX#׸l}B~B)zHV/OvnZΦ)?N7y6Bc9)(0G3t2Ͻs*2*q> 6{WOu&B1f!֧X0]Rot%Jx'm;;zbd= t I Su9dFpgnK{b$!E,K>_)M⋥˭՚!U2xm6ba؆OO3)Ğn\/Ұ9ZC&("ac$pA`mhQy(I56\`1G( ȢN߳u Av22^ԘVHT6)b/ #Tt^ܽ-# dx hMkeI ʜF.1gߙ3^y׬~bXr+OJ?aO0DIo*a"ɾm1-V?,F/&;O/) ˅F*gcg >}&z6;7g 2jºL˰bZS%EBXk];& 8o.~a( }fd`rCs!=0z. `ﱔ@1Ssb~"!ɹAPWg )=źC<<.pv[*xoQ׶t9,<~jx)6i;`3Q\bN0Ĩ{:+ڒ:#cecDrl?kYOF_HaQB^ߛ:eKw\v y0[cΣlɏs&e-ܩC.Ƴ+lE"k׸E_PVP$6P#{Bt /!Sb"lx mA{ __I&GćM@ә@2}Ba< z<#I8gY:ƩcU쌈ΜUyLt`DcB Nnr+O>O|rA] 27yTHy8} {DI 0}>iCv]TJ}<3u}(;E|^^*h YjZ ˩i~xq@;k;:P rt;c}>v U;=Nn=(F>n !yEiC>sL({;k:ؽ$]Qw أi3O\tnt[NN}uzKBm{qz,လ̇Nn+.bmSZaʲqEzHI.G$ RWHF>GuxD"ӐjanZv/ì{,F6'nVzrz /d#4VɅMF&zH >"Śy'#{~1JTS94rS*i۳ BYbX_cC1FW\+cC,j)ohGD\lB}?`_rtB QQ&^F㽈4yCͨw-{dO_2*mo%ωf-H|; D:vTsu\;P<P JB_8dA .*vsR29ҟU'6ծ9# /:L@lQ&m[/Bqt4=ީܝ0蟑66 *"n&KH@'L_UlEEc{B?˥m-vADmyX#ˎJͨ) %sW{bWM myr702iDo9Fv(  UBȟƚ}X:}F[|KWPE=mRzjnꭦ14K>p-˿*&;}K8sFs r2=nw,W;^i1aR2pr{KNu@b)"tsTk9֋ ]z0kXm*A-c3im1^.G@`L_/i:R2*3?y&*WPH^>>J(34𠵧&)}]Ȼ JI&`L['~{| (O5JF d 󈧈-/P(f_ %#ԵV42o/L9 Al:s ,t\U0OPG?%yrgMmQ}"o|G̖ 9+CFRN@:LPxb VnD9k^CmJ;1Y Q';U?8J㣆f W#7̮G)W,,tP7'n@<\oV_O'(o27t % _ݩX̓b[a} SVrn NKǾ#/ZNZu͛WMRuYzdDz/:@ߒkJ'>%Ș0wp ܜƨSй ZEhj1\?SY%mv Xs\ `hn *L[M2/9r%m0Irs}-JX4Mҧ &ZzwtPP)ֿ CgB-ѳE\@ぃ [>'"{[5nבKR~ƍAiZd|.KzLq9Uh yFG_)np)(˞%Twi?UPr܅Gi▋Sj@TA綸/pJF ~GF\5Pt̋ z4_]uNɺ dT5tD4'-KνRBÙ9\?Ml2 ^ؗ']$v}Yu+5oij8.ݰ̛f/,4BQHGI!XTNC>HPڗg\J m?hg)2Q< v _i(T;3J#s:**Ң5h1.NB C"?#D<56V"Y5 V>ӝ@YМEcNK@#

L^54z)_CqbN<_)(/l{G=iSZqܱI2r<u^Q0,UI}KUJx4S.Έw"Zo ϙ[z4?+GZi£?eڹT`kIjS |P3\7g1*S.-k'B/IXQ|y[f){'c~fJl{!s+"MN(?j\. T"_ >+GTFN^ZSh ("ѥ$HV\ԵLlh\#ac$G=]y S C(a@ hlFb'V0_йBE,/tWݕzC>1iw\.c2H?OKQ(ͷ{%-nuliYL6\Pغ+ ##80~ZcwA-V]&MUޟ#%j35?:Xe ]SIOHlDi?GuHM)_/ihlƮeVuEϩP2Xl#I0@~ݞ@X$EH⒩f}VKYn U|BWUEc-)9(bM3sq~i*y 2c %b&#={񴢧ӡ ^kSLq'rI1F5i~O&MN*Ύ]6 weK"Cqh͑V5+'hUIsXf(9[01zvI)]<ʩ WL|/TkDZh@;* ~>&J|h^/ϑe$QU虈IIQykFn?OR[hBMKR`]岺Jo 4 B=[i7pSR%`"> nz ;xQ]b5gy Wcq5е8!,fӠPc ׭ܟt\iHGoʎsA@!T}ԏ{1x̰K{V*㱥QV9č*j%d{x1'?LjEQg7 Xm'Έw? Q⥀7uߏgRWY\8YgP9z^&Mbkod6n+NRz>~$'U&g)8u/;LA*VG?!Yrkj_fh[`5$ͳHMz:-/X,ܙg}98ܴ 7T,#=>Qkٖ AfT- IT7 'is[(M'aqt媨|~V )Pwu ZQ5XH[οiio 4bO\,EJD<> #IN4Rx(~I2vQ<>ݔ}/KG? kkfâed8c< ^/{XXZlds7\Mf9y-$B  OQF睢bƿK!]wo`Qq%(k3ɡ0gl&\X#}kF|+_8߾X$鵵pN0Վ kCR4p<}=6&Bd6hۓ UDW PF95sՌP{ cQ샫 `l~!\plW2(0}?VG9Kv*'d*}^ A$9RڪSoсōQ>`Z V",<oSuNj˟&G1p_hտvu0L@&&E>Dl4y^J&z׎]^0x׌|$U}JDzLVA-1Bubg?>;ԫx~,LtNeU'؋2+Es=͇fz_3alSrkZF$Į&¯`ܛl_f$T%)Pnܑig4N"LB㍚}(8"VR|Oq~v|cd bh '-۪y 7x8ιY; Q4Tè&|b}56ܞB.9q=:'d#u}v^@ \"(CJ@=;ZP_ݪJ ڂwG¿iffێk[ Aϫu/~BeU`Xw`f'!(/b~+ܬi(4Y"&@#}aAz$-ohSa,{g/&ǂ|u?k[b#G iWTw t%E1 jU[kO@dcnezژLpbg.3C¦5m|0" ڥ1_!07 * we?hfxxkŝS?$S#IAزRaAʟ;6rJ.L2 ;wʯQH\Xib%Ki{F ?ێˆ%9+64z]-#+t L3]*^ęC%P&Ib ֊.j(:]Q7Q/f (h>[Xb xq,XYv<JF>{ԳyPiD%j0N _An6>TydMv e* vctĚtuhrDt9H& *[|%bcX;{4l˚`@#;Q!ϭE[C@ާ+;(FIsB>$u H2ۖߢe{’Y`0pj~Hk;2S8E xCTzXY)K| bB,LfW|T:6aep ,YY1U6)| v) 6$(0fwX.5x>'G2.ݯq?#%SLl6pCCzV5l/߽

s ֎)i;B!m }KDPTף4-N; ںm?ֺ@ E 5-0 9XVUz~j^YW/ AH A{criyÅΖ!mYaºrPmg2[HI+BF8&m~`1'05Ю9ΦF?̂Bs8t(8/)AviN ,I5A4ˇQ՝[]C_*E?_mP,@gCʥ2 tzTyWbO*W" 5Ir*9d3낏`JϊX+Nj ҾKod^Y'0LY^lPW+Ō̼tY1t|$ P& $[qT@jvo 4V'J)+@䢅ϡ&^UwK3PTU arz&Z@y]<=e G+>k'M<*&Zڱ/Jl&P>|Ȍ.37LTO+SᎎQD pA+L]W(ˣx'[]mHktJ;5[L׻Re$9[0Ga#c),FRYfu x, {z3k%iLDRzm@ GĥBqSB,"IZBöhnWU2T&pxU4}w00hm.Sicx D<mCf |;m+ > yAC 8\מ5^$8ǔ?B:#t{鉴xHu+9<7fv'FCdM?-v8dRV}v4-Ci]z/6ðF*RMGpȾ& .f}&_kXPT) a[C$$R,hxe++no}$04|Kw?¥Je=HS%rAE.\{4f "!<|myu 'zYO]dE5)' +#LNdJ|77&Q\Gk"/0Mo > xU̴)'¡bx| zg cNki}nWG)oxJ^V󌷦Sw;xХB^.%ӮhQi+z<88 MscgO^|;\ٯ4p@ J02iw H9A͛8m vC@'V/&lvx U}8u]^CX\xdz jtdf6!mX9Q{܅*5nBtb=aĦ A=M@uT`b 1}Q.0O#/bR ;#4Tm޺E;ƉȒPdb{{Hd\9+Gܡn8Nw^ hWW7(^J!f&q0\?.`VG?'5jIX'CR޼nie-nUp:4kEO+1o2V'SiTuHw!=%hd4ȔxVW¥o03Q=خ/ i67гWSR .4@Ԭ( =n4>@!.Ϣ_]c|`99?"M3&݉#J @2ܽd(R@tB]5 FvPlc5 N{8V{VLϪ[gPĕN3_)T"{4 `Af۳Bƶ~ h\@9y ѵ2S۴Z SUgǷoVˎ($ Wz,B?oٟş^㆒xd,D*Ek*Kg;5rdգcB.Sɭ0F*0(C>1/'$,]of>oJ;wfc ɺ)r ӳK"qH-sW6B58[l̯~T I[,%"!3ռn'2g=J >9о}度u[=ym!xz`qeu(I#7.kT !Z0d\sַKg+;6_kMj@Z0n!ܢ2 2P[ze;_'7Jܑ|Ak{QTzЩO Ɉ$swXN_V䬝|~l>!;piY" 0u8&'%˰=_y)hw~):!GQtح, B8oGbbbGwf+R90(~y2wGԧyW#*2& B@mIm@ay)PcR}C_% iQ,yӯnMPu`ZW8CK,(Î*<.2KXޓR pG|NS wG 9 x ܷ"?g @KzGF]IV`Ӎ2h:j'bjL dN y鈇bkmyD?R9^޽]Ƨt܉*!+X|bZӇ^Boy(9=q[fP<|EP-(O@̶$] w*bqZM66𚗖V6Mhڄj/.})d獏R0u$Oɱ~?d#I'UAyzTט٣| fG_C3fM30y8R7{\ŷZI P\<Qs0FiBDl uFH QlVGb LS !B2rh9g֒PYS>ϒY\ȱ" D nJ 'umI/Jsr ̬M4¼Ybt\cKG̺Iv/y6+0f,De(I zQg&pq3?iU~⪍&\c7f`ZBo8joP*ը1rw|USDgQfǽS6 ;զLv-Ũ;nj%v8h)% XĆ:G.WɫP8Qyqdٱ(غk {ZtP89B]>4踖Zᛚ=hN,sCid_:P:г_'J*HzC+C%.1FuЛ/<(d_NjXH SHkRuI;tPUl¨鲡\F6 gUNq7ڕО^]OT\Go5s{2֡[v ,Ee@kbPS=5}I1^qO%^D J,e>^Z!Ȩ<(Hb SC%O44eOjͽ 8B[Y徹{m ׷q>^ӣ.J+NuB^S^Escք|tO-lc7 s~+ :~haUR(~ƙdEקSF0|9$S!J\ ުC @r"0]^އqR@FX65qqY-C>UHTSNZ8v zncm&{jV@b %K˴XE jwKo \CV|Tb5"Oدu"mDRWn\P ( UcDp"d#C"p"|2>"ex_]>[sR4r5jǴ7lяzUxcϾ6<7^Z dQӵ!,\C kȢlh S$ehshf*k%otumWYx]sm>q8%8]=4ڄу47 vU@Yi$8?AnZqdk>`ϒ l5f͡_Bep-*uC> ~,63Iٗ\j ^4&/E7V,RWԶ`T- _ŨneL2[%DIRQlU3H>ft:UM̧k !ّz5!hNm?zY6I = QMMi4q-Gwht^g>ɸxNퟗ7庍`RZӎٱr5.C_hnxcALVaZh&U[!y!|:Y@cd] t?r9a UJ.[Q舔UH37WX0nlt_* &dGv9aP{L$SSi˕b7A\W^<]0/s_9蝰&Z3|Fy֚m~{ nQ^3 @k+\eК1s,]s4oфvb0$P(3q@IgNR^I@U#d? HmAj.bCװr~cBQ~Lc_480+4cw`lY5͓H|۟,ݰ烐8emo%'⮊ve131"נ32U`fdf)jwdW@+UrN°6Y~O %`I[\YءzDmbh2pt~*1Ӆn텼*]-H5f)q^a`0P;L̵-\v{Ȳ MR9?b]%HÚ?8srlmKDO~J r65μnE܄y9>te!/~,ފ~b5\Ģܟ]׍vG<ٞe&׊y4‘d aD JunwJTUPs.9pٰ^eew`S(kl b'L*;7O%1ZW$isҘD*X`ۭF*ʾII\=:ܭ'L57I,Ɂ 93_sn%ZF75@ڛBd|:A}j#̦JULWL@+[hȅe]EQ#Ӂ˔k=Dyf9A^u75r 2zLqյ#^!-v4ɫ]W9M(nt*dCIk?"O#B#NCrǭi J;UUJ#~u"jRuseG)<-5UWBKcϔWC_9,@|L@:ollh~뻼]%ܸ'-՜g'5ۘv^͉Si_c X\@*a(pg4Z2$:*</4[!3΍v:'Ps<+t%nwLRT\C,JSnTؾ.U3f,"CmȪ  CaF5>(e\Tt#3VeGput<8I:OkROoqF~~Kyy`3[a'tw~h^jYX G^ _u;U')ؕj\W:aҗoo+f=qϴt03/4U=X4 $r,B |l2 >/& @.E$W{^I/<"(m0컭KEf!JY8ݠU|FP R!9?*6; tQA$lDHՇ U7GcdVo=x6A#saJ =6˫/MRCcf#Fw~zȥ_z<֚@]u/W: Ÿ'ݴ'y݆yԇ6Ao~:JXKK` C/."=َ˕'cIDzdPw,FB:;jz$]`m6ǐ|ENLu”}J% Mm/I LִhMeE阘Q^1|+vz(nE :2 =[ 7m,T=$Wfm$ ,k26&Aµ{VJ9)%zZdߠͬ0Gx0ٍO%H0'J/v!ZGSհ RJ"^,3j(Bf Hy* L0R-`Oq?e@4>GۏOgH&VRdVgtL("Qe"+!Js˓!sk$ ÎQ5l-j.UsNES!a{B9GOץ3LQof\[׹cA~UEhXJ\c{@hBP&^|*;V22$n2;C~]_* χ[HIΏmWXh Ȍ<כUp yL!]ODV?\a~질юmpk&xTPIGYyTO9n梪K]!?x07d1i#Xfr1t1uM8װ- 'zTrp2{ D6,$LZg;fTdZ9OWÞ.~*"~rE{Rߩ.S(?tZݬ*un\t||_0ȽT"xVj|{.m1 C0Y PT)`_FVmo1G1?`kd1ݬv#YNj$p wq-];eҲ]d& 2L㍩RRliR'JA;cimjnC/ӑC/J&dE|pݽ7'KӌAHآBP{*4'wx;\[טz"&T6Ml!kjQdX-π}CZXLΕ+A'C`2Q}0tH~FurVSηlΈ>O$Gkyз3d: ^Tѿ#^|8iSִYaNz=`Ir4F5H[@!‘ uNZtKm&ig6KUiK e\z/z!!ηVM>f hTܩ2N(S.iܑv&^¡DL|F&e=~Yy.}ɉ왝,EMu7!AX茙t W,f&q#PT^ׁsJb~C #+ۯ-c5e$: ky ڊn-1֔C;*푭R=ں%;ΜGCv$86GRs`oxx1xOrE1$P+*0u.FqHQ/Ћy;#ogQWX=% FCcbݾ؊FG2mʗٵO]oݲG捧o {,͇J@ ӌ&7fL&eȾ~)s}Tp6dmZܨJ˻2̟͑=bXC5Mg.SYXTc+GF}][PZT08M}h\^#,ruҺOTCq -# C6,W:3 097i&%raNE&۹L܃ /٪m)~=;/Zҷ$  JIi֌-a9pॣ4E1Ԁ~u?F,%pvPj/W!=:%ߠpFxN+oÀ[imt tE!a9cXwI4ZN ?.蹠Q0d\SJrRQ^ v;AeSCbIBsEW ěT ,T1}<vd'2'U|XyU3`>c MqbF\mLlH}`X A@GbPQ؜$h  H'|T"X^+E[tx,i!n(xK=oglƺԯ}Q@{S D}[AdŎŧ~RϺ3)O3* ~ e!g5a &gk_.5B!k/~עxLWPh^"q1yid?G~>lUח@,Ԍ[5\T%u_Qq=V%Fދ;q7n⡈\ 5yxwV]M*ΘT(Yb׶&V^og_ա4QsǸt&|&ͩ*حuəq [t7TM,O4SAD#i](6"I+ znklg2Fc عςO^С?-VT2\?zZRO=%=ԡA}lfc]Vx!!WbaNaW ,iжY^~7bEBrBvvX'rgbR+ѐmDS8$>5=y]_ؿAj:Y"ܚΠEBV dibZ$U \BalO"/c%u2݌Mh N i*rer-Ʈ0>XCUSSU~\Ѻ! B,?P\!>uڙ9KޭWZ9g+QsbǎcԓA88uNT׳=5EJџΞ+DDS2>"ַ^{޹ h rDN"/Aض$QaP3Oe*e'\QL.;.t\t\[GC,=pci>Xo+%bhZ$w0_(k Ks[;(%ΦlܹQ/7L<5pok6jEjF: oм%tNLcӍLfzD Τ͹h> PNԾi{Ǧ>FEj/П1UJK81 p㎋` K+玊L>O]"Qr0 B(={OQnݓ TOXehf}6["`,-A + #U]fBРpu-X*܀遑F A1cxKF@w;,ިJFeb"ܛ'GFi}'4Z^:mHCd= ف?QYRcaJ+^k^9iV.Pig<"8 \^9`̙ n4gsDA hsw6ىqմFgh-rI3v3r?Ae9yZ*ELpK &&`FXd-$5cٵN%_֎ {u øA3R=+OҠ}pOo+x,krhK}|0E*=#g[kܛMxš8@t6?߮@Q 57> `]]z{GD ټ"K{up쿃ƱdۣoIF\Mj]_#abm܏d( `動X~*^K` ѩfdvpF87 q=Jn] Q%l(炸3f0.7ku^"B&֥d;yTrItO7A!L/l\cSdk7Ϲ(liM :% +"1tlS0أEdC-E)_VR mnNǣiza"7i`/qX7,, 7o+,ar[]^ )lғ.kuO'"a^?c0+ef;IS]3!;mѡWX']D9/+T\vh Y&軓FUKFzZL^Ç--N쨛yJw\aLʙhyshQF5Qz3V-lNӒ'*zaU]*>[NmXG|d#HjMܭTDQ37]h6q7n*PBkz嚶#5Vj NA 0(V{/C>:3Ʈ5a*'L/ؾ(͖(T@Zo>F*I>N)^x͕((xn༵;C f1}wi@ 7=)dP x4=S.s_V]MSީ*%6 f2^9/|= ~d6xK)h\5 C)ޭϷ* @NNxE`#cTuY%s:'՟.(7*8ʼnA3Xm{Z\od]RqhAQ몝Yh mtM,< ިL2eo.RpEI)$K)]9G~) )opsZ+fWfc1s %fFT:⚩PqRGáP|[g]qfƗzC; n㬇7V.92%G:ZTx$2|Nh*5\:Ǝ[t!&azɂGjW$D=l?~Tb_ӰœCHj,c 7ǒfYE5ݟȩǑ1h3Q=f; c5i-oaތ{G2z2tpA hVA`7"=t@_% /j)M~qIхq&*Wb7+9?[i GVb>זnApRyJg˽ZpaA}p,Ai?Bɕ咎"vS:o1"dJFO{BS(ڨ;87$f چ^bqQo'=J~M̋8<j|0{jzO ]UKیUYo5HFzI6&M?ecmJ_JSGYzݳChRwKaW+HFd6I{C%LԥemKNljVD܈Z1=<mϩ{Ї+vorzP,a6*1W3H=tCԃ#/&jM.5?|boCw܁hnq+ H߁DwTde "E7XY3_HtՓQ-S9*GW͙qu6Gj|[3vp6%n\u@;Q!1e+Fsӯ9aIT>:_dgM"ny7tL&Wد'Gޛ<{=3i*} ez6pjd.OKʿZ'Yy18$(q&Gߏ,2*>ɳzI*\ϾGh+#,0CYlԱZ4Avw7 t`N6-u,l7\kyfs8+l&_392GږDzɍmkX랁eR3W|.EսfKJ;(W@4|ҡ(Aќ`u$ujƔpnhQO]pz|Wc܀yʳ m3e/<84 ^³p7ôA$QhbO7`v*\cC CnMg뤣-T!.Gd62v ,Dy ^^jkE]?K̤2ޡG! CB,7bc*UbdA 9[~EpN)-wDPW/%+@(vn/-9PGh^xuK$MG+DJՍ^NV$ǟ*HWEmɆ|15Q@5xr0\WW^ uVւ{KHoIӫ FYvdRu Vq]ޠ)jCE SBɬ;74|XIGppK¤ *])v3~9YY7 8P=!* #AZ?3l+.A&O~@lsx`}6q9o8rG4P&-r)aTqVEӱH!4P_Wf$)lxUHa"`y۪հ:k4j?Z8_Xx[bj99E֤-kid7!(AZ{H.^0arW/&Bl 2rJ[%mTq:1ŘR\8<՛!q<Fዋ`v  P$6V?NS~8C pY8: X1پg wdc’T4RM DrL=\c"B͹R6$z)=RAzttD9U vJ0TK['=IN4%uЋ/10;cbIAzqE&aZTS%6H:I95˒ &YG|ix܇ȯHF ۽ ʲ<0ʔC[IpE+půYU8eڒde;Qu!$\ q==B\ٻXHY;y!_' sq(@V0G5245#A}Pke&ⰍC- pTiA4uc/6-R-!Z~&m19#@E>6lŧ@^9]u9M~?~|Q{IgkK[܂61鐢>eJzO{="DʩBF꒿DO-#_ZǧZ*X?)7fBrV9Z໹D(Ksi}J(U4KŢG 3szd|3v=CSJ 0F `5|ggW!W5N^e N?喙O} =C3N O߅>s!!x>19\"Q#E6 $zb"~E FHG^$9#Ja6_,AYXqB:DF)~)l.7_㕚G.fQ;ת@ 3GRJBA\oђƯ;ȫR% `83FTBfʃ*9Zc Kʸզۤ+ $k| YC͖Vjqn; ]dEtq宦WB龣}Vsta*Eb2] A1X+/H 6vvߔD0k K8ƫsFW1dT~OLX#Ҿڱ_kW{x诡~kePLm r4W">4ǡi([Fw]o,&F2N\VMKj.(j؄q2>}i89fiQ׽o^i{w~7Z+ᶤ))+ngm\,V"Ĉ@8 q&ib̤ ڏmޟh.#.ZMu~p"(8ZZmcbs_jA/uik5\$IT'oa펟Ѽ`f>l [.HWGV '' b_PYSCqva(guq$~& N6G}zGpwIMZ":ȝi6">**%C6gma偸4{70+(K|l#lWժJ Rp2>MO^)k1}tM s5Z*]_rR܏R h!\fl6 +q/uLb˧ʔaxtPxVw9=5 3Ln4ZpzM&YK]%nRПtcQaْ" y]zG͂/i8 m]~}F9zO0S#w؝ |mMrN !.+Đ^RiƹLi3(6h>.%@L[,|(%Er$u %y5LA,&p),w}6L6>$L~EN8`uE ?֔:Aj)<NcLsKtm^_L6jÅx̤)[@)c.^@.A]4|^C!^/S87C?O0#K$6=Jţ$OZQCd#puNARLY@e>Qg/Q{!N&ć^0яNl4"5=BH$E]-]\ٹc¨u_ThO~j iD rwZmꃺ( } !A)pI2$ -{ }Vpf 7#^n:S\LTg1=-Hrfѭ{[D̅ kC5=gY,c.`nf5B1G)V@3:`9=h5l}w#"sXt3Y*A;Jzi:p>x )GcDT3$j+Q}sWE`l\ W?2Nl_%t&۪rm.fax}/iGͶ9G'q9H m[ln&Ii\}a#ȚCϘs+ &<yXFIP %/aBcMj0@ڳ ɜî,<kߘ7wa `|fGEnkO I@>ߣ'Dce-to@__($G<} A2nlɟ+L&GoKx PD٪@|KZ%4"欓 3h,a[vP_{y@y- گጘ g. K1uᙒGɫwݛ-Ծ) w8=p/ 7U4Q7Să{/3? }c2a JxPRm̺!Uz(o5&wܳQ#Fy$3oIR`:-#FX pPn@UJź{gV[k*G}^^j4;'ve8H>*-2IŴcV%`)J-hݙ,kokUM]5R:&2gǮlrWeGjºmmwଞ8\3i sN!d |eP)ƚrdDKJ[qd1,Jx+(2῝N2FF}Lj~ܜ iɝ}"WⳍsB1+8&lu&sjNOZߎ&;7?ɱh8€ !-,9i W5Z!IK| Gh?xc*[&wzfz)=xf\m`T4T[ XbSFK˼kV8G-PU}̆$1@Eq$9?ib aتl fZ;h37pxs)%v]h$=PTs^tF,5EU2߼tlO)hݽ0aAOT+GLGӪ=Չ[yv*a w-4y${BMn[Z$g}=p&7k:hT0] zjdk뗵 GRՁVjaƘ FW5^B-ݠv &'`HFI B<kF%kCZa䱴^zwh~9_SzSK*mA(f_WbaSĺ֛BK {D}1±uTT?1IUsR{7em"{ GѳѽI+w݉4i(m`=""7Ga3hwo>bY,ym$0nd1j,f)G6)>[E=ʹ\^B58Tc]tnJlT9SF85qac) +޺e Fsʫ汵iqkg!\-h\a:ǃed}BPӪLacF8͙sf],7uo o;ogd*ywe6@-)}AIzH/2#]nP?S}µFȰM]P01;U ,Fў=(wG5VSyHt0HD@tL&i:^Z1}!k[#;JWSM5H/PԷU&6Ty"RBjF75"= 1wEm͊7[ [Z9F* y4:"_hfnlҡ"hxRY##o`~wr']<`?;XJ=V@vyC6f_dp(d*e%4{Fx)EQLESZY /sWƇu:*VEor5F86y ,Jr6ьz1è2BpCIo6Jj-"?LuЭX(>2+v?߇<6Ro~F>^iH u$fUr}yHx3-63SFVPƯ(z1؟)EMW/r+oJa*#lz,&%=GZ'‚Ӗ $xeLpud~Ylj'NCf>'70J-cmn/Gn|}T{(ME-~40qB6jPͳ5zgp_+"UUfB_%43F`u#^dNom n荨gMFOH.j0U:O_Mh[ v$P3B' D-, DeSRv\zb)#~@sf䏑>DP9q۟fVD7J `1  4h_ײ|mV͸?Rp&^Z B,#y$qoSvH?=!E<Fw&'M<#3 Zuoe]7 &&E-(lWK~K[TÎ7gn-AAj@fpdHh_dB #z$ۗ\8785r|h%]KӗۏkRq]ߵIDfcծij8Xekp/>%\Aw8ttay1'ŧ$w,$|yvXi^Es HbG ^gξ5$+e,#;uֿjErfoJ]6!sԨ7Uk@EbXJKԼD_W#>8e Ez@`q~oA jA{xp#'!'yhؽlU}F}q˄Guo7c%A]E5(u'$8jb@.@φ=7%n`kc*HQ׷\`x̽fQ (эnƒfC99 IEbQtu9$5KH< )i&o H[a93@DŽ˛W#RC)-aaM(y`8@$:Mh~&p gm8j5a ȏa.ч(0}~tyy"FM)jg/_;7E aի/ҫRǷ4K&lWV%EMtߺ\MB ]B`Q1yI5I7fT:hy:$>[ H U,欅Ysd^;P0ga4缏̋_i$j4{/M~,:^!=:m:l G:ufJD|;kVXTK'_]pbc\H_pUH"i -ezXC-Y~$t©ڻdƤڤhVz!fBtQe'=&=e$-r49-~eƹJN 4ФTא_\ @Y1~LŽjDf- /#0R#mBaJx׀_I 7wuo@ymP5AlW>;yいU6.fye{ف~e۫bI%w}Pshm)5%%0Gވ2[Y'54Y  C`έMg(nklY,G MbaU|JLO\s]RY͉i/p) _9u-vč pAE>.!sj2aĶ7  R#Lq6FN#''2I/

v-N:׃~Tz^"tCJC]Qg,oGٽ5,eߋە ַ ]DiwT'6ţ8Uf-d?@Iz}{>U8)j"Y=dO#]a ۑq3~?c:cqvc8nQ][8+4_ot>=T:#n &RE585}6<Lx} ÙLf([(4o}& Qno wli ctV|oЌٜ2\cz&#y~F,^l(;H.nVp?n'5jH }AW N7v7F"fZ =Ť\w. S3)#ķQ^L7w}(-ꞏO",S6@W)|gSқDT_ӡWuPG3wOߚABK6[lZᰎP}Px!<',`}d5רo1wߍ5:uB@V&{5[Xy-b9b+ߵkӛ0DX)>aD;/.^ryD?y M