sssd-ipa-2.9.4-2.el8 >  H܉e U]@[!` "O}~W_ĎP!j>^6||vnچmgŜ6ՊӹWb i&C[(u2wx lܦ5A݂yr5XEOl*~)ZL!^}yHMGs)*n,Cr{R&hu,/lo~I{bj1T+Ft4 55}-&rvC6YGe&B:11yA(;Jx)-MiW7唭W:Hה̹^k/8a-M 8iVj.XbGŴ-hz쳱Lf^Py1I !"X@M$MsՖpuB  x]46=7jFmZ"tBV}N eHN hGs+ФS9E!’8p'1ZQ'(,`aS!0*ۜ7[[ǔL`|2l Rm6YMY^3c22fb5e3f829f4fe4f1e3697067e4add1555a8260182efa9fbd4327e6ebfd2358c22e1a4a026375d9b20d66e9eee1f9727d191e0302047c435bb500673065023100d7823fe9107320fbe6fded4b2916a32fc75ca2431c6f4fdbdb0c19af4a7bcc35bc5c009feaca4aebde77347df6a1552d0230128830ab81d4bf81f049925701efa8bcf596c102fd589986e3a59c9b4d9a4f849a58a6207dc8556c80f6706124c63eca0302047c435bb500673065023100d7823fe9107320fbe6fded4b2916a32fc75ca2431c6f4fdbdb0c19af4a7bcc35bc5c009feaca4aebde77347df6a1552d0230128830ab81d4bf81f049925701efa8bcf596c102fd589986e3a59c9b4d9a4f849a58a6207dc8556c80f6706124c63eca0302047c435bb500673065023100d7823fe9107320fbe6fded4b2916a32fc75ca2431c6f4fdbdb0c19af4a7bcc35bc5c009feaca4aebde77347df6a1552d0230128830ab81d4bf81f049925701efa8bcf596c102fd589986e3a59c9b4d9a4f849a58a6207dc8556c80f6706124c63eca0302047c435bb500673065023100d7823fe9107320fbe6fded4b2916a32fc75ca2431c6f4fdbdb0c19af4a7bcc35bc5c009feaca4aebde77347df6a1552d0230128830ab81d4bf81f049925701efa8bcf596c102fd589986e3a59c9b4d9a4f849a58a6207dc8556c80f6706124c63eca0302047c435bb500673065023100d7823fe9107320fbe6fded4b2916a32fc75ca2431c6f4fdbdb0c19af4a7bcc35bc5c009feaca4aebde77347df6a1552d0230128830ab81d4bf81f049925701efa8bcf596c102fd589986e3a59c9b4d9a4f849a58a6207dc8556c80f6706124c63eca0302047c435bb50066306402305618615762f85be6fc4e40b3a2c4377e9ba7847aef3c39c02227a2f24e2fe16e20654f7c9670da2120529ad2d850c18f02307ae6bb56f6e0dd94a534332fa4421789fa2828e7b5059df11e38a3c8aad591277cfd392fd5318f3c87b9acc39b54a49c0302047c435bb500683066023100a872e73dd14c8cf20ab872da3064d560d57ec44d8883b454ab2a3551edce86988d88a3120211f1de4a4012da716911cf023100b6d12d5d80a2b4625278852531dd1907349d67e41e4b7edee8cf89ba006fcadab64500611d570032b7c208e487b53be40302047c435bb500673065023100d7823fe9107320fbe6fded4b2916a32fc75ca2431c6f4fdbdb0c19af4a7bcc35bc5c009feaca4aebde77347df6a1552d0230128830ab81d4bf81f049925701efa8bcf596c102fd589986e3a59c9b4d9a4f849a58a6207dc8556c80f6706124c63eca0302047c435bb50067306502305bb0bcf4e2ca031b7d6de3c6a3df1f7b4a200570f412bb05decaa6f4991d4458e1b4e33636ab411af3697fcacc728b3e023100992a9cea98d6aadbc3eefaa0eda385b74eb65dbbf5e24197ad7d2ae9ecce312926d59d4785852b7fa1c1a921c67c63430302047c435bb50067306502300a27cebb98a2175ad482d0102e90b97606bcf34d3725d0f9326c95d108a6eaef217b2916fefcd07ce71dd8fe54148487023100e02818bd7acbfcece298b81762432c831546f09ec0ba3df0dcb1a4fb1778b67ebaaa4b34c77ab8a1e7bcd160fec2b42f0302047c435bb500683066023100a7df5313c59f2f8af20890e4bc5eeb7e7961b9d8bad85aa5378989583632364bc7de4fb3543be03b721f4e747ef9b3b00231008b7d7ba4cae77d8645a0512002e0ba69d1628edb5e0e06e92761f4a1f075b607ad3a0a4533bcf318e0b912f5c830bdde0302047c435bb500683066023100ee42e523c4ec3dfe66fbaf6474bdb712f4704a3efedd031c24573f7a0164088d7a7a2808830bb6d6cbfe4a64be656bfe023100a86a1d6431f710f9aaebd03e195c6d122a65253a9f35ba188830b2d85f35e925cbea533b8a3aed4627b8ce9a6db676b80302047c435bb500683066023100852a19f883505b627563e03f8b4e6156092b3660371a37c81ba8a3fbe8f43cce30db177d842b129e14ab4717a238b325023100d2c1ceb11800743747a44d8b941d18e5aacbdbe689698a222f91d5f2a5942501500d71e55d4e0d95e3ac61e4124043260302047c435bb500673065023100a949f9e8d49a649a6b5e36edee5be0d8d130d3c41348546050bf6ec813b2b8c84197a8d8c72039cec32f4d754f185ff602306b7b85a4c8bf329cabbfe60bd918575bb27612aae42516ac6dd1d181a558bb77563a1a067f6848d2e472fc1ffd0689240302047c435bb500673065023100d7823fe9107320fbe6fded4b2916a32fc75ca2431c6f4fdbdb0c19af4a7bcc35bc5c009feaca4aebde77347df6a1552d0230128830ab81d4bf81f049925701efa8bcf596c102fd589986e3a59c9b4d9a4f849a58a6207dc8556c80f6706124c63ecaԔe U]K୕^ec-t1PB9+[ D@-G #6~Zx.&VZH %]lߵoNۚef+_iZ5Uށ_`rW !wuF\34{o6$J9/sGudtY{=eblO;{ATp$:[6il!QS @`D?xd   4 -3:  * H   0{PK|K0K(89:jB=G$H`IXY\]^bdgelfolqtuvwdxyO'(,2tCsssd-ipa2.9.42.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.ex86-03.stream.rdu2.redhat.com 9CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxx86_64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* ~K"S(^ M)-AAAA큤Aeeeeee|e|ee+epepepepepeu969c17a4840189157dc5f57819dc264a81bf1a9bc5dc61afe067b09f632616eeea5cd6cc2be07f4613552d862cc5b191a4f7b9939fac8e2710883ad1f0ac734c8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903454b87a3c65910aff5586c3feea5599606a9c66bab0b3b94bd70e613cae08c6273fa3a376dbbdaeb0d85a63fa850dba8b173fd7110a9d76c1d7cd701b11fdaeaba049fe5cbb36fc98708a9761cf683782cfb51e6ecb59b771c68ab529b349ba7507b2eafe88c3c67c4655f7b1ebeadcc86333457a29a540fb0638dbc05f43d116c0f6fd8bc91f097be0c15ac15c74714bbb9e03626509281757620a70680352c../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.4-2.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shlibbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(x86-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.4-2.el82.9.4-2.el82.9.4-2.el83.0.4-14.6.0-14.0-15.2-14.19.4-3.el82.9.4-2.el82.9.4-2.el82.9.4-2.el8sssd1.10.0-8.beta24.14.3e@e{@eReRd@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.4-2Alexey Tikhonov - 2.9.4-1Alexey Tikhonov - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.4-2.el82.9.4-2.el8 .build-id058563da3d054a08279554c8a370c988c040ecc9d4ea72fe1dddad45c791927de80406005b53e385libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/05//usr/lib/.build-id/d4//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=058563da3d054a08279554c8a370c988c040ecc9, strippedsetuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=d4ea72fe1dddad45c791927de80406005b53e385, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)<<PRRRRR"RR>R?RR;R RRRRRR4RRR R!R(R6RRR.R5RRRR R8R'R$RR R)R"Sv>eaN!g2ҧVww8J%4Ew)s}Lj`lUqA%1,K-bJwfpzycG͍ b+ | le}x*Ҳt93 5ʤ{{4"Li:BuP+'V}n6K.MJPa >\],Q(E/;"*pgi?ַS Ab$ -"0[f DJn8EE†o$ e1Eub~r+|=H=}x)+x{nK#xdt= F֔gE&MsGN[=K"oYYh>$Pxr筎4+ήBAU}r_GC|͢ d,, %*w&i%Q/_iM8( ׇ~m3Q+]Ju9B;lr%]Gq$3 &Sƛ{{wdmT*:|F_Ms]c`skV&(fO@t,qA*u F^e+Xꄌfr0Hۚ {[^ S՗ץKmpLmjN7_=.rnظJEC`U`-;= wZtv}_ZUl)#|ΰ^?M^r1/}"̶JH(@>d3AK.;nryCխgRg=6rV IT qGx[7OŝfmF!i+sK$=-&녳Z}_.gJ d!k*jlohk[cU4$۬n%ӵdʉw7>n/@~e&-9`J)|5xֲf$K}e@DNm2$`E6*Xjo{vfxe J7Pn"[+ȡ D |ɬbvڜS- F__~'T5XNADWU I[t?Z}œϐ4;3ґ8D՟/v[$)W^̰Ll 9Y3~v E]yR'䟼:Ki.HA:3^95/$xh&rQK[ '590lFeW,0֥6#/.rؾH Lಾ)M@|H"Q&u4Ƃx걚&!th o\#VFb<o5-z³bi[Ԗu]v˿ UqfR`;˒p7#|CR iQUni< R~#s(v3+gs}Tj B@Sڷ72R <(0hl0#\K(u]n\ 'K;j7d#A8DSH e1+-`fDϻy\Q?h PTO߁6YOJ-Vz\*(7բ@yWK/J?Cxg99Wd:]bkmS*0_sS i|@^L}n4|Ni=[I=cۥ2֐d\U~W{U!ZM7w3wM̦)|g?QGV8h]꒴T#lyf/纍^À:U?n١8k9` S"D^ڇTfXj%K q/& K.4 RաPJ|_)GYdf& {R=2:l!ߕ7 4#BO(cW:'!Q&j/ɚsə~l+ cG *]ˆUYݳ]R[n+Fk<[4 ,SdPi6l]ց߫jQuZT[&r f}TN }&RAk-71|tke#}yE 6'z`w/a&ʿܷ[ oGJ1)֚7FA+"e #^<bUX9goʐT$j.rvht?ܖJl/aixPZ4A7EڟͼDٮ,5Lq^O4eءc'uJzط^AIcTXO6zy~Е 8U On ~dw5XSGMOc?4sLA,&RLfO4wiqJ|MMߧ.i}<4k=[]ZP rb{pǀI!Ო M{@mPBu(0ϸ,Ӂ*7PWn}J :*u^ >mDZ[khPEFㆨ>@i2,sԝsS& ` a?7<Ŋb.(?bf\ k*ih!NuRsB%'#M6*vf)N:'՞;&KX,AW[bO6.2Ll蹃ObnPP8sL1"&)^ Kˍ72.NF9h!Ũ_8wi$ @G*l.vz ѠjgoH>ž[fX T7A$չ&Ƅ@id02V%HVF>仾=I0߃&7Z F n5 lѳ?6Oe'zY?hfFAC!I/o/!ʅMS(l웸c 'n}u(o\qf1%/,SR c%s+B+LZZ| ^S-ߍ$(fB^. 2i=p(D\bCCD$G:2RuTT&Q|M~+g# WipM h<<;vR,h{ųxW3J&_j;/VXwC`˞A dJ T[Ŭc^P@ [7qN&)5=? /O1_+%eA^ⷭS;y3[]d[ 4|p])%"%zu[0j(t*(ǿ"5++㶂JVܼ-c_XwJg mWFYJl ykGG8 IyVr6V72늫`8ZrA"˜qc g6XD=pd8Պ&/>pӝ5`CXcbV. !!~ɺM˽Kc \n-q˕tKDIL3w}5\mKXgD`mY[B{/E|MVhiߏG/nJ []6NwN\ZK1$r _݈L)ļU+\#ʟ}&SV$ۺOTv!6c%Q~#;l)7V6I_?IEZ/rn q˘Pt\t{oj_Y 9 AE0 L~O-Aƛpa_sC\y>[Ajjh:zc# [V" 쉂ȃ+A`KxA-phbsZnH? leb_ћ"LK*h7v0P=>&DoʛbNB?֫߷H{JPcZ8U>>DYalN{Ƅ~ZE,?=%ªSȂx, 8uꨚiepWy5t#mx LQ%C"w#EG"o,f L$dS0fӪFp|˔58Nd %`ZSk'`yYoKn+ !<"yQ {6B6[%!@3F$:BHOpJ&"&{z$]E8>q0Ql-GrV$~5 qPTpvQ)61+0k[ - #섽Vqx(hzL FpZ SO7|ꤴL{ň}sU`pfP? %*\G@qҌ4'Gh3 cgI"BV$d8Fbzs"ֻh\2B͹n|u*Q [$m?rbl 5s7WzltC r(WYwB߬%\ХS1HR?8yH&FL/G>]8G e濯S@Z{yCl ҋ=b[dPvY^YI0wdMWttē$8}Vfp8zfu Y6BO+nE9Qi{]%t;J,;f+›״ڦhmW//4X`b"uA+QŴBX:5L13ԮbMuy SEH*.2V_$|EYҭ݄\#{fLKCJ#4>~H + 8/w 9 މ~ʻ {PUb/ID!!OT"TɖBb&Iw΢ dB_s,ᥝn,=]|lC n KH^cc^ c]ԬEvqS _Z7}hJ ;xy_S4[˜FF6,Z-3^@fbm&9kW+8jуz`MXm 7v|LTL(Z.d2d:ÈOmHUؤ&N?'A|d#2GSCGEVc~`B} n-7F&'Nn&ARK=02'ت,؍2Az$s &W{JjN g2Jm=!弤0_ _m8o¶p65 Pz1<쀣XY.`$P!U+tDĩv~02Z7вgoU!.r % oVz.1:=ŷ0]u-+hIٌ"ض-SKh\XRcS G9e х;4l\)Iwr#?~M#mu(H&<[L=)]7ޢctѳ*F,O}ϐZܤuaD{L , 4{ᶧPSʰpthĽ]؛avPơL@n$wMe*)I! IrdNY(X@SR?PD1(Ν㰌/$*/I6?!G$97j^`:+[RϠW,n:XZZB}಺'.l%9@_;T5 ]^+ Sv7? k=SoqȒc{Q{ۛ6էV&&␖\jP@/09ʹgY%hJ˫Z޴szYǤ~"auեR(KrW]H MpodK w4"vvoxH2;&1aַߚu&Gg!‡W鲫x-Yy1Ҙ4"YF WVlU fu$ _z`cI.q VLhX|B8 [R1.u"V'm!A2xX4PF![MSMLm3zc6-E%a+rU2&.<iA4Y\ ޼N>X%`YK+ ˉ O]h,,xo||n`t19Kmsׯ2sdc,c,s=1' /^BkXO sսGf-,ZS%KMc^[ p333V{C/5h@+ef3fw |G8?SϡxQ 5c#jU#FxFّwпmgcLE]"Dh8H"^.XraA-RMlm6Ͽ:)Sg zչ+UH`Hrjw^ v/TYG~[CXAqz}QG+O&P oր@_&R!hR-L18@^vmNQ(onL@JIի ;*eEF`Z1_Xsx.(=XH]L0*~Y RkM{,߱{^W 4-A<sj~"՗feXvc Gb+|(y#Tי%t`rp땞9F7c-G͛gy/!5'~l(nU;<_Iޓdhw 4L!xt/k%#tOP2 sk!ϕʤpɂsЧDB*x}o n8hcw 2nI%OUE?=jhLE XcGG׺E脏:MʯĵD䒳eJgCsLӁwfϸ RLbC8Ӧ W/y޶.&_t^x?FqJ4&)itl(Y,{.U7njyG!V򠸖{٩=ҕtAFԂgFMDfa%|mGadZdzFcK=B߼Ъzc@,ZtuT"M/Y s:e͆6pas[GxҙjGXH^8fF+Q 7ȴ圦hTyS}41}aZ/V%ځ/3~B9|^jeU sݏ+6J#2@mbR(.S$p9" i1O_+}m/ Û= En‡,*7M4M$М|&XZDAIֺ+ŊT/bZVa,OLٶ&$v,?~Qch`..a8/~e{=:r$Zֱ8$j3|,fS\ЇZ3oUg>i］X<*a |z, E,PaI0bcU) 7ό'g@&ow7dC\7A~i+7 ⇉Rl͒#V1+zb %su}{`=8vfC||)]АYF) R`y47Fȥ}"e+ls!xA #*9N蟬>Pb7Y|οۂx;dȞLc0%H=趶߫8PxK@R, 1&$ByS, |=3JU{C(bdi7ܮoF2s1wR HxK#~wmV z}:=@uH}?F~bRu%AIZ_ TR ?-,>Yk qbjT䢡T1PI w <' RTKi^hFsC{mʺB aK^"ht>ɲ߉X<}6f6jWIV(Hl5=\8)3g,KaS>hTCԮ6]0:hh14,Db-tWA7<[܌CwUl(mҞI:rGa!UK ܺs}GW3(FBaC5˝dB E 9:?)(:&baJiwbJ˞g}Gѳ@^Wl;:V9U>?]KTG5;c(}hZ|an`&?o$llKWVׇ $J}fra i[)b b-,C]뵐 rLa! ϸsK+X3%M[p Y_l(xGj:T=(Rfs̅2V㳷BK :ٖoMUcu@"D>YD'&#Nwq;s9Q' dD)z:}^z(m2VHd2Q`i7R)毺Xo !E6Z~^-?rIί =a_z^Հys{@cngi4(~dn{|" P?QyR3WEaE{ϯ`BuJ`f:\ $# ̑q"}|3ikHyP2 x׽k0wQ-h_7Y lجʖ$ioyd?m? fjd:e/,aZȈ9* ¡ͱi4ek6.o{Ѕ_f݃8bFP#U?B9ŎѬ_⚍04T'THͅKpܠã4VQ0(F!ؔL N󗅞 9FytqCd)_ͧ5eY͈'^h1ZwҧV?`*8Qb뿣 s ^ҕJV~O0㽾0 C$^~Uʟ`i$CYAmEiz^ltѕE6XSSl!,^ tf-2\ZP%otne"{w^J"[&mB[ze@N$0'&:;,iT"Kfq ԾJg{h Aa;zZDjxoJszubO{[Sp\1%!ǝ$鶻OĞ/QP@V~)# IIt4˖byʜ^RU9n+SjЄ\B|kUXY:D Yljn!ˬtCoaߪ&^oLaɊԣ䷃yGwMj=+O.(D.ϓgp$P%bಿC_/(Qs&}[&u#3y}7H1\~i!5l>so(.a}> *$ N@F}11e6]Xt*?oFl]nb5"1X2غ(Mg#K4w6[n:ɶQƜEbWYZf?Oot.y:ueV<3ogb DNDsE?A@+bL/@*s sKT+T*t*a8H[SXSL^LT\1]kFi'R8+s<\A{݄hayhشUI<)TP㢺rɝmCy&\*K5ўn1QO{윆NX6Qd7,'7pp wZ%BkoK&b K W yE5qun@96_LG[S4ooo9 ={> hD^\׋˂a\{+υYv^0]/Ϋ[bч W{d#WM`R(yI|#.9txfl)}q>;hXˢh~iRyTfs4;}\9󑸊I2KNXWٲ;a-}PW4< UEm)OigwҾ~DʗEs飄vdwv{Lҧ&KOc%ҷFp%vC9r۱u4UTk1gdbR5_ Ѐ qTXfWSj"B[דрm .n ^]ս?r/l==c G"csn( )QRYãf`z( gr,A'DQƶ13"YJ;  `4fH C5(gz3\Z u=}䑩عhvM]gSsir.ffLcϺʭYN>72ig; ;>m0ʩŮE_1HI"(ja9( aܝ z!/x#Oр1s>DMcdj3G'l8ѿ!YG0)[]Qܺ~0OwF~&3):u׷+q)2IYέ3gGQ:u9FO0Q>Lrx-U|R/?!P $%ߒu'%'qhܽvVYiY֞Ullڙ 7ins4ޗOX/=F/ہĭ4Dq\ۘmJ&p}xӳZ"juK^q8 K2@߳}@B0LArΟAr)9`PX4"){h2UK|<ԒS' yopGr3v҇ _dMyA$6 Ƴ|Q'Y)]eCnJ/j/DK!Aiq}ݛ8,Sl00b}7o27$8k5i{v&t^m` 4ܑ/?R}ht9( a5wa5#k~,l,'';T-!PRM2ʇPHliLJȁ`䡶d^EQ dl3tɟtJکt{8>"hu<[Gʒ!Jk.Pu6#~dKO`aԕRH'%Bi>.RWX1OD +&GSeO=Fʨ:L#S(Ҕ (fO_F<,jNKV"vX ŹxaItU૽yWb4&%*.*wR SJ? :3s*D(lE~Kx?ޛ|?6bADGUI줦WNGՅV/WKm.t Ŗg4Vl!.! c83Jڣܞj<ZB9f|iuD8s17.ǔUNafg'~ST`Zإ :M1p=ڬ,3D8HGH.RIqzxC*Xg_b ~{^`8 rS>idØn;'|K@DSۊ~oQ$X44/B@L̸HU w! g94]jP*IV4Sc D8ᚭXAqp16bż?+SgmG*D()kJ͚4t@JaViCȌv=OQAoDsdGL2Ś/_k0r-"iN:jV޻hbr>@31QcVo](:5+=6ȀZtE'ZjΌmtZ}}:VQ`[_eHcuI.8 &9˃squ|aUiR赉[K? M&8Ոv&HDq KG[?e\?hh /16V, ~xe"qN% %?VB٫RO#jR>|U*qn &%N}ήFc Bƚ,#\Tc"(a%E xw)sn3юKHoC,EiI!CwEm;cP27s}M:?,e)6xl0. :&*$@--# pɋq˃g(i"5_B8rRee/ڐ^-2X*!ϒ:[hqYp,PGl%Ƣi\r+xq ]=ξY/BܜTDmY= a$ܑjUZH#N.oz+LJ0W QHgCe"5dڏxYR2XipUym'/: i޽E!?>MWj,'cG@.MI;} :ue3 HnY8ȦZDg#뭫v]DVHC@ʤ׍&= h T~sLZ*rl*ϕjwYU⊶K2QahZ$վ%ɴx@{'Y ҒYcL|EsG ^20bPR+O9I*EWߓ&ժ7xٞ"GpWA,zopl'#ڣ8RcTAwR5̶fSc)&u)>3bTڗ rR$VƖ:=,14zߞ@&dK|9.h-4Vi>D> 0,PUc5z2T }"r~sD^oP G^ƨfE_x`_ ?wEoOU iǚiSNhbILLyyq{6 =+xnB)8KMuI;ѷqzT$3I_( =? 4-=sv*,u:Ţwu*zWrWephqE.4bX))d%ȿ-DsEWOq XJdƇ ؟@+8 mЩ j9an/P_o?QY?i.qRWJ;o˩fʩʤ3G}uZJhf3CoHLJAZl*Z$tVh<@Έr)Mޯ Pfӕ4`xhLt6鵐%i9ʖgܵ!VHŝ )T8@54 LʒI%ǍU(s)k5\]UN#ѽ.%Q岺"*9OPlF}CS&}q̞WЮA|Czsyl@|;n'R/ sj#*n] U()aYM5<mjՉ3xfPyTCھS8X1iƼNP!0`ɤ[US2^ /'Y, XL)`I.eF(C <yÎTg@cԣN0p87%jSRLIMϒ堘_F@D3is$!#Lir#ϽqkyRh볷@+s͗L?YsO|TxL谣)%@dC#tR ^ScRr/\5}fZO/&y"573&Z%NÚ!kZ0%;;Cp@qLg]AҢ0I`3!z[P@&Ik5Ioʗ<>ɚ$sk==s45n=g('¯iC~y4rgCU%d5!KM/B`YrMǺc<4w;XcG|77Bwt`/Z=L L^Y5v~]8u0Wdgq`uԢ_JؗcV a =BS-VAGUX++eOT- Ep-[R:tM;SS"3VF >xs%ʊ E]tU7t:[S]8ټRVd#~aoz؀$l0PI$4x/l2C:OD@)BI)6߃G@4!ԩ;ӏs$w9V]NB,G4ϒZ"'K;~7k5̥>TdP&O35W+p9ć+9%V7C]xဿ^F+tJ;A:g9#es}-W=gd.ۍ^X'"DwoY9cD1, x(ƁK֦:XNbYYO6UYvsI -45CMW?S'pR_ctN'^UZ`OhECyxG$q<8\G2qfpJ$̄<WU RMX4j9#7!+rq*؃ʿ fhe7Z5@._oBQ4~!G/{R \k$ ;ul*%8>>6ֲVo$zvE{Mc pT?CahKt>1jT'v1.p-(rxg}#?/ު jbd*n bj\I֚q,+v0 z lei&8y"% 6E်Bclsh8m s%Lj'53;D$&@w]w NpcRu[FwzPu?ix,h Ii!Ճ4@DU~ODI@qht H>A q6 ?2rdU+f:B$u)(ܗ wW&!odȓuTѨ;GhlZ×/!]QK{:P}?_#/*Qs&&{ԟt7 qD8ˉ'"&RSz-@[%g$*Tau惱a^tB{ȐhAf;>v&wȢ3sm!oxخL\Scw)Y(xy'alȮٷ2 у;@8zuv*ށu'j*zq?Y.zJYP˪0qHI>`&q=̖g~S=Gv^g@ze o;= ;>'ՕRlC>,O̰=zeAzJpKL ,go%/W-et Zre2-RsL+IkD vF`-a10>Cњx^PJTfαhoH QJaLAe8"#1a"ʎǵ!RQW4laԷW7Rn^/jg#p{!"ANWN&X Kvo.E>$I.tRm* 4Szwsmzv v/(et j:q2ՂFmeOx[7X˾/3kzxdB*s|lbTKd4ޝ#p۴ᾧZ.j095>E&1lzi  Z0?]Z*vl]Aƺ`Ih06$%Sʡ-0B" ϳF)AN$,ZE',yC2UݚBOWETF:5z Uѩy5;Y%QPaSmLj fCru}{ 0>l8ެ_vYIJh6[*s(td\)L!!nV6!ͽWnA9e8϶e7fa=oz? MvН#zz6A)OYfgَ݅Bߦ)os(!U8F$oiOh2*هfKQ7.B7%қP ,TpFQrCQ2%IB\`=9Ȉ=a%+{ʙ8{*lUg,1XKp]ܛ/uD+(Gjzo& x;baU%Fͅ-5 Wktϥ3u76W(;5l}#/<ŪNf.E[]n~31®ݡԎ0ھ39 Om\qz!M 5%e7o%=xُ@72s:H7I י8L7 8 %`?UICL֋RXԩ]Nf^IɒEBv#Pd%5W]hUkXCZ:qS)hauI♢^/`zS@n4ܐ?,zX#JNƛwRY!zP`?B@ kyrj/ ? hE:gCivV—{LJ=ŴI41RQpu}L_uQ2a*8 |vT/<:G;-۵[!Ŀ܁^aCoPKu-#oMuC&Ĩ[J w0 jv:AOF! haƸ,TaN6di7'u'$8e| DI8LO$l N3 20wMPKlqG{f!|  y tݎSxw^\<~&m4h~2lQT&.Z+i+"#k7[Z\烽Z*.ܩ{Edg!)2 Nt=IsP*+UGҀRV)qSEx^F*Ml7+ҐZh:-^.x&4z(8y7,`#ٝv0i:w YuU= 4r:-b`$d'P=^7[A 0>u6|~DTP2j = OqįoS+BL paG_%m47Kՙu(!z;oխn~.9b2 >Ņ)'_ce/<<` ɂ۹{uyk,v^T'(:~qb[ ( $^'nkX-Aq,wGAQX_{oa<˦img9mISg>ᵾ`8 +we؏Q[ g RzҟpQSN=pj^ݗV.qF 8n XH:}=q2 pn):-,:[]8VS_oɷJYj?fzz\̅rt M|ǰ'.VlD>kF'&` wߡM9O@0).P*T /1jn:iSRJuU H> ; d}ռEOC5D)Po'UdEM. ľA aijGKP}T`29@^ 9ŠgCA V2X(o@Z0?9&w}nvɂ]dUc6w42H-fU˄aӏɷu8&t)ibPRxdM]!_ZogRC# Y_4@3Yf,)I)Y$fROuu0nA|-LI1@l΅,u*͡y1lBCTQ <협 ҂Z/?^Q<T#]Rgv {KO('@o5Uww `TkC؀)=yV!d1e.+ԡ}ۦJM-w7cmPkO5 l(V&y:{IUA%1-@fW 5dn^ !@qys!SSSp[N:U+~ GnzF z.eچZʏQkoaQf9 M3r1|/b/tkb\\[c8l}02XUcZ/~eb~D<рElfA'dR"d|+LK1T>[ ٷT6/ng`X[y Fϸi^رX`F;; 'i3RɷܙEnAo=L@T3\ef, g!E{'6$~:9M >`p,>}.Pv>DnoF>Vj߃ ,%uqiA6>ILQD‚TtSJ ƍg*X"2l&3‹%EqX$xd n8T)_$p>]r}Cz ʖ0 ' 6a!^&!v=3ӊǿ W+^,v%'ڎ.N ª Mh{V{G(ĦHArn>hglعsjh{g JnjʚQ1g V Vm h/;$Sxm0Rx[ ϧ)JRxV@8Bw2p5p .+v4IvslO3F}ĉYqrFء. `Q60O U~51"_g,̄A"ڲx>5M&ss`whPx}pxU9w!6=L3r9+|¡xXwguBw%fPI5xWѸ8`9zi-5OĆ}h  FO4- tY)$.hm7Af;!fI 'ni{?zc{7N[&Oѓƛ-ya?lAf5vN7rQ.j &U$~kۙBe€vn`G6-ZdWbLcBL e ٸWfZ}z81<Ƅ4>BC8]PRmNv/V@!c YWI$3qnaH2$S;'r`WfA$YчIQ;ryV3&rw9\dʃ)#O!1eٌq3B9WLe/V%Ե+]bՏ)-㸽Pb^1 MǸ`;*zi5&X*>ÓU z;g\GRϧ^@0yT.]uشͷ 3 ΉN \{'1Gl`n3{}1v4 t ,ͮ~;Z~6߬k^Pڒ8Z*3\0xoTӧi1FAaӅi4Xsb@bTPV %hW"[~XȃA)WfC-XNɯ-AN2uԏns she޼r_ [ G; qrbOOt ~םӌk ߪdD-Cg«A H7/.WKlns&9d #fj#\q mMUrxjwK~A6Ae wWeޘUU2ބuDrgtG;`+{g75&h`NPU 0n`|#_bP "f Tէ;X)=~oG"OnJ1ʼnތw0JIM^0+GZ*A/!Hn}* 5#͈Y :=Esc@bZ.rn U ŒnpƁb/.ToV7z>SqC ke)5ZO[K&r6pǻE_IsNd!&OJ7 -#W`)]@y'̳3Q#9>j{ɾ6?,(|(eAXH]'IPJ,-fvR+*O\~qs4+|D*d__`.]NPGA&IhTh;QĹ%n49].yÛǚq=[0"0 /K,rob_B:;Ӕf,+16ӈWAex{fbY#z,p)F]urΑďϛl-vjCtgYK*A2w?Q_6"82CvC#%25o f1Жpr$c?8xA h"4F34]Fs~"eN CYdepsymwAewr|CU0 jZSCѯy&aqGxf!JwNW`]L"+F+5dEY*&ܭ_w57[v h_KX}=!qCIGNsMg>M91>C +ץݺ :MKs:}_Nw '0wG3D~4CkZrvndik D$`D ƧQN̓Zd`x-l3cPh1Qi-- dѤwʱv5?4,B?'[yCBݡkQlu PV^dd 9A+`^Pbd:}wDVGJqTPHSt\}>j'ox3sxso[PL9b.M*RQ%EɼI N!}!nai4.G!VòcskĹf:?Lmv;FߗB""#pzfUgm[j` zT1xC~"b ͓ӂ''zHm8 @K4'{<_a\Ɇ,PtnteXQ?eJfͨF4lÎh  6PnjyuK|h5+~U&1&/ԃwMlu# ‡LK]v o1.B&!2Q|?l?:[2iW&4oO%2aJd\*9b!g#EĔ.r 'vxhl ;ʡ+I}Fd1<vq):6;sc3jP1J ,ET/J[/)AJe琻4 +. lh#T m=afԻ;# h2D9\߼@9^NL].&GQ~^q<3<ة]▝A1LR34;r!;ٻ4Hacprpw#q2.B o <"_ ݂NO"04ۛe9φA\QHACEG<͏j2΋eLMBDPiOAW'q[#vG'fΏiI`p9$!gwp$YOO?׵RD +*6"NaC.찰KE%J`IX0^H׎Үg>=akl8Wɋc}} OZ8~奒#RGyƂZV,\/@#`It.}xJպxړmǕX\nF'JMդC;ZA3plo}CPQ?Qɱ7QW*lјhk9W٭Gj*' =K:aCmCB58ujm=WXZS۝KAe#[p<O)нMbj78nkZ9}QI0Z H>0ړI;ppʜ3Dzw@GΗkJM650[FeRS`[Ph'OcZ_ ;hb@<'m0t^S! F/JKE(9o'\$I_?c.ipeԴ6WY"k6(4XRmKk-]kDGWXY1h)ӄmgf:liq_{]>Ѻ}`TVՔDӶ㭻.P3ya*(KIXrdW ֽ F'\i'D߄֌2w A˧Ϸ)P7ZZC<(U _Tzdj*6- _7L& nt&ERL7Tp)|H2Eξd ^'N)^O2.j|5y<{_~kt].2[1͒@I|ʉ*"L4عj,a([V1>T@PhVOVs+g'tÈG(4~ann;EEܹt"P'[Ɉ4&hqT-ŀiК!eo}BTQWn.$ײn6;CbxvmIQx:&1 `^w@rmrX_ *rV2K:[1Y,ȏ\RȻ(f:ed,b r}}y@yyXyt*X*ՑA a6k^ `!X>(i ݦ< ^PNXYIH gU0 :e"{V_/_ 8x&1k3jez fcB@ҝ 3V,|&\%~(D 9x=$'4( mwGtU@P]QpT$XyHmu  g1GӋUTC0% C܆VbLu4] L}OOX9JinUO@Y+ef&&芅nv@=ENHƘ!%W6ǗPl>ﴐgߩŎü8"w7kvfjJ#+/f`V[[SsbOF+AazW6pR^#of^I0,pxǧB^&O}1-z,ifS'r u%,ʵfA9jZXqZ 8ru3'QM*]>DwM4?zG@Cy2hHSf'jI>~oOZXbĊzƯ3?Vy.|Oܢ25dzԣ3}uQJ Oz+z;;0)#KX+s4t~[&}et՚%?uR*7n(keh%3V2>_k C%OM#nѝ"% UrF9&ױ~B'uTDmvs (ƄS̀_7LyiP T`ٻF11CK& 1&2MS= %>iw *h)TRNj[AJm<)`3O,BxUfֻUp'=Pv5vy[n90[n?DLƐIv2_{| K9 ͱzwe:ҕI&X Nȟ+ IK.r0E)!U6LPYVerr{e%6FKƜץPSK>NHm6*Cl^VS;۞Ċ77TL)1ȔQFBMx-lmPI7\EF40AS'\]_ɺ^{Z_HG ^d|׍eԠY@ _?<;/Jʴvt$h&)% Gb~8ZqeRCN~^k>舫rG:+&F/[PDnR8?>]!{zaAJj,XQ[I&?J%S#}>=( \N/c~AXc$)br$`KsB/F*~OBcj1ZsCנmyDSnضRd7٤#1DBHߑe1p0˗_;i{GeV4r_rؐ5R;= #NX$WGpUB[LHWvۻcmQsC4;X}XF1Ny5 0(R%4~Vb/6?te\HÐ3lA7Z TXyoSP[P^}Ɛp;rLv>\9.FR1jf(xAwSw F^%b>@ W֞8sV1"7yLqr^Fm9CZ8Q׵UZ^ѓ=cHݕrIL+Q FG5҅@|7dSIJn9 3G!;'Ƈ= 52SRA\5.ma,j*!iN][N YilqjQǒMv嵫D(ݷ z)m.UO &&>\d|Bf<p/EHDϏeP0/"%զ5V LxoRe;Kd̊>.ԗ`Al͹$$S.Zh\ݲ__ϊ&_tHߵ~IIxi:myx/cT `G!A?pv+y3~,@!ƺV|c:98r`fyxj˭g {{ %H˚S K;ְp >&%iN"FݿξW<Lq7.js!mcw^LU˂7ӰEqsF( b.BDW f H^VZC6KCW6 SzW+4ݦɻc+&[Nΐ]{qY19NH?ng3)ЦX7ٯ뺼+裾ݺq9ɱVW_{N!rXT7_r?D=g%kPcp)bRDŧkwmηhYE"FzonEkf$-TW:h,4V?w$[-9,vbqD6L Cq<4k. e'BAO런/ℎSNQ+n3#;_j2n[@τI7T[+o*df2D͢vW\̵ Y225Sl8|MvcxQTsYKUXQd{ M nV cD0֗FO2MEp b7!gW/-PH}U9nXq|x Jd`6QO:;93VM #ʙȽUhߋ$_xzN?YS:!QҮ޼?A7.Ã9&pDG[~zK&G;W.#0}(nwP3q Edt;G|pLԫ+no0i3wP""R ̴s\6߮6>[ՅLkCtQ,QM)=$ ՞ٓ#%~֚_;1;WӞX̜rT8w; q.$]a;0IxlVdPrý^U SltnxMt6 GDc?z{S\._UCMdڋ];̌sRT+ã|ql`FK|$w$ :qfp /KsP%CY b Jp{`zOdXc[⼤lh_2ei3a쯷FES_OqFJ}REPG@+=`+/=T~%rGhY$a1<5M!N4T=6ΓxYgRo' c7YVevـ!+.45Z7e-UPK$%f5fnj3q]~uQoPvn#p+ Xw^!qԐӵH>(ŋ;J|OU"Nu1 *XG#JY(Z R,n ",bmUkSEx1A#br}g)u:i}S^ G#WKJݕr]'ss&9c)]"o(i;PkX!Vvv.8%OuX$yE62 T j[WI׺e+D'Z[] p2>݉AͥmY2Kr+z􊀢d Ҡì.,<g5p|dif~&@:Lx2 [VR#Xg f_?%t'OE>:2l̿fpX]gͥ{)z,Vcr[vTY' ~{4Ȁ0*{=S:_ u~tޖH&pD>n  Fan:[ -[3uA +ШH?A^vv!:ztL+zam0n٤"IxW% [pzri{NWnp%ߑ>G\ DXY^ͻiiofqu|B{}[g|b'\ CnϓQY *~+/ѥ8?m".,FH}Fyr[6`@ԿbB*%>ƒiottD o]6G1"&Oԕm\s|.F!^tB#9m1Ŝ^0V:iǴ#$ٲwd>"s!Ww푙\ǟOlIyXqUE:LxٙC(7E$-8NDcz4[BFa2$odY fݵG +.͛',~^cRaK{jO"#/%4Wd꒹7E7,.)'zNqkek,Z1s=95,y`DgArVTNA,]+vs!eБY# V)KcPҴ1WAAXaD ʃ. > 4;6 $ j@S4k}КݞQAgyx, Fg B+ Osa^h-iҪ11ciI^wd"tzxbAq7E8܄䮜$4J篜t3+Mq҇t*OA<=E@u_tpr7o8bm[ z'3)W ٷwe|=j?MMup_d2 EL,C_W}IiW "VBI0 '# J&K`b%f8vf|VUMt۱Un8GWۜ'ᰉo&V/#޵\J{5L/r)ggsg$vG}F5nX~l~CP qf GF $#3_aܩJ*8į|.vk“ ?Aϴ1 6퓗xӟ,>^ߏtaM-Lub /ݡފGJh`۩6֑Q um#"Yn(WO хs/܍=\v Օl+=vb:*" u `l[C^+{p*iߊKC1$N釕IH+Vn@׊$ܔNL^ tgծ)"wTʣ ];hޟ:W8#V'>wЅHe;Uځw;f(8SJQй<LQ:[-)ttLL9No00AT>_zu|HW@c%1X2s>/SY~ Ft#"Mv5 z"}3V9z0"!JQY qDSXk5FkRNmwuu"zEk- 걟JhIɬlObʷy>X~=na_f#nMٍ x_dOXХ,/ɡUyXHriOTYVǠW׫KF Gg6y-$NG%%+NbFm6 $-*}#``?^2jA W[S@DQu^ޅF#ѱTdk5I.f yU5f`Fб:TXB&`/wZ*6]"]b mKu:hCq*D"rd)1fȢ>zW@Sk`AMD2sk9&JW]2є(@925q!V>+ I:Gr8 _6RM$ '9X}x|Itx^}"XcT/VWc0۸*nJ C)oBer]o%q7SqXb駇`A0Zb>-_(YB7E ɱjp0"(TךaO0ejB⤣we?n>/_!zwWͻPw*lf'y)²PWf@Ր9txjeaP<'F2,ά*4RρM =Ȯx乵R$|3'tgSEɑ"D8q~#()A0+CB,'`AoXu85Ir~p6;I߈.j$ЀBΖ:Պ6g' .US0'{#zS>ҥic77UékAg}D] ʴTdgUw//~#"qWΞFz2};"1jP f G w!||nwܤ-O^}<6y`&]`قٛM]Ro%Ʃ)N4<;RBڌ$1/)`:dV?6VMNd+A#pGjvXn'6pII~N gC:D+-Ίe%졜8 崮\ S9Zo-?{-DJ.U9bF~0OU+4 _hU?{u߻eh@Q+@M+_Ād$&z^*I hl : $. ~m=nFĴCΎ hHYtb=(2Xqi#o"$_?#)Ql MЕ9xT*9HR[H`%j OQҜ'qK[i>2{)9Rv1+ҩqRS9:Wyo_j` Xhm1Z"Io:sxoހ.my6}ͺC&h$*Pưȭi?֍ks!s!HYi D<ؘ:Y![2FlnR|k9=SE⟓.G$`-M{ǽd?ƒM?WJ#5NEõ>W(JѼ2cq]TGReYRmGڛ+JK]^w22wNF Eetrb0rZ!pҢ[-<ʪ^\4ٴchU%ɿ(eY+>2{6ׂYuO$ITvp=R”*~g\l1FJ UW[Φ%3(8MW?c k|lll'/D5tS>8JğQKY:n Cu6||yS\dw. ֊̴\fL-{fr#~YNnYWvC'ZC-<O<.Fh3HΨ`ԟ9eq_͖s%c ;uZ|HCX'&`SKPdGd qӸ'P_g|P5߀2%(tJ3Հ6=(X1 fj7Ji kW[rG_8K ڢF4Rso_1(- Xi[M. 7g (6"'̼d{@oA^$ڂd_ע; KYCKx vμpF@|RBq4B'}5()S_&d tP ۃ%=v5`Bf1+~y}c_=(ߣ֟ jBƟ*Vb6"yaS;JHJrY*#1l_Ֆ(ċPjsu oL8>eާzf޲~S.(NDS[ 3X[ޯӡ]јE>2%Ta1Qșmp_walIf "ۻBݜXl :J"w>刳ͥpi$0u޿;" ㋭ @VzCޤg8VܖzMS*]@RQ`•OT?yc;zfd[Ө.}x`N$ٕ˺|/HQwRZoGy2@_s7RBzJB|( dkᒑY:r1A앫|N,\98cXcIOqYPFo˲Kd^u{R_?S՞!ҟ K5fZ >%'<);= ,>n_Uv8Z#/mUB-Q+g3gie9nsGglMML,tUN4~3Wjzmg33wi,{|ر, ;~X>}b`ʜ wEl͕Ծo^*n$L@K#\ piҞtJџǩ8?NJhK Y ]_&0Lqfb8|:g)/^/-S\= oͮ(+%ed'U 'ũ#yA B8R1|zjv>n7L&RWY7y h/FU4UY`&C#\D hHX+R|ToN `W-ałbqg;ً4M=Ub +b Q$H/#-xΙڷQx;ߢCEZ?n]?41w88Vp"s (VGe"{waM( :*02d#8Bb6"o`Є1<[u6 DQ6)&UB>CR P#t%E$V,>9ȖUx1'| 24z`D$zba2PNkp.Ywd>͓7Ȥ CB溜ADsex]fȦ{ܵ@뜧2Aq'@:t+{`5aνjaxz=/c1ͮ1 ifz[`P޷A Z24o~㦟uv-1w&&ף\<-8^ȈrX0⧢5pXw ©xfC;S{k~b9I/;e&Ԉ,/ l'53|9]|@\`3k؛rmStw‰Ų%m, iQ0j5&ȯӓ>i#TO.Ռxy0Lbp7δh6}wUawwr&_0#ӊM4>ϜQw@.~TѪO_LkW*[Mj#c!,6K*]&3gBE7$k8WCkTQa'҃q Lu!;TtוF4=[Z(* 8*ǀY+ pذP+Q]Pqo%WpTqsT(-c`o4UOP}~+zznGc!uKT_zS5p9BSi)FfB2jr /p:I׷r0 C>Z6`spII *]u"Th P.HLU'.2wu'FܸT ~>'N3B í.:"i4Rq@/lǁ,?iF38X6E{t5:u_sD^2JxH"I@jJXX[_ TdMGo4M1^R4,nSʒsXWHH '\>&n 'l/Kk;UW' ڻvbԮ泥v/H6:gXu5͚=~o/G|Ԩ1&B\>)q_/Y3+ DkRj VԏcR47ItG2#7HT/I륔V~'R[f$?-XH5C2Ls~[rٻD ;єj MI\fLLvsKHJ'4alkG:ae(ŝ3IoiJKYKfz2hTml 1.6RsrNB@`V:)e ^ z3%D_ * =|q,}BphLڎȄ4ٛمp=zx`g2þ&aJ[ % 7F3(9oۂ5W|DЄX#P!VQ!;qڧU}G[/1n[ +Zc|O EXpCbl#|sݒxbRMCT7fD̪}C>=:`AmVh(X Qqc'8{hIsb͈X'0z7Xa;/O Ǧs浤9X0]`g<~c$kZKEbIƂ  `BkPmKن(}hS㵱D ~DNoC*TR'ǀ7nPT V zj;hloOl4n{ Bj X8K*^uK%]mGm(1挻ߓ'^Օ0h_Лq[˷4igC 2j\).?@.T/:SwгN1i[5r_Һk^CW{ aJB[l3IԷ|Oe92CNW@vt$ 'mei_qSy!ƣXf iՎfWr.{HhƯT|ltaP?*Ƒ< :*'|O>2`~҅Ƈq&އ b7J@pX`RbObm" B!ɏF*RJeK" 8&U#Ɠ&<:s,+8Lܻ+I'-V\>-mFVS"2:D[3ٖ- @{|#K&з!BU&Xh!P) q*<`K z~|N{]5YiʄF @K!Añ< LS?Zbrui3{TPX߲{UȲCnttBNuc JÁ%Qlf*q)$i~4kC W4f2$%h!<uǵ)[Wzp+\rp`hԒPb0'(wF#$ÍW >`_q D? *%7t0^ٳ1)|8ݔ9ϏgƉ*+:EcZmdnLa!cbƌ4P@ނ+U042>h1J͑$zMlL(QS5i B4جaD(6zlb_:$%1]:yP?t/Xf*,4 ]v-QҶMZQ]sQ,Kk'Va1:YiIv!tD%e{w4rEa{ִ ]=O:OЄ Ha9%h#kr^ZhOS 7 R?~5k$Kf4h߄ w?6QWT"0AHSOT U5' _[c;>+vZCh53Kg166"7 p%k`+&{ Bѡ? ='ܤ A7G_!-*|1v2VHG3y~N/9&NH'9e6iCŪ=sPob8WÁ"c50[hp, .h 16wf< _{OL[Q#rxܻ[~o㮽xeԠ8}Cn\Q3A`<|ⷚ8ãHcq: a_yF KSEvʥoMϲ\CϠ簍Ⳕ6&yUBG MoJ8tC404 @Caj;`Ε^Y` +i@<W\cO op@J›I4)ϛ;qY;}f)x犑o|ÃH5({D%SQܗ7hʈev|]<(*S♒Shi|tʹK}ezm.գg"ww9t0˔ܣZ}*rvf!vQ¼QCE]sd{YL5X2>i_AΤseK_>QΕٗf ʑwdb$}|x= /;~ bK+G1DZFhn1 CZaqєKS.Oxg.q}{kvWⓓbMpzOE !Ud-9dNlu_I]AuO+)e.=ďuav/F$3..Z~0K\#-;a, @|0Wr b|FQojӡƞ% ܙw@V=Ŀ_7v:38h:/'f]]pva~E0씂Us Ȓ3v=*rS8FQt;Lep\JYނYHCKCBa./HF7ԒifC;s2k;>6󑇚tMz簶T4iVSKPa<2n<%&G:/`mx5IDWu$]YͳJLbɂQ)YgM茌M*V~s$aRO${ܠtP4!PveZ ǃՙj w6XJZ[ mx]}3<["vnj"opzubl Z+)M~H{/;˚K.gy6#Mz<:cg.tՏ?NmH> ^#SsanOACtU@+8j~ku(q]МiJ,zBqFt#& %܉P_2=AM1;@:&a)MZ),KV{TW=yo06X@Bצ$:m,'|➶bW +Wd@, } (2s>ڤ.Z.U,1JŎoD`X@{䞐M:=Pq> ha %/莒: *+#%Q }VOp /[XRÐ~FVLȭ O{.Z#L;,KA\2O\Dں/t?Mpٸ*_KlCFoRI]|M6R9ύÝ0N=*ͿoO55lhO柺+Z=aAM~6iܷ29Muٵo@d4Mb=<^OkC]{Q:q!۝.ibtr{>xIOk?@`eGRiW9ɫ8QIXe ٨ pXcxiĬ8\ἧ'gί5KD}gfC R2gF\"_hkq<_fC1J؀0nL\l1bP5='%n(z[B Y ;1[ɚ@IOh'A;y/ |\ʢq$?Q"WO=ޟ> Lm s,ƵO[\^D&EQJH-3T~7))2Z1 ;˰]+$Ab>JcSԎ" U` `cr{U˥Cޭ<ߤ*mTq>ע}uTs)[2[q* 8} 3m}fXE(re`J]l!(5g/Y\g[ EVqhttI/E!KRsLe. #)Ml4I YC A;)_Od0S7g̢y>hB}!RLn{ b1{7?»)ىu"Fx{T|1;ؕ|U/AW5qOX:t&U|LJ20\cR/ y љ޳dEhtɟ"`8\Bn)ƺoBc 7@iuwJ{psrDWU+VC04{!FýcyA qh792_ۘݴ;H'@_{_:g8H<(t <@kUVTQ(Z XcR'lLmo?3Ye34~E, Z{Di#EtX{v YR*J䊂NDm|ܡx WKOUj9hUtlhIZ8>Զϕr';Zovu=]\vS 43p9*I3vNigQ pxK43_)iBKu*~V 06Q ?gQawOd}*XMsmt5DRtw %61 XI:"8)>:X=kBh/cH"gQ1Dӑ-:RgzljAvO=om6#(6}8ŴM]AQl QBʱx}lݾ4yN 5㒋dABҔ݁&, ~$^\1[Bz 'z:VP+)l/]ڹ~_s,7Gw !V#%/$pd_ m 2X8("S &#Sﳿ $XSTBXjnOy$&/O9o*gZp#M9S'wo(*qG=OC?'~-hH*qЬ"t*FwJo>4Nyʍv$g4r}J /6|CS #tK/3lQ>ԺX(QuӇ-d~a24EAE[D]]4皃7ڂ<$2#lalJ+e͎̞N$ P&v ҭHgNPuN{E"}pPQ4ękU)Wsvrp!j|ecMhꎁԻBӍDK{=;]ǚOF/=7cY9Ϛ~J{f5).T\gvx#gw. YuY=!8Wg3NqƑGOA; |(w[2ARqezA ;KG[ĵC;Z0/)HFS^MB mN"S""n40.w+✺:|d&eee☗BUue õ(ZBRWH?㲫K;+9zp0S.6ެ#Ldƞf0 Z f-G"A{`؞nk7%P߀k$bX\SZ)Zm"mrzNVѩkUTه)@?[A%vyzY'j>S{OWL(1݈@Sd8C ^UP߆h?Ռ.:ze{> r:uD|$(BD6X5!t 7.6S_ɗ*i/3V+!^vWV+$FRDHeO1UCyGj>0l %.Xu5x]Q痤fY`iy$ҳ53P-3ѿ+%djz.c Pmw@z$:EsM[⏜x^oSzܪt@Ӧ4}[jI6 _?_ҡ.Q[msP"*BeW]uu;[%cUbfj)5ՈFu&'!k 9O $`Up= IБo@QW$;㈱X,ZfH6IzGG+N\1-(=w!k~/VA)'& A8ØaXߥJEo#}FKP4`!OדRI]4u/||eк@}" P\5҄sEٻ[ӿSiΣ~snT  N>KYAOf}򖣧Szci$~mz)oK@dd!d`BLȯx?9tL' bΡlM7~>/Às*t(chJMw!'#{||K}`d FT5n2Stqt7&}[cks:M>!\zG =ibٖA-s%(@~}+%yaL!ԙOf2j&Cvuux5]㒼nM;CljX7S{vǂaP/z*GKUӍP-&{D.ه(~a9 Ѧu{%X VcF2C5I VhY _, ͡ ^`*uZZQIBcQ#P%oIϳZNqq<ٴv"VOԬ= ^U-fr^ecN;w9[SCYB#č@: ^gWfȮԖ"k'<*E6|~cer2Ӝffd}ϯYd):3ʅIjȳ.X%sHb-ڝUI<0mγ^?I-kvwe g 漀pz/[*ξUt۷խg;5 eC6 0Yv?R3:P.Oj_6viۯlWY;{#!jdqy@׿STLf#ND5'/A{A[ + ԓ|smwEG9|PMe vחc>$x:rOy[ S-YHw/M'OyyE(R(7_|?uLqF?2NAK~qKe w|\R4u6͑j5xY{@]QO]w = IaZmp kX׎63J/魬 6n ,`p>)%\TvAu&1O!0!oGl%i†7YW^}(ΠVaWO8?wŴ%@l-x h_q}F-?sEbT(28UHcJя* |'eD?ض5(G; j㈲\tiiΓYFsƆWO&rʩog c԰)7^Od do"Z $2(ZJ؂bgN|Rgڒz󀒀CbVlQ+]`Nz :[NIQbBKho/,/ $B uz&\63Ɲczʫ8S|7 ,.ay&E+t4Bq@}ɣ])@lPG!qpF 7Qb]37`+oHܬt`0':b:C"xe?k.$W~( ^}Q14ctUwBLUhMA[K(d8ʼY/Fn󯸸"{nYL,%ڤ) 2Dѭ-nGelSȀeB#q ï[#!1qFݏNMG#.wscT77-H7x7dR?w$zX:H@D, R\Ut=[*١&S֮/ )QdAn\8 % 1iɨ[ݷ <9T =GLu8%!M6?~"mjF  )ggNP_C a'"ƛ*vt"z]6VBh8Եj$qa-yj ?&s_)Cl3ӉRɧS/ K\Q?=$N)Ó/Y#'9Z"PUֽuN|>>߽add޳tB,jɷh(`53> z3@“3Jnj*Crp|EaN& QVD^'4%7pLٮ0kn=1"9_(B[ت&> ێ&z]vV܃,BNTS;X':0v/z=1ߨ %Th u!ziNtghtZ dEu\*5.d$ڕ)tD VyPU]iҀ$'J@旍(lQ5V7!N >;jSB!3 :RXɣ)B|)+ipbN+Cn-fm188PQw6w -}Y'xޘ*[@79MEwΪTȶ ks`sp:e#.^iwik ۦ#bX=bnX_zUi14+5{_CV PHgA{ոewNz0K1@44,~&"ԥgh+I 8ѷI3R* VtH(ݚ22%* Ցw=.'\!}G%v+pRk׳oس΄qt\oMw#RjBE7`aUnZIQ8hjW7ᜇz?Ϧ[#t){W0d V+~s!kԄλ\)XilO2 e*6+^7J4v=GlXR :T@<ƾ+sڏ/6}ad\zk{Jٷ 2`gn<>S<ոҕY #v\c <5 5{qu&[@phk+d[F}솠0T N.^b! |9: eD GJ ~gv6hֽ0 uRȢ1ʘ 7M2}ٴ,_\56yB{P> ?Xsԋ 㵙X,QH`<ӘӋZ\%{zzb>h;_p 0=v ??`C 'Фq,"aotX #NLX-\S쎖80ҚT_@+oVKAIbRV?|ϗR*c AoKSOVaS[yApg/pL@:6 ]UU42vB1&x~/kd?Ce<9NL+psEaGKAnowW9 lٍϒݿx8I(K^F9NL礐B{ДIhϓiJKGSIRN误($|eIE$[\hw#L.:pv<%/  H!~^Ꝿ\A(t']odXȮ#?:?K݉TO ,}ioRAbUSB,DN`@~zo-6PLMvj0ӆ9a-ZMYBωfvbXq2,bkT$U }o{45Su F]$\lD> mA ӖU+Glcӿs0I9YF`qT,7QA92рDTԐvJOxw zQ,ˉBҰ/HU9՗,N,P:pR Be<~=jwPtQg_%Os JƝzJ*ݼC\'D;,TI_U]z[h\(P[i P̂ :(!l08ծ6lc*,;4s7)vҗT fʙX"9>lla>)m#)G_'jR^BP^}7~ЙR~I6ԮE{F\60=aHC%T0k,"$t~#AhHٵxqr+UU+H3N'v=b\PN-x%CGg,{ O whp b1R}A秂azxɩ"!ѦiOO[c6zrX $YKvWkyB{8yW.8m8kl RL*LhPf 񮬙Т'PF{XCH'vfnUK_|3#*wN|> ts4?&g`gA!:SԈM%xe++CD_/Mś@0tȏZ)T)20Z2❧O#I)"($yyXlXɻ<<1* e6LyAau8âs7e/a /Qi1&Jf%҅sx% I}Oư+>HrBU`O3?c{G;M&z/<-U W4x%̪zv_^qd bd=y.Ǡ'NeH.0Z\O˟xwΒc>(s^ "x}>-Z+BHr8B_,`_⇣%v]ʥqYOWT 4~kMmΎ4dgNPcponY )2J2 W#te Eg2Bq\9co YdCKgA{qo pp{{#4{0(<]ۖ}? *IͧB~;[ ,`Tr ma dxޛ*x}EC}'-H/d+|.-$>B",⭨U? h=={.h+ٿoE璸nUa/2+RP'㓥Lrd[|L ?M L?]QkRBtHwU^1}㣄skۍ8)w)2=\D ף'l$w* )l^RsY(#B{BT)!SW?B}HM/l:9\EJa:?X#6A )Ĝ\A{ギKBD*ʧ e94gjO^ V7W_'z} cAtqGhxE3sR%;' &&jctNѼxrHa:rkK0>du K݌^,j/-["mj>ձ&]N[VRNvb*~p?,ȩ,T]8y2Aτ5|޵ k^^;Lnx " x& 8U[YHĄ[Pﭣ`(? U>'.(Lhem B@vz(ʄA=K>R(R%d 3"'CpVE@kydg4z0ߒ-KlGPhNiӖc,X?:Wf[ cտra@m -og-"lS }&\ 3VHm=d9!qՋ$Фn/W#|_ʁUkB=k,rgr=&TH̞ڃLnI-~l Ɉk/#~hJKQxCin_ "8%c-낳+gKA]dJ엍9K3* 43]L^B &hbFQCIxZtkIS 9sfPSqαCA\%54Xunr@2D9(^ë r:jr%RH(R\%[NE Wxl> yMt۳5ȂrFzf'`m2'1̩a`c'95LϘlAAbo&{夅$,Ak8g07PZќyWዧUUZ 0u+v`r`FEʏz1f^-ݡ 6=Lck } ӗ=5S4 &:N+}$j;x}2^{Er4w-TTU^*E]lǘLRi5~_e @. m%uN\5``T_W8EmB6gF4b!8韑Rv ISf!E D]O)xRc(Ej$d @̈RQ QͰm[o'!?iG S ˁKi,>q4shŌ' S&ѹNN8g?dDD!#<Q> XHv3-!395|ɴ} dUNj)QdmXbLTկd,Rƻi3w'iƱ]>VQ X6TN-jQ,BkR7;ԴI "dXsώGJ#eY~&9+ M-Fnբ!t11j#7ݾ[M[Wq:k07Ibb+7Hd?K2}8UUz <9,?LIŰaI,*OT6d󌋦͍n"vV2 hݮGY!.m 1ݜfF"Y .L4;:,lۨ:=D@Z~Fq-aΜ|Q.?Zfm*@[dB =]`ryO'IAV~d.!ܓ(ܿzw^cݙ.TqϖLs +'нm[Y9q9' X6EBCdDžn'utʔ@gΘn\`l.Wc>Hh,57h-Q:oU/d7W0Wrܘ dp@n$/g0c01}]|;fj'KLY+Ju3 ?(s |6a"$)cZcrOy#βw<('YO>Vzả EKy5~(>5Z@)?Xگal-~]yGS! YtiLc{)dDB%˦pGǢvקyq:B61Ϝɯ6 Z5r|)-$CQGF_\D/fG4 iƩ%m"|/V%k݈cphݦC #.{z(_hu6Hl_>ԟI?cIC`wf֊Sj`7Xp;,!*i!.(M(:,& 1fۏ[XYF68ҵ_ES WTue*rMp_NsϧZk6Ē_!х,锺qFvgy#qH:MX(GE^S&+$tTdِՉï麻 av~+\gy56AꀮZϼ!&HGto\U!Vqp--;Ni=q "zIĄ8"hKAYr'" Rfќ"t#ESu6>;@|> xgPT` 5QG攮Oȹ|XFF@ cUF6B46Иl1rM8%U1wjo2s>Mkt05g^?|]"%٬U&I!}Ɛ-/.DCI; "70Q6؝mF`قmQ7-w;S2<3,*}3 ku4ȱ:.h':-4TD +d& &ij" 2`lTǞ$ RI@H'Y<%x)xڋ֗k7sU@,Fe)XβL)}؊ g_8+u5(UfQ̝eC)%CoMگSz")=0NI(WC!{R/W]%L?ș"FH!Ry-G1IT-U\ˌ4̓"xTIꦾ"v&M8Aݘ4CDP^X$fQQCN2\khPY~& 5C/nX9H\tgӹ5:G$㨃X0xu?1p6We3ES|dcߏP|,ncpQ?J䮕^Lt_6ɺd/C 9Z 8"`l哊>Xw5DPg{cǐv Ei¢ZR}D74OYwpZS&[E=*Ǻ_ewgڧGwbɖ:f?, wBLЬGmZs*Nl: `)(KRƉʡd 9y'nґnGcsKh;oOtRdz#s?yLQocG3) PttFe  FZZW2sa+"5Y?-/ =XGp@Q$D5I2neL"laVx@ԮӖ8#i͉4]hpy6FajAmthW/B+ї:Q@y&Q @KQ% )ȝSW`U 5 IM"D%>.P=O5*xc7| 4Ӝo T $fu}W<8CTСӲ(M>8"NVS]mÃ[XDﴡA!m@jƅWށWBQ\q,OXM332!/\)^ld3Iޚ$w%2`V@瓚>Х=WP0@j4NiIߛwA]p8S>E,otƄQIO`ӼOwɝ)qZ貖DaȬP(1 Av?ΪpmM2m6m-h>Wn?qsD:WmyRL8а=42O^Q\VK2Vݜ- !3 pmĂTMzi 9k]XRs( .n6Uym c[f,s'&l$92Y?a9il6o͜m@L TĴˮN}lBWG-p2c1{EP1n}H]Cde|&ȥS| yVլbҐf>+ȭZb=jpt^,:;?Wkgβa(Y5=cL0yNM e1ovSL(Kn:dŐ!1K!s_ɮ tn@EJ3\h+ [Ŝ߮F$#M4irsԆ@(8GM/jk*#X1<lW5dcvb@]y=j9rSJw PY9G)^>K}Xyz1ueo2 x-<RY` bAҭQ.|Ža[j +]ZndM9+~I"9ZRqyXҥ\DDTi.7/Eݸ1@ 3ј wqgcl%JYю{0Ȝjo.[:w(/DV}=ppLYtRM8$1n10ޜ͟wo&"=Ev! k -E4MWtL YC_/mTNNjٺ/}ϛC> |{PF"O.3&v3LM $Uj^Mn0f%!eۀA!G-iҳ͐9G)R{iIi{ VjXNR׮Z6tMM%<9'23zN#쑳_IhȇJ5C = n+emV ep-lZKڑԷ$*AIkZO N8IWü"9(f5j矰DVqMPXzI@+t,_A%Abi̷H,C\!ȯ8cW94as[#ltĵPi>16FcXw08@X7 n燅k0~ e[ q!߅6FﾛTҫOL-x+#;0O28%=ZKskY?O7)SJ~~zIf`Yٞ.qf8ނNeEE'RG9µ]8sH R&zlߧÝw'RQ ԿT7 Xr@F/0a/S<ԭfM`%- 襰*ʹy 9# (UaI\ʍe3?u=EE1Sn/yYkk"ȾeҺq. JkrmB32NZ҂*hbY{€$^4!VzѲ[t8D#0Dr(ح{ C1kWǻ'm$`+ij2=ECŞq&5}E/i(;~i3F >mGOȾ\XP$P,!ehtaK.uB?(s4$ _Εe,݇Kџ`ۼxȊzu+lBܛx1t#`)b #CDC@Vsi6,JݣT|yza[pVLO9!}'\Q3&)'Gr^pXqpӲOD+M(zFk B9C>;CwA ;"ׂ<6{ϯAʟ{&.L~Us0cr25'\=2uyۣ@=g6oAyAxbm'S 9`sȔ y/IJ@ ˲(1jܚ X{ɴ+ fUHxLpR}%cx<cJ 6V4gMQIc3sw4zk$9?@KP۰zƟDXHf--'u^%`B|C?9ݚ^^b'΋̝tj(P'٤e/J5+ilbc1efn"C}E> PʯDƘN=O.&v{֔DnR[b'osXR# Κ}[KGq^$ʩvcp3oQK7ߜ6P<݌5]0S% UF`O\D $B>z_>84Ζ45~5\^ҢD/U@Ca㠡'?fYx#.ߝ-p` =&Go}և%W=QS07۩+Iܑc%QYY*yea*+x]W*y%%b&%RV\ VGH&ypSiJRѝwγ @㛴Eʟ{3I( DȆN. k>GÐ@d HXf"Sz&>3+]@.A",/_ I(`e"¡#h0~ٟM~sisKѕXgv^~=]s9ΒEt]޹/:>۟A13KhOJp@3@*\Ȯ#v=Zd䜆Sk9^8w fOYI`+\9E91. ^❰Po^+8h1!(ڦDgJؠ(&Yɂ4N(=$Q:OڌU|hOJ36l /0lU,mڞ M/Wk 0a-8 1y*ڂreNEUAGyգ’x(9Lh_tí2Nz =@@~(,:6xN:Ct1y#R(Ln Z+T| Ml풊SLY5CA?K}Gq5Y8BOh~ߚ8g?9Km3 f Bv ҇ԨWs&F:VSdU<%1a'CۇL򜮔/ 3";+Vf*$hIlĵ!xt+?:M nl0Q[@ Q~P7/רaIk&TAg1pi joy?{@Qb*^5s4>9 6 v{Yw&Kz8'#ߐ }o: Y؝fCl fP4'Eb[6-er;oQYȮ[f"i1 hfDdZciV^.BO+P_d^3Hdd<-kG]!ԂүWaճc.CdHa%**iXPPQ1hAa] d@ wՙ.IߺGHf:egKfj,,,\bQf8Rx=.4xNE^z'q޲L1/ײބGOÈ#F) ͈PP2mMo5bUH]_hbiތ%+rv, 1}>~R>LedZdZs2Mr=1ވ9K>?UZ՞+ qU5j0VD 0++%θU!gҰ֗c!or(zЩE'uv. nh$ɎHKf`t[4=XJu.tب틳*.|B2ϺF{xxxi ?۲[=QƋh-jG'Bր+ghEbƁAFvPrP:WVJ"AcPHgЍBi}zP}"Xd'|6M㎐L H l.F?7@| CZg\Kϛi6U,_o}hu~4m j@gg$*w-TU' c^)9pCa$]R o NҨ uH)Q[[7ZePIV @UtG4w\Px@9y09`xA.v<]xŷ̶%[cD8 e)z!n] `脞L v" .x@\Pk }4뱡 %g+0KeL3ei˂R 4 o[Z5 GKʔ:^c`Jsg@ݖl[Jq[Ug[~KـLpn]֖',g+i3#JPyg# E$۳.]"|mcFRJ$l$`$7I?V/W>vFl># ]3$CcP1 X& IcT-`l( azuE7?SW,;FJCB &ҞX롄JisN탇PYƔ#wfJO47K2#%SQ`Ia)w"Q?фg&d fh7[-R){*47L$_?#vx&E(,ƮlY뫚)~~czj5,$ C3a"Ӎr %<}ozɶ 6Ybg:io "L/f[rEW6[w쐦9< :uZob!ji.D2QO`\Z-ah3L?Q7Sylα,eUg$o#ny1 [pjtp($b' H3F$u8w`5Lj_-MU}ƨQ}'5UZ:Hŋ'ubyoA iCb ?q ? {\41.}rx!JWVmDج3[6OzAvvE6ik!^sGF:t]nD>m=qDngwmtg[B$(H:)2{HƺeנZmR qX%tooX.Rc'Pjj o j %͗Gt;_F:?%"Hfo^8\( nɨR%wP}ڬҳeDXq]2Uv0Bet> f]:yW1BTRTwq@LQ#Mnj`EfmED]6']HV;ˆ,DMϙ;' kZx6k g%`\eww{q0<ý@W\"Ŀ"t9^ e˿9zTPH7 M:a"/ד/h@Kfś0[I21MEe Y+c,F׼@d=uGL@DB~-BjdCk}'$6("k($mvܽ%b#GEjv*^j@뎌9UΰaFVAqZo<RВ=E5ciaEY}v܅[Xv8]F)Wp}Rd_ O5R7kfneyJ@j;v+Ar F"" UD*-c%NE)]"3JA%Tp) fQ=(^=Ra|u@w=Ro_mWo\Ico6jh}Iz;C;obq$c$~l>BѴ {{};e|<ܪ.pљ_M6-jIMhB+# qz1[ VX طBRc<: ɧb- vx%27Tm#޲T|4X7RcK^kXq14[ =1T{,<Ib%ړ3^,;IG̬\_4Ff2BFçB3.UǀM'nhV<ſ 62Y- JpӡZ,|ϙnl* :3+nEgq؟JguTWYMW0yՏ]@H }QԱG!O @2D$)ϮUR n('N:QDrGH`+3cC!on\1Ȉ? &HqDw "7o"5[t˜51|R˹)Ilљhn?3Pj_,(# %go㹵6͖f 9R{eS0+1 &ҜzI[rP xNCq.Jn{Ѐ`O69̛ Us& ןN{S`􄳢G<4kE04ھICNp`a@w .&YN1$迭a iDSa:mf=٧YXnE1.owח{ZbnC;R[TgTF{:|2д`n')7=b!nVO$A{F xe JC"d7, ma1s̡1Ѭ/NzЗ3RD4mmUɢ)RTxHҷECYM1N'/dT AYfvt!9[~8hc&*Ӫ.4 J %. ?O%v!$ʾ?)\2fYgO=#`4!o; sfZ03wn7p BO`wP*͢kC Z骤P(+ym\D: d\8o@ɍ#+2Y@8y䦗8ԎA.hQT>Lp n m!FUЄSkM L]b9HLBY6>WJWc)c /bi}5DVH05A:=i 7R!8h vf -K־ u_"J"jX4vӼgs,i3v Ȳs*'t'ozp騩$5E3~FqTR7[WS3|qPv?c~c/k)Z6Âc5G^݇ w1I1 eZXЌ \U{ӂF٦O, Yw3y.A B6=#Pau'tdޱ/Zj.zp ;ѻ  $)Y7fKk^ ݊\F S$415ρ4gʟ!ɵ#:qR}Trrc<~s([[ >#^%'JoG ٖnlO*qU~uUm9j$XzD%WhvyGў3B@QUʃIIN[xoeJE`hj5S@ɂMҬk` =̕e(ۅ% C`f6hITngkafcSs2a*=8ԇ3W\rI|2ݼHY5ܕY^HΟ([r59O9 ; )+|0Q8iE<~HvL2*3'Vfmwoy|Yf+HR4_"H\\:4[Zl3wXm }B/8jV%;îB"^ָ3׌Cvqjދ8SE ͷDζ|.XJuso~85/df95LK:\7VxШ&/ >)0/+C6jhjSGMƱ !MO~DjյZl>4w]B]FyIϜ&+1MQqdYBQ96߁I_ sBt6ٯ7McjzZʍPbY1jv!rSvLU=7Xd?hgMP @B15$ ,,M& AOnA8\R°3ǏN>5jmIN,UhB ^M}U4KM^r7=(,!f_5qPob.FkI.;TD-ܩdY''Z0>G8̀ٝA%WA?A7Y|w2nBt6/HE1>gNx%lU[ưXrl}ZsK\-07|GcyWr怄j<Oʋ]hV>}bFaX54ƶy>8Hq7; Rguf] B{l!.!熘 ]1H.IP<~(pvT^ǖe/@L+q4Δ53cJH#`1I|BWT9;O!x3 ly*m.rvQs`NtfPSBX8)DlX\fW*k9b"GQ,0I& "(>ҨkVuڦA:^]pN8 K\O tC2jóL gɚxy5^4H.xf@.؞ oV`'aTg52Xɚ;"^.; YԊ4^Jr5t-R-*uQ-{$P -:hZJ^lbd 85Dniԋ٣";o`4izڞn'{plQr\MWPޘ G@("#WĞ3 ȷ' f"~[3=ʚSu,_kht1xVQ⁁G?h@-~x?yh xLwR*j^Ik)wsQK<֋:ʖV xZ\1ץh%NMȌ>IӀ;j!v]g#M(6'MOL>q3Ca~n\_:usٍLCLκ|ӲuUQ*2+G*?(H]?.筆ߘV $#,呌xn[SU[(7 "k0|IxL%~?tm1‘_H.BL>oYŠ-4c6S-F8HEdh̘@Jؾ&JVGwB4KrYWyY#睾*->D>N &:pL)8Ma1`;߷. Pxq9uUlNsP}s}fr4DSNlvPĐ:\Wվ'Ql['wTR8FV!|H:W|ާF&g7)AlTh|xR B5X K~#op 'OI\sBod&E 13hZDY0nCh Aq~iSu5q]`RnS8/]PTf6&$b\=L1y<Fg?5mF,qLvHXW${3F:~I 0 MCEQRUsRXӝ֙6M] ΅p01%;b۵5!V3;.N|/cm5jN=!(Li*^Qܐ2ʪ![x`x}Zx<7eΞSG&$̨?oJOkACU8=L͓;>,-OV?3.0Z5OoP>s ˍ3U3MQw^[bؑx٦B8E-PC~Cd7qHhxkgLrUpZŝlzRhH Wf.ntM >G/AD~jlgA>ayDnN Gs{9 ٜLL Hj7iF* 9`)It εzx I.hvuC$2-G9ڦy;q >MVOI&ft9ݠ}v}G|\<\$C x||6'V֭K'?OA'xQ+3e|r 92 D&}  ?!9CS `1H(ǔ {#iS٪ro+ޤ@) c7&( -Eˏz-"OD0MX"'3S%6(u|ZԢ")|3+Z9W%e2龉>~# Ź]d$׳K9s-|%N_jo*dZN3_NJQǿ}> ^Su:~d;B@X$Ne/ptdA=:5n …sksZ& ;e`GaC}SKH,6,T!`VjD)𧕧1jbR%BDфTE+Dp3u>6[aV͎r"$q FMHU YVyTSS: CHy1$ ͞:N`;MMuCQ<7rJW]_OhpJf^4{n3rSIX9ng9<: qc)m2 o j<~ԖOCcu$89ͮz->LAqfgVu%h9\)+l<`e֒Ep00LDJ C{d-Y:anƒlK}΄LKJݛT _d g t0eq$ώMγһtDT07puC|н-NڟGV)8y;~ ;/p{MQ{MBf;*qƩ"{+7܉Gg4d#j=+BSR|} )WG/.*]p! Ja7E!w[Rgc/sTS#%A|`7B7y-T;U B$j%)y`);TGcJO~p؍VG~`wd޸֛SUDZ #61;B/ *AIՅ \Bd(F.ůE6 * ،쇋e%WfCNrY`U/f1xR׏[[[aI)JtyiuسHSW+(9NުghAmoi/MDݼ?wFkQy5GF Us A_g&'x =Bh//f4W';GBm%ktdV%4P|UzO$%&^"XABUR%o+/[{õ;/ZX.S{`˹c|ST%P,愣\@hBQR|<ԟiw D<%/fr2s%ԅm?>uQhɮ~̌_札v~QZg4FΚc%e̒u+ (;^;0Q=/a+4+Ǥ_r!렪Zdt+<=1 ~Oj5#p0mP]ǛJ5*XdN3qd/ؾA?ɨU/U+e3>w0h4=h0&$}9HPPƉȹV*݃=(VuI ɌZVԾUk;c+o&EvtVo0cT/ϭKAb@aN1S#"^R1}ol씎= ysg{qVin CCf3=$Z gg{uzcYV;c&0lK9ߣCTr >aVleO;TFL:LyŒֳRaT [Ei(r=c]snV IJh>y&k'K&Ά$g`φ;ZwZ(KB*%72;n`t0¢l.Gsݴ47bNGāT:W$09[%yΕ_E]&mk+?z )<ɝj+-֮#F )Jiڥ@ض!TwCC΍b(~j؃r }'}hBj\ b)b}l( vRX"B=v^l<Ȓj܁I`(I\>H9^OVj`bJeJ+LF<ȍ%~'RaZӾH]ՃPur"9'L|ٝ7X9`]3(Z, lm5*m vm9q(OTR5_m/ NEo*{F@~9`RSg;pJPm Csga+S7L7tkxA`P6 rv:+WoȽݾ/Γ GzJkBGj)& aLw~xJ%,Du*bM(eЛcP͌s|մ'agl^a쪇.FSP{* ϷE|6H!w06mbJ>e>w+)^KyGwۘ2`RnV8lvU{3'! G6zHsnZ7="δc4A;ҏlzمff=@4Bw){c1xI8B7Vkh lb2xg9/ҙ _P1D.ǜN,׶hh'2ܤL)I3rxS$&EM}91;-Ӫ*^`eXb'fv k7u [۔r:QJDZ`]o27{=9ɎJ2dv1V`_RIl{\ⷶgSr}KfU$c}ŏhj xmi̲&C|yA?1Y,SsBf8iЩ*z,m%R68R5;9F: !XM\07yW'̷E*eX^,$`+.FF>!2HY>RdM1V"ـDE.W͙[m 2RS>+E2[#Ŏ 0&Dy LZ$T,5m6ah^z9F{ wNpǼrv [3vwGŦ`^b+p{+i·?} TȈZ EQۨM r/:#:J#~QolU|~^C޺g/)\Y~"J1 8<`\eE Dtկa\|,Fj??cg =bs|VQX"ti6b<ş*K5_c~'C4Tl+g-y!b9-(ttioa>'a ;!qu5b*_#Z(W-I?CT zuPfhERY7@Մ\<wM%w_Tb \=_4͝LU ēCZPj(%E:Pօ4=Uc(lϜ Ǧ]4!c_|+l:1&ـoY+f4mf?y 4^ϔH&z/W7֣ŮD-3rJ%=,$u@T;z+,oGtL*zj7Xo=.NޑzZJD`1t;„.zPIybHSdO-$d!ULtr2*f6gar#}៛vSpj.'tv7{ 'ǣhWG u* );ЃbN(n0jMG)bxcY;$`9@Ye9[!&0*d)cș %{bd޷1J;{)B+LrA} z,!SA9=ab{> b,NB;/RڄP722'-bPY?(ߪOwrNF*V>.ð;["~r*eFtž_.08IZS@ M/L,(q;vont}DTUEs|BPV4@UkB)]LOYdDUhXahjO06Yun7S_ (0)CH_(Cd3,ѹRuK<J@i 9 zơ1eq՝ CF6*NoWqv"qQvRBP(8_H6aF){;}pz*#D]2Lo2`S*Tcf'cH,ݰ6Y++b2V̳ tt{ve YQGO:hrZR@(p2FH#rVeγ$5)K|T*0oV;>_xN{p{ +kTJe2ږҚњE~S4(1)Vnr灠8M^f-D:e:"t*yK`{ s*z0heAi+MC;@?Cjdb#0t9:pK[7\e9tӧ.d MXfJ*VHnst >^(^T<׷ Xf]9 &4\;=jTeh҄)EڋNxơNyrB ewogd7u{rNI ~no2N2QTXN4yƐV)-'9.1T Ҡ*AMX7fxʯm\&yfCLc)5h(~D6QpNX#6_Ǜیfq8Ț0Cܡ{晜т>`6]ꐇcŸȞ,InGWfA7XUAyW?~7ddWS+u)n@<*;D igM$8슔HwR .8 o~.7 &bum]t|g hr3HX&:#9]f DH%&W. nGmZ2dMQhƞ9 fZmR0׮yzNc5roW]^8YJ͙P'h6]>2o+gښkY4cvRM&b *_!6wu#@1Ĩ5@Ee:' K?W֏<Ľ gS~ҏ{tAW!T驲w3mdbV㶾ul OIy<T3ʓHlI}j\*VTsf&uaS7&%srFrXSړoeT~NU%BzC9ab4S o2|쌎}*V4T" 73K>56kv)+.krO09MZOKurȸ:ĕTJHj{2?Eζ؃o!PǓ^Ru9v.|ˠf^(긠ʯo]R ` ~57TͱpM1Z 6Zi3fs8tE%uXT ZiA  dž\v!Ӹ dMZ:o%MrGBXɟ b4#܎ᮠUى,6&gd$ag*K WWTjYN r:œH{@3+`$A\6'ir+ⷜ ek"+[\%ȴt\8e0mluԐ&,Ƕw0lN$ *9^1+)fPW8,aӰ(oal> .PɮLWyY[kk>pN}\6oFRR=[t 9~|U>pT݄Y:@dYsL Qc)d0:q(߃k jfl=rJ_zv5Oog9 d<۷(;KT9F6p(a@ϥ'~,qH9D.α4BlM+@:;MLj ^tEEq֔CjYxC^~b?XF}kMejP3u BuI+C_(n9n=zIgw.ї*]ckA29q]^͇o#&Aq*@+"K?-HHwqΙ}~[+8Ib& lؾ gk)$ߣ ΣĜuP D̶GwQس7hӚ*Fj4՚tF|5t}[:"M|.2:xӐS} %~fku!Iq ?6p~"e_8rXBr= CERs)Š%L˞%.AFZ*yGjF-Nu"D4n;&|?h4u%L.#LUWH-҉̼EȅvX>uugoAh+t1 '2$EQRh}%},fxlY+.RQkߩ+` y0Dg \EXNi*!xpBa$J͎!Jr?>T[FoEF%6a>-$e$Y}D#w[u'C2JrqPQrcn= Jtl잌ϝ] Я~iK:i _P 3ce5Aq&wZ[(|Fag"D[D{JKC@Ƶ ö떲+ #>H!9*I,7(Ā 8o*^B|HU|nɱrRM0^? ?m{V1y~oXbhD7+iZwJjTdĖfZ;mH"$B0q*8z׭k~;Mv3kyH2?!D `:uPg @Qs@Hqm`cP[]CUVBUhK&k@'~FwN䡚dK FM|TvQvJvذ7)芒Z vz8d*0e A 8Gm;0A""Q4k _=X+wR2u8.* €L"xGD+$P;7$}cO[XIlVۦN#`u['yp'쿩ZɘH>=$u,1 {xb'AnpO%03Ԃ(.U"t ܜ{T=@ I܏N榭Y&jfK"R)@xT[Z>G&0޶/t fF`5!Cdy@8m@1tʴ1WSq3F:S|lS?x}m.:ӷ'K`ƑYY8|W%uS%Fڙ>YQYnaOw@8^S}\cg yUbXQ>94%88TbK1)aY]n=&jn؜gP ܛ$yAGm)tD}[$Õ7^ؿt^I298*c<|(=Wid&i}1NR݃+( 0^sTpbǘ&+ե'VKe1Q.8™1 'Я3o('YR詇LAig PV<(cgYF8b3auƨNUM\Wdw/Wy=5#ீ&NR[)b& IL gg"\˲s wS1ٽLˀwcݴ҈RE3]Ae߻:sؖ SůfeiR8:ګ Ah|!cvuFc^ݵ2jCT$wŤ#)bz\**WZ(2^,2'_4GT_{ƍv bdyf$O5w>P9='YXЪdj]GlmoҍzdT&7Mȳhiu1Jذ<6MT]bl!I6X:v1^ ;5Xh 6k?r`YΊvyYMCz=}ҒN&m_#n])q(6ۣ*x@W#mGJG3A®g <]3Q DD-;{M,a=j9.)׸)|6m"uÎQ]wt1UBׯn"4<@h>.E}=+mũpzU^BWuI7k_skC=V qsy/,N@pZ5sV~܍3}p -4ǭ'ZL SZ:e]=| Q~|"H#Mkh8h EUyYK?*£%1RhU}]~gfFٖENO^ Z%/k0OV6Z!qBo'c>0VԵIh6+5XPTWqsmodEnz+ɕ.#!AouĜMu[W1ͣ/>T=GFu>-ޭNa>[UB?VxhJC9Ü vE<{PW6 4Ԯ#>-z2`V!݆!{@J*,d]IV^meH3 Q{& "J$_idC2B?@<K 4L_;{Cs&}ԫZ#c8ͦT5塛4 w Y"^d`wÊ.`X3ᮉ-!b0ϡ& @d8mU'U}%bl ˚i1Pi<*uf% =8(^u \HL\Jx$(ɿ~ ]Y6*^A{Eo ::AkhP#x7>=e\.ULp. |DQV[*vЛ˃lggcW q˘*aD9^|DI}idԂ8qEaJ{Do3WOuWU)=$s w}Q2jHh/LҺ/|ٍyڰsQ1zћc+@Oa~kT0]W;/uzxA[#jZ-hQyoJz)).%s=7q.xD"Pb\lQEe2OU].o[ط_?eyG2G>MV\-x[Oy 8`^/B\1w(٩t%+m,- Ç^WkzBO_&8}_tn6X\F $<sjACgꝂ ƖoP8AGl-pg3FG7ؾCFD$>4ȑ${IXDcS5* =\\bU\&vNQKozy&,~nZ^y37CM){k44Ğh0x-= ?ރl@NBM!Ch?]h b>ݱӿ W+pмƿadT,BVmbns;]>7r'ts<8t) 4C45z ME\;T8AV| $0mO@7!/VizR rvy|yflոWż"ۥ{\}&݆z`{6`_0-zHb6oQ8uYuxCݸݐR R..鲐xB;UWvRF)B]ӫ CJʫſvw6<0=ė]'8CQY.gh5LL ce #s0YmF&_Zd--820%bGW u~cʖ# B y-5l#+]tүbxzPS@V/䧿"k:W3mi1Fj_D!g4:ґJo~z*̎&MIP9>wḒgK%l}D=dtiQ>kJ(17Pm+:ɀ{ )aY3;B.ϯuћP5YQ90l/FkiHBXc`^:x7*pz㙳Җ^k-UO 0̓$[e:Eܢu{gGo: +m )/ ܿ`/nGʛ1-> _~4B ¸UO%*eaݕ{*; I:.X7 !e> &f T%ROx`x3E, kɱ7'GWH_ihB Zp0H?,S&e3 l:lPQےA.K&y2Y9zɠ(ή3glfk!(0E36~Q$ +ь"]X=2=mD_ FȌ9;y9J`^8Ų/Lq/`8#_5^|Uhw8~q^RBPK]e&HnxA$q6% JJh>UaV6KN#SS=ǍEid5xD?H/G4d+e Zx*xaSʋNMw= ]l^ ΅e ԲNttmv{o`bDk Nk؂UΕLf@*>,^k,d~SrIBC!c^*guKWԸG^<.}gHHsLk;*g CYu6QCՈ;gAƴ;p4t;zvajXi"yiC5KیEy[C d H7[cj&NJ+@|MTԚEdKvVi$5zp\b*Fg@ V6'ߴ4&xWyC=K=]OYw((_1u}W]G?vd)wC6nݗ&@.-}БyRhEOWjz'hz&-8Bab~x-lDpuGB40fvqGXFn_.kOf cHydpo'=k Wzld)d}wanT=^e /|Tw~RrkԐ:LYojYuB@CD%ݐI)P`~N03eQ(T#!ξmB;$ޏ*a1F6#9A3,M[2|pzԲ1k(qS5 ԍD8 ?Ba͏]81۝]ݮOJo4ĈF3߯4,|sMb>"Lx^=P{T*pXp0 7+x^ >Xi{ VLI;Y2*fb͹b–P3I助O2C_O-[7AtIHqˈvpB,,šö׃b,#|V*/2I|{e!Jws}qN/gfSE9Ц+خF0M@/`BzlScvEb123`o2!F^E3'Aү=S#~C#SLxϼ5ٜVh''F[{3ߙ/?s}|jH^C<3R$g $PRat]({\Xr7eE]V;_6J7Y"a)?t]1}f$ ɯu Dxq/ut_ddǏ[o:\< C6ό~7ls- lz\F w?rAy%JܨcVp4qt` UiC7oJ~ӃM^t }˔fo% =a~Ѓ9h R;y|+圐&u&؁ja*n[IVdx!B}Q(?z v1 >]My_I7["uO_#|:.|B]:U “s‘ͼ)ϥhFεDQљ $ ߓ5k3Z㘀vq, Yb"oY1",oN6i\Y}WWKwb T0 >pSZλFX Poq~Rm'*úOZhC'?N1,`ybPs+B=%D*}"1o%>T jtgKv>rfwaBmep>Zznnȟ/K( BBn}}3H-+!IJb"b! <ݭNJ}7j' Ba0يX>wڙH$\ {H$_nlsG%XZ[@L ޮoԌVG)|yyV&ק({砐6TAJM/gc`\erT9ڎLGm< ;F 4?hOVLS!͇n%髄ڑ);RU+=-t qv +p?&l6dܠ@߀^a owAȉh*Fɲ0k;-2^rˀ'Qv4#BwkYHVnz+(ctqZ/;g6z `S+8xO'p|+FQ%Tz+BkK.A :0E!tvc͍c.u=JMfoYtk?ҀL:ŷ9+gKЀ'glsҠ#XD3't;nz@,lXݜ }g#lgFڈH[GAeؠ@i &| PbKQ:oeVgڻw97Κ ~KH9 JdOWRtti+wW 3iWA2aр#0*X"YÏʇNQ_^эt6mήx^K녩qGϻSLh,]QT>oWn9| wcAa*B(He`Ʋ02 )Ǵ:l>$3'2ii=''+\ gR$ Q0%Zxԏݦnm-%GN, U`.N ~­ >PZ]+`I-g>r#!) /[)9ӫ priåڧ$uayĽ#Z}E%G?Ne++Mj#l,$[*09|XO-s|0v/OʚDd/';%lR0i=$O]a6m)^r}0o'C4,bE~#fOEJ\ntfYj7݊>V$j~'TuC- wٷE9S؍>! dh T>+hB\q<|(*5ycJ'͢&;Icow?J:FvYV8EcmkDA"2@S(-E,@u h3hޭH;L!ܿз 8^:$AYXC:jG6Y]q\닼ϊDQ1Pk{{Hg,0YZ9-6$~ID"H$sTSx4X:&fb%t髀}Zƥ=ۅZ {(C4e{ҡqݛl `JkEh&˓Z*y %o᷍H\N?"YN+A:- l4ay%[z”}wc= &nhvKJnqQ`?mi98Bߛm=K_"ehU)4aL`j.SQZ:$|mYMWѷ%}"C;@V Y뼪ߞ9^zOSL+L_a˴|08UT w2;Nf17kKvbıh5'nl:r#jfO.4(nʁ8x>m@X49ҮTy ;Co$w)+ڎİq+-х]Ts//uL`(p{U "߬iwĄAu*f{ŀ*k+&ZODHP1_zZO_\Zc 8֢X.8P7'00NJt%ސ[R팶/iY t遑仍܁׎OW$n(5v7"fYwYJ2ȣMWW=$RO2L9&1qF>!Y2D#";elk?ȧ#9Na cg5asɵfڇ}Eɑx~d> KI!y#*3~!x; Ky(iqk^گ[Tg.p3r#1*uF*9U3wF>{gm[.D>džWAf#A(Ą*68r\|9Zaƹ À,M&c|fuԀnNGUH ~y2!z>_|Gǫ'Tt8Hppߩ -AcS:CͬEp%.DԊMVZL7zլox%EfL@7bۗ%K5r)n?FΕʎɓэ;[a(zb&̪b6,QzNQ2֥7_g^1. F9@4\ 16THkf֘U?ELg2eLw!I'sK ߆-H}]r b& a_0^C GH9\ I&Mt 8F? a]`+t&GqjP6szMS3ML"IN6u0.*):6YKCvR06-=Iӟ-S^)0'0J~ra6ؗ /,Ĕ4Ğ\QBHjZF\:p6 Eb77ڒiT-CVcEp2hI2֕zm9ryn/6g"6upRJ'O{γ[YMy:iu4),cMT TMdM>@ `'ֳiWTn#@jb7"XIg( v GEn sE2 QNW94U9+?~Ƀpװ'\`DE3E.cZڦx"3܀>)~DwM\BR2Ii|~} 0ϱ%?O09դTz6V蔭 ɽn{sb7*C`%JF6 9tJv/N߮QO x;858/NNJ@R\QmwFP|9c:po+̎k N#!H$c!0!i ۈcx6b )%u"nQw%*Lm EL@c߇jW9^vl}?$`4".Bz}^<豋?vRՉ9uaBºvf{'ץlEiq0+]6`6:BL'H.rP#xZ[[EhyKSrP+Rj_EiCJ,hL]6> D5ڏYrorPK4BC;G }n 8//BpA ^Ijk_cO3_Gf]<1B+x쉀4E7p2r%̆zÄ|?>HTG'+_hx룍눦q:HF}H~hMuRNWˎZ5~'!^lŷ~ :+ h}n{!9Bfµ2b-8v> {4إNZ>e,6ln۫c͆F6-2?q< CEIp?5#pmg$;' aā9S-$L=o.wf40`˵fޙ`?#y5E00ea<¥Ři*$y7$C7⩁|=`T;eW+eW1d_Ͱ~j&V]5l 4xtI' %QmĦp>[l_Cgd^^0+o'~VTm jVZџe&'M&3@ݞ)ete*VE}TBhDAPRmum29]2t+DFS_7t^̈́?ލC {lks^# fH0(JJw?r`(d.&7`dLF)~Wȃ,Yh؏y Q4t!Fq6`ו́{Zi-󓨉5#5IFkHÙ(|k'‹+aYϏwIÁΑyo MQ'zYcNRzSy{`R OVTjx cxdFi!ۏܘx%-FQɸ6zP(t$j4=ۡ4 RvoU;.~ SZ^'N<;Sa>f:<\نy'iIg>聣gޛЕz@'S(@s=Ag-T.uV^ED:JzʴE`w` 9D^l 1Dz|$~1ܫÓfj 'vX(-H9"S6{(&PrǎFLK?- S-?lg<%ii Pˡ3p_\qSmч/FY!jXEA:[sW.L-/#!VM\ՑHG( s%2G|hWJB@ŦtAfWbHbe`-F?dUJ]qȗ)x`DgVe_9U{Ƥ^lR >w$ʏT[JUR,ҒU1Kw`P8g!nu8)Pv49-xe\!i( tTjX>e"˔@pT\vwdD3;i3˜ PZw˼gT5kڰH}{a29@w0QR#l"1 =e2lQ ΤF[EP\  8]q̋}/{0SL*[[Co̱Z%:.\IS,'9,m[:J1qUS/(h9K)R~лZo/`yuUɫ}@+? P#C8|=T>mʒK =-ҹȤ=>ӟvWNKd8^I誄fSc_c3?m6Z2oYPz3a[J#l[\lI[|=C^WE=0:k-0J+u4HA1/u6IPݱz+zR3q_/5{,O@]6>~_؛-'%QEwCJ_f<_hA(';~K?B,k! s'PƹABpUUH:EH)S#&i3#OuQVyD*, ~4 0ɋUmvB2dwA O1`wy4͐"Է)eAzNu+T/-h;"&,]#g)0a`_\/)3B|tڈ91چ@K6&[7tE iSH30 2qbf7e1=Άea*"g|6 -!Vލ Kz04X)*YS1@>u%pɵKiCHx hCdQJ9;T~2^J*¸ BR!O幣% ˋ* с3Rys,2w4_ XZdu KmbFd.؎+[vb e?40O=B40nT ^Grց/KɎ|f|LХȫwCA\Jn~ G5TTd5j9{[!b7;)V7]yIq~l6L8"Q,q[?O`-+K`tF:|=סިh5g _"UJK,L.8?[A$hF:ޱZJs,W a<"6K叐&'9ؚrsJkߝdA f55M3x{8,c=GQq ”£3>U EnA3 ! "nNDPxd i{emK;p湌+~f+}ʷ;C8xؙ1Š`:Vlv;V矨Xٺ 6'K#{)>AHX4hw(|ͣ łi7:ꕅO~Z4zHUO7H2%}C'}戩 SY`J2[jcqh ,ӿ&V_KگA ˝mAgƓ\ߗhOvQ)?e7=~n^8>IEnqU'.cw&0Ű̢e. Cئ!nlzަ&Vz#| 熎E=pmPo"A7sA3չo xnɎ^0Ho]Zў<QN dK oO6g>C/(tcMm /b?inIHPm)'m BӧxxQ` »a<t~ϩK k:t0ye%Z6|>ցWhQہ~YKaI>Z=ފ$#ްGO6}*(Mgw*$9Z@/ Ժ_CBμ>l_s4dC zAs圉Y(En`C eћg)Edlć\%4[7 ' &4zhfPZz]eE,XB߸JVn@'r&RQ5GVyLFčͱc"};*C+;rÇ6 / Ձ!_sRl%l&;%NؒYc &!m;`"W˥=.`Koj`闊To/X|J&QS]Zc WԦӠ4c>f.Z8t^EPeΜp9{!8+> cSrNd:V5!8W3ޔK-\pʮ'-Tjz Ŏ;)"{Xv$2ر'R$wlzyIՆ%'.hqS3̥"N5}z;F aeZE'xDw6f:<pre_>:XJ^tG<`Y_:Q716Om&OWвt|I"cתǢ@kn(rGǭ{ RKI^{ьgdv^Չ4 Rrlo^dT$*^J慷%F& s«:w%ANC_Uu6YTUjU]KQmu]FP2gG1R_(2.Bj@qmH i2H^_F2KĂ>RvBRg/ז'7U#6h\(*!a P~5"~ ܦZ(䁄ygTKe ɞc)@'Y6kTRzE&*@MyEɠSPiBDHeq?DaTy,`" ;8[V%է>0xd~P2: h7*\#K@CTK>I2!dOwHW}l QZ +U ڬGS9A+` $.ic;cIpPИ 7QPռa-k H|vrBN8B`C_b&"FVL +@vܤ~4ft D]3NO.T{rG6nijLCgɲ12(aouU.GНx\γTLD{/@ޟHU7Qv"ҥThVVǴJ<`}d5}x_ia56˰8̱ Uu^spo=,ļPƀd4Hٿ#)7;nknjx4!DZYmmEQ-J@M0sYu!@BH;gaBBykEqk%t Ί2@wcR9 ,@b'Ii3r_qwˆ=5/)ɨZgM] L[ikUk ]G_7Ћ(kPA>ZZ8s͍H(/.7|i#,*k7?iN6;}f/QL3ftvږ$YTnk|dȅm:_Akh]D511|50SnJq҈+Ed}E^COkH{*+qtwCm&A'G렦|,]m`eC"'״4}SzT7SnqLPҸ{MkPV֪ AH8c咃c ~Y#] GdO2?w3qb8' kBj&ky.W`+<Vb'зVDsbu[vu@~v{_2OS5NOayw%g*-W'ƍŁV}y&`1y*t߮XiOv`̩ܞ;.O4X_‘:ve,%g52^= -N:vaC"rS?vr8R08s YڤgTGD1NUZ [qb; U]Ŧ.-oрߡ#6<Gu쭔3xg \jx 1z{ݼl^|zybz-Q]ӦE.U⓭f{lsxrN]a\qcGrj 'K*`Ʃ4XoFBL*`ÞcF+D]`(~!mV?!)8*Fjʞэx.̉Lg +- Ӑ,'dpMДy_Ƃ%Ʊ }GnG#.\^)yh1 1(9l+u޹MaIm&Wtq7[6Ae>0cCNȫT*!#TsFITooݿ+*ȷ[,ήFAF`_s< X8-FQ!w3]BEE,+.'1{vQ/FS@ ע*~=2-{2T\U3`{Pvɗ'kcK4VNͿP(15^w<Frspz Q-(U5K=nh ku GG6ԲrL!5,9w̼{%%mQJCxȞsJImoURQ b k?F6)&gY4aRR1Y~i-} >"8 09z3eM/ABE.-j=*}y }C.ڊ3 dכم/@(e?82Ʋ , JdbS%nZD-yZ2(G&,s)*siCܕQSP](cU{Z駩d ~Zn.TL<7jGC]Y#1kh)o9D4vAq[DvR)dQf"1#O.5 2k]rObny[fb1iI"307|>6l,CW"nF`²dUTy`Pe1 28]ۡuY405?Ih#J_7K1@sRE$b֜2 IH7u''vs^sAZrea_n.fH}pkPclE!O?A 'ɸFUy^ӖgS";XUW >nat9K{a:okae}R,<#Á2ZJY3Wsх%t4:<Ļ6I#_˷G:HM2M0RY¤,VF0|uI兟J%ix8p_@ea?OZ&ğw^gfxE`e?0ʝXoZ.qltꁾȓoҲe ?n=)BRE]2 a#R_f4c4Kq zlf Toa4寮k|?Y{ۂ|sCC6n,-bdc.Y>& ahyi ĸ gJqnus]DKUt`a* ( aY l9PDobi@(R"b{ V#gX}bg4s뺨6Cj ލ\>{~U՘?W꿻?ҳбLqp5g9^H>^\1YiVg76ir_`+%!\+6x)SMFxVo\%"4ǒ"J_ EtZZXO%Xڻ8eֲD¯s"-`R|,%klpma \(r RR]5{PeNmqxYٝ% axzjP;WR]K cLb?FJ^-s.[Wqc^gv: .GJEdIFB. L,=vc8]h wf|fͲYASTw8p_xm*k<]|7+چ4}}dm&ZO\HyEZy3PPȻ;tW+ɭ >l ̨+vXŎn&,3[<>DPб 1PYjtg>R > c9">;Fk9Z[Flq<тvAh-c?)ixwowڸQ&L]Hu #tp6_dLo+) yDϷ`=^%c黤0W&30? :N4$tOJ=]z =èշC,K ޘBgw`| ָ7ӰSgeZzJjEhUb׭$//!`/#갖ޤf^KMU5 w>(->F^/ ĝc5YGE*~3Zic`Xٙգ-G%-Nzy|w5[Apʐ7X0[Tr͞˔ölųTS q_q#DD}`"\|mhm}ÑG+ 5t7yxOy{DRC*Z;V}C%Է$RjY`ϕ 8bomc~Vd:A 1ڞ?ʥ,Yϕ+EO;J'jcQ{7P?; nk?s5cvaQ-f͕B1V'  {;QRc.sݯHr$x5s`7v&.?BSd`pL z4XF C~xcH*zj[(MgL5%t݊׶oyqvssnH.ժ&({MsAEv? T86P4W>&{υ$>`J$/+ګ#ϥxJ߷oC3ZJQF ޣ0 v&ic}ňBl#5%g^L.G*IkFMqQf.B8f+spxa[Nə͵VzuҎebQN5qXKC*V$ -?O50ުDDfV  qn23/#" +-b;bk^_+ĝX_eA!s0cP d"gR抟T<2BC+S `n+DqE_W#ɇ˻%_`y+8fH5 p#]ac>Jy0y}ahXF+ c̾G)<]z[LMϷpphɠ`p>˘N~$h Kj;MJy砷5kgTc1B n̋*{Q>g>EV0:vY+y Jݧn~EnH|6O)ɌgpE J۾U@&ӷ`cYn?[*f:j,h9[#DЗ!uݤIaQT(M] <رwsYD7I fs5~߈>!)8Sl*/!`(gHojw;l#VpV,k4FA~PÀ;o;gL/chXHi{{I\q/DL􍷎؃:Yņ2-=nI$=Jvp@k}m2 #mvF{*yd rÚ<*9z'"dgNUK;MǔY[(øbS$0)+۷Ǽvf $RIS'\{Gkc&?b" l̀綪≝>Y3. a=FhTdϙj%RLW ^@hCVȫRG1f5y`P!;dV4gwLY0+~1ne({}s?O"M/ʗ̯b;X}?:pG05+°웘5?ݤU 9ytw zdaAXA5p7[NtEBםeT]粀c{ (JԤ35cFKZ;B' -Gf_,>Nŝq: VT  Mj.Cp^*-mnPKga]V$0Z G΂v}@w|L5.!dB+EH 17hw;%#YD'|^96 f=%bbvk[zNg$h½S8Ӽ[q fQd#%br/**%<#O A|,ERitv|A!8λjRsw8C %-Huw/]:x¡0&QO-x}se&ZFښ#ΔqG,oRu^K{F6?S{kɤd{/H٫Y B.N6ΤE:o,*zJ I<2^kHȭ݁1W -BjFƈacU$Y눥6-d7!%0ל>lTDso~fQsRR/3hcIWs{0>mSٮ f4yV8οKk>JB:{AN3}[o-^5ۦS*y8B[⮍䢍xXPsc w@a4HM)}(zƻŻ<{ \a "9 * ٳh/B.HNը*$)fdUe0:)+NM< fw,rgPoG ]G>2Mj`1>pM%\Y IQ ص G6+4b+pP.i. D2T mi;U] e[Cr<ӊEq,Qj-9Uxm|Ux檌Hfx:Of,39'Oif_;0g?_`jٷQzݘ~`L0FPYm`:81#=ʃXX41iZȢpڭzNWHy#q;%~F }g8ky*mYU1Jݗc7ޗ]&Aъ]:3"}0 CKAh^)B eHBLU2,ԅWG&$τHEeAOYїhPpޛ$y8ϪgGGwmSu}몟@1< &gUo1(Kѡs6&;U ax/׈S5 6|}ŵKWuݍ+$Eu(m1~V6O{ҽ奷eT5)A䠚9ߕ>` _ōh,lAejE8H#myK3F /V.iT ֶG|'֖(2TVr`]vU|^ʠ91)?= g~?9 i0챆CWI͈}w==xPHs_ :5? >N3vEÓ,w֫s,3V/s" $ڶvwKշ]D%NL0#&`d4ǐup@%yM\g ,W\BqvM(kԊkJ֕({J}D$Z ㈕6ɳ:C,s/`6"n8<`n+ Wb@I*˘Pg kK@7x1j>fYE1rMR%Ɉs 3Rh ֵyyrޫk#7VtO3#ğ&%HFåjKs1A֥ZȿVuՠ}xE D.GABd)n"aRh tKh73#֜)\bI6t4,(|/ZcT| Nd RơH5<:k|+a+GKts*uzLp}۞w "?E$ˇ-.^(z1Y4VӱkmaL-k=2%o2ܵhp2r "r3,(@: (ՠ5(n;Qhxc FzӢJ}6h W!-a@̜ m,d`[IѨe _0Xiϖ|X^7^lhLz.1&E=$O$kP$a;%^)5.r3] .Tl46 x4-T Z>6*V$zWcP{jχsדxMC̱#1<.nkA;TЃ& J[׉HRǧt3"թ] !MI`n#F!$a4ڙ_ÆG&|Ђ-_ mo)@ l 䶖~UB e~ %!GGd/  Vj)trAzWj*`~PVC[((As'TWgnҽ߸ }V묄RPI.@ l*'^1{#.xQ9q)qA}*"GQTia9Yi=_;w49KXBsh éUX#3˵V;烰u齗PzC * 7^%cߊ[U\R2{:"^.:=`i̴6ל@2z"K9_.?r{3wNתVCpMKDMswJ`BgdReɓ(-fy_F֭Ǻ9{ruDz:$]1Xcrؔk572t8Gj9'#7\a@cm(2EvPAV},*pM|Ys2f*C<(SEDy746MHN/:tk2M5lLbs:]ߪ%( (-Gp Fi5 iMD 3˷,SۇQ1 *O:V3W29ho}o~$k`)pXʻ3h saH1̯;EY|w"EdR!`Qexl @ep:'է?Z!Xi% fNq``$x|B,#zމT鋨J !@u2#+ {/}8K]*KnHw3UX'0 R;L׷=sy |bަ9R2&nK~`6h.KW٧ {E`-|Q_z\;R]'ڋ@bFf!ٔqi;b*7 |MJ | PLYxH |MKis=EP*٧fur0]>m~L7'cGrV!2##kR XX*H-*H.t֔A_+D "8Tx4 k79HA^~VdA7s d\4|tJ"6D$cxUcྨlb_KGxH!LzjI Z9|r{+Ԯ _gKb{OsYV=[4Vp AֈgЇx8UA(M>RU2ͅص(b0-b堽!vXHF@6B.ج3]-n}Z 4c]:x Rs̼Ip-/Ao5?Y Ix?0 Z%V4dXƌϳK&SkǷW{.Vo/XK>?nЏ8t;1H->($ +ѽ[2Zaz.+GtQ1",t9i(-0Ө5J%nȦed>j'GREv~NkJH/亙%鞾s9붥Y7y;6Vqo6˨e'Eљ!0K!wi_Cb#BPIC#*4M?XuN0x9WumMcduԐJwA?vpdQ $p\ri%sc7uՈc(f;~N: "nk;},]vu& ^G!rƆJ]2J @%SEN(e@"͹SrS^&.kρVKyq'- =*2O]`+CzaE9Jg4jDCxq&ߔKפhb@Ρo^$o#'z{& mQ\hbwVx(=ٽ࡝}-:wzVAvx(RlY2: iK[&ۺs)Q(GrLT +| C+fA6B+س n4 k.{ "w}܋P6HzhTB$XXϠ`?ITm@8u (E!1/QWU}MySc-My]XJq5F8\5 :,יA#H/6hI2n:̭%x`8$2|a:Uc(-!,A-B:S S`\^K󦈶do~L1 `^1WxIK[-yft5Uu$sqҍcAjpF}">ecZC'-]]^>$5%|G3d^2ZԤެD_+y rRhfL-^*fHk3"7%1?yd:jD"Q;-jfOBJZUWGI<zbޥ$<{jξ  hF* u{$#8eTS9?]< Tx|5+eڃUn>)@O,ϢRn&W.YG/fi :8cg|OZFOƞJHx$'妭ڤBx0-5촥re"˓|(w_EHoN@X=@qeˣ#|L8, ĩIZy$}z>[8$Rz$FE[B[B9 S:Ċ3^jW" Çs=fPO[f|Z± h oC߀葴l]j+h8M&bJS-<8lcLƓUpe|J- .>A3.={D=M֥G4G#gc߮xbtO>➟0ͿuQLF^L/ƈDvTAǟʆ0@V׮6<8ʞ>{2  ̷^1{|N?L1@Q KBc 8/W,*ﵧA~ W.>`C1 qƋъQzhVU*Oyݯ}M 09vj®b8VS{x_k[Wh:iWIc@<:.*a}΍/%?IDŸU.lԦ0 t s"$}q(!o/˓? dv}+M@BgmL]uyecY *AF2[q}h}LJrv7&l0V`ap%uٖ?`r영}[ Q}(  +ll]r_O /r=; >XA*s/mfw qU^|a:3eُ&q@qo&d) '=d sΛ>C;vّ|PؐMcPH$EG~%^uOdt[4y&CH#ޑ)[?N >\Uh' }וwBzV׮AH|8eݘXK-Sn}AAwgWM)F _a}ɶZLyDIOMs@ە"0 5]U)R +O}ǫ> YY࣭Z)qWvT%&,ț{A2dV 0Y@q צ7o0ERkLtR˰vn{O{4 w#9OA7d40 i4"'TB!tFK 7VI+1eIiJ^|4t&t'tX>i,M]xܗI=w٨lcT(%^fRtjU> hBO)MDyy+' },#R☸gDĄKN)9wu5fyؼL巍˥"tF3h4/_> ,- Eݵ,1^6{{цP7q.csZR-'ۜcϳ8-N pDLT0CjLv6jh|908\bMDn#hR44ڞh?j"oADy&2j"ﱰ ֧#AVKTɚ?'ѣNӬ:Ҵ7hy]RaoO^G] waT)5$`Xv<($w~qB d?T^1fkvCoܔ@}TIe+qXILFIJvV.=s0/kw^qE&# MnKƇ]#Iڜ xz1w?/}ժr93'Na<(pxuRƳ)Pj TiL1 C0 6*2A lBY&4#"zF}/6l}2MNJjNݲFAM" m# ,Y]4{}7ߓ$EJ #Sh8i2]ˆ1ĺ/LvEup/:3aP<=pPz_E q0857b#TQd"a/JMpǪ>iAlt}9wJL:9Xo v4Եzyg(b )֊d >n'(S("&V;v*c>,ujC'1KlK9/K:n7t!`pdXJxj*ڳ{y= Of4x<J8j6:Y- ql%19ȝIց_jCz 8ni:Μ G}xPHܬ٣]]ZClKz>> e6+IQPuewC"F1rKE,h4zֶޅ۩L7F d\MryeDtcM8(FjHG׸a-IQ;޺܃MjjD~ jF;i?#5r)&p4<6drK(ܼ2U /VdJIDeNeKq!O1yS~0-ARLECZ$ڟ b9 <_utJDU³peeUЭ|͈96/HD5n00w5$2 2cg\~cP2CoY79jCҾ%(ЇV/YZeAnb@wJ٭jŖgxWwhPZ hx g?G cmi!R4MT$QٜvSX"ytžqү,B77vQ07YQ*L**򊷴6̑nHଝ2wMz-b܁D:u1ZZ~(Ah?o8&?r_|x[(RѴ7Ʈ>7Ox1ɡO?:Sx%<.ߩ`jXl7P|C\eH,wxRuR ̃1;k3>os" }| C_W%W_?vq1lpAj1*Rzт"x[R_R2!QX;Pyf4&>S#MehLFtbyE41^7.' B 1*a9-=@(C!h >%i󠷜Y^~ hw$y]FG&Lvi>zBn|%ᠻ)@ke$ajad)r lO4hE,Gt>)ګDg ݳ\ fPtlc4ZV-CWd\]#{lOΛ^RO`w!AlUCEJlM7>8lr3j]F܌P1unCHVfPWajڬBRcK;W:_=0ux) Pz"Z2R$Q>ЁvƸ*9t^Kf׻FxvKܟ!\CQ;״;!4 ގ Qq4MEɄ*ZO>!C\fE#!yH(=JxyflAOj*M*6DŽkd\B@ sQfA=\Kef}vP0QѿH_?y4X"r85BRqmso:^JQ*7}Mt=1n!k[ RΚ, [D*0)¯j W434?ʼn1 5Ƴ"ɣM_b Hݙ)8p@v*(nVX_;qǹ[i7_J\"|3Uҗ3茫~0eAcUC.| fD/QeھS<<|bg?ExeN( 0o@T+(}z$ڇ#Jk@o԰kE8#FXA(oY () mv/\,_+ rAxßkm͎UmskL#|X̰TJ7kVZ`Cq+ɇ)֗s0Y+F) P* QaɪPYPL}WqH[rM?cDf etΑ" vkaUHKtcRG!@' Dng◺Xw}jQ꒟ҮڸP$k[9,$ٙrޯ3Kgi 1Hl(LKbc{o \q[NDRdȷ+4諪R8|Kc|!8:e4?4IX (Z"\*cשY#ZNcNScײr97/HJ; ZF4s#1oՂE5 a2jNf1:H+k5 ltSKM'!y&[䕩Cw=50hv=bp׼6BE"mKN[v7|bvݶ')N}L%Si@:x,Olj߯n%%|Z_U Ps Ա"pw<ȠL2on.ˡtX~o %Gw֡c~@ 9\L`ѼErx6MNFw(ޤSK&3P{]Mݕ YЦ'MR=hxN|E];_Պ(k 8P 5 o|̜8pM!$I^]f .f R\ʛ| 3ʪn. M4Ɵ2=G˪ܸK0{Lx^zLq v!# ;n7aWPܑ`"@BP3]B!Y"vհEG;N8r%a\Xs"֩D)Y"<=lYKAEO9]*5{w4'BK_#̶i4_.?Ky5LԺIU4ٰTU֨W0U-#sX܈[#].JHКS y _oK ɎK0嬈LvZ\5F~1۰822N!K8Լ +Z3ڭb1 #Gg=Pd U>xnW;Ƿw$$RS:@@sX}4a sgJ:FPN:V#Xs~6K{zj`}ٟGfB.ZP Ĥ+c!# AH&ʛ ĞNRWw5&}" x{/uY[m^Bc`\%^q  Fɛ 懛ʓ,_͝Op5E~p$E lp&ٌEQG^Cx}KVN}$l XO뭙ϪsF>,ƯnS~Y(v`iEPd=tI[[Ep 8k׿#-`cb^MMaT9w+Ola$C'򵅜C 3&v☧?}+Φ! ă^XdA&|G j)KG3T̻`*`J翄[:Ltl6"UL]ERmy%>ݎWOm#H1%h,k{k_o PQD_U?AЧJ;x;H:C]zL;* ޣl-]`yGFKH1@ŕ1~w8=VUfcβ[A+n4VJ]^ڬ]]`JtMG9tRrBZEF+hp7ZПH\p&GnFo!&M)CnG.b9m~" fy6r,C0+[i/c@BzqvjeUM%\UԷuLH*,hg+Y}]wj[`!4#k`nYhB)f n^/cp bCRG ҋ4Wޟ1՘h6֓p-!n~H`A ύgȫP[lW5pHC'o3s߉\ƭ2=(! a[yE挹R倹4, %'>~gV*&x18 %r-7[5jkK[nY7'b98BcLq|O^s:/(oDbƓYX6ᐖ(K6/ rmqv/tV*7dCi.zr \4PP> T9jFּQa~FB*"|YHOF/3HJOx].<;1Qי+^ شn-1;sӇUB X{.8!|rt1YPCmFzS2-g\ T${5H7%r43Kcr_9KN6Pռ$ (^s>lɉ0 m-ׁ:ٻs:7-b* {?Lfp,rAۢ)fH19 xO9 "T鶮b9sě:7oU=֙%[NNyqΔ}ow®Luk czC9+yn[.?T7J{dqy\vjtÊ0SL!M/1cC40{e (`ĥbFsE.QltعEPwBtGʙ(+lXƖc$wyQsF}]2-{[|Ә8~5OTEPs\q\W+ʼnյBs$aJH]]Q=j_P2`Fg:*c|P!z++=I8湷rpqNZ)TŶTF@ho[+YPO᭦F"Jஈo8uZ2lm>hF<1~whKg_wmC)NC#kUhw6KSH7,U^fpǛzi3Lf66<ۍ*uB J{9bGM zq<ʥU/MkǾt1 't[̴&m~%8^Vg` )LkF~FN=Ou1(Lb,;1$,ģ0czY+;`wD28%Ч9J>%7PG<ꟅXM܋wӡ,_?:]+K@wٷn4v ^MrQ6 )ѸJO*aYVu"%흴ͧ; POhws)JTXXXޜ0F㊥hPݧZ`"wY'n.dAH埏 l y!<.r nUW1݀ KSf})O#aL0ٗ|CܠSH;F/);;;d= &ډ6 E >l= aZOQ:%wy*FkV_ْPAsY?^=391: qL 2OM0C"xq*AIMwj*kwVr7sf$7][؂mFݤc3Slyă7yF28G-PK;7y;3sP4XWpzRD*Pl3v ׳1{I!h T(dzy"mF=G gE [6:Zk@:Ѭ ur1ާ6ofJJ֜3%)7w ~Dfċ?;:^`0gP}SGT;Ҩ RH&U~>;i$:ׯ"e̻z_$Sl*ErYc>̽ǵ%S_]E6:psʪkJ@ gA/Kl۱zF.yJ[nÖ>Ne:(JKsH8؟֧rf>9y_MzVaڪ\6l4NZpg̵L|m%U Eհ+ؘDog.l{C5ԍ\0.XRנ$]4 Y[PA~=˜=;eA22@jpĺ:8V|qo!`0Ni& +|%yF<3NbMwfH1EP=.0mΒJ\Z+Ha$?{tETB߂2Xr_H\bäqzyGgFYܬKQ'G Kɖh͵WEA *acdU`f.)mnJp U}QAlu%y}NׅM< @H5[v6#SӃI8`瀄_ E@j>v17 ?Ƈr Y"gv )b+a= JQ>"cbtŒRk),ZoME#wǬӆc628uu' H2>(h0, <6wG\_ʃS,^fj(t{z2,Yd&<ݟVBW2q66U0И,lN8(I>4dXʗdRD:)sx@>w81WעJop kxJ@ N:y?"[]˿F".5q E\o]l`K!*=e9m uPO?"]T~]*{h7&#rY}5E\K'2LT{*p]խ~ͮћٽ|nׅ~+K@cs%O׮ZtoC>`FkS`u/jk*Ysm,#1/} Q@65ƿDrֱ͒3=&O1u$@vẫ3Ndګ>7Aq}PT#+۽'04BstP1&deMJns#t5N8$hNCt2iD/;`LKDU r*qi4d՝Hpn~MNn茍0(1x˴_54[9hV5t8-O*8C<ަJVvzŦ'--KkӉnAiFL[ʗS4h>:J錃X>EYCptU~rW+1`?vrC X(0Ƣ xtJl ]E]t,#ռ?qAO6hL"IWMrP_WBX( ?.ɛxmXȐlRpA {؍}9YI1DtWqi:VBǫy{*pD+5G^\ [c|Vxn@s/;zmFHѬ=gx9".h3jr2cpݎ1ȫޅyӛj9 Ȉ-0~{qqe0sUIpgك|\# 1vR߅@WReFήmx]CDMO`!ʊ-REYPՄ#Vtnŏ e+qa[a$Ua='XK~\7:6J)WxRi8:otRivDjGb7hɣ3;Z8y>aҏers! 1]UX!3Рi}oMpJvҸ x ¸܌U';W8x4eA1|2%ұp&{]?ơ-BsR0'uH:H|ƌ?,I$OM{z_Ivn-ȳr|&[릚H=F{a8qh::beѿcLA0XMd0V{0jSP5Wgp;꜁? ޴15SRSIH[L@>RmΧ( xԲ՚[^X9Lk>ϱ~?M`](!;,}6HJF)si,:G4"\rgڌqH}0E1d.;ɪ> dM|w' ײ LeCN/Se c@sRq lKShդuǵ$0pa7ɚJ0Żu`o3n/nz[MZFgT鸤f-(P"_D*-e[No})j)P!c\'rEkj]V샶f',@Nؒt/͸?~"'^u #¯Όu&o W+恆B.Of@8 w{'p9a^LSx(^iimdfb(F[4H n" {M{VK` f\9 mc2NI?kmG2QQ? $ $RW`/ l)[kqywɰӎqDKʓWɕ;x ϟvTW %RX{^%1s& '&S8U}ɢ[bbxq3#!cxIGl _ǿӬ1jv6ܤHr1)΢S7je21aST dƵ܋7o|V/Ѥ ^'b Tߜ'!Vyu>mzEeԔQ #Ӆ_(VMYpBo6;R9BfX2!vh$rfpo[b~E}'Ju6y8 8Dݠ5/ouZ^IHi)1),L3 GҸ5EQ08J!Ϩ7/Z;BNk.syLr]ZP,p7&[ip0G%.e׍(ָkNψMnրГa;5("WyV$Y-,:VZYI.H1&* ?d#,Q;]!MxXIk}7/]" S`/#*<%J&CC&NBpD^]@Wn|6s|b=`_7RS̸KxuM*cD|Z D;5밿 e辁KP%DXeUqK ȒhR@~5^H|`l Zޥ`G:؟OJO e`\G߅L5Jw^*W$n\ӈ8/ˤ49_'߮0z̅IFv H3L$qs1tn/:^CF&dI͢aV9o-umC *W Nj F5j4w6ʥ+HE#Ib6/ (oz5IRegJv<"Lw /F /4wzt235%0fH?O]\,]f[#c%i6lCn|Yi4G @Yz߿O<|;⎏kڪ)Y%IQ.Ļ0I㌍#u}|2цXCU uͺ勌tIQDwleb'l"d?2w3{_f|S΋0=4g󹘨gJVt["i@oap 6qih@܊jt|}H6MDDyYLJ3F+԰@E*A*tҒOڭ7}{ xmy&BE&_xE#bb'Iؓg-_uwB*`В!TE1'~y -V6;&W+ 9SɯTLu%ϚWr. Q7¬̗ժ@t@y % d 8M)yUi``;#h~xB?s-n%H_\pQ[HV;#ʯ$e=^> o (X&6I2?n0̄Ň}LɖW =&w m8a2*EC^?AsBm ]VI&[ !…9|#efݖ ޙ F&Q0Ƿ(߮D9YyOԗCb d*KYot[Dv1P؉j{lCȧ'{%g3BQ,VU 1)C>R㒵TޤHiX͙+q&q#ʵSbeA)fa+ ]/1K#4xvP^LdLՉb/h/%TiMbeGISi)<@EshZqIGl!?_60sE/ &rH)DL H%×rYyĬܔ~@âƟ[OJNZ1ؒ9,!~KW\.}Jށ4D q2m#  ڿU%~r(iw"r:~3 ha@al>Eć8v%|c"یjޘ$Ŏf%;%u 2>)mdmCz1:6 _Y/Ou"- ~ͷg+@I:5QrzqΣ]pg.'y+91A"(0K%o'xUfL;$8UOc|5dW-vm Bq-H~r4o@T:JHTRD˧5DD=>])we&;aϴvqM·,-KNj{[v^57Zhe;14˫[' `0{AQq`0(g*xʗ"W]?zcX WKyKؒ~yԞ7\b;V4YTDsǣ֪U_\`e@G&W>4/flipf2NNA~P=`+.2*&jU-UVq$a^&|v&AoI%BK},r%FK3h#ڰIwSyHj*syd$%|Ё}tiTI|W4fnru97 ~ZҰSx`9Q)?Ҿsldv=D 4%bKEV01!jKhVTԸ+1i.(ۃbpDEf֡hrKk1@v1nt޳해!Z\uuR7ߞ`]*Ѱ*Ccˠ?|̎^A/[%=֊uCþmJr A g׈5 oBz/'kD#ʀPAHC4 hz E{Ez+*xNwG82tV;V1n!%5ә ޯ59v2`*iŸsXբ. :iK83G>lgotTїWuwW?B7=("޸8dsg@㣽VSG U* <*/^ r+eV*?IQw{q$xm%޶57OJ($Ѥu}w3_*]E96lu&spzFLg&:D1pBrU0\V/c'=uW@ 寙#&&ҠShɻqP %;hZSN^7aZ* ]T\ZXC#/PÉbYt.GЭuAw^b3hIj,*G܅ 1eNi"XY(QBk~O+zǸyk_:xӹ!,{F7 Nw>OBlsQ r>:kAۜ۩;MT&^LnZ~Sڤ:wYf{"^SY13o\c(뙛yo3(=Gb"˟~dᅮɜ\TїYlw[n(:Pk@4;ʏIL_X0b؞;UWY,V,e FҖIX-ںop@P=Jzn9 \uΆ !Jam i-w'r/%( )r~d}놴ҟPZI0Vjcw:Afԫ\K=4FSu׻ʧVԚl֯.d;'d cc5F#jjT|U%xf0~X2,ݛC1>!v xwۜ8 MDgMbc^h6SrdFV}xcbgvt{0ʄ Ր-xWY?KۍnNn.:`:]Ip4`U]۰nj2[檯i*ktI[g_;.Zn+4{D0CxYJPoR޿"B@{8L밯|jS.I_j5URMߥk)ɱ&#l[Ep3i<~C^gE[Q!|1S&;%ENƀUy5R:mt6D683G7),DeALR3)//,)h©&^5[› /ePHm@I /x]#׌Y92eAjQYkyaDC4Cyt7c| W8IԮuqPI pL_q.̪Z6ǡ+\s/XG{Sa3;x=o+;e(lgcµ J kC.logRX>p׬? a˚EE?dlekQ6+-owbkg"sӇʓ<{YcSRM.3v ً?IDԂJ[8ṖTG:W=4YftK!zk[1JéB ?N%N)cw_xNsQ,.Xm!{c'򸁂(+ڲf\93<ͯ~GܚUbg &n ZSzcR= j5=|nʶ$6!*>X3lN7ߌ A?g|M@8/q3/M2!nխ&+E/ݔI"s*4}-jKdRF5|wKjJnqʫ)WubS|Vh@iwW푉}  b̉n,'5'{1^;, 0Bs5ބ>};Xk'2F7֕KI_ iu{wCJT9ݵmGڴ^zWVɓ` 9]6uaz)Fy']`ىvA2oҭd~iyϨч `HAiJZ8/{"Р˻AmgAq y"fň1uQl)2Df] %EZ*t>>d)a4($\s$K-"eB:-Z_aIV D%:G {=l+SNדAc~p55uVxPq,3 b[ygAēFa욹v$-K2xgĮ.;H nI۬-˝1r@yрlz^;F7kx:qR]]?:6jGo]Q' <>#2.y\KoY>՝1D-HUQ< Omw(?2$ϾϽX4 -w#}aPN3`W4d?O~؆!K[ RWcYo1ZqxTz݅K kA a BP j#SqaYLկU!"##C@5f6 *.;PheSk=s88ؒRQ;OXfK{frN6X: IdvIk> >&ϵAT r'Y-"̺g=Rdptb&3D|OIkEm_1\L1]*1!хAx^7 _>?'1t|?7g%U2owӼLG؟~-MV¢pnǘNp*i q+w:ostAObstЙڊ jw8G~1O0X d.v x~]d0fov -zR+e`<r̋bی{sEIXpS+{Q=tV. ;j7cX_Va>:],inɦ gr~Ԙӯxm;~Cs؇rfUx66wJH>XyAXk@ >{u[9&U\>2Mf= Fi;^ҭ*BiÎr\}hM_sV>^L7k6d]MP?"g-YcbilT}6dn+KcNڍZJ A7nvm@e ?9ĭe 5t[zOnd )HSUOyc3{ `z,+m@4,?TRn`Nj=/FZ}!ـRS?TH[bJ-Mw3hg >Ǔ hMdo<E=vNY-+=FXXͿ⇷%idg-FIoC 9lº熞阴ܞ* bD ҹ;^ϸ =x XHOJp1k=8H `?m#!NL,2zXF8[/C14>m+$T`FC+:FNRzYF-0(\H)I4^z_jADIкHMuk$L:w6f."P7(` ̅S%rhJdm\z_Xot"s;͈oN"LnbՁq]`(n^R|z̡qeb2^j3p9󝺊}pP!`MN뚒` ÷Ggd;Ljs4@hb8mFCtq8𶒇&JӐ>[hJ JM(3txp Y`0Cx\+POoaQ1sG=E3eIDg1qaTtbX, U\f,8@c-D/zܘ4ͳ+sp6SGWwp\Crΐ^s7THoefHkjO3j DB !^O.R­0*:pvdH+%à/3.ـ ->}ڪknAХ 3W,JF|}KJ/mT#/Z7;x" gTKX{L.%|6kjlrɻ"T?eDgQȉ2k[jD1+ܪDRv GSOb s)L;?~Wŏɿ4p/6TMn_V1R׼q3u{GD4+H (_"ԵXߤh=*&foK'Wa8&?E,ۊH5TD6ݿmxŸͲK7B(%?w&M_AֵF}}{nպSȤѼxQG q߂MpPn=+t[9=l7Xx7V[d]ȹ%;I8k}~gHk]t -{(S/}$8u_lPl*pW)*ѳV<,%LɊ_d`U5vYeo85}?1$z?J*8qw7\D nxBy;(a?x\KN|'w͢ miW3o{8njtrE{$t1J@"tNh 2k6GH}hvwq^0hPSK]-syWR⮷_Bil 5fnOa8ŨԇGpAFQpv+@^*SB^BC${%.03.8;y /eh^iv;;`߰INg?DiQ<[)uR_nCIGat,lz Fuar "k. /h6aNE! @#NPk>.? #FȮ c[\zQ!.DirTi4ıմKLߑ4F_ẗzŘ\a>2&yjv<_1 o> WLujUxa!ٲG"mHZI&idÝ2OHU/\w1ۦGTȐ_tnCO]Z'4.x@S'j.⣖ܔdate~M†e.8_y].yQRrTԗ4~S)>`]lG]d: ^ºuc.;]/"س@O-,t37`d 3ׄ؃a8v Ae_lH % Ѷr S:#0tK294Oɍ}>ۊ fLMҦ4_%xi(vo|] y%0bd ibov~Ka\DeG~YCioQS\B02lҧns"ey>J)gZüXrO5ڸ ^ %9uET)0˃XRu2]?ߠ9Kg}5[s|zCOcG}֮fgsrc)-g9 "j%-H8 ;IWp j='=I^ylU !ԚR͢W}7Ym·h А7Z 2CӋCjV1 ̆fA b%92ЊX>5ܘ8R_Mns'kP}p$n14k;ϧɭp 4՞̘|43GT@I$7nk kG1Jz:#daT Wɚ]PΏUЦ9Lyߩ=pQe8Ơ?['-At"jL1FrZ]btk|Fx!J /~S)SfANFye=kwfR#TB=mMtmW Lx`i 0mbs~B%O2d94:]9Jy&qJ1gsȷ]zj;p{OJuF۠Er pWtybq;㖫)I%80 @r . YZ[iW{pz <'oʑGektAvU~"FGH(]:A(\5G=͆(;a.tú]9e?tFz[2/XNPxb̪fmtK̸l q}weϖjIj ko#7 :Iexr y0gZYzJQ&8 0͕$~#RHcz@"xOFӺԒ*,6=K=FF`rvʞdZ>t1U* wL SV<-0B =/yZ;D*5 |)lm."fgNS{[rTH|nHp(" "?ˉ^L` x =Ak酎͟ɡ'ym :+ZIϊ+zwcf{iᗌשPxmD9}XJ:13oJkeڰ+vf˳kCg ΀3 \千 Pq3=NE&mv;aդBڗXNe|_C^' >2ygqh\<6)O8bԟ A' 4mGC8s UZE-olR5y}Jֈ $ RC)Fg3ڢoE;]glG2Z93͠H21ໆ^ @C(0*Yq9KF"{z7ۼrex6"jbQLj1Zs 8]ȄE {%'}օ;bWWCjͷVTo6(/YI %V ؚ~gRҢC#clXSEa)y4ӉBl~OqtۗDIZzhYVST#ne]Q'rkpK{F|ద}[_r_T'/+V=;^-$S5Np b .WM!|'"?eWy6&ϐE&wKl`  r5F齮<Ʊ??-$bsr&>*(}ΩïɽY'h*8o^N'oֹdE5كMm=oX7:dѷGkR?P$73V!;2!Lzl#'GS7a\'J Co֕EM6(M9@RRPp_P)JF3*u]H?)1aGGGK*W^ JJݏ4"onv*P"lasb{»deEZ}'eY nQ؅lr,?YJhl Ȇ7;2"W9[v=)@+Qh2 Q1j̚۰uI!e C"B[EIǠJz c4O\zp ÁtW8eh /u`_`QKثAY]”ŰٜR)s&Q vO\t XRa=th!ʿq{|w O"'2h5Y=䃱|NwNc]5Xs26AHEL{ mQ`ZljaY(IfM1o0V%pkB.FZdiwgm Z8>Q>/}݀#BgVI[988V"J84ͫ/?,nRUB8BKԤE8+#jO~킊qBir(.V> NP {Аk.#/'_ ";EМ2 4w fٖXWHVMoMz>͚~z)DA6-?JbHW\IUlrD#F܉Ne*EM ({..+36| > gs-)^FNe-.Q0dD{u `aboHB S|M"=] N~%s(aMfasA8 ?hx 4(Bl6Ľ|4fqL2 s\9cIUn[FTd.QFO4"Z.+LeyD6i'`ȯP0J&H,!p%_DR~3FY*&-2lhRibr5}N.lPnPT?qΕLPK:8/θcTHF' 2c=W?&TZA*693\=j^(אB\1rbRR}t*LCQК6nzm8C u_b gSr'f˭ 97IPCyzޅ,wA.qҀGn.61AM*iC0OEx p[_eC97RU{F1 3dt+t hoA)@OZUGn¯VE;~(wWźV V2dΎcMk;{MD<^,**JLŌIyCvo,~oP%TlAğG 3[榻@2Zuy]Q;:|@U[Vxp|2T-jIܪ}1mq#E?|gүTqc1Eoޖ$ߒ(Rl*9䨶Hkx=dB\wHV/p78}=Hc?m-R 9pԛ(=2Շȣ4W"趩[gĎe<>‰&jpQ[1wFG[c,;xG&f>E0XHDE": g1q t~Fd CJIםޯ䭾l:l)UY5 ZR~“?(KEH9VR1NX3\efC*t;7"mD.8H"z\aW>[3 eN{4[XưoBsH?y?LaBrS~9ڈ8xJ7+`f UmN>%o!/ qIr۶ft7ڄ<2~WEgHXfZֆ*rtz_'Fm6UCʉ(\ϣQyP6%_ 3IAy8e+v:ZڐrKM`pR_Q*U׭=k`I580]QIpi0rދ~ ' .ͲSPQt+lFwWLt||F[!S$dv/d@P̢ȴY z?Ŝ#',PZyo ?f!xq<&(41.M[vIl%_` c/uC{i\qt$0G[mMnjdv2@ kR@#o"4B*ө a?UI]d#J2.gcR ߀u`^R"' b: )=KlepR0~UCl3=.PC@⻮}$YLOY ['Z$OX_JɜBsyF-E ˄\$S=%E=JgS5H,>t߹ $Z B箕2c6l`.v\ĭL/#6q H^ծ/mg0UMM>EstAܰ(I0>(/S&~"ĺZ_[#6DZMd*Nc-4D]VCgh@2);pٌ+((l؟_tylm$`#+}D|.7Lݥ 9xx/巀 QRBx/!)W2/U9Dfd0C`&~l$ŌFK<9(@fxf1ҍMunw>2xDN%ǛsXnyyHM5=GOuo(~a1WwGwrӅ6uf#{7*R˿n~o5 㪐!˜ &Kjaʀ$0:aP`QfM~(qÕl%S"g_,o ACk[R 3aB!t@BN$~7.Q?H5Xb!zժ7{-S%c\ ܈x,D-)k#i'C|v bY|nwqvk6]xFS¬)]:>hS~zU8~BO{r %~=1)\/za6_ } 2v5 0@D,%:+Oe5݁AzfxXbDy7}2bK4\ɄqPؤyr0޶cx̭FcKmQ&! )-A)M+Gm6\]P}_[2JE(=aLضܪCg #t\v&?Rl?W0A!h*FDi8^? .qŌpP>u,̞ tӷ>n aDb1[6)f^fn* =.*dgCp}ME٤8Ӝ55z9;1E^sz W1>%7q? *k6  G*}cnGw::-,֢ CUUV 2.FF#ݼ,ڵwzZ#L7 WB/7`#6qE>BdTN# ^,jHGZ]$ʝ?H>\etooem:[6!iwjaG|E7k(`z}h佞 '{0{w9UYe_yfܧd{}vvPhK[-X8?yN`!CR^gZ&Kϓ(SC6 "au(*0Mm{Mj,3綹ROG =Q㐵):hlK+w~ z8vq+S_Q".nuUlrth)(s<>iM4ęVN,p x"1_A @U5"ִ}쵺~F+.}9)N'G6_R"pR]%?7JaG(#LWO2iLn)&;S $fOuD EݎI'tou.LsAD8<]n'U>R֪)=05\k^AYbFO6\`f#]u\i C<,cn8KPXeNЫ89Z)>yH|s =}G'xmjB\G)jTsMگ?U>@,Mt d"5<\Ưpǃ;@0O=UfIV+Hy*"O{TA4q] ,|e,2|uiG)1^yX`QR<B `c0B,z mͺ8[AdԸN(Md>+t1'lerAQУ? ѕ)R}Q9# --F6Cy7![=eKp*v 7 Xْ '&2ǃ wD-@@hW| %A32 Ɏf^̳2|ը N)+%k8fy譕ZRGBAiiD.ܠ"\N(Ot..dE&_\k.;t"<t:>xGK cIm) .SK%i&kr:VZ"~lŘ_ ,5%VbjD/HI@V>#%ߙТr9=>zVH*BSQĨHW>ꨅsm\5Edx/\ٲ(&&Ӆ=l[eo;$ÎugKW7` 4S^<3yZudrq n:+,mr^.=*}]iP{q%IwTIT/Z  Z9_A3W}{S; CsvʡujXz=c#EJ苿i˂_nPm[&s5Y wh.j9\rY30 +ХFSo'?88D=D#w435;Meӽ0CP#LIm3:yci06úɗ=-aIO**KND4▯nV%4/0 ZO 18}>0s$4(FrבM^Xkl Y!=+{~Ö]9ϪїQC;v5rlU3N2uqh'v~i DYKk-/H>5u_@60@ R)Ġai,¼s* T\i}y`"a(z#@E_UZ_wf&MO^{TF:dn0+Na/zei{{qKkHYx`mGg˸$/fT=BOQ!%8UWOaӺjeRWtw&AWpkT c}4aVKC9X_VzYL|v4jSǷ@}ʊ @^vn`U;Fڵ!h)rgh(GNȰsB܅*YD`b 5mZ}b r Am X|Kl 9RЊ, K\x#TZbh7ZlDsG'8ivB>8w6D,`Zj–=]=Y 4sbgc7 ଍J,*IU{2T|r݃\+?^q46OLF4SLa %xm.TO0!m!N<'Ϋ?8a?`l֓HXΝ+!a|Fyq0odxN޴Ր+##٤漻DOWSv1,^Iѯvꆿ=EUփQzhRD+~^K9A(Kqt֍JknX0*#2P`oENP[ Q9! qNr~&F}bp׆]KQs6+pNHCʅipY"^8EhLK.ߪtḘZ!j[` w~*O>BbπI=dZz3ԃ,At=Bru B}H/iHx* W( (3d3BC 1toѰ!/7O{H9fDugE~}siSAUDū'}&/?a#QmX4~z& Av|V '!T,Lv6b!.ވg66eTFɀe ZU8,Gۿ;2z*\0l'mdZQpdx@+ ac0f]CiX5kOH{>5rrJ!?;Ѻo /2y)'ߡpc2(uVOji4_ L9'b`[E9?kqG/ɕ>. b} n5G %Zk8{4hu\VKyvBQ=XO5UၝVXa3A"czuZ5eZ u; XPԽP;!sQpW*+z2$T9hT ᚕ2T`bجYe+Dy)~]x٠꫚:űݯ_ ~DEbv :h`KcLx:P qW~ {Θ5ⷀr7~K?.Ojpr&'W{ 6!b^s3& Hj ~cc NXja⁎? Dz(:/k(x2YY)Ks qӼm? Q@64<ʟgljڨ ۦ &wFuo$I;i0ˑ@*nz{_:!P`Oo,zXR*_Tznt{rC(G4L}0V~H*W:E}'2@8(kXϤ"`lm$s { GZ6: r(ѧhR迺*X_+5dTb=q߃*M!Fu.v~f 䞭y<iW.D.8`.=q~O2dY (Kq )AHZ] ʨrydF0;ij~<_lffQ | G:e}pyAF#LkeyJ0QvIptl'KEQqaE[΁Z,= s|OWo'Smd,ajFӪ` 8֖j.~f_Ilu,ِ"IiBU>c0eۏY_Q;@E(c.blP>v ;%'gQϮ9biF?`e"zx=~7ÿ ܋y?<Ż5t_?-L% +ܼ';N Dƾ }tn^UVq~ct%ƀl+|U ^ԇXh1m!P<~، 9J@.=hBT9FsOj4WohO#l8?8eqm=ZT, tK}gyt9d&^&+Zs2݅ CA'l\Z='~ <ٻuUF>&dCۨ[ta]0ӻ.z {1:IEbݮS#i^$nfpAyʗOlإ=XdmY1DY`|oÝ3+Ssf"ܿٯ"e$<40ltnDc nRdžA|\<4W3]RCFVlw2`֪cֺIOUC9hTbfr99Ius=aou6#,;ZgRFqy<;+MCV d3<0(< L;h49;Srs>/p]o\OaڳK1'E Z̋no=uIv%'!AISqx8p *+,u5 t&!;ڵ}B| Li=> .EizkEDqSPc:L8s}טŊvOKҵu$%[|h~0u8rEi;K,*;Y] cAcIޘ|y>Y_t܈k` pf8;% 4cJ"p M^s Mٶ)bƝ#kpN<\b[91ڤ 3Xz aϾqv+#6e[i)Stݰ*X@ani1foR33^i!,|o#DSt\̎FWA4y{7ǝzPL\@䅄$,|(p!DE ǰKMF_c;B@Ayv~FWqJi dqѮn|={%eRuItU)$C-  Mxr^E^te@Nb[COn)erEEY7 ί%v^uV uJkWΐ#~U)bX`u|cGRCUJbNrK!ީdMsZE@袣 gHcJCP85:T=M\ݐ;@[keBBؒP}ܠSUxw|r`ejG{ C_ Q@@Z!D?XI9q `ڱ@cf49v=Q|T-pKuk/B=*j>mىĨ%GN ފWΠ^Wż [D 2&!4 KnT3HK_垾 @-,?Wdppb="cLLoB|#_Ď:d#H6sL q̺Ռ膓pe/2IŸcvhR҃eO,_\13m: = EbpfC+V;g5n!zTǶ)CZ>%ՔGԟ5K]Ct}~_i{XXJ~1&[۪gKFnl0C7^NmZ]Q3 >%Z^_0UYIuAgSzG2᯼}-2p+e>fDY$K]=`pZ}졝T}DSSfi֩jNsʫ"T鑶}^?x9^ Dmp&Wd2)Nʼ~xR %`-lWnCq8DbOዹR BMt*VƨqNy4yܿ e,7 Fvm901pF͟}IRk6R&"rбQĨ̳CE7RWt^m(R9U8MW>OpC4fnco%ԮXw_"y=d4[Tm:[P>:m01ŭCƞY傂nT^0Ě}L.U0~181"Xy^dFDGXsD_wpLf7>䔨[Tr^\M0뀂j'-G6=2P)ɉFí{C[TaF_"EuzCԱAJzY/CnL:;oTqNEc1qofe\P?ʎ` +/PPgImDG+2g^x~6<1a\wT!Nɜc?e|WCL_]V> 5yp%>eqvS^t=xhi67vR!GaӴͧ/[|6fjDA`g,(u\ JJu#o' ]zzSJo9K.|?/KnC iyC>ʚiE.V&3t'mhTV cZAy Hv~y*E3fb."C'M/Sw>7xz$gMŸ߯8.Gl- wAfxJ,VI_xi($j~uTZ\P PO?TH~dS#>Nzj`nK=͌Ij2L@Ԡ@Qĝ.Q_-؜Q11Y7ɓ-J/Wfc%xH&Ҥ[bb+;(\Z6дu<3%<o8)P/KgvO)h]rK4jLi7xTP*Nkޖ @=H ] 6^h~_ y|Zߐ"gc"]Mt.g} $N.Z*o/mc\ApP'$C8 OMsƍL1ƁߥCp-$lP& H}$< 7E28d Mr"ظQiRrHP׏zl{z/d"Y=@v[Ij'~i=@GwJ.3R[!|Mz86Q]X]U(-$c]xoɈheXfhWUsϫ_†>/ҼHFP4+Jט=`CoI;}cK45X=5%̝7%=n;ab ] jz5"dcT2 1kCp"^jv+ǭ/뗰WKnDSa.Es/;~T;1rQ8&?==L g"Lm)\Ew9`Z{0*nخFA99+~'CvR+S[}ҭT;cih*hnWYKI}k_ipIX!Ïɠ K_agC3˟{֨% W^,w)n!|<Vt'V_~aܑb*9WxCG1$勴3# _ GjС{<%b~ a.ul!?cѽt,&׿_r3D``4)XuRM*+P%5^EYcG! O,NzZ )7|'4o#B$b!)RLH.2 J}QB7e/dl$˓۫}GjvU~kc1{=̑$ӳmkn`zOh=^1͵ CrJcCp- OOPt`3d4> ,uPW3oc, n'zDZs~ Ur' cd,4T*y}(Gget~17؋h1'5~^E\:%bӥ)0ćE)GQ *Q$ N| C `EUY䄛^J 1,ǐ)԰YQe1vwh* y'G)3 1|+|wi7fm?Au`4H3 GKKS~v ]|-&dJ_:ܑ^z&|@Z?ZHu/Zb (j%i@YإV.^}H 8 W}Ơ(<֊:ӶR 4VךqG>WJdNEW)pw11/^ތ{(3-%О Rwq x4$ ɩaв|fa@7۪HBXZB2-]8/F b6dAGR{1,v. hxaΑ:زbY$E0X6rpݹ ~쭖:4o@Is#əd$3ph \z?x]nTE~L]Ԑ!Aw充>n T >HT5b8'_@UӸ#FDK=L"KQW@;?GՇzqjmvuňhB\vg !Ăv07ϬbD硱d/I>pV?P2&Ec iOudJ T=Di'*r³vY鉣5{ەdV=!?L7NXOlhy eDxX.u 7zFWyFVCp%Z[]p FvϴmP^:nSlYFp[E<< gDdIZlp%A\c90|ckҌ_6# `A<)$Ca8W Bȇ vw").xӀ"[术 7 B [1AX{FIXֳFha&CkSvbB =&/ P# @(-}&uP$mR~{АGlt)ZNºAlۙx!Oj]cOV˲ߝ!w7uqO5`$#S _O$Oh`kuv>e ^4l%ؼwW̚maG><D WseϘ s{p,MYjR$=N;&ј;] zo.Z3qѪ(5"bџtBBlketxD߳1d N]p8;nx(bi+lo2O噌[P"U_% JDr0hY(F^?_G\j.=yB"j5>POлRiVwd؆OƦvYhO)tʵ~9D+,v5I)x=3Gu!S0 vL~1`5r:5"!N=eġ~*$2Umf䀺we.k ۊԒ\YD=g8J  *Pv˻' eqiYk׶,>sxIn=<+hG3YzgA5_CcEZdt5O[s랓|BI0:13R?lCFF@]oS𘋒IQ6M0Ṣ] rЧp- =7gH& E\G o釷K6* Xn7Di=SQ]E9y22)qQhIh.NRS8Hw|2(>bNWZ_Ϣ $SFX+ɠ /kw]o)hb _U~ezol^Fő:PT~橆bTwZQP1 NEm;jqv ̥#Oƀ~ٷѴt]+l!F,^|yWڈ3J 93g!c +qEiXYc[dm@@o}"f,$AS͒n!̧e%kgpFT+2jƕ jJ~新74z,%_sdFO98@!v2 *NhNKFqeʿP*5' 7?4$(Av/. 9kW/n1Ѭӂ9[kؔPpO<ԉ~XmS:'+S'/ ]u <]k8 T.EEkDlt6Rvގ܄[bLɎE5ӑU {Nxs٫ZrNAPpHZ᮹d !5>e>-) G;eZ[-,9Ū%Zg`j"0 galKlS#mnJ[`9<9+4]*;=B&…wP5_= ۋ8ļ1>-vsh<;yK{L^*!ݽw5Ci7kcP\hD;UdՎyc⬩-XƢwg5c;џN!C4Nl--(Jj[f9R.ͤ:C_U"I3#aRiB;)BV`Zf c{p9n:4T}X'jΆ;E[e~}߼QF954g.4A|&i(X8&"6:jwƥ JKQ47P(u|PaMDΡ.p'%?73+[`LP Rqm/ae?Y~;ɶB%AR7v19>i9^D0ք]q`,\L$pytO1/FI"w}9-pX*ZG~Jy &τ unIκqz؞A;1:BDgulxSHӅuOw-O 2 1zƕKUsmMp:<$֜ZE不䁅ߎqsq;Қ"XV.O-X#lxY2x٤ !u s`NTpkxcpzCv[܂78UrhJIYbo_)/"Ӡ?VslO0h!g," &'FMUr;Z k^zu>)agV()7+r3?l, o , QdndrK~Q"ܬo]oY܋ix*$d Ouj^S5k*Fn-?ߝk8z'L{*}H A" XX$qzq"PTs:ek.rHfCS#ApK$LAt}6v>D<>URWt5ߟ@7d.?P97叚B v)$]K>\{Js5ZoO9mN0c>5a>VR(=@!יߓͨܳbbcc^ n0<(r"೗"<)X'x$s(ձ@41TAoސ/7,/0(A&b, 5( ¤") hRFGk01o=~/сI]0ΌZ$#%历S)ǖNbAԼ|3klà-1f˱T$ ș)~i ׸ښ G gA'ETPSm9M½(fp˯j!JS`V%Ӿ`6t$)ty8=2wA]Uʿhn17ESt~&ʘ+\7Z4󓥣|P|"?CbK+5CUhd_.dlU5QYz;"P`rm,xٿt.m`jf*3N$/+|'G"`&8Y<:*ŒS˝ E(N^f5GMו5Yoڜ#|-׾IL-!6>]8y+^yX AzyqziQPoY5 Eg8뽷]}pޥ7bWȏo W80h%.fif"TAF2<'Z&r9M0_V-$"Wet sJ%$^WuK6oNPX9&A|cE>bj#~k`/xq{M7[ءSpR-_FςQy%-љp_.o%M֠9K@e o|J)~M3$?¬: \ חBg>&tYwQ"TzWo0t"Ey-M,XZ֓;@*Zb͘Cӧv;%ͱ Jk}ĩ[RGc]+DކuxdZSl"6TUuNQv!?qs@20.(mQYo|y/Fc!t ֭a`"H1‘dA!ߐCw=]706 LqGMS@S3w)̮_exM7m1V|jFqmCD"{_]N}ݡ-:H\j\>^g}nG.a܎hGlmFОK;rT QK $wKz"b tq׀-3i]C2Wbmkq!zLȀ`CaoR > T9JUv7ze"ya8M>WzR9XAыm}q0ta"(p}qxB!.g:L6@1&p,` G+pi2{{ ÓO8\ne}sBuuiVa #ۢ@,~m0Y9GpukUG'#U? Xtr;δeMpu_nI;6hQp=Gg}0D|(g7h+kM3NGWvF3>_Y12+p?]NY rMqOD4\s硛 ն4Klf)m]XZ/ C-77'˼?56ehXN~t8x\/9Uζ_f K8W|:oWcRs⪋ \ZP=҇M#y V8[ l)f_3*SV=1OH=Oru 8~iu,4(P5c+zg-0K!y'ZAgA:$%58Y2YV 3c e#I,H Slmȑ:6GOJz ]0"t&?xezX)U(HdDs۫*2 &`"s?9'<ǵ"p/J%8/nSNqjiC{Tjdx1ëk!=3&JVrT,蔿UiL\"'"vjF5aY?kysE0XtWo( kjI#u+8E"k}KfvtT_[0hr@yeG`jjikFޟ"7Ϧg%58M%m 9Ȳ[R5>FgOl#+)-`bH`bSL5 *K>pw qO{4UKM?;hĹy:mT )yTo+rRefx?g)a>3S'/cB}يmEJ {tb %ںo ze_/16jLg I;`nbJǮ'X昙Ư%b$Tbuwvm)QnGA]s/q(sm엸oáp aLr&$`^4a]\-‰NkSem^_ kCWr@z0\z–P Z Nr^ m#\ui)lRpFq-?0k:s3,d7a@tjjr6;SU}\dֵz^R&6:l9PԢy` [eXT Q5*+=o#W%QR8M9nmY]7 ZL)4T#:'4^ܶdBsqquFB^1z]yuzh W:n!3c'bnE(X0IS{+ ]b)্i7AR&J DK:v&s xvh敲g #ڟteJbCNVLf[H?%v܂%"[d)"k#]N6q߽+ۏ[fظdN"틇 _H̛S 69R]?NY}i~@ &lFrPp)T޻eU=N_+p 5@?6BSŞrywc`Ouf 4It=&n\9uTrZa8.:(a<6-t倘~KL8w M8/ء]3=ysVN^ا@^d ;Sn`DvƏN!z\ot.8 4}o\I%&>q  k39ܾmVϵ2D8|fT1d.ŔOlK=s8;,G/DlKl. Qd CMb;,)`Oyh` <,8 bkgNw,!IÅexQ nh̸vn+l)Fu > "o)nG06a`%rzqVK ηd.@;Ԝa+$Tפ^zokQռ޽$+>W;JLaފExl[ R4!ɖ^E&{}h MMZBq^ =Oz+1\ ~Rhp!GYtFge(=_xAJ,I_*]Lȃ0i.V9Oj3MHl@A!J1MC**TuֳOݭܙ JtǷNLyhS ɦsxI~G?oM FdDzC"YcMp:Y;@o[q֬N-Bt򘖤_AXAzANӴ@7eXP!}x-~-fc3xgp CbE!hF;/ 6 @{*.Qu:NXI[yʲDWg8bd:80#o9m\}?s9L:*{,xgjZ \΍'[-s[ 8y7߇."褕j$!"]b%ȟqOTLzM dGL RVO([P8W7KnY -P4yD#8fO7 gb4Vc":RݜtAaoZ h PcA9٣Sq`>{d֋~Dn`aA5w5W_58z5~Whf#U1MG(z*SlԦjk+ aulXQ߳~d&Gṛ"-ptXreBW4E4Όs-t=O-@Z@Gq f\D;9P T&FDtH*K?qإ?^oՐ?j(T@)_aRyyk#8^5-6WW:.iL#B ƌV뼪+6Ni,LӌqԀH/(?$" sħacdR\ralpt7x9)1w܁PE@ rW~nylJz-4B dQZ^+KYK9E~Y<Ѐo>"D@nK؟ *浀X V1~ J_`vY+XmdXN6Z&ѴY˅Z]N$wN`a!9k( mbM?3+#kr=~luU$j@]ʙFz0kx|FNK-#^~OЉ xQ*_kDb$G _sqCќGO?9XO(Nk,GkDICdئ~H|s|G(W5/A:g$ Ә䡄m<~XtTO.! ƍ2G $WJIٖl>P}EZڲ&%N9ǸǾCTfHwLѹh.} *ʥ$Tz/NyPgz_q7{ šWD 滩n[ osRm dtӡt+cך H;08JRrqOlm+8̑wCSd ǔP@s#?3ye͊DWCdIe3؋r/zuLJ{y)"I\a&"a&v“04 rZ \He\j &ٍ(yMU0 M5XR]{qK%>mE /_'[ꍪ ۞DHpEe&qՍUR:#ݸ-J"^GF %FĻZ LrTL8f E:z/ʨ͑3Kp"LjU- {^U`{)]fD:J^JM^xeتa @FzdFvOpࢁ,^U], 5L LlXhLRT=*\GcR:$Prhҽ{UC9=GŨߚm %UƋEYdz<#( b?ܿ-i޷hJȔiQ;"4z'#xZG5pҎκ֮(P#b~D4 < ڐneaj6 t!ooOGP:R k'?1F̑ :2@ϋ(Oɳ ˤ~H)F Pf@Qhk-r VLq$d[4F7,C'3 InΕjBD\HV 1nEDYv?)( Lb L(hHY z =m!Jë qHt7)w3*S.R6P2>z87 F<.kw{U|A,oKkUqg( J$QZᴷRQ figcи;6`%Xīo?Z;;1sEg{><u®}MqZ"_~1Y1kca_8vD iZzTb ţlex6.sEHレ9o3଼รjYߨ,끧Zcݳ}q#geG.r( 篻 -lqBwx~x9GZ>͟hQH1:üQG& 39R: Iw|2N(!46yh6)*C*. }*sQz1;1fՏ  rȇLOG,%ʽ17.x;45sC\ޤn 63?)n59/'7vzܑA$E*UBod@ScG-;0r:jh%eKhLK aj11蜰|+o+Ya$! (CK M& GDKg>`"JO/)Mro-I]l|jJkUCXekIe<uC1d4riSt騢mqtpMAZzҨ&Oiq54~P۞t5v%( 1FaӪJlrl23tH OL:>-Fa`S ASz' Pk|ׄ%4Pq⇎ygq ;*4ӛda{ns#"tF0S֕N=_Ϙbr ( f)4ܹ)?5;+Eи ?V.87cT#%Fb>xYke@C;$mL(䏅&itK@_CV&c/xȔ<*!"M!!Oo$ĠOK;_(VM G ~H9О<J=:XVU lq.X";珉u,&C =<ȠEddWQꚮo(K?u˗q)NfO Qv[Co7ֺV ذX*K}5|/E^X6@ʝOҚ$?AA)nW%a7d³uKǿEÛg'AJzױW25P](+bO9A[n] TAAUX5/*ʠu>𲶲L 7ζ /i Y_ f$KFbKFvR _S b$>"QhDTh=5:\+ !u)gn]7 4z,Ӟ G_Ȉ[\/7xYD>Kڤ49^ܕ?PHXOpT &]+64%Gs܃x(E4C~\J)~6uӨhIE,_R1W/^Hxms1Hڧ6kTz1۴Uh6^6_d#}㐺A)gm~M8WT'ޔKH&1Of 8k6UBD+cv21E#FS.ao^2pAr_]`aD D*بNF~]tv:i5s 0XH-cwYwc{gf#4CP r>"m:-hƧ+j@q%a=|{m$<ꫴI"t3-Ո1c쭼*;ZG:^RGA4oGJ,]y5: i!p(d]m$gzqm "}UJ nԯLRK@jOdW}]Rb0VR45(&/xnVq5i"bޭa6cᒃe+JL!lcP5 li(#;?EZ^ɫPs (s?k:LYؗ AP?` >9ȋۑ{$^8nfþk!dR3 TvGFm ]w?]^W(pb7ll.(A.J06>˝gr;"%W"6lX/yź:]~M >7T-my@mw5UDpY Y2τ2 YF?ba ;xؙ.Q촱%Dgw/_5;KmraS㭩G\/rжӳyku#JQi7q(;爚q!Y'tuYYsjKiH:'DXvO]hb5LdqZu8pb-]a{,P[k"6"X OH{k+ KJ &"B^4iIڇ8;5^,6a4g9U •X%m!̘.ٸj~, ;ԱzF(*`?avYn.li1)u꤄LZq' Nde/X!Yji?(7$0cVSY̥E_GWC5 ԋX<^'lR?&^hr棪S9HJ;< EUںhvnN~i5\uUغH({|īי w6 1|9޾$iؕG/DCuvT܋gؼY$SEk'*l\ ԊlsOt w_;S?6 {B S 4{J9NԴF&܊9a nRcKH]ԓnFm( xXERԙLwt7hk/%;S 1k*mbiG#&)$ELX$KPO $*0U/GG*91ͫ LK4\%f6+`s aoXaSeR@@pQLр.fWM'\`Vgҷ- vεW{foـuT<;M[<{'pYyxbO7wV5cd ~o~m$%ⷬuV_h'2$?kQBNk=V=#hPIft@.یc1NLwPwt6em3rb 5P9;x)s4 ~hSlCV&0k("c1-:dahPW1)@(p:֊В9›3;<݃ 꺥jhNn6/hR:ɏ@쁟7C^H\ͷ mKtz赝Z)7 C 9 *'FWI[ 3sGB<;-r]@U\4޶Ym*#pٸW,qHoawwe~,Ѭ!DÜc(?Lr_nk(#7Y>(3״,)sow%?U/L 43` Pz 77\o k+ͼ9HIk2M e`Mq.cEba UsL'fL_gODI9o3'Z = 4 S+i%,L٫C>O˪A \z3QD-10KaNA3 $[a֐'ٖvoͧ'Ӝ[*o#&NI2tᎺ)]LEjgĚA0Q/^q@KRhTRW1!$Jq6sַ<>c|t9UOZ%OÊ%$)ƦCFK B~2ShLE"w=6 _d/`4w7;r;y=$B@ٛYz'̨g'=d*<tn0==貰\Q =,5q1;SԶѬƊB82pU&Bťط!Z O/5T#~%t *WBﲳuQn0&b%gͺDaI%sx$e]c;f equ$+Uٹ/0m?V$/~0=DHb3]HRG݋ѻ(iBC ;4vU@/BcHᆖe6b+LOJKWgc)Q|Q"n\XeC>kԇغ]gx@䱛AK:!{(ҲU,PsCO8^04C&lcrCiωIڇ$#֙ CdMj/ŷ׉HHXOS7mߖ~`NBA]BL]ǀR1C>+a`N;iHUzLI? AR} ֥"n"// z32H0>5Oe  $ݪQyRNzIiIVRt)j_!yL3g5eu[x)9k}xۮi[VR(l3N߅ByM!&$L\}OIq&.KT %z0EJLvM_|آ@ɣdݛakإS^Lk$ =߲ 1#vD|QVv\nOHh]P֡+9T7 ;Gu;R"N24WV:֕BrTW2L>bAqEƵV tdJp 37eQ*Efyz|(RiR``jT_擹7QG'OeS9&C=WV/d)/#whRQǤcӍCn_1z>m7M |UN=N'w=ӥ6nՏ&%mmoڀV.AkyR] Hd24Dy}1ĢߖWvi'ޡo0(~@տe^ȑlgvB9 #ΏI, 0 EdJH/:L,]%D xMd;]%yt/ JFONs(=bhiLpN >EZ͗8Bsl߄F;9ZpDRQkƓg#bPt%qNQ"%BjsW(|A ]AyMeN-II4 k /Se'w9Y@'BL>!{-Kq% ׭ 4c$X[!t.'682,é+0xhYIu!L#'&6XDxV :PnV +=D筗 6 cϦUcc8aL-ed~}qFr\C3Z),Naj{)ޓCJ~LѰTz8v3\]BQdB`0򂵊or$M.dWZrQ4'h3uF"H2%KaC1E)TAqk4T H}ƞH`ޢ!}%~tI1jh)A?Rs"TϳnUh">5hw3o~!9ӡA؇`o*[ $R6PimȏVЫ`Π#'}x: `Äe pc&?c<7cYS47'.ɈKEG;wWwv]+6|c\z3 ZL1}&s{P%AzUCS`~NALڏ2g@GSM8 @yeĬThYXp sLqfd0ex3xѱHhL <)}Kx"{;˼*ZΏ'XJTUjM;ւۃIyB ɷJ52qY?R)@gɏ+pC xzrAe*M"u^ʹh (ު#$1u]xy%`;ǔSo9 $:oLI=2,>1h&pT4֘pZ YOru&DLH!с&j*C22Oqz/DVX *Rױpɮl&b'mwr{Z>-6WxmԅfT83_F$b{g; "H+Cq~=i$L6 $s^9Dq:0~Sw,7&T}Mmhm)|}al;>N'فO3\5w[lkBOzSyGD_k~Fs+0A &dKoK$t=zWF.v?O^!_Lv}2Q;Q09~3NFGSs}aD" {UW:ERhg{2;-;`J8¼ @y۟_hK]nl [ S*ԊO20F957xE=VyGLՐT4o6X3!uVL|16$,*LCIq 0%Gg?^+B*GUǪ˪&nI5{uη8nɂm% [=On&Z10&&SSSMqwO #1dGP@ɖT~w>Vسa:.#@Nqŷ . d~UeUc.OPd!xjb}:l^g1{ɋ҉cr<͇tj*A/C5Xm[&jlbe(2r ڈݴ'4U(ڑS ؀̌ .JopCw:Y-8|q4NF=~LgwU^;5ĸnoJ\. sOpm[Y!C@ YV&'95pU2`]>i%38xz''>g¹$UpKcx]ȝP;(^#:I7[1~.:IUe'BAd?' #5}g+ecpƺ_%WX6+H 37>lvDu0O<> Ľ`=Ȼ9)Cz.T#cP#ײfhWGUs\8E&;~D僦󃳬w-oI-rB#٨^E碏 Mebkb좩ғU" W{$'K= ,{ir/%m_{귺 tG$ȕS4|ZʺӘr>ަ95=2n^UE)5-dNjw/w]r(<J8NZVXAKЭp}<`Lkβ8DU˭zb0ϭWLb BrΤy8rJއI_́t籄ؘXHyߡUzΑj!pV-n12b]tKb7C iEL~bs"BT@族OBJ.(ԶE˝'= )uN(E ߉hHaP6j _` E WlԥAǽՃǾ[A}oF4I!wMz=^:F=T;-Ho6XKsLy~opm>&XJw;Dv$&3}Ғ,1 PSt-#,Fոr +x)CvA5?=/Vo3͵ՠ 7΋|rrn?̂/jS.k4O6.\HT!r,)ҖiprJ?e齒shXv>2J_BgRs$eusWd@яywz79wxb&26 \ zv 6\1LMJ( &eUP̠b2v|!ʼlek[=7C6#͂fVs_AV$pD^ @W>߅0)ÞXՖQ9%L 4'`̅^FiW7s-M,lRvN[XABقAm3o Tf­OO {RŒF葓cn_CkzĤ V9y{@(Gu:`ϰ]p~o^] 6?D K3|xǕ,e1<" z (X~,Pa]D0;㒳Ww_ ~z`gܛLLyն bQnaHg2m4߹*#% |HQڡ>=[SNzmz8lj7Т(=6 =4&8Z;xͭOM[td$\&+ l*-UVbo㾿qSDP. 'X"G\{o_K!ږ!+V:,;K xM/'ӈHE/E}7nCf-NUB-lSyS^GK.LyY@prW_uݽpj'w" ` D$HRW]u n,9^z'H8 squis} Y7?& R?upaVؕJxsh/C"' Pg+*ľWu0mEsF |%VTgc+j |~0? C\Qn'w=<ː' k>3D7x1OV:!ܓ7Ȳ!*2x}6 R!t!bZas;I X7ٵ]>NA؁U%1a"88IUཧ,f㗭q eЛn69"̽|!l컮yrEhW;}C_i(T0 `ҬlNS}@b6gip}W?R0$) Ji %1DL{d}4lWCS/O+(T97' mZB9ƕvsIvJs67:qK3A2H&E˼&U rrHȄȷhwz "_Uc79-l*Y!71!~MUc^5ߨyVO./Zx= fuֽ& SjPmUfLzeh#Vh ɟ4ղlnk~]0A8;'ʦYJgH,r}OAqTȜKd?p,grr]=z E|Hv%1:l1l;v,&E8 de8$q]Wri jWe%#-D Dk>.hÙ2/yvi_~nSq=4 I?' !u)u9]0F0O N"R 5"Ec zfƧӿ?3K %uPWCxxmoɜ> 1M~Wa,m.XUq V,S, <egTt}iGbssN/YƒI(|!?Ϭ5eO[.U S^x[a]u JOwr~MFKsT́;7=-;fҶjW@Љ5zz]Έ0rl0f5h;n]>3)tpvÉTb2rwvFv&lC.J_f35!@S:۳x$LJ~ѡ ­+\Db6qEˤۄsիQnh(BlXr?J; wݡQ;F;}^P( OU?%iɨ(izrZh.F<[lDEǡ oJhҜJFK"/&:Ekciz\1pUf uG]THm)1A;Z5ؕa}Po4۬7 7%v/x^^2/>5Y΋zU lD_oeDgүwTAb:V+R1yZoXϳj+sB495q@?3AR +6OD:hY!ZLF.F+ӱ_9ڄd3tQ[Q[!ӔS!*: _7 s/xǤs(_Ɔߚg3%˼rY'Н1< r'R4=M/d@rLHJ';!7jMQj rY[@_N̩Og-^ rVn?g^%/kFc rL /[,{9kYB$z,RISZUXq\O$% u?C7㙞-p.B]E'n9,I`/k(oMKp@dQ*\4*550Xcݩ]QDz|E]CC9 ƿRF~p,^$ϴ-Uy(^qٽrm/F uXjE>KYu+QYw:- T-/nUkHtIjh4x&RV.17Hn0_ӹw\ysm(u9w6.IJ%eJP7UNr"874՝LGf65%7Ly}^PiNx<2e[v-rOV[,kΊTۦN~?{.2G"CY@uJg 9w}&qUBKve9.D h/@E_$Ú cc}[=jK{hTw{`P7=K 3}ㄨSYJehעqX^;,ydXD'|Q:0HsORO1T<ʡͱ8<tB&%G@G -O.RkNE=u'e28U ]lGnsanǙ텈*2coJVu]s{*blWor/p̞2OԚӊuBuʹo2CrhUB$t]~oU&YKígХ@c#*s0[ Se;a 9HBC:pϮR˒rr'&1 y^;ҿPJ֊z|Q`p5"On÷\pnqK ܹ*Z|1dPAmVowt^r>ZA]V ¡P!esMm"Qbz9)eūD+Xr9QiadȈn6#8O[$ؠhi$Wm$AA?P6u1sSE61ۙ<%jf_d8K:ЫZC {ýmԏ]^ꦶ٠n/[x"ʤS)V|.Y"h50N9H=sni2.Xǟ悕193q5+ZLCǂu}zؠMU@d)>x"mUox;t^r]?33-eko>t\y%/ ؼxÂ@{#mK!GBv8U,RAA\֟4o.qMha{kɓB u2|]`'<>K-B &j&e= )C?4Tp! ]ӆMYTw֭Krhe@ٹsKo63 u? E2'ۚ ڸD )Tٛb0rxq͌Sjdcr)<wxw=L>)ë5b^,%J7xdhTߟ:p@'bDkfbͣKTb:#2hCeݣošhH~ir_\gdf3Mwx|C lAޮ٩pp e^ 3ZzwWgݱ2p%cmG%C X pRP: + 7 3~9-rt"ޠ JtBޥ.;za 8p^7k81+l܌ф;G ڢ3oTuN`+BQ㵄Wbg;!"?]5jQoMXӸ ?nĚ࢚:[[&%ĴDfÓ&'W`aHΧk_psVv3:Qq~Ӌٓi(m+6Pf8HK\XIQ{869:1gBhG31r0su[^$zѕq6ӜǍ; n"aRDI_:q>;7ƈ:65{PlyS%pm__5 8k Kàg]"CM#z#s{+Ho>/DV~r5U2f Y, _$ -#;C1 .oVѷFi N bƸd2 iX9#(_zQ>.N%$ v?:Ÿ߿5_^Mೌ8NZ}kÅY$n Y̚ *^ҁ21x w} `5Wѥs+`$Ta:?!&&%qemYLՓg(ULxqx(T/7GS}K AeV.utm,+sS6sm o%DVb *w&VR_xj^,uي'j#!r7@?s2>?]~r'oZ"QRݯOoEdDza@95[f/l8㐻"v/oAjy<e=wmaȯ 34Lzy_5un- Q u4 ѯ.5-wFuyܖ< :k4s˹7{W.jv;%u:@Ncl$RlJ>emY]j,<6J6q.חyKr#aje3H 4zVX@ !;,24CAXQOcFkb7y^ifNaWUrY<>+Է@ִSf~][᫕ %PKI'7(j?qf+S`z5~/-\.KV~ *ܢZp'3bC-A窛ߟW"j/B2.64_+ =<ɡ ZG^UqfBTIfA*dnGC`YekIvGHgeM\:8+bT&X/ೝ3͝SPXQhs`-Eԍ}ͼ1( F )2 ! NLpCR.ץv|p.;\^كDC E[|SCgt~ByTkӾZU7̛KKWݫGݸ[db"h-%5o'CI{L|yTV?5p;nfpcYsƤ D2 y-kw~cij‚+m̢ZDaeRNe¥ǑJk- 0IS~Q >vyaW(;Yd1hUMtLW͢[gB霚U#x$O}0,cmg^|c(!!Ezxqw{lb -;@OkoP3?`nDjw9l_ʝ52̚@jo[f%Tk;U$T[؀0!bi#h:Wb!HexԽv?j&NBb[X,pmX n/%GIsBR_1x /07M1j2[I谂j&m] ڍKn|\0J(UJ` ='rh !,\~VY]m,xu75.f&3aQ8j =CTẹAwȠ&ANoMnIT1]°) \Yq20sֿRn.k㛷J>Kb8 DTa]2J嵨Ow6}tt)GE};oNmq偶Ie &p!0iRu"XlZ+w(' I]9GR?X9``ZuIDp:@\90mtL->Xd/kyps|.beZ&+_~f? I >2Q#䙐^`~fMBΛYsD{.>a}xZNuur91I?gkޮ"a2;dHn:诨/O:B,_D뙿(R~iSM.UprX?Y=lm,ژN2KY*tFfZA&M 8KVO9s/GD\RTl2$|@x DӭZ1^u5y dȦI_ |Al"m0R3 jx Tt3P2`"#1wq 5w'jwщIUACdFz'Լ> kI^>.ZfĆ*tmh_%Y#,9mt?A#*LAD$A)]q>XSsNL~b=oq˘ i?J5v#ŖoAR-Z;f0I͖b\9Y,m,%g{MK1+a/"ITc3;ݗ]俭{oNuj16;-u` ѻ10->aFn)/U Sս ==>`rENNʍ );3$&6;YT#b6uuΓy0/uRr*)Y'LaUģZ *^Et밻j7ccעHچd.(n2i7/Z٪T;{5=)3V2tqр~:NdFoHs_uv]Fj=GG8Q`f.5r4jMÉ,YY?m _LjڴHgYlxNs1zmMčD[e Rl7*w:/{QAbfR2ϻ ~Yw@N~0MBJȲwHK k{89QuxyBbW^@Q`#Uyi!.Rޡ)*\&X|dI-t,!q2qB 9,f6x+`L!Q ܕZUX d&R=eDԒ$,)֕^8tc_KE{3KU~]-: t /5NƂTk4Y !D{)gbIS\ghH3>/@.@wB=GVtViq߅5$܊y7^`Jp'kÆ!O}W5 Ų@$dDB)zM09[fAqcqU̓Pg_[G~YSf pA xnO7!ra5L2@+_Bu&Vf D'.SQtqwl3˚;9$\>R7fH&~o`~scc19k*.W l4Wғ7"n/Fy^<䫙0'd)jb߭:/8a,/?ZICnʿ}ԝH` 5]'}yxz_2B^RV49i˔ѓ#;bV1BS9K@,PUp ̹atkETWh땲&BSE_@{ U,{I,bKt*˅kh%&lDcԒzMdBpEb]_L_S 3̩dUBo?76 vLJC&P#RDwyI@"Bʚ_@g!dV2C穂0(+?jAK//%rY7l roAy^6e+Ι"2(aDpd!<ՄyUq;rG+8qi"y}ee2m+0^VizaKL$-?}11AZ IS i:*5x>^kH}c%";e9Tg2?89:7^c&bd*ff+K\_wD"i qSMS'2]j1h#;%Jηv6Ѵ'6w$_qX :CzSx*QMY)O;Fo#b9_&Y,30,Tm )9R$O@\fll%RB><ئc]s3z&.uPIsVhL4XA.W!#ؤؾ2pUqKUjv\H'`''oiib?^?4M I7CS P `1m|!θD=Yt-ԋD*4%WN4tù᪻xudlF3e.Ls6:D eir[|TI&ۏE ??g@bvt6 #}CdvL7p LNh]9֕j~_it2">dVIz =pJn #!soapl\Ի.zrEAŃ Za1Cʚ*"% fL@1>zqk͗M$,ߤٞ˵\15p޾ڄ([sFa 8Tj|Wi*$E\2}+?ʗ).oqO!\ Gz?mZM.1\-;BUo"̦M- SmLQDjEf9k_btYuym3~dL#L\)^*~x&Ho#ŧ pK~~dR+eVӦiwوb,c4.XfZYy%-%!@z(:G.y"2mr:0_ Cֵx@binDjJ6VT#5 NO(*T—ݒB\,g-hiyل|qDVXv@#pgMaynw{-X'Ej6άC>5qtK]ҥM]-2c5 7N tfk=&YmB/Ηr$d$ۉ24aϧM1٠ʔzDGF>(%AvhO~||p]>0c( sJA:Kil`̺-OOwy`6SZČ7B9}elw$a#RGK }MOl<ϣ~ČWG@e#ikQC٨ PvuB ΐ=1Ģj8\a!͸XGt%G! 6^ N3H48 N}u)]IAItYt$z#:6 WP Q{DKjtiz;VQ9gKV3r;x'} 5:nPLa&wBG]BY]娽I5|UA.B͝l8WrLbx)yY\5:ۿrTRܬ6T!W7젗JvKɖ៎jnEbLJi٩^X%~Mw>F,xm{` Og669~"q{7W;ֹ$wM"ƔZhϠJ˫zdgO/F,m@G~%ya!(Va9x܋y1vD׸[伣45:qAi*l,t1D\+Y 8h5dT4su &`͇{b}!ePwtPҋIb䇃Ò>LiQffVI(YxŹ4@IV?1}x1_5'-0kkl=|~TRUͽbKmЫ㾌߆?߅+1%ME[3Wɻ10=*["K>\\JRwr߼$.DOOFJY9~·;RhL:} qGMMMjeF,P,/M[N?3o,D*FsIUqo7}ԟ?R=ֆp$@(޿ne KˋDB(/(4mG 6 K̢=ÿKZSxV\ؐ1jcU7DqIΈSFOz^zL:-[8Fo\.eÎ͂|JTU,MSFL+;pHDzoljC_fb/V&ǍB>bܶX씟YĢzBZ/>Ժ@EĮ+or4d!Z갘H_fOoSo|,$kܕLn&)ݾDVnU,U&ccwi}ƣgl0T`<(ڴ+T8AlrhHH>΄u7=w/x!?yzS بZ1.y_ M{f&^wg%a{.Zp?-kҚ/~ӿG' ft31i685*bEc*KaVۺ eG%\|mTMgdtFv{&b[`4r $[Km_+ML!޷w?+ܶL TlP Cml+OE*m>+/]VJO){LUc4=.el3BaWX"]O\e&*jLanW飲|fQv1Ǵ?ЖQ?hڸڋ 7W /w|I-$!XV¾_ 30j&U$9 ֛4XS_NʡN$N}Vo 8' |zgn"#ae~}3%πx 2$|MC- је(2|Xc058,;+aa؆R  ac+!iNPB.8zf1R1Τ8ou" go#]FS}Y@s;pG-ZJ;?lX{n6XnrFu 0a5IԶ@a9G`&g'< 5,8Gŝw3j=P-IpBKyb/1R{#!kyB\/ }x"~V^J)&bxqk XVn\:憙ZnU8nWIB Zg$Sv BCAI2N !=jJ&p3E"(o@MtKIdęUAI .H~Og|U*# Xeosiw' JȖУFNv럽5-`l7i 4^l1_?R1{ PYR-ۘo$u%oeeEU__DdBHD}~2;|y^Ͻk [F4ݟ<Uf , ڔFxU>nvU덍ϴAHM7;?.@ Ej3BBd8ZHnw'g>17ݴD/kP;`-ԈΎ?ގjT~#g"8LUӍ1M`d$$aX>]@=S LʄAqXG5 k8u{BScxxS xbss`vUeɄ4Z؅_Hk1rLz\J5KB:?zSιa!3 ̲Ҝ(zǫ 򁄋 { GA`d,/oBը$hbh|YY_jf-Ƈ.sPOps]FM)2җ4uڍ"~bL?ڡ[U|xCkb˲ *aqAx"I; Њww hAl a"s!@QLr V\xj\(cXsam'TkFnzaX6PۗmG7GF R ǧ/PzlM\N<rՅZ7 pY&vGt3OJ ;oͧLZݫrxoރYm6EZǗfEB²,)^g!q3\X)-x2gtx 0Xi5Y4@d")u{7R~ʆ*{k(DMly/vա]6s( 72S-ƻ"s:E2'޾T@i/qyNWiSb5i8.xH#u'n4c{Ny\BJ{07ݙJ,M)DD"~ڞ@:+ fn6OX^@\Moh0G@`o;h箛W kAI5lhngIGГFLgU*뒲OfuT X0]I[K?TNHȄߥr^w딵wEW-aҗ̲b,Xgٽmg$> ^T;,7Ȍm uq/)/ u($ܢxNVZ-o6 J qt B"\IYΤpU,0]xׂ#-%.TfsvaU0?q `:rbimM^Bu﮸MHZvJ=֑o@`1^o^7,yyҧXg>y|&ƛ˓ Art7Ɩ\ ˍD8 *Dc2:hO+R̈T˲yL,Ԙe$_nE ?h4ԍtFK,䷒ vA..1;'T[#@JlDCKJ3X?%l(Z]+Vװ~Υy{T/Wں% #4t\ FV"IO_bk s͔*#7Cl]Tpʹ&^E$ BCgT?8ʑFl\kS4L#0-fvm)"cV=ug\~ihg!}*Dѐ^Jy>8aR&+9Z`;$.Y =''ǐyn EV.VqFi*|618(7|Ov{R41kD# ۔@ +nm>5;6L"N:>ڜ:4$JO/Vo(kZKiI dEe8A\ɃUA #8G'q*JQԊ3(ZAv^'@6űUl5f *pAǖ~ 'N=  kD $6ˉq@C?O%!3Kz9J*GsVjߠ/hhcl '6:Blϭs]pM<λpG l[@"S"߫I)q|zY\YX+ߝG~@Rv`ԥ*<edK ȭW1NWJ@bR7B qctYͮY3)k8bx&c0df?"[lG劸ޏO%cbU_{Y)aVUt j)OOOVv?^/Hm`Nih#}5ڨ?6"MOs Ol2Mg+>$@KmdF^ڈ)fi;^ە4\h܈8 0YPƳ$*Lb*g^=hXGjy"9^J%7Pr>:Z?%}7yƜ{.+" uPRvGzuҜ}q̢/ۡlk z}U&ÿ5SdWYF.؜_n uR).cIIЫR<m*oߋc<Z(X!L}bƆ# aoO 7g;ԶR3C( m3?}s3L~RELS[Z22͏{7_ ݆ UbS[e{2(fÔD^Bri> _X X;dGCjSmb "8nK2;1N+8xH^2W>2UG<9@A`?Mk?,H~.Q}?'c;!CEPwz;g K|2͛e]̓*grEW-E9qYYދ@ՓߺɐX ȺLxK'%+4o i0Tm{^|wW2 !?ѿgQkC &-/ [ "Yk9jT;t(0}طOf9sD Ov0S~yՇ0oRe#~ eJe*PaBUzgMx?l)TJe{p'[ VP^MkBaˋl{ o1,^ 3Z0%bJcw , v4 Ld=i7Q'=~HhsH嘅DDՍFS #; [8h>ߦ6,aVl,u~%ӟ3\$Z+Mrt(.k~Q| Јd̥/dKp'6)Zqk⮚Kzh3+BˊN~h)vcLub +TOx]>$?H&P%)){K=(i5(jI_dzFL!?nw#iIxˣ Ë*FEUC>.o21[A1`7Ã˂:U"Q8bn]0\'WSBXGZqĊ,)4*[Y J]J Uqc 4aYjP:o:X%+As2\(E21Sɕn#Ƥx+n$hU.oOaF-BLX;%'Y YI X`Tޭk~UB5^j~˨ ae /M%^54XG'CKgle%nX'=@cfz([ta?bQK>!`A]:E >As8y2c@Xn%5nj< 7.5}4ҙ)!"BW\vsy^=ְOYGFd; 7pBm=;93F>/R`o+rMj*!x3՞dJl~X|8kl(]$})ѝU[BktϊVmMͥ/8K}X`Yc" Np=|S)Q{)|ٓL [o6.A:xHvIniD|.sZ$-_bPNG], G2,J\$_}mC]~HhTV+-rҟp _W7mݙ}̾:ƚ xBZwk71k:b5#>|rd;ohܿ+G_Y=Sk@r:#-rFd=hV_mwK h=|@fJAs8: SBZ-|gPQQZۋu!uqa@j@/ka;Yǚ=[tFt g~K4-c nl_wV?zl2q̤r8Ui{kYu"z²Qܔsl¾3&;k9a7#L̶¿"+ E? QRïmgC0>r^xu6/W$P )sj?qp4bz1OXj=2ٽ1ޤ 2N~(|F6[?&!bÀ胔"dK_.G.΋Z|:$>ij3͍/{Ѕ-eyoJ?;2C 6>G>t\|{ona0 rIZM\[ʣBYT(=;!e``Puy^^K֫0L2B CBt2a󏭗U)ے_H0(Ίn .@ ~1yؠ`tc;!O!q}B/ѱG͚Eb IC`׿巘wIe"q-%Hm_tr=Gx2mGr:eq1i \u/j[ma5apSݝYp.cJ_6}tD~qVq 1Ɉ W`P'h xdأ"`.ˢ~ Rqx(~١tUdUw0F\2EȪ Z)LbE}'-篼_ecb;GlSee_S4`H?ml]2=q={f1w+c6tMEekꄵ$ܨ6o5lR+'h={\(s>toZoέJSfV@)twiQ>< b߿sϕՉނw5EL*n~>s{b#$&DYJA,A.9Tn 5bb-1Nk DGtfh.oFf?>O_vOj ynpXԈ.:@6QDqٖ/ͬH a}/H`)Dq'9o'w"|u(×F4HݥV@} W9KC ps.(yibݗE$i]_m Zд|zC}Rۮlj<kf#Qj _8mC(шpK "G*3Yk9-?vI!6P¼1 b2 Y!Cì91.$xQw] |۰*s[SfrӜI^Y~Ǘ2h :KसZ^O'o +ª鯧iS)|9dֽ+ Y5povߒ|!LH9T"T/c`jV/gnAu,s" c_cR.pe| hKXzX#HXmI+&o Umca\A0ϖH+3`r>1&2ht߉^wD<_Ĵ dy o2I´K0L+Sx"۴Q+yNb&ɶ>"{Η<LuM]:u,rP**W}SoydV54FɜW"^H~f z$L 'ܺrWВ$=qwLnY*n_zrk#8=ә{'HӖXgrs%|q<==tGpΨ[V4z&;oe|39ibdm8^Pa͘,c*>:@`<*P1}Ia Eq[+f?@SQ-Uq|KUo'$ln36y'Լ4@V.jd@uC8vAI`Sޚ"շKB# z1Cy˴tx04*'saoa keGaDC!5C$*&8\|Wֺ`DQ'&l5{Q 8H7.Y ksevODr2Ta`[*wفh$~gH4 m6͇=0EjL\e VĉcQ=UNNq5#-6! Dys7[oi>ZDiqDW#A%PթM>4͜Nqi)Zԓը5l@H?@3a(4؈B }zR]x oܚe:έے Q}tX I]H~$+- O6ۯ([R:zWZM3ajMey a5>ZԿO(w F9Tz nl;^S3#B2'̛yM%E̊ oP}۞HPY~\pӻY@F[;E{լek6éYM1~Z|IL1*Q:EC3!9ecִ=pՅ.L?hZ-n a",ecEb=te ͚9?3{ܳR) Z$d=jq?*Ůwk;n "ρ<]0Cc95muE z# %FNy2|baZ˲?3Cp/%>2wB]A͙V[#>ؔ%3cSQj[ ~U7o|  N(9G?(Rc"u)j wҽ'n;ZX)5)UB.,tl2h $Qm PQoSbv(-$ _˃ˎ -B7af `ԉN O"1+, OM!D*ku6hK52fB*:+=<8O.$',y&飒'HnF[t)(^Fs6X#0&F!1Vz/ B2Qd*;@1_LC컋v+}""`+ϙ|?EgPvEn"Bdރ`^ԡv$j&Xǫ{d'u/ PR#a9 =dB%D.ێ& n-$Hs*RG`@rAJvz{' 󙫠XHIn*!-FP1Qr֨_b^oM{cuR*4* ]3$k/xX8Z^{S$遐yëJTQ ]u{θ]A-8| k2A#fNrzh/pJu1)7$6ᖞA tbܰ?5+"-1Rc59c҉AHԸS6qB?]7jrĢwv#=Ts좻e~.V$ȫ,;Ěa5㵀=HPoB J0EY!  pW v9 )cpuk*{} pow2zi!KtE }5#įDʉZș76Fwspvd#bU%i#f_Q/ȇAƎ\-TtܖZlXƭddne bYCe,,EĒ j;xvcM1=O&i-QqK̆e6(& y2y]D2@zC|Ku Tg3Ug^{;oE_jШC]E`l8vNȔFbrz l%ֿeĽ&' 099;S܅4y)Y䘐=1lGszӌ-_z)Q`+T6vjmqB,RI\ٚs۠o\KQo*?^va9]}Cǻ!P#%bTaH$ݿgE-jreHg<{ (QyDU)=~t)ܸkcßvy8|&ͺ뙻 ey.wXR ,}*: -rh Ruy#)8}iFf.ATwU/%wiUs>N_D#zvgN b:(hD|(90@9 264;"߮dy4ևf_ph +qۋSw-2r#R}I#[i h#6}iR綌ҞCnCs,Ś͎"{{1_F!`I x.paqa^4?P8Nj/JWlYYMs/.fCɅhg3yY1+vȳcLZ}$owT)G.W(\Cy)XRͅהGᬈHY?٤N_ }eA0njO#/Yʖ\+W[p>=GxM`E../nQnychJh)[N =~` T堆h"o 忑V+=6 g[+?$#"S6 M+ !ͬQj! c|;܉`n{ =+Q55 ۈRh$=Bb[} 52mP5&dpw+uMd %h` p=v_% ;8 A Ppݾ_^‚5xvo}cn9)?eU3>z6YI-`?$XV%SrI}e{N[m{ۆ*zYs{ZxF{HcdKחI9ٮ[:ۡp01(KgsE҇ 5}?7qy7`z8<`_U얡|!.;B7 {ji=."J]:?7@ڳٹRqP$Ǝhl {CQ'Tl˭졪f\-֝ Axgt?>.O eZ7 )J)ɠkНxڥ!7:D݁63yXTZBr?QPhXW2yֻ!ئ'X*jw?fW/pO4N6K5qW"ב%gH|K֔]:MwKs_|0<ee'0PXTR8^8=7)vscum6] H pGncidf B4bX{ĢXMhrœ´M(9 yavWjJvybS 4z8ើ)M=r/djZ.6\,X'T}O`Rl<ʙNBQG_,a8 ,Ddpp@P(_ݱo-qe(tVi]8>f g|վ̉`tЀXDnNpE#޾p~kkNhmc|@˘:<'݉^H(-[r |106uTзс& @ mw½H{}4203\ ›C)Y0}怬cs&ZW+cO@Mc곗TUfosb0W7$\\Z}|),c fm ֚`6s/67C;+(dޢ:+t՚:~b9q 3ʫ}% mA:.i Z 8ϩm$xj*y})&Ӎ|^<|UFӦҍ#{$ޚ#[ݳi\F;STwiVVnRN02;c{0&2*zYHBk/;B@VtY . ISp~ؒcü=Ln sb6!u@fuHqo hQRof Œ:r1uZᙋG֤mL"rcS[m׮EH{>]h[RT:4ODdJXE*pˑ(`hpԄ_mޯ q)!;cdGJ L;.QGᴤ+oCoƺkOuqK4<%e9z?O?C0fǯFqh5zFŜB^ErJ0hT45EK4X4u0,Pw_}۰nYi{M3ft*O)+D)Yq5ܵ^&M2Tw+F4!WY;T|yx[F۟AcFv$WDmV|I *= w*m&T&]#)=lIpEǮkY?9 h\x[l&ED=86u{3*Ϳ@Ha59N#x[V30eYj _#03/{&u85ll |K;*gs}op)ls-]5~\(<>lȀd>KFH1<=CBUn@K* IW|֘ٺC=ŭtCh@ V(p>{D0='/TuuP~ߧ]~!nEG9`#=cٜ U, ])W'$8j; _$t]M@9']4>XpRAW0bU\ai8VoY&9GyyNwH$]5+~2I^NL## NP҄L"`ZbNޑbtޓGUȅg=N'$ c9iKLڡA끃K% =.eLNT+,TS\40E.olo"(pP _g} 43 M>,C'Rq 5^ ́}zgo񁝯Z hj+OpIN ֽ~im٨Nf-CI UBJNCvJ ȊGxQ:}.CJXjZݙE+݆?SbǃO] K!.{Yܲ5I| K 3/`Qa؟;uO^˛f]fr@L2b1w;Bq\iLAdDtK dE0:=3eZy\ĕ#7즊 ̞6fρdZBX^ZEX7fOMǎRqjJCsS67*@+@p"eAӱpWkqٵub,csuc X=ڤKlkQa6IhiY-:2+F !3~@H'_A `=uA&EO7WB9[bF6@uPf|7!VMQi#\~l^ҴDLcBj MssXC)1ZcC$,lRUcTt'yU{w]mV,UІ=aWz7ÿh w9 $2OT1^+S6]kS/cOƁ)*Zb"M~hZZ)$_@74Bʾ`Ȭ3qA(XCP,զ W.x8]!:Nt< nEkZ#YYW:ʼ .րԊ֝XJrīSQҨN2GOG4V'wO QaHHJ'(.Y'Klntkwh&Z^ol)%<`D̆AHVo??aIGû-Aӧ#daVLb$Dp:6=+%si/ S Tf۵_m3&o#7S wrZ{+_4aI~[#!n~ {ix{j|s`vXbG'^r]UV$k+닫P ^#Pg^/֓N,ҭ hKkƢT65VX\k.!{JzAzϚդ\.~2 9u7./y" y5y n7,\ud{' ("*L\&_ocKYw`qd@6DBpMz^"C$_vwz :DX&~ _?lzOL%t]NXY:x2wȍ m,aVjw|0JWJV/';!.='_BeVHAMe Xpg)Y~eO0fDU)KJcIQǐ|? UEmi&I_+u#FO.xN5\/SjcYb1X! H\sz)J\膆|;Aގ{&W^/>c -Xـ''Z1;-6aMWQ3: D`TXq;t"xzkX冊L& >Aj \ "J̏0 J%r h_A[oN(LůŏHQd5OWE(S^o2C< * BP6)$tiW*t +X9JʮAMFC'w%v8*IR?KtdZ'Qs6 N@/s !!̴XԺQf rP^&ohYIa)\0ܡQ2YǢߨC~ܧ&#WOómAڪ `T\݈J8fztCu:N(-/EU;H9f5b??<yNAQ%o3-sJ}zA+3zyoʐ L<w|Pac6`qmmjD6kY:Ar\v]}-(ՋiYlh 0-2}y=8NPSSK.W4@;8xK<>r5#o|(SrK^bɜz۰u[popP«3aM+)V!@ !1#4{b|jyON)M_梺l3f)-3g:$ _/wа3J>9' Jzs]AӒϹ|mkIn8\py&NFg'"Sg W\X>5Vm*,/wy'1ơ*1dX:˥5_W~)iJ8&!'>v@2lre )wчH7]{<␟x EWNMNPwOU¤_gi۝\oA6 k_\ƳԈ76}Ɠxť]cHaS)UMJ^BoS%YjtlhFH3cCjDvOqg8w)on7.$)dU"6)gޥtc2k˕~y9m8/:leRZw0',=ks IYx bMu%SښQJ=euEW,RKکHA^3VNʘ>FcQщ#?8ZH%'ČKh CaFj%"D غ=?̷o#-}/i0Nؼ|x?\ˠZiM E~LH֝;R" gD7gs%DBYlΉ9ρRIgM= ז7( ([}diC"f I%<[}MCI&ILnt;AV^l>+ }J!j{E~30_S@X$N/pBjU _\JA 1gs@[At5>ɧOfow۔a2}#-W S1kRL6Kc~ LQOvy|!* n"))DwU Ft6exW`g{Ttrtu۞Ϟ/彟)K/fA)Mg~ Xnso`jJ$ӊ^v2h2ittUֱDž{Pi@A)uj-*0h$GT?-B~?(ݲʃ*vJWJ j])&ѡ}%Uh";Vr#ӗs3D9A}*䄮4X-2̔i:IjQwT q+):vd̕X_xs=sU;ǚl'IO4 BL$:,gw\{dgؚ08*@-;wvo{ޚ1..a7׋\ T:LПg񃐙)'2-:q=VSU;| +tj Ɠ\53݌5gɅäSc"W0&MڗvVAryġWr_"0J14VRzXݕ1*WS2 W&$17cuBcOo}lxR>~lP{0%H䌀cT-Sk;=ە8vحP.# k2iJ1 U0VoDض?LHc #HEԿ5i+s*E:9XGiP.' aYT=c2ýjϖoH bA4թO*U _:|구[л1zCYʔGC">t׍%;_J%+b}%Q8ǍrY3);v0gu\6 1 2RҪ<3چ `R_\5P7`pR!E'dD"Uժv!7dRAk@1>pzrƅNh,ŗ`|T!ˑ"J:Ϯ]u&)r̘SÕZ!e ZAq-Kv$&Wz'~ĕ87#]ֱ-O?_kܕ !:6= Ҩm%lk;fސ#r鏨[H-j냕_p,ką9= A2\dGBh _ؿ  񧘢(V^wAm~]{EKyͲ0{NhS' Sp+0 E5KWKdång,^8*egg;52v:!+1Vl{HqC9]( os;]X߀FslT^.b91Zf8Fr("&Zo^^}dU}KqvNqC]}|s|% Wu3'iJO$<P>aC|%i~Q_OtG? Qə>Z&iJ_oGMVv8oBps&MPbyA">g'T~1u)RCS|έqĿuf}+-rWC"4iDUF2b䟀)n`g_ 4H2(܏+ |8tG4kMWL8Tt,H/NspZ:+MY_q$I@\׍{ۚs^iäl@aoǁ<%q؀&cw߾Ҳ~/|~7\U_C |1ci+A]G}eا4Ndɉ=r21]8y{/r^E|m~Ri/ '|HWj&L~+ ]5S&X:48,}nvXB8r}p^·VT$CZg\uLW vYCݔ0_i? >RRPrG"ؙѴۀ=گ. ƞE@\S ὖsßV1I$z˗%JOdb}ΰ]%χ Yxs*^^rys襋އ#j F|"✷TGX9jXہ2#0/ko|.`T# #XtC0CIaċ'YDEBڠ3GsH8Z]&(oEpm+!{j&AXQ[~dInǾB:Fn۰,,ZmŔ.I6 !l;UUR#rz4[$b+PWt( RMxvt:LD'TD 셆~:Xf1$+ۑClrI Jkzvp~ ? ! gۻgOχQdbc+c쫌4m m)[*SڃvRы+|HIiT٦Is@ ]!HJ'00\w(߇ ,i zu>GOÏsh┡J ׹^PˡEB\TYL}^NWCGRȑNf>c 㑸 *Q839w0 B"Pd7 <Ɇ٫@sn iC؈'ȤH+r2bσtW^,[^g_` 1N=k"ZkFoVTMy_-]+ՎOp: L~R7O[-9j 2&1(|z5.R6ɸv54Rv@pTK2pnw&kV~Z6Z^5J!jH{)( GCkWt:VVw#]ޯ2{X4uj`#S:&bL=4c˃dbggK-K{%#U YXm oN ~'=8!3U3Q y_9.xe8|GMOǮ"0ogB=;t{4,)=R~|xp%񲏣 b;/Ki*/:O(H3B57'eM_R=@8sA \^0=V$[az~0|H&s_2a]ղaS7ʙClG535?YΣVn¸Of)xdGHoEE `lu' =ĩ(YXr,jQdшp<R5eܳvx\6T L3Sq?׆*0KP+b:Iys `m]ҽ͔~}R*i/~C9H}8IdH`'0CW+SgJWVT#ֹ*'jN&Nb OMF8і$eCc 1+AP6k_1x O~ ?vD(8(O#sD0 M&mN} Np`/׉EDn6HAaV4$i0H. z2OݔL)4 V2-X({[lQ:( \d/ -l犞oLWT; @cJŃ_+< 4H;:p3+Ca~Y΀ɦN8!2: #%=(i}Be @F*q6E+Eat/f!|A\3Xr%ΧɒR +$];i@sFfAVe3w3FRrT9Qx_) VIaP3j.397׼X/mtЃ'Zt&gbzG:/R`rQJG ~JДյB=_-љz{. %]5/w9a0.u0"!d[WBPF? _j+La>a߹g RqKDGG9O=3y9`(n3HDžtn\%G'"˫hGs7o2Ap΢į u0e#ngT=+{.is֤'1{p:hlFĥ\w+6#D*՟\2b#&Z1[dnskB_zůג-K0yBقkC7 )(!b@ӓ>ؙ rXye`κtbq@<9Z6nWy.jvMHm {_ݾ]NvYI#ٕ:tܶ%NsƥG"VqK4oU,Q!>K_=h"c|$DQ'w?[<@dwAc Ǡx ,}i`{]xAQtRs,MH l%M@a!Xf#=rw36qTձj@+'F8OmTzHPyp]i:D]J9SDc0u`{4f#1ɍ/s^ճ{! q[!1hp }GM=W)b I" ~wcCA6`sU 7D=ReaaZkI|x_^;j7qgq8OpFGľ6WaKL\-5Cd'y5l*mhH]~2 kuz d\T7IlIHu.`X~v"0W9CA ~U=̌hVii ۨ98 CK]ʩFݎ 픜GXS>R¡znkpbo-qf 5*Lݸ2xȧ_ ePua7ҙtS; _jEo(>XNA3kfǷiQNcx0Bnm0Ij1Zg5rQ&R1薠K \@7{!V)B1h@w]QU$;<++mtJˀbu? 0|ȵ@rh~v <Lֹ6O|X7X3%L*/zY%#g5T5d=-qFsk<*QIiJ^f{M#fWZί f|g0&$N ɠAHW>`E$n<^An; i1-5sqaeF.[&ËQH gQ?YK5&l_~Ql絫HC9c'/*.9+_'\2 ~Jqʒ2* WLa| p農|@YK FA"t 11M^ŧk@4H*w{*4,s0#݀~.Č~cGj gs2Ŧ|Dfᬅt(KQHb!̠Qn ,ц,ݛ^qFד0jZ%B6 $xMыӓNsh1 =|?kMNحbt |,b%̗sЉWJhVD{?G֤p^i819c:j 2/Qf`'#R=sGO,諟xԪ{} 7.8p(H%V:eDz]-|&%L"_%`U_Sv%3Ʋ-}" G}oHmTnBYlM%!1kjM D߲\dOEᴊa\6ҏ.C^J۳O5>;nֆ}wEl!ʨbMʌz \.8l a/'smvY\t$OR5w)>n(nяsnI=5il2&sz&KH7ܦ|vE4WW8VgIދPBfπmazY{v[%`FLc#D21Nr8]?Q ^SS})Haud60ӝ gB 0-qX[Ӓ tz5͎V[}T@Ϻ)s0|Zzh!xW?"KX{ERX0ݥ(7ӖVLt+ }* ި+F@]-;-~(.)A1cox8U=ںU^gL4bg6f4~뢰Fb+O%6W >R ˗U>)/9@b| JA,qx1E ڼRBp61y2c>sW 8==d6al]OT?wS/_3Md 1$L}=wRufJ6ܒh)lMDcyaA; Zo$^&ʦ7n aʹ+訝 v@~.>M'Y:6@f)#;cDMQ^& v|Εs@ȍ 9ݦ >y0&eSB)_N;CVHV2G_NpfB Nd-fQTݢPv2o3입dL$-3|iQ/䅂pT8~EY.\1i@]13g.G8܈!mbREDݵS`_MWJLf9{_MS9kYI)f_IWB&Dߎhe0\ٮ0J9׀H΃_#Mj@r9T u}ͣhu"S]uDڌ;߁X] >w|͹)3,Q:_nzǹ˭jomk[<^,1D;i?W; T|=p 9r RXSQ+ քe2T7h' WWM| 2T~:E׷$4l\ oU6+;0AGKZ9äï,~oȾ[=wmßVJeNuԋf׻MhFE0ؗLLBNMמ5ǩĒ9_(-E ÓCV;I 9:5s2̭=#~8Yn1:57jO2Ӯy ! ' ;>2žZXf4&i*VdžMA+ynK $b"]n_U O%a>ej`X[Gmv$⊓K"Փ%rpSiad0䆜[_gi*]4=M2 +jCGc,{t?eM#npSҰ| mLLmr.Bێ2x)HJ!o,'\G5)Nlс;P>  :`4f,U([D!bzϱzw|,?^%T1vwHagۉgBfcgg+4 ;a*(\ھ vsY2;<n͈_& Zf\'rN W ׈mzD Ԗ]h-^ ^睾!hθfŏ;vs< xJ6Ԣ'ǁY9M7qx1Wpk$[j&Z|d% @+GK+oQ OWӿܡ?ƏW"n?yfNCn, W P+J\j!H&AX@{LC*Qu3.&tX Y7}j.}*fOϻi#iV@wv\< t- n@ EEMFe(!eXPUީ9$Q^r<=N =};j ӱD‹P,x$첯6#<|7qsbp8Ĕ%?AVƉ& jHE8TFZ(GRF[̂o5SUeQPم^_2d S}m^]Jg[bڃ2Tji~6@:s.og^iy|6G>wܴ2 ]}40*ܡ?@)t?LLPl;'=,<^+"MQ )KJVEUA#gA1Wl)@}LPe2eFxg~s< Xȍ VN%1.ބ;@=;/$nuJQ/|#:'ݶO6KCޏBR II<Z.98f·R&(IPÔh]=WNsHHCsuhHH}!TE򋣣Ĉʉ=ތv)c（ۀi cN#U>;5i5Z% 2:5}|y`X9NR/ @xąICBQ*i'+w JEyRQ}nԁUlƼid7 ia#~/ $ɭTYQM4vAe<dS(W/!]#X<5qm P ,ݼVF30}tq`HH3t {XvɦPLy~ $ 車6"$Q;Mk4gLIƦM͒7r]XnO6.Ḩ?D1gf (\2wyx0taBڇN,mBWe\#?i Fw ׮=a҃NpQ GԀ֯Km=RVuV^>xq=wl—}RXJ% (k"xJd%b(x񜄝æy?SVtgn7S_݂r]3! y 8)Wi*}3@z0 U~+-ijr#o(!"˵m RB_o(,rZhœcH[! hm+$}I= ͒\ X:="ICLR>+]0S!%MXٞ3(XoqA B?q], W_#l߂6qd#L7d(QqY]̙;45\WE t "5Ͻֻ+dǶgᶳ2ƚ&p|TZԹlGD#@W2n̫'f%"X9 dAMAwQBNTDʃ@Nmq2jB;>e?j|]@lѐb}ɗSREv/Éhfڛz!S%Oc3Ad]eot[<ʁwr5=Jb@.lwqXfzO ,Б]sגJڥVdo=Ju&yH]/L䨅/:4 SBۼW!(GU_%Ҏvc^o63Vŷ `aȰn)o]߁I\<[͑ (e5mQ S)ŞH{ 3Z5 dޢ h yTMz <{bI" lӵR(1l ' NXΊ5Mp. ʐ12o,0+Gbr=3vG%fZ{Ay ^s6g#bǽ}^y@Sek[/H9>į. rWV?#H݀ߚ`[.1O1iM~]%{!l,Ij [cbԪl?7cWbmdHzQ/K~"y;[8o}c 5w7u=tx1}ʏށczk=nF(B`%^38M P<$}W?/qtXV-/{Bfc2I~iojgnbbzeִ1ˡ.%:\ ѓ~dLU޹v;?xzUoїSHm?[l$vsj3KAH m}"MtU5 $κ;:ŝ<bQ&gSGeCx :T'hUn&A4OXtqop bĐF2 @nm|nk40ѐ3 𓷃CkF-mM$b՗'O9W =#+[y-)}o~#?ROܿp&ߣ(UI!1jNWݠ̡LNR+Vs߉<<F}$JȘ+簾~ 8pk-Vz]?Kp wfvU!J,YՋ+7܌Ah/ukۄI|f >0~Wט.سEov i8kƋ }n8`ۙhCwZ&@{ҹQ1 $g\"JMLNe :y=;YI4<+!} kayH]Lrh*zCVMUgVZLM V(dpKG)5n\pȰJjM VjL'<vL[\^Bf8Nq{]N }iC2PGMMzro%N/]5|4r8um+K{F=0W HYj؏*JVu7[q_.]GPۈ31aIKZVGM\e Kz1[ۻN6@J3#nn)AecSl >.`hc*Mw%޴0ڻG*HLIJ4ېt)84yI3MQlL6H܌NĬmgǹs0(q3VBڠo֫R+ʝd;6w¡](G9 s+p|w"ۘaFavP;2o} P<K7+g R.8iqy)1O+:L!|G_=ypn>(<%NQ*hB]f G _ݣw0xXk_W|~qQrl3mߟSga1`e# K;Xk`:Tv1xgl/dRaц< A/VD'7[_i~,HРuٚG8KK]_^p.g[}`ώ 7ڣy!dV\2ӿжH?:#zC߰)f?{D;}`@XceMKTjW|s;{؞E3hXᓃ3T"[B@Oy ԡЖxZt'i>q`}&ri|Z22C\v(=V+Gi[dթo H֝u%Z]AVykn>P?^$9(E ժ62N-0ܴ^XbXfv ʧ75@J,}ijLZ/DzGQ0Zlo2=<19<zߺU5j200oun☀`gԤJP:¬0/_[hy "C#0)[S,#ꅏpLfm|>rK{.}vD (yЊS}dFIˏ.mYbF jToB923Ĭ_z7eB!`A`Uhl9gfhȖ%whXuچ.ܵ~>c&0-q ;] y\ Rٸf$O Ph=M^7lBwF1rI  z}Âg=NGNjl40U 9U=:_hWRHK,9h` P|72Zۿ6+J-D٨rf$ #J% O~L{tOuY 3O dE'yudU 4胇t5$]|\Mڥ]duy {%h5Kw3X^7n;>SfnSyV`^hʳ"'HcЏZDuU\ǖr~В'D4Ch!uaI`#%Ɗ+x튻B8WzQюDx^One>Yff}  Oa۷g,1~a;lTe}&ϊ.}&nлx7oLɾsMO^rp>_MõA3\Kkk9"QUۇWSDy8Z><Jթ~ #ֈrt7U"߹\ eP79ٞc5!µM:o;H '-N>I> jfQl`mAbA,eRBFQXRΥlYGLbaIѼ^N$qBMA} ~7Qԙg͒ =Y0:<iBP)[{>=PMƘ ƭTU|\^\J@r&ͬTiLpt0?+Ep]1kqzeS*ιfw#  hz?b7kkqga ƝuAf|?fyZwO^(j#/jeÉ{$V13hoFisEdp!ǒu %}aؙ#xOk{#@%5%+4I#әq V?Kx;s(Od£B{$j8OGҺdɔjsU8&&ηMRx_@MmO$qCroc3y gs^tVX5xXW%Y'aC d)i=dc-/i#8گB*31muKbYR$UO8%B n{n߬\({[\/irZɯ<m!BpԒHIT(b5nfG.VG_opyjJy硿8"1W=U^GEDVߠfҍo~R{W-P [dFCyx_ ZGxį31RTΗ3U nuei'edk -p}qrXëʡ?‚j;A2v:2FҬxrBk"p$(?H}Hu'yc= 1INSYg8vEm4߿~!rZ1iX1?%mSq&ۤra؋81]e=)m0S =ǽe5TST'GNm(;$ޅ$19{hMe$}o!j ?>XyDG[⪦Y=v?ȍށ5[؇zm^&źS<Ĉbqy)<#O')xBh2f/!x>6fnmct8`X0[X%~#[` yݛ c:R,KsiF#ʇ򮬻91R0?3-&WQw\!J)G Zq}d .s[I&yMk)HYWFVH& $p+\sUʷ[)^MILQ9f;a=IN6@+HrD:o$g=d8Hʹ <¿g ?տl[sĒ!ـ3K<ۭR^X) YוIYHnЍ|%:^ *yIfht8{`.bˬJGf#IfF((6NU 3ĥ9\%Z ~&Y:f{{5z,ٕRC^7MX;}" O ovR.y#2u(S>NfQ$.goel8L -AehStp7'#> "Øb K]!o̊TSJ^o+;]tY/KҵRP7ަA fojE۹moB-v.{ꂲ5H)ط~C'ٟrsUs)o26cm[f!Kw8^>VJ3ˡ?`ۧpDC,]̌ -wJΌ_T:5ި9$GCX;罳:<BޚGؠ3䆃+//;`B غ(q;3wj)y1B8YN~+٤F]:>YQEog焏|Nj zFJf^{r`xyNi&H4`5dM\9\:m34sG:LN 3,K^Q؍ku X/m=bi:"a &`UF!#c " l N.:m7m &+5Pܳd>:`E@YZՐ8]AB1ʵDt К}:i٦Im%8~0Gnm;:e$)eɗ%vu ę;`79WKDB *IBV-5C.aQ8|<HX cY0hׂš(..!x8pOgL=(lʽ/A_Kr.8 YZ