sssd-ipa-2.9.4-3.el8 >  HЉf))Q U]_$ETTCO@WV[`FXtK /T Un״7Z^wٶ3 Ih0eO|^ Q1:EN[wg)Cy7*+6jT8D2=3H` ( e:U$aIjrh~* WW6r٩OZ.ۤ,G;/7'|oNQ8ՆֵW`&;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))Q U]0I2m >$zݝk J57m%S.5T$4Ϻx2"d4N:Um7#&I"*`-o鸓Au7 ٓAj G.t Qy1~Kӓ.^Gu>Uab5~hiIO >`D?d   4 -3: $ @ x   f4K`KK(89:jZ=GHIX0Y<\X]^fbdefltu8vpwxy@O|Csssd-ipa2.9.43.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.f!x86-04.stream.rdu2.redhat.com 4CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxx86_64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd*( ~K"U(` O)1AAA큤Af! f! f! f! f!f!f! e+f!f!f!f!f!f!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../../../../usr/libexec/sssd/selinux_child../../../../usr/lib64/sssd/libsss_ipa.sorootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.4-3.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shlibbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(x86-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.4-3.el82.9.4-3.el82.9.4-3.el83.0.4-14.6.0-14.0-15.2-14.19.4-3.el82.9.4-3.el82.9.4-3.el82.9.4-3.el8sssd1.10.0-8.beta24.14.3f! @e@e{@eReRd@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.4-3Alexey Tikhonov - 2.9.4-2Alexey Tikhonov - 2.9.4-1Alexey Tikhonov - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently- Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.4-3.el82.9.4-3.el8 .build-id585f9f4d1b8cb8fa53d1442cb236a3f1787ae24e221d742e69f18ef9693935b7506659fca487dclibsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/58//usr/lib/.build-id/dd//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dd221d742e69f18ef9693935b7506659fca487dc, strippedsetuid ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=585f9f4d1b8cb8fa53d1442cb236a3f1787ae24e, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)<<PRRRRR"RR>R?RR;R RRRRRR4RRR R!R(R6RRR.R5RRRR R8R'R$RR R)RF2'5,λ2#J;|2I腢]}̯R[蒮l4V /YFELK&}y.U02$ߌ!U R Z05F-{TWvN*!8P1u*Ѕ$%En]zٓ&{@_hdkX6:kjb-Sĕ'9^0Ȑ+V/nl[Crh5ݫ6v RʣGX%7CADikIxd4{CH"{إ!6.c0g{ ("ؓB9'E`GNLc+hAxXS!>)0-zhXّx,#oޞl^~ۉ=bҕ)梩z3K7J@X8+qz󌁳Pn"n~,'7>BTjoz\ Ɣbd,%Ng1m]Z뭁vl1zK\Ύ90Vs [ 2<ڳ284!IW]-DZ8%'gi[FW^Y^JMa6@x$c護NXԎ8q nc,;KSsusam)nYr@ Z|^ic9bJI"1|=wMND  ړZ?+ lo=BmIs6Mr7`ըyZ{YW#%ŭ"  d%H#,W̝l*jj<+^nFȭ+.hSƴ=ZE*4m+/$[t'p*w[71K"c~ cE73a]}ȊInKv贋96ž(UWINysRy\l.φ&cAބ#ЋbWQ! $XI'5Ak8"($?\RszW22\P0Y-RdM>'F$<nq~U3C9Y3Ɔ΍ {=Jr\-K {t>3r4X1:pԦ6#=פB_Ϲ9~M8Q ,OJmu}I Iy,ZX@g"\2 6 \d۵OZZ]=&sXԢڑ)߄ 256 7C.O`Ӧ"YS ù?".ut3 |n, yf_Og76?ZfO]#Ϯ%lCk_E jZFega|&[ qc3T;s KaL9Vu6J+(.yc3XWZÂRkzuϘ DX7: mCf*ͮeUO/vUr9oϏXmV[ᑷ!h׊]MJLߣ={']oRe޺p֋?c Gb{ZKhNw&Wh׮NPkt a(.$=AGwqyՙk<",rjr#%Y"D)|E`v$˩c%t烶^%Gׇ-n]C^3ڋiPѵHr˞m!WNn)s*Ԧ ז^6Fw3K; (:K@D(@U'ptz\*Y] W:iO͠a&;«N\3]M ko<13|=O u-9MFPSPʟ+w@{o,vK v 1SnAG`8{ #dKAHr&:nhNEʐMcfp7MHmKݷ+)Z/+3#9 %nH|MqƦӑdcJ<1R|R:yL;,ߝ_G}!5q*2+R:#;P842me"{kԶ8:mZd#bP> t3nP2AQx2zhfdvY T+xCRT7]OA'yNV+?80%)=rY\OjрlrsIo2&Ėؕ2Dckdy"#~7 ;aJ15c)>Vu%"Hs&]|}:Wf ϏNS!e i)nmV2{]oOţz3zjSF'P>jb:s@ L h'+zi TW<Yk(0Iʋ{z껪=**>Oൂ@>AW_}AH ń bHÓ`U ;nhI٩,""qhVr|S]m!4̉C̈́2 Z4kz󝴫27=r!;9~T>rh G p-z9xWV\8Pv_coX444"njp5_fG1A>$@ ((Y_=2.TVdِϬa ^&0@XaWyrZ4*԰ _75(|4QO]WDw}D 3Z@>aރzq᷵ie'Lԡ㠽2($VÿbޚNn?y+C߷aZ+|6 S1@zڒ۹' ]7'?F656'$K<%\vT\ B/]Z,@VԲw. q$X_`x._jŨ)( U`!7޴Z\_թF 0m1+iw>ė?*H<1!'5T*3' wxT6r ?sks2Z5[baAz% 020of( ;5)r)%?iGϡB[D3 ;eL 7н!q}f[F[$.wDLKޅzFM@.4,AЛs s'UںOon/=dD2Uӝb !$/Cxo>eI 6{ -Stm?QD€6 *",Cٷ^ZXؠ|YQJm1% S$҆uu_{t\6P,L: pب9:}5Or/~ula7auԏí/- #OQuPeFPAyݟ.$~ L~V895 g<~iCD(sHO5p 7 ?@@Kq i| >{*mpVkO%L;{SI*%8- 2i1FI_4ϔ *A(Ѩ_i'o!@F9%F؝Ii`JjÜuIPM@rjUml7&jJ&yc O@wm>ӄR|c<@cTՒvANܭ\8)3oF̐swinbYg_9ev.y})RͿ:-~NG4`Z5V8lJw3X'dI"?T?@HfB_QJS.j扑Z%!n`¡B.q/;q-ĒMd0d)WamEzw3:)mqP^uʿTΪOٵ>dBXV)S=<.-9] IB}l`x% )bWBCE)i =םiJȱ)Ko}`2bez7m s006rxr{}(vHJUOu!b L$ [zLWJT$U F=&5ͣ=U@=<"mM?;'UTvsyIc 5x9H0D ( cpŏC핺[xOw_Ŋ5ݑX.4;N:;#ʕmV4e]x7d5%MԨ5 pjQ= #q(3ș9/Spz\MקOj+S` E0sj EeֹLWpDz[X-6G~@1iP!kUDr!kgsf3\_[b6]\S?Ҥ#H4988ipbC-w k=Jd/Y4C-4J71ՍGlD٠u*#6p$+󀝐~v{tn/p[߆ o4p9mI6Əq2{Pm?-}7wnkEׅe5`l~ ȱ;"\M/[f*LR;G)!@.شZ][-kD0 18aRBc2|#p?=r$co.t%t-7N1^Ѓz aNO-LLPMЮ[?q< RW=$ e5֚gl}!a|}~m+g*n=2ԷeI".\ՆpqHO5cϪd+ާ {W_dԺ[ ջcJ<'nR˲F"Q+NlJlKӕ ;$5;@@UtԢ!o1a%uSb{['r@/?IlyJz@&tW@ \Q^tb*eO)SV tw( JbVQӲHk")!㐾ݱ:](hڒ3ٱvAP):>~ $p2 ǒ9{0rQcز([5ha]^@holIѤWm9Ѳ Q5A8E)q&aǼliy~o\/h+ʥ3Ih@V}QBR=єwD2si?uI{`}U1}Ztb9(Ա=s@5&Vyc@Y_YJ  s'I^4Mm(N2_ ˔u/▣DD r ޶JI0u/k%Ub__O'5QxK 4k~ &"r_ 43 }~猾f\c*ۨTU[|}/C&#8PR\PHftYtIqmJVd8ڠ߮GըmBS(.4BV:j?,#)zaeO짾p;ߕw"a6 pku1Q;yplH\^.zM{ҹYu)cN$eϳ!LӀګ>Xhf(aѡÐ|P?Yc͎ł.Ҿv9aZ(mo <߿|vrD=D3}/>9B,^MFG_veFp6uˉzc΄t1m/ $`0#H/8:be6OlOxmjZ[G1hWvmbf j ws@C8T /aNW >K ,S z.5~Vz:Mخy̐ mϯnSvzKwKWcz3gOQ]蹮*^;;:fnw ְ●)3Fdgk >e2<}/^ ;˯]JAN%JVX— ^}7'oL *?%g2Du'fx_[LQL=GdGC? s:a cB:@+TFDt̕>8_c3A Rgj]Fp jsG#Kኈ) K˪4.zBmGDڻ `>7fjlvƘR=lGl0ͼ <ak z^`<615qѰ]7o3w6< 2pv?HVl%^[r̚J8dc M4%7 &XW?zVw0yUzo8O^FP#QP*5+v2rXCq 2\S7n  [Nl)O{S2NR~:4mG1e'0J'#zTtjKߧ%t 4n hȷŽK oUqq\ƜW]Ky66DZ&m ^"!"l$U%mBIRu$фFe0h LJ$ $P3DJ۷}o z}mXd=x.j|4u飌(\?Rv uA՟/:V ‚uY;f1z uQ'3#eqs,\Ϧ \Fe'ew?=3J{r9q<4H&A>Q𙉜N_raUȍՒϴ| )W0 m`jUS 7-Q TifN;q]rq[|ퟁnFd/Xzwe#p/Zg <Gٔ; R/kĄ?.bp[u'.ĉOlySN\ˀ_zSj4?*IgCݭTe. )#?EϹ$`y[Z߇q|; ~Oj<\1mIe3l,2<]?̄krLYqWÕMh#gD,Ws!v0 [@lْY cASQ0uB7>4~tè%zE͎5z*+aHWW͞=f-p4!fPHu!G1]Pi(CB:D3@9P%!}UkPr sO1]>=4YS6@mŘ]?]=qH2u3 3fmx,j v_2vC-(I>J0}Urdo|NzAJZ4'r3)O7f>V. ;RːTXFp] ۂ0̇Q}xiBDwی!n&222>MLl3} ɕ lӪk Oo 9jc4]oT]3ZlYt|"⡠/n3j@T`0$/L=RQ-{{-^ )%BCcK%Y]V *ͷ& v9ɉVz| yxe+Z7vm!@_)->7/i+ᦴdk}l. /X-Q`xPsbvx/9X}၈hj\;+RBܶyq%N]3k5 /ZnVK7`2ճFĈ5 ᑲ:e}5\-=tOmN?u08dd}HuE.Yq?OT/g{NJcZtt14n (G-jB&|PYg,a\|&m708gD62D 9Tpe{#C"tƕrˆpG@p[%( h g:+ F4~+"wl oDT´KmQ̯Jom*wTo#4O'-u(T$UՆvRJr!{^n<$h1መ'Wc] Yq&pBSK *Gm$Q]'8XUn;n<Ӽ~p8 ?I,XM+2d kDR]B[ױ}B-aL @tcMCN[YA_`ήοB@ D'h)pB3o޸7r|zKuHKYH#d#0vKB 0爘1\g}%?= rcѦ&V&QS0dԶB ;Ȩp2=@^ \_G~}xz/PXR!Giqu.jx>u~n\_>۠|&U&Wz,ZGbj8-*rq%[$/6Bd?_ NӟoyaV m"`OJy3614Em_7(Ȍ"u] Ӛ-ZKs[,YGK͊q%4D5&J<ݸ)["?[.ثm#4Xq@Y"c 6w 6el2ԞѦdbz/'"jҐa%UDŌ)H WDŽ $@$W PP=1:R{إjԚqI='w.FI2=Q" &8X]"j>STft |? `8V6chizLFѦ uv=|),|* ~|PװmNtkH(bCJw;2A`㴲Or_-QԮ}?eP=I[7MkPd'ߥ g]H1G!7,#SZEwTaEWz3pdn,k0-L9<`c?m.bEX]oEqg/!EM!/@ T;g}+]}IWA^P߽]3ͷN4 ̴ &{<:uVכ?yH4 3 q?8iߴgl%rL4l/a|ڃ&z0}gIJ ͈#6j%ų {\۳O-dVjRr}PFw^VcIӟ%V>T2zzV8>w# p1%J+jpy@س2'Pd+,#нY\nED!4T6ww|?T>:S]I_nBZrPiIAeivZJ}u/E=b͚Sk~*q޺B$}dT8=f tu]kƠ7^sgpΪ`38"7_Z#L볲іIx)e/z0lcHC"ݗsDdnP@9D`x>}|܌Q܅ 6}RH*E2P^s?lF`'TBfyG>>+*5YGс@gZSaE=GΩ wX8]ELC ,jhՐM0cf,:ttqe\ѝQRI]O3)sπ \cʩ҂Nv}j;3dFbױ~GHoqK,1T0jD<] %k:X>{2}2B"ST5F IQ8U; gAqO0%v@sL+>vZ^% \ɻƬ9cސp,@8 }ȧondrM4Jc17εv:|OaƢ[Ql_\*RJ*}lxG僆ntDR -t}.GXlKi,%zh Kuq/3?n?V̹ fb9i)ocU!hJ mv%nv\2K.#TzY2:LDHh[E\dddsns:Bex>_zLmIp)ޯr,:d vSiQsAL=Q)XR_[o|9>NpYȵ:46B)];+ iґ~pTgq{G6`tbi%'N#pWIW5Zp bK{'/эpN޵ߨZI)=Ee,[C6vieOS*či6׷v:RQ\aĮ+*%X@?@d.Ϛi GCsפ^ 'lD= ޫ e`/)LȀ҃moôS.!,Pz$WN[AFB񙗽T#~XY`H?@goAA*OJs|jLݒ|Ƣ)WT/VtG/3GсB@3 ~?uO7n# Jw?!Ge8S}יmY_NBrvX} oEtLq5=%v"JņXp"/?O_4 5 ?:dN3q71YNOٿtN1+ɔ*uFj_ls%(Jo]/2* a#AQ%~{ݯ9CV!пVD22.t-e6u|i~Qlq1T3-EYBn RTxSno'{l~6Xar)XaZJqKjyD+zga(`酩nF놟l70J\Ƨ ofQk}^B9*dnQ-Hq&' Kx&lŝbT+Sx d 1[+dWv-S _ouS;1r~ ЇSo@y>>IÉaEX.)1? t?=؎rUN+u٭QB𓄀ܧ]xYPS/z2m؉mM-Ƿ!&tQk,"i%< R$uBsޔ+:kkLL7)+v~9C0žNV^TSsWs+xscH-٬a K8R($Wf#m{ȁ'Nm6D `] BJџfM7 N&PXcvc۪^0L)!d&wn|xL0m[D/KZq+⟙LWS(<:?.p= ~h@D4dþ)6L'VĹٴ)Jp6kM2~ SRn@\dj=rE4.9+D|RCPu<#9TbUaʧ1E JjѲ^֣rkpkב%|ri6 5lqxp\xeTɠ#Iv#r$ikȾ;=jɱ1&kC/Ek}JY?-=DBY['>z+e-@n]2|ߙrT[Q/تguMs-SEMt>Za/Kms!wkQ.&RH Y#g?O7'"0^ȷm;pmϼXF!Si,IY/qCݙO3&#"޷=[-"Vxb*;|E]F~-iqk 9xCSygqz vތe׵g۲~.J$G+Ԏ)\磪@hh$C10~4p,қKel-瀻u5'5b:טJ`׿8 9k@4'g8c_!>Fh3odӗ*yKyi1; |GJ)sm>Tac\ɒq s8,Xw#1M"))A-QD6v5kE?&*kO2E0j<\'GU{#K-?D~&YؕpLOu/K{1%gScKa0eZ]Cr_VgNvDmk wpz7N7඗X1_^Ve&ǚjW; qƴ4BVz έ;ÇJӉBKN={ ĕ* dg mvk#v1tqAސNèԣ $O5aY.c< HL ,u짴|ITeHW߭dA&VM>cOYipZK4zKB7}R PǴVlAݽͿVMG+jjN҆{3VH IiLSS` 6۬\VD;=Md&#.łͫ<1f-L/W5܁zds5[Bf2ip%t#TAIc;pV.1EZIg*%7CBwaaPW%s2 p+TK[1t mvk R?Bz{|Jwl2 l0ZۏN hߍgl,­$~Hϟ–8%zaE+z e6^NrFi4>s =edUvm .[9 UZ{z"lQHh/zv7 +9ZiJW'̗tOwʳűqόCiw4ƝbK.CKM{lcMBC]2P8dIsZC,F:`Q$tA%c\wkK((SUIdN_H#J蘩Q[:XnVO.AsJ ,>pi ,&2M;|Y؞)Yk u40~$X=/L4L"HW㗿!L qW± s CLE( ͑eK~J%$2Up>ݟx#9 g6~y氛d4M  L]VY農]Xݔu/#jh-:E#6dZ)TCLJβ OqCH^+ ir~Dml t!CMbT\HePv>+ڦp},|9Tqf9zbVMRMc!贲̓ Q4FӁh+h"GR?L!,3 T>;\)cjV4 +NIgਪeW`N1{ف! P8h柜y C|;q̊=,EbtI5C'A8eͥ|@&bJ&7JlD ]YSʗ彋Fc6a-t'OJw*.! њ) =tM,Ŵy2QՅmCSn*=*ַ$)~Ъe]qO\/=rL:e5q4bF̂kk\ QX`L/kD Ǝ) !POՋ:U<~F;O~;7i[R$RI 96XK3壦 gA՞eJ.aP_Pw/tqAI$ϜjǴ-FUdUeׄm8+k!h'Z%]ǟSɓIXh){Af;--ttL(p|; ]krxpF?TdgT$1`a8.:lM912+~k#$^MN_A=x x6bCxJuGz# *#Ap x{OPVV "9z:&Ŷue/7'h UچpթDoͦeTF?|>7DO#Ca&|Ðz~@jU<ڶA<.ɉ~; ;!YՊuT,+_*-,N#qtZJ,C;wCů|kJ}BĩYF㉊,|$QрliVf6 ^$֎TȮj`{k7\ҹ}Ҋ(F?c(Ho@t}xUHb6OҞ4Z/Q_[lϲ~,舶gƷ׮V>-U [ ,S7s`m)1tg߼O PYwg鳭=4woz|[d4Nɵ?Ehnf,C0*(+aa( q6pm7^5J@S5ڜ`}/kBB?|Gd\BPW+&bN!)|c 'vn2%X \frC5RA:]`G3紘s+xVx iU6| ƍa+9q'#e6致qʔhHP=C.uTG(?3j-1oMhn-W?XSYSD+8"+;XDỏ9Edʎx0h%0^,ooS:٦$cߛc t^tWRI!!{ҝ2MnW=JK=$bw|32n7q ^-@esAZI>fҘhz:Ie `EeLf* s5^r1Db)+/" 0_.ycخ=e0htAUP8;?l#<Ƚ8zl;TH6qͦ,$)BFޠ{D%x*_urnVݴy;_f4jp{;i FGv)vAhB%ZܣdH?Da^d8+tB*EX<.vm4Ik.S99Xa yh~5[C"I~J`•|.| fy5'WeZpL,lMN73K+ <4meWD8򈶹. EkƼr!(S'BYE x+fouIZix٦"䟜[pulK2}LR#a㴳'&7$2&%{kL|i< b-$t X7` Bv.mP4:EYtKNb( aAU[U룔k6L 'XՑ蓾jf_݊ ntn띠P^PFI82>׵#Ec "eGt/A =ȿ;DQdPD"gnUslga e|WhL|r]z9r^*PFyS>*b`g=#6rէձRsV$g]V5o#iu%% \4jɔ0ِ񿿿EK\) ݜ rn'Mj˭PCR~tRַt[,uawT:>b0\EXeɄ5X6/g&$dH 6^ 8Ohp!G$fj0O mźyVv~ӯt"Cjm@6ZWޚ SG0_vF-{2${D ÇLzDg| ؽ 1e$4Lo*G[.>WjlSc-&"@dCR+ϡ Yv6_?Ij -2Q;qNS?N&yxS'J5) D\K>'#b>E OtmX xaيDܐx ظ5 >p9U'1 b'tU ,q')5 nխZnAQ!} kJ찁Uq9qdzb3Ul^~]ƆG([~J@e VsZfxy^thd}5=B{pHIclGU4 5V`ˀsmq&GԘDs&:xr({FǞ1]jr 68ipv3'=wDj|BF]F.#!^@hOE4Y/gQp =E.y~eavf28]X~F;9T5.",OVuE5 vN{pAՓj=)WWr]]BT"\Gբ X}[3PR M:nWxw$5uw`frb},޻:,rӑ7TfONx5A8eg(mWh!P=`E` C H/xNJu,ٳr[z2~H 4oY|u14}U>JTpf!;!XS+L<`SۑP沾Q OFؿݑU^ՐWF Z 駤.5Ļޢ[t`j#LM` uN[8-C'lHކAEzBWoea=:Ԣ9׸Rzw|/?:lZ (t5K=EWE0!/Ѐȷ":6gX` 3X xQ5N?^}&5ߦkP*.lXJlN+.7K*A֑ _/K[;?aCizy[6B; ?ȉ7SG ?}wK[LMk}9sqæ_r05VM}Mp1:"P(9IT_ !Cw 4N2Ene35ϓ pӋePies6oq~zd͠ЧcGͽhV%#ߟQ!5a"źAF @ ZNރ8p5E%c=r~qt2A0d-j D-:0qTRYˏOS?0va)O8\5R֝NPژho mz0\:}:i~l:B~b~奡+,&D㽷Sx?U?GX;s(/4ꂣEEWJIl[C.sͅ HAa}r?N{-Dwu,u+ы_@5_OߒR rR1renjxjgKҀ`=$m>Ҥ"Q#']G_S =z\BM6kD0)J 3L$aLH[Rz#g" (@ Pȵx~fx7(10d}y}QcvOn#Xri-ͼo.[`!Eb+N=5R_FOO$:}=J$&[&vA[kfI0'&T KM:Q1DZbv&p,,ّ s̰:]P脸hWFH4]в'QjMh0*Mb} ?酺c>y$2a]y0M67.;. 7㍝t}߻r-xPwШp㻽Z\ANStw1n[-8C*u1?Ċ; 5T EX=Í=][~p*I&{${?xZ۱ 㤥r>|"E*q5בR}v1tzF= nh&7ՈT EK?n"Z#8;/Wq) ߂˧4j$`5[ k;_B'P*3j?lboVHf ܎.[^4!95+UEaC&?E}`29(w*cPv/~d$ El>1^Y`!&4ۍ#\[=Y;Yz׹a P0cG_F1ҹY|Gwk%McۼbVn8[Z@i\lb/O498F)ˑcT?Kɋa_\& , Q0ȅ%%}OE{K T+ƍ&Ƴ&$ƢU-nSSwy8+ 5Q恴_O]cNO7uh3IT\lujsM;]\z b?g3t0(+8`Ω?v)T(,7ņgzAW0^KݓHg'ADMTB~Da7ܟcgMn Z/,͊0Zw"qϤT4rN}hJH-[=iKtr&%~7_l~VR]fz)K,O᳻@@a}Cn7q3)쨈9T+V{ J4D9AbcnՉwaWєBW2,r N~b2N ymԩ)L^ok1e/#?>KoE9T\pU?d\H1L;€V%i7y^k0%ȥ ^ @JRNwz[)c\vyWE$[.3_C[,w{aW b4AH7nD#TO.y ͠Q2jCP4pXyAnBapTʌ78 @]c0  \p*$ =G $գi?zZDHIZ '^ ΀kV"tT{=^F+ kGl^ueς,bb" -(fE5/ygopz|5f*Me섆ͯ_w<1lO{>!m=).X')Sl۴% %6bnXJy Spb~lˢ \_֗%{,vȳ3Tz Y5neh&ޫ}!ɤLYz[bљ-;Ge/OJU޽B* ;qq"d:4hN`%oX$}@ eV:/$Z 0JHi9 Ȇ(AF^5G2 W1SPN rbi ܂(`q{K SԽQd D*.y\w [)vnCϧg%kF$D5+0ɾnh:5pQ1]q{ѹ_-Mٮlظ)DF -؇f:7٤cHyZKo֪VM0Ow QS,l.˭~xaJ[E,Kt8K #.{`Bc3BwiGQq;K`:pk,D }~*dd|* *Q< ĸ6i7~[20@.)1ڶN\=ZENg!L/E@1ol[K<ꍤ[R_W5KzB/^&MfwFM_.Ck̘ 7{@H Sy~ `vR{,=-5=ޗJIWϵC+AiIJe/Y/'MDҟ|^j'n5LO^{3:wiuȠ *f͠/erV:I~ǘ3rȂn xr a \yy & aPH&$ +i[zrCrMY*"Ôģ}(<ȺG]'nL ,Bڜus]DZ*O.Rd6;†tPb5}:F+[}M "Us E@Љ.bPCFG`e&=ZAw ,r, hB1tp~̤CY.PDο lf;Law+GSىz7n(73ʬ[%f:xq9Pt,ϵttha\RU)V'œOw; oxZ7~/_o(7IPg},޶nAƚyno 2>Y>>rQ:z37SP^;Nӏ5s Q#!RB)1h@8IJ\*iP+xlڥVX iZxDL7^BۙyWÕzwn|OCe0se$@Kы&gôގ:fcsK>~eIպ[dV ^GM3Ao~$aQ&e9v>ױ ynѠӴx'65|hf='nO:[烽%~y&|4wĉƫnQ XA, Ğ(]$[̂)O_qH#M^Ϛ :_uzB._3[wzty99N]_C8܆r'MȤΊe&G||RXR!}8AY-hEV{,jaq3:4t\wK8"]Q[QhJϬ2ʝbty1.-/C]W@,eyHy^0bƧP eV Z\`nt|(S<նQ/Ӥ O+߬X'-Dg1W3סWnVNe`agdh p)=OcHz4?ڗgA Σ;2:{y>s93-CH $^k\_ЬyU\i(As9B,aAųLffKGuNB&smr/X!aȰh${HCn#Y WؤZ{7{BJ3pPA,!XzN5K> Y\wYJI?/:{7@*76MK+a2uqrSOVڵNs'+Մ/hS89me[,ՆgfNZH2qɻ82- FP0E9HGTkC_e1Ӗ\$Һ (:y؃ml 띇,$!ΣFCz}5rQ!lT5N@UL]t ѣjoڅM 0%L |^chTOEį`!_y(A%b']w8̣AF_ R.eGp6n`a{SuYy]0)EU4(*KI9'$:޽g|3gOƞjY5'Am&jrbgSCd9S|@fkD*(Ԭ$Ό}ZA\gf! ;M€,ily<]3d5]nl_JRݞ3=u>~ozH>7@!om-si09CwmyK`A2 9/_i-hj;)wsKdX=h,uä.?V?q(4,7Uzk?O|FhtRa*!EJ4 5Tz>?W܀؛aeaijW%Ri}Qs& xE\7jK?=F-_q.Tioٟ#;(-8 f 7Ɏ(cq8(.2AAV̽D19FBmO˧B8_O p=l mHޠl*?tE:*J@)鉬6&]9HyGApk #멃*?"fY9lq,'{8p]GS1c2aSqtqR~f n$ӘvTF4P9ΖvܪyQKwr+]9pl0Nni @BT:(RHIgi>oۡM Y99}&z[#w]t\GїkЬnpNI,7Y}tAIݱbnUf$%NLC ^2SM ’;ђkS X:f|]Էi2Iu,rಓ>>4Yd#!PlDDZ7mnMrPiaprĖwA40/WC{ٚ&Fh;,#ԩ3b}d:ke`1-vS)GRN+e٭aF#`$@H瑣͠hiUV -GA\Dٚ1v(((B% EՂZG7UPy8f?v9OwM/eKVvm0ӶLy߀CKVlYBcJvl>lc*v_ Z%s~IkFvIM oQ6ᔂM 2MƉs!nU"\bjGCAհB>ҒmɈQOUSУ\g[Άg_([_뿒iT}*L-ˤd5M/r\U4Qa,@z^Ir `eXf!oҠf%ꀤ`P#`Z] `Ckhc0B(|´ G9{OQUdݛg k+ny8tfL5&;P{v|![hZ&;:;ϊ76 C8W*`d"ڊ=vȪip}ۂ05i:i(}ce,joNt`@ ] C% RPkyYU0Qku/ak ppJ sU8×~qjNzt&O`CASSd=6/ '׸// x2 dFC9sI3 aJc 4ňۀ`|g;b{H ˇ' PRިQĚެ k%'=dž21ޢgv-cJs֪|dk:]O)P=h.,[ER{? cz=geR3ۙWEP_mzdڰ &e@y8G4j󢺮egi:ul.vbRkHDLɳ E(ص 1݊ܭٗ\`Z,e+C1#MjF@"a;NN5]d*) U]Vc(@݆s<`aͶR]<o>BooLjšm7Jou;Xt~*1/s#E8|aq >0xtVR%6c%3(MvDӐLZ ?K .m|r  z0lzJ`ֲ-/i4G\ ݋6OJ s l$dt:~O8i %q.llvgx8a]>$Z3W9 n)TA]ܻ<+0 +x+;WQ4цBFP4V idQ:T}&;fA|,ۓHˑR9k=4ih Tbo ` ZVv+J2C9[9u/oq& QK߯!dfzT< yS 勠ԴIm[LQyf1T-Gۨui]hm grY%kikx ߾W7>Qb,KSLj=߈B=cǧc*k鯪OEғx6cQa`^3\U̽eh-~~@& xv Or^\bt)a # Eu<.P-\| 4]/d:PtǻΧbP%ĕzPjqFė 7r0_'qc":sV?G@$ү3)Wx VeK͜ˋ?uk@7&X!B7oeN^?9+L$+mVa*AE! hq klҀdReWm?ѢIoެkLǂY6A@BIsqo8X}h{vGaA`7^|b-5|J5G0EP(&1mKYJ .㠹1E{{-*}n#<`([֐hymT`_26 <%(eZB9 a(~`-uhY汹xve | JYbo9s(`ab#ӵa\o`ۮ7,=@&\Iz==ΖӚZ!OFD{A&O^-#brZRc Fe*RmEl^b{BOROtFrrַ&}hm9d6mZ5xcMVU鏨= \d錹9b=9'; t8D7THHg)+$(;whֱ<pbd&{pF;{{u S + mpBۚ2 l;K!{A@Wf{K~9X>~x'vHː Co 4|r} Xzpn}wD L"h +cEH;PmWPEZ" #|:T\Uw iܦjl OvUtsku+ #mg!3w_rhZVb)͆Џw`dHI=ﳫHp[J\Ա]qvUXf%&^^yXɍ^$J?#mMb&Tgdv"NIq> FWL$㋪BKM0ys*cpf\Jt%@u2hx"uA5hϹ^&`!X?\=<,IaS?IM#TTOe0GF 1e~.ٍ;'#` kk^h:x*d6WfnB*I hQ ,5pcY{rѐήȝ_Zwj VZLM60Zy9=Nfsp>lUb&*쾭<(ŔE0@t1,u#*}7'Xv4Jvӄ>9f|]3d2ek+aMΝj4븏cX8JDN/S"KS 6qyDnwك1lm?hdU7A5@/[ aF{i&v*ȡ}J8N_E +)xRcez<=ΩI[%#nz^|Swl`G)˄&If.`yTuҋG3DǪ5&hZW&w4l^Kr_~j,5Ơc.33Lz3[J&f秄S-4u+. kZ0-SvN$DT{EiѾ(缩ӒzȆS"??5K7^"2;Z&A NYΎX.)/i7Y-ZԞco`#G6u]~]`wb y2nn)Jٵ}Ă4 ؝*cif.G!c8a50KBu{J鍆\ ϥ[;)1ԽxI Ф&Lۼ!RڤItĻ=]TWkþ?=O3"ϕmMi[#0)Ri `tixpҦ&Ȇh>)EfcP `in}M,E+׵ԡ/XdO(_l=tI(((?3zBMM.L7VK3Ô挞Fu:@c bo)!.81@Ӥig@Xy䡱#t Y!&.!a v<햻L܇shʽ #1MjdE :6Y4axzꐽ@e$ ߯dRqIIE<][8Xi]LB3:BKxzfu^ d22taQc}&Rw,Hwv.Ay׊.)wUes(#Xq*d8HҗMiU[pZ e= '1䊟m w JWħ}c^J^K~M^\ Z q㛽`i+͌~: xC|*]8tnTwkŶ"9Iv:O0-C48ͻ\3ܟU(c, &t$)ZڦS's o&uR&mѨQY:yeRLzxEu)nәg6p<ҡЪ.J8)qlw9aaubDaAqz)1Œ#@ )_9$8u2XIv2LB^CI| rIn,zWPы Ky-E̐ǕY_S%lr61P$Efƞ ~N@[U%Jv8s [N@S} F @͈"" )ufY~Sa4.T&CbU\}]" +8l\1+^5Jc=}DЋtIM sM_8̳+7Ҝa8g6 ('\xFV=Q,F]{N RaTبBK]l'f^ֲv%\tq}Υ6Z:x;~[xtџ!r V~BN__Zt۱"D1z6W!PJ !%[~W҇\M"iY||)3҅d{xm?o-c~gE)N_¨]f{%80 ri6s(:fz{q:OQ(Ѥ&@R֚:q~J1&I.HGlg81̓VUhZDB[:q4֜," qk㹒1wqQF|͔kdb%4"iu/7?4~?v ~Imp"vNjiXR ]˽w/̈́J͙)skFɬn'b TGBSQ1jM T~E<<$B;vAj"91~7ʚ NL$5ѣ5X|w@;~fh5!f8ƘG 9":)]،зDIjxO[MO:GP>} ƒ -ya:; Cz-dq2^J1dJvn~& -tHye=y ),Q='6 GWx;=2iҷ]mvuSBkymΙtK]-iγZ;e8wnS ƯBȷpPoE<$B쒦)֚N09!s+ш̒5%$|iK UDIapFnd8CqG ZkR 4Z4e$HT|OgG2W0[LK Y/ bappdlɒp=A0bg*7keVh (лiH-K!f$ڿ.BwjA>W brҕZf 96;3ٮkqSpwl-rnٓ Qk/tRS(`M|%vL(ưfRT|.c:;vj*%4w.?v3*Bјy8?'51lqU (LH)WBzI)4)cI xv,s߬=pZ4ީiB{6eQKeS`vu.Lt1C86TϐsެGk`Xr7^,Nrl@\t d@$x=y(J=(>&N)7\Gmi|F?ˎyb[ѐ|F[;=ܺ&H_b*x.ҿw!I 7xԷԯLq,uk?5Nڍ4SഋBO`jׁ&8 ء-`OA""%TU>Byq y >dAMld6x /_eamƘ﷔o w+fz\zzgP*8)||L0-& 轔==KI8>|bMӼHntGm/4o4 ZS%eoByED?ej@1pڞ[.oA:>' S PzKzr߻@410 Ypnպa:>S_Lַc#k,2v*<B&vc7bL.@<)CeJ"gr1JZG8ϔ-[A<ҷ5|犼PÓW?}^)!,W3DJ]wӒAH/# +}TSܬ-]a^/."zYͽ{DY~s5ejxm+V.6rn-MՖ꽋Rz>H\`䑏\ENu րE!Lș)ag 7}q9yu[a-lH!U΁Oӵl/نpǷ8Qcɲ-$>hvg'5l S3O*L[bY7v @*ޅ@3 "Յ_!ir쎥{.@iUI֚{[<Mwﵛcǿ#%sX=AHǦuAs;J pqԆN={'$Q`@kRni5{45+,˧aT]t6Iz+< ~/rĔQ wYzsqnt(CUTMw\sV 酁TƄ w>}[C?h>,4 {a硹}s8YQ@W,6W.qfMy)JzJRbպӀ`νLe|eDVl] (?˰(fxOoa>>GN॔ͤ@- ($q3L,_45Q'Crm%iUExr0246v޼HCatJ\ tL*5jIL/2I^:Yvqm~:>xB-of_ED"EJωOҜ<׹ڑ7_}3h.o>N#ZDr"ߠaZS͹0o:Nkl:BC3Y'(F~%ɂ!9Pue{tio LλN\c57ם;q޴&l+O ZM$U&^s?)`ͧԍ6oˡKߺ9(kCN%h%LO7{aplG\UF( ЊI (f20Abj6]fX_^Z|yf+PUi[d.ZMI>~:(A- <Єc}jHc05 MbOBpLRۃSW7q y,#^Cا؊-z+}q]@.ZxZ6I'hܨ%DqC(Zڀ\Klqr#Rr>Iak,'Ú0 .ARXTQ'^$Ϣ} #<60 }ñ.&VlT ܋#K.Ua\ri:MK{xP$ W,ui- -;:΋Qy>w;h":_>j'VYѰ'{}mnZ#pöTtӎ=J6UG{)D 6 35ɀj"L$YZX)71 ^s7rU ,F!%ar.S {daRovν@E}*آ;'!j4Ȝآ@-3 1>NLN3W~* mjKaԉ"D]MHB>:a-'2_D2P>σ!"4U/UiJr*[ʽ?HH#U#>hK6iJ՚fNKnťdP)kao[hrDE1FE_RWl Ws]brA5免Xp J)]؉>mDvDhfįծ'`)mx ,є}\k .k3LV54/y-BE\l\P`x:1M^M1;12 N;n ǫ Qdc b^cTV),C;'?E\^=B Ce=x,aP;ګW>~e>S, %%+΢#6 ?R$R9hFiSVӸwOx(9q9' .B 7dAYprbHւM9\tMZ~d=5r:c^_)vvԔL̈Rqе:RȎ=pa!T7gYXM{n;s#ӇRMw03sݍieqri^uH}hOTaջi)Dfϛ3f z 4FRi&*M e6[͉acϒ㋖5N@lP($+SR}SVh^Fަ+Ю!:T| l"ϏWȖ9@X޽n4Dc5M[l`IdE< >zt߂9 \JP']v?L\_xܩ+7*4* &\MgZќmr;JOhy:d|);L6?_o7sI1b/Z*g/wuֳۼ=^.q)\ M[mK?3ڿLC뤸gֽ49nn_jU̹L#*nbߔƫ)"9DŇ-phK X/A f'JDY\ܸfxWD&CCxtgGrj qC/t(.eO N-GEb7нZju)NpWp/"m?Wxt(Tv=%yt7_DҒ7[t1-}pEm%xWXF /akɥaL>N)=Jl8p`m:IͺxV1eU.BT 46@XbY^"^X+aM\7tD1(gP8-*W7+6q f1F:A\U,y~߁EV[4˙du9[L3FB])DPcW&`AeȨ%W~,AmΗD=kTo`J:K̾}葷ESu+5+_nH?h-Q(dibl+4B-@X<#FYͯ:, y:Iߐ5A rf 9rgzp+lM|RHKA[~l =)ʰW]DwIq"„B.45&fOpC'ѥVH~2#oO9̖R[N`d9PK4NtB2YaL 1 P˫pL+{a߉q60oy&:8l:{!|coHo #0teF>ђ_2_1c޽llXt>B hƞ;#!@G"mJ׉gvkm˗k,طJ]U^m`H ĹlLTc񩼴BDmn2/,y8E$ff*|jPe&K;)GӸV|y1'.IYzq':5b@2TMC0-^߶kR?y+W A{y~i>lj E@ӆp{ۻflUg{mVK_!  Ӝ!:+pehmN?/\( $BId! ۍ}êAxڇaErS1ڠi@g ac{<qߜ Yڗd nHUs΃^YR(Ǡߛ,(J"m{>C}F]fWxӿOX$jEaYX }=i_ åE3' 8I%4,pj/V4è*zK s FYxHYID   4{C,r(^vRyVF`Z+}.JgpnƎzU{N.JҰ8W4oӞtE oҧ3NcwbTx^ 9 )wsL>h>֯g@j.#$&k̊KԗE8tŽ9961CػLmF~D6C/@'~ADJ/;TD-(vvp2`2lm5סYYQbY@q+O$.Rg;EZdk|,&> ''' jvKGIZuKR5+EE [5 Y(Dȳݮxsp)Y ²OQ@Ù(iQx]$7LÕ_d`dyP>{V<_yu>B&TZrͬx.K[&FJf)+,x!~Q4gx\]龻%]qF<7Ύ/. ߀KIIaAʡoo%B9_6PVlVU3h7HfysY~[dݬ[92A -s,[$wN+Q"L" R6GQ0[1J +R, XPϷ|x6dhWbCB_p#@˚2EQ|~"{F}%gȚt6+|@qtRz0AݾHڀxOml۸vpW8)<<.H~0$ӫ4e&ѭ3yL%԰oF^+/Y~Ă!*vg)J}f4] 3p=.kp:\Z~ d8?!7>KS:Hj NMH髠g$ZyDZ& z( "PRyF+̫H2IG8_}MO ~hwa8z!NA}O->(A`Gbκ ht`\P>V7S%B`z-8x{[WqK"Bb虜s:gn '{ x)rAoj9sC[&a^'yT;Z7w4cK~/L,T?jv<{ze}qPJ @4 LXQ9h3׉'k,#rL<RM8- #K %ğWt1GݥsLXlO6(6y7;:^G߆\IڠQ/u~dKЙR@0n1u?9SO5NA5>u'x$ J-9¢H.fc9Ϥ!T/@f)${-| eѓ)hw\ G襹T" uUɗ-#l'*,hJDR!PοF*&'u֜]NtͿ<yU6I덀ue#PLDt|b.ln}4= +Jx~Y a1PҦ2;驘=fڬP?$ Ұk0D#LZ^ϙ9P|7u ni\\WY%ʏgaެS'FBG ף$%ղ:VP0e8f~Mi. QTMH [aJ|<249VQSt "֪t9Ƭ;s62S:~]i6omtT f#߭qnVN ,-| lr!*C;Csaͅ*_~8%SA HalVn./N:kHXBf|t~GwSaV$W ա5/6}X+f&0HVP Oa[ꃳ%(d_g~ʵIPVN_hO@]LY : 2JoH.Y9J)Щd"[Htz!y¢? s߱vbhV;\:CL:'0)[2jWhκ^frIb MI;oviݔ-|]^, (?nas&{`58zD nh0塔00F6c"2 S%D 聺ZZ×`6]ɦgRdN ì\g}>+6aQzW)z;Ims/Eǰf(+c%ԴfAWS/Ls<lM<}ШiݒnɁW\O(cu2s҄]߮Y\  vP߼(59wg?7"Fҷjf|x!~ 1ѷLaˇ.6Q?֐P+dOlQuS|^p-9mPl4 9y Uh˔ Ħ2ϋt|tbaa\-9/q;0,fY4u oBE6"E'Xj" #gBYFVcA_E16*ܵWWZ4nk=ckdfAQ^rBGd#d AA(0vn~,8: A񞃌uOl7Y낞*ΫN<#%$BO4\5ydWHB2Br ݯ KX<.|րpel-!mBȑ77+nz!!^py Cپ:?we~̓O5v/2b^j(tPq$WE}ycbͧ]݊|A,OӽCn=ו*ႀ-2uh9h9"(Q7MR `܃[$/3Dpېgz,i!Kg5 [COr3$PP#a}v|}e"KL6é+k4&di#6}ƆF:ƺUU$"p2"3jqUꎣ]_2PwJh,JU쏼|u]ۭfϊ|=mJ1p3Qk,_B_nkp8lT%Kdc` au:{(CI"\hI#;$d\ؼ(cH7i1hG [ E߻yLlWf)H?Ku >Y^xu(K-灕KTL':`b |ly= j>%W2YF-A}1@nηTì tQM/E3YnKUcp;``!W[;`h&I LHXz{lv )(X&Tՠoҽ` B~)WDX^p4)7hft/,z\H]ϰ_U@߉nDsR i&]3HAsizm4)Tn ō憡T1!7~iЍ}˖&)оs"9\.f^ k}D.+@Rhg%T̮1ᑸ*TbƩS~O$=\>nJ=p0&dծhÂ:V5kTMhh+_׆j*ESMb=:ȡ2 &F;'ephek"}0KQ;g|}.C)BRDgtlQ#븲Jzѿp-< !+LROA~5D5ֵ҅|L`r+#?it´L#;1k[hv} WCdR^#c)}oAD V~㔭K8\.J]Qy]kbJcgDx+*mZ |_G.4(q09+*hr!@4<}3T{ݻ ia5aǩ^f5$AS2tZ }5LtSOǣqAq e~(<9*YƊt;{9}"u?:[|&.ǥ gZaXj[V['TulǮ bʱF8uܫJ760\Sf–SƟ5GL >#0PoYBN םL< V]GZо uo i\> l,DE%q]V'u| gy:2ˊB2p4'n{1 %O4 , 5 Q麁Q V/^:) K_\ʼn8||k8ʴGC͝GNe7Lg&1\3SSC]Oۮ C(K5{ f4۶jDط[:o|QCẘ-zk8 4 gi&"Y&ͼ'CJE=PBqfX*`q~7B3 LE^ M_HKwܩOvQD%HS Kt&1"5m3V`[{/`5u' O$%fuh1H1vD_1fcΖM>KUá (auK{lKWrbQ75r>l=C4 ړ=K:NvZ7-{>ݝݲB>-!3B}60juiS _{Prˊ@Xz/2c Γ땐_ep>@,xFJrtJ%#VXb̀O17VӘ~<<$"DS*U!͚u_=T vD (8mZ [M?5cB UjеKK5;2wՊ4.iTo"~N!{Ev7f:ݍ>m}dp"G1VlP(tg螺ULj‡3=1$'Α([+[l#ݸT΍\;I6#gl2\<"@15[ k'!  Y/WZ%:'_}`v`1|D„= UJx}mm{L~ի :_eCF{^LF$@E 4$7bUR_09hdW8k&Pp!u팡1NbKE\49$Kҹ UUK<$ZDGT(A7h4S! V[}wJ:EM2@=epLl(Z F~Ө,kcIZذ=Q>>\ ;)WrK3,)E&p)9^Ϝ)*fyB() Ke[ϝǹ~H3Lt¦_~ez1( >5 Q]~"rmUfn| /f FoZb)R8Q9g3jC`K˽74ԡ6)j~' [L-Vv\'Zޡ!TA2fF$H#$+)#)k2㓀Ժ81֏ćTX`x'<j64D6Ylh%f}z^i1n~A /RW0/#maƞ%ٿ?aL l[x1(1 5&д׋n݋]qOب fs\F]"{^bk34Ĺ|V~kebTX@Ly=brZmd`Ԡ%9O"[NYbfi`5 -pZZF)j,"b2:N̿P0ZzkJ$܊#@ R+x+UIQq[~`{Ez ,:ƙ͓$/5D rX(qjI D_/,l'0Ex(U8.(@{|җ[OQoGavb c:X:|7m -j)? ;&c1xRmb7mKtyh{9'l*gO5[K"JS j$#|7cӛO">Hq̙< >#i fRd|&TOMl;LM^RrҠ5I9QXIF@,@gIX yY&z0΁F>yKpǡꃌ=Mꅟj8a!n9; V.370ˮ#Ϥm$X(>N9K5r2Mڨ`b.&$Ȃ~ҧ)rpu=|Mi9 0 Lrś8୏D/yxDG>KA5afE4':'M5Vi։ "+b=-ӃN$'*5=6=AC/63`,0WXeee#;YS%|[ZY=|9)EfXQ-1)HZOHJ]nOf%z}#@B`&){>~C-Rf*G7t'='q|'y EJk;bdƦZq`dEl몲0D56t #;m6QϩFk oJ5bjлH"aK !\H:HWnR{_";fT2'\^]كp%B8Ԯ.fcm$ZymoK'a$~6IC#[E~|Dd`-'$q(DO{KS^MZ6DŽ"kT " J8~t\#w鞦Os mW ̧ "vXsy&U< NAg``UA7 ~bIGCR)~^N5O_g }߈7N 4gw,BۃАqlJ؄5= +d{Y ZWAq+97ѵɧ1.41R7j<+_! ՇR6:bI%'ܹeŸ51@dWXBBjX: ]'{#* %!cZ Rr_ ) }YCp0La2ߖCQE&'cR'JR?gjK)v”ΜIy;ԝJ,Un,W,!:aَ;dZEKDۺˍ'`T˶\MVĄJ{que]RN*`˵9-bGٍ 3{nA_vG@ F\e ˣ8ՈUOÛ *AHV adIp!8G FoE^3 'Ygr;!AFUW[r;:K~*rͷ9qD:lhT h4K^V<ӾIC 8iX`')VD$pXN 9%~iP̜zT½v옽I׎&5KeC[s& '# K̤1 GP9>-S!vb%"9 o?A*}LÇôQp_Tv>lMgܝ V 1Z\{6$jp 9T43lzT+IrrR6웺B(GT3wY$Ƀ`/^.qWlҦlzrpa>؟{γm׷< 0k㢛[\i-W8tW*TlLi&ؐ!QRQx'mIGE O> oUՂ%P9O_HՌ!ޕFwAo'w |neOdlXoH ȷ(P5Vg2,To̭^\F?lZ>ҕљx"}x{fD#R-&:#M܊4ȫHe 0mGzi˜ӏm`3=B"D;H C{4o¿IbQ n#~(HA23xNV1m¾pқ  %$4O~\ Lnf5o /JD.r0 b-ջ늜#MhmVGG2z DdA!=;Kt o_Mr5^5J-ĵhvlu5 wzFo=#Z\T2(6G$iQsY^ɲ\LÇLyܯhyvk~BةSgYN%( *7[Z 6LyNgД|]!~'lRr{I\AdBUaE:'O$D?wœg"[_Ǣ6.gWȷc@d<. sp|dRHdaA~`E5`qLhysa@xԚRsᕧb {0,-ekv(o+C:[x~6,hۜVx'E$ڙӚEBiܝrE|3 R;ؕrJG@q˪)f%-ՠXW)L~6"쇂@,E8-iQw˙` fhZ16e&!M^>GcDCD$6[)z)mڮᛧcEk.0<`v ,鯱p2 1.D˛]i'X60n( li _B(![T֤?PjE>zU!%}@aA;w(K"}CٻaNߥ9FacxkasTc.` [U"n;tױ2| &O!30zԎw-t_Г !mk㊭:; _CEd1J.W+%Q_~CTvQk`P? Fie'{3S7 *$gZ)R2{!]zrQVlaUDVhߪ11%`o=8uZIhoQ"t.E^Q4X:V9XIvN=FE?MMqq`[2X<IY#&2 OfWEr+` yEM3A{d_Qڟ( ^x9Vy{i]k8}ɹN>͡ m##cԟJJɓ4E#cb* 6xznMN 5E)G7׬ZV~g8F/ (GEۘWk e&!UJ.nιj&esk^,(m*e̖K{9Z$$@`^l1IܹW oF@Lx^ |xΩ@&ۮ)q!/}?)W0Q+=-xEKQց#yٲ+P~Zn1kʖKqG4B^y(C;A,;I;*q5=+c4kW (4Q'”JqNAjM P c*1ݝ*>7dJlAy 56Q g 7L-gSԣZCV;.Cb7D $ |/Ej2ˋsn i(!TEZ:$dBۄ-hvn.BHe5Q uQI^"{~.ͣ, Iwؠ9Tքe3$V|p87J"Yaq|bAjNBwj#K{<],S>k}FAk&K:/̑i49T/+F\>5t7?oHj YߧEIVijv9$ ]YQdUz$6XDF"7k잴,xCГ%4ܝ6}*N"#qrHC[~@NR9`Nl|i:Xt/g4RB3M]niX:;|G0숮?B]*X={x)HuAxiy9ndstZTƭ5 Sgp0'9G%o2$}ivE2J$۸%a3WJa5p5',4[zuI " iC;:\na$:H(ߦeyy6%=2~ 'aT*3")(yn|;,8%y:]\!]F|ƴ8MaAxPNYQEr`6WwgP\T^ܕ:Q,ˆ똂 Đ}F#{[a9EFq# TЙp9'0`}%9^tLB1d,Im]{ oEX nER7&#R$fزV 6IYL0T"<,gCEM.oꐴ@TVn@]{ GA6_V9 *M{]Dv^;1W%HXeK[9܈vk6cp~][ KO^L8}3RlcJc 0kf&W i7V$c7ʵIЅ熾:!deq4D{ںb""l/ɬaDOH۰#Ѷ$ 6t\k]d5-(D ]+#ӣn/@]|Q: -G~A g8!gg:y: }+s'> }bAW8ߨz"{)k1" ]CX9O8V!V>Z\.toA7ny&` -ZZ:e$a`KN^̢ce52U5yk`:ϗwϢj^M -Ӑ M$fSKq1pt $Տ,7 HwhS'My 6սq'nTƸakt'uSnHKX,AƮW(`v8ťڔ~MLf>NEijuDɶxGN]fč@"Ui v?RE1D>>@e׸kh޲"b&#<7'g6yzr"|jbXD*.^@uV}6ъKH,5Rg%4]0!@.3?8@ NhE&֔ xC}ɩƐCֳ A8/>;^\>!ȝ$s`\z"2{Zn$S)*~%)i[Ha9)܃< / hEa&%95@=`.uíHK<#^VU(=k?PЀ WpT Ҹ `Q]l#y|ɿiA胵 WuzPt$yjl$f+ TDo2,%!Ha!P |usk0Q: mj^z~x;$ pע ^hHّͯnCqJD 0n@EFtG9C[xA{_~;;\*cvqNs(Cg/~O?8:3++)It?x-?# VxC* 4ORDl!L?(fB|7Ef/(5I!lY!4*=7Lu郊^~ LCV3rVNdzD=$1zVnrW2冱͞S#pTbz%~+/)كd&Hl.Yji{-{K1D+,h7~/Jf"#_k)۴> iP~ ψ QzLgt-Qc' z-uE~d>7 ASp6Y Lr6FS-v bl7r1.V}>p]Jo_~:Q,nI] 'Zd^!cjUoؓ(VaGqo4IUe*ﱨv18k/4#k<ta S5+FA 8>_)PuOn\_nd񓳚q'shcZ-z*6xrFwJ(/I B -ɫ #Aviy8`[-U~xK䂫 qռwX!NhNMH0e57.?7)s+cAgڐj;zmo*6ST#mq?7nUs vNZ`v7+^]{{i`;A_*! -qq`EM7E$!P*kso,Vm셁-sjO]QG%[Dc,2|[šW;8l(U֟2u t1<2֤|0< Vjn@:dSܢ)䓫bVꁱ)x`wnc !M+~#W(K[k ݈35x`:<:_O4浨e3o/7mu$k-@_{dGV:*%#oh_ d%4OHZ]W!#[/!,ft _P0!9P B6uhjd"Ԙl"~Ř$ʫYR}-Caʆ))cE=t(#$i. @1\8h*qrn$~ ߳Wb"*RpnXa'޺R Qa\,@Hj#>ŀ}ó]ϲ@[VxhHo(ox |iIѰ ۍ9#Za)Oc՜zP{ʻ>Zނ=|wgm}UGf@t,HfV 'QveB+H0U7YK0&]TP܁/vhf,Nn0a)5?ˎL˝r^ngMIPˬLy9Tvun$kg{6"8_c ⺥f͊=B#F&ŗ҄UֻaVV,"w"i H.N*,2>t\FIȃA$[/HrcWh3go 跭9C@pɎ sئpbx8ƾOEb@=Lg&hķܮ\-,n~Q(]1'x/Z=)"I_kd zWǬFS#~Jpy3o[:]Ov\1>C~i:.ldQHC<60d}2' 7n /R\MLJXYs`W_UY_<F0bN %3vy:=kh͡thq(9nW/!r_y8,/}`0Z/ ڒypJGg7ː  7aҺm[Q1(ԗ)q- bn1ΖSIRwty0V Ee镬\\.@0P2eDk9 7{I56qۃg8BR;S0SEw*޻sطNjm}Diߩ> r%UU4,ejPZJy094eJAvQtOۭ4]o̧,.tn{8cQ1FTУ8(J-5$kVF()@?Ŷ5"] fr]w*EIA^TI@G\ Q^k@gŲ [vS;7 컎'!i>pa <DC0ȍtl䘏”TKH'I U4EɄjh2t>9F y13KZLdXxBG$Q`e5963J9btWfU~lG¬e'~_WH5WN{G?da20jh֫Sn#tELڭWg zR1'4ΔӶi(`TB׽VJUw"E%&/֨m|hѕ%rOX^Is[-pSDI}*8WvM 3(_CїVaedؚa.iQ,l'{Y/? ʺoƝVmgƿTUl0`=! c=| : BJp$`WS)М#mi ,ѡSTm\e|NE7(k̗A}Bb8 M%ѷ5o)@NICA^6B¨{r\Gt*yfyO1gɏ.;u|,"< 0U%} bRkO o3oʒ_}t 2uwҿSr^ćӐ<4"N2g<}nZ7;)<:hmP*9xswFŭ\ 3gy5u7}:k6x1^ E`Xx1sb2)|lz &]lŘmRx⨆)~PNk!`K,NZOJ^vRȌydv) " `0l௝6o,$ }MkFL6 87;{ FU9F&i2d[;$A:8x-X^GE<%ƎEM~ow0S 4âݪwIlًwL/XSk}w9ۭ~eKUY4p2eIq=Z 2*UF:K[J:7j0VDsNdQ>%>ыs?06'<9hoOrWPo1K:w/LD$~EVNgrh-*)sJ%z?cVjzn2'M7_9)I[~^!HHl/!DQYC[Cv>~H 3-ٳK.3]>BO9%ONϖ7IX% @,aզG(0,PD'LN2's`.[ft+0蜺mRjwk v>'^Q9? ^QDc+]^JjW:jlU!)搿IuT J@@]er)+q& )<4$kW"=8Exq8=z ֔߬!vHnG ۾p.HM/gR;ZK/Z&U$32 _i[nCj>*۴.I SdҍC97%M_#C`LJ,f@\^46.Ϊ1 vҡXzvyd%>HLG&m*YK'׎ wcf|OMu#[t *G֌]&1C[x4I#[ ͦy'WVuj ̏zƲT/U#4fZ>,o"m& LI[&ʠdTV^uʭqWA&G;PJ;A3k@+6}t=I2 ǔ3DGFR'Js%Zae~b\G;^޾e:vX(M^4yT hv|bZs\-нK mP3B"- xƽ 4džZ6>kfe†2!a;ꊢ;Jo&DžY?N'-K qwz TuԮHrr{.8`% CTh&+\2PQΫ.<:l6ኤ_`E_iMZ]fo/EeӜ|ɷ+:hޡF'{P qWc_/yV 5( a.kUznBNv~) 9HV .P.BTw1JHye-O^JUOL ZG+ ?uT5Ì?vcϊ ZSXQϷ1N D;Қ# MLCήMl"s* 63`6Z{ YZe$~z]Oo>ػ۷mD!W1 ̭] zP9cHrj-fN0c>E ʤJ$V?@J+RlFuKp7G1H!sR9~%g2ʲ *>s12=3JX6#]e {jZqKk$tꓰp, <g +<̂Bzr{#ta.Sܶ]ӯx,I |4QyXRBClӵ4IfVDŽ鼛cP'rS^R1qךz׷Ͳ,6@:-nq=.3?>Y?wmD؅\56'?&ᢡÅ#%:|E:>̿ΪȮL9Q[M\A3 ǂBsqpj=PP9)qwoC~1;V!.I&Bڐ:,}b-+sY![:b@i};<Ѭ fy W}j\2FCZ wjIxL`noi4&/.슖\6dW_ +[h(!\ʬV}p4 CAp4ܗg}Re+)b{ XZդb '4t,q & ɰj} x)o 9բ2z Q*Y"ބVPghZ*$T-KZps Y8.'}zF9s+n|w{Jլxk ޽,,LF~9x+(^>n*pytUQăΧhЋ.e ;n*bf=t7ɘv)2U2zu.ȋ37/Qi̺bBJ:J0y9 ˉ' 6 s70m=^I\H㩅PщͿa*m )K}$"wncPBf"PRvޱ8Xx0 fbs :'RmTw8{p垗RA`>' 9 jIL."pn4s{'3xnatYPVvH1WZZR0[h+N.}lW {VA6F7kb>&ȘLuI|_;D0aؕS05Drae-,ɬ^]c;guwS\܇=K\?R ZxAGd_3յ([z%t".6\SG98t 4MOK/#` x*"{OyU Zge^}$3j"8DyPA;ᓿb0 1\k+EMT/{@VrrPhgdWꔟYˊxLnU,.E!_r* -i[EH\mڂYάٶ` n΅"l+Indj.q:lcXȿ6Ck[DNu&n&drnĘ ~JK,5U,`yJoeD觘*p lAtlgqmDwrV}z]`u+ bzJ1U e8gU $\?:lfY%k,K BK̠ OCdڨdDT*K447^s餱E&!\aC7Vat6PTHKXʌS0b[fy uXE`yg6IM`½=X;_QܱTo9jB裘>켤Ac* _5qzĿ;T(33QoQK `&BDJi7! {ZGnxrUnF$xT\ԦUJoŘ-m N&$/d.;!'2WSFFHd'_ zs[DuFG땣` 䏋2sڃroO*|hlV {ҿ6'eu;EG"z*)[MϔzpFc(6RyLng|),bw+(ȑF-45낊fHk,M)ıKU}z23y[ v{`3b:(oa%i]JgW׍m(xh\Pe`,[4EgGqox%3eɷLV.` ,Xc%bO%9PwP(<|\ ~bݨ|\=GմM2.160EHJdc I5N+\F"z7Gˊ{3oy c {HK"Ly9NV笋@ ؂?<{T|0wq;#|aƥ5)Fh/Iю}լ2ig2$6!wR`5J2@A du .s*)\8ML+{-Ew_. VHx O'=Ӭ"Ȑ*- 31S/'*Ѩ_ ,[K`{B@EBM\ÓcUAg?[ D7s~N@/1xZ,=mP7|X _AiӠnXFa19zWZ &귵 `Aƹ̞/oٵ\XϞ86(w;؎(_ KTo_#L(l8ϯ\)OI z~&ǍŧRx?+8D?XGQyi Gq^Fj9 hC&l ߚL<ܖy^|'RMMp2׺- B7ιz5LۛYPv?9o>*foUm-ffZO>_5{&9eV [H9&W(-n(ZܡeGKOF9s>)K@WDDT1gF>V&5nD HVo-Qab")#I_4J.Ɋ,\@1ص*[{J+~;>`1qTe4#[Qdh?,ى`ǻZn3xţ<;zJBbI^ޥd =7LJͅ!zPchXxD' fuYK`z 9)Qf^.:U bdz*1 X w o}ukn⸤I5%GjIL[duhSΑkޟAc,LJLpڡ;?`h݋ps%.#t=^4-},I5g z\$Q+*6J#`b*#)AlcqLm>H5mjttNI՟WQh^'a5Q JV=~f D^6PRG8C27pK..dG$o\(,+wὼ__fV20υ(+xpp+ O{ŗe1,QZOuw]5}P8y}pP & rv2u.GJs)\E϶3P I+\Kſ9^ V_M5&o'(b$9:v-mD. mz>x|lZCN7@'4LQJ@}rVyżl턱iܼ{uǚcZs2g7 ?-`>lCn~5n|U*}#'r# CQH1ݛYs:0Y‰r#("Bxy}'wC%mr)F\R;brz*ݶv#Q }WyHot}'_zo0t֯s2-]R]_ 3d;Ċi?Ŕb:C_{ MdsEG"04Or+g>HnL>23 qN~;Vע@%@&OKq KFUvgʾ 4Bi4~nW&8 /$lUΗGe϶K7}|ZS+ R%U6cS !Õ~R/L Bf]/gnkA9r<EWv7xr_*%.;߷_hW:YPAgׁ`E96w>o;OzT6XjIƣt;ρ JqPƫEsuƜ4WKf6Q\L|F!zE ~,h#ٗ.9ϻˊn|,Ov *a-O視\Ϝ[F[Ί[!Xƅ7sUT-.jtSpQ- CF:&24$!# LCTuE'RnBP1G YΟ\-hR7.vwa$A9J+/w><8Bu&ԇrd̢ ӕP m{mO Z'}D߳Zj E-ކ(o<gMNP?%S<(a6kQiL^3 k=,UΡk J$}:6"~7Sl\lz|YN T0|X=2O=o;%.[p.\ZSq繪sYjextj=SkoW  x˖NpeJGZmWdIJz4]<~G^4CJ+u-!zYpqmхjG0ĉܦ/:r&lVdN (~?= eGT>S.6i0oLxœfͩ`~cclOtx6|y?x\R6>iM/:ra r8Y֢7$ͯ>:]$clS cK=zY PwW.id/͈F`QB|0Rfёx8O%Xz +&Hn9H2P/b^Lg[ncg鿩;7e.тͤ( C3uwU6TxMOwvcDR#C3NXx8dGuHAi`yN$?]/n}2W䲡4-n1n?xtu#p^ݟrGžU\ @ߌ`$%0(ZiR.k;< *8h7z_PAQnFC-2Bu&,_b`*a = 9[8[l0mTg9BJ3S4䙝dߺP%og>ې&D}mԯ6% ʔsf~3kK-*ilWݵ.%5sowNLW``y1R+LW=IwXcU[w +nz((3o0n]k@}HkKR<_m"ÚT@/%zp8D[ DkXwf+<`>U >5C 1]^G:.e5e-ae#.1Ӷ\?)z+3Zb/+IDP~*`d1Dt|e.|&Aw-pP{1+f Aa&;7}PT[-.OdȒ=BrޣG6GEI {,3%0%t쨣 ܥ !BnUlPǐ٭' G&} SK*v(l՘պpxULSޘЎ=tLk3eW)ʪtSx6%P.&Ůs%t8E1!7Ge#hR.{sV3% 1(Wí Hl ]w/-A@)it/Rҭ.x{+ن?yːZyq q>c n^ k2^q;\mX/ߌs7?\*uvKpH vF &F/,)R+ N/ƽ!+;"e8-G[qpQab7~9540^k7ܪ]ň}(4G:t|ʯ4v%Jх^Uj%qmА0L(uV ,G8Z+dWesbN%Lh|9){sXCY^gkI'n=ɬ7[)Ũ?R<ĺhK"6+>#d?m삽ϥg&_oy)'eNP. @J9qߡDm&ƕ^5UB퇡r-j9l1ٸ+&=^!2#Ȃf 2S\5H7-8Rݬ 5gHV(oLDQ,r΅nf1lZ_$1,vWzeʃ-|?S6yA=Uo^$Q2őd U TmH !06ձǫk+_SeL8d;Q?7HFrQȸk 'ˇNHt(*:e l;wklL4۶DehO'wx {"b~l{z#szb]w!s3$/ql'݇F{ 9w'~R% 6ޗЂڮ" ~oppXfI %$̓eOȥO[0I`.g7 ~jnϔ( ڄX ԕ_Xg/Q޹fW̑hD97ʽ=[ypME㜊񨚗5rx+`%Θj )e+vݏ" vw;&.:*t0Ϧ{WtT="Hsu<[M֌u$6,ʟh1sُؙޝbgRjLBE?H5 &i']D6uf1ïu5:]xߝtj}Rg)# φj;t] OV(]'#-p`˴G?H^H0Hmu1 bܦR']ؘI9W/aE\,Tu?5G PԀFgdj.(7u9f[ Gw8s$}Ь**- $#%³ 7R91TZ!"Iis0{Aœ'nY *Oƫ+#SL^+8*D3B7v':n$DPSERBí %>LdtnFFtM54pg 4M0Hq|zVn/69-8":3$dObB7 5 =*@I.:ziZ1 pu {};vDX^),nlR'uf͜0X *,W'˕9 1RJK'*[>Te^$' Z#3!68!ʶXw+&ÛP=-}Ua$RJpfDj5`ЃEcLH"R U84x, $y3[`^J㢭Ǩ'|eC}kDYR(&+t|d#c_*3>xuIΆµt⎠'bA:k="@Hc#jgly/ 2#Sռ>i-Kh0ue݄ڤW0 &%'%K$"*?<Э%/OV8%*"VDV&W]D|}G2ۯO ~%a~s=d>{4<Ud2jt3.0Fx?UoN?,AK:4#%z^҇'%#lb$ZQ*2!$ QPƀ 샘7؛~G!j9-/tPH~N"\y2Q`*F)wr D" Rڌngu] w{Ms:P?S$^~]VGaq[=1<@Jm YJCؗpdP{n*=58qV8KX ,Iubk„>S `H9>dqBbb!cWvWIybV]&ExIdt^/Q_aR+u/1 N$rCلu\TUs|4i,=a󭘻5fI#~Pܘ)O0 `g|z/X@HM ԉA1?waƧ+5c:"f1he9vX|G~ԝsUs)&?5@uٲ,B]CLk^}fzW]$n^݊/?:_y K!ШH|ť*bAn~(5?ČĜ˲:Xnɵû݅dzW2#6Cnv($u8q*8x3ڼ?d#kgrrb2E[I-~1~$ݶx!_y={_ֳR*yXWUv/pM\@$q]&\53޴ (B/K)>OEN܏nk_AL,]sY"ݡp# iLNRd_p2l7eE2Kj N !C܊%#cMU7nr[H3d6F}iz\SLWT缴8*ͻjfՎlL[M?p~:Pi^߹38&">-$s]j!*^CAZ88PɆ[swˢt#( ioX(}f㒲:NZ5n&YZlNr݌ȨH2\;)o8Y{F9~77e)ƇSq=ZMAEM;onŷk$'ҧMZ4 E8[+İCM0?uu)^6>E>%sJ%T#O._]SoXtOދF$,G]!Y;]U2玪+9@ˁV,-/Jh:b(V{i^ᦦ RHDQ;?X?}hs?=—QC.A4^ <џ5jBt#k4-B s#WT^ ,u9bՃIsW`a;K袌 E.7ԆVexi͕>Pf 6'0ΖnAf?>f*oM) mFb36 4yާ/ fktpKQ#5ܰ8/{d$;U#gm.OaIQ=7܈վPZYH-̪MpsOEb΢Ys7q_[޶Tm'?}z\'TεU+ O'g[ZPִ-[ӭ y.Z֤0Djz>ѡnſ뭝#@fKcWpM?%iSL.nBij1f26Zj#:Ukw1p N ar@DxрT40cw蕵_ k,g@\(qX` ,L2$^r݀)9X)dMLR7b6OAnK7quFL> }{%1q[$>\_S1=:P9hV:ul%6vUikufD3UL᡻ V=hx:rpY+3=82lyP](C&Foє @#mxפ8ZVq NH?dFẔؚJ}< wJH!fϗ"=f7?l@?#|շxUӼTPuǩ^ѷ250705sc4զU[46xP"`ǪpAMpdeGyejq[L b5xnK~{29YǮBz7W<:tra|l7`%[r;U4, @X oݘ_~ڴL{ێƙ4FOS5ةfcϋl4oe@/ mqm;f&eE-:ͦ!9ri0f":Oʫ\dԴ_{&r)-i}PzX t;¢˨-Q ߒ Gpnw90K*=хw_/dCzwH׳}\urx$ GYby:knY0`I"qLo+r- =+̈́lhfZA[{ioxul8+m4 9&hY>u?R=AZa!Q8$p_ݙY\tS6TP3 _%vR˵sZ6CB*<}i.ߥQƝz TWP 9Pˍ2|Q2zF41p+/=NŵP-mw+3H_$)(kmk|Vpe&W@RzW(&bBz+˾FS''g;z؞3ɽn ]['d0̣CbC[}NSm2u B]VhYb*'EW1 1gȃ0wX("3wF UB)k+ Ԁ9 hڶntZ jt,WxD)@׶կVZ8¤U !JQMIYܯa4BpNFfyz+ ͋.Of%O*o$ p# רLe|[clXK?)J2> lh,rCnК+ dZ"7lKo(L$޿ԇcC@{{ n췼.D$+~PyN4eC23kA ?p3TBbr= Ap{LRT[x{"yA O3=qh ftRǛaa+TSn7oם&ǐt,_3{xrZk¡&Yh]++ ,v&)$BM-!M+A!6)[/a)N7kڥ\a%|F]=x0n.Xfx⌗wL_a/:b2MPc$6:q~E{^0Ej\pOJӎe?Ī0_snCڽzX!EnB1\$g=WIZGnxU=-;GL#`qu&p>4ql?J#=TzkN-ŒtED#^7J,%дKKGpBݍztQMq-dmhY*e%E3Y*;) DX(֖ ef*oYuw1Kk=z (X2V3* [l߲M5EI .BcVxIEs9B/;> ;RZ_e}]Mz/=ub ev_FҖ6+sj/Ѭo)㤾DuO|l0 Ns1]"33 AJFw4<ڏ;]N(TwhT_yɻTu  6w? u?hyqZq +rP +.+ړM'Ef_rEU0kmcڎjj?bs^:FO*;kJsZxxȎ; UǍ\Թb[<\ҺFP0)b!i_ل=3Bu8~-Sr8xEҜʎ31ڞ(WccR.EMb`.f.>%;N[Eqru :$MЗǦT_eo #6d PYJI+{]4T'ORP %g›-hCElwɦ!o ^փ=nD=-$ 1um,x%/ g$a= :T; [^[Cf~)Hi8D+Dz 6īh0Ua&fֿEiKPI=cϦf{<` P8"on 0 篧X}b<Knuƥ XFTCxSrY@+2N]SWn*uDeqP_9@hP8$Z6lƙ!>8}y={場>YߏCh*)16nLKThw?űVլ^$Z9VYD{2{3pþ琋b8/H-y)/aJSWif_Cp ;I)>Յ  yԴI79HGmA8Nt@nG %3Mru+pS|ٓ c|ZrTK{!xIQ=kxd'^#1뀫rLXGZwcՁ-61#hAGp%Zz}k)a lU9NK:Fi3e,ÛyY!pTwYIא,K'?ƣT 2MjI/HeLFr^~k%ve OWx$r[̽WfR靴 Jr."cN_6! ZSe*m_gS#laf1ӝy2GJT&s"3CR2, (;کE#Y*t;.gYXFheepMם0ĺFJa2_)Fe=Ӯ{ML|@$)}#ъnz1jpJK5.]:D +gJB ԾBM6ب~?{#CGoPvɯzꘕ1?%IAX7>eW]BtYd_uhS#Y74?vM3|Ji]0PHA@h;^qb\bi^z0'B@x]mn&2d&!=)sT^L 4.Ğ3N"5Zȸ`Fc6;}~w phQX} _d(H6ߡ {'i5i[vΌC'c zKUn>^3~xlBicn=R=sbR+y.M,^P(EV#.6Yw 7$hz%n1c\Ji<{g:( rW@Y)k7̢?!lpEXr]TjGFPlQ3#> >҅~h߾D= PPZ=:^ 䫀&*nͺ~|b4ڏf]KA(*_o t>44!n Vi)Ń/L|fE! 7q{H>p ]sM>7Vh!%_nfJ>JkbGS^҈JRk=;19HPmb3җ0:;{}.>^n #5:-gm#Л{SZHq/EosЅ-dgHo6/w-3Zsiʏokۃųuۿg*m1pİ}Z㶮M_!`ɺ{]3V=S(Vm_3$v-a/ؔ6ږU)<`M(D:`'~u#K2f6;`n& A93L2tMPb cӈE^ge OH`ujcwmpv('-PaFz7XR:dgmY̟|!̈F0蚅*~fw&S0ùHnd{xKVO.)m<8Ţ/nl3 7joq $5ޛZAhffw9JۙfT 5Z~ h"q"iuܬTdT$l}0g 39j+%ҁ,HI{gв"7lQRe5CaGm F2IPV.dUL3m lkbp15Yc7Zp>=Sm`D1PhZ hV=;ڴzrVi4%ZB&"(8T"ߣg$Q}n3XUal)? 5S]Ua X ֗?wFlY&V 8&UwVJ]L]^\;zR^"N[< n+J+R0BѐN90W3a6:I dJ[sݞHVlHc, $I~-iWDp&/sv#"~rh϶JAyĻdNGr7_`=ZK~qxq~`LUf 7#`NKj.AI-x!!뀹 %od%zّp$MJfmP KȘ6!cs t-YYFZ djĹEźZ}w`O}k[@{lSn)Py'vEhl[=G|XԐf󨇡>؈(cjd=? jwX]y+0K[LMTۯf {,t³/@q~Y_ěwa99&}F͜;Eh@z#";f5Lg~~%<%4mlRh4xӲ/Aiӻ3{MLovU&%}LvHt9irWM^ѯ[( ոa`8rZ,'&[su%4c:9;pTN}`ޒ81y;0"k" c,PgOI ;ٰ+kt{7נHc Ry,Rz5j)e[-,IyQmG [cYl՜X>=ǖTD^ۥuۆ771UWuC.}ze|o5N5p6`نIak#:C^Q̱dgf+AhA\}I5Y̆g)䕂%*D AQ_uKOeFX,W9eܨM4gOVNnTV!^z1gD([gI]J@p?'HCQg^}w4eͧa޶nE}qG#5rK+;-9-[rSemXiFdoעe$hȱ\YTmMO}4aKm1 Gf&;RQm,>)k'@B۟afcpERPqïMOI}J?^g!~^-("niZ|gthK<6:yw JE4{P1yaKyAlb~e 7~|=xYa]Q ER3m@j%]9ANO, HUI,5G`d(׼4R-{>$RB4x9?.h1YMפ523j:k˿lp0= {#\hϰBnU44YtL92#he?g$9|?&ckfiYgRiϯ HPπG62vE)B[PG뜧3_SC+`N~]$h+f-H#lp1ȕWJES4I1nՙ0tӞ;^\U4DȫR.~j&̬jXWP߮0{݅k/,bC)jF)i>iWrE 7I :5_,,#K =Chڐ,ҶaEXQο (3!>KT4+6EQr!$en^w|ĸ*\c/wq4PGd!o)$,,[9UkJR5ڨ "7˲ujQio /G+/Qh`eIMZ;rȄV7N-AGv_V[kL-ϧÙ}sI_duvTDHk1XO'АFzQ<;nq?. ݎ}>[8Nu㙿iӁ"QFͨM*1YG>7aWGZ%dH8 @dd H@+v;Zժ;)"l>}C6szv6<(^Y*O؀mb.&x- +!=&{( +?*xpM,}q]H^r`}Dp).*/YСoB#q-hB\hJI-EG 00I U s^6-pЛ>m\Al!bWb!S`P͟+/i# =y둖-<gmn֥P̪~BgDs59MJ |4TpKqg{n[/ݿR0#tIOAsɌ!?- ޲Nr[L“PR_[tX.$KF>aN n")@.tl(V[nOr@\"OƤ.P8=<a?~iPwMHeo|&Rל_KMʳNjljЭ#hMEInhbr1sZV#D''t_o.mzD.@D66r*L9]C@DnEpOm y)K=]`%ߡў7|Eq V0y 0kD"܍@>LӀ3l T;@. TcOkZ[Ǟ9a>e 7g>rF*`hN DyR|vҧ͇ |43V UvBƒN&is~)ԿGS? t܄q?DWu_:_a1j~'QXae!o'vDA" _ 79Aeh{*R=k| .34ߦuhej`$-1EH8%:͖-#\L (&hVFZQB %BB U(֩{ =*px)LAzydiN[ ?TSG-G$M.Tx㈳V3#1F䃅a.5NGQ't> OOAQ{'k8_<9h@juI j,=9 xpe3XB%I E }V@fqa/ T/i/qUHvorͣΆzU{ ya>UG[>v n=KOZfJwǚ%k`Ţ>H,(q"!YS yaB]b4aT $VA>'\4=WHo^=(2D=8IG)KHl/㱖%Q~>Q:Kb=_kob q 2P8?ooo&Ƙ Z/%~ Q 6e4YT ,ٮB8bh>_N}b@{UaV:;52{åeW(#zR }l ~AZ`[/8Z%ZKAC<)N8jb$wpp8+FĠ-@x],#AgyJڦOɂO*JoL/Ur|h0M 4t6cr[aCL]Vc X)dq_uxyxzڪX(DVP?$p@D838mۣEï;)ls,*AC2y2dمnu@JBz.$$'}Bp`响^>El[} g˥-5O2nN;k,$"],GQ";q\,Kya$3E LNUyC5emʳ(CZt󩳋'r!oN 0 _~m% o.ӳ{q5A>]m#gnWE:$ɞd9Pl&#g|bȹ=a,9pD[$gj:U`oָUZ[,շsk kma< DL\rD⓾Z!0NJivI}7ml\)^]ͥ@RxB/ y+ f<—C0UhK~V4h&oſ͋s90XqghX"|D?k"Mkd9=[!OC |5%pjx)6)twߴG9 k}CbL3 !F9݋CʱqЗ* nֲ\ RM,n/ 6GPfEB`~:~kw-AoYe0A|! >|3~ UXk{9..4JUuh}CY8``Pf9^C7ƀ/I|R;"Ko:[=4!^2Pmm\rrַ)3LΕ@qUi]>@U=*qҥW-eˆـi ׈h)qIdxx؞1|KIPӑ=Ⱦj!1ۅaaq`-uyGGGa;`y&li'"XDc=6/Sc;ht`6lgq*;ck1dwv=| ]'*QUt8Q:x8}q 1M\c,p>wSc򭎒$.w cԼ}ցQ9S  莽,dr\»Y,kWH^7l)圏;6{/eѕEӺH?Ax!7tOL}UE36#ͨobQ*ig6@~ž*HOZ>H-Б 7tjsZ(%'UmW,D@*; Gӽ~rzӺ^SGn4W0JJeNS;W-5vj=[sTbgw҄q1FC|gcA35g*8b߫fs%5r3dN0aŦSG1i4}:-kdL?6!rw'ƈb%šTOW=2>VSWwzw t!ީφJ(H`Qcg I0`WDϭVDoqҋ%1٦t ĹU}*W<`Y2E75#`RR)mxHP[Oh~.J3dôU-JYXja zgx*EI"5k-\ĬcFR*Z0/p#PqI(Lj||"pW{>ClMAȨfvAB[< :KpOՠ\؍S/UG:OÉ9X͌czpBpzƳg|o :"^n-p P0,j{Z-է2"89aHc?4l*Lh< 2žOvI0&Hw^*W;ˢ( ָ\n_*xz!s5w^b6پ&[F5ڝv29r#<Nꯩ1! Dj/i@`7Eg N u;Ax O2ƨA Z}D읪ywۯ7y+a`͹DB`v 5X\[,f-{$8r%?ao,xBz ˾7<0~k5+& YXZ׎kcaUzUEh@usF^xAJ Xj4ZIdaQ}"rPP?DO+[c*SP/]!f&jy8,b_?ׯUo~*HJ vKOu"թjhEjdǒMI!@J올:ϕ"}]ynު춑y?k-d!` ޽UTrԵs>̽_4.yF7A )fZŎ͈`(%ôPf'/3շ\G)%/f՛4wZݭ;gyjM;TB |[C >>~NeaQ׵=F=­yTh:uMAAHēmm ONL9\6E8d}Rqh%D;:tJezؒgʀ1Lm7D2f }،pwDž\{i>ru90e/Ѭ`ɕI]?iM])m90EZݞV8KUkpY!F"UyO@-we/皗peB f5)h1LAc!ՈN,52DhkdJ)g`9)09(_qəeZ0tUװ#1^\ VZ`> En) !VÓ (kA>ͳg\rZp17cpf JwJ1՚&fv`?y8ugIk`#WDRZJ eWy |B.O志EwNk0xcqkzPfUOY0='^D"I XtK{u;'#&} & ꟷ8yRܺfթ4wH lp<Yl36e#a0%mګT-bDGg3ɕ9o&]Pgnꋵ|Z"j~ISdFx^t=1Y6,gH_H]jHP8(֝ؐ )RD CLcu0PXN y.'@}hrjKC9 }1jQ8=ծ}Mb_LS'LW8ï( F; 7 [>3\- ?@~<pD{)ڜxu1 ;>GdV)bjQ1NHIIx8h3+ۼ3Ҿ9>3~md֜dBW_}49umB>*uJ!T<>V^3NVӧqّͯ-(}"e +CZ8dlil)h~pmiٞ`4už365jl` doO k.B6EG &j]ݲyLY\8<΀!RF>`!Cд0) i*n=as|%Qܠ/cē^ =H"S/CPؓ,C9a K20g z~e",=k$ƒIw3uG; Y)3q~ȥ}K-zNݏL=j,p`7i86J|xoAp]D 8w˚`A+# {7iGDo XB',Ɋ2@;vWBGZ|ְ"?r{ ~c F6^yĴFtbֱ;ImvTqw 9uq(mi$!:FB>VmfN=<(6>O i׻GZIv[#3 *)  gKNe:/JD.oaSUޙ4*/a*M{+b%fc [ j(j{cQ5,md-Lj .,K]Af]+E٢@3*YM Jqf6ĽeUl5!6Ey䈟;ف.l(ȶz1&L }];vxH6'ry8XY\8d<_ '_Jk7csۆzA~W¥c2=SDl܅xX;{#\24Tx:w i7IJXAB01Cwd$7<uDVluT^LZ$+&ߪU1 jZvN_[Jg#[rLLp{I@RXKi|P 0EO6PU<9b PiFFEM̬YAB ]l<ݣiqaMĂi@SB%Ut 4˦2Fi(TEI$UdzXB=V3KNs0j \d8Iedlj"5Б}C.4O(ˊR}N 126VD֚@Z@~x;:~]k=z3>BϧI^0z kP1r^+9ѧhL9RWn]ƾS.|6 ۏ aj3{F3G֟dT1>rbUY"l,m#6Ѯ, 2Uþcc_$J_NuUEO/wS,,@'#otX :' Y8gÃ[eT?wh Ǒ1()snyjp˚ՙWmxk/~~E>rUBb AA.SkC S'b;E"BDX C˳(֜SClGMsdsJ `.C nrKQsC\$90E.1NESL@}D[o +9rgJ-3LktBd alL4I:S3*%o>|B>~ْl&/z 6 _Tل\r%,j<7l+eLAp1%;qΐ(Ħaoz{o *Ǡ:Zt`?PW{܎b9#P@@Wf}vhkUE‰vk~ߴW b CB ~vм~_I3:k9CkE>__"j^3#J {V B tyңiFh3;re{<WdЊ;YmD=8mG&'54K{C3C!҆m2db}RZEѲi{?VIF-R^5ipB (WMd +CD;^Q&+D d%Ѹd-M5D.gFa94ILdXRhtjD"@w#HAA{= "7d I^VG{> U:ն,֝|潏f'[) P|٦o힘Xe-|ĺFnx&hL:DᭈѺk\nr@6_ލoQCpF+BǾ[k@n}?{g;23UNy#I")3DNh"eX}5B 1v`)åQ ˺SDTc,(AN En_"Nְ \<]Z$K`thO{IS{DS/(je7QGpNhO- r)*V^k7BĴI@o ]|~=6oG]6OOPȋb :TU/S*{3 ! ~pu-{2Jr. L$kOD`6s_puxUρDhf-R%?K.W*,כkAo,vիpŖsJkl<ɀx*Wb&@HI؀K8FdʚA؇L]9~tt]$ >j.UnʹM`bt x.q!!ֲt# #ݷo;TIWM(Y޾ƒ9*׽ag,}a7C6bGk\ǧiz1aCݷR\قm;VXсtޜHsk=%-ĎrLAݚO2 >*}O8<} "13^I{:+Cswό A:S4I1|h* "6w< q xI&}?!gUK" &a/}sfMjя qbA˽^#ڝLP)I%Y&"g`y󋊡B)9XXC&]zkBc I%m*G O6IQKK8Ml }GzYGI%nį}3A3:.ZI$EW7EO>T,"Z0ڳ,ex0jzTWb敫Ź DO3wKSoTgm@ =X~Z%@c FS4.MRKĂ_7{2bN/mh2->+:fSҾ} Bz6my+? E]QPoP W6vjA4zF\x: l׷xȱqL/Åzy<k,"#" A׋0{§'O@,^g |@ĭsDThIӴX˜1ZB@~IյWbϖljEo-&O>w۪TBM/_KzvZ$D1.~Ov`iuvk -_ʣ*&cћ(*jHJ7OtˀܵN}G3 rgc U8j |<+YMa$O-_0 yy͟^ٖ  gZnx0~.>Ѥ?O ?#E `v]1+Yt YUa׬8cP F?K'Wז^_OxJ5/M psHtwJ>̐dvK7d#-jZSy._rI9BtNUCCUk j^Bg_dS4 S -o Dv5?z'@iWk*ܾ>~H2憎iԠz>NC 8M83x^Z2$i];'&scPnG >ˋİc3oN_,]l}Pl_Se:❃?A݌ $GAB߹ M5Ogf6ȋD@[l :H?=LgZZ+~,\/\ڢ993lQ [(!dt!%H0hw-ԠvIPڳM2#\e DA*I.>{`Qt[!a3^S4x%ިHfPj24z$ƹڌg?k zO}{܍lM93CPEMRf}Hl~G!T&}&WHDV&4҂*qH*X'P%l%I)&pD% }nU)7>NK`Sї:\@sK2D4c hJqmKG;۟F sӝD)}=ztbz~b֦k@qtPCZ5 "LMm ?X'LC}8_,;\Zy^F i/[d(e~6 `eIYwXI;Wb/Ғd~g~r-~~Q&ȖYx?#P Qӕ0 Č/ %2u̍8Ĕވ-tNh敮xִkMk^m%1te+4anMv @ }RUuX2R!'lus}ip 2FgK(!86 ͳ}sn@5<qgvGZ bri$r!٪LWT@%git+K)hOe0@5*r@rutEns򑧥N .@DJ!r7%zt[9RPz*P} jxHqBAp}qju=R@J&6D[ /Y nxFz5$zGeJS[ +d0EQ>E[iGx;@~r[&,f-"zKe@;\xR+HEV3Qd*upU*>IaE1>e3Q~XTiT̀vbmRE`Y='$ YJnmz+U_r ȨGȽic- [7 iP!&9/Í|/w.52N0AզoGqɳJxIMbuf8p^_ć2`M|nmΧJwILL E}tP,iF 7,a@Ɖd '>==W*?t˨,uwᮇSE'6Z?PDhه-^* GLxe2v*f?3Fp9Ȓ 8!BV؂лܟԥ<*,$g+BXxz|{Md$=b7QwI\y54kx̠|$+!FKT[PCX+H(jGdzGh0o$n\/opqڟ`QMO;wy(v)h@nۖоR?` HΘ!xlv@D;X;MV6N'݌HJپ2L8S<vOAx\j)dw>ߺٷ3iD\6P*r}ۑNYta;Jꨶy*ӐUQ:ݘ(P\hX5fP >n/~ wBᷪ} ;F X.[CYOX^ %@ӯ=.e&QLu41?ޥ+ՍfWV[Bn( Ki OBjt0Qڄ_CmG ,][ȤҚ֦B,յ4r;A,v}>V:eҜA`R] ⌾ε /+2H߾տt2+k>2)XCҘШ81J Aɹg$ؠ'~%2SW%_^73>|P Wgsi\ 5q&Y"3L1iAT5ڸ}N,5dϦ&ߵE(p^FS%{?DD,&zgY`hnomm9|1p H^68<ܟn]ଶêt섙ip)pke3@@J(>)ңƳ!z ~;%Ck]&h?\D5#Oÿ}3N懦h葪C v}<-DÑ LMr saQN0oZy@[_LVUa9R?k3z_,ahJCƍi: /T|y t=BSQ2O.`]-f!E?*p[YNYNHim2 o$~Í,4hQ'֚\j$r;=^}=B ZZqQX.[:iVDF[˟ڇj.%SY($? [crTY!`#` o7 l$dzQ\wуAvOKT 餬4ʥ}_=*'DkMQE"抢; jm,fA~+>4h8p8<<fqg(jRL72)QިM}0B!d|dT!HCVC`É1ćR-kIF ypRwn;Bm/Vg㽆+9xva_EHhB@W UMܻW& ^ՒQ*P,vC穑sh,dBa tqFCߊ. wFo3D;c{JY|n 7FI2VU1.W/l}grHCt$LR`6a|qNH3g@|_zqFA:+:asˏ]~Ϧ+>W7,񎽱}di، K;p6P˱ W 9κǧ&78XD&Sc-6t&e*"fʞGϬUm~I0ƊH{y!&TM&$YFr'bI'Jv ;ȼHx!m$m*Rbd\`pAc=*8 DeF-7R[/"^.?\{\8Jf <9Iw_Q ^b]\>U`( iB̧-2x#KK2@A7;s:D*q\xKj42KIn~4iAnA֔3bN7/xΛ xKK6@v =ܪGPp\&vZE]W$_*2ZxhǝX3oːq'#^b?SAO]q#b p^ %RR=ˮR=/,4U3l][BF j溨0&P"u/o҆B@` K uۤ| ܵB"y>?|FCĐԔJszBoصwhlM#w+{g]Z`T Xw AIH6IkE a s|9$u[prJ?^E|ꥧy;JaJ( =~:g А$/M,QW*7-@0*yJu)~2{q}:P.eQl)Hs$N8ժ9ސGRj/DlIx!?%ak0Ge`H4=i]FCIZkd, Pd@MwT\FY2o&/;şSֹAe]N#n}JU+׌P%!S7Ew^J3դ@*LK{Qž܄a^X(!3Z6DxX[[IqmЇuFݦGs gN%x~gLgj`+8=V^`p{hݠqOq+GRO-aOh3aPPҝ׹icoOtކN3/blB]= "1 ĿyS4zKsMr?q5yoW!7V0P1Ӷhf,+:q&bK|B`|Pmfס Չ[?徭r*}~>~0SƪV  ",8IF!t@]|[Re,?O0lưiGȯP)]/岖W~bު$<$/nO jG%r 6"hK1؛@ӢɼHۺHUƖe&! XWFsq'ʂU:R\TKhL5G ?6_o joƢTC؇; io,Kx^nI-3AVDdsL l&]I.)7%2mRTb}2otȌN\?:ϴl%B|lj=g(9YgaxʹU׹fYxP_Ү 2N"6& 7JyoNrO fʇϪ DOqmʴ~{nJ[r%^}N^gF4nB\S-\Msa1bmI^qX#;(ؽX%Z)\lV_"Q%BjQ .,(o\0*BK7[IMV dT5#b7ozǒ"v5;߯+_TKٙUb(ÓkR7-eJ2e~$2cX ts, KPͧXt;uwj-Yx8gD gP'!FTNyI}AOKGѥ'bhˌ)!GjڇQHl${T9 lmD,[`/qZNM U7ǘ ?@ I^K3]J:{}C x!]4KC\T콷q:{Ff $Q49i9)؆ӈf֔5$%*[˪|hUq?rWSi.`Q{D!!eepC/>8E׮,m葋U_E")myJNc{k2sB humn;h-{,Qnhu~_}:o71$`=T+4qANԶGfeZBkE6I^to]7Κm#H52F܌SzX,?a_R|xTH)hM< i?$srq40*Ϊk4b'zlULPQ_:s.jϔm6EkdnGrOS,NdVpEO('K ۰O!:xbO.- Wrn SD*?dnK֞YcFo og |7XqpϸZ'noZ^%Câ}Ĉk\3ᇏю}E7e炸T:h'lxD#lD/w9&^׿ǣ'/_JЉ/Z?0>d w q-:\Ǡd{Pţ,>Oc40IM,&: <rG|zRr!Wǖ1}e69;بi:^k.l(~Ub#m;*L6ֲvQW0:RTʄGP^2ϣ\LLцFz\ @owzJG@s/I CNsW.V 3~P)ǟu`4:LNJX;(tL=: q3}#VW|*;P.vG2vt} YcJgRLNf0eabHpC/o쁎'EU9]wF^\J8 ,0pK?o0 9'6<(kȾTN/b5E(PODTRTL|LÐ4_*ePn7un(D&=xٲ3( 1 آT:)C??l.33iO29qt*ʺcs,ej=K㷼ipCT_!Cuv}Po5eӟy諀3֜9ˀ]6&oM4 -4"|JLs-lE|42_2 |K!늄zHe HbXp {kΜ.;to3gC_b^ FAgu&_bGb\=s)OKH}tv"̮C60ށ3 T0-ސNj_Al g4==(M(.UHÛy~S #{*cT ',S>%bL"u-|@:SiU@״%PLE0er0"k#p,#;n`K 52,B0Z}OIQ3r?`_/Nur".GC?=?0: /y8<g'Z'z]!N\TbZW]>RL汦L½ЙhՒ핰}+2mA6/{+P9fw~h9.MO썏ՃܬL7kY^[ywXjal`fʕߢ?achL=kC1'[Bu&!0Ӓ0 tzJgh !m!KGz~W98&._c 'qD1qmeEO{*GEh#OJpuP7eMe2I͌9D2qaẝ[bgdB~Ț0Bsƪp؀ A` ge0&>j`4E:Ȯ$(k9Q@g ϷI2%fZv)Ϣ~(!h͸lld3ز$zyx]3%':E[x^iAnRYbIy*$VMd|!?`},]g,ǖ\ֲ;J8Zlr7u,2l~+gQ#_ZRCRo+ A'`mI1j d j&j4o;-uANRf9q)*9(6?s7v%=qB ͙_|.AR\q&̆DvĘ}006دctɋ =1L{2\c[no)"7iCpĻl B?ȡE#geL`f![ӮU_ 0"-$N:kUD3/rdbΐS $|4hKZLMU  w( 6O\Yj#_Xrҗ_>4nn 5h>HbD+u?=Vbx9bbC)w[MT{Rq)aOxvů-@ΑH-m}LCI7#IDCvW*39<1ok$F)enrtY!4#snڜ"- 6巋_p#zSx:b DiHt5޺wǟ^"?ڻKmMDEvoarYv1G1~&3~"5`Uir'@`=s4z@{",!/1k/U 0 xD $w n=@`ɴiE^VN ^RIH0<>@m,%wW=>^zb C\7^-/0:3ݸ۞G`{yfLJ:»+o /@o>v'Y22ӵލr#bXvJi lv*lK\pohr ;q-&F0rij1&5+ Fn"Qt#2+L恖(SXCPV%'푌gA5ղ?iMbz3dvsQ=dL"&|VƖ8okg;52̸ԇк1f1@ s54K 75rߩòh 0Ws\+ދe՚aoC3N?$haJhD^{h%v{|kPO&.Ӭsj]R @ gZ`UVHyuu7t?RbF0pXhh-ߔưO =t<^xRˡjbW%kˍ@zzdH3rϤQ$V|t``>lbe9.@y1أ:fɓCtD4ٻ>xEU" &8$&H[>Xoޑ+;8UZ`ֻ!c߰mhv=Q,wb4>o#~^`9V85k]޶]rsf[uBߴH<{V;~2!H9N~soW.D1kb'jl73]G|E5D+Ҽ1qrK() pUΝn0$7?,P1ʓoN%C iVʘͪJ .{!Unت['rX;sMSg||p1FPwUGv^[-b9 AEbޓTٌgj͢sAdgrA??_A#(X0ig5̅W2=S K DCԐ7 Ȕ܁BX."s%w3YB Zq{e1 TwJ¡shċU9W`OWf:Ü!D4t!A*b=C=PB(Mxp"yl-~0TH O&,No;pC×HFAn5*UT2)ݗfےm'*?Dr~*a*0L|k!K$Œ/P sssV;TS/"=zc,)Hbjų#q.q e]ۭiJl[dI IK$1GQiu<jO+3j25,q{q{iX,Tv͞ PQh8Y FѺBh;Deh-b7u6~=@5uJ v%Mb9B醦[%y<!yc6h3e_QI"vB2}f"ExgOQ4I~ ʽ|?czŃ_N3c.fIH],6ZUReЈyƨCwNGz0uJTtnsT#=)AqNڰeK#ʪ!.!_K͎!EVL)){ yEkѿR H¼~O9 YEpbl*l#%Zp*= ;M*!%03WFc:[J ?<:Hd݌{P|>G:x=%En+J5YhPzEO x5/!=g\9`L?4м ӻ9Ž_ b9Ck_;iv0@Нh/Sh͈ JP4 HAD"t Ll,4 Nd5gLk#ƙ v7\tZz](?-R&8<s=x\IDŽw[!ܹPp&ֶ* aک$,4Kȱ˹b0mjnHlzQ rP%k% G+eDW'$_DyUP8 ^qm^kS֮{'5QlIl|€[RRdgĽK؃@gno>3IJvˎM bz Pwl,T"C㾣U#ok\+cll~b";p\8^}vy7&@)0EaBrl$;0Q鎴hX3?E1jO<74qT֞V4>$6陹9ҴJuO(K( X=RA)(vK}B,Ʉy#N@+(Xo,: tGnUHOjҲ L ŷpbFI*4k GNgyXh xl ΄ϸ uGA Zu`2Ɵ]gO yN(,>À1|H&d]͇--b#_: ɭ`ca}= x&(8@[o!- mb#RAo<\>i?J#ʶ~ЅoE\SQ/PjFQ/^anl4t g7Waé=%!vRYs1=NjD!4a6c L~=s=l-D*! C7H.Kw|; q|:@;q=h)Mڦet\qA!N@2uPzA!j? q"f'C9@0v$-Ś)}М& tL p_S*s^I@%EGOOin䓠v؞SåѲD@>Z{p(*# -^#f݇(ΦlL۔tN?z Mh5lyomr Gn&]{/wБg\,]zV޵ZtqɼZ@p/( pȫV{@g"q!-&s;x#+NG10#(xOGSyssd'wJ:wQD $.l37+?( c+~aP15h:dK ϐq.tg8sr%eO/ʫ4^43~p:k.Kط#?S^ -psKP@;]VI/Si(Qz?4ćވ/DR-շ `,j,;KFnrNJI!QS:~jbU<G8lkǖ 3~Rl8?4_nB+W)a~g]qͼM[S)yH,i+/R];!b`ݔ'zNŎ=ffe ?0DIl`&XO aZ a|idԈeQ'"AD (="{zL-q9Qڠ=V#g٨x,$vQ$0E)7!y,4/jK67Zhokծ̥/ulo훑a >).=C; m#e%ɄY `5YUL@)tw&a'[. VuMf"!g9 /M{sf,~TZKO`i90$fBH-EsPyYӾwDSCwul.L+MB0F%؀,H#6N3M?(bZ08`F&sKu6;z|FEb"EY*1qA;髾*EpIajxoބX Me%j< /za?a]})׌n gE=@d7*+r4۬4[SU+  >:͆M*;l!`.lkƆ -A! ran}{(A{ҙ]6 +خ{f~ƚH{#S;D(M e9̡)%odiy{E$W# TxUnFU󍮲o 7\(z)C`8֑Ca Zu<*==M a3yIPHqw`!N)+ @,Tgu$yM˳\w?FQ|I bw]ui _h1-%. ܈+@줟<D"Ð}7zBt$y~U#,YdQV;s$C#-OH+C`KCG4Q U6Tg^c;ySݶ5*y 4\sgN0?m~KI'w xhН[POYAR^ Yy%s*;*u]Pu== xTcͣOIg%e4}Ȳ}KmڂRMŞGQk?}ЧrwՖ5#GB/gQ3|Bԋ Dp.I%(vܮ: 7/ ܯdgfmA,Fǜ.0 ]kls|EkJ7 q+T ނGOgq.IJr@-J⭤}.$n#o+`mV&,P,Nt4Kj cFcAyi9X`ke>|ۢxe+0\=@> P7Iae%6ߖ=qFꭦM$g} !t7 w <]Y6d|"Qs][ˍ6Al=py Q&°K::1mß@Ui}~M (pFij R]$ՙIkiQ4~H۾ߐ>d*QOP5 :R wD#yX{ɡ aYdCpD~D-˱2{1{%gʘSiwIBXnGw˓I1ꑩj>Ag\j`=%I-̸č.5O?$I:#ʠ0Ũ7gOH=b,> u^%Zo\JxPCRe?Lr<2 cWku Ha: wجA=DO;P| $a,! NVd"7sňo6y͵ !]15_VF.Co/":.ܔ5`[+ 2ᦊvS La'j3dYrwjlN0EtaԂ;- @N(Ǚ)b6Y7 Lz7K왚W_'y2tq'fă*RLѻbhQhoTre?&Hf L-E<%I|u[K39hXW?hU&Ι`kֈ+5BD}vHЊt)VF𛢠j+c˅Q~KIe`Fv$K $mYsI?Zנm0^ (m[_BN<6ӲYhoZ+ XFikbʹψ%Ѭ%Q 7큉B*oP$؜vtKY.و4!)d%1ő VЄZh%{K`2,N`g}~0kGRV̽f~OʚQwX'W>Km y/WPz[ Pjd"###כ`k|XnU2oN].u !o6Ÿo:$uFFFOp=uy l)b ։MFo5JЭL"lLXr!t4Kҗ td D$byc<2E|w=kĄ0 OO%ݠfZf_TFYYs5Te&kw2l?٨1Jܱs~J1m՛hVP,r*ȎAcn`+CB< WO˹ٿ$?fF6U^ы^ Q Z, '>>|θq@Egz[5NcS1u*]&\Bl @\@\Lˌܸo51)'r3j٫q5yŲTc,Xz촢;*G0{-k;VZ27xRwۧ 18ҩuBq0$ϪzʱVecZ|9L`7jN5M,CkcT-4=@ ߊ-njKy侺QN |Bxbe2v/?H7Hv=P8FVlE;6:GDdy( Ĺupu|QvΘOni#NwrҼ(Z bCQXb]E J돗4u/yMfys(pS;.vb;6HzkQ X6I?6KbF\(.H)MqꏩGIh+BSb‚EI5Ia qmg(a 9NLU`A9Ci00)s~\$t׮MIFzT)0fۃJ?eVhB7|- YTd*-sVag~: %91x[4g5s.DlT~6mGs aV|zNbʡqf:#A<֩|<9P2B9Wl )LWQE,tPI;( 3$ym>*RN,XsQdq HGZ4YYD^o܌oXg RixpHh_cxY[(U{f:<.H1in!Mq^$]CģLihsy9HP9.'CbRJtގrʋ8hD5ح_ihh~cL =f͂@{%?oY{W >C>+=b}iKw^95[~ =9e}b1L=7DG-W.+놳2<)>*a =Ʃ W13B>ݐ_eЃIr> f_IRo\S/dQ=w䀈PavrMS]akSi1edlx׹e!,K\B3ߋEsT;R\<{<p{Fw͊K@e[xt0Ո,`r@VO0!PR[`=#`!ϧv$Lɚƶuٲ?\‹%DswO+S.^ k$qTIq[U@O->k%\s/إPTOkWۮ&?amò6R0AEikJg,̅AWGHGHd './?:%3/нθ?X\qnW }5 ")@5VeѥZsז??zZ;*HFB`<WZ- ]x>2VVd6k;8!v,`TYm1]Ujn`nJfv(șbpɐyZF$a\2켺5}1Õp r5W`q_S0-PV:I뮕735뒛1%aUS2N5Wc^.هw}s։16Ԥ j&ny@Dpky#Of'jed& `JQK)OH'>ϖs[(܏[E+!mhT"o LXLYǼ)uE>jlot@ Xnk\e~"\T4_.}= 35Z4SKWyW+i>.P `C{(@Z9_2S'S1Uϙs #BZW]W CU)CqM0p)ߧCP1$"3ӊ=5|TRgiYI (\,0O_lfDNʵ/1٢Z*l6&K:¼y E @>5Z\(+ϓ LwBbo%pXrtv-ŎSi7̔M!"3Lt0YFWE|~o`\cz͙!|*wW:|ρn_)טabdL&OjY|g6 7g ?)`5f<-XOUKIX?dȧqQA$Rd9 `Ƃh̻%* gaLN ~"1rDdgJ,>/-Gϐ89fB1 W/ḯ&G+T<஫tk3I툣;y"ӅklaRˏJM^@pDpJ;zqndU_*򉁦@5X,mVMRR]~G*+5A͈?m_BL@L{ܴ:BL状ICpvQxGLkma4P|C4Xw!"]KoGjCбݭxP-'PBşѶ$8<CgqL'}/j@OwEyΓdU{6&9iPsM5;{0H!|4h1|o=iT˳v M}nĜ<_@}7;N4KR3KkQb%ղ|b& UpjQTrLS%d.'y )Ԫ(/rxjmr x^sPX50wn\ hx9cWEws7AT+43;]J5ޒIĽ/~!F<.oM8 B4[AEa%UL4bv.ƈ2F.2m@ΰ{B])yLwD(5MS;Ez|@%lsʬΉZnǓ+H%vԔ`gCYjæNcޤYwBP4n?qN5is$̌+NBjĻX8|urlCAE;cb>(Y?Qg)\?NDJH=sͿZ?T-Ը;n )*&SrjcÑ7M3鉚Nb.:Hط3ߍps-d _@ɰ YdXOteUFiKNvM=5"^p[' c'y?oc}Lb!gx[0y#.cQbǐ_ ^Zp]P;j^n+ݮ뻡j*VmP蝨iclk3"Mm j}DWLcBJ7;ڽdbg6+?dn\/jciSrSMl!N!QJgV멕%bun,>mnWx|0Ξ/M۔yQsE5w)?m -tvQ݈πNMpVO| kwsi)fnt䎑2}-C]Wܪ =}R=ExHϏ&]qJ"B`"&H$SP2 U_7o~oVȱ?!|>4das^(-|]=}}A?Z;94 x-ddNTר;O3ث&*M: č*)om0R~Y{j焤8 =CdTaK{sTem v[(u2eN\C,ɀ2#}Th4c^QGXgbCmA m񵆐8:m@9Kso~OfRqZw?+{}]hfM~-DD@"( WW <7-(`@LIOpCrk1By]Mޕ:;\YJA1:ݨEM+8fkMvߤMPıh.>+CߘVs"ԿP#f4_Jsq9(T- /-A݄FWO&9UݸXr dhyheWT>dvS6!ݶe1]PW5O^ >FruYqmvaǒvc~.o LJWلJR"]p ޽*`LJDnLloYABB!L^*.HfMP vCʻnb^y pa%:LGR.pxlV( .{-hBksGo T"5j[^>pXW`9G1S?HB[{NصĢ؈wapNsuS@LybN 6DYO̸[3XdeeV`tV`[ڬ 2e[tJ[jm1Qld [(xC,ץ3BEԄ1+[I!ԙ^(a`hDX@]Dh?!+8;#u 678{X<5uaӓf.c*1* sY#(i ,:2j\Lp`>B=eM^f 1q6g<+̿{M0"hc_m;[!lC!C\q iV iՀ/7׬0Y|mH؀;Yo>$BwK& m~ +<(糚o1n5,V]Fi8H&9>9Gcq.Wm<ڐ#c̓}:wT3%*H"!& r"y5Ӎ@-q(9J(!X{AF~cii5w?e .Lj`ph jQy6\{IDWEWy*5'y"KA9b\i\LUq\vg 7M~nu{5'2t jpoV >l*k3w ;#Rs c[fAf|OΥAhG6Uo\ d֌l*d:[֖LUWS7{b{|ݺHOW۳K{;I]Lf wx~84 },/pїł+ W'HՒwa^n5D5VƫuuƊGkAv#nX_KƦ){[ȺlQwR8kvi+Ziw68iZѷ1: 4Bhk0K;5ԺoQLD+ܿA}mHX[IҥxjBN64_JBFw15bb͹c{œ>Q'V^_v>sy=dV[[\9ȕ=zC|;~U[& `vݶXt&0C8%kC $ϟN%e*AѱisqK(d.F|YTkXѴiQI0^yehr_3wxF23V4v>%(t:iC?:.',$25-L{U>[͜gxMpؒBaSyZƲ\֨~2a:5{K:.\(@"p<\kd\$7!KY-rbfوZsW}҄OdBFtcnTVI+GH`5vCrvk>Tl]jkU#lN[6v< 8mZmA1=z!V(o \KbZzQ?~${U:i;'gnճ]~x,o}Jᨩ0^ɚ WSl㳝FOgsM70ݷ'GaCr~O'bºQ'A **d#oGځ,U:{`%{!BIJv;OEk_GS <23rqb1 <!"C nj3. ҉$@A"XϖA h́z09^=^@]:5#e!60gb/ͮl@H Yj;,=ig[i%xՃ /N1gJĿRXr2oB&Jgʜ Sc:V7 ao`1|oȗW_Q uFZ>jK.FFp.4ˈKUn+'?5g7g9a%=krj9g/u`uY.7d/tQŒ,7f &=-Jlǻ2E>We.F9ĿN#Y:Cٗi=G?tא{&6H~Y[wV9q98&vz<: ۥDr1(*-]e?6ZE,za(-?mid.pb[oW,fmi} ?Aj+Av;_>;w7w/S !Ȋr=59)YX\-H/^#01eo0nFM7d@NqzQ/:z,۸ j^=wo>5fH>tڔ`({vFL ݌ [,h8!kJ|G gJ"$#*_m4)4@pTY5jMz}3mGBU{+4yb:$1DB$Ѷap*$:!ee-EÚ,=8T)ngF>Uٲi~~i˗>:>nB=hQOYO~PNvu>` TRjdfntA~ UXk*c9KF{t #^Cs/sZQ,|VCk=8;rr tާhT͕ n&7u@`=>rc.Q7mCj\ m{iAR ^hmű*@LW㬔2;%BB@ Ѭ)2r,Qu3 G)*?Hѻ BE6{ulonܮ\U*٨6 j9!hnmN](\/b+Ou@ cMgSa$ķmڍ/3-bO N@wZ\uNjiO?O5̉N'OVYʊMQ(!DdJKTw[,4Á.z脜`aTs3(9j|Xib9u ̀D:5"Nf#C,@dBR&:~ $K8KxOI}YQ#E{%[:ˢ[I3ֺa-Ѳ%^7!WSG-.X ]Wn:sz"3FB9r;ahɠ>,,(%äC,@KAR5)Q>Tz`QhΜ]&Nbwؗʦ3ٿ5Bέ13 I49oя"޷M$<31,h8G#8U"W(h@vXXuh<[(XյL&Ӣɉf&7~z6 `&;ş; Fyps"/U _bWg@̑ҎAo;Tp^HCD-M\lY!o"9S]DN;'ӆ?%Fܙ@d@<^n"79e.e- !1UZߊp9F2Y8ĕ]\X=m2 @<oTVNN&pqzҴJ#?5ϒo7vTr2\{-K{/[}Bߓjԏ쇭^=#)9%eGl'ClE;$j.=,Y)!붟NT-⎓:ttbPgx@9m N0/IQYJVp:DR;'qJ!@Gin,l7GsidIT7Vpʣ&'yT ^ZaХM@pBmp_9eNyc< He$.#7-h&lvva>"Yط^*!1/jHCs% X2!p3Q:*@:s hD|Z7x`@NbYLv(n *;,_-ўW1N} ;UU㬡KaWNI;&⊲xBa(o;ЯPLFfHӦ[- RKPuǶ ϺjDs c$?JR'_ JFLbw8=bꭣ*J0ĵe'"*gJ!(9tҬ&bZ t|{gÊ9+Tm!MY}1 w=Y!됡^D߲f/$' 4 b,^6ۋOq # @"kJTjnXV>$JvG؜ĄKE#pGMܨyaﺲ,YkjNtcQ[Y!JO=P)y6Blv܊K"0ſex &ub"D%V,j.AYPِb'V.5Q=Q0O\^)^Xfʯ- "#G.bAO%Q+hڍ ,|q7#&Tmd-<# EH,UH-FGCVƝ<%,J7Pqڏ ,8@bp#o,AAɐeQgp(gQ)b J yHߠ,W ԂGij4Z &d'Ȯԛ > ,9ؙLM^sAnkXcziS._U]\-2"+v%WLqxtyOGֆϯib mAƚ5J;B((| Vy]g80uN&Ib"9P@>RqMFe*0{v ޡBa*X׫Hȑ [u|hX%&qUDjhj#_P`,c:B9.6.ICK ]ޡWH"~`<4,4Wvg0ۈ@`rOig/̏Űdcy6.eA/Hڷpo-FϞ7)EǿoOZ} ]Soix_:p'o5ѾTLq zvTJ +`,Pmk`z&pp2KJȡV$ԋ%ɚd0;5|@W[ .hS'w{ o :$Ģi>M9s x[ݨȿ[#@RmhOK#y’b9#Yg\,áz@ng4فՁšDl2,ùo/uze)h ,6B} 8$Oo+1@␏&ӵyvUuxMd*?ihHǚEKqc l)6maْ&i(_pAՖ8S]%~.UIw*#(sQS(1_dC)B~-1+ j1X b,{62CbZ׋^|Pp/WA8}oRPI\n.C6" o<0ȩ }mj6E087 }lCblg=)~E$mSGl!UByN8VCߦwW)׳jȹ}nVL.vtr:;zcTN"GyC?m_Z_ >É`\UWVz$0XI//섦{ง˞BZ\|KP l+.nŞȚcXC/+0Bis;*IƦkfXvƎje"6G\u7 @LjR+P{F&)$EZ&wOkJr zxچ?fV ryBqIƵ Z‡'O=(K}$~-ВG(aKE,}vX_M"ֱ(~Y3wRnJ_)󿫑< *G^lq&O!}@O]Zs Rf'RXuO)u2/g҅Xy"\RU)Zu 3QTJ$_{c6ʁ r)toBφyKԐ0=ʅ3#WfB P ={ۡsQN MuLWhG-^nQU~Ʊ\߂z^7=q)dS 9ݺzlj#.~1j EP 9fJr&ZXzhߝe7xX]lOKlA1ll b$i)$.L9/a% * <3j^vaIqM^I#(|SurB2;r-kZNMj`C<`Th{,eGWW6 6B{̢Uΐdc0; ̄O1fe=XA{ΎBUHBNCc\&xLk}~N/LR^iG8]@߂e{-;prO +[p/%S#;%0ӲX+OoFK!)l.!X)rzΘ+{7Qp')Zr6sgãp1aejHRE~* u$""UWEo@ O7!8> t 8o &^*SԤyԔ'\Aac4x{M^N,OЁ(J`׫䛵ϑ/2Xw#ClK*,|#)aٜ[e!u10LTFoM2ED,H["{$XoaI Q\W P4Hqbo&! jsJ}Ahz]捳Y^E*g^jo09W7Яݡ#GX3xVuxY#t#R ]6o dXq}G efljg!uJ<}(otExB~tEҨ2Iӧ|;ZJurdZ➰BM/L0|[Yb5 ȋM&UJc :xsOD h\CjJp3C8yz#(&l ~<&sL1f{"4]nD-W]-;AM ȓ\F6sG~O-,IZ{,]Trۨ԰ZoGyfLIb3Uڅ@N`Nx1XHΎm݃5vO# Q s˥DL Dj?<=f{Y6?Pq+ pUJh@ ! ;}|I":b $Ilx|u0SØ̔+wӠ. b +)'4JIwקX [jgR^%wX")W|8V^ltm;>xkw޼+_Ef5KZw,z̃ѥ9[.~.SRQ#ȌtբOGHͱSi+Md~ma60{" %K9mh7$k{ņ85ӲZyLڶPsn#E"F%)&o&t܅PW-2#?wa˲]/üޥW>;z-=ۆV2 LͿ-k+HJHBL/O ]/M{72n=fr^$R'(WHitM1/Z),za=Ñ_-̢="roU\ѣ[l{¿p_]p5kҨH(ʎ/hn:2d{S܁Yz( ;9羌FؼJLXٞߺq K?\Cu ͼPL~"_7rُH1¥GT%nZ2ڙf]xYf#W0R'Tzs!ۋ}vK2aw;-Oە_K*/v5ł?U&LGG@C BQb10nyb$aXRA@Ώ=hh὇L$#+vHhV׼q͚ @ "ؖeªԤIHcV_4o1wwDET} ɣۻZuȑDRY!;Βe3O.zĬ`wU=d)'#<^rE6!}WoܢRl] o@ اxݫϭ׎'iav+H"e+ Ep:D˖̾@'Vق[`[ bg7X3Q'U ;S#J9{th"C> /Cf^:UOa'4[S?FYm;E%yJ5D޵u4hQ$Ȉ\0Fzy?.2ѱ=|(Wl.5gK(elUXMT]x( u%w(%`.a<#_*οs2M-g9C3nh)ax1Z?Uu~?Wk5IH{,Wbf[۪{h^])]U~77w)t5LY}¸4Fez^>>{ ,3'Sfc}dgCOIyLj$/2qpVg æqbQ{fƦ[xMk 1 !=k 蒟ȟ^ Pm LÝLn+k u2&7__qqzK )0LJ~j9-whN0 |J ZJqO;x;f(=WrÌc/}X83ϳ) eB{# XOk*\ O&.ӄixoY7?fLMSW9Q E2H z>)o]G/jP55bl3CfH9*Hܟ4k:x{ң'Bp)/,d&L5LL_^-`*dp\\tғ@jkwv UuFRl^R3؞>v:خt?MA7^$lrED炙ْ!ȗ{WxFb8ԥӘ$~ojGE!>joޭn} FFzҏgo+hbuHј?`mHOgϒ?E^fJLC*Nہۋ%x+5669jD[ ]?K,vMy(0f\Dwa/M-a,Kֿxu6¡Vonяօ"ڄ$mq&M؜y} e$'kyKUCIY#tT1IF0M􈑵)..gPoqPh.d]~1na؅N3M|>146 ̻>!%7۲+X۸@:'!fAݫԖMűOU6J? S5Hʹ >G#>9ĊDvE$9HAM9b[`:Yr,1M{+Zǜ; gJ&mGdpX+3xÛisC9:=WR$LŐT0qdaY^&$ԃLi @;kˢ>e$4G}UAOe31>tL&UZnh׫ ,! ` j"{ 0$8tLX [ado؏¥mRi[[KJ mwy8oO:SI#@ Dڂ1.8;C?~̗ !B- cz]N]:!W=3.Rĥo,\@3%KrݻI0D~f⠉F2]{ j\=׉9{%u@puL{͍WYj,p!+e//$ 1pq(>y'm5$ho=JE* N, ^װwjv^.ⱜ zⴂ\rEP׵|P 碿]6Ā?D>Yikb} _=}j7Cdn] RՖK7 n*-SH˓DxfIP>n $J6YV[z]n{=Mšψ,|5.CW#U\/ngԼ2K<ɱX߷n*3Dfa uP:]K+!9M#QJ6Djp/OEj_ҁOꋴf̋h/C8Tɨ Y7p0pdpF:'c\.3ɯ*iY+X;+&ضRbVOq1Lv5qEH:"\03FRVT͉f'1auO͔ˡ[O#Փxn\LBmԺ$wY ;@> doYά!Dx`\ïr:?-q>BKG\}׻Й# N"c ?} P86zTuq{&dz_f_鉼+A >R"t`2J\GL"*ug#r\}!ߔi=;i0@ QsIX:cEzO\ nGIW79RHEP?`稓74 ⢐tod9kDVqfEYr n!!q#a,":I2ҽsqa{nv񐫩EM~n2ww=UjEQ3WqUDONu^pće'*94O6DZն9A{5zBj"jj92G=FV6< i6&Y-6AZJ2u`qbܬ?]8Y<;YK7fhO%yKQyz;4qle#,aS{PdJEffyw/#@)s{ Fi2fQ=θ0lh(/@|2V{p-ԑ WW G݈ x&4ҁEdfjKf_%= U&2^ ^fBPu׈_,HW4 A=}E2xoޙpQBlʞ*d%%ޫR߮=F{ ,;MHu-&|9^O[DPr C+濦^f4b1~=H' d}52]盢[glk?,|J~35)UC~kb>1^,A̖p$& #"&|ꆯ `ul_! . !G}gMax,jQBHXUq1Qw gyRǘVKb͏5M0L#Yvl=7 tl cut4fN fkHKI _X8Ilq9bSo0T9cn^!>%{7Ao,cvӍNhؤcz(?IfCC[)\ow-v ~§[\"JC| c]iGoW~֜=84*$X>+N.ߊP)uӅrYB5e=tG8;8[F,N{c'{TP`!B#Yq‹ rw3q쬶dw~}n/[ǿEg"<E"mvg4]Ƈ1ES)>_f M<E:$G|cwLr"ƒ1?pΙ>"YWt9e-ǏtY ~,2:1T>sI{Sʶ1dž}ho- PdꆔJgL^!ΟIYTD +;B 'J)-9P"iq&ne&>Ap`Yr6>5t_1ɡ+z9( lujAZZes"j^0vIWHIk`h"sL+?Db#G\$獳b HnLv╌sĺYA$kxAQ=.-`3WY1W:GY&x0ŻB埍@.(~eONnu`t Ru8Kqb4Bn} : vKe%>=9{dY{mo:a7U*9, R54LrzPxkO=1KEEwRkJLξUadujK6] qo0b ڜB{F }7}kehx-t*ܝ`uy{;%&)X>J2@ }U}u+Y[̒wfd&ЄU%~\\IL,/|ML}~K¢XR+Ȕ !5lU]-N+oyF^$^?f]b|i=2I[^## jגsfm'+l4hI oN2l(%7q T (}*Ǜџ{ӨqS^E>,G0 %kcL`88闵E p65!'{.=q><3HRT@7v u;H G \̇O p(pJwG*!ϻSSshM+oŶ0Ȱll5) 7!\.sO%fvJ%د.3,.ԥ֡'Sw,S+q|aٰLs^` i t>MWSӁFYW+uZ4R`G-BU̶ƾvmAXt8.b`%/sXSJ$vOlPê`4( 98UWe7-C"#1@&M@!L`XL @d:#64E:YHubs^%XЇVYp"ԼPsHHx%EcYrMrY]< t2E얇)gt7DsddBgdڈ߿߰`P$<J3Fm]!AoET+rܰr;]TGh# 9܅ƭQJ].8@m\\Pp17)xNT^g||~g"@;m`H@|ib< 1i-I@;@2v)P|H;-"΋VYX㼀pmI!rLstK(t)6;۾/9z(1h>7X+^ a)6ZXr"~, d^eerGXh%ʼ?U8v v /q=[SH8 ǫ/=7OAOdZ 'zO 4ȥHqݦoȬ$# yBӱ*xdD+ 'I`24/@Q.ʳ`ʃmS"!Cv;Go@RPΖfP{[7bœj/%`Sd1,xS$y-Ajo$wBW^k527'FKO%-"peʬ~*[mVM|H-sL)Lr 6DD}8]洋Vm+OD1':+j2lGΛpQKAɓT@"3E-ڒwMS)3(,(Z@tܵMc 6eos&:mkret&~$AD@|-I3azcj.R=sA\E2zMP(̯KTKY~a]YX-1H5 h =F'aR 39韷j}. `iWzSi{ǧ:ovf"a# u1#7t1߫Ц)qm'a+ٽ`X-dw]I% 8_0KTҔ(mze)]qg 7ER2r@Љ6a~"˩<i{t2 ZqbNЉ-)J0(%z6Ժک 0Qx{Abe`C"0F}="$#ioTx!n4oli5[dVg`O-R5#gGUi^<:N{REV,{`1)XnJ뀴@TDTlzV#|"lgy0\ɐ)jRo*=v\ JĒlxXJL(y0',^YWHVH22aŚ˵!ZOU&C=4i4o{ʊ`> rA ꯊ{3V8|p;sbI9tX_O፩s/G;?JaCob Q~?B[=K| L\oXT!돳F{m*w_}0le$C'[sYsv/KӰ@6flS5x;$8i>1Ȟ:yY?@HfD# Qrqpsd$%y͢V`r۫##H,,Ǚ`ꍧ^:QrX "]1ZQashG#+ZyΈ6(Қf1gA+x0%gdjUTe^' Wg񨜀$5'̷9x~)BH6^FFv~#< ?gޢhv$0fKK ? +\xjw~}. EIsTFkp^Λ6?=bxrW73s8޶.]*LB!lei`.{G 4J!@O5xvCjoGojOjju=mȭC| 6#*4 9twh 'ZҝI,{ZPN7B" T,QoۏtwM49US/^mDBrK* Nej 1sk)o;HG`m~uQ):݌ aSo9,ȲI _'" G9n\XN͠ I/߳>FSL#vRe0O56ouFK,V80.}F̽HL]3s28:/JH Pee6X6w9NIuNP8ɳia6awm + C\r#@8CZ 7(f9%=* 5&?W@\ΎEv[h<uNu\Mۧ6KԦ$dEPT"?vt$#f La)jV!,z$W^4​F{%JqTd9Нo.ZLjʬ_0-*h5L4wT, _u6avg;juc8&f0AtF".b;{ɵ *mDyUذ9G2E1?%!Ōȡ0SEB "ĆK R7dDU<>1bbt0:n V {/aneCp۷VYLo'zuz{낙WUOgƳ, 5h_2LtFWd φ(J;|?]5{+zN$G h5x`+ǃ1v_{EWj1MwhLMw߽6dP8R1E}@Vgsb2˰⮼+֏I߽txXe 4Z0mjJ{}|M>/.7/?٩Myփ;/3ʎLZ8L^D}1W*-RL}K ?Xs'|>;cqTV`k93=xLMHC\>P_ZUgj Eq'9E/OKV :ʊY`gmKZT1[ ROZ~[ 5e:gU<%BEl  u*_ IO6ch;$ x3k?v肣nc(P9Q~w8(h뤮`Ж (n1oFrV,0}^ G0oMUwNJW~3G'Sc9"-_ѡŋa*h`!ӍCVg$W FɀwU-|* ٟ<%@QEWpo*2 2C "o tI%qQ'PQAG5@x2'uff+ߟis=D|5*; @c8ڨ pC[6ur W:VlnY݅6MV!@ Ih1T%fö k(-\m*误f*Y2pRvӃDBZ1?[B,Eȶ( Jқh;O=O:5'fbBQV&*\bvcp {!HD!,"B +\L<ۂ:^`ɛ1"u@tSp5[Qu!VErv6XG~4lraXyS#d4m:N .S",_cOR);6xu&sQ5Ma]n:(S;{b.lnb=+O~ 3ʵ Ox*t-Ak[ղÉRGV5P(V&ܚ7gD*uh.$ЬNyj4 䞍Bv1c7|+>M^a8GAX5K:wMx#wwYe O4}Q`-RML\2(ܩL2i"iQ t{;͆p>%+.Q1 $&3ࠈ9]WT{W{JNnN)/_9),Y{wtb'0t$Iwț:Y:FF> ?)+Fhrgt:9W@hՕcut*Q/Tt08H^Wsl^ /K5y; _KaRigH /FDxd"_f~w,DZHeabHUCnx&.)0p1}նgM9]U<:<'i%ߎ1񂐍,vA]~X=gbVMcl}al|k1䵢Y vҚھ`JtGClȅOBthiιϼi?G U0r˿17]TF` yE)x,[M ߒ:=FlWDZf$ER7viqIn-{Iߘ%-R+F̪sC V#sAC16yPioul~r0BM3}Cf anPV %HJ⻮gV{M[4a?DIw(N P37Km)E~>s7!+!MF zXz%'_D>CڟNUE% Ce@mpݘAy50W3'oN9z 9|[Z=JȵR0|Ztˁ[Z,z*B=?!`KRl8L 7d7a/~(Glц 讃f_1^w`S"iqA#޿d̈́Cһ,=[یWbs,7U{r3a \K4qha[ݾ сϳ.%VrCnoFz>g k+%E;qq~jZzZyw-\okzkW@q-x'7k]<:j'oocsc=t0AzYSBWp7bkfT{;5S֌햞 *,F̑I)VJ4ɲ  (fC8@*^X[s[c)lpXO@z |qShe+)+<|%Kwd7 nK96P6>~ggc@gsQAbkh̘X'P54z_ $k3Z˷)x^AɐK pۢ@`i̵Pa\~\`w<+(yxnũߪ%ڲ~5X0?$GT ֪|% ֖Ќh½m Sl (ړlz~BB~dAnbx Hl!,z /#~68_"Lk"'V5p~e _b@EKPvju?!=ıvDED`{ Px`d%SVgN& Lb??=NI 8UbWB̎]iEAL_?-;ͰW~ϒ-RړE;YN:(s`'i.=d.fF2k:2zfLČz3 d@^ W+>C1ĈB8@t啸u{4G$8@| +9_ٓX /ױ{ּ[L.U}]ɮNȉl?p-.dLڕoU˙N T@p}|3?F xnyqIXۃJ$[[UMVT xlGk#WiU G ƴl\w ɾuC:IpfYjEMZ1Mvͱ >-uݸeVU* ak_bS(53`? \SIÑS,%C_T~HMF?8y*@c3Bӥg<[A݅=BdIU,; p8H(VqWxv !R_FqMƞ Ɂ١b5Rfć7m"CtX^Z~u6I;C(ܵ17^6U<@]^qe[Md6d~E'-vI6l_Vx+3md{z֯ܽMC6G!^آ}J15S&ݱQnҷoM^xnpl7g;AlČ2)9[Hgɹh> q KX 45~f2ddF<oߋXGvtZAeJ1Of~Xȁ⋸֔gаg1ƓC+Dl2:\Q1[^NhI8b4%{ DZRͫo%G_dѦ9& D#@&Vٹ0>z.d #ٸG,i|\Ѣ*.5Z B-Oߨ6^ üo7X2)Hm,Z&e*<ߗ7 o\R^q h^L%P A@?-BA*"YIy#%de4*[IVv^?5I*\AHOL %%  chv@VZt:naܬuYIQRx]r_uAx%/Zb\_[&h#?Ǔz _4-Yc$Q3թ#tQAOjqsx+:z,k n #ykFqFeTb `C؋쇋 T9y׋PE[`CD30W/|¤uZ7,ϭK\M(?NO3M =Mv$- OvY tp,\%G0 (u@g7'Ҏa$ "v6)tGLp؎`BC~ZhuRX,Nurۮ(xC[c0 ʦ+bE}H<;6N+9bdɍ?-YOn\"{%P11wLnfg3M*-붐O冂%֎زƀVNh|qȼhj_] iةC<%)M(QZU\1Fs>*keԥH7z\LpMB2wLsyx]9"̪:G(zbp9,'X?8|@YY@E>KB!_T6Fa5XPIT3-]Pe  EsI:I!j`W7%?Dgmft)_,%Maֈ{Ye[Op5Φhx0:Sdphi:W0o±o$2qA+|V\e`j<ǔ-߾6~d1|fdY ]4 lq/M-(K+*"|4vy⭞_S#}ɏ{\02 p#sAOd;&E hp/27lQ ɜsAEODFIDv(Yh p[r' 9l[~yA1 MId"e]olHkzwDVc6k2~0f" 9Ⱦ;o@|06fW"^R19O/1b##a#%dq 8nJFaaλLvNI8U~΅+Nf9DN ֓vyZ5,rG@f%Z +,f(Ws78pܓ󭟙t}UV{7z pX5qBnը |*O ?̞'ω$cs)$jy\;QnYc8xq3K;hB.=U* !3tuQT@euc-ƉG"0ߴ`~k{1$ j`[Elddhþ -1bMW҃>ìOR2DGڃ4K/ozPэ`M~DydX(rIPc;xkyٶݿA= !zZ)V]EOc$GN6el/- y:s!a|[|w/h}";\'YΒr*y1U2q_7i,CƀoTG0!Lɘg7JhuaQ BT8^|Q6qK 6%%*$wWJOVuP5'n UnGBTLg?-0Z_{X3bs^T+RQ" DXrF+ m5B: (Zs|LõǴe ECD#;d+ufN'F%ȄpzL, Gr':G~2@?8iF? +5}ld;"#)A-?>0(^ -KJJ _ݯ}֋ {ܟ=@K<;^L=Z~.m^O@:/.{;z:x9D"h/9k,æē*lmt&Y3 %x9 $0EV@x-hu[7[s&Ub)e/pUY}zbdRrzNixjR2"[O&|ܨيD:RVWZY5杏w{-M9]`w.K&>Sǿ\#='W_;|vcb̴Ebi-f]/P#u{_uW0`z;N$z~kv|$!G!eys8-e~yMKYG% *rܻ]L-}$7Tu׷`4%p;*>ԷqōdO9/Շ_ԛ2RwuY[;Sو5ҟ|sN!@5$Cu z#D_\-dULkp흊qOp[$t; (?%)pD5;i!.Loœ$w}}F5)e$"*ɸ\&qCke]N>6^..gM香>!pX::wx9=e+gejߊͺ<^czLsnOfT Üo q ;ݮI-` όx N@zՆ^*AF 8̣y/ \sr3szb^OE /KʋRDX&okЦwT:}jqcޮp_xiYl -%.Y=f5ΑsD[fbFtsz<Z:qsC=j VBi)zMxճdwdP38`i6ގfl 3dY#(_K#J)J%w@J5M#lH|O_zzo dzbtC0r-zj;v^s(1:ZgÆ6Lh+u+r Ma=EO0" ozUS}D䣆w ؿWoae_FkΡοV9SjQάR.ǮD?0^MF~jg86ֶƦ4RO~h,eMJqy=6^wDK,t6 D7?LNp1 [C޺V'zJ9@Ff滎v(RҾ50h;ڲ 2f7d7=QWdH"KomF+F;UNγ8*]pk%oHM{[7b;;-t:!"P^Vu.$Zn.KEUMk6ϼA1 1 t?]:D- jB%]j<_1MRSDc*KsIGt|5Ϭdﭟ1()p,)/<7:G ج9T="@m@H~:D(ș>اEWlNZ7=9F˖J5y}h#eyJIX);;W}9E˘JNy/h2<6PVO.vT);eYrKCCOW7\9xgg\UE1B% /Y dʏ8j d\1 If\@R@|<t"ȓr`G6ͲYSq]ZR?/S:'>tذ}mup렺u ` '`Oy@L\}q@ 4'=B .LԬUYaҾ0!M0;BN;#Il:,~E-Ԭ!(.4=Ւ߂Yx V@]շ4O̗qlwyl8,4Xuh _!z+7D(LQ|N5 ĉMC7m,H(N>}`WTtwHq)[rϸEz g8Tx*j(Tk 9bЛn`dJuVzae-wII8M|YoOQͭݸfb(=A"s~xcLi ?EWRT:!ޣ[]meW b}a)ޤѻ6ZY.c-5\, O_Vx x'տϢ:=W0酨<||qj,irx+?"]`׉֑)Szj;|;8:DeZMWQ=?bEz3WfAxVtK22KOo]ϣ]EOH1I pz|(L,9 'yeh%x+KuhZ5rZzC!{>>rVHҚc2GǚR Z f˧N_~X*SLĽMjɞ?:Po^NSqfpc}}E8:}]or\P ?Ls  *3\jyrbWa_p垱Qʃ47 m,A#[RvLR8Fyt %Y"N1u'ҋ*])Eܫfj'-BeVZ.n(vGm"Rj"vvn̉GE'.ЅsÇECzSߐk %2MW.l +1DRy "׬[LXG~<8SF)DE?H1,t早"oM+4Ome%XcXI\o.rL&%D@;=b}Gey16ay| x4Xm !K? .NhNUk2BR}mq4*%4 i*t罚)X]ftK`Lh& \Rem$-?trurK>8|92`.3Dq~;r]NWMK@xrM}XQ{(<ݎa2U 4<45yDEӁI]YK4|A_/_ke! oę\.Lpt+a &r^Gs>d5e%.Uf֮iԴvMR靎Xp2ȓdjW0L= WOoҿ/PѬvrs!}bʺ_w5Dtn;uG׺A9ca qǁxG6IWav1#/[n~msNՐElyAV 4էTmh g9? h9ĻLpv~km6{%x))㎉w61(cP{V_[g0@_r%st;4L!Q|K}B)SzRׅ$ImԀBmQ%92S~'5$ON& /ӣ `wJ4ƻtě"j,ӬVhU/Y M< QG)Ōщ'6Dt>*П:K;XKwcd"U!(ᦺ )VcSCRWv/T=-Z$Ve V~]ߢFHv9ebpF2ܟsWԛ'vJҁs 1%%nkHs5r8Q,hX> uxHt "ХlY+ >gW+`o@5F,^ˬ0 n"lYHf"㱉kIrNJi@cP3-`zzVgf:#CJ;4şp6V [maYŽ7>>g؊^+f6 8r@ (LﴝrʽlU#Pc4mXW _ҕwTD$8tTSu\ ~nh*&$хؽb@u}\*iU߫zfdhU5Nې[qxP?k碏Q P?%>ެ"PP1 C( )fKtU圌}Ӡ2V^5.cAIrt\) zr.~rg\YWJHe.Oݗ = J>tJ`Ʈd`LJFWAEAh"I)e'.tA Yy4s *8sۅwmOkl򁋸~TDH8oUnl([P]E̚'3 lkwj&+dMUHW;YrW'LWS,Sĉ)o *?Ht_AHҾI~.dk2IdwV4R IEԱ$! (b6Ѿҝe>~JE.n\ڥ_8L#Krorv֬Nrˆ^&:qAc޿Yv꒒8tVh>F _'3B; {,&kj#gwSDKi(BXs)6R W1+0p7XamnIZ^ J۫a'=9r&RQ|I x"0S>;%ze 򦍌gIH`H*d^zixr=B.JEɦ^O\æ5x a:n? SQEt*¸()3\#3Re3qB =)ة%/kk7+*?\y2- z}͵KKYfxbddT9I./gX#;Bf}E^;auxu$ oόJ#frt?6{Go6RrУȴ6Xk0U!AjboN*zEpZkW- ?yX.b~D_xegsFeKTKo" Ájc T:gyxMoh9VnX XƐ;rάD}sx=ǿw_~-^~Z2hNo@*zZSUPF4xdž5: <{>N\ %Przcz?p[=@7#hVo$[H~ +:4kvL)tѶKa3},,^D%?1l$g`rg X(됁'fK.~TucZ֥͚_;SryL{+`I$ǿ /~!FRU0 zw1ar vrs ~6b2m(G}6` l"0AS:ی~({e!|aF6aH/YУ#WH+ȻV #bңb8ы"%UڷbmM޳oG|]x VKJk/.7؊f -&1A!:1$BƉXȴK O K44yW ,:½0ŗwOT0*Б$ HB@RU%> PF,o pi(H2S[l'+/ [O+8VjkF9rY-2[+66*~m$_oz;j_ Q~Y,Kj&~v+o;oX$NDxoZ{2IOPyԮOe)a9 3/[ܟ!&"aYjRi+l iUE\O>zy/V_i8@^1f+nk- g͖y:nxx݋*LJF"#ۦU'Z;K,5q?)kQ ԒQ4`rWi.sMvڜL'ZI&!0as {u&Fܑ<\y @̚WNDcY`jƖU)~eVi|{u( TvdY[YT-GvGnKLRTv_pͰө(NSy0DNm~ȄD"` }Ora1`{>}LaCyZTr54y~+ch(eq(2$VVJ\1 ng,sפ6HڕԊD^# fv;RE 2pFaPǜvPk]C $.}leTkի-d*dgDi[f f79ԇB*EѦ˴[կYvq" Oay加; O ^.?;1BsNЯX~DWuG{Y*|}eşˌj\p+HUۘ-ڞ/Z*5M hSj)}@bRx8iuCOq1%ކSnE6|Fc4=/̒m >`[µ\nW\,aJ [.+kBlPiff"[suaٿwUFe5 £pۧzaD-݈3kGptDPeG;IQlGn _'M*;.}(B;t@cFEeaÜf3dA dg" n(<>dvfg+[jg^%dgz{cd-S=]ю8Ec̙,x`)u\Q[GtݒbFzսrh{>N|i{? t_w@IΧH@Iس!fuէgM; }@wI5)  ;觮~F]-"=4t6kQ{{lPhu?yíD 'Hd3"6B:_M/*CttoɗQ˷Hbd.uNw؇m lCl1ݼ%l9;)Wۦrn d)6N{Piw߮o*(a 5+^5?2HGC֊NHX7`yI S$yzi+F)6=/< Kf1t*(FO}UW܁hSD&WhV2ry{‚F CI=vPV YNS{A 唋j5Y1H*4\9R@ϩ>ִ).'!>6C[d܂ϙɫZ%o1{ \!>0I{ֲ?G{sȡjZqݵW9̬UxsPGKO|],f.%@i%u^fر.({ӃDNv=h]>|.9Y{HsxsՁRpu#'ߏv SS\oΞ% |ܽfNk֨hLH}8Bf _Lv "CZKJcZsWlXbY|6gV#kni,tnhH%Y,g쓞=ޞFtBö!~J(e{h2wEk[T1to+v *4^Bşz[ڸ1D9DCHL9mKCc٤jMsw&FTٞĊ{VjMN, k:얱Ox?4&px\UqD붱bڣ́oU I >ZU}9͋Dt $57ԁK  ˠۧ&ʲ9ȷ]6`l%qNZNT:ycM,s$l"WhՉ5M3*rgLs#O!輥 @"#rN ܱw̠9=DF`Ċc~Y2r8%?̰o$I.Sb{\!̑o&q Dg=u"9lN\"ڳغF9$6JΦtVAE,_<󎸙 c}qM>װ DZDg#`j/߬ᄘ 61x޺_[n&Q8$!m%պz"p3%;Y+S/ ^KH Kn)|9p<ʋp" o"OgsL\!k|G.ڥVzf [V(](+0%T][ŌCY*t$2\„mAB_(beG(&MZ*n^Jdw(6qҢqkk Yi g1Ju|Cj< *Zg|/ֈQ¥M4 (ɮ:J !"JbJ]* M 3O \~Y NsfE跼f9y)$]4:ͦx1m ET4 O1}69)KpY=o|s|2sIQ/<",X1KljtuW@5Dn@sOg3vY1]~0 gW#XU<*G, 2T e*jRB2w.Yܤ %a 0p&aI)FػAPwV?#DoL m\@JbE%HCK[wdٟ Ů n][P1,)1Bwi3[^i~Wz4B5-NnTWoYfrWH璸!Wy2VsL˒Ҡ,oߠ79IdV1MQ"if= Bjqy$٪`ˬbXNRp %jjOGMչ.̓a~2K#..$wҮE/=uOSݏ Q Q5h1> wgʱ64 ⠚ OLu$ΆěgyOkaBh$OyHcڧyEqƞGo#lqBC"T1kfx}"/CY3}] wJPSg6JLQhCjVNCbKEN'Qi?ʆH(+~YC`k+W/nuMkJu|ge$35%j/]G^"?FDT!|N8%YE cV$5QKSjWqL >$[^b~Oekfwr2 oYlj9ʢpDo9t{+JPJ _Q/Zÿ w6 pz/%钍t߶Aw}F`r*BBe2SYw n˨C %gNQ!!]QՕiMVC&.nnPRemDQo%B#h4Vq <2'ǽ& BF#t&'a; چ4_kzjkgp?ϊIx?GzO+[(UB@lj~g.xKcXOw$<<˃>\>.EemI+вpƪ\Sk$UG\YdOY5)re- []6􂙢^gloE+w_L1*x莛i:y]y?(tSXԽ7QՑ|1F@i'J#OrJ;c)52n,:&|>75٫xm+)1?d@ "-6u;ݻ{Ijj)M?0lQ'-Z:qq&Ÿs[”62p ʩi6<0fbBG2b < \@[H\Q%l_FCƖɋ~[ߵ"/iqL]L8k;3fR>O_WY rtwiӪ#h>ʧgVgG.}@"{IΘ9/![KxlƤ'101]3Cg-kJ p,K3d u5R{*DB_"NeW?Ê脒\:f8r"trtlOU 1 WE\9D5@s'B61(+VаJqLĬBlȸ#P8ACw4L̰e4ߧT'n8n]LzTH&{QAaDy5If;BzǎH^&@KAZQI[WVq?i~魋;8>фoЏV%|Ku0R% gD̙OŏX]/,` ~Z۹6&{"XQWADγ~5Ǖdt5;[1 IF/r^a-]2K&!gH C,hXɵ8Ԝ>X gr;Mb DP δ|5B 1)F? ,T=+z65׋@EDwFm~7fgH$rjxsVT7ăRU}nƍe^Hs{栙5Y݊eHs"lWc"LS;MOxm JE`lquZiݿ+h3vͥ`^yW2c7W ^i + !G7d#(ѮW9Vv ޞM89W% V9.G_ʣ_y%6~o?~ zh^VZyߨ#3I⚜ZJ lL2U'yq, ђ{Qr5f ?YB]})]ivfwGAԊezZuJ|PKv.:1t70cҀs#Ghe8>hD\v(}CߧD>Po\2]fa' ˳)~_^ "Ĵ,ir' \Fw(;̸cߵ8sXCzN|nDd SJEq`y71לuka{pHMst|=~0A`x Қ,eN o-eΪᙰRd8  `cVu;?\1J{6?}+fWHN`J#p!t?0(p7p)dC)8}y~*pKsEGp;1""}J2D@c Dɜ*bn46Ѽ}K޺|ffZ:X*HIr%ggfdן[}}KHEȷ r1%wg ɹd1n 06\f>epS()slHF3mudF`*H:vZ*8bIrds r^Xm-*'6A`Y/\6&HvQ2h($'WKԞۄ쿸XVy;f=zԾu7Vf9A8YKX5?VۥiEҦ;7g<4 Rj0xuw 0*!ge:lKkZtEk9'iiULfW4  q*E˸)u8р:D7ikv > 9eVѓ0˥!7~M( sz}R"Rtϑ= (ʲC;PzCS K^2ЂIW5mg']Q]=rLEÉշJmKPZ]&yK'{ēbIZ0o,C-̗3ĺ2->&QONSc,}}#ZYt*>ޛ,NHNo'ԫDFj hVJZïi.;JTDӿ mJ`dVa2?c.@LYq<{,o]Ȇ ">{O2PJrN7.Z5Ǐxp]9,c{xXԯ'ظL7ٳt87iq k_5*9D!] 9偵{pyP(EXWQ ^Ђؼ-IImoz}cէ=-q)+6_Q 3n3U*ZqD .3ӆ+rhQ4Z^ XgXQLJ^Z JcNho&fρ9lh(e\o鋡{JN|:SK Xo)S(!}vLj4HP$JnC[kۖASmPtrr5>wm[hZ lo p"0ďbl?G92(3'LZI~G T6CXZHt=AX="4dVzYDټy q򻚲(IQCRYU-ǩ*7x+ >!_fP>x@)4 'ܿ$N V;+Y !mc^7WV_~)vd[™L Qx++fCϼUYaU nǫVѱNY^gDCv*z”p+,wԶol,Qa;19$v*|JN{F'aDb^ w}70.)o+Ɉ6ey"V#И.Vho|id5Wۿ\LcHݺttDe} τ /4<"G?8DR_% m>nCo-Z+Ro!yLA;_!)qXdf3^&b~{#v.vYln+B\jaÚЈƗmЮm׽]Q慚d7~#q]UbĀԼֶORqt{'1%=sK#@Px {i,lكCX0b];c4!Q'>1s0Dֻ 6 Q5IU`POcClҫٿBygS|w>| 2F]]u3kVysn 6v@$"8BTRG9A lSt!1Yc/ϖȪ ٜrcF(m4@NGuNm0GO)aA+]mYփ|)R$&fP>^RFĹd)v6A0H#l_5|HPa B̸dj Q/A4RxH̸ܸS~=kjB@ z`=X ͘ J(N(YN/}JHTGa 4 kw.f?0`}W2ʀrHӍhC\'Wm0fdGi8!d%S3KNEuO "@μh0Q9=RSϖv#+>%~\rlC _u1rmorwS4<j|ZDz(IJDF ،_*S5QT,W-?BG_#ۍD8q§8_PV/H$CBF9+Q!8'X6Tr߸#8tXQ .<0`ؑ xS!՝/IiebOk݂T%&>SGQjT@U ^y?Ә?z)&5cӹJqkؗrOGe{jOw!*|FWkG1 b`ZܟLhŝvyΧM줋i߂}U5ž xt8+ =Jti6hImXs(#F謕jѮ]i⛌̀{_L0S~ܳ-6*Tmn^&ռB3L]3vBςtbh瘸tY@4`Z QCL3rĂ>~QY@ot kϭ GvztA\ْ78ob%!4 jC{h8e=H$ℋ !nN#a0[,*ks61 r8|hw-%c.-pK֯*D(`t%`uwJ ,t˯}" r c8ކuEw;0g(* <֩ ̤V߅b3-v?\WeSKUW?0u0KhP9O1S2q @4fPzt8!ߊuJ5FT/ڀgk@-d+>QΎ^M O-08Ãr٦DUZչG&!dTR߱ZrOak :DƩɯfRe1dߠ7Cy_{3.uj\9\c5R@s7l^[9֦[ٻ"w?:]W3́WRKwtQGU>WoL ^\lWwf(/(<өڼAG>3:*!$T kqx*9V=||Ԯ،|}^ȍ_MjtX%Icݶ0=C?.e}:A\ ~I5TTߵzEx=+.N}ûmc|fOPx\eV=]&"(4UN6-$&VP fnwf'{;zi^Ilyo] ɰ"@ېPC0D["Z%K`?g. #J:Fj˟g'Q*1RyuzJk"HO6{0]|EGvȒW]fA@oaD*;(-Q{t 9n%'NcS+NT99_7aHƝ^4-/ |REhj Tf1ԤrxT1omal)lC`7! oe~`y܉_##yR/DtH{--}_4x+2w '?a8 2Kj>S`~.%l6b1$\L!K IMgQ„ _V ] Wu¡@xZǀa4 fG+:b)aIqV5]xqJإ!0?s[Ghu/~tQu!sƽݠX(~]'#s'V ]Ѥ`.e'K]YP޼ `ӵlK#L%.[[i>ۨN}ՙ -7*'SAZ^ImAWnB|n+ ů\,0T6y Te6ԙ+·3.nyUQep0=ąBq&O렌)NXVtA$R7z|t3V@K\4G@U(4o~W ̑hU:WQXbM ϳdB7YQq=碬?~~If',7$XSZURGbR?qf=7of2P$hmj9xhZ=A>4"BiŁ>8D 5v|k _}d}KoT CqD2"lՍ'4<^ $ wwH|vt-2Wb+4HPM$ɓqb~a8*|D=XxxqTqnB݅ѦFla3+/,5/ DyhnZ"F˛灭tJW|0>  (mnQuIڌUBOoL Sy'3OЮA qASȘ/JlbQr!O?W79aⶱM5vՖ]P1qE$8R8/K_HE_4ߞntphK<'u%BE{Q߾1T8!z+eO!"'g)o(,Wu_H(l7<ip褛c_^ec/:=b\(f7c ۆ?rhaKy:Oq5QgIS|==IE!DXAbVcD7Vq(xWȺKY\t @?@H[A(Vފٔ%gJ>8 SLͽ7#S axb(5Jf. hou6ǭj< #T˄G*I{e8Z?t"t6r6x2DӘ'(z.WAJNܦ& |.`qS-=]E5ǥ*FJ$P~h嗢(3$zvO<n7>!n8b ˼Kmu@IgORSzIaFϞ@N2VvFq=Mcvn7PAzEUm'Tr]Bu0:k9/Ch>[•Rb,A~(l-BY&Y,Ij(Qȁ$I, x QYs4=ZlCgf7Ώg`_fȻƿqASxI$ `:ou ro<,_UEI`$ lنh54k"hf#yrCĐM? 3E,  ܭ3m5$d/ejTgg=C֢^у'63 zs_P7@U$ 9-'ǒ;~b6Ml7?-fE(V&,yTT;[dROrPjR]V8챼? 5[|Ff, &lͽ)tI1 qG!z)_ +i1!|M :b\m@>X6\`ҫk4ɓd"1:kVd gZ CBgzBdq CɾN+!GG٠;ǐoE-ը~)gM Bt+eE߅܄%ӏS{!H~'o}e@b8w61QMT uK; 7A~a)=ΐ4c›AStLC,mṪb ;}n;)7pq8]`[z (mOܶINnt%%D!7UeeF5|V.\ꊦc(; }Pp֓l5y"@ J 7AdHVHmx=#ZX0鱳_qq@1a]Iu#ojY.LlO3;Cn0=*M9d|*8قz||a&@W0z<`Q%21]Nbx /Y_=k߫Eڍ>B73-Z Bc8 ˶ v$!OJ;0\ǃgBͭ w7-pIN@"RN:[:u,"ʤN [5)4xZ ~87)jh,>lrU̶WmџwHY)|57!S͉%CmW3zqX';3!:! eo j WsPBu9.U\r3 yJ խAMdE _&I  B,-1_.ZZ1Bk̖I+{S)QZpR>`OpU  OҊP&S)R3jZk*6hfbdj8x/sT8XJz%t5 ^:>+1Wu.[6펤)|Y;DԨcJo=Gް$9fMxrjagHk1@w.Rk N--.p-޸Q1>wVZp=e8!gD!7TͧSSyD]o6%z*dezw@۹pci,47-|k:JEL3|J%hLY l!RvXc;}RW09z=w!H-B/i!2q&p3J!Gq\LTZ z9/H;|YU7,3* Α, m 3;Q?sUP S77:;Q.e-|L_{$iI%C2hspXF i;S,Xp*B D_ޠk|\64*S7*\8A @kbP:x5^a $mDkh 0VgSBmeW39x'm`#~%/mI)r%kmJm*&YEOw-S&)c7;QP奔,p+Z[9;GUTQݾxJsp\hw×z`P_7a~j!H7^0f,'`V9Wa . An$H&'E̒+l*;HJ'DV]u|BuVm,bPy#Ϲ]- jff4QZJ0r8"EDj-Sh3!Jo\.iJqlR(^bOKur bg!Ӧ\_2ֹ@+'AWE#$d\3ExD;ƹ~jp&;&%26ηrt4'epK"Z)cM*\Lm譍`RgIL[ | +1T[M D4F, W.f}Z?6T{,/ pWq|; dĚXMkmmt-:uK"ưҭwU`'#? SCQ#r_1WIԣf 4Bl.M{V譭=2ha$[ ľ 3Bʭ$AHe3=|u%oN2VN_SG14:ﯕD+!@vpXB^HVAWB8jbu+E kڄz2u@z|7l*i?~,-ÎV˷o贘|~ز(o-"O/?FҜVL|6ORwmGKFo~1 i0 F6RǙ9Mmͥ؃3f,/oT}R(B4qi+G8I]˺7=N"LiٻZqv 9)q͘cMD"Ur!1JOo[hGιp0Cþ*ΉlkM dzXS\'U82sZö{#OB+?^M׿ .9 lLmb孄ar}0Дw'M{R`nn.[c8|ƋnN}O:N 'l bz1WVmVȸyM42)ɈK eW'q6eYÁءFΗtF\&DCC4ۡ1E1 BEVtsk#vV%omGtKTuWҸ[W]DP ŕG] 814#COeڤ)2Ul*\dתum_QҜXqQ$tk=TR[?P)si索tyI$FŹyH3誤,'qM#Xu&Yg0׿LÉ\?gVrD\օђnf5r!ppil#6)qG9OLd JzY5u,GVp7z$Kk,w&i}z͉-N=g7lKIw G@sg<şa7۟]k2ECzMNLXPs/JdAk%L8v|{0Z?B'͔jde#];D$67(jF0iv`r`,o<&P8]8v\t_~[EmVtG&]Ȗ+/* QʎyCVqP-u,8"ZFjIeGA$2PhkbڻNJʵ彪">Yby\G'^ PO,i`%#"?_ K;ej~d$FS~Ϯq{*(h1EajK`?$T- dΣMy1Hi 9/EyOjIC˴[0NuZ^r^>\g38K!P Z"\F&t.)J@8/ k{[ns9Ike'3FnÔ}\O?V|O|haBៀpX'Ts~<>t=d \ٺ%a򁷗Ch+VD g=@o=Bw7 |̰mZS`.gת @2\|ɶLZ\F9pѺvʦeRL/oŷusbA7)~h7Ymxk]O zE-J/Z쉮A;l-Lw@`*\1WEA0ی6DbÎ82`ٗe/xޙ Q?{n04.oC j%P9g^USl <Sb`e1cdu7X=Ј Ky꠫Uh9-ܒNEZW)GDA[1ym,N"(*VE}ܴ3++Vj:ӹ$sZ2LQVXԯ#Y4cVoݣdyNCh3cnU4;rh8#*WRhv votBCO Y{].-Vqҵ=2G@t>r$z7fIfqIF=>lIv\A/zh:q|M#q}{E閯FўD@*xc 3GCUwuܝfKͽc?EӏUپbR_ l٥)4c+NgԓJz Ukf K1( _ ]Bxx{V-@4HH]bIg+MA6 T :;yDee)F]!#?ū|Tmfs^rDu$pQ |<"ʞq][&!/փ>yI|+A$3hmSc0 [#,xYu#;Kf-5*PA7! [wRE[aTAN_gjPc(܉ )í7&;hE~%@eCqxK:S8ѕ^<̭>|XFB\]vxfTODrM,0⌧;;;Uv09HzxN1;V' c;e`ڶ}ctDI2{VN^`3ſ6{ A'q| ߶^k_z(/\[nRbSLq2AGȼ&ghqh "rEq}i7aLŽoѧӄvӹ C^yr,N_FOg7^Val #+|\s6T/0˽ߩ+1THVr_jFS%Y,o)iL^';ЭnMc+ 2ly+N~_FEj~W*;)ieh'oۂ ]O369A图־Yc:8wGq^_"]d`v˿A6Wm|URSխ\h \J- J dvj~i[;K }5tgT f_;[#IZ\ / OL)6p%F-Q+7pP}нEBl&1l-P@~L ʚ3K"ܫnu4^i1:nFAp;5$i`UVr!Ju/)0sTHf](wo%.%Piv@W)dx%p-{H*=Uw ۥ,_6Y~PT=aqGW"@@ ̬֗/ yL /N뜯Y='"/qKEґ˚U~ԓH9m0_ZdwՆ4u!="CЀcw1xqiL +9Ԝ-q vRqFQ;/c*-BXXLO"C^S H<0l# g=Ĝl:jaBͨ*2d[PՎh=(qч׫8$b*| H.*:KSW SS$If>ʁK,C݂˒<[L E-oT G)< M  -S2۝ $4[U 3:r?-Y%&L>޻b]a  ?zhk02"20XT1PE/8S窈j<&l(y hL2[u䐝barJ,PyfuKS$1!ܩԺٮȠ [e2!a?r>QKӪ e,ބ9]YewP#"6~?é.J#w:CMҷX/vhrh{rf}kU<3ƪk0=]OrlaSvHFabwj,٧ $t p xco8N`p⥻T4:-#VU47b$>]u \uF$ OH O9z"KBr7Wp>ƧJ>A(0d:=3%zW+9Mq[^V]g^tl;YD9 Bsvu#eW 7[ &&Cff,'bnZ!ThsiJ<#IbqR]^NƶUj۲sM|ӟQlda/Ք k@u6< yV.ʠ?as\:d>+S%y0̮n?J \߭J%A߫?gSGahF=OeÜԼ6|8gl_;fBxc$mJ80a'z*\n nEN!ĜMMmѡjζlʘЄYJR>HeLc SY@|d q{ `dȗ.ҜӝG=tYԧm4&xyhjg\|u!<~ߏFj/vG us%^o\XeЛ>%1WAKE331Vph~XAbٖ[P>b, )mDcD-WH-irNM$ׯdHtj!o,]'G+4wJv.U7>~)\̻(Y=Af$Sܿ[M`[!T-iݶ.;qYQ4HMM)INKB(1 cp7j,m -p-xX)_b A+TG#R郇 1#`g0iŶI|kAG*0s>%xQת5Nxle 3c?Xޗ#YmBߔvx`o}Ugp; 0h@2˦!cO${w^k?~J|;ϫaXy1+ Q]h.LӎtOaV6bdV,Aˎ7rrL( rEy/(1}hUdF摱өK ξLU W1j)}}Ȥ;Hb^-796:)oR0by9(H<3 +TъR5k2O[sdHa;nbGOgl|A$$:\+WHnU<k{QbhKS-v(嗺?2 `{}BF`os;Ǽ:@P Es@# r˫SH"OodRE#(E+R4 JlS~v3A 5]!(ȫ3HOK;SEclKv0#n 3v^|/X6EwNӎOkJ<SSAPH9|9;0)V>>£7]p'k`#Mnbe"콒dzxBsqTUXm(nEGʂF8{;gK-W-ҕfse^9_wKdZX^]hkY`)x @uh}.ОkW4}9$I}U RF)lG*t81;ӖM$gĜ+#[9ԀR@R Wϙ]bX,`ν1j#(/3(H#چE)Hxҕ8-r!@-)U#&-=/SvxYYp$E40-keYR|:u;B?c4aS/3 RudȲ!tnS0ͦyz{-Bou14o2DZ,<9VsbQJ:UH ZA)mPoC 0 (.s8LlFGA1.h6v&?B[L:VPP:^rlҐW7h ֜ {ʌQj.LOk7_^"ji:QoHj W1UC8Y9 []C(?\iv#ءi;У  (F/0{6$7?O.>ۛ`=Aa7? s7f 4mJ18J=jwQ.M䚗ISw,%  {}L4j6@u?,2y9 6*%UNА8B#!Er(MCQilXĴ/y1 YWC*OW62t92؜H47(A{TSb:MeIEi36gz<{lG '/QD˸2~p,&?QS@*X"ښRl~%(`3Arō+4/m~g(U_H@N ´˸|Cv,3dJYs7X~m~<0"*n4(2@zQK%f ɛ(6[,CX mZp rq |lMz(O))@J@B VuJ;(;`L"BZԎxXqn {Z7)ᶱgYF0ҕ#2E#H䢁xSReD+ Jc@bmp*KH(bt]tJB*pDe ] {^Bmb {_?Kn"Y] ~,E ogS)b[91[UC<5: g^Mubɤy.`["\n"5S'o8Jù( MOq:ː8M 5&Rݥ7,`K'b~HO%K/R1ٌZ/茪{: a4f싒g8AȘ۬yG=n#X&lv֐Q*QaV)d'3v@SO0plY7t٘JڳSpeo8]ӿo|'i:"0{-!˜A_0w-8`QcN&gx83ƾ>cJAml Й'-#EuyR%5[iN~ $އ`tVU f[!nb>>I_Սj}䤐\DX&r^`$OV̮e&:'HJEWԥfL CCͣ"ݎm26U۲a_~ف0Vo5.o .LfLMaɮ;DOxdv!3?G4IeEDhVvD:\ył>yL? Jx$\To>';qv 08f>T~ӧ~eK"O;n $ݲgK9ҦOKw#h rq,4cpuh.ƅ~&_C W_iqZb 4c+M~!ѿ x_%W72SLHY?m2Q-ͪi 0uBOxC("n5+Hc ;+O[ဤsw0^gJ){P˂!~( a4đ<)*f k8u@h7>U]I}4>0Uӽ1C(+/.W]&X#G-58${lo|i'85R^Tbq%m@鞹旻25zSєL"sG|"ZNx.=<1ͯ 5uU=K|zA`}rGUAi5fMqr{e>L\7yͶyU"8 ,blfRK$$iM.XC!!msG}c让 w.wUmVcm姑{ʈFDWgڞlmQ%>p 9`DP(2(h΀}ϐĿp+l@X7\gY%a5Auxu*k;Rǣ6=BՄ9WT=XFw*D_Mjc3x{ʍ%Xk;{eޛ e~l̒Kt krl\w|[P˔ Y(`Pǃx#NF[ *Ր=YF2c0@EqwT?wfK`'3U94KXwNױ+dK /@c:']GVϹqH'=Bj?K&)0-ݶE4-ƛHOw.w]d to*0ʻ#>KT#37 8T/S*QC~gݙ!υp& <;$=6/{HsUplk#"7gZtmC;R>&;z'Oti;ȕglY2Z1yNǣ'@ j=cTxoǖz$Yz6۾⁩'[ ༟oC?PujUAAf̭h'TVFBxi΄2V$Dyi44.i' ѽj-:vX#ܯ"e(ʺmpǮ^`EU"pC0U9Ye']D2^stv |rAh􋲇Ruocڸ=~3=d#3.4}ռo?m#oJQ87mwf&3-7o{]3X_fNI^T0ciYT/RbN&oHd5μs&HlO|൞kRTDƳnLS9{ĝO*l"ؾ/~{c&XIaȗ$Cݚ`ޮ22VCȐVjCjK1NO6Fc87d0/} z/Ǝ4<^؉`y$S8bj?6X˥N u5yYl$ g/ ډ;" Qe|cz{g"jdLz"`f]|d%$>Ei'HD,"{'bt%"7gn$L3@??)TJXԇ8 L9$%CC_M R.3g'y ٛ S+6&.Pȩ\ bgM柳!dcnOwg6y={j'~kcłTQ- }v2m¢iagM1.m.߭q%&jބ~Zx< h|r٥{M3M~b#$;{5[ʋl n_W,ӏ2Ot"/5)ѹ+Цd%^fa\s!nj5R$:_F=^Y"xB.Ou{r{M lLYf.{~v~3qOb+b6dCЂl!7Q?=r>4R'd  -@eO%⽉ԣ]v ,]u/E>jd/GfX=p"x45&$4G.m 両32Rh,qk6Dm OKiG]\';YZ%>dO;R \n-}P .MF>y7 'cW;C(v` /sq&U^^Ȣ9C!nJr(mrq?Gjfl'y'k=&;Q.FA/t_Y ~0>eqPEųD2mgR"b_F>bK߽lّ+_A{XG֝=Ti:/'X>k*؛Aw_W_(ϯ ŗZ!^ط\ShǞЄms@8wѦ=)*m#*]ET>2>lf۾oݷwV9nIᆅ`dX%C`Jw;xա0zۂ|W(i8R^7~Y3oM8jS7gu"ٸ!=Q.OMa!I7բ G|(=޻YWD)ͤ6Å{DS'%2N ي衜YԅAg_$dY$E΀r`r@#UK5S=$+[J=˱cC# "Ө'^Dq&2߀MGrgI)`%VDdF= 偐0cHYr-^ e*ܒ- r5k6m@;Lϋ068Zrqۮ0+8k;Yf2@wT[>컜T(IBSYB>O|5M$y|ǽUፖ e ISBDv>:%'B ׁވG:?aV+RڐU([v DIcu]ƞGK XfX')o4re+d'vY\է i@R)'·曩5EMyĺ5aA'Ϋ(ЭGNN%:\e t%^K&-DʮuVT(%R~14A{q}̤x?﫲?ЛW;͆aŘ ʃSEw&{9[f;0\n%ZabIY1f<_zp!GvꦭbzHȩ:KDLFgv]ȶKnE;S:D4\Kcco0@@G(eZ)]*aUPQȢ$Po+]pl|nz,'bQYY\C%[aܱkj[Ѯ?`pN*Z0Hcb;ͤī4J(u[Ln)8i(b!YqsnyĶ"-^e*X/$y ( o'ՔRh"혾hݵow29(P[} 2F ,(̗Wڹ𧩆= F1P̝ J7ZE+ UXas%W(YܶӺx\fLky|/D4 ~o>P60:*9PmLUq;(*P.y' }s8;rQ$MH+zp2Q xZ:\X]X9h%#|wjbIM5"l@ϐxPD CO]Y[ӛۼ$`6>vv-Z3I$F]kLC==am^RA;Ik4K ^{7ڹ+ YUx*y4c B|(v/4>%niCwW;`= #]!'#{bٛauxjevIסa0I$r`ΞCΥ7 i]_ y,T%kpzpםlQ?tvkaEho1ÒX+R?[iϊIH@Eͪi)y<7414D-@n$v2qmT[TNS!^퐋)A]*XSIIvUs^'N-ѤӻF3&jzq{$FJy^y O{Yk~{S쥸܋<-88UTx/[$%/Q{s g؛,IBalCw&`u<ȤQ"c(ȥToƁaNu{Bա@]mN ^;,Wʨb,A 4|!pfqa}g{HV j(/=z%41q1]G#z; Jx%۽8SX-ֆ7ުrngEDpU4r85LrWo̳*J8&,-L`m : dl<8^kh51PF~psvn* +d#Υ&=mJ Y {uZO}PzD\| 5D? {S"]R @NƸ#o/@/]!VqarMqtdt1i 4QdOt烖NɄ#d6c% =O$Ihd=.&vy֟ QrohM7"`LXSa[/5Cn*^q{g[klwslY¥BnK*~?|> "< w!^"tۑiS|G̲%)}+t\)ЩM'2qcyؖ kZ;οֲwVaa YK<eoܧic:G(0t*n=nԚK mB'8K؅ jQ30QVЙeD13`l/9\Ơ:KUi>0V'7U~Ү} q2{ï D_LqƃӸbG7Lqׯ#bXôZ<UqE!!O Z求o8JDF֎=FW/k#%qбh(> T]Gtr5J걵 cf5>j|Nu8\h=,+< &m;!C:%aVwv(MW bם#ez[ ǐO]E}eVߨe3_0JPjs:W@ o$@=mK$:/C T|PÅh<`f|* T%3x.t@ 14 Z396=iǵ(E*瞿G̴ &B? h#ەٮѶSY|mPb0ܣ ?+p-y᪫9Kwd/o}BI'[C6H^ HHֳd5P8rdނqܷT`FeIu$+*qۺ0ɅG56P)?]iP#vBnMʹrOzpt8L į iܩh?2{ve4|Kqu> JM%5k\I! Ȫ_H*3$ouW&pZ} ğ,_b0SG]Ug}Gt)1`\$SC1143"&lF-6 `/֠8Ȱܲ rpoZ%<=[`Q TgDk"ޭ]2qpx̻`G>-=*Uukk;2*h*(#sl $0?Lj# pwNjoa,z* nilLV״ WʸʿF(D>5g[ߗaZ}% ScyZ@ˎra92/vମĞSP%BnCv j=_A״GƓhs,d8ߓJ=V y/\k-[0߸!ʤNda 3=0_ͣa@OuűNɌiUOLl(pTCBe1}GLtr_-y7hlb3*y/Xٳn0|ԘQGWXS.:`P`2-ҨY'o\^{ƫ/`7aV\*L}<+^pȁ<2$N_g f3EȪM}叅3M AnyMJ8 o(NdʊHqցE!kebhYɎÛ?n{(/[LvArMt ֹ4L;qϹmUk<@\ 6DrB}[?42cCWF >-높ݿ.vR`qh ؝m;wǥ/VAWLgMq\vH9|WEr鱟 3nK͉Dӻn9_t Ukm#bW:J\6G"ƬEQ  ᣖ쨁5ZF&u$rq[+ૐD0X'Q+Ǯ _A(h}ωTAȰ<&~Hz-U%Vݷ~4t@P_kKi$M-,}]#C# Ntɋ'5'գ2$"qڠ|1 2l91⭊5by%,xgc~<Jܣ_LLN,a*U2@ew`_嗙2{H;tv9.a$Ca]Gi8X-QdFf.mjv6?^IBw ]qtҤkvR&)}~}Qsh 7@klli-|=AY>FbSϨKϐeki\ձ0||hJbXE"5Cc:3NAX`IWsѐW|]Qg `EZOrط4~BuDg:YOJNs3}aƻ"8)lVς&t9msy|w*Vo1ȿ 5n6E_;.FҜJO>Xaw)TPK3NJT^}ե"`o:pٲmH|/fPoqB\o`V>܀$Cu-jEn\8Wp_` !j'c~{Ec>b]覉a3&+L[f-p:bp,e%G<(#\ V-REZHiIc+/v2|],tM}虹 h,zQ#?4?@,p+c6a.H_D]!Ot #JhZHanL(u)"$α'ǚ13ofFoS}1:bǪ\FWUF4|NKH蟹VX7V,A0bQO CRNpöf7C| 4ƈI4J/*j+G[ ZE,C31w*W)|$Pޤp4{ΔS8IT O|f2ބ bzލxޞ/@ y\RINbT\-cT(v2Mɽ(IUfҊsa.zw6jA3nZaH9TIx?܀m%%mX1Q*zH])3kD5ȩDkR^6 o([P,6"8ܨ ٚ} 7"kc׬gƖ?WlUY-"2ybw{ SXΡkprP^^ax.s;:@ ;ZV`\bU`zJtšҒz3s4IiJ@RI)MEK>Wvs̩w$uQ 5 PhCTYl5ȩёd-wc!յm֑,*+0Y[J kȡEU'T vaݖp5*+WfGZ)#x_6iPާtcEx-mCJ>7hms)HJFy+*{K-Eɘ (-xG,K*^H l^,3F uH'>=m<W)PJ9Yp6f*r+w Vpʐ"4Nߟ" 3; cl_K4%yS?mw?n@M#թ=cd- z`RFXg?&bFtC?_T#3KO { x% /[ʦ^\#q](¾߼QCa6kMn\ղ;#k6\#Iz een%R* o<ٲ{I"@#٨A0׿Z &¶u\~~~[w W+Nzkeh`teOw\/'fҎ@ _MkPu3qF%5iH:%q(VoG ?Pg.y;#pҿԖwS_9D=DWV17I)!ߑ%9h'`E>ZG.S \eOU1ji7HWNːwVcA6MVpzūk$gG~2#D=z&dqJwoBוG"M@pS'wnP!e [q?@u[?W?.9Hj71I䩨%4k 9Xv:$l` a$Q:S>1TioQ;m.UcT09&CurQqYA9͖VpRbÓcwp֖|'GӑLc`Jy;q֩׊?> E:T׾G* tNDS*Q O -LE tuԹZtW]~Ξ$<ve;0?o(2/`#]bnlb,Lzm+[p>%(qRpi)I%xKP@͠EI2wTr =FBs`QD]}Ilc]PL.*M9jYOV,]eTd堏QrfW?(qY@o1yiUz]e6y {&$0㚤K}gi=h iBO; &YE&hRσ=NxC|K)3C4k@ RߕnrdJ캓!i߀QZERRj|KoH^xz. /%siihNzi& U|EtЦ%z)).WRˀ!L!4.UzE7ǫ R4 a5N[b’ګ D5 2٠hL 퀬1 Gg/! sg0Iנ`F-UKfv\Mrd8u{=5U@'y c+{0ZvA0珪SD<{=dt#<[:fW cĂ{\ww4'g1:2sT?Lߐ[2g"rC/_ʶ;duc=DZ֗ڱf y5ٕ;7Gekcx߆U1s ]T`61P@Y7@#َͰB;<׸z~pN<-yjfnoLȌ's#OwVb3kNU~$kgJ55,+jIopM ܋#9[o J^G|S Pp~.i=|#OڣV5 fEݷx+1 :SN!$dݔ)w_~,?K[-aBA ! 5L!у "/JKBw&/xӷU|PS9Nk/S/5a}^ܓ>ea]9 <NBDhm#I6M1zJ3A{Q7`=&3 #af WBJYү%J2ACuΆJ'br"Fv^n`$#^T[2exϰ>>]A$\|pM׽7@I/<.F=!-s)x w{߈H;"7jÝm!YXOhǰtv&DsJsJ\ܢ@U$1]ڜzs٨+bp~W뷔q ڂ(;!~QHun-$꼅!YfU]/w5(uNh`= m,nQ50 ՓbJJbآ[Ѧ ۂ~/eM 6;vG#`#\WvEbY7:;Ή">?U`e)fƺ)rc䫉xoš)[SX +~w^QQݱ /c+^|wecXЕ1;$мb$ƈ;ENVh 288d Yhק.Fފ.Vd0+j4Y+ MlqB˶䜮M!XՋB H)uA@h͹?|iQ(MDU%GX\[0Ӎq^{w9]||d݂d>Fk eEȪyZ؍z`Y!Ȯ3nO5,0c.a p __M88A/ͫ>*vN +-wazk[СCeTnz.TZבLVhR0R Ft8󠘥"6bF" ^$+ FBdZPr hU1UhV@EPlGZou3?cZw`ˠECk/Pvkl*fiقÐKnZ jF͎吆ios}z듎~ehUK`mt݅%@;17p hb3'j|ܽ-9QYm3ܟf] Al(b(vGk~S&^,#=H| {qF%۝zD?("Mce-lV}2H9+^ I)%Q[~7$^YwUjJ1)pi>Ư|ۢ0axzjF0gumNmbs6G-NJKyXXsG6}&`ƹF<8=#[b@O oRb?יV_$Hvҟg|hlEWaEU+7gǮڂl1 DH'bF R@?BL$nO;x?k=E9/\&^O ~D hw_ ^Gȑ [eKB`[1;72DUyy2Y&9ECvh֚Jlxg!wMR f2m(I[*gqf}iGWI tF#l\!mPR<]*eu(bc] )9bnsySx#iWwZ 8#H@ŎT~ if*~=|Krf2!jkSe6Coa C6vwe)yEYl1?"$V?I({2nMCY`r a`$J$0|QCm ʼnoȣ|ׇ}Ն.G? 6HW؎-`..TFݼhXI9kě*N iPhEb s]!fasVayV>\MV0FR[|lР0"Ss|A֎zdwi0_Yo9hU4ӺIɔ-p6еdjR&Y v}ӿq `MH~q*͏@ĝ+2A$1>џZx, €Y/ 3צ/Xif5ϰ߮kiy+a9{,_u_q/C|f$Ma_θu` ʅMa{Kũ]A٫VOQs35͔Mrc6Dqm_b|\KX=FqQ":g)m_$Hq@a'Z.mўv6n*BE:'_!\ .44dqvm+ʒN2FJ`?A-vҪnXq?=.?tk~J⸇i2n8g5^(JCl__O3ֆ˧R&7(Ók u$)_D!md. l+"QE"s)p֎4 qhNC7sñ|xxWc#W[ݧ7FP[A;ߺlF9&MkqO=~xw2?yT6X\f&,vyoPf |p}}_a (2lH& XL. y.94.*@xL /^NRZzkt[= ʖb;?WXiPMX !u0/]4x' IHz}2őb'ލ0fCg\>Blxdůu&>otJO=%pRs3?Ib7,Re7>aݶ.zzwN{/"Ǒ~RX:D n< f..+z9k5_<Ōk_ .%y;$x45() EPy)ַK#8_Q&ۏٛ5TɈ]޼k$ch`ꅺ־t59nS qqK2tX3X*:|4e{!?i39T]tFX&=7f66d,;[4aRx1ümCt>ov4y cBulk>*O`vW-a Rmo IWa9|ޢT p`O_س9lƂʹѱPӼHHa,M%cXqÔ`(e zJLM:ɇ/z. Z{ZC(fyA<*&ސk93a!"2u]Kεuj:AN /dW?FSP8zf֑H_U{/V`~8D_%NpWuMa_Qmv#j U<I+1یL$4OyB\l5*ϪMv綳fqINm E~/tgg#:v~B1IJOY 4Gkoi(SD1'Ɇ#GQ}.ҬԅtI;EK HC-%<[68d%Y^}fXB:Uq w=*= C=_fEhooV“O!u9l(%Z)Kf.>V` K#QޣB]kWт4B+:8Z-96)h역F7&t6_wp81ZY~EȒ)3EMw lb[V \s΀@\4pJV?Ql{rQR~ρ9kS)HUQ2;B, _Yǹ>M3f cw@(?G)g:?F]N74%EǚUvͰS-ox`Txhwcg[DvEIWYy `'aRH>zTEM`Ն820\BvS+k@M)R.}|[.k2!& ToP)1\ςNܐVt@2"XBҽZ7}]5q&KQME*CJ7\d,v*cT{6k^ϴlǂoN6QJR6&o W|*^h(~GnG&eGq-^Q~v:,-)`i m8T:3]A^z]_fIW^q=œ1$b*=ˈ`?)ל h#Qn9[vyQudJ/ 6ck0!sL..RH($(&Sh&b,OQX5)ȫC:c:v[@ Ul?2˾Gf[B8gCüĺl:iX*&,[WLk%̓7qfu壙9m_Esƪ{4hlފL ]0g8\>UgG*~?CĄ@K=Z  ǯBX^K2H5nQSElsH+4!XЌIW( tdIᴴRK\ɖmQm n\  HYZx0on ny~ ١a=[WTE'*atB$C)Ue 2:־LDPZX? GK nHmա~f_l!9aF4P64FNjD4Ues۠[޿.[[Q P$?"(ۻH=5yqAA ?x@"E݌1Oꨬn[>4" w 7n9 qazJ RYl? ø-Bh&,58 󵀰,[#j"s#ui{r8+'Y=~ yeˠ GA^ ſJS}XpnGSTN+`ml&˅ fs+n?>L3@U_- ;fݡՙ~9%B i` f"F:磾η@9;_lrh'OmT^Q_K`%2\3=}bƱ, &>Be ^ <+xS}(UJpikFGBu\ 4^w;=&sۅ[ϩ$ O.@TI4}&FES@0Fކk !>iȑh%eVn{ZrٜzI^a%i|p\09 DCS;Q{VfJt-V| ;G@!Rf ͷV[,P8yqU;HC̰,ġ=$&=kLc3DP!mzy:~$~>%6>A!Tmu [[;1¬)D9X!37UhajVߒ1 i>8Pq@l$k? |?I1^Z>YhK)'}(.'؁IJ i,X*W=27-%m,n8P>-ȡ$J>pLдi9`-5+&9}*2p"=ltk7_?:Pfi%K*GWhle˝u@Ƶ5Eis> Uq:=;xJVbG+A^Ǚ'- F&C6Ìl ߠo ' 0,AVk.M~[Xhù٘NcA'0*)5/HQm.(K"ȽҌJ7{b2Ya k;X4pܮB冃dKǹ$#T&Ә6%j:h.fKo\"XU'iCEe:0Vi7M3xӣщT:؂2r4x\ƬZ FI/ #udJܵa_g{ܽ/EMX!@2 .D9UHA%C z;9!UvxcJBxNff#h7ꌔhq%''D sŠ0ȝ@{SZ[|C .УE𺒩Vj}hi$˂tՔi sn\{8ީ0،=fxrqYf#h`.cޑj1BjkY=T霂H_rK>;Y$z.#|  g Y;T~y<~l4vuV2s[Z̉:>wҴkPh\Qm\hcJ? [g][7z ;L7~IbA)j ap"ϰ2`tMu q&`pUQJ@ IAnzGd~Ll3RrXpP఍FZv&$7P!TwpuDsރPx5JQ: "D֐~ P{:yf0k==)AvP^Uz~8;)̰k0ed$ :bWŴEwǢ.ZF:ob}ALX@L HKUיZS~{]Lٯٌy~#i4qA~u*嗻nEvee!ySqv<_t\ ɇ sQ^bxDN;-y| ApY/e퀇*1daUŎe' [=^X@ %9a?DX#̆`*akETӗt5&Zu0zh=33 3V7-6 h^`j"k 3U6N˽c"eQֆZE^7 9.b, 8lRYO#È-Pυ1M)_@>aNl>&mBv9>U4Vp{R\$-C C>O_|q][Ϲ91[ߜW>.|Jh"R V=ly!nK78pv߁_=v b:nTsL~Q!rJ#!(n7L KŪ\!}l_ו<(}s@uz(}ҁ|Ӣm_$f(\[(}49ͨ() `".51OaB>Ur-V +Z n9>3Bf*QE)yFG@ ќs%t↙dX2[sV\x#ӻS'+^_qx&)j|b3P.ÚbhۊacUٿ-7Qo̱ Sɷ+#_r+ULp 4 HM;%Z`-?a93Nd1.!r[ȿ͑Mp(+Gd-! °-vy +Lŗ{j:p+`J@'0(΅/)z%c9Ƨ'ȗm"S^w!!h̔Px t9v#f'Żd,aw#to c%2I,gU'p^x z#"(ڋ=gZ.r`ˮ6 h`5*\d`}\pP`%npv~P ;(Ft״1B akPΔ^*P^1%"yu wKcoSZXc% T+jH`oyyl+F=X %snl[N,%"foC^)> g*ihLcKfiw" N}92*i;'yCUMi>L8B(Oa k`CmF~2!ݭDHlC]^gJ.29EnT,谻!" {'Rg @pQ֢5vnSձh\^3Tu W°biZEY{߅=HI$2eH-bԄ2Zx?V/ИItZ:;^KOsS / /#B]yq`sJ]#(qxp [L G$d6]b}M*.)@ x>N]?z<wci$|~y>z xaJ|RiLS2s~ c\uOkD[ea x'qi<]]'!6\?P[NEj]p&1gc V/R&R,k^ߧ[!|8)j:Z&"\{`i3#u?2X{ ?LE*ũ:]Lg4 ޼!_u *prI5TfdTBj2'tRQWK$#jwiZES*Uiq4QҮOqIO )&a&іO&.;t t PF3 f>ƎUu믜еWHOP~|_Ea% fD=9g>:}YVe6IJ!$ހKko]nM$_|f1%% )"}W)4d81VB"C2EH!Cみ-]vz,JTw%@9q,xl/}wn~n% ja@$`ŽTDE}4^zZێcSwu.cܻ|8ٝ;uA֚04I^Vs:-HgM ^/P=S(ķar]^\`q>vwJo fC;Q-/f *4*1@5^`cLp|ضQqB #wj9ѽYyش5ӻg,< /'g#Qj|*s-^˫YYg˓9lWܣb0#.!~k&d: 1ny BsG '}e 1 v̟:&qs$F'/YOYE$g&^ dM}Q GYFVK!BL[e]oC{֚sQ[`ͣ%Q<7~|ϛ!c{f>s;n^4*q]$߳II[.'d9e/ъ([/I\d͵AA *W}/p4omvsB|hҥGgbQ8 Udr <`-WxR(9@QT'dsJ~!+c5)2M R&'/ߜzh?vo$9wz2٢ xPhbڗӱvEݑ~\m[zwmvazA䱲&*b P~&EHӣzp9XA $8W} TqcX%D$[l,J8wbbhJ1m nq¬/38`waWV@gￄը~Z3lB~N.>TF[V9'ԞQUY\#L[4a"))|L%JT7 2) 3邪Ӆކmt ~KdddEkW;@"WLH8OS.B()ԯRO"wѰԢ2q8yw-!;DV64%$TM{ۡZZL_kDQ8κL~ FFsEUxcAǥ@ÕC< PGBF)EubKc'#PsZJ+fc+(4)b)!K'!T!$S{#$,ytgn`SWsD<$T^sۥj,h{6f3ֻIsry\x2ef<9ݰ4_5?(VY kp%Xzp VI*aT^q l[)!W}#B&5EcTZ &2 hwd~hE@S𡿮i57Yjxn 9Y[_| hR  ijǝ4E@k!8"&z="O|A1C_k`N_6!pDW84&>[]Pi=WB W=)ŌcKolY]jET':͝m؍uZ.\˦ ߥ0ۤFȀICth\-iS3D &kxhJ[6Y3`ʴT6T%_'wx˽V-;lsahiE˺ƫ%s#3OɰHT ^"x&E_A`(U|;Hj3`BMI 2pIW@L$N-{^ԕ "KF{`ibֻҳ& hFcÆ%- 94y ѧ ijR 9 w5x ns(@;YH0z"]4RST.I%YDG5o M4YҚeifD#ͲPQY@MG/}:2W1yLiBiM<d^p$ 3hC[ݬ+zW#qMǕ;㣆 9^G"}_g?d ۡmǏoonˑ@:ԖKhWM_TAC+[?9lJ$>)G)W?;ċYo\djI2HPh*0p[{'x>#; ri$li?)RHi婽a]E|KEAiߪ#6BH6h.\OZ'!XG;mC*GL!Q} zb/M#>o{Nvc#x)C==X]+wJӦp;ЫG̏;cfcĿ;k'Eۖ6;" ~(Ɗ>g- D3B Pi,K^s`{ޅ#M w@! UuBȟD4a/$֞xDV_t)@6)Qͳ~ h[,5_s~m@s] v-6Y9h`9?N?'TmY(ӪajfZ{QɉŠJv~)EuݳDjNVM ~LtI3 !SQsMRa.hޛh}5܄zbdI:E|g䄌mb rM&&#AA{JWtL0d3*"i8ZNnh iF?,vO- ɢњN2m0q=wI&E2oɈ<cL FGq  NɼwJܧrBaZ9g!=4>_ąV:M>EQ)]ePÉf Rx'x2l)64y?)O{QzO "mi2 n|9 2Y\EwWw<nKxpu SKځFJawW!]V+O)49aT_i/FoVK5.T3M?Fv4P1`-f75_Hڏ= Kʱ=9P9V1(9q凘LB w~|U8qly DEl_{.CKDe<:-)/:`6Mf2NR*7Iz ܅7B`h'wCz )WoM3{E'5q ZuH jt~ՆjE\y!vH93;;~h/_Ί;'*YPt$d[ VH릈Jkɤ(Aes}CVR@/PCߺ8MlmK2'xAB##~KAzg'=$ݢQc*q&?rYEsO4l걃wPXSR+:=W(XvY)/T$>焩mV3 f~ړ1:u۶hTv?L.*tHv;q {j+7*Ϟ,ADq @bc瞎)I:Wd =Q@O"kLͼˡS%X!yu$4;HOvOW)nQ Y)ǔ6q}jJOԠ9MGyQ\V3_66Ph(to-F&(zm9RUdYA 5/<0cnD3Q3埍q4%j|6ocq̈xv[чJٗS3mn~|2R#(;! 7 &auN[M,D9<ޤ 2qY~P ?"aPƎ@3U,h1Gl8&Ў?MTαRIKD!-7[ΔػÐGcLj{}ܸ!5 Gx\ˮ`NφIu, D*O'zT\kEbH˻)Aݫ zC*bP'U9:X ֞/kߤep~@V" $x+Ly椎26]%dߺ&q"z6ִV3؊[cx@KiKo,Ww|wxf6`#/:f-}-@O̺۪^b\- +Ag䨓z=c nGL9 :k8.j!Lp;bgCi˟T9_cǭNN+߼(1.mx3\-ξ>0Kš $K"+BqBߜ\}ŚѴp\05mwQ8 ZMe'?[hcK -t=#zN(JKG@,ʘxps\4L,9 /8[c TWs]O&*#@@tqϙ~ݖg*+ kg<}"}'9 ,Bۗ=}t׬-+!1I&]  2sB{4By lONABqe0kʰEL[u>N}i"nšsXWzVᱧ" DgA}:C|a2+Xݎ*b5kC@LGy(eo՝A>t@-U(RT.-?l~_(Vi?}ޒ  ׸37вqj$ukn7(0}ʈh?3'#o?0Uó#+U*bRˈTyh>z:DN ]mW2R,ΰ[6Lj冔=&H3TY2睫9M愒s[iKjZ^Kۏ,~JG?gY`[ (RbW bd [tAXO#Pwąr"!՝rD6i *7R\S{]ZQ<'_O^#% ܎10 @Vd-5}(<1=oVxmf}< ?I%O8d+*V^7ݹZX2-JwC5֒?sY=ĝeF(90r_teL#V%{"u)دβK^PO͉qEDݺK ̊{ѩvAZr'>r֗"m%„ 5 \Ƃ0Аt)2mjsg(%."x}1gm'<Q7ζC!ilDG%c\^P9 wM49 Q\0I#pn"&D}MEz]cc+ڍ1]?E8Np}=O Oi{ly|hߍTK=Q-sq#. L4AUd^yغc>! 8~`^SNsgnw[֍\>E>K?m &Y˼? ٬Qs\xOH9rI qKC,z{03N׷mS?MxŮR[oZXj"p%[YG/љ'K**8jAXY&ވRp ?w##@[JQyRkMbjX|gyI4Q445|<}塙B($>rPPɫhbn"l 1 }\,r0rORčp~|r5]GZMp+ = Z )L0E۽z6)ظbQj8[Ƿ8Ι_b $u妗N^^ ,r*_2|3Zܹ8F5IWp@[Y;2Wf|%$9'μ Ӏ9i&ZtD]ĴJɜZ b|2k9ۉ H;$8ݟ:xR6?Xnt=~4~Ϳ)@u0&b2SsdYI@D߱ /JNs}k͗ONDPL̻'4*=Aט ,-bj6G TH\ES P9޲ He~ѡ0SՇmkϑ/NH'4lH:xp)3-0qUas/-."!,d~d>QG|,=[u-H*reFe\u < qtss}XK )'7Ű&Vj<Od9QJcݪlZ +&_hFcsUw`͎cpRѭ0SZx&csZ`R8 r[QU$ӤPc ʶZr$ma͂ WÊz?Ґĵ%Oh+H]pᾦr b P-<@a63SN]+l+}1wOu䉀HnN@Ws@ Wc.":xg0 I*\^9r$]9YSbF$\i vbw-d  "O4'B8͆lrZmu9|K<1\ ( ׊2$&Cǭ|-x pT_#x {Zgt]L(Ιu駙ԎRҤZ'5mo@}NAȦƐ. ,f?+SlZ 3XQbRF=\aFBS@.;⾼T@Շ>?b[x ?Q4eG_vi'!~@C\`rxôVc/4uѸ{4G ߽ vOKP<nj4r"2UTy&D#H?K/1GXO]-9! cXlF1U04 5 q#ZDž9# (aabf$?YHdC?щ` >.* =5J|f=?k$7ȚpVRoN1i6)Akt"#}ѿ鵎m_ƐtH_O7_ mw}(,&al𫈑jheԦ-\%^Qo~ل()$+RFX?R:X;B4(^IXJwo#B.J4v}\$W>ѧCl\2yCyi@p@=K5j=huW :ʷnwE;@_ >5xݡ=:&"j2˱&|BLniCb@$ag$7414#i(yg:1b,oڿA_;TÕ Xt^ | }[ϟ2da$Vj4oq_M3(^!Mm#K=RU%P/VrXi% &5ϐrtF OXQl/s;l pl'ֻݸORT+xsPKҚ) .TURY!fRy| ^1'6WSM&g|'$d4{0 ]bgtځ`h&"Hm}P^ywƪLQl`]c/w]/#,I*BAp LSDD}3+t*fsvk#[࣮vZ`Y> ?0 {H%#G1w\UF,P;Ua寯̖V(neLl\RΏ\d\,J@0$P63 _bg2JaI?1[3{A(u^v|Dv;h<&8o+H"͋Z.CB4/Q(a~ۭp[ z|nIW mpdEGTmHCrȭ\t^=Ҷ|W{W"->#>'V=~F wo:izO~ ~fl( &r,-@GֽR+:Yʉ;GRjeJiftLf`;5d.hAza W mC;-Wesxw܇s#Ddk/07dq#.1;fΐFGyY`δ Xg955(3'q߽ԯ- ͌)CR-ЃDē_:a˨&^eN.¿NNgdY#Ԝ?2ڜEK(\.-ET>ZoNfG\Kp.^uE^'K׽:ޟxMn$νklsQ6NMwVsUS=YAKpzo}+TC qus};3L +se%W[MϭR Cb3U[w+%ކ@0#Is\-$i\@fG5\dQ.$ON +{@u( ./ g ETvIst]i*dڇvBy9b}b+}zHZddz9_s?rNDܧ;'a@&t@_3tZy<}:B+=2I l4vNg6. Lg4e(ilSFN~yмKip$Hzm TsfO E,FX EAn6{]ZTV̄Qqj spܺ#i}'G\{50nWVy.crpc/C}b]w\xO-cZUL RJWc? ,wȒIA.qɬ^P1r26i7m y@ UPS]Սu'$si+{:ҚBEۈx%lp͠VHpU J[.GœⱢ܇Xb@r_V;Uygt0[%-<=Wr4a%Ch!I4]ƍz:9ٱ: )n>Uz9T3>/kkQ1k.J1\`Z{m1Q\OmY9uX"UfRgSoeC@RvwI7vg3.0a2`"נ ;n MSX{E5b`$몠>U k~2&Ǩdm&kPPvDfkVˁ7c\$~繲puz0_cK':68^̏*ib<.L z 1  qt_@-5\E{}tI'n\`"|թ\D%w8KӐzR|\X6V۷ݬ $AшE=Up/whhTe2ej)v0%v} yq5#Ro"UڄRJV +"oI,&mxzJrhn÷E}P.Z)d10B 8DnbU|&/EQ ;K3U 30?fiwr6~9=X$J wEO3dnEyaBT7_ ˃ޚՍ.nBo;Mz4b+->6ұ! `$Vۜy7?ӲBpm\zb )&JJ5>rOIsЍgNS?oY !_(&aIc! |qKui)`K!0oPNƁ oS"+"[рzt*k8^ ]0>;+B$I']t~W9cIYr<#+4Uh:0C;]6^6ƭ>:  <(=:H(m1P ^RPQ )r2>kmS,NKfqy'B.fZ fJ-j":v 0Q(#F`d^kDy;T1vԤ硐Mmi"<转a}2W)-BU>0S:i;4Q$'8g{# 5 CPy`F'&^Z]O.r*4ѧw0y110;Gٿ"s22,UZq?vq2{M~R58O=EcнUnZ‰) [ёn}3]$z6&9@a]fUXS.; /i[2a\m q8k%Pަhj43FIm~|}^7|Q~\Qn!]wn.f- j7OMYBgO(m|.խ+xS -~N@_bf*w[#rFI`;JzIsܪǫ 2#<I ܴZ߬}lÉu%GʾfbGy.IMz!xI[OT uz Y'a!5>ۍ-'|Zm jQ36rv/twU6yKQἋ=1Ul EnM.qYm~T S!feyq|/OaI`;<zWeYS(Y} rh3u%dJ\WбPXv&w7}I;.-D+^w U\B ΙO֘[zl' ~׍U# U4LDfٴ9} H~3gx[ &fV%435n4ZgԤ?9OTaѴℭX 0G8ܓ5nEKe.H:{yQ\<˲y5ǽWc I {r:m3ps8?NZnc̻*ʺI`7c槰!;W

:suaXJ*X#U&H+NR:.%`ʡY\dzHW!;X1 i7JGttBr71v(ݷwUe* BFtM[_~ =3˺ENN&\Xn(Fjprv~&sy;E7 Tihz)h$I dqTEk1mXjWN%PDĩƒt267ywymf9$Got_8j5`x>TǪPL= .MB7AnWAA6GmDeGx3{ހț~X_1Ϛ<ԁCUsVp}Pn[&c _ wj)+-W-rNZ;]ճjQ+F¶:0"~/Y04) UtzV> e?B_,-:%R^_buhזK\,n-f>v.%#Qy x^Jg:wjaD@9.a;r:Bǒ\QJE?ǞNDm0,J`eae(ݝٯOU.yXypr ^ sq1߬Ʃ,7_z>x3!)-I=[-=э/"%fuHgGk^WfRQ0(vZ݈u8Ǖ:E!Ĵg2B$wӮo K7-Ix<Ɓ mYnǡwaH4kzz&~`2?@I|t *T?жxgyl`Dm<.pܭ}8WɏtXehsk!M-AJk% v\zo¨ܦ*L ˵ #boNAR!^7g,ҭe!{d#=\W*ͽ@!aWZp%ʊnaހv-K _dS6A&5P <`љ,irʱ^ȑ? 4aeU@02_K~<דo1|ݘ2^l ܁ "[g٨/YK͢/GtfV ܬϼe$,Lv 8346li4HEȡSWz/]` "QCxZPUIt6*maB()+Ohdj81_7W RRӘѳ!DjJG9A|؋znKT) >([[/7?UҁcZ\^33$դrnҐELB_gt~B8sD Z:fw,HM̦ʴq9k*|TGNA.ddzoTU8Vo蠝[,AγC[g< ƷaZ+⪁12w1?Ԯ,)lUJPK1˃k2bFޛc] 9C ]A_Pa+i&kzfjcy$ܬoyo~EdqijUOqJ?BGx/ȭޯe( emЧt>÷ hÎYcVv):8ZE͙Uws\ sHĘ҅.H ^E u7 (Z;'Mcm||5 jL*@ *x0>I,9Gm !jgv.dRqxq-RJRk XoȆ^vFIؒa`F|flꄒbyю@р h[ULw@HgdVO\/ԈZDY,A|v끬U e=}leY>ntnyg|y[ QabCMB f߹T4cykqUef?&i%X0zbBB誴;ښ1j|V>xh;0Nو_)0i "wHBٝ )n0a9%B:AY> (`5ĊBH"@y~c1嶮;?CHprWj"CʎM:b>Be=|Ys!/$~6{ #"^r'qq#7E: ^M6=SyGJt?E|lr ex=%VZ6惥ԏ‘|=nAQ{tTޝ ÞdY%ѠGs`ݥW{` *b>J.%Ja_0@.bؼA:AWCx&tJ.A/ȅxapF!ShE®HmK0E(yo<"ˀLtR]]ִ!޺ɀuBm߽Z.6SB=L/=oɟ {vD:6}l%m?wZurDq(Xi!WI_Kx$'14_dE)p(|/t9M^vH[ԀW>Q'75Wzr4:DtQ,^of,dNö/Bc2_10T0`V\W_Akേ ppTU9/+ƨ3߹{Wogg&7܏Vl2"@)H,xLtHQ)ғ@DM!3I!ՌP܂- hG̝i`ܨ+ V,ö %~*ȡ62,llEpX )4b otb9>}aNc|OuP>-2$^A dj(/F DYyg 'QlnGY7*+!0r ѩ٧T[~&J\Bɶ>&)±RKx<^l;O1IFTNeVfE%VyS`npbjJziN~xS }Z͙PoQQ ̶CĕF.a8 vrpi4aO&uH*tj1 R]?nqRhgzf k[N|+yc_Y,VE}KRv?\h:3ha^Ɏ$9ьѝk^@CRe_b[K43{m(pD31BgJ7`{"lşO}LVtƹ8S7'~c=5+^ԝ|"gۤף<ؾ&Q2@9./B UFf7RƠhY;WN:{AT;VBOg @|Xv^K\ k5%hlj1zGom~}D<ˠ$`o3|9$lj!a{2ao]S e,j4Yq@^xZ_gF CR9V\IPN UA~EVu~PxدTsһ-AoW(f#)5,lwOeo'&o߳UKvs:,U-w~!pGPܜi16^={jJ| BKsAȃ8{W p"햬Œ =,=wQk'IEHv(airMB_Pzuٴ+Pfi_y@'%T ߜ7ﮪ-P7̸a/fvLh o^4E*>z'Lx8H4rns~gxl~HdD <Q0C+Z_)ɏS/d*5WbL\ouKE5hI|e)Uڎ 7xa)bw [ ̀ETzo1LR H`'i8{qs)LgL")~ۛf&3#  vA{sHAeIs=$5_sv9ңTv1qaѿwQnV{$_˫l @ԟY:a6ڞK^d<- ~ҮܳvYCv쒨Ks}lP:l _3\cY_.T QT<*j8=rȰ7' %Qb]re ٔVHa8ݪ<h>Jc>2t"uh{ipsn oA|bԑ}L5iA`&uxcSλ~Rs'ܥqn dL'hgd >Oƽ4#|s˽m=: _膄M!5^o%v51PTebԉ 4ݼjQzXr(e9Mc-]r"m7|VH}s}"ܹ0uV?1vvցѮ1Pfcع wmd ( euXA>#g㽂3'?H/@u,'.>c%CIucv-0DcW+m̘2wBˡC,႟sEJI%OHպ&Nb8 )as=gY\.K)?6 _dRqMq@hgs5:4D%$F7G;5pV%w.٭1i %kG1?mmc#g_JSU*3) a|{z lqsUOt\ W(F#^*p뿰6jrZ^PXy;ztP[Às W*(|x'y+GA@ Q/({6Ɩ"AEK|kj-^&sξC`Ӌ׹vphzT\aG(0;p;ACdlP 9#'IX1>xǽߏ4WK4b`'l<4DYs jmf'u XyHzE*̿Q{h~0N18Qज"LsVZ ӨV47 ZZ@:(G;8NJ"7";B08~oqH-P7; UI1DW7;VwaERTQ ;=֭iX顥B$~~|G q3HAU[Q"⤀%7<Ϝ[J|1_`9=VYĮ߲*B[6}MtveDE%üK3~ Vuɴ kpj z!b3).'ӰdУ4sۋĶ߄yL3»AЇoe)FG^=_8䊟 *4e?hED/Y9r~8_?9d8nPv>P24xuj,l0NF6eQkC{LoZlե}hЌ9= `/,E`-YpF +6䵦* K߳tO6A^[4иj"5 p)((p2J"Pb ͪb:41Lm'>I;DT !KGe>"&B 4Iy<jh teZ_gXZGDn7 R/M ӍVO>22/ _'FcP _9mGIN8L/n6SU s0v+>r0WFI2\Gw܎蓆d@cyQ@cdcod;_+:#|gV WB_\2ӀMMA 3*qNU͞BUo`(٢g"(5KЫʏ٦-wӧ:@Vń?ѫ!>0([R&Z@EX݋ߢEÝ뷏]pͅHdd rI?ě ²t)Mߩ/-$@A\5:=3Pק=^nM`US1łWTBw92[|.HE/>Zf_%My8 5n!ga<{ڼUE f<.QhY4WP8^[/Gjdg-EY%柆XIc ANaL>kkBDI}+Jr+6z],{U qyG @ -HoIN[wODT+1_4] 7޻SpWKϓX\ r lau5 ,#1OdA6H:-M`ϓLu%[Zw  ji&ϰp$4'-:N ~tOITgߑ ZeJέ9nhV"a0 Ytk;r\XG|Q@OR=y|w) 9u:󏗮!kY+}S (m[V5Plu9w*A70k0LDǚe pzW4&KbO&^Rks$ف`#Qںp;m#/ Xqk'6lO\b5O-\^8EˈuC040g 4x mvա*\T z_(ck^pERQYu0M\"ޱkF }~yufGջ ż]/4wsQ;?Qc ߥ-?6P ;\YŊǩ'aoI%DfvNm=&3x z OZ>YN)?(8\@?ksl?h~K2@+dӂ:^v p9>P9,Y%B5dZAF~) }+׫ԇ Wp /D1 4 ?@,FiKq?SI 3X31G,ګ|z~O5HǏ9̟eoIׯ. ~&Q E}õgI9}׺& ›i8}834=\ f% E Y}v'+C0_o`;pFUeor%:IT^JAʄj3kW)<_/%5@AtPaxک<˰8T8"0]_"xӽQ?hR T,b3u)#t9[Z6Q O&U/NO4ESv?Y7e!>"A5b+9x#Q)SعG>h+8Y) Zum "36$VIKߚ*QFEFYPGk? YEk)Co/9+xr}NuT6:CF'(N xn\ňFz@"3 H~"(, oeNJ`^Hd{ հ.v@&a$gN)8SOfhן"%ծQMEd<)h1Ktm#Py>u iT>i*^`~*!q,x Is/a:St 7^JpZ{`o2T#Y'Ϊ 3M %E "V$1:gHUiDPIh[G1<ᓩI\l3emuƐ^yV@L+v8S j-ZFᄕJ =vuykUxj'+ L=) IX=MljLh񌎸A3 co/Ѿvͳ?Hfn]B hÓڝ7q(P-FtkޭDc߂JZq^w8c&9s ㊶bA:0 ~DRCumvICS:mߩӢHWSRTWX}=(R& .ny/c=S]oaa7W dv̸ * /Y:蓮|%鹙^HnގW ixzVSFvkĜ&{ B~H\7 goWsg5*\]L&CzSn@h3g#3Y(Hם$B]KL,_uqBv6ID|j"XI^u=kwac77V:IVA9ij4EppGSF|h[yo~^]ަ_C-I'Om,]SS;}j/e~`'F{3QO&zf{a5F?Wj]K9HYG ĕ6:]NpPkl7 Hw eXjr4tķܻG PI"2>Zvda&ǎ RQ8e+Gz.Zrt#$Q%60}lܘ 8<,$1-4|w*C2a.{Mb3HlZ&ŝGi)hɲi=Zj8EA 6j);7ɫoue{!1r9% k H2gcG=!j&h;gɽ帎)P.[ $a!9XjNV}_L~b;'tv&93|mXNrc%)+Th4K[ #rxYp2v^dtZ!p W7s i[a~33?{+=RԄ]z:2 k˹/H8rfiklQ;+mO=V9 l,Jo&LHɊE=Kb+=/ӝ; ;\G x2%XV$v?}uw~NG_)'Y"!Gv4ٜ]i0"p^D@OJ "+UV&xrgBNX.e@k{;dCZ?ُ:A}@`(8R]dĊ-[%B`xnT&̳9I~tǜ'w)P>]zLEy[ hK$ ݩی`*Y{[~Me-PVjX'Ru-G`{>Zfr6H?#9Qa mǯt;0z QDGZC:0ht <2-[ڍTmz͈mSUz^W(?+eQVuR Un8@z] w7kwa O9` yv^k}qI[?86l1$*t j`^-dN{3U:r͠3sy1ԧD3ϜEfT {ޚe*]55qoKcTfӨr͊2dSU("-VSBDSa3Q%7+W}F2uE(f>E_@/[ܰ׳uwK+f]2 w_Wl8C6RqM߃1?Y; +Þd.~!1J5' av[Ⱦ C $c-J8C6>+Esl<>E=^ή% h_/UK9ͽ)_l΄a jm- Bk\XîxkU6dΠycQ5V6RꔦSBm5O5gaq|Ը'Ó<^w8WzZ%8SmTl.c p%cj_?)z43֔fzgO3B &:0i[Voe7Ӥ$u03|^Ag202 si:}3-cqA,;Ȱc9!k c$IH2KMfg䞎RLSE:֮A2 ]芘C7$<T`&;cY%D1ckvY>C# &`L_^-Oh16&<<%F;% R~"+E\4 }B49/p -zPdxvO0]AQt:HtUτiC!u\;L #LƷdZJAG';,rUÿm2%?-u]jO`@o٘7_J*~D|*XE;񯌥UkF `)ĸ.6V5s`gm?$oY-٥ &ss=m\"8-/ lRހB &|}@SaCDG^B\e.W><ﾐz IS{uWEl.+L&[(e hsx;b@`lckISDF[5e254 ~vamtJ۵[ZqEZȈdQDsjs_'_3D&r(K]<`2CҀ>tfXQaHH.8 )|o.Yo_ͩ s~ p\P∨!9la1t#wVe+i@nRMjʘԒ-yTϳ4^W˦X;, ȇ\zf(<xӦ5xSϘ -h1*{T>c'tOV!RM Y`+ |ggwZlB:o|c!N[f̈ '+OBZt^_&>錂pl(޷tt>‚.Y~scFP@ (*5Bm}¬_@}rK_S\:i&gFKMJNdW;rJ-M 南_|mׅ;mک΁PF0B=H+eldm$fJXJj]OP%HˤDi>^Aӛb>k p3Jc狁lG+մoa | 3s] PU`J|G>s;JuⷌSې+xO[\#'c5grK[qcWղZȒ ;'q4/b`&$j>;OND\SKgE]GD47֘iF-7*d %ŕ\|c z:5m%3-Wĭx=pb +`X±6MW}r AFBtu,P.>Rjd' Ҧpp3 ISčbzrRc}d 9ƹ@g?9pʬ1p[p?Zɲ-q#\|c+Zvu(a۹?|QJ5utO7 n;] ҧ3Da0n$ekvB}@ O̶:hhVyU3)*Gf -!gw; FI 2 UؤDTr&ǭi+a!jM8D *HlmHXGұk_42Pji k_$s.k$z[՗|@GoNfVU 3CU)yY"P:{wC} LNUpX{|_&k.L6zg*;~tZmnfH7lt;h-^٪` 7zzt@K1RpD]y )]%Z%ۊY*8pV(w=XjppaqFQsLUR<ZdY&9-tcrefwMw)yFvcFkFO;G˰:oXnjJl-YiJ.8`iΡ95{e-N&꓇UU63(mOnq8Z߶fPr~kʓ'%㳲 SBPE0@.̃x?ڿ^#čx~nF0[d TԆq$v20== #u F𶣫R8 h#Wf $MdYgEK).t6~KIPh@rΌ4/< # PQmAi#>rc,! \@&i jÎ7+;XsSV6䒀8bح)+vpkz /Ѫe"\ T #7V|<V4lnѺS(悸#uhʢz.`ζ YZ