ipa-hcc-client-0.16-2.el8 > 6 6_6 3!y덏%!E/֡fJ !E/֡H#x\h} Ainj~(fջ6Z~E0R+O4 =xgWԫ+!*C"dQ&0-3PShU'X@6 "Q(df3lca؈$Jxs'\1%^˙AC(N㣐B)sRi&߱_U )>yG{ڕjnCIJ(_&,6-I Ϸ187fa6a1d99dda82a98253eee4b3e79dbe8fd5a69eea7ad155641a407314f48bec1a9e41938f5df691d210dd8debeb9a1a979b21ap3!y덏%!E/֡fJ !E/֡I%($mow*3zSN.#)m9ٟɜ&ガǢWKƗޕ9'yTݑCRv1D:lka *nۿ7 ݕh^!۹J~Q,V:*n<#oh W8bLdN(lp28lpb =PY))*ЏQm~Y\HMO I~vl"{rQ+ x3qi/;OUL08  ;Nׁگ%wbndxRSs(򈓵/V]trnfhD1MGg!!zYs. 2]L^;5MDp vN9-j4wiAwk4_Il2k( 044X oF<踥IrgF;\xk^U--Dc?H]ؠТ+5W OVOct2IYU: >pF64?6$d  U &2]cjh    P Xx,d@(v89: >1e?1m@1uG1H1I1X1Y1\1]2^2b3@d4e4f4l4t4u4v4w50x5Py5p5t5x555556 Cipa-hcc-client0.162.el8Automatic IPA client enrollment for Hybrid Cloud ConsoleThis package contains the automatic enrollment service for IPA clients (domain join on launch).fbuildhw-x86-03.iad2.fedoraproject.org4Fedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://github.com/podengo-project/ipa-hcclinuxnoarch if [ $1 -eq 1 ] ; then # Initial installation systemctl --no-reload preset ipa-hcc-auto-enrollment.service &>/dev/null || : fi /bin/systemctl daemon-reload if [ $1 -eq 0 ] ; then # Package removal, not upgrade systemctl --no-reload disable --now ipa-hcc-auto-enrollment.service &>/dev/null || : fi if [ $1 -ge 1 ] ; then # Package upgrade, not uninstall systemctl try-restart ipa-hcc-auto-enrollment.service &>/dev/null || : fi # with clientR5'_KA큤A큤f*f*fff*f*ff*1c846cf0265ccb49de8b9ae65a2ae81ce91e616cc31208592c496b8530a12c4a277ebff350e0c0cc72b5c488147e52c2ecbd572bbb9f780b3695498ee515fd132e2600e4822f7479f70c141c6b0e8eafb0c052f4cd08c199f1ceedd8442e2ac194fc60c37a254bedf2a580831e8e8f11a9a3558f533c3fbbdfa7a415f4031fda1ccd7df80136f26c5df5a81921dfbcb597d4ad4ae8792a8421cdb0b8e9d3272e8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootipa-hcc-0.16-2.el8.src.rpmconfig(ipa-hcc-client)ipa-hcc-client @     /bin/sh/bin/sh/bin/sh/usr/bin/python3.6config(ipa-hcc-client)ipa-clientkrb5-pkinit-opensslrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemd0.16-2.el84.9.113.0.4-14.6.0-14.0-15.2-14.14.3f[f @ee~@eod@d@ddd?d$(@d@c@ccۥcccChristian Heimes - 0.16-2Christian Heimes 0.16-1Christian Heimes 0.15-1Christian Heimes 0.14-1Christian Heimes 0.13-1Christian Heimes 0.12-1Christian Heimes 0.11-1Christian Heimes 0.10-1Christian Heimes 0.9-1Christian Heimes 0.8-1Christian Heimes 0.7-1Christian Heimes 0.6-1Christian Heimes 0.5-1Christian Heimes 0.4-1Christian Heimes 0.3-1Christian Heimes 0.2-1Christian Heimes 0.1-1- Allow build without idm:DL1 module- HMS-3840 feat: Detect configuration from rhsm.conf - ipahcc-stage-console now configures proxy - HMS-3821 feat: auto enrollment can set DNS resolver - More Fedora packaging fixes - Implement testing with Stage Console APIs - Implement console proxy settings- add CONTRIBUTING.md guidelines - Fedora packaging fixes- Prepare ipa-hcc for Fedora packaging - infra: Add helper for stage console testing - Fix: pylint warning R1737 - Fix: Typo in ipa-hcc-auto-enrollment sysconfig - Fix various infra issues - fix HMS-2066: Add timeout to confirmation prompt - test: Test on RHEL 9.3 / 8.9- feat: Enhance reporting and logging - feat: Check remote status with HCC - refactor: Use context="hcc" in IPA API - infra: Log JSON error information - infra: Refresh cache and config file - fix: Use LDAP for public JWKs - refactor: Run ipa-client-automount - fix: Replace legacy with modern Insights API - fix: Limit hostname to 63 characters - fix: Use UEP CA to access prod cert-api - fix: Don't create global DNSResolver - feat: Add ipahcc-client-prepare - fix: Fake headers can use org_id/cn from RHSM cert - refactor: Change to --idmsvc-api-url - HMS-2348 feat: Add ephemeral fake header to auto-enrollment - test: Run CI on Fedora 39, drop 37 - fix: Better error reporting for missing RHSM cert - fix: Fix typo fdqn -> fqdn - Fix: Keycloak SSO provider requires openid scope - doc: Add test instructions and hcc.conf info - HMS-2814 feat: IPA client installer and automount - test: idm-ci now requires local cloud auth - feat: Add sso.rh.c IdP provider definitions - HMS-2694 fix: Update JWST issuer and docs - HMS-2595 feat: Extend ipa-hcc to retrieve+store JWKs - test: Fix and improve coverage - fix: Update spec file URL - fix: Update git repo URL - HMS-2594: IPA plugin for HCC JWKs - test: Do not install KRA - HMS-2532 fix: attach to api commit - HMS-2491 test: Enable backend tests again - HMS-2491 test: Allow backend test to fail - HMS-2491 refactor: Separate GET signing keys - HMS-2491 test: Update test infra for DRT - HMS-2491 feat: Remove old domain registration - HMS-2491 feat: Update for domain token workflow - refactor: Remove env patching - HMS-2446 feat: New domain reg token - fix: Use gssproxy client keytab - HMS-2446 refactor: Move IPA API to WSGI framework - tests: Add test for deserialize() - tests: Check that serializing compact form gives a ValueError - feat: Add additional check json deserialization and update docs - feat: Rename deserialize_json to deserialize - feat: Do not allow compact serialization for MultiJWST - test: Enable mypy checker for tests - feat: Add domain token to mockapi - test: Run CI with Fedora 37 and 38 - HMS-2070 feat: Remove D-Bus service- fix: use new Quay org for CI images - HMS-1789 tests: use @podengo/ipa-hcc COPR - fix: Support latest tox on Fedora 38 - fix: Allow non-compact JWT serialization - fix: use OpenAPI from public GitHub repo - test: Build SRPM and RPMs on GHA - test: update packages in containers - fix: Don't hard-code inventory url - doc: Add documentation for developers - HMS-2195: fix: Use idmsvc as API slug - feat: update locations - fix: Fix typo in automember rule - HMS-2147 fix: use HostConfIpa schema in HostConfResponse - refactor: Use setuptools to install Python code - fix: store public JWK in separate file - HMS-1857 feat: signed assertion for host registration - HMS-1857 feat: Add multi-sig and host token - HMS-1289 fix: Remove inventory_id from HostConfResponse - HMS-1857 feat: Add JWK abstraction and helpers - feat: Update JSON schema from latest OpenAPI - HMS-2038 test: Smoke tests with idm-domains-backend - HMS-2068: Drop support for RHEL without PKINIT- HMS-2052 build: Use OpenAPI schema from idm-domains-api - HMS-2038 test: catch metadata misconfiguration early - fix: Move rpkg output out of .tox directory - HMS-2041 fix: Represent org id as string, not int - HMS-2038 test: Improve testing with backend compose - HMS-1991 fix: Tighten OpenAPI schema - HMS-2008 feat: Adopt JSON API error objects - Add definitions for missing JSON schemas - HMS-1991 feat: Generate schema JSON files from OpenAPI - HMS-1991: Refactor JSON schema - Add project and build definitions to pyproject.toml - HMS-1898: Fix and validate error response - HMS-1975: Remove check-host API endpoint - Improve CI and test with Python 3.9 (RHEL 9) - register: prompt for confirmation - HMS-1926: Friendly D-Bus error message - ipa-hcc CLI: print human-readable messages - Document how to configure for ephemeral - logging: pretty print API response - Reconcile JSON schema with idm-domains-backend OpenAPI - Add verbose logging to ipa-hcc - Prepare release 0.11 - Ephemeral env support with fake headers - Improve Makefile and tox runner - yamllint: don't apply truthy test to map keys - Rename field 'cacerts' to 'ca_certs' - Reconcile domain response schema - Reconcile register/update domain schema - Document how to install build and test deps - HMS-1898 Reconcile error result schema - Ruff: silence F811 redefined-while-unused- [HMS-1788] Add simple GH CI workflow - [HMS-1779] Move secrets and settings to CI/CD variables - [HMS-1645] Replace bandit/flake8 with ruff linter - Add infrastructure for mypy type checks - [HMS-1645] Drop IPA 4.6 compatibility workarounds - [HMS-1645] Drop Python 2 compatibility - Run integration tests in FIPS mode - [HMS-1645] Drop support for RHEL 7- Last version with RHEL 7 / Python 2.7 support - [HMS-1607] Use inventory_id in API routes - [HMS-1607] Move common WSGI code into module - Include os-release id and version in HTTP header - [HMS-1479] Implement status check - Drop bundle file, add more ipaserver tests - Detect and block auto-enrollment with FQDN localhost - [HMS-1472] Switch from admintool to D-Bus CLI - Add tests for dbus service, fix hccapi - Move cert parsing into common function - Validate insights registration state- Fold common and registration-service into ipa-hcc-server - Default to stage - Add title and description to JSON schema - Use D-Bus service and simplify config - Download PKINIT chain from registration service - Add mock tests for mockapi service, refactor code - [HMS-1485] Add --location to auto-enrollment script - Verify with pylint and fix violations - Use server role to indicate presence of ipa-hcc plugin - [HMS-1485] Add IPA location information to domain - Add D-Bus service for checking host in HBI - [HMS-1475] Add tests for registration WSGI server - [HMS-1475] Refactor and test auto enrollment client - Test with RHEL 7.9 server - Remove dependency on requests - Rename smid -> rhsm_id, drop redundant rhsm_id from body - Move API handler in separate module, add JSON schema- Fix config_mod(hcc_update_server_server) API call - Improve idm-ci - Refactor project structure - Add timeout option - Remove unused cert info and detect_environment - Split ipa_hcc_cli into CLI interface and logic - Add systemd timer service - Add global hccDomainId, use domain_id in PUT request - Add HCC update role and register/update subcommands - Add ipa-hcc to register/update domain with HCC - Update rhsm_id in server's host entry - - Add server role for HCC enrollment service - Fix deployment and rhc connect in stage environment - Test on RHEL 9.2, 8.8 - Add mockapi with test API endpoints- Add metadata to deploy with local builds - build and deploy RPMs from current checkout - Add QEW test and metadata file - Add idm-ci playbook and metadata - Add tox CI with custom image - Fix stage env support - Add 1minutetip and virt-builder scripts - More validation of PKINIT options - Write custom krb5.conf, handle missing domain better, more arg checks - Drop 'not krbprincipalkey' check for testing - Mention SHA-1 PKINIT issue on old RHEL 7 and 8.6 servers- Fallback to kinit with PKINIT + ipa-getkeytab on systems without PKINIT support ipa-client-install - Add support for IPA 4.6 on RHEL 7 with Python 2.7 and mod_nss - Handle platform-python on RHEL 8 - Sleep longer - Relax dependency on SELinux - Move keytab installation into auto enrollment - Basic tests for WSGI - Move /etc/ipa/hcc dir to registration-service RPM - Move scripts into ipaclient.hcc package- Detect stage/prod from rhsm.conf - Move refresh_token to /etc/ipa/hcc/refresh_token - Move more configuration into hccplatform - Remove keytab file on error - Add service with force=True option - Update permissions before adding privileges - Use ipa-ldap-updater instead of slow ipa-server-upgrade - Split server plugin and registration service updates- Rename package to ipa-hcc - Replace term 'consoleDot' with 'Hybrid Cloud Console'- Update CA chain to official RH certs with new SHA-256 Candlepin cert - Wait until host appears in ConsoleDot inventory - Always disconnect to get a fresh Kerberos ticket and connection - Add ipa-consoledot-consoledot.service - Remove old test data- Handle outdated keytab, autoconfig org id - Remove pkinit_anchors line on uninstall - Workaround for missing IdM features - Fix spec file dependencies - Automate ipa-getkeytab with update plugin - Move some files around, automate service and keytab - Update spec, add KRB5 snippet with anchors - Use more persistent connections - Add caching and logging to WSGI app - Add link from search facet to consoleDot inventory - Lookup host in consoleDot inventory - Regenerate certs with C=US instead of CN=US - Return shell script with certs - Add cross-signed certs - Add script to generate cross-signed Candlepin CA - Update README with more instructions - Require known CA issuer - Add WSGI service, roles, and cert mapping - Add test scripts - Add notes about cache and certmap-match - Add test data and instructions - Fix error reporting when global org id is missing - Use lower number for updates/schema so we can use 89 for test data - explain unique index - Add write permission - Add enrolled hosts to a hostgroup/bin/sh/bin/sh/bin/sh0.16-2.el80.16-2.el8ipa-hcc-auto-enrollmentipa-hcc-auto-enrollment.serviceipa-hcc-auto-enrollmentipa-hcc-clientCONTRIBUTORS.txtREADME.mdipa-hcc-clientCOPYING/etc/sysconfig//usr/lib/systemd/system//usr/libexec/ipa-hcc//usr/share/doc//usr/share/doc/ipa-hcc-client//usr/share/licenses//usr/share/licenses/ipa-hcc-client/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2noarch-redhat-linux-gnuASCII textPython script, ASCII text executabledirectoryRhttps://bugz.fedoraproject.org/ipa-hccinsights-clientrhcsubscription-managerutf-85feb9293940d9f5c71880edc696facfad01228eb683bd2ec305ac03036a11bd9?7zXZ !#,:`s] b2u Q{LY)ϓ!ӱj*V( __"sF%blH>sL~?X94q1;E@ ӝ y "FUw ׊+ /?@Q?{:d%|3␶X]{ ,duO&ۏ>/Sz EK )Sopt$A*Ӎt=fUH2"<r@s$Ռv^Ԉ9ӣxq 0 r# g y+K Q~8Y%u<늧gfFʺad╈œf% 1\6az w4ҙɚwEt\.=qG;Ut?O=C}TTx6侰ܰX.F(HֳL%eoObR'+#`I-_]}YpjZ['!tPv 2ͥ=Bf#{>lXGC0O^CҝMQVuddvVLas~ї|w70ߋ5BbA/*X;wk YЎFtjlŘ4pǯ;8Ink_E%Z 2_E,O ƷCEϫ&ؤ{?2KO o2{4b -`^Rl${/ڐԔVNq" XkwX;m am3 …r]jr=<@}8+-' +uJqbkڜMq`:r5 +O 2*?xϮ58*s`8ϦVQNhFq*zr ` ^*DDzIN YF |lUch~ҵEb4*~X9<~;ӘE-ڛXBs^,8=0Z\(&/0UxޛDU]:i',s XZI{vԁmbp(:n5l2~Ϝ󷏼Ng= <ψ'6 | K;Ei1s\8~R)y%ڧ?fEK`Вn`ACtf˹0t,~C 3| 4Ӳ#.s"ht.gɬ8BCnA 3}>n¢xԡF曺Lg"J$^,yI>i݋~`5!yan̤g?nX'2f'| JJ_tEV_RT 2t,+?=b%>R4ظmn(aghuRgt;+^k];7b3J@2l)-tua}kMHK(0آO[No&%𥾈'[F)[ww M{MHa"f=2۫ޙe)K>AvBoR)PjMjp!a#=Dӗ,Lr $*+s( 3z5aވ0ЛԅݕU5(+3<겡Qg6#SO[]8C\ALZ 閅As噼! EPSp:;-cYP?Τ'`rXsZPUye +OУB_<&%lv긶ğ9mr]<)){ciZR/mmm3[cIc2,2QP _l)5o 7ŧVL)53IQMNzF%,BFkpߢg&`V$-jHe{2PL|#Wk/XPVlG6i"*d,*}!ܱvw@&-O&=#q3yt\ܧVf jΪԙ><%jv/4g ntx38w+vϨPM@Bؽ6Hz.̶dÙ?̡|! ?" EX[Pdkˤ++ܮ'u:e|PٜƒP  ݂M:Ȧ} Fz}IӋ3% 3!L1 TAMy"Hn=0r,y7 ĵ5IN&pk~1? qH=e*ml9$cAirQH#S~Wl諀ZeG:_8_u|o sqKMHGqW+F\p7F## I"6jb&9?Iє57Jx(L[:Uʔο329jpp ^@M,";)r}÷v jam֢_J_XxEpʪ-QKL+ G#M&m\0~~PÍkz,Vj1,'_;QK18 ekKs+=4GoMp}Sw(@w/kP9d=.LM}{]~2? y) !W2&kw'N+i\܏!F*cCk؞_(V#s8s$v9 Tez eO;[Cwf"|$lFđ ~]^z.h'C'|(:K t _29MPj;q\, d2+& 8Yv}Uيanl -ש-AyWQ}֛#ͮ"d8xDzd"1 Iw ry3-Ae*!S"V0>ށ-M'& KjbF/~~x=wݥzFcየyk|gg }re"J[7<) DxkəȞt<~ .Ī 5jE?RL)Tjuv m59~뻤d{n()FSJNp rw![9 NfWugbX n* tW70) VrbgCS2V͂0ۺsQ\wLYZh2,0p`*Ȁtk j w:/Οt ;-Br w∑6#XqzţaW娿7"ćP:A3ë< |2(\?uk&A#zsʷ+Kog$^PJ0^PW4-|#y[ ;Ȏ$¨p[p21\KC DWZGuu˹EQ_g}Y`rG3а!ZΠrm4jjvU`^܈*G 'ulus,\T3;Jx<طDJGqlw_sPL |mJ'R/@gK MmOW (c*{YS1-f(gm4h4J_mTqQޜL`|;/_%YMg 9O3ns \,Ib)YIo1GڃmB UNkif a\tl5'܈&R2Htikt`Tu2#ϋQN9NBO2Kc" C@#f]$2'#ҘAgɉ] Wm 7e! p`u׍J DR*/$i,{'3P U'y ]=FU*62ul~!{g%`t#B%ӵ(98 _hK^PԤ jFA֛lF,ID4!&=O,StP;d[T6_`0"" rEmP&o?Zipg̠cl-:gSچsTm"a[I(6R8![uT4^|xʕE)wn1^KHV?p F:I#IH#:!Tu>4M_X0TGS2 Y7o<\ Q]^I4_kq u ҃] 'RzW:I+(7/YT2~9$ lY 挶,|g%;L}2QLa|-Q(YTߓxmRd 驵>M-z`l)ɆEDhkS q)_>ec=$ h|OFW[Ya2 :%}zfrBNw@P!/UvA6#V580Hk\NdZ_&ZKpibTEa0t;P%仺ho2pq0,u|w)=|a9V#! #؍3Ŷ{i_[r$t[xz'M~?J8舽Vgޜgz7U4ݍGǝwrz߶reeGaRGiN뉩5?> {߱V;_oeCE7 M9{\^G߬ cxOA\+-*iEXL 2k@c\ȵKAD>)) n*`;o\W sb}Nx[GEͨ3? 06q"Y)p\F=Ɇ  Ƀ:r=3I"Y22ֿR`1(1hHC}LF7 }kq[}qi{e,pwfՋ6J-h/=HÕwsz[P>TڬE?Aq.2";l.A6n{܄\`^p XJPxiڶ%,yded}nK@7 Xsus]CRP>g/I[? o-EyKVv$ň^]}: uW":#vruJ s}VA׌މFEkG""GKvGAyVİs`ø=Ovl']B Ŀh"n" ގ b$<7k-#. b`JKCp 4'qY#%M<[epG`CͦJ ִ69j݆ !fX 3i9<̚O9uDqŬnii Pnf|:Ncڴg5w8LHse7T u 8d@SqD4)vDЫ:j-vF:S&.MQO[%3Ea}t>lQtPFuZ^q1+6>BvSU'uҀѯNV&(ZAG!1.d>A7R^BhH%DPUH,g4yRUe6JC;^h07k .54N͚G WmH>3}CrjWƮb+^-J-HnY voKDP…s!va=й..5b{pd{Οp OH=v {I@E}U!|׃5jj%sb6߭\jJ,r|/4V.`|..]$F ok6u{ !.0jg7ZwE ) lwJ(YxGwæG~5t ]߿1zָ.6[E?sƩD) 3VOlܢNA=Qs (<ӌ{7Ct d>EdXI|h(=sp$b:&Z;7 fWuOfgrwEROZxYՄEEw1Wj5q+X-1 3W^ˍ#詎M^z 蠅Zdq&^ oc\DK(lűetgz>PjT(lQmG2O?Sw[+RiI]vU^w{*"['l2pIG;MK+ _򂓮☷XG _dVqH&|dPٺ8 Mz7#SŒ4WKMx<ΛHAc>vb^ϐSfO7&P}`:0:*WX3os]Saujj0HRjUW/}o{:ʆZAs)ޗOaŅXMc*U٪\ خ5Y)d:H^F=34qF^0>(;X ;BPP)Xz θT'}|61xB#>{P&xK.Rȍ@V^h5oDmlwQ)m LGl Q I@r8ȅՎTձ)2H4B9@]!5fDWv걶ex -F/w\N1dT 2 r+ק4v`nyW ;8 L՞pd,!29I{*Y4^C?&~'=AG9%^eVR4 ̀ iCV(*λhc6-3#~<5b9U0Ϙv ɠtdOmqA \Xꆜ}8WXk( 2Mm}ۅmY7atcBJ)phI =%S`˙n=iׅܹ"f >bd>=Z H~ˊN2 =j[qB5ERKx" PMN .z'+L] UosހUbDUO׌uHtʌ Y9{?_u!~G(sefZ&޶+#G;JUKk ]]~Ɠ bb[=\枋Aӳa!J$L )y<9. eJ?:2|R<궟cKuɪj5_#jy&s1U1k o;Ӂ[]GuೄV0nSƀ3]zf8H[ZKS_T{0`m3 MZDZYa}{8_!n2 Sי]/<%BXM$+g݂4|+ `!+7eZ` n󼬔zE}w:CjeG}! o kqm4jq "}2z"rL3Beu:ʏ,on$~>1E[xkg6M[)צ,7/ހ&,<#).5oJxϧFJﾕũp񍶣ِ]a^״;@ɮpR`p~e{t$)CWmE|SQø+L͛gz3m:]vm ҄k="9Wn923"@~|`PF;UxPH}vrΥܷJFg*>O!Kz&P"B9auwxUW~&0:!{r+"c3,潽lﴕQ)ReS" ˏq܅eO`DH4(^ƪT NJGޣ4L-n!u߃0x|ѩ2c5Y_8!r$eĻ8.w#$Q+N55F z02hb0>~/Om{oefϼkTKk41h'] UM χmP4ƜCt \/f=Fm<5OHtYȣt +ZDg? Tr7 ^{ 2ES7!ɚ6սBZ $ѱquZt{+j!Qk}ofmGC/qm[rW(w$3=̏RawEv6:滹>~"l2zdJm/#vUwU7Ig܂_̗r7֩ h)#*JE۰\Rnw=-b(lJF2kL)@3Z _BTHcGw=Spn#!M;1,1H#@B}4;H= yϦ*g֠KaMgrF4MMt*%lR/ OU3WG3z =\ cb; 웍PGpw[nF|1VKȇu旂KF4#[4!\t$= ̍W"K5*1>u7|83xOLuBBCw'4gf VK(BgSgZ78iT =tTma-|o%6PtaoǸѕdhqO4;BEHW3K'^t!u=/,RuoB1;Kx>GkďTօ>84=Ǘ2ݲhqT*|[E-Dɓnl=ىDNhdLڹ4ߑ)`"h";mۖ3XS@ES1V$b2M_.?&z26ja^߹½*|]9Ռu;J| ٺfydQdO2 U='?=!qB=0[-tPZENa V4AvZlvL]Ͻ߆sݔ/`) ~~'Ɠ` DC]X:qrsoP5rcKCMA>8YeFPaFYs&Qf/e~n!;Ɖ߅ Ȃh>˫^PIP&K~k;Ys$~mcd6nOvS?'0ήf#,ɡxCWsñ |;Q$ݥl&-9z/y>PƭDؙ\»؜V@2&MN2gduXw~rfg$<#:2,_#]3擶hU{tI!X.TN(ɞv:_rV`:=>oޣ[ c>QSA3!뫣%+NA6A_,lXu0rؙv0cڼmay13ZQp{`h2x[,^5hBh`.׉&?_-GiN9 ;_#6a۷Qw^`dÞ **fk(&`4sNtxa Bn?6Z}h|:P|u=SYhHbzzTԯNBD_MMd-")vgz*Ȍp@s$G4r垅+' 9>YbwQ1$^'peم/D, ?mq$!7$luEv~2}<[)i2ucf3}ڤ3C!}]2JwV!)'T'da.FDBNT]i\tJ뮦-3ܿ0?WQ-yהA'gW֡Ki ɉ"`z3e߹islo_~tK 2cVH~'w IaҒHEk- a:o4>s%J`yv Dh ?eNX!u&v4ȣ1gSΥ^ϝP҇WvH2ʯ-9|)SFS:hmjee@7>ff[H\6oTYU-M?AVA7zs5ڛfpd ݘLl.uDXkwp@FoeNW;gʄIF,PFؠF2k 4H Ʀ3NeFyZB0m|j`f/[W2lnF*7.̤@@p6*ԆsCƖ{_U `J9bs)XȾk}# RijOda[( &|Sh ?m͆?vmBePLׇ~m>3)u7b\'_t8GEJ-]*|dp< \tʑIZkK9g7Yz.­ogUɀɃh}vkAq98޾PΩ6Z+L0&iP{Q$}Eo-, {"}Kkk*{pũ=ZuщPDmMhme!h Yqoӷ*bo.z$$ARhqO{ߪPxO*Y;m~AF]Sب2+'ӑdkVӘ+(W7>f\v@}X{*&.}_^:}8psH{V)vW@~XCh:':ىĽ8sxUw7%r?272 ƮXHuJ~vT.с%L} |ߗ\Z*?fNٚim=2MK'ʹexFgQ9WJ/uFupgkNI (уt?~[,8@l@J:",tɞVx΃pIڨD_}u^O)B]>nѲ\ޝ -l}"}!8+ec ;\=y^cZ7)nЅIU_٤fysy2I˜0E*dE1f@ ?/a8hC3.-ػ^U՜ɗ |FZn2Xo*CSJUk\rם_HLě8j' |²%Xg2>dӮЈ0Lo^<yK eSu?7IkD6 GeiW]K<5,·g]WVRAgٻ`h:eFpE < qtg ?$g'Nξz{, HbHJ^@H/z2Vn5H- rI81SZZn7ɸcFys9=Ob4M-9dfmh 3`4ɩ .U59?n ,4SzӀkm:jEaYkٶ>ɤYZd:{x=>= bMeG7"9u3dXV4m|a?_B4zӁ@e?ROĞbXfјJimrA]TsOm3@?PaCkV:@ 9~xȚ\REv%)Avfbm2ɑxuP|z} bBHv{M+Y`ۊ s{;u2*?VGHRE^v=dl2odlwDύ5n`G {(C`=2jvcc!NfY#5Wo-hcO:_5Ld^fu?dgfi Q$+o\dS!` 27hh<mN=s%+$$mBޅճA*Il*19ztu&"21?AnACOW/|oQvqPxcgݸ0s9l-2sW5;7bB $vF%{gۿO shP`?Ei;97N)$l-[_(p5j IVg<^a_qhI;X].4Kx%wvFeݺN}3X-CaDP."Ozqo|$yJa5!ԠuW 7/*Z]&„ͪ!#=jX7o".q &YڼN(p.|3:^cs{a>7nTs|c.)_6RY aK_S5.DDwTA䞟:_&#Gy0ΩngG4v"6|4 z Z-!=ck{0qSԹMTb~]u«)>KLf6pia6 #v+s)H/6F“mx@1oɒm[K~qL'5M ~c7Ð{d6_āՎoPDi2VլYοxBY(z60vU}y#퐿MZX-'4BMurwȰVk~tkc۪J*_b#ajK!%0fTK2Ob%x٣')\i5"֡A/Ԙ>̒?v(j QWܑh.ΪԠ= O₄g-FIm-%crógPY{HsPj 9JJFÑ015l6i\e%ծjbo]Q&hhdPExyb/ɲω`vY7voK¿!(c^u(!S#$$(z?eN}S{U=[m"=[EW暐ʪ4i͛M`Wlԝ`2a8r;qv)[ċmB3蜻-&8\"Msy 2펫"[n69xx,! sZ=JC/=ZGzYcօ{@Cd e' .K}b7,xXgQ2Ev_I Kr?VnApP_ĞFM;<$( B65G}Z#b&99G8߻yJ>GiH\:?aŬ4um)kyt7U!AqZ`juB^m}ԼW'z brrʮO۷,id񩺹1w $0y6)Ppv cnRg.IBӼb,8A9>/١܌$H̬S)Xxc(tayYYxc i(1f7~) X*+ V '6"v$?z WXQl<۶e2YjwTX3 ;bC$ _#0]j[}໓Ȭ)͠[; `:0M!(b?MF1,Ag{ 8",ktr<6osXRGjϥe466Tc^D7\#SPus[;40/ ~6,cLn ψ'y BZjlAt"/ᘢ>s6W,e:?CTh:-xt`2y/0D|+lcsF$+u&VfnIg$G)XI?`oob%LAgZwQN? H*ZIo|:#n:@SJOlkOљ;-@ỿHsֈvvH3|'XK w].*n/wZ{~%/1Z|]4еVK6)#TUfd2(Q-aa3v5 .b+:rGp+=\GE4X?3eyRuTחI"oo9Kh^Tr|pvX֌Y?E BЅݷT=ah USF? 沧Hjb jGAMi>Ј[3aELb 6Jh#|:(did#F+/J6EzlG=e\N\@LK3+=ŜO ~ ƶWH0 9)RN~o`q_pXPBV5f4~\Yhu"zwt AD iG3jHIydvr:כwc)N~% _#W¿ަfKHb8*uF4ҥ+nl>09%: +=qx$5h+{o7p 0˃f~t~X'(^P:y xU53(?xoiB={ i.>FFGm^<1F*mHb&=Kxbyi[_mpũ Iez`Y`Y noݵ`oSѪZtG&[F㯠V:"xے['+?:V)+DP+fA/RI+ O$\&>ҴbOܣ4ChIPk.@oj;m6;N t UyB?׊3햜H}OC O$~Co>fҾpzg&995'7(LB-'[k& t;%jJ ruj7q*ܽ?5i8jY߶&%yLM%1i}JY#$o&2u gK(t qKSfiP,πc 闫֋",u?`ȦU>F㕮᫬(*ݮ֯ ~ꞃ.|eWE~E^6\)*U/ ڈ>vuy.`@h!=9sTp +P_X[0]4wKŇ!,WZ1ҽ@GBZ (_*@WRq`~Y edd‡j+3#m6:*x[^62B4mv])qz; )<%}σBXb"nn;-<O{PZv,W-J e$22e3]FYq6CE@㋋{7xXsXoqϦ o[gBհ~:%a$; al MIKsL6ëxz)2>eJuU8$4k^ 3"1fe;)xhy\UX bkzmTR.\(- $TTVah5"xffQ&R{fZ1]ěE@n1Z/x֌-F'[h3EF2 nsH)}6ZCI@5YM僉(;)GbIv]eW8W ugaZțX*$NT"jw2 0Y~~6(:>Vt@p2NR`DJ6qЬ͓m/Y;ẃ~Vp7Nkp+_QQOhbU_a"D[Y1h1Eh,otr#AXǝB, ֱo5uO Pq`V"F v'XY̞1Tb | + J/ Rl p[tev8XX*Kb+"ҁf7#?Sd˄JpKr-{H AOc:+$I!N?BpIܽP > :yſE=d&4fYE 9>.dbfW/DYϦK~6D0ۿ=[yz+'8KO||ynJg`Ѣɂk' Ӽ>FjƉX*Wwt!>47Zua"ZHy@-˻ԇfH{pP 8V>ۛ(9[;(ˍ5MeI'Þ&$hP&b#PsjㆾqOߐ\!kb mzck|Yԭ@-}X ]{SyqNi紊~F:qO-LgҜ2a˻amjO *6 P \8Pǵu8?| *8dk#y< ^X'.~9H$_ UhGn3&QפvڨQC;X Sp>gY*,D*m0wh28/{ ?)y #( BB:[ Hn |{gQ1=% k̄k ~˿,Id=}c8]%Ʒ=bM\k7qM{P]{d{z@pWJ%8k{>% 1L]YnUFM+i/WYB\E";&9#*ar?Tp)}:i"s%d; h V827 G?h΀e\:|Br.**HMZ}(3;u Lg!ºub(G} .Gch'Q>Q( m3(_ZD6ƃŐt~UBy O!IiN_u"fJžXj]uh\{a#^OI7qj\>ǰYzf0_=Alwg9 7*K鏰Ә}k-P-Sea/Ѭ5-AúG:F'JD5Õ=nS9vX~yArRl䷩^gKk"*l[ǰn4->gʗ^۰hiW "+쇡9s?* 0 >Sdl'jhVJ-ڇɫHB܋,Neԙ@" qߵ3w)hTܬ,֓ezW,&^r3yT/LH ѵXu]N77Q__YQav`L{;E@ YZ