sssd-ipa-1.11.7-5.fc20$>#> ު뙱%AQ><?d   6 $BHPd n x  Q Xl))) $)(88@9 t:2GHIXY\0]D^bdefltuvw0xDyX!Csssd-ipa1.11.75.fc20The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.Tsbuildvm-24.phx2.fedoraproject.orgZFedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttp://fedorahosted.org/sssd/linuxi686K`A큤ATrTsT1TrTra2af4a8d0320e5ff372e67475159e57432fc50130c62c80a7752c56f75d22a0c8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b9038f1d752a0cde5bad6fb84056fc355b7d1a990b9c86a3ee7d532016da449f14b2rootrootrootrootrootrootrootrootrootrootsssd-1.11.7-5.fc20.src.rpmlibsss_ipa.sosssd-ipasssd-ipa(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@   @ bind-utilslibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libcom_err.so.2libdhash.so.1libdl.so.2libglib-2.0.so.0libipa_hbac(x86-32)libipa_hbac.so.0libk5crypto.so.3libkeyutils.so.1libkrb5.so.3libkrb5.so.3(krb5_3_MIT)liblber-2.4.so.2libldap-2.4.so.2libndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr.so.0libndr.so.0(NDR_0.0.1)libsamba-util.so.0libsss_idmap.so.0libsss_krb5_common.solibsss_ldap_common.solibtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)sssd-commonsssd-common-pacsssd-krb5-commonrpmlib(PayloadIsXz)1.11.7-5.fc203.0.4-14.6.0-14.0-11.11.7-5.fc201.11.7-5.fc201.11.7-5.fc205.2-1sssd1.10.0-8.beta24.11.3T T@T$T$TwT Sh@Sh@SG@SCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.11.1-5Jakub Hrozek - 1.11.7-4Jakub Hrozek - 1.11.7-3Jakub Hrozek - 1.11.7-2Jakub Hrozek - 1.11.7-1Jakub Hrozek - 1.11.6-3Jakub Hrozek - 1.11.6-2Jakub Hrozek - 1.11.6-1Jakub Hrozek - 1.11.5.1-1Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- sssd_be crashes in nested LDAP code in case of ldap error - Resolves: rhbz#1126557- Backport an upstream patch to ignore PAC verification failures- Fix a sysdb lookup error that resulted in IFP not returning subdomain users- update the libldb requirement to 1.1.17, which is required by Samba- New upstream release 1.11.7 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.7- Start before systemd-user-sessions.service and nss-user-lookup.target- Do not crash on resolving group SIDs in IPA server mode- New upstream release 1.11.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.6- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use lib in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)1.11.7-5.fc201.11.7-5.fc20libsss_ipa.sosssd-ipaCOPYINGsssd-ipa.5.gzkrb5.include.d/usr/lib/sssd//usr/share/doc//usr/share/doc/sssd-ipa//usr/share/man/man5//var/lib/sss/pubconf/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tablesdrpmxz2i686-redhat-linux-gnuELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b0aa6674a8e13f8f0d320ad68892b192c4794078, strippeddirectoryASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)!PRRR RRRRRRRRRRRR RRRRRRRR RRRRR RR RR$?@7zXZ !PH6W]"k%f@}|,p37oH?zx=3 z©ogjOݹ]'IP@w&yy7 Bl:Ť;sDTmlTI]5iM^l~ton {SUHWMvy,wn6 Whl7+Q Fu(|t]Jޔ< ^'15UVXqjyrsD-䷺@> l&DA%V-!|W7=Ek2!_<ƻ *lžW `O.Լ0˭Tcm\a=Fr[Ќ|J&WUd كTl~-v_gu dΗ™ׇJ^IroiFzrpg_9)܍ҫfڒOiHp'K\"Bj8wmx{ KӓoLf,gzH"xhW:ݰ77#?eQwU@tlS :Tw(ﾌxcnQmxq1&@ڀ= 㻏R =vՐM_voS95< ߗ:_u я:F({ f2*/.PB\v7 !>h7ú eaY_9? K=,"Ǘ5ik0۰٦V'&BSfפ%iA 7<#0xPp[ɔcfQT˦#_+{Lac *Ѓx d@M):B7G-*}4a2,-9DrֆUÂPRѷ00F2 `yKNv`ݥc L[+qx^u3Zxd:R#'qܳ7!fw] { y 04_GC'&o]F. p!s|L0L_W?=>~Ύ8͗^$D&2<;SeuʓM ?iF7ۢHVL,pOpD(w d@*ӗkPK4K,4@Kr'EUj_ŃKfLeV x~5SI>J5|Jے=󨱮=/Y!>y4}EyOuN,GF"*xޘI)kͪ,I1 TLW.$!ItIxŊv9Өw&zPOEEAw}ڣ)->Y@zȈ7_7 uP =FN̑a= O\k(x^Rŧ,n$}0_L 8/́{pQX麍SwH8CNV6&}KnÝ͠μU_$PFP;k)d~H"_DbWx\U%j!zB~\eG,=㐯EL&Ό$Y[j m`U~L/Ws)Y85Cww2Ѫ!u/]N1ֳu;B9(2Q]PVPvnM+leP}/'ž%QOWiUɣu wWZ?V1 7@IWnn.Q'#HF '{0(~wA \/-ADj4qҽ ٛ8csM !fbld^$V@T2ߑÆxhx#@1B= hw3*Zq$U=r$ Λ^X3 Ďi Smd}&5k=9X M.[:#/ vTA54txGA|9< )ĵ@,mSC 0VYsKחelgzR7fmf^ :U6Rb|COWh FEUY%x/j :vWU%:= t^&[< 2Q,~*pH3lB`HxTE(0ɗ*QP8^M"xJpa$}DHH|ШbQr.e2ahN*V/³ QG3[+-V X#ftuZ&$#lbSZk`Ȩgb}.hm7b`( }y77.w (#4*m'Hֈ61TPOSlj8xěV6'Ss 2AzK ri^C]iH\#VMn6YgkUFv3y`<<wVďV٣b6ۼo uL^!$fڭ-؅>Gkb@=V']>%DBl]_JG%1僅i:DM @[j`BN"=Q}}^Zia?"x nu`:Dy1@WZX`k@HKH`zKCx~)6ҶM$㔲摁NI/YQͪH云:LYG[ xbz|E1v=2;!غ&G1eKpN0i׋r@ە Q6Sb'Ǘ[;T,=g(>2mУ kp@ƉWu;SYÞw%ǖw9_"ojJ=,240;k$XQolN0 ?8Gjzb! YH@ƫ&(_V+XkT.Xr rm<^DD#ˢF 5{W{ӳpb:\L- RƎZ@gD?9Hgz"~]>Ѭ'>AQaMPJoEQ3b!uC1 Krw9ZR,s$: <-vvM˳=F7~T"K10eJhPo+L-ɿ. qw(РE$Ԧ1 #xmkе:V-,lgQVҵYƴu՚uNd&dxK@v ڑKx68 iAon !lxVC#D[gTaPB()/,IY E9i<(s}Ob7_6Gƨ2Xg5VwcH=ݰ[/l:ƹKzEmZ/ #6pJ3x5'Ih¯0'0E4*sCPD}E./i,bFdɷr gNj̖Ef3IO |QQƆ׻gboQ͞PS (F=ds 4g_пB0"RaI )$ }SuC<̀ JVҴ+qoVMY,ӾYG3= s>HaxB?}tS܈[2gXx )Tv^$UACߕg !JEyϛ_9=0Y jdQctO-G>62;RUAde|+w89O桞(S| s Xb H,Ic@lJ9ʘdV"3H.N+AnR{j{Ͳ <+ek{z6}z;a-#h-WX}֭r P) <*L?>:bM7.sM&H;YN_2'95"0jUnᅀ9+ -Um( T^~QsvM!y;#m%Kڙa(EJw&y "Pz|5}j.GC#$vs[ԭC%WMz${O.'uKzu";>rLN*BmO6xF)K1a'(wVugKϤd gMp !1/ăNv^RCI2 KUVϋCyJ𽾨l_Ikevf OXKHֆWO vܑL U o/ɇ8lPL* g`Qrh>X}ypy߲UW]giTsrP5zk|8*7I9MPr 3\ֱF _h7ӄݩt5,t?ZuT?بpS1E}̢._9@+jU.c"{p1ȁLN4j]]aMgU^>CU4`xY2.~g./y@k1 r" ?Yw5͆5Na<\.& ^FO9OJ쭤.v|_.WCc3 Z|W Sr?]@x_1d5gʼu3yGN03[M̦=ڷ yV@]:MHL EjZ2rԗfL/%Ҝ9Czim򳣐ո*\Ré~3dM;R:eh6͓А>woFOrGeBro2J4^ PmRgh g(hlP~u#ӡ3C4a .2y)%cX"4I`2JOT59HjBسhe߀y@W힦$nKڞ2HǺP3;V'Pu>T{xn_#I_ 'n}@~_oM{Xc:C4D. lqoTAca t$vpZϷ @ C件|>"LIո}Edef@GPKdu"S].@BtAHCiHecd Epjԥd=f~E݅A*T 'hĮzKz1oCȻA-doU̱JhJ oPF(<3%sJBofS?(PoQղݱKC[g+˻ K8cF*^ V0?ֻLJCIq^^E uLyu#Qh+zQr˨gATt{P83(3/fL|% hff.7ϲ℁28Lۨ2iY#'+ٝ @ 2P~K ~ך3fJ(4WA ~gҎ?!>omuCykhry ͩ"T*[zx2enQyӅ>!"2|(aGAo2f72ʛ!sfIӑ'jtǑ~luFylb?» H<T"7HQ6 F!(Sa;&'.𩚰a~.1֦%H׳ X# _%|K%ջ?/f?qKMly+7k5t$b";cC$"uWdkF4 Ez<*kWW]ƁTERcPN]Hy»FZ7RP&C*`W"nkM/]W __#* IX]>cViV\S@6n0nJx ،!AO2X-UcW4R$_9!^.ޏ{)0!%`~;)wī!RtW? 旄=WȱUTusеfH甾wi`Y0*HZT*oi&v' v&Z1^Qk'X*Ьɉ.VcGpiM-IG>Y >.J;-C̒]`HJ{@sx{*g\ ̧QGʟǎ*ظY$[EZ"W? 1'6q fٜ4rRe I{4 ؑ uG߫t~V}C64d7Ys!yK I̶KgÂ#.Lx\e}U/X'`'mW؍PmkA fuتOӁ&>ϋrvM ؽ pgXV’* 4b0K᤭t)7IcI`iJ5bu":iG})[f,dMH& xޠNi%-J6Զ9̻ƞQj%mz쿫,[ClNrƠ\kw!lqݣ꣧95̶ zhn&hw*Nca+]iK|P, 1SC/M8>Wɍ($7xn0#+ *Yi Be<ݖ׻<.!zѵÖ'DN]MPۏt7pfŨBG E܏ A;Z YJWEfL_TAQdvӀ_ >yɴ qE#.d' )'}Cg8I P{.{hlZU"8M7 >f mZd?zrɒMj<;G1o$z~wp4_ TF'b`.BDPK0cܖ&ﰶÄ*? g]up[WY^@P[Xج8Q IBԐ(>='Jr`aqGڠ;s26=<\iƚ^zrȾkG@G{|\ˠ s(th&zQrC2D"31|a,۟^p,H>AnIek ,_lhKAπ!0fjuUg]]ၙ-nPmZjN37R[=p1zpJn _ڟH_D,y=MN3"9ܱs 7½oCA*~g$6;TZ3.Ops.7B5[^m-@pND AI>R 4P.ǔcXj#w.^C5Ϫ7r%rCZm:~e뢣I@;ܫF y'D;P+Z_Q +:9AAO%tU~촱C7i:}\s HV+?Q\j2ZBsd&ʘO vx6m&YNyW&C$ ecdigp22LG*0uX ]zҔ~ln:_4*SMlBn\NYAPJGNEy蚪-Dآσ`SnQ4H}Jxjsߛt4]C K j#!!13JjfM+ŖҀzJ8_ N<Ŷqb$a}|ԼL<%9,2Q~I"2;~\Ǖ Z-J{dSD,ydf!aa+j_U}]t;,wqڰzޕeP|:{H1, rf\Olh0a29- rJjn+BĈs8mM4 XWgUx`$qAƛ頾jc ԗX[o`3t)"PG.C )Q>;^4OK$KCZ TfE*?-p8n@s6/k?Zle]=/@G%}':;y3RUEMظ"g(L^&LY=-z?kz۩_pMs#ft<"Kls*\3, ʷZ9UÜA:pnJ?\,t@X@I є`.[s0m3`;#QV7CUA Ńss=Dy{,-&(d۾djg4f=M --1n ~|v*ΗL^:"oE_Z)"=;Jޣpa'6"սll5ڜ F5N|bQ/7u*Koh/h狽fa3 _HZMsڿ9VpZ DnyKSn[0- NiGk* fv&޸߅{kNM!8XZ=܈mdm #^읶`?,|1TF[5"^7P7ccV4 D&Ae9򑎋Hi .h-?r`3b0ԁM%DoT,Ktn[yxTs@,ܜ4|>:HDwqj&xy%UPλ{۝ UFUVŌBVNf\8%u@hs91yi8 p/n#eVW 5%y.L PݥTՅ#Å 'i"3! f tˉ,dE:W@@ǕOe0c|wpMd~=Ẻ s 66.[מ{bac'{[2 fdum7a\E2vǐ쎇:P^TlHn)qY_YMM̢Bnt(D)I%{A|A},1N*&ʟ F\HnֲĊTJjW"42%^n4 AA _j}5Mr_LV[mH5뱥}@i)96L&t..eQZl Z~hMW$S_BUwC~'(WCa$cl36EVC{nR}8vnazTVĀZUD ,?$OnnmeTk/,k5o?O抅nFS_Ǭ4b mj9;eXL&GKt+~/f:=_\ȹ 1j}CY2ϗԜKB8"y,oR+pnKvȜBڴT:;,}F =('j-[O7ё!6$(ܖUA>US -4CR9qBȥf_>N.t9_xͧQg| yIM/X{.--v$ӉW4,R=~%>iqs? f$ n[`$=9n,kc5i|:b&R,k)< ňR6~>岲[b#d ?qF2J g$֧SXݴTZ4<752V hUsZ!no;}=t/2}b.()MnOMml~.K>D !φK *A4M'LGR7q񙉾I=r%LP{:=7G6Oc:s} ;,m=X tAk9(l.Y'/F~+u B* Qu0Wo / 16l[0$)cN.ɩ!SW= YɈ(j̫=%x E SOΰ=9hZ9nLmhqJC`(xx4yZAhFtN|m_Gt(-4_~%su\'TwdWu&3 ~<- /,#Ppe%>;V18,ʟcG9}6]/$DUA'Ķu6;!ݿ~ut‘Xn˧$[B*\(iܕwd!07N.%^>\c;sE_J S๵4vl Jl N9mWUywyY-i#`oM pu:I2!}~ZWHXWz2lq)bL,y"kqJ<  &h o*#~[`RD J/QNL ,ƈ}:`yCI"p" ew6{t?g[6:'1흿}rD駢D&)e`yUCt͎ՁN=T&>$_(e{0ÍzbxE\ yLp,#@ 0- 4_C҆3qʜNԚO+5lTz qOu!')OL|/K ͎TTL~Uu>Ӊmd\!B:J\d?n!F)4hFllĈ@"0+)9:WJ"ypk>EDRC]};uݹ9*tW?B'NZq $&+w&LSqyL.0ax"/e ^Ix*%y{Jvw G*aEƵ҄G^0cD2S6jYRs^fތFu٥ 8tCT?! 2C= G' &ZMflSV`B'\>vʖ)bjXDH[m R#.B(Sz_< KdSD8RMI$ơ؋+=%1FxIgik$X~4L%8h ݇zdx6,צ͒aC`c.ﴽfՏRN2}aBkH5yi2iwd/]NWl27 ']QBݶWkXv3oX,;mg&Eڄln!}~d]c QHK({ LTOyP)oXW#r̦'f4v=L4Py┺.sR fK |Tn/[]7W|޾/'XT¤B"+GښoWga9iwEp't)>Eu|[(O5^ʕ (OZZ)iZTz0OY!'£l/8¡Wm9&ϽC Ot볮 ESJXO^r_H`5Fؤ<:lGku`(heٍWɻvJj*TOmM4 X88ഖy|o=#2tz`48PRb!v"">m"@q>37 wJVt (}aU+ieH^ȣgY!4WCCр9bR@ޜ#Ҽ> L<1 hXט͓_[ ThC Z8+'w/۠VL[0!ڪ/ Jn* 1o:VKLN @+$nF )e{]%U#Y5G64z7BNŽ2Y*Q]%`OC`-MyMQkͽ;| gê0LRt z?A[53[E{q\ SILJ l)>[fw%1\/ujY'9HLh؅;/N &lEA[1zUOav VW1U wgaߊcx͞X%p<_X|v~lѕg8~4j3l/o)9R>0Ž`P4Uo MsQ@ӣwE'jS.=tQ0L,ͧPꏉk Գn⵹98<הoYvN4nOӊ+|+֟ @Ǜ[i+Ys,ܖp:߂vc%G*Z@@"Ԓ>-$3} k'~Fb]iscJ,5FԍdU:c U&=) S@ WSg2Wl*9@\>+3 W('nO-Pz eM25M sz=?h˃]UnV`OiU纼 9>dtgLT z=hbmL$@ ZtؘrXUu922;;JY_ˣ[ߟ4\HPA䍞/r|~kĄ#0)ƓMJZsJɨaV1)FeTաߋ?û%6ʫh'F-ϡ4.?U3Jw^0 nwh@䒳0ҮIFLAsOQ'.\9Kߠ(Q&1O ѯL_Lb z-dkz(mMm o2?u+f?kCC3w`eqE>lG>瀑T[s?VCYe#(Hdz~KMf<|*c $ܿ<))gqgIct!݋_zE+,T/d/C]2MXhIg ve2lcs0a2I}ڵYDJ-Ҵ6nI.vI{BypqF_XGnNd^CA^_'J}WмGWM0L Ie\sy7*ǧlZx4yp}v)?Y<. z:w1fGbfTKQS:{V?.?/H]R;H)Za#Bb&5(&J۝7Cy)Fo<3 CMXEsn3μ\p>7X_~t#vBA%?aN٢*fa ɜdm=G؅H0"iŝS_lP-4 s#k~tY#Iőe MQp1-*C,DNsj4$ww̡ uAR1 ^;hDV):#xn кDE]v8zyc^~{# lJ.[H/,mRP7pk/uUW 4j`')`*?q("#ah'h Ⴝx]^f}F ̞r}pIdLg>҈ejlv2ixt9n&5Z.圷[Z=H&<zyr6SvmW1x_ h9Ϫ0!Sp;aheGq^݌zb#0r$^5Aɦ[Mf=J6Ɲ;GG l] ]1þ!q5J;{HфIl疍0|ɝփ6A$wSbd`Y8A/ʱ[(_pEiCuK)]X.9kSh&;(y :! XClc/uoo-8i˦5EZyit&U#)AjEbB//LWea/}>⭮7l]J|I^Y/. c t5%X7I㉘߯qW`x#c>`` d|ota/V;8[(UÂOFtL F ϐ`iVT\`*?TvxmG+X{RNG}sR;^3ޞNHTxA_6< , :_l;KhHBf'뇖)ӿufrF*~!RTzu7<3%>+ P0K/ !MV ?94A=9u,5w,zKڸnn0@'H@.o LN0  λKW9}$WQHŗԗ>Qc`ݫDYM " 0 Vۘܠ*ƇnSy gz5Vâ82*v/)5nQ-Ci3|In1d(Z VK#z?U_E&1<#nx/gЏe?a9&:v8 7O\Fё%̽![4,ëiWDa{Jseξr;qꫩ2R]n peB8b-N]) jh xM<$wBsDUsѴ~JjG⬽'n5 >4CxLF5iًFMkZ~Ez£YF]:kGbR倇;[q?@10.!<$aV_Q0O1CDf _mŔd.?nEk>UNcv,jc^P:ʂWUxń^u-c);Bf ^F™BW"vRK yF=#Id=V3tZR{Ao)I^heM:xk/c NAOw0ȟ5&LjV Dj+t!wfE vjKzwrǀ-O«c.y˨s(ܠEbc0WG@&|kh-)άn}89c;H Vr[LLi;gpF$9k|83gxog]CQJh{8."5(nby 9MZ/1FZhX`m}w{Dk f2z xcܥ/'+.pZ"1˯sئ&]7; =zrBvX*"`\nןAB63U\t@8WcW[*B"/rHkyvW1_L Mh 8V #G7V'e>@ +w88aPRM!zѼj|W;,>x0ywUQR9v;~Ok`N&/B##*|r[:W/wF9o+\$ `j0O8oHy9'"BBn I ̙<{AVns\!vN'hmqQX#вv{H 0b'7^ ,3x\[|cJR ,џ5D(%_s@ڑzZ0A)3U=oҵk ND^OG<3"3[anEW#tB@5L_36ejlc61(=":G!l{gm`~l5}< :{0.͒-),je+*xu`0, 3X=B6M\+5[腯BmnqBjoδzp"&`M WQu$/}J[K4š+X=Y3sdnxY?+L?R xkD9"5RZuaUpUh}\di?p$A = r"oGQw=5IrEmo;U#adm$ Cвne=GK)3>]B- @yfk7~16`j-w$W{rU }[{P.4ULyۄ--A[ IX Na1ǰV,(1Q$@n[U>f T)ȴ~b/mc.Ws!]%X=ͷA([2]Xǧ6UbY {SjG-|gE-ȖE_XQ.Db|0+EYrʑ mi o2 mK7H&8C&H~Ipzjn_NX>Py}MLxus˂*[N(aɒiX*~ͳܼ)j=X2(vW]dt^ ]6R(r\KQWkm.v~_ @/^Ci odrk-{nxKZ@rb+?^|{KͶ]RA^V'lۅ)@뗎RF!Ûs$+V# WI̞"#Z-pv" 3g}H#OrƯg7X1u@>}0" t^VY jD܁O+8/g 8!P87VG ! `Ԁ7~Bf _>8bP<3h]kx=Hs9?R8=_\ڈE h22!.wԦO0zh)._rD w5ZYΟ&1"0\jTwH"2<|A%)JF!Ao^rLta %7& xFºaldD͌D)X>$FcA|()%(ta73ϟH9fܴE-q+K@Y^_b^gP ؔ/2r_;MC}*`e'û }e=K)U{߽Uqaɻ`s24o+PcF,_$](\TJbU#eMVJy4~?ֲ'OT`[AUL/(M9X[L80\6B-A5BU:U[Wyc}2N{prI@"+Gg.9[͂' !L垬ɧA vC^d)-"Ded_ONѷ!4*g-E ݃wks Aa ȯx(${|u:+[S,'1uCڢTE X4IQ@ŀMN6!2Lc^7<8;M_[ > '*a+Q?ƌ!|FѶi.7kE7ƸzD G.I;}[-a^NQ[4aN׼pVi3髝@ m!3wbKFQRk+'O >z;s"81a98]C%- ܂˺g ̑˕16d"Wkz3j&8(:E54 4_I5m]iSb6gL_{lVx'j{.Tb ^J`^-́s-USC;1>:\/J'vZW:ehŹ1݌)ٸh\ŇWJ;dhME>o|Fz2vo|9LTR-ef0SB_lR0S" pԈMZGK#=%}a?={t1:,dLY|1д+H^v5YVw r/pWe !F+qjtшh M^Z=eJolyǸ G BBavbfLSTea,] E>8L,B}.?ny|.7-(XŐeȆ4n8> xܓG`b0;P̆ښ^y.9~lTlY*6dH i@MМfw¯vϺgR- ό xj%7)3$3%B7ac 5Dw]`]aybxn7<$~ToziO(VR&U˗wbU3Hm,{r}gW(uΤ*1y}e^d9D56TnĔq᭯^yY` ,|ƦYFTG쿮+j~u‚#8<M4JA[S| %ìE;D N-5Y^bnmv=\]'[3#Zcfn$ɟĆGIi& 9TAn?4^:]Љ30}˚{_ m'ڡ&  k{IFqI-ʕ8b'*,Q)GEj. x[~:9~'r \n}HƺK]dCBtFJ= 4Q܍%nAX񉅑?LGU8\ᨤcvzI\;nj OőAQ<\%oIJ.yd\o$>=Ϫkh}l1s/ _MLFJ!s շ?ےd$l2H_|Ӗ$;6+ɚ˰Oj >l\5V" ";v/.29 ,s@YFWn 0hn0yWw/oYB\#E@4#SR4hJk8?Q/&^j$8vHLKiF׀!>=zw3>掚M_n" V 3F p++ծvlyRdڹ8?v+@*5tHIy}"V;Kol(k>e oմ 5ki:1w-*sS}&8XAz^'qh5ư ɜܺP{R|>s9sO1̹x~-;}W5ш^$%FqK5.|R@-sk+;vUαV?%$yN&oψ*E1aoĽKX:P "s|foBld,y 9o6vGw*fBQL+l RKT#9B-6宏 (WŮ,a+,n2Or"%G:JO4\p| FЅ\*bQJ?p eA LJ?pI3U{x_V>q OG>wzYs{=gW$P6Lܺ #di19h%%Qu/DrjVh>L.:[ȍs*wV^L!nYݮ/˥I'AGAx< y95` a\ ϹJ#I.'ѪCf:>hj]dGկ)XQZȺdX ( 0Nq4@zGYFQ{ŋ KXiTLn!3jKuR+q VcWy(O)WnI&]E(Ol4jk%SUۻ<6ِ~I_l &\lRaeO.EsMF:tq  .!O%@ )й e΢a[#2B__Ch$55XڿRgXv$^/d/)PUM}}? ĩW+͠nvdB,Ѱ"nZ<䅖MˣQJ3~@e>3` юCK~Yzx lӴ<nǫJ:ƬtF2gEHQ mYˊ&:4ZCUV *ɗ{]U/)9*ol!}j,ń._lH~ﻝҩ \~|1lH #g6" jszlTVK%S+]q$qGTc x@ F0C斳_㜩R` u=Je >Z+J5Bފ4sh ?z0ѥ;"7tz-fhEAl"a4بTkp@$a -rAi$iyamo*}2Ww;2rn% 5vъ0e!`P{@um6nz = {/X.gS }wи KP.OT 6o3-Ǘez/sXCB݊-wsF̘][E0U}b`w[z5SkP'CёvA@쒃v<1l׷p,^=>->;Vk0ERT 8uJLHz-o##*3Pg'ibĽ;+,΃  @y£ڤs]+1Jesނ}0EQULҐ%yO*ŝp/E$.TcRT7z#Km{\[u700ogJ_G2?7%:m4~~,ĘBףc_ELS7B)E Z@k5M8x.oԏϓ^^OrA4hx}kab4.v%Y񃋘ly#zzi}|w*,J d{ >L>B^A]շ]UĔSȈ'c-t몾$d"d45*sfo/WRACczv./fpoʆDdtDCkhS=F7ڬ2+k8xv!&WI.T u.8"~jl-NMf.Vs9K &2U!kmŦ*sryL˛O|ZŸEV6#^ 5TxM>Z-{鰯l(M:_=h^ {ʀM'#d V>3@y7m4Ys2$[_vbn ʬ&Iw_f(}K(7d_mOxB;6GM a>ș=;)k7](ӼXbd>Y~x )yA zJa<6ihl,%#Y$?QdqImB#Gu~Fڣk~̈́4f X<9!87_L++t7&&|?@G.MG $S®|ڼEPɤsV^g[艦mag[ L?r(VW6*Kw>)%Y*QИGݼ.Q2, ܹ]Vph4r#e I"%;"h^l]$4H2MwX+)5e[U c϶rW]}>nj+rM#(G/"AW)מ}B]j'{Wj@bMyܹ8wH5ynA郂7CN҈ܷ\~mbABA=N:GCM8<:sNP~eO=;e^N‰cc .~Q sDhOZ$1yL4w2m&ڇ>w7?VS/ C|yZݑ`ilWG\ĬY"'{k0t*2f%$aXླྀ ]?Γ8XCW/+,fiDoV$61$u/XcNNu/HL+wh\7?{q| m_M~dN_HilFi!4q ,zqW 76. R4Bퟷw w'@k{G /\c\jR*pZrb15o$L[N} 4Q'1ǗAfPp{\ X,?˲c~IJ@vM8$[6>m k#iзa ~,lv +oj ZR;UixGz W7x6xudpjtsWʳV-CL8[FlU[*OoK"z:hbآ>cd)*й`rO_LߋDP>Hk鏓],o_F@R!uQm&  S]+ y$Ѳ-پP26kyiP Q?xkw^K@)aDzC⻍<cSnQ˽Ȼ A`8iJgyN=wtY3sH*Ͽ+93-!^5$m/"ȴE\Bח]Zuh(T`%}N|E8_J (Q6dI$IϲQN?%[jv oaQjA`~'`oLd:UݜGǙr"d//reWe)ˬo, ԅW0#ڢI w+™ތq&?5{*J<(E%3Us+Zz/Mf󚁧,W>=b?nߏuЫ:'`$Z*M/y5}pnLɌٍN&_Ux #XVJm n[y0`kxim+62RIcrԭ"Y٢ݖh;ds%>pD; k:TP 3&@,(A ,iRm 3/Mzdc(H`:s7Z=+؎8i!;q{qC+&=C\w)X-WR?t /p\WY-!jx`5, մ6nU/3]A#A&'[\i.-mYA~CIq]Q(pN`yՄTa T%%3'G$𝡫0W':h@{l&eNbN1:p`ڊ VNPc_i_(/w*l/6 V?R] cH1C[:*mt{ 媤֐xiIg.ϖu]7IU6ZR"y4ز*x%qb`Q;;깑IWPA- 7Y iiO7c|㯉^(6ǚ=bR & @z+9@ *b Hj_Du&ٱ^bSdoݽȡK׌eca. WG@($#wfɿg\.^:JƸqՎNby?+D,@P8 ?gfM wv-AȻ!ž>-N"@zfݻF9X o.xc+(.>7#MԀ*& cMpvצ 5abSO_c9n`Ml y$񰣀`pSN j@tZ稅ѩLJ}Y1f61 !g̲E*xFaQ;[ڟL 6z.<ʝ` F;.Xi"k=&N.`ʶ7S99Mt0vak5.B¦ԑg]2q), =|3('2$P Z{#A}W;p0L5[}(04A je@FD ӵjbѰx\SD2 (3'mEUjԖ0}.QȎ ;6=Iy=3|rClJc0t&R /q4,6 T, |%lJ& [9_ umDլw{C߁黩OB˴F @/ȰqOFf])77t0>8a!W*oߴ3=d;wphk2>еĪgG\ӫږgl4qS-l']k Pb!G6'TW'rʯB *060[gN: % aGӚ8{g6S6A |Cgׯ̺C89D !>~@^'BKЩŮr&?4ҐAIW>q-me,^#Lww`.v ;`Fjip|?^f$VB d+ٰ|!7bL`r%bR~A({"Ѻ4Nq %P׭a,& C^V~ 1Tp;҉44˫׆OYvv3:?ΐ!H=& qJRlr20w7U3b<3`%Et;Ÿ. ,:/wwXU ܂Ak'Cy Z +arI^4$:n C+,M2d+ruDC Q.B%WRF.06c[6 ~oJ#Q䇜XWB{zq-qDO`UGQƜM`xULKL:#~&R OVJӑn7cD#JX?D_e*@ܵĊٴm5heՠkdJz"T |ځOxȉP '.~ %Q}?T[4>IĎ5vMJo%iDepsWץtyse⸊2IM)mHR ZP0N+MM8H#fR".pZtܫ{qZpLXHX^SzѲ H:ﮈN*+ڌ^O|B[){2sSdm[)Z^U"BKJ"Ċ @x! "^:kWdUT}]uZ&֢U1~(BO %4 BdXKϨq( ]TU†I4ѫW<cw L?Sj  N,Vؘ^9\7'a jNM09GbR:Put[]`4W4 zDx/œtќ&;AdD@39|$bkfDJK>o yQeI7M8Kq : *6L/a[j~ .G.Jg~AYʼ㭯?vR)J蛵%7xuX~ mكZdAd6qIac sʹ2qGkYc1/wF.{xպZjLl>cq;-ꈘa-rЭhlX0;xȣ] q]b:_tkJDYc2I_*"\N~k(9p28j6lvCǜ#(ur! m„y7'|hG {'47 =a!-3"*gWfh;wϓb 9Kɬ$d"o)h?F]K-(,%cJ ^q8n]y5o;{kAXChazW,HܑzBy5.uvgԷvQmBkWֵW(Xmnj9XNFR=?M{lk{&0M7|q@’zc%jC%K?+q* ^c zZ. ߄\q{oryYG3ЊjZIevx V.M1*N-*ևES7@1{ڔV.x}}9 nzIae7.*@3W|xˣf@&h(:74iGP 읿oD{>^ [ ]ʺK ANT٬uOߔ׎!,DwNL5X =/q}Ҏy <>Wi'pUá+"׷"&;-UL2;JUi <A+VL۴k})dV 7I.D XU*i2^&vNb ʇj;XzF߫l]xM~F?u .5aBLJ- Jԋ5{ "!"Ms}햮M )kUA(S<8:)z$5fΔ> MM b Q)<M :Mg# l8S*KG Qb蜨[Z:Udj=G!N?mÛyHs_I ao!ZD D+slOm}7Tuk2@GA'V@7f+ۆBs@ ӿ2.2/g_O "^q7OSZxTլ?SGqO'Qs|Ԛ9 'M.5zr_G(N]P!?| \n/!ʎ`9\uz*? 7I'^CT%ZnFTͥfNP\IwO 6݄0ѝq  )f0ܟ: I389wǼNrTPdr~ fqbGg3μ[wliJl6{_7Pl/ X Y_@LR%+lBA^$ q^K#QL=~UMx/J 4!߼؂0*eɶWt:͆&A51I^Rc# hMtnk@ul4%c5v/{%ۚE Sڻifŋ(1 K0L&"p}2./&%Qy^|-A\ e cʖGUxH+/F?YӃƠ3rJ%n+=Wm <8:|x eMQ8 [f"$zWyA|;pIM6l$ sI9 wd(BK1HA8`_M|VIc nJL1U&qNRѪte\j"ÎhdMbW3jY-=c0 hvw[ig Wc)$6UN$T݅`jxO6Ke͖L\84M7n^9(6zڽ9Q3<+7?,l|f*C~`C+Ȱ~œTA<}Af.g}G Jx#j01~cqi%إS)ƾ S0z較nXEkHa5Oˏ\}c#E8yeU1T5:wHiw g>lTh@ُO}'UZ~ߛi.?2t cA~~b*|/R#? 98m1EVCt%d#ZQ\\& 226-9Aw< t1q4Ew: j%%aԒ08x ɽ4$0S#YU ƾ7"tۈe$X }@8OySZZ&QA^T6grz 4ҍ9[0S5߄Af9XsMF~4tCRQiO\5^]5}U>;[Wzuy\* *l X ǪyjOKZVzǭ +JpE@O%٘['pmR\T 2٩d2TPgJh ] )~gD']"cnt5zF-v4ĀSjQ܄EI&fI([8 Wtz1CT.5.vڨzϋ'mA/q#]eܡuYFME_.r$vyPOD:MB d=%O4/ky(NtV$ÂߝG,"[;jH q2n#vd@{ଷ><)n{4RE+UNTqAO/#/!PJ}]ʪJHSDC0 Vqh~ɀ.d1##KN&Ruz U^wT҉|@HV䅹D;Z+`fSq: ۧ3BG/#VQu1XY; i0޴bw_9:lGF3V-l9|Lć-`GM$njoy)jS)SxWv\ĕjY}GA"n06R@a&W=@ = JaL㣤X|sq\<3^q{E]iW|T붂ti zd:nVs+ខɓ,9VʓrPyggkr&XH*9j:V򃞎_|h8f]u,c1]Jh5t{@ BӡͲ_aʰƔMK.0!]ɍ*;e:'츆'[!O;y8USJ} rG 6R5lPϺGp2e\ci|g&tl 61WX͒I1Y=m'p[Pڞ@|k_d.M@FHp)`@pUNG~(fk^[ǡ6Bշf㍼%`LͤKbM<"}]͔(#PGwSkEidwS*d\~}4ʥqֶ+2yL)X:%gw҂ q]"/YLKPOF,#ysX>/ ?qALpLi0ۛ~$-_y) 墖p7ZF<@v9i$$PknWd'-ޕ-B>K&B0HS͔ $9;.؛[V^YT{!Ȳ$}%]gRf𶣥vnj~oÝck˕nmCQ9Vў ؟.aYDAHRS߂iu%#V䙱v+ O#T|w7Z1T͵`B{Ul,JlWA>Cr2ԕ_xz%7}HgR$r&y9{fv Q#' gsiNe&"o ؙe(#rR'r e49Y~>$jg)ƴ ׷$zz"י8Cv" fH-S"%?2˫hyి\ {I$ _:9 tbOo{H 9Ci(sĖR(|G^膩GmyP6MCY6(I NJ(W2 k| CTh)LbpUli4 &I5@OD`ndWPJhh>\ ! .WD' {%m)*L_V GmPHu)˵s7؋[]tW`vr).Л0j6OVߠ<Ӡ+c\"(uA"aAa?uOpٻ!|ُ9@LrHrZ-al.%'m4+]cx&ܨl`Z]%+._gӶ+?EZ"M(|~2D}-z_!'LXe# ~h3kHu Q*2']͓SzL JX]㮫Hǩ+8-%jJ`KVVyp ZԨz*.74s)®'(LOW ? &hm Ns4ox"LY|M9fNE19Ӑ DfB4i29{|sx~JLqC-rwfY&\Ds4}uk7mL j. iҞ{Zg6BяX ι\LW*vr2#?I{&jJE TO (#p擯6.{83G(3qje'^٣ea}B8 Ms%9AE>^ {8OQґ R.Մ {'6e7k>6L%=g8^'.|[(:[+n1utzTsxJ/qБcnw QflInjP,ȳLңy[uwy05ǣ,<}SI4uť9yW.5xo<+9N^ _% 4)xlQdA_/2_\LH\ۂYfUoi\4Фik$6ɬh a@Ml(϶ky}1~VlϗUV! cD6E 9GThΆ7h,~sQs9s'8d_P6fr-qT^2 j9g=Qv kV! %`zty߃8d}Ș蘛o8&:@uȺf-!sGT uܢ:wqz uhyk*Rumd}䦟; z?oIF*U+w@4d"k@xӔx!އo4̊VR̵Ӗ\rs), >qFhF_0{.#d_z|$:`^N;^يU4z. ߋnߐiF*X2!.STcZ& sόwY2PM,jfb= X!!Hĥdȹ.ViK9TEɎYC]t ^\j&kUaѦH'WU (Lx_ܓ!B^C,Z{`'p0~+2RL+6B˄מ[^D^ Qq@םf^bY='I̺:F\}Է]GHhb3^l(&rC~UpR= Dxf-HVST͕Pe#XWV8d)ZU߯];Bͫ'䄴|G WϱBڷ!I5Lza 7{[0E<{bnsNt/e:#Ye-qvLqdblE_E ~)CI4{hyb7*Z$ tN<5" l"͛zD"^<GW2 TO =1$QA4l@hmhGDNd@UezS2Πdi,t=0f%`FOG_?NDE\Va?/EwA;Q>Hs 2?;S̆QkQʝZf篺Uuw8=AƠkQ|^?7RR*÷ !e573~qʶȘ[]@d1~D *A3~*t2g1} [fV٢mQ?&O1yuY&ntmt9O{v[˽mHe$og|RTlob1Xfql<F l]LVJ3F.,).jˤR\:3z,K/,O\8XZ#?[QlLhB\幈LWD_9g[&]|)P`"{vtHV̄ÎVC!G2 5pbЖ=-^e~w-;Nit8/ҵ,M ~w^2K.JrDonܸgA2r !Z/lKxD\'"Jo:.u Y@a!R#"S ]] rG0>{_ 3eXcskwDuAI3J.VxmGJS;k'fRtRYSWF< 9}JSJӧҵ3ъYk7q!,,9JYlyf{֭_vAM4͖b $4.M9BXO{fCrN aW b 7Hgjnh!niBͫN>{@Gxؚ/9G6?[;&_óPx*x99,eKWKg'n`$ҐNH۽5]RzhЀ5م~"˽lci/-fѴ$r *T=4/6ǘ L/3貜0 s,+ТF9Ç>U{L.z_g%)Zm}-<>֫6۹Ķ|FUxے@6O?Ϣ[[iܺwy?״;Щ ZOf dGw8F拉]Cd0aTbP7) -Bs>/$kvWvLv2x+0Q;ŘJ-v8c""9 ޫ[wөP)< vzbkej㨭5#(SmHcTZR N5ͥuՃdl~&S"i:/7]*}@a֨C4ȧ ,<>fu|2퇭5ܘuؔ 4 )\9$a $8FSdV$>*6F"&nܛ=l~#cbC]ƘS]z3we{QiLlni=ᚖ+Xk>̉#@k-"m*ʋӍl-[aWadm!_g~~d3,>n<~~j GleGWY7|<m{.'1zG_[~|RTh}yCaRȔِ<@02-WL/`44P7߳cRMI&n/.2,@&OGQ6z*Buz',y!> p~+mH P=-ڟ?)ax0RmzAGO=J3$`ke˳%Nu+D(h(Uyk|%ˬ\c c #(+C] 7ZOh٬?9op6PvK{2ۅAADȄ-fS7Ίkߖ^xq2XA)T8KQ f|3(&ތVAfEZ C6Ȣn*8=Xm(rv y_r f~WǼL_ZC@7z}B͗gdW\dq8sҤ> g]LnJj 檆vY+cȋg׀ijYU"·qz:zR[#Ȁ@ ]sBQh-9AoK:ְ|гs2ɲ^#9b\c>'(̠ rvNJmJt˼ ?s0~K041v:ncvW~lqa x-#oNw+b>G-PJ3?V>#LvJ˟U+PQ=@"mZ[S>&c&)p7,.'BddKD&jUg&z?G'j{eba4Bi:6˾2驕B"64‚T e[DÌ\s 2{H ݴRyhG`pu&~7Hy m+U=dGy%yZYwz0Ίzr4E׭܁WL})RWѿ חdbZFRӢ_׵&@[wKb;P=뚕< WH̟n>X6y.ѱT¾d8vTuڵl DG;b3C_#KB(NDkh_X>>lr'F%Q$.U4P%2Tqe51ՌMβ `HآФ]%MF E="Tq6ᖺ(m}cm_9Y<WԎvݘ?/:KrK X/ƒoE]EUMi;oW6H0ny]bZml N9PbTy 8 RkEFix 4!oR="Ų6Dkc7,5wҊf$jV ,s=cU5]ȢvLHYdˡ%efn=NJԥrj]'2_ăf/*E+* 9Qa&ɿj%[n39E Oѿ/ኲRr.oR/ׅ z}JezmvŬO($UgYH@Luͳ%X E.D:L{,:'`3v${I޶D1N{AYхxa:'pJ\싎LrVoR2r6Icn_,5y}l kĿY@n ͙V-- Å_'fI6Dgi5맡41̢w }88`Wڐicxՙk\q눐xPJ87Ł5'3 ĚNhd_,<ś6*Ipkvi ѢeC2'% ˛9]]lŭFl, wnvyjF$MY8d7[~~s cc"nMTBrV8L2=P`rնj 1~]iLP&8z[2jV˧TC8QcB5<+5-!%Q|ڢ"}6VZ4zsd }65rL^5R !%k`eDE>Bi]ַZMX@飇j!0PxXR;ˏ* ٜ)4A~?5T0zl?۹+%k*(%KVG<`)<{~U˽ FᛕG^G@3A?>"f4]OGӵ08-@^NuQ[n9[f ZBr~dP*3:XTZǎz{ŬA8PNIcbk+8(n ǰWDy/PPH1^@-,: J#},ȄV!T`0)ג'*( #@_m yNIG>C蟫RNCIf8r@55V( hW5Qh MJ`78\B'Fڈ-4Oc ΅dviz Ä/sXY~o݀&0Ea?8(rrO~ˆl1-s7ė;5P#8G:D)͒CZx( (aWt{ʋ"Q Hb"M ؙDݼd9VvpSs<7 aKܹ^؝0^hk9ŕ 0˧rcSkS5ũ3jx]os] /m"!1pO%vXʣ7p9DgΠky_8S] hW #hhR*'xk I&fv$y:ID ;g}o[zaG:eȯ-U\PU#\EI@:rQ'Bl)9-䁍u`%1-2-4שcuoF`]hxpd9+3A匠)K޸n;bnvZ Xxm'&v_%u%Ad4<4_dGn'J.6;㸗kgLK_Z*:sf~"~ '◃8H:i¼_ !'=i CPa{8*} 4`\mfjFupCon>0M>6?og} a:%fgl(_aB\S=/BdK$)/P^^ߋ3p`[_2VN27IHPҰR`/~ҋ4WL;|.b/8NSfG{ 7^ PWV ?{"%2 :[4r˃ڈBŏb8'`/z5,0KT|$h06 ^j}FMj:o >Azf@ <^r2?|Q rB^mTzr4mLKF0ۙDt=Ld:D66X`)M! =M^*eC.}B(ƒ*VaZ\f/4{l\kx#FqgS JK3koo0Np ;u\n3~AAVtew{|2ш%/D۫dSfv(d?l)1 Z2A"8[~[ 4^L[=Cu74t0|.!$`+U YA+I_6צ&) '`"frtTϹp^ʠ~n Cn(ܠ˸m,0Xܠ uX~$'2 3aڰwA&B9a.UŭI#pfje*C/R.I2>@f=CmiRؿD/XAg;!KT4ݱ Py4a5);?=eb18i8VH؆$G/cgB Gہ ĻZ5NF3-K$O?4 -\,S^-w1ަg~SME{(ppǥsQ<~\Jnʞ7:xXtӪQMƞ}cLƁ08ܓdvdZe5!:il߾ ż+1DtőIuDH<d}>BlY4O}~oxpA_380|;Lae5ǚHK>tp|srѪSB]Œ>*ڸ8ITJv+W(f_lB?Gu. t'\CR鄫? A^ae~F=j*^dwd{qF8}UXtCE|7nZJ^=8KKϩ l`s,gDy$av<"MI {Dr 52d[޻!ЫDžg{JQix0C5Qe[cFNC'W]Dkȗv~@!_LƚR BŰfxtz>Au 0aSi>Ԝ}Ȕ$rӑ]dE[Vnݪ@/@$Q c Y9 n ^]})XgmB.ilqqk챮P%+=*3їZ,v Ea˰PwV #:> -nO* eW9s_{?CtZ̄ǧҝW0^,o )Dkۉ%a|'oȑg@$^~y H P KoZ6 tYab.`kڎ3:`tv`iNۢ ɘA0tsSoVhb%h^ʳj1 <%`% '(_>1tj_}gZuHV!Q>y7} <un[ʯ[w`gWy0 v<6Wy~qů> J2 >b$Jw0K?t F$E˥^qED܁~g3 ^q` iUҶT'* #xRvMW MC|imEs,) t'JFˉB aUlG3".qEܐ[G`3vq2wȴH+6W'fKQ[=PzΰxУ_t;uqE9{7S[w᳝ 8ףu{X2jDv8;YSR]17q)[,yI>QhCry3u& +j3/Y#,i,4Bq/tl= rW|;3I6KPh'E FO@w0R#*Bb|+4Cտ8rMǫ(-쀷$kfSuQ-+bPt-^I7D0 U=:'GT.^@P+F!<މ? !oiǛq}g鉕0&ymJ k]HͼZU I;%IDxuHʠ @>{M̡vlY)|Ac@^ǟ}Ɗ5 e5޺KB;]wb^Jߖ c)xX#fX$u>U}g3B|smRujzex#6Ǯ %rStVVz ~4tGU%v|cp=^fӺCIz&_!hPHmb^.ؔӨ3_n~%60j5P`x^1'1㑺Mp[?FL['T4firgDY5{/ߥc>#Xۍ#wzfgԮ*1<'(̷8,P1/5}{vvސ ̞4F.2o9p*pr7븀Ӡí/P;4M `q<5\ss|YcpOPiͷB[ڃ#LUx-} 7ʸ0J∰Ž5 M[Ye sh^@h%Ř v@+/!Us4Rj_2 u`SEW%0[jg#r*WH/-f)¹O=PrO4a3GG8ۦk0,qÝ~x?Ǹp'P~40V Tt⋂,Ds/ঢ়țh׽LYZIJu/q$m{Cn]>GXNj쏃etVE3"]Ka1{LBB~켤hڢ2IF!]H́-%Dv6GMu4laq,:f(—ӜT A@z|4vzTU'7 WŋY!skEWTdd!+xNД0MS$'KU%v8%ePns`=;DXCNn\~tRA]̹}J\Cv;[4u_l)zgNDAw,=zphg 2}qD-S.>Er,,r d̙?nmz|襄3bvWH)U"(k[hz"jȁ״b-&d9#GcoՂYF' ]le\طF.U4m~TNhO絜U%xF RqBnsg^j*>VC!R(djS-:ԱRy)diУDdȏ$` {tqy} Gzڄ[Oq"t~]e|Ľr˥{J 6%l &j*x揄?h|~p,E5%㚌iLNxӫ5^o3BCl-@ #\iF&m!eGt- xdsM֋[:vC_r,(evK"466vk7{Fr|וŚ6҂Q0bo]9˦W8L)1.E}>%++E3E_]ĸq#A@hv"qD=Pmrl+m@]_@/|oN biEPOC+""'/(@ߺz׻/?k,k%'(WlfA@HV2 T,7TZ }AZU{PTi t<ӹQtUagVڡd0@VAd4$)mkDs?<*P{xXZvXo.du &ױCP{+gDa<̯wGFFx蚈(6ne8e5ȅg>BU51Ҿ#6\#b.E`6ᴆdm8/G  @~ WEk +@c*Nw*hgM)20|3o0'uI"U BTyPހo+M\6a3e^b%fw^z1D]J|Tw_pBSq:!)igFU8$=U%qgT#9G dwe;Jv a>p|\6 b}cm6sCP̵~; ȍ Nqu07<Ktvj^L#,6MN4 ^Vję}ÃS6_j=Wc[5z hG K`q+LƄix\Ȫ8d{"[7ˡ!ϙ01B.%Քl9B>nkLKs`]>ecjxquNVRIO}|)[r +/Ì0`.h+ej^=f+ *9r^Xΰ%Fa_ev3GxeڐLlW5 즥jVV:0ޫV,JiNlc0-6J&lC`Z䋠yjPeւ:LL\w]A@Л<~fZ}*9[dOQEBk6zRteF/az~>Zw yQtS[QH"qzg2)n&eҥvѥ`ƱYF݆M ܏ܭ,g<ܪ,w՝Ebb̧MeOX#ݩCQr}0N%XF7ne#>+ Q(]2=b݇UQ'}< @mݘ-pGГ/mgUk.vE;O@m+xw䫔JM릐jlT0yT>uЬ5{?Ӹ`8nuXp5:(ILd`s`߄?dkWw1bVxE*ĮK5`Fm bmmwSw~-O_47y%tS7"Xm# $t!n` 6=[ڥ~ǎz4 H . e`tq'-&KgM ER:d[⤹zlZa#l;a16źncXJZ#@WՓL_TњԫzVcGcK!\gHd,gڛʴ%w`c9.j\+T,c*|妿;z+; .f8pT>_nanKe#9KzP{̻܀gNm.e"-8f:2R*5!LMz!H$Lz7y7O\l5;N;' buUz LQץq(TBHj~d*[YRr-^E]AŻ<8oȦ!:FI~cDnİ;0yH9rd`@MRj_KN`AltP -*Ŧn%h}`lLW-d@mZ@\ ,:xBȿigס9S op 1J35;D 3D8 C>+llV( [oe#i' }hX^ 2axU6'犩dwdGxt++)u<lIqƇW/p3TkJ1.ˏHh՛7 x˲$|j&kCi%67!9Of.i\JɩGѼxǟkb^UK?&%`f%Y U%Jm~w3ӣéHӆGB>gܙci{[q u X `&~Z$誡9s)P@Qǯm .b~.=߱o YEvJƆ|8bƒ^M9b:zNOW7:yIV6B4ݿE} 8lxpB!/7Ph -,`Co+ךSq~ Uʖ~W8.⤷̪aw`v2ZTk jc^8PJgrH`3ueŇza`yC`I}oI>RAߪ! Ⱥ("B齆Vuuac.օ˶К vŞh|,7f XdEԞ#RS-kdJ~@Z@۾`ߢ!cIPGs N~y"_WjLRa !Lk8lcސSt]En9+FfpjZ֭ jÏW0I KEuKUqr^Nk".,w',"I粽qIn| ~H+Wt1\w1q_fywsyb@3N f@XnuvJ0c i(ݢu|9H@S/-­^O Lc ơÑ -Rx o;26ݴ^lN26zw5)*GǨFλvFOgo  1ΫE6745u/4̆sEN YvS,]6&y9-0JNvQqT\GLj]Suq8=#_Y{WS7hoGwa1wlB#ο4q1k(ɒ=uHe¯+h_Z$MF YwړqiBK@KSgwD_ߺ !z|ZFSHG\5Y[t Ko~Dfgz!H?BxNO4_i[E'b E_,|\- [ʻ)BYh$FbZ-ǯMx_A6MrpbHV1{lMi5yN|v5f&29ZASI=/\5J Q[¤|c%xGjeBES^e.aVM xZ)K6Uf,wF|<"Zb }-BfcoRߍz5!a{ ΢=f[$6d:<u續]4KK{Vkظo4HCΔrtY\ d%eK=Fwm*wuJ]-i(&U&&^elX ň_c"fR5rcɼ4Lnta{3* =)C+k[4m(8IIMTy2Ԋ\^|{oR7n%O*VW&i@Zܿ)=t:W+]| Iں80>i殺|1|O+Ut9׾"d"(0ߥq4'gcCNm1 /d㔿ts顴8?Oooa=NQ 9Ts 2E?/7(5D5թ{)~ZNTt q)lE~AZǦHNEC٠Tqk@S#o> x_.[ 3"sVq3."v/1G0Chx[|ǫ<n;I>))wJ:Oc_:XCvxoffc -}r߃ {ãe2F:Y&`Ki3=Jzd܅eHAP;a_N %y;At 9|oPVr%$'fBd1VϘlvP@ZBtb{0x{$uQCX 9[q<Ar{pppN+ 2vMT_VR ]O /8[f'-Kjwcq{xq]z7?(fxڔ{u&2HT0 dZSp#H!g\=~y-+WlR IbeٴsƁ"?IS#2t -INp9.0. CJZTO+kZ73ecm\BSrZ cZ_](Lٗh2PSJ2?ʡX%MMB6SY/`k$ ۻJ",h#j^Otu:y,J87V@vNvk;M7vдjxn\%yAgtf 3>LH]QjW+t[7̂9nUŴ [3{d$*/UPÏ!, \- +4IOg_DXO3s$:{=.&Qc8m[%07, R?SRgܐ@dUҔbaN|ݟ&N:hC D2L:CV;߮Fm(,Jj7 ;&/3CN&}24ANtDst~':B!I~smI(\;.F0f"g27d%"5I 7|y& Ic9FE!Ot R6Vf>&b}]gH:9vj#8?8L3[=([$Xs2{j:O#w.#ie @f /ְ1$R *{7TSaL4`diVB}IP-h7f$uxLߦ6kc= Ȟ=6 PB]qI:^?g?+IF ;%]5SLT|jT ì`0Tx˾[3Et3YzSVLbz(ZhL1a0kT,ǚQ>jr6>|쳛|X;^ĺc rX'snu:|ݭRYh̽š-I؞ ⶾEMkqoiݚ~\C {0do05 !T{V,+> ޖGq^X̋L|_ 1RgR5)A;Bk&װjGI/ګ\%B+6uP_U0l''vRw,(n|Y4mA2ق7j<ĆTQ9 mqwS>pH)`([/ˇ *FTK7k6J.(J@3UOeY%> ?CqJx_"$I6 $h4au:.mTL^J0*E hzr!1L "C[HtX|DN7d{\V^e~dDKY@ O`r[^5Y 8L[!"\2/igiV2q[KuB;iX6ҸJ=p~/2+_7A]  fwvMvUlcn\fG3qu=`_?Y\QuJ-Xnk$E6vrctf5]5^fZ7byP)1=gn֒> ܺsZ1\f(4rQu@Bd9nx`c)U^κ9Cn!ub_?Sod _ũD:wkDɦOwYx_4@=L 1ٝ\ZnH,~~-Vu3z];?+PX&↵ds(b5^fo8D{ʞ%Ή~̆G5?B{xA,ȔiL}$ Ж:,ρ#LGب (I\+GlFO=೴sn]O;n5w?R=_d8Ҭ޺lčgאǤ{TP>Zb:m?>\$d2.qd`2W?Q֩5DkX2mH{?q,Et{ys<'S9f uoɠºBwaO?N;/rI±DgWkYmk$~&!|ЊU^'P?)U. {ów2{Qn@kϭkqsM#SQFȣ3@TSՉ m  c\0XچZT*ھh?Eydw4o'8PΤN-{HnٞMfAGK %C9sdp^ ك Ʀ[ *L9z4J¾ 1%3aכ,a(Ʀ٬me@D=փOl=4V8cdKF!9.bު$dw%˦e92G-Wrz6`Fܕ8iPvW[ex[=d,;PkC+gvMj*V91^f. ;n *5 3;/(PQc;EIOrUt뙽⥹<RX@siX1fbxP[G1u_-#KVEYϭ]xY[(B˥hؿ3Z2xԈz6_aNU6, HuH`t HPc+t^d'Æ : KCy~ŸM@Ĉ\N[3h' r 21gV8bDMes{p69uu6q0Oa:(j1yg#_P)ʬp}n.E0/\ic 1h#d BS]̽6S4Kt,ugNDo/&sB"":5i^zӞVxxD2l?o7iyLo׮B[D!*`R¸tc$[[əЏnl'AH1TA2'Pt&$*ݙlfE"iiͳ܄oҘ2*6*]Cp,}:+Mͪ/en~vB*>H0 $~ (xv_ڲ!%菧^&[Lw5{nf3TZJiwRxP02k>eɏj6003dA\Hu<3}2 ~˕̒фWlD+mЈZ0^ }g\naF)u TBYOcXp\36h)ʼn}z^V,W )e\q@a2EdS?#}mXC[TMWXZs+quޘ׫ .fGJ?S֨xaZCL B-_5ֲ)[2 ւO8Kٰx[(* ;i0#N*-XB 2qBhϥjV\Tqޓj׬%4Ѱε  ʦ6]-n8/fsi(nuĔ)&1d-f,yM/[LR?\ˀ7: jTz:*&-I)0:N!pɧζ/.[*0E ZqBLӔaSj(͝_ΌY(K${e}P!62w^wS6QhTI()S_*D-UΎ<*LKU2T ۔7}r9mAl5l>#?8n{ |o|/!H 8R"+Y0CL MCRu"b;e*< +ͿnCjI ~]5iA) ,FK B鞳ZQS"vMnR/ uEN.j!{;NMSOg(>U䛉 gA}jCv*jfYكB8򮤈_vRzHH 61%7Oh ke͝Ex0nBG?M2blA6tV#a@g~k [C$ i/;"4^ﲔXԦqzN0=mleǁ̛VoB!|ѯgIWMs(ZRI;H \ rNA;B4 SL^AXեJWT?LTVM 2}6w:D2yjPtȿh8.EI NzʫSZt1|E nVIQ]Y }V̨0H㩲4BafLbwC*m4Bx!4Qa5(ۙ+kQ+[%J313d=ITޔ K)AA-x<%>g{wxUOwR`Ed" dܨЧE $W{ Cj/;pSt A(IU"*pCܾr*y OG7†)d\س5V2od T@}ʖR)ծUP@N,VÆ(Cڷ^3e_s"gx>u.s ̲'u~4@fsg.Qg^-?Yv(1bkoW"`Ɂ2á {ACQ7 o֤zRQUՐ ķ/~R*k`1."penzzɔ wn͠E࢚e^7LzygP"Z;X}zOf' iL 2vZGlKKmD|\_3?zUl\4fz6-R4O3D`R<0E+IC?*YW<{'w$o׶-5@/`-qMzn{ m0پ6kB9Yx`\X]8=4 `PFSQHQ]JLx g~ոca87xHBʩ 8)<0u'&-- %{Csez5(Zu7a]J`&Mc!E1LH*3(FF5IX̼Tt@-"o%.ӊ{4 t:=%~k|٦33=]4)a%o.3F2g$;"'~fuS ͽFS.g9H@PO T}c cwѥz\ $a]rԜ@!Br^nҏoу~:~JHN3N9HXCp:gj1h|8/KgL ʗSL>\l H9lХ ]ykOxa{yĉ@oVexȣHS"9"gPs%o %y(Ŧ4Ya6/ zEOֻI'Ne/ :S6ܸD7-?å9]Li&uŁd:1=3c&xmN:}F||RnYX•˻O:@@qE3ף =H5tPc.CfgER_Yvt*m݅E}~ ǬAPA fBb0qJ:[r7K-]Xӡ2gVv:F{{"VʿU8O`?ya:JQ9j]-u+tW}Q!hBݫP'rf|SM NOH«D[x&xF u5Sb4T1j/1ؒ6:F|F?~) X?/)fYTA+a&t,hb66or9.dދjaIq^,\!66Ѭ`N;%4ߴ1vW5 4T7?\SV\]M4(v-Vg~̟f{pnr3cjUOEpt7 l` Ƣh:n 5>59wA1%0zO>~)z^`8 d7bYߨ `C Ж̂xŦlxvK$ݫLln#(CI T L4\:a/f*",ȴP䞵5e}ENKNۀ)Eqh1-_FM9>HK}%ZuA{M3cߣ#${M[_VY(']6beQ┘,`UoKBD~G 7oq)igM } 3+j8ϲ] ۍFFN[)GG%)hA>bu̍`CaG&arfBZSlހ>qͧ0 邐u}̷gLBs klSj^eGDRDG]Icw⻴dD*(T@Ҧo0R9lM:\IavuG)z!m2r4u 1vdQq/֨}v{xrm!&T i@;66fY}:eZ'ҔTaDʕ[^!w0>FC\o`fM*T + "~E"#@ȘN`HmQ@''!-C\n:v}9ۙѮ+cpQ;'2cC \V )L' A+R$C@2oU Xzz]0oXw3cfr\QT )zZ;GAl%Wof&p9jvf zE,~B>Qg%~X1Eu&qkf5~k?5eajL߁< e&9PV%? gإ[QaD*h4q䠯UlB% qltsU(.*Aif{g_*:4W0lP&37 _^EY4xz*d1@2hAX:+%ߑF Z.cc @hXKo1b_GVj,3y.5'SoI1uM9 Itqj6MyqtB+TT y m\ॎN@Q){WKze/?iN :Pţ5i^p[[ OK7,POV^ƭFq]\|&1-Myd U:HluB.dMPeA`h Lsr:(وPY"d"/s5wϙKgJ>^||i|FU'-l)^ƀC'LbtYI;x8q"^dfj$kePߞ.ٍ<*G)Vz Ad1/~EܮN97m"[^5l7)sgKƠIcb!`PBQKm>8껶BY=ٲ׋~MIW믣?䩍V[M(7Lr* gʂKaHA~tT?|1 -I} $r8!M_*!vw| 1\X#1bDC  qsYޓ%fNbaҼI8#B_:5Xlq y$~=}F?w0ת񴗡\R\@Ѵdz˗Ic}sBx" >hqQ Ǝ]_- C?dxw ,ħCCUtk׶/H8Q͋[z(?OE#f||AyM[tȇ,J0, &~oetH.jڊC?b*I=ܶq$ked:-Cy꣆lEjNRExU&7q N}:Nu2g49Ck,K(US'sCiRBv|߶Ԋ~Sˉ*v ?Ц7#],-ш~k 4*aŨ)w&vEc7щrʆ cz/Vۃ\JExB<HspJFYCW_о7ӎ6t { ᶥ6@X9d/}odžK.!2j-.M9^ ;DPñݰ(O+ 0c)m]4b{n. 0':JX5TsXDBc1b3W{A|at(lYfHjvX9)ir?LB333ԑ]HVoś ZDduUNs i'jEy1 L\V$q?p#w[d!V!kWFymƇΡUdqmaCK̋ӻ!s?c|<:PD{/ ;YA4M> Q)IN鴰٩8#Դ+xF}a[}%fkDڃO`(}W'RA2S@5 mi&cHH2+ %_BK+ DFay VoHp#/z|46jȴj׋ٍJ4*7J6\2 +iI1*K +!VtZX ERGco "vNԩhCBKӘ&HN=*72B;nEZnXpHT֚:aEe;8ϊuߴdڱ"1Y\= ZO5&JSJT!We`N 98|E5;`NYp }ߎ>12^EO{4anEDh $ge9(^t sw֙"R $!% ;; H]= 64R~ YS讅V8xmbէo#*&& I+[rO~Wj*Py2┅~cqoȮFP|s_GKy"+2$UGuΙَ:0=zMJ[{$SSd `@3}K/Н 9`GFt5 rIkląt{5ƞjAu~G~ղrCɍ+$URfhgЌ q<Sqqf( Xrf^xVr]w $QX$xAwj*`lT Ac8:Lxy8K[-BJ)e*x<8}l #̑?'Jg*Ku9`lr{ p2´~}$J#na+[fAxq䅍lڑtVټө{%"$vy!bW~`kz ^ʐg'cCr*r 3uPџ WR<0Hr&h4Hn[0EW]wpL:&sgY<3SHx$%HHL5ړZȖB`>+Gt}nVxKSP[Q>%Cja:u4 exٿftT#T9P:l[hMpmƵRɬ`vE)ǘWs¾:p 9ts$ڵ(2bhk88ծ;,ɠ }L{N+lIg0n] Nq AFQʳr T8~);0AP3<_= VyXWWLukܒѶ3)bc.PzA抶2\d+'54(W,x8cr(60<ae^=K\FAJ'<ZkG &lhF}< ,փJ&ى3q rrC ,]/*hԽzFq,[66jD=)ȭlyAE=!_ڧءn8鳠*_<}gL2zfpAU2LČXL6<(V0ti/Ta) ¨B*I-\DT>b77a_A%(V-&\t{h|Ղ-WZܫ&!/9ɸ@90"1`c(EZM60?DuRfx-l3{[x g._{_Š/7K~>#j3s2"&?9!Ŋ3]ך[֍_U:B\+{@T3ε o-ͥ\kV;;p35N7tiTMͫh;[{i =F">e?RYbAU:Nh2AT aR4z4[|W B Vиu2_VhL[2ȇSpy] +>d k];Jmo[RrEAܺwxϲ(Wf{lWXXL ZNx뱨nVřA2V2 0[}@sL~P@tNNF} 04F XLt[2-CxtjPv+>6Q4$p;C]gٱ⬳1ҶxLYhhP~JzdΉNLL6K HӌiB}S Nr VA1z_jM w(UIR~1|(56o15Zݖ>Vdz3ڤ^N[*YgR?-EؼsCeC:!7 }2U0sp)͒hѐ432g{̢ĉ#`2Oi\j>XXVYxSLy~r@ 1x!'Vr߂K w4ElC×OsPM4EVJ97t4o="URwԫ'&£]il9m)nj_== l5im`Ʋy:! p :\Nx&U=xWF1 8:vBϧy? z1Q*@͏|>"2 p|mH.ir!U,ĒOb݂6^\V9 ܀cԙ[PmH8 %Sˁl|%h%6=MʍR4<{6¨ zib sn.zogdK8fM+EZA|`cfTh`ywPQ {kUXfabc(H[9s-[1srLBh :3m}ad꒝=G%@07}I=6y08b 54^.ϖHk3d pl2,Lp(epFʦ%4WXB*? Kwϋ9`kuOSB'i!|o^A Iҽyd*+Yf\0VqғonpV,# Wr%N|#݅z$k8Ns<אGdܯz[}$|՟B!%rȈW$BkM/<þ3؟6"I[*1J^ m1w{iA 9wN.],EEr{y{bzq\>HkK_$u aޮЀI31vdp XXcyӣ_I(o7*lylJ~e}[^0n=y=#cQd#Ĉ69Orj$s4З>C\L@?|owfO~$zDGm6Sf'[|чTRQɱ;_3y[ (<*<颽,ΗϚ婌}C lin옝@}%'.s8]Q.B} `~`:l0" asʡW>.S 3l"ԜpGߗ_/4RZn9"+{ಕ0ܬu'r1) .xRB2 %GrqY"ș:{UBf)hhh^; {4W-!><쬧4Vȗ8iux)&zW)(65䰬9ly}[zkcU(Ѿօ-,O162ژ>MeYb-] X̓2JXnO~Iyu+dK, 'kc)Њ>k~Q |ng>op)U?{mv# 1,vS0\9~F| ">6Zn*&)S &*V}?R\s.R2>-Gp񝜸6l#tDf+GV]4bO15loG~54N,5 E ^fx]m1)y-lO\DxdR4װ]EI1CƒTlVR *\G|=g" fԸظCƟ:A~!|oոq'ء|hpY덭VF:ugXooXꋽ[p3˥1)zr1Y{Hf#K";#y?S_/ CؠY,I?C0N߻^ϧ P .3j@C G|aMoT& ]Oџ-VCoOi~ossq,iMO+G)XCqvdZo.qbf\H l4'<|Z{/Eb'I,D zv,sM%[vhBMwםэ)e#Lrmy}B.@ė .|P'wTCq7|Ll$0V\)[l}Y f y4C ɯT „Y Ҕ92ח0 4cs B!/RaLL~A_袈QEzDn ;,Q&ϩe~j}xDV-~UeQ\$-4,rkYYa3g>b} ͻZV>L6%6Y&$Yhw?Y\W[T2$/R:+HRFIeiFWt$q(4l5Dz(W m: h[(b-W{M+M38iM ('eB"ƙY%.wHϢ2E6$_:w1yG{pk+O tԸ]ɉ;^˥T${tv-$\n%' Knˤl^#^YtJqsFAkKۧY?'b3'ͨ ^/q:GSu\[}k\ Y;ڭmu@_mrr8G(=/@kqGWqubr)}Ы˝%Ë+lF,y6 d5?%u4ϺyAs SԻ(, NMs~ '?:Ifd?J?WjlTkwCzG6xYrWt~<,#Z49E͢J^{&)Cw~Lќ"!ܓo~h1Izq2jm#`)K5a^:.ƣ_2 ?z1 °*W cECpX<ۦkjl yGڇb N`P酙![rs/dFsi$\"m-X6hy;Uк݊Å/} 3Ɨա֞<".`GO:7AGKEݏZ7$#ֳ3J]硬L 3hjs܎ꭱnbg?B U;57'S &OHKbWn%<(gH nBxv6(C6`un:Uvf%j&*ڏq ߊ;y ABP,JYI&T DPW.K&JAcLwߣ"csmm^zXd&󁉮W+xJOBE`ѵlB1狙"-c8βǘ\U&:JJpivM5Sy`ѽ4T8$6-{BQb[M1<\u,7g2\ ?SzN5mn 'gq{M Ni$[{x0 i3(FJ/wF,bn:ޭ{c 69[eܭ!`;Z:>鼐s̄ f ED@v8OnD X/MZou7$ 9w{l%.w=F}7ةTR&/V!u\EwY)GN<l=d \>əfsהޯ8",\2l4aݸp2(ORo\#]n{/Q@Ŧj^DS3͐C̣R K+Y˔OG3E'dfӷf:R ˜4} eN&=pXhR߹·'9Az<~#ֻW/tʳ?Ɉ* 7E#]U8ixT[>KxT7=.7T'I*$hZ"׍tﮖӯe@6~ _l8R힀b+YD3 \?>[ͱ>d[2ܒxf'.Ah ;.E}A9MٿhY*W/_|͢iƠǤ$v19رUPGgP]r9Gf-]GN:E ,'? =E+ ΰv͚5p HxSx<}j5al'ū:~{\0`ϓM1tvQ 7EuIE3ZC<=q!{{Z1&&8̔AMwV6eM[nI ܖ F"]ak#Œn#[jQzoO'^߸mw~Lt9X+,+!ab`En<}ۭz{~sP^ I:6I4bAA1?u=:*+_f 7{'HB8^4zMo#g36?fhJ fǑī\7s~@6)6ZR3#<l١Rɠ&~ Ct a mPR3,r^A0U{c5JKYr-q1K8l$bSFLZzZpNw?.3"hB`6!ØC'RT>5JT"-=/~/_P`cpIUk@ ܳ#}ŨUT+OpP#̠E1k.9"3l785?^ U͝Ge[nDJ)9:YcPĝ3"x:Ǯ}I_J%UF=/&Sƭk%JFk5v΃WFG?l7/7 ]h%HD+,߸8+$ Xf WL!e9}t]Fr 4"~Bl2F)tPN\?p('2ZYSvቾJ#(~˪\6{%ΒZS(_B*szwJ|FϛOѻMMA56AY}M<ɸY@{,DZ .ݖ=G8G6?0xtp.±,˙8"Lͬt(*a'37t^ ϗ-m4lYkihL;˛-wH$vqQǜ~3+7nOr#nĉ+n"lKClwwDj=V,DaZyc=֢@6y_q?t6۔1$0[{wD$ǘGOgÒ'lNQ2} %qυ_ HBgPClKF]+`ҽ\(t1&I1;蝃>%?HW9Y[azMH)Bx 5~I_qE;0SՈpF @IW=2'=g=u-7i D{W 3 U^` dQ;WȕMӗKœ6NP7#{oHeroM=7 EWPooQ(&-1 St U 5R7(&5+AO즟R9cԉl5֖:9sDr #q-)y=t'JK$qF Cjťthx:GJ#kB* `H%n_wV+@j*ƥ+37bL%bB>,5?M|5)5p[&| ~Zs|Hu݅CsQjJ^p#3Df^G&}Zp"Bc5%2@h%$Xr+o ln_EoB,16l}qhBclS£h ]"2FOF\LKy-f,ʖU#;cL"[3 c%aԉ:Ls-,&8 R0d@ՆVu8OW4liW)ҷ`{hYTsav׈tMgf᪌cէ|(F,osgj\s{4t<]~!8ri3S0smv tظe5wKw F(:OڄQ$EK>%O7%c(3p“I1Ş%S?qTњth4muVGֱB̦L=8!{sg)wzv yZ_^fz$ٍ2r0cjsWСU%aq!:$X}ȭs.oM6By#Mf&xcC H,V2zt < U}CT3pAkLJl/=R0ay6&ɲbu4aH~y^CSU 75 ]::KZ2SQ$If 1oId p1㸍=t8,_*}|ڊ`I'p>NV]/@F1xS2C#>ǐ1dQlWkQps^>JY/6&u# |YB!LsR0!$m%t؀:n2WjdZV}9bǘ)Wn@IЀ̻*Do0RՃjqoej%wԚ? Ѧ붜F汌qLu+B)6H99Yw0y8roGvx:@Uhs pqL2Goob I:b^A9ebNqX2jm8I2n (i\^y,]G|IqLC;s3Ѥ6ViZoԝ\//5{!© nRAt@YteJKMCrLD%Mm9Z2i*|9NVR= |gi{9ȹy]8VbvfLcQ9DMonQ[k ]:ϭmxrP"!7K_OŁ {T6PP+{P.Fws1d 4KIncQT k/T,F|)RVrhޘȲho^gHH--74>䗈kVyjÉqA])ﱔSzn"VOxC$end_/.:2VBxcFo>"4;]Tmv rg[9,Y5s,Ȯ :P[Mi\w˩YaY | N(+Ɏ,ga//8s&^)^n#:QVlX Q& y YZ